# changelog

author: Aristeu Rozanski <aris@redhat.com> [2.6.32-611.el6]
changelog:
  - [target] fcoe: Add tag support to tcm_fc (Andy Grover) [882092]
  - [scsi] don't store LUN bits in CDB byte 1 for USB mass-storage devices (Ewan Milne) [1255846]
  - [scsi] usb-storage: add try_rc_10_first flag (Ewan Milne) [1255846]
  - [scsi] usb-storage: add flags for VPD pages and REPORT LUNS (Ewan Milne) [1255846]
  - [mm] hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a fault (Andrea Arcangeli) [1291248]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-612.el6]
changelog:
  - [netdrv] ixgbevf: Minor cleanups (John Greene) [1249245]
  - [netdrv] ixgbevf: fix spoofed packets with random MAC (John Greene) [1249245]
  - [netdrv] ixgbevf: use ether_addr_copy instead of memcpy (John Greene) [1249245]
  - [netdrv] ixgbevf: Limit lowest interrupt rate for adaptive interrupt moderation to 12K (John Greene) [1249245]
  - [netdrv] drivers/net/intel: use napi_complete_done - ixgbevf only (John Greene) [1249245]
  - [netdrv] ixgbevf: add support for reporting RSS key and hash table for X550 (John Greene) [1249245]
  - [netdrv] ixgbevf: Set Rx hash type for ingress packets (John Greene) [1249245]
  - [netdrv] ixgbevf: fold ixgbevf_pull_tail into ixgbevf_add_rx_frag (John Greene) [1249245]
  - [netdrv] ixgbevf: Use dev_kfree_skb_any in xmit path, not dev_kfree_skb (John Greene) [1249245]
  - [netdrv] ixgbevf: Add the appropriate ethtool ops to query RSS indirection table and key (John Greene) [1249245]
  - [netdrv] ixgbevf: Add RSS Key query code (John Greene) [1249245]
  - [netdrv] ixgbevf: Add a RETA query code (John Greene) [1249245]
  - [netdrv] ixgbevf: Use ether_addr_copy instead of memcpy (John Greene) [1249245]
  - [netdrv] ixgbevf: Fix code comments and whitespace (John Greene) [1249245]
  - [netdrv] ethernet: codespell comment spelling fixes (John Greene) [1249245]
  - [netdrv] ixgbevf: combine all of the tasks into a single service task (John Greene) [1249245]
  - [netdrv] ixgbevf: rewrite watchdog task to function similar to igbvf (John Greene) [1249245]
  - [netdrv] ethernet/intel: Use eth_skb_pad and skb_put_padto helpers - ixgbevf only (John Greene) [1249245]
  - [netdrv] ixgbevf: add netpoll support (John Greene) [1249244 1277784]
  - [netdrv] ixgbevf: compare total_rx_packets and budget in ixgbevf_clean_rx_irq (John Greene) [1249245]
  - [netdrv] ixgbevf: Change receive model to use double buffered page based receives (John Greene) [1249245]
  - [netdrv] ixgbevf: convert to ndo_fix_features - part 2 (John Greene) [1249244]
  - [netdrv] ixgbe: do not report 2.5 Gbps as supported (John Greene) [1249244]
  - [netdrv] ixgbe: Clear stale pool mappings (John Greene) [1249244]
  - [netdrv] ixgbe: Reorder search to work from the top down instead of bottom up (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for adding/removing VLAN on PF bypassing the VLVF (John Greene) [1249244]
  - [netdrv] ixgbe: Simplify configuration of setting VLVF and VLVFB (John Greene) [1249244]
  - [netdrv] ixgbe: Reduce VT code indent in set_vfta by introducing jump label (John Greene) [1249244]
  - [netdrv] ixgbe: Simplify definitions for regidx and bit in set_vfta (John Greene) [1249244]
  - [netdrv] ixgbe: Fix SR-IOV VLAN pool configuration (John Greene) [1249244]
  - [netdrv] ixgbe: Return error on failure to allocate mac_table (John Greene) [1249244]
  - [netdrv] ixgbe: Always turn PHY power on when requested (John Greene) [1249244]
  - [netdrv] ixgbe: Save VF info and take references (John Greene) [1249244]
  - [netdrv] ixgbe: Wait for master disable to be set (John Greene) [1249244]
  - [netdrv] ixgbe: Correct spec violations by waiting after reset (John Greene) [1249244]
  - [netdrv] ixgbe: Refactor MAC address configuration code (John Greene) [1249244]
  - [netdrv] ixgbe: Use private workqueue to avoid certain possible hangs (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for newer thermal alarm (John Greene) [1249244]
  - [netdrv] ixgbe: Prevent KR PHY reset in ixgbe_init_phy_ops_x550em (John Greene) [1249244]
  - [netdrv] ixgbe: Remove CS4227 diagnostic code (John Greene) [1249244]
  - [netdrv] ixgbe: Add KR mode support for CS4227 chip (John Greene) [1249244]
  - [netdrv] ixgbe: Fix handling of NAPI budget when multiple queues are enabled per vector (John Greene) [1249244]
  - [netdrv] ixgbe: fix multiple kernel-doc errors (John Greene) [1249244]
  - [netdrv] intel: use napi_complete_done (John Greene) [1249244]
  - [netdrv] drivers/net: get rid of unnecessary initializations in .get_drvinfo (John Greene) [1249244]
  - [netdrv] ixgbe: Check for setup_internal_link method (John Greene) [1249244]
  - [netdrv] ixgbe: Fix CS4227-related semaphore error on reset failure (John Greene) [1249244]
  - [netdrv] ixgbe: disable LRO by default (John Greene) [1249244]
  - [netdrv] ixgbe: add flow control ethertype to the anti-spoofing filter (John Greene) [1249244]
  - [netdrv] ixgbe: Advance version to 4.2.1 (John Greene) [1249244]
  - [netdrv] ixgbe: X540 thermal warning interrupt not a GPI (John Greene) [1249244]
  - [netdrv] ixgbe: Fix FCRTH value in VM-to-VM loopback mode (John Greene) [1249244]
  - [netdrv] ixgbe: Only clear adapter_stopped if ixgbe_setup_fc succeeded (John Greene) [1249244]
  - [netdrv] ixgbe: Correct several flaws with with DCA setup (John Greene) [1249244]
  - [netdrv] ixgbe: Add new X550EM SFP+ device ID (John Greene) [1249244]
  - [netdrv] ixgbe: Update ixgbe_disable_pcie_master flow for X550 (John Greene) [1249244]
  - [netdrv] ixgbe: Add small packet padding support for X550 (John Greene) [1249244]
  - [netdrv] ixgbe: Correct setting of RDRXCTL register for X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: Correct error path in semaphore handling (John Greene) [1249244]
  - [netdrv] ixgbe: Limit SFP polling rate (John Greene) [1249244]
  - [netdrv] ixgbe: Allow SFP+ on more than 82598 and 82599 (John Greene) [1249244]
  - [netdrv] ixgbe: Add logic to reset CS4227 when needed (John Greene) [1249244]
  - [netdrv] ixgbe: Fix 1G and 10G link stability for X550EM_x SFP+ (John Greene) [1249244]
  - [netdrv] ixgbe: Add X550EM_x dual-speed SFP+ support (John Greene) [1249244]
  - [netdrv] ixgbe: Allow reduced delays during SFP detection (John Greene) [1249244]
  - [netdrv] ixgbe: Clear I2C destination location (John Greene) [1249244]
  - [netdrv] ixgbe: Enable bit-banging mode on X550 (John Greene) [1249244]
  - [netdrv] ixgbe: Set lan_id before first I2C eeprom access (John Greene) [1249244]
  - [netdrv] ixgbe: Provide unlocked I2C methods (John Greene) [1249244]
  - [netdrv] ixgbe: Provide I2C combined on X550EM (John Greene) [1249244]
  - [netdrv] ixgbe: Add X550EM support for SFP insertion interrupt (John Greene) [1249244]
  - [netdrv] ixgbe: Accept SFP not present errors on all devices (John Greene) [1249244]
  - [netdrv] ixgbe: Add fdir support for SCTP on X550 (John Greene) [1249244]
  - [netdrv] ixgbe: Add SFP+ detection for X550 hardware (John Greene) [1249244]
  - [netdrv] ixgbe: Teardown SR-IOV before unregister_netdev (John Greene) [1249244]
  - [netdrv] ixgbe: fix issue with SFP events with new X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: Resolve "initialized field overwritten" warnings (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for reporting 2.5G link speed (John Greene) [1249244]
  - [netdrv] ixgbe: fix bounds checking in ixgbe_setup_tc for 82598 (John Greene) [1249244]
  - [netdrv] ixgbe: support for ethtool set_rxfh (John Greene) [1249244]
  - [netdrv] ixgbe: Avoid needless PHY access on copper phys (John Greene) [1249244]
  - [netdrv] ixgbe: cleanup to use cached mask value (John Greene) [1249244]
  - [netdrv] ixgbe: Remove second instance of lan_id variable (John Greene) [1249244]
  - [netdrv] ixgbe: use kzalloc for allocating one thing (John Greene) [1249244]
  - [netdrv] ixgbe: Remove unused PCI bus types (John Greene) [1249244]
  - [netdrv] ixgbe: add new bus type for intergrated I/O interface (IOSF) (John Greene) [1249244]
  - [netdrv] ixgbe: add get_bus_info method for X550 (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for entering low power link up state (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for VXLAN RX offloads (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for UDP-encapsulated tx checksum offload (John Greene) [1249244]
  - [netdrv] ixgbe: Check whether FDIRCMD writes actually complete (John Greene) [1249244]
  - [netdrv] ixgbe: Assign set_phy_power dynamically where needed (John Greene) [1249244]
  - [netdrv] ixgbe: add new function to check for management presence (John Greene) [1249244]
  - [netdrv] ixgbe: Simplify port-specific macros (John Greene) [1249244]
  - [netdrv] ixgbe: Don't report flow director filter's status (John Greene) [1249244]
  - [netdrv] ixgbe: Specify Rx hash type WRT Rx desc RSS type (John Greene) [1249244]
  - [netdrv] ixgbe: only report generic filters in get_ts_info (John Greene) [1249244]
  - [netdrv] ixgbe: Remember to write ixfi changes after modifying (John Greene) [1249244]
  - [netdrv] ixgbe: fix X550 default set_phy_power method (John Greene) [1249244]
  - [netdrv] ixgbe: Set lan_id before using I2C (John Greene) [1249244]
  - [netdrv] ixgbe: add link check for X550 copper (John Greene) [1249244]
  - [netdrv] ixgbe: Add support for another X550 device (John Greene) [1249244]
  - [netdrv] ixgbe: fix X550 PHY function pointers (John Greene) [1249244]
  - [netdrv] ixgbe: fix X550 devices init flow (John Greene) [1249244]
  - [netdrv] ixgbe: fix bug in not clearing counters for X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: fix issue with sfp events with new X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: add support for interrupts from X550 external PHY (John Greene) [1249244]
  - [netdrv] ixgbe: Add const string for overheat message (John Greene) [1249244]
  - [netdrv] ixgbe: Add reset for X550 device (John Greene) [1249244]
  - [netdrv] ixgbe: add X550 support for external PHY and forced 1G/10G support (John Greene) [1249244]
  - [netdrv] ixgbe: Restore ESDP settings after MAC reset (John Greene) [1249244]
  - [netdrv] ixgbe: Add a PHY power state method (John Greene) [1249244]
  - [netdrv] ixgbe: add define for X557 PHY ID (John Greene) [1249244]
  - [netdrv] ixgbe: add support for WoL and autoneg FC for some X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: add array of MAC type dependent values (John Greene) [1249244]
  - [netdrv] ixgbe: Use a signed type to hold error codes (John Greene) [1249244]
  - [netdrv] ixgbe: Release semaphore bits in the right order (John Greene) [1249244]
  - [netdrv] ixgbe: Fix IOSF SB access issues (John Greene) [1249244]
  - [netdrv] ixgbe: Add GET_RSS_KEY command to VF-PF channel commands set (John Greene) [1249244]
  - [netdrv] ixgbe: Add a RETA query command to VF-PF channel API (John Greene) [1249244]
  - [netdrv] ixgbe: Add a new netdev op to allow/prevent a VF from querying an RSS info (John Greene) [1186052 1246195 1249244 1271403]
  - [netdrv] ixgbe: Add the appropriate ethtool ops to query RSS indirection table and key (John Greene) [1249244]
  - [netdrv] ixgbe: Refactor the RSS configuration code (John Greene) [1249244]
  - [netdrv] ixgbe: Drop unnecessary call to rcu_barrier (John Greene) [1249244]
  - [netdrv] ixgbe: adds x550 specific FCoE offloads (John Greene) [1249244]
  - [netdrv] ethernet: Use bool function returns of true/false instead of 1/0 (John Greene) [1249244]
  - [netdrv] ixgbe: cleanup make ixgbe_set_ethertype_anti_spoofing_X550 static (John Greene) [1249244]
  - [netdrv] ixgbe: Clean up type inconsistency (John Greene) [1249244]
  - [netdrv] ixgbe: add new wrapper for X550 support (John Greene) [1249244]
  - [netdrv] ethernet: codespell comment spelling fixes (John Greene) [1249244]
  - [netdrv] ixgbe: add Tx anti spoofing support (John Greene) [1249244]
  - [netdrv] ixgbe: add VXLAN offload support for X550 devices (John Greene) [1249244]
  - [netdrv] ixgbe: improve mac filter handling (John Greene) [1249244]
  - [netdrv] ixgbe: enable l2 forwarding acceleration for macvlans (John Greene) [1249244]
  - [netdrv] ixgbe: show <2 for encoding loss on PCIe Gen3 (John Greene) [1249244]
  - [netdrv] ixgbe: call pcie_get_mimimum_link to check if device has enough bandwidth (John Greene) [1249244]
  - [netdrv] revert "ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue" (John Greene) [1249244]
  - [netdrv] ixgbe: Add function for setting XPS queue mapping (John Greene) [1249244]
  - [netdrv] ixgbe: finish ixgbe: Update ixgbe to use new vlan accleration (John Greene) [1249244]
  - [netdrv] net/mlx5e: Assign random MAC address if needed (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Write vlan list into vport context (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Write UC/MC list and promisc mode into vport context (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Introduce access functions to modify/query vport vlans (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Introduce access functions to modify/query vport promisc mode (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Introduce access functions to modify/query vport state (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Introduce access functions to modify/query vport mac lists (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Update access functions to Query/Modify vport MAC address (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Add HW capabilities and structs for SR-IOV E-Switch (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Use the right DMA free function on TX path (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Max mtu comparison fix (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Added self loopback prevention (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Fix inline header size calculation (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Fix LSO vlan insertion (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Re-eanble client vlan TX acceleration (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Return error in case mlx5e_set_features fails (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Don't allow more than max supported channels (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Use the the real irqn in eq->irqn (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Wait for RX buffers initialization in a more proper manner (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Avoid NULL pointer access in case of configuration failure (Kamal Heib) [1246031]
  - [netdrv] ib/mlx5: Remove dead fmr code (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Wait for FW readiness on startup (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Add pci error handlers to mlx5_core driver (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix internal error detection conditions (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Use private health thread for each device (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Use accessor functions to read from device memory (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Prepare cmd interface to system errors handling (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Improve mlx5 messages (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Update health syndromes (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix wrong name in struct (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: New init and exit flow for mlx5_core (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix notification of page supplement error (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix async commands return code (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Remove redundant "err" variable usage (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix struct type in the DESTROY_TIR/TIS device commands (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Priv state flag not rolled-back upon netdev open error (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Disable VLAN filter in promiscuous mode (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Fix typo in mlx5_query_port_pvlc (Kamal Heib) [1246031]
  - [netdrv] ib/mlx5: Remove dead code from alloc_cached_mr (Kamal Heib) [1246031]
  - [netdrv] mlx5: Expose correct page_size_cap in device attributes (Kamal Heib) [1246031]
  - [netdrv] mlx5: Fix missing device local_dma_lkey (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Avoid accessing NULL pointer at ndo_select_queue (Kamal Heib) [1246031]
  - [netdrv] mlx5e: Fix sparse warnings in mlx5e_handle_csum (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Support RX CHECKSUM_COMPLETE (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Support ethtool get/set_pauseparam (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Ethtool link speed setting fixes (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: HW LRO changes/fixes (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Support smaller RX/TX ring sizes (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Add ethtool RSS configuration options (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Make RSS indirection table size a constant (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Have a single RSS Toeplitz hash key (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Support physical port counters (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Disable async events before unregister_netdev (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Rename/move functions following the ndo_stop flow change (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Light-weight netdev open/stop (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Introduce access function to modify RSS/LRO params (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Introduce the "Drop RQ" (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Unify the RX flow (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove the mlx5e_update_priv_params() function (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Introduce create/destroy RSS indir table access functions (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Do not use netdev_err before the netdev is registered (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Avoid redundant de-reference (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove redundant assignment of sq->user_index (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove redundant field mlx5e_priv->num_tc (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Use hard-coded 4K page size for RQ/SQ/CQ (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Check the return value of mlx5_command_exec (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Input IPSEC.SPI into the RX RSS hash function (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: cosmetics: use BIT instead of "1 <<", and others (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: TX latency optimization to save DMA reads (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Allocate DMA coherent memory on reader NUMA node (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Support ETH_RSS_HASH_XOR (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Set log_uar_page_sz for non 4K page size architecture (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Prefetch skb data on RX (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Pop cq outside mlx5e_get_cqe (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove mlx5e_cq.sqrq back-pointer (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove extra spaces (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Avoid TX CQE generation if more xmit packets expected (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Avoid redundant dev_kfree_skb() upon NOP completion (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Remove re-assignment of wq type in mlx5e_enable_rq (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Use skb_shinfo(skb)->gso_segs rather than counting them (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Static mapping of netdev priv resources to/from netdev TX queues (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Add transport domain to the ethernet TIRs/TISs (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Add transport domain alloc/dealloc support (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Support NETIF_F_SG (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Enforce max flow-tables level >= 3 (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Disable client vlan TX acceleration (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Add HW cacheline start padding (Kamal Heib) [1246031]
  - [netdrv] net/mlx5e: Fix HW MTU settings (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: fix an error code (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Fix static checker warnings around system guid query flow (Kamal Heib) [1246031]
  - [netdrv] mlx5: Enable mutual support for IB and Ethernet (Kamal Heib) [1246031]
  - [netdrv] ib/mlx5: Don't create IB instance over Ethernet ports (Kamal Heib) [1246031]
  - [netdrv] ib/mlx5: Avoid using the MAD_IFC command under ISSI > 0 mode (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Add more query port helpers (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Use port number when querying port ptys (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Use port number in the query port mtu helpers (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Get vendor-id using the query adapter command (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Add new query HCA vport commands (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Make the vport helpers available for the IB driver too (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Check the return bitmask when querying ISSI (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Enable XRCs and SRQs when using ISSI > 0 (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Apply proper name convention to helpers (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_en: Add missing check for memory allocation failure (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Extend mlx5_core to support ConnectX-4 Ethernet functionality (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Ethernet resource handling files (Kamal Heib) [1246031]
  - [netdrv] net/mlx5: Ethernet Datapath files (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Set/Query port MTU commands (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Modify CQ moderation parameters (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Implement get/set port status (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Implement access functions of ptys register fields (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: New device capabilities handling (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: HW data structs/types definitions cleanup (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core: Set irq affinity hints (Kamal Heib) [1246031]
  - [netdrv] net/mlx5_core, mlx5_ib: Do not use vmap on coherent memory (Kamal Heib) [1246031]
  - [drm] revert 'drm/i915: resume MST after reading back hw state' (Rob Clark) [1292402]
  - [drm] i915: Wait for mst to finish suspending before disabling interrupts (Rob Clark) [1292402]
  - [drm] upstream sync to 4.4 (Rob Clark) [1135349 1248507]
  - [drm] nouveau/gr/gf117-: assume no PPC if NV_PGRAPH_GPC_GPM_PD_PES_TPC_ID_MASK is zero (Rob Clark) [1249814]
  - [drm] nouveau/gr/gf117-: read NV_PGRAPH_GPC_GPM_PD_PES_TPC_ID_MASK from correct GPC (Rob Clark) [1249814]
  - [drm] nouveau/gr/gf100-: split out per-gpc address calculation macro (Rob Clark) [1249814]
  - [drm] nouveau/bios: return actual size of the buffer retrieved via _ROM (Rob Clark) [1249814]
  - [drm] nouveau/pmu: remove whitelist for PGOB-exit WAR, enable by default (Rob Clark) [1218795 1218796]
  - [drm] nouveau/pmu/gk107: enable PGOB codepaths (Rob Clark) [1218795 1218796]
  - [drm] nouveau/pmu/gk104: check fuse to determine presence of PGOB (Rob Clark) [1218795 1218796]
  - [drm] radeon: Retry DDC probing on DVI on failure if we got an HPD interrupt (Rob Clark) [1249814]
  - [drm] drm: import vmwgfx (Rob Clark) [1281592]
  - [firmware] add i915 GuC firmware (Rob Clark) [1135349]
  - [firmware] add i915 DMC firmware (Rob Clark) [1135349]
  - [drm] upstream sync to 4.3 (Rob Clark) [1249814]
  - [drm] upstream sync to 4.2 (Rob Clark) [1249812 1274061]
  - [drm] upstream sync to 4.1 (Rob Clark) [1249810]
  - [drm] upstream sync to 4.0 (Rob Clark) [1249807]
  - [drm] upstream sync to 3.19 (Rob Clark) [1249806]
  - [kernel] iommu: Export intel_iommu_enabled to signal when iommu is in use (Rob Clark) [1249806]
  - [kernel] time: export nsec_to_jiffies64 (Rob Clark) [1249806]
  - [kernel] component: fix bug with legacy API (Rob Clark) [1249806]
  - [kernel] component: add support for component match array (Rob Clark) [1249806]
  - [kernel] component: ignore multiple additions of the same component (Rob Clark) [1249806]
  - [kernel] component: fix missed cleanup in case of devres failure (Rob Clark) [1249806]
  - [kernel] base: fix devres handling for master device (Rob Clark) [1249806]
  - [kernel] base: provide an infrastructure for componentised subsystems (Rob Clark) [1249806]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-613.el6]
changelog:
  - [drm] nouveau: remove stray header (Rob Clark) [1249807]
  - [kernel] ntp: Do leapsecond adjustment in adjtimex read path (Jerry Snitselaar) [1224408]
  - [kernel] time: Prevent early expiry of hrtimers CLOCK_REALTIME at the leap second edge (Jerry Snitselaar) [1224408]
  - [kernel] ntp: Introduce and use SECS_PER_DAY macro instead of 86400 (Jerry Snitselaar) [1224408]
  - [kernel] hrtimer: Make offset update smarter (Jerry Snitselaar) [1224408]
  - [kernel] timekeeping: Use ktime_t data for ktime_get_update_offsets (Jerry Snitselaar) [1224408]
  - [kernel] timekeeping: Provide internal ktime_t based data (Jerry Snitselaar) [1224408]
  - [kernel] timekeeping: indicate clock was set (Jerry Snitselaar) [1224408]
  - [kernel] timekeeping: Avoid possible deadlock from clock_was_set_delayed (Jerry Snitselaar) [1224408]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-614.el6]
changelog:
  - [powerpc] pseries: Limit EPOW reset event warnings (Gustavo Duarte) [1300202]
  - [perf] tools: Do not show trace command if it's not compiled in (Jiri Olsa) [1212539]
  - [perf] tools spec: Disable trace command on ppc arch (Jiri Olsa) [1212539]
  - [netdrv] mlx4_en: Fix the blueflame in TX path (Kamal Heib) [1295872 1303661 1303863 1304272]
  - [netdrv] mlx4_en: Fix HW timestamp init issue upon system startup (Kamal Heib) [1295872 1304272]
  - [netdrv] mlx4_en: Remove dependency between timestamping capability and service_task (Kamal Heib) [1295872 1304272]
  - [netdrv] mlx5_core: Fix trimming down IRQ number (Kamal Heib) [1304272]
  - [x86] Mark Intel Broadwell-DE SoC supported (Steve Best) [1253856]
  - [s390] zfcpdump: Fix collecting of registers (Hendrik Brueckner) [1303558]
  - [s390] dasd: fix failfast for disconnected devices (Hendrik Brueckner) [1303559]
  - [netdrv] bnxt_en: Fix crash in bnxt_free_tx_skbs() during tx timeout (John Linville) [1303703]
  - [netdrv] bnxt_en: Exclude rx_drop_pkts hw counter from the stack's rx_dropped counter (John Linville) [1303703]
  - [netdrv] bnxt_en: Ring free response from close path should use completion ring (John Linville) [1303703]
  - [block] Fix q_suspended logic error for io submission (David Milburn) [1227342]
  - [block] nvme: No lock while DMA mapping data (David Milburn) [1227342]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-615.el6]
changelog:
  - [s390] qeth: initialize net_device with carrier off (Hendrik Brueckner) [1198666]
  - [netdrv] Add rtlwifi driver from linux 4.3 (Stanislaw Gruszka) [1245452 1263386 1289574 761525]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-616.el6]
changelog:
  - [kernel] isolcpus: Output warning when the 'isolcpus=' kernel parameter is invalid (Prarit Bhargava) [1304216]
  - [mmc] Prevent 1.8V switch for SD hosts that don't support UHS modes (Petr Oros) [1307065]
  - [mmc] sdhci-pci-o2micro: Fix Dell E5440 issue (Petr Oros) [1307065]
  - [mmc] sdhci-pci-o2micro: Add SeaBird SeaEagle SD3 support (Petr Oros) [1307065]
  - [watchdog] hung task debugging: Inject NMI when hung and going to panic (Don Zickus) [1305919]
  - [watchdog] add sysctl knob hardlockup_panic (Don Zickus) [1305919]
  - [watchdog] perform all-CPU backtrace in case of hard lockup (Don Zickus) [1305919]
  - [drm] i915: Drop intel_update_sprite_watermarks (Lyude) [1306425]
  - [drm] i915: Setup DDI clk for MST on SKLi (Lyude) [1306425]
  - [drm] i915: Explicitly check for eDP in skl_ddi_pll_select (Lyude) [1306425]
  - [drm] i915: Don't skip mst encoders in skl_ddi_pll_select (Lyude) [1306425]
  - [scsi] qla2xxx: Set relogin flag when we fail to queue login requests (Chad Dupuis) [1306033]
  - [s390] kernel/syscalls: correct syscall number for __NR_setns (Hendrik Brueckner) [1219586]
  - [edac] sb_edac: fix channel/csrow emulation on Broadwell (Aristeu Rozanski) [1301230]
  - [usb] xhci: Workaround to get Intel xHCI reset working more reliably (Gopal Tiwari) [1146875]
  - [fs] revert "revert "dlm: print kernel message when we get an error from kernel_sendpage" (Robert S Peterson) [1264492]
  - [fs] revert "[fs] dlm: Replace nodeid_to_addr with kernel_getpeername" (Robert S Peterson) [1264492]
  - [s390] sclp: Determine HSA size dynamically for zfcpdump (Hendrik Brueckner) [1303557]
  - [s390] sclp: Move declarations for sclp_sdias into separate header file (Hendrik Brueckner) [1303557]
  - [netdrv] mlx4_en: add missing tx_queue init in en_start_port (Don Dutile) [1304016]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-617.el6]
changelog:
  - [infiniband] rdma/ocrdma: Bump up ocrdma version number to 11.0.0.0 (Don Dutile) [1253021]
  - [infiniband] rdma/ocrdma: Prevent CQ-Doorbell floods (Don Dutile) [1253021]
  - [infiniband] rdma/ocrdma: Check resource ids received in Async CQE (Don Dutile) [1253021]
  - [infiniband] rdma/ocrdma: Avoid a possible crash in ocrdma_rem_port_stats (Don Dutile) [1253021]
  - [kernel] driver core : Fix use after free of dev->parent in device_shutdown (Tomas Henzl) [1303215]
  - [kernel] driver core: fix shutdown races with probe/remove (Tomas Henzl) [1303215]
  - [kernel] driver core: Protect device shutdown from hot unplug events (Tomas Henzl) [1303215]
  - [netdrv] bnx2x: Add new device ids under the Qlogic vendor (Michal Schmidt) [1304252]
  - [kernel] klist: fix starting point removed bug in klist iterators (Ewan Milne) [1190273]
  - [md] raid1: extend spinlock to protect raid1_end_read_request against inconsistencies (Jes Sorensen) [1309154]
  - [md] raid1: fix test for 'was read error from last working device' (Jes Sorensen) [1309154]
  - [s390] cio: update measurement characteristics (Hendrik Brueckner) [1304257]
  - [s390] cio: ensure consistent measurement state (Hendrik Brueckner) [1304257]
  - [s390] cio: fix measurement characteristics memleak (Hendrik Brueckner) [1304257]
  - [fs] pipe: fix offset and len mismatch on pipe_iov_copy_to_user failure (Seth Jennings) [1302223] {CVE-2016-0774}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-618.el6]
changelog:
  - [documentation] filesystems: describe the shared memory usage/accounting (Rodrigo Freire) [1293615]
  - [kernel] Fix cgclear failure when encountering the rpciod kernel thread (Larry Woodman) [1220828]
  - [netdrv] qlcnic: constify qlcnic_mbx_ops structure (Harish Patil) [1252119]
  - [netdrv] net: qlcnic: delete redundant memsets (Harish Patil) [1252119]
  - [netdrv] qlcnic: Update version to 5.3.63 (Harish Patil) [1252119]
  - [netdrv] qlcnic: Don't use kzalloc unncecessarily for allocating large chunk of memory (Harish Patil) [1252119]
  - [netdrv] qlcnic: Add new VF device ID 0x8C30 (Harish Patil) [1252119]
  - [netdrv] qlcnic: Print firmware minidump buffer and template header addresses (Harish Patil) [1252119]
  - [netdrv] qlcnic: Add support to enable capability to extend minidump for iSCSI (Harish Patil) [1252119]
  - [netdrv] qlcnic: Rearrange ordering of header files inclusion (Harish Patil) [1252119]
  - [netdrv] qlcnic: Fix corruption while copying (Harish Patil) [1252119]
  - [netdrv] net: qlcnic: Deletion of unnecessary memset (Harish Patil) [1252119]
  - [netdrv] net: qlcnic: clean up sysfs error codes (Harish Patil) [1252119]
  - [netdrv] qlcnic: codespell comment spelling fixes (Harish Patil) [1252119]
  - [netdrv] qlcnic: Fix typo in printk messages (Harish Patil) [1252119]
  - [netdrv] qlcnic: Fix trivial typo in comment (Harish Patil) [1252119]
  - [netdrv] qlogic: Deletion of unnecessary checks before two function calls (Harish Patil) [1252119]
  - [netdrv] qlcnic: Fix dump_skb output (Harish Patil) [1252119]
  - [virt] kvm: x86: Don't report guest userspace emulation error to userspace (Bandan Das) [1163764] {CVE-2010-5313 CVE-2014-7842}
  - [virt] kvm: inject #UD if instruction emulation fails and exit to userspace (Bandan Das) [1163764] {CVE-2010-5313 CVE-2014-7842}
  - [netdrv] iwlwifi: Add new PCI IDs for the 8260 series (John Linville) [1286871 1308636]
  - [netdrv] iwlwifi: pcie: fix (again) prepare card flow (John Linville) [1286871 1308636]
  - [netdrv] nl80211: Fix potential memory leak from parse_acl_data (John Linville) [1286871 1308636]
  - [netdrv] mac80211: fix divide by zero when NOA update (John Linville) [1286871 1308636]
  - [netdrv] mac80211: allow null chandef in tracing (John Linville) [1286871 1308636]
  - [netdrv] mac80211: fix driver RSSI event calculations (John Linville) [1286871 1308636]
  - [netdrv] mac80211: Fix local deauth while associating (John Linville) [1286871 1308636]
  - [fs] xfs: ensure WB_SYNC_ALL writeback handles partial pages correctly (Brian Foster) [747564]
  - [fs] mm: introduce set_page_writeback_keepwrite() (Brian Foster) [747564]
  - [fs] xfs: always log the inode on unwritten extent conversion (Zorro Lang) [1018465]
  - [fs] vfs: fix data corruption when blocksize < pagesize for mmaped data (Lukas Czerner) [1205014]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-619.el6]
changelog:
  - [netdrv] cxgb4: add device ID for few T5 adapters (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Fix for write-combining stats configuration (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Fix tx flit calculation (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: changes for new firmware 1.14.4.0 (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: memory corruption in debugfs (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Force uninitialized state if FW in adapter is unsupported (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add MPS tracing support (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add some more details to sge qinfo (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: missing curly braces in t4_setup_debugfs (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add support to dump edc bist status (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add debugfs support to dump meminfo (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Read correct FL congestion threshold for T5 and T6 (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Allow firmware flash, only if cxgb4 is the master driver (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add debugfs entry to enable backdoor access (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Fix check to use new User Doorbell mechanism (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Enable cim_la dump to support T6 (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Read stats for only available channels (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Update register ranges for T6 adapter (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Don't use entire L2T table, use only its slice (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add PCI device ids for few more T5 and T6 adapters (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Fix incorrect sequence numbers shown in devlog (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add PCI device ID for custom T522 & T520 adapter (Sai Vemuri) [1252598]
  - [infiniband] iw_cxgb4: support for bar2 qid densities exceeding the page size (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Support for user mode bar2 mappings with T4 (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add debugfs entry to dump channel rate (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add debugfs entry to dump CIM PIF logic analyzer contents (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add a debugfs entry to dump CIM MA logic analyzer logs (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Fix static checker warning (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Use FW LDST cmd to access TP_PIO_ADDR, TP_PIO_DATA register first (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: program pci completion timeout (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Set mac addr from vpd, when we can't contact firmware (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Rename t4_link_start to t4_link_l1cfg (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add sge ec context flush service (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Free Virtual Interfaces in remove routine (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Remove WOL get/set ethtool support (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add support to dump loopback port stats (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add support in ethtool to dump channel stats (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add ethtool support to get adapter stats (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Adds SRIOV driver changes for T6 adapter (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Adds support for T6 adapter (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add is_t6 macro and T6 register ranges (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: remove unused fn to enable/disable db coalescing (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: function and argument name cleanup (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add debugfs facility to inject FL starvation (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Add PHY firmware support for T420-BT cards (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Update T4/T5 adapter register ranges (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Optimize and cleanup setup memory window code (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: replace ntohs, ntohl and htons, htonl calls with the generic byteorder (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Remove dead function t4_read_edc and t4_read_mc (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Cleanup macros, add comments and add new MACROS (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Initialize RSS mode for all Ports (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Discard the packet if the length is greater than mtu (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Move SGE Ingress DMA state monitor (Don Dutile) [1252598]
  - [netdrv] cxgb4: Add device node to ULD info (Don Dutile) [1252598]
  - [netdrv] cxgb4: Pass in a Congestion Channel Map to t4_sge_alloc_rxq (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Enable congestion notification from SGE for IQs and FLs (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Make sure that Freelist size is larger than Egress Congestion Threshold (Sai Vemuri) [1252598]
  - [infiniband] iw_cxgb4: Cleanup register defines/MACROS (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Fix sparse warnings (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Improve IEEE DCBx support, other minor open-lldp fixes (Sai Vemuri) [1252598]
  - [scsi] cxgb4i: Call into recently added cxgb4 ipv6 api (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Fix queue allocation for 40G adapter (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Initialize mdio_addr before using it (Sai Vemuri) [1252598]
  - [netdrv] cxgb4vf: Fix ethtool get_settings for VF driver (Sai Vemuri) [1252598]
  - [netdrv] csiostor: Cleanup macros/register defines related to port and VI (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Fix DCB priority groups being returned in wrong order (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: dcb open-lldp interop fixes (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Fix bug in DCB app deletion (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Handle dcb enable correctly (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Improve handling of DCB negotiation or loss thereof (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: IEEE fixes for DCBx state machine (Sai Vemuri) [1252598]
  - [netdrv] cxgb4: Fix endian bug introduced in cxgb4 dcb patchset (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Makefile & Kconfig changes for DCBx support (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Integrate DCBx support into cxgb4 module. Register dbcnl_ops to give access to DCBx functions (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Add DCBx support codebase and dcbnl_ops (Sai Vemuri) [1252598]
  - [netdrv] cxgb4 : Update fw interface file for DCBx support. Adds all the required fields to fw interface to communicate DCBx info (Sai Vemuri) [1252598]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-620.el6]
changelog:
  - [netdrv] mlx4-en: disable traffic class queueing by default (Don Dutile) [1309893]
  - [netdrv] mlx4-en: add missing patch to init rss_rings in get_profile (Don Dutile) [1309893]
  - [netdrv] net/mlx4_core: Fix mailbox leak in error flow when performing update qp (Don Dutile) [1309893]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-621.el6]
changelog:
  - [netdrv] net/mlx4_en: Wake TX queues only when there's enough room (Don Dutile) [1309893]
  - [netdrv] revert " net/mlx4_core: Fix mailbox leak in error flow when performing update qp" (Don Dutile) [1309893]
  - [netdrv] revert "mlx4-en: add missing patch to init rss_rings in get_profile" (Don Dutile) [1309893]
  - [netdrv] revert "mlx4-en: disable traffic class queueing by default" (Don Dutile) [1309893]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-622.el6]
changelog:
  - [netdrv] bonding: Fix ARP monitor validation (Jarod Wilson) [1244170]
  - [netdrv] sfc: only use RSS filters if we're using RSS (Jarod Wilson) [1304311]
  - [dm] delay: fix RHEL6 specific bug when establishing future 'expires' time (Mike Snitzer) [1311615]
  - [ata] Adding Intel Lewisburg device IDs for SATA (Steve Best) [1310237]
  - [i2c] i801: Adding Intel Lewisburg support for iTCO (Rui Wang) [1304872]
  - [x86] Mark Grangeville ixgbe PCI ID 15AE (1 gig PHY) unsupported (Steve Best) [1310585]
  - [kernel] lockd: properly convert be32 values in debug messages (Harshula Jayasuriya) [1289848]
  - [i2c] convert i2c-isch to platform_device (Prarit Bhargava) [1211747]
  - [tty] do not reset master's packet mode (Denys Vlasenko) [1308660]
  - [block] don't assume last put of shared tags is for the host (Jeff Moyer) [1300538]
  - [netdrv] i40evf: use pages correctly in Rx (Stefan Assmann) [1293754]
  - [netdrv] i40e: fix bug in dma sync (Stefan Assmann) [1293754]
  - [sched] fix KABI break (Seth Jennings) [1230310]
  - [sched] fair: Test list head instead of list entry in throttle_cfs_rq (Seth Jennings) [1230310]
  - [sched] sched,perf: Fix periodic timers (Seth Jennings) [1230310]
  - [sched] sched: debug: Remove the cfs bandwidth timer_active printout (Seth Jennings) [1230310]
  - [sched] Cleanup bandwidth timers (Seth Jennings) [1230310]
  - [sched] sched: core: Use hrtimer_start_expires (Seth Jennings) [1230310]
  - [sched] fair: Fix unlocked reads of some cfs_b->quota/period (Seth Jennings) [1230310]
  - [sched] Fix potential near-infinite distribute_cfs_runtime loop (Seth Jennings) [1230310]
  - [sched] fair: Fix tg_set_cfs_bandwidth deadlock on rq->lock (Seth Jennings) [1230310]
  - [sched] Fix hrtimer_cancel/rq->lock deadlock (Seth Jennings) [1230310]
  - [sched] Fix cfs_bandwidth misuse of hrtimer_expires_remaining (Seth Jennings) [1230310]
  - [sched] Refine the code in unthrottle_cfs_rq (Seth Jennings) [1230310]
  - [sched] Update rq clock earlier in unthrottle_cfs_rq (Seth Jennings) [1230310]
  - [drm] radeon: mask out WC from BO on unsupported arches (Oded Gabbay) [1303678]
  - [drm] add helper to check for wc memory support (Oded Gabbay) [1303678]
  - [acpi] pci: Account for ARI in _PRT lookups (Ivan Vecera) [1311421]
  - [pci] Move pci_ari_enabled() to global header (Ivan Vecera) [1311421]
  - [acpi] tpm, tpm_tis: fix tpm_tis ACPI detection issue with TPM 2.0 (Jerry Snitselaar) [1309641]
  - [acpi] Centralized processing of ACPI device resources (Jerry Snitselaar) [1309641]
  - [acpi] acpi: Add device resources interpretation code to ACPI core (Jerry Snitselaar) [1309641]
  - [netdrv] cxgb4 : Fix for the kernel panic caused by calling t4_enable_vi_params (Sai Vemuri) [1303493]
  - [mm] Remove false WARN_ON from pagecache_isize_extended (Brian Foster) [1205014]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-623.el6]
changelog:
  - [perf] revert "perf/x86/intel uncore: Move uncore_box_init() out of driver initialization" (Jiri Olsa) [1313062]
  - [net] udp: move logic out of udp[46]_ufo_send_check (Sabrina Dubroca) [1299975]
  - [netdrv] hv_netvsc: Restore needed_headroom request (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: fix null ptr deref in skb allocation (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: Observe needed_headroom of the device (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: ipv6: numa: consolidate skb allocation to pktgen_alloc_skb (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: fix crash with vlan and packet size less than 46 (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: speedup fragmented skbs (Vitaly Kuznetsov) [1305000]
  - [net] pktgen: correct uninitialized queue_map (Vitaly Kuznetsov) [1305000]
  - [net] pktgen node allocation (Vitaly Kuznetsov) [1305000]
  - [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1309241]
  - [net] veth: don't modify ip_summed; doing so treats packets with bad checksums as good (Sabrina Dubroca) [1308586]
  - [net] ipv6: udp: use sticky pktinfo egress ifindex on connect() (Xin Long) [1301475]
  - [net] provide default_advmss() methods to blackhole dst_ops (Paolo Abeni) [1305068]
  - [net] sctp: translate network order to host order when users get a hmacid (Xin Long) [1303822]
  - [powerpc] pseries: Make 32-bit MSI quirk work on systems lacking firmware support (Oded Gabbay) [1303678]
  - [powerpc] pseries: Force 32 bit MSIs for devices that require it (Oded Gabbay) [1303678]
  - [netdrv] bnxt_en: Fix zero padding of tx push data (John Linville) [1310301]
  - [netdrv] bnxt_en: Failure to update PHY is not fatal condition (John Linville) [1310301]
  - [netdrv] bnxt_en: Remove unnecessary call to update PHY settings (John Linville) [1310301]
  - [netdrv] bnxt_en: Poll link at the end of __bnxt_open_nic (John Linville) [1310301]
  - [netdrv] bnxt_en: Reduce default ring sizes (John Linville) [1310301]
  - [netdrv] bnxt_en: Fix implementation of tx push operation (John Linville) [1310301]
  - [netdrv] bnxt_en: Remove 20G support and advertise only 40GbaseCR4 (John Linville) [1310301]
  - [netdrv] bnxt_en: Cleanup and Fix flow control setup logic (John Linville) [1310301]
  - [netdrv] bnxt_en: Fix ethtool autoneg logic (John Linville) [1310301]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-624.el6]
changelog:
  - [netdrv] tg3: Fix for tg3 transmit queue 0 timed out when too many gso_segs (Ivan Vecera) [1222426]
  - [netdrv] bna: fix list corruption (Ivan Vecera) [1310957]
  - [netdrv] cxgb4 : Add cxgb4 T4/T5 firmware version 1.14.4.0, hardcode driver to the same (Sai Vemuri) [1270347]
  - [drm] i915: WaRsDisableCoarsePowerGating (Rob Clark) [1302269]
  - [drm] i915/skl: Add SKL GT4 PCI IDs (Rob Clark) [1302269]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-625.el6]
changelog:
  - [netdrv] cxgb4 : Patch to fix kernel panic on pinging over vlan interface (Sai Vemuri) [1303493]
  - [x86] mm: Improve AMD Bulldozer ASLR workaround (Rik van Riel) [1240883]
  - [x86] Properly export MSR values in kernel headers (Jacob Tanenbaum) [1298255]
  - [netdrv] tehuti: Firmware filename is tehuti/bdx.bin (Ivan Vecera) [1235961]
  - [netdrv] ixgbe: convert to ndo_fix_features (John Greene) [1279522]
  - [drm] revert "drm: Use vblank timestamps to guesstimate how many vblanks were missed" (Lyude Paul) [1300086]
  - [fs] writeback: Fix lost wake-up shutting down writeback thread (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wakeup events when forking bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: fix bad _bh spinlock nesting (Jeff Moyer) [1111683]
  - [fs] writeback: cleanup bdi_register (Jeff Moyer) [1111683]
  - [fs] writeback: remove unnecessary init_timer call (Jeff Moyer) [1111683]
  - [fs] writeback: optimize periodic bdi thread wakeups (Jeff Moyer) [1111683]
  - [fs] writeback: prevent unnecessary bdi threads wakeups (Jeff Moyer) [1111683]
  - [fs] writeback: move bdi threads exiting logic to the forker thread (Jeff Moyer) [1111683]
  - [fs] writeback: restructure bdi forker loop a little (Jeff Moyer) [1111683]
  - [fs] writeback: move last_active to bdi (Jeff Moyer) [1111683]
  - [fs] writeback: do not remove bdi from bdi_list (Jeff Moyer) [1111683]
  - [fs] writeback: simplify bdi code a little (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in the forker thread - 2 (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in the forker thread - 1 (Jeff Moyer) [1111683]
  - [fs] writeback: fix possible race when creating bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: harmonize writeback threads naming (Jeff Moyer) [1111683]
  - [fs] writeback: merge bdi_writeback_task and bdi_start_fn (Jeff Moyer) [1111683]
  - [fs] writeback: bdi_writeback_task must set task state before calling schedule (Jeff Moyer) [1111683]
  - [fs] writeback: remove wb_list (Jeff Moyer) [1111683]
  - [drm] i915: Change WARN_ON(!wm_changed) to I915_STATE_WARN_ON (Lyude Paul) [1309888]
  - [drm] i915: Quiet down state checks (Lyude Paul) [1309888]
  - [drm] i915: Fix a few of the !wm_changed warnings (Lyude Paul) [1309888]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-626.el6]
changelog:
  - [fs] nfsv4: OPEN must handle the NFS4ERR_IO return code correctly (Benjamin Coddington) [1272687]
  - [fs] quota: fix unwanted soft limit enforcement (Lukas Czerner) [1304603]
  - [fs] xfs: flush entire last page of old EOF on truncate up (Brian Foster) [1308482]
  - [fs] xfs: truncate_setsize should be outside transactions (Brian Foster) [1308482]
  - [scsi] megaraid: overcome a fw deficiency (Maurizio Lombardi) [1294983]
  - [scsi] megaraid_sas: Add an i/o barrier (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Fix SMAP issue (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Fix for IO failing post OCR in SRIOV environment (Tomas Henzl) [1294983]
  - [scsi] megaraid: fix null pointer check in megasas_detach_one() (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: driver version upgrade (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: SPERC OCR changes (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Introduce module parameter for SCSI command timeout (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: MFI adapter OCR changes (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Make adprecovery variable atomic (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: IO throttling support (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Dual queue depth support (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Code optimization build_and_issue_cmd return-type (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Reply Descriptor Post Queue (RDPQ) support (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Fastpath region lock bypass (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Update device queue depth based on interface type (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Task management support (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Syncing request flags macro names with firmware (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: MFI IO timeout handling (Tomas Henzl) [1294983]
  - [scsi] megaraid_sas: Do not allow PCI access during OCR (Tomas Henzl) [1294983]
  - [scsi] hpsa: check for a null phys_disk pointer in ioaccel2 path (Joseph Szczypek) [1311728]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-627.el6]
changelog:
  - [net] rds: restore return value in rds_cmsg_rdma_args (Don Dutile) [1313089]
  - [net] rds: Fix assertion level from fatal to warning (Don Dutile) [1313089]
  - [netdrv] be2net: don't enable multicast flag in be_enable_if_filters routine (Ivan Vecera) [1309157]
  - [net] unix: correctly track in-flight fds in sending process user_struct (Hannes Frederic Sowa) [1313052] {CVE-2016-2550}
  - [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Jacob Tanenbaum) [1297422] {CVE-2015-8767}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-628.el6]
changelog:
  - [netdrv] bnx2x: fix crash on big-endian when adding VLAN (Michal Schmidt) [1311433]
  - [sound] alsa hda: only sync BCLK to the display clock for Haswell & Broadwell (Jaroslav Kysela) [1313672]
  - [sound] alsa hda: add component support (Jaroslav Kysela) [1313672]
  - [sound] alsa hda: pass intel_hda to all i915 interface functions (Jaroslav Kysela) [1313672]
  - [netdrv] igb: fix race accessing page->_count (Corinna Vinschen) [1315402]
  - [netdrv] igb: fix recent VLAN changes that would leave VLANs disabled after reset (Corinna Vinschen) [1309968]
  - [mm] always decrement anon_vma degree when the vma list is empty (Jerome Marchand) [1309898]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-629.el6]
changelog:
  - [x86] acpi: Avoid SRAT table checks for Hyper-V VMs (Vitaly Kuznetsov) [1312711]
  - [infiniband] ipoib: For sendonly join free the multicast group on leave (Don Dutile) [1315382]
  - [infiniband] ipoib: increase the max mcast backlog queue (Don Dutile) [1315382]
  - [infiniband] ipoib: Make sendonly multicast joins create the mcast group (Don Dutile) [1315382]
  - [infiniband] ipoib: Expire sendonly multicast joins (Don Dutile) [1315382]
  - [infiniband] ipoib: Clean up send-only multicast joins (Don Dutile) [1315382]
  - [infiniband] ipoib: Suppress warning for send only join failures (Don Dutile) [1315382]
  - [drm] i915: shut up gen8+ SDE irq dmesg noise (Rob Clark) [1313681]
  - [drm] i915: fix the SDE irq dmesg warnings properly (Rob Clark) [1313681]
  - [hv] vmbus: avoid wait_for_completion on crash (Vitaly Kuznetsov) [1301903]
  - [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1301903]
  - [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload (Vitaly Kuznetsov) [1301903]
  - [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1301903]
  - [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload (Vitaly Kuznetsov) [1301903]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-630.el6]
changelog:
  - [mm] avoid hangs in lru_add_drain_all (Vitaly Kuznetsov) [1314683]
  - [net] esp{4, 6}: fix potential MTU calculation overflows (Herbert Xu) [1304313]
  - [net] xfrm: take net hdr len into account for esp payload size calculation (Herbert Xu) [1304313]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-631.el6]
changelog:
  - [input] synaptics: handle spurious release of trackstick buttons, again (Benjamin Tissoires) [1317808]
  - [hv] kvp: fix IP Failover (Vitaly Kuznetsov) [1312290]
  - [hv] util: Pass the channel information during the init call (Vitaly Kuznetsov) [1312290]
  - [hv] utils: Invoke the poll function after handshake (Vitaly Kuznetsov) [1312290]
  - [hv] utils: run polling callback always in interrupt context (Vitaly Kuznetsov) [1312290]
  - [hv] util: Increase the timeout for util services (Vitaly Kuznetsov) [1312290]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-632.el6]
changelog:
  - [s390] dasd: fix incorrect locking order for LCU device add/remove (Hendrik Brueckner) [1315740]
  - [s390] dasd: fix hanging device after LCU change (Hendrik Brueckner) [1315729]
  - [s390] dasd: prevent incorrect length error under z/VM after PAV changes (Hendrik Brueckner) [1313774]
  - [netdrv] igb: Fix VLAN tag stripping on Intel i350 (Corinna Vinschen) [1210699]
  - [netdrv] 3c59x: mask LAST_FRAG bit from length field in ring (Neil Horman) [1309210]
  - [ata] ahci: Remove obsolete Intel Lewisburg SATA RAID device IDs (Steve Best) [1317045]
  - [pci] fix truncation of resource size to 32 bits (Myron Stowe) [1316345]
  - [pci] fix pci_resource_alignment prototype (Myron Stowe) [1316345]
  - [sound] hda: Fix headphone mic input on a few Dell ALC293 machines (Jaroslav Kysela) [1315932]
  - [sound] hda: Add some FIXUP quirks for white noise on Dell laptop (Jaroslav Kysela) [1315932]
  - [sound] hda: Fix the white noise on Dell laptop (Jaroslav Kysela) [1315932]
  - [sound] hda: one Dell machine needs the headphone white noise fixup (Jaroslav Kysela) [1315932]
  - [sound] hda: Fix audio crackles on Dell Latitude E7x40 (Jaroslav Kysela) [1315932]
  - [fs] xfs: Avoid pathological backwards allocation (Bill O'Donnell) [1302777]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-633.el6]
changelog:
  - [s390] lib: export udelay_simple for systemtap (Hendrik Brueckner) [1233912]
  - [netdrv] ixgbe: fix RSS limit for X550 (John Greene) [1314583]
  - [netdrv] mlx4_core: Fix error message deprecation for ConnectX-2 cards (Don Dutile) [1316013]
  - [dm] thin metadata: don't issue prefetches if a transaction abort has failed (Mike Snitzer) [1310661]
  - [scsi] be2iscsi: Add warning message for unsupported adapter (Maurizio Lombardi) [1253016]
  - [scsi] be2iscsi: Revert "Add warning message for, unsupported adapter" (Maurizio Lombardi) [1253016]
  - [scsi] hpsa: update copyright information (Joseph Szczypek) [1315469]
  - [scsi] hpsa: correct abort tmf for hba devices (Joseph Szczypek) [1315469]
  - [scsi] hpsa: correct ioaccel2 sg chain len (Joseph Szczypek) [1315469]
  - [scsi] hpsa: fix physical target reset (Joseph Szczypek) [1315469]
  - [scsi] hpsa: fix hpsa_adjust_hpsa_scsi_table (Joseph Szczypek) [1315469]
  - [scsi] hpsa: correct transfer length for 6 byte read/write commands (Joseph Szczypek) [1315469]
  - [scsi] hpsa: abandon rescans on memory alloaction failures (Joseph Szczypek) [1315469]
  - [scsi] hpsa: allow driver requested rescans (Joseph Szczypek) [1315469]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-634.el6]
changelog:
  - [scsi] cxgbi: Convert over to dst_neigh_lookup (Sai Vemuri) [1296461]
  - [netdrv] cxgb4: For T4, don't read the Firmware Mailbox Control register (Sai Vemuri) [1296469]
  - [netdrv] cxgb4: Use ACCES_ONCE macro to read queue's consumer index (Sai Vemuri) [1296484]
  - [netdrv] cxgb4: prevent simultaneous execution of service_ofldq (Sai Vemuri) [1296483]
  - [netdrv] cxgb4: Adds PCI device id for new T5 adapters (Sai Vemuri) [1296481]
  - [netdrv] cxgb4: Don't disallow turning off auto-negotiation (Sai Vemuri) [1296476]
  - [mm] check if section present during memory block registering (Xunlei Pang) [1297840]
  - [tty] ldisc: Close/Reopen race prevention should check tty->ldisc (Denys Vlasenko) [1312383]
  - [fs] proc-vmcore: wrong data type casting fix (Baoquan He) [1312206]
  - [infiniband] iw_cxgb3: Ignore positive return values from the ofld send functions (Sai Vemuri) [1296999]
  - [netdrv] cxgb4: Deal with wrap-around of queue for Work request (Sai Vemuri) [1296482]
  - [infiniband] iw_cxgb4: detect fatal errors while creating listening filters (Sai Vemuri) [1296480]
  - [md] dm snapshot: suspend merging snapshot when doing exception handover (Mike Snitzer) [1177389]
  - [md] dm snapshot: suspend origin when doing exception handover (Mike Snitzer) [1177389]
  - [md] dm snapshot: allocate a per-target structure for snapshot-origin target (Mike Snitzer) [1177389]
  - [md] dm: fix a race condition in dm_get_md (Mike Snitzer) [1177389]
  - [infiniband] iw_cxgb4: pass the ord/ird in connect reply events (Sai Vemuri) [1296478]
  - [infiniband] iw_cxgb4: fix misuse of ep->ord for minimum ird calculation (Sai Vemuri) [1296478]
  - [infiniband] iw_cxgb4: reverse the ord/ird in the ESTABLISHED upcall (Sai Vemuri) [1296478]
  - [usb] Revert "Revert 'Update USB default wakeup settings'" (Torez Smith) [1319081]
  - [netdrv] ibmveth: add support for TSO6 (Gustavo Duarte) [1318412]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-635.el6]
changelog:
  - [mm] backing-dev: ensure wakeup_timer is deleted (Jeff Moyer) [1318930]
  - [hv] vss: run only on supported host versions (Vitaly Kuznetsov) [1319813]
  - [sound] hda: Fix internal speaker for HP Z240 (Jaroslav Kysela) [1316673]
  - [perf] trace: Fix race condition at the end of started workloads (Jiri Olsa) [1302928]
  - [fs] nfsd: Combine decode operations for v4 and v4.1 (J. Bruce Fields) [1314536]
  - [hv] revert "vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: don't loose HVMSG_TIMER_EXPIRED messages" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: remove code duplication in message handling" (Vitaly Kuznetsov) [1318882]
  - [hv] revert "vmbus: avoid wait_for_completion on crash" (Vitaly Kuznetsov) [1318882]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-636.el6]
changelog:
  - [netdrv] mlx4_en: Choose time-stamping shift value according to HW frequency (Kamal Heib) [1320448]
  - [fs] anon_inodes implement dname (Aristeu Rozanski) [1296019]
  - [net] packet: set transport header before doing xmit (John Greene) [1309526]
  - [net] tuntap: set transport header before passing it to kernel (John Greene) [1309526]
  - [netdrv] macvtap: set transport header before passing skb to lower device (John Greene) [1309526]
  - [net] ipv6: tcp: add rcu locking in tcp_v6_send_synack() (Jakub Sitnicki) [1312740]
  - [net] ipv6: sctp: add rcu protection around np->opt (Jakub Sitnicki) [1312740]
  - [net] ipv6: add complete rcu protection around np->opt (Jakub Sitnicki) [1312740]
  - [net] dccp: remove unnecessary codes in ipv6.c (Jakub Sitnicki) [1312740]
  - [net] ipv6: remove unnecessary codes in tcp_ipv6.c (Jakub Sitnicki) [1312740]
  - [net] ipv6: Refactor update of IPv6 flowi destination address for srcrt (RH) option (Jakub Sitnicki) [1312740]
  - [net] ipv6: protect flow label renew against GC (Sabrina Dubroca) [1313231]
  - [net] ipv6: fix possible deadlock in ip6_fl_purge / ip6_fl_gc (Sabrina Dubroca) [1313231]
  - [perf] annotate: Support full source file paths for srcline fix (Jiri Olsa) [1304472 1304479]
  - [perf] tools: Support full source file paths for srcline (Jiri Olsa) [1304472 1304479]
  - [perf] annotate: Fix -i option, which is currently ignored (Jiri Olsa) [1304472 1304479]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-637.el6]
changelog:
  - [netdrv] mlx4-en: add missing patch to init rss_rings in get_profile (Don Dutile) [1321164]
  - [netdrv] mlx4-en: disable traffic class queueing by default (Don Dutile) [1321164]
  - [netdrv] mlx4_core: Fix mailbox leak in error flow when performing update qp (Don Dutile) [1321164]
  - [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259581] {CVE-2015-5157}
  - [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259581] {CVE-2015-5157}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-638.el6]
changelog:
  - [mm] hugetlb: prevent BUG_ON in hugetlb_fault -> hugetlb_cow (Dave Anderson) [1303495]
  - [mm] hugetlb: fix race condition in hugetlb_fault (Dave Anderson) [1303495]
  - [s390] kdump: fix wrong BUG_ON statement (Hendrik Brueckner) [1321316]
  - [scsi] cxgb4i: Increased the value of MAX_IMM_TX_PKT_LEN from 128 to 256 bytes (Sai Vemuri) [1320193]
  - [fs] nfs: fix a regression causing deadlock in nfs_wb_page_cancel() (Benjamin Coddington) [1135601]
  - [netdrv] cxgb4/ethtool: Get/set rx checksum (Sai Vemuri) [1225167]
  - [netdrv] cxgb4vf:The RX checksum feature was not completely ported to cxgb4vf driver (Sai Vemuri) [1225167]
  - [netdrv] cxgb4/cxgb4vf: Enable GRO (Sai Vemuri) [1225167]
  - [netdrv] cxgb4: Enable RX checksum offload flag (Sai Vemuri) [1225167]
  - [netdrv] cxgb4: Report correct link speed for unsupported ones (Sai Vemuri) [1296467]
  - [netdrv] cxgb4: Use vmalloc, if kmalloc fails (Sai Vemuri) [1296473]
  - [netdrv] cxgb4: Enhance driver to update FW, when FW is too old (Sai Vemuri) [1296472]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-639.el6]
changelog:
  - [input] wacom: fix ExpressKeys remote events (Aristeu Rozanski) [1318027]
  - [fs] revert "writeback: remove wb_list" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: bdi_writeback_task must set task state before calling schedule" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: merge bdi_writeback_task and bdi_start_fn" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: harmonize writeback threads naming" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: fix possible race when creating bdi threads" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wake-ups in the forker thread - 1" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wake-ups in the forker thread - 2" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wake-ups in bdi threads" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: simplify bdi code a little" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not remove bdi from bdi_list" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: move last_active to bdi" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: restructure bdi forker loop a little" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: move bdi threads exiting logic to the forker thread" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: prevent unnecessary bdi threads wakeups" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: optimize periodic bdi thread wakeups" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: remove unnecessary init_timer call" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: cleanup bdi_register" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: fix bad _bh spinlock nesting" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: do not lose wakeup events when forking bdi threads" (Jeff Moyer) [1322297]
  - [fs] revert "writeback: Fix lost wake-up shutting down writeback thread" (Jeff Moyer) [1322297]
  - [mm] revert "backing-dev: ensure wakeup_timer is deleted" (Jeff Moyer) [1322297]
  - [perf] revert: perf changes out of "sched, perf: Fix periodic timers" (Jiri Olsa) [1322488]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-640.el6]
changelog:
  - [net] use GFP_ATOMIC in dst_ops_extend_register (Sabrina Dubroca) [1323252]
  - [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1324318]
  - [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1324318]
  - [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1324318]
  - [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1324318]
  - [kernel] Revert "fix KABI break" (Jiri Olsa) [1324318]


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-641.el6]
changelog:
  - [netdrv] ixgbe: restore proper CHECKSUM_UNNECESSARY behavior for LRO packets (Neil Horman) [1318426]
  - [netdrv] revert " net/mlx5_core: Add pci error handlers to mlx5_core driver" (Don Dutile) [1324599]
  - [x86] kernel: espfix not working for 32-bit KVM paravirt guests (Jacob Tanenbaum) [1172767] {CVE-2014-8134}


author: Aristeu Rozanski <aris@redhat.com> [2.6.32-642.el6]
changelog:
  - [scsi] fc: revert - ensure scan_work isn't active when freeing fc_rport (Ewan Milne) [1326447]
  - [netdrv] ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue (John Greene) [1310749]
  - [netdrv] mlx5e: Fix adding vlan rule with vid zero twice (Kamal Heib) [1322809]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-643.el6]
changelog:
  - [net] bridge: pass vlan registration on to physical device from bridge (Neil Horman) [1313663]
  - [net] tcp/dccp: warn user for preferred ip_local_port_range (Florian Westphal) [1314774]
  - [net] tcp/dccp: try to not exhaust ip_local_port_range in connect() (Florian Westphal) [1314774]
  - [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian Westphal) [1314774]
  - [base] firmware: Add lock for firmware devices (Lyude Paul) [1309875]
  - [net] netlabel: fix a problem with netlbl_secattr_catmap_setrng (Paul Moore) [1321174]
  - [md] dm: only initialize the request_queue once (Mike Snitzer) [1328329]
  - [md] raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1320595]
  - [md] raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1320595]
  - [md] raid5: Compare apples to apples (or sectors to sectors) (Jes Sorensen) [1295969]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-644.el6]
changelog:
  - [isdn] avoid calling tty_ldisc_flush() in atomic context (Sabrina Dubroca) [1328115]
  - [scsi] fcoe: fix reset of fip selection time (Neil Horman) [1230719]
  - [fs] nfsd4: clean up open owners on OPEN failure (J. Bruce Fields) [1300006]
  - [fs] nfsd4: replace oo_confirmed by flag bit (J. Bruce Fields) [1300006]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-645.el6]
changelog:
  - [fs] lockd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1336483]
  - [fs] nfsd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1336483]
  - [acpi] processor: Request native thermal interrupt handling via _OSC (David Arcari) [1327715]
  - [sound] usb-audio: avoid freeing umidi object twice (Mateusz Guzik) [1310668] {CVE-2016-2384}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-646.el6]
changelog:
  - [sched] Revert "kernel: sched: Cure load average vs NO_HZ woes" (Rafael Aquini) [1326373]
  - [sched] Revert "kernel: sched: Cure more NO_HZ load average woes" (Rafael Aquini) [1326373]
  - [sched] Revert "kernel: sched: Move sched_avg_update to update_cpu_load" (Rafael Aquini) [1326373]
  - [sched] Revert "kernel: sched: Fix nohz load accounting -- again" (Rafael Aquini) [1326373]
  - [sched] avoid kernel panic during power off (Frank Ramsay) [1313035]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-647.el6]
changelog:
  - [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1344740]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-649.el6]
changelog:
  - [idle] intel_idle: Add SKX support (Steve Best) [1348739]
  - [fs] auth_gss: fix panic in gss_pipe_downcall() in fips mode (Scott Mayhew) [1309420]
  - [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1267754]
  - [infiniband] security: Restrict use of the write interface (Don Dutile) [1332548] {CVE-2016-4565}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-650.el6]
changelog:
  - [fs] sunrpc: remove BUG_ON calls from cache_read (J. Bruce Fields) [1249854]
  - [fs] gfs2: Automatically set GFS2_DIF_SYSTEM flag on system files (Abhijith Das) [1349127]
  - [fs] gfs2: Use gfs2 wrapper to sync inode before calling generic_file_splice_read() (Abhijith Das) [1300756]
  - [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1333448]
  - [drm] move idr2 implementation to lib (Milos Vyletel) [1316790]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-651.el6]
changelog:
  - [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1347189]
  - [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1315933]
  - [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to > TCP_MSS_DEFAULT (Davide Caratti) [1349776]
  - [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1349776]
  - [net] netfilter: ip(6)t_REJECT: fix wrong transport header pointer in TCP reset (William Townsend) [1343816]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-652.el6]
changelog:
  - [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1352826]
  - [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1351356]
  - [security] keys: potential uninitialized variable (Mateusz Guzik) [1345946] {CVE-2016-4470}
  - [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1353807]
  - [cpufreq] stats: fix race between stats allocation and first usage (Steve Best) [1352347]
  - [x86] cpufreq: intel_pstate: Enable HWP by default (Steve Best) [1348853]
  - [netdrv] cxgb4: Set VPD size so we can read both VPD structures (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Add pci_set_vpd_size() to set VPD size (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Prevent VPD access for buggy devices (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Sleep rather than busy-wait for VPD access completion (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Fold struct pci_vpd_pci22 into struct pci_vpd (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Rename VPD symbols to remove unnecessary "pci22" (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Remove struct pci_vpd_ops.release function pointer (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Move pci_vpd_release() from header file to pci/access.c (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Move pci_read_vpd() and pci_write_vpd() close to other VPD code (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Determine actual VPD size on first access (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Use bitfield instead of bool for struct pci_vpd_pci22.busy (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Allow access to VPD attributes with size 0 (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Update VPD definitions (Myron Stowe) [1289559 1324680 1340999]
  - [pci] Remove unused pci_vpd_truncate() (Myron Stowe) [1289559 1324680 1340999]
  - [pci] handle positive error codes (Myron Stowe) [1289559 1324680 1340999]
  - [pci] check pci_vpd_pci22_wait() return (Myron Stowe) [1289559 1324680 1340999]
  - [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1238861]
  - [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1238861]
  - [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1238861]
  - [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1238861]
  - [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1238861]
  - [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1238861]
  - [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1238861]
  - [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1238861]
  - [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1238861]
  - [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1238861]
  - [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1173286]
  - [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1173286]
  - [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1173286]
  - [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1173286]
  - [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1173286]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-653.el6]
changelog:
  - [security] selinux: convert WARN_ONCE to printk in selinux_nlmsg_perm (Richard Guy Briggs) [1066681]
  - [security] selinux: cleanup error reporting in selinux_nlmsg_perm (Richard Guy Briggs) [1066681]
  - [security] audit: fix dangling keywords in integrity ima message output (Richard Guy Briggs) [1066681]
  - [kernel] audit: invalid op= values for rules (Richard Guy Briggs) [1066681]
  - [security] selinux: normalize audit log formatting (Richard Guy Briggs) [1066681]
  - [fs] gfs2: Fix gfs2_replay_incr_blk for multiple journal sizes (Robert S Peterson) [1357111]
  - [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1360008] {CVE-2016-5829}
  - [netdrv] mlx4: convert to hw_features (kamal heib) [1211211]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-654.el6]
changelog:
  - [fs] gfs2: Check rs_free with rd_rsspin protection (Robert S Peterson) [1362566]
  - [x86] hyperv: Avoid reporting bogus NMI status for Gen2 instances (Vitaly Kuznetsov) [1320215]
  - [x86] mrst: Avoid reporting wrong nmi status (Vitaly Kuznetsov) [1320215]
  - [scsi] sysfs: protect against double execution of __scsi_remove_device() (Vitaly Kuznetsov) [1343105]
  - [scsi] proper state checking and module refcount handling in scsi_device_get (Vitaly Kuznetsov) [1343105]
  - [netdrv] e1000e: prevent division by zero if TIMINCA is zero (Denys Vlasenko) [1322244]
  - [powerpc] perf: Add support for second POWER8 PVR (Gustavo Duarte) [1316453]
  - [fs] xfs: avoid AGI/AGF deadlock scenario for inode chunk allocation (Brian Foster) [1311879]
  - [fs] xfs: xfs_iflush_cluster has range issues (Brian Foster) [1311853]
  - [fs] xfs: mark reclaimed inodes invalid earlier (Brian Foster) [1311853]
  - [fs] xfs: xfs_inode_free() isn't RCU safe (Brian Foster) [1311853]
  - [fs] xfs: optimise xfs_iext_destroy (Brian Foster) [1311853]
  - [fs] xfs: skip stale inodes in xfs_iflush_cluster (Brian Foster) [1311853]
  - [fs] xfs: fix inode validity check in xfs_iflush_cluster (Brian Foster) [1311853]
  - [fs] xfs: xfs_iflush_cluster fails to abort on error (Brian Foster) [1311853]
  - [fs] xfs: remove log item from AIL in xfs_iflush after a shutdown (Brian Foster) [1311853]
  - [fs] xfs: remove log item from AIL in xfs_qm_dqflush after a shutdown (Brian Foster) [1311853]
  - [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth->au_flags (Scott Mayhew) [1294939]
  - [x86] mce: Fix regression. All error records should report via /dev/mcelog (Prarit Bhargava) [1355847]
  - [fs] lockd: unregister notifier blocks if the service fails to come up completely (Scott Mayhew) [1346317]
  - [x86] acpi: fix empty _OSI strings during boot (Prarit Bhargava) [1268934]
  - [kernel] audit: error message typo correction (Richard Guy Briggs) [1342857]
  - [documentation] mm: document improved handling of swappiness==0 (Jerome Marchand) [1341499]
  - [netdrv] Fix ixgbe allocation warning splat (Neil Horman) [1325068]
  - [net] phonet: fix potential use-after-free in pep_sock_close() (Lauro Ramos Venancio) [1326568]
  - [fs] cifs: fix use-after-free bug in find_writable_file (Sachin Prabhu) [1295008]
  - [x86] Drop WARN from multi-BAR check in ioremap_caller (Larry Woodman) [1318622]
  - [mm] mempolicy: fix mbind_range && vma_adjust interaction (Petr Holasek) [1277241]
  - [virt] virtio_pci: fix virtio spec compliance on restore (Michael S. Tsirkin) [1157728]
  - [netdrv] cxgb4: Restore L1 cfg, if FW rejects new L1 cfg settings (Sai Vemuri) [1296474]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-655.el6]
changelog:
  - [fs] gfs2: Cache ACLs read from disk (Andreas Gruenbacher) [1330625]
  - [mm] Fix slab growing out of bound within a cpuset (Larry Woodman) [1350997]
  - [scsi] fix race between simultaneous decrements of ->host_failed (Gustavo Duarte) [1344835]
  - [fs] xfs: fix Q_XQUOTARM ioctl (Zorro Lang) [1329066]
  - [virt] storvsc: driver needs to account for reference to sdev_dev kobj (Cathy Avery) [1316861]
  - [fs] Set MAY_SIGN for multiuser mounts (Sachin Prabhu) [1323053]
  - [x86] mm: Improve switch_mm() barrier comments (Rafael Aquini) [1332601] {CVE-2016-2069}
  - [x86] mm: Add barriers and document switch_mm()-vs-flush synchronization (Rafael Aquini) [1332601] {CVE-2016-2069}
  - [netdrv] vmxnet3: avoid calling pskb_may_pull with interrupts disabled (Jamie Bainbridge) [1340684]
  - [netdrv] vmxnet3: fix checks for dma mapping errors (Jamie Bainbridge) [1340684]
  - [net] netfilter: ip6table_raw: fix table priority (Eric Garver) [1317365]
  - [net] sch_gred: should not use GFP_KERNEL while holding a spinlock (Eric Garver) [1328774]
  - [net] netfilter: fix xt_TCPOPTSTRIP for ipv6 (Paolo Abeni) [1325733]
  - [net] ipv6: Count in extension headers in skb->network_header (Jakub Sitnicki) [1323491]
  - [net] Make userland include of netlink.h more sane (Ondrej Hlavaty) [1313266]
  - [net] bridge: notifier called with the wrong device (Paolo Abeni) [1315988]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-656.el6]
changelog:
  - [scsi] bnx2fc: replace printk() with BNX2FC_IO_DBG() (Maurizio Lombardi) [1337944]
  - [scsi] restart list search after unlock in scsi_remove_target (Ewan Milne) [1349623]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-657.el6]
changelog:
  - [fs] ecryptfs: prevent mounts backed by procfs (Mateusz Guzik) [1347102] {CVE-2016-1583}
  - [hid] usbhid: add quirk for PIXART OEM mouse used by HP (Torez Smith) [1295575]
  - [hid] usbhid: add HP OEM mouse to quirk ALWAYS_POLL (Torez Smith) [1295575]
  - [netdrv] bonding: Prevent IPv6 link local address on enslaved devices (Jarod Wilson) [1292358]
  - [powerpc] iommu: release the DDW when the PHB device node is unplugged (Gustavo Duarte) [1328668]
  - [netdrv] bonding: don't use stale speed and duplex information (Jarod Wilson) [1327315]
  - [scsi] Revert: restart list search after unlock in scsi_remove_target (Ewan Milne) [1369564]
  - [s390] mm: four page table levels vs. fork (Hendrik Brueckner) [1316461] {CVE-2016-2143}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-658.el6]
changelog:
  - [netdrv] bnxt_en: Add new NPAR and dual media device IDs (John Linville) [1347825]
  - [netdrv] bnxt_en: Limit RX BD pages to be no bigger than 32K (John Linville) [1347825]
  - [netdrv] bnxt_en: Add BCM5731X and BCM5741X device IDs (John Linville) [1347825]
  - [netdrv] bnxt_en: Add PCI device ID for 57404 NPAR devices (John Linville) [1347825]
  - [netdrv] bnxt_en: Enable NPAR (NIC Partitioning) Support (John Linville) [1347825]
  - [netdrv] bnxt_en: Add function for VF driver to query default VLAN (John Linville) [1347825]
  - [netdrv] bnxt_en: Fix tx push race condition (John Linville) [1347825]
  - [netdrv] bnxt_en: Add BCM57314 device ID (John Linville) [1347825]
  - [netdrv] bnxt_en: Setup multicast properly after resetting device (John Linville) [1347825]
  - [netdrv] bnxt_en: Need memory barrier when processing the completion ring (John Linville) [1347825]
  - [netdrv] bnxt_en: Don't fallback to INTA on VF (John Linville) [1347825]
  - [netdrv] bnxt_en: Update to Firmware 1.2.2 spec (John Linville) [1347825]
  - [netdrv] bnxt_en: Fix ethtool -a reporting (John Linville) [1347825]
  - [netdrv] bnxt_en: Fix typo in bnxt_hwrm_set_pause_common() (John Linville) [1347825]
  - [netdrv] vmxnet3: update to version 3 (Neil Horman) [1290656]
  - [netdrv] vmxnet3: introduce command to register memory region (Neil Horman) [1290656]
  - [netdrv] vmxnet3: add support for get_coalesce, set_coalesce ethtool operations (Neil Horman) [1290656]
  - [netdrv] vmxnet3: add receive data ring support (Neil Horman) [1290656]
  - [netdrv] vmxnet3: allow variable length transmit data ring buffer (Neil Horman) [1290656]
  - [netdrv] vmxnet3: introduce generalized command interface to configure the device (Neil Horman) [1290656]
  - [netdrv] vmxnet3: prepare for version 3 changes (Neil Horman) [1290656]
  - [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1290656]
  - [netdrv] vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (Neil Horman) [1290656]
  - [netdrv] vmxnet3: set CHECKSUM_UNNECESSARY for IPv6 packets (Neil Horman) [1290656]
  - [netdrv] vmxnet3: fix lock imbalance in vmxnet3_tq_xmit() (Neil Horman) [1290656 1311537]
  - [netdrv] vmxnet3: Update Rx ring 2 max size (Neil Horman) [1290656]
  - [netdrv] Vmxnet3: Fix regression caused by 5738a09 (Neil Horman) [1290656]
  - [netdrv] vmxnet3: Fix use of mfTableLen for big endian architectures (Neil Horman) [1290656]
  - [netdrv] vmxnet3: get rid of unnecessary initializations in .get_drvinfo() (Neil Horman) [1290656]
  - [netdrv] Vmxnet3: Extend register dump support (Neil Horman) [1290656]
  - [fs] namei: don't rehash target on succesful rename (J. Bruce Fields) [1080701]
  - [powerpc] eeh: Block PCI configuration space access during EEH (Gustavo Duarte) [1216944]
  - [scsi] Avoid crashing if device uses DIX but adapter does not support it (Ewan Milne) [1369997]
  - [scsi] aacraid: Check size values after double-fetch from user (Maurizio Lombardi) [1369770] {CVE-2016-6480}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-659.el6]
changelog:
  - [firmware] amd-ucode: Add microcode_amd_fam16 (Suravee Suthikulpanit) [1322525]
  - [firmware] amd-ucode: Add microcode_amd_fam15 (Suravee Suthikulpanit) [1322525]
  - [firmware] amd-ucode: Add microcode_amd (Suravee Suthikulpanit) [1322525]
  - [netdrv] igbvf: remove "link is Up" message when registering mcast address (Corinna Vinschen) [1304114]
  - [acpi] acpia: Fix Scope() op in module level code (Lenny Szubowicz) [1357316]
  - [security] selinux: test for !ss_initialized in selinux_sysctl (Mateusz Guzik) [1285009]
  - [scsi] fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (Maurizio Lombardi) [1341298]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-660.el6]
changelog:
  - [firmware] revert "amd-ucode: Add microcode_amd" (Phillip Lougher) [1375170]
  - [firmware] revert "amd-ucode: Add microcode_amd_fam15" (Phillip Lougher) [1375170]
  - [firmware] revert "amd-ucode: Add microcode_amd_fam16" (Phillip Lougher) [1375170]
  - [s390] mm: fix asce_bits handling with dynamic pagetable levels (Steve Best) [1341758]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-661.el6]
changelog:
  - [fs] NFSv4.1: Fix an NFSv4.1 state renewal regression (Dave Wysochanski) [1332300]
  - [scsi] ibmvfc: Fix I/O hang when port is not mapped (Steve Best) [1377964]
  - [powerpc] eeh: Fix dereferencing NULL device_node (Gustavo Duarte) [1323874]
  - [fs] nfsd3: Check write permission after checking existence (Harshula Jayasuriya) [1373393]
  - [x86] tsc: Add backwards time checking to read_tsc() and vread_tsc() (Prarit Bhargava) [1375163]
  - [sched] core: Clear the root_domain cpumasks in init_rootdomain (Aristeu Rozanski) [1214887]
  - [edac] sb_edac: get rid of 2HA handling while getting active channels (Aristeu Rozanski) [1318810 1353808]
  - [edac] sb_edac: fix Broadwell channel calculation (Aristeu Rozanski) [1318810 1353808]
  - [edac] sb_edac: fix csrow/channel emulation (Aristeu Rozanski) [1318810 1353808]
  - [edac] sb_edac: Fix rank lookup on Broadwell (Aristeu Rozanski) [1318810 1353808]
  - [edac] sb_edac: Take account of channel hashing when needed (Aristeu Rozanski) [1318810 1353808]
  - [edac] sb_edac: Repair damage introduced when "fixing" channel address (Aristeu Rozanski) [1318810 1353808]
  - [edac] sb_edac: Fix computation of channel address (Aristeu Rozanski) [1318810 1353808]
  - [edac] sb_edac: Add support for duplicate device IDs (Aristeu Rozanski) [1318810 1353808]
  - [acpi] SRAT: fix SRAT parsing order with both LAPIC and X2APIC present (Prarit Bhargava) [1247218]
  - [acpi] tables: test the correct variable (Prarit Bhargava) [1247218]
  - [x86] acpi: Handle apic/x2apic entries in MADT in correct order (Prarit Bhargava) [1247218]
  - [acpi] tables: Add acpi_subtable_proc to ACPI table parsers (Prarit Bhargava) [1247218]
  - [acpi] table: Always count matched and successfully parsed entries (Prarit Bhargava) [1247218]
  - [acpi] table: Add new function to get table entries (Prarit Bhargava) [1247218]
  - [netdrv] ixgbe: Fix ATR so that it correctly handles IPv6 extension headers (Ken Cox) [1339563]
  - [netdrv] ixgbe: Store VXLAN port number in network order (Ken Cox) [1339563]
  - [netdrv] ixgbe: Make ATR recognize IPv6 extended headers (Ken Cox) [1339563]
  - [net] vlan: Fix FCOE_MTU support (Maurizio Lombardi) [1367250]
  - [net] inet_diag: fix oops for IPv4 AF_INET6 TCP SYN-RECV state (Phil Sutter) [1328053]
  - [net] tcp: make challenge acks less predictable (Florian Westphal) [1355607] {CVE-2016-5696}
  - [net] netfilter: bridge: do not re-invoke iptables (Florian Westphal) [1319883]
  - [net] set dev->addr_assign_type correctly (Sabrina Dubroca) [1318500]
  - [netdrv] atheros eth: set addr_assign_type if random_ether_addr() used (Sabrina Dubroca) [1318500]
  - [netdrv] ethoc: set addr_assign_type if random_ether_addr() used (Sabrina Dubroca) [1318500]
  - [net] use eth_hw_addr_random() and reset addr_assign_type (Sabrina Dubroca) [1318500]
  - [netdrv] replace random_ether_addr() with eth_hw_addr_random() (Sabrina Dubroca) [1318500]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-662.el6]
changelog:
  - [netdrv] enic: set netdev->vlan_features (Stefan Assmann) [1309973]
  - [s390] qeth: delete napi struct when removing a qeth device (Hendrik Brueckner) [1357027]
  - [s390] iucv: call skb_linearize() when needed (Hendrik Brueckner) [1341759]
  - [s390] dasd: fix hanging device after clear subchannel (Hendrik Brueckner) [1368066]
  - [s390] fix test_fp_ctl inline assembly contraints (Hendrik Brueckner) [1357029]
  - [s390] spinlock: avoid yield to non existent cpu (Hendrik Brueckner) [1341757]
  - [mm] hugetlb: don't use reserved during VM_SHARED mapping cow (Petr Holasek) [1297199]
  - [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1374743]
  - [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1376467]
  - [fs] nfs4: Fix potential use after free of state in nfs4_do_reclaim (Dave Wysochanski) [1343231]
  - [fs] ext2: fix filesystem deadlock while reading corrupted xattr block (Carlos Maiolino) [847106]
  - [documentation] watchdog: hpwdt: remove email address from doc (Nigel Croxon) [1375651]
  - [documentation] watchdog: hpwdt: Adjust documentation to match latest kernel module parameters (Nigel Croxon) [1375651]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-663.el6]
changelog:
  - [fs] NFS: Fix another OPEN_DOWNGRADE bug (Steve Dickson) [1340539]
  - [fs] NFSv4: Fix another bug in the close/open_downgrade code (Steve Dickson) [1340539]
  - [fs] NFSv4: Fix problems with close in the presence of a delegation (Steve Dickson) [1340539]
  - [debug] lockdep: raise MAX_LOCKDEP_CHAINS_BITS to 16 (Maurizio Lombardi) [1314144]
  - [block] nvme: add device id's with intel stripe quirk (David Milburn) [1372088]
  - [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1301903 1333167]
  - [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1301903 1333167]
  - [fs] sunrpc: make AF_LOCAL connect synchronous (Steve Dickson) [1321366]
  - [fs] sunrpc: TCP/UDP always close the old socket before reconnecting (Steve Dickson) [1321366]
  - [fs] sunrpc: Add helpers to prevent socket create from racing (Steve Dickson) [1321366]
  - [fs] sunrpc: Fix stupid typo in xs_sock_set_reuseport (Steve Dickson) [1321366]
  - [fs] sunrpc: Define xs_tcp_fin_timeout only if CONFIG_SUNRPC_DEBUG (Steve Dickson) [1321366]
  - [fs] sunrpc: Handle connection reset more efficiently (Steve Dickson) [1321366]
  - [fs] sunrpc: Remove the redundant XPRT_CONNECTION_CLOSE flag (Steve Dickson) [1321366]
  - [fs] sunrpc: Make xs_tcp_close() do a socket shutdown rather than a sock_release (Steve Dickson) [1321366]
  - [fs] sunrpc: Ensure xs_tcp_shutdown() requests a full close of the connection (Steve Dickson) [1321366]
  - [fs] sunrpc: Cleanup to remove remaining uses of XPRT_CONNECTION_ABORT (Steve Dickson) [1321366]
  - [fs] sunrpc: Remove TCP socket linger code (Steve Dickson) [1321366]
  - [fs] sunrpc: Remove TCP client connection reset hack (Steve Dickson) [1321366]
  - [fs] sunrpc: Ensure xs_reset_transport() resets the close connection flags (Steve Dickson) [1321366]
  - [fs] sunrpc: Do not clear the source port in xs_reset_transport (Steve Dickson) [1321366]
  - [fs] sunrpc: Handle EADDRINUSE on connect (Steve Dickson) [1321366]
  - [fs] sunrpc: Set SO_REUSEPORT socket option for TCP connections (Steve Dickson) [1321366]
  - [block] nvme: Increase the max transfer size when mdts is 0 (David Milburn) [1343876]
  - [block] nvme: make setup work for devices that don't do INTx (David Milburn) [1343876]
  - [block] nvme: Fix potential IO timeout race condition (David Milburn) [1343876]
  - [block] nvme: Don't write cq doorbell on suspended queues (David Milburn) [1343876]
  - [block] nvme: Fix ioctl passthrough length calculation (David Milburn) [1343876]
  - [block] nvme: Return busy status on suspended queue (David Milburn) [1343876]
  - [block] nvme: Add nvme subsystem reset IOCTL (David Milburn) [1343876]
  - [block] nvme: Add nvme subsystem reset support (David Milburn) [1343876]
  - [block] nvme: add sysfs and ioctl controller reset (David Milburn) [1343876]
  - [block] nvme: increase depth of admin queue (David Milburn) [1343876]
  - [infiniband] ib/qib: Support creating qps with GFP_NOIO flag (Alex Estrin) [1373507]
  - [infiniband] ib/qib: Improve ipoib UD performance (Alex Estrin) [1373507]
  - [infiniband] ib/qib: fix mcast detach when qp not attached (Alex Estrin) [1373507]
  - [infiniband] ib/qib: Prevent context loss (Alex Estrin) [1373507]
  - [pci] Allocate ATS struct during enumeration (Myron Stowe) [1228022]
  - [mm] thp: fix SMP race condition between THP page fault and MADV_DONTNEED (Andrea Arcangeli) [1314133]
  - [netdrv] igb: call ndo_stop() instead of dev_close() when running offline selftest (Stefan Assmann) [1267865]
  - [block] Update queue-sysfs.txt documentation file (Joe Lawrence) [1361603]
  - [mm] tracing: Fix no callsite ifndef CONFIG_KMEMTRACE (Aristeu Rozanski) [1123990]
  - [mm] tracing: Define kmem_cache_alloc_notrace ifdef CONFIG_TRACING (Aristeu Rozanski) [1123990]
  - [kernel] replace some read_lock(&tasklist_lock)'s with tasklist_read_lock() (Oleg Nesterov) [1304864]
  - [kernel] replace write_lock_irq(&tasklist_lock) with tasklist_write_lock_irq() (Oleg Nesterov) [1304864]
  - [kernel] introduce tasklist_read_lock() and tasklist_write_lock_irq() (Oleg Nesterov) [1304864]
  - [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1379452]
  - [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1379452]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-664.el6]
changelog:
  - [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1384621]
  - [fs] dlm: free workqueues after the connections (Marcelo Leitner) [1365204]
  - [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1342114]
  - [netdrv] ibmveth: check return of skb_linearize in ibmveth_start_xmit (Gustavo Duarte) [1322315]
  - [fs] NFSv4.1: nfs41_clear_delegation_stateid shouldn't trust NFS_DELEGATED_STATE (Steve Dickson) [1230305]
  - [drm] i915/skl: Fix spurious gpu hang with gt3/gt4 revs (Rob Clark) [1323945]
  - [drm] i915/skl: Fix rc6 based gpu/system hang (Rob Clark) [1323945]
  - [drm] prime: fix error path deadlock fail (Rob Clark) [1334880]
  - [drm] Balance error path for GEM handle allocation (Rob Clark) [1334880]
  - [netdrv] ixgbe: cleanup crosstalk fix (Ken Cox) [1346399]
  - [netdrv] ixgbe: Add work around for empty SFP+ cage crosstalk (Ken Cox) [1346399]
  - [netdrv] ixgbe: Add definitions for x550em_a 10G MAC (Ken Cox) [1346399]
  - [netdrv] ixgbe: Do not clear RAR entry when clearing VMDq for SAN MAC (Ken Cox) [1346399]
  - [md] disable RAID5 /sys/block/md<X>/md/group_thread_cnt (Jes Sorensen) [1322733]
  - [mfd] rtsx: Various tweaks for RHEL-6 (Don Zickus) [1167938]
  - [mfd] rtsx: Add in support for power down (Don Zickus) [1167938]
  - [mfd] rtsx: Update driving settings (Don Zickus) [1167938]
  - [mfd] rtsx: Read vendor setting from config space (Don Zickus) [1167938]
  - [mfd] rtsx: Add support for rts525A (Don Zickus) [1167938]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-666.el6]
changelog:
  - [netdrv] i40e/i40evf : Bump driver version from 1.5.5 to 1.5.10 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: RSS Hash Option parameters (Stefan Assmann) [1360179]
  - [netdrv] i40e: Remove HMC AQ API implementation (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Add driver support for promiscuous mode (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Only offload VLAN tag if enabled (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add DeviceID for X722 QSFP+ (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add device capability which defines if update is available (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Allow PF driver to configure RSS (Stefan Assmann) [1360179]
  - [netdrv] i40e: Specify AQ event opcode to wait for (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Don't Panic (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Limit TSO to 7 descriptors for payload instead of 8 per packet (Stefan Assmann) [1360179]
  - [netdrv] i40evf: properly handle VLAN features (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump patch from 1.5.2 to 1.5.5 (Stefan Assmann) [1360179]
  - [netdrv] i40e: Input set mask constants for RSS, flow director, and flex bytes (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add RSS configuration to virtual channel (Stefan Assmann) [1360179]
  - [netdrv] i40e: Move NVM variable out of AQ struct (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Faster RX via avoiding FCoE (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Drop unused tx_ring argument (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump patch from 1.5.1 to 1.5.2 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Fix get_rss_aq (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Add longer wait after remove module (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add new device ID for X722 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Fix VLAN features (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump patch from 1.4.25 to 1.5.1 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Add additional check for reset (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Fix handling of boolean logic in polling routines (Stefan Assmann) [1360179]
  - [netdrv] i40evf: remove dead code (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Allow up to 12K bytes of data per Tx descriptor instead of 8K (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.25 and i40evf to 1.4.15 (Stefan Assmann) [1360179]
  - [netdrv] i40e: implement and use Rx CTL helper functions (Stefan Assmann) [1360179]
  - [netdrv] i40e: add adminq commands for Rx CTL registers (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add functions to blink led on 10GBaseT PHY (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Rewrite logic for 8 descriptor per packet check (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Break up xmit_descriptor_count from maybe_stop_tx (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Use u64 values instead of casting them in TSO function (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Drop outer checksum offload that was not requested (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.15 and i40evf to 1.4.11 (Stefan Assmann) [1360179]
  - [netdrv] i40e: When in promisc mode apply promisc mode to Tx Traffic as well (Stefan Assmann) [1360179]
  - [netdrv] i40e: clean event descriptor before use (Stefan Assmann) [1360179]
  - [netdrv] i40evf: set adapter state on reset failure (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: avoid atomics (Stefan Assmann) [1360179]
  - [netdrv] i40e: Add a SW workaround for lost interrupts (Stefan Assmann) [1360179]
  - [netdrv] i40evf: support packet split receive (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump version (Stefan Assmann) [1360179]
  - [netdrv] i40e: properly show packet split status in debugfs (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: use logical operators, not bitwise (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: use __GFP_NOWARN (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: try again after failure (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: don't lose interrupts (Stefan Assmann) [1360179]
  - [netdrv] i40evf: Change vf driver string to reflect all products i40evf supports (Stefan Assmann) [1360179]
  - [netdrv] i40e: Refactor force_wb and WB_ON_ITR functionality code (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: bump version to 1.4.12/1.4.8 (Stefan Assmann) [1360179]
  - [netdrv] i40e: do TSO only if CHECKSUM_PARTIAL is set (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.11 and i40evf to 1.4.7 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: enable bus master after reset (Stefan Assmann) [1360179]
  - [netdrv] i40e: fix write-back-on-itr to work with legacy itr (Stefan Assmann) [1360179]
  - [netdrv] i40e: Bump AQ minor version to 1.5 for new FW features (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ thermal sensor control struct (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Add VXLAN-GPE tunnel type (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Add set_switch_config (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Shared resource flags (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Add external power class to get link status (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Geneve cloud tunnel type (Stefan Assmann) [1360179]
  - [netdrv] i40e: AQ Add Run PHY Activity struct (Stefan Assmann) [1360179]
  - [netdrv] i40e: add new proxy-wol bit for X722 (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Use private workqueue (Stefan Assmann) [1360179]
  - [netdrv] i40evf: add new write-back mode (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Fix for UDP/TCP RSS for X722 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: null out ring pointers on free (Stefan Assmann) [1360179]
  - [netdrv] i40e: define function capabilities in only one place (Stefan Assmann) [1360179]
  - [netdrv] i40evf: allow channel bonding of VFs (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Fix RSS rx-flow-hash configuration through ethtool (Stefan Assmann) [1360179]
  - [netdrv] treewide: Fix typos in printk (Stefan Assmann) [1360179]
  - [netdrv] i40e: remove forever unused ID (Stefan Assmann) [1360179]
  - [netdrv] i40e: Fix Rx hash reported to the stack by our driver (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.8 and i40evf to 1.4.4 (Stefan Assmann) [1360179]
  - [netdrv] i40evf: change version string generation (Stefan Assmann) [1360179]
  - [netdrv] i40e/i40evf: Add a new offload for RSS PCTYPE V2 for X722 (Stefan Assmann) [1360179]
  - [netdrv] i40e: Opcode and structures required by OEM Post Update AQ command and add new NVM arq message (Stefan Assmann) [1360179]
  - [netdrv] i40evf: check rings before freeing resources (Stefan Assmann) [1360179]
  - [netdrv] i40e: Fix errors resulted while turning off TSO (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: use configured RSS key and lookup table in i40e_vsi_config_rss (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: fix broken i40e_config_rss_aq function (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: move i40e_vsi_config_rss below i40e_get_rss_aq (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove redundant memset (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: check for and deal with non-contiguous TCs (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf : Bump driver version from 1.5.5 to 1.5.10 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Update device ids for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Drop extra copy of function (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Use consistent type for vf_id (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: PTP - avoid aggregate return warnings (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix uninitialized variable (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove HMC AQ API implementation (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40evf: Add driver support for promiscuous mode (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add VF promiscuous mode driver support (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add promiscuous on VLAN support (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Only offload VLAN tag if enabled (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove zero check (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add DeviceID for X722 QSFP+ (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add device capability which defines if update is available (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Specify AQ event opcode to wait for (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Code cleanup in i40e_add_fdir_ethtool (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Limit TSO to 7 descriptors for payload instead of 8 per packet (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: fix errant PCIe bandwidth message (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump patch from 1.5.2 to 1.5.5 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Input set mask constants for RSS, flow director, and flex bytes (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Move NVM event wait check to NVM code (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add RSS configuration to virtual channel (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Move NVM variable out of AQ struct (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Restrict VF poll mode to only single function mode devices (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Faster RX via avoiding FCoE (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Drop unused tx_ring argument (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Move HW flush (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Leave debug_mask cleared at init (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Inserting a HW capability display info (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump patch from 1.5.1 to 1.5.2 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Request PHY media event at reset time (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Lower some message levels (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix for supported link modes in 10GBaseT PHY's (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Disable link polling (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Make VF resets more reliable (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add new device ID for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove unused variable (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: remove redundant check on vsi->active_vlans (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump patch from 1.4.25 to 1.5.1 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Change comment to reflect correct function name (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Change unknown event error msg to ignore message (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Added code to prevent double resets (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Notify VFs of all resets (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove timer and task only if created (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Assure that adminq is alive in debug mode (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Remove MSIx only if created (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix up return code (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Save off VSI resource count when updating VSI (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Remove I40E_MAX_USER_PRIORITY define (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Fix handling of boolean logic in polling routines (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Allow up to 12K bytes of data per Tx descriptor instead of 8K (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: call ndo_stop() instead of dev_close() when running offline selftest (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: queue-specific settings for interrupt moderation (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.25 and i40evf to 1.4.15 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: let go of the past (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: suspend scheduling during driver unload (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Use the new rx ctl register helpers. Don't use AQ calls from clear_hw (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: implement and use Rx CTL helper functions (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add adminq commands for Rx CTL registers (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add check for null VSI (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Expose some registers to program parser, FD and RSS logic (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix for unexpected messaging (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Do not wait for Rx queue disable in DCB reconfig (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Increase timeout when checking GLGEN_RSTAT_DEVSTATE bit (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix led blink capability for 10GBaseT PHY (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add functions to blink led on 10GBaseT PHY (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Rewrite logic for 8 descriptor per packet check (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Break up xmit_descriptor_count from maybe_stop_tx (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Clean-up Rx packet checksum handling (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Set skb->csum_level for encapsulated checksum (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Add exception handling for Tx checksum (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Use u64 values instead of casting them in TSO function (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Drop outer checksum offload that was not requested (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.15 and i40evf to 1.4.11 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: When in promisc mode apply promisc mode to Tx Traffic as well (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: clean event descriptor before use (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: better error reporting for nvmupdate (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: expand comment (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Do not disable queues in the Legacy/MSI Interrupt handler (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: avoid atomics (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Removal of code which relies on BASE VEB SEID (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix PROMISC mode for Multi-function per port (MFP) devices (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add a SW workaround for lost interrupts (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: trivial: cleanup use of pf->hw (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: drop unused debugfs file "dump" (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: get rid of magic number (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump version (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: properly show packet split status in debugfs (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: use logical operators, not bitwise (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: use __GFP_NOWARN (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: dump descriptor indexes in hex (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: try again after failure (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: don't lose interrupts (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Refactor force_wb and WB_ON_ITR functionality code (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: use new add_veb calling with VEB stats control (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add VEB stat control and remove L2 cloud filter (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: set shared bit for multicast filters (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Make the DCB firmware checks for X710/XL710 only (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: move sync_vsi_filters up in service_task (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add priv flag for automatic rule eviction (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: bump version to 1.4.12/1.4.8 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: avoid large memcpy by assigning struct (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: count allocation errors (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: drop unused function (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: negate PHY int mask bits (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: APIs to Add/remove port mirroring rules (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: fix: do not sleep in netdev_ops (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: allocate memory safer (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: do TSO only if CHECKSUM_PARTIAL is set (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: trivial: fix missing space (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: trivial: drop duplicate definition (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.11 and i40evf to 1.4.7 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: trivial: remove unnecessary local var (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: remove VF device IDs from PF (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add netdev info to VSI dump (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add a little more to an NVM update debug message (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: refactor DCB function (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add 20G speed for Tx bandwidth calculations (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add counter for arq overflows (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: fix write-back-on-itr to work with legacy itr (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Store lan_vsi_idx and lan_vsi_id in the right size (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Bump AQ minor version to 1.5 for new FW features (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: AQ thermal sensor control struct (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: AQ Add VXLAN-GPE tunnel type (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: AQ Add set_switch_config (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: AQ Shared resource flags (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add 100Mb ethtool reporting (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: AQ Add Run PHY Activity struct (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Limit DCB FW version checks to X710/XL710 devices (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add new proxy-wol bit for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Use private workqueue (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40evf: add new write-back mode (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Fix for UDP/TCP RSS for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Extend ethtool RSS hooks for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: add new device IDs for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: bump version to 1.4.10 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Cleanup the code with respect to restarting autoneg (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: define function capabilities in only one place (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Replace X722 mac check in ethtool get_settings (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Fix RSS rx-flow-hash configuration through ethtool (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Add mac_filter_element at the end of the list instead of HEAD (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: remove forever unused ID (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Fix Rx hash reported to the stack by our driver (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: allow zero MAC address for VFs (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: change log messages and error returns (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Bump i40e to 1.4.8 and i40evf to 1.4.4 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: clean whole mac filter list (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e/i40evf: Add a new offload for RSS PCTYPE V2 for X722 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: hush little warnings (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: Opcode and structures required by OEM Post Update AQ command and add new NVM arq message (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: use explicit cast from u16 to u8 (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: don't add zero MAC filter (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: properly delete VF MAC filters (Stefan Assmann) [1249250 1310402 1346978]
  - [netdrv] i40e: chomp the BIT(_ULL) (Stefan Assmann) [1249250 1310402 1346978]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-667.el6]
changelog:
  - [hv] get rid of id in struct vmbus_channel (Vitaly Kuznetsov) [1322802]
  - [hv] make VMBus bus ids persistent (Vitaly Kuznetsov) [1322802]
  - [hv] storvsc: Fix potential memory leak (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Filter out storvsc messages CD-ROM medium not present (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: fix SRB_STATUS_ABORTED handling (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: add logging for error/warning messages (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Fix a bug in the handling of SRB status flags (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Don't set the SRB_FLAGS_QUEUE_ACTION_ENABLE flag (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Set the tablesize based on the information given by the host (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Don't assume that the scatterlist is not chained (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Retrieve information about the capability of the target (Cathy Avery) [1322928 1352824]
  - [hv] storvsc: Always send on the selected outgoing channel (Cathy Avery) [1322928 1352824]
  - [hv] vmbus: Support a vmbus API for efficiently sending page arrays (Cathy Avery) [1322928 1352824]
  - [hv] balloon: replace ha_region_mutex with spinlock (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] balloon: account for gaps in hot add regions (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] balloon: keep track of where ha_region starts (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] balloon: reset host_specified_ha_region (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] balloon: don't crash when memory is added in non-sorted order (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] balloon: check if ha_region_mutex was acquired in MEM_CANCEL_ONLINE case (Vitaly Kuznetsov) [1326999 1381617]
  - [hv] don't leak memory in vmbus_establish_gpadl() (Vitaly Kuznetsov) [1376860]
  - [hv] get rid of redundant messagecount in create_gpadl_header() (Vitaly Kuznetsov) [1376860]
  - [hv] vmbus: don't manipulate with clocksources on crash (Cathy Avery) [1365049]
  - [hv] correct tsc page sequence invalid value (Cathy Avery) [1365049]
  - [hv] vmbus: fix build warning (Cathy Avery) [1365049]
  - [hv] vmbus: Implement a clocksource based on the TSC page (Cathy Avery) [1365049]
  - [hv] kvp: cancel kvp_host_handshake_work on module unload (Vitaly Kuznetsov) [1321259]
  - [x86] mm/xen: Suppress hugetlbfs in PV guests (Vitaly Kuznetsov) [1312331]
  - [mm] hugetlb: allow hugepages_supported to be architecture specific (Vitaly Kuznetsov) [1312331]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-668.el6]
changelog:
  - [netdrv] mlx5e: Fix minimum MTU (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5e: Device's mtu field is u16 and not int (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_en: Fix endianness bug in IPV6 csum calculation (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Allow resetting VF admin mac to zero (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5e: Correctly handle RSS indirection table when changing number of channels (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5e: Fix ethtool RX hash func configuration change (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5e: Fix LRO modify (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5e: Remove wrong poll CQ optimization (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Do not BUG_ON during reset when PCI is offline (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_en: Count HW buffer overrun only once (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: fix some error handling in mlx4_multi_func_init() (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Remove unused macro (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Initialize hop_limit when creating address handle (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5: Expose correct maximum number of CQE capacity (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Replace kfree with kvfree in mlx4_ib_destroy_srq (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: fix handling return value of mlx4_slave_convert_port (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Use vmalloc for WR buffers when needed (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Use correct order of variables in log message (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Expose correct max_sge_rd limit (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Avoid returning success in case of an error flow (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Replace VF zero mac with random mac in mlx4_core (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Fix resource tracker error flow in add_res_range (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Copy/set only sizeof struct mlx4_eqe bytes (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_en: really allow to change RSS key (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx5: Fix incorrect wc pkey_index assignment for GSI messages (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Fix incorrect cq flushing in error state (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Use correct SL on AH query under RoCE (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Forbid using sysfs to change RoCE pkeys (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Demote mcg message from warning to debug (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Fix potential deadlock when sending mad to wire (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4, mlx5, mthca: Expose max_sge_rd correctly (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Add extra check for total vfs for SRIOV (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_en: Remove BUG_ON assert when checking if ring is full (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Relieve cpu load average on the port sending flow (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Fix wrong index in propagating port change event to VFs (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Fix memory leak in do_slave_init (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4: Disable HA for SRIOV PF RoCE devices (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_en: Release TX QP when destroying TX ring (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: Disable Granular QoS per VF under IB/Eth VPI configuration (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: fix typo in mlx4_set_vf_mac (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: need to call close fw if alloc icm is called twice (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] mlx4_core: double free of dev_vfs (Slava Shwartsman) [1333657 1384212 1384531 1385314 1385317 1385318 1385319]
  - [netdrv] bnx2x: don't reset chip on cleanup if PCI function is offline (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: allow adding VLANs while interface is down (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: avoid leaking memory on bnx2x_init_one() failures (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Prevent false warning for lack of FC NPIV (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: fix receive of VF->PF mailbox messages by the PF on big-endian (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: fix sending VF->PF messages on big-endian (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Fix 84833 phy command handler (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Fix led setting for 84858 phy (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Correct 84858 PHY fw version (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Fix 84833 RX CRC (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Fix link-forcing for KR2 (Michal Schmidt) [1386199]
  - [netdrv] bnx2x: Warn about grc timeouts in register dump (Michal Schmidt) [1386199]
  - [netdrv] be2net: Enable VF link state setting for BE3 (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix TX stats for TSO packets (Ivan Vecera) [1347812]
  - [netdrv] be2net: NCSI FW section should be properly updated with ethtool for BE3 (Ivan Vecera) [1347812]
  - [netdrv] be2net: Provide an alternate way to read pf_num for BEx chips (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix mac address collision in some configurations (Ivan Vecera) [1347812]
  - [netdrv] be2net: Avoid redundant addition of mac address in HW (Ivan Vecera) [1347812]
  - [netdrv] be2net: Add privilege level check for OPCODE_COMMON_GET_EXT_FAT_CAPABILITIES SLI cmd (Ivan Vecera) [1347812]
  - [netdrv] be2net: Issue COMMON_RESET_FUNCTION cmd during driver unload (Ivan Vecera) [1347812]
  - [netdrv] be2net: Support UE recovery in BEx/Skyhawk adapters (Ivan Vecera) [1347812]
  - [netdrv] be2net: replace polling with sleeping in the FW completion path (Ivan Vecera) [1347812]
  - [netdrv] be2net: do not remove vids from driver table if be_vid_config() fails (Ivan Vecera) [1347812]
  - [netdrv] be2net: clear vlan-promisc setting before programming the vlan list (Ivan Vecera) [1347812]
  - [netdrv] be2net: perform temperature query in adapter regardless of its interface state (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix broadcast echoes from EVB in BE3 (Ivan Vecera) [1347812]
  - [netdrv] be2net: fix definition of be_max_eqs() (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix provisioning of RSS for VFs in multi-partition configurations (Ivan Vecera) [1347812]
  - [netdrv] be2net: Enable Wake-On-LAN from shutdown for Skyhawk (Ivan Vecera) [1347812]
  - [netdrv] be2net: use max-TXQs limit too while provisioning VF queue pairs (Ivan Vecera) [1347812]
  - [netdrv] benet: be_resume needs to protect be_open with rtnl_lock (Ivan Vecera) [1347812]
  - [netdrv] be2net: Don't leak iomapped memory on removal (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix a UE caused by passing large frames to the ASIC (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix pcie error recovery in case of NIC+RoCE adapters (Ivan Vecera) [1347812]
  - [netdrv] be2net: Interpret and log new data that's added to the port misconfigure async event (Ivan Vecera) [1347812]
  - [netdrv] be2net: Request RSS capability of Rx interface depending on number of Rx rings (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix interval calculation in interrupt moderation (Ivan Vecera) [1347812]
  - [netdrv] be2net: Add retry in case of error recovery failure (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix Lancer error recovery (Ivan Vecera) [1347812]
  - [netdrv] be2net: Don't run ethtool self-tests for VFs (Ivan Vecera) [1347812]
  - [netdrv] be2net: SRIOV Queue distribution should factor in EQ-count of VFs (Ivan Vecera) [1347812]
  - [netdrv] be2net: Fix be_vlan_rem_vid() to check vlan id being removed (Ivan Vecera) [1347812]
  - [netdrv] be2net: check for INSUFFICIENT_PRIVILEGES error (Ivan Vecera) [1347812]
  - [netdrv] be2net: return error status from be_set_phys_id() (Ivan Vecera) [1347812]
  - [netdrv] be2net: fix port-res desc query of GET_PROFILE_CONFIG FW cmd (Ivan Vecera) [1347812]
  - [netdrv] be2net: fix VF link state transition from disabled to auto (Ivan Vecera) [1347812]
  - [netdrv] bnx2: fix locking when netconsole is used (Ivan Vecera) [1291369]
  - [netdrv] tg3: Avoid NULL pointer dereference in tg3_io_error_detected() (Ivan Vecera) [1347828]
  - [netdrv] tg3: Fix for disallow tx coalescing time to be 0 (Ivan Vecera) [1347828]
  - [netdrv] tg3: Report the correct number of RSS queues through tg3_get_rxnfc (Ivan Vecera) [1347828]
  - [netdrv] tg3: Fix for diasllow rx coalescing time to be 0 (Ivan Vecera) [1347828]
  - [netdrv] net: tg3: avoid uninitialized variable warning (Ivan Vecera) [1347828]
  - [net] ipv6: restrict hop_limit sysctl setting to range (1; 255) (Paolo Abeni) [1314305]
  - [net] ipv4: add limits to ip_default_ttl (Paolo Abeni) [1314305]
  - [net] route: enforce hoplimit max value (Paolo Abeni) [1313899]
  - [net] netfilter: Add missing #include <limits.h> for userland (Sabrina Dubroca) [1317697]
  - [net] sctp: use the same clock as if sock source timestamps were on (Xin Long) [1334561]
  - [net] sctp: update the netstamp_needed counter when copying sockets (Xin Long) [1334561]
  - [net] sctp: fix the transports round robin issue when init is retransmitted (Xin Long) [1312728]
  - [net] pppoe: fix memory corruption in padt work structure (Beniamino Galvani) [1317900]
  - [net] pppoe: drop pppoe device in pppoe_unbind_sock_work (Beniamino Galvani) [1317900]
  - [net] pppoe: Use workqueue to die properly when a PADT is received (Beniamino Galvani) [1317900]
  - [net] ipv6: Skip XFRM lookup if dst_entry in socket cache is valid (Jakub Sitnicki) [1327680]
  - [net] ipv6: Consolidate route lookup sequences (Jakub Sitnicki) [1327680]
  - [net] macvtap: Add support of packet capture on macvtap device (Sabrina Dubroca) [1373100]
  - [scsi] fnic: pci_dma_mapping_error() doesn't return an error code (Maurizio Lombardi) [1364593]
  - [scsi] fnic: Using rport->dd_data to check rport online instead of rport_lookup (Maurizio Lombardi) [1364593]
  - [scsi] fnic: Cleanup the I/O pending with fw and has timed out and is used to issue LUN reset (Maurizio Lombardi) [1364593]
  - [scsi] fnic: move printk()s outside of the critical code section (Maurizio Lombardi) [1364593]
  - [scsi] fnic: check pci_map_single() return value (Maurizio Lombardi) [1364593]
  - [scsi] be2iscsi: Driver version: 11.1.0.0 (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Replace _bh with _irqsave/irqrestore (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Remove redundant iscsi_wrb desc memset (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix bad WRB index error (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix async PDU handling path (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Add lock to protect WRB alloc and free (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: _bh for io_sgl_lock and mgmt_sgl_lock (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Reduce driver load/unload time (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix ExpStatSn in management tasks (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Update the driver version (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix WRB leak in login/logout path (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix async link event processing (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix to process 25G link speed info from FW (Maurizio Lombardi) [1347815]
  - [scsi] scsi_transport_iscsi: Add 25G and 40G speed definition (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix IOPOLL implementation (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix return value for MCC completion (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Add FW config validation (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix to handle misconfigured optics events (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix VLAN support for IPv6 network (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix to remove shutdown entry point (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Added return value check for mgmt_get_all_if_id (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Set mbox timeout to 30s (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix to synchronize tag allocation using spin_lock (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix to use atomic bit operations for tag_state (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix mbox synchronization replacing spinlock with mutex (Maurizio Lombardi) [1347815]
  - [scsi] be2iscsi: Fix soft lockup in mgmt_get_all_if_id path using bmbx (Maurizio Lombardi) [1347815]
  - [scsi] scsi_debug: fix logical block provisioning support when unmap_alignment != 0 (Maurizio Lombardi) [1388096]
  - [scsi] scsi_debug: fix logical block provisioning support (Maurizio Lombardi) [1388096]
  - [scsi] mpt3sas: Fix resume on WarpDrive flash cards (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: avoid mpt3sas_transport_port_add NULL parent_dev (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: set num_phys after allocating phy space (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: add missing curly braces (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Used "synchronize_irq()"API to synchronize timed-out IO & TMs (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Set maximum transfer length per IO to 4MB for VDs (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Updating mpt3sas driver version to 13.100.00.00 (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Handle active cable exception event (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Update MPI header to 2.00.42 (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: remove unused fw_event_work elements (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Remove usage of 'struct timeval' (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Don't overreach ioc->reply_post during initialization (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Remove unnecessary synchronize_irq() before free_irq() (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Free memory pools before retrying to allocate with different value (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Remove cpumask_clear for zalloc_cpumask_var and don't free free_cpu_mask_var before reply_q (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Updating mpt3sas driver version to 12.100.00.00 (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Fix for Asynchronous completion of timedout IO and task abort of timedout IO (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Updated MPI Header to 2.00.42 (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Add support for configurable Chain Frame Size (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Added smp_affinity_enable module parameter (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Make use of additional HighPriority credit message frames for sending SCSI IOs (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Never block the Enclosure device (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Fix static analyzer(coverity) tool identified defects (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Used IEEE SGL instead of MPI SGL while framing a SMP Passthrough request message (Tomas Henzl) [1329353]
  - [scsi] mpt3sas: Added support for high port count HBA variants (Tomas Henzl) [1329353]
  - [scsi] bnx2fc: Update version number to 2.10.3 (Maurizio Lombardi) [1380385]
  - [scsi] bnx2fc: Check sc_cmd device and host pointer before returning the command to the mid-layer (Maurizio Lombardi) [1380385]
  - [scsi] bnx2fc: Print netdev device name when FCoE is successfully initialized (Maurizio Lombardi) [1380385]
  - [scsi] bnx2fc: Print when we send a fip keep alive (Maurizio Lombardi) [1380385]
  - [scsi] bnx2fc: bnx2fc_eh_abort(): fix wrong return code (Maurizio Lombardi) [1380385]
  - [scsi] bnx2fc: Show information about log levels in 'modinfo' (Maurizio Lombardi) [1380385]
  - [scsi] hpsa: update driver revision to 3.4.10-0-RH2 (Joseph Szczypek) [1377892]
  - [scsi] hpsa: correct scsi 6byte lba calculation (Joseph Szczypek) [1377892]
  - [scsi] lpfc: remove unknown ELS message warnings for RDP (Maurizio Lombardi) [1347811]
  - [scsi] smartpqi: add to config-generic (Scott Benesh) [1343743]
  - [scsi] smartpqi: raid bypass lba calculation fix (Scott Benesh) [1343743]
  - [scsi] smartpqi: bump driver version (Scott Benesh) [1343743]
  - [scsi] smartpqi: add smartpqi.txt (Scott Benesh) [1343743]
  - [scsi] smartpqi: update Kconfig (Scott Benesh) [1343743]
  - [scsi] smartpqi: remove timeout for cache flush operations (Scott Benesh) [1343743]
  - [scsi] smartpqi: scsi queuecommand cleanup (Scott Benesh) [1343743]
  - [scsi] smartpqi: minor tweaks to update time support (Scott Benesh) [1343743]
  - [scsi] smartpqi: minor function reformating (Scott Benesh) [1343743]
  - [scsi] smartpqi: correct event acknowledgement timeout issue (Scott Benesh) [1343743]
  - [scsi] smartpqi: correct controller offline issue (Scott Benesh) [1343743]
  - [scsi] smartpqi: add kdump support (Scott Benesh) [1343743]
  - [scsi] smartpqi: enhance reset logic (Scott Benesh) [1343743]
  - [scsi] smartpqi: enhance drive offline informational message (Scott Benesh) [1343743]
  - [scsi] smartpqi: simplify spanning (Scott Benesh) [1343743]
  - [scsi] smartpqi: change tmf macro names (Scott Benesh) [1343743]
  - [scsi] smartpqi: change aio sg processing (Scott Benesh) [1343743]
  - [scsi] aacraid: remove wildcard for series 9 controllers (Scott Benesh) [1343743]
  - [scsi] smartpqi: initial commit of Microsemi smartpqi driver (Scott Benesh) [1343743]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-669.el6]
changelog:
  - [netdrv] sfc: fix potential stack corruption from running past stat bitmask (Jarod Wilson) [1374067]
  - [netdrv] cxgb4: Enable SR-IOV configuration via PCI sysfs interface (Sai Vemuri) [1222751]
  - [netdrv] bnx2x: don't wait for Tx completion on recovery (Michal Schmidt) [1300681]
  - [pm] hibernate: Only crash if necessary in create/free_basic_memory_bitmaps() (Jerry Snitselaar) [1374378]
  - [netdrv] ixgbe: add WoL support for some 82599 subdevice IDs (Ken Cox) [1316845]
  - [kernel] cgroup: improve old cgroup handling in cgroup_attach_proc() (Lauro Ramos Venancio) [1372085]
  - [watchdog] hpwdt: add support for iLO5 (Linda Knippers) [1382496]
  - [watchdog] hpwdt: HP rebranding (Linda Knippers) [1388170]
  - [documentation] Fix hpwdt documentation to match RHEL6 (Linda Knippers) [1388170]
  - [acpi] acpica: Fix for a Store->ArgX when ArgX contains a reference to a field (Lenny Szubowicz) [1324697]
  - [acpi] acpica: Standardize all switch() blocks (Lenny Szubowicz) [1324697]
  - [acpi] acpica: Interpreter: Fix Store() when implicit conversion is not possible (Lenny Szubowicz) [1324697]
  - [fs] backing-dev: fix wakeup timer races with bdi_unregister() (Jeff Moyer) [1111683]
  - [fs] backing-dev: ensure wakeup_timer is deleted (Jeff Moyer) [1111683]
  - [fs] writeback: Fix lost wake-up shutting down writeback thread (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wakeup events when forking bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: fix bad _bh spinlock nesting (Jeff Moyer) [1111683]
  - [fs] writeback: cleanup bdi_register (Jeff Moyer) [1111683]
  - [fs] writeback: remove unnecessary init_timer call (Jeff Moyer) [1111683]
  - [fs] writeback: optimize periodic bdi thread wakeups (Jeff Moyer) [1111683]
  - [fs] writeback: prevent unnecessary bdi threads wakeups (Jeff Moyer) [1111683]
  - [fs] writeback: move bdi threads exiting logic to the forker thread (Jeff Moyer) [1111683]
  - [fs] writeback: restructure bdi forker loop a little (Jeff Moyer) [1111683]
  - [fs] writeback: move last_active to bdi (Jeff Moyer) [1111683]
  - [fs] writeback: do not remove bdi from bdi_list (Jeff Moyer) [1111683]
  - [fs] writeback: simplify bdi code a little (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in the forker thread - 2 (Jeff Moyer) [1111683]
  - [fs] writeback: do not lose wake-ups in the forker thread - 1 (Jeff Moyer) [1111683]
  - [fs] writeback: fix possible race when creating bdi threads (Jeff Moyer) [1111683]
  - [fs] writeback: harmonize writeback threads naming (Jeff Moyer) [1111683]
  - [fs] writeback: merge bdi_writeback_task and bdi_start_fn (Jeff Moyer) [1111683]
  - [fs] writeback: bdi_writeback_task() must set task state before calling schedule() (Jeff Moyer) [1111683]
  - [fs] writeback: remove wb_list (Jeff Moyer) [1111683]
  - [s390] zfcp: close window with unblocked rport during rport gone (Hendrik Brueckner) [1383980]
  - [s390] zfcp: fix ELS/GS request&response length for hardware data router (Hendrik Brueckner) [1383981]
  - [s390] zfcp: fix fc_host port_type with NPIV (Hendrik Brueckner) [1383982]
  - [s390] zcrypt: toleration of new crypto adapter hardware with type 12 (Hendrik Brueckner) [1344041]
  - [s390] time: LPAR offset handling (Hendrik Brueckner) [1381564]
  - [s390] time: move PTFF definitions (Hendrik Brueckner) [1381564]
  - [scsi] libfc: Don't have fc_exch_find log errors on a new exchange (Chris Leech) [1368175]
  - [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1383078]
  - [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1368175]
  - [scsi] libfc: Do not login if the port is already started (Chris Leech) [1368175]
  - [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1368175]
  - [scsi] libfc: Do not take rdata->rp_mutex when processing a (Chris Leech) [1368175]
  - [scsi] libfc: Fixup disc_mutex handling (Chris Leech) [1368175]
  - [scsi] libfc: Revisit kref handling (Chris Leech) [1368175]
  - [scsi] fcoe: Stop fc_rport_priv structure leak (Chris Leech) [1368175]
  - [scsi] libfc: do not send ABTS when resetting exchanges (Chris Leech) [1368175]
  - [scsi] libfc: reset exchange manager during LOGO handling (Chris Leech) [1368175]
  - [scsi] libfc: send LOGO for PLOGI failure (Chris Leech) [1368175]
  - [scsi] libfc: Issue PRLI after a PRLO has been received (Chris Leech) [1368175]
  - [scsi] libfc: fix seconds_since_last_reset calculation (Chris Leech) [1368175]
  - [scsi] libfc: Update rport reference counting (Chris Leech) [1368175]
  - [scsi] libfc: XenServer fails to mount root filesystem (Chris Leech) [1368175]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-670.el6]
changelog:
  - [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1387243]
  - [misc] hpilo: Changes to support new security states in iLO5 FW (Joseph Szczypek) [1376584]
  - [misc] hpilo: Change e-mail address from hp.com to hpe.com (Joseph Szczypek) [1376584]
  - [misc] hpilo: cleanup hpilo (Joseph Szczypek) [1376584]
  - [mm] memory_hotplug.c: change normal message to use pr_debug (Jeremy McNicoll) [1255272]
  - [acpi] mem_hotplug: set memory info correctly when problems forcing mem online (Jeremy McNicoll) [1255272]
  - [fs] bio: Need to free integrity payload if the split bio gets memory by itself (Xiao Ni) [1268434]
  - [md] add rdev reference for super write (Xiao Ni) [1365718]
  - [netdrv] rtlwifi: fix memory leak for USB device (Stanislaw Gruszka) [1364597]
  - [fs] NFSv4: Fix a use-after-free situation in _nfs4_proc_getlk() (Benjamin Coddington) [1353272]
  - [drm] nouveau/kms: take mode_config mutex in connector hotplug path (Ben Skeggs) [1349978]
  - [kernel] clocksource: Defer override invalidation unless clock is unstable (Prarit Bhargava) [1356231]
  - [kernel] clocksource: Reselect clocksource when watchdog validated high-res capability (Prarit Bhargava) [1356231]
  - [fs] nfs4: clnt: respect noresvport when establishing connections to DSes (Benjamin Coddington) [1346041]
  - [fs] nfs: Add nfs_client behavior flags (Benjamin Coddington) [1346041]
  - [block] fix /proc/diskstats in-flight - kABI workaround (Jerome Marchand) [1273339 1306879]
  - [block] add internal hd part table references (Jerome Marchand) [1273339 1306879]
  - [block] fix accounting bug on cross partition merges (Jerome Marchand) [1273339 1306879]
  - [block] kref: add kref_test_and_get (Jerome Marchand) [1273339 1306879]
  - [block] Revert "block: fix accounting bug on cross partition merges" (Jerome Marchand) [1273339 1306879]
  - [perf] thread: Fix reference count initial state (Jiri Olsa) [1359100]
  - [perf] tools: Reference count struct map (Jiri Olsa) [1359100]
  - [perf] tools: Check if a map is still in use when deleting it (Jiri Olsa) [1359100]
  - [perf] tools: Protect accesses the map rbtrees with a rw lock (Jiri Olsa) [1359100]
  - [perf] tools: Introduce struct maps (Jiri Olsa) [1359100]
  - [perf] tools: Assign default value for some pointers (Jiri Olsa) [1359100]
  - [perf] tools: Use maps__first()/map__next() (Jiri Olsa) [1359100]
  - [perf] tools: Leave DSO destruction to the map destruction (Jiri Olsa) [1359100]
  - [perf] machine: Mark removed threads as such (Jiri Olsa) [1359100]
  - [perf] tools: Import rb_erase_init from block/ in the kernel sources (Jiri Olsa) [1359100]
  - [perf] tools: Nuke unused map_groups__flush() (Jiri Olsa) [1359100]
  - [perf] tools: Remove redundant initialization of thread linkage members (Jiri Olsa) [1359100]
  - [perf] tools: Rename maps__next (Jiri Olsa) [1359100]
  - [perf] machine: Do not call map_groups__delete(), drop refcnt instead (Jiri Olsa) [1359100]
  - [perf] hists: Rename add_hist_entry to hists__findnew_entry (Jiri Olsa) [1359100]
  - [perf] tools: Use atomic.h for the map_groups refcount (Jiri Olsa) [1359100]
  - [perf] tests: Fix map_groups refcount test (Jiri Olsa) [1359100]
  - [perf] machine: No need to keep a refcnt for last_match (Jiri Olsa) [1359100]
  - [perf] tests: Show refcounting broken expectations in thread-mg-share test (Jiri Olsa) [1359100]
  - [perf] machine: Protect the machine->threads with a rwlock (Jiri Olsa) [1359100]
  - [video] efifb: prevent null-deref when iterating dmi_list (Rob Clark) [1360982]
  - [video] configs: updates for fb backport (Rob Clark) [1360982]
  - [video] fbdev: efifb: bind to efi-framebuffer (Rob Clark) [1360982]
  - [video] fbdev: vesafb: bind to platform-framebuffer device (Rob Clark) [1360982]
  - [video] fbdev: simplefb: add common x86 RGB formats (Rob Clark) [1360982]
  - [video] x86: sysfb: move EFI quirks from efifb to sysfb (Rob Clark) [1360982]
  - [video] x86: provide platform-devices for boot-framebuffers (Rob Clark) [1360982]
  - [video] fbdev: simplefb: mark as fw and allocate apertures (Rob Clark) [1360982]
  - [video] fbdev: simplefb: add init through platform_data (Rob Clark) [1360982]
  - [video] drivers/video: implement a simple framebuffer driver (Rob Clark) [1360982]
  - [video] vesafb: fix memory leak (Rob Clark) [1360982]
  - [video] uvesafb,vesafb: create WC or WB PAT-entries (Rob Clark) [1360982]
  - [video] vesafb: fix comment a typo (Rob Clark) [1360982]
  - [video] vesafb: use platform_driver_probe() instead of platform_driver_register() (Rob Clark) [1360982]
  - [video] efifb: Fix call to wrong unregister function (Rob Clark) [1360982]
  - [video] efifb: Disallow manual bind and unbind (Rob Clark) [1360982]
  - [video] efifb: Fix mismatched request/release_mem_region (Rob Clark) [1360982]
  - [video] efifb: fix int to pointer cast warning (Rob Clark) [1360982]
  - [video] efifb: Add override for 11" Macbook Air 3,1 (Rob Clark) [1360982]
  - [video] efifb: Support overriding fields FW tells us with the DMI data (Rob Clark) [1360982]
  - [video] efifb: support AMD Radeon HD 6490 (Rob Clark) [1360982]
  - [video] efifb: support the EFI framebuffer on more Apple hardware (Rob Clark) [1360982]
  - [video] efifb: check that the base address is plausible on pci systems (Rob Clark) [1360982]
  - [video] drivers/video/efifb.c: support framebuffer for NVIDIA 9400M in MacBook Pro 5, 1 (Rob Clark) [1360982]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-671.el6]
changelog:
  - [perf] list: Fix rNNNN list output to appear only once (Jiri Olsa) [1291256 1374411]
  - [perf] symbols: Check kptr_restrict for root (Jiri Olsa) [1291256 1374411]
  - [fs] SUNRPC: Fix a regression when reconnecting (Benjamin Coddington) [1323801]
  - [fs] SUNRPC: Clear the request rq_bytes_sent field in xprt_release_write (Benjamin Coddington) [1323801]
  - [fs] SUNRPC: Lock the transport layer on shutdown (Benjamin Coddington) [1323801]
  - [virt] kvm: x86 emulator: implement IMUL REG, R/M (opcode 0F AF) (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: implement IMUL REG, R/M, IMM (opcode 69) (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: implement IMUL REG, R/M, imm8 (opcode 6B) (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: Use a register for ____emulate_2op() destination (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: pass destination type to ____emulate_2op() (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: add Src2Imm decoding (Radim Krcmar) [1313468]
  - [virt] kvm: x86 emulator: consolidate immediate decode into a function (Radim Krcmar) [1313468]
  - [hv] netvsc: fix incorrect receive checksum offloading (Vitaly Kuznetsov) [1388701]
  - [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1378614]
  - [hv] vmbus: Fix signaling logic in hv_need_to_signal_on_read() (Vitaly Kuznetsov) [1319054]
  - [hv] vmbus: Eliminate the spin lock on the read path (Vitaly Kuznetsov) [1319054]
  - [hv] ring_buffer: eliminate hv_ringbuffer_peek() (Vitaly Kuznetsov) [1319054]
  - [hv] remove code duplication between vmbus_recvpacket()/vmbus_recvpacket_raw() (Vitaly Kuznetsov) [1319054]
  - [hv] ring_buffer: remove code duplication from hv_ringbuffer_peek/read() (Vitaly Kuznetsov) [1319054]
  - [hv] ring_buffer.c: fix comment style (Vitaly Kuznetsov) [1319054]
  - [hv] netvsc: set nvdev link after populating chn_table (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: synchronize netvsc_change_mtu()/netvsc_set_channels() with netvsc_remove() (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: get rid of struct net_device pointer in struct netvsc_device (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: untangle the pointer mess (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: use start_remove flag to protect netvsc_link_change() (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: move start_remove flag to net_device_context (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: Move subchannel waiting to rndis_filter_device_remove() (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: Wait for sub-channels to be processed during probe (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: Properly size the vrss queues (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] netvsc: Add close of RNDIS filter into change mtu call (Vitaly Kuznetsov) [1320094 1335926]
  - [hv] hv_netvsc: Add support to set MTU reservation from guest side (Vitaly Kuznetsov) [1352105]
  - [perf] probe: Clear probe_trace_event when add_probe_trace_event() fails (Jiri Olsa) [1291510]
  - [perf] probe: Move ftrace probe-event operations to probe-file.c (Jiri Olsa) [1291510]
  - [block] loop: fix comment typo in loop_config_discard (Lukas Czerner) [818597]
  - [block] loop: Limit the number of requests in the bio list (Lukas Czerner) [818597]
  - [fs] ext4: optimize test_root() (Lukas Czerner) [1236047]
  - [fs] ext4: verify group number in verify_group_input() before using it (Lukas Czerner) [1236047]
  - [fs] nfsd: use short read as well as i_size to set eof (Benjamin Coddington) [1302415]
  - [fs] xfs: xfs_alloc_fix_minleft can underflow near ENOSPC (Carlos Maiolino) [1259493]
  - [fs] xfs: Fix rounding in xfs_alloc_fix_len() (Carlos Maiolino) [1259493]
  - [fs] jbd: don't BUG but return ENOSPC if a handle runs out of space (Lukas Czerner) [1291015]
  - [fs] jbd2: don't BUG but return ENOSPC if a handle runs out of space (Lukas Czerner) [1291015]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-672.el6]
changelog:
  - [sched] Fix rq->nr_uninterruptible update race (Aaron Tomlin) [1377292]
  - [security] keys: Fix short sprintf buffer in /proc/keys show function (Frantisek Hrbata) [1375208] {CVE-2016-7042}
  - [net] bridge: fix switched interval for MLD Query types (Hangbin Liu) [1392327]
  - [net] netfilter: ipv6: move POSTROUTING invocation before fragmentation (Eric Garver) [1391240]
  - [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390046] {CVE-2016-7117}
  - [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1381585]
  - [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379529] {CVE-2016-6828}
  - [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351422] {CVE-2016-4998}
  - [net] netfilter: x_tables: validate e->target_offset early (Mateusz Guzik) [1351422] {CVE-2016-4998}
  - [net] netfilter: x_tables: make sure e->next_offset covers remaining blob size (Mateusz Guzik) [1351422] {CVE-2016-4998}
  - [net] tcp: enable per-socket rate limiting of all 'challenge acks' (Florian Westphal) [1388287]
  - [net] tcp: uninline tcp_oow_rate_limited() (Florian Westphal) [1388287]
  - [net] tcp: mitigate ACK loops for connections as tcp_timewait_sock (Florian Westphal) [1388287]
  - [net] tcp: mitigate ACK loops for connections as tcp_sock (Florian Westphal) [1388287]
  - [net] tcp: mitigate ACK loops for connections as tcp_request_sock (Florian Westphal) [1388287]
  - [net] tcp: helpers to mitigate ACK loops by rate-limiting out-of-window dupacks (Florian Westphal) [1388287]
  - [net] ipv6: Don't change dst->flags using assignments (Marcelo Leitner) [1389478]
  - [scsi] megaraid-sas: request irqs later (Tomas Henzl) [1385088]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-673.el6]
changelog:
  - [netdrv] ehea: fix operation state report (Gustavo Duarte) [1089134]
  - [block] nvme: Always use MSI/MSI-x interrupts (David Milburn) [1372023]
  - [fs] aio: aio_nr decrements don't need to be delayed (Jiri Olsa) [1386216]
  - [fs] aio: don't bother with async freeing on failure in ioctx_alloc() (Jiri Olsa) [1386216]
  - [fs] epoll: ep_unregister_pollwait() can use the freed pwq->whead (Lauro Ramos Venancio) [1392372]
  - [fs] epoll: introduce POLLFREE to flush ->signalfd_wqh before kfree() (Lauro Ramos Venancio) [1392372]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-674.el6]
changelog:
  - [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1351798]
  - [x86] Mark Intel Purley supported (Steve Best) [1271866]
  - [pnp] Prevent attaching to ACPI IPMI device (Charles Rose) [857150]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-675.el6]
changelog:
  - [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359304] {CVE-2016-6136}
  - [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1353844]
  - [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1353844]
  - [fs] nfs: Don't pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1353844]
  - [fs] dlm: Don't save callbacks after accept (Robert S Peterson) [1264492]
  - [fs] dlm: Save and restore socket callbacks properly (Robert S Peterson) [1264492]
  - [fs] dlm: Replace nodeid_to_addr with kernel_getpeername (Robert S Peterson) [1264492]
  - [fs] dlm: print kernel message when we get an error from kernel_sendpage (Robert S Peterson) [1264492]
  - [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1397552]
  - [hv] storvsc: Payload buffer incorrectly sized for 32 bit kernels (Cathy Avery) [1394756]
  - [fs] xfs: fix unbalanced inode reclaim flush locking (Brian Foster) [1384564]
  - [scsi] hpsa: correct logical resets (Joseph Szczypek) [1083110]
  - [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1083110]
  - [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1083110]
  - [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1083110]
  - [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1083110]
  - [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1083110]
  - [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1083110]
  - [scsi] vmw_pvscsi: return SUCCESS for successful command aborts (Ewan Milne) [1372465]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-676.el6]
changelog:
  - [scsi] megaraid_sas: driver version upgrade (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: add in missing white spaces in error messages text (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Do not set MPI2_TYPE_CUDA for JBOD FP path for FW which does not support JBOD sequence map (Tomas Henzl) [1397873]
  - [scsi] megaraid_sas: Send SYNCHRONIZE_CACHE for VD to firmware (Tomas Henzl) [1392499]
  - [scsi] megaraid_sas: Do not fire DCMDs during PCI shutdown/detach (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Send correct PhysArm to FW for R1 VD downgrade (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: For SRIOV enabled firmware, ensure VF driver waits for 30secs before reset (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Fix data integrity failure for JBOD (passthrough) devices (Tomas Henzl) [1392499]
  - [scsi] megaraid_sas: fix macro MEGASAS_IS_LOGICAL to avoid regression (Tomas Henzl) [1392499]
  - [scsi] megaraid_sas: clean function declarations in megaraid_sas_base.c up (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: add in missing white space in error message text (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Fix the search of first memory bar (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Use memdup_user() rather than duplicating its implementation (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Fix probing cards without io port (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: Downgrade two success messages to info (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: driver version upgrade (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: task management code optimizations (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: call ISR function to clean up pending replies in OCR path (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: reduce memory footprints in kdump mode (Tomas Henzl) [1396567]
  - [scsi] megaraid_sas: add missing curly braces in ioctl handler (Tomas Henzl) [1396567]
  - [scsi] mpt3sas: Bump driver version as "14.101.00.00" (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Fix for Endianness issue (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Use the new MPI 2.6 32-bit Atomic Request Descriptors for SAS35 devices (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: set EEDP-escape-flags for SAS35 devices (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Increased/Additional MSIX support for SAS35 devices (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Added Device ID's for SAS35 devices and updated MPI header (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Don't spam logs if logging level is 0 (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Fix warnings exposed by W=1 (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Eliminate dead sleep_flag code (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Eliminate conditional locking in mpt3sas_scsih_issue_tm() (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Ensure the connector_name string is NUL-terminated (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Bump driver version as "14.100.00.00" (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Remove unused macro "MPT_DEVICE_TLR_ON" (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Implement device_remove_in_progress check in IOCTL path (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Fix for incorrect numbers for MSIX vectors enabled when non RDPQ card is enumerated first (Tomas Henzl) [1306469]
  - [scsi] mpt3sas: Fix for improper info displayed in var log, while blocking or unblocking the device (Tomas Henzl) [1306469]
  - [net] increase xmit RECURSION_LIMIT to 10 (Sabrina Dubroca) [1392660]
  - [net] add a recursion limit in xmit path (Sabrina Dubroca) [1392660]
  - [net] netfilter: ebtables: put module reference when an incorrect extension is found (Sabrina Dubroca) [1390061]
  - [net] netfilter: ebtables: Fix extension lookup with identical name (Sabrina Dubroca) [1390061]
  - [net] ipv6: ipv6_find_hdr restore prev functionality (Paolo Abeni) [1392975]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-677.el6]
changelog:
  - [netdrv] cxgb4 : Add cxgb4 T4/T5 firmware version 1.15.37.0 (Sai Vemuri) [1349112]
  - [netdrv] be2net: fix locking (Ivan Vecera) [1397915]
  - [perf] tools: Initialize reference counts in map__clone() (Jiri Olsa) [1359100]
  - [perf] tools: Replace map->referenced & maps->removed_maps with map->refcnt (Jiri Olsa) [1359100]
  - [md] raid10: add rcu protection to rdev access in raid10_sync_request (Xiao Ni) [1395048]
  - [md] raid10: add rcu protection in raid10_status (Xiao Ni) [1395048]
  - [md] raid10: fix refounct imbalance when resyncing an array with a replacement device (Xiao Ni) [1395048]
  - [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1342659]
  - [x86] ACPI: add dynamic_debug support (Prarit Bhargava) [1252674]
  - [mm] hugetlb: fix huge_pte_alloc BUG_ON (Dave Anderson) [1397250]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-678.el6]
changelog:
  - [netdrv] RDMA/iw_cxgb4: Fix bar2 virt addr calculation for T4 chips (Sai Vemuri) [1381382]
  - [netdrv] cxgb4: Stop Rx Queues before freeing it up (Sai Vemuri) [1381382]
  - [netdrv] iw_cxgb4 : Added "Fail" column in debug iw_cxgb4 stats (Sai Vemuri) [1381382]
  - [netdrv] cxgb4: Add info print to display number of MSI-X vectors allocated (Sai Vemuri) [1381382]
  - [netdrv] iwpm: crash fix for large connections test (Sai Vemuri) [1381382]
  - [netdrv] cxgb4/cxgb4vf : Use vlan_gro_frags_gr() for VLANs (Sai Vemuri) [1381382]
  - [netdrv] cxgb4vf : Using RHEL6 provided napi_gro_frags_gr() API which returns (enum gro_result) values (Sai Vemuri) [1381382]
  - [serial] 8250_pci: Detach low-level driver during PCI error recovery (Gustavo Duarte) [1400508]
  - [drm] reservation: Remove shadowing local variable 'ret' (Rob Clark) [1398084]
  - [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399457] {CVE-2016-9555}
  - [net] ipv6: add mtu lock check in __ip6_rt_update_pmtu (Xin Long) [1397295]
  - [net] Reduce queue allocation to one in kdump kernel (Sai Vemuri) [1321315]
  - [netdrv] cxgb4: Force cxgb4 driver as MASTER in kdump kernel (Sai Vemuri) [1321315]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-679.el6]
changelog:
  - [mm] Revert "mm: Fix slab growing out of bound within a cpuset" (Larry Woodman) [1402713]
  - [netdrv] cxgb4: update latest firmware version supported (Sai Vemuri) [1381382]
  - [kernel] audit: correctly record file names with different path name types (Paul Moore) [1305103]
  - [scsi] megaraid_sas: driver version upgrade (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: Implement the PD Map support for SAS3.5 Generic Megaraid Controllers (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: ldio_outstanding variable is not decremented in completion path (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: Enable or Disable Fast path based on the PCI Threshold Bandwidth (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: Add the Support for SAS3.5 Generic Megaraid Controllers Capabilities (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: Dynamic Raid Map Changes for SAS3.5 Generic Megaraid Controllers (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: SAS3.5 Generic Megaraid Controllers Fast Path for RAID 1/10 Writes (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: SAS3.5 Generic Megaraid Controllers Stream Detection and IO Coalescing (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: EEDP Escape Mode Support for SAS3.5 Generic Megaraid Controllers (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: 128 MSIX Support (Tomas Henzl) [1306457]
  - [scsi] megaraid_sas: Add new pci device Ids for SAS3.5 Generic Megaraid Controllers (Tomas Henzl) [1306457]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-681.el6]
changelog:
  - [net] udplite: fast-path computation of checksum coverage (Hangbin Liu) [1404127]
  - [ata] libata: fix sff host state machine locking while polling (Cathy Avery) [1390972]
  - [ata] libata-sff: use WARN instead of BUG on illegal host state machine state (Cathy Avery) [1390972]
  - [x86] hyperv: Handle unknown NMIs on one CPU when unknown_nmi_panic (Vitaly Kuznetsov) [1400428]
  - [fs] nfsd4: zero op arguments beyond the 8th compound op (J. Bruce Fields) [1409002]
  - [fs] nfsd: fix deadlock secinfo+readdir compound (J. Bruce Fields) [1314505]
  - [fs] nfsd4: fix recovery-dir leak on nfsd startup failure (J. Bruce Fields) [1266405]
  - [x86] Mark Skylake processors with Kaby Lake PCH as unsupported (David Arcari) [1405459]
  - [infiniband] ipoib: Remove can't use GFP_NOIO warning (Slava Shwartsman) [1321529]
  - [netdrv] veth: allow changing the mac address while interface is up (David Arcari) [1402696]
  - [kernel] tracing: Protect tracer flags with trace_types_lock (Steven Rostedt) [1397661]
  - [acpi] acpica: Prevent circular object list in acpi_ns_exec_module_code (Lenny Szubowicz) [1401776]
  - [acpi] acpica: Fix possible memory leak for module-level code execution (Lenny Szubowicz) [1401776]
  - [acpi] acpica: Add additional module-level code support (Lenny Szubowicz) [1401776]
  - [fs] xfs: growfs: use uncached buffers for new headers (Bill O'Donnell) [1134314]
  - [fs] xfs: catch invalid negative blknos in _xfs_buf_find() (Bill O'Donnell) [1134314]
  - [fs] xfs: fix _xfs_buf_find oops on blocks beyond the filesystem end (Bill O'Donnell) [1134314]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-682.el6]
changelog:
  - [x86] kdump: Fix several bound checking error of crashkernel reserving (Baoquan He) [1349069]
  - [x86] kdump: Crashkernel auto reservation failed on large system (Baoquan He) [1349069]
  - [kdump] Fix wrong dmi_present argument in case efi_smbios_addr being used (Dave Young) [1404984]
  - [kdump] Add error check in case dmi_get_system_info return null (Dave Young) [1404984]
  - [netdrv] bnxt_en: Improve the delay logic for firmware response (John Linville) [1406129]
  - [netdrv] bnxt_en: Implement proper firmware message padding (John Linville) [1406129]
  - [netdrv] bnxt_en: Refactor _hwrm_send_message() (John Linville) [1406129]
  - [netdrv] bnxt_en: Fix dmesg log firmware error messages (John Linville) [1406129]
  - [netdrv] bnxt_en: Use firmware provided message timeout value (John Linville) [1406129]
  - [fs] nfs: Allow getattr to also report readdirplus cache hits (Scott Mayhew) [1325766]
  - [fs] nfs: Be more targeted about readdirplus use when doing lookup/revalidation (Scott Mayhew) [1325766]
  - [fs] nfs: Fix a performance regression in readdir (Scott Mayhew) [1325766]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-683.el6]
changelog:
  - [netdrv] sfc: include size-binned TX stats on sfn8542q (Jarod Wilson) [1411279]
  - [netdrv] sfc: retrieve second word of datapath capabilities (Jarod Wilson) [1411279]
  - [netdrv] sfc: update MCDI protocol headers (Jarod Wilson) [1411279]
  - [netdrv] sfc: Update MCDI protocol definitions (Jarod Wilson) [1411279]
  - [net] mlx4_en: Fix type mismatch for 32-bit systems (Slava Shwartsman) [1399239]
  - [net] mlx4_en: Resolve dividing by zero in 32-bit system (Slava Shwartsman) [1399239]
  - [netdrv] e1000e: Initial support for KabeLake (Jarod Wilson) [1406917]
  - [netdrv] e1000e: Clear ULP configuration register on ULP exit (Jarod Wilson) [1406917]
  - [netdrv] e1000e: Set HW FIFO minimum pointer gap for non-gig speeds (Jarod Wilson) [1406917]
  - [netdrv] e1000e: Increase PHY PLL clock gate timing (Jarod Wilson) [1406917]
  - [netdrv] e1000e: Increase ULP timer (Jarod Wilson) [1406917]
  - [netdrv] e1000e: initial support for i219-LM (3) (Jarod Wilson) [1406917]
  - [netdrv] be2net: fix unicast list filling (Ivan Vecera) [1408247]
  - [netdrv] be2net: fix accesses to unicast list (Ivan Vecera) [1408247]
  - [netdrv] sfc: Downgrade or remove some error messages (Jarod Wilson) [1410750]
  - [netdrv] be2net: call be_set_uc_list() unconditionally (Ivan Vecera) [1402679]
  - [netdrv] mlx5e: Use hw_features through netdev_extended macro (Kamal Heib) [1385318]
  - [block] nvme: Don't stop kthread while clearing queues (David Milburn) [1399431]
  - [fs] dlm: Fix saving of NULL callbacks (Robert S Peterson) [1264492]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-684.el6]
changelog:
  - [s390] kernel/ap: Fix hang condition on crypto card config-off (Hendrik Brueckner) [1413552]
  - [s390] zcrypt: Improved invalid domain response handling (Hendrik Brueckner) [1406389]
  - [infiniband] ucm: Fix bitmap wrap when devnum > IB_UCM_MAX_DEVICES (Slava Shwartsman) [1413476]
  - [netdrv] mlx5e: Copy all L2 headers into inline segment (Kamal Heib) [1408937]
  - [netdrv] be2net: fix MAC addr setting on privileged BE3 VFs (Ivan Vecera) [1406659]
  - [netdrv] be2net: don't delete MAC on close on unprivileged BE3 VFs (Ivan Vecera) [1406659]
  - [netdrv] be2net: fix status check in be_cmd_pmac_add() (Ivan Vecera) [1406659]
  - [acpi] acpica: Tables: Update FADT handling (Lenny Szubowicz) [1408401]
  - [acpi] acpica: ACPI 6.0: Add changes for FADT table (Lenny Szubowicz) [1408401]
  - [acpi] acpica: Basic support for FADT version 5 (Lenny Szubowicz) [1408401]
  - [acpi] acpica: Remove use of unreliable FADT revision field (Lenny Szubowicz) [1408401]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-685.el6]
changelog:
  - [kernel] ftrace: Do not function trace inlined functions (Pratyush Anand) [1413456]
  - [x86] paravirt: Do not trace _paravirt_ident_*() functions (Pratyush Anand) [1413456]
  - [netdrv] i40e: Fix for long link down notification time (Stefan Assmann) [1414274]
  - [scsi] megaraid_sas: fix done in queue_command (Tomas Henzl) [1415192]
  - [scsi] megaraid: fixes (Tomas Henzl) [1415192]
  - [netdrv] ixgbe: Add support for new X557 device (Ken Cox) [1408509]
  - [netdrv] ixgbe: Add KR backplane support for x550em_a (Ken Cox) [1408509]
  - [netdrv] ixgbe: Add support for SGMII backplane interface (Ken Cox) [1408509]
  - [netdrv] ixgbe: Add support for SFPs with retimer (Ken Cox) [1408509]
  - [netdrv] ixgbe: Introduce function to control MDIO speed (Ken Cox) [1408509]
  - [netdrv] ixgbe: Read and set instance id (Ken Cox) [1408509]
  - [netdrv] ixgbe: Add support for x550em_a 10G MAC type (Ken Cox) [1408509]
  - [netdrv] ixgbe: Use method pointer to access IOSF devices (Ken Cox) [1408509]
  - [netdrv] ixgbe: Add support for single-port X550 device (Ken Cox) [1408509]
  - [netdrv] ixgbe: Clean up interface for firmware commands (Ken Cox) [1408509]
  - [netdrv] ixgbe: Change the lan_id and func fields to a u8 to avoid casts (Ken Cox) [1408509]
  - [netdrv] ixgbe: Fix flow control for Xeon D KR backplane (Ken Cox) [1408509]
  - [netdrv] ixgbe: Make all unchanging ops structures const (Ken Cox) [1408509]
  - [netdrv] ixgbe: Update PTP to support X550EM_x devices (Ken Cox) [1408509]
  - [netdrv] ixgbe: convert to CYCLECOUNTER_MASK macro (Ken Cox) [1408509]
  - [netdrv] ixgbevf: add VF support for new hardware (Ken Cox) [1408507]
  - [netdrv] ixgbevf: Support Windows hosts (Hyper-V) (Ken Cox) [1408507]
  - [netdrv] ixgbevf: Add the device ID's presented while running on Hyper-V (Ken Cox) [1408507]
  - [netdrv] ixgbevf: Move API negotiation function into mac_ops (Ken Cox) [1408507]
  - [x86] tsc: Reset cycle_last after resume from S3/S4 (Lenny Szubowicz) [1406468]
  - [kernel] hung_task: allow hung_task_panic when hung_task_warnings is 0 (Waiman Long) [1410297]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-686.el6]
changelog:
  - [scsi] Add intermediate STARGET_REMOVE state to scsi_target_state (Ewan Milne) [1349623]
  - [scsi] restart list search after unlock in scsi_remove_target (Ewan Milne) [1349623]
  - [powerpc] pci: Support per-aperture memory offset (Laurent Vivier) [1413448]
  - [powerpc] pci: Don't add bogus empty resources to PHBs (Laurent Vivier) [1413448]
  - [mm] mmap.c: fix arithmetic overflow in __vm_enough_memory() (Jerome Marchand) [1413500]
  - [net] ping: check minimum size on ICMP header length (Mateusz Guzik) [1414202] {CVE-2016-8399}
  - [scsi] sg_write()/bsg_write() is not fit to be called under KERNEL_DS (Ewan Milne) [1414823] {CVE-2016-10088 CVE-2016-9576}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-687.el6]
changelog:
  - [netdrv] sfc: reduce severity of PIO buffer alloc failures (Jarod Wilson) [1410750]
  - [netdrv] sfc: avoid division by zero (Jarod Wilson) [1410750]
  - [netdrv] sfc: Insert multicast filters as well as mismatch filters in promiscuous mode (Jarod Wilson) [1410750]
  - [netdrv] sfc: get timer configuration from adapter (Jarod Wilson) [1410750]
  - [netdrv] sfc: warn if other functions have been reset by MCFW (Jarod Wilson) [1410750]
  - [netdrv] sfc: add output flag decoding to efx_mcdi_set_workaround (Jarod Wilson) [1410750]
  - [netdrv] sfc: get PIO buffer size from the NIC (Jarod Wilson) [1410750]
  - [netdrv] sfc: set interrupt moderation via MCDI (Jarod Wilson) [1410750]
  - [netdrv] sfc: allow asynchronous MCDI without completion function (Jarod Wilson) [1410750]
  - [netdrv] sfc: on MC reset, clear PIO buffer linkage in TXQs (Jarod Wilson) [1410750]
  - [netdrv] sfc: Downgrade EPERM messages from MCDI to debug (Jarod Wilson) [1410750]
  - [netdrv] sfc: cope with ENOSYS from efx_mcdi_get_workarounds() (Jarod Wilson) [1410750]
  - [netdrv] sfc: enable cascaded multicast filters in MCFW (Jarod Wilson) [1410750]
  - [netdrv] sfc: work around TRIGGER_INTERRUPT command not working on SFC9140 (Jarod Wilson) [1410750]
  - [dm] raid: fix transient device failure processing (Mike Snitzer) [1404425]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-690.el6]
changelog:
  - [drm] core: Do not preserve framebuffer on rmfb, v4 (Rob Clark) [1405267]
  - [scsi] mpt3sas: Fix for block device of raid exists even after deleting raid disk (Tomas Henzl) [1416552]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-691.el6]
changelog:
  - [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
  - [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
  - [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
  - [net] ipv6: stop sending PTB packets for MTU < 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
  - [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-692.el6]
changelog:
  - [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
  - [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-693.el6]
changelog:
  - [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
  - [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
  - [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
  - [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
  - [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
  - [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
  - [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
  - [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
  - [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-694.el6]
changelog:
  - [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
  - [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
  - [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
  - [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
  - [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
  - [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
  - [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
  - [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
  - [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
  - [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
  - [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
  - [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
  - [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
  - [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
  - [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
  - [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
  - [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
  - [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
  - [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
  - [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
  - [block] ensure request->part is valid (Jeff Moyer) [1416341]
  - [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-696.el6]
changelog:
  - [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-697.el6]
changelog:
  - [block] fix use-after-free in seq file (Denys Vlasenko) [1418549] {CVE-2016-7910}
  - [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1425749]
  - [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1360930]
  - [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429918] {CVE-2017-2636}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-698.el6]
changelog:
  - [sched] fair: Rework throttle_count sync (Jiri Olsa) [1250762]
  - [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1250762]
  - [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1250762]
  - [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1250762]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-699.el6]
changelog:
  - [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1429881]
  - [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1429881]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-700.el6]
changelog:
  - [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1431508]
  - [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1436527]
  - [crypto] mpi: Fix NULL ptr dereference in mpi_powm() (Mateusz Guzik) [1398456] {CVE-2016-8650}
  - [fs] aio: properly check iovec sizes (Mateusz Guzik) [1337517] {CVE-2015-8830}
  - [fs] vfs: make AIO use the proper rw_verify_area() area helpers (Mateusz Guzik) [1337535] {CVE-2012-6701}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-701.el6]
changelog:
  - [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1146727]
  - [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1434560]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-702.el6]
changelog:
  - [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1440361]
  - [net] ping: implement proper locking (Jakub Sitnicki) [1438999] {CVE-2017-2671}
  - [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430578] {CVE-2017-6214}
  - [net] ipv6: ip6_fragment: fix headroom tests and skb leak (Hannes Frederic Sowa) [1412331]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-703.el6]
changelog:
  - [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [869942]
  - [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [869942]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-704.el6]
changelog:
  - [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1448170]
  - [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1441909]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-705.el6]
changelog:
  - [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1446755] {CVE-2017-7895}
  - [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1446755] {CVE-2017-7895}
  - [perf] fix concurrent sys_perf_event_open() vs move_group race (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [perf] remove confusing comment and move put_ctx() (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [perf] restructure perf syscall point of no return (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [perf] fix move_group() order (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [perf] generalize event->group_flags (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [scsi] libfc: quarantine timed out xids (Chris Leech) [1431440]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-706.el6]
changelog:
  - [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1442030]
  - [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1393672]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-707.el6]
changelog:
  - [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1454847]
  - [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1445326]
  - [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1421760]
  - [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1421761]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-708.el6]
changelog:
  - [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1458421]
  - [mm] mempolicy.c: fix error handling in set_mempolicy and mbind (Bruno E. O. Meneguele) [1443539] {CVE-2017-7616}
  - [s390] zfcp: fix use-after-"free" in FC ingress path after TMF (Hendrik Brueckner) [1421762]
  - [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1417305]
  - [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1417305]
  - [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1417305]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-709.el6]
changelog:
  - [netdrv] bnxt_en: Update to firmware interface spec 1.5.1 (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Added support for Secure Firmware Update (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add support for firmware updates for additional processors (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Update firmware spec. to 1.3.0 (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add support for updating flash more securely (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Request firmware reset after successful firwmare update (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add hwrm_send_message_silent() (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add installed-package firmware version reporting via Ethtool GDRVINFO (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Reset embedded processor after applying firmware upgrade (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add support for upgrading APE/NC-SI firmware via Ethtool FLASHDEV (Jonathan Toppins) [1439450]
  - [net] sctp: do not inherit ipv6_(mc|ac|fl)_list from parent (Florian Westphal) [1455612] {CVE-2017-9075}
  - [net] ipv6/dccp: do not inherit ipv6_mc_list from parent (Florian Westphal) [1455612] {CVE-2017-9076 CVE-2017-9077}
  - [net] dccp/tcp: do not inherit mc_list from parent (Florian Westphal) [1455612] {CVE-2017-8890}
  - [net] ipv6: nullify ipv6_ac_list and ipv6_fl_list when creating new socket (Florian Westphal) [1455612]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-710.el6]
changelog:
  - [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1464237]
  - [mm] enlarge stack guard gap (Larry Woodman) [1452730] {CVE-2017-1000364}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-711.el6]
changelog:
  - [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1459978]
  - [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1452358]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-712.el6]
changelog:
  - [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1464237 1452730] {CVE-2017-1000364}
  - [mm] revert "enlarge stack guard gap" (Larry Woodman) [1452730] {CVE-2017-1000364}
  - [mm] revert "allow JVM to implement its own stack guard pages" (Larry Woodman) [1464237]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-713.el6]
changelog:
  - [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1459951] {CVE-2017-9074}
  - [net] gre: fix a possible skb leak (Sabrina Dubroca) [1459951] {CVE-2017-9074}
  - [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1459951] {CVE-2017-9074}
  - [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1459951] {CVE-2017-9074}
  - [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1459951] {CVE-2017-9074}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-714.el6]
changelog:
  - [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1464541]
  - [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1464541]
  - [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1464541]
  - [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1464541]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-716.el6]
changelog:
  - [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1441773]
  - [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474782] {CVE-2017-7541}
  - [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1441169]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-718.el6]
changelog:
  - [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1477288]
  - [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1477288]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-719.el6]
changelog:
  - [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1459636]
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490062] {CVE-2017-1000251}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-720.el6]
changelog:
  - [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488340] {CVE-2017-14106}
  - [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488340] {CVE-2017-14106}
  - [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477006] {CVE-2017-7542}
  - [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477006] {CVE-2017-7542}
  - [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481529] {CVE-2017-1000112}
  - [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481529] {CVE-2017-1000112}
  - [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481529] {CVE-2017-1000112}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-721.el6]
changelog:
  - [char] ipmi: use rcu lock around call to intf->handlers->sender() (Tony Camuso) [1466034]
  - [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481943] {CVE-2017-1000111}
  - [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1484946] {CVE-2017-7308}
  - [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1484946] {CVE-2017-7308}
  - [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr  Matousek) [1492961] {CVE-2017-1000253}
  - [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr  Matousek) [1492961] {CVE-2017-1000253}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-722.el6]
changelog:
  - [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1497152]
  - [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476124] {CVE-2017-11176}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-723.el6]
changelog:
  - [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1491846]
  - [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1491846]
  - [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1491846]
  - [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1491846]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-724.el6]
changelog:
  - [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1435787]
  - [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1435787]
  - [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1435787]
  - [fs] nfsd: remove the cache_hash list (Thiago Becker) [1435787]
  - [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1435787]
  - [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1435787]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-725.el6]
changelog:
  - [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1497000]
  - [ipmi] create hardware-independent softdep for ipmi_devintf (Tony Camuso) [1457915]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-727.el6]
changelog:
  - [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1492220]
  - [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1492220]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-728.el6]
changelog:
  - [mm] introduce dedicated WQ_MEM_RECLAIM workqueue to do lru_add_drain_all (Waiman Long) [1463754]
  - [netdrv] cxgb4: Clear On FLASH config file after a FW upgrade (Arjun Vynipadath) [1446952]
  - [netdrv] chelsio : Fixes the issue seen on initiator while stopping the target (Sai Vemuri) [1442097]
  - [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1437991]
  - [netdrv] cxgb4vf: don't offload Rx checksums for IPv6 fragments (Davide Caratti) [1427036]
  - [scsi] qla2xxx: Get mutex lock before checking optrom_state (Himanshu Madhani) [1408549]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-729.el6]
changelog:
  - [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1504260]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-730.el6]
changelog:
  - [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1513455]
  - [fs] bio: more bio_map_user_iov() leak fixes (Ming Lei) [1503590] {CVE-2017-12190}
  - [fs] bio: fix unbalanced page refcounting in bio_map_user_iov (Ming Lei) [1503590] {CVE-2017-12190}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-731.el6]
changelog:
  - [kernel] fix __wait_on_atomic_t() to call the action func if the counter != 0 (David Howells) [1418631]
  - [fs] fscache: fix dead object requeue (David Howells) [1333592 1418631]
  - [fs] fscache: clear outstanding writes when disabling a cookie (David Howells) [1418631]
  - [fs] fscache: initialise stores_lock in netfs cookie (David Howells) [1418631]
  - [fs] cachefiles: fix attempt to read i_blocks after deleting file (David Howells) [1418631]
  - [fs] cachefiles: fix race between inactivating and culling a cache object (David Howells) [1418631]
  - [fs] fscache: make check_consistency callback return int (David Howells) [1418631]
  - [fs] fscache: wake write waiter after invalidating writes (David Howells) [1418631]
  - [fs] cachefiles: provide read-and-reset release counters for cachefilesd (David Howells) [1418631]
  - [s390] disassembler: increase show_code buffer size (Hendrik Brueckner) [1516654]
  - [fs] sunrpc: remove BUG_ONs checking RPC_IS_QUEUED (Dave Wysochanski) [1424630]
  - [fs] nfsv4.1: nfs4_fl_prepare_ds must be careful about reporting success (Scott Mayhew) [1205448]
  - [fs] cifs: add ratelimit for the log entry that causes a lockup (Leif Sahlberg) [1494999]
  - [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447168]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-732.el6]
changelog:
  - [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [988988]
  - [mm] don't return 0 too early from find_get_pages() (Ian Kent) [988988]
  - [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1503322]
  - [s390] cpcmd,vmcp: avoid GFP_DMA allocations (Hendrik Brueckner) [1496105]
  - [fs] gfs2: Withdraw for IO errors writing to the journal or statfs (Robert S Peterson) [1505956]
  - [netdrv] ixgbe: Fix incorrect bitwise operations of PTP Rx timestamp flags (Ken Cox) [1523856]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-733.el6]
changelog:
  - [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1532786]
  - [net] dma: fix memory leak in dma_pin_iocvec_pages (Sabrina Dubroca) [1459263]
  - [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1520860]
  - [s390] fix transactional execution control register handling (Hendrik Brueckner) [1520862]
  - [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1408108]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-734.el6]
changelog:
  - [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1518669]
  - [hv] vss: Operation timeouts should match host expectation (Mohammed Gamal) [1511431]
  - [hv] utils: reduce HV_UTIL_NEGO_TIMEOUT timeout (Mohammed Gamal) [1511431]
  - [hv] utils: Check VSS daemon is listening before a hot backup (Mohammed Gamal) [1511431]
  - [hv] utils: Continue to poll VSS channel after handling requests (Mohammed Gamal) [1511431]
  - [md] dm: clear all discard attributes in queue_limits when discards are disabled (Mike Snitzer) [1433297]
  - [md] dm: discard support requires all targets in a table support discards (Mike Snitzer) [1433297]
  - [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520817] {CVE-2017-8824}
  - [net] tcp: fix tcp_trim_head() (Paolo Abeni) [1274139]
  - [net] sctp: fix src address selection if using secondary addresses for ipv6 (Xin Long) [1445919]
  - [net] sctp: deny peeloff operation on asocs with threads sleeping on it (Hangbin Liu) [1470559]
  - [net] sctp: avoid BUG_ON on sctp_wait_for_sndbuf (Hangbin Liu) [1470559]
  - [net] tcp: fix race during timewait sk creation (Florian Westphal) [1205025]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-735.el6]
changelog:
  - [x86] tighten /dev/mem with zeroing reads (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [char] /dev/mem: make size_inside_page() logic straight (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [char] /dev/mem: cleanup unxlate_dev_mem_ptr() calls (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [char] /dev/mem: introduce size_inside_page() (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [char] /dev/mem: remove redundant test on len (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1538340]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-736.el6]
changelog:
  - [drm] nouveau/disp/nv50-: execute supervisor on its own workqueue (Ben Skeggs) [1468825]
  - [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519626] {CVE-2017-1000410}
  - [scsi] storvsc: do not assume SG list is continuous when doing bounce buffers (for 4.1 and prior) (Cathy Avery) [1533175]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-737.el6]
changelog:
  - [hv] netvsc: get rid of completion timeouts (Vitaly Kuznetsov) [1538592]
  - [fs] gfs2: Special case the rindex in gfs2_write_alloc_required() (Andrew Price) [1384184]
  - [scsi] scsi_dh_alua: fix race condition that causes multipath to hang (Mike Snitzer) [1500192]
  - [virtio] virtio-pci: fix leaks of msix_affinity_masks (Jason Wang) [1281754]
  - [fs] sunrpc: avoid warning in gss_key_timeout (J. Bruce Fields) [1456594]
  - [fs] sunrpc: fix RCU handling of gc_ctx field (J. Bruce Fields) [1456594]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-738.el6]
changelog:
  - [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Fix XEN PV boot failure (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] Revert "entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel gs has been restored (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: ibrs_enabled() is expected to return > 1 (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] Revert "mm/kaiser: Disable global pages by default with KAISER" (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] Remove __cpuinitdata from some data & function (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm: Set IBPB upon context switch (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] x86: clear registers on VM exit (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] kvm: Pad RSB on VM transition (Waiman Long) [1519796] {CVE-2017-5715}
  - [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519802] {CVE-2017-5754}
  - [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519789] {CVE-2017-5753}
  - [fs] udf: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [fs] prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [netdrv] p54: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [media] uvcvideo: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519789] {CVE-2017-5753}
  - [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] Add another set of MSR accessor functions (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: enable kaiser in build (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add Kconfig (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stack trampoline (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] Separate out entry text section (Waiman Long) [1519802] {CVE-2017-5754}
  - [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519802] {CVE-2017-5754}
  - [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519802] {CVE-2017-5754}
  - [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519802] {CVE-2017-5754}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-739.el6]
changelog:
  - [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1538543]
  - [powerpc] prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1538543]
  - [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1538542]
  - [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1538542]
  - [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1538542]
  - [s390] add ppa to system call and program check path (Hendrik Brueckner) [1538542]
  - [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1538542]
  - [s390] introduce CPU alternatives (Hendrik Brueckner) [1538542]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-740.el6]
changelog:
  - [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1535645]
  - [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1535645]
  - [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1535645]
  - [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1535645]
  - [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1535645]
  - [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1535645]
  - [x86] retpoline/efi: Convert stub indirect calls & jumps (Waiman Long) [1535645]
  - [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1535645]
  - [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1535645]
  - [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1535645]
  - [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1535645]
  - [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1535645]
  - [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1535645]
  - [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1535645]
  - [x86] Use IBRS for firmware update path (Waiman Long) [1535645]
  - [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1535645]
  - [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1535645]
  - [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1535645]
  - [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1535645]
  - [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1535645]
  - [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1535645]
  - [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1535645]
  - [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1535645]
  - [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1535645]
  - [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1535645]
  - [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1535645]
  - [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1535645]
  - [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1535645]
  - [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1535645]
  - [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1535645]
  - [x86] mce: Make machine check speculation protected (Waiman Long) [1535645]
  - [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1535645]
  - [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1535645]
  - [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1535645]
  - [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1535645]
  - [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1535645]
  - [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1535645]
  - [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1535645]
  - [x86] retpoline: Add initial retpoline support (Waiman Long) [1535645]
  - [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1535645]
  - [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1535645]
  - [x86] cpufeatures: Add X86_BUG_SPECTRE_V(12) (Waiman Long) [1535645]
  - [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1535645]
  - [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1535645]
  - [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1535645]
  - [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1535645]
  - [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1535645]
  - [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1535645]
  - [x86] alternatives: Add missing 'n' at end of ALTERNATIVE inline asm (Waiman Long) [1535645]
  - [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1535645]
  - [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1535645]
  - [x86] alternatives: Document macros (Waiman Long) [1535645]
  - [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1535645]
  - [x86] alternatives: Add instruction padding (Waiman Long) [1535645]
  - [x86] alternative: Add header guards to asm/alternative-asm.h (Waiman Long) [1535645]
  - [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1535645]
  - [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1535645]
  - [x86] Make .altinstructions bit size neutral (Waiman Long) [1535645]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-741.el6]
changelog:
  - [net] netfilter: xt_TCPMSS: add more sanity tests on tcph->doff (Florian Westphal) [1543091] {CVE-2017-18017}
  - [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543091] {CVE-2017-18017}
  - [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543091] {CVE-2017-18017}
  - [net] sctp: return error if the asoc has been peeled off in sctp_wait_for_sndbuf (Hangbin Liu) [1470559]
  - [net] sctp: use the right sk after waking up from wait_buf sleep (Hangbin Liu) [1470559]
  - [net] sctp: do not free asoc when it is already dead in sctp_sendmsg (Hangbin Liu) [1470559]
  - [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1535024]
  - [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1535024]
  - [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1535024]
  - [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1535024]
  - [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1532167]
  - [net] revert "net: use lib/percpu_counter API for fragmentation mem accounting" (Jesper Brouer) [1508504]
  - [scsi] lpfc: fix pci hot plug crash in list_add call (Dick Kennedy) [1542773]
  - [scsi] hpsa: update driver version (Joseph Szczypek) [1541517]
  - [scsi] hpsa: correct resets on retried commands (Joseph Szczypek) [1541517]
  - [scsi] hpsa: rescan later if reset in progress (Joseph Szczypek) [1541517]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-742.el6]
changelog:
  - [mm] prevent /proc/sys/vm/percpu_pagelist_fraction divide-by-zero (Dave Anderson) [1405879]
  - [fs] proc: Resolve performance issues with multiple /proc/stat reads (Prarit Bhargava) [1544565]
  - [fs] nfs: fix pnfs direct write memory leak (Scott Mayhew) [1536900]
  - [fs] dcache: prevent multiple shrink_dcache_parent() on the same dentry (Miklos Szeredi) [1269288]
  - [fs] fifo: do not restart open() if it already found a partner (Miklos Szeredi) [1482983]
  - [audit] reinstate check for failed execve (Denys Vlasenko) [1488822]
  - [perf] x86/intel/uncore: Make PCI and MSR uncore independent (Jiri Olsa) [1427324]
  - [perf] fix perf_event_comm() vs. exec() assumption (Jiri Olsa) [1478980]
  - [lib] prevent BUG in kfree() due to memory exhaustion in __sg_alloc_table() (Larry Woodman) [1454453]
  - [kernel] sched/core: Rework rq->clock update skips (Lauro Ramos Venancio) [1212959]
  - [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1212959]
  - [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1212959]
  - [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1212959]
  - [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1212959]
  - [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1495167]
  - [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1495167]
  - [fs] gfs2: Defer deleting inodes under memory pressure (Andreas Grunbacher) [1255872]
  - [fs] gfs2: gfs2_clear_inode, gfs2_delete_inode: Put glocks asynchronously (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Get rid of gfs2_set_nlink (Andreas Grunbacher) [1255872]
  - [fs] add set_nlink() (Andreas Grunbacher) [1255872]
  - [fs] gfs2: gfs2_glock_get: Wait on freeing glocks (Andreas Grunbacher) [1255872]
  - [fs] gfs2: gfs2_create_inode: Keep glock across iput (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Clean up glock work enqueuing (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Protect gl->gl_object by spin lock (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Get rid of flush_delayed_work in gfs2_clear_inode (Andreas Grunbacher) [1255872]
  - [fs] revert "gfs2: Wait for iopen glock dequeues" (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Fixup to "Clear gl_object if gfs2_create_inode fails" (Andreas Grunbacher) [1506281]
  - [scsi] dual scan thread bug fix (Ewan Milne) [1508512]
  - [scsi] fix our current target reap infrastructure (Ewan Milne) [1508512]
  - [scsi] bnx2fc: Fix check in SCSI completion handler for timed out request (Chad Dupuis) [1538168]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-743.el6]
changelog:
  - [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548432] {CVE-2017-13166}
  - [kernel] cgroup: initialize xattr before calling d_instantiate() (Aristeu Rozanski) [1533523]
  - [fs] ext*: Don't clear SGID when inheriting ACLs (Andreas Grunbacher) [1473482]
  - [fs] gfs2: writeout truncated pages (Robert S Peterson) [1331076]
  - [fs] export __block_write_full_page (Robert S Peterson) [1331076]
  - [scsi] mark queue as PREEMPT_ONLY before setting quiesce (Ming Lei) [1462959]
  - [block] call blk_queue_enter() before allocating request (Ming Lei) [1462959]
  - [block] introduce blk_queue_enter() (Ming Lei) [1462959]
  - [mm] shmem: replace_page must flush_dcache and others (Waiman Long) [1412337]
  - [mm] shmem: replace page if mapping excludes its zone (Waiman Long) [1412337]
  - [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] spec_ctrl/32: Enable IBRS processing on kernel entries & exits (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Restore segments before int registers (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Unshare NMI return path (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1550599] {CVE-2017-5754}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-744.el6]
changelog:
  - [dm] io: fix duplicate bio completion due to missing ref count (Mikulas Patocka) [1334224]
  - [fs] gfs2: Reduce contention on gfs2_log_lock (Robert S Peterson) [1399822]
  - [fs] gfs2: Inline function meta_lo_add (Robert S Peterson) [1399822]
  - [fs] gfs2: Switch tr_touched to flag in transaction (Robert S Peterson) [1399822]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-745.el6]
changelog:
  - [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1550599] {CVE-2017-5754}
  - [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548432] {CVE-2017-13166}
  - [scsi] lpfc: Fix crash from memory alloc at interrupt level with GFP_KERNEL set (Dick Kennedy) [1540706]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-746.el6]
changelog:
  - [dm] fix race between dm_get_from_kobject() and __dm_destroy() (Mike Snitzer) [1551999] {CVE-2017-18203}
  - [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1557562]
  - [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1550599] {CVE-2017-5754}
  - [ipmi] pick up slave address from SMBIOS on an ACPI device (Tony Camuso) [1484525]
  - [ipmi] fix watchdog timeout set on reboot (Tony Camuso) [1484525]
  - [ipmi] fix watchdog hang on panic waiting for ipmi response (Tony Camuso) [1484525]
  - [ipmi] use smi_num for init_name (Tony Camuso) [1484525]
  - [ipmi] move platform device creation earlier in the initialization (Tony Camuso) [1484525]
  - [ipmi] clean up printks (Tony Camuso) [1484525]
  - [ipmi] cleanup error return (Tony Camuso) [1484525]
  - [md] raid0: apply base queue limits *before* disk_stack_limits (Xiao Ni) [1417294]
  - [md] raid0: update queue parameter in a safer location (Xiao Ni) [1417294]
  - [md] raid0: conditional mddev->queue access to suit dm-raid (Xiao Ni) [1417294]
  - [md] raid0: access mddev->queue (request queue member) conditionally because it is not set when accessed from dm-raid (Xiao Ni) [1417294]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-747.el6]
changelog:
  - [fs] gfs2: Check for the end of metadata in trunc_dealloc (Robert S Peterson) [1559928]
  - [fs] gfs2: clear journal live bit in gfs2_log_flush (Robert S Peterson) [1559928]
  - [netdrv] vmxnet3: fix tx data ring copy for variable size (Neil Horman) [1530378]
  - [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1559386]
  - [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1554631]
  - [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags & wrapper (Mauricio Oliveira) [1554631]
  - [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1554630]
  - [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1554630]
  - [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1554630]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-748.el6]
changelog:
  - [mm] fold arch_randomize_brk into ARCH_HAS_ELF_RANDOMIZE (Bhupesh Sharma) [1494380]
  - [mm] brk: fix min_brk lower bound computation for COMPAT_BRK (Bhupesh Sharma) [1494380]
  - [mm] split ET_DYN ASLR from mmap ASLR (Bhupesh Sharma) [1494380]
  - [s390] redefine randomize_et_dyn for ELF_ET_DYN_BASE (Bhupesh Sharma) [1494380]
  - [mm] expose arch_mmap_rnd when available (Bhupesh Sharma) [1494380]
  - [s390] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [s390] mmap: randomize mmap base for bottom up direction (Bhupesh Sharma) [1494380]
  - [powerpc] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [x86] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: create Kconfig variable for PIE randomization (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: PIE: make PF_RANDOMIZE check comment more accurate (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: fix PIE execution with randomization disabled (Bhupesh Sharma) [1494380]
  - [acpi] acpica: Support calling _REG methods within ACPI interpreter (Lenny Szubowicz) [1522849]
  - [acpi] acpica: Function to test if ACPI interpreter already entered (Lenny Szubowicz) [1522849]
  - [acpi] acpica: Function to test if ACPI mutex held by this thread (Lenny Szubowicz) [1522849]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-749.el6]
changelog:
  - [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1561788]
  - [powerpc] Move default security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1561788]
  - [lib] seq: Add seq_buf_printf() (Mauricio Oliveira) [1561788]
  - [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1561786]
  - [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1562725]
  - [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1562725]
  - [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1562725]
  - [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1562725]
  - [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1562725]
  - [x86] entry: Remove extra argument in call instruction (Waiman Long) [1562552]
  - [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1557562 1562552]
  - [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1558845]
  - [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1558845]
  - [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1558845]
  - [x86] mm: Dump both kernel & user page tables at fault (Waiman Long) [1558845]
  - [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1558845]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-750.el6]
changelog:
  - [fs] fuse: fix punching hole with unaligned end (Miklos Szeredi) [1387473] {CVE-2017-15121}
  - [documentation] kdump: fix documentation about panic_on_warn to match rhel6 (Pingfan Liu) [1555196]
  - [fs] Provide sane values for nlink (Leif Sahlberg) [1554342]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-751.el6]
changelog:
  - [md] dm thin: fix regression that caused discards to be disabled if passdown was (Mike Snitzer) [1569377]
  - [s390] configs: enable auto expoline support (Hendrik Brueckner) [1554959]
  - [s390] correct nospec auto detection init order (Hendrik Brueckner) [1554959]
  - [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1554959]
  - [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1554959]
  - [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1554959]
  - [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1554959]
  - [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1554959]
  - [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1554959]
  - [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1554959]
  - [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1554959]
  - [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1554959]
  - [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1554959]
  - [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1554959]
  - [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1568241]
  - [net] sctp: verify size of a new chunk in _sctp_make_chunk() (Stefano Brivio) [1551908] {CVE-2018-5803}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-752.el6]
changelog:
  - [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
  - [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
  - [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
  - [net] security: export security_sk_clone (Marcelo Leitner) [1571357]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-753.el6]
changelog:
  - [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
  - [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
  - [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.el6]
changelog:
  - [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
  - [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
  - [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Clean up entry code & remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
  - [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
  - [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
  - [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
  - [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
  - [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.1.1.el6]
changelog:
  - [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1574592]
  - [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1574592]
  - [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1574592]
  - [x86] microcode: Sanitize per-cpu microcode reloading interface (Prarit Bhargava) [1574592]
  - [x86] virt_spec_ctrl: Set correct host SSDB value for AMD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Fix missing void (Waiman Long) [1584356] {CVE-2018-3639}
  - [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584356] {CVE-2018-3639}
  - [uapi] prctl: Add force disable speculation (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
  - [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Show IBPB in the Spectre_v2 sysfs file (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] pti: Check MSR_IA32_ARCH_CAPABILITIES for Meltdown vulnearability (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] pti: Fix kexec warning on debug kernel (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] kvm/fpu: Enable eager FPU restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] always enable eager FPU by default (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Load xsave pointer *after* initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fix 32-bit signal frame handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Always restore_xinit_state() when use_eager_cpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Rename drop_init_fpu() to fpu_reset_state() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fix math_state_restore() race with kernel_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fold __drop_fpu() into its sole user (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't abuse drop_init_fpu() in flush_thread() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Introduce restore_init_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Document user_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Change xstateregs_get()/set() to use ->xsave.i387 rather than ->fxsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Always allow FPU in interrupt if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Introduce per-cpu in_kernel_fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Change math_error() to use unlazy_fpu(), kill (now) unused save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Merge simd_math_error() into math_error() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't reset thread.fpu_counter (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Allow FPU to be used at interrupt time even with eagerfpu (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387.c: Initialize thread xstate only on CPU0 only once (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] kvm: fix kvm's usage of kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] rhel: initialize scattered CPUID features early (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: make eagerfpu= boot param tri-state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: enable eagerfpu by default for xsaveopt (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: decouple non-lazy/eager fpu restore from xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: use non-lazy fpu restore for processors supporting xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: drop_fpu() before restoring new state from sigframe (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Unify signal handling code paths for x86 and x86_64 kernels (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: drop the fpu state during thread exit (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] signals: ia32_signal.c: add __user casts to fix sparse warnings (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Consolidate inline asm routines for saving/restoring fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] signal: Cleanup ifdefs and is_ia32, is_x32 (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu/xsave: Keep __user annotation in casts (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] debug: Add KERN_<LEVEL> to bare printks, convert printks to pr_<level> (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] extable: Remove open-coded exception table entries in arch/x86/include/asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: Split up <asm/i387.h> into exported and internal interfaces (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: Uninline the generic FP helpers that we expose to kernel modules (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: (DON'T ACTUALLY) support lazy restore of FPU state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: use 'restore_fpu_checking()' directly in task switching code (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: fix up some fpu_counter confusion (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: re-introduce FPU state preloading at context switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move TS_USEDFPU flag from thread_info to task_struct (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move AMD K7/K8 fpu fxsave/fxrstor workaround from save to restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: do not preload FPU state at task switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: don't ever touch TS_USEDFPU directly, use helper functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move TS_USEDFPU clearing out of __save_init_fpu and into callers (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: fix x86-64 preemption-unsafe user stack save/restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: math_state_restore() isn't called from asm (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fix potentially dangerous trailing '; ' in #defined values/expressions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-32, fpu: Fix FPU exception handling on non-SSE systems (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Fix common misspellings (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] kvm: Initialize fpu state in preemptible context (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-32, fpu: Rewrite fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Remove PSHUFB_XMM5_* macros (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Remove unnecessary ifdefs from i387 code. (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Simplify constraints for fxsave/fxtstor (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Fix cs value in convert_from_fxsr() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Disable preemption when using TS_USEDFPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge __save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge tolerant_fwait() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge fpu_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Disable xsave in i387 emulation mode (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Make xstate_enable_boot_cpu() __init, protect on CPU 0 (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Add __init attribute to setup_xstate_features() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Make init_xstate_buf static (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Check cpuid level for XSTATE_CPUID (0x0d) (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Introduce xstate enable functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Do not include asm/i387.h in asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Avoid unnecessary __clear_user() and xrstor in signal handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Cleanup return codes in check_for_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Separate fpu and xsave initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Move boot cpu initialization to xsave_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Revert "[x86] fpu: change save_i387_xstate() to rely on unlazy_fpu()" (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Revert "[x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal()" (Paolo Bonzini) [1589047] {CVE-2018-3665}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.2.1.el6]
changelog:
  - [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
  - [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
  - [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
  - [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
  - [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
  - [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
  - [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.1.el6]
changelog:
  - [infiniband] ib/iser: Rewrite bounce buffer code path (Don Dutile) [1585312]
  - [sound] alsa: pcm: prevent UAF in snd_pcm_info (CVE-2017-0861) (Jaroslav Kysela) [1565188] {CVE-2017-0861}
  - [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550176] {CVE-2018-7566}
  - [sound] alsa: seq: Fix use-after-free at creating a port (Jaroslav Kysela) [1503383] {CVE-2017-15265}
  - [sound] alsa: seq: Make ioctls race-free (Jaroslav Kysela) [1537452] {CVE-2018-1000004}
  - [mm] reduce total RAM held in per-CPU pvecs by flushing them on compound/THP page arrival (Larry Woodman) [1575819]
  - [usb] acm: fix the computation of the number of data bits (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [misc] spectre: fix gadgets found by smatch scanner, part 2 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] kvm/vmx: Remove barrier_nospec() in slot_largepage_idx() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kvm] Remove memory alias support (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [misc] spectre: fix gadgets found by smatch scanner (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] posix-timers: Protect posix clock array access against speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[] (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [ipc] sysvipc/sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [documentation] Document array_index_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Include <asm/barrier.h> dependency (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589032] {CVE-2018-3693}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.2.el6]
changelog:
  - [kvm] VMX: Fix host GDT.LIMIT corruption (CVE-2018-10301) (Paolo Bonzini) [1601851] {CVE-2018-10901}
  - [x86] Initialize __max_smt_threads to 1 (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: detect SMT disabled by BIOS (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Add topology_max_smt_threads() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix incorrect error return code in vm_insert_pfn() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Initialize the vmx_l1d_flush_pages' content (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Don't flush L1D cache if VMENTER_L1D_FLUSH_NEVER (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Take out the unused nosmt module parameter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm/dump_pagetables: Add a check_l1tf debugfs file (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries aganst L1TF for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Make flush_l1d visible in /proc/cpuinfo (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [Documentation] Add section about CPU vulnerabilities (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs, kvm: Introduce boot-time control of L1TF mitigations (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Expose SMT control init function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Allow runtime control of L1D flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Serialize L1D flush parameter setter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Move l1tf setup function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: Handle EPT disabled state proper (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Drop L1TF MSR list approach (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] litf: Introduce vmx status variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Online siblings when SMT control is turned on (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add find_msr() helper function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush logic (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Make indirect call speculation safe (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Enable acknowledge interupt on vmexit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D MSR based flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush algorithm (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add module argument for L1TF mitigation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] x86: Introducing kvm_x86_ops VM init/destroy hooks (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Boot HT siblings at least once (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] Revert "x86/apic: Ignore secondary threads if nosmt=force" (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix up pte->pfn conversion for PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpufeatures: Add detection of L1D cache flush support. (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Extend 64bit swap file size limit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] apic: Ignore secondary threads if nosmt=force (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/intel: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/topology: Provide detect_extended_topology_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/common: Provide detect_ht_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Remove the pointless detect_ht() call (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Remove the pointless CPU printout (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Provide knobs to control SMT (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Split do_cpu_down() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Provide topology_smt_supported() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] smp: Provide topology_is_primary_thread() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Move the l1tf function and define pr_fmt properly (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Limit swap file size to MAX_PA/2 (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Add sysfs reporting for l1tf (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect PROT_NONE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries against L1TF (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Change order of offset/type in swap entry (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Fix incorrect vulnerabilities files function prototypes (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Export the internal __cpu_bugs variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] intel-family.h: Add GEMINI_LAKE SOC (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Fix swap entry comment and macro (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Move swap offset/type up in PTE to work around erratum (Waiman Long) [1593376] {CVE-2018-3620}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.3.el6]
changelog:
  - [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
  - [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.4.el6]
changelog:
  - [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.5.el6]
changelog:
  - [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.4.1.el6]
changelog:
  - [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}
  - [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}
  - [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
  - [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
  - [kvm] VMX: Fix host GDT.LIMIT corruption (CVE-2018-10301) (Paolo Bonzini) [1601851] {CVE-2018-10901}
  - [x86] Initialize __max_smt_threads to 1 (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: detect SMT disabled by BIOS (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Add topology_max_smt_threads() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix incorrect error return code in vm_insert_pfn() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Initialize the vmx_l1d_flush_pages' content (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Don't flush L1D cache if VMENTER_L1D_FLUSH_NEVER (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Take out the unused nosmt module parameter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm/dump_pagetables: Add a check_l1tf debugfs file (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries aganst L1TF for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Make flush_l1d visible in /proc/cpuinfo (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [Documentation] Add section about CPU vulnerabilities (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs, kvm: Introduce boot-time control of L1TF mitigations (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Expose SMT control init function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Allow runtime control of L1D flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Serialize L1D flush parameter setter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Move l1tf setup function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: Handle EPT disabled state proper (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Drop L1TF MSR list approach (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] litf: Introduce vmx status variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Online siblings when SMT control is turned on (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add find_msr() helper function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush logic (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Make indirect call speculation safe (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Enable acknowledge interupt on vmexit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D MSR based flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush algorithm (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add module argument for L1TF mitigation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] x86: Introducing kvm_x86_ops VM init/destroy hooks (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Boot HT siblings at least once (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] Revert "x86/apic: Ignore secondary threads if nosmt=force" (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix up pte->pfn conversion for PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpufeatures: Add detection of L1D cache flush support. (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Extend 64bit swap file size limit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] apic: Ignore secondary threads if nosmt=force (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/intel: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/topology: Provide detect_extended_topology_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/common: Provide detect_ht_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Remove the pointless detect_ht() call (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Remove the pointless CPU printout (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Provide knobs to control SMT (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Split do_cpu_down() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Provide topology_smt_supported() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] smp: Provide topology_is_primary_thread() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Move the l1tf function and define pr_fmt properly (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Limit swap file size to MAX_PA/2 (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Add sysfs reporting for l1tf (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect PROT_NONE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries against L1TF (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Change order of offset/type in swap entry (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Fix incorrect vulnerabilities files function prototypes (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Export the internal __cpu_bugs variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] intel-family.h: Add GEMINI_LAKE SOC (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Fix swap entry comment and macro (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Move swap offset/type up in PTE to work around erratum (Waiman Long) [1593376] {CVE-2018-3620}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.5.1.el6]
changelog:
  - [s390] dasd: fix IO error for newly defined devices (Hendrik Brueckner) [1574448]
  - [s390] dasd: fix failing path verification (Hendrik Brueckner) [1581684]
  - [s390] qeth: on channel error, reject further cmd requests (Hendrik Brueckner) [1562009]
  - [s390] qdio: fix access to uninitialized qdio_q fields (Hendrik Brueckner) [1581685]
  - [powerpc] stf-barrier: update (rfi_)enabled_flush_types as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update debugfs as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update handle_ssbd() as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update stf_barrier_enable() as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: add cpu_show_spec_store_bypass() as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: add comment as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: move code from setup_64.c to security.c as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: move code from setup.h to security_features.h as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update fallback routine as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update entry barrier slot as in upstream (Gustavo Duarte) [1585299]
  - [x86] Add host_initiated check in reading MSR_AMD64_VIRT_SPEC_CTRL (Wei Huang) [1608576]
  - [x86] KVM: pass host_initiated to functions that read MSRs (Wei Huang) [1608576]
  - [fs] gfs2: Special-case rindex for gfs2_grow (Robert S Peterson) [1384184]
  - [fs] Revert "[fs] gfs2: Special case the rindex in gfs2_write_alloc_required()" (Robert S Peterson) [1384184]
  - [net] ip: process in-order fragments efficiently (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] ip: add helpers to process in-order fragments faster. (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] ipv6: defrag: drop non-last frags smaller than min mtu (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] ip: use rb trees for IP frag queue. (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] ip: discard IPv4 datagrams with overlapping segments. (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] net: modify skb_rbtree_purge to return the truesize of all purged skbs. (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] net: speed up skb_rbtree_purge() (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] skbuff: Rename RHEL6 version of skb_tree_purge() to skb_tree_purge_sk() (Stefano Brivio) [1613925] {CVE-2018-5391}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.6.1.el6]
changelog:
  - [x86] set __max_smt_threads for 1 core systems (Prarit Bhargava) [1623255]
  - [md] dm rq: fix a race condition in rq_completed() (Ming Lei) [1574568]
  - [scsi] scsi_transport_fc: Hold queue lock while calling blk_run_queue_async() (Ming Lei) [1574568]
  - [block] Avoid scheduling delayed work on a dead queue (Ming Lei) [1574568]
  - [block] Avoid that request_fn is invoked on a dead queue (Ming Lei) [1574568]
  - [block] Let blk_drain_queue() caller obtain the queue lock (Ming Lei) [1574568]
  - [block] Rename queue dead flag (Ming Lei) [1574568]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.6.2.el6]
changelog:
  - [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
  - [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-754.6.3.el6]
changelog:
  - [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
  - [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
  - [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]


author: Dhaval Giani <dhaval@linux.vnet.ibm.com> 0.32.1-1
changelog:
  * Tue Feb 24 2009 Balbir Singh <balbir@linux.vnet.ibm.com> 0.33-1
  - Update to 0.33, spec file changes to add Makefiles and pam_cgroup module


author: Jan Safranek <jsafrane@redhat.com> 0.36-4
changelog:
  - Fix libcgroup.so link to the right soname (#599367)
  - Fix segmentation fault in cgget tool (#601071)
  - Fix lscgroup commandline parsing (#601095)


author: Jan Safranek <jsafrane@redhat.com> 0.36-5
changelog:
  - Relax the dependency on redhat-lsb package (#607537)
  - Fix installation of -devel libraries (#607538)


author: Jan Safranek <jsafrane@redhat.com> 0.37-1.el6
changelog:
  - Updated to 0.37
    - added new 'cgsnapshot' tool to generate cgconfig.conf (#649195)
    - fixed 'cgget' reading long variable values like devices.list (#626127)
    - fixed reading list of mounted controllers on library init (#635984)
    - fixed the library not to change current working directory when creating
      groups (#628895)
    - new user 'cgred' was added for better security - /bin/cgexec tool is no
      longer SUID to root but SGID to the new 'cgred' user, which has write
      access to /var/run/cgred.socket
    - may other fixes an enhancements
  - Removed rpath from compiled binaries
  - Fixed spelling and rpmlint errors in the .spec file (#634939)
  - Fixed exit code of cgclassify tool (#667957)


author: Jan Safranek <jsafrane@redhat.com> 0.37-2.el6
changelog:
  - Fixed buffer overflow when parsing cgexec command line parameters.
  - Added checking of source of netlink messages to cgrulesengd daemon.
  - Resolves: CVE-2011-1006 CVE-2011-1022


author: Jan Safranek <jsafrane@redhat.com> 0.37-3.el6
changelog:
  - Fixed 'cgred' group not being created as system-group during installation
    of the package.
  - Resolves: #715413


author: Peter Schiffer <pschiffe@redhat.com> 0.37-5
changelog:
  - resolves: #819137
    fixed bug when lscgroup was ltrimming path which wasn't prefixed with slash
  - resolves: #773544
    made --sticky option effective when setuid(2) and setgid(2)
  - resolves: #849757
    added inotify fd to scan running tasks and set control groups
  - resolves: #738737
    logging improvement


author: Peter Schiffer <pschiffe@redhat.com> 0.37-6
changelog:
  - related: #738737
    updated logging improvement
  - resolves: #877042
    fixed coverity finding in libcgroup-0.37-add-inotify-fd.patch
  - resolves: #869990
    fixed bug when cgconfig service was failing to start on read only file systems


author: Peter Schiffer <pschiffe@redhat.com> 0.37-8
changelog:
  - resolves: #912425
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Peter Schiffer <pschiffe@redhat.com> 0.37-10
changelog:
  - resolves: #921328
    cgred service can now start with an empty configuration file
  - resolves: #863172
    cgconfig now sets group write permissions on files in the cgroup
  - resolves: #916397
    fixed cgrulesengd segfault
  - resolves: #924399
    fixed bug when the cgrulesengd had different logging level from the library
  - resolves: #951724
    fixed cgget(1) man page
  - resolves: #809550
    removed -s option from cgcreate(1) man page
  - resolves: #913286
    fixed adding control subgroups after cgrulesengd has started
  - resolves: #753334
    fixed bug when cgconfig fails to parse commas in the cgconfig.conf file


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-1
changelog:
  - resolves: #589535
    rebase to 0.40.rc1
    added support for automated cgroup creation following a template


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-2
changelog:
  - fixed coverity findings
  - resolves: #738620
    relabel cgred.pid file after service starts
  - resolves: #961844
    increase start priority for cgred service


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-4
changelog:
  - related: #913286
    fixed performance regression when starting cgred service
  - related: #589535
    fixed templates


author: jchaloup <jchaloup@redhat.com> - 0.40.rc1-16
changelog:
  - extending cgroup names with default
    resolves: #1139205
  - fixing libcgroup-0.40.rc1-reading-config-files-from-etc-cgconfig.d.patch not to modify patch backup file
    resolves: #1162220


author: Nikola Forró <nforro@redhat.com> - 0.40.rc1-19
changelog:
  - fix loading config files from /etc/cgconfig.d to make it work with libcgroup-pam
    resolves: #1345762


author: Chris Leech <christopher.leech@intel.com> - 0.9.7-1
changelog:
  - Updated to 0.9.7
  - Added a private copy of dcbnl.h until kernel-headers includes it.
    Export patch is making it's way to the upstream kernel via net-2.6,
    expected in 2.6.29-rc7


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.7-3
changelog:
  - added devel files again to support fcoe-utils package
  - added kernel >= 2.6.29 to Requires, deleted dcbnl.h, since it is
    aviable in kernel 2.6.29-rc7
  - changed config dir from /etc/sysconfig/dcbd to /etc/dcbd
  - updated init script: added mandatory Short description tag,
    deleted default runlevels, which should start the script


author: Karsten Hopp <karsten@redhat.com> 0.9.15-4
changelog:
  - buildrequire libconfig-devel >= 1.3.2, it doesn't build with 1.3.1 due to
    the different config_lookup_string api


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.26-1
changelog:
  - rebased to 0.9.26
  - package renamed to lldpad
  - enahanced functionality (LLDP supported as well as DCBX)


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.32-1
changelog:
  - rebased to 0.9.32 (various enhancements and bugfixes, see 
    lldpad-0.9.32-relnotes.txt on http://e1000.sf.net for complete list)


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.38-1
changelog:
  - rebased to 0.9.38 (various enhancements and bugfixes, see 
    lldpad-0.9.38-relnotes.txt on http://e1000.sf.net for complete list)


author: Petr Sabata <psabata@redhat.com> - 0.9.38-4
changelog:
  - patch to resolve hang observed during FCoE boot due to dcbx failing to initiate PFC and FCoE app priority negotiations
  - Resolves: rhbz#631587


author: Petr Sabata <psabata@redhat.com> - 0.9.41-4
changelog:
  - Upstream sync up to 4bf0f2db41be0b282e63646fb6b31f0a938d3865
  - Resolves: rhbz#694671
  - Resolves: rhbz#694323
  - Resolves: rhbz#694925


author: Petr Sabata <contyk@redhat.com> - 0.9.43-12
changelog:
  - lldpad: fix core dump (#749943)
  - Support for multiple filter info formats (#731407)
  - Updating documentation for previous commit (#749057)


author: Petr Šabata <contyk@redhat.com> - 0.9.45-4
changelog:
  - The devel subpackage now properly requires the base package to avoid
    multilib conflicts (#869633)


author: Petr Šabata <contyk@redhat.com> - 0.9.45-6
changelog:
  - Willing SUT retains PFC operational state from peer after peer
    stops transmitting TLV (#870578)
  - Unable to query configured PFC priorities under IEEE DCBX (#870576)


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 11.25-3
changelog:
  - more spec file cleanups
  - accepted for Fedora Extra
    (review by Aurelien Bompard <gauret@free.fr>)


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.0-1
changelog:
  - upgrade to 12.0
  - change new upstream name "mailx" to the old name "nail" to avoid
    conflicts with the Core mailx package.
  - drop Source1, use package's html file instead.


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.0-2
changelog:
  - complete "mailx to nail" changes in the manual and config files
  - drop _smp_mflags: it caused make to work incorrectly.


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-0
changelog:
  - Change the name from "nail" to upstream's "mailx".
    Merge with the ordinary "mailx" cvs tree for Fedora 10.
    Now this stuff supersedes the old ancient mailx-8.x in Fedora.
  - Build with nss instead of openssl, for "Security Consolidation" process.


author: Dmitry Butskoy <Dmitry@Butskoy.name>
changelog:
  - add missed BR for krb5-devel
  - activate IPv6 support
  - change config to /etc/mail.rc for compatibility
  - add triggerpostun scriptlets against previous mailx and nail
    to check and merge (when possible) their user config changes
  - use proper config filename in manuals
  - use "less" instead of non-provided "pg" for nobsdcompat mode


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-1
changelog:
  - Place mailx to /bin/mailx, to avoid extra symlink in redhat-lsb package
  - /bin/mailx is now a base binary, another symlinked to it.


author: Peter Schiffer <pschiffe@redhat.com> - 12.4-7
changelog:
  - resolves: #857120
    fixed incorrect return code when TMPDIR points to invalid path
  - resolves: #845098
    added support for alternatives


author: Dave Jones <davej@redhat.com>
changelog:
  - Only enable microcode_ctl service if the CPU is capable.
  - Prevent microcode_ctl getting restarted multiple times on initlevel change (#141581)
  - Make restart/reload work properly
  - Do nothing if not started by root.


author: Dave Jones <davej@redhat.com>
changelog:
  - Create/remove the /dev/cpu/microcode dev node as needed.
  - Use correct path again for the microcode.dat.
  - Remove some no longer needed tests in the init script.


author: Dave Jones <davej@redhat.com>
changelog:
  - Drop the node creation/deletion change from previous release.
    It'll cause grief with selinux, and was a hack to get around
    a udev shortcoming that should be fixed properly.


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Spec cleanup and macro standardization.
  - Update license
  - Update microcode data file to 20080131 revision.


author: Dave Jones <davej@redhat.com>
changelog:
  - Shorten sleep time during init.
    This really needs to be replaced with proper udev hooks, but this is
    a quick interim fix.


author: Kyle McMartin <kyle@redhat.com> - 1:1.17-2
changelog:
  - Don't use a CVS release for RHEL, otherwise it'll always be a branch
    and irritating.
  - Fix syntax error in microcode_ctl.init.
  - Resolves: rhbz#552246.


author: Anton Arapov <anton@redhat.com> - 1:1.17-10
changelog:
  - Fix buffer overflow
  - Resolves: rhbz#768803
  - Update to microcode-20111110.dat
  - Resolves: rhbz#736266


author: Petr Oros <poros@redhat.com> - 1:1.17-21
changelog:
  - Update microcode data file to 20151106 revision.
  - Resolves: #1244968
  - Remove bad file permissions on /lib/udev/rules.d/89-microcode.rules
  - Resolves: #1201276


author: Petr Oros <poros@redhat.com> - 1:1.17-24
changelog:
  - Update microcode data file to 20161104 revision.
  - Add workaround for E5-26xxv4
  - Resolves: #1346045


author: Petr Oros <poros@redhat.com> - 1:1.17-27
changelog:
  - Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
  - Add amd microcode_amd_fam17h.bin data file
  - Resolves: #1527354


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:1.17-33.3
changelog:
  - Intel CPU microcode update to 20180703
  - Add infrastructure for handling kernel-version-dependant microcode
  - Resolves: #1574593


author: Eugene Syromiatnikov <esyr@redhat.com> - 2:1.17-33.5
changelog:
  - Intel CPU microcode update to 20180807a (#1614427).
  - Add check for minimal microcode version to reload_microcode.


author: Joe Orton <jorton@redhat.com> 2.0.3-2
changelog:
  - update to 2.0.3
  - remove droplet in buildroot from multilib patch
  - drop build-related ModPerl:: modules and Apache::Test (#197841)
  - spec file cleanups


author: Petr Pisar <ppisar@redhat.com> - 2.0.4-12
changelog:
  - Fix CVE-2011-2767 (arbitrary Perl code execution in the context of the user
    account via a user-owned .htaccess) (bug #1626272)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - get correct manual path the Right Way(tm)
  - make it so it uses default colors even if COLORFGBG isn't set


author: Nalin Dahyabhai <nalin@redhat.com> 5:1.4.1-10
changelog:
  - expect the server to prompt for additional auth data if we have some to
    send (#129961, upstream #1845)
  - use "pop" as the service name instead of "pop-3" when using SASL for POP,
    per rfc1734


author: Bill Nottingham <notting@redhat.com> 5:1.4.2.1-1
changelog:
  - update to 1.4.2.1 (#141007, <moritz@barsnick.net>)
  - include a /etc/Muttrc.local for site config (#123109)
  - add <f2> as a additional help key for terminals that use <f1> internally
    (#139277)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.4.2.2-1
changelog:
  - update to 1.4.2.2
  - fix directories in manual.txt (#162207)
  - drop bcc patch (#197408)
  - don't package flea


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.14-2
changelog:
  - add check_mbox_size configuration variable; if enabled, file size is used
    instead of access time when checking for new mail
  - bind delete key to delete-char (#232601)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.14-4
changelog:
  - validate msgid in APOP authentication (CVE-2007-1558)
  - fix overflow in gecos field handling (CVE-2007-2683)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.17-2
changelog:
  - don't ignore $from in batch send mode (#392861)
  - check Maildir for not being NULL when expanding '='-paths
  - prevent mailto parsing buffer overflow by ignoring too long header
  - use strtok_r() to parse mailto: links, not strtok()
  - update UPDATING


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.17-4
changelog:
  - fix sending long commands when using gnutls (#438275)
  - glob tilde in smime_keys (#424311)
  - fix awk script in mutt_ldap_query
  - force building with libdb
  - make enabling/disabling features in spec easier


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.18-2
changelog:
  - allow interrupts when reading, writing or closing sockets (#447887)
  - fix possible crash when opening IMAP mailbox


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-4
changelog:
  - use PATH_MAX for buffers passed to realpath (#492861)
  - unconditionally inode-sort Maildir and MH folders
  - restore connection polling callback when closing SASL connection


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-5
changelog:
  - fix certificate verification (CVE-2009-1390)
  - add support for gnutls INSECURE_ALGORITHM error code (#499390)


author: Jan Pacner <jpacner@redhat.com> - 5:1.5.20-5.20091214hg736b6a
changelog:
  - Resolves: #1083524 (segmentation fault when sending an e-mail from a command
    line)
  - Resolves: #750929 (SIGSEGV Crash while parsing certificates file)
  - Resolves: #690409 (mutt crash; seg fault in mx_update_context)
  - Resolves: #674271 (SIGSEGV when browsing pop account)


author: Matej Muzila <mmuzila@redhat.com> - 5:1.5.20-8.20091214hg736b6a
changelog:
  - Resolves #1196787 (System default CA bundle not set as default in compiled-in
    default or config)
  - Resolves #1212646 (mutt sends e-mail with broken "From" header, which has no
    host part)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - switch to nfs-utils as the base tree
  - fix the statfs patch for the new code base
  - single package that obsoletes everything we had before (if I am to keep
    some traces of my sanity with me...)


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - Fix incorrect file specifications in statd manpage.
  - Require gawk 'cause it's used in nfslock init script.


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - don't install any rquota pages in _mandir: (#39707, #44119)
  - don't try to manipulate rpc.rquotad in init scripts 
  -   unless said program actually exists: (#43340)


author: Bob Matthews <bmatthews@redhat.com>
changelog:
  - "service nfs restart" should start services even if currently 
  -   not running (#59469)
  - bump version to 0.3.3-4


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added the setting of lockd ports via sysclt interface
  - Removed queue setting code since its no longer needed


author: <SteveD@RedHat.com>
changelog:
  - Removed gssd tarball and old nfsv4 patch.
  - Added new nfsv4 patches that include both the
     gssd and idmapd daemons
  - Added redhat-only v4 patch that reduces the
     static librpc.a to only contain gss rpc related
     routines (I would rather have gssd use the glibc 
     rpc routines)
  -Changed the gssd svcgssd init scripts to only
     start up if SECURE_NFS is set to 'yes' in
     /etc/sysconfig/nfs


author: <SteveD@RedHat.com>
changelog:
  - Added the addition and deletion of rpc_pipefs to /etc/fstab
  - Added the addition and deletion of module aliases to /etc/modules.conf


author: <SteveD@RedHat.com>
changelog:
  - Added the shutting down of the rpc v4 daemons.
  - Updated the Red Hat only patch with some init script changes.


author: <SteveD@RedHat.com>
changelog:
  - Made the nfs4 daemons initscripts work better when 
    sunrpc is not a module
  - added more checks to see if modules are being used.


author: <SteveD@RedHat.com>
changelog:
  - Created a pipe between the parent and child so 
    the parent process can report the correct exit
    status to the init scripts
  - Added SIGHUP processing to rpc.idmapd and the 
    rpcidmapd init script.


author: <SteveD@RedHat.com>
changelog:
  - Changed the permission on idmapd.conf to 644
  - Added mydaemon code to svcgssd
  - Updated the add_gssd.patch from upstream


author: <SteveD@RedHat.com>
changelog:
  - Removed the auto option from MOUNTD_NFS_V2 and
    MOUNTD_NFS_V3 variables. Since v2 and v3 are on
    by default, there only needs to be away of 
    turning them off.


author: <SteveD@RedHat.com>
changelog:
  - Fixed syntax error in nfs initscripts when
    NETWORKING is not defined
  - Removed sync warning on readonly exports.
  - Changed run levels in rpc initscripts.
  - Replaced modinfo with lsmod when checking
    for loaded modules.


author: <SteveD@RedHat.com>
changelog:
  - nfslock stop is now done on package removals
  - Eliminate 3 syslog messages that are logged for
    successful events.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Major clean up. 
  - Removed all unused/old patches
  - Rename and condensed a number of patches
  - Updated to CITI's nfs-utils-1.0.6-13 patches


author: <SteveD@RedHat.com>
changelog:
  - Make sure the uid/gid of nfsnobody is the
    correct value for all archs (bz# 123900)
  - Fixed some security issues found by SGI (bz# 133556)


author: <SteveD@RedHat.com
changelog:
  - Incorporate some clean up code from Ulrich Drepper (bz# 134025)
  - Fixed the chkconfig number in the rpcgssd, rpcidmapd, and 
    rpcsvcgssd initscrpts (bz# 132284)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added "$RQUOTAD_PORT" variable to nfs.init which
    allows the rpc.rquotad to use a predefined port
    (bz# 124676)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Replaced a memcopy with explicit assignments
    in getquotainfo() of rquotad to fix potential overflow
    that can occur on 64bit machines. (bz 138068)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Fix problem in idmapd that was causing "xdr error 10008"
    errors (bz 142813)
  - make sure the correct hostname is used in the SM_NOTIFY
    message that is sent from a rebooted server which has 
    multiple network interfaces. (bz 139101)

  - Changed nfslock to send lockd a -KILL signal
    when coming down. (bz 125257)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added support to rpcgssd.init and rpcsvcgssd.init scripts
    to insmod security modules.
  - Changed the nfs.init script to bring rpc.svcgssd up and down,
    since rpc.svcgssd is only needed with the NFS server is running.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-3
changelog:
  - Changed xlog to use LOG_INFO instead of LOG_DEBUG
    so debug messages will appear w/out any config
    changes to syslog.conf.
  - Reworked how /etc/exports is setup (bz 151389)


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-4
changelog:
  - Fixed a compile error on x86_64 machines in the gss code.
  - Updated the statd-notify-hostname.patch to eliminate 
    a segmentation fault in rpc.statd when an network 
    interface was down. (bz 151828)


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-12
changelog:
  - Changed useradd to use new -l flag (bz149407)
  - 64bit fix in gssd code (bz 163139)
  - updated broken dependencies
  - updated rquotad to compile with latest
    quota version.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-16
changelog:
  - Reworked the nfslock init script so if lockd is running
    it will be killed which is what the HA community needs. (bz 162446)
  - Stopped rpcidmapd.init from doing extra echoing when
    condstart-ed.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-17
changelog:
  - Updated to latest nfs-utils code in upstream CVS tree
  - Updated libevent from 1.0b to 1.1a
  - Added libgssapi-0.4 and librpcsecgss-0.6 libs from CITI


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-18
changelog:
  - Updated libnfsidmap to 0.11
  - Updated libgssapi to 0.5
  - Made sure the gss daemons and new libs are
    all using the same include files.
  - Removed code from the tree that is no longer used.
  - Add ctlbits patch that introduced the -N -T and -U
    command line flags to rpc.nfsd.


author: Steve Dickson <SteveD@RedHat.com> 1.0.7-19
changelog:
  - Updated to latest code in SourceForge CVS
  - Updated to latest CITI patches (1.0.7-4)
  - Fix bug in nfsdreopen by compiling in server defaults


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-1.FC5
changelog:
  - Updated to 1.0.8-rc2 release
  - Broke out libgssapi into its own rpm
  - Move librpcsecgss and libnfsidmap in the new nfs-utils-lib rpm
  - Removed libevent code; Required to be installed.


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-3.FC5
changelog:
  - Added innetgr patch that changes configure scripts to 
    check for the innetgr function. (bz 177899)


author: Steve Dickson <SteveD@RedHat.com> 1.0.8.rc2-4.FC5
changelog:
  - Added new libnfsidmap call, nfs4_set_debug(), to rpc.idmapd
    which turns on debugging in the libarary.


author: <SteveD@RedHat.com> 1.0.8-3
changelog:
  - Split the controlling of nfs version, ports, and protocol 
    into two different patches
  - Fixed and added debugging statements to rpc.mountd.
  - Fixed -p arg to work with priviledged ports (bz 156655)
  - Changed nfslock initscript to set LOCKD_TCPPORT and
    LOCKD_UDPPORT (bz 162133)
  - Added MOUNTD_NFS_V1 variable to version 1 of the
    mount protocol can be turned off. (bz 175729)
  - Fixed gssd to handel mixed case characters in
    the domainname. (bz 186069)


author: <SteveD@RedHat.com> 1.0.9-2
changelog:
  - Enabled the creating of mount.nfs and umount.nfs binaries
  - Added mount option fixes suggested by upstream.
  - Fix lazy umounts (bz 169299)
  - Added -o fsc mount option.


author: <SteveD@RedHat.com> 1.0.9-5
changelog:
  - Changed gssd daemons to cache things in memory
    instead of /tmp which makes selinux much happier.
    (bz 203078)


author: <SteveD@RedHat.com> 1.0.9-6
changelog:
  - Removed the compiling of getiversion and getkversion since
    UTS_RELEASE is no longer defined and these binary are
    not installed.


author: Karel Zak <kzak@redhat.com> 1.0.9-7
changelog:
  - Added support for the mount -s (sloppy) option (#205038)
  - Added nfs.5 man page from util-linux
  - Added info about [u]mount.nfs to the package description


author: Steve Dickson <steved@redhat.com> 1.0.10-2
changelog:
  - Fixed -o remount (bz 210346)
  - fix memory leak in rpc.idmapd (bz 212547)
  - fix use after free bug in dirscancb (bz 212547)
  - Made no_subtree_check a default export option (bz 212218)


author: Steve Dickson <steved@redhat.com> 1.0.10-4
changelog:
  - Doing a connect on UDP sockets causes the linux network
    stack to reject UDP patches from multi-home server with
    nic on the same subnet. (bz 212471)


author: Steve Dickson <steved@redhat.com> 1.0.12-2
changelog:
  - Added condstop to all the initscripts (bz 196934)
  - Made no_subtree_check a default export option (bz 212218)


author: Steve Dickson <steved@redhat.com> 1.0.12-5
changelog:
  - Fix mount.nfs4 to display correct error message (bz 227212)
  - Updated mountd and showmount reverse lookup flags (bz 220772)
  - Eliminate timeout on nfsd shutdowns (bz 222001)
  - Eliminate memory leak in mountd (bz 239536)
  - Make sure statd uses correct uid/gid by chowning
    the /var/lib/nfs/statd with the rpcuser id. (bz 235216)
  - Correct some sanity checking in rpc.nfsd. (bz 220887) 
  - Added missing unlock_mtab() call in moutnd
  - Have mountd hold open etab file to force inode number to change (bz 236823)
  - Create a /etc/sysconfig/nfs with all the possible init script
    variables (bz 234543)
  - Changed nfs initscript to exit with correct value (bz 221874)


author: Steve Dickson <steved@redhat.com> 1.0.10-6
changelog:
  - Make sure the condrestarts exit with a zero value (bz 240225)
  - Stopped /etc/sysconfig/nfs from being overwritten on updates (bz 234543)
  - Added -o nordirplus mount option to disable READDIRPLUS (bz 240357)
  - Disabled the FSCache patch, for now...


author: Steve Dickson <steved@redhat.com> 1.1.0-4
changelog:
  - Make sure the open() system calling in exportfs uses
    mode bits when creating the etab file (bz 252440).


author: Steve Dickson <steved@redhat.com> 1.1.0-5
changelog:
  - Changed the default paths in sm-notify to 
    /var/lib/nfs/statd (bz 258461)
  - Updated exportfs manpage (bz 262861)


author: Steve Dickson <steved@redhat.com> 1.1.1-1
changelog:
  - Updated to latest upstream release, nfs-utils-1.1.1
  - Added the removal of sm-notify.pid to nfslock init script.
  - Changed spec file to use condrestart instead of condstop
    when calling init scripts.
  - Fixed typo in rpc.mountd man page 
  - Turn on 'nohide' automatically for all refer exports (bz 313561)


author: Steve Dickson <steved@redhat.com> 1.1.1-2
changelog:
  - Added -S/--since to the nfsstat(1) manpage
  - The wording in the exportfs man page can be a bit confusing, implying
    that "exportfs -u :/foo" will unexport /foo from all hosts, which it won't
  - Removed nfsprog option since the kernel no longer supports it.
  - Removed mountprog option since the kernel no longer supports it.
  - Stop segfaults on amd64 during warnings messages.
  - Fix bug when both crossmnt and fsid are set.


author: Steve Dickson <steved@redhat.com> 1.1.1-3
changelog:
  - Added in relatime mount option so mount.nfs stays
    compatible with the mount command in util-linux-ng (bz 274301)


author: Steve Dickson <steved@redhat.com> 1.1.1-5
changelog:
  - Stopped mountd from incorrectly logging an error
    (commit 9dd9b68c4c44f0d9102eb85ee2fa36a8b7f638e3)
  - Stop gssd from ignoring the machine credential caches
    (commit 46d439b17f22216ce8f9257a982c6ade5d1c5931)
  - Fixed typo in the nfsstat command line arugments.
    (commit acf95d32a44fd8357c24e8a04ec53fc6900bfc58)
  - Added test to stop buffer overflow in idmapd
    (commit bcd0fcaf0966c546da5043be700587f73174ae25)


author: Steve Dickson <steved@redhat.com> 1.1.2-3
changelog:
  - Documented how to turn off/on protocol support for
    rpc.nfsd in /etc/sysconfig/nfs (bz443625)
  - Corrected the nfslock initscript 'status' return code (bz 441605)
  - Removed obsolete code from the nfslock initscript (bz 441604)


author: Steve Dickson <steved@redhat.com> 1.1.2-7
changelog:
  - Added -D_FILE_OFFSET_BITS=64 to CFLAGS
  - make nfsstat read and print stats as unsigned integers
  - Added (but not installed) the mountstats and nfs-iostat
    python scripts.


author: Steve Dickson <steved@redhat.com> 1.1.2-12
changelog:
  - Changed the default directories for sm-notify (bz 435480)
  - Added 'condstop' to init scripts so service are not
    started when nfs-utils is removed.


author: Steve Dickson <steved@redhat.com> 1.1.3-5
changelog:
  - Reworked init scripts so service will be able to
    stop when some of the checks fail. (bz 462508)
  - Pre-load nfsd when args to rpc.nfsd are given (bz 441983)


author: Steve Dickson <steved@redhat.com> 1.1.4-4
changelog:
  - gssd: unblock DNOTIFY_SIGNAL in case it was blocked
  - Ensure statd gets started if required when non-root
    user mounts an NFS filesystem


author: Steve Dickson <steved@redhat.com> 1.1.4-5
changelog:
  - Make sure /proc/fs/nfsd exists when the nfs init script
    does the exports (bz 473396)
  - Fixed typo in nfs init script that caused rpc.rquotad daemons
    to be started but not stoppped (bz 473929)


author: Steve Dickson <steved@redhat.com> 1.1.4-6
changelog:
  - mount command: remove local getport() implementation
  - mount command: Replace clnt_ping() and getport() calls in probe_port()
  - mount command: Use nfs_error() instead of perror()
  - mount command: Use nfs_pmap_getport() in probe_statd()


author: Steve Dickson <steved@redhat.com> 1.1.4-8
changelog:
  - mount command: AF_INET6 support for probe_bothports()
  - mount command: support AF_INET6 in probe_nfsport() and probe_mntport()
  - mount command: full support for AF_INET6 addresses in probe_port()
  - gssd/svcgssd: add support to retrieve actual context expiration
  - svcgssd: use the actual context expiration for cache


author: Steve Dickson <steved@redhat.com> 1.1.4-9
changelog:
  - text-based mount command: add function to parse numeric mount options
  - text-based mount command: use po_get_numeric() for handling retry
  - sm-notify command: fix a use-after-free bug
  - statd: not unlinking host files


author: Steve Dickson <steved@redhat.com> 1.1.4-11
changelog:
  - Added warnings to tcp wrapper code when mounts are 
    denied due to misconfigured DNS configurations.
  - gssd: By default, don't spam syslog when users' credentials expire
  - mount: revert recent fix for build problems on old systems
  - mount: use gethostbyname(3) when building on old systems
  - mount: getport: don't use getaddrinfo(3) on old systems
  - mount: Random clean up
  - configure: use "--disable-uuid" instead of	"--without-uuid"


author: Steve Dickson <steved@redhat.com> 1.1.4-12
changelog:
  - configure: Remove inet_ntop(3) check from configure.ac
  - configure: Add new build option "--enable-tirpc"
  - showmount command: Quiesce warning when TI-RPC is disabled


author: Steve Dickson <steved@redhat.com> 1.1.4-14
changelog:
  - text-based mount command: make po_rightmost() work for N options
  - text-based mount command: Function to stuff "struct pmap" from mount options
  - text-based mount options: Use new pmap stuffer when	rewriting mount options
  - text-based mount command: fix mount option rewriting logic
  - text-based mount command: support AF_INET6 in rewrite_mount_options()


author: Steve Dickson <steved@redhat.com> 1.1.4-15
changelog:
  - Reworked tcp wrapper code to correctly use API (bz 480223)
  - General clean up of tcp wrapper code.


author: Steve Dickson <steved@redhat.com> 1.1.4-18
changelog:
  - umount.nfs command: Add an AF_INET6-capable version of nfs_call_unmount()
  - umount.nfs command: Support AF_INET6 server addresses
  - umount command: remove do_nfs_umount23 function


author: Steve Dickson <steved@redhat.com> 1.1.5-2
changelog:
  - Fixed lockd not using settings in sysconfig/nfs (bz 461043)
  - Fixed some lost externs in the tcpwrapper code


author: Steve Dickson <steved@redhat.com> 1.1.5-4
changelog:
  - Added upstream rc3 patch
    - gssd: initialize fakeseed in prepare_krb5_rfc1964_buffer
    - gssd: NULL-terminate buffer after read in read_service_info (try #2)
    - gssd: free buffer allocated by gssd_k5_err_msg
    - gssd: fix potential double-frees in gssd
    - Removed a number of warn_unused_result warnings


author: Steve Dickson <steved@redhat.com> 1.1.6-3
changelog:
  - Added upstream 1.1.7-rc1 patch 
    - utils/nfsd: add support for minorvers4
    - sm-notify: Don't orphan addrinfo structs
    - sm-notify: Failed DNS lookups should be retried
    - mount: remove legacy version of nfs_name_to_address()
    - compiling error in rpcgen
    - nfs-utils: Fix IPv6 support in support/nfs/rpc_socket.c
    - umount.nfs: Harden umount.nfs error reportin


author: Tom "spot" Callaway <tcallawa@redhat.com> 1.1.6-4
changelog:
  - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems


author: Steve Dickson <steved@redhat.com> 1.2.0-4
changelog:
  - Added upstream 1.2.1-rc1 patch 
    - Fix to check in closeall()
    - Make --enable-tirpc the default
    - Set all verbose types in gssd daemons
    - Retry exports if getfh() fails


author: Steve Dickson <steved@redhat.com> 1.2.0-6
changelog:
  - Added NFSD v4 dynamic pseudo root patch which allows
    NFS v3 exports to be mounted by v4 clients.


author: Steve Dickson <steved@redhat.com> 1.2.0-9
changelog:
  - Added upstream 1.2.1-rc3 patch
    - Add IPv6 support to nfsd
    - Allow nfssvc_setfds to properly deal with AF_INET6
    - Convert nfssvc_setfds to use getaddrinfo
    - Move check for active knfsd to helper function
    - Declare a static common buffer for nfssvc.c routine
    - Convert rpc.nfsd to use xlog() and add --debug and --syslog options


author: Steve Dickson <steved@redhat.com> 1.2.0-10
changelog:
  - Added upstream 1.2.1-rc4 patch
    - Fix bug when both crossmnt
    - nfs(5): Add description of lookupcache mount option
    - nfs(5): Remove trailing blanks
    - Added nfs41 support to nfssat
    - Added support for mount to us a configuration file.


author: Steve Dickson <steved@redhat.com> 1.2.0-11
changelog:
  - Added upstream 1.2.1-rc5 patch
    - Added --sort --list functionality to nfs-iostat.py
    - Fixed event handler in idmapd
    - Added -o v4 support
    - Disabled IPv6 support in nfsd
    - Don't give client an empty flavor list
    - Fixed gssed so it does not blindly caches machine credentials


author: Steve Dickson <steved@redhat.com> 1.2.0-13
changelog:
  - Added upstream 1.2.1-rc5 patch
    - mount.nfs: Support negotiation between v4, v3, and v2
    - mount.nfs: Keep server's address in nfsmount_info
    - mount.nfs: Sandbox each mount attempt
    - mount.nfs: Support negotiation between v4, v3, and v2


author: Steve Dickson <steved@redhat.com> 1.2.0-14
changelog:
  - Change the nfsmount.conf file to define v3 as the default 
    protocol version.
  - Make sure versions set on the command line override version
    set in nfsmount.conf
  - Make version rollbacks still work when versions are set in
    nfsmount.conf


author: Steve Dickson <steved@redhat.com> 1.2.0-17
changelog:
  - Updated to the latest pseudo root release (rel7).
  - Added upstream 1.2.1-rc7 patch which fixes:
     - Stop ignoring the -o v4 option (bz 529407)
     - Allow network protocol roll backs when proto is set
        in the config file (bz 529864)


author: Steve Dickson <steved@redhat.com> 1.2.1-1
changelog:
  - Updated to latest upstream release 1.2.1
  - Updated to the latest pseudo root release (rel8).
  - Stop rpc.nfsd from failing to startup when the network
    is down (bz 532270)


author: Steve Dickson <steved@redhat.com> 1.2.1-3
changelog:
  - Updated to the latest pseudo root release (rel9).
  - mount.nfs: Retry v4 mounts with v3 on ENOENT error


author: Steve Dickson <steved@redhat.com> 1.2.1-4
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-2-rc6
    which fixes bz(479362) and contains the upstream pseudo 
    root release.


author: Steve Dickson <steved@redhat.com> 1.2.1-5
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-2-rc7
    which includes Ipv6 support for statd (disabled by default).


author: Steve Dickson <steved@redhat.com> 1.2.1-6
changelog:
  - Updated to latest upstream RC release: nfs-utils-1-2-2-rc8
    which includes Ipv6 support for tcpwrapper (disabled by default).


author: Steve Dickson <steved@redhat.com> 1.2.1-7
changelog:
  - mount.nfs: Configuration file parser ignoring options
  - mount.nfs: Set the default family for lookups based on 
      defaultproto= setting
  - Enabled ipv6  (bz 556484)


author: Steve Dickson <steved@redhat.com> 1.2.2-3
changelog:
  - Allow mountd to not listen for RPC calls when v2/v3 disabled (bz 538922)
  - Added portmap to init script dependencies (bz 583007)
  - Added in the mount.nfs4 and umount.nfs4 man pages (bz 528951)
  - Did some initscripts improvement (bz 596095)
  - Added error message for an invaild mount option value (bz 588886)
  - Added error message for an invaild proto option value (bz 588879)


author: Steve Dickson <steved@redhat.com> 1.2.2-5
changelog:
  - Removed the inconsistent default anonuid/anongid values. (bz 566888)
  - Created the rpcuser group (bz 594206)


author: Steve Dickson <steved@redhat.com> 1.2.3-1
changelog:
  - Initscripts changes needed to support NFS over RDMA (bz 631012)
  - Initscripts changes needed for NFS to shutdown cleanly (bz 636513)
  - Initscripts changes needed for rpcbind to be running 
    when nfs is started (bz 641291)


author: Steve Dickson <steved@redhat.com> 1.2.3-6
changelog:
  - Added support for AD style kerberos to rpc.gssd (bz 671474)
  - Disabled the installing of the nfsidmap command


author: Steve Dickson <steved@redhat.com> 1.2.3-8
changelog:
  - initscripts: just try to mount rpc_pipefs always (bz 692702) 
  - Rely on crypto module autoloading in init scripts
  - svcgssd: Document "-n" for svcgssd (bz 697359)
  - mount.nfs: anticipate RLIMIT_FSIZE (bz 697981)
  - exportfs manpage: Ipv6 update (bz 715078)
  - mountd: Stop segfault in mtab code (bz 723438)
  - exportfs: wilcards in exports can lead to unintended mounts (bz 715391)
  - umount: allow spaces in unmount paths (bz 702273)
  - specfile: reordered how libgssglue is linked in (bz 720479)


author: Steve Dickson <steved@redhat.com> 1.2.3-9
changelog:
  - umount.nfs: Got IPV6 unmounts working again (bz 732673)
  - mountd: return multiple hosts exporting the same directory (bz 726112) 
  - mount: Better error message for invalid version (bz 723780)


author: Steve Dickson <steved@redhat.com> 1.2.3-15
changelog:
  - mout.nfs: Don't roll back to IPv4 whe IPv6 fails (bz 744657)
  - rpcdebug: Added pNFS and FSCache debugging (bz 747400)


author: Steve Dickson <steved@redhat.com> 1.2.3-16
changelog:
  - Enable the keyring based idmapping (bz 772496)
  - Correct nfs(5) man page on how TCP retries are done (bz 737990)
  - Fixed sigio problem in rpc.idmapd (bz 751089)
  - Only link in libtirpc to binaries that need it (bz 772050)
  - Increase the stdio file buffer size for procfs files (bz 736741)
  - Fixed gssd from picking the wrong creds (bz 738774)
  - Mounts fail with using -o bg,vers= options (bz 740472)


author: Steve Dickson <steved@redhat.com> 1.2.3-17
changelog:
  - Used correct locking file in nfs.init script (bz 772543)
  - Create a locking file for rpc.rquotad (bz 766472)
  - Normalized umount paths (bz 758000)
  - Fixed parsing error in nfsmount.conf code (bz 754666)


author: Steve Dickson <steved@redhat.com> 1.2.3-18
changelog:
  - Fixed nfs initscript to handle reloads correctly (bz 784022)
  - Add support for umlauts in group names in idmapper (bz 772619)
  - Stoppped racing exportfs in clusters (bz 800335)


author: Steve Dickson <steved@redhat.com> 1.2.3-19
changelog:
  - Fixed decode group names with spaces in idmapd (bz 787970)
  - Remove two unused gss commands (bz 738932)


author: Steve Dickson <steved@redhat.com> 1.2.3-22
changelog:
  - NFS initscript needs to do a rpcidmapd condrestart not a condstart (bz 809201)
  - Allow v2|v3 background mounts to retry when server is down (bz 740472) 
  - Fix the umounting of symbolic links (bz 801085)


author: Steve Dickson <steved@redhat.com> 1.2.3-26
changelog:
  - Fixed typo in the checking of nfsnobody (bz 816149)
  - Fixed the exporting of subdirectories (bz 816162)


author: Steve Dickson <steved@redhat.com> 1.2.3-29
changelog:
  - V4 mounts hang on exports to netgroups (bz 815673)
  - Strip the '[]' off of ipv6 addresses (bz 811882)
  - Removed a use_ipaddr race in mountd (bz 797209)


author: Steve Dickson <steved@redhat.com> 1.2.3-30
changelog:
  - gssd: Don't link with libgssapi_krb5 (bz 784909)
  - Fix referrals that use IPv6 addresses (bz 820737)
  - Add -l option to gssd to force legacy behaviour (bz 802469)
  - Add support to svcgssd to limit the negotiated enctypes (bz 802469)
  - Changed nfs.init to allow umounts to happen cleanly during 
    system shutdown (bz 856923)


author: Steve Dickson <steved@redhat.com> 1.2.3-34
changelog:
  - Update the default encryption types in svcgssd (bz 877636)
  - Added the -v 4.1 mount option (bz 877052)


author: Steve Dickson <steved@redhat.com> 1.2.3-35
changelog:
  - Fixed a regession in mountd that cause a localhost mounts to hang (bz 797209)
  - Make sure mount tries all the addresses returned by getaddrinfo (bz 876847)


author: Steve Dickson <steved@redhat.com> 1.2.3-38
changelog:
  - Fixed typo in nfsstat's output (bz 890146)
  - Fixed retrans defaults in nfs(5) man page (bz 952560)
  - Clean rpc.idmapd messages when nfsd starts (bz 892235)
  - Fixed sm-notify to work with localhost (bz 950324)
  - Fixed pNFS stats (bz 962602)
  - Remove no_acl from exports(5) man page (bz 991302)
  - Improve nfsmount.conf configuration parsing (bz 889272)
  - Fixed sm-notify -v (bz 995484)


author: Steve Dickson <steved@redhat.com> 1.2.3-42
changelog:
  - gssd: Added GSS_contest lifetime to the kernel (bz 1081208)
  - rpc.idmapd: Ignore open failures in dirscancb() (bz 1040135)
  - gssd: always reply to rpc-pipe requests from kernel (bz 1070927)


author: Steve Dickson <steved@redhat.com> 1.2.3-44
changelog:
  - Allow -o remounts to work (bz 1079047)
  - Put state flag in rpcdebug (bz 1087878)
  - Added more options to nfsmount.conf (bz 918319)
  - Fixed error reporting in nfsidmap (bz 1061505)
  - Fixed socket binding loop in rpc.statd (bz 1075224)


author: Steve Dickson <steved@redhat.com> 1.2.3-45
changelog:
  - Smothed out upgrads from rhel6 to rhel7 (bz 1086625)
  - rpc.statd: Bind downcall socket to loopback address (bz 1018358)
  - nfsiostat: periodically flush stdout (bz 1007195)
  - Fixed a buffer overflow in exportfs (bz 1008381)


author: Steve Dickson <steved@redhat.com> 1.2.3-47
changelog:
  - Stop Treat IP addresses a FQDN rather than SUBNETs. (bz 1098592)
  - Removed the local_lock not supported line in man page (bz 1017477)


author: Steve Dickson <steved@redhat.com> 1.2.3-50
changelog:
  - gssd: Drop full domain when constructing the Ad hostname (bz 1067423)
  - Explained nfsiostat output in man page (bz 869684)
  - mountd.man: Added missing arguments in man page (bz 1003555)


author: Steve Dickson <steved@redhat.com> 1.2.3-53
changelog:
  - gssd: Error out when rpc_pipefs directory is empty (bz 1116698)
  - exportfs: Removed a warning from exportfs.c (bz 1133562)
  - nfsiostat: Corrected the cache hits (bz 1066314)
  - mountd: optimize libblkid usage (bz 1113204)


author: Steve Dickson <steved@redhat.com> 1.2.3-55
changelog:
  - Fixed typo in exports manpage  (bz 1152554)
  - mountd need to ignore vroots on v3 mounts (bz 1164317)
  - Added support for /etc/exports.d (bz 1123099)
  - Print error message on remount failures (bz 1026446)
  - Update mountstats to upstream version (bz 1172827)


author: Steve Dickson <steved@redhat.com> 1.2.3-56
changelog:
  - Fixed return values in mountstats (bz 1172827)
  - mountstats: Normalize the mountpoints passed on the command line (bz 1007281)


author: Steve Dickson <steved@redhat.com> 1.2.3-58
changelog:
  - Fixed pseudo exports without security flavors  (bz 1187277)
  - Made the posttrans conditional (bz 1078829)


author: Steve Dickson <steved@redhat.com> 1.2.3-60
changelog:
  - Remove SPKM-3 support from gssd (bz 1187277)
  - Enable all auth flavors on pseudofs exports (bz 1187277)


author: Steve Dickson <steved@redhat.com> 1.2.3-65
changelog:
  - nfsidmap: make sure give arguments are valid (bz 1230600)
  - nfsidmap: Display the effective NFSv4 domain name (bz 948680)
  - gssd: allow gssd and svcgssd to set the libtirpc debug level (bz 1273161)
  - gssd: select non-conventional principal (bz 1268031)
  - gssd:  Don't assume the machine account will be in uppercase (bz 1273166)
  - sm-notify: delete files in sm.bak after a NOTIFY reply (bz 1278921)


author: Steve Dickson <steved@redhat.com> 1.2.3-66
changelog:
  - svc_create: Make sure errors are logged (bz 1156647)
  - gssd: suppress error message if rpc_pipefs dir disappears (bz 1220156)
  - gssd: set $HOME to prevent recursion (bz 1223661)
  - statd: Update existing record if we receive SM_MON... (bz 1280024)
  - mountstats.man: fixed typo in man page (bz 1263968)


author: Steve Dickson <steved@redhat.com> 1.2.3-67
changelog:
  - mount.nfs: Fix fallback from tcp to udp (bz 1287894)
  - exportfs: escape path for function test_export (bz 735696)
  - nfs-utils.spec: No verification on runtime configuration files (bz 1118176)
  - idmapd: added usage statement (bz 1001439)
  - mountd: fix netgroup lookup for short hostnames (bz 1231998)
  - mountd: fix bug affecting exports of dirs with 64bit inode number (bz 994564)


author: Steve Dickson <steved@redhat.com> 1.2.3-71
changelog:
  - rpc.mountd: set libtirpc nonblocking mode to avoid DO (bz 1301581)
  - nfsidmap: Clean up other exit status cases (bz 1313603)
  - gssd: Fix inner-loop variable reuse (bz 1313090)
  - mount.nfs manpage: Add nfsmount.conf (bz 1302981)
  - nfs.init: Set exit code on restarts (bz 1205055)


author: Steve Dickson <steved@redhat.com> 1.2.3-73
changelog:
  - mountd: fix is_subdirectory to understand '/' (bz 1331207)
  - mount.nfs: Fix for the bug in v1.2.4 that breaks mount.nfs (bz 1208385)
  - mount.nfs: Removed supported flag from usage string (bz 1000990)
  - mountd.man: Update to change -P option as an alias for -p (bz 1037926)
  - exportfs: Deal with path's trailing "/" in unexportfs_parsed() (bz 1276538)
  - mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1352856)


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Kai Engert <kengert@redhat.com> - 3.11.5-1
changelog:
  - Update to 3.11.5
  - This update fixes two security vulnerabilities with SSL 2
  - Do not use -rpath link option
  - Added several unsupported tools to tools package


author: Kai Engert <kengert@redhat.com> - 3.11.5-2
changelog:
  - Fix rhbz#230545, failure to enable FIPS mode
  - Fix rhbz#220542, make NSS more tolerant of resets when in the 
    middle of prompting for a user password.


author: Kai Engert <kengert@redhat.com> - 3.11.7-2
changelog:
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5.
  - Use a workaround to avoid mozilla bug 51429.


author: Kai Engert <kengert@redhat.com> - 3.11.7-10
changelog:
  - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
    our signed libraries and protect them from modification.


author: Kai Engert <kengert@redhat.com> - 3.11.99.3-2
changelog:
  - Build against gcc 4.3.0, use workaround for bug 432146
  - Run the test suite after the build and abort on failures.


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-3
changelog:
  - nss package should own /etc/prelink.conf.d folder, rhbz#452062
  - use upstream patch to fix test suite abort


author: Kai Engert <kaie@redhat.com> - 3.12.3-3
changelog:
  - ship .chk files instead of running shlibsign at install time
  - include .chk file in softokn-freebl subpackage
  - add patch for upstream nss bug 488350


author: Kai Engert <kaie@redhat.com> - 3.12.3-7
changelog:
  - re-enable test suite
  - add patch for upstream bug 488646 and add newer paypal
    certs in order to make the test suite pass


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-5
changelog:
  - updated pem module incorporates various patches
  - fix off-by-one error when computing size to reduce memory leak. (483855)
  - fix data type to work on x86_64 systems. (429175)
  - fix various memory leaks and free internal objects on module unload. (501080)
  - fix to not clone internal objects in collect_objects().  (501118)
  - fix to not bypass initialization if module arguments are omitted. (501058)
  - fix numerous gcc warnings. (500815)
  - fix to support arbitrarily long password while loading a private key. (500180) 
  - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-10
changelog:
  - must install libnssutil3.since nss-util is untagged at the moment
  - preserve time stamps when installing various files


author: Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11
changelog:
  - split off nss-softokn and nss-util as subpackages with their own rpms
  - first phase of splitting nss-softokn and nss-util as their own packages


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-19
changelog:
  - remove patches that are now in nss-softokn and
  - remove spurious exec-permissions for nss.pc per rpmlint
  - single requires line in nss.pc.in


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-22
changelog:
  - Fix nss-config not to include nssutil
  - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-25
changelog:
  - Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
  - Add a temprary hack to nss.pc.in to unblock builds


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-29
changelog:
  - Restoring patches 2 and 7 as we still compile all sources
  - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-30
changelog:
  - Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
  - Fixed requires and buildrequires as per recommendations in spec file review


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-2
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - No rpath-link in nss-softokn-config


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - PEM module implements memory management for internal objects - 509705
  - PEM module doesn't crash when processing malformed key files - 512019


author: Elio Maldonado<emaldona@redhat.com - 3.12.4-9
changelog:
  - Install blank databases and configuration file for system shared database
  - nsssysinit queries system for fips mode before relying on environment variable


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-14
changelog:
  - Fix bug where user was prompted for a password when listing keys on an empty system database (#527048)
  - Fix setup-nsssysinit to handle more general flags formats (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.8
changelog:
  - Fix nsssysinit to set the default flags on the crypto module (#545779)
  - Fix nsssysinit to enable apps to use the system cert store, patch contributed by David Woodhouse (#546221)
  - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)
  - Sysinit requires coreutils for post install scriplet (#547067)
  - Remove redundant header from the pem module


author: Elio Maldonado <emaldona@redhat.com> - 3.12.5-7.1
changelog:
  - Updated to 3.12.5 from CVS import from Fedora 12
  - Moved blank legacy databases to the lookaside cache
  - Reenabled the full test suite
  - Retagging for a RHEL-6-test-build


author: Elio Maldonado <emaldona@redhat.com> - 3.12.5-7.3
changelog:
  - Resolves: #551784 rebuilt after nss-softokn and nss-util builds
  - this will generate the coorect nss.spec


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Appying the changes in previous log
  - Changing some BuildRequires to >= as well
  - Temporarily disabling all tests for faster builds


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-2
changelog:
  - Add suppport for pkcs8 formatted keys in the pem module
  - Add verify(not md5 size mtime) to configuration files attributes
  - Prevent nss-sysinit disabling on package upgrade
  - Create pkcs11.txt with correct permissions regardless of current umask
  - Add option to setup-nsssysinit.sh to report nss-sysinit status
  - Update test certificate which had expired


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-2
changelog:
  - Prefer user database ca cert trust settings system's ones
  - Swap internal key slot on fips mode switches


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-3
changelog:
  - Add requires for pkcs11-devel on nss-softokn-freebl devel
  - Run the test suites in check section per packaging guidelines


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-7
changelog:
  - Update expired PayPayEE.cert test certificate
  - Conditionalize some database tests on user not being root


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-1
changelog:
  - Resolves: Bug 744070 - Update to 3.13.1
  - Resolves: Bug 784674 - nss should protect against being called before nss_Init
  - Resolves: Bug 784490 - CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-4
changelog:
  - Add two needed patches
  - Resolves: rhbz#783315 - Need nss workaround for freebl bug that causes openswan to drop connections
  - Resolves: rhbz#747387 - Unable to contact LDAP Server during winsync


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-1
changelog:
  - Update to 3.13.3
  - Resolves: rhbz#798539 - Distrust MITM subCAs issued by TrustWave
  - Remove builtins-nssckbi_1_88_rtm.patch which the rebase obsoletes


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Resolves: rhbz#768669 - PEM unregistered callback causes SIGSEGV


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-3
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Use completed patch per code review


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-1
changelog:
  - Rebase to nss-3.14.0.0-1
  - Resolves: rhbz#837089
  - Update ssl-cbc-random-iv patch for new sources
  - Remove patches rendered obsoleted by rebase to 3.14
  - Add a patch to enforce no pkcs11 bypass


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-7
changelog:
  - Add dummy sources file to test for and prevent breaking rhpkg commands
  - Enable testing for 'rhpk upload' and 'rhpk new-sources' breakage such as hangs
  - Related: rhbz#837089


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-8
changelog:
  - PEM peminit returns CKR_CANT_LOCK when needed to inform caller module isn't thread safe
  - Resolves: rhbz#555019 - [PEM] invalid writes in multi-threaded libcurl based application


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-9
changelog:
  - Fix locking issue causing curl hangs and authenticate to the correct session
  - Resolves: rhbz#872838


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-12
changelog:
  - Recreate the distrust patch by backporting the upstream one
  - Resolves: rhpbz#890914 - Dis-trust TURKTRUST mis-issued *.google.com certificate


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3.14.3_RTM
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Update expired test certificates (fixed in upstream bug 852781)
  - Sync up pem module's rsawrapr.c with softoken's upstream changes for nss-3.14.3
  - Reactivate the aia tests


author: Elio Maldonado - 3.14.3-2
changelog:
  - Install sechash.h and secmodt.h which are now provided by nss-devel
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Remove unsafe -r option from commands that remove headers already shipped by nss-util and nss-softoken


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Ensure pem uses system freebl as with this update freebl brings in new API's
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Revert to accepting MD5 on digital signatures by default
  - Resolves: rhbz#918136 - nss 3.14 - MD5 hash algorithm disabled


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Syncup with uptream changes for aes gcm and ecc suiteb
  - Enable ecc support for suite b
  - Apply several upstream AES GCM fixes
  - Use the pristine nss upstream sources with ecc included
  - Export NSS_ENABLE_ECC=1 in both the build and the check sections
  - Make failed requests for unsupoprted ssl pkcs 11 bypass non fatal
  - Resolves: rhbz#882408 - NSS_NO_PKCS11_BYPASS must preserve ABI
  - Related:  rhbz#918950  - rebase nss to 3.14.3


author: Kai Engert <kaie@redhat.com> - 3.14.3-33
changelog:
  - Configure libnssckbi.so to use the alternatives system
    in order to prepare for a drop in replacement.
    Please ensure that older packages that don't use the alternatives
    system for libnssckbi.so have a smaller n-v-r.


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-34
changelog:
  - Fix race condition in cert code related to smart cards
  - Resolves: rhbz#903017 - Firefox hang when CAC/PIV smart card certificates are viewed in the certificate manager


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-37
changelog:
  - Do not hold issuer certificate handles in the crl cache
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-1
changelog:
  - Rebase to NSS_3.15.1_RTM
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x) 
  - Update patches on account of the shallow tree with the rebase to 3.15.1
  - Update the pem module sources  nss-pem-20130405.tar.bz2 with latest patches applied
  - Remove patches rendered obsolete by the nss rebase and the updated nss-pem sources
  - Enable the iquote.patch to access newly introduced types


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-2
changelog:
  - Fix relative path in %check section to prevent undetected test failures
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-4
changelog:
  - Require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-5
changelog:
  - Disable the cipher suite already run as part of the nss-softokn build
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-6
changelog:
  - Fix all.sh test for which application was last build by updating nss-versus-softoken-test.path
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Kai Engert <kaie@redhat.com> - 3.15.1-7
changelog:
  - Additional syntax fixes in nss-versus-softoken-test.patch
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-8
changelog:
  - Don't require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-9
changelog:
  - Rebuild for the pem module to link with freel from nss-softokn-3.14.3-6.el6
  - Related: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]
  - Related: rhbz#1010224 - NSS 3.15 breaks SSL in OpenLDAP clients


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-10
changelog:
  - Restore a mistakenly removed patch
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-11
changelog:
  - Fix the test for zero failures in the %check section
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-12
changelog:
  - Add a zero default value to the DISABLETEST and TEST_FAILURES checks
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-13
changelog:
  - Add zero default value to DISABLETEST check and fix the TEST_FAILURES check and reporting
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS
  - Related: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-14
changelog:
  - Add s390x and ia64 to the %define multilib_arches list used for defining alt_ckbi
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-15
changelog:
  - Using export NSS_DISABLE_HW_GCM=1 to deal with some problemmatic build systems
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-1
changelog:
  - Update to NSS_3_15_3_RTM
  - Resolves: Bug 1032472 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741
  - Resolves: Bug 1031238 - deadlock in trust domain lock and object lock


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Build nss without softoken, freebl, or util sources in the build source tree
  - Resolves: Bug 1032472 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Disable hw gcm on rhel-5 based build environments where OS lacks support
  - Rollback changes to build nss without softokn until Bug 689919 is approved
  - Cipher suite was run as part of the nss-softokn build


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1042686 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-5
changelog:
  - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-6
changelog:
  - make derEncodingsMatch work with encrypted keys
  - rename a patch, dropped the experimental moniker from it
  - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-7
changelog:
  - Fix the numbering and naming of the patches
  - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-8
changelog:
  - Install man pages for the nss security tools
  - Resolves: Bug 606022 - nss security tools lack man pages


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-9
changelog:
  - Improve support for ECDSA algorithm via pluggable ECC
  - Document the purpose of the iquote.patch
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-10
changelog:
  - Prevent users from disabling the internal crypto module
  - Resolves: Bug 1059176 - nss segfaults with opencryptoki module


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-11
changelog:
  - Resolves: Bug 689919 - build without any softoken or util sources in the tree
  - Add define-uint32.patch to deal with using older version of nss-softokn
  - Fix suboptimal test failure detection shell code in the %check section


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-2
changelog:
  - Restore use of indentation patch until another bug is resolved
  - Resolves: Bug 606022 - nss security tools lack man pages


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-3
changelog:
  - Fix pem module trashing of private keys on failed login
  - Resolves: Bug 1002205 - PEM module trashes private keys if login fails


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-5
changelog:
  - Move removal of directories to the end of the %prep section
  - Resolves: Bug 689919 - build without any softoken or util sources in the tree


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-6
changelog:
  - Update pem sources to the same ones used on rhel-7
  - Remove no longer needed patches on account of this update
  - Resolves: Bug 1002205


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-3
changelog:
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove unused indentation pseudo patch
  - require nss util 3.16.2.3
  - Restore patch for certutil man page
  - supply missing options descriptions to the man page


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-4
changelog:
  - Keep the same cipher suite order as we had in NSS_3_15_3_RTM
  - Resolves: Bug 1123092 - openldap-2.4.23-34.el6_5.1.i686 fails after updating nss to nss-3.16.1-4.el6_5.i686


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-1
changelog:
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]
  - Resolves: Bug 1131311 - rhel65 ns-slapd crash, segfault error 4 in libnss3.so in PK11_DoesMechanism at pk11slot.c:1824
  - Temporarily disable some tests until expired PayPalEE.cert is renewed


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-3
changelog:
  - Restore a patch that had been mistakenly disabled
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Fix shell syntax error in nss/tests/all.sh
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-5
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Kai Engert <kaie@redhat.com> - 3.18.0-5.3
changelog:
  - On RHEL 6.x keep the TLS version defaults unchanged.
  - Require softokn build 22 to ensure runtime compatibility.
  - Relax the requirement from pkcs11-devel to nss-softokn-freebl-devel
    to allow same or newer.
  - Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-9
changelog:
  - Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
  - Resolves: Bug 1289890


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-2
changelog:
  - Enable two additional ciphers and keep another one disabled
  - Prevent enabling extended masker key derive


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-6
changelog:
  - Fix syntax errors in patch that disables sslv2 tests
  - Resolves: Bug 1297888 - Rebase RHEL 6.8 to NSS 3.21 for Firefox 45


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-1
changelog:
  - Rebase to NSS 3.27.1
  - Remove nss-646045.patch, which is not necessary
  - Remove p-disable-md5-590364-reversed.patch,
    which is no-op here, because the patched code is removed later in
    %setup
  - Remove disable_hw_gcm.patch, which is no-op here, because the
    patched code is removed later in %setup.  Also remove
    NSS_DISABLE_HW_GCM setting, which was only required for RHEL 5
  - Add Bug-1001841-disable-sslv2-libssl.patch and
    Bug-1001841-disable-sslv2-tests.patch, which completedly disable
    EXPORT ciphersuites.  Ported from RHEL 7
  - Remove disable-export-suites-tests.patch, which is covered by
    Bug-1001841-disable-sslv2-tests.patch
  - Remove nss-ca-2.6-enable-legacy.patch, as we decided to not allow
    1024 legacy CA certificates
  - Remove ssl-server-min-key-sizes.patch, as we decided to support DH
    key size greater than 1023 bits
  - Remove nss-init-ss-sec-certs-null.patch, which appears to be no-op,
    as it clears memory area allocated with PORT_ZAlloc()
  - Remove nss-disable-sslv2-libssl.patch,
    nss-disable-sslv2-tests.patch, sslauth-no-v2.patch, and
    nss-sslstress-txt-ssl3-lower-value-in-range.patch as SSLv2 is
    already disabled in upstream
  - Remove fix-nss-test-filtering.patch, which is fixed in upstream
  - Add nss-check-policy-file.patch from Fedora
  - Install policy config in /etc/pki/nss-legacy/nss-rhel6.config


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-7
changelog:
  - Add patch to check if hash algorithms are backed by a token
  - Add patch to disable TLS_ECDHE_{RSA,ECDSA}_WITH_AES_128_CBC_SHA256,
    which have never enabled in the past


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-9
changelog:
  - Update fix_multiple_open patch to fix regression in openldap client
  - Remove pk11_genobj_leak patch, which caused crash with Firefox
  - Add comment in the policy file to preserve the last empty line
  - Disable SHA384 ciphersuites when CKM_TLS12_KEY_AND_MAC_DERIVE is not
    provided by softoken; this superseds check_hash_impl patch


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-10
changelog:
  - Add patch to fix SSL CA name leaks, taken from NSS 3.27.2 release
  - Add patch to fix bash syntax error in tests/ssl.sh
  - Add patch to remove duplicate ciphersuites entries in sslinfo.c
  - Add patch to abort selfserv/strsclnt/tstclnt on non-parsable version range
  - Build with support for SSLKEYLOGFILE


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-11
changelog:
  - Adjust the sslstress.txt filename so that it matches with the
    disableSSL2tests patch ported from RHEL 7
  - Exclude SHA384 and CHACHA20_POLY1305 ciphersuites from stress tests
  - Don't add gtests and ssl_gtests to nss_tests, unless gtests are enabled


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-1
changelog:
  - Rebase to 3.28.3
  - Remove upstreamed moz-1282627-rh-1294606.patch,
    moz-1312141-rh-1387811.patch, moz-1315936.patch, and
    moz-1318561.patch
  - Remove no longer necessary nss-duplicate-ciphers.patch
  - Disable X25519 and exclude tests using it
  - Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481)


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-0.1.beta
changelog:
  - Rebase to NSS 3.36.0 BETA
  - Remove upstreamed nss-is-token-present-race.patch
  - Revert the upstream changes that default to sql database


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-3
changelog:
  - Use the correct tarball of NSS 3.36 release
  - Ignore EncryptDeriveTest which only works with newer nss-softokn


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-5
changelog:
  - Decrease the iteration count of PKCS#12 for compatibility with Windows
  - Fix deadlock when a token is re-inserted while a client process is running


author: Daiki Ueno <dueno@redhat.com> - 3.36.0-9
changelog:
  - Backport upstream fix for CVE-2018-12384
  - Remove nss-lockcert-api-change.patch, which turned out to be a
    mistake (the symbol was not exported from libnss)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - don't try to load System.map (and spit error messages if it does not
    exist) if ps or top are not going to use it, both to speed things up
    and remove the ugly messages when they don't make sense.
  - in top, print the possible error messages using standard top SHOWMESSAGE
    (because it will be now printed out when already in terminal mode).


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - procps-2.0.7
  - integrated all patches except for signames patch, which is broken
    and unnecessary
  - See NEWS for changes between 2.0.6 and 2.0.7
  - Added patch to correctly install desktop file.  Oops.


author: Alexander Larsson <alexl@redhat.com> 2.0.7-23
changelog:
  - Fix unsigned/signed bug. Closes #60998.
  - Update threadbadhack to correctly propagate process time to the main thread.


author: Alexander Larsson <alexl@redhat.com> 2.0.7-24
changelog:
  - Fix saving of sort, fixes #32757
  - Fix printing size, fixes #48224
  - Fix float decimal point input #58163


author: Colin Walters <walters@redhat.com> 3.2.1-4
changelog:
  - Add little patch to make w/who work when getattr access
    to /proc/<pid> for the user's login process is denied


author: Alan Cox <alan@redhat.com> 3.2.1-6
changelog:
  - Removed broken SELinux patch to w
  - Added a better alternative whereby we get less data but don't fall for
    vanished processes when SELinux is running


author: Karel Zak <kzak@redhat.com> 3.2.3-6
changelog:
  - update FAQ
  - update spec description
  - fix text in .noproc patch
  - fix segv fault if cpu number exceeding 38 (#137159)


author: Karel Zak <kzak@redhat.com> 3.2.5-1
changelog:
  - update to new upstream 3.2.5
  - recreate selinux patch
  - remove errno, slabinfo21 and fullpath patches -- all fixed by upstream


author: Karel Zak <kzak@redhat.com> 3.2.5-4
changelog:
  - fix #144459 - sysctl reports error: unknown error <...> reading key '<key>'
    (now sysctl doesn't read data from write-only /proc/sys files)


author: Karel Zak <kzak@redhat.com> 3.2.5-7
changelog:
  - improve procps-3.2.5-sysctl-writeonly.patch
  - fix #161449 - "top" ignores user and system toprc
  - fix #161559 - top segfaults when resizing console
  - fix #160796 - vmstat crashes when accessing LVM partition
  - fix #161303 - 'top' failed when remove cpus


author: Karel Zak <kzak@redhat.com> 3.2.6-4
changelog:
  - fix #191493 - watch -n doesn't handle large integers properly
  - fix #186017 - top "Cpu0" line never updates on single processor machine
                  (bugfix added to the 'remcpu' patch)
  - fix #168444 - memory usage conflicts with /proc/meminfo
  - fix #174619 - top reports wrong values for CPU(s) in batch mode
  - fix #185299 - cpu steal time support


author: Karel Zak <kzak@redhat.com> 3.2.7-8
changelog:
  - remove zombie patch (needs more investigation)
  - fix #208100 - top command with '-c' option become not to display list of tasks
  - fix #199174 - top returns with exit code 1 even if no error occurs


author: Karel Zak <kzak@redhat.com> 3.2.7-10
changelog:
  - fix #212637 - sysctl using deprecated syscall
  - fix #140975 - top corrupts screen when sorting on first column


author: Karel Zak <kzak@redhat.com> 3.2.7-11
changelog:
  - fix #234546 - 'w' doesn't give correct information about what's being run.
  - fix #228870 - process `sysctl' is using deprecated sysctl
  - cleanup spec file


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-12
changelog:
  - fix #183029 - watch ignores multibyte characters
  - fix #222251 - STIME column can jitter
  - fix array overflow in sysctl


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-17
changelog:
  - fix #185994 - top "Cpu0" line never updates when using
    "Single Cpu = Off" option on single processor machine


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-18
changelog:
  - fix displaying the CPU column as integer (related #354001)
  - don't install slabtop -- there's no /proc/slabinfo


author: Tomas Smetana <tsmetana@redhat.com> 3.2.7-21
changelog:
  - rebase patches
  - clear screen in top when switching windows
  - fix #435453 - errors with man -t formatting of ps man page


author: Daniel Novotny <dnovotny@redhat.com> 3.2.7-22
changelog:
  - fix #472783 vmstat -p <partition name> not working
  - extended diskstat parameters to unsigned long to avoid overflow


author: Daniel Novotny <dnovotny@redhat.com> 3.2.7-24
changelog:
  - slabtop -o should display the info once and then exit (RHEL bug #475963)
  - added timestamp to vmstat with new option -t (#476134)


author: Daniel Novotny <dnovotny@redhat.com> 3.2.8-4
changelog:
  - fix #554674 -  vmstat command with -n and -m does not display header even once
  - fix #554721 -  procps states a bug is hit when receiving a signal
  - fix #479703 -  [RFE] Additional option for 'top'


author: Daniel Novotny <dnovotny@redhat.com> 3.2.8-5
changelog:
  - fix #564371 -  Enhance top to display in MB vs KB
  - fix #565971 -  double free or corruption in ps


author: Daniel Novotny <dnovotny@redhat.com> 3.2.8-9
changelog:
  - fix #581547 - add vmstat -w option for wider output
  - fix #583629 - pmap does not display RSS values for a pid
  - fix #583625 - document that usernames exceeding column width are substituted with user ID


author: Jan Görig <jgorig@redhat.com> 3.2.8-15
changelog:
  - fix #622389 - The sysctl command's man page doesn't describe the option -A correctly
  - minor changelog fix


author: Jan Görig <jgorig@redhat.com> 3.2.8-17
changelog:
  - fixed bugs in procps-3.2.7-ps-cgroup.patch and procps-3.2.8-pmap-smaps.patch
  - fixed memory leaks in vmstat
  - Resolves: rhbz#684031


author: Jan Görig <jgorig@redhat.com> 3.2.8-18
changelog:
  - fix #692397 - wrong formatting of ps man page
  - fix #709684 - procps/top SWAP statistics makes no sense
    patch by KOSAKI Motohiro
  - fix #690078 - replace dlopen with build time linking
    - dropped procps-3.2.7-libselinux.patch and procps-3.2.7-ps-libselinux.patch
  - fix #690078 - nullifying variables in procps-3.2.8-pmap-smaps.patch


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-20
changelog:
  - fix #701710 - vmstat does not print out correct free page count on 8TB SGI system
  - Resolves: rhbz#701710


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-21
changelog:
  - fix #736023 - Common realloc mistake: 'screen' nulled but not freed upon failure
  - Resolves: rhbz#736023


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-22
changelog:
  - fix #751475 - top displays incorrect CPU summary the first time with CPULOOP=1
  -   Patch15: procps-3.2.7-top-env-cpuloop.patch altered
  - fix #746997 - top utility can't sort by memory usage in batch mode
  - fix #766792 - No devel headers for procps
  - Resolves: rhbz#751475 rhbz#746997 rhbz#766792


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-23
changelog:
  - fix for #757734 - top: Sorting by memory usage is not documented
  - additionally introduces other missing switches in the top man-page
  - Resolves: rhbz#746997


author: Jaromir Capik <jcapik@redhat.com> 3.2.8-24
changelog:
  - fix for #851664 - vmstat -S M 1' and 'vmstat -S m 1' erronously
  - ... output constant 'si' and 'so' value of 0
  - Resolves: rhbz#851664


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-26
changelog:
  - #1089817 - Return value of pgrep is incorrect
  - #950748 - /lib64/libproc.so package both in procps and procps-devel
  - #1011216 - Backport man page fix of top utility - RES = CODE + DATA
  - #1082877 - top/man: RES - physical memory a task 'has used'->'is using'
  - #1034337 - Include man pages for openproc(), readproc() and readproctab()
  - Resolves: rhbz#1089817 rhbz#950748 rhbz#1011216 rhbz#1082877 rhbz#1034337


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-27
changelog:
  - #1060681 - ps -p cycles over all PIDs instead of just one
  - #963799 - Should shared memory be accounted in cached in free output?
  - Resolves: rhbz#1060681 rhbz#963799


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-28
changelog:
  - #1105125 - Locale dependent float delay in top and watch utilities
  - #1039013 - Include an API in RHEL to return the number of opened file descriptors for a process
  - Resolves: rhbz#1105125
  - Related: rhbz#1034337


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-31
changelog:
  - #993072 - Make the "free" command a little more human friendly
  - #1172059 - ps coredump in stat2proc()
  - #1120580 - [RFE] Have sysctl -p read info from /etc/sysctl.d
  - #1123311 - RFE: "w" should have "-n" flag to suppress reverse name resolution of IP addresses
  - #1163404 - [procps] find_elf_note invalid read if setenv has been called before libproc init
  - Resolves: rhbz#993072 rhbz#1172059 rhbz#1120580 rhbz#1123311 rhbz#1163404


author: Jaromir Capik <jcapik@redhat.com> - 3.2.8-36
changelog:
  - #1201024 - [RFE] Increase sysctl -p line size limit
  - #1246573 - typo in ps man page
  - #1251101 - Fixing human readable patch (removing trailing spaces)
  - #1284076 - [RFE] Support for thread cgroups
  - #1288208 - use of /proc/self/auxv breaks ps when running as a different euid
  - #1288497 - pmap - no sums computed for RSS and Dirty column
  - Resolves: #1201024 #1246573 #1251101 #1284076 #1288208 #1288497


author: Jan Rybar <jrybar@redhat.com> - 3.2.8-43
changelog:
  - Rework of patch 91 from 3.2.8-37, stripping removed permanently, no new option
  - Resolves: rhbz#1322111


author: Kamil Dudka <kdudka@redhat.com> - 3.2.8-45.el6_9.2
changelog:
  - fix integer overflows leading to heap overflow in file2strvec()
  - Resolves: CVE-2018-1124 CVE-2018-1126


author: Kamil Dudka <kdudka@redhat.com> - 3.2.8-45.el6_9.3
changelog:
  - drop leftover assignment in fix for CVE-2018-1124 causing a severe regression
  - Resolves: CVE-2018-1124


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.4.el6
changelog:
  - kvm-virtio-Remove-duplicate-macro-definition-for-max.-vi.patch [bz#543825]
  - kvm-virtio-console-qdev-conversion-new-virtio-serial-bus.patch [bz#543825]
  - kvm-virtio-serial-bus-Maintain-guest-and-host-port-open-.patch [bz#543825]
  - kvm-virtio-serial-bus-Add-a-port-name-property-for-port-.patch [bz#543825]
  - kvm-virtio-serial-bus-Add-support-for-buffering-guest-ou.patch [bz#543825]
  - kvm-virtio-serial-bus-Add-ability-to-hot-unplug-ports.patch [bz#543825]
  - kvm-virtio-serial-Add-a-virtserialport-device-for-generi.patch [bz#543825]
  - kvm-Move-virtio-serial-to-Makefile.hw.patch [bz#543825]
  - Resolves: bz#543825
    ([RFE] Backport virtio-serial device to qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.5.el6
changelog:
  - Remove unneeded/unsupported features: [bz#555336]
    - make default options explicit
    - remove sdl support
    - remove sb16 emulation
    - remove oss support
    - remove curses support
    - disable curl support
    - disable bluez support
    - enable -Werror
    - limit block drivers support
    - add host_cdrom block device
  - Resolves: bz#555336
    (Remove unneeded features)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.9.el6
changelog:
  - Disable -Werror again, as there are still warnings on the build
  - Related: bz#555336
    (Remove unneeded features)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.11.el6
changelog:
  - kvm-block-Introduce-BDRV_O_NO_BACKING.patch [bz#556459]
  - kvm-block-Add-bdrv_change_backing_file.patch [bz#556459]
  - kvm-qemu-img-rebase.patch [bz#556459]
  - Resolves: bz#556459
    (RFE - In-place backing file format change)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.12.el6
changelog:
  - kvm-virtio-serial-bus-Remove-guest-buffer-caching-and-th.patch [bz#543825]
  - kvm-virtio-serial-Make-sure-we-don-t-crash-when-host-por.patch [bz#543825]
  - kvm-virtio-serial-Use-MSI-vectors-for-port-virtqueues.patch [bz#543825]
  - kvm-virtio-serial-bus-Match-upstream-whitespace.patch [bz#543825]
  - Resolves: bz#543825
    ([RFE] Backport virtio-serial device to qemu)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.13.el6
changelog:
  - kvm-reduce-number-of-reinjects-on-ACK.patch [bz#557435]
  - kvm-Add-missing-newline-at-the-end-of-options-list.patch [bz#558412]
  - kvm-vnc-Fix-artifacts-in-hextile-decoding.patch [bz#558414]
  - kvm-QMP-Drop-wrong-assert.patch [bz#558415]
  - kvm-vmware_vga-Check-cursor-dimensions-passed-from-guest.patch [bz#558435]
  - kvm-virtio-pci-thinko-fix.patch [bz#558438]
  - kvm-QMP-Don-t-free-async-event-s-data.patch [bz#558465]
  - kvm-vnc_refresh-return-if-vd-timer-is-NULL.patch [bz#558466]
  - kvm-osdep.c-Fix-accept4-fallback.patch [bz#558477]
  - kvm-QMP-Emit-asynchronous-events-on-all-QMP-monitors.patch [bz#558619]
  - kvm-vnc_refresh-calling-vnc_update_client-might-free-vs.patch [bz#558846]
  - Resolves: bz#557435
    (KVM: WIN7-32bit blue screen (IMAGE_NAME:  ntkrnlmp.exe).)
  - Resolves: bz#558412
    (-help output not terminated by newline)
  - Resolves: bz#558414
    (Artifacts in hextile decoding)
  - Resolves: bz#558415
    (Assert triggers on qmp commands returning lists)
  - Resolves: bz#558435
    (vmware-svga buffer overflow copying cursor data)
  - Resolves: bz#558438
    (virtio status bits corrupted if guest deasserts bus mastering bit)
  - Resolves: bz#558465
    (Double-free of qmp async messages)
  - Resolves: bz#558466
    (Possible segfault on vnc client disconnect)
  - Resolves: bz#558477
    (Incorrect handling of EINVAL from accept4())
  - Resolves: bz#558619
    (QMP: Emit asynchronous events on all QMP monitors)
  - Resolves: bz#558846
    (fix use-after-free in vnc code)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.14.el6
changelog:
  - kvm-MCE-Fix-bug-of-IA32_MCG_STATUS-after-system-reset.patch [bz#558416]
  - kvm-Fix-CPU-topology-initialization.patch [bz#558432]
  - kvm-loader-more-ignores-for-rom-intended-to-be-loaded-by.patch [bz#558467]
  - kvm-pc-add-machine-type-for-0.12.patch [bz#558470]
  - kvm-virtio-console-Rename-virtio-serial.c-back-to-virtio.patch [bz#559089]
  - kvm-virtio-serial-bus-Fix-bus-initialisation-and-allow-f.patch [bz#559503]
  - Resolves: bz#558416
    (Machine check exception injected into qemu reinjected after every reset)
  - Resolves: bz#558432
    (CPU topology not taking effect)
  - Resolves: bz#558467
    (roms potentially loaded twice)
  - Resolves: bz#558470
    (Incorrect machine types)
  - Resolves: bz#559089
    (Rename virtio-serial.c to virtio-console.c as is upstream.)
  - Resolves: bz#559503
    (virtio-serial: fix multiple devices intialisation)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.15.el6
changelog:
  - kvm-VNC-Use-enabled-key-instead-of-status.patch [bz#549759]
  - kvm-VNC-Make-auth-key-mandatory.patch [bz#549759]
  - kvm-VNC-Rename-client-s-username-key.patch [bz#549759]
  - kvm-VNC-Add-family-key.patch [bz#549759]
  - kvm-VNC-Cache-client-info-at-connection-time.patch [bz#549759]
  - kvm-QMP-Introduce-VNC_CONNECTED-event.patch [bz#549759]
  - kvm-QMP-Introduce-VNC_DISCONNECTED-event.patch [bz#549759]
  - kvm-QMP-Introduce-VNC_INITIALIZED-event.patch [bz#549759]
  - kvm-block-avoid-creating-too-large-iovecs-in-multiwrite_.patch [bz#558730]
  - Resolves: bz#549759
    (A QMP event notification on VNC client connect/disconnect events)
  - Resolves: bz#558730
    (qemu may create too large iovecs for the kernel)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.17.el6
changelog:
  - kvm-Fix-QEMU_WARN_UNUSED_RESULT.patch [bz#560623]
  - kvm-qcow2-Fix-error-handling-in-qcow2_grow_l1_table.patch [bz#560623]
  - kvm-qcow2-Fix-error-handling-in-qcow_save_vmstate.patch [bz#560623]
  - kvm-qcow2-Return-0-errno-in-get_cluster_table.patch [bz#560623]
  - kvm-qcow2-Return-0-errno-in-qcow2_alloc_cluster_offset.patch [bz#560623]
  - kvm-block-Return-original-error-codes-in-bdrv_pread-writ.patch [bz#560623]
  - kvm-qcow2-Fix-error-handling-in-grow_refcount_table.patch [bz#560623]
  - kvm-qcow2-Improve-error-handling-in-update_refcount.patch [bz#560623]
  - kvm-qcow2-Allow-updating-no-refcounts.patch [bz#560623]
  - kvm-qcow2-Don-t-ignore-update_refcount-return-value.patch [bz#560623]
  - kvm-qcow2-Don-t-ignore-qcow2_alloc_clusters-return-value.patch [bz#560623]
  - kvm-net-Make-inet_strfamily-public.patch [bz#562181]
  - kvm-net-inet_strfamily-Better-unknown-family-report.patch [bz#562181]
  - kvm-vnc-Use-inet_strfamily.patch [bz#562181]
  - Resolves: bz#560623
    (error codes aren't always propagated up through the block layer (e.g. -ENOSPC))
  - Resolves: bz#562181
    (Small VNC related cleanup)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.18.el6
changelog:
  - kvm-roms-minor-fixes-and-cleanups.patch [bz#558818]
  - kvm-fw_cfg-rom-loader-tweaks.patch [bz#558818]
  - kvm-roms-rework-rom-loading-via-fw.patch [bz#558818]
  - kvm-pci-allow-loading-roms-via-fw_cfg.patch [bz#558818]
  - kvm-pc-add-rombar-to-compat-properties-for-pc-0.10-and-p.patch [bz#558818]
  - Resolves: bz#558818
    (rom loading)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.19.el6
changelog:
  - kvm-virtio_blk-Factor-virtio_blk_handle_request-out.patch [bz#560942]
  - kvm-virtio-blk-Fix-restart-after-read-error.patch [bz#560942]
  - kvm-virtio-blk-Fix-error-cases-which-ignored-rerror-werr.patch [bz#560942]
  - Resolves: bz#560942
    (virtio-blk error handling doesn't work reliably)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.20.el6
changelog:
  - kvm-QMP-Add-QEMU-s-version-to-the-greeting-message.patch [bz#557930]
  - kvm-QMP-Introduce-the-qmp_capabilities-command.patch [bz#557930]
  - kvm-QMP-Enforce-capability-negotiation-rules.patch [bz#557930]
  - kvm-QMP-spec-Capability-negotiation-updates.patch [bz#557930]
  - kvm-json-escape-u0000-.-u001F-when-outputting-json.patch [bz#559667]
  - kvm-json-fix-PRId64-on-Win32.patch [bz#563878]
  - kvm-qjson-Improve-debugging.patch [bz#563875]
  - kvm-Monitor-remove-unneeded-checks.patch [bz#563876]
  - kvm-QError-Don-t-abort-on-multiple-faults.patch [bz#559635]
  - kvm-QMP-Don-t-leak-on-connection-close.patch [bz#559645]
  - kvm-QMP-Emit-Basic-events.patch [bz#558623]
  - Resolves: bz#557930
    (QMP: Feature Negotiation support)
  - Resolves: bz#558623
    (QMP: Basic async events are not emitted)
  - Resolves: bz#559635
    (QMP: assertion on multiple faults)
  - Resolves: bz#559645
    (QMP: leak when a QMP connection is closed)
  - Resolves: bz#559667
    (QMP: JSON parser doesn't escape some control chars)
  - Resolves: bz#563875
    (QJSON: Improve debugging)
  - Resolves: bz#563876
    (Monitor: remove unneeded checks)
  - Resolves: bz#563878
    (QJSON: Fix PRId64 handling)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.21.el6
changelog:
  - kvm-net-add-API-to-disable-enable-polling.patch [bz#562958]
  - kvm-virtio-rename-features-guest_features.patch [bz#562958]
  - kvm-qdev-add-bit-property-type.patch [bz#562958]
  - kvm-qdev-fix-thinko-leading-to-guest-crashes.patch [bz#562958]
  - kvm-virtio-add-features-as-qdev-properties-fixup.patch [bz#562958]
  - Resolves: bz#562958
    (RFE: Support vhost net mode)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.22.el6
changelog:
  - kvm-QMP-BLOCK_IO_ERROR-event-handling.patch [bz#547501]
  - kvm-block-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-ide-Generate-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-scsi-Generate-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-virtio-blk-Generate-BLOCK_IO_ERROR-QMP-event.patch [bz#547501]
  - kvm-add-rhel-machine-types.patch [bz#558838]
  - kvm-QMP-Fix-query-balloon-key-change.patch [bz#568739]
  - Resolves: bz#547501
    (RFE: a QMP event notification for disk  I/O errors with werror/rerror flags)
  - Resolves: bz#558838
    (add rhel machine types)
  - Resolves: bz#568739
    (QMP: Fix 'query-balloon' key)


author: Glauber Costa <glommer@redhat.com> - qemu-kvm-0.12.1.2-2.23.el6
changelog:
  - kvm-ide-device-version-property.patch [bz#558835]
  - kvm-pc-add-driver-version-compat-properties.patch [bz#558835]
  - kvm-qemu-img-Fix-segfault-during-rebase.patch [bz#567602]
  - Resolves: bz#558835
    (ide/scsi drive versions)
  - Resolves: bz#567602
    (qemu-img rebase subcommand got Segmentation fault)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.24.el6
changelog:
  - kvm-path.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-hw-pc.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-slirp-misc.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-savevm.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-bochs.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-Introduce-qemu_write_full.patch [bz#567099]
  - kvm-force-to-test-result-for-qemu_write_full.patch [bz#567099]
  - kvm-block-cow.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-qcow.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-vmdk.o-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-vvfat.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-block-qcow2.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-net-slirp.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-usb-linux.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-vl.c-fix-warning-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-monitor.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-linux-user-mmap.c-fix-warnings-with-_FORTIFY_SOURCE.patch [bz#567099]
  - kvm-check-pipe-return-value.patch [bz#567099]
  - kvm-fix-qemu-kvm-_FORTIFY_SOURCE-compilation.patch [bz#567099]
  - kvm-Enable-_FORTIFY_SOURCE-2.patch [bz#567099]
  - kvm-qcow2-Fix-image-creation-regression.patch [bz#567099]
  - kvm-cow-return-errno-instead-of-1.patch [bz#567099]
  - kvm-slirp-check-system-success.patch [bz#567099]
  - kvm-qcow2-return-errno-instead-of-1.patch [bz#567099]
  - kvm-qcow-return-errno-instead-of-1.patch [bz#567099]
  - kvm-vmdk-return-errno-instead-of-1.patch [bz#567099]
  - kvm-vmdk-make-vmdk_snapshot_create-return-errno.patch [bz#567099]
  - kvm-vmdk-fix-double-free.patch [bz#567099]
  - kvm-vmdk-share-cleanup-code.patch [bz#567099]
  - kvm-block-print-errno-on-error.patch [bz#567099]
  - kvm-documentation-qemu_write_full-don-t-work-with-non-bl.patch [bz#567099]
  - kvm-virtio-serial-pci-Allow-MSI-to-be-disabled.patch [bz#567035]
  - kvm-pc-Add-backward-compatibility-options-for-virtio-ser.patch [bz#567035]
  - kvm-virtio-serial-don-t-set-MULTIPORT-for-1-port-dev.patch [bz#567035]
  - kvm-qdev-Add-a-DEV_NVECTORS_UNSPECIFIED-enum-for-unspeci.patch [bz#567035]
  - kvm-virtio-pci-Use-DEV_NVECTORS_UNSPECIFIED-instead-of-1.patch [bz#567035]
  - kvm-kbd-leds-infrastructure.patch [bz#569767]
  - kvm-kbd-leds-ps-2-kbd.patch [bz#569767]
  - kvm-kbd-leds-usb-kbd.patch [bz#569767]
  - kvm-kbd-keds-vnc.patch [bz#569767]
  - kvm-migration-Clear-fd-also-in-error-cases.patch [bz#570174]
  - Resolves: bz#567035
    (Backport changes for virtio-serial from upstream: disabling MSI, backward compat.)
  - Resolves: bz#567099
    (Allow _FORTIFY_SOURCE=2 & --enable-warning)
  - Resolves: bz#569767
    (Caps Lock the key's appearance  of guest is not synchronous as host's --view kvm with vnc)
  - Resolves: bz#570174
    (Restoring a qemu guest from a saved state file using -incoming sometimes fails and hangs)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.25.el6
changelog:
  - kvm-qemu-memory-notifiers.patch [bz#562958]
  - kvm-tap-add-interface-to-get-device-fd.patch [bz#562958]
  - kvm-add-API-to-set-ioeventfd.patch [bz#562958]
  - kvm-notifier-event-notifier-implementation.patch [bz#562958]
  - kvm-virtio-add-notifier-support.patch [bz#562958]
  - kvm-virtio-add-APIs-for-queue-fields.patch [bz#562958]
  - kvm-virtio-add-set_status-callback.patch [bz#562958]
  - kvm-virtio-move-typedef-to-qemu-common.patch [bz#562958]
  - kvm-virtio-pci-fill-in-notifier-support.patch [bz#562958]
  - kvm-vhost-vhost-net-support.patch [bz#562958]
  - kvm-tap-add-vhost-vhostfd-options.patch [bz#562958]
  - kvm-tap-add-API-to-retrieve-vhost-net-header.patch [bz#562958]
  - kvm-virtio-net-vhost-net-support.patch [bz#562958]
  - kvm-qemu-kvm-add-vhost.h-header.patch [bz#562958]
  - kvm-irqfd-support.patch [bz#562958]
  - kvm-msix-add-mask-unmask-notifiers.patch [bz#562958]
  - kvm-virtio-pci-irqfd-support.patch [bz#562958]
  - Resolves: bz#562958
    (RFE: Support vhost net mode)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.26.el6
changelog:
  - kvm-add-spice-into-the-configure-file.patch [bz#549757]
  - kvm-spice-core-bits.patch [bz#549757]
  - kvm-spice-add-keyboard.patch [bz#549757]
  - kvm-spice-add-mouse.patch [bz#549757]
  - kvm-spice-simple-display.patch [bz#549757]
  - kvm-move-x509-file-name-defines-to-qemu-x509.h.patch [bz#549757]
  - kvm-spice-tls-support.patch [bz#549757]
  - kvm-spice-configure-listening-addr.patch [bz#549757]
  - kvm-spice-add-qxl-device.patch [bz#549757]
  - Resolves: bz#549757
    (Provide SPICE support  / -spice command line argument)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.27.el6
changelog:
  - kvm-spice-add-tablet.patch [bz#574211]
  - kvm-spice-simple-display-wake-spice-server-only-when-idl.patch [bz#574212]
  - kvm-spice-qxl-switch-back-to-vga-mode-on-register-access.patch [bz#574214]
  - kvm-spice-qxl-ring-access-security-fix.patch [bz#568820]
  - kvm-vnc-support-password-expire.patch [bz#525935]
  - kvm-spice-vnc-add-__com.redhat_set_password-monitor-comm.patch [bz#525935]
  - kvm-spice-add-audio-support.patch [bz#574222]
  - kvm-spice-make-image-compression-configurable.patch [bz#574225]
  - kvm-spice-configure-channel-security.patch [bz#574225]
  - kvm-spice-configure-renderer.patch [bz#574225]
  - kvm-spice-send-connect-disconnect-monitor-events.patch [bz#558957]
  - kvm-spice-qxl-update-vga-help-text-indicating-qxl-is-the.patch [bz#574853]
  - kvm-spice-notifying-spice-when-migration-starts-and-ends.patch [bz#574849]
  - kvm-spice-add-__com.redhat_spice_migrate_info-monitor-co.patch [bz#574849]
  - Resolves: bz#525935
    (RFE: expire vnc password)
  - Resolves: bz#558957
    (A QMP event notification on SPICE client connect/disconnect events)
  - Resolves: bz#568820
    (EMBARGOED CVE-2010-0431 qemu: Insufficient guest provided pointers validation [rhel-6.0])
  - Resolves: bz#574211
    (spice: add tablet support)
  - Resolves: bz#574212
    (spice:wake spice server only when idle)
  - Resolves: bz#574214
    (qxl: switch qxl from native into vga mode on vga register access)
  - Resolves: bz#574222
    (spice: add audio support)
  - Resolves: bz#574225
    (spice: add config options)
  - Resolves: bz#574849
    (spice: client migration support)
  - Resolves: bz#574853
    (spice/qxl: add qxl to -vga help text)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.28.el6
changelog:
  - kvm-qcow2-Factor-next_refcount_table_size-out.patch [bz#567940]
  - kvm-qcow2-Rewrite-alloc_refcount_block-grow_refcount_tab.patch [bz#567940]
  - kvm-qcow2-More-checks-for-qemu-img-check.patch [bz#567940]
  - kvm-spice-virtual-machine-channel-replacement-for-remove.patch [bz#576488]
  - Resolves: bz#567940
    (qcow2 corruption with I/O error during refcount block allocation)
  - Resolves: bz#576488
    (Spice: virtio serial based device for guest-spice client communication)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.29.el6
changelog:
  - kvm-scsi-device-version-property.patch [bz#558835]
  - kvm-scsi-disk-fix-buffer-overflow.patch [bz#558835]
  - Resolves: bz#558835
    (ide/scsi drive versions)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.30.el6
changelog:
  - kvm-New-API-for-asynchronous-monitor-commands.patch [bz#574939]
  - kvm-Revert-QMP-Fix-query-balloon-key-change.patch [bz#574939]
  - kvm-virtio-Add-memory-statistics-reporting-to-the-balloo.patch [bz#574939]
  - Resolves: bz#574939
    (Memory statistics support)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.31.el6
changelog:
  - kvm-Transparent-Hugepage-Support-3.patch [bz#574525]
  - kvm-monitor-Don-t-check-for-mon_get_cpu-failure.patch [bz#574642]
  - kvm-QError-New-QERR_OPEN_FILE_FAILED.patch [bz#574642]
  - kvm-monitor-convert-do_memory_save-to-QError.patch [bz#574642]
  - kvm-monitor-convert-do_physical_memory_save-to-QError.patch [bz#574642]
  - kvm-QError-New-QERR_INVALID_CPU_INDEX.patch [bz#574642]
  - kvm-monitor-convert-do_cpu_set-to-QObject-QError.patch [bz#574642]
  - kvm-monitor-Use-QERR_INVALID_PARAMETER-instead-of-QERR_I.patch [bz#575800]
  - kvm-Revert-QError-New-QERR_INVALID_CPU_INDEX.patch [bz#575800]
  - kvm-json-parser-Fix-segfault-on-malformed-input.patch [bz#575800]
  - kvm-fix-i-format-handling-in-memory-dump.patch [bz#575800]
  - kvm-Don-t-set-default-monitor-when-there-is-a-mux-ed-one.patch [bz#575800]
  - kvm-monitor-Document-argument-type-M.patch [bz#575821]
  - kvm-QDict-New-qdict_get_double.patch [bz#575821]
  - kvm-monitor-New-argument-type-b.patch [bz#575821]
  - kvm-monitor-Use-argument-type-b-for-migrate_set_speed.patch [bz#575821]
  - kvm-monitor-convert-do_migrate_set_speed-to-QObject.patch [bz#575821]
  - kvm-monitor-New-argument-type-T.patch [bz#575821]
  - kvm-monitor-Use-argument-type-T-for-migrate_set_downtime.patch [bz#575821]
  - kvm-monitor-convert-do_migrate_set_downtime-to-QObject.patch [bz#575821]
  - kvm-block-Emit-BLOCK_IO_ERROR-before-vm_stop-call.patch [bz#575912]
  - kvm-QMP-Move-STOP-event-into-do_vm_stop.patch [bz#575912]
  - kvm-QMP-Move-RESET-event-into-qemu_system_reset.patch [bz#575912]
  - kvm-QMP-Sync-with-upstream-event-changes.patch [bz#575912]
  - kvm-QMP-Drop-DEBUG-event.patch [bz#575912]
  - kvm-QMP-Revamp-the-qmp-events.txt-file.patch [bz#575912]
  - kvm-QMP-Introduce-RTC_CHANGE-event.patch [bz#547534]
  - kvm-QMP-Introduce-WATCHDOG-event.patch [bz#557083]
  - kvm-spice-add-more-config-options.patch [bz#576561]
  - Resolves: bz#547534
    (RFE: a QMP event notification for RTC clock changes)
  - Resolves: bz#557083
    (QMP events for watchdog events)
  - Resolves: bz#574525
    (Align qemu-kvm guest memory for transparent hugepage support)
  - Resolves: bz#574642
    (QMP: Convert do_cpu_set() to QObject)
  - Resolves: bz#575800
    (Monitor: Backport a collection of fixes)
  - Resolves: bz#575821
    (QMP: Convert migrate_set_speed, migrate_set_downtime to QObject)
  - Resolves: bz#575912
    (QMP: Backport event related fixes)
  - Resolves: bz#576561
    (spice: add more config options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.32.el6
changelog:
  - kvm-Revert-spice-add-more-config-options.patch [bz#576561]
    (need to wait for spice patches to be included on spice-server)
  - Related: bz#576561
    (spice: add more config options)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.33.el6
changelog:
  - kvm-Fix-kvm_load_mpstate-for-vcpu-hot-add.patch [bz#569613]
  - kvm-qemu-kvm-enable-get-set-vcpu-events-on-reset-and-mig.patch [bz#569613]
  - kvm-Synchronize-kvm-headers.patch [bz#569613]
  - kvm-Increase-VNC_MAX_WIDTH.patch [bz#569613]
  - kvm-device-assignment-default-requires-IOMMU.patch [bz#569613]
  - kvm-Do-not-allow-vcpu-stop-with-in-progress-PIO.patch [bz#569613]
  - kvm-fix-savevm-command-without-id-or-tag.patch [bz#569613]
  - kvm-Do-not-ignore-error-if-open-file-failed-serial-dev-t.patch [bz#569613]
  - kvm-segfault-due-to-buffer-overrun-in-usb-serial.patch [bz#569613]
  - kvm-fix-inet_parse-typo.patch [bz#569613]
  - kvm-virtio-net-fix-network-stall-under-load.patch [bz#569613]
  - kvm-don-t-dereference-NULL-after-failed-strdup.patch [bz#569613]
  - kvm-net-Remove-unused-net_client_uninit.patch [bz#569613]
  - kvm-net-net_check_clients-runs-too-early-to-see-device-f.patch [bz#569613]
  - kvm-net-Fix-bogus-Warning-vlan-0-with-no-nics-with-devic.patch [bz#569613]
  - kvm-net-net_check_clients-checks-only-VLAN-clients-fix.patch [bz#569613]
  - kvm-net-info-network-shows-only-VLAN-clients-fix.patch [bz#569613]
  - kvm-net-Monitor-command-set_link-finds-only-VLAN-clients.patch [bz#569613]
  - kvm-ide-save-restore-pio-atapi-cmd-transfer-fields-and-i.patch [bz#569613]
  - kvm-cirrus-Properly-re-register-cirrus_linear_io_addr-on.patch [bz#569613]
  - Related: bz#569613
    (backport qemu-kvm-0.12.3 fixes to RHEL6)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.34.el6
changelog:
  - kvm-Monitor-Introduce-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-simple-handlers-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_cont-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_eject-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_cpu_set-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_block_set_passwd-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_getfd-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_closefd-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-pci_device_hot_add-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-pci_device_hot_remove-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_migrate-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_memory_save-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_physical_memory_save-to-cmd_new_r.patch [bz#563491]
  - kvm-Monitor-Convert-do_info-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-do_change-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-to-mon_set_password-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Convert-mon_spice_migrate-to-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Rename-cmd_new_ret.patch [bz#563491]
  - kvm-Monitor-Debugging-support.patch [bz#563491]
  - kvm-Monitor-Drop-the-print-disabling-mechanism.patch [bz#563491]
  - kvm-Monitor-Audit-handler-return.patch [bz#563491]
  - kvm-Monitor-Debug-stray-prints-the-right-way.patch [bz#563491]
  - kvm-Monitor-Report-more-than-one-error-in-handlers.patch [bz#563491]
  - Resolves: bz#563491
    (QMP: New internal error handling mechanism)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.35.el6
changelog:
  - kvm-QError-New-QERR_DEVICE_NOT_ENCRYPTED.patch [bz#563641]
  - kvm-Wrong-error-message-in-block_passwd-command.patch [bz#563641]
  - kvm-Monitor-Introduce-RFQDN_REDHAT-and-use-it.patch [bz#578493]
  - kvm-QMP-Fix-Spice-event-names.patch [bz#578493]
  - Resolves: bz#563641
    (QMP: Wrong error message in block_passwd command)
  - Resolves: bz#578493
    (QMP: Fix spice event names)
  - ksm.init: touch max_kernel_pages only if it exists [bz#561907]
  - Resolves: bz#561907
  - ksmtuned: add debug information [bz#576789]
  - Resolves: bz#576789


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.36.el6
changelog:
  - kvm-char-Remove-redundant-qemu_chr_generic_open-call.patch [bz#558236]
  - kvm-add-close-callback-for-tty-based-char-device.patch [bz#558236]
  - kvm-Restore-terminal-attributes-for-tty-based-monitor.patch [bz#558236]
  - kvm-Restore-terminal-monitor-attributes-addition.patch [bz#558236]
  - Resolves: bz#558236
    (qemu-kvm monitor corrupts tty on exit)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.37.el6
changelog:
  - kvm-balloon-Fix-overflow-when-reporting-actual-memory-si.patch [bz#578912]
  - kvm-json-parser-Output-the-content-of-invalid-keyword.patch [bz#576544]
  - Resolves: bz#576544
    (Error message doesn't contain the content of invalid keyword)
  - Resolves: bz#578912
    (Monitor: Overflow in 'info balloon')


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.38.el6
changelog:
  - kvm-read-only-Make-CDROM-a-read-only-drive.patch [bz#537164]
  - kvm-read-only-BDRV_O_FLAGS-cleanup.patch [bz#537164]
  - kvm-read-only-Added-drives-readonly-option.patch [bz#537164]
  - kvm-read-only-Disable-fall-back-to-read-only.patch [bz#537164]
  - kvm-read-only-No-need-anymoe-for-bdrv_set_read_only.patch [bz#537164]
  - kvm-read_only-Ask-for-read-write-permissions-when-openin.patch [bz#537164]
  - kvm-read-only-Read-only-device-changed-to-opens-it-s-fil.patch [bz#537164]
  - kvm-read-only-qemu-img-Fix-qemu-img-can-t-create-qcow-im.patch [bz#537164]
  - kvm-block-clean-up-bdrv_open2-structure-a-bit.patch [bz#537164]
  - kvm-block-saner-flags-filtering-in-bdrv_open2.patch [bz#537164]
  - kvm-block-flush-backing_hd-in-the-right-place.patch [bz#537164]
  - kvm-block-fix-cache-flushing-in-bdrv_commit.patch [bz#537164]
  - kvm-block-more-read-only-changes-related-to-backing-file.patch [bz#537164]
  - kvm-read-only-minor-cleanup.patch [bz#537164]
  - kvm-read-only-Another-minor-cleanup.patch [bz#537164]
  - kvm-read-only-allow-read-only-CDROM-with-any-interface.patch [bz#537164]
  - kvm-qemu-img-rebase-Add-f-option.patch [bz#580028]
  - kvm-qemu-io-Fix-return-value-handling-of-bdrv_open.patch [bz#579974]
  - kvm-qemu-nbd-Fix-return-value-handling-of-bdrv_open.patch [bz#579974]
  - kvm-qemu-img-Fix-error-message.patch [bz#579974]
  - kvm-Replace-calls-of-old-bdrv_open.patch [bz#579974]
  - Resolves: bz#537164
    (-drive arg has no way to request a read only disk)
  - Resolves: bz#579974
    (Get segmentation fault when creating qcow2 format image on block device with "preallocation=metadata")
  - Resolves: bz#580028
    ('qemu-img re-base' broken on block devices)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.39.el6
changelog:
  - kvm-virtio-blk-revert-serial-number-support.patch [bz#564101]
  - kvm-block-add-topology-qdev-properties.patch [bz#564101]
  - kvm-virtio-blk-add-topology-support.patch [bz#564101]
  - kvm-scsi-add-topology-support.patch [bz#564101]
  - kvm-ide-add-topology-support.patch [bz#564101]
  - kvm-pcnet-make-subsystem-vendor-id-match-hardware.patch [bz#580140]
  - Resolves: bz#564101
    ([RFE] topology support in the virt block layer)
  - Resolves: bz#580140
    (emulated pcnet nic in qemu-kvm has wrong PCI subsystem ID for Windows XP driver)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.40.el6
changelog:
  - cpu-model-config-1.patch [bz#569661]
  - cpu-model-config-2.patch [bz#569661]
  - cpu-model-config-3.patch [bz#569661]
  - cpu-model-config-4.patch [bz#569661]
  - Resolves: bz#569661
    (RHEL6.0 requires backport of upstream cpu model support..)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.42.el6
changelog:
  - kvm-net-remove-NICInfo.bootable-field.patch [bz#561078]
  - kvm-net-remove-broken-net_set_boot_mask-boot-device-vali.patch [bz#561078]
  - kvm-boot-remove-unused-boot_devices_bitmap-variable.patch [bz#561078]
  - kvm-check-kvm-enabled.patch [bz#580109]
  - kvm-qemu-rename-notifier-event_notifier.patch [bz#580109]
  - kvm-virtio-API-name-cleanup.patch [bz#580109]
  - kvm-vhost-u_int64_t-uint64_t.patch [bz#580109]
  - kvm-virtio-pci-fix-coding-style.patch [bz#580109]
  - kvm-vhost-detect-lack-of-support-earlier-style.patch [bz#580109]
  - kvm-configure-vhost-related-fixes.patch [bz#580109]
  - kvm-vhost-fix-features-ack.patch [bz#580109]
  - kvm-vhost-net-disable-mergeable-buffers.patch [bz#580109]
  - Resolves: bz#561078
    ("Cannot boot from non-existent NIC" when using virt-install --pxe)
  - Resolves: bz#580109
    (vhost net lacks upstream fixes)


author: Eduardo Habkost <ehabkost@redhat.com> - qemu-kvm-0.12.1.2-2.43.el6
changelog:
  - kvm-qemu-option-Make-qemu_opts_foreach-accumulate-return.patch [bz#579470]
  - kvm-qdev-Fix-exit-code-for-device.patch [bz#579470]
  - kvm-qdev-Add-help-for-device-properties.patch [bz#579470]
  - kvm-qdev-update-help-on-device.patch [bz#579470]
  - kvm-qdev-Add-rudimentary-help-for-property-value.patch [bz#579470]
  - kvm-qdev-Free-opts-on-failed-do_device_add.patch [bz#579470]
  - kvm-qdev-Improve-diagnostics-for-bad-property-values.patch [bz#579470]
  - kvm-qdev-Catch-attempt-to-attach-more-than-one-device-to.patch [bz#579470]
  - kvm-usb-Remove-disabled-monitor_printf-in-usb_read_file.patch [bz#579470]
  - kvm-savevm-Fix-loadvm-to-report-errors-to-stderr-not-the.patch [bz#579470]
  - kvm-pc-Fix-error-reporting-for-boot-once.patch [bz#579470]
  - kvm-pc-Factor-common-code-out-of-pc_boot_set-and-cmos_in.patch [bz#579470]
  - kvm-tools-Remove-unused-cur_mon-from-qemu-tool.c.patch [bz#579470]
  - kvm-monitor-Separate-default-monitor-and-current-monitor.patch [bz#579470]
  - kvm-block-Simplify-usb_msd_initfn-test-for-can-read-bdrv.patch [bz#579470]
  - kvm-monitor-Factor-monitor_set_error-out-of-qemu_error_i.patch [bz#579470]
  - kvm-error-Move-qemu_error-friends-from-monitor.c-to-own-.patch [bz#579470]
  - kvm-error-Simplify-error-sink-setup.patch [bz#579470]
  - kvm-error-Move-qemu_error-friends-into-their-own-header.patch [bz#579470]
  - kvm-error-New-error_printf-and-error_vprintf.patch [bz#579470]
  - kvm-error-Don-t-abuse-qemu_error-for-non-error-in-qdev_d.patch [bz#579470]
  - kvm-error-Don-t-abuse-qemu_error-for-non-error-in-qbus_f.patch [bz#579470]
  - kvm-error-Don-t-abuse-qemu_error-for-non-error-in-scsi_h.patch [bz#579470]
  - kvm-error-Replace-qemu_error-by-error_report.patch [bz#579470]
  - kvm-error-Rename-qemu_error_new-to-qerror_report.patch [bz#579470]
  - kvm-error-Infrastructure-to-track-locations-for-error-re.patch [bz#579470]
  - kvm-error-Include-the-program-name-in-error-messages-to-.patch [bz#579470]
  - kvm-error-Track-locations-in-configuration-files.patch [bz#579470]
  - kvm-QemuOpts-Fix-qemu_config_parse-to-catch-file-read-er.patch [bz#579470]
  - kvm-error-Track-locations-on-command-line.patch [bz#579470]
  - kvm-qdev-Fix-device-and-device_add-to-handle-unsuitable-.patch [bz#579470]
  - kvm-qdev-Factor-qdev_create_from_info-out-of-qdev_create.patch [bz#579470]
  - kvm-qdev-Hide-no_user-devices-from-users.patch [bz#579470]
  - kvm-qdev-Hide-ptr-properties-from-users.patch [bz#579470]
  - kvm-monitor-New-monitor_cur_is_qmp.patch [bz#579470]
  - kvm-error-Let-converted-handlers-print-in-human-monitor.patch [bz#579470]
  - kvm-error-Polish-human-readable-error-descriptions.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_NOT_FOUND.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_VALUE_BAD.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_VALUE_IN_USE.patch [bz#579470]
  - kvm-error-New-QERR_PROPERTY_VALUE_NOT_FOUND.patch [bz#579470]
  - kvm-qdev-convert-setting-device-properties-to-QError.patch [bz#579470]
  - kvm-qdev-Relax-parsing-of-bus-option.patch [bz#579470]
  - kvm-error-New-QERR_BUS_NOT_FOUND.patch [bz#579470]
  - kvm-error-New-QERR_DEVICE_MULTIPLE_BUSSES.patch [bz#579470]
  - kvm-error-New-QERR_DEVICE_NO_BUS.patch [bz#579470]
  - kvm-qdev-Convert-qbus_find-to-QError.patch [bz#579470]
  - kvm-error-New-error_printf_unless_qmp.patch [bz#579470]
  - kvm-error-New-QERR_BAD_BUS_FOR_DEVICE.patch [bz#579470]
  - kvm-error-New-QERR_BUS_NO_HOTPLUG.patch [bz#579470]
  - kvm-error-New-QERR_DEVICE_INIT_FAILED.patch [bz#579470]
  - kvm-error-New-QERR_NO_BUS_FOR_DEVICE.patch [bz#579470]
  - kvm-Revert-qdev-Use-QError-for-device-not-found-error.patch [bz#579470]
  - kvm-error-Convert-do_device_add-to-QError.patch [bz#579470]
  - kvm-qemu-option-Functions-to-convert-to-from-QDict.patch [bz#579470]
  - kvm-qemu-option-Move-the-implied-first-name-into-QemuOpt.patch [bz#579470]
  - kvm-qemu-option-Rename-find_list-to-qemu_find_opts-exter.patch [bz#579470]
  - kvm-monitor-New-argument-type-O.patch [bz#579470]
  - kvm-monitor-Use-argument-type-O-for-device_add.patch [bz#579470]
  - kvm-monitor-convert-do_device_add-to-QObject.patch [bz#579470]
  - kvm-error-Trim-includes-after-Move-qemu_error-friends.patch [bz#579470]
  - kvm-error-Trim-includes-in-qerror.c.patch [bz#579470]
  - kvm-error-Trim-includes-after-Infrastructure-to-track-lo.patch [bz#579470]
  - kvm-error-Make-use-of-error_set_progname-optional.patch [bz#579470]
  - kvm-error-Link-qemu-img-qemu-nbd-qemu-io-with-qemu-error.patch [bz#579470]
  - kvm-error-Move-qerror_report-from-qemu-error.-ch-to-qerr.patch [bz#579470]
  - Resolves: bz#579470
    (QMP: device_add support)


