# changelog

author: Dan Walsh <dwalsh@redhat.com> 1.27.33-1
changelog:
  - Update to match NSA
          * Merged audit2allow --tefile and --fcfile support from Dan Walsh.
          * Merged genhomedircon fix from Dan Walsh.
          * Merged semodule* man pages from Dan Walsh, and edited them.
          * Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
            retain validation/canonicalization of contexts during init.


author: Dan Walsh <dwalsh@redhat.com> 1.27.35-1
changelog:
  - Update to match NSA
          * Merged genhomedircon bug fix from Dan Walsh.
          * Revised semodule* man pages to refer to checkmodule and
            to include example sections.


author: Dan Walsh <dwalsh@redhat.com> 1.27.36-1
changelog:
  - Update to match NSA
          * Changed genhomedircon to warn on use of ROLE in homedir_template
            if using managed policy, as libsemanage does not yet support it.


author: Dan Walsh <dwalsh@redhat.com> 1.29.1-1
changelog:
  - Update to match NSA
          * Merged fix for audit2allow long option list from Dan Walsh.
          * Merged -r option for restorecon (alias for -R) from Dan Walsh.
          * Merged chcat script and man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Fix genhomedircon to work in installer
  - Update to match NSA
          * Merged patch for chcat script from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Update to match NSA
          * Merged semanage getpwnam bug fix from Serge Hallyn (IBM).
          * Merged patch series from Ivan Gyurdiev.
            This includes patches to:
            - cleanup setsebool
            - update setsebool to apply active booleans through libsemanage
            - update semodule to use the new semanage_set_rebuild() interface
            - fix various bugs in semanage
          * Merged patch from Dan Walsh (Red Hat).
            This includes fixes for restorecon, chcat, fixfiles, genhomedircon,
            and semanage.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Update to match NSA
          * Merged genhomedircon and semanage patch from Dan Walsh.
          * Changed semodule error reporting to include argv[0].


author: Dan Walsh <dwalsh@redhat.com> 1.29.7-1
changelog:
  - Update to match NSA
          * Merged newrole cleanup patch from Steve Grubb.
          * Merged setfiles/restorecon performance patch from Russell Coker.
          * Merged genhomedircon and semanage patches from Dan Walsh.
          * Merged remove add_local/set_local patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.8-1
changelog:
  - Update to match NSA
          * Merged semanage fixes from Ivan Gyurdiev.
          * Merged semanage fixes from Russell Coker.
          * Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.11-1
changelog:
  - Added translation support to semanage
  - Update from upstream
          * Modified newrole and run_init to use the loginuid when
            supported to obtain the Linux user identity to re-authenticate,
            and to fall back to real uid.  Dropped the use of the SELinux
            user identity, as Linux users are now mapped to SELinux users
            via seusers and the SELinux user identity space is separate.
          * Merged semanage bug fixes from Ivan Gyurdiev.
          * Merged semanage fixes from Russell Coker.
          * Merged chcat.8 and genhomedircon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.15-1
changelog:
  - Update from upstream
          * Merged newrole audit patch from Steve Grubb.
          * Merged seuser -> seuser local rename patch from Ivan Gyurdiev.
          * Merged semanage and semodule access check patches from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.17-1
changelog:
  - Update from upstream
          * Merged genhomedircon fix from Dan Walsh.
          * Merged seusers.system patch from Ivan Gyurdiev.
          * Merged improve port/fcontext API patch from Ivan Gyurdiev.
          * Merged genhomedircon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.20-1
changelog:
  - Update from upstream
          * Merged seuser/user_extra support patch to semodule_package
            from Joshua Brindle.
          * Merged getopt type fix for semodule_link/expand and sestatus
            from Chris PeBenito.
  - Fix genhomedircon output


author: Dan Walsh <dwalsh@redhat.com> 1.29.23-1
changelog:
  - Update from upstream
          * Merged newrole -V/--version support from Glauber de Oliveira Costa.
          * Merged genhomedircon prefix patch from Dan Walsh.
          * Merged optionals in base patch from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.26-1
changelog:
  - Update from upstream
          * Merged semanage bug fix patch from Ivan Gyurdiev.
          * Merged improve bindings patch from Ivan Gyurdiev.
          * Merged semanage usage patch from Ivan Gyurdiev.
          * Merged use PyList patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.30.1-1
changelog:
  - Make audit2allow translate dontaudit as well as allow rules
  - Update from upstream
          * Merged semanage labeling prefix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.30.4-1
changelog:
  - Update from upstream
          * Merged audit2allow fixes for refpolicy from Dan Walsh.
          * Merged fixfiles patch from Dan Walsh.
          * Merged restorecond daemon from Dan Walsh.
          * Merged semanage non-MLS fixes from Chris PeBenito.
          * Merged semanage and semodule man page examples from Thomas Bleher.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Add /etc/samba/secrets.tdb to restorecond.conf
  - Update from upstream
          * Merged semanage prefix support from Russell Coker.
          * Added a test to setfiles to check that the spec file is
            a regular file.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - Update to upstream
          * Merged fix warnings patch from Karl MacMillan.
          * Merged patch from Dan Walsh.
            This includes audit2allow changes for analysis plugins,
            internationalization support for several additional programs
            and added po files, some fixes for semanage, and several cleanups.
            It also adds a new secon utility.


author: Dan Walsh <dwalsh@redhat.com> 1.30.9-1
changelog:
  - Update to upstream
          * Fixed audit2allow and po Makefiles for DESTDIR= builds.
          * Merged .po file patch from Dan Walsh.
          * Merged bug fix for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Update to upstream
          * Merged patch with updates to audit2allow, secon, genhomedircon,
            and semanage from Dan Walsh.


author: James Antill <jantill@redhat.com> 1.30.10-2
changelog:
  - secon fixes for --self-exec etc.
  - secon change from level => sensitivity, add clearance.
  - Add mass relabel AUDIT patch, but disable it until kernel problem solved.


author: Dan Walsh <dwalsh@redhat.com> 1.30.11-1
changelog:
  - Update to upstream
          * Merged more translations from Dan Walsh.
          * Merged patch to relocate setfiles to /sbin for early relabel
            when /usr might not be mounted from Dan Walsh.
          * Merged semanage/seobject patch to preserve fcontext ordering in list.
          * Merged secon patch from James Antill.


author: Dan Walsh <dwalsh@redhat.com> 1.30.14-1
changelog:
  - Update to upstream
          * Merged fix for setsebool error path from Serge Hallyn.
          * Merged patch from Dan Walsh with:
          *    Updated po files.
          *    Fixes for genhomedircon and seobject.
          *    Audit message for mass relabel by setfiles.


author: Dan Walsh <dwalsh@redhat.com> 1.30.17-1
changelog:
  - Update to upstream
          * Lindent.
          * Merged patch from Dan Walsh with:
            * -p option (progress) for setfiles and restorecon.
            * disable context translation for setfiles and restorecon.
            * on/off values for setsebool.
          * Merged setfiles and semodule_link fixes from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.30.22-1
changelog:
  - Update to upstream
          * Merged restorecond size_t fix from Joshua Brindle.
          * Merged secon keycreate patch from Michael LeMay.
          * Merged restorecond fixes from Dan Walsh.
            Merged updated po files from Dan Walsh.
          * Merged python gettext patch from Stephen Bennett.
          * Merged semodule_deps from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.30.25-1
changelog:
  - Update to upstream
          * Merged patch from Dan Walsh with:
                  * audit2allow: process MAC_POLICY_LOAD events
                  * newrole: run shell with - prefix to start a login shell
                  * po: po file updates
                  * restorecond: bail if SELinux not enabled
                  * fixfiles: omit -q
                  * genhomedircon:  fix exit code if non-root
                  * semodule_deps:  install man page
          * Merged secon Makefile fix from Joshua Brindle.
          * Merged netfilter contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.26-1
changelog:
  - Update to upstream
          * Merged semanage local file contexts patch from Chris PeBenito.
  - Fix fixfiles log creation
  - More translations


author: Dan Walsh <dwalsh@redhat.com> 1.30.27-4
changelog:
  - Add -i qualified to restorecon to tell it to ignore files that do not exist
  - Fixfiles also modified for this change


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-1
changelog:
  - Security fixes to run python in a more locked down manner
  - More Translations
  - Update to upstream
          * Merged fix for restorecon // handling from Erich Schubert.
          * Merged translations update and fixfiles fix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-6
changelog:
  - Change setfiles and restorecon to use stderr except for -o flag
  - Also -o flag will now output files


author: Dan Walsh <dwalsh@redhat.com> 1.30.30-1
changelog:
  - Update to upstream
          * Merged newrole auditing of failures due to user actions from
            Michael Thompson.


author: Dan Walsh <dwalsh@redhat.com> 1.32-1
changelog:
  - Add newrole audit patch from sgrubb
  - Update to upstream
          * Merged audit2allow -l fix from Yuichi Nakamura.
          * Merged restorecon -i and -o - support from Karl MacMillan.
          * Merged semanage/seobject fix from Dan Walsh.
          * Merged fixfiles -R and verify changes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.1-1
changelog:
  - Update to upstream
          * Merged newrole patch set from Michael Thompson.
  - Add policycoreutils-gui


author: Dan Walsh <dwalsh@redhat.com> 1.33.4-1
changelog:
  - Upstream accepted my patches
          * Merged setsebool patch from Karl MacMillan.
            This fixes a bug reported by Yuichi Nakamura with
            always setting booleans persistently on an unmanaged system.


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-1
changelog:
  - Update to upstream
          * Patch from Dan Walsh to add an pam_acct_msg call to run_init
          * Patch from Dan Walsh to fix error code returns in newrole
          * Patch from Dan Walsh to remove verbose flag from semanage man page
          * Patch from Dan Walsh to make audit2allow use refpolicy Makefile
            in /usr/share/selinux/<SELINUXTYPE>


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-5
changelog:
  - Update po files
  - Fix newrole to open stdout and stderr rdrw so more will work on MLS machines
  Resolves: #216920


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-6
changelog:
  - Fix audit2allow generating reference policy
  - Fix semanage to manage user roles properly
  Resolves: #220071


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-7
changelog:
  - add exists switch to semanage to tell it not to check for existance of Linux user
  Resolves: #219421


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-9
changelog:
  - Fix fixfiles script to use tty command correctly.  If this command fails, it
  should set the LOGFILE to /dev/null
  Resolves: #220879


author: Dan Walsh <dwalsh@redhat.com> 1.33.8-1
changelog:
  - Update to upstream
          * Merged patches from Dan Walsh to:
            - omit the optional name from audit2allow
            - use the installed python version in the Makefiles
            - re-open the tty with O_RDWR in newrole


author: Dan Walsh <dwalsh@redhat.com> 1.33.10-1
changelog:
  - Update to upstream
          * Merged patch to correctly handle a failure during semanage handle
            creation from Karl MacMillan.
          * Merged patch to fix seobject role modification from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.11-1
changelog:
  - Update to upstream
          * Merged fixfiles and seobject fixes from Dan Walsh.
          * Merged semodule support for list of modules after -i from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-1
changelog:
  - Want to update to match api
  - Update to upstream
          * Merged newrole securetty check from Dan Walsh.
          * Merged semodule patch to generalize list support from Karl MacMillan.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 1.33.14-1
changelog:
  * Merged newrole man page patch from Michael Thompson.
          * Merged patch to fix python unicode problem from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.15-1
changelog:
  - Update to upstream
          * Merged unicode-to-string fix for seobject audit from Dan Walsh.
          * Merged man page updates to make "apropos selinux" work from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.34.1-1
changelog:
  - Fix system-config-selinux ports view
  - Update to upstream
          * Fixed newrole non-pam build.
          * Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> 2.0.0-1
changelog:
  - Update to upstream
          * Merged new audit2allow from Karl MacMillan.
            This audit2allow depends on the new sepolgen python module.
            Note that you must run the sepolgen-ifgen tool to generate
            the data needed by audit2allow to generate refpolicy.
          * Fixed newrole non-pam build.
  - Fix Changelog and spelling error in man page


author: Dan Walsh <dwalsh@redhat.com> 2.0.1-1
changelog:
  - Update to upstream
          * Merged small fix to correct include of errcodes.h in semodule_deps from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.2-1
changelog:
  - Update to upstream
          * Merged seobject exception handler fix from Caleb Case.
          * Merged setfiles memory leak patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.3-1
changelog:
  - Update to upstream
          * Merged translations update from Dan Walsh.
          * Merged chcat fixes from Dan Walsh.
          * Merged man page fixes from Dan Walsh.
          * Merged seobject prefix validity checking from Dan Walsh.
          * Merged Makefile and refparser.py patch from Dan Walsh.
            Fixes PYTHONLIBDIR definition and error handling on interface files.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-1
changelog:
  - Update to upstream
    - policycoreutils
          * Merged newrole O_NONBLOCK fix from Linda Knippers.
          * Merged sepolgen and audit2allow patches to leave generated files
            in the current directory from Karl MacMillan.
          * Merged restorecond memory leak fix from Steve Grubb.
    -sepolgen
          * Merged patch to leave generated files (e.g. local.te) in current directory from Karl MacMillan.
          * Merged patch to make run-tests.py use unittest.main from Karl MacMillan.
          * Merged patch to update PLY from Karl MacMillan.
          * Merged patch to update the sepolgen parser to handle the latest reference policy from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-3
changelog:
  - Update to upstream
    -sepolgen
          * Merged support for enabling parser debugging from Karl MacMillan.
  - Add sgrupp cleanup of restorcon init script


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-1
changelog:
  - Update to upstream
          * Merged restorecond init script LSB compliance patch from Steve Grubb.
    -sepolgen
          * Merged better matching for refpolicy style from Karl MacMillan
          * Merged support for extracting interface paramaters from interface calls from Karl MacMillan
          * Merged support for parsing USER_AVC audit messages from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-5
changelog:
  - Change location of audit2allow and sepol-ifgen to sbin
  - Updated version of sepolgen
          * Merged patch to move the sepolgen runtime data from /usr/share to /var/lib to facilitate a read-only /usr from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-6
changelog:
  - Updated version of sepolgen
          * Merged patch to discard self from types when generating requires from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-8
changelog:
  - system-config-selinux should be able to run on a disabled system,
  - at least enough to get it enabled.


author: Dan Walsh <dwalsh@redhat.com> 2.0.8-1
changelog:
  - Updated version of sepolgen
          * Merged updates to sepolgen-ifgen from Karl MacMillan.
          * Merged updates to sepolgen parser and tools from Karl MacMillan.
            This includes improved debugging support, handling of interface
            calls with list parameters, support for role transition rules,
            updated range transition rule support, and looser matching.


author: Dan Walsh <dwalsh@redhat.com> 2.0.9-1
changelog:
  - Updated version of sepolgen
          * Merged seobject setransRecords patch to return the first alias from Xavier Toth.


author: Dan Walsh <dwalsh@redhat.com> 2.0.10-1
changelog:
  - Updated version of policycoreutils
          * Merged chcat, fixfiles, genhomedircon, restorecond, and restorecon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.13-1
changelog:
  - Updated version of policycoreutils
          * Merged setsebool patch to only use libsemanage for persistent boolean changes from Stephen Smalley.
          * Merged genhomedircon patch to use the __default__ setting from Dan Walsh.
          * Dropped -b option from load_policy in preparation for always preserving booleans across reloads in the kernel.


author: Dan Walsh <dwalsh@redhat.com> 2.0.15-1
changelog:
  - Updated version of policycoreutils
          * Merged po file updates from Dan Walsh.
  - Fix semanage to be able to modify prefix in user record


author: Dan Walsh <dwalsh@redhat.com> 2.0.16-1
changelog:
  - Updated version of policycoreutils
          * Merged support for modifying the prefix via semanage from Dan Walsh.
  - Fixed genhomedircon to find homedirs correctly.


author: Dan Walsh <dwalsh@redhat.com> 2.0.20-1
changelog:
  - Update to match NSA
          * Merged genhomedircon fixes from Dan Walsh.
          * Merged setfiles -c usage fix from Dan Walsh.
          * Merged restorecon fix from Yuichi Nakamura.
          * Dropped -lsepol where no longer needed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.22-13
changelog:
  - Speed up genhomedircon by an order of magnitude by compiling regex
  - Allow semanage fcontext -a -t <<none>> /path to work


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-1
changelog:
  - Update semodule man page
          * Fix genhomedircon searching for USER from Todd Miller
          * Install run_init with mode 0755 from Dan Walsh.
          * Fix chcat from Dan Walsh.
          * Fix fixfiles pattern expansion and error reporting from Dan Walsh.
          * Optimize genhomedircon to compile regexes once from Dan Walsh.
          * Fix semanage gettext call from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-13
changelog:
  - Upgrade version of sepolgen from NSA
          * Expand the sepolgen parser to parse all current refpolicy modules from Karl MacMillan.
          * Suppress generation of rules for non-denials from Karl MacMillan (take 3).


author: Dan Walsh <dwalsh@redhat.com> 2.0.28-1
changelog:
  - Update to upstream
          * Update semodule man page for -D from Dan Walsh.
          * Add boolean, locallist, deleteall, and store support to semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.29-1
changelog:
  - Update to upstream
          * Add genhomedircon script to invoke semodule -Bn from Dan Walsh.
  - Add deleteall for ports and fcontext


author: Dan Walsh <dwalsh@redhat.com> 2.0.31-1
changelog:
  - Remove no.po
  - Update to upstream
          * Fix semodule option handling from Dan Walsh.
          * Add deleteall support for ports and fcontexts in semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-1
changelog:
  - Upgrade from NSA
          * Drop verbose output on fixfiles -C from Dan Walsh.
          * Fix argument handling in fixfiles from Dan Walsh.
          * Enhance boolean support in semanage, including using the .xml description when available, from Dan Walsh.
  - Fix handling of final screen in polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-4
changelog:
  - Fix sepolgen to be able to parse Fedora 9 policy
        Handle ifelse statements
        Handle refpolicywarn inside of define
        Add init.if and inetd.if into parse
        Add parse_file to syntax error message


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-1
changelog:
  - Update to upstream
          * Update Makefile to not build restorecond if
            /usr/include/sys/inotify.h is not present


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-2
changelog:
  - Make sepolgen set error exit code when partial failure
  - audit2why now checks booleans for avc diagnosis


author: Dan Walsh <dwalsh@redhat.com> 2.0.35-1
changelog:
  - Update to upstream
          * Merged support for non-interactive newrole command invocation from Tim Reed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.36-1
changelog:
  - Update to upstream
          * Merged update to chcat, fixfiles, and semanage scripts from Dan Walsh.
          * Merged sepolgen fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Update to upstream
    * Merged audit2allow cleanups and boolean descriptions from Dan Walsh.
    * Merged setfiles -0 support by Benny Amorsen via Dan Walsh.
    * Merged fixfiles fixes and support for ext4 and gfs2 from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.39-1
changelog:
  - Don't initialize audit2allow for audit2why call.  Use default
  - Update to upstream
          * Merged fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.41-1
changelog:
  - Update to upstream
          * Merged audit2why fix and semanage boolean --on/--off/-1/-0 support from Dan Walsh.
          * Merged a second fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.42-1
changelog:
  - Update to upstream
          * Make semodule_expand use sepol_set_expand_consume_base to reduce
            peak memory usage.


author: Dan Walsh <dwalsh@redhat.com> 2.0.43-1
changelog:
  - Update to upstream
          * Merged fix fixfiles option processing from Vaclav Ovsik.
  - Added existing users, staff and user_t users to polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.46-1
changelog:
  - Update to upstream
          * Update audit2allow to report dontaudit cases from Dan Walsh.
          * Fix semanage port to use --proto from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-1
changelog:
  - Make restorecond not start by default
  - Fix polgengui to allow defining of confined roles.
  - Add patches from Lubomir Rintel <lkundrak@v3.sk>
    * Add necessary runtime dependencies on setools-console for -gui
    * separate stderr when run seinfo commands
  - Update to upstream
    * Update semanage man page for booleans from Dan Walsh.
    * Add further error checking to seobject.py for setting booleans.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-2
changelog:
  - Add rm -rf /tmp/gconfd-* /tmp/pulse-* /tmp/orbit-* to fixfiles restore
  - So that mislabeled files will get removed on full relabel


author: Dan Walsh <dwalsh@redhat.com> 2.0.49-1
changelog:
  - Update to upstream
          * Remove security_check_context calls for prefix validation from semanage.
          * Change setfiles and restorecon to not relabel if the file already has the correct context value even if -F/force is specified.


author: Dan Walsh <dwalsh@redhat.com> 2.0.52-2
changelog:
  - Add lockdown wizard
  - Allow semanage booleans to take an input file an process lots of booleans at once.


author: Dan Walsh <dwalsh@redhat.com> 2.0.53-1
changelog:
  - Update to upstream
          * Change setfiles to validate all file_contexts files when using -c from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.54-1
changelog:
  - Update to upstream
          * Add support for boolean files and group support for seusers from Dan Walsh.
          * Ensure that setfiles -p output is newline terminated from Russell Coker.


author: Dan Walsh <dwalsh@redhat.com> 2.0.56-1
changelog:
  - Fix semanage help display
  - Update to upstream
          * fixfiles will now remove all files in /tmp and will check for
            unlabeled_t in /tmp and /var/tmp from Dan Walsh.
          * add glob support to restorecond from Dan Walsh.
          * allow semanage to handle multi-line commands in a single transaction
            from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.58-1
changelog:
  - Update to upstream
          * Allow local file context entries to override policy entries in
          semanage from Dan Walsh.
          * Newrole error message corrections from Dan Walsh.
          * Add exception to audit2why call in audit2allow from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-1
changelog:
  - Update to upstream
          * chcat: cut categories at arbitrary point (25) from Dan Walsh
          * semodule: use new interfaces in libsemanage for compressed files
            from Dan Walsh
          * audit2allow: string changes for usage


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-3
changelog:
  - Add Domains Page to system-config-selinux
  - Add ability to create dbus confined applications to polgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.62-1
changelog:
  - Update to upstream
          * Add btrfs to fixfiles from Dan Walsh.
          * Remove restorecond error for matching globs with multiple hard links
          and fix some error messages from Dan Walsh.
          * Make removing a non-existant module a warning rather than an error
            from Dan Walsh.
          * Man page fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.63-1
changelog:
  - Update to upstream
          * Fix transaction checking from Dan Walsh.
          * Make fixfiles -R (for rpm) recursive.
          * Make semanage permissive clean up after itself from Dan Walsh.
          * add /root/.ssh/* to restorecond.conf


author: Dan Walsh <dwalsh@redhat.com> 2.0.64-1
changelog:
  - Update to upstream
          * Keep setfiles from spamming console from Dan Walsh.
          * Fix chcat's category expansion for users from Dan Walsh.
  - Update po files
  - Fix sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.68-1
changelog:
  - Fix location of man pages
  - Update to upstream
          * Modify setfiles to exclude mounts without seclabel option in
          /proc/mounts on kernels >= 2.6.30 from Thomas Liu.
          * Re-enable disable_dontaudit rules upon semodule -B from Christopher
          Pardy and Dan Walsh.
          * setfiles converted to fts from Thomas Liu.


author: Dan Walsh <dwalsh@redhat.com> 2.0.70-1
changelog:
  - Update to upstream
          * Modify restorecon to only call realpath() on user-supplied pathnames
          from Stephen Smalley.
          * Fix typo in fixfiles that prevented it from relabeling btrfs
            filesystems from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.71-1
changelog:
  - Fix chcat to report error on non existing file
  - Update to upstream
          * Modify setfiles/restorecon checking of exclude paths.  Only check
          user-supplied exclude paths (not automatically generated ones based on
          lack of seclabel support), don't require them to be directories, and
          ignore permission denied errors on them (it is ok to exclude a path to
          which the caller lacks permission).


author: Ville Skyttä <ville.skytta@iki.fi> - 2.0.71-9
changelog:
  - Don't try to remove restorecond after last erase (done already in %preun).
  - Ensure scriptlets exit with status 0.
  - Fix %post and %pr


author: Dan Walsh <dwalsh@redhat.com> 2.0.73-1
changelog:
  - Update to upstream
          * Add semanage dontaudit to turn off dontaudits from Dan Walsh.
          * Fix semanage to set correct mode for setrans file from Dan Walsh.
          * Fix malformed dictionary in portRecord from Dan Walsh.
          * Restore symlink handling support to restorecon based on a patch by
          Martin Orr.  This fixes the restorecon /dev/stdin performed by Debian
          udev scripts that was broken by policycoreutils 2.0.70.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-1
changelog:
  - Update to upstream
          * Change semodule upgrade behavior to install even if the module
            is not present from Dan Walsh.
          * Make setfiles label if selinux is disabled and a seclabel aware
            kernel is running from Caleb Case.
          * Clarify forkpty() error message in run_init from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-8
changelog:
  - Add check to sandbox to verify save changes - Chris Pardy
  - Fix memory leak in restorecond - Steve Grubb


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-14
changelog:
  - Allow semanage -i and semanage -o to generate customization files.
  - semanage -o will generate a customization file that semanage -i can read and set a machines to the same selinux configuration


author: Dan Walsh <dwalsh@redhat.com> 2.0.76-1
changelog:
  - Update to upstream
          * Remove setrans management from semanage, as it does not work
            from Dan Walsh.
          * Move load_policy from /usr/sbin to /sbin from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.77-1
changelog:
  - Update to upstream
          * Fixed bug preventing semanage node -a from working
            from Chad Sellers
          * Fixed bug preventing semanage fcontext -l from working
            from Chad Sellers
  - Change semanage to use unicode


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-1
changelog:
  - Update to upstream
          * Remove non-working OUTFILE from fixfiles from Dan Walsh.
          * Additional exception handling in chcat from Dan Walsh.

          * fix sepolgen to read a "type 1403" msg as a policy load by Stephen
            Smalley <sds@tycho.nsa.gov>
          * Add support for Xen ocontexts from Paul Nuzzi.


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-14
changelog:
  - Add session capability to sandbox
  - sandbox -SX -H ~/.homedir -t unconfined_t -l s0:c15 /etc/gdm/Xsession


author: Dan Walsh <dwalsh@redhat.com> 2.0.81-4
changelog:
  - Update to upstream - sepolgen
          * Add since-last-boot option to audit2allow from Dan Walsh.
          * Fix sepolgen output to match what Chris expects for upstream
            refpolicy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-1
changelog:
  - Update to upstream
          * Add avc's since boot from Dan Walsh.
          * Fix unit tests from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-7
changelog:
  - Fix crash when args are empty
  Resolves: #582542
  - Fix semange to exit on bad options
  - Fix semanage dontaudit man page section
  Resolves: #582533


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-13
changelog:
  - Make semanage boolean work on disabled machines and during livecd xguest
  - Fix homedir and tmpdir handling in sandbox
  Resolves: #587263


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-17
changelog:
  - Fix policy tool to have correct name in menus
  - Fix seunshare to handle /tmp being in ~/home
  - Fix saving of altered files
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-23
changelog:
  - Fix seunshare translations
  - Fix seunshare to work on all arches
  - Fix icon for system-config-selinux
  Resolves: #595276


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-27
changelog:
  - Move genhomedircon.8 to same package as genhomedircon
  - Fix sandbox to pass unit test
  Resolves: #595796


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-1
changelog:
  - Update to upstream
          * Add sandbox support from Dan Walsh with modifications from Steve Lawrence.


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-17
changelog:
  - Apply patch to restorecond from Chris Adams, which will cause restorecond
  - to watch first user that logs in.


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-20
changelog:
  - Tighten down seunshare to create /tmp dir with sticky bit and MS_NODEV | MS_NOSUID | MS_NOEXEC;
  - Remove setsid on seunshare so ^c on sandbox will cause apps to exit
  - Add dbus-launch --exit-with-session so all processes launched within the sandbox exit with the sandbox
  - Clean up error handling so error will get sent back to sandbox tool


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-32
changelog:
  - Remove setuid flag and replace with file capabilities
  - Fix sandbox handling of files with spaces in them


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-33
changelog:
  - Move /etc/pam.d/newrole in to polcicycoreutils-newrole
  - Additional capability checking in sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-3
changelog:
  - Polgengui raises the wrong type of exception.  #471078
  - Change semanage to not allow it to semanage module -D
  - Change setsebool to suggest run as root on failure


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-10
changelog:
  - Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name
  - Cleanup chcat man page


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-13
changelog:
  - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
  - Only allow names in polgengui that contain letters and numbers
  - Fix up node handling in semanage command
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-16
changelog:
  - Require python-IPy for policycoreutils-python package
  - Fixes for sepologen
    - Usage statement needs -n name
    - Names with _ are being prevented
    - dbus apps should get _chat interface


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-18
changelog:
  - put back in old handling of -T in sandbox command
  - Put back setsid in seunshare
  - Fix rsync to maintain times


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-20
changelog:
  - Change sepolgen-ifgen to search all available policy files
  - Exit in restorecond if it can not find a UID in the passwd database


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-21
changelog:
  - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
  - This will allow default sandboxes to work on NFS homedirs without allowing
    access to homedir data


author: Dan Walsh <dwalsh@redhat.com> 2.0.85-23
changelog:
  - Fix sepolgen to generate network polcy using generic_if and genric_node versus all_if and all_node


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-6
changelog:
  - Apply patches from Christoph A.
    * fix sandbox title
    * stop xephyr from li
  - Also ignore errors on sandbox include of directory missing files


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-10
changelog:
  - Allow semodule to pick alternate root for selinux files
  - Add ~/.config/* to restorcond_user.conf, so restorecond will watch for mislabeled files in this directory.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-16
changelog:
  - Add -C option to sandbox and seunshare to maintain capabilities, otherwise
  the bounding set will be dropped.
  - Change --cgroups short name -c rather then -C for consistancy
  - Fix memory and fd leaks in seunshare


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-17
changelog:
  - Add -k qualifier to seunshare to have it attempt to kill all processes with
  the matching MCS label.


author: Dan Walsh <dwalsh@redhat.com> 2.0.86-18
changelog:
  - Change seunshare to send kill signals to the childs session.
  - Also add signal handler to catch sigint, so if user enters ctrl-C sandbox will shutdown.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  2.1.4 2011-08-17
          * run_init: clarification of the usage in the
          * semanage: fix usage header around booleans
          * semanage: remove useless empty lines
          * semanage: update man page with new examples
          * semanage: update usage text
          * semanage: introduce file context equivalencies
          * semanage: enable and disable modules
          * semanage: output all local modifications
          * semanage: introduce extraction of local configuration
          * semanage: cleanup error on invalid operation
          * semanage: handle being called with no arguments
          * semanage: return sooner to save CPU time
          * semanage: surround getopt with try/except
          * semanage: use define/raise instead of lots of
          * semanage: some options are only valid for
          * semanage: introduce better deleteall support
          * semanage: do not allow spaces in file
          * semanage: distinguish between builtin and local permissive
          * semanage: centralized ip node handling
          * setfiles: make the restore function exclude() non-static
          * setfiles: use glob to handle ~ and
          * fixfiles: do not hard code types
          * fixfiles: stop trying to be smart about
          * fixfiles: use new kernel seclabel option
          * fixfiles: pipe everything to cat before sending
          * fixfiles: introduce /etc/selinux/fixfiles_exclude_dirs
          * semodule: support for alternative root paths

  2.1.3 2011-08-03
          * semanage: fix indention
          * semodule_package: fix man page typo
          * semodule_expand: update man page with -a
          * semanage: handle os errors
          * semanage: fix traceback with bad options
          * semanage: show usage on -h or --help
          * semanage: introduce more deleteall options
          * semanage: verify ports < 65536
          * transaction into semanageRecords
          * make get_handle a method of semanageRecords
          * remove a needless blank line
          * make process_one error if not initialized correctly
          * fixfiles: correct usage for r_opts.rootpath
          * put -p in help for restorecon and
          * fixfiles: do not try to only label
          * fixfiles clean up /var/run and /var/lib/debug
          * fixfiles delete tmp sockets and pipes rather
          * fixfile use find -delete instead of pipe
          * chcat man page typo
          * add man page for genhomedircon
          * setfiles fix typo
          * setsebool should inform users they need to
          * setsebool typos
          * open_init_tty man page typos
          * Don't add user site directory to sys.path
          * newrole retain CAP_SETPCAP

  2.1.2 2011-08-02
          * seunshare: define _GNU_SOURCE earlier
          * make ignore_enoent do something
          * restorecond: first user logged in is not noticed
          * Repo: update .gitignore

  2.1.1 2011-08-01
          * Man page updates
          * restorecon fix for bad inotify assumptions

  2.1.0 2011-07-27
          * Release, minor version bump


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  -Update to upstream
     * policycoreutils
          * setfiles: Fix process_glob to handle error situations
          * sandbox: Allow seunshare to run as root
          * sandbox: trap sigterm to make sure sandbox
          * sandbox: pass DPI from the desktop
          * sandbox: seunshare: introduce helper spawn_command
          * sandbox: seunshare: introduce new filesystem helpers
          * sandbox: add -C option to not drop
          * sandbox: split seunshare caps dropping
          * sandbox: use dbus-launch
          * sandbox: numerous simple updates to sandbox
          * sandbox: do not require selinux context
          * sandbox: Makefile: new man pages
          * sandbox: rename dir to srcdir
          * sandbox: allow users specify sandbox window size
          * sandbox: check for paths up front
          * sandbox: use defined values for paths rather
          * sandbox: move seunshare globals to the top
          * sandbox: whitespace fix
          * semodule_package: Add semodule_unpackage executable
          * setfiles: get rid of some stupid globals
          * setfiles: move exclude_non_seclabel_mounts to a generic location
     * sepolgen
          * refparser: include open among valid permissions
          * refparser: add support for filename_trans rules


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-4
changelog:
  - Maintain the LANG environment Variable into the sandbox
  - Change restorecon/setfiles to only change type part of the context unless
    -f qualifier is given


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
      policycoreutils-2.1.6
          * sepolgen-ifgen: new attr-helper does something
          * audit2allow: use alternate policy file
          * audit2allow: sepolgen-ifgen use the attr helper
          * setfiles: switch from stat to stat64
          * setfiles: Fix potential crash using dereferenced ftsent
          * setfiles: do not wrap * output at 80 characters
          * sandbox: add -Wall and -Werror to makefile
          * sandbox: add sandbox cgroup support
          * sandbox: rewrite /tmp handling
          * sandbox: do not bind mount so much
          * sandbox: add level based kill option
          * sandbox: cntrl-c should kill entire process control group
          * Create a new preserve_tunables flag in sepol_handle_t.
          * semanage: show running and disk setting for booleans
          * semanage: Dont print heading if no items selected
          * sepolgen: audit2allow is mistakakenly not allowing valid module names
          * semanage: Catch RuntimeErrors, that can be generated when SELinux is disabled
          * More files to ignore
          * tree: default make target to all not install
          * sandbox: do not load unused generic init functions
      sepolgen-1.1.2
          * src: sepolgen: add attribute storing infrastructure
          * Change perm-map and add open to try to get better results on
          * look for booleans that might solve problems
          * sepolgen: audit2allow is mistakakenly not allowing valid module names
          * tree: default make target to all not install


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-5
changelog:
  - A couple of minor coverity fixes for a potential leaked file descriptor
  - An an unchecked return code.
  - Add ~/.local/share/* to restorecond_user watches


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Upgrade to policycoreutils upstream
          * sandbox: Maintain the LANG environment into the sandbox
          * audit2allow: use audit2why internally
          * fixfiles: label /root but not /var/lib/BackupPC
          * semanage: update local boolean settings is dealing with localstore
          * semanage: missing modify=True
          * semanage: set modified correctly
          * restorecond: make restorecond dbuss-able
          * restorecon: Always check return code on asprintf
          * restorecond: make restorecond -u exit when terminal closes
          * sandbox: introduce package name and language stuff
          * semodule_package: remove semodule_unpackage on clean
          * fix sandbox Makefile to support DESTDIR
          * semanage: Add -o description to the semanage man page
          * make use of the new realpath_not_final function
          * setfiles: close /proc/mounts file when finished
          * semodule: Document semodule -p in man page
          * setfiles: fix use before initialized
          * restorecond: Add .local/share as a directory to watch
  - Upgrade to sepolgen upstream
          * Ignore permissive qualifier if found in an interface
          * Return name field in avc data


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-4
changelog:
  - sandbox init script should always return 0
  - sandbox command needs to check range of categories and report error if not big enough


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-6
changelog:
  - Add listing of distribution equivalence class from semanage fcontext -l
  - Add checking to semanage fcontext -a to guarantee a file specification will not be masked by an equivalence


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-7
changelog:
  - Fix dpi handling in sandbox
  - Make sure semanage fcontext -l -C prints if only local equiv have changed


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Upgrade to upstream
          * sandbox: move sandbox.conf.5 to just sandbox.5
          * po: Makefile use -p to preserve times to allow multilib simultatious installs
          * of po files
          * sandbox: Allow user to specify the DPI value for X in a sandbox
          * sandbox: make sure the domain launching sandbox has at least 100 categories
          * sandbox: do not try forever to find available category set
          * sandbox: only complain if sandbox unable to launch
          * sandbox: init script run twice is still successful
          * semanage: print local and dristo equiv rules
          * semanage: check file equivalence rules for conflict
          * semanage: Make sure semanage fcontext -l -C prints even if local keys
          * are not defined
          * semanage: change src,dst to target,substitute for equivalency
          * sestatus: Updated sestatus and man pages.
          * Added SELinux config file man page.
          * add clean target to man Makefile


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  -Update to upstream
  - sepolgen
          * better analysis of why things broke
  - policycoreutils
          * Remove excess whitespace
          * sandbox: Add back in . functions to sandbox.init script
          * Fix Makefile to match other policycoreutils Makefiles
          * semanage: drop unused translation getopt


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-4
changelog:
  - Fix the handling of namespaces in seunshare/sandbox.
  - Currently mounting of directories within sandbox is propogating to the
  - parent namesspace.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-11
changelog:
  - restorecond fixes:
    Stop using depracated g_io interfaces
    Exit with non zero exit code if wrong options given
    Add -h option


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-17
changelog:
  - Change semanage to produce proper audit records for Common Criteria
  - Cleanup packaging for usrmove


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-22
changelog:
  - Change to use new selinux_binary_policy_path()
  - Add systemd_passwd_agent_exec($1), and systemd_read_fifo_file_passwd_run($1) to templates for _admin interface


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream
    - policycoreutils
          * sandbox: do not propogate inside mounts outside
          * sandbox: Removing sandbox init script, should no longer be necessary
          * restorecond: Stop using deprecated interfaces for g_io
          * semanage: proper auditting of user changes for LSPP
          * semanage: audit message to show what record(s) and item(s) have chaged
          * scripts: Update Makefiles to handle /usrmove
          * mcstrans: Version should have been bumped on last check in
          * seunshare: Only drop caps not the Bounding Set from seunshare
          * Add bash-completion scripts for setsebool and semanage
          * newrole: Use correct capng calls in newrole
          * Fix infinite loop with inotify on 2.6.31 kernels
          * fix ftbfs with hardening flags
          * Only run setfiles if we found read-write filesystems to run it on
          * update .po files
          * remove empty po files
          * do not fail to install if unable to make load_policy lnk file

     - sepolgen
          * Fix dead links to www.nsa.gov/selinux
          * audit.py Dont crash if empty data is passed to sepolgen
          * do not use md5 when calculating hash signatures
          * fix detection of policy loads


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Rebuild to get latest libsepol which fixes the file_name transition problems
  - Update translations
  - Fix calls to close fd for restorecond


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-12
changelog:
  - Add -N qualifier to semanage, setsebool and semodule to allow you to update
  - policy without reloading it into the kernel.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-15
changelog:
  - Allow stream sock_files to be stored in /tmp and etc_rw_t directories by sepolgen
  - Trigger on selinux-policy needs to change to selinux-policy-devel
  - Update translations
  - Fix semanage dontaudit off/on exception


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-1
changelog:
  - Update to upstream
    - policycoreutils
          * restorecond: wrong options should exit with non-zero error code
          * restorecond: Add -h option to get usage command
          * resorecond: user: fix fd leak
          * mcstrans: add -f to run in foreground
          * semanage: fix man page range and level defaults
          * semanage: bash completion for modules should include -a,-m, -d
          * semanage: manpage update for -e
          * semanage: dontaudit off should work
          * semanage: locallist option does not take an argument
          * sepolgen: Make use of setools optional within sepolgen
     - sepolgen
          * Make use of setools optional within sepolgen
          * We need to support files that have a + in them


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-4
changelog:
  - Fix restorecon to generate a better percentage of completion on restorecon -R /.
  - Have audit2allow look at the constaint violation and tell the user whether it
  - is because of user,role or level


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-6
changelog:
  - Change polgen to generate dbus apps as optional so they can compile on minimal policy system, patch from Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream
          * genhomedircon: manual page improvements
          * setfiles/restorecon minor improvements
          * run_init: If open_init_pty is not available then just use exec
          * newrole: do not drop capabilities when newrole is run as
          * restorecon: only update type by default
          * scripts: Don't syslog setfiles changes on a fixfiles restore
          * setfiles: do not syslog if no changes
          * Disable user restorecond by default
          * Make restorecon return 0 when a file has changed context
          * setfiles: Fix process_glob error handling
          * semanage: allow enable/disable under -m
          * add .tx to gitignore
          * translations: commit translations from Fedora community
          * po: silence build process
          * gui: Checking in policy to support polgengui and sepolgen.
          * gui: polgen: search for systemd subpackage when generating policy
          * gui: for exploring booleans
          * gui: system-config-selinux gui
          * Add Makefiles to support new gui code
          * gui: remove lockdown wizard
          * return equivalency records in fcontext customized
          * semanage: option to not load new policy into kernel after
          * sandbox: manpage update to describe standard types
          * setsebool: -N should not reload policy on changes
          * semodule: Add -N qualifier to no reload kernel policy
          * gui: polgen: sort selinux types of user controls
          * gui: polgen: follow symlinks and get the real path to
          * gui: Fix missing error function
          * setfiles: return errors when bad paths are given
          * fixfiles: tell restorecon to ignore missing paths
          * setsebool: error when setting multiple options
          * semanage: use boolean subs.
          * sandbox: Make sure Xephyr never listens on tcp ports
          * sepolgen: return and output constraint violation information
          * semanage: skip comments while reading external configuration files
          * restorecond: relabel all mount runtime files in the restorecond example
          * genhomedircon: dynamically create genhomedircon
          * Allow returning of bastard matches
          * sepolgen: return and output constraint violation information
          * audit2allow: one role/type pair per line


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-3
changelog:
  - Allow fixfiles to specify -v, so they can get verbosity rather then progress.
  - Fix load_file Makefile to use SBINDIR rather then real OS.
  - Fix man pages in setfiles and restorecon to reflect what happens when you relabel the entire OS.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-7
changelog:
  - Fix manpage generation, missing import
  - Add equiv_dict to get samba booleans into smbd_selinux
  - Add proper translations for booleans and remove selinux.tbl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-8
changelog:
  - Fix typo in preunstall line for restorecond
  - Add mgrepl patch to consolidate file context generated by sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-9
changelog:
  - Fix semanage to verify that types are appropriate for commands.
    * Patch initiated by mgrepl
    * Fixes problem of specifying non file_types for fcontext, or not port_types for semanage port


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-10
changelog:
  - Update sepolicy generate with patch to create spec file and man page.
  - Patch initiated by Miroslav Grepl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-12
changelog:
  - Add missing spec.py from templates directory needed for sepolicy generate
  - Add /var/tmp as collection point for sandbox apps.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-14
changelog:
  - Add role_allow to sepolicy.search python bindings, this allows us to remove last requirement for setools-cmdline in gui tools.
  - Fix man page generator.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-16
changelog:
  - Add Miroslav Grepl patch to generate html man pages
  - Update Translations
  - Add option to sandbox to shred files before deleting


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-19
changelog:
  - Change sepolicy python bindings to have python pick policy file, fixes weird memory problems in sepolicy network


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-24
changelog:
  - Fix manpage to generate proper man pages for alternate policy,
  basically allow me to build RHEL6 man pages on a Fedora 18 box, as long as
  I pull the policy, policy.xml and file_contexts and file_contexts.homedir


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-25
changelog:
  - Remove run_init, no longer needed with systemd.
  - Fix sepolicy generate to not include subdirs in generated fcontext file.  (mgrepl patch)


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-26
changelog:
  - Fix semanage booleans -l, move more boolean_dict handling into sepolicy
  - Update translations
  - Fixup sepolicy generate to discover /var/log, /var/run and /var/lib directories if they match the name
  - Fix kill function call should indicate signal_perms not kill capability
  - Error out cleanly in system-config-selinux, if it can not contact XServer


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-27
changelog:
  - Only report restorecon warning for missing default label, if not running
  recusively
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-37
changelog:
  - Move sepogen python bindings back into policycoreutils-python out of -devel, since sepolicy is using the


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-41
changelog:
  - Add --path as a parameter to sepolicy generate
  - Print warning message if program does not exists when generating policy, and do not attempt to run nm command
  - Fix sepolicy generate -T to not take an argument, and supress the help message
  - Since this is really just a testing tool


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-44
changelog:
  - Additional fixes for disabled SELinux Box
  - system-config-selinux no longer relies on lokkit for /etc/selinux/config


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-45
changelog:
  - Apply patch from Miroslav to display proper range description in man pages g
  - Should print warning on missing default label when run in recusive mode iff
  - Remove extra -R description, and fix recursive description


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-46
changelog:
  - sepolicy transition was blowing up. Also cleanup output when only source is specified.
  - sepolicy generate should allow policy modules names that include - or _


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-50
changelog:
  - Update translations
  - update sepolicy manpage to generate fcontext equivalence data and to list
  default file context paths.
  - Add ability to generate policy for confined admins and domains like puppet.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-51
changelog:
  - Update translations
  - Fix sepolicy booleans to handle autogenerated booleans descriptions
  - Cleanups of sepolicy manpage
  - Fix crash on git_shell man page generation


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-52
changelog:
  - Update to latest patches from eparis/Upstream
  -    secon: add support for setrans color information in prompt output
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-53
changelog:
  - Update with Miroslav patch to handle role attributes
  - Update Translations
  - import sepolicy will only throw exception on missing policy iff selinux is enabled


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-55
changelog:
  - Update Translations
  - Fix handling of semanage generate --cgi -n MODULE PATHTO/CGI
  -   This fixes the spec file and script file getting wrong names for modules and types.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-56
changelog:
  -  Additional changes for bash completsion and generate man page to match the w
  -  Add newtype as a new qualifier to sepolicy generate.  This new mechanism wil
  -  a policy write to generate types after the initial policy has been written a
  -  will autogenerate all of the interfaces.
  -  I also added a -w options to allow policy writers from the command line to s
  -  the writable directories of files.
  -
  -  Modify network.py to include interface definitions for newly created port type
  -  Standardize of te_types just like all of the other templates.

  -  Change permissive domains creation to raise exception if sepolgen is not ins
  -  get_te_results no longer needs or uses the opts parameter.
  -  The compliler was complaining so I just removed the option.
  -  Start returning analysis data for audit2allow


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-57
changelog:
  - Update to latest patches from eparis/Upstream
  - fixfiles onboot will write any flags handed to it to /.autorelabel.
  -   * Patch sent to initscripts to have fedora-autorelabel pass flags back to fixfiles restore
  -   * This should allow fixfiles -F onboot, to force a hard relabel.
  - Add -p to show progress on full relabel.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-58
changelog:
  - Reorginize sepolicy so all get_all functions are in main module
  - Add -B capability to fixfiles onboot and fixfiles restore, basically searches for all files created since the last boot.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-1
changelog:
  - Update to upstream
          * setfiles: estimate percent progress
          * load_policy: make link at the destination directory
          * Rebuild polgen.glade with glade-3
          * sepolicy: new command to unite small utilities
          * sepolicy: Update Makefiles and po files
          * sandbox: use sepolicy to look for sandbox_t
          * gui: switch to use sepolicy
          * gui: sepolgen: use sepolicy to generate
          * semanage: use sepolicy for boolean dictionary
          * add po file configuration information
          * po: stop running update-po on all
          * semanage: seobject verify policy types before allowing you to assign them.
          * gui: Start using Popen, instead of os.spawnl
          * sandbox: Copy /var/tmp to /tmp as they are the same inside
          * qualifier to shred content
          * semanage: Fix handling of boolean_sub names when using the -F flag
          * semanage: man: roles instead of role
          * gui: system-config-selinux: Catch no DISPLAY= error
          * setfiles: print error if no default label found
          * semanage: list logins file entries in semanage login -l
          * semanage: good error message is sepolgen python module missing
          * gui: system-config-selinux: do not use lokkit
          * secon: add support for setrans color information in prompt output
          * restorecond: remove /etc/mtab from default list
          * gui: If you are not able to read enforcemode set it to False
          * genhomedircon: regenerate genhomedircon more often
          * restorecond: Add /etc/udpatedb.conf to restorecond.conf
          * genhomedircon generation to allow spec file to pass in SEMODULE_PATH
          * fixfiles: relabel only after specific date
          * po: update translations
          * sandbox: seunshare: do not reassign realloc value
          * seunshare: do checking on setfsuid
          * sestatus: rewrite to shut up coverity


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-4
changelog:
  - Revert some changes which are causing the wrong policy version file to be created
  - Switch sandbox to start using openbox rather then matchbox
  - Make sepolgen a symlink to sepolicy
  - update translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-6
changelog:
  - Fix newrole to retain cap_audit_write when compiled with namespace, also
  do not drop capabilities when run as root.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-7
changelog:
  - Add --root/-r flag to sepolicy manpage,
  - This allows us to generate man pages on the fly in the selinux-policy build


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-8
changelog:
  - Sepolixy should not throw an exception on an SELinux disabled machine
  - Switch from using console app to using pkexec, so we will work better
  with policykit.
  - Add missing import to fix system-config-selinux startup
  - Add comment to pamd files about pam_rootok.so
  - Fix sepolicy generate to not comment out the first line


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-10
changelog:
  - Fix sepolicy to be able to work on an SELinux disabled system.
  - Needed to be able to build man pages in selinux-policy package


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-12
changelog:
  - Do not load interface file by default when sepolicy is called, mov get_all_methods to the sepolicy package


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.1.14-13
changelog:
  - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
  - clean up spec to follow current guidelines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-14
changelog:
  - Allow users with symlinked homedirs to work. call realpath on homedir
  - Fix sepolicy reorganization of helper functions.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-20
changelog:
  - Mention creation of permissive domains in sepolicy generate man page
  - Change sepolicy manpage to use shortname with an "_" to stop accidently grabbing unrelated types for a domain.
  - Fix audit2allow to show better information on constraint violations.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-21
changelog:
  - sepolicy generate should look for booleans that effect equivalence names, and add them to the man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-22
changelog:
  - Fix newrole to not drop capabilities from the bounding set.
  - Stop dropping capabilities from its children.
  - Add better error messages.
  - Change location of bash_completion files to /usr/share/bash-completion/compl


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-23
changelog:
  - sepolicy manpage:
  -   use nroff instead of man2html
  -   Remove checking for name of person who created the man page
  - audit2allow
  -   Fix output to show the level that is different.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-26
changelog:
  - Can not unshare IPC in sandbox, since it blows up Xephyr
  - Remove bogus error message sandbox about reseting setfsuid


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-28
changelog:
  - Fix audit2allow output to better align analysys with the allow rules
  - Apply Miroslav Grepl patch to clean up sepolicy generate usage
  - Apply Miroslav Grepl patch to fixupt handing of admin_user generation
  - Update Tranlslations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-30
changelog:
  - Add buildrequires for OpenBox to prevent me from accidently building into RHEL7
  - Add support for returning alias data to sepolicy.info python bindings


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-31
changelog:
  - Add post install scripts for gui to make sure Icon Cache is refreshed.
  - Fix grammar issue in secon man page
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-32
changelog:
  - Move sepolicy to policycoreutils-devel pacage, since most of it is used for devel
  - Apply Miroslav Grepl Patches for sepolicy
  -- Fix generate mutually groups option handling
  -- EUSER is used for existing policy
  -- customize options can be used together with admin_domain option
  -- Fix manpage.py to generate correct man pages for SELinux users
  -- Fix policy *.te file generated by customize+writepaths options
  -- Fix install script for confined_admin option


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-34
changelog:
  - Update translations
  - Add patch inspired by Miroslav Grepl to add extended information for sepolicy interface command.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-35
changelog:
  - Update translations
  - Add patch by Miroslav Grepl to add compile test for sepolicy interface command.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-37
changelog:
  - Fix exceptionion hanling in audit2allow -o
  - Generate Man pages for everydomain, not just ones with exec_t entrypoints
  - sepolicy comunicate should return ValueError not TypeError
  - Trim header line in sepolicy manpage to use less space
  - Add missing options to restorecon man page


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-38
changelog:
  - No longer run sepolgen-ifgen at install time.
  - Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed.
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-39
changelog:
  - Run sepolgen-ifgen in audit2allow and sepolicy generate, if needed, first time
  - Add  Sven Vermeulen  patches to cleanup man pages


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-40
changelog:
  - Only require selinux-policy-devel for policycoreutils-devel, this will shrink the size of the livecd.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-42
changelog:
  - Add support for Xephyr -resizable, so sandbox can now resize window
  - Add support for compressed policy.xml
  - Miroslav Grepl patch to allow sepolicy interface on individual interface fil
  - Also add capability to test interfaces for correctness.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-44
changelog:
  - Fix sepolicy-generate man page to clear up options/policy type
  - Add Miroslav Grepl to not generate man page when doing
    sepolicy generate --customize
  - Add support for executing semanage user within spec file
  - Fix generation of confined admin domains, to handle booleans properly.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-46
changelog:
  - Fix the name of the spec file generated in the build script
  - Add mgrepl patch to support argparse for semanage command parsing


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-48
changelog:
  - Fix audit2allow -o to open file for append
  - Fix the name of the spec file generated in the build script


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-50
changelog:
  - Fix sepolicy generate --confined_admin to generate tunables
  - Add new interface to generate entrypoints for use with new gui


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-56
changelog:
  - Fix semanage export/import commands
  - Fix semange module command
  - Remove --version option from sandbox


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-57
changelog:
  - Remove requires for systemd-sysv
  - Move systemd-units require to restorecond section
  - Update Tranlasions
  - More sepolicy interfaces for gui
  - Cleanup man pages for sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-63
changelog:
  - Update sepolicy gui.
  - Error out of you call sepolicy gui without policycoreutils-gui package installed
  - Fix semanage login -d command
  - Update Translations


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-65
changelog:
  - Do not generate shell script or spec file for sepolicy generate --newtype
  - Update translations
  - Fix sepolicy generate --admin_user man page again
  - Fix setsebool to print less verbose error messages by default, add -V for ve


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-68
changelog:
  - Fix bugs introduced by previous patch.  semanage port
  - Update Translations
  - Add test suite for sepolicy command lines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-75
changelog:
  - Update sepolicy gui code, cleanups and add file transition tab
  - Fix semanage fcontext -a --ftype code to work.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-79
changelog:
  - Add Miroslav Grepl setsebool patch to give better error message on bad boolean names
  - Additional help screens for sepolicy gui


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-80
changelog:
  - Random fixes for sepolicy gui
    * Do not prompt for password until you make a change
    * Add user mappings and selinux users page
    * lots of code cleanup

  - Verify homedir is owned by user before mounting over it with seunshare
  - Fix fixfiles to handle Relabel properly
  - Fix semanage fcontext -e / command to allow "/"


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-82
changelog:
  - Improvements to sepolicy gui
    - Add more help information
    - Cleanup code
    - Add deny_ptrace on lockdown screen
    - Make unconfined/permissivedomains lockdown work
    - Add more support for file equivalency


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-85
changelog:
  - Fixes for fixfiles
    * exclude_from_dirs should apply to all types of restorecon calls
    * fixfiles check now works
    * exit with the correct status

  - semanage no longer import selinux


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-86
changelog:
  - sepolicy gui
    - mgrepl added delete screens for users and login
    - Fix lots of bugs.
  - Update Translations.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.14-88
changelog:
  - Cleanup errors found by pychecker
  - Apply patch from Michal Trunecka to allow restorecon to handle {} in globs


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
          * Properly build the swig exception file from Laurent Bigonville.
          * Fix man pages from Laurent Bigonville.
          * Support overriding PATH and INITDIR in Makefile from Laurent Bigonville.
          * Fix LDFLAGS usage from Laurent Bigonville.
          * Fix init_policy warning from Laurent Bigonville.
          * Fix semanage logging from Laurent Bigonville.
          * Open newrole stdin as read/write from Sven Vermeulen.
          * Fix sepolicy transition from Sven Vermeulen.
          * Support overriding CFLAGS from Simon Ruderich.
          * Create correct man directory for run_init from Russell Coker.
          * restorecon GLOB_BRACE change from Michal Trunecka.
          * Extend audit2why to report additional constraint information.
          * Catch IOError errors within audit2allow from Dan Walsh.
          * semanage export/import fixes from Dan Walsh.
          * Improve setfiles progress reporting from Dan Walsh.
          * Document setfiles -o option in usage from Dan Walsh.
          * Change setfiles to always return -1 on failure from Dan Walsh.
          * Improve setsebool error r eporting from Dan Walsh.
          * Major overhaul of gui from Dan Walsh.
          * Fix sepolicy handling of non-MLS policy from Dan Walsh.
          * Support returning type aliases from Dan Walsh.
          * Add sepolicy tests from Dan Walsh.
          * Add org.selinux.config.policy from Dan Walsh.
          * Improve range and user input checking by semanage from Dan Walsh.
          * Prevent source or target arguments that end with / for substitutions from Dan Walsh.
          * Allow use of <<none>> for semanage fcontext from Dan Walsh.
          * Report customized user levels from Dan Walsh.
          * Support deleteall for restoring disabled modules from Dan Walsh.
          * Improve semanage error reporting from Dan Walsh.
          * Only list disabled modules for module locallist from Dan Walsh.
          * Fix logging from Dan Walsh.
          * Define new constants for file type character codes from Dan Walsh.
          * Improve bash completions from Dan Walsh.
          * Convert semanage to argparse from Dan Walsh (originally by Dave Quigley).
          * Add semanage tests from Dan Walsh.
          * Split semanage man pages from Dan Walsh.
          * Move bash completion scripts from Dan Walsh.
          * Replace genhomedircon script with a link to semodule from Dan Walsh.
          * Fix fixfiles from Dan Walsh.
          * Add support for systemd service for restorecon from Dan Walsh.
          * Spelling corrections from Dan Walsh.
          * Improve sandbox support for home dir symlinks and file caps from Dan Walsh.
          * Switch sandbox to openbox window manager from Dan Walsh.
          * Coalesce audit2why and audit2allow from Dan Walsh.
          * Change audit2allow to append to output file from Dan Walsh.
          * Update translations from Dan Walsh.
          * Change audit2why to use selinux_current_policy_path from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2-2
changelog:
  - Shift around some of the files to more appropriate packages.
          * semodule_* packages are required for devel.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-1
changelog:
  - Speed up startup time of sepolicy gui
  - Clean up ports screen to only show enabled ports.
  - Update to upstream 
          * Remove import policycoreutils.default_encoding_utf8 from semanage from Dan Walsh.
          * Make yum/extract_rpms optional for sepolicy generate from Dan Walsh.
          * Add test suite for audit2allow and sepolgen-ifgen from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.3-1
changelog:
  - Update to upstream 
          * Apply polkit check on all dbus interfaces and restrict to active user from Dan Walsh.
          * Fix typo in sepolicy gui dbus.relabel_on_boot call from Dan Walsh.
  - Apply Miroslav Grepl patch to fix TEMPLATETYPE_domtrans description in sepolicy generate


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-1
changelog:
  - Update to upstream 
          * Revert automatic setting of serange and seuser in seobject; was breaking non-MLS systems.
  - Add patches for sepolicy gui from mgrepl to
    Fix advanced_item_button_push() to allow to select an application in advanced search menu
    Fix previously_modified_initialize() to show modified changes properly for all selections


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-5
changelog:
  - Fix semanage man page description of import command
  - Fix policy kit file to allow changing to permissive mode


author: Dan Walsh <dwalsh@redhat.com> - 2.2.4-6
changelog:
  - Fix sepolicy gui selection for advanced screen
  - Update Translations
  - Move requires checkpolicy requirement into policycoreutils-python


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-3
changelog:
  - Add Miroslav patch to
  - Fix previously_modified_initialize() to show modified changes properly for all selections


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-8
changelog:
  - Update Translations
  - Make selinux-policy build working also on another architectures related to s
  - Miroslav grepl patch to fix the creation of man pages on different architectures.
  - Add ability to list the actual active modules
  - Fix spelling mistake on sesearch in generate man pages.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.5-9
changelog:
  - mgrepl [PATCH] Deleteall user customization fails if there is a user used
  - for the default login. We do not want to fail on it and continue to delete
  - customizations for users which are not used for default login.


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.5-10
changelog:
  - Add support for Fedora21 html manpage structure
  - Fix broken dependencies to require only usermode-gtk


author: Miroslav Grepl <mgreplh@redhat.com> - 2.2.5-12
changelog:
  - Add policycoreutils-rhat-revert.patch to revert the last two commits to make build working
  - Add 0001-Fix-STANDARD_FILE_CONTEXT-section-in-man-pages patch


author: Dan Walsh <dwalsh@redhat.com> - 2.3-1
changelog:
  - Update to upstream 
          * Add -P semodule option to man page from Dan Walsh.
          * selinux_current_policy_path will return none on a disabled SELinux system from Dan Walsh.
          * Add new icons for sepolicy gui from Dan Walsh.
          * Only return writeable files that are enabled from Dan Walsh.
          * Add domain to short list of domains, when -t and -d from Dan Walsh.
          * Fix up desktop files to match current standards from Dan Walsh.
          * Add support to return sensitivities and categories for python from Dan Walsh.
          * Cleanup whitespace from Dan Walsh.
          * Add message to tell user to install sandbox policy from Dan Walsh.
          * Add systemd unit file for mcstrans from Laurent Bigonville.
          * Improve restorecond systemd unit file from Laurent Bigonville.
          * Minor man pages improvements from Laurent Bigonville.


author: Dan Walsh <dwalsh@redhat.com> - 2.3-3
changelog:
  - Update Miroslav Grepl Patches
    * If there is no executable we don't want to print a part of STANDARD FILE CON
    * Add-manpages-for-typealiased-types
    * Make fixfiles_exclude_dirs working if there is a substituion for the given d


author: Miroslav Grepl <mgrepl@redhat.com> - 2.3-7
changelog:
  - Examples are no longer in the main semanage man page (#1084390)
  - Add support for Fedora22 man pages. We need to fix it to not using hardcoding.
  - Print usage for all mutually exclusive options.
  - Fix selinux man page to refer seinfo and sesearch tools.


author: Miroslav Grepl <mgrepl@redhat.com> - 2.3-11
changelog:
  - Improvements to audit2allow from rhallise@redhat.com
      * Check for mislabeled files.
      * Check for base file use and
      * Suggest writable files as alternatives


author: Dan Walsh <dwalsh@redhat.com> - 2.3-14
changelog:
  - Audit2allow will check for mislabeled files, and tells user to fix the label.
  - Also checks for basefiles and suggests creating a different label.
  - Patch from Ryan Hallisey


author: Petr Lautrbach <plautrba@redhat.com> 2.3-15
changelog:
  - We need to cover file_context.XXX.homedir to have fixfiles with exclude_dirs working correctly
  - Use dnf instead of yum (#1156547)


author: Petr Lautrbach <plautrba@redhat.com> 2.3-16
changelog:
  - Temporary removed Requires:audit-libs-python from policycoreutils-python3 subpackage (#1195139)
  - Simplication of sepolicy-manpage web functionality (#1193552)


author: Petr Lautrbach <plautrba@redhat.com> 2.4-0.6
changelog:
  - policycoreutils: semanage: update to new source policy infrastructure
  - semanage: move permissive module creation to /tmp


author: Petr Lautrbach <plautrba@redhat.com> 2.4-5
changelog:
  - Move python utilities from -python to -python-utilities
  - All scripts originally from policycoreutils-python use python 3 now


author: Petr Lautrbach <plautrba@redhat.com> 2.4-12
changelog:
  - Fix several semanage issue (#1247714)
  - Decode output from subprocess, if error occurred (#1247039)


author: Petr Lautrbach <plautrba@redhat.com> 2.4-18
changelog:
  - Improve sepolicy command line interface
  - Fix sandbox to propagate specified MCS/MLS Security Level. (#1279006)
  - Fix 'audit2allow -R' (#1280418)


author: Petr Lautrbach <plautrba@redhat.com> - 2.4-20
changelog:
  - Fix 'semanage permissive -l' subcommand (#1286325)
  - Several 'sepolicy gui' fixes (#1281309,#1281309,#1282382)


author: Petr Lautrbach <plautrba@redhat.com> 2.5-2
changelog:
  - policycoreutils/sepolicy: selinux_server.py to use GLib instead of gobject
  - policycoreutils-gui requires python-slip-dbus (#1314685)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Fix typos in semanage manpages
  - Fix the documentation of -l,--list for semodule
  - Minor fix in a French translation
  - Fix the extract example in semodule.8
  - Update sandbox.8 man page
  - Remove typos from chcat --help
  - sepolgen: Remove additional files when cleaning


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-12
changelog:
  - open_init_pty: Do not error on EINTR
  - Fix [-s STORE] typos in semanage
  - Update sandbox types in sandbox manual
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> 2.5-16
changelog:
  - Remove unused autoconf files from po/
  - Remove duplicate, empty translation files
  - Rebuilt with libsepol-2.5-9, libselinux-2.5-11, libsemanage-2.5-7


author: Petr Lautrbach <plautrba@redhat.com> 2.5-17
changelog:
  - sandbox: Use dbus-run-session instead of dbus-launch when available
  - hll/pp: Change warning for module name not matching filename to match new behavior
  - Remove LDFLAGS from CFLAGS
  - sandbox: create a new session for sandboxed processes
  - sandbox: do not try to setup directories without -X or -M
  - sandbox: do not run xmodmap in a new X session
  - sandbox: Use GObject introspection binding instead of pygtk2
  - sandbox: fix file labels on copied files
  - sandbox: tests - close stdout of p
  - sandbox: tests - use sandbox from cwd
  - audit2allow: tests should use local copy not system
  - audit2allow: fix audit2why import from seobject
  - audit2allow: remove audit2why so that it gets symlinked
  - semanage: fix man page and help message for import option
  - semanage: fix error message for fcontext -m
  - semanage: Fix semanage fcontext -D
  - semanage: Correct fcontext auditing
  - semanage: Default serange to "s0" for port modify
  - semanage: Use socket.getprotobyname for protocol
  - semanage: fix modify action in node and interface
  - fixfiles: Pass -n to restorecon for fixfiles check
  - sepolicy: Check get_rpm_nvr_list() return value
  - Don't use subprocess.getstatusoutput() in Python 2 code
  - semanage: Add auditing of changes in records
  - Remove unused 'q' from semodule getopt string


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-19
changelog:
  - seobject: Handle python error returns correctly
  - policycoreutils/sepolicy/gui: fix current selinux state radiobutton
  - policycoreutils: semodule_package: do not fail with an empty fc file


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-5
changelog:
  - semanage: Unify argument handling (#1398987)
  - setfiles: set up a logging callback for libselinux
  - setfiles: Fix setfiles progress indicator
  - setfiles: stdout messages don't need program prefix
  - setfiles: don't scramble stdout and stderr together (#1435894)
  - restorecond: Decrease loglevel of termination message (#1264505)
  - fixfiles should handle path arguments more robustly
  - fixfiles: handle unexpected spaces in command
  - fixfiles: remove useless use of cat (#1435894)
  - semanage: Add checks if a module name is passed in (#1420707)
  - semanage: fix export of fcontext socket entries (#1435127)
  - selinux-autorelabel: remove incorrect redirection to /dev/null (#1415674)


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-7
changelog:
  - Make 'sepolicy manpage' and 'sepolicy transition' faster
  - open_init_pty: restore stdin/stdout to blocking upon exit
  - fixfiles: do not dereference link files in tmp
  - fixfiles: use a consistent order for options to restorecon
  - fixfiles: don't ignore `-F` when run in `-C` mode
  - fixfiles: remove bad modes of "relabel" command
  - fixfiles: refactor into the `set -u` dialect
  - fixfiles: if restorecon aborts, we should too
  - fixfiles: usage errors are fatal
  - fixfiles: syntax error
  - fixfiles: remove two unused variables
  - fixfiles: tidy up usage(), manpage synopsis
  - fixfiles: deprecate -l option
  - fixfiles: move logit call outside of redirected function
  - fixfiles: fix logging about R/O filesystems
  - fixfiles: clarify exclude_dirs()
  - fixfiles: remove (broken) redundant code


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.7-2
changelog:
  - Python 2 binary package renamed to python2-policycoreutils
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-4
changelog:
  - restorecond: check write() and daemon() results
  - sepolicy: do not fail when file_contexts.local or .subs do not exist
  - sepolicy: remove stray space in section "SEE ALSO"
  - sepolicy: fix misspelling of _ra_content_t suffix
  - gui: port to Python 3 by migrating to PyGI
  - gui: remove the status bar
  - gui: fix parsing of "semodule -lfull" in tab Modules
  - gui: delete overridden definition of usersPage.delete()
  - Enable listing file_contexts.homedirs (#1409813)
  - remove semodule_deps


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-5
changelog:
  - sepolicy: Fix sepolicy manpage
  - semanage: Update Infiniband code to work on python3
  - semanage: Fix export of ibendport entries
  - semanage: Enforce noreload only if it's requested by -N option


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-6
changelog:
  - semanage: make seobject.py backward compatible
  - Own %{pythonX_sitelib}/site-packages/sepolicy directories (#1522942)


author: Miro Hrončok <mhroncok@redhat.com> - 2.7-12
changelog:
  - Rename the python3 subpackage to have prefix, not suffix
  - Use python3 prefixes in requires where possible


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-15
changelog:
  - sepolicy: Fix translated strings with parameters
  - sepolicy: Support non-MLS policy
  - sepolicy: Initialize policy.ports as a dict in generate.py
  - gui/polgengui.py: Use stop_emission_by_name instead of emit_stop_by_name
  - Minor update for bash completion
  - semodule_package: fix semodule_unpackage man page
  - gui/semanagePage: Close "edit" and "add" dialogues when successfull
  - gui/fcontextPage: Set default object class in addDialog\
  - sepolgen: fix typo in PolicyGenerator
  - build: follow standard semantics for DESTDIR and PREFIX


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-19
changelog:
  - selinux-autorelabel: set UEFI boot order (BootNext) same as BootCurrent
  - selinux-autorelabel: synchronize cached writes before reboot (#1385272)


author: Petr Lautrbach <plautrba@redhat.com> - 2.8-4
changelog:
  - selinux-autorelabel: Use plymouth --quit rather then --hide-splash (#1592221)
  - selinux-autorelabel: Increment boot_indeterminate grub environment variable (#1592221)
  - Do not require libcgroup - it's not used anymore


author: Petr Lautrbach <plautrba@redhat.com> - 2.8-7
changelog:
  - setfiles: Improve description of -d switch
  - Fix typo in newrole.1 manpage
  - semanage: Stop rejecting aliases in semanage commands
  - sepolicy: Stop rejecting aliases in sepolicy commands
  - sepolicy: Fix "info" to search aliases as well
  - sepolgen: fix refpolicy parsing of "permissive"
  - sepolgen: return NotImplemented instead of raising it
  - semanage: fix Python syntax of catching several exceptions
  - semanage: Replace bare except with specific one
  - semanage: Fix logger class definition
  - semanage: Stop logging loginRecords changes
  - add xperms support to audit2allow
  - sepolgen: fix access vector initialization
  - sepolgen: print all AV rules correctly


author: Petr Lautrbach <plautrba@redhat.com> - 2.8-15
changelog:
  - chcat: use check_call instead of getstatusoutput
  - semanage: Use standard argparse.error() method
  - semanage: Fix handling of -a/-e/-d/-r options


author: Petr Lautrbach <plautrba@redhat.com> - 2.8-16.1
changelog:
  - semanage: move valid_types initialisations to class constructors
  - semanage: import sepolicy only when it's needed
  - sepolicy: Add sepolicy.load_store_policy(store)
  - semanage: Start exporting "ibendport" and "ibpkey" entries


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-4
changelog:
  - semanage: Do not use default s0 range in "semanage login -a" (#1554360)
  - gui: Fix remove module in system-config-selinux (#1748763)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-5
changelog:
  - fixfiles: Fix "verify" option (#1647532)
  - semanage: Improve handling of "permissive" statements (#1417455)
  - semanage: fix moduleRecords.customized()
  - semanage: Add support for DCCP and SCTP protocols (#1563742)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-10
changelog:
  - python/semanage: Sort imports in alphabetical order
  - python/semanage: empty stdout before exiting on BrokenPipeError (#1822100)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-19
changelog:
  - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7)
  - semodule: add command-line option to detect module changes (#2049189)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-20
changelog:
  - python: Split "semanage import" into two transactions (#2063353)
  - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802)
  - selinux-autorelabel: Do not force reboot (#2093133)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-21.1
changelog:
  - python: Harden tools against "rogue" modules (#2128976)
  - Update "pathfix" arguments to match ^^^ (#2128976)
  - python: Do not query the local database if the fcontext is non-local (#2124825)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-25
changelog:
  - Harden more tools against "rogue" modules (RHEL-17351)
  - sepolicy: port to dnf4 python API (RHEL-17398)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-26
changelog:
  - python/semanage: Allow modifying records on "add" (RHEL-28167)
  - python/semanage: Do not sort local fcontext definitions (RHEL-24461)


author: Adam Jackson <ajax@redhat.com> 0.8.0-3
changelog:
  - poppler-0.8.0-ocg-crash.patch: Fix a crash when no optional content
    groups are defined.
  - Mangle configure to account for the new directory for qt3 libs.
  - Fix grammar in %description.


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-3
changelog:
  - Correct permissions of goo/GooTimer.h
  - Convert pdftohtml.1 to utf8
  - Make the pdftohtml's Provides/Obsoletes versioned


author: Marek Kasik <mkasik@redhat.com> - 0.15.0-5
changelog:
  - Add poppler-0.15.0-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.15.0-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.15.0-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639861


author: Marek Kasik <mkasik@redhat.com> - 0.17.3-2
changelog:
  - Don't include pdfextract and pdfmerge in resulting packages for now
  - since they conflict with packages pdfmerge and mupdf (#740906)


author: Marek Kasik <mkasik@redhat.com> 0.18.4-3
changelog:
  - Backport of a patch which sets mask matrix before drawing an image with a mask
  - Resolves: #817378


author: Marek Kasik <mkasik@redhat.com> 0.20.2-6
changelog:
  - Backport most of the changes from poppler-0.20.3 - poppler-0.20.5
  -   (those which doesn't change API or ABI and are important)
  - See poppler-0.20.3-5.patch for detailed list of included commits


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-8
changelog:
  - Check for stream before calling stream methods
  - when saving an embedded file
  - Resolves: #1649438


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-19
changelog:
  - Constrain number of cycles in rescale filter
  - Compute correct coverage values for box filter
  - Resolves: #1688418


author: Marek Kasik <mkasik@redhat.com> - 0.66.0-25
changelog:
  - Check whether input is RGB in PSOutputDev::checkPageSlice()
  - also when using "-optimizecolorspace" flag
  - Resolves: #1697576


author: Marek Kasik <mkasik@redhat.com> - 20.11.0-11
changelog:
  - Fix crashes in FoFiType1C
  - Rebuild for inclusion of poppler-glib-doc in CRB
  - Resolves: RHEL-4255, RHEL-4273


author: Marek Kasik <mkasik@redhat.com> - 20.11.0-12
changelog:
  - Fix crash in broken documents when using -dests
  - Fix versions in changelog
  - Resolves: RHEL-44330


author: Filip Januš <fjanus@redhat.com> - 10.19-2
changelog:
  - Add missing files into file section of server package
    postgresql-setup v8.6 newly provides postgresql-upgrade


author: Filip Januš <fjanus@redhat.com> - 10.21-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 10.21
  - Release notes: https://www.postgresql.org/docs/release/10.21/


author: Dominik Rehák <drehak@redhat.com> - 10.23-2
changelog:
  - Backport fixes for CVE-2023-2454 and CVE-2023-2455
  - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35)
  - Resolves: #2207931


author: Filip Januš <fjanus@redhat.com> - 12.11-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 12.11
  - Release notes: https://www.postgresql.org/docs/release/12.11/


author: Kaj J. Niemi <kajtzu@fi.basen.net> 7.4-0.1
changelog:
  - 7.4
  - Fixed Patch #1 (now rpm-pgsql-7.4.patch)
  - Fixed Patch #2 (now rpm-multilib-7.4.patch):
  - Patch #4 is unnecessary (upstream)
  - Fixed Patch #6 (now postgresql-7.4-src-tutorial.patch)
  - Added Patch #8 (postgresql-7.4-com_err.patch) as com_err()
    is provided by e2fsprogs and CPPFLAGS gets lost somewhere
    inside configure (bad macro?)
  - No 7.4 PDF docs available yet (Source #17)
  - PyGreSQL is separated from the upstream distribution but
    we include it as usual (Source #18)
  - Default to compiling libpq and ECPG as fully thread-safe

  - 7.4 Origin.  See previous spec files for previous history. Adapted
  - from Red Hat and PGDG's 7.3.4 RPM, directly descended from
  - postgresql-7.3.4-2 as shipped in Fedora Core 1.


author: Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>
changelog:
  - 7.4-0.1PGDG
  - Development JDBC jars in addition to the 7.3 jars; will replace the
  - 7.3 jars once 7.4 official jars are released.
  - Changed to use the bzip2 source to save a little size.
  - Removed some commented out portions of the specfile.
  - Removed the 7.3.4 PDF docs.  Will replace with 7.4 PDF's once they
  - are ready.


author: David Jee <djee@redhat.com> 7.4-4
changelog:
  - Add PyGreSQL patch for deprecated column pg_type.typprtlen [Bug #111263]
  - Add headers patch which moves ecpg headers to /usr/include/ecpg
    [Bug #111195]


author: Lamar Owen <lowen@pari.edu>
changelog:
  - 7.4.1-1PGDG
  - Merge Sander Steffann's changes up to 7.4-0.5PGDG
  - Proper 7.4.1 JDBC jars this time.
  - Patch for no pl/python from Alvaro


author: Tom Lane <tgl@redhat.com> 7.4.2-1
changelog:
  - Update to PostgreSQL 7.4.2; sync with community SRPM as much as possible.
  - Support PGOPTS from /etc/sysconfig/pgsql, per bug 111504.
  - Fix permissions on /etc/sysconfig/pgsql, per bug 115278.
  - SELinux patch in init file: always su </dev/null, per bug 117901.
  - Rebuilt


author: Tom Lane <tgl@redhat.com> 7.4.3-1
changelog:
  - Update to PostgreSQL 7.4.3.
  - Uninstalling server RPM stops postmaster first, per bug 114846.
  - Fix su commands to not assume PG user's shell is sh-like, per bug 124024.
  - Fix permissions on postgresql-python doc files, per bug 124822.
  - Minor postgresql.init improvements.


author: Tom Lane <tgl@redhat.com> 7.4.3-3
changelog:
  - Undo ill-considered chkconfig change that causes server to start
    immediately upon install.  Mea culpa (bug 127552).


author: Tom Lane <tgl@redhat.com> 7.4.5-1
changelog:
  - Update to PostgreSQL 7.4.5.
  - Update JDBC jars to driver build 215.
  - Add Obsoletes: entries for rh-postgresql packages, per bug 129278.


author: Tom Lane <tgl@redhat.com> 7.4.5-3
changelog:
  - Solve the stale lockfile problem (bugs 71295, 96981, 134090)
  - Use runuser instead of su for SELinux (bug 134588)


author: Tom Lane <tgl@redhat.com> 7.4.5-4
changelog:
  - Remove contrib/oidjoins stuff from installed fileset; it's of no use
    to ordinary users and has a security issue (bugs 136300, 136301)
  - adjust chkconfig priority (bug 128852)


author: Tom Lane <tgl@redhat.com> 7.4.6-1
changelog:
  - Update to PostgreSQL 7.4.6 (bugs 136947, 136949)
  - Make init script more paranoid about mkdir step of initializing a new
    database (bugs 136947, 136949)


author: Tom Lane <tgl@redhat.com> 7.4.6-3
changelog:
  - Update to PyGreSQL 3.6 (to fix bug #142711)
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)


author: Tom Lane <tgl@redhat.com> 8.0.0-1
changelog:
  - Update to PostgreSQL 8.0.0, PyGreSQL 3.6.1, pgtcl 1.5.2,
    and jdbc driver build 309.
  - Extensive cleanout of obsolete cruft in patch set.
  - Regression tests are run during RPM build (NOTE: cannot build as root when
    this is enabled).
  - Postmaster stderr goes someplace useful, not /dev/null (bz#76503, #103767)
  - Make init script return a useful exit status (bz#80782)
  - Move docs' tutorial directory to %{_libdir}/pgsql/tutorial, since it
    includes .so files that surely do not belong under /usr/share.
  - Remove useless .sgml files from docs RPM (bz#134450)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 8.0.1-2
changelog:
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.


author: Tom Lane <tgl@redhat.com> 8.0.1-4
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 8.0.3-1
changelog:
  - Update to PostgreSQL 8.0.3 (includes security and data-loss fixes; see
    bz#156727, CAN-2005-1409, CAN-2005-1410)
  - Update to jdbc driver build 311
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 8.0.4-1
changelog:
  - Update to PostgreSQL 8.0.4, PyGreSQL 3.6.2, and jdbc driver build 312
  - Adjust pgtcl link command to ensure it binds to correct libpq (bug #166665)
  - Remove obsolete Conflicts: against other python versions (bug #166754)
  - Add /etc/pam.d/postgresql (bug #167040)
  - Include contrib/xml2 in build (bug #167492)


author: Tom Lane <tgl@redhat.com> 8.1.0-1
changelog:
  - Update to PostgreSQL 8.1.0, PyGreSQL 3.7, and jdbc driver build 404
  - Fix PAM config file (must have account not only auth) (bug #167040)
  - Add BuildPrereq: libxslt-devel (bug #170141)
  - Sync with PGDG SRPM as much as feasible


author: Tom Lane <tgl@redhat.com> 8.1.1-1
changelog:
  - Update to PostgreSQL 8.1.1
  - Make pg_config.h architecture-independent for multilib installs;
    put the original pg_config.h into pg_config_$ARCH.h


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.2.0-1
changelog:
  - Update to PostgreSQL 8.2.0
  - Update to PyGreSQL 3.8.1
  - Fix chcon arguments in test/regress/Makefile
  Related: #201035
  - Adjust init script to not fool /etc/rc.d/rc
  Resolves: #161470
  - Change init script to not do initdb automatically, but require
    manual "service postgresql initdb" for safety.  Per upstream discussions.


author: Tom Lane <tgl@redhat.com> 8.2.1-1
changelog:
  - Update to PostgreSQL 8.2.1
  - Update to pgtcl 1.5.3
  - Be sure we link to libncurses, not libtermcap which is disappearing in Fedora


author: Tom Lane <tgl@redhat.com> 8.2.1-2
changelog:
  - Split -pl subpackage into three new packages to reduce dependencies
    and track upstream project's packaging.


author: Tom Lane <tgl@redhat.com> 8.2.4-2
changelog:
  - Fix oversight in postgresql-test makefile: pg_regress isn't a shell script
    anymore.  Per upstream bug 3398.


author: Tom Lane <tgl@redhat.com> 8.2.4-4
changelog:
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates
  - Don't remove postgres user/group during RPM uninstall, per Fedora
    packaging guidelines
  - Seems we need an explicit BuildRequires on gawk now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 8.2.4-5
changelog:
  - Use nicer solution for tzdata file substitution: upstream discussion
    concluded that hardwiring the path was better than a symlink after all.


author: Tom Lane <tgl@redhat.com> 8.2.6-1
changelog:
  - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  - Make initscript and pam config files be installed unconditionally;
    seems new buildroots don't necessarily have those directories in place


author: Tom Lane <tgl@redhat.com> 8.3RC2-1
changelog:
  - Update to PostgreSQL 8.3RC2 (not waiting for 8.3.0 because Fedora 9 alpha
    should be 8.3-based not 8.2-based).
  - Update to pgtcl 1.6.2


author: Tom Lane <tgl@redhat.com> 8.3.1-2
changelog:
  - Clean up cross-subpackage Requires: to ensure that updating any one
    subpackage brings in the matching versions of others.
  Resolves: #444271


author: Tom Lane <tgl@redhat.com> 8.3.1-4
changelog:
  - Enable LDAP support
  Resolves: #445315
  - Use -Wl,--as-needed to suppress bogus dependencies for libraries that
    are really only needed by some of the subpackages


author: Tom Lane <tgl@redhat.com> 8.3.3-1
changelog:
  - Update to PostgreSQL 8.3.3.
  - Remove postgresql-prefer-ncurses.patch, no longer needed in recent
    Fedora releases because libtermcap is gone.


author: Tom Lane <tgl@redhat.com> 8.3.3-2
changelog:
  - Install Pgtcl in /usr/lib/tcl$TCL_VERSION, not directly in /usr/lib.
    Needed because tcl 8.5 no longer puts /usr/lib into its package search path.
    NOTE: do not back-port this change into branches using pre-8.5 tcl, because
    /usr/lib/tcl8.4 had been a symlink to /usr/share/tcl8.4, and /usr/share
    is exactly where we must not put Pgtcl.
  Resolves: #228263


author: Tom Lane <tgl@redhat.com> 8.3.5-1
changelog:
  - Update to PostgreSQL 8.3.5.
  - Improve display from init script's initdb action, per Michael Schwendt


author: Tom Lane <tgl@redhat.com> 8.3.6-1
changelog:
  - Update to PostgreSQL 8.3.6, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-6.html


author: Tom Lane <tgl@redhat.com> 8.3.6-4
changelog:
  - Prevent dependent packages from needing to include sys/sdt.h
    (unintended side effect of previous patch)
  - Use -O1 on alpha, per report from Oliver Falk; -O2 tickles gcc bugs


author: Tom Lane <tgl@redhat.com> 8.3.7-1
changelog:
  - Update to PostgreSQL 8.3.7, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-7.html
    notably the fix for CVE-2009-0922


author: Tom Lane <tgl@redhat.com> 8.4.0-1
changelog:
  - Update to PostgreSQL 8.4.0.  See release notes at
    http://www.postgresql.org/docs/8.4/static/release-8-4.html


author: Tom "spot" Callaway <tcallawa@redhat.com> 8.4.0-2
changelog:
  - update License tag to MIT (PostgreSQL calls it "BSD", but it is MIT)
  - Note: This changes nothing from a license compatibility perspective.


author: Tom Lane <tgl@redhat.com> 8.4.1-1
changelog:
  - Update to PostgreSQL 8.4.1, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-1.html
    including two security issues
  Related: #522085
  Related: #522092


author: Tom Lane <tgl@redhat.com> 8.4.2-1
changelog:
  - Update to PostgreSQL 8.4.2, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-2.html
    including two security issues
  Related: #546321
  Related: #547662
  - Use -N not the obsolete -n in useradd call
  Resolves: #495727
  - Clean up specfile to eliminate rpmlint gripes, mainly by removing
    no-longer-needed provisions for superseding rh-postgresql


author: Tom Lane <tgl@redhat.com> 8.4.2-2
changelog:
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.2-3
changelog:
  - Remove the postgresql-python and postgresql-tcl subpackages.  These files
    are now broken out as their own packages (PyGreSQL and tcl-pgtcl,
    respectively), to reflect the now longstanding split of upstream projects.
  Related: #452306, #452321


author: Tom Lane <tgl@redhat.com> 8.4.2-4
changelog:
  - Arrange for the postmaster, but not any of its child processes, to be run
    with oom_adj -17.  This compensates for the OOM killer not being smart about
    accounting for shared memory usage.


author: Tom Lane <tgl@redhat.com> 8.4.2-5
changelog:
  - Latest version of systemtap needs the probes.o file to be built again
  Resolves: #557266
  - Provide script and instructions for building the documentation PDF


author: Tom Lane <tgl@redhat.com> 8.4.3-1
changelog:
  - Update to PostgreSQL 8.4.3, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-3.html


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593032


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 8.4.4-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Related: #639371
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
  Related: #561010


author: Tom Lane <tgl@redhat.com> 8.4.6-1
changelog:
  - Update to PostgreSQL 8.4.6, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
  - Ensure we don't package any .gitignore files from the source tarball
  Related: #642210


author: Tom Lane <tgl@redhat.com> 9.0.2-1
changelog:
  - Update to PostgreSQL 9.0.2 (major version bump)
  - Create infrastructure for in-place database upgrade using pg_upgrade
  Resolves: #398221


author: Tom Lane <tgl@redhat.com> 9.0.3-1
changelog:
  - Update to PostgreSQL 9.0.3, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-3.html
    including the fix for CVE-2010-4015
  Resolves: #674296


author: Tom Lane <tgl@redhat.com> 9.0.3-2
changelog:
  - Remove filter-requires-perl-Pg.sh, which doesn't seem to be needed now that
    PyGreSQL has been split out; and our use of it isn't compatible with rpm 4.9
    anyway


author: Tom Lane <tgl@redhat.com> 9.0.4-1
changelog:
  - Update to PostgreSQL 9.0.4, for various fixes described at
    http://www.postgresql.org/docs/9.0/static/release-9-0-4.html
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines


author: Tom Lane <tgl@redhat.com> 9.1.0-1
changelog:
  - Update to PostgreSQL 9.1.0 (major version bump);
    in-place upgrade support now works from 9.0.x as the previous version


author: Tom Lane <tgl@redhat.com> 9.1.1-1
changelog:
  - Update to PostgreSQL 9.1.1, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-1.html
  - Enable build (but not test) of contrib/sepgsql
  - Clean up specfile build options so that turning options off works again


author: Honza Horak <hhorak@redhat.com> 9.1.1-2
changelog:
  - Create a symlink of pg_regress instead of full copy;
    Don't strip symbols from regress libs
  Related: #729012


author: Tom Lane <tgl@redhat.com> 9.1.2-1
changelog:
  - Update to PostgreSQL 9.1.2, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-2.html


author: Tom Lane <tgl@redhat.com> 9.1.2-2
changelog:
  - Make systemd unit file more user-friendly by resurrecting the old init
    script's checks for data directory presence and version match
  Resolves: #771496


author: Tom Lane <tgl@redhat.com> 9.1.3-1
changelog:
  - Update to PostgreSQL 9.1.3, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-3.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #797918


author: Tom Lane <tgl@redhat.com> 9.1.3-2
changelog:
  - Fix postgresql-setup to look for unit file in /usr/lib and to ignore
    comments therein
  Resolves: #802835
  - Resurrect a now-mostly-dummy postgresql init script, so that people can
    keep on using "service postgresql initdb" if they wish
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.3-3
changelog:
  - Fix postgresql-setup to rely on systemd to parse the unit file, instead
    of using ad-hoc code
  Resolves: #804290


author: Tom Lane <tgl@redhat.com> 9.1.4-1
changelog:
  - Update to PostgreSQL 9.1.4, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-4.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #826606
  - Update previous version (embedded in postgresql-upgrade) to 9.0.8
    because fix in whole-row variable dumping could be needed for upgrades
  - Revert fix for bug #800416, per fedora-packaging discussion at
    http://lists.fedoraproject.org/pipermail/packaging/2012-April/008314.html
    "service postgresql initdb" is dead and will stay that way


author: Tom Lane <tgl@redhat.com> 9.1.4-3
changelog:
  - Update code to use oom_score_adj not oom_adj, thereby suppressing
    whining in the kernel log
  - Add "legacy action" scripts to support "service postgresql initdb" and
    "service postgresql upgrade" in a now-approved fashion (requires a
    recent version of initscripts to work)
  Resolves: #800416


author: Tom Lane <tgl@redhat.com> 9.1.4-5
changelog:
  - Back-port upstream support for postmaster listening on multiple Unix sockets
  - Configure postmaster to create sockets in both /var/run/postgresql and /tmp;
    the former is now the default place for libpq to contact the postmaster.
  Resolves: #825448
  - Annotate postgresql.conf about not setting port number there
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 9.1.5-1
changelog:
  - Update to PostgreSQL 9.1.5, for various fixes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-5.html
    including the fixes for CVE-2012-3488, CVE-2012-3489


author: Tom Lane <tgl@redhat.com> 9.2.0-1
changelog:
  - Update to PostgreSQL 9.2.0 (major version bump);
    in-place upgrade support now works from 9.1.x as the previous version
  - Add postgresql-plpython3 subpackage with PL/Python built against Python 3


author: Tom Lane <tgl@redhat.com> 9.2.1-1
changelog:
  - Update to PostgreSQL 9.2.1, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-1.html
    including a nasty data-loss bug
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves: #850277


author: Tom Lane <tgl@redhat.com> 9.2.2-1
changelog:
  - Update to PostgreSQL 9.2.2, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-2.html
  - Use new systemd install/uninstall trigger macros conditionally,
    so that package can still be installed on pre-F18 branches


author: Tom Lane <tgl@redhat.com> 9.2.2-3
changelog:
  - Prevent creation of TCP socket during pg_upgrade regression test, so that
    concurrent RPM builds on the same machine won't fail
  Resolves: #891531
  - Make sure $PGDATA/pg_log/ gets the right SELinux label in postgresql-setup
  Resolves: #891547


author: Tom Lane <tgl@redhat.com> 9.2.3-1
changelog:
  - Update to PostgreSQL 9.2.3, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-3.html
    including the fix for CVE-2013-0255
  Resolves: #908722
  - Make the package build with selinux option disabled
  Resolves: #894367
  - Include old version of pg_controldata in postgresql-upgrade subpackage
  Related: #896161


author: Tom Lane <tgl@redhat.com> 9.2.4-1
changelog:
  - Update to PostgreSQL 9.2.4, for various fixes described at
    http://www.postgresql.org/docs/9.2/static/release-9-2-4.html
    including the fixes for CVE-2013-1899, CVE-2013-1900, CVE-2013-1901
  Resolves: #929223, #929255, #929328
  - fix build for aarch64 and ppc64p7


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-2
changelog:
  - postgresql-setup: don't create whole path to server's data to make sure that
    the parent directory has correct permissions (#972425)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.4-3
changelog:
  - add atomic operations support for aarch64 to preupgrade version also (#970661)
  - apply the forgotten man-page-day patch (#948933)


author: Pavel Raiskup <praiskup@redhat.com> - 9.3.0-1
changelog:
  - update to 9.3 major version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3.html


author: Jozef Mlich <jmlich@redhat.com> - 9.3.1-1
changelog:
  - update to 9.3.1 minor version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-1.html


author: Jozef Mlich <jmlich@redhat.com> - 9.3.2-1
changelog:
  - update to 9.3.2 minor version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-2.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.3.2-4
changelog:
  - postgresql-setup(upgrade): don't stop old server when it can not be started
  - postgresql-setup(initdb, upgrade): add $PGSETUP_INITDB_OPTIONS
  - postgresql-setup: do not pretend 'sh' compatibility
  - move script generation to proper place
  - postgresql-setup: document a little and genrate manual page


author: Jozef Mlich <jmlich@redhat.com> - 9.3.3-1
changelog:
  - update to 9.3.3 minor version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-3.html


author: Jozef Mlich <jmlich@redhat.com> - 9.3.4-1
changelog:
  - update to 9.3.4 minor version per release notes:
    http://www.postgresql.org/docs/9.3/static/release-9-3-4.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.3.4-8
changelog:
  - provide postgresql-doc for postgresql-docs package (#1086420)
  - move html documentation to *-docs subpackage (#1086420)
  - provide postgresql-server(:MODULE_COMPAT_%{postgresql_major}) to guard
    against incompatible plugin installation (#1008939)


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.1-4
changelog:
  - make the %check phase more verbose for FAIL cases
  - don't FTBFS on f23+ where hardening is on by default


author: Pavel Raiskup <praiskup@redhat.com> - 9.4.5-2
changelog:
  - devel package should not require the main package (rhbz#1272219)
  - multilib fix, more general solution (rhbz#1190346)


author: Pavel Raiskup <praiskup@redhat.com> - 9.5.0-1
changelog:
  - update to 9.5.0 per release notes
    http://www.postgresql.org/docs/9.5/static/release-9-5.html
  - update postgresql-setup to v4.0 to reflect new packaging style


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.1-1
changelog:
  - update to 9.6.1 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-1.html
  - add gen_sources.sh script
  - remove plpython build hack, fixed upstream
  - remove aarch64 and ppc64p7 hacks, fixed by the %configure call


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.2-1
changelog:
  - update to 9.6.2 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-2.html
  - remove mistakenly isntalled libpgfeutils.a


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.3-1
changelog:
  - update to 9.6.3 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-3.html


author: Petr Kubat <pkubat@redhat.com> - 9.6.4-1
changelog:
  - update to 9.6.4 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-4.html


author: Pavel Raiskup <praiskup@redhat.com> - 9.6.5-1
changelog:
  - update to 9.6.5 per release notes:
    https://www.postgresql.org/docs/9.6/static/release-9-6-5.html


author: Jozef Mlich <jmlich@redhat.com> - 10.0-2
changelog:
  - support for upgrade with extenstions
    i.e the postgresql-upgrade-devel subpackage was added (rhbz#1475177)


author: Pavel Raiskup <praiskup@redhat.com> - 10.0-3
changelog:
  - confess that we bundle setup scripts and previous version of ourseleves
  - provide %postgresql_upgrade_prefix macro


author: Pavel Raiskup <praiskup@redhat.com> - 10.1-3
changelog:
  - unify %configure options for python2/python3 configure
  - drop --with-krb5 option, not supported since PostgreSQL 9.4
  - python packaging - requires/provides s/python/python2/


author: Pavel Raiskup <praiskup@redhat.com> - 10.1-4
changelog:
  - configure with --with-systemd (rhbz#1414314)
  - disable startup timeout of PostgreSQL service (rhbz#1525477)


author: Pavel Raiskup <praiskup@redhat.com> - 10.3-2
changelog:
  - define %precise_version helper macro
  - drop explicit libpq.so provide from *-libs
  - update postgresql-setup tarball
  - add postgresql-test-rpm-macros package


author: Pavel Raiskup <praiskup@redhat.com> - 10.3-3
changelog:
  - upgrade: package plperl.so and pltcl.so
  - upgrade: package contrib modules
  - upgrade: drop dynamic libraries


author: Pavel Raiskup <praiskup@redhat.com> - 10.4-5
changelog:
  - re-enable -O3 for 64bit PPC boxes
  - explicitly set PYTHON=python2, /bin/python doesn't exist fc29+


author: Pavel Raiskup <praiskup@redhat.com> - 10.4-6
changelog:
  - drop ppc64 patch, gcc is already fixed (rhbz#1544349)
  - move pg_config*.mo files into devel subpackage


author: Pavel Raiskup <praiskup@redhat.com> - 10.4-8
changelog:
  - new postgresql-setup, the %postgresql_tests* macros now start
    the build-time server on random port number


author: Pavel Raiskup <praiskup@redhat.com> - 10.5-3
changelog:
  - devel subpackage provides postgresql-server-devel and libecpg-devel
    (first step for rhbz#1618698)


author: Pavel Raiskup <praiskup@redhat.com> - 11.0-1
changelog:
  - new upstream release, per release notes:
    https://www.postgresql.org/docs/11/static/release-11.html


author: Patrik Novotný <panovotn@redhat.com> - 12.5-1
changelog:
  - Rebase to upstream release 12.5
    Resolves: rhbz#1898330
    Resolves: rhbz#1898224
    Resolves: rhbz#1898244


author: Filip Januš <fjanus@redhat.com> - 13.7-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 13.7
  - Release notes: https://www.postgresql.org/docs/release/13.7/


author: Jorge San Emeterio <jsanemet@redhat.com> - 13.11-2
changelog:
  - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35)
  - Resolves: #2207933


author: Jorge San Emeterio <jsanemet@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417
  - Resolves: RHEL-16085 RHEL-16123


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> 15.6-1
changelog:
  - Update to 15.6 and 13.14
  - Fix CVE-2024-0985

  Mon Nov 13 2023 Jorge San Emeterio <jsanemet@redhat.com> - 15.5-1
  - Update to upstream version 15.5
  - Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417 CVE-2023-39418


author: Filip Janus <fjanus@redhat.com> 15.6-1
changelog:
  - Update to 15.6 and 13.14
  - Fix CVE-2024-0985

  Mon Nov 13 2023 Jorge San Emeterio <jsanemet@redhat.com> - 15.5-1
  - Update to upstream version 15.5
  - Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417 CVE-2023-39418
  - Resolves: RHEL-16088 RHEL-16135 RHEL-16137


author: Honza Horak <hhorak@redhat.com> - 9.6.19-1
changelog:
  - Rebase to 9.6.19
    Also fixes: CVE-2019-10208, CVE-2020-14350, CVE-2019-10130
    Resolves: #1741490
    Resolves: #1867111
    Resolves: #1845074


author: Patrik Novotný <panovotn@redhat.com> - 9.6.20-1
changelog:
  - Rebase to upstream release 9.6.20
    Resolves: rhbz#1898246
    Resolves: rhbz#1898219
    Resolves: rhbz#1898335


author: Pavel Raiskup <praiskup@redhat.com> - 09.06.0500-1
changelog:
  - update to new upstream release, per:
    https://www.postgresql.org/message-id/20170905143318.95448B4C411@winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.00.0000-1
changelog:
  - update to new upstream release, per announcement:
    https://www.postgresql.org/message-id/20171013143455.9D0E5B4C412%40winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.01.0000-1
changelog:
  - update to new upstream release, per announcement:
    https://www.postgresql.org/message-id/20171227144219.0ABC4B4C417%40winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.02.0000-1
changelog:
  - build against libpq-devel and postgresql-test-rpm-macros
  - update to new upstream release, per announcement:
    https://www.postgresql.org/message-id/20180330143925.88CEDB40E51%40winpg.jp


author: Pavel Raiskup <praiskup@redhat.com> - 10.03.0000-1
changelog:
  - update: new upstream release, per announcement:
    https://www.postgresql.org/message-id/20180519131632.8E59CB40E51%40winpg.jp


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9-7
changelog:
  - Added support for Intel GLK platforms (by intel-glk-support patch)
  - Added support for Intel CNL-U/Y platforms (by intel-cnluy-support patch)
  - Fixed problem with some C-states overwriting others
    (by cstates-rewrite-fix patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.9-8
changelog:
  - Use intel_cpu only if APERF MSR is supported, it fixes powertop on KVM
    (by intel-cpu-check-aperf patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.11-1
changelog:
  - New version
    Resolves: rhbz#1716721
  - Changed source to github and bootstraps sources
  - Dropped cstates-rewrite-fix, intel-glk-support, intel-cnluy-support,
    intel-cpu-check-aperf patches (all upstreamed)
  - Added bash completion


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.9.0-1
changelog:
  - New version
  - Dropped pptpsetup-mppe, vector-remove-fix, and call-use-after-free-fix
    patches (all upstreamed)
  - Dropped loading of nf_conntrack_pptp kernel module which was workaround and
    according to upstream only hides real problems


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.3-5
changelog:
  - Subpackage python2-cffi has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 2.7-3
changelog:
  - Skip unit tests that fail with OpenSSL 1.1.1.d
  - Resolves: rhbz#1761194
  - Fix and simplify Python 3 packaging


author: Dan Callaghan <dcallagh@redhat.com> - 1.0.2-1
changelog:
  - bug fix release 1.0.2:
    https://github.com/gevent/gevent/blob/v1.0.2/changelog.rst#release-102-may-23-2015


author: Brian C. Lane <bcl@redhat.com> - 1.2.2-5
changelog:
  - Avoid printing TypeError traceback
  - gevent.pywsgi: Much improved handling of chunk trailers
    Backport fix for CVE-2023-41419
    Resolves: RHEL-17078


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.1-3
changelog:
  - Subpackage python2-lxml has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: John Dennis <jdennis@redhat.com> - 1.0.1-1
changelog:
  * Add TLS 1.3 cipher suites.

    * ssl_cipher_info.py now attempts to enable TLS 1.3.

    * Fix build issue in setup.py. python-nss can now be build
      as Python wheel, e.g. `pip wheel -w dist .`

    * The following constants were added:

      - ssl.TLS_AES_128_GCM_SHA256
      - ssl.TLS_AES_256_GCM_SHA384
      - ssl.TLS_CHACHA20_POLY1305_SHA256


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.1-5
changelog:
  - Python 2 binary package renamed to python2-nss
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: <jdennis@redhat.com> - 1.0.1-10
changelog:
  - Move documentation generator from epydoc to Sphinx autodoc
  - Modify py2/py3 build logic to comply with new guidelines


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-14
changelog:
  - Fixes for CVE-2021-25290, CVE-2021-25292, CVE-2021-25293, CVE-2021-27921
  CVE-2021-27922, and CVE-2021-27923
  Resolves: rhbz#1934685 rhbz#1934699 rhbz#1934705 rhbz#1935384 rhbz#1935396 rhbz#1935401


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-15
changelog:
  - Fixes for CVE-2021-25288, CVE-2021-25287, CVE-2021-28675, CVE-2021-28676,
  CVE-2021-28677 and CVE-2021-28678
  Resolves: rhbz#1958231, rhbz#1958226, rhbz#1958240, rhbz#1958252, rhbz#1958257, rhbz#1958263


author: Charalampos Stratakis <cstratak@redhat.com> - 5.1.1-18
changelog:
  - Fixup for CVE-2022-22817
  - Security fixes for CVE-2022-22815, CVE-2022-22816
  Resolves: rhbz#2042511, rhbz#2042522


author: Sandro Mani <manisandro@gmail.com> - 1.7.8-3.20130210gite09ff61
changelog:
  - Really remove -fno-strict-aliasing
  - Place comment on how to retreive source just above the Source0 line


author: Sandro Mani <manisandro@gmail.com> - 1.7.8-4.20130305git7866759
changelog:
  - Update to latest git snapshot
  - 0001-Cast-hash-table-values-to-unsigned-long.patch now upstream
  - Pillow-1.7.8-selftest.patch now upstream


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-2.git2e88848
changelog:
  - Update to latest git
  - Remove python-pillow-disable-test.patch, gcc is now fixed
  - Add python-pillow_tempfile.patch to prevent a temporary file from getting packaged


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-6.gitd1c6db8
changelog:
  - Update to latest git
  - python-pillow_quantization.patch now upstream
  - python-pillow_endianness.patch now upstream
  - Add subpackage for ImageQt module, with correct dependencies
  - Add PyQt4 and numpy BR (for generating docs / running tests)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0.0-7.gitd1c6db8
changelog:
  - Remove Obsoletes in the python-pillow-qt subpackage. Obsoletes isn't
    appropriate since qt support didn't exist in the previous python-pillow
    package so there's no reason to drag in python-pillow-qt when updating
    python-pillow.


author: Sandro Mani <manisandro@gmail.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Run tests in builddir, not installroot
  - Build python3-pillow docs with python3
  - python-pillow_endian.patch upstreamed


author: Sandro Mani <manisandro@gmail.com> - 2.1.0-4
changelog:
  - Add patch to fix incorrect PyArg_ParseTuple tuple signature, fixes rhbz#962091 and rhbz#988767.
  - Renable webp support on bigendian arches


author: Sandro Mani <manisandro@gmail.com> - 2.3.0-1
changelog:
  - Update to 2.3.0
  - Build with doc disabled to break circular python-pillow -> python-sphinx -> python pillow dependency


author: Sandro Mani <manisandro@gmail.com> - 2.4.0-2
changelog:
  - Enable Jpeg2000 support
  - Enable webp support also on s390* archs, bug #962091 is now fixed
  - Add upstream patch for ghostscript detection


author: Sandro Mani <manisandro@gmail.com> - 2.7.0-1
changelog:
  - Update to 2.7.0
  - Drop sane subpackage, is in python-sane now
  - Fix python3 headers directory
  - Drop Obsoletes: python3-pillow on python3-pillow-qt


author: Petr Viktorin <pviktori@redhat.com> - 5.1.1-2
changelog:
  - Remove the python2 version of docs
  - Remove Qt subpackages
  - Drop dependency on python2-olefile (breaking MicImagePlugin.py, FpxImagePlugin)


author: Petr Viktorin <pviktori@redhat.com> - 5.1.1-3
changelog:
  - Remove the Python 2 subpackage
  - Remove the libimagequant dependency
    The imagequant library was only used to support a non-default image
    quantization mode.


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-7
changelog:
  - Add upstream patch to solve build-time warning
  - Move patches to dist-git
  - Resolves: rhbz#1639348


author: Charalampos Stratakis <cstratak@redhat.com> - 5.6.4-4
changelog:
  - Security fix for CVE-2019-18874: double free because of refcount mishandling
  Resolves: rhbz#1772014


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-5
changelog:
  - Require python2-psycopg2 instead of python-psycopg2 from the
    python2-psycopg2-debug subpackage
  - Resolves: rhbz#1628242


author: Tomas Orsava <torsava@redhat.com> - 2.8.4-3
changelog:
  - Fix shebang mangling
  - Don't ship the debug module, it is not needed and was not shipped in RHEL8 either


author: mahailiang <mahailiang@openanolis.org> - 2.8.6-2.0.1
changelog:
  - Mark _test_external_close as expected failure
  - Sync https://git.centos.org/rpms/python-psycopg2/tree/c8-stream-2.7


author: - Devrim GUNDUZ <devrim@commandprompt.com> 2.0.2-3
changelog:
  - Removed python dependency, per bugzilla review. (#199784)
  - Changed doc package group, per bugzilla review. (#199784)
  - Replaced dos2unix with sed, per guidelines and bugzilla review (#199784)
  - Fix changelog dates


author: - Devrim GUNDUZ <devrim@commandprompt.com> 2.0.3-2
changelog:
  - Fixed 64 bit builds
  - Fixed license
  - Added Zope subpackage
  - Fixed typo in doc description
  - Added macro for zope subpackage dir


author: - Devrim GUNDUZ <devrim@commandprompt.com> 2.0.3-3
changelog:
  - Fixed zope package dependencies and macro definition, per bugzilla review (#199784)
  - Fixed zope package directory ownership, per bugzilla review (#199784)
  - Fixed cp usage for zope subpackage, per bugzilla review (#199784)


author: Tom Lane <tgl@redhat.com> 2.0.13-2
changelog:
  - Fix rpmlint complaints: remove unneeded explicit Requires:, use Conflicts:
    instead of bogus Obsoletes: to indicate lack of zope subpackage


author: Devrim GUNDUZ <devrim@gunduz.org> - 2.2.1-1
changelog:
  - Update to 2.2.1
  - Improve description for 2.2 features.
  - Changelog for 2.2.0 is: 
     http://initd.org/pub/software/psycopg/ChangeLog-2.2


author: Devrim Gündüz <devrim@gunduz.org> 2.5-1
changelog:
  - Update to 2.5, per changes described at:
    http://www.psycopg.org/psycopg/articles/2013/04/07/psycopg-25-released/


author: Devrim Gündüz <devrim@gunduz.org> 2.5.2-1
changelog:
  - Update to 2.5.2, per changes described at:
    http://www.psycopg.org/psycopg/articles/2014/01/07/psycopg-252-released


author: Pavel Raiskup <praiskup@redhat.com> - 2.5.3-1
changelog:
  - rebase to most recent upstream version, per release notes:
    http://www.psycopg.org/psycopg/articles/2014/05/13/psycopg-253-released/


author: Devrim Gündüz <devrim@gunduz.org> 2.5.4-1
changelog:
  - Update to 2.5.4, per changes described at:
    http://www.psycopg.org/psycopg/articles/2014/08/30/psycopg-254-released


author: Devrim Gündüz <devrim@gunduz.org> 2.6-1
changelog:
  - Update to 2.6, per changes described at:
    http://www.psycopg.org/psycopg/articles/2015/02/09/psycopg-26-and-255-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.6.1-4
changelog:
  - again bump for new Python 3.5, not build previously?
  - fix rpmlint issues
  - no pyo files with python 3.5


author: Pavel Raiskup <praiskup@redhat.com> - 2.6.2-1
changelog:
  - rebase (rhbz#1353545), per release notes
    http://initd.org/psycopg/articles/2016/07/07/psycopg-262-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2017/03/01/psycopg-27-released/
  - enable testsuite during build, and package it


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.1-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2017/03/01/psycopg-271-released/
  - fix testsuite


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.2-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2017/07/22/psycopg-272-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.3-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2017/07/24/psycopg-273-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.3.2-1
changelog:
  - update to 2.7.3.2, per release notes:
    http://initd.org/psycopg/articles/2017/10/24/psycopg-2732-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.4-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2018/02/08/psycopg-274-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.5-1
changelog:
  - rebase to latest upstream release, per release notes:
    http://initd.org/psycopg/articles/2018/06/17/psycopg-275-released/


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.5-4
changelog:
  - drop python2* on f30+ (rhbz#1634973)
  - use proper compiler/linker flags (rhbz#1631713)
  - correct the (build)requires


author: Pavel Raiskup <praiskup@redhat.com> - 2.7.5-5
changelog:
  - prepare --without=debugrpms option (rhbz#1635166)
  - get the python2 packages back for a while (rhbz#1634973)


author: Tomas Orsava <torsava@redhat.com> - 3.6.1-6
changelog:
  - BuildRequire the python36-devel package when building for the python36 module
  - BuildRequire also python36-rpm-macros as part of the python36 module build


author: Brian Pepple <bdpepple@ameritech.net> - 1.20-1.fc4
changelog:
  - Rebuild for Python 2.4.
  - Update to 1.20.
  - Switch to the new python macros for python-abi
  - Add dist tag.


author: Peter Gordon <peter@thecodergeek.com> - 3.2.0-1
changelog:
  - Update to new upstream release (3.2.0)
  - Drop font locations patches (fixed upstream):
    - 3.1.8-font-locations.patch
    - 2.5-font-locations.patch
  - Resolves: #1175228 (python-reportlab-3.2.0 is available).
  - Resolves: #1277162 (Wrong dependency version number for pillow.)
  - Resolves: #1267446 (Missing Requires: on pillow)


author: William Moreno <williamjmorenor@gmail.com> - 3.3.0-1
changelog:
  - Update to v3.3.0
  - Update python macros
  - Enable %test
  - Use license macro
  - Provide python2 subpackage


author: Marek Kasik <mkasik@redhat.com> - 3.4.0-9
changelog:
  - Do not evaluate unichar element
  - Replace an invalid char with a correct one (rpminspect)
  - Resolves: RHEL-7010


author: Petr Viktorin <pviktori@redhat.com> - 1.16.3-2
changelog:
  - Allow Python 2 for build
    See: https://hurl.corp.redhat.com/rhel8-py2

  - Skip tests on Python 2 (python2-pytest is being removed)


author: Lumír Balhar <lbalhar@redhat.com> - 2.7.18-8
changelog:
  - Security fixes for CVE-2021-3737 and CVE-2021-3733
  Resolves:             rhbz#1995162 and rhbz#1995234


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-9
changelog:
  - Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response
  Resolves:             rhbz#2036020


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-10
changelog:
  - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
  Resolves:             rhbz#2047376


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-11
changelog:
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves:             rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-12
changelog:
  - Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder
  Resolves:             rhbz#2144072


author: zhangbinchen <zhangbinchen@openanolis.org> - 2.7.18-15.0.1
changelog:
  - Rebrand for Anolis OS
  - Support loongarch64 platform(Liwei Ge)
  - Pick up fix from Upstream (Jacob Wang)
    Fixup for CVE-2023-24329 patch name [f9e9f76](cstratak@redhat.com)
    Fix for CVE-2023-24329 [3f00cdc](lbalhar@redhat.com)


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - Version 2 of 2.0b1
  - Make the package relocatable.  Thanks to Suchandra Thapa.
  - Exclude Tkinter from main RPM.  If it is in a separate RPM, it is
    easier to track Tk releases.


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - updated for 2.0c1
  - build audioop, imageop, and rgbimg extension modules
  - include xml.parsers subpackage
  - add test.xml.out to files list


author: Matt Wilson <msw@redhat.com>
changelog:
  - modify all files to use "python2.0" as the intrepter
  - don't build the Expat bindings
  - build against db1


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix the "requires" clause, it lacked a space causing problems
  - use %{_tmppath}
  - don't define name, version etc
  - add the available patches from the Python home page


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.4a4
changelog:
  - 2.2a4
  - Enable UCS4 support
  - Enable IPv6
  - Provide distutils
  - Include msgfmt.py and pygettext.py


author: Matt Wilson <msw@redhat.com> 2.2-0.9b2
changelog:
  - changed DESTDIR to point to / so that distutils will install dynload
    modules properly in the installroot


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.11c1
changelog:
  - 2.2 RC 1
  - Don't include the _tkinter module in the main package - it's
    already in the tkiter packace
  - Turn off the mpzmodule, something broke in the buildroot


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-5
changelog:
  - disable ndbm support, which is db2 in disguise (really interesting things
    can happen when you mix db2 and db4 in a single application)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-8
changelog:
  - Make files in /usr/bin install side by side with python 1.5 when
  - Drop explicit requirement of db4
    built as python2


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-16
changelog:
  - the same, but in builddirs - this will remove them from the
    docs package, which doesn't look in the buildroot for files.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - builds as python2 require a different libdb
  - changed the buildroot name of python to match python2 builds


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-2
  - Fix #76912 (python-tools contains idle, which uses tkinter, but there is no
    requirement of tkinter from python-tools).
  - Fix #74013 (rpm is missing the /usr/lib/python2.2/test directory)


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.*
  - Merged patch from Karsten Hopp <karsten@redhat.de> from 2.2.1-17hammer to
    use %{_libdir}
  - Added XFree86-libs as BuildRequires (because of tkinter)
  - Fixed duplicate listing of plat-linux2
  - Fixed exclusion of lib-dynload/japanese
  - Added lib64 patch for the japanese codecs
  - Use setup magic instead of using tar directly on JapaneseCodecs


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-5
  - Fixed configuration patch to add -lcrypt when compiling cryptmodule.c

  2.2.2-4
  - Spec file change from Matt Wilson <msw@redhat.com> to disable linking
    with the C++ compiler.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.7.3
  - Recompiled for 7.3 (to fix the -lcrypt bug)
  - Fix for the spurious error message at the end of the build (build-requires
    gets confused by executable files starting with """"): make the tests
    non-executable.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-7
changelog:
  - Fix bug #79647 (Rebuild of SRPM fails if python isn't installed)
  - Added a bunch of missing BuildRequires found while fixing the
    above-mentioned bug


author: Jeremy Katz <katzj@redhat.com> 2.2.2-8
changelog:
  - urllib2 didn't support non-anonymous ftp.  add support based on how
    urllib did it (#80676, #78168)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-11.7.3
changelog:
  - Fixed bug #82544: Errata removes most tools
  - Fixed bug #82435: Python 2.2.2 errata breaks redhat-config-users
  - Removed .lib64 and - files that get installed after we fix the multilib
    .py files.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-13
changelog:
  - Attempt to look both in /usr/lib64 and /usr/lib/python2.2/site-packages/:
    some work on python-2.2.2-lib64.patch


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-22
changelog:
  - Using newer Japanese codecs (1.4.9). Thanks to
    Peter Bowen <pzb@datastacks.com> for pointing this out.


author: Jeremy Katz <katzj@redhat.com> 2.2.2-23
changelog:
  - ftp uri's should be able to specify being rooted at the root instead of
    where you login via ftp (#84692)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-25
changelog:
  - Fixed bug #84886: pydoc dies when run w/o arguments
  - Fixed bug #84205: add python shm module back (used to be shipped with 1.5.2)
  - Fixed bug #84966: path in byte-compiled code still wrong


author: Mihai Ibanescu <misa@redhat.com> 2.3-0.2
changelog:
  - Building python 2.3
  - Added more BuildRequires
  - Updated the startup files for modulator and pynche; idle installs its own
    now.


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-4
changelog:
  - Fix for bug #122304 : splitting the domain name fails on 64-bit arches
  - Fix for bug #120879 : including Makefile into the main package

  - Requires XFree86-devel instead of -libs (see bug #118442)


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-6
changelog:
  - Correct fix for #122304 from upstream:
    http://sourceforge.net/tracker/?func=detail&atid=105470&aid=931848&group_id=5470


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-1
changelog:
  - Updated to 2.3.4-1 with Robert Scheck's help (bug #124764)
  - Added BuildRequires: tix-devel (bug #124918)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-3
changelog:
  - Added an optik.py that provides the same interface from optparse for
    backward compatibility; obsoleting python-optik


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-6
changelog:
  - Fixed #128030 (help() not printing anything)
  - Fixed #125472 (distutils.sysconfig.get_python_lib() not returning the right
    path on 64-bit systems)
  - Fixed #127357 (building python as a shared library)
  - Fixed  #19347 (including the contents of Tools/scripts/ in python-tools)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-7
changelog:
  - Including html documentation for non-i386 arches
  - Fixed #125362 (python-doc html files have japanese character encoding)
  - Fixed #128923 (missing dependency between python and python-devel)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-8
changelog:
  - Fixed bug #129769: Makefile in new python conflicts with older version found
    in old python-devel
  - Reorganized the spec file to get rid of the aspython2 define; __python_ver
    is more powerful.


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-10
changelog:
  - Fixed bug #77418 (Demo dir not packaged)
  - More tweaking on #19347 (Moved Tools/ under /usr/lib/python2.3/Tools)


author: Jeff Johnson <jbj@jbj.org> 2.4-2
changelog:
  - db-4.3.21 returns DB_BUFFER_SMALL rather than ENOMEM (#141994).
  - add Provide: python(abi) = 2.4
  - include msgfmt/pygettext *.pyc and *.pyo from brp-python-bytecompile.


author: Mihai Ibanescu <misa@redhat.com> 2.4-6
changelog:
  - building the docs from a different source rpm, to decouple bootstrapping
    python from having tetex installed


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-2
changelog:
  - Fixed bug #143667 (python should own /usr/lib/python* on 64-bit systems, for
    noarch packages)
  - Fixed bug #143419 (BuildRequires db4 is not versioned)


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-7
changelog:
  - Fixed bug #169046 (realpath is unsafe); thanks to
    Peter Jones <pjones@redhat.com> and Arjan van de Ven <arjanv@redhat.com> for
    diagnosing and the patch.


author: Mihai Ibanescu <misa@redhat.com> 2.4.1-10
changelog:
  - Fixed bug #169159 (don't let python core dump if no arguments are passed in)
    Reworked the patch from -8 a bit more.


author: Peter Jones <pjones@redhat.com> 2.4.1-12
changelog:
  - Fixed bug #169159 (check for argc>0 and argv[0] == NULL, not just
      argv[0][0]='\0')
    Reworked the patch from -8 a bit more.


author: Mihai Ibanescu <misa@redhat.com> - 2.4.3-6
changelog:
  - Fixed bug #192592 (too aggressive assertion fails) - SF#1257960
  - Fixed bug #167468 (Doc/tools not included) - added in the python-tools package


author: Mihai Ibanescu <misa@redhat.com> - 2.4.99.c1
changelog:
  - Updated to 2.5c1. Merged fixes from FC6 too:
  - Fixed bug #199373 (on some platforms CFLAGS is needed when linking)
  - Fixed bug #198971 (case conversion not locale safe in logging library)
  - Verified bug #201434 (distutils.sysconfig is confused by the change to make
    python-devel multilib friendly) is fixed upstream


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - fix _md5 and _sha modules (Robert Sheck)
  - no longer provide optik compat; it's been a couple of years now
  - no longer provide the old shm module; if this is still needed, let's
    build it separately
  - no longer provide japanese codecs; should be a separate package


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - support db 4.5
  - obsolete python-elementtree; since it requires some code tweaks, don't
    provide it
  - obsolete old python-sqlite; provide the version that's actually included


author: Jeremy Katz <katzj@redhat.com> - 2.5.3-3
changelog:
  - fix atexit traceback with failed syslog logger (#218214)
  - split libpython into python-libs subpackage for multilib apps
    embedding python interpreters


author: Jeremy Katz <katzj@redhat.com> - 2.5.3-8
changelog:
  - fix extensions to use shared libpython (#219564)
  - all 64bit platforms need the regex fix (#122304)


author: Jeremy Katz <katzj@redhat.com> - 2.5.1-4
changelog:
  - fix _elementtree.so build (#245703)
  - ensure that extension modules we expect are actually built rather than
    having them silently fall out of the package


author: James Antill <jantill@redhat.com> - 2.5.1-13
changelog:
  - Add tix buildprereq
  - Add tkinter patch
  - Resolves: #281751
  - Fix ctypes loading of libraries, add requires on binutils
  - Resolves: #307221
  - Possible fix for CVE-2007-4965 possible exploitable integer overflow
  - Resolves: #295971


author: James Antill <jantill@redhat.com> - 2.5.1-15
changelog:
  - Do codec lowercase in C Locale.
  - Resolves: 207134 191096
  - Fix stupid namespacing in pysqlite, minimal upgrade to 2.3.3 pysqlite
  - Resolves: 263221


author: James Antill <jantill@redhat.com> - 2.5.1-16
changelog:
  - Fix pyconfig.h comment typo.
  - Add back test_support.py and the __init__.py file.
  - Resolves: rhbz#387401


author: James Antill <jantill@redhat.com> - 2.5.1-18
changelog:
  - Create a python-test sub-module, over 3MB of stuff noone wants.
  - Don't remove egginfo files, try this see what happens ... may revert.
  - Resolves: rhbz#414711


author: James Antill <jantill@redhat.com> - 2.5.1-20
changelog:
  - Add valgrind support files, as doc, to python-devel
  - Relates: rhbz#418621
  - Add new API from 2.6, set_wakeup_fd ... use at own risk, presumably won't
  - change but I have no control to guarantee that.
  - Resolves: rhbz#427794
  - Add gdbinit support file, as doc, to python-devel


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-2
changelog:
  - "Makefile" and the config-32/64.h file are needed by distutils/sysconfig.py
  _init_posix(), so we include them in the core package, along with their parent
  directories (bug 531901)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-3
changelog:
  - fixup the build when __python_ver is set (Zach Sadecki; bug 533989); use
  pybasever in the files section


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-4
changelog:
  - automatically disable arena allocator when run under valgrind (upstream
  issue 2422; patch 52)
  - add patch from Josh Boyer containing diff against upstream PyBSDDB to make
  the bsddb module compile against db-4.8 (patch 53, #544275); bump the necessary
  version of db4-devel to 4.8
  - patch setup.py so that it searches for db-4.8, and enable debug output for
  said search; make Setup.dist use db-4.8 (patch 54)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-5
changelog:
  - replace usage of %define with %global
  - use the %{_isa} macro to ensure that the python-devel dependency on python
  is for the correct multilib arch (#555943)
  - delete bundled copy of libffi to make sure we use the system one
  - replace references to /usr with %{_prefix}; replace references to
  /usr/include with %{_includedir}


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-6
changelog:
  - patch Makefile.pre.in to avoid building static library (patch111, bug 556092)
  - split up the "configure" invocation flags onto individual lines


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-9
changelog:
  - change python-2.6.2-config.patch to remove our downstream change to curses
  configuration in Modules/Setup.dist, so that the curses modules are built using
  setup.py with the downstream default (linking against libncursesw.so, rather
  than libncurses.so), rather than within the Makefile; add a test to %install
  to verify the dso files that the curses module is linked against the correct
  DSO (bug 539917; changes _cursesmodule.so -> _curses.so)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-10
changelog:
  - introduce macros for 3 directories, replacing expanded references throughout:
  %{pylibdir}, %{dynload_dir}, %{site_packages}
  - explicitly list all lib-dynload files, rather than dynamically gathering the
  payload into a temporary text file, so that we can be sure what we are
  shipping; remove now-redundant testing for presence of certain .so files
  - remove embedded copy of zlib from source tree before building


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-11
changelog:
  - update python-2.6.2-config.patch to remove downstream customization of build
  of pyexpat and elementtree modules
  - add patch adapted from upstream (patch 3) to add support for building against
  system expat; add --with-system-expat to "configure" invocation
  - remove embedded copy of expat from source tree during "prep"


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-12
changelog:
  - Address some of the issues identified in package review (bug 226342):
    - update libs requirement on base package to use %{name} for consistency's
  sake
    - convert from backticks to $() syntax throughout
    - wrap value of LD_LIBRARY_PATH in quotes
    - convert "/usr/bin/find" requirement to "findutils"
    - remove trailing periods from summaries of -devel and -tools subpackages
    - fix spelling mistake in description of -test subpackage
    - convert usage of $$RPM_BUILD_ROOT to %{buildroot} throughout, for
  stylistic consistency
    - supply dirmode arguments to defattr directives


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-15
changelog:
  - work around bug 562906 by supplying a fixed version of pythondeps.sh
  - set %{_python_bytecompile_errors_terminate_build} to 0 to prevent the broken
  test files from killing the build on buildroots where python is installed


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-16
changelog:
  - move the -gdb.py file from %{_libdir}/INSTSONAME-gdb.py to
  %{_prefix}/lib/debug/%{_libdir}/INSTSONAME.debug-gdb.py to avoid noise from
  ldconfig (bug 562980), and which should also ensure it becomes part of the
  debuginfo subpackage, rather than the libs subpackage
  - introduce %{py_SOVERSION} and %{py_INSTSONAME} to reflect the upstream
  configure script, and to avoid fragile scripts that try to figure this out
  dynamically (e.g. for the -gdb.py change)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-17
changelog:
  - add systemtap static probes (wcohen; patch 55; rh bug #545179)
  - update some comments in specfile relating to gdb work
  - manually byte-compile the gdb.py file with the freshly-built python to ensure
  that .pyx and .pyo files make it into the debuginfo manifest if they are later
  byte-compiled after find-debuginfo.sh is run


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-18
changelog:
  - add a systemtap tapset defining "python.function.entry" and
  "python.function.return" to make it easy to use the static probepoint within
  Python; add an example of using the tapset to the docs


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-19
changelog:
  - revise the systemtap patch (patch 55:python-2.6.4-dtrace.patch) to the
  new version by mjw in attachment 390110 of rhbz:545179, as this should
  eliminate the performance penalty for the case where the probes aren't in
  use, and eliminate all architecture-specific code (rhbz:563541; except on
  sparc)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-20
changelog:
  - avoid having the "test" subdirectory and the files within it that are in the
  core subpackage also be owned by the test subpackage (rhbz:467588)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-22
changelog:
  - add pyfuntop.stp; allow systemtap support to be disabled
  - remove trailing period from tkinter summary
  - don't own /usr/bin/python-config if you're not the main python


author: David Malcolm <dmalcolm@redhat.com> - 2.6.4-23
changelog:
  - fixup distutils/unixccompiler.py to remove standard library path from
  rpath (patch 17)
  - delete DOS batch files


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-1
changelog:
  - update to 2.6.5: http://www.python.org/download/releases/2.6.5/
  - replace our patch to compile against db4.8 with a patch from
  upstream (patch 53, from r78974); update patch 54 since part of it is now in
  that upstream patch
  - update patch 110 so that it still applies in the face of upstream r78380


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-4
changelog:
  - update python-gdb.py from v3 to v4 (fixing infinite recursion on reference
  cycles and tracebacks on bytes 0x80-0xff in strings, adding handlers for sets
  and exceptions)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-6
changelog:
  - move the "bdist_wininst" command's template .exe files from the core package
  to the devel subpackage, to save space (rhbz:525469)
  - fix stray doublelisting of config directory wildcard in devel subpackage


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-9
changelog:
  - build and install two different configurations of Python: debug and standard,
  packaging the debug build in a new "python-debug" subpackage (patch 112)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-10
changelog:
  - add configure-time support for COUNT_ALLOCS and CALL_PROFILE debug options
  (patch 113); enable them and the WITH_TSC option within the debug build


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-13
changelog:
  - ensure that the compiler is invoked with "-fwrapv" (rhbz#594819)
  - CVE-2010-1634: fix various integer overflow checks in the audioop
  module (patch 116)
  - CVE-2010-2089: further checks within the audioop module (patch 117)
  - CVE-2008-5983: the new PySys_SetArgvEx entry point from r81399 (patch 118)


author: Dan Horák <dan[at]danny.cz> - 2.6.5-14
changelog:
  - reading the timestamp counter is available only on some arches (see Python/ceval.c)
  - disable --with-valgrind on s390(x) arches


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-16
changelog:
  - Fix an incompatibility between pyexpat and the system expat-2.0.1 that led to
  a segfault running test_pyexpat.py (patch 119; upstream issue 9054)


author: David Malcolm <dmalcolm@redhat.com> - 2.6.5-17
changelog:
  - Stop python bailing out with an assertion failure when UnicodeDecodeErrors
  occur on very large buffers (patch 120, upstream issue 9058)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-0.1.rc1
changelog:
  - 2.7rc1:
    - rework patches to apply against 2.7 (which among other changes has had a
  whitespace cleanup of the .c code): .rhconfig (patch0), .binutils-no-dep
  (patch10), .ascii-tolower (patch11), .socketmodule (patch13), .socketmodule2
  (patch14), .systemtap (patch55), .lib64 (patch102), .selinux (patch110),
  .no-static-lib (patch111), .debug-build (patch112), .statvfs-f-flag-constants
  (patch114), ..CVE-2010-2089 (patch117)
    - drop upstream patches: .expat (patch3), .brprpm (patch51), .valgrind
  (patch52), .db48 (patch53), .CVE-2010-1634 (patch 116), .CVE-2008-5983 (patch
  118)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-0.1.rc2
changelog:
  - 2.7rc2
  - revert r79310 (patch 121)
  - remove modulator: upstream removed it in r78338
  - rename mathmodule(_d).so to math(_d).so in manifests (appears to be changed
  by r76861)
  - _bytesio(_d).so and _filesio(_d).so were consolidated into _io(_d).so in
  r73394 (upstream issue 6215)
  - use the gdb hooks from the upstream tarball, rather than keeping our own
  copy. The upstream version has some whitespace changes, a new write_repr for
  unicode objects, and various bulletproofings for being run on older gdbs


author: David Malcolm <dmalcolm@redhat.com> - 2.7-1
changelog:
  - 2.7 final; drop alphatag
  - drop patch 117 (upstream), patch 120 (upstreamed)
  - fix the commented-out __python_ver from 26 to 27


author: David Malcolm <dmalcolm@redhat.com> - 2.7-2
changelog:
  - add machinery for regenerating the "configure" script in the face of
  mismatching autoconf versions (patch 300)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-4
changelog:
  - fix reference to pyconfig.h in sysconfig that led to failure on startup if
  python-devel was not installed


author: David Malcolm <dmalcolm@redhat.com> - 2.7-5
changelog:
  - disable systemtap for now (dtrace is failing on startup due to the bug
  mentioned in 2.7-4)
  - provide relative path to python binary when running pathfix.py
  - fix parallel make (patch 122)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-6
changelog:
  - re-enable systemtap
  - cherrypick upstream patch to 2to3 for "from itertools import *"
  traceback (patch 123)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-8
changelog:
  - add %check section
  - update lib64 patch (patch 102) to fix expected output in test_site.py on
  64-bit systems
  - patch test_commands.py to work with SELinux (patch 124)
  - patch the debug build's usage of COUNT_ALLOCS to be less verbose (patch 125)


author: David Malcolm <dmalcolm@redhat.com> - 2.7-9
changelog:
  - move most of the payload of the core package to the libs subpackage, given
  that the libs aren't meaningfully usable without the standard libraries


author: David Malcolm <dmalcolm@redhat.com> - 2.7.1-1
changelog:
  - 2.7.1, reworking patch 0 (config), patch 102 (lib64); drop upstream
  patch 56 (cfgparse), patch 110 (ctypes/SELinux/noexecmem), patch 119 (expat
  compat), patch 123 (2to3 on "from itertools import *")
  - fix test_abc's test_cache_leak in the debug build (patch 128)
  - drop _weakref.so from manifest (_weakref became a core module in r84230)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.1-4
changelog:
  - for now, drop "obsoletes" of python-argparse, since it interracts badly with
  multilib (rhbz#667984)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-1
changelog:
  - 2.7.2; drop upstreamed patches: patch 122 (parallel make fix), patch 124
  (test_commands and SELinux), patch 130 (ppc preprocessor macro in debug
  build); patch 131 (decimal in Turkish locale); regenerate the autotool
  intermediates patch (patch 300)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-3
changelog:
  - reorganize test exclusions (test_openpty and test_pty seem to be failing on
  every arch, not just the explicitly-listed ones)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-7
changelog:
  - re-enable and fix the --with-tsc option on ppc64, and rework it on 32-bit
  ppc to avoid aliasing violations (patch 129; rhbz#698726)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-10
changelog:
  - rewrite of "check", introducing downstream-only hooks for skipping specific
  cases in an rpmbuild (patch 132), and fixing/skipping failing tests in a more
  fine-grained manner than before (patches 104, 133-142)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-11
changelog:
  - rename and renumber patches for consistency with python3.spec (55, 111, 113,
  114, 125, 131, 129 to 143)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.2-14
changelog:
  - support OpenSSL FIPS mode in _hashlib and hashlib; don't build the _md5 and
  _sha* modules, relying on _hashlib in hashlib, and thus within md5 etc
  (rhbz#563986; patch 146)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-1
changelog:
  - 2.7.3: refresh patch 102 (lib64); drop upstream patches 11 (ascii-to-lower),
  115 (pydoc robustness), 145 (linux2), 148 (gdbm magic values), 151 (deadlock
  in fork); refresh patch 112 (debug build); revise patch 127
  (test_structmember); fix test_gdb (patch 153); refresh patch 137 (distutils
  tests); add python2.pc to python-devel; regenerate the autotool intermediates
  patch (patch 300)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-4
changelog:
  - avoid allocating thunks in ctypes unless absolutely necessary, to avoid
  generating SELinux denials on "import ctypes" and "import uuid" when embedding
  Python within httpd (patch 155; rhbz#814391)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-8
changelog:
  - update uid/gid handling to avoid int overflows seen with uid/gid
  values >= 2^31 on 32-bit architectures (patch 157; rhbz#697470)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.3-11
changelog:
  - fix memory leak in module _hashlib (patch 158, rhbz#836285)
  - fix db4 include path for libdb4 package (f18 and above) (patch 159)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-17
changelog:
  - remove "_default_patch_fuzz" directive to avoid patches being silently
  misapplied (refresh patch 1, patch 101, patch 102, patch 111, patch 121,
  patch 158; rename patch 1, patch 101, patch 121; apply patch 54 before the
  lib64 patches to avoid fuzz problems caused by the conditional application
  of the lib64 patches)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-19
changelog:
  - bulletproof the gdb debugging hooks against a failure seen in ARM builds
  (patch 166; rhbz#912025)
  - re-enable make check on ARM (rhbz#912025)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-22
changelog:
  - fix a problem with distutils.sysconfig when CFLAGS is defined in the
  environment (patch 168; rhbz#849994)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-23
changelog:
  - use SHA-256 rather than implicitly using MD5 within the challenge handling
  in multiprocessing.connection (patch 169; rhbz#879695)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-25
changelog:
  - in debug builds, try to print repr() when a C-level assert fails in the
  garbage collector (typically indicating a reference-counting error somewhere
  else e.g in an extension module) (patch 170; rhbz#850013)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-27
changelog:
  - port _multiprocessing.Connection.poll() to use the "poll" syscall, rather
  than "select", allowing large numbers of subprocesses (patch 172;
  rhbz#849992)


author: David Malcolm <dmalcolm@redhat.com> - 2.7.3-34
changelog:
  - restrict scope of workaround for cmpi-bindings issue to avoid breaking
  in-tree running of test_sys and test_subprocess (rhbz#817554)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.4-1
changelog:
  - Updated to Python 2.7.4.
  - Refreshed patches: 0 (config), 7 (sqlite encoding), 16 (rpath in config),
  55 (systemtap), 111 (no static lib), 112 (debug build), 113 (more
  configuration flags), 130 (add extension to python config), 134 (fix
  COUNT_ALLOCS in test_sys), 146 (haslib FIPS), 147 (add debug malloc stats),
  153 (fix gdb test noise), 157 (uid, gid overflow - fixed upstream, just
  keeping few more downstream tests), 165 (crypt module salt backport),
  175 (fix configure Wformat), 5000 (regenerated autotooling patch)
  - Dropped patches: 101 (lib64 regex; merged upstream), 171 (exception on
  missing /dev/urandom; merged upstream), 172 (poll for multiprocessing socket
  connection; merged upstream)


author: Kalev Lember <kalevlember@gmail.com> - 2.7.4-2
changelog:
  - Build with libdb 5.3 instead of libdb4
  - Refreshed patches: 0 (config), 102 (lib64)
  - Dropped patches: 54 (db4 version), 159 (db4 include path adjustment)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.5-1
changelog:
  - Updated to Python 2.7.5.
  - Refreshed patches: 0 (config), 102 (lib64), 121 (add Modules to build path),
  153 (gdb test noise)
  - Dropped patches: 126, 127 (big endian issues, both fixed upstream),
  175 (configure -Wformat, fixed upstream)
  - Synced patch numbers with python3.spec.


author: Matej Stuchlik <mstuchli@redhat.com> - 2.7.5-11
changelog:
  - Make library-files user writable to get rid of
    Permission Denied in buildlog from debuginfo-packaging


author: Tomas Radej <tradej@redhat.com> - 2.7.6-1
changelog:
  - Updated to v2.7.6
  - Freshened patches 102, 111, 112, 136, and 142
  - Dropped patches 186, 188 (both fixed upstream)


author: Dan Horák <dan[at]danny.cz> - 2.7.6-9
changelog:
  - update the arch list where valgrind exists - %power64 includes also
      ppc64le which is not supported yet


author: Matej Stuchlik <mstuchli@redhat.com> - 2.7.7-1
changelog:
  - Update to 2.7.7
  - Refreshed patches: #16, #112, #138, #147, #157, #166, #173, #5000
  - Dropped patches: #190, #192, #194


author: Matej Stuchlik <mstuchli@redhat.com> - 2.7.9-1
changelog:
  - Update to 2.7.9
  - Refreshed patches: #55, #137, #146, #153, #156, #198
  - Dropped patches: #196, #197
  - New patch: #199
  - Added the rewheel module


author: Slavek Kabrda <bkabrda@redhat.com> - 2.7.9-4
changelog:
  - We need to provide both arch specific and noarch Provide for python2-devel
  in order not to break noarch builds.


author: Thomas Spura <tomspur@fedoraproject.org> - 2.7.10-3
changelog:
  - Add unversioned python-macros from fpc#281 and fpc#534
    and require it from python-devel
  - Make python-macros noarch


author: Orion Poplawski <orion@cora.nwra.com> - 2.7.10-7
changelog:
  - Add obsoletes to %python_provide macro to fix upgrade path
  - Fix python2- provides for python- packages in %python_provide


author: Tomas Orsava <torsava@redhat.com> - 2.7.11-6
changelog:
  - Fix for: CVE-2016-0772 python: smtplib StartTLS stripping attack
  - Raise an error when STARTTLS fails
  - rhbz#1303647: https://bugzilla.redhat.com/show_bug.cgi?id=1303647
  - rhbz#1346344: https://bugzilla.redhat.com/show_bug.cgi?id=1346344
  - Fixed upstream: https://hg.python.org/cpython/rev/b3ce713fb9be


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.12-8
changelog:
  - Port ssl and hashlib modules to OpenSSL 1.1.0
  - Drop hashlib patch for now
  - Add riscv64 arch to 64bit and no-valgrind arches


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.12-9
changelog:
  - Rename package to python2 and also rename the subpackages accordingly
  - Provide and obsolete python and the respective subpackages to ensure a clean
  upgrade path
  - Remove old provides for packages that got into stdlib
  - Implement PEP 394


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.13-1
changelog:
  - Update to 2.7.13
  - Don't blow up on EL7 kernel (random generator) (rhbz#1410175, rhbz#1410187)
  - Require glibc >= 2.24.90-26 (rhbz#1410644)


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.13-8
changelog:
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Update description to reflect that Python 2 is not the default Python


author: Tomas Orsava <torsava@redhat.com> - 2.7.13-9
changelog:
  - Added a dependency to the devel subpackage on python3-rpm-generators which
    have been excised out of rpm-build
  - There is no Python 2 package containing Python RPM generators, therefore
    Python 3 is needed when Python 2 package is to be built, but this was
    decided not to be a problem due to nearing EOL of Python 2
  - Involves: rhbz#1410631, rhbz#1444925


author: Michal Cyprian <mcyprian@redhat.com> - 2.7.13-15
changelog:
  - Revert "Add --executable option to install.py command"
    This enhancement is currently not needed and it can possibly
    collide with `pip --editable`option


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.14-2
changelog:
  - Add a new PYTHONSHOWREFCOUNT environment variable for printing the reference
    count in debug builds.
  - Fix nondeterministic read in test_pty.


author: Petr Viktorin <pviktori@redhat.com> - 2.7.14-9
changelog:
  - Add patch 288: warn/fail if Python 2 is called as /usr/bin/python and
    PYTHON_DISALLOW_AMBIGUOUS_VERSION is set
  - Add patch 289: Fix for over-aligned GC info


author: Tomas Orsava <torsava@redhat.com> - 2.7.14-17
changelog:
  - Change shebangs to the proper versioned binary
  - Bytecompile files manually, disbale brp-python-bytecompile
  Resolves: rhbz#1572171


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-3
changelog:
  - Remove the /usr/bin/python executable so that the user can chose where it
    points to by installing various streams of the `python` module


author: Lumír Balhar <lbalhar@redhat.com> - 2.7.15-6
changelog:
  - Remove unversioned symlink to manual page and to pydoc binary.
    They are both available in streams of `python` module.
  - Resolves: rhbz#1613343


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-9
changelog:
  - Set a special Provides tag that advertises the `python2` package as an
    alternative to the non-existing `python` package
  - Resolves: rhbz#1633559


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-13
changelog:
  - Don't list /usr/bin/python as a ghost file so `yum install /usr/bin/python`
    doesn't install this package
  - Resolves: rhbz#1633537


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.15-18
changelog:
  - Workaround Python's threading library issue with non returning wait, for signals with timeout
  Resolves: rhbz#1653754


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-19
changelog:
  - Remove remaining unversioned executables (idle, msgfmt.py, pygettext.py,
    pynche, smtpd.py, python-config)
  Resolves: rhbz#1656511


author: Tomas Orsava <torsava@redhat.com> - 2.7.15-21
changelog:
  - Fix Tkinter
  - Remove wininst exe files, that are no longer included, from the files section
  - Resolves: rhbz#1656488


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.16-7
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1703539 and rhbz#1704367


author: Miro Hrončok <mhroncok@redhat.com> - 2.7.16-11
changelog:
  - Use RPM built wheels of pip and setuptools in ensurepip instead of our rewheel patch
  - Require python2-setuptools from python2-devel to prevent packaging errors
  Resolves: rhbz#1718398


author: Tomas Orsava <torsava@redhat.com> - 2.7.16-12
changelog:
  - Adding FIPS compliance to Python 2 in RHEL8:
    - Updated patch 146 with a new version of the FIPS patch
    - Patch 169 has been removed, obsoleted by the updated patch 146
  Resolves: rhbz#1734126


author: Tomas Orsava <torsava@redhat.com> - 2.7.17-2
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-2
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in httplib.putrequest
  Resolves: rhbz#1883258


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-6
changelog:
  - Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests
  Resolves: rhbz#1889886


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-9
changelog:
  - Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response
  Resolves: rhbz#2036020


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-10
changelog:
  - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
  Resolves: rhbz#2047376


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-11
changelog:
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 2.7.18-12
changelog:
  - Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder
  Resolves: rhbz#2144072


author: zhangbinchen <zhangbinchen@openanolis.org> - 2.7.18-17.0.1
changelog:
  - Rebrand for Anolis OS
  - Support loongarch64 platform(Liwei Ge)
  - Pick up fix from Upstream (Jacob Wang)
    Fixup for CVE-2023-24329 patch name [f9e9f76](cstratak@redhat.com)
    Fix for CVE-2023-24329 [3f00cdc](lbalhar@redhat.com)
  - cherry-pick `Add sw patch #d078fba9fdfed2b7dc082bd56f7bc46d5e9905c2`. (nijie@wxiat.com)


author: Nikola Forró <nforro@redhat.com> - 1.0.0-13
changelog:
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1624172


author: Kalev Lember <klember@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Switch to new upstream at https://github.com/pygobject/pycairo
  - Switch to distutils build system
  - Tighten subpackage deps with the _isa macro
  - Rename Python 2 package to python2-cairo
  - Enable Python 3 support


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-2
changelog:
  - disable invocation of brp-python-bytecompile in postprocessing, since
  it would be with the wrong version of python (adapted from ivazquez'
  python3000 specfile)
  - use a custom implementation of __find_provides in order to filter out bogus
  provides lines for the various .so modules
  - fixup distutils/unixccompiler.py to remove standard library path from rpath
  (patch 1, was Patch0 in ivazquez' python3000 specfile)
  - split out libraries into a -libs subpackage
  - update summaries and descriptions, basing content on ivazquez' specfile
  - fixup executable permissions on .py, .xpm and .xbm files, based on work in
  ivazquez's specfile
  - get rid of DOS batch files
  - fixup permissions for shared libraries from non-standard 555 to standard 755
  - move /usr/bin/python*-config to the -devel subpackage
  - mark various directories as being documentation


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-3
changelog:
  - remove executable flag from various files that shouldn't have it
  - fix end-of-line encodings
  - fix a character encoding


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-4
changelog:
  - update patch0's setup of the crypt module to link it against libcrypt
  - update patch0 to comment "datetimemodule" back out, so that it is built
  using setup.py (see Setup, option 3), thus linking it statically against
  timemodule.c and thus avoiding a run-time "undefined symbol:
  _PyTime_DoubleToTimet" failure on "import datetime"


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-5
changelog:
  - fixup importlib/_bootstrap.py so that it correctly handles being unable to
  open .pyc files for writing (patch 2, upstream issue 7187)
  - actually apply the rpath patch (patch 1)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-6
changelog:
  - reword description, based on suggestion by amcnabb
  - fix the test_email and test_imp selftests (patch 3 and patch 4 respectively)
  - fix the test_tk and test_ttk_* selftests (patch 5)
  - fix up the specfile's handling of shebang/perms to avoid corrupting
  test_httpservers.py (sed command suggested by amcnabb)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-7
changelog:
  - remove commented-away patch 51 (python-2.6-distutils_rpm.patch): the -O1
  flag is used by default in the upstream code
  - "Makefile" and the config-32/64.h file are needed by distutils/sysconfig.py
  _init_posix(), so we include them in the core package, along with their parent
  directories (bug 531901)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-8
changelog:
  - add a provides of "python(abi)" (see bug 532118)
  - fix issues identified by a.badger in package review (bug 526126, comment 39):
    - use "3" thoughout metadata, rather than "3.*"
    - remove conditional around "pkg-config openssl"
    - use standard cleanup of RPM_BUILD_ROOT
    - replace hardcoded references to /usr with _prefix macro
    - stop removing egg-info files
    - use /usr/bin/python3.1 rather than /use/bin/env python3.1 when fixing
  up shebang lines
    - stop attempting to remove no-longer-present .cvsignore files
    - move the post/postun sections above the "files" sections


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-9
changelog:
  - add macros.python3 to the -devel subpackage, containing common macros for use
  when packaging python3 modules


author: Andrew McNabb <amcnabb@mcnabbs.org> - 3.1.1-10
changelog:
  - switched a few instances of "find |xargs" to "find -exec" for consistency.
  - made the description of __os_install_post more accurate.


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-11
changelog:
  - add %check section (thanks to Thomas Spura)
  - update patch 4 to use correct shebang line
  - get rid of stray patch file from buildroot


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-12
changelog:
  - remove build-time requirements on tix and tk, since we already have
  build-time requirements on the -devel subpackages for each of these (Thomas
  Spura)
  - replace usage of %define with %global (Thomas Spura)
  - remove forcing of CC=gcc as this old workaround for bug 109268 appears to
  longer be necessary
  - move various test files from the "tools"/"tkinter" subpackages to the "test"
  subpackage


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-14
changelog:
  - replace references to /usr with %{_prefix}; replace references to
  /usr/include with %{_includedir} (Toshio)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-15
changelog:
  - fix the URLs output by pydoc so they point at python.org's 3.1 build of the
  docs, rather than the 2.6 build


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-16
changelog:
  - use the %{_isa} macro to ensure that the python-devel dependency on python
  is for the correct multilib arch (#555943)
  - delete bundled copy of libffi to make sure we use the system one


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-19
changelog:
  - add %py3dir macro to macros.python3 (to be used during unified python 2/3
  builds for setting up the python3 copy of the source tree)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-20
changelog:
  - change python-3.1.1-config.patch to remove our downstream change to curses
  configuration in Modules/Setup.dist, so that the curses modules are built using
  setup.py with the downstream default (linking against libncursesw.so, rather
  than libncurses.so), rather than within the Makefile; add a test to %install
  to verify the dso files that the curses module is linked against the correct
  DSO (bug 539917; changes _cursesmodule.so -> _curses.so)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-21
changelog:
  - introduce %{dynload_dir} macro
  - explicitly list all lib-dynload files, rather than dynamically gathering the
  payload into a temporary text file, so that we can be sure what we are
  shipping
  - introduce a macros.pybytecompile source file, to help with packaging python3
  modules (Source3; written by Toshio)
  - rename "2to3-3" to "python3-2to3" to better reflect python 3 module packaging
  plans


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-22
changelog:
  - update python-3.1.1-config.patch to remove downstream customization of build
  of pyexpat and elementtree modules
  - add patch adapted from upstream (patch 7) to add support for building against
  system expat; add --with-system-expat to "configure" invocation
  - remove embedded copies of expat and zlib from source tree during "prep"


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-25
changelog:
  - split configure options into multiple lines for easy of editing
  - add systemtap static markers (wcohen, mjw, dmalcolm; patch 8), a systemtap
  tapset defining "python.function.entry" and "python.function.return" to make
  the markers easy to use (dmalcolm; source 5), and an example of using the
  tapset to the docs (dmalcolm; source 6) (rhbz:545179)


author: Thomas Spura <tomspur@fedoraproject.org> - 3.1.1-26
changelog:
  - rebuild for new package of redhat-rpm-config (rhbz:564527)
  - use 'install -p' when running 'make install'


author: David Malcolm <dmalcolm@redhat.com> - 3.1.1-27
changelog:
  - add pyfuntop.stp example (source 7)
  - convert usage of $$RPM_BUILD_ROOT to %{buildroot} throughout, for
  consistency with python.spec


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-1
changelog:
  - update to 3.1.2: http://www.python.org/download/releases/3.1.2/
  - drop upstreamed patch 2 (.pyc permissions handling)
  - drop upstream patch 5 (fix for the test_tk and test_ttk_* selftests)
  - drop upstreamed patch 200 (path-fixing script)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-5
changelog:
  - exclude test_http_cookies when running selftests, due to hang seen on
  http://koji.fedoraproject.org/koji/taskinfo?taskID=2088463 (cancelled after
  11 hours)
  - update python-gdb.py from v5 to py3k version submitted upstream


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-6
changelog:
  - build and install two different configurations of Python 3: debug and
  standard, packaging the debug build in a new "python3-debug" subpackage
  (patch 103)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-7
changelog:
  - add configure-time support for COUNT_ALLOCS and CALL_PROFILE debug options
  (patch 104); enable them and the WITH_TSC option within the debug build


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-10
changelog:
  - ensure that the compiler is invoked with "-fwrapv" (rhbz#594819)
  - reformat whitespace in audioop.c (patch 106)
  - CVE-2010-1634: fix various integer overflow checks in the audioop
  module (patch 107)
  - CVE-2010-2089: further checks within the audioop module (patch 108)
  - CVE-2008-5983: the new PySys_SetArgvEx entry point from r81399 (patch 109)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-11
changelog:
  - Fix an incompatibility between pyexpat and the system expat-2.0.1 that led to
  a segfault running test_pyexpat.py (patch 110; upstream issue 9054; rhbz#610312)


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.0.a1
changelog:
  - 3.2a1; add alphatag
  - rework %files in the light of PEP 3147 (__pycache__)
  - drop our configuration patch to Setup.dist (patch 0): setup.py should do a
  better job of things, and the %files explicitly lists our modules (r82746
  appears to break the old way of doing things).  This leads to various modules
  changing from "foomodule.so" to "foo.so".  It also leads to the optimized build
  dropping the _sha1, _sha256 and _sha512 modules, but these are provided by
  _hashlib; _weakref becomes a builtin module; xxsubtype goes away (it's only for
  testing/devel purposes)
  - fixup patches 3, 4, 6, 8, 102, 103, 105, 111 for the rebase
  - remove upstream patches: 7 (system expat), 106, 107, 108 (audioop reformat
  plus CVE-2010-1634 and CVE-2010-2089), 109 (CVE-2008-5983)
  - add machinery for rebuilding "configure" and friends, using the correct
  version of autoconf (patch 300)
  - patch the debug build's usage of COUNT_ALLOCS to be less verbose (patch 125)
  - "modulator" was removed upstream
  - drop "-b" from patch applications affecting .py files to avoid littering the
  installation tree


author: Thomas Spura <tomspur@fedoraproject.org> - 3.2-0.1.a1
changelog:
  - on 64bit "stdlib" was still "/usr/lib/python*" (modify *lib64.patch)
  - make find-provides-without-python-sonames.sh 64bit aware


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.3.a1
changelog:
  - Move test.support to core package (rhbz#596258)
  - Add various missing __pycache__ directories to payload


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.4.a1
changelog:
  - move most of the content of the core package to the libs subpackage, given
  that the libs aren't meaningfully usable without the standard libraries


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.5.b2
changelog:
  - 3.2b2
  - rework patch 3 (removal of mimeaudio tests), patch 6 (no static libs),
  patch 8 (systemtap), patch 102 (lib64)
  - remove patch 4 (rendered redundant by upstream r85537), patch 103 (PEP 3149),
  patch 110 (upstreamed expat fix), patch 111 (parallel build fix for grammar
  fixed upstream)
  - regenerate patch 300 (autotool intermediates)
  - workaround COUNT_ALLOCS weakref issues in test suite (patch 126, patch 127,
  patch 128)
  - stop using runtest.sh in %check (dropped by upstream), replacing with
  regrtest; fixup list of failing tests
  - introduce "pyshortver", "SOABI_optimized" and "SOABI_debug" macros
  - rework manifests of shared libraries to use "SOABI_" macros, reflecting
  PEP 3149
  - drop itertools, operator and _collections modules from the manifests as py3k
  commit r84058 moved these inside libpython; json/tests moved to test/json_tests
  - move turtle code into the tkinter subpackage


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.8.b2
changelog:
  - set EXTRA_CFLAGS to our CFLAGS, rather than overriding OPT, fixing a linker
  error with dynamic annotations (when configured using --with-valgrind)
  - fix the ppc build of the debug configuration (patch 130; rhbz#661510)


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.9.rc1
changelog:
  - 3.2rc1
  - rework patch 6 (static lib removal)
  - remove upstreamed patch 130 (ppc debug build)
  - regenerate patch 300 (autotool intermediates)
  - updated packaging to reflect upstream rewrite of "Demo" (issue 7962)
  - added libpython3.so and 2to3-3.2


author: David Malcolm <dmalcolm@redhat.com> - 3.2.1-1
changelog:
  - 3.2.1; refresh lib64 patch (102), subprocess unit test patch (129), disabling
  of static library build (due to Modules/_testembed; patch 6), autotool
  intermediates (patch 300)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.1-5
changelog:
  - re-enable and fix the --with-tsc option on ppc64, and rework it on 32-bit
  ppc to avoid aliasing violations (patch 130; rhbz#698726)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.2-2
changelog:
  - rewrite of "check", introducing downstream-only hooks for skipping specific
  cases in an rpmbuild (patch 132), and fixing/skipping failing tests in a more
  fine-grained manner than before; (patches 106, 133-142 sparsely, moving
  patches for consistency with python.spec: 128 to 134, 126 to 135, 127 to 141)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.2-3
changelog:
  - renumber and rename patches for consistency with python.spec (8 to 55, 106
  to 104, 6 to 111, 104 to 113, 105 to 114, 125, 131, 130 to 143)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.2-5
changelog:
  - support OpenSSL FIPS mode in _hashlib and hashlib; don't build the _md5 and
  _sha* modules, relying on _hashlib in hashlib (rhbz#563986; patch 146)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.3-1
changelog:
  - 3.2.3; refresh patch 102 (lib64); drop upstream patches 148 (gdbm magic
  values), 149 (__pycache__ fix); add patch 152 (test_gdb regex)


author: David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.1.b1
changelog:
  * Fri Jun 22 2012 David Malcolm <dmalcolm@redhat.com> - 3.2.3-10
  - use macro for power64 (rhbz#834653)


author: David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.1.b1
changelog:
  - 3.2 -> 3.3: https://fedoraproject.org/wiki/Features/Python_3.3
  - 3.3.0b1: refresh patches 3, 55, 102, 111, 113, 114, 134, 157; drop upstream
  patch 147; regenenerate autotools patch; drop "--with-wide-unicode" from
  configure (PEP 393); "plat-linux2" -> "plat-linux" (upstream issue 12326);
  "bz2" -> "_bz2" and "crypt" -> "_crypt"; egg-info files are no longer shipped
  for stdlib (upstream issues 10645 and 12218); email/test moved to
  test/test_email; add /usr/bin/pyvenv[-3.3] and venv module (PEP 405); add
  _decimal and _lzma modules; make collections modules explicit in payload again
  (upstream issue 11085); add _testbuffer module to tests subpackage (added in
  upstream commit 3f9b3b6f7ff0); fix test failures (patches 160 and 161);
  workaround erroneously shared _sysconfigdata.py upstream issue #14774; fix
  distutils.sysconfig traceback (patch 162); add BuildRequires: xz-devel (for
  _lzma module); skip some tests within test_socket (patch 163)


author: David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.3.b2
changelog:
  - 3.3b1 -> 3.3b2; drop upstreamed patch 152; refresh patches 3, 102, 111,
  134, 153, 160; regenenerate autotools patch; rework systemtap patch to work
  correctly when LANG=C (patch 55); importlib.test was moved to
  test.test_importlib upstream


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.3.0-8
changelog:
  - Fix error in platform.platform() when non-ascii byte strings are decoded to
    unicode (rhbz#922149)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.1-1
changelog:
  - Updated to Python 3.3.1.
  - Refreshed patches: 55 (systemtap), 111 (no static lib), 146 (hashlib fips),
  153 (fix test_gdb noise), 157 (uid, gid overflow - fixed upstream, just
  keeping few more downstream tests)
  - Removed patches: 3 (audiotest.au made it to upstream tarball)
  - Removed workaround for http://bugs.python.org/issue14774, discussed in
  http://bugs.python.org/issue15298 and fixed in revision 24d52d3060e8.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.1-3
changelog:
  - Add patch that enables building on ppc64p7 (replace the sed, so that
  we get consistent with python2 spec and it's more obvious that we're doing it.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-1
changelog:
  - Updated to Python 3.3.2.
  - Refreshed patches: 153 (gdb test noise)
  - Dropped patches: 175 (configure -Wformat, fixed upstream), 182 (gdb
  test threads)
  - Synced patch numbers with python.spec.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.4.0-0.1.a4
changelog:
  - Update to Python 3.4 alpha 4.
  - Refreshed patches: 55 (systemtap), 102 (lib64), 111 (no static lib),
  114 (statvfs flags), 132 (unittest rpmbuild hooks), 134 (fix COUNT_ALLOCS in
  test_sys), 143 (tsc on ppc64), 146 (hashlib fips), 153 (test gdb noise),
  157 (UID+GID overflows), 173 (ENOPROTOOPT in bind_port), 186 (dont raise
  from py_compile)
  - Removed patches: 129 (test_subprocess nonreadable dir - no longer fails in
  Koji), 142 (the mock issue that caused this is fixed)
  - Added patch 187 (remove thread atfork) - will be in next version
  - Refreshed script for checking pyc and pyo timestamps with new ignored files.
  - The fips patch is disabled for now until upstream makes a final decision
  what to do with sha3 implementation for 3.4.0.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.4.0-0.1.b1
changelog:
  - Update to Python 3.4 beta 1.
  - Refreshed patches: 102 (lib64), 111 (no static lib), 125 (less verbose COUNT
  ALLOCS), 141 (fix COUNT_ALLOCS in test_module), 146 (hashlib fips),
  157 (UID+GID overflows), 173 (ENOPROTOOPT in bind_port)
  - Removed patch 00187 (remove pthread atfork; upstreamed)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.4.0-0.1.b2
changelog:
  - Update to Python 3.4 beta 2.
  - Refreshed patches: 55 (systemtap), 146 (hashlib-fips), 154 (test_gdb noise)
  - Dropped patches: 114 (statvfs constants), 177 (platform unicode)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.0-5
changelog:
  - Don't add Werror=declaration-after-statement for extension
    modules through setup.py (PyBT#21121)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.2-1
changelog:
  - Update to 3.4.2
  - Refreshed patches: 156 (gdb autoload)
  - Removed: 195 (Werror declaration), 197 (CVE-2014-4650)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.2-7
changelog:
  - Fixed undefined behaviour in faulthandler which caused test to hang on x86_64
    (http://bugs.python.org/issue23433)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.3-1
changelog:
  - Updated to 3.4.3
  - BuildPython now accepts additional build options
  - Temporarily disabled test_gdb on arm (rhbz#1196181)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.3-4
changelog:
  - Use 1024bit DH key in test_ssl
  - Use -O0 when compiling -debug build
  - Update pip version variable to the version we actually ship


author: Thomas Spura <tomspur@fedoraproject.org> - 3.4.3-4
changelog:
  - python3-devel: Require python-macros for version independant macros such as
    python_provide. See fpc#281 and fpc#534.


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-9
changelog:
  - Fix for: CVE-2016-0772 python: smtplib StartTLS stripping attack
  - Raise an error when STARTTLS fails
  - rhbz#1303647: https://bugzilla.redhat.com/show_bug.cgi?id=1303647
  - rhbz#1346345: https://bugzilla.redhat.com/show_bug.cgi?id=1346345
  - Fixed upstream: https://hg.python.org/cpython/rev/d590114c2394


author: Tomas Orsava <torsava@redhat.com> - 3.5.2-1
changelog:
  - Rebased to version 3.5.2
  - Set to work with pip version 8.1.2
  - Removed patches 207, 237, 241 as fixes are already contained in Python 3.5.2
  - Removed arch or environment specific patches 194, 196, 203, and 208
    as test builds indicate they are no longer needed
  - Updated patches 102, 146, and 242 to work with the new Python codebase
  - Removed patches 200, 201, 5000 which weren't even being applied


author: Tomas Orsava <torsava@redhat.com> - 3.5.2-2
changelog:
  - Updated .pyc 'bytecompilation with the newly installed interpreter' to also
    recompile optimized .pyc files
  - Removed .pyo 'bytecompilation with the newly installed interpreter', as .pyo
    files are no more
  - Resolves rhbz#1373635


author: Charalampos Stratakis <cstratak@redhat.com> - 3.5.2-6
changelog:
  - Use proper patch numbering and base upstream branch for
  porting ssl and hashlib modules to OpenSSL 1.1.0
  - Drop hashlib patch for now
  - Add riscv64 arch to 64bit and no-valgrind arches


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.0-7
changelog:
  - Fix error check, so that Random.seed actually uses OS randomness (rhbz#1412275)
  - Skip test_aead_aes_gcm during rpmbuild


author: Tomas Orsava <torsava@redhat.com> - 3.6.0-8
changelog:
  - Modify the runtime dependency of python3-libs on system-python-libs to use
    just the version and release number, but not the dist tag due to Modularity


author: Tomas Orsava <torsava@redhat.com> - 3.6.0-9
changelog:
  - Modify the runtime dependency of python3-libs on system-python-libs again,
    because previous attempt didn't work properly with dnf resolving mechanism


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.0-12
changelog:
  - BuildRequire the new dependencies of setuptools when rewheel mode is enabled
  in order for the virtualenvs to work properly


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.0-18
changelog:
  - Set values of prefix and exec_prefix to /usr/local for
    /usr/bin/python* executables
  - Use new %_module_build macro


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.0-19
changelog:
  - Revert "Set values of prefix and exec_prefix to /usr/local for
    /usr/bin/python* executables..." to prevent build failures
    of packages using alternate build tools


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.0-21
changelog:
  - Use proper command line parsing in _testembed
  - Backport of PEP 538: Coercing the legacy C locale to a UTF-8 based locale
    https://fedoraproject.org/wiki/Changes/python3_c.utf-8_locale


author: Iryna Shcherbina <ishcherb@redaht.com> - 3.6.1-0.1.rc1
changelog:
  - Update to Python 3.6.1 release candidate 1
  - Add patch 264 to skip a known test failure on aarch64


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.1-6
changelog:
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Update to a newer implementation of PEP 538
  - Update description to reflect that Python 3 is now the default Python


author: Tomas Orsava <torsava@redhat.com> - 3.6.1-7
changelog:
  - Added a dependency to the devel subpackage on python3-rpm-generators which
    have been excised out of rpm-build
  - Updated notes on bootstrapping Python on top of this specfile accordingly
  - Involves: rhbz#1410631, rhbz#1444925


author: Florian Weimer <fweimer@redhat.com> - 3.6.2-4
changelog:
  - Do not generate debuginfo subpackages (#1476593)
  - Rebuild with binutils fix for ppc64le (#1475636)


author: Tomas Orsava <torsava@redhat.com> - 3.6.2-5
changelog:
  - Dropped BuildRequires on db4-devel which was useful for Python 2 (module
    bsddb), however, no longer needod for Python 3
  - Tested building Python 3 with and without the dependency, all tests pass and
    filelists of resulting RPMs are identical


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.2-8
changelog:
  - Have /usr/bin/2to3 (rhbz#1111275)
  - Provide 2to3 and idle3, list them in summary and description (rhbz#1076401)


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-11
changelog:
  - Add bcond for --without optimizations
  - Reword package descriptions
  - Remove Group declarations
  - Skip failing test_float_with_comma


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.2-12
changelog:
  - Use python3 style of calling super() without arguments in rpath
    patch to prevent recursion in UnixCCompiler subclasses
  Resolves: rhbz#1458122


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-13
changelog:
  - Rename patch files to be consistent
  - Run autotools to generate the configure script before building
  - Merge lib64 patches (104 into 102)
  - Skip test_bdist_rpm using test config rather than a patch (removes patch 137)
  - Remove patches 157 and 186, which had test changes left over after upstreaming
  - Remove patch 188, a temporary workaround for hashlib tests
  - Merge patches 180, 206, 243, 5001 (architecture naming) into new patch 274
  - Move python2-tools conflicts to tools subpackage (it was wrongly in tkinter)


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.2-14
changelog:
  - Expat >= 2.1.0 is everywhere, remove explicit requires
  - Conditionalize systemtap-devel BuildRequires
  - For consistency, require /usr/sbin/ifconfig instead of net-tools


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-16
changelog:
  - Specfile cleanup
  - Make the main description also applicable to the SRPM
  - Add audiotest.au to the test package


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.2-19
changelog:
  - Move pathfix.py to bindir, https://github.com/fedora-python/python-rpm-porting/issues/24
  - Make the -devel package require redhat-rpm-config
  Resolves: rhbz#1496757


author: Björn Esser <besser82@fedoraproject.org> - 3.6.4-8
changelog:
  - Add patch to explicitly link _ctypes module with -ldl (#1537489)
  - Refactored patch for libxcrypt
  - Re-enable strict symbol checks in the link editor


author: Tomas Orsava <torsava@redhat.com> - 3.6.4-10
changelog:
  - Disable test_gdb for all arches and test_buffer for ppc64le in anticipation
    of the F28 mass rebuild
  - Re-enable these tests after the mass rebuild when they can be properly
    addressed


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.6.4-14
changelog:
  - Remove the python3-tools package (#rhbz 1312030)
  - Move /usr/bin/2to3 to python3-devel
  - Move /usr/bin/idle and idlelib to python3-idle
  - Provide python3-tools from python3-idle


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.4-15
changelog:
  - Filter out automatic /usr/bin/python3.X requirement,
    recommend the main package from libs instead
  Resolves: rhbz#1547131


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.4-18
changelog:
  - Fix the py_byte_compile macro to work on Python 2
  - Remove the pybytecompile macro file from the flat package
  Resolves: rhbz#1484993


author: Tomas Orsava <torsava@redhat.com> - 3.6.5-3
changelog:
  - Platform-Python: Rebase implementation from RHEL8 Alpha:
  - Move the main executable to /usr/libexec/platform-python
  - Move /usr/bin/python*-config and /usr/bin/pythonX.Ym scripts to /usr/libexec/
  - Provide symlink to the main executable and other scripts from /usr/bin/,
    these will be later shipped only in the python36 module


author: Tomas Orsava <torsava@redhat.com> - 3.6.5-7
changelog:
  - Fix %py_byte_compile macro: when invoked with a Python 2 binary it also
    mistakenly ran py3_byte_compile


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-4
changelog:
  - Create the `libs-devel` subpackage and move `devel` contents there
  - `devel` subpackage is only for the buildroot and requires `python36-devel`
    to get /usr/bin/python3{,-config} symlinks there
  - `devel` subpackage will not be shipped into RHEL8, only `libs-devel` will
  - `debug` subpackage now runtime requires `libs-devel` instead of `devel`


author: Petr Viktorin <pviktori@redhat.com> - 3.6.6-5
changelog:
  - Fix the `devel` subpackage to require python3, rather than python36-devel,
    and provide /usr/bin/python3-config itself.


author: Petr Viktorin <pviktori@redhat.com> - 3.6.6-6
changelog:
  - Make `devel` subpackage require python36-devel again
    (and get /usr/bin/python3 and /usr/bin/python3-config from that).
  - Remove /usr/bin/python3* executables
  - Use pip36 instead of `pip3`


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-9
changelog:
  - Rename the python3 subpackage to platform-python
  - Provide the `python3` name for backwards compatibility until it's taken over
    by the python36 component
  - The python36 component that contains /usr/bin/python3 will Provide the
    name `python3` in its upcoming update
  - Resolves: rhbz#1619153


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-11
changelog:
  - Implement `alternatives` for chosing /usr/bin/python
  - Provide the default `no-python` alternative
  - Resolves: rhbz#1632625


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-12
changelog:
  - Rename the python3-debug subpackage to platform-python-debug
  - Provide the `python3-debug` name for backwards compatibility until it's taken
    over by the python36 component
  - Rename the python3-libs-devel subpackage to platform-python-devel for
    symmetry with the `platform-python` and `platform-python-debug` package
  - Add symlink /usr/libexec/platform-python-debug that was mistakenly omitted
  - Related: rhbz#1619153


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-13
changelog:
  - Stop providing the `python3` and `python3-debug` names from the
    platform-python/-debug subpackages
  - The `python3` and `python3-debug` names are now provided from the python36
    component
  - Conflict with older versions of `python3` and `python3-debug`
  - Related: rhbz#1619153


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.7-1
changelog:
  - Update to 3.6.7 (rhbz#1627739)
  - Re-enable test_gdb (rhbz#1639536)
  - Re-enable test_faulthandler (rhbz#1640147)


author: Tomas Orsava <torsava@redhat.com> - 3.6.7-2
changelog:
  - Switch to requiring platform-python-pip/setuptools instead of the python3-
    versions
  - Resolves: rhbz#1638836


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-7
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1704365 and rhbz#1703531


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.8-9
changelog:
  - Reduced default build flags used to build extension modules
    https://fedoraproject.org/wiki/Changes/Python_Extension_Flags
  Resolves: rhbz#1634784


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.8-12
changelog:
  - Use RPM built wheels of pip and setuptools in ensurepip instead of our rewheel patch
  - Require platform-python-setuptools from platform-python-devel to prevent packaging errors
  Resolves: rhbz#1701286


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-13
changelog:
  - Do not set PHA verify flag on client side (rhbz#1725721)
  - Enable TLS 1.3 post-handshake authentication in http.client (rhbz#1671353)


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-14
changelog:
  - Adding a new patch 329 that adds support for OpenSSL FIPS mode
  - Explicitly listing man pages in files section to fix an RPM warning
  Resolves: rhbz#1731424


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-15
changelog:
  - Patch 329 that adds support for OpenSSL FIPS mode has been improved and
    bugfixed
  Resolves: rhbz#1744670 rhbz#1745499 rhbz#1745685


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-16
changelog:
  - Properly pass the -Og optimization flag to the debug build
  Resolves: rhbz#1712977 and rhbz#1714733


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-18
changelog:
  - Reduce the number of tests running during the profile guided optimizations build
  - Enable profile guided optimizations for all the supported architectures
  Resolves: rhbz#1749576


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-19
changelog:
  - Skip windows specific test_get_exe_bytes test case and enable test_distutils
  Resolves: rhbz#1754040


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-21
changelog:
  - Patch 329 (FIPS) modified: Added workaround for mod_ssl:
    Skip error checking in _Py_hashlib_fips_error
  Resolves: rhbz#1760106


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-22
changelog:
  - Changed Requires into Recommends for python3-pip to allow a lower RHEL8
    footprint for containers and other minimal environments
  Resolves: rhbz#1756217


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-23
changelog:
  - Modify the test suite to better handle disabled SSL/TLS versions and FIPS mode
  - Use OpenSSL's DRBG and disable os.getrandom() function in FIPS mode
  Resolves: rhbz#1754028, rhbz#1754027, rhbz#1754026, rhbz#1774471


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-24
changelog:
  - Build Python with -fno-semantic-interposition for better performance
  - https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup
  - Also fix test_gdb failures with Link Time Optimizations
  Resolves: rhbz#1724996


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-26
changelog:
  - Skip test_startup_imports from test_site if we have a .pth file in sys.path
  Resolves: rhbz#1814392


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-27
changelog:
  - Add a sentinel value on the Hmac_members table of the fips compliant hmac module
  Resolves: rhbz#1800512


author: Victor Stinner <vstinner@python.org> - 3.6.8-30
changelog:
  - Remove downstream 00178-dont-duplicate-flags-in-sysconfig.patch which
    introduced a bug on distutils.sysconfig.get_config_var('LIBPL')
    (rhbz#1851090).


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-31
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481
  - Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
  Resolves: rhbz#1854926


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-32
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in http.client
  Resolves: rhbz#1883257


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-33
changelog:
  - Add support for upstream architecture names
  https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names
  Resolves: rhbz#1868003


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-34
changelog:
  - Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests
  Resolves: rhbz#1890237


author: Victor Stinner <vstinner@redhat.com> - 3.6.8-39
changelog:
  - Fix reentrant call to threading.enumerate() (rhbz#1959459)
  - Don't exit Python with abort() when a thread exit and there is no available
    file descriptor to load dynamically the libgcc_s.so.1 library (rhbz#1972293)


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-41
changelog:
  - Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs
  Resolves: rhbz#1995234


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-43
changelog:
  - Change shouldRollover() methods of logging.handlers to only rollover regular files
  Resolves: rhbz#2009200


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-44
changelog:
  - Use the monotonic clock for theading.Condition
  - Use the monotonic clock for the global interpreter lock
  Resolves: rhbz#2003758


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-46
changelog:
  - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2047376, rhbz#2060435


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-50
changelog:
  - Security fix for CVE-2022-45061
  - Strip the LTO bytecode from python.o
  Resolves: rhbz#2144072, rhbz#2137707


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-58
changelog:
  - Security fix for CVE-2022-48564
  Resolves: RHEL-16674
  - Skip tests failing on s390x
  Resolves: RHEL-19252


author: zhangbinchen <zhangbinchen@openanolis.org> - 3.6.8-62.0.1
changelog:
  - Add Anolis platform
  - Support Loongarch for python3 (songmingliang@uniontech.com)
  - Fix testcase fails on loongarch64 (geliwei@openanolis.org)
  - repair security fix for CVE-2007-4559 (sunxinpeng@inspur.com)
  - Fix CVE-2023-40217: Check for & avoid the ssl (hezhongkun@inspur.com)
  - Security fix for CVE-2022-48560 (wangkaiqiang@inspur.com)
  - Security fix for CVE-2022-48564 (wangkaiqiang@inspur.com)
  - Security fix for CVE-2023-27043 (liubo03@inspur.com)
  - cherry-pick `add sw patch #1182efa2f05c5804a55d35d45a9d72f97b64a9b2`. (Weisson@linux.alibaba.com)
    cherry-pick `sw use python of wordsize 64 #862dabb407d3f98c64f3a9d2675fcd3a6300a21f`.


author: zhangbinchen <zhangbinchen@openanolis.org> - 3.6.8-67.0.1
changelog:
  - Add Anolis platform
  - Support Loongarch for python3 (songmingliang@uniontech.com)
  - Fix testcase fails on loongarch64 (geliwei@openanolis.org)
  - cherry-pick `add sw patch #1182efa2f05c5804a55d35d45a9d72f97b64a9b2`. (Weisson@linux.alibaba.com)
    cherry-pick `sw use python of wordsize 64 #862dabb407d3f98c64f3a9d2675fcd3a6300a21f`.


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-5
changelog:
  - exclude test_http_cookies when running selftests, due to hang seen on
  http: //koji.fedoraproject.org/koji/taskinfo?taskID=2088463 (cancelled after
  11 hours)
  - update python-gdb.py from v5 to py3k version submitted upstream


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.1-1
changelog:
  - Updated to Python 3.3.1.
  - Refreshed patches: 55 (systemtap), 111 (no static lib), 146 (hashlib fips),
  153 (fix test_gdb noise), 157 (uid, gid overflow - fixed upstream, just
  keeping few more downstream tests)
  - Removed patches: 3 (audiotest.au made it to upstream tarball)
  - Removed workaround for http://bugs.python.org/issue14774, discussed in
  http: //bugs.python.org/issue15298 and fixed in revision 24d52d3060e8.


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-33
changelog:
  - Add support for upstream architecture names
  https: //fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names
  Resolves: rhbz#1868003


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - pam.patch differentiated between different kinds of bad logins.
    In particular, "user does not exist" and "bad password" were treated
    differently.  This was a minor security hole.


author: Erik Troan <ewt@redhat.com>
changelog:
  - Merged Red Hat changes into main util-linux source, updated package to
    development util-linux (nearly 2.7).


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated MCONFIG to automatically determine the architecture
  - added glibc header hacks to fdisk code
  - rdev is only available on the intel


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - patch top build on the arm without PAM and related utilities, for now.
  - build hwclock only on intel


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - .perms patch to login to make it retain root in parent process
    for pam_close_session to work correctly


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - if hwclock is to be compiled on sparc,
    it must actually work. Also, it should obsolete
    clock, otherwise it clashes.
  - limit the swap size in mkswap for 2.2.1+ kernels
    by the actual maximum size kernel can handle.
  - fix kbdrate on sparc, patch by J. S. Connell
    <ankh@canuck.gen.nz>


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include sfdisk (#1164)
  - fix write (#1784)
  - use positive logic in spec file (ifarch rather than ifnarch).
  - (re)-use 1st matching utmp slot if search by mypid not found.
  - update to 2.9o
  - lastb wants bad logins in wtmp clone /var/run/btmp (#884)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9t:
  - national language support for hwclock
  - Japanese messages (both by Daisuke Yamashita)
  - German messages and some misc i18n fixes (Elrond)
  - Czech messages (Jiri Pavlovsky)
  - wall fixed for /dev/pts/xx ttys
  - make last and wall use getutent() (Sascha Schumann)
  	[Maybe this is bad: last reading all of wtmp may be too slow.
  	Revert in case people complain.]
  - documented UUID= and LABEL= in fstab.5
  - added some partition types
  - swapon: warn only if verbose


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9u:
  - Czech more.help and messages (Jiri Pavlovsky)
  - Japanese messages (Daisuke Yamashita)
  - fdisk fix (Klaus G. Wagner)
  - mount fix (Hirokazu Takahashi)
  - agetty: enable hardware flow control (Thorsten Kranzkowski)
  - minor cfdisk improvements
  - fdisk no longer accepts a default device
  - Makefile fix


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9v:
  - cfdisk no longer believes the kernel's HDGETGEO
  	(and may be able to partition a 2 TB disk)


author: Christian 'Dr. Disk' Hechelmann <drdisk@tc-gruppe.de>
changelog:
  - added locale message catalogs to %file
  - added patch for non-root build
  - vigr.8 and /usr/lib/getopt  man-page was missing from file list
  - /etc/fdprm really is a config file


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - hostid is now in sh-utils. On sparc, install hostid as sunhostid (#4581).
  - update to 2.9w:
  -  Updated mount.8 (Yann Droneaud)
  -  Improved makefiles
  -  Fixed flaw in fdisk


author: Matt Wilson <msw@redhat.com>
changelog:
  - updated to util-linux 2.10c
  - deprecated IMAP login mail notification patch17
  - deprecated raw patch22
  - depricated readprofile patch24


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - raw control file was /dev/raw, now /dev/rawctl.
  - raw access files were /dev/raw*, now /dev/raw/raw*.


author: Matt Wilson <msw@redhat.com>
changelog:
  - use snprintf - not sprintf - when doing
    sprintf ("%s\n", _("Some string")) to avoid overflows and
    segfaults.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.10o
  -  fdformat: fixed to work with kernel 2.4.0test6 (Marek Wojtowicz)
  -  login: not installed suid
  -  getopt: by default install aux files in /usr/share/misc
  - update to 2.10n:
  -  added blockdev.8
  -  change to elvtune (andrea)
  -  fixed overrun in agetty (vii@penguinpowered.com)
  -  shutdown: prefer umounting by mount point (rgooch)
  -  fdisk: added plan9
  -  fdisk: remove empty links in chain of extended partitions
  -  hwclock: handle both /dev/rtc and /dev/efirtc (Bill Nottingham)
  -  script: added -f (flush) option (Ivan Schreter)
  -  script: added -q (quiet) option (Per Andreas Buer)
  -  getopt: updated to version 1.1.0 (Frodo Looijaard)
  -  Czech messages (Jiri Pavlovsky)
  - login.1 man page had not /var/spool/mail path (#16998).
  - sln.8 man page (but not executable) included (#10601).
  - teach fdisk 0xde(Dell), 0xee(EFI GPT), 0xef(EFI FAT) partitions (#17610).


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed problem w/ empty extended partitions
  - added patch to fix the date in the more man page
  - set OPT to pass optimization flags to make rather then RPM_OPT_FLAG
  - fixed fdisk -l /Proc/partitions parsing
  - updated to 2.10s


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated kill man page
  - added patch to fix vipw race
  - updated vipw to edit /etc/shadow and /etc/gshadow, if appropriate
  - added patch to disassociate login from tty, session, and pgrp


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed bug #29131, where ipc.info didn't have an info dir entry,
    added the dir entry to ipc.texi (Patch58)


author: Matt Wilson <msw@redhat.com>
changelog:
  - patched mkcramfs to use the PAGE_SIZE from asm/page.h instead of hard
    coding 4096 (fixes mkcramfs on alpha...)


author: Matt Wilson <msw@redhat.com>
changelog:
  - changed Requires: kernel >= 2.2.12-7 to Conflicts: kernel < 2.2.12-7
    (fixes a initscripts -> util-linux -> kernel -> initscripts prereq loop)


author: Erik Troan <ewt@redhat.com>
changelog:
  - upgraded to 2.11a (kbdrate moved to kbd, among other things)
  - turned off ALLOW_VCS_USE
  - modified mkcramfs to not use a large number of file descriptors
  - include mkfs.bfs


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.11a-3
changelog:
  - Fix up login - exiting immediately even if the password is correct
    is not exactly a nice feature.
  - Make definite plans to kill people who update login without checking
    if the new version works ;)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.11b-1
changelog:
  - Fix up login for real (a console session should be the controlling tty)
    by reverting to 2.10s code (#36839, #36840, #39237)
  - Add man page for agetty (#39287)
  - 2.11b, while at it


author: Bill Nottingham <notting@redhat.com>
changelog:
  - revert the patch that calls setsid() in login that we had reverted
    locally but got integrated upstream (#46223)


author: Elliot Lee <sopwith@redhat.com> 2.11f-13
changelog:
  - Patch/idea #76 from HJL, fixes bug #54741 (race condition in login 
  acquisition of controlling terminal).


author: Elliot Lee <sopwith@redhat.com> 2.11f-16
changelog:
  - Merge patches 36, 75, 76, and 77 into patch #37, to attempt resolve all the remaining issues with #54741.


author: Elliot Lee <sopwith@redhat.com> 2.11f-17
changelog:
  - Add patch38 (util-linux-2.11f-ctty2.patch) to ignore SIGINT/SIGTERM/SIGQUIT in the parent, so that ^\ won't break things.


author: Elliot Lee <sopwith@redhat.com> 2.11n-3
changelog:
  - Add util-linux-2.11n-ownerumount.patch (#56593)
  - Add patch102 (util-linux-2.11n-colrm.patch) to fix #51887
  - Fix #53452 nits.
  - Fix #56953 (remove tunelp on s390)
  - Fix #56459, and in addition switch to using sed instead of perl.
  - Fix #58471
  - Fix #57300
  - Fix #37436
  - Fix #32132


author: Elliot Lee <sopwith@redhat.com> 2.11n-7
changelog:
  Fix various bugs:
  - Add patch110 (skipraid) to properly skip devices that are part of a RAID array.
  - Add patch111 (mkfsman) to update the mkfs man page's "SEE ALSO" section.
  - remove README.cfdisk
  - Include partx
  - Fix 54741 and related bugs for good(hah!) with patch113 (ctty3)


author: Elliot Lee <sopwith@redhat.com> 2.11n-10
changelog:
  - Finish fixing #60675 (ipcrm man page), updated the patch.
  - Fix #61203 (patch114 - dumboctal.patch).


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - adjust mainframe patches to apply to current rpm
  - do not include fdisk until it is fixed to work on mainframe


author: Elliot Lee <sopwith@redhat.com> 2.11n-17
changelog:
  - Fix teg's swapondetect patch to not print out the usage message when 
  'swapon -a -e' is run. (#66690) (edit existing patch)
  - Apply hjl's utmp handling patch (#66950) (patch116)
  - Fix fdisk man page notes on IDE disk partition limit (#64013) (patch117)
  - Fix mount.8 man page notes on vfat shortname option (#65628) (patch117)
  - Fix possible cal overflow with widechars (#67090) (patch117)


author: Elliot Lee <sopwith@redhat.com> 2.11n-19
changelog:
  - Make a note here that this package was the source of the single change 
  contained in util-linux-2.11f-18 (in 7.2/Alpha), and also contains the 
  rawman patch from util-linux-2.11f-17.1 (in 2.1AS).
  - Package has no runtime deps on slang, so remove the BuildRequires: 
  slang-devel.


author: Elliot Lee <sopwith@redhat.com> 2.11w-2
changelog:
  - Remove some crack/unnecessary patches while submitting stuff upstream.
  - Build with -D_FILE_OFFSET_BITS=64


author: Elliot Lee <sopwith@redhat.com> 2.11y-1
changelog:
  - Update to 2.11y
  - Fix #80953
  - Update patch0, patch107, patch117, patch120 for 2.11y
  - Remove patch60, patch61, patch207, patch211, patch212, patch119, patch121
  - Remove patch122, patch200


author: Elliot Lee <sopwith@redhat.com> 2.11y-31
changelog:
  - Add patch140 (alldevs) to fix #101772. Printing the total size of
    all devices was deemed a lower priority than having all devices
    (e.g. /dev/ida/c0d9) displayed.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added pesudo flavors for nfsv4 mounts.
  - Added BuildRequires: libselinux-devel and Requires: libselinux
    when WITH_SELINUX is set.


author: <SteveD@RedHat.com>
changelog:
  - Added two checks to the nfs4 path what will print warnings
    when rpc.idmapd and rpc.gssd are not running.


author: <SteveD@RedHat.com>
changelog:
  - Reworked how the rpc.idmapd and rpc.gssd checks were
    done due to review comments from upstream.
  - Added rpc_strerror() so the '-v' flag will show RPC errors.


author: <SteveD@RedHat.com>
changelog:
  - Make RPC error messages displayed with -v argument
  - Added two checks to the nfs4 path what will print warnings
    when rpc.idmapd and rpc.gssd are not running
  - Ping NFS v4 servers before diving into kernel
  - Make v4 mount interruptible which also make the intr option on by default


author: <SteveD@RedHat.com>
changelog:
  - Updated the nfs-mount.patch to correctly 
    handle the mounthost option and to ignore 
    servers that do not set auth flavors


author: Alasdair Kergon <agk@redhat.com>
changelog:
  - Add device-mapper mount-by-label support
  - Fix segfault in mount-by-label when a device without a label is present.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Made the NFS security checks more explicit to avoid confusion
    (an upstream fix)
  - Also removed a compilation warning


author: Elliot Lee <sopwith@redhat.com> 2.12a-6
changelog:
  - Fix #16415, #70616 with rdevman.patch
  - Fix #102566 with loginman.patch
  - Fix #104321 with rescuept.patch (just use plain lseek - we're in _FILE_OFFSET_BITS=64 land now)
  - Fix #130016 - remove raw.
  - Re-add agetty (replacing it with mgetty is too much pain, and mgetty is much larger)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Updated the NFS and NFS4 code to the latest CITI patch set
    (in which they incorporate a number of our local patches).


author: Steve Dickson <SteveD@RedHat.com> 2.12a-18
changelog:
  - Made NFS mounts adhere to the IP protocol if specified on
    command line as well as made NFS umounts adhere to the
    current IP protocol. Fix #140016


author: Elliot Lee <sopwith@redhat.com> 2.12p-1
changelog:
  - Update to util-linux-2.12p. This changes swap header format
    from - you may need to rerun mkswap if you did a clean install of
    FC3.


author: Karel Zak <kzak@redhat.com> 2.12p-4
changelog:
  - added /var/log/lastlog to util-linux (#151635)
  - disabled 'newgrp' in util-linux (enabled in shadow-utils) (#149997, #151613)
  - improved mtab lock (#143118)
  - fixed ipcs typo (#151156)
  - implemented mount workaround for duplicated labels (#116300)


author: Karel Zak <kzak@redhat.com> 2.12p-8
changelog:
  - fix #154498 - util-linux login & pam session
  - fix #155293 - man 5 nfs should include vers as a mount option
  - fix #76467 - At boot time, fsck chokes on LVs listed by label in fstab
  - new Source URL
  - added note about ATAPI IDE floppy to fdformat.8
  - fix #145355 - Man pages for fstab and fstab-sync in conflict


author: Karel Zak <kzak@redhat.com> 2.12p-9.5
changelog:
  - fix #157656 - CRM 546998: Possible bug in vipw, changes permissions of /etc/shadow and /etc/gshadow
  - fix #159339 - util-linux updates for new audit system (pam_loginuid.so added to util-linux-selinux.pamd)
  - fix #159418 - sfdisk unusable - crashes immediately on invocation
  - fix #157674 - sync option on VFAT mount destroys flash drives
  - fix .spec file /usr/sbin/{hwclock,clock} symlinks


author: Karel Zak <kzak@redhat.com> 2.12p-9.7
changelog:
  - fix #159339 - util-linux updates for new audit system
  - fix #158737 - sfdisk warning for large partitions, gpt
  - fix #150912 - Add ocfs2 support
  - NULL is better than zero at end of execl()


author: Karel Zak <kzak@redhat.com> 2.13-0.2.pre2
changelog:
  - /usr/share/misc/getopt/* -move-> /usr/share/doc/util-linux-2.13/getopt-*
  - the arch command marked as deprecated
  - removed: elvtune, rescuept and setfdprm
  - removed: man8/sln.8 (moved to man-pages, see #10601)
  - removed REDAME.pg and README.reset
  - .spec file cleanup
  - added schedutils (commands: chrt, ionice and taskset)


author: Karel Zak <kzak@redhat.com> 2.13-0.3.pre2
changelog:
  - fix #166923 - hwclock will not run on a non audit-enabled kernel
  - fix #159410 - mkswap(8) claims max swap area size is 2 GB
  - fix #165863 - swsusp swaps should be reinitialized
  - change /var/log/lastlog perms to 0644


author: Karel Zak <kzak@redhat.com> 2.13-0.4.pre4
changelog:
  - fix #169628 - /usr/bin/floppy doesn't work with /dev/fd0
  - fix #168436 - login will attempt to run if it has no read/write access to its terminal
  - fix #168434 - login's timeout can fail - needs to call siginterrupt(SIGALRM,1)
  - fix #165253 - losetup missing option -a [new feature]
  - update PAM files (replace pam_stack with new "include" PAM directive)
  - remove kbdrate from src.rpm
  - update to 2.13pre4


author: Karel Zak <kzak@redhat.com> 2.13-0.6.pre5
changelog:
  - update to upstream 2.13pre5
  - remove separated cramfs1.1 (already in upstream package)
  - remove odd symlink /usr/bin/mkcramfs -> ../../sbin/mkfs.cramfs
  - fix #170171 - ipcs -lm always report "max total shared memory (kbytes) = 0"


author: Karel Zak <kzak@redhat.com> 2.13-0.11.pre6
changelog:
  - update to upstream version 2.13-pre6
  - fix #172203 - mount man page in RHEL4 lacks any info on cifs mount options


author: Karel Zak <kzak@redhat.com> 2.13-0.13
changelog:
  - fix #174676 - hwclock audit return code mismatch
  - fix #176441: col truncates data
  - fix #174111 - mount allows loopback devices to be mounted more than once to the same mount point
  - better wide chars usage in the cal command (based on the old 'moremisc' patch)


author: Steve Dickson <steved@redhat.com> 2.13-0.14
changelog:
  - Updated the gssd_check() and idmapd_check(), used with
    nfsv4 mounts, to looked for the correct file in /var/lock/subsys
    which stops bogus warnings.


author: Karel Zak <kzak@redhat.com> 2.13-0.16
changelog:
  - fix #181782 - mkswap should automatically add selinux label to swapfile
  - fix #180730 - col is exiting with 1 (fix util-linux-2.12p-col-EILSEQ.patch)
  - fix #181896 - broken example in schedutils man pages
  - fix #177331 - login omits pam_acct_mgmt & pam_chauthtok when authentication is skipped.
  - fix #177523 - umount -a should not unmount sysfs
  - fix #182553 - fdisk -l inside xen guest shows no disks


author: Jesse Keating <jkeating@redhat.com> 2.13-0.20
changelog:
  - Better calling of restorecon as suggested by Bill Nottingham
  - prereq restorecon to avoid ordering issues


author: Steve Dickson <steved@redhat.com> 2.13-0.21
changelog:
  - fix #183713 - foreground mounts are not retrying as advertised
  - fix #151549 - Added 'noacl' mount flag
  - fix #169042 - Changed nfsmount to try udp before using tcp when rpc-ing
  		the remote rpc.mountd (iff -o tcp is not specified).
  		This drastically increases the total number of tcp mounts
  		that can happen at once (ala autofs).


author: Dan Walsh <dwalsh@RedHat.com> 2.13-0.24
changelog:
  - Remove requirement on restorecon, since we can do the same thing
  - with chcon/matchpathcon, and not add requirement on policycoreutils


author: Karel Zak <kzak@redhat.com> 2.13-0.25
changelog:
  - fix #187014 - umount segfaults for normal user
  - fix #183446 - cal not UTF-8-aware
  - fix #186915 - mount does not translate SELIinux context options though libselinux
  - fix #185500 - Need man page entry for -o context= mount option
  - fix #152579 - missing info about /etc/mtab and /proc/mounts mismatch
  - fix #183890 - missing info about possible ioctl() and fcntl() problems on NFS filesystem
  - fix #191230 - using mount --move results in wrong data in /etc/mtab
  - added mount subtrees support
  - fdisk: wrong number of sectors for large disks (suse#160822)
  - merge fdisk-xvd (#182553) with new fdisk-isfull (#188981) patch 
  - fix #181549 - raw(8) manpage has old information about dd
  - remove asm/page.h usage


author: Karel Zak <kzak@redhat.com> 2.13-0.32
changelog:
  - add IPv6 support to the login command (patch by Milan Zazrivec)
  - fix #198626 - add keyinit instructions to the login PAM script 
    (patch by David Howells)


author: Karel Zak <kzak@redhat.com> 2.13-0.40
changelog:
  - fix Makefile.am in util-linux-2.13-mount-context.patch
  - fix #201343 - pam_securetty requires known user to work
  		(split PAM login configuration to two files)
  - fix #203358 - change location of taskset binary to allow for early affinity work


author: Karel Zak <kzak@redhat.com> 2.13-0.41
changelog:
  - fix #205038 - mount not allowing sloppy option (exports "-s"
    to external /sbin/mount.nfs(4) calls) 
  - fix minor bug in util-linux-2.13-mount-twiceloop.patch
  - fix #188193- util-linux should provide plugin infrastructure for HAL


author: Karel Zak <kzak@redhat.com> 2.13-0.42
changelog:
  - remove obsolete NFS code and patches (we use /sbin/mount.nfs
    and /sbin/umount.nfs from nfs-utils now)
  - move nfs.5 to nfs-utils


author: Karel Zak <kzak@redhat.com> 2.13-0.44
changelog:
  - fix #209911 - losetup.8 updated (use dm-crypt rather than deprecated cryptoloop)
  - fix #210338 - spurious error from '/bin/login -h $PHONENUMBER' (bug in IPv6 patch)
  - fix #208634 - mkswap "works" without warning on a mounted device


author: Karel Zak <kzak@redhat.com> 2.13-0.45
changelog:
  - use ncurses only
  - fix #218915 - fdisk -b 4K
  - upgrade to -pre7 release
  - fix building problem with raw0 patch
  - fix #217186 - /bin/sh: @MKINSTALLDIRS@: No such file or directory 
    (port po/Makefile.in.in from gettext-0.16)
  - sync with FC6 and RHEL5:
  - fix #216489 - SCHED_BATCH option missing in chrt
  - fix #216712 - issues with raw device support ("raw0" is wrong device name)
  - fix #216760 - mount with context or fscontext option fails
    (temporarily disabled the support for additional contexts -- not supported by kernel yet)
  - fix #211827 - Can't mount with additional contexts
  - fix #213127 - mount --make-unbindable does not work
  - fix #211749 - add -r option to losetup to create a read-only loop


author: Karel Zak <kzak@redhat.com> 2.13-0.47
changelog:
  - fix #217240 - namei ignores non-directory components instead of saying "Not a directory"
  - fix #217241 - namei enforces symlink limits inconsistently


author: Karel Zak <kzak@redhat.com> 2.13-0.51
changelog:
  - fix #150493 - hwclock --systohc sets clock 0.5 seconds slow
  - fix #220873 - starting RPC idmapd: Error: RPC MTAB does not exist.
  		(added rpc_pipefs to util-linux-2.13-umount-sysfs.patch)
  - fix #227903 - mount -f does not work with NFS-mounted


author: Karel Zak <kzak@redhat.com> 2.13-0.52
changelog:
  - rebase to util-linux-ng (new util-linux upstream fork,
  		based on util-linux 2.13-pre7)
  - more than 70 Fedora/RHEL patches have been merged to upstream code


author: Karel Zak <kzak@redhat.com> 2.13-0.54
changelog:
  - port "blockdev --rmpart" patch from util-linux
  - use same Provides/Obsoletes setting like in util-linux


author: Karel Zak <kzak@redhat.com> 2.13-0.57
changelog:
  - fix #253664 - util-linux-ng fails to build on sparc (patch by Dennis Gilmore)
  - rebase to new GIT snapshot


author: Karel Zak <kzak@redhat.com> 2.13-0.59
changelog:
  - add release number to util-linux Provides and increment setarch Obsoletes
  - fix #254114 - spec typo
  - upgrade to floppy-0.16
  - add BuildRequires: popt-devel


author: Karel Zak <kzak@redhat.com> 2.13.1-3
changelog:
  - upgrade to new upstream release
  - fix #427874 - util-linux-ng gets "excess command line argument" on update


author: Karel Zak <kzak@redhat.com> 2.14-0.1
changelog:
  - upgrade to 2.14-rc3
  - remove arch(8) (deprecated in favor of uname(1) or arch(1) from coreutils)
  - add a new command ldattach(8)
  - cfdisk(8) linked with libncursesw


author: Karel Zak <kzak@redhat.com> 2.14-3
changelog:
  - update util-linux-ng-2.14-mount-file_t.patch to make
    the SELinux warning optional (verbose mode is required)


author: Karel Zak <kzak@redhat.com> 2.14.1-3
changelog:
  - fix #465761 -  mount manpage is missing uid/gid mount options for tmpfs
  - refresh util-linux-ng-2.14-mount-file_t.patch (fuzz=0)


author: Karel Zak <kzak@redhat.com> 2.14.2-0.2
changelog:
  - fix #480413 - util-linux-ng doesn't include scriptreplay
  - fix #479002 - remove dependency on ConsoleKit-libs
  - upgrade to 2.14.2-rc2


author: Karel Zak <kzak@redhat.com> 2.14.2-1
changelog:
  - upgrade to stable 2.14.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.14/v2.14.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.14.2-5
changelog:
  - fix #489672 - flock segfaults when file name is not given (upstream)
  - fix #476964 - Mount /var/tmp with tmpfs creates denials
  - fix #487227 - fdisk 4KiB hw sectors support (upstream)
  - fix #477303 - renice doesn't support -n option (upstream)


author: Karel Zak <kzak@redhat.com> 2.15.1-0.1
changelog:
  - upgrade to 2.15.1-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.15/v2.15-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.15/v2.15.1-rc1-ChangeLog 
  - merged patches:
    util-linux-ng-2.14-login-remote.patch
    util-linux-ng-2.14-fdisk-4k-I.patch
    util-linux-ng-2.14-fdisk-4k-II.patch
    util-linux-ng-2.14-fdisk-4k-III.patch
    util-linux-ng-2.14-dmesg-r.patch
    util-linux-ng-2.14-flock-segfaults.patch
    util-linux-ng-2.14-renice-n.patch
  - new commands: lscpu, ipcmk
  - remove support for "managed" and "kudzu" mount options
  - cleanup spec file
  - enable built-in libblkid (replacement for the old blkid from e2fsprogs)


author: Karel Zak <kzak@redhat.com> 2.16-1
changelog:
  - upgrade to 2.16
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.16/v2.16-ReleaseNotes
  - enable built-in libuuid (replacement for the old uuid stuff from e2fsprogs)
  - new commands switch_root, uuidgen and uuidd (subpackage)


author: Karel Zak <kzak@redhat.com> 2.16-9
changelog:
  - fix #522718 - sfdisk -d /dev/xxx | sfdisk --force /dev/yyy fails when LANG is set
  - fix typo in swsuspend detection


author: Tomas Mraz <tmraz@redhat.com> - 2.16-10
changelog:
  - use password-auth common PAM configuration instead of system-auth and
    drop pam_console.so call from the remote PAM config file


author: Karel Zak <kzak@redhat.com> 2.17-0.1.git5e51568
changelog:
  - upgrade to pre-release snapshot (official changelog not available yet, see
    http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git for now)  
  - new commands: fallocate, unshare, wipefs
  - libblkid supports topology and partitions probing
  - remove support for --rmpart[s] from blockdev(8) (util-linux-ng-2.14-blockdev-rmpart.patch)
  - merged upstream:
    util-linux-ng-2.14-sfdisk-dump.patch
    util-linux-ng-2.16-blkid-swsuspend.patch
    util-linux-ng-2.16-libblkid-compression.patch
    util-linux-ng-2.16-libblkid-ext2.patch
    util-linux-ng-2.16-switchroot-tty.patch


author: Karel Zak <kzak@redhat.com> 2.17-0.2.git10dfc39
changelog:
  - upgrade to pre-release snapshot (official changelog not available yet, see
    http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git for now)


author: Karel Zak <kzak@redhat.com> 2.17-0.3
changelog:
  - upgrade to 2.17-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-rc1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17-0.5
changelog:
  - upgrade to 2.17-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-rc2-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17-1
changelog:
  - upgrade to the final 2.17
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-ChangeLog
  - fix #545147 - util-linux-ng : Violation of the Packaging Guidelines
    (remove uuid and blkid static libs)


author: Karel Zak <kzak@redhat.com> 2.17-2
changelog:
  - remove Provides: lib{uuid,blkid}-static (thanks to Michael Schwendt)
  - remove useless URL to sf.net


author: Karel Zak <kzak@redhat.com> 2.17.1-1
changelog:
  - upgrade to the final 2.17.1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17.2-1
changelog:
  - fix #581252 - remounting tmpfs fails because of hidden rootcontext=
  - fix #580296 - "rtcwake" does miss the "off" option
  - fix #575734 - use microsecond resolution for blkid cache entries
  - upgrade to the bugfix release 2.17.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ChangeLog
  - minor fixed in spec file


author: Karel Zak <kzak@redhat.com> 2.18-0.1
changelog:
  - upgrade to the release 2.18-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.18/v2.18-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.18/v2.18-rc1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.18-0.2
changelog:
  - upgrade to 2.18-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.18/v2.18-rc2-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.18-1
changelog:
  - upgrade to the final 2.18
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.18/v2.18-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.18-2
changelog:
  - fix #615719 - tmpfs mount fails with 'user' option.
  - fix #598631 - shutdown, reboot, halt and C-A-D don't work
  - fix #618957 - ISO images listed in fstab are mounted twice at boot


author: Karel Zak <kzak@redhat.com> 2.19-0.1
changelog:
  - upgrade to the release 2.19-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.19-0.3
changelog:
  - upgrade to the release 2.19-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-rc2-ChangeLog
  - fix #671893 - SELinux is preventing /bin/chown from 'setattr' accesses
    on the file mounts.


author: Karel Zak <kzak@redhat.com> 2.19-0.4
changelog:
  - upgrade to the release 2.19-rc3
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-rc3-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.19-1
changelog:
  - upgrade to the release 2.19
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19-ReleaseNotes
  - remove /sbin/mount.tmpfs -- integrated to mount(8)


author: Karel Zak <kzak@redhat.com> 2.19.1-0.1
changelog:
  - upgrade to the release 2.19.1-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19.1-rc1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.19.1-1
changelog:
  - upgrade to the release 2.19.1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.19/v2.19.1-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.19.1-2
changelog:
  - fix #716483 - /var/tmp --(BIND-mounted)--> /tmp disrupts/hangs bootup
  - fix #709681 - failure to mount if a mount point ends with a slash in /etc/fstab
  - fix #709319 - 'mount -a' mounts already mounted directories
  - fix kernel version parsing


author: Karel Zak <kzak@redhat.com> 2.20-0.1
changelog:
  - upgrade to the release 2.20-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.20/v2.20-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.20-0.2
changelog:
  - upgrade to the release 2.20-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.20/v2.20-rc2-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.21-0.1
changelog:
  - upgrade to the release 2.21-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.21/v2.21-ReleaseNotes
  - add {fsck,mkfs}.minix
  - add new command chcpu(8)
  - add new command prlimit(1)
  - enable raw(8) command
  - move 60-raw.rules from /etc from /usr/lib/udev/rules.d
  - move blkid cache from etc to /run/blkid


author: Karel Zak <kzak@redhat.com> 2.21.2-1
changelog:
  - upgrade to bugfix release 2.21.2
  - fix #814699 - namei(1) incorrectly resolves relative symlinks
  - fix #820707 - Impossible to unmount nfsv4/krb5 mounts after network disconnect
  - fix #816877 - libmount does not close device fd before mount(2)
  - fix #822705 - unable to login after installing


author: Karel Zak <kzak@redhat.com> 2.22-0.1
changelog:
  - upgrade to the release 2.22-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.22/v2.22-ReleaseNotes
  - add sulogin, utmpdump, lslocks, wdctl


author: Karel Zak <kzak@redhat.com> 2.22-1
changelog:
  - upgrade to the release 2.22
  - enable eject(1) from util-linux, obsolete original eject package
  - fix #853164 - setuid program should have full RELRO
  - fix #851230 - probe_ntfs: /usr/sbin/blkid was killed by SIGSEGV


author: Karel Zak <kzak@redhat.com> 2.22.2-3
changelog:
  - fix #882305 - agetty: unstable /dev/tty* permissions
  - fix #885314 - hexdump segfault
  - fix #896447 - No newlines in piped "cal" command
  - fix libblkid cache usage (upstream patch)
  - fix #905008 - uuidd: /usr/sbin/uuidd has incorrect file permissions


author: Karel Zak <kzak@redhat.com> 2.23-0.1
changelog:
  - upgrade to the release 2.23-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.23/v2.23-ReleaseNotes
  - add nsenter and blkdiscard
  - remove tunelp


author: Karel Zak <kzak@redhat.com> 2.23.2-1
changelog:
  - upgrade to stable release 2.23.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.23/v2.23.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.23.2-3
changelog:
  - refresh and rename patches
  - fix #987787 - Remove lastlogin from su
  - fix #950497 - problem umounting loop device
  - fix #921498 - multiple internal testsuite failures


author: Karel Zak <kzak@redhat.com> 2.23.2-4
changelog:
  - fix #1005566 - recount_geometry: Process /usr/sbin/fdisk was killed by signal 8 (SIGFPE)
  - fix #1005194 - su generates incorrect log entries


author: Karel Zak <kzak@redhat.com> 2.24-1
changelog:
  - upgrade to upstream release v2.24
  - remove nologin (merged upstream)
  - fix #1022217 - fdisk mishandles GPT corruption


author: Karel Zak <kzak@redhat.com> 2.24.1-1
changelog:
  - upgrade to stable release 2.24.1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.24/v2.24.1-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.24.2-1
changelog:
  - upgrade to stable release 2.24.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.24/v2.24.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.25-0.1
changelog:
  - upgrade to release 2.25-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.25/v2.25-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.25.1-0.1
changelog:
  - upgrade to release 2.25.1-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.25/v2.25.1-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.25.1-1
changelog:
  - upgrade to stable 2.25.1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.25/v2.25.1-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.25.2-1
changelog:
  - upgrade to stable 2.25.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.25/v2.25.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.26-0.1
changelog:
  - upgrade to 2.26-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.26/v2.26-ReleaseNotes
  - build with -pie for uuidd
  - new command zramctl


author: Karel Zak <kzak@redhat.com> - 2.26.2-1
changelog:
  - upgrade to stable release 2.26.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux/v2.26/v2.26.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> - 2.27-0.1
changelog:
  - upgrade to v2.27-rc1
    http://ftp.kernel.org/pub/linux/utils/util-linux/v2.27/v2.27-ReleaseNotes
  - add lsipc


author: Karel Zak <kzak@redhat.com> - 2.27-0.2
changelog:
  - fix #1251320 - rfe: please change login to not add /bin:/sbin to $PATH
  - apply patches from Lokesh Mandvekar to make spec file more portable


author: Karel Zak <kzak@redhat.com> - 2.28-0.1
changelog:
  - upgrade to v2.28-rc1
    http://ftp.kernel.org/pub/linux/utils/util-linux/v2.28/v2.28-ReleaseNotes
  - add patch to fix broken swapon
  - add subpackage util-linux-user (utils with dependence on libuser)


author: Karel Zak <kzak@redhat.com> - 2.28.1-1
changelog:
  - upgrade to stable 2.28.1
    http://ftp.kernel.org/pub/linux/utils/util-linux/v2.28/v2.28.1-ReleaseNotes


author: Karel Zak <kzak@redhat.com> - 2.28.2-1
changelog:
  - upgrade to stable 2.28.2
    http://ftp.kernel.org/pub/linux/utils/util-linux/v2.28/v2.28.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> - 2.32-3
changelog:
  - sync spec file with Fedora
  - move /etc/adjtime config from initscripts to util-linux
  - fix #1560642 - uuidd.service does not start
  - remove unused build option --enable-libmount-force-mountinfo (it's default now)
  - disable assert code


author: Karel Zak <kzak@redhat.com> 2.32.1-4
changelog:
  - fix #1614364 - losetup: /dev/loop1: failed to set up loop device
  - fix #1614852 - mount man page says sync option has no effect for ext4
  - fix #1614843 - Man page of logger is missing -S option


author: Karel Zak <kzak@redhat.com> 2.32.1-7
changelog:
  - fix #1656437 - Failing tests from testsuite
  - fix #1653781 - unable to umount by loop backing file
  - fix #1655650 - RHEL8.0 - fdisk -l shows the conflicting partitions name for the mpath
  - fix #1653413 - blkid: add --no-part-details to not return metadata from empty partitions


author: Karel Zak <kzak@redhat.com> 2.32.1-10
changelog:
  - fix #1699310 - rpm -V setup fail on /var/log/lastlog
  - fix #1702712 - pam_env bypassed for root user when using su


author: Karel Zak <kzak@redhat.com> 2.32.1-13
changelog:
  - fix #1734553 - blkid_get_dev() leak file descriptor to underlying block device
  - fix #1719069 - findmnt warning "recommended root FS passno is 1" for XFS


author: Karel Zak <kzak@redhat.com> 2.32.1-18
changelog:
  - fix #1739443 - lscpu reports wrong hypervisor in nested virt on s390x
  - fix #1743555 - command chfn adds some useless commas with GECOS information into /etc/password


author: Karel Zak <kzak@redhat.com> 2.32.1-23
changelog:
  - fix #1826251 - remove MD metadata 0.90 based tests from util-linux CI
  - fix #1812576 - RFE: Bitlocker detection for RHEL 8.3
  - fix #1817726 - add libblkid BLOCK_SIZE
  - fix #1803753 - RHEL-8: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
  - fix #1812118 - mount -a always tries to mount smb3 share subdir despite being already mounted
  - fix #1824727 - util-linux: Include python3-libmount package in the release
  - fix #1829245 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir


author: Karel Zak <kzak@redhat.com> 2.32.1-25
changelog:
  - fix #1884194 - RHEL-8: chrt command does not support the -R option
  - fix #1855759 - mount.8: clarify (no)suid behavior on file capabilities
  - fix #1861670 - lsblk can not show serial information for virtio disk
  - fix #1883783 - lscpu: avoid segfault on PowerPC systems with valid hardware configurations
  - fix #1900498 - libfdisk/libmount: backport two patches for upstream systemd
  - fix #1883056 - lscpu support for Fujitsu A64FX
  - fix #1882740 - lscpu: use SMBIOS Type 4 strings for CPU vendor and model on ARM


author: Karel Zak <kzak@redhat.com> 2.32.1-28
changelog:
  - fix #1906157 - after su from root to a normal user mesg is unable to show current status
  - fix #1917852 - findmnt: add option to list all fs-independent flags
  - fix #1922299 - throws error using /sbin/nologin: invalid option -- 'c'
  - fix #1940607 - lsblk sometimes returns block devices in wrong order with --pairs
  - fix #1919529 - [RFE] RHEL-8: Support option flags with mount(8) --bind
  - fix #1946921 - RHEL8: mount --rbind -o rprivate doesn't do recursive bind mount


author: Karel Zak <kzak@redhat.com> 2.32.1-29
changelog:
  - fix #1988955 - script command continues without stopping.
  - fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
  - fix #2011602 - logger from util-linux incorrectly handles long messages
  - fix #1916151 - [RFE] spread fstrim.timer across time
  - fix #1894192 - Update or backport setpriv --pdeathsig
  - fix #2026511 - blkid fails to complete when targeting  non-block devices


author: Karel Zak <kzak@redhat.com> 2.32.1-31
changelog:
  - improve #2026511 fix - blkid fails to complete when targeting non-block devices
  - fix #1950187 - Ambient capabilities failed to applied to non-root user


author: Karel Zak <kzak@redhat.com> 2.32.1-36
changelog:
  - fix #2060030 - Please backport patches for atari partition detection to RHEL 8
  - fix #2069187 - Internal testsuite for lscpu failed on aarch64
  - fix #2093166 - lslogins reports incorrect "Password is locked" status
  - fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
  - fix #2044592 - Move /var/log/lastlog ownership to systemd


author: Karel Zak <kzak@redhat.com> 2.32.1-40
changelog:
  - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos 
  - fix #2142496 - update upstream tests
  - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES
  - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38
  - fix #2160321 - [last] ut->ut_user is not null terminated


author: Karel Zak <kzak@redhat.com> 2.32.1-43
changelog:
  - fix #2117355 - Add additional documentation for fstab
  - fix #2184728 - libuuid - downport cache related patch
  - fix #2188894 - The swapon man page of -p(priority) option shows incorrect.
  - fix #2227097 - wall(1) fail when trying to use seat0


author: Weitao Zhou <zhouwt@linux.alibaba.com> 2.32.1-44.0.1
changelog:
  - [Patch] hwclock: better compatibility for both glibc2.28 and glibc2.31
  - [Patch] lscpu: add Neoverse-N2 to ARM identifiers tables (flin@linux.alibaba.com)
  - [Patch] lscpu: fix lscpu to get cpu frequency from cpuinfo on arm64 (flin@linux.alibaba.com)
  - cherry-pick `add sw patch #a16dca4d0754a5ae036dc6833523ff37429b3e60`. (nijie@wxiat.com)


author: Karel Zak <kzak@redhat.com> 2.32.1-46
changelog:
  - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq
  - fix RHEL-18451 - logger: initialize socket credentials control union
  - fix RHEL-16070 - util-linux: issues in libblkid
  - fix RHEL-6274 - lslogins incorrect account expiration field


author: Weitao Zhou <zhouwt@linux.alibaba.com> 2.32.1-46.0.1
changelog:
  - [Patch] hwclock: better compatibility for both glibc2.28 and glibc2.31
  - [Patch] lscpu: add Neoverse-N2 to ARM identifiers tables (flin@linux.alibaba.com)
  - [Patch] lscpu: fix lscpu to get cpu frequency from cpuinfo on arm64 (flin@linux.alibaba.com)
  - cherry-pick `add sw patch #a16dca4d0754a5ae036dc6833523ff37429b3e60`. (nijie@wxiat.com)
  - [Bugfix]:prlimit fix optional arguments parsing (songkai01@inpsur.com)


author: Lubos Uhliarik <luhliari@redhat.com> - 4.6.4-4
changelog:
  - Resolves: #1779705 - python3-mod_wsgi: Remove the Provides and Obsoletes for
    the name `mod_wsgi`


author: Tomas Orsava <torsava@redhat.com> - 1:1.14.3-5
changelog:
  - Switch runtime dependency of the python3-numpy-f2py package from
    python3-devel (that's now buildroot-only) to python3-libs-devel
  Resolves: rhbz#1610863


author: Tomas Orsava <torsava@redhat.com> - 2.7.4-3
changelog:
  - Revert switching Python 3 subpackages to the python3X- prefix
  - Switch only the requires for python3-devel/debug to the python36-prefix:
    the rest of the packages in the python36 collection will have the python3
    prefix to be unified with the Python 3 packages for Platform-Python


author: Mahailiang <mahailiang@openanolis.org> - 2.7.5-7.0.1
changelog:
  - Fix test_external_close_async check error
  - Sync from https://github.com/psycopg/psycopg2 (version 2.8)


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0-15
changelog:
  - enable vsftpd-based tests
  - run the test-suite for Python 3 only
  - do not disable TLS-SRP test because it is now supported by OpenSSL in Fedora


author: Kamil Dudka <kdudka@redhat.com> - 7.43.0.2-4
changelog:
  - fix populating list of decoded strings (#1792213)
  - fix programming mistakes detected by static analyzers (#1666003)


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.10-16
changelog:
  - Subpackage python2-pyodbc has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.3-13
changelog:
  - Python 2 binary package renamed to python2-pyxattr
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Marek Kasik <mkasik@redhat.com> - 3.4.0-8.1
changelog:
  - Do not evaluate unichar element
  - Replace an invalid char with a correct one (rpminspect)
  - Resolves: RHEL-7008


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.5.0-4
changelog:
  - Python 2 binary package renamed to python2-sanlock
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018.2-7
changelog:
  - Selectively build python2 or python3 based on current version.
  - Don't use pathfix.py as it fails prep on RHEL when building on systems
    do not have python installled.


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-17
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1830625


author: Richard Lescak <rlescak@gmail.com> - 1.7.3-18
changelog:
  - Change file mode before owner when configuring remote control unix socket to avoid AVC denials
  - Resolves: rhbz#2038251


author: Petr Menšík <pemensik@redhat.com> - 1.16.0-1
changelog:
  - Upgrade to 9.16.0 (#2027735)
  - Update to recent version with compatibility with RHEL8 (#2027735)
  - Ensure also source level compatibility with previous version


author: Kaiqiang Wang <wangkaiqiang@inspur.com> - 1.16.2-6
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868


author: Paul Wouters <paul@xelerance.com> - 1.0.2-4
changelog:
  - Fix CFLAGS getting lost in build
  - Don't enable interface-automatic:yes because that
    causes unbound to listen on 0.0.0.0 instead of 127.0.0.1


author: Paul Wouters <paul@xelerance.com> - 1.0.2-5
changelog:
  - Only call ldconfig in -libs package
  - Move configure into build section
  - devel subpackage should only depend on libs subpackage


author: Paul Wouters <paul@xelerance.com> - 1.1.0-1
changelog:
  - Updated to version 1.1.0
  - Updated unbound.conf's statistics options and remote-control
    to work properly for munin
  - Added unbound-munin package
  - Generate unbound remote-control  key/certs on first startup
  - Required ldns is now 1.4.0


author: Adam Tkac <atkac redhat com> - 1.1.0-2
changelog:
  - unbound-1.1.0-log_open.patch
    - make sure log is opened before chroot call
    - tracked as http://www.nlnetlabs.nl/bugs/show_bug.cgi?id=219
  - removed /dev/log and /var/run/unbound and /etc/resolv.conf from
    chroot, not needed
  - don't mount files in chroot, it causes problems during updates
  - fixed typo in default config file


author: Paul Wouters <paul@xelerance.com> - 1.1.0-3
changelog:
  - Remove the chroot, obsoleted by SElinux
  - Add additional munin plugin links supported by unbound plugin
  - Move configuration directory from /var/lib/unbound to /etc/unbound
  - Modified unbound.init and unbound.conf to account for chroot changes
  - Updated unbound.conf with new available options
  - Enabled dns-0x20 protection per default


author: Paul Wouters <paul@xelerance.com> - 1.1.1-6
changelog:
  - Added scandir patch for trusted-keys-file: option, which
    is used to load multiple dnssec keys in bind file format


author: Paul Wouters <paul@xelerance.com> - 1.1.1-7
changelog:
  - Modified scandir patch to silently fail when wildcard matches nothing
  - Patch to allow unbound-checkconf to find empty wildcard matches


author: Paul Wouters <paul@xelerance.com - 1.2.0-1
changelog:
  - Updated to 1.2.0
  - Added dependancy on minimum SSL for CVE-2008-5077
  - Added dependancy on bc for unbound-munin
  - Added minimum requirement of libevent 1.4.5. Crashes with older versions
    (note: libevent is stale in EL-4 and not in EL-5, needs fixing there)
  - Removed dependancy on selinux-policy (will get used when available)
  - Enable options as per draft-wijngaards-dnsext-resolver-side-mitigation-00.txt
  - Enable unwanted-reply-threshold to mitigate against a Kaminsky attack
  - Enable val-clean-additional to drop addition unsigned data from signed
    response.
  - Removed patches (got merged into upstream)


author: Paul Wouters <paul@xelerance.com> - 1.3.0-1
changelog:
  - Updated to 1.3.0
  - Added unbound-python sub package. disabled for now
  - Patch from svn to fix DLV lookups
  - Patches from svn to detect wrong truncated response from BIND 9.6.1 with
    minimal-responses)
  - Added Default-Start and Default-Stop to unbound.init
  - Re-enabled --enable-sha2
  - Re-enabled glob.patch


author: Paul Wouters <paul@xelerance.com> - 1.4.1-2
changelog:
  - Removed dependancy for dnssec-conf
  - Added ISC DLV key (formerly in dnssec-conf)
  - Fixup old DLV locations in unbound.conf file via %post
  - Fix parent child disagreement handling and no-ipv6 present [svn r1953]


author: Paul Wouters <paul@xelerance.com> - 1.4.2-1
changelog:
  - Updated to 1.4.2 
  - Updated unbound.conf with new options
  - Enabled pre-fetching DNSKEY records (DNSSEC speedup)
  - Enabled re-fetching popular records before they expire
  - Enabled logging of DNSSEC validation errors


author: Paul Wouters <paul@xelerance.com> - 1.4.5-3
changelog:
  - Disable do-ipv6 per default - causes severe degradation on non-ipv6 machines
    (see comments in inbound.conf)


author: Paul Wouters <paul@xelerance.com> - 1.4.8-1
changelog:
  - Updated to 1.4.8
  - Enable root key for DNSSEC
  - Fix unbound-munin to use proper file (could cause excessive logging)
  - Build unbound-python per default
  - Disable gost as Fedora/EPEL does not allow ECC and has mangled openssl


author: Paul Wouters <paul@xelerance.com> - 1.4.11-1
changelog:
  - Updated to 1.4.11
  - removed integrated CVE patch
  - updated stock unbound.conf for new options introduced


author: Paul Wouters <paul@xelerance.com> - 1.4.12-2
changelog:
  - Fix for python module load in the server (Tom Hendrikx)
  - No longer enable --enable-debug as it causes degraded  performance
    under load.


author: Paul Wouters <paul@xelerance.com> - 1.4.13-1
changelog:
  - Upgraded to 1.4.13
  - Removed merged in pythonmod patch
  - Added EDNS1480 patch to fix unbound on broken EDNS/UDP networks
  - Fix python to go into sitearch instead of sitelib


author: Paul Wouters <paul@cypherpunks.ca> - 1.4.14-1
changelog:
  - Upgraded to 1.4.14 for CVE-2011-4528 / VU#209659
  - SSL-wrapped query support for dnssec-trigger
  - EDNS handling changes
  - Removed integrated EDNS patches
  - Disabled use-caps-for-id, GoDaddy domains now break on it
  - Enabled new harden-below-nxdomain


author: Paul Wouters <pwouters@redhat.com> - 1.4.16-2
changelog:
  - Don't ghost the directory (rhbz#788805)
  - Patch for unbound to support unbound-control forward_zone
    (needed for openswan in XAUTH mode)


author: Paul Wouters <pwouters@redhat.com> - 1.4.16-3
changelog:
  - Since the daemon links to the libs staticly, add Requires:
    (this is rhbz#745288)
  - Package up streamtcp as unbound-streamtcp (for monitoring)


author: Paul Wouters <pwouters@redhat.com> - 1.4.17-5
changelog:
  - Fix for unbound crasher (upstream bug #452)
  - Support libunbound functions in man pages and place in -devel


author: Paul Wouters <pwouters@redhat.com> - 1.4.18-1
changelog:
  - Updated to 1.4.18 (FIPS related fixes mostly)
  - Removed patches that were merged in upstream
  - Added comment to root.key


author: Paul Wouters <pwouters@redhat.com> - 1.4.18-5
changelog:
  - Patch to allow wildcards in include: statements
  - Add directories /etc/unbound/keys.d,conf.d,local.d with
    example entries
  - Added /etc/unbound/root.anchor, maintained by unbound-anchor
    which is installed as monthly cron and PreExec in systemd config
    (root.key is unused, but left installed in case people depend on it)
  - Native systemd (simple) and /etc/sysconfig/unbound support
  - Run unbound-checkconf in PreExec
  - Moved trust anchor related files to unbound-libs, as they can
    be used without the daemon.
  - sub packages now depends on base package of same arch
  - Build munin package as noarch
  - unbound-anchor moved to unbound-libs package. It is needed
    to update the root.anchor key file.


author: Paul Wouters <pwouters@redhat.com> - 1.4.18-6
changelog:
  - Patch to ensure stube-zone's aren't lost when using dnssec-triggerd
  - added unbound-munin.README file


author: Paul Wouters <pwouters@redhat.com> - 1.4.20-4
changelog:
  - Updated to 1.4.20
  - Build with full RELRO (not use -z,relro but with -z,relo,-z,now)
  - Fixup man page for unbound-control-setup
  - unbound.service should start before nss-lookup.target (rhbz#919955)
  - Removed patch for rhbz#888759 merged in upstream
  - Move root.anchor to /var/lib/unbound to make selinux policy easier for updating (rhbz#896599/rhbz#891008)
  - Move cronjob for root.anchor from unbound to unbound-libs, require crontabs
  - /etc/unbound (and all) should be owned by unbound-libs (rhbz#909691)
  - Remove Obsolete/Provides for dnssec-conf which was last seen in f13
  - Ensure any unbound-anchor failure in post is ignored


author: Paul Wouters <pwouters@redhat.com> - 1.4.20-5
changelog:
  - Fix cron job syntax (rhbz#951725)
  - Use install -p to prevent .rpmnew files that are identical to originals


author: Paul Wouters <pwouters@redhat.com> - 1.4.20-12
changelog:
  - Enable round-robin (with noths() patch)
  - Change cron and systemd service to use root.key, not root.anchor


author: Tomas Hozza <thozza@redhat.com> - 1.4.20-14
changelog:
  - remove missing unbound-rootkey.service from post/preun/postun sections
  - don't hardcode hardening flags, let hardened build macro handles it


author: Paul Wouters <pwouters@redhat.com> - 1.4.21-1
changelog:
  - Updated to 1.4.21, 
  - Enabled new max-udp-size: 3072 (so ANY isc.org won't fit)
  - Removed patched merged in by upstream
  - Enable statistics-cumulative for munin-plugin
  - Added outgoing-port-avoid: 0-32767 conformant to SElinux restrictions
  - Updated unbound.conf


author: Paul Wouters <pwouters@redhat.com> - 1.5.1-1
changelog:
  - Update to 1.5.1 for CVE-2014-8602 (rhbz#1172066)
  - Removed unbound-aarch64.patch which was merged upstream
  - Don't require autotools for non snapshots or run autoreconf


author: Paul Wouters <pwouters@redhat.com> - 1.5.3-1
changelog:
  - Updated to 1.5.3 which is a bugfix on 1.5.2 for sighup handling
  - Updated to 1.5.2 which fixes DNSSEC validation with different
    trust anchors upstream, local-zone has a new keyword 'inform'


author: Tomas Hozza <thozza@redhat.com> - 1.5.3-2
changelog:
  - Fix FTBFS (#1206129)
  - Build python3-unbound and python-unbound bindings for Python 3 and 2 (#1188080)


author: Tomas Hozza <thozza@redhat.com> - 1.5.3-3
changelog:
  - migrate cronjob to systemd timer unit (#1177285)
  - change the period for unbound-anchor from monthly to daily (#1180267)
  - Thanks to Tomasz Torcz <ttorcz@fedoraproject.org> for the initial patch


author: Paul Wouters <pwouters@redhat.com> - 1.5.3-4
changelog:
  - Fixup scriptlets causing systemctl: command not found
  - Resolves rhbz#1219587 Error in PREIN scriptlet in rpm package unbound-libs


author: Tomas Hozza <thozza@redhat.com> - 1.5.3-5
changelog:
  - unbound.service now Wants unbound-anchor.timer
  - unbound-anchor man page moved to the unbound-libs


author: Tomas Hozza <thozza@redhat.com> - 1.5.3-7
changelog:
  - Add option for maximum negative cache TTL (#1229599)
  - Use low maximum negative cache TTL (5 sec) (#1229596)


author: Tomas Hozza <thozza@redhat.com> - 1.5.4-2
changelog:
  - Start unbound-anchor.timer only on new installations
  - Rename root.anchor to root.key in %post section


author: Tomas Hozza <thozza@redhat.com> - 1.5.4-3
changelog:
  - Added ExecReload section to unbound.service (#1195785)
  - Removed After syslog.target since it is not needed any more


author: Tomas Hozza <thozza@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5 (#1269137)
  - Removed the anchor update from %post section of -libs subpackage (#1269137#c2)


author: Paul Wouters <pwouters@redhat.com> - 1.5.7-1
changelog:
  - Update to 1.5.7
  - Enable query minimalization for enhanced DNS query privacy
  - Enable nxdomain hardening to assist with query minimalization and SBLs
  - Updated default unbound.conf for new features from upstream.


author: Paul Wouters <pwouters@redhat.com> - 1.5.8-1
changelog:
  - Update to 1.5.8 (rhbz#1313831) which incorporates rhbz#1294339 patch
  - Updated unbound.conf with new upstream options
  - Enabled ip-transparent: yes (see rhbz#1291449)


author: Paul Wouters <pwouters@redhat.com> - 1.5.10-1
changelog:
  - Updated to 1.5.10 (better TCP handling, bugfixes)
  - Install pkgconfig file in -devel package
  - Updated unbound.conf


author: Paul Wouters <pwouters@redhat.com> - 1.6.4-1
changelog:
  - Updated to 1.6.4 full release, patch to allow missing ipsechook
  - Resolves rhbz#1465575 unbound fails to start up, complains about missing ipsecmod-hook


author: Paul Wouters <pwouters@redhat.com> - 1.6.4-4
changelog:
  - Rebuilt with KSK2017 added to root.key and root.anchor
  - Remove noreplace for root key files. We can only improve these files over local copies


author: Paul Wouters <pwouters@redhat.com> - 1.6.6-1
changelog:
  - Resolves: rhbz#1483572 unbound-1.6.6 is available
  - Resolves: rhbz#1465575 unbound fails to start up, complains about missing ipsecmod-hook (edit)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.6.7-2
changelog:
  - Python 2 binary package renamed to python2-unbound
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Paul Wouters <pwouters@redhat.com> - 1.6.8-1
changelog:
  - Resolves rhbz#1483572 unbound-1.6.8 is available
  - Resolves rhbz#1507049 CVE-2017-15105 unbound: Improper validation of wildcard synthesized NSEC records
  - Resolves rhbz#1536518 CVE-2017-15105 unbound: Improper validation of wildcard synthesized NSEC records [fedora-all]


author: Petr Menšík <pemensik@redhat.com> - 1.7.0-5
changelog:
  - Require gcc and make on build
  - Remove group, simplify systemd requires
  - Simplify building with single python version, make python3 primary


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-12
changelog:
  - Remove KSK-2010 from configuration files
  - Resolves: rhbz#1665502
  - Replace legacy directory /var/run/ with /run
  - Resolves: rhbz#1766463
  - Resolves: rhbz#1805978
  - Fix memory leak when DNS over TLS forwarding is configured
  - Resolves: rhbz#1819870


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-13
changelog:
  - Fix two previous patches and add missing patch lines to %prep
  - Fix amplifying an incoming query into a large number of queries directed to a target
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-14
changelog:
  - Fix unbound-1.7.3-amplifying-an-incoming-query.patch patch
  - Resolves: rhbz#1839178 (CVE-2020-12662)


author: Anna Khaitovich <akhaitov@redhat.com> - 1.7.3-15
changelog:
  - Fix SPEC file to not check md5 mtime and size of /var/lib/unbound/root.key
  - Resolves: rhbz#1714175
  - Use system-wide crypto policy setting (PROFILE=SYSTEM) instead of custom setting
  - Resolves: rhbz#1842837
  - Enable additional logging in unbound
  - Resolves: rhbz#1850460
  - security hardening from x41 report
  - Resolves: rhbz#1859933
  - symbolic link traversal when writing PID file
  - Resolves: rhbz#1899058


author: Artem Egorenkov <aegorenk@redhat.com> - 1.7.3-16
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1922448


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <marcel.plch@protonmail.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@gmail.com>
        Sahana Prasad <sahana@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Till Maas <opensource@till.name>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Victor Stinner <vstinner@python.org>
        Ville Skyttä <ville.skytta@iki.fi>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomas Orsava <torsava@redhat.com> - 3.11.4-4
changelog:
  - Add the import_all_modules_py3_11.py file for the python3.11-rpm-macros subpackage
  Resolves: rhbz#2207631


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.5-1
changelog:
  - Rebase to 3.11.5
  - Security fixes for CVE-2023-40217 and CVE-2023-41105
  Resolves: RHEL-3047, RHEL-3267


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-1
changelog:
  - Rebase to 3.11.9
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix expat tests for the latest expat security release
  Resolves: RHEL-33672, RHEL-33684


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomas Orsava <torsava@redhat.com> - 4.9.2-4
changelog:
  - Bring back the isoschematron submodule,
    but without the validation of the schema file itself
  - Resolves: RHEL-5569


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.13-1
changelog:
  - Rebase to 3.8.13
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.14-1
changelog:
  - Rebase to 3.8.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#1834423, rhbz#2120642


author: Charalampos Stratakis <cstratak@redhat.com> - 3.8.17-1
changelog:
  - Update to 3.8.17
  - Security fix for CVE-2023-24329
  - Add filters for tarfile extraction (CVE-2007-4559, PEP-706)
  Resolves: rhbz#2173917, rhbz#263261


author: Petr Viktorin <pviktori@redhat.com> - 1.2.1-6
changelog:
  - Remove build dependency on python2-pytest-xdist and python2-pytest-timeout
  - Enable parallel tests in Python 3 %check
  - Use macros for Python interpreter in tests


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-1
changelog:
  - Update to 1.3.1 (#1674101)
  - Drop Python 2 packages (not supported by SciPy >= 1.3)
  - Backported upstream patch for cKDTree (fixes FTBFS)


author: Lumír Balhar <lbalhar@redhat.com> - 1.3.1-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983


author: DengXiewei <dengxiewei@linux.alibaba.com> - 1.3.1-5.0.1
changelog:
  - Adding -fallow-argument-mismatch workaround for build failure with gfortran 10
  - Change -fallow-argument-mismatch flag condition for build failure


author: José Matos <jamatos[AT]fc.up.pt> - 0.9.6.13.1-3
changelog:
  - Remove remaining --record.
  - Add more documentation (Doc and Tools).
  - Add correct entry for egg-info (F9+).


author: Orion Poplawski <orion@cora.nwra.com> - 0.23.4-1
changelog:
  - Update to 0.23.4
  - Ship cythonize3
  - Modernize and cleanup spec
  - Run tests, one python3 test fails with 3.5


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.0~a1-3
changelog:
  - Reduced default build flags used to build extension modules
    https://fedoraproject.org/wiki/Changes/Python_Extension_Flags


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.0~a4-2
changelog:
  - Remove a faulty patch that resulted in invalid value of
    distutils.sysconfig.get_config_var('LIBPL') (#1710767)


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.0~b4-1
changelog:
  - Rebased to Python 3.8.0b4
  - Enable Profile-guided optimization for all arches, not just x86 (#1741015)


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0~a1-3
changelog:
  - Build Python with -fno-semantic-interposition for better performance
  - https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup


author: Marcel Plch <mplch@redhat.com> - 3.9.0~b4-2
changelog:
  - Remove large, autogenerated Python sources and redundant pycache levels to reduce filesystem footprint


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0~rc2-2
changelog:
  - Use upstream architecture names on Fedora 34+
  - https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.6-1
changelog:
  - Update to 3.9.6
  - Fix CVE-2021-29921: Improper input validation of octal strings in the ipaddress module
  Resolves: rhbz#1957458


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.13-1
changelog:
  - Update to 3.9.13
  - Security fix for CVE-2015-20107
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2075390


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.14-1
changelog:
  - Update to 3.9.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#1834423, rhbz#2120642


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33676, RHEL-33688


author: Nikola Forró <nforro@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - Increase test timeout, 300 seconds is not always enough
    for test_logpdf_overflow on s390x
    resolves: #1894887


author: Tomas Orsava <torsava@redhat.com> - 1.5.4-3
changelog:
  - Specify LDFLAGS explicitly
  - Force preprocessing of Fortran sources to make annobin record proper flags
  - Resolves: rhbz#1778983 rhbz#1877430


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-34
changelog:
  - kvm-migration-Handle-block-device-inactivation-failures-.patch [bz#2177957]
  - kvm-migration-Minor-control-flow-simplification.patch [bz#2177957]
  - kvm-migration-Attempt-disk-reactivation-in-more-failure-.patch [bz#2177957]
  - kvm-nbd-server-push-pending-frames-after-sending-reply.patch [bz#2035712]
  - kvm-nbd-server-Request-TCP_NODELAY.patch [bz#2035712]
  - Resolves: bz#2177957
    (Qemu core dump if cut off nfs storage during migration)
  - Resolves: bz#2035712
    ([qemu] Booting from Guest Image over NBD with TLS Is Slow)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-35
changelog:
  - kvm-virtiofsd-Add-basic-support-for-FUSE_SYNCFS-request.patch [bz#2196880]
  - kvm-s390-kvm-adjust-diag318-resets-to-retain-data.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-SLDA-sign-bit-index.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-SRDA-CC-calculation.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-cc_calc_sla_64-missing-overflows.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-shifting-32-bit-values-for-more-tha.patch [bz#2169308 bz#2209605]
  - kvm-s390x-sigp-Reorder-the-SIGP-STOP-code.patch [bz#2169308 bz#2209605]
  - kvm-s390x-tcg-Fix-BRASL-with-a-large-negative-offset.patch [bz#2169308 bz#2209605]
  - kvm-s390x-tcg-Fix-BRCL-with-a-large-negative-offset.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-determination-of-overflow-condition.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-determination-of-overflow-cond.patch [bz#2169308 bz#2209605]
  - kvm-s390x-follow-qdev-tree-to-detect-SCSI-device-on-a-CC.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-the-accumulation-of-ccm-in-op_icm.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-writeback-to-v1-in-helper_vstl.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-fix-handling-of-zeroes-in-vfmin-vfmax.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-CLFIT-and-CLGIT-immediate-size.patch [bz#2169308 bz#2209605]
  - kvm-s390x-tcg-Fix-opcode-for-lzrf.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-emulation-of-the-VISTR-instruction.patch [bz#2169308 bz#2209605]
  - kvm-s390x-css-revert-SCSW-ctrl-flag-bits-on-error.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-tcg-Fix-and-improve-the-SACF-instructio.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-tcg-mem_helper-Test-the-right-bits-in-p.patch [bz#2169308 bz#2209605]
  - kvm-pc-bios-Add-support-for-List-Directed-IPL-from-ECKD-.patch [bz#2169308 bz#2209605]
  - Resolves: bz#2196880
    ([virtiofs] Backport FUSE_SYNCFS support)
  - Resolves: bz#2169308
    (Backport latest s390x-related fixes from upstream QEMU for qemu-kvm in RHEL 8.9)
  - Resolves: bz#2209605
    ([IBM 8.9 FEAT] KVM: ECKD List Directed IPL - virtio (qemu))


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-36
changelog:
  - kvm-memory-prevent-dma-reentracy-issues.patch [bz#1999236]
  - kvm-async-Add-an-optional-reentrancy-guard-to-the-BH-API.patch [bz#1999236]
  - kvm-checkpatch-add-qemu_bh_new-aio_bh_new-checks.patch [bz#1999236]
  - kvm-hw-replace-most-qemu_bh_new-calls-with-qemu_bh_new_g.patch [bz#1999236]
  - kvm-lsi53c895a-disable-reentrancy-detection-for-script-R.patch [bz#1999236]
  - kvm-bcm2835_property-disable-reentrancy-detection-for-io.patch [bz#1999236]
  - kvm-raven-disable-reentrancy-detection-for-iomem.patch [bz#1999236]
  - kvm-apic-disable-reentrancy-detection-for-apic-msi.patch [bz#1999236]
  - kvm-async-avoid-use-after-free-on-re-entrancy-guard.patch [bz#1999236]
  - kvm-memory-stricter-checks-prior-to-unsetting-engaged_in.patch [bz#1999236]
  - kvm-lsi53c895a-disable-reentrancy-detection-for-MMIO-reg.patch [bz#1999236]
  - kvm-hw-scsi-lsi53c895a-Fix-reentrancy-issues-in-the-LSI-.patch [bz#1999236]
  - kvm-target-i386-add-support-for-FLUSH_L1D-feature.patch [bz#2216203]
  - kvm-target-i386-add-support-for-FB_CLEAR-feature.patch [bz#2216203]
  - kvm-migration-Disable-postcopy-multifd-migration.patch [bz#2169733]
  - Resolves: bz#1999236
    (CVE-2021-3750 virt:rhel/qemu-kvm: QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free [rhel-8])
  - Resolves: bz#2216203
    ([qemu-kvm]VM reports vulnerabilty to mmio_stale_data on patched host with microcode)
  - Resolves: bz#2169733
    (Qemu on destination host crashed if migrate with postcopy and multifd enabled)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-37
changelog:
  - kvm-util-iov-Make-qiov_slice-public.patch [bz#2141964]
  - kvm-block-Collapse-padded-I-O-vecs-exceeding-IOV_MAX.patch [bz#2141964]
  - kvm-util-iov-Remove-qemu_iovec_init_extended.patch [bz#2141964]
  - kvm-iotests-iov-padding-New-test.patch [bz#2141964]
  - kvm-block-Fix-pad_request-s-request-restriction.patch [bz#2141964]
  - Resolves: bz#2141964
    (Guest hit EXT4-fs error on host 4K disk  when repeatedly hot-plug/unplug running IO disk)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-38
changelog:
  - kvm-qapi-i386-sev-Change-the-reduced-phys-bits-value-fro.patch [bz#2214840]
  - kvm-qemu-options.hx-Update-the-reduced-phys-bits-documen.patch [bz#2214840]
  - kvm-i386-sev-Update-checks-and-information-related-to-re.patch [bz#2214840]
  - kvm-i386-cpu-Update-how-the-EBX-register-of-CPUID-0x8000.patch [bz#2214840]
  - kvm-target-i386-kvm-Fix-disabling-MPX-on-cpu-host-with-M.patch [bz#2223947]
  - Resolves: bz#2214840
    ([AMDSERVER 8.9 Bug] Qemu SEV reduced-phys-bits fixes)
  - Resolves: bz#2223947
    ([RHEL8.9] qemu core dump with '-cpu host,mpx=off' on Cascadelake host)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-39
changelog:
  - kvm-vhost-vdpa-do-not-cleanup-the-vdpa-vhost-net-structu.patch [bz#2215786]
  - Resolves: bz#2215786
    (CVE-2023-3301 virt:rhel/qemu-kvm: QEMU: net: triggerable assertion due to race condition in hot-unplug [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-40.el8_9
changelog:
  - kvm-acpi-fix-acpi_index-migration.patch [RHEL-2186]
  - kvm-RHEL-Enable-x-not-migrate-acpi-index-for-all-pre-RHE.patch [RHEL-2186]
  - Resolves: RHEL-2186
    ([RHEL8][pc machine type] Migration failed with pc machine type between rhe8.8 and rhel 8.9)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-40.el8_9.1
changelog:
  - kvm-io-remove-io-watch-if-TLS-channel-is-closed-during-h.patch [RHEL-7339]
  - Resolves: RHEL-7339
    (CVE-2023-3354 virt:rhel/qemu-kvm: QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service [rhel-8.9.0])


author: Jacob Wang <jacob.wang@openanolis.org> - 6.2.0-40.0.1.1
changelog:
  - Adjust limit for virtiofsd minor version
  - Add loongarch supporti (lixianglai@loongson.cn)
  - Add package qemu-user-static (fuyuan.wh@alibaba-inc.com)
  - Modify-smbios-option-lack-and-Modify-the-maximum-num.patch (lixianglai@loongson.cn)
  - rename-kvm_msr_buf-with-kvm_csr_buf.patch (lixianglai@loongson.cn)
  - code-cleanup-for-loongarch-kvm.patch (lixianglai@loongson.cn)
  - Support-TPM.patch (lixianglai@loongson.cn)
  - kvm-csr-save-and-restore-optimization.patch (lixianglai@loongson.cn)
  - address-space-code-cleanup-on-7A-virt-machine.patch (lixianglai@loongson.cn)
  - Fix-irq-routing-and-fpu-option-to-compat-with-kernel.patch (lixianglai@loongson.cn)
  - Support-vfio-config.patch (lixianglai@loongson.cn)
  - pass-to-make-check.patch (lixianglai@loongson.cn)
  - fixup-can-t-find-cpu-type.patch (lixianglai@loongson.cn)
  - fix-smbios-type4-info-for-numa-support.patch (lixianglai@loongson.cn)
  - Fix-smp.cores-value.patch (lixianglai@loongson.cn)
  - Add-lbt-support-for-kvm.patch (lixianglai@loongson.cn)
  - Modify-the-ioctl-command-of-kvm.patch (lixianglai@loongson.cn)
  - Add-usb-storage-config-for-loongarch.patch (zhaotianrui@loongson.c)
  - Add-loongarch-into-QEMU_ARCH_VIRTIO_PCI-to-support-q.patch (zhaotianrui@loongson.c)
  - Fix-host-architecture-macro-of-LoongArch-to-HOST_LOO.patch (zhaotianrui@loongson.c)
  - Fix-LoongArch-KVM-header-macros.patch (zhaotianrui@loongson.c)
  - loongarch: Fixed the issue where qemu specifies the boot order (lixianglai@loongson.cn)
  - Fix CVE-2023-3354 (Liwei Ge <liwei.glw@alibaba-inc.com>)
  - 0001-anolis-csv-i386-add-CSV-context.patch (jiangxin@hygon.cn)
  - 0002-anolis-csv-i386-add-command-to-initialize-CSV-contex.patch (jiangxin@hygon.cn)
  - 0003-anolis-csv-i386-add-command-to-load-data-to-guest-me.patch (jiangxin@hygon.cn)
  - 0004-anolis-csv-i386-add-command-to-load-vmcb-to-guest-me.patch (jiangxin@hygon.cn)
  - 0005-anolis-cpu-i386-populate-CPUID-0x8000_001F-when-CSV-.patch (jiangxin@hygon.cn)
  - 0006-anolis-csv-i386-CSV-guest-do-not-need-register-unreg.patch (jiangxin@hygon.cn)
  - 0007-anolis-target-i386-csv-load-initial-image-to-private.patch (jiangxin@hygon.cn)
  - 0008-anolis-vga-force-full-update-for-CSV-guest.patch (jiangxin@hygon.cn)
    (Hygon CSV3 feature)
  - Support Hygon CSV/CSV2 live migration, CSV2 reboot (hanliyang@hygon.cn)
  - Support CSV3 live migration (jiangxin@hygon.cn)


author: Kaiqiang Wang <wangkaiqiang.inspur.com> - 6.2.0-41.0.1.1
changelog:
  - CVE-2023-3019 virt:rhel/qemu-kvm: QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest()


author: Danilo de Paula <ddepaula@redhat.com> - 2.12.0-11.el8
changelog:
  - Resolves: bz#1574406
    ([RHEL 8][qemu-kvm] Failed to find romfile "efi-virtio.rom")
  - Resolves: bz#1569675
    (Backwards compatibility of pc-*-rhel7.5.0 and older machine-types)
  - Resolves: bz#1576045
    (Fix build issue by using python3)
  - Resolves: bz#1571145
    (qemu-kvm segfaults on RHEL 8 when run guestfsd under TCG)


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 2.12.0-13.el8
changelog:
  - Resolves: bz#1508137
    ([IBM 8.0 FEAT] KVM: Interactive Bootloader (qemu))
  - Resolves: bz#1513558
    (Remove RHEL6 machine types)
  - Resolves: bz#1568600
    (pc-i440fx-rhel7.6.0 and pc-q35-rhel7.6.0 machine types (x86))
  - Resolves: bz#1570029
    ([IBM 8.0 FEAT] KVM: 3270 Connectivity - qemu part)
  - Resolves: bz#1578855
    (Enable Native Ceph support on non x86_64 CPUs)
  - Resolves: bz#1585651
    (RHEL 7.6 new pseries machine type (ppc64le))
  - Resolves: bz#1592337
    ([IBM 8.0 FEAT] KVM: CPU Model z14 ZR1 (qemu-kvm))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-14.el8
changelog:
  - kvm-vfio-pci-Default-display-option-to-off.patch [bz#1590511]
  - kvm-python-futurize-f-libfuturize.fixes.fix_print_with_i.patch [bz#1571533]
  - kvm-python-futurize-f-lib2to3.fixes.fix_except.patch [bz#1571533]
  - kvm-Revert-Defining-a-shebang-for-python-scripts.patch [bz#1571533]
  - kvm-spec-Fix-ambiguous-python-interpreter-name.patch [bz#1571533]
  - kvm-qemu-ga-blacklisting-guest-exec-and-guest-exec-statu.patch [bz#1518132]
  - kvm-redhat-rewrap-build_configure.sh-cmdline-for-the-rh-.patch []
  - kvm-redhat-remove-the-VTD-LIVE_BLOCK_OPS-and-RHV-options.patch []
  - kvm-redhat-fix-the-rh-env-prep-target-s-dependency-on-th.patch []
  - kvm-redhat-remove-dead-code-related-to-s390-not-s390x.patch []
  - kvm-redhat-sync-compiler-flags-from-the-spec-file-to-rh-.patch []
  - kvm-redhat-sync-guest-agent-enablement-and-tcmalloc-usag.patch []
  - kvm-redhat-fix-up-Python-3-dependency-for-building-QEMU.patch []
  - kvm-redhat-fix-up-Python-dependency-for-SRPM-generation.patch []
  - kvm-redhat-disable-glusterfs-dependency-support-temporar.patch []
  - Resolves: bz#1518132
    (Ensure file access RPCs are disabled by default)
  - Resolves: bz#1571533
    (Convert qemu-kvm python scripts to python3)
  - Resolves: bz#1590511
    (Fails to start guest with Intel vGPU device)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-15.el8
changelog:
  - kvm-spapr-Add-ibm-max-associativity-domains-property.patch [bz#1599593]
  - kvm-Revert-spapr-Don-t-allow-memory-hotplug-to-memory-le.patch [bz#1599593]
  - kvm-simpletrace-Convert-name-from-mapping-record-to-str.patch [bz#1594969]
  - kvm-tests-fix-TLS-handshake-failure-with-TLS-1.3.patch [bz#1602403]
  - Resolves: bz#1594969
    (simpletrace.py fails when running with Python 3)
  - Resolves: bz#1599593
    (User can't hotplug memory to less memory numa node on rhel8)
  - Resolves: bz#1602403
    (test-crypto-tlssession unit test fails with assertions)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-16.el8
changelog:
  - kvm-spapr-Correct-inverted-test-in-spapr_pc_dimm_node.patch [bz#1601671]
  - kvm-osdep-powerpc64-align-memory-to-allow-2MB-radix-THP-.patch [bz#1601317]
  - kvm-RHEL-8.0-Add-pseries-rhel7.6.0-sxxm-machine-type.patch [bz#1595501]
  - kvm-i386-Helpers-to-encode-cache-information-consistentl.patch [bz#1597739]
  - kvm-i386-Add-cache-information-in-X86CPUDefinition.patch [bz#1597739]
  - kvm-i386-Initialize-cache-information-for-EPYC-family-pr.patch [bz#1597739]
  - kvm-i386-Add-new-property-to-control-cache-info.patch [bz#1597739]
  - kvm-i386-Clean-up-cache-CPUID-code.patch [bz#1597739]
  - kvm-i386-Populate-AMD-Processor-Cache-Information-for-cp.patch [bz#1597739]
  - kvm-i386-Add-support-for-CPUID_8000_001E-for-AMD.patch [bz#1597739]
  - kvm-i386-Fix-up-the-Node-id-for-CPUID_8000_001E.patch [bz#1597739]
  - kvm-i386-Enable-TOPOEXT-feature-on-AMD-EPYC-CPU.patch [bz#1597739]
  - kvm-i386-Remove-generic-SMT-thread-check.patch [bz#1597739]
  - kvm-i386-Allow-TOPOEXT-to-be-enabled-on-older-kernels.patch [bz#1597739]
  - Resolves: bz#1595501
    (Create pseries-rhel7.6.0-sxxm machine type)
  - Resolves: bz#1597739
    (AMD EPYC/Zen SMT support for KVM / QEMU guest (qemu-kvm))
  - Resolves: bz#1601317
    (RHEL8.0 - qemu patch to align memory to allow 2MB THP)
  - Resolves: bz#1601671
    (After rebooting guest,all the hot plug memory will be assigned to the 1st numa node.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-17.el8
changelog:
  - kvm-linux-headers-Update-to-include-KVM_CAP_S390_HPAGE_1.patch [bz#1610906]
  - kvm-s390x-Enable-KVM-huge-page-backing-support.patch [bz#1610906]
  - kvm-redhat-s390x-add-hpage-1-to-kvm.conf.patch [bz#1610906]
  - Resolves: bz#1610906
    ([IBM 8.0 FEAT] KVM: Huge Pages - libhugetlbfs Enablement - qemu-kvm part)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-18.el8
changelog:
  Mass import from RHEL 7.6 qemu-kvm-rhev, including fixes to the following BZs:

  - kvm-AArch64-Add-virt-rhel7.6-machine-type.patch [bz#1558723]
  - kvm-cpus-Fix-event-order-on-resume-of-stopped-guest.patch [bz#1566153]
  - kvm-qemu-img-Check-post-truncation-size.patch [bz#1523065]
  - kvm-vga-catch-depth-0.patch [bz#1575541]
  - kvm-Fix-x-hv-max-vps-compat-value-for-7.4-machine-type.patch [bz#1583959]
  - kvm-ccid-card-passthru-fix-regression-in-realize.patch [bz#1584984]
  - kvm-Use-4-MB-vram-for-cirrus.patch [bz#1542080]
  - kvm-spapr_pci-Remove-unhelpful-pagesize-warning.patch [bz#1505664]
  - kvm-rpm-Add-nvme-VFIO-driver-to-rw-whitelist.patch [bz#1416180]
  - kvm-qobject-Use-qobject_to-instead-of-type-cast.patch [bz#1557995]
  - kvm-qobject-Ensure-base-is-at-offset-0.patch [bz#1557995]
  - kvm-qobject-use-a-QObjectBase_-struct.patch [bz#1557995]
  - kvm-qobject-Replace-qobject_incref-QINCREF-qobject_decre.patch [bz#1557995]
  - kvm-qobject-Modify-qobject_ref-to-return-obj.patch [bz#1557995]
  - kvm-rbd-Drop-deprecated-drive-parameter-filename.patch [bz#1557995]
  - kvm-iscsi-Drop-deprecated-drive-parameter-filename.patch [bz#1557995]
  - kvm-block-Add-block-specific-QDict-header.patch [bz#1557995]
  - kvm-qobject-Move-block-specific-qdict-code-to-block-qdic.patch [bz#1557995]
  - kvm-block-Fix-blockdev-for-certain-non-string-scalars.patch [bz#1557995]
  - kvm-block-Fix-drive-for-certain-non-string-scalars.patch [bz#1557995]
  - kvm-block-Clean-up-a-misuse-of-qobject_to-in-.bdrv_co_cr.patch [bz#1557995]
  - kvm-block-Factor-out-qobject_input_visitor_new_flat_conf.patch [bz#1557995]
  - kvm-block-Make-remaining-uses-of-qobject-input-visitor-m.patch [bz#1557995]
  - kvm-block-qdict-Simplify-qdict_flatten_qdict.patch [bz#1557995]
  - kvm-block-qdict-Tweak-qdict_flatten_qdict-qdict_flatten_.patch [bz#1557995]
  - kvm-block-qdict-Clean-up-qdict_crumple-a-bit.patch [bz#1557995]
  - kvm-block-qdict-Simplify-qdict_is_list-some.patch [bz#1557995]
  - kvm-check-block-qdict-Rename-qdict_flatten-s-variables-f.patch [bz#1557995]
  - kvm-check-block-qdict-Cover-flattening-of-empty-lists-an.patch [bz#1557995]
  - kvm-block-Fix-blockdev-blockdev-add-for-empty-objects-an.patch [bz#1557995]
  - kvm-rbd-New-parameter-auth-client-required.patch [bz#1557995]
  - kvm-rbd-New-parameter-key-secret.patch [bz#1557995]
  - kvm-block-mirror-honor-ratelimit-again.patch [bz#1572856]
  - kvm-block-mirror-Make-cancel-always-cancel-pre-READY.patch [bz#1572856]
  - kvm-iotests-Add-test-for-cancelling-a-mirror-job.patch [bz#1572856]
  - kvm-iotests-Split-214-off-of-122.patch [bz#1518738]
  - kvm-block-Add-COR-filter-driver.patch [bz#1518738]
  - kvm-block-BLK_PERM_WRITE-includes-._UNCHANGED.patch [bz#1518738]
  - kvm-block-Add-BDRV_REQ_WRITE_UNCHANGED-flag.patch [bz#1518738]
  - kvm-block-Set-BDRV_REQ_WRITE_UNCHANGED-for-COR-writes.patch [bz#1518738]
  - kvm-block-quorum-Support-BDRV_REQ_WRITE_UNCHANGED.patch [bz#1518738]
  - kvm-block-Support-BDRV_REQ_WRITE_UNCHANGED-in-filters.patch [bz#1518738]
  - kvm-iotests-Clean-up-wrap-image-in-197.patch [bz#1518738]
  - kvm-iotests-Copy-197-for-COR-filter-driver.patch [bz#1518738]
  - kvm-iotests-Add-test-for-COR-across-nodes.patch [bz#1518738]
  - kvm-qemu-io-Use-purely-string-blockdev-options.patch [bz#1576598]
  - kvm-qemu-img-Use-only-string-options-in-img_open_opts.patch [bz#1576598]
  - kvm-iotests-Add-test-for-U-force-share-conflicts.patch [bz#1576598]
  - kvm-qemu-io-Drop-command-functions-return-values.patch [bz#1519617]
  - kvm-qemu-io-Let-command-functions-return-error-code.patch [bz#1519617]
  - kvm-qemu-io-Exit-with-error-when-a-command-failed.patch [bz#1519617]
  - kvm-iotests.py-Add-qemu_io_silent.patch [bz#1519617]
  - kvm-iotests-Let-216-make-use-of-qemu-io-s-exit-code.patch [bz#1519617]
  - kvm-qcow2-Repair-OFLAG_COPIED-when-fixing-leaks.patch [bz#1527085]
  - kvm-iotests-Repairing-error-during-snapshot-deletion.patch [bz#1527085]
  - kvm-block-Make-bdrv_is_writable-public.patch [bz#1588039]
  - kvm-qcow2-Do-not-mark-inactive-images-corrupt.patch [bz#1588039]
  - kvm-iotests-Add-case-for-a-corrupted-inactive-image.patch [bz#1588039]
  - kvm-main-loop-drop-spin_counter.patch [bz#1168213]
  - kvm-target-ppc-Factor-out-the-parsing-in-kvmppc_get_cpu_.patch [bz#1560847]
  - kvm-target-ppc-Don-t-require-private-l1d-cache-on-POWER8.patch [bz#1560847]
  - kvm-ppc-spapr_caps-Don-t-disable-cap_cfpc-on-POWER8-by-d.patch [bz#1560847]
  - kvm-qxl-fix-local-renderer-crash.patch [bz#1567733]
  - kvm-qemu-img-Amendment-support-implies-create_opts.patch [bz#1537956]
  - kvm-block-Add-Error-parameter-to-bdrv_amend_options.patch [bz#1537956]
  - kvm-qemu-option-Pull-out-Supported-options-print.patch [bz#1537956]
  - kvm-qemu-img-Add-print_amend_option_help.patch [bz#1537956]
  - kvm-qemu-img-Recognize-no-creation-support-in-o-help.patch [bz#1537956]
  - kvm-iotests-Test-help-option-for-unsupporting-formats.patch [bz#1537956]
  - kvm-iotests-Rework-113.patch [bz#1537956]
  - kvm-qemu-img-Resolve-relative-backing-paths-in-rebase.patch [bz#1569835]
  - kvm-iotests-Add-test-for-rebasing-with-relative-paths.patch [bz#1569835]
  - kvm-qemu-img-Special-post-backing-convert-handling.patch [bz#1527898]
  - kvm-iotests-Test-post-backing-convert-target-behavior.patch [bz#1527898]
  - kvm-migration-calculate-expected_downtime-with-ram_bytes.patch [bz#1564576]
  - kvm-sheepdog-Fix-sd_co_create_opts-memory-leaks.patch [bz#1513543]
  - kvm-qemu-iotests-reduce-chance-of-races-in-185.patch [bz#1513543]
  - kvm-blockjob-do-not-cancel-timer-in-resume.patch [bz#1513543]
  - kvm-nfs-Fix-error-path-in-nfs_options_qdict_to_qapi.patch [bz#1513543]
  - kvm-nfs-Remove-processed-options-from-QDict.patch [bz#1513543]
  - kvm-blockjob-drop-block_job_pause-resume_all.patch [bz#1513543]
  - kvm-blockjob-expose-error-string-via-query.patch [bz#1513543]
  - kvm-blockjob-Fix-assertion-in-block_job_finalize.patch [bz#1513543]
  - kvm-blockjob-Wrappers-for-progress-counter-access.patch [bz#1513543]
  - kvm-blockjob-Move-RateLimit-to-BlockJob.patch [bz#1513543]
  - kvm-blockjob-Implement-block_job_set_speed-centrally.patch [bz#1513543]
  - kvm-blockjob-Introduce-block_job_ratelimit_get_delay.patch [bz#1513543]
  - kvm-blockjob-Add-block_job_driver.patch [bz#1513543]
  - kvm-blockjob-Update-block-job-pause-resume-documentation.patch [bz#1513543]
  - kvm-blockjob-Improve-BlockJobInfo.offset-len-documentati.patch [bz#1513543]
  - kvm-job-Create-Job-JobDriver-and-job_create.patch [bz#1513543]
  - kvm-job-Rename-BlockJobType-into-JobType.patch [bz#1513543]
  - kvm-job-Add-JobDriver.job_type.patch [bz#1513543]
  - kvm-job-Add-job_delete.patch [bz#1513543]
  - kvm-job-Maintain-a-list-of-all-jobs.patch [bz#1513543]
  - kvm-job-Move-state-transitions-to-Job.patch [bz#1513543]
  - kvm-job-Add-reference-counting.patch [bz#1513543]
  - kvm-job-Move-cancelled-to-Job.patch [bz#1513543]
  - kvm-job-Add-Job.aio_context.patch [bz#1513543]
  - kvm-job-Move-defer_to_main_loop-to-Job.patch [bz#1513543]
  - kvm-job-Move-coroutine-and-related-code-to-Job.patch [bz#1513543]
  - kvm-job-Add-job_sleep_ns.patch [bz#1513543]
  - kvm-job-Move-pause-resume-functions-to-Job.patch [bz#1513543]
  - kvm-job-Replace-BlockJob.completed-with-job_is_completed.patch [bz#1513543]
  - kvm-job-Move-BlockJobCreateFlags-to-Job.patch [bz#1513543]
  - kvm-blockjob-Split-block_job_event_pending.patch [bz#1513543]
  - kvm-job-Add-job_event_.patch [bz#1513543]
  - kvm-job-Move-single-job-finalisation-to-Job.patch [bz#1513543]
  - kvm-job-Convert-block_job_cancel_async-to-Job.patch [bz#1513543]
  - kvm-job-Add-job_drain.patch [bz#1513543]
  - kvm-job-Move-.complete-callback-to-Job.patch [bz#1513543]
  - kvm-job-Move-job_finish_sync-to-Job.patch [bz#1513543]
  - kvm-job-Switch-transactions-to-JobTxn.patch [bz#1513543]
  - kvm-job-Move-transactions-to-Job.patch [bz#1513543]
  - kvm-job-Move-completion-and-cancellation-to-Job.patch [bz#1513543]
  - kvm-block-Cancel-job-in-bdrv_close_all-callers.patch [bz#1513543]
  - kvm-job-Add-job_yield.patch [bz#1513543]
  - kvm-job-Add-job_dismiss.patch [bz#1513543]
  - kvm-job-Add-job_is_ready.patch [bz#1513543]
  - kvm-job-Add-job_transition_to_ready.patch [bz#1513543]
  - kvm-job-Move-progress-fields-to-Job.patch [bz#1513543]
  - kvm-job-Introduce-qapi-job.json.patch [bz#1513543]
  - kvm-job-Add-JOB_STATUS_CHANGE-QMP-event.patch [bz#1513543]
  - kvm-job-Add-lifecycle-QMP-commands.patch [bz#1513543]
  - kvm-job-Add-query-jobs-QMP-command.patch [bz#1513543]
  - kvm-blockjob-Remove-BlockJob.driver.patch [bz#1513543]
  - kvm-iotests-Move-qmp_to_opts-to-VM.patch [bz#1513543]
  - kvm-qemu-iotests-Test-job-with-block-jobs.patch [bz#1513543]
  - kvm-vdi-Fix-vdi_co_do_create-return-value.patch [bz#1513543]
  - kvm-vhdx-Fix-vhdx_co_create-return-value.patch [bz#1513543]
  - kvm-job-Add-error-message-for-failing-jobs.patch [bz#1513543]
  - kvm-block-create-Make-x-blockdev-create-a-job.patch [bz#1513543]
  - kvm-qemu-iotests-Add-VM.get_qmp_events_filtered.patch [bz#1513543]
  - kvm-qemu-iotests-Add-VM.qmp_log.patch [bz#1513543]
  - kvm-qemu-iotests-Add-iotests.img_info_log.patch [bz#1513543]
  - kvm-qemu-iotests-Add-VM.run_job.patch [bz#1513543]
  - kvm-qemu-iotests-iotests.py-helper-for-non-file-protocol.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-206-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-207-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-210-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-211-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-212-for-blockdev-create-job.patch [bz#1513543]
  - kvm-qemu-iotests-Rewrite-213-for-blockdev-create-job.patch [bz#1513543]
  - kvm-block-create-Mark-blockdev-create-stable.patch [bz#1513543]
  - kvm-jobs-fix-stale-wording.patch [bz#1513543]
  - kvm-jobs-fix-verb-references-in-docs.patch [bz#1513543]
  - kvm-iotests-Fix-219-s-timing.patch [bz#1513543]
  - kvm-iotests-improve-pause_job.patch [bz#1513543]
  - kvm-rpm-Whitelist-copy-on-read-block-driver.patch [bz#1518738]
  - kvm-rpm-add-throttle-driver-to-rw-whitelist.patch [bz#1591076]
  - kvm-usb-host-skip-open-on-pending-postload-bh.patch [bz#1572851]
  - kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1574216]
  - kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1574216]
  - kvm-block-file-posix-Pass-FD-to-locking-helpers.patch [bz#1519144]
  - kvm-block-file-posix-File-locking-during-creation.patch [bz#1519144]
  - kvm-iotests-Add-creation-test-to-153.patch [bz#1519144]
  - kvm-vhost-user-add-Net-prefix-to-internal-state-structur.patch [bz#1526645]
  - kvm-virtio-support-setting-memory-region-based-host-noti.patch [bz#1526645]
  - kvm-vhost-user-support-receiving-file-descriptors-in-sla.patch [bz#1526645]
  - kvm-osdep-add-wait.h-compat-macros.patch [bz#1526645]
  - kvm-vhost-user-bridge-support-host-notifier.patch [bz#1526645]
  - kvm-vhost-allow-backends-to-filter-memory-sections.patch [bz#1526645]
  - kvm-vhost-user-allow-slave-to-send-fds-via-slave-channel.patch [bz#1526645]
  - kvm-vhost-user-introduce-shared-vhost-user-state.patch [bz#1526645]
  - kvm-vhost-user-support-registering-external-host-notifie.patch [bz#1526645]
  - kvm-libvhost-user-support-host-notifier.patch [bz#1526645]
  - kvm-block-Introduce-API-for-copy-offloading.patch [bz#1482537]
  - kvm-raw-Check-byte-range-uniformly.patch [bz#1482537]
  - kvm-raw-Implement-copy-offloading.patch [bz#1482537]
  - kvm-qcow2-Implement-copy-offloading.patch [bz#1482537]
  - kvm-file-posix-Implement-bdrv_co_copy_range.patch [bz#1482537]
  - kvm-iscsi-Query-and-save-device-designator-when-opening.patch [bz#1482537]
  - kvm-iscsi-Create-and-use-iscsi_co_wait_for_task.patch [bz#1482537]
  - kvm-iscsi-Implement-copy-offloading.patch [bz#1482537]
  - kvm-block-backend-Add-blk_co_copy_range.patch [bz#1482537]
  - kvm-qemu-img-Convert-with-copy-offloading.patch [bz#1482537]
  - kvm-qcow2-Fix-src_offset-in-copy-offloading.patch [bz#1482537]
  - kvm-iscsi-Don-t-blindly-use-designator-length-in-respons.patch [bz#1482537]
  - kvm-file-posix-Fix-EINTR-handling.patch [bz#1482537]
  - kvm-usb-storage-Add-rerror-werror-properties.patch [bz#1595180]
  - kvm-numa-clarify-error-message-when-node-index-is-out-of.patch [bz#1578381]
  - kvm-qemu-iotests-Update-026.out.nocache-reference-output.patch [bz#1528541]
  - kvm-qcow2-Free-allocated-clusters-on-write-error.patch [bz#1528541]
  - kvm-qemu-iotests-Test-qcow2-not-leaking-clusters-on-writ.patch [bz#1528541]
  - kvm-qemu-options-Add-missing-newline-to-accel-help-text.patch [bz#1586313]
  - kvm-xhci-fix-guest-triggerable-assert.patch [bz#1594135]
  - kvm-virtio-gpu-tweak-scanout-disable.patch [bz#1589634]
  - kvm-virtio-gpu-update-old-resource-too.patch [bz#1589634]
  - kvm-virtio-gpu-disable-scanout-when-backing-resource-is-.patch [bz#1589634]
  - kvm-block-Don-t-silently-truncate-node-names.patch [bz#1549654]
  - kvm-pr-helper-fix-socket-path-default-in-help.patch [bz#1533158]
  - kvm-pr-helper-fix-assertion-failure-on-failed-multipath-.patch [bz#1533158]
  - kvm-pr-manager-helper-avoid-SIGSEGV-when-writing-to-the-.patch [bz#1533158]
  - kvm-pr-manager-put-stubs-in-.c-file.patch [bz#1533158]
  - kvm-pr-manager-add-query-pr-managers-QMP-command.patch [bz#1533158]
  - kvm-pr-manager-helper-report-event-on-connection-disconn.patch [bz#1533158]
  - kvm-pr-helper-avoid-error-on-PR-IN-command-with-zero-req.patch [bz#1533158]
  - kvm-pr-helper-Rework-socket-path-handling.patch [bz#1533158]
  - kvm-pr-manager-helper-fix-memory-leak-on-event.patch [bz#1533158]
  - kvm-object-fix-OBJ_PROP_LINK_UNREF_ON_RELEASE-ambivalenc.patch [bz#1556678]
  - kvm-usb-hcd-xhci-test-add-a-test-for-ccid-hotplug.patch [bz#1556678]
  - kvm-Revert-usb-release-the-created-buses.patch [bz#1556678]
  - kvm-file-posix-Fix-creation-locking.patch [bz#1599335]
  - kvm-file-posix-Unlock-FD-after-creation.patch [bz#1599335]
  - kvm-ahci-trim-signatures-on-raise-lower.patch [bz#1584914]
  - kvm-ahci-fix-PxCI-register-race.patch [bz#1584914]
  - kvm-ahci-don-t-schedule-unnecessary-BH.patch [bz#1584914]
  - kvm-qcow2-Fix-qcow2_truncate-error-return-value.patch [bz#1595173]
  - kvm-block-Convert-.bdrv_truncate-callback-to-coroutine_f.patch [bz#1595173]
  - kvm-qcow2-Remove-coroutine-trampoline-for-preallocate_co.patch [bz#1595173]
  - kvm-block-Move-bdrv_truncate-implementation-to-io.c.patch [bz#1595173]
  - kvm-block-Use-tracked-request-for-truncate.patch [bz#1595173]
  - kvm-file-posix-Make-.bdrv_co_truncate-asynchronous.patch [bz#1595173]
  - kvm-block-Fix-copy-on-read-crash-with-partial-final-clus.patch [bz#1590640]
  - kvm-block-fix-QEMU-crash-with-scsi-hd-and-drive_del.patch [bz#1599515]
  - kvm-virtio-rng-process-pending-requests-on-DRIVER_OK.patch [bz#1576743]
  - kvm-file-posix-specify-expected-filetypes.patch [bz#1525829]
  - kvm-iotests-add-test-226-for-file-driver-types.patch [bz#1525829]
  - kvm-block-dirty-bitmap-add-lock-to-bdrv_enable-disable_d.patch [bz#1207657]
  - kvm-qapi-add-x-block-dirty-bitmap-enable-disable.patch [bz#1207657]
  - kvm-qmp-transaction-support-for-x-block-dirty-bitmap-ena.patch [bz#1207657]
  - kvm-qapi-add-x-block-dirty-bitmap-merge.patch [bz#1207657]
  - kvm-qapi-add-disabled-parameter-to-block-dirty-bitmap-ad.patch [bz#1207657]
  - kvm-block-dirty-bitmap-add-bdrv_enable_dirty_bitmap_lock.patch [bz#1207657]
  - kvm-dirty-bitmap-fix-double-lock-on-bitmap-enabling.patch [bz#1207657]
  - kvm-block-qcow2-bitmap-fix-free_bitmap_clusters.patch [bz#1207657]
  - kvm-qcow2-add-overlap-check-for-bitmap-directory.patch [bz#1207657]
  - kvm-blockdev-enable-non-root-nodes-for-backup-source.patch [bz#1207657]
  - kvm-iotests-add-222-to-test-basic-fleecing.patch [bz#1207657]
  - kvm-qcow2-Remove-dead-check-on-ret.patch [bz#1207657]
  - kvm-block-Move-request-tracking-to-children-in-copy-offl.patch [bz#1207657]
  - kvm-block-Fix-parameter-checking-in-bdrv_co_copy_range_i.patch [bz#1207657]
  - kvm-block-Honour-BDRV_REQ_NO_SERIALISING-in-copy-range.patch [bz#1207657]
  - kvm-backup-Use-copy-offloading.patch [bz#1207657]
  - kvm-block-backup-disable-copy-offloading-for-backup.patch [bz#1207657]
  - kvm-iotests-222-Don-t-run-with-luks.patch [bz#1207657]
  - kvm-block-io-fix-copy_range.patch [bz#1207657]
  - kvm-block-split-flags-in-copy_range.patch [bz#1207657]
  - kvm-block-add-BDRV_REQ_SERIALISING-flag.patch [bz#1207657]
  - kvm-block-backup-fix-fleecing-scheme-use-serialized-writ.patch [bz#1207657]
  - kvm-nbd-server-Reject-0-length-block-status-request.patch [bz#1207657]
  - kvm-nbd-server-fix-trace.patch [bz#1207657]
  - kvm-nbd-server-refactor-NBDExportMetaContexts.patch [bz#1207657]
  - kvm-nbd-server-add-nbd_meta_empty_or_pattern-helper.patch [bz#1207657]
  - kvm-nbd-server-implement-dirty-bitmap-export.patch [bz#1207657]
  - kvm-qapi-new-qmp-command-nbd-server-add-bitmap.patch [bz#1207657]
  - kvm-docs-interop-add-nbd.txt.patch [bz#1207657]
  - kvm-nbd-server-introduce-NBD_CMD_CACHE.patch [bz#1207657]
  - kvm-nbd-server-Silence-gcc-false-positive.patch [bz#1207657]
  - kvm-nbd-server-Fix-dirty-bitmap-logic-regression.patch [bz#1207657]
  - kvm-nbd-server-fix-nbd_co_send_block_status.patch [bz#1207657]
  - kvm-nbd-client-Add-x-dirty-bitmap-to-query-bitmap-from-s.patch [bz#1207657]
  - kvm-iotests-New-test-223-for-exporting-dirty-bitmap-over.patch [bz#1207657]
  - kvm-hw-char-serial-Only-retry-if-qemu_chr_fe_write-retur.patch [bz#1592817]
  - kvm-hw-char-serial-retry-write-if-EAGAIN.patch [bz#1592817]
  - kvm-throttle-groups-fix-hang-when-group-member-leaves.patch [bz#1535914]
  - kvm-Disable-aarch64-devices-reappeared-after-2.12-rebase.patch [bz#1586357]
  - kvm-Disable-split-irq-device.patch [bz#1586357]
  - kvm-Disable-AT24Cx-i2c-eeprom.patch [bz#1586357]
  - kvm-Disable-CAN-bus-devices.patch [bz#1586357]
  - kvm-Disable-new-superio-devices.patch [bz#1586357]
  - kvm-Disable-new-pvrdma-device.patch [bz#1586357]
  - kvm-qdev-add-HotplugHandler-post_plug-callback.patch [bz#1607891]
  - kvm-virtio-scsi-fix-hotplug-reset-vs-event-race.patch [bz#1607891]
  - kvm-e1000-Fix-tso_props-compat-for-82540em.patch [bz#1608778]
  - kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586255]
  - kvm-s390x-sclp-fix-maxram-calculation.patch [bz#1595740]
  - kvm-redhat-Make-gitpublish-profile-the-default-one.patch [bz#1425820]
  - Resolves: bz#1168213
    (main-loop: WARNING: I/O thread spun for 1000 iterations while doing stream block device.)
  - Resolves: bz#1207657
    (RFE: QEMU Incremental live backup - push and pull modes)
  - Resolves: bz#1416180
    (QEMU VFIO based block driver for NVMe devices)
  - Resolves: bz#1425820
    (Improve QEMU packaging layout with modularization of the block layer)
  - Resolves: bz#1482537
    ([RFE] qemu-img copy-offloading (convert command))
  - Resolves: bz#1505664
    ("qemu-kvm: System page size 0x1000000 is not enabled in page_size_mask (0x11000). Performance may be slow" show up while using hugepage as guest's memory)
  - Resolves: bz#1513543
    ([RFE] Add block job to create format on a storage device)
  - Resolves: bz#1518738
    (Add 'copy-on-read' filter driver for use with blockdev-add)
  - Resolves: bz#1519144
    (qemu-img: image locking doesn't cover image creation)
  - Resolves: bz#1519617
    (The exit code should be non-zero when qemu-io reports an error)
  - Resolves: bz#1523065
    ("qemu-img resize" should fail to decrease the size of logical partition/lvm/iSCSI image with raw format)
  - Resolves: bz#1525829
    (can not boot up a scsi-block passthrough disk via -blockdev with error "cannot get SG_IO version number: Operation not supported.  Is this a SCSI device?")
  - Resolves: bz#1526645
    ([Intel 7.6 FEAT] vHost Data Plane Acceleration (vDPA) - vhost user client - qemu-kvm-rhev)
  - Resolves: bz#1527085
    (The copied flag should be updated during  '-r leaks')
  - Resolves: bz#1527898
    ([RFE] qemu-img should leave cluster unallocated if it's read as zero throughout the backing chain)
  - Resolves: bz#1528541
    (qemu-img check reports tons of leaked clusters after re-start nfs service to resume writing data in guest)
  - Resolves: bz#1533158
    (QEMU support for libvirtd restarting qemu-pr-helper)
  - Resolves: bz#1535914
    (Disable io throttling for one member disk of a group during io will induce the other one hang with io)
  - Resolves: bz#1537956
    (RFE: qemu-img amend should list the true supported options)
  - Resolves: bz#1542080
    (Qemu core dump at cirrus_invalidate_region)
  - Resolves: bz#1549654
    (Reject node-names which would be truncated by the block layer commands)
  - Resolves: bz#1556678
    (Hot plug usb-ccid for the 2nd time with the same ID as the 1st time failed)
  - Resolves: bz#1557995
    (QAPI schema for RBD storage misses the 'password-secret' option)
  - Resolves: bz#1558723
    (Create RHEL-7.6 QEMU machine type for AArch64)
  - Resolves: bz#1560847
    ([Power8][FW b0320a_1812.861][rhel7.5rc2 3.10.0-861.el7.ppc64le][qemu-kvm-{ma,rhev}-2.10.0-21.el7_5.1.ppc64le] KVM guest does not default to ori type flush even with pseries-rhel7.5.0-sxxm)
  - Resolves: bz#1564576
    (Pegas 1.1 - Require to backport qemu-kvm patch that fixes expected_downtime calculation during migration)
  - Resolves: bz#1566153
    (IOERROR pause code lost after resuming a VM while I/O error is still present)
  - Resolves: bz#1567733
    (qemu abort when migrate during guest reboot)
  - Resolves: bz#1569835
    (qemu-img get wrong backing file path after rebasing image with relative path)
  - Resolves: bz#1572851
    (Core dumped after migration when with usb-host)
  - Resolves: bz#1572856
    ('block-job-cancel' can not cancel a "drive-mirror" job)
  - Resolves: bz#1574216
    (CVE-2018-3639 qemu-kvm-rhev: hw: cpu: speculative store bypass [rhel-7.6])
  - Resolves: bz#1575541
    (qemu core dump while installing win10 guest)
  - Resolves: bz#1576598
    (Segfault in qemu-io and qemu-img with -U --image-opts force-share=off)
  - Resolves: bz#1576743
    (virtio-rng hangs when running on recent (2.x) QEMU versions)
  - Resolves: bz#1578381
    (Error message need update when specify numa distance with node index >=128)
  - Resolves: bz#1583959
    (Incorrect vcpu count limit for 7.4 machine types for windows guests)
  - Resolves: bz#1584914
    (SATA emulator lags and hangs)
  - Resolves: bz#1584984
    (Vm starts failed with 'passthrough' smartcard)
  - Resolves: bz#1586255
    (CVE-2018-11806 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])
  - Resolves: bz#1586313
    (-smp option is not easily found in the output of qemu help)
  - Resolves: bz#1586357
    (Disable new devices in 2.12)
  - Resolves: bz#1588039
    (Possible assertion failure in qemu when a corrupted image is used during an incoming migration)
  - Resolves: bz#1589634
    (Migration failed when rebooting guest with multiple virtio videos)
  - Resolves: bz#1590640
    (qemu-kvm: block/io.c:1098: bdrv_co_do_copy_on_readv: Assertion `skip_bytes < pnum' failed.)
  - Resolves: bz#1591076
    (The driver of 'throttle' is not whitelisted)
  - Resolves: bz#1592817
    (Retrying on serial_xmit if the pipe is broken may compromise the Guest)
  - Resolves: bz#1594135
    (system_reset many times linux guests cause qemu process Aborted)
  - Resolves: bz#1595173
    (blockdev-create is blocking)
  - Resolves: bz#1595180
    (Can't set rerror/werror with usb-storage)
  - Resolves: bz#1595740
    (RHEL-Alt-7.6 - qemu has error during migration of larger guests)
  - Resolves: bz#1599335
    (Image creation locking is too tight and is not properly released)
  - Resolves: bz#1599515
    (qemu core-dump with aio_read via hmp (util/qemu-thread-posix.c:64: qemu_mutex_lock_impl: Assertion `mutex->initialized' failed))
  - Resolves: bz#1607891
    (Hotplug events are sometimes lost with virtio-scsi + iothread)
  - Resolves: bz#1608778
    (qemu/migration: migrate failed from RHEL.7.6 to RHEL.7.5 with e1000-82540em)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-20.el8
changelog:
  - kvm-migration-stop-compressing-page-in-migration-thread.patch [bz#1594384]
  - kvm-migration-stop-compression-to-allocate-and-free-memo.patch [bz#1594384]
  - kvm-migration-stop-decompression-to-allocate-and-free-me.patch [bz#1594384]
  - kvm-migration-detect-compression-and-decompression-error.patch [bz#1594384]
  - kvm-migration-introduce-control_save_page.patch [bz#1594384]
  - kvm-migration-move-some-code-to-ram_save_host_page.patch [bz#1594384]
  - kvm-migration-move-calling-control_save_page-to-the-comm.patch [bz#1594384]
  - kvm-migration-move-calling-save_zero_page-to-the-common-.patch [bz#1594384]
  - kvm-migration-introduce-save_normal_page.patch [bz#1594384]
  - kvm-migration-remove-ram_save_compressed_page.patch [bz#1594384]
  - kvm-migration-block-dirty-bitmap-fix-memory-leak-in-dirt.patch [bz#1594384]
  - kvm-migration-fix-saving-normal-page-even-if-it-s-been-c.patch [bz#1594384]
  - kvm-migration-update-index-field-when-delete-or-qsort-RD.patch [bz#1594384]
  - kvm-migration-introduce-decompress-error-check.patch [bz#1594384]
  - kvm-migration-Don-t-activate-block-devices-if-using-S.patch [bz#1594384]
  - kvm-migration-not-wait-RDMA_CM_EVENT_DISCONNECTED-event-.patch [bz#1594384]
  - kvm-migration-block-dirty-bitmap-fix-dirty_bitmap_load.patch [bz#1594384]
  - kvm-s390x-add-RHEL-7.6-machine-type-for-ccw.patch [bz#1595718]
  - kvm-s390x-cpumodel-default-enable-bpb-and-ppa15-for-z196.patch [bz#1595718]
  - kvm-linux-headers-asm-s390-kvm.h-header-sync.patch [bz#1612938]
  - kvm-s390x-kvm-add-etoken-facility.patch [bz#1612938]
  - Resolves: bz#1594384
    (2.12 migration fixes)
  - Resolves: bz#1595718
    (Add ppa15/bpb to the default cpu model for z196 and higher in the 7.6 s390-ccw-virtio machine)
  - Resolves: bz#1612938
    (Add etoken support to qemu-kvm for s390x KVM guests)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-22.el8
changelog:
  - Fix an issue with the build_configure script.
  - Resolves: bz#1425820
    (Improve QEMU packaging layout with modularization of the block layer)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-24.el8
changelog:
  - kvm-Add-qemu-keymap-to-qemu-kvm-common.patch [bz#1593117]
  - Resolves: bz#1593117
    (add qemu-keymap utility)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-25.el8
changelog:
  - kvm-Migration-TLS-Fix-crash-due-to-double-cleanup.patch [bz#1594384]
  - Resolves: bz#1594384
    (2.12 migration fixes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-26.el8
changelog:
  - kvm-redhat-remove-extra-in-rhel_rhev_conflicts-macro.patch [bz#1618752]
  - Resolves: bz#1618752
    (qemu-kvm can't be installed in RHEL-8 as it Conflicts with itself.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-27.el8
changelog:
  - kvm-Fix-libusb-1.0.22-deprecated-libusb_set_debug-with-l.patch [bz#1622656]
  - Resolves: bz#1622656
    (qemu-kvm fails to build due to libusb_set_debug being deprecated)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-29.el8
changelog:
  - kvm-target-i386-sev-fix-memory-leaks.patch [bz#1615717]
  - kvm-i386-Fix-arch_query_cpu_model_expansion-leak.patch [bz#1615717]
  - kvm-redhat-Update-build-configuration.patch [bz#1573156]
  - Resolves: bz#1573156
    (Update build configure for QEMU 2.12.0)
  - Resolves: bz#1615717
    (Memory leaks)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-30.el8
changelog:
  - kvm-redhat-Disable-vhost-crypto.patch [bz#1625668]
  - Resolves: bz#1625668
    (Decide if we should disable 'vhost-crypto' or not)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-31.el8
changelog:
  - kvm-i386-Disable-TOPOEXT-by-default-on-cpu-host.patch [bz#1619804]
  - kvm-redhat-enable-opengl-add-build-and-runtime-deps.patch [bz#1618412]
  - Resolves: bz#1618412
    (Enable opengl (for intel vgpu display))
  - Resolves: bz#1619804
    (kernel panic in init_amd_cacheinfo)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-32.el8
changelog:
  - kvm-Re-enable-disabled-Hyper-V-enlightenments.patch [bz#1625185]
  - kvm-Fix-annocheck-issues.patch [bz#1624164]
  - kvm-exec-check-that-alignment-is-a-power-of-two.patch [bz#1630746]
  - kvm-curl-Make-sslverify-off-disable-host-as-well-as-peer.patch [bz#1575925]
  - Resolves: bz#1575925
    ("SSL: no alternative certificate subject name matches target host name" error even though sslverify = off)
  - Resolves: bz#1624164
    (Review annocheck distro flag failures in qemu-kvm)
  - Resolves: bz#1625185
    (Re-enable disabled Hyper-V enlightenments)
  - Resolves: bz#1630746
    (qemu_ram_mmap: Assertion `is_power_of_2(align)' failed)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-33.el8
changelog:
  - kvm-migration-postcopy-Clear-have_listen_thread.patch [bz#1608765]
  - kvm-migration-cleanup-in-error-paths-in-loadvm.patch [bz#1608765]
  - kvm-jobs-change-start-callback-to-run-callback.patch [bz#1632939]
  - kvm-jobs-canonize-Error-object.patch [bz#1632939]
  - kvm-jobs-add-exit-shim.patch [bz#1632939]
  - kvm-block-commit-utilize-job_exit-shim.patch [bz#1632939]
  - kvm-block-mirror-utilize-job_exit-shim.patch [bz#1632939]
  - kvm-jobs-utilize-job_exit-shim.patch [bz#1632939]
  - kvm-block-backup-make-function-variables-consistently-na.patch [bz#1632939]
  - kvm-jobs-remove-ret-argument-to-job_completed-privatize-.patch [bz#1632939]
  - kvm-jobs-remove-job_defer_to_main_loop.patch [bz#1632939]
  - kvm-block-commit-add-block-job-creation-flags.patch [bz#1632939]
  - kvm-block-mirror-add-block-job-creation-flags.patch [bz#1632939]
  - kvm-block-stream-add-block-job-creation-flags.patch [bz#1632939]
  - kvm-block-commit-refactor-commit-to-use-job-callbacks.patch [bz#1632939]
  - kvm-block-mirror-don-t-install-backing-chain-on-abort.patch [bz#1632939]
  - kvm-block-mirror-conservative-mirror_exit-refactor.patch [bz#1632939]
  - kvm-block-stream-refactor-stream-to-use-job-callbacks.patch [bz#1632939]
  - kvm-tests-blockjob-replace-Blockjob-with-Job.patch [bz#1632939]
  - kvm-tests-test-blockjob-remove-exit-callback.patch [bz#1632939]
  - kvm-tests-test-blockjob-txn-move-.exit-to-.clean.patch [bz#1632939]
  - kvm-jobs-remove-.exit-callback.patch [bz#1632939]
  - kvm-qapi-block-commit-expose-new-job-properties.patch [bz#1632939]
  - kvm-qapi-block-mirror-expose-new-job-properties.patch [bz#1632939]
  - kvm-qapi-block-stream-expose-new-job-properties.patch [bz#1632939]
  - kvm-block-backup-qapi-documentation-fixup.patch [bz#1632939]
  - kvm-blockdev-document-transactional-shortcomings.patch [bz#1632939]
  - Resolves: bz#1608765
    (After postcopy migration,  do savevm and loadvm, guest hang and call trace)
  - Resolves: bz#1632939
    (qemu blockjobs other than backup do not support job-finalize or job-dismiss)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-34.el8
changelog:
  - kvm-seccomp-allow-sched_setscheduler-with-SCHED_IDLE-pol.patch [bz#1618356]
  - kvm-seccomp-use-SIGSYS-signal-instead-of-killing-the-thr.patch [bz#1618356]
  - kvm-seccomp-prefer-SCMP_ACT_KILL_PROCESS-if-available.patch [bz#1618356]
  - kvm-configure-require-libseccomp-2.2.0.patch [bz#1618356]
  - kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618356]
  - kvm-memory-cleanup-side-effects-of-memory_region_init_fo.patch [bz#1600365]
  - Resolves: bz#1600365
    (QEMU core dumped when hotplug memory exceeding host hugepages and with discard-data=yes)
  - Resolves: bz#1618356
    (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-35.el8
changelog:
  - kvm-redhat-make-the-plugins-executable.patch [bz#1638304]
  - Resolves: bz#1638304
    (the driver packages lack all the library Requires)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-36
changelog:
  - kvm-check-Only-test-ivshm-when-it-is-compiled-in.patch [bz#1621817]
  - kvm-Disable-ivshmem.patch [bz#1621817]
  - kvm-mirror-Fail-gracefully-for-source-target.patch [bz#1637963]
  - kvm-commit-Add-top-node-base-node-options.patch [bz#1637970]
  - kvm-qemu-iotests-Test-commit-with-top-node-base-node.patch [bz#1637970]
  - Resolves: bz#1621817
    (Disable IVSHMEM in RHEL 8)
  - Resolves: bz#1637963
    (Segfault on 'blockdev-mirror' with same node as source and target)
  - Resolves: bz#1637970
    (allow using node-names with block-commit)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-37.el8
changelog:
  - kvm-block-for-jobs-do-not-clear-user_paused-until-after-.patch [bz#1635583]
  - kvm-iotests-Add-failure-matching-to-common.qemu.patch [bz#1635583]
  - kvm-block-iotest-to-catch-abort-on-forced-blockjob-cance.patch [bz#1635583]
  - Resolves: bz#1635583
    (Quitting VM causes qemu core dump once the block mirror job paused for no enough target space)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-38.el8
changelog:
  - kvm-Revert-hw-acpi-build-build-SRAT-memory-affinity-stru.patch [bz#1609235]
  - kvm-add-udev-kvm-check.patch [bz#1552663]
  - kvm-aio-posix-Don-t-count-ctx-notifier-as-progress-when-.patch [bz#1623085]
  - kvm-aio-Do-aio_notify_accept-only-during-blocking-aio_po.patch [bz#1623085]
  - kvm-aio-posix-fix-concurrent-access-to-poll_disable_cnt.patch [bz#1632622]
  - kvm-aio-posix-compute-timeout-before-polling.patch [bz#1632622]
  - kvm-aio-posix-do-skip-system-call-if-ctx-notifier-pollin.patch [bz#1632622]
  - kvm-intel-iommu-send-PSI-always-even-if-across-PDEs.patch [bz#1450712]
  - kvm-intel-iommu-remove-IntelIOMMUNotifierNode.patch [bz#1450712]
  - kvm-intel-iommu-add-iommu-lock.patch [bz#1450712]
  - kvm-intel-iommu-only-do-page-walk-for-MAP-notifiers.patch [bz#1450712]
  - kvm-intel-iommu-introduce-vtd_page_walk_info.patch [bz#1450712]
  - kvm-intel-iommu-pass-in-address-space-when-page-walk.patch [bz#1450712]
  - kvm-intel-iommu-trace-domain-id-during-page-walk.patch [bz#1450712]
  - kvm-util-implement-simple-iova-tree.patch [bz#1450712]
  - kvm-intel-iommu-rework-the-page-walk-logic.patch [bz#1450712]
  - kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1633928]
  - Resolves: bz#1450712
    (Booting nested guest with vIOMMU, the assigned network devices can not receive packets (qemu))
  - Resolves: bz#1552663
    (81-kvm-rhel.rules is no longer part of initscripts)
  - Resolves: bz#1609235
    (Win2016 guest can't recognize pc-dimm hotplugged to node 0)
  - Resolves: bz#1623085
    (VM doesn't boot from HD)
  - Resolves: bz#1632622
    (~40% virtio_blk disk performance drop for win2012r2 guest when comparing qemu-kvm-rhev-2.12.0-9 with qemu-kvm-rhev-2.12.0-12)
  - Resolves: bz#1633928
    (CVE-2018-3639 qemu-kvm: hw: cpu: speculative store bypass [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> -
changelog:
  - kvm-linux-headers-update.patch [bz#1508142]
  - kvm-s390x-cpumodel-Set-up-CPU-model-for-AP-device-suppor.patch [bz#1508142]
  - kvm-s390x-kvm-enable-AP-instruction-interpretation-for-g.patch [bz#1508142]
  - kvm-s390x-ap-base-Adjunct-Processor-AP-object-model.patch [bz#1508142]
  - kvm-s390x-vfio-ap-Introduce-VFIO-AP-device.patch [bz#1508142]
  - kvm-s390-doc-detailed-specifications-for-AP-virtualizati.patch [bz#1508142]
  - Resolves: bz#1508142
    ([IBM 8.0 FEAT] KVM: Guest-dedicated Crypto Adapters - qemu part)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-40.el8
changelog:
  - kvm-vnc-call-sasl_server_init-only-when-required.patch [bz#1609327]
  - kvm-nbd-server-fix-NBD_CMD_CACHE.patch [bz#1636142]
  - kvm-nbd-fix-NBD_FLAG_SEND_CACHE-value.patch [bz#1636142]
  - kvm-test-bdrv-drain-bdrv_drain-works-with-cross-AioConte.patch [bz#1637976]
  - kvm-block-Use-bdrv_do_drain_begin-end-in-bdrv_drain_all.patch [bz#1637976]
  - kvm-block-Remove-recursive-parameter-from-bdrv_drain_inv.patch [bz#1637976]
  - kvm-block-Don-t-manually-poll-in-bdrv_drain_all.patch [bz#1637976]
  - kvm-tests-test-bdrv-drain-bdrv_drain_all-works-in-corout.patch [bz#1637976]
  - kvm-block-Avoid-unnecessary-aio_poll-in-AIO_WAIT_WHILE.patch [bz#1637976]
  - kvm-block-Really-pause-block-jobs-on-drain.patch [bz#1637976]
  - kvm-block-Remove-bdrv_drain_recurse.patch [bz#1637976]
  - kvm-test-bdrv-drain-Add-test-for-node-deletion.patch [bz#1637976]
  - kvm-block-Drain-recursively-with-a-single-BDRV_POLL_WHIL.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-node-deletion-in-subtree-recurs.patch [bz#1637976]
  - kvm-block-Don-t-poll-in-parent-drain-callbacks.patch [bz#1637976]
  - kvm-test-bdrv-drain-Graph-change-through-parent-callback.patch [bz#1637976]
  - kvm-block-Defer-.bdrv_drain_begin-callback-to-polling-ph.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-that-bdrv_drain_invoke-doesn-t-.patch [bz#1637976]
  - kvm-block-Allow-AIO_WAIT_WHILE-with-NULL-ctx.patch [bz#1637976]
  - kvm-block-Move-bdrv_drain_all_begin-out-of-coroutine-con.patch [bz#1637976]
  - kvm-block-ignore_bds_parents-parameter-for-drain-functio.patch [bz#1637976]
  - kvm-block-Allow-graph-changes-in-bdrv_drain_all_begin-en.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-graph-changes-in-drain_all-sect.patch [bz#1637976]
  - kvm-block-Poll-after-drain-on-attaching-a-node.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-bdrv_append-to-drained-node.patch [bz#1637976]
  - kvm-block-linux-aio-acquire-AioContext-before-qemu_laio_.patch [bz#1637976]
  - kvm-util-async-use-qemu_aio_coroutine_enter-in-co_schedu.patch [bz#1637976]
  - kvm-job-Fix-nested-aio_poll-hanging-in-job_txn_apply.patch [bz#1637976]
  - kvm-job-Fix-missing-locking-due-to-mismerge.patch [bz#1637976]
  - kvm-blockjob-Wake-up-BDS-when-job-becomes-idle.patch [bz#1637976]
  - kvm-aio-wait-Increase-num_waiters-even-in-home-thread.patch [bz#1637976]
  - kvm-test-bdrv-drain-Drain-with-block-jobs-in-an-I-O-thre.patch [bz#1637976]
  - kvm-test-blockjob-Acquire-AioContext-around-job_cancel_s.patch [bz#1637976]
  - kvm-job-Use-AIO_WAIT_WHILE-in-job_finish_sync.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-AIO_WAIT_WHILE-in-completion-ca.patch [bz#1637976]
  - kvm-block-Add-missing-locking-in-bdrv_co_drain_bh_cb.patch [bz#1637976]
  - kvm-block-backend-Add-.drained_poll-callback.patch [bz#1637976]
  - kvm-block-backend-Fix-potential-double-blk_delete.patch [bz#1637976]
  - kvm-block-backend-Decrease-in_flight-only-after-callback.patch [bz#1637976]
  - kvm-blockjob-Lie-better-in-child_job_drained_poll.patch [bz#1637976]
  - kvm-block-Remove-aio_poll-in-bdrv_drain_poll-variants.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-nested-poll-in-bdrv_drain_poll_.patch [bz#1637976]
  - kvm-job-Avoid-deadlocks-in-job_completed_txn_abort.patch [bz#1637976]
  - kvm-test-bdrv-drain-AIO_WAIT_WHILE-in-job-.commit-.abort.patch [bz#1637976]
  - kvm-test-bdrv-drain-Fix-outdated-comments.patch [bz#1637976]
  - kvm-block-Use-a-single-global-AioWait.patch [bz#1637976]
  - kvm-test-bdrv-drain-Test-draining-job-source-child-and-p.patch [bz#1637976]
  - kvm-qemu-img-Fix-assert-when-mapping-unaligned-raw-file.patch [bz#1639374]
  - kvm-iotests-Add-test-221-to-catch-qemu-img-map-regressio.patch [bz#1639374]
  - Resolves: bz#1609327
    (qemu-kvm[37046]: Could not find keytab file: /etc/qemu/krb5.tab: Unknown error 49408)
  - Resolves: bz#1636142
    (qemu NBD_CMD_CACHE flaws impacting non-qemu NBD clients)
  - Resolves: bz#1637976
    (Crashes and hangs with iothreads vs. block jobs)
  - Resolves: bz#1639374
    (qemu-img map 'Aborted (core dumped)' when specifying a plain file)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-41.el8
changelog:
  - kvm-block-rbd-pull-out-qemu_rbd_convert_options.patch [bz#1635585]
  - kvm-block-rbd-Attempt-to-parse-legacy-filenames.patch [bz#1635585]
  - kvm-block-rbd-add-deprecation-documentation-for-filename.patch [bz#1635585]
  - kvm-block-rbd-add-iotest-for-rbd-legacy-keyvalue-filenam.patch [bz#1635585]
  - Resolves: bz#1635585
    (rbd json format of 7.6 is incompatible with 7.5)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-42.el8
changelog:
  - kvm-luks-Allow-share-rw-on.patch [bz#1629701]
  - kvm-redhat-reenable-gluster-support.patch [bz#1599340]
  - kvm-redhat-bump-libusb-requirement.patch [bz#1627970]
  - Resolves: bz#1599340
    (Reenable glusterfs in qemu-kvm once BZ#1567292 gets fixed)
  - Resolves: bz#1627970
    (symbol lookup error: /usr/libexec/qemu-kvm: undefined symbol: libusb_set_option)
  - Resolves: bz#1629701
    ("share-rw=on" does not work for luks format image - Fast Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-43
changelog:
  - kvm-configure-add-test-for-libudev.patch [bz#1636185]
  - kvm-qga-linux-report-disk-serial-number.patch [bz#1636185]
  - kvm-qga-linux-return-disk-device-in-guest-get-fsinfo.patch [bz#1636185]
  - kvm-qemu-error-introduce-error-warn-_report_once.patch [bz#1625173]
  - kvm-intel-iommu-start-to-use-error_report_once.patch [bz#1625173]
  - kvm-intel-iommu-replace-more-vtd_err_-traces.patch [bz#1625173]
  - kvm-intel_iommu-introduce-vtd_reset_caches.patch [bz#1625173]
  - kvm-intel_iommu-better-handling-of-dmar-state-switch.patch [bz#1625173]
  - kvm-intel_iommu-move-ce-fetching-out-when-sync-shadow.patch [bz#1625173 bz#1629616]
  - kvm-intel_iommu-handle-invalid-ce-for-shadow-sync.patch [bz#1625173 bz#1629616]
  - kvm-block-remove-bdrv_dirty_bitmap_make_anon.patch [bz#1518989]
  - kvm-block-simplify-code-around-releasing-bitmaps.patch [bz#1518989]
  - kvm-hbitmap-Add-advance-param-to-hbitmap_iter_next.patch [bz#1518989]
  - kvm-test-hbitmap-Add-non-advancing-iter_next-tests.patch [bz#1518989]
  - kvm-block-dirty-bitmap-Add-bdrv_dirty_iter_next_area.patch [bz#1518989]
  - kvm-blockdev-backup-add-bitmap-argument.patch [bz#1518989]
  - kvm-dirty-bitmap-switch-assert-fails-to-errors-in-bdrv_m.patch [bz#1518989]
  - kvm-dirty-bitmap-rename-bdrv_undo_clear_dirty_bitmap.patch [bz#1518989]
  - kvm-dirty-bitmap-make-it-possible-to-restore-bitmap-afte.patch [bz#1518989]
  - kvm-blockdev-rename-block-dirty-bitmap-clear-transaction.patch [bz#1518989]
  - kvm-qapi-add-transaction-support-for-x-block-dirty-bitma.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-add-user_locked-status-checker.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-fix-merge-permissions.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-allow-clear-on-disabled-bitmaps.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-prohibit-enable-disable-on-locke.patch [bz#1518989]
  - kvm-block-backup-prohibit-backup-from-using-in-use-bitma.patch [bz#1518989]
  - kvm-nbd-forbid-use-of-frozen-bitmaps.patch [bz#1518989]
  - kvm-bitmap-Update-count-after-a-merge.patch [bz#1518989]
  - kvm-iotests-169-drop-deprecated-autoload-parameter.patch [bz#1518989]
  - kvm-block-qcow2-improve-error-message-in-qcow2_inactivat.patch [bz#1518989]
  - kvm-bloc-qcow2-drop-dirty_bitmaps_loaded-state-variable.patch [bz#1518989]
  - kvm-dirty-bitmaps-clean-up-bitmaps-loading-and-migration.patch [bz#1518989]
  - kvm-iotests-improve-169.patch [bz#1518989]
  - kvm-iotests-169-add-cases-for-source-vm-resuming.patch [bz#1518989]
  - kvm-pc-dimm-turn-alignment-assert-into-check.patch [bz#1630116]
  - Resolves: bz#1518989
    (RFE: QEMU Incremental live backup)
  - Resolves: bz#1625173
    ([NVMe Device Assignment] Guest could not boot up with q35+iommu)
  - Resolves: bz#1629616
    (boot guest with q35+vIOMMU+ device assignment, qemu terminal shows "qemu-kvm: VFIO_UNMAP_DMA: -22" when return assigned network devices from vfio driver to ixgbe in guest)
  - Resolves: bz#1630116
    (pc_dimm_get_free_addr: assertion failed: (QEMU_ALIGN_UP(address_space_start, align) == address_space_start))
  - Resolves: bz#1636185
    ([RFE] Report disk device name and serial number (qemu-guest-agent on Linux))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-43
changelog:
  - kvm-block-Make-more-block-drivers-compile-time-configura.patch [bz#1598842 bz#1598842]
  - kvm-RHEL8-Add-disable-configure-options-to-qemu-spec-fil.patch [bz#1598842]
  - Resolves: bz#1598842
    (Compile out unused block drivers)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-45
changelog:
  - kvm-target-ppc-add-basic-support-for-PTCR-on-POWER9.patch [bz#1639069]
  - kvm-linux-headers-Update-for-nested-KVM-HV-downstream-on.patch [bz#1639069]
  - kvm-target-ppc-Add-one-reg-id-for-ptcr.patch [bz#1639069]
  - kvm-ppc-spapr_caps-Add-SPAPR_CAP_NESTED_KVM_HV.patch [bz#1639069]
  - kvm-Re-enable-CONFIG_HYPERV_TESTDEV.patch [bz#1651195]
  - kvm-qxl-use-guest_monitor_config-for-local-renderer.patch [bz#1610163]
  - kvm-Declare-cirrus-vga-as-deprecated.patch [bz#1651994]
  - kvm-Do-not-build-bluetooth-support.patch [bz#1654651]
  - kvm-vfio-helpers-Fix-qemu_vfio_open_pci-crash.patch [bz#1645840]
  - kvm-balloon-Allow-multiple-inhibit-users.patch [bz#1650272]
  - kvm-Use-inhibit-to-prevent-ballooning-without-synchr.patch [bz#1650272]
  - kvm-vfio-Inhibit-ballooning-based-on-group-attachment-to.patch [bz#1650272]
  - kvm-vfio-ccw-pci-Allow-devices-to-opt-in-for-ballooning.patch [bz#1650272]
  - kvm-vfio-pci-Handle-subsystem-realpath-returning-NULL.patch [bz#1650272]
  - kvm-vfio-pci-Fix-failure-to-close-file-descriptor-on-err.patch [bz#1650272]
  - kvm-postcopy-Synchronize-usage-of-the-balloon-inhibitor.patch [bz#1650272]
  - Resolves: bz#1610163
    (guest shows border blurred screen with some resolutions when qemu boot with -device qxl-vga ,and guest on rhel7.6 has no  such question)
  - Resolves: bz#1639069
    ([IBM 8.0 FEAT] POWER9 - Nested virtualization in RHEL8.0 KVM for ppc64le - qemu-kvm side)
  - Resolves: bz#1645840
    (Qemu core dump when hotplug nvme:// drive via -blockdev)
  - Resolves: bz#1650272
    (Ballooning is incompatible with vfio assigned devices, but not prevented)
  - Resolves: bz#1651195
    (Re-enable hyperv-testdev device)
  - Resolves: bz#1651994
    (Declare the "Cirrus VGA" device emulation of QEMU as deprecated in RHEL8)
  - Resolves: bz#1654651
    (Qemu: hw: bt: keep bt/* objects from building [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-46
changelog:
  - kvm-qcow2-Give-the-refcount-cache-the-minimum-possible-s.patch [bz#1656507]
  - kvm-docs-Document-the-new-default-sizes-of-the-qcow2-cac.patch [bz#1656507]
  - kvm-qcow2-Fix-Coverity-warning-when-calculating-the-refc.patch [bz#1656507]
  - kvm-include-Add-IEC-binary-prefixes-in-qemu-units.h.patch [bz#1656507]
  - kvm-qcow2-Options-documentation-fixes.patch [bz#1656507]
  - kvm-include-Add-a-lookup-table-of-sizes.patch [bz#1656507]
  - kvm-qcow2-Make-sizes-more-humanly-readable.patch [bz#1656507]
  - kvm-qcow2-Avoid-duplication-in-setting-the-refcount-cach.patch [bz#1656507]
  - kvm-qcow2-Assign-the-L2-cache-relatively-to-the-image-si.patch [bz#1656507]
  - kvm-qcow2-Increase-the-default-upper-limit-on-the-L2-cac.patch [bz#1656507]
  - kvm-qcow2-Resize-the-cache-upon-image-resizing.patch [bz#1656507]
  - kvm-qcow2-Set-the-default-cache-clean-interval-to-10-min.patch [bz#1656507]
  - kvm-qcow2-Explicit-number-replaced-by-a-constant.patch [bz#1656507]
  - kvm-block-backend-Set-werror-rerror-defaults-in-blk_new.patch [bz#1657637]
  - kvm-qcow2-Fix-cache-clean-interval-documentation.patch [bz#1656507]
  - Resolves: bz#1656507
    ([RHEL.8] qcow2 cache is too small)
  - Resolves: bz#1657637
    (Wrong werror default for -device drive=<node-name>)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-47
changelog:
  - kvm-Disable-CONFIG_IPMI-and-CONFIG_I2C-for-ppc64.patch [bz#1640044]
  - kvm-Disable-CONFIG_CAN_BUS-and-CONFIG_CAN_SJA1000.patch [bz#1640042]
  - Resolves: bz#1640042
    (Disable CONFIG_CAN_BUS and CONFIG_CAN_SJA1000 config switches)
  - Resolves: bz#1640044
    (Disable CONFIG_I2C and CONFIG_IPMI in default-configs/ppc64-softmmu.mak)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-2.el8
changelog:
  - kvm-pc-7.5-compat-entries.patch [bz#1655820]
  - kvm-compat-Generic-HW_COMPAT_RHEL7_6.patch [bz#1655820]
  - kvm-pc-PC_RHEL7_6_COMPAT.patch [bz#1655820]
  - kvm-pc-Add-compat-for-pc-i440fx-rhel7.6.0-machine-type.patch [bz#1655820]
  - kvm-pc-Add-pc-q35-8.0.0-machine-type.patch [bz#1655820]
  - kvm-pc-Add-x-migrate-smi-count-off-to-PC_RHEL7_6_COMPAT.patch [bz#1655820]
  - kvm-clear-out-KVM_ASYNC_PF_DELIVERY_AS_PF_VMEXIT-for.patch [bz#1659604]
  - kvm-Add-edk2-Requires-to-qemu-kvm.patch [bz#1660208]
  - Resolves: bz#1655820
    (Can't migarate between rhel8 and rhel7 when guest has device "video")
  - Resolves: bz#1659604
    (8->7 migration failed: qemu-kvm: error: failed to set MSR 0x4b564d02 to 0x27fc13285)
  - Resolves: bz#1660208
    (qemu-kvm: Should depend on the architecture-appropriate guest firmware)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-3.el8
changelog:
  - kvm-redhat-define-pseries-rhel8.0.0-machine-type.patch [bz#1656508]
  - Resolves: bz#1656508
    (Machine types for qemu-kvm based on rebase to qemu-3.1 (ppc64le))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-4.el8
changelog:
  - kvm-hw-s390x-s390-virtio-ccw-Add-machine-types-for-RHEL8.patch [bz#1656510]
  - kvm-spapr-Add-H-Call-H_HOME_NODE_ASSOCIATIVITY.patch [bz#1661967]
  - kvm-redhat-Fixing-.gitpublish-to-include-AV-information.patch []
  - Resolves: bz#1656510
    (Machine types for qemu-kvm based on rebase to qemu-3.1 (s390x))
  - Resolves: bz#1661967
    (Kernel prints the message "VPHN is not supported. Disabling polling...")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-5.el8
changelog:
  - kvm-virtio-Helper-for-registering-virtio-device-types.patch [bz#1648023]
  - kvm-virtio-Provide-version-specific-variants-of-virtio-P.patch [bz#1648023]
  - kvm-globals-Allow-global-properties-to-be-optional.patch [bz#1648023]
  - kvm-virtio-Make-disable-legacy-disable-modern-compat-pro.patch [bz#1648023]
  - kvm-aarch64-Add-virt-rhel8.0.0-machine-type-for-ARM.patch [bz#1656504]
  - kvm-aarch64-Set-virt-rhel8.0.0-max_cpus-to-512.patch [bz#1656504]
  - kvm-aarch64-Use-256MB-ECAM-region-by-default.patch [bz#1656504]
  - Resolves: bz#1648023
    (Provide separate device types for transitional virtio PCI devices - Fast Train)
  - Resolves: bz#1656504
    (Machine types for qemu-kvm based on rebase to qemu-3.1 (aarch64))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-6.el8
changelog:
  - kvm-spapr-Fix-ibm-max-associativity-domains-property-num.patch [bz#1653114]
  - kvm-cpus-ignore-ESRCH-in-qemu_cpu_kick_thread.patch [bz#1668205]
  - Resolves: bz#1653114
    (Incorrect NUMA nodes passed to qemu-kvm guest in ibm,max-associativity-domains property)
  - Resolves: bz#1668205
    (Guest quit with error when hotunplug cpu)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-7.el8
changelog:
  - kvm-i386-kvm-expose-HV_CPUID_ENLIGHTMENT_INFO.EAX-and-HV.patch [bz#1653511]
  - kvm-i386-kvm-add-a-comment-explaining-why-.feat_names-ar.patch [bz#1653511]
  - Resolves: bz#1653511
    (qemu doesn't report all support cpu features which cause libvirt cannot get the support status of hv_tlbflush)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-9.el8
changelog:
  - kvm-migration-rdma-unregister-fd-handler.patch [bz#1666601]
  - kvm-s390x-tod-Properly-stop-the-KVM-TOD-while-the-guest-.patch [bz#1659127]
  - kvm-hw-s390x-Fix-bad-mask-in-time2tod.patch [bz#1659127]
  - Resolves: bz#1659127
    (Stress guest and stop it, then do live migration, guest hit call trace on destination end)
  - Resolves: bz#1666601
    ([q35] dst qemu core dumped when do rdma migration with Mellanox IB QDR card)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-10.el8
changelog:
  - kvm-throttle-groups-fix-restart-coroutine-iothread-race.patch [bz#1655947]
  - kvm-iotests-add-238-for-throttling-tgm-unregister-iothre.patch [bz#1655947]
  - Resolves: bz#1655947
    (qemu-kvm core dumped after unplug the device which was set io throttling parameters)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-11.el8
changelog:
  - kvm-Fix-fsfreeze-hook-path-in-the-man-page.patch [bz#1644985]
  - kvm-json-Fix-handling-when-not-interpolating.patch [bz#1668244]
  - Resolves: bz#1644985
    (The "fsfreeze-hook" script path shown by command "qemu-ga --help" or "man qemu-ga" is wrong - Fast Train)
  - Resolves: bz#1668244
    (qemu-img: /var/tmp/v2vovl9951f8.qcow2: CURL: Error opening file: The requested URL returned error: 404 Not Found)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-12.el8
changelog:
  - kvm-io-ensure-UNIX-client-doesn-t-unlink-server-socket.patch [bz#1665896]
  - kvm-scsi-disk-Don-t-use-empty-string-as-device-id.patch [bz#1668248]
  - kvm-scsi-disk-Add-device_id-property.patch [bz#1668248]
  - Resolves: bz#1665896
    (VNC unix listener socket is deleted after first client quits)
  - Resolves: bz#1668248
    ("An unknown error has occurred" when using cdrom to install the system with two blockdev disks.(when choose installation destination))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-13.el8
changelog:
  - kvm-Acceptance-tests-add-Linux-initrd-checking-test.patch [bz#1669922]
  - kvm-mmap-alloc-unfold-qemu_ram_mmap.patch [bz#1671519]
  - kvm-mmap-alloc-fix-hugetlbfs-misaligned-length-in-ppc64.patch [bz#1671519]
  - kvm-BZ1653590-Require-at-least-64kiB-pages-for-downstrea.patch [bz#1653590]
  - kvm-block-Fix-invalidate_cache-error-path-for-parent-act.patch [bz#1673014]
  - kvm-virtio-scsi-Move-BlockBackend-back-to-the-main-AioCo.patch [bz#1656276 bz#1662508]
  - kvm-scsi-disk-Acquire-the-AioContext-in-scsi_-_realize.patch [bz#1656276 bz#1662508]
  - kvm-virtio-scsi-Forbid-devices-with-different-iothreads-.patch [bz#1656276 bz#1662508]
  - Resolves: bz#1653590
    ([Fast train]had better stop qemu immediately while guest was making use of an improper page size)
  - Resolves: bz#1656276
    (qemu-kvm core dumped after hotplug the deleted disk with iothread parameter)
  - Resolves: bz#1662508
    (Qemu core dump when start guest with two disks using same drive)
  - Resolves: bz#1669922
    (Backport avocado-qemu tests for QEMU 3.1)
  - Resolves: bz#1671519
    (RHEL8.0 Snapshot3 - qemu doesn't free up hugepage memory when hotplug/hotunplug using memory-backend-file (qemu-kvm))
  - Resolves: bz#1673014
    (Local VM and migrated VM on the same host can run with same RAW file as visual disk source while without shareable configured or lock manager enabled)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-14.el8
changelog:
  - kvm-doc-fix-the-configuration-path.patch [bz#1644985]
  - Resolves: bz#1644985
    (The "fsfreeze-hook" script path shown by command "qemu-ga --help" or "man qemu-ga" is wrong - Fast Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-15.el8
changelog:
  - kvm-Add-raw-qcow2-nbd-and-luks-iotests-to-run-during-the.patch [bz#1664855]
  - kvm-Introduce-the-qemu-kvm-tests-rpm.patch [bz#1669924]
  - Resolves: bz#1664855
    (Run iotests in qemu-kvm build %check phase)
  - Resolves: bz#1669924
    (qemu-kvm packaging: Package the avocado_qemu tests and qemu-iotests in a new rpm)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-16.el8
changelog:
  - kvm-fdc-Revert-downstream-disablement-of-device-floppy.patch [bz#1664997]
  - kvm-fdc-Restrict-floppy-controllers-to-RHEL-7-machine-ty.patch [bz#1664997]
  - Resolves: bz#1664997
    (Restrict floppy device to RHEL-7 machine types)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-17.el8
changelog:
  - kvm-block-Apply-auto-read-only-for-ro-whitelist-drivers.patch [bz#1678968]
  - Resolves: bz#1678968
    (-blockdev: auto-read-only is ineffective for drivers on read-only whitelist)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-18.el8
changelog:
  - kvm-target-i386-Disable-MPX-support-on-named-CPU-models.patch [bz#1661030]
  - kvm-i386-remove-the-new-CPUID-PCONFIG-from-Icelake-Serve.patch [bz#1661515]
  - kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-named-CPU-mo.patch [bz#1661515]
  - kvm-Revert-i386-Add-CPUID-bit-for-PCONFIG.patch [bz#1661515]
  - Resolves: bz#1661030
    (Remove MPX support from 8.0 machine types)
  - Resolves: bz#1661515
    (Remove PCONFIG and INTEL_PT from Icelake-* CPU models)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-19.el8
changelog:
  - kvm-migration-Fix-cancel-state.patch [bz#1608649]
  - kvm-migration-rdma-Fix-qemu_rdma_cleanup-null-check.patch [bz#1608649]
  - Resolves: bz#1608649
    (Query-migrate get "failed" status after migrate-cancel)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-20.el8
changelog:
  - kvm-i386-Add-stibp-flag-name.patch [bz#1686260]
  - Resolves: bz#1686260
    (stibp is missing on qemu 3.0 and qemu 3.1)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-21.el8
changelog:
  - kvm-Remove-7-qcow2-and-luks-iotests-that-are-taking-25-s.patch [bz#1683473]
  - kvm-spapr-fix-out-of-bounds-write-in-spapr_populate_drme.patch [bz#1674438]
  - kvm-qcow2-include-LUKS-payload-overhead-in-qemu-img-meas.patch [bz#1655065]
  - kvm-iotests-add-LUKS-payload-overhead-to-178-qemu-img-me.patch [bz#1655065]
  - kvm-vnc-detect-and-optimize-pageflips.patch [bz#1666206]
  - kvm-Load-kvm-module-during-boot.patch [bz#1676907 bz#1685995]
  - kvm-hostmem-file-reject-invalid-pmem-file-sizes.patch [bz#1669053]
  - kvm-iotests-Fix-test-200-on-s390x-without-virtio-pci.patch [bz#1687582]
  - kvm-block-file-posix-do-not-fail-on-unlock-bytes.patch [bz#1652572]
  - Resolves: bz#1652572
    (QEMU core dumped if stop nfs service during migration)
  - Resolves: bz#1655065
    ([rhel.8.0][fast train]'qemu-img measure' size does not match the real allocated size for luks-inside-qcow2 image)
  - Resolves: bz#1666206
    (vnc server should detect page-flips and avoid sending fullscreen updates then.)
  - Resolves: bz#1669053
    (Guest call trace when boot with nvdimm device backed by /dev/dax)
  - Resolves: bz#1674438
    (RHEL8.0 - Guest reboot fails after memory hotplug multiple times (kvm))
  - Resolves: bz#1676907
    (/dev/kvm device exists but kernel module is not loaded on boot up causing VM start to fail in libvirt)
  - Resolves: bz#1683473
    (Remove 7 qcow2 & luks iotests from rhel8 fast train build %check phase)
  - Resolves: bz#1685995
    (/dev/kvm device exists but kernel module is not loaded on boot up causing VM start to fail in libvirt)
  - Resolves: bz#1687582
    (QEMU IOTEST 200 fails with 'virtio-scsi-pci is not a valid device model name')


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-22.el8
changelog:
  - kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1687578]
  - kvm-i386-Make-arch_capabilities-migratable.patch [bz#1687578]
  - Resolves: bz#1687578
    (Incorrect CVE vulnerabilities reported on Cascade Lake cpus)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-23.el8
changelog:
  - kvm-device_tree-Fix-integer-overflowing-in-load_device_t.patch [bz#1693173]
  - Resolves: bz#1693173
    (CVE-2018-20815 qemu-kvm: QEMU: device_tree: heap buffer overflow while loading device tree blob [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-24.el8
changelog:
  - kvm-x86-host-phys-bits-limit-option.patch [bz#1688915]
  - kvm-rhel-Set-host-phys-bits-limit-48-on-rhel-machine-typ.patch [bz#1688915]
  - Resolves: bz#1688915
    ([Intel 8.0 Alpha] physical bits should  <= 48  when host with 5level paging &EPT5 and qemu command with "-cpu qemu64" parameters.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-25.el8
changelog:
  - kvm-redhat-enable-tpmdev-passthrough.patch [bz#1688312]
  - kvm-exec-Only-count-mapped-memory-backends-for-qemu_getr.patch [bz#1680492]
  - kvm-Enable-libpmem-to-support-nvdimm.patch [bz#1705149]
  - Resolves: bz#1680492
    (Qemu quits suddenly while system_reset after hot-plugging unsupported memory by compatible guest on P9 with 1G huge page set)
  - Resolves: bz#1688312
    ([RFE] enable TPM passthrough at compile time (qemu-kvm))
  - Resolves: bz#1705149
    (libpmem support is not enabled in qemu-kvm)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-26.el8
changelog:
  - kvm-target-ppc-spapr-Add-SPAPR_CAP_LARGE_DECREMENTER.patch [bz#1698711]
  - kvm-target-ppc-spapr-Add-workaround-option-to-SPAPR_CAP_.patch [bz#1698711]
  - kvm-target-ppc-spapr-Add-SPAPR_CAP_CCF_ASSIST.patch [bz#1698711]
  - kvm-target-ppc-tcg-make-spapr_caps-apply-cap-cfpc-sbbc-i.patch [bz#1698711]
  - kvm-target-ppc-spapr-Enable-mitigations-by-default-for-p.patch [bz#1698711]
  - kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1693076]
  - kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1693076]
  - Resolves: bz#1693076
    (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-av-8])
  - Resolves: bz#1698711
    (Enable Spectre / Meltdown mitigations by default in pseries-rhel8.0.0 machine type)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.0.0-2.el8
changelog:
  - kvm-target-i386-define-md-clear-bit.patch [bz#1703297 bz#1703304 bz#1703310 bz#1707274]
  - Resolves: bz#1703297
    (CVE-2018-12126 virt:8.0.0/qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling (MSBDS) [rhel-av-8])
  - Resolves: bz#1703304
    (CVE-2018-12130 virt:8.0.0/qemu-kvm: hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS) [rhel-av-8])
  - Resolves: bz#1703310
    (CVE-2018-12127 virt:8.0.0/qemu-kvm: hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS) [rhel-av-8])
  - Resolves: bz#1707274
    (CVE-2019-11091 virt:8.0.0/qemu-kvm: hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM) [rhel-av-8.1.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.0.0-3.el8
changelog:
  - kvm-redhat-fix-cut-n-paste-garbage-in-hw_compat-comments.patch [bz#1709726]
  - kvm-compat-Generic-hw_compat_rhel_8_0.patch [bz#1709726]
  - kvm-redhat-sync-pseries-rhel7.6.0-with-rhel-av-8.0.1.patch [bz#1709726]
  - kvm-redhat-define-pseries-rhel8.1.0-machine-type.patch [bz#1709726]
  - Resolves: bz#1709726
    (Forward and backward migration failed with "qemu-kvm: error while loading state for instance 0x0 of device 'spapr'")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.0.0-4.el8
changelog:
  - kvm-Disable-VXHS-support.patch [bz#1714937]
  - kvm-aarch64-Add-virt-rhel8.1.0-machine-type-for-ARM.patch [bz#1713735]
  - kvm-aarch64-Allow-ARM-VIRT-iommu-option-in-RHEL8.1-machi.patch [bz#1713735]
  - kvm-usb-call-reset-handler-before-updating-state.patch [bz#1713679]
  - kvm-usb-host-skip-reset-for-untouched-devices.patch [bz#1713679]
  - kvm-usb-host-avoid-libusb_set_configuration-calls.patch [bz#1713679]
  - kvm-aarch64-Compile-out-IOH3420.patch [bz#1627283]
  - kvm-vl-Fix-drive-blockdev-persistent-reservation-managem.patch [bz#1714891]
  - kvm-vl-Document-why-objects-are-delayed.patch [bz#1714891]
  - Resolves: bz#1627283
    (Compile out IOH3420 on aarch64)
  - Resolves: bz#1713679
    (Detached device when trying to upgrade USB device firmware when in doing USB Passthrough via QEMU)
  - Resolves: bz#1713735
    (Allow ARM VIRT iommu option in RHEL8.1 machine)
  - Resolves: bz#1714891
    (Guest with persistent reservation manager for a disk fails to start)
  - Resolves: bz#1714937
    (Disable VXHS support)


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.0.0-5.el8
changelog:
  - kvm-qemu-kvm.spec-bump-libseccomp-2.4.0.patch [bz#1720306]
  - kvm-qxl-check-release-info-object.patch [bz#1712717]
  - kvm-target-i386-add-MDS-NO-feature.patch [bz#1722839]
  - kvm-block-file-posix-Unaligned-O_DIRECT-block-status.patch [bz#1588356]
  - kvm-iotests-Test-unaligned-raw-images-with-O_DIRECT.patch [bz#1588356]
  - kvm-rh-set-CONFIG_BOCHS_DISPLAY-y-for-x86.patch [bz#1707118]
  - Resolves: bz#1588356
    (qemu crashed on the source host when do storage migration with source qcow2 disk created by 'qemu-img')
  - Resolves: bz#1707118
    (enable device: bochs-display (QEMU))
  - Resolves: bz#1712717
    (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-av-8])
  - Resolves: bz#1720306
    (VM failed to start with error "failed to install seccomp syscall filter in the kernel")
  - Resolves: bz#1722839
    ([Intel 8.1 FEAT] MDS_NO exposure to guest - Fast Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.0.0-6.el8
changelog:
  - kvm-x86_64-rh-devices-add-missing-TPM-passthrough.patch [bz#1519013]
  - kvm-x86_64-rh-devices-enable-TPM-emulation.patch [bz#1519013]
  - kvm-vfio-increase-the-cap-on-number-of-assigned-devices-.patch [bz#1719823]
  - Resolves: bz#1519013
    ([RFE] QEMU Software TPM support (vTPM, or TPM emulation))
  - Resolves: bz#1719823
    ([RHEL 8.1] [RFE] increase the maximum of vfio devices to more than 32 in qemu-kvm)


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.1.0-1.el8
changelog:
  - Rebase to qemu 4.1.0 rc4 [bz#1705235]
  - Resolves: bz#1705235
    (Rebase qemu-kvm for RHEL-AV 8.1.0)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-2.el8
changelog:
  - kvm-spec-Update-seavgabios-dependency.patch [bz#1725664]
  - kvm-pc-Don-t-make-die-id-mandatory-unless-necessary.patch [bz#1741451]
  - kvm-display-bochs-fix-pcie-support.patch [bz#1733977 bz#1740692]
  - kvm-spapr-Reset-CAS-IRQ-subsystem-after-devices.patch [bz#1733977]
  - kvm-spapr-xive-Fix-migration-of-hot-plugged-CPUs.patch [bz#1733977]
  - kvm-riscv-roms-Fix-make-rules-for-building-sifive_u-bios.patch [bz#1733977 bz#1740692]
  - kvm-Update-version-for-v4.1.0-release.patch [bz#1733977 bz#1740692]
  - Resolves: bz#1725664
    (Update seabios dependency)
  - Resolves: bz#1733977
    (Qemu core dumped: /home/ngu/qemu/hw/intc/xics_kvm.c:321: ics_kvm_set_irq: Assertion `kernel_xics_fd != -1' failed)
  - Resolves: bz#1740692
    (Backport QEMU 4.1.0 rc5 & ga patches)
  - Resolves: bz#1741451
    (Failed to hot-plug vcpus)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-3.el8
changelog:
  - kvm-x86-machine-types-pc_rhel_8_0_compat.patch [bz#1719649]
  - kvm-x86-machine-types-q35-Fixup-units_per_default_bus.patch [bz#1719649]
  - kvm-x86-machine-types-Fixup-dynamic-sysbus-entries.patch [bz#1719649]
  - kvm-x86-machine-types-add-pc-q35-rhel8.1.0.patch [bz#1719649]
  - kvm-machine-types-Update-hw_compat_rhel_8_0-from-hw_comp.patch [bz#1719649]
  - kvm-virtio-Make-disable-legacy-disable-modern-compat-pro.patch [bz#1719649]
  - Resolves: bz#1719649
    (8.1 machine type for x86)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-4.el8
changelog:
  - kvm-RHEL-disable-hostmem-memfd.patch [bz#1738626 bz#1740797]
  - Resolves: bz#1738626
    (Disable memfd in QEMU)
  - Resolves: bz#1740797
    (Disable memfd in QEMU)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-5.el8
changelog:
  - kvm-redhat-s390x-Rename-s390-ccw-virtio-rhel8.0.0-to-s39.patch [bz#1693772]
  - kvm-redhat-s390x-Add-proper-compatibility-options-for-th.patch [bz#1693772]
  - kvm-enable-virgl.patch [bz#1559740]
  - kvm-redhat-update-pseries-rhel8.1.0-machine-type.patch [bz#1744170]
  - kvm-Do-not-run-iotests-on-brew-build.patch [bz#1742197 bz#1742819]
  - Resolves: bz#1559740
    ([RFE] Enable virgl as TechPreview (qemu))
  - Resolves: bz#1693772
    ([IBM zKVM] RHEL AV 8.1.0 machine type update for s390x)
  - Resolves: bz#1742197
    (Remove iotests from qemu-kvm builds [RHEL AV 8.1.0])
  - Resolves: bz#1742819
    (Remove iotests from qemu-kvm builds [RHEL 8.1.0])
  - Resolves: bz#1744170
    ([IBM Power] New 8.1.0 machine type for pseries)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-6.el8
changelog:
  - kvm-memory-Refactor-memory_region_clear_coalescing.patch [bz#1743142]
  - kvm-memory-Split-zones-when-do-coalesced_io_del.patch [bz#1743142]
  - kvm-memory-Remove-has_coalesced_range-counter.patch [bz#1743142]
  - kvm-memory-Fix-up-memory_region_-add-del-_coalescing.patch [bz#1743142]
  - kvm-enable-virgl-for-real-this-time.patch [bz#1559740]
  - Resolves: bz#1559740
    ([RFE] Enable virgl as TechPreview (qemu))
  - Resolves: bz#1743142
    (Boot guest with multiple e1000 devices, qemu will crash after several guest reboots: kvm_mem_ioeventfd_add: error adding ioeventfd: No space left on device (28))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-7.el8
changelog:
  - kvm-trace-Clarify-DTrace-SystemTap-help-message.patch [bz#1516220]
  - kvm-socket-Add-backlog-parameter-to-socket_listen.patch [bz#1726898]
  - kvm-socket-Add-num-connections-to-qio_channel_socket_syn.patch [bz#1726898]
  - kvm-socket-Add-num-connections-to-qio_channel_socket_asy.patch [bz#1726898]
  - kvm-socket-Add-num-connections-to-qio_net_listener_open_.patch [bz#1726898]
  - kvm-multifd-Use-number-of-channels-as-listen-backlog.patch [bz#1726898]
  - kvm-pseries-Fix-compat_pvr-on-reset.patch [bz#1744107]
  - kvm-spapr-Set-compat-mode-in-spapr_core_plug.patch [bz#1744107]
  - Resolves: bz#1516220
    (-trace help prints an incomplete list of trace events)
  - Resolves: bz#1726898
    (Parallel migration fails with error "Unable to write to socket: Connection reset by peer" now and then)
  - Resolves: bz#1744107
    (Migration from P8(qemu4.1) to P9(qemu4.1), after migration, qemu crash on destination with error message "qemu-kvm: error while loading state for instance 0x1 of device 'cpu'")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-8.el8
changelog:
  - kvm-migration-Do-not-re-read-the-clock-on-pre_save-in-ca.patch [bz#1747836]
  - kvm-ehci-fix-queue-dev-null-ptr-dereference.patch [bz#1746790]
  - kvm-spapr-Use-SHUTDOWN_CAUSE_SUBSYSTEM_RESET-for-CAS-reb.patch [bz#1743477]
  - kvm-file-posix-Handle-undetectable-alignment.patch [bz#1749134]
  - kvm-block-posix-Always-allocate-the-first-block.patch [bz#1749134]
  - kvm-iotests-Test-allocate_first_block-with-O_DIRECT.patch [bz#1749134]
  - Resolves: bz#1743477
    (Since bd94bc06479a "spapr: change default interrupt mode to 'dual'", QEMU resets the machine to select the appropriate interrupt controller. And -no-reboot prevents that.)
  - Resolves: bz#1746790
    (qemu core dump while migrate from RHEL7.6 to RHEL8.1)
  - Resolves: bz#1747836
    (Call traces after guest migration due to incorrect handling of the timebase)
  - Resolves: bz#1749134
    (I/O error when virtio-blk disk is backed by a raw image on 4k disk)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-9.el8
changelog:
  - kvm-migration-always-initialise-ram_counters-for-a-new-m.patch [bz#1734316]
  - kvm-migration-add-qemu_file_update_transfer-interface.patch [bz#1734316]
  - kvm-migration-add-speed-limit-for-multifd-migration.patch [bz#1734316]
  - kvm-migration-update-ram_counters-for-multifd-sync-packe.patch [bz#1734316]
  - kvm-spapr-pci-Consolidate-de-allocation-of-MSIs.patch [bz#1750200]
  - kvm-spapr-pci-Free-MSIs-during-reset.patch [bz#1750200]
  - Resolves: bz#1734316
    (multifd migration does not honour speed limits, consumes entire bandwidth of NIC)
  - Resolves: bz#1750200
    ([RHEL8.1][QEMU4.1]boot up guest with vf device,then system_reset guest,error prompt(qemu-kvm: Can't allocate MSIs for device 2800: IRQ 4904 is not free))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-10.el8
changelog:
  - kvm-spapr-xive-Mask-the-EAS-when-allocating-an-IRQ.patch [bz#1748725]
  - kvm-block-create-Do-not-abort-if-a-block-driver-is-not-a.patch [bz#1746267]
  - kvm-virtio-blk-Cancel-the-pending-BH-when-the-dataplane-.patch [bz#1717321]
  - kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749737]
  - Resolves: bz#1717321
    (qemu-kvm core dumped when repeat "system_reset" multiple times during guest boot)
  - Resolves: bz#1746267
    (qemu coredump: qemu-kvm: block/create.c:68: qmp_blockdev_create: Assertion `drv' failed)
  - Resolves: bz#1748725
    ([ppc][migration][v6.3-rc1-p1ce8930]basic migration failed with "qemu-kvm: KVM_SET_DEVICE_ATTR failed: Group 3 attr 0x0000000000001309: Device or resource busy")
  - Resolves: bz#1749737
    (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-11.el8
changelog:
  - kvm-blockjob-update-nodes-head-while-removing-all-bdrv.patch [bz#1746631]
  - kvm-hostmem-file-fix-pmem-file-size-check.patch [bz#1724008 bz#1736788]
  - kvm-memory-fetch-pmem-size-in-get_file_size.patch [bz#1724008 bz#1736788]
  - kvm-pr-manager-Fix-invalid-g_free-crash-bug.patch [bz#1753992]
  - Resolves: bz#1724008
    (QEMU core dumped "memory_region_get_ram_ptr: Assertion `mr->ram_block' failed")
  - Resolves: bz#1736788
    (QEMU core dumped if boot guest with nvdimm backed by /dev/dax0.0 and option pmem=off)
  - Resolves: bz#1746631
    (Qemu core dump when do block commit under stress)
  - Resolves: bz#1753992
    (core dump when testing persistent reservation in guest)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-12.el8
changelog:
  - kvm-block-Use-QEMU_IS_ALIGNED.patch [bz#1745922]
  - kvm-block-qcow2-Fix-corruption-introduced-by-commit-8ac0.patch [bz#1745922]
  - kvm-block-qcow2-refactor-encryption-code.patch [bz#1745922]
  - kvm-qemu-iotests-Add-test-for-bz-1745922.patch [bz#1745922]
  - Resolves: bz#1745922
    (Luks-inside-qcow2 snapshot cannot boot after 'qemu-img rebase')


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-13.el8
changelog:
  - kvm-nbd-server-attach-client-channel-to-the-export-s-Aio.patch [bz#1748253]
  - kvm-virtio-blk-schedule-virtio_notify_config-to-run-on-m.patch [bz#1744955]
  - Resolves: bz#1744955
    (Qemu hang when block resize a qcow2 image)
  - Resolves: bz#1748253
    (QEMU crashes (core dump) when using the integrated NDB server with data-plane)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-14.el8
changelog:
  - kvm-Revert-qcow2-skip-writing-zero-buffers-to-empty-COW-.patch [bz#1751934]
  - kvm-coroutine-Add-qemu_co_mutex_assert_locked.patch [bz#1764721]
  - kvm-qcow2-Fix-corruption-bug-in-qcow2_detect_metadata_pr.patch [bz#1764721]
  - Resolves: bz#1751934
    (Fail to install guest when xfs is the host filesystem)
  - Resolves: bz#1764721
    (qcow2 image corruption due to incorrect locking in preallocation detection)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-15.el8
changelog:
  - kvm-virtio-blk-Add-blk_drain-to-virtio_blk_device_unreal.patch [bz#1706759]
  - kvm-Revert-qcow2-skip-writing-zero-buffers-to-empty-COW-.patch [bz#1772473]
  - kvm-coroutine-Add-qemu_co_mutex_assert_locked.patch [bz#1772473]
  - kvm-qcow2-Fix-corruption-bug-in-qcow2_detect_metadata_pr.patch [bz#1772473]
  - Resolves: bz#1706759
    (qemu core dump when unplug a 16T GPT type disk from win2019 guest)
  - Resolves: bz#1772473
    (Import fixes from 8.1.0 into 8.1.1 branch)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-16.el8
changelog:
  - kvm-curl-Keep-pointer-to-the-CURLState-in-CURLSocket.patch [bz#1745209]
  - kvm-curl-Keep-socket-until-the-end-of-curl_sock_cb.patch [bz#1745209]
  - kvm-curl-Check-completion-in-curl_multi_do.patch [bz#1745209]
  - kvm-curl-Pass-CURLSocket-to-curl_multi_do.patch [bz#1745209]
  - kvm-curl-Report-only-ready-sockets.patch [bz#1745209]
  - kvm-curl-Handle-success-in-multi_check_completion.patch [bz#1745209]
  - kvm-curl-Check-curl_multi_add_handle-s-return-code.patch [bz#1745209]
  - kvm-vhost-user-save-features-if-the-char-dev-is-closed.patch [bz#1738768]
  - kvm-block-snapshot-Restrict-set-of-snapshot-nodes.patch [bz#1658981]
  - kvm-iotests-Test-internal-snapshots-with-blockdev.patch [bz#1658981]
  - kvm-qapi-Add-feature-flags-to-commands-in-qapi-introspec.patch [bz#1658981]
  - kvm-qapi-Allow-introspecting-fix-for-savevm-s-cooperatio.patch [bz#1658981]
  - kvm-block-Remove-backing-null-from-bs-explicit_-options.patch [bz#1773925]
  - kvm-iotests-Test-multiple-blockdev-snapshot-calls.patch [bz#1773925]
  - Resolves: bz#1658981
    (qemu failed to create internal snapshot via 'savevm' when using blockdev)
  - Resolves: bz#1738768
    (Guest fails to recover receiving packets after vhost-user reconnect)
  - Resolves: bz#1745209
    (qemu-img gets stuck when stream-converting from http)
  - Resolves: bz#1773925
    (Fail to do blockcommit with more than one snapshots)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-17.el8
changelog:
  - kvm-qemu-pr-helper-fix-crash-in-mpath_reconstruct_sense.patch [bz#1772322]
  - Resolves: bz#1772322
    (qemu-pr-helper: fix crash in mpath_reconstruct_sense)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-18.el8
changelog:
  - kvm-LUKS-support-preallocation.patch [bz#1534951]
  - kvm-nbd-add-empty-.bdrv_reopen_prepare.patch [bz#1718727]
  - kvm-qdev-qbus-add-hidden-device-support.patch [bz#1757796]
  - kvm-pci-add-option-for-net-failover.patch [bz#1757796]
  - kvm-pci-mark-devices-partially-unplugged.patch [bz#1757796]
  - kvm-pci-mark-device-having-guest-unplug-request-pending.patch [bz#1757796]
  - kvm-qapi-add-unplug-primary-event.patch [bz#1757796]
  - kvm-qapi-add-failover-negotiated-event.patch [bz#1757796]
  - kvm-migration-allow-unplug-during-migration-for-failover.patch [bz#1757796]
  - kvm-migration-add-new-migration-state-wait-unplug.patch [bz#1757796]
  - kvm-libqos-tolerate-wait-unplug-migration-state.patch [bz#1757796]
  - kvm-net-virtio-add-failover-support.patch [bz#1757796]
  - kvm-vfio-unplug-failover-primary-device-before-migration.patch [bz#1757796]
  - kvm-net-virtio-fix-dev_unplug_pending.patch [bz#1757796]
  - kvm-net-virtio-return-early-when-failover-primary-alread.patch [bz#1757796]
  - kvm-net-virtio-fix-re-plugging-of-primary-device.patch [bz#1757796]
  - kvm-net-virtio-return-error-when-device_opts-arg-is-NULL.patch [bz#1757796]
  - kvm-vfio-don-t-ignore-return-value-of-migrate_add_blocke.patch [bz#1757796]
  - kvm-hw-vfio-pci-Fix-double-free-of-migration_blocker.patch [bz#1757796]
  - Resolves: bz#1534951
    (RFE: Support preallocation mode for luks format)
  - Resolves: bz#1718727
    (Committing changes to the backing file over NBD fails with reopening files not supported)
  - Resolves: bz#1757796
    (RFE: support for net failover devices in qemu)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-5.el8
changelog:
  - kvm-i386-Remove-cpu64-rhel6-CPU-model.patch [bz#1741345]
  - kvm-Reallocate-dirty_bmap-when-we-change-a-slot.patch [bz#1772774]
  - Resolves: bz#1741345
    (Remove the "cpu64-rhel6" CPU from qemu-kvm)
  - Resolves: bz#1772774
    (qemu-kvm core dump during migration+reboot ( Assertion `mem->dirty_bmap' failed ))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-6.el8
changelog:
  - kvm-spapr-Don-t-trigger-a-CAS-reboot-for-XICS-XIVE-mode-.patch [bz#1733893]
  - kvm-vfio-pci-Don-t-remove-irqchip-notifier-if-not-regist.patch [bz#1782678]
  - kvm-virtio-don-t-enable-notifications-during-polling.patch [bz#1789301]
  - kvm-usbredir-Prevent-recursion-in-usbredir_write.patch [bz#1790844]
  - kvm-xhci-recheck-slot-status.patch [bz#1790844]
  - Resolves: bz#1733893
    (Boot a guest with "-prom-env 'auto-boot?=false'", SLOF failed to enter the boot entry after input "boot" followed by "0 > " on VNC)
  - Resolves: bz#1782678
    (qemu core dump after hot-unplugging the   XXV710/XL710 PF)
  - Resolves: bz#1789301
    (virtio-blk/scsi: fix notification suppression during AioContext polling)
  - Resolves: bz#1790844
    (USB related fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.2.0-7.el8
changelog:
  - kvm-tcp_emu-Fix-oob-access.patch [bz#1791568]
  - kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791568]
  - kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791568]
  - kvm-RHEL-hw-i386-disable-nested-PERF_GLOBAL_CTRL-MSR-sup.patch [bz#1559846]
  - Resolves: bz#1559846
    (Nested KVM: limit VMX features according to CPU models - Fast Train)
  - Resolves: bz#1791568
    (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-av-8.2.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.2.0-8.el8
changelog:
  - kvm-target-arm-arch_dump-Add-SVE-notes.patch [bz#1725084]
  - kvm-vhost-Add-names-to-section-rounded-warning.patch [bz#1779041]
  - kvm-vhost-Only-align-sections-for-vhost-user.patch [bz#1779041]
  - kvm-vhost-coding-style-fix.patch [bz#1779041]
  - kvm-virtio-fs-fix-MSI-X-nvectors-calculation.patch [bz#1694164]
  - kvm-vhost-user-fs-remove-vhostfd-property.patch [bz#1694164]
  - kvm-build-rename-CONFIG_LIBCAP-to-CONFIG_LIBCAP_NG.patch [bz#1694164]
  - kvm-virtiofsd-Pull-in-upstream-headers.patch [bz#1694164]
  - kvm-virtiofsd-Pull-in-kernel-s-fuse.h.patch [bz#1694164]
  - kvm-virtiofsd-Add-auxiliary-.c-s.patch [bz#1694164]
  - kvm-virtiofsd-Add-fuse_lowlevel.c.patch [bz#1694164]
  - kvm-virtiofsd-Add-passthrough_ll.patch [bz#1694164]
  - kvm-virtiofsd-Trim-down-imported-files.patch [bz#1694164]
  - kvm-virtiofsd-Format-imported-files-to-qemu-style.patch [bz#1694164]
  - kvm-virtiofsd-remove-mountpoint-dummy-argument.patch [bz#1694164]
  - kvm-virtiofsd-remove-unused-notify-reply-support.patch [bz#1694164]
  - kvm-virtiofsd-Remove-unused-enum-fuse_buf_copy_flags.patch [bz#1694164]
  - kvm-virtiofsd-Fix-fuse_daemonize-ignored-return-values.patch [bz#1694164]
  - kvm-virtiofsd-Fix-common-header-and-define-for-QEMU-buil.patch [bz#1694164]
  - kvm-virtiofsd-Trim-out-compatibility-code.patch [bz#1694164]
  - kvm-vitriofsd-passthrough_ll-fix-fallocate-ifdefs.patch [bz#1694164]
  - kvm-virtiofsd-Make-fsync-work-even-if-only-inode-is-pass.patch [bz#1694164]
  - kvm-virtiofsd-Add-options-for-virtio.patch [bz#1694164]
  - kvm-virtiofsd-add-o-source-PATH-to-help-output.patch [bz#1694164]
  - kvm-virtiofsd-Open-vhost-connection-instead-of-mounting.patch [bz#1694164]
  - kvm-virtiofsd-Start-wiring-up-vhost-user.patch [bz#1694164]
  - kvm-virtiofsd-Add-main-virtio-loop.patch [bz#1694164]
  - kvm-virtiofsd-get-set-features-callbacks.patch [bz#1694164]
  - kvm-virtiofsd-Start-queue-threads.patch [bz#1694164]
  - kvm-virtiofsd-Poll-kick_fd-for-queue.patch [bz#1694164]
  - kvm-virtiofsd-Start-reading-commands-from-queue.patch [bz#1694164]
  - kvm-virtiofsd-Send-replies-to-messages.patch [bz#1694164]
  - kvm-virtiofsd-Keep-track-of-replies.patch [bz#1694164]
  - kvm-virtiofsd-Add-Makefile-wiring-for-virtiofsd-contrib.patch [bz#1694164]
  - kvm-virtiofsd-Fast-path-for-virtio-read.patch [bz#1694164]
  - kvm-virtiofsd-add-fd-FDNUM-fd-passing-option.patch [bz#1694164]
  - kvm-virtiofsd-make-f-foreground-the-default.patch [bz#1694164]
  - kvm-virtiofsd-add-vhost-user.json-file.patch [bz#1694164]
  - kvm-virtiofsd-add-print-capabilities-option.patch [bz#1694164]
  - kvm-virtiofs-Add-maintainers-entry.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-create-new-files-in-caller-.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-lo_map-for-ino-fh-indir.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-ino_map-to-hide-lo_inod.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-dirp_map-to-hide-lo_dir.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-fd_map-to-hide-file-des.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-fallback-for-racy-ops.patch [bz#1694164]
  - kvm-virtiofsd-validate-path-components.patch [bz#1694164]
  - kvm-virtiofsd-Plumb-fuse_bufvec-through-to-do_write_buf.patch [bz#1694164]
  - kvm-virtiofsd-Pass-write-iov-s-all-the-way-through.patch [bz#1694164]
  - kvm-virtiofsd-add-fuse_mbuf_iter-API.patch [bz#1694164]
  - kvm-virtiofsd-validate-input-buffer-sizes-in-do_write_bu.patch [bz#1694164]
  - kvm-virtiofsd-check-input-buffer-size-in-fuse_lowlevel.c.patch [bz#1694164]
  - kvm-virtiofsd-prevent-.-escape-in-lo_do_lookup.patch [bz#1694164]
  - kvm-virtiofsd-prevent-.-escape-in-lo_do_readdir.patch [bz#1694164]
  - kvm-virtiofsd-use-proc-self-fd-O_PATH-file-descriptor.patch [bz#1694164]
  - kvm-virtiofsd-sandbox-mount-namespace.patch [bz#1694164]
  - kvm-virtiofsd-move-to-an-empty-network-namespace.patch [bz#1694164]
  - kvm-virtiofsd-move-to-a-new-pid-namespace.patch [bz#1694164]
  - kvm-virtiofsd-add-seccomp-whitelist.patch [bz#1694164]
  - kvm-virtiofsd-Parse-flag-FUSE_WRITE_KILL_PRIV.patch [bz#1694164]
  - kvm-virtiofsd-cap-ng-helpers.patch [bz#1694164]
  - kvm-virtiofsd-Drop-CAP_FSETID-if-client-asked-for-it.patch [bz#1694164]
  - kvm-virtiofsd-set-maximum-RLIMIT_NOFILE-limit.patch [bz#1694164]
  - kvm-virtiofsd-fix-libfuse-information-leaks.patch [bz#1694164]
  - kvm-virtiofsd-add-syslog-command-line-option.patch [bz#1694164]
  - kvm-virtiofsd-print-log-only-when-priority-is-high-enoug.patch [bz#1694164]
  - kvm-virtiofsd-Add-ID-to-the-log-with-FUSE_LOG_DEBUG-leve.patch [bz#1694164]
  - kvm-virtiofsd-Add-timestamp-to-the-log-with-FUSE_LOG_DEB.patch [bz#1694164]
  - kvm-virtiofsd-Handle-reinit.patch [bz#1694164]
  - kvm-virtiofsd-Handle-hard-reboot.patch [bz#1694164]
  - kvm-virtiofsd-Kill-threads-when-queues-are-stopped.patch [bz#1694164]
  - kvm-vhost-user-Print-unexpected-slave-message-types.patch [bz#1694164]
  - kvm-contrib-libvhost-user-Protect-slave-fd-with-mutex.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-renameat2-support.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-disable-readdirplus-on-cach.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-control-readdirplus.patch [bz#1694164]
  - kvm-virtiofsd-rename-unref_inode-to-unref_inode_lolocked.patch [bz#1694164]
  - kvm-virtiofsd-fail-when-parent-inode-isn-t-known-in-lo_d.patch [bz#1694164]
  - kvm-virtiofsd-extract-root-inode-init-into-setup_root.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-clean-up-cache-related-opti.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-use-hashtable.patch [bz#1694164]
  - kvm-virtiofsd-Clean-up-inodes-on-destroy.patch [bz#1694164]
  - kvm-virtiofsd-support-nanosecond-resolution-for-file-tim.patch [bz#1694164]
  - kvm-virtiofsd-fix-error-handling-in-main.patch [bz#1694164]
  - kvm-virtiofsd-cleanup-allocated-resource-in-se.patch [bz#1694164]
  - kvm-virtiofsd-fix-memory-leak-on-lo.source.patch [bz#1694164]
  - kvm-virtiofsd-add-helper-for-lo_data-cleanup.patch [bz#1694164]
  - kvm-virtiofsd-Prevent-multiply-running-with-same-vhost_u.patch [bz#1694164]
  - kvm-virtiofsd-enable-PARALLEL_DIROPS-during-INIT.patch [bz#1694164]
  - kvm-virtiofsd-fix-incorrect-error-handling-in-lo_do_look.patch [bz#1694164]
  - kvm-Virtiofsd-fix-memory-leak-on-fuse-queueinfo.patch [bz#1694164]
  - kvm-virtiofsd-Support-remote-posix-locks.patch [bz#1694164]
  - kvm-virtiofsd-use-fuse_lowlevel_is_virtio-in-fuse_sessio.patch [bz#1694164]
  - kvm-virtiofsd-prevent-fv_queue_thread-vs-virtio_loop-rac.patch [bz#1694164]
  - kvm-virtiofsd-make-lo_release-atomic.patch [bz#1694164]
  - kvm-virtiofsd-prevent-races-with-lo_dirp_put.patch [bz#1694164]
  - kvm-virtiofsd-rename-inode-refcount-to-inode-nlookup.patch [bz#1694164]
  - kvm-libvhost-user-Fix-some-memtable-remap-cases.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-fix-refcounting-on-remove-r.patch [bz#1694164]
  - kvm-virtiofsd-introduce-inode-refcount-to-prevent-use-af.patch [bz#1694164]
  - kvm-virtiofsd-do-not-always-set-FUSE_FLOCK_LOCKS.patch [bz#1694164]
  - kvm-virtiofsd-convert-more-fprintf-and-perror-to-use-fus.patch [bz#1694164]
  - kvm-virtiofsd-Reset-O_DIRECT-flag-during-file-open.patch [bz#1694164]
  - kvm-virtiofsd-Fix-data-corruption-with-O_APPEND-write-in.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-Use-cache_readdir-for-direc.patch [bz#1694164]
  - kvm-virtiofsd-add-definition-of-fuse_buf_writev.patch [bz#1694164]
  - kvm-virtiofsd-use-fuse_buf_writev-to-replace-fuse_buf_wr.patch [bz#1694164]
  - kvm-virtiofsd-process-requests-in-a-thread-pool.patch [bz#1694164]
  - kvm-virtiofsd-prevent-FUSE_INIT-FUSE_DESTROY-races.patch [bz#1694164]
  - kvm-virtiofsd-fix-lo_destroy-resource-leaks.patch [bz#1694164]
  - kvm-virtiofsd-add-thread-pool-size-NUM-option.patch [bz#1694164]
  - kvm-virtiofsd-Convert-lo_destroy-to-take-the-lo-mutex-lo.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-Pass-errno-to-fuse_reply_er.patch [bz#1694164]
  - kvm-virtiofsd-stop-all-queue-threads-on-exit-in-virtio_l.patch [bz#1694164]
  - kvm-virtiofsd-add-some-options-to-the-help-message.patch [bz#1694164]
  - kvm-redhat-ship-virtiofsd-vhost-user-device-backend.patch [bz#1694164]
  - Resolves: bz#1694164
    (virtio-fs: host<->guest shared file system (qemu))
  - Resolves: bz#1725084
    (aarch64: support dumping SVE registers)
  - Resolves: bz#1779041
    (netkvm: no connectivity Windows guest with q35 + hugepages + vhost + hv_synic)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-9.el8
changelog:
  - kvm-ppc-Deassert-the-external-interrupt-pin-in-KVM-on-re.patch [bz#1776638]
  - kvm-xics-Don-t-deassert-outputs.patch [bz#1776638]
  - kvm-ppc-Don-t-use-CPUPPCState-irq_input_state-with-moder.patch [bz#1776638]
  - kvm-trace-update-qemu-trace-stap-to-Python-3.patch [bz#1787395]
  - kvm-redhat-Remove-redundant-fix-for-qemu-trace-stap.patch [bz#1787395]
  - kvm-iscsi-Cap-block-count-from-GET-LBA-STATUS-CVE-2020-1.patch [bz#1794503]
  - kvm-tpm-ppi-page-align-PPI-RAM.patch [bz#1787444]
  - kvm-target-arm-kvm-trivial-Clean-up-header-documentation.patch [bz#1647366]
  - kvm-target-arm-kvm64-kvm64-cpus-have-timer-registers.patch [bz#1647366]
  - kvm-tests-arm-cpu-features-Check-feature-default-values.patch [bz#1647366]
  - kvm-target-arm-kvm-Implement-virtual-time-adjustment.patch [bz#1647366]
  - kvm-target-arm-cpu-Add-the-kvm-no-adjvtime-CPU-property.patch [bz#1647366]
  - kvm-migration-Define-VMSTATE_INSTANCE_ID_ANY.patch [bz#1529231]
  - kvm-migration-Change-SaveStateEntry.instance_id-into-uin.patch [bz#1529231]
  - kvm-apic-Use-32bit-APIC-ID-for-migration-instance-ID.patch [bz#1529231]
  - Resolves: bz#1529231
    ([q35] VM hangs after migration with 200 vCPUs)
  - Resolves: bz#1647366
    (aarch64: Add support for the kvm-no-adjvtime ARM CPU feature)
  - Resolves: bz#1776638
    (Guest failed to boot up after system_reset  20 times)
  - Resolves: bz#1787395
    (qemu-trace-stap list : TypeError: startswith first arg must be bytes or a tuple of bytes, not str)
  - Resolves: bz#1787444
    (Broken postcopy migration with vTPM device)
  - Resolves: bz#1794503
    (CVE-2020-1711 qemu-kvm: QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server [rhel-av-8.2.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-10.el8
changelog:
  - kvm-i386-Resolve-CPU-models-to-v1-by-default.patch [bz#1779078 bz#1787291 bz#1779078 bz#1779078]
  - kvm-iotests-Support-job-complete-in-run_job.patch [bz#1781637]
  - kvm-iotests-Create-VM.blockdev_create.patch [bz#1781637]
  - kvm-block-Activate-recursively-even-for-already-active-n.patch [bz#1781637]
  - kvm-hmp-Allow-using-qdev-ID-for-qemu-io-command.patch [bz#1781637]
  - kvm-iotests-Test-external-snapshot-with-VM-state.patch [bz#1781637]
  - kvm-iotests.py-Let-wait_migration-wait-even-more.patch [bz#1781637]
  - kvm-blockdev-fix-coding-style-issues-in-drive_backup_pre.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-unify-qmp_drive_backup-and-drive-backup-tra.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-unify-qmp_blockdev_backup-and-blockdev-back.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-honor-bdrv_try_set_aio_context-context-requ.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-backup-top-Begin-drain-earlier.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-block-backup-top-Don-t-acquire-context-while-droppin.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-Acquire-AioContext-on-dirty-bitmap-function.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-Return-bs-to-the-proper-context-on-snapshot.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-iotests-Test-handling-of-AioContexts-with-some-block.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-target-arm-monitor-query-cpu-model-expansion-crashed.patch [bz#1801320]
  - kvm-docs-arm-cpu-features-Make-kvm-no-adjvtime-comment-c.patch [bz#1801320]
  - Resolves: bz#1745606
    (Qemu hang when do incremental live backup in transaction mode without bitmap)
  - Resolves: bz#1746217
    (Src qemu hang when do storage vm migration during guest installation)
  - Resolves: bz#1773517
    (Src qemu hang when do storage vm migration with dataplane enable)
  - Resolves: bz#1779036
    (Qemu coredump when do snapshot in transaction mode with one snapshot path not exist)
  - Resolves: bz#1779078
    (RHVH 4.4: Failed to run VM on 4.3/4.4 engine (Exit message: the CPU is incompatible with host CPU: Host CPU does not provide required features: hle, rtm))
  - Resolves: bz#1781637
    (qemu crashed when do mem and disk snapshot)
  - Resolves: bz#1782111
    (Qemu hang when do full backup on multi-disks with one job's 'job-id' missed in transaction mode(data plane enable))
  - Resolves: bz#1782175
    (Qemu core dump when add persistent bitmap(data plane enable))
  - Resolves: bz#1783965
    (Qemu core dump when do backup with sync: bitmap and no bitmap provided)
  - Resolves: bz#1787291
    (RHVH 4.4: Failed to run VM on 4.3/4.4 engine (Exit message: the CPU is incompatible with host CPU: Host CPU does not provide required features: hle, rtm) [rhel-8.1.0.z])
  - Resolves: bz#1801320
    (aarch64: backport query-cpu-model-expansion and adjvtime document fixes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-11.el8
changelog:
  - kvm-spapr-Enable-DD2.3-accelerated-count-cache-flush-in-.patch [bz#1796240]
  - kvm-util-add-slirp_fmt-helpers.patch [bz#1798994]
  - kvm-tcp_emu-fix-unsafe-snprintf-usages.patch [bz#1798994]
  - kvm-virtio-add-ability-to-delete-vq-through-a-pointer.patch [bz#1791590]
  - kvm-virtio-make-virtio_delete_queue-idempotent.patch [bz#1791590]
  - kvm-virtio-reset-region-cache-when-on-queue-deletion.patch [bz#1791590]
  - kvm-virtio-net-delete-also-control-queue-when-TX-RX-dele.patch [bz#1791590]
  - Resolves: bz#1791590
    ([Q35] No "DEVICE_DELETED" event in qmp after unplug virtio-net-pci device)
  - Resolves: bz#1796240
    (Enable hw accelerated cache-count-flush by default for POWER9 DD2.3 cpus)
  - Resolves: bz#1798994
    (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-av-8.2.0])


