# changelog

author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-30.el6]
changelog:
  - [perf] sync tools/perf to 2.6.34 (Jason Baron) [578987]
  - [drm] i915: Update to 2.6.34-rc7 (Adam Jackson) [592003]
  - [perf] userspace and core update fix (Jason Baron) [567828 578987]
  - [perf] rhel6 perf fixups (Jason Baron) [567828 578987]
  - [perf] backport latest core perf support (Jason Baron) [567828 578987]
  - [perf] pull back 'perf' userspace (Jason Baron) [567828 578987]
  - [drm] radeon/kms: report lvds status as unknown with closed lid (Jerome Glisse) [585111 591628]
  - [drm] fbdev: fix cloning on fbcon (Dave Airlie) [512023]
  - [drm] fbcon disconnected + hotplug operation (Jerome Glisse) [580789]
  - [kernel] slow-work: use get_ref wrapper instead of directly calling get_ref (Dave Airlie) [580789]
  - [drm] radeon/kms: add special workaround for triple head servers (Dave Airlie) [512023]
  - [infiniband] RDMA: Use rlimit helpers (Doug Ledford) [500229]
  - [infiniband] ipoib: returned back addrlen check for mc addresses (Doug Ledford) [500229]
  - [infiniband] RDMA/amso1100: Fix error paths in post_send and post_recv (Doug Ledford) [500229]
  - [infiniband] IB/srp: Clean up error path in srp_create_target_ib() (Doug Ledford) [500229]
  - [infiniband] IB/srp: Split send and recieve CQs to reduce number of interrupts (Doug Ledford) [500229]
  - [infiniband] rdma: potential ERR_PTR dereference (Doug Ledford) [500229]
  - [infiniband] RDMA/cm: Set num_paths when manually assigning path records (Doug Ledford) [500229]
  - [infiniband] IB/cm: Fix device_create() return value check (Doug Ledford) [500229]
  - [infiniband] IB/ucm: Clean whitespace errors (Doug Ledford) [500229]
  - [infiniband] IB/ucm: Increase maximum devices supported (Doug Ledford) [500229]
  - [infiniband] IB/ucm: Use stack variable 'base' in ib_ucm_add_one (Doug Ledford) [500229]
  - [infiniband] IB/ucm: Use stack variable 'devnum' in ib_ucm_add_one (Doug Ledford) [500229]
  - [infiniband] RDMA/cm: Remove unused definition of RDMA_PS_SCTP (Doug Ledford) [500229]
  - [infiniband] RDMA/cm: Revert association of an RDMA device when binding to loopback (Doug Ledford) [500229]
  - [infiniband] IB/addr: Correct CONFIG_IPv6 to CONFIG_IPV6 (Doug Ledford) [500229]
  - [infiniband] IB/addr: Fix IPv6 routing lookup (Doug Ledford) [500229]
  - [infiniband] IB/addr: Simplify resolving IPv4 addresses (Doug Ledford) [500229]
  - [infiniband] RDMA/cm: fix loopback address support (Doug Ledford) [500229]
  - [infiniband] IB/addr: Store net_device type instead of translating to RDMA transport (Doug Ledford) [500229]
  - [infiniband] IB/addr: Verify source and destination address families match (Doug Ledford) [500229]
  - [infiniband] RDMA/cma: Replace net_device pointer with index (Doug Ledford) [500229]
  - [infiniband] RDMA/cma: Fix AF_INET6 support in multicast joining (Doug Ledford) [500229]
  - [infiniband] RDMA/cma: Correct detection of SA Created MGID (Doug Ledford) [500229]
  - [infiniband] RDMA/addr: Use appropriate locking with for_each_netdev() (Doug Ledford) [500229]
  - [infiniband] RDMA/ucma: Add option to manually set IB path (Doug Ledford) [500229]
  - [infiniband] IB/mad: Ignore iWARP devices on device removal (Doug Ledford) [500229]
  - [infiniband] IB/umad: Clean whitespace (Doug Ledford) [500229]
  - [infiniband] IB/umad: Increase maximum devices supported (Doug Ledford) [500229]
  - [infiniband] IB/umad: Use stack variable 'base' in ib_umad_init_port (Doug Ledford) [500229]
  - [infiniband] IB/umad: Use stack variable 'devnum' in ib_umad_init_port (Doug Ledford) [500229]
  - [infiniband] IB/umad: Remove port_table[] (Doug Ledford) [500229]
  - [infiniband] IB/umad: Convert *cdev to cdev in struct ib_umad_port (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Use anon_inodes instead of private infinibandeventfs (Doug Ledford) [500229]
  - [infiniband] IB/core: Fix and clean up ib_ud_header_init() (Doug Ledford) [500229]
  - [infiniband] IB/core: Pack struct ib_device a little tighter (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Whitespace cleanup (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Pack struct ib_uverbs_event_file tighter (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Increase maximum devices supported (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: use stack variable 'base' in ib_uverbs_add_one (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Use stack variable 'devnum' in ib_uverbs_add_one (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Remove dev_table (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Convert *cdev to cdev in struct ib_uverbs_device (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Fix return of PTR_ERR() of wrong pointer in ib_uverbs_get_context() (Doug Ledford) [500229]
  - [infiniband] IB: Clarify the documentation of ib_post_send() (Doug Ledford) [500229]
  - [infiniband] IB/ehca: Allow access for ib_query_qp() (Doug Ledford) [500229]
  - [infiniband] IB/ehca: Do not turn off irqs in tasklet context (Doug Ledford) [500229]
  - [infiniband] IB/ehca: Fix error paths in post_send and post_recv (Doug Ledford) [500229]
  - [infiniband] IB/ehca: Rework destroy_eq() (Doug Ledford) [500229]
  - [infiniband] IPoIB: Include return code in trace message for ib_post_send() failures (Doug Ledford) [500229]
  - [infiniband] IPoIB: Fix TX queue lockup with mixed UD/CM traffic (Doug Ledford) [500229]
  - [infiniband] IPoIB: Remove TX moderation settings from ethtool support (Doug Ledford) [500229]
  - [infiniband] IB/ipath: Use bitmap_weight() (Doug Ledford) [500229]
  - [infiniband] Remove BKL from ipath_open() (Doug Ledford) [500229]
  - [rds] remove uses of NIPQUAD, use pI4 (Doug Ledford) [500229]
  - [rds] RDS/IB+IW: Move recv processing to a tasklet (Doug Ledford) [500229]
  - [rds] Do not send congestion updates to loopback connections (Doug Ledford) [500229]
  - [rds] Fix panic on unload (Doug Ledford) [500229]
  - [rds] Fix potential race around rds_i[bw]_allocation (Doug Ledford) [500229]
  - [rds] Add GET_MR_FOR_DEST sockopt (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Check correct variable for allocation failure (Doug Ledford) [500229]
  - [infiniband] mlx4: replace the dma_sync_single_range_for_cpu/device API (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Simplify retrieval of ib_device (Doug Ledford) [500229]
  - [infiniband] mlx4_core: Fix cleanup in __mlx4_init_one() error path (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Fix queue overflow check in post_recv (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Initialize SRQ scatter entries when creating an SRQ (Doug Ledford) [500229]
  - [infiniband] mlx4: use bitmap_find_next_zero_area (Doug Ledford) [500229]
  - [infiniband] mlx4_core: return a negative error value (Doug Ledford) [500229]
  - [infiniband] mlx4_core: Fix parsing of reserved EQ cap (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Remove limitation on LSO header size (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Remove unneeded code (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Correct cap.max_inline_data assignment in nes_query_qp() (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix CX4 link problem in back-to-back configuration (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Clear stall bit before destroying NIC QP (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Set assume_aligned_header bit (Doug Ledford) [500229]
  - [infiniband] convert to use netdev_for_each_mc_addr (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Add support for KR device id 0x0110 (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Change WQ overflow return code (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Multiple disconnects cause crash during AE handling (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix crash when listener destroyed during loopback setup (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Use atomic counters for CM listener create and destroy (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix stale ARP issue (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: FIN during MPA startup causes timeout (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Free kmap() resources (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Check for zero STag (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix Xansation test crash on cm_node ref_count (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Abnormal listener exit causes loopback node crash (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix crash in nes_accept() (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Resource not freed for REJECTed connections (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: MPA request/response error checking (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix query of ORD values (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix MAX_CM_BUFFER define (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Pass correct size to ioremap_nocache() (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Update copyright and branding string (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Add max_cqe check to nes_create_cq() (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Clean up struct nes_qp (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Implement IB_SIGNAL_ALL_WR as an iWARP extension (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Add additional SFP+ PHY uC status check and PHY reset (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Correct fast memory registration implementation (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Add support for IB_WR_*INV (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: In nes_post_recv() always set bad_wr on error (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: In nes_post_send() always set bad_wr on error (Doug Ledford) [500229]
  - [netdrv] cxgb3: fix linkup issue (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Wait at least one schedule cycle during device removal (Doug Ledford) [500229]
  - [netdrv] cxgb3: fix hot plug removal crash (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Mark RDMA device with CXIO_ERROR_FATAL when removing (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Don't allocate the SW queue for user mode CQs (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Increase the max CQ depth (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Doorbell overflow avoidance and recovery (Doug Ledford) [500229]
  - [netdrv] cxgb3: convert to use netdev_for_each_addr (Doug Ledford) [500229]
  - [netdrv] cxgb3: fix link flap (Doug Ledford) [500229]
  - [netdrv] cxgb3: FIx VLAN over Jumbo frames (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Remove BUG_ON() on CQ rearm failure (Doug Ledford) [500229]
  - [netdrv] cxgb3: fix GRO checksum check (Doug Ledford) [500229]
  - [netdrv] cxgb3: add memory barriers (Doug Ledford) [500229]
  - [netdrv] iwch_cm.c: use pM to show MAC address (Doug Ledford) [500229]
  - [netdrv] cxgb3: Use kzalloc for allocating only one thing (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Fix error paths in post_send and post_recv (Doug Ledford) [500229]
  - [netdrv] cxgb3: declare MODULE_FIRMWARE (Doug Ledford) [500229]
  - [netdrv] cxgb3: Set the rxq (Doug Ledford) [500229]
  - [netdrv] cxgb3: No need to wake queue in xmit handler (Doug Ledford) [500229]
  - [netdrv] cxgb3: Added private MAC address and provisioning packet handler for iSCSI (Doug Ledford) [500229]
  - [net] Hook up cxgb4 to Kconfig and Makefile (Doug Ledford) [500229]
  - [netdrv] cxgb4: Add remaining driver headers and L2T management (Doug Ledford) [500229]
  - [netdrv] cxgb4: Add main driver file and driver Makefile (Doug Ledford) [500229]
  - [netdrv] cxgb4: Add HW and FW support code (Doug Ledford) [500229]
  - [netdrv] cxgb4: Add packet queues and packet DMA code (Doug Ledford) [500229]
  - [netdrv] cxgb4: Add register, message, and FW definitions (Doug Ledford) [500229]
  - [net] use helpers to access mc list (Doug Ledford) [500229]
  - [net] use helpers to access uc list (Doug Ledford) [500229]
  - [kernel] strstrip incorrectly marked __must_check (Doug Ledford) [500229]
  - [pci] introduce pci_pcie_cap() (Doug Ledford) [500229]
  - [pci] cache PCIe capability offset (Doug Ledford) [500229]
  - [kernel] bitmap: introduce bitmap_set, bitmap_clear, bitmap_find_next_zero_area (Doug Ledford) [500229]
  - [md] Remove unnecessary casts of void * (Doug Ledford) [583050 586296 586299 588371]
  - [md] expose max value of behind writes counter (Doug Ledford) [583050 586296 586299 588371]
  - [md] remove some dead fields from mddev_s (Doug Ledford) [583050 586296 586299 588371]
  - [md] allow integers to be passed to md/level (Doug Ledford) [583050 586296 586299 588371]
  - [md] notify mdstat waiters of level change (Doug Ledford) [583050 586296 586299 588371]
  - [md] don't unregister the thread in mddev_suspend (Doug Ledford) [583050 586296 586299 588371]
  - [md] factor out init code for an mddev (Doug Ledford) [583050 586296 586299 588371]
  - [md] pass mddev to make_request functions rather than request_queue (Doug Ledford) [583050 586296 586299 588371]
  - [md] call md_stop_writes from md_stop (Doug Ledford) [583050 586296 586299 588371]
  - [md] split md_set_readonly out of do_md_stop (Doug Ledford) [583050 586296 586299 588371]
  - [md] factor md_stop_writes out of do_md_stop (Doug Ledford) [583050 586296 586299 588371]
  - [md] start to refactor do_md_stop (Doug Ledford) [583050 586296 586299 588371]
  - [md] factor do_md_run to separate accesses to ->gendisk (Doug Ledford) [583050 586296 586299 588371]
  - [md] remove ->changed and related code (Doug Ledford) [583050 586296 586299 588371]
  - [md] don't reference gendisk in getgeo (Doug Ledford) [583050 586296 586299 588371]
  - [md] move io accounting out of personalities into md_make_request (Doug Ledford) [583050 586296 586299 588371]
  - [md] notify level changes through sysfs (Doug Ledford) [583050 586296 586299 588371]
  - [md] Relax checks on ->max_disks when external metadata handling is used (Doug Ledford) [583050 586296 586299 588371]
  - [md] Correctly handle device removal via sysfs (Doug Ledford) [583050 586296 586299 588371]
  - [md] Add support for Raid5->Raid0 and Raid10->Raid0 takeover (Doug Ledford) [583050 586296 586299 588371]
  - [md] Add support for Raid0->Raid5 takeover (Doug Ledford) [583050 586296 586299 588371]
  - [md] discard StateChanged device flag (Doug Ledford) [583050 586296 586299 588371]
  - [md] manage redundancy group in sysfs when changing level (Doug Ledford) [583050 586296 586299 588371]
  - [md] remove unneeded sysfs files more promptly (Doug Ledford) [583050 586296 586299 588371]
  - [md] set mddev readonly flag on blkdev BLKROSET ioctl (Doug Ledford) [583050 586296 586299 588371]
  - [md] don't insist on valid event count for spare devices (Doug Ledford) [583050 586296 586299 588371]
  - [md] simplify updating of event count to sometimes avoid updating spares (Doug Ledford) [583050 586296 586299 588371]
  - [md] restore ability of spare drives to spin down (Doug Ledford) [583050 586296 586299 588371]
  - [md] raid6: Fix raid-6 read-error correction in degraded state (Doug Ledford) [583050 586296 586299 588371]
  - [md] raid5: allow for more than 2^31 chunks (Doug Ledford) [583050 586296 586299 588371]
  - [md] deal with merge_bvec_fn in component devices better (Doug Ledford) [583050 586296 586299 588371]
  - [md] fix some lockdep issues between md and sysfs (Doug Ledford) [583050 586296 586299 588371]
  - [md] fix 'degraded' calculation when starting a reshape (Doug Ledford) [583050 586296 586299 588371]
  - [md] allow a resync that is waiting for other resync to complete, to be aborted (Doug Ledford) [583050 586296 586299 588371]
  - [md] remove unnecessary code from do_md_run (Doug Ledford) [583050 586296 586299 588371]
  - [md] make recovery started by do_md_run() visible via sync_action (Doug Ledford) [583050 586296 586299 588371]
  - [md] use pU to print UUIDs (Doug Ledford) [583050 586296 586299 588371]
  - [md] add 'recovery_start' per-device sysfs attribute (Doug Ledford) [583050 586296 586299 588371]
  - [md] rcu_read_lock() walk of mddev->disks in md_do_sync() (Doug Ledford) [583050 586296 586299 588371]
  - [md] integrate spares into array at earliest opportunity (Doug Ledford) [583050 586296 586299 588371]
  - [md] move compat_ioctl handling into md.c (Doug Ledford) [583050 586296 586299 588371]
  - [md] add MODULE_DESCRIPTION for all md related modules (Doug Ledford) [583050 586296 586299 588371]
  - [md] raid: improve MD/raid10 handling of correctable read errors (Doug Ledford) [583050 586296 586299 588371]
  - [md] raid10: print more useful messages on device failure (Doug Ledford) [583050 586296 586299 588371]
  - [md] bitmap: update dirty flag when bitmap bits are explicitly set (Doug Ledford) [583050 586296 586299 588371]
  - [md] Support write-intent bitmaps with externally managed metadata (Doug Ledford) [583050 586296 586299 588371]
  - [md] bitmap: move setting of daemon_lastrun out of bitmap_read_sb (Doug Ledford) [583050 586296 586299 588371]
  - [md] support updating bitmap parameters via sysfs (Doug Ledford) [583050 586296 586299 588371]
  - [md] factor out parsing of fixed-point numbers (Doug Ledford) [583050 586296 586299 588371]
  - [md] support bitmap offset appropriate for external-metadata arrays (Doug Ledford) [583050 586296 586299 588371]
  - [md] remove needless setting of thread->timeout in raid10_quiesce (Doug Ledford) [583050 586296 586299 588371]
  - [md] change daemon_sleep to be in 'jiffies' rather than 'seconds' (Doug Ledford) [583050 586296 586299 588371]
  - [md] move offset, daemon_sleep and chunksize out of bitmap structure (Doug Ledford) [583050 586296 586299 588371]
  - [md] collect bitmap-specific fields into one structure (Doug Ledford) [583050 586296 586299 588371]
  - [md] add honouring of suspend_{lo,hi} to raid1 (Doug Ledford) [583050 586296 586299 588371]
  - [md] raid5: don't complete make_request on barrier until writes are scheduled (Doug Ledford) [583050 586296 586299 588371]
  - [md] support barrier requests on all personalities (Doug Ledford) [583050 586296 586299 588371]
  - [md] don't reset curr_resync_completed after an interrupted resync (Doug Ledford) [583050 586296 586299 588371]
  - [md] adjust resync_min usefully when resync aborts (Doug Ledford) [583050 586296 586299 588371]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-29.el6]
changelog:
  - [mm] fix mm_take_all_locks regression in 3-7/49 (Andrea Arcangeli) [556572]
  - [mm] avoid __cpuset_node_allowed_softwall to run when allocation is atomic (Andrea Arcangeli) [556572 591283]
  - [mm] fix race between do_huge_pmd_anonymous_page and pte_alloc_map (Andrea Arcangeli) [556572]
  - [mm] add missing update for root-anon-vma drop_anon_vma in memory compactation (Andrea Arcangeli) [556572]
  - [mm] exec vs split_huge_page (Andrea Arcangeli) [556572]
  - [mm] include anon hugepages into the anon stats (Andrea Arcangeli) [556572]
  - [mm] split_huge_page anon_vma ordering dependency (Andrea Arcangeli) [556572]
  - [mm] align page_add_new_anon_rmap (Andrea Arcangeli) [556572]
  - [mm] do_pages_move cannot handle hugepages (Andrea Arcangeli) [556572]
  - [mm] padding to decrease risk of kabi breakage (Andrea Arcangeli) [556572]
  - [mm] transhuge isolate_migratepages() (Andrea Arcangeli) [556572]
  - [mm] select CONFIG_COMPACTION if TRANSPARENT_HUGEPAGE enabled (Andrea Arcangeli) [556572]
  - [mm] compaction: Do not schedule work on other CPUs for compaction (Andrea Arcangeli) [556572]
  - [mm] Defer compaction using an exponential backoff when compaction fails (Andrea Arcangeli) [556572]
  - [mm] Add a tunable that decides when memory should be compacted and when it should be reclaimed (Andrea Arcangeli) [556572]
  - [mm] Direct compact when a high-order allocation fails (Andrea Arcangeli) [556572]
  - [mm] Add /sys trigger for per-node memory compaction (Andrea Arcangeli) [556572]
  - [mm] Add /proc trigger for memory compaction (Andrea Arcangeli) [556572]
  - [mm] Memory compaction core (Andrea Arcangeli) [556572]
  - [mm] Move definition for LRU isolation modes to a header (Andrea Arcangeli) [556572]
  - [mm] Export fragmentation index via /proc/extfrag_index (Andrea Arcangeli) [556572]
  - [mm] Export unusable free space index via /proc/unusable_index (Andrea Arcangeli) [556572]
  - [mm] Allow CONFIG_MIGRATION to be set without CONFIG_NUMA or memory hot-remove (Andrea Arcangeli) [556572]
  - [mm] Allow the migration of PageSwapCache pages (Andrea Arcangeli) [556572]
  - [mm] Do not try to migrate unmapped anonymous pages (Andrea Arcangeli) [556572]
  - [mm] Share the anon_vma ref counts between KSM and page migration (Andrea Arcangeli) [556572]
  - [mm] Take a reference to the anon_vma before migrating (Andrea Arcangeli) [556572]
  - [mm] add numa awareness to hugepage allocations (Andrea Arcangeli) [556572]
  - [mm] enable direct defrag (Andrea Arcangeli) [556572]
  - [mm] ksm: check for ERR_PTR from follow_page() (Andrea Arcangeli) [556572]
  - [mm] err.h: add helper function to simplify pointer error checking (Andrea Arcangeli) [556572]
  - [mm] don't leave orhpaned swap cache after ksm merging (Andrea Arcangeli) [556572]
  - [mm] adapt to anon-vma root locking (Andrea Arcangeli) [556572]
  - [mm] set default to never (Andrea Arcangeli) [556572]
  - [mm] transparent hugepage bootparam (Andrea Arcangeli) [556572]
  - [mm] remove lumpy reclaim (Andrea Arcangeli) [556572 583003]
  - [mm] memcg fix prepare migration (Andrea Arcangeli) [556572]
  - [mm] avoid false positive warning in mmio (Andrea Arcangeli) [556572]
  - [virt] fix kvm swapping memory corruption (Andrea Arcangeli) [556572 583861]
  - [mm] remove khugepaged/enabled (Andrea Arcangeli) [556572]
  - [mm] use only khugepaged_wait (Andrea Arcangeli) [556572]
  - [mm] khugepaged user stack (Andrea Arcangeli) [556572]
  - [mm] define hugetlb_page (Andrea Arcangeli) [556572]
  - [mm] migration: avoid race between shift_arg_pages() and rmap_walk() during migration by not migrating temporary stacks (Andrea Arcangeli) [556572]
  - [mm] extend KSM refcounts to the anon_vma root (Andrea Arcangeli) [556572]
  - [mm] always lock the root (oldest) anon_vma (Andrea Arcangeli) [556572]
  - [mm] track the root (oldest) anon_vma (Andrea Arcangeli) [556572]
  - [mm] change direct call of spin_lock(anon_vma->lock) to inline function (Andrea Arcangeli) [556572]
  - [mm] rename anon_vma_lock to vma_lock_anon_vma (Andrea Arcangeli) [556572]
  - [mm] rmap: remove anon_vma check in page_address_in_vma() (Andrea Arcangeli) [556572]
  - [mm] mmap: check ->vm_ops before dereferencing (Andrea Arcangeli) [556572]
  - [fs] xfs_export_operations.commit_metadata (Christoph Hellwig) [585442]
  - [fs] xfs: fix inode pincount check in fsync (Christoph Hellwig) [585442]
  - [fs] xfs: miscellaneous fixes from 2.6.34 (Dave Chinner) [585442]
  - [fs] xfs: reserved block pool and ENOSPC fixes from 2.6.34 (Dave Chinner) [542712 585442]
  - [fs] xfs: delayed write metadata from 2.6.34 (Dave Chinner) [585442]
  - [lib] introduce list_sort (Dave Chinner) [585442]
  - [fs] xfs: log fixes from 2.6.34 (Dave Chinner) [585442]
  - [fs] xfs: quota changes from 2.6.34 (Dave Chinner) [585442]
  - [fs] xfs: buffer API cleanups from 2.6.34 (Dave Chinner) [585442]
  - [fs] xfs: AG indexing fixes from 2.6.34 (Dave Chinner) [585442]
  - [fs] xfs: idle kernel thread fixes from 2.6.34 (Dave Chinner) [585442]
  - [fs] online defrag fixes from 2.6.34 (Dave Chinner) [585442]
  - [fs] jbd2: delay discarding buffers in journal_unmap_buffer (Eric Sandeen) [593082]
  - [fs] ext4: Use slab allocator for sub-page sized allocations (Eric Sandeen) [593082]
  - [fs] jbd2: don't use __GFP_NOFAIL in journal_init_common() (Eric Sandeen) [593082]
  - [fs] jbd: jbd-debug and jbd2-debug should be writable (Eric Sandeen) [593082]
  - [fs] ext4: Fixed inode allocator to correctly track a flex_bg's used_dirs (Eric Sandeen) [593082]
  - [fs] ext4: Fix estimate of # of blocks needed to write indirect-mapped files (Eric Sandeen) [593082]
  - [fs] ext4: fix up rb_root initializations to use RB_ROOT (Eric Sandeen) [593082]
  - [fs] ext4: Release page references acquired in ext4_da_block_invalidatepages (Eric Sandeen) [593082]
  - [fs] ext4: make "offset" consistent in ext4_check_dir_entry() (Eric Sandeen) [593082]
  - [fs] ext4: Convert BUG_ON checks to use ext4_error() instead (Eric Sandeen) [593082]
  - [fs] ext4: Handle non empty on-disk orphan link (Eric Sandeen) [593082]
  - [fs] ext4: explicitly remove inode from orphan list after failed direct io (Eric Sandeen) [593082]
  - [fs] ext4: Fix fencepost error in chosing choosing group vs file preallocation (Eric Sandeen) [593082]
  - [fs] ext4: Fix BUG_ON at fs/buffer.c:652 in no journal mode (Eric Sandeen) [593082]
  - [fs] ext4: correctly calculate number of blocks for fiemap (Eric Sandeen) [593082]
  - [fs] ext4: add missing error checking to ext4_expand_extra_isize_ea() (Eric Sandeen) [593082]
  - [fs] ext4: move __func__ into a macro for ext4_warning, ext4_error (Eric Sandeen) [593082]
  - [fs] ext4: Use bitops to read/modify EXT4_I(inode)->i_state (Eric Sandeen) [593082]
  - [fs] ext4: Drop EXT4_GET_BLOCKS_UPDATE_RESERVE_SPACE flag (Eric Sandeen) [593082]
  - [fs] ext4: return correct wbc.nr_to_write in ext4_da_writepages (Eric Sandeen) [593082]
  - [fs] ext4: replace BUG() with return -EIO in ext4_ext_get_blocks (Eric Sandeen) [593082]
  - [virt] KVM SVM Implement workaround for Erratum 383 (Bhavna Sarathy) [592311]
  - [virt] KVM SVM Handle MCEs early in the vmexit process (Bhavna Sarathy) [592311]
  - [usb] serial: ftdi: add CONTEC vendor and product id (Stanislaw Gruszka) [584757]
  - [usb] fix usbfs regression (Stanislaw Gruszka) [584757]
  - [usb] add new ftdi_sio device ids (Stanislaw Gruszka) [580067]
  - [usb] ftdi_sio: add device IDs (several ELV, one Mindstorms NXT) (Stanislaw Gruszka) [580067]
  - [usb] ftdi_sio: new device id for papouch AD4USB (Stanislaw Gruszka) [580067]
  - [v4l] gspca_mr973010a: Fix cif type 1 cameras not streaming on UHCI controllers (Stanislaw Gruszka) [580067]
  - [v4l] DVB: Add support for Asus Europa Hybrid DVB-T card (Stanislaw Gruszka) [580063]
  - [usb] mos7840: add device IDs for B&B electronics devices (Stanislaw Gruszka) [580063]
  - [ppc64] fsl: Add PCI device ids for new QoirQ chips (Stanislaw Gruszka) [580063]
  - [fs] vfs: Fix vmtruncate() regression (Stanislaw Gruszka) [579693]
  - [kernel] sched: Fix task priority bug (Stanislaw Gruszka) [579693]
  - [serial] 8250_pnp: add a new Fujitsu Wacom Tablet PC device (Stanislaw Gruszka) [579693]
  - [i2c] pca: Don't use *_interruptible (Stanislaw Gruszka) [579693]
  - [i2c] Do not use device name after device_unregister (Stanislaw Gruszka) [579693]
  - [kernel] sched: Fix cpu_clock() in NMIs, on !CONFIG_HAVE_UNSTABLE_SCHED_CLOCK (Stanislaw Gruszka) [579693]
  - [hid] add device IDs for new model of Apple Wireless Keyboard (Stanislaw Gruszka) [579693]
  - [v4l] gspca: sn9c20x: Fix test of unsigned (Stanislaw Gruszka) [579693]
  - [x86] SGI UV: Fix mapping of MMIO registers (Stanislaw Gruszka) [579693]
  - [perf] timechart: Use tid not pid for COMM change (Stanislaw Gruszka) [580062]
  - [usb] fix usbstorage for 2770:915d delivers no FAT (Stanislaw Gruszka) [580062]
  - [x86] PCI/PAT: return EINVAL for pci mmap WC request for !pat_enabled (Stanislaw Gruszka) [580062]
  - [acpi] EC: Add wait for irq storm (Stanislaw Gruszka) [580062]
  - [acpi] EC: Accelerate query execution (Stanislaw Gruszka) [580062]
  - [usb] add speed values for USB 3.0 and wireless controllers (Stanislaw Gruszka) [580062]
  - [usb] add missing delay during remote wakeup (Stanislaw Gruszka) [580062]
  - [usb] EHCI & UHCI: fix race between root-hub suspend and port resume (Stanislaw Gruszka) [580062]
  - [usb] EHCI: fix handling of unusual interrupt intervals (Stanislaw Gruszka) [580062]
  - [usb] Don't use GFP_KERNEL while we cannot reset a storage device (Stanislaw Gruszka) [580062]
  - [usb] serial: fix memory leak in generic driver (Stanislaw Gruszka) [580062]
  - [char] nozomi: quick fix for the close/close bug (Stanislaw Gruszka) [580062]
  - [tty] fix race in tty_fasync (Stanislaw Gruszka) [580062]
  - [netdrv] netiucv: displayed TX bytes value much too high (Stanislaw Gruszka) [580063]
  - [block] md: fix small irregularity with start_ro module parameter (Stanislaw Gruszka) [580063]
  - [input] i8042: add Dritek quirk for Acer Aspire 5610 (Stanislaw Gruszka) [580063]
  - [hid] fixup quirk for NCR devices (Stanislaw Gruszka) [580063]
  - [dmi] allow omitting ident strings in DMI tables (Stanislaw Gruszka) [580063]
  - [scsi] scsi_dh: create sysfs file, dh_state for all SCSI disk devices (Stanislaw Gruszka) [580063]
  - [nfs] Revert default r/wsize behavior (Stanislaw Gruszka) [580063]
  - [usb] SIS USB2VGA DRIVER: support KAIREN's USB VGA adaptor USB20SVGA-MB-PLUS (Stanislaw Gruszka) [580067]
  - [input] alps: add support for the touchpad on Toshiba Tecra A11-11L (Stanislaw Gruszka) [584757]
  - [fs] gfs2: stuck in inode wait, no glocks stuck (Robert S Peterson) [583737]
  - [netdrv] cnic: update to to 2.1.1 (Stanislaw Gruszka) [590019]
  - [netdrv] bnx2x: fix system hung after netdev watchdog (Stanislaw Gruszka) [581907]
  - [netdrv] bnx2: Fix most severe bugs in bnx2 2.0.8+ (John Feeney) [590879]
  - [netdrv] Update bnx2 driver to 2.0.8 and fw to mips-06-5.0.0.j6 et al (John Feeney) [464728]
  - [virt] VMware Balloon driver (Amit Shah) [582826]
  - [x86] With Sandybridge graphics, kernel reboots unless 'agp=off' used on command line (John Villalovos) [591294]
  - [kernel] unify string representation of NULL in vsprintf.c (Dave Anderson) [589613]
  - [kernel] coredump: fix the page leak in dump_seek() (Oleg Nesterov) [580126]
  - [edac] EDAC support for Nehalem Memory Controllers (Mauro Carvalho Chehab) [584507]
  - [iscsi] Include support for next gen Dell iSCSI PowerVault controller MD36xxi into RDAC scsi device handler's device list (Shyam Iyer) [593814]
  - [scsi] lpfc Update from 8.3.5.9 to 8.3.5.13 FC/FCoE (Rob Evers) [591648]
  - [infiniband] iser: fix failover slowdown (Mike Christie) [589174]
  - [net] TCP: avoid to send keepalive probes if receiving data (Flavio Leitner) [593052]
  - [nfs] commit_metadata export operation replacing nfsd_sync_dir (Christoph Hellwig) [593652]
  - [ppc64] numa: Add form 1 NUMA affinity (Steve Best) [593466]
  - [ppc64] eeh: Fix a bug when pci structure is null (Steve Best) [593854]
  - [ppc64] perf_event: Fix oops due to perf_event_do_pending call (Steve Best) [593464]
  - [ppc] pseries: Quieten cede latency printk (Steve Best) [591739]
  - [fs] GFS2: Don't "get" xattrs for ACLs when ACLs are turned off (Steven Whitehouse) [546294]
  - [kexec] fix OOPS in crash_kernel_shrink (Steve Best) [592336]
  - [fs] ext4: don't use quota reservation for speculative metadata blocks (Eric Sandeen) [587095]
  - [fs] quota: add the option to not fail with EDQUOT in block allocation (Eric Sandeen) [587095]
  - [fs] quota: use flags interface for dquot alloc/free space (Eric Sandeen) [587095]
  - [fs] ext4: Fix quota accounting error with fallocate (Eric Sandeen) [587095]
  - [fs] ext4: Ensure zeroout blocks have no dirty metadata (Eric Sandeen) [587095]
  - [virt] vhost-net: utilize PUBLISH_USED_IDX feature (Michael S. Tsirkin) [593158]
  - [virt] virtio: put last seen used index into ring itself (Michael S. Tsirkin) [593158]
  - [virt] vhost: fix barrier pairing (Michael S. Tsirkin) [593158]
  - [virt] virtio: use smp_XX barriers on SMP (Michael S. Tsirkin) [593158]
  - [virt] virtio_ring: remove a level of indirection (Michael S. Tsirkin) [593158]
  - [virt] trans_virtio: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio-rng: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio_net: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio_blk: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio_console: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio_balloon: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio: add virtqueue_ vq_ops wrappers (Michael S. Tsirkin) [593158]
  - [virt] vhost-net: fix vq_memory_access_ok error checking (Michael S. Tsirkin) [593158]
  - [virt] vhost: fix error handling in vring ioctls (Michael S. Tsirkin) [593158]
  - [virt] vhost: fix interrupt mitigation with raw sockets (Michael S. Tsirkin) [593158]
  - [virt] vhost: fix error path in vhost_net_set_backend (Michael S. Tsirkin) [593158]
  - [netdrv] iwlwifi: iwl_good_ack_health() only apply to AGN device (John Linville) [573029]
  - [netdrv] iwlwifi: code cleanup for connectivity recovery (John Linville) [573029]
  - [netdrv] iwlwifi: Recover TX flow failure (John Linville) [573029]
  - [netdrv] iwlwifi: move plcp check to separated function (John Linville) [573029]
  - [netdrv] iwlwifi: Recover TX flow stall due to stuck queue (John Linville) [573029]
  - [netdrv] iwlwifi: add internal short scan support for 3945 (John Linville) [573029]
  - [netdrv] iwlwifi: separated time check for different type of force reset (John Linville) [573029]
  - [netdrv] iwlwifi: Adjusting PLCP error threshold for 1000 NIC (John Linville) [573029]
  - [netdrv] iwlwifi: multiple force reset mode (John Linville) [573029]
  - [netdrv] iwlwifi: Tune radio to prevent unexpected behavior (John Linville) [573029]
  - [netdrv] iwlwifi: Logic to control how frequent radio should be reset if needed (John Linville) [573029]
  - [netdrv] iwlwifi: add function to reset/tune radio if needed (John Linville) [573029]
  - [netdrv] iwlwifi: clear all the stop_queue flag after load firmware (John Linville) [573029]
  - [netdrv] iwlwifi: check for aggregation frame and queue (John Linville) [573029]
  - [ppc64] kdump: Fix race in kdump shutdown (Steve Best) [559709]
  - [ppc64] kexec: Fix race in kexec shutdown (Steve Best) [593853]
  - [net] Add ndo_{set|get}_vf_port support for enic dynamic vnics (Chris Wright) [581087]
  - [net] Add netlink support for virtual port management (was iovnl) (Chris Wright) [581087]
  - [net] core: add IFLA_STATS64 support (Chris Wright) [581087]
  - [netdrv] igb: support for VF configuration tools (Chris Wright) [581087]
  - [net] rtnetlink: Add SR-IOV VF configuration methods (Chris Wright) [581087]
  - [pci] Add SR-IOV convenience functions and macros (Chris Wright) [581087]
  - [scsi] sync iscsi layer (Mike Christie) [564148 570682]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-28.el6]
changelog:
  - [mm] New round-robin rotor for SLAB allocations (Larry Woodman) [593154]
  - [netdrv] ixgbe: FCoE fixes (Andy Gospodarek) [593474]
  - [net] vlan: updates vlan real_num_tx_queues (Andy Gospodarek) [593474]
  - [net] vlan: adds vlan_dev_select_queue (Andy Gospodarek) [593474]
  - [net] vlan: Precise RX stats accounting (Andy Gospodarek) [593474]
  - [net] add dev_txq_stats_fold() helper (Andy Gospodarek) [593474]
  - [net] vlan: Add support to netdev_ops.ndo_fcoe_get_wwn for VLAN device (Andy Gospodarek) [593474]
  - [netdrv] ixgbe: fixes for link problems, possible DMA errors, and VF/SR-IOV changes (Andy Gospodarek) [575188]
  - [sound] ALSA HDA driver update 2010-05-11 (Jaroslav Kysela) [591083]
  - [mm] show per-process swap usage via procfs (Larry Woodman) [546533]
  - [netdrv] cxgb3 won't recover from EEH event twice (Steve Best) [591738]
  - [virt] x86, cpu: Print AMD virtualization features in /proc/cpuinfo (Gleb Natapov) [592688]
  - [x86] Intel ICH9 workaround for HPET timer issue on IbexPeak Platform (Luming Yu) [502629]
  - [pci] Update pci_dev and pci_bus structs before kabi freeze (Prarit Bhargava) [593322]
  - [pci] Output FW warning in pci_read/write_vpd (Prarit Bhargava) [586979]
  - [infiniband] ehca: Require in_wc in process_mad() (Steve Best) [593095]
  - [security] mmap_min_addr check CAP_SYS_RAWIO only for write (Eric Paris) [592417]
  - [scsi] aacraid: Eliminate use after free (Tomas Henzl) [592926]
  - [scsi] lpfc Update from 8.3.5.7 to 8.3.5.9 FC/FCoE (Rob Evers) [580677]
  - [char] Eliminate use after free (Amit Shah) [593189]
  - [ipmi] fix unlock balance (Tomas Henzl) [592925]
  - [ppc64] only call start-cpu when a CPU is stopped (Steve Best) [592440]
  - [ppc64] make query_cpu_stopped callable outside hotplug cpu (Steve Best) [592440]
  - [kernel] cpufreq: make the iowait-is-busy-time a sysfs tunable (Rik van Riel) [585330]
  - [kernel] ondemand: Solve the big performance issue with ondemand during disk IO (Rik van Riel) [585330]
  - [kernel] sched: introduce get_cpu_iowait_time_us() (Rik van Riel) [585330]
  - [kernel] sched: eliminate the ts->idle_lastupdate field (Rik van Riel) [585330]
  - [kernel] sched: fold updating of the last update time into update_ts_time_stats() (Rik van Riel) [585330]
  - [kernel] sched: update the idle statistics in get_cpu_idle_time_us (Rik van Riel) [585330]
  - [kernel] sched: introduce a function to update the idle statistics (Rik van Riel) [585330]
  - [kernel] sched: add a comment to get_cpu_idle_time_us (Rik van Riel) [585330]
  - [kernel] nohz: Reuse ktime in sub-functions of tick_check_idle (Rik van Riel) [585330]
  - [virt] Xen PV-on-HVM: Disable xen-blkfront for IDE & SCSI devices (Don Dutile) [523134]
  - [virt] xen: PV-on-HVM: Disable xen-blkfront for PV-on-HVM for now (Don Dutile) [523134]
  - [virt] xen: PV-on-HVM: Prevent pv drivers from crashing a FV guest if pv-on-hvm not configured (Don Dutile) [523134]
  - [virt] xen: PV-on-HVM: Add kernel command line enablement control (Don Dutile) [523134]
  - [virt] xen: backport PV-on-HVM (Don Dutile) [523134]
  - [ppc] pseries: Pass more accurate number of supported cores to firmware (Steve Best) [591341]
  - [ppc] Add static fields to ibm, client-architecture call (Steve Best) [591341]
  - [kernel] mutex: Fix optimistic spinning vs. BKL (Steve Best) [591735]
  - [kernel] mutex: Don't spin when the owner CPU is offline or other weird cases (Steve Best) [591735]
  - [kernel] sched: Don't use possibly stale sched_class (Stanislaw Gruszka) [580067]
  - [usb] unusual_devs: Add support for multiple Option 3G sticks (Stanislaw Gruszka) [580067]
  - [usb] cp210x: Add 81E8 Zephyr Bioharness (Stanislaw Gruszka) [580067]
  - [usb] serial: ftdi: add CONTEC vendor and product id (Stanislaw Gruszka) [580067]
  - [usb] ftdi_sio: sort PID/VID entries in new ftdi_sio_ids.h header (Stanislaw Gruszka) [580067]
  - [usb] ftdi_sio: isolate all device IDs to new ftdi_sio_ids.h header (Stanislaw Gruszka) [580067]
  - [usb] Move hcd free_dev call into usb_disconnect to fix oops (Stanislaw Gruszka) [580067]
  - [usb] remove debugging message for uevent constructions (Stanislaw Gruszka) [580067]
  - [usb] fix crash in uhci_scan_schedule (Stanislaw Gruszka) [580067]
  - [usb] fix the idProduct value for USB-3.0 root hubs (Stanislaw Gruszka) [580067]
  - [usb] xhci: Fix finding extended capabilities registers (Stanislaw Gruszka) [580067]
  - [x86] Fix SCI on IOAPIC != 0 (Stanislaw Gruszka) [580067]
  - [x86] Avoid race condition in pci_enable_msix() (Stanislaw Gruszka) [580067]
  - [x86] thinkpad-acpi: make driver events work in NVRAM poll mode (Stanislaw Gruszka) [580067]
  - [x86] thinkpad-acpi: document HKEY event 3006 (Stanislaw Gruszka) [580067]
  - [x86] thinkpad-acpi: R52 brightness_mode has been confirmed (Stanislaw Gruszka) [580067]
  - [x86] thinkpad-acpi: fix poll thread auto-start (Stanislaw Gruszka) [580067]
  - [net] scm: Only support SCM_RIGHTS on unix domain sockets. (Stanislaw Gruszka) [580067]
  - [usb] serial: sierra driver indat_callback fix (Stanislaw Gruszka) [580067]
  - [tty] Fix the ldisc hangup race (Stanislaw Gruszka) [580067]
  - [kernel] devtmpfs: reset inode permissions before unlinking (Stanislaw Gruszka) [580067]
  - [kernel] driver-core: fix race condition in get_device_parent() (Stanislaw Gruszka) [580067]
  - [pm] hibernate: Fix preallocating of memory (Stanislaw Gruszka) [580067]
  - [tpm] tpm_tis: TPM_STS_DATA_EXPECT workaround (Stanislaw Gruszka) [580067]
  - [fs] Switch proc/self to nd_set_link() (Stanislaw Gruszka) [580067]
  - [hid] usbhid: introduce timeout for stuck ctrl/out URBs (Stanislaw Gruszka) [580067]
  - [hid] add multi-input quirk for NextWindow Touchscreen (Stanislaw Gruszka) [580067]
  - [hid] remove TENX iBuddy from blacklist (Stanislaw Gruszka) [580067]
  - [fs] vfs: take f_lock on modifying f_mode after open time (Stanislaw Gruszka) [580067]
  - [acpi] thinkpad-acpi: wrong thermal attribute_group removed in thermal_exit() (Stanislaw Gruszka) [580067]
  - [acpi] fix "acpi=ht" boot option (Stanislaw Gruszka) [580067]
  - [acpi] remove Asus P2B-DS from acpi=ht blacklist (Stanislaw Gruszka) [580067]
  - [pci] hotplug: check ioremap() return value in ibmphp_ebda.c (Stanislaw Gruszka) [580067]
  - [pci] hotplug: ibmphp: read the length of ebda and map entire ebda region (Stanislaw Gruszka) [580067]
  - [x86] msr/cpuid: Pass the number of minors when unregistering MSR and CPUID drivers (Stanislaw Gruszka) [580063]
  - [fs] fnctl: f_modown should call write_lock_irqsave/restore (Stanislaw Gruszka) [580063]
  - [sound] ASoC: fix a memory-leak in wm8903 (Stanislaw Gruszka) [580063]
  - [mtd] UBI: initialise update marker (Stanislaw Gruszka) [580063]
  - [mtd] UBI: fix memory leak in update path (Stanislaw Gruszka) [580063]
  - [ipc] ns: fix memory leak (idr) (Stanislaw Gruszka) [580063]
  - [input] i8042: remove identification strings from DMI tables (Stanislaw Gruszka) [580063]
  - [netdrv] starfire: clean up properly if firmware loading fails (Stanislaw Gruszka) [580064]
  - [kernel] random: drop weird m_time/a_time manipulation (Stanislaw Gruszka) [580064]
  - [kernel] random: Remove unused inode variable (Stanislaw Gruszka) [580064]
  - [mm] purge fragmented percpu vmap blocks (Stanislaw Gruszka) [580064]
  - [mm] percpu-vmap fix RCU list walking (Stanislaw Gruszka) [580064]
  - [x86] Add quirk for Intel DG45FC board to avoid low memory corruption (Stanislaw Gruszka) [580064]
  - [regulator] Specify REGULATOR_CHANGE_STATUS for WM835x LED constraints (Stanislaw Gruszka) [580064]
  - [x86] Add Dell OptiPlex 760 reboot quirk (Stanislaw Gruszka) [580064]
  - [mm] fix migratetype bug which slowed swapping (Stanislaw Gruszka) [580064]
  - [input] winbond-cir: remove dmesg spam (Stanislaw Gruszka) [580064]
  - [acpi] Advertise to BIOS in _OSC: _OST on _PPC changes (Stanislaw Gruszka) [580064]
  - [infiniband] Fix failure exit in ipathfs (Stanislaw Gruszka) [580064]
  - [acpi] fix OSC regression that caused aer and pciehp not to load (Stanislaw Gruszka) [580064]
  - [acpi] Add platform-wide _OSC support (Stanislaw Gruszka) [580064]
  - [acpi] Add a generic API for _OSC (Stanislaw Gruszka) [580064]
  - [s390x] fix single stepped svcs with TRACE_IRQFLAGS=y (Stanislaw Gruszka) [580064]
  - [fs] sysfs: sysfs_sd_setattr set iattrs unconditionally (Stanislaw Gruszka) [580065]
  - [acpi] fix High cpu temperature with 2.6.32 (Stanislaw Gruszka) [580065]
  - [usb] usbfs: properly clean up the as structure on error paths (Stanislaw Gruszka) [580065]
  - [kernel] class: Free the class private data in class_release (Stanislaw Gruszka) [580065]
  - [serial] 8250: add serial transmitter fully empty test (Stanislaw Gruszka) [580065]
  - [rtc] rtc-fm3130: add missing braces (Stanislaw Gruszka) [580065]
  - [ata] Call flush_dcache_page after PIO data transfers in libata-sff.c (Stanislaw Gruszka) [580065]
  - [net] dst: call cond_resched() in dst_gc_task() (Stanislaw Gruszka) [580065]
  - [crypto] padlock-sha: Add import/export support (Stanislaw Gruszka) [580065]
  - [x86] dell-wmi, hp-wmi: check wmi_get_event_data() return value (Stanislaw Gruszka) [580065]
  - [tpm] tpm_infineon: fix suspend/resume handler for pnp_driver (Stanislaw Gruszka) [580065]
  - [usb] ftdi_sio: add USB device ID's for B&B Electronics line (Stanislaw Gruszka) [580063]
  - [fs] anon_inode: set S_IFREG on the anon_inode (Eric Paris) [591813]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-27.el6]
changelog:
  - [ppc] pseries: Flush lazy kernel mappings after unplug operations (Steve Best) [591340]
  - [fs] ext3: enable barriers by default (Eric Sandeen) [586062]
  - [tracing] regset xstate extensions + generic PTRACE_{GET,SET}REGSET support (Oleg Nesterov) [587724]
  - [scsi] hpsa: update to 2.0.2 (Tomas Henzl) [587418]
  - [mm] Print more information about the task being OOM killed (Larry Woodman) [546533]
  - [netdrv] igb/igbvf: use netdev_alloc_skb_ip_align() (Stefan Assmann) [589497]
  - [acpi] Fix regression where _PPC is not read at boot even when ignore_ppc=0 (Matthew Garrett) [571893]
  - [x86] i386: Do a global tlb flush on S4 resume (Matthew Garrett) [572818]
  - [pci] Add ABI for PCI runtime power management (Matthew Garrett) [589781]
  - [block] Fix regression in O_DIRECT|O_SYNC writes to block devices (Jeff Moyer) [582628]
  - [kernel] add skip_spaces() implementation (Jaroslav Kysela) [591078]
  - [kernel] sched: cpuacct: Use bigger percpu counter batch values for stats counters (Steve Best) [591343]
  - [kernel] idr: fix a critical misallocation bug (Eric Paris) [582109]
  - [net] tcp: Fix OOB POLLIN avoidance (Oleg Nesterov) [584786]
  - [s390x] qeth: synchronize configuration interface (Hendrik Brueckner) [586962]
  - [fs] inotify: race use after free/double free in inotify inode marks (Eric Paris) [582109]
  - [fs] ext4: Add flag to files with blocks intentionally past EOF (Eric Sandeen) [578562]
  - [drm] backport patches up to 2.6.34-rc7 (Adam Jackson) [589792]
  - [kernel] elf coredump: add extended numbering support (Amerigo Wang) [578659]
  - [kernel] binfmt_elf_fdpic: Fix build breakage introduced by coredump changes. (Amerigo Wang) [578659]
  - [kernel] elf coredump: make offset calculation process and writing process explicit (Amerigo Wang) [578659]
  - [kernel] elf coredump: replace ELF_CORE_EXTRA_* macros by functions (Amerigo Wang) [578659]
  - [kernel] coredump: move dump_write() and dump_seek() into a header file (Amerigo Wang) [578659]
  - [kernel] coredump: unify dump_seek() implementations for each binfmt_*.c (Amerigo Wang) [578659]
  - [mm] introduce coredump parameter structure (Amerigo Wang) [578659]
  - [powerpc] Reduce printk from pseries_mach_cpu_die() (Steve Best) [590754]
  - [powerpc] Move checks in pseries_mach_cpu_die() (Steve Best) [590754]
  - [powerpc] Reset kernel stack on cpu online from cede state (Steve Best) [590754]
  - [virt] don't compute pvclock adjustments if we trust the tsc (Glauber Costa) [569603]
  - [virt] Try using new kvm clock msrs (Glauber Costa) [569603]
  - [virt] Add a global synchronization point for pvclock (Glauber Costa) [569603]
  - [virt] Enable pvclock flags in vcpu_time_info structure (Glauber Costa) [569603]
  - [virt] Tell the guest we'll warn it about tsc stability (Glauber Costa) [592296]
  - [virt] export paravirtual cpuid flags in KVM_GET_SUPPORTED_CPUID (Glauber Costa) [592296]
  - [virt] add new KVMCLOCK cpuid feature (Glauber Costa) [592296]
  - [virt] change msr numbers for kvmclock (Glauber Costa) [592296]
  - [scsi] enclosure: fix oops while iterating enclosure_status array (Stanislaw Gruszka) [580062]
  - [usb] fix bitmask merge error (Stanislaw Gruszka) [580062]
  - [acpi] enable C2 and Turbo-mode on Nehalem notebooks on A/C (Stanislaw Gruszka) [580063]
  - [input] i8042: add Gigabyte M1022M to the noloop list (Stanislaw Gruszka) [580063]
  - [kernel] nohz: Prevent clocksource wrapping during idle (Stanislaw Gruszka) [580063]
  - [kernel] sched: Fix missing sched tunable recalculation on cpu add/remove (Stanislaw Gruszka) [580063]
  - [netdrv] atl1c: use common_task instead of reset_task and link_chg_task (Stanislaw Gruszka) [580063]
  - [netdrv] atl1e: disable NETIF_F_TSO6 for hardware limit (Stanislaw Gruszka) [580063]
  - [kernel] driver-core: fix devtmpfs crash on s390 (Stanislaw Gruszka) [580063]
  - [kernel] devtmpfs: set root directory mode to 0755 (Stanislaw Gruszka) [580063]
  - [input] ALPS: add interleaved protocol support for Dell E6x00 series (Stanislaw Gruszka) [580063]
  - [mm] flush dcache before writing into page to avoid alias (Stanislaw Gruszka) [580064]
  - [block] pktcdvd: removing device does not remove its sysfs dir (Stanislaw Gruszka) [580064]
  - [mm] add new 'read_cache_page_gfp()' helper function (Stanislaw Gruszka) [580064]
  - [acpi] Add NULL pointer check in acpi_bus_start (Stanislaw Gruszka) [580065]
  - [usb] usbfs: only copy the actual data received (Stanislaw Gruszka) [580065]
  - [net] netfilter: xtables: compat out of scope fix (Stanislaw Gruszka) [580065]
  - [net] pktgen: Fix freezing problem (Stanislaw Gruszka) [580065]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-26.el6]
changelog:
  - [scsi] Sync fcoe to upsteam (Mike Christie) [590781]
  - [netdrv] bnx2x: fix memory barrier (Stanislaw Gruszka) [580477]
  - [x86] kprobes: fix removed int3 checking order (Dave Anderson) [585400]
  - [net] fix oops at bootime in sysctl code (Stanislaw Gruszka) [580064]
  - [net] af_packet: Don't use skb after dev_queue_xmit() (Stanislaw Gruszka) [580064]
  - [net] restore ip source validation (Stanislaw Gruszka) [580064]
  - [net] tcp: update the netstamp_needed counter when cloning sockets (Stanislaw Gruszka) [580064]
  - [net] icmp: send fragment reassembly timeout w/ conntrack enabled (Neil Horman) [563175]
  - [fs] GFS2: stuck in inode wait, no glocks stuck (Robert S Peterson) [583737]
  - [mm] compcache: Backport compcache: ramzswap documentation (Jerome Marchand) [578641]
  - [mm] compcache: xvmalloc memory allocator (Jerome Marchand) [578641]
  - [mm] compcache: virtual block device driver (ramzswap) (Jerome Marchand) [578641]
  - [mm] readahead: fix NULL filp dereference (Josef Bacik) [591055]
  - [netdrv] tg3: 57780 and 5785 devices refuse to attach (Andy Gospodarek) [564117]
  - [x86] Fetch valid frequencies for powernow_k8.o from ACPI _PST table (Bhavna Sarathy) [464630]
  - [s390x] ptrace: fix return value of do_syscall_trace_enter() (Hendrik Brueckner) [588216]
  - [fs] gfs2: fix oops while copying from ext3 to gfs2 (Abhijith Das) [586009] {CVE-2010-1436}
  - [virt] virtio: console: Accept console size along with resize control message (Amit Shah) [589307]
  - [virt] virtio: console: Store each console's size in the console structure (Amit Shah) [589307]
  - [virt] virtio: console: Resize console port 0 on config intr only if multiport is off (Amit Shah) [589307]
  - [sound] ac97: Add IBM ThinkPad R40e to Headphone/Line Jack Sense blacklist (Stanislaw Gruszka) [584757]
  - [sound] ac97: Add Toshiba P500 to ac97 jack sense blacklist (Stanislaw Gruszka) [584757]
  - [x86] amd: Restrict usage of c1e_idle() (Stanislaw Gruszka) [584757]
  - [x86] Fix placement of FIX_OHCI1394_BASE (Stanislaw Gruszka) [584757]
  - [net] netfilter: xt_recent: fix regression in rules using a zero hit_count (Stanislaw Gruszka) [584757]
  - [kernel] softlockup: Stop spurious softlockup messages due to overflow (Stanislaw Gruszka) [584757]
  - [kernel] cpuset: fix the problem that cpuset_mem_spread_node() returns an offline node (Stanislaw Gruszka) [584757]
  - [pci] cleanup error return for pcix get and set mmrbc functions (Stanislaw Gruszka) [584757]
  - [pci] fix access of PCI_X_CMD by pcix get and set mmrbc functions (Stanislaw Gruszka) [584757]
  - [pci] fix return value from pcix_get_max_mmrbc() (Stanislaw Gruszka) [584757]
  - [net] if_tunnel.h: add missing ams/byteorder.h include (Stanislaw Gruszka) [584757]
  - [netdrv] jme: Protect vlgrp structure by pause RX actions (Stanislaw Gruszka) [584757]
  - [netdrv] jme: Fix VLAN memory leak (Stanislaw Gruszka) [584757]
  - [usb] option: add support for a new CMOTECH device to usb/serial/option (Stanislaw Gruszka) [584757]
  - [usb] option: move hardcoded PID to a macro in usb/serial/option (Stanislaw Gruszka) [584757]
  - [usb] option: fix incorrect manufacturer name in usb/serial/option: MAXON->CMOTECH (Stanislaw Gruszka) [584757]
  - [usb] xHCI: re-initialize cmd_completion (Stanislaw Gruszka) [584757]
  - [usb] EHCI: adjust ehci_iso_stream for changes in ehci_qh (Stanislaw Gruszka) [584757]
  - [usb] EHCI: fix ITD list order (Stanislaw Gruszka) [584757]
  - [tty] Take a 256 byte padding into account when buffering below sub-page units (Stanislaw Gruszka) [584757]
  - [tty] Keep the default buffering to sub-page units (Stanislaw Gruszka) [584757]
  - [mm] tmpfs: cleanup mpol_parse_str() (Stanislaw Gruszka) [584757]
  - [perf] Make the install relative to DESTDIR if specified (Stanislaw Gruszka) [584757]
  - [perf] perf_event: Fix oops triggered by cpu offline/online (Stanislaw Gruszka) [584757]
  - [isdn] gigaset: prune use of tty_buffer_request_room (Stanislaw Gruszka) [584757]
  - [isdn] gigaset: correct clearing of at_state strings on RING (Stanislaw Gruszka) [584757]
  - [sound] hda: Disable MSI for Nvidia controller (Stanislaw Gruszka) [584757]
  - [sound] hda: Fix 0 dB offset for HP laptops using CX20551 (Stanislaw Gruszka) [584757]
  - [sound] hda: Fix secondary ADC of ALC260 basic model (Stanislaw Gruszka) [584757]
  - [virt] virtio: fix out of range array access (Stanislaw Gruszka) [584757]
  - [ipc] mqueue: fix mq_open() file descriptor leak on user-space processes (Stanislaw Gruszka) [584757]
  - [security] sysctl: require CAP_SYS_RAWIO to set mmap_min_addr (Stanislaw Gruszka) [584757]
  - [kernel] sched: Mark boot-cpu active before smp_init() (Stanislaw Gruszka) [584757]
  - [pci] add support for 82576NS serdes to existing SR-IOV quirk (Stanislaw Gruszka) [584757]
  - [v4l] DVB: em28xx-dvb: fix memleak in dvb_fini() (Stanislaw Gruszka) [584757]
  - [pci] unconditionally clear AER uncorr status register during cleanup (Stanislaw Gruszka) [584757]
  - [tracing] Do not record user stack trace from NMI context (Stanislaw Gruszka) [584757]
  - [tracing] Disable buffer switching when starting or stopping trace (Stanislaw Gruszka) [584757]
  - [tracing] Use same local variable when resetting the ring buffer (Stanislaw Gruszka) [584757]
  - [tracing] function-graph: Init curr_ret_stack with ret_stack (Stanislaw Gruszka) [584757]
  - [tracing] ring-buffer: Move disabled check into preempt disable section (Stanislaw Gruszka) [584757]
  - [input] i8042: add ALDI/MEDION netbook E1222 to qurik reset table (Stanislaw Gruszka) [584757]
  - [net] netfilter: xt_recent: fix false match (Stanislaw Gruszka) [580067]
  - [net] netfilter: xt_recent: fix buffer overflow (Stanislaw Gruszka) [580067]
  - [tracing] oprofile/x86: fix msr access to reserved counters (Stanislaw Gruszka) [580067]
  - [tracing] oprofile/x86: use kzalloc() instead of kmalloc() (Stanislaw Gruszka) [580067]
  - [tracing] oprofile/x86: remove node check in AMD IBS initialization (Stanislaw Gruszka) [580067]
  - [tracing] oprofile: remove tracing build dependency (Stanislaw Gruszka) [580067]
  - [x86] oprofile: fix perfctr nmi reservation for mulitplexing (Stanislaw Gruszka) [580067]
  - [netdrv] via-rhine: Fix scheduling while atomic bugs (Stanislaw Gruszka) [580067]
  - [net] ipv6: conntrack: Add member of user to nf_ct_frag6_queue structure (Stanislaw Gruszka) [580067]
  - [net] Remove bogus IGMPv3 report handling (Stanislaw Gruszka) [580067]
  - [net] sysfs: Use rtnl_trylock in wireless sysfs methods (Stanislaw Gruszka) [580067]
  - [net] Fix sysctl restarts (Stanislaw Gruszka) [580067]
  - [mm] slab: initialize unused alien cache entry as NULL at alloc_alien_cache() (Stanislaw Gruszka) [580067]
  - [v4l] DVB: cxusb: Select all required frontend and tuner modules (Stanislaw Gruszka) [580067]
  - [v4l] dvb: l64781.ko broken with gcc 4.5 (Stanislaw Gruszka) [580067]
  - [v4l] DVB: uvcvideo: Fix controls blacklisting (Stanislaw Gruszka) [580063]
  - [net] netfilter: nf_conntrack: fix hash resizing with namespaces (Stanislaw Gruszka) [580065]
  - [net] netfilter: nf_conntrack: restrict runtime expect hashsize modifications (Stanislaw Gruszka) [580065]
  - [net] netfilter: xtables: fix conntrack match v1 ipt-save output (Stanislaw Gruszka) [580063]
  - [v4l] DVGB: DocBook/media: create links for included sources (Stanislaw Gruszka) [580063]
  - [v4l] DVB: DocBook/media: copy images after building HTML (Stanislaw Gruszka) [580063]
  - [v4l] DVB: dvb-core: fix initialization of feeds list in demux filter (Stanislaw Gruszka) [580065]
  - [dma] ioat: fix infinite timeout checking in ioat2_quiesce (Stanislaw Gruszka) [580065]
  - [v4l] DVB: smsusb: add autodetection support for five additional Hauppauge USB IDs (Stanislaw Gruszka) [580063]
  - [x86] cpufreq: Fix use after free of struct powernow_k8_data (Stanislaw Gruszka) [580065]
  - [regulator] Fix display of null constraints for regulators (Stanislaw Gruszka) [580065]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-25.el6]
changelog:
  - [fs] exec: Fix 'flush_old_exec()/setup_new_exec()' split (Jiri Olsa) [586024] {CVE-2010-0307}
  - [powerpc] TIF_ABI_PENDING bit removal (Jiri Olsa) [586024] {CVE-2010-0307}
  - [x86] set_personality_ia32() misses force_personality32 (Jiri Olsa) [586024] {CVE-2010-0307}
  - [x86] get rid of the TIF_ABI_PENDING bit (Jiri Olsa) [586024] {CVE-2010-0307}
  - [kernel] split 'flush_old_exec' into two functions (Jiri Olsa) [586024] {CVE-2010-0307}
  - [net] sctp: fix skb_over_panic from processing too many unknown params (Neil Horman) [584659] {CVE-2010-1173}
  - [virt] kvm: fix vmx null pointer dereference (Eduardo Habkost) [570534] {CVE-2010-0435}
  - [fs] gfs2: fix quota state reporting (Christoph Hellwig) [589945]
  - [fs] gfs2: fix quota file size not a multiple of struct gfs2_quota (Abhijith Das) [589813]
  - [x86] Use physical mode for IBM Summit platforms (John Villalovos) [558397]
  - [mm] page allocator: update NR_FREE_PAGES only when necessary (Stanislaw Gruszka) [579693]
  - [mm] memcg: ensure list is empty at rmdir (Stanislaw Gruszka) [579693]
  - [video] revert "drivers/video/s3c-fb.c: fix clock setting for Samsung SoC Framebuffer" (Stanislaw Gruszka) [579693]
  - [v4l] DVB: gspca - sunplus: Fix bridge exchanges (Stanislaw Gruszka) [580062]
  - [hwmon] fschmd: Fix a memleak on multiple opens of /dev/watchdog (Stanislaw Gruszka) [580063]
  - [sound] hda: Fix HP T5735 automute (Stanislaw Gruszka) [580063]
  - [sound] hda: Fix quirk for Maxdata obook4-1 (Stanislaw Gruszka) [580063]
  - [sound] ice1724: Patch for suspend/resume for ESI Juli@ (Stanislaw Gruszka) [580063]
  - [sound] usb-audio: Avoid Oops after disconnect (Stanislaw Gruszka) [580065]
  - [sound] ctxfi: fix PTP address initialization (Stanislaw Gruszka) [580065]
  - [hwmon] lm78: Request I/O ports individually for probing (Stanislaw Gruszka) [580065]
  - [hwmon] w83781d: Request I/O ports individually for probing (Stanislaw Gruszka) [580065]
  - [hwmon] tmp421: Fix temperature conversions (Stanislaw Gruszka) [580067]
  - [sound] via82xx: add quirk for D1289 motherboard (Stanislaw Gruszka) [580067]
  - [hwmon] tmp421: Restore missing inputs (Stanislaw Gruszka) [580067]
  - [sound] USB MIDI support for Access Music VirusTI (Stanislaw Gruszka) [580067]
  - [sound] hda-intel: Add position_fix quirk for ASUS M2V-MX SE (Stanislaw Gruszka) [580067]
  - [sound] pcm core: fix fifo_size channels interval check (Stanislaw Gruszka) [580067]
  - [sound] hda: Use 3stack quirk for Toshiba Satellite L40-10Q (Stanislaw Gruszka) [580067]
  - [bluetooth] Fix potential bad memory access with sysfs files (Stanislaw Gruszka) [584757]
  - [hwmon] coretemp: Add missing newline to dev_warn() message (Stanislaw Gruszka) [584757]
  - [bluetooth] Fix kernel crash on L2CAP stress tests (Stanislaw Gruszka) [584757]
  - [input] wacom: ensure the device is initialized properly upon resume (Stanislaw Gruszka) [584757]
  - [sound] hda: Fix input source elements of secondary ADCs on Realtek (Stanislaw Gruszka) [584757]
  - [x86] nmi watchdog: use generic interrupt source to determine deadlocks (Don Zickus) [574570]
  - [dm] eliminate some holes in data structures (Mike Snitzer) [586089]
  - [dm] ioctl: introduce flag indicating uevent was generated (Mike Snitzer) [586089]
  - [dm] free dm_io before bio_endio not after (Mike Snitzer) [586089]
  - [dm] table: remove unused dm_get_device range parameters (Mike Snitzer) [586089]
  - [dm] ioctl: only issue uevent on resume if state changed (Mike Snitzer) [586089]
  - [dm] raid1: always return error if all legs fail (Mike Snitzer) [586089]
  - [dm] mpath: refactor pg_init (Mike Snitzer) [586089]
  - [dm] mpath: wait for pg_init completion when suspending (Mike Snitzer) [586089]
  - [dm] mpath: hold io until all pg_inits completed (Mike Snitzer) [586089]
  - [dm] mpath: avoid storing private suspended state (Mike Snitzer) [586089]
  - [dm] document when snapshot has finished merging (Mike Snitzer) [586089]
  - [dm] table: remove dm_get from dm_table_get_md (Mike Snitzer) [586089]
  - [dm] mpath: skip activate_path for failed paths (Mike Snitzer) [586089]
  - [dm] mpath: pass struct pgpath to pg init done (Mike Snitzer) [586089]
  - [netdrv] mac80211: fix deferred hardware scan requests (John Linville) [561762]
  - [x86] asus-laptop: add Lenovo SL hotkey support (Stanislaw Gruszka) [579693]
  - [input] pmouse: move Sentelic probe down the list (Stanislaw Gruszka) [579693]
  - [pci] cardbus: Add a fixup hook and fix powerpc (Stanislaw Gruszka) [579693]
  - [mfd] Correct WM835x ISINK ramp time defines (Stanislaw Gruszka) [579693]
  - [mfd] WM835x GPIO direction register is not locked (Stanislaw Gruszka) [579693]
  - [edac] i5000_edac critical fix panic out of bounds (Stanislaw Gruszka) [579693]
  - [i2c] i2c-tiny-usb: Fix on big-endian systems (Stanislaw Gruszka) [580065]
  - [x86] thinkpad-acpi: fix bluetooth/wwan resume (Stanislaw Gruszka) [580067]
  - [v4l] DVB: bttv: Move I2C IR initialization (Stanislaw Gruszka) [580067]
  - [bluetooth] Fix sleeping function in RFCOMM within invalid context (Stanislaw Gruszka) [584757]
  - [i2c] i2c-i801: Don't use the block buffer for I2C block writes (Stanislaw Gruszka) [584757]
  - [s390x] vdso: use ntp adjusted clock multiplier (Hendrik Brueckner) [575728]
  - [s390x] timekeeping: Fix clock_gettime vsyscall time warp (Hendrik Brueckner) [575728]
  - [s390x] timekeeping: Fix accumulation bug triggered by long delay (Hendrik Brueckner) [575728]
  - [netdrv] igb: fix warning in drivers/net/igb/igb_main.c (Stefan Assmann) [589272]
  - [x86] Re-get cfg_new in case reuse/move irq_desc (Stanislaw Gruszka) [580065 583555]
  - [hwmon] adt7462: fix wrong ADT7462_VOLT_COUNT (Stanislaw Gruszka) [580065]
  - [fs] exec.c: fix initial stack reservation (Stanislaw Gruszka) [580067]
  - [fs] exec.c: restrict initial stack space expansion to rlimit (Stanislaw Gruszka) [580065]
  - [kernel] resource: add helpers for fetching rlimits (Stanislaw Gruszka) [580065]
  - [tracing] ext4: Convert some events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert some jbd2 events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert some block events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert some power events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert some workqueue events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert softirq events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert some kmem events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert module refcnt events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] xfs: use DECLARE_EVENT_CLASS (Mike Snitzer) [588108]
  - [tracing] Harmonize event field names and print output names (Mike Snitzer) [588108]
  - [tracing] Add DEFINE_EVENT(), DEFINE_SINGLE_EVENT() support to docbook (Mike Snitzer) [588108]
  - [block] blk-cgroup: config options re-arrangement (Vivek Goyal) [586182]
  - [block] blkio: Fix another BUG_ON() crash due to cfqq movement across groups (Vivek Goyal) [586182]
  - [block] blkio: Fix blkio crash during rq stat update (Vivek Goyal) [586182]
  - [block] blkio: Initialize blkg->stats_lock for the root cfqg too (Vivek Goyal) [586182]
  - [block] blkio: Fix compile errors (Vivek Goyal) [586182]
  - [block] Update to io-controller stats (Vivek Goyal) [586182]
  - [block] io-controller: Add a new interface "weight_device" for IO-Controller (Vivek Goyal) [586182]
  - [block] cfq-iosched: Fix the incorrect timeslice accounting with forced_dispatch (Vivek Goyal) [586182]
  - [block] blkio: Add more debug-only per-cgroup stats (Vivek Goyal) [586182]
  - [block] blkio: Add io_queued and avg_queue_size stats (Vivek Goyal) [586182]
  - [block] blkio: Add io_merged stat (Vivek Goyal) [586182]
  - [block] blkio: Changes to IO controller additional stats patches (Vivek Goyal) [586182]
  - [block] expose the statistics in blkio.time and blkio.sectors for the root cgroup (Vivek Goyal) [586182]
  - [block] blkio: Increment the blkio cgroup stats for real now (Vivek Goyal) [586182]
  - [block] blkio: Add io controller stats like (Vivek Goyal) [586182]
  - [block] blkio: Remove per-cfqq nr_sectors as we'll be passing (Vivek Goyal) [586182]
  - [block] cfq-iosched: Add additional blktrace log messages in CFQ for easier debugging (Vivek Goyal) [586182]
  - [block] cfq-iosched: requests "in flight" vs "in driver" clarification (Vivek Goyal) [586182]
  - [ppc] cxgb3: Wait longer for control packets on initialization (Steve Best) [588848]
  - [virt] KVM: convert ioapic lock to spinlock (Marcelo Tosatti) [588811]
  - [virt] KVM: fix the handling of dirty bitmaps to avoid overflows (Marcelo Tosatti) [588811]
  - [virt] KVM: MMU: fix kvm_mmu_zap_page() and its calling path (Marcelo Tosatti) [588811]
  - [virt] KVM: VMX: Save/restore rflags.vm correctly in real mode (Marcelo Tosatti) [588811]
  - [virt] KVM: Dont spam kernel log when injecting exceptions due to bad cr writes (Marcelo Tosatti) [588811]
  - [virt] KVM: SVM: Fix memory leaks that happen when svm_create_vcpu() fails (Marcelo Tosatti) [588811]
  - [virt] KVM: VMX: Update instruction length on intercepted BP (Marcelo Tosatti) [588811]
  - [drm] nouveau: initial eDP support + additional fixes (Ben Skeggs) [588581]
  - [s390x] zcore: Fix reipl device detection (Hendrik Brueckner) [587025]
  - [connector] Delete buggy notification code (Stanislaw Gruszka) [580064 586025] {CVE-2010-0410}
  - [netdrv] ath9k: fix beacon slot/buffer leak (Stanislaw Gruszka) [580064]
  - [fusion] mptsas: Fix issue with chain pools allocation on katmai (Stanislaw Gruszka) [580064]
  - [sunrpc] Fix a potential memory leak in auth_gss (Stanislaw Gruszka) [584757]
  - [tracing] scsi: Enhance SCSI command tracing (Mike Snitzer) [588108]
  - [tracing] scsi: Add missing verify command definitions (Mike Snitzer) [588108]
  - [tracing] scsi: ftrace based SCSI command tracing (Mike Snitzer) [588108]
  - [tracing] add __print_hex() (Mike Snitzer) [588108]
  - [tracing] Add notrace to TRACE_EVENT implementation functions (Mike Snitzer) [588108]
  - [tracing] Move a printk out of ftrace_raw_reg_event_foo() (Mike Snitzer) [588108]
  - [tracing] Rename TRACE_EVENT_TEMPLATE() to DECLARE_EVENT_CLASS() (Mike Snitzer) [588108]
  - [tracing] Convert some sched trace events to DEFINE_EVENT and _PRINT (Mike Snitzer) [588108]
  - [tracing] Create new DEFINE_EVENT_PRINT (Mike Snitzer) [588108]
  - [tracing] Create new TRACE_EVENT_TEMPLATE (Mike Snitzer) [588108]
  - [tracing] additional interface changes and fixes (Mike Snitzer) [588108]
  - [tracing] Ftrace dynamic ftrace_event_call support (Mike Snitzer) [588108]
  - [fs] quota: fix WARN_ON when quota reservations get out of sync (Eric Sandeen) [581951]
  - [scsi] fcoe: sync with upstream (Mike Christie) [577049 578328]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-24.el6]
changelog:
  - [fs] ecryptfs: disallow ecryptfs as underlying filesystem (Eric Sandeen) [585185]
  - [mm] Fix Section Mismatch warning in put_page_bootmem() (Prarit Bhargava) [587040]
  - [mm] transparent hugepage support update (Andrea Arcangeli) [556572]
  - [netdrv] ath9k: revert fb6635f6c114313f246cc34abc0b677264a765ed (Aristeu Rozanski) [584757]
  - [virt] KVM: take srcu lock before call to complete_pio() (Gleb Natapov) [585887]
  - [virt] virtio: Fix GFP flags passed from the virtio balloon driver (Amit Shah) [584680]
  - [x86] Check chip_data value in irq_force_complete_move() (Prarit Bhargava) [564398]
  - [x86] nmi_watchdog: use __cpuinit for 32-bit nmi_watchdog_default (Prarit Bhargava) [586967]
  - [acpi] Fall back to manually changing SCI_EN (Matthew Garrett) [587008]
  - [pci] Ensure that devices are resumed properly (Matthew Garrett) [586780]
  - [serial] usb-serial: Rework and update qcserial (Matthew Garrett) [587009]
  - [scsi] scsi_lib: Fix bug in completion of bidi commands (Stanislaw Gruszka) [580064]
  - [net] phonet: add check for null pernet mem pointer in notifier (Jiri Pirko) [573122]
  - [nfs] Ensure that writeback_single_inode() calls write_inode() when syncing (Jeff Layton) [584382]
  - [serial] 8250_pnp: use wildcard for serial Wacom tablets (Stanislaw Gruszka) [580062]
  - [fs] ext4: check s_log_groups_per_flex in online resize code (Eric Sandeen) [519461]
  - [x86] Fix sched_clock_cpu for systems with unsynchronized TSC (Prarit Bhargava) [568344]
  - [x86] Reenable TSC sync check at boot, even with NONSTOP_TSC (Prarit Bhargava) [568344]
  - [mm] slab: add memory hotplug support (Prarit Bhargava) [562880]
  - [x86] Set hotpluggable nodes in nodes_possible_map (Prarit Bhargava) [568344]
  - [x86] acpi: Auto Online Hot-Added Memory (Prarit Bhargava) [568344]
  - [mm] memory hotplug: fix a bug on /dev/mem for 64-bit kernels (Prarit Bhargava) [568344]
  - [mm] update all PGDs for direct mapping changes on 64 bit (Prarit Bhargava) [568344]
  - [x86] acpi: Map hotadded cpu to correct node (Prarit Bhargava) [568344]
  - [ipmi] Change timeout and event poll to one second (Matthew Garrett) [584106]
  - [ipmi] Attempt to register multiple SIs of the same type (Matthew Garrett) [584106]
  - [ipmi] Reduce polling (Matthew Garrett) [584106]
  - [ipmi] Reduce polling when interrupts are available (Matthew Garrett) [584106]
  - [ipmi] Change device discovery order (Matthew Garrett) [584106]
  - [ipmi] Only register one si per bmc (Matthew Garrett) [584106]
  - [ipmi] Split device discovery and registration (Matthew Garrett) [584106]
  - [ipmi] Change addr_source to an enum rather than strings (Matthew Garrett) [584106]
  - [drm] radeon: rs780/rs880: MSI quirk fixes (Dave Airlie) [586168]
  - [drm] radeon/kms: MC + watermark fixes + reset (Dave Airlie) [586168]
  - [drm] radeon/kms/evergreen: add evergreen stage 2 - HPD irq (Dave Airlie) [580757]
  - [drm] radeon: fixup radeon_asic struct c/h files (Dave Airlie) [586168]
  - [drm] radeon/kms: misc + tv dac fixes (Dave Airlie) [586168]
  - [drm] radeon/kms: squash upstream HDMI audio commits (Dave Airlie) [586168]
  - [drm] kms/radeon: Integrated graphics fixes (Dave Airlie) [586168]
  - [drm] radeon/kms: spread spectrum + pll fixes (Dave Airlie) [586168]
  - [drm] radeon: add initial evergreen support + fixes (Dave Airlie) [580757]
  - [kernel] tty: tty->pgrp races (Jiri Olsa) [586022]
  - [netdrv] kernel: fix the r8169 frame length check error (Jiri Olsa) [586017] {CVE-2009-4537}


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-23.el6]
changelog:
  - [doc] add the documentation for mpol=local (Stanislaw Gruszka) [584757]
  - [fs] tmpfs: handle MPOL_LOCAL mount option properly (Stanislaw Gruszka) [584757]
  - [fs] tmpfs: mpol=bind:0 don't cause mount error (Stanislaw Gruszka) [584757]
  - [netdrv] tun: orphan an skb on tx (Michael S. Tsirkin) [584428]
  - [s390x] vmalloc: IPL failure with enabled memory cgroups (Hendrik Brueckner) [580918]
  - [netdrv] b43: fall back gracefully to PIO mode after fatal DMA errors (John Linville) [583069]
  - [netdrv] b43: Allow PIO mode to be selected at module load (John Linville) [583069]
  - [netdrv] b43: Remove reset after fatal DMA error (John Linville) [583069]
  - [netdrv] b43: Optimize PIO scratchbuffer usage (John Linville) [583069]
  - [fs] vfs: get_sb_single() - do not pass options twice (Stanislaw Gruszka) [580063]
  - [fs] tmpfs: fix oops on mounts with mpol=default (Stanislaw Gruszka) [584757]
  - [kernel] cred.c: use kmem_cache_free (Stanislaw Gruszka) [580064]
  - [fs] partition/msdos: fix unusable extended partition for > 512B sector (Stanislaw Gruszka) [584757]
  - [fs] partitions/msdos: add support for large disks (Stanislaw Gruszka) [584757]
  - [fs] eCryptfs: Add getattr function (Stanislaw Gruszka) [580065]
  - [fs] ecryptfs: initialize private persistent file before dereferencing pointer (Stanislaw Gruszka) [580062]
  - [fs] ecryptfs: use after free (Stanislaw Gruszka) [580062]
  - [ppc] Track backing pages used allocated by vmemmap_populate() (Steve Best) [547854]
  - [netdrv] be2net: recent bug fixes from upstream (Ivan Vecera) [583766]
  - [sunrpc] handle allocation errors from __rpc_lookup_create() (Stanislaw Gruszka) [584757]
  - [nfs] Prevent another deadlock in nfs_release_page() (Stanislaw Gruszka) [584757]
  - [nfs] NFSv4: Don't ignore the NFS_INO_REVAL_FORCED flag in nfs_revalidate_inode() (Stanislaw Gruszka) [584757]
  - [nfs] Fix an allocation-under-spinlock bug (Stanislaw Gruszka) [580067]
  - [sunrpc] Handle EINVAL error returns from the TCP connect operation (Stanislaw Gruszka) [580067]
  - [sunrpc] remove unnecessary svc_xprt_put (Stanislaw Gruszka) [580067]
  - [x86] Add iMac9,1 to pci_reboot_dmi_table (Stanislaw Gruszka) [580067]
  - [rtc] rtc-core: fix memory leak (Stanislaw Gruszka) [580067]
  - [mm] readahead: introduce FMODE_RANDOM for POSIX_FADV_RANDOM (Stanislaw Gruszka) [580067]
  - [fs] fix LOOKUP_FOLLOW on automount "symlinks" (Stanislaw Gruszka) [580067]
  - [nfs] Too many GETATTR and ACCESS calls after direct I/O (Stanislaw Gruszka) [580065]
  - [virt] kvmclock: count total_sleep_time when updating guest clock (Stanislaw Gruszka) [580065]
  - [kernel] Export the symbol of getboottime and mmonotonic_to_bootbased (Stanislaw Gruszka) [580065]
  - [nfs] NFS: Fix the mapping of the NFSERR_SERVERFAULT error (Stanislaw Gruszka) [580065]
  - [nfs] NFS: Fix a umount race (Stanislaw Gruszka) [580065]
  - [x86] amd-iommu: Fix possible integer overflow (Stanislaw Gruszka) [580064]
  - [ata] libata: retry FS IOs even if it has failed with AC_ERR_INVALID (Stanislaw Gruszka) [580064]
  - [firewire] firewire: ohci: fix crashes with TSB43AB23 on 64bit systems (Stanislaw Gruszka) [580064]
  - [ata] pata_hpt3x2n: always stretch UltraDMA timing (Stanislaw Gruszka) [580067]
  - [cgroup] memcg: fix oom killing a child process in an other cgroup (Stanislaw Gruszka) [580067]
  - [ata] libata: retry link resume if necessary (Stanislaw Gruszka) [580064]
  - [firewire] core: add_descriptor size check (Stanislaw Gruszka) [580064]
  - [netdrv] iwlwifi: fix scan race (Stanislaw Gruszka) [584759]
  - [netdrv] iwlwifi: clear all tx queues when firmware ready (Stanislaw Gruszka) [584759]
  - [netdrv] iwlwifi: need check for valid qos packet before free (Stanislaw Gruszka) [584759]
  - [netdrv] mac80211: tear down all agg queues when restart/reconfig hw (Stanislaw Gruszka) [584759]
  - [netdrv] mac80211: move netdev queue enabling to correct spot (Stanislaw Gruszka) [584759]
  - [netdrv] setup correct int pipe type in ar9170_usb_exec_cmd (Stanislaw Gruszka) [584759]
  - [netdrv] iwlwifi: range checking issue (Stanislaw Gruszka) [584759]
  - [netdrv] iwlwifi: fix nfreed-- (Stanislaw Gruszka) [584759]
  - [netdrv] iwlwifi: counting number of tfds can be free for 4965 (Stanislaw Gruszka) [584759]
  - [netdrv] b43: Workaround circular locking in hw-tkip key update callback (Stanislaw Gruszka) [584757]
  - [ata] ahci: use BIOS date in broken_suspend list (Stanislaw Gruszka) [584757]
  - [netdrv] mac80211: Reset dynamic ps timer in Rx path (Stanislaw Gruszka) [584757]
  - [netdrv] ath9k: Enable IEEE80211_HW_REPORTS_TX_ACK_STATUS flag for ath9k (Stanislaw Gruszka) [584757]
  - [netdrv] mac80211: Retry null data frame for power save (Stanislaw Gruszka) [584757]
  - [netdrv] ath9k: Enable TIM timer interrupt only when needed. (Stanislaw Gruszka) [584757]
  - [netdrv] ath9k: fix BUG_ON triggered by PAE frames (Stanislaw Gruszka) [584757]
  - [netdrv] iwlwifi: Silence tfds_in_queue message (Stanislaw Gruszka) [584757]
  - [netdrv] iwlwifi: use dma_alloc_coherent (Stanislaw Gruszka) [584757]
  - [netdrv] wl1251: fix potential crash (Stanislaw Gruszka) [584757]
  - [block] readahead: add blk_run_backing_dev (Stanislaw Gruszka) [584757]
  - [netdrv] ath9k: fix lockdep warning when unloading module (Stanislaw Gruszka) [584757]
  - [scsi] mvsas: add support for Adaptec ASC-1045/1405 SAS/SATA HBA (Stanislaw Gruszka) [584757]
  - [netdrv] ath5k: fix setup for CAB queue (Stanislaw Gruszka) [584757]
  - [netdrv] ath5k: dont use external sleep clock in AP mode (Stanislaw Gruszka) [584757]
  - [netdrv] tg3: Fix tg3_poll_controller() passing wrong pointer to tg3_interrupt() (Stanislaw Gruszka) [584757]
  - [netdrv] b43/b43legacy: Wake queues in wireless_core_start (Stanislaw Gruszka) [580067]
  - [netdrv] ath5k: use correct packet type when transmitting (Stanislaw Gruszka) [580067]
  - [netdrv] ath9k: disable RIFS search for AR91xx based chips (Stanislaw Gruszka) [580067]
  - [netdrv] ath9k: fix rate control fallback rate selection (Stanislaw Gruszka) [580067]
  - [netdrv] ath9k: fix beacon timer restart after a card reset (Stanislaw Gruszka) [580067]
  - [netdrv] p54usb: Add the USB ID for Belkin (Accton) FD7050E ver 1010ec (Stanislaw Gruszka) [580067]
  - [netdrv] rndis_wlan: disable stall workaround (Stanislaw Gruszka) [580067]
  - [netdrv] rndis_wlan: fix buffer overflow in rndis_query_oid (Stanislaw Gruszka) [580067]
  - [netdrv] rndis_wlan: handle NL80211_AUTHTYPE_AUTOMATIC (Stanislaw Gruszka) [580067]
  - [netdrv] sky2: fix transmit DMA map leakage (Stanislaw Gruszka) [580067]
  - [netdrv] airo: fix setting zero length WEP key (Stanislaw Gruszka) [580067]
  - [netdrv] mac80211: quit addba_resp_timer if Tx BA session is torn down (Stanislaw Gruszka) [580067]
  - [netdrv] iwlwifi: sanity check before counting number of tfds can be free (Stanislaw Gruszka) [580067]
  - [netdrv] iwlwifi: set HT flags after channel in rxon (Stanislaw Gruszka) [580067]
  - [netdrv] iwlwifi: error checking for number of tfds in queue (Stanislaw Gruszka) [580067]
  - [netdrv] iwlwifi: Fix to set correct ht configuration (Stanislaw Gruszka) [580065]
  - [netdrv] mac80211: Fix probe request filtering in IBSS mode (Stanislaw Gruszka) [580065]
  - [netdrv] ath9k: Fix sequence numbers for PAE frames (Stanislaw Gruszka) [580065]
  - [netdrv] b43: Fix throughput regression (Stanislaw Gruszka) [580065]
  - [netdrv] rtl8187: Add new device ID (Stanislaw Gruszka) [580065]
  - [ata] ahci: add Acer G725 to broken suspend list (Stanislaw Gruszka) [580065]
  - [scsi] mptfusion: mptscsih_abort return value should be SUCCESS instead of value 0 (Stanislaw Gruszka) [580065]
  - [nfs] Fix an Oops when truncating a file (Stanislaw Gruszka) [580065]
  - [block] cciss: Make cciss_seq_show handle holes in the h->drv[] array (Stanislaw Gruszka) [580065]
  - [netdrv] ath9k: fix eeprom INI values override for 2GHz-only cards (Stanislaw Gruszka) [580064]
  - [netdrv] mac80211: fix NULL pointer dereference when ftrace is enabled (Stanislaw Gruszka) [580064]
  - [block] fix bugs in bio-integrity mempool usage (Stanislaw Gruszka) [580064]
  - [netdrv] sky2: Fix oops in sky2_xmit_frame() after TX timeout (Stanislaw Gruszka) [580064]
  - [netdrv] iwlwifi: set default aggregation frame count limit to 31 (Stanislaw Gruszka) [580064]
  - [netdrv] e1000/e1000e: don't use small hardware rx buffers (Stanislaw Gruszka) [580064]
  - [netdrv] e1000: enhance frame fragment detection (Stanislaw Gruszka) [580064]
  - [mm] rmap: anon_vma_prepare() can leak anon_vma_chain (Rik van Riel) [579936]
  - [mm] rmap: add exclusively owned pages to the newest anon_vma (Rik van Riel) [579936]
  - [mm] anonvma: when setting up page->mapping, we need to pick the _oldest_ anonvma (Rik van Riel) [579936]
  - [mm] anon_vma: clone the anon_vma chain in the right order (Rik van Riel) [579936]
  - [mm] vma_adjust: fix the copying of anon_vma chains (Rik van Riel) [579936]
  - [mm] Simplify and comment on anon_vma re-use for anon_vma_prepare() (Rik van Riel) [579936]
  - [mm] rmap: fix anon_vma_fork() memory leak (Rik van Riel) [579936]
  - [s390x] nss: add missing .previous statement to asm function (Hendrik Brueckner) [581521]
  - [ata] pata_mavell: correct check of AHCI config option (David Milburn) [584483]
  - [fs] ext4: Issue the discard operation before releasing the blocks (Eric Sandeen) [575884]
  - [scsi] 3w_sas: new driver (Tomas Henzl) [572781]
  - [kernel] hrtimer: Tune hrtimer_interrupt hang logic (Marcelo Tosatti) [576355]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-22.el6]
changelog:
  - [netdrv] b43: ssb: do not read SPROM if it does not exist (John Linville) [574895]
  - [netdrv] igb: add support for Intel I350 Gigabit Network Connection (Stefan Assmann) [580727]
  - [kernel] exec: refactor how usermodehelpers work and modify core_pipe recursion check (Neil Horman) [557387]
  - [kernel] re-export page_is_ram() for crash module (Prarit Bhargava) [583032]
  - [x86] amd_iommu: allow iommu to complete dma transactions during transition to kdump kernel (Neil Horman) [577788]
  - [nfs] rsize and wsize settings ignored on v4 mounts (Steve Dickson) [582697]
  - [net] igmp: fix ip_mc_sf_allow race (Flavio Leitner) [578932]
  - [net] Remove skb_dma_map/unmap calls from drivers (Thomas Graf) [576690]
  - [scsi] mpt2sas: IOs needs to be pause until handles are refreshed for all device after recovery (Tomas Henzl) [577909]
  - [scsi] mpt2sas: Reworked scmd->result priority for _scsih_qcmd (Tomas Henzl) [577909]
  - [x86] Suppress stack overrun message for init_task (Prarit Bhargava) [582625]
  - [sunrpc] gss_krb5: Advertise rc4-hmac enctype support in the rpcsec_gss/krb5 upcall (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Add support for rc4-hmac encryption (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Use confounder length in wrap code (Steve Dickson) [498317]
  - [sunrpc] gssd_krb5: More arcfour-hmac support (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Save the raw session key in the context (Steve Dickson) [498317]
  - [sunrpc] gssd_krb5: arcfour-hmac support (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Advertise AES enctype support in the rpcsec_gss/krb5 upcall (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: add remaining pieces to enable AES encryption support (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: add support for new token formats in rfc4121 (Steve Dickson) [498317]
  - [sunrpc] xdr: Add an export for the helper function write_bytes_to_xdr_buf() (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Advertise triple-des enctype support in the rpcsec_gss/krb5 upcall (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: add support for triple-des encryption (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Add upcall info indicating supported kerberos enctypes (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: handle new context format from gssd (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: import functionality to derive keys into the kernel (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: add ability to have a keyed checksum (hmac) (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: introduce encryption type framework (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: prepare for new context format (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: split up functions in preparation of adding new enctypes (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Don't expect blocksize to always be 8 when calculating padding (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Added and improved code comments (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Introduce encryption type framework (Steve Dickson) [498317]
  - [mm] Fix vfree race resulting in kernel bug (Steven Whitehouse) [582522]
  - [ata] libata: fix accesses at LBA28 boundary (David Milburn) [582432]
  - [netdrv] b43: Rewrite DMA Tx status handling sanity checks (John Linville) [574533]
  - [char] tty: release_one_tty() forgets to put pids (Oleg Nesterov) [582077] {CVE-2010-1162}
  - [mm] oom: fix the unsafe usage of badness() in proc_oom_score() (Oleg Nesterov) [582069]
  - [netdrv] bonding: fix broken multicast with round-robin mode (Andy Gospodarek) [581644]
  - [x86] Remove sysfs_attr_init, sysfs_bin_attr_init changes introduced in last MCE patch (Prarit Bhargava) [581659]
  - [kernel] sched_getaffinity: allow less than NR_CPUS length (Oleg Nesterov) [578970]
  - [scsi] bfa sync w/ upstream (Rob Evers) [576716]
  - [gfs] GFS2: Fix ordering of ordered buffers (Steven Whitehouse) [581011]
  - [gfs] GFS2: Don't withdraw on partial rindex entries (Robert S Peterson) [581009]
  - [gfs] GFS2: livelock while reclaiming unlinked dinodes (Robert S Peterson) [570182]
  - [scsi] mpt2sas: Do not reset handle before calling _scsih_remove_device in RESCAN task after HBA RESET (Tomas Henzl) [572646]
  - [scsi] mpt2sas: Device removal algorithm in interrupt ctx (Tomas Henzl) [572646]
  - [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [572646]
  - [scsi] Upgrading version to 04.100.01.02 (Tomas Henzl) [572646]
  - [scsi] mpt2sas: modified _scsih_sas_device_find_by_handle/sas_address (Tomas Henzl) [572646]
  - [scsi] mpt2sas: RESCAN Barrier work is added in case of HBA reset (Tomas Henzl) [572646]
  - [scsi] update the version to 04.100.01.00 (Tomas Henzl) [572646]
  - [scsi] scsi_transport_sas: add support for transport layer retries (TLR) (Tomas Henzl) [572646]
  - [scsi] mpt2sas: Added raid transport support (Tomas Henzl) [572646]
  - [scsi] eliminate potential kmalloc failure in scsi_get_vpd_page() (Tomas Henzl) [572646]
  - [ata] libata: fix ata_id_logical_per_physical_sectors (David Milburn) [582021]
  - [netdrv] iwlwifi: Fix throughput stall issue in HT mode for 5000 (Stanislaw Gruszka) [580063]
  - [infiniband] IPoIB: Clear ipoib_neigh.dgid in ipoib_neigh_alloc() (Stanislaw Gruszka) [580063]
  - [net] cfg80211: fix channel setting for wext (Stanislaw Gruszka) [580063]
  - [net] mac80211: check that ieee80211_set_power_mgmt only handles STA interfaces (Stanislaw Gruszka) [580063]
  - [ata] ata_piix: fix MWDMA handling on PIIX3 (Stanislaw Gruszka) [580063]
  - [ata] ahci: disable SNotification capability for ich8 (Stanislaw Gruszka) [580063]
  - [netdrv] ar9170: Add support for D-Link DWA 160 A2 (Stanislaw Gruszka) [580063]
  - [netdrv] sfc: Fix DMA mapping cleanup in case of an error in TSO (Stanislaw Gruszka) [580063]
  - [fs] ext4: don't call write_inode under the journal (Josef Bacik) [576202]
  - [fs] ext4: Calculate metadata requirements more accurately (Josef Bacik) [576202]
  - [fs] ext4: Patch up how we claim metadata blocks for quota purposes (Josef Bacik) [576202]
  - [fs] ext4: fix potential quota deadlock (Josef Bacik) [576202]
  - [virt] virtio: console: Add support for nonblocking write()s (Amit Shah) [576241]
  - [virt] virtio: console: Rename wait_is_over() to will_read_block() (Amit Shah) [576241]
  - [virt] virtio: console: Don't always create a port 0 if using multiport (Amit Shah) [576241]
  - [virt] virtio: console: Use a control message to add ports (Amit Shah) [576241]
  - [virt] virtio: console: Move code around for future patches (Amit Shah) [576241]
  - [virt] virtio: console: Remove config work handler (Amit Shah) [576241]
  - [virt] virtio: console: Don't call hvc_remove() on unplugging console ports (Amit Shah) [576241]
  - [virt] virtio: console: Return -EPIPE to hvc_console if we lost the connection (Amit Shah) [576241]
  - [virt] virtio: console: Let host know of port or device add failures (Amit Shah) [576241]
  - [virt] virtio: console: Add a __send_control_msg() that can send messages without a valid port (Amit Shah) [576241]
  - [virt] hvc_console: Fix race between hvc_close and hvc_remove (Amit Shah) [577222]
  - [virt] virtio: console makes incorrect assumption about virtio API (Amit Shah) [576241]
  - [virt] MAINTAINERS: Put the virtio-console entry in correct alphabetical order (Amit Shah) [576241]
  - [virt] virtio: console: Fix early_put_chars usage (Amit Shah) [576241]
  - [virt] virtio: console: Check if port is valid in resize_console (Amit Shah) [576241]
  - [virt] virtio: console: Generate a kobject CHANGE event on adding 'name' attribute (Amit Shah) [576241]
  - [virt] virtio: console: Use better variable names for fill_queue operation (Amit Shah) [576241]
  - [virt] virtio: console: Fix type of 'len' as unsigned int (Amit Shah) [576241]
  - [vfs] rename block_fsync() to blkdev_fsync() (Jeff Moyer) [579781]
  - [char] raw: add an fsync method (Jeff Moyer) [579781]
  - [x86] Don't use logical-flat mode when more than 8 CPUs are possible (John Villalovos) [563798]
  - [net] Backport the new socket API recvmmsg, receive multiple messages (Arnaldo Carvalho de Melo) [579850]
  - [kernel] coredump: fix the page leak in dump_seek() (Oleg Nesterov) [580126]
  - [s390x] callhome: fix broken proc interface and activate comp ID (Hendrik Brueckner) [579482]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-21.el6]
changelog:
  - [x86] Update x86 MCE code (Prarit Bhargava) [580587]
  - [scsi] 3w-xxxx: Force 60 second timeout default (Tomas Henzl) [572778]
  - [netdrv] enic: update to upstream version 1.3.1.1 (Andy Gospodarek) [575950]
  - [netdrv] igb: Add support for 82576 ET2 Quad Port Server Adapter (Stefan Assmann) [577421]
  - [kernel] resource: Fix generic page_is_ram() for partial RAM pages (Prarit Bhargava) [578834]
  - [x86] Use the generic page_is_ram() (Prarit Bhargava) [578834]
  - [x86] Remove BIOS data range from e820 (Prarit Bhargava) [578834]
  - [kernel] Move page_is_ram() declaration to mm.h (Prarit Bhargava) [578834]
  - [kernel] Generic page_is_ram: use __weak (Prarit Bhargava) [578834]
  - [kernel] resources: introduce generic page_is_ram() (Prarit Bhargava) [578834]
  - [fs] GFS2: Clean up copying from stuffed files (Steven Whitehouse) [580857]
  - [netdrv] igb: restrict WoL for 82576 ET2 Quad Port Server Adapter (Stefan Assmann) [578804]
  - [drm] radeon/kms: move radeon KMS on/off switch out of staging (Dave Airlie) [580766]
  - [netdrv] p54: fix deadlocks under tx load (Michal Schmidt) [580557]
  - [gfs2] GFS2: Mandatory locking fix (Steven Whitehouse) [571606] {CVE-2010-0727}
  - [x86] AMD: Fix NULL pointer dereference on 32-bit (Bhavna Sarathy) [571474]
  - [x86] Add wbinvd SMP helper routines (Bhavna Sarathy) [571474]
  - [x86] L3 cache: Remove NUMA dependency (Bhavna Sarathy) [571474]
  - [x86] Calculate L3 indices (Bhavna Sarathy) [571474]
  - [x86] Add cache index disable sys attributes (Bhavna Sarathy) [571474]
  - [x86] Fix disabling of L3 cache indices (Bhavna Sarathy) [571474]
  - [fs] NFS: Avoid a deadlock in nfs_release_page (Jeff Layton) [525963]
  - [fs] NFS: Remove requirement for inode->i_mutex from nfs_invalidate_mapping (Jeff Layton) [525963]
  - [fs] NFS: Clean up nfs_sync_mapping (Jeff Layton) [525963]
  - [fs] NFS: Simplify nfs_wb_page() (Jeff Layton) [525963]
  - [fs] NFS: Replace __nfs_write_mapping with sync_inode() (Jeff Layton) [525963]
  - [fs] NFS: Simplify nfs_wb_page_cancel() (Jeff Layton) [525963]
  - [fs] NFS: Ensure inode is always marked I_DIRTY_DATASYNC, if it has unstable pages (Jeff Layton) [525963]
  - [fs] NFS: Run COMMIT as an asynchronous RPC call when wbc->for_background is set (Jeff Layton) [525963]
  - [fs] NFS: Reduce the number of unnecessary COMMIT calls (Jeff Layton) [525963]
  - [fs] NFS: Add a count of the number of unstable writes carried by an inode (Jeff Layton) [525963]
  - [fs] NFS: Cleanup - move nfs_write_inode() into fs/nfs/write.c (Jeff Layton) [525963]
  - [fs] writeback: pass writeback_control to ->write_inode (Jeff Layton) [525963]
  - [fs] writeback: make sure data is on disk before calling ->write_inode (Jeff Layton) [525963]
  - [fs] writeback: introduce wbc.for_background (Jeff Layton) [525963]
  - [netdrv] macvlan: fix support for multiple driver backends (Anthony Liguori) [553337 566731]
  - [netdrv] net/macvtap: add vhost support (Anthony Liguori) [553337 566731]
  - [netdrv] macvtap: add GSO/csum offload support (Anthony Liguori) [553337 566731]
  - [netdrv] macvtap: rework object lifetime rules (Anthony Liguori) [553337 566731]
  - [netdrv] macvtap: fix reference counting (Anthony Liguori) [553337 566731]
  - [netdrv] net: macvtap driver (Anthony Liguori) [553337 566731]
  - [netdrv] macvlan: export macvlan mode through netlink (Anthony Liguori) [553337 566731]
  - [netdrv] macvlan: implement bridge, VEPA and private mode (Anthony Liguori) [553337 566731]
  - [netdrv] macvlan: cleanup rx statistics (Anthony Liguori) [553337 566731]
  - [netdrv] macvlan: Precise RX stats accounting (Anthony Liguori) [553337 566731]
  - [netdrv] macvlan: add private dev_txq_stats_fold function (Anthony Liguori) [553337 566731]
  - [netdrv] veth: move loopback logic to common location (Anthony Liguori) [553337 566731]
  - [s390x] zfcp: Remove lock dependency on unit remove (Hendrik Brueckner) [576860]
  - [s390x] zfcp: Remove lock dependency on unit add (Hendrik Brueckner) [576860]
  - [s390x] zfcp: Remove lock dependency on CCW remove (Hendrik Brueckner) [576860]
  - [s390x] dasd: fix alignment of transport mode recovery TCW (Hendrik Brueckner) [575824]
  - [s390x] cio: fix drvdata usage for the console subchannel (Hendrik Brueckner) [575826]
  - [s390x] zcore: CPU registers are not saved under LPAR (Hendrik Brueckner) [575221]
  - [s390x] zfcpdump: Use direct IO in order to increase dump speed (Hendrik Brueckner) [575189]
  - [s390x] qeth: change checksumming default for HiperSockets (Hendrik Brueckner) [572227]
  - [s390x] qeth: l3 send dhcp in non pass thru mode (Hendrik Brueckner) [572225]
  - [s390x] zfcp: Remove attached ports and units correctly (Hendrik Brueckner) [571938]
  - [drm] Bring in nouveau updates from upstream (Ben Skeggs) [558468]
  - [vfs] pass struct file to do_truncate on O_TRUNC opens (Jeff Layton) [573995]
  - [vfs] O_TRUNC open shouldn't fail after file truncation (Jeff Layton) [573995]
  - [net] netfilter: ctnetlink: compute message size properly (Jiri Pirko) [578476]
  - [block] cfq-iosched: Do not merge queues of BE and IDLE classes (Jeff Moyer) [577393]
  - [block] remove 16 bytes of padding from struct request on 64bits (Jeff Moyer) [577393]
  - [block] cfq: remove 8 bytes of padding from cfq_rb_root on 64 bit builds (Jeff Moyer) [577393]
  - [block] cfq-iosched: quantum check tweak (Jeff Moyer) [577393]
  - [block] remove padding from io_context on 64bit builds (Jeff Moyer) [577393]
  - [block] cfq: reorder cfq_queue removing padding on 64bit (Jeff Moyer) [577393]
  - [block] cfq-iosched: split seeky coop queues after one slice (Jeff Moyer) [577393]
  - [x86] edac, mce: Filter out invalid values (Bhavna Sarathy) [574487]
  - [x86] edac, mce, amd: silence GART TLB errors (Bhavna Sarathy) [574487]
  - [x86] edac, mce: correct corenum reporting (Bhavna Sarathy) [574487]
  - [x86] edac, mce: update AMD F10h revD check (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: Simplify ECC override handling (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: Do not falsely trigger kerneloops (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: Ensure index stays within bounds in amd64_get_scrub_rate (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: restrict PCI config space access (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: fix K8 chip select reporting (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: bump driver version (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: fix use-uninitialised bug (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: correct sys address to chip select mapping (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: add a leaner syndrome decoding algorithm (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: remove early hw support check (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: detect DDR3 memory type (Bhavna Sarathy) [574487]
  - [x86] edac: add memory types strings for debugging (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: remove unneeded extract_error_address wrapper (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: rename StinkyIdentifier (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: remove superfluous dbg printk (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: enhance address to DRAM bank mapping (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: cleanup f10_early_channel_count (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: dump DIMM sizes on K8 too (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: cleanup rest of amd64_dump_misc_regs (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: cleanup DRAM cfg low debug output (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: wrap-up pci config read error handling (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: make DRAM regions output more human-readable (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: clarify DRAM CTL debug reporting (Bhavna Sarathy) [574487]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-20.el6]
changelog:
  - [netdrv] iwlwifi: fix kdump hang (Stanislaw Gruszka) [575122]
  - [kernel] clockevent: Don't remove broadcast device when cpu is dead (Danny Feng) [572438]
  - [block] Export max number of segments and max segment size in sysfs (Jeff Moyer) [574132]
  - [block] Finalize conversion of block limits functions (Jeff Moyer) [574132]
  - [block] Fix overrun in lcm() and move it to lib (Jeff Moyer) [574132]
  - [block] jiffies fixes (Jeff Moyer) [574132]
  - [block] Consolidate phys_segment and hw_segment limits (Jeff Moyer) [574132]
  - [block] Rename blk_queue_max_sectors to blk_queue_max_hw_sectors (Jeff Moyer) [574132]
  - [block] Add BLK_ prefix to definitions (Jeff Moyer) [574132]
  - [block] Remove unused accessor function (Jeff Moyer) [574132]
  - [block] Update blk_queue_max_sectors and documentation (Jeff Moyer) [574132]
  - [ata] ahci: Turn off DMA engines when there's no device attached (Matthew Garrett) [577967]
  - [scsi] qla2xxx: minor updates and fixes from upstream (Rob Evers) [574526]
  - [scsi] Additional BSG corrections from upstream (Rob Evers) [574590]
  - [netdrv] be2net: Update be2net 10GB NIC driver to version 2.102.147u (Ivan Vecera) [576172]
  - [scsi] update fibre channel layer (Mike Christie) [571824]
  - [scsi] lpfc Update from 8.3.5.6 to 8.3.5.7 FC/FCoE (Rob Evers) [576174]
  - [netdrv] e100: fix the 'size' argument passed to pci_pool_create() (Dean Nelson) [576887]
  - [kernel] futex: remove rw parameter from get_futex_key() (Amerigo Wang) [555700]
  - [drm] Add drm_gem_object_handle_unreference_unlocked and drm_gem_object_unreference_unlocked (Adam Jackson) [575910]
  - [drm] i915: Update to 2.6.34-rc1 (pre-vga-switcheroo) (Adam Jackson) [575910]
  - [scsi] libfcoe: Send port LKA every FIP_VN_KA_PERIOD secs (Rob Evers) [570693]
  - [scsi] fnic: updating driver to 1.4.0.98 syncs w/ upstream (Rob Evers) [570693]
  - [sound] snd-hda-intel: avoid divide by zero (Jaroslav Kysela) [567173] {CVE-2010-1085}
  - [netdrv] bnx2x: use new firmware (Stanislaw Gruszka) [560993]
  - [netdrv] bnx2: remove old firmware (Stanislaw Gruszka) [560993]
  - [netdrv] bnx2x: 1.52.1-6 firmware (Stanislaw Gruszka) [560993]
  - [netdrv] bnx2x: 1.52.1-6 bug fixes (Stanislaw Gruszka) [560993]
  - [ata] ahci: support FIS-based switching (David Milburn) [463152]
  - [drm] radeon: better GPU reset for lockup (Jerome Glisse) [576511]
  - [block] cciss: add 30 second initial timeout wait on controller reset (Tomas Henzl) [574094]
  - [serial] fix hang in serial console open (Neil Horman) [568418]
  - [virt] vmw_pvscsi: adding vmware paravirtualized driver (Rob Evers) [553062]
  - [scsi] 3w-9xxx: update 3w-9xxx to v2.26.02.014RH (Tomas Henzl) [572779]
  - [netdrv] ixgbevf: initial support for 82599VF driver (Andy Gospodarek) [462790]
  - [netdrv] ixgbe: update to version 2.0.62-k2 (Andy Gospodarek) [462790]
  - [netdrv] netxen: More critical bug fixes and AER support (Tony Camuso) [516840]
  - [netdrv] netxen: Sync with upstream kernel bug fixes (Tony Camuso) [516840]
  - [fs] dlm: use bastmode in debugfs output (David Teigland) [568102]
  - [fs] dlm: send reply before bast (David Teigland) [568102]
  - [fs] dlm: fix ordering of bast and cast (David Teigland) [568102]
  - [virt] virtio-net: remove send queue (Anthony Liguori) [555698]
  - [virt] virtio-net: Defer skb allocation and remove recv queue (Anthony Liguori) [555698]
  - [net] bridge: Allow enable/disable UFO on bridge device via ethtool (Anthony Liguori) [555537]
  - [net] Make UFO on master device independent of attached devices (Anthony Liguori) [555537]
  - [fs] xfs: fix locking for inode cache radix tree tag updates (Christoph Hellwig) [573836]
  - [uv] fix microcode.ctl slow down in boot-time on large systems (George Beshers) [573018]
  - [scsi] lpfc Update from 8.3.5.5 to 8.3.5.6 FC/FCoE (Rob Evers) [568889]
  - [mm] transparent hugepage support update (Andrea Arcangeli) [556572]
  - [netdrv] e1000e: fix data corruptor in NFS packet split filtering hw (Neil Horman) [572350]
  - [security] selinux: dynamic class/perm discovery (Eric Paris) [570812]
  - [security] selinux/ss: correct size computation (Eric Paris) [573000]
  - [security] SELinux: reduce size of access vector hash table (Eric Paris) [570433]
  - [security] SELinux: reset the security_ops before flushing the avc cache (Eric Paris) [572998]
  - [sched] Fix sched_mc_power_savings for !SMT (Danny Feng) [571879]
  - [security] selinux: Only audit permissions specified in policy (Eric Paris) [573002]
  - [security] selinux: fix memory leak in sel_make_bools (Eric Paris) [573008]
  - [security] SELinux: Make selinux_kernel_create_files_as() shouldn't just always return 0 (Eric Paris) [573011]
  - [security] selinux: convert range transition list to a hashtab (Eric Paris) [572702]
  - [virt] x86: remove kmap_atomic_pte paravirt op (Paolo Bonzini) [567203]
  - [virt] vmi: disable highmem PTE allocation even when CONFIG_HIGHPTE=y (Paolo Bonzini) [567203]
  - [virt] xen: disable highmem PTE allocation even when CONFIG_HIGHPTE=y (Paolo Bonzini) [567203]
  - [virt] x86: allow allocation of highmem user page tables to be disabled when CONFIG_HIGHPTE=y (Paolo Bonzini) [567203]
  - [netdrv] qlge: update to latest upstream (Andy Gospodarek) [562311]
  - [netdrv] add netif_printk helpers (Andy Gospodarek) [562311]
  - [net] bridge: Fix build error when IGMP_SNOOPING is not enabled (Herbert Xu) [574321]
  - [net] bridge: Add multicast count/interval sysfs entries (Herbert Xu) [574321]
  - [net] bridge: Add hash elasticity/max sysfs entries (Herbert Xu) [574321]
  - [net] bridge: Add multicast_snooping sysfs toggle (Herbert Xu) [574321]
  - [net] bridge: Add multicast_router sysfs entries (Herbert Xu) [574321]
  - [net] bridge: Add multicast data-path hooks (Herbert Xu) [574321]
  - [net] bridge: Add multicast start/stop hooks (Herbert Xu) [574321]
  - [net] bridge: Add multicast forwarding functions (Herbert Xu) [574321]
  - [net] bridge: Move NULL mdb check into br_mdb_ip_get (Herbert Xu) [574321]
  - [net] bridge: ensure to unlock in error path in br_multicast_query() (Herbert Xu) [574321]
  - [net] bridge: Fix RCU race in br_multicast_stop (Herbert Xu) [574321]
  - [net] bridge: Use RCU list primitive in __br_mdb_ip_get (Herbert Xu) [574321]
  - [net] bridge: cleanup: remove unneed check (Herbert Xu) [574321]
  - [net] bridge: depends on INET (Herbert Xu) [574321]
  - [net] bridge: Make IGMP snooping depend upon BRIDGE. (Herbert Xu) [574321]
  - [net] bridge: Add core IGMP snooping support (Herbert Xu) [574321]
  - [net] bridge: Fix br_forward crash in promiscuous mode (Herbert Xu) [574321]
  - [net] bridge: Split may_deliver/deliver_clone out of br_flood (Herbert Xu) [574321]
  - [net] bridge: Use BR_INPUT_SKB_CB on xmit path (Herbert Xu) [574321]
  - [net] bridge: Avoid unnecessary clone on forward path (Herbert Xu) [574321]
  - [net] bridge: Allow tail-call on br_pass_frame_up (Herbert Xu) [574321]
  - [net] bridge: Do br_pass_frame_up after other ports (Herbert Xu) [574321]
  - [net] Add netdev_alloc_skb_ip_align() helper (Herbert Xu) [574321]
  - [kernel] futex_lock_pi() key refcnt fix (Danny Feng) [566347] {CVE-2010-0623}
  - [pci] AER: fix aer inject result in kernel oops (Prarit Bhargava) [568515]
  - [scsi] fix 32bit compatibility in BSG interface (Rob Evers) [554538]
  - [x86] ACPI: don't cond_resched if irq is disabled (Danny Feng) [572441]
  - [x86] Ensure dell-laptop buffers are below 4GB (Matthew Garrett) [570036]
  - [hwmon] add hex '0x' indication to coretemp module output (Dean Nelson) [571865]
  - [cifs] update cifs client code to latest upstream code (Jeff Layton) [562788]
  - [block] fix merge_bvec_fn return value checks (Mike Snitzer) [571455]
  - [fs] ext4: avoid uninit mem references on some mount options (Eric Sandeen) [562008]
  - [s390x] dasd: Correct offline processing (Hendrik Brueckner) [568376]
  - [s390x] dasd: Fix refcounting (Hendrik Brueckner) [568376]
  - [x86] amd_iommu: remove dma-ops warning message (Bhavna Sarathy) [560002]
  - [x86] amd_iommu: Fix IO page fault by adding device notifiers (Bhavna Sarathy) [560002]
  - [x86] amd_iommu: Fix IOMMU API initialization for iommu=pt (Bhavna Sarathy) [560002]
  - [x86] amd_iommu: Fix possible integer overflow (Bhavna Sarathy) [560002]
  - [x86] amd_iommu: Fix deassignment of a device from the pt domain (Bhavna Sarathy) [560002]
  - [gfs2] Allow the number of committed revokes to temporarily be negative (Benjamin Marzinski) [563907]
  - [ppc64] powerpc: export data from new hcall H_EM_GET_PARMS (Steve Best) [570019]
  - [x86] ACPI: Be in TS_POLLING state during mwait based C-state entry (Avi Kivity) [571440]
  - [net] tcp: fix ICMP-RTO war (Jiri Olsa) [567532]
  - [mm] Add padding to mm structures allow future patches during the RHEL6 life (Larry Woodman) [554511]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-18.el6]
changelog:
  - [kernel/time] revert cc2f92ad1d0e03fe527e8ccfc1f918c368964dc8 (Aristeu Rozanski) [567551]
  - [virt] hvc_console: Fix race between hvc_close and hvc_remove (Amit Shah) [568624]
  - [scsi] Add netapp to scsi dh alua dev list (Mike Christie) [559586]
  - [scsi] scsi_dh_emc: fix mode select setup (Mike Christie) [570685]
  - [drm] Remove loop in IronLake graphics interrupt handler (John Villalovos) [557838]
  - [x86] Intel Cougar Point chipset support (John Villalovos) [560077]
  - [vhost] vhost-net: restart tx poll on sk_sndbuf full (Michael S. Tsirkin) [562837]
  - [vhost] fix get_user_pages_fast error handling (Michael S. Tsirkin) [562837]
  - [vhost] initialize log eventfd context pointer (Michael S. Tsirkin) [562837]
  - [vhost] logging thinko fix (Michael S. Tsirkin) [562837]
  - [vhost] vhost-net: switch to smp barriers (Michael S. Tsirkin) [562837]
  - [net] bug fix for vlan + gro issue (Andy Gospodarek) [569922]
  - [uv] Fix unmap_vma() bug related to mmu_notifiers (George Beshers) [253033]
  - [uv] Have mmu_notifiers use SRCU so they may safely schedule (George Beshers) [253033]
  - [drm] radeon/kms: bring all v2.6.33 fixes into EL6 kernel (Dave Airlie) [547422 554323 566618 569704]
  - [dvb] Fix endless loop when decoding ULE at dvb-core (Mauro Carvalho Chehab) [569243]
  - [kernel] sched: Fix SCHED_MC regression caused by change in sched cpu_power (Danny Feng) [568123]
  - [s390x] vdso: glibc does not use vdso functions (Hendrik Brueckner) [567755]
  - [drm] bring drm core/ttm/fb layer fixes in from upstream (Dave Airlie) [569701]
  - [kernel] Fix SMT scheduler regression in find_busiest_queue() (Danny Feng) [568120]
  - [s390x] qeth: avoid recovery during device online setting (Hendrik Brueckner) [568781]
  - [mm] Fix potential crash with sys_move_pages (Danny Feng) [562591] {CVE-2010-0415}
  - [scsi] pmcraid: bug fixes from upstream (Rob Evers) [567376]
  - [scsi] lpfc Update from 8.3.5.4 to 8.3.5.5 FC/FCoE (Rob Evers) [564508]
  - [ata] ahci: disable FPDMA auto-activate optimization on NVIDIA AHCI (David Milburn) [568815]
  - [selinux] netlabel: fix corruption of SELinux MLS categories > 127 (Eric Paris) [568370]
  - [gfs2] print glock numbers in hex (Robert S Peterson) [566755]
  - [mm] Fix hugetlb.c clear_huge_page parameter (Andrea Arcangeli) [566604]
  - [mm] fix anon_vma locking updates for transparent hugepage code (Andrea Arcangeli) [564515]
  - [netdrv] cxgb3: add memory barriers (Steve Best) [568390]
  - [dm] raid45 target: constructor error path oops fix (Heinz Mauelshagen) [567605]
  - [scsi] mpt2sas: fix missing initialization (Tomas Henzl) [567965]
  - [net] netfilter: nf_conntrack: per netns nf_conntrack_cachep (Jiri Pirko) [567181]
  - [x86] nmi_watchdog: use __cpuinit for nmi_watchdog_default (Don Zickus) [567601]
  - [netdrv] ixgbe: prevent speculative processing of descriptors (Steve Best) [568391]
  - [kvm] Fix emulate_sys[call, enter, exit]()'s fault handling (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] Fix segment descriptor loading (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] Fix load_guest_segment_descriptor() to inject page fault (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Forbid modifying CS segment register by mov instruction (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Fix x86_emulate_insn() not to use the variable rc for non-X86EMUL values (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: X86EMUL macro replacements: x86_emulate_insn() and its helpers (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: X86EMUL macro replacements: from do_fetch_insn_byte() to x86_decode_insn() (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] inject #UD in 64bit mode from instruction that are not valid there (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Fix properties of instructions in group 1_82 (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: code style cleanup (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Add LOCK prefix validity checking (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Check CPL level during privilege instruction emulation (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Fix popf emulation (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Check IOPL level during io instruction emulation (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: fix memory access during x86 emulation (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Add Virtual-8086 mode of emulation (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Add group9 instruction decoding (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Add group8 instruction decoding (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Introduce No64 decode option (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Add 'push/pop sreg' instructions (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [x86] AES/PCLMUL Instruction support: Various fixes for AES-NI and PCLMMUL (John Villalovos) [463496]
  - [x86] AES/PCLMUL Instruction support: Use gas macro for AES-NI instructions (John Villalovos) [463496]
  - [x86] AES/PCLMUL Instruction support: Various small fixes for AES/PCMLMUL and generate .byte code for some new instructions via gas macro (John Villalovos) [463496]
  - [x86] AES/PCLMUL Instruction support: Add PCLMULQDQ accelerated implementation (John Villalovos) [463496]
  - [scsi] megaraid_sas: fix for 32bit apps (Tomas Henzl) [559941]
  - [kvm] fix large packet drops on kvm hosts with ipv6 (Neil Horman) [565525]
  - [kvm] Add MAINTAINERS entry for virtio_console (Amit Shah) [566391]
  - [kvm] virtio: console: Fill ports' entire in_vq with buffers (Amit Shah) [566391]
  - [kvm] virtio: console: Error out if we can't allocate buffers for control queue (Amit Shah) [566391]
  - [kvm] virtio: console: Add ability to remove module (Amit Shah) [566391]
  - [kvm] virtio: console: Ensure no memleaks in case of unused buffers (Amit Shah) [566391]
  - [kvm] virtio: console: update Red Hat copyright for 2010 (Amit Shah) [566391]
  - [kvm] virtio: Initialize vq->data entries to NULL (Amit Shah) [566391]
  - [kvm] virtio: console: outbufs are no longer needed (Amit Shah) [566391]
  - [kvm] virtio: console: return -efault for fill_readbuf if copy_to_user fails (Amit Shah) [566391]
  - [kvm] virtio: console: Allow sending variable-sized buffers to host, efault on copy_from_user err (Amit Shah) [566391]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-17.el6]
changelog:
  - [s390] hvc_iucv: allocate IUCV send/receive buffers in DMA zone (Hendrik Brueckner) [566188]
  - [s390] qdio: continue polling for buffer state ERROR (Hendrik Brueckner) [565528]
  - [s390] qdio: prevent kernel bug message in interrupt handler (Hendrik Brueckner) [565542]
  - [s390] zfcp: report BSG errors in correct field (Hendrik Brueckner) [564378]
  - [s390] zfcp: cancel all pending work for a to be removed zfcp_port (Hendrik Brueckner) [564382]
  - [nfs] mount.nfs: Unknown error 526 (Steve Dickson) [561975]
  - [x86] x86-64, rwsem: Avoid store forwarding hazard in __downgrade_write (Avi Kivity) [563801]
  - [x86] x86-64, rwsem: 64-bit xadd rwsem implementation (Avi Kivity) [563801]
  - [x86] x86-64: support native xadd rwsem implementation (Avi Kivity) [563801]
  - [x86] clean up rwsem type system (Avi Kivity) [563801]
  - [x86] x86-32: clean up rwsem inline asm statements (Avi Kivity) [563801]
  - [x86] nmi_watchdog: enable by default on RHEL-6 (Don Zickus) [523857]
  - [block] freeze_bdev: don't deactivate successfully frozen MS_RDONLY sb (Mike Snitzer) [565890]
  - [block] fix bio_add_page for non trivial merge_bvec_fn case (Mike Snitzer) [565890]
  - [watchdog] Add support for iTCO watchdog on Ibex Peak chipset (John Villalovos) [536698]
  - [kernel] time: Remove xtime_cache (Prarit Bhargava) [563135]
  - [kernel] time: Implement logarithmic time accumalation (Prarit Bhargava) [563135]
  - [dm] raid1: fail writes if errors are not handled and log fails (Mike Snitzer) [565890]
  - [dm] mpath: fix stall when requeueing io (Mike Snitzer) [565890]
  - [dm] log: userspace fix overhead_size calcuations (Mike Snitzer) [565890]
  - [dm] stripe: avoid divide by zero with invalid stripe count (Mike Snitzer) [565890]
  - [mm] anon_vma locking updates for transparent hugepage code (Rik van Riel) [564515]
  - [mm] anon_vma linking changes to improve multi-process scalability (Rik van Riel) [564515]
  - [virt] virtio_blk: add block topology support (Christoph Hellwig) [556477]
  - [kvm] PIT: control word is write-only (Eduardo Habkost) [560905] {CVE-2010-0309}
  - [kernel] Prevent futex user corruption to crash the kernel (Jerome Marchand) [563957]
  - [selinux] print the module name when SELinux denies a userspace upcall (Eric Paris) [563731]
  - [gfs] GFS2 problems on single node cluster (Steven Whitehouse) [564329]
  - [ppc] Add kdump support to Collaborative Memory Manager (Steve Best) [563316]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-16.el6]
changelog:
  - [nfs] Remove a redundant check for PageFsCache in nfs_migrate_page() (Steve Dickson) [563938]
  - [nfs] Fix a bug in nfs_fscache_release_page() (Steve Dickson) [563938]
  - [mm] fix BUG()s caused by the transparent hugepage patch (Larry Woodman) [556572]
  - [fs] inotify: fix inotify WARN and compatibility issues (Eric Paris) [563363]
  - [net] do not check CAP_NET_RAW for kernel created sockets (Eric Paris) [540560]
  - [pci] Enablement of PCI ACS control when IOMMU enabled on system (Don Dutile) [523278]
  - [pci] PCI ACS support functions (Don Dutile) [523278]
  - [uv] x86: Fix RTC latency bug by reading replicated cachelines (George Beshers) [562189]
  - [s390x] ctcm / lcs / claw: remove cu3088 layer (Hendrik Brueckner) [557522]
  - [uv] vgaarb: add user selectability of the number of gpus in a system (George Beshers) [555879]
  - [gpu] vgaarb: fix vga arbiter to accept PCI domains other than 0 (George Beshers) [555879]
  - [uv] x86_64: update uv arch to target legacy VGA I/O correctly (George Beshers) [555879]
  - [pci] update pci_set_vga_state to call arch functions (George Beshers) [555879]
  - [uv] PCI: update pci_set_vga_state to call arch functions (George Beshers) [555879]
  - [mm] remove madvise(MADV_HUGEPAGE) (Andrea Arcangeli) [556572]
  - [mm] hugepage redhat customization (Andrea Arcangeli) [556572]
  - [mm] introduce khugepaged (Andrea Arcangeli) [556572]
  - [mm] transparent hugepage vmstat (Andrea Arcangeli) [556572]
  - [mm] memcg huge memory (Andrea Arcangeli) [556572]
  - [mm] memcg compound (Andrea Arcangeli) [556572]
  - [mm] pmd_trans_huge migrate bugcheck (Andrea Arcangeli) [556572]
  - [mm] madvise(MADV_HUGEPAGE) (Andrea Arcangeli) [556572]
  - [mm] verify pmd_trans_huge isnt leaking (Andrea Arcangeli) [556572]
  - [mm] transparent hugepage core (Andrea Arcangeli) [556572]
  - [mm] dont alloc harder for gfp nomemalloc even if nowait (Andrea Arcangeli) [556572]
  - [mm] introduce _GFP_NO_KSWAPD (Andrea Arcangeli) [556572]
  - [mm] backport page_referenced microoptimization (Andrea Arcangeli) [556572]
  - [mm] kvm mmu transparent hugepage support (Andrea Arcangeli) [556572]
  - [mm] clear_copy_huge_page (Andrea Arcangeli) [556572]
  - [mm] clear_huge_page fix (Andrea Arcangeli) [556572]
  - [mm] split_huge_page paging (Andrea Arcangeli) [556572]
  - [mm] split_huge_page_mm/vma (Andrea Arcangeli) [556572]
  - [mm] add pmd_huge_pte to mm_struct (Andrea Arcangeli) [556572]
  - [mm] clear page compound (Andrea Arcangeli) [556572]
  - [mm] add pmd mmu_notifier helpers (Andrea Arcangeli) [556572]
  - [mm] pte alloc trans splitting (Andrea Arcangeli) [556572]
  - [mm] bail out gup_fast on splitting pmd (Andrea Arcangeli) [556572]
  - [mm] add pmd mangling functions to x86 (Andrea Arcangeli) [556572]
  - [mm] add pmd mangling generic functions (Andrea Arcangeli) [556572]
  - [mm] special pmd_trans_* functions (Andrea Arcangeli) [556572]
  - [mm] config_transparent_hugepage (Andrea Arcangeli) [556572]
  - [mm] comment reminder in destroy_compound_page (Andrea Arcangeli) [556572]
  - [mm] export maybe_mkwrite (Andrea Arcangeli) [556572]
  - [mm] no paravirt version of pmd ops (Andrea Arcangeli) [556572]
  - [mm] add pmd paravirt ops (Andrea Arcangeli) [556572]
  - [mm] add native_set_pmd_at (Andrea Arcangeli) [556572]
  - [mm] clear compound mapping (Andrea Arcangeli) [556572]
  - [mm] update futex compound knowledge (Andrea Arcangeli) [556572]
  - [mm] alter compound get_page/put_page (Andrea Arcangeli) [556572]
  - [mm] add a compound_lock (Andrea Arcangeli) [556572]
  - [mm] define MADV_HUGEPAGE (Andrea Arcangeli) [556572]
  - [oprofile] Support Nehalem-EX CPU in Oprofile (John Villalovos) [528998]
  - [nfs] nfs: handle NFSv3 -EKEYEXPIRED errors as we would -EJUKEBOX (Jeff Layton) [479359]
  - [nfs] handle NFSv2 -EKEYEXPIRED returns from RPC layer appropriately (Jeff Layton) [479359]
  - [nfs] sunrpc: parse and return errors reported by gssd (Jeff Layton) [479359]
  - [nfs] nfs4: handle -EKEYEXPIRED errors from RPC layer (Jeff Layton) [479359]
  - [net] nf_conntrack: fix memory corruption (Jon Masters) [559471]
  - [kvm] emulate accessed bit for EPT (Rik van Riel) [555106]
  - [vhost] fix TUN=m VHOST_NET=y (Michael S. Tsirkin) [562837]
  - [vhost] vhost-net: defer f->private_data until setup succeeds (Chris Wright) [562837]
  - [vhost] vhost-net: comment use of invalid fd when setting vhost backend (Chris Wright) [562837]
  - [vhost] access check thinko fixes (Michael S. Tsirkin) [562837]
  - [vhost] make default mapping empty by default (Michael S. Tsirkin) [562837]
  - [vhost] add access_ok checks (Michael S. Tsirkin) [562837]
  - [vhost] prevent modification of an active ring (Michael S. Tsirkin) [562837]
  - [vhost] fix high 32 bit in FEATURES ioctls (Michael S. Tsirkin) [562837]
  - [dm] dm-raid1: fix deadlock at suspending failed device (Takahiro Yasui) [557932]
  - [dm] fix kernel panic at releasing bio on recovery failed region (Takahiro Yasui) [557934]
  - [scsi] lpfc Update from 8.3.4 to 8.3.5.4 FC/FCoE (Rob Evers) [531028]
  - [nfs] sunrpc/cache: fix module refcnt leak in a failure path (Steve Dickson) [562285]
  - [nfs] Ensure that we handle NFS4ERR_STALE_STATEID correctly (Steve Dickson) [560784]
  - [nfs] NFSv4.1: Don't call nfs4_schedule_state_recovery() unnecessarily (Steve Dickson) [560784]
  - [nfs] NFSv4: Don't allow posix locking against servers that don't support it (Steve Dickson) [560784]
  - [nfs] Ensure that the NFSv4 locking can recover from stateid errors (Steve Dickson) [560784]
  - [nfs] Avoid warnings when CONFIG_NFS_V4=n (Steve Dickson) [560784]
  - [nfs] Make nfs_commitdata_release static (Steve Dickson) [560784]
  - [nfs] Try to commit unstable writes in nfs_release_page() (Steve Dickson) [560784]
  - [nfs] Fix a reference leak in nfs_wb_cancel_page() (Steve Dickson) [560784]
  - [nfs] nfs41: cleanup callback code to use __be32 type (Steve Dickson) [560785]
  - [nfs] nfs41: clear NFS4CLNT_RECALL_SLOT bit on session reset (Steve Dickson) [560785]
  - [nfs] nfs41: fix nfs4_callback_recallslot (Steve Dickson) [560785]
  - [nfs] nfs41: resize slot table in reset (Steve Dickson) [560785]
  - [nfs] nfs41: implement cb_recall_slot (Steve Dickson) [560785]
  - [nfs] nfs41: back channel drc minimal implementation (Steve Dickson) [560785]
  - [nfs] nfs41: prepare for back channel drc (Steve Dickson) [560785]
  - [nfs] nfs41: remove uneeded checks in callback processing (Steve Dickson) [560785]
  - [nfs] nfs41: directly encode back channel error (Steve Dickson) [560785]
  - [nfs] nfs41: fix wrong error on callback header xdr overflow (Steve Dickson) [560785]
  - [nfs] nfs41: Process callback's referring call list (Steve Dickson) [560785]
  - [nfs] nfs41: Check slot table for referring calls (Steve Dickson) [560785]
  - [nfs] nfs41: Adjust max cache response size value (Steve Dickson) [560785]
  - [nfs] NFSD: Create PF_INET6 listener in write_ports (Steve Dickson) [560785]
  - [nfs] SUNRPC: NFS kernel APIs shouldn't return ENOENT for "transport not found" (Steve Dickson) [560785]
  - [nfs] SUNRPC: Bury "#ifdef IPV6" in svc_create_xprt() (Steve Dickson) [560785]
  - [nfs] NFSD: Support AF_INET6 in svc_addsock() function (Steve Dickson) [560785]
  - [nfs] SUNRPC: Use rpc_pton() in ip_map_parse() (Steve Dickson) [560785]
  - [nfs] nfsd: 4.1 has an rfc number (Steve Dickson) [560785]
  - [nfs] nfsd41: Create the recovery entry for the NFSv4.1 client (Steve Dickson) [560785]
  - [nfs] nfsd: use vfs_fsync for non-directories (Steve Dickson) [560785]
  - [nfs] nfsd4: Use FIRST_NFS4_OP in nfsd4_decode_compound() (Steve Dickson) [560785]
  - [nfs] nfsd41: nfsd4_decode_compound() does not recognize all ops (Steve Dickson) [560785]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-15.el6]
changelog:
  - [block] blk-cgroup: Fix lockdep warning of potential deadlock in blk-cgroup (Vivek Goyal) [561903]
  - [block] cfq: Do not idle on async queues and drive deeper WRITE depths (Vivek Goyal) [561902]
  - [quota] 64-bit quota format fixes (Jerome Marchand) [546311]
  - [x86] fix Add AMD Node ID MSR support (Bhavna Sarathy) [557540]
  - [fs] ext4: fix type of "offset" in ext4_io_end (Eric Sandeen) [560097]
  - [x86] Disable HPET MSI on ATI SB700/SB800 (Prarit Bhargava) [557332]
  - [x86] arch specific support for remapping HPET MSIs (Prarit Bhargava) [557332]
  - [x86] intr-remap: generic support for remapping HPET MSIs (Prarit Bhargava) [557332]
  - [gfs] GFS2: Extend umount wait coverage to full glock lifetime (Steven Whitehouse) [561287]
  - [gfs] GFS2: Wait for unlock completion on umount (Steven Whitehouse) [561287]
  - [gfs] GFS2: Use MAX_LFS_FILESIZE for meta inode size (Steven Whitehouse) [561307]
  - [gfs] GFS2: Use GFP_NOFS for alloc structure (Steven Whitehouse) [561307]
  - [gfs] GFS2: Fix refcnt leak on gfs2_follow_link() error path (Steven Whitehouse) [561307]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-14.el6]
changelog:
  - [s390x] dasd: fix online/offline race (Hendrik Brueckner) [552840]
  - [netdrv] update tg3 to version 3.106 and fix panic (John Feeney) [555101]
  - [s390x] dasd: Fix null pointer in s390dbf and discipline checking (Hendrik Brueckner) [559615]
  - [s390x] zcrypt: Do not remove coprocessor in case of error 8/72 (Hendrik Brueckner) [559613]
  - [s390x] cio: channel path vary operation has no effect (Hendrik Brueckner) [559612]
  - [uv] x86: Ensure hub revision set for all ACPI modes (George Beshers) [559752]
  - [uv] x86: Add function retrieving node controller revision number (George Beshers) [559752]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-13.el6]
changelog:
  - [virtio] console: show error message if hvc_alloc fails for console ports (Amit Shah) [543824]
  - [virtio] console: Add debugfs files for each port to expose debug info (Amit Shah) [543824]
  - [virtio] console: Add ability to hot-unplug ports (Amit Shah) [543824]
  - [virtio] hvc_console: Export (GPL'ed) hvc_remove (Amit Shah) [543824]
  - [virtio] Add ability to detach unused buffers from vrings (Amit Shah) [543824]
  - [virtio] console: Handle port hot-plug (Amit Shah) [543824]
  - [virtio] console: Remove cached data on port close (Amit Shah) [543824]
  - [virtio] console: Register with sysfs and create a 'name' attribute for ports (Amit Shah) [543824]
  - [virtio] console: Ensure only one process can have a port open at a time (Amit Shah) [543824]
  - [virtio] console: Add file operations to ports for open/read/write/poll (Amit Shah) [543824]
  - [virtio] console: Associate each port with a char device (Amit Shah) [543824]
  - [virtio] console: Prepare for writing to / reading from userspace buffers (Amit Shah) [543824]
  - [virtio] console: Add a new MULTIPORT feature, support for generic ports (Amit Shah) [543824]
  - [virtio] console: Introduce a send_buf function for a common path for sending data to host (Amit Shah) [543824]
  - [virtio] console: Introduce function to hand off data from host to readers (Amit Shah) [543824]
  - [virtio] console: Separate out find_vqs operation into a different function (Amit Shah) [543824]
  - [virtio] console: Separate out console init into a new function (Amit Shah) [543824]
  - [virtio] console: Separate out console-specific data into a separate struct (Amit Shah) [543824]
  - [virtio] console: ensure console size is updated on hvc open (Amit Shah) [543824]
  - [virtio] console: struct ports for multiple ports per device. (Amit Shah) [543824]
  - [virtio] console: remove global var (Amit Shah) [543824]
  - [virtio] console: don't assume a single console port. (Amit Shah) [543824]
  - [virtio] console: use vdev->priv to avoid accessing global var. (Amit Shah) [543824]
  - [virtio] console: introduce a get_inbuf helper to fetch bufs from in_vq (Amit Shah) [543824]
  - [virtio] console: ensure add_inbuf can work for multiple ports as well (Amit Shah) [543824]
  - [virtio] console: encapsulate buffer information in a struct (Amit Shah) [543824]
  - [virtio] console: port encapsulation (Amit Shah) [543824]
  - [virtio] console: We support only one device at a time (Amit Shah) [543824]
  - [virtio] hvc_console: Remove __devinit annotation from hvc_alloc (Amit Shah) [543824]
  - [virtio] hvc_console: make the ops pointer const. (Amit Shah) [543824]
  - [virtio] console: statically initialize virtio_cons (Amit Shah) [543824]
  - [virtio] console: comment cleanup (Amit Shah) [543824]
  - [x86] Fix crash when profiling more than 28 events (Bhavna Sarathy) [557570]
  - [x86] Add AMD Node ID MSR support (Bhavna Sarathy) [557540]
  - [kvm] fix spurious interrupt with irqfd (Marcelo Tosatti) [559343]
  - [kvm] eventfd: allow atomic read and waitqueue remove (Marcelo Tosatti) [559343]
  - [kvm] properly check max PIC pin in irq route setup (Marcelo Tosatti) [559343]
  - [kvm] only allow one gsi per fd (Marcelo Tosatti) [559343]
  - [kvm] x86: Fix leak of free lapic date in kvm_arch_vcpu_init() (Marcelo Tosatti) [559343]
  - [kvm] x86: Fix probable memory leak of vcpu->arch.mce_banks (Marcelo Tosatti) [559343]
  - [kvm] MMU: bail out pagewalk on kvm_read_guest error (Marcelo Tosatti) [559343]
  - [kvm] x86: Fix host_mapping_level() (Marcelo Tosatti) [559343]
  - [kvm] Fix race between APIC TMR and IRR (Marcelo Tosatti) [559343]
  - [x86] acpi: Export acpi_pci_irq_{add|del}_prt() (James Paradis) [553781]
  - [kdump] backport upstream ppc64 kcrctab fixes (Neil Horman) [558803]
  - [mm] Memory tracking for Stratus (James Paradis) [512400]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-12.el6]
changelog:
  - [drm] radeon possible security issue (Jerome Glisse) [556692]
  - [mm] Memory tracking for Stratus (James Paradis) [512400]
  - [pci] Always set prefetchable base/limit upper32 registers (Prarit Bhargava) [553471]
  - [scsi] Sync be2iscsi with upstream (Mike Christie) [515256]
  - [x86] msr/cpuid: Register enough minors for the MSR and CPUID drivers (George Beshers) [557554]
  - [x86] Remove unnecessary mdelay() from cpu_disable_common() (Peter Bogdanovic) [463633]
  - [x86] ioapic: Document another case when level irq is seen as an edge (Peter Bogdanovic) [463633]
  - [x86] ioapic: Fix the EOI register detection mechanism (Peter Bogdanovic) [463633]
  - [x86] io-apic: Move the effort of clearing remoteIRR explicitly before migrating the irq (Peter Bogdanovic) [463633]
  - [x86] Remove local_irq_enable()/local_irq_disable() in fixup_irqs() (Peter Bogdanovic) [463633]
  - [x86] Use EOI register in io-apic on intel platforms (Peter Bogdanovic) [463633]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-11.el6]
changelog:
  - [kdump] Remove the 32MB limitation for crashkernel (Steve Best) [529270]
  - [dm] dm-raid45: export missing dm_rh_inc (Heinz Mauelshagen) [552329]
  - [block] dm-raid45: add raid45 target (Heinz Mauelshagen) [552329]
  - [block] dm-replicator: blockdev site link handler (Heinz Mauelshagen) [552364]
  - [block] dm-replicator: ringbuffer replication log handler (Heinz Mauelshagen) [552364]
  - [block] dm-replicator: replication log and site link handler interfaces and main replicator module (Heinz Mauelshagen) [552364]
  - [block] dm-replicator: documentation and module registry (Heinz Mauelshagen) [552364]
  - [s390x] qeth: set default BLKT settings dependend on OSA hw level (Hendrik Brueckner) [557474]
  - [drm] bring RHEL6 radeon drm up to 2.6.33-rc4/5 level (Jerome Glisse) [557539]
  - [netdrv] e1000e: enhance frame fragment detection (Andy Gospodarek) [462780]
  - [stable] ipv6: skb_dst() can be NULL in ipv6_hop_jumbo(). (David S. Miller) [555084]
  - [stable] module: handle ppc64 relocating kcrctabs when CONFIG_RELOCATABLE=y (Rusty Russell) [555084]
  - [stable] fix more leaks in audit_tree.c tag_chunk() (Al Viro) [555084]
  - [stable] fix braindamage in audit_tree.c untag_chunk() (Al Viro) [555084]
  - [stable] mac80211: fix skb buffering issue (and fixes to that) (Johannes Berg) [555084]
  - [stable] kernel/sysctl.c: fix stable merge error in NOMMU mmap_min_addr (Mike Frysinger) [555084]
  - [stable] libertas: Remove carrier signaling from the scan code (Samuel Ortiz) [555084]
  - [stable] mac80211: add missing sanity checks for action frames (Felix Fietkau) [555084]
  - [stable] iwl: off by one bug (Dan Carpenter) [555084]
  - [stable] cfg80211: fix syntax error on user regulatory hints (Luis R. Rodriguez) [555084]
  - [stable] ath5k: Fix eeprom checksum check for custom sized eeproms (Luis R. Rodriguez) [555084]
  - [stable] iwlwifi: fix iwl_queue_used bug when read_ptr == write_ptr (Zhu Yi) [555084]
  - [stable] xen: fix hang on suspend. (Ian Campbell) [555084]
  - [stable] quota: Fix dquot_transfer for filesystems different from ext4 (Jan Kara) [555084]
  - [stable] hwmon: (adt7462) Fix pin 28 monitoring (Roger Blofeld) [555084]
  - [stable] hwmon: (coretemp) Fix TjMax for Atom N450/D410/D510 CPUs (Yong Wang) [555084]
  - [stable] netfilter: nf_ct_ftp: fix out of bounds read in update_nl_seq() (Patrick McHardy) [555084]
  - [stable] netfilter: ebtables: enforce CAP_NET_ADMIN (Florian Westphal) [555084]
  - [stable] ASoC: Fix WM8350 DSP mode B configuration (Mark Brown) [555084]
  - [stable] ALSA: atiixp: Specify codec for Foxconn RC4107MA-RS2 (Daniel T Chen) [555084]
  - [stable] ALSA: ac97: Add Dell Dimension 2400 to Headphone/Line Jack Sense blacklist (Daniel T Chen) [555084]
  - [stable] mmc_block: fix queue cleanup (Adrian Hunter) [555084]
  - [stable] mmc_block: fix probe error cleanup bug (Jarkko Lavinen) [555084]
  - [stable] mmc_block: add dev_t initialization check (Anna Lemehova) [555084]
  - [stable] kernel/signal.c: fix kernel information leak with print-fatal-signals=1 (Andi Kleen) [555084]
  - [stable] dma-debug: allow DMA_BIDIRECTIONAL mappings to be synced with DMA_FROM_DEVICE and (Krzysztof Halasa) [555084]
  - [stable] lib/rational.c needs module.h (Sascha Hauer) [555084]
  - [stable] drivers/cpuidle/governors/menu.c: fix undefined reference to `__udivdi3' (Stephen Hemminger) [555084]
  - [stable] rtc_cmos: convert shutdown to new pnp_driver->shutdown (OGAWA Hirofumi) [555084]
  - [stable] Revert "x86: Side-step lguest problem by only building cmpxchg8b_emu for pre-Pentium" (Rusty Russell) [555084]
  - [stable] exofs: simple_write_end does not mark_inode_dirty (Boaz Harrosh) [555084]
  - [stable] modules: Skip empty sections when exporting section notes (Ben Hutchings) [555084]
  - [stable] ASoC: fix params_rate() macro use in several codecs (Guennadi Liakhovetski) [555084]
  - [stable] fasync: split 'fasync_helper()' into separate add/remove functions (Linus Torvalds) [555084]
  - [stable] untangle the do_mremap() mess (Al Viro)


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-10.el6]
changelog:
  - [mm] mmap: don't return ENOMEM when mapcount is temporarily exceeded in munmap() (Danny Feng) [557000]
  - [netdrv] vxge: fix issues found in Neterion testing (Michal Schmidt) [493985]
  - [x86] Force irq complete move during cpu offline (Prarit Bhargava) [541815]
  - [sound] Fix SPDIF-In for AD1988 codecs + add Intel Cougar IDs (Jaroslav Kysela) [557473]
  - [scsi] aic79xx: check for non-NULL scb in ahd_handle_nonpkt_busfree (Tomas Henzl) [557753]
  - [s390x] fix loading of PER control registers for utrace. (CAI Qian) [556410]
  - [s390x] ptrace: dont abuse PT_PTRACED (CAI Qian) [552102]
  - [perf] Remove the "event" callback from perf events (Jason Baron) [525517]
  - [perf] Use overflow handler instead of the event callback (Jason Baron) [525517]
  - [perf] Fix locking for PERF_FORMAT_GROUP (Jason Baron) [525517]
  - [perf] Fix event scaling for inherited counters (Jason Baron) [525517]
  - [perf] Fix PERF_FORMAT_GROUP scale info (Jason Baron) [525517]
  - [perf] Allow for custom overflow handlers (Jason Baron) [525517]
  - [perf] Add a callback to perf events (Jason Baron) [525517]
  - [perf] improve error reporting (Jason Baron) [525517]
  - [perf] add kernel internal interface (Jason Baron) [525517]
  - [utrace] fix utrace_maybe_reap() vs find_matching_engine() race (Oleg Nesterov) [557338]
  - [x86] Disable Memory hot add on x86 32-bit (Prarit Bhargava) [557131]
  - [netdrv] e1000e: update to the latest upstream (Andy Gospodarek) [462780]
  - [gfs] Use dquot_send_warning() (Steven Whitehouse) [557057]
  - [gfs] Add quota netlink support (Steven Whitehouse) [557057]
  - [netdrv] qlge: update to upstream version v1.00.00.23.00.00-01 (Andy Gospodarek) [553357]
  - [s390x] zfcp: set HW timeout requested by BSG request (Hendrik Brueckner) [556918]
  - [s390x] zfcp: introduce BSG timeout callback (Hendrik Brueckner) [556918]
  - [scsi] scsi_transport_fc: Allow LLD to reset FC BSG timeout (Hendrik Brueckner) [556918]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-9.el6]
changelog:
  - [kvm] fix cleanup_srcu_struct on vm destruction (Marcelo Tosatti) [554762]
  - [x86] core: make LIST_POISON less deadly (Avi Kivity) [554640]
  - [x86] dell-wmi: Add support for new Dell systems (Matthew Garrett) [525548]
  - [fs] xfs: 2.6.33 updates (Eric Sandeen) [554891]
  - [x86] Add kernel pagefault tracepoint for x86 & x86_64. (Larry Woodman) [526032]
  - [pci] PCIe AER: honor ACPI HEST FIRMWARE FIRST mode (Matthew Garrett) [537205]
  - [block] direct-io: cleanup blockdev_direct_IO locking (Eric Sandeen) [556547]
  - [tracing] tracepoint: Add signal tracepoints (Masami Hiramatsu) [526030]
  - [cgroups] fix for "kernel BUG at kernel/cgroup.c:790" (Dave Anderson) [547815]
  - [irq] Expose the irq_desc node as /proc/irq/*/node (George Beshers) [555866]
  - [scsi] qla2xxx - Update support for FC/FCoE HBA/CNA (Rob Evers) [553854]
  - [scsi] bfa update from 2.1.2.0 to 2.1.2.1 (Rob Evers) [475704]
  - [nfs] sunrpc: fix build-time warning (Steve Dickson) [437715]
  - [nfs] sunrpc: on successful gss error pipe write, don't return error (Steve Dickson) [437715]
  - [nfs] SUNRPC: Fix the return value in gss_import_sec_context() (Steve Dickson) [437715]
  - [nfs] SUNRPC: Fix up an error return value in gss_import_sec_context_kerberos() (Steve Dickson) [437715]
  - [nfs] sunrpc: fix peername failed on closed listener (Steve Dickson) [437715]
  - [nfs] nfsd: make sure data is on disk before calling ->fsync (Steve Dickson) [437715]
  - [uv] React 2.6.32.y: isolcpus broken in 2.6.32.y kernel (George Beshers) [548842]
  - [gru] GRU Rollup patch (George Beshers) [546680]
  - [uv] XPC: pass nasid instead of nid to gru_create_message_queue (George Beshers) [546695]
  - [uv] x86: XPC receive message reuse triggers invalid BUG_ON (George Beshers) [546695]
  - [uv] x86: xpc_make_first_contact hang due to not accepting ACTIVE state (George Beshers) [546695]
  - [uv] x86: xpc NULL deref when mesq becomes empty (George Beshers) [546695]
  - [uv] x86: update XPC to handle updated BIOS interface (George Beshers) [546695]
  - [uv] xpc needs to provide an abstraction for uv_gpa (George Beshers) [546695]
  - [uv] x86, irq: Check move_in_progress before freeing the vector mapping (George Beshers) [546668]
  - [uv] x86: Remove move_cleanup_count from irq_cfg (George Beshers) [546668]
  - [uv] x86, irq: Allow 0xff for /proc/irq/[n]/smp_affinity on an 8-cpu system (George Beshers) [546668]
  - [uv] x86, apic: Move SGI UV functionality out of generic IO-APIC code (George Beshers) [546668]
  - [uv] x86 SGI: Fix irq affinity for hub based interrupts (George Beshers) [546668]
  - [uv] x86 RTC: Always enable RTC clocksource (George Beshers) [546668]
  - [uv] x86 RTC: Rename generic_interrupt to x86_platform_ipi (George Beshers) [546668]
  - [uv] x86, mm: Correct the implementation of is_untracked_pat_range() (George Beshers) [548524]
  - [uv] x86: Change is_ISA_range() into an inline function (George Beshers) [548524]
  - [uv] x86, platform: Change is_untracked_pat_range() to bool (George Beshers) [548524]
  - [uv] x86, mm: is_untracked_pat_range() takes a normal semiclosed range (George Beshers) [548524]
  - [uv] x86, mm: Call is_untracked_pat_range() rather than is_ISA_range() (George Beshers) [548524]
  - [uv] x86 SGI: Dont track GRU space in PAT (George Beshers) [548524]
  - [scsi] megaraid: upgrade to 4.17 (Tomas Henzl) [520729]
  - [scsi] mpt2sas: Bump version 03.100.03.00 (Tomas Henzl) [470848]
  - [scsi] mpt2sas: don't update links nor unblock device at no link rate change (Tomas Henzl) [470848]
  - [scsi] mpt2sas: add support for RAID Action System Shutdown Initiated at OS Shutdown (Tomas Henzl) [470848]
  - [scsi] mpt2sas: freeze the sdev IO queue when firmware sends internal device reset (Tomas Henzl) [470848]
  - [scsi] mpt2sas: fix PPC endian bug (Tomas Henzl) [470848]
  - [scsi] mpt2sas: mpt2sas_base_get_sense_buffer_dma returns little endian (Tomas Henzl) [470848]
  - [scsi] mpt2sas: return DID_TRANSPORT_DISRUPTED in nexus loss and SCSI_MLQUEUE_DEVICE_BUSY if device is busy (Tomas Henzl) [470848]
  - [scsi] mpt2sas: retrieve the ioc facts prior to putting the controller into READY state (Tomas Henzl) [470848]
  - [scsi] mpt2sas: add new info messages for IR and Expander events (Tomas Henzl) [470848]
  - [scsi] mpt2sas: limit the max_depth to 32 for SATA devices (Tomas Henzl) [470848]
  - [scsi] mpt2sas: add TimeStamp support when sending ioc_init (Tomas Henzl) [470848]
  - [scsi] mpt2sas: add extended type for diagnostic buffer support (Tomas Henzl) [470848]
  - [scsi] mpt2sas: add command line option diag_buffer_enable (Tomas Henzl) [470848]
  - [scsi] mpt2sas: fix some comments (Tomas Henzl) [470848]
  - [scsi] mpt2sas: stop driver when firmware encounters faults (Tomas Henzl) [470848]
  - [scsi] mpt2sas: adding MPI Headers - revision L (Tomas Henzl) [470848]
  - [scsi] mpt2sas: new device SAS2208 support (Tomas Henzl) [470848]
  - [scsi] mpt2sas: check for valid response info (Tomas Henzl) [470848]
  - [scsi] mpt2sas: fix expander remove fail (Tomas Henzl) [470848]
  - [scsi] mpt2sas: use sas address instead of handle as a lookup (Tomas Henzl) [470848]
  - [sound] ALSA HDA driver update 2009-12-15 (Jaroslav Kysela) [555812]
  - [block] Honor the gfp_mask for alloc_page() in blkdev_issue_discard() (Mike Snitzer) [554719]
  - [scsi] sync fcoe with upstream (Mike Christie) [549945]
  - [net] dccp: modify how dccp creates slab caches to prevent bug halt in SLUB (Neil Horman) [553698]
  - [s390x] tape: Add pr_fmt() macro to all tape source files (Hendrik Brueckner) [554380]
  - [s390] qeth: fix packet loss if TSO is switched on (Hendrik Brueckner) [546632]
  - [s390x] qeth: Support for HiperSockets Network Traffic Analyzer (Hendrik Brueckner) [463706]
  - [serial] 8250: add support for DTR/DSR hardware flow control (Mauro Carvalho Chehab) [523848]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-7.el6]
changelog:
  - [drm] minor printk fixes from upstream (Dave Airlie) [554601]
  - [offb] add support for framebuffer handoff to offb. (Dave Airlie) [554948]
  - [x86] allow fbdev primary video code on 64-bit. (Dave Airlie) [554930]
  - [drm] nouveau: update to 2.6.33 level (Dave Airlie) [549930]
  - [drm] ttm: validation API changes + ERESTART fixes. (Dave Airlie) [554918]
  - [drm] radeon/kms: update to 2.6.33 (without TTM API changes) (Dave Airlie) [554918]
  - [drm] i915: bring Intel DRM/KMS driver up to 2.6.33 (Dave Airlie) [554616]
  - [drm] radeon/intel: realign displayport helper code with upstream. (Dave Airlie) [554601]
  - [drm] kms: rollup KMS core and helper changes to 2.6.33 (Dave Airlie) [554601]
  - [drm] remove address mask param for drm_pci_alloc() (Dave Airlie) [554601]
  - [drm] add new userspace core drm interfaces from 2.6.33 (Dave Airlie) [554601]
  - [drm] unlocked ioctl support for core + macro fixes (Dave Airlie) [554601]
  - [drm] ttm: rollup upstream TTM fixes (Dave Airlie) [554601]
  - [drm] mm: patch drm core memory range manager up to 2.6.33 (Dave Airlie) [554601]
  - [drm] drm/edid: update to 2.6.33 EDID parser code (Dave Airlie) [554601]
  - [net] dccp: fix module load dependency btw dccp_probe and dccp (Neil Horman) [554840]
  - [powerpc] pseries: Correct pseries/dlpar.c build break without CONFIG_SMP (Steve Best) [539318]
  - [powerpc] cpu-allocation/deallocation process (Steve Best) [539318]
  - [powerpc] Add code to online/offline CPUs of a DLPAR node (Steve Best) [539318]
  - [powerpc] CPU DLPAR handling (Steve Best) [539318]
  - [powerpc] sysfs cpu probe/release files (Steve Best) [539318]
  - [powerpc] Kernel handling of Dynamic Logical Partitioning (Steve Best) [539318]
  - [powerpc] pseries: Add hooks to put the CPU into an appropriate offline state (Steve Best) [539318]
  - [powerpc] pseries: Add extended_cede_processor() helper function. (Steve Best) [539318]
  - [gfs] GFS2: Fix glock refcount issues (Steven Whitehouse) [546634]
  - [gfs] GFS2: Ensure uptodate inode size when using O_APPEND (Steven Whitehouse) [547639]
  - [gfs] GFS2: Fix locking bug in rename (Steven Whitehouse) [547640]
  - [gfs] GFS2: Fix lock ordering in gfs2_check_blk_state() (Steven Whitehouse) [554673]
  - [gfs2] only show nobarrier option on /proc/mounts when the option is active (Steven Whitehouse) [546665]
  - [gfs2] add barrier/nobarrier mount options (Steven Whitehouse) [546665]
  - [gfs2] remove division from new statfs code (Steven Whitehouse) [298561]
  - [gfs2] Improve statfs and quota usability (Steven Whitehouse) [298561]
  - [gfs2] Add set_xquota support (Steven Whitehouse) [298561]
  - [gfs2] Add get_xquota support (Steven Whitehouse) [298561]
  - [gfs2] Clean up gfs2_adjust_quota() and do_glock() (Steven Whitehouse) [298561]
  - [gfs2] Remove constant argument from qd_get() (Steven Whitehouse) [298561]
  - [gfs2] Remove constant argument from qdsb_get() (Steven Whitehouse) [298561]
  - [gfs2] Add proper error reporting to quota sync via sysfs (Steven Whitehouse) [298561]
  - [gfs2] Add get_xstate quota function (Steven Whitehouse) [298561]
  - [gfs2] Remove obsolete code in quota.c (Steven Whitehouse) [298561]
  - [gfs2] Hook gfs2_quota_sync into VFS via gfs2_quotactl_ops (Steven Whitehouse) [298561]
  - [gfs2] Alter arguments of gfs2_quota/statfs_sync (Steven Whitehouse) [298561]
  - [gfs2] Fix -o meta mounts for subsequent mounts (Steven Whitehouse) [546664]
  - [gfs] GFS2: Fix gfs2_xattr_acl_chmod() (Steven Whitehouse) [546294]
  - [gfs] VFS: Use GFP_NOFS in posix_acl_from_xattr() (Steven Whitehouse) [546294]
  - [gfs] GFS2: Add cached ACLs support (Steven Whitehouse) [546294]
  - [gfs] GFS2: Clean up ACLs (Steven Whitehouse) [546294]
  - [gfs] GFS2: Use gfs2_set_mode() instead of munge_mode() (Steven Whitehouse) [546294]
  - [gfs] GFS2: Use forget_all_cached_acls() (Steven Whitehouse) [546294]
  - [gfs] VFS: Add forget_all_cached_acls() (Steven Whitehouse) [546294]
  - [gfs] GFS2: Fix up system xattrs (Steven Whitehouse) [546294]
  - [netdrv] igb: Update igb driver to support Barton Hills (Stefan Assmann) [462783]
  - [dm] add feature flags to reduce future kABI impact (Mike Snitzer) [547756]
  - [block] Stop using byte offsets (Mike Snitzer) [554718]
  - [dm] Fix device mapper topology stacking (Mike Snitzer) [554718]
  - [block] bdev_stack_limits wrapper (Mike Snitzer) [554718]
  - [block] Fix discard alignment calculation and printing (Mike Snitzer) [554718]
  - [block] Correct handling of bottom device misaligment (Mike Snitzer) [554718]
  - [block] Fix incorrect alignment offset reporting and update documentation (Mike Snitzer) [554718]
  - [kvm] Fix possible circular locking in kvm_vm_ioctl_assign_device() (Marcelo Tosatti) [554762]
  - [kvm] only clear irq_source_id if irqchip is present (Marcelo Tosatti) [554762]
  - [kvm] fix lock imbalance in kvm_*_irq_source_id() (Marcelo Tosatti) [554762]
  - [kvm] VMX: Report unexpected simultaneous exceptions as internal errors (Marcelo Tosatti) [554762]
  - [kvm] Allow internal errors reported to userspace to carry extra data (Marcelo Tosatti) [554762]
  - [kvm] x86: disable paravirt mmu reporting (Marcelo Tosatti) [554762]
  - [kvm] x86: disallow KVM_{SET, GET}_LAPIC without allocated in-kernel lapic (Marcelo Tosatti) [554762]
  - [kvm] x86: disallow multiple KVM_CREATE_IRQCHIP (Marcelo Tosatti) [554762]
  - [kvm] VMX: Disable unrestricted guest when EPT disabled (Marcelo Tosatti) [554762]
  - [kvm] SVM: remove needless mmap_sem acquision from nested_svm_map (Marcelo Tosatti) [554762]
  - [kvm] SVM: Notify nested hypervisor of lost event injections (Marcelo Tosatti) [554762]
  - [kvm] SVM: Move INTR vmexit out of atomic code (Marcelo Tosatti) [554762]
  - [kvm] remove pre_task_link setting in save_state_to_tss16 (Marcelo Tosatti) [554762]
  - [kvm] x86: Extend KVM_SET_VCPU_EVENTS with selective updates (Marcelo Tosatti) [554500]
  - [kvm] x86: Add KVM_GET/SET_VCPU_EVENTS (Marcelo Tosatti) [554500]
  - [kvm] fix kvmclock-adjust-offset ioctl to match upstream (Marcelo Tosatti) [554524]
  - [kvm] SVM: init_vmcb(): remove redundant save->cr0 initialization (Marcelo Tosatti) [554506]
  - [kvm] SVM: Reset cr0 properly on vcpu reset (Marcelo Tosatti) [554506]
  - [kvm] VMX: Use macros instead of hex value on cr0 initialization (Marcelo Tosatti) [554506]
  - [kvm] avoid taking ioapic mutex for non-ioapic EOIs (Marcelo Tosatti) [550809]
  - [kvm] Bump maximum vcpu count to 64 (Marcelo Tosatti) [550809]
  - [kvm] convert slots_lock to a mutex (Marcelo Tosatti) [550809]
  - [kvm] switch vcpu context to use SRCU (Marcelo Tosatti) [550809]
  - [kvm] convert io_bus to SRCU (Marcelo Tosatti) [550809]
  - [kvm] x86: switch kvm_set_memory_alias to SRCU update (Marcelo Tosatti) [550809]
  - [kvm] use SRCU for dirty log (Marcelo Tosatti) [550809]
  - [kvm] introduce kvm->srcu and convert kvm_set_memory_region to SRCU update (Marcelo Tosatti) [550809]
  - [kvm] use gfn_to_pfn_memslot in kvm_iommu_map_pages (Marcelo Tosatti) [550809]
  - [kvm] introduce gfn_to_pfn_memslot (Marcelo Tosatti) [550809]
  - [kvm] split kvm_arch_set_memory_region into prepare and commit (Marcelo Tosatti) [550809]
  - [kvm] modify alias layout in x86s struct kvm_arch (Marcelo Tosatti) [550809]
  - [kvm] modify memslots layout in struct kvm (Marcelo Tosatti) [550809]
  - [kvm] rcu: Enable synchronize_sched_expedited() fastpath (Marcelo Tosatti) [550809]
  - [kvm] rcu: Add synchronize_srcu_expedited() to the documentation (Marcelo Tosatti) [550809]
  - [kvm] rcu: Add synchronize_srcu_expedited() to the rcutorture test suite (Marcelo Tosatti) [550809]
  - [kvm] Add synchronize_srcu_expedited() (Marcelo Tosatti) [550809]
  - [kvm] Drop kvm->irq_lock lock from irq injection path (Marcelo Tosatti) [550809]
  - [kvm] Move IO APIC to its own lock (Marcelo Tosatti) [550809]
  - [kvm] Convert irq notifiers lists to RCU locking (Marcelo Tosatti) [550809]
  - [kvm] Move irq ack notifier list to arch independent code (Marcelo Tosatti) [550809]
  - [kvm] Move irq routing data structure to rcu locking (Marcelo Tosatti) [550809]
  - [kvm] Maintain back mapping from irqchip/pin to gsi (Marcelo Tosatti) [550809]
  - [kvm] Change irq routing table to use gsi indexed array (Marcelo Tosatti) [550809]
  - [kvm] Move irq sharing information to irqchip level (Marcelo Tosatti) [550809]
  - [kvm] Call pic_clear_isr() on pic reset to reuse logic there (Marcelo Tosatti) [550809]
  - [kvm] Dont pass kvm_run arguments (Marcelo Tosatti) [550809]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-6.el6]
changelog:
  - [modsign] Remove Makefile.modpost qualifying message for module sign failure (David Howells) [543529]
  - [nfs] fix oops in nfs_rename() (Jeff Layton) [554337]
  - [x86] AMD: Fix stale cpuid4_info shared_map data in shared_cpu_map cpumasks (Prarit Bhargava) [546610]
  - [s390] kernel: improve code generated by atomic operations (Hendrik Brueckner) [547411]
  - [s390x] tape: incomplete device removal (Hendrik Brueckner) [547415]
  - [netdrv] be2net: update be2net driver to latest upstream (Ivan Vecera) [515262]
  - [x86] mce: fix confusion between bank attributes and mce attributes (hiro muneda) [476606]
  - [tpm] autoload tpm_tis driver (John Feeney) [531891]
  - [stable] generic_permission: MAY_OPEN is not write access (Serge E. Hallyn) [555084]
  - [stable] rt2x00: Disable powersaving for rt61pci and rt2800pci. (Gertjan van Wingerde) [555084]
  - [stable] lguest: fix bug in setting guest GDT entry (Rusty Russell) [555084]
  - [stable] ext4: Update documentation to correct the inode_readahead_blks option name (Fang Wenqi) [555084]
  - [stable] sched: Sched_rt_periodic_timer vs cpu hotplug (Peter Zijlstra) [555084]
  - [stable] amd64_edac: fix forcing module load/unload (Borislav Petkov) [555084]
  - [stable] amd64_edac: make driver loading more robust (Borislav Petkov) [555084]
  - [stable] amd64_edac: fix driver instance freeing (Borislav Petkov) [555084]
  - [stable] x86, msr: msrs_alloc/free for CONFIG_SMP=n (Borislav Petkov) [555084]
  - [stable] x86, msr: Add support for non-contiguous cpumasks (Borislav Petkov) [555084]
  - [stable] amd64_edac: unify MCGCTL ECC switching (Borislav Petkov) [555084]
  - [stable] cpumask: use modern cpumask style in drivers/edac/amd64_edac.c (Rusty Russell) [555084]
  - [stable] x86, msr: Unify rdmsr_on_cpus/wrmsr_on_cpus (Borislav Petkov) [555084]
  - [stable] ext4: fix sleep inside spinlock issue with quota and dealloc (#14739) (Dmitry Monakhov) [555084]
  - [stable] ext4: Convert to generic reserved quota's space management. (Dmitry Monakhov) [555084]
  - [stable] quota: decouple fs reserved space from quota reservation (Dmitry Monakhov) [555084]
  - [stable] Add unlocked version of inode_add_bytes() function (Dmitry Monakhov) [555084]
  - [stable] udf: Try harder when looking for VAT inode (Jan Kara) [555084]
  - [stable] orinoco: fix GFP_KERNEL in orinoco_set_key with interrupts disabled (Andrey Borzenkov) [555084]
  - [stable] drm: disable all the possible outputs/crtcs before entering KMS mode (Zhao Yakui) [555084]
  - [stable] drm/radeon/kms: fix crtc vblank update for r600 (Dave Airlie) [555084]
  - [stable] sched: Fix balance vs hotplug race (Peter Zijlstra) [555084]
  - [stable] Keys: KEYCTL_SESSION_TO_PARENT needs TIF_NOTIFY_RESUME architecture support (Geert Uytterhoeven) [555084]
  - [stable] b43: avoid PPC fault during resume (Larry Finger) [555084]
  - [stable] hwmon: (sht15) Off-by-one error in array index + incorrect constants (Jonathan Cameron) [555084]
  - [stable] netfilter: fix crashes in bridge netfilter caused by fragment jumps (Patrick McHardy) [555084]
  - [stable] ipv6: reassembly: use seperate reassembly queues for conntrack and local delivery (Patrick McHardy) [555084]
  - [stable] e100: Fix broken cbs accounting due to missing memset. (Roger Oksanen) [555084]
  - [stable] memcg: avoid oom-killing innocent task in case of use_hierarchy (Daisuke Nishimura) [555084]
  - [stable] x86/ptrace: make genregs[32]_get/set more robust (Linus Torvalds) [555084]
  - [stable] V4L/DVB (13596): ov511.c typo: lock => unlock (Dan Carpenter) [555084]
  - [stable] kernel/sysctl.c: fix the incomplete part of sysctl_max_map_count-should-be-non-negative.patch (WANG Cong) [555084]
  - [stable] 'sysctl_max_map_count' should be non-negative (Amerigo Wang) [555084]
  - [stable] NOMMU: Optimise away the {dac_,}mmap_min_addr tests (David Howells) [555084]
  - [stable] mac80211: fix race with suspend and dynamic_ps_disable_work (Luis R. Rodriguez) [555084]
  - [stable] iwlwifi: fix 40MHz operation setting on cards that do not allow it (Reinette Chatre) [555084]
  - [stable] iwlwifi: fix more eeprom endian bugs (Johannes Berg) [555084]
  - [stable] iwlwifi: fix EEPROM/OTP reading endian annotations and a bug (Johannes Berg) [555084]
  - [stable] iwl3945: fix panic in iwl3945 driver (Zhu Yi) [555084]
  - [stable] iwl3945: disable power save (Reinette Chatre) [555084]
  - [stable] ath9k_hw: Fix AR_GPIO_INPUT_EN_VAL_BT_PRIORITY_BB and its shift value in 0x4054 (Vasanthakumar Thiagarajan) [555084]
  - [stable] ath9k_hw: Fix possible OOB array indexing in gen_timer_index[] on 64-bit (Vasanthakumar Thiagarajan) [555084]
  - [stable] ath9k: fix suspend by waking device prior to stop (Sujith) [555084]
  - [stable] ath9k: wake hardware during AMPDU TX actions (Luis R. Rodriguez) [555084]
  - [stable] ath9k: fix missed error codes in the tx status check (Felix Fietkau) [555084]
  - [stable] ath9k: Fix TX queue draining (Sujith) [555084]
  - [stable] ath9k: wake hardware for interface IBSS/AP/Mesh removal (Luis R. Rodriguez) [555084]
  - [stable] ath5k: fix SWI calibration interrupt storm (Bob Copeland) [555084]
  - [stable] cfg80211: fix race between deauth and assoc response (Johannes Berg) [555084]
  - [stable] mac80211: Fix IBSS merge (Sujith) [555084]
  - [stable] mac80211: fix WMM AP settings application (Johannes Berg) [555084]
  - [stable] mac80211: fix propagation of failed hardware reconfigurations (Luis R. Rodriguez) [555084]
  - [stable] iwmc3200wifi: fix array out-of-boundary access (Zhu Yi) [555084]
  - [stable] Libertas: fix buffer overflow in lbs_get_essid() (Daniel Mack) [555084]
  - [stable] KVM: LAPIC: make sure IRR bitmap is scanned after vm load (Marcelo Tosatti) [555084]
  - [stable] KVM: MMU: remove prefault from invlpg handler (Marcelo Tosatti) [555084]
  - [stable] ioat2,3: put channel hardware in known state at init (Dan Williams) [555084]
  - [stable] ioat3: fix p-disabled q-continuation (Dan Williams) [555084]
  - [stable] x86/amd-iommu: Fix initialization failure panic (Joerg Roedel) [555084]
  - [stable] dma-debug: Fix bug causing build warning (Ingo Molnar) [555084]
  - [stable] dma-debug: Do not add notifier when dma debugging is disabled. (Shaun Ruffell) [555084]
  - [stable] dma: at_hdmac: correct incompatible type for argument 1 of 'spin_lock_bh' (Nicolas Ferre) [555084]
  - [stable] md: Fix unfortunate interaction with evms (NeilBrown) [555084]
  - [stable] x86: SGI UV: Fix writes to led registers on remote uv hubs (Mike Travis) [555084]
  - [stable] drivers/net/usb: Correct code taking the size of a pointer (Julia Lawall) [555084]
  - [stable] USB: fix bugs in usb_(de)authorize_device (Alan Stern) [555084]
  - [stable] USB: rename usb_configure_device (Alan Stern) [555084]
  - [stable] Bluetooth: Prevent ill-timed autosuspend in USB driver (Oliver Neukum) [555084]
  - [stable] USB: musb: gadget_ep0: avoid SetupEnd interrupt (Sergei Shtylyov) [555084]
  - [stable] USB: Fix a bug on appledisplay.c regarding signedness (pancho horrillo) [555084]
  - [stable] USB: option: support hi speed for modem Haier CE100 (Donny Kurnia) [555084]
  - [stable] USB: emi62: fix crash when trying to load EMI 6|2 firmware (Clemens Ladisch) [555084]
  - [stable] drm/radeon: fix build on 64-bit with some compilers. (Dave Airlie) [555084]
  - [stable] ASoC: Do not write to invalid registers on the wm9712. (Eric Millbrandt) [555084]
  - [stable] powerpc: Handle VSX alignment faults correctly in little-endian mode (Neil Campbell) [555084]
  - [stable] ACPI: Use the return result of ACPI lid notifier chain correctly (Zhao Yakui) [555084]
  - [stable] ACPI: EC: Fix MSI DMI detection (Alexey Starikovskiy) [555084]
  - [stable] acerhdf: limit modalias matching to supported (Stefan Bader) [555084]
  - [stable] ALSA: hda - Fix missing capsrc_nids for ALC88x (Takashi Iwai) [555084]
  - [stable] sound: sgio2audio/pdaudiocf/usb-audio: initialize PCM buffer (Clemens Ladisch) [555084]
  - [stable] ASoC: wm8974: fix a wrong bit definition (Guennadi Liakhovetski) [555084]
  - [stable] pata_cmd64x: fix overclocking of UDMA0-2 modes (Bartlomiej Zolnierkiewicz) [555084]
  - [stable] pata_hpt3x2n: fix clock turnaround (Sergei Shtylyov) [555084]
  - [stable] clockevents: Prevent clockevent_devices list corruption on cpu hotplug (Thomas Gleixner) [555084]
  - [stable] sched: Select_task_rq_fair() must honour SD_LOAD_BALANCE (Peter Zijlstra) [555084]
  - [stable] x86, cpuid: Add "volatile" to asm in native_cpuid() (Suresh Siddha) [555084]
  - [stable] sched: Fix task_hot() test order (Peter Zijlstra) [555084]
  - [stable] SCSI: fc class: fix fc_transport_init error handling (Mike Christie) [555084]
  - [stable] SCSI: st: fix mdata->page_order handling (FUJITA Tomonori) [555084]
  - [stable] SCSI: qla2xxx: dpc thread can execute before scsi host has been added (Michael Reed) [555084]
  - [stable] SCSI: ipr: fix EEH recovery (Kleber Sacilotto de Souza) [555084]
  - [stable] implement early_io{re,un}map for ia64 (Luck, Tony) [555084]
  - [stable] perf_event: Fix incorrect range check on cpu number (Paul Mackerras) [555084]
  - [stable] netfilter: xtables: document minimal required version (Jan Engelhardt) [555084]
  - [stable] intel-iommu: ignore page table validation in pass through mode (Chris Wright) [555084]
  - [stable] jffs2: Fix long-standing bug with symlink garbage collection. (David Woodhouse) [555084]
  - [stable] ipvs: zero usvc and udest (Simon Horman) [555084]
  - [stable] mm: sigbus instead of abusing oom (Hugh Dickins) [555084]
  - [stable] drm/i915: Fix LVDS stability issue on Ironlake (Zhenyu Wang) [555084]
  - [stable] drm/i915: PineView only has LVDS and CRT ports (Zhenyu Wang) [555084]
  - [stable] drm/i915: Avoid NULL dereference with component_only tv_modes (Chris Wilson) [555084]
  - [stable] x86: Under BIOS control, restore AP's APIC_LVTTHMR to the BSP value (Yong Wang) [555084]
  - [stable] bcm63xx_enet: fix compilation failure after get_stats_count removal (Florian Fainelli) [555084]
  - [stable] V4L/DVB (13116): gspca - ov519: Webcam 041e:4067 added. (Rafal Milecki) [555084]
  - [stable] ext3: Fix data / filesystem corruption when write fails to copy data (Jan Kara) [555084]
  - [stable] net: Fix userspace RTM_NEWLINK notifications. (Eric W. Biederman) [555084]
  - [stable] ACPI: Use the ARB_DISABLE for the CPU which model id is less than 0x0f. (Zhao Yakui) [555084]
  - [stable] vmalloc: conditionalize build of pcpu_get_vm_areas() (Tejun Heo) [555084]
  - [stable] asus-laptop: change light sens default values. (Corentin Chary) [555084]
  - [stable] acerhdf: add new BIOS versions (Peter Feuerer) [555084]
  - [stable] matroxfb: fix problems with display stability (Alan Cox) [555084]
  - [stable] ipw2100: fix rebooting hang with driver loaded (Zhu Yi) [555084]
  - [stable] thinkpad-acpi: preserve rfkill state across suspend/resume (Henrique de Moraes Holschuh) [555084]
  - [stable] thinkpad-acpi: fix default brightness_mode for R50e/R51 (Henrique de Moraes Holschuh) [555084]
  - [stable] memcg: fix memory.memsw.usage_in_bytes for root cgroup (Kirill A. Shutemov) [555084]
  - [stable] mac80211: Fix dynamic power save for scanning. (Vivek Natarajan) [555084]
  - [stable] ath9k: fix tx status reporting (Felix Fietkau) [555084]
  - [stable] tracing: Fix event format export (Johannes Berg) [555084]
  - [stable] b43legacy: avoid PPC fault during resume (Larry Finger) [555084]
  - [stable] sparc: Set UTS_MACHINE correctly. (David S. Miller) [555084]
  - [stable] sparc64: Fix stack debugging IRQ stack regression. (David S. Miller) [555084]
  - [stable] sparc64: Fix overly strict range type matching for PCI devices. (David S. Miller) [555084]
  - [stable] sparc64: Don't specify IRQF_SHARED for LDC interrupts. (David S. Miller) [555084]
  - [stable] b44 WOL setup: one-bit-off stack corruption kernel panic fix (Stanislav Brabec) [555084]
  - [stable] ip_fragment: also adjust skb->truesize for packets not owned by a socket (Patrick McHardy) [555084]
  - [stable] tcp: Stalling connections: Fix timeout calculation routine (Damian Lukowski) [555084]
  - [stable] slc90e66: fix UDMA handling (Bartlomiej Zolnierkiewicz) [555084]
  - [stable] xen: try harder to balloon up under memory pressure. (Ian Campbell) [555084]
  - [stable] Xen balloon: fix totalram_pages counting. (Gianluca Guida) [555084]
  - [stable] xen: explicitly create/destroy stop_machine workqueues outside suspend/resume region. (Ian Campbell) [555084]
  - [stable] xen: use iret for return from 64b kernel to 32b usermode (Jeremy Fitzhardinge) [555084]
  - [stable] xen: don't leak IRQs over suspend/resume. (Ian Campbell) [555084]
  - [stable] xen: improve error handling in do_suspend. (Ian Campbell) [555084]
  - [stable] xen: call clock resume notifier on all CPUs (Ian Campbell) [555084]
  - [stable] xen: register runstate info for boot CPU early (Jeremy Fitzhardinge) [555084]
  - [stable] xen: don't call dpm_resume_noirq() with interrupts disabled. (Jeremy Fitzhardinge) [555084]
  - [stable] xen: register runstate on secondary CPUs (Ian Campbell) [555084]
  - [stable] xen: register timer interrupt with IRQF_TIMER (Ian Campbell) [555084]
  - [stable] xen: correctly restore pfn_to_mfn_list_list after resume (Ian Campbell) [555084]
  - [stable] xen: restore runstate_info even if !have_vcpu_info_placement (Jeremy Fitzhardinge) [555084]
  - [stable] xen: re-register runstate area earlier on resume. (Ian Campbell) [555084]
  - [stable] xen/xenbus: make DEVICE_ATTR()s static (Jeremy Fitzhardinge) [555084]
  - [stable] drm/i915: Add the missing clonemask for display port on Ironlake (Zhao Yakui) [555084]
  - [stable] drm/i915: Set the error code after failing to insert new offset into mm ht. (Chris Wilson) [555084]
  - [stable] drm/ttm: Fix build failure due to missing struct page (Martin Michlmayr) [555084]
  - [stable] drm/radeon/kms: rs6xx/rs740: clamp vram to aperture size (Alex Deucher) [555084]
  - [stable] drm/radeon/kms: fix vram setup on rs600 (Alex Deucher) [555084]
  - [stable] drm/radeon/kms: fix legacy crtc2 dpms (Alex Deucher) [555084]
  - [stable] drm/radeon/kms: handle vblanks properly with dpms on (Alex Deucher) [555084]
  - [stable] drm/radeon/kms: Add quirk for HIS X1300 board (Alex Deucher) [555084]
  - [stable] powerpc: Fix usage of 64-bit instruction in 32-bit altivec code (Benjamin Herrenschmidt) [555084]
  - [stable] powerpc/therm_adt746x: Record pwm invert bit at module load time] (Darrick J. Wong) [555084]
  - [stable] powerpc/windfarm: Add detection for second cpu pump (Bolko Maass) [555084]
  - [stable] mm: hugetlb: fix hugepage memory leak in walk_page_range() (Naoya Horiguchi) [555084]
  - [stable] mm: hugetlb: fix hugepage memory leak in mincore() (Naoya Horiguchi) [555084]
  - [stable] x86: Fix bogus warning in apic_noop.apic_write() (Thomas Gleixner) [555084]
  - [stable] rtl8187: Fix wrong rfkill switch mask for some models (Larry Finger) [555084]
  - [stable] wireless: correctly report signal value for IEEE80211_HW_SIGNAL_UNSPEC (John W. Linville) [555084]
  - [stable] mac80211: fix scan abort sanity checks (Johannes Berg) [555084]
  - [stable] mac80211: Revert 'Use correct sign for mesh active path refresh' (Javier Cardona) [555084]
  - [stable] mac80211: Fixed bug in mesh portal paths (Javier Cardona) [555084]
  - [stable] mac80211: Fix bug in computing crc over dynamic IEs in beacon (Vasanthakumar Thiagarajan) [555084]
  - [stable] Serial: Do not read IIR in serial8250_start_tx when UART_BUG_TXEN (Ian Jackson) [555084]
  - [stable] Driver core: fix race in dev_driver_string (Alan Stern) [555084]
  - [stable] debugfs: fix create mutex racy fops and private data (Mathieu Desnoyers) [555084]
  - [stable] devpts_get_tty() should validate inode (Sukadev Bhattiprolu) [555084]
  - [stable] futex: Take mmap_sem for get_user_pages in fault_in_user_writeable (Andi Kleen) [555084]
  - [stable] md/bitmap: protect against bitmap removal while being updated. (NeilBrown) [555084]
  - [stable] hfs: fix a potential buffer overflow (Amerigo Wang) [555084]
  - [stable] pxa/em-x270: fix usb hub power up/reset sequence (Igor Grinberg) [555084]
  - [stable] USB: Close usb_find_interface race v3 (Russ Dill) [555084]
  - [stable] USB: usb-storage: add BAD_SENSE flag (Alan Stern) [555084]
  - [stable] USB: usbtmc: repeat usb_bulk_msg until whole message is transfered (Andre Herms) [555084]
  - [stable] USB: option.c: add support for D-Link DWM-162-U5 (Zhang Le) [555084]
  - [stable] USB: musb_gadget_ep0: fix unhandled endpoint 0 IRQs, again (Sergei Shtylyov) [555084]
  - [stable] USB: xhci: Add correct email and files to MAINTAINERS entry. (Sarah Sharp) [555084]
  - [stable] jbd2: don't wipe the journal on a failed journal checksum (Theodore Ts'o) [555084]
  - [stable] UBI: flush wl before clearing update marker (Sebastian Andrzej Siewior) [555084]
  - [stable] bsdacct: fix uid/gid misreporting (Alexey Dobriyan) [555084]
  - [stable] V4L/DVB: Fix test in copy_reg_bits() (Roel Kluin) [555084]
  - [stable] pata_hpt{37x|3x2n}: fix timing register masks (take 2) (Sergei Shtylyov) [555084]
  - [stable] x86: Fix typo in Intel CPU cache size descriptor (Dave Jones) [555084]
  - [stable] x86: Add new Intel CPU cache size descriptors (Dave Jones) [555084]
  - [stable] x86: Fix duplicated UV BAU interrupt vector (Cliff Wickman) [555084]
  - [stable] x86/mce: Set up timer unconditionally (Jan Beulich) [555084]
  - [stable] x86, mce: don't restart timer if disabled (Hidetoshi Seto) [555084]
  - [stable] x86: Use -maccumulate-outgoing-args for sane mcount prologues (Thomas Gleixner) [555084]
  - [stable] x86: Prevent GCC 4.4.x (pentium-mmx et al) function prologue wreckage (Thomas Gleixner) [555084]
  - [stable] KVM: x86: include pvclock MSRs in msrs_to_save (Glauber Costa) [555084]
  - [stable] KVM: fix irq_source_id size verification (Marcelo Tosatti) [555084]
  - [stable] KVM: s390: Make psw available on all exits, not just a subset (Carsten Otte) [555084]
  - [stable] KVM: s390: Fix prefix register checking in arch/s390/kvm/sigp.c (Carsten Otte) [555084]
  - [stable] KVM: x86 emulator: limit instructions to 15 bytes (Avi Kivity) [555084]
  - [stable] ALSA: hrtimer - Fix lock-up (Takashi Iwai) [555084]
  - [stable] hrtimer: Fix /proc/timer_list regression (Feng Tang) [555084]
  - [stable] ath5k: enable EEPROM checksum check (Luis R. Rodriguez) [555084]
  - [stable] ath5k: allow setting txpower to 0 (Bob Copeland) [555084]
  - [stable] ssb: Fix range check in sprom write (Michael Buesch) [555084]
  - [stable] x86, apic: Enable lapic nmi watchdog on AMD Family 11h (Mikael Pettersson) [555084]
  - [stable] x86: ASUS P4S800 reboot=bios quirk (Leann Ogasawara) [555084]
  - [stable] x86: GART: pci-gart_64.c: Use correct length in strncmp (Joe Perches) [555084]
  - [stable] x86: Fix iommu=nodac parameter handling (Tejun Heo) [555084]
  - [stable] x86, Calgary IOMMU quirk: Find nearest matching Calgary while walking up the PCI tree (Darrick J. Wong) [555084]
  - [stable] x86/amd-iommu: un__init iommu_setup_msi (Joerg Roedel) [555084]
  - [stable] x86/amd-iommu: attach devices to pre-allocated domains early (Joerg Roedel) [555084]
  - [stable] sched: Fix and clean up rate-limit newidle code (Mike Galbraith) [555084]
  - [stable] sched: Rate-limit newidle (Mike Galbraith) [555084]
  - [stable] sched: Fix affinity logic in select_task_rq_fair() (Mike Galbraith) [555084]
  - [stable] sched: Check for an idle shared cache in select_task_rq_fair() (Mike Galbraith) [555084]
  - [stable] PM / Runtime: Fix lockdep warning in __pm_runtime_set_status() (Rafael J. Wysocki) [555084]
  - [stable] perf_event: Initialize data.period in perf_swevent_hrtimer() (Xiao Guangrong) [555084]
  - [stable] perf_event: Fix invalid type in ioctl definition (Arjan van de Ven) [555084]
  - [stable] rcu: Remove inline from forward-referenced functions (Paul E. McKenney) [555084]
  - [stable] rcu: Fix note_new_gpnum() uses of ->gpnum (Paul E. McKenney) [555084]
  - [stable] rcu: Fix synchronization for rcu_process_gp_end() uses of ->completed counter (Paul E. McKenney) [555084]
  - [stable] rcu: Prepare for synchronization fixes: clean up for non-NO_HZ handling of ->completed counter (Paul E. McKenney) [555084]
  - [stable] firewire: ohci: handle receive packets with a data length of zero (Jay Fenlason) [555084]
  - [stable] USB: option: add pid for ZTE (zhao.ming9@zte.com.cn) [555084]
  - [stable] USB: usb-storage: fix bug in fill_inquiry (Alan Stern) [555084]
  - [stable] ext4: Fix potential fiemap deadlock (mmap_sem vs. i_data_sem) (Theodore Ts'o) [555084]
  - [stable] ext4: Wait for proper transaction commit on fsync (Jan Kara) [555084]
  - [stable] ext4: fix incorrect block reservation on quota transfer. (Dmitry Monakhov) [555084]
  - [stable] ext4: quota macros cleanup (Dmitry Monakhov) [555084]
  - [stable] ext4: ext4_get_reserved_space() must return bytes instead of blocks (Dmitry Monakhov) [555084]
  - [stable] ext4: remove blocks from inode prealloc list on failure (Curt Wohlgemuth) [555084]
  - [stable] ext4: Avoid data / filesystem corruption when write fails to copy data (Jan Kara) [555084]
  - [stable] ext4: Return the PTR_ERR of the correct pointer in setup_new_group_blocks() (Roel Kluin) [555084]
  - [stable] jbd2: Add ENOMEM checking in and for jbd2_journal_write_metadata_buffer() (Theodore Ts'o) [555084]
  - [stable] ext4: move_extent_per_page() cleanup (Akira Fujita) [555084]
  - [stable] ext4: initialize moved_len before calling ext4_move_extents() (Kazuya Mio) [555084]
  - [stable] ext4: Fix double-free of blocks with EXT4_IOC_MOVE_EXT (Akira Fujita) [555084]
  - [stable] ext4: make "norecovery" an alias for "noload" (Eric Sandeen) [555084]
  - [stable] ext4: fix error handling in ext4_ind_get_blocks() (Jan Kara) [555084]
  - [stable] ext4: avoid issuing unnecessary barriers (Theodore Ts'o) [555084]
  - [stable] ext4: fix block validity checks so they work correctly with meta_bg (Theodore Ts'o) [555084]
  - [stable] ext4: fix uninit block bitmap initialization when s_meta_first_bg is non-zero (Theodore Ts'o) [555084]
  - [stable] ext4: don't update the superblock in ext4_statfs() (Theodore Ts'o) [555084]
  - [stable] ext4: journal all modifications in ext4_xattr_set_handle (Eric Sandeen) [555084]
  - [stable] ext4: fix i_flags access in ext4_da_writepages_trans_blocks() (Julia Lawall) [555084]
  - [stable] ext4: make sure directory and symlink blocks are revoked (Theodore Ts'o) [555084]
  - [stable] ext4: plug a buffer_head leak in an error path of ext4_iget() (Theodore Ts'o) [555084]
  - [stable] ext4: fix possible recursive locking warning in EXT4_IOC_MOVE_EXT (Akira Fujita) [555084]
  - [stable] ext4: fix lock order problem in ext4_move_extents() (Akira Fujita) [555084]
  - [stable] ext4: fix the returned block count if EXT4_IOC_MOVE_EXT fails (Akira Fujita) [555084]
  - [stable] ext4: avoid divide by zero when trying to mount a corrupted file system (Theodore Ts'o) [555084]
  - [stable] ext4: fix potential buffer head leak when add_dirent_to_buf() returns ENOSPC (Theodore Ts'o) [555084]
  - [stable] SCSI: megaraid_sas: fix 64 bit sense pointer truncation (Yang, Bo) [555084]
  - [stable] SCSI: osd_protocol.h: Add missing #include (Martin Michlmayr) [555084]
  - [stable] signal: Fix alternate signal stack check (Sebastian Andrzej Siewior) [555084]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-5.el6]
changelog:
  - [scsi] cciss: fix spinlock use (Tomas Henzl) [552910]
  - [scsi] cciss,hpsa: reassign controllers (Tomas Henzl) [552192]
  - [modsign] Don't attempt to sign a module if there are no key files (David Howells) [543529]
  - [x86] Compile mce-inject module (Prarit Bhargava) [553323]
  - [nfs] fix insecure export option (Steve Dickson) [437715]
  - [nfs] NFS update to 2.6.33 part 3 (Steve Dickson) [437715]
  - [nfs] NFS update to 2.6.33 part 2 (Steve Dickson) [437715]
  - [nfs] NFS update to 2.6.33 part 1 (Steve Dickson) [437715]
  - [s390] cio: deactivated devices can cause use after free panic (Hendrik Brueckner) [548490]
  - [s390] cio: memory leaks when checking unusable devices (Hendrik Brueckner) [548490]
  - [s390] cio: DASD steal lock task hangs (Hendrik Brueckner) [548490]
  - [s390] cio: DASD cannot be set online (Hendrik Brueckner) [548490]
  - [s390] cio: erratic DASD I/O behavior (Hendrik Brueckner) [548490]
  - [s390] cio: not operational devices cannot be deactivated (Hendrik Brueckner) [548490]
  - [s390] cio: initialization of I/O devices fails (Hendrik Brueckner) [548490]
  - [s390] cio: kernel panic after unexpected interrupt (Hendrik Brueckner) [548490]
  - [s390] cio: incorrect device state after device recognition and recovery (Hendrik Brueckner) [548490]
  - [s390] cio: setting a device online or offline fails for unknown reasons (Hendrik Brueckner) [548490]
  - [s390] cio: device recovery fails after concurrent hardware changes (Hendrik Brueckner) [548490]
  - [s390] cio: device recovery stalls after multiple hardware events (Hendrik Brueckner) [548490]
  - [s390] cio: double free under memory pressure (Hendrik Brueckner) [548490]
  - [sunrpc] Don't display zero scope IDs (Jeff Layton) [463530]
  - [sunrpc] Deprecate support for site-local addresses (Jeff Layton) [463530]
  - [input] dell-laptop: Update rfkill state on switch change (Matthew Garrett) [547892]
  - [input] Add support for adding i8042 filters (Matthew Garrett) [547892]
  - [vfs] force reval of target when following LAST_BIND symlinks (Jeff Layton) [548153]
  - [scsi] scsi_dh_rdac: add two IBM devices to rdac_dev_list (Rob Evers) [528576]
  - [fs] ext4: flush delalloc blocks when space is low (Eric Sandeen) [526758]
  - [fs] fs-writeback: Add helper function to start writeback if idle (Eric Sandeen) [526758]
  - [fat] make discard a mount option (Jeff Moyer) [552355]
  - [ext4] make trim/discard optional (and off by default) (Jeff Moyer) [552355]
  - [fusion] bump version to 3.04.13 (Tomas Henzl) [548408]
  - [fusion] fix for incorrect data underrun (Tomas Henzl) [548408]
  - [fusion] remove unnecessary printk (Tomas Henzl) [548408]
  - [cifs] NULL out tcon, pSesInfo, and srvTcp pointers when chasing DFS referrals (Jeff Layton) [545984]
  - [fs] ext4: wait for log to commit when unmounting (Josef Bacik) [524267]
  - [mm] hwpoison: backport the latest patches from linux-2.6.33 (Dean Nelson) [547705]
  - [netdrv] bnx2i: update to 2.1.0 (Stanislaw Gruszka) [463268]
  - [netdrv] cnic: fixes for RHEL6 (Stanislaw Gruszka) [463268]
  - [gfs2] Fix potential race in glock code (Steven Whitehouse) [546279]
  - [scsi] make driver PCI legacy I/O port free (Tomas Henzl) [549118]
  - [scsi] eliminate double free (Tomas Henzl) [549351]
  - [dlm] always use GFP_NOFS (David Teigland) [545904]
  - [block] Fix topology stacking for data and discard alignment (Mike Snitzer) [549766]
  - [scsi] scsi_dh: Make alua hardware handler s activate async (Rob Evers) [537257]
  - [scsi] scsi_dh: Make hp hardware handler s activate async (Rob Evers) [537257]
  - [scsi] scsi_dh: Make rdac hardware handler s activate async (Rob Evers) [537257]
  - [scsi] scsi_dh: Change the scsidh_activate interface to be asynchronous (Rob Evers) [537257]
  - [netdrv] update tg3 to version 3.105 (John Feeney) [465194]
  - [netdrv] bnx2x: update to 1.52.1-5 (Stanislaw Gruszka) [464427]
  - [netdrv] ixgbe: add support for 82599-KR and update to latest upstream (Andy Gospodarek) [462781]
  - [block] cfq-iosched: Remove prio_change logic for workload selection (Jeff Moyer) [548796]
  - [block] cfq-iosched: Get rid of nr_groups (Jeff Moyer) [548796]
  - [block] cfq-iosched: Remove the check for same cfq group from allow_merge (Jeff Moyer) [548796]
  - [block] cfq: set workload as expired if it doesn't have any slice left (Jeff Moyer) [548796]
  - [block] Fix a CFQ crash in "for-2.6.33" branch of block tree (Jeff Moyer) [548796]
  - [block] cfq: Remove wait_request flag when idle time is being deleted (Jeff Moyer) [548796]
  - [block] cfq-iosched: commenting non-obvious initialization (Jeff Moyer) [548796]
  - [block] cfq-iosched: Take care of corner cases of group losing share due to deletion (Jeff Moyer) [548796]
  - [block] cfq-iosched: Get rid of cfqq wait_busy_done flag (Jeff Moyer) [548796]
  - [block] cfq: Optimization for close cooperating queue searching (Jeff Moyer) [548796]
  - [block] cfq-iosched: reduce write depth only if sync was delayed (Jeff Moyer) [548796]
  - [x86] ucode-amd: Load ucode-patches once and not separately of each CPU (George Beshers) [548840]
  - [x86] Remove enabling x2apic message for every CPU (George Beshers) [548840]
  - [x86] Limit number of per cpu TSC sync messages (George Beshers) [548840]
  - [sched] Limit the number of scheduler debug messages (George Beshers) [548840]
  - [init] Limit the number of per cpu calibration bootup messages (George Beshers) [548840]
  - [x86] Limit the number of processor bootup messages (George Beshers) [548840]
  - [x86] cpu: mv display_cacheinfo -> cpu_detect_cache_sizes (George Beshers) [548840]
  - [x86] Remove CPU cache size output for non-Intel too (George Beshers) [548840]
  - [x86] Remove the CPU cache size printk's (George Beshers) [548840]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-4.el6]
changelog:
  - [kvm] VMX: Use shared msr infrastructure (Avi Kivity) [547777]
  - [kvm] x86 shared msr infrastructure (Avi Kivity) [547777]
  - [kvm] VMX: Move MSR_KERNEL_GS_BASE out of the vmx autoload msr area (Avi Kivity) [547777]
  - [kvm] core, x86: Add user return notifiers (Avi Kivity) [547777]
  - [quota] ext4: Support for 64-bit quota format (Jerome Marchand) [546311]
  - [quota] ext3: Support for vfsv1 quota format (Jerome Marchand) [546311]
  - [quota] Implement quota format with 64-bit space and inode limits (Jerome Marchand) [546311]
  - [quota] Move definition of QFMT_OCFS2 to linux/quota.h (Jerome Marchand) [546311]
  - [scsi] cciss: remove pci-ids (Tomas Henzl) [464649]
  - [scsi] hpsa: new driver (Tomas Henzl) [464649]
  - [mm] Add file page writeback mm tracepoints. (Larry Woodman) [523093]
  - [mm] Add page reclaim mm tracepoints. (Larry Woodman) [523093]
  - [mm] Add file page mm tracepoints. (Larry Woodman) [523093]
  - [mm] Add anonynmous page mm tracepoints. (Larry Woodman) [523093]
  - [mm] Add mm tracepoint definitions to kmem.h (Larry Woodman) [523093]
  - [ksm] fix ksm.h breakage of nommu build (Izik Eidus) [548586]
  - [ksm] remove unswappable max_kernel_pages (Izik Eidus) [548586]
  - [ksm] memory hotremove migration only (Izik Eidus) [548586]
  - [ksm] rmap_walk to remove_migation_ptes (Izik Eidus) [548586]
  - [ksm] mem cgroup charge swapin copy (Izik Eidus) [548586]
  - [ksm] share anon page without allocating (Izik Eidus) [548586]
  - [ksm] take keyhole reference to page (Izik Eidus) [548586]
  - [ksm] hold anon_vma in rmap_item (Izik Eidus) [548586]
  - [ksm] let shared pages be swappable (Izik Eidus) [548586]
  - [ksm] fix mlockfreed to munlocked (Izik Eidus) [548586]
  - [ksm] stable_node point to page and back (Izik Eidus) [548586]
  - [ksm] separate stable_node (Izik Eidus) [548586]
  - [ksm] singly-linked rmap_list (Izik Eidus) [548586]
  - [ksm] cleanup some function arguments (Izik Eidus) [548586]
  - [ksm] remove redundancies when merging page (Izik Eidus) [548586]
  - [ksm] three remove_rmap_item_from_tree cleanups (Izik Eidus) [548586]
  - [mm] stop ptlock enlarging struct page (Izik Eidus) [548586]
  - [mm] vmscan: do not evict inactive pages when skipping an active list scan (Rik van Riel) [548457]
  - [mm] vmscan: make consistent of reclaim bale out between do_try_to_free_page and shrink_zone (Rik van Riel) [548457]
  - [mm] vmscan: kill sc.swap_cluster_max (Rik van Riel) [548457]
  - [mm] vmscan: zone_reclaim() dont use insane swap_cluster_max (Rik van Riel) [548457]
  - [mm] vmscan: kill hibernation specific reclaim logic and unify it (Rik van Riel) [548457]
  - [mm] vmscan: separate sc.swap_cluster_max and sc.nr_max_reclaim (Rik van Riel) [548457]
  - [mm] vmscan: stop kswapd waiting on congestion when the min watermark is not being met (Rik van Riel) [548457]
  - [mm] vmscan: have kswapd sleep for a short interval and double check it should be asleep (Rik van Riel) [548457]
  - [mm] pass address down to rmap ones (Rik van Riel) [548457]
  - [mm] CONFIG_MMU for PG_mlocked (Rik van Riel) [548457]
  - [mm] mlocking in try_to_unmap_one (Rik van Riel) [548457]
  - [mm] define PAGE_MAPPING_FLAGS (Rik van Riel) [548457]
  - [mm] swap_info: note SWAP_MAP_SHMEM (Rik van Riel) [548457]
  - [mm] swap_info: swap count continuations (Rik van Riel) [548457]
  - [mm] swap_info: swap_map of chars not shorts (Rik van Riel) [548457]
  - [mm] swap_info: SWAP_HAS_CACHE cleanups (Rik van Riel) [548457]
  - [mm] swap_info: miscellaneous minor cleanups (Rik van Riel) [548457]
  - [mm] swap_info: include first_swap_extent (Rik van Riel) [548457]
  - [mm] swap_info: change to array of pointers (Rik van Riel) [548457]
  - [mm] swap_info: private to swapfile.c (Rik van Riel) [548457]
  - [mm] move inc_zone_page_state(NR_ISOLATED) to just isolated place (Rik van Riel) [548457]
  - [xen] support MAXSMP (Andrew Jones) [547129]
  - [xen] wait up to 5 minutes for device connetion and fix fallout (Paolo Bonzini) [523630]
  - [uv] x86 SGI: Map low MMR ranges (George Beshers) [548181]
  - [uv] gru: function to generate chipset IPI values (George Beshers) [548181]
  - [uv] x86 RTC: Clean up error handling (George Beshers) [548181]
  - [uv] x86: RTC: Add clocksource only boot option (George Beshers) [548181]
  - [uv] x86: RTC: Fix early expiry handling (George Beshers) [548181]
  - [uv] x86: introduce uv_gpa_is_mmr (George Beshers) [548181]
  - [uv] x86: function to translate from gpa -> socket_paddr (George Beshers) [548181]
  - [uv] x86: SGI UV: Fix BAU initialization (George Beshers) [548181]
  - [s390] zfcp: Block SCSI EH thread for rport state BLOCKED (Hendrik Brueckner) [547413]
  - [scsi] scsi_transport_fc: Introduce helper function for blocking scsi_eh (Hendrik Brueckner) [547413]
  - [s390] zfcp: improve FSF error reporting (Hendrik Brueckner) [547386]
  - [s390] zfcp: fix ELS ADISC handling to prevent QDIO errors (Hendrik Brueckner) [547385]
  - [s390] zfcp: Assign scheduled work to driver queue (Hendrik Brueckner) [547377]
  - [s390] zfcp: Don't fail SCSI commands when transitioning to blocked fc_rport (Hendrik Brueckner) [547379]
  - [s390] ctcm: suspend has to wait for outstanding I/O (Hendrik Brueckner) [546633]
  - [s390] cmm: free pages on hibernate (Hendrik Brueckner) [546407]
  - [s390] iucv: add work_queue cleanup for suspend (Hendrik Brueckner) [546319]
  - [s390] dasd: let device initialization wait for LCU setup (Hendrik Brueckner) [547735]
  - [s390] dasd: remove strings from s390dbf (Hendrik Brueckner) [547735]
  - [s390] dasd: enable prefix independent of pav support (Hendrik Brueckner) [547735]
  - [sound] ALSA HDA driver update 2009-12-15 (Jaroslav Kysela) [525391]
  - [utrace] utrace core (Roland McGrath) [549491]
  - [utrace] implement utrace-ptrace (Roland McGrath) [549491]
  - [ptrace] reorder the code in kernel/ptrace.c (Roland McGrath) [549491]
  - [ptrace] export __ptrace_detach() and do_notify_parent_cldstop() (Roland McGrath) [549491]
  - [ptrace_signal] check PT_PTRACED before reporting a signal (Roland McGrath) [549491]
  - [tracehooks] check PT_PTRACED before reporting the single-step (Roland McGrath) [549491]
  - [tracehooks] kill some PT_PTRACED checks (Roland McGrath) [549491]
  - [signals] check ->group_stop_count after tracehook_get_signal() (Roland McGrath) [549491]
  - [ptrace] x86: change syscall_trace_leave() to rely on tracehook when stepping (Roland McGrath) [549491]
  - [ptrace] x86: implement user_single_step_siginfo() (Roland McGrath) [549491]
  - [ptrace] change tracehook_report_syscall_exit() to handle stepping (Roland McGrath) [549491]
  - [ptrace] powerpc: implement user_single_step_siginfo() (Roland McGrath) [549491]
  - [ptrace] introduce user_single_step_siginfo() helper (Roland McGrath) [549491]
  - [ptrace] copy_process() should disable stepping (Roland McGrath) [549491]
  - [ptrace] cleanup ptrace_init_task()->ptrace_link() path (Roland McGrath) [549491]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-3.el6]
changelog:
  - [modsign] Don't check e_entry in ELF header (David Howells) [548027]
  - [pci] pciehp: Provide an option to disable native PCIe hotplug (Matthew Garrett) [517050]
  - [s390] OSA QDIO data connection isolation (Hendrik Brueckner) [537496]
  - [s390] zcrypt: adjust speed rating of cex3 adapters (Hendrik Brueckner) [537495]
  - [s390] zcrypt: adjust speed rating between cex2 and pcixcc (Hendrik Brueckner) [537495]
  - [s390] zcrypt: use definitions for cex3 (Hendrik Brueckner) [537495]
  - [s390] zcrypt: add support for cex3 device types (Hendrik Brueckner) [537495]
  - [s390] zcrypt: special command support for cex3 exploitation (Hendrik Brueckner) [537495]
  - [s390] zcrypt: initialize ap_messages for cex3 exploitation (Hendrik Brueckner) [537495]
  - [s390] kernel: performance counter fix and page fault optimization (Hendrik Brueckner) [546396]
  - [s390] kernel: fix dump indicator (Hendrik Brueckner) [546285]
  - [s390] dasd: support DIAG access for read-only devices (Hendrik Brueckner) [546309]
  - [s390] zcrypt: Do not simultaneously schedule hrtimer (Hendrik Brueckner) [546291]
  - [s390] kernel: clear high-order bits after switching to 64-bit mode (Hendrik Brueckner) [546314]
  - [virt] vhost: add missing architectures (Michael S. Tsirkin) [540389]
  - [virt] vhost_net: a kernel-level virtio server (Michael S. Tsirkin) [540389]
  - [virt] mm: export use_mm/unuse_mm to modules (Michael S. Tsirkin) [540389]
  - [virt] tun: export underlying socket (Michael S. Tsirkin) [540389]
  - [dm] snapshot-merge support from 2.6.33 (Mike Snitzer) [547563]
  - [dm] snapshot changes from 2.6.33 (Mike Snitzer) [547563]
  - [dm] crypt changes from 2.6.33 (Mike Snitzer) [547563]
  - [dm] raid1 changes from 2.6.33 (Mike Snitzer) [547563]
  - [dm] core and mpath changes from 2.6.33 (Mike Snitzer) [547563]
  - [scsi] fix dma handling when using virtual hosts (Mike Christie) [525241]
  - [nfs] convert proto= option to use netids rather than a protoname (Jeff Layton) [545973]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-2.el6]
changelog:
  - [block] config: enable CONFIG_BLK_DEV_INTEGRITY (Jeff Moyer) [490732]
  - [block] config: enable CONFIG_BLK_CGROUP (Jeff Moyer) [425895]
  - [libata] Clarify ata_set_lba_range_entries function (Jeff Moyer) [528046]
  - [libata] Report zeroed read after Trim and max discard size (Jeff Moyer) [528046]
  - [scsi] Correctly handle thin provisioning write error (Jeff Moyer) [528046]
  - [scsi] sd: WRITE SAME(16) / UNMAP support (Jeff Moyer) [528046]
  - [scsi] scsi_debug: Thin provisioning support (Jeff Moyer) [528046]
  - [scsi] Add missing command definitions (Jeff Moyer) [528046]
  - [block] Add support for the ATA TRIM command in libata. (Jeff Moyer) [528046]
  - [block] dio: fix performance regression (Jeff Moyer) [545507]
  - [block] cfq-iosched: Do not access cfqq after freeing it (Jeff Moyer) [425895]
  - [block] include linux/err.h to use ERR_PTR (Jeff Moyer) [425895]
  - [block] cfq-iosched: use call_rcu() instead of doing grace period stall on queue exit (Jeff Moyer) [425895]
  - [block] blkio: Allow CFQ group IO scheduling even when CFQ is a module (Jeff Moyer) [425895]
  - [block] blkio: Implement dynamic io controlling policy registration (Jeff Moyer) [425895]
  - [block] blkio: Export some symbols from blkio as its user CFQ can be a module (Jeff Moyer) [425895]
  - [block] cfq-iosched: make nonrot check logic consistent (Jeff Moyer) [545225]
  - [block] io controller: quick fix for blk-cgroup and modular CFQ (Jeff Moyer) [425895]
  - [block] cfq-iosched: move IO controller declerations to a header file (Jeff Moyer) [425895]
  - [block] cfq-iosched: fix compile problem with !CONFIG_CGROUP (Jeff Moyer) [425895]
  - [block] blkio: Documentation (Jeff Moyer) [425895]
  - [block] blkio: Wait on sync-noidle queue even if rq_noidle = 1 (Jeff Moyer) [425895]
  - [block] blkio: Implement group_isolation tunable (Jeff Moyer) [425895]
  - [block] blkio: Determine async workload length based on total number of queues (Jeff Moyer) [425895]
  - [block] blkio: Wait for cfq queue to get backlogged if group is empty (Jeff Moyer) [425895]
  - [block] blkio: Propagate cgroup weight updation to cfq groups (Jeff Moyer) [425895]
  - [block] blkio: Drop the reference to queue once the task changes cgroup (Jeff Moyer) [425895]
  - [block] blkio: Provide some isolation between groups (Jeff Moyer) [425895]
  - [block] blkio: Export disk time and sectors used by a group to user space (Jeff Moyer) [425895]
  - [block] blkio: Some debugging aids for CFQ (Jeff Moyer) [425895]
  - [block] blkio: Take care of cgroup deletion and cfq group reference counting (Jeff Moyer) [425895]
  - [block] blkio: Dynamic cfq group creation based on cgroup tasks belongs to (Jeff Moyer) [425895]
  - [block] blkio: Group time used accounting and workload context save restore (Jeff Moyer) [425895]
  - [block] blkio: Implement per cfq group latency target and busy queue avg (Jeff Moyer) [425895]
  - [block] blkio: Introduce per cfq group weights and vdisktime calculations (Jeff Moyer) [425895]
  - [block] blkio: Introduce blkio controller cgroup interface (Jeff Moyer) [425895]
  - [block] blkio: Introduce the root service tree for cfq groups (Jeff Moyer) [425895]
  - [block] blkio: Keep queue on service tree until we expire it (Jeff Moyer) [425895]
  - [block] blkio: Implement macro to traverse each service tree in group (Jeff Moyer) [425895]
  - [block] blkio: Introduce the notion of cfq groups (Jeff Moyer) [425895]
  - [block] blkio: Set must_dispatch only if we decided to not dispatch the request (Jeff Moyer) [425895]
  - [block] cfq-iosched: no dispatch limit for single queue (Jeff Moyer) [425895]
  - [block] Allow devices to indicate whether discarded blocks are zeroed (Jeff Moyer) [545203]
  - [block] Revert "cfq: Make use of service count to estimate the rb_key offset" (Jeff Moyer) [425895]
  - [block] cfq-iosched: fix corner cases in idling logic (Jeff Moyer) [425895]
  - [block] cfq-iosched: idling on deep seeky sync queues (Jeff Moyer) [425895]
  - [block] cfq-iosched: fix no-idle preemption logic (Jeff Moyer) [425895]
  - [block] cfq-iosched: fix ncq detection code (Jeff Moyer) [425895]
  - [block] cfq-iosched: cleanup unreachable code (Jeff Moyer) [425895]
  - [block] cfq: Make use of service count to estimate the rb_key offset (Jeff Moyer) [425895]
  - [block] partitions: read whole sector with EFI GPT header (Jeff Moyer) [463632]
  - [block] partitions: use sector size for EFI GPT (Jeff Moyer) [463632]
  - [block] Expose discard granularity (Jeff Moyer) [545203]
  - [block] cfq-iosched: fix next_rq computation (Jeff Moyer) [425895]
  - [block] cfq-iosched: simplify prio-unboost code (Jeff Moyer) [425895]
  - [block] blkdev: flush disk cache on ->fsync (Jeff Moyer) [545199]
  - [block] cfq-iosched: fix style issue in cfq_get_avg_queues() (Jeff Moyer) [425895]
  - [block] cfq-iosched: fairness for sync no-idle queues (Jeff Moyer) [425895]
  - [block] cfq-iosched: enable idling for last queue on priority class (Jeff Moyer) [425895]
  - [block] cfq-iosched: reimplement priorities using different service trees (Jeff Moyer) [425895]
  - [block] cfq-iosched: preparation to handle multiple service trees (Jeff Moyer) [425895]
  - [block] cfq-iosched: adapt slice to number of processes doing I/O (Jeff Moyer) [425895]
  - [block] cfq-iosched: improve hw_tag detection (Jeff Moyer) [425895]
  - [block] cfq: break apart merged cfqqs if they stop cooperating (Jeff Moyer) [533932]
  - [block] cfq: change the meaning of the cfqq_coop flag (Jeff Moyer) [533932]
  - [block] cfq: merge cooperating cfq_queues (Jeff Moyer) [533932]
  - [block] cfq: calculate the seek_mean per cfq_queue not per cfq_io_context (Jeff Moyer) [533932]
  - [block] CFQ is more than a desktop scheduler (Jeff Moyer) [533932]
  - [block] revert: cfq-iosched: limit coop preemption (Jeff Moyer) [533932]
  - perf: Don't free perf_mmap_data until work has been done (Aristeu Rozanski) [547432]
  - ext4: Fix insuficient checks in EXT4_IOC_MOVE_EXT (Aristeu Rozanski) [547432]
  - agp: clear GTT on intel (Aristeu Rozanski) [547432]
  - drm/i915: Fix sync to vblank when VGA output is turned off (Aristeu Rozanski) [547432]
  - drm: nouveau fixes (Aristeu Rozanski) [547432]
  - drm: radeon dp support (Aristeu Rozanski) [547432]
  - drm: radeon fixes (Aristeu Rozanski) [547432]
  - KVM: allow userspace to adjust kvmclock offset (Aristeu Rozanski) [547432]
  - ath9k backports (Aristeu Rozanski) [547432]
  - intel-iommu backport (Aristeu Rozanski) [547432]
  - updating patch linux-2.6-nfsd4-proots.patch (2.6.32-8.fc13 reference) (Aristeu Rozanski) [547432]
  - updating linux-2.6-execshield.patch (2.6.32-8.fc13 reference) (Aristeu Rozanski) [547432]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-0.54.el6]
changelog:
  - [edac] amd64_edac: disabling temporarily (Aristeu Rozanski)
  - [x86] Enable CONFIG_SPARSE_IRQ (Prarit Bhargava) [543174]
  - [x86] panic if AMD cpu_khz is wrong (Prarit Bhargava) [523468]
  - [infiniband] Rewrite SG handling for RDMA logic (Mike Christie) [540269]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-0.53.el6]
changelog:
  - [net] Add acession counts to all datagram protocols (Neil Horman) [445366]
  - [modsign] Enable module signing in the RHEL RPM (David Howells) [517341]
  - [modsign] Don't include .note.gnu.build-id in the digest (David Howells) [517341]
  - [modsign] Apply signature checking to modules on module load (David Howells) [517341]
  - [modsign] Module signature checker and key manager (David Howells) [517341]
  - [modsign] Module ELF verifier (David Howells) [517341]
  - [modsign] Add indications of module ELF types (David Howells) [517341]
  - [modsign] Multiprecision maths library (David Howells) [517341]
  - [procfs] add ability to modify proc file limits from outside a processes own context (Neil Horman) [461946]
  - [s390x] fix build failure with CONFIG_FTRACE_SYSCALLS (Aristeu Rozanski) [538978]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-0.52.el6]
changelog:
  - [x86] AMD Northbridge: Verify NB's node is online (Prarit Bhargava) [536769]
  - [scsi] devinfo update for Hitachi entries (Takahiro Yasui) [526763]
  - [net] export device speed and duplex via sysfs (Andy Gospodarek) [453432]
  - [ppc64] Fix kcrctab_ sections to undo undesireable relocations that break kdump (Neil Horman) [509012]
  - [mm] Limit 32-bit x86 systems to 16GB and prevent panic on boot when system has more than ~30GB (Larry Woodman) [532039]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-0.51.el6]
changelog:
  - [kernel] Set panic_on_oops to 1 (Prarit Bhargava) [529963]
  - [kdump] kexec: allow to shrink reserved memory (Amerigo Wang) [523091]
  - [kdump] doc: update the kdump document (Amerigo Wang) [523091]
  - [kdump] powerpc: implement crashkernel=auto (Amerigo Wang) [523091]
  - [kdump] powerpc: add CONFIG_KEXEC_AUTO_RESERVE (Amerigo Wang) [523091]
  - [kdump] ia64: implement crashkernel=auto (Amerigo Wang) [523091]
  - [kdump] ia64: add CONFIG_KEXEC_AUTO_RESERVE (Amerigo Wang) [523091]
  - [kdump] x86: implement crashkernel=auto (Amerigo Wang) [523091]
  - [kdump] x86: add CONFIG_KEXEC_AUTO_RESERVE (Amerigo Wang) [523091]
  - [block] aio: implement request batching (Jeff Moyer) [533931]
  - [block] get rid of the WRITE_ODIRECT flag (Jeff Moyer) [533931]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-0.50.el6]
changelog:
  - [crypto] padlock-aes: Use the correct mask when checking whether copying is required (Chuck Ebbert)
  - [rfkill] add support to a key to control all radios (Aristeu Rozanski)
  - [acpi] be less verbose about old BIOSes (Aristeu Rozanski)
  - [drm] intel big hammer (Aristeu Rozanski)
  - [e1000] add quirk for ich9 (Aristeu Rozanski)
  - [pci] cacheline sizing (Dave Jones)
  - [crash] add crash driver (Dave Anderson)
  - [fb] disable fbcon logo with parameter (Aristeu Rozanski)
  - [pci] silence some PCI resource allocation errors (Aristeu Rozanski)
  - [serio] disable error messages when i8042 isn't found (Peter Jones)
  - [serial] Enable higher baud rates for 16C95x (Aristeu Rozanski)
  - [input] remove pcspkr modalias (Aristeu Rozanski)
  - [floppy] remove the floppy pnp modalias (Aristeu Rozanski)
  - [input] remove unwanted messages on spurious events (Aristeu Rozanski)
  - [sound] hda intel prealloc 4mb dmabuffer (Aristeu Rozanski)
  - [sound] disables hda beep by default (Aristeu Rozanski)
  - [pci] sets PCIE ASPM default policy to POWERSAVE (Aristeu Rozanski)
  - [pci] add config option to control the default state of PCI MSI interrupts (Aristeu Rozanski)
  - [debug] always inline kzalloc (Aristeu Rozanski)
  - [debug] add would_have_oomkilled procfs ctl (Aristeu Rozanski)
  - [debug] add calls to print_tainted() on spinlock functions (Aristeu Rozanski)
  - [debug] display tainted information on other places (Aristeu Rozanski)
  - [x86] add option to control the NMI watchdog timeout (Aristeu Rozanski)
  - [debug] print common struct sizes at boot time (Aristeu Rozanski)
  - [acpi] Disable firmware video brightness change by default (Matthew Garrett)
  - [acpi] Disable brightness switch by default (Aristeu Rozanski)
  - [usb] enable autosuspend on UVC by default (Matthew Garrett)
  - [usb] enable autosuspend by default on qcserial (Matthew Garrett)
  - [usb] Allow drivers to enable USB autosuspend on a per-device basis (Matthew Garrett)
  - [nfs] make nfs4 callback hidden (Steve Dickson)
  - [nfsd4] proots (Aristeu Rozanski)
  - [execshield] introduce execshield (Aristeu Rozanski)
  - [powerpc] add modalias_show operation (Aristeu Rozanski)
  - [hwmon] add VIA hwmon temperature sensor support (Aristeu Rozanski)
  - [utrace] introduce utrace implementation (Aristeu Rozanski)
  - [build] introduce AFTER_LINK variable (Aristeu Rozanski)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.11-3
changelog:
  - add support for changing colors in individual labels, scrollbars, entries,
    textboxes and scales, add custom colorsets (#707704)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.11-1
changelog:
  - fix buffer overflow in textbox when reflowing (#523955, CVE-2009-2905)
  - use full textbox width when reflowing and allow minimal width 1
  - fix writing lines longer than width in textbox
  - don't use va_list in newtvwindow more than once (#523696)
  - bind \E[Z to back-tab in built-in keymap (#468046)
  - terminate string after reading file in whiptail
  - add newtRadioSetCurrent function (Thomas Jarosch)
  - add pkgconfig support (Thomas Jarosch)
  - add Malay, Malayalam, Assamese, Gujarati, Bengali India, Kannada, Telugu
    translations
  - include tutorial in txt format
  - include debian patches
    - fix crash in textbox SetText when topLines != 0
    - don't link modules with libraries already linked with libnewt
    - add Asturian and Marathi translations


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.10-1
changelog:
  - improve --noitem description (#456305)
  - add setHeight to Textbox class
  - fix fixedheight forms
  - free keymap in newtFinished()
  - fix memory leak in textbox
  - fix valgrind error in checkboxtree
  - don't crash when running empty form
  - don't crash or hang when form has no focusable elements
  - before checkboxtree drawing return first item in GetCurrent()
  - redraw textbox in SetText()
  - add setColor description to SnackScreen docstring (Greg Swift)
  - make sure Widget isn't used directly (Greg Swift) (#452920)
  - add Serbian translations (Miloš Komarčević)
  - add Balochi translation (Mostafa Daneshvar)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.9-1
changelog:
  - handle component destruction (patch by Richard W.M. Jones)
  - fix newtWinEntry definition
  - don't use uninitialized values in newtWinMenu
  - remove workarounds for old bug in SLsmg_write_nstring
  - improve SIGWINCH handling in form
  - don't abort from whiptail gauge on SIGWINCH
  - redisplay also last line
  - update Polish translation (Piotr Drąg)
  - update URL and Source tag


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.8-1
changelog:
  - enable slang utf8 mode (#425992)
  - support --disable-nls option (patch by Natanael Copa)
  - redraw screen when using entry in euc encodings


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.7-2
changelog:
  - add back support for list of Entries in EntryWindow prompts in snack
    (#248878)
  - update license tag
  - split python module to -python subpackage (patch by Yanko Kaneti)
  - fix summary


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.7-1
changelog:
  - add support to snack for multiple selection and border in listbox
    and cursorAtEnd in entry (patch by Shawn Starr)
  - fix scrollbar positioning in listbox
  - cope with backward system time jumps (#240691)
  - free helplines and windows in newtFinished, check for overflow (#239992)
  - add release to -devel and -static requires (#238784)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.6-3
changelog:
  - fix cursor positioning when setting entry or checkbox flags
  - fix counting of items in checkboxtree
  - fix some memory leaks


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.6-1
changelog:
  - add newtSetColor() to allow changing individual colors
  - add newtPopWindowNoRefresh() (patch by Forest Bond)
  - move static library to -static subpackage, spec cleanup (#226195)
    (patch by Jason Tibbitts)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.5-1
changelog:
  - provide option to change text of buttons (#126768)
  - don't add escape key to hot keys by default (#216157)
  - fix cursor position in checkboxtree, radio button and checkbox
  - don't force monochrome terminals to output colors
  - highlight active compact button on monochrome terminals
  - update translations from debian


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.4-1
changelog:
  - fix entry corruption when reading multibyte characters
    and double width character handling
  - avoid overflow/crash in scale
  - patches from debian
    - fix crash of snack in EntryWindow when prompts is list of tuples
    - put cursor at beginning of text for better accessibility
      in button, scale and textbox
    - add topleft option to whiptail


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-9
changelog:
  - fix screen corruption when half of double width character is overwritten
    (#137957) 
  - fix double width character handling in checkboxtree and listbox


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-7
changelog:
  - fix checkboxtree positioning
  - make textbox with scrollbar focusable (#83203)
  - turn off cursor when entry terminated form (#86074)
  - handle listbox and checkboxtree focus better (#186053)
  - make default colors more friendly to 8-color terminals (#187545)


author: Petr Rockai <prockai@redhat.com> - 0.52.2-5
changelog:
  - Fix a crash in checkboxtree.c where pressing pgup/pgdown
    on a checkboxtree with less items than its height would
    cause segmentation violation. Consult BR 165347.


author: Petr Rockai <prockai@redhat.com> - 0.52.2-4
changelog:
  - Apply patch by Bill Nottingham (thanks) to improve scrollbar appearance
    (BR 174771).
  - Add -%{release} to snack's Provides: line (just in case).


author: Petr Rockai <prockai@redhat.com> - 0.52.2-3
changelog:
  - Provide: snack = %{version} instead of plain "snack", so that
    we don't block upgrades of custom "snack" packages. This should
    not break anything. (Hopefully) fixes BR 171415.


author: Petr Rockai <prockai@redhat.com> - 0.52.1-0
changelog:
  - revert bidi patch, objections by Jeremy Katz about
    anaconda breaking
  - this version still only exists as a "ghastly" upstream tarball;
    the patches are now cleaned up and will be integrated into
    rhlinux cvs unless some more breakage akin to bidi occurs
  - the if1close patch is now part of upstream tarball too


author: Petr Rockai <prockai@redhat.com>
changelog:
  - use versioned symbols, patch by Alastair McKinstry, mckinstry at
    debian dot org, thanks
  - need private wstrlen due to versioned syms, patch from debian
    package of newt
  - both of the above needed to be forward-ported


author: Matt Wilson <msw@redhat.com> 0.51.4-1
changelog:
  - fixed help line drawing in UTF-8 (#81718)
  - calculate the width of text in entries using wstrlen
  - always set component width to the new label width in newtLabelSetText
  - fixed snack.CListbox to work properly with UTF-8 (#81718)


author: Adrian Havill <havill@redhat.com> 0.51.3-1
changelog:
  - cleaned up const qualifiers in interfaces
  - added Ctrl-L screen refresh
  - fixed segfault in test.c when listbox items are selected
  - accessibility: made newt useable with monochrome terms (#60931)
  - leave the symbols in the libs (#60400)
  - fixed grammar in tutorial (#63496)
  - error checking (curcomp exists) for formEvent, newtFormGetCurrent,
    removed fifty button limit (#59027)


author: Matt Wilson <msw@redhat.com> 0.51.2-1
changelog:
  - fixed wstrlen() it was calculating wcwidth(first wide char in
    string) * strlen(str) instead of the actual width of the whole
    string
  - fixed newtRedrawHelpLine() to copy all the bytes from a multibyte
    string


author: Bill Nottingham <notting@redhat.com> 0.51.0-1
changelog:
  - changes for element width calculation for UTF-8
  - fix textwrap for UTF-8 in general
  - bump soname to avoid shared library collisions with slang


author: Joe Orton <jorton@redhat.com> 0.50.36-1
changelog:
  - add newtListboxGetItemCount() API call
  - include numeric percentage in scale widget appearace
  - add support for ESC key using NEWT_KEY_ESCAPE


author: Crutcher Dunnavant <crutcher@redhat.com> 0.50.31-1
changelog:
  - right anchor the internal Listbox of CListboxes, so that empty
  - scrollable CListboxes do not look like crape.


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - added python binding for newtListboxClear() for Listbox and CListBox
  - let ButtonBars optionally be made of CompactButtons


author: Matt Wilson <msw@redhat.com>
changelog:
  - change from using SLsmg_touch_screen to SLsmg_touch_lines to prevent
    excessive flashing due to screen clears when using touch_screen (more
    Japanese handling)


author: Matt Wilson <msw@redhat.com>
changelog:
  - redraw the screen in certain situations when LANG=ja_JP.eucJP to
    prevent corrupting kanji characters (#34362)


author: Elloit Lee <sopwith@redhat.com>
changelog:
  - Allow python scripts to watch file handles
  - Fix 64-bit warnings in snackmodule
  - Misc snack.py cleanups
  - Add NEWT_FD_EXCEPT to allow watching for fd exceptions
  - In newtExitStruct, return the first file descriptor that an event occurred on


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't blow the stack if we push a help line that is longer than the
    curret number of columns
  - clip window to screen bounds so that if we get a window that is
    larger than the screen we can still redraw the windows behind it
    when we pop


author: Erik Troan <ewt@redhat.com>
changelog:
  - gave up on separate CHANGES file
  - added newtCheckboxTreeSetCurrent() and snack binding
  - don't require python2 anymore


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - bytecompile the snack python module
  - move the libnewt.so symlink to the devel package
  - include popcorn.py and peanuts.py in the devel package,
    so we have some documentation of the snack module


author: Preston Brown <pbrown@redhat.com>
changelog:
  - explicit requirement of devel subpackage on same version of main package
    so that .so file link doesn't break


author: Matt Wilson <msw@redhat.com>
changelog:
  - fixed snack callback function refcounts, as well as optional data args
  - fixed suspend callback ref counts


author: Matt Wilson <msw@redhat.com>
changelog:
  - added snack bindings for setting current listbox selection
  - added argument to set default selection in snack ListboxChoiceWindow


author: Matt Wilson <msw@redhat.com>
changelog:
  - Function to set checkbox flags.  This will go away later when I have
    a generic flag setting function and signals to comps to go insensitive.


author: Matt Wilson <msw@redhat.com>
changelog:
  - Added GPM mouse support
  - Moved to autoconf to allow compiling without GPM support
  - Changed revision to 0.40


author: Erik Troan <ewt@redhat.com>
changelog:
  - added changes from Bruce Perens
      - small cleanups
      - lets whiptail automatically resize windows
  - the order of placing a grid and adding components to a form no longer
    matters
  - added newtGridAddComponentsToForm()


author: Erik Troan <ewt@redhat.com>
changelog:
  - Cleaned up listbox
  - Added whiptail
  - Added newtButtonCompact button type and associated colors
  - Added newtTextboxGetNumLines() and newtTextboxSetHeight()


author: David Malcolm <dmalcolm@redhat.com> - 0.6.10-3
changelog:
  - cherrypick upstream patch for easy_install (ignore locally installed
  packages: patch0)
  - provide "python-distribute"
  - add README.txt and other .txt documentation files to the payload
  Resolves: rhbz#613138


author: David Malcolm <dmalcolm@redhat.com> - 0.6.10-2
changelog:
  - delete stray ".orig" file
  - change %define to %global ; use %{buildroot} rather than env var
  - move %check lower down
  - explicitly list executables


author: David Malcolm <dmalcolm@redhat.com> - 0.6.10-1
changelog:
  - Switch over to using the "distribute" project; rebase to 0.6.10 (rhbz:570350)
  - Remove svn patch as upstream has chosen to go with an easier change for now.
  - Move easy_install back into the main package as the needed files have been
    moved from python-devel to the main python package.


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 0.6c7-2
changelog:
  - Move pretty much everything back into runtime in order to avoid more
    brokenness than we're trying to address with these fixes.


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 0.6c7-1
changelog:
  - Upstream 0.6c7
  - Move some things from devel into runtime, in order to not break other
    projects.


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 0.6c6-2
changelog:
  - Make license tag conform to the new Licensing Guidelines
  - Move everything except pkg_resources.py into a separate -devel package
    so we avoid bundling python-devel when it's not required (#251645)
  - Do not package tests


author: Konstantin Ryabitsev <icon@fedoraproject.org> - 0.6b3-1
changelog:
  - Taking over from Ignacio
  - Version 0.6b3
  - Ghost .pyo files in sitelib
  - Add license files
  - Remove manual python-abi, since we're building FC4 and up
  - Kill .exe files


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.4.4-105.0.2.1.el6
changelog:
  - qemu: ioport_read, ioport_write: be defensive about 32-bit addresses master XSA-199 (ian.jackson@eu.citrix.com) [OraBug: 25119498]


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 3.1.7-10.el6_7.2
changelog:
  - Man & info pages fixed to describe the '--posix' usage correctly,
    as discussed in #1271443 (comments #1 and #2)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.1.7-7
changelog:
  - Fix double free in free_wstr (#648906)
  - Prevent overflows by increasing YYMAXDEPTH and YYSTACKSIZE
    byacc/bison parameters (#743343)
  - Preserve argv by copying the strings (#740673)


author: Stepan Kasal <skasal@redhat.com> - 3.1.6-4
changelog:
  - remove the versioned binaries even if the version is modified by the
    snapshot patch, modify the file list to check this (#476166)
  - update the snapshot patch, dropping the upstreamed
    gawk-3.1.5-test-lc_num1.patch


author: Stepan Kasal <skasal@redhat.com> - 3.1.6-1
changelog:
  - new upstream version
  - drop Patch1: gawk-3.1.3-getpgrp_void.patch, it seems to be a workaround
    for a bug in gcc that seemed to exist at Fedora Core 1 times, see #114246
  - drop patches 2-13, they have been integrated upstream


author: Stepan Kasal <skasal@redhat.com> - 3.1.5-16
changelog:
  - Add gawk-3.1.5-quote-sticky.patch
  - Resolves: #299551
  - Add gawk-3.1.5-test-lc_num1.patch, a test for that bug.
  - BuldRequire autoconf and automake, for the test patch.
  - Add coment explaining why bison is buildrequired.
  - Remove BuildRequire: flex.


author: Karel Zak <kzak@redhat.com> 3.1.5-15
changelog:
  - fix #225777 - clean up spec file according to Fedora Merge Review
    suggestions (thanks to Dan Horak and Patrice Dumas)


author: Karel Zak <kzak@redhat.com> 3.1.5-9
changelog:
  - fix numeric conversion problem (patch by Aharon Robbins)
    http://lists.gnu.org/archive/html/bug-gnu-utils/2006-07/msg00004.html


author: Karel Zak <kzak@redhat.com> 3.1.5-5
changelog:
  - fix "gawk -v BINMODE=1" (patch by Aharon Robbins)
  - fix conversion from large number to string (patch by Aharon Robbins)


author: Karel Zak <kzak@redhat.com> 3.1.5-4
changelog:
  - fix off-by-one error in assignment of sentinel value at 
    end of FIELDWIDTHS array. (patch by Aharon Robbins)


author: Karel Zak <kzak@redhat.com> 3.1.4-2
changelog:
  - add dfacache.patch for fix LC_ALL=de_DE.UTF-8 ./gawk '/^[ \t]/ { print }',
    (by Aharon Robbins), #135210, #131498
  - add flonum.patch for "improved" handling of non-numeric constants,
    second version of patch (by Aharon Robbins)
    http://lists.gnu.org/archive/html/bug-gnu-utils/2004-10/msg00046.html
  - add nextc.patch (by Andreas Schwab)
    http://lists.gnu.org/archive/html/bug-gnu-utils/2004-09/msg00093.html
  - add uplow.patch for fix the wide char handling (by Stepan Kasal)
    http://lists.gnu.org/archive/html/bug-gnu-utils/2004-10/msg00099.html


author: Elliot Lee <sopwith@redhat.com> 3.1.1-7
changelog:
  - Add gawk-3.1.1-ngroups.patch, because NGROUPS_MAX comes from 
  sys/param.h, and awk.h changes behaviour depending on whether NGROUPS_MAX 
  is defined or not. (For ppc64)


author: Trond Eivind Glomsrod <teg@redhat.com>
changelog:
  - /usr/bin/gawk can't point at gawk - infinite symlink
  - /usr/bin/awk can't point at gawk - infinite symlink


author: Petr Stodulka <pstodulk@redhat.com> - 6.0-2
changelog:
  - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
    Resolves: #1196132 #1196120 #1196124 #1196128


author: Karel Klic <kklic@redhat.com> - 6.0-1
changelog:
  - Rebase to upstream 6.0
    Resolves: #594860
  - Fixed a buffer overflow (rhbz#532380, unzip-6.0-attribs-overflow.patch)
  - Generate debuginfos (rhbz#540220, unzip-6.0-nostrip.patch)
  - New upstream version
  - Compiled using `make generic_gcc` (includes asm)
  - Removed unzip542-rpmoptflags.patch, because RPM_OPT_FLAGS 
    are provided using command line
  - Removed unzip-5.51-link-segv.patch, because the link file 
    is not reopened in the current version
  - Removed unzip-5.51-link-segv2.patch, the bug was already fixed 
    in open_outfile in 5.52
  - Removed unzip-5.52-toctou.patch (CAN-2005-2475), the vulnerability 
    is fixed in the current version
  - Removed unzip-5.52-near-4GB.patch, unzip-5.52-near-4GB2.patch, 
    unzip-5.52-4GB3.patch, and unzip-5.52-4GB_types.patch, because 
    the current version supports large files
  - Removed unzip-5.52-long-filename.patch, the current version
    fixes the vulnerability by checking the length of command line 
    arguments in unzip.c
  - Removed unzip-5.52-makefile.patch, because we no longer create
    the link manually
  - Removed unzip-5.52-open.patch, the current version uses umask.
  - Removed unzip-5.52-cve-2008-0888.patch, the current version
    fixes this vulnerability
  - Ported unzip-5.52-249057.patch to current version (unzip-6.0-close)


author: Ivana Varekova <varekova@redhat.com> 5.52-2
changelog:
  - fix bug 180078 - unzip -l causing error
  - fix CVE-2005-4667 - unzip long file name buffer overflow


author: Lon Hohberger <lhh@redhat.com> 5.50-30
changelog:
  - SECURITY Round 3: Fix up original patch (from 5.50-9) to fix
  ^V/ exploit, but still allow '-:', which the other patch (5.50-18)
  does not allow.  Never allow explicit writing to the root
  directory; force users to change there and extract it manually.


author: Lon Hohberger <lhh@redhat.com> 5.50-18
changelog:
  - SECURITY: Incorporate far cleaner patch from Ben Laurie
  <ben@algroup.co.uk> which also fixes ^V/ (quote-slash).
  Patch checks post-decode as opposed to inline as previous
  patch does.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 5.42
  - Don't strip binaries explicitly
  - build without assembly, it doesn't seem to increase performance 
  - make it respect RPM_OPT_FLAGS, define _GNU_SOURCE
  - use %{_tmppath}
  - "License:" replaces "Copyright:"
  - Update URL
  - include zipgrep
  - COPYING doesn't exist anymore, include LICENSE instead


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.31.1.el6]
changelog:
  - [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
  - [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
  - [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
  - [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
  - [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
  - [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/asm: Add a patch_site macro & helpers for patching instructions (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
  - [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
  - [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
  - [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
  - [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
  - [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.30.1.el6]
changelog:
  - [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
  - [netdrv] bonding: don't set slave->link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
  - [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.29.1.el6]
changelog:
  - [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
  - [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
  - [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
  - binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
  - [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.28.1.el6]
changelog:
  - [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
  - [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
  - [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
  - [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
  - [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
  - [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
  - [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
  - [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.27.1.el6]
changelog:
  - [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.26.1.el6]
changelog:
  - [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1764544]
  - [drm] vmwgfx: refuse to hibernate if we have any resources v2 (Kenneth Yin) [1748195]
  - [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1739948]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.25.1.el6]
changelog:
  - [kvm] KVM: VMX: Set VMENTER_L1D_FLUSH_NOT_REQUIRED if !X86_BUG_L1TF (Waiman Long) [1733760]
  - [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746799] {CVE-2019-14821}
  - [virt] KVM: MMIO: Lock coalesced device when checking for available entry (Bandan Das) [1746799] {CVE-2019-14821}
  - [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1749512]
  - [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1749512]
  - [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1749512]
  - [security] KEYS: prevent creating a different user's keyrings (David Howells) [1537371]
  - [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
  - [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
  - [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
  - [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
  - [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.24.1.el6]
changelog:
  - [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
  - [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
  - [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
  - [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
  - [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
  - [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
  - [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
  - [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.21.1.el6]
changelog:
  - [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
  - [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.20.1.el6]
changelog:
  - [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
  - [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.19.1.el6]
changelog:
  - [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1732107]
  - [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1728931]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.18.1.el6]
changelog:
  - [virt] xenbus: don't look up transaction IDs for ordinary writes (Vitaly Kuznetsov) [1663262]
  - [virt] xenbus: don't BUG() on user mode induced condition (Vitaly Kuznetsov) [1663262]
  - [virt] xenbus: Add proper handling of XS_ERROR from Xenbus for transactions (Vitaly Kuznetsov) [1663262]
  - [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638193] {CVE-2018-17972}
  - [crypto] salsa20 - fix blkcipher_walk API usage (Bruno Eduardo de Oliveira Meneguele) [1543984]
  - [mm] vmscan: do not loop on too_many_isolated for ever (Rafael Aquini) [1658254]
  - [x86] spec_ctrl: Don't report the use of retpoline on Skylake as vulnerable (Waiman Long) [1666102]
  - [mm] try harder to allocate vmemmap blocks (Rafael Aquini) [1591394]
  - [v4l] dvb: revert spectre v1 mitigation (Josh Poimboeuf) [1647975]
  - [fs] binfmt_misc.c: do not allow offset overflow (Bill O'Donnell) [1710149]
  - [x86] pti: Don't use PCID and INVPCID in x86-32 (Waiman Long) [1702782]
  - [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664197] {CVE-2019-5489}
  - [x86] spec: Move retp_compiler() inline function to bugs.c (Waiman Long) [1722185]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.17.1.el6]
changelog:
  - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
  - [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
  - [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
  - [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
  - [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
  - [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
  - [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
  - [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.16.1.el6]
changelog:
  - [virt] xenbus: Fix memory leak on release (Vitaly Kuznetsov) [1661666]
  - [fs] dcache: fix locking around setting DCACHE_SHRINKING flag (Miklos Szeredi) [1672269]
  - [x86] KVM: SVM: Selective cr0 intercept (Wei Huang) [1655873]
  - [x86] KVM: SVM: Restore unconditional cr0 intercept under npt (Wei Huang) [1655873]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.15.1.el6]
changelog:
  - [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
  - [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
  - [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
  - [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
  - [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
  - [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
  - [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
  - [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
  - [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.12.1.el6]
changelog:
  - [x86] vDSO: Don't generate retpoline for indirect call (Waiman Long) [1638552]
  - [fs] cifs: fix reparse point/symlink breakage (Leif Sahlberg) [1636484]
  - [scsi] qla2xxx: Mask off Scope bits in retry delay (Himanshu Madhani) [1588133]
  - [net] tcp: make tcp_retransmit_timer a no-op on empty write queue (Paolo Abeni) [1585892]
  - [kernel] sched/sysctl: Check user input value of sysctl_sched_time_avg (Lauro Ramos Venancio) [1579128]
  - [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] hugetlbfs: switch to inode_init_owner() (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] udf: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ubifs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ramfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ext4: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ext3: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ext2: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] btrfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] vfs: Add inode uid,gid,mode init helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [s390] kernel: adapt to changed CPU vulnerabilities function prototypes (Hendrik Brueckner) [1625381]
  - [s390] detect etoken facility (Hendrik Brueckner) [1625381]
  - [s390] Correct register corruption in critical section cleanup (Hendrik Brueckner) [1625381]
  - [s390] remove indirect branch from do_softirq_own_stack (Hendrik Brueckner) [1625381]
  - [s390] move spectre sysfs attribute code (Hendrik Brueckner) [1625381]
  - [s390] kernel: use expoline for indirect branches (Hendrik Brueckner) [1625381]
  - [s390] ftrace: use expoline for indirect branches (Hendrik Brueckner) [1625381]
  - [s390] move expoline assembler macros to a header (Hendrik Brueckner) [1625381]
  - [s390] correct module section names for expoline code revert (Hendrik Brueckner) [1625381]
  - [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Oleksandr Natalenko) [1670328]
  - [perf] Fix a race between ring_buffer_detach() and ring_buffer_attach() (Jiri Olsa) [1589340]
  - [perf] Fix mmap() accounting hole (Jiri Olsa) [1627672]
  - [perf] Fix perf mmap bugs (Jiri Olsa) [1627672]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.11.1.el6]
changelog:
  - [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
  - [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.10.1.el6]
changelog:
  - [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
  - [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
  - [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
  - [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
  - [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
  - [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
  - [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
  - [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
  - [fs] seq_file: always clear m->count when we free m->buf (Rodrigo Freire) [1632434]
  - [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
  - [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
  - [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.8.1.el6]
changelog:
  - [block] fix warning on lockdep_assert_held(q->queue_lock) (Ming Lei) [1624747]
  - [kvm] vmx: fix vmwrite to invalid VMCS (Radim Krcmar) [1602011]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.7.1.el6]
changelog:
  - [s390] cio: update chpid descriptor after resource accessibility event (Hendrik Brueckner) [1574471]
  - [s390] af_iucv: enable control sends in case of SEND_SHUTDOWN (Hendrik Brueckner) [1559048]
  - [s390] qeth: repair SBAL elements calculation (Hendrik Brueckner) [1559021]
  - [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
  - [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
  - [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]
  - [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
  - [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.6.1.el6]
changelog:
  - [x86] set __max_smt_threads for 1 core systems (Prarit Bhargava) [1623255]
  - [md] dm rq: fix a race condition in rq_completed() (Ming Lei) [1574568]
  - [scsi] scsi_transport_fc: Hold queue lock while calling blk_run_queue_async() (Ming Lei) [1574568]
  - [block] Avoid scheduling delayed work on a dead queue (Ming Lei) [1574568]
  - [block] Avoid that request_fn is invoked on a dead queue (Ming Lei) [1574568]
  - [block] Let blk_drain_queue() caller obtain the queue lock (Ming Lei) [1574568]
  - [block] Rename queue dead flag (Ming Lei) [1574568]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.5.1.el6]
changelog:
  - [s390] dasd: fix IO error for newly defined devices (Hendrik Brueckner) [1574448]
  - [s390] dasd: fix failing path verification (Hendrik Brueckner) [1581684]
  - [s390] qeth: on channel error, reject further cmd requests (Hendrik Brueckner) [1562009]
  - [s390] qdio: fix access to uninitialized qdio_q fields (Hendrik Brueckner) [1581685]
  - [powerpc] stf-barrier: update (rfi_)enabled_flush_types as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update debugfs as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update handle_ssbd() as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update stf_barrier_enable() as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: add cpu_show_spec_store_bypass() as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: add comment as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: move code from setup_64.c to security.c as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: move code from setup.h to security_features.h as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update fallback routine as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update entry barrier slot as in upstream (Gustavo Duarte) [1585299]
  - [x86] Add host_initiated check in reading MSR_AMD64_VIRT_SPEC_CTRL (Wei Huang) [1608576]
  - [x86] KVM: pass host_initiated to functions that read MSRs (Wei Huang) [1608576]
  - [fs] gfs2: Special-case rindex for gfs2_grow (Robert S Peterson) [1384184]
  - [fs] Revert "[fs] gfs2: Special case the rindex in gfs2_write_alloc_required()" (Robert S Peterson) [1384184]
  - [net] ip: process in-order fragments efficiently (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] ip: add helpers to process in-order fragments faster. (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] ipv6: defrag: drop non-last frags smaller than min mtu (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] ip: use rb trees for IP frag queue. (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] ip: discard IPv4 datagrams with overlapping segments. (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] net: modify skb_rbtree_purge to return the truesize of all purged skbs. (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] net: speed up skb_rbtree_purge() (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] skbuff: Rename RHEL6 version of skb_tree_purge() to skb_tree_purge_sk() (Stefano Brivio) [1613925] {CVE-2018-5391}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.4.1.el6]
changelog:
  - [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}
  - [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}
  - [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
  - [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
  - [kvm] VMX: Fix host GDT.LIMIT corruption (CVE-2018-10301) (Paolo Bonzini) [1601851] {CVE-2018-10901}
  - [x86] Initialize __max_smt_threads to 1 (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: detect SMT disabled by BIOS (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Add topology_max_smt_threads() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix incorrect error return code in vm_insert_pfn() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Initialize the vmx_l1d_flush_pages' content (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Don't flush L1D cache if VMENTER_L1D_FLUSH_NEVER (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Take out the unused nosmt module parameter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm/dump_pagetables: Add a check_l1tf debugfs file (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries aganst L1TF for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Make flush_l1d visible in /proc/cpuinfo (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [Documentation] Add section about CPU vulnerabilities (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs, kvm: Introduce boot-time control of L1TF mitigations (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Expose SMT control init function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Allow runtime control of L1D flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Serialize L1D flush parameter setter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Move l1tf setup function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: Handle EPT disabled state proper (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Drop L1TF MSR list approach (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] litf: Introduce vmx status variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Online siblings when SMT control is turned on (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add find_msr() helper function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush logic (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Make indirect call speculation safe (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Enable acknowledge interupt on vmexit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D MSR based flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush algorithm (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add module argument for L1TF mitigation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] x86: Introducing kvm_x86_ops VM init/destroy hooks (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Boot HT siblings at least once (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] Revert "x86/apic: Ignore secondary threads if nosmt=force" (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix up pte->pfn conversion for PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpufeatures: Add detection of L1D cache flush support. (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Extend 64bit swap file size limit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] apic: Ignore secondary threads if nosmt=force (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/intel: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/topology: Provide detect_extended_topology_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/common: Provide detect_ht_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Remove the pointless detect_ht() call (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Remove the pointless CPU printout (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Provide knobs to control SMT (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Split do_cpu_down() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Provide topology_smt_supported() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] smp: Provide topology_is_primary_thread() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Move the l1tf function and define pr_fmt properly (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Limit swap file size to MAX_PA/2 (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Add sysfs reporting for l1tf (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect PROT_NONE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries against L1TF (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Change order of offset/type in swap entry (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Fix incorrect vulnerabilities files function prototypes (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Export the internal __cpu_bugs variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] intel-family.h: Add GEMINI_LAKE SOC (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Fix swap entry comment and macro (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Move swap offset/type up in PTE to work around erratum (Waiman Long) [1593376] {CVE-2018-3620}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.1.el6]
changelog:
  - [infiniband] ib/iser: Rewrite bounce buffer code path (Don Dutile) [1585312]
  - [sound] alsa: pcm: prevent UAF in snd_pcm_info (CVE-2017-0861) (Jaroslav Kysela) [1565188] {CVE-2017-0861}
  - [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550176] {CVE-2018-7566}
  - [sound] alsa: seq: Fix use-after-free at creating a port (Jaroslav Kysela) [1503383] {CVE-2017-15265}
  - [sound] alsa: seq: Make ioctls race-free (Jaroslav Kysela) [1537452] {CVE-2018-1000004}
  - [mm] reduce total RAM held in per-CPU pvecs by flushing them on compound/THP page arrival (Larry Woodman) [1575819]
  - [usb] acm: fix the computation of the number of data bits (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [misc] spectre: fix gadgets found by smatch scanner, part 2 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] kvm/vmx: Remove barrier_nospec() in slot_largepage_idx() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kvm] Remove memory alias support (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [misc] spectre: fix gadgets found by smatch scanner (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] posix-timers: Protect posix clock array access against speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[] (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [ipc] sysvipc/sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [documentation] Document array_index_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Include <asm/barrier.h> dependency (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589032] {CVE-2018-3693}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.2.1.el6]
changelog:
  - [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
  - [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
  - [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
  - [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
  - [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
  - [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
  - [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.1.1.el6]
changelog:
  - [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1574592]
  - [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1574592]
  - [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1574592]
  - [x86] microcode: Sanitize per-cpu microcode reloading interface (Prarit Bhargava) [1574592]
  - [x86] virt_spec_ctrl: Set correct host SSDB value for AMD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Fix missing void (Waiman Long) [1584356] {CVE-2018-3639}
  - [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584356] {CVE-2018-3639}
  - [uapi] prctl: Add force disable speculation (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
  - [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Show IBPB in the Spectre_v2 sysfs file (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] pti: Check MSR_IA32_ARCH_CAPABILITIES for Meltdown vulnearability (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] pti: Fix kexec warning on debug kernel (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] kvm/fpu: Enable eager FPU restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] always enable eager FPU by default (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Load xsave pointer *after* initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fix 32-bit signal frame handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Always restore_xinit_state() when use_eager_cpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Rename drop_init_fpu() to fpu_reset_state() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fix math_state_restore() race with kernel_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fold __drop_fpu() into its sole user (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't abuse drop_init_fpu() in flush_thread() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Introduce restore_init_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Document user_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Change xstateregs_get()/set() to use ->xsave.i387 rather than ->fxsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Always allow FPU in interrupt if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Introduce per-cpu in_kernel_fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Change math_error() to use unlazy_fpu(), kill (now) unused save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Merge simd_math_error() into math_error() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't reset thread.fpu_counter (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Allow FPU to be used at interrupt time even with eagerfpu (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387.c: Initialize thread xstate only on CPU0 only once (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] kvm: fix kvm's usage of kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] rhel: initialize scattered CPUID features early (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: make eagerfpu= boot param tri-state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: enable eagerfpu by default for xsaveopt (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: decouple non-lazy/eager fpu restore from xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: use non-lazy fpu restore for processors supporting xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: drop_fpu() before restoring new state from sigframe (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Unify signal handling code paths for x86 and x86_64 kernels (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: drop the fpu state during thread exit (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] signals: ia32_signal.c: add __user casts to fix sparse warnings (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Consolidate inline asm routines for saving/restoring fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] signal: Cleanup ifdefs and is_ia32, is_x32 (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu/xsave: Keep __user annotation in casts (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] debug: Add KERN_<LEVEL> to bare printks, convert printks to pr_<level> (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] extable: Remove open-coded exception table entries in arch/x86/include/asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: Split up <asm/i387.h> into exported and internal interfaces (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: Uninline the generic FP helpers that we expose to kernel modules (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: (DON'T ACTUALLY) support lazy restore of FPU state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: use 'restore_fpu_checking()' directly in task switching code (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: fix up some fpu_counter confusion (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: re-introduce FPU state preloading at context switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move TS_USEDFPU flag from thread_info to task_struct (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move AMD K7/K8 fpu fxsave/fxrstor workaround from save to restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: do not preload FPU state at task switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: don't ever touch TS_USEDFPU directly, use helper functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move TS_USEDFPU clearing out of __save_init_fpu and into callers (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: fix x86-64 preemption-unsafe user stack save/restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: math_state_restore() isn't called from asm (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fix potentially dangerous trailing '; ' in #defined values/expressions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-32, fpu: Fix FPU exception handling on non-SSE systems (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Fix common misspellings (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] kvm: Initialize fpu state in preemptible context (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-32, fpu: Rewrite fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Remove PSHUFB_XMM5_* macros (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Remove unnecessary ifdefs from i387 code. (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Simplify constraints for fxsave/fxtstor (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Fix cs value in convert_from_fxsr() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Disable preemption when using TS_USEDFPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge __save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge tolerant_fwait() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge fpu_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Disable xsave in i387 emulation mode (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Make xstate_enable_boot_cpu() __init, protect on CPU 0 (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Add __init attribute to setup_xstate_features() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Make init_xstate_buf static (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Check cpuid level for XSTATE_CPUID (0x0d) (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Introduce xstate enable functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Do not include asm/i387.h in asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Avoid unnecessary __clear_user() and xrstor in signal handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Cleanup return codes in check_for_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Separate fpu and xsave initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Move boot cpu initialization to xsave_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Revert "[x86] fpu: change save_i387_xstate() to rely on unlazy_fpu()" (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Revert "[x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal()" (Paolo Bonzini) [1589047] {CVE-2018-3665}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.el6]
changelog:
  - [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
  - [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
  - [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Clean up entry code & remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
  - [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
  - [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
  - [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
  - [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
  - [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-753.el6]
changelog:
  - [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
  - [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
  - [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-752.el6]
changelog:
  - [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
  - [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
  - [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
  - [net] security: export security_sk_clone (Marcelo Leitner) [1571357]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-751.el6]
changelog:
  - [md] dm thin: fix regression that caused discards to be disabled if passdown was (Mike Snitzer) [1569377]
  - [s390] configs: enable auto expoline support (Hendrik Brueckner) [1554959]
  - [s390] correct nospec auto detection init order (Hendrik Brueckner) [1554959]
  - [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1554959]
  - [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1554959]
  - [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1554959]
  - [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1554959]
  - [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1554959]
  - [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1554959]
  - [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1554959]
  - [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1554959]
  - [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1554959]
  - [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1554959]
  - [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1554959]
  - [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1568241]
  - [net] sctp: verify size of a new chunk in _sctp_make_chunk() (Stefano Brivio) [1551908] {CVE-2018-5803}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-750.el6]
changelog:
  - [fs] fuse: fix punching hole with unaligned end (Miklos Szeredi) [1387473] {CVE-2017-15121}
  - [documentation] kdump: fix documentation about panic_on_warn to match rhel6 (Pingfan Liu) [1555196]
  - [fs] Provide sane values for nlink (Leif Sahlberg) [1554342]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-749.el6]
changelog:
  - [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1561788]
  - [powerpc] Move default security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1561788]
  - [lib] seq: Add seq_buf_printf() (Mauricio Oliveira) [1561788]
  - [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1561786]
  - [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1562725]
  - [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1562725]
  - [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1562725]
  - [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1562725]
  - [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1562725]
  - [x86] entry: Remove extra argument in call instruction (Waiman Long) [1562552]
  - [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1557562 1562552]
  - [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1558845]
  - [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1558845]
  - [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1558845]
  - [x86] mm: Dump both kernel & user page tables at fault (Waiman Long) [1558845]
  - [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1558845]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-748.el6]
changelog:
  - [mm] fold arch_randomize_brk into ARCH_HAS_ELF_RANDOMIZE (Bhupesh Sharma) [1494380]
  - [mm] brk: fix min_brk lower bound computation for COMPAT_BRK (Bhupesh Sharma) [1494380]
  - [mm] split ET_DYN ASLR from mmap ASLR (Bhupesh Sharma) [1494380]
  - [s390] redefine randomize_et_dyn for ELF_ET_DYN_BASE (Bhupesh Sharma) [1494380]
  - [mm] expose arch_mmap_rnd when available (Bhupesh Sharma) [1494380]
  - [s390] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [s390] mmap: randomize mmap base for bottom up direction (Bhupesh Sharma) [1494380]
  - [powerpc] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [x86] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: create Kconfig variable for PIE randomization (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: PIE: make PF_RANDOMIZE check comment more accurate (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: fix PIE execution with randomization disabled (Bhupesh Sharma) [1494380]
  - [acpi] acpica: Support calling _REG methods within ACPI interpreter (Lenny Szubowicz) [1522849]
  - [acpi] acpica: Function to test if ACPI interpreter already entered (Lenny Szubowicz) [1522849]
  - [acpi] acpica: Function to test if ACPI mutex held by this thread (Lenny Szubowicz) [1522849]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-747.el6]
changelog:
  - [fs] gfs2: Check for the end of metadata in trunc_dealloc (Robert S Peterson) [1559928]
  - [fs] gfs2: clear journal live bit in gfs2_log_flush (Robert S Peterson) [1559928]
  - [netdrv] vmxnet3: fix tx data ring copy for variable size (Neil Horman) [1530378]
  - [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1559386]
  - [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1554631]
  - [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags & wrapper (Mauricio Oliveira) [1554631]
  - [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1554630]
  - [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1554630]
  - [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1554630]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-746.el6]
changelog:
  - [dm] fix race between dm_get_from_kobject() and __dm_destroy() (Mike Snitzer) [1551999] {CVE-2017-18203}
  - [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1557562]
  - [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1550599] {CVE-2017-5754}
  - [ipmi] pick up slave address from SMBIOS on an ACPI device (Tony Camuso) [1484525]
  - [ipmi] fix watchdog timeout set on reboot (Tony Camuso) [1484525]
  - [ipmi] fix watchdog hang on panic waiting for ipmi response (Tony Camuso) [1484525]
  - [ipmi] use smi_num for init_name (Tony Camuso) [1484525]
  - [ipmi] move platform device creation earlier in the initialization (Tony Camuso) [1484525]
  - [ipmi] clean up printks (Tony Camuso) [1484525]
  - [ipmi] cleanup error return (Tony Camuso) [1484525]
  - [md] raid0: apply base queue limits *before* disk_stack_limits (Xiao Ni) [1417294]
  - [md] raid0: update queue parameter in a safer location (Xiao Ni) [1417294]
  - [md] raid0: conditional mddev->queue access to suit dm-raid (Xiao Ni) [1417294]
  - [md] raid0: access mddev->queue (request queue member) conditionally because it is not set when accessed from dm-raid (Xiao Ni) [1417294]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-745.el6]
changelog:
  - [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1550599] {CVE-2017-5754}
  - [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548432] {CVE-2017-13166}
  - [scsi] lpfc: Fix crash from memory alloc at interrupt level with GFP_KERNEL set (Dick Kennedy) [1540706]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-744.el6]
changelog:
  - [dm] io: fix duplicate bio completion due to missing ref count (Mikulas Patocka) [1334224]
  - [fs] gfs2: Reduce contention on gfs2_log_lock (Robert S Peterson) [1399822]
  - [fs] gfs2: Inline function meta_lo_add (Robert S Peterson) [1399822]
  - [fs] gfs2: Switch tr_touched to flag in transaction (Robert S Peterson) [1399822]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-743.el6]
changelog:
  - [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548432] {CVE-2017-13166}
  - [kernel] cgroup: initialize xattr before calling d_instantiate() (Aristeu Rozanski) [1533523]
  - [fs] ext*: Don't clear SGID when inheriting ACLs (Andreas Grunbacher) [1473482]
  - [fs] gfs2: writeout truncated pages (Robert S Peterson) [1331076]
  - [fs] export __block_write_full_page (Robert S Peterson) [1331076]
  - [scsi] mark queue as PREEMPT_ONLY before setting quiesce (Ming Lei) [1462959]
  - [block] call blk_queue_enter() before allocating request (Ming Lei) [1462959]
  - [block] introduce blk_queue_enter() (Ming Lei) [1462959]
  - [mm] shmem: replace_page must flush_dcache and others (Waiman Long) [1412337]
  - [mm] shmem: replace page if mapping excludes its zone (Waiman Long) [1412337]
  - [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] spec_ctrl/32: Enable IBRS processing on kernel entries & exits (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Restore segments before int registers (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Unshare NMI return path (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1550599] {CVE-2017-5754}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-742.el6]
changelog:
  - [mm] prevent /proc/sys/vm/percpu_pagelist_fraction divide-by-zero (Dave Anderson) [1405879]
  - [fs] proc: Resolve performance issues with multiple /proc/stat reads (Prarit Bhargava) [1544565]
  - [fs] nfs: fix pnfs direct write memory leak (Scott Mayhew) [1536900]
  - [fs] dcache: prevent multiple shrink_dcache_parent() on the same dentry (Miklos Szeredi) [1269288]
  - [fs] fifo: do not restart open() if it already found a partner (Miklos Szeredi) [1482983]
  - [audit] reinstate check for failed execve (Denys Vlasenko) [1488822]
  - [perf] x86/intel/uncore: Make PCI and MSR uncore independent (Jiri Olsa) [1427324]
  - [perf] fix perf_event_comm() vs. exec() assumption (Jiri Olsa) [1478980]
  - [lib] prevent BUG in kfree() due to memory exhaustion in __sg_alloc_table() (Larry Woodman) [1454453]
  - [kernel] sched/core: Rework rq->clock update skips (Lauro Ramos Venancio) [1212959]
  - [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1212959]
  - [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1212959]
  - [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1212959]
  - [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1212959]
  - [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1495167]
  - [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1495167]
  - [fs] gfs2: Defer deleting inodes under memory pressure (Andreas Grunbacher) [1255872]
  - [fs] gfs2: gfs2_clear_inode, gfs2_delete_inode: Put glocks asynchronously (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Get rid of gfs2_set_nlink (Andreas Grunbacher) [1255872]
  - [fs] add set_nlink() (Andreas Grunbacher) [1255872]
  - [fs] gfs2: gfs2_glock_get: Wait on freeing glocks (Andreas Grunbacher) [1255872]
  - [fs] gfs2: gfs2_create_inode: Keep glock across iput (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Clean up glock work enqueuing (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Protect gl->gl_object by spin lock (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Get rid of flush_delayed_work in gfs2_clear_inode (Andreas Grunbacher) [1255872]
  - [fs] revert "gfs2: Wait for iopen glock dequeues" (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Fixup to "Clear gl_object if gfs2_create_inode fails" (Andreas Grunbacher) [1506281]
  - [scsi] dual scan thread bug fix (Ewan Milne) [1508512]
  - [scsi] fix our current target reap infrastructure (Ewan Milne) [1508512]
  - [scsi] bnx2fc: Fix check in SCSI completion handler for timed out request (Chad Dupuis) [1538168]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-741.el6]
changelog:
  - [net] netfilter: xt_TCPMSS: add more sanity tests on tcph->doff (Florian Westphal) [1543091] {CVE-2017-18017}
  - [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543091] {CVE-2017-18017}
  - [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543091] {CVE-2017-18017}
  - [net] sctp: return error if the asoc has been peeled off in sctp_wait_for_sndbuf (Hangbin Liu) [1470559]
  - [net] sctp: use the right sk after waking up from wait_buf sleep (Hangbin Liu) [1470559]
  - [net] sctp: do not free asoc when it is already dead in sctp_sendmsg (Hangbin Liu) [1470559]
  - [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1535024]
  - [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1535024]
  - [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1535024]
  - [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1535024]
  - [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1532167]
  - [net] revert "net: use lib/percpu_counter API for fragmentation mem accounting" (Jesper Brouer) [1508504]
  - [scsi] lpfc: fix pci hot plug crash in list_add call (Dick Kennedy) [1542773]
  - [scsi] hpsa: update driver version (Joseph Szczypek) [1541517]
  - [scsi] hpsa: correct resets on retried commands (Joseph Szczypek) [1541517]
  - [scsi] hpsa: rescan later if reset in progress (Joseph Szczypek) [1541517]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-740.el6]
changelog:
  - [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1535645]
  - [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1535645]
  - [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1535645]
  - [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1535645]
  - [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1535645]
  - [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1535645]
  - [x86] retpoline/efi: Convert stub indirect calls & jumps (Waiman Long) [1535645]
  - [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1535645]
  - [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1535645]
  - [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1535645]
  - [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1535645]
  - [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1535645]
  - [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1535645]
  - [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1535645]
  - [x86] Use IBRS for firmware update path (Waiman Long) [1535645]
  - [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1535645]
  - [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1535645]
  - [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1535645]
  - [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1535645]
  - [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1535645]
  - [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1535645]
  - [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1535645]
  - [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1535645]
  - [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1535645]
  - [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1535645]
  - [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1535645]
  - [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1535645]
  - [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1535645]
  - [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1535645]
  - [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1535645]
  - [x86] mce: Make machine check speculation protected (Waiman Long) [1535645]
  - [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1535645]
  - [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1535645]
  - [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1535645]
  - [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1535645]
  - [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1535645]
  - [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1535645]
  - [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1535645]
  - [x86] retpoline: Add initial retpoline support (Waiman Long) [1535645]
  - [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1535645]
  - [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1535645]
  - [x86] cpufeatures: Add X86_BUG_SPECTRE_V(12) (Waiman Long) [1535645]
  - [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1535645]
  - [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1535645]
  - [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1535645]
  - [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1535645]
  - [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1535645]
  - [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1535645]
  - [x86] alternatives: Add missing 'n' at end of ALTERNATIVE inline asm (Waiman Long) [1535645]
  - [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1535645]
  - [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1535645]
  - [x86] alternatives: Document macros (Waiman Long) [1535645]
  - [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1535645]
  - [x86] alternatives: Add instruction padding (Waiman Long) [1535645]
  - [x86] alternative: Add header guards to asm/alternative-asm.h (Waiman Long) [1535645]
  - [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1535645]
  - [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1535645]
  - [x86] Make .altinstructions bit size neutral (Waiman Long) [1535645]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-739.el6]
changelog:
  - [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1538543]
  - [powerpc] prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1538543]
  - [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1538542]
  - [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1538542]
  - [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1538542]
  - [s390] add ppa to system call and program check path (Hendrik Brueckner) [1538542]
  - [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1538542]
  - [s390] introduce CPU alternatives (Hendrik Brueckner) [1538542]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-738.el6]
changelog:
  - [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Fix XEN PV boot failure (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] Revert "entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel gs has been restored (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: ibrs_enabled() is expected to return > 1 (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] Revert "mm/kaiser: Disable global pages by default with KAISER" (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] Remove __cpuinitdata from some data & function (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm: Set IBPB upon context switch (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] x86: clear registers on VM exit (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] kvm: Pad RSB on VM transition (Waiman Long) [1519796] {CVE-2017-5715}
  - [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519802] {CVE-2017-5754}
  - [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519789] {CVE-2017-5753}
  - [fs] udf: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [fs] prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [netdrv] p54: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [media] uvcvideo: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519789] {CVE-2017-5753}
  - [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] Add another set of MSR accessor functions (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: enable kaiser in build (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add Kconfig (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stack trampoline (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] Separate out entry text section (Waiman Long) [1519802] {CVE-2017-5754}
  - [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519802] {CVE-2017-5754}
  - [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519802] {CVE-2017-5754}
  - [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519802] {CVE-2017-5754}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-737.el6]
changelog:
  - [hv] netvsc: get rid of completion timeouts (Vitaly Kuznetsov) [1538592]
  - [fs] gfs2: Special case the rindex in gfs2_write_alloc_required() (Andrew Price) [1384184]
  - [scsi] scsi_dh_alua: fix race condition that causes multipath to hang (Mike Snitzer) [1500192]
  - [virtio] virtio-pci: fix leaks of msix_affinity_masks (Jason Wang) [1281754]
  - [fs] sunrpc: avoid warning in gss_key_timeout (J. Bruce Fields) [1456594]
  - [fs] sunrpc: fix RCU handling of gc_ctx field (J. Bruce Fields) [1456594]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-736.el6]
changelog:
  - [drm] nouveau/disp/nv50-: execute supervisor on its own workqueue (Ben Skeggs) [1468825]
  - [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519626] {CVE-2017-1000410}
  - [scsi] storvsc: do not assume SG list is continuous when doing bounce buffers (for 4.1 and prior) (Cathy Avery) [1533175]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-735.el6]
changelog:
  - [x86] tighten /dev/mem with zeroing reads (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [char] /dev/mem: make size_inside_page() logic straight (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [char] /dev/mem: cleanup unxlate_dev_mem_ptr() calls (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [char] /dev/mem: introduce size_inside_page() (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [char] /dev/mem: remove redundant test on len (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1538340]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-734.el6]
changelog:
  - [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1518669]
  - [hv] vss: Operation timeouts should match host expectation (Mohammed Gamal) [1511431]
  - [hv] utils: reduce HV_UTIL_NEGO_TIMEOUT timeout (Mohammed Gamal) [1511431]
  - [hv] utils: Check VSS daemon is listening before a hot backup (Mohammed Gamal) [1511431]
  - [hv] utils: Continue to poll VSS channel after handling requests (Mohammed Gamal) [1511431]
  - [md] dm: clear all discard attributes in queue_limits when discards are disabled (Mike Snitzer) [1433297]
  - [md] dm: discard support requires all targets in a table support discards (Mike Snitzer) [1433297]
  - [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520817] {CVE-2017-8824}
  - [net] tcp: fix tcp_trim_head() (Paolo Abeni) [1274139]
  - [net] sctp: fix src address selection if using secondary addresses for ipv6 (Xin Long) [1445919]
  - [net] sctp: deny peeloff operation on asocs with threads sleeping on it (Hangbin Liu) [1470559]
  - [net] sctp: avoid BUG_ON on sctp_wait_for_sndbuf (Hangbin Liu) [1470559]
  - [net] tcp: fix race during timewait sk creation (Florian Westphal) [1205025]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-733.el6]
changelog:
  - [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1532786]
  - [net] dma: fix memory leak in dma_pin_iocvec_pages (Sabrina Dubroca) [1459263]
  - [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1520860]
  - [s390] fix transactional execution control register handling (Hendrik Brueckner) [1520862]
  - [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1408108]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-732.el6]
changelog:
  - [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [988988]
  - [mm] don't return 0 too early from find_get_pages() (Ian Kent) [988988]
  - [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1503322]
  - [s390] cpcmd,vmcp: avoid GFP_DMA allocations (Hendrik Brueckner) [1496105]
  - [fs] gfs2: Withdraw for IO errors writing to the journal or statfs (Robert S Peterson) [1505956]
  - [netdrv] ixgbe: Fix incorrect bitwise operations of PTP Rx timestamp flags (Ken Cox) [1523856]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-731.el6]
changelog:
  - [kernel] fix __wait_on_atomic_t() to call the action func if the counter != 0 (David Howells) [1418631]
  - [fs] fscache: fix dead object requeue (David Howells) [1333592 1418631]
  - [fs] fscache: clear outstanding writes when disabling a cookie (David Howells) [1418631]
  - [fs] fscache: initialise stores_lock in netfs cookie (David Howells) [1418631]
  - [fs] cachefiles: fix attempt to read i_blocks after deleting file (David Howells) [1418631]
  - [fs] cachefiles: fix race between inactivating and culling a cache object (David Howells) [1418631]
  - [fs] fscache: make check_consistency callback return int (David Howells) [1418631]
  - [fs] fscache: wake write waiter after invalidating writes (David Howells) [1418631]
  - [fs] cachefiles: provide read-and-reset release counters for cachefilesd (David Howells) [1418631]
  - [s390] disassembler: increase show_code buffer size (Hendrik Brueckner) [1516654]
  - [fs] sunrpc: remove BUG_ONs checking RPC_IS_QUEUED (Dave Wysochanski) [1424630]
  - [fs] nfsv4.1: nfs4_fl_prepare_ds must be careful about reporting success (Scott Mayhew) [1205448]
  - [fs] cifs: add ratelimit for the log entry that causes a lockup (Leif Sahlberg) [1494999]
  - [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447168]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-730.el6]
changelog:
  - [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1513455]
  - [fs] bio: more bio_map_user_iov() leak fixes (Ming Lei) [1503590] {CVE-2017-12190}
  - [fs] bio: fix unbalanced page refcounting in bio_map_user_iov (Ming Lei) [1503590] {CVE-2017-12190}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-729.el6]
changelog:
  - [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1504260]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-728.el6]
changelog:
  - [mm] introduce dedicated WQ_MEM_RECLAIM workqueue to do lru_add_drain_all (Waiman Long) [1463754]
  - [netdrv] cxgb4: Clear On FLASH config file after a FW upgrade (Arjun Vynipadath) [1446952]
  - [netdrv] chelsio : Fixes the issue seen on initiator while stopping the target (Sai Vemuri) [1442097]
  - [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1437991]
  - [netdrv] cxgb4vf: don't offload Rx checksums for IPv6 fragments (Davide Caratti) [1427036]
  - [scsi] qla2xxx: Get mutex lock before checking optrom_state (Himanshu Madhani) [1408549]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-727.el6]
changelog:
  - [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1492220]
  - [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1492220]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-725.el6]
changelog:
  - [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1497000]
  - [ipmi] create hardware-independent softdep for ipmi_devintf (Tony Camuso) [1457915]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-724.el6]
changelog:
  - [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1435787]
  - [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1435787]
  - [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1435787]
  - [fs] nfsd: remove the cache_hash list (Thiago Becker) [1435787]
  - [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1435787]
  - [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1435787]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-723.el6]
changelog:
  - [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1491846]
  - [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1491846]
  - [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1491846]
  - [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1491846]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-722.el6]
changelog:
  - [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1497152]
  - [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476124] {CVE-2017-11176}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-721.el6]
changelog:
  - [char] ipmi: use rcu lock around call to intf->handlers->sender() (Tony Camuso) [1466034]
  - [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481943] {CVE-2017-1000111}
  - [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1484946] {CVE-2017-7308}
  - [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1484946] {CVE-2017-7308}
  - [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr  Matousek) [1492961] {CVE-2017-1000253}
  - [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr  Matousek) [1492961] {CVE-2017-1000253}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-720.el6]
changelog:
  - [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488340] {CVE-2017-14106}
  - [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488340] {CVE-2017-14106}
  - [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477006] {CVE-2017-7542}
  - [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477006] {CVE-2017-7542}
  - [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481529] {CVE-2017-1000112}
  - [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481529] {CVE-2017-1000112}
  - [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481529] {CVE-2017-1000112}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-719.el6]
changelog:
  - [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1459636]
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490062] {CVE-2017-1000251}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-718.el6]
changelog:
  - [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1477288]
  - [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1477288]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-716.el6]
changelog:
  - [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1441773]
  - [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474782] {CVE-2017-7541}
  - [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1441169]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-714.el6]
changelog:
  - [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1464541]
  - [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1464541]
  - [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1464541]
  - [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1464541]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-713.el6]
changelog:
  - [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1459951] {CVE-2017-9074}
  - [net] gre: fix a possible skb leak (Sabrina Dubroca) [1459951] {CVE-2017-9074}
  - [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1459951] {CVE-2017-9074}
  - [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1459951] {CVE-2017-9074}
  - [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1459951] {CVE-2017-9074}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-712.el6]
changelog:
  - [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1464237 1452730] {CVE-2017-1000364}
  - [mm] revert "enlarge stack guard gap" (Larry Woodman) [1452730] {CVE-2017-1000364}
  - [mm] revert "allow JVM to implement its own stack guard pages" (Larry Woodman) [1464237]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-711.el6]
changelog:
  - [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1459978]
  - [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1452358]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-710.el6]
changelog:
  - [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1464237]
  - [mm] enlarge stack guard gap (Larry Woodman) [1452730] {CVE-2017-1000364}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-709.el6]
changelog:
  - [netdrv] bnxt_en: Update to firmware interface spec 1.5.1 (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Added support for Secure Firmware Update (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add support for firmware updates for additional processors (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Update firmware spec. to 1.3.0 (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add support for updating flash more securely (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Request firmware reset after successful firwmare update (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add hwrm_send_message_silent() (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add installed-package firmware version reporting via Ethtool GDRVINFO (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Reset embedded processor after applying firmware upgrade (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add support for upgrading APE/NC-SI firmware via Ethtool FLASHDEV (Jonathan Toppins) [1439450]
  - [net] sctp: do not inherit ipv6_(mc|ac|fl)_list from parent (Florian Westphal) [1455612] {CVE-2017-9075}
  - [net] ipv6/dccp: do not inherit ipv6_mc_list from parent (Florian Westphal) [1455612] {CVE-2017-9076 CVE-2017-9077}
  - [net] dccp/tcp: do not inherit mc_list from parent (Florian Westphal) [1455612] {CVE-2017-8890}
  - [net] ipv6: nullify ipv6_ac_list and ipv6_fl_list when creating new socket (Florian Westphal) [1455612]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-708.el6]
changelog:
  - [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1458421]
  - [mm] mempolicy.c: fix error handling in set_mempolicy and mbind (Bruno E. O. Meneguele) [1443539] {CVE-2017-7616}
  - [s390] zfcp: fix use-after-"free" in FC ingress path after TMF (Hendrik Brueckner) [1421762]
  - [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1417305]
  - [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1417305]
  - [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1417305]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-707.el6]
changelog:
  - [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1454847]
  - [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1445326]
  - [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1421760]
  - [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1421761]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-706.el6]
changelog:
  - [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1442030]
  - [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1393672]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-705.el6]
changelog:
  - [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1446755] {CVE-2017-7895}
  - [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1446755] {CVE-2017-7895}
  - [perf] fix concurrent sys_perf_event_open() vs move_group race (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [perf] remove confusing comment and move put_ctx() (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [perf] restructure perf syscall point of no return (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [perf] fix move_group() order (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [perf] generalize event->group_flags (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [scsi] libfc: quarantine timed out xids (Chris Leech) [1431440]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-704.el6]
changelog:
  - [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1448170]
  - [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1441909]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-703.el6]
changelog:
  - [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [869942]
  - [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [869942]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-702.el6]
changelog:
  - [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1440361]
  - [net] ping: implement proper locking (Jakub Sitnicki) [1438999] {CVE-2017-2671}
  - [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430578] {CVE-2017-6214}
  - [net] ipv6: ip6_fragment: fix headroom tests and skb leak (Hannes Frederic Sowa) [1412331]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-701.el6]
changelog:
  - [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1146727]
  - [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1434560]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-700.el6]
changelog:
  - [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1431508]
  - [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1436527]
  - [crypto] mpi: Fix NULL ptr dereference in mpi_powm() (Mateusz Guzik) [1398456] {CVE-2016-8650}
  - [fs] aio: properly check iovec sizes (Mateusz Guzik) [1337517] {CVE-2015-8830}
  - [fs] vfs: make AIO use the proper rw_verify_area() area helpers (Mateusz Guzik) [1337535] {CVE-2012-6701}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-699.el6]
changelog:
  - [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1429881]
  - [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1429881]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-698.el6]
changelog:
  - [sched] fair: Rework throttle_count sync (Jiri Olsa) [1250762]
  - [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1250762]
  - [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1250762]
  - [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1250762]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-697.el6]
changelog:
  - [block] fix use-after-free in seq file (Denys Vlasenko) [1418549] {CVE-2016-7910}
  - [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1425749]
  - [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1360930]
  - [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429918] {CVE-2017-2636}


author: Guido Tijskens <guido.tijskens@oracle.com> - 1.0.0-17.el6.5
changelog:
  - Make all debug keys optional
    Signed-Off by: Philippe Vanhaesendonck
    Signed-Off by: Olif Cahpman
    Signed-Off by: Guido Tijskens [bug 27192893]


author: Guido Tijskens <guido.tijskens@oracle.com> - 1.0.0-17.el6.4
changelog:
  - Show allocated size in listvdisks
    Signed-Off by: Philippe Vanhaesendonck
    Signed-Off by: Guido Tijskens [bug 27165926]


author: Guido Tijskens <guido.tijskens@oracle.com> - 1.0.0-17.el6.3
changelog:
  - backport 26947226: Don't run D/e debug keys unless ovm3.all_debug_keys flag is specified
    Signed-Off by: Philippe Vanhaesendonck
    Signed-Off by: Guido Tijskens
    Signed-Off by: Geert Noynaert [bug 27029954]


author: EL Errata <el-errata_ww@oracle.com> - 1.0.1e-58.0.1
changelog:
  - Oracle bug 28730228: backport CVE-2018-0732
  - Oracle bug 28758493: backport CVE-2018-0737
  - Merge upstream patch to fix CVE-2018-0739 
  - Avoid out-of-bounds read. Fixes CVE 2017-3735. By Rich Salz
  - sha256 is used for the RSA pairwise consistency test instead of sha1


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-4
changelog:
  - Minor tweaks to spec file
  - Enable %check section
  - Thanks Gareth Armstrong <gareth.armstrong@hp.com>


author: John Eckersberg <jeckersb@redhat.com> - 0.1.2-2
changelog:
  - Remove README and LICENSE from docs on -devel package
  - Remove -static package and merge contents into the -devel package


author: Aron Silverton <aron.silverton@oracle.com> - 1.2.1-1.0.2
changelog:
  - BUILDINFO: commit=611b8c1721f27f460935db4c07adb13601e3a27d
  - ibacm: Bump release number for updates


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.25-7
changelog:
  - Fix for CVE-2010-2244
  - Resolves: #607296
  - Resolves: #594405
  - Related 587761
  - Related 584761
  - Related 584766
  - Related 596151
  - Related 599435


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.21-6
changelog:
  - resolves #279301: fix segfault when no domains are configured in resolv.conf (pulled from upstream SVN r1525)


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.21-5
changelog:
  - resolves #249044: Update init script to use runlevel 96
  - resolves #251700: Fix assertion in libdns_sd-compat


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.21-4
changelog:
  - Ship ssh static service file by default, don't ship ssh-sftp by default
  - resolves: #269741: split off avahi-ui-tools package
  - resolves: #253734: add missing dependency on avahi-glib-devel to avahi-ui-devel


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.20-5
changelog:
  - add two patches which are important to get RR updating work properly.
    Will be part of upstream 0.6.21


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.20-1
changelog:
  - upgrade to new upstream 0.6.20
  - fix a few rpmlint warnings
  - create avahi-autoipd user
  - no longer create avahi user with a static uid, move to dynamic uids
  - drop a couple of patches merged upstream
  - Provide "howl" and "howl-devel"
  - Split off avahi-autoipd and avahi-dnsconfd
  - Introduce avahi-ui packages for the first time
  - Reload D-Bus config after installation using dbus-send
  - add a couple of missing ldconfig invocations


author: Martin Bacovsky <mbacovsk@redhat.com> - 0.6.17-1
changelog:
  - upgrade to new upstream 0.6.17
  - redundant patches removal
  - removed auto* stuff from specfile since that was no longer needed
  - Resolves: #232205: 'service {avahi-dnsconfd,avahi-daemon} status'
    returns 0 when the service is stopped


author: Martin Bacovsky <mbacovsk@redhat.com> - 0.6.16-1.fc7
changelog:
  - Resolves: #221763: CVE-2006-6870 Maliciously crafted packed can DoS avahi daemon
  - upgrade to new upstream
  - patch revision
  - Resolves: #218140: avahi configuration file wants a non-existent group


author: Martin Stransky <stransky@redhat.com> - 0.6.11-6
changelog:
  - added patch from #206445 - ia64: unaligned access errors seen
    during startup of avahi-daemon
  - removed unused patches


author: Martin Stransky <stransky@redhat.com> - 0.6.11-3
changelog:
  - added fix for #200767 - avahi-dnsconfd Segmentation fault
    with invalid command line argument
  - added dist tag


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.11-1.fc6
changelog:
  - Upgrade to upstream version 0.6.11
  - fix bug 195674: set 'use-ipv6=yes' in avahi-daemon.conf
  - fix bug 197414: avahi-compat-howl and avahi-compat-dns-sd symlinks
  - fix bug 198282: avahi-compat-{howl-devel,dns-sd-devel} Requires:


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.10-1.FC6
changelog:
  - Upgrade to upstream version 0.6.10
  - fix bug 192080: split avahi-compat-libdns_sd into separate package
                    (same goes for avahi-compat-howl)


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.9-4
changelog:
  - fix scriptlet error introduced by last fix:
    if user has disabled avahi-daemon, do not enable it during %post


author: Bill Nottingham <notting@redhat.com> - 0.6.9-2
changelog:
  - fix scriplet error during installer
  - move service-types* to the tools package (avoids multilib conflicts)


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.8-1
changelog:
  - Upgrade to upstream version 0.6.8
  - fix bug 182462: +Requires(post): initscripts, chkconfig, ldconfig


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.5-1
changelog:
  - Upgrade to upstream version 0.6.5
  - Make /etc/avahi/etc and /etc/avahi/etc/localtime owned by avahi
    package; copy system localtime into chroot in post


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.3-2
changelog:
  - fix bug 177610: Enable mono support with new avahi-sharp package
  - fix bug 177609: add gdbm / gdbm-devel Requires for avahi-browse


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.3-1
changelog:
  - Upgrade to upstream version 0.6.3
  - fix bug 177148: initscript start should not fail if avahi-daemon running


author: Jason Vas Dias<jvdias@redhat.com> - 0.6-3
changelog:
  - fix bug 172047 - tools should require python-twisted
  - fix bug 173985 - docs directory permissions


author: Jason Vas Dias<jvdias@redhat.com> - 0.5.2-7
changelog:
  - fix bug 172034: fix ownership of /var/run/avahi-daemon/
  - fix bug 172772: .spec file improvements from matthias@rpmforge.net


author: Alexander Larsson <alexl@redhat.com> - 0.5.2-5
changelog:
  - Obsoletes howl, howl-libs, as we want to get rid of them on updates
  - No provides yet, as the howl compat library is in Avahi 0.6.0.


author: Carson Hovey <carson.hovey@oracle.com> - 1.0-3
changelog:
  - Improve description text.
    Signed-off-by: Carson Hovey <carson.hovey@oracle.com>
    Signed-off-by: Don Naro <don.naro@oracle.com>


author: Aron Silverton <aron.silverton@oracle.com> - 1.0.0-41
changelog:
  - BUILDINFO: commit=dc458f693e616615ae44772b4b065b1b1bcb7aa8
  - Include libibacl in oracle-ofed-release for OL7 (Aron Silverton)


author: Aron Silverton <aron.silverton@oracle.com> - 1.0.0-40
changelog:
  - BUILDINFO: commit=b31ea5ee6ef0a2edcbd6f151d6775bc692bd4753
  - Release librdmacm-1.0.20-1.0.6 & rdma-3.10-3.0.38 (Aron Silverton)


author: Aron Silverton <aron.silverton@oracle.com> - 1.0.0-39
changelog:
  - BUILDINFO: commit=0353ab7679449763edbc82662ef82050b7c36b2a
  - Update libibacl to v1.0-6 (Aron Silverton)


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 1.0.0-38
changelog:
  - BUILDINFO: commit=e09d571e405733ccc48b807cc1cc365ea9871d28
  - Update libibcm to 4:1.0.5-1.0.3 (Mukesh Kacker)


author: Aron Silverton <aron.silverton@oracle.com> - 1.0.0-37
changelog:
  - BUILDINFO: commit=99532f291d45f039dd2cc7c3e4d75931e309b75a
  - Update librdmacm to v1.0.20-1.0.5 (Aron Silverton)


author: Aron Silverton <aron.silverton@oracle.com> - 1.0.0-36
changelog:
  - BUILDINFO: commit=b31e69e807f03fb1edca402cf42aa6bfd0fe7f48
  - Update mstflint to v4.8.0-2.0.2 (Aron Silverton)  
  - Fix rpmlint issues (Aron Silverton)


author: Aron Silverton <aron.silverton@oracle.com> - 1.0.0-35
changelog:
  - BUILDINFO: commit=c9e810f6f3ef8a048d13cfecbd9255a3bf036de0
  - Update libibacl-1.0-5 (Aron Silverton)


author: Aron Silverton <aron.silverton@oracle.com> - 1.0.0-34
changelog:
  - BUILDINFO: commit=748cb0a369c22a177c6589ffcaa25e04f586bff0
  - Update rds-tools-2.0.7 (Aron Silverton)


author: Aron Silverton <aron.silverton@oracle.com> - 1.0.0-33
changelog:
  - BUILDINFO: commit=8295bc560eb634fd44430abe0608193ec7d02dd9
  - Include ibacm in oracle-ofed-release (Aron Silverton)


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 1.0.0-28
changelog:
  - BUILDINFO: commit=59337ebd360ce772f50ac6a6a1316d8d09563ed3
  - update libibverbs, librdmacm (Mukesh Kacker)


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 1.0.0-25
changelog:
  - BUILDINFO: commit=04f97bb881887c5752ecdd6da6d89a6781c26d19
  - Bump release for build in git after import from svn


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 1.0.0-14
changelog:
  - [Orabug 23643216] Drop mstflint from guest rpm requirements
    - [Orabug 23643209] Drop ofed-docs from base and guest rpm requirements
    - Bump release number for infiniband-diags{_guest}


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 1.0.0-13
changelog:
  - [Orabug 23216872] Make oracle-ofed-release-guest rpms for guest rpms
    - New infiniband-diags-guest rpm for guest os
    - Bump release number for infiniband-diags{_guest}


author: Qing Huang <qing.huang@oracle.com> - 1.0.0-12
changelog:
  - [Orabug 22731997] Add support for sparc64 platform
    - Updated mstflint, rdma, and rds-tools packages


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 1.0.0-11
changelog:
  - [Orabug: 23479809] Remove tk from required rpms for ibutils
    - Bump required release for ibutils rpm


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 1.0.0-10
changelog:
  - [Orabug: 23287059] Rebuild rpms due to header changes in required rpms
    - Updated required release for libibcm, perftest, qperf


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 1.0.0-9
changelog:
  - [Orabug: 21616281] Add support for UEK2 XRC Api binary compatibility
    - libverbs, libmlx4, librdmacm required release updated


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 1.0.0-8
changelog:
  - Restore libibverbs, libmlx4, librdmacm changes for sharedpd, user fmr
    - Add changelog to spec file for past changes


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 1.0.0-3
changelog:
  - Update release numbers for ibutils, infiniband-diags, libibverbs,
      libmlx4, librdmacm to pull in recent fixes.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018g-1
changelog:
  - Rebase to tzdata-2018g
    - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
      planned.  This change is effective Octobober 28, 2018.


author: Patsy Griffin Franklin <pfrankli@redhat.com> - 2018f-1
changelog:
  - Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
  - Add patch to remove use of 25:00.
  - Drop previous change to DST in Brazil.  The government rescinded the
    change.


author: Patsy Franklin <pfrankli@redhat.com> - 2018e-4
changelog:
  - Brazil moved the start of DST from the first Sunday in November
    to the third Sunday in November.


author: Patsy Franklin <pfrankli@redhat.com> - 2018e-2
changelog:
  - Rebase to tzdata-2018e
    - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
    - In this update, the upstream project now defaults to using
      the "vanguard" data implementation which includes negative DST offsets.
      However, we are continuing to provide the "rearguard" format
      for data which does not use negative DST offsets to provide
      better compatibility with existing tools.  We intend to transition
      to the "vanguard" data implementation in the future.


author: Patsy Franklin <pfrankli@redhat.com> - 2018d-1
changelog:
  - Rebase to tzdata-2018d
    - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
    - Antarctica/Casey station changed to UTC+8 on March 11.


author: Patsy Franklin <pfrankli@redhat.com> - 2018b-1
changelog:
  - Rebase to tzdata-2018b
    - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
    - Brazil's DST will start on the first Sunday in November
    - Irish standard time is in the summer now, not the winter.
    - Support for the new zic -t option.
    - Add back pacificnew file omitted in tzdata-2018a


author: Patsy Franklin <pfrankli@redhat.com> - 2017c-1
changelog:
  - Rebase to tzdata-2017c.
    - Northern Cyprus will revert to using EQ rules on October 29, 2017.
    - Sudan will switch from +03 to +02 on November 1, 2017.
    - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
      experiment with DST.
    - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
    - Namibia - starting September 3, 2017 switches from +)1 with DST to
      +02 all year.  This change takes effect April 1, 2018.
    - Turks & Caicos changes from -04 all year to -05 with US DST starting
      on March 11, 2018.  Effective change date is November 4, 2018.
    - tzdata now includes two text versions of the time zone data - tzdata.zi
      and leapseconds.


author: Jaroslav Kysela <jkysela@redhat.com> - 1.1.0-4
changelog:
  - Remove ucm and topology files from the /usr/share/alsa tree
  - Coverity fixes
  - Resolves: rhbz#838948


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.18-1.rc3
changelog:
  - updated to 1.0.18rc3
  - moved /etc/alsa configuration files back to /usr/share/alsa
  - removed pulse default patch (moved to /etc/asound.conf)
  - added /etc/asound.conf and /etc/alsa/alsactl.conf
  - disable /dev/aload device checking (obsolete for 2.6 kernels)


author: Lennart Poettering <lpoetter@redhat.com> 1.0.15-0.3.rc3
changelog:
  - Add hook to /etc/alsa/alsa.conf so that /etc/alsa/default-pulse.conf
    is loaded when it exists. This allows us to enable the pulse plugin by
    default depending on whether it is installed or not.


author: Matthias Saou <http://freshrpms.net/> 1.0.15-0.2.rc2
changelog:
  - Update License field.
  - Use configdir instead of sysconfdir hacks (cleaner).
  - Remove redundant optflags overriding.
  - Switch to using main "version", and merge "postver" since this is the right
    way of doing things (see NamingGuidelines#NonNumericRelease).
  - Remove static library.
  - Mark all of /etc/alsa as config, but not "noreplace".
  - Remove useless rpath on 64bit archs.


author: Lennart Poettering <lpoetter@redhat.com> 1.0.14-2
changelog:
  - fixed #251307 - fix plugindir directory specification
  - fix build with newer glibc where open() is a macro


author: Martin Stransky <stransky@redhat.com> 1.0.11-2.rc2
changelog:
  - fix for #169729 - Kernel update makes snd-atiixp-modem & slmodemd fail
  - new ainit (0.7) should fix some problems with root users


author: Martin Stransky <stransky@redhat.com> 1.0.9rc2-5
changelog:
  - fix for #130593
  - new ainit (dmix/dsnoop is default only for cards which really need it)
  - fix dsnoop
  - add fix for mixer (from https://bugs.gentoo.org/attachment.cgi?id=58918)


author: Colin Walters <walters@redhat.com> 1.0.7-2
changelog:
  - New patch alsa-lib-1.0.7-asym-config.patch, sets up asym
    in the default config file and makes it easy to make it
    the default via an environment variable.  Also increases the
    default dmix buffer variables.
  - Mark /etc/alsa/alsa.conf as a config file, and use sysconfdir
    variable


author: Bill Nottingham <notting@redhat.com> 1.0.6-6
changelog:
  - fix bad assertion that trips up gstreamer (fixes GNOME bug #159647)
  - undef gets in case it's a macro (#141423)


author: Kyle VanderBeek <kylev@kylev.com> - 2.0.9-1
changelog:
  - Update to 2.0.9
  - Make sure to require gcc to the speedups get compiled
  - Fix description since we're not "pure" python
  - Change to pypi instead of cheesehop


author: Steve Dickson <steved@redhat.com> 1.4.12-1
changelog:
  - Updated to latest stable upstream version: 1.4.12
  - API documentation is now installed (bz 487977)
  - libevent-devel multilib conflict (bz 477685)
  - epoll backend allocates too much memory (bz 517918)


author: Steve Dickson <steved@redhat.com> 1.3b-1
changelog:
  - Updated to latest upstream version 1.3b
  - Incorporated Merge Review comments (bz 226002)
  - Increased the polling timeout (bz 204990)


author: Nikola Forró <nforro@redhat.com> - 1.3-16
changelog:
  - Revert previous changes in patch for CVE-2016-5159
  - Fix double free in patch for CVE-2016-5139
  - Fix memory leaks and invalid read in cio_bytein
    Related: #1419775


author: Petr Hracek <phracek@redhat.com> 1.3-10
changelog:
  - Apply patch for CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052 
  Resolves: #1038987 CVE-2013-6054 CVE-2013-1447 CVE-2013-6045 CVE-2013-6052


author: Tom Lane <tgl@redhat.com> 1.3-8
changelog:
  - Apply patches for CVE-2009-5030, CVE-2012-3358
  Resolves: #831562
  - Include -DCMAKE_INSTALL_LIBDIR in cmake call; fixes FTBFS with recent
    versions of cmake


author: Tom Lane <tgl@redhat.com> 1.3-7
changelog:
  - Apply two upstream fixes for crasher bugs
  Resolves: #609389
  - Fix FTBFS: ImplicitDSOLinking (see Fedora bug 564783)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.3-5
changelog:
  - libopenjpeg has undefined references (#467661)
  - openjpeg.h is installed in a directory different from upstream's default (#484887)
  - drop -O3 (#504663)
  - add %check section
  - %files: track libopenjpeg somajor (2)


author: Hans de Goede <hdegoede@redhat.com> - 0.6-5
changelog:
  - Use the new libusb autodetach kernel driver functionality
  - Fix a usbredirparser bug which causes tcp/ip redir to not work (rhbz#1005015)


author: Hans de Goede <hdegoede@redhat.com> - 0.6-3
changelog:
  - Fix usbredirserver not listening for ipv6 connections (rhbz#957470)
  - Fix a few (harmless) coverity warnings


author: Ondrej Vasik <ovasik@redhat.com> 2.4.29-1
changelog:
  - iso_codes package no longer provides tab files, do generate
    them on fly with sed (thanks D. Tardon)


author: Ondrej Vasik <ovasik@redhat.com> 2.4.28-1
changelog:
  - Provide/obsolete pm-utils-filesystem, own dirs for pm-utils
    hooks(#515362)
  - Do own man sections for /usr/share/man/<locale> dirs (#220265)
  - Do own /usr/share/sounds (#515485)


author: Ondrej Vasik <ovasik@redhat.com> - 2.4.22-1
changelog:
  - do own interface description directory /usr/share/idl(#451719)
  - add a few missing lang-exceptions to filelist(#508309)


author: Phil Knirsch <pknirsch@redhat.com> - 2.4.16-1
changelog:
  - Dropped /etc/news again as we're handling it now correctly (#437462)
  - Filesystem is now an official fedorahosted project, part of the review
    changes (#225752)
  - Removed duplicate entry in lang_exceptions for ca_ES@valencian (#225752)


author: Phil Knirsch <pknirsch@redhat.com> - 2.4.12-1
changelog:
  - Added be@latin to lang-exceptions (#231737)
  - Added /usr/share/man{0,1,3]p to owned files (#233879)
  - Added /usr/share/fonts to owned files (#302141)
  - Renamed sr@Latn to sr@latin (#436887)


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-1
changelog:
  - Added /etc/fonts/conf.d and /usr/share/themes (#239246)
  - Removed /etc/xdg/menus, already owned by redhat-menus (#228779)


author: Phil Knirsch <pknirsch@redhat.com> - 2.3.7-2
changelog:
  - Fixed games location according to FHS 2.1 (#165425)
  - Added {_libdir}/sse2 to owned files (#192853)
  - Added /dev to owned files (#192860)
  - Added {_datadir}/icons to owned files (#195911)
  - Dropped obsolete /etc/X11/starthere (#191163)


author: Bill Nottingham <notting@redhat.com> 2.2.3-1
changelog:
  - move /usr/dict to /usr/share/dict (#113645)
  - add /usr/lib/locale, /var/empty (#108686,#113036)
  - add */%{_lib}/tls (#113050)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - /etc/opt, /usr/share/{info,man/man*,misc,doc} (FHS 2.1)
  - added /var/games.  Data should move from /var/lib/games to there (FHS 2.1)
  - bump version up to 2.0 already!


author: Erik Troan <ewt@redhat.com>
changelog:
  - added /var/db
  - set attributes in the spec file; don't depend on the ones in the cpio
    archive
  - use a tarball instead of a cpioball


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: parag <paragn@fedoraproject.org> - 1.0.3-2
changelog:
  - Merge-Review #226091
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length README AUTHORS file


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193504)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXtst to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXtst to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.107-2
changelog:
  - Update to the latest upstream which adds eventfd support and fixes broken
    test cases.  (Rusty Russell)


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.106-2
changelog:
  - Update to the latest sources, which contain the following change:
    Add a .proc directive for the ia64_aio_raw_syscall macro.  This sounds a lot
    like the previous entry, but that one fixed the __ia64_raw_syscall macro,
    located in syscall-ia64.h.  This macro is in raw_syscall.c, which pretty much
    only exists for ia64.  This bug prevented the package from building with
    newer version of gcc.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.103-4
changelog:
  - Build the library twice.  Once with the old SONAME and once with the new
    one.  This fixes the wrong SONAME problem by keeping a library around with
    the wrong name (libaio.so.1.0.0) and generating a new one (libaio.so.1.0.1).


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.102-1
changelog:
  - update to 102.  Fixes build errors on s390:
    - S390 asm had a bug; I forgot to update the clobber list.  Lucky for me,
      newer compilers complain about such things.
    - Also update the s390 asm to look more like the new kernel variants.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.99-1
changelog:
  - Fix compat calls.
  - make library .so.1.0.0 and make symlinks properly.
  - Fix header file for inclusion in c++ code.


author: Jeff Moyer <jmoyer@redhat.com> 0.3.97-2
changelog:
  - make srpm was using rpm to do a build.  changed that to use rpmbuild if
    it exists, and fallback to rpm if it doesn't.


author: Jeff Moyer <jmoyer@redhat.com> 0.3.97-1
changelog:
  - Use libc syscall(2) instead of rolling our own calling mechanism.  This 
    change is inspired due to a failure to build with newer gcc, since clobber 
    lists were wrong.
  - Add -fpic to the CFLAGS for all architectures.  Should address bz #109457.
  - change a #include from <linux/types.h> to <sys/types.h>.  Fixes a build
    issue on s390.


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - libaio 0.3.93 test release
  - add powerpc support from Gianni Tedesco <gianni@ecsc.co.uk>
  - add s/390 support from Arnd Bergmann <arnd@bergmann-dalldorf.de>


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - add requires initscripts >= 6.47-1 to get boot time libredhat-kernel 
    linkage correct.
  - typo fix


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - make the dummy install as /lib/libredhat-kernel.so.1.0.0 so 
    that ldconfig will link against it if no other is installed.


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-15
changelog:
  - save backups of password files when toggling shadow support (#852997)
  - read and overwrite only the general ldap base (#912851)
  - use sss for automount
  - more robust initialization of SSSDConfig (#1016404)
  - output error message from write error
  - properly set IPAV2DOMAINJOINED and call ipa client uninstall
    when appropriate (#1023286)
  - add umask=0077 to initial pam_mkhomedir args (#1025065)
  - fix broken --help output (#1066811)
  - check whether ldap URI is valid (#707590)
  - restart only services affected by configuration changes (#1023293, #975203)
  - report error from winbind and ipa domain joins


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-7
changelog:
  - detect error exit value from ipa-client-install
  - use --noac option with ipa-client-install
  - add sss to the services entry in nsswitch.conf (#804615)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-6
changelog:
  - add support for joining IPAv2 domains
  - fix exception handling (#689717)
  - drop obsolete configuration files from manual page
  - use krb5_server instead of obsolete krb5_kdcip (#749700)
  - do not signal error on saving backups for missing config files (#755975)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-5
changelog:
  - prevent the traceback also when std file descriptors are not
    tty, print out an error message instead of executing authconfig


author: Tomas Mraz <tmraz@redhat.com> - 6.1.12-1
changelog:
  - give proper warnings on missing packages if configuration
    supported by SSSD (#663882)
  - do not delete mdns4_minimal from nsswitch.conf (#645295)
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> - 6.1.11-1
changelog:
  - do not restart services when configuration did not change
  - dissallow setting identity or authentication services with missing
    installed files (#590447)
  - eliminate unnecessary updates of PAM config files and sssd.conf (#639978)
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> - 6.1.9-1
changelog:
  - removed support for setting up pam_smb_auth authentication - long
    ago deprecated
  - added code for better synchronization of files with duplicate
    settings such as login.defs, libuser.conf and system-auth-ac (#565521)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.8-1
changelog:
  - add pam_systemd to the PAM configuration (#612712)
  - fix force smarcard setting read when Kerberos enabled (#620475)
  - fix duplication of dialogs when the revert is cancelled (#621632)
  - add --enable/disableforcelegacy option (#605857)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.6-1
changelog:
  - remove superfluous space in nsswitch.conf (#595265)
  - always write to 'default' domain in sssd.conf only (#598558)
  - update pam and nsswitch config only when needed


author: Tomas Mraz <tmraz@redhat.com> - 6.1.5-1
changelog:
  - fix FreeIPA configuration (#589751)
  - disable the krb5 inputs if using dns discovery (#591681)
  - fix GUI crash on revert
  - add pam_sss to password-auth password stack (#592872)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.4-1
changelog:
  - set the new icon also for the windows (#583330)
  - updated translations
  - disable non-smartcard PAM stacks if require smart card for authentication
  - remove pam_pkcs11 from the password PAM stack
  - set smartcard action also in gconf
  - properly set the options for pam_pkcs11
  - do not write pam_password option to nslcd.conf (#585953)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.3-1
changelog:
  - manual page improvements (#578258, #526164)
  - use ldap instead of sss for nsswitch maps unsupported by sssd (#578325)
  - call cacertdir_rehash also in case ldaps: server uri is used (#578219)
  - ldap_uri must be comma separated (#579881)
  - updated translations
  - new icon (#540249)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.2-1
changelog:
  - fix SSSD provider change (#577263)
  - drop LDAP authentication from FreeIPA choice
  - updated translations
  - use pam_oddjob_mkhomedir if the appropriate package is installed (#552485)


author: Tomas Mraz <tmraz@redhat.com> - 6.1.1-1
changelog:
  - added credential caching enablement for SSSD
  - added msgarea for LDAP authentication requirements
  - fix spurious missing modules warnings and other minor changes


author: Tomas Mraz <tmraz@redhat.com> - 6.1.0-1
changelog:
  - new very much simplified GUI
  - use SSSD instead of legacy ldap/krb5 if the configuration is
    supported
  - drop krb4 config file write (#569612)
  - handle exception when running with insufficient priviledges (#572534)
  - support RFC2307bis LDAP schema


author: Tomas Mraz <tmraz@redhat.com> - 6.0.1-1
changelog:
  - do not try to write smartcard settings if pam_pkcs11 is not
    installed (#528458)
  - make position of sss in nsswitch consistent with position in
    system-auth (#552501)
  - support nss_ldap/pam_ldap split and nslcd


author: Tomas Mraz <tmraz@redhat.com> - 6.0.0-1
changelog:
  - support for SSSD enabling/disabling and basic support for
    SSSD domain setup
  - safe atomic overwrites of the config files


author: Tomas Mraz <tmraz@redhat.com> - 5.4.7-1
changelog:
  - move the consolehelper symlinks to the gtk subpackage to remove
    the dependency on usermode in the base package (#480014)
  - return nonzero exit codes on some more possible errors (#440461)


author: Tomas Mraz <tmraz@redhat.com> - 5.4.5-1
changelog:
  - improved cacertdir_rehash to be more robust
  - add fingerprint reader support (original patch by Bastien Nocera) (#469418)
  - remove pam_smb support from GUI and TUI
  - fix nscd pid file path (#471642)


author: Tomas Mraz <tmraz@redhat.com> - 5.4.3-1
changelog:
  - remove the --enableldapssl alias and add some help to GUI tooltips
    to clear up some confusion (#220973)
  - add option --enablepreferdns to prefer DNS over NIS or WINS in
    hostname resolution


author: Tomas Mraz <tmraz@redhat.com> - 5.4.2-1
changelog:
  - read wins setting from nsswitch.conf correctly (#440459)
  - do not ignore --enablemd5/--disablemd5 options


author: Tomas Mraz <tmraz@redhat.com> - 5.4.0-1
changelog:
  - include config-util in console.apps files
  - add support for saving/restoring backups of configuration
    files affected by authconfig (#433776)
  - improve the authconfig manual page (#432023, #432938)


author: Tomas Mraz <tmraz@redhat.com> - 5.3.19-1
changelog:
  - support new sha256 and sha512 password hash algorithms
  - add support for pam_mkhomedir (#212790)
  - do not crash in authconfig --help (#237956) - thanks to Andy Shevchenko for
    the idea how to fix that
  - setup password hash algorithm in /etc/login.defs (#218652)
  - update translations


author: Tomas Mraz <tmraz@redhat.com> - 5.3.17-1
changelog:
  - remove obsolete pam_krb5afs support (#250704)
  - add support for pam_access (#251360)
  - update translations


author: Tomas Mraz <tmraz@redhat.com> - 5.3.15-1
changelog:
  - dnsclient fixes by Simo Sorce
  - add Categories to .desktop file (#245868)
  - fixed traceback when calling joinDomain (#245374)
  - disable smart card action setting when gnome-screensaver
    not installed (#209643)
  - do not change protocols and services in nsswitch.conf (#236669)


author: Tomas Mraz <tmraz@redhat.com> - 5.3.14-1
changelog:
  - authconfig.8 synopsis fixed (patch by Eric Raymond) (#220574)
  - drop explicit requirement on python version as it is now 
    generated automatically
  - improve writing /etc/samba/smb.conf (based on patch by
    Simo Sorce)
  - merge changes upstream


author: Tomas Mraz <tmraz@redhat.com> - 5.3.13-4
changelog:
  - local nis domain is obtained from sysconfig/network (#235927)
  - set "local authorization is sufficient" on by default


author: Tomas Mraz <tmraz@redhat.com> - 5.3.13-1
changelog:
  - another traceback in --probe and other fixes (#218874)
  - make smbRealm a default realm when appropriate (#219300)
  - added missing languages in LINGUAS


author: Tomas Mraz <tmraz@redhat.com> - 5.3.12-1
changelog:
  - when pam_krb5 auth fails with smartcard login don't enforce it
    in the account stack (#214931)
  - updated translations (#216570)
  - winbind should be added only to user tables (#216862)


author: Tomas Mraz <tmraz@redhat.com> - 5.3.10-1
changelog:
  - fixed passwd PAM stack when PKCS11 enabled (#195960)
  - make authconfig --probe work again (#209676)


author: Tomas Mraz <tmraz@redhat.com> - 5.3.9-1
changelog:
  - updated translations (#207095)
  - correctly write pam_smb.conf with only one server specified (#208365)


author: Tomas Mraz <tmraz@redhat.com> - 5.3.7-1
changelog:
  - improve PAM setup for smart card login
  - support smart card login with kerberos (PKINIT)
  - add pam_pkcs11 to password PAM stack


author: Tomas Mraz <tmraz@redhat.com> - 5.3.6-1
changelog:
  - skip pam_unix for session for crond service
  - fixed a bug in saving when smartcard settings changed (#204838)
  - removed allow_ypbind setsebool as it is now handled in ypbind


author: Tomas Mraz <tmraz@redhat.com> - 5.3.5-1
changelog:
  - improve smart card related UI strings
  - removed possibility to set smart card type from authconfig-gtk
    as only coolkey will be supported for now


author: Ray Strode <rstrode@redhat.com> - 5.3.3-2
changelog:
  - write out new "wait_for_card" config option if we're
    forcing smart card authentication
  - add "use_uid" option to smart card pam_succeed_if line to
    work around bug where pam_succeed_if checks user information
    even in cases where the conditional doesn't depend on it.
  - remove unimplemented "logout" smart card removal action from
    settings
  - remove unnecessary "card_only" argument


author: Tomas Mraz <tmraz@redhat.com> - 5.3.1-1
changelog:
  - screensavers should be authenticated by smartcard too
  - add feature to download a CA certificate for LDAP from 
    an URL (#197103)
  - add pam_keyinit session module to the PAM configuration (#198638)


author: Tomas Mraz <tmraz@redhat.com> - 5.2.5-1
changelog:
  - write ldap servers as URIs and not HOSTs (#191842)
  - fix a typo in --test output
  - updated summary, converted changelog to UTF-8


author: Tomas Mraz <tmraz@redhat.com> - 5.2.4-1
changelog:
  - added crond to the services restarted after firstboot (#187334)
  - when checking nscd status redirect output to /dev/null (#188555)


author: Tomas Mraz <tmraz@redhat.com> - 5.2.2-1
changelog:
  - add try_first_pass option to pam_unix for better integration
    with individual service configurations (#182350)
  - updated translations


author: Tomas Mraz <tmraz@redhat.com> - 5.2.0-1
changelog:
  - redesigned GUI (#178112)
  - added man page for system-config-ac (#179584)
  - disable authentication of system accounts by network services
    by default, added option for changing that (#179009)
  - updated translations, new languages


author: Tomas Mraz <tmraz@redhat.com> - 5.0.4-1
changelog:
  - don't ignore krb5realm command line option (#174838)
  - read dns_lookup_realm and dns_lookup_kdc values correctly
  - the PAM configuration is now written in system-auth-ac file
    which is then symlinked from system-auth, the symlink is not
    overwritten so local PAM configuration is now possible (#165342)


author: Tomas Mraz <tmraz@redhat.com> - 5.0.3-1
changelog:
  - add symlinks to python scripts in sbindir
  - don't override nullok setting from system-auth (#96996)


author: Tomas Mraz <tmraz@redhat.com> - 5.0.2-1
changelog:
  - authinfo-tui.py is now symlink
  - reword the CA certificate message (#154317)
  - use include instead of pam_stack in pam config
  - don't break yp.conf with multiple domains (#127306)


author: Tomas Mraz <tmraz@redhat.com> - 5.0.0-1
changelog:
  - C code completely rewritten in Python
  - some bugs fixed in the process (and no doubt new introduced)
  - TUI deprecated, opens only when run as authconfig-tui


author: Tomas Mraz <tmraz@redhat.com> - 4.6.8-1
changelog:
  - add option for making local authorization sufficient for local users
    this is attempt to 'solve/workaround' the problem with blocking local logins by
    pulling out network cable (#115181)


author: Tomas Mraz <tmraz@redhat.com> - 4.6.7-1
changelog:
  - updated translations
  - winbind in authconfig-gtk.py was setting the nsswitch.conf on the auth tab
  - use GtkComboBox instead of deprecated GtkOptionMenu
  - disable options with not installed binaries, remove unnecessary deps of
    authconfig-gtk


author: Jindrich Novy <jnovy@redhat.com> 4.6.4-5
changelog:
  - fixed all po files to translate correctly messages with modified accelerators (#133742)
  - added translations for Arabic, Bulgarian and other languages (#133716, #133158)


author: Jindrich Novy <jnovy@redhat.com> 4.6.4-2
changelog:
  - modified authconfig-gtk interface to fit lower resolution screens (#127175)
  - modified accelerators in authconfig-gtk (#125797)
  - updated package dependencies (#125306)


author: Nalin Dahyabhai <nalin@redhat.com> 4.6.4-1
changelog:
  - tweak account management to fix #55193 correctly
  - require anything we might want to run in the gui subpackage because it
    doesn't warn about missing things and you don't have a terminal to see
    error messages about missing commands
  - properly display the domain in the GUI join dialog (#124621)


author: Nalin Dahyabhai <nalin@redhat.com> 4.6.3-1
changelog:
  - omit the "ads" or "rpc" when calling "net join", Samba's smarter now (#122802)
  - properly warn about missing "net" (samba-client) and libnss_winbind and
    pam_winbind (samba-common) in text mode (#122802)


author: Nalin Dahyabhai <nalin@redhat.com> 4.6.2-1
changelog:
  - learn all about pam_passwdqc
  - preserve arguments to pam_cracklib and pam_passwdqc
  - short-circuit PAM authorization checks for users with UID < 100
  - remove redhat-config-authentication as a way to invoke the GUI tool (#115977)


author: Nalin Dahyabhai <nalin@redhat.com> 4.6.1-1
changelog:
  - fix man page: --enableldapssl should be --enableldaptls
  - make --enableldapssl an alias for --enableldaptls


author: Nalin Dahyabhai <nalin@redhat.com> 4.6-1
changelog:
  - authconfig-gtk.py: require rhpl, which is required by the script (#104209)
  - both: require usermode (authconfig-gtk transitively), else leave a dangling
    symlink (#104209)
  - the great redhat-config-authentication/system-config-authentication renaming,
    as was foretold in the fedora-config-list archives


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - rework tui to include winbind options. there wasn't enough room in the old
    dialog to include the important options, so the whole thing's been reworked


author: Nalin Dahyabhai <nalin@redhat.com> 4.3.7-1
changelog:
  - authconfig-gtk: condrestart certain additional services if invoked with
    the --firstboot flag (half of #91268, needs cooperating firstboot)
  - translation updates


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add 'redhat-config-authentication' as an alias for authconfig-gtk
  - make authconfig-gtk exec authconfig if gui startup fails and it looks like
    we're connected to a tty


author: Nalin Dahyabhai <nalin@redhat.com> 4.2.10-3
changelog:
  - include the userhelper configuration file
  - require sufficiently-new pam package in the gui subpackage


author: Nalin Dahyabhai <nalin@redhat.com> 4.2.9-1
changelog:
  - add --enable-experimental to enable some of that experimental code
  - add --enable-local to enable local policies
  - update translations


author: Nalin Dahyabhai <nalin@redhat.com> 4.2.8-5
changelog:
  - remove bogus buildrequires left over from when authconfig-gtk was C code
  - buildrequires python-devel in addition to python (to build the python module,
    but we still need python to byte-compile the python script)


author: Nalin Dahyabhai <nalin@redhat.com> 4.2.5-1
changelog:
  - actually free authInfo structures when asked to
  - use pam_krb5's account management facilities
  - conflict with versions of pam_krb5 which don't offer account management


author: Nalin Dahyabhai <nalin@redhat.com> 4.2.4-1
changelog:
  - add python bindings for the back-end
  - redo the gui so that it exercises the python bindings
  - take a shot at getting authconfig to work in a firstboot container


author: Nalin Dahyabhai <nalin@redhat.com> 4.2.3-1
changelog:
  - add some more experimental options
  - clean up the glade files a bit
  - don't destroy a garbage pointer on main cancel, destroy the main dialog


author: Nalin Dahyabhai <nalin@redhat.com> 4.2.2-1
changelog:
  - make setting of experimental options only possible through
    /etc/sysconfig/authconfig, to keep accidents from happening
  - add some more support for experimental stuff


author: Nalin Dahyabhai <nalin@redhat.com> 4.2.1-1
changelog:
  - fix setting of LDAP TLS option in authconfig-gtk
  - change Apply to Ok, Close to Cancel, because that's how they work


author: Nalin Dahyabhai <nalin@redhat.com> 4.2-1
changelog:
  - port to glib2
  - move post code to the back-end
  - add a libglade GUI in a -gtk subpackage
  - set up to use userhelper


author: Miloslav Trmač <mitr@redhat.com> - 2.9.16-6
changelog:
  - Do not remove Python multiprocessing sockets.  Patch by Chris St. Pierre
    <chris.a.st.pierre@gmail.com>.
    Resolves: #1058310


author: Miloslav Trmač <mitr@redhat.com> - 2.9.16-1
changelog:
  - Update to tmpwatch-2.9.16.
  - Exclude /tmp/hsperfdata_*.
    Resolves: #527425
  - Preserve timestamps where possible.


author: Miloslav Trmač <mitr@redhat.com> - 2.9.13-1
changelog:
  - New home page at https://fedorahosted.org/tmpwatch/ .
  - tmpwatch is now licensed under GPLv2.
  - Address issues from reviews by Adel Gadllah and Jason Tibbitts:
    - Run (make) with %{?_smp_mflags}
    - Add a comment describing the origin of the tarball to the spec file
    - Use a better BuildRoot:


author: Miloslav Trmač <mitr@redhat.com> - 2.9.12-1
changelog:
  - Fix --nosymlinks description in the man page
  - Use the maximum of atime, mtime and ctime when checking whether a file is
    obsolete
    Resolves: #373301


author: Miloslav Trmac <mitr@redhat.com> - 2.9.11-1
changelog:
  - Fix a misleading message in --test
    Resolves: 234596
  - Compress the tarball using bzip2
  - Move the cron.daily script to a separate source file


author: Miloslav Trmac <mitr@redhat.com> - 2.9.9-1
changelog:
  - Exclude aquota.group and aquota.user files
    Resolves: 206258
  - Don't require the user-specified paths to be absolute


author: Miloslav Trmac <mitr@redhat.com> - 2.9.8-1
changelog:
  - Add optional unit suffix to the "hours" (now "time") parameter (original
    patch by Alan J Rosenthal <flaps@dgp.toronto.edu>)
  - Fix some format string vs. arguments mismatches
  - Fix some rpmlint warnings


author: Miloslav Trmac <mitr@redhat.com> - 2.9.6-1
changelog:
  - Add --exclude-user (original patch by Brett Pemberton)
  - Fix too long line in /etc/cron.daily/tmpwatch


author: Miloslav Trmac <mitr@redhat.com> - 2.9.3-1
changelog:
  - Silently ignore ENOENT if somebody removes files faster than us (#154960)
  - Handle failures to exec fuser
  - Fix check for negative grace periods


author: Miloslav Trmac <mitr@redhat.com> - 2.9.1-1
changelog:
  - Add --exclude, use it to preserve X socket directories (#107069)
  - Allow multiple directory arguments with relative paths (#91097)
  - Don't manually strip the binary


author: Mike A. Harris <mharris@redhat.com> 2.9.0-1
changelog:
  - Added Solaris/HPUX support to tmpwatch via patch from Paul Gear (#71288)
  - Rebuild in rawhide as 2.9.0-1


author: Mike A. Harris <mharris@redhat.com> 2.8.3-1
changelog:
  - Added support for large files with 64bit offsets by adding to CFLAGS
    -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 bug (#56961)


author: Preston Brown <pbrown@redhat.com> 2.8-1
changelog:
  - added a "nodirs" option which inhibits removal of empty directories.
  - Integrated race condition fixes from Martin Macok (#50148)
  - do not try to remove ext3 journal files (#50522)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - Patch from enrico.scholz@informatik.tu-chemnitz.de allows concurrent 
    usage of mtime, ctime, and atime checking (#19550).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use execle() instead of system() to get the correct return code, fixes from
    Jeremy Katz <katzj@linuxpower.org>


author: Preston Brown <pbrown@redhat.com>
changelog:
  - support for CTIME from jik@kamens.brookline.ma.us
  - fixes for fuser checks from Ian Burrell <iburrell@digital-integrity.com>.
  - remove directories when empty without --all flag, to be consistent w/docs.


author: Paul Gear <paulgear@bigfoot.com>
changelog:
  - HP-UX port (including doco update)
  - Tweaked Makefile to allow installation into different base directory
  - Got rid of GETOPT_... defines which didn't do anything, so that short
    equivalents for all long options could be defined.
  - Fixed bug in message() where 'where' file handle was set but unused
  - Changed most fprintf() calls to message()


author: Preston Brown <pbrown@redhat.com>
changelog:
  - I am the new maintainer
  - fixed cleanup of directories
  - added --quiet flag
  - freshen manpage
  - nice patch from Kevin Vajk <kvajk@ricochet.net> integrated


author: Erik Troan <ewt@redhat.com>
changelog:
  - added man page to package
  - uses a buildroot and %attr
  - fixed error message generation for directories
  - fixed flag propagation


author: Bastien Nocera <bnocera@redhat.com> 0.10.25.1-2
changelog:
  - Fix theoradec bug with timestamps for Empathy video calls (#537170)
  - Fix text subtitle display regression (#537559)


author: Bastien Nocera <bnocera@redhat.com> 0.10.25.1-1
changelog:
  - Update to snapshot
  - Fix text subtitles causing hangs on startup
  - Fix missing plugins installation requiring a restart
  - Queue2 element moved to gstreamer core


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.21-2
changelog:
  - Update the gstreamer requirement
  - Add a gtk2-devel BR, so that the test-colorkey program will be built


author: Jeremy Katz <katzj@redhat.com> - 0.10.20-6
changelog:
  - gst-visualize is just a test program that we don't really need to include 
    and having it means that perl gets pulled into small images (#462620)


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.19-2
changelog:
  - Add patch to avoid sync problems in the ALSA sink when a specific
    track has both playback and record flags


author: Adam Jackson <ajax@redhat.com> 0.10.17.2-3
changelog:
  - gstpb-0.10.15-cd-speed.patch: Set default CD read speed to something
    sensible. (#431178)
  - s/Fedora Core/Fedora/
  - Don't even bother building static libs.


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.14-5
changelog:
  - Add patch to avoid critical warning when getting information about
    missing codecs
  - Up liboil requirement


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.12-2
changelog:
  - Remove the patch to disable docs, install the docs by hand instead
    Add libgstpbutils to the files


author: John (J5) Palmieri <johnp@redhat.com> - 0.10.2-1
changelog:
  - Upgrade to 0.10.2
  - Require gstreamer-0.10.2
  - Add libgstcdda and libcdparanoia to the %files section


author: Thomas Vander Stichele <thomas at apestaart dot org>
changelog:
  - 0.9.7-0.gst.1
  - new release with 0.10 majorminor
  - remove sinesrc
  - replace ximage with ximagesink
  - update libs


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-11
changelog:
  - Resolves: rhbz#701501
  - Resolves: rhbz#729971
  - Resolves: rhbz#729032
    (not reproducable any more {zkabelac])


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-7
changelog:
  - Create symlink from full versioned libdmraid dso files
    to libdmraid.so.1 and libdmraid-events-isw.so.1
    (ie. soname we use for linking)
  - Resolves: rhbz#557514


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-5
changelog:
  - Resolves: rhbz#554698
    SGPIO spare led is still in rebuilding state fix
  - Resolves rhbz#554700
    switch to using /var/cache/logwatch/dmeventd/syslogpattern.txt;
    explicitly claim logwatch files in dmraid-events-logwatch
  - Resolves rhbz#554708
    gets size of Silicon Image JBOD set wrong fix
  - Resolves rhbz#554710
    try to register non-existent dmeventd DSO fix


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-4
changelog:
  - bz526157: fix manual pages for dmraid.static and dm_dso_reg_tool
  - bz505562: ddf1 metadata format handler LSI persistent name fix
  - bz524168: fix pdc metadata format handler to report the correct number
    of devices in a RAID10 subset
  - bz528097: move libraries to /lib* in order to avoid catch22
    with unmountable /usr


author: Hans de Goede <hdegoede@redhat.com> - 1.0.0.rc16-3
changelog:
  - Add Obsoletes for dmraid-libs packages (merged into the main pkg, #524261)
  - Make -devel Require the main package now the dmraid-libs package is gone


author: Hans de Goede <hdegoede@redhat.com> - 1.0.0.rc15-7
changelog:
  - Fix activation of isw raid sets when the disks have serialnumber longer
    then 16 characters (#490121)


author: Hans de Goede <hdegoede@redhat.com> - 1.0.0.rc15-5
changelog:
  - Make --rm_partitions work with older kernels which return EINVAL when trying
    to remove a partition with a number > 16
  - Document --rm_partitions in the man page


author: Alasdair Kergon <agk@redhat.com> - 1.0.0.rc14-8
changelog:
  - Move library into libs subpackage.
  - Fix summary and licence tags.
  - Replace static build with symlink.


author: Ian Kent <ikent@redhat.com> - 1.0.0.rc14-6
changelog:
  - Bug 379911: dmraid needs to generate UUIDs for lib device-mapper
    - add "DMRAID-" prefix to dmraid UUID string.


author: Ian Kent <ikent@redhat.com> - 1.0.0.rc14-5
changelog:
  - Bug 379911: dmraid needs to generate UUIDs for lib device-mapper
  - Bug 379951: dmraid needs to activate device-mapper mirror resynchronization error handling


author: Alasdair Kergon <agk@redhat.com> - 1.0.0.rc14-2
changelog:
  - Add build dependency on new device-mapper-devel package.
  - Add dependency on device-mapper.
  - Add post and postun ldconfig.
  - Update BuildRoot and Summary.


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc14-1
changelog:
  - asr.c: fixed Adaptec HostRAID DDF1 metadata discovery (bz#211016)
  - ddf1_crc.c: added crc() routine to avoid linking to zlib alltogether,
                because Ubuntu had problems with this
  - dropped zlib build requirement


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc13-1
changelog:
  - metadata.c: fixed bug returning wrang unified RAID type (bz#210085)
  - pdc.c: fixed magic number check


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc12-1
changelog:
  - sil.c: quorate() OBO fix
  - activate.c: handler() OBO fix
  - added SNIA DDF1 support
  - added reload functionality to devmapper.c
  - added log_zero_sectors() to various metadata format handlers
  - sil.[ch]: added JBOD support


author: Peter Jones <pjones@redhat.com> - 1.0.0.rc11-FC6.2
changelog:
  - Fix bounds checking on hpt37x error log
  - Only build the .so, not the .a
  - Fix asc.c duplication in makefile rule


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc11-FC5_7.1
changelog:
  - jm.c: checksum() calculation
  - misc.c: support "%d" in p_fmt and fix segfault with wrong format identifier
  - nv.c: size fix in setup_rd()
  - activate.c:
          o striped devices could end on non-chunk boundaries
          o calc_region_size() calculated too small sizes causing large
            dirty logs in memory
  - isw.c: set raid5 type to left asymmetric
  - toollib.c: fixed 'No RAID...' message
  - support selection of RAID5 allocation algorithm in metadata format handlers
  - build


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc10-FC5_6
changelog:
  - add doc/dmraid_design.txt to %doc (#181885)
  - add --enable-libselinux --enable-libsepol to configure
  - rebuilt


author: Peter Jones <pjones@redhat.com> 1.0.0.rc9-FC5_2
changelog:
  - update to 1.0.0.rc9
  - make "make install" do the right thing with the DSO
  - eliminate duplicate definitions in the headers
  - export more symbols in the DSO
  - add api calls to retrieve dm tables
  - fix DESTDIR for 'make install' 
  - add api calls to identify degraded devices
  - remove several arch excludes


author: Heinz Mauelshagen <heinzm@redhat.com> 1.0.0.rc8-FC4_1
changelog:
  - nv.c: fixed stripe size
  - sil.c: avoid incarnation_no in name creation, because the Windows
           driver changes it every time
  - added --ignorelocking option to avoid taking out locks in early boot
    where no read/write access to /var is given


author: Heinz Mauelshagen <heinzm@redhat.com> 1.0.0.rc6.1-4_FC4
changelog:
  - VIA metadata format handler
  - added RAID10 to lsi metadata format handler
  - "dmraid -rD": file device size into {devicename}_{formatname}.size
  - "dmraid -tay": pretty print multi-line tables ala "dmsetup table"
  - "dmraid -l": display supported RAID levels + manual update
  - _sil_read() used LOG_NOTICE rather than LOG_INFO in order to
    avoid messages about valid metadata areas being displayed
    during "dmraid -vay".
  - isw, sil filed metadata offset on "-r -D" in sectors rather than in bytes.
  - isw needed dev_sort() to sort RAID devices in sets correctly.
  - pdc metadata format handler name creation. Lead to
    wrong RAID set grouping logic in some configurations.
  - pdc RAID1 size calculation fixed (rc6.1)
  - dos.c: partition table code fixes by Paul Moore
  - _free_dev_pointers(): fixed potential OOB error
  - hpt37x_check: deal with raid_disks = 1 in mirror sets
  - pdc_check: status & 0x80 doesn't always show a failed device;
    removed that check for now. Status definitions needed.
  - sil addition of RAID sets to global list of sets
  - sil spare device memory leak
  - group_set(): removal of RAID set in case of error
  - hpt37x: handle total_secs > device size
  - allow -p with -f
  - enhanced error message by checking target type against list of
    registered target types


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.11-1
changelog:
  - Update to m4-1.4.11 (removed vasnprintf patch, it's included in
    upstream source)
    Resolves: #443589


author: Miloslav Trmac <mitr@redhat.com> - 1.4.5-3
changelog:
  - Use the install-info scriptlets recommended in the Fedora Extras wiki
  - Move $RPM_BUILD_ROOT cleaning from %prep to %install


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add URL tag
  - improved spec file
  - add hack to update config.guess config.sub
  - fix to build with newer autoconf versions


author: Jirka Hladky <jhladky@redhat.com> - 20160814-1
changelog:
  - Update to new upstream version 20160814
  - It includes new tool cpuinfo2cpuid which enables to process /proc/cpuinfo
  - Rebuilt for RHEL6 (rhbz#1316998)


author: Fabian Affolter <mail@fabian-affolter.ch> - 20060917-2
changelog:
  - Switch to ExclusiveArch
  - Remove %doc from man page and general changes to the man page installation


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.3.8.el6uek]
changelog:
  - macsec: dynamically allocate space for sglist (Jason A. Donenfeld)  [Orabug: 26368162]  {CVE-2017-7477} 
  - macsec: avoid heap overflow in skb_to_sgvec (Jason A. Donenfeld)  [Orabug: 26368162]  {CVE-2017-7477} 
  - nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields)  [Orabug: 26366988]  {CVE-2017-7645}


author: Brian C. Lane <bcl@redhat.com> 2.1-27
changelog:
  - libparted: fix gpt end of disk handling
    Resolves: rhbz#1180683
  - tests: Add tests for gpt end of disk handling
    Related: rhbz#1180683


author: Brian C. Lane <bcl@redhat.com> 2.1-26
changelog:
  - libparted: device mapper uses 512b sectors
    Resolves: rhbz#1189328
  - tests: Add a test for device-mapper partition sizes
    Related: rhbz#1189328
  - tests: Turn on testing of other blocksizes
    Related: rhbz#1189328


author: Brian C. Lane <bcl@redhat.com> 2.1-23
changelog:
  - Drop the warning about greater than 512-byte sector sizes being experimental
    Resolves: rhbz#929319


author: Brian C. Lane <bcl@redhat.com> 2.1-22
changelog:
  - Add PreP GUID support
    Resolves: rhbz#1054283
  - Fix busy partition detection on devices witout sequential minor device numbers
    Resolves: rhbz#1018075
  - Fix align-check in interactive mode
    Resolves: rhbz#975478


author: Brian C. Lane <bcl@redhat.com> 2.1-21
changelog:
  - Raise size limit on loop devices
    Resolves: #869743
  - Remove dm device when last partition is removed
    Resolves: #851705


author: Brian C. Lane <bcl@redhat.com> 2.1-19
changelog:
  - libparted: HFS/HFS+ probe: don't let a corrupt FS evoke failed assertion
    Resolves: #797979
  - tests: exercise and document the HFS-probe bug fix
    Resolves: #797979
  - libparted: use largest_partnum in dm_reread_part_table
    Resolves: #803108
  - tests: test creating 20 device-mapper partitions
    Resolves: #803108
  - libparted: preserve the uuid on dm partitions
    Resolves: #832145
  - tests: Make sure dm UUIDs are not erased
    Resolves: #832145


author: Brian C. Lane <bcl@redhat.com> 2.1-18
changelog:
  - libparted: copy flags when duplicating GPT partitions
  - test for GPT partition duplicate
    Resolves: #750395
  - Use dm_udev_wait for dm operations
    Resolves: #698121
    Resolves: #751164


author: Brian C. Lane <bcl@redhat.com> 2.1-17
changelog:
  - Disable t9020 (scsi_debug num_parts is broken)
  - Add a wait loop to t9030 when removing the partition
  - Remove size parameter from scsi_debug in t9030
    Resolves: #746098


author: Brian C. Lane <bcl@redhat.com> 2.1-14
changelog:
  - Fix scsi_debug race condition in tests
  - turn t9020 and t9030 tests back on
  - Add legacy_boot support to GPT disklabel (#711148)
    Resolves: #711148
  - Remove asserts from CHS guessing code (#692562)
    Resolves: #692562
  - Fix snap radius and don't allow values < 1 (#665496)
    Resolves: #665496


author: Brian C. Lane <bcl@redhat.com> 2.1-13
changelog:
  - Double the buffer for fdasd_check_api_version
    Resolves: #693852
  - Disable tests that fail when run as root


author: Brian C. Lane <bcl@redhat.com> 2.1-11
changelog:
  - Document the align-check command
    Resolves: #642476
  - Default to 1MiB partition alignment
    Resolves: #618255


author: Hans de Goede <hdegoede@redhat.com> 2.1-7
changelog:
  - Properly check dm_task_run return value (#585158)
    Resolves: #585158
  - Fix mkpartfs (ext2) on partitions >2TB (#585159)
    Resolves: #585159
  - Add a flag for detecting diagnostics / recovery partitions


author: Hans de Goede <hdegoede@redhat.com> 2.1-3
changelog:
  - Don't crash when reading a DASD disk with PV's on there (#563419)
    Resolves: #563419
  - Don't overwrite the pmbr when merely printing a gpt table (#563211)
    Resolves: #563211


author: Hans de Goede <hdegoede@redhat.com> 2.1-2
changelog:
  - Fix various memory leaks in error paths (#556012)
  - Add %check section to the specfile, invoking make check
  - If a drive does not have alignment information available default
    to an alignment of 1MiB (#559639)
    Resolves: #559639


author: Hans de Goede <hdegoede@redhat.com> 2.1-1
changelog:
  - New upstream release 2.1
  - Drop all our patches (all merged upstream)
  - This fixes the usage of disks with 4k logical sectors (#523954)
    Resolves: #523954


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-25
changelog:
  - Fix crash when partitioning loopback devices (#546622)
    Resolves: #549075
  - Drop no-cylinder-align patch:
    - its functionality is superseeded by the per disk flags
    - its only user (pyparted) has been updated to use those
    - this is not upstream so we don't want other programs to start using it


author: Hans de Goede <hdegoede@redhat.com> 1.9.0-24
changelog:
  - Allow partitioning of loopback devices (#546622)
  - Add libparted function to query maximum partition length and start
    addresses for a given disk (#533417)
  - Add per disk flags functions from upstream, this is the way upstream
    has implemented the disable cylinder alignment functionality
  - Add --align cmdline option to specify how to align new partitions
    see the parted man page for details (#361951)
  - Make the default alignment for new partitions optimal (#361951)
    Resolves: #361951
  - When cylinder alignment is disabled, allow use of the last (incomplete)
    cylinder of the disk (#533328)
  - Don't crash when printing partition tables in Russian (#543029)
  - Make parted work correctly with new lvm (#525095)


