# changelog

author: Aristeu Rozanski <aris@redhat.com> [2.6.32-611.el6]
changelog:
  - [target] fcoe: Add tag support to tcm_fc (Andy Grover) [882092]
  - [scsi] don't store LUN bits in CDB byte 1 for USB mass-storage devices (Ewan Milne) [1255846]
  - [scsi] usb-storage: add try_rc_10_first flag (Ewan Milne) [1255846]
  - [scsi] usb-storage: add flags for VPD pages and REPORT LUNS (Ewan Milne) [1255846]
  - [mm] hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a fault (Andrea Arcangeli) [1291248]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-612.el6]
changelog:
  - [netdrv] ixgbevf: Minor cleanups (John Greene) [1249245]
  - [netdrv] ixgbevf: fix spoofed packets with random MAC (John Greene) [1249245]
  - [netdrv] ixgbevf: use ether_addr_copy instead of memcpy (John Greene) [1249245]
  - [netdrv] ixgbevf: Limit lowest interrupt rate for adaptive interrupt moderation to 12K (John Greene) [1249245]
  - [netdrv] drivers/net/intel: use napi_complete_done - ixgbevf only (John Greene) [1249245]
  - [netdrv] ixgbevf: add support for reporting RSS key and hash table for X550 (John Greene) [1249245]
  - [netdrv] ixgbevf: Set Rx hash type for ingress packets (John Greene) [1249245]
  - [netdrv] ixgbevf: fold ixgbevf_pull_tail into ixgbevf_add_rx_frag (John Greene) [1249245]
  - [netdrv] ixgbevf: Use dev_kfree_skb_any in xmit path, not dev_kfree_skb (John Greene) [1249245]
  - [netdrv] ixgbevf: Add the appropriate ethtool ops to query RSS indirection table and key (John Greene) [1249245]
  - [netdrv] ixgbevf: Add RSS Key query code (John Greene) [1249245]
  - [netdrv] ixgbevf: Add a RETA query code (John Greene) [1249245]
  - [netdrv] ixgbevf: Use ether_addr_copy instead of memcpy (John Greene) [1249245]
  - [netdrv] ixgbevf: Fix code comments and whitespace (John Greene) [1249245]
  - [netdrv] ethernet: codespell comment spelling fixes (John Greene) [1249245]
  - [netdrv] ixgbevf: combine all of the tasks into a single service task (John Greene) [1249245]
  - [netdrv] ixgbevf: rewrite watchdog task to function similar to igbvf (John Greene) [1249245]
  - [netdrv] ethernet/intel: Use eth_skb_pad and skb_put_padto helpers - ixgbevf only (John Greene) [1249245]
  - [netdrv] ixgbevf: add netpoll support (John Greene) [1249244 1277784]
  - [netdrv] ixgbevf: compare total_rx_packets and budget in ixgbevf_clean_rx_irq (John Greene) [1249245]
  - [netdrv] ixgbevf: Change receive model to use double buffered page based receives (John Greene) [1249245]
  - [netdrv] ixgbevf: convert to ndo_fix_features - part 2 (John Greene) [1249244]
  - [netdrv] ixgbe: do not report 2.5 Gbps as supported (John Greene) [1249244]
  - [netdrv] ixgbe: Clear stale pool mappings (John Greene) [1249244]
  - [netdrv] ixgbe: Reorder search to work from the top down instead of bottom up (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for adding/removing VLAN on PF bypassing the VLVF (John Greene) [1249244]
  - [netdrv] ixgbe: Simplify configuration of setting VLVF and VLVFB (John Greene) [1249244]
  - [netdrv] ixgbe: Reduce VT code indent in set_vfta by introducing jump label (John Greene) [1249244]
  - [netdrv] ixgbe: Simplify definitions for regidx and bit in set_vfta (John Greene) [1249244]
  - [netdrv] ixgbe: Fix SR-IOV VLAN pool configuration (John Greene) [1249244]
  - [netdrv] ixgbe: Return error on failure to allocate mac_table (John Greene) [1249244]
  - [netdrv] ixgbe: Always turn PHY power on when requested (John Greene) [1249244]
  - [netdrv] ixgbe: Save VF info and take references (John Greene) [1249244]
  - [netdrv] ixgbe: Wait for master disable to be set (John Greene) [1249244]
  - [netdrv] ixgbe: Correct spec violations by waiting after reset (John Greene) [1249244]
  - [netdrv] ixgbe: Refactor MAC address configuration code (John Greene) [1249244]
  - [netdrv] ixgbe: Use private workqueue to avoid certain possible hangs (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for newer thermal alarm (John Greene) [1249244]
  - [netdrv] ixgbe: Prevent KR PHY reset in ixgbe_init_phy_ops_x550em (John Greene) [1249244]
  - [netdrv] ixgbe: Remove CS4227 diagnostic code (John Greene) [1249244]
  - [netdrv] ixgbe: Add KR mode support for CS4227 chip (John Greene) [1249244]
  - [netdrv] ixgbe: Fix handling of NAPI budget when multiple queues are enabled per vector (John Greene) [1249244]
  - [netdrv] ixgbe: fix multiple kernel-doc errors (John Greene) [1249244]
  - [netdrv] intel: use napi_complete_done (John Greene) [1249244]
  - [netdrv] drivers/net: get rid of unnecessary initializations in .get_drvinfo (John Greene) [1249244]
  - [netdrv] ixgbe: Check for setup_internal_link method (John Greene) [1249244]
  - [netdrv] ixgbe: Fix CS4227-related semaphore error on reset failure (John Greene) [1249244]
  - [netdrv] ixgbe: disable LRO by default (John Greene) [1249244]
  - [netdrv] ixgbe: add flow control ethertype to the anti-spoofing filter (John Greene) [1249244]
  - [netdrv] ixgbe: Advance version to 4.2.1 (John Greene) [1249244]
  - [netdrv] ixgbe: X540 thermal warning interrupt not a GPI (John Greene) [1249244]
  - [netdrv] ixgbe: Fix FCRTH value in VM-to-VM loopback mode (John Greene) [1249244]
  - [netdrv] ixgbe: Only clear adapter_stopped if ixgbe_setup_fc succeeded (John Greene) [1249244]
  - [netdrv] ixgbe: Correct several flaws with with DCA setup (John Greene) [1249244]
  - [netdrv] ixgbe: Add new X550EM SFP+ device ID (John Greene) [1249244]
  - [netdrv] ixgbe: Update ixgbe_disable_pcie_master flow for X550 (John Greene) [1249244]
  - [netdrv] ixgbe: Add small packet padding support for X550 (John Greene) [1249244]
  - [netdrv] ixgbe: Correct setting of RDRXCTL register for X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: Correct error path in semaphore handling (John Greene) [1249244]
  - [netdrv] ixgbe: Limit SFP polling rate (John Greene) [1249244]
  - [netdrv] ixgbe: Allow SFP+ on more than 82598 and 82599 (John Greene) [1249244]
  - [netdrv] ixgbe: Add logic to reset CS4227 when needed (John Greene) [1249244]
  - [netdrv] ixgbe: Fix 1G and 10G link stability for X550EM_x SFP+ (John Greene) [1249244]
  - [netdrv] ixgbe: Add X550EM_x dual-speed SFP+ support (John Greene) [1249244]
  - [netdrv] ixgbe: Allow reduced delays during SFP detection (John Greene) [1249244]
  - [netdrv] ixgbe: Clear I2C destination location (John Greene) [1249244]
  - [netdrv] ixgbe: Enable bit-banging mode on X550 (John Greene) [1249244]
  - [netdrv] ixgbe: Set lan_id before first I2C eeprom access (John Greene) [1249244]
  - [netdrv] ixgbe: Provide unlocked I2C methods (John Greene) [1249244]
  - [netdrv] ixgbe: Provide I2C combined on X550EM (John Greene) [1249244]
  - [netdrv] ixgbe: Add X550EM support for SFP insertion interrupt (John Greene) [1249244]
  - [netdrv] ixgbe: Accept SFP not present errors on all devices (John Greene) [1249244]
  - [netdrv] ixgbe: Add fdir support for SCTP on X550 (John Greene) [1249244]
  - [netdrv] ixgbe: Add SFP+ detection for X550 hardware (John Greene) [1249244]
  - [netdrv] ixgbe: Teardown SR-IOV before unregister_netdev (John Greene) [1249244]
  - [netdrv] ixgbe: fix issue with SFP events with new X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: Resolve "initialized field overwritten" warnings (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for reporting 2.5G link speed (John Greene) [1249244]
  - [netdrv] ixgbe: fix bounds checking in ixgbe_setup_tc for 82598 (John Greene) [1249244]
  - [netdrv] ixgbe: support for ethtool set_rxfh (John Greene) [1249244]
  - [netdrv] ixgbe: Avoid needless PHY access on copper phys (John Greene) [1249244]
  - [netdrv] ixgbe: cleanup to use cached mask value (John Greene) [1249244]
  - [netdrv] ixgbe: Remove second instance of lan_id variable (John Greene) [1249244]
  - [netdrv] ixgbe: use kzalloc for allocating one thing (John Greene) [1249244]
  - [netdrv] ixgbe: Remove unused PCI bus types (John Greene) [1249244]
  - [netdrv] ixgbe: add new bus type for intergrated I/O interface (IOSF) (John Greene) [1249244]
  - [netdrv] ixgbe: add get_bus_info method for X550 (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for entering low power link up state (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for VXLAN RX offloads (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for UDP-encapsulated tx checksum offload (John Greene) [1249244]
  - [netdrv] ixgbe: Check whether FDIRCMD writes actually complete (John Greene) [1249244]
  - [netdrv] ixgbe: Assign set_phy_power dynamically where needed (John Greene) [1249244]
  - [netdrv] ixgbe: add new function to check for management presence (John Greene) [1249244]
  - [netdrv] ixgbe: Simplify port-specific macros (John Greene) [1249244]
  - [netdrv] ixgbe: Don't report flow director filter's status (John Greene) [1249244]
  - [netdrv] ixgbe: Specify Rx hash type WRT Rx desc RSS type (John Greene) [1249244]
  - [netdrv] ixgbe: only report generic filters in get_ts_info (John Greene) [1249244]
  - [netdrv] ixgbe: Remember to write ixfi changes after modifying (John Greene) [1249244]
  - [netdrv] ixgbe: fix X550 default set_phy_power method (John Greene) [1249244]
  - [netdrv] ixgbe: Set lan_id before using I2C (John Greene) [1249244]
  - [netdrv] ixgbe: add link check for X550 copper (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for another X550 device (John Greene) [1249244]
  - [netdrv] ixgbe: fix X550 PHY function pointers (John Greene) [1249244]
  - [netdrv] ixgbe: fix X550 devices init flow (John Greene) [1249244]
  - [netdrv] ixgbe: fix bug in not clearing counters for X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: fix issue with sfp events with new X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: add support for interrupts from X550 external PHY (John Greene) [1249244]
  - [netdrv] ixgbe: Add const string for overheat message (John Greene) [1249244]
  - [netdrv] ixgbe: Add reset for X550 device (John Greene) [1249244]
  - [netdrv] ixgbe: add X550 support for external PHY and forced 1G/10G support (John Greene) [1249244]
  - [netdrv] ixgbe: Restore ESDP settings after MAC reset (John Greene) [1249244]
  - [netdrv] ixgbe: Add a PHY power state method (John Greene) [1249244]
  - [netdrv] ixgbe: add define for X557 PHY ID (John Greene) [1249244]
  - [netdrv] ixgbe: add support for WoL and autoneg FC for some X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: add array of MAC type dependent values (John Greene) [1249244]
  - [netdrv] ixgbe: Use a signed type to hold error codes (John Greene) [1249244]
  - [netdrv] ixgbe: Release semaphore bits in the right order (John Greene) [1249244]
  - [netdrv] ixgbe: Fix IOSF SB access issues (John Greene) [1249244]
  - [netdrv] ixgbe: Add GET_RSS_KEY command to VF-PF channel commands set (John Greene) [1249244]
  - [netdrv] ixgbe: Add a RETA query command to VF-PF channel API (John Greene) [1249244]
  - [netdrv] ixgbe: Add a new netdev op to allow/prevent a VF from querying an RSS info (John Greene) [1186052 1246195 1249244 1271403]
  - [netdrv] ixgbe: Add the appropriate ethtool ops to query RSS indirection table and key (John Greene) [1249244]
  - [netdrv] ixgbe: Refactor the RSS configuration code (John Greene) [1249244]
  - [netdrv] ixgbe: Drop unnecessary call to rcu_barrier (John Greene) [1249244]
  - [netdrv] ixgbe: adds x550 specific FCoE offloads (John Greene) [1249244]
  - [netdrv] ethernet: Use bool function returns of true/false instead of 1/0 (John Greene) [1249244]
  - [netdrv] ixgbe: cleanup make ixgbe_set_ethertype_anti_spoofing_X550 static (John Greene) [1249244]
  - [netdrv] ixgbe: Clean up type inconsistency (John Greene) [1249244]
  - [netdrv] ixgbe: add new wrapper for X550 support (John Greene) [1249244]
  - [netdrv] ethernet: codespell comment spelling fixes (John Greene) [1249244]
  - [netdrv] ixgbe: add Tx anti spoofing support (John Greene) [1249244]
  - [netdrv] ixgbe: add VXLAN offload support for X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: improve mac filter handling (John Greene) [1249244]
  - [netdrv] ixgbe: enable l2 forwarding acceleration for macvlans (John Greene) [1249244]
  - [netdrv] ixgbe: show <2 for encoding loss on PCIe Gen3 (John Greene) [1249244]
  - [netdrv] ixgbe: call pcie_get_mimimum_link to check if device has enough bandwidth (John Greene) [1249244]
  - [netdrv] revert "ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue" (John Greene) [1249244]
  - [netdrv] ixgbe: Add function for setting XPS queue mapping (John Greene) [1249244]
  - [netdrv] ixgbe: finish ixgbe: Update ixgbe to use new vlan accleration (John Greene) [1249244]
  - [netdrv] net/mlx5e: Assign random MAC address if needed (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Write vlan list into vport context (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Write UC/MC list and promisc mode into vport context (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Introduce access functions to modify/query vport vlans (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Introduce access functions to modify/query vport promisc mode (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Introduce access functions to modify/query vport state (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Introduce access functions to modify/query vport mac lists (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Update access functions to Query/Modify vport MAC address (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Add HW capabilities and structs for SR-IOV E-Switch (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Use the right DMA free function on TX path (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Max mtu comparison fix (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Added self loopback prevention (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Fix inline header size calculation (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Fix LSO vlan insertion (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Re-eanble client vlan TX acceleration (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Return error in case mlx5e_set_features fails (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Don't allow more than max supported channels (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Use the the real irqn in eq->irqn (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Wait for RX buffers initialization in a more proper manner (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Avoid NULL pointer access in case of configuration failure (Kamal Heib) [1246031]
  - [netdrv] ib/mlx5: Remove dead fmr code (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Wait for FW readiness on startup (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Add pci error handlers to mlx5_core driver (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix internal error detection conditions (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Use private health thread for each device (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Use accessor functions to read from device memory (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Prepare cmd interface to system errors handling (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Improve mlx5 messages (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Update health syndromes (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix wrong name in struct (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: New init and exit flow for mlx5_core (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix notification of page supplement error (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix async commands return code (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Remove redundant "err" variable usage (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix struct type in the DESTROY_TIR/TIS device commands (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Priv state flag not rolled-back upon netdev open error (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Disable VLAN filter in promiscuous mode (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Fix typo in mlx5_query_port_pvlc (Kamal Heib) [1246031]
  - [netdrv] ib/mlx5: Remove dead code from alloc_cached_mr (Kamal Heib) [1246031]
  - [netdrv] mlx5: Expose correct page_size_cap in device attributes (Kamal Heib) [1246031]
  - [netdrv] mlx5: Fix missing device local_dma_lkey (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Avoid accessing NULL pointer at ndo_select_queue (Kamal Heib) [1246031]
  - [netdrv] mlx5e: Fix sparse warnings in mlx5e_handle_csum (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Support RX CHECKSUM_COMPLETE (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Support ethtool get/set_pauseparam (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Ethtool link speed setting fixes (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: HW LRO changes/fixes (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Support smaller RX/TX ring sizes (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Add ethtool RSS configuration options (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Make RSS indirection table size a constant (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Have a single RSS Toeplitz hash key (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Support physical port counters (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Disable async events before unregister_netdev (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Rename/move functions following the ndo_stop flow change (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Light-weight netdev open/stop (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Introduce access function to modify RSS/LRO params (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Introduce the "Drop RQ" (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Unify the RX flow (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove the mlx5e_update_priv_params() function (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Introduce create/destroy RSS indir table access functions (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Do not use netdev_err before the netdev is registered (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Avoid redundant de-reference (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove redundant assignment of sq->user_index (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove redundant field mlx5e_priv->num_tc (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Use hard-coded 4K page size for RQ/SQ/CQ (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Check the return value of mlx5_command_exec (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Input IPSEC.SPI into the RX RSS hash function (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: cosmetics: use BIT instead of "1 <<", and others (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: TX latency optimization to save DMA reads (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Allocate DMA coherent memory on reader NUMA node (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Support ETH_RSS_HASH_XOR (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Set log_uar_page_sz for non 4K page size architecture (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Prefetch skb data on RX (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Pop cq outside mlx5e_get_cqe (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove mlx5e_cq.sqrq back-pointer (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove extra spaces (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Avoid TX CQE generation if more xmit packets expected (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Avoid redundant dev_kfree_skb() upon NOP completion (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove re-assignment of wq type in mlx5e_enable_rq (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Use skb_shinfo(skb)->gso_segs rather than counting them (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Static mapping of netdev priv resources to/from netdev TX queues (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Add transport domain to the ethernet TIRs/TISs (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Add transport domain alloc/dealloc support (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Support NETIF_F_SG (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Enforce max flow-tables level >= 3 (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Disable client vlan TX acceleration (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Add HW cacheline start padding (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Fix HW MTU settings (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: fix an error code (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix static checker warnings around system guid query flow (Kamal Heib) [1246031]
  - [netdrv] mlx5: Enable mutual support for IB and Ethernet (Kamal Heib) [1246031]
  - [netdrv] ib/mlx5: Don't create IB instance over Ethernet ports (Kamal Heib) [1246031]
  - [netdrv] ib/mlx5: Avoid using the MAD_IFC command under ISSI > 0 mode (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Add more query port helpers (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Use port number when querying port ptys (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Use port number in the query port mtu helpers (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Get vendor-id using the query adapter command (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Add new query HCA vport commands (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Make the vport helpers available for the IB driver too (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Check the return bitmask when querying ISSI (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Enable XRCs and SRQs when using ISSI > 0 (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Apply proper name convention to helpers (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_en: Add missing check for memory allocation failure (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Extend mlx5_core to support ConnectX-4 Ethernet functionality (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Ethernet resource handling files (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Ethernet Datapath files (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Set/Query port MTU commands (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Modify CQ moderation parameters (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Implement get/set port status (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Implement access functions of ptys register fields (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: New device capabilities handling (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: HW data structs/types definitions cleanup (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Set irq affinity hints (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core, mlx5_ib: Do not use vmap on coherent memory (Kamal Heib) [1246031]
  - [drm] revert 'drm/i915: resume MST after reading back hw state' (Rob Clark) [1292402]
  - [drm] i915: Wait for mst to finish suspending before disabling interrupts (Rob Clark) [1292402]
  - [drm] upstream sync to 4.4 (Rob Clark) [1135349 1248507]
  - [drm] nouveau/gr/gf117-: assume no PPC if NV_PGRAPH_GPC_GPM_PD_PES_TPC_ID_MASK is zero (Rob Clark) [1249814]
  - [drm] nouveau/gr/gf117-: read NV_PGRAPH_GPC_GPM_PD_PES_TPC_ID_MASK from correct GPC (Rob Clark) [1249814]
  - [drm] nouveau/gr/gf100-: split out per-gpc address calculation macro (Rob Clark) [1249814]
  - [drm] nouveau/bios: return actual size of the buffer retrieved via _ROM (Rob Clark) [1249814]
  - [drm] nouveau/pmu: remove whitelist for PGOB-exit WAR, enable by default (Rob Clark) [1218795 1218796]
  - [drm] nouveau/pmu/gk107: enable PGOB codepaths (Rob Clark) [1218795 1218796]
  - [drm] nouveau/pmu/gk104: check fuse to determine presence of PGOB (Rob Clark) [1218795 1218796]
  - [drm] radeon: Retry DDC probing on DVI on failure if we got an HPD interrupt (Rob Clark) [1249814]
  - [drm] drm: import vmwgfx (Rob Clark) [1281592]
  - [firmware] add i915 GuC firmware (Rob Clark) [1135349]
  - [firmware] add i915 DMC firmware (Rob Clark) [1135349]
  - [drm] upstream sync to 4.3 (Rob Clark) [1249814]
  - [drm] upstream sync to 4.2 (Rob Clark) [1249812 1274061]
  - [drm] upstream sync to 4.1 (Rob Clark) [1249810]
  - [drm] upstream sync to 4.0 (Rob Clark) [1249807]
  - [drm] upstream sync to 3.19 (Rob Clark) [1249806]
  - [kernel] iommu: Export intel_iommu_enabled to signal when iommu is in use (Rob Clark) [1249806]
  - [kernel] time: export nsec_to_jiffies64 (Rob Clark) [1249806]
  - [kernel] component: fix bug with legacy API (Rob Clark) [1249806]
  - [kernel] component: add support for component match array (Rob Clark) [1249806]
  - [kernel] component: ignore multiple additions of the same component (Rob Clark) [1249806]
  - [kernel] component: fix missed cleanup in case of devres failure (Rob Clark) [1249806]
  - [kernel] base: fix devres handling for master device (Rob Clark) [1249806]
  - [kernel] base: provide an infrastructure for componentised subsystems (Rob Clark) [1249806]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-613.el6]
changelog:
  - [drm] nouveau: remove stray header (Rob Clark) [1249807]
  - [kernel] ntp: Do leapsecond adjustment in adjtimex read path (Jerry Snitselaar) [1224408]
  - [kernel] time: Prevent early expiry of hrtimers CLOCK_REALTIME at the leap second edge (Jerry Snitselaar) [1224408]
  - [kernel] ntp: Introduce and use SECS_PER_DAY macro instead of 86400 (Jerry Snitselaar) [1224408]
  - [kernel] hrtimer: Make offset update smarter (Jerry Snitselaar) [1224408]
  - [kernel] timekeeping: Use ktime_t data for ktime_get_update_offsets (Jerry Snitselaar) [1224408]
  - [kernel] timekeeping: Provide internal ktime_t based data (Jerry Snitselaar) [1224408]
  - [kernel] timekeeping: indicate clock was set (Jerry Snitselaar) [1224408]
  - [kernel] timekeeping: Avoid possible deadlock from clock_was_set_delayed (Jerry Snitselaar) [1224408]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-614.el6]
changelog:
  - [powerpc] pseries: Limit EPOW reset event warnings (Gustavo Duarte) [1300202]
  - [perf] tools: Do not show trace command if it's not compiled in (Jiri Olsa) [1212539]
  - [perf] tools spec: Disable trace command on ppc arch (Jiri Olsa) [1212539]
  - [netdrv] mlx4_en: Fix the blueflame in TX path (Kamal Heib) [1295872 1303661 1303863 1304272]
  - [netdrv] mlx4_en: Fix HW timestamp init issue upon system startup (Kamal Heib) [1295872 1304272]
  - [netdrv] mlx4_en: Remove dependency between timestamping capability and service_task (Kamal Heib) [1295872 1304272]
  - [netdrv] mlx5_core: Fix trimming down IRQ number (Kamal Heib) [1304272]
  - [x86] Mark Intel Broadwell-DE SoC supported (Steve Best) [1253856]
  - [s390] zfcpdump: Fix collecting of registers (Hendrik Brueckner) [1303558]
  - [s390] dasd: fix failfast for disconnected devices (Hendrik Brueckner) [1303559]
  - [netdrv] bnxt_en: Fix crash in bnxt_free_tx_skbs() during tx timeout (John Linville) [1303703]
  - [netdrv] bnxt_en: Exclude rx_drop_pkts hw counter from the stack's rx_dropped counter (John Linville) [1303703]
  - [netdrv] bnxt_en: Ring free response from close path should use completion ring (John Linville) [1303703]
  - [block] Fix q_suspended logic error for io submission (David Milburn) [1227342]
  - [block] nvme: No lock while DMA mapping data (David Milburn) [1227342]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-615.el6]
changelog:
  - [s390] qeth: initialize net_device with carrier off (Hendrik Brueckner) [1198666]
  - [netdrv] Add rtlwifi driver from linux 4.3 (Stanislaw Gruszka) [1245452 1263386 1289574 761525]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-616.el6]
changelog:
  - [kernel] isolcpus: Output warning when the 'isolcpus=' kernel parameter is invalid (Prarit Bhargava) [1304216]
  - [mmc] Prevent 1.8V switch for SD hosts that don't support UHS modes (Petr Oros) [1307065]
  - [mmc] sdhci-pci-o2micro: Fix Dell E5440 issue (Petr Oros) [1307065]
  - [mmc] sdhci-pci-o2micro: Add SeaBird SeaEagle SD3 support (Petr Oros) [1307065]
  - [watchdog] hung task debugging: Inject NMI when hung and going to panic (Don Zickus) [1305919]
  - [watchdog] add sysctl knob hardlockup_panic (Don Zickus) [1305919]
  - [watchdog] perform all-CPU backtrace in case of hard lockup (Don Zickus) [1305919]
  - [drm] i915: Drop intel_update_sprite_watermarks (Lyude) [1306425]
  - [drm] i915: Setup DDI clk for MST on SKLi (Lyude) [1306425]
  - [drm] i915: Explicitly check for eDP in skl_ddi_pll_select (Lyude) [1306425]
  - [drm] i915: Don't skip mst encoders in skl_ddi_pll_select (Lyude) [1306425]
  - [scsi] qla2xxx: Set relogin flag when we fail to queue login requests (Chad Dupuis) [1306033]
  - [s390] kernel/syscalls: correct syscall number for __NR_setns (Hendrik Brueckner) [1219586]
  - [edac] sb_edac: fix channel/csrow emulation on Broadwell (Aristeu Rozanski) [1301230]
  - [usb] xhci: Workaround to get Intel xHCI reset working more reliably (Gopal Tiwari) [1146875]
  - [fs] revert "revert "dlm: print kernel message when we get an error from kernel_sendpage" (Robert S Peterson) [1264492]
  - [fs] revert "[fs] dlm: Replace nodeid_to_addr with kernel_getpeername" (Robert S Peterson) [1264492]
  - [s390] sclp: Determine HSA size dynamically for zfcpdump (Hendrik Brueckner) [1303557]
  - [s390] sclp: Move declarations for sclp_sdias into separate header file (Hendrik Brueckner) [1303557]
  - [netdrv] mlx4_en: add missing tx_queue init in en_start_port (Don Dutile) [1304016]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-617.el6]
changelog:
  - [infiniband] rdma/ocrdma: Bump up ocrdma version number to 11.0.0.0 (Don Dutile) [1253021]
  - [infiniband] rdma/ocrdma: Prevent CQ-Doorbell floods (Don Dutile) [1253021]
  - [infiniband] rdma/ocrdma: Check resource ids received in Async CQE (Don Dutile) [1253021]
  - [infiniband] rdma/ocrdma: Avoid a possible crash in ocrdma_rem_port_stats (Don Dutile) [1253021]
  - [kernel] driver core : Fix use after free of dev->parent in device_shutdown (Tomas Henzl) [1303215]
  - [kernel] driver core: fix shutdown races with probe/remove (Tomas Henzl) [1303215]
  - [kernel] driver core: Protect device shutdown from hot unplug events (Tomas Henzl) [1303215]
  - [netdrv] bnx2x: Add new device ids under the Qlogic vendor (Michal Schmidt) [1304252]
  - [kernel] klist: fix starting point removed bug in klist iterators (Ewan Milne) [1190273]
  - [md] raid1: extend spinlock to protect raid1_end_read_request against inconsistencies (Jes Sorensen) [1309154]
  - [md] raid1: fix test for 'was read error from last working device' (Jes Sorensen) [1309154]
  - [s390] cio: update measurement characteristics (Hendrik Brueckner) [1304257]
  - [s390] cio: ensure consistent measurement state (Hendrik Brueckner) [1304257]
  - [s390] cio: fix measurement characteristics memleak (Hendrik Brueckner) [1304257]
  - [fs] pipe: fix offset and len mismatch on pipe_iov_copy_to_user failure (Seth Jennings) [1302223] {CVE-2016-0774}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-618.el6]
changelog:
  - [documentation] filesystems: describe the shared memory usage/accounting (Rodrigo Freire) [1293615]
  - [kernel] Fix cgclear failure when encountering the rpciod kernel thread (Larry Woodman) [1220828]
  - [netdrv] qlcnic: constify qlcnic_mbx_ops structure (Harish Patil) [1252119]
  - [netdrv] net: qlcnic: delete redundant memsets (Harish Patil) [1252119]
  - [netdrv] qlcnic: Update version to 5.3.63 (Harish Patil) [1252119]
  - [netdrv] qlcnic: Don't use kzalloc unncecessarily for allocating large chunk of memory (Harish Patil) [1252119]
  - [netdrv] qlcnic: Add new VF device ID 0x8C30 (Harish Patil) [1252119]
  - [netdrv] qlcnic: Print firmware minidump buffer and template header addresses (Harish Patil) [1252119]
  - [netdrv] qlcnic: Add support to enable capability to extend minidump for iSCSI (Harish Patil) [1252119]
  - [netdrv] qlcnic: Rearrange ordering of header files inclusion (Harish Patil) [1252119]
  - [netdrv] qlcnic: Fix corruption while copying (Harish Patil) [1252119]
  - [netdrv] net: qlcnic: Deletion of unnecessary memset (Harish Patil) [1252119]
  - [netdrv] net: qlcnic: clean up sysfs error codes (Harish Patil) [1252119]
  - [netdrv] qlcnic: codespell comment spelling fixes (Harish Patil) [1252119]
  - [netdrv] qlcnic: Fix typo in printk messages (Harish Patil) [1252119]
  - [netdrv] qlcnic: Fix trivial typo in comment (Harish Patil) [1252119]
  - [netdrv] qlogic: Deletion of unnecessary checks before two function calls (Harish Patil) [1252119]
  - [netdrv] qlcnic: Fix dump_skb output (Harish Patil) [1252119]
  - [virt] kvm: x86: Don't report guest userspace emulation error to userspace (Bandan Das) [1163764] {CVE-2010-5313 CVE-2014-7842}
  - [virt] kvm: inject #UD if instruction emulation fails and exit to userspace (Bandan Das) [1163764] {CVE-2010-5313 CVE-2014-7842}
  - [netdrv] iwlwifi: Add new PCI IDs for the 8260 series (John Linville) [1286871 1308636]
  - [netdrv] iwlwifi: pcie: fix (again) prepare card flow (John Linville) [1286871 1308636]
  - [netdrv] nl80211: Fix potential memory leak from parse_acl_data (John Linville) [1286871 1308636]
  - [netdrv] mac80211: fix divide by zero when NOA update (John Linville) [1286871 1308636]
  - [netdrv] mac80211: allow null chandef in tracing (John Linville) [1286871 1308636]
  - [netdrv] mac80211: fix driver RSSI event calculations (John Linville) [1286871 1308636]
  - [netdrv] mac80211: Fix local deauth while associating (John Linville) [1286871 1308636]
  - [fs] xfs: ensure WB_SYNC_ALL writeback handles partial pages correctly (Brian Foster) [747564]
  - [fs] mm: introduce set_page_writeback_keepwrite() (Brian Foster) [747564]
  - [fs] xfs: always log the inode on unwritten extent conversion (Zorro Lang) [1018465]
  - [fs] vfs: fix data corruption when blocksize < pagesize for mmaped data (Lukas Czerner) [1205014]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-619.el6]
changelog:
  - [netdrv] cxgb4: add device ID for few T5 adapters (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Fix for write-combining stats configuration (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Fix tx flit calculation (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: changes for new firmware 1.14.4.0 (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: memory corruption in debugfs (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Force uninitialized state if FW in adapter is unsupported (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add MPS tracing support (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add some more details to sge qinfo (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: missing curly braces in t4_setup_debugfs (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add support to dump edc bist status (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add debugfs support to dump meminfo (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Read correct FL congestion threshold for T5 and T6 (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Allow firmware flash, only if cxgb4 is the master driver (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add debugfs entry to enable backdoor access (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Fix check to use new User Doorbell mechanism (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Enable cim_la dump to support T6 (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Read stats for only available channels (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Update register ranges for T6 adapter (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Don't use entire L2T table, use only its slice (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add PCI device ids for few more T5 and T6 adapters (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Fix incorrect sequence numbers shown in devlog (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add PCI device ID for custom T522 & T520 adapter (Sai Vemuri) [1252598]
  - [infiniband] iw_cxgb4: support for bar2 qid densities exceeding the page size (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Support for user mode bar2 mappings with T4 (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add debugfs entry to dump channel rate (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add debugfs entry to dump CIM PIF logic analyzer contents (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add a debugfs entry to dump CIM MA logic analyzer logs (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Fix static checker warning (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Use FW LDST cmd to access TP_PIO_ADDR, TP_PIO_DATA register first (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: program pci completion timeout (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Set mac addr from vpd, when we can't contact firmware (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Rename t4_link_start to t4_link_l1cfg (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add sge ec context flush service (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Free Virtual Interfaces in remove routine (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Remove WOL get/set ethtool support (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add support to dump loopback port stats (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add support in ethtool to dump channel stats (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add ethtool support to get adapter stats (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Adds SRIOV driver changes for T6 adapter (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Adds support for T6 adapter (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add is_t6 macro and T6 register ranges (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: remove unused fn to enable/disable db coalescing (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: function and argument name cleanup (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add debugfs facility to inject FL starvation (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add PHY firmware support for T420-BT cards (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Update T4/T5 adapter register ranges (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Optimize and cleanup setup memory window code (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: replace ntohs, ntohl and htons, htonl calls with the generic byteorder (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Remove dead function t4_read_edc and t4_read_mc (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Cleanup macros, add comments and add new MACROS (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Initialize RSS mode for all Ports (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Discard the packet if the length is greater than mtu (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Move SGE Ingress DMA state monitor (Don Dutile) [1252598]
  - [netdrv] cxgb4: Add device node to ULD info (Don Dutile) [1252598]
  - [netdrv] cxgb4: Pass in a Congestion Channel Map to t4_sge_alloc_rxq (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Enable congestion notification from SGE for IQs and FLs (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Make sure that Freelist size is larger than Egress Congestion Threshold (Sai Vemuri) [1252598]
  - [infiniband] iw_cxgb4: Cleanup register defines/MACROS (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Fix sparse warnings (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Improve IEEE DCBx support, other minor open-lldp fixes (Sai Vemuri) [1252598]
  - [scsi] cxgb4i: Call into recently added cxgb4 ipv6 api (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Fix queue allocation for 40G adapter (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Initialize mdio_addr before using it (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Fix ethtool get_settings for VF driver (Sai Vemuri) [1252598]
  - [netdrv] csiostor: Cleanup macros/register defines related to port and VI (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Fix DCB priority groups being returned in wrong order (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: dcb open-lldp interop fixes (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Fix bug in DCB app deletion (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Handle dcb enable correctly (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Improve handling of DCB negotiation or loss thereof (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: IEEE fixes for DCBx state machine (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Fix endian bug introduced in cxgb4 dcb patchset (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Makefile & Kconfig changes for DCBx support (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Integrate DCBx support into cxgb4 module. Register dbcnl_ops to give access to DCBx functions (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Add DCBx support codebase and dcbnl_ops (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Update fw interface file for DCBx support. Adds all the required fields to fw interface to communicate DCBx info (Sai Vemuri) [1252598]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-620.el6]
changelog:
  - [netdrv] mlx4-en: disable traffic class queueing by default (Don Dutile) [1309893]
  - [netdrv] mlx4-en: add missing patch to init rss_rings in get_profile (Don Dutile) [1309893]
  - [netdrv] net/mlx4_core: Fix mailbox leak in error flow when performing update qp (Don Dutile) [1309893]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-621.el6]
changelog:
  - [netdrv] net/mlx4_en: Wake TX queues only when there's enough room (Don Dutile) [1309893]
  - [netdrv] revert " net/mlx4_core: Fix mailbox leak in error flow when performing update qp" (Don Dutile) [1309893]
  - [netdrv] revert "mlx4-en: add missing patch to init rss_rings in get_profile" (Don Dutile) [1309893]
  - [netdrv] revert "mlx4-en: disable traffic class queueing by default" (Don Dutile) [1309893]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-622.el6]
changelog:
  - [netdrv] bonding: Fix ARP monitor validation (Jarod Wilson) [1244170]
  - [netdrv] sfc: only use RSS filters if we're using RSS (Jarod Wilson) [1304311]
  - [dm] delay: fix RHEL6 specific bug when establishing future 'expires' time (Mike Snitzer) [1311615]
  - [ata] Adding Intel Lewisburg device IDs for SATA (Steve Best) [1310237]
  - [i2c] i801: Adding Intel Lewisburg support for iTCO (Rui Wang) [1304872]
  - [x86] Mark Grangeville ixgbe PCI ID 15AE (1 gig PHY) unsupported (Steve Best) [1310585]
  - [kernel] lockd: properly convert be32 values in debug messages (Harshula Jayasuriya) [1289848]
  - [i2c] convert i2c-isch to platform_device (Prarit Bhargava) [1211747]
  - [tty] do not reset master's packet mode (Denys Vlasenko) [1308660]
  - [block] don't assume last put of shared tags is for the host (Jeff Moyer) [1300538]
  - [netdrv] i40evf: use pages correctly in Rx (Stefan Assmann) [1293754]
  - [netdrv] i40e: fix bug in dma sync (Stefan Assmann) [1293754]
  - [sched] fix KABI break (Seth Jennings) [1230310]
  - [sched] fair: Test list head instead of list entry in throttle_cfs_rq (Seth Jennings) [1230310]
  - [sched] sched,perf: Fix periodic timers (Seth Jennings) [1230310]
  - [sched] sched: debug: Remove the cfs bandwidth timer_active printout (Seth Jennings) [1230310]
  - [sched] Cleanup bandwidth timers (Seth Jennings) [1230310]
  - [sched] sched: core: Use hrtimer_start_expires (Seth Jennings) [1230310]
  - [sched] fair: Fix unlocked reads of some cfs_b->quota/period (Seth Jennings) [1230310]
  - [sched] Fix potential near-infinite distribute_cfs_runtime loop (Seth Jennings) [1230310]
  - [sched] fair: Fix tg_set_cfs_bandwidth deadlock on rq->lock (Seth Jennings) [1230310]
  - [sched] Fix hrtimer_cancel/rq->lock deadlock (Seth Jennings) [1230310]
  - [sched] Fix cfs_bandwidth misuse of hrtimer_expires_remaining (Seth Jennings) [1230310]
  - [sched] Refine the code in unthrottle_cfs_rq (Seth Jennings) [1230310]
  - [sched] Update rq clock earlier in unthrottle_cfs_rq (Seth Jennings) [1230310]
  - [drm] radeon: mask out WC from BO on unsupported arches (Oded Gabbay) [1303678]
  - [drm] add helper to check for wc memory support (Oded Gabbay) [1303678]
  - [acpi] pci: Account for ARI in _PRT lookups (Ivan Vecera) [1311421]
  - [pci] Move pci_ari_enabled() to global header (Ivan Vecera) [1311421]
  - [acpi] tpm, tpm_tis: fix tpm_tis ACPI detection issue with TPM 2.0 (Jerry Snitselaar) [1309641]
  - [acpi] Centralized processing of ACPI device resources (Jerry Snitselaar) [1309641]
  - [acpi] acpi: Add device resources interpretation code to ACPI core (Jerry Snitselaar) [1309641]
  - [netdrv] cxgb4 : Fix for the kernel panic caused by calling t4_enable_vi_params (Sai Vemuri) [1303493]
  - [mm] Remove false WARN_ON from pagecache_isize_extended (Brian Foster) [1205014]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-623.el6]
changelog:
  - [perf] revert "perf/x86/intel uncore: Move uncore_box_init() out of driver initialization" (Jiri Olsa) [1313062]
  - [net] udp: move logic out of udp[46]_ufo_send_check (Sabrina Dubroca) [1299975]
  - [netdrv] hv_netvsc: Restore needed_headroom request (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: fix null ptr deref in skb allocation (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: Observe needed_headroom of the device (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: ipv6: numa: consolidate skb allocation to pktgen_alloc_skb (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: fix crash with vlan and packet size less than 46 (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: speedup fragmented skbs (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: correct uninitialized queue_map (Vitaly Kuznetsov) [1305000]
  - [net] pktgen node allocation (Vitaly Kuznetsov) [1305000]
  - [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1309241]
  - [net] veth: don't modify ip_summed; doing so treats packets with bad checksums as good (Sabrina Dubroca) [1308586]
  - [net] ipv6: udp: use sticky pktinfo egress ifindex on connect() (Xin Long) [1301475]
  - [net] provide default_advmss() methods to blackhole dst_ops (Paolo Abeni) [1305068]
  - [net] sctp: translate network order to host order when users get a hmacid (Xin Long) [1303822]
  - [powerpc] pseries: Make 32-bit MSI quirk work on systems lacking firmware support (Oded Gabbay) [1303678]
  - [powerpc] pseries: Force 32 bit MSIs for devices that require it (Oded Gabbay) [1303678]
  - [netdrv] bnxt_en: Fix zero padding of tx push data (John Linville) [1310301]
  - [netdrv] bnxt_en: Failure to update PHY is not fatal condition (John Linville) [1310301]
  - [netdrv] bnxt_en: Remove unnecessary call to update PHY settings (John Linville) [1310301]
  - [netdrv] bnxt_en: Poll link at the end of __bnxt_open_nic (John Linville) [1310301]
  - [netdrv] bnxt_en: Reduce default ring sizes (John Linville) [1310301]
  - [netdrv] bnxt_en: Fix implementation of tx push operation (John Linville) [1310301]
  - [netdrv] bnxt_en: Remove 20G support and advertise only 40GbaseCR4 (John Linville) [1310301]
  - [netdrv] bnxt_en: Cleanup and Fix flow control setup logic (John Linville) [1310301]
  - [netdrv] bnxt_en: Fix ethtool autoneg logic (John Linville) [1310301]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-624.el6]
changelog:
  - [netdrv] tg3: Fix for tg3 transmit queue 0 timed out when too many gso_segs (Ivan Vecera) [1222426]
  - [netdrv] bna: fix list corruption (Ivan Vecera) [1310957]
  - [netdrv] cxgb4 : Add cxgb4 T4/T5 firmware version 1.14.4.0, hardcode driver to the same (Sai Vemuri) [1270347]
  - [drm] i915: WaRsDisableCoarsePowerGating (Rob Clark) [1302269]
  - [drm] i915/skl: Add SKL GT4 PCI IDs (Rob Clark) [1302269]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-625.el6]
changelog:
  - [netdrv] cxgb4 : Patch to fix kernel panic on pinging over vlan interface (Sai Vemuri) [1303493]
  - [x86] mm: Improve AMD Bulldozer ASLR workaround (Rik van Riel) [1240883]
  - [x86] Properly export MSR values in kernel headers (Jacob Tanenbaum) [1298255]
  - [netdrv] tehuti: Firmware filename is tehuti/bdx.bin (Ivan Vecera) [1235961]
  - [netdrv] ixgbe: convert to ndo_fix_features (John Greene) [1279522]
  - [drm] revert "drm: Use vblank timestamps to guesstimate how many vblanks were missed" (Lyude Paul) [1300086]
  - [fs] writeback: Fix lost wake-up shutting down writeback thread (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wakeup events when forking bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: fix bad _bh spinlock nesting (Jeff Moyer) [1111683]
  - [fs] writeback: cleanup bdi_register (Jeff Moyer) [1111683]
  - [fs] writeback: remove unnecessary init_timer call (Jeff Moyer) [1111683]
  - [fs] writeback: optimize periodic bdi thread wakeups (Jeff Moyer) [1111683]
  - [fs] writeback: prevent unnecessary bdi threads wakeups (Jeff Moyer) [1111683]
  - [fs] writeback: move bdi threads exiting logic to the forker thread (Jeff Moyer) [1111683]
  - [fs] writeback: restructure bdi forker loop a little (Jeff Moyer) [1111683]
  - [fs] writeback: move last_active to bdi (Jeff Moyer) [1111683]
  - [fs] writeback: do not remove bdi from bdi_list (Jeff Moyer) [1111683]
  - [fs] writeback: simplify bdi code a little (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in the forker thread - 2 (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in the forker thread - 1 (Jeff Moyer) [1111683]
  - [fs] writeback: fix possible race when creating bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: harmonize writeback threads naming (Jeff Moyer) [1111683]
  - [fs] writeback: merge bdi_writeback_task and bdi_start_fn (Jeff Moyer) [1111683]
  - [fs] writeback: bdi_writeback_task must set task state before calling schedule (Jeff Moyer) [1111683]
  - [fs] writeback: remove wb_list (Jeff Moyer) [1111683]
  - [drm] i915: Change WARN_ON(!wm_changed) to I915_STATE_WARN_ON (Lyude Paul) [1309888]
  - [drm] i915: Quiet down state checks (Lyude Paul) [1309888]
  - [drm] i915: Fix a few of the !wm_changed warnings (Lyude Paul) [1309888]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-626.el6]
changelog:
  - [fs] nfsv4: OPEN must handle the NFS4ERR_IO return code correctly (Benjamin Coddington) [1272687]
  - [fs] quota: fix unwanted soft limit enforcement (Lukas Czerner) [1304603]
  - [fs] xfs: flush entire last page of old EOF on truncate up (Brian Foster) [1308482]
  - [fs] xfs: truncate_setsize should be outside transactions (Brian Foster) [1308482]
  - [scsi] megaraid: overcome a fw deficiency (Maurizio Lombardi) [1294983]
  - [scsi] megaraid_sas: Add an i/o barrier (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Fix SMAP issue (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Fix for IO failing post OCR in SRIOV environment (Tomas Henzl) [1294983]
  - [scsi] megaraid: fix null pointer check in megasas_detach_one() (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: driver version upgrade (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: SPERC OCR changes (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Introduce module parameter for SCSI command timeout (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: MFI adapter OCR changes (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Make adprecovery variable atomic (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: IO throttling support (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Dual queue depth support (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Code optimization build_and_issue_cmd return-type (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Reply Descriptor Post Queue (RDPQ) support (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Fastpath region lock bypass (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Update device queue depth based on interface type (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Task management support (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Syncing request flags macro names with firmware (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: MFI IO timeout handling (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Do not allow PCI access during OCR (Tomas Henzl) [1294983]
  - [scsi] hpsa: check for a null phys_disk pointer in ioaccel2 path (Joseph Szczypek) [1311728]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-627.el6]
changelog:
  - [net] rds: restore return value in rds_cmsg_rdma_args (Don Dutile) [1313089]
  - [net] rds: Fix assertion level from fatal to warning (Don Dutile) [1313089]
  - [netdrv] be2net: don't enable multicast flag in be_enable_if_filters routine (Ivan Vecera) [1309157]
  - [net] unix: correctly track in-flight fds in sending process user_struct (Hannes Frederic Sowa) [1313052] {CVE-2016-2550}
  - [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Jacob Tanenbaum) [1297422] {CVE-2015-8767}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-628.el6]
changelog:
  - [netdrv] bnx2x: fix crash on big-endian when adding VLAN (Michal Schmidt) [1311433]
  - [sound] alsa hda: only sync BCLK to the display clock for Haswell & Broadwell (Jaroslav Kysela) [1313672]
  - [sound] alsa hda: add component support (Jaroslav Kysela) [1313672]
  - [sound] alsa hda: pass intel_hda to all i915 interface functions (Jaroslav Kysela) [1313672]
  - [netdrv] igb: fix race accessing page->_count (Corinna Vinschen) [1315402]
  - [netdrv] igb: fix recent VLAN changes that would leave VLANs disabled after reset (Corinna Vinschen) [1309968]
  - [mm] always decrement anon_vma degree when the vma list is empty (Jerome Marchand) [1309898]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-629.el6]
changelog:
  - [x86] acpi: Avoid SRAT table checks for Hyper-V VMs (Vitaly Kuznetsov) [1312711]
  - [infiniband] ipoib: For sendonly join free the multicast group on leave (Don Dutile) [1315382]
  - [infiniband] ipoib: increase the max mcast backlog queue (Don Dutile) [1315382]
  - [infiniband] ipoib: Make sendonly multicast joins create the mcast group (Don Dutile) [1315382]
  - [infiniband] ipoib: Expire sendonly multicast joins (Don Dutile) [1315382]
  - [infiniband] ipoib: Clean up send-only multicast joins (Don Dutile) [1315382]
  - [infiniband] ipoib: Suppress warning for send only join failures (Don Dutile) [1315382]
  - [drm] i915: shut up gen8+ SDE irq dmesg noise (Rob Clark) [1313681]
  - [drm] i915: fix the SDE irq dmesg warnings properly (Rob Clark) [1313681]
  - [hv] vmbus: avoid wait_for_completion on crash (Vitaly Kuznetsov) [1301903]
  - [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1301903]
  - [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload (Vitaly Kuznetsov) [1301903]
  - [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1301903]
  - [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload (Vitaly Kuznetsov) [1301903]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-630.el6]
changelog:
  - [mm] avoid hangs in lru_add_drain_all (Vitaly Kuznetsov) [1314683]
  - [net] esp{4, 6}: fix potential MTU calculation overflows (Herbert Xu) [1304313]
  - [net] xfrm: take net hdr len into account for esp payload size calculation (Herbert Xu) [1304313]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-631.el6]
changelog:
  - [input] synaptics: handle spurious release of trackstick buttons, again (Benjamin Tissoires) [1317808]
  - [hv] kvp: fix IP Failover (Vitaly Kuznetsov) [1312290]
  - [hv] util: Pass the channel information during the init call (Vitaly Kuznetsov) [1312290]
  - [hv] utils: Invoke the poll function after handshake (Vitaly Kuznetsov) [1312290]
  - [hv] utils: run polling callback always in interrupt context (Vitaly Kuznetsov) [1312290]
  - [hv] util: Increase the timeout for util services (Vitaly Kuznetsov) [1312290]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-632.el6]
changelog:
  - [s390] dasd: fix incorrect locking order for LCU device add/remove (Hendrik Brueckner) [1315740]
  - [s390] dasd: fix hanging device after LCU change (Hendrik Brueckner) [1315729]
  - [s390] dasd: prevent incorrect length error under z/VM after PAV changes (Hendrik Brueckner) [1313774]
  - [netdrv] igb: Fix VLAN tag stripping on Intel i350 (Corinna Vinschen) [1210699]
  - [netdrv] 3c59x: mask LAST_FRAG bit from length field in ring (Neil Horman) [1309210]
  - [ata] ahci: Remove obsolete Intel Lewisburg SATA RAID device IDs (Steve Best) [1317045]
  - [pci] fix truncation of resource size to 32 bits (Myron Stowe) [1316345]
  - [pci] fix pci_resource_alignment prototype (Myron Stowe) [1316345]
  - [sound] hda: Fix headphone mic input on a few Dell ALC293 machines (Jaroslav Kysela) [1315932]
  - [sound] hda: Add some FIXUP quirks for white noise on Dell laptop (Jaroslav Kysela) [1315932]
  - [sound] hda: Fix the white noise on Dell laptop (Jaroslav Kysela) [1315932]
  - [sound] hda: one Dell machine needs the headphone white noise fixup (Jaroslav Kysela) [1315932]
  - [sound] hda: Fix audio crackles on Dell Latitude E7x40 (Jaroslav Kysela) [1315932]
  - [fs] xfs: Avoid pathological backwards allocation (Bill O'Donnell) [1302777]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-633.el6]
changelog:
  - [s390] lib: export udelay_simple for systemtap (Hendrik Brueckner) [1233912]
  - [netdrv] ixgbe: fix RSS limit for X550 (John Greene) [1314583]
  - [netdrv] mlx4_core: Fix error message deprecation for ConnectX-2 cards (Don Dutile) [1316013]
  - [dm] thin metadata: don't issue prefetches if a transaction abort has failed (Mike Snitzer) [1310661]
  - [scsi] be2iscsi: Add warning message for unsupported adapter (Maurizio Lombardi) [1253016]
  - [scsi] be2iscsi: Revert "Add warning message for, unsupported adapter" (Maurizio Lombardi) [1253016]
  - [scsi] hpsa: update copyright information (Joseph Szczypek) [1315469]
  - [scsi] hpsa: correct abort tmf for hba devices (Joseph Szczypek) [1315469]
  - [scsi] hpsa: correct ioaccel2 sg chain len (Joseph Szczypek) [1315469]
  - [scsi] hpsa: fix physical target reset (Joseph Szczypek) [1315469]
  - [scsi] hpsa: fix hpsa_adjust_hpsa_scsi_table (Joseph Szczypek) [1315469]
  - [scsi] hpsa: correct transfer length for 6 byte read/write commands (Joseph Szczypek) [1315469]
  - [scsi] hpsa: abandon rescans on memory alloaction failures (Joseph Szczypek) [1315469]
  - [scsi] hpsa: allow driver requested rescans (Joseph Szczypek) [1315469]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-634.el6]
changelog:
  - [scsi] cxgbi: Convert over to dst_neigh_lookup (Sai Vemuri) [1296461]
  - [netdrv] cxgb4: For T4, don't read the Firmware Mailbox Control register (Sai Vemuri) [1296469]
  - [netdrv] cxgb4: Use ACCES_ONCE macro to read queue's consumer index (Sai Vemuri) [1296484]
  - [netdrv] cxgb4: prevent simultaneous execution of service_ofldq (Sai Vemuri) [1296483]
  - [netdrv] cxgb4: Adds PCI device id for new T5 adapters (Sai Vemuri) [1296481]
  - [netdrv] cxgb4: Don't disallow turning off auto-negotiation (Sai Vemuri) [1296476]
  - [mm] check if section present during memory block registering (Xunlei Pang) [1297840]
  - [tty] ldisc: Close/Reopen race prevention should check tty->ldisc (Denys Vlasenko) [1312383]
  - [fs] proc-vmcore: wrong data type casting fix (Baoquan He) [1312206]
  - [infiniband] iw_cxgb3: Ignore positive return values from the ofld send functions (Sai Vemuri) [1296999]
  - [netdrv] cxgb4: Deal with wrap-around of queue for Work request (Sai Vemuri) [1296482]
  - [infiniband] iw_cxgb4: detect fatal errors while creating listening filters (Sai Vemuri) [1296480]
  - [md] dm snapshot: suspend merging snapshot when doing exception handover (Mike Snitzer) [1177389]
  - [md] dm snapshot: suspend origin when doing exception handover (Mike Snitzer) [1177389]
  - [md] dm snapshot: allocate a per-target structure for snapshot-origin target (Mike Snitzer) [1177389]
  - [md] dm: fix a race condition in dm_get_md (Mike Snitzer) [1177389]
  - [infiniband] iw_cxgb4: pass the ord/ird in connect reply events (Sai Vemuri) [1296478]
  - [infiniband] iw_cxgb4: fix misuse of ep->ord for minimum ird calculation (Sai Vemuri) [1296478]
  - [infiniband] iw_cxgb4: reverse the ord/ird in the ESTABLISHED upcall (Sai Vemuri) [1296478]
  - [usb] Revert "Revert 'Update USB default wakeup settings'" (Torez Smith) [1319081]
  - [netdrv] ibmveth: add support for TSO6 (Gustavo Duarte) [1318412]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-635.el6]
changelog:
  - [mm] backing-dev: ensure wakeup_timer is deleted (Jeff Moyer) [1318930]
  - [hv] vss: run only on supported host versions (Vitaly Kuznetsov) [1319813]
  - [sound] hda: Fix internal speaker for HP Z240 (Jaroslav Kysela) [1316673]
  - [perf] trace: Fix race condition at the end of started workloads (Jiri Olsa) [1302928]
  - [fs] nfsd: Combine decode operations for v4 and v4.1 (J. Bruce Fields) [1314536]
  - [hv] revert "vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: don't loose HVMSG_TIMER_EXPIRED messages" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: remove code duplication in message handling" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: avoid wait_for_completion on crash" (Vitaly Kuznetsov) [1318882]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-636.el6]
changelog:
  - [netdrv] mlx4_en: Choose time-stamping shift value according to HW frequency (Kamal Heib) [1320448]
  - [fs] anon_inodes implement dname (Aristeu Rozanski) [1296019]
  - [net] packet: set transport header before doing xmit (John Greene) [1309526]
  - [net] tuntap: set transport header before passing it to kernel (John Greene) [1309526]
  - [netdrv] macvtap: set transport header before passing skb to lower device (John Greene) [1309526]
  - [net] ipv6: tcp: add rcu locking in tcp_v6_send_synack() (Jakub Sitnicki) [1312740]
  - [net] ipv6: sctp: add rcu protection around np->opt (Jakub Sitnicki) [1312740]
  - [net] ipv6: add complete rcu protection around np->opt (Jakub Sitnicki) [1312740]
  - [net] dccp: remove unnecessary codes in ipv6.c (Jakub Sitnicki) [1312740]
  - [net] ipv6: remove unnecessary codes in tcp_ipv6.c (Jakub Sitnicki) [1312740]
  - [net] ipv6: Refactor update of IPv6 flowi destination address for srcrt (RH) option (Jakub Sitnicki) [1312740]
  - [net] ipv6: protect flow label renew against GC (Sabrina Dubroca) [1313231]
  - [net] ipv6: fix possible deadlock in ip6_fl_purge / ip6_fl_gc (Sabrina Dubroca) [1313231]
  - [perf] annotate: Support full source file paths for srcline fix (Jiri Olsa) [1304472 1304479]
  - [perf] tools: Support full source file paths for srcline (Jiri Olsa) [1304472 1304479]
  - [perf] annotate: Fix -i option, which is currently ignored (Jiri Olsa) [1304472 1304479]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-637.el6]
changelog:
  - [netdrv] mlx4-en: add missing patch to init rss_rings in get_profile (Don Dutile) [1321164]
  - [netdrv] mlx4-en: disable traffic class queueing by default (Don Dutile) [1321164]
  - [netdrv] mlx4_core: Fix mailbox leak in error flow when performing update qp (Don Dutile) [1321164]
  - [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259581] {CVE-2015-5157}
  - [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259581] {CVE-2015-5157}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-638.el6]
changelog:
  - [mm] hugetlb: prevent BUG_ON in hugetlb_fault -> hugetlb_cow (Dave Anderson) [1303495]
  - [mm] hugetlb: fix race condition in hugetlb_fault (Dave Anderson) [1303495]
  - [s390] kdump: fix wrong BUG_ON statement (Hendrik Brueckner) [1321316]
  - [scsi] cxgb4i: Increased the value of MAX_IMM_TX_PKT_LEN from 128 to 256 bytes (Sai Vemuri) [1320193]
  - [fs] nfs: fix a regression causing deadlock in nfs_wb_page_cancel() (Benjamin Coddington) [1135601]
  - [netdrv] cxgb4/ethtool: Get/set rx checksum (Sai Vemuri) [1225167]
  - [netdrv] cxgb4vf:The RX checksum feature was not completely ported to cxgb4vf driver (Sai Vemuri) [1225167]
  - [netdrv] cxgb4/cxgb4vf: Enable GRO (Sai Vemuri) [1225167]
  - [netdrv] cxgb4: Enable RX checksum offload flag (Sai Vemuri) [1225167]
  - [netdrv] cxgb4: Report correct link speed for unsupported ones (Sai Vemuri) [1296467]
  - [netdrv] cxgb4: Use vmalloc, if kmalloc fails (Sai Vemuri) [1296473]
  - [netdrv] cxgb4: Enhance driver to update FW, when FW is too old (Sai Vemuri) [1296472]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-639.el6]
changelog:
  - [input] wacom: fix ExpressKeys remote events (Aristeu Rozanski) [1318027]
  - [fs] revert "writeback: remove wb_list" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: bdi_writeback_task must set task state before calling schedule" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: merge bdi_writeback_task and bdi_start_fn" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: harmonize writeback threads naming" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: fix possible race when creating bdi threads" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wake-ups in the forker thread - 1" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wake-ups in the forker thread - 2" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wake-ups in bdi threads" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: simplify bdi code a little" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not remove bdi from bdi_list" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: move last_active to bdi" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: restructure bdi forker loop a little" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: move bdi threads exiting logic to the forker thread" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: prevent unnecessary bdi threads wakeups" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: optimize periodic bdi thread wakeups" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: remove unnecessary init_timer call" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: cleanup bdi_register" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: fix bad _bh spinlock nesting" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wakeup events when forking bdi threads" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: Fix lost wake-up shutting down writeback thread" (Jeff Moyer) [1322297]
  - [mm] revert "backing-dev: ensure wakeup_timer is deleted" (Jeff Moyer) [1322297]
  - [perf] revert: perf changes out of "sched, perf: Fix periodic timers" (Jiri Olsa) [1322488]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-640.el6]
changelog:
  - [net] use GFP_ATOMIC in dst_ops_extend_register (Sabrina Dubroca) [1323252]
  - [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1324318]
  - [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1324318]
  - [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1324318]
  - [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1324318]
  - [kernel] Revert "fix KABI break" (Jiri Olsa) [1324318]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-641.el6]
changelog:
  - [netdrv] ixgbe: restore proper CHECKSUM_UNNECESSARY behavior for LRO packets (Neil Horman) [1318426]
  - [netdrv] revert " net/mlx5_core: Add pci error handlers to mlx5_core driver" (Don Dutile) [1324599]
  - [x86] kernel: espfix not working for 32-bit KVM paravirt guests (Jacob Tanenbaum) [1172767] {CVE-2014-8134}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-642.el6]
changelog:
  - [scsi] fc: revert - ensure scan_work isn't active when freeing fc_rport (Ewan Milne) [1326447]
  - [netdrv] ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue (John Greene) [1310749]
  - [netdrv] mlx5e: Fix adding vlan rule with vid zero twice (Kamal Heib) [1322809]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-643.el6]
changelog:
  - [net] bridge: pass vlan registration on to physical device from bridge (Neil Horman) [1313663]
  - [net] tcp/dccp: warn user for preferred ip_local_port_range (Florian Westphal) [1314774]
  - [net] tcp/dccp: try to not exhaust ip_local_port_range in connect() (Florian Westphal) [1314774]
  - [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian Westphal) [1314774]
  - [base] firmware: Add lock for firmware devices (Lyude Paul) [1309875]
  - [net] netlabel: fix a problem with netlbl_secattr_catmap_setrng (Paul Moore) [1321174]
  - [md] dm: only initialize the request_queue once (Mike Snitzer) [1328329]
  - [md] raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1320595]
  - [md] raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1320595]
  - [md] raid5: Compare apples to apples (or sectors to sectors) (Jes Sorensen) [1295969]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-644.el6]
changelog:
  - [isdn] avoid calling tty_ldisc_flush() in atomic context (Sabrina Dubroca) [1328115]
  - [scsi] fcoe: fix reset of fip selection time (Neil Horman) [1230719]
  - [fs] nfsd4: clean up open owners on OPEN failure (J. Bruce Fields) [1300006]
  - [fs] nfsd4: replace oo_confirmed by flag bit (J. Bruce Fields) [1300006]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-645.el6]
changelog:
  - [fs] lockd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1336483]
  - [fs] nfsd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1336483]
  - [acpi] processor: Request native thermal interrupt handling via _OSC (David Arcari) [1327715]
  - [sound] usb-audio: avoid freeing umidi object twice (Mateusz Guzik) [1310668] {CVE-2016-2384}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-646.el6]
changelog:
  - [sched] Revert "kernel: sched: Cure load average vs NO_HZ woes" (Rafael Aquini) [1326373]
  - [sched] Revert "kernel: sched: Cure more NO_HZ load average woes" (Rafael Aquini) [1326373]
  - [sched] Revert "kernel: sched: Move sched_avg_update to update_cpu_load" (Rafael Aquini) [1326373]
  - [sched] Revert "kernel: sched: Fix nohz load accounting -- again" (Rafael Aquini) [1326373]
  - [sched] avoid kernel panic during power off (Frank Ramsay) [1313035]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-647.el6]
changelog:
  - [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1344740]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-649.el6]
changelog:
  - [idle] intel_idle: Add SKX support (Steve Best) [1348739]
  - [fs] auth_gss: fix panic in gss_pipe_downcall() in fips mode (Scott Mayhew) [1309420]
  - [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1267754]
  - [infiniband] security: Restrict use of the write interface (Don Dutile) [1332548] {CVE-2016-4565}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-650.el6]
changelog:
  - [fs] sunrpc: remove BUG_ON calls from cache_read (J. Bruce Fields) [1249854]
  - [fs] gfs2: Automatically set GFS2_DIF_SYSTEM flag on system files (Abhijith Das) [1349127]
  - [fs] gfs2: Use gfs2 wrapper to sync inode before calling generic_file_splice_read() (Abhijith Das) [1300756]
  - [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1333448]
  - [drm] move idr2 implementation to lib (Milos Vyletel) [1316790]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-651.el6]
changelog:
  - [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1347189]
  - [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1315933]
  - [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to > TCP_MSS_DEFAULT (Davide Caratti) [1349776]
  - [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1349776]
  - [net] netfilter: ip(6)t_REJECT: fix wrong transport header pointer in TCP reset (William Townsend) [1343816]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-652.el6]
changelog:
  - [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1352826]
  - [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1351356]
  - [security] keys: potential uninitialized variable (Mateusz Guzik) [1345946] {CVE-2016-4470}
  - [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1353807]
  - [cpufreq] stats: fix race between stats allocation and first usage (Steve Best) [1352347]
  - [x86] cpufreq: intel_pstate: Enable HWP by default (Steve Best) [1348853]
  - [netdrv] cxgb4: Set VPD size so we can read both VPD structures (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Add pci_set_vpd_size() to set VPD size (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Prevent VPD access for buggy devices (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Sleep rather than busy-wait for VPD access completion (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Fold struct pci_vpd_pci22 into struct pci_vpd (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Rename VPD symbols to remove unnecessary "pci22" (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Remove struct pci_vpd_ops.release function pointer (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Move pci_vpd_release() from header file to pci/access.c (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Move pci_read_vpd() and pci_write_vpd() close to other VPD code (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Determine actual VPD size on first access (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Use bitfield instead of bool for struct pci_vpd_pci22.busy (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Allow access to VPD attributes with size 0 (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Update VPD definitions (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Remove unused pci_vpd_truncate() (Myron Stowe) [1289559 1324680 1340999]
  - [pci] handle positive error codes (Myron Stowe) [1289559 1324680 1340999]
  - [pci] check pci_vpd_pci22_wait() return (Myron Stowe) [1289559 1324680 1340999]
  - [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1238861]
  - [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1238861]
  - [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1238861]
  - [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1238861]
  - [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1238861]
  - [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1238861]
  - [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1238861]
  - [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1238861]
  - [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1238861]
  - [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1238861]
  - [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1173286]
  - [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1173286]
  - [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1173286]
  - [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1173286]
  - [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1173286]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-653.el6]
changelog:
  - [security] selinux: convert WARN_ONCE to printk in selinux_nlmsg_perm (Richard Guy Briggs) [1066681]
  - [security] selinux: cleanup error reporting in selinux_nlmsg_perm (Richard Guy Briggs) [1066681]
  - [security] audit: fix dangling keywords in integrity ima message output (Richard Guy Briggs) [1066681]
  - [kernel] audit: invalid op= values for rules (Richard Guy Briggs) [1066681]
  - [security] selinux: normalize audit log formatting (Richard Guy Briggs) [1066681]
  - [fs] gfs2: Fix gfs2_replay_incr_blk for multiple journal sizes (Robert S Peterson) [1357111]
  - [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1360008] {CVE-2016-5829}
  - [netdrv] mlx4: convert to hw_features (kamal heib) [1211211]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-654.el6]
changelog:
  - [fs] gfs2: Check rs_free with rd_rsspin protection (Robert S Peterson) [1362566]
  - [x86] hyperv: Avoid reporting bogus NMI status for Gen2 instances (Vitaly Kuznetsov) [1320215]
  - [x86] mrst: Avoid reporting wrong nmi status (Vitaly Kuznetsov) [1320215]
  - [scsi] sysfs: protect against double execution of __scsi_remove_device() (Vitaly Kuznetsov) [1343105]
  - [scsi] proper state checking and module refcount handling in scsi_device_get (Vitaly Kuznetsov) [1343105]
  - [netdrv] e1000e: prevent division by zero if TIMINCA is zero (Denys Vlasenko) [1322244]
  - [powerpc] perf: Add support for second POWER8 PVR (Gustavo Duarte) [1316453]
  - [fs] xfs: avoid AGI/AGF deadlock scenario for inode chunk allocation (Brian Foster) [1311879]
  - [fs] xfs: xfs_iflush_cluster has range issues (Brian Foster) [1311853]
  - [fs] xfs: mark reclaimed inodes invalid earlier (Brian Foster) [1311853]
  - [fs] xfs: xfs_inode_free() isn't RCU safe (Brian Foster) [1311853]
  - [fs] xfs: optimise xfs_iext_destroy (Brian Foster) [1311853]
  - [fs] xfs: skip stale inodes in xfs_iflush_cluster (Brian Foster) [1311853]
  - [fs] xfs: fix inode validity check in xfs_iflush_cluster (Brian Foster) [1311853]
  - [fs] xfs: xfs_iflush_cluster fails to abort on error (Brian Foster) [1311853]
  - [fs] xfs: remove log item from AIL in xfs_iflush after a shutdown (Brian Foster) [1311853]
  - [fs] xfs: remove log item from AIL in xfs_qm_dqflush after a shutdown (Brian Foster) [1311853]
  - [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth->au_flags (Scott Mayhew) [1294939]
  - [x86] mce: Fix regression. All error records should report via /dev/mcelog (Prarit Bhargava) [1355847]
  - [fs] lockd: unregister notifier blocks if the service fails to come up completely (Scott Mayhew) [1346317]
  - [x86] acpi: fix empty _OSI strings during boot (Prarit Bhargava) [1268934]
  - [kernel] audit: error message typo correction (Richard Guy Briggs) [1342857]
  - [documentation] mm: document improved handling of swappiness==0 (Jerome Marchand) [1341499]
  - [netdrv] Fix ixgbe allocation warning splat (Neil Horman) [1325068]
  - [net] phonet: fix potential use-after-free in pep_sock_close() (Lauro Ramos Venancio) [1326568]
  - [fs] cifs: fix use-after-free bug in find_writable_file (Sachin Prabhu) [1295008]
  - [x86] Drop WARN from multi-BAR check in ioremap_caller (Larry Woodman) [1318622]
  - [mm] mempolicy: fix mbind_range && vma_adjust interaction (Petr Holasek) [1277241]
  - [virt] virtio_pci: fix virtio spec compliance on restore (Michael S. Tsirkin) [1157728]
  - [netdrv] cxgb4: Restore L1 cfg, if FW rejects new L1 cfg settings (Sai Vemuri) [1296474]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-655.el6]
changelog:
  - [fs] gfs2: Cache ACLs read from disk (Andreas Gruenbacher) [1330625]
  - [mm] Fix slab growing out of bound within a cpuset (Larry Woodman) [1350997]
  - [scsi] fix race between simultaneous decrements of ->host_failed (Gustavo Duarte) [1344835]
  - [fs] xfs: fix Q_XQUOTARM ioctl (Zorro Lang) [1329066]
  - [virt] storvsc: driver needs to account for reference to sdev_dev kobj (Cathy Avery) [1316861]
  - [fs] Set MAY_SIGN for multiuser mounts (Sachin Prabhu) [1323053]
  - [x86] mm: Improve switch_mm() barrier comments (Rafael Aquini) [1332601] {CVE-2016-2069}
  - [x86] mm: Add barriers and document switch_mm()-vs-flush synchronization (Rafael Aquini) [1332601] {CVE-2016-2069}
  - [netdrv] vmxnet3: avoid calling pskb_may_pull with interrupts disabled (Jamie Bainbridge) [1340684]
  - [netdrv] vmxnet3: fix checks for dma mapping errors (Jamie Bainbridge) [1340684]
  - [net] netfilter: ip6table_raw: fix table priority (Eric Garver) [1317365]
  - [net] sch_gred: should not use GFP_KERNEL while holding a spinlock (Eric Garver) [1328774]
  - [net] netfilter: fix xt_TCPOPTSTRIP for ipv6 (Paolo Abeni) [1325733]
  - [net] ipv6: Count in extension headers in skb->network_header (Jakub Sitnicki) [1323491]
  - [net] Make userland include of netlink.h more sane (Ondrej Hlavaty) [1313266]
  - [net] bridge: notifier called with the wrong device (Paolo Abeni) [1315988]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-656.el6]
changelog:
  - [scsi] bnx2fc: replace printk() with BNX2FC_IO_DBG() (Maurizio Lombardi) [1337944]
  - [scsi] restart list search after unlock in scsi_remove_target (Ewan Milne) [1349623]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-657.el6]
changelog:
  - [fs] ecryptfs: prevent mounts backed by procfs (Mateusz Guzik) [1347102] {CVE-2016-1583}
  - [hid] usbhid: add quirk for PIXART OEM mouse used by HP (Torez Smith) [1295575]
  - [hid] usbhid: add HP OEM mouse to quirk ALWAYS_POLL (Torez Smith) [1295575]
  - [netdrv] bonding: Prevent IPv6 link local address on enslaved devices (Jarod Wilson) [1292358]
  - [powerpc] iommu: release the DDW when the PHB device node is unplugged (Gustavo Duarte) [1328668]
  - [netdrv] bonding: don't use stale speed and duplex information (Jarod Wilson) [1327315]
  - [scsi] Revert: restart list search after unlock in scsi_remove_target (Ewan Milne) [1369564]
  - [s390] mm: four page table levels vs. fork (Hendrik Brueckner) [1316461] {CVE-2016-2143}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-658.el6]
changelog:
  - [netdrv] bnxt_en: Add new NPAR and dual media device IDs (John Linville) [1347825]
  - [netdrv] bnxt_en: Limit RX BD pages to be no bigger than 32K (John Linville) [1347825]
  - [netdrv] bnxt_en: Add BCM5731X and BCM5741X device IDs (John Linville) [1347825]
  - [netdrv] bnxt_en: Add PCI device ID for 57404 NPAR devices (John Linville) [1347825]
  - [netdrv] bnxt_en: Enable NPAR (NIC Partitioning) Support (John Linville) [1347825]
  - [netdrv] bnxt_en: Add function for VF driver to query default VLAN (John Linville) [1347825]
  - [netdrv] bnxt_en: Fix tx push race condition (John Linville) [1347825]
  - [netdrv] bnxt_en: Add BCM57314 device ID (John Linville) [1347825]
  - [netdrv] bnxt_en: Setup multicast properly after resetting device (John Linville) [1347825]
  - [netdrv] bnxt_en: Need memory barrier when processing the completion ring (John Linville) [1347825]
  - [netdrv] bnxt_en: Don't fallback to INTA on VF (John Linville) [1347825]
  - [netdrv] bnxt_en: Update to Firmware 1.2.2 spec (John Linville) [1347825]
  - [netdrv] bnxt_en: Fix ethtool -a reporting (John Linville) [1347825]
  - [netdrv] bnxt_en: Fix typo in bnxt_hwrm_set_pause_common() (John Linville) [1347825]
  - [netdrv] vmxnet3: update to version 3 (Neil Horman) [1290656]
  - [netdrv] vmxnet3: introduce command to register memory region (Neil Horman) [1290656]
  - [netdrv] vmxnet3: add support for get_coalesce, set_coalesce ethtool operations (Neil Horman) [1290656]
  - [netdrv] vmxnet3: add receive data ring support (Neil Horman) [1290656]
  - [netdrv] vmxnet3: allow variable length transmit data ring buffer (Neil Horman) [1290656]
  - [netdrv] vmxnet3: introduce generalized command interface to configure the device (Neil Horman) [1290656]
  - [netdrv] vmxnet3: prepare for version 3 changes (Neil Horman) [1290656]
  - [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1290656]
  - [netdrv] vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (Neil Horman) [1290656]
  - [netdrv] vmxnet3: set CHECKSUM_UNNECESSARY for IPv6 packets (Neil Horman) [1290656]
  - [netdrv] vmxnet3: fix lock imbalance in vmxnet3_tq_xmit() (Neil Horman) [1290656 1311537]
  - [netdrv] vmxnet3: Update Rx ring 2 max size (Neil Horman) [1290656]
  - [netdrv] Vmxnet3: Fix regression caused by 5738a09 (Neil Horman) [1290656]
  - [netdrv] vmxnet3: Fix use of mfTableLen for big endian architectures (Neil Horman) [1290656]
  - [netdrv] vmxnet3: get rid of unnecessary initializations in .get_drvinfo() (Neil Horman) [1290656]
  - [netdrv] Vmxnet3: Extend register dump support (Neil Horman) [1290656]
  - [fs] namei: don't rehash target on succesful rename (J. Bruce Fields) [1080701]
  - [powerpc] eeh: Block PCI configuration space access during EEH (Gustavo Duarte) [1216944]
  - [scsi] Avoid crashing if device uses DIX but adapter does not support it (Ewan Milne) [1369997]
  - [scsi] aacraid: Check size values after double-fetch from user (Maurizio Lombardi) [1369770] {CVE-2016-6480}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-659.el6]
changelog:
  - [firmware] amd-ucode: Add microcode_amd_fam16 (Suravee Suthikulpanit) [1322525]
  - [firmware] amd-ucode: Add microcode_amd_fam15 (Suravee Suthikulpanit) [1322525]
  - [firmware] amd-ucode: Add microcode_amd (Suravee Suthikulpanit) [1322525]
  - [netdrv] igbvf: remove "link is Up" message when registering mcast address (Corinna Vinschen) [1304114]
  - [acpi] acpia: Fix Scope() op in module level code (Lenny Szubowicz) [1357316]
  - [security] selinux: test for !ss_initialized in selinux_sysctl (Mateusz Guzik) [1285009]
  - [scsi] fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (Maurizio Lombardi) [1341298]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-660.el6]
changelog:
  - [firmware] revert "amd-ucode: Add microcode_amd" (Phillip Lougher) [1375170]
  - [firmware] revert "amd-ucode: Add microcode_amd_fam15" (Phillip Lougher) [1375170]
  - [firmware] revert "amd-ucode: Add microcode_amd_fam16" (Phillip Lougher) [1375170]
  - [s390] mm: fix asce_bits handling with dynamic pagetable levels (Steve Best) [1341758]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-661.el6]
changelog:
  - [fs] NFSv4.1: Fix an NFSv4.1 state renewal regression (Dave Wysochanski) [1332300]
  - [scsi] ibmvfc: Fix I/O hang when port is not mapped (Steve Best) [1377964]
  - [powerpc] eeh: Fix dereferencing NULL device_node (Gustavo Duarte) [1323874]
  - [fs] nfsd3: Check write permission after checking existence (Harshula Jayasuriya) [1373393]
  - [x86] tsc: Add backwards time checking to read_tsc() and vread_tsc() (Prarit Bhargava) [1375163]
  - [sched] core: Clear the root_domain cpumasks in init_rootdomain (Aristeu Rozanski) [1214887]
  - [edac] sb_edac: get rid of 2HA handling while getting active channels (Aristeu Rozanski) [1318810 1353808]
  - [edac] sb_edac: fix Broadwell channel calculation (Aristeu Rozanski) [1318810 1353808]
  - [edac] sb_edac: fix csrow/channel emulation (Aristeu Rozanski) [1318810 1353808]
  - [edac] sb_edac: Fix rank lookup on Broadwell (Aristeu Rozanski) [1318810 1353808]
  - [edac] sb_edac: Take account of channel hashing when needed (Aristeu Rozanski) [1318810 1353808]
  - [edac] sb_edac: Repair damage introduced when "fixing" channel address (Aristeu Rozanski) [1318810 1353808]
  - [edac] sb_edac: Fix computation of channel address (Aristeu Rozanski) [1318810 1353808]
  - [edac] sb_edac: Add support for duplicate device IDs (Aristeu Rozanski) [1318810 1353808]
  - [acpi] SRAT: fix SRAT parsing order with both LAPIC and X2APIC present (Prarit Bhargava) [1247218]
  - [acpi] tables: test the correct variable (Prarit Bhargava) [1247218]
  - [x86] acpi: Handle apic/x2apic entries in MADT in correct order (Prarit Bhargava) [1247218]
  - [acpi] tables: Add acpi_subtable_proc to ACPI table parsers (Prarit Bhargava) [1247218]
  - [acpi] table: Always count matched and successfully parsed entries (Prarit Bhargava) [1247218]
  - [acpi] table: Add new function to get table entries (Prarit Bhargava) [1247218]
  - [netdrv] ixgbe: Fix ATR so that it correctly handles IPv6 extension headers (Ken Cox) [1339563]
  - [netdrv] ixgbe: Store VXLAN port number in network order (Ken Cox) [1339563]
  - [netdrv] ixgbe: Make ATR recognize IPv6 extended headers (Ken Cox) [1339563]
  - [net] vlan: Fix FCOE_MTU support (Maurizio Lombardi) [1367250]
  - [net] inet_diag: fix oops for IPv4 AF_INET6 TCP SYN-RECV state (Phil Sutter) [1328053]
  - [net] tcp: make challenge acks less predictable (Florian Westphal) [1355607] {CVE-2016-5696}
  - [net] netfilter: bridge: do not re-invoke iptables (Florian Westphal) [1319883]
  - [net] set dev->addr_assign_type correctly (Sabrina Dubroca) [1318500]
  - [netdrv] atheros eth: set addr_assign_type if random_ether_addr() used (Sabrina Dubroca) [1318500]
  - [netdrv] ethoc: set addr_assign_type if random_ether_addr() used (Sabrina Dubroca) [1318500]
  - [net] use eth_hw_addr_random() and reset addr_assign_type (Sabrina Dubroca) [1318500]
  - [netdrv] replace random_ether_addr() with eth_hw_addr_random() (Sabrina Dubroca) [1318500]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-662.el6]
changelog:
  - [netdrv] enic: set netdev->vlan_features (Stefan Assmann) [1309973]
  - [s390] qeth: delete napi struct when removing a qeth device (Hendrik Brueckner) [1357027]
  - [s390] iucv: call skb_linearize() when needed (Hendrik Brueckner) [1341759]
  - [s390] dasd: fix hanging device after clear subchannel (Hendrik Brueckner) [1368066]
  - [s390] fix test_fp_ctl inline assembly contraints (Hendrik Brueckner) [1357029]
  - [s390] spinlock: avoid yield to non existent cpu (Hendrik Brueckner) [1341757]
  - [mm] hugetlb: don't use reserved during VM_SHARED mapping cow (Petr Holasek) [1297199]
  - [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1374743]
  - [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1376467]
  - [fs] nfs4: Fix potential use after free of state in nfs4_do_reclaim (Dave Wysochanski) [1343231]
  - [fs] ext2: fix filesystem deadlock while reading corrupted xattr block (Carlos Maiolino) [847106]
  - [documentation] watchdog: hpwdt: remove email address from doc (Nigel Croxon) [1375651]
  - [documentation] watchdog: hpwdt: Adjust documentation to match latest kernel module parameters (Nigel Croxon) [1375651]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-663.el6]
changelog:
  - [fs] NFS: Fix another OPEN_DOWNGRADE bug (Steve Dickson) [1340539]
  - [fs] NFSv4: Fix another bug in the close/open_downgrade code (Steve Dickson) [1340539]
  - [fs] NFSv4: Fix problems with close in the presence of a delegation (Steve Dickson) [1340539]
  - [debug] lockdep: raise MAX_LOCKDEP_CHAINS_BITS to 16 (Maurizio Lombardi) [1314144]
  - [block] nvme: add device id's with intel stripe quirk (David Milburn) [1372088]
  - [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1301903 1333167]
  - [fs] sunrpc: make AF_LOCAL connect synchronous (Steve Dickson) [1321366]
  - [fs] sunrpc: TCP/UDP always close the old socket before reconnecting (Steve Dickson) [1321366]
  - [fs] sunrpc: Add helpers to prevent socket create from racing (Steve Dickson) [1321366]
  - [fs] sunrpc: Fix stupid typo in xs_sock_set_reuseport (Steve Dickson) [1321366]
  - [fs] sunrpc: Define xs_tcp_fin_timeout only if CONFIG_SUNRPC_DEBUG (Steve Dickson) [1321366]
  - [fs] sunrpc: Handle connection reset more efficiently (Steve Dickson) [1321366]
  - [fs] sunrpc: Remove the redundant XPRT_CONNECTION_CLOSE flag (Steve Dickson) [1321366]
  - [fs] sunrpc: Make xs_tcp_close() do a socket shutdown rather than a sock_release (Steve Dickson) [1321366]
  - [fs] sunrpc: Ensure xs_tcp_shutdown() requests a full close of the connection (Steve Dickson) [1321366]
  - [fs] sunrpc: Cleanup to remove remaining uses of XPRT_CONNECTION_ABORT (Steve Dickson) [1321366]
  - [fs] sunrpc: Remove TCP socket linger code (Steve Dickson) [1321366]
  - [fs] sunrpc: Remove TCP client connection reset hack (Steve Dickson) [1321366]
  - [fs] sunrpc: Ensure xs_reset_transport() resets the close connection flags (Steve Dickson) [1321366]
  - [fs] sunrpc: Do not clear the source port in xs_reset_transport (Steve Dickson) [1321366]
  - [fs] sunrpc: Handle EADDRINUSE on connect (Steve Dickson) [1321366]
  - [fs] sunrpc: Set SO_REUSEPORT socket option for TCP connections (Steve Dickson) [1321366]
  - [block] nvme: Increase the max transfer size when mdts is 0 (David Milburn) [1343876]
  - [block] nvme: make setup work for devices that don't do INTx (David Milburn) [1343876]
  - [block] nvme: Fix potential IO timeout race condition (David Milburn) [1343876]
  - [block] nvme: Don't write cq doorbell on suspended queues (David Milburn) [1343876]
  - [block] nvme: Fix ioctl passthrough length calculation (David Milburn) [1343876]
  - [block] nvme: Return busy status on suspended queue (David Milburn) [1343876]
  - [block] nvme: Add nvme subsystem reset IOCTL (David Milburn) [1343876]
  - [block] nvme: Add nvme subsystem reset support (David Milburn) [1343876]
  - [block] nvme: add sysfs and ioctl controller reset (David Milburn) [1343876]
  - [block] nvme: increase depth of admin queue (David Milburn) [1343876]
  - [infiniband] ib/qib: Support creating qps with GFP_NOIO flag (Alex Estrin) [1373507]
  - [infiniband] ib/qib: Improve ipoib UD performance (Alex Estrin) [1373507]
  - [infiniband] ib/qib: fix mcast detach when qp not attached (Alex Estrin) [1373507]
  - [infiniband] ib/qib: Prevent context loss (Alex Estrin) [1373507]
  - [pci] Allocate ATS struct during enumeration (Myron Stowe) [1228022]
  - [mm] thp: fix SMP race condition between THP page fault and MADV_DONTNEED (Andrea Arcangeli) [1314133]
  - [netdrv] igb: call ndo_stop() instead of dev_close() when running offline selftest (Stefan Assmann) [1267865]
  - [block] Update queue-sysfs.txt documentation file (Joe Lawrence) [1361603]
  - [mm] tracing: Fix no callsite ifndef CONFIG_KMEMTRACE (Aristeu Rozanski) [1123990]
  - [mm] tracing: Define kmem_cache_alloc_notrace ifdef CONFIG_TRACING (Aristeu Rozanski) [1123990]
  - [kernel] replace some read_lock(&tasklist_lock)'s with tasklist_read_lock() (Oleg Nesterov) [1304864]
  - [kernel] replace write_lock_irq(&tasklist_lock) with tasklist_write_lock_irq() (Oleg Nesterov) [1304864]
  - [kernel] introduce tasklist_read_lock() and tasklist_write_lock_irq() (Oleg Nesterov) [1304864]
  - [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1379452]
  - [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1379452]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-664.el6]
changelog:
  - [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1384621]
  - [fs] dlm: free workqueues after the connections (Marcelo Leitner) [1365204]
  - [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1342114]
  - [netdrv] ibmveth: check return of skb_linearize in ibmveth_start_xmit (Gustavo Duarte) [1322315]
  - [fs] NFSv4.1: nfs41_clear_delegation_stateid shouldn't trust NFS_DELEGATED_STATE (Steve Dickson) [1230305]
  - [drm] i915/skl: Fix spurious gpu hang with gt3/gt4 revs (Rob Clark) [1323945]
  - [drm] i915/skl: Fix rc6 based gpu/system hang (Rob Clark) [1323945]
  - [drm] prime: fix error path deadlock fail (Rob Clark) [1334880]
  - [drm] Balance error path for GEM handle allocation (Rob Clark) [1334880]
  - [netdrv] ixgbe: cleanup crosstalk fix (Ken Cox) [1346399]
  - [netdrv] ixgbe: Add work around for empty SFP+ cage crosstalk (Ken Cox) [1346399]
  - [netdrv] ixgbe: Add definitions for x550em_a 10G MAC (Ken Cox) [1346399]
  - [netdrv] ixgbe: Do not clear RAR entry when clearing VMDq for SAN MAC (Ken Cox) [1346399]
  - [md] disable RAID5 /sys/block/md<X>/md/group_thread_cnt (Jes Sorensen) [1322733]
  - [mfd] rtsx: Various tweaks for RHEL-6 (Don Zickus) [1167938]
  - [mfd] rtsx: Add in support for power down (Don Zickus) [1167938]
  - [mfd] rtsx: Update driving settings (Don Zickus) [1167938]
  - [mfd] rtsx: Read vendor setting from config space (Don Zickus) [1167938]
  - [mfd] rtsx: Add support for rts525A (Don Zickus) [1167938]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-666.el6]
changelog:
  - [netdrv] i40e/i40evf : Bump driver version from 1.5.5 to 1.5.10 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: RSS Hash Option parameters (Stefan Assmann) [1360179]
  - [netdrv] i40e: Remove HMC AQ API implementation (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Add driver support for promiscuous mode (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Only offload VLAN tag if enabled (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add DeviceID for X722 QSFP+ (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add device capability which defines if update is available (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Allow PF driver to configure RSS (Stefan Assmann) [1360179]
  - [netdrv] i40e: Specify AQ event opcode to wait for (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Don't Panic (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Limit TSO to 7 descriptors for payload instead of 8 per packet (Stefan Assmann) [1360179]
  - [netdrv] i40evf: properly handle VLAN features (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump patch from 1.5.2 to 1.5.5 (Stefan Assmann) [1360179]
  - [netdrv] i40e: Input set mask constants for RSS, flow director, and flex bytes (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add RSS configuration to virtual channel (Stefan Assmann) [1360179]
  - [netdrv] i40e: Move NVM variable out of AQ struct (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Faster RX via avoiding FCoE (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Drop unused tx_ring argument (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump patch from 1.5.1 to 1.5.2 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Fix get_rss_aq (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Add longer wait after remove module (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add new device ID for X722 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Fix VLAN features (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump patch from 1.4.25 to 1.5.1 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Add additional check for reset (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Fix handling of boolean logic in polling routines (Stefan Assmann) [1360179]
  - [netdrv] i40evf: remove dead code (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Allow up to 12K bytes of data per Tx descriptor instead of 8K (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.25 and i40evf to 1.4.15 (Stefan Assmann) [1360179]
  - [netdrv] i40e: implement and use Rx CTL helper functions (Stefan Assmann) [1360179]
  - [netdrv] i40e: add adminq commands for Rx CTL registers (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add functions to blink led on 10GBaseT PHY (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Rewrite logic for 8 descriptor per packet check (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Break up xmit_descriptor_count from maybe_stop_tx (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Use u64 values instead of casting them in TSO function (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Drop outer checksum offload that was not requested (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.15 and i40evf to 1.4.11 (Stefan Assmann) [1360179]
  - [netdrv] i40e: When in promisc mode apply promisc mode to Tx Traffic as well (Stefan Assmann) [1360179]
  - [netdrv] i40e: clean event descriptor before use (Stefan Assmann) [1360179]
  - [netdrv] i40evf: set adapter state on reset failure (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: avoid atomics (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add a SW workaround for lost interrupts (Stefan Assmann) [1360179]
  - [netdrv] i40evf: support packet split receive (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump version (Stefan Assmann) [1360179]
  - [netdrv] i40e: properly show packet split status in debugfs (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: use logical operators, not bitwise (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: use __GFP_NOWARN (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: try again after failure (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: don't lose interrupts (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Change vf driver string to reflect all products i40evf supports (Stefan Assmann) [1360179]
  - [netdrv] i40e: Refactor force_wb and WB_ON_ITR functionality code (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: bump version to 1.4.12/1.4.8 (Stefan Assmann) [1360179]
  - [netdrv] i40e: do TSO only if CHECKSUM_PARTIAL is set (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.11 and i40evf to 1.4.7 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: enable bus master after reset (Stefan Assmann) [1360179]
  - [netdrv] i40e: fix write-back-on-itr to work with legacy itr (Stefan Assmann) [1360179]
  - [netdrv] i40e: Bump AQ minor version to 1.5 for new FW features (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ thermal sensor control struct (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Add VXLAN-GPE tunnel type (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Add set_switch_config (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Shared resource flags (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Add external power class to get link status (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Geneve cloud tunnel type (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Add Run PHY Activity struct (Stefan Assmann) [1360179]
  - [netdrv] i40e: add new proxy-wol bit for X722 (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Use private workqueue (Stefan Assmann) [1360179]
  - [netdrv] i40evf: add new write-back mode (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Fix for UDP/TCP RSS for X722 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: null out ring pointers on free (Stefan Assmann) [1360179]
  - [netdrv] i40e: define function capabilities in only one place (Stefan Assmann) [1360179]
  - [netdrv] i40evf: allow channel bonding of VFs (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Fix RSS rx-flow-hash configuration through ethtool (Stefan Assmann) [1360179]
  - [netdrv] treewide: Fix typos in printk (Stefan Assmann) [1360179]
  - [netdrv] i40e: remove forever unused ID (Stefan Assmann) [1360179]
  - [netdrv] i40e: Fix Rx hash reported to the stack by our driver (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.8 and i40evf to 1.4.4 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: change version string generation (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Add a new offload for RSS PCTYPE V2 for X722 (Stefan Assmann) [1360179]
  - [netdrv] i40e: Opcode and structures required by OEM Post Update AQ command and add new NVM arq message (Stefan Assmann) [1360179]
  - [netdrv] i40evf: check rings before freeing resources (Stefan Assmann) [1360179]
  - [netdrv] i40e: Fix errors resulted while turning off TSO (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: use configured RSS key and lookup table in i40e_vsi_config_rss (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: fix broken i40e_config_rss_aq function (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: move i40e_vsi_config_rss below i40e_get_rss_aq (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove redundant memset (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: check for and deal with non-contiguous TCs (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf : Bump driver version from 1.5.5 to 1.5.10 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Update device ids for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Drop extra copy of function (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Use consistent type for vf_id (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: PTP - avoid aggregate return warnings (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix uninitialized variable (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove HMC AQ API implementation (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40evf: Add driver support for promiscuous mode (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add VF promiscuous mode driver support (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add promiscuous on VLAN support (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Only offload VLAN tag if enabled (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove zero check (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add DeviceID for X722 QSFP+ (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add device capability which defines if update is available (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Specify AQ event opcode to wait for (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Code cleanup in i40e_add_fdir_ethtool (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Limit TSO to 7 descriptors for payload instead of 8 per packet (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: fix errant PCIe bandwidth message (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump patch from 1.5.2 to 1.5.5 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Input set mask constants for RSS, flow director, and flex bytes (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Move NVM event wait check to NVM code (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add RSS configuration to virtual channel (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Move NVM variable out of AQ struct (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Restrict VF poll mode to only single function mode devices (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Faster RX via avoiding FCoE (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Drop unused tx_ring argument (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Move HW flush (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Leave debug_mask cleared at init (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Inserting a HW capability display info (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump patch from 1.5.1 to 1.5.2 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Request PHY media event at reset time (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Lower some message levels (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix for supported link modes in 10GBaseT PHY's (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Disable link polling (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Make VF resets more reliable (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add new device ID for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove unused variable (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: remove redundant check on vsi->active_vlans (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump patch from 1.4.25 to 1.5.1 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Change comment to reflect correct function name (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Change unknown event error msg to ignore message (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Added code to prevent double resets (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Notify VFs of all resets (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove timer and task only if created (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Assure that adminq is alive in debug mode (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove MSIx only if created (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix up return code (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Save off VSI resource count when updating VSI (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Remove I40E_MAX_USER_PRIORITY define (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Fix handling of boolean logic in polling routines (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Allow up to 12K bytes of data per Tx descriptor instead of 8K (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: call ndo_stop() instead of dev_close() when running offline selftest (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: queue-specific settings for interrupt moderation (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.25 and i40evf to 1.4.15 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: let go of the past (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: suspend scheduling during driver unload (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Use the new rx ctl register helpers. Don't use AQ calls from clear_hw (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: implement and use Rx CTL helper functions (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add adminq commands for Rx CTL registers (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add check for null VSI (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Expose some registers to program parser, FD and RSS logic (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix for unexpected messaging (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Do not wait for Rx queue disable in DCB reconfig (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Increase timeout when checking GLGEN_RSTAT_DEVSTATE bit (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix led blink capability for 10GBaseT PHY (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add functions to blink led on 10GBaseT PHY (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Rewrite logic for 8 descriptor per packet check (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Break up xmit_descriptor_count from maybe_stop_tx (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Clean-up Rx packet checksum handling (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Set skb->csum_level for encapsulated checksum (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Add exception handling for Tx checksum (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Use u64 values instead of casting them in TSO function (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Drop outer checksum offload that was not requested (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.15 and i40evf to 1.4.11 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: When in promisc mode apply promisc mode to Tx Traffic as well (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: clean event descriptor before use (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: better error reporting for nvmupdate (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: expand comment (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Do not disable queues in the Legacy/MSI Interrupt handler (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: avoid atomics (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Removal of code which relies on BASE VEB SEID (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix PROMISC mode for Multi-function per port (MFP) devices (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add a SW workaround for lost interrupts (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: trivial: cleanup use of pf->hw (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: drop unused debugfs file "dump" (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: get rid of magic number (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump version (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: properly show packet split status in debugfs (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: use logical operators, not bitwise (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: use __GFP_NOWARN (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: dump descriptor indexes in hex (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: try again after failure (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: don't lose interrupts (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Refactor force_wb and WB_ON_ITR functionality code (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: use new add_veb calling with VEB stats control (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add VEB stat control and remove L2 cloud filter (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: set shared bit for multicast filters (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Make the DCB firmware checks for X710/XL710 only (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: move sync_vsi_filters up in service_task (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add priv flag for automatic rule eviction (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: bump version to 1.4.12/1.4.8 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: avoid large memcpy by assigning struct (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: count allocation errors (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: drop unused function (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: negate PHY int mask bits (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: APIs to Add/remove port mirroring rules (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: fix: do not sleep in netdev_ops (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: allocate memory safer (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: do TSO only if CHECKSUM_PARTIAL is set (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: trivial: fix missing space (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: trivial: drop duplicate definition (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.11 and i40evf to 1.4.7 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: trivial: remove unnecessary local var (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: remove VF device IDs from PF (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add netdev info to VSI dump (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add a little more to an NVM update debug message (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: refactor DCB function (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add 20G speed for Tx bandwidth calculations (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add counter for arq overflows (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: fix write-back-on-itr to work with legacy itr (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Store lan_vsi_idx and lan_vsi_id in the right size (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Bump AQ minor version to 1.5 for new FW features (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: AQ thermal sensor control struct (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: AQ Add VXLAN-GPE tunnel type (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: AQ Add set_switch_config (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: AQ Shared resource flags (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add 100Mb ethtool reporting (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: AQ Add Run PHY Activity struct (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Limit DCB FW version checks to X710/XL710 devices (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add new proxy-wol bit for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Use private workqueue (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40evf: add new write-back mode (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Fix for UDP/TCP RSS for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Extend ethtool RSS hooks for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add new device IDs for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: bump version to 1.4.10 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Cleanup the code with respect to restarting autoneg (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: define function capabilities in only one place (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Replace X722 mac check in ethtool get_settings (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Fix RSS rx-flow-hash configuration through ethtool (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add mac_filter_element at the end of the list instead of HEAD (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: remove forever unused ID (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix Rx hash reported to the stack by our driver (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: allow zero MAC address for VFs (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: change log messages and error returns (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.8 and i40evf to 1.4.4 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: clean whole mac filter list (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Add a new offload for RSS PCTYPE V2 for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: hush little warnings (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Opcode and structures required by OEM Post Update AQ command and add new NVM arq message (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: use explicit cast from u16 to u8 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: don't add zero MAC filter (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: properly delete VF MAC filters (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: chomp the BIT(_ULL) (Stefan Assmann) [1249250 1310402 1346978]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-667.el6]
changelog:
  - [hv] get rid of id in struct vmbus_channel (Vitaly Kuznetsov) [1322802]
  - [hv] make VMBus bus ids persistent (Vitaly Kuznetsov) [1322802]
  - [hv] storvsc: Fix potential memory leak (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Filter out storvsc messages CD-ROM medium not present (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: fix SRB_STATUS_ABORTED handling (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: add logging for error/warning messages (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Fix a bug in the handling of SRB status flags (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Don't set the SRB_FLAGS_QUEUE_ACTION_ENABLE flag (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Set the tablesize based on the information given by the host (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Don't assume that the scatterlist is not chained (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Retrieve information about the capability of the target (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Always send on the selected outgoing channel (Cathy Avery) [1322928 1352824]
  - [hv] vmbus: Support a vmbus API for efficiently sending page arrays (Cathy Avery) [1322928 1352824]
  - [hv] balloon: replace ha_region_mutex with spinlock (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] balloon: account for gaps in hot add regions (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] balloon: keep track of where ha_region starts (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] balloon: reset host_specified_ha_region (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] balloon: don't crash when memory is added in non-sorted order (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] balloon: check if ha_region_mutex was acquired in MEM_CANCEL_ONLINE case (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] don't leak memory in vmbus_establish_gpadl() (Vitaly Kuznetsov) [1376860]
  - [hv] get rid of redundant messagecount in create_gpadl_header() (Vitaly Kuznetsov) [1376860]
  - [hv] vmbus: don't manipulate with clocksources on crash (Cathy Avery) [1365049]
  - [hv] correct tsc page sequence invalid value (Cathy Avery) [1365049]
  - [hv] vmbus: fix build warning (Cathy Avery) [1365049]
  - [hv] vmbus: Implement a clocksource based on the TSC page (Cathy Avery) [1365049]
  - [hv] kvp: cancel kvp_host_handshake_work on module unload (Vitaly Kuznetsov) [1321259]
  - [x86] mm/xen: Suppress hugetlbfs in PV guests (Vitaly Kuznetsov) [1312331]
  - [mm] hugetlb: allow hugepages_supported to be architecture specific (Vitaly Kuznetsov) [1312331]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-668.el6]
changelog:
  - [netdrv] mlx5e: Fix minimum MTU (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5e: Device's mtu field is u16 and not int (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_en: Fix endianness bug in IPV6 csum calculation (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Allow resetting VF admin mac to zero (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5e: Correctly handle RSS indirection table when changing number of channels (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5e: Fix ethtool RX hash func configuration change (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5e: Fix LRO modify (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5e: Remove wrong poll CQ optimization (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Do not BUG_ON during reset when PCI is offline (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_en: Count HW buffer overrun only once (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: fix some error handling in mlx4_multi_func_init() (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Remove unused macro (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Initialize hop_limit when creating address handle (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5: Expose correct maximum number of CQE capacity (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Replace kfree with kvfree in mlx4_ib_destroy_srq (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: fix handling return value of mlx4_slave_convert_port (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Use vmalloc for WR buffers when needed (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Use correct order of variables in log message (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Expose correct max_sge_rd limit (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Avoid returning success in case of an error flow (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Replace VF zero mac with random mac in mlx4_core (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Fix resource tracker error flow in add_res_range (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Copy/set only sizeof struct mlx4_eqe bytes (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_en: really allow to change RSS key (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5: Fix incorrect wc pkey_index assignment for GSI messages (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Fix incorrect cq flushing in error state (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Use correct SL on AH query under RoCE (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Forbid using sysfs to change RoCE pkeys (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Demote mcg message from warning to debug (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Fix potential deadlock when sending mad to wire (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4, mlx5, mthca: Expose max_sge_rd correctly (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Add extra check for total vfs for SRIOV (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_en: Remove BUG_ON assert when checking if ring is full (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Relieve cpu load average on the port sending flow (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Fix wrong index in propagating port change event to VFs (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Fix memory leak in do_slave_init (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Disable HA for SRIOV PF RoCE devices (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_en: Release TX QP when destroying TX ring (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Disable Granular QoS per VF under IB/Eth VPI configuration (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: fix typo in mlx4_set_vf_mac (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: need to call close fw if alloc icm is called twice (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: double free of dev_vfs (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] bnx2x: don't reset chip on cleanup if PCI function is offline (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: allow adding VLANs while interface is down (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: avoid leaking memory on bnx2x_init_one() failures (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Prevent false warning for lack of FC NPIV (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: fix receive of VF->PF mailbox messages by the PF on big-endian (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: fix sending VF->PF messages on big-endian (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Fix 84833 phy command handler (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Fix led setting for 84858 phy (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Correct 84858 PHY fw version (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Fix 84833 RX CRC (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Fix link-forcing for KR2 (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Warn about grc timeouts in register dump (Michal Schmidt) [1386199]
  - [netdrv] be2net: Enable VF link state setting for BE3 (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix TX stats for TSO packets (Ivan Vecera) [1347812]
  - [netdrv] be2net: NCSI FW section should be properly updated with ethtool for BE3 (Ivan Vecera) [1347812]
  - [netdrv] be2net: Provide an alternate way to read pf_num for BEx chips (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix mac address collision in some configurations (Ivan Vecera) [1347812]
  - [netdrv] be2net: Avoid redundant addition of mac address in HW (Ivan Vecera) [1347812]
  - [netdrv] be2net: Add privilege level check for OPCODE_COMMON_GET_EXT_FAT_CAPABILITIES SLI cmd (Ivan Vecera) [1347812]
  - [netdrv] be2net: Issue COMMON_RESET_FUNCTION cmd during driver unload (Ivan Vecera) [1347812]
  - [netdrv] be2net: Support UE recovery in BEx/Skyhawk adapters (Ivan Vecera) [1347812]
  - [netdrv] be2net: replace polling with sleeping in the FW completion path (Ivan Vecera) [1347812]
  - [netdrv] be2net: do not remove vids from driver table if be_vid_config() fails (Ivan Vecera) [1347812]
  - [netdrv] be2net: clear vlan-promisc setting before programming the vlan list (Ivan Vecera) [1347812]
  - [netdrv] be2net: perform temperature query in adapter regardless of its interface state (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix broadcast echoes from EVB in BE3 (Ivan Vecera) [1347812]
  - [netdrv] be2net: fix definition of be_max_eqs() (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix provisioning of RSS for VFs in multi-partition configurations (Ivan Vecera) [1347812]
  - [netdrv] be2net: Enable Wake-On-LAN from shutdown for Skyhawk (Ivan Vecera) [1347812]
  - [netdrv] be2net: use max-TXQs limit too while provisioning VF queue pairs (Ivan Vecera) [1347812]
  - [netdrv] benet: be_resume needs to protect be_open with rtnl_lock (Ivan Vecera) [1347812]
  - [netdrv] be2net: Don't leak iomapped memory on removal (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix a UE caused by passing large frames to the ASIC (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix pcie error recovery in case of NIC+RoCE adapters (Ivan Vecera) [1347812]
  - [netdrv] be2net: Interpret and log new data that's added to the port misconfigure async event (Ivan Vecera) [1347812]
  - [netdrv] be2net: Request RSS capability of Rx interface depending on number of Rx rings (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix interval calculation in interrupt moderation (Ivan Vecera) [1347812]
  - [netdrv] be2net: Add retry in case of error recovery failure (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix Lancer error recovery (Ivan Vecera) [1347812]
  - [netdrv] be2net: Don't run ethtool self-tests for VFs (Ivan Vecera) [1347812]
  - [netdrv] be2net: SRIOV Queue distribution should factor in EQ-count of VFs (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix be_vlan_rem_vid() to check vlan id being removed (Ivan Vecera) [1347812]
  - [netdrv] be2net: check for INSUFFICIENT_PRIVILEGES error (Ivan Vecera) [1347812]
  - [netdrv] be2net: return error status from be_set_phys_id() (Ivan Vecera) [1347812]
  - [netdrv] be2net: fix port-res desc query of GET_PROFILE_CONFIG FW cmd (Ivan Vecera) [1347812]
  - [netdrv] be2net: fix VF link state transition from disabled to auto (Ivan Vecera) [1347812]
  - [netdrv] bnx2: fix locking when netconsole is used (Ivan Vecera) [1291369]
  - [netdrv] tg3: Avoid NULL pointer dereference in tg3_io_error_detected() (Ivan Vecera) [1347828]
  - [netdrv] tg3: Fix for disallow tx coalescing time to be 0 (Ivan Vecera) [1347828]
  - [netdrv] tg3: Report the correct number of RSS queues through tg3_get_rxnfc (Ivan Vecera) [1347828]
  - [netdrv] tg3: Fix for diasllow rx coalescing time to be 0 (Ivan Vecera) [1347828]
  - [netdrv] net: tg3: avoid uninitialized variable warning (Ivan Vecera) [1347828]
  - [net] ipv6: restrict hop_limit sysctl setting to range (1; 255) (Paolo Abeni) [1314305]
  - [net] ipv4: add limits to ip_default_ttl (Paolo Abeni) [1314305]
  - [net] route: enforce hoplimit max value (Paolo Abeni) [1313899]
  - [net] netfilter: Add missing #include <limits.h> for userland (Sabrina Dubroca) [1317697]
  - [net] sctp: use the same clock as if sock source timestamps were on (Xin Long) [1334561]
  - [net] sctp: update the netstamp_needed counter when copying sockets (Xin Long) [1334561]
  - [net] sctp: fix the transports round robin issue when init is retransmitted (Xin Long) [1312728]
  - [net] pppoe: fix memory corruption in padt work structure (Beniamino Galvani) [1317900]
  - [net] pppoe: drop pppoe device in pppoe_unbind_sock_work (Beniamino Galvani) [1317900]
  - [net] pppoe: Use workqueue to die properly when a PADT is received (Beniamino Galvani) [1317900]
  - [net] ipv6: Skip XFRM lookup if dst_entry in socket cache is valid (Jakub Sitnicki) [1327680]
  - [net] ipv6: Consolidate route lookup sequences (Jakub Sitnicki) [1327680]
  - [net] macvtap: Add support of packet capture on macvtap device (Sabrina Dubroca) [1373100]
  - [scsi] fnic: pci_dma_mapping_error() doesn't return an error code (Maurizio Lombardi) [1364593]
  - [scsi] fnic: Using rport->dd_data to check rport online instead of rport_lookup (Maurizio Lombardi) [1364593]
  - [scsi] fnic: Cleanup the I/O pending with fw and has timed out and is used to issue LUN reset (Maurizio Lombardi) [1364593]
  - [scsi] fnic: move printk()s outside of the critical code section (Maurizio Lombardi) [1364593]
  - [scsi] fnic: check pci_map_single() return value (Maurizio Lombardi) [1364593]
  - [scsi] be2iscsi: Driver version: 11.1.0.0 (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Replace _bh with _irqsave/irqrestore (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Remove redundant iscsi_wrb desc memset (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix bad WRB index error (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix async PDU handling path (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Add lock to protect WRB alloc and free (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: _bh for io_sgl_lock and mgmt_sgl_lock (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Reduce driver load/unload time (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix ExpStatSn in management tasks (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Update the driver version (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix WRB leak in login/logout path (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix async link event processing (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix to process 25G link speed info from FW (Maurizio Lombardi) [1347815]
  - [scsi] scsi_transport_iscsi: Add 25G and 40G speed definition (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix IOPOLL implementation (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix return value for MCC completion (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Add FW config validation (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix to handle misconfigured optics events (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix VLAN support for IPv6 network (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix to remove shutdown entry point (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Added return value check for mgmt_get_all_if_id (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Set mbox timeout to 30s (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix to synchronize tag allocation using spin_lock (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix to use atomic bit operations for tag_state (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix mbox synchronization replacing spinlock with mutex (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix soft lockup in mgmt_get_all_if_id path using bmbx (Maurizio Lombardi) [1347815]
  - [scsi] scsi_debug: fix logical block provisioning support when unmap_alignment != 0 (Maurizio Lombardi) [1388096]
  - [scsi] scsi_debug: fix logical block provisioning support (Maurizio Lombardi) [1388096]
  - [scsi] mpt3sas: Fix resume on WarpDrive flash cards (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: avoid mpt3sas_transport_port_add NULL parent_dev (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: set num_phys after allocating phy space (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: add missing curly braces (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Used "synchronize_irq()"API to synchronize timed-out IO & TMs (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Set maximum transfer length per IO to 4MB for VDs (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Updating mpt3sas driver version to 13.100.00.00 (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Handle active cable exception event (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Update MPI header to 2.00.42 (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: remove unused fw_event_work elements (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Remove usage of 'struct timeval' (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Don't overreach ioc->reply_post during initialization (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Remove unnecessary synchronize_irq() before free_irq() (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Free memory pools before retrying to allocate with different value (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Remove cpumask_clear for zalloc_cpumask_var and don't free free_cpu_mask_var before reply_q (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Updating mpt3sas driver version to 12.100.00.00 (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Fix for Asynchronous completion of timedout IO and task abort of timedout IO (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Updated MPI Header to 2.00.42 (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Add support for configurable Chain Frame Size (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Added smp_affinity_enable module parameter (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Make use of additional HighPriority credit message frames for sending SCSI IOs (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Never block the Enclosure device (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Fix static analyzer(coverity) tool identified defects (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Used IEEE SGL instead of MPI SGL while framing a SMP Passthrough request message (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Added support for high port count HBA variants (Tomas Henzl) [1329353]
  - [scsi] bnx2fc: Update version number to 2.10.3 (Maurizio Lombardi) [1380385]
  - [scsi] bnx2fc: Check sc_cmd device and host pointer before returning the command to the mid-layer (Maurizio Lombardi) [1380385]
  - [scsi] bnx2fc: Print netdev device name when FCoE is successfully initialized (Maurizio Lombardi) [1380385]
  - [scsi] bnx2fc: Print when we send a fip keep alive (Maurizio Lombardi) [1380385]
  - [scsi] bnx2fc: bnx2fc_eh_abort(): fix wrong return code (Maurizio Lombardi) [1380385]
  - [scsi] bnx2fc: Show information about log levels in 'modinfo' (Maurizio Lombardi) [1380385]
  - [scsi] hpsa: update driver revision to 3.4.10-0-RH2 (Joseph Szczypek) [1377892]
  - [scsi] hpsa: correct scsi 6byte lba calculation (Joseph Szczypek) [1377892]
  - [scsi] lpfc: remove unknown ELS message warnings for RDP (Maurizio Lombardi) [1347811]
  - [scsi] smartpqi: add to config-generic (Scott Benesh) [1343743]
  - [scsi] smartpqi: raid bypass lba calculation fix (Scott Benesh) [1343743]
  - [scsi] smartpqi: bump driver version (Scott Benesh) [1343743]
  - [scsi] smartpqi: add smartpqi.txt (Scott Benesh) [1343743]
  - [scsi] smartpqi: update Kconfig (Scott Benesh) [1343743]
  - [scsi] smartpqi: remove timeout for cache flush operations (Scott Benesh) [1343743]
  - [scsi] smartpqi: scsi queuecommand cleanup (Scott Benesh) [1343743]
  - [scsi] smartpqi: minor tweaks to update time support (Scott Benesh) [1343743]
  - [scsi] smartpqi: minor function reformating (Scott Benesh) [1343743]
  - [scsi] smartpqi: correct event acknowledgement timeout issue (Scott Benesh) [1343743]
  - [scsi] smartpqi: correct controller offline issue (Scott Benesh) [1343743]
  - [scsi] smartpqi: add kdump support (Scott Benesh) [1343743]
  - [scsi] smartpqi: enhance reset logic (Scott Benesh) [1343743]
  - [scsi] smartpqi: enhance drive offline informational message (Scott Benesh) [1343743]
  - [scsi] smartpqi: simplify spanning (Scott Benesh) [1343743]
  - [scsi] smartpqi: change tmf macro names (Scott Benesh) [1343743]
  - [scsi] smartpqi: change aio sg processing (Scott Benesh) [1343743]
  - [scsi] aacraid: remove wildcard for series 9 controllers (Scott Benesh) [1343743]
  - [scsi] smartpqi: initial commit of Microsemi smartpqi driver (Scott Benesh) [1343743]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-669.el6]
changelog:
  - [netdrv] sfc: fix potential stack corruption from running past stat bitmask (Jarod Wilson) [1374067]
  - [netdrv] cxgb4: Enable SR-IOV configuration via PCI sysfs interface (Sai Vemuri) [1222751]
  - [netdrv] bnx2x: don't wait for Tx completion on recovery (Michal Schmidt) [1300681]
  - [pm] hibernate: Only crash if necessary in create/free_basic_memory_bitmaps() (Jerry Snitselaar) [1374378]
  - [netdrv] ixgbe: add WoL support for some 82599 subdevice IDs (Ken Cox) [1316845]
  - [kernel] cgroup: improve old cgroup handling in cgroup_attach_proc() (Lauro Ramos Venancio) [1372085]
  - [watchdog] hpwdt: add support for iLO5 (Linda Knippers) [1382496]
  - [watchdog] hpwdt: HP rebranding (Linda Knippers) [1388170]
  - [documentation] Fix hpwdt documentation to match RHEL6 (Linda Knippers) [1388170]
  - [acpi] acpica: Fix for a Store->ArgX when ArgX contains a reference to a field (Lenny Szubowicz) [1324697]
  - [acpi] acpica: Standardize all switch() blocks (Lenny Szubowicz) [1324697]
  - [acpi] acpica: Interpreter: Fix Store() when implicit conversion is not possible (Lenny Szubowicz) [1324697]
  - [fs] backing-dev: fix wakeup timer races with bdi_unregister() (Jeff Moyer) [1111683]
  - [fs] backing-dev: ensure wakeup_timer is deleted (Jeff Moyer) [1111683]
  - [fs] writeback: Fix lost wake-up shutting down writeback thread (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wakeup events when forking bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: fix bad _bh spinlock nesting (Jeff Moyer) [1111683]
  - [fs] writeback: cleanup bdi_register (Jeff Moyer) [1111683]
  - [fs] writeback: remove unnecessary init_timer call (Jeff Moyer) [1111683]
  - [fs] writeback: optimize periodic bdi thread wakeups (Jeff Moyer) [1111683]
  - [fs] writeback: prevent unnecessary bdi threads wakeups (Jeff Moyer) [1111683]
  - [fs] writeback: move bdi threads exiting logic to the forker thread (Jeff Moyer) [1111683]
  - [fs] writeback: restructure bdi forker loop a little (Jeff Moyer) [1111683]
  - [fs] writeback: move last_active to bdi (Jeff Moyer) [1111683]
  - [fs] writeback: do not remove bdi from bdi_list (Jeff Moyer) [1111683]
  - [fs] writeback: simplify bdi code a little (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in the forker thread - 2 (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in the forker thread - 1 (Jeff Moyer) [1111683]
  - [fs] writeback: fix possible race when creating bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: harmonize writeback threads naming (Jeff Moyer) [1111683]
  - [fs] writeback: merge bdi_writeback_task and bdi_start_fn (Jeff Moyer) [1111683]
  - [fs] writeback: bdi_writeback_task() must set task state before calling schedule() (Jeff Moyer) [1111683]
  - [fs] writeback: remove wb_list (Jeff Moyer) [1111683]
  - [s390] zfcp: close window with unblocked rport during rport gone (Hendrik Brueckner) [1383980]
  - [s390] zfcp: fix ELS/GS request&response length for hardware data router (Hendrik Brueckner) [1383981]
  - [s390] zfcp: fix fc_host port_type with NPIV (Hendrik Brueckner) [1383982]
  - [s390] zcrypt: toleration of new crypto adapter hardware with type 12 (Hendrik Brueckner) [1344041]
  - [s390] time: LPAR offset handling (Hendrik Brueckner) [1381564]
  - [s390] time: move PTFF definitions (Hendrik Brueckner) [1381564]
  - [scsi] libfc: Don't have fc_exch_find log errors on a new exchange (Chris Leech) [1368175]
  - [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1383078]
  - [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1368175]
  - [scsi] libfc: Do not login if the port is already started (Chris Leech) [1368175]
  - [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1368175]
  - [scsi] libfc: Do not take rdata->rp_mutex when processing a (Chris Leech) [1368175]
  - [scsi] libfc: Fixup disc_mutex handling (Chris Leech) [1368175]
  - [scsi] libfc: Revisit kref handling (Chris Leech) [1368175]
  - [scsi] fcoe: Stop fc_rport_priv structure leak (Chris Leech) [1368175]
  - [scsi] libfc: do not send ABTS when resetting exchanges (Chris Leech) [1368175]
  - [scsi] libfc: reset exchange manager during LOGO handling (Chris Leech) [1368175]
  - [scsi] libfc: send LOGO for PLOGI failure (Chris Leech) [1368175]
  - [scsi] libfc: Issue PRLI after a PRLO has been received (Chris Leech) [1368175]
  - [scsi] libfc: fix seconds_since_last_reset calculation (Chris Leech) [1368175]
  - [scsi] libfc: Update rport reference counting (Chris Leech) [1368175]
  - [scsi] libfc: XenServer fails to mount root filesystem (Chris Leech) [1368175]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-670.el6]
changelog:
  - [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1387243]
  - [misc] hpilo: Changes to support new security states in iLO5 FW (Joseph Szczypek) [1376584]
  - [misc] hpilo: Change e-mail address from hp.com to hpe.com (Joseph Szczypek) [1376584]
  - [misc] hpilo: cleanup hpilo (Joseph Szczypek) [1376584]
  - [mm] memory_hotplug.c: change normal message to use pr_debug (Jeremy McNicoll) [1255272]
  - [acpi] mem_hotplug: set memory info correctly when problems forcing mem online (Jeremy McNicoll) [1255272]
  - [fs] bio: Need to free integrity payload if the split bio gets memory by itself (Xiao Ni) [1268434]
  - [md] add rdev reference for super write (Xiao Ni) [1365718]
  - [netdrv] rtlwifi: fix memory leak for USB device (Stanislaw Gruszka) [1364597]
  - [fs] NFSv4: Fix a use-after-free situation in _nfs4_proc_getlk() (Benjamin Coddington) [1353272]
  - [drm] nouveau/kms: take mode_config mutex in connector hotplug path (Ben Skeggs) [1349978]
  - [kernel] clocksource: Defer override invalidation unless clock is unstable (Prarit Bhargava) [1356231]
  - [kernel] clocksource: Reselect clocksource when watchdog validated high-res capability (Prarit Bhargava) [1356231]
  - [fs] nfs4: clnt: respect noresvport when establishing connections to DSes (Benjamin Coddington) [1346041]
  - [fs] nfs: Add nfs_client behavior flags (Benjamin Coddington) [1346041]
  - [block] fix /proc/diskstats in-flight - kABI workaround (Jerome Marchand) [1273339 1306879]
  - [block] add internal hd part table references (Jerome Marchand) [1273339 1306879]
  - [block] fix accounting bug on cross partition merges (Jerome Marchand) [1273339 1306879]
  - [block] kref: add kref_test_and_get (Jerome Marchand) [1273339 1306879]
  - [block] Revert "block: fix accounting bug on cross partition merges" (Jerome Marchand) [1273339 1306879]
  - [perf] thread: Fix reference count initial state (Jiri Olsa) [1359100]
  - [perf] tools: Reference count struct map (Jiri Olsa) [1359100]
  - [perf] tools: Check if a map is still in use when deleting it (Jiri Olsa) [1359100]
  - [perf] tools: Protect accesses the map rbtrees with a rw lock (Jiri Olsa) [1359100]
  - [perf] tools: Introduce struct maps (Jiri Olsa) [1359100]
  - [perf] tools: Assign default value for some pointers (Jiri Olsa) [1359100]
  - [perf] tools: Use maps__first()/map__next() (Jiri Olsa) [1359100]
  - [perf] tools: Leave DSO destruction to the map destruction (Jiri Olsa) [1359100]
  - [perf] machine: Mark removed threads as such (Jiri Olsa) [1359100]
  - [perf] tools: Import rb_erase_init from block/ in the kernel sources (Jiri Olsa) [1359100]
  - [perf] tools: Nuke unused map_groups__flush() (Jiri Olsa) [1359100]
  - [perf] tools: Remove redundant initialization of thread linkage members (Jiri Olsa) [1359100]
  - [perf] tools: Rename maps__next (Jiri Olsa) [1359100]
  - [perf] machine: Do not call map_groups__delete(), drop refcnt instead (Jiri Olsa) [1359100]
  - [perf] hists: Rename add_hist_entry to hists__findnew_entry (Jiri Olsa) [1359100]
  - [perf] tools: Use atomic.h for the map_groups refcount (Jiri Olsa) [1359100]
  - [perf] tests: Fix map_groups refcount test (Jiri Olsa) [1359100]
  - [perf] machine: No need to keep a refcnt for last_match (Jiri Olsa) [1359100]
  - [perf] tests: Show refcounting broken expectations in thread-mg-share test (Jiri Olsa) [1359100]
  - [perf] machine: Protect the machine->threads with a rwlock (Jiri Olsa) [1359100]
  - [video] efifb: prevent null-deref when iterating dmi_list (Rob Clark) [1360982]
  - [video] configs: updates for fb backport (Rob Clark) [1360982]
  - [video] fbdev: efifb: bind to efi-framebuffer (Rob Clark) [1360982]
  - [video] fbdev: vesafb: bind to platform-framebuffer device (Rob Clark) [1360982]
  - [video] fbdev: simplefb: add common x86 RGB formats (Rob Clark) [1360982]
  - [video] x86: sysfb: move EFI quirks from efifb to sysfb (Rob Clark) [1360982]
  - [video] x86: provide platform-devices for boot-framebuffers (Rob Clark) [1360982]
  - [video] fbdev: simplefb: mark as fw and allocate apertures (Rob Clark) [1360982]
  - [video] fbdev: simplefb: add init through platform_data (Rob Clark) [1360982]
  - [video] drivers/video: implement a simple framebuffer driver (Rob Clark) [1360982]
  - [video] vesafb: fix memory leak (Rob Clark) [1360982]
  - [video] uvesafb,vesafb: create WC or WB PAT-entries (Rob Clark) [1360982]
  - [video] vesafb: fix comment a typo (Rob Clark) [1360982]
  - [video] vesafb: use platform_driver_probe() instead of platform_driver_register() (Rob Clark) [1360982]
  - [video] efifb: Fix call to wrong unregister function (Rob Clark) [1360982]
  - [video] efifb: Disallow manual bind and unbind (Rob Clark) [1360982]
  - [video] efifb: Fix mismatched request/release_mem_region (Rob Clark) [1360982]
  - [video] efifb: fix int to pointer cast warning (Rob Clark) [1360982]
  - [video] efifb: Add override for 11" Macbook Air 3,1 (Rob Clark) [1360982]
  - [video] efifb: Support overriding fields FW tells us with the DMI data (Rob Clark) [1360982]
  - [video] efifb: support AMD Radeon HD 6490 (Rob Clark) [1360982]
  - [video] efifb: support the EFI framebuffer on more Apple hardware (Rob Clark) [1360982]
  - [video] efifb: check that the base address is plausible on pci systems (Rob Clark) [1360982]
  - [video] drivers/video/efifb.c: support framebuffer for NVIDIA 9400M in MacBook Pro 5, 1 (Rob Clark) [1360982]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-671.el6]
changelog:
  - [perf] list: Fix rNNNN list output to appear only once (Jiri Olsa) [1291256 1374411]
  - [perf] symbols: Check kptr_restrict for root (Jiri Olsa) [1291256 1374411]
  - [fs] SUNRPC: Fix a regression when reconnecting (Benjamin Coddington) [1323801]
  - [fs] SUNRPC: Clear the request rq_bytes_sent field in xprt_release_write (Benjamin Coddington) [1323801]
  - [fs] SUNRPC: Lock the transport layer on shutdown (Benjamin Coddington) [1323801]
  - [virt] kvm: x86 emulator: implement IMUL REG, R/M (opcode 0F AF) (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: implement IMUL REG, R/M, IMM (opcode 69) (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: implement IMUL REG, R/M, imm8 (opcode 6B) (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: Use a register for ____emulate_2op() destination (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: pass destination type to ____emulate_2op() (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: add Src2Imm decoding (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: consolidate immediate decode into a function (Radim Krcmar) [1313468]
  - [hv] netvsc: fix incorrect receive checksum offloading (Vitaly Kuznetsov) [1388701]
  - [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1378614]
  - [hv] vmbus: Fix signaling logic in hv_need_to_signal_on_read() (Vitaly Kuznetsov) [1319054]
  - [hv] vmbus: Eliminate the spin lock on the read path (Vitaly Kuznetsov) [1319054]
  - [hv] ring_buffer: eliminate hv_ringbuffer_peek() (Vitaly Kuznetsov) [1319054]
  - [hv] remove code duplication between vmbus_recvpacket()/vmbus_recvpacket_raw() (Vitaly Kuznetsov) [1319054]
  - [hv] ring_buffer: remove code duplication from hv_ringbuffer_peek/read() (Vitaly Kuznetsov) [1319054]
  - [hv] ring_buffer.c: fix comment style (Vitaly Kuznetsov) [1319054]
  - [hv] netvsc: set nvdev link after populating chn_table (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: synchronize netvsc_change_mtu()/netvsc_set_channels() with netvsc_remove() (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: get rid of struct net_device pointer in struct netvsc_device (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: untangle the pointer mess (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: use start_remove flag to protect netvsc_link_change() (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: move start_remove flag to net_device_context (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: Move subchannel waiting to rndis_filter_device_remove() (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: Wait for sub-channels to be processed during probe (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: Properly size the vrss queues (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: Add close of RNDIS filter into change mtu call (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] hv_netvsc: Add support to set MTU reservation from guest side (Vitaly Kuznetsov) [1352105]
  - [perf] probe: Clear probe_trace_event when add_probe_trace_event() fails (Jiri Olsa) [1291510]
  - [perf] probe: Move ftrace probe-event operations to probe-file.c (Jiri Olsa) [1291510]
  - [block] loop: fix comment typo in loop_config_discard (Lukas Czerner) [818597]
  - [block] loop: Limit the number of requests in the bio list (Lukas Czerner) [818597]
  - [fs] ext4: optimize test_root() (Lukas Czerner) [1236047]
  - [fs] ext4: verify group number in verify_group_input() before using it (Lukas Czerner) [1236047]
  - [fs] nfsd: use short read as well as i_size to set eof (Benjamin Coddington) [1302415]
  - [fs] xfs: xfs_alloc_fix_minleft can underflow near ENOSPC (Carlos Maiolino) [1259493]
  - [fs] xfs: Fix rounding in xfs_alloc_fix_len() (Carlos Maiolino) [1259493]
  - [fs] jbd: don't BUG but return ENOSPC if a handle runs out of space (Lukas Czerner) [1291015]
  - [fs] jbd2: don't BUG but return ENOSPC if a handle runs out of space (Lukas Czerner) [1291015]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-672.el6]
changelog:
  - [sched] Fix rq->nr_uninterruptible update race (Aaron Tomlin) [1377292]
  - [security] keys: Fix short sprintf buffer in /proc/keys show function (Frantisek Hrbata) [1375208] {CVE-2016-7042}
  - [net] bridge: fix switched interval for MLD Query types (Hangbin Liu) [1392327]
  - [net] netfilter: ipv6: move POSTROUTING invocation before fragmentation (Eric Garver) [1391240]
  - [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390046] {CVE-2016-7117}
  - [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1381585]
  - [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379529] {CVE-2016-6828}
  - [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351422] {CVE-2016-4998}
  - [net] netfilter: x_tables: validate e->target_offset early (Mateusz Guzik) [1351422] {CVE-2016-4998}
  - [net] netfilter: x_tables: make sure e->next_offset covers remaining blob size (Mateusz Guzik) [1351422] {CVE-2016-4998}
  - [net] tcp: enable per-socket rate limiting of all 'challenge acks' (Florian Westphal) [1388287]
  - [net] tcp: uninline tcp_oow_rate_limited() (Florian Westphal) [1388287]
  - [net] tcp: mitigate ACK loops for connections as tcp_timewait_sock (Florian Westphal) [1388287]
  - [net] tcp: mitigate ACK loops for connections as tcp_sock (Florian Westphal) [1388287]
  - [net] tcp: mitigate ACK loops for connections as tcp_request_sock (Florian Westphal) [1388287]
  - [net] tcp: helpers to mitigate ACK loops by rate-limiting out-of-window dupacks (Florian Westphal) [1388287]
  - [net] ipv6: Don't change dst->flags using assignments (Marcelo Leitner) [1389478]
  - [scsi] megaraid-sas: request irqs later (Tomas Henzl) [1385088]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-673.el6]
changelog:
  - [netdrv] ehea: fix operation state report (Gustavo Duarte) [1089134]
  - [block] nvme: Always use MSI/MSI-x interrupts (David Milburn) [1372023]
  - [fs] aio: aio_nr decrements don't need to be delayed (Jiri Olsa) [1386216]
  - [fs] aio: don't bother with async freeing on failure in ioctx_alloc() (Jiri Olsa) [1386216]
  - [fs] epoll: ep_unregister_pollwait() can use the freed pwq->whead (Lauro Ramos Venancio) [1392372]
  - [fs] epoll: introduce POLLFREE to flush ->signalfd_wqh before kfree() (Lauro Ramos Venancio) [1392372]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-674.el6]
changelog:
  - [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1351798]
  - [x86] Mark Intel Purley supported (Steve Best) [1271866]
  - [pnp] Prevent attaching to ACPI IPMI device (Charles Rose) [857150]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-675.el6]
changelog:
  - [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359304] {CVE-2016-6136}
  - [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1353844]
  - [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1353844]
  - [fs] nfs: Don't pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1353844]
  - [fs] dlm: Don't save callbacks after accept (Robert S Peterson) [1264492]
  - [fs] dlm: Save and restore socket callbacks properly (Robert S Peterson) [1264492]
  - [fs] dlm: Replace nodeid_to_addr with kernel_getpeername (Robert S Peterson) [1264492]
  - [fs] dlm: print kernel message when we get an error from kernel_sendpage (Robert S Peterson) [1264492]
  - [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1397552]
  - [hv] storvsc: Payload buffer incorrectly sized for 32 bit kernels (Cathy Avery) [1394756]
  - [fs] xfs: fix unbalanced inode reclaim flush locking (Brian Foster) [1384564]
  - [scsi] hpsa: correct logical resets (Joseph Szczypek) [1083110]
  - [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1083110]
  - [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1083110]
  - [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1083110]
  - [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1083110]
  - [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1083110]
  - [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1083110]
  - [scsi] vmw_pvscsi: return SUCCESS for successful command aborts (Ewan Milne) [1372465]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-676.el6]
changelog:
  - [scsi] megaraid_sas: driver version upgrade (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: add in missing white spaces in error messages text (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Do not set MPI2_TYPE_CUDA for JBOD FP path for FW which does not support JBOD sequence map (Tomas Henzl) [1397873]
  - [scsi] megaraid_sas: Send SYNCHRONIZE_CACHE for VD to firmware (Tomas Henzl) [1392499]
  - [scsi] megaraid_sas: Do not fire DCMDs during PCI shutdown/detach (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Send correct PhysArm to FW for R1 VD downgrade (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: For SRIOV enabled firmware, ensure VF driver waits for 30secs before reset (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Fix data integrity failure for JBOD (passthrough) devices (Tomas Henzl) [1392499]
  - [scsi] megaraid_sas: fix macro MEGASAS_IS_LOGICAL to avoid regression (Tomas Henzl) [1392499]
  - [scsi] megaraid_sas: clean function declarations in megaraid_sas_base.c up (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: add in missing white space in error message text (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Fix the search of first memory bar (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Use memdup_user() rather than duplicating its implementation (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Fix probing cards without io port (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Downgrade two success messages to info (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: driver version upgrade (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: task management code optimizations (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: call ISR function to clean up pending replies in OCR path (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: reduce memory footprints in kdump mode (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: add missing curly braces in ioctl handler (Tomas Henzl) [1396567]
  - [scsi] mpt3sas: Bump driver version as "14.101.00.00" (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Fix for Endianness issue (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Use the new MPI 2.6 32-bit Atomic Request Descriptors for SAS35 devices (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: set EEDP-escape-flags for SAS35 devices (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Increased/Additional MSIX support for SAS35 devices (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Added Device ID's for SAS35 devices and updated MPI header (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Don't spam logs if logging level is 0 (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Fix warnings exposed by W=1 (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Eliminate dead sleep_flag code (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Eliminate conditional locking in mpt3sas_scsih_issue_tm() (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Ensure the connector_name string is NUL-terminated (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Bump driver version as "14.100.00.00" (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Remove unused macro "MPT_DEVICE_TLR_ON" (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Implement device_remove_in_progress check in IOCTL path (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Fix for incorrect numbers for MSIX vectors enabled when non RDPQ card is enumerated first (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Fix for improper info displayed in var log, while blocking or unblocking the device (Tomas Henzl) [1306469]
  - [net] increase xmit RECURSION_LIMIT to 10 (Sabrina Dubroca) [1392660]
  - [net] add a recursion limit in xmit path (Sabrina Dubroca) [1392660]
  - [net] netfilter: ebtables: put module reference when an incorrect extension is found (Sabrina Dubroca) [1390061]
  - [net] netfilter: ebtables: Fix extension lookup with identical name (Sabrina Dubroca) [1390061]
  - [net] ipv6: ipv6_find_hdr restore prev functionality (Paolo Abeni) [1392975]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-677.el6]
changelog:
  - [netdrv] cxgb4 : Add cxgb4 T4/T5 firmware version 1.15.37.0 (Sai Vemuri) [1349112]
  - [netdrv] be2net: fix locking (Ivan Vecera) [1397915]
  - [perf] tools: Initialize reference counts in map__clone() (Jiri Olsa) [1359100]
  - [perf] tools: Replace map->referenced & maps->removed_maps with map->refcnt (Jiri Olsa) [1359100]
  - [md] raid10: add rcu protection to rdev access in raid10_sync_request (Xiao Ni) [1395048]
  - [md] raid10: add rcu protection in raid10_status (Xiao Ni) [1395048]
  - [md] raid10: fix refounct imbalance when resyncing an array with a replacement device (Xiao Ni) [1395048]
  - [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1342659]
  - [x86] ACPI: add dynamic_debug support (Prarit Bhargava) [1252674]
  - [mm] hugetlb: fix huge_pte_alloc BUG_ON (Dave Anderson) [1397250]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-678.el6]
changelog:
  - [netdrv] RDMA/iw_cxgb4: Fix bar2 virt addr calculation for T4 chips (Sai Vemuri) [1381382]
  - [netdrv] cxgb4: Stop Rx Queues before freeing it up (Sai Vemuri) [1381382]
  - [netdrv] iw_cxgb4 : Added "Fail" column in debug iw_cxgb4 stats (Sai Vemuri) [1381382]
  - [netdrv] cxgb4: Add info print to display number of MSI-X vectors allocated (Sai Vemuri) [1381382]
  - [netdrv] iwpm: crash fix for large connections test (Sai Vemuri) [1381382]
  - [netdrv] cxgb4/cxgb4vf : Use vlan_gro_frags_gr() for VLANs (Sai Vemuri) [1381382]
  - [netdrv] cxgb4vf : Using RHEL6 provided napi_gro_frags_gr() API which returns (enum gro_result) values (Sai Vemuri) [1381382]
  - [serial] 8250_pci: Detach low-level driver during PCI error recovery (Gustavo Duarte) [1400508]
  - [drm] reservation: Remove shadowing local variable 'ret' (Rob Clark) [1398084]
  - [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399457] {CVE-2016-9555}
  - [net] ipv6: add mtu lock check in __ip6_rt_update_pmtu (Xin Long) [1397295]
  - [net] Reduce queue allocation to one in kdump kernel (Sai Vemuri) [1321315]
  - [netdrv] cxgb4: Force cxgb4 driver as MASTER in kdump kernel (Sai Vemuri) [1321315]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-679.el6]
changelog:
  - [mm] Revert "mm: Fix slab growing out of bound within a cpuset" (Larry Woodman) [1402713]
  - [netdrv] cxgb4: update latest firmware version supported (Sai Vemuri) [1381382]
  - [kernel] audit: correctly record file names with different path name types (Paul Moore) [1305103]
  - [scsi] megaraid_sas: driver version upgrade (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: Implement the PD Map support for SAS3.5 Generic Megaraid Controllers (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: ldio_outstanding variable is not decremented in completion path (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: Enable or Disable Fast path based on the PCI Threshold Bandwidth (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: Add the Support for SAS3.5 Generic Megaraid Controllers Capabilities (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: Dynamic Raid Map Changes for SAS3.5 Generic Megaraid Controllers (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: SAS3.5 Generic Megaraid Controllers Fast Path for RAID 1/10 Writes (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: SAS3.5 Generic Megaraid Controllers Stream Detection and IO Coalescing (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: EEDP Escape Mode Support for SAS3.5 Generic Megaraid Controllers (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: 128 MSIX Support (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: Add new pci device Ids for SAS3.5 Generic Megaraid Controllers (Tomas Henzl) [1306457]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-681.el6]
changelog:
  - [net] udplite: fast-path computation of checksum coverage (Hangbin Liu) [1404127]
  - [ata] libata: fix sff host state machine locking while polling (Cathy Avery) [1390972]
  - [ata] libata-sff: use WARN instead of BUG on illegal host state machine state (Cathy Avery) [1390972]
  - [x86] hyperv: Handle unknown NMIs on one CPU when unknown_nmi_panic (Vitaly Kuznetsov) [1400428]
  - [fs] nfsd4: zero op arguments beyond the 8th compound op (J. Bruce Fields) [1409002]
  - [fs] nfsd: fix deadlock secinfo+readdir compound (J. Bruce Fields) [1314505]
  - [fs] nfsd4: fix recovery-dir leak on nfsd startup failure (J. Bruce Fields) [1266405]
  - [x86] Mark Skylake processors with Kaby Lake PCH as unsupported (David Arcari) [1405459]
  - [infiniband] ipoib: Remove can't use GFP_NOIO warning (Slava Shwartsman) [1321529]
  - [netdrv] veth: allow changing the mac address while interface is up (David Arcari) [1402696]
  - [kernel] tracing: Protect tracer flags with trace_types_lock (Steven Rostedt) [1397661]
  - [acpi] acpica: Prevent circular object list in acpi_ns_exec_module_code (Lenny Szubowicz) [1401776]
  - [acpi] acpica: Fix possible memory leak for module-level code execution (Lenny Szubowicz) [1401776]
  - [acpi] acpica: Add additional module-level code support (Lenny Szubowicz) [1401776]
  - [fs] xfs: growfs: use uncached buffers for new headers (Bill O'Donnell) [1134314]
  - [fs] xfs: catch invalid negative blknos in _xfs_buf_find() (Bill O'Donnell) [1134314]
  - [fs] xfs: fix _xfs_buf_find oops on blocks beyond the filesystem end (Bill O'Donnell) [1134314]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-682.el6]
changelog:
  - [x86] kdump: Fix several bound checking error of crashkernel reserving (Baoquan He) [1349069]
  - [x86] kdump: Crashkernel auto reservation failed on large system (Baoquan He) [1349069]
  - [kdump] Fix wrong dmi_present argument in case efi_smbios_addr being used (Dave Young) [1404984]
  - [kdump] Add error check in case dmi_get_system_info return null (Dave Young) [1404984]
  - [netdrv] bnxt_en: Improve the delay logic for firmware response (John Linville) [1406129]
  - [netdrv] bnxt_en: Implement proper firmware message padding (John Linville) [1406129]
  - [netdrv] bnxt_en: Refactor _hwrm_send_message() (John Linville) [1406129]
  - [netdrv] bnxt_en: Fix dmesg log firmware error messages (John Linville) [1406129]
  - [netdrv] bnxt_en: Use firmware provided message timeout value (John Linville) [1406129]
  - [fs] nfs: Allow getattr to also report readdirplus cache hits (Scott Mayhew) [1325766]
  - [fs] nfs: Be more targeted about readdirplus use when doing lookup/revalidation (Scott Mayhew) [1325766]
  - [fs] nfs: Fix a performance regression in readdir (Scott Mayhew) [1325766]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-683.el6]
changelog:
  - [netdrv] sfc: include size-binned TX stats on sfn8542q (Jarod Wilson) [1411279]
  - [netdrv] sfc: retrieve second word of datapath capabilities (Jarod Wilson) [1411279]
  - [netdrv] sfc: update MCDI protocol headers (Jarod Wilson) [1411279]
  - [netdrv] sfc: Update MCDI protocol definitions (Jarod Wilson) [1411279]
  - [net] mlx4_en: Fix type mismatch for 32-bit systems (Slava Shwartsman) [1399239]
  - [net] mlx4_en: Resolve dividing by zero in 32-bit system (Slava Shwartsman) [1399239]
  - [netdrv] e1000e: Initial support for KabeLake (Jarod Wilson) [1406917]
  - [netdrv] e1000e: Clear ULP configuration register on ULP exit (Jarod Wilson) [1406917]
  - [netdrv] e1000e: Set HW FIFO minimum pointer gap for non-gig speeds (Jarod Wilson) [1406917]
  - [netdrv] e1000e: Increase PHY PLL clock gate timing (Jarod Wilson) [1406917]
  - [netdrv] e1000e: Increase ULP timer (Jarod Wilson) [1406917]
  - [netdrv] e1000e: initial support for i219-LM (3) (Jarod Wilson) [1406917]
  - [netdrv] be2net: fix unicast list filling (Ivan Vecera) [1408247]
  - [netdrv] be2net: fix accesses to unicast list (Ivan Vecera) [1408247]
  - [netdrv] sfc: Downgrade or remove some error messages (Jarod Wilson) [1410750]
  - [netdrv] be2net: call be_set_uc_list() unconditionally (Ivan Vecera) [1402679]
  - [netdrv] mlx5e: Use hw_features through netdev_extended macro (Kamal Heib) [1385318]
  - [block] nvme: Don't stop kthread while clearing queues (David Milburn) [1399431]
  - [fs] dlm: Fix saving of NULL callbacks (Robert S Peterson) [1264492]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-684.el6]
changelog:
  - [s390] kernel/ap: Fix hang condition on crypto card config-off (Hendrik Brueckner) [1413552]
  - [s390] zcrypt: Improved invalid domain response handling (Hendrik Brueckner) [1406389]
  - [infiniband] ucm: Fix bitmap wrap when devnum > IB_UCM_MAX_DEVICES (Slava Shwartsman) [1413476]
  - [netdrv] mlx5e: Copy all L2 headers into inline segment (Kamal Heib) [1408937]
  - [netdrv] be2net: fix MAC addr setting on privileged BE3 VFs (Ivan Vecera) [1406659]
  - [netdrv] be2net: don't delete MAC on close on unprivileged BE3 VFs (Ivan Vecera) [1406659]
  - [netdrv] be2net: fix status check in be_cmd_pmac_add() (Ivan Vecera) [1406659]
  - [acpi] acpica: Tables: Update FADT handling (Lenny Szubowicz) [1408401]
  - [acpi] acpica: ACPI 6.0: Add changes for FADT table (Lenny Szubowicz) [1408401]
  - [acpi] acpica: Basic support for FADT version 5 (Lenny Szubowicz) [1408401]
  - [acpi] acpica: Remove use of unreliable FADT revision field (Lenny Szubowicz) [1408401]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-685.el6]
changelog:
  - [kernel] ftrace: Do not function trace inlined functions (Pratyush Anand) [1413456]
  - [x86] paravirt: Do not trace _paravirt_ident_*() functions (Pratyush Anand) [1413456]
  - [netdrv] i40e: Fix for long link down notification time (Stefan Assmann) [1414274]
  - [scsi] megaraid_sas: fix done in queue_command (Tomas Henzl) [1415192]
  - [scsi] megaraid: fixes (Tomas Henzl) [1415192]
  - [netdrv] ixgbe: Add support for new X557 device (Ken Cox) [1408509]
  - [netdrv] ixgbe: Add KR backplane support for x550em_a (Ken Cox) [1408509]
  - [netdrv] ixgbe: Add support for SGMII backplane interface (Ken Cox) [1408509]
  - [netdrv] ixgbe: Add support for SFPs with retimer (Ken Cox) [1408509]
  - [netdrv] ixgbe: Introduce function to control MDIO speed (Ken Cox) [1408509]
  - [netdrv] ixgbe: Read and set instance id (Ken Cox) [1408509]
  - [netdrv] ixgbe: Add support for x550em_a 10G MAC type (Ken Cox) [1408509]
  - [netdrv] ixgbe: Use method pointer to access IOSF devices (Ken Cox) [1408509]
  - [netdrv] ixgbe: Add support for single-port X550 device (Ken Cox) [1408509]
  - [netdrv] ixgbe: Clean up interface for firmware commands (Ken Cox) [1408509]
  - [netdrv] ixgbe: Change the lan_id and func fields to a u8 to avoid casts (Ken Cox) [1408509]
  - [netdrv] ixgbe: Fix flow control for Xeon D KR backplane (Ken Cox) [1408509]
  - [netdrv] ixgbe: Make all unchanging ops structures const (Ken Cox) [1408509]
  - [netdrv] ixgbe: Update PTP to support X550EM_x devices (Ken Cox) [1408509]
  - [netdrv] ixgbe: convert to CYCLECOUNTER_MASK macro (Ken Cox) [1408509]
  - [netdrv] ixgbevf: add VF support for new hardware (Ken Cox) [1408507]
  - [netdrv] ixgbevf: Support Windows hosts (Hyper-V) (Ken Cox) [1408507]
  - [netdrv] ixgbevf: Add the device ID's presented while running on Hyper-V (Ken Cox) [1408507]
  - [netdrv] ixgbevf: Move API negotiation function into mac_ops (Ken Cox) [1408507]
  - [x86] tsc: Reset cycle_last after resume from S3/S4 (Lenny Szubowicz) [1406468]
  - [kernel] hung_task: allow hung_task_panic when hung_task_warnings is 0 (Waiman Long) [1410297]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-686.el6]
changelog:
  - [scsi] Add intermediate STARGET_REMOVE state to scsi_target_state (Ewan Milne) [1349623]
  - [scsi] restart list search after unlock in scsi_remove_target (Ewan Milne) [1349623]
  - [powerpc] pci: Support per-aperture memory offset (Laurent Vivier) [1413448]
  - [powerpc] pci: Don't add bogus empty resources to PHBs (Laurent Vivier) [1413448]
  - [mm] mmap.c: fix arithmetic overflow in __vm_enough_memory() (Jerome Marchand) [1413500]
  - [net] ping: check minimum size on ICMP header length (Mateusz Guzik) [1414202] {CVE-2016-8399}
  - [scsi] sg_write()/bsg_write() is not fit to be called under KERNEL_DS (Ewan Milne) [1414823] {CVE-2016-10088 CVE-2016-9576}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-687.el6]
changelog:
  - [netdrv] sfc: reduce severity of PIO buffer alloc failures (Jarod Wilson) [1410750]
  - [netdrv] sfc: avoid division by zero (Jarod Wilson) [1410750]
  - [netdrv] sfc: Insert multicast filters as well as mismatch filters in promiscuous mode (Jarod Wilson) [1410750]
  - [netdrv] sfc: get timer configuration from adapter (Jarod Wilson) [1410750]
  - [netdrv] sfc: warn if other functions have been reset by MCFW (Jarod Wilson) [1410750]
  - [netdrv] sfc: add output flag decoding to efx_mcdi_set_workaround (Jarod Wilson) [1410750]
  - [netdrv] sfc: get PIO buffer size from the NIC (Jarod Wilson) [1410750]
  - [netdrv] sfc: set interrupt moderation via MCDI (Jarod Wilson) [1410750]
  - [netdrv] sfc: allow asynchronous MCDI without completion function (Jarod Wilson) [1410750]
  - [netdrv] sfc: on MC reset, clear PIO buffer linkage in TXQs (Jarod Wilson) [1410750]
  - [netdrv] sfc: Downgrade EPERM messages from MCDI to debug (Jarod Wilson) [1410750]
  - [netdrv] sfc: cope with ENOSYS from efx_mcdi_get_workarounds() (Jarod Wilson) [1410750]
  - [netdrv] sfc: enable cascaded multicast filters in MCFW (Jarod Wilson) [1410750]
  - [netdrv] sfc: work around TRIGGER_INTERRUPT command not working on SFC9140 (Jarod Wilson) [1410750]
  - [dm] raid: fix transient device failure processing (Mike Snitzer) [1404425]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-690.el6]
changelog:
  - [drm] core: Do not preserve framebuffer on rmfb, v4 (Rob Clark) [1405267]
  - [scsi] mpt3sas: Fix for block device of raid exists even after deleting raid disk (Tomas Henzl) [1416552]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-691.el6]
changelog:
  - [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
  - [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
  - [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
  - [net] ipv6: stop sending PTB packets for MTU < 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
  - [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-692.el6]
changelog:
  - [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
  - [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-693.el6]
changelog:
  - [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
  - [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
  - [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
  - [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
  - [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
  - [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
  - [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
  - [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
  - [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-694.el6]
changelog:
  - [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
  - [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
  - [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
  - [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
  - [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
  - [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
  - [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
  - [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
  - [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
  - [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
  - [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
  - [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
  - [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
  - [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
  - [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
  - [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
  - [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
  - [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
  - [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
  - [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
  - [block] ensure request->part is valid (Jeff Moyer) [1416341]
  - [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-696.el6]
changelog:
  - [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-697.el6]
changelog:
  - [block] fix use-after-free in seq file (Denys Vlasenko) [1418549] {CVE-2016-7910}
  - [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1425749]
  - [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1360930]
  - [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429918] {CVE-2017-2636}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-698.el6]
changelog:
  - [sched] fair: Rework throttle_count sync (Jiri Olsa) [1250762]
  - [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1250762]
  - [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1250762]
  - [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1250762]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-699.el6]
changelog:
  - [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1429881]
  - [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1429881]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-700.el6]
changelog:
  - [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1431508]
  - [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1436527]
  - [crypto] mpi: Fix NULL ptr dereference in mpi_powm() (Mateusz Guzik) [1398456] {CVE-2016-8650}
  - [fs] aio: properly check iovec sizes (Mateusz Guzik) [1337517] {CVE-2015-8830}
  - [fs] vfs: make AIO use the proper rw_verify_area() area helpers (Mateusz Guzik) [1337535] {CVE-2012-6701}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-701.el6]
changelog:
  - [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1146727]
  - [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1434560]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-702.el6]
changelog:
  - [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1440361]
  - [net] ping: implement proper locking (Jakub Sitnicki) [1438999] {CVE-2017-2671}
  - [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430578] {CVE-2017-6214}
  - [net] ipv6: ip6_fragment: fix headroom tests and skb leak (Hannes Frederic Sowa) [1412331]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-703.el6]
changelog:
  - [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [869942]
  - [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [869942]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-704.el6]
changelog:
  - [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1448170]
  - [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1441909]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-705.el6]
changelog:
  - [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1446755] {CVE-2017-7895}
  - [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1446755] {CVE-2017-7895}
  - [perf] fix concurrent sys_perf_event_open() vs move_group race (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [perf] remove confusing comment and move put_ctx() (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [perf] restructure perf syscall point of no return (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [perf] fix move_group() order (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [perf] generalize event->group_flags (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [scsi] libfc: quarantine timed out xids (Chris Leech) [1431440]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-706.el6]
changelog:
  - [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1442030]
  - [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1393672]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-707.el6]
changelog:
  - [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1454847]
  - [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1445326]
  - [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1421760]
  - [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1421761]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-708.el6]
changelog:
  - [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1458421]
  - [mm] mempolicy.c: fix error handling in set_mempolicy and mbind (Bruno E. O. Meneguele) [1443539] {CVE-2017-7616}
  - [s390] zfcp: fix use-after-"free" in FC ingress path after TMF (Hendrik Brueckner) [1421762]
  - [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1417305]
  - [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1417305]
  - [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1417305]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-709.el6]
changelog:
  - [netdrv] bnxt_en: Update to firmware interface spec 1.5.1 (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Added support for Secure Firmware Update (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add support for firmware updates for additional processors (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Update firmware spec. to 1.3.0 (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add support for updating flash more securely (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Request firmware reset after successful firwmare update (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add hwrm_send_message_silent() (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add installed-package firmware version reporting via Ethtool GDRVINFO (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Reset embedded processor after applying firmware upgrade (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add support for upgrading APE/NC-SI firmware via Ethtool FLASHDEV (Jonathan Toppins) [1439450]
  - [net] sctp: do not inherit ipv6_(mc|ac|fl)_list from parent (Florian Westphal) [1455612] {CVE-2017-9075}
  - [net] ipv6/dccp: do not inherit ipv6_mc_list from parent (Florian Westphal) [1455612] {CVE-2017-9076 CVE-2017-9077}
  - [net] dccp/tcp: do not inherit mc_list from parent (Florian Westphal) [1455612] {CVE-2017-8890}
  - [net] ipv6: nullify ipv6_ac_list and ipv6_fl_list when creating new socket (Florian Westphal) [1455612]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-710.el6]
changelog:
  - [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1464237]
  - [mm] enlarge stack guard gap (Larry Woodman) [1452730] {CVE-2017-1000364}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-711.el6]
changelog:
  - [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1459978]
  - [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1452358]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-712.el6]
changelog:
  - [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1464237 1452730] {CVE-2017-1000364}
  - [mm] revert "enlarge stack guard gap" (Larry Woodman) [1452730] {CVE-2017-1000364}
  - [mm] revert "allow JVM to implement its own stack guard pages" (Larry Woodman) [1464237]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-713.el6]
changelog:
  - [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1459951] {CVE-2017-9074}
  - [net] gre: fix a possible skb leak (Sabrina Dubroca) [1459951] {CVE-2017-9074}
  - [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1459951] {CVE-2017-9074}
  - [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1459951] {CVE-2017-9074}
  - [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1459951] {CVE-2017-9074}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-714.el6]
changelog:
  - [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1464541]
  - [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1464541]
  - [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1464541]
  - [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1464541]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-716.el6]
changelog:
  - [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1441773]
  - [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474782] {CVE-2017-7541}
  - [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1441169]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-718.el6]
changelog:
  - [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1477288]
  - [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1477288]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-719.el6]
changelog:
  - [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1459636]
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490062] {CVE-2017-1000251}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-720.el6]
changelog:
  - [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488340] {CVE-2017-14106}
  - [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488340] {CVE-2017-14106}
  - [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477006] {CVE-2017-7542}
  - [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477006] {CVE-2017-7542}
  - [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481529] {CVE-2017-1000112}
  - [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481529] {CVE-2017-1000112}
  - [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481529] {CVE-2017-1000112}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-721.el6]
changelog:
  - [char] ipmi: use rcu lock around call to intf->handlers->sender() (Tony Camuso) [1466034]
  - [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481943] {CVE-2017-1000111}
  - [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1484946] {CVE-2017-7308}
  - [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1484946] {CVE-2017-7308}
  - [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr  Matousek) [1492961] {CVE-2017-1000253}
  - [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr  Matousek) [1492961] {CVE-2017-1000253}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-722.el6]
changelog:
  - [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1497152]
  - [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476124] {CVE-2017-11176}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-723.el6]
changelog:
  - [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1491846]
  - [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1491846]
  - [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1491846]
  - [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1491846]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-724.el6]
changelog:
  - [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1435787]
  - [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1435787]
  - [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1435787]
  - [fs] nfsd: remove the cache_hash list (Thiago Becker) [1435787]
  - [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1435787]
  - [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1435787]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-725.el6]
changelog:
  - [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1497000]
  - [ipmi] create hardware-independent softdep for ipmi_devintf (Tony Camuso) [1457915]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-727.el6]
changelog:
  - [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1492220]
  - [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1492220]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-728.el6]
changelog:
  - [mm] introduce dedicated WQ_MEM_RECLAIM workqueue to do lru_add_drain_all (Waiman Long) [1463754]
  - [netdrv] cxgb4: Clear On FLASH config file after a FW upgrade (Arjun Vynipadath) [1446952]
  - [netdrv] chelsio : Fixes the issue seen on initiator while stopping the target (Sai Vemuri) [1442097]
  - [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1437991]
  - [netdrv] cxgb4vf: don't offload Rx checksums for IPv6 fragments (Davide Caratti) [1427036]
  - [scsi] qla2xxx: Get mutex lock before checking optrom_state (Himanshu Madhani) [1408549]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-729.el6]
changelog:
  - [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1504260]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-730.el6]
changelog:
  - [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1513455]
  - [fs] bio: more bio_map_user_iov() leak fixes (Ming Lei) [1503590] {CVE-2017-12190}
  - [fs] bio: fix unbalanced page refcounting in bio_map_user_iov (Ming Lei) [1503590] {CVE-2017-12190}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-731.el6]
changelog:
  - [kernel] fix __wait_on_atomic_t() to call the action func if the counter != 0 (David Howells) [1418631]
  - [fs] fscache: fix dead object requeue (David Howells) [1333592 1418631]
  - [fs] fscache: clear outstanding writes when disabling a cookie (David Howells) [1418631]
  - [fs] fscache: initialise stores_lock in netfs cookie (David Howells) [1418631]
  - [fs] cachefiles: fix attempt to read i_blocks after deleting file (David Howells) [1418631]
  - [fs] cachefiles: fix race between inactivating and culling a cache object (David Howells) [1418631]
  - [fs] fscache: make check_consistency callback return int (David Howells) [1418631]
  - [fs] fscache: wake write waiter after invalidating writes (David Howells) [1418631]
  - [fs] cachefiles: provide read-and-reset release counters for cachefilesd (David Howells) [1418631]
  - [s390] disassembler: increase show_code buffer size (Hendrik Brueckner) [1516654]
  - [fs] sunrpc: remove BUG_ONs checking RPC_IS_QUEUED (Dave Wysochanski) [1424630]
  - [fs] nfsv4.1: nfs4_fl_prepare_ds must be careful about reporting success (Scott Mayhew) [1205448]
  - [fs] cifs: add ratelimit for the log entry that causes a lockup (Leif Sahlberg) [1494999]
  - [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447168]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-732.el6]
changelog:
  - [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [988988]
  - [mm] don't return 0 too early from find_get_pages() (Ian Kent) [988988]
  - [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1503322]
  - [s390] cpcmd,vmcp: avoid GFP_DMA allocations (Hendrik Brueckner) [1496105]
  - [fs] gfs2: Withdraw for IO errors writing to the journal or statfs (Robert S Peterson) [1505956]
  - [netdrv] ixgbe: Fix incorrect bitwise operations of PTP Rx timestamp flags (Ken Cox) [1523856]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-733.el6]
changelog:
  - [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1532786]
  - [net] dma: fix memory leak in dma_pin_iocvec_pages (Sabrina Dubroca) [1459263]
  - [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1520860]
  - [s390] fix transactional execution control register handling (Hendrik Brueckner) [1520862]
  - [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1408108]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-734.el6]
changelog:
  - [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1518669]
  - [hv] vss: Operation timeouts should match host expectation (Mohammed Gamal) [1511431]
  - [hv] utils: reduce HV_UTIL_NEGO_TIMEOUT timeout (Mohammed Gamal) [1511431]
  - [hv] utils: Check VSS daemon is listening before a hot backup (Mohammed Gamal) [1511431]
  - [hv] utils: Continue to poll VSS channel after handling requests (Mohammed Gamal) [1511431]
  - [md] dm: clear all discard attributes in queue_limits when discards are disabled (Mike Snitzer) [1433297]
  - [md] dm: discard support requires all targets in a table support discards (Mike Snitzer) [1433297]
  - [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520817] {CVE-2017-8824}
  - [net] tcp: fix tcp_trim_head() (Paolo Abeni) [1274139]
  - [net] sctp: fix src address selection if using secondary addresses for ipv6 (Xin Long) [1445919]
  - [net] sctp: deny peeloff operation on asocs with threads sleeping on it (Hangbin Liu) [1470559]
  - [net] sctp: avoid BUG_ON on sctp_wait_for_sndbuf (Hangbin Liu) [1470559]
  - [net] tcp: fix race during timewait sk creation (Florian Westphal) [1205025]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-735.el6]
changelog:
  - [x86] tighten /dev/mem with zeroing reads (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [char] /dev/mem: make size_inside_page() logic straight (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [char] /dev/mem: cleanup unxlate_dev_mem_ptr() calls (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [char] /dev/mem: introduce size_inside_page() (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [char] /dev/mem: remove redundant test on len (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1538340]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-736.el6]
changelog:
  - [drm] nouveau/disp/nv50-: execute supervisor on its own workqueue (Ben Skeggs) [1468825]
  - [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519626] {CVE-2017-1000410}
  - [scsi] storvsc: do not assume SG list is continuous when doing bounce buffers (for 4.1 and prior) (Cathy Avery) [1533175]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-737.el6]
changelog:
  - [hv] netvsc: get rid of completion timeouts (Vitaly Kuznetsov) [1538592]
  - [fs] gfs2: Special case the rindex in gfs2_write_alloc_required() (Andrew Price) [1384184]
  - [scsi] scsi_dh_alua: fix race condition that causes multipath to hang (Mike Snitzer) [1500192]
  - [virtio] virtio-pci: fix leaks of msix_affinity_masks (Jason Wang) [1281754]
  - [fs] sunrpc: avoid warning in gss_key_timeout (J. Bruce Fields) [1456594]
  - [fs] sunrpc: fix RCU handling of gc_ctx field (J. Bruce Fields) [1456594]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-738.el6]
changelog:
  - [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Fix XEN PV boot failure (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] Revert "entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel gs has been restored (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: ibrs_enabled() is expected to return > 1 (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] Revert "mm/kaiser: Disable global pages by default with KAISER" (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] Remove __cpuinitdata from some data & function (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm: Set IBPB upon context switch (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] x86: clear registers on VM exit (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] kvm: Pad RSB on VM transition (Waiman Long) [1519796] {CVE-2017-5715}
  - [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519802] {CVE-2017-5754}
  - [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519789] {CVE-2017-5753}
  - [fs] udf: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [fs] prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [netdrv] p54: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [media] uvcvideo: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519789] {CVE-2017-5753}
  - [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] Add another set of MSR accessor functions (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: enable kaiser in build (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add Kconfig (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stack trampoline (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] Separate out entry text section (Waiman Long) [1519802] {CVE-2017-5754}
  - [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519802] {CVE-2017-5754}
  - [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519802] {CVE-2017-5754}
  - [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519802] {CVE-2017-5754}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-739.el6]
changelog:
  - [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1538543]
  - [powerpc] prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1538543]
  - [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1538542]
  - [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1538542]
  - [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1538542]
  - [s390] add ppa to system call and program check path (Hendrik Brueckner) [1538542]
  - [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1538542]
  - [s390] introduce CPU alternatives (Hendrik Brueckner) [1538542]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-740.el6]
changelog:
  - [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1535645]
  - [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1535645]
  - [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1535645]
  - [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1535645]
  - [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1535645]
  - [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1535645]
  - [x86] retpoline/efi: Convert stub indirect calls & jumps (Waiman Long) [1535645]
  - [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1535645]
  - [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1535645]
  - [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1535645]
  - [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1535645]
  - [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1535645]
  - [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1535645]
  - [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1535645]
  - [x86] Use IBRS for firmware update path (Waiman Long) [1535645]
  - [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1535645]
  - [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1535645]
  - [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1535645]
  - [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1535645]
  - [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1535645]
  - [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1535645]
  - [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1535645]
  - [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1535645]
  - [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1535645]
  - [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1535645]
  - [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1535645]
  - [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1535645]
  - [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1535645]
  - [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1535645]
  - [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1535645]
  - [x86] mce: Make machine check speculation protected (Waiman Long) [1535645]
  - [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1535645]
  - [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1535645]
  - [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1535645]
  - [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1535645]
  - [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1535645]
  - [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1535645]
  - [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1535645]
  - [x86] retpoline: Add initial retpoline support (Waiman Long) [1535645]
  - [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1535645]
  - [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1535645]
  - [x86] cpufeatures: Add X86_BUG_SPECTRE_V(12) (Waiman Long) [1535645]
  - [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1535645]
  - [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1535645]
  - [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1535645]
  - [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1535645]
  - [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1535645]
  - [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1535645]
  - [x86] alternatives: Add missing 'n' at end of ALTERNATIVE inline asm (Waiman Long) [1535645]
  - [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1535645]
  - [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1535645]
  - [x86] alternatives: Document macros (Waiman Long) [1535645]
  - [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1535645]
  - [x86] alternatives: Add instruction padding (Waiman Long) [1535645]
  - [x86] alternative: Add header guards to asm/alternative-asm.h (Waiman Long) [1535645]
  - [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1535645]
  - [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1535645]
  - [x86] Make .altinstructions bit size neutral (Waiman Long) [1535645]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-741.el6]
changelog:
  - [net] netfilter: xt_TCPMSS: add more sanity tests on tcph->doff (Florian Westphal) [1543091] {CVE-2017-18017}
  - [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543091] {CVE-2017-18017}
  - [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543091] {CVE-2017-18017}
  - [net] sctp: return error if the asoc has been peeled off in sctp_wait_for_sndbuf (Hangbin Liu) [1470559]
  - [net] sctp: use the right sk after waking up from wait_buf sleep (Hangbin Liu) [1470559]
  - [net] sctp: do not free asoc when it is already dead in sctp_sendmsg (Hangbin Liu) [1470559]
  - [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1535024]
  - [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1535024]
  - [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1535024]
  - [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1535024]
  - [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1532167]
  - [net] revert "net: use lib/percpu_counter API for fragmentation mem accounting" (Jesper Brouer) [1508504]
  - [scsi] lpfc: fix pci hot plug crash in list_add call (Dick Kennedy) [1542773]
  - [scsi] hpsa: update driver version (Joseph Szczypek) [1541517]
  - [scsi] hpsa: correct resets on retried commands (Joseph Szczypek) [1541517]
  - [scsi] hpsa: rescan later if reset in progress (Joseph Szczypek) [1541517]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-742.el6]
changelog:
  - [mm] prevent /proc/sys/vm/percpu_pagelist_fraction divide-by-zero (Dave Anderson) [1405879]
  - [fs] proc: Resolve performance issues with multiple /proc/stat reads (Prarit Bhargava) [1544565]
  - [fs] nfs: fix pnfs direct write memory leak (Scott Mayhew) [1536900]
  - [fs] dcache: prevent multiple shrink_dcache_parent() on the same dentry (Miklos Szeredi) [1269288]
  - [fs] fifo: do not restart open() if it already found a partner (Miklos Szeredi) [1482983]
  - [audit] reinstate check for failed execve (Denys Vlasenko) [1488822]
  - [perf] x86/intel/uncore: Make PCI and MSR uncore independent (Jiri Olsa) [1427324]
  - [perf] fix perf_event_comm() vs. exec() assumption (Jiri Olsa) [1478980]
  - [lib] prevent BUG in kfree() due to memory exhaustion in __sg_alloc_table() (Larry Woodman) [1454453]
  - [kernel] sched/core: Rework rq->clock update skips (Lauro Ramos Venancio) [1212959]
  - [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1212959]
  - [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1212959]
  - [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1212959]
  - [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1212959]
  - [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1495167]
  - [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1495167]
  - [fs] gfs2: Defer deleting inodes under memory pressure (Andreas Grunbacher) [1255872]
  - [fs] gfs2: gfs2_clear_inode, gfs2_delete_inode: Put glocks asynchronously (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Get rid of gfs2_set_nlink (Andreas Grunbacher) [1255872]
  - [fs] add set_nlink() (Andreas Grunbacher) [1255872]
  - [fs] gfs2: gfs2_glock_get: Wait on freeing glocks (Andreas Grunbacher) [1255872]
  - [fs] gfs2: gfs2_create_inode: Keep glock across iput (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Clean up glock work enqueuing (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Protect gl->gl_object by spin lock (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Get rid of flush_delayed_work in gfs2_clear_inode (Andreas Grunbacher) [1255872]
  - [fs] revert "gfs2: Wait for iopen glock dequeues" (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Fixup to "Clear gl_object if gfs2_create_inode fails" (Andreas Grunbacher) [1506281]
  - [scsi] dual scan thread bug fix (Ewan Milne) [1508512]
  - [scsi] fix our current target reap infrastructure (Ewan Milne) [1508512]
  - [scsi] bnx2fc: Fix check in SCSI completion handler for timed out request (Chad Dupuis) [1538168]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-743.el6]
changelog:
  - [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548432] {CVE-2017-13166}
  - [kernel] cgroup: initialize xattr before calling d_instantiate() (Aristeu Rozanski) [1533523]
  - [fs] ext*: Don't clear SGID when inheriting ACLs (Andreas Grunbacher) [1473482]
  - [fs] gfs2: writeout truncated pages (Robert S Peterson) [1331076]
  - [fs] export __block_write_full_page (Robert S Peterson) [1331076]
  - [scsi] mark queue as PREEMPT_ONLY before setting quiesce (Ming Lei) [1462959]
  - [block] call blk_queue_enter() before allocating request (Ming Lei) [1462959]
  - [block] introduce blk_queue_enter() (Ming Lei) [1462959]
  - [mm] shmem: replace_page must flush_dcache and others (Waiman Long) [1412337]
  - [mm] shmem: replace page if mapping excludes its zone (Waiman Long) [1412337]
  - [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] spec_ctrl/32: Enable IBRS processing on kernel entries & exits (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Restore segments before int registers (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Unshare NMI return path (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1550599] {CVE-2017-5754}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-744.el6]
changelog:
  - [dm] io: fix duplicate bio completion due to missing ref count (Mikulas Patocka) [1334224]
  - [fs] gfs2: Reduce contention on gfs2_log_lock (Robert S Peterson) [1399822]
  - [fs] gfs2: Inline function meta_lo_add (Robert S Peterson) [1399822]
  - [fs] gfs2: Switch tr_touched to flag in transaction (Robert S Peterson) [1399822]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-745.el6]
changelog:
  - [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1550599] {CVE-2017-5754}
  - [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548432] {CVE-2017-13166}
  - [scsi] lpfc: Fix crash from memory alloc at interrupt level with GFP_KERNEL set (Dick Kennedy) [1540706]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-746.el6]
changelog:
  - [dm] fix race between dm_get_from_kobject() and __dm_destroy() (Mike Snitzer) [1551999] {CVE-2017-18203}
  - [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1557562]
  - [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1550599] {CVE-2017-5754}
  - [ipmi] pick up slave address from SMBIOS on an ACPI device (Tony Camuso) [1484525]
  - [ipmi] fix watchdog timeout set on reboot (Tony Camuso) [1484525]
  - [ipmi] fix watchdog hang on panic waiting for ipmi response (Tony Camuso) [1484525]
  - [ipmi] use smi_num for init_name (Tony Camuso) [1484525]
  - [ipmi] move platform device creation earlier in the initialization (Tony Camuso) [1484525]
  - [ipmi] clean up printks (Tony Camuso) [1484525]
  - [ipmi] cleanup error return (Tony Camuso) [1484525]
  - [md] raid0: apply base queue limits *before* disk_stack_limits (Xiao Ni) [1417294]
  - [md] raid0: update queue parameter in a safer location (Xiao Ni) [1417294]
  - [md] raid0: conditional mddev->queue access to suit dm-raid (Xiao Ni) [1417294]
  - [md] raid0: access mddev->queue (request queue member) conditionally because it is not set when accessed from dm-raid (Xiao Ni) [1417294]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-747.el6]
changelog:
  - [fs] gfs2: Check for the end of metadata in trunc_dealloc (Robert S Peterson) [1559928]
  - [fs] gfs2: clear journal live bit in gfs2_log_flush (Robert S Peterson) [1559928]
  - [netdrv] vmxnet3: fix tx data ring copy for variable size (Neil Horman) [1530378]
  - [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1559386]
  - [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1554631]
  - [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags & wrapper (Mauricio Oliveira) [1554631]
  - [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1554630]
  - [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1554630]
  - [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1554630]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-748.el6]
changelog:
  - [mm] fold arch_randomize_brk into ARCH_HAS_ELF_RANDOMIZE (Bhupesh Sharma) [1494380]
  - [mm] brk: fix min_brk lower bound computation for COMPAT_BRK (Bhupesh Sharma) [1494380]
  - [mm] split ET_DYN ASLR from mmap ASLR (Bhupesh Sharma) [1494380]
  - [s390] redefine randomize_et_dyn for ELF_ET_DYN_BASE (Bhupesh Sharma) [1494380]
  - [mm] expose arch_mmap_rnd when available (Bhupesh Sharma) [1494380]
  - [s390] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [s390] mmap: randomize mmap base for bottom up direction (Bhupesh Sharma) [1494380]
  - [powerpc] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [x86] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: create Kconfig variable for PIE randomization (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: PIE: make PF_RANDOMIZE check comment more accurate (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: fix PIE execution with randomization disabled (Bhupesh Sharma) [1494380]
  - [acpi] acpica: Support calling _REG methods within ACPI interpreter (Lenny Szubowicz) [1522849]
  - [acpi] acpica: Function to test if ACPI interpreter already entered (Lenny Szubowicz) [1522849]
  - [acpi] acpica: Function to test if ACPI mutex held by this thread (Lenny Szubowicz) [1522849]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-749.el6]
changelog:
  - [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1561788]
  - [powerpc] Move default security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1561788]
  - [lib] seq: Add seq_buf_printf() (Mauricio Oliveira) [1561788]
  - [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1561786]
  - [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1562725]
  - [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1562725]
  - [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1562725]
  - [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1562725]
  - [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1562725]
  - [x86] entry: Remove extra argument in call instruction (Waiman Long) [1562552]
  - [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1557562 1562552]
  - [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1558845]
  - [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1558845]
  - [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1558845]
  - [x86] mm: Dump both kernel & user page tables at fault (Waiman Long) [1558845]
  - [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1558845]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-750.el6]
changelog:
  - [fs] fuse: fix punching hole with unaligned end (Miklos Szeredi) [1387473] {CVE-2017-15121}
  - [documentation] kdump: fix documentation about panic_on_warn to match rhel6 (Pingfan Liu) [1555196]
  - [fs] Provide sane values for nlink (Leif Sahlberg) [1554342]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-751.el6]
changelog:
  - [md] dm thin: fix regression that caused discards to be disabled if passdown was (Mike Snitzer) [1569377]
  - [s390] configs: enable auto expoline support (Hendrik Brueckner) [1554959]
  - [s390] correct nospec auto detection init order (Hendrik Brueckner) [1554959]
  - [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1554959]
  - [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1554959]
  - [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1554959]
  - [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1554959]
  - [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1554959]
  - [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1554959]
  - [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1554959]
  - [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1554959]
  - [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1554959]
  - [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1554959]
  - [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1554959]
  - [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1568241]
  - [net] sctp: verify size of a new chunk in _sctp_make_chunk() (Stefano Brivio) [1551908] {CVE-2018-5803}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-752.el6]
changelog:
  - [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
  - [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
  - [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
  - [net] security: export security_sk_clone (Marcelo Leitner) [1571357]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-753.el6]
changelog:
  - [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
  - [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
  - [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.el6]
changelog:
  - [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
  - [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
  - [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Clean up entry code & remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
  - [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
  - [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
  - [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
  - [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
  - [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-4
changelog:
  - Build for x86_64 as well.  Kdump support doesn't work there, but users
    should be able to use kexec.


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-8
changelog:
  - Fix the service stop case.  It was previously unloading the wrong kernel.
  - Implement the "restart" function.
  - Add the "irqpoll" option as a default kdump kernel commandline parameter.
  - Create a default kernel command line in the sysconfig file upon rpm install.


author: Thomas Graf <tgraf@redhat.com> - 1.101-10
changelog:
  - kdump7.patch
     o Remove elf32 core headers support for x86_64
     o Fix x86 prepare elf core header routine
     o Fix ppc64 kexec -p failure for gcc 4.10
     o Fix few warnings for gcc 4.10
     o Add the missing --initrd option for ppc64
     o Fix ppc64 persistent root device bug
  - Remove --elf32-core-headers from default configuration, users
    may re-add it via KEXEC_ARGS.
  - Remove obsolete KEXEC_HEADERS


author: Thomas Graf <tgraf@redhat.com> - 1.101-15
changelog:
  - Don't add kdump service by default, let the user manually add it to
    avoid everyone seeing a warning.


author: Neil Horman <nhorman@redhat.com> - 1.101-45
changelog:
  - fixed typo in mkdumprd for bz 202983
  - fixed typo in mkdumprd for bz 203053
  - clarified docs in kdump.conf with examples per bz 203015


author: Jarod Wilson <jwilson@redhat.com> - 1.101-46
changelog:
  - ppc64 fixups:
    - actually build ppc64 binaries (bug 203407)
    - correct usage output
    - avoid segfault in command-line parsing
  - install kexec man page
  - use regulation Fedora BuildRoot


author: Neil Horman <nhorman@redhat.com> - 1.101-58
changelog:
  - Updating kdump.init and mkdumprd with most recent RHEL5 fixes
  - Fixing BuildReq to require elfutils-devel-static


author: Neil Horman <nhorman@redhat.com> - 1.102pre-1
changelog:
  - Bumping kexec version to latest horms tree (bz 257201)
  - Adding trigger to remove initrds when a kernel is removed


author: Neil Horman <nhorman@redhat.com> - 1.102pre-3
changelog:
  - Fix ARCH placement in kdump init script (bz 427201)
  - Fix BuildRequires
  - Fix Makedumpfile to build with new libelf


author: Neil Horman <nhorman@redhat.com> - 1.102pre-6
changelog:
  - Bringing rawhide up to date with bugfixes from RHEL5
  - Adding patch to prevent kexec buffer overflow on ppc (bz 428684)


author: Neil Horman <nhorman@redhat.com> 2.0.0-18
changelog:
  - Updated initscript to use mkdumprd2 if manifest is present
  - Updated spec to require dash
  - Updated sample manifest to point to correct initscript
  - Updated populate_std_files helper to fix sh symlink


author: Neil Horman <nhorman@redhat.com> -2.0.0-56
changelog:
  - Added utsname support to makedumpfile for 2.6.32 (bz 556356)
  - Cleaned up some syntax in the changelog


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-78
changelog:
  - Forward patches from RHEL5, Resolves: bz 592312  600566
    600571  600572 600574 600575 600577 600578 600579 600581 600583
    600584  600585 600586 600588 600590 600591 600593 600594 600595
    600596 600597  600598 600599 600600 600601 600602 600604 600605
    600606 600607 600610 600611 600613 600896 602785  602905.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-86
changelog:
  - When there are double quotes in LABEL= in kdump.conf, findfs
    will not be able to find the correct label, we should allow
    quotes in LABEL= in kdump.conf because a label name may contain
    spaces. See comment #4 of bug 600611.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-87
changelog:
  - We don't need to escape '#' with "\#", otherwise '#' will be
    executed as a command before aliased. See comment #4 of bug 600896.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-92
changelog:
  - When there are multiple net dump targets, let the last one
    overwrite the previous ones, stop showing errors in this case.
    See comment #4 in bug 600607.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-95
changelog:
  - Move modules from /lib into /lib/modules/`uname -r`, and
    regenerate modules.dep for them. Resolves bug 602033.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-99
changelog:
  - Support btrfs, and move fs type check earlier so that
    mkdumprd will fail soon with unsupported fs type.
    Resolves bug 607515 and bug 607131.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-102
changelog:
  - If a symlink with the same name exists, remove it first before
    copying, so that extra_bins will be copied correctly.
    Resolves bug 611699.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-107
changelog:
  - Include the patch from Cai, adding missed options to --help
    of makedumpfile. Resolves bug 606704.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-197
changelog:
  - Add coordination between kdump and cluster fencing for long
    kernel panic dumps, resolve bug 585332. From Ryan O'Hara.


author: Dave Young <dyoung@redhat.com> - 2.0.0-227
changelog:
  - Fix the default dump failure option, resolve bug 729675.
  - Add default console font, resolve bug 784114.
  - Set pipefail at the beginning of init, resolve bug 771671.
  - Some bug fixes for raw dump, resolve bug 794981.


author: Dave Young <dyoung@redhat.com> - 2.0.0-229
changelog:
  - clarify "insufficient memory" in firstboot kdump module, resolve bug 799529 
  - mkdumprd: call add_rootfs early, resolve bug 799231
  - Do not depend on selinuxcoreutils, resolve bug 697657


author: Dave Young <dyoung@redhat.com> - 2.0.0-230
changelog:
  - Update firstboot threshold to 2G and roundup memsize value, resolve bug 802201
  - convert PREFIX to NETMASK for the second kernel, resolve bug 699318


author: Dave Young <dyoung@redhat.com> - 2.0.0-233
changelog:
  - Clarify the kdump.conf documentation, resolve bug 805793
  - uncomment the default core_collector and path, resolve bug 805793
  - fix module finding logic, resolve bug 794580


author: Dave Young <dyoung@redhat.com> - 2.0.0-236
changelog:
  - Warn when dumping to encrypted devices, resolve bug 743551
  - Correct the meaning of BOOTPROTO=none, resolve bug 805803


author: Dave Young <dyoung@redhat.com> - 2.0.0-242
changelog:
  - add s390x support in firstboot, resolve bug 805040
  - deal with s390x threshold in firstboot, resolve bug 805040


author: Dave Young <dyoung@redhat.com> - 2.0.0-246
changelog:
  - Do not run default/final action if network interface fails to come up, resolve bug 822146
  - Move default action handling code in a separate function, resolve bug 822146
  - Append to /etc/iface_to_active file instead of overwriting, resolve bug 822146
  - Allow activation of more than one network interface in second kernel, resolve bug 822146
  - always find and install the fs module for local fs dump, resolve bug 842476
  - document the supported fs types, resolve bug 813354


author: Dave Young <dyoung@redhat.com> - 2.0.0-248
changelog:
  - Exclude microcode kernel module, resolve bug 788253
  - Exclude virtio_balloon kernel module, resolve bug 770000


author: Dave Young <dyoung@redhat.com> - 2.0.0-249
changelog:
  - improve warning message for remain size checking, resolve bug 857282
  - propagate_ssh_key remove selinux flips for ssh key generation, resolve bug 816467
  - random feeding fix, resolve bug 825640
  - do not print error when there's no vendor-model-type, resolve bug 801344, bug 628610


author: Dave Young <dyoung@redhat.com> - 2.0.0-250
changelog:
  - mkdumprd: Support line mode terminals for s390x, resolve bug 818645
  - Fix kdump documentation about vmcore-dmesg handling, resolve bug 850623


author: Dave Young <dyoung@redhat.com> - 2.0.0-252
changelog:
  - remove hardcode for including ata_generic driver, resolve bug 820474
  - mkdumprd: Fix /dev/mapper/* links not being created by default, resolve bug 874832
  - vmcore-dmesg: Determine correct machine pointer size, resolve bug 871292


author: Dave Young <dyoung@redhat.com> - 2.0.0-254
changelog:
  - blacklist IB module mlx4_core.ko, resolve bug 876891
  - create bonding device dynamiclly, resolve bug 859824


author: Dave Young <dyoung@redhat.com> - 2.0.0-255
changelog:
  - make the SCSI dump target work with Linux on System z, resolve bug 870957
  - extract Linux on System z device init into separate functions, resolve bug 870957
  - remove hwclock calls for Linux on System z, resolve bug 821376


author: Baoquan He <bhe@redhat.com> - 2.0.0-259
changelog:
  - kexec-tools: Map network devices based on MAC address
  - kexec-tools: Allow mkdumprd modules blacklist to be overwritten by extra_modules
  - Add description about default action 'mount_root_run_init' and 'poweroff'
  - check_encrypted fix
  - add virtio disk identify logic
  - Add scsi_id disk identify logic
  - move scsi_id install to a function
  - move identify critical disk logic to a function


author: Baoquan He <bhe@redhat.com> - 2.0.0-260
changelog:
  - kexec-tools: powerpc: dt_reserve doesn't allocate enough memory for large properties
  - mkdumprd: check for empty dasd options
  - mkdumprd: Remove redundant code from handledm()


author: Baoquan He <bhe@redhat.com> - 2.0.0-261
changelog:
  - kexec: Respect memory limit while building crash memory ranges on ppc64, resolve bug 871522 
  - modprobe output awkscripts fix, resolve bug 876667 
  - kdump.init: exit and print error if kernel is old but using nr_cpus=1, resolve bug 844572
  - kdump.conf.5: the location of makedumpfile is said wrongly, resolve bug 847247
  - mkdumprd: remove redundant code of checkinging IS_UUID/IS_LABEL for lvm PV Name, resolve bug 879471
  - mkdumprd: handlelvordev cleanup, resolve bug 879471


author: Baoquan He <bhe@redhat.com> - 2.0.0-262
changelog:
  - kexec-tools: Allow kdump over a network work with an arbitrary bridge, bond or vlan name , resolve bug 959449
  - Add files related to fips support , resolve bug 909402
  - Change the old copy of symlink file , resolve bug 909402
  - kdump.conf: the location of makedumpfile is said wrongly , resolve bug 847247
  - Revert no-udev lvm.conf changes , resolve bug 888609


author: Baoquan He <bhe@redhat.com> - 2.0.0-263
changelog:
  - Add a help message into man page of makedumpfile for -b option, resolve bug 825476
  - makedumpfile: add a big patch to upgrade from v1.3.5 to v1.5.3, resolve bug 825476
  - add missing logs for makedumpfile patches, resolve bug 825476
  - RHEL6.4 PATCH Use conditional restart when adding or removing CPU/Memory, resolve bug 883543
  - mkdumprd: add tab key as delimiter of core_collector in kdump.conf, resolve bug 852373


author: Baoquan He <bhe@redhat.com> - 2.0.0-264
changelog:
  - kexec-tools.spec: turn on the dynamic and lzo build for makedumpfile, resolve bug 825476
  - kexec-tools.spec: Validate patches related to makedumpfile, resolve bug 825476


author: Baoquan He <bhe@redhat.com> - 2.0.0-265
changelog:
  - add selinux relabel when service startup, resolve bug 797231
  - add bzip2-devel and lzo-devel to BuildRequires, resolve bug 825476


author: Baoquan He <bhe@redhat.com> - 2.0.0-266
changelog:
  - kdump.conf.5: Modify 2 spelling errors
  - kexec-tools: Only remap network once when cluster configured
  - tools: Clean up /etc/iface_map after remapping the devices
  - kernel cmdline: Remove hugepage allocations
  - mkdumprd: change default disk_timeout to 180 seconds
  - kdump.conf: Tell user to specify module without ".ko" suffix
  - kdump.conf: add some missing supported configurations from kdump.conf.5
  - kdump.conf: change line columns to 80
  - Raw dump: use /sbin/blockdev to flush out block device buffers
  - Update translation file for firstboot
  - Update translation file for firstboot


author: Baoquan He <bhe@redhat.com> - 2.0.0-267
changelog:
  - mkdumprd: improve error message when e2fsprogs is missing, resolves bug 975642
  - mkdumprd: improve error message when btrfs-progs is missing, resolves bug 810494
  - Document mkdumprd option --allow-missing, resolves bug 951035


author: Baoquan He <bhe@redhat.com> - 2.0.0-269
changelog:
  - add snappy build, resolves bug 902147
  - This patch fixes the parsing of inline comments in config file, resolves bug 967427


author: Baoquan He <bhe@redhat.com> - 2.0.0-271
changelog:
  - makedumpfile: wrong cyclic buffer size recalculation causes bitmap data corruption, resolves bug 1009207


author: Baoquan He <bhe@redhat.com> - 2.0.0-272
changelog:
  - Allow multipathd to configure multipath map before adding partition devmappings, resolves bug 906601
  - mkdumprd: use timeout_count as a global variable, resolves bug 906601
  - mkdumprd: add support for SCM devices available for Linux on System z, resolves bug 903529
  - kdump.init: Run multiple kdump init instances one by one in serial order, resolves bug 963948


author: Baoquan He <bhe@redhat.com> - 2.0.0-273
changelog:
  - Fix max_mapnr issue on system has over 44-bit addressing, resolves bug 1008543
  - makedumpfile: fails phys_base calculation on sadump format, resolves bug 1010103


author: Baoquan He <bhe@redhat.com> - 2.0.0-274
changelog:
  - Add fence_kdump support for generic clusters, resolves bug 1083938
  - Add function setup_cluster_nodes_and_options, resolves bug 1083938
  - Add function get_pcs_cluster_nodes, resolves bug 1083938
  - Add function is_pcs_fence_kdump, resolves bug 1083938


author: Baoquan He <bhe@redhat.com> - 2.0.0-276
changelog:
  - kexec-tools: non-default routes are ignored by kdump, resolves bug 806992
  - kdumpctl: Pass disable_cpu_apicid to kexec of capture kernel, resolves bug 1061480
  - use -p option with fsck instead of -y, resolves bug 1055679
  - kdump doesn't work properly with nic that has "-" in it's name, resolves bug 874529
  - fix makedumpfile report and debug messages not shown, resolves bug 1016451


author: Baoquan He <bhe@redhat.com> - 2.0.0-277
changelog:
  - mkdumprd: add support for s390 DASD FBA type device, resolves bug 1022871
  - Check status of fsck before trying to mount a file system, resolves bug 1055672


author: Baoquan He <bhe@redhat.com> - 2.0.0-278
changelog:
  - Stop maximizing the bitmap buffer to reduce the risk of OOM, resolves bug 1114153
  - Move counting pfn_memhole for cyclic mode, resolves bug 1114153
  - Remove the 1st bitmap buffer from the ELF path in cyclic mode, resolves bug 1114153
  - Fix free bitmap_buffer_cyclic error, resolves bug 1114153
  - Introduce the mdf_pfn_t type, resolves bug 1114153


author: Baoquan He <bhe@redhat.com> - 2.0.0-279
changelog:
  - mkdurmpd: Issue sync after saving vmcore-dmesg.txt, resolves bug 1123061
  - mkdumprd: Fix check condition of selinux status, resolves bug 1122880
  - mkdumprd: fix no such file or directory warning in 2nd kernel on s390, resolves bug 1122883
  - Support for eppic language as a subpackage, resolves bug 823561
  - update .gitignore/sources for eppic_030413.tar.gz, resolves bug 823561
  - makedumpfile: Fix Makefile for eppic_makedumpfile.so build, resolves bug 823561


author: Baoquan He <bhe@redhat.com> - 2.0.0-280
changelog:
  - mkdumprd: wait for multipath device node, resolves bug 1128248
  - mkdumprd: clean up found logic in wait_for_multipath_devices(), resolves bug 1128248
  - use "getent ahostsv4 host-name" to get ipv4 address of a host name, resolves bug 1127138


author: Baoquan He <bhe@redaht.com> - 2.0.0-281
changelog:
  - starting kdump service after network, local fs and remote fs, resolves bug 1132300
  - Add sample eppic scripts to kexec-tools-eppic package, resolves bug 1104837
  - Convert leftover "getent hosts" to "getent ahostsv4", resolves bug 1142666
  - mkdurmpd: Fix the syntax error on the condition of fips inexistence, resolves bug 1131945


author: Baoquan He <bhe@redhat.com> - 2.0.0-283
changelog:
  - makedumpfile: Exclude unnecessary hugepages. resolves bug 1068674
  - makedumpfile: Vtop address translation support for vmalloc region in PPC64 arch. resolves bug 1068674
  - makedumpfile: Initialize for vmalloc address translation support in PPC64 arch. resolves bug 1068674
  - makedumpfile: Get rid of overrun adjustments. resolves bug 1068674
  - makedumpfile: Generic handling of multi-page exclusions. resolves bug 1068674


author: Baoquan He <bhe@redhat.com> - 2.0.0-286
changelog:
  - update kexec-kdump-howto.txt, resolves bug 949376
  - mkdumprd: Load the mlx4_core module if it is needed in the 2nd kernel, resolves bug 1099589
  - nfs dump will fail when netdev has different device name in ifcfg-$dev, resolves bug 1005141 
  - udev-rules: Restart kdump service on cpu ADD/REMOVE events, resolves bug 1113276


author: Baoquan He <bhe@redhat.com> - 2.0.0-287
changelog:
  - firstboot: fix overlapped gui in case low resolution, resolves bug 947803
  - mkdumprd: Load ipmi_watchdog module if it is running, resolves bug 1259503
  - kdump.init: remove the incomplete kdump.img, resolves bug 1240958


author: Baoquan He <bhe@redhat.com> - 2.0.0-288
changelog:
  - Remove the useless code about minix supporting, resolves bug 903510
  - mkdumprd: Use max partition number to create device in 2nd kernel, resolves bug 1260819
  - makedumpfile: Code changes to satisfy the coverity scan and fix the grammar problem, resolves bug 836926
  - kdump.init: remove useless code about /etc/kdump-adv-conf/initramfs.conf, resolves bug 873064
  - mkdumprd: Exclude 3 Hyper-V modules by default, resolves bug 1228774
  - makedumpfile fails to copy some firmware memory in sadump vmcore formats, resolves bug 1282999


author: Baoquan He <bhe@redhat.com> - 2.0.0-290
changelog:
  - mkdumprd: Fix shell error that kdump uses the variable without initializing, resolves bug 903510
  - mkdumprd: Fix incorrect variant MNTIMAGE, resolves bug 1294327


author: Baoquan He <bhe@redhat.com> - 2.0.0-291
changelog:
  - fadump/ppc64: update spec file, resolves bug 1254923
  - fadump/ppc64: add firmware-assisted dump howto document, resolves bug 1254923
  - fadump/ppc64: handle default action in fadump mode, resolves bug 1254923
  - fadump/ppc64: modify kdump init script to capture vmcore to local filesystems, resolves bug 1254923
  - fadump/ppc64: modify kdump script to stop firmware assisted dump, resolves bug 1254923
  - fadump/ppc64: modify kdump script to start the firmware assisted dump, resolves bug 1254923
  - fadump/ppc64: modify status routine to check for firmware-assisted dump, resolves bug 1254923


author: Baoquan He <bhe@redhat.com> - 2.0.0-292
changelog:
  - mkdumprd: Enhance kdump to handle multiport network card properly resolves bug 1284605
  - mkdumprd: Create special partition name for NVME device resolves bug 1235374
  - Don't handle vnet<n> used by VMs on RHEV host resolves bug 1283191
  - mkdumprd: hush does not support parenthesis in ko parameter directly resolves bug 1028298
  - kdump.init: fix a typo resolves bug 1295283


author: Baoquan He <bhe@redhat.com> - 2.0.0-293
changelog:
  - mkdumprd: Remove partition seperater as well while dropping partition number in device name, resolves bug 1228799


author: Baoquan He <bhe@redhat.com> - 2.0.0-298
changelog:
  - b0e4c65 Use file offset in initialize_mmap(), resolves bug 1314158
  - 85f20f9 mkdumprd: redirect stderr of bmc-watchdog to /dev/null resolves bug 1315270


author: Baoquan He <bhe@redhat.com> - 2.0.0-299
changelog:
  - mkdumprd: Use a flexible way to create rtc device, resolves bug 1315148
  - hyper-v: do not exclude hv_utils module, resolves bug 1228774


author: Baoquan He <bhe@redhat.com> - 2.0.0-301
changelog:
  - mkdumprd: Allow findmodule() to add dependency for lsmod output, resolves bug 1343282
  - mkdumprd: Kill useless code in moduledep(), resolves bug 1343282
  - mkdumprd: skip logical interfaces for bridge, resolves bug 1356615


author: Baoquan He <bhe@redhat.com> - 2.0.0-303
changelog:
  - mkdumprd: Remove load_selinux_policy script, resolves bug 1323086
  - mkdumprd: pass the value of DEV_ID to kdump, resolves bug 1322802


author: Baoquan He <bhe@redhat.com> - 2.0.0-306
changelog:
  - mkdumprd: fix env for mdadm, resolves bug 1404263
  - mkdumprd: create node for partition within RAID device, resolves bug 1404263
  - mkdumprd: refactor block_mknod(), resolves bug 1404263
  - uefi: Pass efi_smbios_addr to 2nd kernel, resolves bug 1404552


author: Pingfan Liu <piliu@redhat.com> - 2.0.0-309
changelog:
  - mkdumprd: Fix mkdumprd fail when cluster node uses ipv6
  - mkdumprd: fix the search criteria for detection of RAID devices


author: David Howells <dhowells@redhat.com> - 0.2-1
changelog:
  - Don't attempt to define the error codes in the header file.
  - Pass the release ID through to the makefile to affect the shared library name.


author: David Howells <dhowells@redhat.com> - 0.3-2
changelog:
  - Added timeout keyctl option
  - request_key auth keys must now be assumed
  - Fix keyctl argument ordering for debug negate line in request-key.conf


author: David Howells <dhowells@redhat.com> - 0.3-3
changelog:
  - Added stdint.h inclusion in keyutils.h
  - Made request-key.c use request_key() rather than keyctl_search()
  - Added piping facility to request-key


author: David Howells <dhowells@redhat.com> - 1.0-1
changelog:
  - Rename library and header file "keyutil" -> "keyutils" for consistency
  - Fix shared library version naming to same way as glibc.
  - Add versioning for shared library symbols
  - Create new keyutils-libs package and install library and main symlink there
  - Install base library symlink in /usr/lib and place in devel package
  - Added a keyutils archive library
  - Shorten displayed key permissions list to just those we actually have


author: David Howells <dhowells@redhat.com> - 1.2-1
changelog:
  - Remove syscall manual pages (section 2) to man-pages package [BZ 203582]
  - Don't write to serial port in debugging script


author: David Howells <dhowells@redhat.com> - 1.3-1
changelog:
  - Fix compiler warnings in request-key.
  - Expose the kernel function to get a key's security context.
  - Expose the kernel function to set a processes keyring onto its parent.
  - Move libkeyutils library version to 1.3.


author: David Howells <dhowells@redhat.com> - 1.4-5
changelog:
  - Make keyctl show handle deeply nested keyrings [BZ 1075652].
  - The key serial ID field displayed by keyctl show may be up to 10 digits [BZ 1075652].
  - Make keyctl padd & co. handle binary data containing NUL chars [BZ 1075652].
  - The input buffer for keyctl padd & co. should be 1MB-1 in size [BZ 1075652].


author: Michal Nowak <mnowak@redhat.com> - 5.0-3
changelog:
  - reshaping to multiple subpackages based on font type/purpose
  - license uncertainity is solved; licence field is set according
    to information from .ttf files read via gnome-font-viewer


author: Rex Dieter <rexdieter[AT]users.sf.net> 0.1.0-0.2.rc1
changelog:
  - BR: libacl-devel (at least until kdelibs bug #170602 is fixed)
  - drop all optional Req's, mention in %description
  - Release < 1, since it's not final
  - %description: format < 80 columns
  - drop goofy install-strip conditional


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 0.2.0-0.3.beta2
changelog:
  - update to 0.2.0 beta 2
  - build against latest kdegraphics
  - don't require dcraw, libkdcraw includes its own RAW decoding code


author: Karsten Hopp <karsten@redhat.com> 0.6.0-2
changelog:
  - add endian info for s390, s390x
  - kipiplugin_acquireimages.so is not available as kdegraphics is compiled
    without sane support on s390x


author: Sebastian Vahl <fedora@deadbabylon.de> - 2.0-0.4.20080213svn
changelog:
  - add default %defattr(-,root,root,-) also for devel files
  - include "svn" in release tag
  - remove non-code content with unknown copyright status from tarball and package
  - remove KDE version from summary


author: Lukas Tinkl <ltinkl@redhat.com> - 2.0-0.11.20080213svn
changelog:
  - Resolves: #599387 - RPMdiff run failed for package kmid-2.0-0.10.20080213svn.el6
    (mark the -common subpackage as noarch)


author: Lukas Tinkl <ltinkl@redhat.com> - 2.0-0.12.20080213svn
changelog:
  - Resolves: #599387 - RPMdiff run failed for package kmid-2.0-0.10.20080213svn.el6
    (fix aliasing issues)


author: Lukas Tinkl <ltinkl@redhat.com> - 2.0-0.13.20080213svn
changelog:
  - Resolves: #599387 - RPMdiff run failed for package kmid-2.0-0.10.20080213svn.el6
    (fix aliasing issues the proper way using cmake)


author: Lukas Tinkl <ltinkl@redhat.com> - 2.0-0.14.20080213svn
changelog:
  - Resolves: #599387 - RPMdiff run failed for package kmid-2.0-0.10.20080213svn.el6
    (fix strange cmake syntax)


author: Sebastian Vahl <fedora@deadbabylon.de> - 4.0.2-0.1.20080303svn
changelog:
  - new svn checkout (for KDE 4.0.2)
  - update cmakelists patch
  - remove icons patch (not needed anymore)
  - add "svn" to release


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.1-2
changelog:
  - BR: webkitpart-devel
  - use %find_lang --all-names --with-kde
  - Requires: kdebase4%{_?isa} >= %version


author: Lukas Tinkl <ltinkl@redhat.com> - 4.3.3-4
changelog:
  - Resolves: #605069 - RPMdiff run failed for package konq-plugins-4.3.3-3.el6
    (create a noarch doc subpackage to fix multilib issues)


author: Lukas Tinkl <ltinkl@redhat.com> - 4.3.3-5
changelog:
  - Resolves: #605069 - RPMdiff run failed for package konq-plugins-4.3.3-3.el6
    (sanitize .desktop files)


author: Michael A. Peters <mpeters@mac.com> - 2005-0.1
changelog:
  - Initial attempt at something that resembles packaging.
  -- Red Hat / Fedora specific patches from tetex not carried over yet
  -- probably some regression


author: Michael A. Peters <mpeters@mac.com> - 2005-0.2
changelog:
  - apply Fedora/Red Hat patches (except fot japanese)
  - port patches as needed
  -- Some of the scripts not patched have same tmpdir issue as the
  -- badscript patch fixes - so a second badscript patch IS still needed
  - build shared libkpathsea


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.2
changelog:
  - update to TeXLive 2007 final
  - remove texlive-errata dependencies
  - don't use dates in upstream tarball names
  - fix invalid freetype libraries location
  - disable broken parallel build
  - move filelists back to the spec


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.5
changelog:
  - separate kpathsea from texlive-fonts
  - update filelists
  - incorporate fixes from David Walluck (Mandriva, Debian, SuSE patches, etc.)
  - link against system freetype2/t1lib
  - remove kpathsea library building hacks
  - disable ttf2pk, don't link against type1
  - fix perl requires


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.9
changelog:
  - update internal xpdf to 3.02 from upstream to fix CVE-2007-3387
  - don't link statically with libstdc++
  - put xdvi.xaw3d to texlive-xdvi instead of main package


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.10
changelog:
  - update License tag to licenses used in TeXLive sources
  - remove ps2eps, it's a separate package
  - don't remove updmap.cfg in post phase
  - fix provides/obsoletes
  - tetex.cron -> texlive.cron
  - review fixes thanks to Patrice Dumas:
  - remove .gz from installing info in scriptlets
  - remove useless comments, lesstif/lesstif-devel requires
  - remove X-Red-Hat-Extra category from xdvi.desktop
  - update texlive-texdoc.patch
  - require xdg-utils, htmlview, don't require bison, flex, ed


author: MATSUURA Takanori <t.matsuu at gmail.com> - 2007-0.10.1
changelog:
  - add Japanese pTeX
  - Polish platex and pdfplatex are moved to platex-pl and
    pdfplatex respectively


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.11
changelog:
  - BR gawk, ghostscript
  - incorporate path fixes by Patrice Dumas
  - change in the kpathsea default paths
  - don't BR the *-texmf
  - ship kpathsea defaults as documentation
  - disable build of ps2eps at configuration time


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.12
changelog:
  - update description
  - BR ruby, don't obsolete tetex-tex4ht
  - remove license problematic/useless stuff, based on email from Karl Berry
  - move vfont.sample to doc
  - preserve timestamps
  - shuffle binaries between texlive and texlive-fonts, update scriptlets


author: Patrice Dumas <pertusus@free.fr>
changelog:
  - subpackage packages that have a distinct upstream
  - remove non free parts from the archive
  - install xdvi icon in hicolor directory


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.13
changelog:
  - update ls-Rs to deal with the japanese support
  - update ptex to 3.1.10 and mendex to 2.6e
  - fix install-info in scriptlets


author: Jindrich Novy <jnovy@redhat.com> - 2007-0.15
changelog:
  - fix t1lib flaw CVE-2007-4033 (#352271)
  - fix CVE-2007-4352 CVE-2007-5392 CVE-2007-5393, various xpdf flaws (#345121)
  - xdvi won't segfault if DVI file contains character which
    is not present in font (#243630)
  - fix dvips -z buffer overflow with long href (#368591)
  - fix insecure usage of temporary file in dviljk (#368611, #368641)
  - link against poppler, not internal xpdf
  - include arabtex


author: Jindrich Novy <jnovy@redhat.com> - 2007-4
changelog:
  - update japanese, chinese, korean paths to fonts in vfontmap (#418081, #392221)
  - create customized cid-x.map for dvipdfmx (#418091)


author: Jindrich Novy <jnovy@redhat.com> - 2007-6
changelog:
  - unify texlive and texlive-fonts packages and obsolete
    texlive-fonts (related: #426388)
  - move subpackages versions to the top of spec file
  - changes from Patruce Dumas:
    * remove BuildRequires on texmf packages
    * don't create .fmt files during the build
    * ship the ptex.pool file


author: Jindrich Novy <jnovy@redhat.com> - 2007-9
changelog:
  - unify texlive and texlive-fonts filelists
  - package texdoc and texdoctk to a separate subpackage
    texlive-doc, because of the Perl-Tk dependencies and logic


author: Jindrich Novy <jnovy@redhat.com> - 2007-10
changelog:
  - don't build/package xdvik/pxdvik, it's now separated
  - fix texlive-doc requires, description
  - use virtual provides with parentheses to avoid clashes
    with real packages (#410401)


author: Jindrich Novy <jnovy@redhat.com> - 2007-11
changelog:
  - temporary fix to pdflatex to not to warn verbosely because of
    ambiguous entries in pdflatex.map (#425804)
  - update post scriptlets, spec cleanup


author: Jindrich Novy <jnovy@redhat.com> - 2007-12
changelog:
  - remove all references to teTeX from the packaged man pages
    and update links to point correctly to upstream mailing
    list and web page
  - drop xpdf patch, we link against poppler now


author: Jindrich Novy <jnovy@redhat.com> - 2007-13
changelog:
  - don't copy original pdftex map files but regenerate them
    with the correct updmap.cfg file updated in texlive-texmf
    (Related: #425804)
  - install mendex via libtool (#428507)


author: Jindrich Novy <jnovy@redhat.com> - 2007-15
changelog:
  - dependency pruning: (#428489, #429753)
    - package XeTeX separately
    - move ghostscript utilities (a2ping, e2pall, epstopdf, gsftopk,
      pdfcrop, ps4pdf, thumbpdf) and metafont with X support
      to texlive-utils subpackage
    - move allcm, allec, allneeded to texlive-dvips
    - package xdvipdfmx in dvipdfmx subpackage
    - only texlive-doc now requires xdg-utils


author: Jindrich Novy <jnovy@redhat.com> - 2007-16
changelog:
  - package Japanese separately -> texlive-japanese
  - add missing BR: texlive-texmf-fonts (#430338)
  - temporarily disable BR: texlive in kpathsea


author: Jindrich Novy <jnovy@redhat.com> - 2007-18
changelog:
  - package ConTeXt separately to get rid of the ruby dependency
  - fix summary for texlive-japanese
  - remove man pages with no corresponding binaries


author: Jindrich Novy <jnovy@redhat.com> - 2007-20
changelog:
  - move mktexpk to texlive-utils (#435176)
  - rename texlive-japanese to texlive-east-asian
  - move ghostscript Requires to dvipdfmx
  - remove trailing spaces from spec


author: Jindrich Novy <jnovy@redhat.com> - 2007-23
changelog:
  - move MetaPost back to the main package from texlive-context
  - don't package dvipdfmx, it is now packaged separately (#433225)


author: Jindrich Novy <jnovy@redhat.com> - 2007-24
changelog:
  - put back dvipdfmx requires for xelatex (#433225)
  - don't compile unpackaged stuff
  - enable parallel build


author: Jindrich Novy <jnovy@redhat.com> - 2007-25
changelog:
  - fix fmtutil to not to hang in infinite loop, thanks to
    Stepan Kasal (#437008)
  - fix search paths in texmf.cnf, thanks to Patrice Dumas (#436949)


author: Jindrich Novy <jnovy@redhat.com> - 2007-27
changelog:
  - remove dvipdfmx completely, also for F8 (related #437448)
  - kpathsea requires texlive again (#437458)


author: Jindrich Novy <jnovy@redhat.com> - 2007-29
changelog:
  - run restorecon on /var/lib/texmf to avoid access denials
    if SELinux is in enforcing mode (#443286, #442161)


author: Jindrich Novy <jnovy@redhat.com> - 2007-30
changelog:
  - fix SELinux contexts everywhere possible, don't allow restorecon
    to fail (#444922)
  - add missing post/postun scriptlets for subpackages


author: Jindrich Novy <jnovy@redhat.com> - 2007-31
changelog:
  - don't build/package dvipdfm, it's now packaged separately (#445983),
    thanks to Jonathan Underwood
  - remove F8 related chunks from spec


author: Jindrich Novy <jnovy@redhat.com> - 2007-32
changelog:
  - texlive-xetex now provides tex(xetex) (#451774)
  - attempt to fix lacheck segfault (#451513)
  - avoid multiple ownership of texconfig stuff (#442135)


author: Jindrich Novy <jnovy@redhat.com> - 2007-35
changelog:
  - texlive-context requires texlive-texmf-context (#455163)
  - fix lacheck to not to segfault (#451513)
  - rediff some patchesto be applicable with zero fuzz


author: Jindrich Novy <jnovy@redhat.com> - 2007-41
changelog:
  - texlive-east-asian now requires texlive-texmf-east-asian (#487258)
  - do not attempt to remove old fonts via cron in /var/lib/texmf,
    fonts are stored in ~/.texlive2007/texmf-var per-user
    (#477833, #463975, #453468)
  - use correct paths in brp-* post install scriptlets (#468179)
  - fix build with gcc4.4


author: Jindrich Novy <jnovy@redhat.com> 2007-45
changelog:
  - make kpathsea not dependent on texlive
  - fix lacheck again (#451513)
  - fix dvips configuration (#467542)
  - update kpathsea description and summary (#519257)
  - use upstream patch to fix pool overflow CVE-2009-1284 (#492136)
  - don't complain if the pdvipsk hunks touching config.ps don't apply


author: Jindrich Novy <jnovy@redhat.com> 2007-48
changelog:
  - add missing defattr to filelists
  - do not own /var/lib/texmf/web2c/, it is owned by texlive-texmf
  - use official tarball for dvipsk-jpatch


author: Jindrich Novy <jnovy@redhat.com> 2007-57
changelog:
  - fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552
    CVE-2011-1553 CVE-2011-1554, texlive various flaws (#773184)


author: Than Ngo <than@redhat.com> - 2007-58
changelog:
  - Resolves: bz#699575, running latex when the .aux file is non-writable can erase the input .tex file


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include %{version}


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to %{_var}/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-101
changelog:
  - add patches for read overflow and null pointer dereference in the
    implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
  - add patch for attempt to free uninitialized pointer in libkrb5
    (CVE-2009-0846)
  - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
  - put the krb5-user .info file into just -workstation and not also
    -workstation-clients


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-103
changelog:
  - fix a typo in a ksu error message (Marek Mahut)
  - "rev" works the way the test suite expects now, so don't disable tests
    that use it


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-104
changelog:
  - extend PAM support to ksu: perform account and session management for the
    target user
  - pull up and merge James Leddy's changes to also set PAM_RHOST in PAM-aware
    network-facing services


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-1
changelog:
  - update to 1.7
    - no need to work around build issues with ASN1BUF_OMIT_INLINE_FUNCS
    - configure recognizes --enable/--disable-pkinit now
    - configure can take --disable-rpath now
    - no more libdes425, krb524d, krb425.info
    - kadmin/k5srvutil/ktutil are user commands now
    - new kproplog
    - FAST encrypted-challenge plugin is new
  - drop static build logic
  - drop pam_krb5-specific configuration from the default krb5.conf
  - drop only-use-v5 flags being passed to various things started by xinetd
  - put %{krb5prefix}/sbin in everyone's path, too (#504525)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - compile with %{?_smp_mflags} (Steve Grubb)
  - drop the bit where we munge part of the error table header, as it's not
    needed any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a type mismatch in krb5_copy_error_message()
  - ftp: fix some odd use of strlen()
  - selinux labeling: use selabel_open() family of functions rather than
    matchpathcon(), bail on it if attempting to get the mutex lock fails


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-3
changelog:
  - switch buildrequires: and requires: on e2fsprogs-devel into
    buildrequires: and requires: on libss-devel, libcom_err-devel, per
    sandeen on fedora-devel-list


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-4
changelog:
  - try to merge and clean up all the large file support for ftp and rcp
    - ftpd no longer prints a negative length when sending a large file
      from a 32-bit host


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - simplify the man pages patch by only preprocessing the files we care about
    and moving shared configure.in logic into a shared function
  - catch the case of ftpd printing file sizes using %i, when they might be
    bigger than an int now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if the init script fails to start krb5kdc/kadmind/kpropd because it's already
    running (according to status()), return 0 (part of #521772)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-8
changelog:
  - specify the location of the subsystem lock when using the status() function
    in the kadmind and kpropd init scripts, so that we get the right error when
    we're dead but have a lock file - requires initscripts 8.99 (#521772)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-10
changelog:
  - move /etc/pam.d/ksu from krb5-workstation-servers to krb5-workstation,
    where it's actually needed (#538703)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-11
changelog:
  - ksu: move account management checks to before we drop privileges, like
    su does (#540769)
  - selinux: set the user part of file creation contexts to match the current
    context instead of what we looked up
  - configure with --enable-dns-for-realm instead of --enable-dns, which isn't
    recognized any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages that live in the -libs subpackage into the regular
    %{_mandir} tree where they'll still be found if that package is the
    only one installed (#529319)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-15
changelog:
  - add upstream patch for KDC crash during referral processing (CVE-2009-3295),
    via Tom Yu (#545002)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-16
changelog:
  - use %global instead of %define
  - pull up proposed patch for creating previously-not-there lock files for
    kdb databases when 'kdb5_util' is called to 'load' (#551764)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-17
changelog:
  - put the conditional back for the -devel subpackage
  - back down to the earlier version of the patch for #551764; the backported
    alternate version was incomplete


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-18
changelog:
  - add upstream patch for integer underflow during AES and RC4 decryption
    (CVE-2009-4212), via Tom Yu (#545015)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-19
changelog:
  - use portreserve to make sure the KDC can always bind to the kerberos-iv
    port, kpropd can always bind to the krb5_prop port, and that kadmind can
    always bind to the kerberos-adm port (#555279)
  - correct inadvertent use of macros in the changelog (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-20
changelog:
  - krb5_get_init_creds_password: check opte->flags instead of options->flags
    when checking whether or not we get to use the prompter callback (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-21
changelog:
  - suppress warnings of impending password expiration if expiration is more than
    seven days away when the KDC reports it via the last-req field, just as we
    already do when it reports expiration via the key-expiration field (#556495)
  - link with libtinfo rather than libncurses, when we can, in future RHEL


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-22
changelog:
  - use portreserve correctly -- portrelease takes the basename of the file
    whose entries should be released, so we need three files, not one


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-1
changelog:
  - update to 1.7.1
    - don't trip AD lockout on wrong password (#542687, #554351)
    - incorporates fixes for CVE-2009-4212 and CVE-2009-3295 (#553031)
    - fixes gss_krb5_copy_ccache() when SPNEGO is used
  - move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
    the devel subpackage, better lining up with the expected krb5/krb5-appl
    split in 1.8
  - drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
    depends on -workstation which also includes them


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0-1
changelog:
  - build a split-out krb5-appl package by pruning out all of the non-appl
    parts and resetting the versioning to match the upstream version for the
    newly-split package


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0-3
changelog:
  - when checking for pty-handling functions, do so with the benefit of the
    libutil library we think might include them (#595411)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2
changelog:
  - krshd: don't limit user names to 16 chars when utmp can handle names
    at least a bit longer than that (#632442, RT#6773)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2.1
changelog:
  - ftpd: add candidate patch to detect setegid/setregid/setresgid and check
    for errors when calling them (MITKRB5-SA-2011-005, CVE-2011-1526, #713342)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-3
changelog:
  - drop calls to pam_selinux from the gssftp PAM configuration (#713459)
  - reference password-auth instead of system-auth in the gssftp and kshell
    PAM configurations


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-4
changelog:
  - increase the size of the ftp client's command line input buffer (#665834)
  - incorporate patch to correct parsing errors with "restrict" lines in
    ftpusers (#713521, RT#6889)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-7.1
changelog:
  - add Siddhesh Poyarekar's patch to ensure that when performing an "mdir"
    or "mls" operation, that the FTP client always passes an actually-terminated
    string as the open mode for fopen() (#816689, RT#7079)


author: Colin Walters <walters@verbum.org> - 0.8-1
changelog:
  - New upstream release
  - Remove both patches; they are upstreamed
  - Add gconf spec goo
  - Add new stuff to files list


author: Matthias Clasen <mclasen@redhatcom> - 0.8-4
changelog:
  - Don't show bubbles before the icon is there
  - Use the same invisible char as the rest of the world


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-1
changelog:
  - update to 1.7.1
    - don't trip AD lockout on wrong password (#542687, #554351)
    - incorporates fixes for CVE-2009-4212 and CVE-2009-3295
    - fixes gss_krb5_copy_ccache() when SPNEGO is used
  - move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
    the devel subpackage, better lining up with the expected krb5/krb5-appl
    split in 1.8
  - drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
    depends on -workstation which also includes them


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-2
changelog:
  - pull up patch to get the client libraries to correctly perform password
    changes over IPv6 (Sumit Bose, RT#6661)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
changelog:
  - remove the krb5-appl bits (the -workstation-clients and -workstation-servers
    subpackages) now that krb5-appl is its own package
  - replace our patch for #563431 (kpasswd doesn't fall back to guessing your
    principal name using your user name if you don't have a ccache) with the
    one upstream uses


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
changelog:
  - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628, #576325)
  - kdc.conf: no more need to suggest keeping keys with v4-compatible salting


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - drop patch to suppress key expiration warnings sent from the KDC in
    the last-req field, as the KDC is expected to just be configured to either
    send them or not as a particular key approaches expiration (#556495)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #582466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596887), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull up fix for upstream #6745, in which the gssapi library would add the
    wrong error table but subsequently attempt to unload the right one


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3
changelog:
  - tell krb5kdc and kadmind to create pid files, since they can
  - add logrotate configuration files for krb5kdc and kadmind (#462658)
  - fix parsing of the pidfile option in the KDC (upstream #6750)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-1
changelog:
  - update to 1.8.3
    - drop backports of fixes for gss context expiration and error table
      registration/deregistration mismatch
    - drop patch for upstream #6750


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-4
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #629022, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #629022, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-6
changelog:
  - pull down patches from trunk to implement k5login_authoritative and
    k5login_directory settings for krb5.conf (#539423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-8
changelog:
  - incorporate upstream patch to fix uninitialized pointer crash in the KDC's
    authorization data handling (CVE-2010-1322, #636335)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-0.beta1.0
changelog:
  - start moving to 1.9 with beta 1
    - drop patches for RT#5755, RT#6762, RT#6774, RT#6775
    - drop no-longer-needed backport patch for #539423
    - drop no-longer-needed patch for CVE-2010-1322
  - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-2
changelog:
  - pkinit: when verifying signed data, use the CMS APIs for better
    interoperability (#636985, RT#6851)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, #664009,
    CVE-2011-0281, #668719, CVE-2011-0282, #668726, CVE-2011-0283, #676126)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - krb5kdc init script: prototype some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (to flush out parts of #651466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - turn on NSS as the backend for libk5crypto, adding nss-devel as a build
    dependency when that switch is flipped


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - throw in a not-applied-by-default patch to try to make pkinit debugging
    into a run-time boolean option named "pkinit_debug"


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - turn off NSS as the backend for libk5crypto for now to work around its
    DES string2key not working (#679012)
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (MITKRB5-SA-2011-003, CVE-2011-0284, #674325)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - override INSTALL_SETUID at build-time so that ksu is installed into
    the buildroot with the right permissions (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696343,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-1
changelog:
  - update to 1.9.1:
    - drop no-longer-needed patches for CVE-2010-4022, CVE-2011-0281,
      CVE-2011-0282, CVE-2011-0283, CVE-2011-0284, CVE-2011-0285


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#576093)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-3
changelog:
  - pull a fix from SVN to get libgssrpc clients (e.g. kadmin) authenticating
    using the old protocol over IPv4 again (RT#6920)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-4
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#715074)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-5
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)
  - pull a fix from SVN to use AI_ADDRCONFIG more often (RT#6923)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-6
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-7
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#723723),
    which is too fragile in cases where the database has been manually moved or
    is accessed through another kdb plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-8
changelog:
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS
  - pull in a patch to fix losing track of the replay cache FD, from SVN by
    way of Kevin Coffman


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-9
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-10
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-12
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth (#734341)
  - pull in build-time deps for the tests


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-16
changelog:
  - kadmin.service: fix #723723 again
  - kadmin.service,krb5kdc.service: remove optional use of $KRB5REALM in command
    lines, because systemd parsing doesn't handle alternate value shell variable
    syntax
  - kprop.service: add missing Type=forking so that systemd doesn't assume simple
  - kprop.service: expect the ACL configuration to be there, not absent
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#739853)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-17
changelog:
  - pull in patch from trunk to rename krb5int_pac_sign() to krb5_pac_sign() and
    make it public (#745533)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-18
changelog:
  - apply upstream patch to fix a null pointer dereference with the LDAP kdb
    backend (CVE-2011-1527, #744125), an assertion failure with multiple kdb
    backends (CVE-2011-1528), and a null pointer dereference with multiple kdb
    backends (CVE-2011-1529) (#737711)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.0
changelog:
  - update to 1.10 alpha 1
  - on newer releases where we can assume NSS >= 3.13, configure PKINIT to build
    using NSS
  - on newer releases where we build PKINIT using NSS, configure libk5crypto to
    build using NSS
  - rename krb5-pkinit-openssl to krb5-pkinit on newer releases where we're
    expecting to build PKINIT using NSS instead
  - during %check, run check in the library and kdc subdirectories, which
    should be able to run inside of the build system without issue


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.2
changelog:
  - apply upstream patch to fix a null pointer dereference when processing
    TGS requests (CVE-2011-1530, #753748)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.3
changelog:
  - pull in patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761317)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761317)
  - pull in patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761317)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha2.2
changelog:
  - modify the deltat grammar to also tell gcc (4.7) to suppress
    "maybe-uninitialized" warnings in addition to the "uninitialized" warnings
    it's already being told to suppress (RT#7080)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-2
changelog:
  - add patch to accept keytab entries with vno==0 as matches when we're
    searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-5
changelog:
  - when removing -workstation, remove our files from the info index while
    the file is still there, in %preun, rather than %postun, and use the
    compressed file's name (#801035)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-1
changelog:
  - update to 1.10.1
    - drop the KDC crash fix
    - drop the KDC lookaside cache fix
    - drop the fix for kadmind RPC ACLs (CVE-2012-1012)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-2
changelog:
  - change back dns_lookup_kdc to the default setting (Stef Walter, #805318)
  - comment out example.com examples in default krb5.conf (Stef Walter, #805320)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
changelog:
  - have -server require /usr/share/dict/words, which we set as the default
    dict_file in kdc.conf (#817089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-1
changelog:
  - update to 1.10.2
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user
    - also package the PDF format admin, user, and install guides
    - drop some PDFs that no longer get built right
  - add a backport of Stef's patch to set the client's list of supported
    enctypes to match the types of keys that we have when we are using a
    keytab to try to get initial credentials, so that a KDC won't send us
    an AS reply that we can't encrypt (RT#2131, #748528)
  - don't shuffle around any shared libraries on releases with no-separate-/usr,
    since /usr/lib is the same place as /lib
  - add explicit buildrequires: on 'hostname', for the tests, on systems where
    it's in its own package, and require net-tools, which used to provide the
    command, everywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-2
changelog:
  - back out this labeling change (dwalsh):
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-3
changelog:
  - backport a fix to allow a PKINIT client to handle SignedData from a KDC
    that's signed with a certificate that isn't in the SignedData, but which
    is available as an anchor or intermediate on the client (RT#7183)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-5
changelog:
  - add upstream patch to fix freeing an uninitialized pointer and dereferencing
    another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
    and CVE-2012-1015, #844779 and #844777)
  - fix a thinko in whether or not we mess around with devel .so symlinks on
    systems without a separate /usr (sbose)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-6
changelog:
  - go back to not messing with library file paths on Fedora 17: it breaks
    file path dependencies in other packages, and since Fedora 17 is already
    released, breaking that is our fault


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-7
changelog:
  - selinux: hang on to the list of selinux contexts, freeing and reloading
    it only when the file we read it from is modified, freeing it when the
    shared library is being unloaded (#845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz, #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-8
changelog:
  - untag a couple of other patches which don't strictly need to apply during
    %{?_rawbuild} builds (more of #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-9
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10
changelog:
  - make -server conflict with older versions of SELinux policy that didn't
    allow us to use eventfds, which libverto's backend may depend on in order
    to properly shut down a multi-worker KDC (#871524)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-11
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#911147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-13
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950343)
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917910)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917910, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-14
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-16
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1070244)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-17
changelog:
  - backport fix to not spin on a short read when reading the length of a
    response over TCP (RT#7508, #922884)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-18
changelog:
  - pkinit: backport tweaks to avoid trying to call the prompter callback
    when one isn't set (part of #965721)
  - pkinit: backport the ability to use a prompter callback to prompt for
    a password when reading private keys (the rest of #965721)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-19
changelog:
  - packaging: don't Obsoletes: older versions of krb5-pkinit-openssl and
    virtual Provide: krb5-pkinit-openssl on EL6, where we don't need to
    bother with any of that (#1001961)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-20
changelog:
  - apply patch from Nikolai Kondrashov to pass a default realm set in
    /etc/sysconfig/krb5kdc to the kdb_check_weak helper, so that it doesn't
    produce an error if there isn't one set in krb5.conf (#1009389)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-21
changelog:
  - drop patch to add additional access() checks to ksu - they shouldn't be
    resulting in any benefit


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-22
changelog:
  - add patch from Jatin Nansi to avoid attempting to clear memory at the
    NULL address if krb5_encrypt_helper() returns an error when called
    from encrypt_credencpart() (#1055329, pull #158)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-23
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1087068, RT#7858)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-25
changelog:
  - ksu: if the -e flag isn't used, use the target user's shell when checking
    for authorization via the target user's .k5users file (#1026721)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-26
changelog:
  - pull in backport of patch to not subsequently always require that responses
    come from master KDCs if we get one from a master somewhere along the way
    while chasing referrals (RT#7650, #1113652)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-27
changelog:
  - pull in backported fix for denial of service by injection of malformed
    GSSAPI tokens (CVE-2014-4341, CVE-2014-4342, #1121510)
  - incorporate backported patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800, more of


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-29
changelog:
  - gssapi: pull in upstream fix for a possible NULL dereference in spnego
    (CVE-2014-4344, #1121510)
  - gssapi: pull in proposed-and-accepted fix for a double free in initiators
    (David Woodhouse, CVE-2014-4343, #1121510)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-30
changelog:
  - ksu: when evaluating .k5users, treat lines with just a principal name as if
    they contained the principal name followed by '*', and don't throw away data
    from .k5users when we're not passed a command to run, which implicitly means
    we're attempting to run the target user's shell (#1026721, revised)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-31
changelog:
  - ksu: when evaluating .k5users, don't throw away data from .k5users when we're
    not passed a command to run, which implicitly means we're attempting to run
    the target user's shell (#1026721, revised)


author: Roland Mainz <roland.mainz@nrubsig.org> 1.10.3-34
changelog:
  - Backport of krb1.12 localauth plugin support
    See krb5-1.10-localauth_backport.patch for porting comments.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-35
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-36
changelog:
  - Backported krbdev #7996 ("Simplify and improve ksu cred
    verification"; cherry-picked from upstream
    bbfe19f03bdeca7b05b542dbae4c1692c9800c70) to fix RH bug
      less than 5 mins"): When verifying the user's initial
    credentials, don't compute a server name and preemptively
    obtain creds for it. This change allows
    |krb5_verify_init_creds()| to use any host key in the
    keytab, and not just the one for the canonicalized local
    hostname.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-37
changelog:
  - Backported krb5-1.12.2 changes for |getclhoststr()|
    to fix RH bug #1154130 ("kadmind (Error): iprop_full_resync_1:
    getclhoststr failed").


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-38
changelog:
  - Backported krbdev #7868 ("Use preauth options when changing
    password") from krb-1.13 to fix RH bug #1075656 ("krb5
    client ignores FAST settings for changepw requests"):
    If we try to change the password in
    |rb5_get_init_creds_password()|, we must use all
    application-specified gic options which affect
    preauthentication when getting the kadmin/changepw ticket.
    Create a helper function |make_chpw_options()| which copies
    the application's options, unsets the options we don't want,
    and sets options appropriate for a temporary ticket.


author: - Roland Mainz <rmainz@redhat.com> - 1.10.3-39
changelog:
  - Backout patch #137 for krbdev #7996 ("Simplify and improve
    ksu cred verification" - see 1.10.3-36) for now until we
    figure out how to get this working.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-40
changelog:
  - fix for CVE-2014-5355 (#1193939) "krb5: unauthenticated
    denial of service in recvauth_common() and others"


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-42
changelog:
  - fix for RH bug #1210704 ("Remove stray include in krb5's
    localauth_plugin.h"). This unnecessary #include statement
    was causing build failures on some systems by making libkrb5
    sources depend on gssapi.h (and as result to libcom_err,
    too).


author: Robbie Harwood <rharwood@redhat.com> - 1.10.3-54
changelog:
  - Fix gss_accept_sec_context output_token return in error cases
    Also backport upstream test for this.
  - Resolves: #1279249


author: Stanislav Kozina <skozina@redhat.com> - 0.9.16-1
changelog:
  - always load whitelist file from kernel-abi-whitelists package, remove the attached files
  - always load Module.symvers file from kernel-devel package, remove attached files
  - Resolves: #1335513


author: Tomas Smetana <tsmetana@redhat.com> 20070328-2
changelog:
  - fix wrong exit status of spawned process after SIGSTOP
  - fix building of debuginfo package, add %{?dist} to release
  - fix handling of SIGTTOU in non-interactive shell
  - remove useless builtins


author: Tomas Smetana <tsmetana@redhat.com> 20071105-2
changelog:
  - fix #405381 - ksh will not handle $(xxx) when typeset -r IFS
  - fix #386501 - bad group in spec file


author: Michal Hlavinka <mhlavink@redhat.com> 20081104-1
changelog:
  - update to 2008-11-04
  - ast-ksh-locales are not useable remove them
  - /usr/bin/ksh symlink was removed


author: Michal Hlavinka <mhlavink@redhat.com> - 20100202-6
changelog:
  - fix infinite loop when whence builtin is used with -q option (#587127)
  - fix stdin for double command substitution (#584704)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-3
changelog:
  - fix file io race condition when file was created, but still does not exist (#660319)
  - use 'alternatives' for (m)ksh switching (#659658)
  - do not forget to restore file handles after execution of sourced script (#651888)
  - fix bug when here document got sometimes truncated (#644362)
  - do not forget to close autoloaded file with function definition (#643811)
  - fix wrong typeset handling of arrays that could caused a crash (#637052)
  - fix minor issues in man page (#619692)
  - fix crash when ksh get SIGPIPE while already executing signal handler (#616691)
  - fix wrong output redirection in SIGPIPE trap (#616684)
  - add RLIMIT_RTPRIO and RLIMIT_NICE support to ulimit (#582690)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-7
changelog:
  - ksh did not wait for pipeline to complete when pipefail option was used (#702016)
  - completion used after an environment variable reported bad susbstituion error (#702015)
  - ksh child exit code not preserved correctly (#702013)
  - do not change $0 in posix function (#702011)
  - fix man page information about default value for PATH variable (#702008)
  - do not use invalid PID values in ksh kill built-in (#701890)
  - fix crashe when IFS is unset inside a function (#683734)
  - do not count empty array elements (#702014)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-14
changelog:
  - fix data corruption in a here-document section of a script at byte 8192 (#786787)
  - restore tty settings after timed out read (#577223)
  - do not create extra process when it's not needed (#781976)
  - fix file descriptor leak (#781498)
  - do not segfault on incorrect oop code (#743840)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-19
changelog:
  - assigning a right justified typedef'd variable to a smaller one
    could corrupt the result (#846678)
  - fix exporting of l/r-justified variable (#846678)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-2
changelog:
  - fix overflow in subshell loop (#858263)
  - set default editing mode to emacs (#761551)
  - ksh -m did not turn monitor mode on (#960034)
  - prevent fork bomb trigered by SIGSTP (#922851)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-14
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1066589)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-16
changelog:
  - do not resend signal on termination (#1075635)
  - fix argv rewrite (#1047506)
  - fix brace expansion on/off (#1078698)
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1070350)
  - fix parser errors related to the end of the here-document marker (#1036931)
  - ksh hangs when command substitution fills out the pipe buffer (#1062296)
  - using typeset -l with a restricted variabled caused segmentation fault (#1083713)
  - ksh stopped on read when monitor mode was enabled (#1023109)
  - monitor mode was documented incorrectly (#1019334)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-17
changelog:
  - do not crash when unsetting running function from another one (#1105138)
  - should report an error when trying to cd into directory without execution bit (#1102627)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-18
changelog:
  - job locking mechanism did not survive compiler optimization (#1112306)
  - wrong return code from a pipe in command substitution (#1117316)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-24
changelog:
  - cd to directory without execution permission can't fail silently (#1160923)
  - current directory could differ from PWD (#1168611)
  - declaration of a two dimemsional associatve array could add an extra 0 element (#1173668)
  - exporting fixed with variable corrupted its data (#1188377)
  - fixes memmory leak on unset of associative array (#1189294)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - fix segfault when handling a trap (#1117404)
  - closing a file descriptor in a command substitution caused loss of the output (#1116072)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-32
changelog:
  - fix: in a login shell "( cmd & )" does nothing (#1217236)
  - multibyte character string after $1-9 was not expanded correctly (#1256495)
  - case in a for loop inside a subshell caused syntax error (#1241013)


author: Siteshwar Vashisht <svashisht@redhat.com> - 20120801-36
changelog:
  - Add configuration option to enable signal bubbling for backward compatibility
    Resolves: #1454804


author: Lukas Tinkl <ltinkl@redhat.com> - 1.1-0.9.20080213
changelog:
  - Resolves: #605070 - RPMdiff run failed for package ksig-1.1-0.8.20080213.1.el6
    (create a noarch doc subpackage)


author: Lukas Tinkl <ltinkl@redhat.com> - 1.1-0.10.20080213
changelog:
  - Resolves: #605070 - RPMdiff run failed for package ksig-1.1-0.8.20080213.1.el6
    (sanitize .desktop file)


author: Michal Nowak <mnowak@redhat.com> - 1.00-1
changelog:
  - initial packaging
  - this package should be prepared for another unikurd fonts
    in sub-packages because on the KurdIT group/unikurd web there
    are plenthora of them, but probably not under suitable licenses


author: Michal Nowak <mnowak@redhat.com> - 1.00-2
changelog:
  - got rid of -web sub-package
  - changed name from unikurd-fonts-web to unikurd-web-font
  - minor structural changes in SPEC file


author: Michal Nowak <mnowak@redhat.com> - 20020502
changelog:
  - version is now based on date of last issue of the font
  - %defattr(-,root,root,-) -> %defattr(644,root,root,755)


author: Michal Nowak <mnowak@redhat.com> - 20020502-1
changelog:
  - renamed from unikurd-web-font -> kurdit-unikurd-web-fonts
  - enhanced %description field
  - changes for F11 fonts rules
  - add Obsoletes: unikurd-web-font <= 20020502-1


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.13-1
changelog:
  - link with build-id to fix rawhide build
  - upgrade to 1.13 (GCC4 build-fix and string fixes) (#449542)
  - add -plugindir patch so listplugin and friends will work by default
    (Anthony Green #324741)


author: Robert Scheck <robert@fedoraproject.org> - 1.13-5
changelog:
  - Really added the plugindir patch now (thanks to Karsten Hopp)
  - Avoid the make errors because of mkdirhier better than until now


author: Simo Sorce <simo@redhat.com> 2.3.6-0.20131125.3
changelog:
  - Initial packaging
  - Based on the spec file by Jean-Marc Liger <jmliger@siris.sorbonne.fr>
  - Code is updated to latest master via a jumbo patch while waiting for
    official upstream release.
  - Jumbo patch includes also additional patches sent to upstream list)
    to build on Fedora 20
  - Perl bindings are disabled as they fail to build
  - Disable doc building as it doesn't ork correctly for now


author: Simo Sorce <simo@redhat.com> 2.4.0-0
changelog:
  - Update to final 2.4.0 version
  - Drop all patches, they are now included in 2.4.0
  - Change Source URI


author: Simo Sorce <simo@redhat.com> - 2.4.0-5
changelog:
  - Add various fixes from upstream master, mostly memory leaks
  - Change to final covscan fixes as applied upstream


author: Michal Schmidt <mschmidt@redhat.com> - 0.3-4
changelog:
  - Package the translation table too and modify latencytop.c to look for it in
    the correct directory.


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-6
changelog:
  - Build both with and without GUI to allow the use on systems where Gtk
    dependency is undesirable. The latencytop package is still the full-blown build.
    latencytop-tui is the miminal build. latencytop-common has the shared files.
  - Resolves: rhbz#726476


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-8
changelog:
  - Print the error message only after cleaning up curses.
  - Remove the broken fsync view, stop using the obsolete 'tracing_enabled'.
  - Better error message when run as non-root.
  - Resolves: rhbz#633698


author: Jindrich Novy <jnovy@redhat.com> 2002.2.1-1
changelog:
  - create backups for patches
  - update Source1
  - BuildArchitectures -> BuildArch
  - remove direct RPM_BUILD_ROOT links from l2hconf.pm
  - fix bad interpreter name path in pstoimg, texexpand
  - define --with-texpath explicitely
  - remove Dos.pm, Mac.pm, OS2.pm, Win32.pm
  - don't require the font directory to be ended with PATH/fonts


author: Jindrich Novy <jnovy@redhat.com> 2002.2.1-4
changelog:
  - remove '\n' causing that pstoimg generates gray images
    (#161186, #127010), solution from Julius Smith


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp>
changelog:
  - fix BuildRequires to be rebuilt with mock (#191762)
  - fix spec file scripts.
  - update source files (use tar.gz with the date 20041025 and 2.1b1.6 Japanese patch)


author: Jindrich Novy <jnovy@redhat.com> 2008
changelog:
  - update to latex2html-2008
  - license changed to GPL
  - update japanese support to l2h-2K8-jp20081220
  - update cfgcache.pm
  - fix BR


author: Jindrich Novy <jnovy@redhat.com> 2008-4
changelog:
  - require netpbm-progs
  - include documentation
  - set executable bit for makeseg and makemap scripts
  - white-space spec correction
  - move docs and example directory to %doc
  - nuke duplicated stuff


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0:1.11-0.fdr.2
changelog:
  - Renamed to lcms to match upstream.
  - Provides: littlecms.
  - Fixed doc attributes.
  - Excluding empty dir %{_libdir}/python2.2/


author: kwizart < kwizart at gmail.com > - 1.17-3
changelog:
  - Rebuild for gcc 4.3
  - Move libs to mutlilibs
  - Prevent timestramps change
  - Convert files-not-utf8


author: kwizart < kwizart at gmail.com > - 1.18-0.1.beta2
changelog:
  - Update to 1.18beta2
   fix bug #487508: CVE-2009-0723 LittleCms integer overflow
   fix bug #487512: CVE-2009-0733 LittleCms lack of upper-bounds check on sizes
   fix bug #487509: CVE-2009-0581 LittleCms memory leak


author: kwizart < kwizart at gmail.com > - 1.18-1
changelog:
  - Update to 1.18 (final)
  - Remove upstreamed patches
  - Disable autoreconf - patch libtool to prevent rpath issue


author: David Walluck <david@anti-microsoft.org> 0:4.1-5jpp
changelog:
  - add Distribution and Vendor tags
  - fix jpackage-utils requirement
  - change gmake to %__make
  - break %description lines


author: Dennis Gilmore <dennis@ausil.us> - 4.18-1
changelog:
  - update to 4.18
  - spec contents pulled from RHEL5 srpm 
  - fedora spec changelog
  - update buildroot
  - use jss from fedora for building


author: Rich Megginson <rmeggins@redhat.com> 0:4.18-6
changelog:
  - Resolves: bug 684028 - LDAPSchemaElement.getOptionalValues() mangles values
  - upstream mozilla id=640750


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.22-8
changelog:
  - Fixes from package review
  - Change Requires: on tools subpackage to be the exact version/release
  - Remove unnecessary BuildRoot directive


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-1
changelog:
  - New upstream release 1.0.0
  - SOname bump to account for module loading changes
  - Rename libldb-tools to ldb-tools to make upgrades easier


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.3-2
changelog:
  - Build and install API documentation
  - Build tdb_compat and ccan statically. They have no upstream releases to
    link against yet and their API is in flux. It is unsafe to make them
    public and shared at this time.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.3-3
changelog:
  - Add explicit mention of the bundled libreplace
  - https://fedorahosted.org/fpc/ticket/120
  - Add explicit mention of bundled libtdb_compat and libccan
  - https://fedorahosted.org/fpc/ticket/119


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.4-1
changelog:
  - New upstream release
  - Add ldb_module_error() routine
  - Fedora: work around unreliable configure check for pytevent
  - Drop patch to ignore --disable-silent-rules (included in tarball)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.6-1
changelog:
  - New upstream release 1.1.6
  - Drop upstream patches
  - Required for upcoming Samba 4 beta
  - Explicitly build with tdb1 support


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.8-1
changelog:
  - New upstream release 1.1.8
  - Required for latest Samba 4 beta
  - Fixes for pyldb
  - Revert to using tdb1 by default
  - Drop support for tdb_compat
  - CCAN is no longer built as a static library


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.9-1
changelog:
  - New upstream release 1.1.9
  - Required for Samba 4 Beta 5
  - Ensure rename target does not exist before deleting old record
  - Add parameter to avoid NULL format string flagged by -Werror=format


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.13-3
changelog:
  - use the proper %patch stanza to make rpmdiff happy
  - related: rhbz#873422 - LDB 1.1.13 exports improper ABI


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.13-3.1
changelog:
  - Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.2.z]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Paul Wouters <paul@xelerance.com> 1.0.0-6
changelog:
  - added a make clean for 2.3.3 since .o files were left behind upstream,
    causing failure on ppc platform


author: Paul Wouters <paul@xelerance.com> 1.0.1-3
changelog:
  - Fixed changelog typo in date
  - Rebuild requested for PT_GNU_HASH support from gcc
  - Did not upgrade to 1.1.0 due to compile issues on x86_64


author: Paul Wouters <paul@xelerance.com> 1.2.0-2
changelog:
  - Own the /usr/include/ldns directory (bug #233858)
  - Removed obsoleted patch
  - Remove files form previous libtool run accidentally packages by upstream


author: Paul Wouters <paul@xelerance.com> 1.2.0-10
changelog:
  - Added sha256 DS record patch to ldns-key2ds
  - Minor tweaks for proper doc/man page installation.
  - Workaround for parallel builds


author: Paul Wouters <paul@xelerance.com> 1.2.0-11
changelog:
  - Patch for ldns-key2ds to write to stdout
  - Again remove extra set of man pages from doc
  - own /usr/include/ldns (bug 233858)


author: Paul Wouters <paul@xelerance.com> - 1.5.1-4
changelog:
  - Memory management bug when generating a sha256 key, see:
    https://bugzilla.redhat.com/show_bug.cgi?id=493953


author: Paul Wouters <paul@xelerance.com> - 1.6.0-3
changelog:
  - Added patch to compile with --without-ssl
  - Removed openssl dependancies
  - Recompiled with --without-ssl


author: Paul Wouters <paul@xelerance.com> - 1.6.1-2
changelog:
  - Added openssl dependancy back in, since we get more functionality
   when using openssl. Especially in 'drill'.


author: Paul Wouters <paul@xelerance.com> - 1.6.2-1
changelog:
  - Upgraded to 1.6.2. This fixes various bugs.
    (upstream released mostly to default with sha2 for the imminent
     signed root, but we already enabled that in our builds)


author: Paul Wouters <paul@xelerance.com> - 1.6.4-2
changelog:
  - Fix missing _ldns.so causing ldns-python to not work
  - Patch for installing ldns-python files
  - Patch for rpath in ldns-python
  - Don't install .a file for ldns-python


author: Paul Wouters <paul@xelerance.com> - 1.6.10-2
changelog:
  - Fix for losing nameserver when it drops UDP fragments in
    ldns_resolver_send_pkt [Willem Toorop <willem@NLnetLabs.nl>]
  - Added ldnsx module (to be merged into ldns soon)
    http://git.xelerance.com/cgi-bin/gitweb.cgi?p=ldnsx.git;a=summary


author: Paul Wouters <paul@xelerance.com> - 1.6.11-2
changelog:
  - Updated to 1.6.11, fixes rhbz#741026 which is CVE-2011-3581
  - Python goes into sitearch, not sitelib
  - Fix source link and spelling errors in description


author: Paul Wouters <pwouters@redhat.com> - 1.6.13-1
changelog:
  - Upgraded to 1.6.13, bugfix release
  - Added --disable-ecdsa as ECC is still banned
  - Removed --with-sha2 - it is always enabled and option was removed


author: Paul Wouters <pwouters@redhat.com> - 1.6.13-2
changelog:
  - Added reworked ldns-read-zone patch from trunk
    (adds -p for SOA padding, and -o for zeroizing timestamps/sigs)


author: Paul Wouters <pwouters@redhat.com> - 1.6.14-1
changelog:
  - [pulled before release]
  - Updated to 1.6.14
  - Removed merged in patch
  - Added new dependancy on ca-certificates for ldns-dane PKIX validation


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-7.1
changelog:
  - port the rhel-7 package version to rhel-6
  - enabled ECDSA due to Unbound
  - Fix issue in DSA algorithm (#1077799)


author: Paul Nasrat <pnasrat@redhat.com> - 3.3.6-1
changelog:
  - Update to 3.3.6
  - Fix typo  (#189647)
  - Enable threading fixes (#181298)
  - Conditionalize static library


author: Panu Matilainen <pmatilai@redhat.com> - 3.5.9-2
changelog:
  - Remove references to temporary registers from cache on release (#463061)
  - Enable loading of external extensions (#457433)


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.6.2-2
changelog:
  - require tcl(abi) in sqlite-tcl subpackage (#474034)
  - move tcl extensions to arch-specific location
  - enable dependency extraction on the tcl dso
  - require pkgconfig in sqlite-devel


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.12-2
changelog:
  - disable strict aliasing to work around brokenness on 3.6.12 (#494266)
  - run test-suite on build but let it fail for now


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.14-1
changelog:
  - update to 3.6.14 (http://www.sqlite.org/releaselog/3_6_14.html)
  - merge-review cosmetics (#226429)
    - drop ancient sqlite3 obsoletes
    - fix tab vs space whitespace issues
    - remove commas from summaries
  - fixup io-test fsync expectations wrt SQLITE_DISABLE_DIRSYNC


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.17-1
changelog:
  - update to 3.6.17 (http://www.sqlite.org/releaselog/3_6_17.html)
  - disable to failing tests until upstream fixes


author: Panu Matilainen <pmatilai@redhat.com> - 3.6.18-1
changelog:
  - update to 3.6.18 (http://www.sqlite.org/releaselog/3_6_18.html)
  - drop no longer needed test-disabler patches


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to v346
  - Update download URL
  - use the configure marcro
  - strip binary
  - fix up lesspipe stuff (Bug #8750 and a couple of non-reported bugs)
    (Karsten, did I mention I'll kill you when you return from SAP? ;) )


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up messed output if a user outputs anything in ~/.bashrc or the
    likes (Bug #9443)
  - handle RPM_OPT_FLAGS


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - update URLs
  - Copyright -> License
  - fix #43348 (crashes when searching for /<)
  - fix #39849 (
    _ ignores LESSCHARDEF in displaying characters,
    _ prefaces sequences of one or "high" characters with a capital "A")


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - less-378
  - added some debian patches
  - show image info instead of binary garbage when viewing images


author: Karsten Hopp <karsten@redhat.de> 378-5
changelog:
  - removed older, unused patches
  - add patch from Yukihiro Nakai to fix display of japanese text
    (#79977)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - fix korean #79977
  - add new less.sh from #89780, s/ko/korean/ and write .csh script
  - add patch from #91661: /japanses/japanese-euc/


author: Jindrich Novy <jnovy@redhat.com> 394-2
changelog:
  - apply better fix for #120916 from Avi Kivity (#177819)
    to avoid flickering when '>' is pressed multiple times


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-5
changelog:
  - Add *.xz, *.lzma (both for compressed man pages as well), *.jar and *.nbm
    read support to lesspipe.sh
    Resolves: #718498


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-9
changelog:
  - Fix wrong `man' program option (incompatibility between man and man-db packages)
    by using `groff' program instead for parsing troff files (#718498)


author: Jozef Mlich <jmlich@redhat.com> - 436-12
changelog:
  - Fixing regressions found by QA
  - displaying of man page using troff (718498) - beware: man page file
    type is detected using file
  - tcsh printenv problem, was caused by incorrect return value for output
    which will be not preprocessed by lesspipe (186931)
    Resolves: #615303


author: Tim Powers <timp@redhat.com>
changelog:
  - patched to build with gcc-2.96
  - use gcc instead of c++ for CXX, otherwise you expose an ICE in gcc when
    using g++ on two files, one being a C++ source, and the other a C source.
    Using gcc does the correct thing.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - explicitly list the modules which are built when the package compiles, so
    that module build failures (for whatever reason) get caught


author: Nalin Dahyabhai <nalin@redhat.com> 2.6.9-1
changelog:
  - include patch based on patch from Ulf Härnhammar to fix unsafe use of
    sscanf when reading http directory listings (CAN-2003-0963)
  - include patch based on patch from Ulf Härnhammar to fix compile warnings
    modified based on input from Solar Designer


author: Nalin Dahyabhai <nalin@redhat.com> 2.6.10-1
changelog:
  - update to 2.6.10, which folds in the previous patches
  - configure with --with-debug so that we get useful debug info


author: Nalin Dahyabhai <nalin@redhat.com> 2.6.10-3
changelog:
  - add patch to avoid DoS when connecting to HTTP servers (or "HTTP" "servers")
    which don't provide status headers, or provide empty lines instead of status
    headers


author: Jason Vas Dias <jvdias@redhat.com> - 3.3.2-1
changelog:
  - *** PLEASE COULD ANYONE MODIFYING lftp TEST IT BEFORE SUBMITTING! ***
    (and preferably contact the lftp package maintainer (me) first - thank you!)
    bug 171096 : 'mget files in lftp causes abort' (core dump actually)
    resulted from not doing so .
    See http://lftp.yar.ru :
  	Recent events:2005-10-17: 
  	lftp-3.3.2 released. Fixed a coredump caused by double-free.


author: Jason Vas Dias<jvdias@redhat.com> - 3.3.5-1
changelog:
  - Upgrade to version 3.3.5
  - fix bug bz172376 : host lookups should use any address found after timeout


author: Jason Vas Dias<jvdias@redhat.com> - 3.3.5-4
changelog:
  - fix bug 176315: openssl libraries not being picked up - gnutls was instead
  - improvements to bug 172376 fix


author: Maros Barabas <mbarabas@redhat.com> - 3.5.10-3
changelog:
  - Correct mistake removing devel package & calling chkconfig
  - Resolves #235436
  - Removing automake autoconf
  - Resolves #225984


author: Martin Nagy <mnagy@redhat.com> - 3.6.1-1
changelog:
  - upgrade to upstream version 3.6.1
  - remove rpath and make some spec file changes for review (#225984)
  - remove old patches
  - fix core dumping when html tag has its argument empty
  - use own libtool


author: Jiri Skala <jskala@redhat.com> - 4.0.9-1
changelog:
  - Resolves: #602838 - CVE-2010-2251 lftp: multiple HTTP client download filename vulnerability
  - re-base to latest upstream version


author: Tomas Hozza <thozza@redhat.com> - 4.0.9-3
changelog:
  - Fix lftp to try also other addresses if connecting to first fails (#732863)
  - Fix lftp hang when using ascii mode with sftp (#842322)
  - Fix lftp to overwrite filename when auto-rename and clobber are enabled (#619777)
  - Add description of xfer:auto-rename into man page (#674875)


author: mruprich <mruprich@redhat.com> - 4.0.9-10
changelog:
  - Resolves: #1364524 -  lftp command SIZE on non-existing file is executed in a loop instead of return


author: Michal Ruprich <mruprich@redhat.com> - 4.0.9-14
changelog:
  - Related: #1228484 - lftp hangs after dowloading one file during a mirror
  - Related: #1305235 - lftp not following symlinks through sftp


author: Mike A. Harris <mharris@redhat.com> 0.99.0-2
changelog:
  - Renamed package to prepend "xorg-x11" to the name for consistency with
    the rest of the X11R7 packages.
  - Added "Requires: %{name} = %{version}-%{release}" dependency to devel
    subpackage to ensure the devel package matches the installed shared libs.
  - Added virtual "Provides: lib<name>" and "Provides: lib<name>-devel" to
    allow applications to use implementation agnostic dependencies.
  - Added post/postun scripts which call ldconfig.
  - Added Conflicts with XFree86-libs and xorg-x11-libs to runtime package,
    and Conflicts with XFree86-devel and xorg-x11-devel to devel package.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Renamed package to remove "xorg-x11" from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libICE to version 0.99.1 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libICE to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "Requires: xorg-x11-proto-devel"
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 1.0.4-6
changelog:
  - Minor tweaks to summaries and descriptions.
  - Don't own /usr/include/X11.
  - Use a regular, unversioned dep on xorg-x11-filesystem.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libSM to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libSM to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193421)
  - Replace "makeinstall" with "make install DESTDIR=..."


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated to libX11-0.99.2 from the X11R7 RC1 release.
  - Added en_GR.UTF-8 locale to file manifest.
  - Forcibly remove Xcms.txt


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libX11 to version 0.99.3 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.3-4
changelog:
  - Added libX11-0.99.3-datadir-locale-dir-fix.patch, to fix build to install
    the locale data files into datadir instead of libdir. (#173282)


author: Mike A. Harris <mharris@redhat.com> 0.99.4-1
changelog:
  - Updated libX11 to version 0.99.4 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added libX11-1.0.1-setuid.diff to fix potential security issue (#196094)
  - Change dependency on "filesystem" package to "xorg-x11-filesystem" package,
    so we can control this dep centrally.
  - Added NEWS to doc list.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-1
changelog:
  - Updated libX11 to version 1.0.2
  - Bump BuildRequires and Requires to "xorg-x11-proto-devel >= 7.1-2" to meet
    new "xproto >= 7.0.6" dependency.
  - Disable libX11-0.99.3-datadir-locale-dir-fix.patch as it is now included
    upstream.
  - Remove autoconf dependency as we no longer need it.


author: Mike A. Harris <mharris@redhat.com> 1.0.3-1.fc6
changelog:
  - Updated libX11 to version 1.0.3
  - Remove libX11-1.0.1-setuid.diff as it is included in the 1.0.3 release.
  - Added 'dist' tag to "Release:"


author: Mike A. Harris <mharris@redhat.com> 1.0.3-2.fc6
changelog:
  - Added libX11-nls-indic-locales-bug185376.patch to add support for various
    indic locales which have now been committed upstream (#185376)


author: Adam Jackson <ajax@redhat.com> 1.1.2-3
changelog:
  - libX11-1.1.2-GetMotionEvents.patch: Fix the definition of XGetMotionEvents
    to match the argument order in the headers. (#274671)


author: Adam Jackson <ajax@redhat.com> 1.1.3-2
changelog:
  - libX11-1.1.3-xkb-lock-fix.patch: Don't LockDisplay() recursively.  Fixes
    Gnome hang at logout. (#326461)


author: Adam Jackson <ajax@redhat.com> 1.1.4-3
changelog:
  - libX11-1.1.4-xcb-xreply-leak.patch: Fix a leak when the client has a
    non-fatal error handler. (mclasen, fdo #17616)


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated to new upstream libXScrnSaver-0.99.1 which changes the .so name back
    to libXss, but keeps the inconsistent package name.  This may change again
    in the future.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXScrnSaver to version 0.99.2 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Mike A. Harris <mharris@redhat.com> 0.99.2-4
changelog:
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXScrnSaver to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193424)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-3
changelog:
  - Update build dep to "xorg-x11-proto-devel >= 7.0-9" for scrnsaverproto 1.1
  - Added "Requires: xorg-x11-proto-devel >= 7.0-9" to devel package, to match
    what is listed as required in xscrnsaver.pc


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Update to libXau-0.99.1 from X11R7 RC1 release.
  - Added manpages that were absent in X11R7 RC0, and updated the file lists
    to find them in section "man3x".


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXau to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193422)
  - Replace "makeinstall" with "make install DESTDIR=..." to fix (#192718)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Remove package ownership of mandir/libdir/etc.
  - Added "BuildRequires: xorg-x11-proto-devel" needed by xau.pc


author: Adam Jackson <ajax@redhat.com> 1.0.4-4
changelog:
  - xau-1.0.4-local.patch: When looking for an auth cookie on local transport,
    don't bother checking hostname, it can't possibly help.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Changed all virtual BuildRequires to the "xorg-x11-" prefixed non-virtual
    package names, as we want xorg-x11 libs to explicitly build against
    X.Org supplied libs, rather than "any implementation", which is what the
    virtual provides is intended for.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-4
changelog:
  - Added dependency on xorg-x11-libXmu-devel to devel subpackage, as libXaw
    headers include libXmu headers directly which caused xkbutils to fail to
    build.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix all "BuildRequires:" deps with s/xorg-x11-//g


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXaw to version 0.99.1 from X11R7 RC1
  - Update file manifest to find manpages in "man3x"
  - Added {_includedir}/X11/Xaw/Template.c to file manifest


author: Mike A. Harris <mharris@redhat.com> 0.99.2-2
changelog:
  - Added libXaw-0.99.2-bug-173027-libtool-sucks.patch to fix bug #173027,
    added 'autoconf' invocation prior to configure, and conditionalized it
    all with with_libtool_sucks_workaround macro.
  - Added _smp_mflags to make invocation.
  - Use *.h glob in file manifest instead of listing each header individually.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXaw to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193423)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "BuildRequires: libXt-devel" for (#190169)


author: Parag <paragn@fedoraproject.org> 1.0.6-4
changelog:
  - Merge-review cleanups #226064
  - Updated summary, added Requires: pkgconfig
  - removed zero length file AUTHORS


author: Mike A. Harris <mharris@redhat.com> 0.2.2-1
changelog:
  - Updated libXcomposite to version 0.2.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.2.2.1-1
changelog:
  - Updated libXcomposite to version 0.2.2.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.3-5
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel >= 7.0-10, libXfixes-devel to devel
    subpackage needed by xcomposite.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.1.5-1
changelog:
  - Updated libXcursor to version 1.1.5 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 1.1.5.1-1
changelog:
  - Updated libXcursor to version 1.1.5.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added default index.theme file to set BlueCurve as the default cursor theme
    to fix bug (#175532).


author: Mike A. Harris <mharris@redhat.com> 1.1.6-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel"
  - Added "Requires: xorg-x11-proto-devel" to devel package, needed by xcursor.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Parag <paragn@fedoraproject.org> - 1.1.10-2
changelog:
  - Merge-Review #226066
  - Removed XFree86-libs, xorg-x11-libs as Obsoletes
  - Removed BR:pkgconfig
  - Few spec cleanups


author: Matthias Clasen <mclasen@redhat.com> - 1.1.10-4
changelog:
  - Make default cursor theme inherit dmz-aa instead of Bluecurve
  - Also require the cursor theme package


author: Mike A. Harris <mharris@redhat.com> 1.0.2-1
changelog:
  - Updated libXdamage to version 1.0.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 1.0.2.1-1
changelog:
  - Updated libXdamage to version 1.0.2.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.3-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel >= 7.0-1" as xcursor.pc indicates
    "damageproto >= 1.0" is required.
  - Added "Requires: xorg-x11-proto-devel >= 7.0-1, libXfixes-devel" to devel
    package also, as per xcursor.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXdmcp to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel"
  - Added "Requires: xorg-x11-proto-devel" to devel package, needed by xdmcp.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Adam Jackson <ajax@redhat.com> 1.1.1-3
changelog:
  - REVERT-libXdmcp-1.1.1-xalloc.patch: Restore definitions (but not
    declarations) of Xalloc and friends for RHEL6 ABI compat.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXevie to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" to devel package, needed by xevie.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated to libXext-0.99.1 from the X11R7 RC1 release.
  - Added manpages that were absent in X11R7 RC0, and updated the file lists
    to find them in section "man3x".


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXext to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXext to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-3
changelog:
  - Added "Requires: xorg-x11-proto-devel >= 7.0-1" to devel package (#173713)
  - Added "libX11-devel" to devel package (#176078)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: parag <paragn@fedoraproject.org> - 1.0.1-5
changelog:
  - Merge-Review #226070
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length README file


author: Robert Scheck <robert@fedoraproject.org> 1.1-2
changelog:
  - libXext-1.1-XAllocID.patch: call XAllocID with the display lock held.
  - libXext-1.1-event_vec-smash.patch: don't smash the event processing vector
    if the server has an older extension version than the client.


author: Mike A. Harris <mharris@redhat.com> 3.0.1-1
changelog:
  - Updated libXfixes to version 3.0.1 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 3.0.1.1-1
changelog:
  - Updated libXfixes to version 3.0.1.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 4.0.1-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel >= 7.0-7" for "fixesproto >= 4.0"
  - Added "Requires: xorg-x11-proto-devel >= 7.0-7" for "fixesproto >= 4.0"
    to devel package, needed by xfixes.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Parag <paragn@fedoraproject.org> - 4.0.3-9
changelog:
  - Merge-Review #226071
  - Removed XFree86-libs, xorg-x11-libs, XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - spec cleanups


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Changed all virtual BuildRequires to the "xorg-x11-" prefixed non-virtual
    package names, as we want xorg-x11 libs to explicitly build against
    X.Org supplied libs, rather than "any implementation", which is what the
    virtual provides is intended for.
  - Added freetype-devel build dependency


author: Mike A. Harris <mharris@redhat.com> 0.99.0-4
changelog:
  - Added xorg-x11-proto-devel dependency to 'devel' subpackage, because the
    libXfont headers use some of the protocol headers, but the autotooling of
    libXfont doesn't autodetect this yet.  Discovered when bdftopcf failed to
    compile while trying to package xorg-x11-font-utils, even though libXfont
    headers were installed.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix BuildRequires to use new libX* style package names


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXfont to version 0.99.1 from X11R7 RC1
  - Remove libfontcache* from file manifests, as it is static linked into Xfont


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXfont to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-3
changelog:
  - Added libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch to remove
    conditionalization of FONTDIRATTRIB from sources instead of tweaking
    CFLAGS for bug (#172997, fdo#5047).


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXfont to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Removed libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch, which is now
    integrated upstream.


author: Adam Jackson <ajax@redhat.com> 1.2.3-2.fc7
changelog:
  - libXfont-1.2.3-namespace-pollution.patch: Hide some symbols from the dynamic
    linker to avoid colliding with other libs.


author: Adam Jackson <ajax@redhat.com> 1.3.3-1
changelog:
  - libXfont 1.3.3.
  - libXfont-1.3.1-fast-retry.patch: Retry font server connections faster.
    (#443070)


author: Soren Sandmann <ssp@redhat.com> 1.4.5-3
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Benjamin Tissoires <btissoir@redhat.com> 1.4.5-4
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)


author: Mike A. Harris <mharris@redhat.com> 2.1.7-4
changelog:
  - Added "BuildRequires: fontconfig-devel >= 2.2" dependency that was
    previously missed.  Also added "Requires: fontconfig >= 2.2" runtime
    dependency.
  - Added missing defattr to devel subpackage.


author: Mike A. Harris <mharris@redhat.com> 2.1.7-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix BuildRequires to use new style X library package names


author: Mike A. Harris <mharris@redhat.com> 2.1.8.1-1
changelog:
  - Updated libXft to version 2.1.8.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added "Requires: libXrender-devel" to -devel subpackage for (#175465)


author: Mike A. Harris <mharris@redhat.com> 2.1.10
changelog:
  - Updated libXft to version 2.1.10
  - Specify freetype dependencies as >= 2.1.9-1
  - Futureproof builds by adding release number to fontconfig dependencies.


author: parag <paragn@fedoraproject.org> - 2.1.12-4
changelog:
  - Merge-Review #226074
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length NEWS file


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXi to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Mike A. Harris <mharris@redhat.com> 0.99.1-3
changelog:
  - Added "BuildRequires: libXau-devel", as build fails without it, but does
    not check for it with ./configure.  Bug (fdo#5065)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXi to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192721)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" to devel package for xi.pc
  - Remove package ownership of mandir/libdir/etc.


author: parag <paragn@fedoraproject.org> 1.1.3-2
changelog:
  - Merge-review #226076
  - Removed BR:pkgconfig
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed zero-length AUTHORS README file


author: Peter Hutterer <peter.hutterer@redhat.com> 1.4.3-2
changelog:
  - 0001-Handle-unknown-device-classes.patch: don't corrupt memory when a
    server sends unknown device classes.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.4.3-3
changelog:
  - Fix 0001-Handle-unknown-device-classes.patch: missing prototype change for
    copy_classes in XIQueryDevice caused parameter corruption (#744960)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Mike A. Harris <mharris@redhat.com> 0.99.1-3
changelog:
  - Added "BuildRequires: libXau-devel", as twm fails without it, but does not
    check for it with ./configure.  Bug (fdo#5065)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXinerama to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel" to devel for xinerama.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXmu to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added "BuildRequires: pkgconfig, libXau-devel, xorg-x11-util-macros" to
    fix build dependencies.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel, libX11-devel, libXt-devel" to devel
    subpackage needed by xmu.pc, xmuu.pc
  - Remove package ownership of mandir/libdir/etc.


author: Kristian Høgsberg <krh@redhat.com> - 1.0.2-6.fc7
changelog:
  - Also add Requires for libXext-devel for development package (#210123)
  - Add pkgconfig dependency for -devel package.


author: parag <paragn@fedoraproject.org> - 1.0.3-4
changelog:
  - Merge-Review #226080
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length AUTHORS file


author: Mike A. Harris <mharris@redhat.com> 0.99.1-3
changelog:
  - Added "Obsoletes: xorg-x11-deprecated-libs" to runtime package, and
    "Obsoletes: xorg-x11-deprecated-libs-devel" to devel package.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXp to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-3
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel" to devel for xp.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-4
changelog:
  - Renamed libXp_deprecated rpm macro to "with_devel" to avoid confusion.  This
    library is still deprecated, we just decided to remove the word "deprecated"
    from the package name for library naming consistency.


author: Soren Sandmann <sandmann@redhat.com> - 1.0.0-5
changelog:
  - Moved Print.h, Printstr.h and printproto.pc into the devel package here
    (they used to be in xorg-x11-proto-devel).


author: Soren Sandmann <sandmann@redhat.com> - 1.0.0-6
changelog:
  - Add patch to not check for printproto.pc. (Since it's part of this
    package now, it isn't installed at the time libXp is configured).


author: Soren Sandmann <sandmann@redhat.com> - 1.0.0-6
changelog:
  - Add the proto files directly instead of attempting to build a separate
    tarball. Also remove last traces of printproto-1.0.3.tar.gz


