# changelog

author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.4.1.el6]
changelog:
  - [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.5.1.el6]
changelog:
  - [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
  - [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.6.1.el6]
changelog:
  - [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
  - [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
  - [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
  - [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
  - [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
  - [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
  - [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.7.1.el6]
changelog:
  - [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.8.1.el6]
changelog:
  - [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
  - [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.9.1.el6]
changelog:
  - [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
  - [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
  - Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.10.1.el6]
changelog:
  - [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
  - Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
  - Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
  - [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
  - [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
  - [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
  - [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
  - [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
  - [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
  - [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
  - [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-696.10.2.el6]
changelog:
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.10.3.el6]
changelog:
  - [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
  - [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.12.1.el6]
changelog:
  - [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
  - [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
  - [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
  - [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.13.1.el6]
changelog:
  - [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
  - [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.13.2.el6]
changelog:
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
  - [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
  - [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.14.1.el6]
changelog:
  - [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.16.1.el6]
changelog:
  - [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
  - [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
  - [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
  - [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
  - [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
  - [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
  - [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
  - [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
  - [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
  - [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
  - [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
  - [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
  - [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.17.1.el6]
changelog:
  - [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
  - [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.1.el6]
changelog:
  - [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
  - [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
  - [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
  - [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
  - [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
  - [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
  - [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
  - [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
  - [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
  - [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
  - [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.5.el6]
changelog:
  - [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: ibrs_enabled() is expected to return > 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] Remove __cpuinitdata from some data & function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.6.el6]
changelog:
  - [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.18.7.el6]
changelog:
  - [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.19.1.el6]
changelog:
  - [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.20.1.el6]
changelog:
  - [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: ibrs_enabled() is expected to return > 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] Remove __cpuinitdata from some data & function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
  - [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
  - [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
  - [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.21.1.el6]
changelog:
  - [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.22.1.el6]
changelog:
  - [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
  - [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
  - [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
  - [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
  - [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
  - [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
  - [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
  - [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
  - [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
  - [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
  - [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.23.1.el6]
changelog:
  - [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
  - [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
  - [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
  - [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
  - [x86] retpoline/efi: Convert stub indirect calls & jumps (Waiman Long) [1543022 1535645]
  - [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
  - [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
  - [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
  - [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
  - [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
  - [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
  - [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
  - [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
  - [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
  - [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
  - [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
  - [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
  - [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
  - [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
  - [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
  - [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
  - [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
  - [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
  - [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
  - [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
  - [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
  - [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
  - [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
  - [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
  - [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
  - [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
  - [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
  - [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
  - [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
  - [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
  - [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
  - [x86] alternative: Add header guards to <asm/alternative-asm.h> (Waiman Long) [1543022 1535645]
  - [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
  - [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
  - [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
  - [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
  - [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.24.1.el6]
changelog:
  - [kernel] sched/core: Rework rq->clock update skips (Lauro Ramos Venancio) [1551475 1212959]
  - [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1551475 1212959]
  - [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1551475 1212959]
  - [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1551475 1212959]
  - [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1551475 1212959]
  - [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1550103 1532167]


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.25.1.el6]
changelog:
  - [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1557896 1535024]
  - [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1557896 1535024]
  - [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1557896 1535024]
  - [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1557896 1535024]
  - [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520818 1520817] {CVE-2017-8824}
  - [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447640 1447641] {CVE-2017-7645}
  - [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1552706 1437991]
  - [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1551471 1495167]
  - [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1551471 1495167]
  - [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1540481 1538340]
  - [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1538654 1408108]
  - [s390] fix transactional execution control register handling (Hendrik Brueckner) [1538591 1520862]
  - [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1538586 1518669]
  - [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
  - [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
  - [net] netfilter: xt_TCPMSS: add more sanity tests on tcph->doff (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
  - [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
  - [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
  - [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519627 1519626] {CVE-2017-1000410}


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.26.1.el6]
changelog:
  - [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
  - [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
  - [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] spec_ctrl/32: Enable IBRS processing on kernel entries & exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
  - [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.27.1.el6]
changelog:
  - [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
  - [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
  - [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
  - [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
  - [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
  - [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
  - [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
  - [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
  - [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
  - [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
  - [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
  - [x86] mm: Dump both kernel & user page tables at fault (Waiman Long) [1568535 1558845]
  - [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.28.1.el6]
changelog:
  - [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
  - [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-696.3.2.el6]
changelog:
  - [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}


author: Jan Stancek <jstancek@redhat.com> [2.6.32-696.29.1.el6]
changelog:
  - [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/spec_ctrl: Clean up entry code & remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
  - [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-687.el6]
changelog:
  - [netdrv] sfc: reduce severity of PIO buffer alloc failures (Jarod Wilson) [1410750]
  - [netdrv] sfc: avoid division by zero (Jarod Wilson) [1410750]
  - [netdrv] sfc: Insert multicast filters as well as mismatch filters in promiscuous mode (Jarod Wilson) [1410750]
  - [netdrv] sfc: get timer configuration from adapter (Jarod Wilson) [1410750]
  - [netdrv] sfc: warn if other functions have been reset by MCFW (Jarod Wilson) [1410750]
  - [netdrv] sfc: add output flag decoding to efx_mcdi_set_workaround (Jarod Wilson) [1410750]
  - [netdrv] sfc: get PIO buffer size from the NIC (Jarod Wilson) [1410750]
  - [netdrv] sfc: set interrupt moderation via MCDI (Jarod Wilson) [1410750]
  - [netdrv] sfc: allow asynchronous MCDI without completion function (Jarod Wilson) [1410750]
  - [netdrv] sfc: on MC reset, clear PIO buffer linkage in TXQs (Jarod Wilson) [1410750]
  - [netdrv] sfc: Downgrade EPERM messages from MCDI to debug (Jarod Wilson) [1410750]
  - [netdrv] sfc: cope with ENOSYS from efx_mcdi_get_workarounds() (Jarod Wilson) [1410750]
  - [netdrv] sfc: enable cascaded multicast filters in MCFW (Jarod Wilson) [1410750]
  - [netdrv] sfc: work around TRIGGER_INTERRUPT command not working on SFC9140 (Jarod Wilson) [1410750]
  - [dm] raid: fix transient device failure processing (Mike Snitzer) [1404425]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.5.1.el6]
changelog:
  - [security] IMA: require command line option to enabled (Eric Paris) [644636 643667]
  - [net] Fix priv escalation in rds protocol (Neil Horman) [642899 642900] {CVE-2010-3904}
  - [v4l] Remove compat code for VIDIOCSMICROCODE (Mauro Carvalho Chehab) [642472 642473] {CVE-2010-2963}
  - [kernel] tracing: do not allow llseek to set_ftrace_filter (Jiri Olsa) [631625 631626] {CVE-2010-3079}
  - [virt] xen: hold mm->page_table_lock in vmalloc_sync (Andrew Jones) [644038 643371]
  - [fs] xfs: properly account for reclaimed inodes (Dave Chinner) [642680 641764]
  - [drm] fix ioctls infoleak (Danny Feng) [626319 621437] {CVE-2010-2803}
  - [netdrv] wireless extensions: fix kernel heap content leak (John Linville) [628437 628438] {CVE-2010-2955}
  - [netdrv] niu: buffer overflow for ETHTOOL_GRXCLSRLALL (Danny Feng) [632071 632072] {CVE-2010-3084}
  - [mm] add debug checks for mapcount related invariants (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] move VM_BUG_ON inside the page_table_lock of zap_huge_pmd (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] compaction: handle active and inactive fairly in too_many_isolated (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] start_khugepaged after setting transparent_hugepage_flags (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] fix hibernate memory corruption (Andrea Arcangeli) [644037 642570]
  - [mm] ksmd wait_event_freezable (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] khugepaged wait_event_freezable (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] unlink_anon_vmas in __split_vma in case of error (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] fix memleak in copy_huge_pmd (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] fix hang on anon_vma->root->lock (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] avoid breaking huge pmd invariants in case of vma_adjust failures (Andrea Arcangeli) [642679 622327 644037 642570]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.7.1.el6]
changelog:
  - [drm] ttm: fix regression introduced in dfb4a4250168008c5ac61e90ab2b86f074a83a6c (Dave Airlie) [646994 644896]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.9.1.el6]
changelog:
  - [fs] Do not mix FMODE_ and O_ flags with break_lease() and may_open() (Harshula Jayasuriya) [648408 642677]
  - [fs] aio: check for multiplication overflow in do_io_submit (Jeff Moyer) [629450 629451] {CVE-2010-3067}
  - [net] fix info leak from kernel in ethtool operation (Neil Horman) [646727 646728] {CVE-2010-3861}
  - [net] packet: fix information leak to userland (Jiri Pirko) [649899 649900] {CVE-2010-3876}
  - [net] clean up info leak in act_police (Neil Horman) [636393 636394] {CVE-2010-3477}
  - [kernel] sys_semctl: fix kernel stack leakage (Danny Feng) [648723 648724] {CVE-2010-4083}
  - [sound] sound/pci/rme9652: prevent reading uninitialized stack memory (Stanislaw Gruszka) [648710 648715 648711 648716] {CVE-2010-4080 CVE-2010-4081}
  - [mm] Prevent Out Of Memory when changing cpuset's mems on NUMA (Larry Woodman) [651996 597127]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.10.1.el6]
changelog:
  - [fs] xfs: prevent reading uninitialized stack memory (Dave Chinner) [630808 630809] {CVE-2010-3078}
  - [net] fix rds_iovec page count overflow (Jiri Pirko) [647423 647424] {CVE-2010-3865}
  - [scsi] Fix megaraid_sas driver SLAB memory leak detected with CONFIG_DEBUG_SLAB (Shyam Iyer) [649436 633836]
  - [usb] serial/mos*: prevent reading uninitialized stack memory (Don Zickus) [648697 648698] {CVE-2010-4074}
  - [kernel] ecryptfs_uid_hash() buffer overflow (Jerome Marchand) [626320 611388] {CVE-2010-2492}
  - [sound] seq/oss - Fix double-free at error path of snd_seq_oss_open() (Jaroslav Kysela) [630554 630555] {CVE-2010-3080}
  - [virt] virtio-net: init link state correctly (Jason Wang) [653340 646369]
  - [netdrv] prevent reading uninitialized memory in hso driver (Thomas Graf) [633143 633144] {CVE-2010-3298}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.11.1.el6]
changelog:
  - [kernel] posix-cpu-timers: workaround to suppress the problems with mt exec (Oleg Nesterov) [656267 656268] {CVE-2010-4248}
  - [fs] bio: take care not overflow page count when mapping/copying user data (Danny Feng) [652530 652531] {CVE-2010-4162}
  - [net] can-bcm: fix minor heap overflow (Danny Feng) [651846 651847] {CVE-2010-3874}
  - [net] filter: make sure filters dont read uninitialized memory (Jiri Pirko) [651704 651705] {CVE-2010-4158}
  - [net] inet_diag: Make sure we actually run the same bytecode we audited (Jiri Pirko) [651268 651269] {CVE-2010-3880}
  - [v4l] ivtvfb: prevent reading uninitialized stack memory (Mauro Carvalho Chehab) [648832 648833] {CVE-2010-4079}
  - [drm] via/ioctl.c: prevent reading uninitialized stack memory (Dave Airlie) [648718 648719] {CVE-2010-4082}
  - [char] nozomi: clear data before returning to userspace on TIOCGICOUNT (Mauro Carvalho Chehab) [648705 648706] {CVE-2010-4077}
  - [serial] clean data before filling it on TIOCGICOUNT (Mauro Carvalho Chehab) [648702 648703] {CVE-2010-4075}
  - [net] af_unix: limit unix_tot_inflight (Neil Horman) [656761 656762] {CVE-2010-4249}
  - [block] check for proper length of iov entries in blk_rq_map_user_iov() (Danny Feng) [652958 652959] {CVE-2010-4163}
  - [net] Limit sendto()/recvfrom()/iovec total length to INT_MAX (Jiri Pirko) [651894 651895] {CVE-2010-4160}
  - [netdrv] mlx4: Add OFED-1.5.2 patch to increase log_mtts_per_seg (Jay Fenlason) [643815 637284]
  - [kernel] kbuild: fix external module compiling (Aristeu Rozanski) [658879 655231]
  - [net] bluetooth: Fix missing NULL check (Jarod Wilson) [655667 655668] {CVE-2010-4242}
  - [kernel] ipc: initialize structure memory to zero for compat functions (Danny Feng) [648694 648695] {CVE-2010-4073}
  - [kernel] shm: fix information leak to userland (Danny Feng) [648688 648689] {CVE-2010-4072}
  - [md] dm: remove extra locking when changing device size (Mike Snitzer) [653900 644380]
  - [block] read i_size with i_size_read() (Mike Snitzer) [653900 644380]
  - [kbuild] don't sign out-of-tree modules (Aristeu Rozanski) [655122 653507]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.12.1.el6]
changelog:
  - [netdrv] igb: only use vlan_gro_receive if vlans are registered (Stefan Assmann) [652804 660192] {CVE-2010-4263}
  - [net] core: neighbour update Oops (Jiri Pirko) [660591 658518]
  - [scsi] lpfc: Set heartbeat timer off by default (Rob Evers) [660244 655935]
  - [scsi] lpfc: Fixed crashes for BUG_ONs hit in the lpfc_abort_handler (Rob Evers) [659611 645882]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.15.1.el6]
changelog:
  - [net] bonding: prevent oopsing on calling pskb_may_pull on shared skb (Andy Gospodarek) [671342 665110]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.16.1.el6]
changelog:
  - [net] ipsec: fragment locally generated tunnel-mode IPSec6 packets as needed (Herbert Xu) [670421 661113]
  - [net] tcp: Increase TCP_MAXSEG socket option minimum to TCP_MIN_MSS (Frantisek Hrbata) [652510 652511] {CVE-2010-4165}
  - [perf] perf_events: Fix perf_counter_mmap() hook in mprotect() (Oleg Nesterov) [651672 651673] {CVE-2010-4169}
  - [md] dm mpath: revert "dm: Call blk_abort_queue on failed paths" (Mike Snitzer) [658854 636771]
  - [x86] UV: Address interrupt/IO port operation conflict (George Beshers) [662921 659480]
  - [mm] guard page for stacks that grow upwards (Johannes Weiner) [666796 630562]
  - [scsi] enable state transistions from OFFLINE to RUNNING (Mike Christie) [660590 643237]
  - [scsi] set queue limits no_cluster for stacked devices (Mike Snitzer) [662050 658293]
  - [mm] Out-of-memory under memory cgroup can call both of oom-killer-for-memcg and oom-killer-for-page-fault (Larry Woodman) [661732 592879]
  - [scsi] libfc: possible race could panic system due to NULL fsp->cmd (Mike Christie) [662049 638297]
  - [kernel] exec: copy-and-paste the fixes into compat_do_execve() paths (Oleg Nesterov) [627811 625695] {CVE-2010-4243}
  - [kernel] exec: make argv/envp memory visible to oom-killer (Oleg Nesterov) [627811 625695] {CVE-2010-4243}
  - [virt] virtio: console: Send SIGIO in case of port unplug (Amit Shah) [652720 624628]
  - [virt] virtio: console: Send SIGIO on new data arrival on ports (Amit Shah) [652720 624628]
  - [virt] virtio: console: Send SIGIO to processes that request it for host events (Amit Shah) [652720 624628]
  - [virt] virtio: console: Reference counting portdev structs is not needed (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add reference counting for port struct (Amit Shah) [662721 628805]
  - [virt] virtio: console: Use cdev_alloc() instead of cdev_init() (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add a find_port_by_devt() function (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add a list of portdevs that are active (Amit Shah) [662721 628805]
  - [virt] virtio: console: open: Use a common path for error handling (Amit Shah) [662721 628805]
  - [virt] virtio: console: remove_port() should return void (Amit Shah) [662721 628805]
  - [virt] virtio: console: Make write() return -ENODEV on hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Make read() return -ENODEV on hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Unblock poll on port hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Un-block reads on chardev close (Amit Shah) [662721 628805]
  - [virt] virtio: console: Check if portdev is valid in send_control_msg() (Amit Shah) [662721 628805]
  - [virt] virtio: console: Remove control vq data only if using multiport support (Amit Shah) [662721 628805]
  - [virt] virtio: console: Reset vdev before removing device (Amit Shah) [662721 628805]
  - [fs] Fix nfsv4 client lock reclaim behaviour (Sachin Prabhu) [661730 638269]
  - [scsi] scsi_dh_alua: Handle all states correctly (Mike Snitzer) [659610 636994]
  - [kernel] execve: improve interactivity and respond to SIGKILL with large arguments (Dave Anderson) [661731 629178]
  - [virt] xen: handle events as edge-triggered (Andrew Jones) [661737 550724]
  - [virt] xen: use percpu interrupts for IPIs and VIRQs (Andrew Jones) [661737 550724]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.17.1.el6]
changelog:
  - [s390x] kdump: allow zfcpdump to mount and write to ext4 file systems (Amerigo Wang) [661667 628676]
  - [scsi] qla2xxx: Properly set the return value in function qla2xxx_eh_abort (Chad Dupuis) [664398 635710]
  - [scsi] qla2xxx: Drop srb reference before waiting for completion (Chad Dupuis) [664398 635710]
  - [virt] KVM: VMX: Really clear cr0.ts when giving the guest ownership of the fpu (Avi Kivity) [658891 645898]
  - [virt] KVM: SVM: Initialize fpu_active in init_vmcb() (Avi Kivity) [658891 645898]
  - [virt] KVM: x86: Use unlazy_fpu() for host FPU (Avi Kivity) [658891 645898]
  - [virt] KVM: Set cr0.et when the guest writes cr0 (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: Give the guest ownership of cr0.ts when the fpu is active (Avi Kivity) [658891 645898]
  - [virt] KVM: Lazify fpu activation and deactivation (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: Allow the guest to own some cr0 bits (Avi Kivity) [658891 645898]
  - [virt] KVM: Replace read accesses of vcpu->arch.cr0 by an accessor (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: trace clts and lmsw instructions as cr accesses (Avi Kivity) [658891 645898]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.18.1.el6]
changelog:
  - [netdrv] ixgbe: make sure FCoE DDP user buffers are really released by the HW (Frantisek Hrbata) [674002 617193]
  - [netdrv] ixgbe: invalidate FCoE DDP context when no error status is available (Frantisek Hrbata) [674002 617193]
  - [netdrv] ixgbe: avoid doing FCoE DDP when adapter is DOWN or RESETTING (Frantisek Hrbata) [674002 617193]
  - [fcoe] libfc: remove tgt_flags from fc_fcp_pkt struct (Mike Christie) [666797 633915]
  - [fcoe] libfc: use rport timeout values for fcp recovery (Frantisek Hrbata) [666797 633915]
  - [fcoe] libfc: incorrect scsi host byte codes returned to scsi-ml (Mike Christie) [666797 633915]
  - [scsi] scsi_dh_alua: fix overflow in alua_rtpg port group id check (Mike Snitzer) [673978 670572]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.19.1.el6]
changelog:
  - [crypto] sha-s390: Reset index after processing partial block (Herbert Xu) [678996 626515]
  - [net] clear heap allocations for privileged ethtool actions (Jiri Pirko) [672434 672435] {CVE-2010-4655}
  - [usb] iowarrior: don't trust report_size for buffer size (Don Zickus) [672421 672422] {CVE-2010-4656}
  - [virt] virtio: console: Wake up outvq on host notifications (Amit Shah) [678558 643750]
  - [fs] inotify: stop kernel memory leak on file creation failure (Eric Paris) [656831 656832] {CVE-2010-4250}
  - [net] sctp: fix kernel panic resulting from mishandling of icmp dest unreachable msg (Neil Horman) [667028 667029] {CVE-2010-4526}
  - [mm] install_special_mapping skips security_file_mmap check (Frantisek Hrbata) [662198 662199] {CVE-2010-4346}
  - [kdump] vt-d: Handle previous faults after enabling fault handling (Takao Indoh) [678485 617137]
  - [kdump] Enable the intr-remap fault handling after local apic setup (Takao Indoh) [678485 617137]
  - [kdump] vt-d: Fix the vt-d fault handling irq migration in the x2apic mode (Takao Indoh) [678485 617137]
  - [kdump] vt-d: Quirk for masking vtd spec errors to platform error handling logic (Takao Indoh) [678485 617137]
  - [virt] virtio: console: Don't block entire guest if host doesn't read data (Amit Shah) [678562 643751]
  - [virt] virtio: console: Prevent userspace from submitting NULL buffers (Amit Shah) [678559 635535]
  - [virt] virtio: console: Fix poll blocking even though there is data to read (Amit Shah) [678561 634232]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.20.1.el6]
changelog:
  - [dvb] kernel: av7110 negative array offset (Mauro Carvalho Chehab) [672403 672404] {CVE-2011-0521}
  - [fs] sunrpc: Correct a misapplied patch (J. Bruce Fields) [678094 678146] {CVE-2011-0714}
  - [netdrv] orinoco: fix TKIP countermeasure behaviour (Stanislaw Gruszka) [667908 667909] {CVE-2010-4648}
  - [kernel] /proc/vmcore: speed up access to vmcore file (Neil Horman) [683442 672937]
  - [netdrv] cnic: Fix big endian bug (Steve Best) [678484 676640]
  - [scsi] fcoe: drop FCoE LOGO in FIP mode (Mike Christie) [683814 668114]
  - [s390x] remove task_show_regs (Danny Feng) [677854 677855] {CVE-2011-0710}
  - [ib] cm: Bump reference count on cm_id before invoking callback (Doug Ledford) [676190 676191] {CVE-2011-0695}
  - [rdma] cm: Fix crash in request handlers (Doug Ledford) [676190 676191] {CVE-2011-0695}
  - [net] bridge: Fix mglist corruption that leads to memory corruption (Herbert Xu) [678172 659421] {CVE-2011-0716}
  - [netdrv] r8169: use RxFIFO overflow workaround and prevent RxFIFO induced infinite loops (Ivan Vecera) [680080 630810]
  - [s390x] kernel: nohz vs cpu hotplug system hang (Hendrik Brueckner) [683815 668470]
  - [netdrv] cxgb3/cxgb3_main.c: prevent reading uninitialized stack memory (Doug Ledford) [633156 633157] {CVE-2010-3296}
  - [configs] redhat: added CONFIG_SECURITY_DMESG_RESTRICT option (Frantisek Hrbata) [683822 653245]
  - [kernel] restrict unprivileged access to kernel syslog (Frantisek Hrbata) [683822 653245]
  - [fs] cifs: allow matching of tcp sessions in CifsNew state (Jeff Layton) [683812 629085]
  - [fs] cifs: fix potential double put of TCP session reference (Jeff Layton) [683812 629085]
  - [fs] cifs: prevent possible memory corruption in cifs_demultiplex_thread (Jeff Layton) [683812 629085]
  - [fs] cifs: eliminate some more premature cifsd exits (Jeff Layton) [683812 629085]
  - [fs] cifs: prevent cifsd from exiting prematurely (Jeff Layton) [683812 629085]
  - [fs] CIFS: Make cifs_convert_address() take a const src pointer and a length (Jeff Layton) [683812 629085]
  - [kdump] kexec: accelerate vmcore copies by marking oldmem in /proc/vmcore as cached (Neil Horman) [683445 641315]
  - [virt] KVM: VMX: Disallow NMI while blocked by STI (Avi Kivity) [683783 616296]
  - [virt] kvm: write protect memory after slot swap (Michael S. Tsirkin) [683781 647367]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.21.1.el6]
changelog:
  - [netdrv] ixgbe: limit VF access to network traffic (Frantisek Hrbata) [684129 678717]
  - [netdrv] ixgbe: work around for DDP last buffer size (Frantisek Hrbata) [684129 678717]
  - [net] gro: reset dev and skb_iff on skb reuse (Andy Gospodarek) [688311 681970]
  - [x86] mtrr: Assume SYS_CFG[Tom2ForceMemTypeWB] exists on all future AMD CPUs (Frank Arnold) [683813 652208]
  - [virt] virtio_net: Add schedule check to napi_enable call (Michael S. Tsirkin) [684268 676579]
  - [s390x] mm: add devmem_is_allowed() for STRICT_DEVMEM checking (Hendrik Brueckner) [684267 647365]
  - [powerpc] Don't use kernel stack with translation off (Steve Best) [684266 628951]
  - [powerpc] Initialise paca->kstack before early_setup_secondary (Steve Best) [684266 628951]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.23.1.el6]
changelog:
  - [x86] Revert "[x86] mtrr: Assume SYS_CFG[Tom2ForceMemTypeWB] exists on all future AMD CPUs" (Frank Arnold) [683813 652208]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.24.1.el6]
changelog:
  - [fs] Revert "[fs] inotify: stop kernel memory leak on file creation failure" (Eric Paris) [656831 656832] {CVE-2010-4250}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.26.1.el6]
changelog:
  - [net] bnep: fix buffer overflow (Don Howard) [681315 681316] {CVE-2011-1079}
  - [scsi] aic94xx: world-writable sysfs update_bios file (Don Howard) [679306 679307]
  - [x86] tc1100-wmi: world-writable sysfs wireless and jogdial files (Don Howard) [679306 679307]
  - [x86] acer-wmi: world-writable sysfs threeg file (Don Howard) [679306 679307]
  - [mfd] ab3100: world-writable debugfs *_priv files (Don Howard) [679306 679307]
  - [v4l] sn9c102: world-wirtable sysfs files (Don Howard) [679306 679307]
  - [x86] Fix EFI pagetable to map whole memory (Takao Indoh) [670850 664364]
  - [kernel] CAP_SYS_MODULE bypass via CAP_NET_ADMIN (Phillip Lougher) [681772 681773] {CVE-2011-1019}
  - [kernel] failure to revert address limit override in OOPS error path (Dave Anderson) [659572 659573] {CVE-2010-4258}
  - [fs] xfs: zero proper structure size for geometry calls (Phillip Lougher) [677267 677268] {CVE-2011-0711}
  - [fs] xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1 (Phillip Lougher) [677267 677268] {CVE-2011-0711}
  - [tty] tty_audit: fix tty_audit_add_data live lock on audit disabled (Danny Feng) [684275 680126]
  - [kernel] proc: protect mm start_code/end_code in /proc/pid/stat (Eugene Teo) [684572 684573] {CVE-2011-0726}
  - [net] dccp oops (Eugene Teo) [682957 682958] {CVE-2011-1093}
  - [firmware] dcdbas: force SMI to happen when expected (Shyam Iyer) [683440 664832]
  - [security] ima: fix add LSM rule bug (Eric Paris) [667914 667915] {CVE-2011-0006}
  - [sound] caiaq: Fix possible string buffer overflow (Jaroslav Kysela) [678475 678476] {CVE-2011-0712}
  - [net] ixgbe: add option to control interrupt mode (Andy Gospodarek) [670114 670110 622640 637332]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.27.1.el6]
changelog:
  - [scsi] megaraid: give FW more time to recover from reset (Tomas Henzl) [695322 692673]
  - [netdrv] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [683820 669231]
  - [sound] ALSA: hda - nvhdmi: Add missing codec IDs, unify names (Jaroslav Kysela) [683817 636922]
  - [mm] pdpte registers are not flushed when PGD entry is changed in x86 PAE mode (Larry Woodman) [695256 691310]
  - [net] fix ebtables stack infoleak (Eugene Teo) [681322 681323] {CVE-2011-1080}
  - [drm] fix unsigned vs signed comparison issue in modeset ctl ioctl (Don Howard) [679927 679928] {CVE-2011-1013}
  - [pci] Enable ASPM state clearing regardless of policy (Alex Williamson) [694073 681017]
  - [pci] Disable ASPM if BIOS asks us to (Alex Williamson) [694073 681017]
  - [mm] do not keep kswapd awake for an unreclaimable zone (Johannes Weiner) [694186 633825]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.28.1.el6]
changelog:
  - [net] bonding: fix jiffy comparison issues (Andy Gospodarek) [698109 696337]
  - [drm] radeon/kms: check AA resolve registers on r300 + regression fix (Dave Airlie) [680001 680002] {CVE-2011-1016}
  - [infiniband] uverbs: Handle large number of entries in poll CQ (Eugene Teo) [688429 696137] {CVE-2011-1044 CVE-2010-4649}
  - [net] sctp: fix the INIT/INIT-ACK chunk length calculation (Thomas Graf) [695386 690743] {CVE-2011-1573}
  - [net] CAN: Use inode instead of kernel address for /proc file (Danny Feng) [664560 664561] {CVE-2010-4565}
  - [fs] inotify: fix double free/corruption of stuct user (Eric Paris) [656831 656832] {CVE-2010-4250}
  - [net] netfilter: ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689341 689342]
  - [net] bonding: change test for presence of VLANs (Jiri Pirko) [696487 683496]
  - [scsi] scsi_dh: fix reference counting in scsi_dh_activate error path (Mike Snitzer) [696889 680140]
  - [net] enable VLAN NULL tagging (Neil Horman) [683810 633571]
  - [scsi] scsi_dh: propagate SCSI device deletion (Mike Snitzer) [698114 669411]
  - [fs] inotify: stop kernel memory leak on file creation failure (Eric Paris) [656831 656832] {CVE-2010-4250}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.29.1.el6]
changelog:
  - [mm] Revert "[mm] pdpte registers are not flushed when PGD entry is changed in x86 PAE mode" (Larry Woodman) [695256 691310]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-69.el6]
changelog:
  - [mm] make stack guard page logic use vm_prev pointer (Mike Snitzer) [607859]
  - [mm] make the mlock() stack guard page checks stricter (Mike Snitzer) [607859]
  - [mm] make the vma list be doubly linked (Mike Snitzer) [607859]
  - [drm] nv50: insert a delay before fb change to prevent display engine hang (Ben Skeggs) [618225]
  - [mm] fix up some user-visible effects of the stack guard page (Mike Snitzer) [607859]
  - [net] sched: fix some kernel memory leaks (Jiri Pirko) [624637] {CVE-2010-2942}


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-70.el6]
changelog:
  - [x86] Disable AMD IOMMU by default (Matthew Garrett) [593787]
  - [netdrv] Revert "iwlwifi: disable hardware scanning by default" (Stanislaw Gruszka) [625981]
  - [s390x] kernel: fix tlb flushing vs. concurrent /proc accesses (Hendrik Brueckner) [587587]
  - [s390x] kernel: prepare mm_context_t for new tlb flush handling (Hendrik Brueckner) [587587]
  - [fs] NFS: Fix an Oops in the NFSv4 atomic open code (Jeff Layton) [625718]
  - [net] can: add limit for nframes and clean up signed/unsigned variables (Danny Feng) [625702] {CVE-2010-2959}
  - [fs] aio: bump i_count instead of using igrab (Jeff Moyer) [626595]
  - [fs] cifs: check for NULL session password (Jeff Layton) [625583]
  - [fs] cifs: fix NULL pointer dereference in cifs_find_smb_ses (Jeff Layton) [625583]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-71.el6]
changelog:
  - [fs] nfsd: initialize nfsd versions before creating svc (J. Bruce Fields) [628084]
  - [fs] nfsd: fix startup/shutdown order bug (J. Bruce Fields) [628084]
  - [security] KEYS: Fix bug in keyctl_session_to_parent() if parent has no session keyring (David Howells) [627808] {CVE-2010-2960}
  - [security] KEYS: Fix RCU no-lock warning in keyctl_session_to_parent() (David Howells) [627808] {CVE-2010-2960}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.1.1.el6]
changelog:
  - [security] Make kernel panic in FIPS mode if modsign check fails (David Howells) [633865 625914]
  - [virt] Guests on AMD with CPU type 6 and model >= 8 trigger errata read of MSR_K7_CLK_CTL (Jes Sorensen) [632292 629066]
  - [x86] UV: use virtual efi on SGI systems (George Beshers) [633964 627653]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.2.1.el6]
changelog:
  - [misc] make compat_alloc_user_space() incorporate the access_ok() (Xiaotian Feng) [634465 634466] {CVE-2010-3081}
  - [x86] kernel: fix IA32 System Call Entry Point Vulnerability (Xiaotian Feng) [634451 634452] {CVE-2010-3301}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.3.1.el6]
changelog:
  - [block] prevent merges of discard and write requests (Mike Snitzer) [639412 637805]
  - [drm] nouveau: correct INIT_DP_CONDITION subcondition 5 (Ben Skeggs) [638973 636678]
  - [drm] nouveau: enable enhanced framing only if DP display supports it (Ben Skeggs) [638973 636678]
  - [drm] nouveau: fix required mode bandwidth calculation for DP (Ben Skeggs) [638973 636678]
  - [drm] nouveau: disable hotplug detect around DP link training (Ben Skeggs) [638973 636678]
  - [drm] nouveau: set DP display power state during DPMS (Ben Skeggs) [638973 636678]
  - [mm] remove "madvise" from possible /sys/kernel/mm/redhat_transparent_hugepage/enabled options (Larry Woodman) [636116 634500]
  - [netdrv] cxgb3: don't flush the workqueue if we are called from the workqueue (Doug Ledford) [634973 631547]
  - [netdrv] cxgb3: deal with fatal parity error status in interrupt handler (Doug Ledford) [634973 631547]
  - [netdrv] cxgb3: now that we define fatal parity errors, make sure they are cleared (Doug Ledford) [634973 631547]
  - [netdrv] cxgb3: Add define for fatal parity error bit manipulation (Doug Ledford) [634973 631547]
  - [virt] Emulate MSR_EBC_FREQUENCY_ID (Jes Sorensen) [633966 629836]
  - [virt] Define MSR_EBC_FREQUENCY_ID (Jes Sorensen) [633966 629836]
  - [kernel] initramfs: Fix initramfs size calculation (Hendrik Brueckner) [637087 626956]
  - [kernel] initramfs: Generalize initramfs_data.xxx.S variants (Hendrik Brueckner) [637087 626956]
  - [drm] radeon/kms: fix sideport detection on newer rs880 boards (Dave Airlie) [634984 626454]
  - [block] switch s390 tape_block and mg_disk to elevator_change() (Mike Snitzer) [633864 632631]
  - [block] add function call to switch the IO scheduler from a driver (Mike Snitzer) [633864 632631]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.4.1.el6]
changelog:
  - [scsi] fcoe: set default FIP mode as FIP_MODE_FABRIC (Mike Christie) [641457 636233]
  - [virt] KVM: Fix fs/gs reload oops with invalid ldt (Avi Kivity) [639884 639885] {CVE-2010-3698}
  - [drm] i915: prevent arbitrary kernel memory write (Jerome Marchand) [637690 637691] {CVE-2010-2962}
  - [scsi] libfc: adds flogi retry in case DID is zero in RJT (Mike Christie) [641456 633907]
  - [kernel] prevent heap corruption in snd_ctl_new() (Jerome Marchand) [638485 638486] {CVE-2010-3442}
  - [scsi] lpfc: lpfc driver oops during rhel6 installation with snapshot 12/13 and emulex FC (Rob Evers) [641907 634703]
  - [fs] ext4: Always journal quota file modifications (Eric Sandeen) [641454 624909]
  - [mm] fix split_huge_page error like mapcount 3 page_mapcount 2 (Andrea Arcangeli) [641258 640611]
  - [block] Fix pktcdvd ioctl dev_minor range check (Jerome Marchand) [638088 638089] {CVE-2010-3437}
  - [drm] ttm: Fix two race conditions + fix busy codepaths (Dave Airlie) [642045 640871]
  - [drm] Prune GEM vma entries (Dave Airlie) [642043 640870]
  - [virt] ksm: fix bad user data when swapping (Andrea Arcangeli) [641459 640579]
  - [virt] ksm: fix page_address_in_vma anon_vma oops (Andrea Arcangeli) [641460 640576]
  - [net] sctp: Fix out-of-bounds reading in sctp_asoc_get_hmac() (Jiri Pirko) [640461 640462] {CVE-2010-3705}
  - [mm] Move vma_stack_continue into mm.h (Mike Snitzer) [641483 638525]
  - [net] sctp: Do not reset the packet during sctp_packet_config() (Jiri Pirko) [637681 637682] {CVE-2010-3432}
  - [mm] vmstat incorrectly reports disk IO as swap in (Steve Best) [641458 636978]
  - [scsi] fcoe: Fix NPIV (Neil Horman) [641455 631246]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-62.el6]
changelog:
  - [drm] Revert matroxfb support for G200EV chip (Peter Bogdanovic) [604830]
  - [drm] i915: more DP/eDP backport fixes (Dave Airlie) [615058]
  - [drm] correctly update connector DPMS status in drm_fb_helper (Dave Airlie) [615058]
  - [x86] ACPI/PM: Move ACPI video resume to a PM notifier (Dave Airlie) [615058]
  - [virt] x86: preset lpj values when on VMware (Zachary Amsden) [617390]
  - [virt] Revert "vhost-net: utilize PUBLISH_USED_IDX feature" (Michael S. Tsirkin)
  - [virt] Revert "virtio: put last seen used index into ring itself" (Michael S. Tsirkin) [616503]
  - [virt] Revert "virtio: net: Remove net-specific advertising of PUBLISH_USED feature" (Michael S. Tsirkin) [616503]
  - [virt] vhost: max s/g to match qemu (Michael S. Tsirkin) [619002]
  - [kernel] sched: Fix set_cpu_active() in cpu_down() (Danny Feng) [620807]
  - [dm] separate device deletion from dm_put (Mike Snitzer) [619199]
  - [dm] prevent access to md being deleted (Mike Snitzer) [619199]
  - [dm] ioctl: release _hash_lock between devices in remove_all (Mike Snitzer) [619199]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-63.el6]
changelog:
  - [fs] ext4: protect io completion lists with locking (Eric Sandeen) [621660]
  - [trace] Packport new mm tracepoint Documentation to RHEL6 (Larry Woodman) [618305]
  - [virt] KVM: Trace exception injection (Gleb Natapov) [616427]
  - [s390x] qeth: Clear mac_bits field when switching between l2/l3 (Hendrik Brueckner) [621333]
  - [net] ethtool: Fix potential kernel buffer overflow in ETHTOOL_GRXCLSRLALL (Jiri Pirko) [608953] {CVE-2010-2478}
  - [infiniband] Update QLogic QIB InfiniBand driver to version OFED 1.5.2 (Jay Fenlason) [572401]
  - [fs] update RWA_MASK, READA and SWRITE to match the corresponding BIO_RW_ bits (Jeff Moyer) [621693]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-64.el6]
changelog:
  - [kernel] Revert "[kernel] sched: Fix a race between ttwu() and migrate_task()" (Matthew Garrett) [620883]
  - [fs] btrfs: fix checks in BTRFS_IOC_CLONE_RANGE (Eugene Teo) [617003] {CVE-2010-2537 CVE-2010-2538}
  - [kernel] Makefile.build: make KBUILD_SYMTYPES work again (Don Zickus) [617749]
  - [netdrv] iwlwifi: disable hardware scanning by default (Stanislaw Gruszka) [593566]
  - [scsi] Revert: qla2xxx: Propogate transport disrupted status for cable pull conditions for faster failover (Chad Dupuis) [622041]
  - [drm] radeon: Don't limit vram size to aperture size (Matthew Garrett) [622039]
  - [fs] xfs: don't walk AGs that can't hold inodes (Dave Chinner) [621044]
  - [mmc] add Ricoh e822 support (Stanislaw Gruszka) [619900]
  - [scsi] mvsas: fix hot plug handling and IO issues (David Milburn) [616178]
  - [dm] mpath: enable discard support (Mike Snitzer) [619196]
  - [block] update request stacking methods to support discards (Mike Snitzer) [619196]
  - [dm] stripe: enable discard support (Mike Snitzer) [619196]
  - [dm] stripe: optimize sector division (Mike Snitzer) [619196]
  - [dm] stripe: move sector translation to a function (Mike Snitzer) [619196]
  - [dm] error: return error for discards (Mike Snitzer) [619196]
  - [dm] delay: enable discard support (Mike Snitzer) [619196]
  - [dm] zero: silently drop discards (Mike Snitzer) [619196]
  - [dm] split discard requests on target boundaries (Mike Snitzer) [619196]
  - [dm] use dm_target_offset macro (Mike Snitzer) [619196]
  - [dm] factor out max_io_len_target_boundary (Mike Snitzer) [619196]
  - [dm] use common __issue_target_request for flush and discard support (Mike Snitzer) [619196]
  - [dm] rename map_info flush_request to target_request_nr (Mike Snitzer) [619196]
  - [dm] remove the DM_TARGET_SUPPORTS_DISCARDS feature flag (Mike Snitzer) [619196]
  - [dm] introduce num_discard_requests in dm_target structure (Mike Snitzer) [619196]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-65.el6]
changelog:
  - [fs] ext4: fix discard failure detection (Eric Sandeen) [608731]
  - [x86] Avoid potential NULL dereference in pcc-cpufreq (Matthew Garrett) [623768]
  - [scsi] bfa: vport create/delete fix (Rob Evers) [619226]
  - [net] tcp: fix crash in tcp_xmit_retransmit_queue (Jerome Marchand) [618386]
  - [build] Skip depmod when installing to non-standard INSTALL_MOD_PATH (Jon Masters) [609170]
  - [sound] disable NVIDIA HDMI PCI device for Lenovo T410 (Jaroslav Kysela) [605742]
  - [scsi] increase flush timeout (Mike Christie) [605322]
  - [x86] local_irq_save/restore when issuing IPI in early bootup (Prarit Bhargava) [602823]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-66.el6]
changelog:
  - [netdrv] be2net: maintain multicast packet count in driver (Ivan Vecera) [621287]
  - [scsi] hpsa: don't use doorbel reset (Tomas Henzl) [612486]
  - [x86] Fix the kdump kernel OOMs caused by passthrough mode setting (Bhavna Sarathy) [624059]
  - [acpi] Force "pci=noacpi" on HP xw9300 (Prarit Bhargava) [615276]
  - [mm] Revert mm-vmstat-Actively-update-vmstat-counters-in-low-memory-situations (Larry Woodman) [622328]
  - [x86] Run EFI in physical mode to enable kdump on EFI-booted system (Takao Indoh) [593111]
  - [fs] ext4: protect inode bitmap clearing w/ spinlock (Eric Sandeen) [623666]
  - [scsi] libfc: call fc_remote_port_chkready under the host lock (Mike Christie) [623786]
  - [x86] Ensure that we provide per-cpu ACPI support (Matthew Garrett) [623874]
  - [fs] ext4: consolidate in_range() definitions (Eric Sandeen) [621829]
  - [fs] ext4: fix NULL pointer dereference in tracing (Eric Sandeen) [619013]
  - [block] O_DIRECT: fix the splitting up of contiguous I/O (Jeff Moyer) [622504]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-67.el6]
changelog:
  - [x86] acpi: Update battery information on notification 0x81 (Matthew Garrett) [606388]
  - [mm] fix up some user-visible effects of the stack guard page (Mike Snitzer) [607859]
  - [mm] fix page table unmap for stack guard page properly (Mike Snitzer) [607859]
  - [x86] don't send SIGBUS for kernel page faults (Mike Snitzer) [607859]
  - [mm] fix missing page table unmap for stack guard page failure case (Mike Snitzer) [607859]
  - [mm] keep a guard page below a grow-down stack segment (Mike Snitzer) [607859]
  - [fs] xfs: fix untrusted inode number lookup (Dave Chinner) [624860]
  - [kernel] init, sched: Fix race between init and kthreadd (Gleb Natapov) [624329]
  - [net] Fix IGMP3 report parsing (Aristeu Rozanski) [621431]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-68.el6]
changelog:
  - [virt] xen pvhvm: don't start xenbus w/out pvhvm (Andrew Jones) [624665]
  - [virt] xen pvhvm: don't unplug emulated devs w/out pvhvm (Andrew Jones) [625460]
  - [virt] xen pvhvm: export xen_pv_hvm_enable (Andrew Jones) [625460]
  - [fs] ext4: fix one more tracing oops (Eric Sandeen) [619013]
  - [drm] Provide for HDMI output on NVIDIA GPUs (John Feeney) [619877]
  - [netdrv] iwlwifi: disable aspm by default (John Linville) [611075]
  - [x86] acpi: Update battery information on notification 0x81 (Matthew Garrett) [606388]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.1.1.el6]
changelog:
  - [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1574592]
  - [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1574592]
  - [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1574592]
  - [x86] microcode: Sanitize per-cpu microcode reloading interface (Prarit Bhargava) [1574592]
  - [x86] virt_spec_ctrl: Set correct host SSDB value for AMD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Fix missing void (Waiman Long) [1584356] {CVE-2018-3639}
  - [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584356] {CVE-2018-3639}
  - [uapi] prctl: Add force disable speculation (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
  - [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Show IBPB in the Spectre_v2 sysfs file (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] pti: Check MSR_IA32_ARCH_CAPABILITIES for Meltdown vulnearability (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] pti: Fix kexec warning on debug kernel (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] kvm/fpu: Enable eager FPU restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] always enable eager FPU by default (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Load xsave pointer *after* initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fix 32-bit signal frame handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Always restore_xinit_state() when use_eager_cpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Rename drop_init_fpu() to fpu_reset_state() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fix math_state_restore() race with kernel_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fold __drop_fpu() into its sole user (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't abuse drop_init_fpu() in flush_thread() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Introduce restore_init_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Document user_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Change xstateregs_get()/set() to use ->xsave.i387 rather than ->fxsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Always allow FPU in interrupt if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Introduce per-cpu in_kernel_fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Change math_error() to use unlazy_fpu(), kill (now) unused save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Merge simd_math_error() into math_error() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't reset thread.fpu_counter (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Allow FPU to be used at interrupt time even with eagerfpu (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387.c: Initialize thread xstate only on CPU0 only once (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] kvm: fix kvm's usage of kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] rhel: initialize scattered CPUID features early (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: make eagerfpu= boot param tri-state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: enable eagerfpu by default for xsaveopt (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: decouple non-lazy/eager fpu restore from xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: use non-lazy fpu restore for processors supporting xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: drop_fpu() before restoring new state from sigframe (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Unify signal handling code paths for x86 and x86_64 kernels (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: drop the fpu state during thread exit (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] signals: ia32_signal.c: add __user casts to fix sparse warnings (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Consolidate inline asm routines for saving/restoring fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] signal: Cleanup ifdefs and is_ia32, is_x32 (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu/xsave: Keep __user annotation in casts (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] debug: Add KERN_<LEVEL> to bare printks, convert printks to pr_<level> (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] extable: Remove open-coded exception table entries in arch/x86/include/asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: Split up <asm/i387.h> into exported and internal interfaces (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: Uninline the generic FP helpers that we expose to kernel modules (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: (DON'T ACTUALLY) support lazy restore of FPU state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: use 'restore_fpu_checking()' directly in task switching code (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: fix up some fpu_counter confusion (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: re-introduce FPU state preloading at context switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move TS_USEDFPU flag from thread_info to task_struct (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move AMD K7/K8 fpu fxsave/fxrstor workaround from save to restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: do not preload FPU state at task switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: don't ever touch TS_USEDFPU directly, use helper functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move TS_USEDFPU clearing out of __save_init_fpu and into callers (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: fix x86-64 preemption-unsafe user stack save/restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: math_state_restore() isn't called from asm (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fix potentially dangerous trailing '; ' in #defined values/expressions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-32, fpu: Fix FPU exception handling on non-SSE systems (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Fix common misspellings (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] kvm: Initialize fpu state in preemptible context (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-32, fpu: Rewrite fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Remove PSHUFB_XMM5_* macros (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Remove unnecessary ifdefs from i387 code. (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Simplify constraints for fxsave/fxtstor (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Fix cs value in convert_from_fxsr() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Disable preemption when using TS_USEDFPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge __save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge tolerant_fwait() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge fpu_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Disable xsave in i387 emulation mode (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Make xstate_enable_boot_cpu() __init, protect on CPU 0 (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Add __init attribute to setup_xstate_features() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Make init_xstate_buf static (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Check cpuid level for XSTATE_CPUID (0x0d) (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Introduce xstate enable functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Do not include asm/i387.h in asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Avoid unnecessary __clear_user() and xrstor in signal handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Cleanup return codes in check_for_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Separate fpu and xsave initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Move boot cpu initialization to xsave_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Revert "[x86] fpu: change save_i387_xstate() to rely on unlazy_fpu()" (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Revert "[x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal()" (Paolo Bonzini) [1589047] {CVE-2018-3665}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.2.1.el6]
changelog:
  - [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
  - [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
  - [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
  - [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
  - [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
  - [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
  - [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.1.el6]
changelog:
  - [infiniband] ib/iser: Rewrite bounce buffer code path (Don Dutile) [1585312]
  - [sound] alsa: pcm: prevent UAF in snd_pcm_info (CVE-2017-0861) (Jaroslav Kysela) [1565188] {CVE-2017-0861}
  - [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550176] {CVE-2018-7566}
  - [sound] alsa: seq: Fix use-after-free at creating a port (Jaroslav Kysela) [1503383] {CVE-2017-15265}
  - [sound] alsa: seq: Make ioctls race-free (Jaroslav Kysela) [1537452] {CVE-2018-1000004}
  - [mm] reduce total RAM held in per-CPU pvecs by flushing them on compound/THP page arrival (Larry Woodman) [1575819]
  - [usb] acm: fix the computation of the number of data bits (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [misc] spectre: fix gadgets found by smatch scanner, part 2 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] kvm/vmx: Remove barrier_nospec() in slot_largepage_idx() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kvm] Remove memory alias support (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [misc] spectre: fix gadgets found by smatch scanner (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] posix-timers: Protect posix clock array access against speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[] (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [ipc] sysvipc/sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [documentation] Document array_index_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Include <asm/barrier.h> dependency (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589032] {CVE-2018-3693}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.4.1.el6]
changelog:
  - [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}
  - [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}
  - [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
  - [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
  - [kvm] VMX: Fix host GDT.LIMIT corruption (CVE-2018-10301) (Paolo Bonzini) [1601851] {CVE-2018-10901}
  - [x86] Initialize __max_smt_threads to 1 (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: detect SMT disabled by BIOS (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Add topology_max_smt_threads() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix incorrect error return code in vm_insert_pfn() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Initialize the vmx_l1d_flush_pages' content (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Don't flush L1D cache if VMENTER_L1D_FLUSH_NEVER (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Take out the unused nosmt module parameter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm/dump_pagetables: Add a check_l1tf debugfs file (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries aganst L1TF for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Make flush_l1d visible in /proc/cpuinfo (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [Documentation] Add section about CPU vulnerabilities (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs, kvm: Introduce boot-time control of L1TF mitigations (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Expose SMT control init function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Allow runtime control of L1D flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Serialize L1D flush parameter setter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Move l1tf setup function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: Handle EPT disabled state proper (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Drop L1TF MSR list approach (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] litf: Introduce vmx status variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Online siblings when SMT control is turned on (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add find_msr() helper function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush logic (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Make indirect call speculation safe (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Enable acknowledge interupt on vmexit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D MSR based flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush algorithm (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add module argument for L1TF mitigation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] x86: Introducing kvm_x86_ops VM init/destroy hooks (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Boot HT siblings at least once (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] Revert "x86/apic: Ignore secondary threads if nosmt=force" (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix up pte->pfn conversion for PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpufeatures: Add detection of L1D cache flush support. (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Extend 64bit swap file size limit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] apic: Ignore secondary threads if nosmt=force (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/intel: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/topology: Provide detect_extended_topology_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/common: Provide detect_ht_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Remove the pointless detect_ht() call (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Remove the pointless CPU printout (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Provide knobs to control SMT (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Split do_cpu_down() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Provide topology_smt_supported() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] smp: Provide topology_is_primary_thread() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Move the l1tf function and define pr_fmt properly (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Limit swap file size to MAX_PA/2 (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Add sysfs reporting for l1tf (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect PROT_NONE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries against L1TF (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Change order of offset/type in swap entry (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Fix incorrect vulnerabilities files function prototypes (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Export the internal __cpu_bugs variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] intel-family.h: Add GEMINI_LAKE SOC (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Fix swap entry comment and macro (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Move swap offset/type up in PTE to work around erratum (Waiman Long) [1593376] {CVE-2018-3620}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.5.1.el6]
changelog:
  - [s390] dasd: fix IO error for newly defined devices (Hendrik Brueckner) [1574448]
  - [s390] dasd: fix failing path verification (Hendrik Brueckner) [1581684]
  - [s390] qeth: on channel error, reject further cmd requests (Hendrik Brueckner) [1562009]
  - [s390] qdio: fix access to uninitialized qdio_q fields (Hendrik Brueckner) [1581685]
  - [powerpc] stf-barrier: update (rfi_)enabled_flush_types as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update debugfs as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update handle_ssbd() as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update stf_barrier_enable() as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: add cpu_show_spec_store_bypass() as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: add comment as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: move code from setup_64.c to security.c as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: move code from setup.h to security_features.h as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update fallback routine as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update entry barrier slot as in upstream (Gustavo Duarte) [1585299]
  - [x86] Add host_initiated check in reading MSR_AMD64_VIRT_SPEC_CTRL (Wei Huang) [1608576]
  - [x86] KVM: pass host_initiated to functions that read MSRs (Wei Huang) [1608576]
  - [fs] gfs2: Special-case rindex for gfs2_grow (Robert S Peterson) [1384184]
  - [fs] Revert "[fs] gfs2: Special case the rindex in gfs2_write_alloc_required()" (Robert S Peterson) [1384184]
  - [net] ip: process in-order fragments efficiently (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] ip: add helpers to process in-order fragments faster. (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] ipv6: defrag: drop non-last frags smaller than min mtu (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] ip: use rb trees for IP frag queue. (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] ip: discard IPv4 datagrams with overlapping segments. (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] net: modify skb_rbtree_purge to return the truesize of all purged skbs. (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] net: speed up skb_rbtree_purge() (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] skbuff: Rename RHEL6 version of skb_tree_purge() to skb_tree_purge_sk() (Stefano Brivio) [1613925] {CVE-2018-5391}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.6.1.el6]
changelog:
  - [x86] set __max_smt_threads for 1 core systems (Prarit Bhargava) [1623255]
  - [md] dm rq: fix a race condition in rq_completed() (Ming Lei) [1574568]
  - [scsi] scsi_transport_fc: Hold queue lock while calling blk_run_queue_async() (Ming Lei) [1574568]
  - [block] Avoid scheduling delayed work on a dead queue (Ming Lei) [1574568]
  - [block] Avoid that request_fn is invoked on a dead queue (Ming Lei) [1574568]
  - [block] Let blk_drain_queue() caller obtain the queue lock (Ming Lei) [1574568]
  - [block] Rename queue dead flag (Ming Lei) [1574568]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.7.1.el6]
changelog:
  - [s390] cio: update chpid descriptor after resource accessibility event (Hendrik Brueckner) [1574471]
  - [s390] af_iucv: enable control sends in case of SEND_SHUTDOWN (Hendrik Brueckner) [1559048]
  - [s390] qeth: repair SBAL elements calculation (Hendrik Brueckner) [1559021]
  - [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
  - [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
  - [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]
  - [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
  - [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.8.1.el6]
changelog:
  - [block] fix warning on lockdep_assert_held(q->queue_lock) (Ming Lei) [1624747]
  - [kvm] vmx: fix vmwrite to invalid VMCS (Radim Krcmar) [1602011]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.10.1.el6]
changelog:
  - [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
  - [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
  - [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
  - [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
  - [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
  - [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
  - [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
  - [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
  - [fs] seq_file: always clear m->count when we free m->buf (Rodrigo Freire) [1632434]
  - [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
  - [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
  - [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.11.1.el6]
changelog:
  - [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
  - [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.12.1.el6]
changelog:
  - [x86] vDSO: Don't generate retpoline for indirect call (Waiman Long) [1638552]
  - [fs] cifs: fix reparse point/symlink breakage (Leif Sahlberg) [1636484]
  - [scsi] qla2xxx: Mask off Scope bits in retry delay (Himanshu Madhani) [1588133]
  - [net] tcp: make tcp_retransmit_timer a no-op on empty write queue (Paolo Abeni) [1585892]
  - [kernel] sched/sysctl: Check user input value of sysctl_sched_time_avg (Lauro Ramos Venancio) [1579128]
  - [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] hugetlbfs: switch to inode_init_owner() (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] udf: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ubifs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ramfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ext4: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ext3: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ext2: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] btrfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] vfs: Add inode uid,gid,mode init helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [s390] kernel: adapt to changed CPU vulnerabilities function prototypes (Hendrik Brueckner) [1625381]
  - [s390] detect etoken facility (Hendrik Brueckner) [1625381]
  - [s390] Correct register corruption in critical section cleanup (Hendrik Brueckner) [1625381]
  - [s390] remove indirect branch from do_softirq_own_stack (Hendrik Brueckner) [1625381]
  - [s390] move spectre sysfs attribute code (Hendrik Brueckner) [1625381]
  - [s390] kernel: use expoline for indirect branches (Hendrik Brueckner) [1625381]
  - [s390] ftrace: use expoline for indirect branches (Hendrik Brueckner) [1625381]
  - [s390] move expoline assembler macros to a header (Hendrik Brueckner) [1625381]
  - [s390] correct module section names for expoline code revert (Hendrik Brueckner) [1625381]
  - [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Oleksandr Natalenko) [1670328]
  - [perf] Fix a race between ring_buffer_detach() and ring_buffer_attach() (Jiri Olsa) [1589340]
  - [perf] Fix mmap() accounting hole (Jiri Olsa) [1627672]
  - [perf] Fix perf mmap bugs (Jiri Olsa) [1627672]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.14.2.el6]
changelog:
  - [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.15.1.el6]
changelog:
  - [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
  - [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
  - [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
  - [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
  - [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
  - [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
  - [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
  - [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
  - [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.15.2.el6]
changelog:
  - [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
  - [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
  - [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.15.3.el6]
changelog:
  - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
  - [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
  - [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
  - [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
  - [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.16.1.el6]
changelog:
  - [virt] xenbus: Fix memory leak on release (Vitaly Kuznetsov) [1661666]
  - [fs] dcache: fix locking around setting DCACHE_SHRINKING flag (Miklos Szeredi) [1672269]
  - [x86] KVM: SVM: Selective cr0 intercept (Wei Huang) [1655873]
  - [x86] KVM: SVM: Restore unconditional cr0 intercept under npt (Wei Huang) [1655873]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.17.1.el6]
changelog:
  - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
  - [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
  - [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
  - [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
  - [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
  - [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
  - [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
  - [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.18.1.el6]
changelog:
  - [virt] xenbus: don't look up transaction IDs for ordinary writes (Vitaly Kuznetsov) [1663262]
  - [virt] xenbus: don't BUG() on user mode induced condition (Vitaly Kuznetsov) [1663262]
  - [virt] xenbus: Add proper handling of XS_ERROR from Xenbus for transactions (Vitaly Kuznetsov) [1663262]
  - [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638193] {CVE-2018-17972}
  - [crypto] salsa20 - fix blkcipher_walk API usage (Bruno Eduardo de Oliveira Meneguele) [1543984]
  - [mm] vmscan: do not loop on too_many_isolated for ever (Rafael Aquini) [1658254]
  - [x86] spec_ctrl: Don't report the use of retpoline on Skylake as vulnerable (Waiman Long) [1666102]
  - [mm] try harder to allocate vmemmap blocks (Rafael Aquini) [1591394]
  - [v4l] dvb: revert spectre v1 mitigation (Josh Poimboeuf) [1647975]
  - [fs] binfmt_misc.c: do not allow offset overflow (Bill O'Donnell) [1710149]
  - [x86] pti: Don't use PCID and INVPCID in x86-32 (Waiman Long) [1702782]
  - [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664197] {CVE-2019-5489}
  - [x86] spec: Move retp_compiler() inline function to bugs.c (Waiman Long) [1722185]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.18.2.el6]
changelog:
  - [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
  - [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-747.el6]
changelog:
  - [fs] gfs2: Check for the end of metadata in trunc_dealloc (Robert S Peterson) [1559928]
  - [fs] gfs2: clear journal live bit in gfs2_log_flush (Robert S Peterson) [1559928]
  - [netdrv] vmxnet3: fix tx data ring copy for variable size (Neil Horman) [1530378]
  - [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1559386]
  - [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1554631]
  - [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags & wrapper (Mauricio Oliveira) [1554631]
  - [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1554630]
  - [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1554630]
  - [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1554630]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-748.el6]
changelog:
  - [mm] fold arch_randomize_brk into ARCH_HAS_ELF_RANDOMIZE (Bhupesh Sharma) [1494380]
  - [mm] brk: fix min_brk lower bound computation for COMPAT_BRK (Bhupesh Sharma) [1494380]
  - [mm] split ET_DYN ASLR from mmap ASLR (Bhupesh Sharma) [1494380]
  - [s390] redefine randomize_et_dyn for ELF_ET_DYN_BASE (Bhupesh Sharma) [1494380]
  - [mm] expose arch_mmap_rnd when available (Bhupesh Sharma) [1494380]
  - [s390] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [s390] mmap: randomize mmap base for bottom up direction (Bhupesh Sharma) [1494380]
  - [powerpc] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [x86] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: create Kconfig variable for PIE randomization (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: PIE: make PF_RANDOMIZE check comment more accurate (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: fix PIE execution with randomization disabled (Bhupesh Sharma) [1494380]
  - [acpi] acpica: Support calling _REG methods within ACPI interpreter (Lenny Szubowicz) [1522849]
  - [acpi] acpica: Function to test if ACPI interpreter already entered (Lenny Szubowicz) [1522849]
  - [acpi] acpica: Function to test if ACPI mutex held by this thread (Lenny Szubowicz) [1522849]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-749.el6]
changelog:
  - [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1561788]
  - [powerpc] Move default security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1561788]
  - [lib] seq: Add seq_buf_printf() (Mauricio Oliveira) [1561788]
  - [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1561786]
  - [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1562725]
  - [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1562725]
  - [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1562725]
  - [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1562725]
  - [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1562725]
  - [x86] entry: Remove extra argument in call instruction (Waiman Long) [1562552]
  - [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1557562 1562552]
  - [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1558845]
  - [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1558845]
  - [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1558845]
  - [x86] mm: Dump both kernel & user page tables at fault (Waiman Long) [1558845]
  - [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1558845]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-750.el6]
changelog:
  - [fs] fuse: fix punching hole with unaligned end (Miklos Szeredi) [1387473] {CVE-2017-15121}
  - [documentation] kdump: fix documentation about panic_on_warn to match rhel6 (Pingfan Liu) [1555196]
  - [fs] Provide sane values for nlink (Leif Sahlberg) [1554342]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-751.el6]
changelog:
  - [md] dm thin: fix regression that caused discards to be disabled if passdown was (Mike Snitzer) [1569377]
  - [s390] configs: enable auto expoline support (Hendrik Brueckner) [1554959]
  - [s390] correct nospec auto detection init order (Hendrik Brueckner) [1554959]
  - [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1554959]
  - [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1554959]
  - [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1554959]
  - [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1554959]
  - [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1554959]
  - [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1554959]
  - [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1554959]
  - [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1554959]
  - [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1554959]
  - [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1554959]
  - [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1554959]
  - [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1568241]
  - [net] sctp: verify size of a new chunk in _sctp_make_chunk() (Stefano Brivio) [1551908] {CVE-2018-5803}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-752.el6]
changelog:
  - [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
  - [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
  - [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
  - [net] security: export security_sk_clone (Marcelo Leitner) [1571357]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-753.el6]
changelog:
  - [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
  - [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
  - [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.el6]
changelog:
  - [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
  - [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
  - [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Clean up entry code & remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
  - [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
  - [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
  - [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
  - [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
  - [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.19.1.el6]
changelog:
  - [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1732107]
  - [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1728931]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.20.1.el6]
changelog:
  - [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
  - [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.21.1.el6]
changelog:
  - [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
  - [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.24.1.el6]
changelog:
  - [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
  - [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
  - [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
  - [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
  - [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
  - [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
  - [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
  - [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.24.2.el6]
changelog:
  - [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
  - [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
  - [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
  - [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
  - [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.25.1.el6]
changelog:
  - [kvm] KVM: VMX: Set VMENTER_L1D_FLUSH_NOT_REQUIRED if !X86_BUG_L1TF (Waiman Long) [1733760]
  - [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746799] {CVE-2019-14821}
  - [virt] KVM: MMIO: Lock coalesced device when checking for available entry (Bandan Das) [1746799] {CVE-2019-14821}
  - [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1749512]
  - [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1749512]
  - [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1749512]
  - [security] KEYS: prevent creating a different user's keyrings (David Howells) [1537371]
  - [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
  - [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
  - [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
  - [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
  - [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.26.1.el6]
changelog:
  - [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1764544]
  - [drm] vmwgfx: refuse to hibernate if we have any resources v2 (Kenneth Yin) [1748195]
  - [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1739948]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.27.1.el6]
changelog:
  - [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.28.1.el6]
changelog:
  - [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
  - [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
  - [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
  - [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
  - [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
  - [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
  - [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
  - [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.29.1.el6]
changelog:
  - [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
  - [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
  - [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
  - binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
  - [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.2.el6]
changelog:
  - [kvm] VMX: Fix host GDT.LIMIT corruption (CVE-2018-10301) (Paolo Bonzini) [1601851] {CVE-2018-10901}
  - [x86] Initialize __max_smt_threads to 1 (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: detect SMT disabled by BIOS (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Add topology_max_smt_threads() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix incorrect error return code in vm_insert_pfn() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Initialize the vmx_l1d_flush_pages' content (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Don't flush L1D cache if VMENTER_L1D_FLUSH_NEVER (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Take out the unused nosmt module parameter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm/dump_pagetables: Add a check_l1tf debugfs file (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries aganst L1TF for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Make flush_l1d visible in /proc/cpuinfo (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [Documentation] Add section about CPU vulnerabilities (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs, kvm: Introduce boot-time control of L1TF mitigations (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Expose SMT control init function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Allow runtime control of L1D flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Serialize L1D flush parameter setter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Move l1tf setup function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: Handle EPT disabled state proper (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Drop L1TF MSR list approach (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] litf: Introduce vmx status variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Online siblings when SMT control is turned on (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add find_msr() helper function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush logic (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Make indirect call speculation safe (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Enable acknowledge interupt on vmexit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D MSR based flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush algorithm (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add module argument for L1TF mitigation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] x86: Introducing kvm_x86_ops VM init/destroy hooks (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Boot HT siblings at least once (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] Revert "x86/apic: Ignore secondary threads if nosmt=force" (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix up pte->pfn conversion for PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpufeatures: Add detection of L1D cache flush support. (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Extend 64bit swap file size limit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] apic: Ignore secondary threads if nosmt=force (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/intel: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/topology: Provide detect_extended_topology_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/common: Provide detect_ht_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Remove the pointless detect_ht() call (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Remove the pointless CPU printout (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Provide knobs to control SMT (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Split do_cpu_down() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Provide topology_smt_supported() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] smp: Provide topology_is_primary_thread() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Move the l1tf function and define pr_fmt properly (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Limit swap file size to MAX_PA/2 (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Add sysfs reporting for l1tf (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect PROT_NONE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries against L1TF (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Change order of offset/type in swap entry (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Fix incorrect vulnerabilities files function prototypes (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Export the internal __cpu_bugs variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] intel-family.h: Add GEMINI_LAKE SOC (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Fix swap entry comment and macro (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Move swap offset/type up in PTE to work around erratum (Waiman Long) [1593376] {CVE-2018-3620}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.3.el6]
changelog:
  - [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
  - [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.4.el6]
changelog:
  - [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.5.el6]
changelog:
  - [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.30.1.el6]
changelog:
  - [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
  - [netdrv] bonding: don't set slave->link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
  - [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.30.2.el6]
changelog:
  - x86/speculation: Provide SRBDS late microcode loading support (Waiman Long)
  - [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
  - [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.31.1.el6]
changelog:
  - [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
  - [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
  - [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
  - [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
  - [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
  - [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/asm: Add a patch_site macro & helpers for patching instructions (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
  - [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
  - [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
  - [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
  - [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
  - [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.32.1.el6]
changelog:
  - [wireless] libertas: make lbs_ibss_join_existing() return error code on rates overflow (Jarod Wilson) [1776569]
  - [wireless] libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held (Jarod Wilson) [1776569]
  - [wireless] libertas: Fix two buffer overflows at parsing bss descriptor (Jarod Wilson) [1776569]
  - [security] keys: Protect request_key() against a type with no match function (Patrick Talbert) [1433220] {CVE-2017-2647}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.34.1.el6]
changelog:
  - [mm] mm: prevent get_user_pages() from overflowing page refcount (Aristeu Rozanski) [1705003]
  - [mm] mm/hugetlb.c: __get_user_pages ignores certain follow_hugetlb_page errors (Aristeu Rozanski) [1705003]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.6.2.el6]
changelog:
  - [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
  - [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-754.6.3.el6]
changelog:
  - [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
  - [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
  - [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-745.el6]
changelog:
  - [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1550599] {CVE-2017-5754}
  - [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548432] {CVE-2017-13166}
  - [scsi] lpfc: Fix crash from memory alloc at interrupt level with GFP_KERNEL set (Dick Kennedy) [1540706]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-746.el6]
changelog:
  - [dm] fix race between dm_get_from_kobject() and __dm_destroy() (Mike Snitzer) [1551999] {CVE-2017-18203}
  - [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1557562]
  - [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1550599] {CVE-2017-5754}
  - [ipmi] pick up slave address from SMBIOS on an ACPI device (Tony Camuso) [1484525]
  - [ipmi] fix watchdog timeout set on reboot (Tony Camuso) [1484525]
  - [ipmi] fix watchdog hang on panic waiting for ipmi response (Tony Camuso) [1484525]
  - [ipmi] use smi_num for init_name (Tony Camuso) [1484525]
  - [ipmi] move platform device creation earlier in the initialization (Tony Camuso) [1484525]
  - [ipmi] clean up printks (Tony Camuso) [1484525]
  - [ipmi] cleanup error return (Tony Camuso) [1484525]
  - [md] raid0: apply base queue limits *before* disk_stack_limits (Xiao Ni) [1417294]
  - [md] raid0: update queue parameter in a safer location (Xiao Ni) [1417294]
  - [md] raid0: conditional mddev->queue access to suit dm-raid (Xiao Ni) [1417294]
  - [md] raid0: access mddev->queue (request queue member) conditionally because it is not set when accessed from dm-raid (Xiao Ni) [1417294]


author: Dave Young <dyoung@redhat.com> - 2.0.0-236
changelog:
  - Warn when dumping to encrypted devices, resolve bug 743551
  - Correct the meaning of BOOTPROTO=none, resolve bug 805803


author: Dave Young <dyoung@redhat.com> - 2.0.0-242
changelog:
  - add s390x support in firstboot, resolve bug 805040
  - deal with s390x threshold in firstboot, resolve bug 805040


author: Dave Young <dyoung@redhat.com> - 2.0.0-249
changelog:
  - improve warning message for remain size checking, resolve bug 857282
  - propagate_ssh_key remove selinux flips for ssh key generation, resolve bug 816467
  - random feeding fix, resolve bug 825640
  - do not print error when there's no vendor-model-type, resolve bug 801344, bug 628610


author: Dave Young <dyoung@redhat.com> - 2.0.0-250
changelog:
  - mkdumprd: Support line mode terminals for s390x, resolve bug 818645
  - Fix kdump documentation about vmcore-dmesg handling, resolve bug 850623


author: Dave Young <dyoung@redhat.com> - 2.0.0-252
changelog:
  - remove hardcode for including ata_generic driver, resolve bug 820474
  - mkdumprd: Fix /dev/mapper/* links not being created by default, resolve bug 874832
  - vmcore-dmesg: Determine correct machine pointer size, resolve bug 871292


author: Dave Young <dyoung@redhat.com> - 2.0.0-254
changelog:
  - blacklist IB module mlx4_core.ko, resolve bug 876891
  - create bonding device dynamiclly, resolve bug 859824


author: Dave Young <dyoung@redhat.com> - 2.0.0-255
changelog:
  - make the SCSI dump target work with Linux on System z, resolve bug 870957
  - extract Linux on System z device init into separate functions, resolve bug 870957
  - remove hwclock calls for Linux on System z, resolve bug 821376


author: Baoquan He <bhe@redhat.com> -2.0.0-258.1
changelog:
  - kexec-tools: Map network devices based on MAC address
  - kexec-tools: Allow mkdumprd modules blacklist to be overwritten by extra_modules


author: Baoquan He <bhe@redhat.com> - 2.0.0-264
changelog:
  - kexec-tools.spec: turn on the dynamic and lzo build for makedumpfile, resolve bug 825476
  - kexec-tools.spec: Validate patches related to makedumpfile, resolve bug 825476


author: Baoquan He <bhe@redhat.com> - 2.0.0-265
changelog:
  - add selinux relabel when service startup, resolve bug 797231
  - add bzip2-devel and lzo-devel to BuildRequires, resolve bug 825476


author: Baoquan He <bhe@redhat.com> - 2.0.0-266
changelog:
  - kdump.conf.5: Modify 2 spelling errors
  - kexec-tools: Only remap network once when cluster configured
  - tools: Clean up /etc/iface_map after remapping the devices
  - kernel cmdline: Remove hugepage allocations
  - mkdumprd: change default disk_timeout to 180 seconds
  - kdump.conf: Tell user to specify module without ".ko" suffix
  - kdump.conf: add some missing supported configurations from kdump.conf.5
  - kdump.conf: change line columns to 80
  - Raw dump: use /sbin/blockdev to flush out block device buffers
  - Update translation file for firstboot
  - Update translation file for firstboot


author: Baoquan He <bhe@redhat.com> - 2.0.0-267
changelog:
  - mkdumprd: improve error message when e2fsprogs is missing, resolves bug 975642
  - mkdumprd: improve error message when btrfs-progs is missing, resolves bug 810494
  - Document mkdumprd option --allow-missing, resolves bug 951035


author: Baoquan He <bhe@redhat.com> - 2.0.0-269
changelog:
  - add snappy build, resolves bug 902147
  - This patch fixes the parsing of inline comments in config file, resolves bug 967427


author: Baoquan He <bhe@redhat.com> - 2.0.0-271
changelog:
  - makedumpfile: wrong cyclic buffer size recalculation causes bitmap data corruption, resolves bug 1009207


author: Baoquan He <bhe@redhat.com> - 2.0.0-272
changelog:
  - Allow multipathd to configure multipath map before adding partition devmappings, resolves bug 906601
  - mkdumprd: use timeout_count as a global variable, resolves bug 906601
  - mkdumprd: add support for SCM devices available for Linux on System z, resolves bug 903529
  - kdump.init: Run multiple kdump init instances one by one in serial order, resolves bug 963948


author: Baoquan He <bhe@redhat.com> - 2.0.0-273
changelog:
  - Fix max_mapnr issue on system has over 44-bit addressing, resolves bug 1008543
  - makedumpfile: fails phys_base calculation on sadump format, resolves bug 1010103


author: Baoquan He <bhe@redhat.com> - 2.0.0-274
changelog:
  - Add fence_kdump support for generic clusters, resolves bug 1083938
  - Add function setup_cluster_nodes_and_options, resolves bug 1083938
  - Add function get_pcs_cluster_nodes, resolves bug 1083938
  - Add function is_pcs_fence_kdump, resolves bug 1083938


author: Baoquan He <bhe@redhat.com> - 2.0.0-276
changelog:
  - kexec-tools: non-default routes are ignored by kdump, resolves bug 806992
  - kdumpctl: Pass disable_cpu_apicid to kexec of capture kernel, resolves bug 1061480
  - use -p option with fsck instead of -y, resolves bug 1055679
  - kdump doesn't work properly with nic that has "-" in it's name, resolves bug 874529
  - fix makedumpfile report and debug messages not shown, resolves bug 1016451


author: Baoquan He <bhe@redhat.com> - 2.0.0-277
changelog:
  - mkdumprd: add support for s390 DASD FBA type device, resolves bug 1022871
  - Check status of fsck before trying to mount a file system, resolves bug 1055672


author: Baoquan He <bhe@redhat.com> - 2.0.0-278
changelog:
  - Stop maximizing the bitmap buffer to reduce the risk of OOM, resolves bug 1114153
  - Move counting pfn_memhole for cyclic mode, resolves bug 1114153
  - Remove the 1st bitmap buffer from the ELF path in cyclic mode, resolves bug 1114153
  - Fix free bitmap_buffer_cyclic error, resolves bug 1114153
  - Introduce the mdf_pfn_t type, resolves bug 1114153


author: Baoquan He <bhe@redhat.com> - 2.0.0-279
changelog:
  - mkdurmpd: Issue sync after saving vmcore-dmesg.txt, resolves bug 1123061
  - mkdumprd: Fix check condition of selinux status, resolves bug 1122880
  - mkdumprd: fix no such file or directory warning in 2nd kernel on s390, resolves bug 1122883
  - Support for eppic language as a subpackage, resolves bug 823561
  - update .gitignore/sources for eppic_030413.tar.gz, resolves bug 823561
  - makedumpfile: Fix Makefile for eppic_makedumpfile.so build, resolves bug 823561


author: Baoquan He <bhe@redhat.com> - 2.0.0-280
changelog:
  - mkdumprd: wait for multipath device node, resolves bug 1128248
  - mkdumprd: clean up found logic in wait_for_multipath_devices(), resolves bug 1128248
  - use "getent ahostsv4 host-name" to get ipv4 address of a host name, resolves bug 1127138


author: Baoquan He <bhe@redaht.com> - 2.0.0-281
changelog:
  - starting kdump service after network, local fs and remote fs, resolves bug 1132300
  - Add sample eppic scripts to kexec-tools-eppic package, resolves bug 1104837
  - Convert leftover "getent hosts" to "getent ahostsv4", resolves bug 1142666
  - mkdurmpd: Fix the syntax error on the condition of fips inexistence, resolves bug 1131945


author: Baoquan He <bhe@redhat.com> - 2.0.0-283
changelog:
  - makedumpfile: Exclude unnecessary hugepages. resolves bug 1068674
  - makedumpfile: Vtop address translation support for vmalloc region in PPC64 arch. resolves bug 1068674
  - makedumpfile: Initialize for vmalloc address translation support in PPC64 arch. resolves bug 1068674
  - makedumpfile: Get rid of overrun adjustments. resolves bug 1068674
  - makedumpfile: Generic handling of multi-page exclusions. resolves bug 1068674


author: Baoquan He <bhe@redhat.com> - 2.0.0-286
changelog:
  - update kexec-kdump-howto.txt, resolves bug 949376
  - mkdumprd: Load the mlx4_core module if it is needed in the 2nd kernel, resolves bug 1099589
  - nfs dump will fail when netdev has different device name in ifcfg-$dev, resolves bug 1005141 
  - udev-rules: Restart kdump service on cpu ADD/REMOVE events, resolves bug 1113276


author: Baoquan He <bhe@redhat.com> - 2.0.0-290
changelog:
  - mkdumprd: Fix shell error that kdump uses the variable without initializing, resolves bug 903510
  - mkdumprd: Fix incorrect variant MNTIMAGE, resolves bug 1294327


author: Baoquan He <bhe@redhat.com> - 2.0.0-291
changelog:
  - fadump/ppc64: update spec file, resolves bug 1254923
  - fadump/ppc64: add firmware-assisted dump howto document, resolves bug 1254923
  - fadump/ppc64: handle default action in fadump mode, resolves bug 1254923
  - fadump/ppc64: modify kdump init script to capture vmcore to local filesystems, resolves bug 1254923
  - fadump/ppc64: modify kdump script to stop firmware assisted dump, resolves bug 1254923
  - fadump/ppc64: modify kdump script to start the firmware assisted dump, resolves bug 1254923
  - fadump/ppc64: modify status routine to check for firmware-assisted dump, resolves bug 1254923


author: Baoquan He <bhe@redhat.com> - 2.0.0-292
changelog:
  - mkdumprd: Enhance kdump to handle multiport network card properly resolves bug 1284605
  - mkdumprd: Create special partition name for NVME device resolves bug 1235374
  - Don't handle vnet<n> used by VMs on RHEV host resolves bug 1283191
  - mkdumprd: hush does not support parenthesis in ko parameter directly resolves bug 1028298
  - kdump.init: fix a typo resolves bug 1295283


author: Baoquan He <bhe@redhat.com> - 2.0.0-293
changelog:
  - mkdumprd: Remove partition seperater as well while dropping partition number in device name, resolves bug 1228799


author: Baoquan He <bhe@redhat.com> - 2.0.0-298
changelog:
  - b0e4c65 Use file offset in initialize_mmap(), resolves bug 1314158
  - 85f20f9 mkdumprd: redirect stderr of bmc-watchdog to /dev/null resolves bug 1315270


author: Baoquan He <bhe@redhat.com> - 2.0.0-299
changelog:
  - mkdumprd: Use a flexible way to create rtc device, resolves bug 1315148
  - hyper-v: do not exclude hv_utils module, resolves bug 1228774


author: Baoquan He <bhe@redhat.com> - 2.0.0-300.2
changelog:
  mkdumprd: Allow findmodule() to add dependency for lsmod output, resolves bug 1403699
  mkdumprd: Kill useless code in moduledep(), resolves bug 1403699


author: Baoquan He <bhe@redhat.com> - 2.0.0-301
changelog:
  - mkdumprd: Allow findmodule() to add dependency for lsmod output, resolves bug 1343282
  - mkdumprd: Kill useless code in moduledep(), resolves bug 1343282
  - mkdumprd: skip logical interfaces for bridge, resolves bug 1356615


author: Baoquan He <bhe@redhat.com> - 2.0.0-303
changelog:
  - mkdumprd: Remove load_selinux_policy script, resolves bug 1323086
  - mkdumprd: pass the value of DEV_ID to kdump, resolves bug 1322802


author: Baoquan He <bhe@redhat.com> - 2.0.0-306
changelog:
  - mkdumprd: fix env for mdadm, resolves bug 1404263
  - mkdumprd: create node for partition within RAID device, resolves bug 1404263
  - mkdumprd: refactor block_mknod(), resolves bug 1404263
  - uefi: Pass efi_smbios_addr to 2nd kernel, resolves bug 1404552


author: Pingfan Liu <piliu@redhat.com> - 2.0.0-309
changelog:
  - mkdumprd: Fix mkdumprd fail when cluster node uses ipv6
  - mkdumprd: fix the search criteria for detection of RAID devices


author: David Howells <dhowells@redhat.com> - 1.2-1
changelog:
  - Remove syscall manual pages (section 2) to man-pages package [BZ 203582]
  - Don't write to serial port in debugging script


author: David Howells <dhowells@redhat.com> - 1.3-1
changelog:
  - Fix compiler warnings in request-key.
  - Expose the kernel function to get a key's security context.
  - Expose the kernel function to set a processes keyring onto its parent.
  - Move libkeyutils library version to 1.3.


author: David Howells <dhowells@redhat.com> - 1.4-5
changelog:
  - Make keyctl show handle deeply nested keyrings [BZ 1075652].
  - The key serial ID field displayed by keyctl show may be up to 10 digits [BZ 1075652].
  - Make keyctl padd & co. handle binary data containing NUL chars [BZ 1075652].
  - The input buffer for keyctl padd & co. should be 1MB-1 in size [BZ 1075652].


author: Michal Nowak <mnowak@redhat.com> - 5.0-3
changelog:
  - reshaping to multiple subpackages based on font type/purpose
  - license uncertainity is solved; licence field is set according
    to information from .ttf files read via gnome-font-viewer


author: Karsten Hopp <karsten@redhat.com> 0.6.0-2
changelog:
  - add endian info for s390, s390x
  - kipiplugin_acquireimages.so is not available as kdegraphics is compiled
    without sane support on s390x


author: Lukas Tinkl <ltinkl@redhat.com> - 2.0-0.11.20080213svn
changelog:
  - Resolves: #599387 - RPMdiff run failed for package kmid-2.0-0.10.20080213svn.el6
    (mark the -common subpackage as noarch)


author: Lukas Tinkl <ltinkl@redhat.com> - 2.0-0.12.20080213svn
changelog:
  - Resolves: #599387 - RPMdiff run failed for package kmid-2.0-0.10.20080213svn.el6
    (fix aliasing issues)


author: Lukas Tinkl <ltinkl@redhat.com> - 2.0-0.13.20080213svn
changelog:
  - Resolves: #599387 - RPMdiff run failed for package kmid-2.0-0.10.20080213svn.el6
    (fix aliasing issues the proper way using cmake)


author: Lukas Tinkl <ltinkl@redhat.com> - 2.0-0.14.20080213svn
changelog:
  - Resolves: #599387 - RPMdiff run failed for package kmid-2.0-0.10.20080213svn.el6
    (fix strange cmake syntax)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.1-2
changelog:
  - BR: webkitpart-devel
  - use %find_lang --all-names --with-kde
  - Requires: kdebase4%{_?isa} >= %version


author: Lukas Tinkl <ltinkl@redhat.com> - 4.3.3-4
changelog:
  - Resolves: #605069 - RPMdiff run failed for package konq-plugins-4.3.3-3.el6
    (create a noarch doc subpackage to fix multilib issues)


author: Lukas Tinkl <ltinkl@redhat.com> - 4.3.3-5
changelog:
  - Resolves: #605069 - RPMdiff run failed for package konq-plugins-4.3.3-3.el6
    (sanitize .desktop files)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz, #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-8
changelog:
  - untag a couple of other patches which don't strictly need to apply during
    %{?_rawbuild} builds (more of #874177)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-9
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10
changelog:
  - make -server conflict with older versions of SELinux policy that didn't
    allow us to use eventfds, which libverto's backend may depend on in order
    to properly shut down a multi-worker KDC (#871524)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.1
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917909)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917909, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.2
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950342)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.4
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#978312)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.5
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #1000313)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-10.6
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #1002179)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-11
changelog:
  - don't leak the memory used to hold the previous entry when walking a keytab
    to figure out which kinds of keys we have (#911147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-13
changelog:
  - incorporate upstream patch to fix a NULL pointer dereference while processing
    certain TGS requests (CVE-2013-1416, #950343)
  - incorporate upstream patch to fix a NULL pointer dereference when the client
    supplies an otherwise-normal-looking PKINIT request (CVE-2013-1415, #917910)
  - add patch to avoid dereferencing a NULL pointer in the KDC when handling a
    draft9 PKINIT request (#917910, CVE-2012-1016)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-14
changelog:
  - pull fix for keeping track of the message type when parsing FAST requests in
    the KDC (RT#7605, #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-15.1
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1081611)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-25
changelog:
  - ksu: if the -e flag isn't used, use the target user's shell when checking
    for authorization via the target user's .k5users file (#1026721)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-26
changelog:
  - pull in backport of patch to not subsequently always require that responses
    come from master KDCs if we get one from a master somewhere along the way
    while chasing referrals (RT#7650, #1113652)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-27
changelog:
  - pull in backported fix for denial of service by injection of malformed
    GSSAPI tokens (CVE-2014-4341, CVE-2014-4342, #1121510)
  - incorporate backported patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800, more of


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-29
changelog:
  - gssapi: pull in upstream fix for a possible NULL dereference in spnego
    (CVE-2014-4344, #1121510)
  - gssapi: pull in proposed-and-accepted fix for a double free in initiators
    (David Woodhouse, CVE-2014-4343, #1121510)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-30
changelog:
  - ksu: when evaluating .k5users, treat lines with just a principal name as if
    they contained the principal name followed by '*', and don't throw away data
    from .k5users when we're not passed a command to run, which implicitly means
    we're attempting to run the target user's shell (#1026721, revised)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-31
changelog:
  - ksu: when evaluating .k5users, don't throw away data from .k5users when we're
    not passed a command to run, which implicitly means we're attempting to run
    the target user's shell (#1026721, revised)


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-34
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-37
changelog:
  - fix for CVE-2014-5355 (#1193939) "krb5: unauthenticated
    denial of service in recvauth_common() and others"


author: Roland Mainz <roland.mainz@nrubsig.org> 1.10.3-34
changelog:
  - Backport of krb1.12 localauth plugin support
    See krb5-1.10-localauth_backport.patch for porting comments.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-36
changelog:
  - Backported krbdev #7996 ("Simplify and improve ksu cred
    verification"; cherry-picked from upstream
    bbfe19f03bdeca7b05b542dbae4c1692c9800c70) to fix RH bug
      less than 5 mins"): When verifying the user's initial
    credentials, don't compute a server name and preemptively
    obtain creds for it. This change allows
    |krb5_verify_init_creds()| to use any host key in the
    keytab, and not just the one for the canonicalized local
    hostname.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-37
changelog:
  - Backported krb5-1.12.2 changes for |getclhoststr()|
    to fix RH bug #1154130 ("kadmind (Error): iprop_full_resync_1:
    getclhoststr failed").


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-38
changelog:
  - Backported krbdev #7868 ("Use preauth options when changing
    password") from krb-1.13 to fix RH bug #1075656 ("krb5
    client ignores FAST settings for changepw requests"):
    If we try to change the password in
    |rb5_get_init_creds_password()|, we must use all
    application-specified gic options which affect
    preauthentication when getting the kadmin/changepw ticket.
    Create a helper function |make_chpw_options()| which copies
    the application's options, unsets the options we don't want,
    and sets options appropriate for a temporary ticket.


author: - Roland Mainz <rmainz@redhat.com> - 1.10.3-39
changelog:
  - Backout patch #137 for krbdev #7996 ("Simplify and improve
    ksu cred verification" - see 1.10.3-36) for now until we
    figure out how to get this working.


author: Roland Mainz <rmainz@redhat.com> - 1.10.3-42
changelog:
  - fix for RH bug #1210704 ("Remove stray include in krb5's
    localauth_plugin.h"). This unnecessary #include statement
    was causing build failures on some systems by making libkrb5
    sources depend on gssapi.h (and as result to libcom_err,
    too).


author: Robbie Harwood <rharwood@redhat.com> - 1.10.3-42z1
changelog:
  - Fix CVE-2015-8629 and CVE-2015-8631
  - Also fix a spec trigger issue that prevents building
  - Resolves: #1306973


author: Robbie Harwood <rharwood@redhat.com> - 1.10.3-54
changelog:
  - Fix gss_accept_sec_context output_token return in error cases
    Also backport upstream test for this.
  - Resolves: #1279249


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #593458)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)
    (#595828)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596937), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3.1
changelog:
  - incorporate candidate patch to fix uninitialized pointer crash in the KDC
    (CVE-2010-1322, #636336)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3.2
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #644825, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #644825, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3.3
changelog:
  - pull up crypto changes made between 1.8.2 and 1.8.3 to fix upstream #6751,
    assumed to already be there for the next fix
  - incorporate candidate patch to fix various issues from MITKRB5-SA-2010-007
    (CVE-2010-1323, CVE-2010-1324, CVE-2010-4020, #651962)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error, and hang or crash in the KDC when using
    the LDAP kdb backend (CVE-2010-4022, CVE-2011-0281, CVE-2011-0282, #671101)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.5
changelog:
  - add upstream patches to fix double-free in KDC while returning typed-data
    with errors (CVE-2011-0284, #681564)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.6
changelog:
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (CVE-2011-0284, #681564)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3.7
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696341,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-13
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-14
changelog:
  - krb5kdc init script: pull in some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (#651466)
  - don't use %{?_smp_mflags} -- the build machinery doesn't always work
    right for those cases
  - tag the application of patches which we use to fix compile problems with
    %{_rawbuild} so that minimum-patches builds can be done (#711032)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-15
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-16
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#724033)
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-17
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-19
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-21
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth with AD KDCs (#734341)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-22
changelog:
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#746341)
  - apply upstream patch to fix a null pointer derference with the LDAP kdb
    backend (CVE-2011-1527), an assertion failure with multiple kdb backends
    (CVE-2011-1528), and a null pointer dereference with multiple kdb backends
    (CVE-2011-1529) (MITKRB5-SA-2011-006, #740085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-22.1
changelog:
  - add candidate patch to fix a NULL pointer dereference while processing TGS
    requests (MITKRB5-SA-2011-007, #754046)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-24
changelog:
  - incorporate Martin Osvald's patch to properly update the KDC's count of
    how many child processes it has when one of them exits (#752405)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-25
changelog:
  - pull patch from upstream to properly clean up gssapi contexts when called
    to export a lucid context, so that we don't subsequently leak the replay
    cache descriptors (#761006)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-26
changelog:
  - backport patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761523)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761523)
  - backport patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761523)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-27
changelog:
  - reintroduce patch to accept keytab entries with vno==0 as matches when
    we're searching for an entry with a specific name/kvno (#782211)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-28
changelog:
  - when processing etype-info and etype-info2 preauth hints, remember them all,
    and if we fail to generate enc_timestamp preauth data due to a
    key-table-entry-not-found error with a given set of hints, move on to try the
    next one until we run out of hints (#748528)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-29
changelog:
  - backport fixes to GSSAPI to obtain creds for all available mechanisms when we
    don't specify a mechanism when acquiring credentials, and to not try to use
    the default credential when accepting an initiator token for a mechanism for
    which we have no verifier creds (#799161, RT#6894)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-30
changelog:
  - move removal of krb5-user.info from %postun to %preun, and use the name
    of the compressed file (#801033)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-31
changelog:
  - backport fixes for retrying a request with referrals disabled if we get
    a referral to the same realm (#786216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-32
changelog:
  - revise the fix for #748528 so that it correctly resets the shallow
    etype_info list in cases where we get both etype-info and etype-info2


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33
changelog:
  - selinux: reliably reset the file creation context after setting it when we
    flush replay caches, in cases where there was none explicitly set beforehand
    (#813883)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.1
changelog:
  - add candidate patch from upstream to fix freeing uninitialized pointer in
    the KDC (MITKRB5-SA-2012-001, CVE-2012-1015, #839859)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.2
changelog:
  - pull up the patch to correct a possible NULL pointer dereference in
    kadmind (CVE-2012-1013, #827517)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport changes to how and when we read and make use of SELinux labeling
    configuration (#852455)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-33.3
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (#852455)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, CVE-2011-0281,
    CVE-2011-0282, #671102, CVE-2011-0283, #669423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - add upstream patches to fix double-free in KDC while returning typed-data
    with errors (CVE-2011-0284, #681565)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - switch to revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (CVE-2011-0284, #681565)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - add backported patch to not fail receipt of an AP-REQ if the signature check
    on the included PAC (if there is one) fails (#679612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696342,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9.1
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#714866)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9.2
changelog:
  - apply upstream patch to fix a null pointer derference with the LDAP kdb
    backend (CVE-2011-1527), an assertion failure with multiple kdb backends
    (CVE-2011-1528), and a null pointer dereference with multiple kdb backends
    (CVE-2011-1529) (#740084)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0-1
changelog:
  - build a split-out krb5-appl package by pruning out all of the non-appl
    parts and resetting the versioning to match the upstream version for the
    newly-split package


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0-3
changelog:
  - when checking for pty-handling functions, do so with the benefit of the
    libutil library we think might include them (#595411)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2
changelog:
  - krshd: don't limit user names to 16 chars when utmp can handle names
    at least a bit longer than that (#632442, RT#6773)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2.1
changelog:
  - ftpd: add candidate patch to detect setegid/setregid/setresgid and check
    for errors when calling them (MITKRB5-SA-2011-005, CVE-2011-1526, #713342)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-3
changelog:
  - drop calls to pam_selinux from the gssftp PAM configuration (#713459)
  - reference password-auth instead of system-auth in the gssftp and kshell
    PAM configurations


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-4
changelog:
  - increase the size of the ftp client's command line input buffer (#665834)
  - incorporate patch to correct parsing errors with "restrict" lines in
    ftpusers (#713521, RT#6889)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-7
changelog:
  - add Siddhesh Poyarekar's patch to ensure that when performing an "mdir"
    or "mls" operation, that the FTP client always passes an actually-terminated
    string as the open mode for fopen() (#773538, RT#7079)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-2.1
changelog:
  - ftpd: add candidate patch to detect setegid/setregid/setresgid and check
    for errors when calling them (MITKRB5-SA-2011-005, CVE-2011-1526, #713341)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.0.1-7.1
changelog:
  - add Siddhesh Poyarekar's patch to ensure that when performing an "mdir"
    or "mls" operation, that the FTP client always passes an actually-terminated
    string as the open mode for fopen() (#816689, RT#7079)


author: Matthias Clasen <mclasen@redhatcom> - 0.8-4
changelog:
  - Don't show bubbles before the icon is there
  - Use the same invisible char as the rest of the world


author: Stanislav Kozina <skozina@redhat.com> - 0.9.16-1
changelog:
  - always load whitelist file from kernel-abi-whitelists package, remove the attached files
  - always load Module.symvers file from kernel-devel package, remove attached files
  - Resolves: #1335513


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-3
changelog:
  - fix file io race condition when file was created, but still does not exist (#660319)
  - use 'alternatives' for (m)ksh switching (#659658)
  - do not forget to restore file handles after execution of sourced script (#651888)
  - fix bug when here document got sometimes truncated (#644362)
  - do not forget to close autoloaded file with function definition (#643811)
  - fix wrong typeset handling of arrays that could caused a crash (#637052)
  - fix minor issues in man page (#619692)
  - fix crash when ksh get SIGPIPE while already executing signal handler (#616691)
  - fix wrong output redirection in SIGPIPE trap (#616684)
  - add RLIMIT_RTPRIO and RLIMIT_NICE support to ulimit (#582690)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-7
changelog:
  - ksh did not wait for pipeline to complete when pipefail option was used (#702016)
  - completion used after an environment variable reported bad susbstituion error (#702015)
  - ksh child exit code not preserved correctly (#702013)
  - do not change $0 in posix function (#702011)
  - fix man page information about default value for PATH variable (#702008)
  - do not use invalid PID values in ksh kill built-in (#701890)
  - fix crashe when IFS is unset inside a function (#683734)
  - do not count empty array elements (#702014)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-14
changelog:
  - fix data corruption in a here-document section of a script at byte 8192 (#786787)
  - restore tty settings after timed out read (#577223)
  - do not create extra process when it's not needed (#781976)
  - fix file descriptor leak (#781498)
  - do not segfault on incorrect oop code (#743840)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-19
changelog:
  - assigning a right justified typedef'd variable to a smaller one
    could corrupt the result (#846678)
  - fix exporting of l/r-justified variable (#846678)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100202-6
changelog:
  - fix infinite loop when whence builtin is used with -q option (#587127)
  - fix stdin for double command substitution (#584704)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-2
changelog:
  - fix overflow in subshell loop (#858263)
  - set default editing mode to emacs (#761551)
  - ksh -m did not turn monitor mode on (#960034)
  - prevent fork bomb trigered by SIGSTP (#922851)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-10.4
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1072456)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-14
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1066589)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-16
changelog:
  - do not resend signal on termination (#1075635)
  - fix argv rewrite (#1047506)
  - fix brace expansion on/off (#1078698)
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1070350)
  - fix parser errors related to the end of the here-document marker (#1036931)
  - ksh hangs when command substitution fills out the pipe buffer (#1062296)
  - using typeset -l with a restricted variabled caused segmentation fault (#1083713)
  - ksh stopped on read when monitor mode was enabled (#1023109)
  - monitor mode was documented incorrectly (#1019334)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-17
changelog:
  - do not crash when unsetting running function from another one (#1105138)
  - should report an error when trying to cd into directory without execution bit (#1102627)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-18
changelog:
  - job locking mechanism did not survive compiler optimization (#1112306)
  - wrong return code from a pipe in command substitution (#1117316)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-24
changelog:
  - cd to directory without execution permission can't fail silently (#1160923)
  - current directory could differ from PWD (#1168611)
  - declaration of a two dimemsional associatve array could add an extra 0 element (#1173668)
  - exporting fixed with variable corrupted its data (#1188377)
  - fixes memmory leak on unset of associative array (#1189294)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - fix segfault when handling a trap (#1117404)
  - closing a file descriptor in a command substitution caused loss of the output (#1116072)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-32
changelog:
  - fix: in a login shell "( cmd & )" does nothing (#1217236)
  - multibyte character string after $1-9 was not expanded correctly (#1256495)
  - case in a for loop inside a subshell caused syntax error (#1241013)


author: Siteshwar Vashisht <svashisht@redhat.com> - 20120801-36
changelog:
  - Add configuration option to enable signal bubbling for backward compatibility
    Resolves: #1454804


author: Lukas Tinkl <ltinkl@redhat.com> - 1.1-0.9.20080213
changelog:
  - Resolves: #605070 - RPMdiff run failed for package ksig-1.1-0.8.20080213.1.el6
    (create a noarch doc subpackage)


author: Lukas Tinkl <ltinkl@redhat.com> - 1.1-0.10.20080213
changelog:
  - Resolves: #605070 - RPMdiff run failed for package ksig-1.1-0.8.20080213.1.el6
    (sanitize .desktop file)


author: Michal Nowak <mnowak@redhat.com> - 1.00-1
changelog:
  - initial packaging
  - this package should be prepared for another unikurd fonts
    in sub-packages because on the KurdIT group/unikurd web there
    are plenthora of them, but probably not under suitable licenses


author: Michal Nowak <mnowak@redhat.com> - 1.00-2
changelog:
  - got rid of -web sub-package
  - changed name from unikurd-fonts-web to unikurd-web-font
  - minor structural changes in SPEC file


author: Michal Nowak <mnowak@redhat.com> - 20020502
changelog:
  - version is now based on date of last issue of the font
  - %defattr(-,root,root,-) -> %defattr(644,root,root,755)


author: Michal Nowak <mnowak@redhat.com> - 20020502-1
changelog:
  - renamed from unikurd-web-font -> kurdit-unikurd-web-fonts
  - enhanced %description field
  - changes for F11 fonts rules
  - add Obsoletes: unikurd-web-font <= 20020502-1


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.13-1
changelog:
  - link with build-id to fix rawhide build
  - upgrade to 1.13 (GCC4 build-fix and string fixes) (#449542)
  - add -plugindir patch so listplugin and friends will work by default
    (Anthony Green #324741)


author: Robert Scheck <robert@fedoraproject.org> - 1.13-5
changelog:
  - Really added the plugindir patch now (thanks to Karsten Hopp)
  - Avoid the make errors because of mkdirhier better than until now


author: Michal Schmidt <mschmidt@redhat.com> - 0.3-4
changelog:
  - Package the translation table too and modify latencytop.c to look for it in
    the correct directory.


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-6
changelog:
  - Build both with and without GUI to allow the use on systems where Gtk
    dependency is undesirable. The latencytop package is still the full-blown build.
    latencytop-tui is the miminal build. latencytop-common has the shared files.
  - Resolves: rhbz#726476


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-8
changelog:
  - Print the error message only after cleaning up curses.
  - Remove the broken fsync view, stop using the obsolete 'tracing_enabled'.
  - Better error message when run as non-root.
  - Resolves: rhbz#633698


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp>
changelog:
  - fix BuildRequires to be rebuilt with mock (#191762)
  - fix spec file scripts.
  - update source files (use tar.gz with the date 20041025 and 2.1b1.6 Japanese patch)


author: Jindrich Novy <jnovy@redhat.com> 2008
changelog:
  - update to latex2html-2008
  - license changed to GPL
  - update japanese support to l2h-2K8-jp20081220
  - update cfgcache.pm
  - fix BR


author: Jindrich Novy <jnovy@redhat.com> 2008-4
changelog:
  - require netpbm-progs
  - include documentation
  - set executable bit for makeseg and makemap scripts
  - white-space spec correction
  - move docs and example directory to %doc
  - nuke duplicated stuff


author: kwizart < kwizart at gmail.com > - 1.18-0.1.beta2
changelog:
  - Update to 1.18beta2
   fix bug #487508: CVE-2009-0723 LittleCms integer overflow
   fix bug #487512: CVE-2009-0733 LittleCms lack of upper-bounds check on sizes
   fix bug #487509: CVE-2009-0581 LittleCms memory leak


author: kwizart < kwizart at gmail.com > - 1.18-1
changelog:
  - Update to 1.18 (final)
  - Remove upstreamed patches
  - Disable autoreconf - patch libtool to prevent rpath issue


author: Dennis Gilmore <dennis@ausil.us> - 4.18-1
changelog:
  - update to 4.18
  - spec contents pulled from RHEL5 srpm 
  - fedora spec changelog
  - update buildroot
  - use jss from fedora for building


author: Rich Megginson <rmeggins@redhat.com> 0:4.18-6
changelog:
  - Resolves: bug 684028 - LDAPSchemaElement.getOptionalValues() mangles values
  - upstream mozilla id=640750


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-7.1
changelog:
  - port the rhel-7 package version to rhel-6
  - enabled ECDSA due to Unbound
  - Fix issue in DSA algorithm (#1077799)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-5
changelog:
  - Add *.xz, *.lzma (both for compressed man pages as well), *.jar and *.nbm
    read support to lesspipe.sh
    Resolves: #718498


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-9
changelog:
  - Fix wrong `man' program option (incompatibility between man and man-db packages)
    by using `groff' program instead for parsing troff files (#718498)


author: Jozef Mlich <jmlich@redhat.com> - 436-12
changelog:
  - Fixing regressions found by QA
  - displaying of man page using troff (718498) - beware: man page file
    type is detected using file
  - tcsh printenv problem, was caused by incorrect return value for output
    which will be not preprocessed by lesspipe (186931)
    Resolves: #615303


author: Jiri Skala <jskala@redhat.com> - 4.0.9-1
changelog:
  - Resolves: #602838 - CVE-2010-2251 lftp: multiple HTTP client download filename vulnerability
  - re-base to latest upstream version


author: mruprich <mruprich@redhat.com> - 4.0.9-10
changelog:
  - Resolves: #1364524 -  lftp command SIZE on non-existing file is executed in a loop instead of return


author: Michal Ruprich <mruprich@redhat.com> - 4.0.9-14
changelog:
  - Related: #1228484 - lftp hangs after dowloading one file during a mirror
  - Related: #1305235 - lftp not following symlinks through sftp


author: Tomas Hozza <thozza@redhat.com> - 4.0.9-3
changelog:
  - Fix lftp to try also other addresses if connecting to first fails (#732863)
  - Fix lftp hang when using ascii mode with sftp (#842322)
  - Fix lftp to overwrite filename when auto-rename and clobber are enabled (#619777)
  - Add description of xfer:auto-rename into man page (#674875)


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 1.0.4-6
changelog:
  - Minor tweaks to summaries and descriptions.
  - Don't own /usr/include/X11.
  - Use a regular, unversioned dep on xorg-x11-filesystem.


author: Adam Jackson <ajax@redhat.com> 1.0.4-4
changelog:
  - xau-1.0.4-local.patch: When looking for an auth cookie on local transport,
    don't bother checking hostname, it can't possibly help.


author: Parag <paragn@fedoraproject.org> 1.0.6-4
changelog:
  - Merge-review cleanups #226064
  - Updated summary, added Requires: pkgconfig
  - removed zero length file AUTHORS


author: Matthias Clasen <mclasen@redhat.com> - 1.1.10-4
changelog:
  - Make default cursor theme inherit dmz-aa instead of Bluecurve
  - Also require the cursor theme package


author: Adam Jackson <ajax@redhat.com> 1.1.1-3
changelog:
  - REVERT-libXdmcp-1.1.1-xalloc.patch: Restore definitions (but not
    declarations) of Xalloc and friends for RHEL6 ABI compat.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1-2
changelog:
  - libXext-1.1-XAllocID.patch: call XAllocID with the display lock held.
  - libXext-1.1-event_vec-smash.patch: don't smash the event processing vector
    if the server has an older extension version than the client.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1-3
changelog:
  - libXext-1.1-event_vec-smash.patch: drop, this patch is wrong and has been
    reverted upstream. (#614888)


author: Parag <paragn@fedoraproject.org> - 4.0.3-9
changelog:
  - Merge-Review #226071
  - Removed XFree86-libs, xorg-x11-libs, XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - spec cleanups


author: Adam Jackson <ajax@redhat.com> 1.3.3-1
changelog:
  - libXfont 1.3.3.
  - libXfont-1.3.1-fast-retry.patch: Retry font server connections faster.
    (#443070)


author: Soren Sandmann <ssp@redhat.com> 1.4.5-3
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Benjamin Tissoires <btissoir@redhat.com> 1.4.5-4
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.4.5-5
changelog:
  - CVE-2015-1802: missing range check in bdfReadProperties (bug 1258892)
  - CVE-2015-1803: crash on invalid read in bdfReadCharacters (bug 1258892)
  - CVE-2015-1804: out-of-bounds memory access in bdfReadCharacters (bug 1258892)


author: parag <paragn@fedoraproject.org> - 2.1.12-4
changelog:
  - Merge-Review #226074
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length NEWS file


author: Peter Hutterer <peter.hutterer@redhat.com> 1.3-3
changelog:
  - libXi-1.3-right-event-number.patch: initialise extension with the 
    number of events supported by the server. (#615834)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: parag <paragn@fedoraproject.org> - 1.0.3-4
changelog:
  - Merge-Review #226080
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length AUTHORS file


author: parag <paragn@fedoraproject.org> - 1.0.0-10
changelog:
  - Merge-Review #226082
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed xorg-x11-deprecated-libs xorg-x11-deprecated-libs-devel as Obsoletes


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.2-1
changelog:
  - libXp 1.0.2. Drags in a bunch of general cleanup, code changes are quite
    limited and CVE-2013-2062 (#960362)


author: parag <paragn@fedoraproject.org> 3.5.7-3
changelog:
  - Merge-Review #226081
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Bump release and correct changelog


author: parag <paragn@fedoraproject.org> 3.5.7-2
changelog:
  - Merge-Review #226081
  - Removed BR:pkgconfig
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed zero-length README file


author: parag <paragn@fedoraproject.org> 0.9.4-2
changelog:
  - Merge-Review #226084
  - Removed BR:pkgconfig 
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed zero-length README file


author: parag <paragn@fedoraproject.org> - 1.0.4-4
changelog:
  - Merge-Review #226090
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length README AUTHORS NEWS file


author: parag <paragn@fedoraproject.org> - 1.0.3-2
changelog:
  - Merge-Review #226091
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length README AUTHORS file


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: parag <paragn@fedoraproject.org> - 1.0.3-4
changelog:
  - Merge-Review #226093
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length README file


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193508)
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192729)
  - Remove package ownership of mandir/libdir/etc.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.107-2
changelog:
  - Update to the latest upstream which adds eventfd support and fixes broken
    test cases.  (Rusty Russell)


author: Julian Sikorski <belegdol[at]gmail[dot]com> - 0.8.8-1
changelog:
  - Updated to 0.8.8 (bz 316731)
  - Cleaned up the SPEC
  - Added PulseAudio support
  - Made build parallel
  - Killed rpaths
  - Changed the kludges to use sed


author: Nalin Dahyabhai <nalin@redhat.com> 2002e-17
changelog:
  - account for the /usr/share/ssl -> /etc/pki/tls move in the patch which
    sets the locations at compile-time (more of #165967)


author: Jonathan Kamens <jik@kamens.brookline.ma.us> 2004g-1
changelog:
  - Upstream version 2004g (#176974)
  - Remove obsolete doc file "WARNING"
  - Remove security patch included in new upstream version
  - Custom flock code no longer necessary; included in upstream


author: Alon Levy <alevy@redhat.com> - 0.1.0-4
changelog:
  - address review issues:
   - Group for main and devel and tools
   - Requires for devel and tools
  - fix changelog for previous entry (day was wrong, and macro quoting)


author: Alon Levy <alevy@redhat.com> - 0.1.2-1
changelog:
  - bump version to 0.1.2
   - style fixes
   - vscclient.c: fix tabulation
    - add copyright header
    - send init on connect, only start vevent thread on response
    - use hton,ntoh
    - read payload after header check, before type switch
    - update for vscard_common changes, empty Flush implementation
   - vcard_emul_nss: load coolkey in more situations
   - vscard_common.h:
    - VSCMsgInit capabilities and magic
    - VSCMsgReconnect stringified
    - define VSCARD_MAGIC
    - update copyright
    - fix message type enum
   - bump version to 0.1.1
    - vcard_emul,vcard_emul_nss
     - add VCARD_EMUL_INIT_ALREADY_INITED
     - add vcard_emul_replay_insertion_events
   - vreader: add vreader_queue_card_event
    Resolves: rhbz#663063


author: Alon Levy <alevy@redhat.com> - 0.15.0-rc0
changelog:
  - upstream update, it is now qemu based, so build process changed, and version to match.
   - no non-rc release yet of qemu with required patches, hence using rc0. There are still
     some patches carried here that hopefully will get into 0.15.0 or 0.16.0 in the latest.
   - upstream updated to 0.15.0-rc0
   - resolves rhbz#723895


author: Alon Levy <alevy@redhat.com> - 0.14.90-2
changelog:
  - fix permissions of h files to not change because of rebase.
   - change NVR to match libcacard.so
     - will change when qemu-0.15.0 is released.
   - Copied correct README
   - Resolves: rhbz#723895


author: Alon Levy <alevy@redhat.com> - 0.15.0
changelog:
  - not a rebase - no changes in libcacard subdirectory
     between 0.15.0-rc0 and 0.15.0 in the upstream package.
    - but allows the fedora and RHEL package to remain in sync
      on a released version.
   - dropped zlib dep which was only required for configure phase
     via added patch 0001-drop-zlib-check.patch
   - added three patches that only cleanup the build process
     0010-Fix-spelling-in-comments-and-debug-messages-recieve-.patch
     0011-Improvements-to-libtool-support.patch
     0012-Silence-make-if-nothing-is-to-do-for-libcacard.patch
   - Final two patches resolve the bug 727916:
     0013-libcacard-cac-fix-typo-in-cac_delete_pki_applet_priv.patch
     0014-libcacard-vscclient-fix-error-paths-for-socket-creat.patch
   - Resolves: rhbz#727916


author: Steve Grubb <sgrubb@redhat.com> 0.6.4-2
changelog:
  resolves: #593635 - Capabilities can't be set on just a thread
  - Fix requires for the utils subpackage


author: Adrian Reber <adrian@lisas.de> - 0.80-5
changelog:
  - fixed #462125 (Multilib conflict) - really, really, really
    (also remove architecture information from man pages)


author: Adrian Reber <adrian@lisas.de> - 0.81-1
changelog:
  - updated to 0.81
  - license changed to GPLv3+
  - fixed #477288 (libcdio-devel multilib conflict)
  - applied patch to fix endless loop in mock


author: Jan Safranek <jsafrane@redhat.com> 0.36-4
changelog:
  - Fix libcgroup.so link to the right soname (#599367)
  - Fix segmentation fault in cgget tool (#601071)
  - Fix lscgroup commandline parsing (#601095)


author: Jan Safranek <jsafrane@redhat.com> 0.36-5
changelog:
  - Relax the dependency on redhat-lsb package (#607537)
  - Fix installation of -devel libraries (#607538)


author: Jan Safranek <jsafrane@redhat.com> 0.36-6.1
changelog:
  - Fixed buffer overflow when parsing cgexec command line parameters.
  - Added checking of source of netlink messages to cgrulesengd daemon.
  - Resolves: CVE-2011-1006 CVE-2011-1022


author: Jan Safranek <jsafrane@redhat.com> 0.37-1.el6
changelog:
  - Updated to 0.37
    - added new 'cgsnapshot' tool to generate cgconfig.conf (#649195)
    - fixed 'cgget' reading long variable values like devices.list (#626127)
    - fixed reading list of mounted controllers on library init (#635984)
    - fixed the library not to change current working directory when creating
      groups (#628895)
    - new user 'cgred' was added for better security - /bin/cgexec tool is no
      longer SUID to root but SGID to the new 'cgred' user, which has write
      access to /var/run/cgred.socket
    - may other fixes an enhancements
  - Removed rpath from compiled binaries
  - Fixed spelling and rpmlint errors in the .spec file (#634939)
  - Fixed exit code of cgclassify tool (#667957)


author: Jan Safranek <jsafrane@redhat.com> 0.37-3.el6
changelog:
  - Fixed 'cgred' group not being created as system-group during installation
    of the package.
  - Resolves: #715413


author: Peter Schiffer <pschiffe@redhat.com> 0.37-5
changelog:
  - resolves: #819137
    fixed bug when lscgroup was ltrimming path which wasn't prefixed with slash
  - resolves: #773544
    made --sticky option effective when setuid(2) and setgid(2)
  - resolves: #849757
    added inotify fd to scan running tasks and set control groups
  - resolves: #738737
    logging improvement


author: Peter Schiffer <pschiffe@redhat.com> 0.37-6
changelog:
  - related: #738737
    updated logging improvement
  - resolves: #877042
    fixed coverity finding in libcgroup-0.37-add-inotify-fd.patch
  - resolves: #869990
    fixed bug when cgconfig service was failing to start on read only file systems


author: Peter Schiffer <pschiffe@redhat.com> 0.37-7.1
changelog:
  - resolves: #913282
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-4
changelog:
  - related: #913286
    fixed performance regression when starting cgred service
  - related: #589535
    fixed templates


author: jchaloup <jchaloup@redhat.com> - 0.40.rc1-16
changelog:
  - extending cgroup names with default
    resolves: #1139205
  - fixing libcgroup-0.40.rc1-reading-config-files-from-etc-cgconfig.d.patch not to modify patch backup file
    resolves: #1162220


author: Nikola Forró <nforro@redhat.com> - 0.40.rc1-19
changelog:
  - fix loading config files from /etc/cgconfig.d to make it work with libcgroup-pam
    resolves: #1345762


author: Peter Schiffer <pschiffe@redhat.com> 0.37-8
changelog:
  - resolves: #912425
    fixed problem when cgred service could segfault if entry in cgrules.conf file
    doesn't specify procname


author: Peter Schiffer <pschiffe@redhat.com> 0.37-10
changelog:
  - resolves: #921328
    cgred service can now start with an empty configuration file
  - resolves: #863172
    cgconfig now sets group write permissions on files in the cgroup
  - resolves: #916397
    fixed cgrulesengd segfault
  - resolves: #924399
    fixed bug when the cgrulesengd had different logging level from the library
  - resolves: #951724
    fixed cgget(1) man page
  - resolves: #809550
    removed -s option from cgcreate(1) man page
  - resolves: #913286
    fixed adding control subgroups after cgrulesengd has started
  - resolves: #753334
    fixed bug when cgconfig fails to parse commas in the cgconfig.conf file


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-1
changelog:
  - resolves: #589535
    rebase to 0.40.rc1
    added support for automated cgroup creation following a template


author: Peter Schiffer <pschiffe@redhat.com> 0.40.rc1-2
changelog:
  - fixed coverity findings
  - resolves: #738620
    relabel cgred.pid file after service starts
  - resolves: #961844
    increase start priority for cgred service


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-15
changelog:
  - Fix [Bug 512108:issue 11] ibus-chewing crash the application
    by move cursor_orig to chewingio.c global.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-16
changelog:
  - Fix chewing Google issue 352: 
    zuin_count in chewing_zuin_String( ChewingContext *ctx, int *zuin_count ) 
    does not count correctly.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-17
changelog:
  - Add zh_TW summary and description
  - Split out python binding into a subpackage.
  - Fix for package wrangler.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-21
changelog:
  - Revised phrase choice from rear logic.
    Thus update phraseChoiceRearward.patch as phraseChoiceRearward.2.patch
  - Resolves: #555192


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-23
changelog:
  - Fix Hsu and Dvorak Hsu input (ibus google issue 755, 
    chewing google issue 10)
  - Resolves: #555192


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.2-27
changelog:
  - Fix Dvorak Hsu 4th tone key (ibus google issue 755 comment 12, 
    chewing google issue 10)
  - Resolves: #555192


author: Daniel Veillard <veillard@redhat.com> - 0.5.4-1
changelog:
  - update to new version to fix problems in libvirt-cim rebase
  - Resolves: rhbz#633332
  - fix a packaging naming problem on previous build
  - Resolves: rhbz#604551


author: Doug Ledford <dledford@redhat.com> - 1.1.2-2
changelog:
  - Obsolete the old -devel package (which really was just a static
    lib, no real devel environment, hence the name change to -static)
  - Resolves: bz432769


author: Doug Ledford <dledford@redhat.com> - 1.1.4-1
changelog:
  - Update to 1.1.4 to match OFED 1.3
  - Add a modprobe conf file in /etc/modprobe.d so that the iw_cxgb3 module
    will always be loaded after the cxgb3 net module
  - Related: bz428197


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Fix package description to differentiate the fact that this is for the T4
    Chelsio based adapters instead of the previous T3 generation


author: Doug Ledford <dledford@redhat.com> - 1.2.0-1
changelog:
  - Update to latest upstream release while rebuilding against latest
    libibverbs
  - Related: bz750609


author: Doug Ledford <dledford@redhat.com> - 1.3.3-1
changelog:
  - Bump and rebuild against new libibverbs, update our sources while we
    are at it
  - Related: bz854655


author: Doug Ledford <dledford@redhat.com> - 1.3.5-1
changelog:
  - Update to latest upstream release
  - Move modprobe setup to rdma package
  - Resolves: bz1165842
  - Related: bz1163527


author: Tom Lane <tgl@redhat.com> 0.8.2-1
changelog:
  - Update to version 0.8.2.
  - Update License tag to match code.
  - Remove static library and .la file, per packaging guidelines.


author: Tom Lane <tgl@redhat.com> 0.8.1a-2
changelog:
  - Enable building of sqlite driver
  Resolves: #184568
  - Rebuild needed anyway for Postgres library update


author: Tom Lane <tgl@redhat.com> 0.8.2-1.1
changelog:
  - Update to version 0.8.2-1.
  - Update License tag to match code.
  - Remove static libraries and .la files, per packaging guidelines.
  - Fix up packaging of documentation.


author: Tom Lane <tgl@redhat.com> 0.8.2-1.2
changelog:
  - Correct License tag for sqlite subpackage; it's currently not same license
    as the rest of the code.


author: Tom Lane <tgl@redhat.com> 0.8.3-2
changelog:
  - Fix mistaken external reference in libdbdsqlite3.so.  (I'm applying this
    as a patch, rather than updating to upstream's 0.8.3-1, because that isn't
    acceptable as an RPM Version tag.)
  Resolves: #460734


author: Jay Fenlason <fenlason@redhat.com> - 2.1.2-3.2
changelog:
  - Remove the bundled firewire-{cdev,constants}.h fires and add the -juju patch to build against
    the system firewire-cdev.h instead.
    Related: rhbz555835


author: Jay Fenlason <fenlason@redhat.com> - 2.1.2-3.4
changelog:
  - Fix the install command for the example programs:
    grab_color_image grab_gray_image grab_partial_image ladybug grab_partial_pvn
    Resolves: rhbz593778


author: Dave Airlie <airlied@redhat.com> 2.4.20-1
changelog:
  - pull in upstream .20 release - contains pretty much same patches
  - fix includes harder to make mesa build


author: Jarod Wilson <jwilson@redhat.com> 1.0.0-1
changelog:
  - New upstream release
  - PIC patch from Mike Frysinger <vapier@gentoo.org> (#146596)
  - Re-enable asm on i386


author: Jarod Wilson <jwilson@redhat.com> 1.0.0-2
changelog:
  - Update License field (Matthias Saou)
  - Remove useless zero epoch (Matthias Saou)
  - Add pkgconfig devel sub-package req (Matthias Saou)
  - Minor spec formatting changes and clean-ups


author: Jarod Wilson <jwilson@redhat.com> 1.0.0-3
changelog:
  - A few more fixes from Matthias Saou:
   - List man pages in %files consistently w/o gz extension
   - Add BR: popt-devel for f8+, its now split fromm rpm-devel


author: Dominik Mierzejewski <rpm@greysector.net> 4.1.4-0.1.svn1183
changelog:
  - updated to SVN r1183
  - simplified multilib patch
  - fixed endianness issues (rhbz#442508)
  - added some docs


author: Doug Ledford <dledford@redhat.com> - 1.2-2
changelog:
  - The libibverbs-1.1.2 package includes a ppc specific barrier fix in its
    arch header file, therefore bump and rebuild even though no changes are
    present in this library itself.
  - Resolves: bz451455


author: Doug Ledford <dledford@redhat.com> - 1.2.1-3.el5
changelog:
  - Bump buildrequires to a version of libibverbs that has a known good ppc
    memory sync
  - Related: bz506258


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090630-1.fc12
changelog:
  - Updated to upstream 1.05.1.20090630.
  - Reconverted from original TTF with better procedures of data conservation.


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090706-1.fc12
changelog:
  - Updated to upstream 1.05.1.20090706.
  - Reconverted from original TTF with traditional kern table. (rh#503430)


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090713-1.fc12
changelog:
  - Updated to upstream 1.05.1.20090713.
  - Generate TTFs with traditional kern table via fontforge scripts. (rh#503430)


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090713-2.fc12
changelog:
  - Required fontforge ver 20090408 which supports generation with traditional
    kern table. (rhbz#503430)


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090721-1.fc12
changelog:
  - Fixed fontforge scripting of sfd -> ttf generation.
  - Checked existance of traditionat kern table in Sans and Serif.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.0.4-15
changelog:
  - Replaced patch from 1.0.4-13 by patch from
    http://www.openwall.com/lists/oss-security/2010/03/17/3
    (CVE-2010-1192 CVE-2010-1194)
  - Removed unquoted version macro from changelog


author: Steve Dickson <steved@redhat.com> 1.4.12-1
changelog:
  - Updated to latest stable upstream version: 1.4.12
  - API documentation is now installed (bz 487977)
  - libevent-devel multilib conflict (bz 477685)
  - epoll backend allocates too much memory (bz 517918)


author: Richard Hughes <rhughes@redhat.com> - 0.6.21-5
changelog:
  - Update to version 0.6.21 fixing many bugs and CVEs
  - Remove upstreamed patches
  - Resolves: #839915


author: Richard Hughes <rhughes@redhat.com> - 0.6.21-5
changelog:
  - Update to version 0.6.21 fixing many bugs and CVEs
  - Remove upstreamed patches
  - Resolves: #839916


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-3
changelog:
  - drop the S390 build workaround as it is no longer needed
  - additional spec file cleanups for merge review (#226008)


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-5
changelog:
  - use /dev/urandom for seeding in the FIPS mode
  - make the tests to pass in the FIPS mode also fixing
    the FIPS-186-3 DSA keygen


author: Debarshi Ray <rishi@fedoraproject.org> 2.20.1.1-4
changelog:
  - Use 'Requires: libglade2 >= 2.6.3-2' to prevent unowned
    %{_libdir}/libglade and %{_libdir}/libglade/2.0.


author: Marek Kasik <mkasik@redhat.com> - 0.2.3-7.2
changelog:
  - rpmlint related changes:
  -   Remove explicit dependencies
  -   Change Groups
  -   Add ChangeLog file to "-devel" docs
  - Related: #543948


author: Marek Kasik <mkasik@redhat.com> - 0.2.3-9
changelog:
  - Add as, bn_IN, kn, ko, ml, ta, te, ru and or translations
  - Modify de, es, fr, gu, hi, it, ja, mr, pa, pt_BR, zh_CN
           and zh_TW translations
  - Patch by Ankit Patel
  - Resolves: #616313


author: Christophe Fergeau <cfergeau@redhat.com> 0.0.3-2
changelog:
  - Removed definition of BuildRoot and cleanup of BuildRoot in %clean
  - Added missing arch to versioned Requires: %{name} in the -devel package
  - Don't include empty NEWS and ChangeLog in built RPM


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.2-1.2
changelog:
  - Access oVirt API through /ovirt-engine/api rather than /api, this fixes
    foreign menu when accessing a VM from .vv files
    Resolves: rhbz#1297810


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.2-2
changelog:
  - Silence unnecessary warning
    Resolves: rhbz#1201846
  - Access oVirt REST API through /ovirt-engine/api rather than /api
    Resolves: rhbz#1277447
  - Allow to cancel ovirt:// authentication dialog in virt-viewer
    Resolves: rhbz#1201604
  - Make sure 'cancelled' signal is disconnected when objects die
    Related: rhbz#1201604
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274355
  - Don't print ticket value to stdout
    Resolves: rhbz#1216118
  - Add support for accessing VMs behind proxies
    Resolves: rhbz#1292754


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.2-3
changelog:
  - Fix bug when setting the CA used for https REST communication
    Resolves: rhbz#1325762
  - Fix parsing of state of storage domain nodes
    Resolves: rhbz#1318672
  - Silence one redundant warning happening during storage domain parsing
    Related: rhbz#1201846


author: Nalin Dahyabhai <nalin@redhat.com> - 1.6-1
changelog:
  - update to 1.6
  - add suggested summary, buildrequires, and modify install call as suggested
    by package review (#226021)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-2
changelog:
  - fix use of macro in changelog (rpmlint)
  - build with --disable-rpath (rpmlint)
  - build with %{?_smp_mflags}


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-3
changelog:
  - turn off common lisp bindings the right way
  - drop finger output
  - recode the changelog into UTF-8 if it isn't UTF-8 (rpmlint)


author: Jindrich Novy <jnovy@redhat.com> 2.4.6-1
changelog:
  - update to 2.4.6
  - new IDs for Kodak V803, M1063, Canon PowerShot A650IS, SD990 (aka IXUS 980IS),
    SD880IS, A480, Canon EOS 50D, Fuji FinePix S1000fd
  - many Canon related fixes


author: David Zeuthen <davidz@redhat.com> 2.4.6-3
changelog:
  - Add patch from http://sourceforge.net/tracker/?func=detail&aid=2801117&group_id=8874&atid=308874
    and generate generic udev rules for device identification (ID_GPHOTO2* properties)


author: Todd Zullinger <tmz@pobox.com> - 0.7.2-1
changelog:
  - Update to 0.7.2
  - Make doc subpackage noarch (on Fedora >= 10)
  - Drop --with-hal-callouts-dir from configure, the upstream default works now


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.6-1
changelog:
  - Rebase to libguesfs 1.16.6
    resolves: rhbz#798197, rhbz#797760,rhbz#790958,rhbz#798980,rhbz#795322,rhbz#796520
  - Fix virt-inspector2 man page.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.8-1
changelog:
  - Rebase to libguestfs 1.16.8
    resolves: rhbz#719879
  - Fix set_autosync function so it is not 'ConfigOnly'
    resolves: rhbz#796520
  - Fix header compilation for C++
    resolves: rhbz#799695


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.10-1
changelog:
  - Rebase to libguestfs 1.16.10
    resolves: rhbz#719879
  - Fix: libguestfs holds open file descriptors when handle is launched
    resolves: rhbz#801788
  - Fix: Document for set-pgroup need to be updated
    resolves: rhbz#801273
  - Fix: Possible null dereference and resource leaks
    resolves: rhbz#801298


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.12-1
changelog:
  - Rebase to libguestfs 1.16.12
    resolves: rhbz#719879
  - Fix: could not locate HKLM\SYSTEM\MountedDevices
    resolves: rhbz#803699


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.14-1
changelog:
  - Rebase to libguestfs 1.16.14
    resolves: rhbz#719879
  - virt-sysprep should use virt-inspector2
    resolves: rhbz#807557
  - Fix: mkfs blocksize option breaks when creating btrfs
    resolves: rhbz#807905


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.15-1
changelog:
  - Rebase to libguestfs 1.16.15
    resolves: rhbz#719879
  - Fix: inspection doesn't recognize Fedora 17+ (RHBZ#809401)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.18-2
changelog:
  - Rebase to libguestfs 1.16.18
    resolves: rhbz#719879
  - Fix: guestfs_last_error not set when qemu fails early during launch
    resolves: rhbz#811673
  - Fix: RFE: virt-sysprep: hostname can not be changed on rhel system
    (RHBZ#811112)
  - Fix: RFE: virt-sysprep: net-hwaddr not removed from "ifcfg-*" files on
    rhel (RHBZ#811117)
  - Fix: inspection fails on ubuntu 10.04 guest with encrypted swap (RHBZ#811872)
  - Fix: cannot open disk images which are symlinks to files that
    contain ':' (colon) character (RHBZ#812092)
  - BR gettext-devel so we can rerun autoconf.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.19-1
changelog:
  - Rebase to libguestfs 1.16.19
    resolves: rhbz#719879
  - Rebuild against augeas 0.9.0-3.el6
    related: rhbz#808662
  - Fix: Don't abort inspection if mdadm.conf ARRAY doesn't have a uuid.
  - Switch back to git for patch management.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.30-3
changelog:
  - Force krb5 version that contains new build layout.
  - Add non-upstream patch to exclude iptables from the appliance.
    resolves: rhbz#858648


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.31-1
changelog:
  - Rebase to libguestfs 1.16.31.
  - Backport mount-local feature.
    resolves: rhbz#830135
  - Include copy-patches.sh shell script.
  - Simplify .gitignore.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.31-3
changelog:
  - Add dependency on fuse.
    resolves: rhbz#836501
  - Clarify the error message from resize2fs-M.
    resolves: rhbz#801640
  - Increase limit on size of Windows registry for inspection (RHBZ#852396).
  - Change virt-sparsify to work with old 'file' command (RHBZ#853763).
  - Enable tests by adding an LD_PRELOAD workaround for RHBZ#563103.
  - Tidy up comments in the check section.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.31-4
changelog:
  - Fix inspection of Windows guests (RHBZ#858126).
  - Fix list-devices when different drive interfaces are used (RHBZ#858128).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.32-2
changelog:
  - Rebase to libguestfs 1.16.32 which includes a fix for inspection
    of Windows guests.
    resolves: rhbz#858126
  - Skip test-mdadm.sh.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.32-3
changelog:
  - Set permissions of .guestfish files in home directories to 0600
    resolves: rhbz#843068
  - Ignore /etc/release if /etc/redhat-release exists
    resolves: rhbz#872454


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.16.34-1
changelog:
  - Rebase to latest stable-1.16 branch version libguestfs 1.16.34.
  - Include missing patch which adds <locale.h> to fuse/guestmount.c
    resolves: rhbz#883338
  - Fix link to engineering git repo.
  - Add workaround for bug in yum: RHBZ#883463.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.2.7-1.11
changelog:
  - For RHBZ#600148:
    * In guestfs_mkfs_b, map block size to cluster size for VFAT and NTFS
    * Remove power-of-2 test from API tests.  Not supported by backported
      code.


author: Matthew Booth <mbooth@redhat.com> - 1:1.2.7-1.21
changelog:
  - Rely on upstream augeas lens for modules.conf (RHBZ#616753)
  - Use link-local addresses for host<->guest communication (RHBZ#613562)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.2.7-1.24
changelog:
  - Remove runtime requires xfsprogs and /lib64/libhandle.so.1 (RHBZ#630986).
    Note that we have removed support completely from the appliance.  Even
    installing xfsprogs separately will not provide support in this
    build of libguestfs.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-2
changelog:
  - Fix CVE-2013-4419: insecure temporary directory handling for
    guestfish's network socket
    resolves: rhbz#1019737


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-3
changelog:
  - Fix .new method in Ruby bindings.
    resolves: rhbz#1072062
  - Properly use timeout --foreground when running tests
    resolves: rhbz#1025269
  - Fix cancellation on errors in tar-in
    resolves: rhbz#1091805
  - Check whether something has been mounted to / when using mount-local* APIs
    resolves: rhbz#1057510


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-4
changelog:
  - Don't inhibit partition detection if LDM not available
    resolves: rhbz#1079182
  - Deprecate blockdev_setbsz and make it do nothing
    resolves: rhbz#624335
  - Disable fstrim API
    resolves: rhbz#982979
  - Backport virt-sysprep from libguestfs 1.24, with few backports from
    greater versions too
    resolves: rhbz#1037166
  - virt-sparsify: don't overwrite block or char devices if used as output files
    resolves: rhbz#1056558
  - fix few typos in the documentation
    resolves: rhbz#1099332


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-7
changelog:
  - FUSE: fix access as root to files and directories not owned by root
    resolves: rhbz#1106548
  - virt-sparsify: check for available space before starting
    resolves: rhbz#1097359
  - Enable gdisk support to make part-get-gpt-type and part-set-gpt-type work
    resolves: rhbz#965495


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-11
changelog:
  - virt-sysprep: Fix locking accounts with passwords.
    resolves: rhbz#1037166
  - Update copy-patches script to RHEL 6.6.


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-12
changelog:
  - Fix lvm-set-filter to work with newer lvm2 versions.
    resolves: rhbz#1168751
  - Fix handling of structs in the Java bindings.
    resolves: rhbz#1074005
  - Fix scrub-file so it can work on symlinks.
    resolves: rhbz#1091859
  - Show also aliases in the output of `guestfish -h`.
    resolves: rhbz#1100530
  - Fix typo in the man page of virt-edit.
    resolves: rhbz#1151739
  - virt-ls: always output the checksum field in CSV mode.
    resolves: rhbz#1151901
  - virt-ls: avoid double slashes in directory output.
    resolves: rhbz#1151911
  - Fix newline character in error output.
    resolves: rhbz#1153974
  - Fix virt-sysprep firstboot scripts to not be run more than once.
    resolves: rhbz#1159651
  - Fix logging of virt-sysprep firstboot scripts.
    resolves: rhbz#1160203
  - Fix description of 'set_append' and 'get_append' APIs.
    resolves: rhbz#1164734


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-13
changelog:
  - guestfish: fix Tab completion with some filesystems (e.g. xfs).
    resolves: rhbz#1153846
  - Improve drive caching by selecting the caching mode.
    resolves: rhbz#1038977
  - Generate user-cancel automatically, so there is also documentation for it.
    resolves: rhbz#1100533
  - virt-sysprep: make sure to trigger autorelabel by default when removing
    users.
    resolves: rhbz#1153855
  - virt-sysprep: recommend usage of --selinux-relabel with SELinux guests.
    related: rhbz#1153855
  - virt-sparsify: allow block devices as output.
    resolves: rhbz#1122557


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-14
changelog:
  - Raise augeas (Build)Requires to >= 1.0.0-8.el6, which fixes
    rhbz#1160261, so virt-sysprep can remove users from /etc/shadow;
    also remove note about that lack.
    resolves: rhbz#1138630
  - Make sure that libguesfs (the library itself), and virt-sparsify in
    particular, can handle filenames with ':'.
    resolves: rhbz#1128942


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-16
changelog:
  - Fix the old inspection code to handle some features of RHEL 7 images:
    handle /bin as symlink to /usr/bin, grub2 in boot partition, and
    recognize xfs as filesystem (reading UUID and label for it).
    resolves: rhbz#1216305
  - Fix reading of icon in RHEL 7 guests.
    resolves: rhbz#1216298
  - virt-sysprep: don't delete /var/spool/at/.SEQ
    resolves: rhbz#1229305
  - virt-sparsify: read all the output of `qemu-img --help`
    resolves: rhbz#1218934
  - Fix getting long labels for NTFS and btrfs filesystems; also correct the
    documented maximum length of btrfs labels.
    resolves: rhbz#1164729


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-17
changelog:
  - Mention ext2/3/4 in set-label error messages for ext labels.
    resolves: rhbz#1294956
  - Fix handling of symlinks in ll and llz, and when editing files in guestfish
    and virt-edit.
    resolves: rhbz#1293276


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.20.11-1
changelog:
  - Rebase to libguestfs 1.20.11.
    resolves: rhbz#958183
  - Remove buildnet: builds now detect network automatically.
  - The rhel-6.x branches containing the patches used in RHEL are
    now stored on a public git repository
    (https://github.com/libguestfs/libguestfs/branches).
  - Compare spec file to Fedora 18 and fix where necessary.
  - Backport new APIs part-get-gpt-type and part-set-gpt-type
    resolves: rhbz#965495
  - Fix DoS (abort) due to a double free flaw when inspecting certain guest
    files / images (CVE-2013-2124)
    resolves: rhbz#968337
  - libguestfs-devel should depend on an explicit version of
    libguestfs-tools-c, in order that the latest package is pulled in.
  - Rebuild against Augeas >= 1.0.0-5
    resolves: rhbz#971207
  - Backport Windows inspection changes
    resolves: rhbz#971090
  - Add back state test commands to guestfish
    resolves: rhbz#971664
  - Work around problem with ntfsresize command in RHEL 6
    resolves: rhbz#971326
  - Fix txz-out API
    resolves: rhbz#972413
  - Move virt-sysprep to the libguestfs-tools-c package since it's no longer
    a shell script
    resolves: rhbz#975572
  - Fix hostname inspection because of faulty Augeas path expression
    resolves: rhbz#975377
  - Calculate appliance root correctly when iface drives are added
    resolves: rhbz#975760
  - Add notes about resizing Windows disk images to virt-resize documentation
    resolves: rhbz#975753
  - Remove dependency on lsscsi, not available in 6Client
    resolves: rhbz#973425
  - Fix yum cache copy so it works if there are multiple repos
    resolves: rhbz#980502
  - Fix hivex-commit API to fail with relative paths
    resolves: rhbz#980372
  - Better documentation for filesystem-available API
    resolves: rhbz#980358
  - Fix double free when kernel link fails during launch
    resolves: rhbz#983690
  - Fix virt-sysprep --firstboot option
    resolves: rhbz#988863
  - Fix cap-get-file so it returns empty string instead of error on no cap
    resolves: rhbz#989352
  - Better documentation for acl-set-file
    resolves: rhbz#985269
  - Fix bogus waitpid error when using guestfish --remote
    resolves: rhbz#996825
  - Disable 9p support
    resolves: rhbz#997884
  - Document that guestfish --remote doesn't work with certain other arguments
    resolves: rhbz#996039
  - Enable kvmclock in the appliance to reduce clock instability
    resolves: rhbz#998108
  - Fix 'sh' command before mount causes daemon to segfault
    resolves: rhbz#1000122
  - Various fixes to tar-out 'excludes' (RHBZ#1001875)
  - Document use of glob + rsync-out (RHBZ#1001876)
  - Document mke2fs blockscount (RHBZ#1002032)


author: Pino Toscano <ptoscano@redhat.com> - 1:1.20.11-19
changelog:
  - libguestfs-java: bump the java Require to >= 1.7.0, matching the
    Build-Require, and the generated bytecode
    resolves: rhbz#1319086


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-8
changelog:
  - Backport patches up to upstream 1.8.1. (RHBZ#613593)
  - Fixes:
     * guestfish: fails to tilde expand '~' when $HOME unset (RHBZ#617440)
     * libguestfs: unknown filesystem /dev/fd0 (RHBZ#666577)
     * libguestfs: unknown filesystem label SWAP-sda2 (RHBZ#666578)
     * libguestfs: unknown filesystem /dev/hd{x} (cdrom) (RHBZ#666579)
     * virt-filesystems fails on guest with corrupt filesystem label (RHBZ#668115)
     * emphasize "libguestfs-winsupport" in error output (RHBZ#627468)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-10
changelog:
  - Remove external hexedit script and make guestfish users set $HEXEDITOR.
    This is because requiring emacs pulls in all of X (RHBZ#641494).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-12
changelog:
  - Fix typo in virt-make-fs manual page.
    resolves: rhbz#673721
  - Add a grep-friendly string to LIBGUESTFS_TRACE output.
    resolves: rhbz#673477


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-18
changelog:
  - python: Convert any iterable argument to a list.
    resolves: rhbz#693306
  - Renumber the RHEL 6.1-specific patches from 0500+.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-23
changelog:
  - Use git to manage patches.
  - Include all minor bugfixes from upstream stable-1.8 branch up to
    libguestfs 1.8.11.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-24
changelog:
  - inspect: Detect 32 bit applications running on WOW64 emulator
    resolves: rhbz#692394
  - perl: Binding and test for guestfs_last_errno
    resolves: rhbz#672491
  - New API: list-dm-devices
    fish: Show device mapper device in tab completion
    resolves: rhbz#688062
  - Document that fullvirt query only works for Linux guests
    resolves: rhbz#690358


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-25
changelog:
  - Fix 'unknown filesystem' warnings in old inspection code
    resolves: rhbz#678231
    resolves: rhbz#666578


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.7.17-26
changelog:
  - Document that remote run in cmd substitution context hangs.
    resolves: rhbz#730248
  - Note that additional memory may be required to typecheck Augeas lenses.
    resolves: rhbz#729887


author: Matthias Clasen <mclasen@redhat.com> 2.26.1-3
changelog:
  - Fix multilib parallel-installability (#477672)
  - Remove some old optimizations that are now no-ops


author: Akira TAGOH <tagoh@redhat.com> - 0.3.0-1
changelog:
  - New upstream release.
    - Have a workaround to avoid the race condition issue. (#452849)
    - Fix a freeze issue with ibus. (#465431)


author: Jan Zeleny <jzeleny@redhat.com> - 2.2-3
changelog:
  - minor changes in spec file - filenames change, removal of
    duplicate patch files (included in build source tarball)


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-3
changelog:
  - replaced unofficial 1.0.7 source tarball with official one
  - update of Makefile, part of it moved to postinstall section
    of spec file


author: Petr Sabata <psabata@redhat.com> - 1.0.10-2
changelog:
  - Avoid NULL dereference when parsing supported_classes sys entry
  - Remove redundant buildroot definition
  - Resolves: rhbz#690014


author: Petr Šabata <contyk@redhat.com> - 1.0.13-1
changelog:
  - 1.0.13 bump + 47d8dca, "Set SerialNumber to 'Unknown' if not found"  (#788510)
  - Subpackage the pkgconfig file


author: Petr Šabata <contyk@redhat.com> - 1.0.16-1
changelog:
  - 1.0.16 bump, documentation and autotools scripts updates (#829810)
  - Fix an old bogus date in the changelog


author: Jarod Wilson <jarod@redhat.com> 2.6-3
changelog:
  - Add hopefully-about-to-be-merged-upstream hugeadm enhancements
  - Add huge pages setup helper script, using new hugeadm enhancements


author: Doug Ledford <dledford@redhat.com> - 1.3.2-1
changelog:
  - Update to latest upstream version
  - Remove requirement on libibcommon since that library is no longer needed
  - Fix a problem with man page listing


author: Roland Dreier <rdreier@cisco.com> - 1.1.2-1
changelog:
  - New upstream release
  - Update description to mention RDMA and iWARP, not just InfiniBand
  - Add "Requires" tag for libibverbs base package to -devel


author: Doug Ledford <dledford@redhat.com> - 1.1.3-2
changelog:
  - Add Requires of -devel package to -devel-static package
  - Add Requires of libibverbs-driver (this pulls in the various driver packages
    automatically when the libibverbs package is installed)


author: Doug Ledford <dledford@redhat.com> - 1.1.5-1
changelog:
  - Update to latest upstream version (1.1.4 to 1.1.5)
  - Drop libibverbs cow.patch as it is in 1.1.5 already
  - Enable valgrind support so memory corruption is easier to debug
  - Make sure RPATH entries are removed from programs
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.1.6-1
changelog:
  - Update to latest upstream release (includes FDR link speed capability)
  - Related: bz751220, bz750609


author: Doug Ledford <dledford@redhat.com> - 1.1.6-5
changelog:
  - Don't print link state on iWARP links as it's always invalid
  - Don't try to do ud transfers in excess of port MTU
  - Resolves: bz822781


author: Doug Ledford <dledford@redhat.com> - 1.1.7-1
changelog:
  - Update to latest upstream release
  - Remove patches that are now part of upstream
  - Fix ibv_srq_pingpong with negative value to -s option
  - Resolves: bz879191


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Update to latest upstream release (which adds XRC support,
    infrastructure for verbs extensions, core support for usNIC
    nodes and transports, uverbs extensions, and receive flow
    steering extension)
  - The HPN channel in rhel6 is going away and the RoCE capability
    is being folded back into the base OS channel package (aka
    this one).  Provide an Obsoletes tag to cause this package
    to replace the older libibverbs-rocee package from the HPN
    channel
  - Resolves: bz854655


author: Doug Ledford <dledford@redhat.com> - 1.1.8-2
changelog:
  - Add the RoCE IP Address GID support patches
  - Create our own tarball that is the three patches we needed
    then autoreconf run with an acceptable version of autotools
    as the version in the build system is too old
  - Resolves: bz1051211


author: Doug Ledford <dledford@redhat.com> - 1.1.8-4
changelog:
  - Update RoCE IP addressing patches to latest version under review
  - Fix a coverity found issue
  - Resolves: bz1119105


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.40-1
changelog:
  - Version bump to 0.40. (Red Hat Bugzilla #466359)
  - Add patch from upstream to fix crash in icalvalue.c.
  - Update makefile patch, remove the test part (already applied).
  - Package libical.pc, add Requires: pkgconfig to -devel.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.41-2
changelog:
  - Switched off ICAL_ERRORS_ARE_FATAL for all distributions, except Fedora 11.
    (Red Hat Bugzilla #478331)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.43-1
changelog:
  - Version bump to 0.43.
  - Added patch to fix implicit pointer conversion from Debian. (Debian BTS
    - Upstream has switched off ICAL_ERRORS_ARE_FATAL by default. This behaviour
    is being retained across all distributions, including Fedora 11.
  - Added 'Requires: tzdata'.
  - Enabled backtrace dumps in the syslog.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.43-4
changelog:
  - Updated patch to fix #includes in the headers to work with
    'pkg-config --cflags libical'. (Red Hat Bugzilla #484091)


author: Ville Skyttä <ville.skytta at iki.fi> - 0.15.1b-1
changelog:
  - Don't ship static libraries.
  - Embed *.pc in specfile to keep it in sync with the build.
  - Build with dependency tracking disabled.


author: Jarod Wilson <jarod@redhat.com> 1.2.0-1
changelog:
  - Update to libiec61883 v1.2.0 release
  - Rework installtests patch to not require autoreconf
  - Make iso channel allocation work w/o local fw node r/w


author: Jay Fenlason <fenlason@redhat.com> 1.2.0-4
changelog:
  - Update the Source and URL fields to point to correct locations.
    Resolves: rhbz#553782 -  Invalid URLs in spec file


author: Tim Waugh <twaugh@redhat.com> 0.2.11-6
changelog:
  - Package review fixes (bug #226031):
    - Drop prereq on ldconfig.
    - Removed trailing dot in devel package summary.
    - Fixed devel package requirement on main package.
    - Use SMP make flags.
    - Removed static libraries and la files.
    - Fixed source URL.
    - Make sure timestamps are preserved on install.
    - Ship AUTHORS and NEWS.


author: Tim Waugh <twaugh@redhat.com> 0.2.11-9
changelog:
  - The python sub-package now requires the exactly-matching main
    package (bug #605169).
  - Fixed strict aliasing warnings (bug #605170).


author: Doug Ledford <dledford@redhat.com> - 1.1-10
changelog:
  - Update to the OFED 1.3 version of libipathverbs-1.1.tar.gz (there is a 300k
    size difference between the libipathverbs-1.1.tar.gz in the OFED release
    and the file by the same name at openfabrics.org/downloads/...which is
    just insane, they should have different release numbers, but they don't,
    so for anyone to duplicate what I have here, you will need to get the
    libipathverbs-1.1.tar.gz file out of the libipathverbs-1.1-1.ofed1.3 src
    rpm out of the OFED-1.3.tar.gz download at the openfabrics site)
  - Related: bz428197


author: Doug Ledford <dledford@redhat.com> - 1.2-1.el6
changelog:
  - Update to latest upstream source
  - Change BuildRequires from valgrind to valgrind-devel for rhel6
  - Drop ppc64 build as it isn't officially supported upstream
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.2-5
changelog:
  - Update to git repo archive from upstream
  - Add truescale-serdes.cmds and related code from git archive
  - Resolves: bz1024903


author: Doug Ledford <dledford@redhat.com> - 1.3-3
changelog:
  - Add missing files to dracut install command, including bash
    as the truescale-serdes.cmds will not work with dash and
    can not be reasonably ported to dash.
  - Related: bz1024903


author: Tom Lane <tgl@redhat.com> - 6b-38
changelog:
  - Initial review of package by new (old?) maintainer; marginal specfile cleanup
  - Restore libjpeg.a to distribution, in a separate -static subpackage
  Resolves: #186060, #215537
  - Fix non-security-significant buffer overrun in wrjpgcom, per Lubomir Kundrak
  Resolves: #226965
  - Apply patch4 that was added by previous maintainer, but never applied
  Resolves: #244778
  Related: #238936
  - Fix inter-RPM dependencies to include release
  Resolves: #238780


author: Tom Lane <tgl@redhat.com> - 6b-40
changelog:
  - Rip out the long-obsolete version of libtool that shipped with libjpeg 6b,
    and instead use the build system's libtool.  This obsoletes most of the
    patches we were carrying.
  - Fix configure script to #define the various HAVE_FOO macros as 1, not empty,
    for better compatibility with most other autoconf-using packages.  (This
    requires importing the original IJG configure.in, which was not shipped
    in libjpeg-6b for reasons that no longer seem very good.)
  Resolves: #427616


author: Tom Lane <tgl@redhat.com> - 6b-44
changelog:
  - Fix libtool hacking so it also works with libtool 2.2.  (For the
    moment the specfile still also works with libtool 1.5, but that can
    go away eventually.)


author: Tom Lane <tgl@redhat.com> 1.2.1-1
changelog:
  - Imported into RHEL-6 from Fedora 18
  - Dropped separate utils subpackage, because existing packages might expect
    that Requires: libjpeg is enough to pull in the command-line tools;
    we should only alter the subpackage breakdown in a new RHEL branch
  - Dropped turbojpeg build, because it doesn't seem ready for prime time
    and isn't part of our RHEL-6 requirements anyway
  Resolves: #788687


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.6-1
changelog:
  - New upstream release 1.1.6
  - Drop upstream patches
  - Required for upcoming Samba 4 beta
  - Explicitly build with tdb1 support


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.8-1
changelog:
  - New upstream release 1.1.8
  - Required for latest Samba 4 beta
  - Fixes for pyldb
  - Revert to using tdb1 by default
  - Drop support for tdb_compat
  - CCAN is no longer built as a static library


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.9-1
changelog:
  - New upstream release 1.1.9
  - Required for Samba 4 Beta 5
  - Ensure rename target does not exist before deleting old record
  - Add parameter to avoid NULL format string flagged by -Werror=format


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.13-3
changelog:
  - use the proper %patch stanza to make rpmdiff happy
  - related: rhbz#873422 - LDB 1.1.13 exports improper ABI


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.13-3.1
changelog:
  - Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.2.z]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: John (J5) Palmieri <johnp@redhat.com> 1.9-3
changelog:
  - Fixed License to be LGPL
  - Add COPYING license file to docs
  - Fixed Group
  - Fixed buildroot
  - Added {} braces around % macros
  - Removed .la and .a files 
  - Own {_includedir}/libmb directory
  - Add dist tag to release
  - Add smpflags  flag to make
  - Remove use of boken makeinstall macro


author: Roland Dreier <rdreier@cisco.com> - 1.0-2
changelog:
  - Spec file cleanups, based on Fedora review: don't mark
    libmlx4.driver as a config file, since it is not user modifiable,
    and change the name of the -devel-static package to plain -devel,
    since it would be empty without the static library.


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1
changelog:
  - Update to latest upstream release
  - Add pseudo provides of libibverbs-driver
  - Update buildrequires for libibverbs API change


author: Doug Ledford <dledford@redhat.com> - 1.0.1-3
changelog:
  - Tweak the provides and obsoletes a little bit to make sure we only pull in
    the -static package to replace past -devel-static packages, and not past
    -devel packages.


author: Doug Ledford <dledford@redhat.com> - 1.0.2-1
changelog:
  - Update to latest upstream release (1.0.1 -> 1.0.2)
  - Remove 5 patches rolled into upstream release
  - Drop ifnarch ia64 use around valgrind as we don't build on ia64 any more
  - Fix broken libmlx4-modprobe.conf
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.0.5-1
changelog:
  - Update to latest upstream
  - Drop awk based setup for a bash based setup, making including
    the setup code on an initramfs easier
  - Modernize spec file
  - Related: bz950915


author: Doug Ledford <dledford@redhat.com> - 1.0.6-2
changelog:
  - Add the modprobe.d/mlx4.conf for user set module options that we
    don't replace on upgrade
  - Rename the dracut module to just mlx4 instead of -libmlx4 (dracut
    takes a dash between the number and the name literally)
  - Add obsoletes tag to make us replace libmlx4-rocee
  - Related: bz1059094


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Actually use the right %source macro when installing the new
    mlx4.conf file this time
  - Related: bz1059094


author: Doug Ledford <dledford@redhat.com> - 1.0.6-7
changelog:
  - Add compiler warnings patch
  - Rebuild against latest libibverbs and valgrind-devel
  - Move module init code to rdma package and require rdma package
  - Resolves: bz1142161, bz1163527


author: Roland Dreier <rdreier@cisco.com> - 1.0.4-1
changelog:
  - New upstream release
  - Depend on libibverbs 1.1, and package new library file names.
  - Spec file cleanups: remove unused ver macro, improve BuildRoot, move
    static libraries into devel-static package, and don't use makeinstall
    any more (all suggested by Doug Ledford <dledford@redhat.com>).


author: Doug Ledford <dledford@redhat.com> - 1.0.5-5
changelog:
  - Rename devel-static package to just -static, it only has a single static
    lib in it and no actual devel files (like headers, those are part of
    libibverbs-devel instead).  Obsolete the various other named packages we
    want this to supercede
  - Enable valgrind annotations on all arches except ia64
  - Update to latest code, including update for libibverbs API change
  - Bump release to 5 so it is higher than the current rhel5 libmthca release
  - Add various patches from the upstream git repo that haven't been rolled into
    a new release tarball yet


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream version (1.0.5 -> 1.0.6)
  - Remove ifnarch ia64 around valgrind support since we don't build on ia64
    any more
  - Remove 4 patches that have been rolled into upstream release
  - Related: bz725016


author: Rex Dieter <rdieter@fedoraproject.org> - 3.0.2-5
changelog:
  - fix doxygen-induced multilib conflicts (#480378)
  - add %check section (disabled by default, pending cppunit detection issues)


author: Doug Ledford <dledford@redhat.com> - 0.5-3
changelog:
  - Upstream has updated the libnes tarball without changing the version.  Pick
    up the libnes-0.5.tar.gz tarball that's dated 13-Jun-2008
  - Resolves: bz451470


author: Doug Ledford <dledford@redhat.com> - 0.5-5.el5
changelog:
  - Fix a minor memleak (from upstream)
  - Rebuild against libibverbs that has xrc support
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 0.6-1.el5
changelog:
  - Build against non-XRC libibverbs
  - Update to ofed 1.4.1 final bits
  - Remove no longer needed memleak patch
  - Related: bz506258, bz506097


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Rebuild against latest libibverbs
  - Add psuedo provide of libibverbs-driver.%{_arch}
  - Fix exclusivearch to work on i686
  - Related: bz725016, bz724900


author: Doug Ledford <dledford@redhat.com> - 1.1.3-1
changelog:
  - Update to latest upstream release
  - Rebuild against latest libibverbs (native FDR/IBoE enabled)
  - Related: bz750609


author: Pavel Šimerda <psimerda@redhat.com> - 1.0.1-3
changelog:
  - Resolves: #738244 - provide libnetfilter_queue package for RHEL 6.6
  - use a modified EPEL6 spec file


author: Paul P. Komkoff Jr <i@stingr.net> - 0.0.33-0.1.svn7211
changelog:
  - grab latest upstream changes and fixes, along with new version number
  - do not mess with bundled nfnetlink.h, use <linux/netfilter/nfnetlink.h>


author: Thomas Haller <thaller@redhat.com> - 3.2.21-6
changelog:
  - fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
  - fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
  - fix printing in nl_msec2str for whole seconds
  - don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
  - backport nl_has_capability function


author: Colin Walters <walters@redhat.com> - 0.3.14-1
changelog:
  - New upstream version
  - Drop upstreamed liboil-0.3.13-better-altivec-detect.patch
  - Drop upstreamed clobber-ecx.patch


author: Neal Becker <ndbecker2@gmail.com> - 0.9.9-2
changelog:
  - Remove libotf-config (just just pkg-config instead)
  - Remove example/Makefile to fix multilib conflict


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.1.23-3
changelog:
  - update to nmu1
  - apply patch to fix imprecise definition of DL format
  - apply patch so that when no config is present, libpaper will fallback through
    LC_PAPER before giving up and using Letter


author: Dave Airlie <airlied@redhat.com> 0.10.6-1
changelog:
  - rebase to latest release (will do release with VGA bits later)
  - libpciaccess-boot-vga.patch: add boot vga patch from upstream


author: Dave Airlie <airlied@redhat.com> 0.10.6-4
changelog:
  - Add support for default vga arb device selection
  - Update libpciaccess VGA arb code for newer kernel API


author: Adam Jackson <ajax@redhat.com> 0.10.6-5
changelog:
  - libpciaccess-0.10.6-rom-sanity.patch: If we hit the /dev/mem path for
    reading a device's ROM, verify that it looks like it at least might belong
    to the device in question by checking vendor and device ID match.  Fixes
    vbetool post hanging forever (and thus blocking boot) on some dual-gpu
    laptops.


author: Adam Jackson <ajax@redhat.com> 0.12.902-4
changelog:
  - libpciaccess-lol-dev-port.patch: Don't use /dev/port since the kernel insists
    that it remain unusably broken.


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #721305


author: Tom Lane <tgl@redhat.com> 2:1.2.46-1
changelog:
  - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
    CVE-2011-2691, CVE-2011-2692
  Resolves: #721306


author: Dan Winship <danw@redhat.com> - 0.3.0-6
changelog:
  - Fix build with xulrunner 17 (#916973)
  - Fix to not look for proxy.conf in current directory (#802765)
  - Fix a crash with webkit and invalid PAC file (#874492)
  - Fix a crash with URLs containing a username but no password (#979356)


author: kwizart < kwizart at gmail.com > - 0.2.3-7
changelog:
  - Disable Gnome/KDE default support via builtin modules.
   (it needs to be integrated via Gconf2/neon instead).


author: kwizart < kwizart at gmail.com > - 0.2.3-8
changelog:
  - Merge NetworkManager module into the main libproxy package
  - Main Requires the -python and -bin subpackage 
   (splitted for multilibs compliance).


author: Carl Byington <carl@five-ten-sg.com> - 0.6.37-1
changelog:
  - add pst_attach_to_mem() back into the shared library interface.
  - fix memory leak caught by valgrind.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.38-1
changelog:
  - add python interface to the shared library.
  - bump soname to version 4 for many changes to the interface.
  - better decoding of recurrence data in appointments.
  - remove readpstlog since debug log files are now plain text.
  - add readpst -j option for parallel jobs for each folder.
  - make nested mime multipart/alternative to hold the text/html parts.


author: Carl Byington <carl@five-ten-sg.com> - 0.6.41-1
changelog:
  - fix ax_python detection - should not use locate command
  - checking for fedora versions is not needed


author: Carl Byington <carl@five-ten-sg.com> - 0.6.43-1
changelog:
  - decode more of the pst format, some minor bug fixes
  - add support for code pages 1200 and 1201.
  - add readpst -t option to select output item types, which can
    now be used to process folders containing mixed item types.
  - fix segfault with embedded appointments
  - add readpst -u option for Thunderbird mode .size and .type files
  - better detection of embedded rfc822 message attachments


author: Carl Byington <carl@five-ten-sg.com> - 0.6.44-1
changelog:
  - patch from Lee Ayres to add file name extensions in separate mode.
  - allow mixed items types in a folder in separate mode.


author: Jarod Wilson <jarod@redhat.com> - 2.0.0-3
changelog:
  - Address some compiler warnings
  - Reduce nesting depth in new_handle dispatches
  - Fix segfault in handle_arm_request


author: Jarod Wilson <jarod@redhat.com> - 2.0.0-5
changelog:
  - Fix up iso stop command so starting/stopping/starting iso reception works
  - Plug firewire handle leak


author: Jarod Wilson <jarod@redhat.com> - 2.0.0-6
changelog:
  - Set errno = ENOSYS for all unimplemented functions
  - Make dvgrab and friends work w/o requiring r/w on the local fw node (#441073)


author: Roland Dreier <rdreier@cisco.com> - 1.0.6-2
changelog:
  - Spec file cleanups from Fedora review: add BuildRequires for
    libibverbs, and move the static library to -static.


author: Doug Ledford <dledford@redhat.com> - 1.0.15-1
changelog:
  - Update to latest upstream release (adds FDR support and fixes 696019 the
    upstream way)
  - Include fixes in git not yet in a release
  - Related: bz750609
  - Resolves: bz700289


author: Doug Ledford <dledford@redhat.com> - 1.0.17-0.git4b5c1aa
changelog:
  - Pre-release version of 1.0.17
  - Resolves a CVE vulnerability between librdmacm and ibacm
  - Fixes various minor bugs in sample programs
  - Resolves: bz866221, bz816074


author: Doug Ledford <dledford@redhat.com> - 1.0.17-1
changelog:
  - Official 1.0.17 release
  - The fix to bug 866221 got kicked back as incomplete last time, fix
    it for real this time.
  - Intel adapters that use the qib driver don't like using inline data,
    so use a memory region that is registered instead
  - Resolves: bz866221, bz828071


author: Doug Ledford <dledford@redhat.com> - 1.0.19.1-1
changelog:
  - Update to latest upstream release
  - Drop patches that upstream has folded in
  - Resolves: bz1119108


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 0.8.0-18
changelog:
  - Specify full path to libedit backing library.
  - Default to libedit backing library.
  - Satisfy termcap requirements with ncurses.
  - Resolves: rhbz#231209


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-8
changelog:
  - Resolves: rhbz#798983 Kannada langpack missing
  - Resolves: rhbz#798926 fix endianess assumptions of lotuswordpro filter
  - Resolves: rhbz#800272 complain about unknown commandline options


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-12
changelog:
  - Resolves: rhbz#810267 better CSV import default separators
  - Resolves: rhbz#807392 focus problems and tearable menus


author: Caolán McNamara <caolanm@redhat.com> - 3.4.5.2-13
changelog:
  - Resolves: rhbz#809466 libreoffice-core (unintentionally) provides
    libraptor.so.1()() and librdf.so.0()()


author: David Tardon <dtardon@redhat.com> - 1:4.0.4.2-10
changelog:
  - Resolves: rhbz#1012379 sound file included in presentation displayed
    as a gray sqaure
  - Resolves: rhbz#1012390 CRITICAL **: AtkObject* atk_object_wrapper_ref
  - Resolves: rhbz#1038189 libreoffice does not recognize new printer
  - Resolves: rhbz#1085420 LO incorrectly provides liblcms2.so.2
  - Resolves: rhbz#1065629 RTF import probable regression with non-english
    BigMachines exports
  - Resolves: rhbz#1020712 No Default Font showing when write in text
    boxes at first, behaving unusual
  - Resolves: rhbz#1021915 Menu drop-down list overlapping with other menu
    items
  - Resolves: rhbz#1035298 Transaction check errors due to file conflicts
  - Related: rhbz#1035298 provide non-arch variants of openoffice.org
    provides too


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.4.2-14
changelog:
  - Resolves: rhbz#1130264 crash in gstreamer callback on s390x
  - Resolves: rhbz#1131428 cannot export charts as svg
  - Resolves: rhbz#1035298 obsolete openoffice.org-langpack-ms_MY


author: Caolán McNamara <caolanm@redhat.com> - 1:4.0.4.2-3
changelog:
  - Resolves: rhbz#833512 provide a /usr/bin/openoffice.org-1.9 for backwards compat
  - Resolves: rhbz#902694 inaccessibile CJK/Indic shortcuts


author: David Tardon <dtardon@redhat.com> - 1:4.2.8.2-11
changelog:
  - Resolves: rhbz#1223696 some labels in print dialog are not translated, even
    though the translations exist


author: David Tardon <dtardon@redhat.com> - 1:4.2.8.2-11.1
changelog:
  - Resolves: rhbz#1285818 various flaws
  - CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
  - CVE-2015-5212 Integer underflow in PrinterSetup length
  - CVE-2015-5213 Integer overflow in DOC files
  - CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
    causing memory corruption


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.5-15
changelog:
  - fix the kbase searching rhbz#743198
  - updated translation Related: #731037
  - Resolves: #743198 #731037


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-6
changelog:
  - opt kernel out of showing smolt information in abrt bug reports. rhbz#795548
  - ABRT mailx plugin on by default causes crashes being always labelled as reported rhbz#803618
  - pkg-config --cflags libreport includs -fPIC rhbz#803736
  - Coverity revealed memory leaks and possibly other issues rhbz#809416
  - GLib warnings by report-gtk when crash dir does not exist rhbz#813283
  - `report' tool requires current working directory to be a crash dir rhbz#817051
  - Searching for duplicate anaconda bugs while reporting exception against partner-bugzilla during install fails rhbz#820985
  - Undefined non-weak symbols rhbz#826745
  - ABRT has wrong URL in dialog
  Resolves: #809416,#813283,#817051,#826745,#820985,#795548,#803618,#803736


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-7
changelog:
  - don't warn about daemon connection when deleting a problem rhbz#799909
  - ignore non problem dirs when cleaning old problems rhbz#847291
  - Resolves: #799909, #847291


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-8
changelog:
  - use the default template for bz reports rhbz#747410
  - fix adding users to CC in bugzilla rhbz#841338
  - Resolves: #747410, #841338


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-10
changelog:
  - updated translation rhbz#864025
  - fixed brewtap warnings rhbz#812283
  - silence few rpmdiff warnings rhbz#857425
  - Resolves: #864025, #812283, #857425


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-12
changelog:
  - fixed relro flags
  - removed confusing warning message
  - added versioned requirements to silence rpmdiff
  - Resolved: #847291, #812283, #857425


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-16
changelog:
  - ABRT won't install debuginfos from rhn repository rhbz#759443
  - Brewtap reports LibMissingRELRO rhbz#812283
  - libreport attached sosreport into bugzilla with bad mimetype rhbz#885509
  - reporter-rhtsupport on RHEL6.4 unable to open cases in RHT customer center rhbz#896090
  - Change default set of reporters shown by CLI/GUI rhbz#948286
  - [RFE] add the console notification to RHEL6 rhbz#961231
  - Resolves: #885509, #812283, #961231, #961231, #961231, #948286, #759443, #896090, #875260


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-17
changelog:
  - updated translation rhbz#993626
  - fixed bugs doscovered by coverity rhbz#905051
  - Resolves: #993626, #905051


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-19
changelog:
  - updated transaltion (ko) rhbz#993626
  - fixed bugzilla reporter to work with the new xmlrpc api rhbz#991088
  - Resolves: #991088, #993626


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-20
changelog:
  - Bugzilla: pass Bugzilla_token in all XML RPC calls
  - mailx: improve notification e-mail headers
  - mailx: include hostane in notification e-mail
  - Resolves: #989530, #997871, #1090466, #1093375


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-21.el6_6.1
changelog:
  - switch dump directory owner from "abrt:user" to "user:abrt" (rhbz#1212093)
  - harden against directory traversal, crafted symbolic links (rhbz#1212093)
  - avoid race-conditions in dump dir opening (rhbz#1212093)
  - Resolves: #1211966


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-23
changelog:
  - resolve symbolic and hard link vulnerabilities
  - defend against directory traversal attack
  - Resolves: #1212095


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-24
changelog:
  - switch ownership of new directories from "abrt:user" to "user:abrt"
  - fix a bug allowing libreport to read files outside dump directories
  - Related: #1212095


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-25
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Resolves: #1282143


author: Jakub Filak <jfilak@redhat.com> - 2.0.9-25
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Resolves: #1282144


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.9-29
changelog:
  - Change reporting workflow to enhance the quality of opened customer cases
  - Limit the description section for ABRT reported cases
  - Resolves: #1258474, #1261398


author: Matej Habrnal <mhabrnal@redhat.com> - 2.0.9-31
changelog:
  - Add pkg_vendor, reproducer and reproducible to description
  - Attach all dump dir's element to a new case
  - Change libreport-version to 2.0.9.1
  - Resolves: #1261398


author: Martin Kutlak <mkutlak@redhat.com> - 2.0.9-34
changelog:
  - Correctly trim spaces before values with augeas
  - Prevent creating of customer case without reproducing knowledge
  - Rely on configurated email
  - Change URL in config for bug-report server
  - Fix segfaulting abrt-cli
  - Related #1422030, #1328768, #1323625, #1463316, #1421754


author: Jiri Moskovcak <jmoskovc@redhat.com> 2.0.9-1
changelog:
  - new upstream release
  - fixed typos in man
  - fixed handling of anaconda-tb file
  - generate valid xml file
  - Resolves: #759377, #758366, #746727


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.1
changelog:
  - Resolves: rhbz#1284966 add libreswan to RHEL6 (core)
  - Resolves: rhbz#1288086 /var/run/pluto should have 755 and should have 700


author: Paul Wouters <pwouters@redhat.com> - 3.15-5.2
changelog:
  - Resolves: rhbz#1289498 keyingtries=0 is broken
  - Resolves: rhbz#1166151 Pluto crashes on during 'service ipsec stop'
  - Resolves: rhbz#1216946 IPv6 in RHEL6 fails after reboot
  - Resolves: rhbz#1144462 ikev2 status shows "no tunnels up" while tunnel is up


author: Paul Wouters <pwouters@redhat.com> - 3.15-6
changelog:
  - Resolves: rhbz#1345959 openswan - libreswan migration issues
  - Resolves: rhbz#1360134 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
  - Resolves: rhbz#1313709 ipsec pluto returns zero even if it fails [doc change only]
  - Resolves: rhbz#1315415 ipsec.conf manpage does not contain any mention about crl-strict option


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.1
changelog:
  - Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort when ' auto --up --asynchronous' is used
  - Resolves: rhbz#1335896 ipsec initnss/checknss custom directory not recognized


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.2
changelog:
  - Resolves: rhbz#1313843 Prescript warning: Missing control file /var/run/pluto/pluto.ctl
  - Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort [extended patch]
  - Resolves: rhbz#1369990 Libreswan connection sometimes does not get re-established after one side restarts


author: Paul Wouters <pwouters@redhat.com> - 3.15-7.3
changelog:
  - Resolves: rhbz#1403201 pluto uses up available memory and fails with 'unable to popen'
  - Resolves: rhbz#1311360 When IKE rekeys [...] (updated for IKEv1 responder side)


author: Paul Wouters <pwouters@redhat.com> - 3.15-9
changelog:
  - Resolves: rhbz#1781903 ipsec newhostkey fails with ipsec rsasigkey: key pair generation failed: -8187


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-4
changelog:
  - Don't call xmlCleanupParser, it breaks other users of thread-private
    storage
    Resolves: #578568


author: Jasper St. Pierre <jasper@redhat.com> - 2.26.0-6.1
changelog:
  - Fix build by linking in -lm
  - io: Implement strict network policy (CVE-2013-1881)
    Resolves: #1049155


author: Dan Walsh <dwalsh@redhat.com> - 2.0.90-1
changelog:
  - Update to upstream 
  	* add/reformat man pages by Guido Trentalancia <guido@trentalancia.com>.
  	* Change exception.sh to be called with bash by Manoj Srivastava <srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.91-1
changelog:
  - Update to upstream 
  	* Change the AVC to only audit the permissions specified by the
  	policy, excluding any permissions specified via dontaudit or not
  	specified via auditallow.
  	* Fix compilation of label_file.c with latest glibc headers.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.92-1
changelog:
  - Update to upstream 
  	* Fix from Eric Paris to fix leak on non-selinux systems.
  	* regenerate swig wrappers
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.93-1
changelog:
  - Update to upstream 
  	* Show strerror for security_getenforce() by Colin Waters.
  	* Merged selabel database support by KaiGai Kohei.
  	* Modify netlink socket blocking code by KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-1
changelog:
  * Set errno=EINVAL for invalid contexts from Dan Walsh.
  	* pkgconfig fix to respect LIBDIR from Dan Walsh.
  Resolves: #593788


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.1
changelog:
  - Cleanup selinux_mnt on disabled machines
  Resolves: #706049
  - Make restorecon python binding use realpath
  Resolves: #698583


author: Dan Walsh <dwalsh@redhat.com> - 2.0.94-5.6
changelog:
  - Back port handling of is_selinux_enabled form rhel7. We need is_selinux_enabled() to report disabled in a docker container so that SELinux aware applications do not attempt to do SELinux activities.
  Resolves: #1096816


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.7
changelog:
  - Fix selinuxdefcon to print end of line at the end of output.
  Resolves:#913115
  - Fix security_get_initial_context desc in security_compute_av.3
  Resolves:#1011109
  - Apply fix for selinux.8 man page from pschiffe@redhat.com.
  Resolves:#1011145


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.94-5.8
changelog:
  - avc_has_perm will now return yes if the machine is in permissive mode
  Resolves:#753675
  - nscd permission support for netgroup
  - Fix matchpathcon verify handling to fail on non-existing objects


author: Dan Walsh <dwalsh@redhat.com> - 2.0.38-1
changelog:
  - Update to upstream
    * Change semodule upgrade behavior to install even if the module
      is not present from Dan Walsh.
    * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.41-1
changelog:
  - Update to upstream
    * Add pkgconfig file from Eamon Walsh.
    * Add semanage_set_check_contexts() function to disable calling
    setfiles


author: Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
changelog:
  - Update to upstream
    * Move libsemanage.so to /usr/lib
    * Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Update to upstream
    * Fix persistent dontaudit support to rebuild policy if the 
          dontaudit state is changed from Chad Sellers.
  - Move load_policy to /sbin


author: Petr Lautrbach <plautrba@redhat.com> 2.0.43-5.1
changelog:
  - Detect already enabled/disabled modules in semanage_direct_{enable,disable} functions
  Resolves: rhbz#872700
  - Fix sources to pass all tests
  Rsolves: rhbz#591451


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Upgrade to latest from NSA
    * Check last offset in the module package against the file size.
    Reported by Manoj Srivastava for bug filed by Max Kellermann.


author: Roman Rakus <rrakus@redhat.com> - 1.1.9-3
changelog:
  - Removed executable bit from servicelog.db file (PW review)
  - fixed postun scriptlet (PW review)
    Resolves: #590023


author: Brian Pepple <bpepple@fedoraproject.org> - 0.1.11-7
changelog:
  - Don't generate the gtk-doc docs, and use the ones in the tarball
    to avoid having different files in different builds, fixes
    multilib problems (#342361)


author: Brian Pepple <bpepple@fedoraproject.org> - 0.1.11-13
changelog:
  - Backport patch that allows SexyIconEntry to support images using icon-name.
  - Drop requires on hunspell-en dictionary. (#517804)


author: kwizart < kwizart at gmail.com > - 2.2.2-2
changelog:
  - Fix http://bugzilla.redhat.com/415121
  - Add disable-static
  - Don't use makeinstall macro
  - Update License field


author: Denis Leroy <denis@poolshark.org> - 2.2.4.1-1
changelog:
  - Update to upstream 2.2.4.1
  - Added devhelp book and necessary BRs
  - Split documentation into new subpackage
  - Moved documentation to gtk-doc dir


author: Andreas Thienemann <andreas@bawue.net> - 1.0.17-6
changelog:
  - Removed spurious #endif in the libsndfile.h wrapper. Thx to Edward
    Sheldrake for finding it. Fixes #468508.
  - Fix build for autoconf-2.63


author: Felipe Borges <feborges@redhat.com> - 0.2.4-2
changelog:
  - Allocate at least 1 page if there are no Pages: or Page: comments in the PS file
  - Resolves: #667717


author: Kamil Dudka <kdudka@redhat.com> - 1.4.2-3.el6_10.1
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-1
changelog:
  - New upstream version, resolves rhbz #766335
  - Build python bindings to satisfy Samba4 BuildRequires


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-2
changelog:
  - Obsolete older pytalloc{,-devel} releases to clear the upgrade path
    towards non-multilib pytalloc
  - Resolves: rhbz#862062


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.2.11-7
changelog:
  - Taking over as maintainer since Anvil has other priorities
  - Add a bunch of patches from Debian, which build a .so instead of a .a
    and fix a bunch of memory leaks.
  - Reinstate a proper devel package as we now build a .so


author: Tomas Mraz <tmraz@redhat.com> - 2.2-1
changelog:
  - updated to new upstream version
  - SMP build should work now
  - drop fix for spurious rpath - no longer necessary


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-3
changelog:
  - Resolves: rhbz#692251 - tdb_extend() can cause a memory-usage explosion if
  -                         the size of its entries are very large


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.10-1
changelog:
  - Resolves: rhbz#766334 - Rebase libtdb to match the version required
                            by Samba4
  - Enable the Python bindings to satisfy samba4 BuildRequirements
  - Obsoletes tdb-1.2.9-limit-tdb_expand.patch


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.8-3.2
changelog:
  - Move _tdb_text.py to python-tdb subpackage
  - Resolves: rhbz#1329664 - tdb mispackaged tdb_text.py file


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.16-1
changelog:
  - Rebase to 0.9.16 to provide the version Samba4 needs
  - Resolves: rhbz#766336
  - Drop ABI compatibility patch (no longer needed)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.16-2
changelog:
  - Add BuildRequires on libxslt and docbook-style-xsl to enable
    building manual pages

  - Related: rhbz#766336


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.17-1
changelog:
  - Rebase to 0.9.17 to provide the version Samba4 needs
  - Drop EXCLUDE_PATTERNS workaround in specfile
  - Resolves: rhbz#766336


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.18-2
changelog:
  - Resolves: rhbz#975489 - Additional flags might have no effect
                            on 32bit architectures


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.26-1
changelog:
  - Rebase libtevent to 0.9.26
  - Remove upstreamed or no longer applicable patches
  - Related: rhbz#1322688


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.26-2
changelog:
  - temporarily disable make check, which keeps failing in mock despite
    working correctly on a full system
  - Related: rhbz#1322688


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Related: #458674
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Sync with F-12, including:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  - Apply Warmerdam's partial fix for bug #460322 ... better than nothing.
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  - add sparc/sparc64 to multilib header support
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, CVE-2010-2233
  Resolves: #606708, #588784, #589034, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.4-1.el6_0.2
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688829
  - Add fix for CVE-2011-1167
  Resolves: #688742


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688830
  - Add fix for CVE-2011-1167
  Resolves: #688743


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885311


author: Petr Hracek <phracek@redhat.com> - 3.9.4-10
changelog:
  - This resolves several CVEs
  - CVE-2014-8127, CVE-2014-8129, CVE-2014-8130
  - CVE-2014-9330, CVE-2014-9655, CVE-2015-8781
  - CVE-2015-8784, CVE-2015-1547, CVE-2015-8683
  - CVE-2015-8665, CVE-2015-7554, CVE-2015-8668
  - Resolves: #1299919


author: Nikola Forró <nforro@redhat.com> - 3.9.4-14
changelog:
  - Merge previously released fixes for CVEs:
  - CVE-2013-1960 CVE-2013-1961 CVE-2013-4231
  - CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
  - Resolves: #1335099


author: Nikola Forró <nforro@redhat.com> - 3.9.4-16
changelog:
  - Add patches for CVEs:
  - CVE-2016-3632 CVE-2016-3945 CVE-2016-3990
  - CVE-2016-3991 CVE-2016-5320
  - Related: #1335099


author: Nikola Forró <nforro@redhat.com> - 3.9.4-19
changelog:
  - Add patches for CVEs:
  - CVE-2016-9533 CVE-2016-9534 CVE-2016-9535
  - CVE-2016-9536 CVE-2016-9537 CVE-2016-9540
  - CVE-2016-5652
  - Resolves: #1412078


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885310


author: Steve Dickson <steved@redhat.com> 0.1.10-6
changelog:
  - libtirpc: set r_netid and r_owner in __rpcb_findaddr_timed
  - libtirpc: be sure to free cl_netid and cl_tp
  - libtirpc: must free saved wire verifier when destroying context


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.1.11-3
changelog:
  - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems


author: Steve Dickson <steved@redhat.com> 0.2.0-2
changelog:
  - Updated to latest upstream tag: 0-2-1-rc2
      rpcb_clnt: RPC_PROGNOTREGISTERED is a permanent error
      clnt_dg: Fix infinite loop when datagram call times ou
      Updated .gitignore file
      Replace the hard coded path name with the top_srcdir macrc
      Added 'doc' to the SUBDIRS list so make install work correctly.


author: Steve Dickson <steved@redhat.com> 0.2.0-3
changelog:
  - Updated to latest upstream tag: 0-2-1-rc3
      Fixed the --disable-gss options
      Fixed a number of warnings
      Change how architectures are define in xdr_float.c


author: Steve Dickson <steved@redhat.com> 0.2.1-7
changelog:
  - Fixed some races in getnetconfig code (bz 1031498)
  - Remove the installation of libtirpc.a and libtirpc.la (bz 869397)


author: Steve Dickson <steved@redhat.com> 0.2.1-11
changelog:
  - Backported upstream debugging (bz 1273158)
  - Fixed memory leak in svc_vc_create (bz 1276687)
  - Fixed memory leak in svc_tli_create (bz 1276855)
  - Fixed memory leak in __svc_vc_dodestroy (bz 1276856)


author: Roozbeh Pournader <roozbeh@gmail.com> - 20080409-1
changelog:
  - Update to upstream 20080409: Unicode 5.1 support
  - Change package versioning scheme
  - Update summary and description
  - Add DistTag
  - Remove copy of GPL from RPM: the only file it applies to is not shipped


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.3-3
changelog:
  - Imported from Fedora
  - Resolves: rhbz#726463 - Add libunistring as a separate component/package
                            into RHEL


author: Hans de Goede <hdegoede@redhat.com> - 1.0.9-0.6.rc1
changelog:
  - Don't split bulk transfers unnecessary
  - Resolves: rhbz#830751
  - Don't let disconnect_kernel_driver detach the usbfs driver
  - Resolves: rhbz#820205


author: Miloslav Trmač <mitr@redhat.com> - 0.56.11-1
changelog:
  - Update to libuser-0.56.11.
    Resolves: #454091
    Resolves: #456267
    Resolves: #456270
    Resolves: #487129


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-1
changelog:
  - Update to libuser-0.56.13.
    Resolves: #251951
    Resolves: #454079
    Resolves: #456373
    Resolves: #456382
    Resolves: #530513


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-2
changelog:
  - Allow supplying passwords from scripts
  - Allow specifying a LDAP simple bind password in libuser.conf
    Resolves: #562832


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-5
changelog:
  - Correctly mark the LDAP default password value as encrypted (CVE-2011-0002)
    Resolves: #668021
  - Default LDAP cn to username if gecos is empty
    Resolves: #670151
  - Preserve setuid and setgid bits when copying files from /etc/skel
    Resolves: #724987
  - Fix segfault when reading database files with certain sizes
    Resolves: #788521


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-7
changelog:
  - Don’t use 512-bit RSA private keys in tests
    Related: #1235518
  - Fix testsuite failures if more than one architecture is building concurrently
    Related: #1235518


author: Dmitry V. Levin <ldv@altlinux.org> 1.1.4-alt1
changelog:
  - Enabled almost all diagnostics supported by gcc and fixed all
    issues found by gcc-3.4.4-alt3.
  - Added FreeBSD support, based on patches from Gentoo/FreeBSD.
  - Makefile:
    + Fixed few portability issues reported by Gentoo developers.
  - libutempter: Linked with -Wl,-z,defs.
  - utempter:
    + Fixed struct utmp initialization on 64-bit architectures
      with 32-bit backwards compatibility enabled (like x86_64).
    + Linked with -Wl,-z,now, i.e., marked it to tell the dynamic
      linker to resolve all symbols when the program is started.
      Suggested by Gentoo developers.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-1.fc6
changelog:
  - Initial build of Dimitry's libutempter replacement for Fedora Core.
  - Reworked the upstream spec file for Fedora packaging compliance.
  - Removed static lib subpackage as we dont ship those.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-2.fc6
changelog:
  - Removed usage of rpm macros inside the spec changelog (#200051)
  - Removed non-UTF-8 chars from changelog.


author: Hans de Goede <hdegoede@redhat.com> 0.5.99-1
changelog:
  - New upstream release 0.5.99
  - This fixes the crashes some people have been experiencing with 0.5.98
    (#503345)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-9
changelog:
  - util: Improve error reporting from absolutePathFromBaseFile helper (rhbz#874860)
  - storage: Fix broken backing chain (rhbz#874860)
  - nodeinfo: Add check and workaround to guarantee valid cpu topologies (rhbz#874050)
  - nodeinfotest: Add test data for 2 processor host with broken NUMA (rhbz#874050)
  - nodeinfotest: Add test data from a AMD bulldozer machine. (rhbz#874050)
  - virsh: save: Report an error if XML file can't be read (rhbz#876868)
  - virsh: Fix uninitialized variable in cmdSnapshotEdit (rhbz#877303)
  - qemu: Allow larger discrepency between memory & currentMemory in domain xml (rhbz#873134)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-10
changelog:
  - Add note about numeric domain names to manpage (rhbz#824253)
  - Use virNetServerRun instead of custom main loop (rhbz#867246)
  - qemu: Fix RBD attach regression (rhbz#878862)
  - qemu: Stop recursive detection of image chains when an image is missing (rhbz#878862)
  - Fix exiting of libvirt_lxc program on container quit (rhbz#879360)
  - snapshot: qemu: Add support for external inactive snapshots (rhbz#876816)
  - conf: Fix private symbols exported by files in conf (rhbz#876816)
  - snapshot: qemu: Fix detection of external snapshots when deleting (rhbz#876816)
  - snapshot: Require user to supply external memory file name (rhbz#876816)
  - snapshot: Add two more filter sets to API (rhbz#876817)
  - snapshot: Add virsh back-compat support for new filters (rhbz#876817)
  - snapshot: Implement new filter sets (rhbz#876817)
  - snapshot: Expose location through virsh snapshot-info (rhbz#876817)
  - sanlock: Retry after EINPROGRESS (rhbz#820173)
  - storage: Fix logical volume cloning (rhbz#879780)
  - cpu: Add Intel Haswell cpu model (fix previous downstream definition) (rhbz#879282)
  - virsh: Report error when taking a snapshot with empty --memspec argument (rhbz#879130)
  - lxc: Don't crash if no security driver is specified in libvirt_lxc (rhbz#880064)
  - lxc: Avoid segfault of libvirt_lxc helper on early cleanup paths (rhbz#880064)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-11
changelog:
  - Fix uninitialized variable in virLXCControllerSetupDevPTS (rhbz#880064)
  - storage: Fix device detach regression with cgroup ACLs (rhbz#876828)
  - storage: Fix bug of fs pool destroying (rhbz#878400)
  - qemu: Fix a crash when save file can't be opened (rhbz#880919)
  - bitmap: Fix typo to use UL type of integer constant in virBitmapIsAllSet (rhbz#876415)
  - virsh: Rewrite cmdDomDisplay (rhbz#878779)
  - network: Fix crash when portgroup has no name (rhbz#879473)
  - util: Capabilities detection for dnsmasq (rhbz#882265)
  - util: New virSocketAddrIsPrivate function (rhbz#882265)
  - network: Use dnsmasq --bind-dynamic when available (rhbz#882265)
  - storage: Fix scsi detach regression with cgroup ACLs (rhbz#876828)
  - libssh2_session: Support DSS keys as well (rhbz#878376)
  - virsh: Fix error messages in iface-bridge (rhbz#878376)
  - virsh: Check the return value of virStoragePoolGetAutostart (rhbz#878376)
  - conf: Check the return value of virXPathNodeSet (rhbz#878376)
  - conf: snapshot: Check return value of virDomainSnapshotObjListNum (rhbz#878376)
  - util: Fix virBitmap allocation in virProcessInfoGetAffinity (rhbz#878376)
  - virsh: Use correct sizeof when allocating cpumap (rhbz#878376)
  - rpc: Don't destroy xdr before creating it in virNetMessageEncodeHeader (rhbz#878376)
  - virsh: Do timing even for unusable connections (rhbz#878376)
  - conf: Fix uninitialized variable in virDomainListSnapshots (rhbz#878376)
  - Fix error handling in virSecurityManagerGetMountOptions (rhbz#878376)
  - conf: Prevent crash with no uuid in cephx auth secret (rhbz#878376)
  - conf: Fix virDomainNetGetActualDirect*() and BridgeName() (rhbz#881480)
  - virsh: Report errors if arguments of the schedinfo command are incorrect (rhbz#882915)
  - systemd: Require dbus service (rhbz#830201)
  - spec: Require dbus-daemon when using libvirtd in Fedora (rhbz#830201)
  - qemu: Don't free PCI device if adding it to activePciHostdevs fails (rhbz#877095)
  - util: Slightly refactor PCI list functions (rhbz#877095)
  - qemu: Fix memory (and FD) leak on PCI device detach (rhbz#877095)
  - util: Do not keep PCI device config file open (rhbz#877095)
  - node_memory: Improve the docs (rhbz#872656)
  - node_memory: Do not fail if there is parameter unsupported (rhbz#872656)
  - node_memory: Fix bug of node_memory_tune (rhbz#872656)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-12
changelog:
  - qemu: Eliminate bogus error log when changing netdev's bridge (rhbz#885838)
  - remote: Avoid the thread race condition (rhbz#866524)
  - storage: Error out earlier if the volume target path already exists (rhbz#832302)
  - dnsmasq: Fix parsing of the version number (rhbz#885727)
  - qemu: Restart CPUs with valid async job type when doing external snapshots (rhbz#885081)
  - examples: Fix balloon event callback (rhbz#884650)
  - util: Don't fail virGetGroupIDByName when group not found (rhbz#883832)
  - util: Don't fail virGetUserIDByName when user not found (rhbz#883832)
  - util: Rework error reporting in virGet(User|Group)IDByName (rhbz#883832)
  - util: Fix warning message in previous patch (rhbz#883832)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-13
changelog:
  - network: Prevent dnsmasq from listening on localhost (rhbz#886821)
  - sanlock: Re-add lockspace unconditionally (rhbz#820173)
  - Fix "virsh create" example (rhbz#887187)
  - docs: Fix some typos in examples (rhbz#887187)
  - network: Don't require private addresses if dnsmasq uses SO_BINDTODEVICE (rhbz#882265)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-14
changelog:
  - util: Add missing error log messages when failing to get netlink VFINFO (rhbz#889319)
  - util: Fix functions that retrieve SRIOV VF info (rhbz#889319)
  - util: Fix botched check for new netlink request filters (rhbz#889319)
  - blockjob: Fix memleak that prevented block pivot (rhbz#888426)
  - sanlock: Chown lease files as well (rhbz#820173)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-15
changelog:
  - snapshot: conf: Make virDomainSnapshotIsExternal more reusable (rhbz#889407)
  - snapshot: qemu: Separate logic blocks with newlines (rhbz#889407)
  - snapshot: qemu: Fix segfault and vanishing snapshots when redefining (rhbz#889407)
  - snapshot: qemu: Allow redefinition of external snapshots (rhbz#889407)
  - util: Prepare helpers for unpriv_sgio setting (rhbz#878578)
  - qemu: Add a hash table for the shared disks (rhbz#878578)
  - docs: Add docs and rng schema for new XML tag sgio (rhbz#878578)
  - conf: Parse and format the new XML (rhbz#878578)
  - qemu: Set unpriv_sgio when starting domain and attaching disk (rhbz#878578)
  - qemu: Check if the shared disk's cdbfilter conflicts with others (rhbz#878578)
  - qemu: Relax hard RSS limit (rhbz#891653)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-16
changelog:
  - qemu_agent: Remove agent reference only when disposing it (rhbz#892079)
  - Add RESUME event listener to qemu monitor. (rhbz#894085)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-17
changelog:
  - storage: Fix lvcreate parameter for backingStore. (rhbz#896398)
  - qemu: Don't return success if creation of snapshot save file fails (rhbz#896403)
  - qemu: Reject attempts to create snapshots with names containig '/' (rhbz#896403)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18
changelog:
  - rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)
  - spec: Disable libssh2 support (rhbz#513363)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.5
changelog:
  - daemon: Fix leak after listing volumes (CVE-2013-1962)
  - Don't try to add non-existant devices to ACL (rhbz#958837)
  - Avoid spamming logs with cgroups warnings (rhbz#958837)
  - audit: Properly encode device path in cgroup audit (rhbz#958839)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.6
changelog:
  - qemu: Set correct migrate host in client_migrate_info (rhbz#966587)
  - qemu: Fix crash in migration of graphics-less guests. (rhbz#966587)
  - Fix F_DUPFD_CLOEXEC operation args (rhbz#966707)
  - cgroup: Be robust against cgroup movement races (rhbz#966710)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.7
changelog:
  - virsocket: Introduce virSocketAddrIsWildcard (rhbz#966587)
  - qemuDomainMigrateGraphicsRelocate: Use then new virSocketAddrIsWildcard (rhbz#966587)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.9
changelog:
  - qemuDomainChangeGraphics: Check listen address change by listen type (rhbz#976543)
  - build: Fix build with -Werror (rhbz#976543)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.10
changelog:
  - qemu: Avoid leaking uri in qemuMigrationPrepareDirect (rhbz#984578)
  - qemu: Fix double free in qemuMigrationPrepareDirect (rhbz#984578)
  - conf: Don't fail to parse <boot> when parsing a single device (rhbz#1003934)
  - Plug leak in virCgroupMoveTask (rhbz#984556)
  - Fix invalid read in virCgroupGetValueStr (rhbz#984561)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.12
changelog:
  - Introduce APIs for splitting/joining strings (rhbz#1006265)
  - Rename virKillProcess to virProcessKill (rhbz#1006265)
  - Rename virPid{Abort, Wait} to virProcess{Abort, Wait} (rhbz#1006265)
  - Rename virCommandTranslateStatus to virProcessTranslateStatus (rhbz#1006265)
  - Move virProcessKill into virprocess.{h, c} (rhbz#1006265)
  - Move virProcess{Kill, Abort, TranslateStatus} into virprocess.{c, h} (rhbz#1006265)
  - Include process start time when doing polkit checks (rhbz#1006265)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.15
changelog:
  - network: Allow <vlan> in type='hostdev' networks (rhbz#1014445)
  - libvirt-guests: status: Return non-zero when stopped (rhbz#1017196)
  - qemu: Take error path if acquiring of job fails in qemuDomainSaveInternal (rhbz#1017194)
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1017198)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1017198)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.1
changelog:
  - xen: Resolve resource leak with 'cpuset' (rhbz#908836)
  - schema: Make the cpuset type reusable across schema files (rhbz#908836)
  - schemas: Add schemas for more CPU topology information in the caps XML (rhbz#908836)
  - conf: Split out NUMA topology formatting to simplify access to data (rhbz#908836)
  - capabilities: Switch CPU data in NUMA topology to a struct (rhbz#908836)
  - capabilities: Add additional data to the NUMA topology info (rhbz#908836)
  - test: Add support for thread and core information for the test driver (rhbz#908836)
  - xen: Initialize variable before using (rhbz#908836)
  - xen: Actually fix the uninitialized variable (rhbz#908836)
  - spice: Properly reserve tlsPort when no port specified (rhbz#913624)
  - qemu_agent: Ignore expected EOFs (rhbz#915344)
  - qemu: Nicer error message if live disk snapshot unsupported (rhbz#915363)
  - qemu: Destroy domain on decompression binary error (rhbz#915347)
  - qemu: Run lzop with '--ignore-warn' (rhbz#915347)
  - Don't ignore return value of qemuProcessKill (rhbz#915353)
  - Fix race condition when destroying guests (rhbz#915353)
  - Log warning if storage magic matches, but version does not (rhbz#915354)
  - Add lots of debugging to storage file probing code (rhbz#915354)
  - Fix probing of QED file format (rhbz#915354)
  - util: Add virendian.h macros (rhbz#915354)
  - util: Use new virendian.h macros (rhbz#915354)
  - storage: Rearrange functions (rhbz#915354)
  - storage: Prepare for refactoring (rhbz#915354)
  - storage: Refactor metadata lookup (rhbz#915354)
  - storage: Don't follow backing chain symlinks too eagerly (rhbz#915354)
  - storage: Test backing chain traversal (rhbz#915354)
  - qemu: Check backing chains even when cgroup is omitted (rhbz#915349)
  - python: Fix bindings for virDomainSnapshotGet{Domain,Connect} (rhbz#915348)
  - qemu: Add checking in helpers for sgio setting (rhbz#919504)
  - qemu: Merge qemuCheckSharedDisk into qemuAddSharedDisk (rhbz#919504)
  - qemu: Record names of domain which uses the shared disk in hash table (rhbz#919504)
  - qemu: Update shared disk table when reconnecting qemu process (rhbz#919504)
  - qemu: Move the shared disk adding and sgio setting prior to attaching (rhbz#919504)
  - qemu: Remove the shared disk entry if the operation is ejecting or updating (rhbz#919504)
  - qemu: Fix the memory leak (rhbz#919504)
  - Fix crash changing CDROM media (rhbz#919504)
  - qemu: Avoid NULL dereference in qemuSharedDiskEntryFree (rhbz#919504)
  - qemu: Do not set unpriv_sgio if neither supported nor requested (rhbz#917063)
  - Use size_t instead of int for virDomainDefPtr struct (rhbz#915352)
  - util: Add VIR_(APPEND|INSERT|DELETE)_ELEMENT (rhbz#915352)
  - qemu: Fix QMP detection of QXL graphics (rhbz#915352)
  - qemu: Add qemu vga devices caps and one cap to mark them usable (rhbz#915352)
  - conf: Add optional attribte primary to video <model> element (rhbz#915352)
  - qemu: Use newer -device video device in qemu commandline (rhbz#915352)
  - tests: Add one -device video device testcase (rhbz#915352)
  - qemu: Detect VGA_QXL capability correctly (rhbz#915352)
  - qemu: Support ram bar size for qxl devices (rhbz#915352)
  - conf: Don't leak 'primary' video property on error (rhbz#915352)
  - storage: lvm: Don't overwrite lvcreate errors (rhbz#918754)
  - storage: lvm: Lvcreate fails with allocation=0, don't do that (rhbz#918754)
  - storage: Cleanup logical volume creation code (rhbz#918754)
  - docs: Clarify semantics of sparse storage volumes (rhbz#918754)
  - storage: Fix memory leak with regfree(reg) call. (rhbz#922095)
  - storage: Resource resource leak using 'tmp_vols' (rhbz#922095)
  - interface: Resolve resource leak wth 'tmp_iface_objs' (rhbz#922095)
  - locking: Resolve resource leaks on non error path (rhbz#922095)
  - selinux: Resolve resource leak using the default disk label (rhbz#922095)
  - storage: Resolve resource leaks with cmd processing (rhbz#922095)
  - domain_conf: Resolve resource leaks found by Valgrind (rhbz#922095)
  - qemu_command: Resolve resource leaks found by Valgrind (rhbz#922095)
  - storage: Need to add virCommandFree() (rhbz#922095)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.3
changelog:
  - util: Retry NLM_F_REQUEST with different values of IFLA_EXT_MASK (rhbz#928881)
  - security_manager: Don't manipulate domain XML in virDomainDefGetSecurityLabelDef (rhbz#928879)
  - security: Don't add seclabel of type none if there's already a seclabel (rhbz#928879)
  - libvirt_private.syms: Correctly export seclabel APIs (rhbz#928879)
  - security_manager.c: Append seclabel iff generated (rhbz#928879)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-18.el6_4.4
changelog:
  - rpc: Fix client crash when server drops connection (rhbz#950601)
  - storage: Fix volume cloning for logical volume. (rhbz#950604)
  - qemu: Allow migration over IPv6 (rhbz#950597)
  - qemu: Set IPv6 migration capability when dump-guest-core is present (rhbz#950597)
  - remote: Don't call NULL closeFreeCallback (rhbz#950599)
  - libvirt: Increase connection reference count for callbacks (rhbz#950599)
  - virsh: Unregister the connection close notifier upon termination (rhbz#950599)
  - virsh: Move cmdConnect from virsh-host.c to virsh.c (rhbz#950599)
  - virsh: Register and unregister the close callback also in cmdConnect (rhbz#950599)
  - rpc: Fix connection close callback race condition and memory corruption/crash (rhbz#950599)
  - tests: Fix qemumonitorjsontest deadlock when the machine is under load (rhbz#951235)
  - Avoid use of free'd memory in auto destroy callback (rhbz#951073)
  - Fix crash in QEMU auto-destroy with transient guests (rhbz#951073)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-21
changelog:
  - conf: Avoid NULL deref for pmsuspended domain state (rhbz#822306)
  - libvirt: Define domain crash event types (rhbz#822306)
  - qemu: Refactor processWatchdogEvent (rhbz#822306)
  - qemu: Expose qemuProcessShutdownOrReboot() (rhbz#822306)
  - qemu: Implement 'oncrash' events when guest panicked (rhbz#822306)
  - qemu: Implement 'oncrash' coredump events when guest panicked (rhbz#822306)
  - conf: Fix a memory leak when parsing nat port XML nodes (rhbz#851455)
  - security_manager: Fix comparison (rhbz#984793)
  - qemu: Prevent crash of libvirtd without guest agent configuration (rhbz#984821)
  - qemu: Fix double free of returned JSON array in qemuAgentGetVCPUs() (rhbz#984821)
  - qemu_agent: Add support for appending arrays to commands (rhbz#924400)
  - Add support for locking domain's memory pages (rhbz#947118)
  - qemu: Implement support for locking domain's memory pages (rhbz#947118)
  - qemu: Check for -realtime mlock=on|off support (rhbz#947118)
  - qemu: Move memory limit computation to a reusable function (rhbz#947118)
  - util: New virCommandSetMax(MemLock|Processes|Files) (rhbz#947118)
  - qemu: Set RLIMIT_MEMLOCK when memoryBacking/locked is used (rhbz#947118)
  - Add Gluster protocol as supported network disk backend (rhbz#849796)
  - qemu: Add support for gluster protocol based network storage backend. (rhbz#849796)
  - tests: Add tests for gluster protocol based network disks support (rhbz#849796)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-22
changelog:
  - virsh: Fix change-media bug on disk block type (rhbz#923053)
  - Fix patches for multiple graphics and spice migration (rhbz#975751)
  - Revert "qemu: Remove maximum cpu limit when setting processor count using the API" (rhbz#855296)
  - Remove VIR_DOMAIN_SHUTDOWN_CRASHED from public API (rhbz#822306)
  - Rename VIR_DOMAIN_PAUSED_GUEST_PANICKED to VIR_DOMAIN_PAUSED_CRASHED (rhbz#822306)
  - Improve LXC startup error reporting (rhbz#903092)
  - qemu: Take error path if acquiring of job fails in qemuDomainSaveInternal (rhbz#928661)
  - util: Improve user lookup helper (rhbz#964359)
  - util: Add virGetGroupList (rhbz#964359)
  - util: Make virSetUIDGID async-signal-safe (rhbz#964359)
  - Fix potential deadlock across fork() in QEMU driver (rhbz#964359)
  - security: Framework for driver PreFork handler (rhbz#964359)
  - security_dac: Compute supplemental groups before fork (rhbz#964359)
  - security: Fix deadlock with prefork (rhbz#964359)
  - Split TLS test into two separate tests (rhbz#975201)
  - Avoid re-generating certs every time (rhbz#975201)
  - Change data passed into TLS test cases (rhbz#975201)
  - Fix validation of CA certificate chains (rhbz#975201)
  - Fix parallel runs of TLS test suites (rhbz#975201)
  - tests: Fix parallel runs of TLS test suites (rhbz#975201)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-23
changelog:
  - virnettlscontext: Resolve Coverity warnings (UNINIT) (rhbz#975201)
  - Fix qemuProcessReadLog with non-zero offset (rhbz#991334)
  - virSecurityManagerGenLabel: Skip seclabels without model (rhbz#997818)
  - bitmap: Add virBitmapCountBits (rhbz#997367)
  - virbitmap: Refactor virBitmapParse to avoid access beyond bounds of array (rhbz#997367)
  - virbitmaptest: Add test for out of bounds condition (rhbz#997367)
  - network: Allow <vlan> in type='hostdev' networks (rhbz#999107)
  - python: Fix bindings that don't raise an exception (rhbz#912170)
  - storage: Update pool metadata after adding/removing/resizing volume (rhbz#965442)
  - storage: Fix coverity warning (rhbz#965442)
  - storage: Fix the use-after-free memory bug (rhbz#965442)
  - network: Permit upstream forwarding of unqualified DNS names (rhbz#928638)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-24
changelog:
  - security: Provide supplemental groups even when parsing label (rhbz#964359)
  - qemu: Remove hostdev entry when freeing the depending network entry (rhbz#1000973)
  - virsh: Correct DESCRIPTION for virsh help blockcopy (rhbz#1002790)
  - Add '<nat>' element to '<forward>' network schemas (rhbz#1004365)
  - build: More workarounds for if_bridge.h (rhbz#1002735)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-25
changelog:
  - migration: Do not restore labels on failed migration (rhbz#895826)
  - qemu: Use default machine type if missing it in qemu command line (rhbz#995312)
  - qemu: Don't leak vm on failure (rhbz#995312)
  - virDomainDefParseXML: Set the argument of virBitmapFree to NULL after calling virBitmapFree (rhbz#1006710)
  - tests: Files named '.*-invalid.xml' should fail validation (rhbz#1006710)
  - tests: Use portable shell code (rhbz#1006710)
  - Add test for the nodemask double free crash (rhbz#1006710)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-26
changelog:
  - Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296)
  - Introduce APIs for splitting/joining strings (rhbz#1006266)
  - Rename virKillProcess to virProcessKill (rhbz#1006266)
  - Rename virPid{Abort, Wait} to virProcess{Abort, Wait} (rhbz#1006266)
  - Rename virCommandTranslateStatus to virProcessTranslateStatus (rhbz#1006266)
  - Move virProcessKill into virprocess.{h, c} (rhbz#1006266)
  - Move virProcess{Kill, Abort, TranslateStatus} into virprocess.{c, h} (rhbz#1006266)
  - Include process start time when doing polkit checks (rhbz#1006266)
  - Add support for using 3-arg pkcheck syntax for process (CVE-2013-4311)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-28
changelog:
  - libvirt-guests: status: Return non-zero when stopped (rhbz#1011981)
  - qemu: Drop qemuDomainMemoryLimit (rhbz#1013758)
  - docs: Discourage users to set hard_limit (rhbz#1013758)
  - docs: Clean 09adfdc62de2b up (rhbz#1013758)
  - qemuSetupMemoryCgroup: Handle hard_limit properly (rhbz#1013758)
  - qemuBuildCommandLine: Fall back to mem balloon if there's no hard_limit (rhbz#1013758)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29
changelog:
  - virNetDevBandwidthEqual: Make it more robust (rhbz#1014198)
  - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1014198)
  - qemu: Generate correct name for hostdev network devices (rhbz#1001881)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-20
changelog:
  - qemu: Don't force port=0 for SPICE (rhbz#975751)
  - qemu: Refactor graphics code to not hardcode a single display (rhbz#975751)
  - qemu: Graphics support for simultaneous one of each sdl, vnc, spice (rhbz#975751)
  - qemu: Don't miss errors when changing graphics passwords (rhbz#975751)
  - qemu: Allow seamless migration for domains with multiple graphics (rhbz#975751)
  - qemu_migration: Move waiting for SPICE migration (rhbz#920205)
  - util: Refactor iptables command construction into multiple steps (rhbz#851455)
  - net: Support set public ip range for forward mode nat (rhbz#851455)
  - net: Add support for specifying port range for forward mode nat (rhbz#851455)
  - qemu_migrate: Dispose listen address if set from config (rhbz#971485)
  - qemu: Remove maximum cpu limit when setting processor count using the API (rhbz#855296)
  - qemu_agent: Introduce helpers for agent based CPU hot(un)plug (rhbz#924400)
  - virsh-domain: Refactor cmdVcpucount and fix output on inactive domains (rhbz#924400)
  - API: Introduce VIR_DOMAIN_VCPU_AGENT, for agent based CPU hot(un)plug (rhbz#924400)
  - qemu: Implement request of vCPU state using the guest agent (rhbz#924400)
  - qemu: Implement support for VIR_DOMAIN_VCPU_AGENT in qemuDomainSetVcpusFlags (rhbz#924400)
  - qemuDomainGetVcpusFlags: Initialize ncpuinfo (rhbz#924400)
  - Fix commit 29c1e913e459058c12d02b3f4b767b3dd428a498 (rhbz#924400)
  - qemu: Make qemuMigrationIsAllowed more reusable (rhbz#972675)
  - qemu: Cancel migration if guest encoutners I/O error while migrating (rhbz#972675)
  - qemu: Forbid migration of machines with I/O errors (rhbz#972675)
  - migration: Make erroring out on I/O error controllable by flag (rhbz#972675)
  - migration: Don't propagate VIR_MIGRATE_ABORT_ON_ERROR (rhbz#972675)
  - Paused domain should remain paused after migration (rhbz#972675)
  - qemu: New vnc display sharing policy caps flag (rhbz#803602)
  - conf: Add 'sharePolicy' attribute to graphics element for vnc (rhbz#803602)
  - qemu: Add ', share=<policy>' to qemu commandline (rhbz#803602)
  - virsh: Distinguish errors between missing argument and wrong option (rhbz#924596)
  - virsh: Fix incorrect argument errors for long options (rhbz#924596)
  - virsh: Resolve Coverity 'MISSING_BREAK' (rhbz#924596)
  - virnetdev: Need to initialize 'pciConfigAddr' (rhbz#980339)
  - qemu: Fix double free in qemuMigrationPrepareDirect (rhbz#977961)
  - sec_manager: Refuse to start domain with unsupported seclabel (rhbz#947387)
  - usb: Don't spoil decimal addresses (rhbz#981503)
  - storage: Return -1 when fs pool can't be mounted (rhbz#983539)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.2
changelog:
  - qemuDomainDestroyFlags: Don't allow @vm to disappear while executing API (rhbz#1038816)
  - python: Return dictionary without value in case of no blockjob (rhbz#1038815)
  - remote: Fix regression in event deregistration (rhbz#1038814)
  - Add virtio-scsi to fallback models of scsi controller (rhbz#1040141)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.3
changelog:
  - qemu: Avoid operations on NULL monitor if VM fails early (rhbz#1055578)
  - qemu: Do not access stale data in virDomainBlockStats (CVE-2013-6458)
  - qemu: Avoid using stale data in virDomainGetBlockInfo (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockJobImpl (CVE-2013-6458)
  - qemu: Fix job usage in qemuDomainBlockCopy (rhbz#1054804)
  - qemu: Fix job usage in virDomainGetBlockIoTune (CVE-2013-6458)
  - Don't crash if a connection closes early (CVE-2014-1447)
  - Really don't crash if a connection closes early (CVE-2014-1447)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.4
changelog:
  - Block info query: Add check for transient domain (rhbz#1059904)
  - network: Only prevent forwarding of DNS requests for unqualified names (rhbz#1062708)
  - network: Change default of forwardPlainNames to 'yes' (rhbz#1062708)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.6
changelog:
  - Remove contiguous CPU indexes assumption (rhbz#1080439)
  - qemu: monitor: Fix error message and comment when getting cpu info (rhbz#1080439)
  - qemu: monitor: Filter out thread ids of CPUS that were unplugged (rhbz#1080439)
  - qemu: monitor: Fix invalid parentheses (rhbz#1080471)
  - virNetClientSetTLSSession: Restore original signal mask (rhbz#1080501)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.8
changelog:
  - LSN-2014-0003: Don't expand entities when parsing XML (CVE-2014-0179)
  - QoS: make tc filters match all traffic (rhbz#1096806)
  - use virBitmapFree instead of VIR_FREE for cpumask (rhbz#1091206)
  - Properly free vcpupin info for unplugged CPUs (rhbz#1091206)
  - sanlock: code movement in virLockManagerSanlockAcquire (rhbz#1097227)
  - sanlock: don't fail with unregistered domains (rhbz#1097227)
  - sanlock: avoid leak in acquire() (rhbz#1097227)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.9
changelog:
  - qemuDomainObjBeginJobInternal: Return -2 for temporary failures (rhbz#1100671)
  - qemu: Make qemuProcess{Start, Stop}CPUs easier to follow (rhbz#1100671)
  - qemu: Ignore temporary job errors when checking migration status (rhbz#1100671)
  - qemu: Send migrate_cancel when aborting migration (rhbz#1100642)
  - qemu: add host-pci-multidomain capability (rhbz#1100737)
  - qemu: specify domain in host-side PCI addresses when needed/supported (rhbz#1100737)
  - spec: Switch to "git am" for applying patches


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.10
changelog:
  - qemu: Properly format the uuid string in error messages (rhbz#1110185)
  - qemu: Use maximum guest memory size when getting NUMA placement advice (rhbz#1112819)
  - qemu: fix live pinning to memory node on NUMA system (rhbz#1112820)
  - qemu: Clean up qemuDomainSetNumaParameters (rhbz#1112820)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.11
changelog:
  - virsh: Introduce macros to reject mutually exclusive arguments (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDisk (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDevice (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDisk (rhbz#1120669)
  - virsh: Use inactive definition when removing disk from config (rhbz#1120669)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDevice (rhbz#1120669)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.12
changelog:
  - rpc: message related sizes enlarged (rhbz#1128603)
  - Increase the size of REMOTE_MIGRATE_COOKIE_MAX to REMOTE_STRING_MAX (rhbz#1128603)
  - Fix max stream packet size for old clients (rhbz#1128603)
  - Adjust legacy max payload size to account for header information (rhbz#1128603)
  - rpc: Correct the wrong payload size checking (rhbz#1128603)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-29.el6_5.13
changelog:
  - qemu: allow restore with non-migratable XML input (rhbz#1155563)
  - qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1155563)
  - Make ABI stability issue easier to debug (rhbz#1155563)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-37
changelog:
  - udev: consider the device a CDROM when ID_CDROM=1 (rhbz#1016878)
  - Add support for timestamping QEMU logs (rhbz#997010)
  - Detect -msg-timestamp capability from QEMU help output (rhbz#997010)
  - qemu: Avoid leak in qemuDomainCheckRemoveOptionalDisk (rhbz#1014730)
  - Return right error code for baselineCPU (rhbz#1097969)
  - Add a port allocator class (rhbz#1018695)
  - Avoid integer wrap on remotePortMax in QEMU driver (rhbz#1018695)
  - Followup fix for integer wraparound in port allocator (rhbz#1018695)
  - Don't spam logs with "port 0 must be in range" errors (rhbz#1018695)
  - qemu: Avoid assigning unavailable migration ports (rhbz#1018695)
  - qemu: Make migration port range configurable (rhbz#1018695)
  - qemu: Fix augeas support for migration ports (rhbz#1018695)
  - qemu: clean up migration ports when migration cancelled (rhbz#1018695)
  - qemuDomainObjBeginJobInternal: Return -2 for temporary failures (rhbz#1083238)
  - qemu: Make qemuProcess{Start, Stop}CPUs easier to follow (rhbz#1083238)
  - qemu: Ignore temporary job errors when checking migration status (rhbz#1083238)
  - qemu: Send migrate_cancel when aborting migration (rhbz#1098833)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-38
changelog:
  - remote: Don't leak priv->tls object on connection failure (rhbz#1099075)
  - Fix invalid read in virNetSASLSessionClientStep debug log (rhbz#1100173)
  - Tie SASL callbacks lifecycle to virNetSessionSASLContext (rhbz#1100173)
  - fix leak in memoryStats with older python (rhbz#1099860)
  - hooks: let virCommand do the error reporting (rhbz#1105397)
  - SELinux: don't fail silently when no label is present (rhbz#1105954)
  - qemu: Add qemuDomainReleaseDeviceAddress to remove any address (rhbz#807023)
  - qemu: Separate disk device removal into a standalone function (rhbz#807023)
  - qemu: Separate controller removal into a standalone function (rhbz#807023)
  - qemu: Separate net device removal into a standalone function (rhbz#807023)
  - qemu: Separate host device removal into a standalone function (rhbz#807023)
  - Add VIR_DOMAIN_EVENT_ID_DEVICE_REMOVED event (rhbz#807023)
  - examples: Handle VIR_DOMAIN_EVENT_ID_DEVICE_REMOVED event (rhbz#807023)
  - Clarify virDomainDetachDeviceFlags documentation (rhbz#807023)
  - Add virDomainDefFindDevice for looking up a device by its alias (rhbz#807023)
  - qemu: Add support for DEVICE_DELETED event (rhbz#807023)
  - qemu: Remove devices only after DEVICE_DELETED event (rhbz#807023)
  - qemu: Emit VIR_DOMAIN_EVENT_ID_DEVICE_REMOVED events (rhbz#807023)
  - Add function to find a needle in a string array (rhbz#807023)
  - util: Non-existent string array does not contain any string (rhbz#807023)
  - conf: Make error reporting in virDomainDefFindDevice optional (rhbz#807023)
  - qemu: Introduce qemuMonitorGetDeviceAliases (rhbz#807023)
  - qemu: Unplug devices that disappeared when libvirtd was down (rhbz#807023)
  - qemu: Finish device removal in the original thread (rhbz#807023)
  - qemu: Process DEVICE_DELETED event in a separate thread (rhbz#807023)
  - qemu: Remove interface backend only after frontend is gone (rhbz#807023)
  - qemu: Remove disk backend only after frontend is gone (rhbz#807023)
  - qemu: Return in from qemuDomainRemove*Device (rhbz#807023)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-39
changelog:
  - Fix crash when saving a domain with type none dac label (rhbz#1108590)
  - Initialize threading & error layer in LXC controller (rhbz#1109120)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-40
changelog:
  - formatdomain.html.in: Document implementation limitation of QoS (rhbz#980350)
  - Fix error in qemuDomainSetNumaParamsLive (rhbz#857312)
  - cpu: Add new Broadwell CPU model (rhbz#1100381)
  - docs: publish correct enum values (rhbz#1113316)
  - qemu: blockcopy: Don't remove existing disk mirror info (rhbz#1113828)
  - qemu: fix guestfwd chardev option back how it was (rhbz#1112066)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-41
changelog:
  - Add invariant TSC cpu flag (rhbz#996772)
  - Fix segfault when starting a domain with no cpu definition (rhbz#996772)
  - qemu: copy: Accept 'format' parameter when copying to a non-existing img (rhbz#1113828)
  - Bind connection close callback APIs to python binding (rhbz#1114619)
  - qemu: Factor out body of qemuDomainGetMetadata for universal use (rhbz#1115039)
  - qemu: Factor out body of qemuDomainSetMetadata for universal use (rhbz#1115039)
  - conf: Factor out setting of metadata to simplify code (rhbz#1115039)
  - util: Add helper to convert libxml2 nodes to a string (rhbz#1115039)
  - conf: Add support for requesting of XML metadata via the API (rhbz#1115039)
  - conf: allow to add XML metadata using the virDomainSetMetadata api (rhbz#1115039)
  - conf: Avoid false positive of uninitialized variable use (rhbz#1115039)
  - lib: Don't force the key argument when deleting metadata (rhbz#1115039)
  - test: Add <metadata> support into the test drivera (rhbz#1115039)
  - tests: Add metadata tests (rhbz#1115039)
  - conf: Don't corrupt metadata on OOM (rhbz#1115039)
  - Ignore additional fields in iscsiadm output (rhbz#1116741)
  - conf: net: Fix helper for applying new network definition (rhbz#1116754)
  - blockjob: wait for pivot to complete (rhbz#1119385)
  - virsh: Introduce macros to reject mutually exclusive arguments (rhbz#1117177)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDisk (rhbz#1117177)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDevice (rhbz#1117177)
  - virsh-domain: Add --live, --config, --current logic to cmdDetachDisk (rhbz#1117177)
  - virsh: Use inactive definition when removing disk from config (rhbz#1117177)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachDevice (rhbz#1117177)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-42
changelog:
  - conf: Fix backport of metadata API code (rhbz#1115039)
  - conf: Always format seclabel's model (rhbz#1113860)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-43
changelog:
  - Fix blkdeviotune for shutoff domain (rhbz#1122819)
  - rpc: message related sizes enlarged (rhbz#1126393)
  - Increase the size of REMOTE_MIGRATE_COOKIE_MAX to REMOTE_STRING_MAX (rhbz#1126393)
  - Fix max stream packet size for old clients (rhbz#1126393)
  - Adjust legacy max payload size to account for header information (rhbz#1126393)
  - rpc: Correct the wrong payload size checking (rhbz#1126393)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46
changelog:
  - cpu: separate host-model and host-passthrough (rhbz#1138222)
  - Don't include non-migratable features in host-model (rhbz#1138222)
  - Don't add dhcp hosts to hostsfile twice (rhbz#1137011)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.2
changelog:
  - qemu: allow restore with non-migratable XML input (rhbz#1155564)
  - qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1155564)
  - Make ABI stability issue easier to debug (rhbz#1155564)
  - CVE-2014-3633: qemu: blkiotune: Use correct definition when looking up disk (CVE-2014-3633)
  - domain_conf: fix domain deadlock (CVE-2014-3657)
  - CVE-2014-7823: dumpxml: security hole with migratable flag (CVE-2014-7823)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.3
changelog:
  - qemu: Fix checking of ABI stability when restoring external checkpoints (rhbz#1180521)
  - qemu: Use "migratable" XML definition when doing external checkpoints (rhbz#1180521)
  - qemu: Fix memleak after commit 59898a88ce8431bd3ea249b8789edc2ef9985827 (rhbz#1180521)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.4
changelog:
  - conf: Don't format actual network definition in migratable XML (rhbz#1203367)
  - util: more verbose error when failing to create macvtap device (rhbz#1203367)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-46.el6_6.5
changelog:
  - Create directory for lease files if it's missing (rhbz#1208619)
  - qemu: cgroup: Properly set up vcpu pinning (rhbz#1209891)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-47
changelog:
  - Revert "qemu: export disk snapshot support in capabilities" (rhbz#1149667)
  - qemu: allow restore with non-migratable XML input (rhbz#1141838)
  - qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1141838)
  - Make ABI stability issue easier to debug (rhbz#1141838)
  - domain_conf: fix domain deadlock (CVE-2014-3657)
  - CVE-2014-3633: qemu: blkiotune: Use correct definition when looking up disk (CVE-2014-3633)
  - CVE-2014-7823: dumpxml: security hole with migratable flag (CVE-2014-7823)
  - sanlock: Avoid freeing uninitialized value (rhbz#1136788)
  - virsh: Print cephx and iscsi usage (rhbz#1156327)
  - Fix bug with loading bridge name for active domain during libvirtd start (rhbz#1146310)
  - conf: Fix even implicit labels (rhbz#1138500)
  - tests: Add test cases for previous commit (rhbz#1138500)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-48
changelog:
  - networkValidate: Disallow bandwidth in portgroups too (rhbz#1115292)
  - qemu: Fix checking of ABI stability when restoring external checkpoints (rhbz#834196)
  - qemu: Use "migratable" XML definition when doing external checkpoints (rhbz#834196)
  - qemu: Fix memleak after commit 59898a88ce8431bd3ea249b8789edc2ef9985827 (rhbz#834196)
  - qemu: blkiotune: Avoid accessing non-existing disk configuration (rhbz#1131821)
  - qemu: Fix build error introduced in 653137eb957a278b556c6226424aad5395a (rhbz#1131821)
  - qemu: snapshot: Use better check when reverting external snapshots (rhbz#1124854)
  - virsh: domain: Use global constant for XML file size limit (rhbz#1134671)
  - selinux: Avoid label reservations for type = none (rhbz#1138488)
  - Clean up chardev sockets on QEMU shutdown (rhbz#1122367)
  - Don't include @LIBS@ in libvirt.pc.in file (rhbz#1134455)
  - qemu: save domain state to XML after reboot (rhbz#1169405)
  - virsh: Honour -q in domblklist, vcpupin and emulatorpin (rhbz#1135171)
  - virsh-domain: Flip logic in cmdSetvcpus (rhbz#1139114)
  - Fix possible memory leak in util/virxml.c (rhbz#1136729)
  - esx_vi: fix possible segfault (rhbz#1136729)
  - sasl: Fix authentication when using PLAIN mechanism (rhbz#1171521)
  - Fix leak in x86UpdateHostModel (rhbz#1144304)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-49
changelog:
  - nwfilter: utility function virNWFilterVarValueEqual (rhbz#1126487)
  - qemu: support live update of an interface's filter (rhbz#1126487)
  - qemu: Update fsfreeze status on domain state transitions (rhbz#1136251)
  - virsh: Fix semantics of --config for "update-device" command (rhbz#1129112)
  - virsh: Don't use legacy API if --current is used on device hot(un)plug (rhbz#1125194)
  - qemu: Avoid double serial output with RHEL 6 qemu (rhbz#1162759)
  - storage: Check the partition name against provided name (rhbz#1138523)
  - qemu: Don't unconditionally delete file in qemuOpenFileAs (rhbz#1158036)
  - conf: Don't mangle vcpu placement randomly (rhbz#1170495)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-50
changelog:
  - conf: Don't format actual network definition in migratable XML (rhbz#1186142)
  - network: don't allow multiple portgroups with the same name in a network (rhbz#1115858)
  - build: fix build with latest rawhide kernel headers (rhbz#1198698)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-51
changelog:
  - sanlock: Don't spam logs with "target pid not found" (rhbz#1189414)
  - nwfilter: fix crash when adding non-existing nwfilter (rhbz#1202703)
  - util: more verbose error when failing to create macvtap device (rhbz#1186142)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-52
changelog:
  - qemu: Keep QEMU host drive prefix in BlkIoTune (rhbz#1203633)
  - qemu: Fix name comparison in qemuMonitorJSONBlockIoThrottleInfo() (rhbz#1203633)
  - virsh: fix typos in virsh man page (rhbz#1130835)
  - schemas: Allow all generic elements and attributes for all interfaces (rhbz#1206066)
  - RNG: Allow multiple parameters to be passed to an interface filter (rhbz#1206066)
  - qemu_domain: fix startup policy for disks (rhbz#1203542)
  - Create directory for lease files if it's missing (rhbz#1200991)
  - qemu: cgroup: Properly set up vcpu pinning (rhbz#1198096)
  - cgroup: Add accessors for cpuset.memory_migrate (rhbz#1198497)
  - qemu: Fix possible crash (rhbz#1198497)
  - qemu: Migrate memory on numatune change (rhbz#1198497)
  - qemu: fix crash when removing <filterref> from interface with update-device (rhbz#1205042)
  - nwfilter: Fix rule priority problem (rhbz#1210183)
  - qemuProcessHook: Call qemuProcessInitNumaMemoryPolicy only when needed (rhbz#1198645)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-53
changelog:
  - RHEL: Avoid memory leak when virCgroupSetCpusetMemoryMigrate fails (rhbz#1198497)
  - qemu: cgroup: Fix memory leak when there's no vCPU pinning (rhbz#1198096)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-54
changelog:
  - util: set MAC address for VF via netlink message to PF+VF# when possible (rhbz#1113474)
  - util: set macvtap physdev online when macvtap is set online (rhbz#1113474)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-54.el6_7.1
changelog:
  - qemu: split out cpuset.mems setting (rhbz#1265970)
  - qemu: leave restricting cpuset.mems after initialization (rhbz#1265970)
  - virNetDev{Replace, Restore}MacAddress: Fix memory leak (rhbz#1266039)
  - util: make virNetDev(Replace|Restore)MacAddress public functions (rhbz#1266039)
  - util: don't use netlink to save/set mac for macvtap+passthrough+802.1Qbh (rhbz#1266039)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-55
changelog:
  - daemon: Suppress logging of VIR_ERR_NO_DOMAIN_METADATA (rhbz#1260864)
  - Allow <source> for type=block to have no dev (rhbz#1220197)
  - qemu: event: Properly handle spice events (rhbz#1236581)
  - qemu: event: Clean up VNC monitor handling (rhbz#1236581)
  - qemu: split out cpuset.mems setting (rhbz#1263263)
  - qemu: leave restricting cpuset.mems after initialization (rhbz#1263263)
  - virNetDev{Replace, Restore}MacAddress: Fix memory leak (rhbz#1251532)
  - util: make virNetDev(Replace|Restore)MacAddress public functions (rhbz#1251532)
  - util: don't use netlink to save/set mac for macvtap+passthrough+802.1Qbh (rhbz#1251532)
  - qemu: fix hotplugging cpus with strict memory pinning (rhbz#1263263)
  - storage: Track successful creation of LV for removal (rhbz#1232170)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-56
changelog:
  - qemu: snapshot: Fix return value of external checkpoint with no disks (rhbz#1292312)
  - qemu: snapshot: Fix modification of vm object without job (rhbz#1290647)
  - virsh-domain: Add --live, --config, --current logic to cmdAttachInterface (rhbz#1229128)
  - RHEL: virsh: remove duplicate --config for 'virsh update-device' (rhbz#1224037)
  - Update ESX driver to always use privateData (rhbz#1213348)
  - esx: Simplify VI (vSphere) API and VMware product version handling (rhbz#1213348)
  - conf: net: Correctly switch how to format address fields (rhbz#1299700)
  - qemu: Refuse to create snapshot of a disk without source (rhbz#1299411)
  - Build all binaries with PIE (rhbz#1242156)
  - Enable full RELRO mode (rhbz#1242156)
  - Don't duplicate compiler warning flags when linking (rhbz#1242156)
  - Simplify RELRO_LDFLAGS (rhbz#1242156)
  - Fix AM_LDFLAGS typo (rhbz#1242156)
  - Pass AM_LDFLAGS to driver modules too (rhbz#1242156)
  - RHEL: Enable RELRO for python modules (rhbz#1242156)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-57
changelog:
  - vmx: Relax virtualHW.version check (rhbz#1300574)
  - qemu: snapshot: Don't leak XML definition and forget to unlock job (rhbz#1305793)
  - qemu: Fix formatting flags in qemuDomainSaveImageOpen (rhbz#1307094)
  - network: Resolve some issues around vlan copying (rhbz#1300843)
  - network: fix connections count in case of allocate failure (rhbz#1300843)
  - network: consolidate connection count updates for device pool (rhbz#1300843)
  - network: consolidated info log for all network allocate/free operations (rhbz#1300843)
  - util: increase libnl buffer size (rhbz#1276478)
  - util: reduce debug log in virPCIGetVirtualFunctions() (rhbz#1276478)
  - util: improve error reporting in virNetDevVPortProfileGetStatus (rhbz#1276478)
  - util: add missing newline (rhbz#1276478)
  - util: eliminate bogus error log in virNetDevVPortProfileGetStatus (rhbz#1276478)
  - util: clean up and expand 802.1QbX negotiation logging (rhbz#1276478)
  - util: report the MAC address that couldn't be set (rhbz#1276478)
  - util: reset MAC address of macvtap passthrough physdev after disassociate (rhbz#1276478)
  - bitmap: add way to find next clear bit (rhbz#1276478)
  - Introduce virBitmapIsBitSet (rhbz#1276478)
  - util: Introduce flags field for macvtap creation (rhbz#1276478)
  - virnetdevmacvlan.c: Introduce mutex for macvlan creation (rhbz#1276478)
  - util: keep/use a bitmap of in-use macvtap devices (rhbz#1276478)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-61
changelog:
  - virsh: Properly display block job type (rhbz#1326653)
  - spec: proper soft static allocation of qemu uid (rhbz#1351792)
  - Revert "qemu: snapshot: Fix modification of vm object without job" (rhbz#1326652)
  - qemu: snapshot: Fix job handling when creating snapshots (rhbz#1326652)
  - tls: remove support for gnutls 1.x.x, require 2.2.0 (rhbz#1333415)
  - configure: allow setting default TLS priority string (rhbz#1333415)
  - rpc: allow priority string to be passed to TLS context (rhbz#1333415)
  - libvirtd: add config option for TLS priority (rhbz#1333415)
  - remote: allow TLS protocol/cipher priority override in URI (rhbz#1333415)
  - Pass config file object through to driver open methods (rhbz#1333415)
  - remote: allow TLS priority to be customized (rhbz#1333415)
  - qemu: -numa doesn't (yet) support disjoint range (rhbz#1310122)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-62
changelog:
  - qemu: fix return value of qemuDomainBlockPivot on errors (rhbz#1300159)
  - qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1300159)
  - migration: add support for migrateURI configuration (rhbz#1347389)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-62.el6_9.1
changelog:
  - util: Implement virFileReadHeaderFD (CVE-2017-5715)
  - util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
  - util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
  - conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
  - cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-63
changelog:
  - qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748)
  - qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-64
changelog:
  - cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
  - cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)


author: Jiri Denemark <jdenemar@redhat.com> - 0.10.2-64.el6_10.1
changelog:
  - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)
  - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)


author: Dave Allan <dallan@redhat.com> - 0.8.1-19
changelog:
  - Add character device backend activating QEMU internal spice agent
  - Resolves: rhbz#615757
  - Make libvirt-guests initscript Fedora compliant
  - Resolves: rhbz#617300


author: Dave Allan <dallan@redhat.com> - 0.8.1-21
changelog:
  - Fix multiple PCI device assignment bugs
  - Resolves: rhbz#617116
  - Fix the ACS checking in the PCI code
  - Resolves: rhbz#615218
  - Disable boot=on when not using KVM
  - Resolves: rhbz#594068
  - Don't leak delay string when freeing virInterfaceBridgeDefs
  - Resolves: rhbz#620837


author: Dave Allan <dallan@redhat.com> - 0.8.1-22
changelog:
  - Mitigate asynchronous device_del
  - Resolves: rhbz#609437
  - Fix PCI address allocation
  - Resolves: rhbz#618484
  - Make nodeinfo skip offline CPUs
  - Resolves: rhbz#622515


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-25
changelog:
  - fix PXE booting on the virtual network
  - Resolves: rhbz#623951
  - fix tunelled migration
  - Resolves: rhbz#624062


author: Dave Allan <dallan@redhat.com> - 0.8.1-26
changelog:
  - Fix problem with capabilities XML generation
  - Resolves: rhbz#620847
  - Correctly reserve and release PCI slots
  - Resolves: rhbz#623877


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-27
changelog:
  - build -26 hit a miscompilation error c.f. 624895 drop -j8
  - Resolves: rhbz#620847
  - Resolves: rhbz#623877


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-27
changelog:
  - build -26 hit a miscompilation error c.f. 624895 drop -j2
  - Resolves: rhbz#620847
  - Resolves: rhbz#623877


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.1
changelog:
  - Fix JSON migrate_set_downtime command (rhbz#658143)
  - Make SASL work over UNIX domain sockets (rhbz#658144)
  - Let qemu group look below /var/lib/libvirt/qemu/ (rhbz#656972)
  - Fix save/restore on root_squashed NFS (rhbz#656355)
  - Fix race on multiple migration (rhbz#658141)
  - Export host information through SMBIOS to guests (rhbz#652678)
  - Support forcing a CDROM eject (rhbz#658147)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.2
changelog:
  - spec file cleanups (rhbz#662045)
  - Fix deadlock on concurrent multiple bidirectional migration (rhbz#662043)
  - Fix off-by-one error in clock-variable (rhbz#662046)
  - Export host information through SMBIOS to guests (rhbz#652678)
  - Ensure device is deleted from guest after unplug (rhbz#662041)
  - Distinguish between QEMU domain shutdown and crash (rhbz#662042)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.3
changelog:
  - Remove patches not suitable for proper Z-stream:
      - Export host information through SMBIOS to guests (rhbz#652678)
      - Support forcing a CDROM eject (rhbz#658147)
  - Plug several memory leaks (rhbz#672549)
  - Avoid memory overhead of matchpathcon (rhbz#672554)
  - Do not start libvirt-guests if that service is off (rhbz#668694)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.1-27.el6_0.6
changelog:
  - Properly initialize supplementary groups for qemu process (rhbz#668692)
  - Make error reporting in libvirtd thread safe (CVE-2011-1486)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-9.el6
changelog:
  - Reorder nwfilter match extensions relative to state match (rhbz#678139)
  - Avoid overwriting error message in qemu driver (rhbz#678870)
  - Allow removing hash entries in virHashForEach (rhbz#681459)
  - Avoid double close on qemu domain restore (rhbz#672725)
  - Fix DomainObj refcounting/hashtable races in qemu driver (rhbz#670848)
  - Fix several memory leaks (rhbz#682249)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-11.el6
changelog:
  - Support vram specification for qxl graphics (rhbz#673578)
  - Fix parsing int options in virsh (rhbz#639587)
  - Use -o encryption=on instead of -e for qemu-img (rhbz#676984)
  - Support domain snapshots with current QMP (rhbz#589076)
  - Update auditing support (rhbz#642785)
  - Only request sound cgroup ACL when required (rhbz#680398)
  - Allow fine-tuning of device ACL permissions (rhbz#683163)
  - Support vhost in attach-interface (rhbz#683276)
  - Don't request cgroup ACL access for /dev/net/tun (rhbz#683305)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-12.el6
changelog:
  - Fix vram settings for qxl graphics (rhbz#673578)
  - Free stream when domain shuts down while its console is open (rhbz#682741)
  - Use hardcoded python path in libvirt.py (rhbz#684204)
  - Add missing checks for read only connections (CVE-2011-1146)
  - Eliminate potential null pointer deref when auditing macvtap devices (rhbz#642785)
  - Insert error messages to avoid a quiet abortion of commands (rhbz#605660)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-13.el6
changelog:
  - Properly report error in virConnectDomainXMLToNative (CVE-2011-1146)
  - Handle DNS over IPv6 (rhbz#687896)
  - Start dnsmasq even if no dhcp ranges/hosts are specified (rhbz#687291)
  - Use a separate dhcp leases file for each network (rhbz#687551)
  - Fix a possible crash in storage driver (rhbz#684712)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-14.el6
changelog:
  - Fix delayed events when SASL is active (rhbz#624252)
  - Fix ref-counting bugs (rhbz#688774)
  - Log an error if on failure to connect to netlink socket (rhbz#689001)
  - Log error and abort network startup when radvd isn't found (rhbz#688957)
  - Add PCI sysfs reset access rights to qemu (rhbz#689002)
  - Fix regression with qemu:///session URI (rhbz#684655)
  - Avoid leaking PCI config fd into qemu (rhbz#687993)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-15.el6
changelog:
  - Fix return value for virJSONValueFromString if it fails (rhbz#688723)
  - Fix positioning to end of qemu log file (rhbz#689986)
  - Initialization error of qemuCgroupData in Qemu host usb hotplug (rhbz#690183)
  - 8021Qbh: Use preassociate-rr during the migration prepare stage (rhbz#684870)
  - Make error reporting in libvirtd thread safe (rhbz#689374)
  - Add missing dependencies (rhbz#690022)
  - Fix restoring a compressed save image (rhbz#691034)
  - Fix label restore bugs in qemu driver (rhbz#690737)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-16.el6
changelog:
  - nwfilter: Enable rejection of packets (rhbz#681948)
  - Revert all previous error log priority hacks (rhbz#587603)
  - Filter out certain expected error messages from libvirtd (rhbz#587603)
  - qemu: Unlock qemu driver before return from domain save (rhbz#688774)
  - Do not send monitor command after monitor meet error (rhbz#688774)
  - qemu: Ignore libvirt debug messages in qemu log (rhbz#681492)
  - virsh: Fix memtune's help message for swap_hard_limit (rhbz#680190)
  - virsh: Fix documentation for memtune command (rhbz#680190)
  - docs: Fix typo (rhbz#680190)
  - Fix typo in systemtap tapset directory name (rhbz#693701)
  - qemu: Ignore unusable binaries (rhbz#676563)
  - qemu: Support for overriding NPROC limit (rhbz#674602)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-17.el6
changelog:
  - Don't return an error on failure to create blkio controller (rhbz#689030)
  - Fix possible infinite loop in remote driver (rhbz#691514)
  - qemu: Remove the managed state file only if restoring succeeded (rhbz#692998)
  - docs: Tweak virsh restore warning (rhbz#692998)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.7-18.el6
changelog:
  - network: Fix NULL dereference during error recovery (rhbz#696660)
  - virsh: Fix regression in parsing optional integer (rhbz#693963)
  - util: Fix crash when removing entries during hash iteration (rhbz#693385)
  - Experimental libvirtd upstart job (rhbz#678084)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.7-18.el6_1.1
changelog:
  - debug: Avoid null dereference on uuid lookup api (rhbz#728546)
  - Fix auditing of disk hotunplug operations (rhbz#728516)
  - storage: Fix regression with backing format (rhbz#726617)
  - Fix performance problem of virStorageVolCreateXMLFrom() (rhbz#715400)
  - qemu: Translate boot config into bootindex if possible (rhbz#715401)
  - remote: Protect against integer overflow (rhbz#717202)
  Resolves: rhbz#728546, rhbz#728516, rhbz#715400, rhbz#715401, rhbz#717202
  Resolves: rhbz#726617


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.7-18.el6_1.4
changelog:
  - stream: Avoid use-after-free (rhbz#749531)
  - storage: Avoid memory leak (rhbz#749531)
  - Add missing error reporting when loading mac filter config for QEMU (rhbz#749531)
  - qemu: Avoid memory leaks (rhbz#749531)
  - storage: Plug iscsi memory leak (rhbz#749531)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-12.el6
changelog:
  - blockjob: Add qemu capabilities related to block pull jobs (rhbz#811683)
  - blockjob: Add API for async virDomainBlockJobAbort (rhbz#811683)
  - blockjob: Optimize JSON event handler lookup (rhbz#811683)
  - blockjob: Wire up qemu async virDomainBlockJobAbort (rhbz#811683)
  - blockjob: Allow for fast-finishing job (rhbz#811683)
  - virsh: Minor syntactic cleanups (rhbz#811683)
  - qemu: Use consistent error when qemu binary is too old (rhbz#811683)
  - blockjob: Add virsh blockpull --wait (rhbz#811683)
  - qemu: Fix deadlock when qemuDomainOpenConsole cleans up a connection (rhbz#811497)
  - qemu: Fix deadlock when qemuDomainOpenConsole cleans up a connection (rhbz#811497)
  - qemu: Fix mem leak in qemuProcessInitCpuAffinity (rhbz#810157)
  - numad: Convert node list to cpumap before setting affinity (rhbz#810157)
  - numad: Ignore cpuset if placement is auto (rhbz#810157)
  - conf: Do not parse cpuset only if the placement is auto (rhbz#810157)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-13.el6
changelog:
  - Fix a problem in the patchset, rhbz#811497 one was applied twice in -12
  - qemu, util: On restart of libvirt restart vepa callbacks (rhbz#812430)
  - qemu, util: Fix netlink callback registration for migration (rhbz#812430)
  - util: Only register callbacks for CREATE operations in virnetdevmacvlan.c (rhbz#812430)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-14.el6
changelog:
  - blockjob: Add new API flags (rhbz#638506)
  - blockjob: Add 'blockcopy' to virsh (rhbz#638506)
  - blockjob: Enhance xml to track mirrors across libvirtd restart (rhbz#638506)
  - blockjob: React to active block copy (rhbz#638506)
  - blockjob: Add qemu capabilities related to block jobs (rhbz#638506)
  - blockjob: Return appropriate event and info (rhbz#638506)
  - blockjob: Support pivot operation on cancel (rhbz#638506)
  - blockjob: Make drive-reopen safer (rhbz#638506)
  - blockjob: Implement block copy for qemu (rhbz#638506)
  - blockjob: Allow for existing files (rhbz#638506)
  - blockjob: Allow mirroring under SELinux (rhbz#638506)
  - blockjob: Accommodate RHEL backport names (rhbz#638506)
  - virsh: Avoid strtol (rhbz#813972)
  - conf: Tighten up XML integer parsing (rhbz#813972)
  - snapshot: Fix memory leak on error (rhbz#782457)
  - virsh: Avoid uninitialized memory usage (rhbz#814080)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-15.el6
changelog:
  - qemu: Improve errors related to offline domains (rhbz#816662)
  - blockjob: Check for active vm before checking blockcopy bits (rhbz#816662)
  - qemu: Preserve original error during migration (rhbz#807907)
  - rpc: Discard non-blocking calls only when necessary (rhbz#807907)
  - qemu: Fix detection of failed migration (rhbz#807907)
  - qemu: Avoid bogus error at the end of tunnelled migration (rhbz#807907)
  - qemu: Make sure qemu can access its directory in hugetlbfs (rhbz#815206)
  - virsh: Fix docs for list command (rhbz#814021)
  - virsh: Fix and clarify the --title flag for the list command in man page (rhbz#814021)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-16.el6
changelog:
  - qemuOpenFile: Don't force chown on NFS (rhbz#810241)
  - util: Fix crash when starting macvtap interfaces (rhbz#815270)
  - qemu: Fix segfault when host CPU is empty (rhbz#817078)
  - blockjob: Allow speed setting in block copy (rhbz#815791)
  - blockjob: Fix block-stream bandwidth race (rhbz#815791)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-17.el6
changelog:
  - qemu: Don't modify domain on failed blockiotune (rhbz#819014)
  - qemu: Reject blockiotune if qemu too old (rhbz#819014)
  - qemu: Don't use virDomainDefFormat* directly (rhbz#815503)
  - qemu: Emit compatible XML when migrating a domain (rhbz#815503)
  - usb: Create functions to search usb device accurately (rhbz#815755)
  - qemu: Call usb search function for hostdev initialization and hotplug (rhbz#815755)
  - virsh: Avoid heap corruption leading to virsh abort (rhbz#819636)
  - util: Fix libvirtd startup failure due to netlink error (rhbz#816465)
  - util: Allow specifying both src and dst pid in virNetlinkCommand (rhbz#816465)
  - util: Function to get local nl_pid used by netlink event socket (rhbz#816465)
  - util: Set src_pid for virNetlinkCommand when appropriate (rhbz#816465)
  - domain_conf: Add "usbredir" to list of valid spice channels (rhbz#819498)
  - domain_conf: Add "default" to list of valid spice channels (rhbz#819499)
  - snapshot: Allow block devices past cgroup (rhbz#810200)
  - blockjob: Allow block devices past cgroup (rhbz#810200)
  - util: Avoid libvirtd crash in virNetDevTapCreate (rhbz#817234)
  - python: Fix the forward_null error in Python binding codes (rhbz#771021)
  - xen: Fix resource leak in xen driver (rhbz#771021)
  - test: Fix resource leak in test driver (rhbz#771021)
  - node: Fix resource leak in nodeinfo.c (rhbz#771021)
  - virnet: Fix resource leak in virnetlink.c (rhbz#771021)
  - vmx: Fix resource leak (rhbz#771021)
  - qemu: Fix resource leak (rhbz#771021)
  - uuid: Fix possible non-terminated string (rhbz#771021)
  - node_device: Fix possible non-terminated string (rhbz#771021)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-18.el6
changelog:
  - numad: Set memory policy from numad advisory nodeset (rhbz#810157)
  - numad: Copy 'placement' of <numatune> to <vcpu> by default (rhbz#810157)
  - numad: Always output 'placement' of <vcpu> (rhbz#810157)
  - qemu: Avoid the memory allocation and freeing (rhbz#810157)
  - numad: Divide cur_balloon by 1024 before passing it to numad (rhbz#810157)
  - numad: Check numactl-devel if compiled with numad support (rhbz#810157)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-19.el6
changelog:
  - build: Fix the typo in configure.ac (rhbz#820461)
  - qemu: Fix build when !HAVE_NUMACTL (rhbz#820461)
  - usb: Fix crash when failing to attach a second usb device (rhbz#815755)
  - qemu: Use the CPU index in capabilities to map NUMA node to cpu list. (rhbz#820461)
  - qemu: Set memory policy using cgroup if placement is auto (rhbz#820461)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-20.el6
changelog:
  - Fix virDomainDeviceInfoIsSet() to check all struct fields (rhbz#820869)
  - Fix logic for assigning PCI addresses to USB2 companion controllers (rhbz#820869)
  - Set a sensible default master start port for ehci companion controllers (rhbz#820869)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6
changelog:
  - qemu: Rollback on used USB devices (rhbz#743671)
  - qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#743671)
  - Revert "rpc: Discard non-blocking calls only when necessary" (rhbz#821468)


author: Eric Blake <eblake@redhat.com> - libvirt-0.9.10-21.el6_3.1
changelog:
  - avoid closing uninitialized fd (rhbz#827050)
  - avoid fd leak (rhbz#827050)
  - command: avoid double close bugs (rhbz#827050)
  - fdstream: avoid double close bug (rhbz#827050)
  - command: check for fork error before closing fd (rhbz#827050)
  - qemu: avoid closing fd more than once (rhbz#827050)
  - Disable keepalives by default (rhbz#832184)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.2
changelog:
  - qemu_hotplug: Don't free the PCI device structure after hot-unplug (rhbz#836916)
  - nodeinfo: Drop static variable (rhbz#836919)
  - nodeinfo: Avoid probing host filesystem during test (rhbz#836919)
  - nodeinfo: Add some more tests (rhbz#836919)
  - nodeinfo: Get the correct CPU number on AMD Magny Cours platform (rhbz#836919)
  - nodeinfo: Test more details (rhbz#836919)
  - drop sanlock on i686 since it is not available anymore


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.3
changelog:
  - sanlock: Fix locking for readonly devices (rhbz#838819)
  - Add support for shared sanlock leases (rhbz#838819)
  - Fix compilation on older sanlock (rhbz#838819)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.10-21.el6_3.4
changelog:
  - daemon: Fix crash in virTypedParameterArrayClear (rhbz#844735)
  - remote: Fix locking in stream APIs (rhbz#847946)
  - Using virOnce for global initialization is desirable (rhbz#847959)
  - json: Fix interface locale dependency (rhbz#847959)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.9.10-21.el6_3.5
changelog:
  - security: Fix libvirtd crash possibility (CVE-2012-4423)
  - Fix augeas test of shared sanlock leases (rhbz#858988)
  - qemu augeas: Add spice_tls/spice_tls_x509_cert_dir (rhbz#858988)
  - Fix mistakes in augeas lens (rhbz#858988)
  - qemu: Fix failure path in disk hotplug (rhbz#859376)
  - blockjob: Relabel entire existing chain (rhbz#860720)


author: Jiri Denemark <jdenemar@redhat.com> - libvirt-0.9.10-21.el6_3.6
changelog:
  - rpc: Switch to dynamically allocated message buffer (rhbz#869650)
  - rpc: Size up RPC limits (rhbz#869650)
  - client: Free message when freeing client (rhbz#869650)
  - nodeinfo_test: Enhance test data before changing nodeinfo gathering (rhbz#869723)
  - nodeinfo: Fix gathering of nodeinfo data structure (rhbz#869723)
  - test: Add new test case for nodeinfotest (rhbz#869723)
  - test: Add test case for nodeinfotest if host machine doesn't have NUMA (rhbz#869723)
  - nodeinfo: Deal with offline cpus in a node (rhbz#869723)
  - qemu: Always format CPU topology (rhbz#868972)
  - iohelper: Fdatasync() at the end (rhbz#873292)
  - iohelper: Don't report errors on special FDs (rhbz#873292)
  - Introduce new VIR_DOMAIN_EVENT_SUSPENDED_API_ERROR event (rhbz#874235)
  - qemu: Emit event if 'cont' fails (rhbz#874235)
  - qemu: Allow migration to be cancelled at prepare phase (rhbz#875770)
  - AbortJob: Fix documentation (rhbz#875770)
  - qemu: Avoid deadlock on HandleAgentEOF (rhbz#875788)


author: Jiri Denemark <jdenemar@redhat.com> - 0.9.10-21.el6_3.7
changelog:
  - nodeinfo: Add check and workaround to guarantee valid cpu topologies (rhbz#877024)
  - tests: Reduce length of nodeinfodata test names (rhbz#877024)
  - nodeinfotest: Add test data for 2 processor host with broken NUMA (rhbz#877024)
  - nodeinfotest: Add test data from a AMD bulldozer machine. (rhbz#877024)
  - Wire up handling for QMP's BALLOON_EVENT (rhbz#884713)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-14.el6
changelog:
  - Fix synchronous reading of stream data (rhbz#741337)
  - qemu: Add ability to set PCI device "rombar" on or off (rhbz#738095)
  - virsh: Better document --copy-storage migrate options (rhbz#677220)
  - virsh: Enhance documentation of commands starting jobs (rhbz#705237)
  - qemu: Always remove domain object if MigratePrepare fails (rhbz#741251)
  - security: Properly chown/label bidirectional and unidirectional fifos (rhbz#740478)
  - qemu: Check domain status details when reconnecting monitor (rhbz#617890)
  - qemu: Finish domain shutdown on reconnect (rhbz#617890)
  - qemu: Avoid loop of fake reboots (rhbz#617890)
  - qemu: Preserve fakeReboot flag in domain status (rhbz#617890)
  - snapshot: Fix man page typos (rhbz#740686)
  - docs: Document virsh nodedev-* commands (rhbz#740686)
  - docs: Document node device XML (rhbz#740686)
  - qemu: Add return value check (rhbz#739704)
  - qemu: Check for ejected media during startup and migration (rhbz#725673)
  - virsh: Update man page for cpu_shares parameter (rhbz#639591)
  - virsh: Describe attach-interface parameter target (rhbz#698899)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-15.el6
changelog:
  - Add virFileLock and virFileUnlock APIs (rhbz#728153)
  - Move pidfile functions into util/virpidfile.{c, h} (rhbz#728153)
  - Introduce functions for checking whether a pidfile is valid (rhbz#728153)
  - Add some APIs which use locking for crashsafe pidfile handling (rhbz#728153)
  - Convert libvirtd to use crash-safe pidfile APIs (rhbz#728153)
  - build: Fix recent build failures (rhbz#728153)
  - daemon: Don't remove pidfiles in init scripts (rhbz#728153)
  - daemon: Modify init script to detect upstart managed libvirtd (rhbz#728153)
  - qemu: Check for outstanding async job too (rhbz#742277)
  - qemu: Make PCI multifunction support more manual (rhbz#727530)
  - network: Fill in bandwidth from portgroup for all forward modes (rhbz#743176)
  - snapshot: Refactor virsh snapshot parent computation (rhbz#742410)
  - snapshot: Better virsh handling of missing current, parent (rhbz#742410)
  - qemu: Fix migration with dname (rhbz#740533)
  - qemu: Correct misspelled 'enospc' option, and only use for werror (rhbz#730909)
  - snapshot: Add REVERT_FORCE to API (rhbz#742615)
  - snapshot: Use qemu-img on disks in use at time of snapshot (rhbz#742615)
  - snapshot: Enforce REVERT_FORCE on qemu (rhbz#742615)
  - init: Raise default system aio limits (rhbz#740899)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-16.el6
changelog:
  - qemu: Enable multifunction for older qemu (rhbz#738388)
  - qemu: Don't fail virDomainGetInfo if we can't update balloon info (rhbz#741217)
  - qemu: Leave rerror policy at default when enospace is requested (rhbz#730909)
  - snapshot: Fix virsh error message typo (rhbz#735457)
  - snapshot: Let virsh edit disk snapshots (rhbz#744071)
  - snapshot: Simplify redefinition of disk snapshot (rhbz#744071)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-17.el6
changelog:
  - Fix deadlock when the RPC program is unknown (rhbz#743843)
  - qemuDomainAttach: Initialize pidfile variable (rhbz#744548)
  - storage: Do not use comma as seperator for lvs output (rhbz#727474)
  - snapshot: Avoid accidental renames with snapshot-edit (rhbz#744724)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.9.4-18.el6
changelog:
  - virDomainCoreDump: Introduce VIR_DUMP_RESET flag (rhbz#632498)
  - qemu: Implement VIR_DUMP_RESET (rhbz#632498)
  - qemu: Check for domain being active on successful job acquire (rhbz#745734)
  - Set to NULL members that have been freed to prevent crashes (rhbz#746075)
  - virFDStream: Close also given errfd (fd leak) (rhbz#746075)
  - qemu: Silence Coverity false positive (rhbz#739704)
  - command: Avoid fd leak on failure (rhbz#739704)
  - build: Add compiler attributes to virUUIDParse (rhbz#739704)
  - qemu: Check for json allocation failure (rhbz#739704)
  - qemu: Fix text block info parsing (rhbz#739704)
  - storage: Plug memory leak on error (rhbz#739704)
  - conf: Plug memory leak on error (rhbz#739704)
  - qemu: Plug memory leak on migration (rhbz#739704)
  - macvtap: Plug memory leak for 802.1Qbh (rhbz#739704)
  - macvtap: Avoid invalid free (rhbz#739704)
  - Update to require sanlock 1.8 for license compliance (rhbz#739518)
  - events: Propose a separate lock for event queue (rhbz#743817)
  - util: Make getaddrinfo failure nonfatal in virGetHostname (rhbz#738915)
  - qemu: Make sure BeginJob is always followed by EndJob (rhbz#746268)
  - pci: Fix pciDeviceListSteal on multiple devices (rhbz#733587)
  - qemu: Do not reattach PCI device used by other domain when shutdown (rhbz#733587)
  - qemu: Honor the orginal PCI dev properties when reattaching (rhbz#736214)
  - daemon: Always advertise libvirtd service (rhbz#726616)


