# changelog

author: Petr Menšík <pemensik@redhat.com> - 2.79-1
changelog:
  - Rebase to 2.79
  - Stop using nettle_hashes directly, use access function (#1548060)
  - Do not break on cname with spaces (#1498667)
  - Require nettle 3.4+
  - Do not own sysusers.d directory, already depends on systemd providing it


author: Orion Poplawski <orion@cora.nwra.com> - 0.8.8-3
changelog:
  - Add patch from upstream to fix module imports (Bug #892365)
  - Add patch from upstream to UTF-8 characters in syslog (Bug #905097)
  - Drop Requires: tcp_wrappers and shorewall (Bug #781341)


author: Orion Poplawski <orion@cora.nwra.com> - 0.8.10-1
changelog:
  - Update to 0.8.10 security release
  - Use upstream provided systemd files
  - Drop upstreamed patches, rebase log2syslog and notmp patches


author: Orion Poplawski <orion@cora.nwra.com> - 0.9-0.3.git1f1a561
changelog:
  - Update to current 0.9 git branch
  - Rebase init patch, drop jail.d and notmp patch applied upstream


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-9
changelog:
  - Amended fix for FIPS enforcement issue (#1163848)
  - Fixed issue with applications that close all file descriptors (#1165047)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-11
changelog:
  - Applied fix for urandom FD in FIPS140 mode (#1165047)
  - Applied fix for FIPS140-2 related regression (#1110696)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.8-13
changelog:
  - Corrected reseed and respect of max_number_of_bits_per_request in 
    FIPS140-2 mode. Also enhanced the initial tests. (#1228199)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.24-1
changelog:
  - Addressed issue with DSA public keys smaller than 2^1024 (#1238279)
  - Addressed two-byte buffer overflow in the DTLS-0.9 protocol (#1209365)
  - When writing certificates to smart cards write the CKA_ISSUER and
    CKA_SERIAL_NUMBER fields to allow NSS reading them (#1272179)
  - Use the shared system certificate store (#1110750)
  - Address MD5 transcript collision attacks in TLS key exchange (#1289888, 
    CVE-2015-7575)
  - Allow hashing data over 2^32 bytes (#1306953)
  - Ensure written PKCS#11 public keys are not marked as private (#1339453)
  - Ensure secure_getenv() is called on all uses of environment variables
    (#1344591).
  - Fix issues related to PKCS #11 private key listing on certain HSMs
    (#1351389)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-7
changelog:
  - Address interoperability issue with 3.5.x (#1388932)
  - Reject CAs which are both trusted and blacklisted in trust module (#1375303)
  - Added new functions to set issuer and subject ID in certificates (#1378373)
  - Reject connections with less than 1024-bit DH parameters (#1335931)
  - Fix issue that made GnuTLS parse only the first 32 extensions (#1383748)
  - Mention limitations of certtool in manpage (#1375463)
  - Read PKCS#8 files with HMAC-SHA256 -as generated by openssl 1.1 (#1380642)
  - Do not link directly to trousers but instead use dlopen (#1379739)
  - Fix incorrect OCSP validation (#1377569)
  - Added support for pin-value in PKCS#11 URIs (#1379283)
  - Added the --id option to p11tool (#1399232)
  - Improved sanity checks in RSA key generation (#1444780)
  - Addressed CVE-2017-5334, CVE-2017-5335, CVE-2017-5336, CVE-2017-5337,
    CVE-2017-7869


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.26-9
changelog:
  - Address crash in OCSP status request extension, by eliminating the
    unneeded parsing (CVE-2017-7507, #1455828)


author: Wim Taymans <wtaymans@redhat.com> - 1.4.5-6
changelog:
  - Fix h264 and h265 buffer size checks
  - Fix mpegts pat parsing and add more size checks
  Resolves: rhbz#1400898


author: Jarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8
changelog:
  - Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426)
  - Fix up Obsoletes to all use <= comparisons


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.12.1.el7]
changelog:
  - [alsa] control: Make sure that id->index does not overflow (Jaroslav Kysela) [1117313 1117314] {CVE-2014-4656}
  - [alsa] control: Handle numid overflow (Jaroslav Kysela) [1117313 1117314] {CVE-2014-4656}
  - [alsa] control: Protect user controls against concurrent access (Jaroslav Kysela) [1117338 1117339] {CVE-2014-4652}
  - [alsa] control: Fix replacing user controls (Jaroslav Kysela) [1117323 1117324] {CVE-2014-4654 CVE-2014-4655}
  - [net] sctp: fix remote memory pressure from excessive queueing (Daniel Borkmann) [1155750 1152755] {CVE-2014-3688}
  - [net] sctp: fix panic on duplicate ASCONF chunks (Daniel Borkmann) [1155737 1152755] {CVE-2014-3687}
  - [net] sctp: fix skb_over_panic when receiving malformed ASCONF chunks (Daniel Borkmann) [1147856 1152755] {CVE-2014-3673}
  - [net] sctp: handle association restarts when the socket is closed (Daniel Borkmann) [1147856 1152755] [1155737 1152755] [1155750 1152755]
  - [pci] Add ACS quirk for Intel 10G NICs (Alex Williamson) [1156447 1141399]
  - [pci] Add ACS quirk for Solarflare SFC9120 & SFC9140 (Alex Williamson) [1158316 1131552]
  - [lib] assoc_array: Fix termination condition in assoc array garbage collection (David Howells) [1155136 1139431] {CVE-2014-3631}
  - [block] cfq-iosched: Add comments on update timing of weight (Vivek Goyal) [1152874 1116126]
  - [block] cfq-iosched: Fix wrong children_weight calculation (Vivek Goyal) [1152874 1116126]
  - [powerpc] mm: Check paca psize is up to date for huge mappings (Gustavo Duarte) [1151927 1107337]
  - [x86] perf/intel: ignore CondChgd bit to avoid false NMI handling (Don Zickus) [1146819 1110264]
  - [x86] smpboot: initialize secondary CPU only if master CPU will wait for it (Phillip Lougher) [1144295 968147]
  - [x86] smpboot: Log error on secondary CPU wakeup failure at ERR level (Igor Mammedov) [1144295 968147]
  - [x86] smpboot: Fix list/memory corruption on CPU hotplug (Igor Mammedov) [1144295 968147]
  - [acpi] processor: do not mark present at boot but not onlined CPU as onlined (Igor Mammedov) [1144295 968147]
  - [fs] udf: Avoid infinite loop when processing indirect ICBs (Jacob Tanenbaum) [1142321 1142322] {CVE-2014-6410}
  - [hid] picolcd: fix memory corruption via OOB write (Jacob Tanenbaum) [1141408 1141409] {CVE-2014-3186}
  - [usb] serial/whiteheat: fix memory corruption flaw (Jacob Tanenbaum) [1141403 1141404] {CVE-2014-3185}
  - [hid] fix off by one error in various _report_fixup routines (Jacob Tanenbaum) [1141393 1141394] {CVE-2014-3184}
  - [hid] logitech-dj: fix OOB array access (Jacob Tanenbaum) [1141211 1141212] {CVE-2014-3182}
  - [hid] fix OOB write in magicmouse driver (Jacob Tanenbaum) [1141176 1141177] {CVE-2014-3181}
  - [acpi] Fix bug when ACPI reset register is implemented in system memory (Nigel Croxon) [1136525 1109971]
  - [fs] vfs: fix ref count leak in path_mountpoint() (Ian Kent) [1122481 1122376] {CVE-2014-5045}
  - [kernel] ptrace: get_dumpable() incorrect tests (Jacob Tanenbaum) [1111605 1111606] {CVE-2013-2929}
  - [media] media-device: fix an information leakage (Jacob Tanenbaum) [1109776 1109777] {CVE-2014-1739}
  - [target] rd: Refactor rd_build_device_space + rd_release_device_space (Denys Vlasenko) [1108754 1108755] {CVE-2014-4027}
  - [block] blkcg: fix use-after-free in __blkg_release_rcu() by making blkcg_gq refcnt an atomic_t (Vivek Goyal) [1158313 1118436]
  - [virt] kvm: fix PIT timer race condition (Petr  Matousek) [1144879 1144880] {CVE-2014-3611}
  - [virt] kvm/vmx: handle invept and invvpid vm exits gracefully (Petr  Matousek) [1145449 1116936] [1144828 1144829] {CVE-2014-3645 CVE-2014-3646}


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.13.1.el7]
changelog:
  - [powerpc] mm: Make sure a local_irq_disable prevent a parallel THP split (Don Zickus) [1151057 1083296]
  - [powerpc] Implement __get_user_pages_fast() (Don Zickus) [1151057 1083296]
  - [scsi] vmw_pvscsi: Some improvements in pvscsi driver (Ewan Milne) [1144016 1075090]
  - [scsi] vmw_pvscsi: Add support for I/O requests coalescing (Ewan Milne) [1144016 1075090]
  - [scsi] vmw_pvscsi: Fix pvscsi_abort() function (Ewan Milne) [1144016 1075090]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.15.1.el7]
changelog:
  - [scsi] ipr: wait for aborted command responses (Gustavo Duarte) [1162734 1156530]
  - [scsi] reintroduce scsi_driver.init_command (Ewan Milne) [1146983 1105204]
  - [block] implement an unprep function corresponding directly to prep (Ewan Milne) [1146983 1105204]
  - [scsi] Revert: reintroduce scsi_driver.init_command (Ewan Milne) [1146983 1105204]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.16.1.el7]
changelog:
  - [fs] aio: block exit_aio() until all context requests are completed (Jeff Moyer) [1163992 1122092]
  - [fs] aio: add missing smp_rmb() in read_events_ring (Jeff Moyer) [1154172 1131312]
  - [fs] aio: fix reqs_available handling (Jeff Moyer) [1163992 1122092]
  - [fs] aio: report error from io_destroy() when threads race in io_destroy() (Jeff Moyer) [1163992 1122092]
  - [fs] aio: block io_destroy() until all context requests are completed (Jeff Moyer) [1163992 1122092]
  - [fs] aio: v4 ensure access to ctx->ring_pages is correctly serialised for migration (Jeff Moyer) [1163992 1122092]
  - [fs] aio/migratepages: make aio migrate pages sane (Jeff Moyer) [1163992 1122092]
  - [fs] aio: clean up and fix aio_setup_ring page mapping (Jeff Moyer) [1163992 1122092]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.18.1.el7]
changelog:
  - [net] ipv6: fib: fix fib dump restart (Panu Matilainen) [1172795 1163605]
  - [net] ipv6: drop unused fib6_clean_all_ro() function and rt6_proc_arg struct (Panu Matilainen) [1172795 1163605]
  - [net] ipv6: avoid high order memory allocations for /proc/net/ipv6_route (Panu Matilainen) [1172795 1163605]
  - [mm] numa: Remove BUG_ON() in __handle_mm_fault() (Rik van Riel) [1170662 1119439]
  - [fs] aio: fix race between aio event completion and reaping (Jeff Moyer) [1154172 1131312]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.19.1.el7]
changelog:
  - [mm] shmem: fix splicing from a hole while it's punched (Denys Vlasenko) [1118244 1118245] {CVE-2014-4171}
  - [mm] shmem: fix faulting into a hole, not taking i_mutex (Denys Vlasenko) [1118244 1118245] {CVE-2014-4171}
  - [mm] shmem: fix faulting into a hole while it's punched (Denys Vlasenko) [118244 1118245] {CVE-2014-4171}
  - [x86] traps: stop using IST for #SS (Petr  Matousek) [1172812 1172813] {CVE-2014-9322}
  - [net] vxlan: fix incorrect initializer in union vxlan_addr (Daniel Borkmann) [1156611 1130643]
  - [net] vxlan: fix crash when interface is created with no group (Daniel Borkmann) [1156611 1130643]
  - [net] vxlan: fix nonfunctional neigh_reduce() (Daniel Borkmann) [1156611 1130643]
  - [net] vxlan: fix potential NULL dereference in arp_reduce() (Daniel Borkmann) [1156611 1130643]
  - [net] vxlan: remove unused port variable in vxlan_udp_encap_recv() (Daniel Borkmann) [1156611 1130643]
  - [net] vxlan: remove extra newline after function definition (Daniel Borkmann) [1156611 1130643]
  - [net] etherdevice: Use ether_addr_copy to copy an Ethernet address (Stefan Assmann) [1156611 1091126]
  - [fs] splice: perform generic write checks (Eric Sandeen) [1163799 1155907] {CVE-2014-7822}
  - [fs] eliminate BUG() call when there's an unexpected lock on file close (Frank Sorenson) [1172266 1148130]
  - [net] sctp: fix NULL pointer dereference in af->from_addr_param on malformed packet (Daniel Borkmann) [1163094 1154002] {CVE-2014-7841}
  - [fs] lockd: Try to reconnect if statd has moved (Benjamin Coddington) [1150889 1120850]
  - [fs] sunrpc: Don't wake tasks during connection abort (Benjamin Coddington) [1150889 1120850]
  - [fs] cifs: NULL pointer dereference in SMB2_tcon (Jacob Tanenbaum) [1147528 1147529] {CVE-2014-7145}
  - [net] ipv6: addrconf: implement address generation modes (Jiri Pirko) [1144876 1107369]
  - [net] gre: add link local route when local addr is any (Jiri Pirko) [1144876 1107369]
  - [net] gre6: don't try to add the same route two times (Jiri Pirko) [1144876 1107369]
  - [fs] isofs: unbound recursion when processing relocated directories (Jacob Tanenbaum) [1142270 1142271] {CVE-2014-5471 CVE-2014-5472}
  - [fs] fs: seq_file: fallback to vmalloc allocation (Ian Kent) [1140302 1095623]
  - [fs] fs: /proc/stat: convert to single_open_size() (Ian Kent) [1140302 1095623]
  - [fs] fs: seq_file: always clear m->count when we free m->buf (Ian Kent) [1140302 1095623]


author: Cole Robinson <crobinso@redhat.com> - 2:2.4.0-1
changelog:
  - Rebased to version 2.4.0
  - Support for virtio-gpu, 2D only
  - Support for virtio-based keyboard/mouse/tablet emulation
  - x86 support for memory hot-unplug
  - ACPI v5.1 table support for 'virt' board


author: Cole Robinson <crobinso@redhat.com> - 2:2.4.0-4
changelog:
  - CVE-2015-6815: net: e1000: infinite loop issue (bz #1260225)
  - CVE-2015-6855: ide: divide by zero issue (bz #1261793)
  - CVE-2015-5278: Infinite loop in ne2000_receive() (bz #1263284)
  - CVE-2015-5279: Heap overflow vulnerability in ne2000_receive() (bz #1263287)


author: Cole Robinson <crobinso@redhat.com> - 2:2.4.0.1-1
changelog:
  - Rebased to version 2.4.0.1
  - CVE-2015-7295: virtio-net possible remote DoS (bz #1264393)
  - drive-mirror: Fix coroutine reentrance (bz #1266936)


author: Cole Robinson <crobinso@redhat.com> - 2:2.4.1-2
changelog:
  - Fix SSE4 emulation with accel=tcg (bz #1270703)
  - CVE-2015-8345: Fix infinite loop in eepro100 (bz #1285214)
  - CVE-2015-7504: Fix heap overflow in pcnet (bz #1286543)
  - CVE-2015-7512: Fix buffer overflow in pcnet (bz #1286549)


author: Cole Robinson <crobinso@redhat.com> - 2:2.4.1-5
changelog:
  - CVE-2015-7549: pci: null pointer dereference issue (bz #1291138)
  - CVE-2015-8558: DoS by infinite loop in ehci_advance_state (bz #1291309)
  - CVE-2015-8666: Heap-based buffer overrun during VM migration (bz #1294027)
  - CVE-2015-8744: vmxnet3: fix crash with short packets (bz #1295440)
  - CVE-2015-8745: vmxnet3: don't assert reading registers in bar0 (bz #1295442)


author: Daniel Veillard <veillard@redhat.com> - 1.2.14-1
changelog:
  - qemu: Implement memory device hotplug
  - Implement public API for virDomainPinIOThread
  - Implement public API for virDomainGetIOThreadsInfo
  - SRIOV NIC offload feature discovery
  - a lot of improvement and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 1.2.15-1
changelog:
  - Implement virDomainAddIOThread and virDomainDelIOThread
  - libxl: Introduce configuration file for libxl driver
  - Add VIR_DOMAIN_EVENT_ID_DEVICE_ADDED event
  - various improvements to parallels driver
  - a lot of improvement and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 1.2.16-1
changelog:
  - Introduce pci-serial
  - Introduce virDomainSetUserPassword API
  - libvirt: Introduce protected key mgmt ops
  - add domain vmport feature
  - various bug fixes and improvements


author: Daniel Veillard <veillard@redhat.com> - 1.2.17-1
changelog:
  - numerous improvements and refactoring of the parallels driver
  - hardening of vcpu code
  - hardening of migration code
  - a lot of improvement and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 1.2.19-1
changelog:
  - Big improvements on ppc64 support
  - New virDomainRename API
  - Support for QEMU new pci emulations
  - a number of improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 1.3.0-1
changelog:
  - virt-admin and administration API
  - various improvements in virtio devices support
  - log daemon, logging improvements and protocol
  - many bug fixes and improvements


author: Daniel Veillard <veillard@redhat.com> - 1.3.1-1
changelog:
  - Various improvements for the Xen libxl driver
  - rbd: Add support for wiping and cloning images to storage driver
  - PCI hostdev improvements and fixes
  - many bug fixes and improvements


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.3-5
changelog:
  - Removed executables from the library to allow parallel installation
    of x86-64 and x86 packages. The executables had testing purpose, and
    may be re-introduced in a separate package if needed.


author: Tadej Janež <tadej.j@nez.si> - 1:1.12.1-11
changelog:
  - Add gcc to BuildRequires to account for
    https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.14.1-2
changelog:
  - new version 1.14.1
  - Resolves: #1584426 - Upstream Nginx 1.14.0 is now available
  - Resolves: #1647255 - CVE-2018-16845 nginx: Denial of service and memory
    disclosure via mp4 module
  - Resolves: #1647259 - CVE-2018-16843 nginx: Excessive memory consumption
    via flaw in HTTP/2 implementation
  - Resolves: #1647258 - CVE-2018-16844 nginx: Excessive CPU usage via flaw
    in HTTP/2 implementation


author: Devrim GUNDUZ <devrim@gunduz.org> 9.1.0-1PGDG
changelog:
  - Update to 9.1.0 Gold, per
    http://www.postgresql.org/docs/9.1/static/release-9-1.html
  - Update several patches, per Tom's Fedora RPMs.


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 9.1.0-2PGDG
changelog:
  - Add plpgsql.control to -server subpackage, so initdb won't be broken (and we
    will not need to install -contrib subpackage)..


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 9.1.1-1PGDG
changelog:
  - Update to 9.1.1, per the changes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-1.html


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 9.1.1-2PGDG
changelog:
  - Explicitly Provide: versionless postgresql*, to satisfy dependencies
    in OS packages. Already did it in -jdbc package, and it worked.


author: Devrim GÜNDÜZ <devrim@gunduz.org> - 9.1.2-1PGDG
changelog:
  - Update to 9.1.2, per the changes described at
    http://www.postgresql.org/docs/9.1/static/release-9-1-2.html
  - Fix nls related build issues: Merge changes from F-16 branch.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.3-2
changelog:
  - Fedora kernels don't respond properly to panic=1 parameter (appears
    to be related to having debug enabled).  Add some upstream and one
    non-upstream patches to work around this.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.4-2
changelog:
  - New upstream version 1.1.4.
  - Remove 3 x patches which are now upstream.
  - This version can handle debug kernels (RHBZ#1002189).


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.5-1
changelog:
  - New upstream version 1.1.5.
  - Adds --accel option to select qemu acceleration mode.
  - Remove upstream patch.


author: Andreas Schneider <asn@redhat.com> - 4.7.0-1
changelog:
  - resolves: #1470048 - Rebase Samba to version 4.7.0
  - resolves: #1335710 - Improve performance of smbd for a lot
                         of new client connections


author: Andreas Schneider <asn@redhat.com> - 4.7.0-3
changelog:
  - related: #1470048 - Fix dependency issues
  - resolves: #1486318 - Move /var/lib/samba/lock to common package
  - resolves: #1497162 - Fix smbcacls command line password handling


author: Andreas Schneider <asn@redhat.com> - 4.7.1-3
changelog:
  - resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                         correctly
  - resolves: #1495490 - Fix client rename over SMB2
  - resolves: #1510598 - Fix client volume cmd over SMB2


author: Andreas Schneider <asn@redhat.com> - 4.7.1-5
changelog:
  - resolves: #1505940 - Fix 'net ads keytab list'
  - resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                         faster


author: Andreas Schneider <asn@redhat.com> - 4.7.1-6
changelog:
  - resolves: #1476153 - Handle SMB echo responses more gracefully
  - resolves: #1523212 - Fix SMB2 client read-after-free issue


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.13-3
changelog:
  - Resolves: #1308866 - CVE-2016-2390 squid: incorrect server error 
    handling resulting in denial of service


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.15-1
changelog:
  - new version 3.5.15
  - Resolves: #1311585 - squid: Multiple Denial of Service issues in 
    HTTP Response processing
  - Resolves: #1312267 - squid: SQUID-2016_2 advisory, multiple DoS issues


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.5.2-2
changelog:
  - Update to latest upstream version 3.5.2
  - Remove deprecated (and renamed) squid_msnt_auth basic auth helper. Only
    performs LM authentication and not considered useful in todays networks.


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.3-8
changelog:
  - Subpackage python2-unbound has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Paul Wouters <pwouters@redhat.com> - 1.9.3-1
changelog:
  - Updated to 1.9.3
  - Resolves: rhbz#1672578 unbound-1.9.2 is available
  - Resolves: rhbz#1694831 [/usr/lib/tmpfiles.d/unbound.conf:1] Line references path below legacy directory /var/run/
  - Resolves: rhbz# 1667387 [abrt] unbound: memmove(): unbound killed by SIGABRT


author: Paul Wouters <pwouters@redhat.com> - 1.9.4-1
changelog:
  - Fix build on rhel/centos systems
  - Resolves: rhbz#1767955 (CVE-2019-16866) uninitialized memory accesses leads to crash via a crafted NOTIFY query


author: Paul Wouters <pwouters@redhat.com> - 1.8.2-1
changelog:
  - Updated to 1.8.2.
  - Enabled deny ANY query support and edns-tcp-keepalive
  - Set serve-stale timeout to 4h
  - Updated unbound.conf for latest options


author: Cole Robinson <crobinso@redhat.com> - 1.1.0-6.git8ca8490c
changelog:
  - Update to latest git
  - Fix new VM disk image names when VM name changes (bz #1169141)
  - Fix missing virt-install dep on pygobject (bz #1195794)
  - Fix changing VM video type away from qxl (bz #1182710)
  - Don't use vmvga for ubuntu VMs on remote centos hosts (bz #1147662)
  - Clear vendor field when changing CPU (bz #1190851)
  - Drop bogus network domain name validation (bz #1195873)
  - Fix Fedora URL examples in virt-install man page (bz #1172818)
  - Fix misleading virt-install text after --import install (bz #1180558)


author: Cole Robinson <crobinso@redhat.com> - 1.1.0-7.git6dbe19bd8
changelog:
  - Catch ppc64le domaincapabilities errors (bz #1209723)
  - Fix missing install options for ppc64le (bz #1209720)
  - Allow adding SATA CDROM devices for q35 (bz #1207834)
  - Fix crashes with ssh spice connections (bz #1135808)
  - Drop incorrect dep on gnome-icon-theme (bz #1207061)


author: Cole Robinson <crobinso@redhat.com> - 1.2.1-1
changelog:
  - Rebased to version 1.2.1
  - Bugfix release
  - Fix connecting to older libvirt versions (Michał Kępień)
  - Fix connecting to VM console with non-IP hostname (Giuseppe Scrivano)
  - Fix addhardware/create wizard errors when a nodedev disappears
  - Fix adding a second cdrom via customize dialog


author: Cole Robinson <crobinso@redhat.com> - 1.2.1-3
changelog:
  - Fix errors with missing nodedevs (bz #1225771)
  - Fix CDROM media change if device is bootable (bz #1229819)
  - Fix adding iscsi pools (bz #1231558)
  - spec: Add LXC to default connection list (bz #1235972)
  - Fix backtrace when reporting OS error (bz #1241902)
  - Raise upper limits for lxc ID namespaces (bz #1244490)
  - Fix 'copy host CPU definition'
  - Fix displaying VM machine type when connecting to old libvirt
  - Fix qemu:///session handling in 'Add Connection' dialog
  - Fix default storage path for qemu:///session, it should be .local/share/...


author: Cole Robinson <crobinso@redhat.com> - 1.3.0-1
changelog:
  - Rebased to version 1.3.0
  - Error when trying to modify existing 9p share (bz #1257565)
  - virt-manager tries to create vmport device on non-x86 backends (bz #1259998)
  - Details/Virtual networks: Allow manually specifying a bridge for
    qemu:///session (bz #1212443)
  - [RFE] Improve Solaris 10 x86-64 support in virt-manager (bz #1262093)
  - No system tray icon in Cinnamon session (bz #1257949)
  - virt-install does not remove orphaned images on failure (bz #1212617)
  - virt-manager does not warn if it cannot find the network (bz #1212616)
  - Storage volume manager looses focus when a volume is deleted (bz #1279861)
  - Storage volume manager does not update free space (bz #1279940)
  - Reboot/Shutdown buttons does not work on aarch64 (bz #1212826)


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-2
changelog:
  - Include two upstream patches for detecting Xen and Linux VServer better
    (RHBZ#973663).
  - Modernize the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 1.13-3
changelog:
  - Suppress warning message on Amazon EC2:
    "grep: /proc/xen/capabilities: No such file or directory"


