# changelog

author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.13.el6]
changelog:
  - [scsi] hpsa: fix lost command problem (Tomas Henzl) [700430]
  - [scsi] cciss: fix lost command problem (Tomas Henzl) [700430]
  - [scsi] ibft: fix oops during boot (Mike Christie) [698737]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.14.el6]
changelog:
  - [scsi] hpsa: fix reading a write only register causes a hang (Rob Evers) [703262]
  - [scsi] mpt2sas: remove the use of writeq, since writeq is not atomic (Tomas Henzl) [701947]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.10.1.el6]
changelog:
  - [virt] ksm: fix race between ksmd and exiting task (Andrea Arcangeli) [710340 710341] {CVE-2011-2183}
  - [kernel] proc: signedness issue in next_pidmap() (Jerome Marchand) [697824 697825] {CVE-2011-1593}
  - [net] bluetooth: Prevent buffer overflow in l2cap config request (Jiri Pirko) [716809 716810] {CVE-2011-2497}
  - [fs] NLM: Don't hang forever on NLM unlock requests (Jeff Layton) [709548 709549] {CVE-2011-2491}
  - [fs] NFS: Fix NFSv3 exclusive open semantics (Jeff Layton) [719925 694210]
  - [fs] GFS2: Incorrect inode state during deallocation (Steven Whitehouse) [714982 712139]
  - [virt] KVM: Fix register corruption in pvclock_scale_delta (Avi Kivity) [719910 712102]
  - [netdrv] ehea: Fix memory hotplug oops (Steve Best) [720914 702036]
  - [net] Fix memory leak/corruption on VLAN GRO_DROP (Herbert Xu) [695175 695176] {CVE-2011-1576}
  - [md] Fix resync hang after surprise removal (James Paradis) [719928 707268]
  - GFS2: make sure fallocate bytes is a multiple of blksize (Benjamin Marzinski) [720863 695763] {CVE-2011-2689}
  - [kernel] Prevent rt_sigqueueinfo and rt_tgsigqueueinfo from spoofing the signal code (Oleg Nesterov) [715521 690033] {CVE-2011-1182}
  - [redhat] config: enable parallel port printer support (Aristeu Rozanski) [713827 635968]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.11.1.el6]
changelog:
  - [mm] hold the page lock until after set_page_stable_node (Andrea Arcangeli) [726095 683658]
  - [netdrv] be2net: remove certain cmd failure logging (Ivan Vecera) [725329 719304]
  - [net] nl80211: missing check for valid SSID size in scan operation (Stanislaw Gruszka) [718157 718158] {CVE-2011-2517}
  - [net] bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace. (Thomas Graf) [703022 703023] {CVE-2011-2492}
  - [net] inet_diag: fix validation of user data in inet_diag_bc_audit() (Thomas Graf) [714540 714541] {CVE-2011-2213}
  - [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716829 716830] {CVE-2011-2495}
  - [fs] validate size of EFI GUID partition entries (Anton Arapov) [703029 703030] {CVE-2011-1776}
  - [fs] ext4: Fix max file size and logical block counting of extent format file (Lukas Czerner) [722568 722569] {CVE-2011-2695}
  - [virt] kvm: Disable device assignment without interrupt remapping (Alex Williamson) [716306 711504] {CVE-2011-1898}
  - [virt] iommu-api: Extension to check for interrupt remapping (Alex Williamson) [716306 711504] {CVE-2011-1898}
  - [netdrv] r8169: fix Rx checksum offloading bugs (Ivan Vecera) [723807 635596]
  - [netdrv] be2net: changes for BE3 native mode support (Ivan Vecera) [723820 695231]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.16.1.el6]
changelog:
  - [net] br_multicast: Ensure to initialize BR_INPUT_SKB_CB(skb)->mrouters_only. (Frantisek Hrbata) [739477 738110]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.17.1.el6]
changelog:
  - Revert: [net] ipv6: make fragment identifications less predictable (Jiri Pirko) [723432 723433] {CVE-2011-2699}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.1.1.el6]
changelog:
  - [net] dccp: handle invalid feature options length (Jiri Pirko) [703012 703013] {CVE-2011-1770}
  - [fs] cifs: check for private_data before trying to put it (Jeff Layton) [703017 702642] {CVE-2011-1771}
  - [net] can: add missing socket check in can/raw and can/bcm release (Jiri Pirko) [698482 698483] {CVE-2011-1748 CVE-2011-1598}
  - [netdrv] ixgbe: do not clear FCoE DDP error status for received ABTS (Andy Gospodarek) [704011 695966]
  - [netdrv] ixgbe: DCB remove ixgbe_fcoe_getapp routine (Andy Gospodarek) [704002 694358]
  - [fs] setup_arg_pages: diagnose excessive argument size (Oleg Nesterov) [645228 645229] {CVE-2010-3858}
  - [scsi] bfa: change tech-preview to cover all cases (Rob Evers) [704014 703251]
  - [scsi] bfa: driver version update (Rob Evers) [704282 703265]
  - [scsi] bfa: kdump fix (Rob Evers) [704282 703265]
  - [scsi] bfa: firmware download fix (Rob Evers) [704282 703265]
  - [netdrv] bna: fix memory leak during RX path cleanup (Ivan Vecera) [704000 698625]
  - [netdrv] bna: fix for clean fw re-initialization (Ivan Vecera) [704000 698625]
  - [scsi] ipr: improve interrupt service routine performance (Steve Best) [704009 696754]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.2.1.el6]
changelog:
  - [kernel] lib/vsprintf.c: add %pU to print UUID/GUIDs (Frantisek Hrbata) [704280 700299]
  - [scsi] megaraid_sas: Driver only report tape drive, JBOD and logic drives (Tomas Henzl) [704601 619422]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.19.1.el6]
changelog:
  - [scsi] scan: don't fail scans when host is in recovery (Mike Christie) [734774 713682]
  - [netdrv] b43: allocate receive buffers big enough for max frame len + offset (RuiRui Yang) [738204 738205] {CVE-2011-3359}
  - [fs] fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message (RuiRui Yang) [736764 736765] {CVE-2011-3353}
  - [fs] cifs: fix possible memory corruption in CIFSFindNext (Jeff Layton) [737482 730354] {CVE-2011-3191}
  - [kernel] perf tools: do not look at ./config for configuration (Jiri Benc) [730203 730204] {CVE-2011-2905}
  - [x86] mm: Fix pgd_lock deadlock (Andrew Jones) [737570 691310]
  - [mm] pdpte registers are not flushed when PGD entry is changed in x86 PAE mode (Andrew Jones) [737570 691310]
  - [mm] Revert "fix pgd_lock deadlock" (Andrew Jones) [737570 691310]
  - [fs] corrupted GUID partition tables can cause kernel oops (Jerome Marchand) [695981 695982] {CVE-2011-1577}
  - [net] Compute protocol sequence numbers and fragment IDs using MD5. (Jiri Pirko) [732664 732665] {CVE-2011-3188}
  - [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732664 732665] {CVE-2011-3188}
  - [fs] SUNRPC: Fix use of static variable in rpcb_getport_async (Steve Dickson) [740230 723650]
  - [fs] NFSv4.1: update nfs4_fattr_bitmap_maxsz (Steve Dickson) [740230 723650]
  - [fs] SUNRPC: Fix a race between work-queue and rpc_killall_tasks (Steve Dickson) [740230 723650]
  - [fs] SUNRPC: Ensure we always run the tk_callback before tk_action (Steve Dickson) [740230 723650]
  - [misc] enclosure: fix error path to actually return ERR_PTR() on error (Tomas Henzl) [741166 713730]
  - [virt] KVM: make guest mode entry to be rcu quiescent state (Gleb Natapov) [740352 712653]
  - [virt] rcu: provide rcu_virt_note_context_switch() function (Gleb Natapov) [740352 712653]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.20.1.el6]
changelog:
  - [net] vlan: fix panic when handling priority tagged frames (Andy Gospodarek) [742849 714936] {CVE-2011-3593}
  - [netdrv] igb: fix WOL on second port of i350 device (Frantisek Hrbata) [743807 718293]
  - [kernel] fix taskstats io infoleak (Jerome Marchand) [716847 716848] {CVE-2011-2494}
  - [tpm] Zero buffer after copying to userspace (Jiri Benc) [732632 732633] {CVE-2011-1162}
  - [scsi] Revert megaraid_sas: Driver only report tape drive, JBOD and logic drives (Tomas Henzl) [741167 736667]
  - [x86] acpi: Prevent acpiphp from deadlocking on PCI-to-PCI bridge remove (Prarit Bhargava) [745557 732706]
  - [net] sctp: deal with multiple COOKIE_ECHO chunks (Frantisek Hrbata) [743510 729220]
  - [scsi] iscsi_tcp: fix locking around iscsi sk user data (Mike Christie) [741704 647268]
  - [kernel] first time swap use results in heavy swapping (Hendrik Brueckner) [747868 722461]
  - [scsi] Reduce error recovery time by reducing use of TURs (Mike Christie) [744811 691945]
  - [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738301 692709] {CVE-2011-3363}
  - [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738301 692709] {CVE-2011-3363}
  - [net] ipv6: fix NULL dereference in udp6_ufo_fragment() (Jason Wang) [748808 740465]
  - [net] ipv6: make fragment identifications less predictable (Jiri Pirko) [723432 723433] {CVE-2011-2699}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.5.1.el6]
changelog:
  - [kernel] cgroupfs: use init_cred when populating new cgroupfs mount (Eric Paris) [713135 700538]
  - [netdrv] ixgbe: adding FdirMode module option (Andy Gospodarek) [711550 707287]
  - [crypto] testmgr: add xts-aes-256 self-test (Jarod Wilson) [711548 706167]
  - [fs] ext3: Fix lost extented attributes for inode with ino == 11 (Eric Sandeen) [712413 662666]
  - [mm] Prevent Disk IO throughput degradation due to memory allocation stalls (Larry Woodman) [711540 679526]
  - [net] sock: adjust prot->obj_size always (Jiri Pirko) [709381 704231]
  - [fs] GFS2: resource group bitmap corruption resulting in panics and withdraws (Robert S Peterson) [711528 702057]
  - [x86] kprobes: Disable irqs during optimized callback (Jiri Olsa) [711545 699865]
  - [mm] slab, kmemleak: pass the correct pointer to kmemleak_erase() (Steve Best) [712414 698023]
  - [net] fix netns vs proto registration ordering (Wade Mealing) [702305 702306] {CVE-2011-1767 CVE-2011-1768}
  - [ppc] Fix oops if scan_dispatch_log is called too early (Steve Best) [711524 696777]
  - [virt] i8259: initialize isr_ack (Avi Kivity) [711520 670765]
  - [virt] VMX: Save and restore tr selector across mode switches (Gleb Natapov) [711535 693894]
  - [virt] VMX: update live TR selector if it changes in real mode (Gleb Natapov) [711535 693894]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.6.1.el6]
changelog:
  - [audit] ia32entry.S sign extend error codes when calling 64 bit code (Eric Paris) [713831 703935]
  - [audit] push audit success and retcode into arch ptrace.h (Eric Paris) [713831 703935]
  - [x86] intel-iommu: Flush unmaps at domain_exit (Alex Williamson) [713458 705441]
  - [x86] intel-iommu: Only unlink device domains from iommu (Alex Williamson) [713458 705441]
  - [virt] x86: Mask out unsupported CPUID features if running on xen (Igor Mammedov) [711546 703055]
  - [block] fix accounting bug on cross partition merges (Jerome Marchand) [682989 669363]
  - [net] vlan: remove multiqueue ability from vlan device (Neil Horman) [713494 703245]
  - [net] Fix netif_set_real_num_tx_queues (Neil Horman) [713492 702742]
  - [scsi] mpt2sas: move event handling of MPT2SAS_TURN_ON_FAULT_LED in process context (Tomas Henzl) [714190 701951]
  - [mm] thp: simple fix for /dev/zero THP mprotect bug (Andrea Arcangeli) [714762 690444]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.11.1.el6]
changelog:
  - [netdrv] igb: reset PHY after recovering from PHY power down (Frantisek Hrbata) [789371 737714]
  - [drm] Ivybridge force wake fixes (Dave Airlie) [790007 786272]
  - [fs] xfs: fix inode lookup race (Dave Chinner) [804961 796277]
  - [kernel] regset: Return -EFAULT, not -EIO, on host-side memory fault (Jerome Marchand) [799212 799213] {CVE-2012-1097}
  - [kernel] regset: Prevent null pointer reference on readonly regsets (Jerome Marchand) [799212 799213] {CVE-2012-1097}
  - [block] Fix io_context leak after failure of clone with CLONE_IO (Vivek Goyal) [796846 791125] {CVE-2012-0879}
  - [block] Fix io_context leak after clone with CLONE_IO (Vivek Goyal) [796846 791125] {CVE-2012-0879}
  - [fs] cifs: fix dentry refcount leak when opening a FIFO on lookup (Sachin Prabhu) [798298 781893] {CVE-2012-1090}
  - [fs] NFSv4: include bitmap in nfsv4 get acl data (Sachin Prabhu) [753231 753232] {CVE-2011-4131}
  - [mm] fix nrpages assertion (Josef Bacik) [797182 766861]
  - [mm] Eliminate possible panic in page compaction code (Larry Woodman) [802430 755885]
  - [mm] Prevent panic on 2-node x3850 X5 w/2 MAX5 memory drawers panics while running certification tests caused by page list corruption (Larry Woodman) [802430 755885]
  - [sched] Fix cgroup movement of waking process (Larry Woodman) [795326 773517]
  - [sched] Fix cgroup movement of forking process (Larry Woodman) [795326 773517]
  - [sched] Fix cgroup movement of newly created process (Larry Woodman) [795326 773517]
  - [sched] Fix ->min_vruntime calculation in dequeue_entity() (Larry Woodman) [795326 773517]
  - [sched] cgroup: Fixup broken cgroup movement (Larry Woodman) [795326 773517]
  - [kernel] Prevent system deadlock when moving tasks between cgroups (Larry Woodman) [789060 773522]
  - [kernel] sched: fix {s,u}time values decrease (Stanislaw Gruszka) [789061 748559]
  - [mm] mempolicy.c: refix mbind_range() vma issue (Motohiro Kosaki) [802379 727700]
  - [mm] mempolicy.c: fix pgoff in mbind vma merge (Motohiro Kosaki) [802379 727700]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.12.1.el6]
changelog:
  - [net] net_sched: qdisc_alloc_handle() can be too slow (Jiri Pirko) [805458 785891]
  - [fs] procfs: add hidepid= and gid= mount options (Jerome Marchand) [770651 770652]
  - [fs] procfs: parse mount options (Jerome Marchand) [770651 770652]
  - [fs] fuse: add O_DIRECT support (Josef Bacik) [800552 753798]
  - [kernel] sysctl: restrict write access to dmesg_restrict (Phillip Lougher) [749248 749251]
  - [block] dm io: fix discard support (Mike Snitzer) [799943 758404]
  - [net] netlink: wrong size was calculated for vfinfo list blob (Andy Gospodarek) [790338 772136]
  - [netdrv] mlx4_en: fix endianness with blue frame support (Steve Best) [789911 750166]
  - [usb] Fix deadlock in hid_reset when Dell iDRAC is reset (Shyam Iyer) [797205 782374]
  - [virt] vmxnet3: Cap the length of the pskb_may_pull on transmit (bz 790673) (Neil Horman) [801723 790673]
  - [scsi] megaraid_sas: Fix instance access in megasas_reset_timer (Tomas Henzl) [790341 759318]
  - [netdrv] macvtap: Fix the minor device number allocation (Steve Best) [796828 786518]
  - [net] tcp: bind() fix autoselection to share ports (Flavio Leitner) [787764 784671]
  - [fs] cifs: change oplock break slow work to very slow work (Jeff Layton) [789373 772874]
  - [net] sunrpc: remove xpt_pool (J. Bruce Fields) [795338 753301]
  - [net] Potential null skb->dev dereference (Flavio Leitner) [795335 769590]
  - [net] pkt_sched: Fix sch_sfq vs tcf_bind_filter oops (Jiri Pirko) [786873 667925]
  - [net] mac80211: cancel auth retries when deauthenticating (John Linville) [797241 754356]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.13.1.el6]
changelog:
  - Revert: [fs] NFSv4: include bitmap in nfsv4 get acl data (Sachin Prabhu) [753231 753232] {CVE-2011-4131}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.15.1.el6]
changelog:
  - [net] SUNRPC: We must not use list_for_each_entry_safe() in rpc_wake_up() (Steve Dickson) [811299 809928]
  - [char] ipmi: Increase KCS timeouts (Matthew Garrett) [806906 803378]
  - [kernel] sched: Fix ancient race in do_exit() (Frantisek Hrbata) [805457 784758]
  - [scsi] sd: Unmap discard alignment needs to be converted to bytes (Mike Snitzer) [810322 805519]
  - [scsi] sd: Fix VPD buffer allocations (Mike Snitzer) [810322 805519]
  - [x86] Ivy Bridge kernel rdrand support (Jay Fenlason) [800268 696442]
  - [scsi] fix system lock up from scsi error flood (Frantisek Hrbata) [809378 800555]
  - [sound] ALSA: pcm midlevel code - add time check for (Jaroslav Kysela) [801329 798984]
  - [pci] Add pcie_hp=nomsi to disable MSI/MSI-X for pciehp driver (hiro muneda) [807426 728852]
  - [sound] ALSA: enable OSS emulation layer for PCM and mixer (Jaroslav Kysela) [812960 657291]
  - [scsi] qla4xxx: Fixed BFS with sendtargets as boot index (Chad Dupuis) [803881 722297]
  - [fs] nfs: Additional readdir cookie loop information (Steve Dickson) [811135 770250]
  - [fs] NFS: Fix spurious readdir cookie loop messages (Steve Dickson) [811135 770250]
  - [x86] powernow-k8: Fix indexing issue (Frank Arnold) [809391 781566]
  - [x86] powernow-k8: Avoid Pstate MSR accesses on systems supporting CPB (Frank Arnold) [809391 781566]
  - [redhat] spec: Add python-perf-debuginfo subpackage (Josh Boyer) [806859 806859]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-220.el6]
changelog:
  - [drm] i915: fix unmap race condition introduced with VT-d fix (Dave Airlie) [750583]
  - [scsi] iscsi: revert lockless queuecommand dispatch (Rob Evers) [751426]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.1.1.el6]
changelog:
  - [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752379 752380] {CVE-2011-4127}
  - [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752379 752380] {CVE-2011-4127}
  - [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752379 752380] {CVE-2011-4127}
  - [x86] amd: Fix align_va_addr kernel parameter (Frank Arnold) [758028 753237]
  - [md] RAID1: Do not call md_raid1_unplug_device while holding spinlock (Jonathan E Brassow) [755545 752528]
  - [pci] intel-iommu: Default to non-coherent for domains unattached to iommus (Don Dutile) [757671 746484]
  - [x86] initialize min_delta_ns in one_hpet_msi_clockevent() (Prarit Bhargava) [756426 728315]
  - [x86] Update hpet_next_event() (Prarit Bhargava) [756426 728315]
  - [kernel] sched: Use resched IPI to kick off the nohz idle balance (Vivek Goyal) [750459 717179]
  - [drm] i915: enable ring freq scaling, RC6 and graphics turbo on Ivy Bridge (Prarit Bhargava) [758513 752163]
  - [drm] i915: load a ring frequency scaling table (Prarit Bhargava) [758513 752163]
  - [x86] cpufreq: expose a cpufreq_quick_get_max routine (Prarit Bhargava) [758513 752163]
  - [sched] Cleanup/optimize clock updates (Larry Woodman) [751403 750237]
  - [sched] fix skip_clock_update optimization (Larry Woodman) [751403 750237]
  - [block] virtio-blk: Use ida to allocate disk index (Michael S. Tsirkin) [756427 692767]
  - [virt] virtio_blk: Replace cryptic number with the macro (Michael S. Tsirkin) [756427 692767]
  - [kernel] ida: simplified functions for id allocation (Michael S. Tsirkin) [756427 692767]
  - [virt] revert virtio-blk: Use ida to allocate disk index (Aristeu Rozanski) [756427 692767]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.21.1.el6]
changelog:
  - [security] fix compile error in commoncap.c (Eric Paris) [806725 806726] {CVE-2012-2123}
  - [security] fcaps: clear the same personality flags as suid when fcaps are used (Eric Paris) [806725 806726] {CVE-2012-2123}
  - [net] rds: fix rds-ping inducing kernel panic (Jay Fenlason) [822757 803936] {CVE-2012-2372}
  - [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816292 814504] {CVE-2012-2136}
  - [virt] kvm: Fix buffer overflow in kvm_set_irq() (Avi Kivity) [816154 816155] {CVE-2012-2137}
  - [drm] integer overflow in drm_mode_dirtyfb_ioctl() (Dave Airlie) [773249 773250] {CVE-2012-0044}
  - [net] netfilter: Fix ip_route_me_harder triggering ip_rt_bug (Jiri Benc) [824429 812108]
  - [net] netfilter/tproxy: do not assign timewait sockets to skb->sk (Jiri Benc) [824429 812108]
  - [virt] xenpv: avoid paravirt __pmd in read_pmd_atomic (Andrew Jones) [823903 822697]
  - [infiniband] mlx4: fix RoCE oops (Doug Ledford) [799946 749059]
  - [mm] read_pmd_atomic: fix pmd_populate SMP race condition (Andrea Arcangeli) [822824 820762] {CVE-2012-2373}
  - [infiniband] mlx4: check return code and bail on error (Doug Ledford) [799946 749059]
  - [infiniband] mlx4: use locking when walking netdev list (Doug Ledford) [799946 749059]
  - [mm] thp: fix pmd_bad() triggering in code paths holding mmap_sem read mode (Andrea Arcangeli) [803808 800328] {CVE-2012-1179}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.3.1.el6]
changelog:
  - [kernel] Remove "WARNING: at kernel/sched.c:5915" (Larry Woodman) [768288 766051]
  - [x86] kernel: Fix memory corruption in module load (Prarit Bhargava) [769595 767140]
  - [kernel] Reset clocksource watchdog after sysrq-t (Prarit Bhargava) [755867 742890]
  - [x86] AMD: Make tsc=reliable override boot time stability checks (Prarit Bhargava) [755867 742890]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.4.1.el6]
changelog:
  - [fs] Revert "proc: enable writing to /proc/pid/mem" (Johannes Weiner) [782649 782650] {CVE-2012-0056}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.5.1.el6]
changelog:
  - [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772870 772871] {CVE-2012-0207}
  - [fs] xfs: validate acl count (Eric Sandeen) [773282 773283] {CVE-2012-0038}
  - [fs] Fix sendfile write-side file position (Steven Whitehouse) [771870 770023]
  - [virt] kvm: x86: fix missing checks in syscall emulation (Marcelo Tosatti) [773390 773391] {CVE-2012-0045}
  - [virt] kvm: x86: extend "struct x86_emulate_ops" with "get_cpuid" (Marcelo Tosatti) [773390 773391] {CVE-2012-0045}
  - [fs] nfs: when attempting to open a directory, fall back on normal lookup (Jeff Layton) [771981 755380]
  - [kernel] crypto: ghash - Avoid null pointer dereference if no key is set (Jiri Benc) [749481 749482] {CVE-2011-4081}
  - [fs] jbd2: validate sb->s_first in journal_get_superblock() (Eryu Guan) [753344 693981] {CVE-2011-4132}
  - [net] fix unsafe pointer access in sendmmsg (Jiri Benc) [761668 760798] {CVE-2011-4594}
  - [scsi] increase qla2xxx firmware ready time-out (Mark Goodwin) [781971 731917]
  - [perf] powerpc: Handle events that raise an exception without overflowing (Steve Best) [767917 755737] {CVE-2011-4611}
  - [sched] x86: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [781974 765720]
  - [virt] x86: Prevent starting PIT timers in the absence of irqchip support (Marcelo Tosatti) [769634 769550] {CVE-2011-4622}
  - [virt] vmxnet3: revert hw features change (Neil Horman) [761536 759613]
  - [netdrv] qlge: fix size of external list for TX address descriptors (Steve Best) [783226 772237]
  - [netdrv] e1000e: Avoid wrong check on TX hang (Dean Nelson) [768916 751087]
  - [virt] KVM: Device assignment permission checks (Alex Williamson) [756092 756093] {CVE-2011-4347}
  - [virt] KVM: Remove ability to assign a device without iommu support (Alex Williamson) [756092 756093] {CVE-2011-4347}
  - [virt] kvm: device-assignment: revert Disable the option to skip iommu setup (Alex Williamson) [756092 756093] {CVE-2011-4347}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.6.1.el6]
changelog:
  - [scsi] qla2xxx: Module parameter to control use of async or sync port login (Chad Dupuis) [788003 769007]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.7.1.el6]
changelog:
  - [netdrv] tg3: Fix single-vector MSI-X code (John Feeney) [787162 703555]
  - [mm] export remove_from_page_cache() to modules (Jerome Marchand) [772687 751419]
  - [block] cfq-iosched: fix cfq_cic_link() race confition (Vivek Goyal) [786022 765673]
  - [fs] cifs: lower default wsize when unix extensions are not used (Jeff Layton) [789058 773705]
  - [net] svcrpc: fix double-free on shutdown of nfsd after changing pool mode (J. Bruce Fields) [787580 753030]
  - [net] svcrpc: avoid memory-corruption on pool shutdown (J. Bruce Fields) [787580 753030]
  - [net] svcrpc: destroy server sockets all at once (J. Bruce Fields) [787580 753030]
  - [net] svcrpc: simplify svc_close_all (J. Bruce Fields) [787580 753030]
  - [net] svcrpc: fix list-corrupting race on nfsd shutdown (J. Bruce Fields) [787580 753030]
  - [fs] xfs: Fix missing xfs_iunlock() on error recovery path in xfs_readlink() (Carlos Maiolino) [749161 694702] {CVE-2011-4077}
  - [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749161 694702] {CVE-2011-4077}
  - [x86] hpet: Disable per-cpu hpet timer if ARAT is supported (Prarit Bhargava) [772884 750201]
  - [x86] Improve TSC calibration using a delayed workqueue (Prarit Bhargava) [772884 750201]
  - [kernel] clocksource: Add clocksource_register_hz/khz interface (Prarit Bhargava) [772884 750201]
  - [kernel] clocksource: Provide a generic mult/shift factor calculation (Prarit Bhargava) [772884 750201]
  - [block] cfq-iosched: fix a kbuild regression (Vivek Goyal) [769208 705698]
  - [block] cfq-iosched: rethink seeky detection for SSDs (Vivek Goyal) [769208 705698]
  - [block] cfq-iosched: rework seeky detection (Vivek Goyal) [769208 705698]
  - [block] cfq-iosched: don't regard requests with long distance as close (Vivek Goyal) [769208 705698]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-218.el6]
changelog:
  - [netdrv] benet: remove bogus "unlikely" on vlan check (Ivan Vecera) [736429] {CVE-2011-3347}
  - [netdrv] be2net: non-member vlan pkts not received in promiscous mode (Ivan Vecera) [736429] {CVE-2011-3347}
  - [netdrv] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736429] {CVE-2011-3347}
  - [mm] fix race between mremap and removing migration entry (Andrea Arcangeli) [751084]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-219.el6]
changelog:
  - [kernel] KEYS: Fix a NULL pointer deref in the user-defined key type (David Howells) [751190] {CVE-2011-4110}
  - [scsi] fc class: fix building of Fibre Channel DUP drivers in 6.2 (Mike Christie) [750268]
  - [fs] nfs: don't call __mark_inode_dirty while holding i_lock (Steve Dickson) [747391]
  - [netdrv] vxge: allow rebinding the driver with a different number of SR-IOV VFs (Michal Schmidt) [694742]
  - [netdrv] vxge: fix crash of VF when unloading PF (Michal Schmidt) [694742]
  - [ata] revert libata: remove SCSI host lock (David Milburn) [751426]
  - [crypto] ansi_cprng: enforce key != seed in fips mode (Jarod Wilson) [751198]
  - [net] mac80211: Fix reassociation processing within ESS roaming (John Linville) [750350]
  - [net] nl80211: Allow association to change channels during reassociation (John Linville) [750350]
  - [net] mac80211: let cfg80211 manage auth state (John Linville) [750350]
  - [net] cfg80211: avoid sending spurious deauth to userspace (John Linville) [750350]
  - [net] mac80211: recalculate idle later in MLME (John Linville) [750350]
  - [net] mac80211: avoid spurious deauth frames/messages (John Linville) [750350]
  - [net] cfg80211: Allow reassociation in associated state (John Linville) [750350]
  - [net] cfg80211: remove warning in deauth case (John Linville) [750350]
  - [net] netfilter: fix nf_conntrack refcount leak in l4proto->error() (Thomas Graf) [745472]
  - [scsi] qla2xxx: Remove check for null fcport from host reset handler (Chad Dupuis) [744741]
  - [scsi] qla2xxx: Perform implicit logout during rport tear-down (Chad Dupuis) [744741]
  - [scsi] Revert "qla2xxx: Remove host_lock in queuecommand function" (Chad Dupuis) [744741]
  - [drm] nv50/disp: shutdown display on suspend/hibernate (Ben Skeggs) [740857]
  - [edac] Add sb_edac driver into the Red Hat Building system (Mauro Carvalho Chehab) [647700]
  - [edac] Fix incorrect edac mode reporting in sb_edac (Mauro Carvalho Chehab) [647700]
  - [edac] Add an experimental new driver to support Sandy Bridge CPU's (Mauro Carvalho Chehab) [647700]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-278.el6]
changelog:
  - [kernel] sysctl: silence warning about missing strategy for file-max at boot time (Jeff Layton) [803431]
  - [net] sunrpc: make new tcp_max_slot_table_entries sysctl use CTL_UNNUMBERED (Jeff Layton) [803431]
  - [drm] i915: set AUD_CONFIG N_value_index for DisplayPort (Dave Airlie) [747890]
  - [scsi] scsi_lib: fix scsi_io_completion's SG_IO error propagation (Mike Snitzer) [827163]
  - [fs] nfs: Fix corrupt read data after short READ from server (Sachin Prabhu) [817738]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.1.1.el6]
changelog:
  - [kernel] Prevent keyctl new_session from causing a panic (David Howells) [833433 827424] {CVE-2012-2745}
  - [net] ipv6/netfilter: fix null pointer dereference in nf_ct_frag6_reasm() (Petr Matousek) [833410 833412] {CVE-2012-2744}
  - [fs] nfs: Map minor mismatch error to protocol not support error (Steve Dickson) [832365 796352]
  - [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate() (Lukas Czerner) [833034 830209]
  - [ata] libata: Add 2GB ATA Flash Disk/ADMA428M to DMA blacklist (Prarit Bhargava) [832363 812904]
  - [netdrv] r8169: fix typo in firmware filenames (Ivan Vecera) [832359 829211]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.9.1.el6]
changelog:
  - [md] raid1, raid10: avoid deadlock during resync/recovery. (Dave Wysochanski) [845464 835613]
  - [fs] dlm: fix deadlock between dlm_send and dlm_controld (David Teigland) [849051 824964]
  - [ata] libata: Add space to fix 2GB ATA Flash Disk/ADMA428M blacklist (Prarit Bhargava) [851445 843849]
  - [fs] nfs: nfs_attr_use_mounted_on_file() missing return value (Frantisek Hrbata) [847945 842312]
  - [fs] gfs2: Make gfs2_write_end not dirty the inode with every write (Robert S Peterson) [849551 844814]
  - [net] sched/act_mirred: do not drop packets when fails to mirror it (Jason Wang) [851444 846585]
  - [net] sched: fix race in mirred device removal (Jason Wang) [851444 846585]
  - [net] sched: printk message severity (Jason Wang) [851444 846585]
  - [net] sched: act_mirred cleanup (Jason Wang) [851444 846585]
  - [kernel] sched: Fix signed unsigned comparison in check_preempt_tick() (Frederic Weisbecker) [843102 835797]
  - [netdrv] be2net: reduce gso_max_size setting to account for ethernet header (Ivan Vecera) [842757 834185]
  - [powerpc] Fix wrong divisor in usecs_to_cputime backport (Steve Best) [847727 821374]
  - [fs] procfs: do not confuse jiffies with cputime64_t (Frantisek Hrbata) [847727 821374]
  - [kernel] time: Add nsecs_to_cputime64 interface for asm-generic (Steve Best) [847727 821374]
  - [powerpc] Fix wrong divisor in usecs_to_cputime (Steve Best) [847727 821374]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.10.1.el6]
changelog:
  - [mm] hugetlbfs: close race during teardown of hugetlbfs shared page tables (Rafael Aquini) [857334 856325]
  - [mm] hugetlbfs: Correctly detect if page tables have just been shared (Rafael Aquini) [857334 856325]
  - [kernel] sched: fix divide by zero at {thread_group,task}_times (Stanislaw Gruszka) [856703 843771]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.11.1.el6]
changelog:
  - [net] core: Fix napi_gro_frags vs netpoll path (Amerigo Wang) [857854 845347]
  - [netdrv] benet: disable BH in callers of be_process_mcc() (Amerigo Wang) [857854 845347]
  - [net] bonding: remove IFF_IN_NETPOLL flag (Amerigo Wang) [857854 845347]
  - [mm] fix contig_page_data kABI breakage and related memory corruption (Satoru Moriya) [857012 853007]
  - [net] sctp: backport sctp cache ipv6 source after route lookup (Michele Baldessari) [858284 855759]
  - [net] sctp: backport support of sctp multi-homing ipv6 source address selection (Michele Baldessari) [858284 855759]
  - [net] ipv6: backport RTA_PREFSRC ipv6 source route selection support (Michele Baldessari) [858285 851118]
  - [netdrv] sfc: Fix maximum number of TSO segments and minimum TX queue size (Nikolay Aleksandrov) [845556 845557] {CVE-2012-3412}
  - [s390] zfcp: No automatic port_rescan on events (Hendrik Brueckner) [856316 855131]
  - [fs] xfs: push the AIL from memory reclaim and periodic sync (Dave Chinner) [856686 855139]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.12.1.el6]
changelog:
  - [netdrv] mlx4: check promisc on proper port (Doug Ledford) [858955 854052]
  - [netdrv] mlx4: attach multicast with correct flag (Doug Ledford) [858956 854376]
  - [netdrv] mlx4: remove redundant adding of steering type to gid (Doug Ledford) [859436 854053]
  - [netdrv] Revert: Fix a merge issue (Doug Ledford) [859436 854053]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.13.1.el6]
changelog:
  - [net] sctp: Implement quick failover draft from tsvwg (Neil Horman) [861953 830716]
  - [net] sctp: be more restrictive in transport selection on bundled sacks (Neil Horman) [861953 830716]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.14.1.el6]
changelog:
  - [usb] usbhid: Fix use-after-free in USBHID (James Paradis) [864827 857518]
  - [usb] Add kernel parameter to force io_watchdog for Intel EHCI HCD (James Paradis) [865713 846024]
  - [block] Fix hanging kernel threads in blk_execute_rq() (James Paradis) [865308 855984]
  - [mm] hugetlb: do not use vma_hugecache_offset() for vma_prio_tree_foreach (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [mm] hugepages: fix use after free bug in "quota" handling (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [mm] hugetlb: fix pgoff computation when unmapping page from vma (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [mm] hugetlb: fix ENOSPC returned by handle_mm_fault() (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [fs] gfs2: Write out dirty inode metadata in delayed deletes (Frantisek Hrbata) [859326 748827]
  - [usb] core: Fix device removal race condition (James Paradis) [864821 849188]
  - [mm] x86_32: fix SHLIB_BASE address typo (Aristeu S. Rozanski F) [804955 804956] {CVE-2012-1568}
  - [hid] hidraw: fix window in hidraw_release (Don Zickus) [841824 839973]
  - [hid] hidraw: protect hidraw_disconnect() better (Don Zickus) [841824 839973]
  - [hid] hidraw: remove excessive _EMERG messages from hidraw (Don Zickus) [841824 839973]
  - [hid] hidraw: fix hidraw_disconnect() (Don Zickus) [841824 839973]
  - [hid] fix a NULL pointer dereference in hidraw_write (Don Zickus) [841824 839973]
  - [hid] fix a NULL pointer dereference in hidraw_ioctl (Don Zickus) [841824 839973]
  - [hid] remove BKL from hidraw (Don Zickus) [841824 839973]
  - [mm] x86_32: randomize SHLIB_BASE (Aristeu Rozanski) [804955 804956] {CVE-2012-1568}
  - [block] fix up use after free in __blkdev_get (Jeff Moyer) [853943 847838]
  - [scsi] remove no longer valid BUG_ON in scsi_lld_busy (Jeff Garzik) [860640 842881]
  - [scsi] fix NULL request_queue in scsi_requeue_run_queue() (Jeff Garzik) [860640 842881]
  - [net] svcrpc: fix BUG() in svc_tcp_clear_pages (J. Bruce Fields) [856106 769045]
  - [scsi] lpfc: Fixed SCSI device reset escalation (Rob Evers) [861390 827566]
  - [scsi] lpfc: Fix abort status (Rob Evers) [861390 827566]
  - [kernel] cgroup: add cgroup_root_mutex (Frederic Weisbecker) [858954 844531]
  - [mm] Hold a file reference in madvise_remove (Jerome Marchand) [849738 849739] {CVE-2012-3511}
  - [base] driver-core: fix device_register race (Rob Evers) [860784 833098]
  - [netdrv] e1000e: drop check of RXCW.CW to eliminate link going up and down (Dean Nelson) [857055 847310]
  - [scsi] be2iscsi: Format the MAC_ADDR with sysfs (Rob Evers) [863147 827594]
  - [usb] usbdevfs: Add a USBDEVFS_GET_CAPABILITIES ioctl (Don Zickus) [841667 828271]
  - [fs] udf: fix retun value on error path in udf_load_logicalvol (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Avoid run away loop when partition table length is corrupted (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Use 'ret' instead of abusing 'i' in udf_load_logicalvol() (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [netdrv] bnx2x: Add remote-fault link detection (Michal Schmidt) [852450 814877]
  - [net] sunrpc: svc_xprt sends on closed socket should stop immediately (J. Bruce Fields) [853257 849702]
  - [mm] Never OOM kill tasks outside of memory cgroup when memory.limit_in_bytes is exceeded by a Transparent Huge Page (Larry Woodman) [860942 811255]
  - [powerpc] pseries: Support lower minimum entitlement for virtual processors (Steve Best) [860165 822651]
  - [usbhid] hiddev: Consolidate device existence checks in hiddev_ioctl (Don Zickus) [841824 839973]
  - [usbhid] hiddev: Fix race between disconnect and hiddev_ioctl (Don Zickus) [841824 839973]
  - [usbhid] hiddev: protect against disconnect/NULL-dereference race (Don Zickus) [841824 839973]
  - [crypto] algapi: Move larval completion into algboss (Herbert Xu) [854476 832135]
  - [fs] xfs: disable xfsaild idle mode (Brian Foster) [860787 813137]
  - [fs] xfs: fix the logspace waiting algorithm (Brian Foster) [860787 813137]
  - [fs] xfs: add AIL pushing tracepoints (Brian Foster) [860787 813137]
  - [fs] xfs: force the log if we encounter pinned buffers in .iop_pushbuf (Brian Foster) [860787 813137]
  - [fs] xfs: do not update xa_last_pushed_lsn for locked items (Brian Foster) [860787 813137]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.17.1.el6]
changelog:
  - [mm] Prevent kernel panic in NUMA related system calls after memory hot-add (Larry Woodman) [875382 870350] {CVE-2012-5517}
  - [md] Don't truncate size at 4TB for RAID0 and Linear (Jes Sorensen) [866470 865637]
  - [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Lukas Czerner) [809690 809691] {CVE-2012-2100}
  - [fs] ext4: fix undefined behavior in ext4_fill_flex_info() (Lukas Czerner) [809690 809691] {CVE-2012-2100}
  - [kernel] sched_rt: Ignore RT queue throttling if idle task has RT policy (Igor Mammedov) [853950 843541]
  - [kernel] sched: Create special class for stop/migrate work (Igor Mammedov) [853950 843541]
  - [net] ipv6: fix overlap check for fragments (Amerigo Wang) [874550 819952] {CVE-2012-4444}
  - [net] ipv6: discard overlapping fragment (Jiri Pirko) [874550 819952] {CVE-2012-4444}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.18.1.el6]
changelog:
  - [scsi] sd: fix crash when UA received on DIF enabled device (Ewan Milne) [876487 865682]
  - [mm] hugetlb: fix non-atomic enqueue of huge page (Rafael Aquini) [876101 869750]
  - [x86] amd_iommu: attach device fails on the last pci device (Don Dutile) [876493 861164]
  - [net] nfs: Fix buffer overflow checking in __nfs4_get_acl_uncached (Frantisek Hrbata) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Fix the acl cache size calculation (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Fix range checking in __nfs4_get_acl_uncached and __nfs4_proc_set_acl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: nfs_getaclargs.acl_len is a size_t (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Don't use private xdr_stream fields in decode_getacl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Fix pointer arithmetic in decode_getacl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Simplify the GETATTR attribute length calculation (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: Add the helper xdr_stream_pos (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: Don't decode beyond the end of the RPC reply message (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: Clean up xdr_set_iov() (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: xdr_read_pages needs to clear xdr->page_ptr (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [fs] nfs: Avoid beyond bounds copy while caching ACL (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [fs] nfs: Avoid reading past buffer when calling GETACL (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [scsi] ibmvfc: Fix double completion on abort timeout (Steve Best) [876088 865115]
  - [net] core: allocate skbs on local node (Andy Gospodarek) [876491 843163]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.19.1.el6]
changelog:
  - [drm] i915: don't clobber the pipe param in sanitize_modesetting (Frantisek Hrbata) [876549 857792]
  - [drm] i915: Sanitize BIOS debugging bits from PIPECONF (Frantisek Hrbata) [876549 857792]
  - [net] fix divide by zero in tcp algorithm illinois (Flavio Leitner) [871920 866514] {CVE-2012-4565}
  - [fs] xfs: fix reading of wrapped log data (Dave Chinner) [876499 874322]
  - [x86] mm: fix signedness issue in mmap_rnd() (Petr Matousek) [876496 875036]
  - [net] WARN if struct ip_options was allocated directly by kmalloc (Jiri Pirko) [877950 872799]
  - [fs] block_dev: Fix crash when block device is read and block size is changed at the same time (Frantisek Hrbata) [864826 855906]
  - [mm] tracing: Move include of trace/events/kmem.h out of header into slab.c (Jeff Moyer) [864826 855906]
  - [mm] slab: Move kmalloc tracepoint out of inline code (Jeff Moyer) [864826 855906]
  - [netdrv] bnx2x: organize BDs calculation for stop/resume (Frantisek Hrbata) [874022 819842]
  - [netdrv] bnx2x: fix panic when TX ring is full (Michal Schmidt) [874022 819842]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.2.1.el6]
changelog:
  - [net] bonding: Fix up refcounting issues with bond/vlan config (Neil Horman) [837843 836164]
  - [net] bonding: Always add vid to new slave group (Neil Horman) [837227 834764]
  - [net] bonding: fix regression on vlan module removal (Neil Horman) [837218 823822]
  - [kernel] futex: Fix uninterruptible loop due to gate_area (Jerome Marchand) [836904 834038]
  - [kernel] futex: Fix regression with read only mappings (Jerome Marchand) [836904 834038]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.20.1.el6]
changelog:
  - [scsi] hpsa: Use LUN reset instead of target reset (Tomas Henzl) [884422 875091]
  - [char] tty: Fix possible race in n_tty_read() (Stanislaw Gruszka) [891580 765665]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.21.1.el6]
changelog:
  - [scsi] mpt2sas: fix for driver fails EEH recovery from injected pci bus error (Tomas Henzl) [888818 829149]
  - [net] bonding: Bonding driver does not consider the gso_max_size setting of slave devices (Ivan Vecera) [886618 883643]
  - [netdrv] tg3: Do not set TSS for 5719 and 5720 (John Feeney) [888215 823371]
  - [kernel] kmod: make __request_module() killable (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] kmod: introduce call_modprobe() helper (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] usermodehelper: implement UMH_KILLABLE (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] usermodehelper: introduce umh_complete(sub_info) (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] call_usermodehelper: simplify/fix UMH_NO_WAIT case (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [kernel] wait_for_helper: SIGCHLD from user-space can lead to use-after-free (Oleg Nesterov) [858755 819529] {CVE-2012-4398}
  - [net] sunrpc: Ensure that rpc_release_resources_task() can be called twice (Jeff Layton) [880928 878204]
  - [scsi] qla2xxx: Don't toggle RISC interrupt bits after IRQ lines are attached. (Chad Dupuis) [886760 826565]
  - [kernel] rcu: Remove function versions of __kfree_rcu and offset (Doug Ledford) [880085 873949]
  - [kernel] rcu: define __rcu address space modifier for sparse (Doug Ledford) [880085 873949]
  - [kernel] rcu: Add rcu_access_pointer and rcu_dereference_protected (Doug Ledford) [880085 873949]
  - [kernel] rcu: Add lockdep checking to rhel (Doug Ledford) [880085 873949]
  - [kernel] rcu: Make __kfree_rcu() less dependent on compiler choices (Doug Ledford) [880085 873949]
  - [kernel] rcu: introduce kfree_rcu() (Doug Ledford) [880085 873949]
  - [net] rcu: add __rcu API for later sparse checking (Doug Ledford) [880085 873949]
  - [infiniband] ipoib: Fix AB-BA deadlock when deleting neighbours (Doug Ledford) [880085 873949]
  - [infiniband] ipoib: Fix memory leak in the neigh table deletion flow (Doug Ledford) [880085 873949]
  - [infiniband] ipoib: Fix RCU pointer dereference of wrong object (Doug Ledford) [880085 873949]
  - [misc] Make rcu_dereference_bh work (Doug Ledford) [880085 873949]
  - [infiniband] ipoib: Use a private hash table for path lookup in xmit path (Doug Ledford) [880085 873949]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.22.1.el6]
changelog:
  - [virt] kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek) [862903 862904] {CVE-2012-4461}
  - [fs] fuse: optimize __fuse_direct_io() (Brian Foster) [865305 858850]
  - [fs] fuse: optimize fuse_get_user_pages() (Brian Foster) [865305 858850]
  - [fs] fuse: use get_user_pages_fast() (Brian Foster) [865305 858850]
  - [fs] fuse: pass iov[] to fuse_get_user_pages() (Brian Foster) [865305 858850]
  - [fs] mm: minor cleanup of iov_iter_single_seg_count() (Brian Foster) [865305 858850]
  - [fs] fuse: use req->page_descs[] for argpages cases (Brian Foster) [865305 858850]
  - [fs] fuse: add per-page descriptor <offset, length> to fuse_req (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_do_ioctl() (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_perform_write() (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_readpages() (Brian Foster) [865305 858850]
  - [fs] fuse: categorize fuse_get_req() (Brian Foster) [865305 858850]
  - [fs] fuse: general infrastructure for pages[] of variable size (Brian Foster) [865305 858850]
  - [fs] exec: do not leave bprm->interp on stack (Josh Poimboeuf) [880145 880146] {CVE-2012-4530}
  - [fs] exec: use -ELOOP for max recursion depth (Josh Poimboeuf) [880145 880146] {CVE-2012-4530}
  - [scsi] have scsi_internal_device_unblock take new state (Frantisek Hrbata) [878774 854140]
  - [scsi] add new SDEV_TRANSPORT_OFFLINE state (Chris Leech) [878774 854140]
  - [kernel] cpu: fix cpu_chain section mismatch (Frederic Weisbecker) [876090 852148]
  - [kernel] sched: Don't modify cpusets during suspend/resume (Frederic Weisbecker) [876090 852148]
  - [kernel] sched, cpuset: Drop __cpuexit from cpu hotplug callbacks (Frederic Weisbecker) [876090 852148]
  - [kernel] sched: adjust when cpu_active and cpuset configurations are updated during cpu on/offlining (Frantisek Hrbata) [876090 852148]
  - [kernel] cpu: return better errno on cpu hotplug failure (Frederic Weisbecker) [876090 852148]
  - [kernel] cpu: introduce cpu_notify(), __cpu_notify(), cpu_notify_nofail() (Frederic Weisbecker) [876090 852148]
  - [fs] nfs: Properly handle the case where the delegation is revoked (Steve Dickson) [846840 842435]
  - [fs] nfs: Move cl_delegations to the nfs_server struct (Steve Dickson) [846840 842435]
  - [fs] nfs: Introduce nfs_detach_delegations() (Steve Dickson) [846840 842435]
  - [fs] nfs: Fix a number of RCU issues in the NFSv4 delegation code (Steve Dickson) [846840 842435]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.22.1.el6]
changelog:
  - [virt] kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek) [862903 862904] {CVE-2012-4461}
  - [fs] fuse: optimize __fuse_direct_io() (Brian Foster) [865305 858850]
  - [fs] fuse: optimize fuse_get_user_pages() (Brian Foster) [865305 858850]
  - [fs] fuse: use get_user_pages_fast() (Brian Foster) [865305 858850]
  - [fs] fuse: pass iov[] to fuse_get_user_pages() (Brian Foster) [865305 858850]
  - [fs] mm: minor cleanup of iov_iter_single_seg_count() (Brian Foster) [865305 858850]
  - [fs] fuse: use req->page_descs[] for argpages cases (Brian Foster) [865305 858850]
  - [fs] fuse: add per-page descriptor <offset, length> to fuse_req (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_do_ioctl() (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_perform_write() (Brian Foster) [865305 858850]
  - [fs] fuse: rework fuse_readpages() (Brian Foster) [865305 858850]
  - [fs] fuse: categorize fuse_get_req() (Brian Foster) [865305 858850]
  - [fs] fuse: general infrastructure for pages[] of variable size (Brian Foster) [865305 858850]
  - [fs] exec: do not leave bprm->interp on stack (Josh Poimboeuf) [880145 880146] {CVE-2012-4530}
  - [fs] exec: use -ELOOP for max recursion depth (Josh Poimboeuf) [880145 880146] {CVE-2012-4530}
  - [scsi] have scsi_internal_device_unblock take new state (Frantisek Hrbata) [878774 854140]
  - [scsi] add new SDEV_TRANSPORT_OFFLINE state (Chris Leech) [878774 854140]
  - [kernel] cpu: fix cpu_chain section mismatch (Frederic Weisbecker) [876090 852148]
  - [kernel] sched: Don't modify cpusets during suspend/resume (Frederic Weisbecker) [876090 852148]
  - [kernel] sched, cpuset: Drop __cpuexit from cpu hotplug callbacks (Frederic Weisbecker) [876090 852148]
  - [kernel] sched: adjust when cpu_active and cpuset configurations are updated during cpu on/offlining (Frantisek Hrbata) [876090 852148]
  - [kernel] cpu: return better errno on cpu hotplug failure (Frederic Weisbecker) [876090 852148]
  - [kernel] cpu: introduce cpu_notify(), __cpu_notify(), cpu_notify_nofail() (Frederic Weisbecker) [876090 852148]
  - [fs] nfs: Properly handle the case where the delegation is revoked (Steve Dickson) [846840 842435]
  - [fs] nfs: Move cl_delegations to the nfs_server struct (Frantisek Hrbata) [846840 842435]
  - [fs] nfs: Introduce nfs_detach_delegations() (Steve Dickson) [846840 842435]
  - [fs] nfs: Fix a number of RCU issues in the NFSv4 delegation code (Steve Dickson) [846840 842435]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.23.1.el6]
changelog:
  - [fs] fuse: set page_descs length in fuse_buffered_write() (Brian Foster) [916956 915135]
  - [fs] vfs: fix pointer dereference validation in d_validate (Carlos Maiolino) [915582 876600]
  - [kernel] utrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL (Oleg Nesterov) [913074 912074] {CVE-2013-0871}
  - [net] ipv6: do not create neighbor entries for local delivery (Jiri Pirko) [909158 896020]
  - [net] bonding: check for assigned mac before adopting the slaves mac address (Veaceslav Falico) [908735 905126]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.24.1.el6]
changelog:
  - [fs] NFS: Don't allow NFS silly-renamed files to be deleted, no signal (Frantisek Hrbata) [920264 905095]
  - [fs] nfs: Ensure that we check lock exclusive/shared type against open modes (Dave Wysochanski) [920267 916324]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.25.1.el6]
changelog:
  - [x86] irq: add quirk for broken interrupt remapping on 55XX chipsets (Neil Horman) [911266 887006]
  - [fs] NLM: Ensure that we resend all pending blocking locks after a reclaim (Steve Dickson) [923850 913704]
  - [fs] xfs: remove log force from xfs_buf_cond_lock() (Brian Foster) [921960 896224]
  - [fs] xfs: recheck buffer pinned status after push trylock failure (Brian Foster) [921960 896224]
  - [mm] fix potential anon_vma locking issue in mprotect() (Andrea Arcangeli) [924838 858389]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.4.1.el6]
changelog:
  - [fs] proc: stats: Use arch_idle_time for idle and iowait times if available (Steve Best) [841579 841149]
  - [drm] i915: fix integer overflow in i915_gem_execbuffer2() (Jacob Tanenbaum) [824553 824555] {CVE-2012-2383}
  - [usb] core: change the memory limits in usbfs URB submission (Don Zickus) [841667 828271]
  - [usb] core: unify some error pathways in usbfs (Don Zickus) [841667 828271]
  - [netdrv] ixgbe: BIT_APP_UPCHG not set by ixgbe_copy_dcb_cfg() (Andy Gospodarek) [840156 814044]
  - [netdrv] ixgbe: driver fix for link flap (Andy Gospodarek) [840156 814044]
  - [net] bridge: Fix enforcement of multicast hash_max limit (Thomas Graf) [840023 832575]
  - [net] bluetooth: fix sco_conninfo infoleak (Jacob Tanenbaum) [681307 681308] {CVE-2011-1078}
  - [wireless] ipw2200: remove references to CFG80211_WEXT config option (John Linville) [841406 839311]
  - [netdrv] be2net: enable GRO by default (Ivan Vecera) [838821 837230]
  - [virt] kvm/vmx: Fix KVM_SET_SREGS with big real mode segments (Orit Wasserman) [841411 756044]
  - [fs] writeback: merge for_kupdate and !for_kupdate cases (Eric Sandeen) [832360 818172]
  - [fs] writeback: fix queue_io() ordering (Eric Sandeen) [832360 818172]
  - [fs] writeback: don't redirty tail an inode with dirty pages (Eric Sandeen) [832360 818172]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.5.2.el6]
changelog:
  - [kernel] timekeeping: Fix leapsecond triggered load spike issue (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] hrtimer: Provide clock_was_set_delayed() (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] ntp: Add ntp_lock to replace xtime_locking (Prarit Bhargava) [847366 840950 836803 836748]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.8.1.el6]
changelog:
  - [netdrv] e1000e: prevent oops when adapter is being closed and reset simultaneously (Dean Nelson) [847045 826375]
  - [net] tcp: clear hints to avoid a stale one (Andy Gospodarek) [846832 807704]
  - [md] dm-raid1: Fix mirror crash when discard request is sent and sync is in progress (Mikulas Patocka) [846839 837607]
  - [netdrv] bond_alb: don't disable softirq under bond_alb_xmit (Jiri Pirko) [846216 841987]
  - [x86] ioapic: Fix kdump race with migrating irq (Don Zickus) [812962 783322]
  - [net] rds: set correct msg_namelen (Weiping Pan) [822729 822731] {CVE-2012-3430}
  - [x86] amd_iommu: Fix SRIOV and hotplug devices (Stefan Assmann) [846838 832009]
  - [mm] hugetlb: fix resv_map leak in error path (Motohiro Kosaki) [824350 824351] {CVE-2012-2390}
  - [netdrv] dl2k: fix unfiltered netdev rio_ioctl access by users (Jacob Tanenbaum) [818824 818825] {CVE-2012-2313}
  - [drm] i915: fix integer overflow in i915_gem_do_execbuffer() (Jacob Tanenbaum) [824561 824563] {CVE-2012-2384}
  - [virt] kvm: handle last_boosted_vcpu = 0 case (Rik van Riel) [847042 827031]
  - [md] raid5: Reintroduce locking in handle_stripe() to avoid racing (Jes Sorensen) [846836 828065]
  - [kernel] timekeeping: Fix leapsecond triggered load spike issue (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] hrtimer: Provide clock_was_set_delayed() (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] ntp: Add ntp_lock to replace xtime_locking (Prarit Bhargava) [847366 840950 836803 836748]
  - [fs] proc/stat: fix whitespace damage in use arch_idle_time patch (Steve Best) [841579 841149]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-277.el6]
changelog:
  - [scsi] be2iscsi: fix dma free size mismatch regression (Mike Christie) [824287]
  - [scsi] libsas: check dev->gone before submitting sata i/o (David Milburn) [824025]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-357.el6]
changelog:
  - [virt] xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS guests (Andrew Jones) [896050] {CVE-2013-0190}
  - [block] sg_io: use different default filters for each device class (Paolo Bonzini) [875361] {CVE-2012-4542}
  - [block] sg_io: prepare for adding per-device-type filters (Paolo Bonzini) [875361] {CVE-2012-4542}
  - [virt] virtio-blk: Don't free ida when disk is in use (Asias He) [870344]
  - [netdrv] mlx4: Remove FCS bytes from packet length (Doug Ledford) [893707]
  - [net] netfilter: nf_ct_reasm: fix conntrack reassembly expire code (Amerigo Wang) [726807]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.0.1.el6]
changelog:
  - [kernel] utrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL (Oleg Nesterov) [912073 912074] {CVE-2013-0871}


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.9.1.el6]
changelog:
  - [fs] nfs: Fix handling of revoked delegations by setattr (Steve Dickson) [960415 952329]
  - [fs] nfs: Return the delegation if the server returns NFS4ERR_OPENMODE (Steve Dickson) [960415 952329]
  - [fs] nfs: Fix another potential state manager deadlock (Steve Dickson) [960436 950598]
  - [fs] nfs: Fix another open/open_recovery deadlock (Steve Dickson) [960433 916806]
  - [fs] nfs: Hold reference to layout hdr in layoutget (Steve Dickson) [960429 916726]
  - [fs] nfs: add "pnfs_" prefix to get_layout_hdr() and put_layout_hdr() (Steve Dickson) [960429 916726]
  - [fs] nfs: nfs4_open_done first must check that GETATTR decoded a file type (Steve Dickson) [960412 916722]
  - [net] sunrpc: Dont start the retransmission timer when out of socket space (Steve Dickson) [960426 916735]
  - [fs] nfs: Dont use SetPageError in the NFS writeback code (Steve Dickson) [960420 912867]
  - [fs] nfs: Dont decode skipped layoutgets (Steve Dickson) [927294 904025]
  - [fs] nfs: nfs4_proc_layoutget returns void (Steve Dickson) [927294 904025]
  - [fs] nfs: defer release of pages in layoutget (Steve Dickson) [927294 904025]
  - [fs] nfs: Use kcalloc() when allocating arrays (Steve Dickson) [927294 904025]
  - [fs] nfs: Fix an ABBA locking issue with session and state serialisation (Steve Dickson) [960417 912842]
  - [fs] nfs: Fix a race in the pNFS return-on-close code (Steve Dickson) [960417 912842]
  - [fs] nfs: Do not accept delegated opens when a delegation recall is in effect (Steve Dickson) [960417 912842]
  - [fs] nfs: Fix a reboot recovery race when opening a file (Steve Dickson) [952613 908524]
  - [fs] nfs: Ensure delegation recall and byte range lock removal don't conflict (Steve Dickson) [952613 908524]
  - [fs] nfs: Fix up the return values of nfs4_open_delegation_recall (Steve Dickson) [952613 908524]
  - [fs] nfs: Dont lose locks when a server reboots during delegation return (Steve Dickson) [952613 908524]
  - [fs] nfs: Move nfs4_wait_clnt_recover and nfs4_client_recover_expired_lease (Steve Dickson) [952613 908524]
  - [fs] nfs: Add NFSDBG_STATE (Steve Dickson) [952613 908524]
  - [fs] nfs: nfs_inode_return_delegation() should always flush dirty data (Steve Dickson) [952613 908524]
  - [fs] nfs: nfs_client_return_marked_delegations cant flush data (Steve Dickson) [952613 908524]
  - [fs] nfs: Prevent deadlocks between state recovery and file locking (Steve Dickson) [952613 908524]
  - [fs] nfs: Allow the state manager to mark an open_owner as being recovered (Steve Dickson) [952613 908524]
  - [kernel] seqlock: Dont smp_rmb in seqlock reader spin loop (Steve Dickson) [952613 908524]
  - [kernel] seqlock: add 'raw_seqcount_begin()' function (Steve Dickson) [952613 908524]
  - [kernel] seqlock: optimise seqlock (Steve Dickson) [952613 908524]
  - [fs] nfs: don't allow nfs_find_actor to match inodes of the wrong type (Jeff Layton) [921964 913660]
  - [net] sunrpc: Add barriers to ensure read ordering in rpc_wake_up_task_queue_locked (Dave Wysochanski) [956979 840860]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.10.1.el6]
changelog:
  - [scsi] be2iscsi : Fix the NOP-In handling code path (Nikola Pajkovsky) [955504 947550]
  - [scsi] be2iscsi: Fix memory leak in control path of driver (Rob Evers) [955504 947550]
  - [virt] kvm: validate userspace_addr of memslot (Petr Matousek) [950496 950498] {CVE-2013-1943}
  - [virt] kvm: fix copy to user with irq disabled (Michael S. Tsirkin) [949985 906602] {CVE-2013-1935}
  - [net] veth: Dont kfree_skb() after dev_forward_skb() (Jiri Benc) [957712 957713] {CVE-2013-2017}
  - [net] tcp: Reallocate headroom if it would overflow csum_start (Thomas Graf) [954298 896233]
  - [net] tcp: take care of misalignments (Thomas Graf) [954298 896233]
  - [net] skbuff.c cleanup (Thomas Graf) [954298 896233]
  - [idle] intel_idle: Initialize driver_data correctly in ivb_cstates on IVB processor (Prarit Bhargava) [960864 953630]
  - [x86] Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [962482 869736]
  - [mm] enforce mmap_min_addr on x86_64 (Rik van Riel) [961431 790921]
  - [mm] optional next-fit policy for arch_get_unmapped_area (Rik van Riel) [961431 790921]
  - [mm] fix quadratic behaviour in get_unmapped_area_topdown (Rik van Riel) [961431 790921]
  - [scsi] Revert: qla2xxx: Optimize existing port name server query matching (Chad Dupuis) [950529 924804]
  - [scsi] Revert: qla2xxx: Avoid losing any fc ports when loop id's are exhausted (Chad Dupuis) [950529 924804]
  - [fs] defer do_filp_open() access checks to may_open() (Eric Sandeen) [928683 920752]
  - [md] dm thin: bump the target version numbers (Mike Snitzer) [924823 922931]
  - [md] dm-thin: fix discard corruption (Mike Snitzer) [924823 922931]
  - [md] persistent-data: rename node to btree_node (Mike Snitzer) [924823 922931]
  - [md] dm: fix limits initialization when there are no data devices (Mike Snitzer) [923096 908851]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.11.1.el6]
changelog:
  - [kernel] perf: fix perf_swevent_enabled array out-of-bound access (Petr Matousek) [962793 962794] {CVE-2013-2094}


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.12.1.el6]
changelog:
  - [fs] Panic in gfs2_inplace_reserve after fix from BZ#875753 (Robert S Peterson) [924847 922999]
  - [nfs] sunrpc: Prevent an rpc_task wakeup race (Dave Wysochanski) [956979 840860]
  - [nfs] sunrpc: clarify comments on rpc_make_runnable (Dave Wysochanski) [956979 840860]
  - [x86] acpi: Avoid SRAT table checks for Fujitsu Primequest systems (Prarit Bhargava) [973198 966853]
  - [x86] oprofile: Fix crash when unloading module in nmi timer mode (Don Zickus) [972586 828936]
  - [block] propagate proper return codes from blk_get_request callers (Jeff Moyer) [958684 927918]
  - [block] Check the return value from blk_get_request (Jeff Moyer) [958684 927918]
  - [virt] kvm/mmu: fix hashing for TDP and non-paging modes (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Fix free memory accounting race in mmu_alloc_roots() (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Don't flush shadow when enabling dirty tracking (Marcelo Tosatti) [966432 908751]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.13.1.el6]
changelog:
  - [wireless] b43: stop format string leaking into error msgs (John Linville) [971387 971389] {CVE-2013-2852}
  - [pci] make sriov work with hotplug remove (Takahiro MUNEDA) [973555 965002]
  - [net] rtnl: fix info leak on RTM_GETLINK request for VF devices (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] dcbnl: fix various netlink info leaks (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] bonding: fix enslaving in alb mode when link down (Veaceslav Falico) [969306 965132]
  - [net] tcp: Fix oops from tcp_collapse() when using splice() (Nikola Pajkovsky) [968871 863512] {CVE-2013-2128}
  - [usb] uhci: fix IRQ race during initialization (Dave Young) [968557 915834]
  - [netdrv] e1000e: enable VLAN RX/TX in PROMISC mode (Stefan Assmann) [963564 886420]
  - [netdrv] bnx2x: strip VLAN header in PROMISC mode (Stefan Assmann) [963564 886420]
  - [net] vlan: handle packets with empty vlan_group via VLAN code (Stefan Assmann) [963564 886420]
  - [fs] namei.c: Dont allow to create hardlink for deleted file (Brian Foster) [956296 908158]
  - [fs] gfs2: Reinstate withdraw ack system (Robert S Peterson) [927308 908093]
  - [fs] nfs: open a file descriptor for fsync in nfs4 recovery (J. Bruce Fields) [964046 915479]
  - [net] macvlan: remove bogus check in macvlan_handle_frame() (Jiri Pirko) [962370 952785]
  - [net] macvlan: fix passthru mode race between dev removal and rx path (Jiri Pirko) [962370 952785]
  - [kernel] rcu: Replace list_first_entry_rcu() with list_first_or_null_rcu() (Jiri Pirko) [962370 952785]
  - [net] bluetooth/rfcomm: Fix missing msg_namelen update in rfcomm_sock_recvmsg() (Weiping Pan) [955653 955654] {CVE-2013-3225}
  - [net] bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955603 955604] {CVE-2013-3224}
  - [fs] gfs2: Issue discards in 512b sectors (Robert S Peterson) [927317 922779]
  - [fs] udf: avoid info leak on export (Nikola Pajkovsky) [922354 922355] {CVE-2012-6548}
  - [scsi] lpfc: Fixed deadlock between hbalock and nlp_lock use (Rob Evers) [962368 960717]
  - [kernel] tracing: Fix possible NULL pointer dereferences (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [kernel] tracing: Fix panic when lseek() called on "trace" opened for writing (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [net] atm: update msg_namelen in vcc_recvmsg() (Nikola Pajkovsky) [955224 955225] {CVE-2013-3222}
  - [x86] apic: Work around boot failure on HP ProLiant DL980 G7 Server systems (Prarit Bhargava) [969326 912963]
  - [x86] apic: Use probe routines to simplify apic selection (Prarit Bhargava) [969326 912963]
  - [x86] x2apic: Simplify apic init in SMP and UP builds (Prarit Bhargava) [969326 912963]
  - [kvm] vmx: provide the vmclear function and a bitmap to support VMCLEAR in kdump (Andrew Jones) [962372 908608]
  - [x86] kexec: VMCLEAR VMCSs loaded on all cpus if necessary (Andrew Jones) [962372 908608]
  - [fs] ext3: Fix format string issues (Nikola Pajkovsky) [920784 920785] {CVE-2013-1848}
  - [kernel] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920505 920506] {CVE-2013-0914}


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.16.1.el6]
changelog:
  - [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981558 981559]
  - [x86] Revert: Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [982703 970735]
  - [x86] Revert: Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [982703 970735]
  - [mm] reinstate the first-fit scheme for arch_get_unmapped_area_topdown() (Rafael Aquini) [982571 980273]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.17.1.el6]
changelog:
  - [net] ipv4: fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980144 979788] {CVE-2013-2224}
  - [net] sctp: Use correct sideffect command in duplicate cookie handling (Daniel Borkmann) [976571 963843] {CVE-2013-2206}
  - [virt] kvm: limit difference between kvmclock updates (Marcelo Tosatti) [979912 952174]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.18.1.el6]
changelog:
  - [x86] perf/x86: Fix offcore_rsp valid mask for SNB/IVB (Nikola Pajkovsky) [971314 971315] {CVE-2013-2146}
  - [net] br: fix schedule while atomic issue in br_features_recompute() (Jiri Pirko) [990464 980876]
  - [scsi] isci: Fix a race condition in the SSP task management path (David Milburn) [990470 978609]
  - [bluetooth] L2CAP - Fix info leak via getsockname() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [bluetooth] HCI - Fix info leak in getsockopt() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [net] tuntap: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [net] af_key: initialize satype in key_notify_policy_flush() (Thomas Graf) [981225 981227] {CVE-2013-2237}
  - [usb] uhci: fix for suspend of virtual HP controller (Gopal) [982697 960026]
  - [usb] uhci: Remove PCI dependencies from uhci-hub (Gopal) [982697 960026]
  - [netdrv] bnx2x: Change MDIO clock settings (Michal Schmidt) [982116 901747]
  - [scsi] st: Take additional queue ref in st_probe (Tomas Henzl) [979293 927988]
  - [kernel] audit: wait_for_auditd() should use TASK_UNINTERRUPTIBLE (Oleg Nesterov) [982472 962976]
  - [kernel] audit: avoid negative sleep durations (Oleg Nesterov) [982472 962976]
  - [fs] ext4/jbd2: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] jbd: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix waiting and sending of a barrier in ext4_sync_file() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: fix sending of data flush on journal commit (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [963557 955807]
  - [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [963557 955807]
  - [fs] ext4: Rewrite __jbd2_log_start_commit logic to match upstream (Eric Sandeen) [963557 955807]
  - [net] bridge: Set vlan_features to allow offloads on vlans (Vlad Yasevich) [984524 951458]
  - [virt] virtio-net: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [mm] swap: avoid read_swap_cache_async() race to deadlock while waiting on discard I/O completion (Rafael Aquini) [977668 827548]
  - [dma] ioat: Fix excessive CPU utilization (John Feeney) [982758 883575]
  - [fs] vfs: revert most of dcache remove d_mounted (Ian Kent) [974597 907512]
  - [fs] xfs: don't free EFIs before the EFDs are committed (Carlos Maiolino) [975578 947582]
  - [fs] xfs: pass shutdown method into xfs_trans_ail_delete_bulk (Carlos Maiolino) [975576 805407]
  - [net] ipv6: bind() use stronger condition for bind_conflict (Flavio Leitner) [989923 917872]
  - [net] tcp: bind() use stronger condition for bind_conflict (Flavio Leitner) [977680 894683]
  - [x86] remove BUG_ON(TS_USEDFPU) in __sanitize_i387_state() (Oleg Nesterov) [956054 920445]
  - [fs] coredump: ensure the fpu state is flushed for proper multi-threaded core dump (Oleg Nesterov) [956054 920445]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.1.1.el6]
changelog:
  - [netdrv] mlx4: Set number of msix vectors under SRIOV mode to firmware defaults (Michal Schmidt) [911663 904726]
  - [netdrv] mlx4: Fix bridged vSwitch configuration for non SRIOV mode (Michal Schmidt) [910998 903644]
  - [net] rtnetlink: Fix IFLA_EXT_MASK definition (regression) (Thomas Graf) [909815 903220]
  - [x86] msr: Add capabilities check (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
  - [x86] msr: Remove incorrect, duplicated code in the MSR driver (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
  - [virt] xen: don't assume ds is usable in xen_iret for 32-bit PVOPS (Andrew Jones) [906310 906311] {CVE-2013-0228}
  - [kernel] cputime: Avoid multiplication overflow on utime scaling (Stanislaw Gruszka) [908794 862758]
  - [net] sunrpc: When changing the queue priority, ensure that we change the owner (Steve Dickson) [910370 902965]
  - [net] sunrpc: Ensure we release the socket write lock if the rpc_task exits early (Steve Dickson) [910370 902965]
  - [fs] nfs: Ensure that we free the rpc_task after read and write cleanups are done (Steve Dickson) [910370 902965]
  - [net] sunrpc: Ensure that we free the rpc_task after cleanups are done (Steve Dickson) [910370 902965]
  - [net] sunrpc: Don't allow low priority tasks to pre-empt higher priority ones (Steve Dickson) [910370 902965]
  - [fs] nfs: Add sequence_priviliged_ops for nfs4_proc_sequence() (Steve Dickson) [910370 902965]
  - [fs] nfs: The NFSv4.0 client must send RENEW calls if it holds a delegation (Steve Dickson) [910370 902965]
  - [fs] nfs: nfs4_proc_renew should be declared static (Steve Dickson) [910370 902965]
  - [fs] nfs: nfs4_locku_done must release the sequence id (Steve Dickson) [910370 902965]
  - [fs] nfs: We must release the sequence id when we fail to get a session slot (Steve Dickson) [910370 902965]
  - [fs] nfs: Add debugging messages to NFSv4's CLOSE procedure (Steve Dickson) [910370 902965]
  - [net] sunrpc: Clear the connect flag when socket state is TCP_CLOSE_WAIT (Steve Dickson) [910370 902965]
  - [fs] nfs: cleanup DS stateid error handling (Steve Dickson) [910370 902965]
  - [fs] nfs: handle DS stateid errors (Steve Dickson) [910370 902965]
  - [fs] nfs: Fix potential races in xprt_lock_write_next() (Steve Dickson) [910370 902965]
  - [fs] nfs: Ensure correct locking when accessing the 'lock_states' list (Steve Dickson) [910370 902965]
  - [fs] nfs: Fix the handling of NFS4ERR_SEQ_MISORDERED errors (Steve Dickson) [910370 902965]
  - [netdrv] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [910373 909464]
  - [netdrv] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [910373 909464]
  - [netdrv] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [910373 909464]
  - [fs] gfs2: Get a block reservation before resizing a file (Robert S Peterson) [908398 875753]
  - [net] ipv6: do not create neighbor entries for local delivery (Jiri Pirko) [909159 896020]
  - [net] bonding: check for assigned mac before adopting the slaves mac address (Veaceslav Falico) [908737 905126]
  - [fs] nfs: nfs4_xdr_enc_layout{commit, return} must return status (Steve Dickson) [908733 907227]
  - [fs] set s_type before destroy_super in sget() (Eric Sandeen) [909813 904982]
  - [scsi] ses: Avoid kernel panic when lun 0 is not mapped (Ewan Milne) [908739 886867]
  - [block] avoid divide-by-zero with zero discard granularity (Mike Snitzer) [911000 901705]
  - [block] discard granularity might not be power of 2 (Mike Snitzer) [911000 901705]
  - [netdrv] tg3: Fix crc errors on jumbo frame receive (Ivan Vecera) [909816 895336]
  - [netdrv] igb: set E1000_IMS_TS interrupt bit in igb_irq_enable (Stefan Assmann) [909818 871795]
  - [pci] intel-iommu: Prevent devices with RMRRs from being placed into SI Domain (Tony Camuso) [908744 678451]
  - [scsi] sd: Reshuffle init_sd to avoid crash (Ewan Milne) [911655 888417]
  - [mm] add numa node symlink for cpu devices in sysfs (Neil Horman) [909814 878708]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.22.1.el6]
changelog:
  - [x86] Round the calculated scale factor in set_cyc2ns_scale() (Prarit Bhargava) [1001954 975507]
  - [x86] sched: Fix overflow in cyc2ns_offset (Prarit Bhargava) [1001954 975507]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.23.1.el6]
changelog:
  - [md] raid1, raid10: use freeze_array in place of raise_barrier in various places (Jes Sorensen) [1003765 997845]
  - [scsi] megaraid_sas: megaraid_sas driver init fails in kdump kernel (Nikola Pajkovsky) [1001963 833299]
  - [char] ipmi: eliminate long delay in ipmi_si on SGI UV2 (Nikola Pajkovsky) [988228 876778]
  - [net] bridge: Add multicast_querier toggle and disable queries by default (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Fix fatal typo in setup of multicast_querier_expired (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Restart queries when last querier expires (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Add br_multicast_start_querier (Flavio Leitner) [995334 905561]
  - [kernel] Prevent RT process stall due to missing upstream scheduler bug fix (Larry Woodman) [1006932 1002765]
  - [fs] nfs: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (Dave Wysochanski) [1006956 998752]
  - [firmware] efivars: Use correct efi_pstore_info struct when calling pstore_register (Lenny Szubowicz) [993547 867689]
  - [net] bridge: do not call setup_timer() multiple times (Amerigo Wang) [997746 994430]
  - [fs] lockd: protect nlm_blocked list (David Jeffery) [993544 967095]
  - [net] ipv6: call udp_push_pending_frames when uncorking a socket with AF_INET pending data (Jiri Benc) [987649 987651] {CVE-2013-4162}
  - [fs] fuse: readdirplus sanity checks (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus cleanup (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus change attributes once (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus fix instantiate (Niels de Vos) [988708 981741]
  - [fs] fuse: fix readdirplus dentry leak (Niels de Vos) [988708 981741]
  - [fs] cifs: fix issue mounting of DFS ROOT when redirecting from one domain controller to the next (Sachin Prabhu) [994866 976535]
  - [fs] nfs: Make nfs_readdir revalidate less often (Scott Mayhew) [994867 976879]
  - [fs] nfs: Make nfs_attribute_cache_expired() non-static (Scott Mayhew) [994867 976879]
  - [fs] nfs: set verifier on existing dentries in nfs_prime_dcache (Scott Mayhew) [994867 976879]
  - [fs] nfs: Allow nfs_updatepage to extend a write under additional circumstances (Scott Mayhew) [987262 983288]
  - [fs] nfs: fix a leak at nfs_lookup_revalidate() (Dave Wysochanski) [987261 975211]
  - [acpi] efivars: If pstore_register fails, free unneeded pstore buffer (Lenny Szubowicz) [993547 867689]
  - [acpi] Eliminate console msg if pstore.backend excludes ERST (Lenny Szubowicz) [993547 867689]
  - [acpi] Return unique error if backend registration excluded by kernel param (Lenny Szubowicz) [993547 867689]
  - [net] bridge: fix some kernel warning in multicast timer (Amerigo Wang) [997745 952012]
  - [net] bridge: send query as soon as leave is received (Amerigo Wang) [997745 952012]
  - [net] bridge: only expire the mdb entry when query is received (Amerigo Wang) [997745 952012]
  - [net] bridge: Replace mp->mglist hlist with a bool (Amerigo Wang) [997745 952012]
  - [mm] fadvise: drain all pagevecs if POSIX_FADV_DONTNEED fails to discard all pages (Larry Woodman) [994140 957821]
  - [net] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1003931 955712]
  - [virt] xen-netfront: reduce gso_max_size to account for max TCP header (Andrew Jones) [1004657 957231]
  - [pps] Fix a use-after free bug when unregistering a source (Jiri Benc) [997916 920155]
  - [scsi] fnic: Fix SGEs limit (Chris Leech) [991346 829506]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.45.1.el6]
changelog:
  - [kernel] futex: Make lookup_pi_state more robust (Jerome Marchand) [1104523 1104517] {CVE-2014-3153}
  - [kernel] futex: Always cleanup owner tid in unlock_pi (Jerome Marchand) [1104523 1104517] {CVE-2014-3153}
  - [kernel] futex: Validate atomic acquisition in futex_lock_pi_atomic() (Jerome Marchand) [1104523 1104517] {CVE-2014-3153}
  - [kernel] futex: prevent requeue pi on same futex (Jerome Marchand) [1104523 1104517] {CVE-2014-3153}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.46.1.el6]
changelog:
  - [block] floppy: don't write kernel-only members to FDRAWCMD ioctl output (Denys Vlasenko) [1094313 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [block] floppy: ignore kernel-only members in FDRAWCMD ioctl input (Denys Vlasenko) [1094313 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [x86] kvm: rate-limit global clock updates (Andrew Jones) [1102253 1072373]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.46.2.el6]
changelog:
  - [netdrv] pppol2tp: fail when socket option level is not SOL_PPPOL2TP (Petr  Matousek) [1119464 1119462] {CVE-2014-4943}
  - [kernel] utrace: force IRET path after utrace_finish_vfork() (Oleg Nesterov) [1117227 1115933] {CVE-2014-4699}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.47.1.el6]
changelog:
  - [net] ipv4: fix route cache rebuilds (Jiri Pirko) [1113823 1111631]
  - [net] ipv6: router reachability probing (Jiri Benc) [1115262 1029585]
  - [net] ipv6: remove the unnecessary statement in find_match() (Jiri Benc) [1115262 1029585]
  - [net] ipv6: fix route selection if kernel is not compiled with CONFIG_IPV6_ROUTER_PREF (Jiri Benc) [1115262 1029585]
  - [net] ipv6: Fix default route failover when CONFIG_IPV6_ROUTER_PREF=n (Jiri Benc) [1115262 1029585]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.48.1.el6]
changelog:
  - [x86] hyperv: Bypass the timer_irq_works() check (Jason Wang) [1112225 1040349]
  - [kernel] sched: Avoid throttle_cfs_rq() racing with period_timer stopping (Seth Jennings) [1120666 844450]
  - [scsi] fix performance regression due to inverted blk_get_queue return (Mike Snitzer) [1117581 1098658]
  - [net] mac80211: crash dues to AP powersave TX vs. wakeup race (Frantisek Hrbata) [1093618 1083532] {CVE-2014-2706}
  - [netdrv] ath9k: tid->sched race in ath_tx_aggr_sleep() (Frantisek Hrbata) [1093340 1083250] {CVE-2014-2672}
  - [netdrv] pppol2tp: fail when socket option level is not SOL_PPPOL2TP (Petr  Matousek) [1119464 1119462] {CVE-2014-4943}
  - [kernel] utrace: force IRET path after utrace_finish_vfork() (Oleg Nesterov) [1117227 1115933] {CVE-2014-4699}
  - [net] rds: prevent dereference of a NULL device in rds_iw_laddr_check (Radomir Vrbovsky) [1093341 1083277] {CVE-2014-2678}
  - [mm] swap: do not skip lowest_bit in scan_swap_map() scan loop (Rafael Aquini) [1099727 1060886]
  - [mm] swap: fix shmem swapping when more than 8 areas (Rafael Aquini) [1099727 1060886]
  - [mm] swap: fix swapon size off-by-one (Rafael Aquini) [1099727 1060886]
  - [net] ipv4: current group_info should be put after using (Jiri Benc) [1087478 1087414] {CVE-2014-2851}
  - [net] rds: dereference of a NULL device (Jacob Tanenbaum) [1093338 1079219] {CVE-2013-7339}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.49.1.el6]
changelog:
  - [kernel] futex: Fix errors in nested key ref-counting (Frantisek Hrbata) [1094461 1094458] {CVE-2014-0205}
  - [fs] fsnotify: delay unmounting until all inode are fput (Eric Paris) [1130628 886723]
  - [fs] inotify: determine wd before races are possible (Eric Paris) [1130628 886723]
  - [fs] fsnotify: do not hold notification mutex when putting events (Eric Paris) [1130628 886723]
  - [fs] fsnotify: use GFP_NOFS when allocating event holders (Eric Paris) [1130628 886723]
  - [md] raid: avoid data corruption during recovery of double-degraded RAID6 (Jes Sorensen) [1131410 1090423]
  - [perf] x86: ignore CondChgd bit to avoid false NMI handling (Don Zickus) [1134695 1116947]
  - [netdrv] bnx2x: fix set_setting for some PHYs (Petr Holasek) [1138300 1009332]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.51.1.el6]
changelog:
  - [net] sctp: inherit auth_capable on INIT collisions (Daniel Borkmann) [1141146 1123760] {CVE-2014-5077}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.57.1.el6]
changelog:
  - [net] ipv4: blackhole route should always be recalculated (Herbert Xu) [1194662 1010347]
  - [net] xfrm: fix RCU bugs (Amerigo Wang) [1190034 885247]
  - [net] xfrm: Replace rwlock on xfrm_policy_afinfo with rcu (Amerigo Wang) [1190034 885247]
  - [net] flow: Add a flow_cache_flush_deferred function (Amerigo Wang) [1190034 885247]
  - [net] xfrm: Refcount destination entry on xfrm_lookup (Amerigo Wang) [1190034 885247]
  - [net] xfrm: avoid possible oopse in xfrm_alloc_dst (Amerigo Wang) [1190034 885247]
  - [net] xfrm: Fix xfrm_state_migrate leak (Amerigo Wang) [1190034 885247]
  - [net] flow: Make flow cache namespace-aware (Amerigo Wang) [1190034 885247]
  - [net] xfrm: do not assume that template resolving always returns xfrms (Amerigo Wang) [1190034 885247]
  - [net] xfrm: check bundle policy existance before dereferencing it (Amerigo Wang) [1190034 885247]
  - [net] xfrm: fix policy unreferencing on larval drop (Amerigo Wang) [1190034 885247]
  - [net] xfrm6: ensure to use the same dev when building a bundle (Amerigo Wang) [1190034 885247]
  - [net] xfrm: Fix crashes in xfrm_lookup() (Amerigo Wang) [1190034 885247]
  - [net] flow: delayed deletion of flow cache entries (Amerigo Wang) [1190034 885247]
  - [net] xfrm: remove policy garbage collection (Amerigo Wang) [1190034 885247]
  - [net] xfrm: cache bundles instead of policies for outgoing flows (Amerigo Wang) [1190034 885247]
  - [net] xfrm: deal with dst entries in netns (Amerigo Wang) [1190034 885247]
  - [net] flow: virtualize flow cache entry methods (Amerigo Wang) [1190034 885247]
  - [net] flow: structurize flow cache (Amerigo Wang) [1190034 885247]
  - [net] xfrm: remove policy lock when accessing policy->walk.dead (Amerigo Wang) [1190034 885247]
  - [net] xfrm: Flushing empty SAD generates false events (Amerigo Wang) [1190034 885247]
  - [net] xfrm: Flushing empty SPD generates false events (Amerigo Wang) [1190034 885247]
  - [net] pfkey: fix SA and SP flush sequence (Amerigo Wang) [1190034 885247]
  - [net] xfrm: validate attributes (Amerigo Wang) [1190034 885247]
  - [net] xfrm: verify policy direction at XFRM_MSG_POLEXPIRE handler (Amerigo Wang) [1190034 885247]
  - [net] xfrm: Remove xfrm_state_genid (Amerigo Wang) [1190034 885247]
  - [net] ipv4: check rt_genid in dst_check (Amerigo Wang) [1190034 885247]
  - [net] xfrm: Fix bogus bundle flowi (Amerigo Wang) [1190034 885247]
  - [net] xfrm: clone mark when cloning policy (Amerigo Wang) [1190034 885247]
  - [net] xfrm: Allow user space manipulation of SPD mark (Amerigo Wang) [1190034 885247]
  - [net] xfrm: Allow user space config of SAD mark (Amerigo Wang) [1190034 885247]
  - [net] xfrm: SP lookups with mark (Amerigo Wang) [1190034 885247]
  - [net] xfrm: SP lookups signature with mark (Amerigo Wang) [1190034 885247]
  - [net] xfrm: SA lookups with mark (Amerigo Wang) [1190034 885247]
  - [net] xfrm: SA lookups signature with mark (Amerigo Wang) [1190034 885247]
  - [net] xfrm: introduce basic mark infrastructure (Amerigo Wang) [1190034 885247]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.58.1.el6]
changelog:
  - [kernel] sched: Fix possible divide by zero in avg_atom() calculation (Mateusz Guzik) [1199898 1109489]
  - [kernel] add div64_ul() (Mateusz Guzik) [1199898 1109489]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-358.59.1.el6]
changelog:
  - [infiniband] core: Prevent integer overflow in ib_umem_get address arithmetic (Doug Ledford) [1181176 1179327] {CVE-2014-8159}
  - [kernel] time: ntp: Correct TAI offset during leap second (Prarit Bhargava) [1201672 1199134]
  - [fs] isofs: unbound recursion when processing relocated directories (Jacob Tanenbaum) [1196305 1142269] {CVE-2014-5472 CVE-2014-5471}
  - [video] fbmem: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1196303 1035242] {CVE-2013-2596}
  - [s390] add dummy io_remap_pfn_range() to asm/pgtable.h (Jacob Tanenbaum) [1196303 1035242] {CVE-2013-2596}
  - [mm] add vm_iomap_memory() helper function (Jacob Tanenbaum) [1196303 1035242] {CVE-2013-2596}
  - Revert: [net] xfrm: introduce basic mark infrastructure (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: SA lookups signature with mark (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: SA lookups with mark (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: SP lookups signature with mark (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: SP lookups with mark (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: Allow user space config of SAD mark (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: Allow user space manipulation of SPD mark (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: clone mark when cloning policy (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: Fix bogus bundle flowi (Amerigo Wang) [1190034 885247]
  - Revert: [net] ipv4: check rt_genid in dst_check (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: Remove xfrm_state_genid (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: verify policy direction at XFRM_MSG_POLEXPIRE handler (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: validate attributes (Amerigo Wang) [1190034 885247]
  - Revert: [net] pfkey: fix SA and SP flush sequence (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: Flushing empty SPD generates false events (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: Flushing empty SAD generates false events (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: remove policy lock when accessing policy->walk.dead (Amerigo Wang) [1190034 885247]
  - Revert: [net] flow: structurize flow cache (Amerigo Wang) [1190034 885247]
  - Revert: [net] flow: virtualize flow cache entry methods (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: deal with dst entries in netns (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: cache bundles instead of policies for outgoing flows (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: remove policy garbage collection (Amerigo Wang) [1190034 885247]
  - Revert: [net] flow: delayed deletion of flow cache entries (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: Fix crashes in xfrm_lookup() (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm6: ensure to use the same dev when building a bundle (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: fix policy unreferencing on larval drop (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: check bundle policy existance before dereferencing it (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: do not assume that template resolving always returns xfrms (Amerigo Wang) [1190034 885247]
  - Revert: [net] flow: Make flow cache namespace-aware (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: Fix xfrm_state_migrate leak (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: avoid possible oopse in xfrm_alloc_dst (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: Refcount destination entry on xfrm_lookup (Amerigo Wang) [1190034 885247]
  - Revert: [net] flow: Add a flow_cache_flush_deferred function (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: Replace rwlock on xfrm_policy_afinfo with rcu (Amerigo Wang) [1190034 885247]
  - Revert: [net] xfrm: fix RCU bugs (Amerigo Wang) [1190034 885247]
  - Revert: [net] ipv4: blackhole route should always be recalculated (Herbert Xu) [1194662 1010347]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.4.1.el6]
changelog:
  - [fs] NLM: Ensure that we resend all pending blocking locks after a reclaim (Steve Dickson) [921150 913704]
  - [fs] xfs: remove log force from xfs_buf_cond_lock() (Brian Foster) [921961 896224]
  - [fs] xfs: recheck buffer pinned status after push trylock failure (Brian Foster) [921961 896224]
  - [fs] nfs: Ensure that we check lock exclusive/shared type against open modes (Dave Wysochanski) [920268 916324]
  - [powerpc] pseries: Fix partition migration hang in stop_topology_update (Steve Best) [921963 910597]
  - [infiniband] qib: correction for faulty sparse warning correction (Jay Fenlason) [922154 901701]
  - [usb] io_ti: Fix NULL dereference in chase_port() (Nikola Pajkovsky) [916198 916200] {CVE-2013-1774}
  - [net] bluetooth: Fix incorrect strncpy() in hidp_setup_hid() (Nikola Pajkovsky) [914690 914691] {CVE-2013-0349}
  - [char] tty: set_termios/set_termiox should not return -EINTR (Oleg Nesterov) [921145 904907]
  - [netdrv] ehea: fix VLAN support (Steve Best) [921535 911359]
  - [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919388 919389] {CVE-2013-1826}
  - [net] dccp: check ccid before NULL poiter dereference (Weiping Pan) [919187 919188] {CVE-2013-1827}
  - [mm] tmpfs: fix use-after-free of mempolicy object (Nikola Pajkovsky) [915714 915715] {CVE-2013-1767}
  - [fs] fuse: set page_descs length in fuse_buffered_write() (Brian Foster) [916957 915135]
  - [fs] vfs: fix pointer dereference validation in d_validate (Carlos Maiolino) [915583 876600]
  - [fs] cifs: after upcalling for krb5 creds, invalidate key rather than revoking it (Niels de Vos) [912452 885899]
  - [fs] cifs: tmp_key_invalidate() should not set key->expiry to 0 (Niels de Vos) [912452 885899]
  - [block] disable discard request merge temporarily (Mike Snitzer) [911475 907844]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.5.1.el6]
changelog:
  - [fs] xfs: use maximum schedule timeout when ail is empty (Brian Foster) [921958 883905]
  - [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_auth() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922386 922387] {CVE-2012-6546}
  - [net] atm: fix info leak via getsockname() (Thomas Graf) [922386 922387] {CVE-2012-6546}
  - [fs] nls: improve UTF8 -> UTF16 string conversion routine (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
  - [fs] fat: Fix stat->f_namelen (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
  - [netdrv] tun: fix ioctl() based info leaks (Thomas Graf) [922350 922351] {CVE-2012-6547}
  - [virt] x86: Add a check to catch Xen emulation of Hyper-V (Andrew Jones) [923204 918239]
  - [fs] cifs: fix expand_dfs_referral (Sachin Prabhu) [923098 902492]
  - [fs] cifs: factor smb_vol allocation out of cifs_setup_volume_info (Sachin Prabhu) [923098 902492]
  - [fs] cifs: have cifs_cleanup_volume_info not take a double pointer (Sachin Prabhu) [923098 902492]
  - [fs] nfs: Dont allow NFS silly-renamed files to be deleted, no signal (Dave Wysochanski) [920266 905095]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.6.1.el6]
changelog:
  - [virt] kvm: accept unaligned MSR_KVM_SYSTEM_TIME writes (Petr Matousek) [917020 917021] {CVE-2013-1796}
  - [char] tty: hold lock across tty buffer finding and buffer filling (Prarit Bhargava) [928686 901780]
  - [net] tcp: fix for zero packets_in_flight was too broad (Thomas Graf) [927309 920794]
  - [net] tcp: frto should not set snd_cwnd to 0 (Thomas Graf) [927309 920794]
  - [net] tcp: fix an infinite loop in tcp_slow_start() (Thomas Graf) [927309 920794]
  - [net] tcp: fix ABC in tcp_slow_start() (Thomas Graf) [927309 920794]
  - [netdrv] ehea: avoid accessing a NULL vgrp (Steve Best) [921535 911359]
  - [net] sunrpc: Get rid of the redundant xprt->shutdown bit field (J. Bruce Fields) [915579 893584]
  - [virt] kvm: do not #GP on unaligned MSR_KVM_SYSTEM_TIME write (Gleb Natapov) [917020 917021] {CVE-2013-1796}
  - [drm] i915: bounds check execbuffer relocation count (Nikola Pajkovsky) [920523 920525] {CVE-2013-0913}
  - [x86] irq: add quirk for broken interrupt remapping on 55XX chipsets (Neil Horman) [911267 887006]
  - [kvm] Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache functions (Gleb Natapov) [917024 917025] {CVE-2013-1797}
  - [kvm] Fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (Gleb Natapov) [917020 917021] {CVE-2013-1796}
  - [kvm] Fix bounds checking in ioapic indirect register reads (Gleb Natapov) [917030 917032] {CVE-2013-1798}
  - [kvm] x86: release kvmclock page on reset (Gleb Natapov) [917024 917025] {CVE-2013-1797}
  - [security] keys: Fix race with concurrent install_user_keyrings() (David Howells) [916681 913258] {CVE-2013-1792}
  - [virt] hv_balloon: Make adjustments to the pressure report (Jason Wang) [909156 902232]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-356.el6]
changelog:
  - [char] ipmi: use a tasklet for handling received messages (Prarit Bhargava) [890160]
  - [char] ipmi: handle run_to_completion properly in deliver_recv_msg() (Prarit Bhargava) [890160]
  - [usb] xhci: Reset reserved command ring TRBs on cleanup (Don Zickus) [843520]
  - [usb] xhci: handle command after aborting the command ring (Don Zickus) [874541]
  - [usb] xhci: cancel command after command timeout (Don Zickus) [874541]
  - [usb] xhci: add aborting command ring function (Don Zickus) [874541]
  - [usb] xhci: add cmd_ring_state (Don Zickus) [874541]
  - [usb] xhci: Fix Null pointer dereferencing with non-DMI systems (Don Zickus) [874542]
  - [usb] xhci: Intel Panther Point BEI quirk (Don Zickus) [874542]
  - [usb] xhci: Increase XHCI suspend timeout to 16ms (Don Zickus) [874542]
  - [powerpc] Revert: pseries/iommu: remove default window before attempting DDW manipulation (Steve Best) [890454]
  - [serial] 8250_pnp: add Intermec CV60 touchscreen device (Mauro Carvalho Chehab) [894445]
  - [char] ipmi: apply missing hunk from upstream commit 2407d77a (Tony Camuso) [882787]
  - [acpi] Fix broken kernel build if CONFIG_ACPI_DEBUG is enabled (Lenny Szubowicz) [891948]
  - [scsi] qla2xxx: Test and clear FCPORT_UPDATE_NEEDED atomically (Chad Dupuis) [854736]
  - [mm] vmalloc: remove guard page from between vmap blocks (Johannes Weiner) [873737]
  - [mm] vmalloc: vmap area cache (Johannes Weiner) [873737]
  - [fs] vfs: prefer EEXIST to EROFS when creating on an RO filesystem (Eric Sandeen) [878091]
  - [scsi] qla2xxx: change queue depth ramp print to debug print (Rob Evers) [893113]
  - [fs] nfs: Fix umount when filelayout DS is also the MDS (Steve Dickson) [895194]
  - [fs] nfs/pnfs: add set-clear layoutdriver interface (Steve Dickson) [895194]
  - [fs] nfs: Don't call nfs4_deviceid_purge_client() unless we're NFSv4.1 (Steve Dickson) [895194]
  - [fs] nfs: Wait for session recovery to finish before returning (Steve Dickson) [895176]
  - [mm] compaction: validate pfn range passed to isolate_freepages_block (Johannes Weiner) [889456 890498]
  - [drm] nouveau: ensure legacy vga is re-enabled during POST (Ben Skeggs) [625441]
  - [netdrv] be2net: Remove stops to further access to BE NIC on UE bits (Ivan Vecera) [894344]
  - [virt] kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek) [862904] {CVE-2012-4461}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.1.1.el6]
changelog:
  - [netdrv] mlx4_en: Check device state when setting coalescing (Amir Vadai) [1032395 975908]
  - [net] ip_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1023490 1023491] {CVE-2013-4470}
  - [net] ip6_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1023490 1023491] {CVE-2013-4470}
  - [net] sunrpc: Fix a data corruption issue when retransmitting RPC calls (Jeff Layton) [1032424 1030046]
  - [fs] gfs2: Implement a rgrp has no extents longer than X scheme (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: Drop inadequate rgrps from the reservation tree (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: If requested is too large, use the largest extent in the rgrp (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: Add allocation parameters structure (Robert S Peterson) [1032162 998625]
  - [fs] nfs: Don't check lock owner compatability unless file is locked - part 2 (Jeff Layton) [1032260 1007039]
  - [fs] nfs: Don't check lock owner compatibility in writes unless file is locked (Jeff Layton) [1032260 1007039]
  - [netdrv] ixgbevf: move API neg to reset path (Andy Gospodarek) [1032168 1019346]
  - [netdrv] ixgbe: fix inconsistent clearing of the multicast table (Andy Gospodarek) [1032170 975248]
  - [mm] Group e820 entries together and add map_individual_e820 boot option (Larry Woodman) [1020518 876275]
  - [mm] Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping (Larry Woodman) [1020518 876275]
  - [mm] Find_early_table_space based on ranges that are actually being mapped (Larry Woodman) [1020518 876275]
  - [fs] nfs: Fix the sync mount option for nfs4 mounts (Scott Mayhew) [1030171 915862]
  - [fs] nfsv4: Missing Chunk of Back Port Patch Causes Hang (Steve Dickson) [1032250 1024006]
  - [fs] xfs: Ensure sync updates the log tail correctly (Dave Chinner) [1032249 1025439]
  - [fs] xfs: only update the last_sync_lsn when a transaction completes (Dave Chinner) [1032249 1025439]
  - [fs] xfs: prevent deadlock trying to cover an active log (Dave Chinner) [1032688 1014867]
  - [kernel] signal: stop info leak via the tkill and the tgkill syscalls (Petr Holasek) [970876 970878] {CVE-2013-2141}
  - [block] rsxx: Disallow discards from being unmapped (Steve Best) [1028278 1023897]
  - [netdrv] brcmsmac: Module alias support missing from backport (John Green) [1029330 1020461]
  - [netdrv] mlx4_en: Fix pages never dma unmapped on rx (Steve Best) [1027343 1023272]
  - [netdrv] mlx4_en: Fix BlueFlame race (Amir Vadai) [1029997 987634]
  - [scsi] lpfc 8.3.42: Fixed failure to allocate SCSI buffer on PPC64 platform for SLI4 devices (Rob Evers) [1030713 1024683]
  - [scsi] Revert: qla2xxx: Ramp down queue depth for attached SCSI devices when driver resources are low. [1032167 995576]
  - [netdrv] tg3: avoid double-freeing of rx data memory (Ivan Vecera) [1032423 1020685]
  - [hda] alsa: Final fix for the Haswell HDMI audio 44.1kHz rate (Jaroslav Kysela) [1032247 1024548]
  - [input] wacom: do not report ABS_MISC on TPC2FG touch device (Aristeu Rozanski) [1032426 1032256]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.1.2.el6]
changelog:
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.10.1.el6]
changelog:
  - [fs] xfs: xfs_remove deadlocks due to inverted AGF vs AGI lock ordering (Brian Foster) [1067775 1059334]
  - [x86] apic: Map the local apic when parsing the MP table (Prarit Bhargava) [1063507 1061873]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.1.el6]
changelog:
  - [net] netpoll: take rcu_read_lock_bh() in netpoll_send_skb_on_dev() (Florian Westphal) [1063271 1049052]
  - [fs] cifs: sanity check length of data to send before sending (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [fs] cifs: ensure that uncached writes handle unmapped areas correctly (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [infiniband] ipoib: Report operstate consistently when brought up without a link (Michal Schmidt) [1064464 995300]
  - [security] selinux: fix broken peer recv check (Paul Moore) [1059991 1043051]
  - [fs] GFS2: Fix slab memory leak in gfs2_bufdata (Robert S Peterson) [1064913 1024024]
  - [fs] GFS2: Fix use-after-free race when calling gfs2_remove_from_ail (Robert S Peterson) [1064913 1024024]
  - [fs] nfs: always make sure page is up-to-date before extending a write to cover the entire page (Scott Mayhew) [1066942 1054493]
  - [fs] xfs: ensure we capture IO errors correctly (Lachlan McIlroy) [1058418 1021325]
  - [mm] get rid of unnecessary pageblock scanning in setup_zone_migrate_reserve (Motohiro Kosaki) [1062113 1043353]
  - [security] selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: look for IPsec labels on both inbound and outbound packets (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output() (Paul Moore) [1055364 1024631]
  - [edac] e752x_edac: Fix pci_dev usage count (Aristeu Rozanski) [1058420 1029530]
  - [s390] mm: handle asce-type exceptions as normal page fault (Hendrik Brueckner) [1057164 1034268]
  - [s390] mm: correct tlb flush on page table upgrade (Hendrik Brueckner) [1057165 1034269]
  - [net] fix memory information leaks in recv protocol handlers (Florian Westphal) [1039868 1039869]
  - [usb] cdc-wdm: fix buffer overflow (Alexander Gordeev) [922000 922001] {CVE-2013-1860}
  - [usb] cdc-wdm: Fix race between autosuspend and reading from the device (Alexander Gordeev) [922000 922001] {CVE-2013-1860}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.2.el6]
changelog:
  - [net] sctp: fix sctp_sf_do_5_1D_ce to verify if peer is AUTH capable (Daniel Borkmann) [1070715 1067451] {CVE-2014-0101}
  - [vhost] validate vhost_get_vq_desc return value (Michael S. Tsirkin) [1062579 1058677] {CVE-2014-0055}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.15.1.el6]
changelog:
  - [kernel] sched: Avoid throttle_cfs_rq() racing with period_timer stopping (Seth Jennings) [1083350 844450]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.17.1.el6]
changelog:
  - [scsi] qla2xxx: Fixup looking for a space in the outstanding_cmds array in qla2x00_alloc_iocbs() (Chad Dupuis) [1085660 1070856]
  - [scsi] isci: fix reset timeout handling (David Milburn) [1080600 1040393]
  - [scsi] isci: correct erroneous for_each_isci_host macro (David Milburn) [1074855 1059325]
  - [kernel] sched: Fix small race where child->se.parent, cfs_rq might point to invalid ones (Naoya Horiguchi) [1081907 1032350]
  - [kernel] sched: suppress RCU lockdep splat in task_fork_fair (Naoya Horiguchi) [1081907 1032350]
  - [kernel] sched: add local variable to store task_group() to avoid kernel stall (Naoya Horiguchi) [1081908 1043733]
  - [fs] cifs: mask off top byte in get_rfc1002_length() (Sachin Prabhu) [1085358 1069737]
  - [kernel] Prevent deadlock when post_schedule_rt() results in calling wakeup_kswapd() on multiple CPUs (Larry Woodman) [1086095 1009626]
  - [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033533 1033534] {CVE-2013-6383}
  - [md] dm-thin: fix rcu_read_lock being held in code that can sleep (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: irqsave must always be used with the pool->lock spinlock (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: sort the per thin deferred bios using an rb_tree (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: use per thin device deferred bio lists (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: simplify pool_is_congested (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix dangling bio in process_deferred_bios error path (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: take care to copy the space map root before locking the superblock (Mike Snitzer) [1086007 1060381]
  - [md] dm-transaction-manager: fix corruption due to non-atomic transaction commit (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix refcount decrement below 0 which caused corruption (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix Documentation for held metadata root feature (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix noflush suspend IO queueing (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix deadlock in __requeue_bio_list (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix out of data space handling (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: ensure user takes action to validate data and metadata consistency (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: synchronize the pool mode during suspend (Mike Snitzer) [1086007 1060381]
  - [md] fix Kconfig indentation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: allow metadata space larger than supported to go unused (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix the error path for the thin device constructor (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: avoid metadata commit if a pool's thin devices haven't changed (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix bug in resizing of thin metadata (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix pool feature parsing (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix extending the space map (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-common: make sure new space is used during extend (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix set_pool_mode exposed pool operation races (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: eliminate the no_free_space flag (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add error_if_no_space feature (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: requeue bios to DM core if no_free_space and in read-only mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: cleanup and improve no space handling (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: log info when growing the data or metadata device (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: handle metadata failures more consistently (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: factor out check_low_water_mark and use bools (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add mappings to end of prepared_* lists (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: return error from alloc_data_block if pool is not in write mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: use bool rather than unsigned for flags in structures (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: cleanup dm-thin specific references in text (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: limit errors in sm_metadata_new_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix discard support to a previously shared block (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: initialize dm_thin_new_mapping returned by get_next_mapping (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map: disallow decrementing a reference count below zero (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: allow pool in read-only mode to transition to read-write mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: re-establish read-only state when switching to fail mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: always fallback the pool mode if commit fails (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: switch to read-only mode if metadata space is exhausted (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: switch to read only mode if a mapping insert fails (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: return on failure in sm_metadata_new_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-disk: optimise sm_disk_dec_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-table: print error on preresume failure (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: do not expose non-zero discard limits if discards disabled (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: always return -ENOSPC if no_free_space is set (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: set pool read-only if breaking_sharing fails block allocation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: prefix pool error messages with pool device name (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map: optimise sm_ll_dec and sm_ll_inc (Mike Snitzer) [1086007 1060381]
  - [md] dm-btree: prefetch child nodes when walking tree for a dm_btree_del (Mike Snitzer) [1086007 1060381]
  - [md] dm-btree: use pop_frame in dm_btree_del to cleanup code (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix stacking of geometry limits (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add data block size limits to Documentation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix metadata dev resize detection (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: generate event when metadata threshold passed (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-metadata: add space map threshold callback (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: add threshold callback to space map (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: detect metadata device resizing (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: support space map resizing (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: refactor data dev resize (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: initialize read-only module parameters (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: submit writes outside lock (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: add recursive IO request BUG_ON (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: prefetch (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: fix slow IO latency issue specific to RHEL6 (Mike Snitzer) [1086490 1058528]
  - [netdrv] mlx4_en: Fixed crash when port type is changed (Amir Vadai) [1085658 1059586]
  - [netdrv] vmxnet3: fix netpoll race condition (Neil Horman) [1083175 1073218]
  - [net] netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages (Jiri Pirko) [1077345 1077346] {CVE-2014-2523}
  - [scsi] megaraid_sas: fix a small problem when reading state value from hw (Tomas Henzl) [1078641 1065187]
  - [fs] gfs2: Increase the max number of ACLs (Robert S Peterson) [1078874 1075713]
  - [net] filter: let bpf_tell_extensions return SKF_AD_MAX (Daniel Borkmann) [1079872 960275]
  - [net] introduce SO_BPF_EXTENSIONS (Daniel Borkmann) [1079872 960275]
  - [scsi] scsi_dh: cosmetic change to sizeof() (Ewan Milne) [1075554 1062494]
  - [acpi] thermal: Check for thermal zone requirement (Nigel Croxon) [1075651 1021044]
  - [acpi] thermal: Don't invalidate thermal zone if critical trip point is bad (Nigel Croxon) [1075651 1021044]
  - [mm] flush pages from pagevec of offlined CPU (Naoya Horiguchi) [1078007 1037467]
  - [fs] xfs: deprecate nodelaylog option (Eric Sandeen) [1076056 1055644]
  - [fs] Fix mountpoint reference leakage in linkat (Jeff Layton) [1069848 1059943]
  - [net] sock: Fix release_cb kABI brekage (Thomas Graf) [1066535 1039723]
  - [vhost] fix total length when packets are too short (Michael S. Tsirkin) [1064442 1064444] {CVE-2014-0077}
  - [net] sctp: fix sctp_sf_do_5_1D_ce to verify if peer is AUTH capable (Daniel Borkmann) [1070715 1067451] {CVE-2014-0101}
  - [vhost] validate vhost_get_vq_desc return value (Michael S. Tsirkin) [1062579 1058677] {CVE-2014-0055}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.1.el6]
changelog:
  - [net] rtnetlink: Only supply IFLA_VF_PORTS information when RTEXT_FILTER_VF is set (Jiri Pirko) [1092870 1081282]
  - [net] rtnetlink: Warn when interface's information won't fit in our packet (Jiri Pirko) [1092870 1081282]
  - [net] bridge: Correctly receive hw-accelerated vlan traffic (Vlad Yasevich) [1096214 1067722]
  - [net] vlan: Allow accelerated packets to flow through the bridge (Vlad Yasevich) [1096214 1067722]
  - [infiniband] qib: Add missing serdes init sequence (Doug Ledford) [1080104 1005491]
  - [infiniband] qib: Fix txselect regression (Doug Ledford) [1080104 1005491]
  - [netdrv] ixgbevf: fix vlan acceleration (Nikolay Aleksandrov) [1094287 1069028]
  - [security] selinux: Fix kernel BUG on empty security contexts (Paul Moore) [1062502 1064545] {CVE-2014-1874}
  - [netdrv] libertas: potential oops in debugfs (Denys Vlasenko) [1034176 1034177] {CVE-2013-6378}
  - [kernel] cgroup: move put_css_set() after setting CGRP_RELEASABLE bit to fix notify_on_release (Naoya Horiguchi) [1081909 1037465]
  - [kernel] sched: Use exit hook to avoid use-after-free crash (Naoya Horiguchi) [1081914 1032347]
  - [kernel] cgroup: replace list_del() with list_del_init() to avoid panic (Naoya Horiguchi) [1081915 1032343]
  - [x86] turbostat: display C8, C9, C10 residency (Neil Horman) [1096711 1080637]
  - [scsi] lpfc 8.3.44: Fix kernel panics from corrupted ndlp list (Rob Evers) [1086839 1063699]
  - [s390] fix kernel crash due to linkage stack instructions (Hendrik Brueckner) [1067678 1067679] {CVE-2014-2039}
  - [x86] kvm: rate-limit global clock updates (Andrew Jones) [1090750 1072373]
  - [kernel] hrtimers: Move SMP function call to thread context (Mateusz Guzik) [1079869 1073129]
  - [kernel] hrtimers: Support resuming with two or more CPUs online (Mateusz Guzik) [1079869 1073129]
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - [fs] ext4: fix WARN_ON from ext4_releasepage() (Carlos Maiolino) [1063508 1036814]
  - [fs] vfs: fix getname() && do_getname() interaction (Oleg Nesterov) [1075653 1024689]
  - [x86] apic: Make disabled_cpu_apicid static read_mostly, fix typos (Nigel Croxon) [1082622 980621]
  - [x86] kexec: Add disable_cpu_apicid kernel parameter (Nigel Croxon) [1082622 980621]
  - [kvm] x86: use kvm_read/write_guest_virt_system in task switch (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: small cleanups to kvm_task_switch (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: propagate error from kvm_load_segment_descriptor (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: improve save_guest_segment_descriptor (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: introduce kvm_write_guest_virt_system (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: Fix task switch privilege checks (Paolo Bonzini) [1070296 1018581]
  - [powerpc] Make function that parses RTAS error logs global (Steve Best) [1091424 1028682]
  - [powerpc] pseries: Add RTAS event log v6 definition (Steve Best) [1091424 1028682]
  - [powerpc] pseries: Parse and handle EPOW interrupts (Steve Best) [1091424 1028682]
  - [fs] nfsd: don't try to reuse an expired DRC entry off the list (Jeff Layton) [1088779 1036972]
  - [fs] nfsd: when reusing an existing repcache entry, unhash it first (Jeff Layton) [1088779 1036972]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.2.el6]
changelog:
  - [block] floppy: don't write kernel-only members to FDRAWCMD ioctl output (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [block] floppy: ignore kernel-only members in FDRAWCMD ioctl input (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [fs] vfs: fix autofs/afs/etc magic mountpoint breakage (Frantisek Hrbata) [1094370 1079347] {CVE-2014-0203}
  - [char] n_tty: Fix n_tty_write crash when echoing in raw mode (Aristeu Rozanski) [1094236 1094237] {CVE-2014-0196}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.3.el6]
changelog:
  - [kernel] futex: Make lookup_pi_state more robust (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Always cleanup owner tid in unlock_pi (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Validate atomic acquisition in futex_lock_pi_atomic() (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: prevent requeue pi on same futex (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - Revert: [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.4.el6]
changelog:
  - [kernel] utrace: force IRET path after utrace_finish_vfork() (Oleg Nesterov) [1115932 1115933] {CVE-2014-4699}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.5.el6]
changelog:
  - [netdrv] pppol2tp: fail when socket option level is not SOL_PPPOL2TP [1119461 1119462] {CVE-2014-4943}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.23.1.el6]
changelog:
  - [net] ip_tunnel: fix ip_tunnel_find to return NULL in case the tunnel is not there (Jiri Pirko) [1107931 1104503]
  - [netdrv] bnx2x: Fix kernel crash and data miscompare after EEH recovery (Michal Schmidt) [1109269 1029600]
  - [netdrv] bnx2x: Adapter not recovery from EEH error injection (Michal Schmidt) [1109269 1029600]
  - [scsi] qla2xxx: Don't check for firmware hung during the reset context for ISP82XX (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Clear loop_id for ports that are marked lost during fabric scanning (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Issue abort command for outstanding commands during cleanup when only firmware is alive (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Reduce the time we wait for a command to complete during SCSI error handling (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Avoid escalating the SCSI error handler if the command is not found in firmware (Chad Dupuis) [1110658 1054299]
  - [scsi] qla2xxx: Set host can_queue value based on available resources (Chad Dupuis) [1110658 1054299]
  - [net] filter: prevent nla extensions to peek beyond the end of the message (Jiri Benc) [1096778 1096779] {CVE-2014-3144 CVE-2014-3145}
  - [net] bridge: add empty br_mdb_init() and br_mdb_uninit() definitions (Vlad Yasevich) [1106472 1097915]
  - [net] bridge: Correctly unregister MDB rtnetlink handlers (Vlad Yasevich) [1106472 1097915]
  - [net] rds: prevent dereference of a NULL device in rds_iw_laddr_check (Radomir Vrbovsky) [1083276 1083277] {CVE-2014-2678}
  - [s390] crypto: fix aes, des ctr mode concurrency finding (Hendrik Brueckner) [1110168 1096328]
  - [s390] crypto: fix des and des3_ede ctr concurrency issue (Hendrik Brueckner) [1109885 1065404]
  - [s390] crypto: fix des and des3_ede cbc concurrency issue (Hendrik Brueckner) [1109883 1065398]
  - [kernel] futex: Forbid uaddr == uaddr2 in futex_wait_requeue_pi() (Mateusz Guzik) [1097759 1097760] {CVE-2012-6647}
  - [libata] ahci: accommodate tag ordered controller (David Milburn) [1099725 1083748]
  - [net] mac80211: crash dues to AP powersave TX vs. wakeup race (Jacob Tanenbaum) [1083531 1083532] {CVE-2014-2706}
  - [netdrv] ath9k: tid->sched race in ath_tx_aggr_sleep() (Jacob Tanenbaum) [1083249 1083250] {CVE-2014-2672}
  - [kernel] hrtimer: Prevent all reprogramming if hang detected (Prarit Bhargava) [1096059 1075805]
  - [net] ipv4: current group_info should be put after using (Jiri Benc) [1087412 1087414] {CVE-2014-2851}
  - [kernel] tracing: Reset ring buffer when changing trace_clocks (Marcelo Tosatti) [1093984 1018138]
  - [net] rds: dereference of a NULL device (Jacob Tanenbaum) [1079218 1079219] {CVE-2013-7339}
  - [s390] crypto: fix concurrency issue in aes-ctr mode (Hendrik Brueckner) [1110169 1063478]
  - [net] ipv4: processing ancillary IP_TOS or IP_TTL (Francesco Fusco) [1094403 990694]
  - [net] ipv4: IP_TOS and IP_TTL can be specified as ancillary data (Francesco Fusco) [1094403 990694]
  - [s390] crypto: Fix aes-xts parameter corruption (Hendrik Brueckner) [1110170 1043540]
  - [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [1103068 1007459]
  - [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [1103068 1007459]
  - [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [1103068 1007459]
  - [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [1103068 1007459]
  - [fs] ext4: replace cut'n'pasted llseek code with generic_file_llseek_size (Eric Sandeen) [1103068 1007459]
  - [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [1103068 1007459]
  - [net] bridge: disable snooping if there is no querier (Vlad Yasevich) [1090749 1090670]
  - [net] Revert "bridge: only expire the mdb entry when query is received" (Vlad Yasevich) [1090749 1090670]
  - [net] Revert "bridge: fix some kernel warning in multicast timer" (Vlad Yasevich) [1090749 1090670]
  - [net] Revert "bridge: do not call setup_timer() multiple times" (Vlad Yasevich) [1090749 1090670]
  - [net] Revert "bridge: update mdb expiration timer upon reports" (Vlad Yasevich) [1090749 1090670]
  - [kernel] futex: Make lookup_pi_state more robust (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Always cleanup owner tid in unlock_pi (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Validate atomic acquisition in futex_lock_pi_atomic() (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: prevent requeue pi on same futex (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - Revert: [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [block] floppy: don't write kernel-only members to FDRAWCMD ioctl output (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [block] floppy: ignore kernel-only members in FDRAWCMD ioctl input (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [fs] vfs: fix autofs/afs/etc magic mountpoint breakage (Frantisek Hrbata) [1094370 1079347] {CVE-2014-0203}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.28.1.el6]
changelog:
  - [kernel] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102704 1102705] {CVE-2014-3917}
  - [net] ipv4: fix route cache rebuilds (Jiri Pirko) [1113824 1111631]
  - [fs] nfsd: notify_change needs elevated write count (Mateusz Guzik) [1110177 1105057]
  - [fs] nfsv4: close needs to handle NFS4ERR_ADMIN_REVOKED (Dave Wysochanski) [1096397 1082127]
  - [fs] pipe: skip file_update_time on frozen fs (Eric Sandeen) [1114405 1093077]
  - [fs] nfs: Fail the truncate() if the lock/open stateid is invalid (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Servers should only check SETATTR stateid open mode on size change (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Fail data server I/O if stateid represents a lost lock (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Fix the return value of nfs4_select_rw_stateid (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Use the open stateid if the delegation has the wrong mode (Steve Dickson) [1090613 1075123]
  - [fs] nfs: nfs4_stateid_is_current should return 'true' for an invalid stateid (Steve Dickson) [1090613 1075123]
  - [fs] nfs: fix error return in nfs4_select_rw_stateid (Steve Dickson) [1090613 1075123]
  - [fs] nfs: Document the recover_lost_locks kernel parameter (Jeff Layton) [1089359 963785]
  - [fs] nfs: Don't try to recover NFSv4 locks when they are lost (Jeff Layton) [1089359 963785]
  - [fs] nfs: Fix handling of partially delegated locks (Jeff Layton) [1120074 959788]
  - [fs] nfs: Convert the nfs4_lock_state->ls_flags to a bit field (Jeff Layton) [1120074 959788]
  - [x86] Optimize switch_mm() for multi-threaded workloads (Rik van Riel) [1115821 991518]
  - [netdrv] pppol2tp: fail when socket option level is not SOL_PPPOL2TP [1119461 1119462] {CVE-2014-4943}
  - [kernel] utrace: force IRET path after utrace_finish_vfork() (Oleg Nesterov) [1115932 1115933] {CVE-2014-4699}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.29.1.el6]
changelog:
  - [mm] hugetlb: ensure hugepage access is denied if hugepages are not supported (Gustavo Duarte) [1118782 1086450]
  - [security] keys: Increase root_maxkeys and root_maxbytes sizes (Steve Dickson) [1115542 1113607]
  - [fs] lockd: Ensure that nlmclnt_block resets block->b_status after a server reboot (Steve Dickson) [1110180 959006]
  - [net] filter: add vlan tag access (Jiri Benc) [1108526 1082097]
  - [net] filter: add XOR operation (Jiri Benc) [1108526 1082097]
  - [net] filter: add SKF_AD_RXHASH and SKF_AD_CPU (Jiri Benc) [1108526 1082097]
  - [net] filter: Socket filter ancilliary data access for skb->dev->type (Jiri Benc) [1108526 1082097]
  - [net] filter: Add SKF_AD_QUEUE instruction (Jiri Benc) [1108526 1082097]
  - [net] filter: ingress socket filter by mark (Jiri Benc) [1108526 1082097]
  - [netdrv] bonding: look for bridge IPs in arp monitoring (Veaceslav Falico) [1102794 704190]
  - [s390] af_iucv: wrong mapping of sent and confirmed skbs (Hendrik Brueckner) [1112390 1102248]
  - [s390] af_iucv: recvmsg problem for SOCK_STREAM sockets (Hendrik Brueckner) [1112390 1102248]
  - [s390] af_iucv: fix recvmsg by replacing skb_pull() function (Hendrik Brueckner) [1112390 1102248]
  - [s390] kernel: avoid page table walk on user space access (Hendrik Brueckner) [1111194 1099146]
  - [s390] qeth: postpone freeing of qdio memory (Hendrik Brueckner) [1112134 1094379]
  - [s390] qeth: Fix retry logic in hardsetup (Hendrik Brueckner) [1112134 1094379]
  - [s390] qeth: Recognize return codes of ccw_device_set_online (Hendrik Brueckner) [1112134 1094379]
  - [s390] qdio: remove API wrappers (Hendrik Brueckner) [1112134 1094379]
  - [scsi] Ensure medium access timeout counter resets (David Jeffery) [1117153 1036884]
  - [scsi] Fix error handling when no ULD is attached (David Jeffery) [1117153 1036884]
  - [scsi] Handle disk devices which can not process medium access commands (David Jeffery) [1117153 1036884]
  - [fs] nfs: Fix calls to drop_nlink() (Steve Dickson) [1099607 1093819]
  - [mm] swap: do not skip lowest_bit in scan_swap_map() scan loop (Rafael Aquini) [1099728 1060886]
  - [mm] swap: fix shmem swapping when more than 8 areas (Rafael Aquini) [1099728 1060886]
  - [mm] swap: fix swapon size off-by-one (Rafael Aquini) [1099728 1060886]
  - [md] avoid deadlock when dirty buffers during md_stop (Jes Sorensen) [1121541 994724]
  - [x86] hyperv: bypass the timer_irq_works() check (Jason Wang) [1112226 1040349]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.29.2.el6]
changelog:
  - [kernel] futex: Fix errors in nested key ref-counting (Denys Vlasenko) [1094457 1094458] {CVE-2014-0205}
  - [net] vxlan: fix NULL pointer dereference (Jiri Benc) [1114549 1096351] {CVE-2014-3535}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.2.1.el6]
changelog:
  - [netdrv] bonding: Remove redundant VLAN tag insertion logic (Nikolay Aleksandrov) [1039562 1025224]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.3.1.el6]
changelog:
  - [net] don't drop TSO features for NO_CSUM devices (Ivan Vecera) [1037812 1030631]
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.4.1.el6]
changelog:
  - [powerpc] signals: Improved mark VSX not saved with small contexts fix (Seth Jennings) [1044566 1044117]
  - [powerpc] signals: Mark VSX not saved with small contexts (Seth Jennings) [1044566 1044117]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.5.1.el6]
changelog:
  - [net] sctp: fix checksum marking for outgoing packets (Daniel Borkmann) [1046041 1040385]
  - [kernel] ptrace: Cleanup useless header (Aaron Tomlin) [1046043 1036312]
  - [kernel] ptrace: kill BKL in ptrace syscall (Aaron Tomlin) [1046043 1036312]
  - [fs] nfs: Prevent a 3-way deadlock between layoutreturn, open and state recovery (Steve Dickson) [1045094 1034487]
  - [fs] nfs: Ensure that rmdir() waits for sillyrenames to complete (Steve Dickson) [1051395 1034348]
  - [fs] nfs: wait on recovery for async session errors (Steve Dickson) [1051393 1030049]
  - [fs] nfs: Re-use exit code in nfs4_async_handle_error() (Steve Dickson) [1051393 1030049]
  - [fs] nfs: Update list of irrecoverable errors on DELEGRETURN (Steve Dickson) [1051393 1030049]
  - [exec] ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039486 1039487] {CVE-2013-2929}
  - [net] ipv6: router reachability probing (Jiri Benc) [1043779 1029585]
  - [net] ipv6: remove the unnecessary statement in find_match() (Jiri Benc) [1043779 1029585]
  - [net] ipv6: fix route selection if kernel is not compiled with CONFIG_IPV6_ROUTER_PREF (Jiri Benc) [1043779 1029585]
  - [net] ipv6: Fix default route failover when CONFIG_IPV6_ROUTER_PREF=n (Jiri Benc) [1043779 1029585]
  - [net] ipv6: probe routes asynchronous in rt6_probe (Jiri Benc) [1040826 1030094]
  - [net] ndisc: Update neigh->updated with write lock (Jiri Benc) [1040826 1030094]
  - [net] ipv6: prevent fib6_run_gc() contention (Jiri Benc) [1040826 1030094]
  - [net] netfilter: push reasm skb through instead of original frag skbs (Jiri Pirko) [1049590 1011214]
  - [net] ip6_output: fragment outgoing reassembled skb properly (Jiri Pirko) [1049590 1011214]
  - [net] netfilter: nf_conntrack_ipv6: improve fragmentation handling (Jiri Pirko) [1049590 1011214]
  - [net] ipv4: fix path MTU discovery with connection tracking (Jiri Pirko) [1049590 1011214]
  - [net] ipv6: Make IP6CB(skb)->nhoff 16-bit (Jiri Pirko) [1049590 1011214]
  - [edac] Add error decoding support for AMD Fam16h processors (Prarit Bhargava) [1051394 1020290]
  - [netdrv] bnx2x: correct VF-PF channel locking scheme (Michal Schmidt) [1040498 1029203]
  - [netdrv] bnx2x: handle known but unsupported VF messages (Michal Schmidt) [1040498 1029203]
  - [netdrv] bnx2x: Lock DMAE when used by statistic flow (Michal Schmidt) [1040497 1029200]
  - [net] ipv6: fix leaking uninitialized port number of offender sockaddr (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] inet: fix addr_len/msg->msg_namelen assignment in recv_error functions (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] inet: prevent leakage of uninitialized memory to user in recv syscalls (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] ipvs: Add boundary check on ioctl arguments (Denys Vlasenko) [1030817 1030818] {CVE-2013-4588}
  - [s390] qeth: avoid buffer overflow in snmp ioctl (Hendrik Brueckner) [1038935 1034266]
  - [md] fix calculation of stacking limits on level change (Jes Sorensen) [1035347 1026864]
  - [ata] ahci: fix turning on LEDs in ahci_start_port() (David Milburn) [1035339 1017105]
  - [ata] libata: implement cross-port EH exclusion (David Milburn) [1035339 1017105]
  - [ata] libata add ap to ata_wait_register and intro ata_msleep (David Milburn) [1035339 1017105]
  - [netdrv] igb: Update link modes display in ethtool (Stefan Assmann) [1032389 1019578]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.53.1.el6]
changelog:
  - [net] sctp: fix slab corruption from use after free on INIT collisions (Daniel Borkmann) [1196593 1135425] {CVE-2015-1421}
  - [x86] kvm: vmx: invalid host cr4 handling across vm entries (Jacob Tanenbaum) [1170559 1153327] {CVE-2014-3690}
  - [media] ttusb-dec: buffer overflow in ioctl (Alexander Gordeev) [1170972 1167115] {CVE-2014-8884}
  - [fs] nfs: Fix a delegation callback race (Dave Wysochanski) [1187638 1149831]
  - [fs] nfs: Don't use the delegation->inode in nfs_mark_return_delegation() (Dave Wysochanski) [1187638 1149831]
  - [fs] isofs: unbound recursion when processing relocated directories (Jacob Tanenbaum) [1196306 1142269] {CVE-2014-5472 CVE-2014-5471}
  - [video] fbmem: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035241 1035242] {CVE-2013-2596}
  - [s390] add dummy io_remap_pfn_range() to asm/pgtable.h (Jacob Tanenbaum) [1035241 1035242] {CVE-2013-2596}
  - [mm] add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035241 1035242] {CVE-2013-2596}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.53.2.el6]
changelog:
  - [infiniband] core: Prevent integer overflow in ib_umem_get address arithmetic (Doug Ledford) [1181179 1179327] {CVE-2014-8159}


author: Rafael Aquini <aquini@redhat.com> [2.6.32-430.el6]
changelog:
  - [x86] Revert "efi: be more paranoid about available space when creating variables" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efivars: firmware bug workarounds should be in platform code" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Export efi_query_variable_store() for efivars.ko" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Check max_size only if it is non-zero" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Distinguish between "remaining space" and actually used space" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Implement efi_no_storage_paranoia parameter" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "Modify UEFI anti-bricking code" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Fix dummy variable buffer allocation" (Rafael Aquini) [1012370 1023173]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.1.1.el6]
changelog:
  - [fs] call d_op->d_hash on last component of umount path (Abhijith Das) [1145193 1129712]
  - [usb] serial: memory corruption flaw (Jacob Tanenbaum) [1141401 1141402] {CVE-2014-3185}
  - [char] ipmi: Clear drvdata when interface is removed (Tony Camuso) [1149578 1135910]
  - [char] ipmi: init shadow_ipmi_smi_handlers early in ipmi_si_intf (Tony Camuso) [1149580 1139464]
  - [net] ipsec: update MAX_AH_AUTH_LEN to support sha512 (Herbert Xu) [1149083 1140103]
  - [net] revert "bridge: Set vlan_features to allow offloads on vlans" (Vlad Yasevich) [1144442 1121991]
  - [netdrv] virtio-net: fix big buffer receiving (Jason Wang) [1148693 1144073]
  - [netdrv] tg3: prevent ifup/ifdown during PCI error recovery (Ivan Vecera) [1142570 1117009]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.1.2.el6]
changelog:
  - [x86] kvm: fix PIT timer race condition (mguzik) [1149592 1149593] {CVE-2014-3611}
  - [x86] kvm: vmx: handle invept and invvpid vm exits gracefull (mguzik) [1144826 1144837 1144827 1144838] {CVE-2014-3646 CVE-2014-3645}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.1.3.el6]
changelog:
  - Revert: [net] revert "bridge: Set vlan_features to allow offloads on vlans" (Vlad Yasevich) [1144442 1121991]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.11.1.el6]
changelog:
  - [virt] kvm: excessive pages un-pinning in kvm_iommu_map error path (Jacob Tanenbaum) [1156520 1156521] {CVE-2014-8369}
  - [x86] crypto: Add support for 192 & 256 bit keys to AESNI RFC4106 (Jarod Wilson) [1184332 1176211]
  - [block] nvme: Clear QUEUE_FLAG_STACKABLE (David Milburn) [1180555 1155715]
  - [net] netfilter: conntrack: disable generic tracking for known protocols (Daniel Borkmann) [1182071 1114697] {CVE-2014-8160}
  - [xen] pvhvm: Fix vcpu hotplugging hanging (Vitaly Kuznetsov) [1179343 1164278]
  - [xen] pvhvm: Don't point per_cpu(xen_vpcu, 33 and larger) to shared_info (Vitaly Kuznetsov) [1179343 1164278]
  - [xen] enable PVHVM VCPU placement when using more than 32 CPUs (Vitaly Kuznetsov) [1179343 1164278]
  - [xen] support large numbers of CPUs with vcpu info placement (Vitaly Kuznetsov) [1179343 1164278]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.12.2.el6]
changelog:
  - [infiniband] core: Prevent integer overflow in ib_umem_get address arithmetic (Doug Ledford) [1181173 1179327] {CVE-2014-8159}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.15.1.el6]
changelog:
  - [netdrv] ixgbe: remove CIAA/D register reads from bad VF check (John Greene) [1196312 1156061]
  - [pci] Make FLR and AF FLR reset warning messages different (Myron Stowe) [1192365 1184540]
  - [pci] Fix unaligned access in AF transaction pending test (Myron Stowe) [1192365 1184540]
  - [pci] Merge multi-line quoted strings (Myron Stowe) [1192365 1184540]
  - [pci] Wrong register used to check pending traffic (Myron Stowe) [1192365 1184540]
  - [pci] Add pci_wait_for_pending() -- refactor pci_wait_for_pending_transaction() (Myron Stowe) [1192365 1184540]
  - [pci] Use pci_wait_for_pending_transaction() instead of for loop (Myron Stowe) [1192365 1184540]
  - [pci] Add pci_wait_for_pending_transaction() (Myron Stowe) [1192365 1184540]
  - [pci] Wait for pending transactions to complete before 82599 FLR (Myron Stowe) [1192365 1184540]
  - [scsi] storvsc: fix a bug in storvsc limits (Vitaly Kuznetsov) [1196532 1174168]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-504.16.1.el6]
changelog:
  - [fs] gfs2: Move gfs2_file_splice_write outside of #ifdef (Robert S Peterson) [1198329 1193559]
  - [security] keys: close race between key lookup and freeing (Radomir Vrbovsky) [1179849 1179850] {CVE-2014-9529}
  - [net] sctp: fix slab corruption from use after free on INIT collisions (Daniel Borkmann) [1196587 1135425] {CVE-2015-1421}
  - [fs] gfs2: Allocate reservation during splice_write (Robert S Peterson) [1198329 1193559]
  - [fs] nfs: Be less aggressive about returning delegations for open files (Steve Dickson) [1196314 1145334]
  - [fs] nfs: Avoid PUTROOTFH when managing leases (Benjamin Coddington) [1196313 1143013]
  - [crypto] testmgr: mark rfc4106(gcm(aes)) as fips_allowed (Jarod Wilson) [1194983 1185395]
  - [crypto] Extending the RFC4106 AES-GCM test vectors (Jarod Wilson) [1194983 1185395]
  - [char] raw: Return short read or 0 at end of a raw device, not EIO (Jeff Moyer) [1195747 1142314]
  - [scsi] hpsa: Use local workqueues instead of system workqueues - part1 (Tomas Henzl) [1193639 1134115]
  - [x86] kvm: vmx: invalid host cr4 handling across vm entries (Jacob Tanenbaum) [1153326 1153327] {CVE-2014-3690}
  - [fs] isofs: Fix unchecked printing of ER records (Radomir Vrbovsky) [1180481 1180492] {CVE-2014-9584}
  - [fs] bio: fix argument of __bio_add_page() for max_sectors > 0xffff (Fam Zheng) [1198428 1166763]
  - [media] ttusb-dec: buffer overflow in ioctl (Alexander Gordeev) [1170971 1167115] {CVE-2014-8884}
  - [kernel] trace: insufficient syscall number validation in perf and ftrace subsystems (Jacob Tanenbaum) [1161567 1161568] {CVE-2014-7826 CVE-2014-7825}
  - [fs] nfs: Fix a delegation callback race (Dave Wysochanski) [1187639 1149831]
  - [fs] nfs: Don't use the delegation->inode in nfs_mark_return_delegation() (Dave Wysochanski) [1187639 1149831]
  - [infiniband] ipoib: don't queue a work struct up twice (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: make sure we reap all our ah on shutdown (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: cleanup a couple debug messages (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: flush the ipoib_workqueue on unregister (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: fix ipoib_mcast_restart_task (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: fix race between mcast_dev_flush and mcast_join (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: remove unneeded locks (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: don't restart our thread on ENETRESET (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: Handle -ENETRESET properly in our callback (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: make delayed tasks not hold up everything (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: Add a helper to restart the multicast task (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: fix IPOIB_MCAST_RUN flag usage (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [infiniband] ipoib: Remove unnecessary port query (Doug Ledford) [1187664 1187666 1184072 1159925]
  - [x86] kvm: Avoid pagefault in kvm_lapic_sync_to_vapic (Paolo Bonzini) [1192055 1116398]
  - [s390] kernel: fix cpu target address of directed yield (Hendrik Brueckner) [1188339 1180061]
  - [mm] memcg: do not allow task about to OOM kill to bypass the limit (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] memcg: do not declare OOM from __GFP_NOFAIL allocations (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [fs] buffer: move allocation failure loop into the allocator (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] memcg: handle non-error OOM situations more gracefully (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] memcg: do not trap chargers with full callstack on OOM (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] memcg: rework and document OOM waiting and wakeup (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] memcg: enable memcg OOM killer only for user faults (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [x86] mm: finish user fault error path with fatal signal (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [mm] pass userspace fault flag to generic fault handler (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [s390] mm: do not invoke OOM killer on kernel fault OOM (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [powerpc] mm: remove obsolete init OOM protection (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [powerpc] mm: invoke oom-killer from remaining unconverted page fault handlers (Johannes Weiner) [1198110 1088334] {CVE-2014-8171}
  - [security] selinux: Permit bounded transitions under NO_NEW_PRIVS or NOSUID (Denys Vlasenko) [1104567 1104568] {CVE-2014-3215}
  - [security] Add PR_<GET, SET>_NO_NEW_PRIVS to prevent execve from granting privs (Denys Vlasenko) [1104567 1104568] {CVE-2014-3215}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.23.2.el6]
changelog:
  - [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Seth Jennings) [1202860 1185166] {CVE-2015-1805}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.23.3.el6]
changelog:
  - [netdrv] bonding: fix locking in enslave failure path (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: primary_slave & curr_active_slave are not cleaned on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: vlans don't get deleted on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: mc addresses don't get deleted on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: IFF_BONDING is not stripped on enslave failure (Nikolay Aleksandrov) [1222483 1221856]
  - [netdrv] bonding: fix error handling if slave is busy v2 (Nikolay Aleksandrov) [1222483 1221856]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.23.4.el6]
changelog:
  - [crypto] drbg: fix maximum value checks on 32 bit systems (Herbert Xu) [1225950 1219907]
  - [crypto] drbg: remove configuration of fixed values (Herbert Xu) [1225950 1219907]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.3.1.el6]
changelog:
  - [s390] zcrypt: toleration of new crypto adapter hardware (Hendrik Brueckner) [1158311 1134984]
  - [s390] zcrypt: support for extended number of ap domains (Hendrik Brueckner) [1158311 1134984]
  - [md] dm-thin: fix potential for infinite loop in pool_io_hints (Mike Snitzer) [1161420 1161421 1142773 1145230]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.3.2.el6]
changelog:
  - [md] dm-thin: fix pool_io_hints to avoid looking at max_hw_sectors (Mike Snitzer) [1161420 1161421 1142773 1145230]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.30.2.el6]
changelog:
  - [crypto] rng: Remove krng (Herbert Xu) [1233512 1226418]
  - [crypto] drbg: Add stdrng alias and increase priority (Herbert Xu) [1233512 1226418]
  - [crypto] seqiv: Move IV seeding into init function (Herbert Xu) [1233512 1226418]
  - [crypto] eseqiv: Move IV seeding into init function (Herbert Xu) [1233512 1226418]
  - [crypto] chainiv: Move IV seeding into init function (Herbert Xu) [1233512 1226418]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-504.30.3.el6]
changelog:
  - [redhat] spec: Update dracut dependency to pull in drbg module (Frantisek Hrbata) [1241517 1241338]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.6.1.el6]
changelog:
  - [fs] ext4: don't count external journal blocks as overhead (Eric Sandeen) [1168504 1163811]
  - [net] sctp: fix NULL pointer dereference in af->from_addr_param on malformed packet (Daniel Borkmann) [1163090 1153980] {CVE-2014-7841}
  - [netdrv] e100: fix typo in MDI/MDI-X eeprom check in e100_phy_init (John Greene) [1165985 1156417]
  - [powerpc] Add smp_mb()s to arch_spin_unlock_wait() (Gustavo Duarte) [1165986 1136224]
  - [powerpc] Add smp_mb() to arch_spin_is_locked() (Gustavo Duarte) [1165986 1136224]
  - [kernel] cpuset: PF_SPREAD_PAGE and PF_SPREAD_SLAB should be atomic flags (Aaron Tomlin) [1165002 1045310]
  - [documentation] cpuset: Update the cpuset flag file (Aaron Tomlin) [1165002 1045310]
  - [alsa] control: Make sure that id->index does not overflow (Jacob Tanenbaum) [1149140 1117312] {CVE-2014-4656}
  - [alsa] control: Handle numid overflow (Jacob Tanenbaum) [1149140 1117312] {CVE-2014-4656}
  - [s390] mm: fix SIGBUS handling (Hendrik Brueckner) [1169433 1145070]
  - [fs] gfs2: fix bad inode i_goal values during block allocation (Abhijith Das) [1165001 1130684]
  - [md] dm-thin: fix pool_io_hints to avoid looking at max_hw_sectors (Mike Snitzer) [1161420 1161421 1142773 1145230]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.7.1.el6]
changelog:
  - [kernel] ipc/sem: Fully initialize sem_array before making it visible (Rik van Riel) [1172029 1165277]
  - [kernel] ipc/sem: synchronize semop and semctl with IPC_RMID (Rik van Riel) [1172029 1165277]
  - [kernel] ipc/sem: update sem_otime for all operations (Larry Woodman) [1172025 1168588]
  - [fs] fuse: prevent null nd panic on dentry revalidate (Brian Foster) [1172022 1162782]
  - [net] netfilter: ipset: timeout values corrupted on set resize (Marcelo Leitner) [1172764 1152754]
  - [net] netfilter: fix xt_TCPOPTSTRIP in forwarding path (Marcelo Leitner) [1172027 1135650]
  - [usb] ehci: Fix panic on hotplug race condition (Don Zickus) [1172024 1107010]
  - [usb] usb_wwan: replace release and disconnect with a port_remove hook (Stanislaw Gruszka) [1172030 1148615]
  - [x86] traps: stop using IST for #SS (Petr  Matousek) [1172810 1172811] {CVE-2014-9322}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.32-504.8.1.el6]
changelog:
  - [crypto] crc32c: Kill pointless CRYPTO_CRC32C_X86_64 option (Jarod Wilson) [1175509 1036212]
  - [crypto] testmgr: add larger crc32c test vector to test FPU path in crc32c_intel (Jarod Wilson) [1175509 1036212]
  - [crypto] tcrypt: Added speed test in tcrypt for crc32c (Jarod Wilson) [1175509 1036212]
  - [crypto] crc32c: Optimize CRC32C calculation with PCLMULQDQ instruction (Jarod Wilson) [1175509 1036212]
  - [crypto] crc32c: Rename crc32c-intel.c to crc32c-intel_glue.c (Jarod Wilson) [1175509 1036212]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-502.el6]
changelog:
  - [kernel] audit: audit_log_start running on auditd should not stop (Richard Guy Briggs) [1019898]
  - [kernel] audit: drop audit_cmd_lock in AUDIT_USER family of cases (Richard Guy Briggs) [1019898]
  - [security] selinux: call WARN_ONCE() instead of calling audit_log_start() (Richard Guy Briggs) [1019898]
  - [crypto] drbg: fix failure of generating multiple of 2**16 bytes (Herbert Xu) [1130529]
  - [x86] uv: Set n_lshift based on GAM_GR_CONFIG MMR for UV3 (George Beshers) [1096981]
  - [fs] nfs: Close another NFSv4 recovery race (Steve Dickson) [1093922]
  - [fs] nfs: Refactor _nfs4_open_and_get_state to set ctx->state (Steve Dickson) [1093922]
  - [fs] nfs: cleanup: pass the nfs_open_context to nfs4_do_open (Steve Dickson) [1093922]
  - [fs] sunrpc: Handle EPIPE in xprt_connect_status (Steve Dickson) [1130619]
  - [fs] sunrpc: Ensure xprt_connect_status handles all potential connection errors (Steve Dickson) [1130619]
  - [fs] sunrpc: Ensure that we handle ENOBUFS errors correctly (Steve Dickson) [1130619]
  - [fs] sunrpc: Ensure call_connect_status() deals correctly with SOFTCONN tasks (Steve Dickson) [1130619]
  - [fs] sunrpc: Ensure that call_connect times out correctly (Steve Dickson) [1130619]
  - [fs] sunrpc: Handle connect errors ECONNABORTED and EHOSTUNREACH (Steve Dickson) [1130619]
  - [fs] sunrpc: call_connect_status should recheck bind and connect status on error (Steve Dickson) [1130619]
  - [fs] sunrpc: Report network/connection errors correctly for SOFTCONN rpc tasks (Steve Dickson) [1130619]
  - [fs] ext3: Fix fdatasync() for files with only i_size changes (Eric Sandeen) [1127023]
  - [fs] gfs2: Change maxlen variables to size_t (Robert S Peterson) [1126899]
  - [mm] hugetlb: add cond_resched_lock() in return_unused_surplus_pages() (Motohiro Kosaki) [1129085]
  - [mm] hugetlb: fix softlockup when a large number of hugepages are freed (Motohiro Kosaki) [1129085]
  - [net] fix ipv4: match prefsrc when deleting routes (Jiri Benc) [1056443]
  - [net] bridge: explictly tag vlan-accelerated frames destined to the host (Vlad Yasevich) [1121991]
  - [net] ipv4: avoid parallel route cache gc executions (Hannes Frederic Sowa) [1121228]
  - [net] ipv4: move route garbage collector to work queue (Hannes Frederic Sowa) [1121228]
  - [net] ethtool: reallow ETHTOOL_SFLAGS to set TX/RX VLAN offloads (Michal Schmidt) [1134359]
  - [net] tcp: tsq: fix nonagle handling (Jiri Pirko) [1134401]
  - [kvm] iommu: fix the third parameter of kvm_iommu_put_pages (Radomir Vrbovsky) [1131953] {CVE-2014-3601}
  - [s390] sysinfo: convert /proc/sysinfo to seqfile (Hendrik Brueckner) [1130987]
  - [s390] con3215: fix hanging console issue (Hendrik Brueckner) [1130986]
  - [s390] dasd: validate request size before building CCW/TCW request (Hendrik Brueckner) [1130988]
  - [scsi] revert "fc: ensure scan_work isn't active when freeing fc_rport" (Maurizio Lombardi) [1135888]
  - [edac] sb_edac: Modify H/W event reporting policy (Rui Wang) [1129067]
  - [alsa] control: Fix replacing user controls (Denys Vlasenko) [1117322] {CVE-2014-4654 CVE-2014-4655}
  - [netdrv] bnx2x: Fix RSS on big-endian (Michal Schmidt) [1119291]
  - [netdrv] bnx2x: Utilize FW 7.10.51 (Michal Schmidt) [1119291]
  - [netdrv] firmware: add bnx2x FW 7.10.51 (Michal Schmidt) [1119291]
  - [security] selinux: fix a problem with IPv6 traffic denials in selinux_ip_postroute() (Paul Moore) [1130082]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-503.el6]
changelog:
  - [kernel] futex: Fix errors in nested key ref-counting (Denys Vlasenko) [1094458] {CVE-2014-0205}
  - [fs] vfs: add missing __putname() in patch_mountpoint() (Ian Kent) [1135165]
  - [fs] nfs: Don't busy-wait on SIGKILL in __nfs_iocounter_wait (Benjamin Coddington) [1113269]
  - [netdrv] mlx4: add vlan_rx_register to the master ops (Doug Ledford) [1133506]
  - [infiniband] ocrdma: use right macro in query ah (Doug Ledford) [1133506]
  - [infiniband] ocrdma: resolve L2 address when creating user AH (Doug Ledford) [1133506]
  - [infiniband] ocrdma: get vlan tag from ib_qp_attrs (Doug Ledford) [1133506]
  - [infiniband] ocrdma: add default gid at index 0 (Doug Ledford) [1133506]
  - [infiniband] ocrdma: obtain sl from deivce structure (Doug Ledford) [1133506]
  - [infiniband] ocrdma: do not skip setting deffered_arm (Doug Ledford) [1133506]
  - [infiniband] ocrdma: Initialize the GID table while registering the device (Doug Ledford) [1133506]
  - [infiniband] ocrdma: Increase the size of STAG array in dev structure to 16K (Doug Ledford) [1133506]
  - [infiniband] ocrdma: Add missing adapter mailbox opcodes (Doug Ledford) [1133506]
  - [infiniband] ocrdma: Return proper value for max_mr_size (Doug Ledford) [1133506]
  - [infiniband] ocrdma: Allow only SEND opcode in case of UD QPs (Doug Ledford) [1133506]
  - [infiniband] ocrdma: Avoid reporting wrong completions in case of error CQEs (Doug Ledford) [1133506]
  - [infiniband] ocrdma: Query and initalize the PFC SL (Doug Ledford) [1133506]
  - [infiniband] ocrdma: Avoid posting DPP requests for RDMA READ (Doug Ledford) [1133506]
  - [infiniband] core: When marsheling uverbs path, clear unused fields (Amir Vadai) [1130394]
  - [infiniband] mlx4: Avoid executing gid task when device is being removed (Amir Vadai) [1130394]
  - [infiniband] mlx4: Fix lockdep splat for the iboe lock (Amir Vadai) [1130394]
  - [infiniband] mlx4: Get upper dev addresses as RoCE GIDs when port comes up (Amir Vadai) [1130394]
  - [infiniband] mlx4: Reorder steps in RoCE GID table initialization (Amir Vadai) [1130394]
  - [infiniband] mlx4: Don't duplicate the default RoCE GID (Amir Vadai) [1130394]
  - [infiniband] mlx4: Avoid null pointer dereference in mlx4_ib_scan_netdevs() (Amir Vadai) [1130394]
  - [netdrv] b43: fix the wrong assignment of status.freq in b43_rx() (John Greene) [1132160]
  - [lib] lzo: properly check for overruns (Denys Vlasenko) [1113901] {CVE-2014-4608}
  - [lib] lzo: Update LZO compression to current upstream version (Denys Vlasenko) [1113901] {CVE-2014-4608}
  - [drm] nouveau: add more checks to PRAMIN image fetching (Ben Skeggs) [1133695 1076733]
  - [drm] nouveau: allow non-optimus setups to load vbios from acpi (Ben Skeggs) [1133695 1076733]
  - [drm] nouveau: fix a potential NULL deref in the PROM shadowing function (Ben Skeggs) [1133695 1076733]
  - [drm] nouveau: fetch the vbios from PROM using only aligned 32-bit accesses (Ben Skeggs) [1133695 1076733]
  - [net] Revert "introduce netif_skb_dev_features" (Florian Westphal) [1029603]
  - [net] revert "ip, ipv6: handle gso skbs in forwarding path" (Florian Westphal) [1029603]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-504.el6]
changelog:
  - [netdrv] revert "cxgb4: set skb->rxhash" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Use netif_set_real_num_rx/tx_queues()" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Turn on delayed ACK" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Use ULP_MODE_TCPDDP" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Debugfs dump_qp() updates" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Drop peer_abort when no endpoint found" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Detect DB FULL events and notify RDMA ULD" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Common platform specific changes for DB Drop Recovery" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: DB Drop Recovery for RDMA and LLD queues" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Add debugfs RDMA memory stats" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Add DB Overflow Avoidance" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: DB Drop Recovery for RDMA and LLD queues" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Use vmalloc() for debugfs QP dump" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Remove kfifo usage" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Include vmalloc.h for vmalloc and vfree" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: set maximal number of default RSS queues" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Remove duplicate register definitions" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Update RDMA/cxgb4 due to macro definition removal in cxgb4 driver" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Move dereference below NULL test" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix incorrect values for MEMWIN*_APERTURE and MEMWIN*_BASE" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add functions to read memory via PCIE memory window" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Code cleanup to enable T4 Configuration File support" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add support for T4 configuration file" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add support for T4 hardwired driver configuration settings" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Don't attempt to upgrade T4 firmware when cxgb4 will end up as a slave" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix error handling in create_qp()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Dynamically allocate memory in t4_memory_rw() and get_vpd_params()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix build error due to missing linux/vmalloc.h include" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: allocate enough data in t4_memory_rw()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Address various sparse warnings" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Remove unnecessary #ifdef condition" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Don't free chunk that we have failed to allocate" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix unable to get UP event from the LLD" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix initialization of SGE_CONTROL register" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: use WARN" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Chelsio FCoE offload driver submission" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: remove __dev* attributes" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add T4 filter support" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add LE hash collision bug fix path in LLD driver" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix LE hash collision bug for active open connection" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix LE hash collision bug for passive open connection" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix bug for active and passive LE hash collision path" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Use netdev_<level> and pr_<level>" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix incorrect PFVF CMASK" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Abort connections that receive unexpected streaming mode data" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Abort connections when moving to ERROR state" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Display streaming mode error only if detected in RTS" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Keep QP referenced until TID released" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Always log async errors" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Only log rx_data warnings if cpl status is non-zero" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix endpoint timeout race condition" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Don't reconnect on abort for mpa_rev 1" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Don't wakeup threads for MPAv2" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Insert hwtid in pass_accept_req instead in pass_establish" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Address sparse warnings" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: "cookie" can stay in host endianness" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix cast warning" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Allow for backward compatibility with new VPD scheme" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add register definations for T5" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add macros, structures and inline functions for T5" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Initialize T5" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Dump T5 registers" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add T5 write combining support" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Enable doorbell drop recovery only for T4 adapter" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add T5 debugfs support" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add T5 PCI ids" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Update driver version and description" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Disable SR-IOV support for PF4-7 for T5" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Add Support for Chelsio T5 adapter" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Turn off db coalescing when RDMA QPs are in use" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Add module_params to enable DB FC & Coalescing on T5" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Use DSGLs for fastreg and adapter memory writes for T5" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Map pbl buffers for dma if using DSGL" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Bump tcam_full stat and WR reply timeout" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix onchip queue support for T5" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix error return code in create_qp()" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix SQ allocation when on-chip SQ is disabled" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix pci_device_id structure initialization with correct PF number" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Support CPL_SGE_EGR_UPDATEs encapsulated in a CPL_FW4_MSG" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Support CPL_SGE_EGR_UPDATEs encapsulated in a CPL_FW4_MSG" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: fix error recovery when t4_fw_hello returns a positive value" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Force uninitialized state if FW_ON_ADAPTER is < FW_VERSION and we're the MASTER_PF" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Correct comparisons and calculations using skb->tail and skb-transport_header" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Do not set net_device::dev_id to VI index" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix stack info leak in c4iw_create_qp()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add routines to create and remove listening IPv6 servers" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add CLIP support to store compressed IPv6 address" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cma: Add IPv6 support for iWARP" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Add support for active and passive open connection with IPv6 address" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Handle newer firmware changes" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Use correct bit shift macros for vlan filter tuples" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix QP flush logic" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix accounting for unsignaled SQ WRs to deal with wrap" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Set arp error handler for PASS_ACCEPT_RPL messages" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Always do GTS write if cidx_inc == CIDXINC_MASK" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Advertise ~0ULL as max MR size" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Issue RI.FINI before closing when entering TERM" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: remove workqueue when driver registration fails" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: remove unnecessary pci_set_drvdata()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cgxb4: remove duplicate include in cxgb4.h" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Much cleaner implementation of is_t4()/is_t5()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: added much cleaner implementation of is_t4()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add new scheme to update T4/T5 firmware" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix formatting of physical address" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Make _c4iw_write_mem_dma() static" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: calls skb_set_hash" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Reserve stid 0 for T4/T5 adapters" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Include TCP as protocol when creating server filters" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Assign filter server TIDs properly" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Account for stid entries properly in case of IPv6" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add API to correctly calculate tuple fields" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: make functions static and remove dead code" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Calculate the filter server TID properly" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Server filters are supported only for IPv4" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Use cxgb4_select_ntuple to correctly calculate ntuple fields" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: allow large buffer size to have page size" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Changed FW check version to match FW binary version" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: silence shift wrapping static checker warning" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Avoid disabling PCI device for towice" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Don't retrieve stats during recovery" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix gcc warning on 32-bit arch" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix referencing freed adapter" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Add missing neigh_release in LE-Workaround path" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Use pci_enable_msix_range() instead of pci_enable_msix()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add support to recognize 40G links" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Print adapter VPD Part Number instead of Engineering Change field" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Allow >10G ports to have multiple queues" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: LE-Workaround is not atomic in firmware" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Query firmware for T5 ULPTX MEMWRITE DSGL capabilities" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Remove unused registers and add missing ones" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Don't assume LSO only uses SGL path in t4_eth_xmit()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add more PCI device ids" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cgxb4: Stop using ethtool SPEED_* constants" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: use remove handler as shutdown handler" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix some small bugs in t4_sge_init_soft() when our Page Size is 64KB" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add code to dump SGE registers when hitting idma hangs" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Rectify emitting messages about SGE Ingress DMA channels being potentially stuck" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Updates for T5 SGE's Egress Congestion Threshold" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Calculate len properly for LSO path" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Treat CPL_ERR_KEEPALV_NEG_ADVICE as negative advice" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Doorbell Drop Avoidance Bug Fixes" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix underflows in c4iw_create_qp()" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix four byte info leak in c4iw_create_cq()" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Cap CQ size at T4_MAX_IQ_SIZE" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Allow loopback connections" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Always release neigh entry" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix incorrect BUG_ON conditions" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Mind the sq_sig_all/sq_sig_type QP attributes" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Default peer2peer mode to 1" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Save the correct map length for fast_reg_page_lists" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Don't leak skb in c4iw_uld_rx_handler()" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix possible memory leak in RX_PKT processing" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Ignore read reponse type 1 CQEs" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Connect_request_upcall fixes" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Update snd_seq when sending MPA messages" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Call dev_kfree/consume_skb_any instead of kfree_skb" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxbg4: Remove addressof casts to same type" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Adds device ID for few more Chelsio Adapters" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: set error code on kmalloc() failure" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Lock around accept/reject downcalls" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Drop RX_DATA packets if the endpoint is gone" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: rx_data() needs to hold the ep mutex" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Disable DSGL use by default" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Use the BAR2/WC path for kernel QPs and T5 devices" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Endpoint timeout fixes" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: rmb() after reading valid gen bit" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: SQ flush fix" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Max fastreg depth depends on DSGL support" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Use pr_warn_ratelimited" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Initialize reserved fields in a FW work request" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Add missing debug stats" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Use uninitialized_var()" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix over-dereference when terminating" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Save the correct mac addr for hw-loopback connections in the L2T" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: use the correct max size for firmware flash" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix endpoint mutex deadlocks" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Force T5 connections to use TAHOE congestion control" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Only allow kernel db ringing for T4 devs" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Update Kconfig to include Chelsio T5 adapter" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Decode PCIe Gen3 link speed" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix memory leaks in c4iw_alloc() error paths" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Fix vlan support" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: Add missing padding at end of struct c4iw_create_cq_resp" (Prarit Bhargava) [1140743]
  - [infiniband] revert "cxgb4: add missing padding at end of struct c4iw_alloc_ucontext_resp" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Decode the firmware port and module type a bit more for ethtool" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Check if rx checksum offload is enabled, while reading hardware calculated checksum" (Prarit Bhargava) [1140743]
  - [netdrv] revert "iw_cxgb4: Allocate and use IQs specifically for indirect interrupts" (Prarit Bhargava) [1140743]
  - [netdrv] revert "iw_cxgb4: Choose appropriate hw mtu index and ISS for iWARP connections" (Prarit Bhargava) [1140743]
  - [netdrv] revert "iw_cxgb4: don't truncate the recv window size" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Change default Interrupt Holdoff Packet Count Threshold" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fixes cxgb4 probe failure in VM when PF is exposed through PCI Passthrough" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Use FW interface to get BAR0 value" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Replaced the backdoor mechanism to access the HW memory with PCIe Window method" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Adds device ID for few more Chelsio T4 Adapters" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: remove unnecessary null test before debugfs_remove_recursive" (Prarit Bhargava) [1140743]
  - [netdrv] revert "iw_cxgb4: Detect Ing. Padding Boundary at run-time" (Prarit Bhargava) [1140743]
  - [netdrv] revert "iw_cxgb4: use firmware ord/ird resource limits" (Prarit Bhargava) [1140743]
  - [netdrv] revert "iw_cxgb4: display TPTE on errors" (Prarit Bhargava) [1140743]
  - [netdrv] revert "iw_cxgb4: work request logging feature" (Prarit Bhargava) [1140743]
  - [netdrv] revert "iw_cxgb4: Move common defines to cxgb4" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Add the MC1 registers to read in the interrupt handler" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fixed incorrect check for memory operation in t4_memory_rw" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: only free allocated fls" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Fix possible race condition in cleanup" (Prarit Bhargava) [1140743]
  - [infiniband] revert "iw_cxgb4: fix for 64-bit integer division" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Add core T4 PCI-E SR-IOV Virtual Function hardware definitions and device communication code" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Add T4 Virtual Function Scatter-Gather Engine DMA code" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Add main T4 PCI-E SR-IOV Virtual Function driver for cxgb4vf" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Add new Makefile for T4 PCI-E SR-IOV Virtual Function driver cxgb4vf" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Stitch new T4 PCI-E SR-IOV Virtual Function driver into the build" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Remove obsolete comment about the lack of a TX Timer Callback" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Use correct shift factor for extracting the SGE DMA Ingress Padding Boundary" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: remove obsolete DECLARE_PCI_UNMAP_ADDR usage" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Implement "Unhandled Interrupts" statistic" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: fix TX Queue restart" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: fix SGE resource resource deallocation bug" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Fix off-by-one error checking for the end of the mailbox delay array" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Fix bug where we were only allocating one queue in MSI mode" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: do not use PCI resources before pci_enable_device()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Use netif_set_real_num_rx/tx_queues()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: make single bit signed bitfields unsigned" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: remove call to stop TX queues at load time" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: don't implement trivial (and incorrect) ndo_select_queue()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: fix bug in Generic Receive Offload" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: fix some errors in Gather List to skb conversion" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: flesh out PCI Device ID Table" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Fail open if link_start() fails" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: add call to Firmware to reset VF State" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: minor comment/symbolic name cleanup" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: add ethtool statistics for GRO" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: fix up "Section Mismatch" compiler warning" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Advertise NETIF_F_TSO_ECN" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: fix setting unicast/multicast addresses" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Ingress Queue Entry Size needs to be 64 bytes" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: fix mailbox data/control coherency domain race" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: recover from failure in cxgb4vf_open()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Check driver parameters in the right place" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Behave properly when CONFIG_DEBUG_FS isn't defined" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Quiesce Virtual Interfaces on shutdown" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Use defined Mailbox Timeout" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: improve Kconfig dependencies" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: do vlan cleanup" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: remove __dev* attributes" (Prarit Bhargava) [1140743]
  - [netdrv] revert "chelsio: Use netdev_<level> and pr_<level>" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Fix extraction of cpl_rx_pkt from the response queue descriptor" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Fix VLAN extraction counter increment" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Add support for Chelsio T5 adapter" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Support CPL_SGE_EGR_UPDATEs encapsulated in a CPL_FW4_MSG" (Prarit Bhargava) [1140743]
  - [netdrv] revert "net: cxgb4vf: Staticize local symbols" (Prarit Bhargava) [1140743]
  - [netdrv] revert "net: cxgb4vf: remove unnecessary pci_set_drvdata()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "net: cxgb4vf: use DEFINE_PCI_DEVICE_TABLE" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: added much cleaner implementation of is_t4()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: make functions static and remove dead code" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Remove superfluous call to pci_disable_msix()" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4vf: Adds device Id for few more Chelsio adapters" (Prarit Bhargava) [1140743]
  - [netdrv] revert "cxgb4: Export symbols required by cxgb4i for ipv6 support and required defines" (Prarit Bhargava) [1140743]
  - [scsi] revert "libcxgbi: Add ipv6 api to driver" (Prarit Bhargava) [1140743]
  - [scsi] revert "cxgb4i: Add ipv6 code to driver, call into libcxgbi ipv6 api" (Prarit Bhargava) [1140743]
  - [scsi] revert "cxgb4i: Fix ipv6 build failure caught with randconfig" (Prarit Bhargava) [1140743]
  - [scsi] revert "cxgb4i: remove spurious use of rcu" (Prarit Bhargava) [1140743]
  - [scsi] revert "cxgb4i: Guard ipv6 code with a config check" (Prarit Bhargava) [1140743]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-573.el6]
changelog:
  - [security] selinux: don't waste ebitmap space when importing NetLabel categories (Paul Moore) [1130197]
  - [x86] Revert "Add driver auto probing for x86 features v4" (Prarit Bhargava) [1231280]
  - [net] bridge: netfilter: don't call iptables on vlan packets if sysctl is off (Florian Westphal) [1236551]
  - [net] ebtables: Allow filtering of hardware accelerated vlan frames (Florian Westphal) [1236551]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.10.1.el6]
changelog:
  - [sound] Fix USB audio issues (wrong URB_ISO_ASAP semantics) (Jaroslav Kysela) [1273916 1255071]
  - [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
  - [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
  - [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275927 1273463] {CVE-2015-7872}
  - [ipc] Initialize msg/shm IPC objects before doing ipc_addid() (Stanislav Kozina) [1271504 1271505] {CVE-2015-7613}
  - [fs] vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
  - [fs] dcache: Handle escaped paths in prepend_path (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
  - [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]
  - [hid] fix unused rsize usage (Don Zickus) [1268203 1256568]
  - [hid] fix data access in implement() (Don Zickus) [1268203 1256568]
  - [fs] NFS: Hold i_lock in nfs_wb_page_cancel() while locking a request (Benjamin Coddington) [1273721 1135601]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.11.1.el6]
changelog:
  - [kvm] svm: unconditionally intercept DB (Paolo Bonzini) [1279467 1279468] {CVE-2015-8104}
  - [x86] virt: guest to host DoS by triggering an infinite loop in microcode (Paolo Bonzini) [1277557 1277559] {CVE-2015-5307}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.16.1.el6]
changelog:
  - [net] bonding: propagate LRO disable to slave devices (Jarod Wilson) [1287993 1259008]
  - [net] Move bonding headers under include/net (Jarod Wilson) [1287993 1259008]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.17.1.el6]
changelog:
  - [kernel] hrtimer: add force_hrtimer_reprogram kernel parameter (Prarit Bhargava) [1292082 1285142]
  - [mm] fix anon_vma->degree underflow in anon_vma endless growing prevention (Jerome Marchand) [1285693 1151823]
  - [mm] fix corner case in anon_vma endless growing prevention (Jerome Marchand) [1285693 1151823]
  - [mm] prevent endless growth of anon_vma hierarchy (Jerome Marchand) [1285693 1151823]
  - [mm] avoid anon_vma_chain allocation under anon_vma lock (Jerome Marchand) [1285693 1151823]
  - [mm] avoid repeated anon_vma lock/unlock sequences in unlink_anon_vmas() (Jerome Marchand) [1285693 1151823]
  - [mm] avoid repeated anon_vma lock/unlock sequences in anon_vma_clone() (Jerome Marchand) [1285693 1151823]
  - [scsi] only re-lock door after EH on devices that were reset (Ewan Milne) [1282464 995234]
  - [fs] fs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1282621 1241030]
  - [fs] revert 'vfs: Unhash and evict unused children dentries after rmdir' (Carlos Maiolino) [1282621 1241030]
  - [netdrv] macvtap: fix network header pointer for VLAN tagged pkts (Ivan Vecera) [1280206 1213846]
  - [net] Fix vlan_get_protocol for stacked vlan (Ivan Vecera) [1280206 1213846]
  - [scsi] ipr: Fix incorrect trace indexing (Gustavo Duarte) [1280211 1209543]
  - [scsi] ipr: Fix invalid array indexing for HRRQ (Gustavo Duarte) [1280211 1209543]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-573.18.1.el6]
changelog:
  - [netdrv] bonding: "primary_reselect" with "failure" is not working properly (Jarod Wilson) [1295924 1290672]
  - [net] netpoll: Close race condition between poll_one_napi and napi_disable (Neil Horman) [1295370 1252212]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.20.1.el6]
changelog:
  - [sched] kernel: sched: Fix nohz load accounting -- again (Rafael Aquini) [1300349 1167755]
  - [sched] kernel: sched: Move sched_avg_update to update_cpu_load (Rafael Aquini) [1300349 1167755]
  - [sched] kernel: sched: Cure more NO_HZ load average woes (Rafael Aquini) [1300349 1167755]
  - [sched] kernel: sched: Cure load average vs NO_HZ woes (Rafael Aquini) [1300349 1167755]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.21.1.el6]
changelog:
  - [fs] pipe: fix offset and len mismatch on pipe_iov_copy_to_user failure (Seth Jennings) [1310148 1302223] {CVE-2016-0774}
  - [fs] gfs2: Add missing else in trans_add_meta/data (Robert S Peterson) [1304332 1267995]
  - [fs] fs-cache: Synchronise object death state change vs operation submission (David Howells) [1308471 1096893]
  - [fs] fs-cache: Reduce cookie ref count if submit fails (David Howells) [1308471 1096893]
  - [mm] memcg: oom_notify use-after-free fix (Rafael Aquini) [1302763 1294400]
  - [x86] fix corruption of XMM registers when interrupt handlers use FPU (Mikulas Patocka) [1298994 1259023]
  - [net] tcp: honour SO_BINDTODEVICE for TW_RST case too (Florian Westphal) [1303044 1292300]
  - [net] add inet_sk_transparent() helper (Florian Westphal) [1303044 1292300]
  - [net] ipv6: tcp_ipv6 policy route issue (Florian Westphal) [1303044 1292300]
  - [net] ipv6: reuse rt6_need_strict (Florian Westphal) [1303044 1292300]
  - [net] tcp: resets are misrouted (Florian Westphal) [1303044 1292300]
  - [net] tcp: tcp_v4_send_reset: binding oif to iif in no sock case (Florian Westphal) [1303044 1292300]
  - [crypto] api: Only abort operations on fatal signal (Herbert Xu) [1296014 1272314]
  - [crypto] testmgr: don't use interruptible wait in tests (Herbert Xu) [1296014 1272314]
  - [kernel] sched: add wait_for_completion_killable_timeout (Herbert Xu) [1296014 1272314]
  - [net] sctp: add routing output fallback (Xin Long) [1307073 1229124]
  - [net] sctp: fix dst leak (Xin Long) [1307073 1229124]
  - [net] sctp: fix src address selection if using secondary addresses (Xin Long) [1307073 1229124]
  - [net] sctp: reduce indent level on sctp_v4_get_dst (Xin Long) [1307073 1229124]
  - [scsi] hpsa: Update driver revision to RH5 (Joseph Szczypek) [1306192 1244959]
  - [scsi] hpsa: fix issues with multilun devices (Joseph Szczypek) [1306192 1244959]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.22.1.el6]
changelog:
  - [mm] always decrement anon_vma degree when the vma list is empty (Jerome Marchand) [1318364 1309898]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.24.1.el6]
changelog:
  - [sched] fix KABI break (Seth Jennings) [1314878 1230310]
  - [sched] fair: Test list head instead of list entry in throttle_cfs_rq (Seth Jennings) [1314878 1230310]
  - [sched] sched,perf: Fix periodic timers (Seth Jennings) [1314878 1230310]
  - [sched] sched: debug: Remove the cfs bandwidth timer_active printout (Seth Jennings) [1314878 1230310]
  - [sched] Cleanup bandwidth timers (Seth Jennings) [1314878 1230310]
  - [sched] sched: core: Use hrtimer_start_expires (Seth Jennings) [1314878 1230310]
  - [sched] fair: Fix unlocked reads of some cfs_b->quota/period (Seth Jennings) [1314878 1230310]
  - [sched] Fix potential near-infinite distribute_cfs_runtime loop (Seth Jennings) [1314878 1230310]
  - [sched] fair: Fix tg_set_cfs_bandwidth deadlock on rq->lock (Seth Jennings) [1314878 1230310]
  - [sched] Fix hrtimer_cancel/rq->lock deadlock (Seth Jennings) [1314878 1230310]
  - [sched] Fix cfs_bandwidth misuse of hrtimer_expires_remaining (Seth Jennings) [1314878 1230310]
  - [sched] Refine the code in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
  - [sched] Update rq clock earlier in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
  - [block] Fix q_suspended logic error for io submission (David Milburn) [1314209 1227342]
  - [block] nvme: No lock while DMA mapping data (David Milburn) [1314209 1227342]
  - [netdrv] ixgbe: finish ixgbe: Update ixgbe to use new vlan accleration (John Greene) [1315706 1249244]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.25.1.el6]
changelog:
  - [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
  - [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
  - [fs] anon_inodes implement dname (Aristeu Rozanski) [1322707 1296019]
  - [fs] xfs: Avoid pathological backwards allocation (Bill O'Donnell) [1320031 1302777]
  - [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Jacob Tanenbaum) [1297421 1297422] {CVE-2015-8767}
  - [net] udp: move logic out of udp[46]_ufo_send_check (Sabrina Dubroca) [1319276 1299975]
  - [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1315696 1309241]
  - [md] raid10: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
  - [md] raid1: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
  - [md] raid10: submit_bio_wait returns 0 on success (Jes Sorensen) [1320863 1273546]
  - [md] raid1: submit_bio_wait() returns 0 on success (Jes Sorensen) [1320863 1273546]
  - [md] crash in md-raid1 and md-raid10 due to incorrect list manipulation (Jes Sorensen) [1320863 1273546]
  - [md] raid10: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]
  - [md] raid1: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.26.1.el6]
changelog:
  - [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1326043 1324318]
  - [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1326043 1324318]
  - [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1326043 1324318]
  - [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1326043 1324318]
  - [kernel] Revert "fix KABI break" (Jiri Olsa) [1326043 1324318]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.2.1.el6]
changelog:
  - [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240758 1240759] {CVE-2015-5364 CVE-2015-5366}
  - [fs] vfs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1243400 1241030]
  - [fs] vfs: Prevent syncing frozen file system (Lukas Czerner) [1243404 1241791]
  - [fs] vfs: Prevent freeing unlinked file to be indefinitely delayed (Lukas Czerner) [1243406 1236736]
  - [fs] vmcore: continue vmcore initialization if PT_NOTE is found empty (Baoquan He) [1245195 1236437]
  - [fs] vmcore: prevent PT_NOTE p_memsz overflow during header update (Baoquan He) [1245195 1236437]
  - [kernel] audit/fix non-modular users of module_init in core code (Baoquan He) [1245195 1236437]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.3.1.el6]
changelog:
  - [md] Revert "dm: don't schedule delayed run of the queue if nothing to do" (Mike Snitzer) [1246095 1240767]
  - [md] Revert "dm: only run the queue on completion if congested or no requests pending" (Mike Snitzer) [1246095 1240767]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.7.1.el6]
changelog:
  - Revert: [kernel] softirq: reduce latencies (Prarit Bhargava) [1246064 970263]
  - Revert: [kernel] softirq: Add softirq_2ms_loop and default to existing RHEL6 behaviour (Prarit Bhargava) [1246064 970263]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-573.8.1.el6]
changelog:
  - [netdrv] bonding: fix LACP PDU not sent on slave port sometimes (Jarod Wilson) [1266366 1258446]
  - [netdrv] bonding: fix incorrect lacp mux state when agg not active (Jarod Wilson) [1266366 1258446]
  - [netdrv] bonding: fix bond_open don't always set slave active flag (Jarod Wilson) [1266366 1258446]
  - [netdrv] bonding: update bond carrier state when min_links option changes (Jarod Wilson) [1266366 1258446]
  - [netdrv] bonding: change AD_LINK_SPEED_BITMASK to enum to suport more speed (Jarod Wilson) [1266366 1258446]
  - [virt] kvm: ioapic: conditionally delay irq delivery duringeoi broadcast (Fam Zheng) [1266369 1199155]
  - [kernel] ipc, sem: fix use after free on IPC_RMID after a task using same semaphore set exits (Herton R. Krzesinski) [1266373 1233300]
  - [fs] xfs: extent size hints can round up extents past MAXEXTLEN (Leonardo Menezes Vaz) [1266372 1211110]
  - [fs] Remove BUG_ON in nfs_clear_inode (Frank Sorenson) [1266364 1224343]
  - [net] use address assign type "SET" (Jarod Wilson) [1266374 1225359]
  - [net] ethtool: set addr_assign_type to NET_ADDR_SET when addr is passed on create (Jarod Wilson) [1266374 1225359]
  - [net] rtnl: use dev_set_mac_address() instead of plain ndo_ (Jarod Wilson) [1266374 1225359]
  - [net] ipv4: inet_fragmentation: compute work more accurate (Hannes Frederic Sowa) [1246088 1235465]
  - [netdrv] bna: fix interrupts storm caused by erroneous packets (Ivan Vecera) [1260535 1241287]
  - [edac] pci: avoid negative reference count of edac_class (Herton R. Krzesinski) [1255492 1227845]
  - [kernel] percpu_counter: batch size aware __percpu_counter_compare (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu_counter: make percpu_counters_lock irq-safe (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] lib/percpu_counter.c: fix bad percpu counter state during suspend (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu_counter: unbreak __percpu_counter_add (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] lib/percpu_counter.c: fix __percpu_counter_add (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu_counter: make APIs irq safe (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] lib/percpu_counter.c: __this_cpu_write doesn't need to be protected by spinlock (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] lib/percpu_counter.c: enclose hotplug only variables in hotplug ifdef (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpucounter: Optimize __percpu_counter_add a bit through the use of this_cpu options (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu_counter: use this_cpu_ptr instead of per_cpu_ptr (Hannes Frederic Sowa) [1246088 1235465]
  - [kernel] percpu: fix list_head init bug in __percpu_counter_init (Hannes Frederic Sowa) [1246088 1235465]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-571.el6]
changelog:
  - [netdrv] bnx2x: Move statistics implementation into semaphores (Michal Schmidt) [1231348]
  - [scsi] storvsc: Set the SRB flags correctly when no data transfer is needed (Vitaly Kuznetsov) [1221404]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-641.el6]
changelog:
  - [netdrv] ixgbe: restore proper CHECKSUM_UNNECESSARY behavior for LRO packets (Neil Horman) [1318426]
  - [netdrv] revert " net/mlx5_core: Add pci error handlers to mlx5_core driver" (Don Dutile) [1324599]
  - [x86] kernel: espfix not working for 32-bit KVM paravirt guests (Jacob Tanenbaum) [1172767] {CVE-2014-8134}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-642.el6]
changelog:
  - [scsi] fc: revert - ensure scan_work isn't active when freeing fc_rport (Ewan Milne) [1326447]
  - [netdrv] ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue (John Greene) [1310749]
  - [netdrv] mlx5e: Fix adding vlan rule with vid zero twice (Kamal Heib) [1322809]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-642.1.1.el6]
changelog:
  - [net] tcp/dccp: warn user for preferred ip_local_port_range (Florian Westphal) [1333571 1314774]
  - [net] tcp/dccp: try to not exhaust ip_local_port_range in connect() (Florian Westphal) [1333571 1314774]
  - [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian Westphal) [1333571 1314774]
  - [base] firmware: Add lock for firmware devices (Lyude Paul) [1333572 1309875]
  - [net] netlabel: fix a problem with netlbl_secattr_catmap_setrng (Paul Moore) [1333579 1321174]
  - [md] dm: only initialize the request_queue once (Mike Snitzer) [1333575 1328329]
  - [md] raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
  - [md] raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
  - [md] raid5: Compare apples to apples (or sectors to sectors) (Jes Sorensen) [1333581 1295969]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-642.9.1.el6]
changelog:
  - [net] vlan: Fix FCOE_MTU support (Maurizio Lombardi) [1381592 1367250]
  - [s390] mm: fix asce_bits handling with dynamic pagetable levels (Steve Best) [1377472 1341758]
  - [powerpc] eeh: Block PCI configuration space access during EEH (Gustavo Duarte) [1379596 1216944]
  - [fs] ecryptfs: prevent mounts backed by procfs (Mateusz Guzik) [1347101 1347102] {CVE-2016-1583}
  - [s390] mm: four page table levels vs. fork (Hendrik Brueckner) [1341546 1316461] {CVE-2016-2143}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-642.10.1.el6]
changelog:
  - [scsi] fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (Maurizio Lombardi) [1382620 1341298]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-642.12.1.el6]
changelog:
  - [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-642.13.1.el6]
changelog:
  - [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
  - [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
  - [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
  - [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
  - [net] netfilter: x_tables: validate e->target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
  - [net] netfilter: x_tables: make sure e->next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
  - [net] ipv6: Don't change dst->flags using assignments (Marcelo Leitner) [1391974 1389478]
  - [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
  - [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
  - [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
  - [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
  - [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
  - [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
  - [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
  - [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
  - [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
  - [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
  - [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
  - [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
  - [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
  - [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
  - [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
  - [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-642.13.2.el6]
changelog:
  - [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-642.14.1.el6]
changelog:
  - [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399456 1399457] {CVE-2016-9555}
  - [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1403143 1342659]
  - [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359302 1359304] {CVE-2016-6136}
  - [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1399172 1353844]
  - [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1399172 1353844]
  - [fs] nfs: Don't pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1399172 1353844]
  - [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1399174 1397552]
  - [scsi] hpsa: correct logical resets (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1399175 1083110]
  - [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1399175 1083110]
  - [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1397808 1351798]
  - [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1397739 1378614]
  - [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1398185 1387243]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-642.2.1.el6]
changelog:
  - [sched] Revert "kernel: sched: Cure load average vs NO_HZ woes" (Rafael Aquini) [1343015 1326373]
  - [sched] Revert "kernel: sched: Cure more NO_HZ load average woes" (Rafael Aquini) [1343015 1326373]
  - [sched] Revert "kernel: sched: Move sched_avg_update to update_cpu_load" (Rafael Aquini) [1343015 1326373]
  - [sched] Revert "kernel: sched: Fix nohz load accounting -- again" (Rafael Aquini) [1343015 1326373]
  - [fs] lockd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
  - [fs] nfsd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
  - [isdn] avoid calling tty_ldisc_flush() in atomic context (Sabrina Dubroca) [1337443 1328115]
  - [redhat] Update dracut dependency to pull in ecb module (Herbert Xu) [1334431 1315832]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-642.3.1.el6]
changelog:
  - [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-642.4.1.el6]
changelog:
  - [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
  - [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
  - [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to > TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
  - [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
  - [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
  - [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
  - [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
  - [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
  - [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
  - [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-642.4.2.el6]
changelog:
  - [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-642.5.1.el6]
changelog:
  - [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
  - [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
  - [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
  - [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
  - [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
  - [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
  - [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
  - [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
  - [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
  - [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
  - [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
  - [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
  - [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
  - [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
  - [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
  - [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
  - [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
  - [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-642.6.1.el6]
changelog:
  - [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
  - [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth->au_flags (Scott Mayhew) [1366962 1294939]
  - [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-640.el6]
changelog:
  - [net] use GFP_ATOMIC in dst_ops_extend_register (Sabrina Dubroca) [1323252]
  - [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1324318]
  - [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1324318]
  - [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1324318]
  - [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1324318]
  - [kernel] Revert "fix KABI break" (Jiri Olsa) [1324318]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-696.el6]
changelog:
  - [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.1.1.el6]
changelog:
  - [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
  - [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
  - [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
  - [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-694.el6]
changelog:
  - [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
  - [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
  - [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
  - [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
  - [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
  - [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
  - [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
  - [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
  - [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
  - [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
  - [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
  - [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
  - [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
  - [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
  - [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
  - [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
  - [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
  - [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
  - [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
  - [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
  - [block] ensure request->part is valid (Jeff Moyer) [1416341]
  - [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.12.1.el6]
changelog:
  - [netdrv] igb: only use vlan_gro_receive if vlans are registered (Stefan Assmann) [652804 660192] {CVE-2010-4263}
  - [net] core: neighbour update Oops (Jiri Pirko) [660591 658518]
  - [scsi] lpfc: Set heartbeat timer off by default (Rob Evers) [660244 655935]
  - [scsi] lpfc: Fixed crashes for BUG_ONs hit in the lpfc_abort_handler (Rob Evers) [659611 645882]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.16.1.el6]
changelog:
  - [net] ipsec: fragment locally generated tunnel-mode IPSec6 packets as needed (Herbert Xu) [670421 661113]
  - [net] tcp: Increase TCP_MAXSEG socket option minimum to TCP_MIN_MSS (Frantisek Hrbata) [652510 652511] {CVE-2010-4165}
  - [perf] perf_events: Fix perf_counter_mmap() hook in mprotect() (Oleg Nesterov) [651672 651673] {CVE-2010-4169}
  - [md] dm mpath: revert "dm: Call blk_abort_queue on failed paths" (Mike Snitzer) [658854 636771]
  - [x86] UV: Address interrupt/IO port operation conflict (George Beshers) [662921 659480]
  - [mm] guard page for stacks that grow upwards (Johannes Weiner) [666796 630562]
  - [scsi] enable state transistions from OFFLINE to RUNNING (Mike Christie) [660590 643237]
  - [scsi] set queue limits no_cluster for stacked devices (Mike Snitzer) [662050 658293]
  - [mm] Out-of-memory under memory cgroup can call both of oom-killer-for-memcg and oom-killer-for-page-fault (Larry Woodman) [661732 592879]
  - [scsi] libfc: possible race could panic system due to NULL fsp->cmd (Mike Christie) [662049 638297]
  - [kernel] exec: copy-and-paste the fixes into compat_do_execve() paths (Oleg Nesterov) [627811 625695] {CVE-2010-4243}
  - [kernel] exec: make argv/envp memory visible to oom-killer (Oleg Nesterov) [627811 625695] {CVE-2010-4243}
  - [virt] virtio: console: Send SIGIO in case of port unplug (Amit Shah) [652720 624628]
  - [virt] virtio: console: Send SIGIO on new data arrival on ports (Amit Shah) [652720 624628]
  - [virt] virtio: console: Send SIGIO to processes that request it for host events (Amit Shah) [652720 624628]
  - [virt] virtio: console: Reference counting portdev structs is not needed (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add reference counting for port struct (Amit Shah) [662721 628805]
  - [virt] virtio: console: Use cdev_alloc() instead of cdev_init() (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add a find_port_by_devt() function (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add a list of portdevs that are active (Amit Shah) [662721 628805]
  - [virt] virtio: console: open: Use a common path for error handling (Amit Shah) [662721 628805]
  - [virt] virtio: console: remove_port() should return void (Amit Shah) [662721 628805]
  - [virt] virtio: console: Make write() return -ENODEV on hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Make read() return -ENODEV on hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Unblock poll on port hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Un-block reads on chardev close (Amit Shah) [662721 628805]
  - [virt] virtio: console: Check if portdev is valid in send_control_msg() (Amit Shah) [662721 628805]
  - [virt] virtio: console: Remove control vq data only if using multiport support (Amit Shah) [662721 628805]
  - [virt] virtio: console: Reset vdev before removing device (Amit Shah) [662721 628805]
  - [fs] Fix nfsv4 client lock reclaim behaviour (Sachin Prabhu) [661730 638269]
  - [scsi] scsi_dh_alua: Handle all states correctly (Mike Snitzer) [659610 636994]
  - [kernel] execve: improve interactivity and respond to SIGKILL with large arguments (Dave Anderson) [661731 629178]
  - [virt] xen: handle events as edge-triggered (Andrew Jones) [661737 550724]
  - [virt] xen: use percpu interrupts for IPIs and VIRQs (Andrew Jones) [661737 550724]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.17.1.el6]
changelog:
  - [s390x] kdump: allow zfcpdump to mount and write to ext4 file systems (Amerigo Wang) [661667 628676]
  - [scsi] qla2xxx: Properly set the return value in function qla2xxx_eh_abort (Chad Dupuis) [664398 635710]
  - [scsi] qla2xxx: Drop srb reference before waiting for completion (Chad Dupuis) [664398 635710]
  - [virt] KVM: VMX: Really clear cr0.ts when giving the guest ownership of the fpu (Avi Kivity) [658891 645898]
  - [virt] KVM: SVM: Initialize fpu_active in init_vmcb() (Avi Kivity) [658891 645898]
  - [virt] KVM: x86: Use unlazy_fpu() for host FPU (Avi Kivity) [658891 645898]
  - [virt] KVM: Set cr0.et when the guest writes cr0 (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: Give the guest ownership of cr0.ts when the fpu is active (Avi Kivity) [658891 645898]
  - [virt] KVM: Lazify fpu activation and deactivation (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: Allow the guest to own some cr0 bits (Avi Kivity) [658891 645898]
  - [virt] KVM: Replace read accesses of vcpu->arch.cr0 by an accessor (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: trace clts and lmsw instructions as cr accesses (Avi Kivity) [658891 645898]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.18.1.el6]
changelog:
  - [netdrv] ixgbe: make sure FCoE DDP user buffers are really released by the HW (Frantisek Hrbata) [674002 617193]
  - [netdrv] ixgbe: invalidate FCoE DDP context when no error status is available (Frantisek Hrbata) [674002 617193]
  - [netdrv] ixgbe: avoid doing FCoE DDP when adapter is DOWN or RESETTING (Frantisek Hrbata) [674002 617193]
  - [fcoe] libfc: remove tgt_flags from fc_fcp_pkt struct (Mike Christie) [666797 633915]
  - [fcoe] libfc: use rport timeout values for fcp recovery (Frantisek Hrbata) [666797 633915]
  - [fcoe] libfc: incorrect scsi host byte codes returned to scsi-ml (Mike Christie) [666797 633915]
  - [scsi] scsi_dh_alua: fix overflow in alua_rtpg port group id check (Mike Snitzer) [673978 670572]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.23.1.el6]
changelog:
  - [x86] Revert "[x86] mtrr: Assume SYS_CFG[Tom2ForceMemTypeWB] exists on all future AMD CPUs" (Frank Arnold) [683813 652208]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.24.1.el6]
changelog:
  - [fs] Revert "[fs] inotify: stop kernel memory leak on file creation failure" (Eric Paris) [656831 656832] {CVE-2010-4250}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.27.1.el6]
changelog:
  - [scsi] megaraid: give FW more time to recover from reset (Tomas Henzl) [695322 692673]
  - [netdrv] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [683820 669231]
  - [sound] ALSA: hda - nvhdmi: Add missing codec IDs, unify names (Jaroslav Kysela) [683817 636922]
  - [mm] pdpte registers are not flushed when PGD entry is changed in x86 PAE mode (Larry Woodman) [695256 691310]
  - [net] fix ebtables stack infoleak (Eugene Teo) [681322 681323] {CVE-2011-1080}
  - [drm] fix unsigned vs signed comparison issue in modeset ctl ioctl (Don Howard) [679927 679928] {CVE-2011-1013}
  - [pci] Enable ASPM state clearing regardless of policy (Alex Williamson) [694073 681017]
  - [pci] Disable ASPM if BIOS asks us to (Alex Williamson) [694073 681017]
  - [mm] do not keep kswapd awake for an unreclaimable zone (Johannes Weiner) [694186 633825]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.28.1.el6]
changelog:
  - [net] bonding: fix jiffy comparison issues (Andy Gospodarek) [698109 696337]
  - [drm] radeon/kms: check AA resolve registers on r300 + regression fix (Dave Airlie) [680001 680002] {CVE-2011-1016}
  - [infiniband] uverbs: Handle large number of entries in poll CQ (Eugene Teo) [688429 696137] {CVE-2011-1044 CVE-2010-4649}
  - [net] sctp: fix the INIT/INIT-ACK chunk length calculation (Thomas Graf) [695386 690743] {CVE-2011-1573}
  - [net] CAN: Use inode instead of kernel address for /proc file (Danny Feng) [664560 664561] {CVE-2010-4565}
  - [fs] inotify: fix double free/corruption of stuct user (Eric Paris) [656831 656832] {CVE-2010-4250}
  - [net] netfilter: ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689341 689342]
  - [net] bonding: change test for presence of VLANs (Jiri Pirko) [696487 683496]
  - [scsi] scsi_dh: fix reference counting in scsi_dh_activate error path (Mike Snitzer) [696889 680140]
  - [net] enable VLAN NULL tagging (Neil Horman) [683810 633571]
  - [scsi] scsi_dh: propagate SCSI device deletion (Mike Snitzer) [698114 669411]
  - [fs] inotify: stop kernel memory leak on file creation failure (Eric Paris) [656831 656832] {CVE-2010-4250}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.29.1.el6]
changelog:
  - [mm] Revert "[mm] pdpte registers are not flushed when PGD entry is changed in x86 PAE mode" (Larry Woodman) [695256 691310]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.5.1.el6]
changelog:
  - [security] IMA: require command line option to enabled (Eric Paris) [644636 643667]
  - [net] Fix priv escalation in rds protocol (Neil Horman) [642899 642900] {CVE-2010-3904}
  - [v4l] Remove compat code for VIDIOCSMICROCODE (Mauro Carvalho Chehab) [642472 642473] {CVE-2010-2963}
  - [kernel] tracing: do not allow llseek to set_ftrace_filter (Jiri Olsa) [631625 631626] {CVE-2010-3079}
  - [virt] xen: hold mm->page_table_lock in vmalloc_sync (Andrew Jones) [644038 643371]
  - [fs] xfs: properly account for reclaimed inodes (Dave Chinner) [642680 641764]
  - [drm] fix ioctls infoleak (Danny Feng) [626319 621437] {CVE-2010-2803}
  - [netdrv] wireless extensions: fix kernel heap content leak (John Linville) [628437 628438] {CVE-2010-2955}
  - [netdrv] niu: buffer overflow for ETHTOOL_GRXCLSRLALL (Danny Feng) [632071 632072] {CVE-2010-3084}
  - [mm] add debug checks for mapcount related invariants (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] move VM_BUG_ON inside the page_table_lock of zap_huge_pmd (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] compaction: handle active and inactive fairly in too_many_isolated (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] start_khugepaged after setting transparent_hugepage_flags (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] fix hibernate memory corruption (Andrea Arcangeli) [644037 642570]
  - [mm] ksmd wait_event_freezable (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] khugepaged wait_event_freezable (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] unlink_anon_vmas in __split_vma in case of error (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] fix memleak in copy_huge_pmd (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] fix hang on anon_vma->root->lock (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] avoid breaking huge pmd invariants in case of vma_adjust failures (Andrea Arcangeli) [642679 622327 644037 642570]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.7.1.el6]
changelog:
  - [drm] ttm: fix regression introduced in dfb4a4250168008c5ac61e90ab2b86f074a83a6c (Dave Airlie) [646994 644896]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-69.el6]
changelog:
  - [mm] make stack guard page logic use vm_prev pointer (Mike Snitzer) [607859]
  - [mm] make the mlock() stack guard page checks stricter (Mike Snitzer) [607859]
  - [mm] make the vma list be doubly linked (Mike Snitzer) [607859]
  - [drm] nv50: insert a delay before fb change to prevent display engine hang (Ben Skeggs) [618225]
  - [mm] fix up some user-visible effects of the stack guard page (Mike Snitzer) [607859]
  - [net] sched: fix some kernel memory leaks (Jiri Pirko) [624637] {CVE-2010-2942}


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-70.el6]
changelog:
  - [x86] Disable AMD IOMMU by default (Matthew Garrett) [593787]
  - [netdrv] Revert "iwlwifi: disable hardware scanning by default" (Stanislaw Gruszka) [625981]
  - [s390x] kernel: fix tlb flushing vs. concurrent /proc accesses (Hendrik Brueckner) [587587]
  - [s390x] kernel: prepare mm_context_t for new tlb flush handling (Hendrik Brueckner) [587587]
  - [fs] NFS: Fix an Oops in the NFSv4 atomic open code (Jeff Layton) [625718]
  - [net] can: add limit for nframes and clean up signed/unsigned variables (Danny Feng) [625702] {CVE-2010-2959}
  - [fs] aio: bump i_count instead of using igrab (Jeff Moyer) [626595]
  - [fs] cifs: check for NULL session password (Jeff Layton) [625583]
  - [fs] cifs: fix NULL pointer dereference in cifs_find_smb_ses (Jeff Layton) [625583]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-71.el6]
changelog:
  - [fs] nfsd: initialize nfsd versions before creating svc (J. Bruce Fields) [628084]
  - [fs] nfsd: fix startup/shutdown order bug (J. Bruce Fields) [628084]
  - [security] KEYS: Fix bug in keyctl_session_to_parent() if parent has no session keyring (David Howells) [627808] {CVE-2010-2960}
  - [security] KEYS: Fix RCU no-lock warning in keyctl_session_to_parent() (David Howells) [627808] {CVE-2010-2960}


author: Stephan Wiesand <stephan wiesand desy de> 1.5.78-83.SLx
changelog:
  - update to latest feature release
  - enable dugging symbols by default
  - there is no more /usr/include/potpourri.h
  - module is called ...mp.ko again?


author: Stephan Wiesand <stephan wiesand desy de> 1.5.78-84.SLx
changelog:
  - removed support for SL3/4, greatly simplifying the spec
  - removed support for ia32e, ia64, athlon, ...
  - removed all old patches and obsolete sources (like openafs-krb5.tar.gz)
  - relaxed requirements between userland and kernel-module package
  - updated Changelog & Relnotes, and made sure we do so in the future
  - don't package the afs_compile_et manpage in the main packages as well
  - don't add -fPIC to CFLAGS (be compatible with openafs.org spec)
  - configure: no --enable-debug[-kernel] by default (be compatible with openafs.org spec)
  - configure: added --disable-strip-binaries (be compatible with openafs.org spec)
  - configure: added --with-linux-kernel-packaging (be compatible with openafs.org spec)
  - this also renames the module to openafs.ko, so change in rc script
  - configure: added --disable-kernel-module to non-module builds
  - and moved the build requirement on kernel-devel to the module package
  - the server package shouldn't require the kernel module
  - debugspec can now be defined on the command line, and defaults to 0
  - moved much of the kernel/kvers/****dir voodoo into openafs-sl-defs.sh
  - which also replaces openas-lslrelease-helper.sh (and no longer stes SL5 on SL6)
  - updated CellServDB to latest from grand.central.org (Dec 13, 2010)


author: Stephan Wiesand <stephan wiesand desy de> 1.5.78-86.SLx
changelog:
  - don't strip any binaries, let rpm do the job
  - new in openafs-debug: cacheout, afscp, fsx
  - new in openafs-client: afsio
  - moved into main package: restorevol
  - moved into openafs-server: ka-forwarder + manpage
  - server package should own /usr/afs/etc
  - moved into openafs-authlibs: libkopenafs.so.1[.1]
  - moved into openafs-authlibs-devel: libkopenafs.{a,so}, kopenafs.h, libafs{authent,rpc}.a 
  - fixed chcon in server's post script for SL6
  - introduced the ability to build a kabi-tracking kmod (define build_kmod 1)
  - introduced a switch to disable building the fuse client
  - and unless that switch is used, buildrequire fuse-devel and package afsd.fuse
  - other minor changes to make rpmlint less unhappy
  - renamed openafs-debug to openafs-plumbing-tools
  - moved fssync-debug and manpages into -plumbing-tools
  - enabled debugsyms by default again, no effect on kernel module


author: Baoquan He <bhe@redhat.com> -2.0.0-258.1
changelog:
  - kexec-tools: Map network devices based on MAC address
  - kexec-tools: Allow mkdumprd modules blacklist to be overwritten by extra_modules


author: Baoquan He <bhe@redhat.com> - 2.0.0-271
changelog:
  - makedumpfile: wrong cyclic buffer size recalculation causes bitmap data corruption, resolves bug 1009207


author: Baoquan He <bhe@redhat.com> - 2.0.0-272
changelog:
  - Allow multipathd to configure multipath map before adding partition devmappings, resolves bug 906601
  - mkdumprd: use timeout_count as a global variable, resolves bug 906601
  - mkdumprd: add support for SCM devices available for Linux on System z, resolves bug 903529
  - kdump.init: Run multiple kdump init instances one by one in serial order, resolves bug 963948


author: Baoquan He <bhe@redhat.com> - 2.0.0-273
changelog:
  - Fix max_mapnr issue on system has over 44-bit addressing, resolves bug 1008543
  - makedumpfile: fails phys_base calculation on sadump format, resolves bug 1010103


author: Baoquan He <bhe@redhat.com> - 2.0.0-278
changelog:
  - Stop maximizing the bitmap buffer to reduce the risk of OOM, resolves bug 1114153
  - Move counting pfn_memhole for cyclic mode, resolves bug 1114153
  - Remove the 1st bitmap buffer from the ELF path in cyclic mode, resolves bug 1114153
  - Fix free bitmap_buffer_cyclic error, resolves bug 1114153
  - Introduce the mdf_pfn_t type, resolves bug 1114153


author: Baoquan He <bhe@redhat.com> - 2.0.0-279
changelog:
  - mkdurmpd: Issue sync after saving vmcore-dmesg.txt, resolves bug 1123061
  - mkdumprd: Fix check condition of selinux status, resolves bug 1122880
  - mkdumprd: fix no such file or directory warning in 2nd kernel on s390, resolves bug 1122883
  - Support for eppic language as a subpackage, resolves bug 823561
  - update .gitignore/sources for eppic_030413.tar.gz, resolves bug 823561
  - makedumpfile: Fix Makefile for eppic_makedumpfile.so build, resolves bug 823561


author: Baoquan He <bhe@redhat.com> - 2.0.0-280
changelog:
  - mkdumprd: wait for multipath device node, resolves bug 1128248
  - mkdumprd: clean up found logic in wait_for_multipath_devices(), resolves bug 1128248
  - use "getent ahostsv4 host-name" to get ipv4 address of a host name, resolves bug 1127138


author: Baoquan He <bhe@redhat.com> - 2.0.0-286
changelog:
  - update kexec-kdump-howto.txt, resolves bug 949376
  - mkdumprd: Load the mlx4_core module if it is needed in the 2nd kernel, resolves bug 1099589
  - nfs dump will fail when netdev has different device name in ifcfg-$dev, resolves bug 1005141 
  - udev-rules: Restart kdump service on cpu ADD/REMOVE events, resolves bug 1113276


author: Baoquan He <bhe@redhat.com> - 2.0.0-290
changelog:
  - mkdumprd: Fix shell error that kdump uses the variable without initializing, resolves bug 903510
  - mkdumprd: Fix incorrect variant MNTIMAGE, resolves bug 1294327


author: Baoquan He <bhe@redhat.com> - 2.0.0-291
changelog:
  - fadump/ppc64: update spec file, resolves bug 1254923
  - fadump/ppc64: add firmware-assisted dump howto document, resolves bug 1254923
  - fadump/ppc64: handle default action in fadump mode, resolves bug 1254923
  - fadump/ppc64: modify kdump init script to capture vmcore to local filesystems, resolves bug 1254923
  - fadump/ppc64: modify kdump script to stop firmware assisted dump, resolves bug 1254923
  - fadump/ppc64: modify kdump script to start the firmware assisted dump, resolves bug 1254923
  - fadump/ppc64: modify status routine to check for firmware-assisted dump, resolves bug 1254923


author: Baoquan He <bhe@redhat.com> - 2.0.0-292
changelog:
  - mkdumprd: Enhance kdump to handle multiport network card properly resolves bug 1284605
  - mkdumprd: Create special partition name for NVME device resolves bug 1235374
  - Don't handle vnet<n> used by VMs on RHEV host resolves bug 1283191
  - mkdumprd: hush does not support parenthesis in ko parameter directly resolves bug 1028298
  - kdump.init: fix a typo resolves bug 1295283


author: Baoquan He <bhe@redhat.com> - 2.0.0-293
changelog:
  - mkdumprd: Remove partition seperater as well while dropping partition number in device name, resolves bug 1228799


author: Baoquan He <bhe@redhat.com> - 2.0.0-298
changelog:
  - b0e4c65 Use file offset in initialize_mmap(), resolves bug 1314158
  - 85f20f9 mkdumprd: redirect stderr of bmc-watchdog to /dev/null resolves bug 1315270


author: Baoquan He <bhe@redhat.com> - 2.0.0-299
changelog:
  - mkdumprd: Use a flexible way to create rtc device, resolves bug 1315148
  - hyper-v: do not exclude hv_utils module, resolves bug 1228774


author: Baoquan He <bhe@redhat.com> - 2.0.0-300.2
changelog:
  mkdumprd: Allow findmodule() to add dependency for lsmod output, resolves bug 1403699
  mkdumprd: Kill useless code in moduledep(), resolves bug 1403699


author: Baoquan He <bhe@redhat.com> - 2.0.0-306
changelog:
  - mkdumprd: fix env for mdadm, resolves bug 1404263
  - mkdumprd: create node for partition within RAID device, resolves bug 1404263
  - mkdumprd: refactor block_mknod(), resolves bug 1404263
  - uefi: Pass efi_smbios_addr to 2nd kernel, resolves bug 1404552


author: David Howells <dhowells@redhat.com> - 1.4-5
changelog:
  - Make keyctl show handle deeply nested keyrings [BZ 1075652].
  - The key serial ID field displayed by keyctl show may be up to 10 digits [BZ 1075652].
  - Make keyctl padd & co. handle binary data containing NUL chars [BZ 1075652].
  - The input buffer for keyctl padd & co. should be 1MB-1 in size [BZ 1075652].


author: Lukas Tinkl <ltinkl@redhat.com> - 2.0-0.12.20080213svn
changelog:
  - Resolves: #599387 - RPMdiff run failed for package kmid-2.0-0.10.20080213svn.el6
    (fix aliasing issues)


author: Lukas Tinkl <ltinkl@redhat.com> - 2.0-0.13.20080213svn
changelog:
  - Resolves: #599387 - RPMdiff run failed for package kmid-2.0-0.10.20080213svn.el6
    (fix aliasing issues the proper way using cmake)


author: Lukas Tinkl <ltinkl@redhat.com> - 2.0-0.14.20080213svn
changelog:
  - Resolves: #599387 - RPMdiff run failed for package kmid-2.0-0.10.20080213svn.el6
    (fix strange cmake syntax)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.2-0.144.SLx
changelog:
  - do some more work in modules script
  - print debug output from kmod scripts if variable "verbose" is set


author: Stephan Wiesand <stephan wiesand desy de> 1.6.2-145.SLx
changelog:
  - 1.6.5 security release addressing openafs-sa-2013-0003 and -0004
  - see SECURITY.txt for important info on how to actually secure your site
  - just updating to this build is *not* sufficient


author: Stephan Wiesand <stephan wiesand desy de> 1.6.5.1-146.SLx
changelog:
  - 1.6.5.1 bugfix release
  - modify buildroot to use mktemp, allowing simultaneous builds (Pat)
  - fix the AFS mountpoint in the cacheinfo file generated in the SPEC


author: Stephan Wiesand <stephan wiesand desy de> 1.6.5.1-147.SLx
changelog:
  - patch1080 with http://gerrit.openafs.org/10578 to fix RHBZ #1038315 on EL 4.6
  - fix build on EL 5.10


author: Stephan Wiesand <stephan wiesand desy de> 1.6.10-153.SLx
changelog:
  - update to release 1.6.10
  - patch 1084 to revert gerrit 11358
  - patch 1085 with aklog/krb524 fix from gerrit 11538
  - package the new volscan executable + manpage, in -server
  - don't package the xfs_size_check manpage
  - removed the old lwp versions of butc, fileserver, volserver
  - support for SL7
  -  support "--with modsign" to sign the kernel module
  -  ship systemd unit files on this platform, rather than init scripts
  -  the old init scripts are called in "prepare" mode from the unit files
  -  in this mode, they do the usual checks/autoconfig, ...
  -  and then they write the environment files used in the unit files
  - added BOSSERVER_OPTIONS variable to sysconfig (and server startup files)
  - added ENABLE_DYNROOT_SPARSE to sysconfig (and client init script)
  -  defaults to on on SL7, off on SL5/6
  - patches 1080..83 are already in
  - use the right path to depmod, and generally the right sbin


author: Stephan Wiesand <stephan wiesand desy de> 1.6.11-205.SLx
changelog:
  - fixed dependency of the -kpasswd subpackage (spotted by Pat Riehecky)
  - fixed on_network test to work on EL7 in server rc file too (reported by
    Otto-Michael Braun)
  - fixed unsatisfied dependencies on shared libs from -authlib-devel by turning
    AutoReq off for that package (reported by Ben Meekhof)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.11.1-206.SLx
changelog:
  - first test build of 1.6.11.1, based on HEAD at 9e1cf26
  - + 11760/1 (Linux 4.0) + 11808 (aklog fix) + 11809 (FBSD kbuild)
  - + 11820 (NEWS) + 11819 (make 1.6.11.1)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.14-218.SLx
changelog:
  - update to release 1.6.14
  - fixes a 1.6.13 regression in vlserver when volumes are queried by regex
  - the "backup" util does this, unless vols are specified with ".*" or "" only


author: Stephan Wiesand <stephan wiesand desy de> 1.6.17-234.SLx
changelog:
  - update to release 1.6.17 (security release)
  - install service unit files with mode 644, not 755 (rt.central.org #132662)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.10-153.SLx
changelog:
  - update to release 1.6.10
  - patch 1084 to revert gerrit 11358
  - patch 1085 with aklog/krb524 fix from gerrit 11538
  - package the new volscan executable + manpage, in -server
  - do not package the xfs_size_check manpage
  - removed the old lwp versions of butc, fileserver, volserver
  - support for SL7
  -  support "--with modsign" to sign the kernel module
  -  ship systemd unit files on this platform, rather than init scripts
  -  the old init scripts are called in "prepare" mode from the unit files
  -  in this mode, they do the usual checks/autoconfig, ...
  -  and then they write the environment files used in the unit files
  - added BOSSERVER_OPTIONS variable to sysconfig (and server startup files)
  - added ENABLE_DYNROOT_SPARSE to sysconfig (and client init script)
  -  defaults to on on SL7, off on SL5/6
  - patches 1080..83 are already in
  - use the right path to depmod, and generally the right sbin


author: Stephan Wiesand <stephan wiesand desy de> 1.6.11-204.SLx
changelog:
  - update to release 1.6.11
  - patch 1084 should no longer be needed (should...)
  - patch 1085 is included in 1.6.11
  - added "Provides: openafs-sl-client = %{version}" as requested by Pat


author: Stephan Wiesand <stephan wiesand desy de> 1.6.15-221.SLx
changelog:
  - update to release 1.6.15 (security release)
  - addresses OPENAFS-SA-2015-007 (CVE-2015-7762, CVE-2015-7763)


author: Stephan Wiesand <stephan wiesand desy de> 1.6.20-256.SLx
changelog:
  - update to security release 1.6.20
  - added RemainAfterExit=true in afs.service, to fix the case where only
    kernel threads remain after the client has started


author: Stephan Wiesand <stephan wiesand desy de> 1.6.0-90.pre1.SLx
changelog:
  - let openafs-client own the /afs mountpoint to avoid selinux troubles
  - change initdir macro to /etc/rc.d/init.d (like upstream), and use it everywhere


author: Stephan Wiesand <stephan wiesand desy de> 1.6.0-91.pre2.SLx
changelog:
  - update to next prerelease
  - package /afs as ghost, and create it in post again - and fix the label


author: Stephan Wiesand <stephan wiesand desy de> 1.6.1-113.SLx
changelog:
  - added patch 1077 to fix buffer overflows (from 1.6.2 release)
  - added a purgecache action to the client init script (Pat Riehecky)


author: Lukas Tinkl <ltinkl@redhat.com> - 4.3.3-4
changelog:
  - Resolves: #605069 - RPMdiff run failed for package konq-plugins-4.3.3-3.el6
    (create a noarch doc subpackage to fix multilib issues)


author: Lukas Tinkl <ltinkl@redhat.com> - 4.3.3-5
changelog:
  - Resolves: #605069 - RPMdiff run failed for package konq-plugins-4.3.3-3.el6
    (sanitize .desktop files)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0-3
changelog:
  - when checking for pty-handling functions, do so with the benefit of the
    libutil library we think might include them (#595411)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2
changelog:
  - krshd: don't limit user names to 16 chars when utmp can handle names
    at least a bit longer than that (#632442, RT#6773)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2.1
changelog:
  - ftpd: add candidate patch to detect setegid/setregid/setresgid and check
    for errors when calling them (MITKRB5-SA-2011-005, CVE-2011-1526, #713341)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-3
changelog:
  - drop calls to pam_selinux from the gssftp PAM configuration (#713459)
  - reference password-auth instead of system-auth in the gssftp and kshell
    PAM configurations


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-4
changelog:
  - increase the size of the ftp client's command line input buffer (#665834)
  - incorporate patch to correct parsing errors with "restrict" lines in
    ftpusers (#713521, RT#6889)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-7.1
changelog:
  - add Siddhesh Poyarekar's patch to ensure that when performing an "mdir"
    or "mls" operation, that the FTP client always passes an actually-terminated
    string as the open mode for fopen() (#816689, RT#7079)


author: Scientific Linux Auto Patch Process <SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV>
changelog:
  - Added Source: krb5-appl.ini
  -->  Config file for automated patch script
  - Added Patch: krb5_krb5-mwm-kshd.patch
  -->  Fix sync bug, see BZ#658217


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-8
changelog:
  - untag a couple of other patches which don't strictly need to apply during
    %{?_rawbuild} builds (more of #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-9
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10
changelog:
  - make -server conflict with older versions of SELinux policy that didn't
    allow us to use eventfds, which libverto's backend may depend on in order
    to properly shut down a multi-worker KDC (#871524)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.1
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917909)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917909, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.2
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950342)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.4
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#978312)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.5
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #1000313)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.6
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #1002179)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-14
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15.1
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1081611)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-31
changelog:
  - ksu: when evaluating .k5users, don't throw away data from .k5users when we're
    not passed a command to run, which implicitly means we're attempting to run
    the target user's shell (#1026721, revised)


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-37
changelog:
  - fix for CVE-2014-5355 (#1193939) "krb5: unauthenticated
    denial of service in recvauth_common() and others"


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-42
changelog:
  - fix for RH bug #1210704 ("Remove stray include in krb5's
    localauth_plugin.h"). This unnecessary #include statement
    was causing build failures on some systems by making libkrb5
    sources depend on gssapi.h (and as result to libcom_err,
    too).


author: Robbie Harwood <rharwood@redhat.com> - 1.10.3-42z1
changelog:
  - Fix CVE-2015-8629 and CVE-2015-8631
  - Also fix a spec trigger issue that prevents building
  - Resolves: #1306973


author: Robbie Harwood <rharwood@redhat.com> - 1.10.3-54
changelog:
  - Fix gss_accept_sec_context output_token return in error cases
    Also backport upstream test for this.
  - Resolves: #1279249


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3.1
changelog:
  - incorporate candidate patch to fix uninitialized pointer crash in the KDC
    (CVE-2010-1322, #636336)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3.2
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #644825, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #644825, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3.3
changelog:
  - pull up crypto changes made between 1.8.2 and 1.8.3 to fix upstream #6751,
    assumed to already be there for the next fix
  - incorporate candidate patch to fix various issues from MITKRB5-SA-2010-007
    (CVE-2010-1323, CVE-2010-1324, CVE-2010-4020, #651962)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error, and hang or crash in the KDC when using
    the LDAP kdb backend (CVE-2010-4022, CVE-2011-0281, CVE-2011-0282, #671101)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.5
changelog:
  - add upstream patches to fix double-free in KDC while returning typed-data
    with errors (CVE-2011-0284, #681564)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.6
changelog:
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (CVE-2011-0284, #681564)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.7
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696341,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-21
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth with AD KDCs (#734341)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-22
changelog:
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#746341)
  - apply upstream patch to fix a null pointer derference with the LDAP kdb
    backend (CVE-2011-1527), an assertion failure with multiple kdb backends
    (CVE-2011-1528), and a null pointer dereference with multiple kdb backends
    (CVE-2011-1529) (MITKRB5-SA-2011-006, #740085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-22.1
changelog:
  - add candidate patch to fix a NULL pointer dereference while processing TGS
    requests (MITKRB5-SA-2011-007, #754046)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-31
changelog:
  - backport fixes for retrying a request with referrals disabled if we get
    a referral to the same realm (#786216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-32
changelog:
  - revise the fix for #748528 so that it correctly resets the shallow
    etype_info list in cases where we get both etype-info and etype-info2


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33
changelog:
  - selinux: reliably reset the file creation context after setting it when we
    flush replay caches, in cases where there was none explicitly set beforehand
    (#813883)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.1
changelog:
  - add candidate patch from upstream to fix freeing uninitialized pointer in
    the KDC (MITKRB5-SA-2012-001, CVE-2012-1015, #839859)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.2
changelog:
  - pull up the patch to correct a possible NULL pointer dereference in
    kadmind (CVE-2012-1013, #827517)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport changes to how and when we read and make use of SELinux labeling
    configuration (#852455)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.3
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (#852455)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - add backported patch to not fail receipt of an AP-REQ if the signature check
    on the included PAC (if there is one) fails (#679612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696342,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9.1
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#714866)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9.2
changelog:
  - apply upstream patch to fix a null pointer derference with the LDAP kdb
    backend (CVE-2011-1527), an assertion failure with multiple kdb backends
    (CVE-2011-1528), and a null pointer dereference with multiple kdb backends
    (CVE-2011-1529) (#740084)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-14
changelog:
  - fix data corruption in a here-document section of a script at byte 8192 (#786787)
  - restore tty settings after timed out read (#577223)
  - do not create extra process when it's not needed (#781976)
  - fix file descriptor leak (#781498)
  - do not segfault on incorrect oop code (#743840)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-19
changelog:
  - assigning a right justified typedef'd variable to a smaller one
    could corrupt the result (#846678)
  - fix exporting of l/r-justified variable (#846678)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-10.4
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1072456)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - fix segfault when handling a trap (#1117404)
  - closing a file descriptor in a command substitution caused loss of the output (#1116072)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-24
changelog:
  - cd to directory without execution permission can't fail silently (#1160923)
  - current directory could differ from PWD (#1168611)
  - declaration of a two dimemsional associatve array could add an extra 0 element (#1173668)
  - exporting fixed with variable corrupted its data (#1188377)
  - fixes memmory leak on unset of associative array (#1189294)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-32
changelog:
  - fix: in a login shell "( cmd & )" does nothing (#1217236)
  - multibyte character string after $1-9 was not expanded correctly (#1256495)
  - case in a for loop inside a subshell caused syntax error (#1241013)


author: Lukas Tinkl <ltinkl@redhat.com> - 1.1-0.9.20080213
changelog:
  - Resolves: #605070 - RPMdiff run failed for package ksig-1.1-0.8.20080213.1.el6
    (create a noarch doc subpackage)


author: Lukas Tinkl <ltinkl@redhat.com> - 1.1-0.10.20080213
changelog:
  - Resolves: #605070 - RPMdiff run failed for package ksig-1.1-0.8.20080213.1.el6
    (sanitize .desktop file)


author: Robert Scheck <robert@fedoraproject.org> - 1.13-5
changelog:
  - Really added the plugindir patch now (thanks to Karsten Hopp)
  - Avoid the make errors because of mkdirhier better than until now


author: Simo Sorce <simo@redhat.com> - 2.4.0-5
changelog:
  - Add various fixes from upstream master, mostly memory leaks
  - Change to final covscan fixes as applied upstream


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-6
changelog:
  - Build both with and without GUI to allow the use on systems where Gtk
    dependency is undesirable. The latencytop package is still the full-blown build.
    latencytop-tui is the miminal build. latencytop-common has the shared files.
  - Resolves: rhbz#726476


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-8
changelog:
  - Print the error message only after cleaning up curses.
  - Remove the broken fsync view, stop using the obsolete 'tracing_enabled'.
  - Better error message when run as non-root.
  - Resolves: rhbz#633698


author: Rich Megginson <rmeggins@redhat.com> 0:4.18-6
changelog:
  - Resolves: bug 684028 - LDAPSchemaElement.getOptionalValues() mangles values
  - upstream mozilla id=640750


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-7.1
changelog:
  - port the rhel-7 package version to rhel-6
  - enabled ECDSA due to Unbound
  - Fix issue in DSA algorithm (#1077799)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-9
changelog:
  - Fix wrong `man' program option (incompatibility between man and man-db packages)
    by using `groff' program instead for parsing troff files (#718498)


author: Jozef Mlich <jmlich@redhat.com> - 436-12
changelog:
  - Fixing regressions found by QA
  - displaying of man page using troff (718498) - beware: man page file
    type is detected using file
  - tcsh printenv problem, was caused by incorrect return value for output
    which will be not preprocessed by lesspipe (186931)
    Resolves: #615303


author: Jiri Skala <jskala@redhat.com> - 4.0.9-1
changelog:
  - Resolves: #602838 - CVE-2010-2251 lftp: multiple HTTP client download filename vulnerability
  - re-base to latest upstream version


author: Michal Ruprich <mruprich@redhat.com> - 4.0.9-14
changelog:
  - Related: #1228484 - lftp hangs after dowloading one file during a mirror
  - Related: #1305235 - lftp not following symlinks through sftp


author: Parag <paragn@fedoraproject.org> 1.0.6-4
changelog:
  - Merge-review cleanups #226064
  - Updated summary, added Requires: pkgconfig
  - removed zero length file AUTHORS


author: Adam Jackson <ajax@redhat.com> 1.1.1-3
changelog:
  - REVERT-libXdmcp-1.1.1-xalloc.patch: Restore definitions (but not
    declarations) of Xalloc and friends for RHEL6 ABI compat.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1-2
changelog:
  - libXext-1.1-XAllocID.patch: call XAllocID with the display lock held.
  - libXext-1.1-event_vec-smash.patch: don't smash the event processing vector
    if the server has an older extension version than the client.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1-3
changelog:
  - libXext-1.1-event_vec-smash.patch: drop, this patch is wrong and has been
    reverted upstream. (#614888)


author: Parag <paragn@fedoraproject.org> - 4.0.3-9
changelog:
  - Merge-Review #226071
  - Removed XFree86-libs, xorg-x11-libs, XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - spec cleanups


author: Soren Sandmann <ssp@redhat.com> 1.4.5-3
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Benjamin Tissoires <btissoir@redhat.com> 1.4.5-4
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.4.5-5
changelog:
  - CVE-2015-1802: missing range check in bdfReadProperties (bug 1258892)
  - CVE-2015-1803: crash on invalid read in bdfReadCharacters (bug 1258892)
  - CVE-2015-1804: out-of-bounds memory access in bdfReadCharacters (bug 1258892)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.3-3
changelog:
  - libXi-1.3-right-event-number.patch: initialise extension with the 
    number of events supported by the server. (#615834)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.2-1
changelog:
  - libXp 1.0.2. Drags in a bunch of general cleanup, code changes are quite
    limited and CVE-2013-2062 (#960362)


author: Alon Levy <alevy@redhat.com> - 0.1.2-1
changelog:
  - bump version to 0.1.2
   - style fixes
   - vscclient.c: fix tabulation
    - add copyright header
    - send init on connect, only start vevent thread on response
    - use hton,ntoh
    - read payload after header check, before type switch
    - update for vscard_common changes, empty Flush implementation
   - vcard_emul_nss: load coolkey in more situations
   - vscard_common.h:
    - VSCMsgInit capabilities and magic
    - VSCMsgReconnect stringified
    - define VSCARD_MAGIC
    - update copyright
    - fix message type enum
   - bump version to 0.1.1
    - vcard_emul,vcard_emul_nss
     - add VCARD_EMUL_INIT_ALREADY_INITED
     - add vcard_emul_replay_insertion_events
   - vreader: add vreader_queue_card_event
    Resolves: rhbz#663063


author: Alon Levy <alevy@redhat.com> - 0.15.0-rc0
changelog:
  - upstream update, it is now qemu based, so build process changed, and version to match.
   - no non-rc release yet of qemu with required patches, hence using rc0. There are still
     some patches carried here that hopefully will get into 0.15.0 or 0.16.0 in the latest.
   - upstream updated to 0.15.0-rc0
   - resolves rhbz#723895


author: Alon Levy <alevy@redhat.com> - 0.14.90-2
changelog:
  - fix permissions of h files to not change because of rebase.
   - change NVR to match libcacard.so
     - will change when qemu-0.15.0 is released.
   - Copied correct README
   - Resolves: rhbz#723895


author: Alon Levy <alevy@redhat.com> - 0.15.0
changelog:
  - not a rebase - no changes in libcacard subdirectory
     between 0.15.0-rc0 and 0.15.0 in the upstream package.
    - but allows the fedora and RHEL package to remain in sync
      on a released version.
   - dropped zlib dep which was only required for configure phase
     via added patch 0001-drop-zlib-check.patch
   - added three patches that only cleanup the build process
     0010-Fix-spelling-in-comments-and-debug-messages-recieve-.patch
     0011-Improvements-to-libtool-support.patch
     0012-Silence-make-if-nothing-is-to-do-for-libcacard.patch
   - Final two patches resolve the bug 727916:
     0013-libcacard-cac-fix-typo-in-cac_delete_pki_applet_priv.patch
     0014-libcacard-vscclient-fix-error-paths-for-socket-creat.patch
   - Resolves: rhbz#727916


author: Steve Grubb <sgrubb@redhat.com> 0.6.4-2
changelog:
  resolves: #593635 - Capabilities can't be set on just a thread
  - Fix requires for the utils subpackage


author: Jan Safranek <jsafrane@redhat.com> 0.36-4
changelog:
  - Fix libcgroup.so link to the right soname (#599367)
  - Fix segmentation fault in cgget tool (#601071)
  - Fix lscgroup commandline parsing (#601095)


author: Jan Safranek <jsafrane@redhat.com> 0.36-5
changelog:
  - Relax the dependency on redhat-lsb package (#607537)
  - Fix installation of -devel libraries (#607538)


author: Jan Safranek <jsafrane@redhat.com> 0.36-6.1
changelog:
  - Fixed buffer overflow when parsing cgexec command line parameters.
  - Added checking of source of netlink messages to cgrulesengd daemon.
  - Resolves: CVE-2011-1006 CVE-2011-1022


author: Jan Safranek <jsafrane@redhat.com> 0.37-1.el6
changelog:
  - Updated to 0.37
    - added new 'cgsnapshot' tool to generate cgconfig.conf (#649195)
    - fixed 'cgget' reading long variable values like devices.list (#626127)
    - fixed reading list of mounted controllers on library init (#635984)
    - fixed the library not to change current working directory when creating
      groups (#628895)
    - new user 'cgred' was added for better security - /bin/cgexec tool is no
      longer SUID to root but SGID to the new 'cgred' user, which has write
      access to /var/run/cgred.socket
    - may other fixes an enhancements
  - Removed rpath from compiled binaries
  - Fixed spelling and rpmlint errors in the .spec file (#634939)
  - Fixed exit code of cgclassify tool (#667957)


author: Jan Safranek <jsafrane@redhat.com> 0.37-3.el6
changelog:
  - Fixed 'cgred' group not being created as system-group during installation
    of the package.
  - Resolves: #715413


author: Peter Schiffer <pschiffe@redhat.com> 0.37-6
changelog:
  - related: #738737
    updated logging improvement
  - resolves: #877042
    fixed coverity finding in libcgroup-0.37-add-inotify-fd.patch
  - resolves: #869990
    fixed bug when cgconfig service was failing to start on read only file systems


author: Peter Schiffer <pschiffe@redhat.com> 0.37-7.1
changelog:
  - resolves: #913282
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Peter Schiffer <pschiffe@redhat.com> 0.37-5
changelog:
  - resolves: #819137
    fixed bug when lscgroup was ltrimming path which wasn't prefixed with slash
  - resolves: #773544
    made --sticky option effective when setuid(2) and setgid(2)
  - resolves: #849757
    added inotify fd to scan running tasks and set control groups
  - resolves: #738737
    logging improvement


author: jchaloup <jchaloup@redhat.com> - 0.40.rc1-16
changelog:
  - extending cgroup names with default
    resolves: #1139205
  - fixing libcgroup-0.40.rc1-reading-config-files-from-etc-cgconfig.d.patch not to modify patch backup file
    resolves: #1162220


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-4
changelog:
  - related: #913286
    fixed performance regression when starting cgred service
  - related: #589535
    fixed templates


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-23
changelog:
  - Fix Hsu and Dvorak Hsu input (ibus google issue 755, 
    chewing google issue 10)
  - Resolves: #555192


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-27
changelog:
  - Fix Dvorak Hsu 4th tone key (ibus google issue 755 comment 12, 
    chewing google issue 10)
  - Resolves: #555192


author: Daniel Veillard <veillard@redhat.com> - 0.5.4-1
changelog:
  - update to new version to fix problems in libvirt-cim rebase
  - Resolves: rhbz#633332
  - fix a packaging naming problem on previous build
  - Resolves: rhbz#604551


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Fix package description to differentiate the fact that this is for the T4
    Chelsio based adapters instead of the previous T3 generation


author: Doug Ledford <dledford@redhat.com> - 1.2.0-1
changelog:
  - Update to latest upstream release while rebuilding against latest
    libibverbs
  - Related: bz750609


author: Doug Ledford <dledford@redhat.com> - 1.3.3-1
changelog:
  - Bump and rebuild against new libibverbs, update our sources while we
    are at it
  - Related: bz854655


author: Doug Ledford <dledford@redhat.com> - 1.3.5-1
changelog:
  - Update to latest upstream release
  - Move modprobe setup to rdma package
  - Resolves: bz1165842
  - Related: bz1163527


author: Jay Fenlason <fenlason@redhat.com> - 2.1.2-3.2
changelog:
  - Remove the bundled firewire-{cdev,constants}.h fires and add the -juju patch to build against
    the system firewire-cdev.h instead.
    Related: rhbz555835


author: Jay Fenlason <fenlason@redhat.com> - 2.1.2-3.4
changelog:
  - Fix the install command for the example programs:
    grab_color_image grab_gray_image grab_partial_image ladybug grab_partial_pvn
    Resolves: rhbz593778


author: Dave Airlie <airlied@redhat.com> 2.4.20-1
changelog:
  - pull in upstream .20 release - contains pretty much same patches
  - fix includes harder to make mesa build


author: Dominik Mierzejewski <rpm@greysector.net> 4.1.4-0.1.svn1183
changelog:
  - updated to SVN r1183
  - simplified multilib patch
  - fixed endianness issues (rhbz#442508)
  - added some docs


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.0.4-15
changelog:
  - Replaced patch from 1.0.4-13 by patch from
    http://www.openwall.com/lists/oss-security/2010/03/17/3
    (CVE-2010-1192 CVE-2010-1194)
  - Removed unquoted version macro from changelog


author: Steve Dickson <steved@redhat.com> 1.4.12-1
changelog:
  - Updated to latest stable upstream version: 1.4.12
  - API documentation is now installed (bz 487977)
  - libevent-devel multilib conflict (bz 477685)
  - epoll backend allocates too much memory (bz 517918)


author: Richard Hughes <rhughes@redhat.com> - 0.6.21-5
changelog:
  - Update to version 0.6.21 fixing many bugs and CVEs
  - Remove upstreamed patches
  - Resolves: #839915


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-3
changelog:
  - drop the S390 build workaround as it is no longer needed
  - additional spec file cleanups for merge review (#226008)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-5
changelog:
  - use /dev/urandom for seeding in the FIPS mode
  - make the tests to pass in the FIPS mode also fixing
    the FIPS-186-3 DSA keygen


author: Marek Kasik <mkasik@redhat.com> - 0.2.3-9
changelog:
  - Add as, bn_IN, kn, ko, ml, ta, te, ru and or translations
  - Modify de, es, fr, gu, hi, it, ja, mr, pa, pt_BR, zh_CN
           and zh_TW translations
  - Patch by Ankit Patel
  - Resolves: #616313


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.2-1.2
changelog:
  - Access oVirt API through /ovirt-engine/api rather than /api, this fixes
    foreign menu when accessing a VM from .vv files
    Resolves: rhbz#1297810


author: Christophe Fergeau <cfergeau@redhat.com> 0.0.3-2
changelog:
  - Removed definition of BuildRoot and cleanup of BuildRoot in %clean
  - Added missing arch to versioned Requires: %{name} in the -devel package
  - Don't include empty NEWS and ChangeLog in built RPM


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.2-2
changelog:
  - Silence unnecessary warning
    Resolves: rhbz#1201846
  - Access oVirt REST API through /ovirt-engine/api rather than /api
    Resolves: rhbz#1277447
  - Allow to cancel ovirt:// authentication dialog in virt-viewer
    Resolves: rhbz#1201604
  - Make sure 'cancelled' signal is disconnected when objects die
    Related: rhbz#1201604
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274355
  - Don't print ticket value to stdout
    Resolves: rhbz#1216118
  - Add support for accessing VMs behind proxies
    Resolves: rhbz#1292754


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.2-3
changelog:
  - Fix bug when setting the CA used for https REST communication
    Resolves: rhbz#1325762
  - Fix parsing of state of storage domain nodes
    Resolves: rhbz#1318672
  - Silence one redundant warning happening during storage domain parsing
    Related: rhbz#1201846


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-2
changelog:
  - fix use of macro in changelog (rpmlint)
  - build with --disable-rpath (rpmlint)
  - build with %{?_smp_mflags}


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-3
changelog:
  - turn off common lisp bindings the right way
  - drop finger output
  - recode the changelog into UTF-8 if it isn't UTF-8 (rpmlint)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.15-1
changelog:
  - Rebase to libguestfs 1.16.15
    resolves: rhbz#719879
  - Fix: inspection doesn't recognize Fedora 17+ (RHBZ#809401)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.18-2
changelog:
  - Rebase to libguestfs 1.16.18
    resolves: rhbz#719879
  - Fix: guestfs_last_error not set when qemu fails early during launch
    resolves: rhbz#811673
  - Fix: RFE: virt-sysprep: hostname can not be changed on rhel system
    (RHBZ#811112)
  - Fix: RFE: virt-sysprep: net-hwaddr not removed from "ifcfg-*" files on
    rhel (RHBZ#811117)
  - Fix: inspection fails on ubuntu 10.04 guest with encrypted swap (RHBZ#811872)
  - Fix: cannot open disk images which are symlinks to files that
    contain ':' (colon) character (RHBZ#812092)
  - BR gettext-devel so we can rerun autoconf.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.19-1
changelog:
  - Rebase to libguestfs 1.16.19
    resolves: rhbz#719879
  - Rebuild against augeas 0.9.0-3.el6
    related: rhbz#808662
  - Fix: Don't abort inspection if mdadm.conf ARRAY doesn't have a uuid.
  - Switch back to git for patch management.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.34-1
changelog:
  - Rebase to latest stable-1.16 branch version libguestfs 1.16.34.
  - Include missing patch which adds <locale.h> to fuse/guestmount.c
    resolves: rhbz#883338
  - Fix link to engineering git repo.
  - Add workaround for bug in yum: RHBZ#883463.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.2.7-1.24
changelog:
  - Remove runtime requires xfsprogs and /lib64/libhandle.so.1 (RHBZ#630986).
    Note that we have removed support completely from the appliance.  Even
    installing xfsprogs separately will not provide support in this
    build of libguestfs.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-11
changelog:
  - virt-sysprep: Fix locking accounts with passwords.
    resolves: rhbz#1037166
  - Update copy-patches script to RHEL 6.6.


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-12
changelog:
  - Fix lvm-set-filter to work with newer lvm2 versions.
    resolves: rhbz#1168751
  - Fix handling of structs in the Java bindings.
    resolves: rhbz#1074005
  - Fix scrub-file so it can work on symlinks.
    resolves: rhbz#1091859
  - Show also aliases in the output of `guestfish -h`.
    resolves: rhbz#1100530
  - Fix typo in the man page of virt-edit.
    resolves: rhbz#1151739
  - virt-ls: always output the checksum field in CSV mode.
    resolves: rhbz#1151901
  - virt-ls: avoid double slashes in directory output.
    resolves: rhbz#1151911
  - Fix newline character in error output.
    resolves: rhbz#1153974
  - Fix virt-sysprep firstboot scripts to not be run more than once.
    resolves: rhbz#1159651
  - Fix logging of virt-sysprep firstboot scripts.
    resolves: rhbz#1160203
  - Fix description of 'set_append' and 'get_append' APIs.
    resolves: rhbz#1164734


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-13
changelog:
  - guestfish: fix Tab completion with some filesystems (e.g. xfs).
    resolves: rhbz#1153846
  - Improve drive caching by selecting the caching mode.
    resolves: rhbz#1038977
  - Generate user-cancel automatically, so there is also documentation for it.
    resolves: rhbz#1100533
  - virt-sysprep: make sure to trigger autorelabel by default when removing
    users.
    resolves: rhbz#1153855
  - virt-sysprep: recommend usage of --selinux-relabel with SELinux guests.
    related: rhbz#1153855
  - virt-sparsify: allow block devices as output.
    resolves: rhbz#1122557


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-14
changelog:
  - Raise augeas (Build)Requires to >= 1.0.0-8.el6, which fixes
    rhbz#1160261, so virt-sysprep can remove users from /etc/shadow;
    also remove note about that lack.
    resolves: rhbz#1138630
  - Make sure that libguesfs (the library itself), and virt-sparsify in
    particular, can handle filenames with ':'.
    resolves: rhbz#1128942


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-7
changelog:
  - FUSE: fix access as root to files and directories not owned by root
    resolves: rhbz#1106548
  - virt-sparsify: check for available space before starting
    resolves: rhbz#1097359
  - Enable gdisk support to make part-get-gpt-type and part-set-gpt-type work
    resolves: rhbz#965495


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-16
changelog:
  - Fix the old inspection code to handle some features of RHEL 7 images:
    handle /bin as symlink to /usr/bin, grub2 in boot partition, and
    recognize xfs as filesystem (reading UUID and label for it).
    resolves: rhbz#1216305
  - Fix reading of icon in RHEL 7 guests.
    resolves: rhbz#1216298
  - virt-sysprep: don't delete /var/spool/at/.SEQ
    resolves: rhbz#1229305
  - virt-sparsify: read all the output of `qemu-img --help`
    resolves: rhbz#1218934
  - Fix getting long labels for NTFS and btrfs filesystems; also correct the
    documented maximum length of btrfs labels.
    resolves: rhbz#1164729


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-17
changelog:
  - Mention ext2/3/4 in set-label error messages for ext labels.
    resolves: rhbz#1294956
  - Fix handling of symlinks in ll and llz, and when editing files in guestfish
    and virt-edit.
    resolves: rhbz#1293276


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-1
changelog:
  - Rebase to libguestfs 1.20.11.
    resolves: rhbz#958183
  - Remove buildnet: builds now detect network automatically.
  - The rhel-6.x branches containing the patches used in RHEL are
    now stored on a public git repository
    (https://github.com/libguestfs/libguestfs/branches).
  - Compare spec file to Fedora 18 and fix where necessary.
  - Backport new APIs part-get-gpt-type and part-set-gpt-type
    resolves: rhbz#965495
  - Fix DoS (abort) due to a double free flaw when inspecting certain guest
    files / images (CVE-2013-2124)
    resolves: rhbz#968337
  - libguestfs-devel should depend on an explicit version of
    libguestfs-tools-c, in order that the latest package is pulled in.
  - Rebuild against Augeas >= 1.0.0-5
    resolves: rhbz#971207
  - Backport Windows inspection changes
    resolves: rhbz#971090
  - Add back state test commands to guestfish
    resolves: rhbz#971664
  - Work around problem with ntfsresize command in RHEL 6
    resolves: rhbz#971326
  - Fix txz-out API
    resolves: rhbz#972413
  - Move virt-sysprep to the libguestfs-tools-c package since it's no longer
    a shell script
    resolves: rhbz#975572
  - Fix hostname inspection because of faulty Augeas path expression
    resolves: rhbz#975377
  - Calculate appliance root correctly when iface drives are added
    resolves: rhbz#975760
  - Add notes about resizing Windows disk images to virt-resize documentation
    resolves: rhbz#975753
  - Remove dependency on lsscsi, not available in 6Client
    resolves: rhbz#973425
  - Fix yum cache copy so it works if there are multiple repos
    resolves: rhbz#980502
  - Fix hivex-commit API to fail with relative paths
    resolves: rhbz#980372
  - Better documentation for filesystem-available API
    resolves: rhbz#980358
  - Fix double free when kernel link fails during launch
    resolves: rhbz#983690
  - Fix virt-sysprep --firstboot option
    resolves: rhbz#988863
  - Fix cap-get-file so it returns empty string instead of error on no cap
    resolves: rhbz#989352
  - Better documentation for acl-set-file
    resolves: rhbz#985269
  - Fix bogus waitpid error when using guestfish --remote
    resolves: rhbz#996825
  - Disable 9p support
    resolves: rhbz#997884
  - Document that guestfish --remote doesn't work with certain other arguments
    resolves: rhbz#996039
  - Enable kvmclock in the appliance to reduce clock instability
    resolves: rhbz#998108
  - Fix 'sh' command before mount causes daemon to segfault
    resolves: rhbz#1000122
  - Various fixes to tar-out 'excludes' (RHBZ#1001875)
  - Document use of glob + rsync-out (RHBZ#1001876)
  - Document mke2fs blockscount (RHBZ#1002032)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-2
changelog:
  - Fix CVE-2013-4419: insecure temporary directory handling for
    guestfish's network socket
    resolves: rhbz#1019737


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-19
changelog:
  - libguestfs-java: bump the java Require to >= 1.7.0, matching the
    Build-Require, and the generated bytecode
    resolves: rhbz#1319086


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-24
changelog:
  - inspect: Detect 32 bit applications running on WOW64 emulator
    resolves: rhbz#692394
  - perl: Binding and test for guestfs_last_errno
    resolves: rhbz#672491
  - New API: list-dm-devices
    fish: Show device mapper device in tab completion
    resolves: rhbz#688062
  - Document that fullvirt query only works for Linux guests
    resolves: rhbz#690358


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-25
changelog:
  - Fix 'unknown filesystem' warnings in old inspection code
    resolves: rhbz#678231
    resolves: rhbz#666578


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-26
changelog:
  - Document that remote run in cmd substitution context hangs.
    resolves: rhbz#730248
  - Note that additional memory may be required to typecheck Augeas lenses.
    resolves: rhbz#729887


author: Petr Sabata <psabata@redhat.com> - 1.0.10-2
changelog:
  - Avoid NULL dereference when parsing supported_classes sys entry
  - Remove redundant buildroot definition
  - Resolves: rhbz#690014


author: Petr Šabata <contyk@redhat.com> - 1.0.13-1
changelog:
  - 1.0.13 bump + 47d8dca, "Set SerialNumber to 'Unknown' if not found"  (#788510)
  - Subpackage the pkgconfig file


author: Petr Šabata <contyk@redhat.com> - 1.0.16-1
changelog:
  - 1.0.16 bump, documentation and autotools scripts updates (#829810)
  - Fix an old bogus date in the changelog


author: Doug Ledford <dledford@redhat.com> - 1.1.5-1
changelog:
  - Update to latest upstream version (1.1.4 to 1.1.5)
  - Drop libibverbs cow.patch as it is in 1.1.5 already
  - Enable valgrind support so memory corruption is easier to debug
  - Make sure RPATH entries are removed from programs
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.1.6-5
changelog:
  - Don't print link state on iWARP links as it's always invalid
  - Don't try to do ud transfers in excess of port MTU
  - Resolves: bz822781


author: Doug Ledford <dledford@redhat.com> - 1.1.7-1
changelog:
  - Update to latest upstream release
  - Remove patches that are now part of upstream
  - Fix ibv_srq_pingpong with negative value to -s option
  - Resolves: bz879191


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Update to latest upstream release (which adds XRC support,
    infrastructure for verbs extensions, core support for usNIC
    nodes and transports, uverbs extensions, and receive flow
    steering extension)
  - The HPN channel in rhel6 is going away and the RoCE capability
    is being folded back into the base OS channel package (aka
    this one).  Provide an Obsoletes tag to cause this package
    to replace the older libibverbs-rocee package from the HPN
    channel
  - Resolves: bz854655


author: Doug Ledford <dledford@redhat.com> - 1.1.8-2
changelog:
  - Add the RoCE IP Address GID support patches
  - Create our own tarball that is the three patches we needed
    then autoreconf run with an acceptable version of autotools
    as the version in the build system is too old
  - Resolves: bz1051211


author: Doug Ledford <dledford@redhat.com> - 1.1.8-4
changelog:
  - Update RoCE IP addressing patches to latest version under review
  - Fix a coverity found issue
  - Resolves: bz1119105


author: Debarshi Ray <rishi@fedoraproject.org> - 0.43-4
changelog:
  - Updated patch to fix #includes in the headers to work with
    'pkg-config --cflags libical'. (Red Hat Bugzilla #484091)


author: Jay Fenlason <fenlason@redhat.com> 1.2.0-4
changelog:
  - Update the Source and URL fields to point to correct locations.
    Resolves: rhbz#553782 -  Invalid URLs in spec file


author: Tim Waugh <twaugh@redhat.com> 0.2.11-9
changelog:
  - The python sub-package now requires the exactly-matching main
    package (bug #605169).
  - Fixed strict aliasing warnings (bug #605170).


author: Doug Ledford <dledford@redhat.com> - 1.2-1.el6
changelog:
  - Update to latest upstream source
  - Change BuildRequires from valgrind to valgrind-devel for rhel6
  - Drop ppc64 build as it isn't officially supported upstream
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.3-3
changelog:
  - Add missing files to dracut install command, including bash
    as the truescale-serdes.cmds will not work with dash and
    can not be reasonably ported to dash.
  - Related: bz1024903


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.2
changelog:
  - Fixes for the iwpmd start-up scripts with systemd
  - A change to enable multi devices per port mapper client
  - Releasing libiwpm-1.0.2 to be included in OFED-3.18


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.3rc1
changelog:
  - Adding iwpmd.conf file to enable changing the size
    of the netlink socket receive buffer
  - Including a fix for failing to send netlink messages


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 1.0.3
changelog:
  - Fix for the init script to enable the service to start automatically
    after boot on SLES11 SP4
  - Releasing libiwpm-1.0.3 to be included in OFED-3.18-1


author: Tom Lane <tgl@redhat.com> - 6b-44
changelog:
  - Fix libtool hacking so it also works with libtool 2.2.  (For the
    moment the specfile still also works with libtool 1.5, but that can
    go away eventually.)


author: Tom Lane <tgl@redhat.com> 1.2.1-1
changelog:
  - Imported into RHEL-6 from Fedora 18
  - Dropped separate utils subpackage, because existing packages might expect
    that Requires: libjpeg is enough to pull in the command-line tools;
    we should only alter the subpackage breakdown in a new RHEL branch
  - Dropped turbojpeg build, because it doesn't seem ready for prime time
    and isn't part of our RHEL-6 requirements anyway
  Resolves: #788687


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.13-3
changelog:
  - use the proper %patch stanza to make rpmdiff happy
  - related: rhbz#873422 - LDB 1.1.13 exports improper ABI


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.13-3.1
changelog:
  - Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.2.z]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Doug Ledford <dledford@redhat.com> - 1.0.2-1
changelog:
  - Update to latest upstream release (1.0.1 -> 1.0.2)
  - Remove 5 patches rolled into upstream release
  - Drop ifnarch ia64 use around valgrind as we don't build on ia64 any more
  - Fix broken libmlx4-modprobe.conf
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.0.6-7
changelog:
  - Add compiler warnings patch
  - Rebuild against latest libibverbs and valgrind-devel
  - Move module init code to rdma package and require rdma package
  - Resolves: bz1142161, bz1163527


author: Doug Ledford <dledford@redhat.com> - 1.0.2-5
changelog:
  - Fix modprobe file so it can't render a machine unbootable if run against
    an older kernel.
  - Resolves: bz805129


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1
changelog:
  - Update to latest upstream release
  - Remove files related to setting ports to Ethernet mode as that
    isn't even supported on this card yet and the files that are
    there will be wrong when it is supported


author: Doug Ledford <dledford@redhat.com> - 1.0.2-1
changelog:
  - Bump and rebuild against latest libibverbs and latest valgrind-devel
  - Update to latest upstream release for various fixes and improvements
  - Resolves: bz1142162, bz1116096


author: Doug Ledford <dledford@redhat.com> - 1.0.5-5
changelog:
  - Rename devel-static package to just -static, it only has a single static
    lib in it and no actual devel files (like headers, those are part of
    libibverbs-devel instead).  Obsolete the various other named packages we
    want this to supercede
  - Enable valgrind annotations on all arches except ia64
  - Update to latest code, including update for libibverbs API change
  - Bump release to 5 so it is higher than the current rhel5 libmthca release
  - Add various patches from the upstream git repo that haven't been rolled into
    a new release tarball yet


author: Doug Ledford <dledford@redhat.com> - 1.0.5-6
changelog:
  - Tweak the provides and obsoletes a little bit to make sure we only pull in
    the -static package to replace past -devel-static packages, and not past
    -devel packages.


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream version (1.0.5 -> 1.0.6)
  - Remove ifnarch ia64 around valgrind support since we don't build on ia64
    any more
  - Remove 4 patches that have been rolled into upstream release
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Rebuild against latest libibverbs
  - Add psuedo provide of libibverbs-driver.%{_arch}
  - Fix exclusivearch to work on i686
  - Related: bz725016, bz724900


author: Doug Ledford <dledford@redhat.com> - 1.1.3-1
changelog:
  - Update to latest upstream release
  - Rebuild against latest libibverbs (native FDR/IBoE enabled)
  - Related: bz750609


author: Pavel Šimerda <psimerda@redhat.com> - 1.0.1-3
changelog:
  - Resolves: #738244 - provide libnetfilter_queue package for RHEL 6.6
  - use a modified EPEL6 spec file


author: Thomas Haller <thaller@redhat.com> - 3.2.21-6
changelog:
  - fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
  - fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
  - fix printing in nl_msec2str for whole seconds
  - don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
  - backport nl_has_capability function


author: Neal Becker <ndbecker2@gmail.com> - 0.9.9-2
changelog:
  - Remove libotf-config (just just pkg-config instead)
  - Remove example/Makefile to fix multilib conflict


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #721305


author: Carl Byington <carl@five-ten-sg.com> - 0.6.43-1
changelog:
  - decode more of the pst format, some minor bug fixes
  - add support for code pages 1200 and 1201.
  - add readpst -t option to select output item types, which can
    now be used to process folders containing mixed item types.
  - fix segfault with embedded appointments
  - add readpst -u option for Thunderbird mode .size and .type files
  - better detection of embedded rfc822 message attachments


author: Carl Byington <carl@five-ten-sg.com> - 0.6.44-1
changelog:
  - patch from Lee Ayres to add file name extensions in separate mode.
  - allow mixed items types in a folder in separate mode.


author: David Vossel <dvossel@redhat.com> - 0.14.2-2
changelog:
  - Fixes issue with qb_ipcc_recv() that resulted in nearly 100%
    cpu usage during certain situations. (#869446)


author: David Vossel <dvossel@redhat.com> - 0.14.2-3
changelog:
  - Additional upstream work to address 100% cpu usage bug in
    realtime environment.
    cpu usage during certain situations. (#869446)


author: Angus Salkeld <asalkeld@redhat.com> - 0.9.0-2
changelog:
  - Disable loop and ipc tests as they use features not availble on brew.
  - Get the tests to print out (disable parallel-tests).
  - Call autogen.sh to get the no parallel-tests
  - Disable ppc arch as the "make check" fails.


author: Christine Caulfield <ccaulfie@redhat.com> - 0.17.1-2
changelog:
  - Increase size of the buffer where we make the socket name to allow for longer PIDs 
    Resolves: rhbz#1276345


author: Doug Ledford <dledford@redhat.com> - 1.0.15-1
changelog:
  - Update to latest upstream release (adds FDR support and fixes 696019 the
    upstream way)
  - Include fixes in git not yet in a release
  - Related: bz750609
  - Resolves: bz700289


author: Doug Ledford <dledford@redhat.com> - 1.0.17-0.git4b5c1aa
changelog:
  - Pre-release version of 1.0.17
  - Resolves a CVE vulnerability between librdmacm and ibacm
  - Fixes various minor bugs in sample programs
  - Resolves: bz866221, bz816074


author: Doug Ledford <dledford@redhat.com> - 1.0.17-1
changelog:
  - Official 1.0.17 release
  - The fix to bug 866221 got kicked back as incomplete last time, fix
    it for real this time.
  - Intel adapters that use the qib driver don't like using inline data,
    so use a memory region that is registered instead
  - Resolves: bz866221, bz828071


author: Doug Ledford <dledford@redhat.com> - 1.0.19.1-1
changelog:
  - Update to latest upstream release
  - Drop patches that upstream has folded in
  - Resolves: bz1119108


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.4.2-14
changelog:
  - Resolves: rhbz#1130264 crash in gstreamer callback on s390x
  - Resolves: rhbz#1131428 cannot export charts as svg
  - Resolves: rhbz#1035298 obsolete openoffice.org-langpack-ms_MY


author: David Tardon <dtardon@redhat.com> - 1:4.2.8.2-11
changelog:
  - Resolves: rhbz#1223696 some labels in print dialog are not translated, even
    though the translations exist


author: David Tardon <dtardon@redhat.com> - 1:4.2.8.2-11.1
changelog:
  - Resolves: rhbz#1285818 various flaws
  - CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
  - CVE-2015-5212 Integer underflow in PrinterSetup length
  - CVE-2015-5213 Integer overflow in DOC files
  - CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
    causing memory corruption


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-17
changelog:
  - updated translation rhbz#993626
  - fixed bugs doscovered by coverity rhbz#905051
  - Resolves: #993626, #905051


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-19
changelog:
  - updated transaltion (ko) rhbz#993626
  - fixed bugzilla reporter to work with the new xmlrpc api rhbz#991088
  - Resolves: #991088, #993626


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-20
changelog:
  - Bugzilla: pass Bugzilla_token in all XML RPC calls
  - mailx: improve notification e-mail headers
  - mailx: include hostane in notification e-mail
  - Resolves: #989530, #997871, #1090466, #1093375


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-21.el6_6.1
changelog:
  - switch dump directory owner from "abrt:user" to "user:abrt" (rhbz#1212093)
  - harden against directory traversal, crafted symbolic links (rhbz#1212093)
  - avoid race-conditions in dump dir opening (rhbz#1212093)
  - Resolves: #1211966


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-23
changelog:
  - resolve symbolic and hard link vulnerabilities
  - defend against directory traversal attack
  - Resolves: #1212095


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-24
changelog:
  - switch ownership of new directories from "abrt:user" to "user:abrt"
  - fix a bug allowing libreport to read files outside dump directories
  - Related: #1212095


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-25
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Resolves: #1282143


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-25
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Resolves: #1282144


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.9-29
changelog:
  - Change reporting workflow to enhance the quality of opened customer cases
  - Limit the description section for ABRT reported cases
  - Resolves: #1258474, #1261398


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.9-31
changelog:
  - Add pkg_vendor, reproducer and reproducible to description
  - Attach all dump dir's element to a new case
  - Change libreport-version to 2.0.9.1
  - Resolves: #1261398


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.1
changelog:
  - Resolves: rhbz#1284966 add libreswan to RHEL6 (core)
  - Resolves: rhbz#1288086 /var/run/pluto should have 755 and should have 700


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.2
changelog:
  - Resolves: rhbz#1289498 keyingtries=0 is broken
  - Resolves: rhbz#1166151 Pluto crashes on during 'service ipsec stop'
  - Resolves: rhbz#1216946 IPv6 in RHEL6 fails after reboot
  - Resolves: rhbz#1144462 ikev2 status shows "no tunnels up" while tunnel is up


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.1
changelog:
  - Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort when ' auto --up --asynchronous' is used
  - Resolves: rhbz#1335896 ipsec initnss/checknss custom directory not recognized


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.2
changelog:
  - Resolves: rhbz#1313843 Prescript warning: Missing control file /var/run/pluto/pluto.ctl
  - Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort [extended patch]
  - Resolves: rhbz#1369990 Libreswan connection sometimes does not get re-established after one side restarts


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.3
changelog:
  - Resolves: rhbz#1403201 pluto uses up available memory and fails with 'unable to popen'
  - Resolves: rhbz#1311360 When IKE rekeys [...] (updated for IKEv1 responder side)


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-4
changelog:
  - Don't call xmlCleanupParser, it breaks other users of thread-private
    storage
    Resolves: #578568


author: Jasper St. Pierre <jasper@redhat.com> - 2.26.0-6.1
changelog:
  - Fix build by linking in -lm
  - io: Implement strict network policy (CVE-2013-1881)
    Resolves: #1049155


author: Dan Walsh <dwalsh@redhat.com> - 2.0.93-1
changelog:
  - Update to upstream 
  	* Show strerror for security_getenforce() by Colin Waters.
  	* Merged selabel database support by KaiGai Kohei.
  	* Modify netlink socket blocking code by KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-1
changelog:
  * Set errno=EINVAL for invalid contexts from Dan Walsh.
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.
  Resolves: #593788


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.1
changelog:
  - Cleanup selinux_mnt on disabled machines
  Resolves: #706049
  - Make restorecon python binding use realpath
  Resolves: #698583


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.6
changelog:
  - Back port handling of is_selinux_enabled form rhel7. We need is_selinux_enabled() to report disabled in a docker container so that SELinux aware applications do not attempt to do SELinux activities.
  Resolves: #1096816


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.7
changelog:
  - Fix selinuxdefcon to print end of line at the end of output.
  Resolves:#913115
  - Fix security_get_initial_context desc in security_compute_av.3
  Resolves:#1011109
  - Apply fix for selinux.8 man page from pschiffe@redhat.com.
  Resolves:#1011145


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.8
changelog:
  - avc_has_perm will now return yes if the machine is in permissive mode
  Resolves:#753675
  - nscd permission support for netgroup
  - Fix matchpathcon verify handling to fail on non-existing objects


author: Petr Lautrbach <plautrba@redhat.com> 2.0.43-5.1
changelog:
  - Detect already enabled/disabled modules in semanage_direct_{enable,disable} functions
  Resolves: rhbz#872700
  - Fix sources to pass all tests
  Rsolves: rhbz#591451


author: Brian Pepple <bpepple@fedoraproject.org> - 0.1.11-13
changelog:
  - Backport patch that allows SexyIconEntry to support images using icon-name.
  - Drop requires on hunspell-en dictionary. (#517804)


author: Denis Leroy <denis@poolshark.org> - 2.2.4.1-1
changelog:
  - Update to upstream 2.2.4.1
  - Added devhelp book and necessary BRs
  - Split documentation into new subpackage
  - Moved documentation to gtk-doc dir


author: Felipe Borges <feborges@redhat.com> - 0.2.4-2
changelog:
  - Allocate at least 1 page if there are no Pages: or Page: comments in the PS file
  - Resolves: #667717


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-1
changelog:
  - New upstream version, resolves rhbz #766335
  - Build python bindings to satisfy Samba4 BuildRequires


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-2
changelog:
  - Obsolete older pytalloc{,-devel} releases to clear the upgrade path
    towards non-multilib pytalloc
  - Resolves: rhbz#862062


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-3
changelog:
  - Resolves: rhbz#692251 - tdb_extend() can cause a memory-usage explosion if
  -                         the size of its entries are very large


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.10-1
changelog:
  - Resolves: rhbz#766334 - Rebase libtdb to match the version required
                            by Samba4
  - Enable the Python bindings to satisfy samba4 BuildRequirements
  - Obsoletes tdb-1.2.9-limit-tdb_expand.patch


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.8-3.2
changelog:
  - Move _tdb_text.py to python-tdb subpackage
  - Resolves: rhbz#1329664 - tdb mispackaged tdb_text.py file


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.17-1
changelog:
  - Rebase to 0.9.17 to provide the version Samba4 needs
  - Drop EXCLUDE_PATTERNS workaround in specfile
  - Resolves: rhbz#766336


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.18-2
changelog:
  - Resolves: rhbz#975489 - Additional flags might have no effect
                            on 32bit architectures


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.26-1
changelog:
  - Rebase libtevent to 0.9.26
  - Remove upstreamed or no longer applicable patches
  - Related: rhbz#1322688


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.26-2
changelog:
  - temporarily disable make check, which keeps failing in mock despite
    working correctly on a full system
  - Related: rhbz#1322688


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Sync with F-12, including:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  - Apply Warmerdam's partial fix for bug #460322 ... better than nothing.
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  - add sparc/sparc64 to multilib header support
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, CVE-2010-2233
  Resolves: #606708, #588784, #589034, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-1.el6_0.2
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688829
  - Add fix for CVE-2011-1167
  Resolves: #688742


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885311


author: Nikola Forró <nforro@redhat.com> - 3.9.4-16
changelog:
  - Add patches for CVEs:
  - CVE-2016-3632 CVE-2016-3945 CVE-2016-3990
  - CVE-2016-3991 CVE-2016-5320
  - Related: #1335099


author: Nikola Forró <nforro@redhat.com> - 3.9.4-19
changelog:
  - Add patches for CVEs:
  - CVE-2016-9533 CVE-2016-9534 CVE-2016-9535
  - CVE-2016-9536 CVE-2016-9537 CVE-2016-9540
  - CVE-2016-5652
  - Resolves: #1412078


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885310


author: Steve Dickson <steved@redhat.com> 0.2.1-7
changelog:
  - Fixed some races in getnetconfig code (bz 1031498)
  - Remove the installation of libtirpc.a and libtirpc.la (bz 869397)


author: Steve Dickson <steved@redhat.com> 0.2.1-11
changelog:
  - Backported upstream debugging (bz 1273158)
  - Fixed memory leak in svc_vc_create (bz 1276687)
  - Fixed memory leak in svc_tli_create (bz 1276855)
  - Fixed memory leak in __svc_vc_dodestroy (bz 1276856)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.3-3
changelog:
  - Imported from Fedora
  - Resolves: rhbz#726463 - Add libunistring as a separate component/package
                            into RHEL


author: Hans de Goede <hdegoede@redhat.com> - 1.0.9-0.6.rc1
changelog:
  - Don't split bulk transfers unnecessary
  - Resolves: rhbz#830751
  - Don't let disconnect_kernel_driver detach the usbfs driver
  - Resolves: rhbz#820205


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-2
changelog:
  - Allow supplying passwords from scripts
  - Allow specifying a LDAP simple bind password in libuser.conf
    Resolves: #562832


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-5
changelog:
  - Correctly mark the LDAP default password value as encrypted (CVE-2011-0002)
    Resolves: #668021
  - Default LDAP cn to username if gecos is empty
    Resolves: #670151
  - Preserve setuid and setgid bits when copying files from /etc/skel
    Resolves: #724987
  - Fix segfault when reading database files with certain sizes
    Resolves: #788521


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-7
changelog:
  - Don’t use 512-bit RSA private keys in tests
    Related: #1235518
  - Fix testsuite failures if more than one architecture is building concurrently
    Related: #1235518


author: Daniel Veillard <veillard@redhat.com> - 0.5.11-1.el6
changelog:
  - Rebase to 0.5.11 for RHEL-6.1
  - needed to bump libcmpiutil requirement to 0.5.4 due to incompatibilities
  - Resolves: rhbz#633336
  - Resolves: rhbz#633331


author: John Ferlan <jferlan@redhat.com> - 0.6.1.10.el6
changelog:
  - VSSD: Add properties for arch and machine (rhbz#1046280)
  - libxkutil: Improve domain.os_info cleanup
  - Coverity: Resolve RESOURCE_LEAK - parse_os()


author: Daniel Veillard <veillard@redhat.com> - 0.6.1-2.el6
changelog:
  - do not require specifically tog-pegasus server (rhbz#799037)
  - (de)register the schemas with sblim-sfcb if found


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.1-4.el6
changelog:
  - Fix an incomplete substitution in Makefile (rhbz#805892)
  - Only deregister cim classes on uninstall (rhbz#864096)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-4.el6_4.1
changelog:
  - Distinguish running or inactive state (rhbz#913164)
  - Only support script on bridge for xen domains (rhbz#951402)
  - Need to initialize domain->type to UNKNOWN (rhbz#951402)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-4.el6_4.2
changelog:
  - Add shareable property to disk and dumpCore tag support (rhbz#1009117)
  - Update spec file to more closely match upstream
  - Uninstall open-pegasus-specific providers from sfcb.eml (rhbz#833633)
  - Don't install open-pegasus' specific providers (rhbz#859122)
  - Fixed dates in changelog


author: Michal Privoznik <mprivozn@redhat.com> - 0.6.1-7.el6
changelog:
  - libvirt-cim-get_dominfo-Use-VIR_DOMAIN_XML_SECURE-more-wisely.patch (rhbz#826179)
  - Don't install open-pegasus' specific providers (rhbz#859122)


author: John Ferlan <jferlan@redhat.com> - 0.6.1-9.el6
changelog:
  - Add shareable property to disk and dumpCore tag support (rhbz#1000937)
  - Update spec file to more closely match upstream
  - Fixed dates in changelog


author: John Ferlan <jferlan@redhat.com> - 0.6.1-9.el6_5.1
changelog:
  - VSSD: Add properties for arch and machine (rhbz#1055626)
  - libxkutil: Improve domain.os_info cleanup
  - Coverity: Resolve RESOURCE_LEAK - parse_os()


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-16
changelog:
  - qemu_agent: Remove agent reference only when disposing it (rhbz#892079)
  - Add RESUME event listener to qemu monitor. (rhbz#894085)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-17
changelog:
  - storage: Fix lvcreate parameter for backingStore. (rhbz#896398)
  - qemu: Don't return success if creation of snapshot save file fails (rhbz#896403)
  - qemu: Reject attempts to create snapshots with names containig '/' (rhbz#896403)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18
changelog:
  - rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)
  - spec: Disable libssh2 support (rhbz#513363)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.12
changelog:
  - Introduce APIs for splitting/joining strings (rhbz#1006265)
  - Rename virKillProcess to virProcessKill (rhbz#1006265)
  - Rename virPid{Abort, Wait} to virProcess{Abort, Wait} (rhbz#1006265)
  - Rename virCommandTranslateStatus to virProcessTranslateStatus (rhbz#1006265)
  - Move virProcessKill into virprocess.{h, c} (rhbz#1006265)
  - Move virProcess{Kill, Abort, TranslateStatus} into virprocess.{c, h} (rhbz#1006265)
  - Include process start time when doing polkit checks (rhbz#1006265)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.15
changelog:
  - network: Allow <vlan> in type='hostdev' networks (rhbz#1014445)
  - libvirt-guests: status: Return non-zero when stopped (rhbz#1017196)
  - qemu: Take error path if acquiring of job fails in qemuDomainSaveInternal (rhbz#1017194)
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1017198)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1017198)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.1
changelog:
  - xen: Resolve resource leak with 'cpuset' (rhbz#908836)
  - schema: Make the cpuset type reusable across schema files (rhbz#908836)
  - schemas: Add schemas for more CPU topology information in the caps XML (rhbz#908836)
  - conf: Split out NUMA topology formatting to simplify access to data (rhbz#908836)
  - capabilities: Switch CPU data in NUMA topology to a struct (rhbz#908836)
  - capabilities: Add additional data to the NUMA topology info (rhbz#908836)
  - test: Add support for thread and core information for the test driver (rhbz#908836)
  - xen: Initialize variable before using (rhbz#908836)
  - xen: Actually fix the uninitialized variable (rhbz#908836)
  - spice: Properly reserve tlsPort when no port specified (rhbz#913624)
  - qemu_agent: Ignore expected EOFs (rhbz#915344)
  - qemu: Nicer error message if live disk snapshot unsupported (rhbz#915363)
  - qemu: Destroy domain on decompression binary error (rhbz#915347)
  - qemu: Run lzop with '--ignore-warn' (rhbz#915347)
  - Don't ignore return value of qemuProcessKill (rhbz#915353)
  - Fix race condition when destroying guests (rhbz#915353)
  - Log warning if storage magic matches, but version does not (rhbz#915354)
  - Add lots of debugging to storage file probing code (rhbz#915354)
  - Fix probing of QED file format (rhbz#915354)
  - util: Add virendian.h macros (rhbz#915354)
  - util: Use new virendian.h macros (rhbz#915354)
  - storage: Rearrange functions (rhbz#915354)
  - storage: Prepare for refactoring (rhbz#915354)
  - storage: Refactor metadata lookup (rhbz#915354)
  - storage: Don't follow backing chain symlinks too eagerly (rhbz#915354)
  - storage: Test backing chain traversal (rhbz#915354)
  - qemu: Check backing chains even when cgroup is omitted (rhbz#915349)
  - python: Fix bindings for virDomainSnapshotGet{Domain,Connect} (rhbz#915348)
  - qemu: Add checking in helpers for sgio setting (rhbz#919504)
  - qemu: Merge qemuCheckSharedDisk into qemuAddSharedDisk (rhbz#919504)
  - qemu: Record names of domain which uses the shared disk in hash table (rhbz#919504)
  - qemu: Update shared disk table when reconnecting qemu process (rhbz#919504)
  - qemu: Move the shared disk adding and sgio setting prior to attaching (rhbz#919504)
  - qemu: Remove the shared disk entry if the operation is ejecting or updating (rhbz#919504)
  - qemu: Fix the memory leak (rhbz#919504)
  - Fix crash changing CDROM media (rhbz#919504)
  - qemu: Avoid NULL dereference in qemuSharedDiskEntryFree (rhbz#919504)
  - qemu: Do not set unpriv_sgio if neither supported nor requested (rhbz#917063)
  - Use size_t instead of int for virDomainDefPtr struct (rhbz#915352)
  - util: Add VIR_(APPEND|INSERT|DELETE)_ELEMENT (rhbz#915352)
  - qemu: Fix QMP detection of QXL graphics (rhbz#915352)
  - qemu: Add qemu vga devices caps and one cap to mark them usable (rhbz#915352)
  - conf: Add optional attribte primary to video <model> element (rhbz#915352)
  - qemu: Use newer -device video device in qemu commandline (rhbz#915352)
  - tests: Add one -device video device testcase (rhbz#915352)
  - qemu: Detect VGA_QXL capability correctly (rhbz#915352)
  - qemu: Support ram bar size for qxl devices (rhbz#915352)
  - conf: Don't leak 'primary' video property on error (rhbz#915352)
  - storage: lvm: Don't overwrite lvcreate errors (rhbz#918754)
  - storage: lvm: Lvcreate fails with allocation=0, don't do that (rhbz#918754)
  - storage: Cleanup logical volume creation code (rhbz#918754)
  - docs: Clarify semantics of sparse storage volumes (rhbz#918754)
  - storage: Fix memory leak with regfree(reg) call. (rhbz#922095)
  - storage: Resource resource leak using 'tmp_vols' (rhbz#922095)
  - interface: Resolve resource leak wth 'tmp_iface_objs' (rhbz#922095)
  - locking: Resolve resource leaks on non error path (rhbz#922095)
  - selinux: Resolve resource leak using the default disk label (rhbz#922095)
  - storage: Resolve resource leaks with cmd processing (rhbz#922095)
  - domain_conf: Resolve resource leaks found by Valgrind (rhbz#922095)
  - qemu_command: Resolve resource leaks found by Valgrind (rhbz#922095)
  - storage: Need to add virCommandFree() (rhbz#922095)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.3
changelog:
  - util: Retry NLM_F_REQUEST with different values of IFLA_EXT_MASK (rhbz#928881)
  - security_manager: Don't manipulate domain XML in virDomainDefGetSecurityLabelDef (rhbz#928879)
  - security: Don't add seclabel of type none if there's already a seclabel (rhbz#928879)
  - libvirt_private.syms: Correctly export seclabel APIs (rhbz#928879)
  - security_manager.c: Append seclabel iff generated (rhbz#928879)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.4
changelog:
  - rpc: Fix client crash when server drops connection (rhbz#950601)
  - storage: Fix volume cloning for logical volume. (rhbz#950604)
  - qemu: Allow migration over IPv6 (rhbz#950597)
  - qemu: Set IPv6 migration capability when dump-guest-core is present (rhbz#950597)
  - remote: Don't call NULL closeFreeCallback (rhbz#950599)
  - libvirt: Increase connection reference count for callbacks (rhbz#950599)
  - virsh: Unregister the connection close notifier upon termination (rhbz#950599)
  - virsh: Move cmdConnect from virsh-host.c to virsh.c (rhbz#950599)
  - virsh: Register and unregister the close callback also in cmdConnect (rhbz#950599)
  - rpc: Fix connection close callback race condition and memory corruption/crash (rhbz#950599)
  - tests: Fix qemumonitorjsontest deadlock when the machine is under load (rhbz#951235)
  - Avoid use of free'd memory in auto destroy callback (rhbz#951073)
  - Fix crash in QEMU auto-destroy with transient guests (rhbz#951073)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.5
changelog:
  - daemon: Fix leak after listing volumes (CVE-2013-1962)
  - Don't try to add non-existant devices to ACL (rhbz#958837)
  - Avoid spamming logs with cgroups warnings (rhbz#958837)
  - audit: Properly encode device path in cgroup audit (rhbz#958839)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.6
changelog:
  - qemu: Set correct migrate host in client_migrate_info (rhbz#966587)
  - qemu: Fix crash in migration of graphics-less guests. (rhbz#966587)
  - Fix F_DUPFD_CLOEXEC operation args (rhbz#966707)
  - cgroup: Be robust against cgroup movement races (rhbz#966710)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.7
changelog:
  - virsocket: Introduce virSocketAddrIsWildcard (rhbz#966587)
  - qemuDomainMigrateGraphicsRelocate: Use then new virSocketAddrIsWildcard (rhbz#966587)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.9
changelog:
  - qemuDomainChangeGraphics: Check listen address change by listen type (rhbz#976543)
  - build: Fix build with -Werror (rhbz#976543)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-28
changelog:
  - libvirt-guests: status: Return non-zero when stopped (rhbz#1011981)
  - qemu: Drop qemuDomainMemoryLimit (rhbz#1013758)
  - docs: Discourage users to set hard_limit (rhbz#1013758)
  - docs: Clean 09adfdc62de2b up (rhbz#1013758)
  - qemuSetupMemoryCgroup: Handle hard_limit properly (rhbz#1013758)
  - qemuBuildCommandLine: Fall back to mem balloon if there's no hard_limit (rhbz#1013758)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29
changelog:
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1014198)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1014198)
  - qemu: Generate correct name for hostdev network devices (rhbz#1001881)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.9
changelog:
  - qemuDomainObjBeginJobInternal: Return -2 for temporary failures (rhbz#1100671)
  - qemu: Make qemuProcess{Start, Stop}CPUs easier to follow (rhbz#1100671)
  - qemu: Ignore temporary job errors when checking migration status (rhbz#1100671)
  - qemu: Send migrate_cancel when aborting migration (rhbz#1100642)
  - qemu: add host-pci-multidomain capability (rhbz#1100737)
  - qemu: specify domain in host-side PCI addresses when needed/supported (rhbz#1100737)
  - spec: Switch to "git am" for applying patches


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.10
changelog:
  - qemu: Properly format the uuid string in error messages (rhbz#1110185)
  - qemu: Use maximum guest memory size when getting NUMA placement advice (rhbz#1112819)
  - qemu: fix live pinning to memory node on NUMA system (rhbz#1112820)
  - qemu: Clean up qemuDomainSetNumaParameters (rhbz#1112820)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.11
changelog:
  - virsh: Introduce macros to reject mutually exclusive arguments (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDisk (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDevice (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDisk (rhbz#1120669)
  - virsh: Use inactive definition when removing disk from config (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDevice (rhbz#1120669)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.12
changelog:
  - rpc: message related sizes enlarged (rhbz#1128603)
  - Increase the size of REMOTE_MIGRATE_COOKIE_MAX to REMOTE_STRING_MAX (rhbz#1128603)
  - Fix max stream packet size for old clients (rhbz#1128603)
  - Adjust legacy max payload size to account for header information (rhbz#1128603)
  - rpc: Correct the wrong payload size checking (rhbz#1128603)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.13
changelog:
  - qemu: allow restore with non-migratable XML input (rhbz#1155563)
  - qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1155563)
  - Make ABI stability issue easier to debug (rhbz#1155563)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.2
changelog:
  - qemuDomainDestroyFlags: Don't allow @vm to disappear while executing API (rhbz#1038816)
  - python: Return dictionary without value in case of no blockjob (rhbz#1038815)
  - remote: Fix regression in event deregistration (rhbz#1038814)
  - Add virtio-scsi to fallback models of scsi controller (rhbz#1040141)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.3
changelog:
  - qemu: Avoid operations on NULL monitor if VM fails early (rhbz#1055578)
  - qemu: Do not access stale data in virDomainBlockStats (CVE-2013-6458)
  - qemu: Avoid using stale data in virDomainGetBlockInfo (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockJobImpl (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockCopy (rhbz#1054804)
  - qemu: Fix job usage in virDomainGetBlockIoTune (CVE-2013-6458)
  - Don't crash if a connection closes early (CVE-2014-1447)
  - Really don't crash if a connection closes early (CVE-2014-1447)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.4
changelog:
  - Block info query: Add check for transient domain (rhbz#1059904)
  - network: Only prevent forwarding of DNS requests for unqualified names (rhbz#1062708)
  - network: Change default of forwardPlainNames to 'yes' (rhbz#1062708)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.6
changelog:
  - Remove contiguous CPU indexes assumption (rhbz#1080439)
  - qemu: monitor: Fix error message and comment when getting cpu info (rhbz#1080439)
  - qemu: monitor: Filter out thread ids of CPUS that were unplugged (rhbz#1080439)
  - qemu: monitor: Fix invalid parentheses (rhbz#1080471)
  - virNetClientSetTLSSession: Restore original signal mask (rhbz#1080501)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.8
changelog:
  - LSN-2014-0003: Don't expand entities when parsing XML (CVE-2014-0179)
  - QoS: make tc filters match all traffic (rhbz#1096806)
  - use virBitmapFree instead of VIR_FREE for cpumask (rhbz#1091206)
  - Properly free vcpupin info for unplugged CPUs (rhbz#1091206)
  - sanlock: code movement in virLockManagerSanlockAcquire (rhbz#1097227)
  - sanlock: don't fail with unregistered domains (rhbz#1097227)
  - sanlock: avoid leak in acquire() (rhbz#1097227)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46
changelog:
  - cpu: separate host-model and host-passthrough (rhbz#1138222)
  - Don't include non-migratable features in host-model (rhbz#1138222)
  - Don't add dhcp hosts to hostsfile twice (rhbz#1137011)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.2
changelog:
  - qemu: allow restore with non-migratable XML input (rhbz#1155564)
  - qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1155564)
  - Make ABI stability issue easier to debug (rhbz#1155564)
  - CVE-2014-3633: qemu: blkiotune: Use correct definition when looking up disk (CVE-2014-3633)
  - domain_conf: fix domain deadlock (CVE-2014-3657)
  - CVE-2014-7823: dumpxml: security hole with migratable flag (CVE-2014-7823)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.3
changelog:
  - qemu: Fix checking of ABI stability when restoring external checkpoints (rhbz#1180521)
  - qemu: Use "migratable" XML definition when doing external checkpoints (rhbz#1180521)
  - qemu: Fix memleak after commit 59898a88ce8431bd3ea249b8789edc2ef9985827 (rhbz#1180521)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.4
changelog:
  - conf: Don't format actual network definition in migratable XML (rhbz#1203367)
  - util: more verbose error when failing to create macvtap device (rhbz#1203367)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.5
changelog:
  - Create directory for lease files if it's missing (rhbz#1208619)
  - qemu: cgroup: Properly set up vcpu pinning (rhbz#1209891)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-52
changelog:
  - qemu: Keep QEMU host drive prefix in BlkIoTune (rhbz#1203633)
  - qemu: Fix name comparison in qemuMonitorJSONBlockIoThrottleInfo() (rhbz#1203633)
  - virsh: fix typos in virsh man page (rhbz#1130835)
  - schemas: Allow all generic elements and attributes for all interfaces (rhbz#1206066)
  - RNG: Allow multiple parameters to be passed to an interface filter (rhbz#1206066)
  - qemu_domain: fix startup policy for disks (rhbz#1203542)
  - Create directory for lease files if it's missing (rhbz#1200991)
  - qemu: cgroup: Properly set up vcpu pinning (rhbz#1198096)
  - cgroup: Add accessors for cpuset.memory_migrate (rhbz#1198497)
  - qemu: Fix possible crash (rhbz#1198497)
  - qemu: Migrate memory on numatune change (rhbz#1198497)
  - qemu: fix crash when removing <filterref> from interface with update-device (rhbz#1205042)
  - nwfilter: Fix rule priority problem (rhbz#1210183)
  - qemuProcessHook: Call qemuProcessInitNumaMemoryPolicy only when needed (rhbz#1198645)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-53
changelog:
  - RHEL: Avoid memory leak when virCgroupSetCpusetMemoryMigrate fails (rhbz#1198497)
  - qemu: cgroup: Fix memory leak when there's no vCPU pinning (rhbz#1198096)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-54
changelog:
  - util: set MAC address for VF via netlink message to PF+VF# when possible (rhbz#1113474)
  - util: set macvtap physdev online when macvtap is set online (rhbz#1113474)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-54.el6_7.1
changelog:
  - qemu: split out cpuset.mems setting (rhbz#1265970)
  - qemu: leave restricting cpuset.mems after initialization (rhbz#1265970)
  - virNetDev{Replace, Restore}MacAddress: Fix memory leak (rhbz#1266039)
  - util: make virNetDev(Replace|Restore)MacAddress public functions (rhbz#1266039)
  - util: don't use netlink to save/set mac for macvtap+passthrough+802.1Qbh (rhbz#1266039)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-51
changelog:
  - sanlock: Don't spam logs with "target pid not found" (rhbz#1189414)
  - nwfilter: fix crash when adding non-existing nwfilter (rhbz#1202703)
  - util: more verbose error when failing to create macvtap device (rhbz#1186142)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-55
changelog:
  - daemon: Suppress logging of VIR_ERR_NO_DOMAIN_METADATA (rhbz#1260864)
  - Allow <source> for type=block to have no dev (rhbz#1220197)
  - qemu: event: Properly handle spice events (rhbz#1236581)
  - qemu: event: Clean up VNC monitor handling (rhbz#1236581)
  - qemu: split out cpuset.mems setting (rhbz#1263263)
  - qemu: leave restricting cpuset.mems after initialization (rhbz#1263263)
  - virNetDev{Replace, Restore}MacAddress: Fix memory leak (rhbz#1251532)
  - util: make virNetDev(Replace|Restore)MacAddress public functions (rhbz#1251532)
  - util: don't use netlink to save/set mac for macvtap+passthrough+802.1Qbh (rhbz#1251532)
  - qemu: fix hotplugging cpus with strict memory pinning (rhbz#1263263)
  - storage: Track successful creation of LV for removal (rhbz#1232170)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-56
changelog:
  - qemu: snapshot: Fix return value of external checkpoint with no disks (rhbz#1292312)
  - qemu: snapshot: Fix modification of vm object without job (rhbz#1290647)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachInterface (rhbz#1229128)
  - RHEL: virsh: remove duplicate --config for 'virsh update-device' (rhbz#1224037)
  - Update ESX driver to always use privateData (rhbz#1213348)
  - esx: Simplify VI (vSphere) API and VMware product version handling (rhbz#1213348)
  - conf: net: Correctly switch how to format address fields (rhbz#1299700)
  - qemu: Refuse to create snapshot of a disk without source (rhbz#1299411)
  - Build all binaries with PIE (rhbz#1242156)
  - Enable full RELRO mode (rhbz#1242156)
  - Don't duplicate compiler warning flags when linking (rhbz#1242156)
  - Simplify RELRO_LDFLAGS (rhbz#1242156)
  - Fix AM_LDFLAGS typo (rhbz#1242156)
  - Pass AM_LDFLAGS to driver modules too (rhbz#1242156)
  - RHEL: Enable RELRO for python modules (rhbz#1242156)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-57
changelog:
  - vmx: Relax virtualHW.version check (rhbz#1300574)
  - qemu: snapshot: Don't leak XML definition and forget to unlock job (rhbz#1305793)
  - qemu: Fix formatting flags in qemuDomainSaveImageOpen (rhbz#1307094)
  - network: Resolve some issues around vlan copying (rhbz#1300843)
  - network: fix connections count in case of allocate failure (rhbz#1300843)
  - network: consolidate connection count updates for device pool (rhbz#1300843)
  - network: consolidated info log for all network allocate/free operations (rhbz#1300843)
  - util: increase libnl buffer size (rhbz#1276478)
  - util: reduce debug log in virPCIGetVirtualFunctions() (rhbz#1276478)
  - util: improve error reporting in virNetDevVPortProfileGetStatus (rhbz#1276478)
  - util: add missing newline (rhbz#1276478)
  - util: eliminate bogus error log in virNetDevVPortProfileGetStatus (rhbz#1276478)
  - util: clean up and expand 802.1QbX negotiation logging (rhbz#1276478)
  - util: report the MAC address that couldn't be set (rhbz#1276478)
  - util: reset MAC address of macvtap passthrough physdev after disassociate (rhbz#1276478)
  - bitmap: add way to find next clear bit (rhbz#1276478)
  - Introduce virBitmapIsBitSet (rhbz#1276478)
  - util: Introduce flags field for macvtap creation (rhbz#1276478)
  - virnetdevmacvlan.c: Introduce mutex for macvlan creation (rhbz#1276478)
  - util: keep/use a bitmap of in-use macvtap devices (rhbz#1276478)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-61
changelog:
  - virsh: Properly display block job type (rhbz#1326653)
  - spec: proper soft static allocation of qemu uid (rhbz#1351792)
  - Revert "qemu: snapshot: Fix modification of vm object without job" (rhbz#1326652)
  - qemu: snapshot: Fix job handling when creating snapshots (rhbz#1326652)
  - tls: remove support for gnutls 1.x.x, require 2.2.0 (rhbz#1333415)
  - configure: allow setting default TLS priority string (rhbz#1333415)
  - rpc: allow priority string to be passed to TLS context (rhbz#1333415)
  - libvirtd: add config option for TLS priority (rhbz#1333415)
  - remote: allow TLS protocol/cipher priority override in URI (rhbz#1333415)
  - Pass config file object through to driver open methods (rhbz#1333415)
  - remote: allow TLS priority to be customized (rhbz#1333415)
  - qemu: -numa doesn't (yet) support disjoint range (rhbz#1310122)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-62
changelog:
  - qemu: fix return value of qemuDomainBlockPivot on errors (rhbz#1300159)
  - qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1300159)
  - migration: add support for migrateURI configuration (rhbz#1347389)


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-25
changelog:
  - fix PXE booting on the virtual network
  - Resolves: rhbz#623951
  - fix tunelled migration
  - Resolves: rhbz#624062


author: Dave Allan <dallan@redhat.com> - 0.8.1-26
changelog:
  - Fix problem with capabilities XML generation
  - Resolves: rhbz#620847
  - Correctly reserve and release PCI slots
  - Resolves: rhbz#623877


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-27
changelog:
  - build -26 hit a miscompilation error c.f. 624895 drop -j8
  - Resolves: rhbz#620847
  - Resolves: rhbz#623877


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.1
changelog:
  - Fix JSON migrate_set_downtime command (rhbz#658143)
  - Make SASL work over UNIX domain sockets (rhbz#658144)
  - Let qemu group look below /var/lib/libvirt/qemu/ (rhbz#656972)
  - Fix save/restore on root_squashed NFS (rhbz#656355)
  - Fix race on multiple migration (rhbz#658141)
  - Export host information through SMBIOS to guests (rhbz#652678)
  - Support forcing a CDROM eject (rhbz#658147)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.2
changelog:
  - spec file cleanups (rhbz#662045)
  - Fix deadlock on concurrent multiple bidirectional migration (rhbz#662043)
  - Fix off-by-one error in clock-variable (rhbz#662046)
  - Export host information through SMBIOS to guests (rhbz#652678)
  - Ensure device is deleted from guest after unplug (rhbz#662041)
  - Distinguish between QEMU domain shutdown and crash (rhbz#662042)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.3
changelog:
  - Remove patches not suitable for proper Z-stream:
      - Export host information through SMBIOS to guests (rhbz#652678)
      - Support forcing a CDROM eject (rhbz#658147)
  - Plug several memory leaks (rhbz#672549)
  - Avoid memory overhead of matchpathcon (rhbz#672554)
  - Do not start libvirt-guests if that service is off (rhbz#668694)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.6
changelog:
  - Properly initialize supplementary groups for qemu process (rhbz#668692)
  - Make error reporting in libvirtd thread safe (CVE-2011-1486)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-17.el6
changelog:
  - Don't return an error on failure to create blkio controller (rhbz#689030)
  - Fix possible infinite loop in remote driver (rhbz#691514)
  - qemu: Remove the managed state file only if restoring succeeded (rhbz#692998)
  - docs: Tweak virsh restore warning (rhbz#692998)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-18.el6
changelog:
  - network: Fix NULL dereference during error recovery (rhbz#696660)
  - virsh: Fix regression in parsing optional integer (rhbz#693963)
  - util: Fix crash when removing entries during hash iteration (rhbz#693385)
  - Experimental libvirtd upstart job (rhbz#678084)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.7-18.el6_1.1
changelog:
  - debug: Avoid null dereference on uuid lookup api (rhbz#728546)
  - Fix auditing of disk hotunplug operations (rhbz#728516)
  - storage: Fix regression with backing format (rhbz#726617)
  - Fix performance problem of virStorageVolCreateXMLFrom() (rhbz#715400)
  - qemu: Translate boot config into bootindex if possible (rhbz#715401)
  - remote: Protect against integer overflow (rhbz#717202)
  Resolves: rhbz#728546, rhbz#728516, rhbz#715400, rhbz#715401, rhbz#717202
  Resolves: rhbz#726617


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-16.el6
changelog:
  - nwfilter: Enable rejection of packets (rhbz#681948)
  - Revert all previous error log priority hacks (rhbz#587603)
  - Filter out certain expected error messages from libvirtd (rhbz#587603)
  - qemu: Unlock qemu driver before return from domain save (rhbz#688774)
  - Do not send monitor command after monitor meet error (rhbz#688774)
  - qemu: Ignore libvirt debug messages in qemu log (rhbz#681492)
  - virsh: Fix memtune's help message for swap_hard_limit (rhbz#680190)
  - virsh: Fix documentation for memtune command (rhbz#680190)
  - docs: Fix typo (rhbz#680190)
  - Fix typo in systemtap tapset directory name (rhbz#693701)
  - qemu: Ignore unusable binaries (rhbz#676563)
  - qemu: Support for overriding NPROC limit (rhbz#674602)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-19.el6
changelog:
  - build: Fix the typo in configure.ac (rhbz#820461)
  - qemu: Fix build when !HAVE_NUMACTL (rhbz#820461)
  - usb: Fix crash when failing to attach a second usb device (rhbz#815755)
  - qemu: Use the CPU index in capabilities to map NUMA node to cpu list. (rhbz#820461)
  - qemu: Set memory policy using cgroup if placement is auto (rhbz#820461)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-20.el6
changelog:
  - Fix virDomainDeviceInfoIsSet() to check all struct fields (rhbz#820869)
  - Fix logic for assigning PCI addresses to USB2 companion controllers (rhbz#820869)
  - Set a sensible default master start port for ehci companion controllers (rhbz#820869)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6
changelog:
  - qemu: Rollback on used USB devices (rhbz#743671)
  - qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#743671)
  - Revert "rpc: Discard non-blocking calls only when necessary" (rhbz#821468)


author: Eric Blake <eblake@redhat.com> - libvirt-0.9.10-21.el6_3.1
changelog:
  - avoid closing uninitialized fd (rhbz#827050)
  - avoid fd leak (rhbz#827050)
  - command: avoid double close bugs (rhbz#827050)
  - fdstream: avoid double close bug (rhbz#827050)
  - command: check for fork error before closing fd (rhbz#827050)
  - qemu: avoid closing fd more than once (rhbz#827050)
  - Disable keepalives by default (rhbz#832184)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.2
changelog:
  - qemu_hotplug: Don't free the PCI device structure after hot-unplug (rhbz#836916)
  - nodeinfo: Drop static variable (rhbz#836919)
  - nodeinfo: Avoid probing host filesystem during test (rhbz#836919)
  - nodeinfo: Add some more tests (rhbz#836919)
  - nodeinfo: Get the correct CPU number on AMD Magny Cours platform (rhbz#836919)
  - nodeinfo: Test more details (rhbz#836919)
  - drop sanlock on i686 since it is not available anymore


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.3
changelog:
  - sanlock: Fix locking for readonly devices (rhbz#838819)
  - Add support for shared sanlock leases (rhbz#838819)
  - Fix compilation on older sanlock (rhbz#838819)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.4
changelog:
  - daemon: Fix crash in virTypedParameterArrayClear (rhbz#844735)
  - remote: Fix locking in stream APIs (rhbz#847946)
  - Using virOnce for global initialization is desirable (rhbz#847959)
  - json: Fix interface locale dependency (rhbz#847959)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.9.10-21.el6_3.5
changelog:
  - security: Fix libvirtd crash possibility (CVE-2012-4423)
  - Fix augeas test of shared sanlock leases (rhbz#858988)
  - qemu augeas: Add spice_tls/spice_tls_x509_cert_dir (rhbz#858988)
  - Fix mistakes in augeas lens (rhbz#858988)
  - qemu: Fix failure path in disk hotplug (rhbz#859376)
  - blockjob: Relabel entire existing chain (rhbz#860720)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.9.10-21.el6_3.6
changelog:
  - rpc: Switch to dynamically allocated message buffer (rhbz#869650)
  - rpc: Size up RPC limits (rhbz#869650)
  - client: Free message when freeing client (rhbz#869650)
  - nodeinfo_test: Enhance test data before changing nodeinfo gathering (rhbz#869723)
  - nodeinfo: Fix gathering of nodeinfo data structure (rhbz#869723)
  - test: Add new test case for nodeinfotest (rhbz#869723)
  - test: Add test case for nodeinfotest if host machine doesn't have NUMA (rhbz#869723)
  - nodeinfo: Deal with offline cpus in a node (rhbz#869723)
  - qemu: Always format CPU topology (rhbz#868972)
  - iohelper: Fdatasync() at the end (rhbz#873292)
  - iohelper: Don't report errors on special FDs (rhbz#873292)
  - Introduce new VIR_DOMAIN_EVENT_SUSPENDED_API_ERROR event (rhbz#874235)
  - qemu: Emit event if 'cont' fails (rhbz#874235)
  - qemu: Allow migration to be cancelled at prepare phase (rhbz#875770)
  - AbortJob: Fix documentation (rhbz#875770)
  - qemu: Avoid deadlock on HandleAgentEOF (rhbz#875788)


author: Jiri Denemark <jdenemar@redhat.com> - 0.9.10-21.el6_3.7
changelog:
  - nodeinfo: Add check and workaround to guarantee valid cpu topologies (rhbz#877024)
  - tests: Reduce length of nodeinfodata test names (rhbz#877024)
  - nodeinfotest: Add test data for 2 processor host with broken NUMA (rhbz#877024)
  - nodeinfotest: Add test data from a AMD bulldozer machine. (rhbz#877024)
  - Wire up handling for QMP's BALLOON_EVENT (rhbz#884713)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-21.el6
changelog:
  - docs: Document managed=yes of hostdev passthrough (rhbz#740686)
  - ServerClient: Flush cached data (rhbz#748025)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.1
changelog:
  - nwfilter: Avoid failure with noexec /tmp (rhbz#754182)
  - nwfilter: Simplify execution of ebiptables scripts (rhbz#754182)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.2
changelog:
  - qemu: Add capabilities flags related to SG_IO (rhbz#768469)
  - qemu: Add new disk type='lun' for bus='virtio' (rhbz#768469)
  - network: Don't add iptables rules for externally managed networks (rhbz#769674)
  - schema: Rewrite seclabel rng to match code (rhbz#770958)
  - seclabel: Refactor existing domain_conf usage (rhbz#770958)
  - seclabel: Move seclabel stuff earlier (rhbz#770958)
  - seclabel: Extend XML to allow per-disk label overrides (rhbz#770958)
  - seclabel: Allow a seclabel override on a disk src (rhbz#770958)
  - seclabel: Honor device override in selinux (rhbz#770958)
  - esx: Support vSphere 5.x (rhbz#759061)
  - conf: Introduce optional startupPolicy attribute for cdrom and floppy (rhbz#769853)
  - util: Create virFileAccessibleAs function (rhbz#769853)
  - qemu: Move device alias assigning before command line construction (rhbz#769853)
  - qemu: Implement startupPolicy (rhbz#769853)
  - startupPolicy: Emit event on disk source dropping (rhbz#769853)
  - util: Add virFileAccessibleAs to private symbols (rhbz#769853)
  - qemu: Fix race between async and query jobs (rhbz#770955)
  - Require avahi as an rpm dependancy (rhbz#770957)
  - qemu: Rework handling of shutdown event (rhbz#770959)
  - qemu: Don't release network actual device twice (rhbz#770961)
  - Remove a static limit on max domains in python bindings (rhbz#770966)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.4
changelog:
  - seclabel: Fix regression in libvirtd restart (rhbz#770958)
  - qemu: Add capabilities flags related to SG_IO (rhbz#768469)
  - qemu: Add new disk device='lun' for bus='virtio' & type='block' (rhbz#768469)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.5
changelog:
  - virCommand: Properly handle POLLHUP (rhbz#783453)
  - virCommandProcessIO(): Make poll() usage more robust (rhbz#783453)
  - qemu: Fix seamless spice migration (rhbz#787620)
  - build: Don't require avahi during install (rhbz#790779)
  - qemu: Unlock monitor when connecting to dest qemu fails (rhbz#787620)
  - qemu: Introduce inactive PCI device list (rhbz#784785)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.6
changelog:
  - fix a regression introduced in previous build when detaching devices
  - qemu: Honor the original properties of PCI device when detaching (rhbz#784785)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.7
changelog:
  - libvirtd: Create run dir when running at non-root user (rhbz#798177)
  - logging: Do not log timestamp through syslog (rhbz#798906)
  - logging: Add date to log timestamp (rhbz#798906)
  - Fix off-by-one printing month in logging code (rhbz#798906)
  - Add internal APIs for dealing with time (rhbz#798906)
  - Make logging async signal safe wrt time stamp generation (rhbz#798906)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.8
changelog:
  - qemu: Add support for domain cleanup callbacks (rhbz#806206)
  - qemu: Avoid dangling migration-in job on shutoff domains (rhbz#806206)
  - qemu: Add connection close callbacks (rhbz#806206)
  - qemu: Make autodestroy utilize connection close callbacks (rhbz#806206)
  - qemu: Avoid dangling migration-out job when client dies (rhbz#806206)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-23.el6_2.9
changelog:
  - qemu: Start nested job in qemuDomainCheckEjectableMedia (rhbz#826639)
  - Avoid closing uninitialized fd (rhbz#827047)
  - Avoid fd leak (rhbz#827047)
  - command: Avoid double close bugs (rhbz#827047)
  - fdstream: Avoid double close bug (rhbz#827047)
  - command: Check for fork error before closing fd (rhbz#827047)
  - qemu: Avoid closing fd more than once (rhbz#827047)


author: Zane Bitter <zbitter@redhat.com> - 0.3.0-3
changelog:
  - Ensure all Domain properties are initialized immediately
  - Correct some erroneous error messages
  - Fix quoting of variables in init script
    Resolves: #729127


author: Ian Main <imain@redhat.com> 0.2.22-1
changelog:
  - Fix init script to return 2 when invoked with no arguments and add try-restart
    to usage list.  Resolves: #570492


author: Caolán McNamara <caolanm@redhat.com> - 0.4.0-8
changelog:
  - defining inline causes problems trying to build against libvisual headers, 
    e.g. libvisual-plugins


author: Stepan Kasal <skasal@redhat.com> - 0.9.7-4
changelog:
  - repack the tarball, there are .jar files without any source
  - do not BR findutils, they are guaranteed in Fedora mock
  - fix obsolete, so that it covers only packages created before this
    spec was added to Fedora


author: Petr Pisar <ppisar@redhat.com> - 0.9.7-7
changelog:
  - Revert CVE-2011-0904 and CVE-2011-0905 patch because libvncserver is not
    vulnerable (bug #696767)


author: Petr Pisar <ppisar@redhat.com> - 0.9.7-7.1
changelog:
  - Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157668)
  - Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
    (bug #1157668)
  - Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
    handling) (bug #1157668)
  - Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
    (bug #1157668)
  - Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
    handling) (bug #1157668)


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 2.2.2-1
changelog:
  - Version 2.2.2 fixes a crash found in version 2.2.1 that can occur when the
    APIs that use wchar_t strings as arguments are used.


author: Olivier Fourdan <ofourdan@redhat.com> 0.3-8
changelog:
  - Update udev rule automatically from the libwacom database entries
  - Update database for Bamboo Pen and Touch styli


author: Ondrej Vasik <ovasik@redhat.com> - 4.6-6
changelog:
  - build correctly with newer glibc-headers and newer gcc
    (#558912)
  - add comments, fix few merge review issues


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-14.el6_5.1
changelog:
  - Improve handling of xmlStopParser(CVE-2013-2877)
  - Do not fetch external parameter entities (CVE-2014-0191)


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-18.el6
changelog:
  - CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149086)
  - Fix html serialization error and htmlSetMetaEncoding (rhbz#1004513)


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-19.el6
changelog:
  - Stop parsing on entities boundaries errors
  - Fix missing entities after CVE-2014-3660 fix (rhbz#1149086)


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-20.1
changelog:
  - Fix a series of CVEs (rhbz#1286495)
  - CVE-2015-7941 Cleanup conditional section error handling
  - CVE-2015-8317 Fail parsing early on if encoding conversion failed
  - CVE-2015-7942 Another variation of overflow in Conditional sections
  - CVE-2015-7942 Fix an error in previous Conditional section patch
  - Fix parsing short unclosed comment uninitialized access
  - CVE-2015-7498 Avoid processing entities after encoding conversion failures
  - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
  - CVE-2015-5312 Another entity expansion issue
  - CVE-2015-7499 Add xmlHaltParser() to stop the parser
  - CVE-2015-7499 Detect incoherency on GROW
  - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
  - CVE-2015-8242 Buffer overead with HTML parser in push mode
  - Libxml violates the zlib interface and crashes


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-21.el6.8.1
changelog:
  - Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
  - Bug 763071: Heap-buffer-overflow in xmlStrncat <https://bugzilla.gnome.org/show_bug.cgi?id=763071> (CVE-2016-1834)
  - Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup <https://bugzilla.gnome.org/show_bug.cgi?id=757711> (CVE-2016-1840)
  - Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal <https://bugzilla.gnome.org/show_bug.cgi?id=758588> (CVE-2016-1838)
  - Bug 758605: Heap-based buffer overread in xmlDictAddString <https://bugzilla.gnome.org/show_bug.cgi?id=758605> (CVE-2016-1839)
  - Bug 759398: Heap use-after-free in xmlDictComputeFastKey <https://bugzilla.gnome.org/show_bug.cgi?id=759398> (CVE-2016-1836)
  - Fix inappropriate fetch of entities content (CVE-2016-4449)
  - Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
  - Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
  - Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
  - Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
  - Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
  - Avoid building recursive entities (CVE-2016-3627)
  - Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
  - More format string warnings with possible format string vulnerability (CVE-2016-4448)


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-4.el6_2.1
changelog:
  - Make sure the parser returns when getting a Stop order CVE-2011-3905
  - Fix an allocation error when copying entities CVE-2011-3919
  - Resolves: rhbz#771913


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-8.el6_3.1
changelog:
  - Fix a failure to report xmlreader parsing failures
  - Fix parser local buffers size problems (rhbz#843741)
  - Fix entities local buffers size problems (rhbz#843741)
  - Fix an error in previous commit (rhbz#843741)
  - Do not fetch external parsed entities
  - Impose a reasonable limit on attribute size (rhbz#843741)
  - Impose a reasonable limit on comment size (rhbz#843741)
  - Impose a reasonable limit on PI size (rhbz#843741)
  - Cleanups and new limit APIs for dictionaries (rhbz#843741)
  - Introduce some default parser limits (rhbz#843741)
  - Implement some default limits in the XPath module
  - Fixup limits parser (rhbz#843741)
  - Enforce XML_PARSER_EOF state handling through the parser
  - Avoid quadratic behaviour in some push parsing cases (rhbz#843741)
  - More avoid quadratic behaviour (rhbz#843741)
  - Strengthen behaviour of the push parser in problematic situations (rhbz#843741)
  - More fixups on the push parser behaviour (rhbz#843741)
  - Fix a segfault on XSD validation on pattern error
  - Fix an unimplemented part in RNG value validation


author: Daniel Veillard <veillard@redhat.com> 1.1.26-2.el6_3.1
changelog:
  - fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870
  - Fix direct pattern matching bug
  - Fix popping of vars in xsltCompilerNodePop
  - Fix bug 602515
  - Fix generate-id() to not expose object addresses (CVE-2011-1202)
  - Fix some case of pattern parsing errors (CVE-2011-3970)
  - Fix a bug in selecting XSLT elements (CVE-2012-2825)
  - Fix portability to upcoming libxml2-2.9.0
  - Fix default template processing on namespace nodes (CVE-2012-2871)
  - Cleanup of the pattern compilation code (CVE-2012-2870)
  - Hardening of code checking node types in various entry point (CVE-2012-2870)
  - Hardening of code checking node types in EXSLT (CVE-2012-2870)
  - Fix system-property with unknown namespace
  - Xsltproc should return an error code if xinclude fails
  - Fix a dictionary string usage
  - Avoid a heap use after free error


author: Connie Sieh <csieh@fnal.gov> - 0.9.65-3.0.sl
changelog:
  - On RHEL/SL 6 perl -V:installvendorlib gives /usr/share/perl5/vendor_perl/
  - The files section was looking for the files in /usr/share/perl5/
  - wanted to change the files section to look in the installvendorlib area
  - but the RHEL 6 rpms have the files in /usr/share/perl5 so will change the
  - $installvendorlib area via a define of installvendorlibdefine


author: Miroslav Lichvar <mlichvar@redhat.com> 0-0.5.20121109git4e8107
changelog:
  - update to 20121109git4e8107
  - install unchanged default.cfg as ptp4l.conf
  - update phc2sys service description


author: Miroslav Lichvar <mlichvar@redhat.com> 1.2-2.20130719git48f4dc
changelog:
  - update to 20130719git48f4dc (#916787, #985531)
  - add man page link for ptp4l.conf
  - update kernel-headers build requirement
  - change default phc2sys options to use -s


author: Miroslav Lichvar <mlichvar@redhat.com> 1.4-1.20140318git2b099c
changelog:
  - update to 20140318git2b099c (#1067502, #1011022, #1019121, #1004996, #1016356)
  - fix PIE linking (#1094368)
  - include simulation test suite


author: Daniel Borkmann - 1.0.10-6
changelog:
  - Move spec system to apply patches via git-am(1), which makes it more
    convienient for future backports
  - Backport SCTP_GET_ASSOC_STATS support (#908390) and import its dependencies
  - Fix bugs (#855379), (#953383), (#912557) and import its dependencies


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.38-1
changelog:
  - rebased to 0.9.38 (various enhancements and bugfixes, see 
    lldpad-0.9.38-relnotes.txt on http://e1000.sf.net for complete list)


author: Petr Sabata <psabata@redhat.com> - 0.9.38-3.1
changelog:
  - patch to resolve hang observed during FCoE boot due to dcbx failing to initiate PFC and FCoE app priority negotiations
  - Resolves: rhbz#639414


author: Petr Sabata <psabata@redhat.com> - 0.9.41-4
changelog:
  - Upstream sync up to 4bf0f2db41be0b282e63646fb6b31f0a938d3865
  - Resolves: rhbz#694671
  - Resolves: rhbz#694323
  - Resolves: rhbz#694925


author: Petr Sabata <contyk@redhat.com> - 0.9.43-12
changelog:
  - lldpad: fix core dump (#749943)
  - Support for multiple filter info formats (#731407)
  - Updating documentation for previous commit (#749057)


author: Petr Šabata <contyk@redhat.com> - 0.9.45-6
changelog:
  - Willing SUT retains PFC operational state from peer after peer
    stops transmitting TLV (#870578)
  - Unable to query configured PFC priorities under IEEE DCBX (#870576)


author: Nikola Pajkovsky <npajkovs@redhta.com> - 3.1.1-8
changelog:
  - Resolves: #575757 - Init script: missing force-reload action, script exits with wrong exit code
  - remove one of init scripts from /etc/init.d


author: Nikola Pajkovsky <npajkovs@redhat.com> - 3.1.1-10
changelog:
  - Resolves: #616760 - lm_sensors init script missing - regression from beta 1
  - revert "remove one of init scripts from /etc/init.d"


author: Michal Minar <miminar@redhat.com> - 3.1.1-16
changelog:
  - Related: #610000
  - fixed requirements among packages
  - spelling corrections of summaries and description


author: Michal Minar <miminar@redhat.com> - 3.1.1-17
changelog:
  - Related: #768365
  - Related: #623587
  - Solves spitting of "uninitialized values" messages occuring on ppc64
    architectures.
  - Added generic detection of Intel CPUs for coretemp module to sensors-detect.


author: Uri Lublin <uril@redhat.com> - 1.0-11.el6
changelog:
  Fix review comments:
      - removed installdox from -docs sub-package
      - fixed multi-lib/multi-arch issues
        - renamed log4cpp-config according to arch
  Related: #555835


author: Uri Lublin <uril@redhat.com> - 1.0-12.el6
changelog:
  Fixed multi-lib/multi-arch issues:
      - Remove date from html-footer (doc/html/api/*)
      - Also in preparation of removing -doc subpackage
  Related: #555835


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-10
changelog:
  - fix #604686 - pass currently rotated file as argument to
    postrotate/prerotate script in nosharedscripts mode


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-14
changelog:
  - fix #683622 - add support for ACLs
  - fix #736053 - check for brackets order in config file
  - fix #659705, #659713, #659720 - fixed mistakes in man-page


author: Jan Kaluza <jkaluza@redhat.com> 3.7.8-17
changelog:
  - fix #841520 - do not try to change owner of log if it is not needed
  - fix #848131 - fix bad umask value while creating temp file
  - fix #920030 - set SELinux context before compress files creation
  - fix #922169 - remove temp files on error
  - fix #847338 - do not overwrite create directive value by ACL setting
  - fix #847339 - fix race condition between fchmod and acl_set_fd


author: Kamil Dudka <kdudka@redhat.com> - 3.7.8-28
changelog:
  - fix #1285481 - make 'createolddir' preserve sticky bit
  - fix #1369242 - heap buffer overflow when using long date format


author: Mat Booth <fedora@matbooth.co.uk> 2.0.17-3
changelog:
  - Add missing build dependency on ant-apache-regexp.
  - Remove empty sub-package that was accidentally left.


author: Karel Zak <kzak@redhat.com> 4.82-1
changelog:
  - upgrade to 4.82 (see the 00DIST file for list of changes)
  - backport an upstream patch from 4.83A-linux
  - remove lsof_4.81-man.patch (fixed upstream)


author: Peter Schiffer <pschiffe@redhat.com> 4.82-2
changelog:
  - resolves: #671480
    [RFE] Add ability to exclude a file descriptors corresponding to a particular file system


author: Peter Schiffer <pschiffe@redhat.com> 4.82-4
changelog:
  - resolves: #795799
    lsof fails to suppress warning messages if -b -w option is used
    and some nfs volume mounted


author: Dan Horák <dhorak@redhat.com> - 0.23-2
changelog:
  - fix path separator for FC devices (#589327)
  - fix for kernels with unified string representation of NULL (#589860)
  - Resolves: #589327, #589860


author: Eric Munson <ebmunson@us.ibm.com> - 1.6.7-1
changelog:
  - Update to latest lsvpd release
  - Add librtas support to build on POWERPC
  - Add patch to lookup *.ids file location at runtime


author: Petr Machata <pmachata@redhat.com> - 0.5-15.45svn.1
changelog:
  - Bring over patches from RHEL 5
  - Fix a problem with tracing stripped binary after execl on
    architectures that need PLT reinitalisation breakpoint.
  - Resolves: #528466


author: Petr Machata <pmachata@redhat.com> - 0.5-22.45svn
changelog:
  - Bias shoud be applied to address read from .opd only if that address
    wasn't yet resolved by the dynamic linker
    (ltrace-0.5-dlopen-opd-bias.patch)
  - Resolves: #738254


author: Petr Machata <pmachata@redhat.com> - 0.5-23.45svn
changelog:
  - Fix the case that a breakpoint is reported by SIGILL instead of
    SIGTRAP, and DECR_PC_AFTER_BREAK is non-zero, as is the case on
    s390 (ltrace-0.5-s390x-sigill.patch)
  - Fix detach from sleeping process (ltrace-0.5-sigint.patch)
  - Resolves: #738254
  - Fix attach test case, patch courtesy of
    Edjunior Barbosa Machado <emachado@br.ibm.com>
    (ltrace-0.5-fix-testcase-attach-process.patch)
  - Resolves: #811088
  - Fix tracing return from functions called using a plain branch
    instead of library call (ltrace-0.5-ppc64-linked-calls.patch)
  - Add a patch for single-stepping over a lwarx/ldarx instruction
    (ltrace-0.5-ppc64-atomic-skip.patch)
  - Resolves: #811184
  - Adjust the code to avoid some warnings (ltrace-0.5-warnings.patch)


author: Ryan McCabe <rmccabe@redhat.com> - 0.22.2-12
changelog:
  - Fix bz615926 (luci does not handle qdisk / cman config correctly)
  - Fix bz619220 (Luci does extra queries which slows down page load)
  - Fix bz619652 (luci sometimes prints a traceback when deleting multiple nodes at the same time)
  - Fix bz619641 (luci init script prints a python traceback when status is queried by a non-root user)


author: Ryan McCabe <rmccabe@redhat.com> - 0.22.2-13
changelog:
  - Remove extra debugging logging from the fix for bz619220
  - Fix bz614130 (implement tomcat6 resource agent)
  - Fix bz618578 (ip resource should have netmask field)


author: Lon Hohberger <lhh@redhat.com> - 0.22.2-14
changelog:
  - Randomize secret key in who.ini on each installation.
    Specfile patch from Jan Pokorny.
  - Resolves: rhbz#626415


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-11
changelog:
  - Additional fix for bz613871 (luci should not give ungraceful error messages when encountering fence devices that it does not recognize/support)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-12
changelog:
  - Fix bz617587 (Luci doesn't display underlying errors)
  - Fix bz617586 (Implement progress dialog for long-running operations)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-13
changelog:
  - More fixes for bz617586 (Implement progress dialog for long-running operations)
  - More fixes for bz616239 (Need option to completely destroy cluster)
  - More fixes for bz557234 ([RFE] luci update to handle private network/hostnames for cluster create/config)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-30
changelog:
  - Additional fix for bz639121 (Lightbox dialog state is not reset when the dialog is closed)
  - Additional fix for bz718355 (Logging feature in Luci not working as expected)
  - Additional fix for bz599074 ("Use same password for all nodes" doesn't work.)


author: Ryan McCabe <rmccabe@redhat.com> - 0.23.0-31
changelog:
  - Additional fix for bz705884 (luci chokes on working cluster.conf line)
  - Fix to mitigate SELinux issues (bz737635)


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-11
changelog:
  - Fix bz820402 (fence_ifmib and fence_intelmodular disappeared from the fence device list) 
   - Additional fixes for the RRP configuration interface.


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-13
changelog:
  - Allow altmulticast port overlap and address overlap as long as both
     don't overlap the primary channel's values.


author: John Ruemker <jruemker@redhat.com> - 0.26.0-36
changelog:
  - Correctly display the 'type' attribute value when editing an oracledb resource
    Resolves: rhbz#886678


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-37.1
changelog:
  - Add support for fence device attributes
    Resolves: rhbz#969328
  - Add support for missing fence devices
    Resolves: rhbz#996423


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-46
changelog:
  - Do not propagate "unfencing" verbatim to configuration
    Resolves: rhbz#883008
  - Add a guard to enforce code validity during compilation phase
    Related: rhbz#883008


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-48
changelog:
  - Postpone fix for luci not running after reportedly started due to missed corner-case
    Related: rhbz#877999


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-61
changelog:
  - Resolve newly introduced issue with doubled Edit Fence Instance forms
    Related: rhbz#1127286 (CVE-2014-3593)


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-62
changelog:
  - luci: Fix editing services that VM references
  - luci: Fix error in fence_lpar form
    luci: Fix issues with bind-mount resource name display
    Resolves: rhbz#1117398


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-68
changelog:
  - luci: Add expand/collapse buttons for each inline resource
    Resolves: rhbz#919223
  - luci: Preserve expert mode resource attributes when editing service groups
    Resolves: rhbz#1112297
  - luci: Warn when config can't be set or activated
    Resolves: rhbz#1136456
  - luci: Update fence_virt / fence_xvm labels
    Resolves: rhbz#1204910


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-71
changelog:
  - Prevent clickjacking (malicious use) of luci and enable enforcement
    of some more web service security mechanisms
    Resolves: rhbz#1270958


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-72
changelog:
  - Make luci implicitly avoid SSLv2 and SSLv3 versions of the protocol,
    and also by default, disable RC4 cipher (unless overridden by user)
    at both the web browser/HTTPS (rhbz#1156167) and ricci daemon/SSL
    (rhbz#1156187) sides of communication
    Resolves: rhbz#1156167, rhbz#1156187
  - Update luci self-managed certificate signature digest from sha1 to sha256
    Related: rhbz#1156167, rhbz#1156187
  - Force generating luci.ini anew on update otherwise intended security
    hardenings will not take effect with luci already in use (and avoid
    respective downgrade issues, both using a mechanism already in place)
    Related: rhbz#1270958


author: Ryan McCabe <rmccabe@redhat.com> - 0.26.0-74
changelog:
  - luci: Fix defaults for dlm/gfs_controld plock_ownership
    Resolves: rhbz#988945
  - luci: Fix allowed values for totem/@secauth
    Resolves: rhbz#1285840


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-78
changelog:
  - Further fix for configuration logic wrt. SSL/TLS insecurities
    avoidance
  - Enforce new configuration of luci self-managed certificate,
    preserving the possibly modified content in a backup file
    Related: rhbz#1156167, rhbz#1156187


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-91
changelog:
  - Fix side navigation panel displayed unexpectedly when accessing index page
    without prior logging in after luci start
    Resolves: rhbz#853462
  - Rectify suboptimal logrotate arrangement imposing server restarts
    Resolves: rhbz#887340


author: Jan Pokorny <jpokorny@redhat.com> - 0.26.0-92
changelog:
  - Further fixes for rhbz#853462, rhbz#877999 and rhbz#885028
    Resolves: rhbz#853462, rhbz#877999, rhbz#885028


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-6
changelog:
  - Fix lvconvert swap of poolmetadata volume for active thin pool
  - Check for open count with a timeout before removal/deactivation of an LV.
  - Add workaround for deactivation problem of opened virtual snapshot.
  - Report RAID images split with tracking as out-of-sync ("I").
  - Recognise NVM Express devices in filter.
  - Fix possible race while creating/destroying memory pools.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-7
changelog:
  - Add ignore_lvm_mirrors to config file to read/ignore labels on mirrors.
  - Revert to using devices/obtain_device_list_from_udev=0 by default.
  - Add internal flag for temporary LVs to properly direct udev to not interfere.
  - Fix endless loop in blkdeactivate <device>... if unable to umount/deactivate.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.110-1
changelog:
  - Fix manipulation with thin-pools which are excluded via volume_list.
  - Support lv/vgremove -ff to remove thin vols from broken/inactive thin pools.
  - Fix typo breaking configure --with-lvm1=shared.
  - Modify lvresize code to handle raid/mirrors and physical extents.
  - Don't allow pvcreate to proceed if scanning or filtering fails.
  - Print name of LV which on activation triggers delayed snapshot merge.
  - Add lv_layout and lv_role LV reporting fields.
  - Properly display lvs lv_attr volume type and target type bit for cache origin.
  - Improve libdevmapper-event select() error handling.
  - Add extra check for matching transation_id after message submitting.
  - Add dm_report_field_string_list_unsorted for str. list report without sorting.
  - Support --deferred with dmsetup remove to defer removal of open devices.
  - Update dm-ioctl.h to include DM_DEFERRED_REMOVE flag.
  - Add support for selection to match string list subset, recognize { } operator.
  - Fix string list selection with '[value]' to not match list that's superset.
  - Fix string list selection to match whole words only, not prefixes.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-1
changelog:
  - Reinstate nosync logic when extending mirror. (2.02.110)
  - Fix total area extent calculation when allocating cache pool. (2.02.110)
  - Pass properly sized char buffers for sscanf when initializing clvmd.
  - Restore proper buffer size for parsing mountinfo line (1.02.89)


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-2.el6_6.1
changelog:
  - Fix configure script to detect that systemd environment is not used and
    generate proper udev rules for lvmetad notification based on this information.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-2.el6_6.3
changelog:
  - Fix regression in vgimportclone script that caused failures on
    any duplicate PVs found, hence making the script unusable.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-2.el6_6.4
changelog:
  - Fix regression in cache causing some PVs to bypass filters (2.02.105).
  - Fix incorrect persistent .cache after report with label fields only (2.02.106).
  - Reinstate PV tag recognition for pvs if reporting label fields only (2.02.105).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.117-1
changelog:
  - Update to latest upstream release with various fixes and
    enhancementsdetailed in WHATS_NEW and WHATS_NEW_DM file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.118-1
changelog:
  - Fix LV processing with selection to always do the selection on initial state.
  - Store metadata size + checksum in lvmcache and add struct lvmcache_vgsummary.
  - Remove inaccessible clustered PVs from 'pvs -a'.
  - Don't invalidate cached orphan information while global lock is held.
  - Avoid rescan of all devices when requested pvscan for removed device.
  - Measure configuration timestamps with nanoseconds when available.
  - Disable lvchange of major and minor of pool LVs.
  - Fix pvscan --cache to not scan and read ignored metadata areas on PVs.
  - Disallow vgconvert from changing metadata format when lvmetad is used.
  - Don't do a full read of VG when creating a new VG with an existing name.
  - Reduce amount of VG metadata parsing when looking for vgname on a PV.
  - Avoid reparsing same metadata when reading same metadata from multiple PVs.
  - Save extra device open/close when scanning device for size.
  - Fix seg_monitor field to report status also for mirrors and thick snapshots.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.118-2
changelog:
  - Don't skip invalidation of cached orphans if vg write lck is held (2.02.118).
  - Add --enable-halvm and --disable-halvm options to lvmconf script.
  - Add --services, --mirrorservice and --startstopservices option to lvmconf.
  - Use proper default value of global/use_lvmetad when processing lvmconf script.
  - Set correct vgid when updating cache when writing PV metadata.
  - Don't silently accept lvcreate -m with raid4/5/6.
  - Add A_PARTITION_BY_TAGS set when allocated areas should not share tags.
  - Respect allocation/cling_tag_list during intial contiguous allocation.
  - Don't skip invalidation of cached orphans if vg write lck is held (2.02.118).
  - Log relevant PV tags when using cling allocation.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.118-3.el6_7.2
changelog:
  - Fix alloc segfault when extending LV with fewer stripes than in first seg.
  - Fix regression in cache causing some PVs to bypass filters (2.02.105).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-10
changelog:
  - Disable queueing on mpath devs in blk-availability initscript.
  - Add new -m|--mpathoption disablequeueing to blkdeactivate.
  - Prevent only repair for non-synced raid1 unless --force, not other raid types.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.141-1
changelog:
  - Do not check for suspended devices if scanning for lvmetad update.
  - Fix part. table filter with external_device_info_source="udev" and blkid<2.20.
  - Add metadata/check_pv_device_sizes switch to lvm.conf for device size checks.
  - Warn if device size is less than corresponding PV size in metadata.
  - Cache device sizes internally.
  - Restore support for command breaking in process_each_lv_in_vg() (2.02.118).
  - Use correct mempool when process_each_lv_in_vg() (2.02.118).
  - Fix lvm.8 man to show again prohibited suffixes.
  - Fix configure to set proper use_blkid_wiping if autodetected as disabled.
  - Initialise udev in clvmd for use in device scanning. (2.02.116)
  - Add seg_le_ranges report field for common format when displaying seg devices.
  - Honour report/list_item_separator for seg_metadata_le_ranges report field.
  - Don't mark hidden devs in -o devices,metadata_devices,seg_pe_ranges.(2.02.140)
  - Change LV sizes in seg_pe_ranges report field to match underlying devices.
  - Add kernel_cache_settings report field for cache LV settings used in kernel.
  - Fix man page for dmsetup udevcreatecookie.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-1
changelog:
  - Use uninitilized pool header detection in all cases.
  - Fix read error detection when checking for uninitialized thin-pool header.
  - Fix error path for internal error in lvmetad vg lookup code.
  - Fix error path when sending thin-pool message fails in update_pool_lv().
  - Support reporting CheckNeeded and Fail state for thin-pool and thin LV.
  - For failing thin-pool and thin volume correctly report percentage as INVALID.
  - Report -1, not 'unkown' for lv_{snapshot_invalid,merge_failed} with --binary.
  - If PV belongs to some VG and metadata missing, skip it if system ID is used.
  - Automatically change PV header extension to latest version if writing PV/VG.
  - Identify used PVs in pv_attr field by new 'u' character.
  - Add pv_in_use reporting field to report if PV is used or not.
  - Add pv_ext_vsn reporting field to report PV header extension version.
  - Add protective flag marking PVs as used even if no metadata available.
  - Fix memory pool corruption in pvmove (2.02.141).
  - Support control of spare metadata creation when repairing thin-pool.
  - Fix config type of 'log/verbose' from bool to int (2.02.99).
  - Fix inverted data LV thinp watermark calc for dmeventd response (2.02.133).
  - Use use_blkid_wiping=0 if not defined in lvm.conf and support not compiled in.
  - Clear cached bootloader areas when PV format changed.
  - Fix string boundary check in _get_canonical_field_name().
  - Always initialized hist struct in _stats_parse_histogram().
  - Improve status parsing for thin-pool and thin devices.
  - Use fully aligned allocations for dm_pool_strdup/strndup() (1.02.64).
  - Fix thin-pool table parameter feature order to match kernel output.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-2
changelog:
  - Fix resize of stacked raid thin data volume (2.02.141).
  - Allow for raid leg replacement if not both data and metadata image are on pvs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-3
changelog:
  - Detect and warn about mismatch between devices used and assumed for an LV.
  - If available, use /proc/self/mountinfo to detect mounted volume in fsadm.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-4
changelog:
  - Remove spurious error about no value in /sys/dev/block/major:minor/dm/uuid.
  - Fix device mismatch detection for LV if persistent .cache file is used.
  - Fix holder device not being found in /dev while sysfs has it during dev scan.
  - Document that lvmlockd and lvmpolld features are available only if compiled in
    (RHEL6 lvm2 doesn't have lvmlockd and lvmpolld compiled in).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-7
changelog:
  - Workaround for raid leg allocation failure after not-in-sync raid leg failure.
  - Fix flushing of outstanding IO for mirror target (2.02.133).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8
changelog:
  - Fix potential for corruption during cluster mirror device failure.
  - Fix 'lvconvert --splitmirrors' in cluster operation.
  - Ignore snapshots when performing mirror recovery beneath an origin.
  - Add suspend_lv_origin and resume_lv_origin using LCK_ORIGIN_ONLY.
  - Allow internal suspend and resume of origin without its snapshots.
  - Fix dev_manager_transient to access -real device not snapshot-origin.
  - Monitor origin -real device below snapshot instead of overlay device.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8.el6_0.1
changelog:
  - Fix usage of --yes flag for ReiserFS resize in fsadm.
  - Fix detection of mounted filesystems for fsadm when udev is used.
  - Fix assignment of default value to LVM variable in fsadm.
  - Fix support for --yes flag for fsadm.
  - Do not execute lvresize with --dry-run option for fsadm.
  - Fix fsadm return error code from user's break action.
  - Revert to old glibc vsnprintf behaviour in emit_to_buffer() to catch overflow.
  - Allocate buffer for metadata tags dynamically to remove 4k limit.
  - Fix the way regions are marked complete to avoid slow --nosync cmirror I/O.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8.el6_0.2
changelog:
  - Fix handling of online filesystem resize (using new fsadm return code).
  - Add DIAGNOSTICS section to fsadm man page.
  - Modify fsadm to return different status code for check of mounted filesystem.
  - Fix memory leak of field_id in _output_field function.
  - Allocate buffer for reporting functions dynamically to support long outputs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8.el6_0.3
changelog:
  - Support repetition of --addtag and --deltag arguments.
  - Add infrastructure for specific cmdline arguments to be repeated in groups.
  - Split the_args cmdline arguments and values into arg_props and arg_values.
  - Fix fsadm to not require '-f' for resize of unmounted filesystem.
  - Fix fsadm to detect mounted filesystems on older system
  - Fix regex optimiser not to ignore RHS of OR nodes in _find_leftmost_common.
  - Update VG metadata only once in vgchange when making multiple changes.
  - Allow independent vgchange arguments to be used together.
  - Fix vgchange to process -a, --refresh, --monitor and --poll like lvchange.
  - Don't take write lock in vgchange --refresh, --poll or --monitor.
  - Skip dm devices in scan if they contain only error targets or are empty.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.83-1
changelog:
  - Fix CRC32 calculation on big endian CPU (2.02.75).
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.83-3
changelog:
  - Mitigate annoying error warning from device is usable check if run as non-root.
  - Fallback to control node creation only if node doesn't exist yet.
  - Avoid possible endless loop in _free_vginfo when 4 or more VGs have same name.
  - Fix to make resuming exclusive cluster mirror use local target type.
  - Lower secure data flag warning to verbose level if unsupported by kernel.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-4
changelog:
  - Fix splitmirror in cluster having different DM/LVM views of storage.
  - Fix improper udev settings during suspend/resume for mirror sub-LVs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-6
changelog:
  - Fix lv_info open_count test for disabled verify_udev_operations (2.02.86).
  - Log dev name now returned to kernel for registering during cmirror CTR.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-8
changelog:
  - Fix up-convert when mirror activation is controled by volume_list and tags.
  - Add a note for global/mirror_segtype_default setting that RAID1 is not cluster-aware.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-9
changelog:
  - Re-enable partial activation of non-thin LVs until it can be fixed (2.02.90).
  - Reinstate snapshots of mirror segment type.
    Warn of deadlock risk when using snapshots of mirror segment type.
  - Set delay_resume_if_new on deptree snapshot origin.
  - Add Conflicts: vdsm < 4.9-113.0 (new 'target' and 'zero' LV attr breaks vdsm).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-10.el6_3.1
changelog:
  - Fix test for PV with unknown VG in process_each_pv to ignore ignored mdas.
  - Fix _alloc_parallel_area to avoid picking already-full areas for raid devices.
  - Fix extending RAID 4/5/6 logical volumes.
  - Never issue discards when LV extents are being reconfigured, not deleted.
  - Allow release_lv_segment_area to fail as functions it calls can fail.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-10.el6_3.2
changelog:
  - Make lvremove ask before discarding data areas.
  - Don't try to issue discards to a missing PV to avoid segfault.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-7
changelog:
  - Synchronize with udev in pvscan --cache and fix dangling udev_sync cookies.
  - Fix autoactivation to not autoactivate VG/LV on each change of the PVs used.
  - Fix lvmetad updates for lvm1 format and fix reported internal errors.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-9.el6_4.1
changelog:
  - Fix alignment of PV data area if detected alignment less than 1 MB (2.02.74).
  - Give precedence to EMC power2 devices with duplicate PVIDs


author: Miloslav Trmač <mitr@redhat.com> - 0.20.2-5
changelog:
  - Make test suite pass with OpenSSL 1.0.0
  - Don't ship patch backup files in %doc
    Resolves: #565660


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-17
changelog:
  - fix #703389 - fixed file permissions in /usr/lib/mailman
  - fix #636825 - fix #!/usr/bin/env python shebang in migrate-fhs
  - fix #704699 - fixed directories permissions in /usr/lib/mailman
  - fix #684622 - do not create and install /etc/mailman/mm_cfg.pyc and pyo files


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-18
changelog:
  - fix #834023 - escape From in email body properly
  - fix #832920 - fix word-wrap in web front-end
  - fix #772998 - fix reset_pw.py script
  - fix #799323 - handle urlhost in newlist script


author: Jan Kaluza <jkaluza@redhat.com> 3:2.1.12-23
changelog:
  - fix #1095359 - handle update when some mailing lists have been created
    by newer Mailman than this one


author: Peter Schiffer <pschiffe@redhat.com> - 12.4-7
changelog:
  - resolves: #857120
    fixed incorrect return code when TMPDIR points to invalid path
  - resolves: #845098
    added support for alternatives


author: Petr Machata <pmachata@redhat.com> - 1:3.81-20
changelog:
  - Add a patch for use-after-free when eval in variable assignments
    reassigns the same variable
  - Resolves: #699911


author: Patsy Franklin <pfrankli@redhat.com. - 1:3.81-22
changelog:
  - When the exit status is 2, clean_jobserver() would incorrectly write an
    extra jobserver token to the pipe leading to an internal error message
    complaining that an extra jobserver token is available.
    Resolves: #861189


author: Patsy Franklin <pfrankli@redhat.com. - 1:3.81-23
changelog:
  - Get rid of any avoidable limit on stack size for processes spawned
    via $(shell). 
  - In eval_buffer() don't assume reading_file != NULL. This is not the
    case during the secondexpansion phase.
    Resolves: #835483


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> 7.12-4
changelog:
  - Add patch to change the (un)map_file functions to malaga_(un)map_file,
    there was a symbol conflict with the samba libraries causing a segfault
    if enchant-voikko and evolution-mapi were both installed when using
    Evolution. Bugs rhbz #502546 and sourceforge #2802548, patch by Harri
    Pitkänen.
  - Add defattr to the libmalaga subpackage


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-30
changelog:
  - resolves: #659646
    man man for Japanese manual page contains duplicated lines in PAGER explanation
  - resolves: #749290
    [RHEL6:REG] Missing Functionality : Improve makewhatis handling of symbolic links


author: Peter Schiffer <pschiffe@redhat.com> - 1.6f-31
changelog:
  - resolves: #815209
    fixed override_dir patch - do not override localized man pages
    with English man pages
  - resolves: #713088
    fixed memory leaks


author: Honza Horak <hhorak@redhat.com> 5.5.31-3
changelog:
  - Apply fixes found by Coverity static analysis tool
    Resolves: #976765
  - Fix misleading error message when uninstalling built-in plugins
    Resolves: #966873


author: Honza Horak <hhorak@redhat.com> 5.5.35-1.1
changelog:
  - Rebase to 5.5.35
    https://kb.askmonty.org/en/mariadb-5535-changelog/
    Also fixes: CVE-2014-0001, CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2014-0420, CVE-2014-0393, CVE-2013-5891, CVE-2014-0386, CVE-2014-0401,
    CVE-2014-0402
    Resolves: #1055884


author: Honza Horak <hhorak@redhat.com> - 5.5.37-1.3
changelog:
  - Update to MariaDB 5.5.37, for various fixes described at
    https://kb.askmonty.org/en/mariadb-5537-changelog/
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089366


author: Honza Horak <hhorak@redhat.com> - 5.5.35-7
changelog:
  - Use correct path to tmp dir
    Related: #1056457
  - Rebase to 5.5.36
    https://kb.askmonty.org/en/mariadb-5536-changelog/


author: Zane Bitter <zbitter@redhat.com> 0.4.4-9
changelog:
  - Read the CPU features on non-x86 architectures (rhbz#746288)
  - Add daemons to chkconfig after installation (rhbz#746084)
  - Resolves: rhbz#746084
  - Related: rhbz#746288


author: Jeff Peeler <jpeeler@redhat.com> 0.4.4-12
changelog:
  - Do not link to the Qpid client library.
  - Remove unused includes to avoid linking to qpid::sys symbols
    Resolves: rhbz#806766


author: Prarit Bhargava <prarit@redhat.com> 1:1.0pre3-0.1
changelog:
  - updated to 1.0pre3
  - added initscript for Predictive Failure Analysis (PFA) which does not
    run by default.


author: Prarit Bhargava <prarit@redhat.com> 1:1.0pre3_20110718-0.14
changelog:
  - Add --supported option to mcelog; include misc fixes [BZ 795508] - v2
  - added missing man page documentation for --supported option


author: Prarit Bhargava <prarit@redhat.com> 1:1.0pre3_20101112-0.7
changelog:
  - Updated to 1.0pre3 as of Jul 18 2011/cbd4da48 [BZ 699592]
  - chkconfig mcelogd on by default [BZ 699592]


author: Prarit Bhargava <prarit@redhat.com> 1:1.0pre3_20120814_2-0.14
changelog:
  - add /etc/logrotate.d/mcelog file [849252]
  - add chkconfig levels to mcelogd initscript [1006293]
  - fix IvyBridge detection (commits b29cc4d and 2577aeb) [1079360]
  - cleanup .orig and .rej patch files [1059227]
  - add Haswell CPUID 0x3f [1079501]
  - Modify --daemon logic to allow syslog-only output [872387]


author: Prarit Bhargava <prarit@redhat.com> 2:101.0
changelog:
  - Decode MISC register when IO MCA occurs
  - add and fix leaky bucket logging
  - exit with EXIT_SUCCESS (aka 0) when stopped by signal
  - Fix missing handling for flag MCE_GETCLEAR_FLAGS
  - Decode new simple error code number 6
  - introduce new NVR scheme to sync with upstream


author: Prarit Bhargava <prarit@redhat.com> 2:109.1
changelog:
  - updated to upstream 109, brought in previous Haswell and additional fixes
  - add Broadwell support, currently unsupported in kernel


author: Prarit Bhargava <prarit@redhat.com> 2:128.1
changelog:
  - updated to upstream 128
  - a little better documentation to /etc/mcelog/mcelog.conf [1136920]
  - Atom cpuids [1206320]
  - Broadwell-DE cpuid [1206320]
  - Skylake (0x4e and 0x5e) cpuids [1255561]
  - fix cpu buffer overflow warning [1136920]


author: Doug Ledford <dledford@redhat.com> - 3.1.3-1
changelog:
  - Update to official 3.1.3 release instead of a git snapshot
  - Add patch for return code in the case that a container is not assembled
    due to insufficient drives (bz622408)
  - Add patch to allow the deprecated --no-degraded option to be passed in,
    just not honored (bz622408)
  - Resolves: bz622408


author: Doug Ledford <dledford@redhat.com> - 3.2-1
changelog:
  - Update to latest upstream release
  - Related: bz633306, bz633667, bz633671, bz633688, bz633690, bz633692
  - Fix mdadm udev rules file
  - Resolves: bz605710
  - Process the Y option
  - Resolves: bz636883


author: Doug Ledford <dledford@redhat.com> - 3.2.1-1
changelog:
  - Update to latest upstream release
  - Don't report mismatch counts on either raid1 or raid10 devices
  - Check both active and idle arrays during raid check runs
  - Move raid-check script to /usr/sbin, add a crontab entry to /etc/cron.d
    and mark it config(noreplace) so that users can select their own
    raid check frequency and it will be preserved across updates
  - Allow the raid check script to set both the cpu and io priority on the
    raid check process in an effort to minimize the impact to users on the
    system
  - Related: bz633306


author: Doug Ledford <dledford@redhat.com> - 3.2.2-1.el6_1.1
changelog:
  - Update to latest upstream release (many bugfixes related to the new
    automatic rebuild support: bz723135, bz723137, bz723139, bz723140,
    bz723141, bz723142)
  - Correct typo in /etc/sysconfig/raid-check file
  - Fix a bug related to readding devices into an array
  - Resolves: bz723135, bz723137, bz723139, bz723140, bz723141, bz723142


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-7
changelog:
  - Fix problem where a dirty IMSM RAID isn't assembled correctly during
    boot, preventing booting from this RAID device.
  - Resolves: bz692261


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-8
changelog:
  - Fix problem where an IMSM RAID is rejected because of unexpected
    attribute settings.
  - Resolves: bz733153


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.2-9
changelog:
  - Fix problem where an IMSM RAID is rejected because of unexpected
    attribute settings. Additional fix being extra cautious from -8.
  - Resolves: bz733153


author: Doug Ledford <dledford@redhat.com> - 3.2.3-7
changelog:
  - Fix Monitor mode sometimes crashes when a resync completes
  - Fix missing symlink for mdadm container device when incremental creates
    the array
  - Make sure when creating a second array in a container that the second
    array uses all available space since leaving space for a third array
    is invalid
  - Validate the number of imsm volumes per controller
  - Fix issues with imsm arrays and disks larger than 2TB
  - Add support for expanding imsm arrays/containers
  - Resolves: bz808424, bz808519, bz808492, bz808438, bz808507,
  	    bz808475


author: Doug Ledford <dledford@redhat.com> - 3.2.3-8
changelog:
  - The support for expanding imsm arrays/containers was accepted upstream,
    update to the official patches from there
  - Fix for the issue of --add not being very smart
  - Fix an issue causing rebuilds to fail to restart on reboot (data
    corrupter level problem)
  - Reset the bad flag on map file updates
  - bitmap_offset is signed, treat it as such
  - Related: bz808475
  - Resolves: bz808776, bz812001, bz814743, bz811282


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-3
changelog:
  - Avoid corruption by prohibiting an IMSM array from spanning multiple
    controllers (bz878810)
  - Prevent creation of a second IMSM array of size 0 (bz880208)
  - Avoid segfault when running mdadm --detail on an IMSM raid1 array
    where two drives have been disabled (bz880225)
  - Resolves bz878810, bz880208, bz880225


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.1
changelog:
  - Z-Stream fix
  - Fix problem with IMSM metadata where resync progress would be lost
    if an array was stopped during ongoing expansion of a RAID1/5 volume.
  - Fix problem with IMSM RAID5 not rebuilding after reboot
  - Resolves bz958024, bz960612


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.2
changelog:
  - Z-Stream fix
  - Fix problem with mdadm segfaulting if trying to write superblock
    onto a defective drive resulting in a write error.
  - Resolves bz1001493


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.5-4.3
changelog:
  - Z-Stream fix
  - Fix problem with mdadm segfaulting if trying to write superblock
    onto a defective drive resulting in a write error.
  - Resolves bz1009243


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7
changelog:
  - Check for DM_UDEV_DISABLE_OTHER_RULES_FLAG instead of
    DM_UDEV_DISABLE_DISK_RULES_FLAG in 65-md-incremental.rules 
  - Resolves bz1015514


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.2.6-7.1
changelog:
  - Fix problem where mdadm would crash if trying to create an IMSM array with
    missing drives.
  - Resolves bz1077131


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3-6
changelog:
  - Fix problem with reshape of IMSM RAID arrays failing to start
  - Disallow IMSM arrays spanning multiple controllers
  - Fix problem with reshape failing to restart when reassembling IMSM RAID
  - Resolves bz1136880, bz1136891, bz1136903


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.2-4
changelog:
  - Fix problem where mdadm allowed the creation of more arrays than
    supported by the BIOS.
  - Resolves bz1211564


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-1.el6_8.3
changelog:
  - Retry reading sync_completed state to avoid a reshape not continuing after
    restarting a reshape
    This is an additional patch to resolve this bug.
  - Resolves bz1331331


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-1.el6_8.4
changelog:
  - Fix problem with mdadm large device names overflowing an internal buffer,
    potentially leading to segfaults.
  - Resolves bz1347808


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-1.el6_8.5
changelog:
  - Fix problem with reshaping IMSM arrays, where a new reshape could be
    launched before the first reshape had fully completed, leading to
    unpected results.
  - Resolves bz1348544


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 3.3.4-6
changelog:
  - Fix problem with reshaping IMSM arrays, where a new reshape could be
    launched before the first reshape had fully completed, leading to
    unpected results.
  - Resolves bz1340768


author: Xiao Ni <xni@redhat.com> - 3.3.4-8
changelog:
  - Cannot assemble IMSM array with domain policy in mdadm.conf and
    RAID level migration in container with 2 arrays breaks both arrays 
  - Resolves bz1413937 and bz1413615


author: Paul Lindner <lindner@inuus.com> - 0:1.4.4-1
changelog:
  - Upgraded to upstream memcached-1.4.4 (http://code.google.com/p/memcached/wiki/ReleaseNotes144)
  - Add explicit Epoch to fix issue with broken devel dependencies (resolves 542001)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.4-3.el6_8.1
changelog:
  - fix vulnerabilities allowing remote code execution (CVE-2016-8704,
    CVE-2016-8705, CVE-2016-8706)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0:1.4.4-4
changelog:
  - fix init script to check for root privileges (#883438)
  - fix race condition when enabling new connections (#902432)
  - fix crash when printing key in verbose mode (#1153902)


author: Jan Zeleny <jzeleny@redhat.com> - 1.4-2
changelog:
  - cleanup of spec file (mixed tabs-and-spaces, specific version
    for explicit obsoletes, file attributes)


author: Petr Stodulka <pstodulk@redhat.com> - 1.4-4
changelog:
  - Fixed troubles with SSl connection
  - Fixed adding of broken symlink when 'copy -A'
  - Fixed permissions for */hgk - Thanks to Dave Johanse <davejohansen@gmail.com>
    Resolves: #784079 #928301 #1006457


author: Dave Airlie <airlied@redhat.com> 7.7-1
changelog:
  - rebase to 7.7 release - the best base to move forward at this point in time.
  - bump libdrm requires


author: Adam Jackson <ajax@redhat.com> 7.11-2
changelog:
  - mesa-7.11-b9c7773e.patch: Sync with 7.11 branch
  - mesa-7.11-gen6-depth-stalls.patch: Fix GPU hangs on gen6+ in openarena
    and others (#741806)
  - Drop tdfx_dri.so, as there's no glide3 package or drm support in el6.


author: Adam Jackson <ajax@redhat.com> 3.1-13
changelog:
  - Forked spec for RHEL7 Mesa's private use
    - no ocaml support
    - no doxygen build
    - no clang support
    - no static archives
    - no libraries, binaries, or manpages not needed by Mesa


author: Adam Jackson <ajax@redhat.com> 3.3-0.1.rc1
changelog:
  - Update to 3.3 rc1
  - Move library to %{_libdir} to avoid rpath headaches
  - Link with -Bsymbolic and --default-symver
  - --disable-libffi
  - Misc spec cleanup


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-19
changelog:
  - Fix breaking out from maximization in reduced resources mode; bug
    discovered in testing resulted in mis-positioning in that case.
    Resolves: rhbz 523520


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-20
changelog:
  - Fix cases where unmaximized size wouldn't be honored when unmaximizing
    in reduced resources mode.
    Resolves: rhbz 523520


author: Anton Arapov <anton@redhat.com> - 1:1.17-10
changelog:
  - Fix buffer overflow
  - Resolves: rhbz#768803
  - Update to microcode-20111110.dat
  - Resolves: rhbz#736266


author: Petr Oros <poros@redhat.com> - 1:1.17-21
changelog:
  - Update microcode data file to 20151106 revision.
  - Resolves: #1244968
  - Remove bad file permissions on /lib/udev/rules.d/89-microcode.rules
  - Resolves: #1201276


author: Petr Oros <poros@redhat.com> - 1:1.17-24
changelog:
  - Update microcode data file to 20161104 revision.
  - Add workaround for E5-26xxv4
  - Resolves: #1346045


author: Kyle McMartin <kyle@redhat.com> - 1:1.17-2
changelog:
  - Don't use a CVS release for RHEL, otherwise it'll always be a branch
    and irritating.
  - Fix syntax error in microcode_ctl.init.
  - Resolves: rhbz#552246.


author: Petr Pisar <ppisar@redhat.com> - 1.08-5
changelog:
  - Check chroot(), chdir(), and nice() (bug #640933)
  - Limit TTY name length to prevent buffer overflow (bug #640940)
  - Allow login name up to LOGIN_NAME_MAX length (bug #651955)


author: Andrew Beekhof <abeekhof@redhat.com> - 0-0.7.r11.2
changelog:
  - The use of ExclusiveArch conflicts with noarch, using an alternate COLLECTION to limit builds
    Related: rhbz#658833


author: Kai Tietz <ktietz@redhat.com>
changelog:
  - Change release number to 4.
  - Added patch libxml2-Fix-an-off-by-one-pointer-access.patch
  - Added patch libxml2-Fix-a-segfault-on-XSD-validation-on-pattern-error.patch
  - Added patch libxml2-Fix-entities-local-buffers-size-problems.patch
  - Added patch libxml2-gnome-bug-561340-fix.patch
  - Added patch for CVE-2012-0841
  - Added patch for CVE-2011-0216
  - Added patch for CVE-2011-2834
  - Added patch for CVE-2011-3919
  - Added patch for CVE-2011-1944
  - Added patch for CVE-2011-3905
    Related: rhbz#891477


author: Kai Tietz <ktietz@redhat.com> - 0.12-3
changelog:
  - Disable html documentation generation.
  - Add doxygen and graphviz as build-requirement
  - Add dwin32.patch for fixing WIN32 vs. _WIN32 definition checks.
  - Add linker option -Wl,--export-all-symbols
  - Related: rhbz#751349


author: Miroslav Lichvar <mlichvar@redhat.com> 2.3-5
changelog:
  - rename getline to avoid conflict with glibc (#511715)
  - remove makefiles from docs
  - drop wchar patch


author: Thomas Graf <tgraf at, redhat.com> 0.4-4
changelog:
  - Fixed initscript according to SysVInitScript guidelines:
      - Corrected usage text
      - Added force-reload, condrestart and try-restart actions
      - Fixed return code of status action
      - Only start/stop daemon if not already running/stopped


author: Thomas Graf <tgraf at, redhat.com> 0.4-5
changelog:
  - Fix CVE-2010-2522 and CVE-2010-2523 by including the patches:
    - Additional sanity checks for ND options length
    - Security fix: Check origin of netlink messages in netlink helpers.


author: Michal Hlavinka <mhlavink@redhat.com> - 39-9
changelog:
  - tab completion did not work correctly with files containing multibyte 
    characters in name (#771198)


author: Michal Hlavinka <mhlavink@redhat.com> - 39-5
changelog:
  - fix crash when bad substitution is used
  - fix crash when alias contains alias
  - fix crash when xtrace is enabled
  - use alternatives for ksh/mksh selection


author: Miloslav Trmač <mitr@redhat.com> - 0.22.2-2
changelog:
  - Add "lustre" to PRUNEFS
  - Add all nodev filesystems from the Fedora kernel to PRUNEFS, to make
    (updatedb) work as some users expect
    Related: #543948


author: Miloslav Trmač <mitr@redhat.com> - 0.22.2-4
changelog:
  - Fix a typo in locate(1)
    Resolves: #690800
  - When encountering an empty file name in updatedb, print the name of the
    offending directory instead of aborting
    Resolves: #699363


author: Michal Sekletar <msekleta@redhat.com> - 0.22.2-5
changelog:
  - index zfs filesystems despite the fact they are marked as nodev (#1023779)
  - use more strict permissions for cron script and mark it as config (#1012534)
  - add gpfs to PRUNEFS (#1168301)


author: Michal Sekletar <msekleta@redhat.com> - 0.22.2-6
changelog:
  - mlocate.db is ghost file created with non-default attrs, list them explicitly so rpm --verify doesn't report errors (#1182304)


author: Jan Kaluza <jkaluza@redhat.com> - 5.4-14
changelog:
  - Fix principal creation in Constrained Delegation so the principal can
    be defined in KrbServiceName rather than always computing the value.
    (#1210184)


author: C. Sieh <csieh@fnal.gov> - 5.4-6.0.sl6
changelog:
  - Change "--with-krb5=/usr/kerberos" to "--with-krb5=/usr" because the krb
  - location changed on RHEL 6


author: Simo Sorce <simo@redhat.com> 0.7.0-4
changelog:
  - Backport of useful patches from upstream
    - Better handling of IDP reported errors
    - Better handling of session data storage size


author: Simo Sorce <simo@redhat.com> 0.8.0-1
changelog:
  - New upstream realease version 0.8.0
  - Upstream moved to github
  - Drops patches as they have been all included upstream


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.7-1
changelog:
  - No longer call lookup_identity_hook explicitly, hook order does
    the same.
  - Silence compile warnings by specifying C99.


author: Jan Pazdziora <jpazdziora@redhat.com> - 0.9.0-1
changelog:
  - Add support for '+'-prefixed note/variable names.
  - Silence compile warnings by specifying C99.
  - Fix format of logs of dbus calls.


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-20
changelog:
  - Resolves: CVE-2013-4566
  - Bugzilla Bug #1030267 - mod_nss: incorrect handling of NSSVerifyClient in
    directory context [rhel-6.6]


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-21
changelog:
  - Bumped version build/runtime requirements for 'nspr' and 'nss'
  - Added runtime dependency for 'nss-softokn'
  - Bugzilla Bug #1002733 - Apache core generated with sig 5
  - Bugzilla Bug #1016628 - mod_nss httpd segfaulting regularly
  - Bugzilla Bug #866703 - Memory error in mod_nss (eol_memmove.patch)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-18
changelog:
  - Fixes Bugzilla Bug #835071 - [RFE] Support ability to share mod_proxy with
    other SSL providers (w/jorton, nkinder, & rcritten)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-19
changelog:
  - Resolves: CVE-2013-4566
  - Bugzilla Bug #1030265 - mod_nss: incorrect handling of NSSVerifyClient in
    directory context [rhel-6.5.z]


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-3
changelog:
  - Resolves: rhbz #1288477 - mod_nss: detect and fail for colons in
    credentials with FakeBasicAuth 
  - Patch created by jkaluza@redhat.com for 'mod_ssl' in rhbz #1027442 -
    mod_ssl: detect and fail for colons in credentials with FakeBasicAuth


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-4
changelog:
  - Resolves: rhbz #1280276 - Relocate and downgrade NSSProxyNickname error
    message to a warning (removed error message)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.10-5
changelog:
  - Resolves: rhbz #1295490 - Add server-side Server Name Indication
    (SNI) support
  - Resolves: rhbz #1277613, #1295976 - Always shut down the SSL
    session cache when killing the module. This was the source of a
    rather large memory leak and potential crash in the case of
    SIGHUP or service reload.


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.10-7
changelog:
  - Backported patch from Rob Crittenden
  - Clean up semaphore in nss_pcache on shutdown (#1364561)
  - Update clean semaphore patch to not close pipe twice and to
    shutdown NSS database (#1364561)
  - Update clean semaphore patch to not free the pinList twice.
    (#1364561)


