# changelog

author: Kevin Fenzi <kevin@scrye.com> - 2.9.7-1
changelog:
  - Update to 2.9.7.
  - fixes CVE-2020-1733 CVE-2020-1735 CVE-2020-1740 CVE-2020-1746 CVE-2020-1753 CVE-2020-10684 CVE-2020-10685 CVE-2020-10691
  - Drop the -s from the shebang to allow ansible to use locally installed modules.


author: Kevin Fenzi <kevin@scrye.com> - 2.9.10-2
changelog:
  - Add patch for rabbitmq bug: https://patch-diff.githubusercontent.com/raw/ansible/ansible/pull/50381.patch


author: Ondra Machacek <omachace@redhat.com> 1.0.1-1
changelog:
  - Set runner_cache as defaultdict of dict.
  - Define ConnectionRefusedError for Python2.
  - Add ssh_private_key configuration option.
  - Add support to specify host port.
  - Add spec files.


author: Martin Necas <mnecas@redhat.com> 1.0.2-1
changelog:
  - Allow playbook parallel execution.
  - Add artifacts removal.
  - Apply logging configurations.
  - Handle connection to IPv6 hosts.


author: Martin Necas <mnecas@redhat.com> 1.0.4-1
changelog:
  - Fixes log rotation for Apache and Gunicorn based instances
  - Adds mocking of SSHClient in hostvars and inventory tests


author: Martin Perina <mperina@redhat.com> 1.0.7-1
changelog:
  - Fix oVirt logging
  - UBI8 Image Rebase
  - Fix post script error in Apache
  - Add proper logging when decoding JSON has failed
  - Add ignore for partial.json.tmp
  - Remove finished task from cache instead of the last one


author: Danilo de Paula <ddepaula@redhat.com> - 1.3.15-7
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1695587
    (Ensure modular RPM upgrade path)


author: Richard W.M. Jones <rjones@redhat.com> - 7.2-2
changelog:
  - Fix for handling guest filenames with invalid or incomplete
    multibyte or wide characters
    resolves: rhbz#1301593


author: Richard W.M. Jones <rjones@redhat.com> - 8.0-1
changelog:
  - Rebase to 2017.3.23.
  - Remove patches which are now upstream.
  - Resynch with Fedora package.
  - Enable all architectures for RHEL 8.


author: Richard W.M. Jones <rjones@redhat.com> - 8.0-3
changelog:
  - Fix for CVE-2019-9755
    (heap-based buffer overflow leads to local root privilege escalation)
    resolves: rhbz#1698503


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.2.0-4
changelog:
  - Resolves: rhbz#1649632 - libosinfo test suite should collect+report all
                             failures, not exit on first error


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.5.0-3
changelog:
  - Resolves: rhbz#1727843 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.8.0-1
changelog:
  - Resolves: rhbz#1815158 - Rebase to libosinfo the latest upstream release
  - Resolves: rhbz#1754394 - Provide information about UEFI support for guests (libosinfo)
  - Resolves: rhbz#1032520 - WHQL'ed drivers should be made available for Boxes/libosinfo users


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.2-1.20200527git7325acb477
changelog:
  - Update to v0.7.2 stable snapshot, fixes rhbz#1809676
  - exclude i686 build
  - Following stable-0.7.0 branch for TPM 2 related fixes: RSA decryption,
    PSS salt length, symmetric decryption (padding)
  - Under certain circumstances an RSA decryption could cause a buffer overflow causing
    termination of the program (swtpm)
  - Following stable-0.7.0 branch for TPM 2 related fixes; v0.7.1 + gcc related patch
  - elliptic curve fixes
  - MANUFACTURER changed from "IBM " to "IBM"
  - gcc 10 related fix
  - Following stable-0.7.0 branch for TPM 1.2 related bugfix


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.7.3-1.20200818git1d392d466a
changelog:
  - Update to v0.7.3 stable, fixes rhbz#1868447
  - (includes "tpm2: fix PCRBelongsTCBGroup for PCClient")


author: Jiri Denemark <jdenemar@redhat.com> - 5.6.0-1
changelog:
  - Rebased to libvirt-5.6.0 (rhbz#1705225)
  - The rebase also fixes the following bugs:
      rhbz#1643404, rhbz#1721375, rhbz#1724065, rhbz#1726609, rhbz#1726643
      rhbz#1727013, rhbz#1727866, rhbz#1729022, rhbz#1731332


author: Jiri Denemark <jdenemar@redhat.com> - 5.6.0-2
changelog:
  - Revert "tpm: Check TPM XML device configuration changes after edit" (rhbz#1739338)
  - qemu: Clarify error message in qemuMigrationSrcIsSafe (rhbz#1660575)
  - qemu: Check for drop-cache capability (rhbz#1660575)
  - qemu: Allow migration with disk cache on (rhbz#1660575)
  - qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1741796)
  - qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1741796)
  - qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1741796)
  - qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1741796)
  - qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1741796)
  - qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1741796)
  - qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1741796)
  - qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1741796)
  - qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1741796)
  - qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1741796)
  - qemu: Fix crash on incoming migration (rhbz#1741796)
  - network: fix crash during cleanup from failure to allocate port (rhbz#1741390)
  - network: replace virSaveLastError() with virErrorPreserveLast() (rhbz#1741390)
  - access: fix incorrect addition to virAccessPermNetwork (rhbz#1741428)
  - util: allow tap-based guest interfaces to have MAC address prefix 0xFE (rhbz#1743349)


author: Jiri Denemark <jdenemar@redhat.com> - 5.6.0-3
changelog:
  - vircgroupv2: fix parsing multiple values in single file (rhbz#1734353)
  - vircgroupv2: fix virCgroupV2GetCpuCfsQuota for "max" value (rhbz#1735740)
  - network: fix ability to use openvswitch with vlans (rhbz#1739554)
  - remote: use Wants instead of Requires for libvirtd sockets (rhbz#1741403)
  - remote: move timeout arg into sysconf file (rhbz#1741403)
  - remote: forbid the --listen arg when systemd socket activation (rhbz#1741403)
  - rpm: don't enable socket activation in upgrade if --listen present (rhbz#1741403)
  - qemuBuildHotpluggableCPUProps: use VIR_RETURN_PTR (rhbz#1741658)
  - qemu: Extract and store vCPU properties as qemu returned them (rhbz#1741658)
  - qemu: command: Use all vCPU properties when creating args for vCPU hotplug (rhbz#1741658)
  - qemu: alias: Generate 'qomName' of disk with useraliases (rhbz#1741838)


author: Jiri Denemark <jdenemar@redhat.com> - 5.6.0-4
changelog:
  - src: security: Replace bitwise OR with logical OR (rhbz#1740024)
  - security_util: Use more VIR_AUTOFREE() (rhbz#1740024)
  - security_util: Document virSecurityMoveRememberedLabel (rhbz#1740024)
  - security: Don't increase XATTRs refcounter on failure (rhbz#1740024)
  - util: Introduce virhostuptime (rhbz#1741140)
  - security_util: Remove stale XATTRs (rhbz#1741140)
  - security_util: verify xattrs only if ref is present (rhbz#1741140)
  - virSecuritySELinuxSetFileconImpl: Drop @optional argument (rhbz#1740506)
  - security_selinux: Drop virSecuritySELinuxSetFileconOptional() (rhbz#1740506)
  - security_selinux: Drop @optional from _virSecuritySELinuxContextItem (rhbz#1740506)
  - security_selinux: Drop virSecuritySELinuxSetFileconHelper (rhbz#1740506)
  - security_selinux: Play nicely with network FS that only emulates SELinux (rhbz#1740506)
  - qemu_blockjob: Print image path on failed security metadata move too (rhbz#1741456)
  - qemu_blockjob: Remove secdriver metadata more frequently (rhbz#1741456)
  - vircgroupv2: fix abort in VIR_AUTOFREE (rhbz#1747482)


author: Jiri Denemark <jdenemar@redhat.com> - 5.6.0-7
changelog:
  - qemu_blockjob: Remove secdriver metadata for whole backing chain on job completion (rhbz#1741456)
  - qemu_driver: Fix comment of qemuStateCleanup() (rhbz#1755303)
  - driver: Introduce virDriverShouldAutostart() (rhbz#1755303)
  - lib: autostart objects exactly once (rhbz#1755303)
  - Revert "src: Document autostart for session demon" (rhbz#1755303)
  - security: Pass @migrated to virSecurityManagerSetAllLabel (rhbz#1740024)
  - security: Rename virSecurityManagerGetDriver() to virSecurityManagerGetVirtDriver() (rhbz#1740024)
  - security: Introduce virSecurityManagerGetDriver() (rhbz#1740024)
  - security_stack: Turn list of nested drivers into a doubly linked list (rhbz#1740024)
  - security_stack: Perform rollback if one of stacked drivers fails (rhbz#1740024)
  - util: new function virNetDevMacVLanIsMacvtap() (rhbz#1723367)
  - util: make a couple virNetDevMacVlan*() functions public (rhbz#1723367)
  - qemu: reorganize qemuInterfaceEthernetConnect() (rhbz#1723367)
  - conf: use virXMLFormatElement for interface <target> (rhbz#1723367)
  - conf: new "managed" attribute for target dev of <interface type='ethernet'> (rhbz#1723367)
  - qemu: support unmanaged target tap dev for <interface type='ethernet'> (rhbz#1723367)
  - qemu: support unmanaged macvtap devices with <interface type='ethernet'> (rhbz#1723367)


author: Jiri Denemark <jdenemar@redhat.com> - 5.6.0-8
changelog:
  - qemu: avoid double reservation of PCI address for interface type='hostdev' (rhbz#1744523)
  - domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1744079)
  - domain_conf: Relax SCSI addr used check (rhbz#1744079)
  - cpu_conf: Pass policy to CPU feature filtering callbacks (rhbz#1756157)
  - qemuxml2*test: Add tests for Icelake-Server, -pconfig (rhbz#1756157)
  - qemu: Drop disabled CPU features unknown to QEMU (rhbz#1756157)
  - cputest: Add data for Ice Lake Server CPU (rhbz#1756157)
  - cpu_map: Drop pconfig from Icelake-Server CPU model (rhbz#1756157)
  - qemu: Fix NULL ptr dereference caused by qemuDomainDefFormatBufInternal (rhbz#1756157)


author: Jiri Denemark <jdenemar@redhat.com> - 5.6.0-9
changelog:
  - qemu: Separate image metadata removal into a function (rhbz#1741456)
  - qemuProcessStop: Remove image metadata for running mirror jobs (rhbz#1741456)
  - qemu: fix EFI nvram removal on domain undefine (rhbz#1751596)


author: Jiri Denemark <jdenemar@redhat.com> - 5.6.0-10
changelog:
  - util: introduce virPCIDeviceConfigOpenInternal (rhbz#1758330)
  - util: Introduce virPCIDeviceConfigOpenWrite (rhbz#1758330)
  - util: introduce readonly attribute to virPCIDeviceConfigOpenInternal (rhbz#1758330)
  - util: introduce virPCIDeviceConfigOpenTry (rhbz#1758330)
  - util: default to read-only in virPCIDeviceConfigOpen (rhbz#1758330)
  - virpcimock: Mock __open_2() (rhbz#1758330)
  - tests: virpcimock: Always declare __open_2 (rhbz#1758330)
  - qemu: Add support for setting string migration params (rhbz#1754533)
  - Introduce VIR_MIGRATE_PARAM_TLS_DESTINATION migration param (rhbz#1754533)
  - qemu: Implement VIR_MIGRATE_PARAM_TLS_DESTINATION (rhbz#1754533)
  - virsh: Add --tls-destination option for migrate command (rhbz#1754533)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-8
changelog:
  - util: storagefile: Drop image format probing by file suffix (rhbz#1798148)
  - virStorageFileGetMetadataRecurse: Remove impossible error report (rhbz#1798148)
  - virStorageFileGetMetadataRecurse: Shuffle around assignment of backing chain depth (rhbz#1798148)
  - virStorageFileGetMetadataRecurse: Expect NULL src->path (rhbz#1798148)
  - virStorageFileGetMetadataRecurse: Use virHashHasEntry instead of fake pointers (rhbz#1798148)
  - virStorageFileGetMetadataRecurse: Extract storage access (rhbz#1798148)
  - virStorageFileGetMetadataRecurse: Remove 'cleanup' label (rhbz#1798148)
  - tests: virstorage: Fix backing file format of created image (rhbz#1798148)
  - virStorageSourceUpdateCapacity: Drop 'probe' argument (rhbz#1798148)
  - util: storage: Store backing store format in virStorageSource (rhbz#1798148)
  - virStorageSourceNewFromBacking: Also transfer the format (rhbz#1798148)
  - virStorageBackendGlusterRefreshVol: Refactor handling of backing store (rhbz#1798148)
  - virStorageFileGetMetadataFromBuf: Remove 'backingFormat' argument (rhbz#1798148)
  - virStorageFileGetMetadataFromFD: Remove unused 'backingFormat' argument (rhbz#1798148)
  - qemu: domain: Convert detected 'iso' image format into 'raw' (rhbz#1798148)
  - virStorageFileGetMetadataRecurse: Allow format probing under special circumstances (rhbz#1798148)
  - kbase: backing_chains: Clarify some aspects of image probing (rhbz#1798148)
  - kbase: backing_chains: Add steps how to securely probe image format (rhbz#1798148)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-9
changelog:
  - conf: use virXMLFormatElement in virDomainFSDefFormat (rhbz#1694166)
  - qemu: use def instead of vm->def in qemuExtDevicesStart (rhbz#1694166)
  - qemu: eliminate ret in qemuExtDevicesStart (rhbz#1694166)
  - docs: render class="literal" with monospace font (rhbz#1694166)
  - docs: reduce excessive spacing in ToC for RST files (rhbz#1694166)
  - virDomainFSDefFree: Unref private data (rhbz#1694166)
  - schema: wrap fsDriver in a choice group (rhbz#1694166)
  - qemuExtDevicesStart: pass logManager (rhbz#1694166)
  - qemu: pass virDomainObjPtr to qemuExtDevicesSetupCgroup (rhbz#1694166)
  - qemuxml2xmltest: set driver as privileged (rhbz#1694166)
  - qemu: add QEMU_CAPS_DEVICE_VHOST_USER_FS (rhbz#1694166)
  - docs: add virtiofs kbase (rhbz#1694166)
  - conf: qemu: add virtiofs fsdriver type (rhbz#1694166)
  - conf: add virtiofs-related elements and attributes (rhbz#1694166)
  - qemu: add virtiofsd_debug to qemu.conf (rhbz#1694166)
  - qemu: validate virtiofs filesystems (rhbz#1694166)
  - qemu: forbid migration with vhost-user-fs device (rhbz#1694166)
  - qemu: add code for handling virtiofsd (rhbz#1694166)
  - qemu: put virtiofsd in the emulator cgroup (rhbz#1694166)
  - qemu: use the vhost-user schemas to find binary (rhbz#1694166)
  - qemu: build vhost-user-fs device command line (rhbz#1694166)
  - RHEL: virscsi: Check device type before getting it's /dev node name (rhbz#1808390)
  - RHEL: virscsi: Support TAPEs in virSCSIDeviceGetDevName() (rhbz#1808390)
  - RHEL: virscsi: Introduce and use virSCSIDeviceGetUnprivSGIOSysfsPath() (rhbz#1808390)
  - RHEL: virutil: Accept non-block devices in virGetDeviceID() (rhbz#1808390)
  - RHEL: qemuSetUnprivSGIO: Actually use calculated @sysfs_path to set unpriv_sgio (rhbz#1808390)
  - RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1808400)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-10
changelog:
  - security: Introduce VIR_SECURITY_DOMAIN_IMAGE_PARENT_CHAIN_TOP flag (rhbz#1803551)
  - qemu: Tell secdrivers which images are top parent (rhbz#1803551)
  - virDomainDiskTranslateSourcePool: Check for disk type correctly (rhbz#1811728)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-11
changelog:
  - virbuftest: remove extra G_GNUC_UNUSED markers (rhbz#1808499)
  - virbuftest: use g_autofree (rhbz#1808499)
  - virbuftest: remove unnecessary labels (rhbz#1808499)
  - virbuftest: declare testBufAddStrData earlier (rhbz#1808499)
  - virbuftest: use field names when initalizing test info (rhbz#1808499)
  - util: add virBufferTrimChars (rhbz#1808499)
  - conf: do not generate machine names ending with a dash (rhbz#1808499)
  - conf: Don't generate machine names with a dot (rhbz#1808499)
  - qemuAgentFSInfoFormatParams: Remove pointless returned value (rhbz#1812965)
  - qemuDomainGetGuestInfo: Don't try to free a negative number of entries (rhbz#1812965)
  - qemuDomainBlockPivot: Move check prior to executing the pivot steps (rhbz#1803092)
  - qemuDomainBlockCopyCommon: Record updated flags to block job (rhbz#1803092)
  - qemu: capabilities: Introduce QEMU_CAPS_BLOCKDEV_SNAPSHOT_ALLOW_WRITE_ONLY (rhbz#1803092)
  - qemu: blockcopy: Allow late opening of the backing chain of a shallow copy (rhbz#1803092)
  - qemuBlockStorageSourceDetachPrepare: Get rid of cleanup section (rhbz#1804750)
  - qemu: Don't take double pointer in qemuDomainSecretInfoFree (rhbz#1804750)
  - qemuMigrationParamsResetTLS: Adapt to modern memory management (rhbz#1804750)
  - qemuMigrationParamsResetTLS: Fix comment (rhbz#1804750)
  - qemuDomainSecretInfo: Register autoptr cleanup function (rhbz#1804750)
  - qemuDomainSecretAESSetup: Automatically free non-secret locals (rhbz#1804750)
  - qemuDomainSecretAESSetup: Allocate and return 'secinfo' here (rhbz#1804750)
  - qemuDomainSecretAESSetup: Split out lookup of secret data (rhbz#1804750)
  - Remove qemuDomainSecretInfoNew (rhbz#1804750)
  - qemu: Introduce another helper for creating alias for a 'secret' object (rhbz#1804750)
  - qemuDomainSecretStorageSourcePrepare: Fix naming of alias variables (rhbz#1804750)
  - qemuDomainDeviceDiskDefPostParseRestoreSecAlias: Hardcode restored aliases (rhbz#1804750)
  - qemu: Split out initialization of secrets for 'iscsi' hostdevs (rhbz#1804750)
  - qemuDomainSecretAESSetupFromSecret: Use 'qemuAliasForSecret' (rhbz#1804750)
  - qemuDomainSecretStorageSourcePrepare: Change aliases for disk secrets (rhbz#1804750)
  - qemuDomainGetSecretAESAlias: Replace outstanding uses with qemuAliasForSecret (rhbz#1804750)
  - conf: Add support for modifying ssl validation for https/ftps disks (rhbz#1804750)
  - conf: Add support for cookies for HTTP based disks (rhbz#1804750)
  - conf: Add support for setting timeout and readahead size for network disks (rhbz#1804750)
  - qemuDomainValidateStorageSource: Validate new network storage parameters (rhbz#1804750)
  - qemuxml2argvtest: Add test case for disks with http(s) source (rhbz#1804750)
  - qemu: block: Implement ssl verification configuration (rhbz#1804750)
  - qemu: domain: Store data for 'secret' object representing http cookies (rhbz#1804750)
  - qemuDomainSecretStorageSourcePrepare: Setup secret for http cookies (rhbz#1804750)
  - qemu: Handle hotplug and commandline for secret objects for http cookies (rhbz#1804750)
  - qemu: block: Add support for HTTP cookies (rhbz#1804750)
  - qemu: block: Implement readahead and timeout properties for 'curl' driver (rhbz#1804750)
  - virstoragefile: Add JSON parser for 'sslverify', 'readahead', 'cookies' and 'timeout' (rhbz#1804750)
  - virStorageSourceParseBackingJSONUri: Handle undocumented value 'off' for sslverify (rhbz#1804750)
  - qemublocktest: Load QMP schema earlier (rhbz#1804750)
  - qemublocktest: Extract schema root for blockdev-add validation (rhbz#1804750)
  - qemublocktest: XMLjsonXML: Test formatting/parsing of modern JSON (rhbz#1804750)
  - qemublocktest: Add JSON->JSON test cases for block device backends (rhbz#1804750)
  - qemu: Pass through arguments of 'ssh' block driver used by libguestfs (rhbz#1804750)
  - qemu: capabilities: Add QEMU_CAPS_BLOCKDEV_REOPEN (rhbz#1799013)
  - qemu: monitor: Add handler for blockdev-reopen (rhbz#1799013)
  - qemu: block: implement helpers for blockdev-reopen (rhbz#1799013)
  - qemuCheckpointDiscardBitmaps: Reopen images for bitmap modifications (rhbz#1799013)
  - qemuCheckpointDiscardBitmaps: Use correct field for checkpoint bitmap name (rhbz#1799013)
  - qemuDomainBlockCommit: Move checks depending on capabilities after liveness check (rhbz#1799013)
  - qemu: domain: Extract formatting of 'commit' blockjob data into a function (rhbz#1799013)
  - qemu: domain: Extract parsing of 'commit' blockjob data into a function (rhbz#1799013)
  - qemu: blockjob: Store list of bitmaps disabled prior to commit (rhbz#1799013)
  - qemublocktest: Fix and optimize fake image chain (rhbz#1799013)
  - qemu: block: Implement helpers for dealing with bitmaps during block commit (rhbz#1799013)
  - qemublocktest: Add tests for handling of bitmaps during block-commit (rhbz#1799013)
  - qemublocktest: Add more tests for block-commit bitmap handling with snapshots (rhbz#1799013)
  - qemublocktest: Add tests of broken bitmap chain handling during block-commit (rhbz#1799013)
  - qemuBlockJobDiskNewCommit: Propagate 'disabledBitmapsBase' (rhbz#1799013)
  - qemuDomainBlockCommit: Handle bitmaps on start of commit (rhbz#1799013)
  - qemuDomainBlockPivot: Handle merging of bitmaps when pivoting an active block-commit (rhbz#1799013)
  - qemu: blockjob: Handle bitmaps after finish of normal block-commit (rhbz#1799013)
  - qemu: blockjob: Re-enable bitmaps after failed block-commit (rhbz#1799013)
  - qemuDomainGetGuestInfo: don't assign NULL hostname (rhbz#1812965)
  - rhel: Enable usage of x-blockdev-reopen (rhbz#1799013)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-12
changelog:
  - qemuBlockBitmapsHandleCommitStart: Fix allocation of string list (rhbz#1799013)
  - qemuBlockBitmapsHandleCommitFinish: Use proper variable to iterate (rhbz#1799013)
  - qemublocktest: Add tests for re-enabling of bitmaps after commit (rhbz#1799013)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-14
changelog:
  - qemu: Don't crash when getting targets for a multipath (rhbz#1814947)
  - virSecretLookupDefCopy: Remove return value (rhbz#1814923)
  - virStorageEncryptionSecretCopy: Properly copy internals (rhbz#1814923)
  - vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1808610)
  - vmx: make 'fileName' optional for CD-ROMs (rhbz#1808610)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-15
changelog:
  - qemublocktest: Backport cleanups for testQemuDiskXMLToProps from dd94f36ffbe (rhbz#1804617)
  - conf: rename 'namespace' property of struct _virStorageSourceNVMeDef (rhbz#1804617)
  - qemublocktest: xml->json: Add test for NVMe (rhbz#1804617)
  - virDomainDiskSourceNVMeFormat: Format only valid 'managed' values (rhbz#1804617)
  - qemublocktest: xml->json: Refactor cleanup in test case functions (rhbz#1804617)
  - testQemuDiskXMLToPropsValidateFileSrcOnly: Move together with rest of xml->json code (rhbz#1804617)
  - qemuBlockGetBackingStoreString: Add 'pretty' argument (rhbz#1804617)
  - testQemuDiskXMLToProps: Store all per-image data in one structure (rhbz#1804617)
  - qemublocktest: Test backing store strings (rhbz#1804617)
  - qemuBlockGetBackingStoreString: Remove 'ret' variable (rhbz#1804617)
  - storage: Implement backing store support for "fat:" prefix (rhbz#1804617)
  - qemuBlockGetBackingStoreString: Add extra wrapping object to JSON strings (rhbz#1804617)
  - qemu: block: Extract formatting of cookie string (rhbz#1804617)
  - qemuBlockGetBackingStoreString: Properly handle 'http/s' with cookies and others (rhbz#1804617)
  - storage: Parse 'nvme' disk source properties from json:{} pseudo-uri (rhbz#1804617)
  - qemu: virtiofs: shorten pid filename (rhbz#1816577)
  - qemu: virtiofs: shorten socket filename (rhbz#1816577)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-16
changelog:
  - api: disallow virDomainAgentSetResponseTimeout() on read-only connections (rhbz#1814508)
  - qemuBackupBegin: Fix monitor access when rolling back due to failure (rhbz#1817327)
  - qemuxml2xmltest: Wire up 'disk-network-http' case (rhbz#1804750)
  - virStorageSourceNetCookieValidate: Accept quoted cookie value (rhbz#1804750)
  - qemu: block: Support VIR_DOMAIN_BLOCK_COMMIT/PULL/REBASE_RELATIVE with blockdev (rhbz#1818655)
  - qemuDomainSnapshotDiskPrepareOne: Don't load the relative path with blockdev (rhbz#1818655)
  - docs: formatdomain: Mention missing protocols (rhbz#1804750)
  - schemas: rng: Use interleave in the disk source element (rhbz#1804750)
  - conf: Add support for http(s) query strings (rhbz#1804750)
  - qemuBlockStorageSourceGetURI: Pass through query component (rhbz#1804750)
  - virStorageSourceParseBackingURI: Preserve query string of URI for http(s) (rhbz#1804750)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-17
changelog:
  - qemuDomainSnapshotDiskPrepareOne: Fix logic of relative backing store update (rhbz#1820016)
  - qemuCheckpointCreateXML: Check VM liveness first (rhbz#1819755)
  - qemu: checkpoint: Allow checkpoint redefine for offline VMs (rhbz#1819755)
  - virDomainCheckpointRedefinePrep: Set 'current' checkpoint if there isn't any (rhbz#1819755)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-25
changelog:
  - Upgrade components in virt:rhel module:stream for RHEL-8.3 release (rhbz#1828317)
  - conf: Don't format http cookies unless VIR_DOMAIN_DEF_FORMAT_SECURE is used (CVE-2020-14301)
  - util: Introduce a parser for kernel cmdline arguments (rhbz#1848997)
  - qemu: Check if s390 secure guest support is enabled (rhbz#1848997)
  - qemu: Check if AMD secure guest support is enabled (rhbz#1848997)
  - tools: Secure guest check on s390 in virt-host-validate (rhbz#1848997)
  - tools: Secure guest check for AMD in virt-host-validate (rhbz#1848997)
  - docs: Update AMD launch secure description (rhbz#1848997)
  - docs: Describe protected virtualization guest setup (rhbz#1848997)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-26
changelog:
  - qemu: blockjob: Don't base bitmap handling of active-layer block commit on QEMU_CAPS_BLOCKDEV_REOPEN (rhbz#1857779)
  - qemu: blockjob: Actually delete temporary bitmap on failed active commit (rhbz#1857779)
  - qemu: block: Remove 'active-write' bitmap even if there are no bitmaps to merge (rhbz#1857779)
  - qemuDomainBlockPivot: Rename 'actions' to 'bitmapactions' (rhbz#1857779)
  - qemuDomainBlockPivot: Ignore failures of creating active layer bitmap (rhbz#1857779)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-27
changelog:
  - src: assume sys/sysmacros.h always exists on Linux (rhbz#1860421)
  - virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1860421)
  - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1860421)
  - virdevmapper: Don't use libdevmapper to obtain dependencies (CVE-2020-14339, rhbz#1860421)
  - virDevMapperGetTargets: Don't ignore EBADF (rhbz#1860421)


author: Jiri Denemark <jdenemar@redhat.com> - 6.0.0-28
changelog:
  - virdevmapper: Don't cache device-mapper major (rhbz#1860421)
  - virdevmapper: Handle kernel without device-mapper support (rhbz#1860421)
  - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1860421)


author: Jiri Denemark <jdenemar@redhat.com> - 6.6.0-4
changelog:
  - vircgroupv2devices: fix counting entries in BPF map (rhbz#1833321)
  - qemu: fix crash in qemuDomainSetBlkioParameters without cgroups (rhbz#1808293)
  - RNG: Allow interleaving of /domain/cpu/numa/cell children (rhbz#1786303)


author: Jiri Denemark <jdenemar@redhat.com> - 6.6.0-5
changelog:
  - qemu: Do not error out when setting affinity failed (rhbz#1819801)
  - qemu: Fix comment in qemuProcessSetupPid (rhbz#1819801)
  - Do not report error when setting affinity is allowed to fail (rhbz#1819801)
  - qemu: Allow setting affinity to fail and don't report error (rhbz#1819801)
  - qemu: snapshot: Collect 'query-named-block-nodes' prior to memory migration (rhbz#1862472)
  - check for NULL before calling g_regex_unref (rhbz#1876907)
  - virsh: cmdScreenshot: fix cbdata passing to virshStreamSink (rhbz#1875195)
  - qemu: Do not silently allow non-available timers on non-x86 systems (rhbz#1754887)
  - qemuFirmwareFillDomain: Fill NVRAM template on migration too (rhbz#1852910)
  - virnuma: Report error when NUMA -> CPUs translation fails (rhbz#1724866)
  - virnuma: Use numa_nodes_ptr when checking available NUMA nodes (rhbz#1876956)
  - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1872611)
  - util: replace macvtap name reservation bitmap with a simple counter (rhbz#1837395)
  - util: assign tap device names using a monotonically increasing integer (rhbz#1837395)
  - util: virNetDevTapCreate: initialize fd to -1 (rhbz#1837395)


author: Jiri Denemark <jdenemar@redhat.com> - 6.6.0-6
changelog:
  - virDomainHostdevSubsysSCSIiSCSIClear: Inline contents into only caller (rhbz#1876467)
  - virDomainStorageNetworkParseHosts: Switch to a more modern XML parsing approach (rhbz#1876467)
  - virDomainHostdevSubsysSCSIHostDefParseXML: Switch to a more modern XML parsing approach (rhbz#1876467)
  - qemuxml2argvtest: hostdev-scsi-virtio-scsi: Add hostdev with useralias (rhbz#1876467)
  - conf: Add virStorageSource member for SCSI host device config data (rhbz#1876467)
  - tests: qemustatusxml2xmldata: Rename 'disk-secinfo-upgrade' case to 'upgrade' (rhbz#1876467)
  - tests: qemustatusxml2xmldata: Add local SCSI hostdev to 'upgrade' case (rhbz#1876467)
  - qemu: domain: Fill in (i)SCSI backend nodename if it is not present in status XML (rhbz#1876467)
  - qemuBuildHostdevSCSI(A|De)tachPrepare: Use virStorageSource in def for SCSI hostdevs (rhbz#1876467)
  - qemuBlockStorageSourceAttachData: remove 'storageNodeNameCopy' (rhbz#1876467)
  - qemu: domain: Extract preparation of hostdev specific data to a separate function (rhbz#1876467)
  - qemuDomainSecretHostdevPrepare: remove (rhbz#1876467)
  - qemuDomainPrepareHostdev: Allocate backend nodenames in the prepare function (rhbz#1876467)
  - qemuDomainPrepareHostdev: base hostdev secret object names on backend alias (rhbz#1876467)
  - qemuDomainPrepareHostdev: Don't base backend nodename on device alias (rhbz#1876467)
  - qemuxml2argvtest: hostdev-scsi-virtio-scsi: Use longer user-alias for SCSI hostdev (rhbz#1876467)
  - qemustatusxml2xml: backup-pull: Test private data formatting/parsing (rhbz#1870488)
  - qemu: backup: Remove note that TLS should be implemented (rhbz#1870488)
  - qemu: backup: Write TLS cert and secret object aliases into status XML (rhbz#1870488)
  - qemuxml2argvtest: hostdev-scsi-virtio-scsi: Add <readonly/> to one of the iSCSI hostdevs (rhbz#1868856)
  - qemuBuildHostdevSCSIAttachPrepare: Propagate 'readonly' flag also for iSCSI (rhbz#1868856)


author: Jiri Denemark <jdenemar@redhat.com> - 6.6.0-7
changelog:
  - rpc: gendispatch: handle empty flags (CVE-2020-25637)
  - rpc: add support for filtering @acls by uint params (CVE-2020-25637)
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
  - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
  - Add testdata for AMD EPYC 7502 (rhbz#1861703)
  - cpu_map: Defined and enable EPYC-Rome model (rhbz#1861703)
  - cputest: Update QEMU data for Ryzen 9 3900X (rhbz#1861703)
  - cpu_map: Remove monitor feature from EPYC-Rome (rhbz#1861703)


author: Jiri Denemark <jdenemar@redhat.com> - 6.6.0-8
changelog:
  - vircommand.c: write child pidfile before process tuning in virExec() (rhbz#1882093)
  - util: Avoid double free in virProcessSetAffinity (rhbz#1819801)
  - util: keep track of full GSource object not source ID number (rhbz#1894045)
  - util: avoid crash due to race in glib event loop code (rhbz#1894045)
  - qemu: Use g_autofree in qemuMigrationSrcConnect (rhbz#1638889)
  - qemu: Rework qemuMigrationSrcConnect (rhbz#1638889)
  - virsh: Reuse existing variable when parsing migrate --disks-port (rhbz#1638889)
  - qemu: Rework starting NBD server for migration (rhbz#1638889)
  - tests: Add simple test for virDomainMigrateCheckNotLocal (rhbz#1638889)
  - qemu: Allow NBD migration over UNIX socket (rhbz#1638889)
  - peer2peer migration: allow connecting to local sockets (rhbz#1638889)
  - qemu: Allow migration over UNIX socket (rhbz#1638889)
  - docs: migration: Fix syntax (rhbz#1638889)
  - qemu: Don't try to start NBD server twice (rhbz#1638889)


author: Jiri Denemark <jdenemar@redhat.com> - 6.6.0-9
changelog:
  - checkpoint: Mention that VIR_DOMAIN_CHECKPOINT_XML_SIZE may require running vm (rhbz#1874846)
  - man: virsh: Mention that '--size' for 'checkpoint-dumpxml' may require running vm (rhbz#1874846)
  - error: Introduce VIR_ERR_CHECKPOINT_INCONSISTENT error code (rhbz#1874846)
  - qemu: backup: Use VIR_ERR_CHECKPOINT_INCONSISTENT when starting a backup (rhbz#1874846)
  - checkpoint: Introduce VIR_DOMAIN_CHECKPOINT_REDEFINE_VALIDATE flag (rhbz#1874846)
  - virsh: checkpoint-create: Add support for VIR_DOMAIN_CHECKPOINT_REDEFINE_VALIDATE (rhbz#1874846)
  - conf: checkpoint: Split virDomainCheckpointRedefinePrep into two functions (rhbz#1874846)
  - qemu: checkpoint: Implement VIR_DOMAIN_CHECKPOINT_REDEFINE_VALIDATE (rhbz#1874846)
  - qemu: backup: Add partial validation of incremental backup checkpoint (rhbz#1874846)
  - Fix name prefix of VIR_DOMAIN_CHECKPOINT_REDEFINE_VALIDATE (rhbz#1874846)
  - virDomainCheckpointDefParse: Don't extract unused domain type (rhbz#1901830)
  - virDomainCheckpointDefParse: Use 'unsigned int' for flags (rhbz#1901830)
  - virDomainCheckpointRedefineCommit: Don't check ABI of definition in checkpoint (rhbz#1901830)
  - conf: checkpoint: Prepare internals for missing domain definition (rhbz#1901830)
  - conf: checkpoint: Don't require <domain> when redefining checkpoints (rhbz#1901830)
  - qemuDomainCheckpointLoad: Don't align disks when restoring config from disk (rhbz#1901830)
  - conf: Rename virCPUDefUpdateFeatureInternal (rhbz#1798004)
  - conf: Use enum in virCPUDefAddFeatureInternal (rhbz#1798004)
  - conf: Add virCPUDefAddFeatureIfMissing (rhbz#1798004)
  - cpu: Run arch specific code for virCPUUpdate for all custom CPUs (rhbz#1798004)
  - cpu_x86: Change the flow in virCPUx86Update (rhbz#1798004)
  - cpu_x86: Add support for marking features as removed from a CPU model (rhbz#1798004)
  - cpu_x86: Make sure removed features are always mentioned in CPU def (rhbz#1798004)
  - cpu_map: Drop 'monitor' from modern x86 CPU models (rhbz#1798004)


author: Jiri Denemark <jdenemar@redhat.com> - 6.6.0-10
changelog:
  - qemu: use g_autoptr for a virPCIDevice (rhbz#1901685)
  - util: simplify calling of virPCIDeviceDetectFunctionLevelReset() (rhbz#1901685)
  - util: simplify call to virPCIDeviceDetectPowerManagementReset() (rhbz#1901685)
  - util: make read error of PCI config file more detailed (rhbz#1901685)
  - util: change call sequence for virPCIDeviceFindCapabilityOffset() (rhbz#1901685)
  - util: make virPCIDeviceIsPCIExpress() more intelligent (rhbz#1901685)
  - qemu: remove redundant check for file length when determining PCIe vs. PCI (rhbz#1901685)


author: Jiri Denemark <jdenemar@redhat.com> - 6.6.0-11
changelog:
  - docs: Document SELinux caveats when migrating over UNIX sockets (rhbz#1638889)
  - qemu: Tweak debug message for qemuMigrationSrcPerformPeer2Peer3 (rhbz#1638889)
  - qemu: Fix possible segfault when migrating disks (rhbz#1638889)
  - docs: Slightly alter disks-uri description in virsh man (rhbz#1638889)
  - qemu: Extra check for NBD URI being specified (rhbz#1638889)


author: Jiri Denemark <jdenemar@redhat.com> - 6.4.0-1
changelog:
  - Rebased to libvirt-6.4.0 (rhbz#1809677)
  - The rebase also fixes the following bugs:
      rhbz#1235511, rhbz#1769598, rhbz#1839926, rhbz#1778819, rhbz#1783355
      rhbz#1813306, rhbz#1820040, rhbz#1822878, rhbz#1825785, rhbz#1829550
      rhbz#1832710


author: Jiri Denemark <jdenemar@redhat.com> - 6.5.0-1
changelog:
  - Rebased to libvirt-6.5.0 (rhbz#1809677)
  - The rebase also fixes the following bugs:
      rhbz#1432902, rhbz#1634829, rhbz#1640869, rhbz#1739221, rhbz#1823639
      rhbz#1826543, rhbz#1829543, rhbz#1829544, rhbz#1829545, rhbz#1837990
      rhbz#1838975, rhbz#1840307, rhbz#1845012, rhbz#1847234, rhbz#1847259
      rhbz#1847791, rhbz#1849516


author: Jiri Denemark <jdenemar@redhat.com> - 6.6.0-1
changelog:
  - Rebased to libvirt-6.6.0 (rhbz#1809677)
  - The rebase also fixes the following bugs:
      rhbz#1854372, rhbz#1602328, rhbz#1745059, rhbz#1786303, rhbz#1799010
      rhbz#1814573, rhbz#1821694, rhbz#1822631, rhbz#1829829, rhbz#1840053
      rhbz#1851016, rhbz#1852311, rhbz#1852741, rhbz#1854684, rhbz#1857204
      rhbz#1857735, rhbz#1857967, rhbz#1858260, rhbz#1860875


author: Jiri Denemark <jdenemar@redhat.com> - 6.6.0-3
changelog:
  - virdevmapper: Don't cache device-mapper major (rhbz#1867527)
  - virdevmapper: Handle kernel without device-mapper support (rhbz#1867527)
  - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1867527)
  - numa_conf: Properly check for caches in virDomainNumaDefValidate() (rhbz#1786303)
  - virfdstream: Use g_autofree in virFDStreamThreadDoRead() (rhbz#1852528)
  - virFDStreamMsgQueuePush: Clear pointer to passed message (rhbz#1852528)
  - virfdstream: Use autoptr for virFDStreamMsg (rhbz#1852528)
  - virfdstream: Use g_new0() instead of VIR_ALLOC() (rhbz#1852528)
  - virfdstream: Use VIR_AUTOCLOSE() (rhbz#1852528)
  - virfdstream: Drop some needless labels (rhbz#1852528)
  - libvirt-storage: Document volume upload/download stream format (rhbz#1852528)
  - virsh: Pass virshStreamCallbackDataPtr to virshStreamSink() and virshStreamSkip() (rhbz#1852528)
  - virsh: Track if vol-upload or vol-download work over a block device (rhbz#1852528)
  - virshStreamSkip: Emulate skip for block devices (rhbz#1852528)
  - virfdstream: Allow sparse stream vol-download (rhbz#1852528)
  - virshStreamInData: Handle block devices (rhbz#1852528)
  - virfdstream: Emulate skip for block devices (rhbz#1852528)
  - virnuma: Don't work around numa_node_to_cpus() for non-existent nodes (rhbz#1860231)


author: Jiri Denemark <jdenemar@redhat.com> - 6.6.0-7.2.el8
changelog:
  - util: keep track of full GSource object not source ID number (rhbz#1915601)
  - util: avoid crash due to race in glib event loop code (rhbz#1915601)


author: Jiri Denemark <jdenemar@redhat.com> - 6.6.0-7.3.el8
changelog:
  - qemu: use g_autoptr for a virPCIDevice (rhbz#1917827)
  - util: simplify calling of virPCIDeviceDetectFunctionLevelReset() (rhbz#1917827)
  - util: simplify call to virPCIDeviceDetectPowerManagementReset() (rhbz#1917827)
  - util: make read error of PCI config file more detailed (rhbz#1917827)
  - util: change call sequence for virPCIDeviceFindCapabilityOffset() (rhbz#1917827)
  - util: make virPCIDeviceIsPCIExpress() more intelligent (rhbz#1917827)
  - qemu: remove redundant check for file length when determining PCIe vs. PCI (rhbz#1917827)
  - util: validate pcie_cap_pos != 0 in virDeviceHasPCIExpressLink() (rhbz#1917827)
  - conf: Rename virCPUDefUpdateFeatureInternal (rhbz#1918571)
  - conf: Use enum in virCPUDefAddFeatureInternal (rhbz#1918571)
  - conf: Add virCPUDefAddFeatureIfMissing (rhbz#1918571)
  - cpu: Run arch specific code for virCPUUpdate for all custom CPUs (rhbz#1918571)
  - cpu_x86: Change the flow in virCPUx86Update (rhbz#1918571)
  - cpu_x86: Add support for marking features as removed from a CPU model (rhbz#1918571)
  - cpu_x86: Make sure removed features are always mentioned in CPU def (rhbz#1918571)
  - cpu_map: Drop 'monitor' from modern x86 CPU models (rhbz#1918571)


author: Dridi Boukelmoune <dridi.boukelmoune@gmail.com> - 2.3.0-1
changelog:
  - Bump version to 2.3.0
  - Update the URL
  - Rename the patch
  - Use more macros
  - Require iconv
  - Install the LSM file


author: Dridi Boukelmoune <dridi.boukelmoune@gmail.com> - 2.4.0-1
changelog:
  - Bump version to 2.4.0
  - Change the Source URL to get %{name}-%{version}.tar.gz
  - Ship the script as makeself.sh as per upstream documentation
  - Add a symbolic link to the previous script name (just makeself)


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.2-4
changelog:
  - Remove misguided LDFLAGS hack which removed server hardening.
    https://bugzilla.redhat.com/show_bug.cgi?id=1624149#c6
    resolves: rhbz#1624149


author: Danilo de Paula <ddepaula@redhat.com> - 1.12.1-2
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1725216
    (Ensure modular RPM upgrade path [rhel-av-8.1.0])


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.4-1
changelog:
  - Rebase nbdkit to latest 1.12 stable branch version.
  - Backport cacheextents filter from nbdkit 1.13.
  - Fix changelog order.
    resolves: rhbz#1705238


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.4-2
changelog:
  - Further patches see https://bugzilla.redhat.com/show_bug.cgi?id=1705238#c6
    resolves: rhbz#1705238


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.5-1
changelog:
  - Rebase to nbdkit 1.12.5.
  - Further patches see https://bugzilla.redhat.com/show_bug.cgi?id=1705238#c8
    resolves: rhbz#1705238


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.5-2
changelog:
  - CVE-2019-14850 wait until handshake complete before calling .open callback
    plus two related fixes
    resolves: rhbz#1757263


author: Richard W.M. Jones <rjones@redhat.com> - 1.16.2-1
changelog:
  - New stable release 1.16.2.
  - Add -D nbdkit.backend.* flags.
  - Add Python v2 API.
  - Add new extentlist filter.


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.0-1
changelog:
  - New upstream version 1.4.0.
  - New plugins: random, zero.
  - New bash tab completion subpackage.
  - Remove unused build dependencies.


author: Laine Stump <laine@redhat.com>
changelog:
  - Improve performance with large number of interfaces
     (Bug 1268384, Bug 1271341)
   - recognize bond devices with no slaves


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.6.1-5
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Timothy Redaelli <tredaelli@redhat.com> - 2.11.1-30
changelog:
  - Add a RHEL-only patch to read the OVS_USER_ID from
    /etc/openvswitch/default.conf and /etc/sysconfig/openvswitch.
    This is needed for openvswitch2.11 < 2.11.0-43 compatibility (#1791388)


author: Dumitru Ceara <dceara@redhat.com> - 2.11.1-31
changelog:
  - Backport "tests: Updated expected log message" (#1781223)
  - Backport "nbctl: Log the source of duplicate IP addresses" (#1781223)
  - Backport "northd: Log all dynamic address assignments" (#1781223)
  - Backport "northd: Load config before processing nbdb contents" (#1781223)


author: Numan Siddique <nusiddiq@redhat.com> - 2.11.1-32
changelog:
  * Backport "[RFE] LB health check : ovn-northd: Consider load balancer active backends in router pipeline" (#1703162)


author: Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 2.11.1-35
changelog:
  - Backport "pinctrl: fix IP buffering with connection-tracking" (#1788193)
  - Backport "Manage ARP process locally in a DVR scenario" (#1788193)


author: Numan Siddique <nusiddiq@redhat.com> - 2.11.1-38
changelog:
  - Backport "ovn-northd: Don't add arp responder flows for lports with 'unknown' address." (#1805709)


author: Dumitru Ceara <dceara@redhat.com> - 2.11.1-39
changelog:
  - Backport "ovn-northd: Forward ARP requests on localnet ports." (#1816620)
  - Backport "ovn.at: Fix ARP test that fails due to timing." (#1816620)


author: Daniel P. Berrangé <berrange@redhat.com> - 5.6.0-2
changelog:
  - Fix misc POD docs typos
  - Resolves: rhbz#1747319
  - Fix network port creation
  - Resolves: rhbz#1743062


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.2-17
changelog:
  - Subpackage python2-funcsigs has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Dan Callaghan <djc@djc.id.au> - 19.9.0-5
changelog:
  - dropped python2-gunicorn subpackage (RHBZ#1741012)
  - /usr/bin/gunicorn is now the Python 3 version
  - fix logging of username with HTTP Basic auth (RHBZ#1730791)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:0.11.0-8
changelog:
  - Python 2 binary package renamed to python2-lockfile
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Fabio Valentini <decathorpe@gmail.com> - 1:0.11.0-16
changelog:
  - Drop python2 sub-package. See:
    https://fedoraproject.org/wiki/Changes/F31_Mass_Python_2_Package_Removal
  - Refresh packaging for 2019, move docs to a sub-package.


author: Paul Howarth <paul@city-fan.org> - 2.5.0-1
changelog:
  - Update to 2.5.0
    - Add support for encrypt-then-MAC (ETM) schemes and two newer Diffie-Hellman
      group key exchange algorithms ('group14', using SHA256; and 'group16',
      using SHA512)
    - Add support for Curve25519 key exchange
    - Raise Cryptography dependency requirement to version 2.5 (from 1.5) and
      update some deprecated uses of its API
    - Add support for the modern (as of Python 3.3) import location of
      'MutableMapping' (used in host key management) to avoid the old location
      becoming deprecated in Python 3.8
  - Drop hard dependency on pyasn1 as it's only needed for optional GSSAPI
    functionality


author: Paul Howarth <paul@city-fan.org> - 2.5.1-1
changelog:
  - Update to 2.5.1
    - Fix Ed25519 key handling so certain key comment lengths don't cause
      'SSHException("Invalid key")' (GH#1306, GH#1400)


author: Paul Howarth <paul@city-fan.org> - 2.6.0-1
changelog:
  - Update to 2.6.0
    - Add a new keyword argument to 'SSHClient.connect' and
      '~paramiko.transport.Transport', 'disabled_algorithms', which allows
      selectively disabling one or more kex/key/cipher/etc algorithms; this can
      be useful when disabling algorithms your target server (or client) does not
      support cleanly, or to work around unpatched bugs in Paramiko's own
      implementation thereof (GH#1463)
    - Tweak many exception classes so their string representations are more
      human-friendly; this also includes incidental changes to some 'super()'
      calls (GH#1440, GH#1460)
    - Add backwards-compatible support for the 'gssapi' GSSAPI library, as the
      previous backend ('python-gssapi') has become defunct (GH#584, GH#1166,
      GH#1311)
    - 'SSHClient.exec_command' now returns a new subclass,
      '~paramiko.channel.ChannelStdinFile', rather than a naïve
      '~paramiko.channel.ChannelFile' object for its 'stdin' value, which fixes
      issues such as hangs when running remote commands that read from stdin
      (GH#322)
  - Drop gssapi patch as it's no longer needed
  - Drop pytest-relaxed patch as it's no longer needed


author: Paul Howarth <paul@city-fan.org> - 2.7.0-1
changelog:
  - Update to 2.7.0
    - Implement support for OpenSSH 6.5-style private key files (typically
      denoted as having 'BEGIN OPENSSH PRIVATE KEY' headers instead of PEM
      format's 'BEGIN RSA PRIVATE KEY' or similar); if you were getting any sort
      of weird auth error from "modern" keys generated on newer operating system
      releases (such as macOS Mojave), this is the first update to try (GH#602,
      GH#618, GH#1313, GH#1343)
    - Token expansion in 'ssh_config' used a different method of determining the
      local username ('$USER' environment variable), compared to what the (much
      older) client connection code does ('getpass.getuser', which includes
      '$USER' but may check other variables first, and is generally much more
      comprehensive); both modules now use 'getpass.getuser'
    - A couple of outright '~paramiko.config.SSHConfig' parse errors were
      previously represented as vanilla 'Exception' instances; as part of recent
      feature work a more specific exception class,
      '~paramiko.ssh_exception.ConfigParseError', has been created; it is now
      also used in those older spots, which is naturally backwards compatible
    - Implement support for the 'Match' keyword in 'ssh_config' files;
      previously, this keyword was simply ignored and keywords inside such blocks
      were treated as if they were part of the previous block (GH#717)
      - Note: this feature adds a new optional install dependency 'Invoke'
        (https://www.pyinvoke.org), for managing 'Match exec' subprocesses
    - Additional installation 'extras_require' "flavors" ('ed25519', 'invoke',
      and 'all') have been added to our packaging metadata
    - Paramiko's use of 'subprocess' for 'ProxyCommand' support is conditionally
      imported to prevent issues on limited interpreter platforms like Google
      Compute Engine; however, any resulting 'ImportError' was lost instead of
      preserved for raising (in the rare cases where a user tried leveraging
      'ProxyCommand' in such an environment); this has been fixed
    - Perform deduplication of 'IdentityFile' contents during 'ssh_config'
      parsing; previously, if your config would result in the same value being
      encountered more than once, 'IdentityFile' would contain that many copies
      of the same string
    - Implement most 'canonical hostname' 'ssh_config' functionality
      ('CanonicalizeHostname', 'CanonicalDomains', 'CanonicalizeFallbackLocal',
      and 'CanonicalizeMaxDots'; 'CanonicalizePermittedCNAMEs' has *not* yet
      been implemented) - all were previously silently ignored (GH#897)
    - Explicitly document which ssh_config features we currently support;
      previously users just had to guess, which is simply no good
    - Add new convenience classmethod constructors to
      '~paramiko.config.SSHConfig': '~paramiko.config.SSHConfig.from_text',
      '~paramiko.config.SSHConfig.from_file', and
      '~paramiko.config.SSHConfig.from_path'; no more annoying two-step process!
  - Add Recommends: of python3-invoke and python3-pyasn1 for optional
    functionality


author: Paul Howarth <paul@city-fan.org> - 2.7.1-1
changelog:
  - Update to 2.7.1
    - The new-style private key format (added in 2.7.0) suffered from an
      unpadding bug that had been fixed earlier for Ed25519 (as that key type has
      always used the newer format); that fix has been refactored and applied to
      the base key class (GH#1567)
    - Fix a bug in support for ECDSA keys under the newly-supported OpenSSH key
      format (GH#1565, GH#1566)


author: Paul Howarth <paul@city-fan.org> - 2.7.1-4
changelog:
  - Avoid FTBFS with pytest 5 (pytest-relaxed pulls in pytest 4)
  - Drop explicit dependencies for things that the python dependency generator
    finds by itself


author: Paul Howarth <paul@city-fan.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
    - Update our CI to catch issues with sdist generation, installation and
      testing
    - Add missing test suite fixtures directory to MANIFEST.in, reinstating the
      ability to run Paramiko's tests from an sdist tarball (GH#1727)
    - Remove leading whitespace from OpenSSH RSA test suite static key fixture,
      to conform better to spec. (GH#1722)
    - Fix incorrect string formatting causing unhelpful error message annotation
      when using Kerberos/GSSAPI
    - Fix incorrectly swapped order of 'p' and 'q' numbers when loading
      OpenSSH-format RSA private keys; at minimum this should address a slowdown
      when using such keys, and it also means Paramiko works with Cryptography
      3.1 and above, which complains strenuously when this problem appears
      (GH#1723)


author: Miro Hrončok <mhroncok@redhat.com> - 1.6.4-3
changelog:
  - Subpackage python2-pyperclip has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 2.3.0-15
changelog:
  - Subpackage python2-testtools has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.0-13
changelog:
  - Subpackage python2-websockify has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.2-4
changelog:
  - Subpackage python2-wrapt has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0 (#1768982) for Python 3.9 support (#1788494)
  - Drop old obsoletes for platform-python-six


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.7-3
changelog:
  - Subpackage python2-bcrypt has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.4-7
changelog:
  - Subpackage python2-blinker has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.8-7
changelog:
  - Subpackage python2-cmd2 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 2.7-3
changelog:
  - Skip unit tests that fail with OpenSSL 1.1.1.d
  - Resolves: rhbz#1761194
  - Fix and simplify Python 3 packaging


author: Miro Hrončok <mhroncok@redhat.com> - 2.2.3-6
changelog:
  - Subpackage python2-daemon has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.0-10
changelog:
  - Subpackage python2-extras has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.0-16
changelog:
  - Subpackage python2-fixtures has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.3.7-1
changelog:
  - Update to upstream 0.3.7 release
  - Drop upstreamed patch: 0003-Fix-tests_api-list-traceback.patch
  - Drop upstreamed patch: 0001-Fix-arguments-with-type-list-705.patch
  - Drop upstreamed patch: 0002-Support-aniso8601-3.0-in-tests.patch
  - Drop no longer needed patch: python-flask-restful.remove_q0_testcase.patch
  - Drop Fedora 27 support
  - Drop Python 2 support


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.0-16
changelog:
  - Subpackage python2-fluidity-sm has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Antonio Trande <sagitterATfedoraproject.org> - 0.17.1-0.2.20190506git23989c4
changelog:
  - Bump to a pre-release 0.17.1, commit #23989c4
  - Unversioned commands point to Python3 on Fedora
  - Obsolete Python2 version on Fedora


author: Athmane Madjoudj <athmane@fedoraproject.org> - 1.2.0-1
changelog:
  - Update to 1.2.0 (rhbz #1600756)
  - Remove upstreamed patches
  - Add patch for bypass vendorized libs


author: Paul Howarth <paul@city-fan.org> - 1.4.0-1
changelog:
  - Update to 1.4.0 (#1787868)
    - A corner case in #~invoke.context.Context.run# caused overridden streams to
      be unused if those streams were also set to be hidden, e.g.
      'run(command, hide=True, out_stream=StringIO())' would result in no writes
      to the 'StringIO' object (GH#637); this has been fixed - hiding for a given
      stream is now ignored if that stream has been set to some non-'None' (and
      in the case of 'in_stream', non-'False') value.
    - As part of feature work on GH#682, we noticed that the
      '~invoke.runners.Result' return value from '~invoke.context.Context.run'
      was inconsistent between dry-run and regular modes; for example, the
      dry-run version of the object lacked updated values for 'hide', 'encoding'
      and 'env' - this has been fixed
    - Add asynchronous behavior to '~invoke.runners.Runner.run' (GH#194, GH#682):
      - Basic asynchronicity, where the method returns as soon as the subprocess
        has started running, and that return value is an object with methods
        allowing access to the final result
      - "Disowning" subprocesses entirely, which not only returns immediately but
        also omits background threading, allowing the subprocesses to outlive
        Invoke's own process
      See the updated API docs for the '~invoke.runners.Runner' for details on
      the new 'asynchronous' and 'disown' kwargs enabling this behavior
    - Never accompanied the top-level singleton '~invoke.run' (which simply wraps
      an anonymous '~invoke.context.Context's 'run' method) with its logical
      sibling, '~invoke.sudo' - this has been remedied


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7-12
changelog:
  - Python 2 binary package renamed to python2-junitxml
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.0-8
changelog:
  - Subpackage python2-lexicon has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.0-24
changelog:
  - Subpackage python2-linecache2 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.35.2-4
changelog:
  - Subpackage python2-m2crypto has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.0.14-4
changelog:
  - Subpackage python2-notario has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Björn Esser <besser82@fedoraproject.org> - 1.7.1-2
changelog:
  - Use new python macros
  - Add conditional to turn off python2 packages
  - Remove egg(-info) before build
  - Run testsuite


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.1-3
changelog:
  - Subpackage python2-passlib has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.3-2
changelog:
  - Subpackage python2-pbr has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 4.6-2
changelog:
  - Drop explicit locale setting
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.1-2
changelog:
  - Rebuilt for Python 3.7
  - Prolong the deadline for tests on s390x
  - Don't ignore the test results on arm, do the same as on s390x


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.0-5
changelog:
  - Subpackage python2-pynacl has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 6.5-10
changelog:
  - Python2 binary package has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Raphael Groner <projects.rg@smart.ms> - 6.7.1-1
changelog:
  - new version
  - introduce dependency generator
  - use github for release tarball, due to pypi provides zip only
  - drop duplicate README.rst, tests are obsolete
  - add python3 subpackages for epel7, readd python2 but epel7 only


author: Miro Hrončok <mhroncok@redhat.com> - 1.5.0-7
changelog:
  - Subpackage python2-straight-plugin has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jerry James <loganjerry@gmail.com> - 1.3.0-18
changelog:
  - The python iso8601 module in Fedora has diverged too much from the bundled
    version.  Allow this package to bundle it (bz 1811697).


author: Jerry James <loganjerry@gmail.com> - 1.3.0-19
changelog:
  - Drop the -decode-binary-to-unicode patch; it doesn't work with the bundled
    version of iso8601.
  - Add 0003 and 0004 patches to fix bugs reported to upstream.


author: Miro Hrončok <mhroncok@redhat.com> - 0.0.20-20
changelog:
  - Subpackage python2-testrepository has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.0-17
changelog:
  - Subpackage python2-testscenarios has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.4.0-25
changelog:
  - Subpackage python2-traceback2 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.1.7-10
changelog:
  - Subpackage python2-wcwidth has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.0-2.20200828git0c238a2
changelog:
  - Backport fixes from 0.4.0 stable branch. Resolves: rhbz#1868375
    (fixes usage of swtpm-localca with passwords when signing keys)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.2-1.20201201git2df14e3
changelog:
  - Update to 0.4.2, to address potential symlink vulnerabilities (CVE-2020-28407).
    Resolves: rhbz#1902862


