# changelog

author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-17.el8
changelog:
  - kvm-linux-headers-Update-to-include-KVM_CAP_S390_HPAGE_1.patch [bz#1610906]
  - kvm-s390x-Enable-KVM-huge-page-backing-support.patch [bz#1610906]
  - kvm-redhat-s390x-add-hpage-1-to-kvm.conf.patch [bz#1610906]
  - Resolves: bz#1610906
    ([IBM 8.0 FEAT] KVM: Huge Pages - libhugetlbfs Enablement - qemu-kvm part)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-18.el8
changelog:
  Mass import from RHEL 7.6 qemu-kvm-rhev, including fixes to the following BZs:

  - kvm-AArch64-Add-virt-rhel7.6-machine-type.patch [bz#1558723]
  - kvm-cpus-Fix-event-order-on-resume-of-stopped-guest.patch [bz#1566153]
  - kvm-qemu-img-Check-post-truncation-size.patch [bz#1523065]
  - kvm-vga-catch-depth-0.patch [bz#1575541]
  - kvm-Fix-x-hv-max-vps-compat-value-for-7.4-machine-type.patch [bz#1583959]
  - kvm-ccid-card-passthru-fix-regression-in-realize.patch [bz#1584984]
  - kvm-Use-4-MB-vram-for-cirrus.patch [bz#1542080]
  - kvm-spapr_pci-Remove-unhelpful-pagesize-warning.patch [bz#1505664]
  - kvm-rpm-Add-nvme-VFIO-driver-to-rw-whitelist.patch [bz#1416180]
  - kvm-qobject-Use-qobject_to-instead-of-type-cast.patch [bz#1557995]
  - kvm-qobject-Ensure-base-is-at-offset-0.patch [bz#1557995]
  - kvm-qobject-use-a-QObjectBase_-struct.patch [bz#1557995]
  - kvm-qobject-Replace-qobject_incref-QINCREF-qobject_decre.patch [bz#1557995]
  - kvm-qobject-Modify-qobject_ref-to-return-obj.patch [bz#1557995]
  - kvm-rbd-Drop-deprecated-drive-parameter-filename.patch [bz#1557995]
  - kvm-iscsi-Drop-deprecated-drive-parameter-filename.patch [bz#1557995]
  - kvm-block-Add-block-specific-QDict-header.patch [bz#1557995]
  - kvm-qobject-Move-block-specific-qdict-code-to-block-qdic.patch [bz#1557995]
  - kvm-block-Fix-blockdev-for-certain-non-string-scalars.patch [bz#1557995]
  - kvm-block-Fix-drive-for-certain-non-string-scalars.patch [bz#1557995]
  - kvm-block-Clean-up-a-misuse-of-qobject_to-in-.bdrv_co_cr.patch [bz#1557995]
  - kvm-block-Factor-out-qobject_input_visitor_new_flat_conf.patch [bz#1557995]
  - kvm-block-Make-remaining-uses-of-qobject-input-visitor-m.patch [bz#1557995]
  - kvm-block-qdict-Simplify-qdict_flatten_qdict.patch [bz#1557995]
  - kvm-block-qdict-Tweak-qdict_flatten_qdict-qdict_flatten_.patch [bz#1557995]
  - kvm-block-qdict-Clean-up-qdict_crumple-a-bit.patch [bz#1557995]
  - kvm-block-qdict-Simplify-qdict_is_list-some.patch [bz#1557995]
  - kvm-check-block-qdict-Rename-qdict_flatten-s-variables-f.patch [bz#1557995]
  - kvm-check-block-qdict-Cover-flattening-of-empty-lists-an.patch [bz#1557995]
  - kvm-block-Fix-blockdev-blockdev-add-for-empty-objects-an.patch [bz#1557995]
  - kvm-rbd-New-parameter-auth-client-required.patch [bz#1557995]
  - kvm-rbd-New-parameter-key-secret.patch [bz#1557995]
  - kvm-block-mirror-honor-ratelimit-again.patch [bz#1572856]
  - kvm-block-mirror-Make-cancel-always-cancel-pre-READY.patch [bz#1572856]
  - kvm-iotests-Add-test-for-cancelling-a-mirror-job.patch [bz#1572856]
  - kvm-iotests-Split-214-off-of-122.patch [bz#1518738]
  - kvm-block-Add-COR-filter-driver.patch [bz#1518738]
  - kvm-block-BLK_PERM_WRITE-includes-._UNCHANGED.patch [bz#1518738]
  - kvm-block-Add-BDRV_REQ_WRITE_UNCHANGED-flag.patch [bz#1518738]
  - kvm-block-Set-BDRV_REQ_WRITE_UNCHANGED-for-COR-writes.patch [bz#1518738]
  - kvm-block-quorum-Support-BDRV_REQ_WRITE_UNCHANGED.patch [bz#1518738]
  - kvm-block-Support-BDRV_REQ_WRITE_UNCHANGED-in-filters.patch [bz#1518738]
  - kvm-iotests-Clean-up-wrap-image-in-197.patch [bz#1518738]
  - kvm-iotests-Copy-197-for-COR-filter-driver.patch [bz#1518738]
  - kvm-iotests-Add-test-for-COR-across-nodes.patch [bz#1518738]
  - kvm-qemu-io-Use-purely-string-blockdev-options.patch [bz#1576598]
  - kvm-qemu-img-Use-only-string-options-in-img_open_opts.patch [bz#1576598]
  - kvm-iotests-Add-test-for-U-force-share-conflicts.patch [bz#1576598]
  - kvm-qemu-io-Drop-command-functions-return-values.patch [bz#1519617]
  - kvm-qemu-io-Let-command-functions-return-error-code.patch [bz#1519617]
  - kvm-qemu-io-Exit-with-error-when-a-command-failed.patch [bz#1519617]
  - kvm-iotests.py-Add-qemu_io_silent.patch [bz#1519617]
  - kvm-iotests-Let-216-make-use-of-qemu-io-s-exit-code.patch [bz#1519617]
  - kvm-qcow2-Repair-OFLAG_COPIED-when-fixing-leaks.patch [bz#1527085]
  - kvm-iotests-Repairing-error-during-snapshot-deletion.patch [bz#1527085]
  - kvm-block-Make-bdrv_is_writable-public.patch [bz#1588039]
  - kvm-qcow2-Do-not-mark-inactive-images-corrupt.patch [bz#1588039]
  - kvm-iotests-Add-case-for-a-corrupted-inactive-image.patch [bz#1588039]
  - kvm-main-loop-drop-spin_counter.patch [bz#1168213]
  - kvm-target-ppc-Factor-out-the-parsing-in-kvmppc_get_cpu_.patch [bz#1560847]
  - kvm-target-ppc-Don-t-require-private-l1d-cache-on-POWER8.patch [bz#1560847]
  - kvm-ppc-spapr_caps-Don-t-disable-cap_cfpc-on-POWER8-by-d.patch [bz#1560847]
  - kvm-qxl-fix-local-renderer-crash.patch [bz#1567733]
  - kvm-qemu-img-Amendment-support-implies-create_opts.patch [bz#1537956]
  - kvm-block-Add-Error-parameter-to-bdrv_amend_options.patch [bz#1537956]
  - kvm-qemu-option-Pull-out-Supported-options-print.patch [bz#1537956]
  - kvm-qemu-img-Add-print_amend_option_help.patch [bz#1537956]
  - kvm-qemu-img-Recognize-no-creation-support-in-o-help.patch [bz#1537956]
  - kvm-iotests-Test-help-option-for-unsupporting-formats.patch [bz#1537956]
  - kvm-iotests-Rework-113.patch [bz#1537956]
  - kvm-qemu-img-Resolve-relative-backing-paths-in-rebase.patch [bz#1569835]
  - kvm-iotests-Add-test-for-rebasing-with-relative-paths.patch [bz#1569835]
  - kvm-qemu-img-Special-post-backing-convert-handling.patch [bz#1527898]
  - kvm-iotests-Test-post-backing-convert-target-behavior.patch [bz#1527898]
  - kvm-migration-calculate-expected_downtime-with-ram_bytes.patch [bz#1564576]
  - kvm-sheepdog-Fix-sd_co_create_opts-memory-leaks.patch [bz#1513543]
  - kvm-qemu-iotests-reduce-chance-of-races-in-185.patch [bz#1513543]
  - kvm-blockjob-do-not-cancel-timer-in-resume.patch [bz#1513543]
  - kvm-nfs-Fix-error-path-in-nfs_options_qdict_to_qapi.patch [bz#1513543]
  - kvm-nfs-Remove-processed-options-from-QDict.patch [bz#1513543]
  - kvm-blockjob-drop-block_job_pause-resume_all.patch [bz#1513543]
  - kvm-blockjob-expose-error-string-via-query.patch [bz#1513543]
  - kvm-blockjob-Fix-assertion-in-block_job_finalize.patch [bz#1513543]
  - kvm-blockjob-Wrappers-for-progress-counter-access.patch [bz#1513543]
  - kvm-blockjob-Move-RateLimit-to-BlockJob.patch [bz#1513543]
  - kvm-blockjob-Implement-block_job_set_speed-centrally.patch [bz#1513543]
  - kvm-blockjob-Introduce-block_job_ratelimit_get_delay.patch [bz#1513543]
  - kvm-blockjob-Add-block_job_driver.patch [bz#1513543]
  - kvm-blockjob-Update-block-job-pause-resume-documentation.patch [bz#1513543]
  - kvm-blockjob-Improve-BlockJobInfo.offset-len-documentati.patch [bz#1513543]
  - kvm-job-Create-Job-JobDriver-and-job_create.patch [bz#1513543]
  - kvm-job-Rename-BlockJobType-into-JobType.patch [bz#1513543]
  - kvm-job-Add-JobDriver.job_type.patch [bz#1513543]
  - kvm-job-Add-job_delete.patch [bz#1513543]
  - kvm-job-Maintain-a-list-of-all-jobs.patch [bz#1513543]
  - kvm-job-Move-state-transitions-to-Job.patch [bz#1513543]
  - kvm-job-Add-reference-counting.patch [bz#1513543]
  - kvm-job-Move-cancelled-to-Job.patch [bz#1513543]
  - kvm-job-Add-Job.aio_context.patch [bz#1513543]
  - kvm-job-Move-defer_to_main_loop-to-Job.patch [bz#1513543]
  - kvm-job-Move-coroutine-and-related-code-to-Job.patch [bz#1513543]
  - kvm-job-Add-job_sleep_ns.patch [bz#1513543]
  - kvm-job-Move-pause-resume-functions-to-Job.patch [bz#1513543]
  - kvm-job-Replace-BlockJob.completed-with-job_is_completed.patch [bz#1513543]
  - kvm-job-Move-BlockJobCreateFlags-to-Job.patch [bz#1513543]
  - kvm-blockjob-Split-block_job_event_pending.patch [bz#1513543]
  - kvm-job-Add-job_event_.patch [bz#1513543]
  - kvm-job-Move-single-job-finalisation-to-Job.patch [bz#1513543]
  - kvm-job-Convert-block_job_cancel_async-to-Job.patch [bz#1513543]
  - kvm-job-Add-job_drain.patch [bz#1513543]
  - kvm-job-Move-.complete-callback-to-Job.patch [bz#1513543]
  - kvm-job-Move-job_finish_sync-to-Job.patch [bz#1513543]
  - kvm-job-Switch-transactions-to-JobTxn.patch [bz#1513543]
  - kvm-job-Move-transactions-to-Job.patch [bz#1513543]
  - kvm-job-Move-completion-and-cancellation-to-Job.patch [bz#1513543]
  - kvm-block-Cancel-job-in-bdrv_close_all-callers.patch [bz#1513543]
  - kvm-job-Add-job_yield.patch [bz#1513543]
  - kvm-job-Add-job_dismiss.patch [bz#1513543]
  - kvm-job-Add-job_is_ready.patch [bz#1513543]
  - kvm-job-Add-job_transition_to_ready.patch [bz#1513543]
  - kvm-job-Move-progress-fields-to-Job.patch [bz#1513543]
  - kvm-job-Introduce-qapi-job.json.patch [bz#1513543]
  - kvm-job-Add-JOB_STATUS_CHANGE-QMP-event.patch [bz#1513543]
  - kvm-job-Add-lifecycle-QMP-commands.patch [bz#1513543]
  - kvm-job-Add-query-jobs-QMP-command.patch [bz#1513543]
  - kvm-blockjob-Remove-BlockJob.driver.patch [bz#1513543]
  - kvm-iotests-Move-qmp_to_opts-to-VM.patch [bz#1513543]
  - kvm-qemu-iotests-Test-job-with-block-jobs.patch [bz#1513543]
  - kvm-vdi-Fix-vdi_co_do_create-return-value.patch [bz#1513543]
  - kvm-vhdx-Fix-vhdx_co_create-return-value.patch [bz#1513543]
  - kvm-job-Add-error-message-for-failing-jobs.patch [bz#1513543]
  - kvm-block-create-Make-x-blockdev-create-a-job.patch [bz#1513543]
  - kvm-qemu-iotests-Add-VM.get_qmp_events_filtered.patch [bz#1513543]
  - kvm-qemu-iotests-Add-VM.qmp_log.patch [bz#1513543]
  - kvm-qemu-iotests-Add-iotests.img_info_log.patch [bz#1513543]
  - kvm-qemu-iotests-Add-VM.run_job.patch [bz#1513543]
  - kvm-qemu-iotests-iotests.py-helper-for-non-file-protocol.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-206-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-207-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-210-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-211-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-212-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-213-for-blockdev-create-job.patch [bz#1513543]
  - kvm-block-create-Mark-blockdev-create-stable.patch [bz#1513543]
  - kvm-jobs-fix-stale-wording.patch [bz#1513543]
  - kvm-jobs-fix-verb-references-in-docs.patch [bz#1513543]
  - kvm-iotests-Fix-219-s-timing.patch [bz#1513543]
  - kvm-iotests-improve-pause_job.patch [bz#1513543]
  - kvm-rpm-Whitelist-copy-on-read-block-driver.patch [bz#1518738]
  - kvm-rpm-add-throttle-driver-to-rw-whitelist.patch [bz#1591076]
  - kvm-usb-host-skip-open-on-pending-postload-bh.patch [bz#1572851]
  - kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1574216]
  - kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1574216]
  - kvm-block-file-posix-Pass-FD-to-locking-helpers.patch [bz#1519144]
  - kvm-block-file-posix-File-locking-during-creation.patch [bz#1519144]
  - kvm-iotests-Add-creation-test-to-153.patch [bz#1519144]
  - kvm-vhost-user-add-Net-prefix-to-internal-state-structur.patch [bz#1526645]
  - kvm-virtio-support-setting-memory-region-based-host-noti.patch [bz#1526645]
  - kvm-vhost-user-support-receiving-file-descriptors-in-sla.patch [bz#1526645]
  - kvm-osdep-add-wait.h-compat-macros.patch [bz#1526645]
  - kvm-vhost-user-bridge-support-host-notifier.patch [bz#1526645]
  - kvm-vhost-allow-backends-to-filter-memory-sections.patch [bz#1526645]
  - kvm-vhost-user-allow-slave-to-send-fds-via-slave-channel.patch [bz#1526645]
  - kvm-vhost-user-introduce-shared-vhost-user-state.patch [bz#1526645]
  - kvm-vhost-user-support-registering-external-host-notifie.patch [bz#1526645]
  - kvm-libvhost-user-support-host-notifier.patch [bz#1526645]
  - kvm-block-Introduce-API-for-copy-offloading.patch [bz#1482537]
  - kvm-raw-Check-byte-range-uniformly.patch [bz#1482537]
  - kvm-raw-Implement-copy-offloading.patch [bz#1482537]
  - kvm-qcow2-Implement-copy-offloading.patch [bz#1482537]
  - kvm-file-posix-Implement-bdrv_co_copy_range.patch [bz#1482537]
  - kvm-iscsi-Query-and-save-device-designator-when-opening.patch [bz#1482537]
  - kvm-iscsi-Create-and-use-iscsi_co_wait_for_task.patch [bz#1482537]
  - kvm-iscsi-Implement-copy-offloading.patch [bz#1482537]
  - kvm-block-backend-Add-blk_co_copy_range.patch [bz#1482537]
  - kvm-qemu-img-Convert-with-copy-offloading.patch [bz#1482537]
  - kvm-qcow2-Fix-src_offset-in-copy-offloading.patch [bz#1482537]
  - kvm-iscsi-Don-t-blindly-use-designator-length-in-respons.patch [bz#1482537]
  - kvm-file-posix-Fix-EINTR-handling.patch [bz#1482537]
  - kvm-usb-storage-Add-rerror-werror-properties.patch [bz#1595180]
  - kvm-numa-clarify-error-message-when-node-index-is-out-of.patch [bz#1578381]
  - kvm-qemu-iotests-Update-026.out.nocache-reference-output.patch [bz#1528541]
  - kvm-qcow2-Free-allocated-clusters-on-write-error.patch [bz#1528541]
  - kvm-qemu-iotests-Test-qcow2-not-leaking-clusters-on-writ.patch [bz#1528541]
  - kvm-qemu-options-Add-missing-newline-to-accel-help-text.patch [bz#1586313]
  - kvm-xhci-fix-guest-triggerable-assert.patch [bz#1594135]
  - kvm-virtio-gpu-tweak-scanout-disable.patch [bz#1589634]
  - kvm-virtio-gpu-update-old-resource-too.patch [bz#1589634]
  - kvm-virtio-gpu-disable-scanout-when-backing-resource-is-.patch [bz#1589634]
  - kvm-block-Don-t-silently-truncate-node-names.patch [bz#1549654]
  - kvm-pr-helper-fix-socket-path-default-in-help.patch [bz#1533158]
  - kvm-pr-helper-fix-assertion-failure-on-failed-multipath-.patch [bz#1533158]
  - kvm-pr-manager-helper-avoid-SIGSEGV-when-writing-to-the-.patch [bz#1533158]
  - kvm-pr-manager-put-stubs-in-.c-file.patch [bz#1533158]
  - kvm-pr-manager-add-query-pr-managers-QMP-command.patch [bz#1533158]
  - kvm-pr-manager-helper-report-event-on-connection-disconn.patch [bz#1533158]
  - kvm-pr-helper-avoid-error-on-PR-IN-command-with-zero-req.patch [bz#1533158]
  - kvm-pr-helper-Rework-socket-path-handling.patch [bz#1533158]
  - kvm-pr-manager-helper-fix-memory-leak-on-event.patch [bz#1533158]
  - kvm-object-fix-OBJ_PROP_LINK_UNREF_ON_RELEASE-ambivalenc.patch [bz#1556678]
  - kvm-usb-hcd-xhci-test-add-a-test-for-ccid-hotplug.patch [bz#1556678]
  - kvm-Revert-usb-release-the-created-buses.patch [bz#1556678]
  - kvm-file-posix-Fix-creation-locking.patch [bz#1599335]
  - kvm-file-posix-Unlock-FD-after-creation.patch [bz#1599335]
  - kvm-ahci-trim-signatures-on-raise-lower.patch [bz#1584914]
  - kvm-ahci-fix-PxCI-register-race.patch [bz#1584914]
  - kvm-ahci-don-t-schedule-unnecessary-BH.patch [bz#1584914]
  - kvm-qcow2-Fix-qcow2_truncate-error-return-value.patch [bz#1595173]
  - kvm-block-Convert-.bdrv_truncate-callback-to-coroutine_f.patch [bz#1595173]
  - kvm-qcow2-Remove-coroutine-trampoline-for-preallocate_co.patch [bz#1595173]
  - kvm-block-Move-bdrv_truncate-implementation-to-io.c.patch [bz#1595173]
  - kvm-block-Use-tracked-request-for-truncate.patch [bz#1595173]
  - kvm-file-posix-Make-.bdrv_co_truncate-asynchronous.patch [bz#1595173]
  - kvm-block-Fix-copy-on-read-crash-with-partial-final-clus.patch [bz#1590640]
  - kvm-block-fix-QEMU-crash-with-scsi-hd-and-drive_del.patch [bz#1599515]
  - kvm-virtio-rng-process-pending-requests-on-DRIVER_OK.patch [bz#1576743]
  - kvm-file-posix-specify-expected-filetypes.patch [bz#1525829]
  - kvm-iotests-add-test-226-for-file-driver-types.patch [bz#1525829]
  - kvm-block-dirty-bitmap-add-lock-to-bdrv_enable-disable_d.patch [bz#1207657]
  - kvm-qapi-add-x-block-dirty-bitmap-enable-disable.patch [bz#1207657]
  - kvm-qmp-transaction-support-for-x-block-dirty-bitmap-ena.patch [bz#1207657]
  - kvm-qapi-add-x-block-dirty-bitmap-merge.patch [bz#1207657]
  - kvm-qapi-add-disabled-parameter-to-block-dirty-bitmap-ad.patch [bz#1207657]
  - kvm-block-dirty-bitmap-add-bdrv_enable_dirty_bitmap_lock.patch [bz#1207657]
  - kvm-dirty-bitmap-fix-double-lock-on-bitmap-enabling.patch [bz#1207657]
  - kvm-block-qcow2-bitmap-fix-free_bitmap_clusters.patch [bz#1207657]
  - kvm-qcow2-add-overlap-check-for-bitmap-directory.patch [bz#1207657]
  - kvm-blockdev-enable-non-root-nodes-for-backup-source.patch [bz#1207657]
  - kvm-iotests-add-222-to-test-basic-fleecing.patch [bz#1207657]
  - kvm-qcow2-Remove-dead-check-on-ret.patch [bz#1207657]
  - kvm-block-Move-request-tracking-to-children-in-copy-offl.patch [bz#1207657]
  - kvm-block-Fix-parameter-checking-in-bdrv_co_copy_range_i.patch [bz#1207657]
  - kvm-block-Honour-BDRV_REQ_NO_SERIALISING-in-copy-range.patch [bz#1207657]
  - kvm-backup-Use-copy-offloading.patch [bz#1207657]
  - kvm-block-backup-disable-copy-offloading-for-backup.patch [bz#1207657]
  - kvm-iotests-222-Don-t-run-with-luks.patch [bz#1207657]
  - kvm-block-io-fix-copy_range.patch [bz#1207657]
  - kvm-block-split-flags-in-copy_range.patch [bz#1207657]
  - kvm-block-add-BDRV_REQ_SERIALISING-flag.patch [bz#1207657]
  - kvm-block-backup-fix-fleecing-scheme-use-serialized-writ.patch [bz#1207657]
  - kvm-nbd-server-Reject-0-length-block-status-request.patch [bz#1207657]
  - kvm-nbd-server-fix-trace.patch [bz#1207657]
  - kvm-nbd-server-refactor-NBDExportMetaContexts.patch [bz#1207657]
  - kvm-nbd-server-add-nbd_meta_empty_or_pattern-helper.patch [bz#1207657]
  - kvm-nbd-server-implement-dirty-bitmap-export.patch [bz#1207657]
  - kvm-qapi-new-qmp-command-nbd-server-add-bitmap.patch [bz#1207657]
  - kvm-docs-interop-add-nbd.txt.patch [bz#1207657]
  - kvm-nbd-server-introduce-NBD_CMD_CACHE.patch [bz#1207657]
  - kvm-nbd-server-Silence-gcc-false-positive.patch [bz#1207657]
  - kvm-nbd-server-Fix-dirty-bitmap-logic-regression.patch [bz#1207657]
  - kvm-nbd-server-fix-nbd_co_send_block_status.patch [bz#1207657]
  - kvm-nbd-client-Add-x-dirty-bitmap-to-query-bitmap-from-s.patch [bz#1207657]
  - kvm-iotests-New-test-223-for-exporting-dirty-bitmap-over.patch [bz#1207657]
  - kvm-hw-char-serial-Only-retry-if-qemu_chr_fe_write-retur.patch [bz#1592817]
  - kvm-hw-char-serial-retry-write-if-EAGAIN.patch [bz#1592817]
  - kvm-throttle-groups-fix-hang-when-group-member-leaves.patch [bz#1535914]
  - kvm-Disable-aarch64-devices-reappeared-after-2.12-rebase.patch [bz#1586357]
  - kvm-Disable-split-irq-device.patch [bz#1586357]
  - kvm-Disable-AT24Cx-i2c-eeprom.patch [bz#1586357]
  - kvm-Disable-CAN-bus-devices.patch [bz#1586357]
  - kvm-Disable-new-superio-devices.patch [bz#1586357]
  - kvm-Disable-new-pvrdma-device.patch [bz#1586357]
  - kvm-qdev-add-HotplugHandler-post_plug-callback.patch [bz#1607891]
  - kvm-virtio-scsi-fix-hotplug-reset-vs-event-race.patch [bz#1607891]
  - kvm-e1000-Fix-tso_props-compat-for-82540em.patch [bz#1608778]
  - kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586255]
  - kvm-s390x-sclp-fix-maxram-calculation.patch [bz#1595740]
  - kvm-redhat-Make-gitpublish-profile-the-default-one.patch [bz#1425820]
  - Resolves: bz#1168213
    (main-loop: WARNING: I/O thread spun for 1000 iterations while doing stream block device.)
  - Resolves: bz#1207657
    (RFE: QEMU Incremental live backup - push and pull modes)
  - Resolves: bz#1416180
    (QEMU VFIO based block driver for NVMe devices)
  - Resolves: bz#1425820
    (Improve QEMU packaging layout with modularization of the block layer)
  - Resolves: bz#1482537
    ([RFE] qemu-img copy-offloading (convert command))
  - Resolves: bz#1505664
    ("qemu-kvm: System page size 0x1000000 is not enabled in page_size_mask (0x11000). Performance may be slow" show up while using hugepage as guest's memory)
  - Resolves: bz#1513543
    ([RFE] Add block job to create format on a storage device)
  - Resolves: bz#1518738
    (Add 'copy-on-read' filter driver for use with blockdev-add)
  - Resolves: bz#1519144
    (qemu-img: image locking doesn't cover image creation)
  - Resolves: bz#1519617
    (The exit code should be non-zero when qemu-io reports an error)
  - Resolves: bz#1523065
    ("qemu-img resize" should fail to decrease the size of logical partition/lvm/iSCSI image with raw format)
  - Resolves: bz#1525829
    (can not boot up a scsi-block passthrough disk via -blockdev with error "cannot get SG_IO version number: Operation not supported.  Is this a SCSI device?")
  - Resolves: bz#1526645
    ([Intel 7.6 FEAT] vHost Data Plane Acceleration (vDPA) - vhost user client - qemu-kvm-rhev)
  - Resolves: bz#1527085
    (The copied flag should be updated during  '-r leaks')
  - Resolves: bz#1527898
    ([RFE] qemu-img should leave cluster unallocated if it's read as zero throughout the backing chain)
  - Resolves: bz#1528541
    (qemu-img check reports tons of leaked clusters after re-start nfs service to resume writing data in guest)
  - Resolves: bz#1533158
    (QEMU support for libvirtd restarting qemu-pr-helper)
  - Resolves: bz#1535914
    (Disable io throttling for one member disk of a group during io will induce the other one hang with io)
  - Resolves: bz#1537956
    (RFE: qemu-img amend should list the true supported options)
  - Resolves: bz#1542080
    (Qemu core dump at cirrus_invalidate_region)
  - Resolves: bz#1549654
    (Reject node-names which would be truncated by the block layer commands)
  - Resolves: bz#1556678
    (Hot plug usb-ccid for the 2nd time with the same ID as the 1st time failed)
  - Resolves: bz#1557995
    (QAPI schema for RBD storage misses the 'password-secret' option)
  - Resolves: bz#1558723
    (Create RHEL-7.6 QEMU machine type for AArch64)
  - Resolves: bz#1560847
    ([Power8][FW b0320a_1812.861][rhel7.5rc2 3.10.0-861.el7.ppc64le][qemu-kvm-{ma,rhev}-2.10.0-21.el7_5.1.ppc64le] KVM guest does not default to ori type flush even with pseries-rhel7.5.0-sxxm)
  - Resolves: bz#1564576
    (Pegas 1.1 - Require to backport qemu-kvm patch that fixes expected_downtime calculation during migration)
  - Resolves: bz#1566153
    (IOERROR pause code lost after resuming a VM while I/O error is still present)
  - Resolves: bz#1567733
    (qemu abort when migrate during guest reboot)
  - Resolves: bz#1569835
    (qemu-img get wrong backing file path after rebasing image with relative path)
  - Resolves: bz#1572851
    (Core dumped after migration when with usb-host)
  - Resolves: bz#1572856
    ('block-job-cancel' can not cancel a "drive-mirror" job)
  - Resolves: bz#1574216
    (CVE-2018-3639 qemu-kvm-rhev: hw: cpu: speculative store bypass [rhel-7.6])
  - Resolves: bz#1575541
    (qemu core dump while installing win10 guest)
  - Resolves: bz#1576598
    (Segfault in qemu-io and qemu-img with -U --image-opts force-share=off)
  - Resolves: bz#1576743
    (virtio-rng hangs when running on recent (2.x) QEMU versions)
  - Resolves: bz#1578381
    (Error message need update when specify numa distance with node index >=128)
  - Resolves: bz#1583959
    (Incorrect vcpu count limit for 7.4 machine types for windows guests)
  - Resolves: bz#1584914
    (SATA emulator lags and hangs)
  - Resolves: bz#1584984
    (Vm starts failed with 'passthrough' smartcard)
  - Resolves: bz#1586255
    (CVE-2018-11806 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])
  - Resolves: bz#1586313
    (-smp option is not easily found in the output of qemu help)
  - Resolves: bz#1586357
    (Disable new devices in 2.12)
  - Resolves: bz#1588039
    (Possible assertion failure in qemu when a corrupted image is used during an incoming migration)
  - Resolves: bz#1589634
    (Migration failed when rebooting guest with multiple virtio videos)
  - Resolves: bz#1590640
    (qemu-kvm: block/io.c:1098: bdrv_co_do_copy_on_readv: Assertion `skip_bytes < pnum' failed.)
  - Resolves: bz#1591076
    (The driver of 'throttle' is not whitelisted)
  - Resolves: bz#1592817
    (Retrying on serial_xmit if the pipe is broken may compromise the Guest)
  - Resolves: bz#1594135
    (system_reset many times linux guests cause qemu process Aborted)
  - Resolves: bz#1595173
    (blockdev-create is blocking)
  - Resolves: bz#1595180
    (Can't set rerror/werror with usb-storage)
  - Resolves: bz#1595740
    (RHEL-Alt-7.6 - qemu has error during migration of larger guests)
  - Resolves: bz#1599335
    (Image creation locking is too tight and is not properly released)
  - Resolves: bz#1599515
    (qemu core-dump with aio_read via hmp (util/qemu-thread-posix.c:64: qemu_mutex_lock_impl: Assertion `mutex->initialized' failed))
  - Resolves: bz#1607891
    (Hotplug events are sometimes lost with virtio-scsi + iothread)
  - Resolves: bz#1608778
    (qemu/migration: migrate failed from RHEL.7.6 to RHEL.7.5 with e1000-82540em)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-20.el8
changelog:
  - kvm-migration-stop-compressing-page-in-migration-thread.patch [bz#1594384]
  - kvm-migration-stop-compression-to-allocate-and-free-memo.patch [bz#1594384]
  - kvm-migration-stop-decompression-to-allocate-and-free-me.patch [bz#1594384]
  - kvm-migration-detect-compression-and-decompression-error.patch [bz#1594384]
  - kvm-migration-introduce-control_save_page.patch [bz#1594384]
  - kvm-migration-move-some-code-to-ram_save_host_page.patch [bz#1594384]
  - kvm-migration-move-calling-control_save_page-to-the-comm.patch [bz#1594384]
  - kvm-migration-move-calling-save_zero_page-to-the-common-.patch [bz#1594384]
  - kvm-migration-introduce-save_normal_page.patch [bz#1594384]
  - kvm-migration-remove-ram_save_compressed_page.patch [bz#1594384]
  - kvm-migration-block-dirty-bitmap-fix-memory-leak-in-dirt.patch [bz#1594384]
  - kvm-migration-fix-saving-normal-page-even-if-it-s-been-c.patch [bz#1594384]
  - kvm-migration-update-index-field-when-delete-or-qsort-RD.patch [bz#1594384]
  - kvm-migration-introduce-decompress-error-check.patch [bz#1594384]
  - kvm-migration-Don-t-activate-block-devices-if-using-S.patch [bz#1594384]
  - kvm-migration-not-wait-RDMA_CM_EVENT_DISCONNECTED-event-.patch [bz#1594384]
  - kvm-migration-block-dirty-bitmap-fix-dirty_bitmap_load.patch [bz#1594384]
  - kvm-s390x-add-RHEL-7.6-machine-type-for-ccw.patch [bz#1595718]
  - kvm-s390x-cpumodel-default-enable-bpb-and-ppa15-for-z196.patch [bz#1595718]
  - kvm-linux-headers-asm-s390-kvm.h-header-sync.patch [bz#1612938]
  - kvm-s390x-kvm-add-etoken-facility.patch [bz#1612938]
  - Resolves: bz#1594384
    (2.12 migration fixes)
  - Resolves: bz#1595718
    (Add ppa15/bpb to the default cpu model for z196 and higher in the 7.6 s390-ccw-virtio machine)
  - Resolves: bz#1612938
    (Add etoken support to qemu-kvm for s390x KVM guests)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-22.el8
changelog:
  - Fix an issue with the build_configure script.
  - Resolves: bz#1425820
    (Improve QEMU packaging layout with modularization of the block layer)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-24.el8
changelog:
  - kvm-Add-qemu-keymap-to-qemu-kvm-common.patch [bz#1593117]
  - Resolves: bz#1593117
    (add qemu-keymap utility)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-25.el8
changelog:
  - kvm-Migration-TLS-Fix-crash-due-to-double-cleanup.patch [bz#1594384]
  - Resolves: bz#1594384
    (2.12 migration fixes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-26.el8
changelog:
  - kvm-redhat-remove-extra-in-rhel_rhev_conflicts-macro.patch [bz#1618752]
  - Resolves: bz#1618752
    (qemu-kvm can't be installed in RHEL-8 as it Conflicts with itself.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-27.el8
changelog:
  - kvm-Fix-libusb-1.0.22-deprecated-libusb_set_debug-with-l.patch [bz#1622656]
  - Resolves: bz#1622656
    (qemu-kvm fails to build due to libusb_set_debug being deprecated)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-28.el8
changelog:
  - kvm-e1000e-Do-not-auto-clear-ICR-bits-which-aren-t-set-i.patch [bz#1596024]
  - kvm-e1000e-Prevent-MSI-MSI-X-storms.patch [bz#1596024]
  - kvm-Drop-build_configure.sh-and-Makefile.local-files.patch []
  - kvm-Fix-subject-line-in-.gitpublish.patch []
  - Resolves: bz#1596024
    (The network link can't be detected on guest when the guest uses e1000e model type)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-29.el8
changelog:
  - kvm-target-i386-sev-fix-memory-leaks.patch [bz#1615717]
  - kvm-i386-Fix-arch_query_cpu_model_expansion-leak.patch [bz#1615717]
  - kvm-redhat-Update-build-configuration.patch [bz#1573156]
  - Resolves: bz#1573156
    (Update build configure for QEMU 2.12.0)
  - Resolves: bz#1615717
    (Memory leaks)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-30.el8
changelog:
  - kvm-redhat-Disable-vhost-crypto.patch [bz#1625668]
  - Resolves: bz#1625668
    (Decide if we should disable 'vhost-crypto' or not)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-31.el8
changelog:
  - kvm-i386-Disable-TOPOEXT-by-default-on-cpu-host.patch [bz#1619804]
  - kvm-redhat-enable-opengl-add-build-and-runtime-deps.patch [bz#1618412]
  - Resolves: bz#1618412
    (Enable opengl (for intel vgpu display))
  - Resolves: bz#1619804
    (kernel panic in init_amd_cacheinfo)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-32.el8
changelog:
  - kvm-Re-enable-disabled-Hyper-V-enlightenments.patch [bz#1625185]
  - kvm-Fix-annocheck-issues.patch [bz#1624164]
  - kvm-exec-check-that-alignment-is-a-power-of-two.patch [bz#1630746]
  - kvm-curl-Make-sslverify-off-disable-host-as-well-as-peer.patch [bz#1575925]
  - Resolves: bz#1575925
    ("SSL: no alternative certificate subject name matches target host name" error even though sslverify = off)
  - Resolves: bz#1624164
    (Review annocheck distro flag failures in qemu-kvm)
  - Resolves: bz#1625185
    (Re-enable disabled Hyper-V enlightenments)
  - Resolves: bz#1630746
    (qemu_ram_mmap: Assertion `is_power_of_2(align)' failed)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-33.el8
changelog:
  - kvm-migration-postcopy-Clear-have_listen_thread.patch [bz#1608765]
  - kvm-migration-cleanup-in-error-paths-in-loadvm.patch [bz#1608765]
  - kvm-jobs-change-start-callback-to-run-callback.patch [bz#1632939]
  - kvm-jobs-canonize-Error-object.patch [bz#1632939]
  - kvm-jobs-add-exit-shim.patch [bz#1632939]
  - kvm-block-commit-utilize-job_exit-shim.patch [bz#1632939]
  - kvm-block-mirror-utilize-job_exit-shim.patch [bz#1632939]
  - kvm-jobs-utilize-job_exit-shim.patch [bz#1632939]
  - kvm-block-backup-make-function-variables-consistently-na.patch [bz#1632939]
  - kvm-jobs-remove-ret-argument-to-job_completed-privatize-.patch [bz#1632939]
  - kvm-jobs-remove-job_defer_to_main_loop.patch [bz#1632939]
  - kvm-block-commit-add-block-job-creation-flags.patch [bz#1632939]
  - kvm-block-mirror-add-block-job-creation-flags.patch [bz#1632939]
  - kvm-block-stream-add-block-job-creation-flags.patch [bz#1632939]
  - kvm-block-commit-refactor-commit-to-use-job-callbacks.patch [bz#1632939]
  - kvm-block-mirror-don-t-install-backing-chain-on-abort.patch [bz#1632939]
  - kvm-block-mirror-conservative-mirror_exit-refactor.patch [bz#1632939]
  - kvm-block-stream-refactor-stream-to-use-job-callbacks.patch [bz#1632939]
  - kvm-tests-blockjob-replace-Blockjob-with-Job.patch [bz#1632939]
  - kvm-tests-test-blockjob-remove-exit-callback.patch [bz#1632939]
  - kvm-tests-test-blockjob-txn-move-.exit-to-.clean.patch [bz#1632939]
  - kvm-jobs-remove-.exit-callback.patch [bz#1632939]
  - kvm-qapi-block-commit-expose-new-job-properties.patch [bz#1632939]
  - kvm-qapi-block-mirror-expose-new-job-properties.patch [bz#1632939]
  - kvm-qapi-block-stream-expose-new-job-properties.patch [bz#1632939]
  - kvm-block-backup-qapi-documentation-fixup.patch [bz#1632939]
  - kvm-blockdev-document-transactional-shortcomings.patch [bz#1632939]
  - Resolves: bz#1608765
    (After postcopy migration,  do savevm and loadvm, guest hang and call trace)
  - Resolves: bz#1632939
    (qemu blockjobs other than backup do not support job-finalize or job-dismiss)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-34.el8
changelog:
  - kvm-seccomp-allow-sched_setscheduler-with-SCHED_IDLE-pol.patch [bz#1618356]
  - kvm-seccomp-use-SIGSYS-signal-instead-of-killing-the-thr.patch [bz#1618356]
  - kvm-seccomp-prefer-SCMP_ACT_KILL_PROCESS-if-available.patch [bz#1618356]
  - kvm-configure-require-libseccomp-2.2.0.patch [bz#1618356]
  - kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618356]
  - kvm-memory-cleanup-side-effects-of-memory_region_init_fo.patch [bz#1600365]
  - Resolves: bz#1600365
    (QEMU core dumped when hotplug memory exceeding host hugepages and with discard-data=yes)
  - Resolves: bz#1618356
    (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-35.el8
changelog:
  - kvm-redhat-make-the-plugins-executable.patch [bz#1638304]
  - Resolves: bz#1638304
    (the driver packages lack all the library Requires)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-36.el8
changelog:
  - kvm-check-Only-test-ivshm-when-it-is-compiled-in.patch [bz#1621817]
  - kvm-Disable-ivshmem.patch [bz#1621817]
  - kvm-mirror-Fail-gracefully-for-source-target.patch [bz#1637963]
  - kvm-commit-Add-top-node-base-node-options.patch [bz#1637970]
  - kvm-qemu-iotests-Test-commit-with-top-node-base-node.patch [bz#1637970]
  - Resolves: bz#1621817
    (Disable IVSHMEM in RHEL 8)
  - Resolves: bz#1637963
    (Segfault on 'blockdev-mirror' with same node as source and target)
  - Resolves: bz#1637970
    (allow using node-names with block-commit)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-37.el8
changelog:
  - kvm-block-for-jobs-do-not-clear-user_paused-until-after-.patch [bz#1635583]
  - kvm-iotests-Add-failure-matching-to-common.qemu.patch [bz#1635583]
  - kvm-block-iotest-to-catch-abort-on-forced-blockjob-cance.patch [bz#1635583]
  - Resolves: bz#1635583
    (Quitting VM causes qemu core dump once the block mirror job paused for no enough target space)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-38.el8
changelog:
  - kvm-Revert-hw-acpi-build-build-SRAT-memory-affinity-stru.patch [bz#1609235]
  - kvm-add-udev-kvm-check.patch [bz#1552663]
  - kvm-aio-posix-Don-t-count-ctx-notifier-as-progress-when-.patch [bz#1623085]
  - kvm-aio-Do-aio_notify_accept-only-during-blocking-aio_po.patch [bz#1623085]
  - kvm-aio-posix-fix-concurrent-access-to-poll_disable_cnt.patch [bz#1632622]
  - kvm-aio-posix-compute-timeout-before-polling.patch [bz#1632622]
  - kvm-aio-posix-do-skip-system-call-if-ctx-notifier-pollin.patch [bz#1632622]
  - kvm-intel-iommu-send-PSI-always-even-if-across-PDEs.patch [bz#1450712]
  - kvm-intel-iommu-remove-IntelIOMMUNotifierNode.patch [bz#1450712]
  - kvm-intel-iommu-add-iommu-lock.patch [bz#1450712]
  - kvm-intel-iommu-only-do-page-walk-for-MAP-notifiers.patch [bz#1450712]
  - kvm-intel-iommu-introduce-vtd_page_walk_info.patch [bz#1450712]
  - kvm-intel-iommu-pass-in-address-space-when-page-walk.patch [bz#1450712]
  - kvm-intel-iommu-trace-domain-id-during-page-walk.patch [bz#1450712]
  - kvm-util-implement-simple-iova-tree.patch [bz#1450712]
  - kvm-intel-iommu-rework-the-page-walk-logic.patch [bz#1450712]
  - kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1633928]
  - Resolves: bz#1450712
    (Booting nested guest with vIOMMU, the assigned network devices can not receive packets (qemu))
  - Resolves: bz#1552663
    (81-kvm-rhel.rules is no longer part of initscripts)
  - Resolves: bz#1609235
    (Win2016 guest can't recognize pc-dimm hotplugged to node 0)
  - Resolves: bz#1623085
    (VM doesn't boot from HD)
  - Resolves: bz#1632622
    (~40% virtio_blk disk performance drop for win2012r2 guest when comparing qemu-kvm-rhev-2.12.0-9 with qemu-kvm-rhev-2.12.0-12)
  - Resolves: bz#1633928
    (CVE-2018-3639 qemu-kvm: hw: cpu: speculative store bypass [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-39.el8
changelog:
  - kvm-linux-headers-update.patch [bz#1508142]
  - kvm-s390x-cpumodel-Set-up-CPU-model-for-AP-device-suppor.patch [bz#1508142]
  - kvm-s390x-kvm-enable-AP-instruction-interpretation-for-g.patch [bz#1508142]
  - kvm-s390x-ap-base-Adjunct-Processor-AP-object-model.patch [bz#1508142]
  - kvm-s390x-vfio-ap-Introduce-VFIO-AP-device.patch [bz#1508142]
  - kvm-s390-doc-detailed-specifications-for-AP-virtualizati.patch [bz#1508142]
  - Resolves: bz#1508142
    ([IBM 8.0 FEAT] KVM: Guest-dedicated Crypto Adapters - qemu part)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-40.el8
changelog:
  - kvm-vnc-call-sasl_server_init-only-when-required.patch [bz#1609327]
  - kvm-nbd-server-fix-NBD_CMD_CACHE.patch [bz#1636142]
  - kvm-nbd-fix-NBD_FLAG_SEND_CACHE-value.patch [bz#1636142]
  - kvm-test-bdrv-drain-bdrv_drain-works-with-cross-AioConte.patch [bz#1637976]
  - kvm-block-Use-bdrv_do_drain_begin-end-in-bdrv_drain_all.patch [bz#1637976]
  - kvm-block-Remove-recursive-parameter-from-bdrv_drain_inv.patch [bz#1637976]
  - kvm-block-Don-t-manually-poll-in-bdrv_drain_all.patch [bz#1637976]
  - kvm-tests-test-bdrv-drain-bdrv_drain_all-works-in-corout.patch [bz#1637976]
  - kvm-block-Avoid-unnecessary-aio_poll-in-AIO_WAIT_WHILE.patch [bz#1637976]
  - kvm-block-Really-pause-block-jobs-on-drain.patch [bz#1637976]
  - kvm-block-Remove-bdrv_drain_recurse.patch [bz#1637976]
  - kvm-test-bdrv-drain-Add-test-for-node-deletion.patch [bz#1637976]
  - kvm-block-Drain-recursively-with-a-single-BDRV_POLL_WHIL.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-node-deletion-in-subtree-recurs.patch [bz#1637976]
  - kvm-block-Don-t-poll-in-parent-drain-callbacks.patch [bz#1637976]
  - kvm-test-bdrv-drain-Graph-change-through-parent-callback.patch [bz#1637976]
  - kvm-block-Defer-.bdrv_drain_begin-callback-to-polling-ph.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-that-bdrv_drain_invoke-doesn-t-.patch [bz#1637976]
  - kvm-block-Allow-AIO_WAIT_WHILE-with-NULL-ctx.patch [bz#1637976]
  - kvm-block-Move-bdrv_drain_all_begin-out-of-coroutine-con.patch [bz#1637976]
  - kvm-block-ignore_bds_parents-parameter-for-drain-functio.patch [bz#1637976]
  - kvm-block-Allow-graph-changes-in-bdrv_drain_all_begin-en.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-graph-changes-in-drain_all-sect.patch [bz#1637976]
  - kvm-block-Poll-after-drain-on-attaching-a-node.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-bdrv_append-to-drained-node.patch [bz#1637976]
  - kvm-block-linux-aio-acquire-AioContext-before-qemu_laio_.patch [bz#1637976]
  - kvm-util-async-use-qemu_aio_coroutine_enter-in-co_schedu.patch [bz#1637976]
  - kvm-job-Fix-nested-aio_poll-hanging-in-job_txn_apply.patch [bz#1637976]
  - kvm-job-Fix-missing-locking-due-to-mismerge.patch [bz#1637976]
  - kvm-blockjob-Wake-up-BDS-when-job-becomes-idle.patch [bz#1637976]
  - kvm-aio-wait-Increase-num_waiters-even-in-home-thread.patch [bz#1637976]
  - kvm-test-bdrv-drain-Drain-with-block-jobs-in-an-I-O-thre.patch [bz#1637976]
  - kvm-test-blockjob-Acquire-AioContext-around-job_cancel_s.patch [bz#1637976]
  - kvm-job-Use-AIO_WAIT_WHILE-in-job_finish_sync.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-AIO_WAIT_WHILE-in-completion-ca.patch [bz#1637976]
  - kvm-block-Add-missing-locking-in-bdrv_co_drain_bh_cb.patch [bz#1637976]
  - kvm-block-backend-Add-.drained_poll-callback.patch [bz#1637976]
  - kvm-block-backend-Fix-potential-double-blk_delete.patch [bz#1637976]
  - kvm-block-backend-Decrease-in_flight-only-after-callback.patch [bz#1637976]
  - kvm-blockjob-Lie-better-in-child_job_drained_poll.patch [bz#1637976]
  - kvm-block-Remove-aio_poll-in-bdrv_drain_poll-variants.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-nested-poll-in-bdrv_drain_poll_.patch [bz#1637976]
  - kvm-job-Avoid-deadlocks-in-job_completed_txn_abort.patch [bz#1637976]
  - kvm-test-bdrv-drain-AIO_WAIT_WHILE-in-job-.commit-.abort.patch [bz#1637976]
  - kvm-test-bdrv-drain-Fix-outdated-comments.patch [bz#1637976]
  - kvm-block-Use-a-single-global-AioWait.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-draining-job-source-child-and-p.patch [bz#1637976]
  - kvm-qemu-img-Fix-assert-when-mapping-unaligned-raw-file.patch [bz#1639374]
  - kvm-iotests-Add-test-221-to-catch-qemu-img-map-regressio.patch [bz#1639374]
  - Resolves: bz#1609327
    (qemu-kvm[37046]: Could not find keytab file: /etc/qemu/krb5.tab: Unknown error 49408)
  - Resolves: bz#1636142
    (qemu NBD_CMD_CACHE flaws impacting non-qemu NBD clients)
  - Resolves: bz#1637976
    (Crashes and hangs with iothreads vs. block jobs)
  - Resolves: bz#1639374
    (qemu-img map 'Aborted (core dumped)' when specifying a plain file)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-41.el8
changelog:
  - kvm-block-rbd-pull-out-qemu_rbd_convert_options.patch [bz#1635585]
  - kvm-block-rbd-Attempt-to-parse-legacy-filenames.patch [bz#1635585]
  - kvm-block-rbd-add-deprecation-documentation-for-filename.patch [bz#1635585]
  - kvm-block-rbd-add-iotest-for-rbd-legacy-keyvalue-filenam.patch [bz#1635585]
  - Resolves: bz#1635585
    (rbd json format of 7.6 is incompatible with 7.5)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-42.el8
changelog:
  - kvm-luks-Allow-share-rw-on.patch [bz#1629701]
  - kvm-redhat-reenable-gluster-support.patch [bz#1599340]
  - kvm-redhat-bump-libusb-requirement.patch [bz#1627970]
  - Resolves: bz#1599340
    (Reenable glusterfs in qemu-kvm once BZ#1567292 gets fixed)
  - Resolves: bz#1627970
    (symbol lookup error: /usr/libexec/qemu-kvm: undefined symbol: libusb_set_option)
  - Resolves: bz#1629701
    ("share-rw=on" does not work for luks format image - Fast Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-43
changelog:
  - kvm-configure-add-test-for-libudev.patch [bz#1636185]
  - kvm-qga-linux-report-disk-serial-number.patch [bz#1636185]
  - kvm-qga-linux-return-disk-device-in-guest-get-fsinfo.patch [bz#1636185]
  - kvm-qemu-error-introduce-error-warn-_report_once.patch [bz#1625173]
  - kvm-intel-iommu-start-to-use-error_report_once.patch [bz#1625173]
  - kvm-intel-iommu-replace-more-vtd_err_-traces.patch [bz#1625173]
  - kvm-intel_iommu-introduce-vtd_reset_caches.patch [bz#1625173]
  - kvm-intel_iommu-better-handling-of-dmar-state-switch.patch [bz#1625173]
  - kvm-intel_iommu-move-ce-fetching-out-when-sync-shadow.patch [bz#1625173 bz#1629616]
  - kvm-intel_iommu-handle-invalid-ce-for-shadow-sync.patch [bz#1625173 bz#1629616]
  - kvm-block-remove-bdrv_dirty_bitmap_make_anon.patch [bz#1518989]
  - kvm-block-simplify-code-around-releasing-bitmaps.patch [bz#1518989]
  - kvm-hbitmap-Add-advance-param-to-hbitmap_iter_next.patch [bz#1518989]
  - kvm-test-hbitmap-Add-non-advancing-iter_next-tests.patch [bz#1518989]
  - kvm-block-dirty-bitmap-Add-bdrv_dirty_iter_next_area.patch [bz#1518989]
  - kvm-blockdev-backup-add-bitmap-argument.patch [bz#1518989]
  - kvm-dirty-bitmap-switch-assert-fails-to-errors-in-bdrv_m.patch [bz#1518989]
  - kvm-dirty-bitmap-rename-bdrv_undo_clear_dirty_bitmap.patch [bz#1518989]
  - kvm-dirty-bitmap-make-it-possible-to-restore-bitmap-afte.patch [bz#1518989]
  - kvm-blockdev-rename-block-dirty-bitmap-clear-transaction.patch [bz#1518989]
  - kvm-qapi-add-transaction-support-for-x-block-dirty-bitma.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-add-user_locked-status-checker.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-fix-merge-permissions.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-allow-clear-on-disabled-bitmaps.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-prohibit-enable-disable-on-locke.patch [bz#1518989]
  - kvm-block-backup-prohibit-backup-from-using-in-use-bitma.patch [bz#1518989]
  - kvm-nbd-forbid-use-of-frozen-bitmaps.patch [bz#1518989]
  - kvm-bitmap-Update-count-after-a-merge.patch [bz#1518989]
  - kvm-iotests-169-drop-deprecated-autoload-parameter.patch [bz#1518989]
  - kvm-block-qcow2-improve-error-message-in-qcow2_inactivat.patch [bz#1518989]
  - kvm-bloc-qcow2-drop-dirty_bitmaps_loaded-state-variable.patch [bz#1518989]
  - kvm-dirty-bitmaps-clean-up-bitmaps-loading-and-migration.patch [bz#1518989]
  - kvm-iotests-improve-169.patch [bz#1518989]
  - kvm-iotests-169-add-cases-for-source-vm-resuming.patch [bz#1518989]
  - kvm-pc-dimm-turn-alignment-assert-into-check.patch [bz#1630116]
  - Resolves: bz#1518989
    (RFE: QEMU Incremental live backup)
  - Resolves: bz#1625173
    ([NVMe Device Assignment] Guest could not boot up with q35+iommu)
  - Resolves: bz#1629616
    (boot guest with q35+vIOMMU+ device assignment, qemu terminal shows "qemu-kvm: VFIO_UNMAP_DMA: -22" when return assigned network devices from vfio driver to ixgbe in guest)
  - Resolves: bz#1630116
    (pc_dimm_get_free_addr: assertion failed: (QEMU_ALIGN_UP(address_space_start, align) == address_space_start))
  - Resolves: bz#1636185
    ([RFE] Report disk device name and serial number (qemu-guest-agent on Linux))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-44
changelog:
  - kvm-block-Make-more-block-drivers-compile-time-configura.patch [bz#1598842 bz#1598842]
  - kvm-RHEL8-Add-disable-configure-options-to-qemu-spec-fil.patch [bz#1598842]
  - Resolves: bz#1598842
    (Compile out unused block drivers)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-45
changelog:
  - kvm-target-ppc-add-basic-support-for-PTCR-on-POWER9.patch [bz#1639069]
  - kvm-linux-headers-Update-for-nested-KVM-HV-downstream-on.patch [bz#1639069]
  - kvm-target-ppc-Add-one-reg-id-for-ptcr.patch [bz#1639069]
  - kvm-ppc-spapr_caps-Add-SPAPR_CAP_NESTED_KVM_HV.patch [bz#1639069]
  - kvm-Re-enable-CONFIG_HYPERV_TESTDEV.patch [bz#1651195]
  - kvm-qxl-use-guest_monitor_config-for-local-renderer.patch [bz#1610163]
  - kvm-Declare-cirrus-vga-as-deprecated.patch [bz#1651994]
  - kvm-Do-not-build-bluetooth-support.patch [bz#1654651]
  - kvm-vfio-helpers-Fix-qemu_vfio_open_pci-crash.patch [bz#1645840]
  - kvm-balloon-Allow-multiple-inhibit-users.patch [bz#1650272]
  - kvm-Use-inhibit-to-prevent-ballooning-without-synchr.patch [bz#1650272]
  - kvm-vfio-Inhibit-ballooning-based-on-group-attachment-to.patch [bz#1650272]
  - kvm-vfio-ccw-pci-Allow-devices-to-opt-in-for-ballooning.patch [bz#1650272]
  - kvm-vfio-pci-Handle-subsystem-realpath-returning-NULL.patch [bz#1650272]
  - kvm-vfio-pci-Fix-failure-to-close-file-descriptor-on-err.patch [bz#1650272]
  - kvm-postcopy-Synchronize-usage-of-the-balloon-inhibitor.patch [bz#1650272]
  - Resolves: bz#1610163
    (guest shows border blurred screen with some resolutions when qemu boot with -device qxl-vga ,and guest on rhel7.6 has no  such question)
  - Resolves: bz#1639069
    ([IBM 8.0 FEAT] POWER9 - Nested virtualization in RHEL8.0 KVM for ppc64le - qemu-kvm side)
  - Resolves: bz#1645840
    (Qemu core dump when hotplug nvme:// drive via -blockdev)
  - Resolves: bz#1650272
    (Ballooning is incompatible with vfio assigned devices, but not prevented)
  - Resolves: bz#1651195
    (Re-enable hyperv-testdev device)
  - Resolves: bz#1651994
    (Declare the "Cirrus VGA" device emulation of QEMU as deprecated in RHEL8)
  - Resolves: bz#1654651
    (Qemu: hw: bt: keep bt/* objects from building [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-46
changelog:
  - kvm-qcow2-Give-the-refcount-cache-the-minimum-possible-s.patch [bz#1656507]
  - kvm-docs-Document-the-new-default-sizes-of-the-qcow2-cac.patch [bz#1656507]
  - kvm-qcow2-Fix-Coverity-warning-when-calculating-the-refc.patch [bz#1656507]
  - kvm-include-Add-IEC-binary-prefixes-in-qemu-units.h.patch [bz#1656507]
  - kvm-qcow2-Options-documentation-fixes.patch [bz#1656507]
  - kvm-include-Add-a-lookup-table-of-sizes.patch [bz#1656507]
  - kvm-qcow2-Make-sizes-more-humanly-readable.patch [bz#1656507]
  - kvm-qcow2-Avoid-duplication-in-setting-the-refcount-cach.patch [bz#1656507]
  - kvm-qcow2-Assign-the-L2-cache-relatively-to-the-image-si.patch [bz#1656507]
  - kvm-qcow2-Increase-the-default-upper-limit-on-the-L2-cac.patch [bz#1656507]
  - kvm-qcow2-Resize-the-cache-upon-image-resizing.patch [bz#1656507]
  - kvm-qcow2-Set-the-default-cache-clean-interval-to-10-min.patch [bz#1656507]
  - kvm-qcow2-Explicit-number-replaced-by-a-constant.patch [bz#1656507]
  - kvm-block-backend-Set-werror-rerror-defaults-in-blk_new.patch [bz#1657637]
  - kvm-qcow2-Fix-cache-clean-interval-documentation.patch [bz#1656507]
  - Resolves: bz#1656507
    ([RHEL.8] qcow2 cache is too small)
  - Resolves: bz#1657637
    (Wrong werror default for -device drive=<node-name>)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-47
changelog:
  - kvm-Disable-CONFIG_IPMI-and-CONFIG_I2C-for-ppc64.patch [bz#1640044]
  - kvm-Disable-CONFIG_CAN_BUS-and-CONFIG_CAN_SJA1000.patch [bz#1640042]
  - Resolves: bz#1640042
    (Disable CONFIG_CAN_BUS and CONFIG_CAN_SJA1000 config switches)
  - Resolves: bz#1640044
    (Disable CONFIG_I2C and CONFIG_IPMI in default-configs/ppc64-softmmu.mak)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-48
changelog:
  - kvm-redhat-use-autopatch-instead-of-PATCHAPPLY.patch [bz#1613128]
  - kvm-redhat-Removing-some-unused-build-flags-in-the-spec-.patch [bz#1613128]
  - kvm-redhat-Fixing-rhev-ma-conflicts.patch [bz#1613126]
  - kvm-redhat-Remove-_smp_mflags-cleanup-workaround-for-s39.patch [bz#1613128]
  - kvm-redhat-Removing-dead-code-from-the-spec-file.patch [bz#1613128]
  - kvm-i386-Add-stibp-flag-name.patch [bz#1639446]
  - kvm-Add-functional-acceptance-tests-infrastructure.patch [bz#1655807]
  - kvm-scripts-qemu.py-allow-adding-to-the-list-of-extra-ar.patch [bz#1655807]
  - kvm-Acceptance-tests-add-quick-VNC-tests.patch [bz#1655807]
  - kvm-scripts-qemu.py-introduce-set_console-method.patch [bz#1655807]
  - kvm-Acceptance-tests-add-Linux-kernel-boot-and-console-c.patch [bz#1655807]
  - kvm-Bootstrap-Python-venv-for-tests.patch [bz#1655807]
  - kvm-Acceptance-tests-add-make-rule-for-running-them.patch [bz#1655807]
  - Resolves: bz#1613126
    (Check and fix qemu-kvm-rhev and qemu-kvm-ma conflicts in qemu-kvm for rhel-8)
  - Resolves: bz#1613128
    (Spec file clean up)
  - Resolves: bz#1639446
    (Cross migration from RHEL7.5 to RHEL8 shouldn't fail with cpu flag stibp [qemu-kvm])
  - Resolves: bz#1655807
    (Backport avocado-qemu tests for QEMU 2.12)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> -
changelog:
  - kvm-redhat-enable-tpmdev-passthrough.patch [bz#1654486]
  - Resolves: bz#1654486
    ([RFE] enable TPM passthrough at compile time (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-51
changelog:
  - kvm-Add-edk2-Requires-to-qemu-kvm.patch [bz#1654276]
  - Resolves: bz#1654276
    (qemu-kvm: Should depend on the architecture-appropriate guest firmware)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-51.el8
changelog:
  - kvm-x86-host-phys-bits-limit-option.patch [bz#1598284]
  - kvm-rhel-Set-host-phys-bits-limit-48-on-rhel-machine-typ.patch [bz#1598284]
  - kvm-i386-do-not-migrate-MSR_SMI_COUNT-on-machine-types-2.patch [bz#1659565]
  - kvm-pc-x-migrate-smi-count-to-PC_RHEL_COMPAT.patch [bz#1659565]
  - kvm-slow-train-kvm-clear-out-KVM_ASYNC_PF_DELIVERY_AS_PF.patch [bz#1656829]
  - Resolves: bz#1598284
    ([Intel 8.0 Alpha] physical bits should  < 48  when host with 5level paging &EPT5 and qemu command with "-cpu qemu64" parameters.)
  - Resolves: bz#1656829
    (8->7 migration failed: qemu-kvm: error: failed to set MSR 0x4b564d02 to 0x27fc13285)
  - Resolves: bz#1659565
    (machine type: required compat flag x-migrate-smi-count=off)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-53.el8
changelog:
  - kvm-ui-add-qapi-parser-for-display.patch [bz#1652871]
  - kvm-ui-switch-trivial-displays-to-qapi-parser.patch [bz#1652871]
  - kvm-qapi-Add-rendernode-display-option-for-egl-headless.patch [bz#1652871]
  - kvm-ui-Allow-specifying-rendernode-display-option-for-eg.patch [bz#1652871]
  - kvm-qapi-add-query-display-options-command.patch [bz#1652871]
  - Resolves: bz#1652871
    (QEMU doesn't expose rendernode option for egl-headless display type)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-54.el8
changelog:
  - kvm-s390x-tcg-avoid-overflows-in-time2tod-tod2time.patch [bz#1653569]
  - kvm-s390x-kvm-pass-values-instead-of-pointers-to-kvm_s39.patch [bz#1653569]
  - kvm-s390x-tod-factor-out-TOD-into-separate-device.patch [bz#1653569]
  - kvm-s390x-tcg-drop-tod_basetime.patch [bz#1653569]
  - kvm-s390x-tcg-properly-implement-the-TOD.patch [bz#1653569]
  - kvm-s390x-tcg-SET-CLOCK-COMPARATOR-can-clear-CKC-interru.patch [bz#1653569]
  - kvm-s390x-tcg-implement-SET-CLOCK.patch [bz#1653569]
  - kvm-s390x-tcg-rearm-the-CKC-timer-during-migration.patch [bz#1653569]
  - kvm-s390x-tcg-fix-locking-problem-with-tcg_s390_tod_upda.patch [bz#1653569]
  - kvm-hw-s390x-Include-the-tod-qemu-also-for-builds-with-d.patch [bz#1653569]
  - kvm-s390x-tod-Properly-stop-the-KVM-TOD-while-the-guest-.patch [bz#1653569]
  - kvm-hw-s390x-Fix-bad-mask-in-time2tod.patch [bz#1653569]
  - kvm-migration-discard-non-migratable-RAMBlocks.patch [bz#1539285]
  - kvm-vfio-pci-do-not-set-the-PCIDevice-has_rom-attribute.patch [bz#1539285]
  - kvm-memory-exec-Expose-all-memory-block-related-flags.patch [bz#1539285]
  - kvm-memory-exec-switch-file-ram-allocation-functions-to-.patch [bz#1539285]
  - kvm-configure-add-libpmem-support.patch [bz#1539285]
  - kvm-hostmem-file-add-the-pmem-option.patch [bz#1539285]
  - kvm-mem-nvdimm-ensure-write-persistence-to-PMEM-in-label.patch [bz#1539285]
  - kvm-migration-ram-Add-check-and-info-message-to-nvdimm-p.patch [bz#1539285]
  - kvm-migration-ram-ensure-write-persistence-on-loading-al.patch [bz#1539285]
  - Resolves: bz#1539285
    ([Intel 8.0 Bug] [KVM][Crystal Ridge] Lack of data persistence guarantee of QEMU writes to host PMEM)
  - Resolves: bz#1653569
    (Stress guest and stop it, then do live migration, guest hit call trace on destination end)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-55.el8
changelog:
  - kvm-block-Don-t-inactivate-children-before-parents.patch [bz#1659395]
  - kvm-iotests-Test-migration-with-blockdev.patch [bz#1659395]
  - Resolves: bz#1659395
    (src qemu core dump when do migration ( block device node-name changed after change cdrom) - Slow Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-56.el8
changelog:
  - kvm-Run-iotests-as-part-of-the-build-process.patch [bz#1661026]
  - kvm-Introduce-the-qemu-kvm-tests-rpm.patch [bz#1601107]
  - Resolves: bz#1601107
    (qemu-kvm packaging: make running qemu-iotests more robust)
  - Resolves: bz#1661026
    (Run iotests as part of build process)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-58.el8
changelog:
  - kvm-block-Update-flags-in-bdrv_set_read_only.patch [bz#1644996]
  - kvm-block-Add-auto-read-only-option.patch [bz#1644996]
  - kvm-rbd-Close-image-in-qemu_rbd_open-error-path.patch [bz#1644996]
  - kvm-block-Require-auto-read-only-for-existing-fallbacks.patch [bz#1644996]
  - kvm-nbd-Support-auto-read-only-option.patch [bz#1644996]
  - kvm-file-posix-Support-auto-read-only-option.patch [bz#1644996]
  - kvm-curl-Support-auto-read-only-option.patch [bz#1644996]
  - kvm-gluster-Support-auto-read-only-option.patch [bz#1644996]
  - kvm-iscsi-Support-auto-read-only-option.patch [bz#1644996]
  - kvm-block-Make-auto-read-only-on-default-for-drive.patch [bz#1644996]
  - kvm-qemu-iotests-Test-auto-read-only-with-drive-and-bloc.patch [bz#1644996]
  - kvm-block-Fix-update-of-BDRV_O_AUTO_RDONLY-in-update_fla.patch [bz#1644996]
  - kvm-qemu-img-Add-C-option-for-convert-with-copy-offloadi.patch [bz#1623082]
  - kvm-iotests-Add-test-for-qemu-img-convert-C-compatibilit.patch [bz#1623082]
  - Resolves: bz#1623082
    ([rhel.8.0]Target files for 'qemu-img convert' do not support thin_provisoning with iscsi/nfs backend)
  - Resolves: bz#1644996
    (block-commit can't be used with -blockdev)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-59.el8
changelog:
  - kvm-hw-scsi-cleanups-before-VPD-BL-emulation.patch [bz#1639957]
  - kvm-hw-scsi-centralize-SG_IO-calls-into-single-function.patch [bz#1639957]
  - kvm-hw-scsi-add-VPD-Block-Limits-emulation.patch [bz#1639957]
  - kvm-scsi-disk-Block-Device-Characteristics-emulation-fix.patch [bz#1639957]
  - kvm-scsi-generic-keep-VPD-page-list-sorted.patch [bz#1639957]
  - kvm-scsi-generic-avoid-out-of-bounds-access-to-VPD-page-.patch [bz#1639957]
  - kvm-scsi-generic-avoid-invalid-access-to-struct-when-emu.patch [bz#1639957]
  - kvm-scsi-generic-do-not-do-VPD-emulation-for-sense-other.patch [bz#1639957]
  - Resolves: bz#1639957
    ([RHEL.8] scsi host device passthrough limits IO writes - slow train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-60.el8
changelog:
  - kvm-ne2000-fix-possible-out-of-bound-access-in-ne2000_re.patch [bz#1636784]
  - kvm-rtl8139-fix-possible-out-of-bound-access.patch [bz#1636784]
  - kvm-pcnet-fix-possible-buffer-overflow.patch [bz#1636784]
  - kvm-net-ignore-packet-size-greater-than-INT_MAX.patch [bz#1636784]
  - kvm-net-drop-too-large-packet-early.patch [bz#1636784]
  - kvm-net-hub-suppress-warnings-of-no-host-network-for-qte.patch [bz#1636784]
  - kvm-virtio-net-test-accept-variable-length-argument-in-p.patch [bz#1636784]
  - kvm-virtio-net-test-remove-unused-macro.patch [bz#1636784]
  - kvm-virtio-net-test-add-large-tx-buffer-test.patch [bz#1636784]
  - kvm-s390x-Return-specification-exception-for-unimplement.patch [bz#1668261]
  - kvm-cpus-ignore-ESRCH-in-qemu_cpu_kick_thread.patch [bz#1665844]
  - Resolves: bz#1636784
    (CVE-2018-17963 qemu-kvm: Qemu: net: ignore packets with large size [rhel-8])
  - Resolves: bz#1665844
    (Guest quit with error when hotunplug cpu)
  - Resolves: bz#1668261
    ([RHEL8] Backport diag308 stable exception fix (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-61.el8
changelog:
  - kvm-qemu-ga-make-get-fsinfo-work-over-pci-bridges.patch [bz#1666952]
  - kvm-qga-fix-driver-leak-in-guest-get-fsinfo.patch [bz#1666952]
  - Resolves: bz#1666952
    (qemu-guest-agent does not parse PCI bridge links in "build_guest_fsinfo_for_real_device" (q35))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-62.el8
changelog:
  - kvm-slirp-check-data-length-while-emulating-ident-functi.patch [bz#1669069]
  - Resolves: bz#1669069
    (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-63.el8
changelog:
  - kvm-scsi-generic-avoid-possible-out-of-bounds-access-to-.patch [bz#1668162]
  - Resolves: bz#1668162
    (CVE-2019-6501 qemu-kvm: QEMU: scsi-generic: possible OOB access while handling inquiry request [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-64.el8
changelog:
  - kvm-doc-fix-the-configuration-path.patch [bz#1645411]
  - kvm-Increase-number-of-iotests-being-run-as-a-part-of-RH.patch [bz#1664463]
  - kvm-Load-kvm-module-during-boot.patch [bz#1676907 bz#1685995]
  - kvm-qemu-kvm.spec.template-Update-pyton-path-to-system-i.patch []
  - Resolves: bz#1645411
    (the "fsfreeze-hook" script path shown by command "qemu-ga --help" or "man qemu-ga" is wrong)
  - Resolves: bz#1664463
    (Modify iotest behavior to include  luks and nbd and fail build if iotests fail)
  - Resolves: bz#1676907
    (/dev/kvm device exists but kernel module is not loaded on boot up causing VM start to fail in libvirt)
  - Resolves: bz#1685995
    (/dev/kvm device exists but kernel module is not loaded on boot up causing VM start to fail in libvirt)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-65.el8
changelog:
  - kvm-s390x-cpumodel-mepochptff-warn-when-no-mepoch-and-re.patch [bz#1664371]
  - kvm-s390x-cpumodel-add-z14-GA2-model.patch [bz#1664371]
  - kvm-redhat-s390x-cpumodel-enable-mepoch-by-default-for-z.patch [bz#1664371]
  - kvm-intel_iommu-fix-operator-in-vtd_switch_address_space.patch [bz#1662272]
  - kvm-intel_iommu-reset-intr_enabled-when-system-reset.patch [bz#1662272]
  - kvm-pci-msi-export-msi_is_masked.patch [bz#1662272]
  - kvm-i386-kvm-ignore-masked-irqs-when-update-msi-routes.patch [bz#1662272]
  - Resolves: bz#1662272
    (Boot guest with device assignment+vIOMMU, qemu prompts "vtd_interrupt_remap_msi: MSI address low 32 bit invalid: 0x0" when first rebooting guest)
  - Resolves: bz#1664371
    ([IBM 8.1 FEAT] Update hardware CPU Model z14 (kvm) - qemu part)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-66.el8
changelog:
  - kvm-iotests-153-Fix-dead-code.patch [bz#1694148]
  - kvm-file-posix-Include-filename-in-locking-error-message.patch [bz#1694148]
  - kvm-file-posix-Skip-effectiveless-OFD-lock-operations.patch [bz#1694148]
  - kvm-file-posix-Drop-s-lock_fd.patch [bz#1694148]
  - kvm-tests-Add-unit-tests-for-image-locking.patch [bz#1694148]
  - kvm-file-posix-Fix-shared-locks-on-reopen-commit.patch [bz#1694148]
  - kvm-iotests-Test-file-posix-locking-and-reopen.patch [bz#1694148]
  - kvm-block-file-posix-do-not-fail-on-unlock-bytes.patch [bz#1694148]
  - kvm-hostmem-file-remove-object-id-from-pmem-error-messag.patch [bz#1687596]
  - kvm-redhat-setting-target-release-to-rhel-8.1.0.patch []
  - kvm-redhat-removing-iotest-182.patch []
  - Resolves: bz#1687596
    ([Intel 8.1 BUG][KVM][Crystal Ridge]object_get_canonical_path_component: assertion failed: (obj->parent != NULL))
  - Resolves: bz#1694148
    (QEMU image locking needn't double open fd number, and it should not fail when attempting to release locks)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-67.el8
changelog:
  - kvm-device_tree-Fix-integer-overflowing-in-load_device_t.patch [bz#1693116]
  - Resolves: bz#1693116
    (CVE-2018-20815 qemu-kvm: QEMU: device_tree: heap buffer overflow while loading device tree blob [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-68.el8
changelog:
  - kvm-s390x-ipl-Try-to-detect-Linux-vs-non-Linux-for-initi.patch [bz#1699070]
  - kvm-loader-Check-access-size-when-calling-rom_ptr-to-avo.patch [bz#1699070]
  - kvm-hw-s390x-Use-the-IEC-binary-prefix-definitions.patch [bz#1699070]
  - kvm-s390x-storage-attributes-fix-CMMA_BLOCK_SIZE-usage.patch [bz#1699070]
  - kvm-s390x-cpumodel-fix-segmentation-fault-when-baselinin.patch [bz#1699070]
  - kvm-hw-s390x-s390-pci-bus-Convert-sysbus-init-function-t.patch [bz#1699070]
  - kvm-s390x-pci-properly-fail-if-the-zPCI-device-cannot-be.patch [bz#1699070]
  - kvm-s390x-pci-rename-hotplug-handler-callbacks.patch [bz#1699070]
  - kvm-s390-avoid-potential-null-dereference-in-s390_pcihos.patch [bz#1699070]
  - kvm-s390x-pci-Send-correct-event-on-hotplug.patch [bz#1699070]
  - kvm-s390x-pci-Set-the-iommu-region-size-mpcifc-request.patch [bz#1699070]
  - kvm-s390x-pci-Always-delete-and-free-the-release_timer.patch [bz#1699070]
  - kvm-s390x-pci-Ignore-the-unplug-call-if-we-already-have-.patch [bz#1699070]
  - kvm-s390x-pci-Use-hotplug_dev-instead-of-looking-up-the-.patch [bz#1699070]
  - kvm-s390x-pci-Move-some-hotplug-checks-to-the-pre_plug-h.patch [bz#1699070]
  - kvm-s390x-pci-Introduce-unplug-requests-and-split-unplug.patch [bz#1699070]
  - kvm-s390x-pci-Drop-release-timer-and-replace-it-with-a-f.patch [bz#1699070]
  - kvm-s390x-pci-mark-zpci-devices-as-unmigratable.patch [bz#1699070]
  - kvm-s390x-pci-Fix-primary-bus-number-for-PCI-bridges.patch [bz#1699070]
  - kvm-s390x-pci-Fix-hotplugging-of-PCI-bridges.patch [bz#1699070]
  - kvm-s390x-pci-Warn-when-adding-PCI-devices-without-the-z.patch [bz#1699070]
  - kvm-s390x-pci-Unplug-remaining-requested-devices-on-pcih.patch [bz#1699070]
  - kvm-s390x-refactor-reset-reipl-handling.patch [bz#1699070]
  - kvm-s390-ipl-fix-ipl-with-no-reboot.patch [bz#1699070]
  - Resolves: bz#1699070
    (Backport s390x-related fixes for qemu-kvm)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-69.el8
changelog:
  - kvm-tests-crypto-Use-the-IEC-binary-prefix-definitions.patch [bz#1680231]
  - kvm-crypto-expand-algorithm-coverage-for-cipher-benchmar.patch [bz#1680231]
  - kvm-crypto-remove-code-duplication-in-tweak-encrypt-decr.patch [bz#1680231]
  - kvm-crypto-introduce-a-xts_uint128-data-type.patch [bz#1680231]
  - kvm-crypto-convert-xts_tweak_encdec-to-use-xts_uint128-t.patch [bz#1680231]
  - kvm-crypto-convert-xts_mult_x-to-use-xts_uint128-type.patch [bz#1680231]
  - kvm-crypto-annotate-xts_tweak_encdec-as-inlineable.patch [bz#1680231]
  - kvm-crypto-refactor-XTS-cipher-mode-test-suite.patch [bz#1680231]
  - kvm-crypto-add-testing-for-unaligned-buffers-with-XTS-ci.patch [bz#1680231]
  - Resolves: bz#1680231
    (severe performance impact using luks format)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-70.el8
changelog:
  - kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1561761]
  - kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1561761]
  - kvm-i386-Add-CPUID-bit-for-PCONFIG.patch [bz#1561761]
  - kvm-i386-Add-CPUID-bit-for-WBNOINVD.patch [bz#1561761]
  - kvm-i386-Add-new-CPU-model-Icelake-Server-Client.patch [bz#1561761]
  - kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1561761]
  - kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1561761]
  - kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1561761]
  - kvm-i386-remove-the-new-CPUID-PCONFIG-from-Icelake-Serve.patch [bz#1561761]
  - kvm-Revert-i386-Add-CPUID-bit-for-PCONFIG.patch [bz#1561761]
  - Resolves: bz#1561761
    ([Intel 8.1 Feat] qemu-kvm Introduce Icelake cpu model)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-71.el8
changelog:
  - kvm-s390-bios-Skip-bootmap-signature-entries.patch [bz#1683275]
  - Resolves: bz#1683275
    ([IBM 8.1 FEAT] KVM: Secure Linux Boot Toleration (qemu))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-72.el8
changelog:
  - kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1707706]
  - kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1707706]
  - Resolves: bz#1707706
    (/builddir/build/BUILD/qemu-2.12.0/target/i386/kvm.c:2031: kvm_put_msrs: Assertion `ret == cpu->kvm_msr_buf->nmsrs' failed.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-73.el8
changelog:
  - kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-named-CPU-mo.patch [bz#1561761]
  - kvm-i386-Disable-OSPKE-on-CPU-model-definitions.patch [bz#1561761]
  - Resolves: bz#1561761
    ([Intel 8.1 Feat] qemu-kvm Introduce Icelake cpu model)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-74.el8
changelog:
  - kvm-x86-cpu-Enable-CLDEMOTE-Demote-Cache-Line-cpu-featur.patch [bz#1696436]
  - kvm-memory-Fix-the-memory-region-type-assignment-order.patch [bz#1667249]
  - kvm-target-i386-sev-Do-not-pin-the-ram-device-memory-reg.patch [bz#1667249]
  - kvm-block-Fix-invalidate_cache-error-path-for-parent-act.patch [bz#1673010]
  - kvm-target-i386-define-md-clear-bit.patch [bz#1703302 bz#1703308]
  - Resolves: bz#1667249
    (Fail to launch AMD SEV VM with assigned PCI device)
  - Resolves: bz#1673010
    (Local VM and migrated VM on the same host can run with same RAW file as visual disk source while without shareable configured or lock manager enabled)
  - Resolves: bz#1696436
    ([Intel 8.0 Feat] KVM Enabling SnowRidge new NIs - qemu-kvm)
  - Resolves: bz#1703302
    (CVE-2018-12130 virt:rhel/qemu-kvm: hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS) [rhel-8])
  - Resolves: bz#1703308
    (CVE-2018-12127 virt:rhel/qemu-kvm: hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS) [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-75.el8
changelog:
  - kvm-s390x-cpumodel-enum-type-S390FeatGroup-now-gets-gene.patch [bz#1660912]
  - kvm-linux-headers-update-against-Linux-5.2-rc1.patch [bz#1660912]
  - kvm-s390x-cpumodel-ignore-csske-for-expansion.patch [bz#1660912]
  - kvm-s390x-cpumodel-Miscellaneous-Instruction-Extensions-.patch [bz#1660912]
  - kvm-s390x-cpumodel-msa9-facility.patch [bz#1660912]
  - kvm-s390x-cpumodel-vector-enhancements.patch [bz#1660912]
  - kvm-s390x-cpumodel-enhanced-sort-facility.patch [bz#1660912]
  - kvm-s390x-cpumodel-add-Deflate-conversion-facility.patch [bz#1660912]
  - kvm-s390x-cpumodel-add-gen15-defintions.patch [bz#1660912]
  - kvm-s390x-cpumodel-wire-up-8561-and-8562-as-gen15-machin.patch [bz#1660912]
  - kvm-spice-set-device-address-and-device-display-ID-in-QX.patch [bz#1712946]
  - kvm-hw-pci-Add-missing-include.patch [bz#1712946]
  - Resolves: bz#1660912
    ([IBM 8.1 FEAT] KVM s390x: Add hardware CPU Model - qemu part)
  - Resolves: bz#1712946
    (qemu-kvm build is broken due to spice_qxl_set_max_monitors being deprecated)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-76.el8
changelog:
  - kvm-Introduce-new-no_guest_reset-parameter-for-usb-host-.patch [bz#1713677]
  - kvm-usb-call-reset-handler-before-updating-state.patch [bz#1713677]
  - kvm-usb-host-skip-reset-for-untouched-devices.patch [bz#1713677]
  - kvm-usb-host-avoid-libusb_set_configuration-calls.patch [bz#1713677]
  - kvm-virtio-scsi-Move-BlockBackend-back-to-the-main-AioCo.patch [bz#1673396 bz#1673401]
  - kvm-scsi-disk-Acquire-the-AioContext-in-scsi_-_realize.patch [bz#1673396 bz#1673401]
  - kvm-virtio-scsi-Forbid-devices-with-different-iothreads-.patch [bz#1673396 bz#1673401]
  - kvm-Disable-VXHS-support.patch [bz#1714933]
  - Resolves: bz#1673396
    (qemu-kvm core dumped after hotplug the deleted disk with iothread parameter)
  - Resolves: bz#1673401
    (Qemu core dump when start guest with two disks using same drive)
  - Resolves: bz#1713677
    (Detached device when trying to upgrade USB device firmware when in doing USB Passthrough via QEMU)
  - Resolves: bz#1714933
    (Disable VXHS  in qemu-kvm)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-77.el8
changelog:
  - kvm-i386-Make-arch_capabilities-migratable.patch [bz#1709970]
  - kvm-spapr-Fix-ibm-max-associativity-domains-property-num.patch [bz#1710662]
  - kvm-linux-headers-Update-for-NVLink2-passthrough-downstr.patch [bz#1710662]
  - kvm-pci-Move-NVIDIA-vendor-id-to-the-rest-of-ids.patch [bz#1710662]
  - kvm-vfio-quirks-Add-common-quirk-alloc-helper.patch [bz#1710662]
  - kvm-vfio-Make-vfio_get_region_info_cap-public.patch [bz#1710662]
  - kvm-spapr-Support-NVIDIA-V100-GPU-with-NVLink2.patch [bz#1710662]
  - kvm-qemu-kvm.spec-bump-libseccomp-2.4.0.patch [bz#1719578]
  - Resolves: bz#1709970
    ([Intel 8.1 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM - qemu-kvm)
  - Resolves: bz#1710662
    ([IBM 8.1 FEAT] POWER9 - Virt: qemu: NVLink2 passthru to guest - Nvidia Volta (GPU) (kvm))
  - Resolves: bz#1719578
    (VM failed to start with error "failed to install seccomp syscall filter in the kernel")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-78.el8
changelog:
  - kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1721983]
  - kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1721983]
  - Resolves: bz#1721983
    (qemu-kvm can't be build with new gluster version (6.0.6))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-80.el8
changelog:
  - kvm-qxl-check-release-info-object.patch [bz#1712705]
  - kvm-iotests-Make-182-do-without-device_add.patch [bz#1707598]
  - Resolves: bz#1707598
    (qemu-iotest 182 fails without device hotplugging support)
  - Resolves: bz#1712705
    (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-81.el8
changelog:
  - kvm-target-i386-add-MDS-NO-feature.patch [bz#1714792]
  - kvm-virtio-gpu-pass-down-VirtIOGPU-pointer-to-a-bunch-of.patch [bz#1531543]
  - kvm-virtio-gpu-add-iommu-support.patch [bz#1531543]
  - kvm-virtio-gpu-fix-unmap-in-error-path.patch [bz#1531543]
  - Resolves: bz#1531543
    ([RFE] add iommu support to virtio-gpu)
  - Resolves: bz#1714792
    ([Intel 8.1 FEAT] MDS_NO exposure to guest)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-82.el8
changelog:
  - kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1629906]
  - kvm-i386-Update-stepping-of-Cascadelake-Server.patch [bz#1629906]
  - kvm-target-i386-Disable-MPX-support-on-named-CPU-models.patch [bz#1629906]
  - kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-named-CPU-NEW.patch [bz#1629906]
  - kvm-i386-Disable-OSPKE-on-CPU-model-definitions-NEW.patch [bz#1629906]
  - kvm-block-ssh-Convert-from-DPRINTF-macro-to-trace-events.patch [bz#1513367]
  - kvm-block-ssh-Do-not-report-read-write-flush-errors-to-t.patch [bz#1513367]
  - kvm-qemu-iotests-Fix-paths-for-NFS.patch [bz#1513367]
  - kvm-qemu-iotests-Filter-NFS-paths.patch [bz#1513367]
  - kvm-iotests-Filter-SSH-paths.patch [bz#1513367]
  - kvm-block-ssh-Implement-.bdrv_refresh_filename.patch [bz#1513367]
  - kvm-iotests-Use-Python-byte-strings-where-appropriate.patch [bz#1513367]
  - kvm-iotests-Unify-log-outputs-between-Python-2-and-3.patch [bz#1513367]
  - kvm-ssh-switch-from-libssh2-to-libssh.patch [bz#1513367]
  - kvm-redhat-switch-from-libssh2-to-libssh.patch [bz#1513367]
  - kvm-block-gluster-limit-the-transfer-size-to-512-MiB.patch [bz#1728657]
  - kvm-s390-cpumodel-fix-description-for-the-new-vector-fac.patch [bz#1729975]
  - kvm-s390x-cpumodel-remove-esort-from-the-default-model.patch [bz#1729975]
  - kvm-s390x-cpumodel-also-change-name-of-vxbeh.patch [bz#1729975]
  - kvm-s390x-cpumodel-change-internal-name-of-vxpdeh-to-mat.patch [bz#1729975]
  - kvm-target-i386-sev-Do-not-unpin-ram-device-memory-regio.patch [bz#1728958]
  - kvm-i386-Save-EFER-for-32-bit-targets.patch [bz#1689269]
  - kvm-target-i386-rename-HF_SVMI_MASK-to-HF_GUEST_MASK.patch [bz#1689269]
  - kvm-target-i386-kvm-add-VMX-migration-blocker.patch [bz#1689269]
  - kvm-target-i386-kvm-just-return-after-migrate_add_blocke.patch [bz#1689269]
  - kvm-target-i386-kvm-Delete-VMX-migration-blocker-on-vCPU.patch [bz#1689269]
  - kvm-Introduce-kvm_arch_destroy_vcpu.patch [bz#1689269]
  - kvm-target-i386-kvm-Use-symbolic-constant-for-DB-BP-exce.patch [bz#1689269]
  - kvm-target-i386-kvm-Re-inject-DB-to-guest-with-updated-D.patch [bz#1689269]
  - kvm-target-i386-kvm-Block-migration-for-vCPUs-exposed-wi.patch [bz#1689269]
  - kvm-target-i386-kvm-do-not-initialize-padding-fields.patch [bz#1689269]
  - kvm-linux-headers-synchronize-generic-and-x86-KVM-header.patch [bz#1689269]
  - kvm-vmstate-Add-support-for-kernel-integer-types.patch [bz#1689269]
  - kvm-target-i386-kvm-Add-support-for-save-and-restore-nes.patch [bz#1689269]
  - kvm-target-i386-kvm-Add-support-for-KVM_CAP_EXCEPTION_PA.patch [bz#1689269]
  - kvm-target-i386-kvm-Add-nested-migration-blocker-only-wh.patch [bz#1689269]
  - kvm-target-i386-kvm-Demand-nested-migration-kernel-capab.patch [bz#1689269]
  - kvm-target-i386-skip-KVM_GET-SET_NESTED_STATE-if-VMX-dis.patch [bz#1689269]
  - kvm-i386-kvm-Do-not-sync-nested-state-during-runtime.patch [bz#1689269]
  - Resolves: bz#1513367
    (qemu with libssh)
  - Resolves: bz#1629906
    ([Intel 8.1 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
  - Resolves: bz#1689269
    (Nested KVM: support for migration of nested hypervisors - Slow Train)
  - Resolves: bz#1728657
    ('qemu-io write' to a raw image over libgfapi fails)
  - Resolves: bz#1728958
    (Hot unplug vfio-pci NIC devices from sev guest will cause qemu-kvm: sev_ram_block_removed: failed to unregister region)
  - Resolves: bz#1729975
    (RHEL 8.1 Pre-Beta - Fix for hardware CPU Model)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-83.el8
changelog:
  - kvm-hw-block-pflash_cfi01-Add-missing-DeviceReset-handle.patch [bz#1707192]
  - kvm-block-file-posix-Unaligned-O_DIRECT-block-status.patch [bz#1678979]
  - kvm-iotests-Test-unaligned-raw-images-with-O_DIRECT.patch [bz#1678979]
  - kvm-nbd-client-Lower-min_block-for-block-status-unaligne.patch [bz#1678979]
  - kvm-nbd-client-Reject-inaccessible-tail-of-inconsistent-.patch [bz#1678979]
  - kvm-nbd-client-Support-qemu-img-convert-from-unaligned-s.patch [bz#1678979]
  - kvm-block-Add-bdrv_get_request_alignment.patch [bz#1678979]
  - kvm-nbd-server-Advertise-actual-minimum-block-size.patch [bz#1678979]
  - kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1727642]
  - kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1727642]
  - kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1727642]
  - kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1727642]
  - kvm-tap-set-vhostfd-passed-from-qemu-cli-to-non-blocking.patch [bz#1732642]
  - kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734751]
  - Resolves: bz#1678979
    (qemu-img convert abort when converting image with unaligned size (qemu-img: block/io.c:2134: bdrv_co_block_status: Assertion `*pnum && (((*pnum) % (align)) == 0) && align > offset - aligned_offset\' failed))
  - Resolves: bz#1707192
    (implement missing reset handler for cfi.pflash01 - slow train)
  - Resolves: bz#1727642
    (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu())
  - Resolves: bz#1732642
    (enable the virtio-net frontend to work with the vhost-net backend in SEV guests)
  - Resolves: bz#1734751
    (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-8.1.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-84.el8
changelog:
  - kvm-vnc-detect-and-optimize-pageflips.patch [bz#1727033]
  - kvm-block-backend-Make-blk_inc-dec_in_flight-public.patch [bz#1716349]
  - kvm-virtio-blk-Increase-in_flight-for-request-restart-BH.patch [bz#1716349]
  - kvm-block-Fix-AioContext-switch-for-drained-node.patch [bz#1716349]
  - kvm-test-bdrv-drain-AioContext-switch-in-drained-section.patch [bz#1716349]
  - kvm-block-Use-normal-drain-for-bdrv_set_aio_context.patch [bz#1716349]
  - kvm-block-Fix-AioContext-switch-for-bs-drv-NULL.patch [bz#1716347]
  - kvm-iothread-fix-crash-with-invalid-properties.patch [bz#1687541]
  - kvm-iothread-replace-init_done_cond-with-a-semaphore.patch [bz#1687541]
  - kvm-RHEL-disable-hostmem-memfd.patch [bz#1740797]
  - Resolves: bz#1687541
    (qemu aborted when start guest with a big iothreads)
  - Resolves: bz#1716347
    (Qemu Core dump when quit vm that's in status "paused(io-error)" with data plane enabled)
  - Resolves: bz#1716349
    (qemu with iothreads enabled crashes on resume after enospc pause for disk extension)
  - Resolves: bz#1727033
    (vnc server should detect page-flips and avoid sending fullscreen updates then.)
  - Resolves: bz#1740797
    (Disable memfd in QEMU)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-85.el8
changelog:
  - kvm-console-Avoid-segfault-in-screendump.patch [bz#1684383]
  - kvm-usb-hub-clear-suspend-on-detach.patch [bz#1619661]
  - kvm-qemu-img-fix-regression-copying-secrets-during-conve.patch [bz#1727821]
  - Resolves: bz#1619661
    (the attach hub on one hub still exits in device manager after unhotplug)
  - Resolves: bz#1684383
    (qemu crashed when take screenshot for 2nd head of virtio video device if the display not opened by virt-viewer)
  - Resolves: bz#1727821
    (Failed to convert a source image to the qcow2 image encrypted by luks)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-86.el8
changelog:
  - kvm-Do-not-run-iotests-on-brew-build.patch [bz#1742819]
  - kvm-target-ppc-spapr-Add-workaround-option-to-SPAPR_CAP_.patch [bz#1744415]
  - kvm-target-ppc-spapr-Add-SPAPR_CAP_CCF_ASSIST.patch [bz#1744415]
  - kvm-i386-x86_cpu_list_feature_names-function.patch [bz#1747185]
  - kvm-i386-unavailable-features-QOM-property.patch [bz#1747185]
  - kvm-file-posix-Handle-undetectable-alignment.patch [bz#1738839]
  - kvm-iotests-Tweak-221-sizing-for-different-hole-granular.patch [bz#1738839]
  - kvm-iotests-Filter-175-s-allocation-information.patch [bz#1738839]
  - kvm-block-posix-Always-allocate-the-first-block.patch [bz#1738839]
  - kvm-iotests-Test-allocate_first_block-with-O_DIRECT.patch [bz#1738839]
  - Resolves: bz#1738839
    (I/O error when virtio-blk disk is backed by a raw image on 4k disk)
  - Resolves: bz#1742819
    (Remove iotests from qemu-kvm builds [RHEL 8.1.0])
  - Resolves: bz#1744415
    (Backport support for count cache flush Spectre v2 mitigation [slow train])
  - Resolves: bz#1747185
    ("filtered-features" QOM property is not available)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-88.el8
changelog:
  - Revert fix for bz#1749724 - this got delayed to 8.2
    (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-89.el8
changelog:
  - kvm-accel-use-g_strsplit-for-parsing-accelerator-names.patch [bz#1749022]
  - kvm-opts-don-t-silently-truncate-long-parameter-keys.patch [bz#1749022]
  - kvm-opts-don-t-silently-truncate-long-option-values.patch [bz#1749022]
  - kvm-i386-fix-regression-parsing-multiboot-initrd-modules.patch [bz#1749022]
  - kvm-i386-only-parse-the-initrd_filename-once-for-multibo.patch [bz#1749022]
  - kvm-opts-remove-redundant-check-for-NULL-parameter.patch [bz#1749022]
  - kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749724]
  - kvm-virtio-blk-Cancel-the-pending-BH-when-the-dataplane-.patch [bz#1708459]
  - kvm-s390x-cpumodel-Rework-CPU-feature-definition.patch [bz#1660909]
  - kvm-s390x-cpumodel-Set-up-CPU-model-for-AQIC-interceptio.patch [bz#1660909]
  - kvm-ccid-Fix-dwProtocols-advertisement-of-T-0.patch [bz#1746361]
  - kvm-s390-PCI-fix-IOMMU-region-init.patch [bz#1754643]
  - kvm-fw_cfg-Improve-error-message-when-can-t-load-splash-.patch [bz#1607367]
  - kvm-fw_cfg-Fix-boot-bootsplash-error-checking.patch [bz#1607367]
  - kvm-fw_cfg-Fix-boot-reboot-timeout-error-checking.patch [bz#1607367]
  - kvm-hw-nvram-fw_cfg-Store-reboot-timeout-as-little-endia.patch [bz#1607367]
  - kvm-intel_iommu-Correct-caching-mode-error-message.patch [bz#1738440]
  - kvm-intel_iommu-Sanity-check-vfio-pci-config-on-machine-.patch [bz#1738440]
  - kvm-qdev-machine-Introduce-hotplug_allowed-hook.patch [bz#1738440]
  - kvm-pc-q35-Disallow-vfio-pci-hotplug-without-VT-d-cachin.patch [bz#1738440]
  - kvm-intel_iommu-Remove-the-caching-mode-check-during-fla.patch [bz#1738440]
  - kvm-pseries-do-not-allow-memory-less-cpu-less-NUMA-node.patch [bz#1651474]
  - Resolves: bz#1607367
    (After boot failed, guest should not reboot when set reboot-timeout < -1)
  - Resolves: bz#1651474
    (RHEL8.0 Beta - [4.18.0-32.el8.ppc64le] Guest VM crashes during vcpu hotplug with specific numa configuration (kvm))
  - Resolves: bz#1660909
    ([IBM 8.2 FEAT] KVM s390x: Crypto Passthrough Interrupt Support - qemu part)
  - Resolves: bz#1708459
    (qemu-kvm core dumped when repeat "system_reset" multiple times during guest boot)
  - Resolves: bz#1738440
    (For intel-iommu, qemu shows conflict behaviors between booting a guest with vfio and hot plugging vfio device)
  - Resolves: bz#1746361
    (ccid: Fix incorrect dwProtocol advertisement of T=0)
  - Resolves: bz#1749022
    (Please backport 950c4e6c94b1 ("opts: don't silently truncate long option values", 2018-05-09))
  - Resolves: bz#1749724
    (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-8])
  - Resolves: bz#1754643
    (RHEL8.1 Snapshot3 - Passthrough PCI card goes into error state if used in domain (kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-90.el8
changelog:
  - kvm-i386-Don-t-print-warning-if-phys-bits-was-set-automa.patch [bz#1719127]
  - kvm-Disable-CONFIG_I2C-and-CONFIG_IOH3420.patch [bz#1693140]
  - kvm-usb-drop-unnecessary-usb_device_post_load-checks.patch [bz#1757482]
  - kvm-pc-bios-s390-ccw-define-loadparm-length.patch [bz#1664376]
  - kvm-pc-bios-s390-ccw-net-Use-diag308-to-reset-machine-be.patch [bz#1664376]
  - kvm-s390-bios-decouple-cio-setup-from-virtio.patch [bz#1664376]
  - kvm-s390-bios-decouple-common-boot-logic-from-virtio.patch [bz#1664376]
  - kvm-s390-bios-Clean-up-cio.h.patch [bz#1664376]
  - kvm-s390-bios-Decouple-channel-i-o-logic-from-virtio.patch [bz#1664376]
  - kvm-s390-bios-Map-low-core-memory.patch [bz#1664376]
  - kvm-s390-bios-ptr2u32-and-u32toptr.patch [bz#1664376]
  - kvm-s390-bios-Support-for-running-format-0-1-channel-pro.patch [bz#1664376]
  - kvm-s390-bios-cio-error-handling.patch [bz#1664376]
  - kvm-s390-bios-Extend-find_dev-for-non-virtio-devices.patch [bz#1664376]
  - kvm-s390-bios-Factor-finding-boot-device-out-of-virtio-c.patch [bz#1664376]
  - kvm-s390-bios-Refactor-virtio-to-run-channel-programs-vi.patch [bz#1664376]
  - kvm-s390-bios-Use-control-unit-type-to-determine-boot-me.patch [bz#1664376]
  - kvm-s390-bios-Add-channel-command-codes-structs-needed-f.patch [bz#1664376]
  - kvm-s390-bios-Support-booting-from-real-dasd-device.patch [bz#1664376]
  - kvm-s390-bios-Use-control-unit-type-to-find-bootable-dev.patch [bz#1664376]
  - kvm-s390x-vfio-ap-Implement-hot-plug-unplug-of-vfio-ap-d.patch [bz#1660906]
  - Resolves: bz#1660906
    ([IBM 8.2 FEAT] KVM s390x: Crypto Passthrough Hotplug - qemu part)
  - Resolves: bz#1664376
    ([IBM 8.2 FEAT] CCW IPL Support (kvm) - qemu part)
  - Resolves: bz#1693140
    (aarch64: qemu: remove smbus_eeprom and i2c from config)
  - Resolves: bz#1719127
    ([Intel 8.2 Bug] warning shown when boot VM with “–cpu host” or “–cpu other mode” on ICX platform (physical))
  - Resolves: bz#1757482
    (Fail to migrate a rhel6.10-mt7.6 guest with dimm device)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-91.el8
changelog:
  - kvm-qapi-fill-in-CpuInfoFast.arch-in-query-cpus-fast.patch [bz#1730969]
  - kvm-curl-Keep-pointer-to-the-CURLState-in-CURLSocket.patch [bz#1744602]
  - kvm-curl-Keep-socket-until-the-end-of-curl_sock_cb.patch [bz#1744602]
  - kvm-curl-Check-completion-in-curl_multi_do.patch [bz#1744602]
  - kvm-curl-Pass-CURLSocket-to-curl_multi_do.patch [bz#1744602]
  - kvm-curl-Report-only-ready-sockets.patch [bz#1744602]
  - kvm-curl-Handle-success-in-multi_check_completion.patch [bz#1744602]
  - kvm-curl-Check-curl_multi_add_handle-s-return-code.patch [bz#1744602]
  - Resolves: bz#1730969
    ([ppc] qmp: The 'arch' value returned by the command 'query-cpus-fast' does not match)
  - Resolves: bz#1744602
    (qemu-img gets stuck when stream-converting from http)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-92.el8
changelog:
  - kvm-x86-cpu-use-FeatureWordArray-to-define-filtered_feat.patch [bz#1689270]
  - kvm-i386-Add-x-force-features-option-for-testing.patch [bz#1689270]
  - kvm-target-i386-define-a-new-MSR-based-feature-word-FEAT.patch [bz#1689270]
  - kvm-i386-display-known-CPUID-features-linewrapped-in-alp.patch [bz#1689270]
  - kvm-target-i386-kvm-kvm_get_supported_msrs-cleanup.patch [bz#1689270]
  - kvm-target-i386-handle-filtered_features-in-a-new-functi.patch [bz#1689270]
  - kvm-target-i386-introduce-generic-feature-dependency-mec.patch [bz#1689270]
  - kvm-target-i386-expand-feature-words-to-64-bits.patch [bz#1689270]
  - kvm-target-i386-add-VMX-definitions.patch [bz#1689270]
  - kvm-vmxcap-correct-the-name-of-the-variables.patch [bz#1689270]
  - kvm-target-i386-add-VMX-features.patch [bz#1689270]
  - kvm-target-i386-work-around-KVM_GET_MSRS-bug-for-seconda.patch [bz#1689270]
  - kvm-target-i386-adjust-for-missing-VMX-features.patch [bz#1689270]
  - kvm-target-i386-add-VMX-features-to-named-CPU-models.patch [bz#1689270]
  - kvm-target-i386-add-VMX-features-to-named-CPU-models-RHE.patch [bz#1689270]
  - kvm-vhost-fix-vhost_log-size-overflow-during-migration.patch [bz#1776808]
  - Resolves: bz#1689270
    (Nested KVM: limit VMX features according to CPU models - Slow Train)
  - Resolves: bz#1776808
    (qemu-kvm crashes when Windows VM is migrated with multiqueue)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-93.el8
changelog:
  - kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771971]
  - kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771971]
  - Resolves: bz#1771971
    (CVE-2019-11135 virt:rhel/qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-8.2.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-94.el8
changelog:
  - kvm-util-mmap-alloc-Add-a-is_pmem-parameter-to-qemu_ram_.patch [bz#1539282]
  - kvm-mmap-alloc-unfold-qemu_ram_mmap.patch [bz#1539282]
  - kvm-mmap-alloc-fix-hugetlbfs-misaligned-length-in-ppc64.patch [bz#1539282]
  - kvm-util-mmap-alloc-support-MAP_SYNC-in-qemu_ram_mmap.patch [bz#1539282]
  - kvm-x86-cpu-Enable-MOVDIRI-cpu-feature.patch [bz#1634827]
  - kvm-x86-cpu-Enable-MOVDIR64B-cpu-feature.patch [bz#1634827]
  - kvm-add-call-to-qemu_add_opts-for-overcommit-option.patch [bz#1634827]
  - kvm-support-overcommit-cpu-pm-on-off.patch [bz#1634827]
  - kvm-i386-cpu-make-cpu-host-support-monitor-mwait.patch []
  - kvm-x86-cpu-Add-support-for-UMONITOR-UMWAIT-TPAUSE.patch [bz#1634827]
  - kvm-target-i386-Add-support-for-save-load-IA32_UMWAIT_CO.patch [bz#1634827]
  - Resolves: bz#1539282
    ([Intel 8.2 Feature][Crystal Ridge] Support MAP_SYNC  - qemu-kvm)
  - Resolves: bz#1634827
    ([Intel 8.2 Feat] KVM Enable SnowRidge Accelerator Interface Architecture (AIA) - qemu)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-95.el8
changelog:
  - kvm-virtio-gpu-block-both-2d-and-3d-rendering.patch [bz#1674324]
  - kvm-x86-Intel-AVX512_BF16-feature-enabling.patch [bz#1642541]
  - Resolves: bz#1642541
    ([Intel 8.2 Feature] qemu-kvm Enable BFloat16 data type support)
  - Resolves: bz#1674324
    (With <graphics type='spice'><gl enable='on'/>, qemu either refuses to start completely or spice-server crashes afterwards)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-96.el8
changelog:
  - kvm-i386-Remove-cpu64-rhel6-CPU-model.patch [bz#1741346]
  - Resolves: bz#1741346
    (Remove the "cpu64-rhel6" CPU from qemu-kvm)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-97.el8
changelog:
  - kvm-exec-Fix-MAP_RAM-for-cached-access.patch [bz#1769613]
  - kvm-virtio-Return-true-from-virtio_queue_empty-if-broken.patch [bz#1769613]
  - kvm-usbredir-Prevent-recursion-in-usbredir_write.patch [bz#1752320]
  - kvm-xhci-recheck-slot-status.patch [bz#1752320]
  - kvm-tcp_emu-Fix-oob-access.patch [bz#1791566]
  - kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791566]
  - kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791566]
  - Resolves: bz#1752320
    (vm gets stuck when migrate vm back and forth with remote-viewer trying to connect)
  - Resolves: bz#1769613
    ([SEV] kexec mays hang at "[sda] Synchronizing SCSI cache " before switching to new kernel)
  - Resolves: bz#1791566
    (CVE-2020-7039 virt:rhel/qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-8.2.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-98.el8
changelog:
  - kvm-iscsi-Avoid-potential-for-get_status-overflow.patch [bz#1794501]
  - kvm-iscsi-Cap-block-count-from-GET-LBA-STATUS-CVE-2020-1.patch [bz#1794501]
  - kvm-clean-up-callback-when-del-virtqueue.patch [bz#1708480]
  - kvm-virtio-add-ability-to-delete-vq-through-a-pointer.patch [bz#1708480]
  - kvm-virtio-reset-region-cache-when-on-queue-deletion.patch [bz#1708480]
  - kvm-virtio-net-delete-also-control-queue-when-TX-RX-dele.patch [bz#1708480]
  - Resolves: bz#1708480
    ([Q35] No "DEVICE_DELETED" event in qmp after unplug virtio-net-pci device)
  - Resolves: bz#1794501
    (CVE-2020-1711 qemu-kvm: QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server [rhel-8.2.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-99.el8
changelog:
  - kvm-slirp-disable-tcp_emu.patch [bz#1791677]
  - kvm-target-i386-kvm-initialize-feature-MSRs-very-early.patch [bz#1790308]
  - Resolves: bz#1790308
    (qemu-kvm core dump when do L1 guest live migration with L2 guest running)
  - Resolves: bz#1791677
    (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-8])


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 4.2.0-23.el8
changelog:
  - Resolves: bz#1810193
    (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)
    Another syncronization


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 4.2.0-25
changelog:
  - Resolves: bz#1810193
    (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)
    Another sync


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-28.el8
changelog:
  - kvm-redhat-Install-the-s390-netboot.img-that-we-ve-built.patch [bz#1828317]
  - kvm-linux-headers-update-kvm.h.patch [bz#1828317]
  - kvm-s390x-Don-t-do-a-normal-reset-on-the-initial-cpu.patch [bz#1828317]
  - kvm-s390x-Move-reset-normal-to-shared-reset-handler.patch [bz#1828317]
  - kvm-s390x-Move-initial-reset.patch [bz#1828317]
  - kvm-s390x-Move-clear-reset.patch [bz#1828317]
  - kvm-s390x-Beautify-diag308-handling.patch [bz#1828317]
  - kvm-s390x-kvm-Make-kvm_sclp_service_call-void.patch [bz#1828317]
  - kvm-s390x-Fix-cpu-normal-reset-ri-clearing.patch [bz#1828317]
  - kvm-tests-boot-sector-Fix-the-bad-s390x-assembler-code.patch [bz#1828317]
  - kvm-pc-bios-s390x-Fix-reset-psw-mask.patch [bz#1828317]
  - kvm-s390x-Properly-fetch-and-test-the-short-psw-on-diag3.patch [bz#1828317]
  - kvm-s390x-Rename-and-use-constants-for-short-PSW-address.patch [bz#1828317]
  - kvm-s390x-Add-missing-vcpu-reset-functions.patch [bz#1828317]
  - kvm-s390-sclp-improve-special-wait-psw-logic.patch [bz#1828317]
  - kvm-pc-bios-s390x-Save-iplb-location-in-lowcore.patch [bz#1828317]
  - kvm-s390-ipl-sync-back-loadparm.patch [bz#1828317]
  - kvm-s390-ipl-fix-off-by-one-in-update_machine_ipl_proper.patch [bz#1828317]
  - kvm-s390x-ipl-Consolidate-iplb-validity-check-into-one-f.patch [bz#1828317]
  - kvm-vhost-correctly-turn-on-VIRTIO_F_IOMMU_PLATFORM.patch [bz#1828317]
  - kvm-s390x-Move-diagnose-308-subcodes-and-rcs-into-ipl.h.patch [bz#1828317]
  - kvm-s390x-protvirt-Support-unpack-facility.patch [bz#1828317]
  - kvm-s390x-protvirt-Add-migration-blocker.patch [bz#1828317]
  - kvm-s390x-protvirt-Inhibit-balloon-when-switching-to-pro.patch [bz#1828317]
  - kvm-s390x-protvirt-KVM-intercept-changes.patch [bz#1828317]
  - kvm-s390x-Add-SIDA-memory-ops.patch [bz#1828317]
  - kvm-s390x-protvirt-Move-STSI-data-over-SIDAD.patch [bz#1828317]
  - kvm-s390x-protvirt-SCLP-interpretation.patch [bz#1828317]
  - kvm-s390x-protvirt-Set-guest-IPL-PSW.patch [bz#1828317]
  - kvm-s390x-protvirt-Move-diag-308-data-over-SIDA.patch [bz#1828317]
  - kvm-s390x-protvirt-Disable-address-checks-for-PV-guest-I.patch [bz#1828317]
  - kvm-s390x-protvirt-Move-IO-control-structures-over-SIDA.patch [bz#1828317]
  - kvm-s390x-protvirt-Handle-SIGP-store-status-correctly.patch [bz#1828317]
  - kvm-s390x-Add-unpack-facility-feature-to-GA1.patch [bz#1828317]
  - kvm-s390x-protvirt-Fix-stray-error_report_err-in-s390_ma.patch [bz#1828317]
  - kvm-s390x-pv-Retry-ioctls-on-EINTR.patch [bz#1828317]
  - kvm-s390x-s390-virtio-ccw-Fix-build-on-systems-without-K.patch [bz#1828317]
  - kvm-s390x-pv-Fix-KVM_PV_PREP_RESET-command-wrapper-name.patch [bz#1828317]
  - kvm-spapr-Pass-the-maximum-number-of-vCPUs-to-the-KVM-in.patch [bz#1756946]
  - kvm-introduce-kvm_kernel_irqchip_-functions.patch [bz#1756946]
  - kvm-target-s390x-kvm-Enable-adapter-interruption-suppres.patch [bz#1756946]
  - kvm-vfio-nvlink-Remove-exec-permission-to-avoid-SELinux-.patch [bz#1823275]
  - Resolves: bz#1756946
    ([zKVM] Re-enable KVM_CAP_S390_AIS for new machine types)
  - Resolves: bz#1823275
    (RHEL8.1 - GPU Numa nodes not visible in guest post the pass-through.)
  - Resolves: bz#1828317
    ([IBM 8.3 FEAT] s390x: Base KVM setup for secure guests - qemu part)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-29.el8
changelog:
  - kvm-vfio-ccw-Fix-error-message.patch [bz#1660916]
  - kvm-vfio-ccw-allow-non-prefetch-ORBs.patch [bz#1660916]
  - kvm-linux-headers-support-vfio-ccw-features.patch [bz#1660916]
  - kvm-vfio-ccw-Refactor-cleanup-of-regions.patch [bz#1660916]
  - kvm-vfio-ccw-Add-support-for-the-schib-region.patch [bz#1660916]
  - kvm-vfio-ccw-Refactor-ccw-irq-handler.patch [bz#1660916]
  - kvm-s390x-css-Refactor-the-css_queue_crw-routine.patch [bz#1660916]
  - kvm-vfio-ccw-Add-support-for-the-CRW-region-and-IRQ.patch [bz#1660916]
  - kvm-config-enable-VFIO_CCW.patch [bz#1660916]
  - kvm-virtio-blk-Refactor-the-code-that-processes-queued-r.patch []
  - kvm-virtio-blk-On-restart-process-queued-requests-in-the.patch []
  - kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1838070]
  - Resolves: bz#1660916
    ([IBM 8.3 FEAT] KVM s390x: DASD passthrough support - qemu part)
  - Resolves: bz#1838070
    (CVE-2020-1983 virt:rhel/qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-30.el8
changelog:
  - kvm-i386-Mask-SVM-features-if-nested-SVM-is-disabled.patch [bz#1835390]
  - kvm-s390x-sigp-Fix-sense-running-reporting.patch [bz#1854092]
  - kvm-s390x-tcg-clear-local-interrupts-on-reset-normal.patch [bz#1854092]
  - kvm-virtio-net-fix-removal-of-failover-device.patch []
  - Resolves: bz#1835390
    (qemu promote host does not support 'EDX.npt' and 'EDX.nrip-save' when test with Q35 machine type on EPYC host)
  - Resolves: bz#1854092
    (kvm-unit-tests: tcg smp FAIL)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-31.el8
changelog:
  - kvm-qcow2-Fix-alloc_cluster_abort-for-pre-existing-clust.patch [bz#1807057]
  - kvm-iotests-026-Test-EIO-on-preallocated-zero-cluster.patch [bz#1807057]
  - kvm-iotests-026-Test-EIO-on-allocation-in-a-data-file.patch [bz#1807057]
  - kvm-iotests-026-Move-v3-exclusive-test-to-new-file.patch [bz#1807057]
  - Resolves: bz#1807057
    (qcow2_alloc_cluster_abort() frees preallocated zero clusters)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-32.el8
changelog:
  - kvm-i386-Add-2nd-Generation-AMD-EPYC-processors.patch [bz#1780385]
  - kvm-target-i386-sev-provide-proper-error-reporting-for-q.patch [bz#1689341]
  - kvm-target-i386-sev-fail-query-sev-capabilities-if-QEMU-.patch [bz#1689341]
  - kvm-s390x-protvirt-allow-to-IPL-secure-guests-with-no-re.patch [bz#1863034]
  - Resolves: bz#1689341
    (QEMU should report an error and return failure if AMD SEV is not enabled in the kernel)
  - Resolves: bz#1780385
    ([RFE] AMD EPYC-Rome support for KVM / QEMU guest)
  - Resolves: bz#1863034
    (RHEL8.3 Beta - Secure Execution: Unable to start Qemu with "-no-reboot" option (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-33.el8
changelog:
  - kvm-Require-libfdt-1.6.0.patch [bz#1867847]
  - Resolves: bz#1867847
    ([ppc] virt module 7629: /usr/libexec/qemu-kvm: undefined symbol: fdt_check_full, version LIBFDT_1.2)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-34.el8
changelog:
  - kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869710]
  - Resolves: bz#1869710
    (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-8.3.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-35.el8
changelog:
  - kvm-qga-commands-posix-Rework-build_guest_fsinfo_for_rea.patch [bz#1755075]
  - kvm-qga-commands-posix-Move-the-udev-code-from-the-pci-t.patch [bz#1755075]
  - kvm-qga-commands-posix-Support-fsinfo-for-non-PCI-virtio.patch [bz#1755075]
  - kvm-nvram-Exit-QEMU-if-NVRAM-cannot-contain-all-prom-env.patch [bz#1874780]
  - kvm-pc-bios-s390-ccw-Makefile-Compile-with-std-gnu99-fwr.patch [bz#1846975]
  - kvm-pc-bios-s390-ccw-Move-ipl-related-code-from-main-int.patch [bz#1846975]
  - kvm-pc-bios-s390-ccw-Introduce-ENODEV-define-and-remove-.patch [bz#1846975]
  - kvm-pc-bios-s390-ccw-Move-the-inner-logic-of-find_subch-.patch [bz#1846975]
  - kvm-pc-bios-s390-ccw-Do-not-bail-out-early-if-not-findin.patch [bz#1846975]
  - kvm-pc-bios-s390-ccw-Scan-through-all-devices-if-no-boot.patch [bz#1846975]
  - kvm-pc-bios-s390-ccw-Allow-booting-in-case-the-first-vir.patch [bz#1846975]
  - kvm-pc-bios-s390-ccw-main-Remove-superfluous-call-to-ena.patch [bz#1846975]
  - kvm-aio-posix-completely-stop-polling-when-disabled.patch [bz#1846975]
  - kvm-Remove-explicit-glusterfs-api-dependency.patch [bz#1872854]
  - Resolves: bz#1755075
    ([qemu-guest-agent] fsinfo doesn't return disk info on s390x)
  - Resolves: bz#1846975
    (Failed to boot up a s390x guest with virtio-blk-ccw if attaching a virtio-scsi-ccw bus in previous)
  - Resolves: bz#1872854
    (move the glusterfs dependency out of qemu-kvm-core to the glusterfs module)
  - Resolves: bz#1874780
    (-prom-env does not validate input)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-36.el8
changelog:
  - kvm-qga-fix-assert-regression-on-guest-shutdown.patch [bz#1884531]
  - kvm-libvhost-user-handle-endianness-as-mandated-by-the-s.patch [bz#1857733]
  - kvm-virtio-add-vhost-user-fs-ccw-device.patch [bz#1857733]
  - kvm-Ensure-vhost-user-fs-is-enabled-on-s390x.patch [bz#1857733]
  - kvm-s390x-sclp.c-remove-unneeded-label-in-sclp_service_c.patch [bz#1798506]
  - kvm-s390-sclp-get-machine-once-during-read-scp-cpu-info.patch [bz#1798506]
  - kvm-s390-sclp-rework-sclp-boundary-checks.patch [bz#1798506]
  - kvm-s390-sclp-read-sccb-from-mem-based-on-provided-lengt.patch [bz#1798506]
  - kvm-s390-sclp-check-sccb-len-before-filling-in-data.patch [bz#1798506]
  - kvm-s390-sclp-use-cpu-offset-to-locate-cpu-entries.patch [bz#1798506]
  - kvm-s390-sclp-add-extended-length-sccb-support-for-kvm-g.patch [bz#1798506]
  - kvm-linux-headers-Partial-update-against-Linux-5.9-rc4.patch [bz#1798506]
  - kvm-misc-Replace-zero-length-arrays-with-flexible-array-.patch [bz#1798506]
  - kvm-s390-guest-support-for-diagnose-0x318.patch [bz#1798506]
  - kvm-s390x-pv-Remove-sclp-boundary-checks.patch [bz#1798506]
  - kvm-s390x-pv-Fix-diag318-PV-fencing.patch [bz#1798506]
  - kvm-s390-kvm-fix-diag318-propagation-and-reset-functiona.patch [bz#1659412]
  - kvm-trace-use-STAP_SDT_V2-to-work-around-symbol-visibili.patch [bz#1898700]
  - Resolves: bz#1659412
    ([IBM 8.4 FEAT] KVM enablement for enhanced hardware diagnose data of guest kernel on s390x - qemu part)
  - Resolves: bz#1798506
    ([IBM 8.4 FEAT] KVM: Support extended-length SCCBs - qemu part)
  - Resolves: bz#1857733
    ([IBM 8.4 FEAT] KVM: Add support for virtio-fs on s390x - qemu part)
  - Resolves: bz#1884531
    (qemu-ga aborts after guest-shutdown command)
  - Resolves: bz#1898700
    (qemu-kvm for RHEL-8.4 doesn't build due to a possible incompatibility with systemtap-sdt-devel-4.4-1)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-37.el8
changelog:
  - kvm-hw-net-net_tx_pkt-fix-assertion-failure-in-net_tx_pk.patch [bz#1860994]
  - Resolves: bz#1860994
    (CVE-2020-16092 virt:rhel/qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-38.el8
changelog:
  - kvm-seccomp-fix-killing-of-whole-process-instead-of-thre.patch [bz#1880546]
  - kvm-pc-bios-s390x-Rename-PSW_MASK_ZMODE-to-PSW_MASK_64.patch [bz#1903135]
  - kvm-pc-bios-s390x-Use-PSW-masks-where-possible-and-intro.patch [bz#1903135]
  - kvm-pc-bios-s390x-Ensure-Read-IPL-memory-is-clean.patch [bz#1903135]
  - kvm-pc-bios-s390x-Clear-out-leftover-S390EP-string.patch [bz#1903135]
  - Resolves: bz#1880546
    (qemu use SCMP_ACT_TRAP even SCMP_ACT_KILL_PROCESS is available)
  - Resolves: bz#1903135
    (RHEL8.3 - KVM Distro install to vfio_ccw backed DASD gets error at the reboot step (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-39.el8
changelog:
  - kvm-ppc-spapr-Add-hotremovable-flag-on-DIMM-LMBs-on-drme.patch [bz#1901837]
  - kvm-ppc-spapr-re-assert-IRQs-during-event-scan-if-there-.patch [bz#1901837]
  - kvm-slirp-check-pkt_len-before-reading-protocol-header.patch [bz#1902237]
  - kvm-s390x-s390-virtio-ccw-Reset-PCI-devices-during-subsy.patch [bz#1905386]
  - kvm-qapi-enable-use-of-g_autoptr-with-QAPI-types.patch [bz#1859494]
  - kvm-error-Fix-examples-in-error.h-s-big-comment.patch [bz#1859494]
  - kvm-error-Improve-error.h-s-big-comment.patch [bz#1859494]
  - kvm-error-Document-Error-API-usage-rules.patch [bz#1859494]
  - kvm-error-New-macro-ERRP_GUARD.patch [bz#1859494]
  - kvm-qga-add-command-guest-get-disks.patch [bz#1859494]
  - kvm-qga-add-implementation-of-guest-get-disks-for-Linux.patch [bz#1859494]
  - kvm-qga-add-implementation-of-guest-get-disks-for-Window.patch [bz#1859494]
  - kvm-qga-fix-missing-closedir-in-qmp_guest_get_disks.patch [bz#1859494]
  - kvm-qga-update-schema-for-guest-get-disks-dependents-fie.patch [bz#1859494]
  - Resolves: bz#1859494
    (Report logical_name for disks without mounted file-system)
  - Resolves: bz#1901837
    (Failed to hotunplug pc-dimm device)
  - Resolves: bz#1902237
    (CVE-2020-29129 CVE-2020-29130 virt:rhel/qemu-kvm: QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets [rhel-8])
  - Resolves: bz#1905386
    (RHEL8.3 - s390x/s390-virtio-ccw: Reset PCI devices during subsystem reset (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-40.el8
changelog:
  - kvm-redhat-link-etc-qemu-ga-fsfreeze-hook-to-etc-qemu-kv.patch [bz#1910267]
  - kvm-qga-rename-Error-parameter-to-more-common-errp.patch [bz#1910326]
  - kvm-util-Introduce-qemu_get_host_name.patch [bz#1910326]
  - kvm-qga-Use-qemu_get_host_name-instead-of-g_get_host_nam.patch [bz#1910326]
  - kvm-redhat-add-un-pre-install-systemd-hooks-for-qemu-ga.patch [bz#1910220]
  - Resolves: bz#1910267
    (There is no soft link '/etc/qemu-kvm/fsfreeze-hook')
  - Resolves: bz#1910326
    (Incorrect hostname returned by  qga command 'guest-get-host-name')
  - Resolves: bz#1910220
    (qemu-ga service still active and can work after qemu-guest-agent been removed)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-41.el8
changelog:
  - kvm-udev-kvm-check-remove-the-exceeded-subscription-limi.patch [bz#1909244]
  - kvm-hw-arm-smmu-common-Factorize-some-code-in-smmu_ptw_6.patch [bz#1843852]
  - kvm-hw-arm-smmu-common-Add-IOTLB-helpers.patch [bz#1843852]
  - kvm-hw-arm-smmu-Introduce-smmu_get_iotlb_key.patch [bz#1843852]
  - kvm-hw-arm-smmu-Introduce-SMMUTLBEntry-for-PTW-and-IOTLB.patch [bz#1843852]
  - kvm-hw-arm-smmu-common-Manage-IOTLB-block-entries.patch [bz#1843852]
  - kvm-hw-arm-smmuv3-Introduce-smmuv3_s1_range_inval-helper.patch [bz#1843852]
  - kvm-hw-arm-smmuv3-Get-prepared-for-range-invalidation.patch [bz#1843852]
  - kvm-hw-arm-smmuv3-Fix-potential-integer-overflow-CID-143.patch [bz#1843852]
  - kvm-memory-Rename-memory_region_notify_one-to-memory_reg.patch [bz#1843852]
  - kvm-memory-Add-IOMMUTLBEvent.patch [bz#1843852]
  - kvm-memory-Add-IOMMU_NOTIFIER_DEVIOTLB_UNMAP-IOMMUTLBNot.patch [bz#1843852]
  - kvm-intel_iommu-Skip-page-walking-on-device-iotlb-invali.patch [bz#1843852]
  - kvm-memory-Skip-bad-range-assertion-if-notifier-is-DEVIO.patch [bz#1843852]
  - kvm-memory-clamp-cached-translation-in-case-it-points-to.patch [bz#1904393]
  - kvm-hw-ehci-check-return-value-of-usb_packet_map.patch [bz#1898628]
  - kvm-hw-net-e1000e-advance-desc_offset-in-case-of-null-de.patch [bz#1903070]
  - Resolves: bz#1909244
    (Remove KVM guest count and limit info message)
  - Resolves: bz#1843852
    (qemu core dumped: qemu-kvm: /builddir/build/BUILD/qemu-4.2.0/memory.c:1928: memory_region_notify_one: Assertion `entry->iova >= notifier->start && entry_end <= notifier->end' failed.)
  - Resolves: bz#1904393
    (CVE-2020-27821 virt:rhel/qemu-kvm: QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c [rhel-8])
  - Resolves: bz#1898628
    (CVE-2020-25723 virt:rhel/qemu-kvm: QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c [rhel-8])
  - Resolves: bz#1903070
    (CVE-2020-25707 CVE-2020-28916 virt:rhel/qemu-kvm: various flaws [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-42.el8
changelog:
  - kvm-linux-headers-add-vfio-DMA-available-capability.patch [bz#1905391]
  - kvm-s390x-pci-Move-header-files-to-include-hw-s390x.patch [bz#1905391]
  - kvm-vfio-Create-shared-routine-for-scanning-info-capabil.patch [bz#1905391]
  - kvm-vfio-Find-DMA-available-capability.patch [bz#1905391]
  - kvm-s390x-pci-Add-routine-to-get-the-vfio-dma-available-.patch [bz#1905391]
  - kvm-s390x-pci-Honor-DMA-limits-set-by-vfio.patch [bz#1905391]
  - kvm-s390x-fix-build-for-without-default-devices.patch [bz#1905391]
  - Resolves: bz#1905391
    (RHEL8.4 - s390x/pci: Honor vfio DMA limiting (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-43.el8
changelog:
  - kvm-Drop-bogus-IPv6-messages.patch [bz#1918054]
  - Resolves: bz#1918054
    (CVE-2020-10756 virt:rhel/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-8.4.0])


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-44.el8
changelog:
  - kvm-spapr-Improve-handling-of-fdt-buffer-size.patch [bz#1901837]
  - kvm-spapr-Fold-h_cas_compose_response-into-h_client_arch.patch [bz#1901837]
  - kvm-spapr-Don-t-use-spapr_drc_needed-in-CAS-code.patch [bz#1901837]
  - kvm-spapr-Fix-handling-of-unplugged-devices-during-CAS-a.patch [bz#1901837]
  - kvm-spapr-Allow-memory-unplug-to-always-succeed.patch [bz#1901837]
  - kvm-spapr-Improve-handling-of-memory-unplug-with-old-gue.patch [bz#1901837]
  - kvm-block-Require-aligned-image-size-to-avoid-assertion-.patch [bz#1834281]
  - kvm-file-posix-Allow-byte-aligned-O_DIRECT-with-NFS.patch [bz#1834281]
  - kvm-block-iscsi-fix-heap-buffer-overflow-in-iscsi_aio_io.patch [bz#1912974]
  - Resolves: bz#1834281
    (qemu-img convert abort when converting image with unaligned size)
  - Resolves: bz#1901837
    (Failed to hotunplug pc-dimm device)
  - Resolves: bz#1912974
    (CVE-2020-11947 virt:rhel/qemu-kvm: QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c may lead to information disclosure [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-45.el8
changelog:
  - kvm-virtiofsd-extract-lo_do_open-from-lo_open.patch [bz#1919111]
  - kvm-virtiofsd-optionally-return-inode-pointer-from-lo_do.patch [bz#1919111]
  - kvm-virtiofsd-prevent-opening-of-special-files-CVE-2020-.patch [bz#1919111]
  - Resolves: bz#1919111
    (CVE-2020-35517 virt:rhel/qemu-kvm: QEMU: virtiofsd: potential privileged host device access from guest [rhel-8.4.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-46.el8
changelog:
  - kvm-redhat-makes-qemu-respect-system-s-crypto-profile.patch [bz#1902960]
  - kvm-spapr-Adjust-firmware-path-of-PCI-devices.patch [bz#1912891]
  - Resolves: bz#1902960
    (QEMU doesn't honour system crypto policies)
  - Resolves: bz#1912891
    ([ppc64le] --disk cdimage.iso,bus=usb fails to boot)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-47.el8
changelog:
  - kvm-x86-cpu-Enable-AVX512_VP2INTERSECT-cpu-feature.patch [bz#1790620]
  - kvm-target-i386-add-fast-short-REP-MOV-support.patch [bz#1790620]
  - kvm-x86-cpu-Populate-SVM-CPUID-feature-bits.patch [bz#1790620]
  - kvm-i386-Add-the-support-for-AMD-EPYC-3rd-generation-pro.patch [bz#1790620]
  - Resolves: bz#1790620
    ([RFE] AMD Milan - Add KVM/support for EPYC-Milan CPU Model - Slow Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-48.el8
changelog:
  - kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917451]
  - Resolves: bz#1917451
    (CVE-2020-29443 virt:rhel/qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-8.4.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-49.el8
changelog:
  - kvm-net-remove-an-assert-call-in-eth_get_gso_type.patch [bz#1892350]
  - kvm-e1000-fail-early-for-evil-descriptor.patch [bz#1930092]
  - kvm-net-forbid-the-reentrant-RX.patch [bz#1859175]
  - kvm-qemu-img-convert-Don-t-pre-zero-images.patch [bz#1855250]
  - kvm-audio-audio_generic_get_buffer_in-should-honor-size.patch [bz#1932823]
  - Resolves: bz#1892350
    (CVE-2020-27617 virt:rhel/qemu-kvm: QEMU: net: an assert failure via eth_get_gso_type [rhel-8.5.0])
  - Resolves: bz#1930092
    (CVE-2021-20257 virt:rhel/qemu-kvm: QEMU: net: e1000: infinite loop while processing transmit descriptors [rhel-8.5.0])
  - Resolves: bz#1859175
    (CVE-2020-15859 virt:rhel/qemu-kvm: QEMU: net: e1000e: use-after-free while sending packets [rhel-8])
  - Resolves: bz#1855250
    (qemu-img convert uses possibly slow pre-zeroing on block storage)
  - Resolves: bz#1932823
    (after upgrade from 4.3 to 4.4 audio stops working in guests after couple of seconds)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-50.el8
changelog:
  - kvm-hw-intc-arm_gic-Fix-interrupt-ID-in-GICD_SGIR-regist.patch [bz#1925430]
  - kvm-libqos-usb-hcd-ehci-use-32-bit-write-for-config-regi.patch [bz#1842478]
  - kvm-libqos-pci-pc-use-32-bit-write-for-EJ-register.patch [bz#1842478]
  - kvm-memory-Revert-memory-accept-mismatching-sizes-in-mem.patch [bz#1842478]
  - kvm-acpi-accept-byte-and-word-access-to-core-ACPI-regist.patch [bz#1842478]
  - kvm-xhci-fix-valid.max_access_size-to-access-address-reg.patch [bz#1842478]
  - kvm-softmmu-memory-Log-invalid-memory-accesses.patch [bz#1842478]
  - Resolves: bz#1925430
    (CVE-2021-20221 virt:rhel/qemu-kvm: qemu: out-of-bound heap buffer access via an interrupt ID field [rhel-8.5.0])
  - Resolves: bz#1842478
    (CVE-2020-13754 virt:rhel/qemu-kvm: QEMU: msix: OOB access during mmio operations may lead to DoS [rhel-8.5.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-51.el8
changelog:
  - kvm-linux-headers-Add-VFIO_CCW_REQ_IRQ_INDEX.patch [bz#1940450]
  - kvm-vfio-ccw-Connect-the-device-request-notifier.patch [bz#1940450]
  - kvm-pc-bios-s390-ccw-fix-off-by-one-error.patch [bz#1942880]
  - kvm-pc-bios-s390-ccw-break-loop-if-a-null-block-number-i.patch [bz#1942880]
  - kvm-pc-bios-s390-ccw-don-t-try-to-read-the-next-block-if.patch [bz#1942880]
  - Resolves: bz#1940450
    (RHEL8.5 - Mediated Device already in use by same domain we are booting (vfio-ccw/Multipath Testing) (kvm) - qemu-kvm part (also has kernel and libvirt parts))
  - Resolves: bz#1942880
    (RHEL8.4 Nightly[0322] - KVM guest fails to find zipl boot menu index (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-52.el8
changelog:
  - kvm-file-posix-Mitigate-file-fragmentation-with-extent-s.patch [bz#1877163]
  - kvm-block-file-posix-Fix-problem-with-fallocate-PUNCH_HO.patch [bz#1944861]
  - kvm-spapr-Remove-stale-comment-about-power-saving-LPCR-b.patch [bz#1969768]
  - kvm-spapr-Set-LPCR-to-current-AIL-mode-when-starting-a-n.patch [bz#1969768]
  - Resolves: bz#1877163
    ([FJ 8.3 Bug] The progress bar of the "virt-clone --nonsparse" command shows the progress rate exceeding 100%.)
  - Resolves: bz#1944861
    (Qemu-img convert fails when source image is on gpfs)
  - Resolves: bz#1969768
    ([ppc64le] Hotplug vcpu device hit call trace:[qemu output] KVM: unknown exit, hardware reason 7fff9ce87ed8)


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-60.el8_5.2
changelog:
  - kvm-target-i386-Declare-constants-for-XSAVE-offsets.patch [bz#2065239]
  - kvm-target-i386-Consolidate-the-X86XSaveArea-offset-chec.patch [bz#2065239]
  - kvm-target-i386-Clarify-the-padding-requirements-of-X86X.patch [bz#2065239]
  - kvm-target-i386-Pass-buffer-and-length-to-XSAVE-helper.patch [bz#2065239]
  - kvm-target-i386-Make-x86_ext_save_areas-visible-outside-.patch [bz#2065239]
  - kvm-target-i386-Observe-XSAVE-state-area-offsets.patch [bz#2065239]
  - kvm-target-i386-Populate-x86_ext_save_areas-offsets-usin.patch [bz#2065239]
  - Resolves: bz#2065239
    (KVM Fedora 35 guest x86 programs randomly crash in signal handler [rhel-8.5.0.z])


author: Zdenek Dohnal <zdohnal@redhat.com> - 7.1.1-5
changelog:
  - CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and QPDF_Dictionary classes in libqpdf.a [fedora-all]


author: Zdenek Dohnal <zdohnal@redhat.com> - 6.0.0-8
changelog:
  - 1477213 - Detect recursions loop resolving objects
  - 1454820 - CVE-2017-9208
  - 1454820 - CVE-2017-9209
  - 1454820 - CVE-2017-9210


author: Jan Grulich <jgrulich@redhat.com> - 5.12.5-5
changelog:
  - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
    Resolves: bz#1814739
    Resolves: bz#1814683

  - Fix: XML entity expansion vulnerability
    Resolves: bz#1822193


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-3
changelog:
  - support %bootstrap, %check: add autotests
  - build with -O1 to workaround serious autotest/code failures (f28+, #1551246)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.0-0.3.rc
changelog:
  - libQt5Designer should be in a subpackage (#1156685)
  - -doc: disable(boostrap for new clucene), drop dep on main pkg


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 5.4.0-0.4.rc
changelog:
  - disable bootstrap (reenable -doc)
  - system-clucene patch: drop -fpermissive flag
  - system-clucene patch: use toLocal8Bit instead of toStdString
  - system_clucene: BR clucene09-core-devel >= 0.9.21b-12 (-11 was broken)


author: Helio Chissini de Castro <helio@kde.org> - 5.6.0-3
changelog:
  - Reenable examples. Some interfaces marked as examples are needed from phonon
  - Update to second rc snapshot


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-0.5
changelog:
  - (re)fix bootstrap macro
  - include qt5-qdoc/qt5-qhelpgenerator build dep deps in -doc subpkg only
  - fix whitespace


author: Rex Dieter <rdieter@fedoraproject.org> - 5.8.0-4
changelog:
  - bootstrap 5.8.0 (rawhide)
  - Created a meta package called qt5-doctools to avoid the mess of multiple tools


author: Rex Dieter <rdieter@fedoraproject.org> - 5.9.1-4
changelog:
  - Obsoletes: qt5-designer-plugin-webkit (upgrade path when webkit support is not enabled)
  - resurrect bootstrap macro (commented)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4-18
changelog:
  - Fix typo in default.conf
    Resolves: #1882060
  - Modify the cron command to avoid an e-mail with error message after
    ReaR is installed but not properly configured when the cron command
    is triggered for the first time
    Resolves: #1729499
  - Backport upstream code related to LUKS2 support
    Resolves: #1832394
  - Changes for NetBackup (NBU) support, upstream PR2544
    Resolves: #1898080


author: Pavel Cahyna <pcahyna@redhat.com> - 2.4-19
changelog:
  - Backport PR2608:
    Fix setting boot path in case of UEFI partition (ESP) on MD RAID
    Resolves: rhbz1945869
  - Backport PR2625
    Prevents accidental backup removal in case of errors
    Resolves: rhbz1958247
  - Fix rsync error and option handling
    Fixes metadata storage when rsync user is not root
    Resolves: rhbz1930662


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-1
changelog:
  - Rebase to upstream release 2.6 and drop unneded patches.
    Add S/390 support.
    Resolves: rhbz1983003, rhbz1988493, rhbz1868421
  - Add missing dependencies on dhcp-client (see #1926451), file
  - Patch documents to be compatible with asciidoc,
    we don't have asciidoctor
  - On POWER add bootlist & ofpathname to the list of required programs
    conditionally (bootlist only if running under PowerVM, ofpathname
    always except on PowerNV) - upstream PR2665, add them to package
    dependencies
    Resolves: rhbz1983013


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-2
changelog:
  - Fix multipath performance regression in 2.6, introduced by upstream PR #2299.
    Resolves: rhbz1993296


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-3
changelog:
  - Add patch for better handling of thin pools and other LV types not supported
    by vgcfgrestore
    Resolves: rhbz1747468


author: Neil Horman <nhorman@tuxdriver.com> - 0.1-2
changelog:
  - Updated requires for python3
  - Removed unneeded BuildRequires
  - Globed the inclusion of man page
  - Fixed license file tagging


author: Jens Petersen <petersen@redhat.com> 7.3.92-4
changelog:
  - fix %configure targeting for autoconf-2.5x (#58468)
  - include ~/.rpmmacros in macrofiles file path again


author: Jens Petersen <petersen@redhat.com> - 8.0.22-2
changelog:
  - add config.guess and config.sub (2003-02-22) with s390 patch on config.sub
  - make %configure use them


author: Jens Petersen <petersen@redhat.com> - 8.0.25-1
changelog:
  - update config.{guess,sub} to 2003-06-17
  - define VENDOR to be redhat only when /etc/redhat-release present
    [suggested by jbj]
  - put VENDOR in vendor field in our config.guess file for
    ia64, ppc, ppc64, s390, s390x, x86_64 and elf32-i386 Linux
  - drop the --host, --build, --target and --program-prefix configure options
    from %configure, since this causes far too many problems


author: Jens Petersen <petersen@redhat.com> - 8.0.26-1
changelog:
  - preserve the vendor field when VENDOR not set
  - put VENDOR in the final i386-libc line, not the tentative one


author: Elliot Lee <sopwith@redhat.com> 8.0.33-1
changelog:
  - Change -D to -Wp,-D to make java happy
  - Add -D_FORTIFY_SOURCE=2 to global cflags (as per Jakub & Arjan's request)


author: Jon Masters <jcm@redhat.com> 8.0.45-14
changelog:
  - Rebased all previous patches (since java fix introduced offset).
  - Added Fedora per-release macros to platforms section of macros.
    Further debate may see these move elsewhere in the ordering.


author: Jon Masters <jcm@redhat.com> 8.0.45-15
changelog:
  - Add modalias tags to kernel module packages (kmods) for tracking.
  - Further information is available at http://www.kerneldrivers.org/.


author: Jeremy Katz <katzj@redhat.com> - 8.1.0-1
changelog:
  - add modalias tags to kmod packages and other kmod changes (jcm)
  - recompress jars to avoid multilib conflicts (bkonrath)


author: Jeremy Katz <katzj@redhat.com> - 9.0.0-1
changelog:
  - use stock find-lang.sh (#213041)
  - arm fixes (Lennert Buytenhek, #243523)
  - allow jar repacking to be disabled (#219731)
  - fix running dist.sh --fc (#223651)
  - hardlink identical .pyc and .pyo files to save space (Ville Skyttä)
  - fix TMPDIR usage (Matthew Miller, #235614)


author: Jesse Keating <jkeating@redhat.com> - 9.0.1-1
changelog:
  - Remove dist defines, fedora-release does that now
  - Enable post-build buildroot checking by default


author: Jon Masters <jcm@redhat.com> - 9.0.2-1
changelog:
  - Remove smp dependencies
  - Update config.guess|sub files
  - Don't call find-requires.ksyms for kmod packages (kernel kABI scripts).


author: Jon Masters <jcm@redhat.com> - 9.0.3-1
changelog:
  - Ensure Java Jar files have readable files within.
  - Remove overwritten config.guess|sub files (testing).
  - Fix Fortran flags for building using _fmoddir.
  - Pull in objdump fix to upstream find-requires.


author: Dennis Gilmore <dennis@ausil.us> - 9.0.3-5
changelog:
  - apply fedora 11 default buildflags
  - set 32 bit intel build arch to i586 on compatible hardware
  - set 32 bit sparc build arch to sparcv9 on compatible hardware


author: Adam Jackson <ajax@redhat.com> 9.0.3-14
changelog:
  - redhat-rpm-config-9.0.3-jars-with-spaces.patch: Handle repacking jars
    whose filenames contain spaces. (#461854)


author: Adam Jackson <ajax@redhat.com> 9.0.3-15
changelog:
  - redhat-rpm-config-9.0.4-brpssa-speedup.patch: When looking for static
    archives, only run file(1) on files named *.a. (#517101)


author: Paul Howarth <paul@city-fan.org> 9.0.3-17
changelog:
  - redhat-rpm-config-9.0.3-filtering-macros.patch: Rediff so we don't ship a .orig file
  - add (empty) %build section
  - fix unescaped macros in changelog


author: Panu Matilainen <pmatilai@redhat.com> - 9.1.0-1
changelog:
  - new version, lose merged patches (fixes #521141, #455279, #496522, #458648)
  - require rpm for parent dir, version >= 4.6.0 for sane keyserver behavior
  - buildrequire libtool to grab copies of config.guess and config.sub
  - add URL to the git repo and upstream changelog as documentation


author: Dennis Gilmore <dennis@ausil.us> - 9.1.0-7
changelog:
  - add -srpm to the arches files so that the base language macros can
    be parallel installable with these


author: Adam Jackson <ajax@redhat.com> 9.1.0-15
changelog:
  - redhat-hardened-{cc1,ld}: Move some of the rewrite magic to gcc specs so
    we don't end up with both -fPIC and -fPIE on the command line


author: Adam Jackson <ajax@redhat.com> 9.1.0-17
changelog:
  - Expose %_hardening_{c,ld}flags independently to make it easier for
    packages to apply them to selected components


author: Adam Jackson <ajax@redhat.com> 9.1.0-18
changelog:
  - redhat-hardened-cc1: Inject -fPIE, not -fPIC.
    cf. http://lists.fedoraproject.org/pipermail/devel/2011-September/157365.html


author: Dennis Gilmore <dennis@ausil.us> - 9.1.0-23
changelog:
  - remove patch that forces --disable-silent-rules to configure
  - it breaks anything set to not ignore unknown configure options


author: Toshio Kuratomi <toshio@fedoraproject.org> - 9.1.0-34
changelog:
  - Add patch from https://bugzilla.redhat.com/show_bug.cgi?id=783433
    to fix spaces in files and directories that are fed to the
    brp-python-hardlink script
  - Require zip since java repack jars requires it
    https://bugzilla.redhat.com/show_bug.cgi?id=857479
  - Java jars need the MANIFEST.MF file to be first in the archive
    https://bugzilla.redhat.com/show_bug.cgi?id=465664
  - Fix kernel_source macro to match the directory that kernel sources are installed in
    https://bugzilla.redhat.com/show_bug.cgi?id=648996
  - Patch _mandir, _infodir, and _defaultocdir to use _prefix
    https://bugzilla.redhat.com/show_bug.cgi?id=853216


author: Toshio Kuratomi <toshio@fedoraproject.org> - 9.1.0-36
changelog:
  - Patch to fix spaces in files used in filtering macros
    https://bugzilla.redhat.com/show_bug.cgi?id=783932


author: Jens Petersen <petersen@redhat.com> - 9.1.0-38
changelog:
  - add ARM to ghc_arches_with_ghci for ghc-7.4.2 ghci support
    (NB this change should not be backported before ghc-7.4.2)


author: Panu Matilainen <pmatilai@redhat.com> - 9.1.0-42
changelog:
  - Switch back to manual config.guess/sub copies for reproducability
  - Replace config.guess/sub from %configure again (#951442)


author: Panu Matilainen <pmatilai@redhat.com> - 9.1.0-43
changelog:
  - Add optflags stack protector override for AArch64 (#909788)
  - Also set FCFLAGS from %configure (#914831)


author: Adam Jackson <ajax@redhat.com> 9.1.0-44
changelog:
  - redhat-config-*: Use + to append rather than %rename, to protect against
    multiple -specs= ending up in the command line. (#892837)


author: Kevin Fenzi <kevin@scrye.com> 9.1.0-50
changelog:
  - Make docdirs unversioned on Fedora 20+ (#986871)
  - Hack around libtool issue for hardened build for now (#978949)


author: Panu Matilainen <pmatilai@redhat.com> - 10-1
changelog:
  - Make fedora dist-git the upstream of this package and its sources
  - Add maintainer comments to spec wrt versioning and changes


author: Panu Matilainen <pmatilai@redhat.com> - 11-1
changelog:
  - Stop pretending this package is relocatable, its not
  - Require rpm >= 4.11 for /usr/lib/rpm/macros.d support etc
  - Move our macros out of from /etc, they're not configuration


author: Panu Matilainen <pmatilai@redhat.com> - 12-1
changelog:
  - Be more explicit about the package contents
  - Split kernel module macros to a separate file
  - Split kernel module scripts and macros to a separate package


author: Panu Matilainen <pmatilai@redhat.com> - 13-1
changelog:
  - Move the remaining dependency generator stuff to the kmp macro package
  - Stop overriding rpm external dependency generator settings by default


author: Panu Matilainen <pmatilai@redhat.com> - 14-1
changelog:
  - Add Mono path macros (#1070936)
  - Allow opting out of config.{guess,sub} replacement hack (#991613)


author: Florian Festi <ffesti@redhat.com> 32-1
changelog:
  - Support out of source builds for %_configure_gnuconfig_hack (#1191788)
  - Fix typo in %kernel_module_package (#1159361)


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 46-1
changelog:
  - Allow %configure to optionally pass --disable-silent-rules.  Define
    %_configure_disable_silent_rules (defaulting to 0) to control this.


author: Richard W.M. Jones <rjones@redhat.com> 48-1
changelog:
  - Add support for riscv64.
    This also updates config.sub/config.guess to the latest upstream versions.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 49-1
changelog:
  - Remove hardcoded limit of 16 CPUs for makefile parallelism.
  - See https://bugzilla.redhat.com/show_bug.cgi?id=1384938


author: Panu Matilainen <pmatilai@redhat.com> - 53-1
changelog:
  - Drop brp-java-repack-jars by request (#1235770)
  - Drop brp-implant-ident-static, unused for 13 years and counting


author: Panu Matilainen <pmatilai@redhat.com> - 59-1
changelog:
  - Move global compiler flags to __global_compiler_flags macro
  - Introduce separate __global_fooflags for C, C++ and Fortran


author: Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 67-1
changelog:
  - Define _include_gdb_index (RHBZ #1476722)
  - Move _debuginfo_subpackages and _debugsource_packages from rpm (RHBZ #1476735)


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 73-1
changelog:
  - Add macros.forge for simplifying packaging of forge-hosted packages.  See
    https://fedoraproject.org/wiki/Forge-hosted_projects_packaging_automation and
    https://bugzilla.redhat.com/show_bug.cgi?id=1523779


author: Tomas Orsava <torsava@redhat.com> - 107.3-3
changelog:
  - The brp-python-bytecompile script no longer accepts two arguments, as the
    first argument has been obsoleted
  - Modified the definition of %__brp_python_bytecompile to match the new scheme


author: Tomas Orsava <torsava@redhat.com> - 108-1
changelog:
  - Impement changing python3 shebangs in brp-mangle-shebangs
  - Added a dependency on python3-rpm-macros


author: Peter Jones <pjones@redhat.com> - 109-1
changelog:
  - Add Requires: efi-srpm-macros for %{efi}
  - brp-mangle-shebangs: add %{__brp_mangle_shebangs_exclude_file} and
    %{__brp_mangle_shebangs_exclude_from_file} to allow you to specify files
    containing the shebangs to be ignore and files to be ignored regexps,
    respectively, so that they can be generated during the package build.


author: Eugene Syromiatnikov <esyr@redhat.com> - 113-1
changelog:
  - Fix generation for kernel module symbol version dependencies for the case
    when module depends on the symbol with the same name as one present in kernel
    but a different version (#1622016)


author: Eugene Syromiatnikov <esyr@redhat.com> - 114-1
changelog:
  - Add support for compressed kernel modules to find-provides,
    find-provides.ksyms, find-requires, find-requires.ksyms, firmware.prov
    (#1622019)


author: Eugene Syromiatnikov <esyr@redhat.com> - 115-1
changelog:
  - Revert back to usage of join in find-requires.ksym:mod_requires()
    as generated "Requires:" and "Provides:" lists have different format
    and unsuitable for processing with comm (#1622016)


author: Eugene Syromiatnikov <esyr@redhat.com> - 116-1
changelog:
  - Forward-port RHEL-specific kmodtool/macros.kmp changes from RHEL 7,
    update kmodtool script for RHEL 8 (#1658414, #1666162)


author: Florian Festi <ffesti@redhat.com> - 123-1
changelog:
  - Update kmod.prov for better performance (#1794491)
  - Backport performance improvements for brp-mangle-shebangs (#1794779)


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 125-1.0.2
changelog:
  - Backport from fedora32
    Allow conditionally adding -fcommon to CFLAGS by defining %_legacy_common_support


author: Nigel Jones <nigjones@redhat.com> - 0.9.2-1
changelog:
  - API update to bring in line with current version of Strata.
    Changes include:
     - Update to Recommendations API
     - Pagination of Cases
  - Additional fixes for proxy handling, and traceability of exceptions


author: Nigel Jones <nigjones@redhat.com> - 0.9.4-1
changelog:
  - Downloads:
    - Fixes to download handling to avoid excessive memory use
  - Localization/Internationalization:
    - Changes to support non-ASCII character input from character sets used in
      Red Hat GSS supported languages.


author: Mark Huth <mhuth@redhat.com> - 0.9.7-6
changelog:
  - Resolves: rhbz#1314606 - show progress with addattachment
  - Resolves: rhbz#1314607 - problem with addattachment -s switch


author: Pranita Ghole<pghole@redhat.com> - 0.10.1-1
changelog:
  - Resolves: rhbz#1670001 - redhat-support-tool -o option does not work (soscleaner)
  - Resolves: rhbz#1670369 - redhat-support-lib-python: Traceback on make_report from utils.reporthelper
  - Resolves: rhbz#1670044 - redhat-support-tool proxy does not work on rhel-8


author: Pranita Ghole<pghole@redhat.com> - 0.11.2-1
changelog:
  - Resolves: rhbz#1677257 - redhat-support-lib-python: AttributeError from utils/reporthelper.py no buf


author: Pranita Ghole<pghole@redhat.com> - 0.13.0-0
changelog:
  - Resolves: rhbz#2028550 - RHST should use new Red Hat Secure FTP instead of dropbox for attachments
  - Resolves: rhbz#2028546 - Add support for handling JSON response from API's
  - Resolves: rhbz#2028543 - Add support to upload to and download from S3


author: Nigel Jones <nigjones@redhat.com> - 0.9.2-1
changelog:
  - Various updates to source, including:
    - Pagination of 'listcases'
    - Better debugability
    - Splitfile abilities to 'addattachment'
    - Recommendations support
    - Changes to 'downloadall' attachment handling


author: Nigel Jones <nigjones@redhat.com> - 0.9.3-1
changelog:
  - Pagination bug fix to fix an offsetting bug that could contribute
    to missing, or duplicate results.


author: Nigel Jones <nigjones@redhat.com> - 0.9.4-1
changelog:
  - Diagnostics:
    - Opening a case will now trigger the case recommendations engine
      prior to opening the case.
    - Extracted backtraces from kernel vmcores can be passed to
      Ask Shadowman at the users request
  - Case Handling:
    - modifycase can be triggered on a selected case
    - Per above, opencase/diagnostics support
  - Plugins:
    - Ability for Vendor/L3 plugins
    - Sample 'ACMECorp' plugin + README.plugins in documentation directory.
  - Localization/Internationalization:
    - Changes to support non-ASCII character input from character sets used in
      Red Hat GSS supported languages.


author: Keith Robertson <kroberts@redhat.com> - 0.9.5-2
changelog:
  - Various updates including;
    - Filtering and pagination of listcases
    - casegroup command
    - opencase is in the analyze and diagnose commands


author: Keith Robertson <kroberts@redhat.com> - 0.9.5-4
changelog:
  - Resolves: rhbz#983909
  - Resolves: rhbz#983896
  - Resolves: rhbz#983903
  - Also various issues with btextract


author: Keith Robertson <kroberts@redhat.com> - 0.9.7-1
changelog:
  - Allow the CLI to return more than 50 results
  - TypeError: Incorrect padding with a specific password and not working further.
  - diagnose filename output gives URLs to the XML file, not html, and XML displays author sso name
  - getcase subcommand of redhat-support-tool doesn't show the group name


author: Mark Huth <mhuth@redhat.com> - 0.9.7-2
changelog:
  - bz1161141 - search plugin output gives URLs to the XML page, not html
  - bz1122161 - rfe for comment numbers and public/private markers in Case Discussion in getcase
  - bz1122164 - rfe for ability to add private comments and attachments to a case


author: Mark Huth <mhuth@redhat.com> - 0.9.7-3
changelog:
  - Resolves: rhbz#1168414 - rhel7 vmcore offset
  - Resolves: rhbz#1174461 - skip already downloaded attachments
  - Resolves: rhbz#1176473 - fix addattachment via FTP and proxy
  - Make debug_repos configurable via config option


author: Mark Huth <mhuth@redhat.com> - 0.9.7-4
changelog:
  - Resolves: rhbz#1196297 - typos in opencase
  - Resolves: rhbz#1196316 - change menus when closing a case
  - Fallback to ownerSSOName if associateSSOName filter gets 404 error in listcases
  - Other small fixes


author: Mark Huth <mhuth@redhat.com> - 0.9.8-6
changelog:
  - Resolves: rhbz#1104344 - add soscleaner
  - Resolves: rhbz#1273976 - caches bad password
  - Resolves: rhbz#1284306 - improve ? help
  - Resolves: rhbz#1284308 - show attachment sizes
  - Resolves: rhbz#1284309 - show attachment full path
  - Resolves: rhbz#1284314 - differentiate diagnose and analyze
  - Resolves: rhbz#1290909 - change case internal status
  - Resolves: rhbz#1351141 - reverse severity list


author: Vikas Rathee <vrathee@redhat.com> - 0.9.9-1
changelog:
  - Resolves: rhbz#1380109 - Include creation date and last modified date in Solution title details.
  - Resolves: rhbz#1342628 - When opening a new case, offer a default product.
  - Resolves: rhbz#1342632 - When opening a new case, offer to use the default case group of that user.


author: Vikas Rathee <vrathee@redhat.com> - 0.9.10-1
changelog:
  - Resolves: rhbz#1342627 - List cases by group.
  - Resolves: rhbz#1379619 - Inform when http_proxy environment variable is used.


author: Pranita Ghole<pghole@redhat.com> - 0.11.2-2
changelog:
  - Resolves: rhbz#1685296 - redhat-support-tool env var http_proxy does not work with user and password
  - Resolves: rhbz#1685295 - [RFE][RHEL8] Include Reason in cases of failed proxy
  - Resolves: rhbz#1684321 - redhat-support-tool config debug <level>` fails with "ERROR: debug is not a valid configuration file option.


author: Pranita Ghole<pghole@redhat.com> - 0.11.3-2
changelog:
  - Resolves: rhbz#1882771 - redhat-support-tool: UnboundLocalError: local variable 'timer' referenced before assignment
  - Resolves: rhbz#1882772 - [RFE] Add functionality to generate and send sosreport after selecting the case.
  - Resolves: rhbz#1882773 - [RFE] Generate and upload sosreport to case from cli


author: Pranita Ghole<pghole@redhat.com> - 0.13.0-0
changelog:
  - Resolves: rhbz#2028556 - RHST should use new Red Hat Secure FTP instead of dropbox for attachments
  - Resolves: rhbz#2028553 - Add support for handling JSON response from API's
  - Resolves: rhbz#2028540 - Add support to upload to and download from S3


author: Remi Collet <rcollet@redhat.com> - 4.0.10-2
changelog:
  - drop build dependency on pandoc
  - drop dependency on jemalloc #1591762
  - fix License (BSD and MIT)
  - add bundled libraries licences
  - cleanup conditions from spec file


author: Remi Collet <rcollet@redhat.com> - 5.0.3-2
changelog:
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192
  - fix Stack buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10193


author: Remi Collet <rcollet@redhat.com> - 5.0.3-4
changelog:
  - fix lua scripts can overflow the heap-based Lua stack
    CVE-2021-32626
  - fix integer overflow issue with Streams
    CVE-2021-32627
  - fix integer overflow bug in the ziplist data structure
    CVE-2021-32628
  - fix integer overflow issue with intsets
    CVE-2021-32687
  - fix integer overflow issue with strings
    CVE-2021-41099


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.0-10.5
changelog:
  - Install license file with javadoc package
  - Convert versioned javadoc to versionless
  - Update to current packaging guidelines
  - Remove msv provides and obsoletes


author: Mat Booth <mat.booth@redhat.com> - 2011.1-1
changelog:
  - Update to version released from new project location rhbz#981275
  - Build/install with maven instead of ant
  - Drop old javadoc rpm bug workaround


author: Kalev Lember <kalevlember@gmail.com> - 0.7.93-1
changelog:
  - Update to 0.7.93
  - Tighten deps with the _isa macro
  - Don't manually require pkgconfig; rpmbuild generates this automatically
  - Use license macro for the COPYING file


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845548


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-5
changelog:
  + rhythmbox-3.4.2-5
  - Remove LIRC plugin
  - Fix 2 build warnings
  - Remove BRs for removed visualiser plugin


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-7
changelog:
  + rhythmbox-3.4.2-7
  - Fix warnings in art search when playing a radio
  - Fix initial import never finishing
  - Fix multimedia keys integration in GNOME


author: Jarod Wilson <jarod@redhat.com> - 5-4
changelog:
  - Make hooks more resilient to missing info
  - Error out with a useful message when necessary info isn't there
  - Resolves: rhbz#1627122


author: Jonathan Lebon <jonathan@jlebon.com> - 2020.4-1
changelog:
  - New upstream version
    https://github.com/coreos/rpm-ostree/releases/tag/v2020.4
    Resolves: #1861786


author: Colin Walters <walters@verbum.org> - 2020.7-4
changelog:
  - Backport https://github.com/coreos/rpm-ostree/pull/2386/commits/aa8e49aaeddfc5d38651fa08f46e059655818fd1
    Resolves: #1944760


author: Luca BRUNO <lucab@lucabruno.net> - 2021.5-1
changelog:
  - New upstream version
    https://github.com/coreos/rpm-ostree/releases/tag/v2021.5
    Resolves: rhbz#1959874


author: Luca BRUNO <lucab@redhat.com> - 2021.5-2
changelog:
  - Backport _dbpath fixes, see
    https://github.com/coreos/rpm-ostree/issues/2904
    Resolves: rhbz#1973579


author: Thomas Woerner <twoerner@redhat.com> - 8.10-7
changelog:
  - removed fakeroot requirement and all qa_robot scripts (RHBZ#1615605)
  - Fixed missing build requires for python3-devel


author: Michal Domonkos <mdomonko@redhat.com> - 8.10-8
changelog:
  - spectool: ignore query string in URL (RHBZ#1826299)
  - Fix TypeError in rpmdev-rmdevelrpms and rpmdev-checksig (RHBZ#1851499)


author: Todd Zullinger <tmz@pobox.com> - 1.10-9
changelog:
  - Update UsrLibBinaryException config to include .build-id
  - Ignore useless-provides on debuginfo provides (bz1489096)


author: Thomas Woerner <twoerner@redhat.com> - 1.10.13.1
changelog:
  - Fix unit test: use platform-python, py.test-3, no flake8 (RHBZ#1576803)
  - Update of ValidShells (RHBZ#1633698)
  - Remove Python2 paths from TagsCheck.py (RHBZ#1633698)
  - Enable bash-competion scripts (RHBZ#1577890)


author: Liming Sun <lsun@mellanox.com> - 2.0.1-1
changelog:
  - Rename bfrshim to rshim
  - Remove rshim.spec since it's auto-generated from rshim.spec.in
  - Fix warnings reported by coverity
  - Add rhel/rshim.spec.in for fedora
  - Move rshim to sbin and move man page to man8


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.4-4
changelog:
  - Expose gating.yaml file in order to enable manual CI gating for rshim
    in RHEL-8.4, by bumping release and doing a Brew build.
  - Partially resolves: rhbz#1912248


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5.
  - Modify rshim.spec accordingly.
  - Resolves: rhbz#1950425


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-2
changelog:
  - Add sysconfig/rshim file and update rshim.service to source it.
  - jbastian made the first cut of this patch, which needed to be
    modified due to the update to 2.0.5. And I chose to go with
    %autosetup to handle Patch0, instead of sticking with %setup.
  - Resolves: rhbz#1946349


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-1
changelog:
  RHEL 8.2.0 ERRATUM
  - rebased to 8.1911.0 upstream version, removed, previously
    upstreamed patches
    resolves: rhbz#1740683
    resolves: rhbz#1659383
    resolves: rhbz#1746876
    resolves: rhbz#1676559
    resolves: rhbz#1692072
    resolves: rhbz#1692073
    resolves: rhbz#1692074
    resolves: rhbz#1699242
    resolves: rhbz#1738213
    resolves: rhbz#1744691
    resolves: rhbz#1755218
    resolves: rhbz#1768321
    resolves: rhbz#1768324
  - added patch fixing imfile stefiles naming
    resolves: rhbz#1763757


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-3
changelog:
  RHEL 8.2.0 ERRATUM
  - added patch reverting rejecting expired certs by default
    resolves: rhbz#1782353
  - added patch silencing false errors on config.enabled statement
    resolves: rhbz#1659383


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-5
changelog:
  RHEL 8.3.0 ERRATUM
  - added qpid-proton as another source and enabled omamqp1 module
    in a separate sub-package with it statically linked
    resolves: rhbz#1713427
  - extended config.enabled patch to cover rest of the cases
    resolves: rhbz#1659383
  - added patch making json serialization thread-safe
    resolves: rhbz#1789675
  - added another patch for imfile state-files id
    resolves: rhbz#1793569
  - fixed typo in commend-out part of default rsyslog.conf


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-6
changelog:
  RHEL 8.3.0 ERRATUM
  - added patch preventing imfile crash when selinux blocks symlink
    access
    resolves: rhbz#1843994
  - fixed config-enabled patch
    resolves: rhbz#1659383


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-2
changelog:
  RHEL 8.5.0 ERRATUM
  - rebase to 8.2102.0
    resolves: rhbz#1932795
  - Enable openssl
    resolves: rhbz#1891458
  - EKU check for client cert on server side
    resolves: rhbz#1783348
  - Use GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1880434
  - Use librelp with openssl enabled
    resolves: rhbz#1795607
  - Close dir when fsync=on
    resolves: rhbz#1960536


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-3
changelog:
  - Priority field must have valid length
    resolves: rhbz#1866877
  - Allocate more memory on too large groups
    resolves: rhbz#1944718


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-5
changelog:
  - Do not exit when user/group can not be found
    resolves: rhbz#1984489
  - Remove abortOnIDResolution fail


author: John Kacur <jkacur@redhat.com> - 1.9-1
changelog:
  - Update to upstream rt-tests-1.9
  - Add BuildRequires for gcc
  - use set_build_flags
  - use macros _bindir, _mandir and _prefix where possible
  - remove unnecessary clean section, simply build and install sections
  Resolves: rhbz#1894615


author: John Kacur <jkacur@redhat.com> - 1.9-2
changelog:
  - Don't compress manpages by default in the makefile
  - Add a menu to determine_maximum_mpps.sh
  - Add determine_maximum_mmps.8 manpage
  - Remove get_cpuinfo_mhz.sh and old Makefile in queuelat dir
  Resolves: rhbz#1906104


author: John Kacur <jkacur@redhat.com> - 1.10-2
changelog:
  - print the version number in oslat everytime.
  - use cpuset size as upper bound in loop in oslat
  - allocate memory for cpu_set in oslat
  Resolves: rhbz#1926578


author: Clark Williams <williams@redhat.com> - 0.41-1
changelog:
  - added Stefan Agner's patch to fix calculating time difference
    when delta is bigger than 2147 seconds


author: Clark Williams <williams@redhat.com> - 0.44-1
changelog:
  - fix to specfile (renamed smidetect to hwlatdetect)
  - added code to hwlatdetect allow setting window and width properly


author: Clark Williams <williams@redhat.com> - 0.45-1
changelog:
  - bugfix from Daniel Gollub <dgollub@suse.de> (fix cyclictest segfault)
  - cyclictest format change from Sven-Thorsten Dietrich <sdietrich@suse.de>
  - added help target to Makefile


author: Clark Williams <williams@redhat.com> - 0.47-1
changelog:
  - patch from GeunSik Lim <leemgs1@gmail.com> to reorder options for readability
  - patch from GeunSik Lim <leemgs1@gmail.com> to add --policy option
  - patch from GeunSik Lim <leemgs1@gmail.com> to clarify -h option usage
  - modified --policy to take scheduler policy name instead of integers


author: Clark Williams <williams@redhat.com> - 0.50-1
changelog:
  - patch to cyclictest from Sebastian Andrzej Siewior <bigeasy@linutronix.de>
    to process options before checking for root user
  - patch to cyclictest from Sebastian Andrzej Siewior <bigeasy@linutronix.de>
    to exit with proper error code on exit
  - added scripts/do-git-push script
  - added push target to Makefile
  - rewrite of hwlatdetect script to handle old smi_detector module


author: Clark Williams <williams@redhat.com> - 0.51-1
changelog:
  - two manpage fixes from Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
  - added -M option from Arnaldo Carvahlo de Melo <acme@redhat.com>
    (for use on low-bandwidth connections, defer's update until new max hit)


author: Clark Williams <williams@redhat.com> - 0.54-1
changelog:
  - patches from John Kacur <jkacur@redhat.com>
    - fix source style issues in pi_stress
    - add a DEBUG option to the Makefile
    - use CFLAGS for C compiler options
    - label targets as PHONY if not generating actual file
  - patch to remove rt-tests.spec from .PHONY in Makefile


author: Clark Williams <williams@redhat.com> - 0.55-1
changelog:
  - pi_stress: cosmetic newline added
  - fixes from John Kacur <jkacur@redhat.com>
    - pi_stress: Remove racy state variables that cause watchdog to trigger
    - pi_stress: Check whether quiet is set, before taking shutdown_mtx
    - pi_stress: Use a pthread_mutex_t for the global variable shutdown


author: Clark Williams <williams@redhat.com> - 0.57-1
changelog:
  - John Kacur <jkacur@redhat.com> folded in Carsten Emde's tests
      - ptsematest
      - sigwaittest
      - svsematest
      - sendme
  - Carsten Emde <carsten.emde@osadl.org> created a utility library
    moving functions from cyclictest into src/lib/rt-utils.c
  - Makefile cleanups from jkacur


author: Clark Williams <williams@redhat.com> - 0.58-1
changelog:
  - merged jkacur's portable getcpu() code
  - fixed inadvertent conversion of some source to DOS text files


author: Clark Williams <williams@redhat.com> - 0.59-1
changelog:
  - deleted classic_pi
  - David Sommerseth <davids@redhat.com>:
    - added help text for -M (refresh-on-max) option for cyclictest
    - fixed parsing of --mlockall in signaltest
  - Carsten Emde <C.Emde@osadl.org> provided a better explaination
    for using the kernel module with the backfire program
  - John Kacur <jkacur@redhat.com> cleaned up the trailing comments
    on the guard macros in src/lib/rt-utils.h


author: Clark Williams <williams@redhat.com> - 0.60-1
changelog:
  - John Kacur <jkacur@redhat.com>:
    - added pip test (process based priority inheritance)
    - refactored some error routines into the common library
    - added 'make tags' option to Makefile
  - Michael Olbrich <m.olbrich@pengutronix.de> added an unbuffered
    output option to cyclictest (-u/--unbuffered)


author: Clark Williams <williams@redhat.com> - 0.62-1
changelog:
  - added NUMA option
  - patch from Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
    to clarify source copyrights
  - moved hwlatdetect to python site-library


author: Clark Williams <williams@redhat.com> - 0.64-1
changelog:
  - from John Kacur <jkacur@redhat.com>
    - automatic dependency generation
    - style cleanups
    - libnuma code cleanups
    - add copyright to rt_numa.h


author: Clark Williams <williams@redhat.com> - 0.67-1
changelog:
  - modified specfile to add hackbench
  - modified internal ftrace logic for correct tracing
  - Changed rpm %description field to be more descriptive (BZ# 572323)
  - from Carsten Emde <c.emde@osadl.org>
    - added smp option to svsematest
    - fixed policy display in cyclictest
  - from John Kacur <jkacur@redhat.com>
    - changed default scheduling policy to SCHED_FIFO
    - fixed spelling mistake on cyclictest man page
    - use symbolic names for scheduling policy
    - reverted commit 582be2a52c43801a10d318de7491f1cc7243d5cf to
      deal with bug in priority distribution
  - from Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
    - renamed pip to pip_stress
    - eliminated use of temp files in dependency generation
    - install backfire.c module source in /usr/src/backfire
  - from David Sommerseth <davids@redhat.com>
    - added new-and-improved hackbench to rt-tests


author: Clark Williams <williams@redhat.com> - 0.69-1
changelog:
  - fix bus error in cyclictest on NUMA systems with more than 16 cores
  - reset default cyclictest policy to SCHED_OTHER
  - from Carsten Emde <C.Emde@osadl.org>
    - add pmqest program for testing posix message queue performance
    - misc doc fixes


author: Clark Williams <williams@redhat.com> - 0.70-1
changelog:
  - from Olaf Hering <olaf@aepfle.de>
    - skip python dependency during install if python not available


author: Clark Williams <williams@redhat.com> - 0.72-1
changelog:
  - changed 'diff' variable in timerthread() routine to be unsigned
    64-bit to avoid overflow issues in debugging
  - included <stdint.h> and changed all 'long long' declarations to
    use uint64_t and int64_t


author: Clark Williams <williams@redhat.com> - 0.73-1
changelog:
  - fixed signal handling in hackbench (avoid thousands of zombies)
  - from Geunsik Lim <geunsik.lim@samsung.com>
    - fix incorrect wakeup interface in cyclictest
  - from Wolfram Sang <w.sang@pengutronix.de>
    - Simplify Makefile using -D option to install
  - from Carsten Emde <C.Emde@osadl.org>
    - add histogram summary column option (-H) to cyclictest
  - from Daniel Sangorrin <daniel.sangorrin@gmail.com>
    - fix sched_setaffinity type error when building with UCLIB
  - from Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
    - install backfire's Makefile
    - modernize backfire's Makefile


author: Clark Williams <williams@redhat.com> - 0.74-1
changelog:
  - changes to deal with 3.0 kernel
  - fixed buildrequires in specfile for Python
  - fixed spelling error in printf in cyclictest
  - from John Kacur <jkacur@redhat.com>
    - Make the function header style consistent with the rest of cyclictest.
    - Spelling clean-ups
  - from Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
    - fix possible buffer overflow in string handling


author: Clark Williams <williams@redhat.com> - 0.75-1
changelog:
  - added utility routines for mounting debugfs and event/tracing manipulation
  - from Steven Rostedt <srostedt@redhat.com>:
    - allow events for all tracers
    - Have -I and -P together also be -B
    - do not touch tracing_thresh
    - only check file descriptor in tracemark() function
    - use interval on first loop instead of 1 second
    - allow tracemark() to take variable args


author: Clark Williams <williams@redhat.com> - 0.76-1
changelog:
  - only turn on /proc/sys/kernel/ftrace_enabled for a tracer that
    needs it
  - make sure to set current_tracer to function for -f switch


author: Clark Williams <williams@redhat.com> - 0.84-1
changelog:
  - [cyclictest] added -Q/--priospread option to
  - from Markus Kohlhase <mail@markus-kohlhase.de>
    - [docs] added description from osadl.org
  - from Darren Hart <dvhart@linux.intel.com>
    - Makefile: Support user supplied CFLAGS and LDFLAGS
  - from Steven Rostedt <rostedt@goodmis.org>
    - rt-tests: Update rt-migrate-test to use ftrace infrastructure
  - from John Kacur <jkacur@redhat.com>
    - .gitignore: differentiate between program names and directories
    - pi_stress: Check the status of sched_getaffinity
    - Makefile: Introduce a static library
    - Move info, warn, and fatal functions to error.[ch]
    - install: Fix failed to create symbolic link hwlatdetect file exists
    - cyclictest: Make cyclictest fail if it cannot run with requested priority
  - from Frank Rowand <frank.rowand@am.sony.com>
    - cyclictest: segfault with '-a'
    - cyclictest: avoid unneeded warning
    - cyclictest: warn of interaction between '-a', '--smp', and '--numa'
    - Makefile: get machinetype from compiler instead of uname
    - cyclictest: incorrect first latency value for --verbose option
    - cyclictest: printf format compile warning


author: Clark Williams <williams@redhat.com> - 0.85-1
changelog:
  - [cyclictest] add tracemark function back to breaktrace logic
  - from Frank Rowand <frank.rowand@am.sony.com>:
    - [cyclictest] report large measured clock latency
    - [cyclictest] cleanup getopt_long() parameters
  - from John Kacur <jkacur@redhat.com>:
    - [Makefile] add CPPFLAGS to pattern rule for dependencies
    - [gitignore] exclude patches and .a archives
  - from Uwe Kleine-König <u.kleine-koenig@pengutronix.de>:
    - Makefile: separate CFLAGS and CPPFLAGS
    - have printf use %s format for strings
  - from Bhavesh Davda <bhavesh@vmware.com>:
    - cyclictest: histogram overflow instance tracking
    - cyclictest: whitespace cleanup


author: Clark Williams <williams@redhat.com> - 0.86-1
changelog:
  - cyclictest: allow break threshold without doing any tracing
  - cyclictest: add named fifo for statistics
  - from John Kacur <jkacur@redhat.com>:
    - cyclictest: Align option fixes
    - Makefile: Don't tag files in dir BUILD from rpm builds
    - Makefile: Add BUILDROOT and SPECS to the dirs to remove for distclean
    - Makefile: Add tmp dir to distclean and "make release" call distclean
    - Makefile: Don't tag tmp files created when making a release
  - from Nicholas Mc Guire <der.herr@hofr.at>:
    - cyclictest: add align thread wakeup times option
  - cyclictest: modify option handling to use enumerated types
  - from Sebastian Andrzej Siewior <bigeasy@linutronix.de>:
    - hackbench: init child's struct before using it
  - from Jim Somerville <Jim.Somerville@windriver.com>:
    - cyclictest: finish removal of 1 second first loops
  - from Frank Rowand <frank.rowand@am.sony.com>:
    - rt-tests: NUMA optional for make rpm
    - cyclictest: white space cleanup


author: Clark Williams <williams@redhat.com> - 0.87-1
changelog:
  - From Aaron Fabbri <ajfabbri@gmail.com>:
    - cyclictest: CPU affinity now takes arbitrary set of cpus


author: Clark Williams <williams@redhat.com> - 0.88-1
changelog:
  - From Uwe Kleine-König <u.kleine-koenig@pengutronix.de>:
    - cyclictest: Fix tracemark output when the latency threshold is hit on ARM
  - From Gary S. Robertson <gary.robertson@linaro.org>:
    - cyclictest: Restore CPU affinity function for non-NUMA builds
    - cyclictest: Don't offer --numa option when unavailable


author: Clark Williams <williams@redhat.com> - 0.89-1
changelog:
  - clean up debugging comments and printfs from last release
  - ran hwlatdetect.py through 2to3, works for both python2 and 3


author: Clark Williams <williams@redhat.com> - 0.90-1
changelog:
  - pip_stress: parameterize usleep value to work-around platform issues
  - From Daniel Wagner <daniel.wagner@bmw-carit.de>:
    - pi_stress: Store schedule attributes per thread
    - rt-utils: Add gettid()
    - rt-utils: Add helper to parse/print scheduling policies
    - rt-sched: Add sched_setattr/sched_getattr API
    - pi_stress: Use error.h for logging and debugging
    - error: Add debug() function
    - pi_stress: Remove unused TIMER_SIGNAL definition
    - rt-tests.h: Remove unused header file
    - hackbench: Don't re-assign context for each fd
  - From Joakim Hernberg <jbh@alchemy.lu>:
    - cyclictest: make affinity option only use number of online cpus
  - From John Kacur <jkacur@redhat.com>:
    - cyclictest: Add long option --laptop to preserve battery power
    - cyclictest: Fix help for long options only
    - cyclictest: Change the output from function sighand() to stderr
    - cyclictest: Always print an err message if write of 0 to cpu-dma_latency fails
    - rt_numa.h: Suppress discards 'const' qualifier warning
    - lib: Rework err_msg_n to output strerror after message
  - From Alexey Brodkin <Alexey.Brodkin@synopsys.com>:
    - Makefile: allow building selected tests with non-NPTL toolchain


author: John Kacur <jkacur@redhat.com> - 0.97-1
changelog:
  - Changes from v0.93 to v0.97
  Clark Williams (9):
    hwlatdetect: initial cut at tracking the amount of SMIs that occurred
      during a run
    rt-migrate-test: updated to latest code from rostedt
    Makefile: add target to create OBJDIR before use
    specfile: add signaltest manpage to files section and remove trailing
      whitespace in changelog
    Makefile: have distclean remove .asc file for tarball
    Makefile: fixed dropped quote in help target text
    hwlatdetect: handle hwlat_detector being builtin rather than module
    hwlatdetect: modify to handle python3 prints
    hwlatdetect: make reading sample date work with python2 and python3
  Daniel Bristot de Oliveira (2):
    cyclictest: SMI count/detection via MSR/SMI counter
    cyclictest: Add --smi description on cyclictest man page
  Darren Hart (2):
    rt-tests: Allow for user-specified PYLIB
    rt-tests: Break out install_hwlatdetect
  Henrik Austad (10):
    Add CROSS_COMPILE-switch to CC and AR
    Add syscall-number for sched_(gs)etattr() for tile
    Add a rebuild-switch to Makefile
    Makefile: add librttest to rt-migrate-test
    android: adjust target for android
    cyclictest: move redefine of CPUSET back to uclib
    Android: clean up the bypass ifdeffery
    Android: rename arch from bionic to android
    Android: Expand match for android in ostype
    rt-sched.h: do not unconditionally define syscall-numbers
  John Kacur (26):
    Fix VERSION in rt-migrate-test
    numa_on_and_available: Remove from main in cyclictest
    Version bump to v0.94
    Explicitly separate VPATH paths with a colon
    build: Generate .o, .a, and .d files in bld dir
    signaltest: call process_options before calling check_privs
    signaltest: Check the status of pthread_create
    rt-utils: Add John Kacur to the copyright
    rt-utils: Fix some checkpatch errors in rt-utils.c
    signaltest: Add a man page to signaltest
    Makefile: Document certain compiling options
    Makefile: Only call cc -dumpmachine once in the makefile
    Bionic: Move android functionality into it's own arch Makefile
    maintainence: VERSION bump and Change-log update
    cyclictest: Clean-ups in timerthread before working on it
    Makefile: OBJDIR should be an order-only-prerequisite
    Makefile: Move TARGETS back to a more logical place in the Makefile
    cyclictest: Add a feature to record spikes
    cyclictest: fix #ifdef broken by NO_PTHREAD_SETAFFINITY
    Makefile: Version bump to v0.96
    Remove rt-tests.spec-in
    gitattributes: add doc, remove rt.spec-in
    Makefile: Remove anything to do with rpms, specs etc
    Revert changes to rt-migrate-test for exit(1)
    cyclictest: Make the tracemark option imply notrace
    rt-tests: Makefile: Bump version number to 0.97
  Josh Cartwright (8):
    rt-tests: workaround poor gzip implementations
    hackbench: cleanup error handling in create_worker
    cyclictest: consistently make all functions 'static'
    cyclictest: use correct type when allocating cpu bitmask size
    cyclictest: drop impossible use_fifo conditional
    cyclictest: fail if use_fifo && thread creation failed
    error: mark fatal, err_exit, err_quit as being noreturn
    cyclictest: add option for dumping the histogram in a file
  Khem Raj (1):
    Makefile: Set CC/AR variable only if it doesn't have a value
  Luiz Capitulino (5):
    don't use exit(-1) for failures
    cyclictest: move tracemark_fd handling to its own function
    cyclictest: tracing(): check for notrace
    cyclictest: move debugfs init code to its own function
    cyclictest: add --tracemark option
  Uwe Kleine-König (5):
    backfire: remove unused header file
    remove several unused Makefiles
    rt-migrate-test: remove space before \n
    drop compiling without NPTL support
    Fix some trivial typos found by codespell(1)
  - Resolves: rhbz#1283264

   * Wed Aug 12 2015 Clark Williams <williams@redhat.com> - 0.93-1
  John Kacur (6):
    makefile: Create an rt-tests.tar file using git-archiv
    makefile: Change VERSION_STRING to VERSIO
    Add .tar files to .gitignor
    Create a .gitattribute file to specify what files git-archive should ignore
    pi_stress: Fix possible exit on error without releasing mutex
    pip_stress: Fix warning: unused variable ‘c’
  Alexander Stein (1):
    cyclictest: Fix long priority help text option
  Clark Williams (3):
    hwlatdetect: added --watch option to watch output in realtime
    doc: fix VERSION in release-checklist.tx
    makefile: fixed release targ

   * Tue Jun 09 2015 John Kacur <jkacur@redhat.com> - 0.92-1
  Anna-Maria Gleixner (2):
    cyclictest: Convert the offset of the alignment option to microseconds
    cyclictest: Align measurement threads to the next full second
    cyclictest: Ensure that next wakeup time is never in the past
  Daniel Wagner (1):
    pi_stress: Clear affinity for DEADLINE tasks
  John Kacur (3):
    Fix minor grammar mistake in the help output
    Allow building with -DHAVE_PARSE_CPUSTRING_ALL
    Add a MAINTAINERS file
  Michael Olbrich (2):
    Makefile: pi_stress need librttest.a so it should depend on it
    Makefile: cleanup linking to librttest.a
  Sebastian Andrzej Siewior (1):
    cyclictest: consider the 4 as the major version

   * Tue Feb 17 2015 Clark Williams <williams@redhat.com> - 0.91-1
  - From Boris Egorov <egorov@linux.com>
    - rt-migrate-test: exit early if nr_runs is non-positive
    - rt-migrate-test: use variables instead of macros
  - From Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
    - pi_stress: remove timestamp of compilation from version output
  - rt-migrate-test: make sure input parameters are converted to correct units
  - rt-migrate-test: sanity check --prio value


author: John Kacur <jkacur@redhat.com> - 0.97-2
changelog:
  - Change spec file to compile with HAVE_PARSE_CPUSTRING_ALL=1
  	- This makes numa_parse_cpustring_all() available which is needed for
  		running cyclictest on isolated cpus.
  - Resolves: rhbz#1330468


author: John Kacur <jkacur@redhat.com> - 1.0-1
changelog:
  - Upgrade to 1.0
  Clark Williams (1):
    cyclictest: stop any tracing after hitting a breaktrace threshold
  John Kacur (8):
    rt-tests: Makefile: Assume numa_parse_cpustring_all available
    rt-tests: Add man page for rt-migrate-test
    rt-tests: Update the cyclictest man page
    rt-tests: Add missing option to hwlatdetect man page
    rt-tests: Housekeeping fix some spelling errors.
    rt-tests: hwlat.txt: smidetect renamed to hwlatdetect
    rt-tests: Remove doc/release-checklist.txt
    rt-tests: Makefile - bump version to 1.0
  - Add patch to install rt-migrate-test.8-man-page
  Resolves: rhbz#1283264
  - The latest build also includes fixes for undocumented options in cyclictest and hwlatdetect, as well as many more documentation fixes.
  Resolves: rhbz#1263718
  - Also documenting here that the new feature cyclictest: SMI count/detection via MSR/SMI counter was added in v0.97
  Resolves: rhbz#1314869


author: John Kacur <jkacur@redhat.com> - 1.0-3
changelog:
  - Install cyclictest with cap_sys_rawio to access msr and cpuid registers
  - Fixed url in Source0
  Resolves: rhbz#1346771


author: John Kacur <jkacur@redhat.com> - 1.0.8
changelog:
  - cyclicdeadline: Fix minor spelling mistake
  - cyclictest: Correct short option 's'
  Resolves: rhbz1434825


author: John Kacur <jkacur@redhat.com> - 1.0.10
changelog:
  - hwlatdetect: modify hwlatdetector.py to use the ftrace hwlatdetector
  - hwlatdetect: removed smi_detector support
  Resolves: rhbz1365961


author: John Kacur <jkacur@redhat.com> - 1.3-1
changelog:
  - New build
  - Add test queuelat
  - Adds changes for python3 in hwlatdetect
  Resolves: rhbz#1543030
  Resolves: rhbz#1559520


author: John Kacur <jkacur@redhat.com> - 1.3-6
changelog:
  - rt-tests-pi_stress-remove-unused-report-options.patch
  - rt-tests-pip_stress-Add-an-initial-man-page-for-pip_stress.patch
  - add-h-option-to-queuelat.patch
  - Add-queuelat-manpage.patch
  - Modify makefile for queuelat.8 and pip_stress.8
  Resolves: rhbz#1614783


author: John Kacur <jkacur@redhat.com> - 1.3-16
changelog:
  - cyclictest-Make-sure-affinity-is-respected-when-numa.patch
  - cyclictest-Fix-compiler-warning-about-srncpy-output.patch
  - cyclictest-fix_with_expected_identifier_in_latest.patch
  Resolves: rhbz#1596857


author: John Kacur <jkacur@redhat.com> - 1.5-2
changelog:
  - Add bash as a Require in the spec file, since the suite contains some scripts
  Resolves: rhbz#1744983


author: John Kacur <jkacur@redhat.com> - 1.5-13
changelog:
  - Improved version of getting a snapshot of cyclictest without interrupting
  - Fixes some problems uncovered by covscan
  Resolves: rhbz#1469185


author: John Kacur <jkacur@redhat.com> - 1.5-17
changelog:
  - Fix more quoting problems to prevent work splitting
  - get_cpuinfo_mhz.sh should print one value
  Resolves: rhbz#1719493


author: John Kacur <jkacur@redhat.com> - 1.5-18
changelog:
  - Add a man page for cyclicdeadline
  - Sync cyclictest man page with the help option
  - Sync pi_stress man page with the help option
  - Add pi_stress short options to usage message
  - Add -S --smp to svsematest man page
  - Update ptsematest man page and add -h option
  - queuelat man page and help fixes
  - display svsematest help without an error message
  Resolves: rhbz#1766656


author: John Kacur <jkacur@redhat.com> - 1.8-5
changelog:
  - get_cyclictest_snapshot: print a warning message if there are no
    running cyclictest instances
  Resolves: rhbz#1826783


author: Stephen Gallagher <sgallagh@redhat.com> - 0.11-15
changelog:
  - Temporarily disable -Werror=format-security to unbreak the build
  - Build with verbose command-line visible in the logs
  - Resolves: rhbz#1424270


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-99
changelog:
  - Additional OpenSSL 1.1.1 fixes.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3-maint.patch
    * ruby-2.6.0-config-support-include-directive.patch
    * ruby-2.6.0-use-larger-keys-for-SSL-tests.patch
    Related: rhbz#1616213


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-100
changelog:
  - Properly harden package using -fstack-protector-strong.
    * ruby-2.6.0-configure-fstack-protector-strong.patch
    Resolves: rhbz#1624168


author: Vít Ondruch <vondruch@redhat.com> - 2.5.5-104
changelog:
  - Update to Ruby 2.5.5.
    * Remove Patch25: ruby-2.6.0-Update-for-tzdata-2018f.patch; subsumed
    * Remove Patch11: ruby-2.6.0-Try-to-update-cert.patch; subsumed
    * Remove Patch19: ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with
        -TLS-1.3.patch; subsumed
    Resolves: rhbz#1688758
  - Don't ship .stp files when SystemTap support is disabled.
    Related: rhbz#1657915
  - Fix CovScan issues.
    Resolves: rhbz#1628592


author: Jun Aruga <jaruga@redhat.com> - 2.5.5-105
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1688758
  - Fix rdoc gzipped javascript pages are not the same across multilib.
    Resolves: rhbz#1719647


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-107
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1952626
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1955010


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 2.5.9-107.0.1
changelog:
  - Fix FTBFS due to glibc 2.31.9000 implementing lchmod(2), compatible with glibc2.28 also
    * Patch: ruby-2.8.0-Brace-the-fact-that-lchmod-can-EOPNOTSUPP.patch
    * Patch: ruby-2.8.0-Moved-not-implemented-method-tests.patch
  - Avoid possible timeout errors in TestBugReporter#test_bug_reporter_add.
    * Patch: ruby-2.7.1-Timeout-the-test_bug_reporter_add-witout-raising-err.patch


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-107
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1757844
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1950308


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-108
changelog:
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-105
changelog:
  - Update to Ruby 2.6.3 by merging Fedora master branch (commit: 1cc2a49)
    * Properly generate "ruby(rubygems)" versioned dependencies.
    * Extract composition of dependecy strings into helper.
    * Loosen RDoc dependency.
    * Upstream fix adding -C flag instead of changing directory for gem build.
    * Remove obsolete Group tag
    * Fix ".include =" support in openssl.cnf.
    * Link IRB back to StdLib.
    * Link IRB files instead of directories.
    * Exclude irb.rb from ruby-libs.
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-106
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1672575


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1757846
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1950307
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: CVE-2019-3881


author: Jun Aruga <jaruga@redhat.com> - 2.6.9-108
changelog:
  - Upgrade to Ruby 2.6.9.
  - Skip JIT tests in RHEL 8.
  - Fix the issues required to start the "make test-bundler" itself.
  - Fix Bundler dependency confusion.
    Resolves: CVE-2020-36327


author: Jun Aruga <jaruga@redhat.com> - 2.7.1-132
changelog:
  - Update to Ruby 2.7.1 by merging Fedora master branch (commit: 2981648)
    * Skip unstable tests on s390x.
    * Skip JIT tests in RHEL 8.
    Resolves: rhbz#1817135


author: Vít Ondruch <vondruch@redhat.com> - 2.7.1-133
changelog:
  - Fix `require` behavior allowing to load libraries multiple times.
    Resolves: rhbz#1842989
  - Add ruby-default-gems dependency on irb.


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1951999
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1952000


author: Jun Aruga <jaruga@redhat.com> - 2.7.4-137
changelog:
  - Upgrade to Ruby 2.7.4.
  - Fix command injection vulnerability in RDoc.
    Resolves: rhbz#1986768
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: rhbz#1986812
  - Fix StartTLS stripping vulnerability in Net::IMAP.
    Resolves: rhbz#1986813
  - Upgrade to Bundler 2.2.24.
    Resolves: CVE-2020-36327


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947938
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1944227


author: Jarek Prokop <jprokop@redhat.com> - 3.0.1-138
changelog:
  - Upgrade to Ruby 3.0.1 by merging Fedora rawhide branch (commit: 6b2ff68).
    * Add missing `rubygem-` prefix for bundled provide of 'connection_pool'.
    * Pass ldflags to gem install via CONFIGURE_ARGS
    * Remove IRB dependency from rubygem-rdoc.
    * Fix flaky excon test suite.
    * Properly support DWARF5 debug information.
        Related: rhbz#1920533
    * Bundle OpenSSL into StdLib.
    * Fix SEGFAULT in rubygem-shoulda-matchers test suite.
    * Provide `gem.build_complete` file for binary gems.
    * Re-enable test suite.
    * ruby-default-gems have to depend on rubygem(io-console) due to reline.
    * Fix SEGFAULT preventing rubygem-unicode to build on armv7hl.
    * Add support for reworked RubyGems plugins.
    * Use proper path for plugin wrappers.
    * Extract RSS and REXML into separate subpackages, because they were moved from
       default gems to bundled gems.
    * Drop Net::Telnet and XMLRPC packages, because they were dropped from Ruby.
    Resolves: rhbz#1938942
  - Fix FTBFS due to an incompatible load directive.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-139
changelog:
  - Upgrade to Ruby 3.0.2.
    Related: rhbz#1938942
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
  - Fix StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
  - Pass ldflags to gem install via CONFIGURE_ARGS.
    The same comment on the changelog 3.0.1-138 was wrong.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-140
changelog:
  - Fix rubygem-irb upgrade not working due to directory -> symlink conversion.
    Resolves: rhbz#2010403


author: Jun Aruga <jaruga@redhat.com> - 0.5.2-1
changelog:
  - New upstream release 0.5.2 by merging Fedora master branch (commit: cc15309)
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-1
changelog:
  - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135


author: lihaipeng <lihaipeng@openanolis.org> - 1.0.0-2.0.1
changelog:
  - Changed the way how/when parameters are interpret
  - Reference https://github.com/ged/ruby-pg/commit/73cd5e158ba4af73243c22f8918b1754256db17b


author: Jun Aruga <jaruga@redhat.com> - 1.1.4-1
changelog:
  - Update to pg 1.1.4 by merging Fedora master branch (commit: 397796e)
    * BuildRequires: s/postgresql-devel/libpq-devel/
    * Add marking lines at the start and end of the setup.log
    Resolves: rhbz#1672575


author: Dan Walsh <dwalsh@redhat.name> - 2:1.0.0-46.dev.gitb4e2ecb
changelog:
  - Add patch https://github.com/opencontainers/runc/pull/1807 to allow
  - runc and podman to work with sd_notify


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-55.rc5.dev.git2abd837
changelog:
  - Resolves: #1665770 - rootfs: umount all procfs and sysfs with --no-pivot
  - Resolves: CVE-2019-5736


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-68.rc92
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-73.rc95
changelog:
  - fix podman run --pid=host command causes OCI permission error
  - rc95 fixes CVE-2021-30465
  - Related: #2001445


author: Josh Stone <jistone@redhat.com> - 1.51.0-1
changelog:
  - Update to 1.51.0. Update to 1.51.0. Includes security fixes for
    CVE-2021-28875 and CVE-2021-28877.


author: Josh Stone <jistone@redhat.com> - 1.52.1-1
changelog:
  - Update to 1.52.1. Includes security fixes for CVE-2020-36323,
    CVE-2021-28876, CVE-2021-28878, CVE-2021-28879, and CVE-2021-31162.


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.27-15
changelog:
  - 1554032 - saned doesn't have permissions to write on usb port
  - updated README.Fedora - mention epson official drivers


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.0.27-20
changelog:
  - 1852468, 1852467, 1852466, 1852465 - prevent buffer overflow in esci2_img
  - 1852668, 1852667, 1852666, 1852665 - disable autodiscovery for epsonds backend


author: Matej Habrnal <mhabrnal@redhat.com> 0.21-1
changelog:
  - New upstream version
    - Introduce 'serial' field in uReport
    - normalization: actualize list of functions


author: Jakub Filak <jakub@thefilaks.net> 0.22-1
changelog:
  - New upstream version
    - Added support fof JavaScript (V8) stack traces
    - Most parts of the in-hook core unwinder callable under unprivileged user
    - GDB core unwinder limits number of unwound frames
    - Fixed a pair of compile warnings - Chris Redmon <credmonster@gmail.com>


author: Matej Habrnal <mhabrnal@redhat.com> 0.23-1
changelog:
  - New upstream version
    - Allow rpm to be optional at build time
    - Do not use deprecated fedorahosted.org


author: Julius Milan <jmilan@redhat.com> 0.24-1
changelog:
  - New upstream version
    - Allow to report unpackaged problems
    - apidoc: generate html docs using doxygen
    - Fix parsing of subset of arm kernel oopses


author: Martin Kutlak <mkutlak@redhat.com> 0.25-1
changelog:
  - New upstream version
   - Normalization: actualize list of functions
   - Fix some compilation warnings
   - Allow to build python3 for rhel8
   - Makefile: add make release-* subcommands
   - Elfutils: Add missing stubs from earlier commit


author: Matej Habrnal <mhabrnal@redhat.com> 0.26-1
changelog:
  - spec: fix Allow python2 to be optional at build time
  - Allow python2 to be optional at build time
  - normalization: actualize list of functions
  - Append Python interpreter as related package
  - makefile: create .tar.xz with make release


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.1-6
changelog:
  - match qdevice-sync_timeout against wd-timeout
  - sync startup/shutdown via pacemakerd-api

    Resolves: rhbz#1703128
    Resolves: rhbz#1743726


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.1-7
changelog:
  - conflict with pacemaker-libs < 2.0.4-5 instead of requiring
    a minimum pacemaker version

    Resolves: rhbz#1861713


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-1
changelog:
  - rebase to upstream v1.4.2
  - make sbd default to do pacemakerd-api handshake
  - conflict with pacemaker-libs < 2.0.5-4 to assure pacemaker
    is defaulting to pacemakerd-api handshake

    Resolves: rhbz#1903730
    Resolves: rhbz#1873135


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-3
changelog:
  - change the default for SBD_WATCHDOG_TIMEOUT to 10s
    s390(x) stays at 15s as before

    Resolves: rhbz#1922143


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - reverted watchdog_timeout_default to 5s
    (slipped in via an unreleased change on 8.4.0 branch)

    Resolves: rhbz#1980797


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-10
changelog:
  - Fix docdir patch (patch Makefile.am, not Makefile.in)
  - Use correct short name for Eclipse Public License 1.0
  - Use %license
  - Add explicit dependencies for libraries in Makefile.am (fixes FTBFS)
    Resolves: #1606302


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions
    Resolves: #1776670


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.9-24
changelog:
  - Fix important coverity issues
    Resolves: #1989603
  - Fix incorrect use of temporary paths
    Resolves: #1989605


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.5.0-1
changelog:
  - Update to latest upstream version
  - Change license to Eclipse Public License 1.0
  - Use %license
  - Fix URL


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-10
changelog:
  - Fix null pointer (DoS) vulnerability via POST request to /cimom (CVE-2018-6644)
    (patch by Adam Majer)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-16
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Remove %defattr
    Resolves: #1638007


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Fix license tag
    Resolves: #1638015


author: Michael Simacek <msimacek@redhat.com> - 2.10.6-7
changelog:
  - Port from deprecated add_maven_depmap to mvn_install
  - Remove unused BR felix-framework
  - Fix unowned directory


author: Michael Simacek <msimacek@redhat.com> - 2.10.6-11
changelog:
  - Correct license tag to include CC0 and Public Domain
  - Repack tarball to remove possibly proprietary binaries
  - Use %license macro


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.10.6-13
changelog:
  - Stop scaladoc from trying to bundle non-existent resources
  - Temporarly disable docs generation during build


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-2
changelog:
  - Provide manual page for scap-security-guide
  - Remove percent sign from spec's changelog to silence rpmlint warning
  - Convert RHEL6 'Restrict Root Logins' section's rules to Fedora
  - Convert RHEL6 'Set Password Expiration Parameter' rules to Fedora
  - Introduce 'Account and Access Control' section
  - Convert RHEL6 'Verify Proper Storage and Existence of Password Hashes' section's
    rules to Fedora
  - Set proper name of the build directory in the spec's setup macro.
  - Replace hard-coded paths with macros. Preserve attributes when copying files.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-3
changelog:
  - Add .gitignore for Fedora output directory
  - Set up Fedora release name and CPE based on build system properties
  - Use correct file paths in scap-security-guide(8) manual page
    (RH BZ#1018905, c#10)
  - Apply further changes motivated by scap-security-guide Fedora RPM review
    request (RH BZ#1018905, c#8):
    * update package description,
    * make content files to be owned by the scap-security-guide package,
    * remove Fedora release number from generated content files,
    * move HTML form of the guide under the doc directory (together
      with that drop fedora/content subdir and place the content
      directly under fedora/ subdir).
  - Fixes for scap-security-guide Fedora RPM review request (RH BZ#1018905):
    * drop Fedora release from package provided files' final path (c#5),
    * drop BuildRoot, selected Requires:, clean section, drop chcon for
      manual page, don't gzip man page (c#4),
    * change package's description (c#4),
    * include PD license text (#c4).


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.3-1
changelog:
  - Update versioning scheme - move fedorassgrelease to be part of
    upstream version. Rename it to fedorassgversion to avoid name collision
    with Fedora package release.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.4-1
changelog:
  - Fix remediation for sshd set keepalive (ClientAliveCountMax) and move
    it to /shared
  - Add shared remediations for sshd disable empty passwords and
    sshd set idle timeout
  - Shared remediation for sshd disable root login
  - Add empty -compat subpackage to ensure backward-compatibility with
    openscap-content and firstaidkit-plugin-openscap packages (RH BZ#1040335)
  - OVAL check for sshd disable root login
  - Fix typo in OVAL check for sshd disable empty passwords
  - OVAL check for sshd disable empty passwords
  - Unselect no shelllogin for systemaccounts rule from being run by default
  - Rename XCCDF rules
  - Revert Set up Fedora release name and CPE based on build system properties
  - Shared OVAL check for Verify that Shared Library Files Have Root Ownership
  - Shared OVAL check for Verify that System Executables Have Restrictive Permissions
  - Shared OVAL check for Verify that System Executables Have Root Ownership
  - Shared OVAL check for Verify that Shared Library Files Have Restrictive
    Permissions
  - Fix remediation for Disable Prelinking rule
  - OVAL check and remediation for sshd's ClientAliveCountMax rule
  - OVAL check for sshd's ClientAliveInterval rule
  - Include descriptions for permissions section, and rules for checking
    permissions and ownership of shared library files and system executables
  - Disable selected rules by default
  - Add remediation for Disable Prelinking rule
  - Adjust service-enable-macro, service-disable-macro XSLT transforms
    definition to evaluate to proper systemd syntax
  - Fix service_ntpd_enabled OVAL check make validate to pass again
  - Include patch from Šimon Lukašík to obsolete openscap-content
    package (RH BZ#1028706)
  - Add OVAL check to test if there's is remote NTP server configured for
    time data
  - Add system settings section for the guide (to track system wide
    hardening configurations)
  - Include disable prelink rule and OVAL check for it
  - Initial OVAL check if ntpd service is enabled. Add package_installed
    OVAL templating directory structure and functionality.
  - Include services section, and XCCDF description for selected ntpd's
    sshd's service rules
  - Include remediations for login.defs' based password minimum, maximum and
    warning age rules
  - Include directory structure to support remediations
  - Add SCAP "replace or append pattern value in text file based on variable"
    remediation script generator
  - Add remediation for "Set Password Minimum Length in login.defs" rule


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.5-1
changelog:
  - Fix fedora-srpm and fedora-rpm Make targets to work again
  - Include RHEL-6 and RHEL-7 datastream files to support remote RHEL system scans
  - EOL for Fedora 18 support
  - Include Fedora datastream file for remote Fedora system scans


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.5-3
changelog:
  - Rebase the RHEL part of SSG to the latest upstream version (0.1.18)
  - Add STIG DISCLAIMER to the shipped documentation


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.22-1
changelog:
  - update to the latest upstream release
  - only DataStream file is now available for Fedora
  - start distributing security baseline for Firefox
  - start distributing security baseline for Java RunTime deployments


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.24-1
changelog:
  - update to the latest upstream release
  - created doc sub-package to ship all the guides
  - start distributing centos and scientific linux content
  - rename java content to jre


author: Jan iankko Lieskovsky <jlieskov@redhat.com> - 0.1.29-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.29 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.29
  - Do not ship Firefox/DISCLAIMER documentation file since it has been removed
    in 0.1.29 upstream release


author: Jan iankko Lieskovsky <jlieskov@redhat.com> - 0.1.30-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.30 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.30
  - Drop shell library for remediation functions since it is not required
    starting from 0.1.30 release any more


author: Martin Preisler <mpreisle@redhat.com> - 0.1.31-1
changelog:
  - update to the latest upstream release
  - new default location for content /usr/share/scap/ssg
  - install HTML tables in the doc subpackage


author: Watson Sato <wsato@redhat.com> - 0.1.35-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.35 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.35


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.36-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.36 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.36


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.37-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.37 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.37


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.38-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.38 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.38


author: Jan Černý <jcerny@redhat.com> - 0.1.39-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.39 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.39
  - Fix spec file to build using Python 3
  - Fix License because upstream changed to BSD-3


author: Watson Sato <wsato@redhat.com> - 0.1.40-3
changelog:
  - Use explicit path BuildRequires to get /usr/bin/python3 inside the buildroot
  - Only build content for rhel8 products


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.41-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.41 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.41
  - Add RHEL8 Product with OSPP4.2 and PCI-DSS Profiles


author: Matěj Týč <matyc@redhat.com> - 0.1.42-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.42 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.42
  - System-wide crypto policies are introduced for RHEL8
  - Patches introduced the RHEL8 product were dropped, as it has been upstreamed.


author: Matěj Týč <matyc@redhat.com> - 0.1.42-3
changelog:
  - Added FIPS mode rule for the OSPP profile.
  - Split the installed_OS_is certified rule.
  - Explicitly disabled OSP13, RHV4 and Example products.


author: Matěj Týč <matyc@redhat.com> - 0.1.42-5
changelog:
  - Fixed profiles descriptions, so they don't contain literal '\n'.
  - Made the configure_kerberos_crypto_policy OVAL more robust.
  - Made OVAL for libreswan and bind work as expected when those packages are not installed.


author: Matěj Týč <matyc@redhat.com> - 0.1.42-6
changelog:
  - Further fix of profiles descriptions, so they don't contain literal '\'.
  - Removed obsolete sshd rule from the OSPP profile.


author: Jan Černý <jcerny@redhat.com> - 0.1.42-7
changelog:
  - Introduce Podman backend for SSG Test suite
  - Update bind and libreswan crypto policy test scenarios


author: Matěj Týč <matyc@redhat.com> - 0.1.42-9
changelog:
  - Fixed Crypto Policy OVAL for NSS
  - Got rid of rules requiring packages dropped in RHEL8.
  - Profile descriptions fixes.


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.42-11
changelog:
  - Assign CCE to rules from OSPP profile which were missing the identifier.
  - Fix regular expression for Audit rules ordering
  - Account for Audit rules flags parameter position within syscall
  - Add remediations for Audit rules file path
  - Add Audit rules for modification of /etc/shadow and /etc/gshadow
  - Add Ansible and Bash remediations for directory_access_var_log_audit rule
  - Add a Bash remediation for Audit rules that require ordering


author: Matěj Týč <matyc@redhat.com> - 0.1.44-2
changelog:
  - Ported changelog from late 8.0 builds.
  - Disabled build of the OL8 product, updated other components of the cmake invocation.


author: Milan Lysonek <mlysonek@redhat.com> - 0.1.45-2
changelog:
  - Use crypto-policy rules in OSPP profile.
  - Re-enable FIREFOX and JRE product in build.
  - Change test suite logging message about missing profile from ERROR to WARNING.
  - Build only one version of SCAP content at a time.


author: Watson Sato <wsato@redhat.com> - 0.1.46-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.46 release
  - Align OSPP Profile with Common Criteria Requirements (RHBZ#1714798)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.48-4
changelog:
  - Drop rsyslog rules from OSPP profile
  - Update COBIT URI
  - Add rules for strong source of RNG entropy
  - Enable build of RHEL8 STIG Profile (RHBZ#1755447)
  - STIG profile: added rsyslog rules and updated SRG mappings
  - Split audit rules according to audit component (RHBZ#1791312)


author: Watson Sato <wsato@redhat.com> - 0.1.50-2
changelog:
  - Fix Ansible for no_direct_root_logins
  - Fix Ansible template for SELinux booleans
  - Add CCEs to rules in RHEL8 CIS Profile (RHBZ#1760734)


author: Watson Sato <wsato@redhat.com> - 0.1.50-3
changelog:
  - HIPAA Profile (RHBZ#1832760)
    - Enable build of RHEL8 HIPAA Profile
    - Add kickstarts for HIPAA
  - CIS Profile (RHBZ#1760734)
    - Add Ansible fix for sshd_set_max_sessions
    - Add CIS Profile content attribution to Center for Internet Security


author: Matěj Týč <matyc@redhat.com> - 0.1.50-10
changelog:
  - Update the scapval invocation (RHBZ#1815007)
  - Re-added the SSH Crypto Policy rule to OSPP, and added an SRG to the rule (RHBZ#1815007)
  - Change the spec file macro invocation from patch to Patch
  - Fix the rekey limit in ssh/sshd rules (RHBZ#1813066)


author: Matěj Týč <matyc@redhat.com> - 0.1.50-11
changelog:
  - fixed link in a grub2 rule description (rhbz#1854854)
  - fixed selinux_all_devicefiles_labeled rule (rhbz#1852367)
  - fixed no_shelllogin_for_systemaccounts on ubi8 (rhbz#1836873)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.53-3
changelog:
  - Enforce pam_wheel for "su" in the OSPP profile (RHBZ#1884062)
  - Fix case insensitive checking in rsyslog_remote_tls (RHBZ#1899032)
  - Exclude kernel_trust_cpu_rng related rules on s390x (RHBZ#1899041)
  - Create a SSH_USE_STRONG_RNG rule for SSH client and select it in OSPP profile (RHBZ#1884067)
  - Disable usbguard rules on s390x architecture (RHBZ#1899059)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.53-4
changelog:
  - Fix description of rule installed_OS_is_vendor_supported (RHBZ#1914193)
  - Fix RHEL6 CPE dictionary (RHBZ#1899059)
  - Fix SRG mapping references for ssh_client_rekey_limit and use_pam_wheel_for_su (RHBZ#1914853)


author: Watson Sato <wsato@redhat.com> - 0.1.54-1
changelog:
  - Update to the latest upstream release (RHBZ#1889344)
  - Add Minimal, Intermediary and Enhanced ANSSI Profiles (RHBZ#1778188)


author: Marcus Burghardt <maburgha@redhat.com> - 0.1.57-2
changelog:
  - Update Ansible login banner fixes to avoid unnecessary updates (RHBZ#1857179)
  - Include tests for Ansible Playbooks that remove and reintroduce files.
  - Update RHEL8 STIG profile to V1R3 (RHBZ#1993056) 
  - Improve Audit Rules remediation to group similar syscalls (RHBZ#1876483)
  - Reestructure RHEL7 and RHEL8 CIS profiles according to the policy (RHBZ#1993197)
  - Add Kickstart files for ISM profile (RHBZ#1955373)
  - Fix broken RHEL7 documentation links (RHBZ#1966577)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.57-3
changelog:
  - Fix remaining audit rules file permissions (RHBZ#1993056)
  - Mark a STIG service rule as machine only (RHBZ#1993056)
  - Fix a remaining broken RHEL7 documentation link. (RHBZ#1966577)


author: Nikola Forró <nforro@redhat.com> - 1.0.0-13
changelog:
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1624172


author: Petr Viktorin <pviktori@redhat.com> - 1.2.1-6
changelog:
  - Remove build dependency on python2-pytest-xdist and python2-pytest-timeout
  - Enable parallel tests in Python 3 %check
  - Use macros for Python interpreter in tests


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-1
changelog:
  - Update to 1.3.1 (#1674101)
  - Drop Python 2 packages (not supported by SciPy >= 1.3)
  - Backported upstream patch for cKDTree (fixes FTBFS)


author: Lumír Balhar <lbalhar@redhat.com> - 1.3.1-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983


author: Nikola Forró <nforro@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - Increase test timeout, 300 seconds is not always enough
    for test_logpdf_overflow on s390x
    resolves: #1894887


author: Tomas Orsava <torsava@redhat.com> - 1.5.4-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983 rhbz#1877430


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 1:2.0.2-9
changelog:
  - use %{?dist} instead of %{dist} (#1725774)
  - scl-utils-build own the pkgconfig directory by %scl_files (#1431962)


author: Pavlina Moravcova Varekova <pmoravco@redhat.com> - 1:2.0.2-10
changelog:
  - use %__python3 instead of macro %__python (#1733526)
  - corrected unescaped per-cent character in the changelog (#1734103)


author: Daniel Kopecek <dkopecek@redhat.com> - 2.5.2-14
changelog:
  Resolves: rhbz#1689897 - Missing '--extent-only' patch
  Resolves: rhbz#1630298 - Removal of component scrub or its crypto from RHEL


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 1.11.0-1.el8
changelog:
  - Creating RHEL-8.0 initial branch based on 1.11.0
  - Resolves: bz#1515300
  - (Prepare seabios for RHEL-8.0)


author: Robert Scheck <robert@fedoraproject.org> - 8.15.2-27
changelog:
  - Use SSL_CTX_use_certificate_chain_file() to handle intermediate
    certificates passed additionally in confSERVER_CERT (#1565341)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.15.2-30
changelog:
  - Dropped sysvinit support
    Resolves: rhbz#1610287
  - Dropped hesiod support
    Resolves: rhbz#1638491


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.21-1
changelog:
  - Use dbus.mainloop.glib.DBusGMainLoop() instead of dbus.glib
  - Fix AVC.__typeMatch to handle aliases properly
  - Handle sockets with abstract path properly (#1775135)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.22-2
changelog:
  - Log plugin exception traceback when log level is DEBUG
  - sepolicy.info() returns a generator, not a list (#1784564)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.23-1
changelog:
  - browser: Check return value of Gdk.Screen().get_default() (#1574434)
  - Improve and unify error messages (#1763982)
  - setroubleshoot.util: Catch exceptions from sepolicy import
  - Add dpkg support
  - Do not refer to hardcoded selinux-policy rpm in signature
  - Make date/time format locale specific (#1812674)
  - Improve speed of plugin evaluation (#1794807)
  - Do not try to report a bug on None package
  - sealert: Drop unused import slib.dbus.service
  - Drop updater.py - it's not used and doesn't work
  - root user doesn't need to use SetroubleshootPrivileged API
  - Use pydbus, a modern Python dbus API, for SetroubleshootPrivileged
  - Report bug on a package which owns the related SELinux domain (#1811644)
    https://pagure.io/setroubleshoot/issue/18
  - Add Local SELinux policy package version to analyses reports
  - setroubleshoot.utils.get_rpm_nvr_by_scontext add option to use DBUS method
  - Export setroubleshoot.utils.get_rpm_nvr_by_scontext via DBUS
  - setroubleshoot.util: get_rpm_nvr_by_type() and get_rpm_nvr_by_scontext()


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-1
changelog:
  - Add 'fur' into shipped locales
  - Update translations (#1820570)
  - Log full reports with correct syslog identifier
  - Cancel pending alarm during AVC analyses


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-2
changelog:
  - Optimize get_rpm_nvr_by_type by adding a cache (#1794807)
  - Stop building seappletlegacy (#1878792)
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 0.7-1
changelog:
  - Fix setroubleshoot_dispatcher to catch all information from
     avc. Much cleaner interface and no longer uses audit2allow cruft.
  - Remove toolbar from popup window since it did nothing, and I
     think it looks better without it.
  - fix allow_execmod plugin to report better data.


author: Dan Walsh <dwalsh@redhat.com> - 0.8-1
changelog:
  - Added a bunch more plugins
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add allow_cvs_read_shadow.py, allow_ftp_use_cifs, allow_ftp_use_nfs, and allow_gssd_read_tmp.
  - Change AVC to have additional helpers for matching messages.
  - Change Plugin to work better with more than one solution.


author: Dan Walsh <dwalsh@redhat.com> - 0.15-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add generic templating mechanism to Plugin
  - Ported all plugins to use templating mechanism


author: Dan Walsh <dwalsh@redhat.com> - 0.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - modify SetFilter in server to return errors instead of
     throwing an exception. Default the filter list on each alert display.
  - minor tweaks to alert queue handling
  - fix analyze() parameter list in ftp_is_daemon.py plugin
  - sealert now responds to pending alerts more correctly, it shows
     how many pending alerts are in the queue, if you filter the pending
     alert status is updated, the next alert button will advance you
     to the next alert in the queue
  - simplify major pieces of sealert by coalescing common code
     into subroutines.
      [Dan  Walsh <dwalsh@redhat.com>]
  - Complete all boolean plugins except disable
  - Make Close button work.
  - Make setroubleshoot_dispatcher exit if it gets an avc about itself


author: Dan Walsh <dwalsh@redhat.com> - 0.17-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - clean up and rework the timestamp code in util.py so that
     time zones are handled properly, there were a number of bugs.
     Hopefully it's correct now because timezone handling is a pain.
  - change the time format in the browser so all times are displayed
     identically, the friendly time relative format was hard to compare.
  - modify the plugin 'make install' to delete all existing plugin's
     prior to installing the new ones
  - add popup menu to status icon to choose between browser and
     alert GUI (not fully connected yet). Several bug fixes related
     to changing the filter_type from a string to an int.
  - add filter selection to bottom pane, change filter_type from
     string to integer constant. Enhance how columns are handled.
     Get init_combo_box to work. Remove unused RPM and Bugzilla
     fields from bottom pane. Modify the default size of the browser
     window. Fix missing import in util.py.
  - add ability in broswer to sort on columns, initially the report
     count column and the last seen date column. The date column now
     stores a TimeStamp object instead of a string. Add new method
     to TimeStamp to return a friendly string relative to the current
     time. The date column in the browser now has a cell data function
     which invokes the friendly format method of the TimeStamp object.
  - add ability fo serialize to/from xml for classes which can
     inititialized from strings and serialized as strings (e.g. numbers,
     TimeStamps, etc.)
  - add count of how many times a signature is reported, the date
     when first and last reported, add columns for report count and
     last date count to browser.
  - checkpoint browser code, list pane and detail pane now working.
  - add initial support for browser applet, move some functions which
     kept getting reused to util.py
  - add reporting of environment to email alert (email alerts still
     need work)
      [Dan  Walsh <dwalsh@redhat.com>]
  - Fix disable_trans.py set_boolean call
  - Complete all boolean plugins except disable
  - Change interface to use audit unix domain socket


author: Dan Walsh <dwalsh@redhat.com> - 0.19-1
changelog:
  2006-08-08  Dan Walsh <dwalsh@redhat.com>
  - Fix up handling of mls ranges in context
  - Cleanup some pychecker errors

  2006-08-07  John Dennis <jdennis@redhat.com>
  - add first seen, last seen, and report count to alert detail view
  - make the seen icon work, if the alert has been displayed more
     than N seconds, mark the alert as having been seen by the user
     and update the icon is the list view
  - change the schema for the xml data; the database now has a version,
     there is a local id attached to each signature, the filter list in
     the siginfo was replaced by a list of per user data, the per user
     data now contains the filter, seen_flag. Modify all the code which
     was operating on the filter information to use the new model.
  - fix the xml serialization so that booleans can be used as a basic
     type and also so that non-string types can be used in element
     attributes (e.g. int, bool) and the serialization code will
     automatically convert between python types and strings.


author: John Dennis <jdennis@redhat.com> - 0.27-1
changelog:
  - load_plugins() now catches exceptions when a plugin won't load,
     reports the traceback in the log file, and continues with the next
     plugin. Previously a bad plugin caused the entire plugin loading
     to abort and no plugins were loaded.
  - Add "daemon_name" to automake variables, change pid file to match
  - turn off "noreplace" on config file till things settle down a bit
  - browser.py now validates data, also test for missing column data in the
     cell_data function to avoid exceptions.
  - add stub for analyzie_logfile() rpc call
  - turn off balloon notifications by default in config file,
     libnotify is just plain busted at this point :-(
  - only the setroubleshootd daemon creates it's log file
     under /var/log now, the user app's do it in /tmp, change file
     permissions on /var/log/setroubleshoot back to 0644.
  - sealert now looks up the username rather than hardcoding it to "foo"
  - CamelCase to lowercase_underscore clean up


author: John Dennis <jdennis@redhat.com> - 0.30-1
changelog:
  - fix bug 203479, missing requires of audit-libs-python
  - add support to sealert to listen on a dbus session signal to display
     the gui. This is needed for when the status icon is not visible and
     the user wants to see the UI. There is now a seperate program
     setroubleshoot_launch_gui which emits the signal.


author: Dan Walsh <dwalsh@redhat.com> - 0.32-1
changelog:
  - Add avc_syslog to syslog translated avc message
  - Fix submitbug button
      [John Dennis <jdennis@redhat.com>]
  - fix signature inflation, all data attached to a signature is now
     encapsulated in a SEFaultSignatureInfo (siginfo) class. The GUI no
     longer reaches into a signature looking for information, it looks
     in the siginfo. The Plugin class now defines the method
     get_signature() which report() calls to obtain the signature. The
     default signature provided by the Plugin class includes the
     analysisID, an AVC with just the src & target contexts, and the
     object_path. All data accesses and parameters which had been "sig
     and solution" are now done via the unified siginfo class. There is
     still a bit more work to be done on this but this represents a
     reasonble point to checkpoint the code in CVS.


author: Dan Walsh <dwalsh@redhat.com> - 0.34-1
changelog:
  - Standardize on the browser. remove alert window
      [John Dennis <jdennis@redhat.com>]
  - remove all vestiges of popup alert, now browser is the only
     UI game in town
  - restore the automatic updating of the browser window which had
     been a regression, the AlertClient class now emits signals which
     the GUI classes can connect to receive signals from the fault server,
     also fix the "mark seen" regression
  - browser.py: restore mark_seen timeout


author: John Dennis <jdennis@redhat.com> - 0.35-1
changelog:
  - add sorting on category column and seen column in browser,
     fix reference to my_draw() in print function.

  - make browser window hidden by default so it does not flash
     when it's first realized, connect to the "realize" signal to
     initially position the vpane, add signal handlers to track
     when the browser is visible, the presentation of the status
     icon now checks if the browser is visible, the status icon is
     not presented if the browser is already displayed.


author: Dan Walsh <dwalsh@redhat.com> - 0.38-1
changelog:
  [Dan  Walsh]
  - Hook up the rest of the menu bars on browser window
  - Add public_content.py plugin
      [John Dennis <jdennis@redhat.com>]
  - add delete_signatures() method to AlertClient class
  - start using the AppBar in the browser.
  - "open logfile" now connected all the way from browser menu
     to server rpc, still needs implementation, but "plumbing" is working.
  - fixes for the date/time dialog
  - remove install of setroubleshoot.glade, we now only use
     setroubleshoot_browser.glade
  - some fixed to DateTimeDialog


author: Dan Walsh <dwalsh@redhat.com> - 0.39-1
changelog:
  - Add Icon
      [John Dennis <jdennis@redhat.com>]
  - dispatcher.py: rework how audit messages injected into the
     system and processed. Much of this work was in support of log file
     scanning which should be coupled to the exact same processing code
     as audit messages arriving from the audit socket. In essence log
     file scanning synthesizes an audit message and we inject it into
     the system the same way socket messages are injected. This was
     also an excellent moment correctly handle out of order audit
     messages, something we were not able to handle previously. This
     may have been contributing to splitting what should have been a
     single alert into two or more separate alerts because we didn't
     recongize the incoming audit events as a single event. Correctly
     assembling out of order messages introduced a fair amount of extra
     complexity as we now maintain a cache of recent audit events, this
     is fully documented in dispatcher.py
  - Turn notifications back on by default.
      [Karl MacMillan <kmacmill@redhat.com>]
  - Separated out HTML rendering and made it easier to translate.


author: Dan Walsh <dwalsh@redhat.com> - 0.40-1
changelog:
  - Fix notification window problems.  Now dissappears and does not regenerate if
  it has already been seen


author: Dan Walsh <dwalsh@redhat.com> - 0.42-1
changelog:
  [Karl MacMillan <kmacmill@redhat.com>]
  - Add rpm information for target.
  - Add hostname and uname to signature info
  - Add display of the full AVC
  - Add display of the analysis id
  - Change html generation to be separated out and us elemmenttree
      [John Dennis <jdennis@redhat.com>]
  - add CommunicationChannel class to encapsulate data transfer
     operations, in particular to provide an object threads can lock
     during data transfer.
  - checkpoint the logfile scanning code, somewhat working


author: Dan Walsh <dwalsh@redhat.com> - 0.43-1
changelog:
  - Fix mail handling
  - fix bugs related to recording per user per signature filtering
      [John Dennis <jdennis@redhat.com>]
  - fix bugs related to recording per user per signature filtering
      [Karl MacMillan <kmacmill@redhat.com>]
  - Add signal handling to client and server.
  - Fix minor plugin bugs.


author: Dan Walsh <dwalsh@redhat.com> - 0.46-1
changelog:
  - Add new plugins cvs_data, rsync_data, xen_image, swapfile, samba_share
      [John Dennis <jdennis@redhat.com>]
  - clear the GUI of old data before loading new data,
     fix the code used to display the filter icon in the filter column


author: Dan Walsh <dwalsh@redhat.com> - 0.48-1
changelog:
  - Sealert only notify dropped connection once
  - setroubleshoot shutdown cleanly
      [John Dennis <jdennis@redhat.com>]
  - Gui cleanups


author: Dan Walsh <dwalsh@redhat.com> - 1.0-1
changelog:
  - Release of first version
  - Fix icon
      [John Dennis <jdennis@redhat.com>]
  - Memory leak fixes
  - Substitution fixes
  - File names in hex fixes


author: Dan Walsh <dwalsh@redhat.com> - 1.3-1
changelog:
  - Speed enhancments
      [John Dennis <jdennis@redhat.com>]
  - log file parsing now approx 4 times faster
  - greatly enhance the statistics reporting capability in attempt
     to diagnose slow log file parsing performance
  - make gathering of environmenatal information optional,
     environment information is only relevant at the time the
     alert fires, not in a post processing scenario
  - clean up several places where environmental information was
     assumed and/or was always gathered, or gathered in the wrong place.


author: Dan Walsh <dwalsh@redhat.com> - 1.7-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Add command line utilities
  - logfile scanning finally seems to work connected to browser
  - Additional Information section of report now includes line
     number information (if alert was generated from logfile)
  - replace database update_callback() with notify interface, a more
     generic solution more easily shared between components
  - object implementing rpc method is now explicitly attached via
     connect_rpc_interface() instead of walking the MRO chain with
     magic exclusions. explicitly connecting is more flexible and
     robust (no getting the wrong object by mistake)
  - fix handling of return args in local rpc case
  - fix signal connections between audit and logfile
  - split databae and database_properties for audit and logfile
  - fix initial connection state
  - fix lookup_local_id


author: John Dennis <jdennis@redhat.com> - 1.8.1-1
changelog:
  - Fixes 216936, bug 215290, add 'Copy Alert' edit menu item
  - clean up menu items, add tooltips
  - fix printing so it will work with multiple alerts, force font to
     monospace 10pt, display error dialog if printing fails.
  - Fixes 216908, platform and raw audit messages were not wrapped
     to fit on page.
  - Related: 216575, update i18n po files
  - Fixes 216941, set default folder for save operation, also set
     default filename
  - Fixes 216327 add menu items "toggle hide deleted", "select none". Add model
     filter to control visibility of alerts
  - Fixes 214218, sealert with no command line
     arguments induces startup as dbus service, this had been a
     regression.
  - Fixes 216327, rework how deletes are performed in browser. Delete
     now marks each seleted siginfo with a delete flag, expunge
     permanently deletes siginfo's marked for deletion, also add undelete
     command, removed delete confirmation dialog. Modify how text
     attributes in cell renderer are computed to allow for
     strike-throughs of alerts marked for deletion.
  - multiple alerts can now be selected, add select all command,


author: John Dennis <jdennis@redhat.com> - 1.8.3-1
changelog:
  - Fixes 217961, sealert needs pygtk2-libglade
  - more i18n translations
  - Fixes 217710, date representation did not respect locale,
     at the same time remove old date formatting code, now cruft since
     we can't use it because it was specific to US English.
  - fix how selections are handled when rows are expunged.
  - add Copy to Edit menu, for copying selection from detail pane,
     unfortunately gtkhtml2 widget does not preserve line breaks between
     table rows.


author: John Dennis <jdennis@redhat.com> - 1.8.5-1
changelog:
  - fix bug, "could not convert path to a GtkTreePath" when database 
     is initially empty, caused by last_selected_row == None


author: John Dennis <jdennis@redhat.com> - 1.8.6-1
changelog:
  - Fixes 218150,
     "If view is set to "hide delete" you cannot filter new entries"
     Actually, the bug was toggle cell renderer was connected to the
     base model instead of the model attached to the view, the sort
     model, this meant the toggle was occuring on the wrong row if
     the view was sorted differently than the base model.


author: John Dennis <jdennis@redhat.com> - 1.8.11-1
changelog:
  - Fixes 216575, more translations
  - Replace delete and expunge menu labels with something more intuitive
  - add ability for browser to be restarted with identical window
     position and state
  - add pkg version and protocol version to logon handshake, test for
     compatibility between clint and server, prompt for restart
  - add non-modal restart dialog
  - add dialog to display traceback if sealert faults with an uncaught
     exception, try to limit invisible errors
  - fix return args on rpc method
  - add instance id to server


author: John Dennis <jdennis@redhat.com> - 1.8.13-1
changelog:
  - update translations

  - change SETroubleshootDatabase so it is optional if it's backed
     by a file, this fixes the problem of us littering temporary files
     when scanning logfiles which does not require persistence.

  - disable the view logfile menu item if no logfile has been opened

  - fix redundant log messages for case where there is no log file and
     the console flag is set. When there is no log file the logging
     module opens a console stream, thus the console stream produced
     by the console flag was redundant.

  - add username and password command line arguments
     rework startup logic so that all command line args are processed
     before we do any real work
   
  - rework the email preferences so that each email address can
     have a filter type associated with it.

     add a new filter_type "Ignore After First Alert" which filters
     after the first alert has been delivered

  - add UI for setting the email addresses alerts are sent to.
     Add menu item to edit email list, add email list dialog.
     Remove 'recipient' config file entry, now list is stored
     in seperate file. Add rpc to query and set the email list,
     the GUI calls this to get the current list from the server
     and set it in the server, it is the server which reads and 
     writes the file. Add 'enable' flag to each email entry.
     Modify how the server iterates over the email list when it
     receives an alert. When marking an alert as having been sent
     the username is the email address but with 'email:' prepended so
     as not to collide with non-email filtering options for the same user.


author: John Dennis <jdennis@redhat.com> - 1.8.14-1
changelog:
  - Fixes 221850
     plugin module loading was failing in python 2.5 with the message
     "SystemError: Parent module 'plugins' not loaded". This is due to a
     change in behavior between python 2.4 and 2.5, in python 2.4 the lack
     of a parent module was silently ignored. The fix is to load
     plugins.__init__ first.


author: John Dennis <jdennis@redhat.com> - 1.8.16-1
changelog:
  [John Dennis <jdennis@redhat.com>]
  - Fixes Bug# 224343 sealert's "Aditional Info:" text should be in white box
  - Fixes Bug# 224336 sealert should have GtkRadioButtons in menu View
  - Related: bug 224351
     Rewrite parts of logging support to better support changing output
     categories, output destinations. Now -v -V verbose works in sealert.
  - Resolves bug 225161, granted AVC's incorrectly identified as a denial
  - add alert count to status bar
  - add "Help" command to Help menu, opens web browser on wiki User FAQ
      [Dan Walsh  <dwalsh@redhat.com>]
  - Make setroubleshoot.logrotate correctly


author: John Dennis <jdennis@redhat.com> - 1.9.3-1
changelog:
  - install icon in /usr/share/icons, refer to icon by name using standard API
  - Fix performance problems in setroubleshoot browser log file scanning
  - Significant rewrite of data/view management code in setroubleshoot
     browser. data and view now cleanly separated, can easily switch
     between data views while maintaining selections, view state, with
     proper update of status information in status area
  - Resolves Bug# 227806: right click context menu resets selection
  - Logfile scans now operate in independent thread, proper asynchronous
     updates of browser during scan, browser used to appear to hang
  - Resolves Bug# 224340: Rewrite Menu/Toobar/Popup to use UIManger instead of glade
  - Add toobar support
  - Implement GUI to edit email recipient list in setroubleshoot browser
  - Added user help to setroubleshoot browser
  - Related Bug# 224343: Fix setroubleshoot browser to respond to desktop theme changes
  - improve traceback error reporting in sealert
  - rewrite AboutDialog, replacing glade version
  - Resolves bug 229849  Bug# 230115, Relates bug 221850: fix uuid code to resolve
     '_uuid_generate_random' is not defined error


author: Dan Walsh <dwalsh@redhat.com> - 1.9.4-1
changelog:
  - Remove disable_trans boolean
  - Check for paths in filesystem before suggesting chcon -R 
  - Remove default to listen on local ports


author: John Dennis <jdennis@redhat.com> - 1.9.6-1
changelog:
  - add avc_auparse.py, now has option to use audit parsing library instead of
     built-in audit parsing.
  - fix bug in log file scanning and detail display update
  - Resolves Bug# 238516, python pkg directory not owned


author: John Dennis <jdennis@redhat.com> - 1.9.7-1
changelog:
  - Resolves Bug# 241739, this bug is the lead bug for several bug reports,
     all consequences of the same problem, setroubleshootd/sealert when run
     in a non latin language environment because of incompatibilities in
     i18n encoding between components.


author: John Dennis <jdennis@redhat.com> - 1.10.0-1
changelog:
  - move all plugins and their translations to independent package
  - wrap XML generation inside try/except
  - correct how access list is obtained in avc_auparse.py
  - add try/except around top level of AnalyzeThread.run so exceptions
     in the thread get reported and the analysis thread does not just die.
  - also add try/except around LogfileThread.process_logfile
  - add new function assure_file_ownership_permissions()
  - server now forces it's database file permissions/ownership to be 0600 root:root
  - rpm now forces the server's database file permissions/ownership to be 0600 root:root
  - Resolves Bug #251545: Review Request: setroubleshoot-plugins - analysis plugins for setroubleshoot
  - clean up some other rpmlint warnings in setroubleshoot.spec
  - fix missing install of setroubleshoot icon and sym link to it
  - Resolves Bug #251551, setroubleshoot shows up in in wrong desktop menu
     also run desktop-file-install in rpm install
  - add /etc/dbus-1/system.d/setroubleshootd.conf dbus configuration file
  - Resolves Bug #250979, Bug #250932 Missing dependencies
  - Restore plugins/Makefile.am which got nuked somehow
  - remove dus.dbus_bindings.bus_name_has_owner(), deprecated as of F7
  - wrap rpm transactions in try/except


author: John Dennis <jdennis@redhat.com> - 1.10.2-1
changelog:
  - remove all copied code from test_setroubleshootd, now we import
     from setroubleshoot
   
  - export ClientConnectionHandler from rpc.py as a base class.
     Derive SetroubleshootdClientConnectionHandler and
     AuditClientConnectionHandler from ClientConnectionHandler.

  - add audisp_listen as test program

  - create setroubleshoot sym link in top devel directory pointing
     to src so import setroubleshoot.foo if PYTHONPATH=topdir

  - add get_option, convert_cfg_type to config.py.in so that one
     can pass optional dict to override config file settings

  - rewrite log_init() so it's easier for other programs to use it,
     fix the import logic concering log & config

  - remove log code from test_setroubleshoot, now just does import
     from setroubleshoot.
   
  - test_setroubleshootd can now handle audit records in both text
     and binary formats, can be selected by command line arg. It can now
     either output to clients connecting on a socket or to stdout. Can
     now optionally exit after N socket client connections.

  - remove non audit record lines from test data

  - remove config_init() and log_init() from package __init__.py
     It was the wrong place to call them, now call them when the
     process initializes before the first setroubleshoot imports

  - add parse_config_setting() and set_config() to config module
  - setroubleshootd now accepts -c --config command line arg
  - test_sectroubleshoot: add err defines & program_error exception
     add is_valid() tests to assure we read a valid audit record
     log the unrecognized line if not valid, clean up socket close()

  - Relates Bug #247056, update initscript to LSB standards
     Note: LSB initscripts in Fedora is not yet a resolved issue,
     the changes implemented were to add an LSB block and support
     the new LSB try-restart and force-reload commands. However
     the new /lib/lsb/init-functions are NOT currently used as this
     is the unstable part.


author: John Dennis <jdennis@redhat.com> - 1.10.3-1
changelog:
  - modify avc_audit.py to use new audit_data.py implementation

  - can listen for audit events on either /var/run/audit_events
     in bindary protocol mode or /var/run/audisp_events in
     text protocol mode


author: John Dennis <jdennis@redhat.com> - 1.10.5-1
changelog:
  - update code for command line log file scanning to work with
     new log file scanning code introduced for the browser.

  - update Bulgarian translation (Doncho N. Gunchev (gunchev@gmail.com))

  - update Polish translation (Piotr Drąg (raven@pmail.pl))

  - Resolves bug 239893: sealert wakes up very often
     This was caused by the use of threads and pygtk's thread signal
     handling.  The only use of threads in sealert was for log file
     scanning so that the UI would remain responsive during a
     scan. Threads in sealert have now been completely
     removed. Instead the scanning work is performed in a gobject idle
     function called from the main loop. The idle function is written
     as a python generator function which allows for the function to
     perform a small amount of work, save it's execution state and
     return. The next time the idle function is called from the main
     loop it resumes execution from it's last state until it decides
     to yield control again. This way the long running scan/analysis
     can be performed in small successive units of work during the
     time the application is otherwise idle and it does not interfere
     with the rest of the GUI event processing. Everything now occurs
     in an event loop, think of it as the applications process/thread
     scheduler whose event handlers execute time slices.

  - rewrote parts of the audit input pipeline to use generators
     instead of callbacks, thus permitting the logfile scanning code
     to yield control with more granularity. Also updated
     test_setroubleshootd and audisp_listen to use the new
     generator/yield logic.

  - rewrote the dialog used for scanning log files, progress bar
     updates are now in the dialog, the scan can be terminated part
     way through, errors from the scan are reported in pop-up dialog,
     one can only dismiss the dialog with success if the scan had
     been successfully run to completion, otherwise the user is only
     left with the option to cancel.

  - Relates bug 252035  bug 247469, setroubleshootd and sealert should
     exit if SELinux is disabled.

  - add utility functions escape_html() and unescape_html()

  - fix initial sort order in browser, track sort order in browser

  - modify AVC.get_path() to only return a value if the 'path' field is
     set, formerly it also considered the fields 'name' & 'file' which were
     incorrect. get_path() now also looks to see if the string begins with a
     slash for a fully qualified path, if not it looks to see if its a 
     pseudo path such as 'pipe[12345]' or 'socket[12345]' and if so strips out
     the instance information inside the brackets and returns just the type of 
     the pseudo path. This is done because we do not want path information
     in the signature to be unique for each instance of the denial.

  - modify the TimeStamp class to hide it's internal datetime member,
     remove the cmp() method, the internal __cmp__ will be automatically invoked.

  - require selinux policy version in spec file to allow system dbus use
   
  - Resolves bug 256601: audit2allow generates incorrect syntax when comma "," in
     denied list

  - update po i18n files

  - Add support for pruning database by age and size


author: John Dennis <jdennis@redhat.com> - 1.10.7-1
changelog:
  - Fix spec file requires for opening an HTML page
     In configure.ac search for xdg-open and htmlview in priority order,
     set variable html_browser_open to the one found, in spec file require
     xdg-utils for fedora and htmlview for RHEL.

  - add "Host" column in browser
     add "Toggle Column Visibility" menu to toggle display of any column on/off

  - Resolves bug 310261: setroubleshoot notifications aren't throttled

  - add support for AUDIT_EOE, end-of-event, if AUDIT_EOE immediately
     emit cached event. Disable timeouts used to flush events if
     AUDIT_EOE has been seen.


author: <jdennis@redhat.com> - 2.0.0-1
changelog:
  - prepare for v2 test release
  - Completed most work for version 2 of setroubleshoot, prepare for test release
  - import Dan's changes from the mainline
     primarily allow_postfix_local_write_mail_spool plugin
  - escape html, fix siginfo.format_html(), siginfo.format_text()
  - add async-error signal
  - change identity to just username
  - make sure set_filter user validation works and reports error in browser
  - fix generation of line numbers and host when connected to audispd
  - add permissive notification, resolves bug 231334: Wording doesn't change for permissive mode
  - resolves bug 244345: avc path information incomplete
  - get the uid,gid when a client connects to the server
  - set_filter now verifies the filter is owned by the user,
  - resolves bug 288261: setroubleshoot lack of user authentication
  - remove filter options which weren't being used
  - change '@' in audit data hostname to '.'
  - remove restart dialog
     resolves bug 321171: sealert's dialog after update is higly confusing
  - fix rpc xml arg
  - fix handling of host value
  - tweak what fields are in signature
  - move data items which had been in 'avc' object into siginfo
  - clean up siginfo format
  - large parts of new audit data pipeline working, checkpoint
  - fix duplicate xml nodes when generating xml tree
  - audit event can now be xml serialized
  - switch from using int's for audit record types to strings
  - avoid conversion headaches and possibilty of not being
     able to convert a new unknown type
  - add logic to allow XmlSerialize to be subclassed and init_from_xml_node to be overridden
  - add support to xml serialize classes AuditEventID, AuditEvent, AuditRecord
  - use metaclass for xml class init
  - start adding xml support to audit data classes
  - Use metaclass to wrap class init
  - move xml serialization code from signature.py to xml_serialize.py
  - simplify aspect of the serialization code
  - add unstructured xml mapping, each xml element name has its content mapped to obj.name
  - modify xml serialization to be driven by xml contents
  - general clean up
  - checkpoint conversion of serialization to use metaclasses
  - clean up class/data specifications for XmlSerializable
  - add support for client rpc testing
  - add changelog entry
  - add SubProcess class to setroubleshootd in preparation to
  - run daemon as subprocess so we can gather results and
     compare them to the expected data we sent
  - rewrite all plugins to use new v2 audit data
  - add SubProcess class to setroubleshootd in preparation to 
            run daemon as subprocess so we can gather results and
            compare them to the expected data we sent
  - add new test support: add config section 'test', add boolean 'analyze' to
     config test section, add class TestPluginReportReceiver which is installed
     if test.analyze is True, it prints analysis report. In test_setroubleshootd
     send AUDIT_EOE to assure sequential event processing so analysis results
     have same ordering as events that are sent by test_setroubleshootd
  - alert signatures now include host information, alerts will be grouped by host


author: <jdennis@redhat.com> - 2.0.1-1
changelog:
  - make connection error message persist instead of timeout in browser
  - updated Brazilian Portuguese translation: Igor Pires Soares <igor@fedoraproject.org>
  - implement uid,username checks
  - rpc methods now check for authenticated state
  - fix html handling of summary string
  - add 'named' messages to status bar, make sure all messages either timeout or are named
  - fix ordering of menus, resolves bug 427418
  - add 'hide quiet' to browser view filtering, resolves bug 427421
  - tweak siginfo text formatting
  - add logon to SECommandLine so that sealert -l <local_id> works


author: <jdennis@redhat.com> - 2.0.2-1
changelog:
  - Resolve bug 428252: Problem with update/remove old version
  - Add code to validate xml database version, if file is incompatible it is not read,
     the next time the database is written it will be in the new version format.
     This means the database contents are not preserved across database version upgrades.
  - Remove postun trigger from spec file used to clear database between incompatible versions
     the new database version check during database read will handle this instead
  - bullet proof exit status in init script and rpm scriptlets
  - Resolve bug 247302: setroubleshoot's autostart .desktop file fails to start under a KDE session
  - Resolve bug 376041: Cannot check setroubleshoot service status as non-root
  - Resolve bug 332281: remove obsolete translation
  - Resolve bug 344331: No description in gnome-session-properties
  - Resolve bug 358581: missing libuser-python dependency
  - Resolve bug 426586: Renaming translation po file from sr@Latn to sr@latin
  - Resolve bug 427260: German Translation
  - enhance the sealert man page


author: <jdennis@redhat.com> - 2.0.4-1
changelog:
  - Resolve bug 430421: audit_listener_database.xml:3029: parser error in xmlParseDoc()
    rewrite the audit_msg_decode logic to beaware of specific audit fields
  - add new template substitution $SOURCE, a friendly name, $SOURCE_PATH still exists
    and is the full path name of $SOURCE, also add 'source' attribute in AVC class,
    fix how source and source_path are computed from audit's comm and exe fields
  - fix the computation of tpath to also look at the audit name field, formerly
    it had only been looking at path, fixes <Unknown> showing up for many targets
  - add exception handling around xml file writes (Alan Cox reports problem when /var is full)
  - add testing documentation
  - Resolve bug 430845: obsolete URL in setroubleshoot package description
  - Resolve bug 428960: Permissive message makes no sense.
  - init script now allows extra test options
  - show_browser() now opens and raises the window (e.g. presents) rather than just
    assuring it's realized (e.g. iconified, or hidden)
  - sealert -l message in syslog converts from html before writing to syslog
  - Resolve bug 320881: export setroubleshoot_selinux_symposium in PDF format
  - add code to verify all async rpc's have been cleared from the async rpc cache
  - add code to set a default rpc method return if the interface does not define a callbak
    (methods which did not have a callback were not returning anything and hence were no
     getting cleared from the cache)


author: John Dennis <jdennis@redhat.com> - 2.0.5-1
changelog:
  - allow sealert -l lookup to accept * wildcard
  - add a few more audit fields needing special decode handling


author: <jdennis@redhat.com> - 2.0.6-1
changelog:
  - add dialog to run a command in the background, capture it's stdout & stderr
      report it's status, kill it, and pass it a pseudo terminal for password prompts
      - separate the fix command into it's own section in formatted alerts
      - add UI for running the fix command, enable only if there is a single selection
        and the selected alert has a fix command
        - add a config parameters 'run_fix_cmd_enable' to control if fix commands
        can be run, defaults to False
        - Resolve bug 431380: prevent notify popups while setroubleshoot is open


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Update to upstream
    - 2008-10-22    <jdennis@redhat.com>
      - Fix pruning code
      - Fix time stamps


author: Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
changelog:
  - Update to upstream
    - 2008-10-06  Dan Walsh <dwalsh@redhat.com>
    - remove .png from desktop files


author: Dan Walsh <dwalsh@redhat.com> - 2.1.3-1
changelog:
  - sedispatch needs to connect to dbus on avc arrival, 
    instead of startup, since the dbus daemon is not started 
    when sedispatch starts


author: Dan Walsh <dwalsh@redhat.com> - 2.2.1-1
changelog:
  - Update to upstream
    * Thomas Liu <tliu@redhat.com>
    Bug fixes to GUI, added Delete All Alerts menu item.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.9-1
changelog:
  - Update to upstream
    2009-6-25  Thomas Liu <tliu@redhat.com>
    - Added a "Copy to Clipboard" button to the browser GUI.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.11-1
changelog:
  - Update to upstream
    2009-7-01 Thomas Liu <tliu@redhat.com> 
    - Fixed browser behavior when there are no alerts
    - Fixed seapplet behavior when there are no alerts
    - Made delete all button delete alerts on server side and on local side


author: Dan Walsh <dwalsh@redhat.com> - 2.2.13-1
changelog:
  - Update to upstream
    2009-7-07 Thomas Liu <tliu@redhat.com> 
    - Fixed detail doc not clearing when deleting all alerts
    - Hid notify check when deleting all alerts.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.14-1
changelog:
  - Update to upstream
    2009-7-15 Dan Walsh <dwalsh@redhat.com> 
    - Fix handling of syscall record a1 field
    - Translate "/" to mountpoint when returned by kernel


author: Dan Walsh <dwalsh@redhat.com> - 2.2.20-1
changelog:
  -Update to upstream 
          - 2009-8-18 Thomas Liu <tliu@redhat.com>
          - Added check for new policy.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.35-1
changelog:
  - Fix translations, plurals and glade
    - Update Po
    - Fix plural form
    - Add support for Green Plugins


author: Dan Walsh <dwalsh@redhat.com> - 2.2.50-1
changelog:
  - Exit with error code if you run sealert as root and try to connect to session bus
  - Fix Crash when ino is not defined


author: Dan Walsh <dwalsh@redhat.com> - 2.2.61-1
changelog:
  - Add Gavin Romig-Koch report patch
  - Cleanup Browser window
  - Remove avc messages that are allowed or dontaudited in current poilcy


author: Dan Walsh <dwalsh@redhat.com> - 2.2.67-1
changelog:
  - Fix browser to handle ignore flag
  - Remove tpath for signature 
  - Fix audit2why handling for sealert and setroubleshoot
  - Fix sort order selection
  - Fix dontnotify handling


author: <dwalsh@redhat.com> - 3.0.7-1
changelog:
  - Apply patch from Yuri Chornoivan to fix spelling mistakes
  - Remove py files that are no longer used
  - Add details button


author: <dwalsh@redhat.com> - 3.0.11-1
changelog:
  - Better handling of tracebacks in terminal mode
  - Fix up messages on process and capability avc messages
  - Update translations


author: <dwalsh@redhat.com> - 3.0.19-1
changelog:
  - Fix man page to reflect change in gui
  - Fix sealert -fixit call to import load_plugins
  - update translations
  - Fix handling of empty tpath in gui


author: <dwalsh@redhat.com> - 3.0.30-1
changelog:
  - Change seapplet to only check for AVCs on login, if checkonlogin flag is turned on in ~/.setroubleshoot file
  - Fix list_all_alerts bug causing crash on bad type


author: <dwalsh@redhat.com> - 3.0.37-1
changelog:
  - Move serverconnection.py and FixIt commands from setroubleshoot to setroubleshoot-server
  - Remove run_cmd.py


author: <dwalsh@redhat.com> - 3.0.40-1
changelog:
  - Apply Miroslav patch that rewrites sealert option handling with using optparse. Fixing conflicting options problems.


author: Rex Dieter <rdieter@fedoraproject.org> 3.0.45-2
changelog:
  - optimize/update scriptlets
  - don't own icons/hicolor
  - drop %config tag on applications/*.desktop

  - Patch from Mgrepl to stop printable from crashing if None is passed in
  - Update to latest translations


author: Dan Walsh <dwalsh@redhat.com> - 3.1.1-1
changelog:
  - remove specific logging and move to syslog
  - Fix handling of AVC messages broken by fix for memory leaks


author: Dan Walsh <dwalsh@redhat.com> - 3.1.3-1
changelog:
  - Update to latest translations
  - Fix handling of avc messages, missing \n
  - Default to check for AVC's on login


author: Dan Walsh <dwalsh@redhat.com> - 3.1.16-1
changelog:
  - Fix sealert to handle avc's in /var/log/messages which will be numbered 1400 and 1107 rather then AVC and USER_AVC
  - Update Translations
  - Fix hostname substitution to only effect hostnames


author: Dan Walsh <dwalsh@redhat.com> - 3.2.1-1
changelog:
  - Remove sesearch from package and start using sepolicy from policycoreutils-python
  - Fix retrieval of writable types to translate attributes into the group of types available, and not return non file types.


author: Dan Walsh <dwalsh@redhat.com> - 3.2.9-1
changelog:
  - On update cp instead of rename, since there could be a situation where
  someone has ~/.config on a different file sytem then ~.  It has happened.
  - Fix --password spelling error
  - Remove --quit option from sealert
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> 3.2.22-1
changelog:
  - Ship a symbolic setroubleshoot icon (#1182652)
  - Fix get_rpm_nvr_*_temporary functions - CVE-2015-1815 (#1203352)


author: Petr Lautrbach <plautrba@redhat.com> 3.2.24-1
changelog:
  - translations updated from https://fedora.zanata.org/project/view/setroubleshoot
  - setroubleshoot_database.xml and email_alert_recipients are %ghost again


author: Petr Lautrbach <plautrba@redhat.com> 3.3.3-1
changelog:
  - fixed few UI browser problems
  - extended DBUS API, see DBUS.md
  - import MIMEText from the right module (#1297111)
  - Fix several GTK deprecated warnings


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.5-1
changelog:
  - get_alert() DBUS API extended with more parameters
  - sedispatch uses a timeout when collecting audit events (#1322771)
  - Use correct packaging for byte compiled files (#1321047)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.8-1
changelog:
  - added setroubleshootd_log.log_full=True|False directive
  - setroubleshootd_log.level and sealert_log.level can be set to
    different values
  - get_alert() and get_all_alerts_since() DBUS APIs change to use
    number of microseconds instead of date string
  - setroubleshoot.conf cleanup


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.9.1-1
changelog:
  - Do not use dangerous shell=True
  - Use subprocess.check_output() with a sequence of program arguments


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.11-1
changelog:
  - Fix "list all alerts" in sealert gui (#1370272, #1332485)
  - Fix sealert message for capability2 (#1360392)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.12-1
changelog:
  - Remove "Report bug" button when mozplugger plugin is used (#1290135)
  - Change "check_for_man" return value upon failure (#1431191)
  - Fix "plugin details" message content
  - Add "init_args" function to Plugin
  - Fix sealert crash when setroubleshootd fails to start (#1405003)
  - Improve obtaining AVC object path
  - Fix setroubleshootd.8
  - Fix report problem summary string
  - sealert - provide a better error message when SELinux is disabled
  - Spelling fixes
  - Python 3.6 invalid escape sequence deprecation fixes


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.13-1
changelog:
  - Don't stop when the plugin directory is empty
  - Fix missing margins on Troubleshoot window
  - Resize all solutions panels horizontally
  - Fix missing priority color for proposed solutions
  - Do not split If sentences to framework and plugins - requires
    setroubleshoot-plugins 3.3.8 at least (rhbz#1210243, rhbz#1322734, rhbz#1115510)
  - Set translation domain for Gtk.Builder() object to have strings
    correctly translated
  - Make labels on GtkButtons translatable
  - Handla all exceptions from do_analyze_logfile()
  - Fix semi-translated messages
  - Update translations
  - Do not catch POSIX signals (rhbz#1366004, rhbz#1419245)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.14-1
changelog:
  - Increase the space for suggested solutions in sealert
  - Highlight suggestions with the highest confidence
  - Remove additional "If " string from plugin messages
  - Fix sealert message for process2 (#1507909)
  - Do not change if_string[0] to lowercase


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.15-1
changelog:
  - Rewrite seapplet to Python3 to use Notify and Gtk 3.0
  - Add setroubleshoot-seappletlegacy with legacy seappletlegacy based on Gtk 2
  - sealert: Finish dbus communication after error


author: Björn Esser <besser82@fedoraproject.org> - 3.3.15-2
changelog:
  - Fix runtime dependency: 's!lipreport!libreport!g' (#1536580)
  - Prefer %global over %define
  - Remove obsolete %defattr(-,root,root,-)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.16-1
changelog:
  - Do not show status_icon when there's no alert (#1543758)
  - Run seapplet only on SELinux enabled system (#1541631)
  - Use context in Gio.AppInfo.launch (#1542156)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.17-1
changelog:
  - Set auto_save_interval to 5 (#1548913,#1523406,#1539180)
  - seapplet: Try send and close notifications (#1541624,#1541719,#1544222,#1539367)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.18-1
changelog:
  - Move sedispatch.conf to /etc/audit/plugins.d/
  - Fix summary and "if" text for AVCs with unknown target path


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.19-2
changelog:
  - Update "missing" scripts to automake-1.15
  - Add active polling for acquiring policy file
  - Fix translation of hex values in AVCs (#1477236, #1709742)
  - require initscripts to ensure that "service" call works properly


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.10-1
changelog:
  - Handle no "allowed_target_types" properly
  - bind_ports: Do not use when there are no allowed_target_types
  - Fix summary and "if" text for AVCs with unknown target path
  - plugins: Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.10-2
changelog:
  - update "file" plugin (#1649818)
  - Update "xen_image" plugin (#1649831)
  - Update qemu_blk_image and qemu_file_image (#1649838)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.12-1
changelog:
  - Use get_package_nvr* functions instead of get_rpm_nvr*
  - Update deprecated type references (#1829306)


author: Nathan Scott <nathans@redhat.com> - 0.6.2-1
changelog:
  - Switch to enabling the Java 8+ maven modules only now.
  - Add unitsofmeasurement prefix to package name.
  - Update to latest upstream sources.


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-7.git0144aa8
changelog:
  - build with %gobuild
  - use scl-ized go-toolset as dep
  - disable i686 builds temporarily because of go-toolset issues


author: Eduardo Santiago <santiago@redhat.com> - 1:0.1.41-3
changelog:
  - patch broken gating tests: improper 'jq' usage, and use 'registry:2.6'
    (instead of :2) to work around broken image pushed by docker


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-6
changelog:
  - fix rhel-shortnames.conf generation (avoid duplicates and records
    with invalid URL)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/2e90a8a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-9
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/a05ddb8)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-10
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/6c0e35a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-11
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/b4210c0)
  - Resolves: #1914884


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-12
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/3abb778)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e72dd9c)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-10
changelog:
  - update shortnames from Pyxis
  - sync with the vendored versions in 3.0-8.5.0
  - bump release to assure upgrade path from 3.0-8.4.0
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.4-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/9921983)
  - update shortnames from Pyxis
  - Related: #2009153


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-1
changelog:
  - update vendored components
  - ship /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release only on non-RHEL and
    CentOS distros
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/ea32394)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/130f32f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.2-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/01e51ce)
  - Related: #1934415


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.3-1
changelog:
  - update to 0.8.3 to also notice and reflect changes caused by internal
    add/modify/modrdn/delete operations


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.4-1
changelog:
  - update to 0.8.4 to fix:
    - problems updating references, particularly those for %referred() (#474478)
    - inability to notice internal add/modify/modrdn/delete operations (really
      this time) (#474426)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.8.5-2
changelog:
  - make the example nsslapd-pluginpath values the same on 32- and 64-bit
    systems, because we can depend on the directory server "knowing" which
    directory to search for the plugins


author: Nalin Dahyabhai <nalin@redhat.com> - 0.15-1
changelog:
  - fix %deref and %referred to fail rather than return a valid-but-empty
    result when they fail to evaluate (reported by Rob Crittenden)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.16-1
changelog:
  - fix NIS server startup problem when no port is explicitly configured and
    we're using portmap instead of rpcbind (#500903)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.17-3
changelog:
  - change buildreq from fedora-ds-base-devel to 389-ds-base-devel, which
    should avoid multilib conflicts from installing both arches of the new
    package (#511504)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.18-1
changelog:
  - update to 0.18
    - add a deref_rf function
    - schema-compat: don't respond to search requests for which there's no backend
    - schema-compat: add the ability to do standalone compat containers


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-1
changelog:
  - update to 0.21
    - schema-compat: don't look at standalone compat containers for a search,
      since we'll already have looked at the group container


author: Nalin Dahyabhai <nalin@redhat.com> - 0.21-2
changelog:
  - make sure we always pull in nss-devel and nspr-devel, and the right
    ldap toolkit for the Fedora or RHEL version


author: Nalin Dahyabhai <nalin@redhat.com> - 0.24-1
changelog:
  - carry our own yp.x, so that we don't get bitten if libc doesn't include
    yp client routines
  - we need rpcgen at build-time now


author: Nalin Dahyabhai <nalin@redhat.com> - 0.25-1
changelog:
  - speed up building compat entries which reference thousands of other entries
    (more of #692690)
  - 389-ds-base is apparently exclusive to x86_64 and %{ix86} on EL, so we have
    to be, too


author: Nalin Dahyabhai <nalin@redhat.com> - 0.26-1
changelog:
  - when building for 389-ds, use libpthread's read-write locks instead of
    NSPR's (part of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.27-1
changelog:
  - when building for 389-ds, use Slapi_RWLocks if they appear to be available
    (the rest of #730394/#730403)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.28-1
changelog:
  - when configured with --with-ldap=openldap, link with -lldap_r rather
    than -lldap (rmeggins, #769107)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.29-1
changelog:
  - add regmatchi/regsubi formatting functions which work like regmatch/regsub,
    but do matching in a case-insensitive manner
  - update NIS map defaults to match {CRYPT} userPassword values in a
    case-insensitive manner so that we also use {crypt} userPassword values
  - fix inconsistencies in the NIS service stemming from using not-normalized DNs
    in some places where it should have used normalized DNs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.30-1
changelog:
  - skip recalculations when the attributes which changed don't factor into
    our calculations (part of #771493)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.33-1
changelog:
  - get more aggressive about skipping unnecessary calculations (most of
    the problem in #771444, though not the approach described there)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34-1
changelog:
  - do entry comparisons ourselves, albeit less throughly, to avoid the worst
    case in pathological cases (more of #771444)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.35-1
changelog:
  - add mmatch/mregmatch[i]/mregsub[i] formatting functions which work like
    match/regmatch[i]/regsub[i], but which can handle and return lists of
    zero or more results (part of #783274)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.36-1
changelog:
  - take steps to avoid making yp_first/yp_next clients loop indefinitely
    when a single LDAP entry produces multiple copies of the same NIS key
    for a given map


author: Nalin Dahyabhai <nalin@redhat.com> - 0.37-1
changelog:
  - fix a compile error on systems where LDAP_SCOPE_SUBORDINATE isn't defined
    (reported by Christian Neuhold)
  - conditionalize whether we have a build dependency on tcp_wrappers (older
    releases) or tcp_wrappers-devel (newer releases)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.39-1
changelog:
  - add a "default" function for trying to evaluate one expression, then
    another, then another... (part of #767372)
  - when creating a compat entry based on a real entry, set an entryUSN based on
    the source entry or the rootDSE (freeipa #864); the "scaffolding" entries
    won't have them


author: Nalin Dahyabhai <nalin@redhat.com> - 0.40-1
changelog:
  - treat padding values passed to the "link" function as expressions to be
    evaluated rather than simply as literal values (part of #767372)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.41-1
changelog:
  - log errors evaluating pad expressions in %link rather than continuing on
    until we hit an arithmetic exception (#810258)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a leak due to us assuming that slapi_mods_add_smod() not taking ownership
    of an smod along with its contents, when it just keeps the contents


author: Nalin Dahyabhai <nalin@redhat.com> - 0.43-1
changelog:
  - reintroduce support for directory server transactions (nhosoi, IPA#3046)
  - control transaction support at run-time, deciding when to do things based
    on the value of the nsslapd-pluginbetxn attribute in the plugin's entry
  - NIS: add default settings for shadow.byname and passwd.adjunct.byname maps


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-1
changelog:
  - add missing newline to a couple of debug log messages
  - note whether or not betxn support is compiled in as part of the
    nsslapd-pluginVersion value we report to the server
  - register callbacks in the same order in both plugins, so that
    their log messages are logged in the same order


author: Nalin Dahyabhai <nalin@redhat.com> - 0.44-2
changelog:
  - set betxn support to be disabled by default on Fedora 17 or EL 5 or older,
    which have versions of IPA < 3.0, per mkosek on freeipa-devel


author: Nalin Dahyabhai <nalin@redhat.com> - 0.46-1
changelog:
  - when checking if we can skip processing for a given change, pay attention to
    whether or not the changes cause the entry to need to be added or removed
    from a map (#912673)
  - check SLAPI_PLUGIN_OPRETURN in post-change hooks, in case the backend failed
    to update things but the server called us anyway


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.5-1
changelog:
  - merge Alexander Bokovoy's patches to
    - teach the schema compatibility plugin to optionally serve user and group
      information retrieved from libc as part of a set of compat entries
    - handle simple bind requests for those entries by calling out to PAM
    - to rewrite the DN of incoming bind requests to compat entries to point
      at the source entries, instead of returning a referral which most clients
      won't handle
  - include IPA-specific docs as docs


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.6-1
changelog:
  - only buildrequire libsss_nss_idmap-devel on releases that included SSSD
    version 1.10 or later, where it first appeared


author: Nalin Dahyabhai <nalin@redhat.com> - 0.47.7-1
changelog:
  - fix building against versions of directory server older than 1.3.0, which
    first introduced slapi_escape_filter_value()


author: Nalin Dahyabhai <nalin@redhat.com> - 0.48-1
changelog:
  - try to gracefully handle failures obtaining internal locks
  - fix locating-by-name of entries with names that require escaping
  - add self-tests for nsswitch and PAM functionality
  - make nsswitch mode properly handle user and group names with commas in them
  - handle attempts to PAM authenticate to compat groups (i.e., with failure)
  - drop the "schema-compat-origin" attribute


author: Nalin Dahyabhai <nalin@redhat.com> - 0.49-1
changelog:
  - add {nis,schema-compat}-ignore-subtree and -restrict-subtree settings,
    which should let us avoid deadlocks when tasks are modifying data in
    the backend database (#1007451)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.50-1
changelog:
  - if we get an EPIPE while registering with rpcbind, try to reconnect and
    retransmit before giving up


author: Nalin Dahyabhai <nalin@redhat.com> - 0.51-1
changelog:
  - fix another request argument memory leak in NIS server (#1040159)
  - fix miscellaneous items found by static analysis


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-1
changelog:
  - correctly reflect whether or not we're built with transaction support in
    the module's nsslapd-pluginVersion attribute
  - fix a couple of should've-used-memmove()-instead-of-memcpy() cases which
    would hit when removing maps or groups of maps (#1043546/#1043638)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.52-3
changelog:
  - remove ExclusiveArch if %{rhel} is 7 or higher, because 389-ds-base gets
    built for everything now (#1055711)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.53-1
changelog:
  - correct the default NIS map settings for hosts.byname and hosts.byaddr,
    from report by Rik Megens
  - fix several problems when hitting out-of-memory conditions, spotted by
    static analysis


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54-1
changelog:
  - Add support for FreeIPA's ID views
  - Allow searching SSSD-provided users as memberUid case-insensitevly
    Fixes bug #1130131


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54.1-1
changelog:
  - support FreeIPA overrides in LDAP BIND callback
  - ignore FreeIPA override searchs outside configured schema compat subtrees


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.54.2-1
changelog:
  - CVE-2015-0283 slapi-nis: infinite loop in getgrnam_r() and getgrgid_r() (#1206049)
  - Make sure nss_sss.so.2 module is used directly
  - Allow building slapi-nis with ID views against 389-ds-base from RHEL7.0/CentOS7.0 releases


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.55-1
changelog:
  - Support external members of IPA groups in schema compat
  - Support bind over ID overrides when uid is not overridden
  - Populate schema compat trees in parallel to LDAP server startup


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-1
changelog:
  - New upstream release
  - Update links to the upstream project page and releases
  - Use extended SSSD API to signal that an entry should not be cached anymore
  - Add support for timeout-based NSS queries with libsss_nss_idmap


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-3
changelog:
  - Do not build on i686 in Fedora 28 or later as 389-ds-base is not available there anymore
  - Resolves rhbz#1556448
  - Remove outdated ExclusiveArch for RHEL6


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.2-5
changelog:
  - Link with libnsl explicitly in Fedora 28 or later
  - Require libnsl2-devel for build
  - Resolves rhbz#1573636


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - Upstream release 0.56.5
  - Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-2
changelog:
  - CVE 2021-3480:  idm:DL1/slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
  - Resolves: rhbz#1944713


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.6-3
changelog:
  - Resolves: rhbz#1958909 - fix regression for scoped searches in compat tree
  - Resolves: rhbz#1978189 - better handle error response from libsss_nss_idmap


author: Jindrich Novy <jnovy@redhat.com> - 0.4.0-1
changelog:
  - update to v.0.4.0
  - sync with fedora spec
  - drop applied CVE-2019-14378 patch
  - Resolves: #1766774


author: Jindrich Novy <jnovy@redhat.com> - 1.1.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.1
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.2
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.3
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.4-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.4
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1.1.6-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.6
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1883490


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> 6.1-1
changelog:
  - New upstream release with many enhancements and bugfixes
  - Metainfo file for AppData/Software Center
  - Drop patch for Fedora bug#803234 which is fixed upstream


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> 6.1-3
changelog:
  - Updated license for AnjaliOldLipi to OFL 1.1
  - Drop the email confirmation on AnjaliOldLipi license


author: Paul Wouters <pwouters@redhat.com> - 1.7.3.2-1
changelog:
  - Resolves rhbz#1404290 socat build failure on rawhide
  - Resolves rhbz#1416597 socat-1.7.3.2 is available
  - Resolves rhbz#1417483 Failed DNS resolution causes SIGSEGV and endless loop
  - Removed obsoleted patch


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


author: Paul Wouters <paul@xelerance.com> - 1.3.0-3
changelog:
  - Initial Fedora package
  - Do not install the .a file
  - Use a separate "opendnssec" user to own /var/sofhsm


author: Paul Wouters <pwouters@redhat.com> - 2.0.0b1-3
changelog:
  - Add support for CKM_RSA_PKCS_OAEP key un/wrapping [Petr Spacek]
  - Use OpenSSL EVP interface for AES key wrapping [Petr Spacek]
  - Fix softhsm2-pk11install buid and post call
  - Do not use --with-objectstore-backend-db (causes issues on i686)
  - Change install directory to /usr/lib*/pkcs11/
  - Install pkcs11 module file
  - Use official upstream tar ball
  - Create ods user to own softhsm/token files
  - Enable migration tools (for softhsm-v1 installs)
  - Add softlink for softhsm-v1 .so (needed for opendnssec's conf.xml)
  - Require p11-kit, nss-tools, for SoftHSM PKCS #11 Module file
  - Copy pk11install.c from coolkey package
  - Enable hardened build
  - Add upstream official source url


author: Paul Wouters <pwouters@redhat.com> - 2.0.0-1
changelog:
  - Resolves: rhbz#1244461 Update to softhsm-2.0.0
  - Resolves: rhbz#1177086 A marked as trusted certificate cannot be written in a softhsmv2 db
  - Resolves: rhbz#1159827 Typo in homedir in /etc/passwd
  - Added global prever to toggle snapshot vs full release build changes


author: Paul Wouters <pwouters@redhat.com> - 2.1.0-1
changelog:
  - Resolves: rhbz#1244461 Updated to 2.1.0
  - Resolves: rhbz#1272423 Softhsm PKCS#11 module not visible to NSS becasue it is not in the search path
  - Resolves: rhbz#1177086 A marked as trusted certificate cannot be written in a softhsmv2 db
  - Resolves: rhbz#1272453 - A marked as CA certificate cannot be written in a softhsmv2 db
  - Removed merged in bug#162 patch
  - Temporarily disable make check because cppunit is broken


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.2.0-2
changelog:
  - Increased the level of messages that go to syslog, thus softhsm
    will no longer write on syslog when it cannot open the shared DB (#1425135)
  - Allow users in the 'ods' group to store their keys in /var/lib/softhsm/tokens/
    while at the same time disallow deleting other users' keys (using the
    sticky bit). Prevent users in the 'ods' group from writing in /var/lib/softhsm.


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 2.3.0-3
changelog:
  - Remove softhsm2-pk11install. Software modules are to be registered with
    p11-kit as in https://fedoraproject.org/wiki/PackagingDrafts/Pkcs11Support (#1541095).


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-1
changelog:
  - Fixes: rhbz#1818877 - rebase to softhsm 2.6.0+
  - Fixes: rhbz#1701233 - support setting supported signature methods on the token


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-3
changelog:
  - Fixes: rhbz#1834909 - softhsm use-after-free on process exit
  - Synchronize the final fix with Fedora


author: Jake Hunsaker <jhunsake@redhat.com> - 1.6-1
changelog:
  - Drop paramiko dependency, use OpenSSH ControlPersist instead
  - Layered cluster profiles can now accept base profile options
  - Debian/Ubuntu hosts now supported


author: Jake Hunsaker <jhunsake@redhat.com> - 1.7-1
changelog:
  - New upstream release
  - Overhaul mechanism of execution of sosreport in containers
  - Added RHCOS support
  - Added a 'none' cluster type


author: Jake Hunsaker <jhunsake@redhat.com> - 1.7-2
changelog:
  - Fix 'none' cluster type enablement
  - Update RHCOS image to RHEL 8 version
  - Fix execution from within a container


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-1
changelog:
  - Update to 1.9.2 (#961876).
  - Modernize spec file.
  - Makefile.am handles mmx and sse flags well, so no need patch 01 and sed anymore.
  - Patch 02 disabled, I hope we already have asm fixed on X86_64.


author: Sérgio Basto <sergio@serjux.com> - 1.9.2-2
changelog:
  - Add license tag.
  - Add back sed on -O3 .
  - Not modify soundtouch_config.h because looks correct, just have one line !.


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-10
changelog:
  - Fixed CVE-2018-11805
  - Resolves: rhbz#1787514
  - Fixed CVE-2020-1930
  - Resolves: rhbz#1820649
  - Fixed CVE-2020-1931
  - Resolves: rhbz#1820650


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2.0-1
changelog:
  - update to 1.2.0
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - include soname in file list
  - use license macro


author: Uri Lublin <uril@redhat.com> - 8.3-1
changelog:
  - mingw-virt-viewer 9.0-1
  - spice-usbdk-win   1.0-22
  - mingw-spice-gtk   0.38-4
  - mingw-libgovirt   0.3.7-2
  - mingw-spice-protocol 0.14-2
    Related:  rhbz#1841952, rhbz#1179070, rhbz#1428402
    Related:  rhbz#1575043, rhbz#1640058, rhbz#1793019
    Related:  rhbz#1841951
    Related:  rhbz#1842532
    Related:  rhbz#1841949
    Related:  rhbz#1773899
    Related:  rhbz#1741202, rhbz#1741252


author: Uri Lublin <uril@redhat.com> - 8.4-1
changelog:
  - mingw-virt-viewer 9.0-3
  - mingw-libgovirt   0.3.7-5
  - mingw-spice-gtk   0.38-5
    Related: rhbz#844683
    Related: rhbz#1839104 rhbz#1874740 rhbz#1017261
    Related: rhbz#1918459


author: Uri Lublin <uril@redhat.com> - 8.5-5
changelog:
  - mingw-virt-viewer 9.0-6
    Resolves: rhbz#1997058
    Resolves: rhbz#1918877
    Related:  rhbz#1939111
    Related:  rhbz#1942919


author: Victor Toso <victortoso@redhat.com> - 0.38-2
changelog:
  - Brings some post releases fixes and disables celt051 that is
    deprecated in spice-protocol 0.14.2
  - Possibly related to rhbz#1688737 rhbz#1746239
    Related: rhbz#1817471
  - Fix mouse pointer on relative mouse mode
    Resolves: rhbz#1674311
  - Handle detailed errors from guest agent
    Related:  rhbz#1520393


author: Uri Lublin <uril@redhat.com> - 0.38-4
changelog:
  - Fix some static analyzer issues
    Resolves: rhbz#1839104
  - Fix spice-usbredir-redirect-on-connect
    Resolves: rhbz#1874740


author: Julien Ropé <jrope@redhat.com> - 0.20.0-3
changelog:
  - Fix mouse problems in multi-monitor environments under Wayland
    Resolves: rhbz#1790904 rhbz#1824610


author: Uri Lublin <uril@redhat.com> - 0.10.0-4
changelog:
  - Reset properly state of pending large messages upon disconnection
    Resolves rhbz#1548419
  - Return detailed message for file transfer
    Resolves rhbz#1520393


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-6
changelog:
  - Resolves: #1679526 - Missing detailed configuration file
  - Resolves: #1703117 - RHEL 7 to 8 fails with squid installed because dirs
    changed to symlinks
  - Resolves: #1691741 - Squid cache_peer DNS lookup failed when not all lower
    case
  - Resolves: #1683527 - "Reloading" message on a fresh reboot after enabling
    squid


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-8
changelog:
  - Resolves: # 1738485 - CVE-2019-12527 squid:4/squid: heap-based buffer overflow
    in HttpHeader::getAuth


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-9
changelog:
  - Resolves: #1738583 - CVE-2019-12525 squid:4/squid: parsing of header
    Proxy-Authentication leads to memory corruption
  - Resolves: #1828369 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  - Resolves: #1828370 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-1
changelog:
  - new version 4.11
  - libsystemd integration
  - Resolves: #1829467 - squid:4 rebase
  - Resolves: #1828378 - CVE-2019-12521 squid:4/squid: off-by-one error in
    addStackElement allows for a heap buffer overflow and a crash
  - Resolves: #1828377 - CVE-2019-12520 squid:4/squid: improper input validation
    in request allows for proxy manipulation
  - Resolves: #1828375 - CVE-2019-12524 squid:4/squid: improper access restriction
    in url_regex may lead to security bypass
  - Resolves: #1820664 - CVE-2019-18860 squid: mishandles HTML in the host
    parameter to cachemgr.cgi which could result in squid behaving in unsecure way
  - Resolves: #1802514 - CVE-2020-8449 squid:4/squid: Improper input validation
    issues in HTTP Request processing
  - Resolves: #1802513 - CVE-2020-8450 squid:4/squid: Buffer overflow in a Squid
    acting as reverse-proxy
  - Resolves: #1802512 - CVE-2019-12528 squid:4/squid: Information Disclosure
    issue in FTP Gateway
  - Resolves: #1771288 - CVE-2019-18678 squid:4/squid: HTTP Request Splitting
    issue in HTTP message processing
  - Resolves: #1771283 - CVE-2019-18679 squid:4/squid: Information Disclosure
    issue in HTTP Digest Authentication
  - Resolves: #1771280 - CVE-2019-18677 squid:4/squid: Cross-Site Request Forgery
    issue in HTTP Request processing
  - Resolves: #1771275 - CVE-2019-12523 squid:4/squid: Improper input validation
    in URI processor
  - Resolves: #1771272 - CVE-2019-18676 squid:4/squid: Buffer overflow in URI
    processor
  - Resolves: #1771264 - CVE-2019-12526 squid:4/squid: Heap overflow issue in URN
    processing
  - Resolves: #1738581 - CVE-2019-12529 squid: OOB read in Proxy-Authorization
    header causes DoS


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-2
changelog:
  - Resolves: #1853130 - CVE-2020-15049 squid:4/squid: request smuggling and
    poisoning attack against the HTTP cache
  - Resolves: #1853136 - CVE-2020-14058 squid:4/squid: DoS in TLS handshake


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-3
changelog:
  - Resolves: #1871705 - CVE-2020-24606 squid: Improper Input Validation could
    result in a DoS
  - Resolves: #1871702 - CVE-2020-15811 squid: HTTP Request Splitting could result
    in cache poisoning
  - Resolves: #1871700 - CVE-2020-15810 squid: HTTP Request Smuggling could result
    in cache poisoning


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-5
changelog:
  - Resolves: #1944261 - CVE-2020-25097 squid:4/squid: improper input validation
    may allow a trusted client to perform HTTP Request Smuggling


author: Stephen Gallagher <sgallagh@redhat.com> - 2.3.3-5
changelog:
  - Autodetect the minimum key strength from the system security level.
  - Autodetect the hash algorithm to use from the system security level.
  - Disallow setting a key strength below the system minimum.
  - Resolves: rhbz#1653323


author: Clark Williams <williams@redhat.com> - 1.7-1
changelog:
  - rework detect_task_format and buffer_size logic
  - make CFLAGS for local compile match rpmbuild CFLAGS


author: Clark Williams <williams@redhat.com> - 1.8-1
changelog:
  - Fix Readiness Protocol Mismatch with systemd
  - test01:  update to use buildin atomic operations
  - test01: add throttling check


author: Clark Williams <williams@redhat.com> - 1.9-1
changelog:
  - Set starvation threshold default to 30 seconds
  - rework read buffer allocation to properly find page size
  - Add the -g/--granularity option
  - Change the default granularity to five seconds
  - Implement idle detection
  - Implement the single-threaded mode
  - Add HRTICK_DL support


author: Clark Williams <williams@redhat.com> - 1.10-1
changelog:
  - utils: Fix bounds check on cpu and end_cpu variables
  - stalld: Support denylisting of tasks in stalld
  - src/utils: use right argument for warning printf


author: Clark Williams <williams@redhat.com> - 1.11-1
changelog:
  - redhat/stalld.spec: pick up gating test version for changelog
  - utils.c: set daemon umask to restrict global write/execute (1934586)
  - hardening fixes from coverity scan (1934590)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.12-1
changelog:
  - stalld.8: fix diff cruft left in manpage source
  - stalld.c: clean up handling of nr_running
  - stalld.c: remove duplicate parameter to fill_waiting_task() (1934582)
  - stalld.service: Run stalld as sched_fifo via systemd
  - stalld: Add error handling in get_cpu_idle_time() (1966259)
  - packaging: clean up Makefiles and rpm specfile (1972806)
  - stalld: Always print current function for info messages
  - stalld: Always print current function for warn messages
  - stalld: Always print current function for die messages
  - utils: change PATHMAX to 4096 (1934581)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.13-1
changelog:
  - stalld: Fix log message on boost_cpu_starving_vector()
  - stalld: Add the overload control to the single-threaded mode
  - stalld: Add the adaptive mode option
  - stalld: Use the last mode set in the cmdline
  - stalld: Fallback to the adaptive mode if force_fifo is selected
  - stalld: Make single-threaded mode the default one (1920041)
  - stalld.service: Always restart stalld on exit
  - utils.c: Fail if user is not root
  - utils.c: Make the path to sched_debug path dynamic (1977663)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.14.1-1
changelog:
  - stalld: Coding style cleanup
  - stalld: spaces in place of <TAB>
  - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off()
  - throttling: Check open() on turn_off_rt_throttling
  - throttling: Adjust variables in restore_rt_throttling()
  - stalld.c: utils.c: Remove complex assignments from variable declarations
  - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them
  - stalld: Adjust variables in parse_old_task_format()
  - utils.c: Use MAX_PATH for pidfile
  - stalld.c: Remove variable declaration from the middle of  the function
  - stalld: Respect -l option in single threaded mode (1983100)
  - utils: s/try_to_open_file/check_file_exists/
  - utils: use check_file_exists in setup_hr_tick()
  - utils: Check for the new sched_features path


author: Parag Nemade <pnemade AT redhat DOT com> - 1.1.0-7
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove buildroot which is optional now
  - Remove removal of buildroot in %install
  - Remove group tag


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-2
changelog:
  - Update to 2.0.0
  - Allow the user to interact with the daemon under conditions
    where a pool, filesystem, or blockdev is not fully functional.
  - Resolves: rhbz#1730493
  - Establish an environment variable for D-Bus timeout parameter.
  - Resolves: rhbz#1678631
  - Return detailed error messages on all error-appearing user actions.
  - Resolves: rhbz#1642393
  - Resolves: rhbz#1687869
  - Exit with error code 0 and error message on stderr for all command-line
    parsing errors.
  - Resolves: rhbz#1747564
  - Show more complete error messages on D-Bus method call failures.
  - Resolves: rhbz#1717460
  - Add version numbers to required packages
  - Resolves: rhbz#1717489


author: Dennis Keefe <dkeefe@redhat.com> - 2.1.1-6
changelog:
  - Update to 2.1.1
  - Resolves: rhbz#1791472
  - Update RPM spec file
  - Resolves: rhbz#1827360
  - Error messages when creating a pool are more helpful
  - Resolves: rhbz#1734496
  - Support per-pool encryption of devices that form a pools data tier
  - Resolves: rhbz#1768580
  - Improve error handling on partial unlock failure of encrypted pools
  - Resolves: rhbz#1855520


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931670
  - Remove requirement for python3-semantic_version
  - Resolves: rhbz#1972355
  - Remove unnecessary keyutils Requires line


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-4
changelog:
  - Update to 2.0.0
  - Resolves: rhbz#1760906
  - Fix a bug where last update time for variable length metadata was not set
    properly on startup:
  - Resolves: rhbz#1720399
  - Specify path of PID file as "/run/stratisd.pid" instead of 
    "/var/run/stratisd.pid".
  - Resolves: rhbz#1754649
  - For a particular log entry, reduce log level from INFO to DEBUG and make the
    log message more detailed:
  - Resolves: rhbz#1680052


author: Dennis Keefe <dkeefe@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Resolves: rhbz#1791473
  - Update Stratis RPM Spec File
  - Resolves: rhbz#1828487
  - Support per-pool encryption of the devices that form a pool's data tier
  - Resolves: rhbz#1768580
  - Improve systemd unit file description
  - Resolves: rhbz#1756525


author: Dennis Keefe <dkeefe@redhat.com> - 2.3.0-2
changelog:
  - Update to 2.3.0
  - Resolves: rhbz#1885328
  - Stratis devices inhabit an existing root directory path
  - Resolves: rhbz#1798244
  - Add Clevis Support
  - Resolves: rhbz#1868100
  - Improve stratisd log levels
  - Resolves: rhbz#1757976


author: Bryan Gurney <bgurney@redhat.com> - 2.4.0-3
changelog:
  - Update to 2.4.0
  - Resolves: rhbz#1931671
  - Improve stratis by adding Multi-threading
  - Resolves: rhbz#1927485
  - Dump stratis configuration on demand or in debug
  - Resolves: rhbz#1735475
  - Add noalign option to XFS creation on MDV
  - Resolves: rhbz#1908318
  - Cap thinpool metadata device size at devicemapper-set limit
  - Resolves: rhbz#1707461


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931671
  - Ensure that binaries are installed with proper features enabled
  - Split dracut modules out to subpackage
  - Add additional dependencies in dracut module


author: Petr Viktorin <pviktori@redhat.com> - 1.15.0-8
changelog:
  - Run sanity-check.py with Python 3
    https://bugzilla.redhat.com/show_bug.cgi?id=1595816
    https://bugzilla.redhat.com/show_bug.cgi?id=1610038


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - 1776461: Rebase subscription-manager-migration-data component to the latest
    upstream branch for RHEL 8.2.0 (csnyder@redhat.com)
  - 1776461: Update product certs to include those for 8.2 (csnyder@redhat.com)


author: Joe Orton <jorton@redhat.com> - 1.10.0-6
changelog:
  - really disable Berkeley DB support if required by bcond
  - add build conditional to disable swig binding subpackages


author: Lubos Uhliarik <luhliari@redhat.com> - 1.10.2-2
changelog:
  - Resolves: #1733443 - CVE-2019-0203 subversion:1.10/subversion: remote
    unauthenticated denial-of-service in subversion svnserve


author: Joe Orton <jorton@redhat.com> - 1.14.0~rc2-2
changelog:
  - switch subpackages to lock-step requires on -libs rather than subversion
  - fixed the build-requires (Jitka Plesnikova)


author: Richard Jones <rjones@redhat.com> - 2.5-2
changelog:
  - New upstream release 2.5.
  - Remove BR upx (not needed by upstream).
  - Two more scripts / manpages.


author: Richard Jones <rjones@redhat.com> - 2.7-2
changelog:
  - New upstream version 2.7.
  - febootstrap-supermin-helper shell script rewritten in C for speed.
  - This package contains C code so it is no longer 'noarch'.
  - MAKEDEV isn't required.


author: Richard Jones <rjones@redhat.com> - 2.8-0.2
changelog:
  - New pre-release version of 2.8.
    + Note this is based on 2.7 + mailing list patches.
  - New BRs on mke2fs, libext2fs, glibc-static.


author: Richard Jones <rjones@redhat.com> - 2.10-1
changelog:
  - New upstream version 2.10.
  - Adds -u and -g options to febootstrap-supermin-helper which are
    required by virt-v2v.


author: Richard Jones <rjones@redhat.com> - 2.11-1
changelog:
  - New upstream version 2.11.
  - Fixes "ext2fs_mkdir .. No free space in directory" bug which affects
    libguestfs on rawhide.


author: Richard Jones <rjones@redhat.com> - 3.0-2
changelog:
  - New upstream version 3.0 (note this is incompatible with 2.x).
  - Fix upstream URLs.
  - fakeroot, fakechroot no longer required.
  - insmod.static is required at runtime (missing dependency from earlier).
  - The only programs are 'febootstrap' and 'febootstrap-supermin-helper'.
  - BR ocaml, ocaml-findlib-devel.
  - No examples are provided with this version of febootstrap.


author: Richard Jones <rjones@redhat.com> - 3.3-4
changelog:
  - Split package into febootstrap (for building) and febootstrap-supermin-helper
    (for running).  Note that febootstrap depends on febootstrap-supermin-helper,
    but you can install febootstrap-supermin-helper on its own.


author: Richard Jones <rjones@redhat.com> - 3.15-1
changelog:
  - New upstream version 3.15.
  - This version includes root=<device> support, needed for libguestfs
    with virtio-scsi.
  - Remove upstream patch.


author: Richard W.M. Jones <rjones@redhat.com> - 1:3.21-2
changelog:
  - Add upstream patch to drop supplemental groups (RHBZ#902476).
  - Remove 'Group:' RPM headers which are no longer necessary.
  - Remove some commented-out requirements.


author: Richard W.M. Jones <rjones@redhat.com> - 4.1.1-1
changelog:
  - New upstream version 4.1.1.
  - The program has been renamed 'supermin' from 'febootstrap'.
  - Obsolete, but don't Provide because supermin is not a compatible replacement.
  - Use '_isa' to specify architecture of supermin-helper subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 4.1.1-2
changelog:
  - Add upstream patch to ignore ghost non-regular files.
  - This fixes builds on Fedora 20 because the filesystem package has
    been changed so /var/lock and /var/run are marked as ghost.


author: Richard W.M. Jones <rjones@redhat.com> - 4.1.3-1
changelog:
  - New upstream version 4.1.3.
  - Remove patch which is now upstream.
  - Add examples directory to documentation.


author: Richard W.M. Jones <rjones@redhat.com> - 4.1.5-1
changelog:
  - New upstream version 4.1.5.
  - Has (optionally) a new command line syntax.
  - Supports device trees for ARM.


author: Richard W.M. Jones <rjones@redhat.com> - 4.1.6-2
changelog:
  - New upstream version 4.1.6.
  - Should fix all autotools brokenness.
  - Man pages are now all in section 1.
  - Remove patch which is now upstream.
  - +BR /usr/bin/execstack (from prelink).


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.0-2
changelog:
  - New upstream version 5.1.0.
  - Note this is effectively a rewrite, and is not completely compatible.
  - There is no separate 'supermin-helper' subpackage any more.
  - Requires rpm instead of yum.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.0-3
changelog:
  - Add BR yum-utils (for yumdownloader).
  - Add upstream patch which stops duplicate packages appearing.


author: Pino Toscano <ptoscano@redhat.com> - 5.1.10-2
changelog:
  - Update to upstream commit d78c898c7e2bc5f12cbebef98b95a7908d9120f1.
  - BR rpm-devel, since it is now used instead of invoking rpm.
  - BR automake and autoconf, and run autoreconf (configure.ac is modified by
    the patches).


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.12-6
changelog:
  - Enable hardening flags by building the static 'init' specially
    before the main build.
  - Use _smp_mflags.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.13-4
changelog:
  - Pull in all upstream patches since 5.1.13.
  - Choose providers better (RHBZ#1266918).
  - Use autopatch.
  - Explicitly depend on pod2html.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-1
changelog:
  - New upstream version 5.1.15.
  - Remove all patches, since they are now included in this version.
  - Enable dietlibc, remove glibc-static, xz-static, zlib-static.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-2
changelog:
  - Add all upstream patches since 5.1.15 was released.
  - These should improve boot performance and initrd size.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.16-2
changelog:
  - New upstream version 5.1.16.
  - Drop all patches since they are upstream.
  - Depend on systemd-udev to work around RHBZ#1331012.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.17-1
changelog:
  - New upstream release 5.1.17.
  - Check signature on the tarball before unpacking it.
  - Remove patches, all upstream.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.18-4
changelog:
  - Fix supermin crash with truncated vmlinuz file (RHBZ#1477758).
  - Include all upstream patches since 5.1.18.


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Bastien Nocera <bnocera@redhat.com> - 1.1-1
changelog:
  + switcheroo-control-1.1-1
  - Update to 1.1
  - Don't throw errors when the machine doesn't have dual-GPU (#1391212)


author: Michal Sekletár <msekleta@redhat.com> - 11.7.3-2
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#1624177)


author: <msekleta@redhat.com> - 11.7.3-6
changelog:
  - Don't trigger autofs mounts when running sadc (#1954793)
  - sar: Add missing %gnice CPU value for tickless CPU (#1908996)


author: Frank Ch. Eigler <fche@redhat.com> - 4.4-2
changelog:
  - rhbz1898288: stability for exhausted UTRACE_TASK_WORK_POOL
  - rhbz1873492 related: mokutil parser robustness for RH keys


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018.2-7
changelog:
  - Selectively build python2 or python3 based on current version.
  - Don't use pathfix.py as it fails prep on RHEL when building on systems
    do not have python installled.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - separate package for libpcap.
  - update tcpdump to 3.4, libpcap to 0.4.
  - added arpwatch (but disabled for now)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include A. Kuznetsov's patches to libpcap/tcpdump.
  - added arpsnmp to package (#3258).
  - arp2ethers written for different of awk (#4326).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - remove sparc64 SIOCGIFNAME hack, not needed with (at least) kernel 2.2.12-40.
  - upgrade to ANK ss991030 snapshot with pcap magic fix (#6773).
  - add getprotobyname lookup (#6725).
  - getservbyname port lookup appears functional (#7569).
  - remove uid 2090 backdoor (sorry Dave) (#7116).


author: Matt Wilson <msw@redhat.com>
changelog:
  - source /etc/init.d/functions
  - back out /etc/init.d/arpwatch, place file in /etc/rc.d
  - move initscript to /etc/init.d
  - changed initscript to use start() and stop() functions
  - added condrestart to init script
  - added %post %preun %postun scripts to register arpwatch script
  - added Prereq: for all things needed in post/preun/postun


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - eliminate more buffer overflows (from FreeBSD) (#20069).
  - 802.1q ether type incorrect (#19850).
  - add -u flag to drop arpwatch privs (#19696).


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - tcpdump: spice up the manpage about interfaces
  - tcpdump: add 'all' and 'any' keywords to -i, saner default behaviour.
  - upgrade arpwatch to 2.1a10


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Initial packaging with latest tcpdump.org CVS tcpdump-3.6 and libpcap-0.6.
  - add earlier print-domain.c, the latest is segfaulting
  - don't unnecesessarily include snprintf.o, it didn't compile with gcc 2.96 anyway
  - don't use savestr, require openssl, tweak tweak tweak
  - add tcpslice, patch it a bit for egcs detection


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Update to 20010108 CVS, disable some upstreamed patches.
  - Change some additional .1 pages to .8.
  - Add droproot patch, some --usage and man page fixes.


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Make SMB printing output a lot more quiet unless in verbose mode.
  - Make -n resolve port/protocol numbers but not hostnames, -nn for no
    resolving at all
  - Separate droproot patch from a more generic man/usage fix one
  - Add non-promiscuous mode -by default patch, but don't apply it by default


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - use --enable-ipv6
  - Add two patches from CVS to enhance 802.2 printing, and more importantly,
    to be able to specify 'no stp'


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed EINTR stopping for e.g. SIGSTOP. (#22008)
  - added -u option for tcpdump (#20231)
  - new arpwatch version (#23172)
  - added "all" and "one" interface for -i (#20907)
  - added arpwatch sysconfig (#23172)


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - fix building of tcpslice on glibc 2.2.2 (time.h)
  - disable /etc/init.d requirement and fix %post scripts in arpwatch


author: Harald Hoyer <harald@redhat.de> 12:3.6.2-10
changelog:
  - took old purge patch for filters
  - fixed #54225,#58346
  - drop root by default #49635
  - fixed #54593
  - fixed #57711


author: Harald Hoyer <harald@redhat.com> - 14:3.8.2-1
changelog:
  - update to tcpdump-3.8.2, libpcap-0.8.2, arpwatch-2.1a13
  - patched tcpdump configure for gcc34 optimizations
  - removed obsolete patches


author: Ivana Varekova <varekova@redhat.com> - 14:3.8.2-9
changelog:
  - added arpsnmp options to specify sender and recipient
    and corrected arpwatch and arpsnmp man pages (#70386)


author: Martin Stransky <stransky@redhat.com> - 14:3.9.3-1
changelog:
  - New upstream version - 3.9.3
  - fix for #164227 (buffer overflow)
  - fix for #164230 (missing debug info)


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.4-9
changelog:
  - fix processing of Prism and AVS headers (#206686)
  - fix arp2ethers script
  - update ethercodes.dat
  - move pcap man page to devel package


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.7-1
changelog:
  - update to 3.9.7
  - with -C option, drop root privileges before opening first savefile (#244860)
  - update tcpslice to 1.2a3
  - include time patch from Debian to fix tcpslice on 64-bit architectures


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.8-5
changelog:
  - update config.{guess,sub} when building tcpslice
  - remove -D_GNU_SOURCE from CFLAGS
  - disable libsmi check in configure


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:4.0.0-1.20090818git832d2c
changelog:
  - update to post 4.0.0 git snapshot 20090818git832d2c
  - print retrans and reachable times in ICMPv6 as milliseconds (#474264)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.1.1-3
changelog:
  - Fix manpage (#663739)
  - Fix improper handling of bad date format in tcpslice (#684005)
  - Spec file clean up


author: Michal Sekletar <msekleta@redhat.com> - 14:4.2.0-1
changelog:
  - updated to 4.2.0
  - added new source file ppi.h, missing in upstream tarball
  - disabled make check because of missing .pcap files in testsuite
  - dropped unnecessary patches


author: Michal Sekletar <msekleta@redhat.com> - 14:4.6.2-2
changelog:
  - fix for CVE-2014-8767 (#1165160)
  - fix for CVE-2014-8768 (#1165161)
  - fix for CVE-2014-8769 (#1165162)


author: Michal Sekletar <msekleta@redhat.com> - 14:4.7.3-1
changelog:
  - rebase to 4.7.3 (#1201573)
  - contains fixes for CVE-2015-0261 CVE-2015-2154 CVE-2015-2153 CVE-2015-2155 (#1201799,#1201792,#1201795,#1201797)


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-4
changelog:
  - Removing build-time dependency on sharutils(rhbz#1587877)
  - Changing git dependency to smaller git-core


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-6
changelog:
  - Resolves: #1715423 - tcpdump pre creates user and groups unconditionally
  - Resolves: #1655622 - CVE-2018-19519 Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.3-2
changelog:
  - Resolves: #1860216 - tcpdump can not parse mptcp options
  - Resolves: #1901635 - ppp decapsulator can be convinced to allocate a large amount of memory
  - Adding tedude test to gating


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 6.20.00-5
changelog:
  - Added multiple upstream patches:
      tcsh-6.20.00-004-do-not-use-old-pointer-tricks.patch
      tcsh-6.20.00-005-reset-fixes-numbering.patch
      tcsh-6.20.00-006-cleanup-in-readme-files.patch
      tcsh-6.20.00-007-look-for-tgetent-in-libtinfo.patch
      tcsh-6.20.00-008-guard-ascii-only-reversion.patch
      tcsh-6.20.00-009-fix-regexp-for-backlash-quoting-tests.patch (bug #1424082)


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-69
changelog:
  - Resolves: #1445259 - telnet won't build with latest gcc
  - added note about address resolution in manpage


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-73
changelog:
  - Resolves: #1602711 - Please review important issues found by covscan
  - Resolves: #1637085 - Option -i is missing in telnet in el8 but is available in el7


author: Parag Nemade <pnemade AT redhat DOT com> - 0.1-20
changelog:
  - Resolves:rh#921852 - Four culmus subpackages are not listed in build require
  - Added BR: and R: for the following packages
  - culmus-hadasim-clm-fonts, culmus-simple-clm-fonts
  - culmus-stamashkenaz-clm-fonts, culmus-stamsefarad-clm-fonts


author: Parag Nemade <pnemade AT redhat DOT com> - 0.5.0-9
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove group tag
  - Replace %define with %global


author: David Hill <djh[at]ii.net>
changelog:
  - update to latest CVS (0.4a)
  - update Enigmail to 0.82.2
  - alter mozconfig for new build requirements
  - add missing BuildReq (#987)


author: Warren Togami <warren@togami.com> 0:0.4-0.fdr.3
changelog:
  - open-browser.sh release 3
  - patch broken /usr/bin/mozilla script during install
  - dir ownership
  - XXX: Source fails build on x86_64... fix later


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.1
changelog:
  - update Enigmail to 0.83.3
  - use official source tarball (after removing the CRLFs)
  - package renamed to thunderbird


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.4
changelog:
  - add Mozilla x86_64 patch (Oliver Sontag)
  - Enigmail source filenames now include the version
  - modify BuildRoot


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.6
changelog:
  - update open-browser script, modify BuildRequires (Warren)
  - add Blizzard's x-remote patch
  - initial attempt at x-remote-enabled startup script


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.8
changelog:
  - minor improvements to open-browser.sh and startup script
  - update to latest version of Blizzard's x-remote patch


author: David Hill <djh[at]ii.net> 0.6-0.fdr.0.20040415
changelog:
  - update to latest CVS, update mozconfig and %build accordingly
  - update to Enigmail 0.83.6
  - remove x-remote and x86_64 patches
  - build with -Os


author: David Hill <djh[at]ii.net> 0.6-0.fdr.3
changelog:
  - installation directory now versioned
  - allow root to run the program (for installing extensions)
  - remove unnecessary %pre and %post
  - remove separators, update mozconfig and launch script (M. Schwendt, #1460)


author: David Hill <djh[at]ii.net> 0.7-0.fdr.0
changelog:
  - update to 0.7
  - temporarily disable Enigmail 0.84.1, make ftp links work (#1634)
  - specify libdir, change BR for apt (V. Skyttä, #1617)


author: David Hill <djh[at]ii.net> 0.7-0.fdr.1
changelog:
  - re-enable Enigmail 0.84.1
  - add gcc-3.4 patch (Kaj Niemi)
  - use official branding (with permission)


author: David Hill <djh[at]ii.net> 0.7.2-0.fdr.0
changelog:
  - update to 0.7.2, just because it's there
  - update gcc-3.4 patch (Kaj Niemi)
  - add EM registration patch and remove instdir hack


author: David Hill <djh[at]ii.net> 0.7.3-0.fdr.1
changelog:
  - update to Thunderbird 0.7.3 and Enigmail 0.85.0
  - remove XUL.mfasl on startup, add Debian enigmail patches
  - add Xvfb hack for -install-global-extension


author: Warren Togami <wtogami@redhat.com> 0.7.3-3
changelog:
  - rawhide import
  - apply NetBSD's freetype 2.1.8 patch
  - apply psfonts patch
  - remove BR on /usr/bin/ex, breaks beehive


author: Christopher Aillon <caillon@redhat.com> 0.8.0-1
changelog:
  - Update to 0.8.0
  - Remove enigmail
  - Update BuildRequires
  - Remove gcc34 and extension manager patches -- they are upstreamed.
  - Fix for gnome-vfs2 error at component registration


author: Christopher Blizzard <blizzard@redhat.com> 0.8.0-8
changelog:
  - Pull over patches from firefox build:
    - disable default application dialog
    - don't include software update since it doesn't work
    - make external app support work


author: Christopher Aillon <caillon@redhat.com> 1.0.2-3
changelog:
  - Don't have downloads "disappear" when downloading to desktop (#139015)
  - Fix for some more cursor issues in textareas (149991, 150002, 152089)
  - Add upstream patch to fix bidi justification of pango
  - Add patch to fix launching of helper applications
  - Add patch to properly link against libgfxshared_s.a
  - Fix multilib conflicts


author: Kristian Høgsberg <krh@redhat.com> 1.0.2-7
changelog:
  - Add firefox-1.0-pango-cairo.patch to get rid of the last few Xft
    references, fixing the "no fonts" problem.


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.3.rc1
changelog:
  - Once again, disable ppc64 because of a new issue.
    See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175944

  - Use the system NSS libraries
  - Build on ppc64


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.6.rc1
changelog:
  - Fix crash when deleting highlighted text while composing mail within
    plaintext editor with spellcheck enabled.


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.5-5
changelog:
  - Update nopangoxft.patch
  - Fix rendering of MathML thanks to Behdad Esfahbod.
  - Update start page text to reflect the MathML fixes.
  - Enable pango by default on all locales
  - Build using -rpath
  - Re-enable GCC visibility


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.7-2
changelog:
  - Fix crash when changing gtk key theme
  - Prevent UI freezes while changing GNOME theme
  - Remove verbiage about pango; no longer required by upstream.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.8-1
changelog:
  - Update to 1.5.0.8
  - Allow choosing of download directory
  - Take the user to the correct directory from the Download Manager.
  - Patch to add support for printing via pango from Behdad.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.9-7
changelog:
  - Updated cursor position patch from tagoh to fix issue with "jumping"
    cursor when in a textfield with tabs.


author: Christopher Aillon <caillon@redhat.com> 2.0.0.0-0.5.rc1
changelog:
  - Fix the desktop file
  - Clean up the files list
  - Remove the default client stuff from the pref window


author: Christopher Aillon <caillon@redhat.com> 2.0.0.6-4
changelog:
  - Fix crashes when using GTK+ themes containing a gtkrc which specify
    GtkOptionMenu::indicator_size and GtkOptionMenu::indicator_spacing


author: Jan Horak <jhorak@redhat.com> - 3.0-2.beta2
changelog:
  - Fixed clicked link does not open in browser (#489120)
  - Fixed missing help in thunderbird (#488885)


author: Remi Collet <fedora@famillecollet.com> - 3.1.6-8
changelog:
  - fix cairo + nspr required version
  - lightning: fix thunderbird version required
  - lightning: fix release (b3pre)
  - lightning: clean install


author: Christopher Aillon <caillon@redhat.com> - 3.1.9-7
changelog:
  - Make gvfs-open launch a compose window (salimma)
  - Spec file cleanups (salimma, caillon)
  - Split out mozilla crashreporter symbols to its own debuginfo package (caillon)


author: Jan Horak <jhorak@redhat.com> - 8.0-2
changelog:
  - Enable Mozilla's crash reporter again for all archs
  - Temporary workaround for langpacks
  - Disabled addon check UI (#753551)


author: Martin Stransky <stransky@redhat.com> - 14.0-4
changelog:
  - Removed StartupWMClass (rhbz#844863)
  - Fixed -g parameter
  - Removed thunderbird-devel before packing to avoid debugsymbols duplicities (rhbz#823940)


author: Martin Stransky <stransky@redhat.com> - 24.2.0-4
changelog:
  - Fixed rhbz#1024232 - thunderbird: squiggly lines used
    for spelling correction disappear randomly


author: Martin Stransky <stransky@redhat.com> - 60.7.2-3
changelog:
  - Rebuild to fix rhbz#1725919 - Thunderbird fails to authenticate
    with gmail with ssl/tls and OAuth2.


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
    Resolves: bz#1880985
  - Backport fix to allow Tigervnc use boolean values in config files
    Resolves: bz#1883415


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-2
changelog:
  - Revert removal of vncserver
    Resolves: bz#1897504
  - Correctly start vncsession as a daemon
    Resolves: bz#1897498


author: Adam Tkac <atkac redhat com> 0.0.90-0.4.20090403svn3751
changelog:
  - update to r3751
  - patches merged
    - tigervnc-xclients.patch
    - tigervnc-clipboard.patch
    - tigervnc-rh212985.patch
  - basic RandR support in Xvnc (resize of the desktop)
  - use built-in libjpeg (SSE2/MMX accelerated encoding on x86 platform)
  - use Tight encoding by default
  - use TigerVNC icons


author: Adam Tkac <atkac redhat com> 0.0.90-0.6.20090427svn3789
changelog:
  - update to r3789
    - tigervnc-rh494801.patch merged
  - tigervnc-newfbsize.patch is no longer needed
  - fix problems when vncviewer and Xvnc run on different endianess (#496653)
  - UltraVNC and TightVNC clients work fine again (#496786)


author: Adam Tkac <atkac redhat com> 0.0.90-0.10
changelog:
  - rebuild against 1.6.1.901 X server (#497835)
  - disable i18n, vncviewer is not UTF-8 compatible (#501832)


author: Adam Tkac <atkac redhat com> 0.0.91-0.11
changelog:
  - update to 0.0.91 (1.0.0 RC1)
  - patches merged
    - tigervnc10-rh499401.patch
    - tigervnc10-rh497592.patch
    - tigervnc10-rh501832.patch
  - after discusion in upstream drop tigervnc-bounds.patch
  - configure flags cleanup


author: Adam Tkac <atkac redhat com> 0.0.91-0.13
changelog:
  - temporary use F11 Xserver base to make Xvnc compilable
  - BuildRequires: libXi-devel
  - don't ship tigervnc-server-module on s390/s390x


author: Adam Tkac <atkac redhat com> 1.0.0-2
changelog:
  - update underlying X source to 1.6.4-0.3.fc11
  - remove bogus '-nohttpd' parameter from /etc/sysconfig/vncservers (#525629)
  - initscript LSB compliance fixes (#523974)
  - improve -LowColorSwitch documentation and handling (#510185)
  - honor dotWhenNoCursor option (and it's changes) every time (#524340)


author: Adam Tkac <atkac redhat com> 1.0.90-0.1.20091221svn3929
changelog:
  - update to 1.0.90 snapshot
  - patches merged
    - tigervnc10-compat.patch
    - tigervnc10-rh510185.patch
    - tigervnc10-rh524340.patch
    - tigervnc10-rh516274.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.2.20091221svn3929
changelog:
  - add patch for upstream X.Org issue #25909
  - add libXdmcp-devel to build requires to build Xvnc with XDMCP support (#552322)


author: Adam Tkac <atkac redhat com> 1.0.90-0.4.20091221svn3929
changelog:
  - mark stack as non-executable in jpeg ASM code
  - add xorg-x11-xauth to Requires
  - add support for X.Org 1.8
  - drop shave sources, they are no longer needed


author: Adam Tkac <atkac redhat com> 1.0.90-0.6.20100219svn3993
changelog:
  - add mesa-dri-drivers and xkeyboard-config to -server Requires
  - update to r3993 1.0.90 snapshot
    - tigervnc11-noexecstack.patch merged
    - tigervnc11-xorg18.patch merged
    - xserver18.patch is no longer needed


author: Adam Tkac <atkac redhat com> 1.0.90-0.9.20100219svn3993
changelog:
  - add server-applet subpackage which contains Java vncviewer applet
  - fix Java applet; it didn't work when run from web browser
  - add xorg-x11-xkb-utils to server Requires


author: Adam Tkac <atkac redhat com> 1.0.90-0.10.20100420svn4030
changelog:
  - update to r4030 snapshot
  - patches merged to upstream
    - tigervnc11-rh522369.patch
    - tigervnc11-rh551262.patch
    - tigervnc11-r4002.patch
    - tigervnc11-r4014.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.11.20100420svn4030
changelog:
  - link libvnc.so "now" to catch "undefined symbol" errors during Xorg startup
  - use always XkbConvertCase instead of XConvertCase (#580159, #586406)
  - don't link libvnc.so against libXi.la, libdix.la and libxkb.la; use symbols
    from Xorg instead


author: Adam Tkac <atkac redhat com> 1.0.90-0.14.20100420svn4030
changelog:
  - fix memory leak in Xvnc input code (#597172)
  - don't crash when receive negative encoding (#600070)
  - explicitly disable udev configuration support
  - add gettext-autopoint to BR


author: Adam Tkac <atkac redhat com> 1.0.90-0.17.20100721svn4113
changelog:
  - update to r4113
  - patches merged
    - tigervnc11-rh586406.patch
    - tigervnc11-libvnc.patch
    - tigervnc11-rh597172.patch
    - tigervnc11-rh600070.patch
    - tigervnc11-options.patch
  - don't own %{_datadir}/icons directory (#614301)
  - minor improvements in the .desktop file (#616340)
  - bundled libjpeg configure requires nasm; is executed even if system-wide
    libjpeg is used


author: Adam Tkac <atkac redhat com> 1.0.90-0.19.20100813svn4123
changelog:
  - separate Xvnc, vncpasswd and vncconfig to -server-minimal subpkg (#626946)
  - move license to separate subpkg and Requires it from main subpkgs
  - Xvnc: handle situations when no modifiers exist well (#611677)


author: Adam Tkac <atkac redhat com> 1.0.90-0.20.20100813svn4123
changelog:
  - press fake modifiers correctly (#633931)
  - supress unneeded debug information emitted from initscript (#633645)


author: Adam Tkac <atkac redhat com> 1.0.90-0.24.20100813svn4123
changelog:
  - rebuild against xserver 1.10.X
  - 0001-Return-Success-from-generate_modkeymap-when-max_keys.patch merged


author: Adam Tkac <atkac redhat com> 1.0.90-0.25.20101208svn4225
changelog:
  - update to r4225
  - patches merged
    - tigervnc11-rh611677.patch
    - tigervnc11-rh633931.patch
    - tigervnc11-xorg1.10.patch
  - enable VeNCrypt and PAM support


author: Adam Tkac <atkac redhat com> - 1.0.90-3
changelog:
  - fix wrong usage of memcpy which caused screen artifacts (#652590)
  - don't point to inaccessible link in sysconfig/vncservers (#644975)


author: Adam Tkac <atkac redhat com> - 1.1.0-1
changelog:
  - update to 1.1.0
  - update the xorg11 patch
  - patches merged
    - tigervnc11-glx.patch
    - tigervnc11-CVE-2011-1775.patch
    - 0001-Use-memmove-instead-of-memcpy-in-fbblt.c-when-memory.patch


author: Adam Tkac <atkac redhat com> - 1.1.0-3
changelog:
  - don't build X.Org devel docs (#755782)
  - applet: BR generic java-devel instead of java-gcj-devel (#755783)
  - use runuser to start Xvnc in systemd service file (#754259)
  - don't attepmt to restart Xvnc session during update/erase (#753216)


author: Adam Tkac <atkac redhat com> - 1.1.0-5
changelog:
  - clean Xvnc's /tmp environment in service file before startup
  - fix building against the latest JAVA 7 and X.Org 1.12


author: Adam Tkac <atkac redhat com> 1.2.80-0.1.20120905svn4996
changelog:
  - update to 1.2.80
  - remove deprecated patches
    - tigervnc-102434.patch
    - tigervnc-viewer-reparent.patch
    - tigervnc11-java7.patch
  - patches merged
    - tigervnc11-xorg111.patch
    - tigervnc11-xorg112.patch


author: Adam Tkac <atkac redhat com> - 1.2.80-0.12.20130314svn5065
changelog:
  - include /etc/X11/xorg.conf.d/10-libvnc.conf sample configuration (#712482)
  - vncserver now honors specified -geometry parameter (#755947)


author: Tim Waugh <twaugh@redhat.com> 1.2.80-0.14.20130314svn5065
changelog:
  - Use systemd rpm macros (bug #850340).  Moved systemd requirements
    from main package to server sub-package.
  - Applied Debian patch to fix busy loop when run from inetd in nowait
    mode (bug #920373).
  - Added dependency on xorg-x11-xinit to server sub-package so that
    default window manager can be found (bug #896284, bug #923655).
  - Fixed bogus changelog date.


author: Tim Waugh <twaugh@redhat.com> 1.3.0-3
changelog:
  - Avoid PIDFile problems in systemd unit file (bug #983232).
  - libvnc.so: don't use unexported key_is_down function.
  - Don't use shebang in vncserver script.


author: Tim Waugh <twaugh@redhat.com> 1.3.0-15
changelog:
  - Disable dri3 to enable building (bug #1063392).
  - Fixed heap-based buffer overflow (CVE-2014-0011, bug #1050928).


author: Tim Waugh <twaugh@redhat.com> - 1.3.1-8
changelog:
  - Input reset fixes from upstream (bug #1116956).
  - No longer need ppc64le patch as it's now in xorg-x11-server.
  - Rebased xserver114.patch again.


author: Tim Waugh <twaugh@redhat.com> - 1.4.2-1
changelog:
  - Rebased xserver116.patch against xorg-x11-server-1.17.1.
  - Allow build against xorg-x11-server-1.17.
  - 1.4.2.


author: Jan Grulich <jgrulich@redhat.com> - 1.6.0-4
changelog:
  - Utilize system-wide crypto policies
    Resolves: bz#1179345
  - Try to disable patch4 as it was previously written to support an
    older version of a different client and breaks some other usage
    Resolves: bz#1280440


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-3
changelog:
  - Bug 1438704 - CVE-2017-7392 CVE-2017-7393 CVE-2017-7394
                  CVE-2017-7395 CVE-2017-7396 tigervnc: various flaws
    + other upstream related fixes


author: Jan Grulich <jgrulich@redhat.com> - 1.9.0-7
changelog:
  - Improve coverity scan fixes
    Resolves: bz#1602714

    Inform whether view-only password is used or not
    Resolves: bz#1639169

    Backport fixes from RHEL 7
    Resolves: bz#1651254


author: Jan Grulich <jgrulich@redhat.com> - 1.10.1-5
changelog:
  - Install the HOWTO file to correct location
  - Add /usr/bin/vncserver file informing users to read the HOWTO.md file
    Resolves: bz#1790443


author: Kirill Glebov <kgliebov@redhat.com> - 5-1
changelog:
  - Release v5. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Implement support for --configuration option for all programs.
    The option makes the program output its configuration in JSON and then
    exit.
  - Add BuildDependencies to allow yum-builddep.
  - Open JSON writer file with euid/egid. To allow creating protected log files
    with tlog-rec-session, open the JSON writer's file with the EUID and
    GUID the program was started with.
  - Installing Packages with the APT Addon instead of apt-get.
  - Switch to using TLOG_ERRS_RAISE macros.
  - Fix tlog-play cleanup-path segfault.
  - Modify command-line option parsing.
  - Remove "fields" field from ES query URL to fix compatibility with
    Elasticsearch 5.
  - Remove unused _source parameter from ES query URL.
  - Fix tlog-rec-session file permissions bug.
  - Use CLOCK_MONOTONIC for rate-limiting writing.
  - Filter out some more input control sequences.


author: Justin Stephenson <jstephen@redhat.com> - 6-1
changelog:
  - Release v6. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Add integration tests for end-to-end test coverage.
  - Fix compiler type comparison error with json-c json_object_array_length
    return value.
  - Fix a distribution issue causing incorrect M4_CONF_PATH expansion.
  - Log more detailed error when systemd journal is not present.


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Release v7
  - Allow tlog-play redirection of stdout
  - Add -i/--interactive option to tlog-rec-session. Allows login
    programs to call tlog-rec-session more transparently.
  - Make in_txt/out_txt fields optional. This handles missing fields
    when reading from Elasticsearch or other backends.


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording transfer exit
    condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Fire SIGCHLD after utempter_add_record since it probably eats it.
  - Correct suse rpmbuild
  - Update debbuild for travis CI


author: Jindrich Novy <jnovy@redhat.com> - 0.0.99.2-1
changelog:
  - Update to 0.0.99.2
  - Make 'toolbox' create or fall back to a container if possible
  Resolves: #1914687
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 0.0.99.2-2
changelog:
  - Actually apply the patch to make 'toolbox' create or fall back to a
    container if possible
  - Support logging into a registry if necessary
  - Related: #1934415


author: Honggang Li <honli@redhat.com> - 4.2.10-25
changelog:
  - Rebase to latest Fedora release
  - Fix file conflicts in torque-devel multilib packages
  - Resolve: bz1853167


author: Sean O'Keeffe <seanokeeffe797@gmail.com> 0.7.0-1
changelog:
  - Fixes #98 - Don't try appending `None`, helpers (seanokeeffe797@gmail.com)
  - Fixes #104 - Replace None with "" when sorting (seanokeeffe797@gmail.com)
  - Update Python 2 dependency declarations to new packaging standards
    (seanokeeffe797@gmail.com)
  - Fixes #105 - check ID_LIKE in /etc/os-release (seanokeeffe797@gmail.com)
  - Cache process info (elyscape@gmail.com)
  - Handle sshd sessions that use privilege separation (elyscape@gmail.com)
  - fix typo in docs (seanokeeffe797@gmail.com)
  - Switch Travis to container-based infrastructure (seanokeeffe797@gmail.com)
  - Fix RHBug #1469282 - bash completion should exit cleanly if python-
    argcomplete is not installed (seanokeeffe797@gmail.com)
  - Fix argparse logic in spec (#94) (frostyx@email.cz)
  - Update branches for fedora releaser (frostyx@email.cz)
  - Add epel releaser (seanokeeffe797@gmail.com)
  - rename tito releasers (seanokeeffe797@gmail.com)


author: Jakub Kadlčík <frostyx@email.cz> 0.7.1-1
changelog:
  - Fix #116 - Support currrent versions of DNF (elyscape@gmail.com)
  - Fix #112 - handle PIDs that have no unit_path (seanokeeffe797@gmail.com)
  - Fix #119 - Improve session detection logic to fix (elyscape@gmail.com)
  - Fix space, instead of tabs (#115) (JensKuehnel@users.noreply.github.com)
  - A lot of changes to spec file regarding python2/3 (seanokeeffe797@gmail.com)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-1
changelog:
  - Use DNF on RHEL (jturel@gmail.com)
  - Use PackageManager to determine kernel version (jturel@gmail.com)
  - Use subprocess to check process path arguments (jturel@gmail.com)
  - Find the right lxml version for Python 3.4 (jturel@gmail.com)
  - Update Vagrantfile to use Fedora 30 (jturel@gmail.com)
  - Ignore debug kernels when checking if kernel has been updated
    (jturel@gmail.com)
  - Add build dependency for nosetests (frostyx@email.cz)
  - Run tests within the %check phase (frostyx@email.cz)
  - Update fedora branches (frostyx@email.cz)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-3
changelog:
  - Update tito releaser branches (frostyx@email.cz)
  - Not build for python2 package for Fedora anymore (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.4-1
changelog:
  - Fix list index out of range for ssh process names (frostyx@email.cz)
  - When there is no helper, it doesn't contain anything (frostyx@email.cz)
  - Fix wrong parameters number when upating an application objects
    (frostyx@email.cz)
  - Remove unnecessary string decoding (frostyx@email.cz)
  - Fix the missing dist in release (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.5-1
changelog:
  - Depend on python3-six instead of python3-future (frostyx@email.cz)
  - Drop beautifulsoup4 in favor of built-in xml.dom (frostyx@email.cz)
  - Drop nosetests dependency, use pytest instead (frostyx@email.cz)


author: Wim Taymans <wtaymans@redhat.com> - 0.3.13-12
changelog:
  - Add explicit Requires for the -libs package.
  - Do NVR bump to move twolame-devel from buildroot to CRB
  - Resolves: rhbz#1843275


author: Jiri Kucera <jkucera@redhat.com> - 2.3-2
changelog:
  - wrudf: Fix parsing Volume Descriptor Sequence
  - wrudf: Exit on allocation failure
    Related: #1882531


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.3-3
changelog:
  - Improve capability parsing for docker containers
  - Update small changes in manpage, like issue with mandatory option '-c' for docker containers
  - Fix parsing Mountpoints in docker inspect JSON file


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.3-4
changelog:
  - Update manpage with the latest known bug described in https://github.com/containers/udica/issues/8
  - Add check if runtimes are installed on the system


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.4-1
changelog:
  - Fix minor problems reported by pylint #11
  - Catch FileNotFoundError when inspecting containers #12
  - Create basic tests #13
  - Restore working directory #14
  - udica cannot use the container ID once it is provided #10


author: Lukas Vrabec <lvrabec@redhat.com> - 0.1.5-1
changelog:
  - Create mock selinux and semanage module
  - Update testing section in README
  - Add travis file for Travis CI
  - Grammar fixes in the udica.8 manpage file
  - Support port ranges (Resolves: #16)
  - Test port ranges


author: Jindrich Novy <jnovy@redhat.com> - 0.2.5-2
changelog:
  - New rebase https://github.com/containers/udica/releases/tag/v0.2.5 (#1995041)
  - Replace capability dictionary with str.lower()
  - Enable udica to generate policies with fifo class
  - Sort container inspect data before processing
  - Update templates to work properly with new cil parser
  - Related: #1934415


author: Tomas Bzatek <tbzatek@redhat.com> - 2.8.3-1
changelog:
  - Rebased to upstream 2.8.3 release (#1685210)
  - Fix leaking filedescriptors (#1614774)
  - Fix udisksctl pager scrolling (#1662336)
  - Fix LVM2 plugin CreateSnapshot() error (#1668291)
  - Add ISCSI plugin GetInitiatorNameRaw() method (#1710257)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-12
changelog:
  - Remove KSK-2010 from configuration files
  - Resolves: rhbz#1665502
  - Replace legacy directory /var/run/ with /run
  - Resolves: rhbz#1766463
  - Resolves: rhbz#1805978
  - Fix memory leak when DNS over TLS forwarding is configured
  - Resolves: rhbz#1819870


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-13
changelog:
  - Fix two previous patches and add missing patch lines to %prep
  - Fix amplifying an incoming query into a large number of queries directed to a target
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-14
changelog:
  - Fix unbound-1.7.3-amplifying-an-incoming-query.patch patch
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-15
changelog:
  - Fix SPEC file to not check md5 mtime and size of /var/lib/unbound/root.key
  - Resolves: rhbz#1714175
  - Use system-wide crypto policy setting (PROFILE=SYSTEM) instead of custom setting
  - Resolves: rhbz#1842837
  - Enable additional logging in unbound
  - Resolves: rhbz#1850460
  - security hardening from x41 report
  - Resolves: rhbz#1859933
  - symbolic link traversal when writing PID file
  - Resolves: rhbz#1899058


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-16
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1922448


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-17
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1830625


author: Richard Hughes <rhughes@redhat.com> - 0.99.5-1
changelog:
  - New upstream release
  - Add BatteryLevel property for devices with a finite number of power levels
  - Add support for pausing and resuming of the daemon poll
  - Do not spin in a loop when /proc/timer_stats cannot be written
  - Fix reading and writing the keyboard brightness level
  - Get a serial number for device batteries
  - Refresh devices after waking up from sleep
  - Lower initial power usage when iDevice isn't accessible


author: Richard Hughes <rhughes@redhat.com> - 0.99.6-1
changelog:
  - New upstream release
  - Detect joysticks as gaming input devices
  - Fix crash when '@' is present in the device name
  - Grab the model name from device if unavailable from battery


author: Bastien Nocera <bnocera@redhat.com> - 0.99.7-1
changelog:
  + upower-0.99.7-1
  - Update to 0.99.7
  - Add Bluetooth LE battery support
  - Fix critical action after resume from hibernate


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 20170801-1
changelog:
  - rebase to 20170801 version
  - removed urw-* string from subpackages
  - fontconfig priority value updated to 35
  - error messages from 'xset fp rehash' suppressed (bug #1466254)
  - AppStream files added into (sub)packages
  - fontconfig files added into (sub)packages
  - fixed fonts path during %install
  - source location updated to point at github.com


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 20170801-2
changelog:
  - urw-base35-fonts-20170801-000-split-urw-fallback.patch added
  - decrease the fontconfig priority/ordering value to 60 (bug #1494850)
  - set same priority value for urw-fallback.conf as for other files (bug #1495199)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> 20170801-3
changelog:
  - *-devel subpackage added
  - typos & syntax fixed for AppStream files
  - NimbusSansNarrow-BdOblique.* renamed to *-BoldOblique
  - *-nimbus-sans-narrow subpackage dropped
  - priority/ordering decreased [60->61]
  - ship *.otf format files as well


author: Attila Lakatos <alakatos@redhat.com> - 0.7.8-4
changelog:
  - RHEL 8.3.0 ERRATUM
  - Spec file clean up
  - Rebase to 0.7.8
  Resolves: rhbz#1738590
  - Added selinux subpackage
  Resolves: rhbz#1683567
  - Added notifier subpackage
  - Installing /etc/usbguard/rules.d/
  Resolves: rhbz#1667395
  - Fixed sigwaitinfo handling
  Resolves: rhbz#1835210


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-5
changelog:
  - RHEL 8.3.0 ERRATUM
  - Use old-fasioned forking style in unit file
  Resolves: rhbz#1846885
  - Allow usbguard to read /proc/cpuinfo
  Resolves: rhbz#1847870
  - Removed notifier's Requires for usbguard-devel
  Resolves: rhbz#1667395
  - Allow usbguard to read /dev/urandom
  Resolves: rhbz#1848618


author: Radovan Sroka <rsroka@redhat.com> - 0.7.8-6
changelog:
  - RHEL 8.3.0 ERRATUM
  - Removed execstack from .spec
  - Removed AuthorizedDefault=wired from the usbguard
  Resolves: rhbz#1852539
  - Missing error message on bad configuration
  Resolves: rhbz#1857299
  - /etc/usbguard/usbguard-daemon.conf file does not contain all default options
  Resolves: rhbz#1862907


author: Attila Lakatos <alakatos@redhat.com> - 1.0.0-1
changelog:
  - Rebase to 1.0.0
  Resolves: rhbz#1887448
  - Filtering rules by attribute
  Resolves: rhbz#1873953
  - Change device policy of multiple devices using rule instead of ID
  Resolves: rhbz#1852568


author: Bastien Nocera <bnocera@redhat.com> - 1.1.0-13
changelog:
  + usbmuxd-1.1.0-13
  - Fix usbmuxd not starting up a second time, and properties being lost
    with kernel >= 4.12


author: Matias Kreder <mkreder@gmail.com> - 1.6.2-34
changelog:
  - Removed uuid-php subpackage since php(api) is no longer provided on
  - PHP 7 and there is a replacement (pecl/uuid extension)


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-5
changelog:
  - Add valgrind-3.17.0-s390-prep.patch
  - Add valgrind-3.17.0-s390-z15.patch
  - Add valgrind-3.17.0-s390-z13-vec-fix.patch


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.2.1-3
changelog:
  - Disabled running make check again. Too many timing issues. All tests run
    successfully on all arches from time to time, but seldom in a single
    run while all redhat builders are loaded.


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.2.1-4
changelog:
  - Disabled pcre-jit on x86_64 and arm in rawhide for now. It does not
    work, and makes other varnish dependant packages crash
    (upstream bug #2521)


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 6.0.0-1
changelog:
  - New upstream release
  - Added a patch that fixes _FORTIFY_SOURCE=2 on copr/el6
  - Added a patch fixing compilation on epel6
  - Fresh checkout of pkg-varnish-cache
  - Updated find-requires sed fix to update variant and moved it to prep
  - Removed -libs subpackage
  - varnish_reload_vcl changed name to varnishreload, as in upstream
  - varnish.params is gone. To override startup configuration,
    use /etc/systemd/system/varnish.service
  - Dropped patch and sed fixes for find-provides, as it is fixed upstream
  - Dropped patch for test vsv00002, as it is fixed upstream
  - Droppet patch for python3, as it is included upstream
  - Dropped buildreq on groff, as tarball includes prebuilt manpages
  - Dropped systemv to systemd helpers
  - Updated project url
  - Use prebuilt html files for docs subpackage
  - Dropped unnecessary explicit require of initscripts, closes #1592398


author: Lubos Uhliarik <luhliari@redhat.com> - 6.0.6-2
changelog:
  - new version 6.0.6
  - Resolves: #1795673 - RFE: rebase varnish:6 to latest 6.0.x LTS
  - Resolves: #1790907 - CVE-2019-20637 varnish: not clearing pointer between two
    client requests leads to information disclosure
  - Resolves: #1763958 - CVE-2019-15892 varnish:6/varnish: denial of service 
    handling certain crafted HTTP/1 requests


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-1
changelog:
  - new version 6.0.8
  - Resolves: #1982862 - CVE-2021-36740 varnish:6/varnish: HTTP/2 request
    smuggling attack via a large Content-Length header for a POST request


author: Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-1.1
changelog:
  - Resolves: #2047648 - CVE-2022-23959 varnish:6/varnish: Varnish HTTP/1 Request
    Smuggling Vulnerability


author: Lubos Uhliarik <luhliari@redhat.com> - 0.15.0-1
changelog:
  - updated to newer version (0.15.0)
  - Drop EPEL and older Fedora releases support
  - Drop broken manual ABI dependency to Varnish
  - Drop commented out references to past patches
  - Verbose test suite
  - Simplified configure step
  - Dependencies cleanup


author: gil cattaneo <puntogil@libero.it> 0:1.7-18
changelog:
  - fix FTBFS rhbz#1240035
  - fix BR list, change log4j with log4j12
  - set javac source/target to 1.6
  - disable Java8doc doclint
  - remove werken-xpath Import/Export refences in manifest file
  - resolve some rpmlint problems
  - remove zero-length file
  - introduce license macro


author: Marek Kasik <mkasik@redhat.com> - 3.22.0-22
changelog:
  - Rebuild due to new version of FreeRDP
  - Fix an issue when RDP connection shows just black screen
  - Resolves: #1839744


author: Pavel Hrdina <phrdina@redhat.com> - 2.0.0-2
changelog:
  - virt-install: Fix description for --os-variant (rhbz#1649406)
  - virt-install: Add "Guest OS" options group (rhbz#1649406)
  - virt-xml: Accept --os-variant option (rhbz#1649406)
  - tests: Add some tests for virt-xml with KVM (rhbz#1649406)
  - virt-xml: Start using --os-variant (rhbz#1649406)
  - cli: s390x+graphics specified, use video=virtio (bz #1654994) (rhbz#1654994)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.0-1
changelog:
  - Rebased to virt-manager-2.2.0 (rhbz#1721001)
  - The rebase also fixes the following bugs:
      rhbz#1718065, rhbz#1714304, rhbz#1709857, rhbz#1707379, rhbz#1700354
      rhbz#1692489, rhbz#1690687, rhbz#1690685, rhbz#1683609, rhbz#1679018
      rhbz#1677019, rhbz#1671599, rhbz#1667025, rhbz#1666597, rhbz#1663430
      rhbz#1661867, rhbz#1660467, rhbz#1660123, rhbz#1659354, rhbz#1658511
      rhbz#1648939, rhbz#1599139, rhbz#1508147, rhbz#1501608
  - spec: add build dependencies that are now required for build (rhbz#1721001)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.0-2
changelog:
  - xmleditor: Handle gtksourceview3 as well as gtksourceview4 (rhbz#1722820)
  - xmleditor: Fix the gtksource version checking (rhbz#1722820)
  - spec: add gtksourceview3 dependency introduced by upstream (rhbz#1722820)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.1-1
changelog:
  - Rebased to virt-manager-2.2.1 (rhbz#1726535)
  - The rebase also fixes the following bugs:
      rhbz#1727881, rhbz#1724287, rhbz#1727811
  - spec: add gtksourceview3 dependency introduced by upstream (rhbz#1722820)
  - guest: fix warning message when machine type is changed for secure boot (rhbz#1727811)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.1-3
changelog:
  - guest: Drop set_capabilities_defaults call from get_uefi_path (rhbz#1753644)
  - devices: video: Simplify model hvm check (rhbz#1753644)
  - domcapabilities: Get video devices (rhbz#1753644)
  - domcapabilities: Add supports_video_bochs() (rhbz#1753644)
  - video: Prefer "bochs" when it's supported. (rhbz#1753644)
  - addhardware: Add "bochs" display to the video list (rhbz#1753644)
  - osdict: Always return the most generic tree (rhbz#1749865)
  - osdict: Choose the most appropriate tree when a profile is set (rhbz#1749865)


author: Pavel Hrdina <phrdina@redhat.com> - 2.2.1-4
changelog:
  - virt-install: Use minutes instead of seconds on get_time_string() (rhbz#1777664)
  - details: Fix showing the firmware type in case of firmware auto selection (rhbz#1857069)
  - details: fix detection of firmware auto-selection (rhbz#1857069)
  - domain: Fix VM deletion with firmare='efi' (rhbz#1869135)
  - virt-xml: fix defined_xml_is_unchanged (rhbz#1857504)


author: Pino Toscano <ptoscano@redhat.com> - 1:1.42.0-4
changelog:
  - Copy %description also for the source, so tools are less confused
    about it.
  - Fix the "extra" addition to the version to refer to rhel.


author: Uri Lublin <uril@redhat.com> - 9.0-5
changelog:
  - More specific key accelerator description for cursor release
    Resolves: rhbz#1548371
  - Report detailed error when file transfer fails
    Resolves: rhbz#1753563
  - Update copyright year in "about ui"
    Resolves: rhbz#1848267
  - Show an error dialog upon vnc-error
    Resolves: rhbz#1448151
  - Fix warning by Coverity
    Resolves: rhbz#1876719


author: Jay Greguske <jgregusk@redhat.com> - 1.1.16-2
changelog:
  - Sources now a zip rather than tarball
  - fix viostor 2k8-64 driver (rhbz#681958)
  - Removed .git in sources zip (rhbz#671187)


author: Jay Greguske <jgregusk@redhat.com> 1.1.16-4
changelog:
  - remove hypercall drivers included in error
  - add vioserial and balloon which were excluded in error


author: Jay Greguske <jgregusk@redhat.com> 1.3.0-1
changelog:
  - Added new vioserial drivers (rhbz#720540, rhbz#702258)
  - prewhql build: 0.1-12
  - included 00-ms-cross-cert.patch for the sake of completeness


author: Jay Greguske <jgregusk@redhat.com> 1.5.1-1
changelog:
  - Updated drivers for RHEL 6.3
  - Resolved: 677219, 695053, 713643, 730877, 744729, 744730,
              751952, 752743, 753723, 759361, 760022, 769495,
              770499, 771390, 799178, 799182, 799190, 799248,
              799264, 808322, 808654, 810694, 811161


author: Jay Greguske <jgregusk@redhat.com> 1.6.1-1
changelog:
  - Added drivers from submissions 1556359, 1557005, 1557012,
    1557004, 1557008, 1555597, 1552544, 1551826, 1549074,
    1546707
  - Enabled Win8/2012 platforms
  - Updated txtsetup.oem for Windows 2003
  - Resolves: 902977, 857832, 803633, 880569, 836915,
    838021, 714908, 750421, 760022, 768795, 782268, 790305,
    797030, 797032, 797695, 799864, 800247, 800716, 801238,
    805423, 807967, 814684, 814896, 815295, 816452, 819412,
    824814, 827000, 828275, 831570, 833659, 833671, 834174,
    834175, 834179, 834679, 836474, 837321, 837758, 838002,
    838005, 838008, 839143, 839853, 840911, 841169, 841544,
    842961, 843325, 855826, 858551, 859882, 864841, 873128,
    873960, 873971, 875155, 876033, 876061, 876397, 876504,
    877333, 878291, 879143, 879178
  - add the Windows guest agent and supporting .dlls to the .iso
    Resolves: 902977


author: Jay Greguske <jgregusk@redhat.com> 1.6.3-1
changelog:
  - Reorganize the VFDs to be 32/64 bit
  - Fix 1009 balloon coinstallers being resigned
  - Resolves: 908163, 891640


author: Mike Bonnet <mikeb@redhat.com> - 1.6.7-1
changelog:
  - Update to the latest version of the drivers
  - Add qemu-ga installers to the .iso
  - Resolves: rhbz#1018649 rhbz#1018652 rhbz#908609


author: Jeff E. Nelson <jen@redhat.com> - 1.7.4-1
changelog:
  - Resolves: bz#1183423 [rhel-7.2.0]
    (Change the copyright on all the Windows drivers to "2015" in virtio-win-preqhql build)
  - Resolves: bz#1195920 [rhel-7.2.0]
    (Windows 2012 R2 using virtio-scsi-driver with Direct LUNs causes BSODs)
  - Resolves: bz#1210208 [rhel-7.2.0]
    ([NetKVM] Malformed packet can cause BSOD)


author: Jeff E. Nelson <jen@redhat.com> - 1.7.4-1
changelog:
  - Correct NVR of virtio-win-prewhql-build

  - Resolves: bz#1183423 [rhel-7.2.0]
    (Change the copyright on all the Windows drivers to "2015" in virtio-win-preqhql build)
  - Resolves: bz#1195920 [rhel-7.2.0]
    (Windows 2012 R2 using virtio-scsi-driver with Direct LUNs causes BSODs)
  - Resolves: bz#1210208 [rhel-7.2.0]
    ([NetKVM] Malformed packet can cause BSOD)


author: Jeff E. Nelson <jen@redhat.com> - 1.8.0-1
changelog:
  - The virtio-win-1.8.0-1 release contains:
    - support for Windows 10
    - a new driver (pvpanic)
    - Bugfixes and improvements (see below for bugzilla list)

  - The drivers contained in this release are:
    - pvpanic build 103
    - Balloon build 105
    - viorng  build 105
    - viostor build 106
    - NetKVM  build 105 (Windows Server 2008) and build 110 (all others)
    - vioser  build 108
    - vioscsi build 102

  - Also included in this release are:
    - qemu guest agent 7.0-10
    - qxl 0.1-24

  This release addresses the following BZs:
  - Solves: bz#996479
    (RFE:pvpanic driver for windows guest)
  - Solves: bz#1010887
    ([virtio-win][balloon] Guest display did not show properly after hibernate guest(s4)& resume after enlarging memory during runtime)
  - Solves: bz#1017817
    (copying of 10+ MB plaintext from guest through spice clipboard to client results in: vio_serial write completion error 554)
  - Solves: bz#1037949
    ([virtio-win][viostor]guest bsod(9F) when do s4 while guest running iozone)
  - Solves: bz#1054640
    ([virtio-win][netkvm]windows 8.1 x86 BSOD on DRIVER_POWER_STATE_FAILURE (9f))
  - Solves: bz#1058115
    ([whql][netkvm]win2k8-32 BSOD with code 9F when run WLK job "Ethernet - NDISTest 6.5 (MPE)")
  - Solves: bz#1058121
    ([whql][netkvm]win2k8-32 BSOD with 7E code when run WLK job "Ethernet - NDISTest 6.5 (MPE)")
  - Solves: bz#1058225
    ([WHQL][netkvm]Job named PM_PowerStateTransition failed because error pop up while test app's running on win8/win8.1)
  - Solves: bz#1067249
    ([virtio-win][balloon]Balloon device can not be removed after blnsrv service installed)
  - Solves: bz#1085702
    ([WHQL][netkvm][macvtap][1 machine]OffloadRsc failed on win2012 and win8-64 guest)
  - Solves: bz#1096505
    ([NetKVM] Implement multiqueue support in Windows guest driver)
  - Resolves: bz#1098876
    ([virtio-win][netkvm]netkvm driver can not be installed on win8-64 guests)
  - Solves: bz#1100308
    ([NetKVM] Race condition in handling device stop)
  - Solves: bz#1103100
    ([virtio-win][netkvm]netkvm driver can not be load in win2008 guest)
  - Solves: bz#1106400
    ([whql][netkvm]NDISTest 6.5 - [2 Machine] - OffloadLSO failed)
  - Solves: bz#1109027
    ([virtio-win][netkvm]Name field is empty when using netsh command)
  - Solves: bz#1110129
    ([virtio-win][scsi]scsi driver can not be installed automately via pnputil)
  - Solves: bz#1111051
    ([virtio-win][netkvm]win7-32 guest bsod(8e) while performing long (several hours) netperf transfer with mq=on)
  - Resolves: bz#1112712
    ([virtio-win][netkvm]win8.1 32bit BSOD when loading virtio-win-prewhql-0.1 driver & indirect_desc=off option of virtio-net-pci)
  - Resolves: bz#1119966
    ([whql][netkvm][RHEL6]guests bsod (0xd1) when running job "NDISTest 6.5 - [1 Machine] - StandardizedKeywords")
  - Solves: bz#1121338
    ([WHQL][netkvm]NDISTest 6.5 - 2 Machine - OffloadChecksum failed via bridge on hck)
  - Solves: bz#1123288
    ([virtio-win][netkvm]BOSD occurs during guest reboot after disable nic when netserver running)
  - Solves: bz#1125796
    ("Guest moved used index from 10122 to 10253" when reboot win2012R2 guest with 129 virtio-scsi target)
  - Solves: bz#1126378
    ([virtio-win][vioscsi][rhel6]win2012 guest bsod(d1) when shutdown guest with multi virtio-scsi devices on the same scsi controller)
  - Solves: bz#1136023
    ([NetKVM] Google patches broke debug compilation of NetKVM driver)
  - Solves: bz#1136602
    ([whql][netkvm]Guest (64 bits Operating System) got BSOD (DRIVER_VERIFIER_DETECTED_VIOLATION) while run some jobs)
  - Solves: bz#1136606
    ([whql][netkvm]guests bsod(7E) when running job "NDISTest 6.0 - [1 Machine] - 1c_FaultHandling")
  - Solves: bz#1140447
    ([virtio-win][viorng]should use uniformed name for WDFCoinstallerXXX.dll)
  - Solves: bz#1142737
    ([virtio-win][netkvm]interface status is '2', but expect status is '7' after set_link NIC off)
  - Solves: bz#1147202
    ([virtio-win][WHQL][netkvm]Job named by InvalidPackets induce win81-32/64 to hang up.)
  - Solves: bz#1147203
    ([virtio-win][whql][netkvm]win2k8-64 bsod(7e) when run job "Ethernet - NDISTest 6.0")
  - Solves: bz#1147239
    (NetKVM with 2012R2 fails the HCK tests)
  - Solves: bz#1154419
    (NetKVM fails HCK test for 2008R2, single CPU)
  - Solves: bz#1154420
    (ParaNdis6_SendNetBufferList should dispatch each net buffer to a separate queue)
  - Solves: bz#1154435
    ([NetKVM] Incorrect message id assignment and queue allocation)
  - Solves: bz#1155891
    ([whql][netkvm]Job MPE failed while job was running on win2008R2 because of bsod (0A) on build 93 - 4 vcpus)
  - Solves: bz#1155910
    ([whql][netkvm]Job MPE failed while job was running on win2008R2 because of bsod (D1) on build 93 - 1 vcpus)
  - Resolves: bz#1156259
    (Win7-64 guest BSOD(0x000000A0) when doing s4)
  - Solves: bz#1157241
    ([NetKVM] Uninitialized reserved field in procNumber structure)
  - Solves: bz#1159732
    ([virtio-win][vioscsi]guest shutdown instead of S3/S4 while doing S3/S4 in guest)
  - Resolves: bz#1159754
    ([virtio-win][netkvm]Nic device doesn't work when guest is running in IRQ mode)
  - Solves: bz#1167539
    (win8.1.32 guest BSOD with error ' MEMORY_MANAGEMENT)
  - Solves: bz#1167614
    (win8.1.32 guest BSOD with error 'DRIVER_IRQL_NOT_LESS_OR_EQUAL' (netkvm.sys))
  - Solves: bz#1168119
    ([virtio-win][netkvm]win8.1.64 guest BSOD with error 'DRIVER_IRQL_NOT_LESS_OR_EQUAL' (netkvm.sys) after first reboot during os installation on AMD host)
  - Solves: bz#1168483
    ([virtio-win][netkvm]guest lost ip when change MTU between 500 and 575 via device manage)
  - Solves: bz#1168784
    ([virtio-win]win2012r2 guest shows black screen with error code "0x0000005c" after migration and reboot)
  - Solves: bz#1169673
    ([virtio-win][netkvm]qemu quit with "qemu-kvm: Guest moved used index from 0 to 257" when set MaxRxBuffers to 512/1024 in guest)
  - Solves: bz#1169718
    (CVE-2015-3215 [NetKVM] Malformed packet can cause BSOD [rhel-7.2])
  - Solves: bz#1170106
    (RFE: [virtio-win][qxl-win] Add windows 2008R2 QXL to the .vfd)
  - Solves: bz#1172920
    ([virtio-win][vioser]winxp guest bsod with D1 code when shutdown guest after hotunplug/hotplug serial port and serial pci)
  - Solves: bz#1173323
    (iperf stalls the NetKVM driver)
  - Solves: bz#1177063
    ([virtio-win][balloon]guest can't s3/s4 correctly if disable guest-stats-polling while balloon service running)
  - Solves: bz#1183423
    (Change the copyright on all the Windows drivers to "2015" in virtio-win-prewhql build)
  - Solves: bz#1184430
    (enable event index feature in Windows virtio-blk driver)
  - Resolves: bz#1184818
    (guest BSOD when reboot guest after enable qxl driver verifier)
  - Solves: bz#1188790
    (NetKVM driver crashed on pausing in MPE test)
  - Solves: bz#1190968
    ([whql][netkvm][mq]job "NDISTest 6.0 - [1 Machine] - 1c_Mini6RSSOids" last for hours and never stop w/ 4 queues)
  - Solves: bz#1191836
    ([whql][netkvm][mq]job "NDISTest 6.5 - [2 Machine] - GlitchFreeDevice" failed due to "not received the expected number of packets" w/ 4 queues)
  - Solves: bz#1195487
    (Windows guest performing out-of-bounds accesses on virtio device)
  - Resolves: bz#1195920
    (Windows 2012 R2 using virtio-scsi driver with Direct LUNs causes BSODs)
  - Solves: bz#1210208
    (CVE 2015-3215 [NetKVM] Malformed packet can cause BSOD [rhel-7.2])
  - Resolves: bz#1212392
    (need to do extra Refresh work when initiate virtio-blk disk while boot guest with OVMF)
  - Solves: bz#1217642
    (QXL XDDM is not shipped on the virtio-win ISO)
  - Resolves: bz#1217644
    (use hardlinks for .iso and /usr/share/virtio-win/drivers)
  - Solves: bz#1217799
    (Distribute *.oem, LICENSE, COPYING in -prewhql build)
  - Resolves: bz#1218449
    (Ship qemuserial.cat on the iso)
  - Solves: bz#1218937
    (QEMU Guest Agent VSS Provider is not started after guest tools install)
  - Solves: bz#1227164
    (viostor/vioscsi is not digital signed by Redhat)
  - Resolves: bz#1228967
    ([virtio-win][whql][viostor]job "Flush Test" failed on all guests with build 105)


author: Jeff E. Nelson <jen@redhat.com> - 1.8.0-2
changelog:
  The virtio-win-VVV-bin-for-rpm.zip file was previously a
  zip file. This has been switched to a .tar.gz file which
  provides better compresion and support for hard links.

  - Resolves: bz#1217644
    (use hardlinks for .iso and /usr/share/virtio-win/drivers)


author: Jeff E. Nelson <jen@redhat.com> - 1.8.0-3
changelog:
  Update virtio-win-1.8.0-for-rpm.tar.gz with the latest
  signed drivers. This corrects packaging mistakes that put
  drivers into the wrong directories; there are no new
  bugfixes.

  See the changelog entry for 1.8.0-1 for a full
  description of the changes in this release.

  - Resolves: bz#1217644
    (use hardlinks for .iso and /usr/share/virtio-win/drivers)


author: Jeff E. Nelson <jen@redhat.com> - 1.8.0-4
changelog:
  Drop /vioscsi/w10/amd64/vioscsi.DVL.XML which was included
  by mistake.

  See the changelog entry for 1.8.0-1 for a full
  description of the changes in this release.

  - Resolves: bz#1217644
    (use hardlinks for .iso and /usr/share/virtio-win/drivers)


author: Yash Mankad <ymankad@redhat.com> - 1.8.0-5
changelog:
  Add Windows 10 drivers to .vfd files (bz#1328275)
  Updates copyright notice in virtio-win_license.txt file to 2016 (bz#1303511)

   - Resolves: bz#1328275
     (virtio-win doesn't provide windows 10 drivers within vfd)
   - Resolves: bz#1303511
     (update copyright of license.txt file in virtio-win-1.7.5-0.el6 to 2016)


author: Yash Mankad <ymankad@redhat.com> - 1.9.0-1
changelog:
  - The virtio-win-1.9.0-1 release contains:
    - support for Windows 2016
    - Bugfixes and improvements (see below for bugzilla list)

  - The drivers contained in this release are:
    - pvpanic build 121
    - Balloon build 125
    - viorng  build 125
    - viostor build 125 (Win 10 and 2016) and 126 (all others)
    - NetKVM  build 126
    - vioser  build 125 (Win 10 and 2016) and 126 (all others)
    - vioscsi build 124

  - Also included in this release are:
    - qemu guest agent 7.3.2-1
    - qxl 0.1-24

  This release addresses the following BZs:
  - Resolves: bz#950611
    ([NetKVM] Pass WHQL tests with RSC feature enabled )
  - Resolves: bz#954183
    ([NetKVM] Static driver verifier fails with NetKVM )
  - Resolves: bz#1013336
    ([virtio-win][netkvm] BSoD occurs when running NDISTest6.5 -[2 Machine] - MPE_Ethernet job on windows 2012 (Win10))
  - Resolves: bz#1122364
    ([virtio-win][vioser][rhel6]win2k8r2 guest bsod(7e) when do continuous hotplug/unplug during virtio serial in use with driver verifier enabled)
  - Resolves: bz#1157987
    (Windows hangs at startup if virtio-scsi device is configured with vectors=1, 2, and 3)
  - Resolves: bz#1161453
    ([whql][vioscsi]Job named by SCSI Compliance Test (LOGO) failed on win2k8-R2 and win8-64 guest)
  - Resolves: bz#1190960
    ([whql][netkvm][mq]job failed due to "Received some net buffer lists out of order" w/ 4 queues)
  - Resolves: bz#1208465
    (Windows guest boots up slowly with multiple virtual NIC devices (I attached 232 with mutifunction=on))
  - Resolves: bz#1210166
    ([vioscsi] Add multiqueue support to Windows virtio-scsi driver.)
  - Resolves: bz#1214177
    ([virtio-win] [NetKVM] Compilation errors with Visual Studio 2015 while trying to compile NetKVM)
  - Resolves: bz#1214568
    ([RFE][virtio-win] Add WMI facility to check the virito-scsi mq enabled)
  - Resolves: bz#1219841
    ([RFE] vioscsi.sys should support MS Cluster Services)
  - Resolves: bz#1223426
    ([NetKVM] Performance degradation with multi-queue)
  - Resolves: bz#1234741
    ([virtio-win][vioscsi]win2012 guest bsod(c9) when whql test DPWLK-HotAdd(1104) job)
  - Resolves: bz#1234751
    ([virtio-win][vioscsi]win2012R2 guest bsod(d1) when whql test DPWLK-HotAdd(1104) job)
  - Resolves: bz#1235108
    ([virtio-win][vioscsi]VIOSCSI driver is not signed by redhat certification on win200832/64 platform)
  - Resolves: bz#1237024
    ([virtio-win][netkvm]ipv6 uploading speed is quite slow when set "TCP/UDP checksum offload(IPv6)" to "Rx & Tx Enabled")
  - Resolves: bz#1241986
    (win7 64bit BSOD when booting it on RHEL7.2 host)
  - Resolves: bz#1243229
    ([virtio-win][scsi][windows 10]win10 and win2016 guests bsod with D1 when run job "Bus Reset Test")
  - Resolves: bz#1245957
    ([WHQL][viostor][data-plane]it could not generate dump file on WIN2008-32/64 via WLK while running Crash Dump job)
  - Resolves: bz#1246993
    ([virtio-win][svvp][ws2016] job "Signed Driver Check (CheckLogo)" failed during ws2016 svvp test)
  - Resolves: bz#1247006
    ([virtio-win][svvp][ws2016] job "Profile Interrupt Test" failed during ws2016 svvp test)
  - Resolves: bz#1248873
    ([whql][netkvm]Job named NDISTest6.5-InvalidPackets failed with HCK on win8-32/win8-64(build 106))
  - Resolves: bz#1248977
    ([virtio-win][vioscsi] Cannot install vioscsi driver on win7-32&win2008-32)
  - Resolves: bz#1249867
    ([WHQL][vioscsi]Job hangs and it cannot continure on windows2008 guest via WLK)
  - Resolves: bz#1250854
    ([WHQL][vioscsi]The job named crash dump failed on windows 2008 -32/64 platform)
  - Resolves: bz#1256583
    (Win10 guest can't get ip address from dhcpserver when add mrg_rxbuf=off for virtio-net-pci)
  - Resolves: bz#1266340
    ([whql][netkvm]NDISTest6.5 Manual test failed and generate dump file on windows 2008 guest)
  - Resolves: bz#1270149
    ([virtio-win][netkvm] Check guest network link status of virtio nic with status=on failed (build 110))
  - Resolves: bz#1289406
    ([virtio-win][vioser] Cannot install vioser driver successfully)
  - Resolves: bz#1292788
    ([virtio-win][viostor] Cannot install viostor driver on win7-64&win2008-64&win2008R2)
  - Resolves: bz#1293042
    ([virtio-win][vioser] Extra '-' (dash) in serial driver name)
  - Resolves: bz#1293249
    ([virtio-win][vioser] IOCTL_GET_INFORMATION does not return required buffer size)
  - Resolves: bz#1296092
    ([virtio-win][balloon] balloon driver can not be installed automately via pnputil)
  - Resolves: bz#1303511
    (update copyright of license.txt file in virtio-win to 2016)
  - Resolves: bz#1303809
    (provide QEMU guest agent command for setting root/administrator account password - window guests)
  - Resolves: bz#1303988
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for NetKVM)
  - Resolves: bz#1304041
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for vioserial)
  - Resolves: bz#1304044
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for vioscsi)
  - Resolves: bz#1304049
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for viostor)
  - Resolves: bz#1313243
    ([virtio-win][netkvm][rhel6]win2008-32 guest bsod with HARDWARE_INTERRUP_STORM(f2) when running netperf for longevity test)
  - Resolves: bz#1313887
    ([RFE] provide QEMU guest agent command for setting root account password (Windows guest) [rhel-7.3])
  - Resolves: bz#1315984
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for baloon)
  - Resolves: bz#1315985
    ([virtio-win] [virtio-1] [RFE] Add Virtio-1.0 support for rng)
  - Resolves: bz#1321774
    ([virtio-win][vioscsi]fio jobs keep printing "0% done" in win2012r2 guest)
  - Resolves: bz#1325078
    (Add TargetOSVersion to driver inf files)
  - Resolves: bz#1328275
    (virtio-win doesn't provide windows 10 drivers within vfd [rhel-7.3])
  - Resolves: bz#1334736
    (On the LAN network, as long as the VMs receive the Network message, and will always blue screen.)
  - Resolves: bz#1336368
    ([virtio-win][viostor][virtio1.0]Cannot enlarge/shrink disk with virtio1.0 device)
  - Resolves: bz#1339175
    ([NetKVM] Turn on RSC feature in NetKVM driver)
  - Resolves: bz#1340571
    (Add Windows 2k16 drivers to virtio-win)
  - Resolves: bz#1352432
    ([virtio-win][vioscsi]Win2012-64&R2 guest occurred bsod(d1) when whql test DPWLK- Hot-Replace - Device Test - Verify driver support for D3 power state)
  - Resolves: bz#1352517
    ([virtio-win][balloon][whql]windows guest BSOD when run several WHQL jobs)
  - Resolves: bz#1352809
    ([virtio-win][viorng]wrong dervier version for virtio-win-prewhql-121)
  - Resolves: bz#1356363
    ([virtio-win][viorng] cannot install viorng driver on win2008-32/64 (build 122) )
  - Resolves: bz#1358125
    (Virtio 1.0 driver didn't work on win10 with q35 machine type)
  - Resolves: bz#1359072
    ([virtio-win][netkvm][whql]many whql jobs occurred BSOD(DRIVER_VERIFIER_DETECTED_VIOLATION (c4)) on build 122)
  - Resolves: bz#1361501
    ([virtio-win][balloon] report "VCRUNTIME120.dll is missing from your computer"error when using blnsvr.exe)


author: Yash Mankad <ymankad@redhat.com> - 1.9.0-2
changelog:
  This release updates the VirtIO Block and Serial drivers for
  Windows 10 and 2016 release to use the 126 build.

  See the changelog entry for 1.9.0-1 for a full description
  of the changes in this release.

  - Resolves: bz#1340571
    (Add Windows 2k16 drivers to virtio-win)


author: Yash Mankad <ymankad@redhat.com> - 1.9.0-3
changelog:
  Add Windows 2016 drivers to .vfd files
  Updates copyright notice in virtio-win_license.txt file (bz#1303511)

  See the changelog entry for 1.9.0-1 for a full description
  of the changes in this release.

  - Resolves: bz#1340571
    (Add Windows 2k16 drivers to virtio-win)
  - Resolves: bz#1303511
    (update copyright of license.txt file in virtio-win-1.7.5-0.el6 to 2016)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.9.1-0
changelog:
  This release contains the following drivers and build number:
   - pvpanic, build 137
   - vioinput, build 137
   - vioser, build 137
   - balloon, build 13
   - viorng, build 137
   - netkvm, build 139
   - vioscsi, build 136
   - viostor, build 136
   - qxl, build qxl-win-unsigned-0.1-24
   - qemupciserial, build 137
   - smbus, build 138
   - qemufwcfg, build 128


  This release addresses the following BZs:
  - Resolves: BZ#1075292
    ([virtio-win][qemu-ga-win] qemu guest agent should report correctly error description (windows guest))
  - Resolves: BZ#1202267
    ([virtio-win][wddm-qxl]The display of guest change to black-white mode after s4 on win8.1-32)
  - Resolves: BZ#1218449
    (Ship qemupciserial.cat on the iso)
  - Resolves: BZ#1256626
    (windows guest(win7/win10)  CTRL_VLAN=on/off  does not support for  virtio-net-pci)
  - Resolves: BZ#1303510
    (Change the copyright on all the Windows drivers to "2017" in virtio-win-prewhql build)
  - Resolves: BZ#1357406
    (Add virtio-input Windows guest driver)
  - Resolves: BZ#1369353
    (virtio_balloon: backport "available memory" stat support)
  - Resolves: BZ#1370351
    ([virtio-win][vioser] serial port can not transfer data when nr>=31)
  - Resolves: BZ#1372174
    (NIC device cannot start when boot a Win10 guest with multiple queues(256 queues))
  - Resolves: BZ#1374725
    (Output command {"execute": "guest-info"} includes unsupported qemu-ga-win commands)
  - Resolves: BZ#1387125
    (QEMU guest agent VSS Provider is crashed after snapshot deletion)
  - Resolves: BZ#1388775
    ([virtio-win][vioinput]guest bsod[DRIVER_PAGE_FAULT_IN_FREED_SPECIAL_POOL (d5)] when run virtio-input whql jobs)
  - Resolves: BZ#1388920
    ([NetKVM] review additional possible performance improvements)
  - Resolves: BZ#1389125
    (viostor extend viostor driver with STORAGE_REQUEST_BLOCK support)
  - Resolves: BZ#1389445
    (VirtIO library interface incompatiblity with NetKvm (bool definition))
  - Resolves: BZ#1390714
    ([RFE] [virtio-win] Add fw_cfg device in windows guest in order to make svvp test pass)
  - Resolves: BZ#1391844
    ([virtio-win][balloon][viorng][virtio-input] cannot install balloon, viorng and virtio-input driver successfully on win10-32 and win8.1-32(build 127))
  - Resolves: BZ#1392693
    ([virtio-win][vioser][whql] job "PCI Hardware Compliance Test For a Single Device(PCIHCT)" fail w/ "-M q35")
  - Resolves: BZ#1392719
    ([virtio-win][vioser]can't install serial driver successfuly on win10-64 guest with q35 machine type(build 128))
  - Resolves: BZ#1392819
    ([NetKVM] Race between ParaNdis_SetupRSSQueueMap and ParaNdis6_SendNetBufferLists due to the lack of synchronisation)
  - Resolves: BZ#1393140
    ([virtio-win][vioser][whql]BSOD when running job "WDF Logo Test-Final" w/ q35 on win2008-32)
  - Resolves: BZ#1393772
    (New unknown device "SM Bus Controller" shows in system device manager after booting with q35)
  - Resolves: BZ#1395790
    (vioscsi.sys BSOD when adding CPU to live Windows Server 2012R2 guest)
  - Resolves: BZ#1402496
    (Balloon: Stats don't work if balloon driver is disabled when blnsvr service starts)
  - Resolves: BZ#1406271
    ([virtio-win][qemu-ga-win] if guest is auto-released after 10s, the following "guest-fsfreeze-freeze" and "guest-fsfreeze-thaw" should not prompt error.)
  - Resolves: BZ#1408771
    ([virtio-win][viorng] Guest win2008-32 occurs BSoD when running job "WDF Logo Tests - Final" under q35)
  - Resolves: BZ#1408901
    ([virtio-win][whql][vioinput] Many jobs failed on win2012R2/ws2016 when running w/o GUI)
  - Resolves: BZ#1409298
    ([virtio-win][balloon] Guest win2008-32 occurs BSoD when running job 'Device Path Exerciser')
  - Resolves: BZ#1411092
    (4K virtual drives broken on Windows)
  - Resolves: BZ#1411596
    (Virtio driver of network device works abnormally when convert win2008 x86 guest from kvm to rhev by virt-v2v)
  - Resolves: BZ#1412067
    ([virtio-win][whql][netkvm] job 1c_IOCTLCoverage failed.)
  - Resolves: BZ#1419785
    ([virtio-win][whql][balloon] Guest WIN8-32 occured BSOD in job "DF - PNP Stop (Rebalance) Device Test (Certification)")
  - Resolves: BZ#1419854
    (vioinput: Driver is dropping rapid input events)
  - Resolves: BZ#1419900
    (BSOD of vioser.sys on Win10 in S0->S4->S0 flow)
  - Resolves: BZ#1421258
    (Add qemufwcfg driver to virtio-win)
  - Resolves: BZ#1421988
    ([virtio-win][virtio-input] Read wrong device in guest's device manager when do hot-plug a mouse device and keyboard device)
  - Resolves: BZ#1425967
    (Update qemupciserial.* files for virtio-win)
  - Resolves: BZ#1426482
    ([virtio-win][balloon] cost too much time when continues enlarge/evict during playing video)
  - Resolves: BZ#1429807
    ([virtio-win][whql][netkvm] guests bsod(d1) when running job "NDISTest 6.0 - [1 Machine] - 1c_FaultHandling")
  - Resolves: BZ#1431561
    ([NetKVM] Implement VIRTIO_NET_F_GUEST_ANNOUNCE feature in Windows virtio-net driver - IPv6)
  - Resolves: BZ#1432567
    ([virtio-win][vioscsi] Crash dump not generated with num_queues=4)
  - Resolves: BZ#1433266
    ([virtio-win][netkvm] cannot launch anti-virus software(ESET Endpoint Antivirus) with virtio NetKVM driver)
  - Resolves: BZ#1433830
    ([virtio-win][whql][netkvm] guests bsod(d1) when running job "NDISTest 6.5 - [2 Machine] - OffloadLSO")
  - Resolves: BZ#1434316
    ([qemu-ga-win] Guest agent might hang if VSS service is stoped during freeze)
  - Resolves: BZ#1435778
    (virtio-serial breaks when CPU hot added to Windows Server 2008R2 Datacenter)
  - Resolves: BZ#1438410
    (Net-KVM: Add VlanId property to Inf file)
  - Resolves: BZ#1439085
    ([virtio-win][netkvm] Guest win2008-32 failed in job Ethernet - NDISTest 6.0 with 1c_wmicoverage failure)
  - Resolves: BZ#1441595
    ([virtio-win][viostor]windows 2016 can not generate dump file on AMD host)
  - Resolves: BZ#1442322
    ([virtio-win][viostor]Cannot enlarge/shrink disk with virtio-blk-pci device.)
  - Resolves: BZ#1443019
    ([virtio-win][qemupciserial] job "PNP Rebanlance RequestNew Resources Device Test" and other two jobs failed on win10+ guests)
  - Resolves: BZ#1444271
    ([virtio-win][viorng]job "DF - InfVerif INF Verification" failed on HLK 1703)
  - Resolves: BZ#1451652
    (RFE: Add smbus driver to virtio-win)
  - Resolves: BZ#1456403
    (Net-KVM: Implement MTU report feature of the virtio-net device)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.9.2-0
changelog:
  - Resolves: BZ#1471073
    Latest latest virtio driver (network) for Windows drops lots of packets (edit)


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 1.9.6-3
changelog:
  - Resolves: BZ#1353099
    Drop unsupported Windows releases from virtio-win

  - Resolves: BZ#1533540
    Drop floppy (.vfd) files from virtio-win


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 1.9.6-4
changelog:
  - Resolves: BZ#1353099
    During the fix for 1353099, the smbus become empty. So it needs to be
    removed.


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 1.9.10-0.el8
changelog:
  - Resolves: rhbz#1771814
    (QEMU Guest Agent's version is not correct which is still the old one. )
  - Resolves: rhbz#1751431
    ("guest-get-memory-block-info" is enabled but in fact it is not currently supported )
  - Resolves: rhbz#1733165
    (QEMU Guest Agent For Windows Return Garbled NIC Name )
  - Resolves: rhbz#1754822
    ([virtio-win][viostor] Add TRIM support. )


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 1.9.10-3.el8
changelog:
  - Resolves: rhbz#1784745
    ([virto-win] virtio input drivers are not installed via virtio-win-installer)
  - Resolves: rhbz#1784744
    ([virtio-win] guest can not boot up due to virtio-win-installer remove option uninstalls all drivers including OS driver)
  - Resolves: rhbz#1784760
    ([virtio-win] drivers can not be installed via virtio-win-installer on win2012 guest)


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 1.9.11-1.el8
changelog:
  - Resolves: rhbz#1790455
    (Add guest-get-devices command to qemu-ga-win)
  - Resolves: rhbz#1802452
  - Resolves: rhbz#1791147
  - Resolves: rhbz#1794609
  - Resolves: rhbz#1791153
  - Resolves: rhbz#1788042
  - Resolves: rhbz#1785544
  - Resolves: rhbz#1785522
  - Resolves: rhbz#1783953
  - Resolves: rhbz#1783906
  - Resolves: rhbz#1783880
  - Resolves: rhbz#1782370
  - Resolves: rhbz#1711743
  - Resolves: rhbz#1745818
  - Resolves: rhbz#1549602
  - Resolves: rhbz#1549597
  - Resolves: rhbz#1549596
  - Resolves: rhbz#1549595
  - Resolves: rhbz#1549577


author: Vadim Rozenfeld <vrozenfe@redhat.com> - 1.9.14-0.el8
changelog:
  - Update to qemu and spice agents.
  - Update qxl-dod driver
  - add sriov drivers
  - Resolves: rhbz#1746667
  - Resolves: rhbz#1787022


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.9-16
changelog:
  - Python 2 binary package renamed to python2-volume_key
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Jiri Kucera <jkucera@redhat.com> - 0.3.11-4
changelog:
  - fixed License
  - Requires: /usr/bin/gpg2 in libs subpackage
  - Added support for opening all types of LUKS devices
    Resolves: #1626974


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-25
changelog:
  - Add config option log_die allowing to pass error messages to syslog
  - Add config option bind_retries allowing to change the max number
  - of attempts to find a listening port for the PASV/EPSV command
  - Resolves: rhbz#1318198


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-32
changelog:
  - Removed a hint about the ftp_home_dir SELinux boolean from the config file
  - Resolves: rhbz#1623424


author: Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-33
changelog:
  - Enable support for wide-character strings in logs
  - Replace unprintables with HEX code, not question marks
  - Resolves: rhbz#1947900


author: Kalev Lember <klember@redhat.com> - 1.14.91-1
changelog:
  - Update to 1.14.91
  - Add new libwayland-egl subpackage and obsolete mesa-libwayland-egl
  - Remove ldconfig scriptlets


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.30.2-2
changelog:
  - Try to fix coverity build by disabling docs (thanks to Kamil Dudka <kdudka@redhat.com>!)
  - Related: #1883304


author: Michal Ruprich <mruprich@redhat.com> - 1:2.6.2-7
changelog:
  - Resolves: #1642919 - CVE-2018-12086, CVE-2018-18225, CVE-2018-18226, CVE-2018-18227
  - Resolves: #1656342 - CVE-2018-19623
  - Resolves: #1657634 - CVE-2018-19625
  - Resolves: #1657211 - CVE-2018-19626
  - Resolves: #1657184 - CVE-2018-19627
  - Resolves: #1657190 - CVE-2018-19628
  - fixes CVE-2018-19622, CVE-2018-19624


author: Tomas Popela <tpopela@redhat.com> - 1.6.0-5
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1949809


author: Jonas Ådahl <jadahl@redhat.com> - 1.6.0-1
changelog:
  - Rebase to 1.6.0 (#1837413)
  - Bump supported Mutter screen cast API version (#1837413)
  - Backport bugfix (#1837413)


author: Rex Dieter <rdieter@fedoraproject.org> 1.1.1-4
changelog:
  - save mimetype defaults to ~/.config/mimeapps.list
    (instead of ~/.local/share/applications/mimeapps.list)


author: Peter Hutterer <peter.hutterer@redhat.com> 2.24-3
changelog:
  - Remove high-keycode removal patches, xkbcomp 1.4.2 has been in stable for
    long enough (related #1587998)


author: Ondrej Vasik <ovasik@redhat.com> 0.0.27-1
changelog:
  - New version 0.0.27
  - remove several bashisms in scripts
  - add new option --profile for preprocessing documents
    with profiling stylesheet
  - fix several potential crashes in xmlif (found by static analysis)


author: Simone Caronni <negativo17@gmail.com> - 1.7.1-1
changelog:
  - Update to 1.7.1.
  - Skip PDF document generation through fop. It fixes FTBFS on Fedora 22. Tarball
    is not yet compatible with Fedora xmlgraphics-commons >= 2.0.
  - Remove useless db files.


author: Adam Jackson <ajax@redhat.com> - 1.7.1-5
changelog:
  - Drop BuildRequires: java-devel. Originally that was to force a specific
    JDK version, which we no longer need to do.


author: Michel Dänzer <mdaenzer@redhat.com> - 19.1.0-1
changelog:
  - ati 19.1.0 (#1728818)
  - Drop patch 0001-Don-t-set-up-black-scanout-buffer-if-LeaveVT-is-call.patch,
    merged upstream
  - Add patches 0001-Handle-NULL-fb_ptr-in-pixmap_get_fb.patch &
    0002-Don-t-crash-X-server-if-GPU-acceleration-is-not-avai.patch from
    upstream Git master, fixing crashes with ShadowFB


author: Hans de Goede <hdegoede@redhat.com> - 1.0.12-4
changelog:
  - Fix the crtc not being turned off, causing the dgpu to not suspend,
    after using a dgpu attached output


author: Christophe Fergeau <cfergeau@redhat.com> - 0.1.5-7
changelog:
  - Add upstream patches for Python 3 support
  - Validate RANDR output property atoms
  - Add patch fixing crash with multiple QXL devices
  - This syncs the RHEL branch with both current rawhide and RHEL 7.6


author: Adam Jackson <ajax@redhat.com> - 2.4.0-3
changelog:
  - Restore no-virt-shadowfb patch
  - Refuse to run if there's a UEFI framebuffer; use fbdev or a native driver


author: Hans de Goede <hdegoede@redhat.com> - 7.5-11
changelog:
  - Update most fonts:
     -encodings-1.0.4
     -font-adobe-100dpi-1.0.3
     -font-adobe-75dpi-1.0.3
     -font-adobe-utopia-100dpi-1.0.4
     -font-adobe-utopia-75dpi-1.0.4
     -font-adobe-utopia-type1-1.0.4
     -font-arabic-misc-1.0.3
     -font-bh-100dpi-1.0.3
     -font-bh-75dpi-1.0.3
     -font-bh-lucidatypewriter-100dpi-1.0.3
     -font-bh-lucidatypewriter-75dpi-1.0.3
     -font-bitstream-100dpi-1.0.3
     -font-bitstream-75dpi-1.0.3
     -font-bitstream-type1-1.0.3
     -font-cronyx-cyrillic-1.0.3
     -font-cursor-misc-1.0.3
     -font-daewoo-misc-1.0.3
     -font-dec-misc-1.0.3
     -font-isas-misc-1.0.3
     -font-jis-misc-1.0.3
     -font-micro-misc-1.0.3
     -font-misc-cyrillic-1.0.3
     -font-misc-ethiopic-1.0.3
     -font-misc-misc-1.1.2
     -font-mutt-misc-1.0.3
     -font-schumacher-misc-1.1.2
     -font-screen-cyrillic-1.0.4
     -font-sony-misc-1.0.3
     -font-sun-misc-1.0.3
     -font-winitzki-cyrillic-1.0.3
     -font-xfree86-type1-1.0.4
  - Fix a bug in jisx0201.1976-0.enc (#1009350)


author: Simone Caronni <negativo17@gmail.com> - 7.5-12
changelog:
  - Clean up SPEC file, remove obsolete tags, fix all rpmlint warnings.
  - Rework build/install section to be like other xorg packages.
  - Remove all obsolete provides/obsoletes/conflicts.
  - Simplify build requirements.
  - Simplify build, it has not changed since 2008.


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-5
changelog:
  - xwayland: Hold a pixmap reference in struct xwl_present_event
    Related: #1728684
  - glamor: Fix glamor_poly_fill_rect_gl xRectangle::width/height handling
    Resolves: #1740250


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.8-8
changelog:
  - CVE fixes for: CVE-2020-14345 (#1872391), CVE-2020-14346 (#1872395),
    CVE-2020-14361 (#1872402), CVE-2020-14362 (#1872409)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.0.99.902-1
changelog:
  - xwayland 21.0.99.902
  - Remove xdmcp, udev, udev_kms build options
  - Stop overriding the vendor name, same as xorg-x11-server


author: Adam Jackson <ajax@redhat.com> - 7.7-25
changelog:
  - iceauth 1.0.8
  - xkill 1.0.5
  - xrdb 1.1.1
  - xrefresh 1.0.6
  - xset 1.2.4
  - xsetroot 1.1.2
  - HTTPS URLs


author: Adam Jackson <ajax@redhat.com> - 1.0.9-12
changelog:
  - Nerf the python-related BuildRequires. They're only needed for 'make check',
    and cmdtest is not yet a python3 package.


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-12
changelog:
  - Drop 0001-startx-Pass-nolisten-tcp-by-default.patch this is the
    server default now
  - Check for SSH_AUTH_SOCK not SSH_AGENT in xinitrc-common (rhbz#1352339)


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-13
changelog:
  - Check for all 3 of SSH_AGENT, SSH_AGENT_PID and SSH_AUTH_SOCK to fix
    a regression introduced by the previous fix (rhbz#1352339)


author: Adam Jackson <ajax@redhat.com> - 7.7-24
changelog:
  - Make -devel Require the base package, so the pc file will point to an
    xkbcomp that actually exists.


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.999-28
changelog:
  - remove dependency on ImageMagick and netpbm-progs, because they were needed for
    tests during %build phase, which were removed in commit SHA 0595c15da29


author: Matej Mužila <mmuzila@redhat.com> - 3:2.4-5
changelog:
  - Add "Wants" dependency on network-online.target
  - Remove "After" dependency on NetworkManager-wait-online.service


author: Jakub Martisko <jamartis@redhat.com> - 0.13.68-3
changelog:
  - Fix CVEs 2018-7725, 2018-7726, 2018-7727, 2018-6484, 2018-6869 
  - Resolves: 1555082
  - Resolves: 1545818


author: Jakub Martisko <jamartis@redhat.com> - 0.13.68-6
changelog:
  - Fix multilib regression by adding a 32bit version of the multilib patch
  - Properly bump the release number in the previous changelog message
  - Resolves: #1638337


