# changelog

author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.65-1
changelog:
  - Disallow vgchange --clustered if there are active mirrors or snapshots.
  - Fix truncated total size displayed by pvscan.
  - Skip internal lvm devices in scan if ignore_suspended_devices is set.
  - Do not merge old device cache after we run full scan. (2.02.56)
  - Add new --sysinit compound option to vgchange and lvchange.
  - Fix clvmd init script never to deactivate non-clustered volume groups.
  - Drop duplicate errors for read failures and missing devices to verbose level.
  - Do not print encryption key in message debug output (cryptsetup luksResume).
  - Use -d to control level of messages sent to syslog by dmeventd.
  - Change -d to -f to run dmeventd in foreground.
  - Fix udev flags on remove in create_and_load error path.
  - Add dm_list_splice() function to join two lists together.
  - Use /bin/bash for scripts with bashisms.
  - Switch Libs.private to Requires.private in devmapper.pc and lvm2app.pc.
  - Use pkgconfig Requires.private for devmapper-event.pc.


author: Alasdair Kergon <agk@redhat.com> - 2.02.64-1
changelog:
  - Avoid pointless initialisation when the 'version' command is run directly.
  - Fix memory leak for invalid regex pattern input.
  - Display invalid regex pattern for filter configuration in case of error.
  - Fix -M and --type to use strings, not pointers that change on config refresh.
  - Fix lvconvert error message when existing mirrored LV is not found.
  - Set appropriate udev flags for reserved LVs.
  - Disallow the direct removal of a merging snapshot.
  - Don't preload the origin when removing a snapshot whose merge is pending.
  - Disallow the addition of mirror images while a conversion is happening.
  - Disallow primary mirror image removal when mirror is not in-sync.
  - Remove obsolete --name parameter from vgcfgrestore.
  - Add -S command to clvmd to restart the daemon preserving exclusive locks.
  - Increment lvm2app version from 1 to 2 (memory allocation changes).
  - Change lvm2app memory alloc/free for pv/vg/lv properties.
  - Change daemon lock filename from lvm2_monitor to lvm2-monitor for consistency.
  - Add support for new IMPORT{db} udev rule available in udev v152.
  - Add DM_UDEV_PRIMARY_SOURCE_FLAG udev flag to recognize proper DM events.
  - Also include udev libs in libdevmapper.pc.
  - Cache bitset locations to speed up _calc_states.
  - Add a regex optimisation pass for shared prefixes and suffixes.
  - Add dm_bit_and and dm_bitset_equal to libdevmapper.
  - Speed up dm_bit_get_next with ffs().
  - Remove 'lvmconf --lockinglibdir' from cluster post: locking is now built-in.
  - Move libdevmapper-event-lvm2.so to devel package.
  - Explicitly specify libdevmapper-event.so* attributes.
  - Drop support for upgrades from very old versions that used lvm not lvm2.
  - Move libdevmapper-event plug-in libraries into new device-mapper subdirectory.
  - Don't verify lvm.conf contents when using rpm --verify.
  - Move development links to shared objects to /usr.
  - Change libdevmapper deactivation to fail if device is open.
  - Wipe memory buffers for libdevmapper dm-ioctl parameters before releasing.
  - Add support for ioctl's DM_UEVENT_GENERATED_FLAG.
  - Allow incomplete mirror restore in lvconvert --repair upon insufficient space.
  - Do not reset position in metadata ring buffer on vgrename and vgcfgrestore.
  - Allow VGs with active LVs to be renamed.
  - Only pass visible LVs to tools in cmdline VG name/tag expansions without -a.
  - Use C locale and mlockall in clvmd and dmeventd.
  - Mask LCK_HOLD in cluster VG locks for upgrade compatibility with older clvmd.
  - Add activation/polling_interval to lvm.conf as --interval default.
  - Don't ignore error if resuming any LV fails when resuming groups of LVs.
  - Skip closing persistent filter cache file if open failed.
  - Permit mimage LVs to be striped in lvcreate, lvresize and lvconvert.
  - Fix pvmove allocation to take existing parallel stripes into account.
  - Fix incorrect removal of symlinks after LV deactivation fails.
  - Fix is_partitioned_dev not to attempt to reopen device.
  - Fix another thread race in clvmd.
  - Improve vg_validate to detect some loops in lists.
  - Change most remaining log_error WARNING messages to log_warn.
  - Always use blocking lock for VGs and orphan locks.
  - Allocate all memory for segments from private VG mempool.
  - Optimise searching PV segments for seeking the most recently-added.
  - Remove duplicated vg_validate checks when parsing cached metadata.
  - Use hash table of LVs to speed up parsing of text metadata with many LVs.
  - Fix two vg_validate messages, adding whitespace and parentheses.
  - When dmeventd is not forking because of -d flag, don't kill parent process.
  - Fix dso resource leak in error path of dmeventd.
  - Fix --alloc contiguous policy only to allocate one set of parallel areas.
  - Do not allow {vg|lv}change --ignoremonitoring if on clustered VG.
  - Add ability to create mirrored logs for mirror LVs.
  - Fix clvmd cluster propagation of dmeventd monitoring mode.
  - Allow ALLOC_ANYWHERE to split contiguous areas.
  - Add some assertions to allocation code.
  - Introduce pv_area_used into allocation algorithm and add debug messages.
  - Add activation/monitoring to lvm.conf.
  - Add --monitor and --ignoremonitoring to lvcreate.
  - Don't allow resizing of internal logical volumes.
  - Avoid scanning all pvs in the system if operating on a device with mdas.
  - Disable long living process flag in lvm2app library.
  - Fix pvcreate device md filter check.
  - Suppress repeated errors about the same missing PV uuids.
  - Bypass full device scans when using internally-cached VG metadata.
  - Only do one full device scan during each read of text format metadata.
  - Look up missing PVs by uuid not dev_name in pvs to avoid invalid stat.
  - Rewrite clvmd init script.
  - Add default alternative to mlockall using mlock to reduce pinned memory size.
  - Add use_mlockall and mlock_filter to activation section of lvm.conf.
  - Handle misaligned devices that report alignment_offset of -1.
  - Extend core allocation code in preparation for mirrored log areas.
  - No longer fall back to looking up active devices by name if uuid not found.
  - Don't touch /dev in vgmknodes if activation is disabled.
  - Add --showkeys parameter description to dmsetup man page.
  - Add --help option as synonym for help command.
  - Add lvm2app functions lvm_{vg|lv}_{get|add|remove}_tag() functions.
  - Refactor snapshot-merge deptree and device removal to support info-by-uuid.
  - Change spec file to excluding cluster components from the build on s390.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.61-1
changelog:
  - Add %ORIGIN support to lv{create,extend,reduce,resize} --extents.
  - Accept a list of LVs with 'lvconvert --merge @tag' using process_each_lv.
  - Remove false "failed to find tree node" error when activating merging origin.
  - Exit with success when lvconvert --repair --use-policies performs no action.
  - Avoid unnecessary second resync when adding mimage to core-logged mirror.
  - Make clvmd -V return status zero.
  - Fix cmirrord segfault in clog_cpg list processing when converting mirror log. 
  - Deactivate temporary pvmove mirror cluster-wide when activating it fails.
  - Add missing metadata vg_reverts in pvmove error paths.
  - Unlock shared lock in clvmd if activation calls fail.
  - Add lvm_pv_get_size, lvm_pv_get_free and lvm_pv_get_dev_size to lvm2app.
  - Change lvm2app to return all sizes in bytes as documented (not sectors).
  - Exclude internal VG names and uuids from lists returned through lvm2app.
  - Add LVM_SUPPRESS_LOCKING_FAILURE_MESSAGES environment variable.
  - Add DM_UDEV_DISABLE_LIBRARY_FALLBACK udev flag to rely on udev only.
  - Remove hard-coding that skipped _mimage devices from 11-dm-lvm.rules.
  - Export dm_udev_create_cookie function to create new cookies on demand.
  - Add --udevcookie, udevcreatecookie and udevreleasecookie to dmsetup.
  - Set udev state automatically instead of using DM_UDEV_DISABLE_CHECKING.
  - Set udev state automatically instead of using LVM_UDEV_DISABLE_CHECKING.
  - Remove pointless versioned symlinks to dmeventd plugin libraries.
    Resolves: #561422 #561423 #563321


author: Alasdair Kergon <agk@redhat.com> - 2.02.60-1
changelog:
  - Add cmirror subpackage for clustered mirrors.
  - Sleep before first progress check iff pvmove/lvconvert interval has prefix '+'.
  - Fix first syslog message prefix for dmeventd plugins.
  - Make failed locking initialisation messages more descriptive.
  - Add cman requires to cluster subpackage.
  - Set 'preferred_names' in default lvm.conf.
  - Add libdevmapper-event-lvm2.so to serialise dmeventd plugin liblvm2cmd use.
  - Stop dmeventd trying to access already-removed snapshots.
  - Fix clvmd to never scan suspended devices.
  - Fix detection of completed snapshot merge.
  - Improve snapshot merge metadata import validation.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.58-1
changelog:
  - Fix clvmd automatic target module loading crash.
  - Fix allocation code not to stop at the first area of a PV that fits.
  - Add support for the "snapshot-merge" kernel target (2.6.33-rc1).
  - Add --merge to lvconvert to merge a snapshot into its origin.
  - Disable openais and corosync support for clvmd.
    Resolves: #249478 #493055


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.57-1
changelog:
  - Add --splitmirrors to lvconvert to split off part of a mirror.
  - Allow vgremove to remove a VG with PVs missing after a prompt.
  - Add activation/udev_rules config option in lvm.conf.
  - Add --poll flag to vgchange and lvchange to control background daemon launch.
  - Impose limit of 8 mirror images to match the in-kernel kcopyd restriction.
  - Log failure type and recognise type 'F' (flush) in dmeventd mirror plugin.
  - Add --noudevrules option for dmsetup to disable /dev node management by udev.
  - Fix 'dmsetup info -c -o all' to show all fields.
  - Fix coredump and memory leak for 'dmsetup help -c'. 
  - Rename mirror_device_fault_policy to mirror_image_fault policy.
  - Use extended status of new kernel snapshot target 1.8.0 to detect when empty.
  - Allow use of precommitted metadata when a PV is missing.
  - Add global/abort_on_internal_errors to lvm.conf to assist testing.
  - If aborting due to internal error, always send that message to stderr.
  - Keep log type consistent when changing mirror image count.
  - Exit with success in lvconvert --repair --use-policies on failed allocation.
  - Ensure any background daemon exits without duplicating parent's functionality.
  - Change background daemon process names to "(lvm2)".
  - Fix internal lock state after forking.
  - Remove empty PV devices if lvconvert --repair is using defined policies.
  - Use fixed buffer to prevent stack overflow in persistent filter dump.
  - Propagate metadata commit and revert notifications to other cluster nodes.
  - Fix metadata caching and lock state propagation to remote nodes in clvmd.
  - Properly decode all flags in clvmd messages including VG locks.
  - Drop cached metadata after device was auto-repaired and removed from VG.
  - Clear MISSING_PV flag if PV reappeared and is empty.
  - Fix removal of multiple devices from a mirror.
  - Also clean up PVs flagged as missing in vgreduce --removemissing --force.
  - Fix some pvresize and toollib error paths with missing VG releases/unlocks.
  - Explicitly call suspend for temporary mirror layer.
  - Add memlock information to do_lock_lv debug output.
  - Always bypass calls to remote cluster nodes for non-clustered VGs. 
  - Permit implicit cluster lock conversion in pre/post callbacks on local node.
  - Permit implicit cluster lock conversion to the lock mode already held.
  - Fix lock flag masking in clvmd so intended code paths get invoked.
  - Remove newly-created mirror log from metadata if initial deactivation fails.
  - Improve pvmove error message when all source LVs are skipped.
  - Fix memlock imbalance in lv_suspend if already suspended.
  - Fix pvmove test mode not to poll (and fail).
  - Fix vgcreate error message if VG already exists.
  - Fix tools to use log_error when aborted due to user response to prompt.
  - Fix ignored readahead setting in lvcreate --readahead.
  - Fix clvmd memory leak in lv_info_by_lvid by calling release_vg.
  - If LVM_UDEV_DISABLE_CHECKING is set in environment, disable udev warnings.
  - If DM_UDEV_DISABLE_CHECKING is set in environment, disable udev warnings.
  - Always set environment variables for an LVM2 device in 11-dm-lvm.rules.
  - Disable udev rules for change events with DISK_RO set. 
  - Add dm_tree_add_dev_with_udev_flags to provide wider support for udev flags.
  - Correct activated or deactivated text in vgchange summary message.
  - Fix fsadm man page typo (fsdam).
    Resolves: #549870


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.56-1
changelog:
  - Update to latest upstream release with various fixes and enhancements
    detailed in WHATS_NEW.
    Resolves: #463271 #533275


author: Alasdair Kergon <agk@redhat.com> - 2.02.53-1
changelog:
  - Create any directories in /dev with umask 022. (#507397)
  - Handle paths supplied to dm_task_set_name by getting name from /dev/mapper.
  - Add splitname and --yes to dmsetup man page.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.52-3
changelog:
  - Enable udev synchronisation code.
  - Install default udev rules for device-mapper and LVM2.
  - Add BuildRequires: libudev-devel.
  - Add Requires: libudev (to check udev is running).
  - Add Requires: util-linux-ng (blkid used in udev rules).


author: Alasdair Kergon <agk@redhat.com> - 2.02.52-2
changelog:
  - Build dmeventd and place into a separate set of subpackages.
  - Remove no-longer-needed BuildRoot tag and buildroot emptying at install.


author: Alasdair Kergon <agk@redhat.com> - 2.02.52-1
changelog:
  - Prioritise write locks over read locks by default for file locking.
  - Add local lock files with suffix ':aux' to serialise locking requests.
  - Fix readonly locking to permit writeable global locks (for vgscan). (2.02.49)
  - Make readonly locking available as locking type 4.
  - Fix global locking in PV reporting commands (2.02.49).
  - Make lvchange --refresh only take a read lock on volume group.
  - Fix race where non-blocking file locks could be granted in error.
  - Fix pvcreate string termination in duplicate uuid warning message.
  - Don't loop reading sysfs with pvcreate on a non-blkext partition (2.02.51).
  - Fix vgcfgrestore error paths when locking fails (2.02.49).
  - Make clvmd check corosync to see what cluster interface it should use.
  - Fix vgextend error path - if ORPHAN lock fails, unlock / release vg (2.02.49).
  - Clarify use of PE ranges in lv{convert|create|extend|resize} man pages.
  - Restore umask when device node creation fails.
  - Check kernel vsn to use 'block_on_error' or 'handle_errors' in mirror table.


author: Milan Broz <mbroz@redhat.com> - 2.02.51-3
changelog:
  - Fix global locking in PV reporting commands (2.02.49).
  - Fix pvcreate on a partition (2.02.51).
  - Build clvmd with both cman and corosync support.


author: Alasdair Kergon <agk@redhat.com> - 2.02.51-2
changelog:
  - Fix clvmd locking broken in 2.02.50-1.
  - Only change LV /dev symlinks on ACTIVATE not PRELOAD (so not done twice).
  - Make lvconvert honour log mirror options combined with downconversion.
  - Add devices/data_alignment_detection to lvm.conf.
  - Add devices/data_alignment_offset_detection to lvm.conf.
  - Add --dataalignmentoffset to pvcreate to shift start of aligned data area.
  - Update synopsis in lvconvert manpage to mention --repair.
  - Document -I option of clvmd in the man page.


author: Alasdair Kergon <agk@redhat.com> - 2.02.50-1
changelog:
  - Add libs and devel subpackages to include shared libraries for applications.
    N.B. The liblvm2app API is not frozen yet and may still be changed
    Send any feedback to the mailing list lvm-devel@redhat.com.
  - Remove obsolete --with-dmdir from configure.
  - Add global/wait_for_locks to lvm.conf so blocking for locks can be disabled.
  - Fix race condition with vgcreate and vgextend on same device since 2.02.49.
  - Add an API version number, LVM_LIBAPI, to the VERSION string.
  - Return EINVALID_CMD_LINE not success when invalid VG name format is used.
  - Remove unnecessary messages after vgcreate/vgsplit code change in 2.02.49.
  - Store any errno and error messages issued while processing each command.


author: Alasdair Kergon <agk@redhat.com> - 2.02.49-1
changelog:
  - Exclude VG_GLOBAL from vg_write_lock_held so scans open devs read-only again.
  - Fix dev name mismatch in vgcreate man page example.
  - Check md devices for a partition table during device scan.
  - Add extended device (blkext) and md partition (mdp) types to filters.
  - Make text metadata read errors for segment areas more precise.
  - Fix text segment metadata read errors to mention correct segment name.
  - Include segment and LV names in text segment import error messages.
  - Fix memory leak in vgsplit when re-reading the vg.
  - Permit several segment types to be registered by a single shared object.
  - Update the man pages to document size units uniformly.
  - Allow commandline sizes to be specified in terms of bytes and sectors.
  - Update 'md_chunk_alignment' to use stripe-width to align PV data area.
  - Fix segfault in vg_release when vg->cmd is NULL.
  - Add dm_log_with_errno and dm_log_with_errno_init, deprecating the old fns.
  - Fix whitespace in linear target line to fix identical table line detection.
  - Add device number to more log messages during activation.


author: Fabio M. Di Nitto <fdinitto@redhat.com> 2.02.48-2
changelog:
  - BuildRequires and Requires on stable versions of both corosync-lib (1.0.0-1)
    and cluster-lib (3.0.0-20).


author: Alasdair Kergon <agk@redhat.com> - 2.02.48-1
changelog:
  - Abort if automatic metadata correction fails when reading VG to update it.
  - Don't fallback to default major number in libdm: use dm_task_set_major_minor.
  - Explicitly request fallback to default major number in device mapper.
  - Ignore suspended devices during repair.
  - Suggest using lvchange --resync when adding leg to not-yet-synced mirror.
  - Destroy toolcontext on clvmd exit to avoid memory pool leaks.
  - Fix lvconvert not to poll mirror if no conversion in progress.
  - Fix memory leaks in toolcontext error path.
  - Reinstate partial activation support in clustered mode.
  - Allow metadata correction even when PVs are missing.
  - Use 'lvm lvresize' instead of 'lvresize' in fsadm.
  - Do not use '-n' realine option in fsadm for rescue disk compatiblity.
  - Round up requested readahead to at least one page and print warning.
  - Try to repair vg before actual vgremove when force flag provided.
  - Unify error messages when processing inconsistent volume group.
  - Introduce lvconvert --use_policies (repair policy according to lvm.conf).
  - Fix rename of active snapshot with virtual origin.
  - Fix convert polling to ignore LV with different UUID.
  - Cache underlying device readahead only before activation calls.
  - Fix segfault when calculating readahead on missing device in vgreduce.
  - Remove verbose 'visited' messages.
  - Handle multi-extent mirror log allocation when smallest PV has only 1 extent.
  - Add LSB standard headers and functions (incl. reload) to clvmd initscript.
  - When creating new LV, double-check that name is not already in use.
  - Remove /dev/vgname/lvname symlink automatically if LV is no longer visible.
  - Rename internal vorigin LV to match visible LV.
  - Suppress 'removed' messages displayed when internal LVs are removed.
  - Fix lvchange -a and -p for sparse LVs.
  - Fix lvcreate --virtualsize to activate the new device immediately.
  - Make --snapshot optional with lvcreate --virtualsize.
  - Generalise --virtualoriginsize to --virtualsize.
  - Skip virtual origins in process_each_lv_in_vg() without --all.
  - Fix counting of virtual origin LVs in vg_validate.
  - Attempt to load dm-zero module if zero target needed but not present.
  - Add crypt target handling to libdevmapper tree nodes.
  - Add splitname command to dmsetup.
  - Add subsystem, vg_name, lv_name, lv_layer fields to dmsetup reports.
  - Make mempool optional in dm_split_lvm_name() in libdevmapper.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.02.47-2
changelog:
  - BuildRequire newer version of corosynclib (0.97-1) to link against
    latest libraries version (soname 4.0.0).
  - Add lvm2-2_02_48-cluster-cpg-new-api.patch to port clvmd-corosync
    to new corosync cpg API.


author: Alasdair Kergon <agk@redhat.com> - 2.02.47-1
changelog:
  - Inherit readahead setting from underlying devices during activation.
  - Detect LVs active on remote nodes by querying locks if supported.
  - Enable online resizing of mirrors.
  - Use suspend with flush when device size was changed during table preload.
  - Implement query_resource_fn for cluster_locking.
  - Support query_resource_fn in locking modules.
  - Fix pvmove to revert operation if temporary mirror creation fails.
  - Fix metadata export for VG with missing PVs.
  - Add vgimportclone and install it and the man page by default.
  - Force max_lv restriction only for newly created LV.
  - Do not query nonexistent devices for readahead.
  - Reject missing PVs from allocation in toollib.
  - Fix PV datalignment for values starting prior to MDA area. (2.02.45)
  - Add sparse devices: lvcreate -s --virtualoriginsize (hidden zero origin).
  - Fix minimum width of devices column in reports.
  - Add lvs origin_size field.
  - Implement lvconvert --repair for repairing partially-failed mirrors.
  - Fix vgreduce --removemissing failure exit code.
  - Fix remote metadata backup for clvmd.
  - Fix metadata backup to run after vg_commit always.
  - Fix pvs report for orphan PVs when segment attributes are requested.
  - Fix pvs -a output to not read volume groups from non-PV devices.
  - Introduce memory pools per volume group (to reduce memory for large VGs).
  - Always return exit error status when locking of volume group fails.
  - Fix mirror log convert validation question.
  - Enable use of cached metadata for pvs and pvdisplay commands.
  - Fix memory leak in mirror allocation code.
  - Save and restore the previous logging level when log level is changed.
  - Fix error message when archive initialization fails.
  - Make sure clvmd-corosync releases the lockspace when it exits.
  - Fix segfault for vgcfgrestore on VG with missing PVs.
  - Block SIGTERM & SIGINT in clvmd subthreads.
  - Detect and conditionally wipe swapspace signatures in pvcreate.
  - Fix maximal volume count check for snapshots if max_lv set for volume group.
  - Fix lvcreate to remove unused cow volume if the snapshot creation fails.
  - Fix error messages when PV uuid or pe_start reading fails.
  - Flush memory pool and fix locking in clvmd refresh and backup command.
  - Fix unlocks in clvmd-corosync. (2.02.45)
  - Fix error message when adding metadata directory to internal list fails.
  - Fix size and error message of memory allocation at backup initialization.
  - Remove old metadata backup file after renaming VG.
  - Restore log_suppress state when metadata backup file is up-to-date.
  - Export dm_tree_node_size_changed() from libdevmapper.
  - Fix segfault when getopt processes dmsetup -U, -G and -M options.
  - Add _smp_mflags to compilation and remove DESTDIR.


author: Alasdair Kergon <agk@redhat.com> - 2.02.45-1
changelog:
  - Update clusterlib and corosync dependencies.
  - Attempt proper clean up in child before executing fsadm or modprobe.
  - Do not scan devices if reporting only attributes from PV label.
  - Use pkgconfig to obtain corosync library details during configuration.
  - Fix error returns in clvmd-corosync interface to DLM.
  - Add --refresh to vgchange and vgmknodes man pages.
  - Pass --test from lvresize to fsadm as --dry-run.
  - Prevent fsadm from checking mounted filesystems.
  - No longer treats any other key as 'no' when prompting in fsadm.
  - Add --dataalignment to pvcreate to specify alignment of data area.
  - Fix unblocking of interrupts after several commands.
  - Provide da and mda locations in debug message when writing text format label.
  - Mention the restriction on file descriptors at invocation on the lvm man page.
  - Index cached vgmetadata by vgid not vgname to cope with duplicate vgnames.
  - No longer require kernel and metadata major numbers to match.
  - If kernel supports only one dm major number, use in place of any supplied.
  - Add option to /etc/sysconfig/cluster to select cluster type for clvmd.
  - Allow clvmd to start up if its lockspace already exists.
  - Separate PV label attributes which do not need parse metadata when reporting.
  - Remove external dependency on the 'cut' command from fsadm.
  - Fix pvs segfault when pv mda attributes requested for unavailable PV.
  - Add fsadm support for reszing ext4 filesysystems.
  - Change lvm2-cluster to corosync instead of cman.
  - Fix some old changelog typos in email addresses.


author: Alasdair Kergon <agk@redhat.com> - 2.02.44-1
changelog:
  - Add --nameprefixes, --unquoted, --rows to pvs, vgs, lvs man pages.
  - Fix lvresize size conversion for fsadm when block size is not 1K.
  - Fix pvs segfault when run with orphan PV and some VG fields.
  - Display a 'dev_size' of zero for missing devices in reports.
  - Add pv_mda_size to pvs and vg_mda_size to vgs.
  - Fix lvmdump /sys listing to include virtual devices directory.
  - Add "--refresh" functionality to vgchange and vgmknodes.
  - Avoid exceeding LV size when wiping device.
  - Calculate mirror log size instead of using 1 extent.
  - Ensure requested device number is available before activating with it.
  - Fix incorrect exit status from 'help <command>'.
  - Fix vgrename using UUID if there are VGs with identical names.
  - Fix segfault when invalid field given in reporting commands.
  - Use better random seed value in temp file creation.
  - Add read_urandom to read /dev/urandom. Use in uuid calculation.
  - Fix race in vgcreate that would result in second caller overwriting first.
  - Fix uninitialised lv_count in vgdisplay -c.
  - Don't skip updating pvid hash when lvmcache_info struct got swapped.
  - Fix startup race in clvmd.
  - Cope with snapshot dependencies when removing a whole VG with lvremove.
  - Make man pages and tool help text consistent using | for alternative options.
  - Add "all" field to reports expanding to all fields of report type.
  - Enforce device name length and character limitations in libdm.


author: Alasdair Kergon <agk@redhat.com> - 2.02.43-1
changelog:
  - Upstream merge of device-mapper and lvm2 source.
  - Correct prototype for --permission on lvchange and lvcreate man pages.
  - Exit with non-zero status from vgdisplay if couldn't show any requested VG.
  - libdevmapper.pc: Use simplified x.y.z version number.
  - Accept locking fallback_to_* options in the global section as documented.
  - Several fixes to lvconvert involving mirrors.
  - Avoid overwriting in-use on-disk text metadata when metadataarea fills up.
  - Generate man pages from templates and include version.
  - Fix misleading error message when there are no allocatable extents in VG.
  - Fix handling of PVs which reappeared with old metadata version.
  - Fix validation of --minor and --major in lvcreate to require -My always.
  - Allow lvremove to remove LVs from VGs with missing PVs.
  - In VG with PVs missing, by default allow activation of LVs that are complete.
  - Require --force with --removemissing in vgreduce to remove partial LVs.
  - No longer write out PARTIAL flag into metadata backups.
  - Treat new default activation/missing_stripe_filler "error" as an error target.
  - Add devices/md_chunk_alignment to lvm.conf.
  - Pass struct physical_volume to pe_align and adjust for md chunk size.
  - Avoid shuffling remaining mirror images when removing one, retaining primary.
  - Prevent resizing an LV while lvconvert is using it.
  - Avoid repeatedly wiping cache while VG_GLOBAL is held in vgscan & pvscan.
  - Fix pvresize to not allow resize if PV has two metadata areas.
  - Fix setting of volume limit count if converting to lvm1 format.
  - Fix vgconvert logical volume id metadata validation.
  - Fix lvmdump metadata gather option (-m) to work correctly.
  - Fix allocation bug in text metadata format write error path.
  - Fix vgcfgbackup to properly check filename if template is used.
  - vgremove tries to remove lv snapshot first.
  - Improve file descriptor leak detection to display likely culprit and filename.
  - Avoid looping forever in _pv_analyze_mda_raw used by pvck.
  - Change lvchange exit status to indicate if any part of the operation failed.
  - Fix pvchange and pvremove to handle PVs without mdas.
  - Fix pvchange -M1 -u to preserve existing extent locations when there's a VG.
  - Cease recognising snapshot-in-use percentages returned by early devt kernels.
  - Add backward-compatible flags field to on-disk format_text metadata.
  - libdevmapper: Only resume devices in dm_tree_preload_children if size changes.
  - libdevmapper: Extend deptree buffers so the largest possible device numbers fit.
  - libdevmapper: Underline longer report help text headings.


author: Fabio M. Di Nitto <fdinitto@redhat.cm> - 2.02.39-5
changelog:
  - Add BuildRequires on cmanlib-devel. This is required after libcman split
    from cman and cman-devel into cmanlib and cmanlib-devel.
  - Make versioned BuildRequires on cman-devel and cmanlib-devel more strict
    to guarantee to get the right version.


author: Alasdair Kergon <agk@redhat.com> - 2.02.39-3
changelog:
  - Fix up cache for PVs without mdas after consistent VG metadata is processed.
  - Update validation of safe mirror log type conversions in lvconvert.
  - Fix lvconvert to disallow snapshot and mirror combinations.
  - Fix reporting of LV fields alongside unallocated PV segments.
  - Add --unquoted and --rows to reporting tools.
  - Avoid undefined status code after _memlock commands in lvm shell.
  - Fix and improve readahead 'auto' calculation for stripe_size.
  - Fix lvchange output for -r auto setting if auto is already set.
  - Fix add_mirror_images not to dereference uninitialized log_lv upon failure.
  - Add --force to lvextend and lvresize.
  - Fix vgchange to not activate component mirror volumes directly.


author: Alasdair Kergon <agk@redhat.com> - 2.02.38-2
changelog:
  - dmsetup: Add --unquoted and --rows to 'info -c' command.
  - libdevmapper: Fix inverted no_flush debug message.


author: Alasdair Kergon <agk@redhat.com> - 2.02.38-1
changelog:
  - libdevmapper: Make dm_hash_iter safe against deletion.
  - libdevmapper: Accept a NULL pointer to dm_free silently.
  - libdevmapper: Calculate string size within dm_pool_grow_object.
  - libdevmapper: Send reporting field help text to stderr not stdout.

  - dmsetup: Add tables_loaded, readonly and suspended columns to reports.
  - dmsetup: Add --nameprefixes for new report output format FIELD=VALUE.

  - Add --nameprefixes to reporting tools for field name prefix output format.
  - Fix return values for reporting commands when run with no PVs, LVs, or VGs.
  - Add omitted unlock_vg() call when sigint_caught() during vg processing.
  - Fix free_count when reading pool metadata.
  - Fix segfault when using pvcreate on a device containing pool metadata.
  - In script-processing mode, stop if any command fails.
  - Warn if command exits with non-zero status code without a prior log_error.
  - Correct config file line numbers in messages when parsing comments.
  - Add missing deactivation after activation failure in lvcreate -Zy.
  - When removing LV symlinks, skip any where the VG name is not determined.
  - Fix vgsplit internal counting of snapshot LVs.
  - Update vgsplit to only restrict split with active LVs involved in split.
  - Fix vgsplit to only move hidden 'snapshotN' LVs when necessary.
  - Update vgsplit man page to reflect lvnames on the cmdline.
  - Update vgsplit to take "-n LogicalVolumeName" on the cmdline.
  - Fix vgsplit error paths to release vg_to lock.
  - Avoid spurious duplicate VG messages referring to VGs that are gone.
  - Drop dev_name_confirmed error message to debug level.
  - Fix setpriority error message to signed int.
  - Add assertions to trap deprecated P_ and V_ lock usage.
  - Avoid using DLM locks with LCK_CACHE type P_ lock requests.
  - Don't touch /dev in vgrename if activation is disabled.
  - Exclude VG_GLOBAL from internal concurrent VG lock counter.
  - Fix vgmerge snapshot_count when source VG contains snapshots.
  - Fix internal LV counter when a snapshot is removed.
  - Fix metadata corruption writing lvm1-formatted metadata with snapshots.
  - Fix lvconvert -m0 allocatable space check.
  - Don't attempt remote metadata backups of non-clustered VGs.
  - Improve preferred_names lvm.conf example.
  - Fix vgdisplay 'Cur LV' field to match lvdisplay output.
  - Fix lv_count report field to exclude hidden LVs.
  - Fix some pvmove error status codes.
  - Indicate whether or not VG is clustered in vgcreate log message.
  - Mention default --clustered setting in vgcreate man page.
  - Fix vgreduce to use vg_split_mdas to check sufficient mdas remain.
  - Update lvmcache VG lock state for all locking types now.
  - Fix output if overriding command_names on cmdline.
  - Add check to vg_commit() ensuring VG lock held before writing new VG metadata.
  - Add validation of LV name to pvmove -n.
  - Add some basic internal VG lock validation.
  - Fix vgsplit internal counting of snapshot LVs.
  - Update vgsplit to only restrict split with active LVs involved in split.
  - Fix vgsplit to only move hidden 'snapshotN' LVs when necessary.
  - Update vgsplit man page to reflect lvnames on the cmdline.
  - Update vgsplit to take "-n LogicalVolumeName" on the cmdline.
  - Fix vgsplit error paths to release vg_to lock.
  - Fix vgsplit locking of new VG.
  - Avoid erroneous vgsplit error message for new VG.
  - Suppress duplicate message when lvresize fails because of invalid vgname.
  - Cache VG metadata internally while VG lock is held.
  - Fix redundant lvresize message if vg doesn't exist.
  - Make clvmd-cman use a hash rather than an array for node updown info.
  - Decode numbers in clvmd debugging output.
  - Fix uninitialised mutex in clvmd if all daemons are not running at startup.
  - Add config file overrides to clvmd when it reads the active LVs list.
  - Make clvmd refresh the context correctly when lvm.conf is updated.
  - Fix another allocation bug with clvmd and large node IDs.
  - Fix uninitialised variable in clvmd that could cause odd hangs.
  - Correct command name in lvmdiskscan man page.
  - clvmd no longer crashes if it sees nodeids over 50.
  - Fix potential deadlock in clvmd thread handling.
  - Update usage message for clvmd.
  - Fix clvmd man page not to print <br> and clarified debug options.
  - Escape double quotes and backslashes in external metadata and config data.
  - Correct a function name typo in _line_append error message.
  - Fix resetting of MIRROR_IMAGE and VISIBLE_LV after removal of LV.
  - Fix remove_layer_from_lv to empty the LV before removing it.
  - Add missing no-longer-used segs_using_this_lv test to check_lv_segments.
  - Fix lvconvert detection of mirror conversion in progress.
  - Avoid automatic lvconvert polldaemon invocation when -R specified.
  - Fix 'pvs -a' to detect VGs of PVs without metadata areas.
  - Divide up internal orphan volume group by format type.
  - Fix lvresize to support /dev/mapper prefix in the LV name.
  - Fix lvresize to pass new size to fsadm when extending device.
  - Fix unfilled parameter passed to fsadm from lvresize.
  - Update fsadm to call lvresize if the partition size differs (with option -l).
  - Fix fsadm to support VG/LV names.


author: Alasdair Kergon <agk@redhat.com> - 2.02.33-9
changelog:
  - Improve internal label caching performance while locks are held.
  - Fix mirror log name construction during lvconvert.


author: Alasdair Kergon <agk@redhat.com> - 2.02.32-8
changelog:
  - Fix pvs, vgs, lvs error exit status on some error paths.
  - Fix new parameter validation in vgsplit and test mode.
  - Fix internal metadata corruption in lvchange --resync.


author: Alasdair Kergon <agk@redhat.com> - 2.02.31-7
changelog:
  - Avoid readahead error message when using default setting of lvcreate -M1.
  - Fix lvcreate --nosync not to wait for non-happening sync.
  - Add very_verbose lvconvert messages.


author: Alasdair Kergon <agk@redhat.com> - 2.02.30-6
changelog:
  - Remove static libraries and binaries and move most binaries out of /usr.
  - Fix a segfault if using pvs with --all argument.
  - Fix vgreduce PV list processing not to process every PV in the VG.
  - Reinstate VG extent size and stripe size defaults (halved).
  - Set default readahead to twice maximium stripe size.
  - Detect non-orphans without MDAs correctly.
  - Prevent pvcreate from overwriting MDA-less PVs belonging to active VGs.
  - Don't use block_on_error with mirror targets version 1.12 and above.
  - Change vgsplit -l (for unimplemented --list) into --maxlogicalvolumes.
  - Update vgsplit to accept vgcreate options when new VG is destination.
  - Update vgsplit to accept existing VG as destination.
  - Major restructuring of pvmove and lvconvert code, adding stacking support.
  - Add new convert_lv field to lvs output.
  - Permit LV segment fields with PV segment reports.
  - Extend lvconvert to use polldaemon and wait for completion of initial sync.
  - Add seg_start_pe and seg_pe_ranges to reports.
  - Add fsadm interface to filesystem resizing tools.
  - Update --uuid argument description in man pages.
  - Print warning when lvm tools are running as non-root.


author: Alasdair Kergon <agk@redhat.com> - 2.02.29-1
changelog:
  - Make clvmd backup vg metadata on remote nodes.
  - Decode cluster locking state in log message.
  - Change file locking state messages from debug to very verbose.
  - Fix --addtag to drop @ prefix from name.
  - Stop clvmd going haywire if a pre_function fails.
  - Avoid nested vg_reads when processing PVs in VGs and fix associated locking.
  - Attempt to remove incomplete LVs with lvcreate zeroing/activation problems.
  - Add full read_ahead support.
  - Add lv_read_ahead and lv_kernel_read_ahead fields to reports and lvdisplay.
  - Prevent lvconvert -s from using same LV as origin and snapshot.
  - Fix human-readable output of odd numbers of sectors.
  - Add pv_mda_free and vg_mda_free fields to reports for raw text format.
  - Add LVM2 version to 'Generated by' comment in metadata.
  - Show 'not usable' space when PV is too large for device in pvdisplay.
  - Ignore and fix up any excessive device size found in metadata.
  - Fix error message when fixing up PV size in lvm2 metadata (2.02.11).
  - Fix orphan-related locking in pvdisplay and pvs.
  - Fix missing VG unlocks in some pvchange error paths.
  - Add some missing validation of VG names.
  - Detect md superblocks version 1.0, 1.1 and 1.2.
  - Add some pv-related error paths.
  - Handle future sysfs subsystem/block/devices directory structure.
  - Fix a bug in lvm_dump.sh checks for lvm/dmsetup binaries.
  - Fix underquotations in lvm_dump.sh.
  - Print --help output to stdout, not stderr.
  - After a cmdline processing error, don't print help text but suggest --help.
  - Add %PVS extents option to lvresize, lvextend, and lvcreate.
  - Remove no-longer-correct restrictions on PV arg count with stripes/mirrors.
  - Fix strdup memory leak in str_list_dup().
  - Link with -lpthread when static SELinux libraries require that.
  - Detect command line PE values that exceed their 32-bit range.
  - Include strerror string in dev_open_flags' stat failure message.
  - Avoid error when --corelog is provided without --mirrorlog. (2.02.28)
  - Correct --mirrorlog argument name in man pages (not --log).
  - Clear MIRROR_NOTSYNCED LV flag when converting from mirror to linear.
  - Modify lvremove to prompt for removal if LV active on other cluster nodes.
  - Add '-f' to vgremove to force removal of VG even if LVs exist.


author: Alasdair Kergon <agk@redhat.com> - 2.02.28-1
changelog:
  - vgscan and pvscan now trigger clvmd -R, which should now work.
  - Fix clvmd logging so you can get lvm-level debugging out of it.
  - Allow clvmd debug to be turned on in a running daemon using clvmd -d [-C].
  - Add more cluster info to lvmdump.
  - Fix lvdisplay man page to say LV size is reported in sectors, not KB.
  - Fix loading of persistent cache if cache_dir is used.
  - Only permit --force, --verbose and --debug arguments to be repeated.
  - Add support for renaming mirrored LVs.
  - Add --mirrorlog argument to specify log type for mirrors.
  - Don't leak a file descriptor if flock or fcntl fails.
  - Detect stream write failure reliably.
  - Reduce severity of lstat error messages to very_verbose.
  - Update to use autoconf 2.61, while still supporting 2.57.


author: Alasdair Kergon <agk@redhat.com> - 2.02.27-1
changelog:
  - Add -f to vgcfgrestore to list metadata backup files.
  - Add pvdisplay --maps implementation.
  - Add devices/preferred_names config regex list for displayed device names.
  - Add vg_mda_count and pv_mda_count columns to reports.
  - Change cling alloc policy attribute character from 'C' to l'.
  - Print warnings to stderr instead of stdout.
  - Fix snapshot cow area deactivation if origin is not active.
  - Reinitialise internal lvmdiskscan variables when called repeatedly.
  - Allow keyboard interrupt during user prompts when appropriate.
  - Fix deactivation code to follow dependencies and remove symlinks.
  - Fix a segfault in device_is_usable() if a device has no table.
  - Fix creation and conversion of mirrors with tags.
  - Add command stub for pvck.
  - Handle vgsplit of an entire VG as a vgrename.
  - Fix vgsplit for lvm1 format (set and validate VG name in PVs metadata).
  - Split metadata areas in vgsplit properly.
  - Fix and clarify vgsplit error messages.
  - Update lists of attribute characters in man pages.
  - Remove unsupported LVM1 options from vgcfgrestore man page.
  - Update vgcfgrestore man page to show mandatory VG name.
  - Update vgrename man page to include UUID and be consistent with lvrename.
  - Add some more debug messages to clvmd startup.
  - Fix thread race in clvmd.
  - Make clvmd cope with quorum devices.
  - Add extra internal error checking to clvmd.
  - Fix missing lvm_shell symbol in lvm2cmd library.
  - Move regex functions into libdevmapper.
  - Add kernel and device-mapper targets versions to lvmdump.
  - Add /sys/block listings to lvmdump.
  - Make lvmdump list /dev recursively.
  - Mark /etc/lvm subdirectories as directories in spec file.


author: Alasdair Kergon <agk@redhat.com> - 2.02.24-1
changelog:
  - Add BuildRequires readline-static until makefiles get fixed.
  - Fix processing of exit status in init scripts
  - Fix vgremove to require at least one vg argument.
  - Fix reading of striped LVs in LVM1 format.
  - Flag nolocking as clustered so clvmd startup sees clustered LVs.
  - Add a few missing pieces of vgname command line validation.
  - Support the /dev/mapper prefix on most command lines.


author: Alasdair Kergon <agk@redhat.com> - 2.02.23-1
changelog:
  - Fix vgrename active LV check to ignore differing vgids.
  - Fix two more segfaults if an empty config file section encountered.
  - Fix a leak in a reporting error path.
  - Add devices/cache_dir & devices/cache_file_prefix, deprecating devices/cache.


author: Alasdair Kergon <agk@redhat.com> - 2.02.22-1
changelog:
  - Add ncurses-static BuildRequires after package split.
  - Fix loading of segment_libraries.
  - If a PV reappears after it was removed from its VG, make it an orphan.
  - Don't update metadata automatically if VGIDs don't match.
  - Fix some vgreduce --removemissing command line validation.
  - Trivial man page corrections (-b and -P).
  - Add global/units to example.conf.
  - Remove readline support from lvm.static.


author: Alasdair Kergon <agk@redhat.com> - 2.02.21-1
changelog:
  - Fix vgsplit to handle mirrors.
  - Reorder fields in reporting field definitions.
  - Fix vgs to treat args as VGs even when PV fields are displayed.
  - Fix md signature check to handle both endiannesses.


author: Alasdair Kergon <agk@redhat.com> - 2.02.20-1
changelog:
  - Fix exit statuses of reporting tools.
  - Add some missing close() and fclose() return code checks.
  - Add devices/ignore_suspended_devices to ignore suspended dm devices.
  - Fix refresh_toolcontext() always to wipe persistent device filter cache.
  - Long-lived processes write out persistent dev cache in refresh_toolcontext().
  - Streamline dm_report_field_* interface.
  - Update reporting man pages.
  - Add --clustered to man pages.
  - Add field definitions to report help text.


author: Alasdair Kergon <agk@redhat.com> - 2.02.19-1
changelog:
  - Fix a segfault if an empty config file section encountered.
  - Fix partition table processing after sparc changes.
  - Fix cmdline PE range processing segfault.
  - Move basic reporting functions into libdevmapper.


author: Alasdair Kergon <agk@redhat.com> - 2.02.18-1
changelog:
  - Use CFLAGS when linking so mixed sparc builds can supply -m64.
  - Prevent permission changes on active mirrors.
  - Print warning instead of error message if lvconvert cannot zero volume.
  - Add snapshot options to lvconvert man page.
  - dumpconfig accepts a list of configuration variables to display.
  - Change dumpconfig to use --file to redirect output to a file.
  - Avoid vgreduce error when mirror code removes the log LV.
  - Fix ambiguous vgsplit error message for split LV.
  - Fix lvextend man page typo.
  - Use no flush suspending for mirrors.
  - Fix create mirror with name longer than 22 chars.


author: Alasdair Kergon <agk@redhat.com> - 2.02.17-1
changelog:
  - Add missing pvremove error message when device doesn't exist.
  - When lvconvert allocates a mirror log, respect parallel area constraints.
  - Check for failure to allocate just the mirror log.
  - Support mirror log allocation when there is only one PV: area_count now 0.
  - Fix detection of smallest area in _alloc_parallel_area() for cling policy.
  - Add manpage entry for clvmd -T
  - Fix hang in clvmd if a pre-command failed.


author: Alasdair Kergon <agk@redhat.com> - 2.02.16-1
changelog:
  - Fix VG clustered read locks to use PR not CR.
  - Adjust some alignments for ia64/sparc.
  - Fix mirror segment removal to use temporary error segment.
  - Always compile debug logging into clvmd.
  - Add startup timeout to clvmd startup script.
  - Add -T (startup timeout) switch to clvmd.
  - Improve lvm_dump.sh robustness.


author: Alasdair Kergon <agk@redhat.com> - 2.02.12-2
changelog:
  - Remove no-longer-used ldconfig from lvm2-cluster and fix lvmconf
    to cope without the shared library.


author: Alasdair Kergon <agk@redhat.com> - 2.02.11-1.0
changelog:
  - New upstream with numerous fixes and small enhancements.
    (See the WHATS_NEW documentation file for complete upstream changelog.)


author: Alasdair Kergon <agk@redhat.com> - 2.01.08-2.0
changelog:
  - No longer abort read operations if archive/backup directories aren't there.
  - Add runtime directories and file to the package.


author: Alasdair Kergon <agk@redhat.com> - 2.01.08-1.0
changelog:
  - Improve detection of external changes affecting internal cache.
  - Add clustered VG attribute.
  - Suppress rmdir opendir error message.


author: Alasdair Kergon <agk@redhat.com> - 2.01.07-1.0
changelog:
  - Remove build directory from built-in path.
  - Extra /dev scanning required for clustered operation.


author: Alasdair Kergon <agk@redhat.com> - 2.00.24-1
changelog:
  - More upstream fixes.  (Always check WHATS_NEW file for details.)
  - Add requested BuildRequires. [bz 124916, 132408]


author: Jeremy Katz <katzj@redhat.com> - 2.00.20-2
changelog:
  - add patch for iSeries viodasd support
  - add patch to check file type using stat(2) if d_type == DT_UNKNOWN (#129674)


author: Alasdair Kergon <agk@redhat.com> 2.00.12-1
changelog:
  - Install default /etc/lvm/lvm.conf.
  - Move non-static binaries to /usr/sbin.
  - Add temporary links in /sbin to lvm.static until rc.sysinit gets updated.


author: Alasdair Kergon <agk@redhat.com> 2.00.10-1
changelog:
  - Update to version 2.00.10, which incorporates the RH-specific patches
    and includes various fixes and enhancements detailed in WHATS_NEW.


author: Jeremy Katz <katzj@redhat.com> 2.00.08-5
changelog:
  - Fix sysfs patch to find sysfs
  - Take patch from dwalsh and tweak a little for setting SELinux contexts on
    device node creation and also do it on the symlink creation.  
    Part of this should probably be pushed down to device-mapper instead


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.6.el6uek]
changelog:
  - exec: Limit arg stack to at most 75% of _STK_LIM (Kees Cook)  [Orabug: 28709994]  {CVE-2018-14634}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.5.el6uek]
changelog:
  - nsfs: mark dentry with DCACHE_RCUACCESS (Cong Wang)  [Orabug: 28576290]  {CVE-2018-5873} 
  - dm crypt: add middle-endian variant of plain64 IV (Konrad Rzeszutek Wilk)  [Orabug: 28604628]  
  - IB/ipoib: Improve filtering log message (Yuval Shaia)  [Orabug: 28655409]  
  - IB/ipoib: Fix wrong update of arp_blocked counter (Yuval Shaia)  [Orabug: 28655409]  
  - IB/ipoib: Update RX counters after ACL filtering (Yuval Shaia)  [Orabug: 28655409]  
  - IB/ipoib: Filter RX packets before adding pseudo header (Yuval Shaia)  [Orabug: 28655409]  
  - cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status (Scott Bauer)  [Orabug: 28664501]  {CVE-2018-16658} 
  - ACPICA: acpi: acpica: fix acpi operand cache leak in nseval.c (Seunghun Han)  [Orabug: 28664577]  {CVE-2017-13695} 
  - uek-rpm: Disable deprecated CONFIG_ACPI_PROCFS_POWER (Victor Erminpour)  [Orabug: 28680213]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.4.el6uek]
changelog:
  - Revert "x86/spec_ctrl: Only set SPEC_CTRL_IBRS_FIRMWARE if IBRS is actually in use" (Brian Maly)  [Orabug: 28610707]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.3.el6uek]
changelog:
  - btrfs: fix check_shared for fiemap ioctl (Lu Fengqi)  [Orabug: 24716710]  
  - x86/pti: Don't report XenPV as vulnerable (Jiri Kosina)  [Orabug: 28476681]  
  - xfs: give all workqueues rescuer threads (Chris Mason)  [Orabug: 28518694]  
  - x86/spec_ctrl: Only set SPEC_CTRL_IBRS_FIRMWARE if IBRS is actually in use (Patrick Colp)  [Orabug: 28274907]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.2.el6uek]
changelog:
  - tcp: add tcp_ooo_try_coalesce() helper (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: call tcp_drop() from tcp_data_queue_ofo() (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: avoid collapses in tcp_prune_queue() if possible (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: free batches of packets in tcp_prune_ofo_queue() (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: use an RB tree for ooo receive queue (Yaogong Wang)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: refine tcp_prune_ofo_queue() to not drop all packets (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: introduce tcp_under_memory_pressure() (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: increment sk_drops for dropped rx packets (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.1.el6uek]
changelog:
  - x86/entry/64: Ensure %ebx handling correct in xen_failsafe_callback (George Kennedy)  [Orabug: 28402927]  {CVE-2018-14678} 
  - x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (Andi Kleen)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Suggest what to do on systems with too much RAM (Vlastimil Babka)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix off-by-one error when warning that system has too much RAM (Vlastimil Babka)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Vlastimil Babka)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Exempt zeroed PTEs from inversion (Sean Christopherson)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled (Guenter Roeck)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/spectre: Add missing family 6 check to microcode check (Andi Kleen)  [Orabug: 28488808]  {CVE-2018-3620} 
  - KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled (Thomas Gleixner)  [Orabug: 28488808]  {CVE-2018-3646} 
  - x86/microcode: Allow late microcode loading with SMT disabled (Josh Poimboeuf)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/microcode: Do not upload microcode if CPUs are offline (Ashok Raj)  [Orabug: 28488808]  {CVE-2018-3620}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.18.8.el6uek]
changelog:
  - Cipso: cipso_v4_optptr enter infinite loop (yujuan.qi)  [Orabug: 28563992]  {CVE-2018-10938} 
  - Btrfs: fix list_add corruption and soft lockups in fsync (Liu Bo)  [Orabug: 28119834]  
  - x86/paravirt: Fix spectre-v2 mitigations for paravirt guests (Peter Zijlstra)  [Orabug: 28474643] {CVE-2018-15594} 
  - sym53c8xx: fix NULL pointer dereference panic in sym_int_sir() in sym_hipd.c (George Kennedy)  [Orabug: 28481893]  
  - md/raid1: Avoid raid1 resync getting stuck (Jes Sorensen)  [Orabug: 28529228]  
  - x86/spectrev2: Don't set mode to SPECTRE_V2_NONE when retpoline is available. (Boris Ostrovsky)  [Orabug: 28540376]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.18.7.el6uek]
changelog:
  - ext4: avoid deadlock when expanding inode size (Jan Kara)  [Orabug: 25718971]  
  - ext4: properly align shifted xattrs when expanding inodes (Jan Kara)  [Orabug: 25718971]  
  - ext4: fix xattr shifting when expanding inodes part 2 (Jan Kara)  [Orabug: 25718971]  
  - ext4: fix xattr shifting when expanding inodes (Jan Kara)  [Orabug: 25718971]  
  - uek-rpm: Enable perf stripped binary (Victor Erminpour)  [Orabug: 27801171]  
  - nfsd: give out fewer session slots as limit approaches (J. Bruce Fields)  [Orabug: 28023821]  
  - nfsd: increase DRC cache limit (J. Bruce Fields)  [Orabug: 28023821]  
  - uek-rpm: config-debug: Turn off torture testing by default (Knut Omang)  [Orabug: 28261886]  
  - ipmi: Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (Junichi Nomura)   
  - x86/mce/AMD: Give a name to MCA bank 3 when accessed with legacy MSRs (Yazen Ghannam)  [Orabug: 28416303]  
  - Fix up non-directory creation in SGID directories (Linus Torvalds)  [Orabug: 28459477]  {CVE-2018-13405} 
  - scsi: libsas: defer ata device eh commands to libata (Jason Yan)  [Orabug: 28459685]  {CVE-2018-10021} 
  - PCI: Allocate ATS struct during enumeration (Bjorn Helgaas)  [Orabug: 28460092]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.18.6.el6uek]
changelog:
  - qla2xxx: Update the version to 9.00.00.00.41.0-k1. (Giridhar Malavali)  [Orabug: 28172611]  
  - qla2xxx: Utilize complete local DMA buffer for DIF PI inforamtion. (Giridhar Malavali)  [Orabug: 28172611]  
  - qla2xxx: Correction to total data segment count when local DMA buffers used for DIF PI. (Giridhar Malavali)   
  - scsi: megaraid_sas: fix the wrong way to get irq number (Jianchao Wang)  [Orabug: 28436426]  
  - ALSA: seq: Make ioctls race-free (Takashi Iwai)  [Orabug: 28459728]  {CVE-2018-7566} 
  - ALSA: seq: Fix racy pool initializations (Takashi Iwai)  [Orabug: 28459728]  {CVE-2018-7566} 
  - oracleasm: Fix use after free for request processing timer (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Fix incorrectly set flag (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Fix memory leak (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Add ENXIO handling (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Add missing tracepoint (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Don't assume bip was allocated by oracleasm (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: fix asmfs_dir_operations compiler error (Tom Saeger)  [Orabug: 28506080]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.5.el6uek]
changelog:
  - inet: frag: enforce memory limits earlier (Eric Dumazet)  [Orabug: 28450977] {CVE-2018-5391} 
  - x86/mm/pageattr.c: fix page prot mask (Mihai Carabas)  [Orabug: 28492122]  
  - x86/pgtable.h: fix PMD/PUD mask (Mihai Carabas)  [Orabug: 28492122]  
  - x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Toshi Kani)  [Orabug: 28492122]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.4.el6uek]
changelog:
  - kvm/vmx: Don't mark vmx_exit() __exit (Boris Ostrovsky)  [Orabug: 28491688]  
  - x86/speculation: Don't mark cpu_no_l1tf __initconst (Boris Ostrovsky)  [Orabug: 28491688]  
  - x86/speculation: parse l1tf boot parameter early (Boris Ostrovsky)  [Orabug: 28491688]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.3.el6uek]
changelog:
  - posix-timer: Properly check sigevent->sigev_notify (Thomas Gleixner)  [Orabug: 28481412]  {CVE-2017-18344}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.2.el6uek]
changelog:
  - x86/mm/kmmio: Make the tracer robust against L1TF (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/mm/pat: Make set_memory_np() L1TF safe (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/mm/pat: Ensure cpa->pfn only contains page frame numbers (Matt Fleming)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Invert all not present mappings (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Fix SMT supported evaluation (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3620} 
  - KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (KarimAllah Ahmed)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3620} 
  - Documentation/l1tf: Remove Yonah processors from not vulnerable list (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr() (Nicolai Stange)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d (Nicolai Stange)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86: Don't include linux/irq.h from asm/hardirq.h (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush() (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond' (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush() (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paolo Bonzini)  [Orabug: 28220625]  {CVE-2018-3646} 
  - KVM: X86: Introduce kvm_get_msr_feature() (Wanpeng Li)  [Orabug: 28220674]  {CVE-2018-3646} 
  - KVM: x86: Add a framework for supporting MSR-based features (Tom Lendacky)  [Orabug: 28220674]  {CVE-2018-3646} 
  - cpu/hotplug: detect SMT disabled by BIOS (Josh Poimboeuf)  [Orabug: 28220674]  {CVE-2018-3620} 
  - Documentation/l1tf: Fix typos (Tony Luck)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content (Nicolai Stange)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Jiri Kosina)  [Orabug: 28220674]  {CVE-2018-3620} 
  - Documentation: Add section about CPU vulnerabilities (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/bugs, kvm: Introduce boot-time control of L1TF mitigations (Jiri Kosina)  [Orabug: 28220674]  {CVE-2018-3646} 
  - cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Expose SMT control init function (Jiri Kosina)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/kvm: Allow runtime control of L1D flush (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/kvm: Serialize L1D flush parameter setter (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/kvm: Add static key for flush always (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/kvm: Move l1tf setup function (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/l1tf: Handle EPT disabled state proper (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/kvm: Drop L1TF MSR list approach (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/litf: Introduce vmx status variable (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Online siblings when SMT control is turned on (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add find_msr() helper function (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add L1D flush logic (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add L1D MSR based flush (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add L1D flush algorithm (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add module argument for L1TF mitigation (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} {CVE-2018-3646} 
  - locking/static_keys: Add static_key_{en,dis}able() helpers (Peter Zijlstra)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - KVM: x86: Introducing kvm_x86_ops VM init/destroy hooks (Suravee Suthikulpanit)  [Orabug: 28220674]  {CVE-2018-3646} 
  - cpu/hotplug: Boot HT siblings at least once (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - Revert "x86/apic: Ignore secondary threads if nosmt=force" (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix up pte->pfn conversion for PAE (Michal Hocko)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect PAE swap entries against L1TF (Vlastimil Babka)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Borislav Petkov)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpufeatures: Add detection of L1D cache flush support. (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Extend 64bit swap file size limit (Vlastimil Babka)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/apic: Ignore secondary threads if nosmt=force (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/AMD: Evaluate smp_num_siblings early (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Borislav Petkov)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/intel: Evaluate smp_num_siblings early (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/topology: Provide detect_extended_topology_early() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/common: Provide detect_ht_early() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/AMD: Remove the pointless detect_ht() call (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu: Remove the pointless CPU printout (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Provide knobs to control SMT (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/topology: Add topology_max_smt_threads() (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Split do_cpu_down() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/topology: Provide topology_smt_supported() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/smp: Provide topology_is_primary_thread() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/bugs: Move the l1tf function and define pr_fmt properly (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Limit swap file size to MAX_PA/2 (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Add sysfs reporting for l1tf (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Make sure the first page is always reserved (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect swap entries against L1TF (Linus Torvalds)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Change order of offset/type in swap entry (Linus Torvalds)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/mm: Limit mmap() of /dev/mem to valid physical addresses (Craig Bergstrom)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/mm: Prevent non-MAP_FIXED mapping across DEFAULT_MAP_WINDOW border (Kirill A. Shutemov)  [Orabug: 28220674]  {CVE-2018-3620}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.18.1.el6uek]
changelog:
  - x86/speculation: Support per-process SSBD with IBRS (Alexandre Chartre)  [Orabug: 28354043]  
  - Revert "xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent" (Dongli Zhang)  [Orabug: 28441054]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.17.4.el6uek]
changelog:
  - x86/speculation: Implement per-cpu IBRS control (Alexandre Chartre)  [Orabug: 28064081]  
  - IB/mad: Use ID allocator routines to allocate agent number (Hans Westgaard Ry)  [Orabug: 28339815]  
  - x86/mcheck: Reorganize the hotplug callbacks (Sebastian Andrzej Siewior)  [Orabug: 28387566]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.17.3.el6uek]
changelog:
  - rtnetlink: fix rtnl_vfinfo_size (Sabrina Dubroca)  [Orabug: 27998927]  
  - rds: IB: avoid migration to port that is down (Zhu Yanjun)  [Orabug: 28097129]  
  - net/rds: Fix kernel panic caused by a race between setup/teardown (Hans Westgaard Ry)  [Orabug: 28326553]  
  - rds: IB: fix returned value not set error (Zhu Yanjun)  [Orabug: 28356474]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.17.2.el6uek]
changelog:
  - fs: proc: array.c: fix Speculation_Store_Bypass print format (Mihai Carabas)  [Orabug: 28128750]  
  - xfs: don't chain ioends during writepage submission (Dave Chinner)  [Orabug: 28193043]  
  - xfs: factor mapping out of xfs_do_writepage (Dave Chinner)  [Orabug: 28193043]  
  - xfs: xfs_cluster_write is redundant (Dave Chinner)  [Orabug: 28193043]  
  - xfs: Introduce writeback context for writepages (Dave Chinner)  [Orabug: 28193043]  
  - xfs: remove xfs_cancel_ioend (Dave Chinner)  [Orabug: 28193043]  
  - xfs: remove nonblocking mode from xfs_vm_writepage (Dave Chinner)  [Orabug: 28193043]  
  - rds: tcp: cancel all worker threads before shutting down socket (Sowmini Varadhan)  [Orabug: 28298156]  
  - rds: signedness bug (Dan Carpenter)  [Orabug: 28319166]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.17.1.el6uek]
changelog:
  - block: update integrity interval after queue limits change (Ritika Srivastava)  [Orabug: 27586756]  
  - dccp: check sk for closed state in dccp_sendmsg() (Alexey Kodanev)  [Orabug: 28001529]  {CVE-2017-8824} {CVE-2018-1130} 
  - net/rds: Implement ARP flushing correctly (Håkon Bugge)  [Orabug: 28219857]  
  - net/rds: Fix incorrect bigger vs. smaller IP address check (Håkon Bugge)  [Orabug: 28236599]  
  - ocfs2: Fix locking for res->tracking and dlm->tracking_list (Ashish Samant)  [Orabug: 28256391]  
  - xfrm: policy: check policy direction value (Vladis Dronov)  [Orabug: 28256487]  {CVE-2017-11600} {CVE-2017-11600}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.16.6.el6uek]
changelog:
  - add kernel param to pre-allocate NICs (Brian Maly)  [Orabug: 27870400]  
  - mm/mempolicy.c: fix error handling in set_mempolicy and mbind. (Chris Salls)  [Orabug: 28242475]  {CVE-2017-7616} 
  - xhci: Fix USB3 NULL pointer dereference at logical disconnect. (Mathias Nyman)  [Orabug: 27426023]  
  - mlx4_core: restore optimal ICM memory allocation (Eric Dumazet)  [Orabug: 27718303]  
  - mlx4_core: allocate ICM memory in page size chunks (Qing Huang)  [Orabug: 27718303]  
  - kernel/signal.c: avoid undefined behaviour in kill_something_info When running kill(72057458746458112, 0) in userspace I hit the following issue. (mridula shastry)  [Orabug: 28078687]  {CVE-2018-10124} 
  - rds: tcp: compute m_ack_seq as offset from ->write_seq (Sowmini Varadhan)  [Orabug: 28085214]  
  - ext4: fix bitmap position validation (Lukas Czerner)  [Orabug: 28167032]  
  - net/rds: Fix bug in failover_group parsing (Håkon Bugge)  [Orabug: 28198749]  
  - sctp: verify size of a new chunk in _sctp_make_chunk() (Alexey Kodanev)  [Orabug: 28240074]  {CVE-2018-5803}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.16.5.el6uek]
changelog:
  - netfilter: xt_TCPMSS: add more sanity tests on tcph->doff (Eric Dumazet)  [Orabug: 27896802]  {CVE-2017-18017} 
  - kernel/exit.c: avoid undefined behaviour when calling wait4() wait4(-2147483648, 0x20, 0, 0xdd0000) triggers: UBSAN: Undefined behaviour in kernel/exit.c:1651:9 (mridula shastry)  [Orabug: 28049778]  {CVE-2018-10087} 
  - x86/bugs/module: Provide retpoline_modules_only parameter to fail non-retpoline modules (Konrad Rzeszutek Wilk)  [Orabug: 28071992]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.16.2.el6uek]
changelog:
  - netlink: add a start callback for starting a netlink dump (Tom Herbert)  [Orabug: 27169581]  {CVE-2017-16939} 
  - ipsec: Fix aborted xfrm policy dump crash (Herbert Xu)  [Orabug: 27169581]  {CVE-2017-16939}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.16.1.el6uek]
changelog:
  - net/rds: prevent RDS connections using stale ARP entries (Wei Lin Guay)  [Orabug: 28149101]  
  - net/rds: Avoid stalled connection due to CM REQ retries (Wei Lin Guay)  [Orabug: 28068627]  
  - net/rds: use one sided reconnection during a race (Wei Lin Guay)  [Orabug: 28068627]  
  - Revert "Revert "net/rds: Revert "RDS: add reconnect retry scheme for stalled" (Håkon Bugge)  [Orabug: 28068627]  
  - xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent (Joe Jin)  [Orabug: 22910685]  
  - net/rds: Assign the correct service level (Wei Lin Guay)  [Orabug: 27607213]  
  - target: Re-add missing SCF_ACK_KREF assignment in v4.1.y (Nicholas Bellinger)  [Orabug: 27781132]  
  - target: Fix LUN_RESET active I/O handling for ACK_KREF (Nicholas Bellinger)  [Orabug: 27781132]  
  - target: Invoke release_cmd() callback without holding a spinlock (Bart Van Assche)  [Orabug: 27781132]  
  - x86/bugs: Remove the Disabling Spectre v2 mitigation retpoline (Konrad Rzeszutek Wilk)  [Orabug: 27897282]  
  - x86/bugs: Report properly retpoline+IBRS (Konrad Rzeszutek Wilk)   
  - x86/bugs: Don't lie when fallback retpoline is engaged (Konrad Rzeszutek Wilk)   
  - fs: aio: fix the increment of aio-nr and counting against aio-max-nr (Mauricio Faria de Oliveira)  [Orabug: 28079082]  
  - qla2xxx: Enable buffer boundary check when DIF bundling is on. (Rajan Shanmugavelu)  [Orabug: 28130589]  
  - kernel: sys.c: missing break for prctl spec ctrl (Mihai Carabas)  [Orabug: 28144775]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.15.4.el6uek]
changelog:
  - x86/bugs/IBRS: Keep SSBD mitigation in effect if spectre_v2=ibrs is selected (Mihai Carabas)   
  - fs/pstore: update the backend parameter in pstore module (Wang Long)  [Orabug: 27994372]  
  - kvm: vmx: Reinstate support for CPUs without virtual NMI (Paolo Bonzini)  [Orabug: 28041210]  
  - dm crypt: add big-endian variant of plain64 IV (Milan Broz)  [Orabug: 28043932]  
  - x86/bugs: Rename SSBD_NO to SSB_NO (Konrad Rzeszutek Wilk)  [Orabug: 28063992]  {CVE-2018-3639} 
  - KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Tom Lendacky)  [Orabug: 28063992] [Orabug: 28069548]  {CVE-2018-3639} 
  - x86/speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/bugs: Rework spec_ctrl base and mask logic (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/bugs: Expose x86_spec_ctrl_base directly (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/bugs: Unify x86_spec_ctrl_{set_guest,restore_host} (Borislav Petkov)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/speculation: Rework speculative_store_bypass_update() (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/speculation: Add virtualized speculative store bypass disable support (Tom Lendacky)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/speculation: Handle HT correctly on AMD (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/cpufeatures: Add FEATURE_ZEN (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (Borislav Petkov)  [Orabug: 28063992]  {CVE-2018-3639}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.15.3.el6uek]
changelog:
  - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds)  [Orabug: 27947602]  {CVE-2018-1000199} 
  - Revert "perf/hwbp: Simplify the perf-hwbp code, fix documentation" (Brian Maly)  [Orabug: 27947602]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.15.2.el6uek]
changelog:
  - KVM: SVM: Move spec control call after restore of GS (Thomas Gleixner)   {CVE-2018-3639} 
  - x86/bugs: Fix the parameters alignment and missing void (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Make cpu_show_common() static (Jiri Kosina)   {CVE-2018-3639} 
  - x86/bugs: Fix __ssb_select_mitigation() return type (Jiri Kosina)   {CVE-2018-3639} 
  - Documentation/spec_ctrl: Do some minor cleanups (Borislav Petkov)   {CVE-2018-3639} 
  - proc: Use underscores for SSBD in 'status' (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Rename _RDS to _SSBD (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/speculation: Make "seccomp" the default mode for Speculative Store Bypass (Kees Cook)   {CVE-2018-3639} 
  - seccomp: Move speculation migitation control to arch code (Thomas Gleixner)   {CVE-2018-3639} 
  - seccomp: Add filter flag to opt-out of SSB mitigation (Kees Cook)   {CVE-2018-3639} 
  - seccomp: Use PR_SPEC_FORCE_DISABLE (Thomas Gleixner)   {CVE-2018-3639} 
  - prctl: Add force disable speculation (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - seccomp: Enable speculation flaw mitigations (Kees Cook)   {CVE-2018-3639} 
  - proc: Provide details on speculation flaw mitigations (Kees Cook)   {CVE-2018-3639} 
  - nospec: Allow getting/setting on non-current task (Kees Cook)   {CVE-2018-3639} 
  - x86/bugs/IBRS: Disable SSB (RDS) if IBRS is sslected for spectre_v2. (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/speculation: Add prctl for Speculative Store Bypass mitigation (Thomas Gleixner)   {CVE-2018-3639} 
  - x86: thread_info.h: move RDS from index 5 to 23 (Mihai Carabas)   {CVE-2018-3639} 
  - x86/process: Allow runtime control of Speculative Store Bypass (Thomas Gleixner)   {CVE-2018-3639} 
  - prctl: Add speculation control prctls (Thomas Gleixner)   {CVE-2018-3639} 
  - x86/speculation: Create spec-ctrl.h to avoid include hell (Thomas Gleixner)   {CVE-2018-3639} 
  - x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if requested (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Whitelist allowed SPEC_CTRL MSR values (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/intel: Set proper CPU features and setup RDS (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/cpufeatures: Add X86_FEATURE_RDS (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Expose /sys/../spec_store_bypass (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/cpu/intel: Add Knights Mill to Intel family (Piotr Luc)   {CVE-2018-3639} 
  - x86/cpu: Rename Merrifield2 to Moorefield (Andy Shevchenko)   {CVE-2018-3639} 
  - x86/bugs, KVM: Support the combination of guest and host IBRS (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/IBRS: Warn if IBRS is enabled during boot. (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/IBRS: Use variable instead of defines for enabling IBRS (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Concentrate bug reporting into a separate function (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Concentrate bug detection into a separate function (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/IBRS: Turn on IBRS in spectre_v2_select_mitigation (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/msr: Add SPEC_CTRL_IBRS.. (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - scsi: libfc: Revisit kref handling (Hannes Reinecke)   
  - scsi: libfc: reset exchange manager during LOGO handling (Hannes Reinecke)   
  - scsi: libfc: send LOGO for PLOGI failure (Hannes Reinecke)   
  - scsi: libfc: Issue PRLI after a PRLO has been received (Hannes Reinecke)   
  - libfc: Update rport reference counting (Hannes Reinecke)   
  - amd/kvm: do not intercept new MSRs for spectre v2 mitigation (Elena Ufimtseva)   
  - RDS: null pointer dereference in rds_atomic_free_op (Mohamed Ghannam)  [Orabug: 27422832]  {CVE-2018-5333} 
  - ACPI: sbshc: remove raw pointer from printk() message (Greg Kroah-Hartman)  [Orabug: 27501257]  {CVE-2018-5750} 
  - futex: Prevent overflow by strengthen input validation (Li Jinyue)  [Orabug: 27539548]  {CVE-2018-6927} 
  - net: ipv4: add support for ECMP hash policy choice (Venkat Venkatsubra)  [Orabug: 27547114]  
  - net: ipv4: Consider failed nexthops in multipath routes (David Ahern)  [Orabug: 27547114]  
  - ipv4: L3 hash-based multipath (Peter Nørlund)  [Orabug: 27547114]  
  - dm: fix race between dm_get_from_kobject() and __dm_destroy() (Hou Tao)  [Orabug: 27677556]  {CVE-2017-18203} 
  - NFS: only invalidate dentrys that are clearly invalid. (NeilBrown)  [Orabug: 27870824]  
  - net: Improve handling of failures on link and route dumps (David Ahern)  [Orabug: 27959177]  
  - mm/mempolicy: fix use after free when calling get_mempolicy (zhong jiang)  [Orabug: 27963519]  {CVE-2018-10675} 
  - drm: udl: Properly check framebuffer mmap offsets (Greg Kroah-Hartman)  [Orabug: 27963530]  {CVE-2018-8781} 
  - xfs: set format back to extents if xfs_bmap_extents_to_btree (Eric Sandeen)  [Orabug: 27963576]  {CVE-2018-10323} 
  - Revert "mlx4: change the ICM table allocations to lowest needed size" (Håkon Bugge)  [Orabug: 27980030]  
  - Bluetooth: Prevent stack info leak from the EFS element. (Ben Seri)  [Orabug: 28030514]  {CVE-2017-1000410} {CVE-2017-1000410}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.15.1.el6uek]
changelog:
  - netfilter: nfnetlink_cthelper: Add missing permission checks (Kevin Cernekee)  [Orabug: 27260771]  {CVE-2017-17448} 
  - netlink: Add netns check on taps (Kevin Cernekee)  [Orabug: 27260799]  {CVE-2017-17449} 
  - KVM: Fix stack-out-of-bounds read in write_mmio (Wanpeng Li)  [Orabug: 27290606]  {CVE-2017-17741} {CVE-2017-17741} 
  - xprtrdma: Detect unreachable NFS/RDMA servers more reliably (Chuck Lever)  [Orabug: 27587008]  
  - sunrpc: Export xprt_force_disconnect() (Chuck Lever)  [Orabug: 27587008]  
  - sunrpc: Allow xprt->ops->timer method to sleep (Chuck Lever)  [Orabug: 27587008]  
  - KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit (Haozhong Zhang)  [Orabug: 27720128]  
  - x86/microcode: probe CPU features on microcode update (Ankur Arora)  [Orabug: 27878230]  
  - x86/microcode: microcode_write() should not reference boot_cpu_data (Ankur Arora)  [Orabug: 27878230]  
  - x86/cpufeatures: use cpu_data in init_scattered_cpuid_flags() (Ankur Arora)  [Orabug: 27878230]  
  - mm/pagewalk.c: report holes in hugetlb ranges (Jann Horn)  [Orabug: 27913118]  {CVE-2017-16994} 
  - KEYS: don't let add_key() update an uninstantiated key (David Howells)  [Orabug: 27913330]  {CVE-2017-15299} 
  - drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl() (Murray McAllister)  [Orabug: 27913367]  {CVE-2017-7294} 
  - vmscan: Support multiple kswapd threads per node (Buddy Lumpkin)  [Orabug: 27913411]  
  - tcp: don't use F-RTO on non-recurring timeouts (Yuchung Cheng)  [Orabug: 27901860]  
  - net/rds: ib: Release correct number of frags (Håkon Bugge)  [Orabug: 27924161]  
  - crypto: rng - Remove old low-level rng interface (Herbert Xu)  [Orabug: 27926676]  {CVE-2017-15116} 
  - crypto: drbg - Convert to new rng interface (Herbert Xu)  [Orabug: 27926676]  {CVE-2017-15116} 
  - crypto: ansi_cprng - Convert to new rng interface (Herbert Xu)  [Orabug: 27926676]  {CVE-2017-15116} 
  - crypto: krng - Convert to new rng interface (Herbert Xu)  [Orabug: 27926676]  {CVE-2017-15116} 
  - RDS: Heap OOB write in rds_message_alloc_sgs() (Mohamed Ghannam)  [Orabug: 27934066]  {CVE-2018-5332} 
  - net: Fix double free and memory corruption in get_net_ns_by_id() (Eric W. Biederman)  [Orabug: 27934789]  {CVE-2017-15129}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.14.4.el6uek]
changelog:
  - kernel.spec: add requires system-release for OL7 (Brian Maly)  [Orabug: 27955380]  
  - x86/kernel/traps.c: fix trace_die_notifier return value (Kris Van Hees)   {CVE-2018-8897} 
  - x86/entry/64: Dont use IST entry for #BP stack (Andy Lutomirski)   {CVE-2018-8897} 
  - kvm/x86: fix icebp instruction handling (gregkh@linuxfoundation.org)   {CVE-2018-1087}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.14.3.el6uek]
changelog:
  - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds)  [Orabug: 27947602]  {CVE-2018-100199}


author: Jacob Wang <jacob.wang@oracle.com> -0.4.9.87.0.1
changelog:
  - Add ora_bug17287949-return-path_down-for-quiesced-paths.patch [orabug 17287949] (guangyu Sun)
  - Add ora_bug17220746-cleanup-dev_loss_tmo-issues [orabug 17220746] (Guangyu Sun)
  - Add ora_bug16739691-update-dev_loss_tmo.patch [orabug 16739691]
  - Add ora_bug16739691-reload-map.patch [orabug 16739691]
  - Add ora_bug16739691-no-reload-prio.patch [orabug 16739691]
  - Add ora_bug16739691-set-def-fast_io_fail.patch [orabug 16739691]
  - fix flush_on_last_del config handlers [orabug 16389355]


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.87
changelog:
  - Modify 0228-RHBZ-1072081-delayed-reintegration.patch
    * print "no" instead of "off"
  - Resolves: bz #1072081


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.86
changelog:
  - Modify 0228-RHBZ-1072081-delayed-reintegration.patch
    * Change show config output
  - Resolves: bz #1072081


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.85
changelog:
  - Modify 0228-RHBZ-1072081-delayed-reintegration.patch
    * Fix checker name printing issue
  - Resolves: bz #1072081


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.84
changelog:
  - Add 0228-RHBZ-1072081-delayed-reintegration.patch
    * Add "delay_watch_checks" and "delay_wait_checks" options to delay
      reintegration of flakey paths.
  - Add 0229-UPBZ-1168987-queue_if_no_path_issue.patch
    * Make sure no_path_retry is properly set even if there are no active paths.
  - Add 0230-RHBZ-880121-fix-double-free.patch
    * multipath was freeing the multipath alias twice if it failed to create the
      multipath device.
  - Add 0231-RHBZ-978947-dell-36xxi.patch
    * new builtin configurations.
  - Add 0232-RHBZ-997028-autodetect-clariion-alua.patch
    * configure multipath to automatically detect alua settings on clariion
      devices.
  - Resolves: bz #880121, #978947, #997028, #1072081, #1168987


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.83
changelog:
  - Add 0223-UPBZ-1120047-change-alua-prio.patch
    * Paths with the pref bit set will no longer be in pathgroups by
      themselves, if there are other paths that they could be load
      balanced with.
  - Add 0224-UPBZ-1148096-reload-on-rename.patch
    * multipath will reload a table even if it also renames the device
  - Add 0225-UPBZ-1148096-user-friendly-name-remap.patch
    * multipath will default to continue using the existing
      user_friendly_name
  - Add 0226-RHBZ-1006895-add-config_dir-option.patch
    * multipath will now also read its configuration from files with
      the .conf suffix in the directory specified by config_dir
      which defaults to /etc/multipath/conf.d
  - Add 0227-RHBZ-1171862-thread-safe.patch
    * only multipathd will keep a global cache of sysfs information
      for paths.
  - Resolves: bz #1006895, #1120047, #1148096, #1171862


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.82
changelog:
  - Add 0220-RHBZ-1128786-dont-show-pg-timeout.patch
    * remove pg_timeout from chow config
  - Add 0221-RHBZ-1175888-add-wwid-option.patch
    * add multipath option "-a". To add a device's wwid to the wwids file
  - Add 0222-RHBZ-1175888-cmdline-wwid.patch
    * make multipathd read wwids specified by the kernel commandline mpath.wwid
      option on startup.
  - Resolves: bz #1128786, #1175888


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.81
changelog:
  - Add 0219-RHBZ-1136966-fix-partition-mapping-creation-race-with-kpartx.patch
    * Only run kpartx on device activation
  - Resolves: bz #1136966


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.80
changelog:
  - Add 0218-RHBZ-1117714-configure-missing-devs.patch
    * handle externally removed devices during configuration.
  - Resolves: bz #1117714


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.79
changelog:
  - Modify 0198-RHBZ-1080052-orphan-paths-on-reload.patch
    * Fix case where pathlist wasn't getting updated properly
  - Related: bz #1080052


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.78
changelog:
  - Modify 0196-RHBZ-1012672-fix-sysdev.patch
    * remove unused function, and fix NULL ptr dereference
  - Modify 0211-UPBZ-1088013-reorder-paths-for-round-robin.patch
    * Fix some pointer errors
  - Modify 0213-RHBZ-1069641-config-error-checking.patch
    * Stop allocating extra memory in config parser.
  - Related: bz #1049637, #1069641, #1088013


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.77
changelog:
  - Add 0214-RHBZ-1078485-configurable-prio-timeout.patch
    * checker_timeout now adjusts the timeouts of the prioritizers as well.
  - Add 0215-RHBZ-1054747-add-noasync-option.patch
    * Add a new defaults option, "force_sync", that disables the async mode
      of the path checkers. This is for cases where to many parallel checkers
      hog the CPU
  - Add 0216-RHBZ-1095868-multipathd-man-typo.patch
  - Add 0217-RHBZ-1101101-add-w-options.patch
    * multipath now includes the -w and -W options. -w makes multipath remove
      a wwid from the wwids file. -W removes all of the wwids, except for the
      ones belonging to the current multipath devices, from the bindings file.
  - Resolves: bz #1078485, #1054747, #1095868, #1101101


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.76
changelog:
  - Add 0207-UPBZ-1027061-sg-read-use-buffsize.patch
    * make readsector0 checker calculate the number of blocks to read based
      on the buffer size and the block size
  - Add 0208-UPBZ-1028220-datacore-config.patch
    * Add support for DataCore Virtual Disk
  - Add 0209-RHBZ-999766-update-annotated.patch
    * update multipath.conf.annotated
  - Add 0210-UPBZ-1099932-fast-io-fail-iscsi.patch
    * and iscsi support for fast_io_fail_tmo
  - Add 0211-UPBZ-1088013-reorder-paths-for-round-robin.patch
    * make multipathd order paths for better throughput in round-robin mode
  - Add 0212-RHBZ-1086417-orphan-path-on_failed-add.patch
    * If multipathd fails to add path correctly, it now fully orphans the path
  - Add 0213-RHBZ-1069641-config-error-checking.patch
    * Improve multipath.conf error checking.
  - Resolves: bz #1027061, #1028220, #999766, #1099932, #1088013, #1086417
  - Resolves: bz #1069641


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.75
changelog:
  - Add 0196-RHBZ-1012672-fix-sysdev.patch
    * rewrite multipath sysfs device handling to fix various issues from
      bzs #1012672, #1064636, and #1049637
  - Add 0197-RHBZ-1049315-netapp-rw-change.patch
    * allow reload_rewrite to be set by device, and set it by default for
      netapp devices.
  - Add 0198-RHBZ-1080052-orphan-paths-on-reload.patch
    * make multipath orphan paths that are no longer included in the device
      when the table is reread.
  - Add 0199-RHBZ-1007719-multipath-man.patch
    * documentation update
  - Add 0200-RHBZ-1009061-allow_devt.patch
    * allow specifying paths to multipath by major:minor, instead of devname
  - Add 0201-RHBZ-1018697-cli-use-basename.patch
    * make multipathd interactive commands accept device names that start with
      /dev/
  - Add 0202-RHBZ-1024604-weighted-prio-man.patch
    * documentation update
  - Add 0203-RHBZ-1054046-mpathconf-typo.patch
    * fix command output typo
  - Add 0204-RHBZ-1067102-doc-add-selectors.patch
    * documentation update
  - Add 0205-RHBZ-1072974-alua-typo.patch
    * fix priritizer output typo
  - Add 0206-UPBZ-1020556-e-series-config.patch
    * udpate E-Series config to autodetect prio and hardware handler.
  - Resolves: bz #1049637, #1064636, #1049315, #1080052, #1007719, #1009061
  - Resolves: bz #1018697, #1024604, #1054046, #1067102, #1072974, #1020556


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.74
changelog:
  - Add 0195-UPBZ-1024103-alua-prio-timeout.patch
    * change alua prioritizer timeout from 5 minutes to one minute
  - Resolves: bz #1024103


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.73
changelog:
  - Add 0194-RHBZ-997570-no-sync-turs-on-pthread_cancel.patch
    * If async tur checker fails on threads, don't retry with the sync version
  - Resolves: bz #997570


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.72
changelog:
  - Add 0193-UPBZ-1011341-dos-4k-partition-fix.patch
    * Make kpartx correctly handle 4K sector size devices with dos partitions.
  - Resolves: bz #1011341


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.71
changelog:
  - Add 0192-RHBZ-916667-print-major-minor.patch
    * Make multipathd print major:minor on path and and remove events
  - Resolves: bz #916667


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.70
changelog:
  - Modify 0185-RH-signal-waiter.patch
    * making the waiter threads exit correctly caused a race at shutdown.
  - Resolves: bz #996921


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.69
changelog:
  - Add 0188-RH-add-all_devs.patch
    * Add new special "all_devs" devices identifier, that makes multipath
      update a the values on all devices
  - Add 0189-RHBZ-986767-blacklist-td-devs.patch
    * add td[a-z].* devices to the builtin blacklist
  - Add 0190-UPBZ-994277-handle-offline-states.patch
    * Handle "transport-offline" and "quiesce" path states
  - Add 0191-UPBZ-995251-fail-rdac-on-unavailable.patch
    * make rdac checker always mark paths with asymmetric access state of
      unavailable as down
  - Resolves: bz #986767, #994277, #995251


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.68
changelog:
  - Modify 0172-RHBZ-895110-fix-output-buffer.patch
    * free buffer
  - Modify 0182-RHBZ-947798-rw-change.patch
    * don't access multipath device if it has been freed in setup_multipath
  - Add 0187-RH-fix-bad-derefs.patch
    * Fix places where we are dereferencing freed pointers
  - Resolves: bz #947798


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.67
changelog:
  - Modify 0182-RHBZ-947798-rw-change.patch
    * Add documentation
  - Modify 0183-RHBZ-924924-replace_whitespace.patch
    * Add documentation
  - Add 0186-RHBZ-974129-delay_set_fast_io_fail.patch
    * fix issue with setting fast_io_fail_tmo past the old value of
      dev_loss_tmo
  - Resolves: bz #974129, #924924, #947798


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.66
changelog:
  - Modify 0179-RHBZ-920448-bindings-fix.patch
    * remove debug printing.
  - Add 0181-RHBZ-958091-check-for-erofs.patch
    * only retry loading a map read-only if the read/write load failed
      with EROFS
  - Add 0182-RHBZ-947798-rw-change.patch
    * add a new multipath.conf default keyword "reload_readwrite". If set
      to "yes", multipathd will listed to path device change events, and
      if they device has become read/write, it will reload the multipath
      device.
  - Add 0183-RHBZ-924924-replace_whitespace.patch
    * add a new multipath.conf default keyword "replace_wwid_whitespace".
      If set to "yes", multipath will add --replace-whitespace for devices
      That use the default getuid callout.
  - Add 0184-RHBZ-975676-fix_cli_resize.patch
    * deal with resize happening while path device is being removed.
  - Add 0185-RH-signal-waiter.patch
    * send waiter thread a signal to break out of waiting for dm events
  - Resolves: bz #958091, #947798, #924924, #975676


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.65
changelog:
  - Add 0168-RHBZ-902585-fix-state-size.patch
  - Add 0169-RHBZ-895110-fix-params-size.patch
  - Add 0170-RHBZ-889441-fix-multipath.rules.patch
    * set multipath device link_priority on change events
  - Add 0171-RHBZ-904836-handle-other-sector-sizes.patch
    * handle non-512 byte GPT sector sizes
  - Add 0172-RHBZ-895110-fix-output-buffer.patch
    * make sure to allocate enough space to print the full list of multipath
      devices
  - Add 0173-RHBZ-889429-catch-early-uevents.patch
    * start up the uevent listening thread early, but don't start up the
      uevent servicing thread until after you configure
  - Add 0174-RHBZ-875199-null-vector-fix.patch
  - Add 0175-RHBZ-889987-detect_prio_fix.patch
    * make sure you can actually get the priority with ALUA before selecting it.
  - Add 0176-RHBZ-892292-listing-speedup.patch
    * don't get the wwid when you are just listing a device.
  - Add 0177-RHBZ-902593-multipath-c-manpage.patch
  - Add 0178-RHBZ-918825-kpartx-loop-devices.patch
    * remove tmp loopdev create by 'kpartx -l' in no partitions were found.
  - Add 0179-RHBZ-920448-bindings-fix.patch
    * try to find the smallest unused user friendly name
  - Add 0180-RHBZ-928831-check-dm-version-for-retain_hwhandler.patch
    * don't use retain_attached_hw_handler on kernels that don't support it.
  - Resolves: bz #875199, #889429, #889441, #889987, #892292, #902585
  - Resolves: bz #902593, #904836, #918825, #920448, #928831


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.64
changelog:
  - Add 0167-RHBZ-735459-fix-mpathpersist-fns.patch
    * make reservation_key display correctly in "multipathd show config"
  - Resolves: bz #735459


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.63
changelog:
  - Add 0166-RHBZ-880487-make-path-fd-readonly.patch
    * revert change from 0152-RHBZ-735459-mpath_persist.patch, so that
      path fds are again opened O_RDONLY
  - Resolves: bz #880487


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.62
changelog:
  - Add 0165-RHBZ-869253-disable-libdm-failback.patch
    * multipathd and kpartx now set a flag to request device-mapper
      not create devices itself.
  - Resolves: bz #869253


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.60
changelog:
  - Add 0161-RHBZ-836890-AIX-whitespace.patch
  - Add 0162-RHBZ-860748-early-blacklist.patch
    * blacklist devices as soon as possible
  - Add 0163-RHBZ-839386-detect-prio.patch
    * add default and device configuration option detect-prio
  - Add 0164-RHBZ-839386-netapp-config.patch
  - Modify 0153-RHBZ-839386-retain_hwhandler.patch
    * cleanup minor issues
  - Resolves: bz #836890, #860748, #839386


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.59
changelog:
  - Add 0146-RHBZ-595692-fix-cciss-names.patch
    * convert cmdline cciss names to sysfs format
  - Add 0147-RHBZ-824243-826610-833124-doc-fix.patch
  - Add 0148-RHBZ-619173-storagetek-config.patch
  - Add 0149-RHBZ-810788-remove-dups.patch
    * remove duplicates from builtin configs
  - Add 0150-RHBZ-810755-update-conf-defaults.patch
  - Add 0151-RHBZ-822389-fix-rename.patch
    * make multipath switch names on reload after disabling
      user_friendly_names
  - Add 0152-RHBZ-735459-mpath_persist.patch
    * mpathpersist allows persistent reservatoins through multipath devices
  - Add 0153-RHBZ-839386-retain_hwhandler.patch
    * add retain_attached_hw_handler default and multipaths config option
  - Add 0154-RHBZ-578114-kpartx-retry.patch
    * retry on EBUSY for loop device deletes
  - Add 0155-RHBZ-810989-load-modules.patch
    * service multipathd start loads kernel modules
  - Add 0156-RHBZ-813963-new-alua-prio.patch
    * combine the "alua" and "tpg_pref" prioritizers
  - Add 0157-RHBZ-816717-flush-full-paths.patch
    * make multipath accept full pathnames in -f
  - Add 0158-RHBZ-821885-check-blacklist.patch
    * make multipath -c check the device blacklisting
  - Add 0159-RHBZ-818367-829065-rdac.patch
  - Add 0160-RHBZ-841732-dont-swap-devices.patch
  - Resolves: bz #595692, #824243, #826610, #833124, #619173, #810788, #810755
  - Resolves: bz #822389, #735459, #839386, #578114, #810989, #813963, #816717
  - Resolves: bz #821885, #818367, #829065, #841732


author: Benjmain Marzinski <bmarzins@redhat.com> -0.4.9.57
changelog:
  - Add 0145-RHBZ-831045-realloc-vector.patch
    * fix deleting items from vector, and handle error cases
  - Resolves: bz #831045


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.56
changelog:
  - Modify 0137-RHBZ-799842-change-netapp-config.patch
    * Add pg_init_retries to netapp config
  - Add 0144-RHBZ-812832-shutdown-crash.patch
    * kill waiter threads with pthread_cancel() instead of SIGUSR1
  - Resolves: bz #799842, #812832


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.55
changelog:
  - Modify 0131-RHBZ-662433-override-queue-no-daemon.patch
    * enforce queueing on condrestart as well
  - Add 0142-RHBZ-769527-fix-features-build.patch
    * remove "queue_if_no_path" feature when flushing due to
      "flush_on_last_del"
  - Add 0143-RHBZ-467709-followover-chkr-state.patch
    * Only failback if the path checker's reported state has changed
  - Resolves: bz #467709, #769527
  - Related: bz #662433


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.54
changelog:
  - Modify 0132-RHBZ-744756-regex-hw-match.patch (bz #802630)
    * Added documentation to the multipath.conf man page
  - Modify 0138-RH-fix-strings.patch (bz #810208)
  - Resolves: bz #802630, #810208


author: Benjamin Marzinski <bmarzins@redaht.com> -0.4.9.52
changelog:
  - Modify 0130-RHBZ-754586-use-sync-support.patch
    * This fix now just calls dm_task_update_nodes() after renaming the
      the devices.
  - Refresh 0110-RHBZ-725541-04-serialize-startup.patch
  - Refresh 0131-RHBZ-662433-override-queue-no-daemon.patch
  - Refresh 0135-RHBZ-798541-build-options.patch
  - Resolves: bz #805809


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.51
changelog:
  - Add 0139-RHBZ-800288-netapp-devloss.patch
    * Set fast_io_fail_tmo and dev_loss_tmo for netapp devices
  - Add 0140-RHBZ-803527-blacklist-management-luns.patch
  - Resolves: bz #800288, #803527


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.50
changelog:
  - Modify 0135-RHBZ-798541-build-options.patch
    * switch from compiling with -lpthread to -pthread, to make sure
      and use reentrant versions of functions.
  - Related: bz #798541


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.49
changelog:
  - Modify 0132-RHBZ-744756-regex-hw-match.patch
    * The regex comparison was working in the wrong direction.
  - Modify 0133-RHBZ-744210-config-changes.patch
    * add missing entries to store_hwe
  - Add 0135-RHBZ-798541-build-options.patch
    * build rpm with RPM_OPT_FLAGS
  - Add 0136-RHBZ-799908-ibm-xiv.patch
  - Add 0137-RHBZ-799842-change-netapp-config.patch
  - Add 0138-RH-fix-strings.patch
    * fix two spots where multipath wasn't checking string size before copying
  - Pass RPM_OPT_FLAGS to make
  - Resolves: bz #798541, #799842, #799908
  - Related: bz #744210, #744756


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.48
changelog:
  - Add 0124-RHBZ-751039-fix-shutdown.patch
    * make sure to test if the threads have been cancelled after locking
  - Add 0125-RHBZ-727429-dont-print-exec-fails.patch
  - Add 0126-RHBZ-740760-kpartx-man-page.patch
  - Add 0127-RHBZ-737051-add-netapp-brand.patch
  - Add 0128-RHBZ-796384-fix-alua.patch
    * gerneralize the vpd 0x83 handling
  - Add 0129-RHBZ-788963-eternus-config.patch
  - Add 0130-RHBZ-754586-use-sync-support.patch 
    * multipathd and kpartx now use udev_sync_support. They just don't
      use any cookies
  - Add 0131-RHBZ-662433-override-queue-no-daemon.patch
    * make queue_without_daemon default to off, but make service restart
      override that so, you won't fail IO on restart.
  - Add 0132-RHBZ-744756-regex-hw-match.patch
    * add hwtable_regex_match parameter, which makes the user device entries
      in multipath.conf regex with the builtin ones to override them.
  - Add 0133-RHBZ-744210-config-changes.patch
    * default max_fs to "max" and make user_friendly_names configurable in
      the devices and multipaths section.
  - Add 0134-RHBZ-769527-fix-flush-on-last-del.patch
  - Resolves: bz #662433, #727429, #737051, #740760, #744210, #744756, #751039
  - Resolves: bz #754586, #769527, #788963, #796384


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.47
changelog:
  - Readd 0107-RHBZ-725541-01-async-tur-checker.patch
  - Add 0119-RHBZ-747604-fix-async-tur.patch (BZ #760852)
    * keep a reference count on the checker context to keep from freeing it
      while its still in use.
  - Add 0120-RHBZ-752989-tighten_vendor_product_regex.patch
    * Some of the vendor and product regexes were matching incorrect devices
      because they were too broad.
  - Add 0121-RHBZ-751938-fix-usage-return.patch
    * Make -h return 0
  - Add 0122-RHBZ-750132-fix-oom-adj.patch
    * use oom_score_adj instead of oom_adj
  - Add 0123-RHBZ-732932-fix-coverity-issues.patch
    * don't leak reply if update_multipath fails.
  - Update multipath.conf (BZ #702222)
    * Add a comment reminding users to reload multipathd after editting
      their config
  - Resolves: bz #702222, #732932, #750132, #751938, #752989, #760852


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.46
changelog:
  - Remove 0107-RHBZ-725541-01-async-tur-checker.patch
    * This patch caused a regression where, multpathd could corrupt is memory
      when a path was deleted (bz747604)
  - Refresh 0110-RHBZ-725541-04-serialize-startup.patch
  -Resolves: bz #747604


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.45
changelog:
  - Add 0118-RHBZ-738298-revert-631009.patch
    * reverts most of 0101-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
      but still allows the -u option, for compatibility
  - Resolves: bz #738298


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.44
changelog:
  - Add 0116-RH-manpage-update.patch
    * update the manpages with new features
  - Add 0117-RHBZ-697386-logger-shutdown-crash.patch
    * The main multipathd thread was racing with the logger, now it
      waits for the logger thread to shutdown first.
  - Resolves: bz #697386


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.43
changelog:
  - Add 0102-RHBZ-714821-dont-remove-map-twice.patch
    * multipathd was removing a map twice in one code path, causing
      double free errors
  - Add 0103-RHBZ-725541-09-no-partitions.patch
    * if a device has the "no_partitions" feature, kpartx ignores it
  - Add 0104-RHBZ-725541-10-force-devmap.patch
    * override "no_partitions"
  - Add 0105-RHBZ-725541-08-reset-running.patch
    * abort timed-out IO in directio checker
  - Add 0106-RHBZ-725541-07-tur-checker-reservation-conflict.patch
    * don't count a path as down if it has a reservation conflict. The
      kernel should be failing these errors up past multipath now.
  - Add 0107-RHBZ-725541-01-async-tur-checker.patch
    * Make tur checker async
  - Add 0108-RHBZ-725541-06-offline-check.patch
    * Don't get the priority of offline devies.
  - Add 0109-RHBZ-725541-05-only-count-up-and-ghost-paths.patch
    * fix path counting
  - Add 0110-RHBZ-725541-04-serialize-startup.patch
    * add the "show daemon" multipathd command, so users can check
      that the daemon has started up completely.
  - Add 0111-RHBZ-725541-03-handle-LBA_DEPENDENT-state.patch
    * handle LBA_DEPENDENT alua state.
  - Add 0112-RHBZ-725541-02-infinite-dev-loss-tmo.patch
    * allow dev_loss_tmo to be set to "inifinty", which sets it to
      the maximum allowed value.
  - Add 0113-RHBZ-719571-validate-guid-partitions.patch
    * don't build partition devices for invalid gpt's.
  - Add 0114-RHBZ-723168-adjust-messages.patch
  - Add 0115-RHBZ-713754-lower-minio.patch
    * add rr_min_io_rq parmeter, that sets the min_io to 1 for
      request based multipath
  Resolves: bz #699577, #713754, #714821, #719571, #723168, #725541


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.42
changelog:
  - Add 0089-RHBZ-694602-RSSM-config.patch
  - Add 0090-RHBZ-700169-fix-nr-active.patch
    * Make sure to always count ghost paths as active
  - Add 0091-RHBZ-699577-manpage-clarification.patch
  - Add 0092-RHBZ-689504-rdac-retry.patch
    * Make the rdac checker retry up to 5 times on errors that are likely
      transient.
  - Add 0093-RHBZ-677449-dont-remove-map-on-enomem.patch
    * Don't remove a multipath device if dm_map_present fails due to lack of
      memory
  - Add 0094-RHBZ-707560-check-return-value.patch
    * Don't try to update path groups on a path priority change if the 
      multipath device has disappeared.
  - Add 0095-RHBZ-678673-no-path-groups.patch
    * Allow multipath devices with no path groups
  - Add 0096-RHBZ-683616-ioship-support.patch
    * Modify the rdac checker to work better storage in IOSHIP mode
  - Add 0097-RHBZ-697386-fix-shutdown-crash.patch
    * Add missing test for thread cancellation to the checker thread.
  - Add 0098-RHBZ-706555-dont-update-pgs-in-manual.patch
    * When failback is set to manual, do not automatically reconfigure the
      pgs when a path changes priority
  - Add 0099-RHBZ-705854-warn-on-bad-dev-loss-tmo.patch
  - Add 0100-RHBZ-710478-deprecate-uid-gid-mode.patch
    * uid, gid and mode are now controlled by udev.
  - Add 0101-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
  - Remove 0082-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
    * multipath and kpartx now have a "-u" option that forces the udev
      dm-disk rules to run.
  - Resolves: bz #694602, #700169, #689504, #677449, #707560, #678673
  - Resolves: bz #683616, #697386, #706555, #705854, #710478, #631009


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.41
changelog:
  - Add 0088-RHBZ-693524-fix-prio-segfault.patch
     * Don't reuse the the path argument as a variable in the vector
       loop.
  - Resolves: bz# 696157


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.40
changelog:
  - Add 0087-RHBZ-680480-skip-if-no-sysdev.patch
     * Don't check the path if it has no sysdev, since it is about to
       be removed.
  - Resoves: bz# 680480


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.39
changelog:
  - Add 0086-RHBZ-681144-sysfs-device-cleanup.patch
     * Make sure to remove the sysfs device from cache when the path is
       removed. Also, only search the sysfs device cache under the vecs lock
  - Resolves: bz #681144


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.38
changelog:
  - Remove 0082-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
     * This patch was causing a serious regression (677937), and resolving
       it requires changes in /etc/rc.sysinit, so I'm backing it out for
       now.
  - Resolves: bz #677937
  - Related: bz #631009


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.37
changelog:
  - Add 0085-RHBZ-645605-fix-offline-check.patch
     * Make path_offline return false if it can't deterime a paths state.
  - Rename 0080-RHBZ-622731-fix-no-config-value-segfault.patch to
           0080-RHBZ-662731-fix-no-config-value-segfault.patch
     * accidentally used the wrong bug number
  - Resolves: bz #645605, #662731


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.36
changelog:
  - Add 0084-RHBZ-644111-read-only-bindings.patch
      * Add -B multipath and multipathd option, to make the bindings file
        read-only. This is to be used by the initramfs
  - Resolves: bz #644111


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.35
changelog:
  - Add 0082-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
      * Set DM_UDEV_DISABLE_DISK_RULES_FLAG in dm_simplecmd to stop blkid from
        running on reloads
  - Add 0083-RHBZ-636213-633643-new-configs.patch
      * Autoconfigs for HP P2000 family and NEC Storage M Series arrays
  - Resolves: bz #631009, #636213, #636213


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.34
changelog:
  - Add 0081-RHBZ-623644-fix-sysfs-caching.patch
      * Remove attribute value caching, and free cached parent devices on remove
  - Resolves: bz #623644


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.33
changelog:
  - Add 0073-RHBZ-650664-clarify-error-msg.patch
      * tell users to increase max_fds, if multipath gets EMFILE trying to
        open a file.
  - Add 0074-RHBZ-602883-dont-print-change.patch
      * don't print messages for every change uevent
  - Add 0075-RHBZ-576919-log-checker-err.patch
      * add log_checker_err default config option, to control the verbosity
        of repeated checker error messages
  - Add 0076-RHBZ-599690-update-multipath-conf.patch
  - Add 0077-RHBZ-622608-nvdisk-config.patch
  - Add 0078-RHBZ-628095-config-warnings.patch
      * print warning messages for invalid config parameters
  - Add 0079-RHBZ-650797-display-iscsi-tgt-name.patch
      * get tgt name for iscsi devices
  - Add 0080-RHBZ-622731-fix-no-config-value-segfault.patch
      * check that a config option has a value before trying to get the
        strlen of the value.
  - Resolves: bz #576919, #599690, #602883, #622608, #622731, #628095, #650664
  - Resolves: bz #650797


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.32
changelog:
  - Add 0064-RHBZ-612173-fix-reverse-lookup.patch
      * don't terminate WWID at whitespace on reverse lookup.
  - Add 0065-RHBZ-635088-update-priority.patch
      * refresh all priorities when a new path comes online
  - Add 0066-RHBZ-636071-mpathconf-variable_names.patch
      * don't use DISPLAY variable name. It configs with X. Also, unset all
        the variable names, so this doesn't happen again.
  - Add 0067-RHBZ-622569-symmetrix-config.patch
  - Add 0068-RHBZ-632734-nvdisk-config.patch
  - Add 0069-RHBZ-636246-hp-open-config.patch
  - Add 0070-RHBZ-639037-hitachi-open-config.patch
  - Add 0071-RHBZ-611779-fix-whitespace-crash.patch
      * get_cmdvec wasn't setting the passed in vector to NULL, when
        there was no command.
  - Add 0072-RHBZ-651389-change-scsi-tmo-order.patch
      * Make multipath set fast_io_fail_tmo before dev_loss_tmo, so that
        you can set dev_loss_tmo above 600.
  - Resolves: bz #651389, #611779, #639037, #636246, #632734, #622569, #636071
  - Resolves: bz #635088, #612173


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.31
changelog:
  - Modify 0063-RHBZ-595719-udev_link_priority.patch
      * make link_priority only work on multipath devices and partitions.
  - Resolves: bz #595719


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.30
changelog:
  - Modify 0063-RHBZ-595719-udev_link_priority.patch
      * move link_priority line up in the udev rules. Hopefully this is the
        actual fix.
  - Resolves: bz #595719


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.29
changelog:
  - Modify 0063-RHBZ-595719-udev_link_priority.patch
      * Change link priority from 5 to 10
  - Resolves: bz #595719


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.28
changelog:
  - Add 0064-RHBZ-612173-fix-reverse-lookup.patch
     * Fix multipath's wwid bindings file reverse lookup
  - Resolves: bz #612173


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.27
changelog:
  - Add 0063-RHBZ-595719-udev_link_priority.patch
     * Increase the priority of multipath symlinks
  - Resolves: bz #595719


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.25
changelog:
  - Add 0061-RHBZ-620479-find-rport.patch
    * multipath now will correctly set the dev_loss_tmo and fast_io_fail_tmo
      for setups where a devices rport id doesn't match its target id.
  - Resolves: bz #620479


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.24
changelog:
  - Modify 0055-RHBZ-602257-update-on-show-topology.patch
    * fix patch so that multipath only syncs with the kernel, and doesn't
      update other features
  - Add 0060-RHBZ-606420-fix-remove-map.patch
    * multipathd will now only report a success for remove map when it
      actually succeeds.
  - Resolves: bz #602257, #606420


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.23
changelog:
  - Add 0055-RHBZ-602257-update-on-show-topology.patch
    * make multipathd updated state with the kernel before showing topology
  - Add 0056-RHBZ-603812-better-type-check.patch
    * only count files a path devices, if they are block devices, and are not
      device-mapper devices.
  - Add 0057-RHBZ-607869-fix-resize.patch
    * use the resize calls that don't set noflush, when you reload for size
      changes.
  - Add 0058-RHBZ-601665-assemble-features.patch
    * When multipathd reloads paths, add queue_if_no_path to the features
      based on the no_path_retry value.
  - Add 0059-RHBZ-607874-handle-offlined-paths.patch
    * get the sysfs pathinfo in multipath if necessary, and only retry
      failed ev_add_path reloads 3 times.
  - Resolves: bz #602257, #603812, #607869, #601665, #607874


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.22
changelog:
  - Modify 0034-RHBZ-579575-add-q-multipath-option.patch
    * close a pidfile file descriptor
  - Add 0051-RHBZ-596156-mpathconf-man-page.patch
    * add the mpathconf man page
  - Add 0052-RHBZ-601247-fix-path-adoption.patch
    * only verify existing paths during adoption when specified
  - Add 0053-RHBZ-596323-remember_more_wwids.patch
    * make sure that all wwids are in /etc/multipath/wwids when you run
      multipath
  - 0054-RHBZ-596319-rules-cleanup.patch
  - Resolves: bz #596156, #601247, #596323
  - Related: bz #579575


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.21
changelog:
  - Add 0044-RHBZ-591940-dont-clear-daemon.patch
    * multipathd was clearing the daemon config setting on reconfigure
  - Add 0045-RHBZ-593379-dont-add-unknown-paths.patch
    * multipathd no longer pulls paths from map loads
  - Add 0046-RHBZ-593426-move-adopt-path.patch
    * The patch 0037-RH-adopt-paths.patch was causing problems, so I moved
      the adopt paths call to where it would effect fewer codepaths.
  - Add 0047-RHBZ-591608-only-switch-pgs-once.patch
    * multipathd was telling the kernel to switch pathgroups twice when
      restoring a path.
  - Add 0048-RHBZ-592494-fix-user-configs.patch
    * User hardware configs were getting matched after default configs. Also
      configs were getting merged that weren't complete matches.
  - Add 0049-RHBZ-591644-enhance-mpathconf.patch
    * multipath now loads the config before checking if the kenel_module is
      installed, and mpathconf now can load the module and chkconfig multipathd
  - Add 0050-RHBZ-595400-fix-checker-tmo.patch
    * Multipath wasn't opening the right sysfs file to set the checker timeout.
  Resolves: bz #591940, #593379, #593426, #592494, #591644, #595400


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.20
changelog:
  - Add 0038-RHBZ-587201-IBM-SGI.patch
  - Add 0039-RHBZ-589153-manpage-update.patch
  - Add 0040-RHBZ-587695-add-checker-msg-alias.patch
    * The checker now prints the mutipathd device name with its message.
  - Add 0041-RHBZ-587695-add-rdac-message.patch
    * The rdac checker now always prints a message, and the code is cleaner.
  - Add 0042-RHBZ-590038-fix-fast-io-fail-tmo.patch
    * mutipath was trying using the wrong name to set fast_io_fail_tmo
  - Add 0043-RHBZ-590028-close-sysfs_attr_fd.patch
    * mutipathd wasn't closing the fds for sysfs attribute files that it wrote
      to.
  Resolves: bz #587201, #587695, #589153, #590028, #590038


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.19
changelog:
  - Add 0035-RHBZ-467709-add-followover.patch
    * Multipath now supports the failback option "followover". With this
      multipathd only fails back when a pathgroup first comes back online.
  - Add 0036-RH-clear-messages.patch
    * keeps the checker from printing an old message if a new one isn't set.
  - Add 0037-RH-adopt-paths.patch
    * Makes multipathd adopt paths when it updates the map.
  - Resolves: bz #467709


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.18
changelog:
  - Refresh 0030-RHBZ-558636-check-if-multipath-owns-path.patch
  - Modify 0021-RHBZ-558636-add-find-multipaths.patch
    * /etc/multipath/wwids now places the wwids inside of slashes to make
      sure that all valid wwids are supported.
  - Add 0031-RHBZ-570546-display-avg-pg-prio.patch
  - Add 0032-RHBZ-575767-ontap_prio.patc
    * change prio_netapp to prio_ontap
  - Add 0033-RHBZ-573715-eurologic-config.patch
  - Add 0034-RHBZ-579575-add-q-multipath-option.patch
    * multipath now will not set queue_if_no_path on a created or reloaded
      device unless multipathd is running.  This can be overridden by the -q
      option
  - Resolves: bz #570546, #575767, #573715, #579575


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.17
changelog:
  - Replace 0021-RHBZ-548874-add-find-multipaths.patch with
    0021-RHBZ-558636-add-find-multipaths.patch
    * Wrong bugzilla id.
  - Modify 0012-RH-udev-sync-support.patch
  - Modify 0022-RHBZ-557845-RHEL5-style-partitions.patch
    * patch 0012 didn't compiled without 0022 also applied. It now works correctly
      by itself.
  - Add 0027-RHBZ-509443-enhance-show-config.patch
    * "multipathd show config" now show all default vaules, and all defined
      device and multipath values.
  - Add 0028-RHBZ-452617-add-revision-parameter.patch
    * Adds a "revision" parameter to the devices section of multipath.conf,
      so configurations can be set by revision.
  - Add 0029-RHBZ-567219-recalculate-pgs-in-checkerloop.patch
    * When the priority changes for a device that has groups it's pathgroups
      by priority, the pathgroups are recalculated.
  - Add 0030-RHBZ-558636-check-if-multipath-owns-path.patch
    * multipath -c <devname> will check if a device has previously been assembled
      as a multipath path.  the multipath udev rules now set
      ENV{DM_MULTIPATH_DEVICE_PATH} if it has been.
  - Resolves: bz #509443, #452617, #567219, #558636


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-16
changelog:
  - Add 0025-RHBZ-508827-update-multipathd-manpage.patch
  - Add 0026-RHBZ-549636-default-path-selector.patch
    * The default path selector paramter for multipath.conf is now named
      "path_selector" like it is for the device and multipath sections.
  - Resolves: bz #508827, #549636


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-15
changelog:
  - Replace 0012-RH-explicitly-disable-dm-udev-sync-support-in-kpartx.patch with
    0012-RH-udev-sync-support.patch
    * Make kpartx and multipathd work with the udev sync cookies.
  - Refresh 0013-RH-add-weighted_prio-prioritizer.patch
  - Modify 0021-RHBZ-548874-add-find-multipaths.patch
    * fix a bug where mpathconf couldn't create a new multipath.conf file if one didn't
      already exist.
  - Modify 0022-RHBZ-557845-RHEL5-style-partitions.patch
    * kpartx now creates 2 sector large devices for dos extended partitions, just
      like the partitions the kernel creates.
  - Add 0023-RHBZ-557810-emc-invista-config.patch
  - Add 0024-RHBZ-565933-checker-timeout.patch
    * All the checker functions that have explicit timeouts will now use
      /sys/block/sd<x>/device/timeout unless checker_timeout is set in multipath.conf
      If so, they will use that value instead.
  - Resolves: bz #557810, #565933
  - Related: bz #558636


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-14
changelog:
  - Add 0022-RHBZ-557845-RHEL5-style-partitions.patch
    * Make kpartx deal with logical partitions like it did in RHEL5.
      Don't create a dm-device for the extended partition itself.
      Create the logical partitions on top of the dm-device for the whole disk.
  - Modify 0010-RH-multipath-rules-udev-changes.patch
    * Fix udev rules to use DM_SBIN_PATH when calling kpartx
    * install udev rules to /lib/udev/rules.d instead of /etc/udev/rules.d
  - Refresh 0021-RHBZ-548874-add-find-multipaths.patch
  - Resolves: bz #557845


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-13
changelog:
  - Refresh 0001-RH-queue-without-daemon.patch
  - Refresh 0002-RH-path-checker.patch
  - Modify 0010-RH-multipath-rules-udev-changes.patch
    * Modify udev rules as per Peter Jones' request.
  - Modify 0014-RH-add-hp_tur-checker.patch
  - Add 0003-for-upstream-default-configs.patch
  - Add 0016-RHBZ-554561-fix-init-error-msg.patch
  - Add 0017-RHBZ-554592-man-page-note.patch
  - Add 0018-RHBZ-554596-SUN-6540-config.patch
  - Add 0019-RHBZ-554598-fix-multipath-locking.patch
  - Add 0020-RHBZ-554605-fix-manual-failover.patch
  - Add 0021-RHBZ-548874-add-find-multipaths.patch
    * Added find_multipaths multipath.conf option
    * Added /sbin/mpathconf for simple editting of multipath.conf
  - Resolves: bz #548874, #554561, #554592, #554596, #554598, #554605


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-12
changelog:
  - Remove requirement on device-mapper with udev sync support, since
    the multipath udev rules can still work without it.
  - Resolves: bz #548106


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-11
changelog:
  - Add 0002-for-upstream-add-tmo-config-options.patch
    * Add fail_io_fail_tmo and dev_loss_tmo multipath.conf options
  - Add 0013-RH-add-weighted_prio-prioritizer.patch
  - Add 0014-RH-add-hp_tur-checker.patch
  - Add 0015-RH-add-multipathd-count-paths-cmd.patch
  - rename multipath.conf.redhat to multipath.conf, and remove the default
    blacklist.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-10
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-091027.tar.gz
    (git commit id: a946bd4e2a529e5fba9c9547d03d3f91806618a3)
  - Drop unrequired for-upstream patches.
  - BuildRequires and Requires new device-mapper version for udev sync support.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-8
changelog:
  - Split patches in "for-upstream" and "RH" series.
  - Replace 0011-RH-multipathd-blacklist-all-by-default.patch with
    version from Benjamin Marzinski.
  - Update udev rules 0010-RH-multipath-rules-udev-changes.patch.
  - rpmlint cleanup:
    * Drop useless-provides kpartx.
    * Cleanup tab vs spaces usage.
    * Summary not capitalized.
    * Missing docs in libs package.
    * Fix init script LSB headers.
  - Drop README* files from doc sections (they are empty).


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-7
changelog:
  - Add patch 0010-RH-Set-friendly-defaults.patch:
    * set rcdir to fedora default.
    * do not install kpartx udev bits.
    * install redhat init script.
    * Cleanup spec file install target.
  - Add patch 0011-RH-multipathd-blacklist-all-by-default.patch:
    * Fix BZ#528059
    * Stop installing default config in /etc and move it to the doc dir.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-6
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-091013.tar.gz
    (git commit id: aa0a885e1f19359c41b63151bfcface38ccca176)
  - Drop, now upstream, patches:
    * fix_missed_uevs.patch.
    * log_all_messages.patch.
    * uninstall.patch.
    * select_lib.patch.
    * directio_message_cleanup.patch.
    * stop_warnings.patch.
  - Drop redhatification.patch in favour of spec file hacks.
  - Drop mpath_wait.patch: no longer required.
  - Merge multipath_rules.patch and udev_change.patch.
  - Rename all patches based on source.
  - Add patch 0009-RH-fix-hp-sw-hardware-table-entries.patch to fix
    default entry for hp_sw and match current kernel.
  - Add multipath.conf.redhat as source instead of patch.
  - spec file:
    * divide runtime and build/setup bits.
    * update BuildRoot.
    * update install section to apply all the little hacks here and there,
      in favour of patches against upstream.
    * move ldconfig invokation to libs package where it belong.
    * fix libs package directory ownership and files.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.4.9-5
changelog:
  - Fixed problem where maps were being added and then removed.
  - Changed the udev rules to fix some issues.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.4.9-3
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-090729.tgz
    (git commit id: d678c139719d5631194b50e49f16ca97162ecd0f)
  - moved multipath bindings file from /var/lib/multipath to /etc/multipath
  - Fixed 354961, 432520


author: Mike Snitzer <snitzer@redhat.com> - 0.4.9-1
changelog:
  - Updated to latest upstream 0.4.9 code: multipath-tools-090429.tgz
    (git commit id: 7395bcda3a218df2eab1617df54628af0dc3456e)
  - split the multipath libs out to a device-mapper-multipath-libs package
  - if appropriate, install multipath libs in /lib64 and /lib64/multipath


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-7
changelog:
  - Since libaio is now in /lib, not /usr/lib, multipath no longer needs to
    statically link against it. Fixed an error with binding file and WWIDs
    that include spaces. Cleaned up the messages from the directio checker
    function.  Fixed the udev rules. Fixed a regression in multipath.conf
    parsing
  - Fixed 457530, 457589


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-6
changelog:
  - Updated to latest upstream 0.4.8 code: multipath-tools-080804.tgz
    (git commit id: eb87cbd0df8adf61d1c74c025f7326d833350f78)
  - fixed 451817, 456397 (scsi_id_change.patch), 457530 (config_space_fix.patch)
    457589 (static_libaio.patch)


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-1
changelog:
  - Updated to latest Upstream 0.4.8 code: multipath-tools-080519.tgz
    (git commit id: 42704728855376d2f7da2de1967d7bc71bc54a2f)


author: Peter Jones <pjones@redhat.com> - 0.4.7-4.1
changelog:
  - Split kpartx out into its own package so dmraid can use it without
    installing multipathd
  - Fix a segfault in kpartx


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.21.1.el6uek]
changelog:
  - hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:447! (Mike Kravetz)  [Orabug: 28839992]  
  - scsi: libsas: fix memory leak in sas_smp_get_phy_events() (Jason Yan)  [Orabug: 27927687]  {CVE-2018-7757} 
  - KVM: vmx: shadow more fields that are read/written on every vmexits (Paolo Bonzini)  [Orabug: 28581045]  
  - vhost/scsi: Use common handling code in request queue handler (Bijan Mottahedeh)  [Orabug: 28775573]  
  - vhost/scsi: Extract common handling code from control queue handler (Bijan Mottahedeh)  [Orabug: 28775573]  
  - vhost/scsi: Respond to control queue operations (Bijan Mottahedeh)  [Orabug: 28775573]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.8.el6uek]
changelog:
  - scsi: lpfc: devloss timeout race condition caused null pointer reference (James Smart)  [Orabug: 27994179]  
  - scsi: qla2xxx: Fix race condition between iocb timeout and initialisation (Ben Hutchings)  [Orabug: 28013813]  
  - i40e: Add programming descriptors to cleaned_count (Alexander Duyck)  [Orabug: 28228724]  
  - i40e: Fix memory leak related filter programming status (Alexander Duyck)  [Orabug: 28228724]  
  - xen-swiotlb: use actually allocated size on check physical continuous (Joe Jin)  [Orabug: 28258102]  
  - Revert "Revert "xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent"" (Dongli Zhang)  [Orabug: 28258102]  
  - net/mlx4_en: fix potential use-after-free with dma_unmap_page (Sarah Newman)  [Orabug: 28376051]  
  - ocfs2: fix ocfs2 read block panic (Junxiao Bi)  [Orabug: 28580543]  
  - block: fix bdi vs gendisk lifetime mismatch (Dan Williams)  [Orabug: 28645416]  
  - e1000e: Fix link check race condition (Benjamin Poirier)  [Orabug: 28716958]  
  - Revert "e1000e: Separate signaling for link check/link up" (Benjamin Poirier)  [Orabug: 28716958]  
  - e1000e: Avoid missed interrupts following ICR read (Benjamin Poirier)  [Orabug: 28716958]  
  - e1000e: Fix queue interrupt re-raising in Other interrupt (Benjamin Poirier)  [Orabug: 28716958]  
  - Partial revert "e1000e: Avoid receiver overrun interrupt bursts" (Benjamin Poirier)  [Orabug: 28716958]  
  - e1000e: Remove Other from EIAC (Benjamin Poirier)  [Orabug: 28716958]  
  - Fix error code in nfs_lookup_verify_inode() (Lance Shelton)  [Orabug: 28789030]  
  - workqueue: Allow modifying low level unbound workqueue cpumask (Lai Jiangshan)  [Orabug: 28813166]  
  - workqueue: Create low-level unbound workqueues cpumask (Frederic Weisbecker)  [Orabug: 28813166]  
  - scsi: sg: mitigate read/write abuse (Jann Horn)  [Orabug: 28824718]  {CVE-2017-13168}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.7.el6uek]
changelog:
  - Revert "rds: RDS (tcp) hangs on sendto() to unresponding address" (Brian Maly)  [Orabug: 28837953]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.6.el6uek]
changelog:
  - x86/speculation: Retpoline should always be available on Skylake (Alexandre Chartre)  [Orabug: 28801831]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.5.el6uek]
changelog:
  - x86/speculation: Add sysfs entry to enable/disable retpoline (Alexandre Chartre)  [Orabug: 28607548]  
  - x86/speculation: Switch to IBRS when loading a non-retpoline module (Alexandre Chartre)  [Orabug: 28607548]  
  - x86/speculation: Remove unnecessary retpoline alternatives (Alexandre Chartre)  [Orabug: 28607548]  
  - x86/speculation: Use static key to enable/disable retpoline (Alexandre Chartre)  [Orabug: 28607548]  
  - locking/static_keys: Provide DECLARE and well as DEFINE macros (Tony Luck)  [Orabug: 28607548]  
  - jump_label: remove bug.h, atomic.h dependencies for HAVE_JUMP_LABEL (Jason Baron)  [Orabug: 28607548]  
  - locking/static_key: Fix concurrent static_key_slow_inc() (Paolo Bonzini)  [Orabug: 28607548]  
  - jump_label: make static_key_enabled() work on static_key_true/false types too (Tejun Heo)  [Orabug: 28607548]  
  - locking/static_keys: Fix up the static keys documentation (Jonathan Corbet)  [Orabug: 28607548]  
  - locking/static_keys: Fix a silly typo (Jonathan Corbet)  [Orabug: 28607548]  
  - jump label, locking/static_keys: Update docs (Jason Baron)  [Orabug: 28607548]  
  - x86/asm: Add asm macros for static keys/jump labels (Andy Lutomirski)  [Orabug: 28607548]  
  - x86/asm: Error out if asm/jump_label.h is included inappropriately (Andy Lutomirski)  [Orabug: 28607548]  
  - jump_label/x86: Work around asm build bug on older/backported GCCs (Peter Zijlstra)  [Orabug: 28607548]  
  - locking/static_keys: Add a new static_key interface (Peter Zijlstra)  [Orabug: 28607548]  
  - locking/static_keys: Rework update logic (Peter Zijlstra)  [Orabug: 28607548]  
  - jump_label: Add jump_entry_key() helper (Peter Zijlstra)  [Orabug: 28607548]  
  - jump_label, locking/static_keys: Rename JUMP_LABEL_TYPE_* and related helpers to the static_key* pattern (Peter Zijlstra)  [Orabug: 28607548]  
  - jump_label: Rename JUMP_LABEL_{EN,DIS}ABLE to JUMP_LABEL_{JMP,NOP} (Peter Zijlstra)  [Orabug: 28607548]  
  - module, jump_label: Fix module locking (Peter Zijlstra)  [Orabug: 28607548]  
  - x86/speculation: Protect against userspace-userspace spectreRSB (Jiri Kosina)  [Orabug: 28631590]  {CVE-2018-15572} 
  - x86/spectre_v2: Remove remaining references to lfence mitigation (Alejandro Jimenez)  [Orabug: 28631590]  {CVE-2018-15572} 
  - Revert "md: allow a partially recovered device to be hot-added to an array." (NeilBrown)  [Orabug: 28702623]  
  - x86/bugs: ssbd_ibrs_selected called prematurely (Daniel Jordan)  [Orabug: 28788839]  
  - net/mlx4_core: print firmware version during driver loading (Qing Huang)  [Orabug: 28809377]  
  - mm: numa: Do not trap faults on shared data section pages. (Henry Willard)  [Orabug: 28814880]  
  - hugetlbfs: dirty pages as they are added to pagecache (Mike Kravetz)  [Orabug: 28813968]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.4.el6uek]
changelog:
  - rds: RDS (tcp) hangs on sendto() to unresponding address (Ka-Cheong Poon)  [Orabug: 28762608]  
  - nfs: fix a deadlock in nfs client initialization (Scott Mayhew)  [Orabug: 28486463]  
  - infiniband: fix a possible use-after-free bug (Cong Wang)  [Orabug: 28774517]  {CVE-2018-14734}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.3.el6uek]
changelog:
  - x86/bugs/IBRS: properly use the _base ops if IBRS is currently unset (Zhenzhong Duan)  [Orabug: 28782729]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.2.el6uek]
changelog:
  - hugetlbfs: check for reserve page count going negative (Mike Kravetz)  [Orabug: 28734496]  
  - hugetlbfs: introduce truncation/fault mutex to avoid races (Mike Kravetz)  [Orabug: 28734496]  
  - mm/hugetlb.c: don't call region_abort if region_chg fails (Mike Kravetz)  [Orabug: 28734496]  
  - mm: hugetlb: fix hugepage memory leak caused by wrong reserve count (Naoya Horiguchi)  [Orabug: 28734496]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.1.el6uek]
changelog:
  - bnxt_en: xdp: don't make drivers report attachment mode (partial backport) (Somasundaram Krishnasamy)  [Orabug: 27988326]  
  - bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (Nikita V. Shirokov)  [Orabug: 27988326]  
  - bnxt_en: add meta pointer for direct access (partial backport) (Somasundaram Krishnasamy)  [Orabug: 27988326]  
  - bnxt_en: Fix bug in ethtool -L. (Michael Chan)  [Orabug: 27988326]  
  - bpf: bnxt: Report bpf_prog ID during XDP_QUERY_PROG (Martin KaFai Lau)  [Orabug: 27988326]  
  - bnxt_en: Optimize doorbell write operations for newer chips (reapply). (Michael Chan)  [Orabug: 27988326]  
  - bnxt_en: Use short TX BDs for the XDP TX ring. (Michael Chan)  [Orabug: 27988326]  
  - bnxt_en: Add ethtool mac loopback self test (reapply). (Michael Chan)  [Orabug: 27988326]  
  - bnxt_en: Add support for XDP_TX action. (Michael Chan)  [Orabug: 27988326]  
  - bnxt_en: Add basic XDP support. (Michael Chan)  [Orabug: 27988326]  
  - x86/ia32: Restore r8 correctly in 32bit SYSCALL instruction entry. (Gayatri Vasudevan)  [Orabug: 28529706]  
  - net: enable RPS on vlan devices (Shannon Nelson)  [Orabug: 28645929]  
  - xen-blkback: hold write vbd-lock while swapping the vbd (Ankur Arora)  [Orabug: 28651655]  
  - xen-blkback: implement swapping of active vbd (Ankur Arora)  [Orabug: 28651655]  
  - xen-blkback: emit active physical device to xenstore (Ankur Arora)  [Orabug: 28651655]  
  - xen-blkback: refactor backend_changed() (Ankur Arora)  [Orabug: 28651655]  
  - xen-blkback: pull out blkif grant features from vbd (Ankur Arora)  [Orabug: 28651655]  
  - mm: get rid of vmacache_flush_all() entirely (Linus Torvalds)  [Orabug: 28701016]  {CVE-2018-17182}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.9.el6uek]
changelog:
  - rds: crash at rds_ib_inc_copy_to_user+104 due to NULL ptr reference (Venkat Venkatsubra)  [Orabug: 28506569]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.8.el6uek]
changelog:
  - IB/core: For multicast functions, verify that LIDs are multicast LIDs (Michael J. Ruhl)  [Orabug: 28700490]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.19.7.el6uek]
changelog:
  - sunrpc: increase UNX_MAXNODENAME from 32 to __NEW_UTS_LEN bytes (Jeff Layton)  [Orabug: 28660177]  
  - net: rds: Use address family to designate IPv4 or IPv6 addresses (Håkon Bugge)  [Orabug: 28720071]  
  - net: rds: Fix blank at eol in af_rds.c (Håkon Bugge)  [Orabug: 28720071]


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0-4
changelog:
  - Import to RHEL 6.9
  - Increment the release so it will replace the respective EPEL build
  Resolves: rhbz#1422977


author: Than Ngo <than@redhat.com> - 1:4.6.2-26
changelog:
  - Resolves: CVE-2013-0254, QSharedMemory class created shared memory segments with insecure permissions


author: Than Ngo <than@redhat.com> - 1:4.6.2-25
changelog:
  - Resolves: bz#847866, QTabletEvent issue with multiple wacom devices
  - Resolves: bz#678604, Wrong Cursor when widget become native on X11


author: Than Ngo <than@redhat.com> - 1:4.6.2-19
changelog:
  - Resolves: rhbz#679759, missing executable bit in qt-examples binaries
  - Resolves: rhbz#716694, move macros.qt4 to -devel
  - Resolves: rhbz#680088, rpmdiff failure


author: Than Ngo <than@redhat.com> - 4.6.2-15
changelog:
  - Resolves: bz#589165
     fix multiple flaws in webkit
     CVE-2010-0047, CVE-2010-0648, CVE-2010-0656


author: Than Ngo <than@redhat.com> - 4.6.2-9
changelog:
  - Resolves: bz#575248, rebase to 4.6.2
  - fix build issue in webkit on s390x
  - fix a crash when reparenting an item in QGraphicsView, QTBUG-6932


author: Jaroslav Reznik <jreznik@redhat.com> - 4.6.2-8
changelog:
  - WebKit security update:
    CVE-2010-0046, CVE-2010-0049, CVE-2010-0050, CVE-2010-0051,
    CVE-2010-0052, CVE-2010-0054


author: Rex Dieter <rdieter@fedoraproject.org> - 4.6.0-4
changelog:
  - Fix crash when QGraphicsItem destructor deletes other QGraphicsItem (kde-qt cec34b01)
  - Fix a crash in KDE/Plasma with QGraphicsView. TopLevel list of items (kde-qt 63839f0c)


author: Than Ngo <than@redhat.com> - 4.6.0-0.2.beta1
changelog:
  - subpackage sqlite plugin, add Require on qt-sqlite in qt-x11
    for assistant
  - build/install qdoc3 again


author: Than Ngo <than@redhat.com> - 4.5.3-2
changelog:
  - cleanup patches
  - if ! phonon_internal, exclude more/all phonon headers
  - qt-devel must Requires: phonon-devel (#520323)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.2-20
changelog:
  - use internal Qt Assistant/Designer icons
  - -devel: move designer.qch,linguist.qch here
  - move ownership of %_qt4_docdir, %_qt4_docdir/qch to main pkg


author: Rex Dieter <rdieter@fedoraproject.org> 4.5.2-12
changelog:
  - use platform linux-g++ everywhere (ie, drop linux-g++-64 on 64 bit),
    avoids plugin/linker weirdness (bug #478481)


author: Rex Dieter <rdieter@fedoraproject.org> 4.5.2-6
changelog:
  - use linker scripts for _debug targets (#510246)
  - tighten deps using %{?_isa}
  - -x11: Requires(post,postun): /sbin/ldconfig


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.5.2-2
changelog:
  - take current qt-copy-patches snapshot (20090626)
  - disable patches which are already in 4.5.2
  - fix the qt-copy patch 0274-shm-native-image-fix.diff to apply against 4.5.2


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.1-8
changelog:
  - fix invalid assumptions about mysql_config --libs (bug #440673)
  - fix %files breakage from 4.5.1-5


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.1-4
changelog:
  - qt-doc noarch
  - qt-demos, qt-examples (split from -doc)
  - (cosmetic) re-order subpkgs in alphabetical order
  - drop unused profile.d bits


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.0-7
changelog:
  - include more phonon bits, attempt to fix/provide phonon bindings
    for qtscriptgenerator, PyQt, ...


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.0-2
changelog:
  - License: LGPLv2 with exceptions or GPLv3 with exceptions
  - BR: gstreamer-devel
  - drop qgtkstyle patch (no longer needed)
  - -x11: move libQtScriptTools here (linked with libQtGui)


author: Rex Dieter <rdieter@fedoraproject.org> 4.5.0-0.5.rc1
changelog:
  - revert license, change won't land until official 4.5.0 release
  - workaround broken qhostaddress.h (#485677)
  - Provides: qgtkstyle = 0.1


author: Rex Dieter <rdieter@fedoraproject.org> 4.5.0-0.4.rc1
changelog:
  - saner versioned Obsoletes
  - -gtkstyle, Obsoletes: qgtkstyle < 0.1
  - enable phonon support and associated hackery


author: Rex Dieter <rdieter@fedoraproject.org> - 4.4.3-10
changelog:
  - drop qt-x11-opensource-src-4.3.4-no-hardcoded-font-aliases.patch (#447298),
    in favor of qt-copy's 0263-fix-fontconfig-handling.diff


author: Than Ngo <than@redhat.com> 4.4.3-2
changelog:
  - bz#468814, immodule selection behavior is unpredictable without QT_IM_MODULE,
    patch from Peng Wu
  - backport fix from 4.5


author: Rex Dieter <rdieter@fedoraproject.org> 4.4.0-6
changelog:
  - qt-copy-patches-20080606
  - drop BR: libungif-devel (not used)
  - move libQtXmlPatters, -x11 -> main
  - move qdbuscpp2xml, qdbusxml2cpp, xmlpatters, -x11 -> -devel


author: Rex Dieter <rdieter@fedoraproject.org> 4.4.0-0.6.rc1
changelog:
  - -webkit (include in -x11 subpkg), drop separate -webkit-devel
  - omit qt4-wrapper.sh deps (since it's not used atm)
  - qt-copy-patches-20080429
  - Obsoletes/Provides: WebKit-qt(-devel) <|= 1.0.0-1  (#442200)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.4.0-0.4.rc1
changelog:
  - updated patch for #437440 ([as-IN] Consonant combination issue) by Pravin Satpute
  - port the patch to Qt 4.4 (the code moved to harfbuzz) and reenable it


author: Rex Dieter <rdieter@fedoraproject.org> 4.4.0-0.3.rc1
changelog:
  - qt-4.4.0-rc1
  - -xmlpatterns (and drop -no-exceptions)
  - -reduce-relocations, -dbus-linked, -openssl-linked
  - -no-nas
  - -no-phonon (-no-gstreamer), -no-webkit (for now, at least until
    conflicts with WebKit-qt and kdelibs4 are sorted out)
  - %_qt4_bindir -> %_bindir, avoid qt4-wrapper hackage (#277581, #422291)
  - qtconfig.desktop: NoDisplay=true (#244879)


author: Rex Dieter <rdieter@fedoraproject.org> 4.3.3-8
changelog:
  - qt-copy patches 20080219
  - drop -optimized-qmake, for now, to avoid qmake segfaults (gcc43 issue?)


author: Rex Dieter <rdieter@fedoraproject.org> 4.3.3-6
changelog:
  - qt-copy 20080130 patch set (helps address previous 0180-window-role BIC)
  - Trolltech.conf: (default) fontsize=10
  - License: GPLv2 with exceptions or QPL


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.3.2-1
changelog:
  - qt-4.3.2
  - (re)fix ppc64 segfaults, ppc64 fix upstreamed (previous patch was 
    inadvertantly not applied) (#246324)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.3.1-7
changelog:
  - include qt4-logo icon, used by qtdemo/qtconfig (#241452)
  - linguist.desktop: use new linguist4 icons
  - -devel,-x11: %post/%postun scriptlets (icons, mimetypes)


author: Than Ngo <than@redhat.com> - 4.3.1-4
changelog:
  - fixed bz241452, add qtdemo/qtconfig icons
  - fixed bz249242, designer4 - segmentation fault on s390x


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.3.1-2
changelog:
  - License: GPLv2 (see also GPL_EXCEPTIONS*.txt)
  - omit needless %check
  - (re)add package review comment/reference


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.3.0-9
changelog:
  - multilib broken: qconfig.h (#248768)
  - +%_qt4_demosdir,%_qt4_examplesdir
  - + Qt.pc, provide pkgconfig access to qt4 macros/variables


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.3.0-7
changelog:
  - prepare for possible rename qt4 -> qt (+Provides: qt4)
  - make _qt4_* macro usage consistent (with %check's)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.3.0-0.3.snapshot20070423
changelog:
  - update to qt-4.3.0-snapshot-20070423
  - build with SSL support (BR openssl-devel)
  - drop upstreamed mysql_config.patch


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.2.3-8
changelog:
  - QFileDialog file wrapping patch (qt#153635, rh#236908)
  - License: GPL, dropping LICENSE.QPL (#237702)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.2.3-1
changelog:
  - qt-4.2.3
  - multilib: move all arch-specific mkspecs bits to %qt4_prefix/mkspecs (#223663)
  - +%_sysconfdir/rpm/macros.qt4
  - +%config %qt4_sysconfdir/Trolltech.conf


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.2.2-7
changelog:
  - fixup qconfig-multilib.h for powerpc/powerpc64 (#223663)
  - include qt-copy's 0154-qdbuscpp2xml-moc_path.diff (#230875)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 4.2.2-5
changelog:
  - fixup qconfig-multilib.h (#223663)
  - qt4.(sh|csh): define QMAKESPEC (#223663)
  - null'ify QMAKE_LIBDIR_QT, leave QMAKE_INCDIR_QT alone for now. (#230224)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.2.0-0.9.20060927
changelog:
  - update to qt-4.2.0-snapshot-20060927
  - update QDBus executable names
  - -x11: exclude plugins/designer (which belong to -devel)
  - BuildConflicts: qt4-devel
  - drop -fno-strict-aliasing hack (fc5+)


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.2.0-0.6.20060821
changelog:
  - update to 4.2.0-snapshot-20060821 (same as today's qt-copy)
  - -no-separate-debug-info
  - - ./configure -xfixes, BR: libXfixes-devel


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.2.0-0.2.tp1
changelog:
  - -system-nas-sound, BR: nas-devel (bug # 197937)
  - -qdbus (fc6+, BR: dbus-devel >= 0.62)
  - -glib (BR: glib2-devel)


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.4-3
changelog:
  - -debug: drop, adds nothing over -debuginfo, make lib..._debug 
    symlinks instead (bug #196513)
  - assistant.desktop: fix tooltip (bug #197039)


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.4-2
changelog:
  - -devel: include -debug libs (bug #196513)
  - -devel: move libQtDesigner here
  - -config: mash into main pkg, should be multilib friendly now


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.3-8
changelog:
  - qmake.conf: undefine QMAKE_STRIP to get useful -debuginfo (bug #193602)
  - move (not symlink) .pc files into %_libdir/pkgconfig


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.3-5
changelog:
  - strip -lXi from .pc files (#193258)
  - simplify sql plugin builds via %buildSQL macro
  - -libdir %qt_libdir


author: Laurent Rineau <laurent.rineau__fc_extra@normalesup.org>
changelog:
  - Fix the last reference to %{qtdir}/lib: use lib64 instead of "lib".
  - Fix the ownership of subpackages: they need to own parents of directories they install files in.


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.3-1
changelog:
  - 4.1.3
  - %qtdir/lib/*.pc -> %qtdir/%_lib/*.pc 
    (hopefully, the last hardcoded reference to %qtdir/lib)


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-20
changelog:
  - fix some unowned dirs
  - try harder to purge %builddir from .pc,.prl files
  - -docdir %_docdir/%name-doc-%version, since we use %doc macro in main pkg
  - -doc: own %qt_docdir
  - use qt4-wrapper.sh to ensure launch of qt4 versions of apps that
    (may) overlap with those from qt3 
  - use %qtdir/%_lib in ld.so.conf.d/*.conf files too


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-18
changelog:
  - %_bindir symlinks: qtconfig4 -> qt4config, qtdemo4 -> qt4demo
  - -libdir %qtdir/%_lib, simplifies %_lib != lib case
  - -docdir %_docdir/%name-%version
  - build shared versions of libQtAssistantClient,libQtUiTools too
  - strip extraneous -L paths, libs from *.prl files too


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-17
changelog:
  - .desktop: Qt -> Qt4, and Comment= (where missing)
  - -devel: include -designer here, Obsoletes/Provides: %name-designer.
     It's small, simplifies things... one less subpkg to worry about.
  - -doc: include %qtdir/doc symlink here
  - -docdir %_docdir/%name-doc-%version


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-16
changelog:
  - set/use RPM_OPT_FLAGS only for our platform
  - (really) don't give %_bindir symlink for qt3to4 another "4" suffix
  - don't add 4 suffix to uic3, rcc (they don't conflict with qt(3)-devel)
  - -devel: add  linguist.desktop
  - -doc: move assistant here, Provides: %{name}-assistant, add assistant.desktop
  - -doc: add qtdemo.desktop
  - -doc: Requires qt4 (instead of qt4-devel)
  - assistant4.patch: search for assistant4 instead of (qt3's) assistant in $PATH 
  - -qtconfig: add qtconfig.desktop
  - updated %sumaries to mention where (some) tools are, including assistant, linguist,
    qtdemo


author: Laurent Rineau <laurent.rineau__fc_extra@normalesup.org> - 4.1.2-15
changelog:
  - Rename -docs to -doc.
  - Files in the -doc subpackage are no longer in %doc.
  - Move qtdemo to the subpackage -doc.
  - Fix symlinks in %{_bindir}.
  - Only modify mkspecs/linux-g++*/qmake.conf, instead of all mkspecs/*/qmake.conf.


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-14
changelog:
  - remove MapNotify from .desktop file(s).
  - install -m644 LICENSE.*
  - -docs: don't mark examples as %doc
  - drop unused %debug macro


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-11
changelog:
  - drop optional ld.so.conf.d usage, make mandatory
  - make %_bindir symlinks to all %qtdir/bin stuff (even qt3to4)
  - pkgconfig files: hardlinks -> relative symlinks, strip -L/usr/lib64/mysql
    and -L%{_builddir}/qt-x11-opensource-src-%version/lib
  - cleanup/simplify Summary/%description entries
  - $RPM_BUILD_ROOT -> %buildroot, $RPM_BUILD_DIR -> %_builddir


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-10
changelog:
  - cleanup/simplify license bits, include LICENSE.QPL
  - drop unused -styles/-Xt subpkg reference
  - drop unused motif extention bits
  - drop initialpreference from .desktop files


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-7
changelog:
  - rework %post/%postun, mostly to placate rpmlint
  - drop Prefix:
  - drop use of qt4.(sh|csh), they're empty atm anyway
  - use Source'd designer.desktop (instead of inline cat/echo)
  - symlinks to %_bindir: qmake4, designer4, qtconfig4
  - drop qtrc, qt4 doesn't use it.
  - -docs subpkg for API html docs, demos, examples.
  - BR: libXcursor-devel libXi-devel (fc5+)


author: Rex Dieter <rexdieter[AT]users.sf.net> 4.1.2-4
changelog:
  - qt4.(sh|csh): place-holders only, don't define QTDIR (and QTLIB)
    as that (potentially) conflicts with qt-3.x.


author: Behdad Esfahbod <besfahbo@redhat.com> 0.1.7-2
changelog:
  - Apply comments from Matthias Clasen (#222611) 
  - devel summary improvement
  - devel require pkgconfig
  - configure --disable-static
  - Add comments about the voodoo
  - Install docs in the right place


author: Behdad Esfahbod <besfahbo@redhat.com> 0.1.7-1
changelog:
  - Initial package based on package by Supphachoke Suntiwichaya
    and Kamthorn Krairaksa for the OLPC.


author: Junxiao Bi <junxiao.bi@oracle.com> - 1.8.6-2.el6
changelog:
  - tools: up to 1.8.6-2 (Junxiao Bi)  
  - ocfs2-tools: mount not showing fully resolved path (Srinivas Eeda)


author: Junxiao Bi <junxiao.bi@oracle.com> - 1.8.6-1
changelog:
  - mkfs.ocfs2: fix default slots number in man doc [Orabug 20443780]
  - o2cb: fix systemd o2cb.service failure [Orabug 21071245]


author: Junxiao Bi <junxiao.bi@oracle.com> - 1.8.5
changelog:
  - ocfs2-tools: support trigger build from git
  - fsck.ocfs2: fix corruption when truncate reflink file
  - vendor: rhel7: add build/install dep pkg
  - ocfs2-tools: support powerpath dev as heartbeat dev
  - mounted.ocfs2: fix error checking
  - o2cb: mount debugfs when load config
  - o2cb: don't write sysconfig if status not changed
  - ocfs2-tools: add systemd support
  - ocfs2-tools: add build scripts for rhel7
  - fsck.ocfs2: abort if fs is mounted
  - fsck.ocfs2: fix journal tail wrapper
  - Add check to compare journal size and cluster size
  - fsck.ocfs2: do not remove the chain when verifying global bitmap chain alloc
  - debugfs.ocfs2: Fix a bug in process_open_args()
  - libo2dlm: Close file description after use
  - debugfs.ocfs2: Fix memory leak problem in process_open_args() & main()


author: Mark Wielaard <mjw@redhat.com> - 0.164-1
changelog:
  - Update to elfutils-0.164 (#1254647)
  - Drop old compat stuff
  - Drop upstreamed patches
    - elfutils-0.161-ar-long-name.patch
    - elfutils-0.161-formref-type.patch
  - Include elfutils/known-dwarf.h


author: Mark Wielaard <mjw@redhat.com> - 0.161-3
changelog:
  - Update to 0.161. (#1167724)
  - Add elfutils-0.161-ar-long-name.patch (#1181525 CVE-2014-9447)
  - Add elfutils-0.161-formref-type.patch


author: Mark Wielaard <mjw@redhat.com> - 0.158-3.2
changelog:
  - Add elfutils-0.158-unstrip.patch (#806474)
  - Add elfutils-0.158-readelf-nostrings.patch (#1101440)


author: Roland McGrath <roland@redhat.com> - 0.152-1
changelog:
  - Update to 0.152
    - Various build and warning nits fixed for newest GCC and Autoconf.
    - libdwfl: Yet another prelink-related fix for another regression. (#674465)
    - eu-elfcmp: New flag --ignore-build-id to ignore differing build ID bits.
    - eu-elfcmp: New flag -l/--verbose to print all differences.


author: Roland McGrath <roland@redhat.com> - 0.151-1
changelog:
  - Update to 0.151
    - libdwfl: Fix for more prelink cases with separate debug file.
    - eu-strip: New flag --strip-sections to remove section headers entirely.


author: Roland McGrath <roland@redhat.com> - 0.150-1
changelog:
  - Update to 0.150
    - libdw: Fix for handling huge .debug_aranges section. (#638432)
    - libdwfl: Fix for handling prelinked DSO with separate debug file. (#652857)
    - findtextrel: Fix diagnostics to work with usual section ordering.


author: Roland McGrath <roland@redhat.com> - 0.149-1
changelog:
  - Update to 0.149
    - libdw: Decode new DW_OP_GNU_implicit_pointer operation;
             new function dwarf_getlocation_implicit_pointer.
    - libdwfl: New function dwfl_dwarf_line.
    - eu-addr2line: New flag -F/--flags to print more DWARF line info details.
    - eu-readelf: better .debug_loc processing (#627729)
    - eu-strings: Fix non-mmap file reading. (#609468)
    - eu-strip: -g recognizes .gdb_index as a debugging section. (#631997)


author: Roland McGrath <roland@redhat.com> - 0.148-1
changelog:
  - Update to 0.148
    - libdw: Accept DWARF 4 format: new functions dwarf_next_unit,
             dwarf_offdie_types.
             New functions dwarf_lineisa, dwarf_linediscriminator,
             dwarf_lineop_index.
    - libdwfl: Fixes in core-file handling, support cores from PIEs. (#588818)
               When working from build IDs, don't open a named file
               that mismatches.
    - readelf: Handle DWARF 4 formats.


author: Roland McGrath <roland@redhat.com> - 0.146-1
changelog:
  - Update to 0.146
    - libdwfl: New function dwfl_core_file_report.
    - libelf: Fix handling of phdrs in truncated file. (#577310)
    - libdwfl: Fix infinite loop handling clobbered link_map. (#576379)
  - Package translations.


author: Roland McGrath <roland@redhat.com> - 0.145-1
changelog:
  - Update to 0.145
    - Fix build with --disable-dependency-tracking. (#564646)
    - Fix build with most recent glibc headers.
    - libdw: Fix CFI decoding. (#563528)
    - libdwfl: Fix address bias returned by CFI accessors. (#563528)
               Fix core file module layout identification. (#559836)
    - readelf: Fix CFI decoding.


author: Roland McGrath <roland@redhat.com> - 0.144-1
changelog:
  - Update to 0.144
    - libdw: New function dwarf_aggregate_size for computing (constant) type
             sizes, including array_type cases with nontrivial calculation.
    - readelf: Don't give errors for missing info under -a.
               Handle Linux "VMCOREINFO" notes under -n.
  - Resolves: RHBZ #527004, RHBZ #530704, RHBZ #550858


author: Roland McGrath <roland@redhat.com> - 0.143-1
changelog:
  - Update to 0.143
    - libdw: Various convenience functions for individual attributes now use
             dwarf_attr_integrate to look up indirect inherited attributes.
             Location expression handling now supports DW_OP_implicit_value.
    - libdwfl: Support automatic decompression of files in XZ format,
               and of Linux kernel images made with bzip2 or LZMA
               (as well as gzip).


author: Roland McGrath <roland@redhat.com> - 0.142-1
changelog:
  - Update to 0.142
    - libelf: Bug fix in filling gaps between sections. (#512840)
    - libelf: Add elf_getshdrnum alias for elf_getshnum and elf_getshdrstrndx
              alias for elf_getshstrndx and deprecate original names.
    - libebl, elflint: Add support for STB_GNU_UNIQUE. (#511436)
    - readelf: Add -N option, speeds up DWARF printing
               without address->name lookups. (#505347)
    - libdw: Add support for decoding DWARF CFI into location description form.
             Handle some new DWARF 3 expression operations previously omitted.
             Basic handling of some new encodings slated for DWARF 4.


author: Roland McGrath <roland@redhat.com> - 0.141-1
changelog:
  - Update to 0.141
    - libebl: sparc backend fixes (#490585)
              some more arm backend support
    - libdwfl: fix dwfl_module_build_id for prelinked DSO case (#489439)
               fixes in core file support (#494858)
               dwfl_module_getsym interface improved for non-address symbols
    - eu-strip: fix infinite loop on strange inputs with -f
    - eu-addr2line: take -j/--section=NAME option for binutils compatibility
                    (same effect as '(NAME)0x123' syntax already supported)
  - Resolves: RHBZ #495213, RHBZ #465872, RHBZ #470055, RHBZ #484623


author: Roland McGrath <roland@redhat.com> - 0.139-1
changelog:
  - Update to 0.139
    - libcpu: Add Intel SSE4 disassembler support
    - readelf: Implement call frame information and exception handling dumping.
               Add -e option.  Enable it implicitly for -a.
    - elflint: Check PT_GNU_EH_FRAME program header entry.
    - libdwfl: Support automatic gzip/bzip2 decompression of ELF files. (#472136)


author: Roland McGrath <roland@redhat.com> - 0.138-1
changelog:
  - Update to 0.138
    - Install <elfutils/version.h> header file for applications to use in
      source version compatibility checks.
    - libebl: backend fixes for i386 TLS relocs; backend support for NT_386_IOPERM
    - libcpu: disassembler fixes (#469739)
    - libdwfl: bug fixes (#465878)
    - libelf: bug fixes
    - eu-nm: bug fixes for handling corrupt input files (#476136)


author: Roland McGrath <roland@redhat.com> - 0.137-2
changelog:
  - Update to 0.137
    - libdwfl: bug fixes; new segment interfaces;
               all the libdwfl-based tools now support --core=COREFILE option
  - Resolves: RHBZ #325021, RHBZ #447416


author: Roland McGrath <roland@redhat.com> - 0.135-1
changelog:
  - Update to 0.135
    - libdwfl: bug fixes
    - eu-strip: changed handling of ET_REL files wrt symbol tables and relocs


author: Roland McGrath <roland@redhat.com> - 0.134-1
changelog:
  - Update to 0.134
    - elflint: backend improvements for sparc, alpha (#204170)
    - libdwfl, libelf: bug fixes (#439344, #438867, #438263, #438190)
  - Remove Conflicts: libelf-devel from elfutils-libelf-devel. (#435742)


author: Roland McGrath <roland@redhat.com> - 0.133-2
changelog:
  - Update to 0.133
    - readelf, elflint, libebl: SHT_GNU_ATTRIBUTE section handling (readelf -A)
    - readelf: core note handling for NT_386_TLS, NT_PPC_SPE, Alpha NT_AUXV
    - libdwfl: bug fixes and optimization in relocation handling
    - elfcmp: bug fix for non-allocated section handling
    - ld: implement newer features of binutils linker.
  - Install eu-objdump and libasm, now has limited disassembler support.


author: Roland McGrath <roland@redhat.com> - 0.132-3
changelog:
  - Update to 0.132
    - libelf: Use loff_t instead of off64_t in libelf.h header. (#377241)
    - eu-readelf: Fix handling of ET_REL files in archives.
    - libcpu: Implement x86 and x86-64 disassembler.
    - libasm: Add interface for disassembler.
    - all programs: add debugging of branch prediction.
    - libelf: new function elf_scnshndx.


author: Roland McGrath <roland@redhat.com> - 0.131-1
changelog:
  - Update to 0.131
    - libdw: DW_FORM_ref_addr support; dwarf_formref entry point now deprecated;
             bug fixes for oddly-formatted DWARF
    - libdwfl: bug fixes in offline archive support, symbol table handling;
               apply partial relocations for dwfl_module_address_section on ET_REL
    - libebl: powerpc backend support for Altivec registers


author: Roland McGrath <roland@redhat.com> - 0.130-1
changelog:
  - Update to 0.130
    - eu-readelf -p option can take an argument like -x for one section
    - eu-readelf --archive-index (or -c)
    - eu-readelf -n improved output for core dumps
    - eu-readelf: handle SHT_NOTE sections without requiring phdrs (#249467)
    - eu-elflint: ditto
    - eu-elflint: stricter checks on debug sections
    - eu-unstrip: new options, --list (or -n), --relocate (or -R)
    - libelf: new function elf_getdata_rawchunk, replaces gelf_rawchunk;
              new functions gelf_getnote, gelf_getauxv, gelf_update_auxv
    - libebl: backend improvements (#324031)
    - libdwfl: build_id support, new functions for it
    - libdwfl: dwfl_module_addrsym fixes (#268761, #268981)
    - libdwfl offline archive support, new script eu-make-debug-archive


author: Roland McGrath <roland@redhat.com> - 0.129-1
changelog:
  - Update to 0.129
    - readelf: new options --hex-dump (or -x), --strings (or -p) (#250973)
    - addr2line: new option --symbols (or -S)
    - libdw: dwarf_getscopes fixes (#230235)
    - libdwfl: dwfl_module_addrsym fixes (#249490)


author: Roland McGrath <roland@redhat.com> - 0.128-2
changelog:
  - Update to 0.128
    - new program: unstrip
    - elfcmp: new option --hash-inexact
  - Replace Conflicts: with Provides/Requires using -arch


author: Roland McGrath <roland@redhat.com> - 0.127-1
changelog:
  - Update to 0.127
    - libdw: new function dwarf_getsrcdirs
    - libdwfl: new functions dwfl_module_addrsym, dwfl_report_begin_add,
               dwfl_module_address_section


author: Roland McGrath <roland@redhat.com> - 0.126-1
changelog:
  - Update to 0.126
    - New program eu-ar.
    - libdw: fix missing dwarf_getelf (#227206)
    - libdwfl: dwfl_module_addrname for st_size=0 symbols (#227167, #227231)


author: Roland McGrath <roland@redhat.com> - 0.125-1
changelog:
  - Update to 0.125
    - elflint: Compare DT_GNU_HASH tests.
    - move archives into -static RPMs
    - libelf, elflint: better support for core file handling
    - Really fix libdwfl sorting of modules with 64-bit addresses (#220817).
  - Resolves: RHBZ #220817, RHBZ #213792


author: Roland McGrath <roland@redhat.com> - 0.124-1
changelog:
  - eu-strip -f: copy symtab into debuginfo file when relocs use it (#203000)
  - Update to 0.124
    - libebl: fix ia64 reloc support (#206981)
    - libebl: sparc backend support for return value location
    - libebl, libdwfl: backend register name support extended with more info
    - libelf, libdw: bug fixes for unaligned accesses on machines that care
    - readelf, elflint: trivial bugs fixed


author: Roland McGrath <roland@redhat.com> 0.123-1
changelog:
  - Update to 0.123
    - libebl: Backend build fixes, thanks to Stepan Kasal.
    - libebl: ia64 backend support for register names, return value location
    - libdwfl: Handle truncated linux kernel module section names.
    - libdwfl: Look for linux kernel vmlinux files with .debug suffix.
    - elflint: Fix checks to permit --hash-style=gnu format.


author: Roland McGrath <roland@redhat.com> - 0.122-3
changelog:
  - Update to 0.122
    - Fix libdwfl sorting of modules with 64-bit addresses (#198225).
    - libebl: add function to test for relative relocation
    - elflint: fix and extend DT_RELCOUNT/DT_RELACOUNT checks
    - elflint, readelf: add support for DT_GNU_HASH
    - libelf: add elf_gnu_hash
    - elflint, readelf: add support for 64-bit SysV-style hash tables
    - libdwfl: new functions dwfl_module_getsymtab, dwfl_module_getsym.


author: Roland McGrath <roland@redhat.com> - 0.121-1
changelog:
  - Update to 0.121
    - libelf: bug fixes for rewriting existing files when using mmap (#187618).
    - make all installed headers usable in C++ code (#193153).
    - eu-readelf: better output format.
    - eu-elflint: fix tests of dynamic section content.
    - libdw, libdwfl: handle files without aranges info.


author: Roland McGrath <roland@redhat.com> - 0.120-2
changelog:
  - Update to 0.120
    - License changed to GPL, with some exceptions for using
      the libelf, libebl, libdw, and libdwfl library interfaces.
      Red Hat elfutils is an included package of the Open Invention Network.
    - dwarf.h updated for DWARF 3.0 final specification.
    - libelf: Fix corruption in ELF_C_RDWR uses (#187618).
    - libdwfl: New function dwfl_version; fixes for offline.


author: Roland McGrath <roland@redhat.com> - 0.118-1
changelog:
  - update to 0.118
    - elflint: more tests.
    - libdwfl: New function dwfl_module_register_names.
    - libebl: New backend hook for register names.
  - Make sure -fexceptions is always in CFLAGS.


author: Roland McGrath <roland@redhat.com> - 0.117-2
changelog:
  - update to 0.117
    - libdwfl: New function dwfl_module_return_value_location (#166118)
    - libebl: Backend improvements for several CPUs


author: Roland McGrath <roland@redhat.com> - 0.116-1
changelog:
  - update to 0.116
    - libdw fixes, API changes and additions
    - libdwfl fixes (#169672)
    - eu-strip/libelf fix to preserve setuid/setgid permission bits (#167745)


author: Roland McGrath <roland@redhat.com> - 0.115-2
changelog:
  - update to 0.115
    - New program eu-strings.
    - libdw: New function dwarf_getscopes_die.
    - libelf: speed-ups of non-mmap reading.
    - Implement --enable-gcov option for configure.


author: Roland McGrath <roland@redhat.com> - 0.114-1
changelog:
  - update to 0.114
    - new program eu-ranlib
    - libdw: new calls for inlines
    - libdwfl: new calls for offline modules


author: Roland McGrath <roland@redhat.com> - 0.113-2
changelog:
  - update to 0.113
    - elflint: relax a bit.  Allow version definitions for defined symbols
      against DSO versions also for symbols in nobits sections.
      Allow .rodata section to have STRINGS and MERGE flag set.
    - strip: add some more compatibility with binutils.
    - libdwfl: bug fixes.
  - Separate libdw et al into elfutils-libs subpackage.


author: Roland McGrath <roland@redhat.com> - 0.112-1
changelog:
  - update to 0.112
    - elfcmp: some more relaxation.
    - elflint: many more tests, especially regarding to symbol versioning.
    - libelf: Add elfXX_offscn and gelf_offscn.
    - libasm: asm_begin interface changes.
    - libebl: Add three new interfaces to directly access machine, class,
      and data encoding information.


author: Roland McGrath <roland@redhat.com> - 0.109-2
changelog:
  - update to 0.109
    - verify that libebl modules are from the same build
    - new eu-elflint checks on copy relocations
    - new program eu-elfcmp
    - new experimental libdwfl library


author: Roland McGrath <roland@redhat.com> - 0.108-1
changelog:
  - update to 0.108
    - merge strip fixes
    - sort records in dwarf_getsrclines, fix dwarf_getsrc_die searching
    - update elf.h from glibc


author: Roland McGrath <roland@redhat.com> - 0.107-1
changelog:
  - update to 0.107
    - readelf: improve DWARF output format
    - elflint: -d option to support checking separate debuginfo files
    - strip: fix ET_REL debuginfo files (#156341)


author: Jakub Jelinek <jakub@redhat.com> 0.92-1
changelog:
  - full version
  - macroized spec file for GPL or OSL builds
  - include only libelf under GPL plus wrapper scripts


author: Jakub Jelinek <jakub@redhat.com> 0.72-4
changelog:
  - fix arguments to gelf_getsymshndx and elf_getshstrndx
  - fix other warnings
  - reenable checks on s390x


author: Jeff Johnson <jbj@redhat.com> 0.69-4
changelog:
  - update to 0.69.
  - add "make check" and segfault avoidance patch.
  - elfutils-libelf needs to run ldconfig.


author: root <root@b358c3611d2b.(none)> - 4.4.4-222.0.4.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=3885a020649df84b883ea20d11ca15b7d7640201
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/HVM: don't give the wrong impression of WRMSR succeeding (root)  [Orabug: 29725753]


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-222.0.3.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=71714f34026c4e0b105bf2def8d2dc4c7171d5b8
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Red-tape: Update repo with new CVE for XSA-297 (Patrick Colp)  [Orabug: 29725297]  {CVE-2019-11091}
  - x86/spec-ctl: Expose X86_FEATURE_MD_CLEAR to guests (Patrick Colp)  [Orabug: 29677162]  {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130}
  - x86/spec-ctrl: Introduce options to control VERW flushing (Andrew Cooper)  [Orabug: 2977162]  {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130}
  - x86/spec-ctrl: Infrastructure to use VERW to flush pipeline buffers (Andrew Cooper)  [Orabug: 29677162]  {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130}
  - x86/spec-ctrl: CPUID/MSR definitions for Microarchitectural Data Sampling (Andrew Cooper)  [Orabug: 29677162]  {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130}


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-222.0.2.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=0d8ecd7732e56484c10e4b584de17d360d940252
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Config: Update git links to use linux-git.us.oracle.com (Patrick Colp)  [Orabug: 29558583] 
  - gnttab: set page refcount for copy-on-grant-transfer (Jan Beulich)  [Orabug: 29383381]


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-222.0.1.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=8834cf94fcc887286fb835db8675bd3230d41276
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spec-ctrl: Add option to intercept SPEC_CTRL MSR if we have EIBRS (Patrick Colp)  [Orabug: 29055896] 
  - tools/libxc: Expose X86_FEATURE_ARCH_CAPS to guests (Patrick Colp)  [Orabug: 29055896] 
  - x86/spec-ctrl: Don't frob SPEC_CTRL MSR on idle if we have EIBRS (Patrick Colp)  [Orabug: 29055896] 
  - x86/spec-ctrl: Enable enhanced IBRS and make it the default (Patrick Colp)  [Orabug: 29055896] 
  - x86/spec-ctrl: Add functions for supporting enhanced IBRS (Patrick Colp)  [Orabug: 29055896] 
  - This patch add reconfigureDevice CDROM code back. (root)  [Orabug: 29189324] 
  - retpoline: disable jump tables (Norbert Manthey)  [Orabug: 29193106]  {CVE-2017-5753}
  - x86: assorted array_index_nospec() insertions (Jan Beulich)  [Orabug: 29193106]  {CVE-2017-5753}
  - xen: Port the array_index_nospec() infrastructure from Linux (Andrew Cooper)  [Orabug: 29193106]  {CVE-2017-5753}
  - x86/spec-ctrl: Don't mask off CPUID7.edx[31] (SSBD bit) (Boris Ostrovsky)  [Orabug: 29138843] 
  - Red-tape: Update the repo with CVE for XSA-280 (Patrick Colp)  [Orabug: 28905170]  {CVE-2018-19966}
  - Red-tape: Update the repo with CVE for XSA-279 (Patrick Colp)  [Orabug: 28904954]  {CVE-2018-19965}
  - Red-tape: Update the repo with CVE for XSA-275 (Elena Ufimtseva)  [Orabug: 28905068]  {CVE-2018-19961}
  - Red-tape: Update the repo with CVE XSA-282 (Ross Philipson)  [Orabug: 28924143]  {CVE-2018-19967}
  - AMD/IOMMU: suppress PTE merging after initial table creation (Jan Beulich)  [Orabug: 28905068] 
  - amd/iommu: fix flush checks (Roger Pau Monné)  [Orabug: 28905068] 
  - xen: Fix determining when domain creation is complete (Andrew Cooper)  
  - x86/shadow: shrink struct page_info's shadow_flags to 16 bits (Jan Beulich)  [Orabug: 28905170] 
  - x86/shadow: move OOS flag bit positions (Jan Beulich)  [Orabug: 28905170] 
  - x86/mm: Don't perform flush after failing to update a guests L1e (Andrew Cooper)  [Orabug: 28904954]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-222.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=c0358138c05033bb21883b219899b0e282803222
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86: work around HLE host lockup erratum (Jan Beulich)  [Orabug: 28924143] 
  - x86: extend get_platform_badpages() interface (Jan Beulich)  [Orabug: 28924143]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.4.4-221.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=ceb9e0bf5820a8a6e5b751cd4e17577d533f9ccf
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - VT-d/dmar: iommu mem leak fix (Zhenzhong Duan)  
  - x86/mmcfg/drhd: Move acpi_mmcfg_init() call before calling acpi_parse_dmar() (Zhenzhong Duan)  
  - x86/mmcfg: Rename pt_pci_init() and call it in acpi_mmcfg_init() (Zhenzhong Duan)  
  - VT-d: use correct BDF for VF to search VT-d unit (Chao Gao)


author: Eric DeVolder <eric.devolder@oracle.com> - 4.4.4-220.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=112e4a640f68772d5d225ba9d9a94a880c97debb
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: remove extraneous waitForDevices() call in soft_reset (Eric DeVolder)  [Orabug: 28783430] 
  - xend: detect and correct race condition in DevController hotplug (Eric DeVolder)  [Orabug: 28783430]


author: Eric DeVolder <eric.devolder@oracle.com> - 4.4.4-219.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=0316cfab8c14dcffb5e55dccad22aa014fb8c80f
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: use DevController waitFor() methods for non-hotplug devices (Eric DeVolder)  
  - xend: mark appropriate DevController subclasses as not hotplug (Eric DeVolder)  [Orabug: 28838569]


author: Eric DeVolder <eric.devolder@oracle.com> - 4.4.4-218.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=b36bb99deec279576aa0550d31ced68a5b9e04bb
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: prevent scrubbing stall during kexec soft_reset (Eric DeVolder)  [Orabug: 28817482]


author: Eric DeVolder <eric.devolder@oracle.com> - 4.4.4-217.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=51c72a926fd4171b32819f0791263c9d55bca21d
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: Properly wait for hot plug devices to complete (Eric DeVolder)  [Orabug: 27338786] [Orabug: 27927358] 
  - xend: Mark vfb and vkbd devices as not hot plug (Eric DeVolder)


author: Eric DeVolder <eric.devolder@oracle.com> - 4.4.4-216.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=08e809f892a2ee86d740eee1b79b6289e1c24e35
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: do not raise an exception if xc_domain_setsmt fails (Eric DeVolder)  [Orabug: 28748910]


author: Eric DeVolder <eric.devolder@oracle.com> - 4.4.4-215.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=59ca5e7e7f8fa4862c13c80d6fa5e9cc1d806cf0
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: fix exceptions thrown in setTopology() (Eric DeVolder)  [Orabug: 28717409] [Orabug: 28748910]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-214.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=7d94008f64eb174595213079d168867d0ae9f7c2
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/EFI: further correct FPU state handling around runtime calls (Jan Beulich)  [Orabug: 28746898] 
  - x86/EFI: fix FPU state handling around runtime calls (Jan Beulich)  [Orabug: 28746898]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-213.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=bc90f5c2caf8b549aa0891dfced0e7ed076d7709
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Revert "x86/EFI: fix FPU state handling around runtime calls" (Ross Philipson)  [Orabug: 28746898] 
  - Revert "x86/EFI: further correct FPU state handling around runtime calls" (Ross Philipson)  [Orabug: 28746898]


author: Manjunath Patil <manjunath.b.patil@oracle.com> - 4.4.4-212.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=59d985f71127446c9f983beca0db827b3d50be21
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: fix migration code path for XendDomainInfo memory leakage (Manjunath Patil)  [Orabug: 28715651] 
  - xend: fix memory leak of XendDomainInfo attributes (Manjunath Patil)  [Orabug: 28715651]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-211.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=12e1eb0f48dc343a59b5f3b281a1282927b63c41
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spec-ctrl: command line handling adjustments (Jan Beulich)  [Orabug: 28696378] 
  - x86/HVM: don't cause #NM to be raised in Xen (Jan Beulich)  [Orabug: 28696378] 
  - x86/EFI: further correct FPU state handling around runtime calls (Jan Beulich)  [Orabug: 28696378] 
  - x86/EFI: fix FPU state handling around runtime calls (Jan Beulich)  [Orabug: 28696378]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-210.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=f47d8d07a9354fbb3ad8b346c29e9b19ec7718c5
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Xend: Add support for changing backend vbd device (Bhavesh Davda)  [Orabug: 28688109]


author: Srinivasa Naravaram <srini.naravaram@oracle.com> - 4.4.4-209.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=b4413b4db56d15e6963a98850c3560a2eef828eb
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Oracle-Bug: 28102632 - Need to be able to configure cipher suites for xen live migration port 8003 Signed-off-by: zhigang.x.wang@oracle.com (Srinivasa Naravaram)


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-208.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=2a26f6e84b42e8fe26da6e842feb604fe398c0d3
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - intel/microcode: Synchronize update signature (Boris Ostrovsky)  [Orabug: 28610327]


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-207.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=619684f5a609992a1c4e80397e1312b68973e772
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/vtx: Fix the checking for unknown/invalid MSR_DEBUGCTL bits (Andrew Cooper)  [Orabug: 28432092]  {CVE-2018-15468}


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-206.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=e03c2c3bbf6f995c7988400cc6b0bf46792a7a07
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spectre: Fix SPEC_CTRL_ENTRY_FROM_INTR_IST macro (Boris Ostrovsky)  [Orabug: 28537435]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-205.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=ee62d27b921edcb1fa7eb9e0219c749a8828b993
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/microcode: Synchronize late microcode loading (Boris Ostrovsky)  [Orabug: 28526234] 
  - Revert "microcode: pin the sibling while updating microcode on a core" (Boris Ostrovsky)  [Orabug: 28526234]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-204.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=2c51cc07c89e89034759c19f9d03dc32f25a211e
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - microcode: pin the sibling while updating microcode on a core (Boris Ostrovsky)  [Orabug: 28518206]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-203.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=c0c399b69b2e5674c2af25930cb25cedf7ac215f
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - l1tf: Utility to offline/online SMT siblings. (Ross Philipson)  [Orabug: 28487056]  {CVE-2018-3646}
  - x86/spec-ctrl: Introduce an option to control L1D_FLUSH for HVM guests (Andrew Cooper)  [Orabug: 28487056]  {CVE-2018-3620} {CVE-2018-3646}
  - x86/msr: Virtualise MSR_FLUSH_CMD for guests (Andrew Cooper)  [Orabug: 28487056]  {CVE-2018-3646} {CVE-2018-3646}
  - x86/spec-ctrl: CPUID/MSR definitions for L1D_FLUSH (Andrew Cooper)  [Orabug: 28487056]  {CVE-2018-3646} {CVE-2018-3646}
  - x86/spec-ctrl: Calculate safe PTE addresses for L1TF mitigations (Andrew Cooper)  [Orabug: 28487056]  {CVE-2018-3620} {CVE-2018-3646}
  - x86: command line option to avoid use of secondary hyper-threads (Jan Beulich)  [Orabug: 28487056]  {CVE-2018-3646}
  - cpupools: fix state when downing a CPU failed (Jan Beulich)  [Orabug: 28487056]  {CVE-2018-3646}


author: Eric DeVolder <eric.devolder@oracle.com> - 4.4.4-202.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=0d3d79a87088ec4d270d2ee3216ba4fb7bb6e81e
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Xend: Close race condition between python threads during kexec (Eric DeVolder)  [Orabug: 28440062]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-201.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=6934477050e9283098332bd15742c3dd8ebe6b62
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/HVM: Restart ioreq processing state machine (Boris Ostrovsky)  [Orabug: 28200424]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-200.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=9f685faa4843908daa19ec98ce34dd5418719890
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spec-ctrl: Mitigations for LazyFPU (Andrew Cooper)  [Orabug: 28135175]  {CVE-2018-3665}
  - x86: Support fully eager FPU context switching (Andrew Cooper)  [Orabug: 28135175]  {CVE-2018-3665}


author: Dongli Zhang <dongli.zhang@oracle.com> - 4.4.4-199.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=aa87f648b8c7dce0fa8f0b233e4e4ca46a4b8a9e
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - svm: fix incorrect TSC scaling (Haozhong Zhang)  [Orabug: 27182906]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-198.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=400958eb0dc3559b45e579b81950e84dab49a854
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/AMD-ucode: correct multiple container handling (Jan Beulich)  [Orabug: 28157269] 
  - x86, amd_ucode: fix coverity issues found in cpu_request_microcode() (Aravind Gopalakrishnan)  [Orabug: 28157269]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-197.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=1b37d37eb5587bd46b797d04b50ae604a514f8df
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - [xenmicrocode] Fix error reporting on successful return from tool (Ross Philipson)  [Orabug: 28128754] 
  - x86: correct default_xen_spec_ctrl calculation (Jan Beulich)  [Orabug: 28035001] 
  - x86/msr: Virtualise MSR_SPEC_CTRL.SSBD for guests to use (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/Intel: Mitigations for GPZ SP4 - Speculative Store Bypass (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/AMD: Mitigations for GPZ SP4 - Speculative Store Bypass (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Introduce a new `spec-ctrl=` command line argument to replace `bti=` (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/cpuid: Improvements to guest policies for speculative sidechannel features (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Explicitly set Xen's default MSR_SPEC_CTRL value (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Split X86_FEATURE_SC_MSR into PV and HVM variants (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Elide MSR_SPEC_CTRL handling in idle context when possible (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Rename bits of infrastructure to avoid NATIVE and VMEXIT (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Fold the XEN_IBRS_{SET,CLEAR} ALTERNATIVES together (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Merge bti_ist_info and use_shadow_spec_ctrl into spec_ctrl_flags (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Express Xen's choice of MSR_SPEC_CTRL value as a variable (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Read MSR_ARCH_CAPABILITIES only once (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Assume that STIBP feature is always available (Boris Ostrovsky)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Updates to retpoline-safety decision making (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - Revert "x86/boot: Disable IBRS in intr/nmi exit path at bootup stage" (Boris Ostrovsky)  [Orabug: 28035001]  {CVE-2018-3639}


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.6-63
changelog:
  - Since -libs now provide python-ordered dict, added ordereddict
    dist-info to site-packages
  Resolves: rhbz#1199997


author: Robert Kuska <rkuska@redhat.com> - 2.6.6-59
changelog:
  - Let ConfigParse handle options without values
  - Add check phase to specfile, fix and skip relevant failing tests
  Resolves: rhbz#1031709


author: Slavek Kabrda <bkabrda@redhat.com> - 2.6.6-54
changelog:
  - Fix subprocess.Popen.communicate() being broken by SIGCHLD handler.
  Resolves: rhbz#1065537
  - Rebuild against latest valgrind-devel.
  Resolves: rhbz#1142170


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.6-42
changelog:
  - Add an explicit RPATH to _elementtree.so pointing at the directory
  containing system expat
  Resolves: rhbz#962779


author: Matej Stuchlik <mstuchli@redhat.com> - 2.6.6-39
changelog:
  - Remove BOM insertion code from SysLogHandler that causes messages to be
  treated as EMERG level
  Resolves: rhbz#845802


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-38
changelog:
  - move most of the payload of the core package to the libs subpackage, given
  that the libs aren't meaningfully usable without the standard libraries
  - preserve timestamps when fixing shebangs (patch 158) and when installing,
  to minimize .pyc/.pyo differences across architectures (due to the embedded
  mtime in .pyc/.pyo headers)
  - fix multilib issue in /usr/bin/modulator and /usr/bin/pynche
  Related: rhbz#958256


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-36
changelog:
  - disable patch 110 (python-2.6.5-ctypes-noexecmem.patch)
  Related: rhbz#707944
  - disable patch 129 (python-2.6.6-gc-assertions.patch) now that we're
  building with -DNDEBUG
  Related: rhbz#810847
  Related: rhbz#841748
  Related: rhbz#614680


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-35
changelog:
  - add -DNDEBUG to OPT during the build, disabling C-level assertions
  Resolves: rhbz#810847
  Resolves: rhbz#841748
  - avoid allocating thunks in ctypes unless absolutely necessary, to avoid
  generating SELinux denials on "import ctypes" and "import uuid" when
  embedding Python within httpd
  Resolves: rhbz#814391
  - avoid infinite loop in logging.handlers.SysLogHandler with eventlet when
  the syslog daemon is stopped
  Resolves: rhbz#835460


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-34
changelog:
  - add an RPATH to pyexpat.so to avoid ImportError on XML_SetHashSalt when a
  vanilla build of expat is present in LD_LIBRARY_PATH
  Resolves: rhbz#833271


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-31
changelog:
  - fix endless loop in SimpleXMLRPCServer upon malformed POST request
  Resolves: CVE-2012-0845
  - send encoding in SimpleHTTPServer.list_directory to protect IE7 against
  potential XSS attacks
  Resolves: CVE-2011-4940


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-30
changelog:
  - oCERT-2011-003: add -R command-line option and PYTHONHASHSEED environment
  variable, to provide an opt-in way to protect against denial of service
  attacks due to hash collisions within the dict and set types
  Resolves: CVE-2012-1150


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-29
changelog:
  - protect GIL detection within gdb debug hooks against C stack frames that
  lack a name (source 1)
  Related: rhbz#711818
  Resolves: rhbz#736085


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-28
changelog:
  - avoid truncating the compilation flags of extension modules that have CFLAGS
  set in their environment
  Resolves: rhbz#727364


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-27
changelog:
  - update "py-bt" in gdb debug hooks to avoiding printing stray <function>
  frames on non-C functions
  Related: rhbz#711818


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-24
changelog:
  - update uid/gid handling to avoid int overflows seen with uid/gid
  values >= 2^31 on 32-bit architectures
  Resolves: rhbz#697470


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-23
changelog:
  - update gdb debug hooks, showing when a thread is waiting on the GIL, calls
  to C functions and methods, and garbage collections.  Also, better handle the
  case when "f" is optimized out within PyEval_EvalFrameEx, to at least give
  file and function name, even if the line number and locals won't be available
  Resolves: rhbz#711818


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-22
changelog:
  - backport fix for failures seen with subprocess module when supplying stdin
  to short-lived subprocesses
  Resolves: rhbz#667431


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-21
changelog:
  - backport fix for occasional failures in multiprocessing's Process.start()
  Resolves: rhbz#685234
  - port multiprocessing to use the "poll" syscall, rather than "select"
  Resolves: rhbz#713082
  - backport fix allowing getpass.getpass() to be interrupted with Ctrl-C
  or Ctrl-Z
  Resolves: rhbz#689794
  - backport memory leak fixes for the readline module
  Resolves: rhbz#699740


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-11
changelog:
  - fix incompatibility between 2.6.6 and our non-standard M2Crypto.SSL.SSLTimeoutError
  Resolves: rhbz#681811


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-6
changelog:
  - prevent _sqlite3.so being built with a redundant RPATH of _libdir (patch 130)
  - remove DOS batch file "idle.bat"
  - remove shebang lines from .py files that aren't executable, and remove
  executability from .py files that don't have a shebang line
  Related: rhbz#634944
  - add "Obsoletes: python-ssl" to core package, as 2.6 contains the ssl module
  Resolves: rhbz#529274


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-5
changelog:
  - allow the "no_proxy" environment variable to override "ftp_proxy" in
  urllib2 (patch 128)
  Resolves: rhbz#637895
  - make garbage-collection assertion failures more informative (patch 129)
  Resolves: rhbz#614680


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-4
changelog:
  - backport subprocess fixes to use the "poll" system call, rather than "select"
  Resolves: rhbz#650588


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-3
changelog:
  - use an ephemeral port for IDLE, enabling multiple instances to be run
  Resolves: rhbz#639222
  - add systemtap static markers, tapsets, and example scripts
  Resolves: rhbz#569695


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-2
changelog:
  - fix dbm.release on ppc64/s390x
  Resolves: rhbz#626756
  - fix missing lib2to3 test files
  Resolves: rhbz#625395
  - fix test.test_commands SELinux incompatibility
  Resolves: rhbz#625393
  - make "pydoc -k" more robust in the face of broken modules
  Resolves: rhbz#603073


author: David Malcolm <dmalcolm@redhat.com> - 2.6.6-1
changelog:
  - rebase to 2.6.6: (which contains the big whitespace cleanup of r81031)
    http://www.python.org/download/releases/2.6.6/
    - fixup patch 102, patch 11, patch 52, patch 110
    - drop upstreamed patches: patch 113 (CVE-2010-1634), patch 114
    (CVE-2010-2089), patch 115 (CVE-2008-5983), patch 116 (rhbz598564),
    patch 118 (rhbz540518)
    - add fix for upstream bug in test_posix.py introduced in 2.6.6 (patch 120)
  Resolves: rhbz#627301


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-2
changelog:
  - support OpenSSL FIPS mode in _hashlib and hashlib
  Resolves: rhbz#563986
  - don't build the _md5 and _sha* modules: rely on _hashlib in hashlib


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-1
changelog:
  - 2.6.5
  - remove upstream patch 53
  - fixup selinux patch to apply cleanly against 2.6.5 (patch 110)
  Resolves: rhbz#611607
  - remove commented-out, out-of-date patches


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-11
changelog:
  - Stop python bailing out with an assertion failure when UnicodeDecodeErrors
  occur on very large buffers (patch 118, upstream issue 9058)
  Resolves: rhbz#540518


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-10
changelog:
  - Fix an incompatibility between pyexpat and the system expat-2.0.1 that led to
  a segfault running test_pyexpat.py (patch 117)
  Resolves: rhbz#583931


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-9
changelog:
  - cherrypick upstream fix for fatal error creating threads when memory is
  low (patch 116)
  Resolves: rhbz#598564


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-8
changelog:
  - ensure that the compiler is invoked with "-fwrapv" (rhbz#594819)
  - CVE-2010-1634: fix various integer overflow checks in the audioop
  module (patch 113)
  - CVE-2010-2089: further checks within the audioop module (patch 114)
  - CVE-2008-5983: the new PySys_SetArgvEx entry point from r81399 (patch 115)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-6
changelog:
  - add gdb hooks for easier debugging (rhbz:569696)
  - supply fourth parameter (default permissions) in all usage of "defattr" in
  subpackage manifests
  - remove trailing periods from package "Summary" fields
  - fix typo in the description of the "test" subpackage


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-5
changelog:
  - update python-2.6.2-config.patch to remove downstream customization of build
  of pyexpat and elementtree modules
  - add patch adapted from upstream (patch 3) to add support for building against
  system expat; add --with-system-expat to "configure" invocation (patch 3)
  - remove embedded copy of expat from source tree during "prep"


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-4
changelog:
  - introduce %{with_valgrind} macro, to only use the valgrind patch on archs
  where valgrind-devel is available


author: David Malcolm <dmalcolm@redhat.com> - 2.6.2-3
changelog:
  - replace usage of %define with %global
  - introduce macros for 3 directories, replacing expanded references throughout:
  %{pylibdir}, %{dynload_dir}, %{site_packages}
  - split up the "configure" invocation flags onto individual lines
  - move lib2to3 from -tools subpackage to main package (bug 556667)
  - "Makefile" and the config-32/64.h file are needed by distutils/sysconfig.py
  _init_posix(), so we include them in the core package, along with their parent
  directories (bug 531901)
  - fixup the build when __python_ver is set (Zach Sadecki; bug 533989); use
  pybasever in the files section
  - automatically disable arena allocator when run under valgrind (upstream
  issue 2422; patch 52)
  - fix Lib/SocketServer.py to avoid trying to use non-existant keyword args
  for os.waitpid (patch 53, rhbz:552404, Adrian Reber)
  - use the %{_isa} macro to ensure that the python-devel dependency on python
  is for the correct multilib arch (#555943)
  - patch Makefile.pre.in to avoid building static library (patch111, bug 556092)
  - delete bundled copies of libffi and zlib to make sure we use the system ones
  - replace references to /usr with %{_prefix}; replace references to
  /usr/include with %{_includedir}
  - change python-2.6.2-config.patch to remove our downstream change to curses
  configuration in Modules/Setup.dist, so that the curses modules are built using
  setup.py with the downstream default (linking against libncursesw.so, rather
  than libncurses.so), rather than within the Makefile; add a test to %install
  to verify the dso files that the curses module is linked against the correct
  DSO (bug 539917; changes _cursesmodule.so -> _curses.so)
  - explicitly list all lib-dynload files, rather than dynamically gathering the
  payload into a temporary text file, so that we can be sure what we are
  shipping; remove now-redundant testing for presence of certain .so files


author: James Antill <jantill@redhat.com> - 2.5.1-20
changelog:
  - Add valgrind support files, as doc, to python-devel
  - Relates: rhbz#418621
  - Add new API from 2.6, set_wakeup_fd ... use at own risk, presumably won't
  - change but I have no control to guarantee that.
  - Resolves: rhbz#427794
  - Add gdbinit support file, as doc, to python-devel


author: James Antill <jantill@redhat.com> - 2.5.1-18
changelog:
  - Create a python-test sub-module, over 3MB of stuff noone wants.
  - Don't remove egginfo files, try this see what happens ... may revert.
  - Resolves: rhbz#414711


author: James Antill <jantill@redhat.com> - 2.5.1-16
changelog:
  - Fix pyconfig.h comment typo.
  - Add back test_support.py and the __init__.py file.
  - Resolves: rhbz#387401


author: James Antill <jantill@redhat.com> - 2.5.1-15
changelog:
  - Do codec lowercase in C Locale.
  - Resolves: 207134 191096
  - Fix stupid namespacing in pysqlite, minimal upgrade to 2.3.3 pysqlite
  - Resolves: 263221


author: James Antill <jantill@redhat.com> - 2.5.1-13
changelog:
  - Add tix buildprereq
  - Add tkinter patch
  - Resolves: #281751
  - Fix ctypes loading of libraries, add requires on binutils
  - Resolves: #307221
  - Possible fix for CVE-2007-4965 possible exploitable integer overflow
  - Resolves: #295971


author: Jeremy Katz <katzj@redhat.com> - 2.5.1-4
changelog:
  - fix _elementtree.so build (#245703)
  - ensure that extension modules we expect are actually built rather than 
    having them silently fall out of the package


author: Jeremy Katz <katzj@redhat.com> - 2.5.3-8
changelog:
  - fix extensions to use shared libpython (#219564)
  - all 64bit platforms need the regex fix (#122304)


author: Jeremy Katz <katzj@redhat.com> - 2.5.3-3
changelog:
  - fix atexit traceback with failed syslog logger (#218214)
  - split libpython into python-libs subpackage for multilib apps 
    embedding python interpreters


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - support db 4.5
  - obsolete python-elementtree; since it requires some code tweaks, don't 
    provide it
  - obsolete old python-sqlite; provide the version that's actually included


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - fix _md5 and _sha modules (Robert Sheck)
  - no longer provide optik compat; it's been a couple of years now
  - no longer provide the old shm module; if this is still needed, let's 
    build it separately
  - no longer provide japanese codecs; should be a separate package


author: Mihai Ibanescu <misa@redhat.com> - 2.4.99.c1
changelog:
  - Updated to 2.5c1. Merged fixes from FC6 too:
  - Fixed bug #199373 (on some platforms CFLAGS is needed when linking)
  - Fixed bug #198971 (case conversion not locale safe in logging library)
  - Verified bug #201434 (distutils.sysconfig is confused by the change to make
    python-devel multilib friendly) is fixed upstream


author: Mihai Ibanescu <misa@redhat.com> - 2.4.3-6
changelog:
  - Fixed bug #192592 (too aggressive assertion fails) - SF#1257960
  - Fixed bug #167468 (Doc/tools not included) - added in the python-tools package


author: Peter Jones <pjones@redhat.com> 2.4.1-12
changelog:
  - Fixed bug #169159 (check for argc>0 and argv[0] == NULL, not just
      argv[0][0]='\0')
    Reworked the patch from -8 a bit more.


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-10
changelog:
  - Fixed bug #169159 (don't let python core dump if no arguments are passed in)
    Reworked the patch from -8 a bit more.


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-7
changelog:
  - Fixed bug #169046 (realpath is unsafe); thanks to 
    Peter Jones <pjones@redhat.com> and Arjan van de Ven <arjanv@redhat.com> for
    diagnosing and the patch.


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-2
changelog:
  - Fixed bug #143667 (python should own /usr/lib/python* on 64-bit systems, for
    noarch packages)
  - Fixed bug #143419 (BuildRequires db4 is not versioned)


author: Mihai Ibanescu <misa@redhat.com> 2.4-6
changelog:
  - building the docs from a different source rpm, to decouple bootstrapping
    python from having tetex installed


author: Jeff Johnson <jbj@jbj.org> 2.4-2
changelog:
  - db-4.3.21 returns DB_BUFFER_SMALL rather than ENOMEM (#141994).
  - add Provide: python(abi) = 2.4
  - include msgfmt/pygettext *.pyc and *.pyo from brp-python-bytecompile.


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-10
changelog:
  - Fixed bug #77418 (Demo dir not packaged)
  - More tweaking on #19347 (Moved Tools/ under /usr/lib/python2.3/Tools)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-8
changelog:
  - Fixed bug #129769: Makefile in new python conflicts with older version found
    in old python-devel
  - Reorganized the spec file to get rid of the aspython2 define; __python_ver
    is more powerful.


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-7
changelog:
  - Including html documentation for non-i386 arches
  - Fixed #125362 (python-doc html files have japanese character encoding)
  - Fixed #128923 (missing dependency between python and python-devel)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-6
changelog:
  - Fixed #128030 (help() not printing anything)
  - Fixed #125472 (distutils.sysconfig.get_python_lib() not returning the right
    path on 64-bit systems)
  - Fixed #127357 (building python as a shared library)
  - Fixed  #19347 (including the contents of Tools/scripts/ in python-tools)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-3
changelog:
  - Added an optik.py that provides the same interface from optparse for
    backward compatibility; obsoleting python-optik


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-1
changelog:
  - Updated to 2.3.4-1 with Robert Scheck's help (bug #124764)
  - Added BuildRequires: tix-devel (bug #124918)


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-6
changelog:
  - Correct fix for #122304 from upstream:
    http://sourceforge.net/tracker/?func=detail&atid=105470&aid=931848&group_id=5470


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-4
changelog:
  - Fix for bug #122304 : splitting the domain name fails on 64-bit arches
  - Fix for bug #120879 : including Makefile into the main package

  - Requires XFree86-devel instead of -libs (see bug #118442)


author: Mihai Ibanescu <misa@redhat.com> 2.3-0.2
changelog:
  - Building python 2.3
  - Added more BuildRequires
  - Updated the startup files for modulator and pynche; idle installs its own
    now.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-25
changelog:
  - Fixed bug #84886: pydoc dies when run w/o arguments
  - Fixed bug #84205: add python shm module back (used to be shipped with 1.5.2)
  - Fixed bug #84966: path in byte-compiled code still wrong


author: Jeremy Katz <katzj@redhat.com> 2.2.2-23
changelog:
  - ftp uri's should be able to specify being rooted at the root instead of 
    where you login via ftp (#84692)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-22
changelog:
  - Using newer Japanese codecs (1.4.9). Thanks to 
    Peter Bowen <pzb@datastacks.com> for pointing this out.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-13
changelog:
  - Attempt to look both in /usr/lib64 and /usr/lib/python2.2/site-packages/:
    some work on python-2.2.2-lib64.patch


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-11.7.3
changelog:
  - Fixed bug #82544: Errata removes most tools
  - Fixed bug #82435: Python 2.2.2 errata breaks redhat-config-users
  - Removed .lib64 and - files that get installed after we fix the multilib
    .py files.


author: Jeremy Katz <katzj@redhat.com> 2.2.2-8
changelog:
  - urllib2 didn't support non-anonymous ftp.  add support based on how 
    urllib did it (#80676, #78168)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-7
changelog:
  - Fix bug #79647 (Rebuild of SRPM fails if python isn't installed)
  - Added a bunch of missing BuildRequires found while fixing the
    above-mentioned bug


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.7.3
  - Recompiled for 7.3 (to fix the -lcrypt bug)
  - Fix for the spurious error message at the end of the build (build-requires
    gets confused by executable files starting with """"): make the tests
    non-executable.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-5
  - Fixed configuration patch to add -lcrypt when compiling cryptmodule.c

  2.2.2-4
  - Spec file change from Matt Wilson <msw@redhat.com> to disable linking 
    with the C++ compiler.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.*
  - Merged patch from Karsten Hopp <karsten@redhat.de> from 2.2.1-17hammer to
    use %{_libdir}
  - Added XFree86-libs as BuildRequires (because of tkinter)
  - Fixed duplicate listing of plat-linux2
  - Fixed exclusion of lib-dynload/japanese
  - Added lib64 patch for the japanese codecs
  - Use setup magic instead of using tar directly on JapaneseCodecs


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-2
  - Fix #76912 (python-tools contains idle, which uses tkinter, but there is no
    requirement of tkinter from python-tools).
  - Fix #74013 (rpm is missing the /usr/lib/python2.2/test directory)


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - builds as python2 require a different libdb
  - changed the buildroot name of python to match python2 builds


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-16
changelog:
  - the same, but in builddirs - this will remove them from the 
    docs package, which doesn't look in the buildroot for files.


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-8
changelog:
  - Make files in /usr/bin install side by side with python 1.5 when
  - Drop explicit requirement of db4
    built as python2


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-5
changelog:
  - disable ndbm support, which is db2 in disguise (really interesting things
    can happen when you mix db2 and db4 in a single application)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.11c1
changelog:
  - 2.2 RC 1
  - Don't include the _tkinter module in the main package - it's 
    already in the tkiter packace
  - Turn off the mpzmodule, something broke in the buildroot


author: Matt Wilson <msw@redhat.com> 2.2-0.9b2
changelog:
  - changed DESTDIR to point to / so that distutils will install dynload
    modules properly in the installroot


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.4a4
changelog:
  - 2.2a4
  - Enable UCS4 support
  - Enable IPv6
  - Provide distutils
  - Include msgfmt.py and pygettext.py


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix the "requires" clause, it lacked a space causing problems
  - use %{_tmppath}
  - don't define name, version etc
  - add the available patches from the Python home page


author: Matt Wilson <msw@redhat.com>
changelog:
  - modify all files to use "python2.0" as the intrepter
  - don't build the Expat bindings
  - build against db1


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - updated for 2.0c1
  - build audioop, imageop, and rgbimg extension modules
  - include xml.parsers subpackage
  - add test.xml.out to files list


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - Version 2 of 2.0b1
  - Make the package relocatable.  Thanks to Suchandra Thapa.
  - Exclude Tkinter from main RPM.  If it is in a separate RPM, it is
    easier to track Tk releases.


author: Ville Skyttä <ville.skytta at iki.fi> - 3.3-1
changelog:
  - Update to 3.3.
  - Address minor issues in merge review (#225918): update %description,
    don't use %makeinstall, drop unneeded %debug_package override, use
    parallel build.


author: Matthias Clasen <mclasen@redhat.com> 1.3-1
changelog:
  - Update to 1.3
  - Update the license field
  - Use %find_lang for translations
  - Don't create debuginfo


author: Christopher Aillon <caillon@redhat.com> 0.46-2
changelog:
  - The .pc file should be installed in %{_datadir} instead of %{_libdir}
    since this is a noarch package.  64bit platforms will otherwise look in
    the 64bit version of the %{_libdir} and not find the .pc file and 
    cause them to not find iso-codes


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.9.el6uek]
changelog:
  - KEYS: encrypted: fix buffer overread in valid_master_desc() (Eric Biggers)  [Orabug: 29591025]  {CVE-2017-13305}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.8.el6uek]
changelog:
  - scsi: target: remove hardcoded T10 Vendor ID in INQUIRY response (Alan Adamson)  [Orabug: 29344862]  
  - scsi: target: add device vendor id, product id and revision configfs attributes (Alan Adamson)  [Orabug: 29344862]  
  - scsi: target: consistently null-terminate t10_wwn strings (David Disseldorp)  [Orabug: 29344862]  
  - scsi: target: use consistent left-aligned ASCII INQUIRY data (David Disseldorp)  [Orabug: 29344862]  
  - ext4: fix data corruption caused by unaligned direct AIO (Lukas Czerner)  [Orabug: 29553371]  
  - swiotlb: checking whether swiotlb buffer is full with io_tlb_used (Dongli Zhang)  [Orabug: 29582587]  
  - swiotlb: add debugfs to track swiotlb buffer usage (Dongli Zhang)  [Orabug: 29582587]  
  - swiotlb: fix comment on swiotlb_bounce() (Dongli Zhang)  [Orabug: 29582587]  
  - NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success. (NeilBrown)  [Orabug: 29617508]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.7.el6uek]
changelog:
  - ib_core: initialize shpd field when allocating 'struct ib_pd' (Mukesh Kacker)  [Orabug: 29384815]  
  - Revert "x86/apic: Make arch_setup_hwirq NUMA node aware" (Brian Maly)  [Orabug: 29542185]  
  - qlcnic: fix Tx descriptor corruption on 82xx devices (Shahed Shaikh)  [Orabug: 27708787]  
  - block: Fix a race between blk_cleanup_queue() and timeout handling (Bart Van Assche)  [Orabug: 29158186]  
  - can: gw: ensure DLC boundaries after CAN frame modification (Oliver Hartkopp)  [Orabug: 29215299]  {CVE-2019-3701} {CVE-2019-3701} 
  - CIFS: Enable encryption during session setup phase (Pavel Shilovsky)  [Orabug: 29338239]  {CVE-2018-1066} 
  - ext4: clear i_data in ext4_inode_info when removing inline data (Theodore Ts'o)  [Orabug: 29540709]  {CVE-2018-10881} {CVE-2018-10881} 
  - ext4: add more inode number paranoia checks (Theodore Ts'o)  [Orabug: 29545566]  {CVE-2018-10882} {CVE-2018-10882} 
  - Revert "KVM: nVMX: Eliminate vmcs02 pool" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM: VMX: introduce alloc_loaded_vmcs" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM: VMX: make MSR bitmaps per-VCPU" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM: x86: pass host_initiated to functions that read MSRs" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM/x86: Add IBPB support" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL - reloaded" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM: SVM: Add MSR-based feature support for serializing LFENCE" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "x86/cpufeatures: rename X86_FEATURE_AMD_SSBD to X86_FEATURE_LS_CFG_SSBD" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "x86/bugs: Add AMD's SPEC_CTRL MSR usage" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR" (Boris Ostrovsky)  [Orabug: 29542029]  
  - arch: x86: remove unsued SET_IBPB from spec_ctrl.h (Mihai Carabas)  [Orabug: 29336760]  
  - x86: cpu: microcode: fix late loading SpectreV2 bugs eval (Mihai Carabas)  [Orabug: 29336760]  
  - x86: cpu: microcode: fix late loading SSBD and L1TF bugs eval (Mihai Carabas)  [Orabug: 29336760]  
  - x86: cpu: microcode: Re-evaluate bugs in a CPU after microcode loading (Mihai Carabas)  [Orabug: 29336760]  
  - x86: cpu: microcode: update flags for all cpus (Mihai Carabas)  [Orabug: 29336760]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.5.el6uek]
changelog:
  - scsi: scsi_transport_iscsi: modify detected conn err to KERN_ERR (Fred Herard)  [Orabug: 29487790]  
  - xen/blkfront: avoid NULL blkfront_info dereference on device removal (Vasilis Liaskovitis)  [Orabug: 29469740]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.4U.el6uek]
changelog:
  - bnxt_en: Fix race conditions in .ndo_get_stats64(). (Michael Chan)  [Orabug: 29129625]  
  - ext4: always verify the magic number in xattr blocks (Theodore Ts'o)  [Orabug: 29437127]  {CVE-2018-10879} {CVE-2018-10879} 
  - ext4: add corruption check in ext4_xattr_set_entry() (Theodore Ts'o)  [Orabug: 29437127]  {CVE-2018-10879} {CVE-2018-10879} 
  - net: add netif_is_lag_port helper (Jiri Pirko)  [Orabug: 29495360]  
  - net: add netif_is_lag_master helper (Jiri Pirko)  [Orabug: 29495360]  
  - net: add netif_is_team_port helper (Jiri Pirko)  [Orabug: 29495360]  
  - net: add netif_is_team_master helper (Jiri Pirko)  [Orabug: 29495360]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.1.12-124.26.3.el6uek]
changelog:
  - scsi: scsi_transport_iscsi: redirect conn error to console (Fred Herard)  [Orabug: 29469714]  
  - Revert x86/apic/x2apic: set affinity of a single interrupt to one cpu (Mridula Shastry)  [Orabug: 29449976]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.2.el6uek]
changelog:
  - jiffies: use jiffies64_to_nsecs() to fix 100% steal usage for xen vcpu hotplug (Dongli Zhang)  [Orabug: 28806208]  
  - time: Introduce jiffies64_to_nsecs() (Frederic Weisbecker)  [Orabug: 28806208]  
  - net_failover: delay taking over primary device to accommodate udevd renaming (Si-Wei Liu)   
  - fs/dcache.c: add cond_resched() in shrink_dentry_list() (Nikolay Borisov)  [Orabug: 29412146]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.1.el6uek]
changelog:
  - NFS: commit direct writes even if they fail partially (J. Bruce Fields)  [Orabug: 28212440]  
  - rds: update correct congestion map for loopback transport (Mukesh Kacker)  [Orabug: 29175685]  
  - ext4: only look at the bg_flags field if it is valid (Theodore Ts'o)  [Orabug: 29316684]  {CVE-2018-10876} {CVE-2018-10876} 
  - uek-rpm: Add kernel-uek version to kernel-ueknano provides (Somasundaram Krishnasamy)  [Orabug: 29357643]  
  - net: Set sk_prot_creator when cloning sockets to the right proto (Christoph Paasch)  [Orabug: 29422739]  {CVE-2018-9568} 
  - ext4: always check block group bounds in ext4_init_block_bitmap() (Theodore Ts'o)  [Orabug: 29428607]  {CVE-2018-10878} 
  - ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Theodore Ts'o)  [Orabug: 29428607]  {CVE-2018-10878} 
  - vfs: Add sb_rdonly(sb) to query the MS_RDONLY flag on s_flags (David Howells)  [Orabug: 29428607]  {CVE-2018-10878} 
  - iscsi: Capture iscsi debug messages using tracepoints (Fred Herard)  [Orabug: 29429855]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.25.4.el6uek]
changelog:
  - KEYS: add missing permission check for request_key() destination (Eric Biggers)  [Orabug: 29304551]  {CVE-2017-17807} 
  - KEYS: Don't permit request_key() to construct a new keyring (David Howells)  [Orabug: 29304551]  {CVE-2017-17807} 
  - mlx4_ib: Distribute completion vectors when zero is supplied (Håkon Bugge)  [Orabug: 29318191]  
  - bnxt_en: Fix TX timeout during netpoll. (Michael Chan)  [Orabug: 29357977]  
  - bnxt_en: Fix for system hang if request_irq fails (Vikas Gupta)  [Orabug: 29357977]  
  - bnxt_en: Fix firmware message delay loop regression. (Michael Chan)  [Orabug: 29357977]  
  - bnxt_en: reduce timeout on initial HWRM calls (Andy Gospodarek)  [Orabug: 29357977]  
  - bnxt_en: Fix NULL pointer dereference at bnxt_free_irq(). (Michael Chan)  [Orabug: 29357977]  
  - bnxt_en: Check valid VNIC ID in bnxt_hwrm_vnic_set_tpa(). (Michael Chan)  [Orabug: 29357977]  
  - bnxt_en: Do not modify max IRQ count after RDMA driver requests/frees IRQs. (Michael Chan)  [Orabug: 29357977]  
  - mm: cleancache: fix corruption on missed inode invalidation (Pavel Tikhomirov)  [Orabug: 29364670]  {CVE-2018-16862} 
  - l2tp: fix reading optional fields of L2TPv3 (Jacob Wen)  [Orabug: 29368048]  
  - net/packet: fix a race in packet_bind() and packet_notifier() (Eric Dumazet)  [Orabug: 29385593]  {CVE-2018-18559} 
  - ext4: verify the depth of extent tree in ext4_find_extent() (Theodore Ts'o)  [Orabug: 29396712]  {CVE-2018-10877} {CVE-2018-10877}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.25.3.el6uek]
changelog:
  - blk-mq: Do not invoke .queue_rq() for a stopped queue (Bart Van Assche)  [Orabug: 28766011]  
  - uek-rpm: use multi-threaded xz compression for rpms (Alexander Burmashev)  [Orabug: 29323635]  
  - uek-rpm: optimize find-requires usage (Alexander Burmashev)  [Orabug: 29323635]  
  - find-debuginfo.sh: backport parallel files procession (Alexander Burmashev)  [Orabug: 29323635]  
  - KVM: SVM: Add MSR-based feature support for serializing LFENCE (Tom Lendacky)  [Orabug: 29335274]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.25.2.el6uek]
changelog:
  - Enable RANDOMIZE_BASE (John Haxby)  [Orabug: 29305587]  
  - slub: make ->cpu_partial unsigned (Alexey Dobriyan)  [Orabug: 28620592]  
  - dtrace: support kernels built with RANDOMIZE_BASE (Kris Van Hees)  [Orabug: 29204005]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.25.1.el6uek]
changelog:
  - x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR (Tom Lendacky)  [Orabug: 28870524]  {CVE-2018-3639} 
  - x86/bugs: Add AMD's SPEC_CTRL MSR usage (Konrad Rzeszutek Wilk)  [Orabug: 28870524]  {CVE-2018-3639} 
  - x86/cpufeatures: rename X86_FEATURE_AMD_SSBD to X86_FEATURE_LS_CFG_SSBD (Mihai Carabas)  [Orabug: 28870524]  {CVE-2018-3639} 
  - Make file credentials available to the seqfile interfaces (Linus Torvalds)  [Orabug: 29114879]  {CVE-2018-17972} 
  - proc: restrict kernel stack dumps to root (Jann Horn)  [Orabug: 29114879]  {CVE-2018-17972} 
  - x86/speculation: Clean up retpoline code in bugs.c (Alejandro Jimenez)  [Orabug: 29211617]  
  - x86, modpost: Replace last remnants of RETPOLINE with CONFIG_RETPOLINE (WANG Chao)  [Orabug: 29211617]  
  - x86/build: Fix compiler support check for CONFIG_RETPOLINE (Masahiro Yamada)  [Orabug: 29211617]  
  - x86/retpoline: Remove minimal retpoline support (Zhenzhong Duan)  [Orabug: 29211617]  
  - x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support (Zhenzhong Duan)  [Orabug: 29211617]  
  - nl80211: check for the required netlink attributes presence (Vladis Dronov)  [Orabug: 29245533]  {CVE-2017-12153} {CVE-2017-12153} 
  - scsi: lpfc: Fix PT2PT PRLI reject (reapply patch) (James Smart)  [Orabug: 29281346]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.5.el6uek]
changelog:
  - rds: congestion updates can be missed when kernel low on memory (Mukesh Kacker)  [Orabug: 28425811]  
  - net/rds: ib: Fix endless RNR Retries caused by memory allocation failures (Venkat Venkatsubra)  [Orabug: 28127993]  
  - net: rds: fix excess initialization of the recv SGEs (Zhu Yanjun)  [Orabug: 29004503]  
  - xhci: fix usb2 resume timing and races. (Mathias Nyman)  [Orabug: 29028940]  
  - xhci: Fix a race in usb2 LPM resume, blocking U3 for usb2 devices (Mathias Nyman)  [Orabug: 29028940]  
  - userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli)  [Orabug: 29163750]  {CVE-2018-18397} 
  - userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli)  [Orabug: 29163750]  {CVE-2018-18397} 
  - x86/apic/x2apic: set affinity of a single interrupt to one cpu (Jianchao Wang)  [Orabug: 29196396]  
  - xen/blkback: rework validate_io_op() (Dongli Zhang)  [Orabug: 29199843]  
  - xen/blkback: optimize validate_io_op() to filter BLKIF_OP_RESERVED_1 operation (Dongli Zhang)  [Orabug: 29199843]  
  - xen/blkback: do not BUG() for invalid blkif_request from frontend (Dongli Zhang)  [Orabug: 29199843]  
  - net/rds: WARNING: at net/rds/recv.c:222 rds_recv_hs_exthdrs+0xf8/0x1e0 (Venkat Venkatsubra)  [Orabug: 29201779]  
  - xen-netback: wake up xenvif_dealloc_kthread when it should stop (Dongli Zhang)  [Orabug: 29217927]  
  - Revert "xfs: remove nonblocking mode from xfs_vm_writepage" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: remove xfs_cancel_ioend" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: Introduce writeback context for writepages" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: xfs_cluster_write is redundant" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: factor mapping out of xfs_do_writepage" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: don't chain ioends during writepage submission" (Wengang Wang)  [Orabug: 29279692]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.4.el6uek]
changelog:
  - mstflint: Fix coding style issues - left with LINUX_VERSION_CODE (Idan Mehalel)  [Orabug: 28878697]  
  - mstflint: Fix coding-style issues (Idan Mehalel)  [Orabug: 28878697]  
  - mstflint: Fix errors found with checkpatch script (Idan Mehalel)  [Orabug: 28878697]  
  - Added support for 5th Gen devices in Secure Boot module and mtcr (Adham Masarwah)  [Orabug: 28878697]  
  - Fix typos in mst_kernel (Adham Masarwah)  [Orabug: 28878697]  
  - bnxt_en: Report PCIe link properties with pcie_print_link_status() (Brian Maly)  [Orabug: 28942099]  
  - selinux: Perform both commoncap and selinux xattr checks (Eric W. Biederman)  [Orabug: 28951521]  
  - Introduce v3 namespaced file capabilities (Serge E. Hallyn)  [Orabug: 28951521]  
  - rds: ib: Use a delay when reconnecting to the very same IP address (Håkon Bugge)  [Orabug: 29138813]  
  - Change mincore() to count "mapped" pages rather than "cached" pages (Linus Torvalds)  [Orabug: 29187415]  {CVE-2019-5489} 
  - NFSD: Set the attributes used to store the verifier for EXCLUSIVE4_1 (Kinglong Mee)  [Orabug: 29204157]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.3.el6uek]
changelog:
  - ext4: update i_disksize when new eof exceeds it (Shan Hai)  [Orabug: 28940828]  
  - ext4: update i_disksize if direct write past ondisk size (Eryu Guan)  [Orabug: 28940828]  
  - ext4: protect i_disksize update by i_data_sem in direct write path (Eryu Guan)  [Orabug: 28940828]  
  - ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c (Hui Peng)  [Orabug: 29042981]  {CVE-2018-19824} 
  - ALSA: usb-audio: Replace probing flag with active refcount (Takashi Iwai)  [Orabug: 29042981]  {CVE-2018-19824} 
  - ALSA: usb-audio: Avoid nested autoresume calls (Takashi Iwai)  [Orabug: 29042981]  {CVE-2018-19824} 
  - ext4: validate that metadata blocks do not overlap superblock (Theodore Ts'o)  [Orabug: 29114440]  {CVE-2018-1094} 
  - ext4: update inline int ext4_has_metadata_csum(struct super_block *sb) (John Donnelly)  [Orabug: 29114440]  {CVE-2018-1094} 
  - ext4: always initialize the crc32c checksum driver (Theodore Ts'o)  [Orabug: 29114440]  {CVE-2018-1094} {CVE-2018-1094} 
  - Revert "bnxt_en: Reduce default rings on multi-port cards." (Brian Maly)  [Orabug: 28687746]  
  - mlx4_core: Disable P_Key Violation Traps (Håkon Bugge)  [Orabug: 27693633]  
  - rds: RDS connection does not reconnect after CQ access violation error (Venkat Venkatsubra)  [Orabug: 28733324]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.2.el6uek]
changelog:
  - KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL (KarimAllah Ahmed)  [Orabug: 28069548]  
  - KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL - reloaded (Mihai Carabas)  [Orabug: 28069548]  
  - KVM/x86: Add IBPB support (Ashok Raj)  [Orabug: 28069548]  
  - KVM: x86: pass host_initiated to functions that read MSRs (Paolo Bonzini)  [Orabug: 28069548]  
  - KVM: VMX: make MSR bitmaps per-VCPU (Paolo Bonzini)  [Orabug: 28069548]  
  - KVM: VMX: introduce alloc_loaded_vmcs (Paolo Bonzini)  [Orabug: 28069548]  
  - KVM: nVMX: Eliminate vmcs02 pool (Jim Mattson)  [Orabug: 28069548]  
  - KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0 x2APIC (Radim Krčmář)  [Orabug: 28069548]  
  - ocfs2: don't clear bh uptodate for block read (Junxiao Bi)  [Orabug: 28762940]  
  - ocfs2: clear journal dirty flag after shutdown journal (Junxiao Bi)  [Orabug: 28924775]  
  - ocfs2: fix panic due to unrecovered local alloc (Junxiao Bi)  [Orabug: 28924775]  
  - net: rds: fix rds_ib_sysctl_max_recv_allocation error (Zhu Yanjun)  [Orabug: 28947481]  
  - x86/speculation: Always disable IBRS in disable_ibrs_and_friends() (Alejandro Jimenez)  [Orabug: 29139710]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.1.el6uek]
changelog:
  - pinctrl: amd: Use devm_pinctrl_register() for pinctrl registration (Laxman Dewangan)  [Orabug: 27539246]  {CVE-2017-18174} 
  - mlock: fix mlock count can not decrease in race condition (Yisheng Xie)  [Orabug: 27677611]  {CVE-2017-18221} 
  - perf/core: Fix the perf_cpu_time_max_percent check (Tan Xiaojun)  [Orabug: 27823815]  {CVE-2017-18255} 
  - x86/microcode/intel: Fix a wrong assignment of revision in _save_mc (Zhenzhong Duan)  [Orabug: 28190263]  
  - mm: cma: fix incorrect type conversion for size during dma allocation (Rohit Vaswani)  [Orabug: 28407826]  {CVE-2017-9725} 
  - x86/speculation: Make enhanced IBRS the default spectre v2 mitigation (Alejandro Jimenez)  [Orabug: 28474851]  
  - x86/speculation: Enable enhanced IBRS usage (Alejandro Jimenez)  [Orabug: 28474851]  
  - x86/speculation: functions for supporting enhanced IBRS (Alejandro Jimenez)  [Orabug: 28474851]  
  - xen/blkback: fix disconnect while I/Os in flight (Juergen Gross)  [Orabug: 28744234]  
  - mlx4_vnic: use the mlid while calling ib_detach_mcast (aru kolappan)  [Orabug: 29029705]  
  - ext4: fail ext4_iget for root directory if unallocated (Theodore Ts'o)  [Orabug: 29048557]  {CVE-2018-1092} {CVE-2018-1092} 
  - Bluetooth: hidp: buffer overflow in hidp_process_report (Mark Salyzyn)  [Orabug: 29121215]  {CVE-2018-9363} {CVE-2018-9363} 
  - HID: debug: check length before copy_to_user() (Daniel Rosenberg)  [Orabug: 29128165]  {CVE-2018-9516} 
  - x86/MCE: Serialize sysfs changes (Seunghun Han)  [Orabug: 29149888]  {CVE-2018-7995} 
  - Input: i8042 - fix crash at boot time (Chen Hong)  [Orabug: 29152328]  {CVE-2017-18079}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.4.el6uek]
changelog:
  - base/memory, hotplug: fix a kernel oops in show_valid_zones() (Toshi Kani)  [Orabug: 29050538]  
  - mm/memory_hotplug.c: check start_pfn in test_pages_in_a_zone() (Toshi Kani)  [Orabug: 29050538]  
  - drivers/base/memory.c: prohibit offlining of memory blocks with missing sections (Seth Jennings)  [Orabug: 29050538]  
  - mm: Check if section present during memory block (un)registering (Yinghai Lu)  [Orabug: 29050538]  
  - hugetlb: take PMD sharing into account when flushing tlb/caches (Mike Kravetz)  [Orabug: 28951854]  
  - mm: migration: fix migration of huge PMD shared pages (Mike Kravetz)  [Orabug: 28951854]  
  - hugetlbfs: use truncate mutex to prevent pmd sharing race (Mike Kravetz)  [Orabug: 28896255]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.3.el6uek]
changelog:
  - rds: ib: Improve tracing during failover/back (Håkon Bugge)  [Orabug: 28860366]  
  - rds: ib: Remove superfluous add of address on fail-back device (Håkon Bugge)  [Orabug: 28860366]  
  - libiscsi: Fix NULL pointer dereference in iscsi_eh_session_reset (Fred Herard)  [Orabug: 28946207]  
  - wil6210: missing length check in wmi_set_ie (Lior David)  [Orabug: 28951265]  {CVE-2018-5848} 
  - netfilter: xt_osf: Add missing permission checks (Kevin Cernekee)  [Orabug: 29037831]  {CVE-2017-17450} 
  - x86/speculation: Fix bad argument to rdmsrl() in cpu_set_bug_bits() (Alejandro Jimenez)  [Orabug: 29044805]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.2.el6uek]
changelog:
  - n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Linus Torvalds)  [Orabug: 28855335]  {CVE-2018-18386} 
  - nfs: Don't take a reference on fl->fl_file for LOCK operation (Benjamin Coddington)  [Orabug: 28887442]  
  - x86/topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Samuel Neves)  [Orabug: 28933009]  
  - ALSA: seq: Fix regression by incorrect ioctl_mutex usages (Takashi Iwai)  [Orabug: 29005188]  {CVE-2018-1000004} 
  - net: phy: mdio-bcm-unimac: fix potential NULL dereference in unimac_mdio_probe() (Wei Yongjun)  [Orabug: 29012346]  {CVE-2018-8043}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.1.el6uek]
changelog:
  - xfs: don't call xfs_da_shrink_inode with NULL bp (Eric Sandeen)  [Orabug: 28898616]  {CVE-2018-13094} 
  - ALSA: rawmidi: Change resized buffers atomically (Takashi Iwai)  [Orabug: 28898636]  {CVE-2018-10902} 
  - md/raid5: fix a race condition in stripe batch (Shaohua Li)  [Orabug: 28917012]  
  - xfs: don't fail when converting shortform attr to long form during ATTR_REPLACE (Darrick J. Wong)  [Orabug: 28924091]  {CVE-2018-18690} 
  - certs: Add Oracle's new X509 cert into the kernel keyring (Eric Snowberg)  [Orabug: 28926203]  
  - block: fix bdi vs gendisk lifetime mismatch (Shan Hai)  [Orabug: 28945039]  
  - Add the following entries to 'uek-rpm/ol[67]/nano_modules.list': kernel/drivers/net/net_failover.ko kernel/net/core/failover.ko Fixes: b3bc7c163fc9 ('net: Introduce generic failover module') (Vijay Balakrishna)  [Orabug: 28953351]  
  - floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl (Andy Whitcroft)  [Orabug: 28956547]  {CVE-2018-7755} {CVE-2018-7755} 
  - iov_iter: don't revert iov buffer if csum error (Ding Tianhong)  [Orabug: 28960296]  
  - crypto: salsa20 - fix blkcipher_walk API usage (Eric Biggers)  [Orabug: 28976583]  {CVE-2017-17805} 
  - crypto: hmac - require that the underlying hash algorithm is unkeyed (Eric Biggers)  [Orabug: 28976653]  {CVE-2017-17806}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.22.4.el6uek]
changelog:
  - Revert commit 8bd274934987 ("block: fix bdi vs gendisk lifetime mismatch") (Ashish Samant)  [Orabug: 28968102]  
  - KVM/x86: Add IBPB support (Ashok Raj)  [Orabug: 28703712]  
  - x86/intel/spectre_v2: Remove unnecessary retp_compiler() test (Boris Ostrovsky)  [Orabug: 28814570]  
  - x86/intel/spectre_v4: Deprecate spec_store_bypass_disable=userspace (Boris Ostrovsky)  [Orabug: 28814570]  
  - x86/speculation: x86_spec_ctrl_set needs to be called unconditionally (Boris Ostrovsky)  [Orabug: 28814570]  
  - x86/speculation: Drop unused DISABLE_IBRS_CLOBBER macro (Boris Ostrovsky)  [Orabug: 28814570]  
  - x86/intel/spectre_v4: Keep SPEC_CTRL_SSBD when IBRS is in use (Boris Ostrovsky)  [Orabug: 28814570]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.22.3.el6uek]
changelog:
  - net: net_failover: fix typo in net_failover_slave_register() (Liran Alon)  [Orabug: 28122104]  
  - virtio_net: Extend virtio to use VF datapath when available (Sridhar Samudrala)  [Orabug: 28122104]  
  - virtio_net: Introduce VIRTIO_NET_F_STANDBY feature bit (Sridhar Samudrala)  [Orabug: 28122104]  
  - net: Introduce net_failover driver (Sridhar Samudrala)  [Orabug: 28122104]  
  - net: Introduce generic failover module (Sridhar Samudrala)  [Orabug: 28122104]  
  - net: introduce lower state changed info structure for LAG lowers (Jiri Pirko)  [Orabug: 28122104]  
  - net: introduce change lower state notifier (Jiri Pirko)  [Orabug: 28122104]  
  - net: add info struct for LAG changeupper (Jiri Pirko)  [Orabug: 28122104]  
  - net: add possibility to pass information about upper device via notifier (Jiri Pirko)  [Orabug: 28122104]  
  - net: Check CHANGEUPPER notifier return value (Ido Schimmel)  [Orabug: 28122104]  
  - net: introduce change upper device notifier change info (Jiri Pirko)  [Orabug: 28122104]  
  - x86/bugs: rework x86_spec_ctrl_set to make its changes explicit (Daniel Jordan)  [Orabug: 28271063]  
  - x86/bugs: rename ssbd_ibrs_selected to ssbd_userspace_selected (Daniel Jordan)  [Orabug: 28271063]  
  - x86/bugs: always use x86_spec_ctrl_base or _priv when setting spec ctrl MSR (Daniel Jordan)  [Orabug: 28271063]  
  - xen-blkfront: fix kernel panic with negotiate_mq error path (Manjunath Patil)  [Orabug: 28798861]  
  - scsi: lpfc: Correct MDS diag and nvmet configuration (James Smart)  [Orabug: 28855939]  
  - scsi: virtio_scsi: let host do exception handling (Paolo Bonzini)  [Orabug: 28856913]  
  - net/rds: Fix endless RNR situation (Venkat Venkatsubra)  [Orabug: 28857027]  
  - scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() (Alexander Potapenko)  [Orabug: 28892656]  {CVE-2018-1000204} 
  - cdrom: fix improper type cast, which can leat to information leak. (Young_X)  [Orabug: 28929767]  {CVE-2018-16658} {CVE-2018-10940} {CVE-2018-18710}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.22.2.el6uek]
changelog:
  - oracleasm: Honor ASM_IFLAG_FORMAT_NOCHECK flag (Martin K. Petersen)  [Orabug: 28650922]  
  - oracleasm: Implement support for QUERY HANDLE operation (Martin K. Petersen)  [Orabug: 28650922]  
  - KVM: MTRR: remove MSR 0x2f8 (Andy Honig)  [Orabug: 23276795]  {CVE-2016-3713} {CVE-2016-3713} 
  - x86/cpu/amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit)  [Orabug: 28783929]  
  - x86/CPU/AMD: Fix Bulldozer topology (Borislav Petkov)  [Orabug: 28783929]  
  - x86/cpu/AMD: Clean up cpu_llc_id assignment per topology feature (Yazen Ghannam)  [Orabug: 28783929]  
  - x86/cpu: Get rid of compute_unit_id (Borislav Petkov)  [Orabug: 28783929]  
  - x86/topology: Fix AMD core count (Peter Zijlstra)  [Orabug: 28783929]  
  - perf/x86/amd: Move nodes_per_socket into bsp_init_amd() (Huang Rui)  [Orabug: 28783929]  
  - x86/cpu/amd: Give access to the number of nodes in a physical package (Aravind Gopalakrishnan)  [Orabug: 28783929]  
  - ocfs2: should wait dio before inode lock in ocfs2_setattr() (alex chen)  [Orabug: 28852806]  {CVE-2017-18204} 
  - Update dracut version requirement within the kernel (Jie Li)  [Orabug: 28873097]


author: Karel Klic <kklic@redhat.com> - 1.8.0-34
changelog:
  - -jbj patch replaced with -zeroheaders, which extends the header zeroing
    and also zeroes the buckets (#572601)
  - Fixed a memory leak in gdbm_reorganize(gdb) (rhbz#572598)
  - Handle read() returning less data than it was asked for (rhbz#572900)
  - Remove static builds from the devel package (#556050)
  - Moved autotools reinitialization from %build to %prep section


author: Stepan Kasal <skasal@redhat.com> - 1.8.0-31
changelog:
  - drop *-cflags.patch, move all makefile fixes to *-fhs.patch
  - propagate libdir to Makefile; no need to set it on cmdline


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.0-18.1
changelog:
  - run make with libdir overridden so that it has the value passed to configure
    instead of $(prefix)/lib


author: Ray Strode <rstrode@redhat.com> 0.9-2
changelog:
  - Remove Prereq on gtk.  Prereq's complicate things,
    and the gtk-update-icon-cache is already protected by
    [ -x  ... ]


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 1.5.7-0.2.gbd7e502.0.2
changelog:
  - ibutils: Fix for CVE-2013-2561 (use /var/cache/ibutils not /tmp) (Mukesh Kacker)  
  - ibutils: add support for Oracle Linux 7 (OL7) builds (Mukesh Kacker)  
  - ibutils: Fix Changelog date problems inherited from upstream (Mukesh Kacker)


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-42
changelog:
  - fix for RH bug #1210704 ("Remove stray include in krb5's
    localauth_plugin.h"). This unnecessary #include statement
    was causing build failures on some systems by making libkrb5
    sources depend on gssapi.h (and as result to libcom_err,
    too).


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-40
changelog:
  - fix for CVE-2014-5355 (#1193939) "krb5: unauthenticated
    denial of service in recvauth_common() and others"


author: - Roland Mainz <rmainz@redhat.com> - 1.10.3-39
changelog:
  - Backout patch #137 for krbdev #7996 ("Simplify and improve
    ksu cred verification" - see 1.10.3-36) for now until we
    figure out how to get this working.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-38
changelog:
  - Backported krbdev #7868 ("Use preauth options when changing
    password") from krb-1.13 to fix RH bug #1075656 ("krb5
    client ignores FAST settings for changepw requests"):
    If we try to change the password in
    |rb5_get_init_creds_password()|, we must use all
    application-specified gic options which affect
    preauthentication when getting the kadmin/changepw ticket.
    Create a helper function |make_chpw_options()| which copies
    the application's options, unsets the options we don't want,
    and sets options appropriate for a temporary ticket.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-37
changelog:
  - Backported krb5-1.12.2 changes for |getclhoststr()|
    to fix RH bug #1154130 ("kadmind (Error): iprop_full_resync_1:
    getclhoststr failed").


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-36
changelog:
  - Backported krbdev #7996 ("Simplify and improve ksu cred
    verification"; cherry-picked from upstream
    bbfe19f03bdeca7b05b542dbae4c1692c9800c70) to fix RH bug
      less than 5 mins"): When verifying the user's initial
    credentials, don't compute a server name and preemptively
    obtain creds for it. This change allows
    |krb5_verify_init_creds()| to use any host key in the
    keytab, and not just the one for the canonicalized local
    hostname.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-35
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"


author: Roland Mainz <roland.mainz@nrubsig.org> 1.10.3-34
changelog:
  - Backport of krb1.12 localauth plugin support
    See krb5-1.10-localauth_backport.patch for porting comments.


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-31
changelog:
  - ksu: when evaluating .k5users, don't throw away data from .k5users when we're
    not passed a command to run, which implicitly means we're attempting to run
    the target user's shell (#1026721, revised)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-30
changelog:
  - ksu: when evaluating .k5users, treat lines with just a principal name as if
    they contained the principal name followed by '*', and don't throw away data
    from .k5users when we're not passed a command to run, which implicitly means
    we're attempting to run the target user's shell (#1026721, revised)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-29
changelog:
  - gssapi: pull in upstream fix for a possible NULL dereference in spnego
    (CVE-2014-4344, #1121510)
  - gssapi: pull in proposed-and-accepted fix for a double free in initiators
    (David Woodhouse, CVE-2014-4343, #1121510)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-27
changelog:
  - pull in backported fix for denial of service by injection of malformed
    GSSAPI tokens (CVE-2014-4341, CVE-2014-4342, #1121510)
  - incorporate backported patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800, more of


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-26
changelog:
  - pull in backport of patch to not subsequently always require that responses
    come from master KDCs if we get one from a master somewhere along the way
    while chasing referrals (RT#7650, #1113652)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-25
changelog:
  - ksu: if the -e flag isn't used, use the target user's shell when checking
    for authorization via the target user's .k5users file (#1026721)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-23
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1087068, RT#7858)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-22
changelog:
  - add patch from Jatin Nansi to avoid attempting to clear memory at the
    NULL address if krb5_encrypt_helper() returns an error when called
    from encrypt_credencpart() (#1055329, pull #158)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-21
changelog:
  - drop patch to add additional access() checks to ksu - they shouldn't be
    resulting in any benefit


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-20
changelog:
  - apply patch from Nikolai Kondrashov to pass a default realm set in
    /etc/sysconfig/krb5kdc to the kdb_check_weak helper, so that it doesn't
    produce an error if there isn't one set in krb5.conf (#1009389)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-19
changelog:
  - packaging: don't Obsoletes: older versions of krb5-pkinit-openssl and
    virtual Provide: krb5-pkinit-openssl on EL6, where we don't need to
    bother with any of that (#1001961)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-18
changelog:
  - pkinit: backport tweaks to avoid trying to call the prompter callback
    when one isn't set (part of #965721)
  - pkinit: backport the ability to use a prompter callback to prompt for
    a password when reading private keys (the rest of #965721)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-17
changelog:
  - backport fix to not spin on a short read when reading the length of a
    response over TCP (RT#7508, #922884)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-16
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1070244)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-14
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-13
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950343)
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917910)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917910, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-11
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#911147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10
changelog:
  - make -server conflict with older versions of SELinux policy that didn't
    allow us to use eventfds, which libverto's backend may depend on in order
    to properly shut down a multi-worker KDC (#871524)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-9
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-8
changelog:
  - untag a couple of other patches which don't strictly need to apply during
    %{?_rawbuild} builds (more of #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz, #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-7
changelog:
  - selinux: hang on to the list of selinux contexts, freeing and reloading
    it only when the file we read it from is modified, freeing it when the
    shared library is being unloaded (#845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-6
changelog:
  - go back to not messing with library file paths on Fedora 17: it breaks
    file path dependencies in other packages, and since Fedora 17 is already
    released, breaking that is our fault


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-5
changelog:
  - add upstream patch to fix freeing an uninitialized pointer and dereferencing
    another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
    and CVE-2012-1015, #844779 and #844777)
  - fix a thinko in whether or not we mess around with devel .so symlinks on
    systems without a separate /usr (sbose)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-3
changelog:
  - backport a fix to allow a PKINIT client to handle SignedData from a KDC
    that's signed with a certificate that isn't in the SignedData, but which
    is available as an anchor or intermediate on the client (RT#7183)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-2
changelog:
  - back out this labeling change (dwalsh):
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-1
changelog:
  - update to 1.10.2
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user
    - also package the PDF format admin, user, and install guides
    - drop some PDFs that no longer get built right
  - add a backport of Stef's patch to set the client's list of supported
    enctypes to match the types of keys that we have when we are using a
    keytab to try to get initial credentials, so that a KDC won't send us
    an AS reply that we can't encrypt (RT#2131, #748528)
  - don't shuffle around any shared libraries on releases with no-separate-/usr,
    since /usr/lib is the same place as /lib
  - add explicit buildrequires: on 'hostname', for the tests, on systems where
    it's in its own package, and require net-tools, which used to provide the
    command, everywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
changelog:
  - have -server require /usr/share/dict/words, which we set as the default
    dict_file in kdc.conf (#817089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-2
changelog:
  - change back dns_lookup_kdc to the default setting (Stef Walter, #805318)
  - comment out example.com examples in default krb5.conf (Stef Walter, #805320)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-1
changelog:
  - update to 1.10.1
    - drop the KDC crash fix
    - drop the KDC lookaside cache fix
    - drop the fix for kadmind RPC ACLs (CVE-2012-1012)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-5
changelog:
  - when removing -workstation, remove our files from the info index while
    the file is still there, in %preun, rather than %postun, and use the
    compressed file's name (#801035)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-2
changelog:
  - add patch to accept keytab entries with vno==0 as matches when we're
    searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha2.2
changelog:
  - modify the deltat grammar to also tell gcc (4.7) to suppress
    "maybe-uninitialized" warnings in addition to the "uninitialized" warnings
    it's already being told to suppress (RT#7080)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.3
changelog:
  - pull in patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761317)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761317)
  - pull in patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761317)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.2
changelog:
  - apply upstream patch to fix a null pointer dereference when processing
    TGS requests (CVE-2011-1530, #753748)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.0
changelog:
  - update to 1.10 alpha 1
  - on newer releases where we can assume NSS >= 3.13, configure PKINIT to build
    using NSS
  - on newer releases where we build PKINIT using NSS, configure libk5crypto to
    build using NSS
  - rename krb5-pkinit-openssl to krb5-pkinit on newer releases where we're
    expecting to build PKINIT using NSS instead
  - during %check, run check in the library and kdc subdirectories, which
    should be able to run inside of the build system without issue


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-18
changelog:
  - apply upstream patch to fix a null pointer dereference with the LDAP kdb
    backend (CVE-2011-1527, #744125), an assertion failure with multiple kdb
    backends (CVE-2011-1528), and a null pointer dereference with multiple kdb
    backends (CVE-2011-1529) (#737711)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-17
changelog:
  - pull in patch from trunk to rename krb5int_pac_sign() to krb5_pac_sign() and
    make it public (#745533)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-16
changelog:
  - kadmin.service: fix #723723 again
  - kadmin.service,krb5kdc.service: remove optional use of $KRB5REALM in command
    lines, because systemd parsing doesn't handle alternate value shell variable
    syntax
  - kprop.service: add missing Type=forking so that systemd doesn't assume simple
  - kprop.service: expect the ACL configuration to be there, not absent
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#739853)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-12
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth (#734341)
  - pull in build-time deps for the tests


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-10
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-9
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-8
changelog:
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS
  - pull in a patch to fix losing track of the replay cache FD, from SVN by
    way of Kevin Coffman


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-7
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#723723),
    which is too fragile in cases where the database has been manually moved or
    is accessed through another kdb plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-6
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-5
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)
  - pull a fix from SVN to use AI_ADDRCONFIG more often (RT#6923)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-4
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#715074)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-3
changelog:
  - pull a fix from SVN to get libgssrpc clients (e.g. kadmin) authenticating
    using the old protocol over IPv4 again (RT#6920)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#576093)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-1
changelog:
  - update to 1.9.1:
    - drop no-longer-needed patches for CVE-2010-4022, CVE-2011-0281,
      CVE-2011-0282, CVE-2011-0283, CVE-2011-0284, CVE-2011-0285


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696343,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - override INSTALL_SETUID at build-time so that ksu is installed into
    the buildroot with the right permissions (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - turn off NSS as the backend for libk5crypto for now to work around its
    DES string2key not working (#679012)
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (MITKRB5-SA-2011-003, CVE-2011-0284, #674325)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - throw in a not-applied-by-default patch to try to make pkinit debugging
    into a run-time boolean option named "pkinit_debug"


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - turn on NSS as the backend for libk5crypto, adding nss-devel as a build
    dependency when that switch is flipped


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - krb5kdc init script: prototype some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (to flush out parts of #651466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, #664009,
    CVE-2011-0281, #668719, CVE-2011-0282, #668726, CVE-2011-0283, #676126)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-2
changelog:
  - pkinit: when verifying signed data, use the CMS APIs for better
    interoperability (#636985, RT#6851)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-0.beta1.0
changelog:
  - start moving to 1.9 with beta 1
    - drop patches for RT#5755, RT#6762, RT#6774, RT#6775
    - drop no-longer-needed backport patch for #539423
    - drop no-longer-needed patch for CVE-2010-1322
  - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-8
changelog:
  - incorporate upstream patch to fix uninitialized pointer crash in the KDC's
    authorization data handling (CVE-2010-1322, #636335)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-6
changelog:
  - pull down patches from trunk to implement k5login_authoritative and
    k5login_directory settings for krb5.conf (#539423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-4
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #629022, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #629022, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-1
changelog:
  - update to 1.8.3
    - drop backports of fixes for gss context expiration and error table
      registration/deregistration mismatch
    - drop patch for upstream #6750


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3
changelog:
  - tell krb5kdc and kadmind to create pid files, since they can
  - add logrotate configuration files for krb5kdc and kadmind (#462658)
  - fix parsing of the pidfile option in the KDC (upstream #6750)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull up fix for upstream #6745, in which the gssapi library would add the
    wrong error table but subsequently attempt to unload the right one


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596887), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #582466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - drop patch to suppress key expiration warnings sent from the KDC in
    the last-req field, as the KDC is expected to just be configured to either
    send them or not as a particular key approaches expiration (#556495)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
changelog:
  - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628, #576325)
  - kdc.conf: no more need to suggest keeping keys with v4-compatible salting


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
changelog:
  - remove the krb5-appl bits (the -workstation-clients and -workstation-servers
    subpackages) now that krb5-appl is its own package
  - replace our patch for #563431 (kpasswd doesn't fall back to guessing your
    principal name using your user name if you don't have a ccache) with the
    one upstream uses


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-2
changelog:
  - pull up patch to get the client libraries to correctly perform password
    changes over IPv6 (Sumit Bose, RT#6661)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-1
changelog:
  - update to 1.7.1
    - don't trip AD lockout on wrong password (#542687, #554351)
    - incorporates fixes for CVE-2009-4212 and CVE-2009-3295
    - fixes gss_krb5_copy_ccache() when SPNEGO is used
  - move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
    the devel subpackage, better lining up with the expected krb5/krb5-appl
    split in 1.8
  - drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
    depends on -workstation which also includes them


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-22
changelog:
  - use portreserve correctly -- portrelease takes the basename of the file
    whose entries should be released, so we need three files, not one


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-21
changelog:
  - suppress warnings of impending password expiration if expiration is more than
    seven days away when the KDC reports it via the last-req field, just as we
    already do when it reports expiration via the key-expiration field (#556495)
  - link with libtinfo rather than libncurses, when we can, in future RHEL


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-20
changelog:
  - krb5_get_init_creds_password: check opte->flags instead of options->flags
    when checking whether or not we get to use the prompter callback (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-19
changelog:
  - use portreserve to make sure the KDC can always bind to the kerberos-iv
    port, kpropd can always bind to the krb5_prop port, and that kadmind can
    always bind to the kerberos-adm port (#555279)
  - correct inadvertent use of macros in the changelog (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-18
changelog:
  - add upstream patch for integer underflow during AES and RC4 decryption
    (CVE-2009-4212), via Tom Yu (#545015)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-17
changelog:
  - put the conditional back for the -devel subpackage
  - back down to the earlier version of the patch for #551764; the backported
    alternate version was incomplete


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-16
changelog:
  - use %global instead of %define
  - pull up proposed patch for creating previously-not-there lock files for
    kdb databases when 'kdb5_util' is called to 'load' (#551764)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-15
changelog:
  - add upstream patch for KDC crash during referral processing (CVE-2009-3295),
    via Tom Yu (#545002)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages that live in the -libs subpackage into the regular
    %{_mandir} tree where they'll still be found if that package is the
    only one installed (#529319)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-11
changelog:
  - ksu: move account management checks to before we drop privileges, like
    su does (#540769)
  - selinux: set the user part of file creation contexts to match the current
    context instead of what we looked up
  - configure with --enable-dns-for-realm instead of --enable-dns, which isn't
    recognized any more


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-10
changelog:
  - move /etc/pam.d/ksu from krb5-workstation-servers to krb5-workstation,
    where it's actually needed (#538703)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-8
changelog:
  - specify the location of the subsystem lock when using the status() function
    in the kadmind and kpropd init scripts, so that we get the right error when
    we're dead but have a lock file - requires initscripts 8.99 (#521772)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if the init script fails to start krb5kdc/kadmind/kpropd because it's already
    running (according to status()), return 0 (part of #521772)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - simplify the man pages patch by only preprocessing the files we care about
    and moving shared configure.in logic into a shared function
  - catch the case of ftpd printing file sizes using %i, when they might be
    bigger than an int now


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-4
changelog:
  - try to merge and clean up all the large file support for ftp and rcp
    - ftpd no longer prints a negative length when sending a large file
      from a 32-bit host


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-3
changelog:
  - switch buildrequires: and requires: on e2fsprogs-devel into
    buildrequires: and requires: on libss-devel, libcom_err-devel, per
    sandeen on fedora-devel-list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a type mismatch in krb5_copy_error_message()
  - ftp: fix some odd use of strlen()
  - selinux labeling: use selabel_open() family of functions rather than
    matchpathcon(), bail on it if attempting to get the mutex lock fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - compile with %{?_smp_mflags} (Steve Grubb)
  - drop the bit where we munge part of the error table header, as it's not
    needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-1
changelog:
  - update to 1.7
    - no need to work around build issues with ASN1BUF_OMIT_INLINE_FUNCS
    - configure recognizes --enable/--disable-pkinit now
    - configure can take --disable-rpath now
    - no more libdes425, krb524d, krb425.info
    - kadmin/k5srvutil/ktutil are user commands now
    - new kproplog
    - FAST encrypted-challenge plugin is new
  - drop static build logic
  - drop pam_krb5-specific configuration from the default krb5.conf
  - drop only-use-v5 flags being passed to various things started by xinetd
  - put %{krb5prefix}/sbin in everyone's path, too (#504525)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-104
changelog:
  - extend PAM support to ksu: perform account and session management for the
    target user
  - pull up and merge James Leddy's changes to also set PAM_RHOST in PAM-aware
    network-facing services


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-103
changelog:
  - fix a typo in a ksu error message (Marek Mahut)
  - "rev" works the way the test suite expects now, so don't disable tests
    that use it


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-101
changelog:
  - add patches for read overflow and null pointer dereference in the
    implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
  - add patch for attempt to free uninitialized pointer in libkrb5
    (CVE-2009-0846)
  - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
  - put the krb5-user .info file into just -workstation and not also
    -workstation-clients


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to %{_var}/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include %{version}


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Karsten Hopp <karsten@redhat.com> 1.7-29
changelog:
  - remove trailing dot from summary
  - replace tabs with spaces
  - replace PreReq with Requires(post)/Requires(preun)
  - include license file in %doc
  - add smp flags
  - use make install DESTDIR=


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Remove HAVE_WAIT3 hack, tried to replace it with a requirement for an 
  autoconf with the fixed test, didn't work, put in another less-bad hack 
  instead.


author: Jay Fenlason <fenlason@redhat.com> 3.5-4
changelog:
  - Include the backported -kr patch from upstream to close
    Resolves: bz#1003891
    the rest of the way.


author: Jay Fenlason <fenlason@redhat.com> 3.5-2
changelog:
  - Include a pair of small patches from upstream to improve
    handling of lro options
    Resolves: bz#1010843
  - Include a pair of small patches to improve dumping of
    registers on ixgbe devices
    Resolves: bz#1018367


author: Jay Fenlason <fenlason@redhat.com> 2.6.33-0.3
changelog:
  - Fix source0 line to match the actual download filename.
  - Get rid of the no-longer-needed predash macro.
    Related: bz#555835


author: Jay Fenlason <fenlason@redhat.com> 2.6.33-0.1
changelog:
  - Pull in 2.6.33pre1 from rawhide
    Resolves: bz#520481 - [Emulex 6.0 feat] be2net request_firmware() support in
    Ethtool-cmd-with-flash-for-RH6


author: Robert Scheck <robert@fedoraproject.org> 6-2.20090115git
changelog:
  - Changes to match with Fedora Packaging Guidelines (#225735)
  - Upgrade to GIT 20090115 (#225735, #477498)
  - Removed bogus stated need of DEVNAME in -h/--help (#472038)
  - Removed completely needless INSTALL file from %doc (#472034)


author: Jay Fenlason <fenlason@redhat.com> 5-1
changelog:
  - Upgrade to ethtool version 5 to close
    bz#184985: RFE: 10gigE support
    bz#204840: "buffer overflow detected" when devname's length >=16 of ethtool
    Resolves: #184985, #204840


author: Jeff Garzik <jgarzik@pobox.com>
changelog:
  - Update to version 3.
  - Use %buildroot macro, rather than RPM_BUILD_ROOT env var,
    as recommended by RPM packaging guidelines.


author: Petr Oros <poros@redhat.com> - 1:1.17-24
changelog:
  - Update microcode data file to 20161104 revision.
  - Add workaround for E5-26xxv4
  - Resolves: #1346045


author: Petr Oros <poros@redhat.com> - 1:1.17-21
changelog:
  - Update microcode data file to 20151106 revision.
  - Resolves: #1244968
  - Remove bad file permissions on /lib/udev/rules.d/89-microcode.rules
  - Resolves: #1201276


author: Anton Arapov <anton@redhat.com> - 1:1.17-10
changelog:
  - Fix buffer overflow
  - Resolves: rhbz#768803
  - Update to microcode-20111110.dat
  - Resolves: rhbz#736266


author: Kyle McMartin <kyle@redhat.com> - 1:1.17-2
changelog:
  - Don't use a CVS release for RHEL, otherwise it'll always be a branch
    and irritating.
  - Fix syntax error in microcode_ctl.init.
  - Resolves: rhbz#552246.


author: Dave Jones <davej@redhat.com>
changelog:
  - Shorten sleep time during init.
    This really needs to be replaced with proper udev hooks, but this is
    a quick interim fix.


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Spec cleanup and macro standardization.
  - Update license
  - Update microcode data file to 20080131 revision.


author: Dave Jones <davej@redhat.com>
changelog:
  - Drop the node creation/deletion change from previous release.
    It'll cause grief with selinux, and was a hack to get around
    a udev shortcoming that should be fixed properly.


author: Dave Jones <davej@redhat.com>
changelog:
  - Create/remove the /dev/cpu/microcode dev node as needed.
  - Use correct path again for the microcode.dat.
  - Remove some no longer needed tests in the init script.


author: Dave Jones <davej@redhat.com>
changelog:
  - Only enable microcode_ctl service if the CPU is capable.
  - Prevent microcode_ctl getting restarted multiple times on initlevel change (#141581)
  - Make restart/reload work properly
  - Do nothing if not started by root.


author: Adam Jackson <ajax@redhat.com> 10.1.1-0.1
changelog:
  - Rebase to Mesa 10.1.1
  - Initial rebuild against llvm 3.4
  - Add llvm_rebase macro for future convenience


author: Dave Airlie <airlied@redhat.com> 9.0-0.8
changelog:
  - CVE-2013-1872: memory corruption oob read/write on intel (#963063)
  - CVE-2013-1993: interger overflows in protocol handling (#961613)


author: Adam Jackson <ajax@redhat.com> 8.1-0.19
changelog:
  - Fix pthread linkage of glapi and osmesa
  - Drop llvmpipe-related patches
  - Don't require mesa-dri1-drivers on s390{,x}


author: Adam Jackson <ajax@redhat.com> 7.11-2
changelog:
  - mesa-7.11-b9c7773e.patch: Sync with 7.11 branch
  - mesa-7.11-gen6-depth-stalls.patch: Fix GPU hangs on gen6+ in openarena
    and others (#741806)
  - Drop tdfx_dri.so, as there's no glide3 package or drm support in el6.


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-7
changelog:
  - fix SIGSEGV of getfacl -e on overly long group name (#1025246)
  - fix test-suite failure on a repeated run (#743847)


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-6
changelog:
  - add function acl_extended_file_nofollow() (#720318)
  - build with partial RELRO support as a security enhancement (#723998)


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-5
changelog:
  - clarify that removing a non-existent acl entry is not an error (#674883)
  - update project URL in package specification (#702638)


author: Kamil Dudka <kdudka@redhat.com> 2.2.49-3
changelog:
  - prevent setfacl --restore from SIGSEGV on malformed restore file (#576512)
  - run the test-suite if possible


author: Karsten Hopp <karsten@redhat.com> 2.2.39-3
changelog:
  - fix buildroot
  - remove trailing dot from summary
  - -devel requires same version of libacl
  - escape macro in changelog
  - make .so symlink relative


author: Thomas Woerner <twoerner@redhat.com> 2.2.39-1
changelog:
  - new version 2.2.39
  - fixed usage of long UTF-8 filenames (#183181)
    Thanks to Andrey for the initial patch.


author: Stephen C. Tweedie <sct@redhat.com> 2.2.7-3
changelog:
  - Add /usr/include/acl to files manifest
  - Fix location of doc files, add main doc dir to files manifest


author: Michael K. Johnson <johnsonm@redhat.com> 2.0.11-1
changelog:
  - Initial Red Hat package
    Made as few changes as possible relative to upstream packaging to
    make it easier to maintain long-term.  This means that some of
    the techniques used here are definitely not standard Red Hat
    techniques.  If you are looking for an example package to fit
    into Red Hat Linux transparently, this would not be the one to
    pick.
  - acl-devel -> libacl-devel


author: EL Errata <el-errata_ww@oracle.com> - 3.2-54.0.1.el6_9.1
changelog:
  - Add vendor, vendor URL info for Oracle Linux [orabug 17656507] (joe.jin@oracle.com)
  - Direct traceroute to linux.oracle.com (John Haxby) [orabug 11713272] (joe.jin@oracle.com)
  - Check oraclelinux-release instead of redhat-release to get OS version (John Haxby) [bug 11681869] (joe.jin@oracle.com)
  - Remove RH ftp URL and support email (joe.jin@oracle.com)
  - add sos-oracle-enterprise.patch (joe.jin@oracle.com)
  - Add smartmon plugin (John Haxby) [orabug 17995005] (joe.jin@oracle.com)


author: Filip Krska <fkrska@redhat.com> = 3.2-54.el6_9.1
changelog:
  [networking] iptables: check module version and do ipv6
    Resolves: bz1451784
    [cluster] Scrub passwords in pcs config
    Resolves: bz1427589


author: Shane Bradley <sbradley@redhat.com> = 3.2-49
changelog:
  - [sosreport] The reports were not generated.
    Resolves: bz1299892

  - [npm/nodejs] Add plugins npm and nodejs.
    The patch contained plugin classes that are not in rhel-6
    which were removed.
    Resolves: bz1368547


author: Shane Bradley <sbradley@redhat.com> = 3.2-40
changelog:
  - [processor] Capture output of cpufreq-info
    Resolves: bz1275202
  - [archive] Check that compress utility exists
    Resolves: bz1310183


author: Shane Bradley <sbradley@redhat.com> = 3.2-39
changelog:
  - [ipa] Improvements to plugin.
    Resolves: bz1203947
  - [networking] Blacklist Cisco CDP paths
    Resolves: bz1276262


author: Shane Bradley <sbradley@redhat.com> = 3.2-38
changelog:
  - [openshift] Obfuscate LDAP bind passwords
    Resolves: bz1227462
  - [multipath] Add output of "multipathd show config" in sosreport
    Resolves: bz1289558
  - [archive] remove hand-rolled compression shell out.
    Resolves: bz1232940


author: Shane Bradley <sbradley@redhat.com> = 3.2-37
changelog:
  - [utilities] Support glob expansion in command arguments
    Resolves: bz1276652
  - [rpm] Move extra rpm fields to a separate file
    Resolves: bz1267677


author: Shane Bradley <sbradley@redhat.com> = 3.2-32
changelog:
  - [general] Better handling of --name and --ticket-number options.
    Resolves: bz1232945
  - [policies] run PackageManager query_command under timeout


author: Shane Bradley <sbradley@redhat.com> = 3.2-30
changelog:
  - [saphana/sapnw] Add plugins for SAP NetWeaver and SAP HANA.
    Resolves: bz1195606
  - [boot] Capture output for efibootmgr.
    Resolves: bz1209342


author: Shane Bradley <sbradley@redhat.com> = 3.2-29
changelog:
  - [networking] The commmand brctl will only be ran if bridge module loaded.
    Resolves: 1263887
  - [qpid] Added missing comma in list of command outputs to capture.
    Resolves: 1274710


author: Shane Bradley <sbradley@redhat.com> = 3.2-26
changelog:
  - [cluster] Scrub password from crm_report data.
    Resolves: bz1206581
  - [networking] Use the correct options for nmcli.
    Resolves: bz1206661


author: Shane Bradley <sbradley@redhat.com> = 3.2-19
changelog:
  - [cluster] Ensure cluster sets 'make' to False when calling get_cmd_output_path().
    Resolves: bz1190723


author: Shane Bradley <sbradley@redhat.com> = 3.2-18
changelog:
  - [openshift] Collect additional config files.
    Resolves: bz1166874
  - [activemq] Honour all_logs and get config on RHEL.
    Resolves: bz1165878


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-17
changelog:
  - [policy/redhat] use /tmp as default temporary directory
  - [global] remove dependency on python-six
    Resolves: bz1144525


author: Shane Bradley <sbradley@redhat.com> = 3.2-16
changelog:
  - [cluster] Added package luci and fix lockdumps capturing.
    Resolves: bz1171186
  - [puppet] Adding new plugin for puppet
    Resolves: bz1172880
  - [block] parted will use sector units instead of human units.
    Resolves: bz1086537
  - [foreman] Added option to prevent generic resource collection with foreman plugin. Remove the plugin katello since data collection done by foreman-debug.
    Resolves: bz1135290


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-15
changelog:
  - [global] update el6 to upstream 3.2 release
    Resolves: bz1144525
  - [global] sync 3.2-15.el6 with RHEL-7.1
    Resolves: bz1144525


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-14
changelog:
  - [mysql] test for boolean values in dbuser and dbpass
  - [mysql] improve handling of dbuser, dbpass and MYSQL_PWD


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-12
changelog:
  - [plugin] limit path names to PC_NAME_MAX
  - [squid] collect files from /var/log/squid
  - [sosreport] log plugin exceptions to a file
  - [ctdb] fix collection of /etc/sysconfig/ctdb
  - [sosreport] fix silent exception handling


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-11
changelog:
  - [sosreport] do not make logging calls after OSError
  - [sosreport] catch OSError exceptions in SoSReport.execute()
  - [anaconda] make useradd password regex tolerant of whitespace


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-9
changelog:
  - [navicli] catch exceptions if stdin is unreadable
  - [docs] update man page for new options
  - [sosreport] make all utf-8 handling user errors=ignore


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-8
changelog:
  - [kpatch] do not attempt to collect data if kpatch is not installed
  - [archive] drop support for Zip archives


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-6
changelog:
  - [tomcat] add support for tomcat7 and default log size limits
  - [mysql] obtain database password from the environment


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-5
changelog:
  - [corosync] add postprocessing for corosync-objctl output
  - [ovirt_hosted_engine] fix exception when force-enabled


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-4
changelog:
  - [yum] call rhsm-debug with --no-subscriptions
  - [powerpc] allow PowerPC plugin to run on ppc64le
  - [package] add Obsoletes for sos-plugins-openstack


author: Bryn M. Reeves <bmr@redhat.com> = 3.2-3
changelog:
  - [pam] add pam_tally2 and faillock support
  - [postgresql] obtain db password from the environment
  - [pcp] add Performance Co-Pilot plugin
  - [nfsserver] collect /etc/exports.d
  - [sosreport] handle --compression-type correctly
  - [anaconda] redact passwords in kickstart configurations
  - [haproxy] add new plugin
  - [keepalived] add new plugin
  - [lvm2] set locking_type=0 when calling lvm commands
  - [tuned] add new plugin
  - [cgroups] collect /etc/sysconfig/cgred
  - [plugins] ensure doc text is always displayed for plugins
  - [sosreport] fix the distribution version API call
  - [docker] add new plugin
  - [openstack_*] include broken-out openstack plugins
  - [mysql] support MariaDB
  - [openstack] do not collect /var/lib/nova
  - [grub2] collect grub.cfg on UEFI systems
  - [sosreport] handle out-of-space errors gracefully
  - [firewalld] new plugin
  - [networking] collect NetworkManager status
  - [kpatch] new plugin
  - [global] update to upstream 3.2 release


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-68.el6
changelog:
  - [ds] add collection of ds admin server configuration
    Resolves: bz994628
  - [ldap] ensure /etc/openldap/ content is collected
    Resolves: bz994628
  - [plugintools] preserve permissions on directories
    Resolves: bz1069786


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-65.el6
changelog:
  - [grub] Fix grub.conf path for grub-1.x versions
    Resolves: bz1076388
  - [ds] Fix logging exception when plugin force-enabled
    Resolves: bz994628


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-62.el6
changelog:
  - Restrict ldap and ds plugin paths to avoid collecting secrets
    Resolves: bz994628
  - Add certutil output to ldap and ds plugins to summarize certs
    Resolves: bz994628


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-61.el6
changelog:
  - [powerpc] backport plugin from upstream
    Resolves: bz977190
  - [devicemapper] set locking_type=0 when calling lvm2 commands
    Resolves: bz1102282
  - [nfsserver] collect 'exportfs -v'
    Resolves: bz985512
  - [openshift] improve password redaction
    Resolves: bz1039755
  - [openshift] don't collect all of /etc/openshift
    Resolves: bz1039755


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-60.el6
changelog:
  - [mongodb] backport new plugin from upstream
  - [activemq] backport new plugin from upstream
  - [openshift] sync plugin with upstream
  - [plugin] backport collectExtOutputs and addCopySpecs
  - Make OpenShift module collect domain information
  - Add 'gear' option to OpenShift module
  - Add OpenShift module
    Resolves: bz1039755
  - [plugin] backport addCopySpecLimit tailit parameter
    Resolves: bz1001600


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-57.el6
changelog:
  - [tomcat] update for tomcat6 and add password filtering
    Resolves: bz1088070
  - [filesys] collect dumpe2fs -h output by default
    Resolves: bz1105629
  - [rpm] reduce number of calls to rpm
    Resolves: bz1019872
  - Verify fewer packages in rpm plug-in
    Resolves: bz1019872
  - [bootloader] elide bootloader password
    Resolves: bz1101311
  - [plugin] backport do_path_regex_sub()
    Resolves: bz1101311
  - [networking] do not attempt to read use-gss-proxy
    Resolves: bz1079954
  - [mysql] limit log collection by default
    Resolves: bz1015783
  - [mysql] add optional database dump support
    Resolves: bz1032262
  - [docs] update man pages
    Resolves: bz1022226
  - [sosreport] log exceptions during Plugin.postproc()
    Resolves: bz1020445
  - [distupgrade] elide passwords in kickstart user directives
    Resolves: bz1052344


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-56.el6
changelog:
  - [ipa] add ipa-replica-manage output
    Resolves: bz1012410
  - [bootloader] Include /etc/yaboot.conf
    Resolves: bz1001941
  - [cluster] collect /sys/fs/gfs2/*/withdraw
    Resolves: bz997174
  - [general] do not collect /var/log/sa
    Resolves: bz1001600
  - [networking] avoid Cisco cdp paths in /proc and /sys
    Resolves: bz1004936
  - [sar] Handle compressed binary data files better
    Resolves: bz1001600
  - [sar] Add file size limits
    Resolves: bz1001600
  - [sar] Enable XML data collection
    Resolves: bz1001600


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-55.el6
changelog:
  - [selinux] pass --input-logs when calling ausearch
    Resolves: bz1032706
  - [printing] fix cups log file size limiting
    Resolves: bz1061529
  - [auditd] fix log size limiting
    Resolves: bz1061529
  - [hardware] call hardware.py directly instead of invoking python
    Resolves: bz1041770


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-54.el6
changelog:
  - [hpasm] new plugin to collect HP ASM information
    Resolves: bz915115
  - [sos] improve handling of fatal IO errors
    Resolves: bz1085042
  - [bootloader] collect grub.conf for UEFI based systems
    Resolves: bz1076388
  - [ctdb] add plugin to collect Samba CTDB information
    Resolves: bz961041
  - [keepalived] new plugin
    Resolves: bz1107862
  - [sssd] scrub ldap_default_authtok in sssd plugin
    Resolves: bz1013366
  - [haproxy] new plugin
    Resolves: bz1107866
  - [gluster] add 'logsize' and 'all_logs' plugin options
    Resolves: bz1002619


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-46.el6
changelog:
  - Fix obfuscation of luci secrets in cluster plug-in
    Resolves: bz986301
  - Fix password substitution in libvirt plug-in
    Resolves: bz883811


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-45.el6
changelog:
  - Fix collection of squid log files
    Resolves: bz955671
  - Fix regex substitution in openhpi plug-in
    Resolves: bz924338
  - Fix typo in /proc/kallsyms collection
    Resolves: bz970417
  - Fix exception while post-processing command output
    Resolves: bz986301, bz883811


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-43.el6
changelog:
  - Add restricted rpm verify
    Resolves: bz888589
  - Add new foreman plug-in
    Resolves: bz976386
  - Collect saved vmcore-dmesg.txt files in kdump plug-in
    Resolves: bz924839
  - Obfuscate luci secrets in cluster plug-in
    Resolves: bz986301
  - Remove rpm list collection from RHN module
    Resolves: bz884609
  - Add gluster geo-replication status and sync with RHS version
    Resolves: bz868711
  - Obscure passwords in libvirt and corosync data
    Resolves: bz883811
  - Make krb5 plug-in conform with sos-2.2 plug-in API
    Resolves: bz987103
  - Add further NIS data collection
    Resolves: bz928748
  - Fix symbol collection for modern kernels
    Resolves: bz970417
  - Disable 'ipsec barf' collection in openswan plug-in
    Resolves: bz924925
  - Add pam_ldap.conf collection to ldap plug-in
    Resolves: bz877395
  - Force LC_ALL=C for external commands
    Resolves: bz888488
  - Rationalise lvm2 plug-in lvmdump options
    Resolves: bz980959
  - Backport addCopySpecs from upstream
    Resolves: bz924338, bz907861


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-42.el6
changelog:
  - Update sosreport user interface text
    Resolves: bz878589
  - Preserve ownership and permissions on collected files
    Resolves: bz888724
  - Do not collect krb5.keytab in samba plug-in
    Resolves: bz987103
  - Collect output of 'ls -l /var/named' in named plug-in
    Resolves: bz896713
  - Collect /var/log/squid in squid plug-in
    Resolves: bz955671
  - Fix systool invocation in device-mapper plug-in
    Resolves: bz868719
  - Add plug-in to collect OpenHPI configuration
    Resolves: bz924338
  - Fix traceback in sar module when /var/log/sa does not exist
    Resolves: bz883443
  - Collect mountstats and mountinfo files in filesys plug-in
    Resolves: bz988417
  - Add crm_report integration for pacemaker to cluster plug-in
    Resolves: bz989292


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-41.el6
changelog:
  - Exclude RPC files from procfs data collection in networking module
    Resolves: bz913201
  - Add NFS client plug-in
    Resolves: bz907861
  - Restrict wbinfo collection to local domain in samba plug-in
    Resolves: bz986973


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-40.el6
changelog:
  - Backport SELinux enhancements from upstream
    Resolves: bz876309
  - Fix invocation of 'udevadm info' in device-mapper plug-in
    Resolves: bz947424


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-35.el6
changelog:
  - Report --name and --ticket values as defaults
    Resolves: bz822113
  - Fix device-mapper command execution logging
    Resolves: bz824378
  - Fix data collection and rename PostreSQL module to pgsql
    Resolves: bz852049


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-33.el6
changelog:
  - Add Red Hat Update Infrastructure module
    Resolves: bz821323
  - Collect /proc/iomem in hardware module
    Resolves: bz840975
  - Collect subscription-manager output in general module
    Resolves: bz825968
  - Collect rhsm log files in general module
    Resolves: bz826312
  - Fix exception in gluster module on non-gluster systems
    Resolves: bz849546
  - Fix exception in psql module when dbname is not given
    Resolves: bz852049


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-32.el6
changelog:
  - Collect /proc/pagetypeinfo in memory module
    Resolves: bz809727
  - Strip trailing newline from command output
    Resolves: bz850433
  - Add sanlock module
    Resolves: bz850779
  - Do not collect archived accounting files in psacct module
    Resolves: bz850542
  - Call spacewalk-debug from rhn module to collect satellite data
    Resolves: bz859142


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-31.el6
changelog:
  - Avoid calling volume status when collecting gluster statedumps
    Resolves: bz849546
  - Use a default report name if --name is empty
    Resolves: bz822113
  - Quote tilde characters passed to shell in RPM module
    Resolves: bz821005
  - Collect KDC and named configuration in ipa module
    Resolves: bz825149
  - Sanitize hostname characters before using as report path
    Resolves: bz822174
  - Collect /etc/multipath in device-mapper module
    Resolves: bz817093
  - New plug-in for PostgreSQL
    Resolves: bz852049
  - Add OpenStack module
    Resolves: bz840057
  - Avoid deprecated sysctls in /proc/sys/net
    Resolves: bz834594
  - Fix error logging when calling external programs
    Resolves: bz824378
  - Use ip instead of ifconfig to generate network interface lists
    Resolves: bz833170


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-29.el6
changelog:
  - Collect the swift configuration directory in gluster module
    Resolves: bz822442
  - Update IPA module and related plug-ins
    Resolves: bz812395


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-24.el6
changelog:
  - Fix katello and aeolus command string syntax
    Resolves: bz752666
  - Remove stray hunk from gluster module patch
    Resolves: bz784061


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-22.el6
changelog:
  - Correct aeolus debug invocation in CloudForms module
    Resolves: bz752666
  - Update gluster module for gluster-3.3
    Resolves: bz784061
  - Add additional command output to gluster module
    Resolves: bz768641
  - Add support for collecting gluster configuration and logs
    Resolves: bz752549


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-19.el6
changelog:
  - Collect additional diagnostic information for realtime systems
    Resolves: bz789096
  - Improve sanitization of RHN user and case number in report name
    Resolves: bz771393
  - Fix verbose output and debug logging
    Resolves: bz782339
  - Add basic support for CloudForms data collection
    Resolves: bz752666
  - Add support for Subscription Asset Manager diagnostics
    Resolves: bz752670


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-18.el6
changelog:
  - Collect fence_virt.conf in cluster module
    Resolves: bz760995
  - Fix collection of /proc/net directory tree
    Resolves: bz730641
  - Gather output of cpufreq-info when present
    Resolves: bz760424
  - Fix brctl showstp output when bridges contain multiple interfaces
    Resolves: bz751273
  - Add /etc/modprobe.d to kernel module
    Resolves: bz749919
  - Ensure relative symlink targets are correctly handled when copying
    Resolves: bz782589
  - Fix satellite and proxy package detection in rhn plugin
    Resolves: bz749262
  - Collect stderr output from external commands
    Resolves: bz739080
  - Collect /proc/cgroups in the cgroups module
    Resolve: bz784874
  - Collect /proc/irq in the kernel module
    Resolves: bz784862
  - Fix installed-rpms formatting for long package names
    Resolves: bz767827
  - Add symbolic links for truncated log files
    Resolves: bz766583
  - Collect non-standard syslog and rsyslog log files
    Resolves: bz771501
  - Use correct paths for tomcat6 in RHN module
    Resolves: bz749279
  - Obscure root password if present in anacond-ks.cfg
    Resolves: bz790402
  - Do not accept embedded forward slashes in RHN usernames
    Resolves: bz771393
  - Add new sunrpc module to collect rpcinfo for gluster systems
    Resolves: bz784061


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-16
changelog:
  - Fix execution of RHN hardware.py from hardware plugin
    Resolves: bz736718
  - Fix hardware plugin to support new lsusb path
    Resolves: bz691477


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-15
changelog:
  - Fix brctl collection when a bridge contains no interfaces
    Resolves: bz697899
  - Fix up2dateclient path in hardware plugin
    Resolves: bz736718


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-14
changelog:
  - Collect brctl show and showstp output
    Resolves: bz697899
  - Collect nslcd.conf in ldap plugin
    Resolves: bz682124


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-11
changelog:
  - Truncate files that exceed specified size limit
    Resolves: bz683219
  - Add support for collecting Red Hat Subscrition Manager configuration
    Resolves: bz714293
  - Collect /etc/init on systems using upstart
    Resolves: bz694813
  - Don't strip whitespace from output of external programs
    Resolves: bz713449
  - Collect ipv6 neighbour table in network module
    Resolves: bz721163
  - Collect basic cgroups configuration data
    Resolves: bz729455


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-10
changelog:
  - Fix collection of data from LVM2 reporting tools in devicemapper plugin
    Resolves: bz704383
  - Add /proc/vmmemctl collection to vmware plugin
    Resolves: bz709491


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-9
changelog:
  - Collect yum repository list by default
    Resolves: bz600813
  - Add basic Infiniband plugin
    Resolves: bz673244
  - Add plugin for scsi-target-utils iSCSI target
    Resolves: bz677124
  - Fix autofs plugin LC_ALL usage
    Resolves: bz683404
  - Fix collection of lsusb and add collection of -t and -v outputs
    Resolves: bz691477
  - Extend data collection by qpidd plugin
    Resolves: bz726360
  - Add ethtool pause, coalesce and ring (-a, -c, -g) options to network plugin
    Resolves: bz726427


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-6
changelog:
  - Fix collection of chkconfig output in startup.py
    Resolves: bz659467
  - Collect /etc/dhcp in dhcp.py plugin
    Resolves: bz676522
  - Collect dmsetup ls --tree output in devicemapper.py
    Resolves: bz675559
  - Collect lsblk output in filesys.py
    Resolves: bz679433


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-4
changelog:
  - Fix collection of logs and config files in sssd.py
    Resolves: bz624162
  - Add support for collecting entitlement certificates in rhn.py
    Resolves: bz678665


author: Bryn M. Reeves <bmr@redhat.com> = 2.2-3
changelog:
  - Fix cluster plugin dlm lockdump for el6
    Resolves: bz622407
  - Add sssd plugin to collect configuration and logs
    Resolves: bz624162
  - Collect /etc/anacrontab in system plugin
    Resolves: bz622527
  - Correct handling of redhat-release for el6
    Resolves: bz622528


author: Adam Stokes <ajs at redhat dot com> = 2.2-0
changelog:
  - Resolves: bz581921
  - Resolves: bz584253
  - Resolves: bz562651
  - Resolves: bz566170
  - Resolves: bz586450
  - Resolves: bz588223
  - Resolves: bz559737
  - Resolves: bz586405
  - Resolves: bz598978
  - Resolves: bz584763


author: Adam Stokes <ajs at redhat dot com> = 2.1-0
changelog:
  - Resolves: bz585923
  - Resolves: bz585942
  - Resolves: bz586409
  - Resolves: bz586389
  - Resolves: bz548096
  - Resolves: bz557828
  - Resolves: bz563637
  - Resolves: bz584253
  - Resolves: bz462823
  - Resolves: bz528881
  - Resolves: bz566170
  - Resolves: bz578787
  - Resolves: bz581817
  - Resolves: bz581826
  - Resolves: bz584695
  - Resolves: bz568637
  - Resolves: bz584767
  - Resolves: bz586370


author: Adam Stokes <ajs at redhat dot com> = 1.9-1
changelog:
  - version bump 1.9
  - replaced compression utility with xz
  - strip threading/multiprocessing
  - simplified progress indicator
  - pylint update
  - put global vars in class container
  - unittests
  - simple profiling
  - make use of xgettext as pygettext is deprecated


author: Adam Stokes <ajs at redhat dot com> = 1.8-21
changelog:
  - more sanitizing options for log files
  - rhbz fixes from RHEL version merged into trunk
  - progressbar update


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-138
changelog:
  - Fix backslash interpolation in Locale::Maketext (bug #1025906)
  - Do not ignore single-letter-named packages by Module::Plugable (bug #1086215)
  - Run-require exact version of perl-libs by perl-suidperl (bug #1161170)


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-134
changelog:
  - Resolves: #973022 - Make non-option handler for Getopt::Long::GetOptions()
    compatible with XML::Simple


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-133
changelog:
  - Resolves: #698552 - Correct taintedness tests
  - Resolves: #825713 - Fix find2perl to translate ? glob properly
  - Resolves: #810469 - Upgrade IO-Compress, Compress-Raw-Bzip2, and
    Compress-Raw-Zlib to 2.021
  - Resolves: #819042 - Set default output for Pod::Man and Pod::Text
    parse_file() methods
  - Resolves: #905482 - Require glibc-devel, gdbm-devel, db4-devel by perl-devel


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-132
changelog:
  - Resolves: #767608 - Fix memory leak when accessing non-matched named
    capturing groups
  - Resolves: #839788 - Do not crash if declared DESTROY method has not been
    defined


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-130
changelog:
  - Resolves: #915693 - CVE-2012-5526 (newline injection due to improper CRLF
    escaping in Set-Cookie and P3P headers)
  - Resolves: #915693 - CVE-2012-6329 (possible arbitrary code execution via
    Locale::Maketext)
  - Resolves: #915693 - CVE-2013-1667 (DoS in rehashing code)


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-122
changelog:
  - Resolves: rhbz#738421 - Package bzip2 modules
  - Resolves: rhbz#750145 - Add require EE::MM into IPC::Cmd


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-120
changelog:
  - 731246 (CVE-2011-2939)CVE-2011-2939 heap overflow - decoding Unicode string
  - 743010 - perl: code injection vulnerability in Digest->new()
  - Resolves: rhbz#743093, rhbz#743091


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-119
changelog:
  - 692862 - lc launders tainted flag, CVE-2011-1487
  - make SOURCE1 executable, because it missed +x in brew
  - Resolves: rhbz#692862


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-116
changelog:
  - require Digest::SHA 640716
  - remove removal of NDBM 640729
  - remove unsupported option fork from prove's documentation 609492
  - Thread desctructor leaks 640720
  - update threads to 1.82 (bugfixes releases) 626330
  - remove unused patches from cvs
  - Resolves: rhbz#640729, rhbz#640716, rhbz#609492, rhbz#640720, rhbz#626330


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-114
changelog:
  - Remove unused @INC paths
  - Own all used @INC paths
  - Own architecture dependent paths by perl-libs due to multiarch
  - Resolves: rhbz#554671


author: Petr Pisar <ppisar@redhat.com> - 4:5.10.1-113
changelog:
  - fix CGI test data location to pass internal tests 
  - remove CPAN and CPANPLUS sysconfig declarations as they are not provided
  - disable tests on s390(x) and ppc64 as multithread stress tests fails
  - Related: rhbz#594768


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-111
changelog:
  - fix conflicts in specfile, upload missing sources, upload patch with
   wrong name
  - Related: rhbz# 594768


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-110
changelog:
  - set CPAN installation path into "site"
  - 'make local' now pass because of Patch0, which removes incorectly set
   dependencies
  - Related: rhbz#594768


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-110
changelog:
  - 597982 add all version* in -version sub-package
  - Resolves: rhbz#597982, rhbz#598397, rhbz#595387, rhbz#595387


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-108
changelog:
  - remove DPERL_USE_SAFE_PUTENV from Configure #577229 Use perl internal
   putenv, which doesn't leak memory.
  - 580238 wrong version of module
  Resolves: rhbz#580238


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-107
changelog:
  - clean spec - remove unused patches, rename patches, sources
  - add releases macros for all modules
  - change license according to legal
  - update modules to stable version. e.g. Module-Build can't be updated anymore
    because of API breakage, that's true also for some other modules.
  - Related: rhbz#543948


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-106
changelog:
  - 554654 -  "perldoc perlvar" renders incorrectly in C and en_US.UTF-8 locales.
  - 554666 -  Wrong man pages location specified in perl manual page
  - Resolves: rhbz#554654, rhbz#554666


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.1-105
changelog:
  - 547657 CVE-2009-3626 perl: regexp matcher crash on invalid UTF-8 characters  
  - 549306 version::Internals should be packaged in perl-version subpackage
  - Parse-CPAN-Meta updated and separate package is dead
  - subpackage parent and Parse-CPAN-Meta; add them to core's dep list
  - exclude "parent".
  - exclude Parse-CPAN-Meta.
  Resolves: rhbz#547657


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.1-100
changelog:
  - new upstream version
  - release number must be high, because of stale version numbers of some
    of the subpackages
  - drop upstreamed patches
  - update the versions of bundled modules
  - shorten the paths in @INC
  - build without DEBUGGING
  - implement compatibility measures for the above two changes, for a short
    transition period
  - provide perl(:MODULE_COMPAT_5.10.0), for that transition period only


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-87
changelog:
  - fix patch-update-Compress-Raw-Zlib.patch (did not patch Zlib.pm)
  - update Compress::Raw::Zlib to 2.023
  - update IO::Compress::Base, and IO::Compress::Zlib to 2.015 (#542645)


author: Chris Weyl <cweyl@alumni.drew.edu> - 4:5.10.0-82
changelog:
  - update our Test-Simple update to 0.92 (patch by Iain Arnell), #519417
  - update Module-Pluggable to 3.9


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-74
changelog:
  - fix generated .ph files so that they no longer cause warnings (#509676)
  - remove PREREQ_FATAL from Makefile.PL's processed by miniperl
  - update to latest Scalar-List-Utils (#507378)
  - perl-skip-prereq.patch: skip more prereq declarations in Makefile.PL files


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-66
changelog:
  - fix CGI::escape for all strings (#472571)
  - perl-CGI-t-util-58.patch: Do not distort lib/CGI/t/util-58.t
    http://rt.perl.org/rt3/Ticket/Display.html?id=64502


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-61
changelog:
  - apply Change 34507: Fix memory leak in single-char character class optimization
  - Reorder @INC, based on b9ba2fadb18b54e35e5de54f945111a56cbcb249
  - fix Archive::Extract to fix test failure caused by tar >= 1.21
  - Merge useful Debian patches


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-60
changelog:
  - remove compatibility obsolete sitelib directories
  - use a better BuildRoot
  - drop a redundant mkdir in %install
  - call patchlevel.h only once; rm patchlevel.bak
  - update modules Sys::Syslog, Module::Load::Conditional, Module::CoreList,
    Test::Harness, Test::Simple, CGI.pm (dropping the upstreamed patch),
    File::Path (that includes our perl-5.10.0-CVE-2008-2827.patch),
    constant, Pod::Simple, Archive::Tar, Archive::Extract, File::Fetch,
    File::Temp, IPC::Cmd, Time::HiRes, Module::Build, ExtUtils::CBuilder
  - standardize the patches for updating embedded modules
  - work around a bug in Module::Build tests bu setting TMPDIR to a directory
    inside the source tree


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-54
changelog:
  - 455410 http://rt.perl.org/rt3/Public/Bug/Display.html?id=54934
    Attempt to free unreferenced scalar fiddling with the symbol table
    Keep the refcount of the globs generated by PerlIO::via balanced.


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.10.0-52
changelog:
  - 295021 CVE-2007-4829 perl-Archive-Tar directory traversal flaws
  - add another source for binary files, which test untaring links


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-51
changelog:
  - to fix Fedora bz 473223, which is really perl bug #54186 (http://rt.perl.org/rt3//Public/Bug/Display.html?id=54186)
    we apply Changes 33640, 33881, 33896, 33897


author: Marcela Mašláňová <mmaslano@redhat.com> 4:5.10.0-47.fc10
changelog:
  - rt#33242, rhbz#459918. Segfault after reblessing objects in Storable.
  - rhbz#465728 upgrade Simple::Pod to 3.07


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-46
changelog:
  - also preserve the timestamp of AUTHORS; move the fix to the recode
    function, which is where the stamps go wrong


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-44.fc10
changelog:
  - remove Tar.pm from Archive-Extract
  - fix version of Test::Simple in spec
  - update Test::Simple
  - update Archive::Tar to 1.38


author: Stepan Kasal <skasal@redhat.com> 4:5.10.0-39.fc10
changelog:
  - CGI.pm bug in exists() on tied param hash (#457085)
  - move the enc2xs templates (../Encode/*.e2x) to -devel, (#456534)


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-38
changelog:
  - 455933 update to CGI-3.38
  - fix fuzz problems (patch6)
  - 217833 pos() function handle unicode characters correct


author: Marcela Maslanova <mmaslano@redhat.com> 4:5.10.0-33
changelog:
  - 451078 update Test::Harness to 3.12 for more testing. Removed verbose 
  test, new Test::Harness has possibly verbose output, but updated package
  has a lot of features f.e. TAP::Harness. Carefully watched all new bugs 
  related to tests!


author: Stepan Kasal <skasal@redhat.com> 4:5.10.0-26
changelog:
  - make config parameter list consistent for 32bit and 64bit platforms,
    add config option -Dinc_version_list=none (#448735)
  - use perl_archname consistently
  - cleanup of usage of *_lib macros in %install


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-21
changelog:
  - sparc64 fails two tests under mysterious circumstances. we need to get the
    rest of the tree moving, so we temporarily disable the tests on that arch.


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-20
changelog:
  - create the vendor_perl/%{perl_version}/%{perl_archname}/auto directory 
    in %{_libdir} so we own it properly


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-19
changelog:
  - fix CPANPLUS-Dist-Build Provides/Obsoletes (bz 437615)
  - bump version on Module-CoreList subpackage


author: Tom "spot" Callaway <tcallawa@redhat.com> 4:5.10.0-12
changelog:
  - conditionalize multilib patch report in patchlevel.h
  - Update Archive::Extract to 0.26
  - Update Module::Load::Conditional to 0.24


author: Stepan Kasal <skasal@redhat.com> - 4:5.10.0-7
changelog:
  - Add perl-File-Temp provides/obsoletes/conflicts (#433836),
    reported by Bill McGonigle <bill@bfccomputing.com>
  - escape the macros in Jan 30 entry


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-5
changelog:
  - disable some futime tests in t/io/fs.t because they started failing on x86_64
    in the Fedora builders, and no one can figure out why. :/


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-4
changelog:
  - create %{_prefix}/lib/perl5/vendor_perl/%{perl_version}/auto and own it
    in base perl (resolves bugzilla 214580)


author: Tom "spot" Callaway <tcallawa@redhat.com> - 4:5.10.0-1
changelog:
  - 5.10.0 final
  - clear out all the unnecessary patches (down to 8 patches!)
  - get rid of super perl debugging mode
  - add new subpackages


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-8
changelog:
  - Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
  - Resolves: Bug 1289881


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-11
changelog:
  - Resolves: Bug 689919 - build without any softoken or util sources in the tree
  - Add define-uint32.patch to deal with using older version of nss-softokn
  - Fix suboptimal test failure detection shell code in the %check
  unset DISPLAY
   section


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.10.1-143
changelog:
  - Fix typo in name of the signal PIPE in IPC::Cmd (bug #1315053)
  - Fix crash in httpd mod_perl Perl_sv_pvn_force_flags (bug #1364206)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-110
changelog:
  - Fix minor problems found by covscan/gcc (#1196063)
  - Add missing options in man ssh (#1197763)
  - Add KbdInteractiveAuthentication documentation to man sshd_config (#1109251)
  - Correct freeing newkeys structure when privileged monitor exits (#1208584)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-109
changelog:
  - Fix problems with failing persistent connections (#1131585)
  - Fix memory leaks in auditing patch (#1208584)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-106
changelog:
  - Add missing ControlPersist option to man ssh (#1197763)
  - Add sftp option to force mode of created files (#1191055)
  - Do not load RSA1 keys in FIPS mode (#1197072)
  - Add missing support for ECDSA in ssh-keyscan (#1196331)
  - Fix coverity/gcc issues (#1196063)
  - Backport wildcard functionality for PermitOpen in sshd_config file (#1159055)
  - Ability to specify an arbitrary LDAP filter in ldap.conf (#1119506)


author: Jakub Jelen <jjelen@redhat.com> 5.3p1-105
changelog:
  - Fix ControlPersist option with ProxyCommand (#1160487)
  - Backport fix of ssh-keygen with error : gethostname: File name too long (#1161454)
  - Backport show remote address instead of UNKNOWN after timeout at password prompt (#1161449)
  - Fix printing of extensions in v01 certificates (#1093869)
  - Fix confusing audit trail for unsuccessful logins (#1127312)
  - Don't close fds for internal sftp sessions (#1085710)
  - Fix config parsing quotes (backport) (#1134938)
  - Enable logging in chroot into separate file (#1172224)
  - Fix auditing when using combination of ForcedCommand and PTY (#1131585)
  - Fix ssh-copy-id on non-sh remote shells (#1135521)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-98
changelog:
  - add possibility to autocreate only RSA key into initscript (#1111568)
  - fix several issues reported by coverity


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-97
changelog:
  - x11 forwarding - be less restrictive when can't bind to one of available addresses
    (#1027197)
  - better fork error detection in audit patch (#1028643)
  - fix openssh-5.3p1-x11.patch for non-linux platforms (#1100913)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-96
changelog:
  - prevent a server from skipping SSHFP lookup (#1081338) CVE-2014-2653
  - ignore environment variables with embedded '=' or '\0' characters CVE-2014-2532
  - backport ControlPersist option (#953088)
  - log when a client requests an interactive session and only sftp is allowed (#997377)
  - don't try to load RSA1 host key in FIPS mode (#1009959)
  - restore Linux oom_adj setting when handling SIGHUP to maintain behaviour over restart
    (#1010429)
  - ssh-keygen -V - relative-specified certificate expiry time should be relative to current time
    (#1022459)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-95
changelog:
  - adjust the key echange DH groups and ssh-keygen according to SP800-131A (#993580)
  - log failed integrity test if /etc/system-fips exists (#1020803)
  - backport ECDSA and ECDH support (#1028335)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-90
changelog:
  - change default value of MaxStartups - CVE-2010-5107 - #908707
  - add -fips subpackages that contains the FIPS module files (#1001565)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-87
changelog:
  - bump the minimum value of SSH_USE_STRONG_RNG to 14 according to SP800-131A (#993577)
  - fixed an issue with broken 'ssh -I pkcs11' (#908038)
  - abort non-subsystem sessions to forced internal sftp-server (#993509)
  - reverted 'store krb5 credentials after a pam session is created (#974096)'


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-86
changelog:
  - Add support for certificate key types for users and hosts (#906872)
  - Apply RFC3454 stringprep to banners when possible (#955792)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-85
changelog:
  - fix chroot logging issue (#872169)
  - change the bad key permissions error message (#880575)
  - fix a race condition in ssh-agent (#896561)
  - backport support for PKCS11 from openssh-5.4p1 (#908038)
  - add a KexAlgorithms knob to the client and server configuration (#951704)
  - fix parsing logic of ldap.conf file (#954094)
  - Add HMAC-SHA2 algorithm support (#969565)
  - store krb5 credentials after a pam session is created (#974096)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-82
changelog:
  - check return value of PK11_Authenticate in ssh-add -n (#782912)
  - document available methods to RequiredAuthentications[12] (#821641)
  - fix ssh-copy-id (#836650)
  - fix segmentation fault in ssh client (#836655)
  - update pam_ssh_agent_auth to 0.9.3 upstream version
  - fix segfault in su when pam_ssh_agent_auth is used and the ssh-agent
    is not running (#834404)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-73
changelog:
  - remove openssh-4.3p2-no-v6only.patch (#732955)
  - adjust Linux out-of-memory killer (#744236)
  - fix sshd init script - check existence of crypto (#797384)
  - add RequiredAuthentications[12] (#657378)
  - run privsep slave process as the users SELinux context (#798241)


author: Petr Lautrbach <plautrba@redhat.com> 5.3p1-71
changelog:
  - enable aes-ctr ciphers use the EVP engines from OpenSSL such as the AES-NI (#756929)
  - add CAVS test driver for the aes-ctr ciphers (#782091)


author: Jan F. Chadima <jchadima@redhat.com> - 5.5p1-36
changelog:
  - add ldap backend (#455350)
  - skip sshd init's rsa1 creation in fips mode (#672870)
  - improve audit session key destroy (#642792)


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-28
changelog:
  - Repair initscript to be acord to guidelines (#521860)
  - Add bugzilla# to application of edns and xmodifiers patch


author: Jan F. Chadima <jchadima@redhat.com> - 5.2p1-20
changelog:
  - merged xmodifiers to redhat patch
  - merged gssapi-role to selinux patch
  - merged cve-2007_3102 to audit patch
  - sesftp patch only with WITH_SELINUX flag
  - rearange sesftp patch according to upstream request


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-5
changelog:
  - remove obsolete --with-rsh (#478298)
  - add pam_sepermit to allow blocking confined users in permissive mode
    (#471746)
  - move system-auth after pam_selinux in the session stack


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-4
changelog:
  - set FD_CLOEXEC on channel sockets (#475866)
  - adjust summary
  - adjust nss-keys patch so it is applicable without selinux patches (#470859)


author: Tomas Mraz <tmraz@redhat.com> - 5.1p1-1
changelog:
  - upgrade to new upstream release
  - fixed a problem with public key authentication and explicitely
    specified SELinux role


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-2
changelog:
  - add LANGUAGE to accepted/sent environment variables (#443231)
  - use pam_selinux to obtain the user context instead of doing it itself
  - unbreak server keep alive settings (patch from upstream)
  - small addition to scp manpage


author: Tomas Mraz <tmraz@redhat.com> - 5.0p1-1
changelog:
  - upgrade to new upstream (#441066)
  - prevent initscript from killing itself on halt with upstart (#438449)
  - initscript status should show that the daemon is running
    only when the main daemon is still alive (#430882)


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-10
changelog:
  - fix race on control master and cleanup stale control socket (#436311)
    patches by David Woodhouse


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-9
changelog:
  - set FD_CLOEXEC on client socket
  - apply real fix for window size problem (#286181) from upstream
  - apply fix for the spurious failed bind from upstream
  - apply open handle leak in sftp fix from upstream


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-4
changelog:
  - do not copy /etc/localtime into the chroot as it is not
    necessary anymore (#193184)
  - call setkeycreatecon when selinux context is established
  - test for NULL privk when freeing key (#391871) - patch by
    Pierre Ossman


author: Tomas Mraz <tmraz@redhat.com> - 4.7p1-1
changelog:
  - upgrade to latest upstream
  - use libedit in sftp (#203009)
  - fixed audit log injection problem (CVE-2007-3102)


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-8
changelog:
  - fix sftp client problems on write error (#247802)
  - allow disabling autocreation of server keys (#235466)


author: Tomas Mraz <tmraz@redhat.com> - 4.5p1-2
changelog:
  - support mls on labeled networks (#220487)
  - support mls level selection on unlabeled networks
  - allow / in usernames in scp (only beginning /, ./, and ../ is special)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-11
changelog:
  - merge sshd initscript patches
  - kill all ssh sessions when stop is called in halt or reboot runlevel
  - remove -TERM option from killproc so we don't race on sshd restart


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Miroslav Lichvar <mlichvar@redhat.com> 6.0-3
changelog:
  - include patch 004
  - suppress install-info errors (#515910)
  - remove dir* in infodir after install (#492097)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.2-8
changelog:
  - fix cursor position when prompt has one invisible character (#358231)
  - merge review fixes (#226361)
  - fix source URL


author: Miroslav Lichvar <mlichvar@redhat.com> 5.2-3
changelog:
  - link libreadline with libtinfo (#232277)
  - include upstream 5.2-001 patch
  - move static libraries to -static subpackage, spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> 5.2-1
changelog:
  - update to 5.2 (#213795)
  - use CFLAGS when linking (#199374)
  - package docs and examples (#172497)
  - spec cleanup


author: Jindrich Novy <jnovy@redhat.com> 5.1-1
changelog:
  - update to readline-5.1
  - apply new proposed upstream patches for 5.1 (001-004)
  - drop "read -e" patch, applied upstream


author: Matt Wilson <msw@redhat.com> 4.2a-2
changelog:
  - removed the manual symlinking of .so, readline handles this by itself
  - call only %makeinstall, not %makeinstall install install-shared as
    this makes bogus .old files in the buildroot


author: Bernhard Rosenkraenzer <bero@redhat.com> 4.2-3
changelog:
  - Don't use readline's internal re-implementation of strpbrk on systems
    that have strpbrk - the system implementation is faster and better maintained.


author: Bernhard Rosenkraenzer <bero@redhat.com> 4.2-2
changelog:
  - Make sure headers can be included from C++ applications (#51131)
    (Patch based on Debian's with the bugs removed ;) )


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change the paths listed for the header files in the man page to reflect
    the location changes from previous versions (#35073)
  - note that "on" is acceptable instead of "On" in the man page (#21327)


author: Marek Kasik <mkasik@redhat.com> - 0.12.4-4
changelog:
  - Add poppler-0.12.4-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.12.4-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.12.4-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639860


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-4
changelog:
  - Fix text selection
  - Add patch poppler-0.12.3-text-selection.patch by Brian Ewins
  - Add patch poppler-0.12.3-text-selection-tables.patch by Marek Kasik
  - Make Provides/Obsoletes versioned
  - Add requirement of poppler-data
  - Resolves: #557812


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-3
changelog:
  - Correct %changelog
  - Correct permissions of goo/GooTimer.h
  - Convert pdftohtml.1 to utf8
  - Related: #543948


author: Adam Jackson <ajax@redhat.com> 0.8.0-3
changelog:
  - poppler-0.8.0-ocg-crash.patch: Fix a crash when no optional content
    groups are defined.
  - Mangle configure to account for the new directory for qt3 libs.
  - Fix grammar in %description.


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-33
changelog:
  - add into example in crontab user-name
  - change name of crontab to crontab1 to be able add patch into cvs
  - Resolves: rhbz#609544


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-30
changelog:
  - 491793 thanks Andrew Hecox for patch which allows set allow/deny jobs
  - comment change "empty crontab"


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-26
changelog:
  - change /etc/crontab. All anacron jobs in cron.daily,weekly,...
   are check by anacron every hour. Anacron run them if they didn't
   run today.


author: Marcela Maslanova <mmaslano@redhat.com> 1.10-22
changelog:
  - remove scripts for delay, anacron now own most of the scripts. 
  Crontabs owns only run-parts, /etc/crontab and crontabs sysconfig.


author: Marcela Maslanova <mmaslano@redhat.com> 1.10-15
changelog:
  - corrected license tag in spec
  - add config file to crontab - delay of cron.{daily,...} could be
      switch off
  - Resolves: rhbz#253536


author: Erik Troan <ewt@redhat.com>
changelog:
  - moved crontab jobs up a bit to make sure they aren't confused by
    switching to and fro daylight savings time


author: Peter Schiffer <pschiffe@redhat.com> - 12.4-7
changelog:
  - resolves: #857120
    fixed incorrect return code when TMPDIR points to invalid path
  - resolves: #845098
    added support for alternatives


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-1
changelog:
  - Place mailx to /bin/mailx, to avoid extra symlink in redhat-lsb package
  - /bin/mailx is now a base binary, another symlinked to it.


author: Dmitry Butskoy <Dmitry@Butskoy.name>
changelog:
  - add missed BR for krb5-devel
  - activate IPv6 support
  - change config to /etc/mail.rc for compatibility
  - add triggerpostun scriptlets against previous mailx and nail
    to check and merge (when possible) their user config changes
  - use proper config filename in manuals
  - use "less" instead of non-provided "pg" for nobsdcompat mode


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-0
changelog:
  - Change the name from "nail" to upstream's "mailx".
    Merge with the ordinary "mailx" cvs tree for Fedora 10.
    Now this stuff supersedes the old ancient mailx-8.x in Fedora.
  - Build with nss instead of openssl, for "Security Consolidation" process.


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.0-2
changelog:
  - complete "mailx to nail" changes in the manual and config files
  - drop _smp_mflags: it caused make to work incorrectly.


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.0-1
changelog:
  - upgrade to 12.0
  - change new upstream name "mailx" to the old name "nail" to avoid
    conflicts with the Core mailx package.
  - drop Source1, use package's html file instead.


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 11.25-3
changelog:
  - more spec file cleanups
  - accepted for Fedora Extra
    (review by Aurelien Bompard <gauret@free.fr>)


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-15
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #964687


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-12
changelog:
  - Update info about trap in man page
    Resolves: #799958
  - Enable system-wide bash_logout
    Resolves: #677439
  - instead of setting the signal handler to SIG_IGN while installing
    the new trap handler, block the signal and unblock it after the new handler
    is installed
    Resolves: #695656


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-5
changelog:
  - Builtins like echo and printf won't report errors
    when output does not succeed due to EPIPE
    Resolves: #664468


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-4
changelog:
  - don't segfault when trying to bind int variable to array
    with bad array subsrcipt
    Resolves: #618289


author: Roman Rakus rrakus@redhat.com 4.1.2-1
changelog:
  - rebase to 4.1
  - Patch level 2
    Resolves #542692
  - Include COPYING in bash base rpm
    Resolves #553250


author: Jesse Keating <jkeating@redhat.com> - 3.2-29
changelog:
  - Add the Requires(post) back for ncurses-libs, so that rpm knows
    where to break the loop.  The post actually does require the curses
    libs for the sh calls.  Could consider doing this in LUA and not have
    any external deps.


author: Roman Rakus <rrakus@redhat.com> - 3.2-28
changelog:
  - Removing Requires for mktemp and ncurses, which cause
    dependencing loop
  - Enabling #define SSH_SOURCE_BASHRC, because ssh changed.
    Resolves: #458839
  - Catch signals right after calling execve()
    Resolves: #455548


author: Tomas Janousek <tjanouse@redhat.com> - 3.2-20
changelog:
  - Added bash32-026 upstream official patch
  - Added bash32-027 upstream official patch (#249987)
  - Added bash32-028 upstream official patch
  - Added bash32-029 upstream official patch (#286861)
  - Added bash32-030 upstream official patch
  - Added bash32-031 upstream official patch (#358231)
  - Added bash32-032 upstream official patch
  - Added bash32-033 upstream official patch
  - Fix insert command repeating in vi mode (#190350)


author: Tomas Janousek <tjanouse@redhat.com> - 3.2-19
changelog:
  - fix cursor position when prompt has one invisible character (#358231)
  - dropped examples/loadables/ from docs, since it wasn't possible to build them
    anyway (#174380)
  - fix #286861: Wrong input confuses bash's arithmetic unit permanently
  - fix #344411: $RANDOM stays the same when job executed in the background


author: Pete Graner <pgraner@redhat.com> - 3.2-18
changelog:
  - Added bash32-021 upstream official patch
  - Added bash32-025 upstream official patch
  - Added bash32-024 upstream official patch
  - Added bash32-023 upstream official patch
  - Added bash32-022 upstream official patch


author: Pete Graner <pgraner@redhat.com> - 3.2-17
changelog:
  - Added bash32-018 upstream official patch
  - Added bash32-020 upstream official patch
  - Added bash32-019 upstream official patch


author: Pete Graner <pgraner@redhat.com> - 3.2-15
changelog:
  - Update to the Improve bash $RANDOM pseudo RNG (bug #234906) 
    now works with subshells and make $RANDOM on demand thus reducing the 
    amount of AVCs thrown.


author: Tim Waugh <twaugh@redhat.com> 3.2-7
changelog:
  - Reinstated this change:
    - Post requires ncurses (bug #224567).
  - Reverted this change:
    - Added triggers for install-info (bug #225609).


author: Tim Waugh <twaugh@redhat.com> 3.2-5
changelog:
  - Added triggers for install-info (bug #225609).
  - Use full path to utilities in scriptlets (bug #225609).
  - Fix missing sh-bangs in example scripts (bug #225609).
  - Post requires ncurses (bug #224567).
  - Removed Prefix tag (bug #225609).
  - Fixed BuildRoot tag (bug #225609).
  - Removed trailing full-stop from summary (bug #225609).
  - Spec file is now UTF-8 (bug #225609).
  - Removed obsolete Obsoletes (bug #225609).
  - Moved 'make check' to new 'check' section (bug #225609).
  - Removed uses of RPM_SOURCE_DIR (bug #225609).
  - Fixed macros in changelog (bug #225609).
  - Changed tabs to spaces (bug #225609).


author: Tim Waugh <twaugh@redhat.com> 3.2-1
changelog:
  - Build requires autoconf and gettext.
  - 3.2.  No longer need aq, login, ulimit, sighandler or read-memleak
    patches.


author: Tim Waugh <twaugh@redhat.com> 3.1-2
changelog:
  - No longer need loadables, mbinc or shellfunc patches.
  - Use literal single-quote in bash man page where appropriate (bug #177051).


author: Tim Waugh <twaugh@redhat.com> 3.1-1
changelog:
  - 3.1.
  - No longer need ia64, utf8, multibyteifs, jobs, sigpipe,
    read-e-segfault, manpage, crash, pwd, afs, subshell patches.
  - Remove wrap patch for now.
  - Use upstream patch to fix arrays.


author: Tim Waugh <twaugh@redhat.com> 3.0-40
changelog:
  - Fix read memleak when reading from non-blocking fd (bug #173283).
  - Missed another loop for improved sighandler patch (bug #169231).


author: Tim Waugh <twaugh@redhat.com> 3.0-36
changelog:
  - Added Url: tag (bug #172770).
  - Do not explicitly gzip info pages (bug #172770).
  - Fix permissions on bashbug (bug #172770).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixed AFS support for output redirection, so that the correct errors
    are reported for other filesystems (bug #155373).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Reverted this change:
    - Added code to /etc/skel/.bash_logout to support the gpm selection buffer
      invalidation on virtual terminals (bug #115493).


author: Tim Waugh <twaugh@redhat.com> 3.0-21
changelog:
  - Added code to /etc/skel/.bash_logout to support the gpm selection buffer
    invalidation on virtual terminals (bug #115493).


author: Tim Waugh <twaugh@redhat.com> 3.0-13
changelog:
  - Check for EINVAL from waitpid() and avoid WCONTINUED in that case.
  - Fixed jobs4 test.
  - Applied experimental upstream patch for trap compatibility.
  - Re-make documentation to reflect source changes.


author: Tim Waugh <twaugh@redhat.com> 3.0-5
changelog:
  - Make trap usage string show POSIX usage (bug #128938).
  - Updated ${x[@]:1} expansion fix from bug-bash list.
  - Updated patch to fix unset array crash (from bug-bash list).


author: Tim Waugh <twaugh@redhat.com> 3.0-2
changelog:
  - Fixed brace expansion (bug #129128).
  - Build with AFS support again, since bug #86514 seems fixed upstream
    (bug #129094).


author: Tim Waugh <twaugh@redhat.com> 2.05b-23
changelog:
  - Fix a warning message (bug #79629).
  - Don't remove generated source during build, for debuginfo package.
  - Don't build with AFS support (bug #86514).


author: Tim Waugh <twaugh@redhat.com> 2.05b-6
changelog:
  - Add the (4) patches from ftp.gnu.org (bug #75888, bug #72512).
  - Ship '.' man page, which doesn't get picked up by glob.
  - Don't install files not shipped when building.
  - Locale shell variables fix (bug #74701).


author: Tim Waugh <twaugh@redhat.com> 2.05b-4
changelog:
  - Fix history substitution modifiers in UTF-8 (bug #70294, bug #71186).
  - Fix ADVANCE_CHAR at end of string (bug #70819).
  - docs: CWRU/POSIX.NOTES no longer exists, but ship POSIX.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05a-9
changelog:
  - Add patch from Ulrich Drepper to get better error messages when trying
    to launch an application with a bad ELF interpreter (e.g. libc5 ld.so)
    (#60870)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-5
changelog:
  - Don't set BASH_ENV in .bash_profile, it causes .bashrc to be sourced
    twice in interactive non-login shells.
  - s/Copyright/License/


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-2
changelog:
  - bash comes with its own copy of readline... Add the patches we're
    applying in the readline package.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-1
changelog:
  - Update to 2.05
  - Change PROMPT_COMMAND in bashrc for xterms
    to something less space consuming (#24159)
  - Provide plugs for alternate prompt commands (#30634), but don't
    default to them


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 2.04 final
  - remove the echo, pwd, test and kill man pages from the package,
    we're getting them from sh-utils


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 2.04beta5
  - adapt patches
  - Fix up bashrc
  - Don't put in bashrc1, this should be done by the bash1 package
  - use install -c instead of plain install to work on *BSD
  - remove the collected patches - they're now in the base version.
  - make compressed man pages optional


author: Florian La Roche <Florian.LaRoche@redhat.com>
changelog:
  - add some collected patches for bash2
  - change it over to be the main bash package
  - install man-pages root:root
  - obsolete bash2, bash2-doc


author: Ian Macdonald <ianmacd@xs4all.nl>
changelog:
  - upgraded to version 2.02
  - Alpha, MIPS & Sparc patches removed due to lack of test platforms
  - glibc & signal patches no longer required
  - added documentation subpackage (doc)


author: Donnie Barnes <djb@redhat.com>
changelog:
  - added signal handling patch from Dean Gaudet <dgaudet@arctic.org> that
    is based on a change made in bash 2.0.  Should fix some early exit
    problems with suspends and fg.


author: Ray Strode <rstrode@redhat.com> - 1:1.2.16-9
changelog:
  Resolves: #547808
  - Fix activation of daemons (#545267)
  - Fix reload memleak (fdo #24697)
  - Don't forget about pending activations on reload (fdo #24350)
  - Fix reload race (fdo #21597)


author: Colin Walters <walters@redhat.com> - 1:1.2.16-2
changelog:
  - Explicitly add a dbus group id, fixes dbus files getting a
    random group id in cases where the RPM install order varies.
    Fixes https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=458183


author: Colin Walters <walters@redhat.com> - 1:1.2.16-1
changelog:
  - Upstream 1.2.16
  - Remove inotify patch, now upstreamed
  - Remove timeout patch, obsolete with upstream change to infinite
    timeout maximum by default


author: Matthias Clasen <mclasen@redhat.com> - 1.2.1-6
changelog:
  - Add a patch from upstream git that adds a method
    for changing the activation environment on the session bus


author: John (J5) Palmieri <johnp@redhat.com> - 1.2.1-1
changelog:
  - update to latest upstream
  - major version change is really a maint release for 1.1.20
    please read the NEWS file in the source for more information


author: David Zeuthen <davidz@redhat.com> - 1.1.20-1.el6_10
changelog:
  - Update to latest upstream release. Includes fix for CVE-2008-0595.
  - Drop some patches that went upstream already


author: John (J5) Palmieri <johnp@redhat.com> - 1.1.3-1
changelog:
  - new upstream version which obsoletes a number of our patches
  - doc section added for the devhelp docs


author: Dan Walsh <dwalsh@redhat.com> - 1.1.2-5.el6_10
changelog:
  - Reverse we_were_root check to setpcap if we were root.  Also only init
  audit if we were root.  So error dbus message will not show up when policy 
  reload happens.  dbus -session will no longer try to send audit message, 
  only system will.


author: David Zeuthen <davidz@redhat.com> - 1.1.2-2.el6_10
changelog:
  - Move system bus activation helper to /{lib,lib64}/dbus-1. Also set
    the correct mode and permissions. 
  - Own the directory /usr/share/dbus-1/system-services
  - Delete the diretory /{lib,lib64}/dbus-1.0 as it's not used
  - Pass 'dbus' instead of 81 as --with-dbus-user; otherwise the setuid
    system bus activation helper fails


author: Ray Strode <rstrode@redhat.com> - 1.0.1-1
changelog:
  - Update to 1.0.1
  - Apply patch from Thiago Macieira <thiago@kde.org> to 
    fix failed assertion in threading implementation
  - Drop some crazy looking build time speed optimization


author: John (J5) Palmieri <johnp@redhat.com> - 0.90-6
changelog:
  - change the arch-deps.h include directory to /usr/lib[64] instead of /lib[64]
    in the dbus-1.pc file after compile


author: John (J5) Palmieri <johnp@redhat.com> - 0.90-4
changelog:
  - add patch that pregenerates the xml introspect file so d-bus doesn't
    have to be running suring the build.


author: Karsten Hopp <karsten@redhat.de> 0.61-5.2
changelog:
  - add buildrequires libICE-devel, libSM-devel, libcap-devel
  - change buildrequires form libX11 to libX11-devel


author: John (J5) Palmieri <johnp@redhat.com> - 0.61-5
changelog:
  - Backport patch from dbus-connection.c
    - Allows interfaces to be NULL in the message header as per the spec
    - Fixes a problem with pendings calls blocking on a data starved socket


author: John (J5) Palmieri <johnp@redhat.com> 0.61-3
changelog:
  - ABI hasn't changed so add patch that makes dbus-sharp think
    it is still 0.60 (mono uses hard version names so any change
    means apps need to recompile)


author: John (J5) Palmieri <johnp@redhat.com> 0.60-7
changelog:
  - Add patch to fix the python callchain
  - Symlink dbus-send to /usr/bin because some applications
    look for it there


author: John (J5) Palmieri <johnp@redhat.com> 0.60-5
changelog:
  - move base libraries and binaries to /bin and /lib so they can be started
    before /usr is mounted on network mounted /usr systems
  - have D-Bus start early


author: John (J5) Palmieri <johnp@redhat.com> - 0.36.2-1
changelog:
  - upgrade to 0.36.2 which fixes an exploit where
    users can attach to another user's session bus (CAN-2005-0201)


author: John (J5) Palmieri <johnp@redhat.com> - 0.36-1
changelog:
  - Upgrade to dbus-0.36
  - Split modules that go into %{_lib}/python2.4/site-packages/dbus
  and those that go into %{python_sitelib}/dbus (they differ on 64bit)
  - Renable Qt bindings since packages in core can use them


author: John (J5) Palmieri <johnp@redhat.com> - 0.35.2-1
changelog:
  - Upgrade to dbus-0.35.2
  - removed dbus-0.34-kill-babysitter.patch
  - removed dbus-0.34-python-threadsync.patch
  - removed dbus-0.23-selinux-avc-audit.patch
  - added dbus-0.35.2-selinux-avc-audit.patch
  - take out restarts on upgrade


author: John (J5) Palmieri <johnp@redhat.com> - 0.34-1
changelog:
  - Upgrade to dbus-0.34
  - added dbus-0.34-kill-babysitter.patch
  - added dbus-0.34-python-threadsync.patch
  - remove dbus-0.32-print_child_pid.patch
  - remove dbus-0.32-deadlock-fix.patch
  - remove dbus-0.33-types.patch


author: John (J5) Palmieri <johnp@redhat.com> - 0.32-5
changelog:
  - replace selinux_init patch with selinux_chroot_workaround patch
    to work around bad selinux interactions when using chroots
    on the beehive build machines


author: John (J5) Palmieri <johnp@redhat.com> - 0.32-2
changelog:
  - add selinux-init patch to fix dbus from segfaulting when
    building on machines that don't have selinux enabled


author: John (J5) Palmieri <johnp@redhat.com> - 0.31-1
changelog:
  - update to upstream version 0.31
  - take out user has same id patch (merged upstream)
  - udi patch updated
  - dbus-daemon-1 renamed to dbus-daemon
  - dbus-glib-tool renamed to dbus-binding-tool
  - force gcc33 because pyrex generate improper lvalue code
  - disable audit patch for now


author: John (J5) Palmieri <johnp@redhat.com> - 0.23-4
changelog:
  - Explicitly pass in the pid file location to ./configure instead of
    letting it guess based on the build enviornment


author: John (J5) Palmieri <johnp@redhat.com> - 0.23-1
changelog:
  - Update to upstream version 0.23
  - Drop all patches except for the UDI patch as they have been 
    integrated upstream 
  - List of API changes:
        * add setgroups() to drop supplementary groups
        * removed dbus_bug_get_with_g_main since it's been replaced by dbus_g_bus_get
        * added support for int64 and uint64 to the python bindings
        * use SerivceOwnerChanges signal instead of ServiceCreated and ServiceDeleted


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Add a requires for glib2-devel in the devel package
  - Add SE-Linux backport from Colin Walters that fixes 
    messages getting lost in SE-Linux contexts


