# changelog

author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - convert sieve scripts to UTF-8 only if sievec failed before
  - add note to the readme about limiting loggin on busy servers
  - added build time option to chose the syslog facility


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - add sendmail m4 macro, some people were looking for it
  - just one source for pam default configuration (they were all the same)
  - added /etc/pam.d/lmtp
  - added build support for RedHat Beta severn


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate patch to 0.8.1
  - removed creation of spool/config dirs, not needed anymore
  - added cyrus_sharedbackup to contrib


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - upgraded to 2.1.14
  - removed now obsolete forcedowncase patch
  - use --with-extraident to add extra version information
  - updated munge8bit patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added functionality to patch the IPv6 patch on the fly if
    autoconf > 2.13, we can now use newer autoconf again.


author: Paul Bender <pbender@qualcomm.com>
changelog:
  - fixed spec file so that autoconf 2.13 will always be used,
    since the IPv6 patch requires autoconf <= 2.13


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - update to 2.1.12
  - added logrotate entry for /var/log/auth.log
  - modified init script to use builtin daemon mode


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - removed autoconf hack, not needed anymore
  - enabled build on RedHat Beta Phoebe
  - added services entry for lmtp
  - cleanup spec file


author: Troels Arvin <troels@arvin.dk>
changelog:
  - Explicitly changed files-section to
     - use defattr for simple (root-owned 0644) files
     - explictly set root as user/group owner where
       the user/group ownership was previously indicated
       as "-"; this allows building valid packages without
       having to being root when building


author: Simon Matter <simix@datacomm.ch>
changelog:
  - remove creation of cyrus user at build time
  - added scripts from ftp://kalamazoolinux.org/pub/projects/awilliam/cyrus/


author: Simon Matter <simix@datacomm.ch>
changelog:
  - modified path in deliver-wrapper, thank you Richard L. Phipps
  - added RedHat 2.1AS support to the perlhack detection
  - added build time option to force syncronous updates on ext3


author: Simon Matter <simix@datacomm.ch>
changelog:
  - included support for different autoconf versions
  - modified the perl build and install process
  - made some .spec changes to build on RedHat 7.x and limbo


author: Simon Matter <simix@datacomm.ch>
changelog:
  - added compile time parameters to configure the package based on
    the idea from Luca Olivetti <luca@olivetti.cjb.net>
  - make deliver-wrapper a compile time option


author: Simon Matter <simix@datacomm.ch>
changelog:
  - upgraded to cyrus-imapd 2.1.3
  - removed some stuff that was cleaned up in the sources
  - added compile time options for db backends


author: Simon Matter <simix@datacomm.ch>
changelog:
  - added some %dir flags
  - removed /usr/lib/sasl/Cyrus.conf
  - added conf templates
  - build time option for usage of saslauth group


author: Simon Matter <simix@datacomm.ch>
changelog:
  - dependency of cyrus-sasl >= 1.5.24-22
  - dotstuffing patch for sendmail calls made by sieve for outgoing
    mails
  - patch for ability to force ipurge to traverse personal folders


author: Simon Matter <simix@datacomm.ch>
changelog:
  - changed default auth to pam
  - remove several %dir from %files sections
  - change from /usr/lib/cyrus -> /usr/libexec/cyrus
  - rename source files to something like cyrus...
  - added rehash tool
  - changed to hashed spool


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added more fixes to the autocreate patch
  - don't use /usr/lib64 for /usr/lib/cyrus-imapd, it's a mess on x86_64
  - don't use /usr/lib64 for symlinks
  - remove /usr/lib64 pachtes
  - change pam configs to work on x86_64
  - changed default build option for IDLED to on
  - changed rpm_set_permissions to honor partitions in /etc/imapd.conf


author: Dave Anderson <anderson@redhat.com> - 5.1.8-2.el5
changelog:
  - Fix to handle xen dom0 dumpfiles created with "makedumpfile -d1" on very
    large systems, where the ELF vmcore may be mistakenly determined to be
    an old-style netdump vmcore.  
    Resolves: rhbz#876046


author: Dave Anderson <anderson@redhat.com> - 5.1.8-1.el5
changelog:
  - Rebase to upstream version 5.1.8.
    Resolves: rhbz#715072

  - Fix for the x86_64 "bt" command if the shutdown NMI is issued to a
    32-bit task that has executed a "sysenter" instruction and the RSP
    still contains the zero value loaded from the MSR_IA32_SYSENTER_ESP
    register.  The backtrace issued a warning message indicating 
    "WARNING: possibly bogus exception frame", and was unable to make a 
    transition from the NMI exception stack back to the process stack. 
    Resolves: rhbz#676408

  - Fix for the x86 "bt" command for several backtraces of non-crashing
    active tasks that fail with "bt: cannot resolve stack trace" errors
    due to the failure to properly transition from the shutdown NMI stack 
    back to the process stack.
    Resolves: rhbz#713050

  - Fix to more correctly determine the KVM I/O hole size and location.
    The I/O hole size to this point in time is either 1GB or 512MB, but
    its setting is hardwired into the Qemu code that was used to create 
    the dumpfile.  The dumpfile is a "savevm" file that is designed to be
    used for guest migration, and since inter-version save/load is not 
    supported, the I/O hole information does not have to be encoded into the
    dumpfile.  Without the patch, the I/O hole for dumpfiles created by 
    older Qemu version was not being set to 1GB, so if the KVM guest was 
    configured with more than 3GB of memory, the crash session would 
    typically display numerous "read error" messages during session 
    initialization.
    Resolves: rhbz#715070

  - Fix for KVM dumpfiles from guests that were provisioned with more
    than 3.5GB of RAM.  KVM virtual systems contain an I/O hole in the
    physical memory region from 0xe0000000 to 0x100000000 (3.5GB to 4GB).
    If a guest is provisioned with more than 3.5GB of RAM, then the
    memory above 3.5GB is "pushed up" to start at 0x100000000 (4GB).
    But the "ram" device headers in the KVM dumpfiles do not reflect
    that, and so without the patch, numerous error messages would be
    displayed during invocation, and in all probability, the session
    would fail.
    Resolves: rhbz#716327


author: Dave Anderson <anderson@redhat.com> - 4.1.2-8.el5
changelog:
  - Fix for potential segmentation violation in glibc malloc/free when 
    running "kmem -s" on a large, active, live system.
    Resolves: rhbz#659593


author: Dave Anderson <anderson@redhat.com> - 4.1.2-7.el5
changelog:
  - Fix for the x86 "bt" command for potential backtrace error of a
    NMI-interrupted idle task.
    Resolves: rhbz#653288
  - Fix for the x86 "bt" command to fix Xen hypervisor backtrace errors 
    generated when a NMI-interrupted VCPU is running within the hypercall
    entry point, and when a NMI-interrupted VCPU is running within an
    interrupt handler entry point.
    Resolves: rhbz#653823


author: Dave Anderson <anderson@redhat.com> - 4.1.2-6.el5
changelog:
  - Support for "__rhel5" marker device in KVM dumpfile header.
    Resolves: rhbz#603027
  - Fix for the x86 "bt" command to generically recognize the end of trace
    condition for user-space tasks without having to hardwire any more 
    kernel entry point function names.
    Resolves: rhbz#608714
  - Fix for the x86_64 "bt" command if the kdump-generated NMI interrupts
    a multi-threaded task that has just entered kernel space but has not
    changed the RSP stack pointer register from its user-space per-thread
    stack location to the kernel stack.
    Resolves: rhbz#608171


author: Dave Anderson <anderson@redhat.com> - 4.1.2-5.el5
changelog:
  - Fix for backtrace of x86 NMI-interrupted task with a user exception frame
    from a syscall exception that had not called the requested system call 
    function.
    Fix for backtrace when a newly-forked x86 task's resumption EIP address 
    value is set to the "ret_from_fork" entry point by copy_thread().
    Resolves: rhbz#572605
  - Fix for segmentation violation with the "mach -m" command option on x86 
    or x86_64 systems whose BIOS-provided e820 map contains EFI-related memory
    type value that has not been mapped to an E820 type.
    Resolves: rhbz#569164
  - Fix for the "kmem -s list" command option to prevent it from attempting
    to gather a slab cache name string from the "cache_chain" list_head.
    Resolves: rhbz#580589
  - Change the ppc64 cpu count displayed by the initial system banner
    and by the "sys" and "mach" commands to be the number of cpus online.
    Resolves: rhbz#580599
  - Fix for backtrace of an x86_64 NMI-interrupted task which had not 
    swapped its RSP from the user-space stack to the kernel stack.
    Resolves: rhbz#593066


author: Dave Anderson <anderson@redhat.com> - 4.1.2-4.el5
changelog:
  - Fix for very large xendump core files whose ELF sections are located
    beyond a file offset of 4GB.
  - Resolves: rhbz#561767


author: Dave Anderson <anderson@redhat.com> - 4.1.2-3.el5
changelog:
  - Fix for the "bt" command on an ia64 "INIT" process that interrupted
    a task that was running in user space, but was unable to modify the
    original (interrupted) task's stack.  Without the patch, the "INIT"
    task's backtrace would not display the task that was interrupted,
    and would display the error message "bt: unwind: failed to locate
    return link (ip=<user-virtual-address>)!".  With the patch, the
    interrupted task information is displayed in the same manner as if
    the original stack had been modified.
  - Resolves: rhbz#553353


author: Dave Anderson <anderson@redhat.com> - 4.1.2-2.el5
changelog:
  - Fix for a 4.0-8.11 regression that introduced a bug in determining
    the number of cpus in ppc64 kernels when the cpu_possible_[map/mask]
    has more cpus than the cpu_online_[map/mask].  In that case, the
    kernel contains per-cpu runqueue data and "swapper" tasks for the
    extra cpus.  Without the patch, on systems with a possible cpu count
    that is larger than its online cpu count:
     (1) the "sys" command will reflect the possible cpu count.
     (2) the "ps" command will show the existent-but-unused "swapper"
         tasks as active on the extra cpus.
     (3) the "set" command will allow the current context to be set to
         any of the existent-but-unused "swapper" tasks.
     (4) the "runq" command will display existent-but-unused runqueue
         data for the extra cpus.
     (5) the "bt" command on the existent-but-unused "swapper" tasks will
         indicate: "bt: cannot determine NT_PRSTATUS ELF note for active
         task: <task>" on dumpfiles, and "(active)" on live systems
  - Resolves: rhbz#550419


author: Dave Anderson <anderson@redhat.com> - 4.1.2-1.el5
changelog:
  - Re-based package to upstream version 4.1.2.
  - Resolves: rhbz#528184
  - If a kdump NMI issued to a non-crashing x86_64 cpu was received while
    running in schedule(), after having set the next task as "current" in
    the cpu's runqueue, but prior to changing the kernel stack to that of
    the next task, then a backtrace would fail to make the transition
    from the NMI exception stack back to the process stack, with the
    error message "bt: cannot transition from exception stack to current
    process stack".  This patch will report inconsistencies found between
    a task marked as the current task in a cpu's runqueue, and the task
    found in the per-cpu x8664_pda "pcurrent" field.  If it can be safely
    determined that the runqueue setting (used by default) is premature,
    then the crash utility's internal per-cpu active task will be changed
    to be the task indicated by the appropriate architecture specific value.
    Also, a new "set -a <task>" option has been added to manually set a task
    to be the "active" task on its cpu.
  - Resolves: rhbz#504952
  - Fix for a potential segmentation violation during invocation if a
    vmcore file, a System.map file, and a non-matching vmlinux file are
    used as command line arguments.  The problem is that whenever a
    System.map file is used, it is presumed that the user knows what he
    is doing, and that the vmlinux file is not the same as the kernel
    that generated the vmcore; therefore the vmlinux/vmcore matching and
    verification routines are not performed.  However, if the kernel data
    structures in the non-matching vmlinux vary widely enough from the
    kernel that generated the vmcore, all manners of bogus data may be
    read and consumed.  The reported segmentation violation occurred when
    using a vmcore created from a "stock" Red Hat kernel with a vmlinux
    file from a Red Hat "debug" kernel, where the kernel data structures
    are significantly different.  The patch adds a several new defensive
    mechanisms, and displays additional warning messages, when invalid or
    questionable data is read, and as a result the crash session will fail
    in a more reasonable manner.
  - Resolves: rhbz#508156
  - Fix for "bt" command when run against a Xen hypervisor, which showed
    a "cannot resolve stack trace" warning message if the cpu received its
    shutdown NMI while running in an interrupt handler.
  - Resolves: rhbz#510505
  - Support for dumpfile format of "virsh dump" of KVM kernels.
  - Resolves: rhbz#510519
  - Fix for initialization-time failure when running against ppc64 vmcores
    if the dump was collected when there were one or more cpus offline in
    the system at the time of the crash.
  - Resolves: rhbz#520506
  - Fix for the x86_64 "bt" command that may possibly start the backtrace
    of an active non-crashing task on its per-cpu IRQ stack instead of
    starting from the NMI exception stack, causing a faulty transition  
    back to the process stack, the dumping of a bogus exception fame and
    the message "bt: WARNING: possibly bogus exception frame".
  - Resolves: rhbz#523512


author: Dave Anderson <anderson@redhat.com> - 4.0-8.9.1.el5
changelog:
  - Fix for running "foreach bt" on a live system, where a backtrace that
    is attempted on a task that no longer exists may cause a segmentation
    violation due to the use of stale/invalid kernel stack pointer.
  - Resolves: rhbz#504796


author: Dave Anderson <anderson@redhat.com> - 4.0-8.9.el5
changelog:
  - Re-based package to upstream version 4.0-8.9.
  - Resolves: rhbz#494028
  - Fix for nonsensical usage of the "set" command when running
    against the xen hypervisor binary.  If entered alone on the
    command line, the command would cause a segmentation violation,
    because there is no concept of a "context" in the xen hypervisor.
    In addition, more reasonable error messages are displayed if
    "set", "set -c <cpu>", "set -p", or "set <address>" are
    attempted when running against a xen hypervisor.
  - Resolves: rhbz#462819
  - Fix for "irq -d" option when run on x86_64 xen kernels.  Without the
    patch it would indicate: "irq: invalid structure size: gate_struct"
    and dump a stack trace leading to x86_64_display_idt_table().  Now it
    will indicate that the -d option is not applicable.
  - Resolves: rhbz#464116
  - Fixes for the "bt" command when running against the xen hypervisor
    binary.  The "bt -o" option, and setting it to run by default with
    "bt -O", would fail with the vmlinux-specific error message "bt:
    invalid structure size: desc_struct" with a stack trace leading
    to read_idt_table(); with the patch it will display the generic
    error message "bt: -o option not supported or applicable on this
    architecture or kernel".  The "bt -e" or "bt -E" will also display
    the same error message, as opposed to the command usage message.
    Lastly, the "bt -R" option would cause a segmentation violation;
    it has been fixed to work as it was designed.
  - Resolves: rhbz#464288
  - Fix for the "bt" command when run on a xen hypervisor in which the
    backtrace leads to either "process_softirqs" or "page_fault".
    Without the patch, the backtrace indicates: "bt: cannot resolve stack
    trace", and then the recovery code terminates the command with the
    nonsensical error message: "bt: invalid structure size: task_struct".
  - Resolves: rhbz#466724
  - Fix for "bt -a" command when running against the xen hypervisor where
    the number of physical cpus outnumber the MAX_VIRT_CPUS value for the
    processor type.  Without the patch on such a system, "bt -a" would
    fail after displaying backtraces for the first 32 (MAX_VIRT_CPUS)
    pcpus with the the error message: "bt: invalid vcpu".  The patch also
    corrects the "vcpus" command output to show the vcpus associated with
    pcpus 32 through 63, and the "doms" command output to show the second
    idle domain associated with pcpus 32 through 63.
  - Resolves: rhbz#471790
  - Fix for the "bt" command when run on a xen hypervisor in which the
    backtrace leads to either "process_softirqs" or "page_fault".
    Without the patch, the backtrace indicates: "bt: cannot resolve stack
    trace", and then the recovery code terminates the command with the
    nonsensical error message: "bt: invalid structure size: task_struct".
  - Resolves: rhbz#474712
  - Fix for "mod -[sS]" command if the target module object filename
    contains both underscore and dash characters.  Without the patch
    the module load would fail with the error message: "mod: cannot
    find or load object file for <name> module".  Examples are
    the "aes_x86_64" module from the "aes-x86_64.ko" object file, and
    the "dm_region_hash" module from the "dm-region_hash.ko" object file.
  - Resolves: rhbz#480136
  - Changed the manner in which the "bt" command determines which PID 0
    swapper task was interrupted by an ia64 INIT or MCA exception.
    There is an existing ia64 INIT/MCA handler bug which incorrectly
    writes the pseudo task's command name in its comm[] name string
    such that the cpu number may not be part of the string.  If that
    happens without this patch, the "bt" command fails to make the link
    back to the interrupted task, and displays the error message:
    "bt: unwind: failed to locate return link (ip=0x0)!"
  - Resolves: rhbz#487429
  - The starting backtrace location of active, non-crashing, xen dom0
    tasks are not available in kdump dumpfiles, nor is there anything
    that can be searched for in their respective stacks.  Therefore, for
    those those tasks, the "bt" command will indicate: "bt: starting
    backtrace locations of the active (non-crashing) xen tasks cannot be
    determined: try -t or -T options".  Without the patch, the backtrace
    would either be empty, or it would show an invalid backtrace starting
    at the last location where schedule() had been called. 
  - Fix for potentially empty "bt -t" output, and for "bt -T" potentially
    dumping the text return addresses in the hard or soft IRQ stacks
    instead of the process stack.  This could occur if the targeted task
    was the last task that used the hard or soft IRQ stack (x86 only).
  - Resolves: rhbz#495586


author: Dave Anderson <anderson@redhat.com> - 4.0-7.2.4
changelog:
  Fix for a "bt" command segmentation violation by correctly 
    handling the transition from the IRQ stack back to the process 
    stack running when running against a Xen kernel.
  - Resolves: rhbz#478904


author: Dave Anderson <anderson@redhat.com> - 4.0-7.2.3
changelog:
  Fix for the incomplete resolution for the "search -k" option when 
    run on RHEL5 ia64 CONFIG_SPARSEMEM kernels.  The initial fix
    addressed the segmentation violation, but on certain physical 
    memory configurations, it would prematurely bail out when making
    the transition from the kernel mapped region to the vmalloc region.
  - Resolves: rhbz#458417


author: Dave Anderson <anderson@redhat.com> - 4.0-7.2.2
changelog:
  Fix for x86 "bt" command to correctly handle the transition from
    the hard IRQ stack back to the process stack and then display
    the interrupt exception frame.
  - Resolves: rhbz#462624


author: Dave Anderson <anderson@redhat.com> - 4.0-7.2.1
changelog:
  - Fix to prevent a potential divide-by-zero SIGFPE exception when 
    using a vmlinux that does not match the vmcore being analyzed.  
    This is a bad, but acceptable, practice, although when done, it
    usually requires adding a System.map file to the command line 
    so that the correct symbol values are used; that was not done
    in this case.  
  - Resolves: rhbz#457371  
  - Fix for the crash utility's "search -u" option, which searches 
    the current context's user virtual address space for a given value.
    It would cause a SIGSEGV when run on a xen-syms hypervisor binary, 
    and gives a somewhat misleading error message when run on vmlinux 
    binary on a kernel thread.  Both of these usages are nonsensical 
    because the xen-syms hypervisor and vmlinux kernel threads do not 
    have user address space regions.  Fix for the "search -k" option, 
    which searches the kernel virtual address space for a given value. 
    When run on a xen-syms hypervisor binary, it would display a 
    nonsensical vmlinux-based error message.  That option should not 
    be used with the xen-syms hypervisor, which requires that a starting
    virtual address be supplied.  The fix now displays error messages 
    that are applicable to the incorrect command usage.
  - Resolves: rhbz#457373
    Fix for the "search -k" option when run on RHEL5 ia64 CONFIG_SPARSEMEM
    kernels.  It would cause a segmentation violation, because it would 
    start the search at the base of the ia64 processor's identity-mapped 
    region, which is not necessarily backed by physical memory, and result
    in a SIGSEGV.  The fix sets the start of the ia64 kernel virtual address
    space search to the appropriate virtual address. 
  - Resolves: rhbz#458417
    Enhancement for invoking crash with an input-file of crash commands 
    using the -i command-line option, as in "crash -i <input-file> ...", 
    and doing so from inside a script file instead of the command line.
    It would indicates "crash: /dev/tty: No such device or address", run 
    the commands in the input-file, but then would hang.  The fix terminates
    the crash session after all of the commands in the input-file have 
    completed.
  - Resolves: rhbz#458422


author: Dave Anderson <anderson@redhat.com> - 4.0-5.0.2
changelog:
  - Fix for initialization-time segmentation violation when analyzing
    a vmcore in which the kernel has over-run its kernel stack, 
    corrupting the process thread_info structure, which is used by 
    the crash utility for determining the process cpu.
  - Resolves: rbhz#405101


author: Dave Anderson <anderson@redhat.com> - 4.0-5.0.1
changelog:
  - Fix for initialization-time failure when analyzing a vmcore of
    an i386-HVM guest that was taken when running on an x86_64 host
  - Resolves: rbhz#288691
  - Fix for initialization-time segmentation violation when analyzing
    a vmcore in which the kernel has over-run its kernel stack, 
    corrupting the process thread_info structure, which is used by 
    the crash utility for determining the process cpu.
  - Resolves: rbhz#405101
  - Fix for "mod" command when analyzing ppc64 kernels with 64K pages.
  - Resolves: rbhz#414881


author: Dave Anderson <anderson@redhat.com> - 4.0-4.6.1
changelog:
  - Fix for "bt" command segmentation violation when run against
    an x86 xen-syms hypervisor.
  - Resolves: rhbz#252198


author: Dave Anderson <anderson@redhat.com> - 4.0-4.3.1
changelog:
  - Fix for "dev -p" command for ppc64 machines with virtual devices
    and for kernels that don't have the "pci_device" symbol.
  - Resolves: rhbz#220929 
  - Fix for "crash: cannot resolve "init_task_union" errors due to
    to "__per_cpu_start" and "__per_cpu_end" symbols changing from
    type 'A' to type 'D'.
  - Resolves: rhbz#221901 
  - Fix for segmentation fault when attempting to read a xen core dump
    from a 6 GB guest.
  - Resolves: rhbz#224535 
  - Fix for crash session initialization failure indicating "crash:
    cannot read/find cr3 page" in xendumps where the cr3 register
    value in the dumpfile header is overloaded to be able to use
    page directory pages that are greater than 4GB.
  - Resolves: rhbz#223454 
  - Support for determining the physical base address in FV relocatable
    x86_64 xendump dumpfiles run as xen guests. 
  - Resolves: rhbz#233151 
    Create a new crash-devel package for extension modules, which installs
    defs.h in /usr/include/crash. 
  - Resolves: rhbz#241045 
    Reasonable backtraces for x86_64.
  - Resolves: rhbz#221355


author: Dave Anderson <anderson@redhat.com> - 4.0-3.14
changelog:
  - Fix for s390x live system analysis to recognize debuginfo vmlinux
    file that contains an ASCII char adjacent to the Linux version
    string.
  - Resolves: rhbz#216973


author: Dave Anderson <anderson@redhat.com> - 4.0-3.12
changelog:
  - Fix for ia64 kdump vmcore backtraces when crash was generated
    via INIT switch or due to an MCA exception.
  - Resolves: rhbz#216037


author: Dave Anderson <anderson@redhat.com> - 4.0-3.11
changelog:
  - Revisited fix for BZ #213929; when crash is run in a small
    terminal window, gdb does line-wrapping that breaks the fix
    for x86_64 backtraces.


author: Dave Anderson <anderson@redhat.com> - 4.0-3.10
changelog:
  - Updated crash.patch to match upstream version 4.0-3.9, bumped
    by 1 to differentiate from RHEL4-5 errata version.
  - Fixes for x86_64 "bt" command for tasks that have transitioned
    to the IRQ stack from the process stack via hardware interrupt
    or call_softirq entry point, and to the NMI stack from the 
    process stack.
  - Resolves: rhbz#213929


author: Dave Anderson <anderson@redhat.com> - 4.0-3.3
changelog:
  - Updated crash.patch to match upstream version 4.0-3.3.
  - Support for x86_64 relocatable kernels.  BZ #204557


author: Dave Anderson <anderson@redhat.com> - 4.0-3.1
changelog:
  - Updated crash.patch to match upstream version 4.0-3.1.
  - Added kdump reference to description.
  - Added s390 and s390x to ExclusiveArch list.  BZ #199125
  - Removed LKCD v1 pt_regs references for s390/s390x build.
  - Removed LKCD v2_v3 pt_regs references for for s390/s390x build.


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.4
changelog:
  - Updated crash.patch such that <asm/page.h> is not #include'd
    by s390_dump.c; IBM did not make the file s390[s] only; BZ #192719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.3
changelog:
  - Updated crash.patch such that <asm/page.h> is not #include'd
    by vas_crash.h; only ia64 build complained; BZ #191719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.2
changelog:
  - Updated crash.patch such that <asm/segment.h> is not #include'd
    by lkcd_x86_trace.c; also for BZ #191719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.1
changelog:
  - Updated crash.patch to bring it up to 4.0-2.26, which should 
    address BZ #191719 - "crash fails to build in mock"


author: Dave Anderson <anderson@redhat.com> 3.10-13
changelog:
  - Compiler error- and warning-related fixes for gcc 4 build.
  - Update to enhance x86 and x86_64 gdb disassembly output so as to
    symbolically display call targets from kernel module text without
    requiring module debuginfo data.
  - Fix hole where an ia64 vmcore could be mistakenly accepted as a
    usable dumpfile on an x86_64 machine, leading eventually to a
    non-related error message.


author: Dave Anderson <anderson@redhat.com> 3.10-9
changelog:
  - Updated source package to crash-3.10.tar.gz, containing
    IBM's final ppc64 processor support for RHEL4
  - Fixes potential "bt -a" hang on dumpfile where netdump IPI interrupted
    an x86 process while executing the instructions just after it had entered
    the kernel for a syscall, but before calling the handler.  BZ #139437
  - Update to handle backtraces in dumpfiles generated on IA64 with the
    INIT switch (functionality intro'd in RHEL3-U5 kernel).  BZ #139429
  - Fix for handling ia64 and x86_64 machines booted with maxcpus=1 on
    an SMP kernel.  BZ #139435
  - Update to handle backtraces in dumpfiles generated on x86_64 from the
    NMI exception stack (functionality intro'd in RHEL3-U5 kernel).
  - "kmem -[sS]" beefed up to more accurately verify slab cache chains
    and report errors found.
  - Fix for ia64 INIT switch-generated backtrace handling when
    init_handler_platform() is inlined into ia64_init_handler();
    properly handles both RHEL3 and RHEL4 kernel patches.
    BZ #138350
  - Update to enhance ia64 gdb disassembly output so as to
    symbolically display call targets from kernel module
    text without requiring module debuginfo data.


author: Dave Anderson <anderson@redhat.com> 3.8-3
changelog:
  - remove (harmless) error message during ia64 diskdump invocation when
    an SMP system gets booted with maxcpus=1
  - several 2.6 kernel specific updates


author: Jay Fenlason <fenlason@redhat.com> 3.5-2
changelog:
  - remove ppc from arch list, since it doesn't work with ppc64 kernels
  - remove alpha from the arch list since we don't build it any more


author: Miroslav Lichvar <mlichvar@redhat.com> 8.13.8-6.el5
changelog:
  - fix verification of SSL certificate with NUL in name (#553618, CVE-2009-4565)
  - do not accept localhost.localdomain as valid address from smtp (#449391)
  - skip colon separator when parsing service name in ServiceSwitchFile (#512871)
  - exit with non-zero error code when free space is low (#299951)
  - fix -qG description in man page (#250552)
  - fix comments in sendmail.mc to use correct certs path (#244012)
  - add MTA to provides (#494408)
  - fix %dist macro use (#440616)
  - compile with -fno-strict-aliasing
  - skip t-sem test as it doesn't allow parallel testing


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-3
changelog:
  - using new syntax for access database (#177566)
  - fixed failure message while shutting down sm-client (#119429)
    resolution: stop sm-client before sendmail
  - fixed method to specify persistent queue runners (#126760)
  - removed patch backup files from sendmail-cf tree (#152955)
  - fixed missing dnl on SMART_HOST define (#166680)
  - fixed wrong location of aliases and aliases.db file in aliases man page
    (#166744)
  - enabled CipherList config option for sendmail (#172352)
  - added user chowns for /etc/mail/authinfo.db and move check for cf files
    (#184341)
  - fixed Makefile of vacation (#191396)
    vacation is not included in this sendmail package
  - /var/log/mail now belongs to sendmail (#192850)


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-1
changelog:
  - new version 8.13.7 (#195282)
  - fixes CVE-2006-1173 (VU#146718): possible denial of service issue caused by
    malformed multipart messages (#195776)


author: Thomas Woerner <twoerner@redhat.com> 8.13.5-3
changelog:
  - fixed selinuxenabled path in initscript
  - fixed error handling with sigwait (#137709)
    Thanks to Jonathan Kamens for the patch
  - fixed prereq for cyrus-sasl: now using /usr/sbin/saslauthd
  - appended 'dnl' to cert tags in sendmail.mc


author: Thomas Woerner <twoerner@redhat.com> 8.13.4-1
changelog:
  - new version 8.13.4
  - added requires for the sendmail base package in sendmail-cf, sendmail-devel
    and sendmail-doc
  - dropped upstream close_wait.p2 patch


author: Thomas Woerner <twoerner@redhat.com> 8.13.3-1.1
changelog:
  - fixed gcc4 build: use double quotes for confOPTIMIZE to avoid m4 confusion
    with ','
  - fix for ppc: using tripple-quotes


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1.1
changelog:
  - fixed init script to not complain missing sendmail-cf package (#126975)
  - better message in /etc/mail/Makefile for missing sendmail-cf package.


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1
changelog:
  - new version 8.13.0
  - made /etc/mail/Makefile complain missing sendmail-cf package (#123348)
  - fixed ownership of %{_includedir}/libmilter (#73977)
  - moved back to /usr/share/ssl/certs as certificate directory (see sendmail.mc)
  - extended sendmail.mc for spam protection


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-4.1
changelog:
  - added authinfo to possible sendmail maps: /etc/mail/Makefile (#119010)
  - fixed minor version in changelog


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-3
changelog:
  - RH3.0E version: sasl1, no pie, old_setup (provide /etc/aliases)
  - new switches for pie and old_setup


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-2
changelog:
  - added information for saslauthd and AUTH (#113463)
  - fixed STATUS_FILE in sendmail-redhat.mc (#114302)
  - reset mta after update if mta was sendmail (#114257)
  - enabled pie for ia64 again


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-1.2
changelog:
  - /usr/lib/sendmail is in alternatives, now
  - removed trailing / from stdir
  - fixed define for STATUS_FILE


author: Thomas Woerner <twoerner@redhat.com> 8.12.10-6
changelog:
  - reverted to sasl1 for 3.0E: added with_sasl1
  - spec file cleanup
  - new location for statistics file (/var/log/)


author: Karsten Hopp <karsten@redhat.de> 8.12.10-3
changelog:
  - fix usage of RPM_OPT_FLAGS variable in spec file
  - add makecert.sh script to -doc subpackage
  - add cert paths to sendmail.mc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - move debug information from sendmail into debuginfo rpm
  - on %post make sure /etc/aliases.db and /etc/mail/*.db is correctly
    owned by root
  - do not set confTRUSTED_USER to smmsp in sendmail-redhat.mc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - run "make -C /etc/mail" (maybe generating new sendmail.cf, then newaliases
  - added $SENDMAIL_OPTARG that could be set by /etc/sysconfig/sendmail #99224


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-6
changelog:
  - move Sendmail.conf from /usr/lib/sasl to /usr/lib/sasl2 and change the
    default pwcheck method to "saslauthd"


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-5
changelog:
  - configure to use libsasl2 instead of libsasl to avoid linking with both
    (we also link to libldap, which now uses libsasl2)
  - link with -ldb instead of -ldb-4.0 on all releases after RHL 7.3 instead
    of just 7.3 (all versions of db4-devel thereafter are expected to provide
    the right linking setup)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mark /etc/mail/Makefile as config(noreplace) #87688
  - mark /etc/pam.d/smtp as config(noreplace) #87731


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - call make with the target "all" #86005
  - add start/stop/restart as Makefile targets
  - add another security patch


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add correct db4-devel requirements for newer releases
  - completely re-do many ifdef code in the spec-file
  - fix some issues building for older RHL releases


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add a confTRUSTED_USER line into sendmail.mc, submit.mc is already ok
  - add patch from sendmail.org for cf/m4/proto.m4


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - do not reject all numeric login names if hesiod support is
    compiled in.   #80060
  - remove reference to non-existing man-pages #74552


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sendmail-8.12.7-etrn.patch from Jos Vos <jos@xos.nl>
  - submit.mc: enable "use_ct_file" by default  #80519
  - add _FFR_MILTER_ROOT_UNSAFE  #78223


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add openssl-devel as a build-time requirement
  - preprocess the config file to add the right version of %{_lib}
  - add kerberos -I and -L flags to build configuration, needed for newer
    versions of libssl


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - always have a queue run interval for sm-msp-queue   #81424
  - Jos Vos suggests adding another variable for sm-client queue-run


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add the following changes from Adrian Havill <havill@redhat.com>
    to our default sendmail.mc file:
  	- added commented-out-by-default common AUTH/SSL examples
  	- updated m4 example and rpm reference
  	- added more comment documentation
  	- add commented out confAUTO_REBUILD example
  	- improve description about MASQUERADE_AS


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add to submit.mc: define(`_MTA_HOST_', `[127.0.0.1]')
    to deliver directly to localhost IP instead of going through DNS
  - submit.mc: exchange msp and use_ct_file to better enable it
  - do not undefine UUCP_RELAY and BITNET_RELAY
  - sendmail.mc: use LOCAL_DOMAIN instead of "Cw" directly
  - sendmail.mc: add commented out MASQUERADE_AS example
  - re-enable DAEMON variable for now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove absolute path names from the PAM configuration, allowing it to be
    used by any arch on a multilib system


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Changed the behaviour in /etc/mail/Makefile to generate the sendmail.cf and
    submit.cf from the mc files if they changed.
  - Added a small README.redhat that descibed the new mc file behaviour and the
    split into sendmail.cf and submit.cf.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - suggestions form Stephane Lentz:
  	- add correct include statement into submit.mc (like sendmail.mc)
  	- add commented out further suggestions into submit.mc
  	- disable ident lookups


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - make sure more version information is in the cf file #54418
  - do not use "-b" flag when patching in spec file
  - require newer chkconfig version #61035
  - fix preun script #60880
  - add TMPF to access file creation #60956


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mv include files to /usr/include/libmilter/ #60795
  - do not use "-f" option to virtusertable #60196
  - ad an example smarthost entry to config file #58298


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.2-1
changelog:
  - update to 8.12.2 (adds STARTTLS support without need for sfio)
  - don't forcibly strip binaries; let the build root handle it
  - add creation of the smmsp account (51/51) in %pre
  - enable hesiod map support
  - modify default config to use an MSP
  - comment out 'O AutoRebuildAliases' in %post, otherwise sendmail will
    fail to restart on upgrades


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - integrate ugly logic to compile this src.rpm also on older Red Hat
    Linux releases
  - clean up spec file and patches a bit
  - add db4 support


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - fix another path to correct docu
  - include sendmail/README in the docu
  - compile with -D_FFR_WORKAROUND_BROKEN_NAMESERVERS, but do not
    enable this at runtime
  - devel subpackage files owned by root now


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - change "-q" to "-s" as option to make #57216
  - move milter lib into separate "devel" sub-package
  - add include files to devel sub-package #56064
  - fix pointer in access file to docu #54351


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add libmilter docu
  - add support for userdb to /etc/mail/Makefile
  - use "btree" database files if a userdb is used
  - buildrequires tcp_wrappers


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 8.11.3
  - add "localhost.localdomain" to the list of hostnames accepted
    for local delivery "Cw" in /etc/mail/sendmail.mc
  - add patches from Pekka Savola <pekkas@netcore.fi>
  	- Enable IPv6 at compile time, patch for glibc 2.2 from PLD
  	- Add a commented-out IPv6 daemon .mc line to sendmail.mc
  	- buildrequire: openldap-devel, cyrus-sasl-devel


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add changes from Christopher McCrory <chrismcc@pricegrabber.com>:
  	- prepare /etc/mail/Makefile for more maps not shipped with this rpm
  	- changed sendmail.mc to include some more commented out options,
  	  so that people are directly pointed at important options
  	- add /etc/pam.d/smtp for AUTH
  	- add FEATURE(use_ct_file) and /etc/mail/trusted-users


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - enable daemon mode again, but only listen to the loopback device
    instead of all devices.
  - do not include check.tar with old anti-spam rules


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to (security release) 8.11.2
  - build also on RHL 6.x #16061
  - include smrsh man-page #17901
  - use the "-f" flag for makemap to preserve case for virtusertable
    and userdb in /etc/mail/Makefile - suggested by Harald Hoyer
  - fix /usr/doc -> usr/share/doc in docu #20611
  - wrong path in sendmail.mc #20691
  - tcp-wrapper support wasn't enabled correctly #21642
  - do not expose user "root" when masquerading like in older releases #21643
  - disable the VRFY and EXPN smtp commands #21801
  - disable queue-runs for normal users (restrictqrun privacy flag)
  - fix typo in sendmail.mc #21880, #22682
  - disable daemon mode to see what needs fixing


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - install man pages, not groff output (#3746).
  - use dnl not '#' in m4 comment (#3749).
  - add FEATURE(mailtertable) to the config -- example file needs this (#4649).
  - use db2 not db1.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fox the awk scripts in the postinstall
  - enable FEATURE(accept_unresolvable_domains) by default to make laptop
    users happy.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - make the redhat.mc be a separate source files. Sanitize patches that used
    to touch it.
  - install redhat.mc as /etc/sendmail.mc so that people can easily modify
    their sendmail.cf configurations.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - provide a more sane /etc/mail/access default config file
  - use makemap to initializa the empty databases, not touch
  - added a small, but helpful /etc/mail/Makefile


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Allow empty QUEUE in /etc/sysconfig/sendmail for those who
    want to run sendmail in daemon mode without processing the
    queue regularly.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - added chkconfig support
  - various spec file cleanups
  - changed group to Networking/Daemons (from Daemons).  Sure, it runs on
    non networked systems, but who really *needs* it then?


author: Donnie Barnes <djb@redhat.com>
changelog:
  - made /etc/mail/deny.db a ghost
  - removed preun that used to remove deny.db (ghost handles that now)
  - NOTE: upgrading from the sendmail packages in 4.8, 4.8.1, and possibly
    4.9 (all Red Hat betas between 4.2 and 5.0) could cause problems.  You
    may need to do a makemap in /etc/mail and a newaliases after upgrading
    from those packages.  Upgrading from 4.2 or prior should be fine.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 8.8.7
  - added some spam filtration
  - combined some makefile patches
  - added BuildRoot support


author: Jan Kaluza <jkaluza@redhat.com> - 3:2.1.9-5
changelog:
  - fix #290661 - use relative symlink in /etc/smrsh
  - fix #461707 - break CC field correctly
  - fix #453377 - don't parse problematic mails many times, but isolate them
  - fix #521888 - fix instances of #!/usr/bin/env python in mailman
  - fix #515157 - fixed traceback when changing email address globally


author: Tomas Smetana <tsmetana@redhat.com> - 3:2.1.9-4
changelog:
  - fix #252185 init script prevents proper SELinux domain transitions
  - fix #242672 wrong init script return value


author: John Dennis <jdennis@redhat.com> - 3:2.1.6-1.fc4
changelog:
  - initial port of 2.1.6
    remove mailman-2.1.5-moderator-request.patch, present in new release
    remove mailman-2.1-CAN-2005-0202.patch,       present in new release
    remove mailman-2.1-CAN-2004-1177.patch,       present in new release


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-31.fc4
changelog:
  - fix bug #132750, add daemon to mail-gid so courier mail server will work.
  - fix bug #143008, wrong location of mailmanctl in logrotate
  - fix bug #142605, init script doesn't use /var/lock/subsys


author: John Dennis <jdennis@redhat.com> 3:2.1.5-26
changelog:
  - fix typo in install documentation
  - fix error in templates/Makefile.in, bad install args, fixes bug #136001,
    thank you to Kaj J. Niemi for spotting this.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-21
changelog:
  - move list data dir to /var/lib/mailman to conform to FHS
    move lock dir to /var/lock/mailman to conform to FHS
    move config dir (VAR_PREFIX/data) to /etc/mailman to conform to FHS
    Thanks to Matt Domsch for pointing this out.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-20
changelog:
  - fix bug #132732, security policy violations,
  - bump release verison
    move non-data installation files from /var/mailman to /usr/lib/mailman,
    update documentation


author: John Dennis <jdennis@redhat.com> 3:2.1.5-15
changelog:
  - fix bug #117615, don't overwrite user modified templates on install
    made template directory "config noreplace"


author: John Dennis <jdennis@redhat.com> 3:2.1.5-14
changelog:
  - add comments into the crontab files so users know the /etc/cron.d
    file is volitile and will edit the right file.
    Also make the master crontab file "config noreplace" so edits are preserved.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-10
changelog:
  - fix bug #129492 and bug #120912
    stop using crontab to setup mailman's cron jobs,
    instead install cron script in /etc/cron.d


author: John Dennis <jdennis@redhat.com> 3:2.1.5-9
changelog:
  - apply patch to elminate "-1 LISTNAME moderator request(s) waiting" messages
    problem desciption here:
    http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq03.038.htp


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-6
changelog:
  - fix bug in pre scriplet, last command had been "service mailman stop"
    which should have been harmless if mailman was not installed except
    that it left the exit status from the script as non-zero and rpm
    aborted the install.


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-5
changelog:
  - add status reporting to init.d control script
    stop mailman during an installation
    restart mailman if it had been running prior to installation


author: John Dennis <jdennis@redhat.com> 3:2.1.5-1
changelog:
  - bring up to latest 2.1.5 upstream release
    From Barry Warsaw: Mailman 2.1.5, a bug fix release that also
    contains new support for the Turkish language, and a few minor new
    features. Mailman 2.1.5 is a significant upgrade which should
    improve disk i/o performance, administrative overhead for discarding
    held spams, and the behavior of bouncing member disables.  This
    version also contains a fix for an exploit that could allow 3rd
    parties to retrieve member passwords.  It is thus highly recommended
    that all existing sitesupgrade to the latest version


author: Warren Togami <wtogami@redhat.com> 3:2.1.4-4
changelog:
  - #105638 fix bytecompile and rpm -V
  - postun /etc/postfix/aliases fix
  - clean uninstall (no more empty dirs)
  - #115378 RedirectMatch syntax fix


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - fix bug 72004, 74483, 74484, 87856 - improper log rotation
  - fix bug 88083 - mailman user/group needed to exist during build
  - fix bug 88144 - wrong %file attributes on mm_cfg.py
  - fix bug 89221 - mailman user not created on install
  - fix bug 89250 - wrong pid file name in initscript


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - various small tweaks to the spec file to make installation cleaner
  - use /usr/bin/python when compiling, redirect compile output to /dev/null,
  - don't run update in %post, let the user do it, remove the .pyc files in %postun,
  - add setting of MAILHOST and URLHOST to localhost.localdomain, don't let
  - configure set them to the build machine.


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - 1) remove config patch, mailmanctl was not the right file to install in init.d,
  - it needed to be scripts/mailman
  - 2) rename httpd-mailman.conf to mailman.conf, since the file now lives
  - in httpd/conf.d directory the http prefix is redundant and inconsistent
  - with the other file names in that directory.


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - Bring package up to date with current upstream source, 2.1
  - Fix several install/packaging problems that were in upstream source
  - Add multiple mail group functionality
  - Fix syntax error in fblast.py
  - Remove the forced setting of mail host and url host in mm_cfg.py


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.9-1
changelog:
  - include README.QMAIL in with the docs (#58887)
  - include README.SENDMAIL and README.EXIM in with the docs
  - use an included httpd.conf file instead of listing the configuration
    directives in the %description, which due to specspo magic might look
    wrong sometimes (part of #51324)
  - interpolate the DEFAULT_HOST_NAME value in mm.cfg into both the DEFAULT_URL
    and MAILMAN_OWNER (#57987)
  - move logs to /var/log/mailman, qfiles to /var/spool/mailman, rotate
    logs in the log directory (#48724)
  - raise exceptions when someone tries to set the admin address for a list
    to that of the admin alias (#61468)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a default permissions problem in /var/mailman/archives/private,
    reported by Johannes Erdfelt
  - update to 2.0.9


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.8-1
changelog:
  - set FQDN and URL at build-time so that they won't be set to the host the
    RPM package is built on (#59177)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.5
  - change the default hostname from localhost to localhost.localdomain in the
    default configuration
  - chuck configuration file settings other than those dependent on the host name
    (the build system's host name is not a good default)  (#32337)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make the default owner root again so that root owns the docs
  - update to 2.0beta5, which fixes a possible security vulnerability
  - add smrsh symlink


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to beta4
  - change uid/gid to apache.apache to match apache (#13593)
  - properly recompile byte-compiled versions of the scripts (#13619)
  - change mailman alias from root to postmaster


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move web files to reside under /var/www
  - move files from /usr/share to /usr/share
  - integrate spot-fixes from mailman lists via gnome.org


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-404.el5]
changelog:
  - [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-403.el5]
changelog:
  - [s390] zcrypt: Toleration of new crypto hardware (Hendrik Brueckner) [1182522]
  - [fs] cifs: Use pid from cifsFileInfo in wrt pages/set_file_size (Sachin Prabhu) [1169304]
  - [xen] x86: confine internally handled MMIO to solitary regions (Denys Vlasenko) [1164256] {CVE-2014-8867}


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-33
changelog:
  - fix CVE-2014-8275 (without introduction of CVE-2015-0286) - various
    certificate fingerprint issues
  - fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
    ciphersuites and on server
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Jeff E. Nelson <jen@redhat.com> - kvm-83-270.el5
changelog:
  - KVM: x86: Check non canonical addresses upon WRMSR
  - Resolves: bz#1152982
   (CVE-2014-3610 kernel: kvm: noncanonical MSR writes [rhel-5.11.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - kvm-83-269.el5
changelog:
  - KVM: x86: Improve thread safety in pit
  - Resolves: bz#1152985
   (CVE-2014-3611 kernel: kvm: PIT timer race condition)


author: Miroslav Rezanina <mrezanin@redhat.com> - kvm-83-268.el5
changelog:
  - KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367) [bz#1032217]
  - Resolves: bz#1032217
   (CVE-2013-6367 kvm: division by zero in apic_get_tmcct() [rhel-5.11])


author: Miroslav Rezanina <mrezanin@redhat.com> - kvm-83-267.el5
changelog:
  - KVM: x86: prevent cross page vapic_addr access (CVE-2013-6368) [bz#1032220]
  - Resolves: bz#1032220
    (CVE-2013-6368 kvm: cross page vapic_addr access [rhel-5.11])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-266.el5
changelog:
  - Updated kversion to 2.6.18-348.4.1.el5
  - kvm-fix-l1_map-buffer-overflow.patch [bz#956511]
  - Resolves: bz#956511
    (qemu-kvm segfault in tb_invalidate_phys_page_range())


author: Michal Novotny <minovotn@redhat.com> - kvm-83-265.el5
changelog:
  - kvm-kernel-kvm-accept-unaligned-MSR_KVM_SYSTEM_TIME-writes.patch [bz#924597]
  - Resolves: bz#924597
    (RHEL.5.8.32 guest hang when installing)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-264.el5
changelog:
  - kvm-kernel-KVM-Fix-for-buffer-overflow-in-handling-of-MSR_KVM_S.patch [bz#917019]
  - kvm-kernel-KVM-Convert-MSR_KVM_SYSTEM_TIME-to-use-kvm_write_gue.patch [bz#917023]
  - kvm-kernel-KVM-Fix-bounds-checking-in-ioapic-indirect-register-.patch [bz#917029]
  - kvm-kernel-do-not-GP-on-unaligned-MSR_KVM_SYSTEM_TIME-write.patch [bz#bz917019]
  - Resolves: bz#917019
    (CVE-2013-1796 kernel: kvm: buffer overflow in handling of MSR_KVM_SYSTEM_TIME [rhel-5.10])
  - Resolves: bz#917023
    (CVE-2013-1797 kernel: kvm: after free issue with the handling of MSR_KVM_SYSTEM_TIME [rhel-5.10])
  - Resolves: bz#917029
    (CVE-2013-1798 kernel: kvm: out-of-bounds access in ioapic indirect register reads [rhel-5.10])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-263.el5
changelog:
  - kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch [bz#910840]
  - kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch [bz#910840]
  - Resolves: bz#910840
    (CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled [rhel-5.10])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-262.el5
changelog:
  - kvm-virtio-Factor-virtqueue_map_sg-out.patch [bz#684745]
  - kvm-virtio-blk-fix-the-list-operation-in-virtio_blk_load.patch [bz#684745]
  - kvm-virtio-blk-Fix-migration-of-queued-requests.patch [bz#684745]
  - kvm-block-prevent-snapshot-mode-TMPDIR-symlink-attack.patch [bz#825687]
  - Resolves: bz#684745
    (Guest I/O can't be resumed after I/O failure on one host and then migration to another host)
  - Resolves: bz#825687
    (CVE-2012-2652 qemu: vulnerable to temporary file symlink attacks [rhel-5.9])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-261.el5
changelog:
  - kvm-vnc-disable-VNC-password-authentication-security-typ.patch [bz#805676]
  - Resolves: bz#805676
    (FIPS 140-2 kernel and KVM)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-260.el5
changelog:
  - kvm-console-bounds-check-whenever-changing-the-cursor-du.patch [bz#851256]
  - Resolves: bz#851256
    (EMBARGOED CVE-2012-3515 qemu: VT100 emulation vulnerability [rhel-5.9])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-259.el5
changelog:
  - kvm-qemu-serial-lost-tx-irqs-affecting-FreeBSD-s-new-uar.patch [bz#843683]
  - kvm-Fix-lost-serial-TX-interrupts.-Report-receive-overru.patch [bz#843683]
  - kvm-hw-serial.c-fix-THRE-interrupt-clearing.patch [bz#843683]
  - Resolves: bz#843683
    (KVM does not provide receive overrun status information, for virtual serial devices)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-258.el5
changelog:
  - kvm-kernel-KVM-x86-emulator-disable-writeback-for-TEST.patch [bz#838466]
  - Resolves: bz#838466
    (The return value of performance counter is incorrect when the SQL Server service was started.)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-257.el5
changelog:
  - kvm-rtl8139-limit-transmission-buffer-size-in-c-mode.patch [bz#781922]
  - Fixed changelog
  - Resolves: bz#781922
    (rtl8139: prevernt unlimited buffer allocated for guest descriptors.)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-255.el5
changelog:
  - kvm-kernel-kvm-dev-assignment-tag-pci-dev-when-assigned-to-gues.patch [bz#784899]
  - kvm-kernel-KVM-Fix-PCI-header-check-on-device-assignment.patch [bz#829040]
  - Resolves: bz#784899
    (Host kernel panic when removing igb model with a VF assigned to guest.)
  - Resolves: bz#829040
    (Fix KVM device assignment bridge test)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-254.el5
changelog:
  - kvm-Handle-no-shutdown-correctly.patch [bz#819413]
  - kvm-Fix-termination-by-signal-with-no-shutdown.patch [bz#819413]
  - Resolves: bz#819413
    (Handle -no-shutdown correctly)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-253.el5
changelog:
  - kvm-kernel-KVM-unmap-pages-from-the-iommu-when-slots-are-remove.patch [bz#814153]
  - Resolves: bz#814153
    (CVE-2012-2121 kvm: device assignment page leak [rhel-5.9])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-252.el5
changelog:
  - kvm-fix-l1_map-buffer-overflow.patch [bz#814096]
  - Resolves: bz#814096
    (qemu-kvm segfault in tb_invalidate_phys_page_range())


author: Michal Novotny <minovotn@redhat.com> - kvm-83-251.el5
changelog:
  - kvm-kernel-KVM-Ensure-all-vcpus-are-consistent-with-in-kernel-i.patch [bz#807854]
  - Resolves: bz#807854
    (CVE-2012-1601 kernel: kvm: irqchip_in_kernel() and vcpu->arch.apic inconsistency [rhel-5.9])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-250.el5
changelog:
  - kvm-Use-a-bitmap-for-tracking-used-GSIs.patch [bz#761350]
  - kvm-device-assignment-Cleanup-on-exit.patch [bz#761350]
  - kvm-posix-aio-compat-fix-thread-accounting-leak.patch [bz#782631]
  - Resolves: bz#761350
    ("assigned_dev_update_msix_mmio: No such device or address" when repeatedly hot plug/unplug PF)
  - Resolves: bz#782631
    ([RHEL5.8 Snapshot2]RHEL5.8 KVMGuest hung during Guest OS booting up.)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-249.el5
changelog:
  - kvm-kernel-KVM-x86-Prevent-starting-PIT-timers-in-the-absence-o.patch [bz#770101]
  - CVE: CVE-2011-4622
  - Resolves: bz#770101
    (CVE-2011-4622 kernel: kvm: pit timer with no irqchip crashes the system [rhel-5.8])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-248.el5
changelog:
  - kvm-e1000-prevent-buffer-overflow-when-processing-legacy.patch [bz#772080]
  - CVE: CVE-2012-0029
  - Resolves: bz#772080
    (EMBARGOED CVE-2012-0029 qemu-kvm: e1000: process_tx_desc legacy mode packets heap overflow [rhel-5.8])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-247.el5
changelog:
  - kvm-kernel-KVM-Remove-ability-to-assign-a-device-without-iommu-.patch [bz#770095]
  - kvm-kernel-KVM-Device-assignment-permission-checks.patch [bz#770095]
  - Resolves: bz#770095
    (CVE-2011-4347 kernel: kvm: device assignment DoS [rhel-5.8])


author: Michal Novotny <minovotn@redhat.com> - kvm-83-246.el5
changelog:
  - kvm-Fix-SIGFPE-for-vnc-display-of-width-height-1.patch [bz#751482]
  - Resolves: bz#751482
    (Backport SIGFPE fix in qemu-kvm VNC to RHEL5.x)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-245.el5
changelog:
  - kvm-Fix-external-module-compat.c-not-to-use-unsupported-.patch [bz#753860]
  - Resolves: bz#753860
    (Fix kvm userspace compilation on RHEL-5 to match the kernel changes)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-244.el5
changelog:
  - kvm-do-not-change-RTC-stored-time-accidentally.patch [bz#703335]
  - Resolves: bz#703335
    (KVM guest clocks jump forward one hour on reboot)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-243.el5
changelog:
  - kvm-e1000-multi-buffer-packet-support.patch [bz#703446]
  - kvm-e1000-clear-EOP-for-multi-buffer-descriptors.patch [bz#703446]
  - kvm-e1000-verify-we-have-buffers-upfront.patch [bz#703446]
  - kvm-BZ725876-make-RTC-alarm-work.patch [bz#725876]
  - kvm-BZ725876-fix-RTC-polling-mode.patch [bz#725876]
  - Resolves: bz#703446
    (Failed to ping guest after MTU is changed)
  - Resolves: bz#725876
    (RTC interrupt problems with RHEL5 qemu/kvm (0.10 based) on 2.6.38+ guest kernels.)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-242.el5
changelog:
  - kvm-posix-aio-compat-fix-latency-issues.patch [bz#725629]
  - Resolves: bz#725629
    (RHEL5.5 KVM VMs freezing for a few seconds)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-241.el5
changelog:
  - kvm-pci-assign-limit-number-of-assigned-devices-via-hotp.patch [bz#701616]
  - kvm-pci-assign-Cleanup-file-descriptors.patch [bz#700281]
  - Resolves: bz#700281
    ([Intel 5.8 Bug] Fail to attach/detach NIC more than 250 times)
  - Resolves: bz#701616
    (limitation on max number of assigned devices does not take effect if hot-plug pci devices)


author: Michal Novotny <minovotn@redhat.com> - kvm-83-240.el5
changelog:
  - Updated kversion to 2.6.18-275.el to match build root
  - kvm-Fix-vga-segfaults-or-screen-corruption-with-large-me.patch [bz#704081]
  - Resolves: bz#704081
    (mouse responds very slowly with huge memory)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-239.el5
changelog:
  - Updated kversion to 2.6.18-269.el to match build root
  - kvm-Revert-Make-migration-robust-to-trashing-workloads.patch [bz#713392]
  - Resolves: bz#713392
    (Increase migration max_downtime/or speed cause guest stalls.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-238.el5
changelog:
  - Updated kversion to 2.6.18-268.el to match build root
  - kvm-Revert-floppy-save-and-restore-DIR-register.patch [bz#699370]
  - Related: bz#699370
    (floppy I/O error after live migration while floppy in use)
  - Resolves: bz#713389
    (Migration from host RHEL5.7 to host RHEL5.6.z failed with floppy)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-237.el5
changelog:
  - Updated kversion to 2.6.18-266.el to match build root
  - kvm-floppy-save-and-restore-DIR-register.patch [bz#699370]
  - Resolves: bz#699370
    (floppy I/O error after live migration while floppy in use)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-236.el5
changelog:
  - Updated kversion to 2.6.18-264.el to match build root
  - kvm-e1000-introduce-a-helper-to-check-the-size-of-availa.patch [bz#704097]
  - kvm-e1000-check-buffer-availability.patch [bz#704097]
  - Resolves: bz#704097
    (e1000:Execute multiple netperf clients caused system call interrupted)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-233.el5
changelog:
  - Updated kversion to 2.6.18-261.el to match build root
  - kvm-ide-turn-off-ide-warnings.patch [bz#508949]
  - Resolves: bz#508949
    (KVM: stdio is flooded)


author: Luiz Capitulino <lcapitulino@redhat.com> - kvm-83-232.el5
changelog:
  - Updated kversion to 2.6.18-259.el to match build root
  - kvm-eepro100-Don-t-allow-guests-to-fail-assertions.patch [bz#550273]
  - kvm-Bug-561224-BSOD-when-execute-sandra-muti-media-bench.patch [bz#561224]
  - kvm-block-Change-bdrv_eject-not-to-drop-the-image.patch [bz#652135]
  - kvm-ide-atapi-add-support-for-GET-EVENT-STATUS-NOTIFICAT.patch [bz#652135]
  - kvm-atapi-Allow-GET_EVENT_STATUS_NOTIFICATION-after-medi.patch [bz#652135]
  - kvm-atapi-Move-GET_EVENT_STATUS_NOTIFICATION-command-han.patch [bz#652135]
  - kvm-atapi-GESN-Use-structs-for-commonly-used-field-types.patch [bz#652135]
  - kvm-atapi-GESN-Standardise-event-response-handling-for-f.patch [bz#652135]
  - kvm-atapi-GESN-implement-media-subcommand.patch [bz#652135]
  - kvm-atapi-Add-medium-ready-to-medium-not-ready-transitio.patch [bz#652135]
  - Resolves: bz#550273
    (qemu aborted when run "service network restart" in guest that with i82551 vNIC)
  - Resolves: bz#561224
    (BSOD when execute sandra muti-media benchmark)
  - Resolves: bz#652135
    (rhel6 disk not detected first time in install)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-231.el5
changelog:
  - Updated kversion to 2.6.18-257.el to match build root
  - kvm-report-that-QEMU-process-was-killed-by-a-signal.patch [bz#677614]
  - kvm-race-between-qemu-monitor-cont-and-incoming-migratio.patch [bz#647368]
  - Resolves: bz#647368
    (race between qemu monitor "cont" and incoming migration can cause failed restore/migration)
  - Resolves: bz#677614
    (QEMU should report the PID of the process that sent it signals for troubleshooting purposes)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-230.el5
changelog:
  - Updated kversion to 2.6.18-256.el to match build root
  - kvm-kernel-KVM-VMX-Save-and-restore-tr-selector-across-mode-swi.patch [bz#693918]
  - kvm-kernel-KVM-VMX-update-live-TR-selector-if-it-changes-in-rea.patch [bz#693918]
  - Resolves: bz#693918
    (KVM: Migration of Win-XP VM during boot early stage, will cause the VM OS to fail to boot correctly.)
  - kvm-Make-migration-robust-to-trashing-workloads.patch [bz#690521]
  - kvm-savevm-Create-an-optional-savevm-registration.patch [bz#666225]
  - kvm-ide-Optionally-include-pio-inflight-data-in-savevm.patch [bz#666225]
  - Resolves: bz#666225
    (KVM: Migration of Win-XP VM during boot early stage, will cause the VM OS to fail to boot correctly.)
  - Resolves: bz#690521
    (Enlarging migrate_set_speed does not raise migration network transfer rates to the real network bandwidth)


author: Luiz Capitulino <lcapitulino@redhat.com> - kvm-83-229.el5
changelog:
  - Updated kversion to 2.6.18-252.el5 to match build root
  - kvm-device-assignment-register-a-reset-function.patch [bz#657149]
  - kvm-device-assignment-Reset-device-on-system-reset.patch [bz#657149]
  - Resolves: bz#657149
    (guest with passthrough nic got kernel panic when send system_reset signal in QEMU monitor)


author: Luiz Capitulino <lcapitulino@redhat.com> - kvm-83-228.el5
changelog:
  - Updated kversion to 2.6.18-248.el5 to match build root
  - kvm-device-assignment-Avoid-segfault-on-hot-add-with-no-.patch [bz#644793]
  - Resolves: bz#644793
    (qemu-kvm -no-kvm segfaults on pci_add)


author: Luiz Capitulino <lcapitulino@redhat.com> - kvm-83-227.el5
changelog:
  - kvm-USB-HID-does-not-support-Set_Idle.patch [bz#665023]
  - kvm-add-event-queueing-to-USB-HID.patch [bz#665023]
  - Resolves: bz#665023
    (lost double clicks on slow connections)


author: Luiz Capitulino <lcapitulino@redhat.com> - kvm-83-226.el5
changelog:
  - Updated kversion to 2.6.18-245.el5 to match build root
  - kvm-Revert-qemu-drive_init-Don-t-try-to-read-passwords-b.patch [bz#644706]
  - kvm-block-Improve-bdrv_iterate-Jan-Kiszka.patch [bz#644706]
  - kvm-block-Introduce-bdrv_get_encrypted_filename-Jan-Kisz.patch [bz#644706]
  - kvm-monitor-Report-encrypted-disks-in-snapshot-mode-Jan-.patch [bz#644706]
  - kvm-monitor-Rework-early-disk-password-inquiry-Jan-Kiszk.patch [bz#644706]
  - kvm-monitor-Simplify-password-input-mode-Jan-Kiszka.patch [bz#644706]
  - kvm-monitor-Break-out-readline_show_prompt-Jan-Kiszka.patch [bz#644706]
  - kvm-monitor-Rework-modal-password-input-Jan-Kiszka.patch [bz#644706]
  - Resolves: bz#644706
    (QEMU monitor hangs on first command when attempting start a guest with an encrypted qcow2 image)


author: Luiz Capitulino <lcapitulino@redhat.com> - kvm-83-225.el5
changelog:
  - kvm-block-read-only-open-cdrom-as-read-only-when-using-m.patch [bz#586173]
  - kvm-lets-pretend-that-RTC-can-be-used-to-wakeup-from-S4.patch [bz#659172]
  - Resolves: bz#586173
    (qemu monitor always use read-write type for the changed cd)
  - Resolves: bz#659172
    ([WHQL] pwrtest failed in the job "CHAOS-Concurrent Hardware And OS test")


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-224.el5
changelog:
  - kvm-kernel-KVM-x86-zero-kvm_vcpu_events-interrupt.pad.patch [bz#665407]
  - Resolves: bz#665407
    (kvm_vcpu_events.interrupt.pad must be zeroed)
  - CVE: CVE-2010-4525


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-223.el5
changelog:
  - Updated kversion to 2.6.18-237.el to match build root
  - Reverting patches for bz#608709 as they are not complete
    - kvm-kernel-Revert-KVM-VMX-Return-0-from-a-failed-VMREAD.patch [bz#608709]
    - kvm-kernel-Revert-KVM-Don-t-spin-on-virt-instruction-faults-dur.patch [bz#608709]
  - bz#608709: reboot(RB_AUTOBOOT) fails if kvm instance is running
  - Related: bz#661117


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-222.el5
changelog:
  - kvm-kernel-kvm-change-signed-int-to-unsigned-in-mmu_shrink.patch [bz#661117]
  - Resolves: bz#661117
    ([RHEL5.6 CC] mmu_shrink patch)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-221.el5
changelog:
  - Updated kversion to 2.6.18-236.el to match build root
  - kvm-kernel-KVM-Don-t-spin-on-virt-instruction-faults-during-reb.patch [bz#608709]
  - kvm-kernel-KVM-VMX-Return-0-from-a-failed-VMREAD.patch [bz#608709]
  - Resolves: bz#608709
    (reboot(RB_AUTOBOOT) fails if kvm instance is running)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-220.el5
changelog:
  - Updated kversion to 2.6.18-235.el to match build root
  - kvm-load-registers-after-restoring-pvclock-msrs.patch [bz#655990]
  - Resolves: bz#655990
    (clock drift when migrating a guest between mis-matched CPU clock speed)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-219.el5
changelog:
  - kvm-kernel-KVM-fix-AMD-initial-TSC-offset-problems-additional-f.patch [bz#642659]
  - Resolves: bz#642659
    (TSC offset of virtual machines is not initialized correctly by 'kvm_amd' kernel module.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-218.el5
changelog:
  - kvm-vnc-fix-key-event-processing.patch [bz#643317]
  - Resolves: bz#643317
    ("sendkey ctrl-alt-delete" don't work via VNC)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-217.el5
changelog:
  - kvm-kernel-fix-null-pointer-dereference.patch [bz#570532]
  - Resolves: bz#570532
    (CVE-2010-0435 kvm: vmx null pointer dereference)
  - CVE: CVE-2010-0435


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-216.el5
changelog:
  - Updated kversion to 2.6.18-233.el to match build root
  - kvm-kernel-KVM-fix-AMD-initial-TSC-offset-problems.patch [bz#642659]
  - Resolves: bz#642659
    (TSC offset of virtual machines is not initialized correctly by 'kvm_amd' kernel module.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-215.el5
changelog:
  - Reverts previous patch (it doesn't build)
  - kvm-kernel-Revert-KVM-fix-AMD-initial-TSC-bugs.patch [bz#642659]
  - Related: bz#642659
    (TSC offset of virtual machines is not initialized correctly by 'kvm_amd' kernel module.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-214.el5
changelog:
  - kvm-kernel-KVM-fix-AMD-initial-TSC-bugs.patch [bz#642659]
  - Resolves: bz#642659
    (TSC offset of virtual machines is not initialized correctly by 'kvm_amd' kernel module.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-213.el5
changelog:
  - kvm-No-need-to-iterate-if-we-already-are-over-the-limit.patch [bz#513765 bz#589017]
  - kvm-don-t-care-about-TLB-handling.patch [bz#513765 bz#589017]
  - kvm-Fix-transferred-memory-calculation.patch [bz#513765 bz#589017]
  - kvm-Maintaing-number-of-dirty-pages.patch [bz#513765 bz#589017]
  - kvm-Exit-loop-if-we-have-been-there-too-long.patch [bz#513765 bz#589017]
  - kvm-Change-calculation-to-exit-live-migration.patch [bz#513765 bz#589017]
  - Resolves: bz#513765
    (Large guest ( 256G RAM + 16 vcpu ) hang during live migration)
  - Resolves: bz#589017
    ([rhel5.5] [kvm] dead lock in qemu during off-line migration)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-212.el5
changelog:
  - kvm-implement-dummy-PnP-support.patch [bz#652671]
  - Resolves: bz#652671
    (If VM boot seq. is set up as nc (PXE then disk) the VM is always stuck on trying to PXE boot)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-210.el5
changelog:
  - Adding load_gs_index to kmod symbol greylist
  - Related: bz#639887
    (CVE-2010-3698 kvm: invalid selector in fs/gs causes kernel panic [rhel-5.6])


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-209.el5
changelog:
  - kvm-kernel-KVM-Fix-fs-gs-reload-oops-with-invalid-ldt.patch [bz#639887]
  - Resolves: bz#639887
    (CVE-2010-3698 kvm: invalid selector in fs/gs causes kernel panic [rhel-5.6])


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-208.el5
changelog:
  - Updated kversion to 2.6.18-232.el5 to match build root
  - kvm-kernel-KVM-x86-fix-information-leak-to-userland.patch [bz#649929]
  - Resolves: bz#649929
    (CVE-2010-3881 kvm: arch/x86/kvm/x86.c: reading uninitialized stack memory [5.6])
  - kvm-usb-linux-increase-buffer-for-USB-control-requests.patch [bz#627343]
  - kvm-e1000-Fix-TCP-checksum-overflow-with-TSO.patch [bz#648328]
  - kvm-fix-help-string-to-reflect-the-fact-that-cpu-topolog.patch [bz#611785]
  - kvm-VGA-Don-t-register-deprecated-VBE-range.patch [bz#651715]
  - Resolves: bz#611785
    ([RFE] Support cores/sockets/threads topology configuration)
  - Resolves: bz#627343
    (husb: ctrl buffer too small error received for passthrough usb device, fixed upstream)
  - Resolves: bz#648328
    (TCP checksum overflows in qemu's e1000 emulation code when TSO is enabled in guest OS)
  - Resolves: bz#651715
    (qemu-kvm aborted when installing the driver for the newly hotplugged rtl8139 nic)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-207.el5
changelog:
  - kvm-Add-drive-readonly-option-to-help-output.patch [bz#645798]
  - Resolves: bz#645798
    (Add drive readonly option to help output)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-206.el5
changelog:
  - Updated kversion to 2.6.18-227.el5 to match build root
  - spec: fix/hack dependencies of kvm-kmod-debug
  - Resolves: bz#643272
  - create qemu user/group on %post
  - Resolves: bz#643525


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-205.el5
changelog:
  - Require right gcrypt version
  - Resolves: bz#503118
  - spec: fix the kmod kernel version checking code
  - Resolves: bz#637267
  - spec: fix module dir name on %install
  - Resolves: bz#517565
  - Build kmod-kvm for kernel-debug too
  - Resolves: bz#517565


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-204.el5
changelog:
  - kvm-don-t-link-qemu-tools-against-spice-libs.patch [bz#514578]
  - kvm-block-Fix-image-re-open-in-bdrv_commit.patch [bz#640949]
  - Resolves: bz#514578
    (kvm-qemu-img subpackage has dependency on qspice-libs)
  - Resolves: bz#640949
    (Can not commit copy-on-write image's data to raw backing-image)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-203.el5
changelog:
  - Updated kversion to 2.6.18-226.el5 to match build root
  - Add pci_get_domain_bus_and_slot to kmod symbol greylist
  - Related: bz#539642
    (use native pci_get_bus_and_slot function)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-202.el5
changelog:
  - kvm-fix-and-on-russian-keymap.patch [bz#580637]
  - Resolves: bz#580637
    (Incorrect russian vnc keymap)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-201.el5
changelog:
  - kvm-kernel-KVM-Fix-reboot-on-Intel-hosts.patch [bz#608709]
  - Resolves: bz#608709
    (reboot(RB_AUTOBOOT) fails if kvm instance is running)
  - kvm-kmod-move-cancel_work_sync-availability-test-to-conf.patch [bz#539642]
  - kvm-kmod-use-native-pci_get_bus_and_slot-if-available.patch [bz#539642]
  - Resolves: bz#539642
    (use native pci_get_bus_and_slot function)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-200.el5
changelog:
  - Updated kversion to 2.6.18-225.el5 to match build root
  - kvm-qemu-fix-unsafe-ring-handling.patch [bz#568817]
  - CVE: CVE-2010-0431
  - Resolves: bz#568817
    (CVE-2010-0431 qemu: Insufficient guest provided pointers validation)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-199.el5
changelog:
  - Updated kversion to 2.6.18-221.el5 to match build root
  - kvm-kernel-KVM-Prevent-kvm_init-from-corrupting-debugfs-structu.patch [bz#619268]
  - Resolves: bz#619268
    (rmmod kvm modules cause host kernel panic)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-198.el5
changelog:
  - run 'make sync' before final ./configure line on build
  - Resolves: bz#632707
    (fix kvm build warnings and enable -Werror)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-197.el5
changelog:
  - Updated kversion to 2.6.18-219.el5 to match build root
  - kvm-kill-bogus-return-ret-on-spawn_thread.patch [bz#632707]
  - kvm-virtio-net-fix-format-strings-on-virtio_net_receive2.patch [bz#632707]
  - kvm-kvmtrace-check-for-ftruncate-errors.patch [bz#632707]
  - Add --enable-werror to ./configure command-line [bz#632707]
  - Add ./configure arguments: --enable-kvm-cap-pit --enable-kvm-cap-device-assignment
  - Remove duplicate --enable-spice arg from ./configure 
  - Resolves: bz#632707
    (fix kvm build warnings and enable -Werror)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-196.el5
changelog:
  - Updated kversion to 2.6.18-215.el5 to match build root
  - kvm-introduce-__rhel5-marker-into-the-migration-save-dat.patch [bz#603026]
  - kvm-block-raw-posix-Factor-out-cdrom_probe_device.patch [bz#609472]
  - kvm-raw-posix-Detect-CDROM-via-ioctl-on-linux.patch [bz#609472]
  - kvm-raw-posix-Don-t-use-file-name-for-host_cdrom-detecti.patch [bz#609472]
  - Resolves: bz#603026
    (CPU save version is now 9, but the format is _very_ different from non-RHEL5 version 9)
  - Resolves: bz#609472
    (qemu-kvm misclassifies a /dev/cd*/* disk device as a CD-ROM)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-195.el5
changelog:
  - Updated kversion to 2.6.18-211.el5 to match build root
  - kvm-use-native-cancel_work_sync-function-if-available.patch [bz#629334]
  - Resolves: bz#629334
    (use native cancel_work_sync() function)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-194.el5
changelog:
  - Updated kversion to 2.6.18-212.el5 to match build root
  - kvm-Add-cache-unsafe-parameter-to-drive.patch [bz#623484]
  - kvm-qemu-img-convert-Use-cache-unsafe-for-output-image.patch [bz#623484]
  - kvm-fix-cancel_work_sync-conflict-on-compat-code.patch [bz#629333]
  - kvm-bz-547276-e1000-secrc-support.patch [bz#547276]
  - kvm-Use-native-smp_call_function_single-on-RHEL-5.5.patch [bz#533078]
  - kvm-use-native-smp_call_function_many.patch [bz#533078]
  - kvm-qemu-don-t-strip-qemu-img-and-qemu-io-in-make-instal.patch [bz#606394]
  - Resolves: bz#533078
    (use native smp_call_function_many/single functions)
  - Resolves: bz#547276
    (Vmcore cannot be captured by netdump when RHEL3.9 was installed as guest OS on KVM.)
  - Resolves: bz#606394
    ([kvm] debug-info missing from kvm-qemu-img-83-164.el5_5.12)
  - Resolves: bz#623484
    (KVM: qemu-img convert poor performance ( on NFS storage ))
  - Resolves: bz#629333
    (fix build against kernel-devel-2.6.18-214.el5.x86_64: (cancel_work_sync() conflict))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-193.el5
changelog:
  - kvm-virtio-net-correct-packet-length-checks.patch [bz#606238]
  - kvm-Fix-segfault-in-mmio-subpage-handling-code.patch [bz#619413]
  - Resolves: bz#606238
    (Virtio: Transfer file caused guest in same vlan abnormally quit)
  - Resolves: bz#619413
    (CVE-2010-2784 qemu: insufficient constraints checking in exec.c:subpage_register() [rhel-5.6])


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-192.el5
changelog:
  - kvm-Fix-changing-password-using-monitor-over-VNC.patch [bz#569743]
  - kvm-qcow2-Fix-qemu-img-check-segfault-on-corrupted-image.patch [bz#606434]
  - kvm-qcow2-Don-t-try-to-check-tables-that-couldn-t-be-loa.patch [bz#606434]
  - kvm-qemu-img-check-Distinguish-different-kinds-of-errors.patch [bz#606651]
  - kvm-qcow2-Change-check-to-distinguish-error-cases.patch [bz#606651]
  - Resolves: bz#569743
    (Change vnc password caused 'Segmentation fault')
  - Resolves: bz#606434
    ([kvm] segmentation fault when running qemu-img check on faulty image)
  - Resolves: bz#606651
    ([kvm] qemu image check returns cluster errors when using virtIO block (thinly provisioned) during e_no_space events (along with EIO errors))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-191.el5
changelog:
  - kvm-kernel-KVM-MMU-fix-conflict-access-permissions-in-direct-sp.patch [bz#615225]
  - Resolves: bz#615225
    (KVM uses wrong permissions for large guest pages)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-190.el5
changelog:
  - kvm-New-slots-need-dirty-tracking-enabled-when-migrating.patch [bz#567046]
  - Resolves: bz#567046
    (SPICE - race in KVM/Spice would cause migration to fail (slots are not registered properly?))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-189.el5
changelog:
  - kvm-Monitor-Check-for-error-in-do_change.patch [bz#611982]
  - Resolves: bz#611982
    (Monitor doesn't check for 'change' command failure)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-188.el5
changelog:
  - kvm-qcow2-Fix-access-after-end-of-array.patch [bz#605701]
  - kvm-qcow2-Don-t-ignore-immediate-read-write-failures.patch [bz#605701]
  - kvm-qcow2-Return-0-errno-in-write_l2_entries.patch [bz#605701]
  - kvm-qcow2-Fix-error-return-code-in-qcow2_alloc_cluster_l.patch [bz#605701]
  - kvm-qcow2-Return-0-errno-in-write_l1_entry.patch [bz#605701]
  - kvm-qcow2-Return-0-errno-in-l2_allocate.patch [bz#605701]
  - kvm-qcow2-Allow-qcow2_get_cluster_offset-to-return-error.patch [bz#605701]
  - kvm-qcow2-Change-l2_load-to-return-0-errno.patch [bz#605701]
  - kvm-qcow2-Return-right-error-code-in-write_refcount_bloc.patch [bz#605701]
  - kvm-qcow2-Fix-corruption-after-error-in-update_refcount.patch [bz#605701]
  - kvm-qcow2-Clear-L2-table-cache-after-write-error.patch [bz#605701]
  - kvm-qcow2-Fix-error-handling-in-l2_allocate.patch [bz#605701]
  - kvm-qcow2-Restore-L1-entry-on-l2_allocate-failure.patch [bz#605701]
  - kvm-qcow2-Allow-get_refcount-to-return-errors.patch [bz#605701]
  - kvm-qcow2-Allow-alloc_clusters_noref-to-return-errors.patch [bz#605701]
  - kvm-qcow2-Return-real-error-code-in-load_refcount_block.patch [bz#605701]
  - kvm-block-Add-bdrv_-p-write_sync.patch [bz#572825]
  - kvm-qcow2-Use-bdrv_-p-write_sync-for-metadata-writes.patch [bz#572825]
  - Resolves: bz#572825
    (qcow2 image corruption when using cache=writeback)
  - Resolves: bz#605701
    (Backport qcow2 fixes to RHEL 5)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-187.el5
changelog:
  - kvm-Error-checking.patch [bz#587049]
  - kvm-Avoid-thundering-herd-problem.patch [bz#587049]
  - Resolves: bz#587049
    (qemu posix_aio use pthread_cond_signal instead of broadcast to prevent lock storm)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-186.el5
changelog:
  - Updated kversion to 2.6.18-203.el5 to match build root
  - kvm-kernel-KVM-Keep-slot-ID-in-memory-slot-structure.patch [bz#606953]
  - kvm-kernel-KVM-Prevent-internal-slots-from-being-COWed.patch [bz#606953]
  - Resolves: bz#606953
    (fork causes trouble for vcpu threads)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-185.el5
changelog:
  - kvm-turn-off-kvmclock-when-resetting-cpu.patch [bz#588878]
  - kvm-raw-posix-Use-pread-pwrite-instead-of-lseek-read-wri.patch [bz#600375]
  - kvm-block-Cache-total_sectors-to-reduce-bdrv_getlength-c.patch [bz#600375]
  - Resolves: bz#588878
    (Rebooting a kernel with kvmclock enabled, into a kernel with kvmclock disabled, causes random crashes)
  - Resolves: bz#600375
    (Excessive lseek() causes severe performance issues with vm disk images over NFS)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-184.el5
changelog:
  - kvm-virtio-net-truncating-packet.patch [bz#606238]
  - Resolves: bz#606238
    (Virtio: Transfer file caused guest in same vlan abnormally quit)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-183.el5
changelog:
  - kvm-virtio-blk.c-avoid-zero-every-request-structure.patch [bz#598042]
  - kvm-qemu-io-Open-files-read-write-again.patch [bz#601494]
  - Resolves: bz#598042
    (virtio-blk: Avoid zeroing every request structure)
  - Resolves: bz#601494
    (qemu-io: No permission to write image)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-182.el5
changelog:
  - kvm-kernel-KVM-Fix-wallclock-version-writing-race.patch [bz#592021]
  - Resolves: bz#592021
    (race condition in pvclock wallclock calculation)
  - kvm-qcow2-Fix-corruption-after-refblock-allocation.patch [bz#598488]
  - Resolves: bz#598488
    (qcow2 corruption bug in refcount table growth)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-181.el5
changelog:
  - kvm-kernel-KVM-MMU-bail-out-pagewalk-on-kvm_read_guest-error.patch [bz#588251]
  - Resolves: bz#588251
    (kvm spinning updating a guest pte, unkillable)
  - kvm-qemu-img-rebase-Fix-output-image-corruption.patch [bz#587278]
  - kvm-block-Fix-bdrv_commit.patch [bz#587604]
  - Resolves: bz#587278
    (After re-base snapshot, the file in the snapshot disappeared)
  - Resolves: bz#587604
    (Qcow2 snapshot got corruption after commit using block device)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-180.el5
changelog:
  - kvm-qemu-img-open-file-to-be-rebased-with-read-write-per.patch [bz#587605]
  - Resolves: bz#587605
    (Failed to re-base qcow2 snapshot)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-179.el5
changelog:
  - Renumber kvm module patches from 501-625 to 1501-1625
    (so the userspace patch numbers can use slots 501 to 1500)
  - kvm-qcow2-Export-synchronous-qcow_read-write-to-avoid-br.patch [bz#542954]
  - Resolves: bz#542954
    (Guest suffers kernel panic when save snapshot then restart guest)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-178.el5
changelog:
  - Remove bios-nohotplug.bin from package
  - Related: bz#498774
    (QEMU: Too many devices are available for unplug in Windows XP (and we don't support that))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-177.el5
changelog:
  - kvm-Bail-out-when-VCPU_CREATE-fails.patch [bz#587661]
  - Resolves: bz#587661
    (Fix segfault when creating more vcpus than allowed.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-176.el5
changelog:
  - kvm-Revert-fix-wrong-acpi-mapping-rhel5.x-kvm-userspace.patch [bz#576554]
    - patch causes issues when using Spice without QXL on some guest OSes
      [bz#581758 comment 8]
  - Related: bz#576554
    (Win7/32 stuck on 100% CPU (in testing VDI driver unclassified WHQL tests))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-175.el5
changelog:
  - kvm-kernel-EPT-accessed-bit-emulation-fixed.patch [bz#582038]
  - Resolves: bz#582038
    (backport EPT accessed bit emulation)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-174.el5
changelog:
  - kvm-kernel-Revert-EPT-accessed-bit-emulation.patch [bz#582038]
    (patch fails to build)
  - Related: bz#582038
    (backport EPT accessed bit emulation)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-173.el5
changelog:
  - kvm-kernel-EPT-accessed-bit-emulation.patch [bz#582038]
  - Resolves: bz#582038
    (backport EPT accessed bit emulation)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-172.el5
changelog:
  - kvm-qcow2-Remove-abort-on-free_clusters-failure.patch [bz#583947]
  - Resolves: bz#583947
    (Guest aborted when make guest stop on write error)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-171.el5
changelog:
  - kvm-pcnet-make-subsystem-vendor-id-match-hardware.patch [bz#521247]
  - kvm-read-only-add-RO-feature-macro.patch [bz#510630]
  - kvm-read-only-Pass-the-read-only-attribute-to-the-Guest.patch [bz#510630]
  - kvm-read-only-BDRV_O_FLAGS-changes-default-now-is-read-o.patch [bz#510630]
  - kvm-read-only-qemu-img-Allow-opening-an-image-with-read-.patch [bz#510630]
  - kvm-read-only-Added-readonly-option-to-drive-s-command-l.patch [bz#510630]
  - kvm-read-only-Make-CDROM-a-read-only-drive.patch [bz#510630]
  - kvm-read-only-Disable-fall-back-to-read-only.patch [bz#510630]
  - kvm-read-only-Open-backing-file-read-only-where-possible.patch [bz#510630]
  - kvm-read-only-don-t-rely-on-CDROM-hint-for-read_only-att.patch [bz#510630]
  - kvm-read-only-open-for-read-only-where-possible.patch [bz#510630]
  - kvm-read-only-allow-read-only-CDROM-with-any-interface.patch [bz#510630]
  - Resolves: bz#510630
    (-drive arg has no way to request a read only disk)
  - Resolves: bz#521247
    (emulated pcnet nic in qemu-kvm has wrong PCI subsystem ID for Windows XP driver)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-170.el5
changelog:
  - kvm-fix-wrong-acpi-mapping-rhel5.x-kvm-userspace.patch [bz#576554]
  - Resolves: bz#576554
    (Win7/32 stuck on 100% CPU (in testing VDI driver unclassified WHQL tests))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-169.el5
changelog:
  - kvm-qcow2-Factor-next_refcount_table_size-out.patch [bz#577225]
  - kvm-qcow2-Rewrite-alloc_refcount_block-grow_refcount_tab.patch [bz#577225]
  - kvm-qcow2-More-checks-for-qemu-img-check.patch [bz#577225]
  - Resolves: bz#577225
    (qcow2 corruption with I/O error during refcount block allocation)
  - Added register_kprobe and unregister_kprobe to the ignored ksyms list
  - Resolves: bz#580410
    (Failed to install kvm for failed dependencies: ksym)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-168.el5
changelog:
  - Fix build warnings:
  - kvm-Revert-avoid-leaving-orphaned-swapcache-in-ksm.patch [bz#575585]
  - Related: bz#575585
    (memory reported as used (by SwapCache and by Cache) though no process holds it.)
  - kvm-avoid-leaving-orphaned-swapcache-in-ksm-v2.patch.patch [bz#575585]
  - Resolves: bz#575585
    (memory reported as used (by SwapCache and by Cache) though no process holds it.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-167.el5
changelog:
  - kvm-avoid-leaving-orphaned-swapcache-in-ksm.patch [bz#575585]
  - Resolves: bz#575585
    (memory reported as used (by SwapCache and by Cache) though no process holds it.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-166.el5
changelog:
  - kvm-Build-an-additional-bios-without-hotplug-support.patch [bz#498774]
  - Resolves: bz#498774
    (QEMU: Too many devices are available for unplug in Windows XP (and we don't support that))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-165.el5
changelog:
  - Updated kversion to 2.6.18-194.el5 to match build root
  - kvm-kernel-account-only-for-IRQ-injected-into-vcpu0.patch [bz#555727]
  - kvm-kernel-Backport-KVM-fix-irq_source_id-size-verification.patch [bz#520572]
  - kvm-kernel-KVM-x86-disable-paravirt-mmu-reporting.patch [bz#574621]
  - Resolves: bz#520572
    (SR-IOV -- Guest exit and host hang on if boot VM with 8 VFs assigned)
  - Resolves: bz#555727
    (Time drift in win2k3-64bit and win2k8-64bit smp guest)
  - Resolves: bz#574621
    (Linux pvmmu guests (FC11, FC12, etc) crash on boot on AMD hosts with NPT disabled)
  - kvm-kbd-leds-infrastructure.patch [bz#517814]
  - kvm-kbd-leds-ps-2-kbd.patch [bz#517814]
  - kvm-kbd-leds-usb-kbd.patch [bz#517814]
  - kvm-kbd-keds-vnc.patch [bz#517814]
  - Resolves: bz#517814
    (Caps Lock the key's appearance  of guest is not synchronous as host's --view kvm with vnc)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-164.el5
changelog:
  - kvm-Fix-Windows-guests-SVVP-tests.patch [bz#495844]
  - Resolves: bz#495844
    (KVM SVVP: "Signed Driver check" failure - on the disabled vCPUs (that the VM's BIOS doesn't hide))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-163.el5
changelog:
  - kvm-kernel-avoid-collision-between-out-of-sync-ksm-and-pci-pass.patch [bz#566385]
  - Resolves: bz#566385
    (KVM host panic due to fault in paging64_sync_page() / panic occurs in connection with PCI passthru devices)


author: Glauber Costa <glommer@redhat.com> - kvm-83-162.el5
changelog:
  - kvm-qemu-img-rebase-Add-f-option.patch [bz#569762]
  - kvm-mark-PCI-IRQs-as-edge-triggered-in-mptables.patch [bz#536749]
  - Resolves: bz#536749
    (can not boot rhel3.9 with if=virtio)
  - Resolves: bz#569762
    ('qemu-img re-base' broken on block devices)
  - Moved kver to 2.6.18-191.el5 to match build root


author: Glauber Costa <glommer@redhat.com> - kvm-83-161.el5
changelog:
  - kvm-qemu-img-Fix-segfault-during-rebase.patch [bz#563141]
  - Resolves: bz#563141
    (qemu-img re-base subcommand got Segmentation fault)
  - Moved kver to 2.6.18-190.el5 to match build root


author: Glauber Costa <glommer@redhat.com> - kvm-83-160.el5
changelog:
  - kvm-qxl-defer-vga-updates-in-case-commands-ring-is-full-.patch [bz#544785]
  - Resolves: bz#544785
    (QEMU process can become non-responsive in case command are not pull from qxl vga ring)


author: Glauber Costa <glommer@redhat.com> - kvm-83-159.el5
changelog:
  - Applied patch to spec file [bz#533453]
  - Updated kversion to 2.6.18-189.el5 to match build root
  - Resolves: bz#533453
    (kvm kmod package should require a compatible kernel version)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-158.el5
changelog:
  - Updated kversion to 2.6.18-187.el5 to match build root
  - kvm-kernel-KVM-Don-t-check-access-permission-when-loading-segme.patch [bz#563465]
  - kvm-kernel-KVM-Disable-move-to-segment-registers-and-jump-far-i.patch [bz#563465]
  - kvm-kernel-KVM-VMX-Check-cpl-before-emulating-debug-register-ac.patch [bz#563517]
  - Resolves: bz#563465
    (EMBARGOED CVE-2010-0419 kvm: emulator privilege escalation segment selector check [rhel-5.5])
  - Resolves: bz#563517
    (KVM: Check cpl before emulating debug register access [rhel-5.5])


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-157.el5
changelog:
  - kvm-CVE-2010-0297-usb-linux.c-fix-buffer-overflow.patch [bz#560770]
  - Resolves: bz#560770
    (CVE-2010-0297 kvm-userspace-rhel5: usb-linux.c: fix buffer overflow [rhel-5.5])


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-156.el5
changelog:
  - kvm-kernel-KVM-PIT-control-word-is-write-only.patch [bz#553126]
  - kvm-kernel-KVM-introduce-kvm_read_guest_virt-kvm_write_guest_vi.patch [bz#559095]
  - kvm-kernel-KVM-remove-the-vmap-usage.patch [bz#559095]
  - kvm-kernel-KVM-Use-kvm_-read-write-_guest_virt-to-read-and-writ.patch [bz#559095]
  - kvm-kernel-KVM-fix-memory-access-during-x86-emulation.patch [bz#559095]
  - kvm-kernel-Check-IOPL-level-during-io-instruction-emulation.patch [bz#560698]
  - kvm-kernel-Fix-popf-emulation.patch [bz#560698]
  - kvm-kernel-Check-CPL-level-during-privilege-instruction-emulati.patch [bz#560698]
  - Resolves: bz#553126
    (CVE-2010-0309 kvm: cat /dev/port in guest cause the host hang [rhel-5.5])
  - Resolves: bz#559095
    (EMBARGOED CVE-2010-0298 kvm: emulator privilege escalation [rhel-5.5])
  - Resolves: bz#560698
    (EMBARGOED CVE-2010-0306 kvm: emulator privilege escalation IOPL/CPL level check [rhel-5.5])


author: Glauber Costa <glommer@redhat.com> - kvm-83-155.el5
changelog:
  - kvm-virtio-blk-Fix-reads-turned-into-writes-after-read-e.patch [bz#552487]
  - kvm-virtio-blk-Handle-bdrv_aio_read-write-NULL-return.patch [bz#552487]
  - Resolves: bz#552487
    (Guest image corruption after RHEV-H update to 5.4-2.1.3.el5_4rhev2_1)
  - Moved kver to 2.6.18-186.el5 to match build root


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-154.el5
changelog:
  - kvm-qemu-img-Fix-qemu-img-with-backing-file.patch [bz#558195]
  - kvm-qemu-add-routines-for-atomic-16-bit-accesses.patch [bz#525323]
  - kvm-qemu-virtio-atomic-access-for-index-values.patch [bz#525323]
  - kvm-fix-ide-versioning.patch [bz#559163]
  - kvm-cpu-CPU_SAVE_VERSION-is-9-know.patch [bz#559163]
  - Resolves: bz#525323
    (QEMU terminates without warning with virtio-net and SMP enabled)
  - Resolves: bz#558195
    (kvm: NFS : kvm-qemu-img convert failure on RAW/Sparse template with COW/Sparse snapshot)
  - Resolves: bz#559163
    (migration failed host 5.5 with -M rhel5.5.0 to host 5.5 with -M rhel5.5.0.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-153.el5
changelog:
  - kvm-qcow2-Fix-error-handling-in-qcow2_grow_l1_table.patch [bz#537077]
  - kvm-qcow2-Fix-error-handling-in-qcow_save_vmstate.patch [bz#537077]
  - kvm-qcow2-Return-0-errno-in-get_cluster_table.patch [bz#537077]
  - kvm-qcow2-Return-0-errno-in-qcow2_alloc_cluster_offset.patch [bz#537077]
  - kvm-block-Return-original-error-codes-in-bdrv_pread-writ.patch [bz#537077]
  - kvm-qcow2-Fix-error-handling-in-grow_refcount_table.patch [bz#537077]
  - kvm-qcow2-Improve-error-handling-in-update_refcount.patch [bz#537077]
  - kvm-qcow2-Allow-updating-no-refcounts.patch [bz#537077]
  - kvm-qcow2-Don-t-ignore-update_refcount-return-value.patch [bz#537077]
  - kvm-qcow2-Don-t-ignore-qcow2_alloc_clusters-return-value.patch [bz#537077]
  - Resolves: bz#537077
    (error codes aren't always propagated up through the block layer (e.g. -ENOSPC))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-152.el5
changelog:
  - kvm-Revert-Queue-notify-support-for-virtio-block-device.patch [bz#552250]
    (Reverts kvm-Queue-notify-support-for-virtio-block-device.patch)
  - Related: bz#552250
    (Windows virtio block driver performs poorly on small size requests)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-151.el5
changelog:
  - kvm-Fix-cpu-versioning.patch [bz#557327]
  - kvm-reduce-number-of-reinjects-on-ACK.patch [bz#556455]
  - Resolves: bz#556455
    (KVM: WIN7-32bit blue screen (IMAGE_NAME:  ntkrnlmp.exe).)
  - Resolves: bz#557327
    (migration failed with -M rhel5.4.4 between host 5.5 and host 5.4.4)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-150.el5
changelog:
  - kvm-vnc-more-keypad-fixing.patch [bz#497507]
  - kvm-qxl-add-netbooks-common-resolutions.-Rhel-5.5-552240.patch [bz#552240]
  - kvm-block-raw-posix-Abort-on-pread-beyond-end-of-file.patch [bz#515655]
  - Resolves: bz#497507
    (Numeric keypad cannot be used in qemu monitor when using vnc to connect guest.)
  - Resolves: bz#515655
    (Add result test to prevent Infinite loop in raw_pread, reading too large offset)
  - Resolves: bz#552240
    (Spice (QXL) - please add 1024x576 resolution to the driver (netbooks))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-149.el5
changelog:
  - kvm-qemu-qxl-fix-unsafe-rom-data-handling-bug-537888.patch [bz#537888]
  - kvm-qxl-fix-qxl-backwards-migration-to-version-3.patch [bz#537888]
  - kvm-Allow-export-of-sse4.1-sse4.2-cpuid-flags-to-guest.-.patch [bz#518090]
  - Resolves: bz#518090
    ([RFE] KVM should be able to export advanced cpu flags to the guest)
  - Resolves: bz#537888
    (fix unsafe device data handling)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-148.el5
changelog:
  - Updated kversion to 2.6.18-185.el5 to match build root
  - Require qspice-libs to make sure the right libspice.so.0 file is installed
  - Related: bz#555657


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-147.el5
changelog:
  - kvm-block-Introduce-BDRV_O_NO_BACKING.patch [bz#530134]
  - kvm-qemu-img-rebase.patch [bz#530134]
  - kvm-vnc-improve-capslock-handling.patch [bz#517814]
  - kvm-block-Add-bdrv_change_backing_file.patch [bz#530134]
  - kvm-qemu-img-Automatically-detect-block-devices.patch [bz#537655]
  - Resolves: bz#517814
    (Caps Lock the key's appearance  of guest is not synchronous as host's --view kvm with vnc)
  - Resolves: bz#530134
    (RFE - In-place backing file format change)
  - Resolves: bz#537655
    (qemu-img: error creating a new preallocated volume image on FCP storage)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-146.el5
changelog:
  - Require compatible etherboot-zroms-kvm package
  - Resolves: bz#550053
    (require newer etherboot package that is compatible with new pxe ROM paths)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-145.el5
changelog:
  - kvm-fix-barriers-support-during-migration.patch [bz#549938]
  - kvm-Add-machine-name-alias-support.patch [bz#553187]
  - kvm-make-pc-an-alias-of-rhel5.4.0.patch [bz#553187]
  - kvm-Introduce-rhel5.4.4-machine-type.patch [bz#553187]
  - Resolves: bz#549938
    (Maintain barrier state after migration)
  - Resolves: bz#553187
    (Add rhel-5.4.4 support to rhel5.5.0)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-144.el5
changelog:
  - kvm-kernel-KVM-x86-Add-KVM_GET-SET_VCPU_EVENTS.patch [bz#541084]
  - Resolves: bz#541084
    (KVM: x86: Add KVM_GET/SET_VCPU_EVENTS)
  - kvm-x86-Add-support-for-VCPU-event-states.patch [bz#541084]
  - kvm-BZ550265-compute-checksum-for-roms-bigger-than-a-seg.patch [bz#550265]
  - kvm-Fix-a-race-in-the-device-that-cuased-guest-stack-on-.patch [bz#503759]
  - kvm-Queue-notify-support-for-virtio-block-device.patch [bz#552250]
  - kvm-The-driver-device-pair-does-not-have-a-reset-option-.patch [bz#550755]
  - kvm-The-driver-device-pair-does-not-have-a-reset-option-2.patch [bz#550755]
  - Resolves: bz#503759
    (hypercall device - Vm becomes non responsive on Sysmark benchmark (when more than 7 vm's running simultaneously))
  - Resolves: bz#541084
    (KVM: x86: Add KVM_GET/SET_VCPU_EVENTS)
  - Resolves: bz#550265
    (gPXE fails to PXE boot on e1000 virtual NIC)
  - Resolves: bz#550755
    (Hypercall driver doesn't reset device on power-down)
  - Resolves: bz#552250
    (Windows virtio block driver performs poorly on small size requests. In addition, cpu usage on the quest side is very high while handling write requests.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-143.el5
changelog:
  - kvm-Documentation-Fix-description-of-cache-option-for-dr.patch [bz#545194]
  - kvm-monitor-allow-device-to-be-ejected-if-no-disk-is-ins.patch [bz#539250]
  - Resolves: bz#539250
    (Cannot eject cd-rom when configured to host cd-rom)
  - Resolves: bz#545194
    (Discrepancy between man page and source code for qcow2 with regards to default value used when no explicit caching is specified)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-142.el5
changelog:
  - Updated kversion to 2.6.18-183.el5 to match build root
  - kvm-removing-debugging-printf-leftover.patch [bz#530533]
  - kvm-enable_write_cache-is-one-bool-no-need-for-32bits.patch [bz#549938]
  - kvm-virtio_blk-save-if-cache-was-enabled.patch [bz#549938]
  - kvm-ide-propagate-version_id-to-all-save-load-functions.patch [bz#549938]
  - kvm-ide-save-if-cache-was-enabled.patch [bz#549938]
  - kvm-savevm-add-version_id-to-all-savevm-functions.patch [bz#541731]
  - kvm-We-need-current-machine-defined-sooner.patch [bz#541731]
  - kvm-Add-support-for-DeviceVersion-to-machine-type.patch [bz#541731]
  - kvm-Introduce-rhel5.4.0-machine-type.patch [bz#541731]
  - kvm-Introduce-rhel-5.5.0-machine-type.patch [bz#541731]
  - kvm-cpu-for-x86-don-t-save-new-fields-if-version-8.patch [bz#541731]
  - kvm-RHEL5.4-needs-cpu-at-version-7.patch [bz#541731]
  - kvm-RHEL-5.4.0-don-t-have-kvmclock.patch [bz#541731]
  - kvm-RHEL5.4-needs-ide-at-device-version-3.patch [bz#541731]
  - kvm-RHEL5.4-needs-virtio-blk-at-device-version-2.patch [bz#541731]
  - kvm-make-5.4.0-machine-the-default.patch [bz#541731]
  - Resolves: bz#530533
    (debug message is displayed when save VM state into a compressed file)
  - Resolves: bz#541731
    (kvm: migration: mechanism to make older savevm versions to be emitted on some cases)
  - Resolves: bz#549938
    (Maintain barrier state after migration)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-140.el5
changelog:
  - kvm-kernel-KVM-MMU-remove-prefault-from-invlpg-handler.patch [bz#531887]
  - Resolves: bz#531887
    (BSOD BAD_POOL_HEADER STOP 0x19 during boot of Windows Server 2008 R2 installer)
  - kvm-Make-SMBIOS-pass-MS-SVVP-test.patch [bz#537178]
  - kvm-bz-545136-whitelist-host-virtio-networking-features.patch [bz#545136]
  - kvm-fix-rtc-td-hack-on-host-without-high-res-timers.patch [bz#543137]
  - kvm-v2-RHEL5-BZ543979-get-roms-more-room.-Glauber-Costa.patch [bz#543979]
  - Resolves: bz#537178
    (Need to generate SMBIOS table 4 data for windows guests)
  - Resolves: bz#543137
    (time drift in win2k364 KVM guest)
  - Resolves: bz#543979
    (gPXE fails to PXE boot on e1000 virtual NIC)
  - Resolves: bz#545136
    (whitelist host virtio networking features)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-139.el5
changelog:
  - Updated kversion to 2.6.18-182.el5 to match build root
  - Require etherboot directly, to make sure it is installed by default
  - Resolves: bz#546019


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-138.el5
changelog:
  - Updated kversion to 2.6.18-181.el5 to match build root
  - Use the new gpxe/etherboot configurable pxe-zroms-qemu system
  - Resolves: bz#546019


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-137.el5
changelog:
  - Updated kversion to 2.6.18-176.el5 to match build root
  - kvm-kernel-KVM-x86-make-double-triple-fault-promotion-generic-t.patch [bz#532086]
  - kvm-kernel-KVM-x86-raise-TSS-exception-for-NULL-CS-and-SS-segme.patch [bz#532086]
  - kvm-kernel-KVM-x86-emulator-limit-instructions-to-15-bytes.patch [bz#541165]
  - Resolves: bz#532086
    (Rhev-Block driver causes  'unhandled vm exit' with 32bit win2k3r2sp2 Guest VM  on restart)
  - Resolves: bz#541165
    (CVE-2009-4031 kernel: KVM: x86 emulator: limit instructions to 15 bytes [rhel-5.5])

  - kvm-qcow2-Store-exact-backing-format-length.patch [bz#540893]
  - kvm-qcow-qcow2-Add-bdrv_aio_flush.patch [bz#542923]
  - Resolves: bz#540893
    (qemu-img: snapshot info error)
  - Resolves: bz#542923
    (Get segmentation fault when running with ide block on kvm-83-136.el5)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-136.el5
changelog:
  - Update kversion to 2.6.18-175.el5 to match build root
  - kvm-block-use-fdatasync-instead-of-fsync-if-possible.patch [bz#537646]
  - kvm-block-add-aio_flush-operation.patch [bz#537646]
  - kvm-ide-use-bdrv_aio_flush.patch [bz#537646]
  - kvm-virtio-blk-add-volatile-writecache-feature.patch [bz#537646]
  - kvm-qcow2-Fix-grow_refcount_table-error-handling.patch [bz#537075]
  - kvm-virtio-blk-Stop-VM-on-read-errors.patch [bz#531827]
  - kvm-ide-Stop-VM-on-read-errors.patch [bz#531827 bz#531827 bz#533390]
  - kvm-slirp-Reassign-same-address-to-same-DHCP-client.patch [bz#531631]
  - kvm-block-add-enable_write_cache-flag.patch [bz#537646]
  - kvm-build-fix-add-pci_get_bus_and_slot-to-compat_apis.patch [bz#539589]
  - kvm-Fix-race-between-migration-and-cpu-main-loop.patch [bz#533090]
  - Resolves: bz#531631
    (Windows XP unattended install doesn't get an IP address after rebooting, if using -net user)
  - Resolves: bz#531827
    (O/S Filesystem Corruption with RHEL-5.4 on a RHEV Guest)
  - Resolves: bz#533090
    (Windows Server 2008 R2 shutdown hangs after restore from migration)
  - Resolves: bz#533390
    (RHEL5.4 VM image corruption with an IDE v-disk)
  - Resolves: bz#537075
    (qcow2: infinite recursion on grow_refcount_table() error handling)
  - Resolves: bz#537646
    (backports of qemu barrier support)
  - Resolves: bz#539589
    (kvm can't build against kernel-2.6.18-174.el5)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-135.el5
changelog:
  - kvm-kernel-531701-KERNEL-v2-allow-userspace-to-adjust-kvmclock-.patch [bz#531701]
  - kvm-531701-properly-save-kvm-system-time-msr-registers.patch [bz#531701]
  - kvm-BZ531701-get-and-set-clock-upon-migration.patch [bz#531701]
  - Resolves: bz#531701
    (pvclock msr values are not preserved across remote migration)

  - Filter out ksym dependencies only known non-whitelisted symbols [bz#533197]
  - Resolves: bz#533197


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-134.el5
changelog:
  - kvm-kernel-allow-to-address-up-to-48-bits-of-physical-memory-in.patch [bz#516545 bz#517223]
  - Resolves: bz#516545
    (qemu-kvm crashed when setting 32bitwin28k with 64G ram)
  - Related: bz#517223
    (BUG: warning at /builddir/build/BUILD/kvm-83-maint-snapshot-20090205/kernel-/x86/x86.c:240/kvm_queue_exception_e() (Tainted: G     ))

  - kvm-Add-smp_call_function_many-to-compat_apis.patch [bz#533059]
  - Resolves: bz#533059
    (kvm modules can't be built against latest kernel-devel package)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-133.el5
changelog:
  - Update kversion to 2.6.18-172.el5 to match build root
  - kvm-kernel-KVM-Timer-event-should-not-unconditionally-unhalt-vc.patch [bz#492663]
  - kvm-kernel-KVM-Fix-interrupt-unhalting-a-vcpu-when-it-shouldn-t.patch [bz#502086]
  - Resolves: bz#492663
    (KVM: Timer event should not unconditionally unhalt vcpu)
  - Resolves: bz#502086
    (KVM: Fix interrupt unhalting a vcpu when it shouldn't)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-132.el5
changelog:
  - kvm-keep-initrd-in-below-4g-area.patch [bz#529694]
  - Resolves: bz#529694
    (-initrd is broken with > 4GB guests)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-131.el5
changelog:
  - kvm-kernel-KVM-SVM-Reset-cr0-properly-on-vcpu-reset.patch [bz#525699]
  - Resolves: bz#525699
    (x86_64 guest hang when set guest's cpu1 online on AMD host)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-130.el5
changelog:
  - Update kversion to 2.6.18-168.el5 to match kernel-devel on build root
  - kvm-kernel-get_tss_base_addr-should-return-gpa_t-type.patch [bz#516762]
  - Resolves: bz#516762
    (qemu aborted when restart 32bitwin23k with more than 4G mem in intel host.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-129.el5
changelog:
  - kvm-Fix-VDI-audio-stop.patch [bz#520394]
  - Resolves: bz#520394
    (KVM : QEMU-Audio attempting to stop unactivated audio device (snd_playback_stop: ASSERT playback_channel->base.active failed).)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-128.el5
changelog:
  - kvm-fix-kvm_arch_save_regs-potential-stack-corruptio.patch [bz#528917]
  - Resolves: bz#528917
    (qemu-kvm : msrs[] array in kvm_arch_save_regs() too small / may cause stack corruption)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-127.el5
changelog:
  - kvm-RHEL-5.X-5.4.Z-Makefile-fix-ksm-dir-has-no-ARCH-pref.patch [bz#527722]
  - Resolves: bz#527722
    (Build tree for RHEL 5.X and RHEL 5.4.z contains build bugs)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-126.el5
changelog:
  - Add --disable-pcspk option to ./configure [bz#516672]
  - Resolves: bz#516672
    (Disable unused/unsupported features on qemu-kvm)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-125.el5
changelog:
  - kvm-kernel-KVM-VMX-Adjust-rflags-if-in-real-mode-emulation.patch [bz#517324]
  - kvm-kernel-KVM-When-switching-to-a-vm8086-task-load-segments-as.patch [bz#517324]
  - kvm-kernel-RHEL5.4-defined-this-constants-in-asm-msr.h.patch [bz#515749]
  - kvm-kernel-For-RHEl5.x-return-types-of-hrtimers-is-int.patch [bz#515749]
  - kvm-kernel-KVM-VMX-flush-TLB-with-INVEPT-on-cpu-migration.patch [bz#518081]
  - kvm-kernel-KVM-Fix-task-switch-back-link-handling-v2-including-.patch [bz#517324]
  - Resolves: bz#515749
    (Remove warnings from kvm compilation)
  - Resolves: bz#517324
    (KVM does not implement proper support for hardware task linking when using vm8086 mode)
  - Resolves: bz#518081
    (vmentry fails with ept misconfig)

  - kvm-test-access-remove-warning.patch [bz#515749]
  - kvm-test-emulator-remove-unused-variable.patch [bz#515749]
  - kvm-test-vmexit-remove-warning-undefined-printf.patch [bz#515749]
  - kvm-external-module-compat-bring-c89-prototypes-to-intel.patch [bz#515749]
  - Resolves: bz#515749
    (Remove warnings from kvm compilation)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-124.el5
changelog:
  - kvm-kernel-KVM-x86-verify-MTRR-PAT-validity.patch [bz#526837]
  - Resolves: bz#526837
    (KVM: x86: verify MTRR/PAT validity (upstream backport))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-123.el5
changelog:
  - kvm-Disable-help-for-vmware-vga-and-enable-nesting.patch [bz#516672]
  - kvm-Now-that-we-have-disable-bluetooth-disable-also-bt-c.patch [bz#516672]
  - kvm-migration_notify_register-is-only-used-by-spice.patch [bz#516672]
  - kvm-Fix-typo-should-have-been-from-the-beggining.patch [bz#516672]
  - kvm-Don-t-compile-drivers-that-are-not-used-in-a-pc.patch [bz#516672]
  - kvm-Add-option-to-disable-pcspk.patch [bz#516672]
  - kvm-usb_bluez-depends-of-bluez.patch [bz#516672]
  - Resolves: bz#516672
    (Disable unused/unsupported features on qemu-kvm)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-122.el5
changelog:
  - Update kversion to 2.6.18-164.2.1.el5 to match kernel-devel on build root
  - kvm-libkvm-Add-a-wrapper-for-an-ioctl-for-the-KVM_SE.patch [bz#508040]
  - kvm-Fetch-sub-leaf-cpuid-values-for-functions-4-0xb-0xd.patch [bz#508040]
  - kvm-Initialize-entire-cpuid2-structure.patch [bz#508040]
  - kvm-extend-smp-parsing-to-include-cores-and-threads-opti.patch [bz#508040]
  - kvm-push-CPUID-level-to-4-to-allow-Intel-multicore-decod.patch [bz#508040]
  - kvm-set-CPUID-bits-to-present-cores-and-threads-topology.patch [bz#508040]
  - kvm-allow-overriding-of-CPUID-level-on-command-line.patch [bz#508040]
  - kvm-force-enable-options.patch [bz#489900]
  - kvm-move-kvm-extra-features-detection-after-kvm-detectio.patch [bz#489900]
  - kvm-add-options-to-request-kvm-pit-and-device-assignment.patch [bz#489900]
  - Added configure options to make build dependency checks more reliable:
    --enable-kvm --enable-qxl --enable-spice --enable-gcrypt --enable-vnc-tls
    [bz#489900]
  - Resolves: bz#489900
    (kvm configure should abort if a required option failed)
  - Resolves: bz#508040
    (Windows XP not using all CPUS)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-121.el5
changelog:
  - Use rtl8029.zrom for ne2k_pci PXE booting (bz#526124)
  - Resolves: bz#526124
    (ne model failed to get ip address)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-120.el5
changelog:
  - kvm-Add-host_device-support-to-qemu-img.-Nolan-Leake.patch [bz#511072 bz#511072]
  - kvm-raw-posix-Handle-errors-in-raw_create.patch [bz#511072 bz#511072]
  - Resolves: bz#511072
    (KVM - qemu-img fail to copy a RAW format image over FCP storage)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-119.el5
changelog:
  - kvm-Use-kernel-s-smp_call_function_single-instead-of-emu.patch [bz#524970]
  - kvm-Properly-handle-pthread_cond_timedwait-timing-out.patch [bz#525114]
  - kvm-fix-segfault-in-setting-migration-speed.patch [bz#522887]
  - Resolves: bz#522887
    (Call to migrate_set_speed after a migrate_cancel causes segmentation fault in kvm)
  - Resolves: bz#524970
    (Guest single-cpu IPI leads to a global IPI on host)
  - Resolves: bz#525114
    (KVM QEMU:RHEL OS VM's became not-responding and stopped answering monitor Commands.)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-118.el5
changelog:
  - kvm-qemu-virtio-net-do-not-return-stack-pointer-from-fun.patch [bz#521829]
  - Resolves: bz#521829
    (QEMU crash (during virtio-net WHQL tests for Win2008 R2))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-117.el5
changelog:
  - kvm-kernel-KVM-VMX-Optimize-vmx_get_cpl.patch [bz#524126]
  - kvm-kernel-KVM-x86-Disallow-hypercalls-for-guest-callers-in-rin.patch [bz#524126]
  - kvm-kernel-KVM-VMX-Don-t-intercept-MSR_KERNEL_GS_BASE-v2.patch [bz#488130 bz#488130]
  - Resolves: bz#488130
    (KVM: VMX: Don't intercept MSR_KERNEL_GS_BASE (upstream patch))
  - Resolves: bz#524126
    (kernel: KVM: x86: Disallow hypercalls for guest callers in rings > 0 [rhel-5.5])

  - kvm-qcow2-Change-cluster-size-to-64k.patch [bz#502809]
  - kvm-Fix-for-Bug-510706-qemu-kvm-segfault-when-using-i825.patch [bz#510706]
  - Resolves: bz#502809
    ([FEAT] Change qcow2 cluster size to 64k)
  - Resolves: bz#510706
    (qemu-kvm segfault when using i82551 vnic)


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-116.el5
changelog:
  - kvm-kernel-Revert-KVM-VMX-Don-t-intercept-MSR_KERNEL_GS_BASE.patch [bz#488130]
    kvm-kernel-KVM-VMX-Don-t-intercept-MSR_KERNEL_GS_BASE.patch was broken
  - Related: bz#488130
    (KVM: VMX: Don't intercept MSR_KERNEL_GS_BASE (upstream patch))


author: Eduardo Habkost <ehabkost@redhat.com> - kvm-83-115.el5
changelog:
  - kvm-kernel-KVM-VMX-Don-t-intercept-MSR_KERNEL_GS_BASE.patch [bz#488130]
  - Resolves: bz#488130
    (KVM: VMX: Don't intercept MSR_KERNEL_GS_BASE (upstream patch))
  - kvm-Use-quiet-command-to-get-a-cleaner-build-output.patch [bz#515749]
  - kvm-This-function-is-not-used-anymore.-It-is-opencoded-i.patch [bz#515749]
  - kvm-fds-variable-is-not-used.-Remaining-of-a-missmerge.patch [bz#515749]
  - kvm-use-proper-C89-declarations.patch [bz#515749]
  - kvm-pit-is-used-in-two-cases-not-easy-way-to-define-.patch [bz#515749]
  - kvm-In-qemu-all-buffers-are-uint8_t-not-char.patch [bz#515749]
  - kvm-kvm_allowed-is-exported-in-qemu-kvm.h-and-it-is-used.patch [bz#515749]
  - kvm-add-three-missing-static-modifiers-for-local-functio.patch [bz#515749]
  - kvm-put-declaration-of-enable_async_notification-in-a-pr.patch [bz#515749]
  - kvm-move-several-kvm-variables-after-qemu-kvm.h-include-.patch [bz#515749]
  - kvm-mark-static-do_block_set_watermark.patch [bz#515749]
  - kvm-txbufferaccu_offset-and-irq-fields-were-save-load-as.patch [bz#515749]
  - kvm-mp_state-is-treated-as-unsigned-int-uint32_t-for-sav.patch [bz#515749]
  - kvm-hp_reset-should-have-type-QEMUResetHandler.patch [bz#515749]
  - kvm-make-static-lsi_scsi_uninit.patch [bz#515749]
  - kvm-assigned_dev_data-was-not-used-anywhere.patch [bz#515749]
  - kvm-bios_enabled-is-load-saved-as-uint32_t-declare-it-as.patch [bz#515749]
  - kvm-remove-unused-variable.patch [bz#515749]
  - kvm-add-prototype-for-kvm_add_ioperm_data.patch [bz#515749]
  - kvm-removed-duplicated-re-declaration-of-kvm_context-2.patch [bz#515749]
  - kvm-make-static-update_vbios_real_tpr.patch [bz#515749]
  - kvm-fix-var-may-be-used-uninitialized.patch [bz#515749]
  - kvm-make-local-functions-static.patch [bz#515749]
  - kvm-remove-unused-variable-opt_rom_offset.patch [bz#515749]
  - kvm-removed-duplicated-re-declaration-of-kvm_context.patch [bz#515749]
  - kvm-perror-is-defined-in-stdio.h-that-got-included-indir.patch [bz#515749]
  - kvm-remove-unused-variable-cpu.patch [bz#515749]
  - kvm-nb_sectors-should-be-an-uint64_t.patch [bz#515749]
  - kvm-uhci_reset-should-have-QEMUResetHandler-type.patch [bz#515749]
  - kvm-initialize-blen-and-pa-variables-to-0.patch [bz#515749]
  - kvm-we-got-smp_cpus-declaration-through-sysemu.h.patch [bz#515749]
  - kvm-int-and-long-masked-as-pointers.-cast-to-avoid-warni.patch [bz#515749]
  - kvm-we-got-vm_running-declaration-through-sysemu.h.patch [bz#515749]
  - kvm-BZ503367-obey-S-on-migration.patch [bz#503367 bz#503367]
  - kvm-reason-paramenter-only-exist-in-newer-qemu-s-not-our.patch [bz#515749]
  - kvm-Fix-AltGr-and-dead-keys-with-VNC.patch [bz#521835]
  - kvm-time_t-is-a-long-in-x86_64.patch [bz#515749]
  - kvm-bugzilla-504237-changed-size-of-variables-to-uint64_.patch [bz#515749]
  - Resolves: bz#503367
    (After migration, paused VM is running on destination)
  - Resolves: bz#515749
    (Remove warnings from kvm compilation)
  - Resolves: bz#521835
    (German keymap using KVM+VNC missing some keys)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-114.el5
changelog:
  - kvm-kernel-reset-hflags-on-cpu-reset.patch [bz#502543 bz#521749]
  - Resolves: bz#502543
    (Windows 2008 R2 KVM guest can not restart when set it as multiple cpus)
  - Related: bz#521749
    (Guest Window2008-R2-datacenter installation is stopped at  step "Setup will continue after restarting your computer")


author: Eduardo Habkost <ehabkost@redhat.com> - 83-113.el5
changelog:
  - kvm-qcow2-Refactor-update_refcount.patch [bz#518169]
  - kvm-qcow2-Update-multiple-refcounts-at-once.patch [bz#518169]
  - kvm-Combined-patch-of-two-upstream-commits-the-second-fi.patch [bz#518169]
  - kvm-alloc_cluster_link_l2-Write-complete-sectors.patch [bz#518169]
  - kvm-update_refcount-Write-complete-sectors.patch [bz#518169]
  - Resolves: bz#518169
    (Bad qcow2 performance with cache=off)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-112.el5
changelog:
  - kvm-kernel-Fix-coalesced-interrupt-reporting-in-IOAPIC.patch [bz#521025]
  - Resolves: bz#521025
    (rtc-td-hack stopped working. Time drifts in windows)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-111.el5
changelog:
  - kvm-Fix-VM-state-change-handlers-running-out-of-order.patch [bz#514522]
  - kvm-Revert-Work-around-VM-state-change-handlers-running-.patch [bz#514522]
  - Resolves: bz#514522
    (QEMU: Fix VM change state issue on IO errors)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-110.el5
changelog:
  - Update kversion to 2.6.18-164.el5 to match kernel-devel on build root
  - kvm-kernel-Backport-44882eed2ebe7f75f8cdae5671ab1d6e0fa40dbc.patch [bz#515549]
  - kvm-kernel-kvm-fix-ack-not-being-delivered-when-msi-present.patch [bz#515549]
  - kvm-kernel-kvm-fix-build-with-defconfig.patch [bz#515549]
  - Resolves: bz#515549
    (upstream qemu issues on rhel 5.4)
  - kvm-Remove-initrd-warning-message.patch [bz#512672]
  - Resolves: bz#512672
    (Remove initrd warning message)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-109.el5
changelog:
  - kvm-kernel-add-nmi-support-to-svm.patch [bz#502543 bz#503322 bz#492290]
  - kvm-kernel-VMX-Fix-cr8-exiting-control-clobbering-by-EPT.patch [bz#520285]
  - Resolves: bz#492290
    (KVM: XP virtio-net tests fail with BSOD on AMD host (due to lack of NMI injection masking ability))
  - Resolves: bz#502543
    (Windows 2008 R2 KVM guest can not restart when set it as multiple cpus)
  - Resolves: bz#503322
    (NMI filtering for AMD (Windows 2008 R2 KVM guest can not restart when set it as multiple cpus))
  - Resolves: bz#520285
    (windows 64 bit does vmexit on each cr8 access.)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-108.el5
changelog:
  - kvm-kernel-KVM-MMU-make-__kvm_mmu_free_some_pages-handle-empty-.patch [bz#519397]
  - Resolves: bz#519397
    (KVM: MMU: make __kvm_mmu_free_some_pages handle empty list (upstream backport))


author: Eduardo Habkost <ehabkost@redhat.com> - 83-107.el5
changelog:
  - kvm-kernel-KVM-MMU-fix-bogus-alloc_mmu_pages-assignment.patch [bz#487857]
  - Resolves: bz#487857
    (The emulator hung after input "cpu_set 1 online" on qemuMonitor and select "System->Shutdown")


author: Eduardo Habkost <ehabkost@redhat.com> - 83-106.el5
changelog:
  - Update kversion to 2.6.18-162.el5
  - kvm-Initialize-PS2-keyboard-mouse-state-on-reset.patch [bz#515275]
  - Resolves: bz#515275
    (guest not accepting keystrokes or mouse clicks after reboot)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-105.el5
changelog:
  - kvm-kernel-KVM-MMU-handle-n_free_mmu_pages-n_alloc_mmu_pages-in.patch [bz#487857]
  - Resolves: bz#487857
    (The emulator hung after input "cpu_set 1 online" on qemuMonitor and select "System->Shutdown")


author: Eduardo Habkost <ehabkost@redhat.com> - 83-104.el5
changelog:
  - kvm-ide-calls-register_savevm-three-times-for-pci_ide_sa.patch [bz#514887]
  - Resolves: bz#514887
    (Mouse and keyboard of guest are unavailable after migration-[kvm-83-101.el5])


author: Alan Pevec <apevec@redhat.com> 83-103
changelog:
  - Update kversion to 2.6.18-160.el5
  - kvm-qemu-restore-bdrv-fat.patch [bz#514785]
  - Resolves: bz#514785
    (KVM: support for -fda fat:floppy was removed - needed for RHEVM)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-101.el5
changelog:
  - kvm-make-windows-notice-media-change.patch [bz#513991]
  - kvm-Work-around-VM-state-change-handlers-running-out-of-.patch [bz#511038]
  - Resolves: bz#511038
    (QEMU: crash because of calling stop twice (QXL assertion))
  - Resolves: bz#513991
    (Qemu: change CD right after eject does not work)
  - Disable nbd on configure [bz#512837]
  - Resolves: bz#512837
    (Disable unused/unsupported features on qemu-kvm)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-100.el5
changelog:
  - kvm-Compile-out-NBD-removal.patch [bz#512837]
  - Resolves: bz#512837
    (Disable unused/unsupported features on qemu-kvm)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-99.el5
changelog:
  - kvm-Reset-irq-line-on-qxl-and-vdi-on-guest-reset.patch [bz#514526]
  - kvm-fix-for-bug-508664-KVM-could-not-read-the-boot-disk.patch [bz#508664]
  - Resolves: bz#508664
    (KVM: "could not read the boot disk" error message after running "Sys Mark" benchmark on Windows Guest)
  - Resolves: bz#514526
    (Reset qxl, vdi irq line on guest reset)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-98.el5
changelog:
  - kvm-add-option-to-disable-smb-user-directories.patch [bz#512837]
  - kvm-add-option-to-disable-scsi.patch [bz#512837]
  - kvm-disable-isapc.patch [bz#512837]
  - kvm-add-option-to-disable-kvm-nested.patch [bz#512837]
  - kvm-add-option-to-disable-usb-mass-storage-devices.patch [bz#512837]
  - kvm-add-option-to-disable-usb-wacom-tablets.patch [bz#512837]
  - kvm-add-option-to-disable-usb-serial.patch [bz#512837]
  - kvm-add-option-to-disable-usb-net.patch [bz#512837]
  - kvm-add-option-to-disable-usb-bluez.patch [bz#512837]
  - kvm-change-qcow2-default-cache-mode-to-none.patch [bz#512837]
  - kvm-add-option-to-disable-all-cpu-s-model-different-from.patch [bz#512837]
  - kvm-add-option-to-disable-vmware-drivers.patch [bz#512837]
  - kvm-Enable-configure-out-cards-that-we-don-t-support.patch [bz#512837]
  - kvm-Be-able-to-compile-out-bluetooth.patch [bz#512837]
  - kvm-Disable-unsupported-block-formats.patch [bz#512837]
  - New options to configure to disable unsupported features:
    --disable-smb --disable-scsi --disable-isapc --disable-kvm-nested
    --disable-usb-msd --disable-usb-wacom --disable-usb-serial
    --disable-usb-net --disable-usb-bluez --disable-vmware
    --disable-x86-non-generic-cpus --disable-bluez --audio-card-list=ac97
    --disable-curses
    [bz#512837]
  - Resolves: bz#512837
    (Disable unused/unsupported features on qemu-kvm)
  - kvm-add-workaround-for-libvirt-bug.patch [bz#499405]
  - Resolves: bz#499405
    (KVM: add manufacturer and product name info to guest SMBIOS)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-97.el5
changelog:
  - kvm-kernel-KVM-Fix-dirty-bit-tracking-for-slots-with-large-page.patch [bz#512712]
  - kvm-kernel-Avoid-redelivery-of-edge-interrupt-before-next-edge.patch [bz#513946]
  - Resolves: bz#512712
    (Support huge pages in KVM)
  - Resolves: bz#513946
    (keyboard is slow in windows SMP guest.)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-96.el5
changelog:
  - kvm-kernel-KVM-take-mmu_lock-when-updating-a-deleted-slot.patch [bz#513098]
  - kvm-kernel-KVM-SVM-force-new-asid-on-vcpu-migration.patch [bz#513394]
  - Resolves: bz#513098
    (KVM: take mmu_lock when updating a deleted slot (upstream backport))
  - Resolves: bz#513394
    (KVM: SVM: force new asid on vcpu migration (upstream backport))
  - kvm-Fix-hdev_open-error.patch [bz#513252]
  - Resolves: bz#513252
    (Asignation instead of comparation inside if)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-95.el5
changelog:
  - kvm-enable-rtc-hack-by-default.patch [bz#512898]
  - Resolves: bz#512898
    (Enable rtd-hack by default)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-94.el5
changelog:
  - Update kversion to 2.6.18-159.el5
  - kvm-virtio_net-remove-the-tx-mitigation-timer.patch [bz#504647]
  - Resolves: bz#504647
    (Low UDP throughput from Linux KVM guest)
  - kvm-Use-pci_reset_function-in-RHEL5.4-so-FLR-done-proper.patch [bz#510806]
  - Resolves: bz#510806
    (KVM: invoke pci_reset_function() when PCI device assigned or deassigned to a guest)


author: Eduardo Habkost <ehabkost@redhat.com> - 83-93.el5
changelog:
  - kvm-fix-for-bug-507942-bad-macaddr-of-e1000-in-Windows-2.patch [bz#507942]
  - kvm-Set-the-iothread-s-eventfd-pipe-descriptors-to-non-b.patch [bz#511199 bz#507659 bz#511031]
  - kvm-Disable-hpet-by-default-there-is-no-way-to-enable-it.patch [bz#512894]
  - Resolves: bz#507659
    - Migrate command not  end and vm  responseless on  Nahalem host
  - Resolves: bz#507942
    - QEMU: Windows 2003's built-in driver for e1000 does not work with QEMU's e1000  implementation
  - Resolves: bz#511199
    - KVM : Failed to migrate VM to a loaded Host
  - Resolves: bz#512894
    - Disable hpet by default
  - Related: bz#511031
    - qemu-kvm hang during migration when stress test is running in the guest


author: Eduardo Habkost <ehabkost@redhat.com> - 83-92.el5
changelog:
  - kvm-kernel-KVM-fix-missing-locking-in-alloc_mmu_pages.patch [bz#510770 bz#505629]
  - Resolves: bz#505629
    - KVM: MMU: protect kvm_mmu_change_mmu_pages with mmu_lock (upstream backport)
  - Resolves: bz#510770
    - BUG: soft lockup - CPU#4 stuck for 10s! on kksmd


author: Eduardo Habkost <ehabkost@redhat.com> - 83-91.el5
changelog:
  - kvm-kernel-MMU-limit-rmap-chain.patch [bz#508776]
  - kvm-kvmtrace-update-formats.patch [bz#508776]
  - Resolves: bz#508776 - KVM: MMU: limit rmap chain


author: Eduardo Habkost <ehabkost@redhat.com> - 83-90.el5
changelog:
  - Update kversion to 2.6.18-158.el5
  - kvm-net-add-net-tap-sndbuf-option-with-a-sensible-defaul.patch [bz#508861]
  - Resolves: bz#508861 - kvm: add tap send buffer limit to help UDP networking


author: Eduardo Habkost <ehabkost@redhat.com> - 83-89.el5
changelog:
  - kvm-kernel-KVM-Introduce-set-get-_interrupt_shadow.patch [bz#509208]
  - kvm-kernel-KVM-Deal-with-interrupt-shadow-state-for-emulated-in.patch [bz#509208]
  - Resolves: bz#509208 - KVM fixes to make gPXE boot ROMs work
  - kvm-Windows-virtio-driver-cannot-pass-WHQL-certification.patch [bz#497058]
  - Resolves: bz#497058 - Change virtio-blk pci dubclass to PCI_CLASS_STORAGE_SCSI


author: Eduardo Habkost <ehabkost@redhat.com> - 83-88.el5
changelog:
  - kvm-KSM-suspend-fix.patch [bz#505440]
  - Resolves: bz#505440 - Panic on suspend with KSM module loaded


author: Eduardo Habkost <ehabkost@redhat.com> - 83-87.el5
changelog:
  - kvm-kernel-KVM-limit-lapic-periodic-timer-frequency.patch [bz#510087]
  - Resolves: bz#510087 - KVM: limit lapic periodic timer frequency


author: Eduardo Habkost <ehabkost@redhat.com> - 83-86.el5
changelog:
  - kvm-fix-bug-506375.patch [bz#506375]
  - Resolves: bz#506375 - ksm latency issue when killing guests


author: Eduardo Habkost <ehabkost@redhat.com> - 83-85.el5
changelog:
  - Update kversion to 2.6.18-157.el5
  - kvm-kernel-KVM-SVM-Remove-port-80-passthrough-upstream-backport.patch [bz#507730]
  - kvm-kernel-KVM-protect-concurrent-make_all_cpus_request-upstrea.patch [bz#507733]
  - Resolves: bz#507730 - KVM: SVM: Remove port 80 passthrough (upstream backport)
  - Resolves: bz#507733 - KVM: protect concurrent make_all_cpus_request (upstream backport)
  - kvm-make-vnc-socket-non-blocking.patch [bz#507880]
  - kvm-provide-stop-reason-on-demand.patch [bz#505999]
  - kvm-Change-default-CPU-model-to-model-6-skype-fix-2.patch [bz#508623]
  - Resolves: bz#505999 - pause reason not stored by qemu
  - Resolves: bz#507880 - qemu hangs during VNC connection from RHEVM
  - Resolves: bz#508623 - Only 1 processor can be detected in "systeminfo" of win2k3 guest with -smp 2 and ACPI multiprocessor HAL.


author: Eduardo Habkost <ehabkost@redhat.com> - 83-84.el5
changelog:
  - kvm-net-avoid-leaking-VLANClientState-on-PCI-NIC-hot-rem.patch [bz#500977 bz#500978 bz#500980]
  - kvm-Fix-rtl8139-segfault-during-live-migrate-after-NIC-h.patch [bz#500978]
  - kvm-Fix-ne2k_pci-segfault-during-live-migrate-after-NIC-.patch [bz#500977]
  - kvm-Fix-eepro100-segfault-during-live-migrate-after-NIC-.patch [bz#500980]
  - Resolves: bz#500977 - ne2k-pci segfault during live migrate after NIC hot-unplug
  - Resolves: bz#500978 - Live migration fails after rtl8139 NIC hot-unplug
  - Resolves: bz#500980 - Live migrate fails after i82551 NIC hot-unplug


author: Eduardo Habkost <ehabkost@redhat.com> - 83-83.el5
changelog:
  - Update kversion to 2.6.18-156.el5
  - kvm-kernel-kvm-x86-ignore-reads-to-perfctr-msrs.patch [bz#482423]
  - Resolves: bz#482423 - Kaspersky AV crash the VM after installation
  - kvm-Revert-Disable-virtio-balloon-bz-500453.patch [bz#503790]
  - kvm-Remove-broken-command-line-option-balloon.patch [bz#503790]
  - kvm-New-command-line-option-balloon.patch [bz#503790]
  - Resolves: bz#503790 - virtio balloon: add a command-line option to disable it at runtime


author: Eduardo Habkost <ehabkost@redhat.com> - 83-82.el5
changelog:
  - kvm-bz-505090-Guess-host-device-type-from-requested-gues.patch [bz#505090]
  - kvm-vnc-rework-VncState-release-workflow.patch [bz#505641]
  - Resolves: bz#505090 - Virtual machine fails to start without cdom - qemu: could not open disk image /dev/sr0
  - Resolves: bz#505641 - Remote VNC client can cause any QEMU VNC server to crash with a double-free


author: Eduardo Habkost <ehabkost@redhat.com> - 83-81.el5
changelog:
  - Update kversion to 2.6.18-155.el5
  - kvm-enable-sysenter-on-32bit-guests-skype-fix.patch [bz#504628]
  - Resolves: bz#504628 - Skype crashes on VM.


author: Eduardo Habkost <ehabkost@redhat.com> - 83-80.el5
changelog:
  - kvm-Fix-vga_screen_dump_blank-PPM-generation-bz-500717.patch [bz#500717]
  - kvm-Add-qemu-img-check-subcommand.patch [bz#506017]
  - Resolves: bz#500717 - qemu-kvm can generate invalid screendumps during reboot
  - Resolves: bz#506017 - 'qemu-img check' subcommand is not backported


author: Eduardo Habkost <ehabkost@redhat.com> - 83-79.el5
changelog:
  - Update kversion to 2.6.18-154.el5
  - Related: bz#504237 - Pull RHEV bugfixes for RHEL
  - Related: bz#504713 - BIOS bug - processor goes missing with RHEL3U8 boot kernel


author: Eduardo Habkost <ehabkost@redhat.com> - 83-78.el5
changelog:
  - kvm-kernel-KVM-Make-paravirt-tlb-flush-also-reload-the-PAE-PDPT.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes for RHEL
  - kvm-bios-Fix-missing-DMI-table-entries.patch [bz#504713]
  - kvm-Correctly-assign-apic-ids-for-hotplugged-cpus.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes for RHEL
  - Resolves: bz#504713 - BIOS bug - processor goes missing with RHEL3U8 boot kernel


author: Eduardo Habkost <ehabkost@redhat.com> - 83-77.el5
changelog:
  - kvm-kernel-KVM-x86-Ignore-reads-to-K7-EVNTSEL-MSRs.patch [bz#504237]
  - kvm-kernel-KVM-MMU-protect-kvm_mmu_change_mmu_pages-with-mmu_lo.patch [bz#504237]
  - kvm-kernel-KVM-Fix-PDPTR-reloading-on-CR4-writes.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-76.el5
changelog:
  - kvm-Add-reset-to-e1000-nic.patch [bz#504237]
  - kvm-Add-reset-to-rtl8139-nic.patch [bz#504237]
  - kvm-Register-uhci_reset-callback.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-75.el5
changelog:
  - kvm-Add-rtc-reset-function.patch [bz#504237]
  - kvm-fix-unresigered-vbe-physical-mapping-as-reserved-mem.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-74.el5
changelog:
  - Remove /usr/bin/qemu-kvm and keep only /usr/libexec/qemu-kvm
  - Resolves: bz#503955 - Move qemu-kvm to /usr/libexec


author: Eduardo Habkost <ehabkost@redhat.com> - 83-73.el5
changelog:
  - kvm-vdi_port-call-disconnect-on-reset-504463.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-72.el5
changelog:
  - kvm-KSM-avoid-losing-but-no-mem-leak-rmap_items-inside-k.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-71.el5
changelog:
  - kvm-migrate_fd_close-delete-associated-io-handler-before.patch [bz#504237]
  - kvm-qemu-add-notify-command-line-option-to-enable-async-.patch [bz#504237]
  - kvm-migration-exec-notify-upon-successful-completion-of-.patch [bz#504237]
  - kvm-asynchronous-notifications-add-all-event-v3.patch [bz#504237]
  - kvm-exec-migration-handle-EINTR-in-popen_get_buffer-v3.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-70.el5
changelog:
  - kvm-kernel-fix-bug-between-mm_to_kvm-and-kvm_get_kvm-RHEL-5-bac.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-68.el5
changelog:
  - kvm-fix-qemu_aio_flush.patch [bz#504237]
  - kvm-spice-change-vendor-id-504190.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-67.el5
changelog:
  - kvm-doesn-t-build-on-newer-RHEL-5.4-kernels-because-.patch [bz#504047]
  - Resolves: bz#504047 - kvm doesn't build on newer RHEL-5.4 kernels because of get_user_pages_fast()


author: Eduardo Habkost <ehabkost@redhat.com> - 83-66.el5
changelog:
  - Move qemu-kvm to /usr/libexec, and make /usr/bin/qemu-kvm a symlink to it
  - Related: bz#503955
  - Resolves: bz#504237


author: Eduardo Habkost <ehabkost@redhat.com> - 83-65.el5
changelog:
  - kvm-kernel-Merge-kvm_ioapic_get_delivery_bitmask-into-kvm_get_i.patch [bz#504018]
  - Resolves: bz#504018 - kernel oops at kvm_get_intr_delivery_bitmask+0x4e/0x86
  - kvm-qxl-fix-message-flood-in-qxl_display_update-501190.patch [bz#504237]
  - kvm-fix-bigmem-offset-calculation-for-qxl.patch [bz#504237]
  - kvm-add-non-arbitrary-migration-stop-condition.patch [bz#504237]
  - kvm-set-migration-max-downtime.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-64.el5
changelog:
  - Update kversion to 2.6.18-152.el5
  - Related: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-63.el5
changelog:
  - kvm-kernel-KVM-x86-check-for-cr3-validity-in-mmu_alloc_roots.patch [bz#504237]
  - kvm-augment-info-migrate-with-page-status.patch [bz#504237]
  - kvm-introduce-set_rate_limit-function-for-QEMUFile.patch [bz#504237]
  - kvm-allow-changing-the-speed-of-a-running-migration.patch [bz#504237]
  - kvm-remove-duplicated-code.patch [bz#504237]
  - kvm-only-execute-lapic-load-when-cpu-is-already-initiali.patch [bz#504237]
  - kvm-make-sure-kvm_vpu_init-is-the-last-thing-called-in-c.patch [bz#504237]
  - kvm-Prevent-CD-ROM-media-eject-while-device-is-locked.patch [bz#504237]
  - kvm-KSM-sync-ksm-and-rhel-5.4-gup-fast.patch [bz#504237]
  - kvm-ksm-remove-kprobes-usage-for-rhel-5.4-v3.patch [bz#504237]
  - kvm-KSM-avoid-usage-of-free-slabed-memory.-triggered-wit.patch [bz#504237]
  - Resolves: bz#504237 - Pull RHEV bugfixes added after kvm-83-58.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-60.el5
changelog:
  - kvm-Disable-virtio-balloon-bz-500453.patch [bz#503811]
  - Resolves: bz#503811 - Pull disable-virtio-balloon patch from RHEV branch


author: Eduardo Habkost <ehabkost@redhat.com> - 83-59.el5
changelog:
  - kvm-kernel-KVM-Fix-NX-support-reporting.patch [bz#503793]
  - kvm-kernel-KVM-x86-check-for-cr3-validity-in-ioctl_set_sregs.patch [bz#503793]
  - kvm-Revert-qemu-fix-bad-physical-address-in-kvm_update_d.patch [bz#503793]
  - kvm-Enable-dirty-logging-for-all-regions-during-migratio.patch [bz#503793]
  - kvm-migrate.c-migrate_fd_put_buffer-Do-not-busyloop-stop.patch [bz#503793]
  - kvm-cirrus-fix-text-screen-corruption-on-reset.patch [bz#503793]
  - kvm-Support-multiple-VNC-clients-re-added.patch [bz#503793]
  - kvm-vnc-fix-multiple-connections-displaystate-initializa.patch [bz#503793]
  - kvm-vnc-Remove-checks-for-qemu_realloc-return-value.patch [bz#503793]
  - kvm-ksm-remove-full-swapping-support-for-kvm-mmu-pages-u.patch [bz#503793]
  - kvm-keypad-support.patch [bz#503793]
  - kvm-Call-missing-qemu_bh_delete-at-the-end-of-raw_aio_em.patch [bz#503793]
  - kvm-Add-qemu_send_raw-to-vlan.patch [bz#503793]
  - kvm-Minimal-ethernet-frame-length-is-64-bytes.patch [bz#503793]
  - kvm-Don-t-send-all-gratuitous-packets-at-once.patch [bz#503793]
  - kvm-fix-wrong-bios-pci-mapping-for-large-slots-Bug-49943.patch [bz#503793]
  - Resolves: bz#503793 - Pull RHEV bugfixes between kvm-83-52.el5ovirt and kvm-83-58.el5ovirt
  - Bump release number to make it higher than the latest .el5ovirt RPM


author: Eduardo Habkost <ehabkost@redhat.com> - 83-44.el5
changelog:
  - kvm-kernel-KVM-Ioctls-for-init-MSI-X-entry.patch [bz#498085]
  - kvm-kernel-KVM-Add-MSI-X-interrupt-injection-logic.patch [bz#498085]
  - kvm-kernel-KVM-Enable-MSI-X-for-KVM-assigned-device.patch [bz#498085]
  - kvm-kernel-KVM-Get-support-IRQ-routing-entry-counts.patch [bz#498085]
  - kvm-kernel-KVM-Device-assignment-framework-rework.patch [bz#498085]
  - kvm-kernel-KVM-Correct-deassign-device-ioctl-to-IOW.patch [bz#498085]
  - kvm-kernel-KVM-Wake-up-waitqueue-before-calling-get_cpu.patch [bz#498085]
  - kvm-kernel-KVM-use-smp_send_reschedule-in-kvm_vcpu_kick.patch [bz#498085]
  - kvm-kernel-KVM-protect-assigned-dev-workqueue-int-handler-and-i.patch [bz#498085]
  - kvm-libkvm-support-KVM_ASSIGN_DEV_IRQ-and-KVM_DEASSI.patch [bz#498085]
  - kvm-qemu-Replace-force-type-convert-with-container_o.patch [bz#498085]
  - kvm-qemu-Make-device-assignment-depend-on-libpci.patch [bz#498085]
  - kvm-qemu-Figure-out-device-capability.patch [bz#498085]
  - kvm-qemu-Support-for-device-capability.patch [bz#498085]
  - kvm-libkvm-user-interface-for-MSI-type-irq-routing.patch [bz#498085]
  - kvm-libkvm-allocate-unused-gsi-for-irq-routing.patch [bz#498085]
  - kvm-qemu-expose-MSI-capability-to-guest.patch [bz#498085]
  - kvm-qemu-Support-MSI-convert-to-INTx-in-device-assig.patch [bz#498085]
  - kvm-qemu-Add-MSI-X-related-macro-to-pci.c.patch [bz#498085]
  - kvm-libkvm-add-ioctl-wrappers-for-KVM_SET_MSIX_ENTRY.patch [bz#498085]
  - kvm-qemu-enable-MSI-X-capabilty-for-assigned-device.patch [bz#498085]
  - kvm-qemu-fix-interrupt-pin-0-assignment.patch [bz#498085]
  - kvm-qemu-Fill-config-with-correct-VID-DID.patch [bz#498085]
  - kvm-qemu-emulate-command-register-for-SRIOV-virtual-.patch [bz#498085]
  - kvm-qemu-Move-assigned-device-capability-init-earlie.patch [bz#498085]
  - kvm-qemu-improve-pci-host-device-address-parsing.patch [bz#498085]
  - kvm-qemu-don-t-check-per-vector-mask-bit-before-enab.patch [bz#498085]
  - kvm-qemu-Fix-wrong-counting-of-MSI-X-table-size.patch [bz#498085]
  - kvm-device-assignment-move-memset-to-after-mmap-failure-.patch [bz#498085]
  - kvm-Remove-MSI-masking-when-setting-initial-MSI-X-entrie.patch [bz#498085]
  - kvm-nr_cpu_ids-compat.patch [bz#498085]
  - kvm-smp_send_reschedule-compat.patch [bz#498085]
  - kvm-Adjust-kvm_smp_send_reschedule-availability.patch [bz#498085]
  - kvm-Adjust-nr_cpu_ids-check.patch [bz#498085]
  - Resolves: bz#498085 - kvm add guest MSI support


author: Eduardo Habkost <ehabkost@redhat.com> - 83-43.el5
changelog:
  - Update kversion to kernel-2.6.18-151.el5
  - Related: bz#498071 - kvm external module build fixes for RHEL 5.4
  - Related: bz#498084 - Add infrastructure needed for later adding guest MSI support


author: Eduardo Habkost <ehabkost@redhat.com> - 83-42.el5
changelog:
  - kvm-kernel-KVM-Add-support-to-disable-MSI-for-assigned-device.patch [bz#498084]
  - kvm-kernel-KVM-Userspace-controlled-irq-routing.patch [bz#498084]
  - kvm-kernel-KVM-Use-irq-routing-API-for-MSI.patch [bz#498084]
  - kvm-kernel-KVM-VMX-Use-kvm_mmu_page_fault-handle-EPT-violation-.patch [bz#498084]
  - kvm-kernel-KVM-Report-IRQ-injection-status-for-MSI-delivered-in.patch [bz#498084]
  - kvm-kernel-KVM-define-KVM_CAP_DEVICE_DEASSIGNMENT.patch [bz#498084]
  - kvm-kernel-KVM-fix-kvm_vm_ioctl_deassign_device.patch [bz#498084]
  - kvm-kernel-KVM-Split-IOAPIC-structure.patch [bz#498084]
  - kvm-kernel-KVM-Unify-the-delivery-of-IOAPIC-and-MSI-interrupts.patch [bz#498084]
  - kvm-kernel-KVM-Change-API-of-kvm_ioapic_get_delivery_bitmask.patch [bz#498084]
  - kvm-kernel-KVM-Update-intr-delivery-func-to-accept-unsigned-lon.patch [bz#498084]
  - kvm-kernel-KVM-bit-ops-for-deliver_bitmap.patch [bz#498084]
  - kvm-Fix-request_irq-for-2.6.19.patch [bz#498071]
  - kvm-Fix-kvm_request_irq-race.patch [bz#498071]
  - kvm-qemu-device-assignment-don-t-use-libkvm-s-privat.patch [bz#498084]
  - kvm-qemu-device-assignment-add-assigned_dev_update_i.patch [bz#498084]
  - kvm-qemu-device-assignment-fix-ROM-writing.patch [bz#498084]
  - kvm-libkvm-support-for-irq-routing.patch [bz#498084]
  - kvm-qemu-initialize-irq-routing-table.patch [bz#498084]
  - kvm-libkvm-Fix-return-of-kvm_commit_irq_routes.patch [bz#498084]
  - kvm-libkvm-add-deassign-ioctl.patch [bz#498084]
  - kvm-qemu-free-device-on-error-in-init_assigned_devic.patch [bz#498084]
  - kvm-qemu-wrap-assign_device-and-assign_irq.patch [bz#498084]
  - kvm-qemu-deassign-device-from-guest.patch [bz#498084]
  - kvm-qemu-fix-hot-remove-assigned-device.patch [bz#498084]
  - kvm-qemu-fix-build-breakage-on-non-device-deassignme.patch [bz#498084]
  - kvm-qemu-deassign-irq-for-INTx.patch [bz#498084]
  - Resolves: bz#498071 - kvm external module build fixes for RHEL 5.4
  - Resolves: bz#498084 - Add infrastructure needed for later adding guest MSI support


author: Eduardo Habkost <ehabkost@redhat.com> - 83-40.el5
changelog:
  - Enabling spice support, now that qspice-0.3.0 is available on the buildroot
  - Resolves: bz#497232 - kvm not linked against qspice library


author: Eduardo Habkost <ehabkost@redhat.com> - 83-39.el5
changelog:
  - kvm-Revert-external-module-don-t-redefined-get_user_page.patch [bz#501777]
    (Reverts kvm-external-module-don-t-redefined-get_user_pages_fast-.patch, that
    didn't solve the issue)
  - kvm-external-module-don-t-redefine-get_user_pages_fast-o.patch [bz#501777]
  - Resolves: bz#501777 - kvm doesn't build on newer RHEL-5.4 kernels because of get_user_pages_fast()


author: Eduardo Habkost <ehabkost@redhat.com> - 83-38.el5
changelog:
  - kvm-external-module-don-t-redefined-get_user_pages_fast-.patch [bz#501777]
  - Resolves: bz#501777 - kvm doesn't build on newer RHEL-5.4 kernels because of get_user_pages_fast()


author: Eduardo Habkost <ehabkost@redhat.com> - 83-37.el5
changelog:
  - kvm-external-module-Fix-build-for-VT-d-AMD-IOMMU.patch [bz#498071]
  - kvm-external-module-don-t-conflict-w-phys_addr_t.patch [bz#498071]
  - Related: bz#498071 - kvm external module build fixes for RHEL 5.4


author: Eduardo Habkost <ehabkost@redhat.com> - 83-36.el5
changelog:
  - kvm-qemu-Add-support-for-SMBIOS-command-line-options-Ale.patch [bz#501729 bz#501729]
  - kvm-Don-t-try-to-extract-protocol-from-absolute-filename.patch [bz#501729]
  - kvm-kvmtrace_format-read-usr-share-kvm-formats-by-defaul.patch [bz#501729]
  - kvm-e1000-Do-not-reinit-pci-config-space-to-0.patch [bz#501729]
  - kvm-Fix-cluster-freeing-in-qcow2.patch [bz#501729]
  - kvm-Revert-Fix-CVE-2008-0928-insufficient-block-device-a.patch [bz#501729]
  - kvm-Fix-CVE-2008-0928-insufficient-block-device-address-.patch [bz#501729]
  - kvm-don-t-use-a-32-bit-bit-type-as-offset-argument.patch [bz#501729]
  - kvm-Fix-oops-on-2.6.25-guest-Rusty-Russell.patch [bz#501729]
  - kvm-Fix-segfault-after-tap-host_net_remove.patch [bz#501729]
  - kvm-Fix-virtio-net-segfault-during-live-migrate-after-NI.patch [bz#501729]
  - kvm-Fix-e1000-segfault-during-live-migrate-after-NIC-hot.patch [bz#501729]
  - kvm-Backport-oom_check-from-upstream.patch [bz#501729]
  - kvm-qcow2-fix-image-creation-for-large-2TB-images-Chris-.patch [bz#501729]
  - kvm-Fix-live-migratation-failure-after-pcnet-NIC-hot-unp.patch [bz#501729]
  - kvm-Fix-qemu_realloc-with-size-0.patch [bz#501729]
  - Spec file sync: [bz#501729]
    - Package user/formats on /usr/share/kvm
    - Add spice sanity check (disabled because with_spice is 0)
  - Update kernel version requires to 2.6.18-149.el5
  - Resolves: bz#501729 - Pull RHEV bugfixes between kvm-83-42.el5ovirt and kvm-83-52.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-35.el5
changelog:
  - Spec changes that are needed with the patches recently added:
    - Package user/formats as %doc
    - Package /usr/bin/qemu-io on kvm-tools package
  - Related: bz#500263


author: Eduardo Habkost <ehabkost@redhat.com> - 83-34.el5
changelog:
  - kvm-kernel-KVM-Add-CONFIG_HAVE_KVM_IRQCHIP.patch [bz#500263]
  - kvm-kernel-KVM-Interrupt-mask-notifiers-for-ioapic.patch [bz#500263]
  - kvm-kernel-KVM-Reset-PIT-irq-injection-logic-when-the-PIT-IRQ-i.patch [bz#500263]
  - kvm-kernel-KVM-Fix-overlapping-check-for-memory-slots.patch [bz#500263]
  - kvm-kernel-KVM-MMU-Fix-off-by-one-calculating-large-page-count.patch [bz#500263]
  - kvm-kernel-KVM-MMU-disable-global-page-optimization.patch [bz#500263]
  - kvm-KSM-fix-bug-495714.patch [bz#500263]
  - kvm-fix-extboot-from-boot-with-cache-off.patch [bz#500263]
  - kvm-KSM-fix-bug-495912.patch [bz#500263]
  - kvm-KSM-fix-495350-effective-bug.patch [bz#500263]
  - kvm-ksm-fix-Bug-496668-stabilaty-issue.patch [bz#500263]
  - kvm-qemu-drop-packet-from-tap-device-if-all-NICs-are.patch [bz#500263]
  - kvm-fix-effective-bug-497042.patch [bz#500263]
  - kvm-qemu-fixup-4GB-memslot-large-page-alignment.patch [bz#500263]
  - kvm-Import-qemu-io-source-from-upstream.patch [bz#500263]
  - kvm-qemu-io-Comment-out-readv-writev-code.patch [bz#500263]
  - kvm-Add-qemu-io-to-Makefile-and-configure.patch [bz#500263]
  - kvm-Fix-migration-with-smp-Bz-485966.patch [bz#500263]
  - kvm-char-Fix-closing-of-various-char-devices-Jan-Kiszka.patch [bz#500263]
  - kvm-spice-improve-audio-quality-493279.patch [bz#500263]
  - kvm-spice-using-term_printf_async-for-vdi-log-messages-4.patch [bz#500263]
  - Update kernel version dependency to 2.6.18-141.el5
  - Resolves: bz#500263 - Import RHEV kvm fixes added between kvm-83-35.el5ovirt and kvm-83-42.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-33.el5
changelog:
  - kvm-qemu-tool-adding-an-empty-implementation-of-term_pr.patch [bz#497886]
  - kvm-block_set_watermark-use-term_printf_async-for-notif.patch [bz#497886]
  - kvm-Fix-at-least-one-cause-of-qcow2-corruption.-Nolan.patch [bz#497886]
  - kvm-Flush-all-pending-io-at-the-end-of-a-migration.patch [bz#497886]
  - kvm-make-BlockDriver-struct-opaque-and-global.patch [bz#497886]
  - kvm-Reopen-block-drivers-after-migration.patch [bz#497886]
  - kvm-qcow2-corruption-Fix-alloc_cluster_link_l2.patch [bz#497886]
  - kvm-Change-RTC-time-drift-IRQ-re-injection-logic.patch [bz#497886]
  - kvm-KSM-fix-bug-495348.patch [bz#497886]
  - kvm-KSM-fix-bug-495349-KSM-correctness-issue.patch [bz#497886]
  - kvm-KSM-fix-bug-495351-effective-issue.patch [bz#497886]
  - Resolves: bz#497886 - Import kvm fixes from RHEV branch


author: Eduardo Habkost <ehabkost@redhat.com> - 83-29.el5ovirt
changelog:
  - kvm-external-module-hrtimer_expires_remaining-was.patch [bz#493112]
  - kvm-Make-make-install-depend-on-bios-and-vgabios.patch [bz#493112]
  - Remove pre-built binaries from source tarball [bz#493112]
    - Rename kvm-remove-crypto.sh to kvm-strip-tarball.sh
  - Resolves: bz#493112 - Allow building KVM RHEV tree on newer kernels and on other distributions


author: Eduardo Habkost <ehabkost@redhat.com> - 83-28.el5ovirt
changelog:
  - kvm-Avoid-running-audio-ctl-s-when-vm-is-not-running.patch [bz#492204]
  - Resolves: bz#492204 - kvm: Avoid running audio ctl's when vm is not running


author: Eduardo Habkost <ehabkost@redhat.com> - 83-25.el5ovirt
changelog:
  - kvm-Revert-Introducing-qcow2-extensions-keep-backing.patch [bz#489964]
  - kvm-Revert-qemu-img-info-show-highest_alloc-and-num_f.patch [bz#489964]
  - kvm-Revert-qcow2-format-keep-num_free_bytes-and-sho.patch [bz#489964]
  - kvm-Revert-info-blockstats-show-highest_allocated-if-e.patch [bz#489964]
  - kvm-Revert-block-qcow2-export-highest_allocated-throug.patch [bz#489964]
  - kvm-Revert-block-qcow2-keep-highest-allocated-byte-Ur.patch [bz#489964]
  - kvm-Introducing-qcow2-extensions-Uri-Lublin.patch [bz#489964]
  - kvm-block-support-known-backing-format-for-image-create.patch [bz#489964]
  - kvm-block-qcow2-keep-backing-file-format-in-a-qcow2-ext.patch [bz#489964]
  - kvm-block-qcow2-keep-highest-allocated-offset.patch [bz#489964]
  - kvm-block-set-high-watermark-and-get-a-notification-whe.patch [bz#489964]
  - kvm-Show-drive-name-on-ENOSPC-notification.patch [bz#489964]
  - Resolves: bz#489964


author: Eduardo Habkost <ehabkost@redhat.com> - 83-23.el5ovirt
changelog:
  - kvm-kernel-Revert-Disable-kvmclock-by-default.patch [bz#492649]
  - Resolves: bz#492649
  - kvm-qemu-stop-start-cpus-before-after-devices.patch [bz#492355]
  - kvm-extboot-should-update-number-of-HDs-reported-by-BIOS.patch [bz#491861]
  - Resolves: bz#492355 bz#491861


author: Eduardo Habkost <ehabkost@redhat.com> - 83-22.el5ovirt
changelog:
  - kvm-qemu-fix-physical-memory-migration.patch [bz#492351]
  - kvm-host_device_remove-remove-incorrect-check-for-devic.patch [bz#491156]
  - kvm-e1000-Fix-RX-descriptor-low-threshold-interrupt-log.patch [bz#491930]
  - kvm-qemu-fix-bad-physical-address-in-kvm_update_dirty_p.patch [bz#492357]
  - kvm-vdi_port-fix-migration.patch [bz#492365]
  - kvm-external-module-do-not-hardcode-tsc_khz.patch [bz#488543]
  - kvm-kernel-Backport-fix-for-bz-482423-from-upstream.patch [bz#482423]
  - Resolves: bz#482423 bz#492351 bz#491156 bz#491930 bz#492357


author: Eduardo Habkost <ehabkost@redhat.com> - 83-21.el5ovirt
changelog:
  - Change license tag to GPLv2 [bz#490741]
  - Remove qspice-specific BuildRequires, now that qspice bz#489896 was fixed
    [bz#490956]
  - Build against kernel 2.6.18-128.1.1.el5
  - Resolves: bz#490741
  - Related: bz#490956


author: Eduardo Habkost <ehabkost@redhat.com> - 83-20.el5ovirt
changelog:
  - kvm-Parse-full-PCI-device-addresses-Markus-Armbruster.patch [bz#489992]
  - kvm-Backport-upstream-QEMU-PCI-hotplug-code.patch [bz#489992]
  - kvm-make-qemu_announce_self-handle-non-contiguous-net-ta.patch [bz#489992]
  - Resolves: bz#489992


author: Eduardo Habkost <ehabkost@redhat.com> - 83-19.el5ovirt
changelog:
  - kvm-kernel-Fix-BZ483561-dmesg-flooded-with-kvm-14619-cpu1-u.patch [bz#483561]
  - kvm-kernel-KVM-Fix-missing-smp-tlb-flush-in-invlpg.patch [bz#490469]
  - Resolves: bz#483561 bz#490469


author: Eduardo Habkost <ehabkost@redhat.com> - 83-17.el5ovirt
changelog:
  - Remove unneeded code from spec %install section
  - Rebuild against qspice-0.1.0-14.gitdd420d.el5ovirt


author: Eduardo Habkost <ehabkost@redhat.com> - 83-16.el5ovirt
changelog:
  - Remove openssl BuildRequires. We are using libgcrypto for crypto code, now
  - kvm-kernel-Disable-kvmclock-by-default.patch [bz#469425][bz#488543]
  - Related: bz#469425 bz#488543


author: Eduardo Habkost <ehabkost@redhat.com> - 83-15.el5ovirt
changelog:
  - kvm-qemu-prevent-reset-of-vga-fb-mapping-in-case-of-isa.patch [bz#489348]
  - kvm-TPR-patching-instruction_is_ok-fix-virtual-addre.patch [bz#483494]


author: Eduardo Habkost <ehabkost@redhat.com> - 83-13.el5ovirt
changelog:
  - kvm-kernel-KVM-x86-release-time_page-on-vcpu-destruction.patch [bz#488725]
  - kvm-kernel-KVM-VMX-Update-necessary-state-when-guest-enters-l.patch [bz#488724]
  - kvm-kernel-KVM-is_long_mode-should-check-for-EFER.LMA.patch [bz#488724]
  - kvm-kernel-KVM-MMU-Fix-another-largepage-memory-leak.patch [bz#488725]
  - kvm-kernel-KVM-MMU-handle-compound-pages-in-kvm_is_mmio_pfn.patch [bz#488727]
  - kvm-bios-make-MMIO-address-page-aligned-in-guest.patch [bz#488732]
  - kvm-external-module-backward-compatibility-for-com.patch [bz#488727]
  - kvm-external-module-handle-compound_head-on-RHEL.patch [bz#488727]


author: Eduardo Habkost <ehabkost@redhat.com> - 83-12.el5ovirt
changelog:
  - kvm-Fix-cpu_physical_memory_rw-for-64-bit-I-O-accesses.patch [bz#488135]
  - kvm-block-qcow2-keep-highest-allocated-byte-Uri-Lublin.patch [bz#488250]
  - kvm-block-qcow2-export-highest_allocated-through-BlockD.patch [bz#488250]
  - kvm-info-blockstats-show-highest_allocated-if-exists-U.patch [bz#488250]
  - kvm-qcow2-format-keep-num_free_bytes-and-show-it-upo.patch [bz#488250]
  - kvm-qemu-img-info-show-highest_alloc-and-num_free_byte.patch [bz#488250]
  - kvm-Introducing-qcow2-extensions-keep-backing-file-for.patch [bz#484080]
  - kvm-qemu-img-adding-a-F-base_fmt-option-to-qemu-img.patch [bz#484080]
  - Renumbered kvm-kernel patches to allow space for more userspace patches


author: Eduardo Habkost <ehabkost@redhat.com>- 83-11.el5ovirt
changelog:
  - kvm-add-notification-for-vmstops.patch [bz#481863]
  - kvm-Change-default-werror-semantics-from-report-to-en.patch [bz#481863]


author: Eduardo Habkost <ehabkost@redhat.com> - 83-10.el5ovirt
changelog:
  - kvm-kernel-Report-IRQ-injection-status-to-userspace.patch [bz#487595]
  - kvm-handle-IRQ-status-injection-in-userspace.patch [bz#487595]
  - kvm-Allow-additions-of-ACPI-tables-from-command-line.patch [bz#488041]
  - kvm-cirrus-cleanup-reset-handler.patch [bz#488036]


author: Eduardo Habkost <ehabkost@redhat.com> - 83-9.el5ovirt
changelog:
  - kvm-external-module-compatibility-for-hrtimer_expi.patch [bz#485482]
  - kvm-kernel-KVM-x86-fix-LAPIC-pending-count-calculation.patch [bz#485482]
  - kvm-kernel-KVM-VMX-Flush-volatile-msrs-before-emulating-rdmsr.patch [bz#486583]


author: Eduardo Habkost <ehabkost@redhat.com> - 83-8.el5ovirt
changelog:
  - kvm-qemu-fix-double-removal-of-assigned-device.patch [bz#485318]
  - kvm-backport-kvm-qemu-fix-leak-of-ioperm-data.patch [bz#485318]
  - kvm-backport-kvm-qemu-remove-the-useless-parameter.patch [bz#485318]
  - kvm-qemu-use-fd-instead-of-QEMUFile-in-pre-VM-migrate-s.patch [bz#485752]
  - kvm-kernel-KVM-Fix-assigned-devices-circular-locking-dependenc.patch [bz#485483]
  - kvm-kernel-KVM-Fix-INTx-for-device-assignment.patch [bz#485484]
  - kvm-kernel-KVM-MMU-Map-device-MMIO-as-UC-in-EPT.patch [bz#485485]


author: Eduardo Habkost <ehabkost@redhat.com> - 83-7.el5ovirt
changelog:
  - bz#485291:
    - kvm-don-t-call-kvm_init_vcpu-twice.patch
    - kvm-Fix-GPE-registers-read-write-handling.patch
    - kvm-Fix-CPU-hotplug.patch
    - kvm-Use-reserved-STS-bits-from-PIIX4-chipset-to-avoid-cl.patch
    - kvm-PCI-hotplug-SCI-fix.patch


author: Eduardo Habkost <ehabkost@redhat.com> - 83-6.el5ovirt
changelog:
  - Fix for bz#484747 (Block device corruption on ENOSPC errors):
    - kvm-Stop-VM-on-ENOSPC-error-IDE.patch
    - kvm-Stop-VM-on-error-in-scsi-disk.patch
    - kvm-Stop-VM-on-error-in-virtio-blk.patch
    - kvm-kvm-qemu-Allow-calling-vm_stop-from-vcpu-thread.patch
  - Spice fix:
    - kvm-vdi_port-don-t-modifay-device-while-in-stop-state.patch
  - Fixes from upstream:
    - kvm-Don-t-notify-virtio-devices-before-S_DRIVER_OK.patch
    - kvm-kvm-qemu-Don-t-unregister-unassigned-PCI-BAR.patch
    - kvm-kvm-qemu-preallocate-mem-path-memory-by-default.patch
    - kvm-kvm-qemu-Remove-eflags-conversion-into-emulator-fo.patch
    - kvm-Always-return-latest-pmsts-instead-of-the-old-one.patch
    - kvm-kvm-qemu-make-mem-path-memory-allocation-depend.patch
    - kvm-Fix-SIGSEGV-crash-in-slirp-networking-code.patch
    - kvm-check-SCSI-read-write-requests-against-max-LBA.patch
    - kvm-qemu-vnc-reset-has_WMVi-when-new-client-connects.patch
    - kvm-fix-use-of-host-serial-port.patch


author: Eduardo Habkost <ehabkost@redhat.com> - 83-4.el5ovirt
changelog:
  - More changes due to rpmlint warnings:
    - Fix bogus qemu-img manpage permission
    - Capitalize package summaries
    - Mark udev rules file on /etc as %config on file list


author: Eduardo Habkost <ehabkost@redhat.com> - 83-3.el5ovirt
changelog:
  - Make rpmlint happy:
    - Versioned qemu-img provides
    - use %defattr on all %files sections
    - %define _use_internal_dependency_generator 0
    - don't mix tabs and spaces on scripts


author: Eduardo Habkost <ehabkost@redhat.com> - 83-1.el5ovirt
changelog:
  - Change to tarball+patches model instead of a snapshot of a private git tree.
    The resulting code is exactly the same from kvm-82.ovirt1.test19


author: Eduardo Habkost <ehabkost@redhat.com> - 82.ovirt1.test19-1
changelog:
  - kvm-82.ovirt1.test19:
    - Use libgcrypt for cryptography code instead of libcrypto
    - Fix ksm-mem.ko module loading
    - SCSI emulation fixes from Rik van Riel


author: Eduardo Habkost <ehabkost@redhat.com> - 82.ovirt1.test17-1
changelog:
  - kvm-82.ovirt1.test17:
    - Added hypercall-device-based vmchannel implementation
    - Removed network-interface-based vmchannel implementation
    - Removed cryptography code from KVM, replacing it with calls
      to libcrypto


author: Eduardo Habkost <ehabkost@redhat.com> - 82.ovirt1.test13-5.el5ovirt
changelog:
  - Try to fix kmod-kvm upgrades:
    - Remove Provides: kernel-modules (bz#474472)
    - don't run weak-modules --remove-modules on upgrades


author: Eduardo Habkost <ehabkost@redhat.com> - 82.ovirt1.test6-1.el5ovirt
changelog:
  - kvm-82.ovirt1.test6:
    - ksm compile fixes
    - simpler compat code
    - vnc disconnect notification patch


author: Eduardo Habkost <ehabkost@redhat.com> - 82.ovirt1.test1-2.el5ovirt
changelog:
  - Build with libspice support
  - Use pkgconfig for spice
  - Added BuildRequires to work around missing qspice-libs-devel requires
  - Build against kernel 2.6.18-128.el5


author: Eduardo Habkost <ehabkost@redhat.com> - 82-2.maint.snapshot.2009.01.05.el5ovirt
changelog:
  - Don't use prebuilt binaries (bz#474886):
    - Build bios from source instead of using the prebuilt binaries
    - Use the pxe images from the etherboot packag


author: Eduardo Habkost <ehabkost@redhat.com> -77-3.maint.snapshot.2008.11.11.ovirt
changelog:
  - Respin maint/2.6.28 snapshot, from 2008-11-11:
    - kernel:    e45948b071d8be59044ac232d99a2ca83fd93266
    - userspace: ccabb53f1a84f11896c840391f7ade3756214086


author: Eduardo Habkost <ehabkost@redhat.com> -77-2.maint.snapshot.2008.10.28.ovirt
changelog:
  - Rebase to kvm maint/2.6.28 snapshot from 2008-10-28:
    - kernel:    0d41e9e3f1c500a05716deaa927b56a15b133030
    - userspace: 7c29f61b152c036e9511941e4f0254f6de326052
  - Patches removed, as they (or their equivalent) are already upstream:
    - kvm-qemu-migration-nowait.patch
    - kvm-Test-for-EXT_CONFIG_KVM_TRACE-instead-of-CONFIG_KVM_.patch


author: Eduardo Habkost <ehabkost@redhat.com> -77-1.el5.ovirt
changelog:
  - Rebase to kvm-77
  - Remove wildcards from %files list
  - Remove another sparc bios file that is not needed


author: Eduardo Habkost <ehabkost@redhat.com> - 74.11.el5.ovirt
changelog:
  - Use RHEL kmod magic support to build modules, but with hacks
    to avoid the ksym dependencies and to make it work on brew


author: Eduardo Habkost <ehabkost@redhat.com> - 74.6.el5.ovirt
changelog:
  - Fix build with with_modules=0
  - Don't include qemu-img when built on Fedora
  - Put qemu-img on a kvm-qemu-img subpackage, with Provides: qemu-img


author: Eduardo Habkost <ehabkost@redhat.com> - 74.4.el5.ovirt
changelog:
  - Enable kvm_trace
  - Use "real" release number (74-4.el5.ovirt) instead of .testX release
    numbers. The package is on CVS, now


author: Eduardo Habkost <ehabkost@redhat.com> - 74-3.el5.test4
changelog:
  - Added depmod to kmod %post and %postun
  - Fix %if lines to make it possible to not build the kmod package
  - Make kvm-kmod depend on the kernel it was built to
  - Make kvm depend on kvm-kmod


author: Eduardo Habkost <ehabkost@redhat.com> - 74-3.el5.test2
changelog:
  - Package the kernel modules in a kvm-kmod package, hardcoded to build
    for 2.6.18-111.el5.extkvm_test12
  - Fix page_find() and page_find_alloc() range-checking for addresses
    larger than 32-bit
  - Remove i386 from ExclusiveArch, as we don't have i386 kernel packages
    built on the ovirt build target


author: Eduardo Habkost <ehabkost@redhat.com> - 74-2.el5.test1
changelog:
  - Added kvm-74-pxeboot-fix2.patch, Glauber's fix for the PXE boot triple fault
  - Don't remove qemu-img from the package


author: Glauber Costa <glommer@redhat.com> - 73-3.20080825
changelog:
  - Moved forward to yesterday's snapshot. It contains the remaining
    parts of mark's series of GSO patches. It sould be all back to normal
    when kvm-74 is released.


author: Glauber Costa <gcosta@redhat.com> - 73-1
changelog:
  - Update to kvm-73.
  - alsa enablement patch not needed anymore - removed.
  - Add conditional so we can use this same rpm for rhel.


author: Glauber Costa <gcosta@redhat.com> - 71-1
changelog:
  - Update to kvm-71
  - --enable-alsa is no more, and kvm-71 seem to have troubles yet to
    be sorted out upstream with parameter passing to qemu. So as a temporary
    quickfix, add kvm-71-alsa.patch to handle it.


author: Glauber Costa <gcosta@redhat.com> - 69-1
changelog:
  - Update to kvm-69
  - Removed Patch4 (Upstreamed)
  - Removed virtio-boot patch (Upstreamed)
  - Regenerated the other patches


author: Daniel P. Berrange <berrange@redhat.com> - 60-1.fc9
changelog:
  - Updated to kvm-60
  - Fix license tag to keep rpmlint quiet
  - Remove unused PPC, Sparc and PPC Video BIOS


author: Jeremy Katz <katzj@redhat.com> - 12-2
changelog:
  - include bios and keymaps in the kvm package since we need a slightly 
    different version for kvm now
  - include man page


author: Jeremy Katz <katzj@redhat.com> - 7-3
changelog:
  - remove the -devel subpackage since there's no shared lib upstream yet
  - direct download link for source


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-1
changelog:
  - Rebase to nspr-4.10.8
  - Resolves: Bug 1200921 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-2
changelog:
  - Remove an unused patch
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-1
changelog:
  - Update to nspr-4.10.2
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Retagging to fix an inconsitency in the release tags
  - Resolves: rhbz#1002641 - Rebase RHEL 5 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-4
changelog:
  - Resolves: rhbz#831654 - Pick up fixes from the rhel-5.8 branch
  - Regenerated nspr-config-pc.patch passes the the rpmdiff tests


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-3
changelog:
  - Resolves: rhbz#831654 - restore top section of nspr-config-pc.patch
  - Needed to prevent multilib regressions


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-2
changelog:
  - Resolves: rhbz#831654 - revert unwanted changes to nspr.pc
  - Change -L@libdir@/nspr4 to -L@libdir@ in the patch


author: Elio Maldonado Batiz <emaldona@redhat.com> - 4.8.9-1
changelog:
  - Resolves: Bug 772945 - [RFE] Async update nspr to make firefox 10 LTS rebase possible
  - Update to 4.8.9


author: Kai Engert <kengert@redhat.com> 4.6.1-2
changelog:
  - Do not use -ansi when compiling, because of a compilation
    problem with latest glibc and anonymous unions.
    See also bugzilla.mozilla.org # 322427.


author: Christopher Aillon <caillon@redhat.com>
changelog:
  - Stop shipping static libraries; NSS and dependencies no longer
    require static libraries to build.


author: Christopher Aillon <caillon@redhat.com> 4.6-4
changelog:
  - Use the NSPR version numbering scheme reported by NSPR,
    which unfortunately is not exactly the same as the real
    version (4.6 != 4.6.0 according to RPM and pkgconfig).


author: Kai Engert <kaie@redhat.com> - 3.18.0-6
changelog:
  - On RHEL 6.x keep the TLS version defaults unchanged.
  - Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-5
changelog:
  - Copy PayPalICA.cert and PayPalRootCA.cert to nss/tests/libpkix/certs
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Enable additional ssl test cycles and document why some aren't enabled
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-3
changelog:
  - Fix shell syntax error on nss/tests/all.sh
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Steve Dickson <steved@redhat.com> 1.0.9-70
changelog:
  - Have showmount try the highest mount version first (bz 947552)
  - Switch the mount version umount tries first (bz 947552)


author: Harshula Jayasuriya <harshula@redhat.com> 1.0.9.68
changelog:
  - Need to use /var/lock/subsys/nfs not /var/lock/subsys/nfsd.
    Use "status -l nfs nfsd" for status check. The "-l" option
    was introduced in initscripts >= 8.45.43. (bz 873307)


author: Steve Dickson <steved@redhat.com> 1.0.9-64
changelog:
  - Fixed umounts when MOUNTD_NFS_V2=no (bz 804681)
  - Fixed typo in nfs init script (bz 819373)
  - Fixed rpc.idmapd warning with v4 mounts (bz 708253)
  - Fixed rpc.gssd warning with v4 mounts (bz 769744)
  - Make sure statd's backup dir has correct permissions (bz 782455)


author: Steve Dickson <steved@redhat.com> 1.0.9-61
changelog:
  - Added a time out arugment to gssd (bz 507341)
  - Added mount.nfs4 and umount.nfs4 man pages (bz 760019)
  - Removed gss_clnt_send_err and gss_destroy_creds (bz 760019)
  - Remove typo in in nfslock.init (bz 803667)
  - UDP mounts need to fall back to TCP mounts on timeouts (bz 769098)
  - Avoid etab corruption by sync-ing up calls to exportfs (bz 800365)
  - Fixed regression caused by bz 595675 (bz 745730) 
  - Added resvport/noresvport to nfs man page (bz 772170)


author: Steve Dickson <steved@redhat.com> 1.0.9-60
changelog:
  - Updated idmapd.conf and idmapd.conf.man to reflect the 
    static user name mapping (502707)
  - Fixed an umount regression introduced by bz 513094 (bz 781931)


author: Steve Dickson <steved@redhat.com> 1.0.9-59
changelog:
  - gss: turned of even more excessive syslogs (bz 593097)
  - mount.nfs: Ignored the SIGXFSZ when handling RLIMIT_FSIZE changes (bz 697979)


author: Steve Dickson <steved@redhat.com> 1.0.9-58
changelog:
  - gss: turned off more excessive syslogs (bz 593097)
  - initfiles: more initscripts improvements (bz 710020)
  - specfile: correct typo when nfsnobodys gid already exists (bz 729603)


author: Steve Dickson <steved@redhat.com> 1.0.9-56
changelog:
  - Removed sim crash support (bz 600497)
  - initfiles: more initscripts improvements (bz 710020)
  - mount: Don't wait for TCP to timeout twice  (bz 736677)


author: Steve Dickson <steved@redhat.com> 1.0.9-55
changelog:
  - mount: fixed the -o retry option to retry the given amount (bz 736677)
  - manpage: removed the -o fsc option (bz 715523)
  - nfsstat: show v4 mounts with -m flag (bz 712438)
  - mount: allow insecure ports with mounts (bz 513094)
  - gss: turned off excessive syslogs (bz 593097)
  - mountd: allow v2 and v3 to be disabled (bz 529588)
  - specfile: make sure nfsnobodys gid changes when it exists (bz 729603)
  - initfiles: initscripts improvements (bz 710020)


author: Steve Dickson <steved@redhat.com> 1.0.9-52
changelog:
  - Fixed retry= to handle lack of reserved port situation (bz 240790)
  - Stopped rpc.statd is running as root (bz 495066)
  - Fixed rpc.gssd ccachedir option (bz 498134)
  - Make sure the uid/gid of nfsnobody is the
    correct value for all archs (bz 511876)
  - Fixed nfsstat's mislabled output (bz 617669)
  - Add support for lookupcache= option in nfsv4 (bz 511312)
  - Fixed UDP only mounts (bz 513466)
  - Fixed mounts when mount v1 is not supported (bz 595675)
  - Added sane timeout to svcgssd (bz 507341)


author: Steve Dickson <steved@redhat.com> 1.0.9-51
changelog:
  - Fixed verification on runtime configuration file (bz 471401)
  - Ensured all init script are LSB compliant (bz 485905)
  - Added static user mapping to idmapd.conf (bz 502707)


author: Steve Dickson <steved@redhat.com> 1.0.9-50
changelog:
  - Reverted the removal of idmapd.conf and its manpage
    since bz 502707 was not make the RHEL5.6 release


author: Steve Dickson <steved@redhat.com> 1.0.9-42
changelog:
  - mountd: Check host alias with netgroups (bz 478952)
  - exportfs: fixed typo in man page (bz 474848)
  - nfs.init: NFS server reboot results in "Stale NFS file handle" (bz 474449) 
  - nfslock.init: options not correctly parsed (bz 459591)
  - mount.nfs: mounts fail with read-only /etc (bz 450646)
  - nfslock.init: lockd not using settings in sysconfig/nfs (bz 434795)
  - tcpwrappers: updated code to correctly use api  (bz 494878)
  - nhfsstone: added v3 and v4 support (bz 465933)
  - mount.nfs: add support for lookupcache= option (bz 489335).


author: Steve Dickson <steved@redhat.com> 1.0.9-40
changelog:
  - Fixed arguments to the hosts_ctl() call in the good_client() 
    routine used in the tcpwrapper support. (bz 440120)


author: Steve Dickson <steved@redhat.com> 1.0.9-39
changelog:
  - Fixed typo in nfs initscript that caused rpc.rquotad daemons
    to be started but not stoppped (bz 470483)


author: Steve Dickson <steved@redhat.com> 1.0.9-38
changelog:
  - The fix to bz 438418 introduced a regression that caused
    mount.nfs to exit with zero on failed mounts. (bz 465966)


author: Steve Dickson <steved@redhat.com> 1.0.9-37
changelog:
  - Added the warning.patch to fix some warning which were
    flaged by rpmdiff during the errata phasea (Errata 2009:8187)

  - Re-enabled tcp wrappers. (bz 440120)


author: Steve Dickson <steved@redhat.com> 1.0.9-36
changelog:
  - Incorrect exit codes from nfs init script (bz 431891)
  - Incorrect a typo in nfsstat --mounted arg (bz 433741)
  - Fixed statd callbacks with the -n arg (bz 451057)
  - Do not display zero stats with nfsstat (bz 437242)
  - Pre-load nfsd when args to rpc.nfsd are given (bz 441983)
  - Increase the number simultaneous krb5 mounts (bz 432879)
  - Have rpc.gssd use file ownership vs uid on cred file (bz 433751)


author: Steve Dickson <steved@redhat.com> 1.0.9-33
changelog:
  - In both rpcgssd and rpcsvcgssd initscrips move the 
    SECURE_NFS check back to be a global check. This
    stops false failures from happen when the services
    are stopped when they are not configured to start (bz 435267)


author: Steve Dickson <steved@redhat.com> 1.0.9-30
changelog:
  - Added in a number of bug fixes (esp in crossmnt code) that were 
    exposed during the secinfo testing. (bz 315401)


author: Steve Dickson <steved@redhat.com> 1.0.9-29
changelog:
  - Added SECINFO support (bz 315401)
  - Reworked init scripts so service will be able to
    stop when some of the checks fail. (bz 295911)


author: Steve Dickson <steved@redhat.com> 1.0.9-27
changelog:
  - Fixed nfs initscript to fail with rpc.mound fails (bz 250622) 
  - Fixed typo in rpc.mountd man page (bz 248543)
  - Turn on 'nohide' automatically for all refer exports (bz 313561)


author: Jeff Layton <jlayton@redhat.com> 1.0.9-26
changelog:
  - Add new mountd mode for handling many netgroups (bz 250609)
  - Change nfs init script to not reset lockd ports on stop (bz 313671)
  - Change nfslock script to use sysctls to set lockd ports (bz 313671)


author: Steve Dickson <steved@redhat.com> 1.0.9-23
changelog:
  - Changed rpcidmapd and rpcgssd stop priority levels so
    those daemons would be stoppped after autofs (bz 245376)
  - Updated some out-of-date man pages (bz 233903)
  - Stoppped mount.nfs from wasting reserve ports (bz 246254)


author: Steve Dickson <steved@redhat.com> 1.0.9-22
changelog:
  - Reworked returns values of the init scripts (bz 243703)
  - Reworked rpc init scripts so they are not dependent
    loading modules. (bz 241015).


author: Steve Dickson <steved@redhat.com> 1.0.9-19
changelog:
  - Make sure the condrestarts exit with a zero value (bz 240352)
  - Added -o nordirplus mount option to disable READDIRPLUS (bz 240357)
  - Stopped /etc/sysconfig/nfs from being overwritten on updates (bz 234543)


author: Steve Dickson <steved@redhat.com> 1.0.9-18
changelog:
  - Fix mount.nfs4 to display correct error message (bz 227212)
  - Fix mount.nfs so mtab is updated (bz 227988)
  - Eliminate timeout on nfsd shutdowns (bz 222001)
  - Eliminate memory leak in mountd (bz 239536)
  - Make sure statd uses correct uid/gid by chowning
    the /var/lib/nfs/statd with the rpcuser id. (bz 235216)
  - Correct some sanity checking in rpc.nfsd. (bz 220887)
  - Fixed mount.nfs mtab lock (bz 227985)
  - Have mountd hold open etab file to force inode number to change (bz 236823)
  - Create a /etc/sysconfig/nfs with all the possible init script
    variables (bz 234543)
  - Changed nfs initscript to exit with correct value (bz 221874)
  - Added userlevel support for v4 relocation support (bz 223053)


author: Steve Dickson <steved@redhat.com> 1.0.9-14
changelog:
  - Doing a connect on UDP sockets causes the linux network
    stack to reject UDP patches from multi-home server with
    nic on the same subnet. (bz 208244)


author: Karel Zak <kzak@redhat.com> 1.0.9-7
changelog:
  - Added support for the mount -s (sloppy) option (#205038)
  - Added nfs.5 man page from util-linux
  - Added info about [u]mount.nfs to the package description


author: <SteveD@RedHat.com> 1.0.9-6
changelog:
  - Removed the compiling of getiversion and getkversion since
    UTS_RELEASE is no longer defined and these binary are
    not installed.


author: <SteveD@RedHat.com> 1.0.9-5
changelog:
  - Changed gssd daemons to cache things in memory
    instead of /tmp which makes selinux much happier.
    (bz 203078)


author: <SteveD@RedHat.com> 1.0.9-2
changelog:
  - Enabled the creating of mount.nfs and umount.nfs binaries
  - Added mount option fixes suggested by upstream.
  - Fix lazy umounts (bz 169299)
  - Added -o fsc mount option.


author: <SteveD@RedHat.com> 1.0.8-3
changelog:
  - Split the controlling of nfs version, ports, and protocol 
    into two different patches
  - Fixed and added debugging statements to rpc.mountd.
  - Fixed -p arg to work with priviledged ports (bz 156655)
  - Changed nfslock initscript to set LOCKD_TCPPORT and
    LOCKD_UDPPORT (bz 162133)
  - Added MOUNTD_NFS_V1 variable to version 1 of the
    mount protocol can be turned off. (bz 175729)
  - Fixed gssd to handel mixed case characters in
    the domainname. (bz 186069)


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-4.FC5
changelog:
  - Added new libnfsidmap call, nfs4_set_debug(), to rpc.idmapd
    which turns on debugging in the libarary.


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-3.FC5
changelog:
  - Added innetgr patch that changes configure scripts to 
    check for the innetgr function. (bz 177899)


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-1.FC5
changelog:
  - Updated to 1.0.8-rc2 release
  - Broke out libgssapi into its own rpm
  - Move librpcsecgss and libnfsidmap in the new nfs-utils-lib rpm
  - Removed libevent code; Required to be installed.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-19
changelog:
  - Updated to latest code in SourceForge CVS
  - Updated to latest CITI patches (1.0.7-4)
  - Fix bug in nfsdreopen by compiling in server defaults


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-18
changelog:
  - Updated libnfsidmap to 0.11
  - Updated libgssapi to 0.5
  - Made sure the gss daemons and new libs are
    all using the same include files.
  - Removed code from the tree that is no longer used.
  - Add ctlbits patch that introduced the -N -T and -U
    command line flags to rpc.nfsd.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-17
changelog:
  - Updated to latest nfs-utils code in upstream CVS tree
  - Updated libevent from 1.0b to 1.1a
  - Added libgssapi-0.4 and librpcsecgss-0.6 libs from CITI


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-16
changelog:
  - Reworked the nfslock init script so if lockd is running
    it will be killed which is what the HA community needs. (bz 162446)
  - Stopped rpcidmapd.init from doing extra echoing when
    condstart-ed.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-12
changelog:
  - Changed useradd to use new -l flag (bz149407)
  - 64bit fix in gssd code (bz 163139)
  - updated broken dependencies
  - updated rquotad to compile with latest
    quota version.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-4
changelog:
  - Fixed a compile error on x86_64 machines in the gss code.
  - Updated the statd-notify-hostname.patch to eliminate 
    a segmentation fault in rpc.statd when an network 
    interface was down. (bz 151828)


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-3
changelog:
  - Changed xlog to use LOG_INFO instead of LOG_DEBUG
    so debug messages will appear w/out any config
    changes to syslog.conf.
  - Reworked how /etc/exports is setup (bz 151389)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added support to rpcgssd.init and rpcsvcgssd.init scripts
    to insmod security modules.
  - Changed the nfs.init script to bring rpc.svcgssd up and down,
    since rpc.svcgssd is only needed with the NFS server is running.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Fix problem in idmapd that was causing "xdr error 10008"
    errors (bz 142813)
  - make sure the correct hostname is used in the SM_NOTIFY
    message that is sent from a rebooted server which has 
    multiple network interfaces. (bz 139101)

  - Changed nfslock to send lockd a -KILL signal
    when coming down. (bz 125257)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Replaced a memcopy with explicit assignments
    in getquotainfo() of rquotad to fix potential overflow
    that can occur on 64bit machines. (bz 138068)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added "$RQUOTAD_PORT" variable to nfs.init which
    allows the rpc.rquotad to use a predefined port
    (bz# 124676)


author: <SteveD@RedHat.com
changelog:
  - Incorporate some clean up code from Ulrich Drepper (bz# 134025)
  - Fixed the chkconfig number in the rpcgssd, rpcidmapd, and 
    rpcsvcgssd initscrpts (bz# 132284)


author: <SteveD@RedHat.com>
changelog:
  - Make sure the uid/gid of nfsnobody is the
    correct value for all archs (bz# 123900)
  - Fixed some security issues found by SGI (bz# 133556)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Major clean up. 
  - Removed all unused/old patches
  - Rename and condensed a number of patches
  - Updated to CITI's nfs-utils-1.0.6-13 patches


author: <SteveD@RedHat.com>
changelog:
  - nfslock stop is now done on package removals
  - Eliminate 3 syslog messages that are logged for
    successful events.


author: <SteveD@RedHat.com>
changelog:
  - Fixed syntax error in nfs initscripts when
    NETWORKING is not defined
  - Removed sync warning on readonly exports.
  - Changed run levels in rpc initscripts.
  - Replaced modinfo with lsmod when checking
    for loaded modules.


author: <SteveD@RedHat.com>
changelog:
  - Removed the auto option from MOUNTD_NFS_V2 and
    MOUNTD_NFS_V3 variables. Since v2 and v3 are on
    by default, there only needs to be away of 
    turning them off.


author: <SteveD@RedHat.com>
changelog:
  - Changed the permission on idmapd.conf to 644
  - Added mydaemon code to svcgssd
  - Updated the add_gssd.patch from upstream


author: <SteveD@RedHat.com>
changelog:
  - Created a pipe between the parent and child so 
    the parent process can report the correct exit
    status to the init scripts
  - Added SIGHUP processing to rpc.idmapd and the 
    rpcidmapd init script.


author: <SteveD@RedHat.com>
changelog:
  - Made the nfs4 daemons initscripts work better when 
    sunrpc is not a module
  - added more checks to see if modules are being used.


author: <SteveD@RedHat.com>
changelog:
  - Added the shutting down of the rpc v4 daemons.
  - Updated the Red Hat only patch with some init script changes.


author: <SteveD@RedHat.com>
changelog:
  - Added the addition and deletion of rpc_pipefs to /etc/fstab
  - Added the addition and deletion of module aliases to /etc/modules.conf


author: <SteveD@RedHat.com>
changelog:
  - Removed gssd tarball and old nfsv4 patch.
  - Added new nfsv4 patches that include both the
     gssd and idmapd daemons
  - Added redhat-only v4 patch that reduces the
     static librpc.a to only contain gss rpc related
     routines (I would rather have gssd use the glibc 
     rpc routines)
  -Changed the gssd svcgssd init scripts to only
     start up if SECURE_NFS is set to 'yes' in
     /etc/sysconfig/nfs


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added the setting of lockd ports via sysclt interface
  - Removed queue setting code since its no longer needed


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - "service nfs restart" should start services even if currently 
  -   not running (#59469)
  - bump version to 0.3.3-4


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - don't install any rquota pages in _mandir: (#39707, #44119)
  - don't try to manipulate rpc.rquotad in init scripts 
  -   unless said program actually exists: (#43340)


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - Fix incorrect file specifications in statd manpage.
  - Require gawk 'cause it's used in nfslock init script.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - switch to nfs-utils as the base tree
  - fix the statfs patch for the new code base
  - single package that obsoletes everything we had before (if I am to keep
    some traces of my sanity with me...)


author: Kai Engert <kaie@redhat.com> 0.9.8e-34
changelog:
  - Rebase ca-bundle.crt to the upstream version 2.4 with legacy
    modifications. For compatibility reasons, several CA certificates with
    RSA sizes of 1024 bits are still included.
  - Add a patch to the source RPM that documents the changes from the
    upstream version.


author: Jan Horak <jhorak@redhat.com> - 31.3.0-6
changelog:
  - Fixed rhbz#1164855 - firefox.desktop is missing
    x-scheme-handler MimeType entries
  - Fixed problems with dictionaries (mozbz#1097550)


author: Martin Stransky <stransky@redhat.com> - 10.0.8-2
changelog:
  - Fixed rhbz#865284 - add the storage.nfs_filesystem
    config key to property list
  - disable OOP for wrapped plugins (nspluginwrapper)


author: Miroslav Rezanina <mrezanin@redhat.com> - kvm-83.272.el5
changelog:
  - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch [bz#1219266]
  - Resolves: bz#1219266
    (kvm: qemu: floppy disk controller flaw [rhel-5.11.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-146.el5
changelog:
  - xen-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch
  - xen-FDC-Fix-buffer-overflow-Herv-Poussineau.patch
  - Resolves: bz#1219333
   (xen: qemu: floppy disk controller flaw [rhel-5.11.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-144.el5
changelog:
  - xm: Fix vcpu-pin complain for CPU number out of range (rhbz 955656)
  - libxc: Support set affinity for more than 64 CPUS (rhbz 955656)
  - libxc: Fixes for "support affinity for more than 64 CPUS" (rhbz 955656)
  - xend: Fix bug of a cpu affinity vcpu-pin under ia32pa (rhbz 955656)
  - libxc: Fix cpu number overflow for vcpu-pin (rhbz 955656)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-143.el5
changelog:
  - libxc: move error checking next to the function which returned the error (rhbz 870413)
  - libxc: builder: limit maximum size of   kernel/ramdisk (rhbz 870413)
  - e1000: discard packets that are too long if !SBP and !LPE (rhbz 910844)
  - e1000: discard oversized packets based on SBP|LPE (rhbz 910844)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-142.el5
changelog:
  - Properly close logfile of console daemon on error (rhbz 749776)
  - Fix leaks in block-qcow driver (rhbz 749776)
  - Avoid bogus use of NULL pointer in hvmloader (rhbz 749776)
  - qemu-dm: fix unregister_iomem (rhbz 861349)
  - Backport a single hunk from qemu-xen-unstable commit 13669683 (rhbz 861349)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-140.el5
changelog:
  - pygrub: Improve handling of big files (rhbz 821705)
  - customize migration parameters (rhbz 831122)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-139.el5
changelog:
  - xm: Prevent to offline all vcpus (rhbz 716924)
  - xenconsoled: replace gettimeofday with clock_gettime (rhbz 753796)
  - Coverity fix #02 (rhbz 749776)
  - Coverity fix #12 (rhbz 749776)
  - Coverity fix #29 (rhbz 749776)
  - Coverity fix #30 and #31 (rhbz 749776)
  - Coverity fix #35 (rhbz 749776)
  - Coverity fix #45 (rhbz 749776)
  - Coverity fix #49 & #66 (rhbz 749776)
  - Coverity fix #56 (rhbz 749776)
  - Coverity fix #67 & #68 (rhbz 749776)
  - Coverity fix #69, #70, #71, #72, #80, #81, #82, #83 (rhbz 749776)
  - Coverity fix #73 (rhbz 749776)
  - Coverity fix #87 & #88 (rhbz 749776)
  - Coverity fix #100 (rhbz 749776)
  - Coverity fix #101, #102, #103 & #104 (rhbz 749776)
  - Coverity fix #105, #107 & #108 (rhbz 749776)
  - Coverity fix #116 (rhbz 749776)
  - Coverity fix #119 (rhbz 749776)
  - Coverity fix #120 & #121 (rhbz 749776)
  - Coverity fix #125 (rhbz 749776)
  - Coverity fix #131 (rhbz 749776)
  - Coverity fix #140, #141 & #142 (rhbz 749776)
  - Coverity fix #143, #144 & #145 (rhbz 749776)
  - Coverity fix #156 (rhbz 749776)
  - Coverity fix #162 & 165 (rhbz 749776)
  - Coverity fix #170, #171 & #172 (rhbz 749776)
  - Coverity fix #181 (rhbz 749776)
  - pygrub: Fix handling entry edition for grub2 (rhbz 766483)
  - Add option to pause guest on restore (rhbz 769613)
  - Handle correctly network device names containing capital letters only (rhbz 771617)
  - Do not store invalid disk format (rhbz 803181)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-136.el5
changelog:
  - qemu-dm/e1000: bounds packet size against buffer size (rhbz 786941)
  - Use correct expansion in xen-network-common.sh (rhbz 772639)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-135.el5
changelog:
  - Fix valid cdrom image check (rhbz 737851)
  - pygrub: add more grub2 config file names (rhbz 746602)
  - pygrub: read all MSDOS partitions (rhbz 746602)
  - pygrub: read all GPT partitions (rhbz 746602)
  - pygrub: parse more grub2 config file constructs (rhbz 746602)
  - fix SCSI buffer overflow, disable SCSI CD-ROMs (rhbz 736291)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-134.el5
changelog:
  - qemu-dm: send RARP notification after fullvirt live migration (rhbz 719294)
  - hotplug: set netback/tap MTU to the same value as the bridge MTU (rhbz 697310)
  - copy the MTU of the physical interface to the Xen bridge (rhbz 733417)
  - Release device backends before restarting guest on the destination machine (rhbz 733667)
  - Add configuration option to specify memory reserve for guest creation (rhbz 524624)
  - fix SCSI cdrom sigsegv (rhbz 735993)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-133.el5
changelog:
  - Better output on xendomains status when nothing to be done (rhbz 699615)
  - Add "-serial none" handling to qemu-dm (rhbz 713074)
  - Use mem_kb value for memory for long xm list output (rhbz 714855)
  - fix rounding of "xm list" output (rhbz 703693)
  - exit from QEMU if the pv framebuffer xenstore tree is inaccessible (rhbz 717525)
  - Add support for "xm debug-keys" (rhbz 705831)
  - Add file lock to xenconsole (rhbz 706859)
  - Check for amount of free disk space before attempting to suspend (rhbz 497080)
  - update PIIX4 revision (rhbz 661211)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-131.el5
changelog:
  - fix smbios for >=32GB guests (rhbz 702248)
  - ACPI: Dynamically indicate presence of COM1/COM2 ports (rhbz 702607)
  - Allow HPET to be configured as a per-domain config option (rhbz 702607)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-130.el5
changelog:
  - Fix logic and integer overflow in xc_try_bzip2_decode() (rhbz 696939)
  - Fix logic and integer overflow in _xc_try_lzma_decode() (rhbz 696939)
  - Fix integer and buffer overflows in xc_dom_probe_bzimage_kernel() (rhbz 696939)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-129.el5
changelog:
  - Backport xz decompression for domU kernels (rhbz 683437)
  - Fix changing xvd* devices to ide for first four disks (rhbz 692034)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-128.el5
changelog:
  - Fix error message in the xend.log when lock is no longer valid (rhbz 690760)
  - Fix multiple serial port support to allow specify no port (rhbz 614004)
  - ioemu: Make sure all xvd* devices are changed to IDE devices (rhbz 692034)
  - removed "Backport multi-profile DVD-ROM support from upstream QEMU" patch (rhbz 688456)
  - removed "xen-ioemu: Implement cdrom commands to handle drives correctly" patch (rhbz 622763)
  -


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-127.el5
changelog:
  - Support for adding two or more serial ports to Xen guest (rhbz 614004)
  - Backport multi-profile DVD-ROM support from upstream QEMU (rhbz 688456)
  - fix domain creation on NUMA machines (rhbz 688162)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-126.el5
changelog:
  - Handle SDL grabs failing (rhbz 664773)
  - let the USB tablet reach the far bottom and right pixels (rhbz 665017)
  - fix USB mouse/tablet descriptors (rhbz 665017)
  - USB HID event queuing (rhbz 665017)
  - fix vnc screen corruption bugs and viewer exits (rhbz 665014)
  - add two missing cirrus_update_memory_access (rhbz 665014)
  - fix PS/2 mouse with SDL interface (rhbz 630814)
  - Correctly change domain data on crash with rename-restart (rhbz 652150)
  - xenconsoled: Fix rate-limit calculation overflow leading to console freezes (rhbz 593339)
  - Fix xendomains output (rhbz 657187)
  - qemu-dm: export test_pci_devfn() (rhbz 665032)
  - qemu-dm: Do not unplug device-assigned pass-through PCI devices (rhbz 665032)
  -  Move and fix VCPU count check to user-space (rhbz 625368)
  - Fix memory leak in xc_resume code (rhbz 673456)
  - Generate random MAC address for tap device (rhbz 684700)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-125.el5
changelog:
  - Patch to fix race condition in hotplug scripts (rhbz 638488)
  - blktapctrl: synch userspace MAX_TAP_DEV with kernel (BZ#680407) (rhbz 680407)
  - use transparent_union to avoid API changes in libxc (rhbz 674516)
  - additional xenctx fix for 32-on-64 domains (rhbz 674516)
  - fix formatting of flags (rhbz 674516)
  - fix save/restore in the presence of arbitrary xenstore keys (rhbz 682101)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-124.el5
changelog:
  - pygrub: support grub2 "(hdX, msdosY)" partition syntax (rhbz 675733)
  - Do not check disk sharing with guests in hotplug script (rhbz 679280)
  - Fix off-by-one-bit error when initializing PCI devices (rhbz 652310)
  - xenctx: Print EFLAGS for i386 and x86/64 (rhbz 674516)
  - xenctx/x86: fix format for readability and add information (rhbz 674516)
  - libxc replace interface to use vcpu_guest_context_any_t instead of vcpu_guest_context_t (rhbz 674516)
  - Make xc_translate_foreign_address aware of compat-mode guests (rhbz 674516)
  - xenctx: compat-mode/HVM support (rhbz 674516)
  - Remove uses of DECLARE_BITMAP in the public HVM save format headers (rhbz 674516)
  - libxc support for the new partial-HVM-save domctl. (rhbz 674516)
  - libxc: Make xc_translate_foreign_address compatible with old hypervisor (rhbz 674516)
  - xenctx: support for 64-bit HVM guests (rhbz 674516)
  - xenctx: print x86_32 context on x86_64 (rhbz 674516)
  - xenctx: Teach xenctx how to find the right addresses in real-mode. (rhbz 674516)
  - Implement domain_is_32_bit_hvm() to libxc and forbid setting up memory for 32-on-64 bit HVM guests (rhbz 626806)
  - update domctl.h (rhbz 679138)
  - xen-ioemu: Implement cdrom commands to handle drives correctly (rhbz 622763)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-123.el5
changelog:
  - Do not check devices of shutdown domain (rhbz 671337)
  - Fix CD-ROM eject for HVM guests (rhbz 605956)
  - Delete device entry on detach (rhbz 672537)
  - Fix dev param handling on device duplicate check (rhbz 672224)
  - Fix check for vbd uname (rhbz 674763)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-122.el5
changelog:
  - SCSI: Handle inquiry commands of varying length (rhbz 627551)
  - XenD: Check for device model on domain startup (rhbz 637351)
  - Fix xmdomains.cfg documentations (rhbz 651710)
  - XenD: Fix setName() code to store new domain name (rhbz 641541)
  - hotplug: check image file existence (rhbz 661277)
  - Xend: Add syntax check for block devices (rhbz 658712)
  - Ensure tap device receive dummy MAC address (rhbz 663933)
  - Fix raw_aio_cancel and delete/cleanup BHs when necessary (rhbz 665011)
  - Fix memory/fd leak in pt_msix_init() (rhbz 665011)
  - Do not update xend on domain creation (rhbz 668365)
  - Qualify do_FLR call with correct scope (rhbz 669388)
  - xenstored: Do not write to stderr if we are daemonised (rhbz 668747)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-121.el5
changelog:
  - Remove overhead when checking duplicate devices (rhbz 661927)
  - Fix xenstore entry accounting (rhbz 661927)
  - ioemu: do asynchronous flushes for IDE dma I/O (rhbz 651912)
  - ioemu: do asynchronous flushes on IDE pio (rhbz 651912)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-120.el5
changelog:
  - Removed patch "ioemu: do asynchronous flushes for IDE drives"(rhbz 651912)
  - Updated patch "Unpause domU as soon as memory scrubbing on source machine starts on live migration" (rhbz 609589)
  - Updated patch "prevent restarting loops when guest crashes at boot time and dump-core is enabled" (rhbz 624959)
  - Updated patch "Report error on attaching non-existing cdrom" (rhbz 645237)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-119.el5
changelog:
  - prevent restarting loops when guest crashes at boot time and dump-core is enabled (rhbz 624959)
  - Provide alternative script to avoid "received packet with own address as source address" (rhbz 509789)
  - Implement check for emulated NIC model when appropriate (rhbz 626277)
  - Unpause domU as soon as memory scrubbing on source machine starts on live migration (rhbz 609589)
  - backport qemu_aio_flush() and wait for outstanding aio requests before unplugging the IDE disk (rhbz 652701)
  - Fix qcow2raw processing (rhbz 544300)
  - Remove DFPRINTF macro in qcow2raw (rhbz 544300)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-118.el5
changelog:
  - Preserve maxmem value and disallow invalid values (rhbz 627480)
  - Linux vbd hotplug: Avoid "leaked" loopback devices (rhbz 532648)
  - Linux vbd hotplug: Speed up finding a loopback device (rhbz 532648)
  - Fix updating serial port parameters on load (rhbz 501026)
  - Implement rate limit to the qemu-dm serial port implementation (rhbz 501026)
  - xen: correct data-type in pyxc_set_hvm_param (rhbz 639361)
  - Implement push opcodes (rhbz 636244)
  - Fix protected_to_real transition addressing (rhbz 636244)
  - Report error on attaching non-existing cdrom (rhbz 645237)
  - ioemu: do asynchronous flushes for IDE drives (rhbz 651912)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-117.el5
changelog:
  - PV guest hang on boot when VCPU bound to specific CPU (rhbz 541840)
  - Fix bootloader handling when bootloader exits too early or didn't return any data (rhbz 613560)
  - Fix typo in error message in xendomains script (rhbz 628779)
  - Use sed instead of replace (rhbz 628476)
  - Allocate VTd space when restore HVM guests (rhbz 609812)
  - Xen platform emul unplug support (rhbz 515238)
  - Revert patch "Report error when save hvm on ia64" (rhbz 622413)
  - ia64: Disable save/migrate of HVM guest (rhbz 504278)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-116.el5
changelog:
  - Xenstore and block infrastructure to fix xen-ioemu image file handling (rhbz 439279)
  - Pass the drive's readonly attribute to the guest OS (rhbz 439279)
  - Silently change IDE disk read-only flag to read-write flag on restore/migrate (rhbz 439279)
  - XenD: Disable HVM guest creation with read-only IDE disk specified (rhbz 439279)
  - fix segmentation fault after hotplug pass-through device (rhbz 571404)
  - Automatically balloon down a xen dom0 when ballooning up a domU (rhbz 620317)
  - Allow xendomain to handle domain names longer than 16 chars (rhbz 503290)
  - Introduce domain_shutdown() and fix paused domains handling (rhbz 626716)
  - Implement check for save/migration of guest devices before started (rhbz 567916)
  - new etherboot zrom file (rhbz 580263)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-115.el5
changelog:
  - pyGrub: Fix default value out of range (rhbz 514738)
  - Fix potential division by zero in NUMA handling (rhbz 556391)
  - Fix xen IP antispoofing for multiple IP addresses (rhbz 443237)
  - Implement correct resume handling when save fails (rhbz 544950)
  - Fix avoidance to restart domain on crash (rhbz 528448)
  - balloon.free: dom0_alloc should be in KiB (rhbz 619037)
  - allow boot w/out maxmem set (rhbz 609619)
  - Implement check for enough memory on restore/migrate (rhbz 511135)
  - xend: fix server/netif.py so that it respects type=None (rhbz 602869)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-114.el5
changelog:
  - Fix memory leak in xenstore (rhbz 606919)
  - fix ballooning of dom0 and creating domains without maxmem (rhbz 608065)
  - allow ballooning with "xm mem-set" up to the maximum value set with "xm mem-max" (rhbz 608072)
  - Fix error message on detaching non-existing device (rhbz 520850)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-112.el5
changelog:
  - Add missing #define to SCSI disk handler (rhbz 516177)
  - SCSI and USB async I/O support (rhbz 516177)
  - SCSI TCQ (Tagged Command Queueing) support (rhbz 516177)
  - Add 40-bit DMA support to LSI SCSI emulation and fix length mismatch condition (rhbz 516177)
  - Correct SCSI error reporting and SCSI Verify command support (rhbz 516177)
  - Make bdrv_flush pay attention to errors (rhbz 516177)
  - Add support for asynchronous flushing operation (rhbz 516177)
  - Add SCSI asynchronous flushing support (rhbz 516177)
  - Check for disk existence prior to restore/migrate (rhbz 513431)
  - Fix phase mismatch jump (rhbz 552573)
  - Add 64-bit Block Move support (Direct & Table Indirect) to LSI SCSI controller (rhbz 552573)
  - ia64: Make xc_save report error on failure (rhbz 504278)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-111.el5
changelog:
  - Disable image format guessing for HVM guest if set explicitly (rhbz 569253)
  - Fix keyboard layout parsing (rhbz 444815)
  - Code to allow interface name definition for xend-relocation-address (rhbz 515371)
  - Add comment for xend-relocation-address to /etc/xen/xend-config.sxp (rhbz 515371)
  - Implement Grub2 configuration classes (rhbz 577511)
  - Rewrite pygrub for Grub2 implementation (rhbz 577511)
  - Implement new_image to LiloConfigFile class (rhbz 577511)
  - Fix xm man page (rhbz 529380)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-110.el5
changelog:
  - Correctly resume PV guest with PVFB device after save fails (rhbz 513335)
  - Support the assignment of the VF of Intel 82599 10GbE Controller (rhbz 581655)
  - Use PCIe FLR for VF of Intel 82599 10GbE Controller (rhbz 581655)
  - Make xm dump-core honor the original guest state (rhbz 542590)
  - Make xend honor the original guest state (rhbz 542590)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-109.el5
changelog:
  - Invalid restore image files handling (rhbz 416811)
  - Handle device dettach error (rhbz 499616)
  - Do not set current memory higher then max memory (rhbz 528431)
  - Fix cable disconnect with miimon bonding (rhbz 573579)
  - Restore device model when HVM guest save fails (rhbz 486308)
  - Clear local routing table when arp bonding used (rhbz 589385)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-108.el5
changelog:
  - Fix save failure recovery for 32-on-64 guests (rhbz 513537)
  - Give correct memory amount back to dom0 when ballooning fails (rhbz 580509)
  - Add HLT instruction emulation to VMXAssist (rhbz 580945)
  - Fix using old qcow tapdisk images (rhbz 586821)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-107.el5
changelog:
  - Add dom0 statistics for case we use network bonding (rhbz 495958)
  - Strip "migrating-" prefix from guest's name when migrate/save failed (rhbz 494811)
  - Make Caps Lock key state synchronized with the dom0 (rhbz 552612)
  - Fix typo in keymap definitions in Xen (rhbz 552600)
  - Xen forgets e1000 emulation after vm restart (rhbz 574540)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-105.el5
changelog:
  - Migration not working sometimes with xen-3.0.3-95.el5 disable paused domain save patch (rhbz 557446)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-102.el5
changelog:
  - Add more SMBIOS data to hvmloader (rhbz 540161)
  - Customize manufacturer and family for guest SMBIOS (rhbz 499453)
  - Fix bugs in ATAPI driver (rhbz 480317)
  - Add guest placement feature to Xen NUMA (rhbz 543199)
  - Fix up xend to allow external clients to PCI hotplug (rhbz 512315)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-101.el5
changelog:
  - Add maxvcpus support for xm (rhbz 453042)
  - Warn on attempts to create live core dumps (rhbz 382591)
  - Print error message when pciback is not loaded (rhbz 514448)
  - Fix Xendomains output formatting (rhbz 251666)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-100.el5
changelog:
  - Make python scripts use system python (rhbz 521333)
  - xen qemu SCSI emulation bugfixes (rhbz 515757)
  - Set FD_CLOEXEC when opening file descriptors (rhbz 522850)
  - Implement xen lzma and bzip2 bzImage loader decompression (rhbz 517049)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-99.el5
changelog:
  - fix 'xm pci-list' for PV guests (rhbz 514025)
  - Fix rename-restart behavior (rhbz 521799)
  - Allow more then 12 PCI device assignments (rhbz 511403)
  - Fix domain name conflicts after domain shutdown (rhbz 529880)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-97.el5
changelog:
  - Allocte VTd space for HVM guests (rhbz 512041)
  - Check if a device is behind PCIe switch that lacks ACS (rhbz 523819)
  - Update scheduler parameters after save-restore (rhbz 513211)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-96.el5
changelog:
  - Give proper error when detaching PCI device from PV guest (rhbz 512307)
  - Fix memory leaks in lib{xc, xenstore} python bindings (rhbz 524308)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-95.el5
changelog:
  - Fix race condition on domain reboot (rhbz 513604)
  - Avoid multiple restarts of a domain (rhbz 518104)
  - Add grub.conf password protection support to pygrub (rhbz 518124)
  - Ignore unimplemented PHYSDEVOP_map_pirq (rhbz 521346)
  - Xend save/shutdown hang when running on paused domain (rhbz 504910)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-92.el5
changelog:
  - Fix Python traceback when pygrub tries to log a message (rhbz 490754)
  - Relax PCI device assignment rules for PV guests (rhbz 508310)
  - Don't list assigned PCI devices as assignable (rhbz 510682)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-91.el5
changelog:
  - Prevent PVFB config loss after PV guest reboot -- reworked fix for PVFB
    xenstore leaks (rhbz 507765)
  - Fix AIO hang in ioemu (rhbz 507329)


author: Michal Novotny <minovotn@redhat.com> - 3.0.3-89.el5
changelog:
  - Fix guest reboot with VT-d device assigned (rhbz 507182)
  - Fix MSI-X NIC hotplug removal (rhbz 507198)
  - Fix PCIE NICs on Stoakley detach issue (rhbz 507179)
  - Add BDFs duplicate check in HVM configure file (rhbz 507195)
  - Fix `xm pci-list` BDF output on WeyBridge platform (rhbz 507257)
  - Set cpu_weight default value back to 256 (rhbz 508680)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-86.el5
changelog:
  - Add missing blktap poll-on-aio support (rhbz 486353)
  - Fix L1 table endianess of qcow images (rhbz 485471)
  - Fix network-bridge-bonding script for VLANs (rhbz 492258)
  - AIO backport for qemu (rhbz 465116)
  - Fix HVM time skew problems (rhbz 480689)
  - Fix device destroy (rhbz 484110)
  - Add 1GB page table support (rhbz 487342)
  - Fix credit scheduler parameters (rhbz 345321)
  - Fixed version of xen-vfb-default-keymap.patch (rhbz 345251)
  - Fix hotplug timeout under heavy I/O (rhbz 456926)
  - Check for devices being used by other domains (rhbz 345441)
  - Support for VT-d (rhbz 480520)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-85.el5
changelog:
  - New version of pci-migration patch to fix file descriptor leak (rhbz 334821)
  - Allow command-line editing in IA64 boot loader (rhbz 249791)
  - Fix PV migration hang on failure (rhbz 428691)
  - Fix disk reordering when xend is restarted (rhbz 474579)
  - Fix xenconsole after aborted save (rhbz 486291)
  - Fix 64-bit MMIO bar remapping (rhbz 494925)
  - Support relative mouse offset VNC extension (rhbz 487559)
  - Fix PVFB backend xenstore leak (rhbz 439182)
  - Fix HVM guest creation under tight memory conditions (rhbz 419771)
  - Add Ctrl+Alt+Del support for HVM bios (rhbz 338331)
  - Add global default keymap setting (rhbz 345251)
  - Fix guest resume after failed save (rhbz 486157)
  - Stop xend in runlevels 0, 1, and 6 (rhbz 490053)
  - Persist bootloader settings across xend restarts (rhbz 468971)
  - Fix cpu affinity reset after save/restore (rhbz 228890)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-84.el5
changelog:
  - Fix `default' and `timeout' parameters in elilo.conf (rhbz 491408)
  - Fix a typo which blocks local migrations (rhbz 484967)
  - Forbid migration with attached PCI devices (rhbz 334821)
  - Fix network-bridge when SRCADDR is used for default route (rhbz 475249)
  - Disallow bogus MAC addresses when creating new VIF devices (rhbz 476611)
  - Fix a typo in a doc string (rhzb 481354)
  - Add INT13 LBA48 extensions to HVM BIOS (rhbz 487907)
  - Fall back to a first entry in grub.conf if default is invalid (rhbz 490754)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-83.el5
changelog:
  - Support virtual SCSI disks larger than 2TB (rhbz #482780)
  - Add F11/F12 key support to hvm bios (rhbz #338321)
  - Fix return values in xend and xendomains init scripts (rhbz #430904)
  - Document Ctrl-] for xm console in xm(1) (rhbz #454611)
  - Fix checking for out-of-range IDE disk devices (rhbz #475433)
  - Fix memory leak in libxenstore (rhbz #490158)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-81.el5
changelog:
  - Fix data corruption with virtual SCSI disks >1TB (rhbz #479339)
  - Fix SCSI problems on fullvirt guests with >4GB RAM (rhbz #480843)
  - Give back memory to dom0 after a failed auto-balloon (rhbz #345271)
  - Fix save/restore for 32-on-64 PV guests (rhbz #425411)
  - Fix xm dump-core for 32-on-64 PV guests (rhbz #480118)
  - Report errors when saving guests (rhbz #451675)
  - Truncate existing file when dumping guest core (rhbz #484346)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-78.el5
changelog:
  - Alternative network-bridge scripts without netloop for using with
    bonding (rhbz #453463, rhbz #429154)
  - Fix xm block-detach operation (rhbz #473882)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-75.el5
changelog:
  - Fix disk device ordering randomness which breaks reboots (rhbz #462727)
  - Remove qemu-dm.debug wrapper script (CVE-2008-4993, rhbz #470795)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-74.el5
changelog:
  - Avoid duplicate core dump race condition (rhbz #455879)
  - Xenstore unsafe data access (CVE-2008-4405, rhbz #464817)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-73.el5
changelog:
  - Fix xenstat corruption when a domain shuts down (rhbz #251743)
  - Fix selinux labelling if xenstored is on tmpfs (rhbz #462702)
  - Clear out stale NVRAM files on ia64 (rhbz #358321)
  - Allow use of tap:aio for HVM guests emulated devices + pv drivers (rhbz #362401)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-72.el5
changelog:
  - Fix network for ia64 HVM guests with > 3gb RAM (rhbz #453114)
  - Add e1000 emulation (rhbz #344861)
  - Fix network-bridge script VLAN handling (rhbz #337651)
  - Use largepages for HVM guests (rhbz #445663)
  - Fix xm network-attach docs (rhbz #440274)
  - Fix xm shutdown --wait, when using domid (rhbz #442755)


author: Chris Lalancette <clalance@redhat.com> - 3.0.3-71.el5
changelog:
  - Support for attaching more than 16 xvd devices to guest domains (rhbz #456392)
  - Don't clobber the wallclock during restore (rhbz #426861)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-68.el5
changelog:
  - Rotate all log files periodically (rhbz #422271)
  - Fix overflow in qemu-img (rhbz #437086)
  - Fix race in DMA thread (rhbz #250988)
  - Fix blktap data access alignment (rhbz #253884)
  - Don't unpause domain after taking core (rhbz #442698)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-67.el5
changelog:
  - Persist device model PID across restarts (rhbz #280611)
  - Pass internal libxc return value back to caller (rhbz #414391)
  - Fix passing of domid to libxc from python IOport & IRQ controllers (rhbz #432376)
  - Don't try to balloon more than physical RAM (rhbz #280881)
  - Add blktap sub-type checks (rhbz #444413)
  - Respect nographics request for HVM (rhbz #230841)
  - Put xenstored database on tmpfs (rhbz #446089)
  - Prefer grub.conf in pygrub (rhbz #234486)
  - Don't throw errors when listing domains (rhbz #238833)
  - Add mouse wheel support to PVFB (rhbz #250401)


author: Markus Armbruster <armbru@redhat.com> - 3.0.3-66.el5
changelog:
  - Correctly limit PVFB size CVE-2008-1952 (rhbz #447761)
  - Disable QEMU USB disk image format auto-detection CVE-2008-1945 (rhbz #445846)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-65.el5
changelog:
  - Remove blktap sharing patch which prevents guests with large
    numbers of disks booting (rhbz #445476)


author: Markus Armbruster <armbru@redhat.com> - 3.0.3-63.el5
changelog:
  - Fix PVFB to validate frame buffer description (rhbz #443376)
  - Fix PVFB to cope with bogus update requests (rhbz #443392)


author: Chris Lalancette <clalance@redhat.com> - 3.0.3-60.el5
changelog:
  - Pull in the userland side of upstream c/s 15161 to fix fully virt SMP
    boot on Intel machines (rhbz #435744)


author: Richard W.M. Jones <rjones@redhat.com> - 3.0.3-59.el5
changelog:
  - Clarify documentation for 'xm vcpu-set' and 'xm mem-set' on FV guests
    (earlier changelog entry for this bug is incorrect) (rhbz #370101)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-54.el5
changelog:
  - Fix pygrub unaligned access (rhbz #259541)
  - Add timestamp to console and hypervisor log files (rhbz #271181)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-51.el5
changelog:
  - Fix PCI device passthrough (rhbz #339421)
  - Fix device sharing checks for blktap disks (rhbz #223259)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-50.el5
changelog:
  - Allow type of None for VIF in HVM guests (rhbz #300531)
  - Fix release of NVRAM on domain reboot cleanup (rhbz #426079)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-48.el5
changelog:
  - Fix NVRAM cleanup for ia64 (rhbz #428653)
  - Fix destroy of large VMs (rhbz #428651)
  - Fix crash dump of PAE guests > 4 GB (rhbz #336041)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-47.el5
changelog:
  - Really fix qemu bug (rhbz #360381)
  - Fix blkif check to distinguish 0 and None for Solaris (rhbz #253222)


author: Daniel P. Berrange <berrange@redhat.com>
changelog:
  - Add NUMA info to physinfo sysctl (rhbz #426322)
  - Add NR cpus info to physinfo sysctl (rhbz #426323)
  - Add availheap sysctl (rhbz #426321)
  - Add 'xm trigger' command (rhbz #223900)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-43.el5
changelog:
  - Fixed xenbaked tmpfile flaw (CVE-2007-3919) (rhbz #350421)
  - Delete kernel/initrd after dryrun xm create (rhbz #251225)
  - Update 32-on-64 PVFB compat fix (rhbz #253221)
  - Delete xenstored TDB upon startup (rhbz #356461)
  - Cleanup kernel/initrd after pygrub errors (rhbz #231144)
  - Stop SDL backend choking on bogus screen updates (rhbz #368931)
  - Fix handling of lilo.conf for ia64 (rhbz #288371)
  - Backport USB tablet fixes (rhbz #245574)
  - Fix libvncserver unaligned access (rhbz #286021)


author: Chris Lalancette <clalance@redhat.com> - 3.0.3-41.el5
changelog:
  - QEmu NE2000 overflow check - CVE-2007-1321 (rhbz #296281)
  - Pygrub guest escape - CVE-2007-4993 (rhbz #302831)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-38.el5
changelog:
  - Fixed memory ballooning for HVM restore (rhbz #253583)
  - Avoid bogus VNC password prompts after migrate/restore (rhbz #252359)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-37.el5
changelog:
  - Fix UUID normalization when no UUID is present (rhbz #253683)
  - Fix handling of 'keymap' param in config files (rhbz #252361)
  - Don't destroy guest after shutdown timeout (rhbz #236595)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-36.el5
changelog:
  - Ensure PVFB daemon terminates promptly on domain shutdown (rhbz #252232)
  - Fix rtl8139 checksums for VISTA (rhbz #251407)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-35.el5
changelog:
  - Fix more VNC threading problems (rhbz #245188)
  - Fix save/restore edge case (rhbz #245960)
  - Fix legacy PVFB for 32-on-64 (rhbz #248947)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-34.el5
changelog:
  - Fixed booting guests with legacy native ABI device protocol (rhbz#248192)
  - Fix more VNC keycode/keysym mappings issues (rhbz #248863)
  - Fix potential QEMU crash when VNC client disconnects (rhbz #230083)
  - Add NVRAM support for ia64 guests (rhbz #246006)
  - Normalize UUID to avoid loosing guest name upon restarts (rhbz #249564)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-31.el5
changelog:
  - Rate limit console messages from guest (rhbz 204504)
  - Use -r flag to losetup for readonly block devices (rhbz 225166)
  - Mark /etc/sysconfig/xend as a config file (rhbz 202636, rhbz 223911)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-30.el5
changelog:
  - Fix address test in network-bridge (rhbz 237667)
  - Permissions of xend-debug.log (rhbz 234227)
  - Hotplug scripts error reporting (rhbz 233433)
  - Disable network-bridge if running on Dom0 with nfs/iscsi root device (rhbz 238143)


author: Markus Armbruster <armbru@redhat.com> - 3.0.3-29.el5
changelog:
  - Fix a race in the pvfb startup (rhbz 243884)
  - Loadable pvfb keymap (rhbz 223799)
  - Fix pvfb save/restore broken in 3.0.3-27.el5


author: Daniel P. Berrange <berrange@redhat.com>
changelog:
  - Fixed 32-bit core dumps with HVM (rhbz 244300)
  - Add persistent logging of guest & hypervisor console (rhbz 202636, rhbz 223911)
  - Fix destroyDevice() args (rhbz 222094)
  - Check file exists in blktap hotplug scripts (rhbz 215342)
  - Make SXPR server in XenD multi-threaded (rhbz 210141)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-27.el5
changelog:
  - Update low level (non-XenD) userspace to work with 3.1.0 hypervisor (rhbz#243462,
    rhbz#234166, rhbz#230790)
  - Patch XenD to use 'domid' instead of 'dom' with libxc
  - Patch XenD to use new HVM domain creation process
  - Remove unused i18n stuff from Makefile
  - Fix pygrub, blktapctrl paths to return to original settings
  - Back-port 3.1.0  HVM save/restore changes to XenD (rhbz#214995)
  - Move HVM save/restore files from /tmp to /var/lib/xen (rhbz#214995)
  - Ensure pvfb backend terminates when frontend vanishes early (rhbz#230634)
  - Save vncpasswd in xenstore along with the other pvfb
    configuration (rhbz#220494)
  - Fix allocation of fixed VNC ports for pvfb (rhbz#211208)
  - Don't start a xen-vncfb process for HVM (rhbz#225413)


author: Rik van Riel <riel@redhat.com> - 3.0.3-26.el5
changelog:
  - disable qemu monitor mode, for security reasons (rhbz#230295)
  - fix IA64 shadow page table mode (rhbz#230459, rhbz#230331)


author: Rik van Riel <riel@redhat.com> - 3.0.3-21.el5
changelog:
  - make /var/log/xen only readable by root (rhbz#212082)
  - we no longer package /var/xen/dump, so don't mkdir it


author: Rik van Riel <riel@redhat.com> - 3.0.3-20.el5
changelog:
  - fix core dumps of 32 bit guests >2GB RAM (rhbz#215796)
  - write the /local/domain/vm node early in the startup process (rhbz#215269)


author: Rik van Riel <riel@redhat.com> - 3.0.3-19.el5
changelog:
  - fix memory boundary checking in qemu-dm (rhbz#221119)
  - fix VNC JP106 keyboard handling (rhbz#215778)


author: Rik van Riel <riel@redhat.com> - 3.0.3-18.el5
changelog:
  - add --force option to xenbus device detach code (rhbz#217853)
  - fix keeping track of HVM vnc password (rhbz#218050)


author: Rik van Riel <riel@redhat.com> - 3.0.3-17.el5
changelog:
  - enable DMA on HVM virtual cdrom drive (rhbz#218357)
  - new paravirt framebuffer, as merged upstream (rhbz#218050)


author: Rik van Riel <riel@redhat.com> - 3.0.3-14.el5
changelog:
  - do not auto-start a domain that was restored from a save (rhbz#217295)
  - use log level info for messages that are not errors (rhbz#218759)
  - Resolves: rhbz#217295 rhbz#218759


author: Rik van Riel <riel@redhat.com> - 3.0.3-12.el5
changelog:
  - catch it when an HVM guest tries to use hde (rhbz#217736)
  - make "xm list" display how much memory a domain really has (rhbz#217443)
  - move rtc timer for HVM guests into the hypervisor (rhbz#214780)
  - Resolves: rhbz#214780 rhbz#217736 rhbz#217443


author: Rik van Riel <riel@redhat.com> - 3.0.3-10.el5
changelog:
  - fix 2TB overflow/wraparound in blktap (rhbz#217580)
  - various fixes from Herbert Xu's security audit
  - allow HVM virtual floppy to be a device on dom0 (rhbz#216449)
  - make uppercase characters always work in HVM console (rhbz#217554)
  - Resolves: rhbz#217580 rhbz#216449 rhbz#217999 rhbz#218000 rhbz#218002 rhbz#218003 rhbz#218005 rhbz#217554


author: Rik van Riel <riel@redhat.com> - 3.0.3-9.el5
changelog:
  - reapply the for bugs 211600, 212193 and 211697
  - move the dump path to /var/lib/xen (bug 212558)
  - Resolves: rhbz#211600 rhbz#212193 rhbz#211697 rhbz#212558


author: Rik van Riel <riel@redhat.com> - 3.0.3-8.el5
changelog:
  - undo the fixes for bz 211600, 212193 and 211697, apply them after beta 2
  - fix vmxassist segment loading on real->protected mode transition (bz 214004)


author: Rik van Riel <riel@redhat.com> - 3.0.3-7.el5
changelog:
  - fix the uptime statistic for suspended/resumed guests (bz 211600)
  - improve the error message when domU uses the wrong device (bz 212193)
  - print the full path to the config file in error messages (bz 211697)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-5.el5
changelog:
  - Added /var/lib/xen/images as default dir for storing guest disk image files
    to ensure correct selinux context (bz 212995)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-3.el5
changelog:
  - Switch /etc/xen directory to be mode 0700 because the config files
    can contain plain text passwords (bz 209335)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-1.el5
changelog:
  - Pull in the official 3.0.3 tarball of xen (changeset 11774). No functional
    change, only release number toggled.
  - Add patches for VNC password authentication (bz 209335)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.2-42
changelog:
  - Added vnclisten patches to make VNC only listen on localhost
    out of the box, configurable by 'vnclisten' parameter (bz 203196)


author: Stephen C. Tweedie <sct@redhat.com> - 3.0.2-40
changelog:
  - Workaround blktap/xenstore startup race
  - Add udev rules for xen blktap devices (srostedt)
  - Add support for dynamic blktap device nodes (srostedt)
  - Fixes for infinite dom0 cpu usage with blktap
  - Fix xm not to die on malformed "tap:" blkif config string
  - Enable blktap on kernels without epoll-for-aio support.
  - Load the blktap module automatically at startup
  - Reenable blktapctrl


author: Daniel Berrange <berrange@redhat.com> - 3.0.2-39
changelog:
  - Disable paravirt framebuffer server side rendered cursor (bz 206313)
  - Ignore SIGPIPE in paravirt framebuffer daemon to avoid terminating
    on client disconnects while writing data (bz 208025)


author: Stephen C. Tweedie <sct@redhat.com> - 3.0.2-35
changelog:
  - Don't strip qemu-dm early, so that we get proper debuginfo (danpb)
  - Fix compile problem with latest glibc


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-26
changelog:
  - update to xen-unstable cs 11251
  - clean up patches some
  - disable ia64 as it doesn't currently build


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-24
changelog:
  - remove copy of xenguest-install from this package, require 
    python-xeninst (the new home of xenguest-install)


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-23
changelog:
  - add patch to fix rtl8139 in FV, switch it back to the default nic
  - add necessary ia64 patches (#201040)
  - build on ia64


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-20
changelog:
  - don't start blktapctrl for now
  - fix HVM guest creation in xenguest-install
  - make sure log files have the right SELinux label


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-19
changelog:
  - fix libblktap symlinks (#199820)
  - make libxenstore executable (#197316)
  - version libxenstore (markmc)


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-18
changelog:
  - include /var/xen/dump in file list
  - load blkbk, netbk and netloop when xend starts
  - update to cs 10712
  - avoid file conflicts with qemu (#199759)


author: Stephen C. Tweedie <sct@redhat.com> - 3.0.2-13
changelog:
  - Update to xen-unstable cset 10675
  - Remove internal libvncserver build, new qemu device model has its own one
    now.
  - Change default FV NIC model from rtl8139 to ne2k_pci until the former works
    better


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-11
changelog:
  - split into main packages + -libs and -devel subpackages for #198260
  - add patch from jfautley to allow specifying other bridge for 
    xenguest-install (#198097)


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-1
changelog:
  - update to post 3.0.2 snapshot (changeset:   9744:1ad06bd6832d)
  - stop applying patches that are upstreamed
  - add patches for bootloader to run on all domain creations
  - make xenguest-install create a persistent uuid
  - use libvirt for domain creation in xenguest-install, slightly improve 
    error handling


author: Jeremy Katz <katzj@redhat.com> - 3.0.1-4
changelog:
  - add udev rule so that /dev/xen/evtchn gets created properly
  - make pygrub not use /tmp for SELinux
  - make xenguest-install actually unmount its nfs share.  also, don't use /tmp


author: Jeremy Katz <katzj@redhat.com> - 3.0.1-3
changelog:
  - set /proc/xen/privcmd and /var/log/xend-debug.log as close on exec to avoid
    SELinux problems
  - give better feedback on invalid urls (#184176)


author: Jeremy Katz <katzj@redhat.com> - 3.0.1-1
changelog:
  - fix xenguest-install so that it uses phy: for block devices instead of 
    forcing them over loopback.  
  - change package versioning to be a little more accurate


author: Jeremy Katz <katzj@redhat.com> - 3.0.1-0.20060208.fc5.3
changelog:
  - add patch to ensure we get a unique fifo for boot loader (#182328)
  - don't try to read the whole disk if we can't find a partition table 
    with pygrub 
  - fix restarting of domains (#179677)


author: Jeremy Katz <katzj@redhat.com> - 3.0.1-0.20060208.fc5
changelog:
  - update to current hg snapshot for HVM support
  - update xenguest-install for hvm changes.  allow hvm on svm hardware
  - fix a few little xenguest-install bugs


author: Jeremy Katz <katzj@redhat.com> - 3.0-0.20060130.fc5.4
changelog:
  - patch from David Lutterkort to pass macaddr (-m) to xenguest-install
  - rework xenguest-install a bit so that it can be used for creating 
    fully-virtualized guests as well as paravirt.  Run with --help for 
    more details (or follow the prompts)
  - add more docs (noticed by Andrew Puch)


author: Bill Nottingham <notting@redhat.com> 3.0-0.20060130.fc5.3
changelog:
  - disable iptables/ip6tables/arptables on bridging when bringing up a
    Xen bridge. If complicated filtering is needed that uses this, custom
    firewalls will be needed. (#177794)


author: Jeremy Katz <katzj@redhat.com> - 3.0-0.20060110.fc5.5
changelog:
  - buildrequire dev86 so that vmx firmware gets built
  - include a copy of libvncserver and build vmx device models against it


author: Daniel Veillard <veillard@redhat.com> - 3.0-0.20051109.fc5.4
changelog:
  - adding missing headers for libxenctrl and libxenstore
  - use libX11-devel build require instead of xorg-x11-devel


author: Rik van Riel <riel@redhat.com> 3.0-0.20050912.fc5
changelog:
  - add /var/{lib,run}/xenstored to the %files section (#167496, #167121)
  - upgrade to today's Xen snapshot
  - some small build fixes for x86_64
  - enable x86_64 builds


author: Rik van Riel <riel@redhat.com> 3.0-0.20050908
changelog:
  - explicitly call /usr/sbin/xend from initscript (#167407)
  - add xenstored directories to spec file (#167496, #167121)
  - misc gcc4 fixes 
  - spec file cleanups (#161191)
  - upgrade to today's Xen snapshot
  - change the version to 3.0-0.<date> (real 3.0 release will be 3.0-1)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - patch manpath instead of moving in specfile.  patch sent upstream
  - install to native python path instead of /usr/lib/python
  - other misc specfile duplication cleanup


author: Rik van Riel <riel@redhat.com> 2-20050402
changelog:
  - move initscripts to /etc/rc.d/init.d (Florian La Roche) (#153188)
  - ship only PDF documentation, not the PS or tex duplicates


author: Rik van Riel <riel@redhat.com> 2-20050328
changelog:
  - do not yet upgrade to new hypervisor ;)
  - add barrier to fix SMP boot bug
  - add tags target
  - add zlib-devel build requires (#150952)


author: Rik van Riel <riel@redhat.com> 2-20050305
changelog:
  - the gcc4 compile patches are now upstream
  - upgrade to last night's snapshot, drop patches locally


author: Rik van Riel <riel@redhat.com> 2-20050218
changelog:
  - upgrade to last night's Xen snapshot
  - a kernel upgrade is needed to run this Xen, the hypervisor
    interface changed slightly
  - comment out unused debugging function in plan9 domain builder
    that was giving compile errors with -Werror


author: Jeremy Katz <katzj@redhat.com> - 2-20050114
changelog:
  - update to new snap
  - python-twisted is its own package now
  - files are in /usr/lib/python now as well, ugh.


author: Rik van Riel <riel@redhat.com>
changelog:
  - grab new Xen tarball (with wednesday's patch already included)
  - transfig is a buildrequire, add it to the spec file


author: Tomas Heinrich <theinric@redhat.com> 5.8.12-7.el5_11
changelog:
  - adjust the init script to allow modification of the service
    shutdown timeout via /etc/sysconfig/rsyslog
    resolves: rhbz#1194440


author: Tomas Heinrich <theinric@redhat.com> 5.8.12-6.el5_11
changelog:
  - add patch 5 to prevent crashes when using multiple rulesets
    Resolves: rhbz#1194440
  - refresh Source0 URL


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-406.el5]
changelog:
  - [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-405.el5]
changelog:
  - [net] tcp: zero retrans_stamp if all retrans were acked (Marcelo Leitner) [1205521]
  - [net] tcp: fix retrans_stamp advancing in error cases (Marcelo Leitner) [1205521]
  - [net] tcp: Fix inconsistency source (Marcelo Leitner) [1205521]
  - [ipc] sem: fix the potential use-after-free in freeary() (Oleg Nesterov) [1124574]
  - [scsi] lpfc: Fix crash in device reset handler (Rob Evers) [1070964]
  - [mm] fix broken max_reclaims_in_progress memory reclaim throttle (Lachlan McIlroy) [1164105]
  - [x86_64] fpu: save_i387() must clr TS_USEDFPU along with stts() (Oleg Nesterov) [1193505]
  - [block] virtio: Call revalidate_disk() upon online disk resize (Stefan Hajnoczi) [1200855]
  - [block] virtio: fix config handler race (Stefan Hajnoczi) [1200855]
  - [block] virtio: allow re-reading config space at runtime (Stefan Hajnoczi) [1200855]


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-12
changelog:
  - better keep also the regular environment variables for backwards
    compatibility with old pam_exec scripts


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-10
changelog:
  - optimize pam_listfile to use pam_modutil_user_in_group_nam_nam() (#551312)
  - export environment variables in pam_exec (#554518)
  - fix user name matching in pam_unix remember feature (#768087)
  - added pam_cracklib options maxclassrepeat and gecos_check
  - pam_pwhistory now always saves the old password even for root


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-9
changelog:
  - distinguish groups and users with the () syntax in pam_access
    if nodefgroup option is specified
  - do not truncate /var/log/faillog and /var/log/tallylog on upgrade
  - remove superfluous plurals in .po files


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-8
changelog:
  - fix insecure dropping of priviledges in pam_xauth
    and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)
  - fix insecure executing of scripts with user supplied environment
    variables in pam_namespace - CVE-2010-3853 (#643043)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-5
changelog:
  - add group audio to sound devices when no console user owns them (#244688)
  - resolve pam access origin entry only when it makes sense (#459057)
  - silence the strict-aliasing warnings (#462647)
  - pam_keyinit: save old uid so we can revert to it (#466411)
  - pam_filter: make it use pty subsystem (#473970)
  - add pam_faildelay module to be able to set the failure delay (#476217)
  - pam_tty_audit: fix double free when open_only option is used (#476833)
  - allow root to change users passwords when helper is needed (#476904)
  - make package's requires more correct (#497570)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-4
changelog:
  - add pam_tty_audit module (#244352)
  - pam_cracklib: additional optional checks for password quality (#438994)
  - pam_lastlog: display failed login attempts if requested (#438990)
  - pam_unix: do not check new passwords through cracklib (#448860)
  - pam_unix: clear PAM_AUTHTOK item if new password is bad (#443872)
  - comment in the limits.conf manpage that rss limit is ignored (#459624)
  - allow larger entries in pammodutil_get functions (#445355)
  - pam_tally: do not leak fds in tally_check (#457024)
  - pam_loginuid: use correct format when printing uid type (#460263)
  - pam_rhosts_auth: correct test for IP address (#461917)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.27
changelog:
  - support sha256 and sha512 password hashes (#427389)
  - fixed in operator of pam_succeed_if module (#295151)
  - fixed audit option of pam_tally and pam_tally2 (#328281)
  - do not free putenved pointer in pam_xauth (#402391)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.26
changelog:
  - removed realtime default limits (#240123) from the package as
    it caused regression on machines with nonexistent realtime group


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.25
changelog:
  - added and improved translations (#219124)
  - adjusted the default limits for realtime users (#240123)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.23
changelog:
  - pam_unix: truncated MD5 passwords in shadow shouldn't match (#219258)
  - pam_limits: add limits.d support (#232700)
  - pam_limits, pam_time, pam_access: add auditing of failed logins (#232993)
  - pam_namespace: expand $HOME even when appended with text (#237163)
    original patch by Ted X. Toth
  - add some default limits for users in realtime group (#240123)
  - CVE-2007-3102 - prevent audit log injection through user name (#243204)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.21
changelog:
  - pam_namespace: better document behavior on failure (#237249)
  - pam_unix: split out passwd change to a new helper binary (#236316)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.18
changelog:
  - pam_console: always decrement use count (#233581)
  - pam_namespace: fix parsing config file with unknown users (#234513)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.17
changelog:
  - pam_namespace: unmount poly dir for override users (#229689)
  - pam_namespace: use raw context for poly dir name (#227345)
  - pam_namespace: truncate long poly dir name (append hash) (#230120)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.14
changelog:
  - properly include /var/log/faillog and tallylog as ghosts
    and create them in post script (#209646)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.7
changelog:
  - No shortcut on Password: in ja locale (#218271)
  - Revert to old euid and not ruid when setting euid in pam_keyinit (#219486)
  - Fix no answer to select_context question (#213812)
  - Rename selinux-namespace patch to namespace-level


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.4
changelog:
  - move setgid before setuid in pam_keyinit (#212329)
  - make username check in pam_unix consistent with useradd (#212153)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.1
changelog:
  - preserve effective uid in namespace.init script (LSPP for newrole)
  - include /var/log/faillog and tallylog to filelist (#209646)
  - add ids to .xml docs so the generated html is always the same (#210569)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-2
changelog:
  - silence pam_succeed_if in default system-auth (#205067)
  - round the pam_timestamp_check sleep up to wake up at the start of the
    wallclock second (#205068)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-1
changelog:
  - upgrade to new upstream version, as there are mostly bugfixes except
    improved documentation
  - add support for session and password service for pam_access and
    pam_succeed_if
  - system-auth: skip session pam_unix for crond service


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-7
changelog:
  - revoke keyrings properly when pam_keyinit called as root (#201048)
  - pam_succeed_if should return PAM_USER_UNKNOWN when getpwnam fails (#197748)


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-6
changelog:
  - revoke keyrings properly when pam_keyinit called more than once (#201048)
    patch by David Howells


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-3
changelog:
  - don't report error in pam_selinux for nonexistent tty (#188722)
  - add pam_keyinit to the default system-auth file (#198623)


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-1
changelog:
  - updated to a new upstream release
  - added service as value to be matched and list matching to
    pam_succeed_if
  - namespace.init was missing from EXTRA_DIST


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-5
changelog:
  - updated pam_namespace with latest patch by Janak Desai
  - merged pam_namespace patches
  - added buildrequires libtool
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-3
changelog:
  - use md5 implementation from pam_unix in pam_namespace
  - pam_namespace should call setexeccon only when selinux is enabled


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-2
changelog:
  - pam_console_apply shouldn't access /var when called with -r (#191401)
  - actually apply the large-uid patch
  - don't build hmactest in pam_timestamp so openssl-devel is not required
  - add missing buildrequires (#191915)


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-1
changelog:
  - upgrade to new upstream version
  - make pam_console_apply not dependent on glib
  - support large uids in pam_tally, pam_tally2


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-5
changelog:
  - the namespace instance init script is now in /etc/security (#190148)
  - pam_namespace: added missing braces (#190026)
  - pam_tally(2): never call fclose twice on the same FILE (from upstream)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-4
changelog:
  - fixed console device class for irda (#189966)
  - make pam_console_apply fail gracefully when a class is missing


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-3
changelog:
  - added pam_namespace module written by Janak Desai (per-user /tmp
  support)
  - new pam-redhat modules version


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-2
changelog:
  - added try_first_pass option to pam_cracklib
  - use try_first_pass for pam_unix and pam_cracklib in
    system-auth (#182350)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-1
changelog:
  - new upstream version
  - updated db4 to 4.3.29
  - added module pam_tally2 with auditing support
  - added manual pages for system-auth and config-util (#179584)


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-2
changelog:
  - fix dangling symlinks in -devel (#175929)
  - link libaudit only where necessary
  - actually compile in audit support


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-1
changelog:
  - support netgroup matching in pam_succeed_if
  - upgrade to new release
  - drop pam_pwdb as it was obsolete long ago
  - we don't build static libraries anymore


author: Tomas Mraz <tmraz@redhat.com> 0.80-13
changelog:
  - fixed CAN-2005-2977 unix_chkpwd should skip user verification only if
    run as root (#168181)
  - link pam_loginuid to libaudit
  - support no tty in pam_access (#170467)
  - updated audit patch (by Steve Grubb)
  - the previous pam_selinux change was not applied properly
  - pam_xauth: look for the xauth binary in multiple directories (#171164)


author: Tomas Mraz <tmraz@redhat.com> 0.80-9
changelog:
  - don't include ps and pdf docs (#168823)
  - new common config file for configuration utilities
  - remove glib2 dependency (#166979)


author: Tomas Mraz <tmraz@redhat.com> 0.80-8
changelog:
  - process limit values other than RLIMIT_NICE correctly (#168790)
  - pam_unix: always honor nis flag on password change (by Aaron Hope)


author: Tomas Mraz <tmraz@redhat.com> 0.80-2
changelog:
  - fixed module tests so the pam doesn't require itself to build (#163502)
  - added buildprereq for building the documentation (#163503)
  - relaxed permissions of binaries (u+w)


author: Tomas Mraz <tmraz@redhat.com> 0.80-1
changelog:
  - upgrade to new upstream sources
  - removed obsolete patches
  - pam_selinux module shouldn't fail on broken configs unless
    policy is set to enforcing (Dan Walsh)


author: Tomas Mraz <tmraz@redhat.com> 0.79-10
changelog:
  - add the Requires dependency on audit-libs (#159885)
  - pam_loginuid shouldn't report error when /proc/self/loginuid
    is missing (#159974)


author: Tomas Mraz <tmraz@redhat.com> 0.79-9
changelog:
  - update the pam audit patch to support newest audit library,
    audit also pam_setcred calls (Steve Grubb)
  - don't use the audit_fd as global static variable
  - don't unset the XAUTHORITY when target user is root


author: Tomas Mraz <tmraz@redhat.com> 0.79-7
changelog:
  - pam_xauth: unset the XAUTHORITY variable on error, fix
    potential memory leaks
  - modify path to IDE floppy devices in console.perms (#155560)


author: Tomas Mraz <tmraz@redhat.com> 0.79-5
changelog:
  - added auditing patch by Steve Grubb
  - added cleanup patches for bugs found by Steve Grubb
  - don't clear the shadow option of pam_unix if nis option used


author: Tomas Mraz <tmraz@redhat.com> 0.79-3
changelog:
  - make pam_unix LSB 2.0 compliant even when SELinux enabled
  - #88127 - change both local and NIS passwords to keep them in sync,
    also fix a regression in passwd functionality on NIS master server


author: Tomas Mraz <tmraz@redhat.com> 0.78-9
changelog:
  - fix wrong logging in pam_console handlers
  - add executing ainit handler for alsa sound dmix
  - #147879, #112777 - change permissions for dri devices


author: Tomas Mraz <tmraz@redhat.com> 0.78-8
changelog:
  - remove ownership and permissions handling from pam_console call
    pam_console_apply as a handler instead


author: Tomas Mraz <tmraz@redhat.com> 0.78-6
changelog:
  - add functionality for running handler executables from pam_console
    when console lock was obtained/lost
  - removed patches merged to pam-redhat


author: Tomas Mraz <tmraz@redhat.com> 0.78-5
changelog:
  - echo why tests failed when rebuilding
  - fixed some warnings and errors in pam_console for gcc4 build
  - improved parsing pam_console config file


author: Tomas Mraz <tmraz@redhat.com> 0.78-1
changelog:
  - update to Linux-PAM-0.78
  - #140451 parse passwd entries correctly and test for failure
  - #137802 allow using pam_console for authentication


author: Tomas Mraz <tmraz@redhat.com> 0.77-66
changelog:
  - #77646 log failures when renaming the files when changing password
  - Log failure on missing /etc/security/opasswd when remember option is present


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - #87628 pam_timestamp remembers authorization after logout
  - #116956 fixed memory leaks in pam_stack


author: Tomas Mraz <tmraz@redhat.com> 0.77-63
changelog:
  - Fix checking of group Development/Debug syntax in pam_limits
  - Drop fencepost patch as it was already fixed 
    by upstream change from 0.75 to 0.77
  - Fix brokenshadow patch


author: Tomas Mraz <tmraz@redhat.com> 0.77-61
changelog:
  - #129328 pam_env shouldn't abort on missing /etc/environment
  - #126985 pam_stack should always copy the conversation function 
  - #127524 add /etc/security/opasswd to files


author: Tomas Mraz <tmraz@redhat.com> 0.77-56
changelog:
  - #75454 fixed locking when changing password
  - #127054 
  - #125653 removed unnecessary getgrouplist call
  - #124979 added quiet option to pam_succeed_if


author: Dan Walsh <dwalsh@redhat.com> 0.77-19.sel
changelog:
  - Change unix_chkpwd to handle unix_passwd and unix_acct
  - This eliminates the need for pam modules to have read/write access to /etc/shadow.


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-15
changelog:
  - don't install _pam_aconf.h -- apps don't use it, other PAM headers which
    are installed don't use it, and its contents may be different for arches
    on a multilib system
  - check for linkage problems in modules at %install-time (kill #107093 dead)
  - add buildprereq on flex (#101563)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_pwdb.so link with libnsl again so that it loads (#107093)
  - remove now-bogus buildprereq on db4-devel (we use a bundled copy for
    pam_userdb to avoid symbol collisions with other db libraries in apps)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_succeed_if: fix thinko in argument parsing which would walk past the
    end of the argument list


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-0
changelog:
  - update to 0.77 upstream release
    - pam_limits: limits now affect root as well
    - pam_nologin: returns PAM_IGNORE instead of PAM_SUCCESS unless "successok"
      is given as an argument
    - pam_userdb: correctly return PAM_AUTH_ERR instead of PAM_USER_UNKNOWN when
      invoked with the "key_only" argument and the database has an entry of the
      form "user-<wrongpassword>"
  - use a bundled libdb for pam_userdb.so because the system copy uses threads,
    and demand-loading a shared library which uses threads into an application
    which doesn't is a Very Bad Idea


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-49
changelog:
  - modify calls to getlogin() to check the directory of the current TTY before
    searching for an entry in the utmp/utmpx file (#98020, #98826, CAN-2003-0388)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-46
changelog:
  - pam_xauth: reintroduce ACL support, per the original white paper
  - pam_xauth: default root's export ACL to none instead of everyone


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-45
changelog:
  - create /lib/security, even if it isn't /%{_lib}/security, because we
    can't locate /lib/security/$ISA without it (noted by Arnd Bergmann)
  - clear out the duplicate docs directory created during %install


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-44
changelog:
  - fix syntax errors in pam_console's yacc parser which newer bison chokes on
  - forcibly set FAKEROOT at make install time


author: Elliot Lee <sopwith@redhat.com> 0.75-42
changelog:
  - Since cracklib-dicts location will not be correctly detected without 
    that package being installed, add buildreq for cracklib-dicts.
  - Add patch57: makes configure use $LIBNAME when searching for cracklib 
    dicts, and error out if not found.


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-40
changelog:
  - pam_timestamp_check: check that stdio descriptors are open before we're
    invoked
  - add missing chroot.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-36
changelog:
  - pam_timestamp: chown intermediate directories when creating them
  - pam_timestamp_check: add -d flag to poll


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-31
changelog:
  - libpam_misc: fix possible infinite loop in misc_conv (#62195)
  - pam_xauth: fix cases where DISPLAY is "localhost:screen" and the xauth
    key is actually stored using the system's hostname (#61524)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-20
changelog:
  - pam_stack: fix some memory leaks (reported by Fernando Trias)
  - pam_chroot: integrate Owl patch to report the more common causes of failures


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-19
changelog:
  - fix a bug in the getpwnam_r wrapper which sometimes resulted in false
    positives for non-existent users


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-16
changelog:
  - pam_xauth: always return PAM_SUCCESS or PAM_SESSION_ERR instead of PAM_IGNORE,
    matching the previous behavior (libpam treats PAM_IGNORE from a single module
    in a stack as a session error, leading to false error messages if we just
    return PAM_IGNORE for all cases)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-15
changelog:
  - reorder patches so that the reentrancy patch is applied last -- we never
    came to a consensus on how to guard against the bugs in calling applications
    which this sort of change addresses, and having them last allows for dropping
    in a better strategy for addressing this later on


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_rhosts: allow "+hostname" as a synonym for "hostname" to jive better
    with the hosts.equiv(5) man page
  - use the automake install-sh instead of the autoconf install-sh, which
    disappeared somewhere between 2.50 and now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_tally: don't try to read past the end of faillog -- it probably contains
    garbage, which if written into the file later on will confuse /usr/bin/faillog


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: don't just return if the user is root -- we'll want to set the
    priority (it could be negative to elevate root's sessions)
  - pam_issue: fix off-by-one error allocating space for the prompt string


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_mkhomedir: recurse into subdirectories properly
  - pam_mkhomedir: handle symlinks
  - pam_mkhomedir: skip over special items in the skeleton directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add cracklib as a buildprereq
  - pam_wheel: don't ignore out if the user is attempting to switch to a
    unprivileged user (this lets pam_wheel do its thing when users attempt
    to get to system accounts or accounts of other unprivileged users)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: close a possible DoS due to use of dotlock-style locking in
    world-writable directories by relocating the temporary file to the target
    user's home directory
  - general: include headers local to this tree using relative paths so that
    system headers for PAM won't be pulled in, in case include paths don't
    take care of it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: rewrite to skip refcounting and just use a temporary file
    created using mkstemp() in /tmp


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_userdb: fix the key_only flag so that the null-terminator of the
    user-password string isn't expected to be part of the key in the db file,
    matching the behavior of db_load 3.2.9


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_unix: use crypt() instead of bigcrypt() when salted field is less than
    the critical size which lets us know it was generated with bigcrypt()
  - use a wrapper to handle ERANGE errors when calling get....._r functions:
    defining PAM_GETPWNAM_R and such (for getpwnam, getpwuid, getgrnam,
    getgrgid, and getspnam) before including _pam_macros.h will cause them
    to be implemented as static functions, similar to how defining PAM_SM_xxx
    is used to control whether or not PAM declares prototypes for certain
    functions


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-12
changelog:
  - noreplace configuration files in /etc/security
  - pam_console: update pam_console_apply and man pages to reflect
    /var/lock -> /var/run move


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modules: use getpwnam_r and friends instead of non-reentrant versions
  - pam_console: clear generated .c and .h files in "clean" makefile target


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_stack: perform deep copy of conversation structures
  - include the static libpam in the -devel subpackage (#52321)
  - move development .so and .a files to %{_libdir}
  - pam_unix: don't barf on empty passwords (#51846)
  - pam_unix: redo compatibility with "hash,age" data wrt bigcrypt (#42394)
  - console.perms: add usb camera, scanner, and rio devices (#15528)
  - pam_cracklib: initialize all options properly (#49613)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-10
changelog:
  - pam_xauth: fix errors due to uninitialized data structure (fix from Tse Huong
    Choo)
  - pam_xauth: random cleanups
  - pam_console: use /var/run/console instead of /var/lock/console at install-time
  - pam_unix: fix preserving of permissions on files which are manipulated


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: use /var/run/console instead of /var/lock/console for lock files
  - pam_issue: read the right number of bytes from the file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: don't error out if the group has no members, but is the user's
    primary GID (reported by David Vos)
  - pam_unix: preserve permissions on files which are manipulated (#43706)
  - pam_securetty: check if the user is the superuser before checking the tty,
    thereby allowing regular users access to services which don't set the
    PAM_TTY item (#39247)
  - pam_access: define NIS and link with libnsl (#36864)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: fix logic bug when changing permissions on single
    file and/or lists of files
  - pam_console: return the proper error code (reported and patches
    for both from Frederic Crozat)
  - change deprecated Copyright: tag in .spec file to License:


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: change js* to js[0-9]*
  - include pam_aconf.h in more modules (patches from Harald Welte)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: add apm_bios to the list of devices the console owner can use
  - console.perms: add beep to the list of sound devices


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_access: compare IP addresses with the terminating ".", as documented
    (patch from Carlo Marcelo Arenas Belon, I think) (#16505)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge up to 0.75
  - pam_unix: temporarily ignore SIGCHLD while running the helper
  - pam_pwdb: temporarily ignore SIGCHLD while running the helper
  - pam_dispatch: default to uncached behavior if the cached chain is empty


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove /dev/dri from console.perms -- XFree86 munges it, so it's outside of
    our control (reminder from Daryll Strauss)
  - add /dev/3dfx to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: make 'trust' and 'deny' work together correctly
  - pam_wheel: also check the user's primary gid
  - pam_group: also initialize groups when called with PAM_REINITIALIZE_CRED


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: error out on undefined classes in pam_console config file
  - console.perms: actually change the permissions on the new device classes
  - pam_console: add an fstab= argument, and -f and -c flags to pam_console_apply
  - pam_console: use g_log instead of g_critical when bailing out
  - console.perms: logins on /dev/vc/* are also console logins, from Douglas
    Gilbert via Tim Waugh


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add pam_console_apply
  - /dev/pilot's usually a serial port (or a USB serial port), so revert its
    group to 'uucp' instead of 'tty' in console.perms
  - change pam_console's behavior wrt directories -- directories which are
    mount points according to /etc/fstab are taken to be synonymous with
    their device special nodes, and directories which are not mount points
    are ignored


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - own /etc/security
  - be more descriptive when logging messages from pam_limits
  - pam_listfile: remove some debugging code (#28346)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: change the documented default config file to reflect the defaults
  - pam_limits: you should be able to log in a total of maxlogins times, not
    (maxlogins - 1)
  - handle group limits on maxlogins correctly (#25690)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually time out when attempting to lckpwdf() (#25889)
  - include time.h in pam_issue (#25923)
  - update the default system-auth to the one generated by authconfig 4.1.1
  - handle getpw??? and getgr??? failures more gracefully (#26115)
  - get rid of some extraneous {set,end}{pw,gr}ent() calls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge to 0.74
  - make console.perms match perms set by MAKEDEV, and add some devfs device names
  - add 'sed' to the buildprereq list (#24666)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix handling of "nis" when changing passwords by adding the checks for the
    data source to the password-updating module in pam_unix
  - add the original copyright for pam_access (fix from Michael Gerdts)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix similar() function in pam_cracklib (#14740)
  - fix example in access.conf (#21467)
  - add conditional compilation for building for 6.2 (for pam_userdb)
  - tweak post to not use USESHADOW any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add RLIMIT_LOCKS to pam_limits (patch from Jes Sorensen) (#20542)
  - link pam_userdb to Berkeley DB 2.x to match 6.2's setup correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak pre script to be called in all upgrade cases
  - get pam_unix to only care about the significant pieces of passwords it checks
  - add /usr/include/db1/db.h as a build prereq to pull in the right include
    files, no matter whether they're in glibc-devel or db1-devel
  - pam_userdb.c: include db1/db.h instead of db.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch from Dmitry V. Levin to have pam_stack propagate the PAM fail_delay
  - roll back the README for pam_xauth to actually be the right one
  - tweak pam_stack to use the parent's service name when calling the substack


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify the files list to make sure #16456 stays fixed
  - make pam_stack track PAM_AUTHTOK and PAM_OLDAUTHTOK items
  - add pam_chroot module
  - self-hosting fixes from the -devel split
  - update generated docs in the tree


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix problems when looking for headers in /usr/include (#17236)
  - clean up a couple of compile warnings


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - give users /dev/cdrom* instead of /dev/cdrom in console.perms (#16768)
  - add nvidia control files to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move pam_filter modules to /lib/security/pam_filter (#16111)
  - add pam_tally's application to allow counts to be reset (#16456)
  - move README files to the txts subdirectory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a broken_shadow option to pam_unix
  - add all module README files to the documentation list (#16456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - need to make pam_console's checking a little stronger
  - only pass data up from pam_stack if the parent didn't already define it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_console's extra checks disableable
  - simplify extra check to just check if the device owner is root
  - add a debug log when pam_stack comes across a NULL item
  - have pam_stack hand items up to the parent from the child


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix installation of pam_xauth man pages (#12417)
  - forcibly strip helpers (#12430)
  - try to make pam_console a little more discriminating


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - symlink libpam.so to libpam.so.0.99.6.2, and likewise for libpam_misc
  - reverse order of checks in _unix_getpwnam for pam_unix


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add account management wrappers for pam_listfile, pam_nologin, pam_securetty,
    pam_shells, and pam_wheel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add system-auth control file
  - let gethostname() call in pam_access.c be implicitly declared to avoid
    conflicting types if unistd.c declares it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add new pam_stack module.
  - Install pwdb_chkpwd and unix_chkpwd as the current user for non-root builds


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Add a patch to accept 'pts/N' in /etc/securetty as a match for tty '5'
    (which is what other pieces of the system think it is). Fixes bug #7641.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.72
  - fix pam_unix password-changing bug
  - fix pam_unix's cracklib support
  - change package URL


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - many bug fixes in pam_xauth
  - pam_console can now handle broken applications that do not set
    the PAM_TTY item.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fixed glob/regexp confusion in pam_console, added kbd and fixed fb devices
  - added pam_xauth module


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - changed /dev/cdrom default user permissions back to 0600 in console.perms
    because some cdrom players open O_RDWR.


author: Jakub Hrozek <jhrozek@redhat.com> - 253-52.2
changelog:
  - Only set the TLS_X_CALLBACK if timeout is > 0
  - Related: rhbz#1035945: nss_ldap does not reconnect to alternate ldap
                            server when using SSL


author: Jakub Hrozek <jhrozek@redhat.com> - 253-52.1
changelog:
  - Use TLS_X_CALLBACK to terminate idle SSL connections after ldc_timeout
    seconds
  - Resolves: rhbz#1035945: nss_ldap does not reconnect to alternate ldap
                            server when using SSL


author: Jakub Hrozek <jhrozek@redhat.com> - 253-52
changelog:
  - Add a patch by Gino LV. Ledesma to catch leaking sockets
  - Resolves: rhbz#772273 - (slow) socket leak in nss_ldap


author: Jakub Hrozek <jhrozek@redhat.com> - 253-50
changelog:
  - Free ldap_result when search does not return anything (#835555)
  - Use contents of ldap.secret even if it does not contain a newline (#797410)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-46
changelog:
  - Require openldap libs with a fix for #609722 - libldap ignores a directory
    of CA certificates if any of them can't be read (#593242)
  - when closing a context, clean it up so that we won't try to issue an abandon
    when we go to use it again for something else (#696707)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-45
changelog:
  - fix a regression caused by patch #39 - SRV records processing
    would crash if there was no basedn set (#705841)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-43
changelog:
  - incorporate Martin Poole's patch to handle larger-than-previously-expected
    configuration files (#705841)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-42
changelog:
  - add Ross Tyler's patch to always require authentication during password
    change requests for expired passwords, so that modules which check password
    quality (pam_cracklib) will always have the old password on-hand to examine
    as well (#667758)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-41
changelog:
  - backport fixes for upstream #350 (parsing results when the connection is
    gone) and #351 (double-free of message chain) (#684889)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-40
changelog:
  - return any non-success errors in setnetgrent(), not just netgroup-not-found
    errors (#664609, more of #445972)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-38
changelog:
  - add a build-time requirement on a sufficiently-new openssl-devel to ensure
    that we get SHA-2 hashes when we're using TLS, because we still static-link
    the nss_ldap module (#683349)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-37
changelog:
  - add proposed patch for upstream #421: sometimes errno gets reset before we
    return control to libc (#661630)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-36
changelog:
  - tweak patch for postponing the connection drop in a newly-forked child until
    we're first called so that it doesn't try to close sockets which we just
    assumed were our own (more of #474181)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-35
changelog:
  - don't unconditionaly set up a new LDAP structure every time we try to read
    someone's supplemental groups list, regardless of whether or not we did so
    previously, and clean the connection up completely if we fail to get a
    response or parse it (#654650, from upstream #418 and #392 via Olivier
    Fourdan)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-34
changelog:
  - link nss_ldap and pam_ldap with -z nodelete so that memory allocated by
    library dependencies which is lost at unload doesn't leak, for the sake
    of applications which call PAM for authentication many times over (Mark
    Goodwin, #511238)
  - fix some memory leaks in pam_ldap (upstream #326,#333, part of #511238)
  - fix an uninitialized variable error (Mark Goodwin, part of #511238)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-32
changelog:
  - add revised testing patch to postpone the connection drop in a newly-forked
    child until we're first called (#474181)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-31
changelog:
  - add testing patch to postpone the connection drop in a newly-forked child
    until we're first called (#474181)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-30
changelog:
  - report the remaining life of soon-to-be-expired passwords with granularity
    in hours, if possible (Masahiro Matsuya, #537358)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-27
changelog:
  - pull in backported fix for upstream #378, which returns NETDB_INTERNAL in
    h_errno in cases when nss_ldap's run out of space in the supplied buffer and
    libc provided us with an h_errno variable to set for it to also check
    (Jason Luo, #468807)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-26
changelog:
  - pull in fix for upstream #313, which returns a clean error when we've
    failed to parse our configuration correctly, in this case due either to a
    larger-than-handled nss_initgroups_ignoreusers setting (#584157) or the
    lack of any servers being configured (#538498)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-25
changelog:
  - avoid deadlock when one of our lookups recurses into our own host resolution
    routine, which would otherwise cause a deadlock or a crash (#448883)
  - provisionally add an "nss_check_case" option which, when enabled, will
    ignore entries for which the result didn't case-exact match the query,
    regardless of the comparison performed by the directory (#508621,#518911)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-24
changelog:
  - update build dependency on openldap to 2.3.43-7 to get fixes for referral
    chasing (#510522) which affected nss_ldap (#472920)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-23
changelog:
  - unblock SIGPIPE while closing the connection in the child's part of
    atfork(), so that it can get delivered before we reset the signal
    handler (#454315)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-22
changelog:
  - add patch to not assume we got a result for our start_tls request within the
    bind timelimit (Jatin Nansi, #499302)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-19
changelog:
  - don't close a oneshot connection while we're in the middle of answering a
    specific query (#488857)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-18
changelog:
  - turn the default for paged results back off (#486321)
  - pull in fix for leaking descriptors from version 255 (#428837)
  - replace our proposed patch for being stricter about malformed entries with
    the version upstream went with, and start applying it (#457258)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-15
changelog:
  - build nss_ldap with --enable-paged-results (#444185)
  - add patch to make netgroup enumeration fail due to lack of entries in
    setnetgrent(), rather than in getnetgrent(), to match how other mechanisms
    work (Jose Plans, #445972)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-13
changelog:
  - block SIGPIPE in the atfork handler, so that it doesn't trip up when
    attempting to drop a connection to the server (#448014)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-11
changelog:
  - backport changes to group parsing from version 254 to fix heap corruption
    when parsing nested groups (#444031)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-7
changelog:
  - add keyutils-libs-devel and libselinux-devel as a buildrequires: in order to
    static link with newer Kerberos (#427370)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-6
changelog:
  - suppress password-expired errors encountered during referral chases during
    modify requests (#335661)
  - interpret server-supplied policy controls when chasing referrals, so that
    we don't give up when following a referral for a password change after
    reset (#335661)
  - don't attempt to change the password using ldap_modify if the password
    change mode is "exop_send_old" (we already didn't for "exop") (#364501)
  - don't drop the supplied password if the directory server indicates that
    the password needs to be changed because it's just been reset: we may need
    it to chase a referral later (#335661)
  - correctly detect libresolv and build a URI using discovered settings, so that
    server discovery can work again (#254172)
  - honor the "port" setting again by correctly detecting when a URI doesn't
    already specify one (#326351)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-4
changelog:
  - add dbus,radvd,tomcat,radiusd,news,mailman to the default list of
    nss_initgroups_ignoreusers (#243753)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - resize the supplemental GID array when it gets too large and an array size
    limit isn't set (Gavin Romig-Koch, #246541)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-1
changelog:
  - update to 253
    - closes a crasher when glibc's initgroups backend passes in a zero-length,
      NULL buffer to start
    - includes lookup_nssldap updates for autofs


author: Nalin Dahyabhai <nalin@redhat.com> - 251-2
changelog:
  - configure with --enable-configurable-krb5-ccname-gssapi instead of
    --enable-configurable-krb5-ccname, the latter of which doesn't actually
    do anything (Howard Wilkinson)


author: Nalin Dahyabhai <nalin@redhat.com> - 250-5
changelog:
  - adjust nss_ldap's makefile rule to more correctly deduce the right soversion
    for nsswitch modules (#191927)


author: Nalin Dahyabhai <nalin@redhat.com> - 248-2
changelog:
  - set "nss_initgroups_ignoreusers root,ldap" in the default configuration
    file, so that nss_ldap will assume that there are no supplemental groups
    for this user to be found in the directory server (#180657)


author: Nalin Dahyabhai <nalin@redhat.com> 245-1
changelog:
  - update to nss_ldap 245
  - add patch from upcoming 246 release to change the placeholder used when
    userPassword is unreadable from "x" to "*" (upstream #240)


author: Nalin Dahyabhai <nalin@redhat.com> 239-1
changelog:
  - update to nss_ldap 239
  - provide a libnss_ldap.so link for directly linking with nss_ldap, as glibc
    does for the modules it provides


author: Nalin Dahyabhai <nalin@redhat.com> 234-5
changelog:
  - update to pam_ldap 180 to get fix for vulnerability from parsing password
    policy controls which don't contain error numbers (#166164, CAN-2005-2497)


author: Nalin Dahyabhai <nalin@redhat.com> 234-4
changelog:
  - override glibc version detection so that mismatches between the versions of
    32- and 64-bit glibc don't result in our %install installing the module
    with a different name than the 'make install' target uses


author: Nalin Dahyabhai <nalin@redhat.com> 234-3
changelog:
  - fix type mismatch bug in patch for using non-blocking start_tls in
    preference to the blocking version when it's available (#156582)


author: Nalin Dahyabhai <nalin@redhat.com> 232-2
changelog:
  - prefer using libraries in /usr/lib/nss_ldap-openldap if we find any
  - use ldap_start_tls in preference to ldap_start_tls_s, if found, so that
    we can time out if the server has gone catatonic


author: Nalin Dahyabhai <nalin@redhat.com> 227-1
changelog:
  - update to version 227
  - force nss_ldap to mimic pam_ldap's behavior when the tls_checkpeer setting is
    unconfigured in ldap.conf


author: Nalin Dahyabhai <nalin@redhat.com> 226-3
changelog:
  - fix misleading doc comment in /etc/ldap.conf -- the checkpeer setting follows
    libldap's default, which is dependent on the version of OpenLDAP which which
    this package is linked (part of #143622)


author: Nalin Dahyabhai <nalin@redhat.com> 226-1
changelog:
  - update to nss_ldap 226, pam_ldap 176
  - rework pam_ldap dns autoconfig patch
  - require automake instead of automake15, because autoreconf uses the current
    version (#129877)


author: Nalin Dahyabhai <nalin@redhat.com> 212-1
changelog:
  - update to 212, pam_ldap 167
  - link nss_ldap with libgssapi_krb5, the static libsasl2 includes the gssapi
    mech, at least for now, and we pick up its unresolved symbols at link-time
  - fix out-of-bounds error at initialization-time (part of #101269)
  - include pam_ldap's authorization schema files for slapd as a doc file


author: Nalin Dahyabhai <nalin@redhat.com> 207-5
changelog:
  - fix objectclass and attribute mapping, which failed due to uninitialized
    fields in mapping index structures, fixed upstream in 210 (#110547)


author: Nalin Dahyabhai <nalin@redhat.com> 207-3
changelog:
  - link dynamically with libcom_err if it isn't in /usr/kerberos/lib (which
    we assume means that it's in /lib)


author: Nalin Dahyabhai <nalin@redhat.com> 207-1
changelog:
  - update to build with newer OpenLDAP
  - add README.TLS to remind people that in order for TLS support to be usable,
    the server's certificate has to pass validation checks made by the client


author: Nalin Dahyabhai <nalin@redhat.com> 202-4
changelog:
  - rework static link order to account for libssl requiring libkrb5
  - force assembly locking on %ix86 systems
  - link with libz, which libssl also requires


author: Nalin Dahyabhai <nalin@redhat.com> 202-2
changelog:
  - apply DB patches from sleepycat.com
  - correctly point nss_ldap at the bundled DB library
  - create /%{_lib} instead of /lib to install into


author: Nalin Dahyabhai <nalin@redhat.com> 202-1
changelog:
  - update to nss_ldap 202, pam_ldap 153
  - update DB from 4.0.14 to 4.1.24.NC
  - try to address multilib path changes


author: Nalin Dahyabhai <nalin@redhat.com> 188-0.6
changelog:
  - rebuild for RHL 6.2
  - change dependency on pam-devel to /usr/include/security/pam_modules.h
  - drop build deps on cyrus-sasl-devel and openldap >= 2.x
  - modify pam_ldap versions file so that binutils from RHL 6.2 can parse it
  - update to nss_ldap 188
  - update to pam_ldap 144


author: Nalin Dahyabhai <nalin@redhat.com> 184-1
changelog:
  - update to pam_ldap 138
  - enable rfc2307bis schema support
  - version the pam_ldap module
  - add the proper soname to the nss_ldap module and remove the symlink
  - add a trigger to run ldconfig again when an upgrade removes the symlink,
    which used to be in this package (doh!)
  - fix the symlink from %{_libdir} to the module (for linking directly to it)


author: Nalin Dahyabhai <nalin@redhat.com> 173-1
changelog:
  - update to nss_ldap 173, which includes doc updates
  - update to pam_ldap 133, which simplifies the dnsconfig patch quite a bit


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - link statically with libldap again, because libldap is linked with other
    shared libraries now (keeping us from having files in /usr open when we
    go to shut the system down)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 172, fixing schema mapping code
  - update to pam_ldap 124, incorporating TLS default option and doc fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 164, fixing the timeout problem correctly
  - update to pam_ldap 122, fixing escaping of user name in filters


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 163, fixing the timeout problem
  - update to pam_ldap 120
  - add gdbm-devel as a buildprereq, because we list it in $LIBS (#48999)
  - add db3-devel as a buildprereq (#48999)
  - add pam-devel as a buildprereq (#48999)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make nss_ldap fail when attempting to startup TLS fails, because that's what
    we do when LDAPS doesn't work (and what pam_ldap does already)
  - add DNS autoconfiguration to pam_ldap


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 149, minor fixes for compile glitches
  - update to pam_ldap 105, minor fixes (as above) and handles shadow expiration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 138, which folds in our patch for initgroups
  - change the default search base in ldap.conf to dc=example,dc=com


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - version the NSS module so that it works properly with programs which have
    been linked statically to a different version of an LDAP library, like
    Netscape Communicator


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - BuildPrereq gdbm-devel
  - pass RPM_OPT_FLAGS as CFLAGS to %configure
  - if protocol version is 2, explicitly set protocol version to 3 before trying
    to start TLS
  - add STARTTLS support to nss_ldap
  - work around a build-time problem on ia64


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 122
  - link statically with libsasl, require the first devel package that supplied it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to pam_ldap 67 to fix a bug in template user code
  - convert symlink in /usr/lib to a relative one (#16132)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - use the ldap.conf file as an external source
  - don't forcibly build the support for version 3
  - imported the default spec file from the tarball and fixed it up for RH 6.1


author: Nalin Dahyabhai <nalin@redhat.com> 232-2
changelog:
  - prefer using libraries in /usr/lib64/nss_ldap-openldap if we find any
  - use ldap_start_tls in preference to ldap_start_tls_s, if found, so that
    we can time out if the server has gone catatonic


author: Nalin Dahyabhai <nalin@redhat.com> 207-3
changelog:
  - link dynamically with libcom_err if it isn't in /usr/kerberos/lib64 (which
    we assume means that it's in /lib64)


author: James Antill <jantill@redhat.com> - 4.2.6-7
changelog:
  - Parser error attempts to execute assignment expressions.
  - Resolves: rhbz#758681
  - Subversion completion broken.
  - Resolves: rhbz#788050


author: James Antill <jantill@redhat.com> - 4.2.6-6
changelog:
  - Queue signals before fork.
  - Resolves: rhbz#733582
  - Fix deadlock for terminated suspended jobs.
  - Resolves: rhbz#706029
  - Allow greater than 3 commands to use a completion service.
  - Resolves: rhbz#700722


author: James Antill <jantill@redhat.com> - 4.2.6-3
changelog:
  - Fix reused pids bug
  - Resolves: rhbz#465455
  - Fix comments in $() edge case syntax parsing error
  - Resolves: rhbz#484348


author: Colin Walters <walters@redhat.com> - 4.2.1-1
changelog:
  - New upstream version 4.2.1
  - FEATURES, MACHINES, and NEWS moved to toplevel dir
  - Update zsh-4.0.6-make-test-fail.patch, but do not apply it for now
  - Remove upstreamed zsh-4.2.0-jobtable-125452.patch


author: Jens Petersen <petersen@redhat.com> - 4.2.0-3
changelog:
  - source profile in zprofile rather than .zshrc (Péter Kelemen,
    Magnus Gustavsson, 102187,126539)
  - add zsh-4.2.0-jobtable-125452.patch to fix job table bug
    (Henrique Martins, 125452)
  - buildrequire tetex for texi2html (Maxim Dzumanenko, 124182)


author: Jens Petersen <petersen@redhat.com> - 4.2.0-1
changelog:
  - update to 4.2.0 stable release
  - zsh-4.0.7-bckgrnd-bld-102042.patch no longer needed
  - add compinit and various commented config improvements to .zshrc
    (Eric Hattemer,#114887)
  - include zshprompt.pl in doc dir (Eric Hattemer)
  - drop setenv function from zshrc


author: Jens Petersen <petersen@redhat.com> - 4.0.9-1
changelog:
  - update to 4.0.9 release
  - zsh-4.0.7-completion-_files-110852.patch no longer needed
  - update zsh-4.0.7-bckgrnd-bld-102042.patch to better one with --with-tcsetpgrp
    configure option by Philippe Troin
  - configure --with-tcsetpgrp
  - buildrequire texinfo for makeinfo
  - fix ownership of html manual (Florian La Roche, #112749)


author: Jens Petersen <petersen@redhat.com> - 4.0.7-2
changelog:
  - quote % in file glob'ing completion code (#110852)
    [reported with patch by Keith T. Garner]
  - add zsh-4.0.7-bckgrnd-bld-102042.patch from Philippe Troin to allow
    configure to run in the background (#102042) [reported by Michael Redinger]
  - above patch requires autoconf to be run
  - include html manual in separate -html subpackage
  - changed url to master site
  - skip completion tests on ppc and ppc64 for now, since they hang


author: Jens Petersen <petersen@redhat.com> - 4.0.6-7
changelog:
  - don't set stty erase in a dumb terminal with tput kbs in /etc/zshrc (#89856)
    [reported by Ben Liblit]
  - make default prompt more informative, like bash


author: Jens Petersen <petersen@redhat.com>
changelog:
  - 4.0.6
  - add url
  - add --without check build option
  - don't autoconf
  - make "make test" failure not go ignored
  - move sourcing of profile from zshenv to new .zshrc file for now (#65509)
  - preserve dates when installing rc files


author: Trond Eivind Glomsrød <teg@redhat.com> 4.0.4-5
changelog:
  - Source /etc/profile from /etc/zshenv instead of /etc/zprofile, 
    to run things the same way bash do (#62788)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Remove contents from /etc/zshenv file - no reason to duplicate things
    from /etc/profile, which is sourced from /etc/zprofile (#32478)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix the post script, so we only have only line for zsh
    and can remove the trigger
  - get rid of some instances of "/usr/local/bin/zsh"


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 3.0.8
  - use %configure and %makeinstall
  - updated URL
  - disable old patches
  - add better patch for texi source
  - use %{_mandir} and %{_infodir}
  - use %{_tmppath}


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fix postun script so that we don't remove ourselves on every update
    doh...
  - add a trigger to fix old versions of the package


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - auto rebuild in the new build environment (release 10)
  - fix the texi source
  - patch to detect & link against nsl


author: Miroslav Rezanina <mrezanin@redhat.com> - kvm-83.273.el5
changelog:
  - kvm-pcnet-Properly-handle-TX-requests-during-Link-Fail.patch [bz#1225896]
  - kvm-pcnet-fix-Negative-array-index-read.patch [bz#1225896]
  - kvm-pcnet-force-the-buffer-access-to-be-in-bounds-during.patch [bz#1225896]
  - Resolves: bz#1225896 
    (EMBARGOED CVE-2015-3209 kvm: qemu: pcnet: multi-tmd buffer overflow in the tx path [rhel-5.11.z)


author: Neil Horman <nhorman@redhat.com> - 0.55-7
changelog:
  - Fixed cpu parsing bugs (bz 311341)
  - Added docs/config for irqbalance env. vars. (bzs 339551 339571 339581)


author: Jesse Keating <jkeating@redhat.com> - 1.13-2
changelog:
  - rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc*
    (#203001)
  - Remove hack to use cvs checkin ID as release as it doesn't follow
    packaging guidelines


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-35
changelog:
  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  - fix CVE-2015-4000 - prevent the logjam attack on client - restrict
    the DH key size to at least 768 bits (limit will be increased in future)


author: Jiri Popelka <jpopelka@redhat.com> - 1.0.10-19
changelog:
  - Server correctly parses Relay-Forward message (bug #512399).
  - Client correctly handles NotOnLink error in REPLY (bug #511323).
  - Server doesn't send NotOnlink error in REPLY
    when more range statements configured (bug #598439).


author: Jiri Popelka <jpopelka@redhat.com> - 1.0.10-18
changelog:
  - Get new address when moving into a new link (bug #466251).
  - Windows 2008 interoperability fix in dhcp6c (bug #476974).
  - Check DAD necessity by the interface type to prevent dhcp6c
    from segfaulting when run for second time (bug #515644).


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-16
changelog:
  - Remove the ADVERTISE/REPLY patch for option 24 as it is unnecessary,
    the problem was in our test driver scripts for the TAHI suite
    Resolves: rhbz#426899


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-15
changelog:
  - Allow users to configure dhcp6s to return only option 24 for
    ADVERTISE and REPLY messages
    Related: rhbz#426899


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-14
changelog:
  - Add directive for dhcp6s.conf that lets users enable the 'only
    send option 23 for ADVERTISE messages' setting
    Related: rhbz#426899


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-10
changelog:
  - Keep DUID consistent
    Resolves: rhbz#377101
  - Match DUID LLT time field on client-server communications
    Resolves: rhbz#365501


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-8
changelog:
  - Make sure DUID is saved in dhcp6s as it is in dhcp6c.  This keeps the DUID
    consistent in dhcp6s and keeps the DUID time field correct.
    Resolves: rhbz#377101
    Resolves: rhbz#365501
  - Do not send the domain list to the client unless it's a requested option
    Resolves: rhbz#426899


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-6
changelog:
  - Support multiple IA options
    Resolves: rhbz#439526
    Resolves: rhbz#365531
    Resolves: rhbz#365651
    Resolves: rhbz#426899
    Resolves: rhbz#365661
  - DUID type 1 time is time since January 1, 2000 (UTC), modulo 2^32
    Resolves: rhbz#365501


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-5
changelog:
  - Do not dereference a possible NULL pointer in dhcp6c
    Resolves: rhbz#439942
  - Check DUID and IAID for duplicate hosts
    Resolves: rhbz#440330
  - Add error handling during initialization of dhcp6c
    Resolves: rhbz#449052
  - Log correct PID after daemonizing in dhcp6c
    Resolves: rhbz#449051
  - Handle multiple nameservers in option-23
    Resolves: rhbz#449053
  - Use last 4 bytes of MAC address to generate IAID
    Resolves: rhbz#449054


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-4
changelog:
  - Do not send Message-ID from dhcp6r except for RELAY-FORWARD and RELAY-REPL
    Resolves: rhbz#440440


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-3
changelog:
  - Fix hwtype in calculate_duid_len()
    Resolves: rhbz#377101
  - Do not return IA_NA option with status code set to NoAddrAvail
    Resolves: rhbz#365531
    Related: rhbz#426899
  - Add domain list option check to specify DNS list
    Related: rhbz#377131
  - Update 'now' whenever checking expiration for each timer
    Resolves: rhbz#365501
  - Verify length of buffer for RELAY_REPL correctly
    Resolves: rhbz#365551
    Related: rhbz#365521
    Related: rhbz#365531
    Related: rhbz#365541
    Related: rhbz#365581
    Related: rhbz#365591
    Related: rhbz#365601
    Related: rhbz#365631
    Related: rhbz#365641
    Related: rhbz#365651
    Related: rhbz#376871
  - Support updating /etc/resolv.conf when network-functions is not available
    Related: rhbz#377131
  - Remove gcc_intrin.h workaround for ia64
    Related: rhbz#429074


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-2
changelog:
  - Fix hwtype in calculate_duid_len()
    Resolves: rhbz#377101
  - Do not return IA_NA option with status code set to NoAddrAvail
    Resolves: rhbz#365531
  - Add domain list option check to specify DNS list
    Related: rhbz#377131
  - Update 'now' whenever checking expiration for each timer
    Resolves: rhbz#365501
  - Verify length of buffer for RELAY_REPL correctly
    Resolves: rhbz#365551
  - Support updating /etc/resolv.conf when network-functions is not available
    Related: rhbz#377131
  - Remove gcc_intrin.h workaround for ia64
    Related: rhbz#429074


author: David Cantrell <dcantrell@redhat.com> - 1.0.7-1
changelog:
  - Fix dhcp6c re-assign of IPv6 global address after Confirm/Reply msg exchange
    Resolves: rhbz#249466
  - Make dhcp6c retransmit Confirm message in expected duration
    Resolves: rhbz#251192
  - Fix value dhcp6c stores to elapsed time option in Solicit message
    Resolves: rhbz#249451
  - Make dhcp6c ignore Reply message that contains IA_NA with T1 > T2
    Resolves: rhbz#254194
  - Do not let dhcp6c remove leases that are not on the updated list
    Resolves: rhbz#265761
  - Fix RFC 3646 compliance
    Resolves: rhbz#382331
  - /etc/init.d/dhcp6s line continuation in description fix
    Resolves: rhbz#204713
  - Avoid global library symbol collisions in libdhcp6client
    Resolves: rhbz#216188
  - Init script fixes (LSB compliance)
    Resolves: rhbz#237970
  - Match time field of received DHCPv6 Advertise message
    Resolves: rhbz#365501
  - Include Advertise message in Relay-Repl message
    Resolves: rhbz#365521
  - Include valid IA_Address option in Reply messages
    Resolves: rhbz#365531
  - Do not return Reply message when receiving a Confirm message via unicast
    Resolves: rhbz#365541
  - Set status code of Reply message to NotOnLink when necessary
    Resolves: rhbz#365551
  - Do not send unexpected Reply messages to client
    Resolves: rhbz#365551
  - Set lifetime of Reply messages to zero
    Resolves: rhbz#365581
  - Include NoBinding status in the IA_NA option in Reply messages when needed
    Resolves: rhbz#365591
  - Do not return Reply message when receiving a Rebind message via unicast
    Resolves: rhbz#365601
  - Do not return Advertise message when receiving a Solicit message with SID
    Resolves: rhbz#365621
  - Do not return Reply message when receiving a Confirm message with SID
    Resolves: rhbz#365631
  - Do not return Reply message when receiving a Rebind message with SID
    Resolves: rhbz#365641
  - Check IA options of the received Advertise message
    Resolves: rhbz#365651
  - Set status code of Advertise message to NoAddrAvail when necessary
    Resolves: rhbz#365661
  - Fix About RT(Retransmission Time) problem
    Resolves: rhbz#376901
  - Fix About RD(Retransmission Duration) problem
    Resolves: rhbz#376921
  - Send Rebind messages correctly
    Resolves: rhbz#376931
  - Send Renew messages correctly
    Resolves: rhbz#376941
  - Send Echo Reply to calling server correctly
    Resolves: rhbz#377091
  - Keep DUID consistent between reboots and such
    Resolves: rhbz#377101
  - Honor requested options from the client
    Resolves: rhbz#377111
  - Send DNS Query message correctly
    Resolves: rhbz#377131
  - Send Information Request message correctly
    Resolves: rhbz#377161
  - Find correct option code
    Resolves: rhbz#377191
  - Do not return Reply message when receiving an Information Request message
    via unicast
    Resolves: rhbz#377221
  - Do not display invalid error messages on terminal when running dhcp6r
    Resolves: rhbz#377231
  - Do not include non-requested options in Reply messages
    Resolves: rhbz#426899


author: David Cantrell <dcantrell@redhat.com> - 1.0.4-1
changelog:
  - Rebase to dhcpv6-1.0.4
  - Renamed dhcpv6_client package to dhcpv6-client
  - Added libdhcp6client-static package
  - BR kernel-headers


author: David Cantrell <dcantrell@redhat.com> - 0.10-34
changelog:
  - Store elapsed time value correctly in solicit message
    Resolves: rhbz#249451
  - Reassign global address after confirm/reply in dhcp6c
    Resolves: rhbz#249466
  - Retransmit confirm message in expected duration in dhcp6c
    Resolves: rhbz#251192
  - In dhcp6c, ignore reply message that contains IA_NA with T1 > T2
    Resolves: rhbz#254194
  - Do not let dhcp6c remove leases that are not on the updated list
    Resolves: rhbz#265761


author: David Cantrell <dcantrell@redhat.com> - 0.10-33
changelog:
  - server6_addr.conf is not required for dhcp6s
  - Resolves: rhbz#217309
  - Man page for dhcp6s.conf should reference server-preference
  - Resolves: rhbz#217308


author: Jason Vas Dias <jvdias@redhat.com> - 0.10-30
changelog:
  - fix bug 196429: 
    Allow clients from dhcpv6-0.10<=16 to get addresses. 
    >16, the server sent the prefix length; this is now
    conditional on the client sending the DHC6OPT_REQUEST_PREFIX,
    and can be disabled by the 'use-ra-prefix' dhcp6c.conf or 
    dhcp6s.conf setting. With the upstream version, the only
    way to set the clients' address prefixes was by router
    advertisement.


author: Jason Vas Dias<jvdias@redhat.com> 0.10-26
changelog:
  - libdhcp6client fix to retry bind() to linklocal address
    on EADDRNOTAVAIL for up to 5 seconds to give kernel time
    to create linklocal address.


author: Jason Vas Dias <jvdias@redhat.com> - 0.10-18
changelog:
  - Make server send client the IPv6 address prefix in address lease;
    make client use it 
  - prevent netlink.c generating error log message for NLMSG_DONE
  - fix netlink.c IFLA_PROTINFO handling now that kernel defines it
  - fix memory leak in client6_addr create_iaid
  - disable 'install -s' for binaries


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - fix bug 165882: allow client to configure an interface which
    does not have an IPv4 address ( use getifaddrs instead of
    ioctl(sockfd, SIOGIFCONF, ...)
  - fix bug 165884 (possibly!): force use of glibc's getifaddrs,
    not internal getifaddrs implementation


author: Jason Vas Dias <jvdias@redhat.com> - 0.10-11
changelog:
  - Add 'prefix-delegation-interface' option to allow write
  - of radvd interface configuration other than that for 
  - the interface the lease was received on.


author: Jason Vas Dias <jvdias@redhat.com> - 0.10-10
changelog:
  - Add Relay Agent support. Thanks to  Brian Bluesker<bbuesker@qualcomm.com>
  - for the patch to add relay support to the server and for submitting the 
  - patch originally contributed by Cristian Cadar of NEC Europe to 
  - DHCPv6-developer  mailing list.


author: Jason Vas Dias <jvdias@redhat.com> - 0.10-2
changelog:
  - Split into two packages: dhcpv6-*, containing server only,
  - and dhcpv6_client-*, containing client only.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.85-2.6.1.3
changelog:
  - Check return value of gio_init in gsettings_init and return false if necessary.
  - Re-enable the use of system GConf.
  - Only ifdef g_type_init&g_free if USE_SYSTEM_GIO and USE_SYSTEM_GCONF are undefined.
  - Resolves: rhbz#1242587


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - The RHEL 5 version of libsctp is too old for the OpenJDK SCTP implementation.
  - Resolves: rhbz#1235155


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Remove libxslt and mercurial dependencies pulled in from IcedTea builds.
  - Reduce redhat-lsb dependency to redhat-lsb-core (lsb_release)
  - Resolves: rhbz#1235155


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Bump to 2.6.0 and u80b32.
  - Drop upstreamed patches and separate AArch64 HotSpot.
  - Add dependencies on pcsc-lite-devel (PR2496) and lksctp-tools-devel (PR2446)
  - Add dependency on GConf2-devel (PR2320)
  - Only run -Xshare:dump on JIT archs other than power64 as port lacks support
  - Update remove-intree-libraries script to cover LCMS and PCSC headers and SunEC.
  - Resolves: rhbz#1235155


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.36-1.13.8.0
changelog:
  - Update to IcedTea 1.13.8
  - Update no_pr2125.patch to work against new version.
  - Resolves: rhbz#1235149


author: Matej Muzila <mmuzila@redhat.com> - 5.5.45-1
changelog:
  - Rebase to 5.5.45
    Includes fixes for: CVE-2014-6568 CVE-2015-0374
    CVE-2015-0381 CVE-2015-0382 CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571 CVE-2015-0433
    CVE-2015-0441 CVE-2015-0505 CVE-2015-2573 CVE-2015-2582 CVE-2015-2620
    CVE-2015-2643 CVE-2015-2648 CVE-2015-4737 CVE-2015-4752 CVE-2015-4757
    Resolves: #1247020


author: Matej Muzila <mmuzila@redhat.com> - 5.5.40-1
changelog:
  - Rebase to 5.5.40
    Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
    CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
    CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
    Resolves: #1160514


author: Honza Horak <hhorak@redhat.com> - 5.5.37-1
changelog:
  - Update to MySQL 5.5.37, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089203


author: Honza Horak <hhorak@redhat.com> 5.5.36-1
changelog:
  - Update to MySQL 5.5.36, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
    Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
    CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
    CVE-2014-0001
    Resolves: #1055876


author: Honza Horak <hhorak@redhat.com> 5.5.32-2
changelog:
  - Fix text in mysql-readme-devel for RHEL-5
    Resolves: #975119
  - Fix misleading error message when uninstalling built-in plugins
    Resolves: #985402
  - Do not use pie linker flags, they don't work in RHEL-5
    Resolves: #985418


author: Honza Horak <hhorak@redhat.com> 5.5.32-1
changelog:
  - Update to MySQL 5.5.32, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html
    Resolves: #975113
  - Use man pages from 5.5.30 due to license change
    Resolves: #975785
  - Fix issues found by Coverity
    Resolves: #975904


author: Honza Horak <hhorak@redhat.com> 5.5.31-10
changelog:
  - Fix service status for unprivileged user
    Resolves: #975117
  - Add README.mysql-devel to document how -devel package should be used
    Resolves: #975119


author: Honza Horak <hhorak@redhat.com> 5.5.31-4
changelog:
  - Fix reporting of service starting
    Resolves: #958098
  - Include mysqlhotcopy utility and -devel sub-package for building
    daemon plugins


author: Honza Horak <hhorak@redhat.com> 5.5.31-2
changelog:
  - Fix building with relro and PIE
  - Don't use SSL_OP_NO_COMPRESSION since it doesn't exist in openssl-0.9.8


author: Honza Horak <hhorak@redhat.com> 5.5.31-1
changelog:
  - Update to MySQL 5.5.31, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-31.html
  - Turn on hardened build


author: Honza Horak <hhorak@redhat.com> 5.5.30-6
changelog:
  - Spec file fixes found in Package Review #950053
  - Use log file prefixed by scl name and located in /var/log


author: Honza Horak <hhorak@redhat.com> 5.5.30-1
changelog:
  - Update to MySQL 5.5.30, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-30.html


author: Honza Horak <hhorak@redhat.com> 5.5.29-1
changelog:
  - Update to MySQL 5.5.29, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-29.html
  - Fix inaccurate default for socket location in mysqld-wait-ready
  Resolves: #890535


author: Honza Horak <hhorak@redhat.com> 5.5.28-5
changelog:
  - Add patch for CVE-2012-5611
  Resolves: #883642
  - Widen DH key length from 512 to 1024 bits to meet minimum requirements
    of FIPS 140-2
  Related: #877124
  - Use --no-backup-if-mismatch to prevent including backup files


author: Honza Horak <hhorak@redhat.com> 5.5.28-3
changelog:
  - Use a config file for specifying SCLS enabled when starting service
  - Changed way how patches are enhanced with SCL values
  - Fixed scl scripts path replacement
  - Create /var/lib/mysql for socket file
  - Use scl-service wrapper to fix systemd start issues


author: Honza Horak <hhorak@redhat.com> 5.5.28-2
changelog:
  - Re-enable SCLs after /sbin/service clears environment variables
  - Have socket file the same path as core mysql
  - Do not use systemd macros


author: Tom Lane <tgl@redhat.com> 5.5.28-1
changelog:
  - Update to MySQL 5.5.28, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-28.html
  - Clean up partially-created database files when mysql_install_db fails
  Related: #835131
  - Honor user and group settings from service file in mysqld-prepare-db-dir
  Resolves: #840431
  - Export THR_KEY_mysys as a workaround for inadequate threading support
  Resolves: #846602
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves: #850222
  - Use --no-defaults when invoking mysqladmin to wait for the server to start
  Related: #855704


author: Tom Lane <tgl@redhat.com> 5.5.27-1
changelog:
  - Update to MySQL 5.5.27, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-27.html


author: Tom Lane <tgl@redhat.com> 5.5.25a-1
changelog:
  - Update to MySQL 5.5.25a, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-25a.html
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-25.html
  - Don't use systemd's Restart feature; rely on mysqld_safe instead
  Resolves: #832029


author: Tom Lane <tgl@redhat.com> 5.5.24-1
changelog:
  - Update to MySQL 5.5.24, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-24.html
    including the fix for CVE-2012-2122
  Resolves: #830680
  - Tweak logrotate script to put the right permissions on mysqld.log
  - Minor specfile fixes for recent packaging guidelines changes


author: Tom Lane <tgl@redhat.com> 5.5.23-1
changelog:
  - Update to MySQL 5.5.23, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-23.html


author: Tom Lane <tgl@redhat.com> 5.5.22-1
changelog:
  - Update to MySQL 5.5.22, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-22.html
  - Turn on PrivateTmp in service file
  Resolves: #782513
  - Comment out the contents of /etc/logrotate.d/mysqld, so that manual
    action is needed to enable log rotation.  Given the multiple ways in
    which the rotation script can fail, it seems imprudent to try to make
    it run by default.
  Resolves: #799735


author: Honza Horak <hhorak@redhat.com> 5.5.21-3
changelog:
  - Revise mysql_plugin test patch so it moves plugin files to
    a temporary directory (better solution to #789530)


author: Honza Horak <hhorak@redhat.com> 5.5.21-2
changelog:
  - Fix ssl-related tests to specify expected cipher explicitly
  Related: #789600
  - Fix several strcpy calls to check destination size


author: Tom Lane <tgl@redhat.com> 5.5.21-1
changelog:
  - Update to MySQL 5.5.21, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-21.html
  - Hack openssl regression test to still work with rawhide's openssl
  - Fix assorted failures in post-install regression tests (mysql-test RPM)
  Resolves: #789530


author: Tom Lane <tgl@redhat.com> 5.5.20-2
changelog:
  - Revise our test-disabling method to make it possible to disable tests on a
    platform-specific basis, and also to get rid of mysql-disable-test.patch,
    which broke in just about every upstream update (Honza Horak)
  - Disable cycle-counter-dependent regression tests on ARM, since there is
    not currently any support for that in Fedora ARM kernels
  Resolves: #773116
  - Add some comments to mysqld.service documenting how to customize it
  Resolves: #785243


author: Tom Lane <tgl@redhat.com> 5.5.20-1
changelog:
  - Update to MySQL 5.5.20, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-20.html
    as well as security fixes described at
    http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
  Resolves: #783828
  - Re-include the mysqld logrotate script, now that it's not so bogus
  Resolves: #547007


author: Tom Lane <tgl@redhat.com> 5.5.19-1
changelog:
  - Update to MySQL 5.5.19, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-19.html


author: Tom Lane <tgl@redhat.com> 5.5.18-1
changelog:
  - Update to MySQL 5.5.18, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-18.html


author: Tom Lane <tgl@redhat.com> 5.5.17-1
changelog:
  - Update to MySQL 5.5.17, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-17.html
  - Get rid of version-number assumption in sysv-to-systemd conversion trigger


author: Honza Horak <hhorak@redhat.com> 5.5.16-4
changelog:
  - Don't assume all ethernet devices are named ethX
  Resolves: #682365
  - Exclude user definition from my.cnf, user is defined in mysqld.service now
  Resolves: #661265


author: Tom Lane <tgl@redhat.com> 5.5.16-2
changelog:
  - Update to MySQL 5.5.16, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-16.html


author: Tom Lane <tgl@redhat.com> 5.5.15-2
changelog:
  - Update to MySQL 5.5.15, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-15.html


author: Tom Lane <tgl@redhat.com> 5.5.14-2
changelog:
  - Remove make_scrambled_password and make_scrambled_password_323 from mysql.h,
    since we're not allowing clients to call those functions anyway
  Related: #690346


author: Tom Lane <tgl@redhat.com> 5.5.14-1
changelog:
  - Update to MySQL 5.5.14, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-14.html


author: Tom Lane <tgl@redhat.com> 5.5.13-1
changelog:
  - Update to MySQL 5.5.13, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-13.html


author: Tom Lane <tgl@redhat.com> 5.5.12-1
changelog:
  - Update to MySQL 5.5.12, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-12.html


author: Tom Lane <tgl@redhat.com> 5.5.10-3
changelog:
  - Add LSB init block to initscript, to ensure sane ordering at system boot
  Resolves: #703214
  - Improve initscript start action to notice when mysqladmin is failing
    because of configuration problems
  Related: #703476
  - Remove exclusion of "gis" regression test, since upstream bug 59908
    is fixed (for some value of "fixed") as of 5.5.10.


author: Tom Lane <tgl@redhat.com> 5.5.10-2
changelog:
  - Add my_make_scrambled_password to the list of symbols exported by
    libmysqlclient.so.  Needed at least by pure-ftpd.


author: Tom Lane <tgl@redhat.com> 5.5.10-1
changelog:
  - Update to MySQL 5.5.10, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-10.html
    Note that this includes a rather belated soname version bump for
    libmysqlclient.so, from .16 to .18
  - Add tmpfiles.d config file so that /var/run/mysqld is recreated at boot
    (only needed in Fedora 15 and later)
  Resolves: #658938


author: Tom Lane <tgl@redhat.com> 5.5.9-1
changelog:
  - Update to MySQL 5.5.9, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-9.html
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines


author: Tom Lane <tgl@redhat.com> 5.5.8-9
changelog:
  - Support s390/s390x in performance schema's cycle-counting functions
    (needed to make regression tests pass on these platforms)


author: Tom Lane <tgl@redhat.com> 5.5.8-8
changelog:
  - PPC64 floating-point differences are not masked by -ffloat-store after all,
    so let's just disable gis regression test till upstream makes it less picky
  Resolves: #674253
  - Add __perllib_requires setting to make rpm 4.9 do what we need


author: Tom Lane <tgl@redhat.com> 5.5.8-6
changelog:
  - Remove no-longer-needed special switches in CXXFLAGS, per yesterday's
    discussion in fedora-devel about -fexceptions.
  - Rebuild needed anyway to check compatibility with latest systemtap.


author: Tom Lane <tgl@redhat.com> 5.5.8-3
changelog:
  - my_print_help, load_defaults, free_defaults, and handle_options all turn
    out to be documented/recommended in Paul DuBois' MySQL book, so we'd better
    consider them part of the de-facto API.
  Resolves: #666728


author: Tom Lane <tgl@redhat.com> 5.5.8-1
changelog:
  - Update to MySQL 5.5.8 (major version bump).  Note this includes removal
    of libmysqlclient_r.so.
  - Add a linker version script to hide libmysqlclient functions that aren't
    part of the documented API.


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
  Resolves: #646569


author: Tom Lane <tgl@redhat.com> 5.1.51-1
changelog:
  - Update to MySQL 5.1.51, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html


author: Tom Lane <tgl@redhat.com> 5.1.50-2
changelog:
  - Include my_compiler.h in distribution, per upstream bug #55846.
    Otherwise PHP, for example, won't build.


author: Tom Lane <tgl@redhat.com> 5.1.50-1
changelog:
  - Update to MySQL 5.1.50, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-50.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html


author: Tom Lane <tgl@redhat.com> 5.1.48-2
changelog:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig
  Related: #609734


author: Tom Lane <tgl@redhat.com> 5.1.48-1
changelog:
  - Update to MySQL 5.1.48, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-48.html
    including a fix for CVE-2010-2008
  Related: #614214


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #597390
  - Fix broken "federated" storage engine plugin
  Related: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Related: #598656


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    including fixes for CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves: #592862
  Resolves: #583717
  - Create mysql group explicitly in pre-server script, to ensure correct GID
  Related: #594155


author: Tom Lane <tgl@redhat.com> 5.1.46-1
changelog:
  - Update to MySQL 5.1.46, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html


author: Tom Lane <tgl@redhat.com> 5.1.45-2
changelog:
  - Fix multiple problems described in upstream bug 52019, because regression
    tests fail on PPC if we don't.


author: Tom Lane <tgl@redhat.com> 5.1.45-1
changelog:
  - Update to MySQL 5.1.45, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html


author: Tom Lane <tgl@redhat.com> 5.1.44-2
changelog:
  - Add "Obsoletes: mysql-cluster" to fix upgrade-in-place from F-12
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Related: #557711
  Related: #562749


author: Tom Lane <tgl@redhat.com> 5.1.44-1
changelog:
  - Update to MySQL 5.1.44, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html
  - Remove mysql.info, which is not freely redistributable
  Resolves: #560181
  - Revert broken upstream fix for their bug 45058
  Resolves: #566547


author: Tom Lane <tgl@redhat.com> 5.1.43-2
changelog:
  - Remove mysql-cluster, which is no longer supported by upstream in this
    source distribution.  If we want it we'll need a separate SRPM for it.


author: Tom Lane <tgl@redhat.com> 5.1.43-1
changelog:
  - Update to MySQL 5.1.43, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html


author: Tom Lane <tgl@redhat.com> 5.1.42-7
changelog:
  - Add backported patch for CVE-2008-7247 (upstream bug 39277)
  Related: #543619
  - Use non-expired certificates for SSL testing (upstream bug 50702)


author: Tom Lane <tgl@redhat.com> 5.1.42-3
changelog:
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines


author: Tom Lane <tgl@redhat.com> 5.1.42-2
changelog:
  - Disable building the innodb plugin; it tickles assorted gcc bugs and
    doesn't seem entirely ready for prime time anyway.


author: Tom Lane <tgl@redhat.com> 5.1.42-1
changelog:
  - Update to MySQL 5.1.42, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-42.html
  - Start mysqld_safe with --basedir=/usr, to avoid unwanted SELinux messages
  Resolves: #547485


author: Tom Lane <tgl@redhat.com> 5.1.41-1
changelog:
  - Update to MySQL 5.1.41, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
    including fixes for CVE-2009-4019
  Related: #540906
  - Don't set old_passwords=1; we aren't being bug-compatible with 3.23 anymore
  Resolves: #540735


author: Tom Lane <tgl@redhat.com> 5.1.40-1
changelog:
  - Update to MySQL 5.1.40, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-40.html
  - Do not force the --log-error setting in mysqld init script
  Resolves: #533736


author: Tom Lane <tgl@redhat.com> 5.1.39-3
changelog:
  - Work around two different compiler bugs on sparc, one by backing off
    optimization from -O2 to -O1, and the other with a klugy patch
  Related: #529298, #529299
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparc and sparc64 should be


author: Tom Lane <tgl@redhat.com> 5.1.39-1
changelog:
  - Update to MySQL 5.1.39, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-39.html


author: Tom Lane <tgl@redhat.com> 5.1.37-5
changelog:
  - Work around unportable assumptions about stpcpy(); re-enable main.mysql test
  - Clean up some obsolete parameters to the configure script


author: Tom Lane <tgl@redhat.com> 5.1.37-4
changelog:
  - Remove one misguided patch; turns out I was chasing a glibc bug
  - Temporarily disable "main.mysql" test; there's something broken there too,
    but we need to get mysql built in rawhide for dependency reasons


author: Tom Lane <tgl@redhat.com> 5.1.37-2
changelog:
  - Add a couple of patches to improve the probability of the regression tests
    completing in koji builds


author: Tom Lane <tgl@redhat.com> 5.1.37-1
changelog:
  - Update to MySQL 5.1.37, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-37.html


author: Tom Lane <tgl@redhat.com> 5.1.36-1
changelog:
  - Update to MySQL 5.1.36, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-36.html


author: Tom Lane <tgl@redhat.com> 5.1.35-1
changelog:
  - Update to MySQL 5.1.35, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-35.html
  - Ensure that /var/lib/mysql is created with the right SELinux context
  Resolves: #502966


author: Tom Lane <tgl@redhat.com> 5.1.34-1
changelog:
  - Update to MySQL 5.1.34, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-34.html
  - Increase startup timeout per bug #472222


author: Tom Lane <tgl@redhat.com> 5.1.33-1
changelog:
  - Update to MySQL 5.1.33.
  - Disable use of pthread_setschedparam; doesn't work the way code expects.
  Related: #477624


author: Tom Lane <tgl@redhat.com> 5.1.30-2
changelog:
  - hm, apparently --with-innodb and --with-ndbcluster are still needed
    even though no longer documented ...


author: Tom Lane <tgl@redhat.com> 5.1.30-1
changelog:
  - Update to MySQL 5.1.30.  Note that this includes an ABI break for
    libmysqlclient (it's now got .so major version 16).
  - This also updates mysql for new openssl build


author: Tom Lane <tgl@redhat.com> 5.0.67-2
changelog:
  - Build the "embedded server" library, and package it in a new sub-RPM
    mysql-embedded, along with mysql-embedded-devel for devel support files.
  Resolves: #149829


author: Tom Lane <tgl@redhat.com> 5.0.67-1
changelog:
  - Update to mysql version 5.0.67
  - Move mysql_config's man page to base package, again (apparently I synced
    that change the wrong way while importing specfile changes for ndbcluster)


author: Tom Lane <tgl@redhat.com> 5.0.51a-2
changelog:
  - Enable ndbcluster support
  Resolves: #163758
  - Suppress odd crash messages during package build, caused by trying to
    build dbug manual (which we don't install anyway) with dbug disabled
  Resolves: #437053
  - Improve mysql.init to pass configured datadir to mysql_install_db,
    and to force user=mysql for both mysql_install_db and mysqld_safe.
  Related: #450178


author: Tom Lane <tgl@redhat.com> 5.0.45-11
changelog:
  - Fix mysql-stack-guard patch to work correctly on IA64
  - Fix mysql.init to wait correctly when socket is not in default place
  Related: #435494


author: Dennis Gilmore <dennis@ausil.us> 5.0.45-10
changelog:
  - add sparc64 to 64 bit arches for test suite checking
  - add sparc, sparcv9 and sparc64 to multilib handling


author: Tom Lane <tgl@redhat.com> 5.0.45-9
changelog:
  - Fix the stack overflow problem encountered in January.  It seems the real
  issue is that the buildfarm machines were moved to RHEL5, which uses 64K not
  4K pages on PPC, and because RHEL5 takes the guard area out of the requested
  thread stack size we no longer had enough headroom.
  Related: #435337


author: Tom Lane <tgl@redhat.com> 5.0.45-7
changelog:
  - Unbelievable ... upstream still thinks that it's a good idea to have a
    regression test that is guaranteed to begin failing come January 1.
  - ... and it seems we need to raise STACK_MIN_SIZE again too.


author: Tom Lane <tgl@redhat.com> 5.0.45-4
changelog:
  - Seems we need explicit BuildRequires on gawk and procps now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 5.0.45-2
changelog:
  - Update License tag to match code.
  - Work around recent Fedora change that makes "open" a macro name.


author: Tom Lane <tgl@redhat.com> 5.0.45-1
changelog:
  - Update to MySQL 5.0.45
  Resolves: #246535
  - Move mysql_config's man page to base package
  Resolves: #245770
  - move my_print_defaults to base RPM, for consistency with Stacks packaging
  - mysql user is no longer deleted at RPM uninstall
  Resolves: #241912


author: Tom Lane <tgl@redhat.com> 5.0.37-2
changelog:
  - Use a less hacky method of getting default values in initscript
  Related: #233771, #194596
  - Improve packaging of mysql-libs per suggestions from Remi Collet
  Resolves: #233731
  - Update default /etc/my.cnf ([mysql.server] has been bogus for a long time)


author: Tom Lane <tgl@redhat.com> 5.0.37-1
changelog:
  - Update to MySQL 5.0.37
  Resolves: #231838
  - Put client library into a separate mysql-libs RPM to reduce dependencies
  Resolves: #205630


author: Tom Lane <tgl@redhat.com> 5.0.33-1
changelog:
  - Update to MySQL 5.0.33
  - Install band-aid fix for "view" regression test designed to fail after 2006
  - Don't chmod -R the entire database directory tree on every startup
  Related: #221085
  - Fix unsafe use of install-info
  Resolves: #223713
  - Cope with new automake in F7
  Resolves: #224171


author: Tom Lane <tgl@redhat.com> 5.0.27-1
changelog:
  - Update to MySQL 5.0.27 (see CVE-2006-4031, CVE-2006-4226, CVE-2006-4227)
  Resolves: #202247, #202675, #203427, #203428, #203432, #203434, #208641
  - Fix init script to return status 1 on server start timeout
  Resolves: #203910
  - Move mysqldumpslow from base package to mysql-server
  Resolves: #193559
  - Adjust link options for BDB module
  Resolves: #199368


author: Tom Lane <tgl@redhat.com> 5.0.22-2
changelog:
  - Work around brew's tendency not to clean up failed builds completely,
    by adding code in mysql-testing.patch to kill leftover mysql daemons.


author: Tom Lane <tgl@redhat.com> 5.0.22-1
changelog:
  - Update to MySQL 5.0.22 (fixes CVE-2006-2753)
  - Install temporary workaround for gcc bug on s390x (bz #193912)


author: Tom Lane <tgl@redhat.com> 5.0.18-4
changelog:
  - Modify multilib header hack to not break non-RH arches, per bug #181335
  - Remove logrotate script, per bug #180639.
  - Add a new mysql-test RPM to carry the regression test files;
    hack up test scripts as needed to make them run in /usr/share/mysql-test.


author: Tom Lane <tgl@redhat.com> 5.0.16-1
changelog:
  - Update to MySQL 5.0.16
  - Add EXCEPTIONS-CLIENT license info to the shipped documentation
  - Make my_config.h architecture-independent for multilib installs;
    put the original my_config.h into my_config_$ARCH.h
  - Add -fwrapv to CFLAGS so that gcc 4.1 doesn't break it


author: Tom Lane <tgl@redhat.com> 4.1.12-2
changelog:
  - Fix buffer overflow newly exposed in isam code; it's the same issue
    previously found in myisam, and not very exciting, but I'm tired of
    seeing build warnings.


author: Tom Lane <tgl@redhat.com> 4.1.12-1
changelog:
  - Update to MySQL 4.1.12 (includes a fix for bz#158688, bz#158689)
  - Extend mysql-test-ssl.patch to solve rpl_openssl test failure (bz#155850)
  - Update mysql-lock-ssl.patch to match the upstream committed version
  - Add --with-isam to re-enable the old ISAM table type, per bz#159262
  - Add dependency on openssl-devel per bz#159569
  - Remove manual.txt, as upstream decided not to ship it anymore;
    it was redundant with the mysql.info file anyway.


author: Tom Lane <tgl@redhat.com> 4.1.11-3
changelog:
  - Enable openssl tests during build, per bz#155850
  - Might as well turn on --disable-dependency-tracking


author: Tom Lane <tgl@redhat.com> 4.1.11-2
changelog:
  - Avoid dependency on <asm/atomic.h>, cause it won't build anymore on ia64.
    This is probably a cleaner solution for bz#143537, too.


author: Tom Lane <tgl@redhat.com> 4.1.11-1
changelog:
  - Update to MySQL 4.1.11 to fix bz#152911 as well as other issues
  - Move perl-DBI, perl-DBD-MySQL dependencies to server package (bz#154123)
  - Override configure thread library test to suppress HAVE_LINUXTHREADS check
  - Fix BDB failure on s390x (bz#143537)
  - At last we can enable "make test" on all arches


author: Tom Lane <tgl@redhat.com> 4.1.10a-1
changelog:
  - Update to MySQL 4.1.10a to fix security vulnerabilities (bz#150868,
    for CAN-2005-0711, and bz#150871 for CAN-2005-0709, CAN-2005-0710).


author: Tom Lane <tgl@redhat.com> 4.1.10-2
changelog:
  - Need -fno-strict-aliasing in at least one place, probably more.
  - Work around some C spec violations in mysql.


author: Tom Lane <tgl@redhat.com> 4.1.7-6
changelog:
  - Fix init script to not need a valid username for startup check (bz#142328)
  - Fix init script to honor settings appearing in /etc/my.cnf (bz#76051)
  - Enable SSL (bz#142032)


author: Tom Lane <tgl@redhat.com> 4.1.7-4
changelog:
  - Turn off old_passwords in default /etc/my.cnf file, for better compatibility
    with mysql 3.x clients (per suggestion from Joe Orton).


author: Tom Lane <tgl@redhat.com> 3.23.58-13
changelog:
  - fix security issues CAN-2004-0835, CAN-2004-0836, CAN-2004-0837
    (bugs #135372, 135375, 135387)
  - fix privilege escalation on GRANT ALL ON `Foo\_Bar` (CAN-2004-0957)


author: Tom Lane <tgl@redhat.com> 3.23.58-12
changelog:
  - fix multilib problem with mysqlbug and mysql_config
  - adjust chkconfig priority per bug #128852
  - remove bogus quoting per bug #129409 (MySQL 4.0 has done likewise)
  - add sleep to mysql.init restart(); may or may not fix bug #133993


author: Tom Lane <tgl@redhat.com> 3.23.58-11
changelog:
  - fix low-priority security issues CAN-2004-0388, CAN-2004-0381, CAN-2004-0457
    (bugs #119442, 125991, 130347, 130348)
  - fix bug with dropping databases under recent kernels (bug #124352)


author: Tom Lane <tgl@redhat.com> 3.23.58-8
changelog:
  - repair logfile attributes in %files, per bug #102190
  - repair quoting problem in mysqlhotcopy, per bug #112693
  - repair missing flush in mysql_setpermission, per bug #113960
  - repair broken error message printf, per bug #115165
  - delete mysql user during uninstall, per bug #117017
  - rebuilt


author: Patrick Macdonald <patrickm@redhat.com> 3.23.57-1
changelog:
  - revert to prior version of MySQL due to license incompatibilities
    with packages that link against the client.  The MySQL folks are
    looking into the issue.


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.52-2
changelog:
  - Add --enable-local-infile to configure - a new option
    which doesn't default to the old behaviour (#72885)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.49-3
changelog:
  - Add the various .cnf examples as doc files to mysql-server (#60349)
  - Don't include manual.ps, it's just 200 bytes with a URL inside (#60349)
  - Don't include random files in /usr/share/mysql (#60349)
  - langify (#60349)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.47-4
changelog:
  - Use kill, not mysqladmin, to flush logs and shut down. Thus,
    an admin password can be set with no problems.
  - Remove reload from init script


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.46-1
changelog:
  - 3.23.46
  - use -fno-rtti and -fno-exceptions, and set CXX to increase stability.
    Recommended by mysql developers.


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.41-1
changelog:
  - 3.23.41 bugfix release
  - disable innodb, to avoid the broken updates
  - Use "mysqladmin flush_logs" instead of kill -HUP in logrotate
    script (#51711)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Reenable test, but don't run them for s390, s390x or ia64
  - Make /etc/my.cnf config(noplace). Same for /etc/logrotate.d/mysqld


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Make it obsolete our 6.2 PowerTools packages
  - 3.23.36 bugfix release - fixes some security issues
    which didn't apply to our standard configuration
  - Make "make test" part of the build process, except on IA64
    (it fails there)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - gettextize
  - move the items in Requires(post): to Requires: in preparation
    for an errata for 7.0 when 3.23.31 is released
  - 3.23.31


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - add the log file to the rpm database, and make it 0640
    (#24116)
  - as above in logrotate script
  - changes to the init sequence - put most of the data
    in /etc/my.cnf instead of hardcoding in the init script
  - use /var/run/mysqld/mysqld.pid instead of
    /var/run/mysqld/pid
  - use standard safe_mysqld
  - shut down cleaner


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.30
  - do an explicit chmod on /var/lib/mysql in post, to avoid
    any problems with broken permissons. There is a report
    of rm not changing this on its own (#22989)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - bzipped source
  - changed from 85 to 78 in startup, so it starts before
    apache (which can use modules requiring mysql)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - check for negative niceness values, and negate it
    if present (#17899)
  - redefine optflags on IA32 FTTB


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.26, which among other fixes now uses mkstemp()
    instead of tempnam().
  - revert changes made yesterday, the problem is now
    isolated


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - rename config file to /etc/my.cnf, which is what
    mysqld wants... doh. (#17432)
  - include a changed safe_mysqld, so the pid file option
    works.
  - make mysql dir world readable to they can access the
    mysql socket. (#17432)
  - 3.23.24


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't run ldconfig -n, it doesn't update ld.so.cache
    (#16034)
  - include some missing binaries
  - use safe_mysqld to start the server (request from
    mysql developers)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't build the SQL daemon statically (glibc problems)
  - fix the logrotate script - only flush log if mysql
    is running
  - change the reloading procedure
  - remove icon - glint is obsolete a long time ago


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - try the new compiler again
  - build the SQL daemon statically
  - add compile time support for complex charsets
  - enable assembler
  - more cleanups in initscript


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.21
  - remove file from /etc/sysconfig
  - Fix initscript a bit - initialization of databases doesn't
    work yet
  - specify the correct licenses
  - include a /etc/my.conf (empty, FTTB)
  - add conditional restart to spec file


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - update to 3.23.20
  - use %configure, %makeinstall, %{_tmppath}, %{_mandir},
    %{_infodir}, /etc/init.d
  - remove the bench package
  - change some of the descriptions a little bit
  - fix the init script
  - some compile fixes
  - specify mysql user
  - use mysql uid 27 (postgresql is 26)
  - don't build on ia64


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.32 release XOS.1 for LinuX/OS 1.8.0
  - Upgrade from version 3.22.27 to 3.22.32.
  - Do "make install" instead of "make install-strip", because "install -s"
    now appears to fail on various scripts.  Afterwards, strip manually.
  - Reorganize subpackages, according to common Red Hat packages: the client
    program and shared library become the base package and the server and
    some accompanying files are now in a separate server package.  The
    server package implicitly requires the base package (shared library),
    but we have added a manual require tag anyway (because of the shared
    config file, and more).
  - Rename the mysql-benchmark subpackage to mysql-bench.


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.2 for LinuX/OS 1.7.1
  - Add post(un)install scripts for updating ld.so.conf (client subpackage).


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.1 for LinuX/OS 1.7.0
  - Initial version.
  - Some ideas borrowed from Red Hat Powertools 6.1, although this spec
    file is a full rewrite from scratch.


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-1
changelog:
  - Rebase nss to 3.19.1
  - Pick up upstream fix for client auth. regression caused by 3.19.1
  - Revert upstream change to minimum key sizes
  - Remove patches that rendered obsolote by the rebase
  - Update existing patches on account of the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-7
changelog:
  - Pick up upstream patch from nss-3.19.1
  - Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)
  - Resolves: Bug 1236967 - CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)


author: Harald Hoyer <harald@redhat.com> 095-14.30
changelog:
  - unignore device mapper devices
  Resolves: rhbz#214639
  - fixed grammar in man page
  Resolves: rhbz#481349
  - report syntax errors in rules
  Resolves: rhbz#573785
  - improved network interface renaming
  Resolves: rhbz#520722


author: Harald Hoyer <harald@redhat.com> 095-14.29
changelog:
  - set time for wait_for_sys to 10 seconds (was 3)
  Resolves: rhbz#769169
  - fixed sas path_id for hot-remove/add
  Resolves: rhbz#812286


author: Harald Hoyer <harald@redhat.com> 095-14.23
changelog:
  - vol_id: check if device is readable
  Resolves: rhbz#456447
  - fix race condition, to prevent udevd from SIGBUS
  Resolves: rhbz#521318
  - fix rename interface bug 
  Resolves: rhbz#520453
  - kill loop in post and preun, so the new udevd can start
  Resolves: rhbz#567406
  - set umask 022 in start_udev
  Resolves: rhbz#596774
  - let scd* be a symlink to sr*
  Resolves: rhbz#610897
  - add by-path symlinks for tape devices
  Resolves: rhbz#611664
  - add virtio-ports symlinks
  Resolves: rhbz#624928


author: Harald Hoyer <harald@redhat.com> 095-14.21
changelog:
  - remove old udev queue,
    which might be leftover from udev in initrd (rhbz#487858)
  - add cciss support to scsi_id (rhbz#449057)
  - Resolves: rhbz#487858, rhbz#449057


author: Harald Hoyer <harald@redhat.com> 095-14.19
changelog:
  - removed zaptel rules (rhbz #294061)
  - fixed segfault for empty lines in passwd (rhbz#413831)
  - added patch for iscsi ids (Daniel Berrange) (rhbz#427640)
  - added /etc/sysconfig/udev-stw, which makes MODULES 
    configurable (Jeff Bastian) (rhbz#437979)
  - added ext4 support to vol_id (rhbz#444528)
  - updated dasd_id from dasdinfo of s390-tools-1.6.2 (rhbz#430532)
  - Resolves: rhbz#294061, rhbz#413831, rhbz#427640
  - Resolves: rhbz#437979, rhbz#444528, rhbz#430532


author: Harald Hoyer <harald@redhat.com> 095-14.16
changelog:
  - set selinux context for .udev dirs and symlinks (rhbz#442886)
  - fixed rule for hp iLO2 virtual mouse device (rhbz#429215)
  - Resolves: rhbz#429215, rhbz#442886


author: Harald Hoyer <harald@redhat.com> 095-14.12
changelog:
  - fix for looping vol_id, because of a malformed passwd (rhbz#425941)
  - revised fix for tape devices (rhbz#231990)
  - Resolves: rhbz#425941, rhbz#231990


author: Harald Hoyer <harald@redhat.com> 095-14.11
changelog:
  - moved "ignore_device" for dm devices to 90-dm.rules (rhbz#275441)
  - added cciss support (rhbz#250484)
  - support more than 10 nst devices in the persistent rules (rhbz#231990)
  - extra double check for symlinks improved (rhbz#217917)
  - Resolves: rhbz#217917, rhbz#231990, rhbz#250484, rhbz#275441


author: Harald Hoyer <harald@redhat.com> - 095-14.8
changelog:
  - removed pie link flag from static build flags
  - Resolves: rhbz#233956, rhbz#233307, rhbz#226997, rhbz#236242
  - Resolves: rhbz#217917, rhbz#231990


author: Harald Hoyer <harald@redhat.com> - 095-14.7
changelog:
  - added RPM_OPT_FLAGS and pie to static build flags
  - Resolves: rhbz#233956, rhbz#233307, rhbz#226997, rhbz#236242
  - Resolves: rhbz#217917, rhbz#231990


author: Harald Hoyer <harald@redhat.com> - 095-14.6
changelog:
  - do not fail, if EEXIST on mkdir() (#217917)
  - configure process numbers dynamically according to CPU and MEM (#226997)
  - link statically (#236242, #233307)
  - fixed rule for raw1394 (#233956)
  - added persistent device names for tape devices (#231990)
  - Resolves: rhbz#233956, rhbz#233307, rhbz#226997, rhbz#236242 
  - Resolves: rhbz#217917, rhbz#231990


author: Harald Hoyer <harald@redhat.com> - 095-14.5
changelog:
  - added symlink to /sbin/dasd_id (#219181)
  - added more debugging possibilities (#219621)
  - Resolves: rhbz#219181, rhbz#219621


author: Harald Hoyer <harald@redhat.com> - 095-14.1
changelog:
  - Do not ignore dm devices completly (rhbz#204157, rhbz#214639)
  - Remove tty devices from udev.nodes (rhbz#209204)
  - Resolves: rhbz#204157, rhbz#214639, rhbz#209204


author: Harald Hoyer <harald@redhat.com> - 095-9
changelog:
  - improved error msg for firmware_helper (bug #206944)
  - added xpram symlink to slram device nodes (bug #205563)
  - removed infiniband rules (bug #206224)
  - use newest path_id script (bug #207139)


author: Harald Hoyer <harald@redhat.com> - 095-7
changelog:
  - added udevtimeout=<timeout in seconds>
    kernel command line parameters for start_udev 
    (default is to wait forever)


author: Harald Hoyer <harald@redhat.com> - 089-1
changelog:
  - version 089
  - do not force loading of parport_pc (bug #186850)
  - manually load snd-powermac (bug #176761)
  - added usb floppy symlink (bug #185171)
  - start_udev uses udevtrigger now instead of udevstart


author: Harald Hoyer <harald@redhat.com> - 084-9
changelog:
  - create non-enum device (cdrom, floppy, scanner, changer)
    for compatibility (random device wins)
  	e.g. /dev/cdrom -> hdd
  	     /dev/cdrom-hdc -> hdc
               /dev/cdrom-hdd -> hdd


author: Harald Hoyer <harald@redhat.com> - 084-8
changelog:
  - fixed ZIP drive thrashing (bz #181041 #182601)
  - fixed enumeration (%e does not work anymore) (bz #183288)


author: Peter Jones <pjones@redhat.com> - 084-7
changelog:
  - Don't start udevd in %post unless it's already running
  - Stop udevd before chkconfig --del in %preun


author: Harald Hoyer <harald@redhat.com> - 084-4
changelog:
  - fixed group issue with vol_id (bz #181432)
  - fixed dvb permissions (bz #179993)
  - added support for scsi media changer (bz #181911)
  - fixed pktcdvd device creation (bz #161268)


author: Harald Hoyer <harald@redhat.com> - 078-4
changelog:
  - removed group "video" from the rules
  - fixed specfile
  - load nvram, floppy, parport and lp modules in
    /etc/sysconfig/modules/udev-stw.modules until there 
    is a better solution
  - fixed more floppy module loading


author: Harald Hoyer <harald@redhat.com> - 077-2
changelog:
  - switched back to udevstart and use active /dev/.udev/queue waiting 
    in start_udev
  - removed support for old kernels
  - refined some udev.rules


author: Harald Hoyer <harald@redhat.com> - 075-2
changelog:
  - moved /etc/udev/scripts to /lib/udev
  - moved /etc/udev/devices to /lib/udev/devices
  - added new event replay for kernel >= 2.6.15
  - added usb devices
  - renamed cpu device to cpuid (bug #161538)
  - changed vendor string "Onstream" to "On[sS]tream" (bug #173043)
  - compiled all *_id programs statically


author: Bill Nottingham <notting@redhat.com> - 062-2
changelog:
  - update to 062
  - use included ata_id, build usb_id
  - load modules for pci, usb, pcmcia
  - ship RELEASE-NOTES in %doc


author: Harald Hoyer <harald@redhat.com> - 056-1
changelog:
  - updated to version 056
  - merged permissions in the rules file
  - added udevpermconv.sh to convert old permission files


author: Harald Hoyer <harald@redhat.com> - 050-6
changelog:
  - introducing /etc/udev/makedev.d/50-udev.nodes
  - glibcstatic patch modified to let gcc4 compile udev


author: Harald Hoyer <harald@redhat.com> - 048-2
changelog:
  - fixed a case where reading /proc/ide/hd?/media returns EIO
    (bug rh#142713)
  - changed all device node permissions of group "disk" to 0640 
    (bug rh#110197)
  - remove $udev_db with -fr in case of a directory (bug rh#142962)


author: Harald Hoyer <harald@redhat.com> - 039-6.FC3.1
changelog:
  - speed up pam_console.dev
  - mount pts and shm, in case of the dev trigger
  - increased timeout for udevstart
  - removed syslog() from signal handler (caused vmware locks)
  - turned off logging, which speeds up the boot process


author: Harald Hoyer <harald@redhat.com> - 039-5
changelog:
  - added udev-039-norm.patch, which prevents removal of hd* devices,
    because the kernel sends remove/add events, if an IDE removable device
    is close(2)ed. mke2fs, e.g. would fail in this case.


author: Harald Hoyer <harald@redhat.com> - 039-4
changelog:
  - do not call dev.d scripts, if network interface hasn't changed 
    the name
  - correct wait for dummy network devices
  - removed NONBLOCK from volume-id
  - do not log in udev.static, which should fix bug 136005


author: Harald Hoyer <harald@redhat.com> - 039-2
changelog:
  - improved wait_for_sysfs for virtual consoles with Kay Siever's patch
  - wait for ppp class
  - wait for LVM dm- devices
  - integrate wait_for_sys in udev.static for the initrd


author: Harald Hoyer <harald@redhat.com> - 039-1
changelog:
  - version 039, fixes also manpage bug 135996 
  - fixed glibc issue for static version (getgrnam, getpwnam) (bug 136005)
  - close the syslog in every app


author: Harald Hoyer <harald@redhat.com> - 038-2
changelog:
  - par[0-9] is now a symlink to lp
  - MAKEDEV the parport devices
  - now conflicts with older initscripts


author: Harald Hoyer <harald@redhat.com> - 035-1
changelog:
  - version 035, which only improves wait_for_sysfs
  - load ide modules in start_udev, until a hotplug script is available
    (bug 135260)


author: Harald Hoyer <harald@redhat.com> - 034-3
changelog:
  - removed scary error messages from wait_for_sysfs
  - symlink from nst? -> tape?
  - kill udevd on update


author: Harald Hoyer <harald@redhat.com> - 034-1
changelog:
  - new version udev-034
  - removed patches, which went upstream
  - pam_console.dev link renamed to 05-pam_console.dev
  - MAKEDEV.dev links renamed to 10-MAKEDEV.dev


author: Harald Hoyer <harald@redhat.com> - 032-10
changelog:
  - added floppy madness (bug 134830)
  - replay scsi events in start_udev for the devices on the adapter (bug 130746)


author: Harald Hoyer <harald@redhat.com> - 032-9
changelog:
  - obsoleted $UDEV_LOG, use udev_log
  - correct SYMLINK handling in pam_console.dev
  - specfile cleanup
  - added check-cdrom.sh for nice cdrom symlinks


author: Harald Hoyer <harald@redhat.com> - 032-8
changelog:
  - added patches from Féliciano Matias for multiple symlinks (bug 134477 and 134478)
  - corrected some permissions with a missing leading 0
  - added z90crypt to the permissions file (bug 134448)
  - corrected requires and conflicts tags
  - removed /dev/log from MAKEDEV creation


author: Harald Hoyer <harald@redhat.com> - 032-4
changelog:
  - made /etc/udev/devices/ for manual device nodes
  - refined SELINUX check, if /dev is not yet mounted in start_dev


author: Harald Hoyer <harald@redhat.com> - 032-3
changelog:
  - corrected permissions for /dev/rtc (bug 133636)
  - renamed device-mapper to mapper/control (bug 133688)


author: Harald Hoyer <harald@redhat.com> - 030-27
changelog:
  - simplified udev.conf
  - refined close_on_exec patch
  - added pam_console supply for symlinks, now gives correct permissions,
    for e.g. later plugged in cdroms
  - renamed sr? to scd? (see devices.txt; k3b likes that :)


author: Jeremy Katz <katzj@redhat.com> - 030-26
changelog:
  - require a 2.6 kernel
  - prereq instead of requires MAKEDEV
  - obsolete and provide dev
  - add a trigger for the removal of /dev so that we set things up


author: Harald Hoyer <harald@redhat.com> - 030-21
changelog:
  - applied enumeration patch from David Zeuthen for cdrom symlinks (bug 131532)
  - create /dev/ppp in start_udev (bug 131114)
  - removed nvidia devices from start_udev
  - check for restorecon presence in start_udev (bug 131904)


author: Harald Hoyer <harald@redhat.com> - 030-16
changelog:
  - moved %{_sysconfdir}/hotplug.d/default/udev.hotplug to %{_sysconfdir}/hotplug.d/default/10-udev.hotplug


author: Harald Hoyer <harald@redhat.com> - 030-15
changelog:
  - added nvidia devices to start_udev
  - added UDEV_RAMFS for backwards compat to udev.conf
  - changed Group (bug 131488)
  - added libselinux-devel to build requirements


author: Jeremy Katz <katzj@redhat.com> - 030-11
changelog:
  - use tmpfs instead of ramfs (it has xattr support now)
  - change variables appropriately to TMPFS intead of RAMFS in udev.conf
  - create loopN, not just loop in start_udev


author: Harald Hoyer <harald@redhat.com> - 030-8
changelog:
  - changed defaults not to remove device nodes
  - added rule for net/tun
  - extended start_udev to create devices, which can trigger module autoloading
  - refined cloexec patch, to redirect stdin,out,err of /dev.d execed apps to /dev/null


author: Harald Hoyer <harald@redhat.com> - 030-7
changelog:
  - removed usage of /usr/bin/seq in start_udev
  - set correct permissions in start_udev
  - extended the cloexec patch
  - removed udev-persistent package (define with_persistent==0)
  - check for /var/run/console/console.lock before calling /sbin/pam_console_setowner
  - linked pam_console_setowner statically against libglib-2.0.a


author: Harald Hoyer <harald@redhat.com> - 029-3
changelog:
  - put /etc/sysconfig/udev in /etc/udev/udev.conf and removed it
  - made only udev.static static
  - make our defaults the default values
  - removed /udev


author: Harald Hoyer <harald@redhat.com> - 026-2
changelog:
  - udev-026
  - preserve ownership of device nodes, which already exist
  - do not remove device nodes if UDEV_REMOVE="no"
  - added volume_id
  - build with klibc


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - add some more files to the documentation directory
  - add ability to build scsi_id and make it the default


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - fix up udevd build, as it's no longer needed to be build seperatly
  - add udevtest to list of files
  - more Red Hat sync ups.


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - add udevsend, and udevd to the files
  - add ability to build udevd with glibc after the rest is build with klibc


author: Robert Love <rml@tech9.net>
changelog:
  - Make work without a build root
  - Correctly install the right files
  - Pass the RPM_OPT_FLAGS to gcc so we can build per the build policy
  - Put some prereqs in
  - Install the hotplug symlink to udev


author: Martin Stransky <stransky@redhat.com> - 24.2.0-4
changelog:
  - Fixed rhbz#1024232 - thunderbird: squiggly lines used 
    for spelling correction disappear randomly


author: Martin Stransky <stransky@redhat.com> - 14.0-4
changelog:
  - Removed StartupWMClass (rhbz#844863)
  - Fixed -g parameter
  - Removed thunderbird-devel before packing to avoid debugsymbols duplicities (rhbz#823940)


author: Jan Horak <jhorak@redhat.com> - 8.0-2
changelog:
  - Enable Mozilla's crash reporter again for all archs
  - Temporary workaround for langpacks
  - Disabled addon check UI (#753551)


author: Christopher Aillon <caillon@redhat.com> - 3.1.9-7
changelog:
  - Make gvfs-open launch a compose window (salimma)
  - Spec file cleanups (salimma, caillon)
  - Split out mozilla crashreporter symbols to its own debuginfo package (caillon)


author: Remi Collet <fedora@famillecollet.com> - 3.1.6-8
changelog:
  - fix cairo + nspr required version
  - lightning: fix thunderbird version required
  - lightning: fix release (b3pre)
  - lightning: clean install


author: Jan Horak <jhorak@redhat.com> - 3.0-2.beta2
changelog:
  - Fixed clicked link does not open in browser (#489120)
  - Fixed missing help in thunderbird (#488885)


author: Christopher Aillon <caillon@redhat.com> 2.0.0.6-4
changelog:
  - Fix crashes when using GTK+ themes containing a gtkrc which specify 
    GtkOptionMenu::indicator_size and GtkOptionMenu::indicator_spacing


author: Christopher Aillon <caillon@redhat.com> 2.0.0.0-0.5.rc1
changelog:
  - Fix the desktop file
  - Clean up the files list
  - Remove the default client stuff from the pref window


author: Christopher Aillon <caillon@redhat.com> 1.5.0.9-7
changelog:
  - Updated cursor position patch from tagoh to fix issue with "jumping"
    cursor when in a textfield with tabs.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.8-1
changelog:
  - Update to 1.5.0.8
  - Allow choosing of download directory
  - Take the user to the correct directory from the Download Manager.
  - Patch to add support for printing via pango from Behdad.


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.7-2
changelog:
  - Fix crash when changing gtk key theme
  - Prevent UI freezes while changing GNOME theme
  - Remove verbiage about pango; no longer required by upstream.


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.5-5
changelog:
  - Update nopangoxft.patch
  - Fix rendering of MathML thanks to Behdad Esfahbod.
  - Update start page text to reflect the MathML fixes.
  - Enable pango by default on all locales
  - Build using -rpath
  - Re-enable GCC visibility


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.6.rc1
changelog:
  - Fix crash when deleting highlighted text while composing mail within
    plaintext editor with spellcheck enabled.


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.3.rc1
changelog:
  - Once again, disable ppc64 because of a new issue.
    See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175944

  - Use the system NSS libraries
  - Build on ppc64


author: Kristian Høgsberg <krh@redhat.com> 1.0.2-7
changelog:
  - Add firefox-1.0-pango-cairo.patch to get rid of the last few Xft
    references, fixing the "no fonts" problem.


author: Christopher Aillon <caillon@redhat.com> 1.0.2-3
changelog:
  - Don't have downloads "disappear" when downloading to desktop (#139015)
  - Fix for some more cursor issues in textareas (149991, 150002, 152089)
  - Add upstream patch to fix bidi justification of pango
  - Add patch to fix launching of helper applications
  - Add patch to properly link against libgfxshared_s.a
  - Fix multilib conflicts


author: Christopher Blizzard <blizzard@redhat.com> 0.8.0-8
changelog:
  - Pull over patches from firefox build:
    - disable default application dialog
    - don't include software update since it doesn't work
    - make external app support work


author: Christopher Aillon <caillon@redhat.com> 0.8.0-1
changelog:
  - Update to 0.8.0
  - Remove enigmail
  - Update BuildRequires
  - Remove gcc34 and extension manager patches -- they are upstreamed.
  - Fix for gnome-vfs2 error at component registration


author: Warren Togami <wtogami@redhat.com> 0.7.3-3
changelog:
  - rawhide import
  - apply NetBSD's freetype 2.1.8 patch
  - apply psfonts patch
  - remove BR on /usr/bin/ex, breaks beehive


author: David Hill <djh[at]ii.net> 0.7.3-0.fdr.1
changelog:
  - update to Thunderbird 0.7.3 and Enigmail 0.85.0
  - remove XUL.mfasl on startup, add Debian enigmail patches
  - add Xvfb hack for -install-global-extension


author: David Hill <djh[at]ii.net> 0.7.2-0.fdr.0
changelog:
  - update to 0.7.2, just because it's there
  - update gcc-3.4 patch (Kaj Niemi)
  - add EM registration patch and remove instdir hack


author: David Hill <djh[at]ii.net> 0.7-0.fdr.1
changelog:
  - re-enable Enigmail 0.84.1
  - add gcc-3.4 patch (Kaj Niemi)
  - use official branding (with permission)


author: David Hill <djh[at]ii.net> 0.7-0.fdr.0
changelog:
  - update to 0.7
  - temporarily disable Enigmail 0.84.1, make ftp links work (#1634)
  - specify libdir, change BR for apt (V. Skyttä, #1617)


author: David Hill <djh[at]ii.net> 0.6-0.fdr.3
changelog:
  - installation directory now versioned
  - allow root to run the program (for installing extensions)
  - remove unnecessary %pre and %post
  - remove separators, update mozconfig and launch script (M. Schwendt, #1460)


author: David Hill <djh[at]ii.net> 0.6-0.fdr.0.20040415
changelog:
  - update to latest CVS, update mozconfig and %build accordingly
  - update to Enigmail 0.83.6
  - remove x-remote and x86_64 patches
  - build with -Os


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.8
changelog:
  - minor improvements to open-browser.sh and startup script
  - update to latest version of Blizzard's x-remote patch


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.6
changelog:
  - update open-browser script, modify BuildRequires (Warren)
  - add Blizzard's x-remote patch
  - initial attempt at x-remote-enabled startup script


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.4
changelog:
  - add Mozilla x86_64 patch (Oliver Sontag)
  - Enigmail source filenames now include the version
  - modify BuildRoot


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.1
changelog:
  - update Enigmail to 0.83.3
  - use official source tarball (after removing the CRLFs)
  - package renamed to thunderbird


author: Warren Togami <warren@togami.com> 0:0.4-0.fdr.3
changelog:
  - open-browser.sh release 3
  - patch broken /usr/bin/mozilla script during install
  - dir ownership
  - XXX: Source fails build on x86_64... fix later


author: David Hill <djh[at]ii.net>
changelog:
  - update to latest CVS (0.4a)
  - update Enigmail to 0.82.2
  - alter mozconfig for new build requirements
  - add missing BuildReq (#987)


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-23
changelog:
  - new feature update: honor priority/weight with ldap_domain2hostlist (#733435)
  - fix: initscript marked as %config incorrectly (#738768)


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-20
changelog:
  - fix: OpenLDAP packages lack debug data (#684630)
  - doc: Document preferred use of TLS_CACERT instead of TLS_CACERTDIR to specify Certificate Authorities (#699652)
  - fix: libldap ignores a directory of CA certificates if any of them can't be read (#609722)
  - fix: Migration: migrate_all_offline.sh can't handle duplicate entries (#563148)
  - fix: Init script is working wrong if database recovery is needed (#604092)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-13
changelog:
  - fixed segfault issues in modrdn (#606375)
  - added patch handling null char in TLS to compat package
    (#606375, patch backported by Jan Vcelak <jvcelak@redhat.com>)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-6
changelog:
  - fixed possible double free() in rwm overlay (#495628)
  - updated slapd man page and slapcat usage string (#468206)
  - updated default config for slapd - deleted syncprov module (#466937)
  - fixed migration tools autofs generated format (#460331)
  - fixed migration tools numbers detection in /etc/shadow (#113857)
  - fixed migration tools base ldif (#104585)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-5
changelog:
  - implementation of limit adjustment before starting slapd (#527313)
  - init script no longer executes script in /tmp (#483356)
  - slapd not starting with ldap:/// every time (#481003)
  - delay between TERM and KILL when shutting down slapd (#452064)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-4
changelog:
  - fixed compat libs linking (#503734)
  - activated lightweight dispatcher feature (#507276)
  - detection of timeout after failed result (#495701)


author: Jan Safranek <jsafranek@redhat.com> 2.3.43-1
changelog:
  - rebase to openldap-2.3.43 (#454994)
  - apply latest db-4 patches (#454857)
  - package openldap overlays, including smbk5pwd (#329441 #248549 #370411
    - check for TLS_CACERT file permissions in /etc/init.d/ldap (#356401)
  - rework the database upgrade logic, it should dump/restore the BDB
    database only when really needed (#436046)
  - introduce NETWORK_TIMEOUT in ldap.conf file to configure timeout of
    connect() operation (#459132)
  - allow to set SLURPD_KRB5CCNAME in /etc/sysconfig/ldap to set KRB5CCNAME
    of the slurpd process (#428638)


author: Jan Safranek <jsafranek@redhat.com> 2.3.27-6
changelog:
  - Include sals patch to close #230395
  - Include manual bind timeout patch to close #230388
  - Include patch to allow write access to ldap socket to close #237417
  - Fix the upgrade logic so database is not deleted on upgrade (#240834)
  - Fix the memory leak on ACL rules (#241636)
  - Fix initscript return codes (#242665)


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-5
changelog:
  - Include the -getdn patch to close
    bz#214768: CVE-2006-5779 Specially crafted authcid makes OpenLDAP fail an assertion
    Resolves: rhbz#214768


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of /usr/sbin/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add /etc/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under %{_libdir}/tls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on %{ix86} boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    %{evolution_connector_prefix} (/usr/lib/evolution-openldap)
  - provide openldap-evolution-devel = %{version}-%{release} in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/lib instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be 
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    %{evolution_connector_prefix} (/usr/lib64/evolution-openldap)
  - provide openldap-evolution-devel = %{version}-%{release} in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/lib64 instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-63.el5
changelog:
  - Added bz1092603.patch
    * don't free memory needed by other threads during shutdown, to avoid
      races ending in use after free corruption.
  - Resolves: bz #1092603


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-62.el5
changelog:
  - Added bz1086949.patch
    * make multipathd block sighup until after it finishes starting-up
  - Resolves: bz #1086949


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-61.el5
changelog:
  - Added bz489499.patch
    * update multipathd man page
  - Added bz852011.patch
    * fixed typo in multipath.conf.annotated
  - Added bz1004179.patch
    * updated multipath.conf.defaults
  - Added bz798543.patch
    * changed rpm build flags
  - Added instructions to get upstream tarball
  - Resolves: bz #489499, #560955, #798543, #852011, #1004179


author: Benjmain Marzinski <bmarzins@redhat.com> 0.4.7-56.el5
changelog:
  - Added bz827016.patch
  - Added bz860185.patch
  - Added bz910585.patch
  - Added bz916630.patch
  - Added bz839983.patch
  - Resolves: bz #827016, #860185, #910585, #916630, #839983


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-51.el5
changelog:
  - Updated to latest source, t0_4_7_rhel5_35
  - Resolves: bz #644989, #744231, #747180, #799847, #833193


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-50.el5
changelog:
  - Updated to latest source, t0_4_7_rhel5_34
  - Resolves: bz #747180, #769990, #771571, #781480, #783522, #788965


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-48.el5
changelog:
  - Updated to latest source, t0_4_7_rhel5_32
  - Resolves: bz #703277, #719575, #729478, #737072, #740022, #740512, #741664, #742906


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-47.el5
changelog:
  - Updated to latest source, t0_4_7_rhel5_31
  - Resolves: bz #650795, #655203, #655976, #702410, #703501, #711970, #715524, #716329


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-44.el5
changelog:
  - Updated to latest sourse, t0_4_7_rhel5_30
  - Resolves: bz #639429, #627911, #670836, #674366, #675369


author: Benjamin Marzinksi <bmarzins@redhat.com> 0.4.7-38.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_24
  - Resolves: bz #484419, #559852, #560892, #566685, #568127, #570513, #574813, #576600, #585225, #599686


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-34.el5
changelog:
  - Added 545822_fix_part2.patch
  - Added 554830_fix.patch
  - Fixed Invista default config, and typo in multipath.conf man page.
  - Resolves: bz #545822, #554830


author: Benjamin Marzinski <bmarzins@redaht.com> 0.4.7-33.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_19
  - Added new multipath.conf option "checker_timeout". If this is not set the
    checker functions with explicit timeouts use /sys/block/sd<x>/device/timeout
  - Resolves: bz #553042


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-31.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_17
  - Resolves: bz #526550, #518575, #512243, #531744, #540882, #537977, #437585, #472171, #473039, #481239, #502128, #510331, #517896, #501019, #524009, #537281, #475967, #499080, #504619, #515171, #524178, #527754, #532424


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-27.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_16
  - Resolves: bz #437588, #474451, #462776, #477023, #485296, #489030, #481227, #484711


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-25.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_14
  - Resolves: bz #452897, #480048, #457776, #459629, #470896, #493402


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-19.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_13
  - Resolves: bz #238421, #419581, #449097, #455692, #456126, #456228, #457226


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-18.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_12
  - Resolves: bz #431843, #434588, #434988, #439366, #440123, #442000, #444421, #446223, #448655, #454928


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-15.el5
changelog:
  - All non-static path_prio callouts are now just symlinks to the static
    ones
  - Resolves: bz #355961


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-14.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_10
  - Resolves: bz #226791, #247443, #249088, #251346, #335021, #354661, #355961


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-10.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_5
  - Resolves: #214838, #223146, #223150, #223762, #231545, #241189, #242723, #243483


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-8.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_2
  - Resolves bz #219804
  - filesystems made on dasd devices may need to be rebuild after upgrading
    to this version.


author: Peter Jones <pjones@redhat.com> - 0.4.7-4.1
changelog:
  - Split kpartx out into its own package so dmraid can use it without
    installing multipathd
  - Fix a segfault in kpartx


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269359 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption [rhel-5.11.z]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-407.el5]
changelog:
  - [utrace] check ->utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
  - [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-147.el5
changelog:
  - net: add checks to validate ring buffer pointers 
  - Resolves: bz#1263273
    (xen: qemu: Heap overflow vulnerability in ne2000_receive() function)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.4
changelog:
  - Update with new IcedTea & b37 tarballs, including fix for appletviewer regression.
  - Resolves: rhbz#1271926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.3
changelog:
  - Update with new IcedTea & b37 tarballs, including more Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.2
changelog:
  - Update with new IcedTea & b37 tarballs, including Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.1
changelog:
  - Drop java-1.6.0-openjdk-pstack.patch. 6310967, the upstream version, is applied in OpenJDK 6.
  - Resolves: rhbz#1271926


author: Jason Corley <jason.corley@gmail.com> 0:3.1-9jpp
changelog:
  - update copyright to contain current year
  - rebuild on RHEL4 to avoid broken jar repack script in FC6


author: Matt Wringe <mwringe@redhat.com> - 0:3.1-7jpp
changelog:
  - Add tomcat5 subpackage
  - Add versioning to provides and obsoletes
  - Move rm -rf %RPM_BUILD_ROOT from %prep to %install
  - Add missing maven dependencies


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:3.1-4jpp-1fc
changelog:
  - Add conditional native compilation.
  - Update commons-collections-3.1-project_xml.patch to exclude reference
    to maven-plugin-changelog which requires netbeans-svc etc.
  - Set test.failonerror to false and add patch for build.xml for ant builds
    with gcj to avoid stopping the build on test failures on GCJ.
  - Merge with latest JPP version.


author: Aizaz Ahmed <aahmed@redhat.com> 0:2.1-4jpp_5rh
changelog:
  - Added trigger to restore symlinks that are removed if ugrading
    from a commons-collections rhug package


author: Henri Gomez <hgomez@users.sourceforge.net> 2.0-3jpp
changelog:
  - use sed instead of bash 2.x extension in link area to make spec compatible 
    with distro using bash 1.1x


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0-5jpp
changelog:
  - renamed to %{name}
  - additional sources in individual archives
  - versioned dir for javadoc
  - section macro


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-408.el5]
changelog:
  - [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
  - [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
  - [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.0
changelog:
  - Remove unneeded build dependencies on jakarta-commons-logging and prelink/execstack
  - Resolves: rhbz#1295764


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.0
changelog:
  - Replace addition of -fno-strict-overflow to IndicRearrangementProcessor{,2}.cpp with -fwrapv
  - Resolves: rhbz#1295764


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.0
changelog:
  - Bump to 2.6.4 and u95b00.
  - Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
  - Drop 8072932or8074489 patch as applied upstream in u91b01.
  - Resolves: rhbz#1295764


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.38-1.13.10.0
changelog:
  - Add patch to replace -fno-strict-overflow with -fwrapv on older RHEL 5.11 GCC.
  - Resolves: rhbz#1295772


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-38
changelog:
  - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
  - disable SSLv2 in the generic TLS method (can be reenabled
    by setting environment variable OPENSSL_ENABLE_SSL2)


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-409.el5]
changelog:
  - [fs] ext4: limit group search loop for non-extent files (Lukas Czerner) [1301100]
  - [fb] vm: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
  - [s390] add dummy io_remap_pfn_range() to asm-s390/pgtable.h (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
  - [mm] vm: add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
  - [sched] prevent division by zero x->cpu_power (Denys Vlasenko) [1209728]
  - [xen] x86: fully ignore segment override for register-only ops (Mateusz Guzik) [1200373] {CVE-2015-2151}


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.0
changelog:
  - Explictly required libXcomposite-devel for PR2867 as nothing else pulls it in
  - Resolves: rhbz#1320655


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.0
changelog:
  - Bump to 2.6.5 and u99b00.
  - Correct check for fsg.sh in tarball creation script
  - Resolves: rhbz#1320655


author: Simo Sorce <ssorce@redhat.com> 3.0.33-3.33.el5
changelog:
  - Security Release, fixes CVE-2010-0547, CVE-2010-0787, CVE-2011-2694,
    CVE-2011-2522, CVE-2011-1678, CVE-2011-2724
  - resolves: #722553


author: Guenther Deschner <gdeschner@redhat.com> 3.0.33-3.24.el5
changelog:
  - Fix smbget, rpcclient, smbtree, pdbedit, smbclient and smbcacls manpage
  - resolves: #457195, #457082, #457203, #457384, #457192, #457097


author: Guenther Deschner <gdeschner@redhat.com> 3.0.33-3.15.el5
changelog:
  - Security Release, fixes CVE-2009-1888, CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906
  - resolves: #526661


author: Simo Sorce <ssorce@redhat.com> 3.0.33-3.9.el5
changelog:
  - Raise log level for annoying messages that are normal with
    some idmap backends.
  - resolves: #485382


author: Guenther Deschner <gdeschner@redhat.com> 3.0.28-3.2.el5
changelog:
  - Fix joining and authentication with NT4 and Windows 2000 domains.
  - resolves: #449000
  - resolves: #450533


author: Simo Sorce <ssorce@redhat.com> 3.0.28-1.el5_2.1
changelog:
  - Security fix for CVE-2008-1105
  - Fix join verification
  - Fix smb signing
  - resolves: CVE-2008-1105
  - resolves: #447380
  - resolves: #444637


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.8
changelog:
  - Yet another 2 patches for regressions related to operations on a DC with
    trusted domains. Fiux idmap with legacy configuration options, and fix the
    pam module, pam logins were broken for trusted domains
  - related: #429024


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.7
changelog:
  - Add another 2 patches to solve 429024 completely, as some cases were not
    covered:
    - Fix domain trusts while running as a DC
    - Fix credential chain with windows 2008
  - Make some configure flag explicit even if they are on by default so that we
    can catch build errors if something is wrong instead of silently missing
    features supposed to be compiled in
  - related: #429024


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.6
changelog:
  - Back out moiunt cifs patches for prepath, as the corresponding
    kernel changes can't be put in at this time
  - Add a minor SPNEGO fix
  - related: #370501
  - related: #291501


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.4
changelog:
  - Add another set of fixes for 429024, turned out this was not
    completely fixed as expected
  - Add some other patches from Guenther to join Windows 2008 (Rc1)
    domain controllers
  - Make sure bad port numbers are reported and smbd exits if it
    can't bind to any port (completes fix for #429003)
  - Fix a regression in ACLs code that was causing samba to set the
    wrong inherited permissions
  - resolves: #429024
  - related: #291501
  - resolves: #429003
  - resolves: #431243


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.3
changelog:
  - Add 2 more patches to fix a Samba DC talking to trusted
    domains.
  - resolves: #429024
  - related: #291501


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.1
changelog:
  - Add more fixes on top 3.0.28 as committed upstream
  - Fixes typo and removes trailing spaces in default smb.conf file
  - resolves: #426244
  - related: #291501
  - resolves: #426623
  - resolves: #383351
  - resolves: #425996


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5
changelog:
  - rebase to 3.0.28 (3.0.x is in bugfix/security fix only mode
    since 3.2.x was announced) + later Vista fixes
  - resolves: #291501
  - resolves: #370501


author: Simo Sorce <ssorce@redhat.com> 3.0.25b-1.el5_1.4
changelog:
  - Security fix for CVE-2007-6015
  - Fix for regression introduced with CVE-2007-4572
  - resolves: CVE-2007-6015
  - resolves: CVE-2007-4572


author: Simo Sorce <ssorce@redhat.com> 3.0.25b-0.el5_1.2
changelog:
  - Security fix for CVE-2007-4138
  - Security fix for CVE-2007-4572
  - Security fix for CVE-2007-5398
  - Multilib Fix
  - resolves: #351511
  - resolves: #350771
  - resolves: #359161
  - resolves: #338141


author: Jay Fenlason <fenlason@redhat.com> 3.0.23a-3
changelog:
  - Fix the -logfiles patch to close
    bz#199607 Samba compiled with wrong log path.
    bz#199206 smb.conf has incorrect log file path


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-2
changelog:
  - New upstream release.
  - Use modified filter-requires-samba.sh from packaging/RHEL/setup/
    to get rid of bogus dependency on perl(Unicode::MapUTF8)
  - Update the -logfiles and -smb.conf patches to work with 3.0.23


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-0.RC3
changelog:
  - New upstream RC release.
  - Update the -logfiles, and -passwd patches for
    3.0.23rc3
  - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>)
    to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Update this spec file to build with 3.0.23rc3
  - Remove the -install.mount.smbfs patch, since we don't install
    mount.smbfs any more.


author: Jay Fenlason <fenlason@redhat.com> 3.0.21b-2
changelog:
  - New upstream version.
  - Since the rawhide kernel has dropped support for smbfs, remove smbmount
    and smbumount.  Users should use mount.cifs instead.
  - Upgrade to 3.0.21b


author: Jay Fenlason <fenlason@redhat.com> 3.0.20b-2
changelog:
  - turn on -DLDAP_DEPRECATED to allow access to ldap functions that have
    been depricated in 2.3.11, but which don't have well-documented
    replacements (ldap_simple_bind_s(), for example).
  - Upgrade to 3.0.20b, which includes all the previous upstream patches.
  - Updated the -warnings patch for 3.0.20a.
  - Include  --with-shared-modules=idmap_ad,idmap_rid to close
    bz#156810 --with-shared-modules=idmap_ad,idmap_rid
  - Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close
    bz#170259 pam_stack is deprecated


author: Jay Fenlason <fenlason@redhat.com> 3.0.20-2
changelog:
  - New upstream release
    Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3,
      -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1
    This obsoletes the -pie and -delim patches
    the -warning and -gcc4 patches are obsolete too
    The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1
    Also, the -quoting patch was implemented differently upstream
    There is now a umount.cifs executable and manpage
    We run autogen.sh as part of the build phase
    The testprns command is now gone
    libsmbclient now has a man page
  - Include -bug106483 patch to close
    bz#106483 smbclient: -N negates the provided password, despite documentation
  - Added the -warnings patch to quiet some compiler warnings.
  - Removed many obsolete patches from CVS.


author: Jay Fenlason <fenlason@redhat.com> 3.0.14a-2
changelog:
  - New upstream release.
  - the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1,
    winbind_find_dc_v2 patches are now obsolete.


author: Jay Fenlason <fenlason@redhat.com> 3.0.13-2
changelog:
  - New upstream release
  - add my -quoting patch, to fix swat with strings that contain
    html meta-characters, and to use correct quote characters in
    lists, closing bz#134310
  - include the upstream winbindd_2k3sp1 patch
  - include the -smbclient patch.
  - include the -hang patch from upstream.


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-4
changelog:
  - Use the updated filter-requires-samba.sh file, so we don't accidentally
    pick up a dependency on perl(Crypt::SmbHash)


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-3
changelog:
  - add -gcc4 patch to compile with gcc 4.
  - remove the now obsolete -smbclient-kerberos.patch
  - Include four upstream patches from
    http://samba.org/~jerry/patches/post-3.0.11/
    (Slightly modified the winbind_find_dc_v2 patch to apply easily with
    rpmbuild).


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-4
changelog:
  - Update the -man patch to fix ntlm_auth.1 too.
  - Move pam_smbpass.so to the -common package, so both the 32
    and 64-bit versions will be installed on multiarch platforms.
    This closes bz#143617
  - Added new -delim patch to fix mount.cifs so it can accept
    passwords with commas in them (via environment or credentials
    file) to close bz#144198


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-2
changelog:
  - New upstream release that closes CAN-2004-1154  bz#142544
  - Include the -64bit patch from Nalin.  This closes bz#142873
  - Update the -logfiles patch to work with 3.0.10
  - Create /var/run/winbindd and make it part of the -common rpm to close
    bz#142242


author: Jay Fenlason <fenlason@redhat.com> 3.0.9-2
changelog:
  - New upstream release.  This obsoletes the -secret patch.
    Include my changetrustpw patch to make "net ads changetrustpw" stop
    aborting.  This closes #134694
  - Remove obsolete triggers for ancient samba versions.
  - Move /var/log/samba to the -common rpm.  This closes #76628
  - Remove the hack needed to get around the bad docs files in the
    3.0.8 tarball.
  - Change the comment in winbind.init to point at the correct pidfile.
    This closes #76641


author: Than Ngo <than@redhat.com> 3.0.8-4
changelog:
  - fix unresolved symbols in libsmbclient which caused applications
    such as KDE's konqueror to fail when accessing smb:// URLs. #139894


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3.1
changelog:
  - Rescue the install.mount.smbfs patch from Juanjo Villaplana
    (villapla@si.uji.es) to prevent building the srpm from trashing your
    installed /usr/bin/smbmount


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3
changelog:
  - Include the corrected docs tarball, and use it instead of the
    obsolete docs from the upstream 3.0.8 tarball.
  - Update the logfiles patch to work with the updated docs.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-2
changelog:
  - New upstream version fixes CAN-2004-0930.  This obsoletes the
    disable-sendfile, salt, signing-shortkey and fqdn patches.
  - Add my <fenlason@redhat.com> ugly non-ascii-domain patch.
  - Updated the pie patch for 3.0.8.
  - Updated the logfiles patch for 3.0.8.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.3
changelog:
  - disable the -salt patch, because it causes undefined references in
    libsmbclient that prevent gnome-vfs from building.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.2
changelog:
  - Re-enable the x_fclose patch that was accidentally disabled
    in 3.0.8-0.pre1.1.  This closes #135832
  - include Nalin's -fqdn and -salt patches.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies
    smbmnt to work with 32-bit uids.


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-4
changelog:
  - Update docs section to not carryover the docs/manpages directory
    This moved many files from /usr/share/doc/samba-3.0.7/docs/* to
    /usr/share/doc/samba-3.0.7/*
  - Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu)
    to correctly create libsmbclient.so.0 and to use /etc/rc.d/init.d instead
    of rolling our own.  This closes #132642
  - Add patch to default "use sendfile" to no, since sendfile appears to
    be broken
  - Add patch from Volker Lendecke <vl@samba.org> to help make
    ldapsam_compat work again.
  - Add patch from "Vince Brimhall" <vbrimhall@novell.com> for ldapsam_compat
    These two patches close bugzilla #132169


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-3
changelog:
  - Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808
    This obsoletes the 3.0.6-schema patch.
  - Update BuildRequires line to include openldap-devel openssl-devel
    and cups-devel


author: Jay Fenlason <fenlason@redhat.com> 3.0.6-3
changelog:
  - New upstream version.
  - Include post 3.0.6 patch from "Gerald (Jerry) Carter" <jerry@samba.org>
    to fix a duplicate in the LDAP schema.
  - Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com)
    to allow correct timestamp handling on 64-bit platforms and fix #126109.
  - reenable the -pie patch.  Samba is too widely used, and too vulnerable
    to potential security holes to disable an important security feature
    like -pie.  The correct fix is to have the toolchain not create broken
    executables when programs compiled -pie are stripped.
  - Remove obsolete patches.
  - Modify this spec file to put libsmbclient.{a,so} in the right place on
    x86_64 machines.


