# changelog

author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-3
changelog:
  - added fix from #209400 - Bind Init Script does not create 
    the PID file always, created by Jeff Means
  - added timeout to stop section of init script. 
    The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT
    shell variable.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.2-37
changelog:
  - fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory
  - fix for #202547 - file_contexts: invalid context


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32
changelog:
  - fix addenda to bug 189789: 
    determination of selinux enabled was still not 100% correct in bind-chroot-admin
  - fix addenda to bug 196398:
    make named.init test for NetworkManager being enabled AFTER testing for -D absence;
    named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable
    auto-enable of named dbus support if NetworkManager enabled.


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30
changelog:
  - fix bug 196398 - Enable -D option automatically in initscript
    if NetworkManager enabled in any runlevel.
  - fix namedGetForwarders for new dbus
  - fix bug 195881 - libbind.so should be owned by bind-libbind-devel


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6
changelog:
  - fix bugs 191093, 189789
  - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version:
    ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): 
    o change 2024 / bug 16027:
      named emitted spurious "zone serial unchanged" messages on reload
    o change 2013 / bug 15941:
      handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully
    o change 2009 / bug 15808: coverity fixes
    o change 1997 / bug 15818: 
      named was failing to replace negative cache entries when a positive one
      for the type was learnt
    o change 1994 / bug 15694: OpenSSL 0.9.8 support
    o change 1991 / bug 15813:
      The configuration data, once read, should be treated as readonly.
    o misc. validator fixes 
    o misc. resolver fixes
    o misc. dns fixes
    o misc. isc fixes
    o misc. libbind fixes
    o misc. isccfg fix
    o misc. lwres fix
    o misc. named fixes
    o misc. dig fixes
    o misc. nsupdate fix
    o misc. tests fixes


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22
changelog:
  - apply upstream patch for ncache_adderesult segfault bug 173961 addenda
  - fix bug 188382: rpm --verify permissions inconsistencies
  - fix bug 189186: use /sbin/service instead of initscript
  - rebuild for new gcc, glibc-kernheaders


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20
changelog:
  - fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 
    (upstream bugs #15642, #15528 ?)
  - allow named ability to generate core dumps after setuid (upstream bug #15753)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16
changelog:
  - fix bug 187286: 
       prevent host(1) printing duplicate 'is an alias for' messages
       for the default AAAA and MX lookups as well as for the A lookup
       (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups).
       This is upstream bug #15702 fixed in the unreleased bind-9.3.3
  - fix bug 187333: fix SOURCE24 and SOURCE25 transposition


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14
changelog:
  - fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup
  - add '%doc' sample configuration files in /usr/share/doc/bind*/sample
  - rebuild with new gcc and glibc


author: Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8
changelog:
  - Do not allow package to be installed if named:25 userid creation fails
  - Give libbind a pkg-config file
  - remove restorecon from bind-chroot-admin (not required).
  - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6
changelog:
  - replace caching-nameserver with bind-config sub-package
  - fix bug 177595: handle case where $ROOTDIR is a link in initscript
  - fix bug 177001: bind-config creates symlinks OK now
  - fix bug 176388: named.conf is now never replaced by any RPM
  - fix bug 176248: remove unecessary creation of rpmsave links
  - fix bug 174925: no replacement of named.conf
  - fix bug 173963: existing named.conf never modified
  - major .spec file cleanup


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4
changelog:
  - regenerate redhat_doc patch for non-DBUS builds
  - allow dbus builds to work with dbus version < 0.6 (bz #179816)


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24
changelog:
  - allow D-BUS support to work in bind-chroot environment:
    workaround latest selinux policy by mounting /var/run/dbus/
    under chroot instead of /var/run/dbus/system-bus-socket


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22
changelog:
  - fix bug 172632 - remove .la files
  - ship namedGetForwarders and namedSetForwarders scripts
  - fix detection of -D option in chroot


author: Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20
changelog:
  - Allow the -D enable D-BUS option to be used within bind-chroot .
  - fix bug 171226: supply some documentation for pgsql SDB .


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18
changelog:
  - fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() -
        task->state != task_ready and will cause Abort in task.c if process
        is waiting for NameOwnerChanged to do a SetForwarders


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
changelog:
  - fix bug 168302: use %{__cc} for compiling dns-keygen
  - fix bug 167682: bind-chroot directory permissions
  - fix issues with -D dbus option when dbus service not running or disabled


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10
changelog:
  - Build with D-BUS patch by default; D-BUS support enabled with named -D option
  - Enable D-BUS for named_sdb also
  - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create()
  - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server
  - fix named.init script to handle named_sdb properly
  - fix named.init script checkconfig() to handle named '-c' option
    and make configtest, test, check configcheck synonyms


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7
changelog:
  - fix bug 160914: resolver utilities should try next server on empty referral
                    (now that glibc bug 162625 is fixed)
                    host and nslookup now by default try next server on SERVFAIL
                    (host now has '-s' option to disable, and nslookup given
                     '[no]fail' option similar to dig's [no]fail option).
  - rebuild and re-test with new glibc & gcc (all tests passed).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6
changelog:
  - fix bug 157950: dig / host / nslookup should reject invalid resolv.conf
                    files and not use uninitialized garbage nameserver values
                    (ISC bug 14841 raised).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4
changelog:
  - Fix bug 157601: give named.init a configtest function
  - Fix bug 156797: named.init should check SELinux booleans.local before booleans
  - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc
  - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat
                    BIND quirks and SELinux DDNS / slave zone file configuration
  - D-BUS patches NOT applied until dhcdbd is in FC


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbus
changelog:
  - Enhancement to allow dynamic forwarder table management and
  - DHCP forwarder auto-configuration with D-BUS


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4
changelog:
  - Rebuild for bind-sdb libpq.so.3 dependency
  - fix bug 150981: don't install libbind man-pages if no libbind
  - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...)
    to work and correct number of CPUs to be determined


author: Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5
changelog:
  - fix bug 150288: h_errno not being accessed / set correctly in libbind
  - add libbind man-pages from bind-8.4.6


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1
changelog:
  - Upgrade to 9.3.1rc1
  - Add Simplified Database Backend (SDB) sub-package ( bind-sdb )
  -     add named_sdb - ldap + pgsql + dir database backend support with
  -     'ENABLE_SDB' named.sysconfig option
  - Add BIND resolver library & includes sub-package ( libbind-devel)
  - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init
  - fix bug 146084 : shutup restorecon


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2
changelog:
  - Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named
  -                 based on 'named_write_master_zones' SELinux boolean.
  - Fix bug 143744: dig & nsupdate IPv6 timeout  (dup of 140528)


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4
changelog:
  - Fix bugs 140528 and 141113:
  - 2 second timeouts when IPv6 not configured and root nameserver's
  - AAAA addresses are queried


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2
changelog:
  - Fix bug 136243: bind-chroot %post must run restorecon -R /var/named/chroot
  - Fix bug 135175: named.init must return non-zero if named is not run
  - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named
  - Fix bug 133423: bind-chroot %files entries should have been %dirs


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1
changelog:
  - BIND 9.2.4 (final release) released - source code actually
  - identical to 9.2.4rc8, with only version number change.


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
changelog:
  - Upgrade to upstream bind-9.2.4rc8 .
  - Progress: Finally! Hooray! ISC bind now distributes:
  - o named.conf(5) and nslookup(8) manpages
  -    'bind-manpages.bz2' source can now disappear
  -    (could this have something to do with ISC bug I raised about this?)
  - o 'deprecation_msg' global has vanished
  -     bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3
changelog:
  - Fix bug 132303: if ROOTDIR line was replaced after upgrade from
  - bind-chroot-9.2.2-21, restart named


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3
changelog:
  - Fix bug 131803: replace ROOTDIR line removed by broken
  - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chroot


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10
changelog:
  - Fix bug 130121: add '%ghost' entries for files included in previous
  - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* -
  - that RPM removed after upgrade .


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fix bug 130981: add '-t' option to named-checkconf invocation in
  - named.init if chroot installed.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Remove resolver(5) manpage now in man-pages (bug 130792);
  - Don't create /dev/ entries in bind-chroot if already there (bug 127556);
  - fix bind-devel Requires (bug 130919)
  - Set default location for dumpdb & stats files to /var/named/data


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed bug 129289: bind-chroot install / deinstall
  - on install, existing config files 'safe_replace'd
  - with links to chroot copies; on uninstall, moved back.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed named.init generation of error messages on
  - 'service named stop' and 'service named reload'
  - as per bug 127775


author: Daniel Walsh <dwalsh@redhat.com> 9.2.2-13
changelog:
  - Fix config description of named.conf in chroot
  - Change named.init script to check for existence of /etc/sysconfig/network


author: Daniel Walsh <dwalsh@redhat.com> 9.2.1-12
changelog:
  - Fix log rotate to use service named reload
  - Change service named reload to give success/failure message [73770]
  - Fix File checking [75710]
  - Begin change to automatically run in CHROOT environment


author: Karsten Hopp <karsten@redhat.de> 9.2.1-7
changelog:
  - fix name of pidfine in logrotate script (#68842)
  - fix owner of logfile in logrotate script (#41391)
  - fix nslookup and named.conf man pages (output on stderr)
    (#63553, #63560, #63561, #54889, #57457)
  - add rfc1912 (#50005)
  - gzip all rfc's
  - fix typo in keygen.c (#54870)
  - added missing manpages (#64065)
  - shutdown named properly with rndc stop (#62492)
  - /sbin/nologin instead of /bin/false (#68607)
  - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381)
  - don't kill initscript when rndc fails (reload)    (#58750)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2
changelog:
  - Move libisccc, lib isccfg and liblwres from bind-utils to bind,
    they're not required if you aren't running a nameserver.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7
changelog:
  - Don't exit if /etc/named.conf doesn't exist if we're running
    chroot (#60868)
  - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders
    versions or bug #58335 will be back. "It compiles, therefore it works"
    isn't always true.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1
changelog:
  - 9.2.0rc3
  - remove ttl patch, I don't think we need this for 8.0.
  - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page
  - add lwres* man pages to -devel


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4
changelog:
  - Make sure /etc/rndc.conf isn't world-readable even after the
    %post script inserted a random key (#53009)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3
changelog:
  - Add build dependencies (#49368)
  - Make sure running service named start several times doesn't create
    useless processes (#47596)
  - Work around the named parent process returning 0 even if the config
    file is broken (it's parsed later by the child processes) (#45484)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2
changelog:
  - Add named.conf man page from bind 8.x (outdated, but better than nothing,
    - Rename the rndc key (#42895)
  - Add dnssec* man pages


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1
changelog:
  - 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for
    the version number, though.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9
changelog:
  - Work around bind 8 -> bind 9 migration problem when using buggy zone files:
    accept zones without a TTL, but spew out a big fat warning. (#31393)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't use the standard rndc key from the documentation, instead, create a random one
    at installation time (#26358)
  - Make /etc/rndc.conf readable by user named only, it contains secret keys


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes
    from 9.1.1rc2
  - bind requires bind-utils (#28317)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us;
    1 was fixed in a Red Hat patch already, 2 others are portability
    improvements)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Make /etc/rndc.conf and /etc/sysconfig/named noreplace
  - Make devel require bind = %{version} rather than just bind


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move run files to /var/run/named/ - /var/run isn't writable
    by the user we're running as. (Bug #20665)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed logrotate script (wrong path to kill)
  - include header files in -devel package
  - bugzilla #22049, #19147, 21606


author: Bernhard Rosenkranzer <bero@redhat.com>
changelog:
  - Fix up the initscript (Bug #13033)
  - Fix build with current glibc (Bug #12755)
  - /etc/rc.d/init.d -> /etc/init.d
  - use %{_mandir} rather than /usr/share/man


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify logrotate setup to use PID file
  - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time
  - actually bump the release this time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - provide /var/named (fix for bugs #9847, #10205)
  - preserve args when restarted via ndc(8) (bug #10227)
  - make resolv.conf(5) a link to resolver(5) (bug #10245)
  - fix SYSTYPE bug in all makefiles
  - move creation of named user from %post into %pre


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up location of named-bootconf.pl and make it executable
    (Bug #8028)
  - bind-devel requires bind


author: Preston Brown <pbrown@redhat.com>
changelog:
  - use real stop and start in named.init for restart, not ndc restart, it has
    problems when named has changed during a package update... (# 4890)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 8.2.1.
  - add named.logrotate (#3571).
  - hack around egcs-1.1.2 -m486 bug (#3413, #3485).
  - vet file list.


author: Stepan Kasal <kasal@math.cas.cz>
changelog:
  - nslookup patched:
    to count numRecords properly
    to fix subsequent calls to ls -d
    to parse "view" and "finger" commands properly
    the view hack updated for bind-8 (using sed)


author: Manuel J. Galan <manolow@step.es>
changelog:
  - Several essential modifications to build and install correctly.
  - Modified 'ndc' to avoid deprecated use of '-'


author: Scott Lampert <fortunato@heavymetal.org>
changelog:
  - Used buildroot
  - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include
    on Redhat 5.0 instead of <nlist.h>


author: Miroslav Lichvar <mlichvar@redhat.com> 6.0-3
changelog:
  - include patch 004
  - suppress install-info errors (#515910)
  - remove dir* in infodir after install (#492097)


author: Miroslav Lichvar <mlichvar@redhat.com> 5.2-8
changelog:
  - fix cursor position when prompt has one invisible character (#358231)
  - merge review fixes (#226361)
  - fix source URL


author: Miroslav Lichvar <mlichvar@redhat.com> 5.2-3
changelog:
  - link libreadline with libtinfo (#232277)
  - include upstream 5.2-001 patch
  - move static libraries to -static subpackage, spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> 5.2-1
changelog:
  - update to 5.2 (#213795)
  - use CFLAGS when linking (#199374)
  - package docs and examples (#172497)
  - spec cleanup


author: Jindrich Novy <jnovy@redhat.com> 5.1-1
changelog:
  - update to readline-5.1
  - apply new proposed upstream patches for 5.1 (001-004)
  - drop "read -e" patch, applied upstream


author: Matt Wilson <msw@redhat.com> 4.2a-2
changelog:
  - removed the manual symlinking of .so, readline handles this by itself
  - call only %makeinstall, not %makeinstall install install-shared as
    this makes bogus .old files in the buildroot


author: Bernhard Rosenkraenzer <bero@redhat.com> 4.2-3
changelog:
  - Don't use readline's internal re-implementation of strpbrk on systems
    that have strpbrk - the system implementation is faster and better maintained.


author: Bernhard Rosenkraenzer <bero@redhat.com> 4.2-2
changelog:
  - Make sure headers can be included from C++ applications (#51131)
    (Patch based on Debian's with the bugs removed ;) )


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change the paths listed for the header files in the man page to reflect
    the location changes from previous versions (#35073)
  - note that "on" is acceptable instead of "On" in the man page (#21327)


author: Marek Kasik <mkasik@redhat.com> - 0.12.4-4
changelog:
  - Add poppler-0.12.4-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.12.4-CVE-2010-3703.patch
      (Properly initialize stack)
  - Add poppler-0.12.4-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639860


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-4
changelog:
  - Fix text selection
  - Add patch poppler-0.12.3-text-selection.patch by Brian Ewins
  - Add patch poppler-0.12.3-text-selection-tables.patch by Marek Kasik
  - Make Provides/Obsoletes versioned
  - Add requirement of poppler-data
  - Resolves: #557812


author: Marek Kasik <mkasik@redhat.com> - 0.12.3-3
changelog:
  - Correct %changelog
  - Correct permissions of goo/GooTimer.h
  - Convert pdftohtml.1 to utf8
  - Related: #543948


author: Adam Jackson <ajax@redhat.com> 0.8.0-3
changelog:
  - poppler-0.8.0-ocg-crash.patch: Fix a crash when no optional content
    groups are defined.
  - Mangle configure to account for the new directory for qt3 libs.
  - Fix grammar in %description.


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-33
changelog:
  - add into example in crontab user-name
  - change name of crontab to crontab1 to be able add patch into cvs
  - Resolves: rhbz#609544


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-30
changelog:
  - 491793 thanks Andrew Hecox for patch which allows set allow/deny jobs
  - comment change "empty crontab"


author: Marcela Mašláňová <mmaslano@redhat.com> 1.10-26
changelog:
  - change /etc/crontab. All anacron jobs in cron.daily,weekly,...
   are check by anacron every hour. Anacron run them if they didn't
   run today.


author: Marcela Maslanova <mmaslano@redhat.com> 1.10-22
changelog:
  - remove scripts for delay, anacron now own most of the scripts. 
  Crontabs owns only run-parts, /etc/crontab and crontabs sysconfig.


author: Marcela Maslanova <mmaslano@redhat.com> 1.10-15
changelog:
  - corrected license tag in spec
  - add config file to crontab - delay of cron.{daily,...} could be
      switch off
  - Resolves: rhbz#253536


author: Erik Troan <ewt@redhat.com>
changelog:
  - moved crontab jobs up a bit to make sure they aren't confused by
    switching to and fro daylight savings time


author: Peter Schiffer <pschiffe@redhat.com> - 12.4-7
changelog:
  - resolves: #857120
    fixed incorrect return code when TMPDIR points to invalid path
  - resolves: #845098
    added support for alternatives


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-1
changelog:
  - Place mailx to /bin/mailx, to avoid extra symlink in redhat-lsb package
  - /bin/mailx is now a base binary, another symlinked to it.


author: Dmitry Butskoy <Dmitry@Butskoy.name>
changelog:
  - add missed BR for krb5-devel
  - activate IPv6 support
  - change config to /etc/mail.rc for compatibility
  - add triggerpostun scriptlets against previous mailx and nail
    to check and merge (when possible) their user config changes
  - use proper config filename in manuals
  - use "less" instead of non-provided "pg" for nobsdcompat mode


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.3-0
changelog:
  - Change the name from "nail" to upstream's "mailx".
    Merge with the ordinary "mailx" cvs tree for Fedora 10.
    Now this stuff supersedes the old ancient mailx-8.x in Fedora.
  - Build with nss instead of openssl, for "Security Consolidation" process.


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.0-2
changelog:
  - complete "mailx to nail" changes in the manual and config files
  - drop _smp_mflags: it caused make to work incorrectly.


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 12.0-1
changelog:
  - upgrade to 12.0
  - change new upstream name "mailx" to the old name "nail" to avoid
    conflicts with the Core mailx package.
  - drop Source1, use package's html file instead.


author: Dmitry Butskoy <Dmitry@Butskoy.name> - 11.25-3
changelog:
  - more spec file cleanups
  - accepted for Fedora Extra
    (review by Aurelien Bompard <gauret@free.fr>)


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-15
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #964687


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-12
changelog:
  - Update info about trap in man page
    Resolves: #799958
  - Enable system-wide bash_logout
    Resolves: #677439
  - instead of setting the signal handler to SIG_IGN while installing
    the new trap handler, block the signal and unblock it after the new handler
    is installed
    Resolves: #695656


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-5
changelog:
  - Builtins like echo and printf won't report errors
    when output does not succeed due to EPIPE
    Resolves: #664468


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-4
changelog:
  - don't segfault when trying to bind int variable to array
    with bad array subsrcipt
    Resolves: #618289


author: Roman Rakus rrakus@redhat.com 4.1.2-1
changelog:
  - rebase to 4.1
  - Patch level 2
    Resolves #542692
  - Include COPYING in bash base rpm
    Resolves #553250


author: Jesse Keating <jkeating@redhat.com> - 3.2-29
changelog:
  - Add the Requires(post) back for ncurses-libs, so that rpm knows
    where to break the loop.  The post actually does require the curses
    libs for the sh calls.  Could consider doing this in LUA and not have
    any external deps.


author: Roman Rakus <rrakus@redhat.com> - 3.2-28
changelog:
  - Removing Requires for mktemp and ncurses, which cause
    dependencing loop
  - Enabling #define SSH_SOURCE_BASHRC, because ssh changed.
    Resolves: #458839
  - Catch signals right after calling execve()
    Resolves: #455548


author: Tomas Janousek <tjanouse@redhat.com> - 3.2-20
changelog:
  - Added bash32-026 upstream official patch
  - Added bash32-027 upstream official patch (#249987)
  - Added bash32-028 upstream official patch
  - Added bash32-029 upstream official patch (#286861)
  - Added bash32-030 upstream official patch
  - Added bash32-031 upstream official patch (#358231)
  - Added bash32-032 upstream official patch
  - Added bash32-033 upstream official patch
  - Fix insert command repeating in vi mode (#190350)


author: Tomas Janousek <tjanouse@redhat.com> - 3.2-19
changelog:
  - fix cursor position when prompt has one invisible character (#358231)
  - dropped examples/loadables/ from docs, since it wasn't possible to build them
    anyway (#174380)
  - fix #286861: Wrong input confuses bash's arithmetic unit permanently
  - fix #344411: $RANDOM stays the same when job executed in the background


author: Pete Graner <pgraner@redhat.com> - 3.2-18
changelog:
  - Added bash32-021 upstream official patch
  - Added bash32-025 upstream official patch
  - Added bash32-024 upstream official patch
  - Added bash32-023 upstream official patch
  - Added bash32-022 upstream official patch


author: Pete Graner <pgraner@redhat.com> - 3.2-17
changelog:
  - Added bash32-018 upstream official patch
  - Added bash32-020 upstream official patch
  - Added bash32-019 upstream official patch


author: Pete Graner <pgraner@redhat.com> - 3.2-15
changelog:
  - Update to the Improve bash $RANDOM pseudo RNG (bug #234906) 
    now works with subshells and make $RANDOM on demand thus reducing the 
    amount of AVCs thrown.


author: Tim Waugh <twaugh@redhat.com> 3.2-7
changelog:
  - Reinstated this change:
    - Post requires ncurses (bug #224567).
  - Reverted this change:
    - Added triggers for install-info (bug #225609).


author: Tim Waugh <twaugh@redhat.com> 3.2-5
changelog:
  - Added triggers for install-info (bug #225609).
  - Use full path to utilities in scriptlets (bug #225609).
  - Fix missing sh-bangs in example scripts (bug #225609).
  - Post requires ncurses (bug #224567).
  - Removed Prefix tag (bug #225609).
  - Fixed BuildRoot tag (bug #225609).
  - Removed trailing full-stop from summary (bug #225609).
  - Spec file is now UTF-8 (bug #225609).
  - Removed obsolete Obsoletes (bug #225609).
  - Moved 'make check' to new 'check' section (bug #225609).
  - Removed uses of RPM_SOURCE_DIR (bug #225609).
  - Fixed macros in changelog (bug #225609).
  - Changed tabs to spaces (bug #225609).


author: Tim Waugh <twaugh@redhat.com> 3.2-1
changelog:
  - Build requires autoconf and gettext.
  - 3.2.  No longer need aq, login, ulimit, sighandler or read-memleak
    patches.


author: Tim Waugh <twaugh@redhat.com> 3.1-2
changelog:
  - No longer need loadables, mbinc or shellfunc patches.
  - Use literal single-quote in bash man page where appropriate (bug #177051).


author: Tim Waugh <twaugh@redhat.com> 3.1-1
changelog:
  - 3.1.
  - No longer need ia64, utf8, multibyteifs, jobs, sigpipe,
    read-e-segfault, manpage, crash, pwd, afs, subshell patches.
  - Remove wrap patch for now.
  - Use upstream patch to fix arrays.


author: Tim Waugh <twaugh@redhat.com> 3.0-40
changelog:
  - Fix read memleak when reading from non-blocking fd (bug #173283).
  - Missed another loop for improved sighandler patch (bug #169231).


author: Tim Waugh <twaugh@redhat.com> 3.0-36
changelog:
  - Added Url: tag (bug #172770).
  - Do not explicitly gzip info pages (bug #172770).
  - Fix permissions on bashbug (bug #172770).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixed AFS support for output redirection, so that the correct errors
    are reported for other filesystems (bug #155373).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Reverted this change:
    - Added code to /etc/skel/.bash_logout to support the gpm selection buffer
      invalidation on virtual terminals (bug #115493).


author: Tim Waugh <twaugh@redhat.com> 3.0-21
changelog:
  - Added code to /etc/skel/.bash_logout to support the gpm selection buffer
    invalidation on virtual terminals (bug #115493).


author: Tim Waugh <twaugh@redhat.com> 3.0-13
changelog:
  - Check for EINVAL from waitpid() and avoid WCONTINUED in that case.
  - Fixed jobs4 test.
  - Applied experimental upstream patch for trap compatibility.
  - Re-make documentation to reflect source changes.


author: Tim Waugh <twaugh@redhat.com> 3.0-5
changelog:
  - Make trap usage string show POSIX usage (bug #128938).
  - Updated ${x[@]:1} expansion fix from bug-bash list.
  - Updated patch to fix unset array crash (from bug-bash list).


author: Tim Waugh <twaugh@redhat.com> 3.0-2
changelog:
  - Fixed brace expansion (bug #129128).
  - Build with AFS support again, since bug #86514 seems fixed upstream
    (bug #129094).


author: Tim Waugh <twaugh@redhat.com> 2.05b-23
changelog:
  - Fix a warning message (bug #79629).
  - Don't remove generated source during build, for debuginfo package.
  - Don't build with AFS support (bug #86514).


author: Tim Waugh <twaugh@redhat.com> 2.05b-6
changelog:
  - Add the (4) patches from ftp.gnu.org (bug #75888, bug #72512).
  - Ship '.' man page, which doesn't get picked up by glob.
  - Don't install files not shipped when building.
  - Locale shell variables fix (bug #74701).


author: Tim Waugh <twaugh@redhat.com> 2.05b-4
changelog:
  - Fix history substitution modifiers in UTF-8 (bug #70294, bug #71186).
  - Fix ADVANCE_CHAR at end of string (bug #70819).
  - docs: CWRU/POSIX.NOTES no longer exists, but ship POSIX.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05a-9
changelog:
  - Add patch from Ulrich Drepper to get better error messages when trying
    to launch an application with a bad ELF interpreter (e.g. libc5 ld.so)
    (#60870)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-5
changelog:
  - Don't set BASH_ENV in .bash_profile, it causes .bashrc to be sourced
    twice in interactive non-login shells.
  - s/Copyright/License/


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-2
changelog:
  - bash comes with its own copy of readline... Add the patches we're
    applying in the readline package.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-1
changelog:
  - Update to 2.05
  - Change PROMPT_COMMAND in bashrc for xterms
    to something less space consuming (#24159)
  - Provide plugs for alternate prompt commands (#30634), but don't
    default to them


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 2.04 final
  - remove the echo, pwd, test and kill man pages from the package,
    we're getting them from sh-utils


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 2.04beta5
  - adapt patches
  - Fix up bashrc
  - Don't put in bashrc1, this should be done by the bash1 package
  - use install -c instead of plain install to work on *BSD
  - remove the collected patches - they're now in the base version.
  - make compressed man pages optional


author: Florian La Roche <Florian.LaRoche@redhat.com>
changelog:
  - add some collected patches for bash2
  - change it over to be the main bash package
  - install man-pages root:root
  - obsolete bash2, bash2-doc


author: Ian Macdonald <ianmacd@xs4all.nl>
changelog:
  - upgraded to version 2.02
  - Alpha, MIPS & Sparc patches removed due to lack of test platforms
  - glibc & signal patches no longer required
  - added documentation subpackage (doc)


author: Donnie Barnes <djb@redhat.com>
changelog:
  - added signal handling patch from Dean Gaudet <dgaudet@arctic.org> that
    is based on a change made in bash 2.0.  Should fix some early exit
    problems with suspends and fg.


author: Ray Strode <rstrode@redhat.com> - 1:1.2.16-9
changelog:
  Resolves: #547808
  - Fix activation of daemons (#545267)
  - Fix reload memleak (fdo #24697)
  - Don't forget about pending activations on reload (fdo #24350)
  - Fix reload race (fdo #21597)


author: Colin Walters <walters@redhat.com> - 1:1.2.16-2
changelog:
  - Explicitly add a dbus group id, fixes dbus files getting a
    random group id in cases where the RPM install order varies.
    Fixes https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=458183


author: Colin Walters <walters@redhat.com> - 1:1.2.16-1
changelog:
  - Upstream 1.2.16
  - Remove inotify patch, now upstreamed
  - Remove timeout patch, obsolete with upstream change to infinite
    timeout maximum by default


author: Matthias Clasen <mclasen@redhat.com> - 1.2.1-6
changelog:
  - Add a patch from upstream git that adds a method
    for changing the activation environment on the session bus


author: John (J5) Palmieri <johnp@redhat.com> - 1.2.1-1
changelog:
  - update to latest upstream
  - major version change is really a maint release for 1.1.20
    please read the NEWS file in the source for more information


author: David Zeuthen <davidz@redhat.com> - 1.1.20-1.el6_10
changelog:
  - Update to latest upstream release. Includes fix for CVE-2008-0595.
  - Drop some patches that went upstream already


author: John (J5) Palmieri <johnp@redhat.com> - 1.1.3-1
changelog:
  - new upstream version which obsoletes a number of our patches
  - doc section added for the devhelp docs


author: Dan Walsh <dwalsh@redhat.com> - 1.1.2-5.el6_10
changelog:
  - Reverse we_were_root check to setpcap if we were root.  Also only init
  audit if we were root.  So error dbus message will not show up when policy 
  reload happens.  dbus -session will no longer try to send audit message, 
  only system will.


author: David Zeuthen <davidz@redhat.com> - 1.1.2-2.el6_10
changelog:
  - Move system bus activation helper to /{lib,lib64}/dbus-1. Also set
    the correct mode and permissions. 
  - Own the directory /usr/share/dbus-1/system-services
  - Delete the diretory /{lib,lib64}/dbus-1.0 as it's not used
  - Pass 'dbus' instead of 81 as --with-dbus-user; otherwise the setuid
    system bus activation helper fails


author: Ray Strode <rstrode@redhat.com> - 1.0.1-1
changelog:
  - Update to 1.0.1
  - Apply patch from Thiago Macieira <thiago@kde.org> to 
    fix failed assertion in threading implementation
  - Drop some crazy looking build time speed optimization


author: John (J5) Palmieri <johnp@redhat.com> - 0.90-6
changelog:
  - change the arch-deps.h include directory to /usr/lib[64] instead of /lib[64]
    in the dbus-1.pc file after compile


author: John (J5) Palmieri <johnp@redhat.com> - 0.90-4
changelog:
  - add patch that pregenerates the xml introspect file so d-bus doesn't
    have to be running suring the build.


author: Karsten Hopp <karsten@redhat.de> 0.61-5.2
changelog:
  - add buildrequires libICE-devel, libSM-devel, libcap-devel
  - change buildrequires form libX11 to libX11-devel


author: John (J5) Palmieri <johnp@redhat.com> - 0.61-5
changelog:
  - Backport patch from dbus-connection.c
    - Allows interfaces to be NULL in the message header as per the spec
    - Fixes a problem with pendings calls blocking on a data starved socket


author: John (J5) Palmieri <johnp@redhat.com> 0.61-3
changelog:
  - ABI hasn't changed so add patch that makes dbus-sharp think
    it is still 0.60 (mono uses hard version names so any change
    means apps need to recompile)


author: John (J5) Palmieri <johnp@redhat.com> 0.60-7
changelog:
  - Add patch to fix the python callchain
  - Symlink dbus-send to /usr/bin because some applications
    look for it there


author: John (J5) Palmieri <johnp@redhat.com> 0.60-5
changelog:
  - move base libraries and binaries to /bin and /lib so they can be started
    before /usr is mounted on network mounted /usr systems
  - have D-Bus start early


author: John (J5) Palmieri <johnp@redhat.com> - 0.36.2-1
changelog:
  - upgrade to 0.36.2 which fixes an exploit where
    users can attach to another user's session bus (CAN-2005-0201)


author: John (J5) Palmieri <johnp@redhat.com> - 0.36-1
changelog:
  - Upgrade to dbus-0.36
  - Split modules that go into %{_lib}/python2.4/site-packages/dbus
  and those that go into %{python_sitelib}/dbus (they differ on 64bit)
  - Renable Qt bindings since packages in core can use them


author: John (J5) Palmieri <johnp@redhat.com> - 0.35.2-1
changelog:
  - Upgrade to dbus-0.35.2
  - removed dbus-0.34-kill-babysitter.patch
  - removed dbus-0.34-python-threadsync.patch
  - removed dbus-0.23-selinux-avc-audit.patch
  - added dbus-0.35.2-selinux-avc-audit.patch
  - take out restarts on upgrade


author: John (J5) Palmieri <johnp@redhat.com> - 0.34-1
changelog:
  - Upgrade to dbus-0.34
  - added dbus-0.34-kill-babysitter.patch
  - added dbus-0.34-python-threadsync.patch
  - remove dbus-0.32-print_child_pid.patch
  - remove dbus-0.32-deadlock-fix.patch
  - remove dbus-0.33-types.patch


author: John (J5) Palmieri <johnp@redhat.com> - 0.32-5
changelog:
  - replace selinux_init patch with selinux_chroot_workaround patch
    to work around bad selinux interactions when using chroots
    on the beehive build machines


author: John (J5) Palmieri <johnp@redhat.com> - 0.32-2
changelog:
  - add selinux-init patch to fix dbus from segfaulting when
    building on machines that don't have selinux enabled


author: John (J5) Palmieri <johnp@redhat.com> - 0.31-1
changelog:
  - update to upstream version 0.31
  - take out user has same id patch (merged upstream)
  - udi patch updated
  - dbus-daemon-1 renamed to dbus-daemon
  - dbus-glib-tool renamed to dbus-binding-tool
  - force gcc33 because pyrex generate improper lvalue code
  - disable audit patch for now


author: John (J5) Palmieri <johnp@redhat.com> - 0.23-4
changelog:
  - Explicitly pass in the pid file location to ./configure instead of
    letting it guess based on the build enviornment


author: John (J5) Palmieri <johnp@redhat.com> - 0.23-1
changelog:
  - Update to upstream version 0.23
  - Drop all patches except for the UDI patch as they have been 
    integrated upstream 
  - List of API changes:
        * add setgroups() to drop supplementary groups
        * removed dbus_bug_get_with_g_main since it's been replaced by dbus_g_bus_get
        * added support for int64 and uint64 to the python bindings
        * use SerivceOwnerChanges signal instead of ServiceCreated and ServiceDeleted


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Add a requires for glib2-devel in the devel package
  - Add SE-Linux backport from Colin Walters that fixes 
    messages getting lost in SE-Linux contexts


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Fixed patch to use dbus-1 instead of dbus-1.0
  - (configure.in): Exported just the datadir instead of
    the full path to the dbus datadir for consistency


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - reverting BuildRequires: redhat-release because of issues with build system
  - added precompiled version of the messagebus init script


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Moved dbus-viewer to new dbus-gtk package so that dbus-glib
    no longer requires X or GTK libraries. (RH Bug #130029)


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Added lib64 workaround for python bindings installing to
    the wrong lib directory on 64 bit archs


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Moved dbus-viewer, dbus-monitor and dbus-glib-tool 
    into the dbus-glib package so that the main dbus
    package does not depend on glib (Bug #125285)


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Conflict with cups prior to configuration file change, so that the
    %postun service condrestart works.


author: Havoc Pennington <hp@redhat.com> 0.13-2
changelog:
  - see if removing qt subpackage for now will get us through the build system,
    qt bindings not useful yet anyway


author: Havoc Pennington <hp@redhat.com> 0.11.91-3
changelog:
  - break the tiny dbus-launch that depends on X into separate package
    so a CUPS server doesn't need X installed


author: Havoc Pennington <hp@redhat.com> 0.6.93-1
changelog:
  - new cvs snap that actually forks to background and changes 
    user it's running as and so forth
  - create our system user in pre


author: Havoc Pennington <hp@redhat.com> 0.6.91-1
changelog:
  - disable qt for now because beehive hates me
  - pull a slightly newer cvs snap that creates socket directory
  - cat the make check log after make check fails


author: Chris PeBenito <cpebenito@tresys.com> 3.3.4-1
changelog:
  - Fixes gcc 4.3, glibc 2.7, tcl 8.5, and libsepol 2.0.20 issues.
  - Fix policy loading when policy on disk is higher version than the kernel.


author: Dan Walsh <dwalsh@redhat.com> 2.3-1
changelog:
  - Update from upstream
    * apol:
          added new MLS components tab for sensitivities, 
          levels, and categories.
          Changed users tab to support ranges and default 
          levels.
          added range transition tab for searching range
          Transition rules.
          added new tab for network context components.
          added new tab for file system context components.
    * libapol:
          added binpol support for MLS, network contexts, 
          and file system contexts.
    * seinfo:
          added command line options for MLS components.
          added command line options for network contexts
          and file system contexts.
    * sesearch:
          added command line option for searching for rules
          by conditional boolean name.
    * seaudit:
          added new column in the log view for the 'comm' 
          field found in auditd log files.
          added filters for the 'comm' field and 'message'
          field.
    * manpages:
          added manpages for all tools.


author: Bill Nottingham <notting@redhat.com> 2.1.0-5
changelog:
  - put libraries in the right place (also puts debuginfo in the right
    package)
  - add %defattr for -devel too


author: Dan Walsh <dwalsh@redhat.com> 1.1-1
changelog:
  - Update to latest code from tresys
  - Break into three separate packages for cmdline, devel and gui
  - Incorporate the tcl patch


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10.el6_8.2
changelog:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - fix calculation of root distance again (CVE-2016-7433)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10.el6_8.1
changelog:
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10
changelog:
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-9
changelog:
  - fix crash with invalid logconfig command (CVE-2015-5194)
  - fix crash when referencing disabled statistic type (CVE-2015-5195)
  - don't hang in sntp with crafted reply (CVE-2015-5219)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
    CVE-2015-7702)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - add option to set Differentiated Services Code Point (DSCP) (#1228314)
  - extend rawstats log (#1242895)
  - fix resetting of leap status (#1243034)
  - report clock state changes related to leap seconds (#1242937)
  - allow -4/-6 on restrict lines with mask (#1232146)
  - retry joining multicast groups (#1288534)
  - explain synchronised state in ntpstat man page (#1286969)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-7
changelog:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-5
changelog:
  - reject packets without MAC when authentication is enabled (CVE-2015-1798)
  - protect symmetric associations with symmetric key against DoS attack
    (CVE-2015-1799)
  - fix generation of MD5 keys with ntp-keygen on big-endian systems
    (CVE-2015-3405)
  - log when stepping clock for leap second or ignoring it with -x (#1204625)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-3
changelog:
  - validate lengths of values in extension fields (CVE-2014-9297)
  - drop packets with spoofed source address ::1 (CVE-2014-9298)
  - add nanosecond support to SHM refclock (#1117704)
  - allow creating all SHM segments with owner-only access (#1122015)
  - allow symmetric keys up to 32 bytes again (#1053551)
  - fix calculation of root dispersion (#1045376)
  - fix crash in ntpq mreadvar command (#1165141)
  - don't step clock for leap second with -x option (#1190619)
  - don't drop packets with source port below 123 (#1171630)
  - use larger RSA exponent in ntp-keygen (#1184421)
  - refresh peers on routing updates (#1193850)
  - increase memlock limit again (#1053568)
  - warn when monitor can't be disabled due to limited restrict (#1166596)
  - improve documentation of restrict command (#1069019)
  - update logconfig documentation for patched default (#1193849)
  - don't build ntpsnmpd (#995134)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-2
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)
  - don't mobilize passive association when authentication fails (CVE-2014-9296)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-1
changelog:
  - update to 4.2.6p5 (#654004, #641800, #714079, #714084, #716968, #819781,
    - bind broadcast client to new interfaces (#973807)
  - allow selection of cipher for private key files (#749530)
  - retry few times in ntpdate init script before giving up (#673198)
  - print synchronization distance instead of dispersion in ntpstat (#830821)
  - ignore duplicate servers from dhclient (#862983)
  - add fourth server to default ntp.conf and use iburst (#667524, #623616)
  - drop comment enabling local driver in default config (#816645)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-3
changelog:
  - handle system time jumps better
  - don't wake up every second for refclocks without timer
  - don't crash in ntpstat when unknown clock type is received (#505564)
  - make ntpstat process first packet in multipacket response
  - switch to editline
  - set pool.ntp.org vendor zone in spec (#512711)
  - compile with -fno-strict-aliasing


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-2
changelog:
  - fix frequency calculation when starting with no drift file
  - reduce phase adjustments beyond Allan intercept in daemon PLL


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-1
changelog:
  - update to 4.2.4p7 (CVE-2009-1252)
  - improve PLL response when kernel discipline is disabled
  - don't log STA_MODE changes
  - enable nanokernel support
  - allow minpoll 3
  - increase memlock limit
  - move html documentation to -doc subpackage (#492444)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p6-4
changelog:
  - don't restart ntpd in dhclient script with every renewal
  - fix buffer overflow in ntpq (#490617)
  - check status in condrestart (#481261)
  - don't crash when compiled with HAVE_TIMER_CREATE (#486217)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p6-1
changelog:
  - update to 4.2.4p6 (CVE-2009-0021)
  - include dhclient script (David Cantrell)
  - convert COPYRIGHT to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p5-2
changelog:
  - retry failed name resolution few times before giving up (#460561)
  - don't write drift file upon exit
  - run ntpq with full path in ntp-wait script


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-7
changelog:
  - reload resolv.conf after temporary failure in name resolution (#456743)
  - use clock_gettime
  - make subpackages for perl scripts and ntpdate (#452097, #456116)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-5
changelog:
  - fix building IPv6 support with new glibc-headers (#436713)
  - avoid unaligned memory access (#435301)
  - fix receiving broadcasts on 255.255.255.255


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-4
changelog:
  - reset kernel frequency when -x option is used
  - create separate init script for ntpdate
  - add note about paths and exit codes to ntpd man page


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-1
changelog:
  - update to 4.2.4p4
  - fix default NTP version for outgoing packets in ntpdate man page
    (#245408)
  - replace BSD with advertising code in ntpdc and ntpq


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p2-5
changelog:
  - avoid use of uninitialized floating-point values in clock_select
  - update license tag (Tom "spot" Callaway)
  - drop sntp, MSNTP license is non-free


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p2-2
changelog:
  - ignore tentative addresses (#246297)
  - improve init script (#247003)
  - fix sleep patch
  - ease Autokey setup (#139673)
    - change default keysdir to /etc/ntp/crypto
    - set crypto password in /etc/ntp/crypto/pw
    - don't use randfile if /dev/urandom is used by OpenSSL
  - change default statsdir to /var/log/ntpstats/, use statistics type
    as default filename
  - package more doc files


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p0-3
changelog:
  - fix interface updates with -I or -L option (#240254)
  - accept multiple -I options
  - fix broadcast client/server to accept/allow sending
    broadcasts on 255.255.255.255 (#226958)
  - fix return codes in init script (#240120)
  - exit with nonzero code if ntpd -q did not set clock (#240134)
  - drop revert452 patch, fixed in kernel 2.6.19
  - make with _smp_mflags


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p0-1
changelog:
  - update to 4.2.4p0
  - fix init script
    - don't add second -g to ntpd options (#228424)
    - update getopts
    - skip all refclocks when parsing ntp.conf
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-4
changelog:
  - don't wake up every second (#204748)
  - add option to enable memory locking (#195617)
  - fix broadcast client
  - use option values in ntp-keygen
  - improve man pages


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-3
changelog:
  - disable autoopts option preset mechanisms for ntpd
  - document -I option of ntpd
  - generate makewhatis friendly man pages


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-1
changelog:
  - update to 4.2.4 (#146884)
  - don't use local clock in default config
  - autogenerate man pages from HTML
  - clean up spec a bit


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p4-1
changelog:
  - update to 4.2.2p4
  - fix buffer overflow in WWV Audio driver (#216309)
  - don't mark init script as config


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2-3
changelog:
  - fix manycast support in ntpdate (#194329)
  - reply to manycast requests with null refid
  - enable mlockall (#195617)
  - correct threshold value in ntpdate manpage


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-14
changelog:
  - modify ntp.conf, change default restrict, remove broadcastdelay,
    use fedora.pool.ntp.org (#189667)
  - don't install drift file
  - remove unsupported options from ntptrace manpage (#137717)
  - fix default paths in manpages for ntp-keygen and ntpdate


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-12
changelog:
  - fix initscript:
    - replace -U with -u in getopts (#187003)
    - don't pass group to ntpdate -U argument and ignore -i in options (#142926)
    - set ntpconf for -c
    - remove -p 8 from ntpdate arguments
    - don't call ntpdate when step-tickers doesn't contain anything useful
      and -x isn't in options
  - fix default keyfile for ntpdate (#183196)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-11
changelog:
  - update man pages (#153195, #162856)
  - drop C-Frame-121, vsnprintf, minusTi and loconly patch
  - prevent segfault when loopback interface is not configured (#159056)
  - spec cleanup


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-10
changelog:
  - ntpd does not submit his local clock (if there is no peer).
    ntpdate->ntpd #163862 , Patch13: ntp-stable-4.2.0a-20050816-loconly.patch


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-3
changelog:
  - A similar patch as ntp-4.0.99j-vsnprintf.patch in FEDORA CORE 4
  - (current patch is ntp-stable-4.2.0a-20050816-vsnprintf.patch)


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-2
changelog:
  - Fix fails on upgrade, if ntpd is disabled (#166773)
  - A cosmetic patch. There are some comments and braces '{' '}' added.
  - One unprintable character was converted to octal-form .
  - It can be removed anytime (conversion of the cvs-projets for C-Frame 121,
  - (auto-debug, auto-trace for cfr-printnet server).


author: Jindrich Novy <jnovy@redhat.com> 4.2.0.a.20050816-1
changelog:
  - update to the latest stable 4.2.0.a.20050816
  - drop upstreamed .gcc4, .vsnprintf patches
  - remove obsolete .autofoo patch
  - make patch numbering less chaotic
  - don't package backup for .droproot patch


author: Harald Hoyer <harald@redhat.com> - 4.2.0.a.20040617-4
changelog:
  - removed firewall hole punching from the initscript; rely on iptables
    ESTABLISHED,RELATED or manual firewall configuration


author: Harald Hoyer <harald@redhat.de> 4.1.1b-1
changelog:
  - updated to version 4.1.1b
  - improved initscript - use ntpdate on -x
  - improved initscript - open firewall only for timeservers
  - ntp-4.1.1a-adjtime.patch removed (already in source)
  - ntp-4.1.1a-mfp.patch removed (already in source)
  - ntp-4.0.99j-vsnprintf.patch removed (already in source)


author: Harald Hoyer <harald@redhat.de> 4.1.0b-4
changelog:
  - created drift with dummy value #58294
  - grep for timeservers in ntp.conf also for ntpdate #57837
  - check return value of ntpdate #58836


author: Harald Hoyer <harald@redhat.de> 4.1.0-1
changelog:
  - wow, how stupid can a man be ;).. fixed #50698 
  - updated to 4.1.0 (changes are small and in non-critical regions)


author: Harald Hoyer <harald@redhat.de>
changelog:
  - new snapshot
  - removed typos and security patch (already there)
  - commented multicastclient in config file


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Add the remote root exploit patch (based on ntp-hackers).
  - Enhance droproot patch (more documentation, etc.) <Jarno.Huuskonen@uku.fi>
  - Tweak the droproot patch to include sys/prctl.h, not linux/prctl.h
  (implicit declarations)
  - Remote groupdel commands, shouldn't be needed.
  - Removed -Wcast-qual and -Wconversion due to excessive warnings (hackish).
  - Make ntp compilable with both glibc 2.1 and 2.2.x (very dirty hack)
  - Add %{_sysconfdir}/sysconfig/ntpd which drops root privs by default


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - require/buildprereq libcap/libcap-devel
  - use 'ntp' user, tune the pre/post scripts, %files
  - add $OPTIONS to the init script


author: Preston Brown <pbrown@redhat.com>
changelog:
  - allow comments in %{_sysconfdir}/ntp/step-tickers file (#28786).
  - need patch0 (glibc patch) on ia64 too


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - comment out default values for keys, warn about starting with -A (#19316).
  - take out -A from ntpd startup as well.
  - update to 4.0.99k.


author: Karel Zak <kzak@redhat.com> 2.17.2-12.27
changelog:
  - fix #1349192 - RHEL6.8 util-linux-ng requires 642 kernel, but does not specify it as a dependency
  - fix #1023655 - 'pppd' hangs (uninterruptable) when run on tty


author: Karel Zak <kzak@redhat.com> 2.17.2-12.26
changelog:
  - fix #1320360 - lscpu shows wrong "Virtualization type" on Xen paravirtualization guest (PV)
  - fix #1319642 - [util-linux-ng] lscpu: Fix model and model name on Power Systems
  - fix #1319642 - [util-linux-ng] lscpu: Fix model and model name on Power Systems
  - fix #1310035 - Hostname not being displayed besides the telnet login prompt
  - fix #1310317 - fdisk -l fdisk double open fd
  - fix #1337478 - wrong error handler and/or error message on fdisk call as not root user


author: Karel Zak <kzak@redhat.com> 2.17.2-12.19
changelog:
  - fix #1088411 - lsblk does not list dm-multipath and partitioned devices
  - fix #1215840 - slogins segfault and failure to allocate memory
  - fix #1023655 - 'pppd' hangs (uninterruptable) when run on tty
  - fix #1168390 - lscpu doesn't show all nodes on a discontinuous NUMA setup
  - fix #1191236 - 'umount -f' calls readlink on dead NFS mounts and hangs
  - fix #1172297 - umount --fake fails to edit mtab for NFS mounts which are already gone
  - fix #961148  - RHEL6: swapon: add "discard" support
  - fix #1150302 - ionice support class names
  - fix #1085062 - fdisk -l fails to fully process /proc/partitions when multipath device
  - fix #1122839 - fallocate and findmnt have wrong options according to man pages
  - fix #1089663 - Not all xfs mount options are described in mount(8)
  - fix #1295737 - man page for hwclock doesn't include --compare option
  - fix #1140594 - mount --move badly documented
  - fix #1296894 - RHEL6: update audit event in hwclock
  - fix #1266191 - fdisk does not handle >2TB disks correctly


author: Karel Zak <kzak@redhat.com> 2.17.2-12.16
changelog:
  - fix #1033309 - man rename references mmv command which is not available
  - fix #1039187 - taskset man page PERMISSIONS section is incorrect
  - fix #999625 - mount does not appear to be correctly documented for default mount options
  - fix #1004021 - document blkid -w behaviour
  - fix #1011590 - fdisk: Floating point exception on multipath mapped device
  - fix #1031641 - findmnt should handle better trailing "/" in /proc/mounts entries
  - fix #1104575 - kill(1) doesn't check errno after calling strtol()
  - fix #1049055 - backport PID ns support to unshare(1) in util-linux-ng
  - fix #957906 - backport 'nsenter' utility to util-linux
  - fix #619521 - requesting to add logins(1m) command to distribution of Red Hat


author: Karel Zak <kzak@redhat.com> 2.17.2-12.13
changelog:
  - fix #816342 - agetty: improve CLOCAL flag management
  - fix #846790 - missing information about threads in kill(2) man page
  - fix #864585 - "mount -av" displays "nothing was mounted" when a /sbin/mount.<fs> successed
  - fix #868850 - sfdisk man pages should refer block devices as "block devices" rather than disks.
  - fix #870128 - improve blkid documentation
  - fix #870854 - Cannot use user@domain format for console logins
  - fix #872291 - "man hwclock" says to run non-existent "adjtimex" utility
  - fix #958313 - Add /bin/logger symlink
  - fix #885313 - hexdump segfault
  - fix #915844 - mount man page incorrectly describes behaviour of "relatime" mount option
  - fix #947062 - blkdiscard command support
  - fix #966735 - CPU add/delete util-linux-ng patch
  - fix #859523 - fallocate: add punch hole support


author: Karel Zak <kzak@redhat.com> 2.17.2-12.8
changelog:
  - fix #679833 - [RFE] tailf should support `-n 0`
  - fix #719927 - [RFE] add adjtimex --compare functionality to hwclock
  - fix #730272 - losetup does not warn if backing file is < 512 bytes
  - fix #730891 - document cfdisk and sfdisk incompatibility with 4096-bytes sectors
  - fix #736245 - lscpu segfault on non-uniform cpu configuration
  - fix #783514 - default barrier setting for EXT3 filesystems in mount manpage is wrong
  - fix #790728 - blkid ignores swap UUIDs if the first byte is a zero byte
  - fix #818621 - lsblk should not open device it prints info about
  - fix #819945 - hwclock --systz causes a system time jump
  - fix #820183 - mount(8) man page should include relatime in defaults definition
  - fix #823008 - update to the latest upstream lscpu and chcpu
  - fix #837935 - lscpu coredumps on a system with 158 active processors
  - fix #839281 - inode_readahead for ext4 should be inode_readahead_blks
  - fix #845477 - Duplicate SElinux mount options cause mounting from the commandline to fail
  - fix #845971 - while reading /etc/fstab, mount command returns a device before a directory
  - fix #858009 - login doesn't update /var/run/utmp properly
  - fix #809449 - Backport inverse tree (-s) option for lsblk and related patches
  - fix #809139 - lsblk option -D missing in manpage


author: Karel Zak <kzak@redhat.com> 2.17.2-12.5
changelog:
  - fix #588419 - Changing the console login timeout
  - fix #740163 - 'fdisk -l' returns confusing output
  - fix #785142 - uuidd service not active by defaul
  - fix #797888 - script does not play well with csh when invoked from within /etc/csh.login


author: Karel Zak <kzak@redhat.com> 2.17.2-12.4
changelog:
  - fix CVE-2011-1675 - mount fails to anticipate RLIMIT_FSIZE
  - fix CVE-2011-1677 - umount may fail to remove /etc/mtab~ lock file


author: Karel Zak <kzak@redhat.com> 2.17.2-12.1
changelog:
  - fix #723546 - Defects revealed by Coverity scan
  - fix #723352 - cfdisk cannot read default installer partitioning
  - fix #712158 - uid/gid overflow in ipcs
  - fix #696959 - wipefs(8) reject partitioned devices
  - fix #694648 - document blank line at head of fstab
  - fix #684203 - umount fails on inconsistent fstab
  - fix #679831 --lines does not work
  - fix #679741 - canonicalize swap device
  - fix #692119 - include fstrim tool
  - fix #675999 - blkid crashes on a server with more than 128 storage devices
  - fix #696731 - display failed login attempts
  - fix #726092 - Pass host name from agetty to login
  - fix #716995 - Remove Deprecation Statement in /etc/udev/rules.d/60-raw.rules
  - fix #712808 - uuidd should depend on chkconfig
  - fix #723638 - Backport upstream extensions for lsblk (RHEL6.2)


author: Karel Zak <kzak@redhat.com> 2.17.2-11
changelog:
  - fix #678306 - introduce safe variant of uuid_generate_time(), fix locking of counter file
  - fix #678378 - util-linux-ng code review


author: Karel Zak <kzak@redhat.com> 2.17.2-8
changelog:
  - fix #619139 - fsck returns zero instead of error code 
  - fix #621312 - losetup --help returns 1 (fail) for successful command execution
  - fix #651035 - misleading reference to samba-client in mount man page, cifs options
  - fix #612325 - RHEL6.0 Beta-1: Add mkfs.ext4 to mkfs man page
  - fix #650879 - RHEL6: /usr/bin/column segmentation fault
  - fix #626374 - fdisk incorrectly checks alignment for non-512-byte *logical* sectors
  - fix #663731 - sfdisk -d and fdisk -l print /dev/dm-<N>
  - fix #650953 - wipefs(8) does not erase LUKS
  - fix #656453 - libblkid incorrectly revalidated cache entries
  - fix #623012 - lscpu return error after offline cpu
  - fix #616393 - tmpfs mount fails with 'user' option
  - fix #561111 - remount of tmpfs fails on RHEL6 alpha
  - fix #624521 - fsck seems to run quasi-serially
  - fix #657082 - Add lsblk (list block devices) utility
  - fix #625064 - fuse-sshfs mounts cannot be unmounted as user
  - fix #615389 - Output of "mount" is missing mapping displays for loop-mounts
  - fix #616325 - Include findmnt in util-linux-ng package
  - fix #665376 - incorrectly documented the mount "atime" option
  - fix #670770 - lscpu does not identify 32bit capability on AMD
  - fic #671357 - mount.8 man page update for ext{3,4} options


author: Karel Zak <kzak@redhat.com> 2.17.2-5
changelog:
  - fix #561111 - remount of tmpfs fails on RHEL6 alpha
  - fix #612668 - backport fsfreeze from util-linux-ng 2.18
  - fix #598631 - shutdown, reboot, halt and C-A-D don't work


author: Karel Zak <kzak@redhat.com> 2.17.2-4
changelog:
  - fix #604875 - memory usage in wipefs(8)
  - fix #591133 - udev /dev/disk/by-uuid not populated
  - fix #602657 - fdisk -l does not show correctly partitions names for FCoE volumes
  - fix #591617 - lscpu does not use cpu masks properly


author: Karel Zak <kzak@redhat.com> 2.17.2-3
changelog:
  - fix #592958 - whole disk raid members to not be identified
  - fix #594689 - partx infinite loop
  - fix #589955 - add command-line interface for libblkid topology support


author: Karel Zak <kzak@redhat.com> 2.17.2-2
changelog:
  - fix #588248 - RHEL6: don't probe for RAIDs on CD-ROMs
  - fix #586368 - RHEL6: mdraid assembles incorrectly
  - fix #586942 - Add utempter support to "script"
  - fix #588298 - RHEL6: improve fdisk(8) move command.


author: Karel Zak <kzak@redhat.com> 2.17.2-1
changelog:
  - upgrade to the bugfix release 2.17.2 (#575722)
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.2-ChangeLog
  - remove: util-linux-ng-2.17-blkid-alignment-offset.patch
            util-linux-ng-2.17-blkid-minix.patch
            util-linux-ng-2.17-blkid-tinyflag.patch
  - fix #572937 - RHEL6: use microsecond resolution for blkid cache entries


author: Karel Zak <kzak@redhat.com> 2.17.1-3
changelog:
  - fix #572121 - RHEL6: reset tiny flag in libblkid
  - fix #572122 - RHEL6: blkid (and related) should be a bit more robust


author: Karel Zak <kzak@redhat.com> 2.17.1-1
changelog:
  - upgrade to 2.17.1 (bugfix release, #567555)
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17.1-ChangeLog
  - spec file fixes:
    fix floppyutil URL in specfile
    add missing liceces to License field
    fix mixed-use-of-spaces-and-tabs
  - fix #565888 - uuidd initscript lsb compliance
  - remove util-linux-ng-2.17-mount-mtabfake.patch (merged upstream)


author: Karel Zak <kzak@redhat.com> 2.17-3
changelog:
  - fix #533874 - RFE: libblkid should allow the developer to ask for 
    scanning of slow devices (eg. cdroms)


author: Karel Zak <kzak@redhat.com> 2.17-1
changelog:
  - rebase to the final 2.17
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17-0.5
changelog:
  - upgrade to 2.17-rc2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-rc2-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17-0.3
changelog:
  - upgrade to 2.17-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.17/v2.17-rc1-ChangeLog


author: Karel Zak <kzak@redhat.com> 2.17-0.2.git10dfc39
changelog:
  - upgrade to pre-release snapshot (official changelog not available yet, see
    http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git for now)


author: Karel Zak <kzak@redhat.com> 2.17-0.1.git5e51568
changelog:
  - upgrade to pre-release snapshot (official changelog not available yet, see
    http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git for now)  
  - new commands: fallocate, unshare, wipefs
  - libblkid supports topology and partitions probing
  - remove support for --rmpart[s] from blockdev(8) (util-linux-ng-2.14-blockdev-rmpart.patch)
  - merged upstream:
    util-linux-ng-2.14-sfdisk-dump.patch
    util-linux-ng-2.16-blkid-swsuspend.patch
    util-linux-ng-2.16-libblkid-compression.patch
    util-linux-ng-2.16-libblkid-ext2.patch
    util-linux-ng-2.16-switchroot-tty.patch


author: Tomas Mraz <tmraz@redhat.com> - 2.16-10
changelog:
  - use password-auth common PAM configuration instead of system-auth and
    drop pam_console.so call from the remote PAM config file


author: Karel Zak <kzak@redhat.com> 2.16-9
changelog:
  - fix #522718 - sfdisk -d /dev/xxx | sfdisk --force /dev/yyy fails when LANG is set
  - fix typo in swsuspend detection


author: Karel Zak <kzak@redhat.com> 2.16-1
changelog:
  - upgrade to 2.16
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.16/v2.16-ReleaseNotes
  - enable built-in libuuid (replacement for the old uuid stuff from e2fsprogs)
  - new commands switch_root, uuidgen and uuidd (subpackage)


author: Karel Zak <kzak@redhat.com> 2.15.1-0.1
changelog:
  - upgrade to 2.15.1-rc1
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.15/v2.15-ReleaseNotes
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.15/v2.15.1-rc1-ChangeLog 
  - merged patches:
    util-linux-ng-2.14-login-remote.patch
    util-linux-ng-2.14-fdisk-4k-I.patch
    util-linux-ng-2.14-fdisk-4k-II.patch
    util-linux-ng-2.14-fdisk-4k-III.patch
    util-linux-ng-2.14-dmesg-r.patch
    util-linux-ng-2.14-flock-segfaults.patch
    util-linux-ng-2.14-renice-n.patch
  - new commands: lscpu, ipcmk
  - remove support for "managed" and "kudzu" mount options
  - cleanup spec file
  - enable built-in libblkid (replacement for the old blkid from e2fsprogs)


author: Karel Zak <kzak@redhat.com> 2.14.2-5
changelog:
  - fix #489672 - flock segfaults when file name is not given (upstream)
  - fix #476964 - Mount /var/tmp with tmpfs creates denials
  - fix #487227 - fdisk 4KiB hw sectors support (upstream)
  - fix #477303 - renice doesn't support -n option (upstream)


author: Karel Zak <kzak@redhat.com> 2.14.2-1
changelog:
  - upgrade to stable 2.14.2
    ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.14/v2.14.2-ReleaseNotes


author: Karel Zak <kzak@redhat.com> 2.14.2-0.2
changelog:
  - fix #480413 - util-linux-ng doesn't include scriptreplay
  - fix #479002 - remove dependency on ConsoleKit-libs
  - upgrade to 2.14.2-rc2


author: Karel Zak <kzak@redhat.com> 2.14.1-3
changelog:
  - fix #465761 -  mount manpage is missing uid/gid mount options for tmpfs
  - refresh util-linux-ng-2.14-mount-file_t.patch (fuzz=0)


author: Karel Zak <kzak@redhat.com> 2.14-3
changelog:
  - update util-linux-ng-2.14-mount-file_t.patch to make
    the SELinux warning optional (verbose mode is required)


author: Karel Zak <kzak@redhat.com> 2.14-0.1
changelog:
  - upgrade to 2.14-rc3
  - remove arch(8) (deprecated in favor of uname(1) or arch(1) from coreutils)
  - add a new command ldattach(8)
  - cfdisk(8) linked with libncursesw


author: Karel Zak <kzak@redhat.com> 2.13.1-3
changelog:
  - upgrade to new upstream release
  - fix #427874 - util-linux-ng gets "excess command line argument" on update


author: Karel Zak <kzak@redhat.com> 2.13-0.59
changelog:
  - add release number to util-linux Provides and increment setarch Obsoletes
  - fix #254114 - spec typo
  - upgrade to floppy-0.16
  - add BuildRequires: popt-devel


author: Karel Zak <kzak@redhat.com> 2.13-0.57
changelog:
  - fix #253664 - util-linux-ng fails to build on sparc (patch by Dennis Gilmore)
  - rebase to new GIT snapshot


author: Karel Zak <kzak@redhat.com> 2.13-0.54
changelog:
  - port "blockdev --rmpart" patch from util-linux
  - use same Provides/Obsoletes setting like in util-linux


author: Karel Zak <kzak@redhat.com> 2.13-0.52
changelog:
  - rebase to util-linux-ng (new util-linux upstream fork,
  		based on util-linux 2.13-pre7)
  - more than 70 Fedora/RHEL patches have been merged to upstream code


author: Karel Zak <kzak@redhat.com> 2.13-0.51
changelog:
  - fix #150493 - hwclock --systohc sets clock 0.5 seconds slow
  - fix #220873 - starting RPC idmapd: Error: RPC MTAB does not exist.
  		(added rpc_pipefs to util-linux-2.13-umount-sysfs.patch)
  - fix #227903 - mount -f does not work with NFS-mounted


author: Karel Zak <kzak@redhat.com> 2.13-0.47
changelog:
  - fix #217240 - namei ignores non-directory components instead of saying "Not a directory"
  - fix #217241 - namei enforces symlink limits inconsistently


author: Karel Zak <kzak@redhat.com> 2.13-0.45
changelog:
  - use ncurses only
  - fix #218915 - fdisk -b 4K
  - upgrade to -pre7 release
  - fix building problem with raw0 patch
  - fix #217186 - /bin/sh: @MKINSTALLDIRS@: No such file or directory 
    (port po/Makefile.in.in from gettext-0.16)
  - sync with FC6 and RHEL5:
  - fix #216489 - SCHED_BATCH option missing in chrt
  - fix #216712 - issues with raw device support ("raw0" is wrong device name)
  - fix #216760 - mount with context or fscontext option fails
    (temporarily disabled the support for additional contexts -- not supported by kernel yet)
  - fix #211827 - Can't mount with additional contexts
  - fix #213127 - mount --make-unbindable does not work
  - fix #211749 - add -r option to losetup to create a read-only loop


author: Karel Zak <kzak@redhat.com> 2.13-0.44
changelog:
  - fix #209911 - losetup.8 updated (use dm-crypt rather than deprecated cryptoloop)
  - fix #210338 - spurious error from '/bin/login -h $PHONENUMBER' (bug in IPv6 patch)
  - fix #208634 - mkswap "works" without warning on a mounted device


author: Karel Zak <kzak@redhat.com> 2.13-0.42
changelog:
  - remove obsolete NFS code and patches (we use /sbin/mount.nfs
    and /sbin/umount.nfs from nfs-utils now)
  - move nfs.5 to nfs-utils


author: Karel Zak <kzak@redhat.com> 2.13-0.41
changelog:
  - fix #205038 - mount not allowing sloppy option (exports "-s"
    to external /sbin/mount.nfs(4) calls) 
  - fix minor bug in util-linux-2.13-mount-twiceloop.patch
  - fix #188193- util-linux should provide plugin infrastructure for HAL


author: Karel Zak <kzak@redhat.com> 2.13-0.40
changelog:
  - fix Makefile.am in util-linux-2.13-mount-context.patch
  - fix #201343 - pam_securetty requires known user to work
  		(split PAM login configuration to two files)
  - fix #203358 - change location of taskset binary to allow for early affinity work


author: Karel Zak <kzak@redhat.com> 2.13-0.32
changelog:
  - add IPv6 support to the login command (patch by Milan Zazrivec)
  - fix #198626 - add keyinit instructions to the login PAM script 
    (patch by David Howells)


author: Karel Zak <kzak@redhat.com> 2.13-0.25
changelog:
  - fix #187014 - umount segfaults for normal user
  - fix #183446 - cal not UTF-8-aware
  - fix #186915 - mount does not translate SELIinux context options though libselinux
  - fix #185500 - Need man page entry for -o context= mount option
  - fix #152579 - missing info about /etc/mtab and /proc/mounts mismatch
  - fix #183890 - missing info about possible ioctl() and fcntl() problems on NFS filesystem
  - fix #191230 - using mount --move results in wrong data in /etc/mtab
  - added mount subtrees support
  - fdisk: wrong number of sectors for large disks (suse#160822)
  - merge fdisk-xvd (#182553) with new fdisk-isfull (#188981) patch 
  - fix #181549 - raw(8) manpage has old information about dd
  - remove asm/page.h usage


author: Dan Walsh <dwalsh@RedHat.com> 2.13-0.24
changelog:
  - Remove requirement on restorecon, since we can do the same thing
  - with chcon/matchpathcon, and not add requirement on policycoreutils


author: Steve Dickson <steved@redhat.com> 2.13-0.21
changelog:
  - fix #183713 - foreground mounts are not retrying as advertised
  - fix #151549 - Added 'noacl' mount flag
  - fix #169042 - Changed nfsmount to try udp before using tcp when rpc-ing
  		the remote rpc.mountd (iff -o tcp is not specified).
  		This drastically increases the total number of tcp mounts
  		that can happen at once (ala autofs).


author: Jesse Keating <jkeating@redhat.com> 2.13-0.20
changelog:
  - Better calling of restorecon as suggested by Bill Nottingham
  - prereq restorecon to avoid ordering issues


author: Karel Zak <kzak@redhat.com> 2.13-0.16
changelog:
  - fix #181782 - mkswap should automatically add selinux label to swapfile
  - fix #180730 - col is exiting with 1 (fix util-linux-2.12p-col-EILSEQ.patch)
  - fix #181896 - broken example in schedutils man pages
  - fix #177331 - login omits pam_acct_mgmt & pam_chauthtok when authentication is skipped.
  - fix #177523 - umount -a should not unmount sysfs
  - fix #182553 - fdisk -l inside xen guest shows no disks


author: Steve Dickson <steved@redhat.com> 2.13-0.14
changelog:
  - Updated the gssd_check() and idmapd_check(), used with
    nfsv4 mounts, to looked for the correct file in /var/lock/subsys
    which stops bogus warnings.


author: Karel Zak <kzak@redhat.com> 2.13-0.13
changelog:
  - fix #174676 - hwclock audit return code mismatch
  - fix #176441: col truncates data
  - fix #174111 - mount allows loopback devices to be mounted more than once to the same mount point
  - better wide chars usage in the cal command (based on the old 'moremisc' patch)


author: Karel Zak <kzak@redhat.com> 2.13-0.11.pre6
changelog:
  - update to upstream version 2.13-pre6
  - fix #172203 - mount man page in RHEL4 lacks any info on cifs mount options


author: Karel Zak <kzak@redhat.com> 2.13-0.6.pre5
changelog:
  - update to upstream 2.13pre5
  - remove separated cramfs1.1 (already in upstream package)
  - remove odd symlink /usr/bin/mkcramfs -> ../../sbin/mkfs.cramfs
  - fix #170171 - ipcs -lm always report "max total shared memory (kbytes) = 0"


author: Karel Zak <kzak@redhat.com> 2.13-0.4.pre4
changelog:
  - fix #169628 - /usr/bin/floppy doesn't work with /dev/fd0
  - fix #168436 - login will attempt to run if it has no read/write access to its terminal
  - fix #168434 - login's timeout can fail - needs to call siginterrupt(SIGALRM,1)
  - fix #165253 - losetup missing option -a [new feature]
  - update PAM files (replace pam_stack with new "include" PAM directive)
  - remove kbdrate from src.rpm
  - update to 2.13pre4


author: Karel Zak <kzak@redhat.com> 2.13-0.3.pre2
changelog:
  - fix #166923 - hwclock will not run on a non audit-enabled kernel
  - fix #159410 - mkswap(8) claims max swap area size is 2 GB
  - fix #165863 - swsusp swaps should be reinitialized
  - change /var/log/lastlog perms to 0644


author: Karel Zak <kzak@redhat.com> 2.13-0.2.pre2
changelog:
  - /usr/share/misc/getopt/* -move-> /usr/share/doc/util-linux-2.13/getopt-*
  - the arch command marked as deprecated
  - removed: elvtune, rescuept and setfdprm
  - removed: man8/sln.8 (moved to man-pages, see #10601)
  - removed REDAME.pg and README.reset
  - .spec file cleanup
  - added schedutils (commands: chrt, ionice and taskset)


author: Karel Zak <kzak@redhat.com> 2.12p-9.7
changelog:
  - fix #159339 - util-linux updates for new audit system
  - fix #158737 - sfdisk warning for large partitions, gpt
  - fix #150912 - Add ocfs2 support
  - NULL is better than zero at end of execl()


author: Karel Zak <kzak@redhat.com> 2.12p-9.5
changelog:
  - fix #157656 - CRM 546998: Possible bug in vipw, changes permissions of /etc/shadow and /etc/gshadow
  - fix #159339 - util-linux updates for new audit system (pam_loginuid.so added to util-linux-selinux.pamd)
  - fix #159418 - sfdisk unusable - crashes immediately on invocation
  - fix #157674 - sync option on VFAT mount destroys flash drives
  - fix .spec file /usr/sbin/{hwclock,clock} symlinks


author: Karel Zak <kzak@redhat.com> 2.12p-8
changelog:
  - fix #154498 - util-linux login & pam session
  - fix #155293 - man 5 nfs should include vers as a mount option
  - fix #76467 - At boot time, fsck chokes on LVs listed by label in fstab
  - new Source URL
  - added note about ATAPI IDE floppy to fdformat.8
  - fix #145355 - Man pages for fstab and fstab-sync in conflict


author: Karel Zak <kzak@redhat.com> 2.12p-4
changelog:
  - added /var/log/lastlog to util-linux (#151635)
  - disabled 'newgrp' in util-linux (enabled in shadow-utils) (#149997, #151613)
  - improved mtab lock (#143118)
  - fixed ipcs typo (#151156)
  - implemented mount workaround for duplicated labels (#116300)


author: Elliot Lee <sopwith@redhat.com> 2.12p-1
changelog:
  - Update to util-linux-2.12p. This changes swap header format
    from - you may need to rerun mkswap if you did a clean install of
    FC3.


author: Steve Dickson <SteveD@RedHat.com> 2.12a-18
changelog:
  - Made NFS mounts adhere to the IP protocol if specified on
    command line as well as made NFS umounts adhere to the
    current IP protocol. Fix #140016


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Updated the NFS and NFS4 code to the latest CITI patch set
    (in which they incorporate a number of our local patches).


author: Elliot Lee <sopwith@redhat.com> 2.12a-6
changelog:
  - Fix #16415, #70616 with rdevman.patch
  - Fix #102566 with loginman.patch
  - Fix #104321 with rescuept.patch (just use plain lseek - we're in _FILE_OFFSET_BITS=64 land now)
  - Fix #130016 - remove raw.
  - Re-add agetty (replacing it with mgetty is too much pain, and mgetty is much larger)


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Made the NFS security checks more explicit to avoid confusion
    (an upstream fix)
  - Also removed a compilation warning


author: Alasdair Kergon <agk@redhat.com>
changelog:
  - Add device-mapper mount-by-label support
  - Fix segfault in mount-by-label when a device without a label is present.


author: <SteveD@RedHat.com>
changelog:
  - Updated the nfs-mount.patch to correctly 
    handle the mounthost option and to ignore 
    servers that do not set auth flavors


author: <SteveD@RedHat.com>
changelog:
  - Make RPC error messages displayed with -v argument
  - Added two checks to the nfs4 path what will print warnings
    when rpc.idmapd and rpc.gssd are not running
  - Ping NFS v4 servers before diving into kernel
  - Make v4 mount interruptible which also make the intr option on by default


author: <SteveD@RedHat.com>
changelog:
  - Reworked how the rpc.idmapd and rpc.gssd checks were
    done due to review comments from upstream.
  - Added rpc_strerror() so the '-v' flag will show RPC errors.


author: <SteveD@RedHat.com>
changelog:
  - Added two checks to the nfs4 path what will print warnings
    when rpc.idmapd and rpc.gssd are not running.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added pesudo flavors for nfsv4 mounts.
  - Added BuildRequires: libselinux-devel and Requires: libselinux
    when WITH_SELINUX is set.


author: Elliot Lee <sopwith@redhat.com> 2.11y-31
changelog:
  - Add patch140 (alldevs) to fix #101772. Printing the total size of
    all devices was deemed a lower priority than having all devices
    (e.g. /dev/ida/c0d9) displayed.


author: Elliot Lee <sopwith@redhat.com> 2.11y-1
changelog:
  - Update to 2.11y
  - Fix #80953
  - Update patch0, patch107, patch117, patch120 for 2.11y
  - Remove patch60, patch61, patch207, patch211, patch212, patch119, patch121
  - Remove patch122, patch200


author: Elliot Lee <sopwith@redhat.com> 2.11w-2
changelog:
  - Remove some crack/unnecessary patches while submitting stuff upstream.
  - Build with -D_FILE_OFFSET_BITS=64


author: Elliot Lee <sopwith@redhat.com> 2.11n-19
changelog:
  - Make a note here that this package was the source of the single change 
  contained in util-linux-2.11f-18 (in 7.2/Alpha), and also contains the 
  rawman patch from util-linux-2.11f-17.1 (in 2.1AS).
  - Package has no runtime deps on slang, so remove the BuildRequires: 
  slang-devel.


author: Elliot Lee <sopwith@redhat.com> 2.11n-17
changelog:
  - Fix teg's swapondetect patch to not print out the usage message when 
  'swapon -a -e' is run. (#66690) (edit existing patch)
  - Apply hjl's utmp handling patch (#66950) (patch116)
  - Fix fdisk man page notes on IDE disk partition limit (#64013) (patch117)
  - Fix mount.8 man page notes on vfat shortname option (#65628) (patch117)
  - Fix possible cal overflow with widechars (#67090) (patch117)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - adjust mainframe patches to apply to current rpm
  - do not include fdisk until it is fixed to work on mainframe


author: Elliot Lee <sopwith@redhat.com> 2.11n-10
changelog:
  - Finish fixing #60675 (ipcrm man page), updated the patch.
  - Fix #61203 (patch114 - dumboctal.patch).


author: Elliot Lee <sopwith@redhat.com> 2.11n-7
changelog:
  Fix various bugs:
  - Add patch110 (skipraid) to properly skip devices that are part of a RAID array.
  - Add patch111 (mkfsman) to update the mkfs man page's "SEE ALSO" section.
  - remove README.cfdisk
  - Include partx
  - Fix 54741 and related bugs for good(hah!) with patch113 (ctty3)


author: Elliot Lee <sopwith@redhat.com> 2.11n-3
changelog:
  - Add util-linux-2.11n-ownerumount.patch (#56593)
  - Add patch102 (util-linux-2.11n-colrm.patch) to fix #51887
  - Fix #53452 nits.
  - Fix #56953 (remove tunelp on s390)
  - Fix #56459, and in addition switch to using sed instead of perl.
  - Fix #58471
  - Fix #57300
  - Fix #37436
  - Fix #32132


author: Elliot Lee <sopwith@redhat.com> 2.11f-17
changelog:
  - Add patch38 (util-linux-2.11f-ctty2.patch) to ignore SIGINT/SIGTERM/SIGQUIT in the parent, so that ^\ won't break things.


author: Elliot Lee <sopwith@redhat.com> 2.11f-16
changelog:
  - Merge patches 36, 75, 76, and 77 into patch #37, to attempt resolve all the remaining issues with #54741.


author: Elliot Lee <sopwith@redhat.com> 2.11f-13
changelog:
  - Patch/idea #76 from HJL, fixes bug #54741 (race condition in login 
  acquisition of controlling terminal).


author: Bill Nottingham <notting@redhat.com>
changelog:
  - revert the patch that calls setsid() in login that we had reverted
    locally but got integrated upstream (#46223)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.11b-1
changelog:
  - Fix up login for real (a console session should be the controlling tty)
    by reverting to 2.10s code (#36839, #36840, #39237)
  - Add man page for agetty (#39287)
  - 2.11b, while at it


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.11a-3
changelog:
  - Fix up login - exiting immediately even if the password is correct
    is not exactly a nice feature.
  - Make definite plans to kill people who update login without checking
    if the new version works ;)


author: Erik Troan <ewt@redhat.com>
changelog:
  - upgraded to 2.11a (kbdrate moved to kbd, among other things)
  - turned off ALLOW_VCS_USE
  - modified mkcramfs to not use a large number of file descriptors
  - include mkfs.bfs


author: Matt Wilson <msw@redhat.com>
changelog:
  - changed Requires: kernel >= 2.2.12-7 to Conflicts: kernel < 2.2.12-7
    (fixes a initscripts -> util-linux -> kernel -> initscripts prereq loop)


author: Matt Wilson <msw@redhat.com>
changelog:
  - patched mkcramfs to use the PAGE_SIZE from asm/page.h instead of hard
    coding 4096 (fixes mkcramfs on alpha...)


author: Tim Powers <timp@redhat.com>
changelog:
  - fixed bug #29131, where ipc.info didn't have an info dir entry,
    added the dir entry to ipc.texi (Patch58)


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated kill man page
  - added patch to fix vipw race
  - updated vipw to edit /etc/shadow and /etc/gshadow, if appropriate
  - added patch to disassociate login from tty, session, and pgrp


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed problem w/ empty extended partitions
  - added patch to fix the date in the more man page
  - set OPT to pass optimization flags to make rather then RPM_OPT_FLAG
  - fixed fdisk -l /Proc/partitions parsing
  - updated to 2.10s


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.10o
  -  fdformat: fixed to work with kernel 2.4.0test6 (Marek Wojtowicz)
  -  login: not installed suid
  -  getopt: by default install aux files in /usr/share/misc
  - update to 2.10n:
  -  added blockdev.8
  -  change to elvtune (andrea)
  -  fixed overrun in agetty (vii@penguinpowered.com)
  -  shutdown: prefer umounting by mount point (rgooch)
  -  fdisk: added plan9
  -  fdisk: remove empty links in chain of extended partitions
  -  hwclock: handle both /dev/rtc and /dev/efirtc (Bill Nottingham)
  -  script: added -f (flush) option (Ivan Schreter)
  -  script: added -q (quiet) option (Per Andreas Buer)
  -  getopt: updated to version 1.1.0 (Frodo Looijaard)
  -  Czech messages (Jiri Pavlovsky)
  - login.1 man page had not /var/spool/mail path (#16998).
  - sln.8 man page (but not executable) included (#10601).
  - teach fdisk 0xde(Dell), 0xee(EFI GPT), 0xef(EFI FAT) partitions (#17610).


author: Matt Wilson <msw@redhat.com>
changelog:
  - use snprintf - not sprintf - when doing
    sprintf ("%s\n", _("Some string")) to avoid overflows and
    segfaults.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - raw control file was /dev/raw, now /dev/rawctl.
  - raw access files were /dev/raw*, now /dev/raw/raw*.


author: Matt Wilson <msw@redhat.com>
changelog:
  - updated to util-linux 2.10c
  - deprecated IMAP login mail notification patch17
  - deprecated raw patch22
  - depricated readprofile patch24


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - hostid is now in sh-utils. On sparc, install hostid as sunhostid (#4581).
  - update to 2.9w:
  -  Updated mount.8 (Yann Droneaud)
  -  Improved makefiles
  -  Fixed flaw in fdisk


author: Christian 'Dr. Disk' Hechelmann <drdisk@tc-gruppe.de>
changelog:
  - added locale message catalogs to %file
  - added patch for non-root build
  - vigr.8 and /usr/lib/getopt  man-page was missing from file list
  - /etc/fdprm really is a config file


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9v:
  - cfdisk no longer believes the kernel's HDGETGEO
  	(and may be able to partition a 2 TB disk)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9u:
  - Czech more.help and messages (Jiri Pavlovsky)
  - Japanese messages (Daisuke Yamashita)
  - fdisk fix (Klaus G. Wagner)
  - mount fix (Hirokazu Takahashi)
  - agetty: enable hardware flow control (Thorsten Kranzkowski)
  - minor cfdisk improvements
  - fdisk no longer accepts a default device
  - Makefile fix


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 2.9t:
  - national language support for hwclock
  - Japanese messages (both by Daisuke Yamashita)
  - German messages and some misc i18n fixes (Elrond)
  - Czech messages (Jiri Pavlovsky)
  - wall fixed for /dev/pts/xx ttys
  - make last and wall use getutent() (Sascha Schumann)
  	[Maybe this is bad: last reading all of wtmp may be too slow.
  	Revert in case people complain.]
  - documented UUID= and LABEL= in fstab.5
  - added some partition types
  - swapon: warn only if verbose


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include sfdisk (#1164)
  - fix write (#1784)
  - use positive logic in spec file (%ifarch rather than %ifnarch).
  - (re)-use 1st matching utmp slot if search by mypid not found.
  - update to 2.9o
  - lastb wants bad logins in wtmp clone /var/run/btmp (#884)


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - if hwclock is to be compiled on sparc,
    it must actually work. Also, it should obsolete
    clock, otherwise it clashes.
  - limit the swap size in mkswap for 2.2.1+ kernels
    by the actual maximum size kernel can handle.
  - fix kbdrate on sparc, patch by J. S. Connell
    <ankh@canuck.gen.nz>


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - .perms patch to login to make it retain root in parent process
    for pam_close_session to work correctly


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - patch top build on the arm without PAM and related utilities, for now.
  - build hwclock only on intel


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated MCONFIG to automatically determine the architecture
  - added glibc header hacks to fdisk code
  - rdev is only available on the intel


author: Erik Troan <ewt@redhat.com>
changelog:
  - Merged Red Hat changes into main util-linux source, updated package to
    development util-linux (nearly 2.7).


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - pam.patch differentiated between different kinds of bad logins.
    In particular, "user does not exist" and "bad password" were treated
    differently.  This was a minor security hole.


author: Joe Jin <joe.jin@oracle.com> - 4.4.4-222.0.7.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=e5c796e7a4b05c0a682c3df1fe336b224ccbde0f
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - msix: set vlapic IRR flag when msix vector been updated (Joe Jin)  [Orabug: 30131722]


author: Srinivasa Naravaram <srini.naravaram@oracle.com> - 4.4.4-222.0.6.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=63c88bdccd55d0908d7831832656d8eb96612cb0
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Merge branch 'ovm-3.4.6' of linux-git.us.oracle.com:OVM/xen into ovm-3.4.6 (Srinivasa Naravaram)  
  - xend relocation server: Allow customers to disable TLSv1.1 using a /etc/xen/xend-config.sxp configuration parameter (Srinivasa Naravaram)  [Orabug: 29618367]


author: root <root@b358c3611d2b.(none)> - 4.4.4-222.0.5.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=347070857150dfe916e0e8b5aa3b8ef19da31ae2
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Commit a020f11d51 "Xend: Close race condition between python threads during kexec" removed restart_in_progress = False in constructDomain(), which prevents guest to be destroyed under some conditions. Set the flag to False after guest unpaused will avoid it. (root)  [Orabug: 29851288]


author: Šimon Lukašík <slukasik@redhat.com> - 1.0.0-2
changelog:
  - dlopen libopenscap_sce.so.{current-age} explicitly
    That allows for SCE to work without openscap-engine-sce-devel


author: Eric Sandeen <sandeen@redhat.com> 0.20.rc1.20130917git194aa4a-1
changelog:
  - New upstream snapshot
  - Deprecated btrfsctl, btrfs-show, and btrfs-vol; still available in btrfs cmd


author: Josef Bacik <josef@toxicpanda.com> 0.15-2
changelog:
  -Removed a . at the end of the description
  -Fixed the copyright to be GPLv2 since GPL doesn't work anymore


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.10.el6uek]
changelog:
  - x86/ia32: save and clear registers on syscall. (Jamie Iles)  [Orabug: 27355759]  {CVE-2017-5754} 
  - x86/IBRS: Save current status of MSR_IA32_SPEC_CTRL (Boris Ostrovsky)  [Orabug: 27355887]  
  - pti: Rename X86_FEATURE_KAISER to X86_FEATURE_PTI (Pavel Tatashin)  [Orabug: 27352353]  {CVE-2017-5754} 
  - usb/core: usb_alloc_dev(): fix setting of ->portnum (Nicolai Stange)  [Orabug: 27356522]  
  - x86/spec_ctrl: Add missing IBRS_DISABLE (Konrad Rzeszutek Wilk)   
  - Make use of ibrs_inuse consistent. (Jun Nakajima)


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-112.14.7.el6uek]
changelog:
  - Re-introduce clearing of r12-15, rbp, rbx (Kris Van Hees)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86: more ibrs/pti fixes (Pavel Tatashin)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/spec: Actually do the check for in_use on ENABLE_IBRS (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - kvm: svm: Expose the CPUID.0x80000008 ebx flag. (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/spec_ctrl: Provide the sysfs version of the ibrs_enabled (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86: Use better #define for FEATURE_ENABLE_IBRS and 0 (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86: Instead of 0x2, 0x4, and 0x1 use #defines. (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - kpti: Disable when running under Xen PV (Konrad Rzeszutek Wilk)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86: Don't ENABLE_IBRS in nmi when we are still running on user cr3 (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/enter: Use IBRS on syscall and interrupts - fix ia32 path (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86: Fix spectre/kpti integration (Konrad Rzeszutek Wilk)  [Orabug: 27352353]  {CVE-2017-5754} 
  - PTI: unbreak EFI old_memmap (Jiri Kosina)  [Orabug: 27352353]  {CVE-2017-5754} 
  - KAISER KABI tweaks. (Martin K. Petersen)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/ldt: fix crash in ldt freeing. (Jamie Iles)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/entry: Define 'cpu_current_top_of_stack' for 64-bit code (Denys Vlasenko)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/entry: Remove unused 'kernel_stack' per-cpu variable (Denys Vlasenko)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/entry: Stop using PER_CPU_VAR(kernel_stack) (Denys Vlasenko)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: Set _PAGE_NX only if supported (Guenter Roeck)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/vdso: Get pvclock data from the vvar VMA instead of the fixmap (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - KPTI: Report when enabled (Kees Cook)  [Orabug: 27352353]  {CVE-2017-5754} 
  - KPTI: Rename to PAGE_TABLE_ISOLATION (Kees Cook)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/kaiser: Move feature detection up (Borislav Petkov)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/kaiser: Reenable PARAVIRT (Borislav Petkov)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/paravirt: Dont patch flush_tlb_single (Thomas Gleixner)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: kaiser_flush_tlb_on_return_to_user() check PCID (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: asm/tlbflush.h handle noPGE at lower level (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: drop is_atomic arg to kaiser_pagetable_walk() (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflush (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/kaiser: Check boottime cmdline params (Borislav Petkov)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/kaiser: Rename and simplify X86_FEATURE_KAISER handling (Borislav Petkov)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: add "nokaiser" boot option, using ALTERNATIVE (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: fix unlikely error in alloc_ldt_struct() (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: _pgd_alloc() without __GFP_REPEAT to avoid stalls (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: paranoid_entry pass cr3 need to paranoid_exit (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: x86_cr3_pcid_noflush and x86_cr3_pcid_user (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: PCID 0 for kernel and 128 for user (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: load_new_mm_cr3() let SWITCH_USER_CR3 flush user (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: enhanced by kernel and user PCIDs (Dave Hansen)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: vmstat show NR_KAISERTABLE as nr_overhead (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: delete KAISER_REAL_SWITCH option (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: name that 0x1000 KAISER_SHADOW_PGD_OFFSET (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: cleanups while trying for gold link (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: kaiser_remove_mapping() move along the pgd (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: tidied up kaiser_add/remove_mapping slightly (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: tidied up asm/kaiser.h somewhat (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: ENOMEM if kaiser_pagetable_walk() NULL (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: fix perf crashes (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: fix regs to do_nmi() ifndef CONFIG_KAISER (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: KAISER depends on SMP (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: fix build and FIXME in alloc_ldt_struct() (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: stack map PAGE_SIZE at THREAD_SIZE-PAGE_SIZE (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: do not set _PAGE_NX on pgd_none (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: merged update (Dave Hansen)  [Orabug: 27352353]  {CVE-2017-5754} 
  - KAISER: Kernel Address Isolation (Richard Fellner)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/boot: Add early cmdline parsing for options with arguments (Tom Lendacky)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm/64: Fix reboot interaction with CR4.PCIDE (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Enable CR4.PCIDE on supported systems (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Add the 'nopcid' boot option to turn off PCID (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Disable PCID on 32-bit kernels (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Remove the UP asm/tlbflush.h code, always use the (formerly) SMP code (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Reimplement flush_tlb_page() using flush_tlb_mm_range() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Make flush_tlb_mm_range() more predictable (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Remove flush_tlb() and flush_tlb_current_task() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/vm86/32: Switch to flush_tlb_mm_range() in mark_screen_rdonly() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/irq: Do not substract irq_tlb_count from irq_call_count (Aaron Lu)  [Orabug: 27352353]  {CVE-2017-5754} 
  - sched/core: Idle_task_exit() shouldn't use switch_mm_irqs_off() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - ARM: Hide finish_arch_post_lock_switch() from modules (Steven Rostedt)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm, sched/core: Turn off IRQs in switch_mm() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm, sched/core: Uninline switch_mm() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - sched/core: Add switch_mm_irqs_off() and use it in the scheduler (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - mm/mmu_context, sched/core: Fix mmu_context.h assumption (Ingo Molnar)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: If INVPCID is available, use it to flush global mappings (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Add a 'noinvpcid' boot option to turn off INVPCID (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Fix INVPCID asm constraint (Borislav Petkov)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Add INVPCID helpers (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.3.el6uek]
changelog:
  - userns: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - udf: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - net: mpls: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - fs: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - ipv6: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - ipv4: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - Thermal/int340x: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - cw1200: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - qla2xxx: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - p54: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - carl9170: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - uvcvideo: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - bpf: prevent speculative execution in eBPF interpreter (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - locking/barriers: introduce new observable speculation barrier (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - x86/cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - x86/cpu/AMD: Make the LFENCE instruction serialized (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - kABI: Make the boot_cpu_data look normal. (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - kernel.spec: Require the new microcode_ctl. (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} {CVE-2017-5715} 
  - x86/microcode/AMD: Add support for fam17h microcode loading (Tom Lendacky)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec_ctrl: Disable if running as Xen PV guest. (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - Set IBPB when running a different VCPU (Dave Hansen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - Clear the host registers after setbe (Jun Nakajima)  [Orabug: 27339995]  {CVE-2017-5715} 
  - Use the ibpb_inuse variable. (Jun Nakajima)  [Orabug: 27339995]  {CVE-2017-5715} 
  - KVM: x86: add SPEC_CTRL to MSR and CPUID lists (Andrea Arcangeli)  [Orabug: 27339995]  {CVE-2017-5715} 
  - kvm: vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Paolo Bonzini)  [Orabug: 27339995]  {CVE-2017-5715} 
  - Use the "ibrs_inuse" variable. (Jun Nakajima)  [Orabug: 27339995]  {CVE-2017-5715} 
  - kvm: svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Andrea Arcangeli)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/svm: Set IBPB when running a different VCPU (Paolo Bonzini)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/kvm: Pad RSB on VM transition (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/cpu/AMD: Add speculative control support for AMD (Tom Lendacky)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/microcode: Recheck IBRS and IBPB feature on microcode reload (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86: Move IBRS/IBPB feature detection to scattered.c (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec_ctrl: Add lock to serialize changes to ibrs and ibpb control (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec_ctrl: Add sysctl knobs to enable/disable SPEC_CTRL feature (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/kvm: clear registers on VM exit (Tom Lendacky)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/kvm: Set IBPB when switching VM (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - *INCOMPLETE* x86/syscall: Clear unused extra registers on syscall entrance (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/entry: Stuff RSB for entry to kernel for non-SMEP platform (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/mm: Only set IBPB when the new thread cannot ptrace current thread (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/mm: Set IBPB upon context switch (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/idle: Disable IBRS when offlining cpu and re-enable on wakeup (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/idle: Disable IBRS entering idle and enable it on wakeup (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec_ctrl: save IBRS MSR value in paranoid_entry (Andrea Arcangeli)  [Orabug: 27339995]  {CVE-2017-5715} 
  - *Scaffolding* x86/spec_ctrl: Add sysctl knobs to enable/disable SPEC_CTRL feature (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/enter: Use IBRS on syscall and interrupts (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86: Add macro that does not save rax, rcx, rdx on stack to disable IBRS (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/enter: MACROS to set/clear IBRS and set IBP (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/feature: Report presence of IBPB and IBRS control (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86: Add STIBP feature enumeration (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/cpufeature: Add X86_FEATURE_IA32_ARCH_CAPS and X86_FEATURE_IBRS_ATT (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/feature: Enable the x86 feature to control (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.2.el6uek]
changelog:
  - fuse: Call end_queued_requests() after releasing fc->lock in fuse_dev_release() (Ashish Samant)  [Orabug: 26431550]  
  - rds: Fix inaccurate accounting of unsignaled wrs in rds_ib_xmit_rdma (Håkon Bugge)  [Orabug: 27097105]  
  - rds: Fix inaccurate accounting of unsignaled wrs (Håkon Bugge)  [Orabug: 27097105]  
  - rds: ib: Fix NULL pointer dereference in debug code (Håkon Bugge)  [Orabug: 27116566]  
  - bnx2x: fix slowpath null crash (Zhu Yanjun)  [Orabug: 27133587]  
  - rds: System panic if RDS netfilter is enabled and RDS/TCP is used (Ka-Cheong Poon)  [Orabug: 27150029]  
  - USB: serial: console: fix use-after-free after failed setup (Johan Hovold)  [Orabug: 27206830]  {CVE-2017-16525} 
  - mlx4: Subscribe to PXM notifier (Konrad Rzeszutek Wilk)   
  - xen/pci: Add PXM node notifier for PXM (NUMA) changes. (Konrad Rzeszutek Wilk)   
  - xen/pcifront: Walk the PCI bus after XenStore notification (Konrad Rzeszutek Wilk)   
  - uwb: properly check kthread_run return value (Andrey Konovalov)  [Orabug: 27206880]  {CVE-2017-16526} 
  - ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor (Takashi Iwai)  [Orabug: 27206923]  {CVE-2017-16529} 
  - USB: uas: fix bug in handling of alternate settings (Alan Stern)  [Orabug: 27206999]  {CVE-2017-16530} 
  - USB: fix out-of-bounds in usb_set_configuration (Greg Kroah-Hartman)  [Orabug: 27207224]  {CVE-2017-16531} 
  - HID: usbhid: fix out-of-bounds bug (Jaejoong Kim)  [Orabug: 27207918]  {CVE-2017-16533} 
  - USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor() (Alan Stern)  [Orabug: 27207970]  {CVE-2017-16535} 
  - [media] cx231xx-cards: fix NULL-deref on missing association descriptor (Johan Hovold)  [Orabug: 27208047]  {CVE-2017-16536} 
  - Replace max_t() with sub_positive() in dequeue_entity_load_avg() (Gayatri Vasudevan)  [Orabug: 27222316]  
  - sched/fair: Fix cfs_rq avg tracking underflow (Gayatri Vasudevan)  [Orabug: 27222316]  
  - KVM: nVMX: Fix vmx_check_nested_events() return value in case an event was reinjected to L2 (Liran Alon)  [Orabug: 27250111]  
  - KVM: VMX: use kvm_event_needs_reinjection (Wanpeng Li)  [Orabug: 27250111]  
  - KVM: nVMX: Fix pending events injection (Wanpeng Li)  [Orabug: 27250111]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.1.el6uek]
changelog:
  - ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Eryu Guan)  [Orabug: 27233471]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.12.1.el6uek]
changelog:
  - ctf: allow dwarf2ctf to run as root but produce no output (Nick Alcock)  [Orabug: 27133094]  
  - net: qmi_wwan: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27215221]  {CVE-2017-16650} 
  - ctf: fix thinko preventing linking of out-of-tree modules when CTF is off (Nick Alcock)  [Orabug: 27215293]  
  - Revert "firmware: dmi_scan: add SBMIOS entry and DMI tables" (Dan Duval)  [Orabug: 27100376]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.11.1.el6uek]
changelog:
  - mm, thp: Do not make page table dirty unconditionally in follow_trans_huge_pmd() (Kirill A. Shutemov)  [Orabug: 27200880]  {CVE-2017-1000405} 
  - uek-rpm: Update linux firmware package for OL7 (Dhaval Giani)  [Orabug: 27210206]  
  - uek-rpm: Update firmware for OL6 UEK spec file (Dhaval Giani)  [Orabug: 27210204]  
  - scsi: Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan D. Milne)  [Orabug: 27187218]  
  - xen/time: do not decrease steal time after live migration on xen (Dongli Zhang)  [Orabug: 26770163]  
  - ALSA: usb-audio: Kill stray URB at exiting (Takashi Iwai)  [Orabug: 27148272]  {CVE-2017-16527} 
  - scsi: qla2xxx: Fix NULL pointer access due to redundant fc_host_port_name call (Quinn Tran)  [Orabug: 27149785]  
  - scsi: qla2xxx: Initialize Work element before requesting IRQs (Himanshu Madhani)  [Orabug: 27149785]  
  - scsi: qla2xxx: Fix uninitialized work element (Quinn Tran)  [Orabug: 27149785]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.10.1.el6uek]
changelog:
  - Revert "Improves clear_huge_page() using work queues" (Jack Vogel)  [Orabug: 27055693]  
  - packet: in packet_do_bind, test fanout with bind_lock held (Willem de Bruijn)  [Orabug: 27069060]  {CVE-2017-15649} 
  - packet: hold bind lock when rebinding to fanout hook (Willem de Bruijn)  [Orabug: 27069060]  {CVE-2017-15649} 
  - net: convert packet_fanout.sk_ref from atomic_t to refcount_t (Reshetova, Elena)  [Orabug: 27069060]  {CVE-2017-15649} 
  - packet: fix races in fanout_add() (Eric Dumazet)  [Orabug: 27069060]  {CVE-2017-15649} 
  - refcount_t: Introduce a special purpose refcount type (Peter Zijlstra)  [Orabug: 27069060]  {CVE-2017-15649} 
  - locking/atomics: Add _{acquire|release|relaxed}() variants of some atomic operations (Will Deacon)  [Orabug: 27069060]  {CVE-2017-15649} 
  - scsi: qla2xxx: Fix slow mem alloc behind lock (Quinn Tran)  [Orabug: 27100873]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.9.1.el6uek]
changelog:
  - xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Jan Kara)  [Orabug: 26862911]  
  - xfs: Fix missed holes in SEEK_HOLE implementation (Jan Kara)  [Orabug: 26862911]  
  - ext4: fix off-by-in in loop termination in ext4_find_unwritten_pgoff() (Jan Kara)  [Orabug: 26862911]  
  - ext4: fix SEEK_HOLE (Jan Kara)  [Orabug: 26862911]  
  - rtc: cmos: century support (Sylvain Chouleur)  [Orabug: 27025943]  
  - ocfs2: code clean up for direct io (Ryan Ding)  [Orabug: 27117733]  
  - scsi: Don't abort scsi_scan due to unexpected response (John Sobecki)  [Orabug: 27119610]  
  - ocfs2: fstrim: Fix start offset of first cluster group during fstrim (Ashish Samant)  [Orabug: 26326914]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.8.1.el6uek]
changelog:
  - uek-rpm: disable CONFIG_NUMA_BALANCING_DEFAULT_ENABLED (Fred Herard)  [Orabug: 26798697]  
  - uek-rpm: Add more missing modules to OL7 ueknano (Somasundaram Krishnasamy)  [Orabug: 27028326]  
  - fix unbalanced page refcounting in bio_map_user_iov (Vitaly Mayatskikh)  [Orabug: 27069034]  {CVE-2017-12190} 
  - more bio_map_user_iov() leak fixes (Al Viro)  [Orabug: 27069034]  {CVE-2017-12190} 
  - usb: Quiet down false peer failure messages (Don Zickus)  [Orabug: 26669801]  
  - ovl: during copy up, switch to mounter's creds early (Vivek Goyal)  [Orabug: 27052885]  
  - ovl: lookup: do getxattr with mounter's permission (Miklos Szeredi)  [Orabug: 27052885]  
  - ovl: get rid of the dead code left from broken (and disabled) optimizations (Al Viro)  [Orabug: 27052885]  
  - selinux: Implement dentry_create_files_as() hook (Vivek Goyal)  [Orabug: 27052885]  
  - security, overlayfs: Provide hook to correctly label newly created files (Vivek Goyal)  [Orabug: 27052885]  
  - selinux: Pass security pointer to determine_inode_label() (Vivek Goyal)  [Orabug: 27052885]  
  - selinux: Implementation for inode_copy_up_xattr() hook (Vivek Goyal)  [Orabug: 27052885]  
  - security,overlayfs: Provide security hook for copy up of xattrs for overlay file (Vivek Goyal)  [Orabug: 27052885]  
  - selinux: Implementation for inode_copy_up() hook (Vivek Goyal)  [Orabug: 27052885]  
  - security, overlayfs: provide copy up security hook for unioned files (Vivek Goyal)  [Orabug: 27052885]  
  - selinux: delay inode label lookup as long as possible (Paul Moore)  [Orabug: 27052885]  
  - selinux: Add accessor functions for inode->i_security (Andreas Gruenbacher)  [Orabug: 27052885]  
  - selinux: Create a common helper to determine an inode label [ver #3] (David Howells)  [Orabug: 27052885]  
  - KVM: nVMX: Fix loss of L2's NMI blocking state (Wanpeng Li)  [Orabug: 27056291]  
  - KVM: nVMX: track NMI blocking state separately for each VMCS (Paolo Bonzini)  [Orabug: 27056291]  
  - KVM: VMX: require virtual NMI support (Paolo Bonzini)  [Orabug: 27056291]  
  - KVM: nVMX: Fix the NMI IDT-vectoring handling (Wanpeng Li)  [Orabug: 27056291]  
  - netlink: allow to listen "all" netns (Nicolas Dichtel)  [Orabug: 27077793]  
  - netlink: rename private flags and states (Nicolas Dichtel)  [Orabug: 27077793]  
  - netns: use a spin_lock to protect nsid management (Nicolas Dichtel)  [Orabug: 27077793]  
  - netns: notify new nsid outside __peernet2id() (Nicolas Dichtel)  [Orabug: 27077793]  
  - netns: rename peernet2id() to peernet2id_alloc() (Nicolas Dichtel)  [Orabug: 27077793]  
  - netns: always provide the id to rtnl_net_fill() (Nicolas Dichtel)  [Orabug: 27077793]  
  - netns: returns always an id in __peernet2id() (Nicolas Dichtel)  [Orabug: 27077793]  
  - uek-rpm: add update-el-x86; fix-up ol6/update-el (Chuck Anderson)  [Orabug: 26844981]  
  - xscore: add dma address check (Zhu Yanjun)  [Orabug: 26994454]  
  - qla2xxx: Update driver version to 9.00.00.00.40.0-k (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix delayed response to command for loop mode/direct connect. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Use IOCB interface to submit non-critical MBX. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Add async new target notification (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Allow relogin to proceed if remote login did not finish (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix sess_lock & hardware_lock lock order problem. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix inadequate lock protection for ABTS. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix request queue corruption. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix memory leak for abts processing (Quinn Tran)  [Orabug: 26844197]  
  - scsi: qla2xxx: Fix ql_dump_buffer (Joe Perches)  [Orabug: 26844197]  
  - scsi: qla2xxx: Fix response queue count for Target mode. (Michael Hernandez)  [Orabug: 26844197]  
  - scsi: qla2xxx: Cleaned up queue configuration code. (Michael Hernandez)  [Orabug: 26844197]  
  - qla2xxx: Fix a warning reported by the "smatch" static checker (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Simplify usage of SRB structure in driver (Bart Van Assche)  [Orabug: 26844197]  
  - qla2xxx: Simplify usage of SRB structure in driver (Joe Carnuccio)  [Orabug: 26844197]  
  - qla2xxx: Improve RSCN handling in driver (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Add framework for async fabric discovery (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Track I-T nexus as single fc_port struct (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: introduce a private sess_kref (Christoph Hellwig)  [Orabug: 26844197]  
  - qla2xxx: Use d_id instead of s_id for more clarity (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix wrong argument in sp done callback (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Remove SRR code (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: Cleanup TMF code translation from qla_target (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Disable out-of-order processing by default in firmware (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix erroneous invalid handle message (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Reduce exess wait during chip reset (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Terminate exchange if corrupted (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix crash due to null pointer access (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Collect additional information to debug fw dump (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Reset reserved field in firmware options to 0 (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: Include ATIO queue in firmware dump when in target mode (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: Fix wrong IOCB type assumption (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Add DebugFS node for target sess list. (Quinn Tran)  [Orabug: 26844197]  
  - tcm_qla2xxx: Convert to target_alloc_session usage (Nicholas Bellinger)  [Orabug: 26844197]  
  - qla2xxx: Use ATIO type to send correct tmr response (Swapnil Nagle)  [Orabug: 26844197]  
  - qla2xxx: Fix TMR ABORT interaction issue between qla2xxx and TCM (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Move atioq to a different lock to reduce lock contention (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Remove dependency on hardware_lock to reduce lock contention. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Replace QLA_TGT_STATE_ABORTED with a bit. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Wait for all conflicts before ack'ing PLOGI (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: Delete session if initiator is gone from FW (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: Added interface to send explicit LOGO. (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: Add FW resource count in DebugFS. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Enable Target counters in DebugFS. (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: terminate exchange when command is aborted by LIO (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: drop cmds/tmrs arrived while session is being deleted (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: disable scsi_transport_fc registration in target mode (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: added sess generations to detect RSCN update races (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: Abort stale cmds on qla_tgt_wq when plogi arrives (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: delay plogi/prli ack until existing sessions are deleted (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: cleanup cmd in qla workqueue before processing TMR (Swapnil Nagle)  [Orabug: 26844197]  
  - qla2xxx: Add flush after updating ATIOQ consumer index. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Enable target mode for ISP27XX (Himanshu Madhani)  [Orabug: 26844197]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.7.1.el6uek]
changelog:
  - x86/platform/uv: Fix kdump for UV (Kirtikar Kashyap)  [Orabug: 27031280]  
  - firmware: dmi_scan: add SBMIOS entry and DMI tables (Ivan Khoronzhuk)  [Orabug: 27045425]  
  - KEYS: prevent KEYCTL_READ on negative key (Eric Biggers)  [Orabug: 27050237]  {CVE-2017-12192} 
  - NFS: Add static NFS I/O tracepoints (Chuck Lever)   
  - Hang/soft lockup in d_invalidate with simultaneous calls (Al Viro)  [Orabug: 27052680]  
  - scsi: mpt3sas: Bump mpt3sas driver version to v16.100.00.00 (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Adding support for SAS3616 HBA device (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Fix possibility of using invalid Enclosure Handle for SAS device after host reset (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Display chassis slot information of the drive (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Updated MPI headers to v2.00.48 (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Fix IO error occurs on pulling out a drive from RAID1 volume created on two SATA drive (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Fix removal and addition of vSES device during host reset (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Reduce memory footprint in kdump kernel (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Fixed memory leaks in driver (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Processing of Cable Exception events (Sreekanth Reddy)  [Orabug: 26894579]  
  - storvsc: don't assume SG list is contiguous (Aruna Ramakrishna)  [Orabug: 27044703]  
  - sysctl: Drop reference added by grab_header in proc_sys_readdir (Zhou Chengming)  [Orabug: 27036905]  {CVE-2016-9191} {CVE-2016-9191} {CVE-2016-9191} 
  - uek-rpm: Update kernel-ueknano's provides list. (Somasundaram Krishnasamy)  [Orabug: 27022769]  
  - uek-rpm: Add more modules to ueknano for OL7 (Somasundaram Krishnasamy)  [Orabug: 27015961]  
  - selinux: fix off-by-one in setprocattr (Stephen Smalley)  [Orabug: 27001687]  {CVE-2017-2618} {CVE-2017-2618} {CVE-2017-2618} 
  - dtrace: Add CTF archive to the UEK nano package (Tomas Jedlicka)  [Orabug: 27039123]  
  - Revert "drivers/char/mem.c: deny access in open operation when securelevel is set" (Dhaval Giani)  [Orabug: 27037801]  
  - thp: run vma_adjust_trans_huge() outside i_mmap_rwsem (Kirill A. Shutemov)  [Orabug: 26763484]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.6.1.el6uek]
changelog:
  - ocfs2: fix posix_acl_create deadlock (Junxiao Bi)  [Orabug: 26808507]  
  - rds: Proper init/exit declaration for module init/exit function (Ka-Cheong Poon)  [Orabug: 26937730]  
  - rds: Remove .exit from struct rds_transport (Ka-Cheong Poon)  [Orabug: 26937730]  
  - smartpqi: update driver version (Don Brace)  [Orabug: 26882397]  
  - smartpqi: cleanup raid map warning message (Kevin Barnett)  [Orabug: 26882397]  
  - smartpqi: update controller ids (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: remove the smp_handler stub (Christoph Hellwig)  [Orabug: 26882397]  
  - scsi: smartpqi: change driver version to 1.1.2-125 (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: add in new controller ids (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: update kexec and power down support (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: cleanup doorbell register usage. (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: update pqi passthru ioctl (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: enhance BMIC cache flush (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: add pqi reset quiesce support (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: make pdev pointer names consistent (Kevin Barnett)  [Orabug: 26882397]  
  - udp: consistently apply ufo or fragmentation (Willem de Bruijn)  [Orabug: 26921314]  {CVE-2017-1000112} 
  - be2net: fix TSO6/GSO issue causing TX-stall on Lancer/BEx (Suresh Reddy)  [Orabug: 26928620]  
  - ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca)  [Orabug: 27011248]  {CVE-2017-7542} 
  - xfs: use dedicated log worker wq to avoid deadlock with cil wq (Brian Foster)  [Orabug: 27013239]  
  - nvme: honor RTD3 Entry Latency for shutdowns (Martin K. Petersen)  [Orabug: 26929569]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.5.1.el6uek]
changelog:
  - uek-rpm: Build kernel ueknano rpm for OL7 (Somasundaram Krishnasamy)  [Orabug: 26803594]  
  - uek/config: enable NVME SG_IO support by default (Shan Hai)  [Orabug: 26981802]  
  - nvme: report the scsi TUR state correctly (Shan Hai)  [Orabug: 26981802]  
  - scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly (Xin Long)  [Orabug: 26988631]  {CVE-2017-14489} 
  - CVE-2016-10318 missing authorization check fscrypt_process_policy (Jack Vogel)  [Orabug: 26989776]  
  - ovl: fix get_acl() on tmpfs (Miklos Szeredi)  [Orabug: 26975443]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-112.2.1.el6uek]
changelog:
  - ixgbe: Initialize 64-bit stats seqcounts (Florian Fainelli)  [Orabug: 26785078]  
  - ixgbe: Disable flow control for XFI (Tony Nguyen)  [Orabug: 26785078]  
  - ixgbe: Do not support flow control autonegotiation for X553 (Tony Nguyen)  [Orabug: 26785078]  
  - ixgbe: Update NW_MNG_IF_SEL support for X553 (Tony Nguyen)  [Orabug: 26785078]  
  - ixgbe: Enable LASI interrupts for X552 devices (Tony Nguyen)  [Orabug: 26785078]  
  - ixgbe: Ensure MAC filter was added before setting MACVLAN (Tony Nguyen)  [Orabug: 26785078]  
  - ixgbe: pci_set_drvdata must be called before register_netdev (Jeff Mahoney)  [Orabug: 26785078]  
  - ixgbe: Resolve cppcheck format string warning (Tony Nguyen)  [Orabug: 26785078]  
  - ixgbe: fix writes to PFQDE (Emil Tantilov)  [Orabug: 26785078]  
  - ixgbevf: Bump version number (Tony Nguyen)  [Orabug: 26785078]  
  - ixgbe: Bump version number (Tony Nguyen)  [Orabug: 26785078]  
  - ixgbe: check for Tx timestamp timeouts during watchdog (Jacob Keller)  [Orabug: 26785078]  
  - ixgbe: add statistic indicating number of skipped Tx timestamps (Jacob Keller)  [Orabug: 26785078]  
  - ixgbe: avoid permanent lock of *_PTP_TX_IN_PROGRESS (Jacob Keller)  [Orabug: 26785078]  
  - ixgbe: fix race condition with PTP_TX_IN_PROGRESS bits (Jacob Keller)  [Orabug: 26785078]  
  - net: better skb->sender_cpu and skb->napi_id cohabitation (Eric Dumazet)  [Orabug: 26953388] [Orabug: 26591689]  
  - uek-rpm: Clean up installed directories when uninstalling kernel-ueknano (Somasundaram Krishnasamy)  [Orabug: 26929773]  
  - uek-rpm: Add missing ko modules to nano rpm (Somasundaram Krishnasamy)  [Orabug: 26929773]  
  - i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Jacob Keller)  [Orabug: 26785018]  
  - i40e: avoid NVM acquire deadlock during NVM update (Anjali Singhai Jain)  [Orabug: 26785018]  
  - i40e/i40evf: avoid dynamic ITR updates when polling or low packet rate (Jacob Keller)  [Orabug: 26785018]  
  - i40e/i40evf: remove ULTRA latency mode (Jacob Keller)  [Orabug: 26785018]  
  - i40e: invert logic for checking incorrect cpu vs irq affinity (Jacob Keller)  [Orabug: 26785018]  
  - i40e: initialize our affinity_mask based on cpu_possible_mask (Jacob Keller)  [Orabug: 26785018]  
  - i40e: move enabling icr0 into i40e_update_enable_itr (Jacob Keller)  [Orabug: 26785018]  
  - i40e: remove workaround for resetting XPS (Jacob Keller)  [Orabug: 26785018]  
  - i40e: Fix for unused value issue found by static analysis (Carolyn Wyborny)  [Orabug: 26785018]  
  - i40e: 25G FEC status improvements (Mariusz Stachura)  [Orabug: 26785018]  
  - i40e: force VMDQ device name truncation (Jacob Keller)  [Orabug: 26785018]  
  - i40evf: fix possible snprintf truncation of q_vector->name (Jacob Keller)  [Orabug: 26785018]  
  - i40e: Use correct flag to enable egress traffic for unicast promisc (Akeem G Abodunrin)  [Orabug: 26785018]  
  - i40e: prevent snprintf format specifier truncation (Jacob Keller)  [Orabug: 26785018]  
  - i40e: Store the requested FEC information (Mariusz Stachura)  [Orabug: 26785018]  
  - i40e: Update state variable for adminq subtask (Sudheer Mogilappagari)  [Orabug: 26785018]  
  - i40e: synchronize nvmupdate command and adminq subtask (Sudheer Mogilappagari)  [Orabug: 26785018]  
  - i40e: prevent changing ITR if adaptive-rx/tx enabled (Alan Brady)  [Orabug: 26785018]  
  - i40evf: use netdev variable in reset task (Alan Brady)  [Orabug: 26785018]  
  - i40e: move check for avoiding VID=0 filters into i40e_vsi_add_vlan (Jacob Keller)  [Orabug: 26785018]  
  - i40e/i40evf: use cmpxchg64 when updating private flags in ethtool (Jacob Keller)  [Orabug: 26785018]  
  - i40e: Detect ATR HW Evict NVM issue and disable the feature (Anjali Singhai Jain)  [Orabug: 26785018]  
  - i40e: Fix a bug with VMDq RSS queue allocation (Anjali Singhai Jain)  [Orabug: 26785018]  
  - i40evf: prevent VF close returning before state transitions to DOWN (Sudheer Mogilappagari)  [Orabug: 26785018]  
  - i40e: Initialize 64-bit statistics TX ring seqcount (Florian Fainelli)  [Orabug: 26785018]  
  - i40e: handle setting administratively set MAC address back to zero (Stefan Assmann)  [Orabug: 26785018]  
  - i40evf: remove unnecessary __packed (Tushar Dave)  [Orabug: 26785018]  
  - i40evf: add some missing includes (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40e: display correct UDP tunnel type name (Jacob Keller)  [Orabug: 26785018]  
  - i40e/i40evf: remove mismatched type warnings (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40e/i40evf: make IPv6 ATR code clearer (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40e: fix odd formatting and indent (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40e: fix up 32 bit timespec references (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40e: Handle admin Q timeout when releasing NVM (Paul M Stillwell Jr)  [Orabug: 26785018]  
  - i40e: remove WQ_UNBOUND and the task limit of our workqueue (Jacob Keller)  [Orabug: 26785018]  
  - i40e: Fix for trace found with S4 state (Carolyn Wyborny)  [Orabug: 26785018]  
  - i40e: fix incorrect variable assignment (Gustavo A R Silva)  [Orabug: 26785018]  
  - i40e: don't hold RTNL lock for the entire reset (Jacob Keller)  [Orabug: 26785018]  
  - i40e: clear only cause_ena bit (Shannon Nelson)  [Orabug: 26785018]  
  - i40e: fix disabling overflow promiscuous mode (Alan Brady)  [Orabug: 26785018]  
  - i40e: Add support for OEM firmware version (Filip Sadowski)  [Orabug: 26785018]  
  - i40e: genericize the partition bandwidth control (Shannon Nelson)  [Orabug: 26785018]  
  - i40e: Add message for unsupported MFP mode (Carolyn Wyborny)  [Orabug: 26785018]  
  - i40e: Support firmware CEE DCB UP to TC map re-definition (Greg Bowers)  [Orabug: 26785018]  
  - i40e: Fix potential out of bound array access (Sudheer Mogilappagari)  [Orabug: 26785018]  
  - i40e: comment that udp_port must be in host byte order (Jacob Keller)  [Orabug: 26785018]  
  - i40e: use dev_dbg instead of dev_info when warning about missing routine (Jacob Keller)  [Orabug: 26785018]  
  - i40e/i40evf: update WOL and I40E_AQC_ADDR_VALID_MASK flags (Alice Michael)  [Orabug: 26785018]  
  - i40evf: assign num_active_queues inside i40evf_alloc_queues (Jacob Keller)  [Orabug: 26785018]  
  - i40e: Fix a sleep-in-atomic bug (Jia-Ju Bai)  [Orabug: 26785018]  
  - i40e: fix handling of HW ATR eviction (Jacob Keller)  [Orabug: 26785018]  
  - i40evf: update i40evf.txt with new content (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40evf: Add support for Adaptive Virtual Function (Preethi Banala)  [Orabug: 26785018]  
  - i40evf: drop i40e_type.h include (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40e: Check for memory allocation failure (Christophe Jaillet)  [Orabug: 26785018]  
  - i40e: check for Tx timestamp timeouts during watchdog (Jacob Keller)  [Orabug: 26785018]  
  - i40e: use pf data structure directly in i40e_ptp_rx_hang (Jacob Keller)  [Orabug: 26785018]  
  - i40e: add statistic indicating number of skipped Tx timestamps (Jacob Keller)  [Orabug: 26785018]  
  - i40e: avoid permanent lock of *_PTP_TX_IN_PROGRESS (Jacob Keller)  [Orabug: 26785018]  
  - i40e: fix race condition with PTP_TX_IN_PROGRESS bits (Jacob Keller)  [Orabug: 26785018]  
  - i40evf: disable unused flags (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40evf: fix merge error in older patch (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40evf: fix duplicate lines (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40evf: hide unused variable (Arnd Bergmann)  [Orabug: 26785018]  
  - i40evf: allocate queues before we setup the interrupts and q_vectors (Jacob Keller)  [Orabug: 26785018]  
  - i40evf: remove I40E_FLAG_FDIR_ATR_ENABLED (Jacob Keller)  [Orabug: 26785018]  
  - i40e: remove hw_disabled_flags in favor of using separate flag bits (Jacob Keller)  [Orabug: 26785018]  
  - i40evf: remove needless min_t() on num_online_cpus()*2 (Jacob Keller)  [Orabug: 26785018]  
  - i40e: remove unnecessary msleep() delay in i40e_free_vfs (Jacob Keller)  [Orabug: 26785018]  
  - i40e: amortize wait time when disabling lots of VFs (Jacob Keller)  [Orabug: 26785018]  
  - i40e: Reprogram port offloads after reset (Alexander Duyck)  [Orabug: 26785018]  
  - i40e: rename index to port to avoid confusion (Jacob Keller)  [Orabug: 26785018]  
  - i40e: make use of i40e_reset_all_vfs when initializing new VFs (Jacob Keller)  [Orabug: 26785018]  
  - i40e: properly spell I40E_VF_STATE_* flags (Jacob Keller)  [Orabug: 26785018]  
  - i40e: use i40e_stop_rings_no_wait to implement PORT_SUSPENDED state (Jacob Keller)  [Orabug: 26785018]  
  - i40e: reset all VFs in parallel when rebuilding PF (Jacob Keller)  [Orabug: 26785018]  
  - i40e: split some code in i40e_reset_vf into helpers (Jacob Keller)  [Orabug: 26785018]  
  - i40e: remove I40E_FLAG_IN_NETPOLL entirely (Jacob Keller)  [Orabug: 26785018]  
  - i40e: reduce wait time for adminq command completion (Jacob Keller)  [Orabug: 26785018]  
  - i40e: fix CONFIG_BUSY checks in i40e_set_settings function (Jacob Keller)  [Orabug: 26785018]  
  - i40e: factor out queue control from i40e_vsi_control_(tx|rx) (Jacob Keller)  [Orabug: 26785018]  
  - i40e: don't hold RTNL lock while waiting for VF reset to finish (Jacob Keller)  [Orabug: 26785018]  
  - i40e: new AQ commands (Jingjing Wu)  [Orabug: 26785018]  
  - i40e/i40evf: Add tracepoints (Scott Peterson)  [Orabug: 26785018]  
  - i40evf: add client interface (Mitch Williams)  [Orabug: 26785018]  
  - i40e: dump VF information in debugfs (Mitch Williams)  [Orabug: 26785018]  
  - i40e: Fix support for flow director programming status (Alexander Duyck)  [Orabug: 26785018]  
  - i40e/i40evf: Remove VF Rx csum offload for tunneled packets (alice michael)  [Orabug: 26785018]  
  - i40evf: Use net_device_stats from struct net_device (Tobias Klauser)  [Orabug: 26785018]  
  - i40e: clean up historic deprecated flag definitions (Jacob Keller)  [Orabug: 26785018]  
  - i40e: remove I40E_FLAG_NEED_LINK_UPDATE (Alice Michael)  [Orabug: 26785018]  
  - i40e: remove extraneous loop in i40e_vsi_wait_queues_disabled (Jacob Keller)  [Orabug: 26785018]  
  - i40e: Simplify i40e_detect_recover_hung_queue logic (Alan Brady)  [Orabug: 26785018]  
  - i40e: Decrease the scope of rtnl lock (Maciej Sosin)  [Orabug: 26785018]  
  - i40e: Swap use of pf->flags and pf->hw_disabled_flags for ATR Eviction (Alexander Duyck)  [Orabug: 26785018]  
  - i40e: update error message when trying to add invalid filters (Jacob Keller)  [Orabug: 26785018]  
  - i40e: only register client on iWarp-capable devices (Mitch Williams)  [Orabug: 26785018]  
  - i40e: close client on remove and shutdown (Mitch Williams)  [Orabug: 26785018]  
  - i40e: register existing client on probe (Mitch Williams)  [Orabug: 26785018]  
  - i40e: remove client instance on driver unload (Mitch Williams)  [Orabug: 26785018]  
  - i40e: fix for queue timing delays (Wyborny, Carolyn)  [Orabug: 26785018]  
  - i40e/i40evf: Change the way we limit the maximum frame size for Rx (Alexander Duyck)  [Orabug: 26785018]  
  - i40e/i40evf: Add legacy-rx private flag to allow fallback to old Rx flow (Alexander Duyck)  [Orabug: 26785018]  
  - i40e/i40evf: Pull code for grabbing and syncing rx_buffer from fetch_buffer (Alexander Duyck)  [Orabug: 26785018]  
  - i40e/i40evf: Use length to determine if descriptor is done (Alexander Duyck)  [Orabug: 26785018]  
  - drivers/char/mem.c: deny access in open operation when securelevel is set (Ethan Zhao)  [Orabug: 26943864]


author: Lans Hung <lans.hung@oracle.com> 1.42.8-1.0.3.el6
changelog:
  - merge from branches-6/rhel6-u9/ (Revision 598)
  - add pathces:  [Orabug 25120]
        e2fsprogs-1.42.12-e2fsck-impossible-dirblocks.patch
        e2fsprogs-1.42.9-check_if_mounted-return.patch
  - already applied patches: 
        e2fsprogs-1.42.8-resize-flex_bg-no-resize_inode.patch


author: Vaughan Cao <vaughan.cao@oracle.com> 1.42.8-1.0.2.el6
changelog:
  - add patches:	[Orabug 19831079]
        e2fsprogs-1.41.12-e2fsck-blocks-past-eof-1.patch,
        e2fsprogs-1.41.12-tune2fs-remove-dirty-journal-1.patch,
        e2fsprogs-1.41.12-mke2fs-rev-check-1.patch,
        e2fsprogs-1.41.12-e2image-mounted-1.patch.
  - Following bugs should be resolved.
    Disallow e2image on rw-mounted fs w/o force flag (#1097061)
    Allow tune2fs to remove a dirty journal with -ff (#1040122)
    Add enable_periodic_fsck to mke2fs.conf. default is no. (#1052409)
    Disallow too-high revision during mke2fs (#1093446)
    Fix e2fsck false positive when blocks exist past EOF (#994615)


author: Jingdong Lu <jingdong.lu@oracle.com> 1.42.8-1.el6
changelog:
  - update to 1.42.8-1
  - add patch e2fsprogs-1.42.8-f_extent_oobounds.patch
  - remove r_1024_small_bg test failing resize2fs tests


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-13
changelog:
  - Fix mke2fs -S on uninit_bg fs (#806137)
  - Make it harder to damage fs by fscking while mounted (#824126)
  - Update resize2fs manpage to include ext4 online resizing (#813820)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-12
changelog:
  - Fix spurious e2fsck checksum errors when -b option is used (#786021)
  - Fix bugs related to e2fsck -E discard (#795846)


author: Lukas Czerner <lczerner@redhat.com> 1.41.12-9
changelog:
  - e2image: Add support for exporting image in qcow2 format (#713468)
  - mke2fs: Skip inode table initialization on some discardable devices (#713475)
  - mke2fs: Add -E discard/nodiscard options (#713475)
  - mke2fs: Allow to specify discard option in mke2fs.conf (#713475)
  - e2fsck: Allow to discard free data and inode blocks in e2fsck (#713475)
  - mke2fs: Show discard progress (#713475)
  - Don't attempt to discard flash device if -n option is given (#713475)


author: Eric Sandeen <sandeen@redhat.com> 1.41.12-8
changelog:
  - e2fsck: don't clone dup xattr blocks in fs without xattr feat (#676465)
  - Allow specification of default mntopts in superblock (#679892)
  - Handle devices with large physical blocksizes (#679931)
  - Fix some typos in man pages (#683906)


author: Eric Sandeen <sandeen@redhat.com> 1.41.9-9
changelog:
  - Turn make check back on
  - Fix ldopen issue in debugfs for newer readline
  - Fix resize2fs access past end of array


author: Eric Sandeen <sandeen@redhat.com> 1.41.9-8
changelog:
  - Fix up topology patch to build w/ new util-linux-ng
  - Fix endian swapping of backup journal blocks in sb


author: Eric Sandeen <sandeen@redhat.com> 1.41.6-5
changelog:
  - Update journal backup blocks in sb after resize (#505339)
  - Fix memory leak in extent handling functions
  - Fix bug in inode writing in extent code, clobbered i_extra_isize etc


author: Karel Zak <kzak@redhat.com> 1.41.6-3
changelog:
  - temporary use BuildRequires: e2fsprogs-devel (we cannot install 
    new util-linux-ng with libblkid to buildroots without new e2fsprogs 
    without libblkid).


author: Eric Sandeen <sandeen@redhat.com> 1.41.4-4
changelog:
  - Edit summary & description to include ext4 (#487469)
  - Fix blkid null ptr deref in initrd (#486997)


author: Eric Sandeen <sandeen@redhat.com> 1.41.3-3
changelog:
  - Remove conservative "don't change journal location" patch for F11
  - Add btrfs recognition to blkid


author: Eric Sandeen <sandeen@redhat.com> 1.41.2-1
changelog:
  - New upstream version
  - Updated default dir hash (half_md4) for better perf & fewer collisions
  - Fixed ext4 online resizing with flex_bg
  - ext4 journal now in extents format and in middle of filesystem
  - fix unreadable e2image files
  - fix file descriptor leak in libcom_err (#464689)


author: Eric Sandeen <esandeen@redhat.com> 1.40.8-2
changelog:
  - Update ext2fs_swap_inode_full() fix to match upstream
  - Check more of swapv1 header in blkid detection (#442937)


author: Eric Sandeen <esandeen@redhat.com> 1.40.7-1
changelog:
  - New upstream version, special leap-day edition
  - Fix resize2fs losing inline xattrs when shrinking (#434893)
    and add patch to fix swap_inode_full in this case
  - Allow mke2fs & tune2fs to manipulate large_file feature (#258381)
  - Handle lvm error conditions in libblkid (#433857)
  - Allow tune2fs to clear the resize_inode feature (#167816)
  - Teach blkid to detect LVM2 physical volumes (#409321)
  - Show "mostly printable" xattrs as text in debugfs (#430621)
  - Trimmed pre-1.38 rpm changelog entries


author: Eric Sandeen <sandeen@redhat.com> 1.40.4-7
changelog:
  - Fix sb flag comparisons properly this time (#428893)
  - Make 256-byte inodes for the [default] mkfs case.
    This will facilitate upgrades to ext4 later, and help xattr perf.


author: Eric Sandeen <esandeen@redhat.com> 1.40.2-15
changelog:
  - Drop resize_inode removal patch from tune2fs; ostensibly was
    for old kernels which could not mount, but seems to be fine.
  - Drop pottcdate removal patch, and don't rebuild .po files,
    causes multilib problems and we generally shouldn't rebuild.
  - Drop multilib patch; wrapper header should take care of this now.
  - Drop ->open rename, Fedora seems ok with this now.


author: Stepan Kasal <skasal@redhat.com> 1.40.2-13
changelog:
  - The -devel package now requires device-mapper-devel, to match
    the dependency in blkid.pc (#410791)


author: Eric Sandeen <esandeen@redhat.com> 1.40.2-12
changelog:
  - Use upstream patch for blkid fat detection, avoids div-by-zero
    when encountering some BSD partitions (#398281)


author: Eric Sandeen <esandeen@redhat.com> 1.40.2-10
changelog:
  - Make (more) file timestamps match those in tarball for multilib tidiness 
  - Fix e2fsprogs-libs summary (shared libs not static)


author: Eric Sandeen <esandeen@redhat.com> 1.40.2-3
changelog:
  - Update license tags
  - Fix one open-create caller with no mode
  - Protect ->open ops from glibc open-create-mode-checker
  - Fix source URL
  - Add gawk to BuildRequires


author: Eric Sandeen <esandeen@redhat.com> 1.39-14
changelog:
  - Many coverity-found potential leaks, segfaults, etc (#239354)
  - Fix debugfs segfaults when no fs open (#208416, #209330)
  - Avoid recursive loops in logdump due to symlinks in /dev (#210371)
  - Don't write changes to the backup superblocks by default (#229561)
  - Correct byteswapping for fast symlinks with xattrs (#232663)
  - e2fsck: added sanity check for xattr validation (#230193)


author: Thomas Woerner <twoerner@redhat.com> - 1.39-1
changelog:
  - new version 1.39
  - dropped ext2online, because resize2fs is now able to do online resize
  - spec file cleanup
  - enabled checks for build


author: Thomas Woerner <twoerner@redhat.com> 1.38-2.1
changelog:
  - fixed file conflicts between 32bit and 64bit packages (#168815)
  - fixed mklost+found crashes with buffer overflow (#157773)
    Thanks to Arjan van de Ven for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.38-2
changelog:
  - splitted up libs from main package, into a new e2fsprogs-libs package
  - fixed requires and prereqs


author: Thomas Woerner <twoerner@redhat.com> 1.38-1
changelog:
  - new version 1.38
  - Close File descriptor for unregognized devices (#159878)
    Thanks to David Milburn for the patch.
    Merged from RHEL-4
  - enable tune2fs to set and clear feature resize_inode (#167816)
  - removed outdated information from ext2online man page (#164383)


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-105.0.36.el6
changelog:
  - BUILDINFO: xen commit=b2a6db11ced11291a472bc1bda20ce329eda4d66
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - gnttab: don't blindly free status pages upon version change (Andrew Cooper)  [Orabug: 27571750]  {CVE-2018-7541}
  - memory: don't implicitly unpin for decrease-reservation (Andrew Cooper)  [Orabug: 27571737]  {CVE-2018-7540}


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-105.0.35.el6
changelog:
  - BUILDINFO: xen commit=873b8236e886daa3c26dae28d0c1c53d88447dc0
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: if secure boot is enabled dont write pci config space (Elena Ufimtseva)  [Orabug: 27533309]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-105.0.34.el6
changelog:
  - BUILDINFO: xen commit=81602116e75b6bbc519366b242c71888aa1b1673
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spec_ctrl: Fix several bugs in SPEC_CTRL_ENTRY_FROM_INTR_IST (Andrew Cooper)  [Orabug: 27553376]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: allow easier disabling of BTI mitigations (Zhenzhong Duan)  [Orabug: 27553376]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/boot: Make alternative patching NMI-safe (Andrew Cooper)  [Orabug: 27553376]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - xen/cmdline: Fix parse_boolean() for unadorned values (Andrew Cooper)  [Orabug: 27553376]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - Optimize the context switch code a bit (Zhenzhong Duan)  [Orabug: 27553376]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - Update init_speculation_mitigations() to upstream's (Zhenzhong Duan)  [Orabug: 27553376]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/entry: Avoid using alternatives in NMI/#MC paths (Andrew Cooper)  [Orabug: 27553376]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - Update RSB related implementation to upstream ones (Zhenzhong Duan)  [Orabug: 27553376]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-105.0.33.el6
changelog:
  - BUILDINFO: xen commit=c6a2fe8d72a3eba01b22cbe495e60cb6837fe8d0
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86: Expose CPUID.7, EDX.26->27 and CPUID.0x80000008, EBX.12 (redux) (Konrad Rzeszutek Wilk)  [Orabug: 27445678]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-105.0.32.el6
changelog:
  - BUILDINFO: xen commit=9657d91fcbf49798d2c5135866e1947113d536dc
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/Spectre: Set thunk to THUNK_NONE if compiler support is not available (Boris Ostrovsky)  [Orabug: 27375688]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-105.0.31.el6
changelog:
  - BUILDINFO: xen commit=4e5826dfcb56d3a868a9934646989f8483f03b3c
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xen: No dependencies on dracut and microcode_ctl RPMs (Boris Ostrovsky)  [Orabug: 27409718]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-105.0.30.el6
changelog:
  - BUILDINFO: xen commit=f3bdcc393d14e344f2743148845fe14c5e81b1e0
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86: Always print info about speculative mitigation facilities (Boris Ostrovsky)  [Orabug: 27352392]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Don't use retpoline if CONFIG_INDIRECT_THUNK is not set (Boris Ostrovsky)  [Orabug: 27352392]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-105.0.29.el6
changelog:
  - BUILDINFO: xen commit=ab650877a21f81203326b5a2c26f7e9382c9cbf9
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - rpm: Add microcode_ctl dependency (Boris Ostrovsky)  
  - x86: cpuint. Move the detection of CPU capabilities (Konrad Rzeszutek Wilk)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - migration: Set the CPUID _before_ XEN_DOMCTL_sethvmcontext (Konrad Rzeszutek Wilk)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/xen: Make cpu_has_[stibp,ibrsp,etc] work. (Konrad Rzeszutek Wilk)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Expose CPUID.7, EDX.26->27 and CPUID.0x80000008, EBX.12 (Konrad Rzeszutek Wilk)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/idle: Clear SPEC_CTRL while idle (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/cpuid: Offer Indirect Branch Controls to guests (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/ctxt: Issue a speculation barrier between vcpu contexts (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/entry: Clobber the Return Stack Buffer on entry to Xen (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/boot: Calculate the most appropriate BTI mitigation to use (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/entry: Use MSR_SPEC_CTRL at each entry/exit point (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Protect unaware domains from meddling hyperthreads (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/hvm: Permit guests direct access to MSR_{SPEC_CTRL,PRED_CMD} (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/migrate: Move MSR_SPEC_CTRL on migrate (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/msr: Emulation of MSR_{SPEC_CTRL,PRED_CMD} for guests (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Introduce a common cpuid_policy_updated() (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Introduce framework for cpuid policy updates (Boris Ostrovsky)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Introduce cpuid_policy (Boris Ostrovsky)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/msr: introduce struct msr_vcpu_policy (Sergey Dyasli)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/cmdline: Introduce a command line option to disable IBRS/IBPB, STIBP and IBPB (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - xen: add an optional string end parameter to parse_bool() (Juergen Gross)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/feature: Definitions for Indirect Branch Controls (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Introduce alternative indirect thunks (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Backport setup_force_cpu_cap (Boris Ostrovsky)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/amd: Try to set lfence as being Dispatch Serialising (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/boot: Report details of speculative mitigations (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Support indirect thunks from assembly code (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - common/wait: Clarifications to wait infrastructure (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Support compiling with indirect branch thunks (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/entry: Erase guest GPR state on entry to Xen (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/pv: Move hypercall handling up into C (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/hvm: Use SAVE_ALL to construct the cpu_user_regs frame after VMExit (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/entry: Rearrange RESTORE_ALL to restore register in stack order (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/entry: Remove support for partial cpu_user_regs frames (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/alt: Introduce ALTERNATIVE{,_2} macros (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/alt: Break out alternative-asm into a separate header file (Andrew Cooper)  [Orabug: 27343845]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/hvm: assert that we we saved a sane number of MSRs. (Tim Deegan)  [Orabug: 27338225] 
  - x86: Avoid corruption on migrate for vcpus using CPUID Faulting (Andrew Cooper)  [Orabug: 27338225] 
  - x86/hvm: Don't corrupt the HVM context stream when writing the MSR record (Andrew Cooper)  [Orabug: 27338225] 
  - x86: generic MSRs save/restore (Jan Beulich)  [Orabug: 27338225] 
  - x86/msr: introduce guest_wrmsr() (Sergey Dyasli)  [Orabug: 27338225] 
  - x86/msr: introduce guest_rdmsr() (Sergey Dyasli)  [Orabug: 27338225] 
  - x86/msr: introduce struct msr_domain_policy (Sergey Dyasli)  [Orabug: 27338225] 
  - microcode: Always scan the initramfs for microcode (Konrad Rzeszutek Wilk)  [Orabug: 27338228] 
  - x86: Move microcode loading earlier (Konrad Rzeszutek Wilk)  [Orabug: 27338228] 
  - livepatch: Alternative backport compile issues under Xen 4.4 (Konrad Rzeszutek Wilk)  [Orabug: 27338227] 
  - x86: support 2- and 3-way alternatives (Jan Beulich)  [Orabug: 27338227] 
  - xen/x86/alternatives: Do not use sync_core() to serialize I$ (Borislav Petkov)  [Orabug: 27338227] 
  - livepatch: NOP if func->new_addr is zero. (Konrad Rzeszutek Wilk)  [Orabug: 27338227] 
  - alternatives: x86 rename and change parameters on ARM (Konrad Rzeszutek Wilk)  [Orabug: 27338227] 
  - x86/arm64: Expose the ALT_[ORIG|REPL]_PTR macros to header files. (Konrad Rzeszutek Wilk)  [Orabug: 27338227] 
  - xsplice: Add support for alternatives (Ross Lagerwall)  [Orabug: 27338227] 
  - x86: Alter nmi_callback_t typedef (Konrad Rzeszutek Wilk)  [Orabug: 27338227] 
  - x86/alternatives: correct near branch check (Jan Beulich)  [Orabug: 27338227] 
  - x86: disable CR0.WP while applying alternatives (Andrew Cooper)  [Orabug: 27338227] 
  - work around Clang generating .data.rel.ro section for init-only files (Andrew Cooper)  [Orabug: 27338227] 
  - x86: move alternative.c data fully into .init.* (Jan Beulich)  [Orabug: 27338227] 
  - x86: port the basic alternative mechanism from Linux to Xen (Feng Wu)  [Orabug: 27338227] 
  - x86: add definitions for NOP operation (Feng Wu)  [Orabug: 27338227]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-105.0.28.el6
changelog:
  - BUILDINFO: xen commit=5ef31ddcecd6b7d07ada4eea3e14a3ebe54a5726
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend/python: Add 'enclosure-type' (Konrad Rzeszutek Wilk)  [Orabug: 27220728] 
  - xend/python: Expand the list of parameters that can be changed to include all (Konrad Rzeszutek Wilk)  
  - xend/python: Export DMI asset-tag and platform to guests. (Konrad Rzeszutek Wilk)  [Orabug: 27220728]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-105.0.27.el6
changelog:
  - BUILDINFO: xen commit=599c458e89d3773631c23ab9c600f8eb4afd3105
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - p2m: Check return value of p2m_set_entry() when decreasing reservation (George Dunlap)  [Orabug: 27130757]  {CVE-2017-17045}
  - p2m: Always check to see if removing a p2m entry actually worked (George Dunlap)  [Orabug: 27130757]  {CVE-2017-17045}
  - x86/pod: prevent infinite loop when shattering large pages (Julien Grall)  [Orabug: 27130713]  {CVE-2017-17044}
  - xen/physmap: Do not permit a guest to populate PoD pages for itself (Elena Ufimtseva)  [Orabug: 27130713]  {CVE-2017-17044}


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-105.0.26.el6
changelog:
  - BUILDINFO: xen commit=25339681b51393507e7f764f7fcc4c7666cee2c9
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/shadow: correct SH_LINEAR mapping detection in sh_guess_wrmap() (Andrew Cooper)  [Orabug: 27148094]  {CVE-2017-15592} {CVE-2017-15592}
  - x86: don't wrongly trigger linear page table assertion (Jan Beulich)  [Orabug: 27148091]  {CVE-2017-15595}


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-105.0.25.el6
changelog:
  - BUILDINFO: xen commit=6c164f71ed0dc46201f1d69de65d05d138556fcc
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/cpu: fix IST handling during PCPU bringup (Andrew Cooper)  [Orabug: 26901427]  {CVE-2017-15594}
  - x86/shadow: Don't create self-linear shadow mappings for 4-level translated guests (Andrew Cooper)  [Orabug: 26901416]  {CVE-2017-15592}
  - x86: Disable the use of auto-translated PV guests (Andrew Cooper)  [Orabug: 26901416]  {CVE-2017-15592}
  - x86: don't allow page_unlock() to drop the last type reference (Jan Beulich)  [Orabug: 26901404]  {CVE-2017-15593}
  - x86: don't store possibly stale TLB flush time stamp (Jan Beulich)  [Orabug: 26901395]  {CVE-2017-15588}
  - x86/mm: Disable PV linear pagetables by default (George Dunlap)  [Orabug: 26901366]  {CVE-2017-15595}
  - x86: limit linear page table use to a single level (Jan Beulich)  [Orabug: 26901366]  {CVE-2017-15595}
  - x86/HVM: prefill partially used variable on emulation paths (Jan Beulich)  [Orabug: 26901350]  {CVE-2017-15589}
  - x86/FLASK: fix unmap-domain-IRQ XSM hook (Jan Beulich)  [Orabug: 26901322]  {CVE-2017-15590}
  - x86/IRQ: conditionally preserve irq <-> pirq mapping on map error paths (Jan Beulich)  [Orabug: 26901322]  {CVE-2017-15590}
  - x86/MSI: disallow redundant enabling (Jan Beulich)  [Orabug: 26901322]  {CVE-2017-15590}
  - x86: enforce proper privilege when (un)mapping pIRQ-s (Jan Beulich)  [Orabug: 26901322]  {CVE-2017-15590}
  - x86: don't allow MSI pIRQ mapping on unowned device (Jan Beulich)  [Orabug: 26901322]  {CVE-2017-15590}
  - gnttab: fix pin count / page reference race (Jan Beulich)  [Orabug: 26901282]  {CVE-2017-15597}


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-105.0.24.el6
changelog:
  - BUILDINFO: xen commit=cf78ca81eb7dae3de9cfb7777983078c61bb79d5
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - gnttab: also validate PTE permissions upon destroy/replace (Jan Beulich)  [Orabug: 26782990]  {CVE-2017-14319}
  - tools/xenstore: dont unlink connection object twice (Juergen Gross)  [Orabug: 26782943]  {CVE-2017-14317}
  - xen/mm: make sure node is less than MAX_NUMNODES (George Dunlap)  [Orabug: 26775805]  {CVE-2017-14316}


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-105.0.23.el6
changelog:
  - BUILDINFO: xen commit=dcead9b714c8ffd1df0f84917defb2f9b91ce825
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - gnttab: correct pin status fixup for copy (Jan Beulich)  [Orabug: 26631871]  {CVE-2017-12855}
  - gnttab: split maptrack lock to make it fulfill its purpose again (Jan Beulich)  [Orabug: 26631852]  {CVE-2017-12136}
  - x86/grant: Disallow misaligned PTEs (Andrew Cooper)  [Orabug: 26631782]  {CVE-2017-12137}
  - grant_table: Default to v1, and disallow transitive grants (Andrew Cooper)  [Orabug: 26631746]  {CVE-2017-12135}


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-105.0.22.el6
changelog:
  - BUILDINFO: xen commit=22708936a1de050d7c51838e13f22ae4605d0cf5
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Red-tape: Update the repo with CVEs for XSA-[217,218,219,221,222,224] (Konrad Rzeszutek Wilk)  [Orabug: 26565647]  {CVE-2017-10920} {CVE-2017-10921} {CVE-2017-10922} {CVE-2017-10915} {CVE-2017-10912} {CVE-2017-10918} {CVE-2017-10917} {CVE-2017-10913} {CVE-2017-10914}


author: Dongli Zhang <dongli.zhang@oracle.com> - 4.4.4-105.0.21.el6
changelog:
  - BUILDINFO: xen commit=50e485935fc9134ba34310aaf95ffc9b4447bf40
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - gitignore: add tools/misc/xen-diag to .gitignore (Dongli Zhang)  [Orabug: 26440499] 
  - tools: utility to dump guest grant table info (Dongli Zhang)  [Orabug: 26440499] 
  - tools/libxc: add interface for GNTTABOP_query_size (Dongli Zhang)  [Orabug: 26440499]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-105.0.20.el6
changelog:
  - BUILDINFO: xen commit=c8af48c319485d7410b73746aeb4b6b420885a3b
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xen: increase default max grant frames and max maptrack frames (Annie Li)  [Orabug: 26409898]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-105.0.19.el6
changelog:
  - BUILDINFO: xen commit=a141c209ae1f5b18f5aef63f2e2f9fcffa189663
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - gnttab: __gnttab_unmap_common_complete() is all-or-nothing (Jan Beulich)  [Orabug: 26288686] 
  - gnttab: correct logic to get page references during map requests (George Dunlap)  [Orabug: 26288686] 
  - gnttab: never create host mapping unless asked to (Jan Beulich)  [Orabug: 26288686] 
  - gnttab: Fix handling of dev_bus_addr during unmap (George Dunlap)  [Orabug: 26288686] 
  - x86/shadow: Hold references for the duration of emulated writes (Andrew Cooper)  [Orabug: 26288648] 
  - x86/mm: disallow page stealing from HVM domains (Jan Beulich)  [Orabug: 26288632] 
  - guest_physmap_remove_page() needs its return value checked (Jan Beulich)  [Orabug: 26288679] 
  - xen/memory: Fix return value handing of guest_remove_page() (Andrew Cooper)  [Orabug: 26288679] 
  - evtchn: avoid NULL derefs (Jan Beulich)  [Orabug: 26288665] 
  - gnttab: correct maptrack table accesses (Jan Beulich)  [Orabug: 26288640] 
  - gnttab: Avoid potential double-put of maptrack entry (George Dunlap)  [Orabug: 26288640] 
  - gnttab: fix unmap pin accounting race (Jan Beulich)  [Orabug: 26288640] 
  - IOMMU: handle IOMMU mapping and unmapping failures (Quan Xu)  [Orabug: 26288640] 
  - xen/disk: don't leak stack data via response ring (Jan Beulich)  [Orabug: 26198945]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-105.0.18.el6
changelog:
  - BUILDINFO: xen commit=7bfe49935ed2b7adde46a5f115e1c27546792a56
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - livepatch: Wrong usage of spinlock on debug console. (Konrad Rzeszutek Wilk)  [Orabug: 26248317]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-105.0.17.el6
changelog:
  - BUILDINFO: xen commit=830224cb7e764948c4f524d049dd1511106295e6
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend/pci: Respect PCI devices taking their time to do FLR (Konrad Rzeszutek Wilk)  [Orabug: 26177765] 
  - dom0_vcpus_pin=[cpu-cpu],[cpu] support. (Konrad Rzeszutek Wilk)  [Orabug: 26177759] 
  - dom0_vcpus_pin: Include 'numa' support. (Konrad Rzeszutek Wilk)  [Orabug: 26177759]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-105.0.16.el6
changelog:
  - BUILDINFO: xen commit=10deb4b38fb395256ce87cf1fc0edbd499ec6bf3
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/do_invalid_op() should use is_active_kernel_text() rather than having its (Konrad Rzeszutek Wilk)  [Orabug: 26129256]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-105.0.15.el6
changelog:
  - BUILDINFO: xen commit=67b193cbaf090c27a2522c3ce6ee3a189dd65a7c
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86: correct create_bounce_frame (tagged with CVE number) (Boris Ostrovsky)  [Orabug: 25927745]  {CVE-2017-8905}
  - x86: discard type information when stealing pages (tagged with CVE number) (Boris Ostrovsky)  [Orabug: 25927683]  {CVE-2017-8904}
  - multicall: deal with early exit conditions (tagged with CVE number) (Boris Ostrovsky)  [Orabug: 25927612]  {CVE-2017-8903}


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-105.0.14.el6
changelog:
  - BUILDINFO: xen commit=f7997ea93ae215b96a86973ad404604aca65d838
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/hvm: do not set msr_tsc_adjust on hvm_set_guest_tsc_fixed (Joao Martins)  [Orabug: 25767978]


author: Joe Jin <joe.jin@oracle.com> - 4.4.4-105.0.13.el6
changelog:
  - BUILDINFO: xen commit=c7b188d9cbc0312d2d1580e11b0f742e5b92cca5
  - BUILDINFO: QEMU upstream commit=fcd17fdf18b95a9e408acc84f6d2b37cf3fc0335
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - tools/libxc: Set max_elem to zero in xc_lockprof_query_number() (Boris Ostrovsky)  [Orabug: 26020613]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-105.0.12.el6
changelog:
  - BUILDINFO: xen commit=8ee9cbea8e71c968e602d5b4974601d283d61d28
  - BUILDINFO: QEMU upstream commit=fcd17fdf18b95a9e408acc84f6d2b37cf3fc0335
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86: correct create_bounce_frame (Boris Ostrovsky)  [Orabug: 25927745] 
  - x86: discard type information when stealing pages (Boris Ostrovsky)  [Orabug: 25927683] 
  - multicall: deal with early exit conditions (Boris Ostrovsky)  [Orabug: 25927612]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-105.0.11.el6
changelog:
  - BUILDINFO: xen commit=66e33522666436a4b6c13fbaa77b4942876bb5f7
  - BUILDINFO: QEMU upstream commit=fcd17fdf18b95a9e408acc84f6d2b37cf3fc0335
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - kexec: Add spinlock for the whole hypercall. (Konrad Rzeszutek Wilk)  [Orabug: 25861731] 
  - kexec: clear kexec_image slot when unloading kexec image (Bhavesh Davda)  [Orabug: 25861731]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-105.0.10.el6
changelog:
  - BUILDINFO: xen commit=337c8edcc582f8bfb1bcfcb5a475c5fc18ff2def
  - BUILDINFO: QEMU upstream commit=fcd17fdf18b95a9e408acc84f6d2b37cf3fc0335
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - memory: properly check guest memory ranges in XENMEM_exchange handling (Jan Beulich)  [Orabug: 25760559]  {CVE-2017-7228}
  - xenstored: Log when the write transaction rate limit bites (Ian Jackson)  [Orabug: 25745225] 
  - xenstored: apply a write transaction rate limit (Ian Jackson)  [Orabug: 25745225]


author: Venu Busireddy <venu.busireddy@oracle.com> - 4.4.4-105.0.9.el6
changelog:
  - BUILDINFO: xen commit=17b0cd2109c42553e9c8c34d3a2b8252abead104
  - BUILDINFO: QEMU upstream commit=fcd17fdf18b95a9e408acc84f6d2b37cf3fc0335
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xm: Fix the error message displayed by 'xm create ...' (Venu Busireddy)  [Orabug: 25721696] 
  - xm: expand pci hidden devices tools (Venu Busireddy)  [Orabug: 25721624]
  - cirrus/vnc: zap drop bitblit support from console code. (Gerd Hoffmann)  [Orabug: 25718334]  {CVE-2016-9603}


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.4-105.0.8.el6
changelog:
  - BUILDINFO: xen commit=81f33e7316b476c319f42eb56ac58fc450804ded
  - BUILDINFO: QEMU upstream commit=2e4e0a805aeb448242b43399e0853b851bccde4e
  - BUILDINFO: QEMU traditional commit=d9ba4c53b14ebf9a0613b5638f90d95489622f0c
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: fix vif device ID allocation (Zhigang Wang)  [Orabug: 25692157] [Orabug: 25704938]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.4-105.0.7.el6
changelog:
  - BUILDINFO: xen commit=68930e8bbd9311ebd12fdb251362a2e1f9987fba
  - BUILDINFO: QEMU upstream commit=f663d3dd4e968756d33e29cb2c2c956cabbdd4ca
  - BUILDINFO: QEMU traditional commit=d9ba4c53b14ebf9a0613b5638f90d95489622f0c
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: fix waitForSuspend (Zhigang Wang)  [Orabug: 25638583] [Orabug: 25653480] 
  - IOMMU: always call teardown callback (Oleksandr Tyshchenko)  [Orabug: 25485193]
  - cirrus: fix oob access issue (CVE-2017-2615) (Li Qiang) [Orabug: 25533433]  {CVE-2017-2615} {CVE-2017-2615}
  - display: cirrus: ignore source pitch value as needed in blit_is_unsafe (Bruce Rogers)  [Orabug: 25533541]  {CVE-2017-2620}
  - cirrus: add blit_is_unsafe call to cirrus_bitblt_cputovideo (Gerd Hoffmann)  [Orabug: 25533541] {CVE-2017-2620} {CVE-2017-2620}


author: Tianyue Lan <tianyue.lan@oracle.com> - 4.4.4-105.0.6.el6
changelog:
  - BUILDINFO: xen commit=9f3030e391274b89deb80c86a6343dac473916b3
  - BUILDINFO: QEMU upstream commit=f663d3dd4e968756d33e29cb2c2c956cabbdd4ca
  - BUILDINFO: QEMU traditional commit=d9ba4c53b14ebf9a0613b5638f90d95489622f0c
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - one-off build


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-105.0.5.el6
changelog:
  - BUILDINFO: xen commit=9f3030e391274b89deb80c86a6343dac473916b3
  - BUILDINFO: QEMU upstream commit=f663d3dd4e968756d33e29cb2c2c956cabbdd4ca
  - BUILDINFO: QEMU traditional commit=bc33fbc6f9a004dc11dcc18f1c5c755a60b65b73
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86: force EFLAGS.IF on when exiting to PV guests (Jan Beulich)  [Orabug: 25235009]  {CVE-2016-10024}
  - Rombios: large disk support for LBA48 to L-CHS translation (Bhavesh Davda)  [Orabug: 25304859] 
  - x86/emul: Correct the handling of eflags with SYSCALL (Andrew Cooper)  [Orabug: 25294731]  {CVE-2016-10013}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.4.4-105.0.4.el6
changelog:
  - BUILDINFO: commit=c9d295a8e909c45a5e1d9fb5ef2c2ed0df1e871a
  - libxl: Remove redundant setting of phyical-device (George Dunlap)  [Orabug: 24975447]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-105.0.3.el6
changelog:
  - BUILDINFO: commit=8669823eab47b0fa3ae9a7f8fa5ef45874582559
  - x86emul: CMPXCHG8B ignores operand size prefix (Jan Beulich)  [Orabug: 25180276]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-105.0.2.el6
changelog:
  - BUILDINFO: commit=5e4dc2c5fbd14b065234c0b5e5b637e0e005fab7
  - pygrub: Properly quote results, when returning them to the caller: (Ian Jackson)  [Orabug: 25094263]  {CVE-2016-9379} {CVE-2016-9380}
  - x86emul: fix huge bit offset handling (Jan Beulich)  [Orabug: 25088366]  {CVE-2016-9383}
  - x86/PV: writes of %fs and %gs base MSRs require canonical addresses (Jan Beulich)  [Orabug: 25087576]  {CVE-2016-9385}
  - x86/HVM: don't load LDTR with VM86 mode attrs during task switch (Jan Beulich)  [Orabug: 25087539]  {CVE-2016-9382}
  - x86/hvm: Fix the handling of non-present segments (Andrew Cooper)  [Orabug: 25087515]  {CVE-2016-9386}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.4.4-105.0.1.el6
changelog:
  - BUILDINFO: commit=286bb9711e33d92767e8608bea4d3da6dbeeb710
  - move TLB-flush filtering out into populate_physmap during vm creation (Dongli Zhang)  [Orabug: 24951888] 
  - replace tlbflush check and operation with inline functions (Dongli Zhang)  [Orabug: 24951888] 
  - x86/hvm: extend HVM cpuid leaf with vcpu id (Paul Durrant)  
  - x86/hvm: add HVM-specific hypervisor CPUID leaf (Boris Ostrovsky)  
  - xend: soft_reset support. (Konrad Rzeszutek Wilk)  
  - (lib)xl: soft reset support (Vitaly Kuznetsov)  
  - tools/libxl: Save and restore EMULATOR_XENSTORE_DATA content (Andrew Cooper)  
  - libxl: introduce libxl__device_model_xs_path (Wei Liu)  
  - libxl: add LIBXL_DEVICE_MODEL_SAVE_FILE (Vitaly Kuznetsov)  
  - libxc: support XEN_DOMCTL_soft_reset operation (Vitaly Kuznetsov)  
  - arch-specific hooks for domain_soft_reset() (Vitaly Kuznetsov)  
  - flask: DOMCTL_soft_reset support (Vitaly Kuznetsov)  
  - introduce XEN_DOMCTL_soft_reset (Vitaly Kuznetsov)  
  - evtchn: make evtchn_reset() ready for soft reset (Vitaly Kuznetsov)  
  - evtchn: make EVTCHNOP_reset suitable for kexec (Vitaly Kuznetsov)  
  - xl: introduce enum domain_restart_type (Vitaly Kuznetsov)  
  - libxl: support SHUTDOWN_soft_reset shutdown reason (Vitaly Kuznetsov)  
  - introduce SHUTDOWN_soft_reset shutdown reason (Vitaly Kuznetsov)  
  - x86emul: honor guest CR0.TS and CR0.EM (Jan Beulich)  [Orabug: 24697001]  {CVE-2016-7777}


author: Marcela Maslanova <mmaslano@redhat.com> - 1:8.5.2-3
changelog:
  - tclConfig.sh was fixed again with symlink into libdir/tcl8.5.
  Many packages are looking in /usr/lib, because tcl dir is versioned.


author: Marcela Maslanova <mmaslano@redhat.com> - 1:8.5.2-2
changelog:
  - update to 8.5.2
  - 451750 PostgreSQL need tclConfig.sh in paths
  - 437399 now really own directories


author: Marcela Maslanova <mmaslano@redhat.com> - 1:8.5.1-1
changelog:
  - new version tcl8.5.1
  - fix 433151 problem with regular expression
  - Version 2.5.3 of the http package requires Tcl 8.4 or better ->
  	change make patch, add tm files back to 8.4


author: Marcela Maslanova <mmaslano@redhat.com> - 1:8.5.0-5
changelog:
  - stack checking is ok, error is in application. Removing withouth stack.
  - tcl-8.5.0-hidden.patch isn't ok, fix should be in expect. In the meantime
  	the patch stay here.


author: Wart <wart@kobold.org> - 1:8.5.0-3
changelog:
  - Obsolete the tcl-tcldict package that has been incorporated
    into the main Tcl source code.
  - Disable the the stack checking code; it makes assumptions that are
    not necessarily true on Fedora and causes some apps to fail (BZ #425799)


author: Marcela Maslanova <mmaslano@redhat.com> - 1:8.4.15-6
changelog:
  - CVE-2007-4772 NFA optimization cause hang in loop. Back ported patch
  	from upstream development version.


author: David Cantrell <dcantrell@redhat.com> - 8.4.12-1
changelog:
  - Upgraded to tcl-8.4.12
  - Use ksh rather than bash for the configure script (known bug w/ bash-3.1)
  - Generate HTML docs from source
  - Add in the Tk source for HTML doc generation


author: Jens Petersen <petersen@redhat.com> - 8.4.11-1
changelog:
  - update to latest stable release
    - update tcl-8.4-autoconf.patch
  - buildrequire sed and use it instead of perl for editting tclConfig.sh


author: Jens Petersen <petersen@redhat.com> - 8.4.7-2
changelog:
  - improve tcl8.3.5-tclConfig-package-path-90160.patch to look in libdir in
    addition to datadir for packages, so that tclsh can load binary packages
    in lib64 (135310)


author: Jens Petersen <petersen@redhat.com> - 8.4.7-1
changelog:
  - update to 8.4.7
    - replace tcl-8.4.5-no_rpath.patch by tcl-8.4-no_rpath.patch
    - replace tcl-8.4.5-autoconf.patch by tcl-8.4-autoconf.patch
  - no longer obsolete itcl


author: Jens Petersen <petersen@redhat.com> - 8.4.5-6
changelog:
  - apply tcl-8.4.5-autoconf.patch to build with autoconf 2.5x
    (Robert Scheck, #116773)
  - use %{name} more extensively for script portability
  - run "make test" by default when building (can be disabled with
    "--without check")
  - add a backwards compatible symlink {_prefix}/lib/tk8.4 ->
    {_datadir}/tk8.4 (Michal Jaegermann, part of #90160)
  - use "mkdir -p" instead of "mkdirhier" (Robert Scheck, #116771)
  - include some doc files


author: Jens Petersen <petersen@redhat.com> - 8.4.5-2
changelog:
  - put private header files under generic and unix subdirs
  - include real generic/tclPort.h not just a symlink to tclUnixPort.h
  - add tclMath.h to {_includedir}/tcl-private/generic for building tk
  - remove build remnants from tclConfig.sh


author: Jens Petersen <petersen@redhat.com> - 8.4.5-1
changelog:
  - new package split out from tcltk
  - update to tcl 8.4.5 (#88429)
    - drop tcl-8.3.3-heiierarchy.patch, tcl-8.3.3-dlopen.patch
  	 and tcl8.3.5-koi8-u.enc-88806.patch
  - include private include headers under {_includedir}/tcl-private
  - filtered changelog for tcl
  - buildrequire autoconf213 (#110583) [mvd@mylinux.com.ua]


author: Jens Petersen <petersen@redhat.com> - 8.3.5-90
changelog:
  - split out devel files from tcl and tk into -devel subpackages (#90087)
  - fix tcl package path in tclConfig.sh to point to datadir (#90160)
    [reported by Michal Jaegermann]
  - remove gratuitous whitespace in koi8-u.enc (#88806)
    [reported with fix by Victor Cheburkin]
  - update ucs4 patch to also change regcustom.h, but disable it for now (#89098)


author: Jens Petersen <petersen@redhat.com> - 8.3.5-84
changelog:
  - link all libs with DT_SONAME using tcl.m4 patch (#81297)
  - drop synthetic lib provides
  - remove obsolete patches from srpm
  - update buildrequires
  - use buildroot instead of RPM_BUILD_ROOT
  - install all man pages under mandir, instead of moving some from /usr/man
  - install libtcl and libtk mode 755
  - introduce _genfilelist macro for clean single-sweep find filelist generation
    for each package
  - use perl to remove buildroot prefix from filelists


author: Jens Petersen <petersen@redhat.com> 8.3.5-76
changelog:
  - make it build on x86_64 (details below)
  - don't explicitly update config.{guess,sub} since %configure does it for us
  - added "--without check" rpmbuild option to disable running tests in future
  - build and install tcl and tk with script files under datadir (not libdir)
  - generate filelists from datadir and not from mandir from now on


author: Jens Petersen <petersen@redhat.com>
changelog:
  - update to tcl-8.3.5, tk-8.3.5, tcl-html-8.3.5
  - update url for tcl, tk, tclx, itcl, tcllib
  - build without all makecfg patches for now
    - in particular use upstream versioned library name convention
  - add backward compatible lib symlinks for now
  - add unversioned symlinks for versioned bindir files
  - use make's -C option rather than jumping in and out of source dirs
    during install
  - use INSTALL_ROOT destdir-like make variable instead of makeinstall
    for all subpackages except tix and itcl


author: Jens Petersen <petersen@redhat.com>
changelog:
  - update to tcl-8.3.4, tk-8.3.4 (#75600), tcllib-1.3, itcl-3.2.1,
    tix-8.1.3 (#59098)
  - drop obsolete tcl cruft, tcl refcount, tix perf patches
  - added tcltk html manual
  - drop the crud compat dir symlinks in libdir
  - package now builds without tcl or tk installed (partly #52606)
    - replace all relative paths by absolutes ones, using new tcltktop
    - give absolute paths to tcl and tk when configuring
    - give buildroot bindir path to tcllib make
    - export buildroot libdir in LD_LIBRARY_PATH when installing
  - replace tclvers and tkvers by tcltkvers and use it
  - replace tcl_major and tk_major by tcltk_major and use it
  - don't explicitly provide 64bit libs on ia64 and sparc64


author: Adrian Havill <havill@redhat.com>
changelog:
  * Mon Aug  8 2001 Adrian Havill <havill@redhat.com>
  - re-enable glibc string and math inlines; recent gcc is a-ok.
  - optimize at -O2 instead of -O
  - rename "soname" patches related to makefile/autoconf changes
  - added elf "needed" for tk, tclx, tix, itk


author: Adrian Havill <havill@redhat.com>
changelog:
  - used %makeinstall to brute force fix any remaining unflexible makefile dirs
  - fixed bad ref count release in tcl (bug 49406)
  - revert --enable-threads, linux is (still) not ready (yet) (bug 49251)


author: Adrian Havill <havill@redhat.com>
changelog:
  - refresh all sources to latest stable (TODO: separate expect/expectk)
  - massage out some build stuff to patches (TODO: libtoolize hacked constants)
  - remove patches already rolled into the upstream
  - removed RPATH (bugs 45569, 46085, 46086), added SONAMEs to ELFs
  - changed shared object filenames to something less gross
  - reenable threads which seem to work now
  - made compile-friendly for IA64


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - FHS packaging changes.
  - revert --enable-threads, linux is not ready (yet) (#11789).
  - tcl/tk: update to 8.3.1 (#10779).
  - abstract major tcltk version for soname expansion etc.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to (tcl,tk}-8.2.3, expect-5.31, and itcl-3.1.0, URL's as well.
  - use perl to drill out pre-pended RPM_BUILD_ROOT.
  - configure with --enable-threads (experimental).
  - correct hierarchy spelling (#7082).


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Make changes from bug number 7602
  - Apply patch from bug number 7537
  - Apply fix from bug number 7157
  - Add fixes from bug #7601 to the runtcl patch


author: Otto Hammersmith <otto@redhat.com>
changelog:
  - added patch to remove libieee test in configure.in for tcl and tk.
    Shouldn't be needed anymore for glibc systems, but this isn't the "proper" 
    solution for all systems
  - fixed src urls


author: EL Errata <el-errata_ww@oracle.com> - 3.9-26.0.1
changelog:
  - weak-modules: Check dracut retcode to avoid copy incomplete initramfs.
    (Joe Jin) [orabug 23737293]
  - Treat builtin modules as already loaded (John Haxby) [orabug 13851649]
    And don't create modules.builtin.bin if there is no modules.builtin


author: Tony Camuso <tcamuso@redhat.com>
changelog:
  - weak-modules: when adding a module, should collect the symbols from
    external modules of destination kernel
    Resolves: rhbz#1284935

  - weak-modules: Updating kernel was issuing warnings upon removal of
    old kernel.
    Resolves: rhbz#1343376

  - weak-modules: weak-modules does not handle periods in symbol names
    Resolves: rhbz#1389067


author: Martin Sivak <msivak@redhat.com> - 3.9-18
changelog:
  - Fix a segfault when overrides line was incomplete
    Resolves: rhbz#673100
  - Added backports directory to depmod search path
    Resolves: rhbz#761511


author: Jon Masters <jcm@redhat.com> - 3.7-7 (pre9)
changelog:
  - Rebuild with stock vendor conf files called "dist.conf" not "fedora.conf".
  - Re-add glibc-static dependency because of zlib_flags requiring static.


author: Jon Masters <jcm@redhat.com> - 3.4-7
changelog:
  - Update weak-modules, remove obsoletes on "modules", remove "blacklist-compat".
  - Add "alias gre0 ip_gre" to /etc/modprobe.conf by default.
  - Resolves: #207653, #242080, #241595, #229783.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.6
changelog:
  - Revert out fixes to mptbase. Need to work around mkinitrd problem parsing
    output from module-init-tools - will then respin with new fix.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.3
changelog:
  - Updated to upstream with some miscellaneous fixes from contrib.
  - Rebuilt allconf patch since retabbed upstream source.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre2.1.3
changelog:
  - Updated to upstream with new module priority/override features.
  - Documentation updates and other miscellaneous fixes.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre1.4.6
changelog:
  - Don't call depmod on removing a kernel.
  - Warn rather than exit if we can't process weak-updates on new kernel
  - Handle duplicate modules by picking the latter version of the two.


author: Steve Dickson <SteveD@RedHat.com>
changelog:
  - Added the mounting of /proc/fs/nfsd to modprobe.conf.dist
    so it gets mounted when nfsd is loaded.


author: Bill Nottingham <notting@redhat.com> 2.4.26-9
changelog:
  - add nfsv4 aliases to modprobe.conf.dist
  - clean out upstreamed aliases in modprobe.conf.dist
  - mount rpc_pipefs when sunrpc is loaded


author: Bill Nottingham <notting@redhat.com> 2.4.26-6
changelog:
  - update module-init-tools to 3.0pre10
  - fix modinfo (#116305)
  - always include /etc/modprobe.conf.dist (don't require the line in modprobe.conf)
  - ship a static modprobe.conf.dist, don't generate it at build time
  - clean up modprobe.conf.dist a little (#113772, #113768)


author: Bill Nottingham <notting@redhat.com> 2.4.26-1
changelog:
  - update to 2.4.26
  - switch around man pages; the module-init-tools man pages are now
    the default
  - add backwards compat usb aliases for the simple case
  - add some commentary to modules.conf/modprobe.conf on conversion
  - modutils-devel goes away


author: Bill Nottingham <notting@redhat.com> 2.4.25-8
changelog:
  - fix leak in module-init-tools-depmod (<arjanv@redhat.com>)
  - look in /lib/modules/`uname -r`/updates for modules


author: Bill Nottingham <notting@redhat.com> 2.4.25-2
changelog:
  - add joystick alias (#91309)
  - add alias for af_key for IPSEC
  - update module-init-tools to 0.9.12
  - ship a modprobe.conf.dist with the aliases that are built into 2.4
    modutils
  - generate a modprobe.conf if needed on install


author: Bill Nottingham <notting@redhat.com> 2.4.22-7
changelog:
  - make sure we don't use diet anywhere but x86, even if it's lying around
  - fix zlib linkage, for real
  - switch ftape alias (#7674)


author: Matt Wilson <msw@redhat.com>
changelog:
  - added a -devel subpackage that contains libraries that apps can use
    to implement insmod and rmmod


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.6
  - alias binfmt-0000 off (#9709)
  - turn off 'modules.conf is more recent than modules.dep' message (#14276,
    others)
  - return nonzero from depmod if there are errors (#40935)
  - fix manpage typo (#33123)


author: Elliot Lee <sopwith@redhat.com> 2.4.5-3
changelog:
  - Add modutils-2.4.5-stblocal.patch from Jakub. See the e-mail message
    inside the patch file for details.
  - Use smp_mflags macro


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.0
  - tweak irda aliases
  - remove vixie-cron dependency (it's not *required*)
  - add missing %build
  LANG=C
  export LANG
  unset DISPLAY
   (where did that go?)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to 2.3.9.
  - port RH patches from 2.1.121 to 2.3.9 where needed.
  - disable warning about conf.modules for now, in 7.0
    we should move to modules.conf.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - pick up ultrapenguin patches (not applied for now).
  - pre-generate keyword.c so gperf doesn't have to be present (not applied).
  - util/sys_cm.c: fix create_module syscall (signed return on sparc too)


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - Handle EM_SPARCV9, kludge to support both 32bit and 64bit kernels
    from the same package on sparc/sparc64.


author: parag <paragn@fedoraproject.org> - 1.0.3-4
changelog:
  - Merge-Review #226093
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - Removed zero-length README file


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "BuildRequires: pkgconfig" for (#193505)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "Requires: libXext-devel" to libXv-devel subpackage, to avoid all
    packages that depend on libXv-devel from having to manually specify that
    dependency themselves, as it is required by Xv.  (#192167)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXv to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2
changelog:
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXv to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.26.12.el6uek]
changelog:
  - x86/mds: Add empty commit for CVE-2019-11091 (Konrad Rzeszutek Wilk)  [Orabug: 29721935]  {CVE-2019-11091} 
  - x86/microcode: Add loader version file in debugfs (Boris Ostrovsky)  [Orabug: 29754165]  
  - x86/microcode: Fix CPU synchronization routine (Borislav Petkov)  [Orabug: 29754165]  
  - x86/microcode: Synchronize late microcode loading (Borislav Petkov)  [Orabug: 29754165]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.26.11.el6uek]
changelog:
  - x86/speculation: Support 'mitigations=' cmdline option (Josh Poimboeuf)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - cpu/speculation: Add 'mitigations=' cmdline option (Josh Poimboeuf)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Konrad Rzeszutek Wilk)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Fix comment (Boris Ostrovsky)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: update mds_mitigation to reflect debugfs configuration (Mihai Carabas)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: fix microcode late loading (Mihai Carabas)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add boot option to enable MDS protection only while in idle (Boris Ostrovsky)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Improve coverage for MDS vulnerability (Boris Ostrovsky)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add SMT warning message (Josh Poimboeuf)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mds=full,nosmt cmdline option (Josh Poimboeuf)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - Documentation: Add MDS vulnerability documentation (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - Documentation: Move L1TF to separate directory (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mitigation mode VMWERV (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add debugfs for controlling MDS (Kanth Ghatraju)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add sysfs reporting for MDS (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mitigation control for MDS (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Clear CPU buffers on exit to user (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mds_clear_cpu_buffers() (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Andi Kleen)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add BUG_MSBDS_ONLY (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add basic bug infrastructure for MDS (Andi Kleen)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation: Consolidate CPU whitelists (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/msr-index: Cleanup bit defines (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - Documentation/l1tf: Fix small spelling typo (Salvatore Bonaccorso)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation: Simplify the CPU bug detection logic (Dominik Brodowski)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.10.1.el6uek]
changelog:
  - mm, thp: Do not make page table dirty unconditionally in follow_trans_huge_pmd() (Kirill A. Shutemov)  [Orabug: 27200879]  {CVE-2017-1000405} 
  - NFS: Add static NFS I/O tracepoints (Chuck Lever)   
  - storvsc: don't assume SG list is contiguous (Aruna Ramakrishna)  [Orabug: 27044692]  
  - fix unbalanced page refcounting in bio_map_user_iov (Vitaly Mayatskikh)  [Orabug: 27069038]  {CVE-2017-12190} 
  - more bio_map_user_iov() leak fixes (Al Viro)  [Orabug: 27069038]  {CVE-2017-12190} 
  - packet: in packet_do_bind, test fanout with bind_lock held (Willem de Bruijn)  [Orabug: 27069065]  {CVE-2017-15649} 
  - packet: hold bind lock when rebinding to fanout hook (Willem de Bruijn)  [Orabug: 27069065]  {CVE-2017-15649} 
  - net: convert packet_fanout.sk_ref from atomic_t to refcount_t (Reshetova, Elena)  [Orabug: 27069065]  {CVE-2017-15649} 
  - packet: fix races in fanout_add() (Eric Dumazet)  [Orabug: 27069065]  {CVE-2017-15649} 
  - refcount_t: Introduce a special purpose refcount type (Peter Zijlstra)  [Orabug: 27069065]  {CVE-2017-15649} 
  - locking/atomics: Add _{acquire|release|relaxed}() variants of some atomic operations (Will Deacon)  [Orabug: 27069065]  {CVE-2017-15649} 
  - net: qmi_wwan: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27215225]  {CVE-2017-16650} 
  - ALSA: usb-audio: Kill stray URB at exiting (Takashi Iwai)  [Orabug: 27148276]  {CVE-2017-16527} 
  - scsi: Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan D. Milne)  [Orabug: 27187217]  
  - ocfs2: fix posix_acl_create deadlock (Junxiao Bi)  [Orabug: 27126129]  
  - scsi: Don't abort scsi_scan due to unexpected response (John Sobecki)  [Orabug: 27119628]  
  - ocfs2: code clean up for direct io (Ryan Ding)   
  - xscore: add dma address check (Zhu Yanjun)  [Orabug: 27076919]  
  - KVM: nVMX: Fix loss of L2's NMI blocking state (Wanpeng Li)  [Orabug: 27062498]  
  - KVM: nVMX: track NMI blocking state separately for each VMCS (Paolo Bonzini)  [Orabug: 27062498]  
  - KVM: VMX: require virtual NMI support (Paolo Bonzini)  [Orabug: 27062498]  
  - KVM: nVMX: Fix the NMI IDT-vectoring handling (Wanpeng Li)  [Orabug: 27062498]  
  - uek-rpm: disable CONFIG_NUMA_BALANCING_DEFAULT_ENABLED (Fred Herard)  [Orabug: 26798697]  
  - thp: run vma_adjust_trans_huge() outside i_mmap_rwsem (Kirill A. Shutemov)  [Orabug: 27026180]  
  - selinux: fix off-by-one in setprocattr (Stephen Smalley)  [Orabug: 27001717]  {CVE-2017-2618} {CVE-2017-2618} {CVE-2017-2618} 
  - sysctl: Drop reference added by grab_header in proc_sys_readdir (Zhou Chengming)  [Orabug: 27036903]  {CVE-2016-9191} {CVE-2016-9191} {CVE-2016-9191} 
  - KEYS: prevent KEYCTL_READ on negative key (Eric Biggers)  [Orabug: 27050248]  {CVE-2017-12192} 
  - IB/ipoib: For sendonly join free the multicast group on leave (Christoph Lameter)  [Orabug: 27077718]  
  - IB/ipoib: increase the max mcast backlog queue (Doug Ledford)  [Orabug: 27077718]  
  - IB/ipoib: Make sendonly multicast joins create the mcast group (Doug Ledford)  [Orabug: 27077718]  
  - IB/ipoib: Expire sendonly multicast joins (Christoph Lameter)  [Orabug: 27077718]  
  - IB/ipoib: Suppress warning for send only join failures (Jason Gunthorpe)  [Orabug: 27077718]  
  - IB/ipoib: Clean up send-only multicast joins (Doug Ledford)  [Orabug: 27077718]  
  - netlink: allow to listen "all" netns (Nicolas Dichtel)  [Orabug: 27077944]  
  - netlink: rename private flags and states (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: use a spin_lock to protect nsid management (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: notify new nsid outside __peernet2id() (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: rename peernet2id() to peernet2id_alloc() (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: always provide the id to rtnl_net_fill() (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: returns always an id in __peernet2id() (Nicolas Dichtel)  [Orabug: 27077944]  
  - Hang/soft lockup in d_invalidate with simultaneous calls (Al Viro)  [Orabug: 27052681]  
  - Revert "drivers/char/mem.c: deny access in open operation when securelevel is set" (Brian Maly)  [Orabug: 27037811]


author: Jeff Law <ldv@altlinux.org> - 4.8-2
changelog:
  - Don't dereference dropped TCP (#971352).  From
    Jan Stancek.  Merged into patch for 851457.
  - Disable "net" test as it is highly timing dependent
    Merge into patch 851457.
  - Bring forward patches lost after resyncing with Fedora.
    - Patch to avoid strict aliasing warnings
    - Patch to add man page for strace-log-merge (#948577)
    - Patch to improve scheduling fairness (#851457)


author: Dmitry V. Levin <ldv@altlinux.org> - 4.8-1
changelog:
  - New upstream release:
    + fixed ERESTARTNOINTR leaking to userspace on ancient kernels (#659382);
    + fixed decoding of *xattr syscalls (#885233);
    + fixed handling of files with 64-bit inode numbers by 32-bit strace (#912790);
    + added aarch64 support (#969858).


author: Roland McGrath <roland@redhat.com> - 4.5.20-1
changelog:
  - New upstream release, work mostly by Andreas Schwab and Dmitry V. Levin.
    + fixed potential stack buffer overflow in select decoder (#556678);
    + fixed FTBFS (#539044).


author: Roland McGrath <roland@redhat.com> - 4.5.19-1
changelog:
  - New upstream release, work mostly by Dmitry V. Levin <ldv@altlinux.org>
    + exit/kill strace with traced process exitcode/signal (#105371);
    + fixed build on ARM EABI (#507576);
    + fixed display of 32-bit argv array on 64-bit architectures (#519480);
    + fixed display of 32-bit fcntl(F_SETLK) on 64-bit architectures (#471169);
    + fixed several bugs in strings decoder, including potential heap
      memory corruption (#470529, #478324, #511035).


author: Roland McGrath <roland@redhat.com> - 4.5.18-1
changelog:
  - build fix for newer kernel headers (#457291)
  - fix CLONE_VFORK handling (#455078)
  - Support new Linux/PPC system call subpage_prot and PROT_SAO flag.
  - In sigaction system call, display sa_flags value along with SIG_DFL/SIG_IGN.


author: Roland McGrath <roland@redhat.com> - 4.5.17-1
changelog:
  - handle O_CLOEXEC, MSG_CMSG_CLOEXEC (#365781)
  - fix biarch stat64 decoding (#222275)
  - fix spurious "..." in printing of environment strings (#358241)
  - improve prctl decoding (#364401)
  - fix hang wait on exited child with exited child (#354261)
  - fix biarch fork/vfork (-f) tracing (#447475)
  - fix biarch printing of negative argument kill (#430585)
  - fix biarch decoding of error return values (#447587)
  - fix -f tracing of CLONE_VFORK (#455078)
  - fix ia64 register clobberation in -f tracing (#453438)
  - print SO_NODEFER, SA_RESETHAND instead of SA_NOMASK, SA_ONESHOT (#455821)
  - fix futex argument decoding (#448628, #448629)


author: Roland McGrath <roland@redhat.com> - 4.5.16-1
changelog:
  - fix multithread issues (#240962, #240961, #247907)
  - fix spurious SIGSTOP on early interrupt (#240986)
  - fix utime for biarch (#247185)
  - fix -u error message (#247170)
  - better futex syscall printing (##241467)
  - fix argv/envp printing with small -s settings, and for biarch
  - new syscalls: getcpu, eventfd, timerfd, signalfd, epoll_pwait,
    move_pages, utimensat


author: Roland McGrath <roland@redhat.com> - 4.5.15-1
changelog:
  - biarch fixes (#179740, #192193, #171626, #173050, #218433, #218043)
  - fix -ff -o behavior (#204950, #218435, #193808, #219423)
  - better quotactl printing (#118696)
  - *at, inotify*, pselect6, ppoll and unshare syscalls (#178633, #191275)
  - glibc-2.5 build fixes (#209856)
  - memory corruption fixes (#200621
  - fix race in child setup under -f (#180293)
  - show ipc key values in hex (#198179, #192182)
  - disallow -c with -ff (#187847)
  - Resolves: RHBZ #179740, RHBZ #192193, RHBZ #204950, RHBZ #218435
  - Resolves: RHBZ #193808, RHBZ #219423, RHBZ #171626, RHBZ #173050
  - Resolves: RHBZ #218433, RHBZ #218043, RHBZ #118696, RHBZ #178633
  - Resolves: RHBZ #191275, RHBZ #209856, RHBZ #200621, RHBZ #180293
  - Resolves: RHBZ #198179, RHBZ #198182, RHBZ #187847


author: Jakub Jelinek <jakub@redhat.com> - 4.5.14-4
changelog:
  - Fix ia64 syscall decoding (#206768)
  - Fix build with glibc-2.4.90-33 and up on all arches but ia64
  - Fix build against 2.6.18+ headers


author: Roland McGrath <roland@redhat.com> - 4.5.14-1
changelog:
  - Fix biarch decoding of socket syscalls (#174354).
  - Fix biarch -e support (#173986).
  - Accept numeric syscalls in -e (#174798).
  - Fix ipc syscall decoding (#164755).
  - Improve msgrcv printing (#164757).
  - Man page updates (#165375).
  - Improve mount syscall printing (#165377).
  - Correct printing of restarting syscalls (#165469).


author: Roland McGrath <roland@redhat.com> - 4.5.13-1
changelog:
  - Fix setsockopt decoding on 64-bit (#162449).
  - Fix typos in socket option name strings (#161578).
  - Display more IPV6 socket options by name (#162450).
  - Don't display inappropriate syscalls for -e trace=file (#159340).
  - New selector type -e trace=desc for file-descriptor using calls (#159400).
  - Fix 32-bit old_mmap syscall decoding on x86-64 (#162467, #164215).
  - Fix errors detaching from multithreaded process on interrupt (#161919).
  - Note 4.5.12 fix for crash handling bad signal numbers (#162739).


author: Roland McGrath <roland@redhat.com> - 4.5.12-1
changelog:
  - Fix known syscall recognition for IA32 processes on x86-64 (#158934).
  - Fix bad output for ptrace on x86-64 (#159787).
  - Fix potential buffer overruns (#151570, #159196).
  - Make some diagnostics more consistent (#159308).
  - Update PowerPC system calls.
  - Better printing for Linux aio system calls.
  - Don't truncate statfs64 fields to 32 bits in output (#158243).
  - Cosmetic code cleanups (#159688).


author: Roland McGrath <roland@redhat.com> - 4.5.10-1
changelog:
  - Fix select handling on nonstandard fd_set sizes.
  - Don't print errors for null file name pointers.
  - Fix initial execve output with -i (#143365).


author: Roland McGrath <roland@redhat.com> - 4.5.9-2
changelog:
  - update ia64 syscall list (#146245)
  - fix x86_64 syscall argument extraction for 32-bit processes (#146093)
  - fix -e signal=NAME parsing (#143362)
  - fix x86_64 exit_group syscall handling
  - improve socket ioctl printing (#138223)
  - code cleanups (#143369, #143370)
  - improve mount flags printing (#141932)
  - support symbolic printing of x86_64 arch_prctl parameters (#142667)
  - fix potential crash in getxattr printing


author: Roland McGrath <roland@redhat.com> - 4.5.8-1
changelog:
  - fix multithreaded exit handling (#132150, #135254)
  - fix ioctl name matching (#129808)
  - print RTC_* ioctl structure contents (#58606)
  - grok epoll_* syscalls (#134463)
  - grok new RLIMIT_* values (#133594)
  - print struct cmsghdr contents for sendmsg (#131689)
  - fix clock_* and timer_* argument output (#131420)


author: Roland McGrath <roland@redhat.com> - 4.5.7-2
changelog:
  - new upstream version, misc fixes and updates (#128091, #129166, #128391, #129378, #130965, #131177)


author: Roland McGrath <roland@redhat.com> 4.5.6-1
changelog:
  - new upstream version, updates ioctl lists (#127398), fixes quotactl (#127393), more ioctl decoding (#126917)


author: Roland McGrath <roland@redhat.com> 4.5.3-1
changelog:
  - new upstream version, mq_* calls (#120701), -p vs NPTL (#120462), more fixes (#118694, #120541, #118685)


author: Jakub Jelinek <jakub@redhat.com> 4.4-8
changelog:
  - newer version of the clone fixing patch (Roland McGrath)
  - aio syscalls for i386/ia64/ppc (Ben LaHaise)


author: Preston Brown <pbrown@redhat.com> 4.3-1
changelog:
  - new upstream version.  Seems to have integrated most new syscalls
  - tracing threaded programs is now functional.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - doh, actually apply the 2.4 syscalls patch
  - make it compile with 2.4.0-test7-pre4+ headers, add
    getdents64 and fcntl64


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 3.99 in order to
  -    add new 2.2.x open flags (#2955).
  -    add new 2.2.x syscalls (#2866).
  - strace 3.1 patches carried along for now.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added the umoven patch from James Youngman <jay@gnu.org>
  - fixed build problems on newer glibc releases


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269360 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-1
changelog:
  - Rebase to nspr-4.10.8
  - Resolves: Bug 1200920 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Rebase to nspr-4.10.2
  - Resolves: rhbz#1032488 - CVE-2013-5607 (MFSA 2013-103) Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-1
changelog:
  - Update Version to 4.10.0 to prevent Mozilla apps update problems as
  - reported and fixed on https://bugzilla.redhat.com/show_bug.cgi?id=981166
  - Resolves: rhbz#1002643 - Rebase RHEL 6 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.9.5-3
changelog:
  - Bump the release tag so it's higher than the one for rhel-6.4.z
  - Resolves: rhbz#919180 - Rebase to nspr-4.9.5


author: Kai Engert <kengert@redhat.com> - 4.6.6-2
changelog:
  - Update thread-cleanup patch to latest upstream version
  - Add upstream patch to support PR_STATIC_ASSERT


author: Kai Engert <kengert@redhat.com> - 4.6.5-2
changelog:
  - Update to latest ipv6 upstream patch
  - Add upstream patch to fix a thread cleanup issue
  - Now requires pkgconfig


author: Kai Engert <kengert@redhat.com> 4.6.1-2
changelog:
  - Do not use -ansi when compiling, because of a compilation
    problem with latest glibc and anonymous unions.
    See also bugzilla.mozilla.org # 322427.


author: Christopher Aillon <caillon@redhat.com>
changelog:
  - Stop shipping static libraries; NSS and dependencies no longer
    require static libraries to build.


author: Christopher Aillon <caillon@redhat.com> 4.6-4
changelog:
  - Use the NSPR version numbering scheme reported by NSPR,
    which unfortunately is not exactly the same as the real
    version (4.6 != 4.6.0 according to RPM and pkgconfig).


author: Avi Miller <avi.miller@oracle.com> 60.0.14-1
changelog:
  - Bumped version to match upstream version [bug 14726423]
  - Added Provides: to upstream package name [bug 14726423]
  - Rename tarball to match version


author: Ray Strode <rstrode@redhat.com> 60.0.8-1
changelog:
  - Add large logo for compiz easter egg
    Resolves: #582411
  - Drop Bluecurve
    Related: #559765
  - Install logo icons in System theme
    Related: #566370


author: Ray Strode <rstrode@redhat.com> 60.0.7-1
changelog:
  - Rename firstboot theme to RHEL
    Resolves: #566173
  - Add new plymouth artwork
    Related: #558608
  - Update backgrounds
  - Update anaconda
  - Drop gnome-splash
  - Drop empty screensaver dir
    Resolves: #576912
  - Drop grub splash at request of artists


author: Ray Strode <rstrode@redhat.com> 60.0.4-1
changelog:
  Resolves: #565886
  - One more update to the KDE artwork
  - Revert firstboot theme rename until later since compat link
    is causing problems.


author: Ray Strode <rstrode@redhat.com> 60.0.3-1
changelog:
  Resolves: #565886
  - Put backgrounds here since they're "trade dress"
  - Rename firstboot theme from leonidas to RHEL (with compat link)


author: David Zeuthen <davidz@redhat.com> - 4.9.14-1
changelog:
  - Don't include LILO splash. Resolves: #216748
  - New syslinux-splash from Diana Fong. Resolves: #217493


author: David Zeuthen <davidz@redhat.com> - 4.9.13-1
changelog:
  - Make firstboot/splash-small.png completely transparent
  - Fix up date for last commit
  - Resolves: #216501


author: John (J5) Palmieri <johnp@redhat.com> - 1.2.7-1
changelog:
  - Add background xml file for the new backgrounds
  - Add po directory for translating the background xml


author: John (J5) Palmieri <johnp@redhat.com> - 1.2.3-1
changelog:
  - Add attributions to the background graphics metadata
  - Add a 4:3 asspect ratio version of the default background graphic


author: Havoc Pennington <hp@redhat.com>
changelog:
  - add firstboot images to makefile/specfile
  - add /usr/share/pixmaps stuff
  - add splash screen images
  - add COPYING


author: Phil Sutter - 2.6.32-54
changelog:
  - Resolves: #1086512 - "ip link show" commands display Message Truncated
  - Resolves: #1301148 - [RFE] Monitoring per connection TCP retransmission


author: Phil Sutter - 2.6.32-48
changelog:
  - Resolves: #1269814 - [6wind 6.8 Feat]: implement support for basic bridge IFA_INFO_DATA
  - Resolves: #1276591 - iproute: 'ip addr flush' failed to send flush request: Cannot assign requested address


author: Phil Sutter - 2.6.32-47
changelog:
  - Resolves: #1277102 - ip neighbour segfaults if bad mac address is used
  - Resolves: #1243413 - ip rule help output contains action reject, but this action does not work
  - Resolves: #1268058 - backport additional tcp_info dump support in ss tool
  - Resolves: #1045032 - iproute2: "ip -o link" doesn't show devices entries in a single line when reporting SR-IOV devs.
  - Resolves: #1093726 - manpage for tc needs info on filters
  - Resolves: #1265240 - ss returns zero (ok) when invalid option is added


author: Phil Sutter - 2.6.32-46
changelog:
  - Resolves: #974693 - lnstat manpage insufficient
  - Resolves: #1042799 - Inconsistent detailed link information between "ip link" and "ip monitor link"
  - Resolves: #684691 - can't change the remote/local address of tunnel interface to "any" in ipip mode
  - Resolves: #1094676 - iproute2 route table querying broken for table numbers >= 2147483648
  - Resolves: #1261115 - tc does not allow to attach pfifo_fast qdisc
  - Resolves: #1229355 - ss -an shows only tcp sockets
  - Resolves: #1199867 - iproute could not show correct hoplimit info with value -1


author: Petr Šabata <contyk@redhat.com> - 2.6.32-32
changelog:
  - Fix a floating point exception regression introduced with the
    incorrect fix of #859145 (#1045200)


author: Petr Šabata <contyk@redhat.com> - 2.6.32-31
changelog:
  - Removed the unsporrted features from the bridge(8) manpage and
    document bridge fdb replace (#929313)


author: Petr Pisar <ppisar@redhat.com> - 2.6.32-29
changelog:
  - Document tc -OK option (#851371)
  - Document "bridge mdb" and "bridge monitor mdb" (#885977)
  - Document bridge unsupported features (#929313)


author: Petr Šabata <contyk@redhat.com> - 2.6.32-24
changelog:
  - Don't hang on rtnl_send() in a confined domain (#985526)
  - Run lnstat indefinitely if -c was not specified (#977845)
  - lnstat manpage SEE ALSO path fixes (#974694)
  - Document tc's force and batch options (#950122)
  - Fix include/linux/if_link.h to get in line with upstream again (#903228)
  - Add support for the IPv6 tokenized interface (#950400)
  - Handle ip-route rto_min parameters correctly (#859145)
  - Add VXLAN support (#929313, #908155)
  - Add mdb subcommand to bridge (#885977)
  - tc now supports the -OK option (#851371)


author: Petr Šabata <contyk@redhat.com> - 2.6.32-20
changelog:
  - Add support for multicast rules, IPv4 only due to kernel limitations;
    see #631984, comment 14 for details (#812779)


author: Petr Šabata <contyk@redhat.com> - 2.6.32-19
changelog:
  - Adding mqprio qdisc support (#748767)
  - Adding QFQ discipline support (#788120)
  - A required update of include/linux/pkt_sched.h


author: Petr Šabata <contyk@redhat.com> - 2.6.32-18
changelog:
  - Fix changing of ip6ip6 tunnel hoplimit
  - Resolves: rhbz#730627
  - lnstat -d should dump to stdout
  - Resolves: rhbz#736106


author: Petr Sabata <contyk@redhat.com> - 2.6.32-17
changelog:
  - Fix GRED options clearing
  - Resolves: rhbz#709652
  - Add macvlan/macvtap passtru support
  - Resolves: rhbz#692867
  - Resolves: rhbz#693878


author: Petr Sabata <psabata@redhat.com> - 2.6.32-16
changelog:
  - Link and install m_xt.so properly
  - Related: rhbz#670295
  - Related: rhbz#636943 
  - Related: rhbz#641918 
  - Related: rhbz#678986
  - Related: rhbz#678986


author: Petr Sabata <psabata@redhat.com> - 2.6.32-14
changelog:
  - Fix'd to properly build against xtables interface
  - Related: rhbz#670295
  - Related: rhbz#636943 
  - Related: rhbz#641918 
  - Related: rhbz#678986


author: Petr Sabata <psabata@redhat.com> - 2.6.32-13
changelog:
  - Do not segfault when creating veth with peer option without any name provided
  - link_veth_segv.patch
  - Resolves: rhbz#636943


author: Petr Sabata <psabata@redhat.com> - 2.6.32-8
changelog:
  - Add support for setting and showing SR-IOV virtual function link params
  - Patch from Petr Lautrbach
  - Resolves: rhbz#606680


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.32-6
changelog:
  - apply patch from Petr Lautrbach to fix rpmdiff issues -> merge all 
    Makefile patches into one iproute-Makefile-RHEL-setting.patch
  - fix man page by plautrba
  - fix typo in lnstat by plautrba
  - add missing options for ss by plautrba
  - fix usage and man of arpd by plautrba
  - Resolves: rhbz#596172, rhbz#592201, rhbz#592230, rhbz#592226, rhbz#592266


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.32-2
changelog:
  - add macvlan aka VESA support d63a9b2b1e4e3eab0d0577d0a0f412d50be1e0a7
  - kernel headers 2.6.33 ab322673298bd0b8927cdd9d11f3d36af5941b93
    are needed for macvlan features and probably for other added later.
  - fix number of release which contains 2.6.32 kernel headers and features
    but it was released as 2.6.31
  - Resolves: rhbz#553344


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-3
changelog:
  - new iptables (xtables) bring problems to tc, when ipt is used. 
    rhbz#497344 still broken. tc_modules.patch brings correct paths to
    xtables, but that doesn't fix whole issue.
  - 497355 ip should allow creation of an IPsec SA with 'proto any' 
    and specified sport and dport as selectors


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-2
changelog:
  - c3651bf4763d7247e3edd4e20526a85de459041b ip6tunnel: Fix no default 
   display of ip4ip6 tunnels
  - e48f73d6a5e90d2f883e15ccedf4f53d26bb6e74 missing arpd directory


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-1
changelog:
  - update to 2.6.29
  - remove DDR patch which became part of sourc
  - add patch with correct headers 1957a322c9932e1a1d2ca1fd37ce4b335ceb7113


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.28-2
changelog:
  - 483484 install distribution files into /usr/share and also fixed
   install paths in spec
  - add the latest change from git which add DRR support
   c86f34942a0ce9f8203c0c38f9fe9604f96be706


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.27-2
changelog:
  - 475130 - Negative preferred lifetimes of IPv6 prefixes/addresses
    displayed incorrectly
  - 472878 - “ip maddr show” in IB interface causes a stack corruption
  - both patches will be probably in iproute v2.6.28


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.27-1
changelog:
  - aead support was included into upstream version
  - patch for moving libs is now deprecated
  - update to 2.6.27


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.23-3
changelog:
  - rebuild without tetex files. It isn't working in rawhide yet. Added
  	new source for ps files. 
  - #431179 backward compatibility for previous iproute versions


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.23-2
changelog:
  - rebuild with fix tetex and linuxdoc-tools -> manual pdf
  - clean unnecessary patches
  - add into spec *.so objects, new BR linux-atm-libs-devel


author: Radek Vokal <rvokal@redhat.com> - 2.6.18-1
changelog:
  - upgrade to upstream 2.6.18
  - initcwnd patch merged
  - bug fix for xfrm monitor
  - alignment fixes for cris
  - documentation corrections


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-14
changelog:
  - Fixed -f option for ss (#118355).
  - Small description fix (#110997).
  - Added initialization of some vars (#74961). 
  - Added patch to initialize "default" rule as well (#60693).


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Updated to latest version. Used by other distros, so seems stable. ;-)
  - Quite a few patches needed updating in that turn.
  - Added ss (#107363) and several other new nifty tools.


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-3
changelog:
  - Fixed missing diffserv and atm support in config (#57278).
  - Fixed inconsistent numeric base problem for command line (#65473).


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to iproute2-2.2.4-now-ss001007.tar.gz 
  - bzip2 source tar file
  - "License" replaces "Copyright"
  - added "BuildPrereq: tetex-latex tetex-dvips psutils"
  - rebuilt for 7.2


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-105.0.40.el6
changelog:
  - BUILDINFO: xen commit=512b3c7aa50283f7d07e5e76deeee3ac807e3465
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Revert "xen/x86: Make sure identify_cpu() is called with traps enabled" (Boris Ostrovsky)  [Orabug: 27751412] 
  - Revert "x86/traps/spectre: Fix IO emulation stub code" (Boris Ostrovsky)  [Orabug: 27751412] 
  - Revert "x86/spectre: Make retpoline code match upstream version" (Boris Ostrovsky)  [Orabug: 27751412]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-105.0.39.el6
changelog:
  - BUILDINFO: xen commit=b17b052a21808773d5cd9d0bae884dcc50bd9390
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Fix a wrong check in DO_SPEC_CTRL_EXIT_TO_XEN (Zhenzhong Duan)  [Orabug: 27738732]  {CVE-2017-5715}


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-105.0.38.el6
changelog:
  - BUILDINFO: xen commit=dfa6e8b715a473ba60fc7da1022d16fe7255f846
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spectre: Make retpoline code match upstream version (Patrick Colp)  [Orabug: 27694491] 
  - x86/traps/spectre: Fix IO emulation stub code (Boris Ostrovsky)  [Orabug: 27693422]  {CVE-2017-5715}


author: Joao Martins <joao.m.martins@oracle.com> - 4.4.4-105.0.37.el6
changelog:
  - BUILDINFO: xen commit=2ace6a819e1454ea43a8bea4c8f4aea2db4caa95
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xen/x86: Make sure identify_cpu() is called with traps enabled (Joao Martins)  [Orabug: 27629051]


author: Livy Ge <livy.ge@oracle.com> 3.4-7.630
changelog:
  - Missing "max:" in CNs /etc/grub2.cfg for dom0_mem value after CN upgrade [bug 26190687] (jingjie.jiang)


author: Luong Nguyen-Duy <luong.nguyenduy@oracle.com> - 3.4-7.540
changelog:
  - The Sparc OVS-Agent should run with python 2.7  
    Signed-off-by: Luong Nguyen-Duy <luong.nguyenduy@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: William Roche <william.roche@oracle.com>
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com> [bug 23507403]


author: Natalya Naumova <natalya.naumova@oracle.com> 3.4-7.394
changelog:
  - remove vconsole.* from /etc/default/grub GRUB_CMDLINE_LINUX (carson.hovey@oracle.com) [bug 22589674]


author: Natalya Naumova <natalya.naumova@oracle.com> 3.4-7.389
changelog:
  - upgrade 3.2.10 ovm server using the 3.4.1 cdrom image reboot (carson.hovey@oracle.com) [bug 22589674]


author: Livy Ge <livy.ge@oracle.com> 3.4-7.376
changelog:
  - Fix chkconfig for kdump is removed after server upgraded from ovm 3.2 (Zhigang Wang) [bug 22541136]


author: Livy Ge <livy.ge@oracle.com> 3.4-7.374
changelog:
  - add oswatcher as runtime requirement [orabug 22533807]
  - remove osc-oracle-s7k requirement [orabug 22526846]


author: William Roche <william.roche@oracle.com> - 3.4-7.179
changelog:
  - 20795921 - OVM AGENT: REQUIRED OS/LDOMS REVISION FOR ORACLE VM MANAGER 3.4
    Signed-off-by: William Roche <william.roche@oracle.com> [bug 20795921]


author: Jingdong Lu <jingdong.lu@oracle.com> 3.4-7.114
changelog:
  - Update spec file [20122857] (Zhigang Wang)
    add Requires: orclovn-user
    change Obsoletes: osc-plugin-manager-devel < 1.2.9-36


author: William Roche <william.roche@oracle.com> - 3.4-1
changelog:
  - Signed-off-by: William Roche <william.roche@oracle.com> [bug 18904620] [bug -] [bug INSTALLATION] [bug OF] [bug ORACLE] [bug VM] [bug AGENT] [bug FOR] [bug SPARC] [bug FAILS] [bug ON] [bug S11.2]


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 3.3-1
changelog:
  - enforce Solaris 11.1.* and LDoms Manager 3.1.*
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 3.3-1
changelog:
  - SPARC - build fails if default pkg publisher is not ovm
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>


author: Alexandre Chartre <alexandre.chartre@oracle.com> - 3.3-1
changelog:
  - Bug 18264418 - UPGRADESERVER.PY SCRIPT DOES NOT CHECK MISSING DLM MODULE FOR SPARC SERVER
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>


author: Adnan Misherfi <adnan.misherfi@oracle.com> 3.3-6.290
changelog:
  - remove 'Obsoletes: openvswitch' and add 'Requires: openvswitch'
    for upgrade from 3.1.1 to 3.3.1 [bug 18154640]


author: Zhigang Wang <zhigang.x.wang@oracle.com> 3.3-6.282
changelog:
  - Remove the obsoletes
    kernel-uek < 3.8.13-16.2.2
    kernel-uek-firmware < 3.8.13-16.2.2 [bug 18161458]


author: Jingdong Lu <jingdong.lu@oracle.com> 3.3-6.237
changelog:
  - add packages to server iso [bug 17945724]
  - use python from OL instead of ovm fork [bug 17950918] 
  - use coreutils from OL instead of ovm fork [bug 17951276]
  - remove python-numeric from server iso [bug 17951332]
  - use grub from OL instead of ovm fork [bug 17951880]
  - remove udhcp from server iso [bug 17959422]


author: Tianyue Lan <tianyue.lan@oracle.com> 3.3-6.205
changelog:
  - provide ql2xxx-firmware [bug 17761192]
  - Obsolete kmod-openvswitch openvswitch due to openvswitch not ready for uek3


author: Zhigang Wang <zhigang.x.wang@oracle.com> 3.3-6.182
changelog:
  - obsolete osc-plugin-manager-devel < 1.2.9 [bug 17616512]
             anacron
             libvolume_id
             cryptsetup-luks < 1.2.0
             system-config-securitylevel-tui,
             pypxeboot, and
             rdac-mpp-tools


author: Tianyue Lan <tianyue.lan@oracle.com> 3.3-6.178
changelog:
  - Obsolete ovs-python-uuid, audit-libs-python < 2.2, libselinux-python < 2.0.94
    xen-devel < 4.3.0, ql2xxx-firmware [bug 17609297]


author: Kevin Lyons <kevin.x.lyons@oracle.com> 3.3-6.136
changelog:
  - Update for OVM rebase to OL6:
    Change el5_ovs_release to be el_ovs_release
    Change source. tarball to ovs-release-3.tgz
    Bump version of enterprise-linux-release to 6


author: Adnan Misherfi <adnan.misherfi@oracle.com> 3.2-5.201
changelog:
  - Load bnx2x driver with TPA disabled "options bnx2x disable_tpa=1" 
    to avoid driver problems when the port is used as an interface 
    to the bridge. [bug 15971208]


author: Alexandre Chartre <alexandre.chartre@oracle.com> 3.2-5.167
changelog:
  - Bug 14846665 - ovs sparc packages should not use the ldoms publisher
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>


author: Zhigang Wang <zhigang.x.wang@oracle.com> 3.2-5.148
changelog:
  - Obsolete qlayer monitor packages [bug 14767772]
    python-zope-interface
    python-twisted-core
    monitor
    libyaml
    PyYAML


author: Zhigang Wang <zhigang.x.wang@oracle.com> 3.2-5.147
changelog:
  - Obsolete packages [bug 14767790]
    cyrus-sasl
    cyrus-sasl-md5
    dbus-python
    dnsmasq
    e4fsprogs-devel
    e4fsprogs-libs
    gnutls
    libdaemon


author: Alexandre Chartre <alexandre.chartre@oracle.com> 3.2-5.125
changelog:
  - Solaris build and package support
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>
    Signed-off-by: Srinivas Maturi <srinivas.maturi@oracle.com>


author: Kevin Lyons <kevin.x.lyons@oracle.com> 3.1-1.72
changelog:
  - Add Obsoletes: kernel-ovs, Provides: kernel, and Requires: kernel-uek
    to allow yum and anaconda upgrades to work correctly without modifying
    kernel-uek package. [bug 13810743]


author: Kevin Lyons <kevin.x.lyons@oracle.com> 2.1-0.9
changelog:
  - Split out ovs_release and el5_ovs_release
  - Updated xen version to 3.1.3-0.0.4
  - Removed xen changeset


author: Kevin Lyons <kevin.x.lyons@oracle.com> 2.1-0.8
changelog:
  - Reverted back to version 2.1 to aviod problems with ULN
  - Updated xen version to 3.1.3-0.0.3
  - Updated xen changeset to 15642


author: Keshav Sharma <keshav.sharma@oracle.com> 2.0-0.5
changelog:
  - split into 2 binary rpms ovs-release and enterprise-linux-ovs
  - updated xen info
  - obsolete enterprise release
  - Updated Product name & version


author: Dongli Zhang <dongli.zhang@oracle.com> - 4.4.4-222.0.23.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=077233184260bd831e7c4afdd4aebb0bced6ee32
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=6e676a4ba6bbd437a2a8dbfc3c6e591d920b013b
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/vtd: Hide superpage support for SandyBridge IOMMUs (Andrew Cooper)  [Orabug: 31366846]  {CVE-2018-12207} {CVE-2018-12207}


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-222.0.22.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=4cfb88a0f248605ca655e0609f0650c4563be653
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=6e676a4ba6bbd437a2a8dbfc3c6e591d920b013b
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spec-ctrl: Allow the RDRAND/RDSEED features to be hidden (Andrew Cooper)  [Orabug: 31470704]  {CVE-2020-0543} {CVE-2020-0543}
  - cirrus: handle negative pitch in cirrus_invalidate_region() (Wolfgang Bumiller)  [Orabug: 31476272]  {CVE-2017-18030}
  - cirrus: fix oob access in mode4and5 write functions (Gerd Hoffmann)  [Orabug: 31476272]  {CVE-2017-15289}


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-222.0.21.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=3206f3109cfd432d6e5bbffbcc9839f5b8ed1e44
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spec-ctrl: Mitigate the Special Register Buffer Data Sampling sidechannel (Andrew Cooper)  [Orabug: 31470704]  {CVE-2020-0543} {CVE-2020-0543}
  - x86/spec-ctrl: CPUID/MSR definitions for Special Register Buffer Data Sampling (Andrew Cooper)  [Orabug: 31470704]  {CVE-2020-0543} {CVE-2020-0543}


author: Dongli Zhang <dongli.zhang@oracle.com> - 4.4.4-222.0.20.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=0bef1944b340a7ec3e93a20b472effa654f5ee16
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/crash: force unlock console before printing on kexec crash (Igor Druzhinin)  [Orabug: 31255931]


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-222.0.19.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=69a58ac753bd61961615f9208f8e1ee5ce946538
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - redtape: x86/tsx: TAA regressions (Patrick Colp)  [Orabug: 31240359]


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-222.0.18.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=8e468e57b8bc1a7f84b4a7a6abf9e420b97313fa
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/tsx: Mask out ARCH_CAPS_TSX_CTRL (Patrick Colp)  
  - x86/tsx: When the CPU has MSR_TSX_CTRL, ebx is accidentally being cleared (Patrick Colp)  
  - redtape: IOMMU: default to always quarantining PCI devices (Boris Ostrovsky)  [Orabug: 31158489]  {CVE-2019-19579}


author: Dongli Zhang <dongli.zhang@oracle.com> - 4.4.4-222.0.17.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=5028aff93cd3cac6b4db05148765930e8621e6e0
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - mm: convert 'scrub_config' to boot param in xen cmdline (Dongli Zhang)  [Orabug: 31145617] 
  - mm: fix the condition check in scrub_config_set() (Dongli Zhang)  [Orabug: 31145617]


author: Joe Jin <joe.jin@oracle.com> - 4.4.4-222.0.16.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=fc74d3002815b9e19781ae8351264d1bda9561bb
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/vmx: always sync PIR to IRR before vmentry (Roger Pau Monné)  [Orabug: 31003920] 
  - Revert "msix: set vlapic IRR flag when msix vector been updated" (Joe Jin)  [Orabug: 31003920]


author: Dongli Zhang <dongli.zhang@oracle.com> - 4.4.4-222.0.15.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=31259324879f918053c796b012a82f44050551fc
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - mm: introduce userspace utility to use XEN_SYSCTL_scrub_op (Dongli Zhang)  [Orabug: 30964933] 
  - mm: introduce 'scrub_config' to control idle memory scrubbing (Dongli Zhang)  [Orabug: 30964933] 
  - mm: to track domains in progress of domain_relinquish_resources() (Dongli Zhang)  [Orabug: 30964933]


author: Joe Jin <joe.jin@oracle.com> - 4.4.4-222.0.14.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=5bfb515a1e27a8f6db11f65fe5fcd87daec80722
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - y86/vmx: dump PIR and vIRR before ASSERT() (Chao Gao)  [Orabug: 30784806] 
  - x86/apicv: fix RTC periodic timer and apicv issue (Quan Xu)  [Orabug: 30784806]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-222.0.13.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=943b94ec6cf6c235e86a0d6d08c112d78290892a
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - vNUMA: misc fixs (Elena Ufimtseva)  [Orabug: 30820841] 
  - vNUMA: make best effort to dont use dom0 cpus (Elena Ufimtseva)  [Orabug: 30820841] 
  - xend: add use_dom0_cpus to control pinning to dom0 pcpus. (Elena Ufimtseva)  [Orabug: 30820841] 
  - dom0: select smt threads for dom0 numa pinning (Elena Ufimtseva)  [Orabug: 30820841]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-222.0.12.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=2666868c3dadd779363f9cabd58b21e53c1a0830
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xen: adopt AER handling code to quarantined devices (Elena Ufimtseva)  [Orabug: 30439902] 
  - IOMMU: default to always quarantining PCI devices (Jan Beulich)  [Orabug: 30439902] 
  - passthrough: quarantine PCI devices (Paul Durrant)  [Orabug: 30439902]  {CVE-2019-18424}
  - IOMMU: add missing HVM check (Jan Beulich)  [Orabug: 30439902] 
  - x86/mm: Clean up trailing whitespace (George Dunlap)  [Orabug: 30439902]


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-222.0.11.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=7d81202d304e1408461e29b801446216bbd0cf7c
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spec-ctrl: Mitigate the TSX Asynchronous Abort sidechannel (Andrew Cooper)  [Orabug: 30604160]  {CVE-2019-11135} {CVE-2019-11135}
  - x86/tsx: Introduce tsx= to use MSR_TSX_CTRL when available (Andrew Cooper)  [Orabug: 30604160]  {CVE-2019-11135} {CVE-2019-11135}


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-222.0.10.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=a2c9a6fd65171133a896defd3c2be93f9ec3a1fe
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - AMD/IOMMU: Cease using a dynamic height for the IOMMU pagetables (Andrew Cooper)  [Orabug: 30604059]  {CVE-2019-19577}
  - AMD/IOMMU: don't needlessly trigger errors/crashes when unmapping a page (Jan Beulich)  [Orabug: 30604059] 
  - x86/vtx: Work around SingleStep + STI/MovSS VMEntry failures (Andrew Cooper)  [Orabug: 30604094]  {CVE-2019-19583}
  - x86/hvm/emulate: block speculative out-of-bound accesses (Norbert Manthey)  [Orabug: 29185971]  {CVE-2017-5753} {CVE-2018-3620} {CVE-2018-3646}
  - grant_table: harden version dependent accesses (Norbert Manthey)  [Orabug: 29185971]  {CVE-2017-5753} {CVE-2018-3620} {CVE-2018-3646}
  - grant_table: harden bound accesses (Norbert Manthey)  [Orabug: 29185971]  {CVE-2017-5753} {CVE-2018-3620} {CVE-2018-3646}
  - common/grant_table: harden helpers (Norbert Manthey)  [Orabug: 29185971]  {CVE-2017-5753} {CVE-2018-3620} {CVE-2018-3646}
  - common/domain: block speculative out-of-bound accesses (Norbert Manthey)   {CVE-2017-5753} {CVE-2018-3620} {CVE-2018-3646}
  - x86/hvm: add nospec to hvmop param (Norbert Manthey)   {CVE-2017-5753} {CVE-2018-3620} {CVE-2018-3646}
  - common/memory: block speculative out-of-bound accesses (Norbert Manthey)   {CVE-2017-5753} {CVE-2018-3620} {CVE-2018-3646}
  - is_hvm/pv_domain: block speculation (Norbert Manthey)   {CVE-2017-5753} {CVE-2018-3620} {CVE-2018-3646}
  - is_control_domain: block speculation (Norbert Manthey)  [Orabug: 29185971]  {CVE-2017-5753} {CVE-2018-3620} {CVE-2018-3646}
  - nospec: introduce evaluate_nospec (Norbert Manthey)   {CVE-2017-5753} {CVE-2018-3620} {CVE-2018-3646}
  - spec: add l1tf-barrier (Norbert Manthey)   {CVE-2017-5753} {CVE-2018-3620} {CVE-2018-3646}
  - x86/vioapic: block speculative out-of-bound accesses (Norbert Manthey)   {CVE-2017-5753} {CVE-2018-3620} {CVE-2018-3646}
  - evtchn: block speculative out-of-bound accesses (Norbert Manthey)   {CVE-2017-5753} {CVE-2018-3620} {CVE-2018-3646}
  - x86/hvm: block speculative out-of-bound accesses (Norbert Manthey)   {CVE-2017-5753} {CVE-2018-3620} {CVE-2018-3646}
  - x86/hvm/hpet: block speculative out-of-bound accesses (Norbert Manthey)   {CVE-2017-5753} {CVE-2018-3620} {CVE-2018-3646}
  - xen/sched: Introduce domain_vcpu() helper (Andrew Cooper)  
  - x86/mtrr: introduce mask to get VCNT from MTRRcap MSR (Roger Pau Monné)


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-222.0.9.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=81966751f0f0c4c7fa38ad9bc8f6fda3ddba9943
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/vtx ept-shatter ... (Andrew Cooper)  [Orabug: 30522230]  {CVE-2018-12207}
  - x86: rename public functions in p2m-pt.c (Mukesh Rathor)  [Orabug: 30522230] 
  - Rename "set_p2m_entry" to "p2m_set_entry" (Mukesh Rathor)  [Orabug: 30522230] 
  - x86/mm: add information about faulted page's presence to npfec structure (Boris Ostrovsky)  [Orabug: 30522230] 
  - relocate struct npfec definition into common (Tamas K Lengyel)  [Orabug: 30522230] 
  - EPT: utilize GLA->GPA translation known for certain faults (Jan Beulich)  [Orabug: 30522230] 
  - x86/mem_event: deliver gla fault EPT violation information (Tamas K Lengyel)  [Orabug: 30522230] 
  - x86: consolidate boolean inputs in hvm and p2m into a shared bitmap (Tamas K Lengyel)  [Orabug: 30522230]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-222.0.8.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=8bc781c6ccc1afe6dc9466679d0be54e7d1ad051
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - vNUMA: disable vNUMA and restart when construction fails (Elena Ufimtseva)  [Orabug: 30373016] 
  - xen-tools: return correct error code (Elena Ufimtseva)  [Orabug: 30373016]


author: Tom Lane <tgl@redhat.com> 1.2.1-1
changelog:
  - Imported into RHEL-6 from Fedora 18
  - Dropped separate utils subpackage, because existing packages might expect
    that Requires: libjpeg is enough to pull in the command-line tools;
    we should only alter the subpackage breakdown in a new RHEL branch
  - Dropped turbojpeg build, because it doesn't seem ready for prime time
    and isn't part of our RHEL-6 requirements anyway
  Resolves: #788687


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.6.6-8
changelog:
  - Backported support for TLS 1.1, TLS 1.2
    Resolves: rhbz#1287192
  - Preserve timestamps for configuration files
    Resolves: rhbz#1307066


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.6.6-7
changelog:
  - Backported patch to use long integers for message_size_limit,
    mailbox_size_limit and virtual_mailbox_limit
    Resolves: rhbz#907387


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.6-1
changelog:
  - update to 2.6.6 (#588781)
  - move sasl config to /etc/sasl2 (#574439)
  - drop sasl v1 support
  - require Date::Calc for pflogsumm (#588726)


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.1-1
changelog:
  - update to 2.6.1
  - move non-config files out of /etc/postfix (#490983)
  - fix multilib conflict in postfix-files (#502211)
  - run chroot-update script in init script (#483186)
  - package examples (#251677)
  - provide all alternatives files
  - suppress postfix output in post script


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.5.6-1
changelog:
  - update to 2.5.6 (#479108)
  - rebuild /etc/aliases.db only when necessary (#327651)
  - convert doc files to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.5.5-2
changelog:
  - enable Large file support on 32-bit archs (#428996)
  - fix mailq(1) and newaliases(1) man pages (#429501)
  - move pflogsumm and qshape to -perl-scripts subpackage (#467529)
  - update pflogsumm to 1.1.1
  - fix large-fs patch
  - drop open_define patch
  - add -Wno-comment to CFLAGS


author: Thomas Woerner <twoerner@redhat.com> 2:2.5.1-3
changelog:
  - fixed postfix privilege problem with symlinks in the mail spool directory
    (CVE-2008-2936) (rhbz#459101)


author: Thomas Woerner <twoerner@redhat.com> 2:2.5.1-2
changelog:
  - fixed fix for enabling IPv6 support (rhbz#437024)
  - added new postfix data directory (rhbz#437042)


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.6-1
changelog:
  - new verison 2.4.6
  - added virtual server(smtp) provide (rhbz#380631)
  - enabling IPv6 support (rhbz#197105)
  - made the MYSQL and PGSQL defines overloadable as build argument


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.5-3
changelog:
  - fixed multilib conflict for makedefs.out: rename to makedefs.out-x86_64
    (rhbz#342941)
  - enabled mysql support


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.5-2
changelog:
  - made init script lsb conform (#243286, rhbz#247025)
  - added link to postfix sasl readme into Postfix-SASL-RedHat readme


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.3-2
changelog:
  - diabled mysql support again (rhbz#185515)
  - added support flag for PostgreSQL build (rhbz#180579)
    Ben: Thanks for the patch
  - Fixed remaining rewiew problems (rhbz#226307)


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.3-1
changelog:
  - new stable version 2.4.3
  - enabled mysql support (rhbz#185515)
  - dropped build requirements for gawk, ed and sed


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.6-1
changelog:
  - new version 2.3.6
  - limiting SASL mechanisms to plain login for sasl with saslauthd (#175259)
  - dropped usage of ed in the install stage


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.2-1
changelog:
  - new version 2.3.2 with major upstream fixes:
    - corrupted queue file after a request to modify a short message header
    - panic after spurious Milter request when a client was rejected
    - maked the Milter more tolerant for redundant "data cleanup" requests
  - applying pflogsumm-conn-delays-dsn-patch from postfix tree to pflogsumm


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.10-1
changelog:
  - new version 2.2.10
  - added option LDAP_DEPRECATED to support deprecated ldap functions for now
  - fixed build without pflogsumm support (#188470)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.5-2.1
changelog:
  - replaced postconf and postalias call in initscript with newaliases (#156358)
  - fixed initscripts messages (#155774)
  - fixed build problems when sasl is disabled (#164773)
  - fixed pre-definition of mailbox_transport lmtp socket path (#122910)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.0-1
changelog:
  - new version 2.2.0
  - cleanup of spec file: removed external TLS and IPV6 patches, removed 
    smtp_sasl_proto patch
  - dropped samples directory till there are good examples again (was TLS and
    IPV6)
  - v2.2.0 fixes code problems: #132798 and #137858


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-5.1
changelog:
  - fixed open relay bug in postfix ipv6 patch: new version 1.26 (#146731)
  - fixed permissions on doc directory (#147280)
  - integrated fixed fqdn patch from Joseph Dunn (#139983)


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2.2
changelog:
  - automated postalias call in init script
  - removed postconf call from spec file: moved changes into patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2
changelog:
  - switched over to system aliases file and database in /etc/ (#117661)
  - new reuires and buildrequires for setup >= 2.5.36-1


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.4-1
changelog:
  - new version 2.1.4
  - new ipv6 and tls+ipv6 patches: 1.25-pf-2.1.4
  - new pfixtls-0.8.18-2.1.3-0.9.7d patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.1-3.1
changelog:
  - fixed directory permissions in %doc (#125406)
  - fixed missing spool dirs (#125460)
  - fixed verify problem for aliases.db (#125461)
  - fixed bogus upgrade warning (#125628)
  - more spec file cleanup


author: John Dennis <jdennis@redhat.com> 2:2.0.18-4
changelog:
  - remove version from pflogsumm subpackage, it was resetting the
    version used in the doc directory, fixes bug 119213


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.18-1
changelog:
  - bring source up to upstream release 2.0.18
  - include pflogsumm, fixes bug #68799
  - include smtp-sink, smtp-source man pages, fixes bug #118163


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - set sasl back to v2 for mainline, this is good for fedora and beyond,
    for RHEL3, we'll branch and set set sasl to v1 and turn off ipv6


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - revert back to v1 of sasl because LDAP still links against v1 and we can't 
  - bump revision for build
    have two different versions of the sasl library loaded in one load image at
    the same time. How is that possible? Because the sasl libraries have different 
    names (libsasl.so & libsasl2.so) but export the same symbols :-(
    Fixes bugs 115249 and 111767


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-4
changelog:
  - remove mysqlclient prereq, fixes bug 101779
  - remove md5 verification override, this fixes bug 113370. Write parse-postfix-files
    script to generate explicit list of all upstream files with ownership, modes, etc.
    carefully add back in all other not upstream files, files list is hopefully
    rock solid now.


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-3
changelog:
  - add zlib-devel build prereq, fixes bug 112822
  - remove copy of resolve.conf into chroot jail, fixes bug 111923


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to new 2.0.11 upstream release
  - fix authentication problems
  - rewrite SASL documentation
  - upgrade to use SASL version 2
  - Fix bugs 75439, 81913 90412, 91225, 78020, 90891, 88131


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to release 2.0.6
  - remove chroot as this is now the preferred installation according to Wietse Venema, the postfix author


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix shell in /etc/passwd (#68373)
  - fix documentation in /etc/postfix (#65858)
  - Provides: /usr/bin/newaliases (#66746)
  - fix autorequires by changing /usr/local/bin/perl to /usr/bin/perl in a
    script in %doc (#68852), although I don't think this is necessary anymore


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed missing smtpd.conf file for SASL support and included SASL Postfix
    Red Hat HOWTO (#62505).
  - Included SASL2 support patch (#68800).


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.4-1
changelog:
  - 1.1.4
  - TLS 0.8.4
  - Move postalias run from %post to init script to work around
    anaconda being broken.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.3-3
changelog:
  - adjust the default postfix-files config file to match the alternatives setup
    by altering the arguments passed to post-install in the %install phase
    (otherwise, it might point to sendmail's binaries, breaking it rather rudely)
  - adjust the post-install script so that it silently uses paths which have been
    modified for use with alternatives, for upgrade cases where the postfix-files
    configuration file isn't overwritten
  - don't forcefully strip files -- that's a build root policy
  - remove hard requirement on openldap, library dependencies take care of it
  - redirect %postun to /dev/null
  - don't remove the postfix user and group when the package is removed


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-2
changelog:
  - listen on 127.0.0.1 only by default (#60071)
  - Put config samples in %{_docdir}/%{name}-%{version} rather than
    /etc/postfix (#60072)
  - Some spec file cleanups


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-1
changelog:
  - 1.1.3, TLS 0.8.3
  - Fix updating
  - Don't run the statistics cron job
  - remove requirement on perl Date::Calc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.2-1
changelog:
  - Initial Red Hat Linux packaging, based on spec file from
    Simon J Mudd <sjmudd@pobox.com>
  - Changes from that:
    - Set up chroot environment in triggers to make sure we catch glibc errata
    - Remove some hacks to support building on all sorts of distributions at
      the cost of specfile readability
    - Remove postdrop group on deletion


author: Daniel Veillard <veillard@redhat.com> 1.1.26-2.el6_3.1
changelog:
  - fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870
  - Fix direct pattern matching bug
  - Fix popping of vars in xsltCompilerNodePop
  - Fix bug 602515
  - Fix generate-id() to not expose object addresses (CVE-2011-1202)
  - Fix some case of pattern parsing errors (CVE-2011-3970)
  - Fix a bug in selecting XSLT elements (CVE-2012-2825)
  - Fix portability to upcoming libxml2-2.9.0
  - Fix default template processing on namespace nodes (CVE-2012-2871)
  - Cleanup of the pattern compilation code (CVE-2012-2870)
  - Hardening of code checking node types in various entry point (CVE-2012-2870)
  - Hardening of code checking node types in EXSLT (CVE-2012-2870)
  - Fix system-property with unknown namespace
  - Xsltproc should return an error code if xinclude fails
  - Fix a dictionary string usage
  - Avoid a heap use after free error


author: Daniel Veillard <veillard@redhat.com> 1.1.25-1
changelog:
  - release of 1.1.25
  - Add API versioning  for libxslt shared library
  - xsl:sort lang support using the locale
  - many bug fixes


author: Daniel Veillard <veillard@redhat.com> 1.1.24-1.fc10
changelog:
  - release of 1.1.24
  - fixes a few bugs including the key initialization problem
  - tentative fix for multiarch devel problems


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.1.el6uek]
changelog:
  - NFSv4: Don't try to reclaim unused state owners (Trond Myklebust)  [Orabug: 30124013]  
  - x86/microcode: Update late microcode in parallel (Ashok Raj)  [Orabug: 30302412]  
  - floppy: fix out-of-bounds read in copy_buffer (Denis Efremov)  [Orabug: 30318219]  {CVE-2019-14283} 
  - xen-netback: stop netif TX queue on guest queuing failure (Ankur Arora)  [Orabug: 30351050]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.5.el6uek]
changelog:
  - xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink (YueHaibing)  [Orabug: 30322230]  {CVE-2019-15666} 
  - x86/tsc: Make calibration refinement more robust (Daniel Vacek)  [Orabug: 30217489]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.31.4.el6uek]
changelog:
  - KVM: coalesced_mmio: add bounds checking (Matt Delco)  [Orabug: 30318042]  {CVE-2019-14821} {CVE-2019-14821} 
  - Revert "KVM: coalesced_mmio: add bounds checking" (Jack Vogel)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.3.el6uek]
changelog:
  - KVM: coalesced_mmio: add bounds checking (Matt Delco)  [Orabug: 30318042]  {CVE-2019-14821} 
  - qla2xxx: Fix List corruption due to Get Name List (Himanshu Madhani)  [Orabug: 29894072]  
  - qla2xxx: Update driver version 9.00.00.00.42.0-k1 (Himanshu Madhani)  [Orabug: 29894072]  
  - xen/swiotlb: remember having called xen_create_contiguous_region() (Juergen Gross)  [Orabug: 30141778]  
  - xen/swiotlb: simplify range_straddles_page_boundary() (Juergen Gross)  [Orabug: 30141778]  
  - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() (Juergen Gross)  [Orabug: 30141778]  
  - tcp: purge write queue in tcp_connect_init() (Eric Dumazet)  [Orabug: 30240133]  {CVE-2019-15239}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.2.el6uek]
changelog:
  - blk-mq: don't complete un-started request in timeout handler (Ming Lei)  [Orabug: 29903684]  
  - tcp: fix a stale ooo_last_skb after a replace (Eric Dumazet)  [Orabug: 29997352]  
  - mm: keep kabi compatibility of may_expand_vm() etc (Tong Chen)  [Orabug: 30145754]  
  - mm: always print RLIMIT_DATA warning (David Woodhouse)  [Orabug: 30145754]  
  - mm: enable RLIMIT_DATA by default with workaround for valgrind (Konstantin Khlebnikov)  [Orabug: 30145754]  
  - mm: warn about VmData over RLIMIT_DATA (Konstantin Khlebnikov)  [Orabug: 30145754]  
  - mm: rework virtual memory accounting (Konstantin Khlebnikov)  [Orabug: 30145754]  
  - mm: add the "struct mm_struct *mm" local into (Oleg Nesterov)  [Orabug: 30145754]  
  - mm: fix the racy mm->locked_vm change in (Oleg Nesterov)  [Orabug: 30145754]  
  - mm/mmap.c: remove redundant local variables for may_expand_vm() (Chen Gang)  [Orabug: 30145754]  
  - block: loop: fix another reread part failure (Ming Lei)  [Orabug: 30264603]  
  - block: loop: don't hold lo_ctl_mutex in lo_open (Ming Lei)  [Orabug: 30264603]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.1.el6uek]
changelog:
  - dm bufio: fix deadlock with loop device (Junxiao Bi)  [Orabug: 29964645]  
  - dm bufio: don't take the lock in dm_bufio_shrink_count (Mikulas Patocka)  [Orabug: 29964645]  
  - rds: rds-info shows IPv4 address as '0.0.0.0' (aru kolappan)  [Orabug: 30022915]  
  - restore cond_resched() in shrink_dcache_parent() (Al Viro)  [Orabug: 30101895]  
  - retpoline: Move retpoline_mode_selected() out of .init.text section (Alejandro Jimenez)  [Orabug: 30250332]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.30.2.el6uek]
changelog:
  - SUNRPC fix regression in umount of a secure mount (Olga Kornievskaia)  [Orabug: 29926734]  
  - block: fix RO partition with RW disk (Junxiao Bi)  [Orabug: 30159928]  
  - retpoline: Show correct spectrev2 mitigation after loading non-retpoline module (Alejandro Jimenez)  [Orabug: 30185537]  
  - tun: allow positive return values on dev_get_valid_name() call (Julien Gomes)  [Orabug: 30085611]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.30.1.el6uek]
changelog:
  - xen: let alloc_xenballooned_pages() fail if not enough memory free (Juergen Gross)  [Orabug: 30073695]  
  - mm/page_alloc.c: calculate 'available' memory in a separate function (Igor Redko)  [Orabug: 30073695]  
  - Input: gtco - bounds check collection indent level (Grant Hernandez)  [Orabug: 30074413]  {CVE-2019-13631} 
  - Documentation/Docbook/Makefile: process xml files in parallel, based on nproc --all value (Alexander Burmashev)  [Orabug: 30079814]  
  - net: rds: fix compile warning (Zhu Yanjun)  [Orabug: 30118035]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.4.1.el6uek]
changelog:
  - Revert "xen-netback: stop netif TX queue on guest queuing failure" (Brian Maly)  [Orabug: 30128203]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.4.el6uek]
changelog:
  - xen-netback: stop netif TX queue on guest queuing failure (Ankur Arora)  [Orabug: 30028200]  
  - scsi: megaraid_sas: fix panic on loading firmware crashdump (Junxiao Bi)  [Orabug: 29993112]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.3.1.el6uek]
changelog:
  - x86/speculation: Exclude ATOMs from speculation through SWAPGS (Thomas Gleixner)  [Orabug: 29967571]  {CVE-2019-1125} 
  - x86/speculation: Enable Spectre v1 swapgs mitigations (Josh Poimboeuf)  [Orabug: 29967571]  {CVE-2019-1125} 
  - x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Josh Poimboeuf)  [Orabug: 29967571]  {CVE-2019-1125}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.2.el6uek]
changelog:
  - scsi: storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery)  [Orabug: 30052805]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.1.el6uek]
changelog:
  - USB: check usb_get_extra_descriptor for proper size (Mathias Payer)  [Orabug: 29755247]  {CVE-2018-20169} 
  - rds: ib: Fix dereference of conn when NULL and cleanup thereof (Håkon Bugge)  [Orabug: 29924849]  
  - ext4: zero out the unused memory region in the extent tree block (Sriram Rajagopalan)  [Orabug: 29925523]  {CVE-2019-11833} {CVE-2019-11833} 
  - ip_sockglue: Fix missing-check bug in ip_ra_control() (Gen Zhang)  [Orabug: 29926005]  {CVE-2019-12381} 
  - ipv6_sockglue: Fix a missing-check bug in ip6_ra_control() (Gen Zhang)  [Orabug: 29926057]  {CVE-2019-12378} 
  - x86/microcode: fix x86_spec_ctrl_mask on late loading. (Mihai Carabas)  [Orabug: 29941248]  
  - net: rds: fix rds recv memory leak (Zhu Yanjun)  [Orabug: 30034815]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.6.el6uek]
changelog:
  - scsi: libfc: Fixup disc_mutex handling in fcoe module (Hannes Reinecke)  [Orabug: 29511036]  
  - scsi: libfc: sanitize E_D_TOV and R_A_TOV setting in fcp (Hannes Reinecke)  [Orabug: 29511036]  
  - sysctl: Fix kabi breakage (Shuning Zhang)  [Orabug: 29689925]  
  - proc: Fix proc_sys_prune_dcache to hold a sb reference (Eric W. Biederman)  [Orabug: 29689925]  
  - proc/sysctl: Don't grab i_lock under sysctl_lock. (Eric W. Biederman)  [Orabug: 29689925]  
  - proc/sysctl: prune stale dentries during unregistering (Konstantin Khlebnikov)  [Orabug: 29689925]  
  - scsi: smartpqi: correct lun reset issues (Kevin Barnett)  [Orabug: 29848621]  
  - fork: record start_time late (David Herrmann)  [Orabug: 29850581]  {CVE-2019-6133} 
  - mm: avoid taking zone lock in pagetypeinfo_showmixed() (Vinayak Menon)  [Orabug: 29905302]  
  - x86/retpoline/ia32entry: Convert to non-speculative calls (Ankur Arora)  [Orabug: 29909295]  {CVE-2017-5715} 
  - tun: call dev_get_valid_name() before register_netdevice() (Cong Wang)  [Orabug: 29925555]  {CVE-2018-7191} 
  - mm/madvise.c: fix madvise() infinite loop under special circumstances (chenjie)  [Orabug: 29925610]  {CVE-2017-18208}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.5.el6uek]
changelog:
  - vxlan: fix use-after-free on deletion (part 2) (Venkat Venkatsubra)  [Orabug: 29927196]  
  - vxlan: use a more suitable function when assigning NULL (Mark Bloch)  [Orabug: 29927196]  
  - vxlan: avoid using stale vxlan socket. (pravin shelar)  [Orabug: 29927196]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.4.el6uek]
changelog:
  - x86/microcode: add SPEC_CTRL_SSBD to x86_spec_ctrl_mask on late loading. (Mihai Carabas)  [Orabug: 29642139]  
  - block: do not use interruptible wait anywhere (Alan Jenkins)  [Orabug: 29674055]  
  - vxlan: fix use-after-free on deletion (Mark Bloch)  [Orabug: 29755932]  
  - vxlan: reduce usage of synchronize_net in ndo_stop (Hannes Frederic Sowa)  [Orabug: 29755932]  
  - vxlan: synchronously and race-free destruction of vxlan sockets (Hannes Frederic Sowa)  [Orabug: 29755932]  
  - vxlan: support both IPv4 and IPv6 sockets in a single vxlan device (Jiri Benc)  [Orabug: 29755932]  
  - vxlan: make vxlan_sock_add and vxlan_sock_release complementary (Jiri Benc)  [Orabug: 29755932]  
  - openvswitch: Re-add CONFIG_OPENVSWITCH_VXLAN (Venkat Venkatsubra)  [Orabug: 29755932]  
  - openvswitch: Use regular VXLAN net_device device (Venkat Venkatsubra)  [Orabug: 29755932]  
  - openvswitch: Abstract vport name through ovs_vport_name() (Thomas Graf)  [Orabug: 29755932]  
  - openvswitch: Move dev pointer into vport itself (Thomas Graf)  [Orabug: 29755932]  
  - ip_tunnel: Make ovs_tunnel_info and ovs_key_ipv4_tunnel generic (Thomas Graf)  [Orabug: 29755932]  
  - vxlan: Factor out device configuration (Thomas Graf)  [Orabug: 29755932]  
  - kexec: generate VMCOREINFO for module symbols (Isaac Chen)  [Orabug: 29770217]  
  - kexec: generate VMCOREINFO for tasks and pid (Isaac Chen)  [Orabug: 29770217]  
  - kexec: generate VMCOREINFO for trace dump (Isaac Chen)  [Orabug: 29770217]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.28.3.el6uek]
changelog:
  - Add CVE numbers for CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 (Chuck Anderson)  [Orabug: 29890820]  {CVE-2019-11477} {CVE-2019-11478} {CVE-2019-11479} {CVE-2019-11477} {CVE-2019-11478} {CVE-2019-11479} 
  - tcp: fix fack_count accounting on tcp_shift_skb_data() (Joao Martins)  [Orabug: 29890820]  
  - tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Eric Dumazet)  [Orabug: 29886598]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.28.2.el6uek]
changelog:
  - tcp: add tcp_min_snd_mss sysctl (Eric Dumazet)  [Orabug: 29884306]  
  - tcp: tcp_fragment() should apply sane memory limits (Eric Dumazet)  [Orabug: 29884306]  
  - tcp: limit payload size of sacked skbs (Eric Dumazet)  [Orabug: 29884306]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.1.el6uek]
changelog:
  - hugetlbfs: don't retry when pool page allocations start to fail (Mike Kravetz)  [Orabug: 29324267]  
  - x86/speculation: RSB stuffing with retpoline on Skylake+ cpus (William Roche)  [Orabug: 29660924]  
  - x86/speculation: reformatting RSB overwrite macro (William Roche)  [Orabug: 29660924]  
  - x86/speculation: Dynamic enable and disable of RSB stuffing with IBRS&!SMEP (William Roche)  [Orabug: 29660924]  
  - x86/speculation: STUFF_RSB dynamic enable (William Roche)  [Orabug: 29660924]  
  - int3 handler better address space detection on interrupts (William Roche)  [Orabug: 29660924]  
  - repairing out-of-tree build functionality (Mark Nicholson)  [Orabug: 29755100]  
  - ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Shuning Zhang)  [Orabug: 29797007]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.27.3.el6uek]
changelog:
  - ocfs2: fix ocfs2 read inode data panic in ocfs2_iget (Shuning Zhang)  [Orabug: 29233739]  
  - Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer (Marcel Holtmann)  [Orabug: 29526426]  {CVE-2019-3459} 
  - Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt (Marcel Holtmann)  [Orabug: 29526426]  {CVE-2019-3459} 
  - HID: debug: fix the ring buffer implementation (Vladis Dronov)  [Orabug: 29629481]  {CVE-2019-3819} {CVE-2019-3819} 
  - scsi: target: iscsi: Use hex2bin instead of a re-implementation (Vincent Pelletier)  [Orabug: 29778875]  {CVE-2018-14633} {CVE-2018-14633} 
  - scsi: libsas: fix a race condition when smp task timeout (Jason Yan)  [Orabug: 29783225]  {CVE-2018-20836} 
  - scsi: megaraid_sas: return error when create DMA pool failed (Jason Yan)  [Orabug: 29783254]  {CVE-2019-11810} 
  - Bluetooth: hidp: fix buffer overflow (Young Xiao)  [Orabug: 29786786] {CVE-2019-11884} 
  - x86/speculation/mds: Add 'mitigations=' support for MDS (Kanth Ghatraju)  [Orabug: 29791046]  
  - net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock(). (Mao Wenan)  [Orabug: 29802785]  {CVE-2019-11815}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.27.2.el6uek]
changelog:
  - x86/speculation/mds: Check for the right microcode before setting mitigation (Kanth Ghatraju)  [Orabug: 29797118]  
  - vxlan: test dev->flags & IFF_UP before accessing vxlan->dev->dev_addr (Venkat Venkatsubra)  [Orabug: 29710939]  
  - vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() (Eric Dumazet)  [Orabug: 29710939]  
  - nvme: allow timed-out ios to retry (James Smart)  [Orabug: 29301607]  
  - rds: Introduce a pool of worker threads for connection management (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Use rds_conn_path cp_wq when applicable (Håkon Bugge)  [Orabug: 29391909]  
  - rds: ib: Implement proper cm_id compare (Håkon Bugge)  [Orabug: 29391909]  
  - Revert "net/rds: prevent RDS connections using stale ARP entries" (Håkon Bugge)  [Orabug: 29391909]  
  - rds: ib: Flush ARP cache when needed (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Add simple heuristics to determine connect delay (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Fix one-sided connect (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Consolidate and align ftrace related to connection management (Håkon Bugge)  [Orabug: 29391909]  
  - rds: ib: Fix gratuitous ARP storm (Håkon Bugge)  [Orabug: 29391909]  
  - IB/mlx4: Increase the timeout for CM cache (Håkon Bugge)  [Orabug: 29391909]  
  - kvm/speculation: Allow KVM guests to use SSBD even if host does not (Alejandro Jimenez)  [Orabug: 29423804]  
  - x86/speculation: Keep enhanced IBRS on when spec_store_bypass_disable=on is used (Alejandro Jimenez)  [Orabug: 29423804]  
  - x86/speculation: Clean up enhanced IBRS checks in bugs_64.c (Alejandro Jimenez)  [Orabug: 29423804]  
  - mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (Andrea Arcangeli)  [Orabug: 29510356]  
  - bnxt_en: Reset device on RX buffer errors. (Michael Chan)  [Orabug: 29651238]  
  - x86/mitigations: Fix the test for Xen PV guest (Boris Ostrovsky)  [Orabug: 29774291]  
  - x86/speculation/mds: Fix verw usage to use memory operand (Kanth Ghatraju)  [Orabug: 29791036]  {CVE-2018-12127} {CVE-2018-12130}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.27.1.el6uek]
changelog:
  - scsi: libfc: sanitize E_D_TOV and R_A_TOV setting (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: use configured rport E_D_TOV (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: additional debugging messages (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: don't advance state machine for incoming FLOGI (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: Do not login if the port is already started (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: Do not drop down to FLOGI for fc_rport_login() (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: Do not take rdata->rp_mutex when processing a -FC_EX_CLOSED ELS response. (Chad Dupuis)  [Orabug: 25933179]  
  - scsi: libfc: Fixup disc_mutex handling (Hannes Reinecke)  [Orabug: 25933179]  
  - xve: arm ud tx cq to generate completion interrupts (Ajaykumar Hotchandani)  [Orabug: 28267050]  
  - net: sched: run ingress qdisc without locks (Alexei Starovoitov)  [Orabug: 29395374]  
  - bnxt_en: Fix typo in firmware message timeout logic. (Michael Chan)  [Orabug: 29412112]  
  - bnxt_en: Wait longer for the firmware message response to complete. (Michael Chan)  [Orabug: 29412112]  
  - mm,vmscan: Make unregister_shrinker() no-op if register_shrinker() failed. (Tetsuo Handa)  [Orabug: 29456281]  
  - X.509: Handle midnight alternative notation in GeneralizedTime (David Howells)  [Orabug: 29460344]  {CVE-2015-5327} 
  - X.509: Support leap seconds (David Howells)  [Orabug: 29460344]  {CVE-2015-5327} 
  - X.509: Fix the time validation [ver #2] (David Howells)  [Orabug: 29460344]  {CVE-2015-5327} {CVE-2015-5327} 
  - be2net: enable new Kconfig items in kernel configs (Brian Maly)  [Orabug: 29475071]  
  - benet: remove broken and unused macro (Lubomir Rintel)  [Orabug: 29475071]  
  - be2net: don't flip hw_features when VXLANs are added/deleted (Davide Caratti)  [Orabug: 29475071]  
  - be2net: Fix memory leak in be_cmd_get_profile_config() (Petr Oros)  [Orabug: 29475071]  
  - be2net: Use Kconfig flag to support for enabling/disabling adapters (Petr Oros)  [Orabug: 29475071]  
  - be2net: Mark expected switch fall-through (Gustavo A. R. Silva)  [Orabug: 29475071]  
  - be2net: fix spelling mistake "seqence" -> "sequence" (Colin Ian King)  [Orabug: 29475071]  
  - be2net: Update the driver version to 12.0.0.0 (Suresh Reddy)  [Orabug: 29475071]  
  - be2net: gather debug info and reset adapter (only for Lancer) on a tx-timeout (Suresh Reddy)  [Orabug: 29475071]  
  - be2net: move rss_flags field in rss_info to ensure proper alignment (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: re-order fields in be_error_recovert to avoid hole (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: remove unused tx_jiffies field from be_tx_stats (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: move txcp field in be_tx_obj to eliminate holes in the struct (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: reorder fields in be_eq_obj structure (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: remove unused old custom busy-poll fields (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: remove unused old AIC info (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: Fix error detection logic for BE3 (Suresh Reddy)  [Orabug: 29475071]  
  - scsi: sd: Do not override max_sectors_kb sysfs setting (Martin K. Petersen)  [Orabug: 29596510]  
  - USB: serial: io_ti: fix div-by-zero in set_termios (Johan Hovold)  [Orabug: 29487834]  {CVE-2017-18360} 
  - bnxt_en: Drop oversize TX packets to prevent errors. (Michael Chan)  [Orabug: 29516462]  
  - x86/speculation: Read per-cpu value of x86_spec_ctrl_priv in x86_virt_spec_ctrl() (Alejandro Jimenez)  [Orabug: 29526401]  
  - x86/speculation: Keep enhanced IBRS on when prctl is used for SSBD control (Alejandro Jimenez)  [Orabug: 29526401]  
  - USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data (Hui Peng)  [Orabug: 29605982]  {CVE-2018-19985} {CVE-2018-19985} 
  - swiotlb: save io_tlb_used to local variable before leaving critical section (Dongli Zhang)  [Orabug: 29637525]  
  - swiotlb: dump used and total slots when swiotlb buffer is full (Dongli Zhang)  [Orabug: 29637525]  
  - x86/bugs, kvm: don't miss SSBD when IBRS is in use. (Quentin Casasnovas)  [Orabug: 29642113]  
  - cifs: Fix use after free of a mid_q_entry (Shuning Zhang)  [Orabug: 29654888]  
  - binfmt_elf: switch to new creds when switching to new mm (Linus Torvalds)  [Orabug: 29677233]  {CVE-2019-11190} 
  - x86/microcode: Don't return error if microcode update is not needed (Boris Ostrovsky)  [Orabug: 29759756]


author: Tim Waugh <twaugh@redhat.com> 2.6-2
changelog:
  - Applied upstream patch to prevent incorrect filename being chosen
    when adding a new file (bug #550319).


author: Tim Waugh <twaugh@redhat.com> 2.6-1
changelog:
  - 2.6.  No longer need stderr, suffix, stripcr, parse, allow-spaces,
    ifdef, program_name, or posix-backup patches.


author: Tim Waugh <twaugh@redhat.com> 2.5.4-35
changelog:
  - Don't fail if setfilecon() returns EPERM (bug #453365), although the
    setfilecon man page suggests that ENOTSUP will be returned in this
    case.


author: Tim Waugh <twaugh@redhat.com> 2.5.4-31
changelog:
  - Convert spec file to UTF-8 (bug #226233).
  - Use _bindir macro in %files (bug #226233).
  - Parallel make (bug #226233).
  - Better defattr declaration (bug #226233).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - use .orig as default suffix, as per man page and previous behaviour
    (bug #20202).
  - use better patch for this, from maintainer.


author: Alan Cox <alan@redhat.com>
changelog:
  - Fix the case where stderr isnt flushed for ask(). Now the 'no such file'
    appears before the skip patch question, not at the very end, Doh!


author: Carson Hovey <carson.hovey@oracle.com> - 0.1-20.el6.1
changelog:
  - Fix VM console hang during migration or when vm restarted.
    Bug-fixed-by: Carson Hovey <carson.hovey@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com> [bug 22735310] [bug -] [bug VM] [bug console] [bug hangs] [bug during] [bug migration]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-19
changelog:
  - limit socat port range
    Let's limit the range to:
    - VNC: 6900 - 7999
    - TTY: 10000 - 11099
    Then it will not conflict with other programs using socat.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-17
changelog:
  - reduce xenstore watches and fix a regular expression which may cause xend been killed
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Firas Azar <firas.azar@oracle.com> [bug 18556579]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-16
changelog:
  - fix get tty path
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Steve Noyes <steve.noyes@oracle.com> [bug 18420874]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-15
changelog:
  - fix tty port re: it should be ungreedy
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Steve Noyes <steve.noyes@oracle.com> [bug 18421069]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-13
changelog:
  - fix the way to get manager IP after SSL authentication
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>


author: Carson Hovey <carson.hovey@oracle.com> - 0.1-12
changelog:
  - Code to support condrestart was missing; added same.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 17180175] [bug -] [bug OVM-CONSOLED] [bug CONDRESTART] [bug DOES] [bug NOT] [bug WORK]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-11
changelog:
  - Support hvm serial console
    We should setup the SSL tunnel against serial console for hvm and against pv
    console for pvm.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 15881557]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-10
changelog:
  - With this patch, during VM migration, the tunnel on the source side will be
    removed. It also restrict one connection to the tunnel.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 14481292]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-8
changelog:
  - restrict Manager IP only for SSL vnc/tty console access - add missing part.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com>


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-6
changelog:
  - restrict Manager IP only for SSL vnc/tty console access.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com>


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-112.16.7.el6uek]
changelog:
  - mlx4: change the ICM table allocations to lowest needed size (Daniel Jurgens)  [Orabug: 27718305]  
  - autofs: use dentry flags to block walks during expire (Ian Kent)  [Orabug: 26032471] [Orabug: 27766149]  
  - autofs races (Al Viro)  [Orabug: 27766149] [Orabug: 27766149]  
  - crypto: FIPS - allow tests to be disabled in FIPS mode (Stephan Mueller)  [Orabug: 26182706]  
  - crypto: rng - Zero seed in crypto_rng_reset (Herbert Xu)  [Orabug: 26182706]  
  - crypto: xts - consolidate sanity check for keys (Stephan Mueller)  [Orabug: 26182706]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.16.6.el6uek]
changelog:
  - fork: fix incorrect fput of ->exe_file causing use-after-free (Eric Biggers)  [Orabug: 27290198]  {CVE-2017-17052} 
  - negotiate_mq should happen in all cases of a new VBD being discovered by xen-blkfront, whether called through _probe() or a hot-attached new VBD from dom-0 via xenstore. Otherwise, hot-attached new VBDs are left configured without multi-queue. (Patrick Colp)  [Orabug: 27383895]  
  - rds: Fix NULL pointer dereference in __rds_rdma_map (Håkon Bugge)  [Orabug: 27477007]  
  - nvme: fix uninitialized prp2 value on small transfers (Jan H. Schönherr)  [Orabug: 27581008]  
  - xen-netfront: Improve error handling during initialization (Ross Lagerwall)  [Orabug: 27655820]  
  - RDS: IB: Fix null pointer issue (Guanglei Li)  [Orabug: 27636704]  
  - mstflint: update Makefile and Kconfig (Qing Huang)  [Orabug: 27656465]  
  - target: add inquiry_product module param to override LIO default (Kyle Fortin)  [Orabug: 27679482]  
  - target: add inquiry_vendor module param to override LIO-ORG (Kyle Fortin)  [Orabug: 27679482]  
  - net/rds: Avoid copy overhead if send buff is full (Gerd Rausch)  [Orabug: 27747176]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.16.5.el6uek]
changelog:
  - IB/core: Avoid calling ib_query_device (Or Gerlitz)  [Orabug: 27687710]  
  - IB/core: Save the device attributes on the device structure (Ira Weiny)  [Orabug: 27687710]  
  - KVM: x86: fix singlestepping over syscall (Paolo Bonzini)  [Orabug: 27669907]  {CVE-2017-7518} {CVE-2017-7518} 
  - xen/acpi: upload _PSD info for non-dom0 CPUs too (Joao Martins)  [Orabug: 27655757]  
  - Revert "RDS: don't commit to queue till transport connection is up" (Santosh Shilimkar)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.16.4.el6uek]
changelog:
  - scsi: Make __scsi_remove_device go straight from BLOCKED to DEL (Bart Van Assche)  [Orabug: 27339736]  
  - scsi: Protect SCSI device state changes with a mutex (Bart Van Assche)  [Orabug: 27339736]  
  - scsi: Introduce scsi_start_queue() (Bart Van Assche)  [Orabug: 27339736]  
  - scsi: avoid a permanent stop of the scsi device's request queue (Wei Fang)  [Orabug: 27339736]  
  - x86/spectre_v2: Fix cpu offlining with IPBP. (Konrad Rzeszutek Wilk)


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-112.16.3.el6uek]
changelog:
  - retpoline: selectively disable IBRS in disable_ibrs_and_friends() (Chuck Anderson)  [Orabug: 27636063]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-112.16.2.el6uek]
changelog:
  - retpoline: move setting of sysctl_ibrs_enabled and sysctl_ibpb_enabled to where SPEC_CTRL_IBRS_INUSE and SPEC_CTRL_IBPB_INUSE are set (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: set IBRS and IBPB in use only on the boot CPU call to init_scattered_cpuid_features() (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: display IBPB feature status along with IBRS status (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: move lock/unlock of spec_ctrl_mutex to check_modinfo() (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: call clear_retpoline_fallback() with boot parm spectre_v2_heuristics=off (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: add brackets to check_ibrs_inuse() and clear_ibpb_inuse() (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline/module: do not enable IBRS/IPBP if SPEC_CTRL_IBRS_ADMIN_DISABLED/SPEC_CTRL_IBPB_ADMIN_DISABLED is set (Chuck Anderson)  [Orabug: 27547729]  
  - retpoline: microcode incorrectly reported as broken during early boot (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: move lock/unlock of spec_ctrl_mutex into init_scattered_cpuid_features() (Chuck Anderson)  [Orabug: 27556096]  
  - KVM: Disable irq while unregistering user notifier (Ignacio Alvarado)   
  - x86/speculation: Use IBRS if available before calling into firmware (David Woodhouse)  [Orabug: 27516479]  
  - Revert "x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation" (Konrad Rzeszutek Wilk)  [Orabug: 27601790]  
  - Revert "x86/spec: Add 'lfence_enabled' in sysfs" (Konrad Rzeszutek Wilk)   
  - x86/spectre_v2: Fix the documentation to say the right thing. (Konrad Rzeszutek Wilk)   
  - x86/spectre_v2: Don't check bad microcode versions when running under hypervisors. (Konrad Rzeszutek Wilk)  [Orabug: 27601735]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.16.1.el6uek]
changelog:
  - firmware: dmi_scan: add SBMIOS entry and DMI tables (Ivan Khoronzhuk)  [Orabug: 27045425]  
  - Btrfs: fix unexpected EEXIST from btrfs_get_extent (Liu Bo)  [Orabug: 27033166]  
  - Btrfs: fix incorrect block_len in merge_extent_mapping (Liu Bo)  [Orabug: 27033166]  
  - Btrfs: add WARN_ONCE to detect unexpected error from merge_extent_mapping (Liu Bo)  [Orabug: 27033166]  
  - Btrfs: deal with existing encompassing extent map in btrfs_get_extent() (Omar Sandoval)  [Orabug: 27033166]  
  - Btrfs: deal with duplciates during extent_map insertion in btrfs_get_extent (Chris Mason)  [Orabug: 27033166]  
  - net: cdc_ether: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27215191]  {CVE-2017-16649} 
  - KVM: x86: pvclock: Handle first-time write to pvclock-page contains random junk (Liran Alon)  [Orabug: 27221679]  
  - KVM: x86: always fill in vcpu->arch.hv_clock (Paolo Bonzini)  [Orabug: 27221679]  
  - net/mlx4_core: allow QPs with enable_smi_admin enabled (Zhu Yanjun)  [Orabug: 27256720]  
  - qlcnic: fix deadlock bug (Junxiao Bi)  [Orabug: 27337130]  
  - x86/ia32/syscall: RESTORE_EXTRA_REGS when returning from syscall (Ankur Arora)  [Orabug: 27534437]  {CVE-2017-5715} 
  - x86/ia32/syscall: don't do RESTORE_EXTRA_REGS prematurely (Ankur Arora)  [Orabug: 27534437]  {CVE-2017-5715} 
  - trace: declare blk_add_trace_rq non-static on OL6 (Todd Vierling)  [Orabug: 27578295]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.15.1.el6uek]
changelog:
  - x86/spectre: move microcode check before kernel ibrs flags are set (Daniel Jordan)  [Orabug: 27534557]  {CVE-2017-5715} 
  - bonding: attempt to better support longer hw addresses (Jarod Wilson)  [Orabug: 27535442]  
  - x86: make HAVE_FENTRY dependent on !SIMULATE_GCC44_KABI (Todd Vierling)  [Orabug: 27533590]  
  - Revert "uek-rpm: configs: remove __stack_chk_fail from kABI list" (Todd Vierling)  [Orabug: 27540429]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-112.14.17.el6uek]
changelog:
  - retpoline/module: fall back to another spectre mitigation when disabling retpoline (Chuck Anderson)  [Orabug: 27457402]  
  - retpoline/module: add bit defs for use_ibpb (Chuck Anderson)  [Orabug: 27457402]  
  - x86/spectre_v2: Only use IBRS when ibrs_inuse tells us to (Konrad Rzeszutek Wilk)   
  - kernel: on OL6 only, simulate the gcc 4.4 kABI for __stack_chk_fail() (Todd Vierling)  [Orabug: 27509404]  
  - uek-rpm: configs: Don't set HAVE_FENTRY on OL6 builds. (Todd Vierling)  [Orabug: 27509404]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.16.el6uek]
changelog:
  - x86/spectre_v2: Disable IBRS if spectre_v2=off (Konrad Rzeszutek Wilk)   
  - KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL (KarimAllah Ahmed)  [Orabug: 27525577]  
  - x86/spectre_v2: Remove 0xc2 from spectre_bad_microcodes (Darren Kenny)  [Orabug: 27523395]  
  - x86/speculation: Use Indirect Branch Prediction Barrier in context switch (Tim Chen)  [Orabug: 27524607]  
  - xenbus: track caller request id (Joao Martins)  [Orabug: 27472583]  
  - uek-rpm: configs: remove __stack_chk_fail from kABI list (Todd Vierling)   
  - x86/entry: RESTORE_IBRS needs to be done under kernel CR3 (Ankur Arora)  [Orabug: 27501741]  
  - Fix typo IBRS_ATT, which should be IBRS_ALL (redux) (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Add spectre_v2_heuristics= (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Do not disable IBPB when disabling IBRS (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/scattered: Fix the order. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Favor IBRS on Skylake over retpoline (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/speculation: Fix typo IBRS_ATT, which should be IBRS_ALL (Darren Kenny)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Now that we expose 'stbibp' make sure it is correct. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/cpufeatures: Clean up Spectre v2 related CPUID flags (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/speculation: Add basic IBPB (Indirect Branch Prediction Barrier) support (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/bugs: Drop one "mitigation" from dmesg (Borislav Petkov)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/nospec: Fix header guards names (Borislav Petkov)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Don't spam the console with these: (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/cpu: Keep model defines sorted by model number (Andy Shevchenko)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/msr: Add definitions for new speculation control MSRs (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/cpufeatures: Add AMD feature bits for Speculation Control (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Print what options are available. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Add VMEXIT_FILL_RSB instead of RETPOLINE (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: If IBRS is enabled disable "Filling RSB on context switch" (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - KVM: VMX: Allow direct access to MSR_IA32_SPEC_CTRL (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Don't allow {ibrs,ipbp,lfence}_enabled to be toggled if retpoline (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Fix retpoline_enabled (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Update sysctl values if toggled only by set_{ibrs,ibpb}_disabled (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - retpoline/module: Taint kernel for missing retpoline in module (Andi Kleen)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Fill RSB on context switch for affected CPUs (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Optimize inline assembler for vmexit_fill_RSB (Andi Kleen)  [Orabug: 27478139]  {CVE-2017-5715} 
  - kprobes/x86: Disable optimizing on the function jumps to indirect thunk (Masami Hiramatsu)  [Orabug: 27478139]  {CVE-2017-5715} 
  - kprobes/x86: Blacklist indirect thunk functions for kprobes (Masami Hiramatsu)  [Orabug: 27478139]  {CVE-2017-5715} 
  - retpoline: Introduce start/end markers of indirect thunk (Masami Hiramatsu)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/mce: Make machine check speculation protected (Thomas Gleixner)  [Orabug: 27478139]  {CVE-2017-5715} 
  - kbuild: modversions for EXPORT_SYMBOL() for asm (Nicholas Piggin)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Tom Lendacky)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Remove compile time warning (Thomas Gleixner)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Fill return stack buffer on vmexit (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/irq32: Convert assembler indirect jumps (Andi Kleen)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/checksum32: Convert assembler indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/xen: Convert Xen hypercall indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/hyperv: Convert assembler indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/ftrace: Convert ftrace assembler indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/entry: Convert entry assembler indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/crypto: Convert crypto assembler indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Add disable_ibrs_and_friends (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Figure out if STUFF_RSB macro needs to be used. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Figure out when to use IBRS. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Add IBRS option. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Add boot time option to select Spectre v2 mitigation (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Add initial retpoline support (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - kconfig.h: use __is_defined() to check if MODULE is defined (Masahiro Yamada)  [Orabug: 27478139]  {CVE-2017-5715} 
  - EXPORT_SYMBOL() for asm (Al Viro)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/asm: Make asm/alternative.h safe from assembly (Andy Lutomirski)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/kbuild: enable modversions for symbols exported from asm (Adam Borowski)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/asm: Use register variable to get stack pointer value (Andrey Ryabinin)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/mm/32: Move setup_clear_cpu_cap(X86_FEATURE_PCID) earlier (Andy Lutomirski)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/alternatives: Add missing '
  ' at end of ALTERNATIVE inline asm (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/alternatives: Fix optimize_nops() checking (Borislav Petkov)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/microcode/intel: Extend BDW late-loading with a revision check (Jia Zhang)  [Orabug: 27343573]  
  - x86/microcode/intel: Disable late loading on model 79 (Borislav Petkov)  [Orabug: 27343573]  
  - x86/spec: Fix spectre_v1 bug and mitigation indicators (John Haxby)  [Orabug: 27470707]  
  - x86: Fix compile issues if CONFIG_XEN not defined (Konrad Rzeszutek Wilk)   
  - x86/mitigation/spectre_v2: Add reporting of 'lfence' (Konrad Rzeszutek Wilk)   
  - x86/spec: Add 'lfence_enabled' in sysfs (Konrad Rzeszutek Wilk)   
  - x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation (Konrad Rzeszutek Wilk)   
  - x86/IBRS/IBPB: Remove procfs interface to ibrs/ibpb_enable (Boris Ostrovsky)  [Orabug: 27415916]  
  - x86: Use PRED_CMD MSR when ibpb is enabled (Konrad Rzeszutek Wilk)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.15.el6uek]
changelog:
  - nvme-pci: Remove nvme_setup_prps BUG_ON (Keith Busch)  [Orabug: 27448367]  
  - block: Check for gaps on front and back merges (Jens Axboe)  [Orabug: 27448367]  
  - block: Copy a user iovec if it includes gaps (Sagi Grimberg)  [Orabug: 27448367]  
  - block: Replace SG_GAPS with new queue limits mask (Keith Busch)  [Orabug: 27448367]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.14.el6uek]
changelog:
  - drivers/char/mem.c: deny access in open operation when securelevel is set (Ethan Zhao)  [Orabug: 27234850] [Orabug: 27234850]  
  - hugetlb: fix nr_pmds accounting with shared page tables (Kirill A. Shutemov)  [Orabug: 26988581]  
  - x86/IBRS: Drop unnecessary WRITE_ONCE (Boris Ostrovsky)  [Orabug: 27416198]  
  - x86/IBRS: Don't try to change IBRS mode if IBRS is not available (Boris Ostrovsky)  [Orabug: 27416198]  
  - x86/IBRS: Remove support for IBRS_ENABLED_USER mode (Boris Ostrovsky)  [Orabug: 27416198]  
  - x86: Include linux/device.h in bugs_64.c (Boris Ostrovsky)  [Orabug: 27418896]  
  - x86/spectre: Drop the warning about ibrs being obsolete. (Konrad Rzeszutek Wilk)   
  - x86/spec: Don't print the Missing arguments for option spectre_v2. (Konrad Rzeszutek Wilk)   
  - x86/spec: Also print IBRS if IBPB is disabled. (Konrad Rzeszutek Wilk)   
  - x86/IBPB: Provide debugfs interface for changing IBPB mode (Boris Ostrovsky)  [Orabug: 27449065]  
  - xen: Make PV Dom0 Linux kernel NUMA aware (Elena Ufimtseva)   
  - net/rds: Fix incorrect error handling (Håkon Bugge)  [Orabug: 26848729]  
  - net/rds: use multiple sge than buddy allocation in congestion code (Wei Lin Guay)  [Orabug: 26848729]  
  - Revert "RDS: fix the sg allocation based on actual message size" (Wei Lin Guay)  [Orabug: 26848729]  
  - Revert "RDS: avoid large pages for sg allocation for TCP transport" (Wei Lin Guay)  [Orabug: 26848729]  
  - Revert "net/rds: Reduce memory footprint in rds_sendmsg" (Wei Lin Guay)  [Orabug: 26848729]  
  - net/rds: reduce memory footprint during ib_post_recv in IB transport (Wei Lin Guay)  [Orabug: 26848729]  
  - net/rds: reduce memory footprint during rds_sendmsg with IB transport (Wei Lin Guay)  [Orabug: 26848729]  
  - net/rds: set the rds_ib_init_frag based on supported sge (Wei Lin Guay)  [Orabug: 26848729]  
  - bnxt_en: Fix possible corrupted NVRAM parameters from firmware response. (Michael Chan)  [Orabug: 27199588]  
  - x86, kasan: Fix build failure on KASAN=y && KMEMCHECK=y kernels (Andrey Ryabinin)  [Orabug: 27255122]  
  - x86, efi, kasan: Fix build failure on !KASAN && KMEMCHECK=y kernels (Andrey Ryabinin)  [Orabug: 27255122]  
  - x86, efi, kasan: #undef memset/memcpy/memmove per arch (Andrey Ryabinin)  [Orabug: 27255122]  
  - Revert "Makefile: Build with -Werror=date-time if the compiler supports it" (Gayatri Vasudevan)  [Orabug: 27255122]  
  - dccp: CVE-2017-8824: use-after-free in DCCP code (Mohamed Ghannam)  [Orabug: 27290300]  {CVE-2017-8824} 
  - x86/efi: Initialize and display UEFI secure boot state a bit later during init (Daniel Kiper)  [Orabug: 27309477]  
  - x86/espfix: Init espfix on the boot CPU side (Zhu Guihua)  [Orabug: 27344552]  
  - x86/espfix: Add 'cpu' parameter to init_espfix_ap() (Zhu Guihua)  [Orabug: 27344552]  
  - ALSA: pcm: prevent UAF in snd_pcm_info (Robb Glasser)  [Orabug: 27344841]  {CVE-2017-0861} {CVE-2017-0861} 
  - fs/ocfs2: remove page cache for converted direct write (Wengang Wang)   
  - Revert "ocfs2: code clean up for direct io" (Wengang Wang)   
  - assoc_array: Fix a buggy node-splitting case (David Howells)  [Orabug: 27364592]  {CVE-2017-12193} {CVE-2017-12193} 
  - Sanitize 'move_pages()' permission checks (Linus Torvalds)  [Orabug: 27364690]  {CVE-2017-14140} 
  - pti: compile fix for when PTI is disabled (Pavel Tatashin)  [Orabug: 27383147]  {CVE-2017-5754} 
  - sctp: do not peel off an assoc from one netns to another one (Xin Long)  [Orabug: 27386999]  {CVE-2017-15115} 
  - net: ipv4: fix for a race condition in raw_sendmsg (Mohamed Ghannam)  [Orabug: 27390682]  {CVE-2017-17712} 
  - mlx4: add mstflint secure boot access kernel support (Qing Huang)  [Orabug: 27404202]  
  - x86: Move STUFF_RSB in to the idt macro (Konrad Rzeszutek Wilk)   
  - x86/spec: STUFF_RSB _before_ ENABLE_IBRS (Konrad Rzeszutek Wilk)   
  - x86: Move ENABLE_IBRS in the interrupt macro. (Konrad Rzeszutek Wilk)  [Orabug: 27449045]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.12.el6uek]
changelog:
  - xen-blkback: add pending_req allocation stats (Ankur Arora)  [Orabug: 27386890]  
  - xen-blkback: move indirect req allocation out-of-line (Ankur Arora)  [Orabug: 27386890]  
  - xen-blkback: pull nseg validation out in a function (Ankur Arora)  [Orabug: 27386890]  
  - xen-blkback: make struct pending_req less monolithic (Ankur Arora)  [Orabug: 27386890]  
  - x86: Clean up IBRS functionality resident in common code (Kanth Ghatraju)  [Orabug: 27403317]  
  - x86: Display correct settings for the SPECTRE_V2 bug (Kanth Ghatraju)  [Orabug: 27403317]  
  - Set CONFIG_GENERIC_CPU_VULNERABILITIES flag (Kanth Ghatraju)  [Orabug: 27403317]  
  - x86/cpu: Implement CPU vulnerabilites sysfs functions (Thomas Gleixner)  [Orabug: 27403317]  
  - sysfs/cpu: Fix typos in vulnerability documentation (David Woodhouse)  [Orabug: 27403317]  
  - sysfs/cpu: Add vulnerability folder (Thomas Gleixner)  [Orabug: 27403317]  
  - x86/cpufeatures: Add X86_BUG_SPECTRE_V[12] (David Woodhouse)  [Orabug: 27403317]  
  - x86/cpufeatures: Add X86_BUG_CPU_MELTDOWN (Kanth Ghatraju)  [Orabug: 27403317]  
  - KVM: x86: Add memory barrier on vmcs field lookup (Andrew Honig)   {CVE-2017-5753} 
  - KVM: VMX: remove I/O port 0x80 bypass on Intel hosts (Andrew Honig)  [Orabug: 27402301]  {CVE-2017-1000407} {CVE-2017-1000407} 
  - xfs: give all workqueues rescuer threads (Chris Mason)  [Orabug: 27397568]  
  - ixgbevf: handle mbox_api_13 in ixgbevf_change_mtu (Joao Martins)  [Orabug: 27397001]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.11.el6uek]
changelog:
  - x86/pti/efi: broken conversion from efi to kernel page table (Pavel Tatashin)  [Orabug: 27363926] [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/spec: Always set IBRS to guest value on VMENTER and host on VMEXIT (redux) (Konrad Rzeszutek Wilk)  [Orabug: 27369994]  
  - x86/IBRS: Make sure we restore MSR_IA32_SPEC_CTRL to a valid value (Boris Ostrovsky)  [Orabug: 27362581]  
  - x86/IBRS/IBPB: Set sysctl_ibrs/ibpb_enabled properly (Boris Ostrovsky)  [Orabug: 27363792]  
  - x86/spec_ctrl: Add missing 'lfence' when IBRS is not supported. (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/entry_64: TRACE_IRQS_OFF before re-enabling. (Jamie Iles)  [Orabug: 27339995]  {CVE-2017-5715} 
  - ptrace: remove unlocked RCU dereference. (Jamie Iles)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/ia32: Adds code hygiene for 32bit SYSCALL instruction entry. (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/ia32: don't save registers on audit call (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec/ia32: Sprinkle IBRS and RSB at the 32-bit SYSCALL (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/ia32: Move STUFF_RSB And ENABLE_IBRS (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec: Always set IBRS to guest value on VMENTER and host on VMEXIT. (Konrad Rzeszutek Wilk)  [Orabug: 27365544]  {CVE-2017-5715}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.16.el6uek]
changelog:
  - mm: remove gup_flags FOLL_WRITE games from __get_user_pages() (Linus Torvalds)  [Orabug: 24927306]  {CVE-2016-5195}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.15.el6uek]
changelog:
  - drivers/nvme: provide a module parameter for setting number of I/O queues (Shan Hai)  [Orabug: 24914956]  
  - blk-mq: improve warning for running a queue on the wrong CPU (Jens Axboe)  [Orabug: 24914956]  
  - blk-mq: fix freeze queue race (Shan Hai)  [Orabug: 24914956]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.13.el6uek]
changelog:
  - HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Scott Bauer)  [Orabug: 24803597]  {CVE-2016-5829}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.11.el6uek]
changelog:
  - ocfs2: Fix double put of recount tree in ocfs2_lock_refcount_tree() (Ashish Samant)  [Orabug: 24691860]  
  - megaraid_sas: Don't issue kill adapter for MFI controllers in case of PD list DCMD failure (Sumit Saxena)  [Orabug: 24506797]  
  - netfilter: x_tables: speed up jump target validation (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES (Pablo Neira Ayuso)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: remove unused comefrom hookmask argument (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: introduce and use xt_copy_counters_from_user (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: do compat validation via translate_table (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: xt_compat_match_from_user doesn't need a retval (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: ip6_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: ip_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: arp_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: don't reject valid target size on some architectures (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: validate all offsets and sizes in a rule (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: check for bogus target offset (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: check standard target size too (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: add compat version of xt_check_entry_offsets (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: assert minimum target size (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: kill check_entry helper (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: add and use xt_check_entry_offsets (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: validate targets of jumps (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: fix unconditional helper (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: validate targets of jumps (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: don't move to non-existent next rule (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: fix unconditional helper (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: check for size overflow (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.10.el6uek]
changelog:
  - netfilter: x_tables: make sure e->next_offset covers remaining blob size (Florian Westphal)  [Orabug: 24682076]  {CVE-2016-4997} {CVE-2016-4998} 
  - netfilter: x_tables: validate e->target_offset early (Florian Westphal)  [Orabug: 24682076]  {CVE-2016-4997} {CVE-2016-4998}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.9.el6uek]
changelog:
  - xen-blkback: don't get ref for each queue (Bob Liu)  [Orabug: 24616917]  
  - NVMe: Fix obtaining command result (Keith Busch)  [Orabug: 24655742]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.7.el6uek]
changelog:
  - x86/xen: Add x86_platform.is_untracked_pat_range quirk to ignore ISA regions. (Konrad Rzeszutek Wilk)  [Orabug: 24566046]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.3.el6uek]
changelog:
  - ocfs2: improve recovery performance (Junxiao Bi)  [Orabug: 24395729]  
  - qed: Utilize FW 8.10.3.0 (Yuval Mintz)  [Orabug: 24442553]  
  - blk-mq: mark request queue as mq asap (Ming Lei)  [Orabug: 24318720]  
  - lpfc: fix oops in lpfc_sli4_scmd_to_wqidx_distr() from lpfc_send_taskmgmt() (Mauricio Faria de Oliveira)  [Orabug: 24312616]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.1.el6uek]
changelog:
  - ol6-spec: update linux-firmware dependency to 20160616-44.git43e96a1e.0.10 (Chuck Anderson)  [Orabug: 24311968]  
  - ol7-spec: update dracut version dependency to 033-360.0.3 (Chuck Anderson)  [Orabug: 24308248]  
  - [2d8747c2] fixup! blk-mq: prevent double-unlock of mutex (Dan Duval)  [Orabug: 24376521]  
  - tcp: make challenge acks less predictable (Eric Dumazet)  [Orabug: 24010102]  
  - IBCM: dereference timewait_info only when needed (Santosh Shilimkar)  [Orabug: 24326732]  
  - ext4: update c/mtime on truncate up (Eryu Guan)  [Orabug: 24325361]  
  - vfs: add vfs_select_inode() helper (Miklos Szeredi)  [Orabug: 24009788]  {CVE-2016-6198} {CVE-2016-6197} 
  - vfs: rename: check backing inode being equal (Miklos Szeredi)  [Orabug: 24009788]  {CVE-2016-6198} {CVE-2016-6197} 
  - ovl: verify upper dentry before unlink and rename (Miklos Szeredi)  [Orabug: 24009788]  {CVE-2016-6198} {CVE-2016-6197} 
  - xen-pciback: mark device to be hidden on AER error trigger (Elena Ufimtseva)


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> 3.9.1-10
changelog:
  - Fix parsing of FTP 213 responses.
  - Resolves: bug#970262
  - Set proper errcode when raising URLGRabError.
  - Resolves: bug#1271242


author: James Antill <james@fedoraproject.org> 3.0.0-8
changelog:
  - Tweak progress output so it's hopefully less confusing
  - Add dynamic resizing ability to progress bar
  - Resolves: bug#437197


author: James Antill <james@fedoraproject.org> 3.0.0-7
changelog:
  - Fix reget's against servers that don't allow Range requests, also tweaks
  - reget == check_timestamp, if anyone/thing uses that.
  - Resolves: bug#435156
  - Fix minor typo in progress for single instance.


author: James Antill <james@fedoraproject.org> 3.0.0-6
changelog:
  - Fix the ftp byterange port problem:
  - Resolves: bug#419241
  - Fixup the progress UI:
  -   add function for total progress
  -   add total progress percentagee current download line
  -   add rate to current download line
  -   use dead space when finished downloading
  -   don't confuse download rate on regets.


author: Aron Silverton <aron.silverton@oracle.com> - 1.0.20-1.0.6
changelog:
  - BUILDINFO: commit=b2eb08c189ca5cf300587af40265460418a117c9
  - librdmacm: Release v1.0.20-1.0.6 (Aron Silverton)  
  - Revert "Use ibacm only if env variable LIBRDMACM_USES_IBACM is set" (Aron Silverton)


author: Aron Silverton <aron.silverton@oracle.com> - 1.0.20-1.0.5
changelog:
  - BUILDINFO: commit=b9e9c2acd345f4b2fa6de3c94dca85cd4a11ea0d
  - librdmacm: WORKAROUND: Disable use of ibacm (Aron Silverton)  
  - Use ibacm only if env variable LIBRDMACM_USES_IBACM is set (Avinash Repaka)


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 1.0.20-1.0.4
changelog:
  - BUILDINFO: commit=027663fe4ca15b643685c32cb154b2d4aac4e8ea
  - librdmacm: Bump release number for updates (Mukesh Kacker)  
  - librdmacm: Remove atexit and destructors (Jason Gunthorpe)  
  - librdmacm: consolidate spec files for ol6,ol7 that are identical (Mukesh Kacker)


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 1.0.20-1.0.3
changelog:
  - librdmacm: bump up release number (Mukesh Kacker)  
  - librdmacm: Oracle UEK2 XRC API usage binary compatibility (Amarnath Jolad)  
  - librdmacm: XRC binary compatibility patch (Amarnath Jolad)


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 1.0.20-1.0.2
changelog:
  - librdmacm: bump release number to rebuild with new headers (Mukesh Kacker)  
  - librdmacm: add support for Oracle Linux 7 (OL7) builds (Mukesh Kacker)


author: Ke-Chiang Chen <ke-chiang.chen@oracle.com> - 1.0-79
changelog:
  - Fix devmon failed to acquire multipath path devices
    patch_nmae: devmon_acquire_pathdevs.patch
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Carson Hovey <carson.hovey@oracle.com> [bug 19474225]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 1.0-48
changelog:
  - Since bond interfaces do not have hardware sensing of their own , use IFF_UP and IFF_RUNNING
    to determine its status. [bug 17952899]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 1.0-28
changelog:
  - re-write the link state detection code to handle virtual nics link state correctly  (enics). [bug 14402887]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 1.0-22
changelog:
  - Changed devmon to use the interface flags (IFF_UP,IFF_DOWN) to determine
    bond link change instead of ethtool/or MII, as bond interfaces are logical
    and their link state can not be detected. [bug 12904169]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 1.0-20
changelog:
  - change license to gplv2
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 12737215]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 1.0-17
changelog:
  - Remove code that handle a case of REM_DM processing which is not applicable to OVS.
    It causes extra empty REM_DM messages be sent while they where already handled [bug 12426402]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 1.0-16
changelog:
  - I used iscsiadm -m node -p 10.196.210.25 --login/logout over 50 times to present/un-present
    10 ISCSI LUNs. The result was good every time. If you still see a missing ADD_SD,
    then I will needed your test environment for a few hours. [bug 12573959]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 1.0-13
changelog:
  - give multipathd a chance to catch up first fefore sending ADD SD otherwise we 
  may miss the event. [bug 12573959]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 1.0-12
changelog:
  - Devmon does not fork python processes to storage_discover any more. This should
    reduce the amount of memory consumed during LUN present/un-present.
    The test should be repeated to see how much was gained.
    OraclBug:12418855


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 1.0-11
changelog:
  - A connection time is a result of a bad connection to the target, which caused devmon
    to exit at start up time. I changed the logic so that devmon will not exit and tries
    again during its main loop. [bug 11878958]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 1.0-7
changelog:
  - Stop the reaper thread from running, it is removing the DMs after all the SDs under it are gone.
    This is not needed for this product.


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 1.0-6
changelog:
  - Fix xenstored hang which made xend appears to be hanging. The problem was caused by
    devmon excessive access to xenstored that left many xenstored handle open.
    orabug:10155532


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 1.0-4
changelog:
  - Redirect PyErr_Print output to a string to catch agent_notify exception
    start devmon automatically at boot time.


author: Cathy Avery <cathy.avery@oracle.com> - 1.0-2
changelog:
  - devmon was routing udev events to udev2multipathd daemon so it would not see
  the storage or iscsi events.


author: Ilya Okomin <ilya.okomin@oracle.com> - 3.14.3-23.3.0.1
changelog:
  - Add fips140-2 DSA Known Answer Test fix [Orabug 26696773]
  - Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug 26617866],
    [Orabug 26617833], [Orabug 26617780]
  - Add fips140-2 ECDSA Known Answer Test fix [Orabug 26696762]
  - Add fips140-2 RSA Key Generation fix [Orabug 26618348]
  - Add fips140-2 AES Key Wrap fix [Orabug 26617904]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-23
changelog:
  - Pick up upstream freebl patch for CVE-2015-2730
  - Check for P == Q or P ==-Q before adding P and Q


author: Bob Relyea <rrelyea@redhat.com> - 3.14.3-21
changelog:
  - Require nss-softokn-freebl of at least the same version and release
  - Resolves: Bug 1182662 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-15
changelog:
  - Fix shlibsign to return non-zero on failure
  - Resolves: Bug 587634 - shlibsign returns 0 although if fails


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-12
changelog:
  - Avoid call to sdb_measureAccess in lib/softoken/sdb.c s_open if NSS_SDB_USE_CACHE is "yes" or "no"
  - Resolves: Bug 1044666 - Can curl HTTPS requests make fewer access system calls?


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-11
changelog:
  - Skip calls to CHECK_FORK in {C & NSC}_GetFunctionList
  - Resolves: Bug 1053437 - Admin server segfault when configuration DS configured on SSL port


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-8
changelog:
  - Enable new packaging but don't apply nss-fips-post.patch
  - Related: rhbz#1008513 - Unable to login in fips mode


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-7
changelog:
  - Fix the PR_Access stub to actually access the correct permissions
  - Resolves: rhbz#1008513 - Unable to login in fips mode
  - Run the lowhash tests
  - Require nspr-4.0.0 and nss-util-3.15.1


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-6
changelog:
  - create -fips packages 
  - patch submitted by Bob Relyea <rrelyea@redhat.com>
  - fix the script that splits softoken off from nss
  - patch nss/cmd/lib/basicutil.c to build against nss-util-3.15.1
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released
  - Display cpuifo as part of the tests and make NSS_DISABLE_HW_GCM the environment variable to test for
  - When appling the patches use a backup file suffix that better describes the patch purpose


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Enable ECC support for suite b and add upstream fixes for aec gcm
  - Use the unstripped upstream sources with ecc support
  - Limit the ECC support to suite b
  - Apply several upstream aes gcm fixes
  - Rename macros EC_MIN_KEY_BITS and EC_MAX_KEY_BITS per upstream
  - Resolves: rhbz#960208 - Enable ECC in nss-softoken
  - Related: rhbz#919172


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Add patch to conditionally compile according to old or new sqlite api
  - new is used on rhel-6 while rhel-5 uses old but we need the same code for both
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib64 before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0


author: Elio Maldonado - 3.12.9-12
changelog:
  - Bootstrapping of the builroot in preparation for rebase to 3.14.3
  - Remove hasht.h from the %files devel list to prevent update conflicts with nss-util
  - With 3.14.3 hasht.h will be provided by nss-util-devel
  - Related: rhbz#919172 - rebase nss-softokn to 3.14.3


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-4
changelog:
  - Resolves: rhbz#710298 - fix intel optimized aes code to handle case where input and ouput are in the same buffer


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-2.1
changelog:
  - Don't enable FIPS when CONFIG_CRYPTO_FIPS=n
  - Fix typo in the package description
  - Fix capitalization error in prelink conflict statement
  - Require nspr 4.8.4


author: Elio Maldonado <emaldona@redhat.com> - 3.12.4-16
changelog:
  - allow prelink of softoken and freebl. Change the verify code to use
    prelink -u if prelink is installed. Fix by Robert Relyea


author: Elio Maldonado <emaldona@redhat.com> - 3.12.4-11
changelog:
  - Move libfreebl3.so and its .chk file to /lib{64} keeping
  - symbolic links to them in /usr/lib{64} so as not break others


author: Than Ngo <than@redhat.com> - 2.4-1
changelog:
  - update to 1.0.7pre43, changed Roman glyphs in all fonts back
    to original metrics. bz#243180, bz#138896, bz#140584
  - cleanup BR, bz#227297
  - drop chkfontpath dependency and use the catalogue font path mechanism


author: Than Ngo <than@redhat.com> 2.3-5
changelog:
  - fix the mkfontdir issue for modular X
  - remove unneeded -e option from mkfontdir
  - add Prereq on mkfontdir


author: Than Ngo <than@redhat.com> 2.2-1
changelog:
  - Upgrade to upstream version 1.0.7pre26, bug #122500
  - drop NimbusRomNo9L-Medi* fonts that are included in pre26


author: Owen Taylor <otaylor@redhat.com> 2.1-1
changelog:
  - Upgrade to upstream version 1.0.7pre22
  - Massive cleanups to fonts.dir/fonts.scale handling (use mkfontscale
    instead of fonts.scale from the package, etc.)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Newer upstream version
  - Fix accidental revert of urw-fontspecific => adobe-fontspecific change
  - Tweak hints in "Nimbus Sans Regular L" a bit.


author: Than Ngo <than@redhat.com> 2.0-19
changelog:
  - update urw fonts
  - add missing ZapfDingbats font (bug #65101, #65523)
  - fixed metric troubles (bug #65522)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - use adobe-fontspecific instead of urw-fontspecific encoding name for 
    symbol font.  Fixes some java issues.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - added missing fonts.dir, fonts.scale, %post, %postun using chkfontpath
  - changed foundary from Adobe (which was a lie) to URW.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - eliminated section that adds to XF86Config
  - changed fonts to reside in /usr/share/fonts/default/URW, so they can be
    shared between X and Ghostscript (and other, future programs/applications)


author: Michal Minar <miminar@redhat.com> 0.233-7.9
changelog:
  - updated pci.ids, usb.ids, oui.txt
  - Resolves: #739816, #739819, #739821, #739824
  - Resolves: #739825, #760031, #830253, #839221, #841423


author: Karsten Hopp <karsten@redhat.com> 0.233-7
changelog:
  - bump release
  - update oui.txt URL
  - fix tarball name in spec file
  - update usb.ids, out.txt and pci.ids


author: Karsten Hopp <karsten@redhat.com> 0.232-1
changelog:
  - update usb.ids, out.txt and pci.ids (#550020, #611860)
  - fix incorrect syntax doc/comment in blacklist.conf (Ville Skyttä, #532802)
  - add Acer B243HL and BenQ G2420HDBL (Ville Skyttä, #590787)
  - add HP LP2475w and Samsung 2494HM (Ville Skyttä, #595059)


author: Karsten Hopp <karsten@redhat.com> 0.223-1
changelog:
  - update usb.ids pci.ids oui.txt
  - rename /etc/modprobe.d/blacklist to /etc/modprobe.d/blacklist.conf


author: Karsten Hopp <karsten@redhat.com> 0.220-1
changelog:
  - add new monitor entries from Mandriva hardware database (Thierry Vignaud)
  - make generic entries have properly formated frequencies (Thierry Vignaud)
  - remove duplicate Dell monitor entries (Thierry Vignaud)
  - more vendor name fixes
  - fix extra field in 'Compudyne KD-1500N' definition (Thierry Vignaud)
  - make Dell monitors case consistent (Thierry Vignaud)
  - make all GoldStar monitors have the same vendor name (Thierry Vignaud)
  - add URL of git repository
  - fix spacing (Thierry Vignaud)
  - sort MonitorDB file with LANG=C sort -f -t ";" -k1,2
  - add Samsung SyncMaster 2443BWX (Marc van den Dikkenberg)
  - add some Lenovo monitors (Im Sza)


author: Karsten Hopp <karsten@redhat.com> 0.220-1
changelog:
  - update pci.ids, usb.ids, oui.txt
  - MonitorsDB: add some Samsung monitors (Ronald Warsow)
  - MonitorsDB: add Dell E1609W (Matt Domsch)
  - MonitorsDB: add 7 Dell monitors (Matt Domsch)
  - MonitorsDB: add a bunch of Hyundai and ImageQuest monitors


author: Karsten Hopp <karsten@redhat.com> 0.217-1
changelog:
  - update pci.ids, oui.txt
  - update usb.ids, fixes #439963
  - add HP w1907 LCD monitor, fixes #431359
  - fix many monitor entries (Stanislav Ievlev, #430276)


author: Karsten Hopp <karsten@redhat.com> 0.212-1
changelog:
  - pull new upstream pci.ids, usb.ids
  - Resolves: #300831
  - added HP TFT5600 LCD Monitor
  - Resolves: #250569
  - added Acer AL1916W, Eizo L568/L568D, Samsung 795DF
  - Resolves: #250582
  - Add Samsung 205BW/206BW/225BW/226BW
  - Resolves: #250584
  - Add Samsung 931BF
  - Resolves: #250587


author: Karsten Hopp <karsten@redhat.com> 0.207-1
changelog:
  - pull new upstream pci.ids and rebuild
  - Resolves: bz #251732
  - Resolves: bz #251734
  - Resolves: bz #252195
  - Resolves: bz #252196
  - Resolves: bz #241274


author: Karsten Hopp <karsten@redhat.com> 0.205-1
changelog:
  - really update pci.ids, update-pciids downloaded an old file
  - disable iwl4965 blacklist as it is not approved yet (#245379)


author: Karsten Hopp <karsten@redhat.com> 0.194-1
changelog:
  - Update to latest pci.ids/usb.ids for RHEL5
  - Resolves: #220182
    Add some Dell monitors to MonitorDB


author: Phil Knirsch <pknirsch@redhat.com> - 0.183-1
changelog:
  - Updated pci.ids before FC6 final (#198994)
  - Added several missing Samsung monitors (#197463)
  - Included a new inf2mondb.py from Matt Domsch (#158723)


author: Adam Jackson <ajackson@redhat.com> - 0.182-1
changelog:
  - Added ast driver description to videodrivers
  - Numerous Dell monitor additions (#196734)
  - Numerous Belinea monitor additions (#198087)


author: Adam Jackson <ajackson@redhat.com> - 0.181-1
changelog:
  - Updated videodrivers to mention i945
  - New monitors: Sony CPD-G420 (#145902), Compaq P1110 (#155120).


author: Jeremy Katz <katzj@redhat.com> - 0.171-1
changelog:
  - r128 -> ati.  should fix the unresolved symbol and kem says its more 
    generally the "right" thing to do


author: Bill Nottingham <notting@redhat.com>
changelog:
  - migrate mpt module names (#161420)
  - remove pcitable entries for drivers in modules.pcimap
  - switch lone remaining 'Server' entry - that can't work right


author: Bill Nottingham <notting@redhat.com> - 0.160-1
changelog:
  - move blacklist to /etc/modprobe.d, require new module-init-tools
  - add LG monitors (#162466, #161734)
  - add orinoco card (#161696)
  - more mptfusion stuff (#107088)


author: Bill Nottingham <notting@redhat.com> - 0.159-1
changelog:
  - pcitable: make branding happy (#160047)
  - Cards: add required blank line (#157972)
  - add some monitors
  - add JVC CD-ROM (#160907, <richard@rsk.demon.co.uk>)
  - add hisax stuff to blacklist (#154799, #159068)


author: Bill Nottingham <notting@redhat.com> 0.152-1
changelog:
  - fix qlogic driver mappings, add upgradelist mappings for the modules
    that changed names (#150621)


author: Mike A. Harris <mharris@redhat.com> 0.151-1
changelog:
  - Added one hundred billion new nvidia PCI IDs to pcitable and Cards to
    synchronize it with X.Org X11 6.8.2.  (#140601)


author: Bill Nottingham <notting@redhat.com> - 0.120-1
changelog:
  - mainly:
    fix upgradelist module for CMPci cards (#123647)
  - also:
    add another wireless card (#122676)
    add wireless card (#122625)
    add 1280x800 (#121548)
    add 1680x1050 (#121148)
    add IntelligentStick (#124313)


author: Bill Nottingham <notting@redhat.com> 0.116-1
changelog:
  - move updfstab.conf here
  - add wireless card (#116865)
  - add laptop display panel (#117385)
  - add clipdrive (#119928)
  - add travelling disk (#119143)
  - add NEXDISK (#106782)


author: Mike A. Harris <mharris@redhat.com> 0.110-1
changelog:
  - Added 3Dfx Voodoo Graphics and Voodoo II entries to the Cards database, both
    pointing to Alan Cox's new "voodoo" driver which is now included in XFree86
    4.3.0-62 and later builds in Fedora development.  Mapped their PCI IDs to
    the new Cards entry in pcitable.
  - Updated the entries for 3Dfx Banshee


author: Bill Nottingham <notting@redhat.com> 0.105-1
changelog:
  - many monitor updates (#114260, #114216, #113993, #113932, #113782,
    - add some PCMCIA cards (#113006, #112505)


author: Mike A. Harris <mharris@redhat.com> 0.99-1
changelog:
  - Added entries for Radeon 9600/9600Pro/9800Pro to Cards
  - Fixed minor glitch in pcitable for Radeon 9500 Pro


author: Mike A. Harris <mharris@redhat.com> 0.88-1
changelog:
  - Update MonitorsDB for new IBM monitors from upstream XFree86 bugzilla:
    http://bugs.xfree86.org/cgi-bin/bugzilla/show_bug.cgi?id=459


author: Mike A. Harris <mharris@redhat.com> 0.73-1
changelog:
  - Updated pcitable and Cards database to fix Savage entries up a bit, and
    change default Savage/MX driver to 'vesa' as it is hosed and with no sign
    of working in time for 4.3.0.  Fixes (#72476,80278,80346,80423,82394)


author: Mike A. Harris <mharris@redhat.com> 0.68-1
changelog:
  - Massive update of all ATI video hardware PCI IDs in pcitable and a fair
    number of additions and corrections to the Cards database as well


author: Mike A. Harris <mharris@redhat.com> 0.65-1
changelog:
  - Added Card:S3 Trio64V2 (Unsupported RAMDAC) entry to pcitable, pci.ids, and
    Cards database to default this particular variant to "vesa" driver (#81659)


author: Mike A. Harris <mharris@redhat.com>
changelog:
  - Complete reconstruction of all Neomagic hardware entries in Cards
    database to reflect current XFree86, as well as pcitable update,
    and submitted cleaned up entries to sourceforge


author: Bill Nottingham <notting@redhat.com> 0.61-1
changelog:
  - move pcmcia config file here
  - sort MonitorsDB, add some entries, remove dups
  - switch some network driver mappings


author: Bill Nottingham <notting@redhat.com> 0.44-1
changelog:
  - fix some of the Dell entries
  - add cardbus controller id (#71198)
  - add audigy mapping
  - add NEC monitor (#71320)


author: Mike A. Harris <mharris@redhat.com> 0.37-1
changelog:
  - Changed Matrox G450 driver default options to fix bug (#66697)
  - Corrected S3 Trio64V2 bug in Cards file (#66492)


author: Mike A. Harris <mharris@redhat.com> 0.35-1
changelog:
  - Updated Cards db for CT69000
  - Various ATI cleanups and additions to Cards and pcitable
  - Updated S3 Trio3D to default to "vesa" driver (#59956)


author: Bill Nottingham <notting@redhat.com> 0.33-1
changelog:
  - Eizo monitor updates (#56080, <triad@df.lth.se>)
  - pci.ids updates, corresponding pcitable updates
  - pcilint for pcitable


author: Mike A. Harris <mharris@redhat.com> 0.31-1
changelog:
  - Modified ATI entries in pcitable to be able to autodetect the FireGL 8700
    and FireGL 8800 which both have the same ID, but different subdevice ID's.
    Added entries to Cards database for the 8700/8800 as well.


author: Mike A. Harris <mharris@redhat.com> 0.30-1
changelog:
  - Reconfigured Cards database to default to XFree86 4.x for ALL video
    hardware, since 3.3.6 support is being removed.  Video cards not
    supported natively by 4.x will be changed to use the vesa or vga
    driver, or completely removed as unsupported.


author: Qing Huang <qing.huang@oracle.com> - 3.10-3.0.21
changelog:
  - use a dedicated log file for rdma init script to save logging data as we cannot
    use "logger" program before rsyslog service gets started. 
    [orabug 21787428]
  - workaround for delayed vm event handling in dom0 which causes VF interfaces
    to stay in down state in vm(s) after a soft reboot [orabug 21028539]
  - imagetool bin exe path fix for EXD [orabug 21787452]
  - imagetool bin exe path fix for BDA [orabug 21787471]
  - Set "MLX4_XEN_FMR_LOAD=yes" and "MLX4_VNIC_LOAD=yes" in rdma.conf per BDA request
    (reverse changes made in *.15, so *.21 and *.14 would have the same default settings)
    [orabug 21787521]


author: Chien Yen <chien.yen@oracle.com> - 3.10-3.0.15
changelog:
  - Add OVM support for ODA and BDA
  - Set "MLX4_XEN_FMR_LOAD=no" and "MLX4_VNIC_LOAD=no" in rdma.conf
  - Orabug 20643875
  - Make stop/restart NOP because of 20048920 and 19665303 [orabug 20543899]
  - update rdma.connectx_port_config to detect the MLX pci [orabug 20543874]


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 3.10-3.0.7
changelog:
  - Implement handling of user generated device name for pkey devices using
    new create_named_child interface in ipoib [ Orabug: 19477360 ]
  - Fix bug in unset invocation for bond MASTER/SLAVE variables
    [ Orabug 19524450 ]


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 3.10-3.0.6
changelog:
  - CATCHUP with openibd bugfixes in OL5 (Details below)
    Orabug: 19137471 
  - Move mlx4 alias in rdma to rdma.mlx4_en.conf
    (OL5 orabug 16859554, partial openibd 4.0.4)
  - load rds_rdma after bringing up the IB interfaces
    (OL5 orabug 16789580, openibd 4.0.5 and openibd 4.0.6)
  - Addm mlx4_en to blacklist to prevent warning message load mlx4_en
    (OL5 orabug 13815605, openibd 4.0.7)
  - Change openib init script to support "alias rds rds_rdma" in modprobe
    (openibd 4.0.10 and 4.0.11)
  - Fix get_interfaces() in openib.init for supporting multiple HCAs (openibd 4.0.12)
  - Add echo to unload_module() [ openibd 4.0.13 and openibd 4.0.14 ]
  - openibd needs to wait for interfaces in ifconfig with async ib module init
    (OL5 Orabug: 18483921; openibd 4.0.16)
  - Set default HCA mode to IB (openibd 4.0.18)


author: Mukesh Kacker <mukesh.kacker@oracle.com> - 3.10-3.0.5
changelog:
  - Run sysctl.conf in start() so arp response settings in place before IP live on IB interfaces.
  - Orabug: 18400003


author: Chien Yen <chien.yen@oracle.com> - 3.10-3.0.2
changelog:
  - Include mlx4 driver in rdma.conf
  - Change conf dir for mlx4_vnic_confd and connectx_port_config too /etc/rdma


author: Joe Jin <joe.jin@oracle.com> - 3.10-3.0.1
changelog:
  - Append mlx4_* module parameters when insmod the modules [orabug 17429249] (Joe Jin)
  - Delay load mlx4_* to prevent hung when start udev. [orabug 16897608] (Joe Jin)
  - Fix FMR load, persistent ib0 subinterfaces, remove kudzu dependency (Chien Yen)
  - Add SDP to rdma.conf and rdma.init (Chien Yen)
  - Support Mellanox OFED 1.5.5 (Chien Yen)


author: Doug Ledford <dledford@redhat.com> - 3.10-2
changelog:
  - Somehow during editing I accidentally deleted a single character from
    the post scriptlet.  rpmdiff caught it, now I'm fixing it.
  - Resolves: bz990288


author: Doug Ledford <dledford@redhat.com> - 3.10-1
changelog:
  - Bump version to match final kernel submission
  - Add support for P_Key interfaces to ifup-ib and ifdown-ib


author: Doug Ledford <dledford@redhat.com> - 3.3-4
changelog:
  - Fix an issue in the ifup-ib script
  - Fix a problem with the setting of infiniband dev perms
  - Resolves: bz834428


author: Doug Ledford <dledford@redhat.com> - 3.3-3
changelog:
  - The fix to bug 808600 was noisy and resulted in bug 815999,
    silence the script
  - Resolves: bz815999


author: Doug Ledford <dledford@redhat.com> - 3.3-1
changelog:
  - Fix an issue in the rdma script that caused rds_rdma to load
    when it shouldn't
  - Resolves: bz815622


author: Doug Ledford <dledford@redhat.com> - 1.0-20
changelog:
  - Name the cards slightly differently (upstream request)
  - Check for the ibacm program before trying to down the stack
  - Resolves: bz808600


author: Doug Ledford <dledford@redhat.com> - 1.0-17
changelog:
  - Don't do lsmod in the %post script looking for ib_ipoib, anaconda
    loads it unconditionally.  Instead, anaconda has been modified to
    enable our init script if it installed over an IPoIB interface, so
    simply remove that portion of our %post script.
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 1.0-16
changelog:
  - If we are being installed on a machine that has ib_ipoib module loaded,
    then this is likely because it is a machine being installed over IPoIB,
    so enable our init script
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 1.0-15
changelog:
  - No longer provide a rules file to create infinband devices, the kernel
    now creates them in the proper place all by itself
  - Change the LSB headers in the init script, they were wrong
  - Related: bz739138


author: Doug Ledford <dledford@redhat.com> - 1.0-14
changelog:
  - Clear the umask before loading kernel modules otherwise the kernel
    modules inherit our umask and don't create the /dev/infiniband
    files with the proper permissions.
  - Resolves: bz748087


author: Doug Ledford <dledford@redhat.com> - 1.0-13
changelog:
  - Default to not loading the RDS stack by default as it has some known
    issues at the moment.
  - Resolves: bz747378


author: Doug Ledford <dledford@redhat.com> - 1.0-10
changelog:
  - Fix ifup-ib script to be compatible with change to core function
    expand_config
  - Fix renaming of ib? devices to the name given in the ifcfg-* file
  - Fix the fact that once you down the rdma stack and reload it, the
    HWADDR line in ifcfg-* files no longer matches the address of the
    ports.  We now match only on the part of the HWADDR that doesn't
    change.
  - Fix rdma init script to know about cxgb4 adapters
  - Fix rdma init script to find all InfiniBand interfaces whether they
    use an ib? name or a custom name
  - Fix rdma init script to down all InfiniBand interfaces on rdma shutdown
    regardless of interface name
  - Fix rdma init script to find all ifcfg-* files that apply to ipoib
    interfaces without requiring that they be named ib?
  - Fix rdma init script to know to unload ib_qib module on stop
  - Add an ifdown-ib file that fixes the HWADDR not matching on the second
    or later times you down the rdma subsystem
  - Related: bz725016
  - Resolves: bz678947, bz721101


author: Doug Ledford <dledford@redhat.com> - 1.0-9
changelog:
  - Minor tweak to rdma init script to do the udevadm trigger command in two
    seperate calls since we can no longer match on the same item twice and
    have the command succeed for both match types.
  - Resolves: bz612234


author: Doug Ledford <dledford@redhat.com> - 1.0-8
changelog:
  - Update udev rules syntax to eliminate warnings emitted via syslog (bz603264)
  - Add new init script for starting/stopping nfs over rdma support
  - Require that the nfs-rdma service be down before stopping the rdma
    service (bz613437)
  - Change ifup-ib to properly account for the fact that the [ test program
    does not process tests in order and fail immediately on first failing
    test, resulting in error messages due to unquoted environment variables
    that don't need quoting in the second test due to the fact that the
    first test guarantees they exist.  Or that's how things should be, but
    they aren't, so rewrite tests to accommodate this fact. (bz612284)
  - Use ip instead of ifconfig as ifconfig knows it doesn't handle infinband
    hardware addresses properly (even though we don't care, we aren't using
    it for that) and prints out copious warning messages (bz613086)
  - Related: bz612284, bz613086


author: Doug Ledford <dledford@redhat.com> - 1.0-7
changelog:
  - Require a version of udev that's known to contain udevadm and support
    usage of udevadm trigger and udevadm settle
  - Update rdma.init to use the proper udev commands
  - Resolves: bz586594


author: Doug Ledford <dledford@redhat.com> - 1.0-6
changelog:
  - Tweak init script for LSB compliance
  - Tweak ifup-ib script to work properly with bonded slaves that need their
    MTU set
  - Tweak ifup-ib script to properly change connected mode either on or off
    instead of only setting it on but not turning it off if the setting changes


author: Doug Ledford <dledford@redhat.com> - 1.0-2
changelog:
  - Attempt to use --subsystem-match=infiniband in the rdma init script use
    of udevtrigger so we don't trigger the whole system
  - Add a requirement to stop opensm to the init script


author: Knut Omang <knut.omang@oracle.com> - 1.1.8-1.0.2.el6
changelog:
  - Provide remote XRC SRQ number in kernel post_send. (Knut Omang)  
  - Add padding to get proper end alignment of ibv_reg_mr_resp (Knut Omang)  
  - Add new call ibv_cmd_create_ah_ex which allows extra parameters to be passed through (Knut Omang)  
  - libibverbs: bump kernel version depedency for psif patches (Mukesh Kacker)


author: Roland Dreier <rdreier@cisco.com> - 1.1.2-1
changelog:
  - New upstream release
  - Update description to mention RDMA and iWARP, not just InfiniBand
  - Add "Requires" tag for libibverbs base package to -devel


author: Roland Dreier <rdreier@cisco.com> - 1.1-0.1.rc2
changelog:
  - New upstream release
  - Remove dependency on libsysfs, since it is no longer used
  - Put section 3 manpages in devel package.
  - Spec file cleanups: remove unused ver macro, improve BuildRoot, add
    Requires for /sbin/ldconfig, split static libraries into
    devel-static package, and don't use makeinstall any more (all
    suggested by Doug Ledford <dledford@redhat.com>).


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-105.0.50.el6
changelog:
  - BUILDINFO: xen commit=67e64eec4bfe342ca6c2ff0858ae7f5c39041013
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/HVM: Restart ioreq processing state machine (Boris Ostrovsky)  [Orabug: 28192905]


author: Dongli Zhang <dongli.zhang@oracle.com> - 4.4.4-105.0.49.el6
changelog:
  - BUILDINFO: xen commit=7e4f43226d60a48df300b32ce60ecff75ce2612d
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - svm: fix incorrect TSC scaling (Haozhong Zhang)  [Orabug: 28189188]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-105.0.48.el6
changelog:
  - BUILDINFO: xen commit=ba8e4ae04e3594470f9ce1663135fbe8c25106af
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spec-ctrl: Mitigations for LazyFPU (Ross Philipson)  [Orabug: 28135217]  {CVE-2018-3665}
  - x86: Support fully eager FPU context switching (Andrew Cooper)  [Orabug: 28135217]  {CVE-2018-3665}


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-105.0.47.el6
changelog:
  - BUILDINFO: xen commit=312880584fe084de632a6667254a5cc1c846179e
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - [xenmicrocode] Fix error reporting on successful return from tool (Ross Philipson)  [Orabug: 28128506] 
  - x86: correct default_xen_spec_ctrl calculation (Jan Beulich)  [Orabug: 28034172] 
  - x86/msr: Virtualise MSR_SPEC_CTRL.SSBD for guests to use (Andrew Cooper)  [Orabug: 28034172]  {CVE-2018-3639}
  - x86/Intel: Mitigations for GPZ SP4 - Speculative Store Bypass (Andrew Cooper)  [Orabug: 28034172]  {CVE-2018-3639}
  - x86/AMD: Mitigations for GPZ SP4 - Speculative Store Bypass (Andrew Cooper)  [Orabug: 28034172]  {CVE-2018-3639}
  - x86/spec_ctrl: Introduce a new `spec-ctrl=` command line argument to replace `bti=` (Andrew Cooper)  [Orabug: 28034172]  {CVE-2018-3639}
  - x86/cpuid: Improvements to guest policies for speculative sidechannel features (Andrew Cooper)  [Orabug: 28034172]  {CVE-2018-3639}
  - x86/spec_ctrl: Explicitly set Xen's default MSR_SPEC_CTRL value (Andrew Cooper)  [Orabug: 28034172]  {CVE-2018-3639}
  - x86/spec_ctrl: Split X86_FEATURE_SC_MSR into PV and HVM variants (Andrew Cooper)  [Orabug: 28034172]  {CVE-2018-3639}
  - x86/spec_ctrl: Elide MSR_SPEC_CTRL handling in idle context when possible (Andrew Cooper)  [Orabug: 28034172]  {CVE-2018-3639}
  - x86/spec_ctrl: Rename bits of infrastructure to avoid NATIVE and VMEXIT (Andrew Cooper)  [Orabug: 28034172]  {CVE-2018-3639}
  - x86/spec_ctrl: Fold the XEN_IBRS_{SET,CLEAR} ALTERNATIVES together (Andrew Cooper)  [Orabug: 28034172]  {CVE-2018-3639}
  - x86/spec_ctrl: Merge bti_ist_info and use_shadow_spec_ctrl into spec_ctrl_flags (Andrew Cooper)  [Orabug: 28034172]  {CVE-2018-3639}
  - x86/spec_ctrl: Express Xen's choice of MSR_SPEC_CTRL value as a variable (Andrew Cooper)  [Orabug: 28034172]  {CVE-2018-3639}
  - x86/spec_ctrl: Read MSR_ARCH_CAPABILITIES only once (Andrew Cooper)  [Orabug: 28034172]  {CVE-2018-3639}
  - x86/spec_ctrl: Assume that STIBP feature is always available (Boris Ostrovsky)  [Orabug: 28034172]  {CVE-2018-3639}
  - x86/spec_ctrl: Updates to retpoline-safety decision making (Andrew Cooper)  [Orabug: 28034172]  {CVE-2018-3639}


author: Tianyue Lan <tianyue.lan@oracle.com> - 4.4.4-105.0.46.el6
changelog:
  - BUILDINFO: xen commit=dc770041d983843c860c06d405054c0e01a4fd98
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - one-off build


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-105.0.45.el6
changelog:
  - BUILDINFO: xen commit=dc770041d983843c860c06d405054c0e01a4fd98
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Red-tape: Update the repo with CVE XSA-262 (Boris Ostrovsky)  [Orabug: 27948886]  {CVE-2018-10981}
  - Red-tape: Update the repo with CVE XSA-261 (Boris Ostrovsky)  [Orabug: 27948879]  {CVE-2018-10982}
  - x86/HVM: guard against emulator driving ioreq state in weird ways (Jan Beulich)  [Orabug: 27948886] 
  - x86/vpt: add support for IO-APIC routed interrupts (Xen Project Security Team)  [Orabug: 27948879]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-105.0.44.el6
changelog:
  - BUILDINFO: xen commit=509b72c59322d8418db1ba59773a7c05eaf52369
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/paging: don't unconditionally BUG() on finding SHARED_M2P_ENTRY (Jan Beulich)  [Orabug: 27185385]  {CVE-2017-17565}
  - x86/mm: don't wrongly set page ownership (Jan Beulich)  [Orabug: 27185991]  {CVE-2017-17566}
  - misc/xenmicrocode: Upload /lib/firmware/<some blob> to the hypervisor (Konrad Rzeszutek Wilk)  [Orabug: 27957829]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-105.0.43.el6
changelog:
  - BUILDINFO: xen commit=0d94c746fadb8e3ff435220db9079279b22fa56b
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/traps: Fix handling of #DB exceptions in hypervisor context (Andrew Cooper)  [Orabug: 27923234]  {CVE-2018-8897}
  - x86/traps: Use an Interrupt Stack Table for #DB (Andrew Cooper)  [Orabug: 27923234]  {CVE-2018-8897}
  - x86/pv: Move exception injection into {,compat_}test_all_events() (Andrew Cooper)  [Orabug: 27923234]  {CVE-2018-8897}
  - x86/traps: Fix %dr6 handing in #DB handler (Andrew Cooper)  [Orabug: 27923234]  {CVE-2018-8897}
  - x86/traps: Misc non-functional improvements to set_debugreg() (Andrew Cooper)  [Orabug: 27923234]  {CVE-2018-8897}
  - x86/pv: Several bugs in set_debugreg() (Ross Philipson)  [Orabug: 27923234]  {CVE-2018-8897}
  - x86/pv: The do_get_debugreg CR4.DE condition is inverted. (Ross Philipson)  [Orabug: 27923234]  {CVE-2018-8897}


author: Dongli Zhang <dongli.zhang@oracle.com> - 4.4.4-105.0.42.el6
changelog:
  - BUILDINFO: xen commit=962d0381b8ffca399a909a6fac965dfce87b6bb1
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xenstore: add assertion in database dumping code (Wei Liu)  [Orabug: 27791950] 
  - xenstore: send error earlier in do_mkdir (Wei Liu)  [Orabug: 27791950] 
  - xenstore: add memory allocation debugging capability (Juergen Gross)  [Orabug: 27791950] 
  - xenstore: use temporary memory context for firing watches (Juergen Gross)  [Orabug: 27791950] 
  - xenstore: add explicit memory context parameter to get_node() (Juergen Gross)  [Orabug: 27791950] 
  - xenstore: add explicit memory context parameter to read_node() (Juergen Gross)  [Orabug: 27791950] 
  - xenstore: add explicit memory context parameter to get_parent() (Juergen Gross)  [Orabug: 27791950] 
  - xenstore: call each xenstored command function with temporary context (Juergen Gross)  [Orabug: 27791950] 
  - cxenstored: document a bunch of short options in help string (Wei Liu)  [Orabug: 27791950]


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-105.0.41.el6
changelog:
  - BUILDINFO: xen commit=8ecebf1da3cf4be39839524720931fa7e2f1b8c4
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - hvmloader: Initialize a variable before we use it (Patrick Colp)  [Orabug: 27751151] 
  - x86/spectre: Make retpoline code match upstream version (Patrick Colp)  [Orabug: 27694491] [Orabug: 27751440] 
  - x86/traps/spectre: Fix IO emulation stub code (Boris Ostrovsky)  [Orabug: 27693422] [Orabug: 27751440]  {CVE-2017-5715}
  - xen/x86: Make sure identify_cpu() is called with traps enabled (Joao Martins)  [Orabug: 27629051] [Orabug: 27751440]


author: Aron Silverton <aron.silverton@oracle.com> - 4.8.0-2.0.2
changelog:
  - BUILDINFO: commit=493b5b881f236e4719c22ff815e2c06845eea758
  - mstflint: Add support for secure boot system (Aron Silverton)


author: Aron Silverton <aron.silverton@oracle.com> - 4.8.0-2.0.1
changelog:
  - BUILDINFO: commit=e1d4e0336d9af420a7c9a5590979fadbf53a50d9
  - mstflint: Add support for secure boot system


author: Ke-Chiang Chen <ke-chiang.chen@oracle.com> 2.0.16-1.100.3.el6
changelog:
  - Port fix from OL6U9 OraBug 26386379 [OraBug: 27759313]
  - Strip kernel modules which are not signed, but do not touch signed modules


author: Brian Maly <brian.maly@oracle.com> - 2.0.7-1.100.8.el6.1
changelog:
  - Add support for NVME devices [Orabug: 23066567] [Orabug: 20970971]
  - Fix dm node control device creation


author: Ke-Chiang Chen <ke-chiang.chen@oracle.com> - 2.0.7-1.100.1
changelog:
  - use stable kexec-tools-2.0.7 and makedumpfile-1.5.7,
  - apply some generic patches to makedumpfile-1.5.7. [bug 20061349] 
  - Add nfsv3 support for mkdumprd [Orabug: 18152290]
  - Fix dump vmcore on ext3 partitions [Orabug: 18187563]
  - Fix ssh key gen logic [Orabug: 18250359]
  - Log reason for failure if kdump fails to start [Orabug: 17966787]
  - Fix vmcore-dmesg [Orabug: 18177052] [Orabug: 18420754]
  - Support the -X option for makedumpfile [Orabug: 19885260]
  - Fix makedumpfile stall on systems with 6TB memory [Orabug: 20364744]
  - sadump: Support more than 16TB physical memory space [Orabug 20898729] (Baoquan He) {ELEA-2015-0811}
  - mkdumprd: Delete the dead code for blacklist and update man page, update default blacklist [Orabug: 21071452]
  - kdump.sysconfig.x86_64: Add acpi_no_memhotplug to kdump kernel [Orabug: 21071452]
  - Convert leftover "getent hosts" to "getent ahostsv4" [Orabug: 21071452]
  - starting kdump service after network, local fs and remote fs. [Orabug: 21071452]
  - Fix stall on failure in kdump init script [Orabug: 21111440]
  - kexec-tools: fix fail to find mem hole failure on i386 [Orabug: 21111440]


author: Daniel Kiper <daniel.kiper@oracle.com> - 2.0.4-1.100.5
changelog:
  - OVM do not use selinux so disable it for kdump too,
  - properly check that /mnt/selinux is mounted.


author: Daniel Kiper <daniel.kiper@oracle.com> - 2.0.4-1.100.3
changelog:
  - apply some Xen specific patches to kexec-tools-2.0.4, makedumpfile-1.5.4 and kdump scripts
    (fixes for 15844134, 15938733, 15959955, 17719441 and bugs not discovered earlier),
  - spec script does not add Kdump_not_supported_on_Xen_domU_guest flag to /etc/kdump.conf anymore.


author: Daniel Kiper <daniel.kiper@oracle.com> - 2.0.4-1.100.1
changelog:
  - use stable kexec-tools-2.0.4 and makedumpfile-1.5.4,
  - apply some generic and Xen specific patches to makedumpfile-1.5.4.


author: Vaughan Cao <vaughan.cao@oracle.com> 2.0.3-3.0.6.el6
changelog:
  - export DM_DISABLE_UDEV=1 to tell device mapper and lvm that there is no udev support in kdump initrd, and modify lvm.conf as well. [Orabug: 16561795]


author: Maxim Uvarov <maxim.uvarov@oracle.com> - 2.0.3-3.0.1.el6
changelog:
  - use mkdumprd;
  - update scripts and settings;
  - use stable kexec-tools-2.0.3 and makedumpfile-1.4.3;
  - add kdump.init check if it's 2.6.18, then we add --args-linux  argument to kexec tools. (This is required for old kernels.).;
  - added both nr_cpus=1 and maxcpus=1;
  - added mce=off for x86_64.


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.0-209.0.1.el6
changelog:
  - Make sure "--allow-missing" is effective by adding to MKDUMPRD_ARGS in
    kdump.sysconfig, kdump.sysconfig.i386, and kdump.sysconfig.x86_64 [12590865] [11678808]


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-197
changelog:
  - Add coordination between kdump and cluster fencing for long
    kernel panic dumps, resolve bug 585332. From Ryan O'Hara.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-107
changelog:
  - Include the patch from Cai, adding missed options to --help
    of makedumpfile. Resolves bug 606704.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-102
changelog:
  - If a symlink with the same name exists, remove it first before
    copying, so that extra_bins will be copied correctly.
    Resolves bug 611699.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-99
changelog:
  - Support btrfs, and move fs type check earlier so that
    mkdumprd will fail soon with unsupported fs type.
    Resolves bug 607515 and bug 607131.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-95
changelog:
  - Move modules from /lib into /lib/modules/`uname -r`, and
    regenerate modules.dep for them. Resolves bug 602033.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-92
changelog:
  - When there are multiple net dump targets, let the last one
    overwrite the previous ones, stop showing errors in this case.
    See comment #4 in bug 600607.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-87
changelog:
  - We don't need to escape '#' with "\#", otherwise '#' will be
    executed as a command before aliased. See comment #4 of bug 600896.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-86
changelog:
  - When there are double quotes in LABEL= in kdump.conf, findfs
    will not be able to find the correct label, we should allow
    quotes in LABEL= in kdump.conf because a label name may contain
    spaces. See comment #4 of bug 600611.


author: Amerigo Wang <amwang@redhat.com> - 2.0.0-78
changelog:
  - Forward patches from RHEL5, Resolves: bz 592312  600566
    600571  600572 600574 600575 600577 600578 600579 600581 600583
    600584  600585 600586 600588 600590 600591 600593 600594 600595
    600596 600597  600598 600599 600600 600601 600602 600604 600605
    600606 600607 600610 600611 600613 600896 602785  602905.


author: Neil Horman <nhorman@redhat.com> -2.0.0-56
changelog:
  - Added utsname support to makedumpfile for 2.6.32 (bz 556356)
  - Cleaned up some syntax in the changelog


author: Neil Horman <nhorman@redhat.com> 2.0.0-18
changelog:
  - Updated initscript to use mkdumprd2 if manifest is present
  - Updated spec to require dash
  - Updated sample manifest to point to correct initscript
  - Updated populate_std_files helper to fix sh symlink


author: Neil Horman <nhorman@redhat.com> - 1.102pre-6
changelog:
  - Bringing rawhide up to date with bugfixes from RHEL5
  - Adding patch to prevent kexec buffer overflow on ppc (bz 428684)


author: Neil Horman <nhorman@redhat.com> - 1.102pre-3
changelog:
  - Fix ARCH placement in kdump init script (bz 427201)
  - Fix BuildRequires
  - Fix Makedumpfile to build with new libelf


author: Neil Horman <nhorman@redhat.com> - 1.102pre-1
changelog:
  - Bumping kexec version to latest horms tree (bz 257201)
  - Adding trigger to remove initrds when a kernel is removed


author: Neil Horman <nhorman@redhat.com> - 1.101-58
changelog:
  - Updating kdump.init and mkdumprd with most recent RHEL5 fixes
  - Fixing BuildReq to require elfutils-devel-static


author: Jarod Wilson <jwilson@redhat.com> - 1.101-46
changelog:
  - ppc64 fixups:
    - actually build ppc64 binaries (bug 203407)
    - correct usage output
    - avoid segfault in command-line parsing
  - install kexec man page
  - use regulation Fedora BuildRoot


author: Neil Horman <nhorman@redhat.com> - 1.101-45
changelog:
  - fixed typo in mkdumprd for bz 202983
  - fixed typo in mkdumprd for bz 203053
  - clarified docs in kdump.conf with examples per bz 203015


author: Thomas Graf <tgraf@redhat.com> - 1.101-15
changelog:
  - Don't add kdump service by default, let the user manually add it to
    avoid everyone seeing a warning.


author: Thomas Graf <tgraf@redhat.com> - 1.101-10
changelog:
  - kdump7.patch
     o Remove elf32 core headers support for x86_64
     o Fix x86 prepare elf core header routine
     o Fix ppc64 kexec -p failure for gcc 4.10
     o Fix few warnings for gcc 4.10
     o Add the missing --initrd option for ppc64
     o Fix ppc64 persistent root device bug
  - Remove --elf32-core-headers from default configuration, users
    may re-add it via KEXEC_ARGS.
  - Remove obsolete KEXEC_HEADERS


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-8
changelog:
  - Fix the service stop case.  It was previously unloading the wrong kernel.
  - Implement the "restart" function.
  - Add the "irqpoll" option as a default kdump kernel commandline parameter.
  - Create a default kernel command line in the sysconfig file upon rpm install.


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-4
changelog:
  - Build for x86_64 as well.  Kdump support doesn't work there, but users
    should be able to use kexec.


author: Axel Thimm <Axel.Thimm@ATrpms.net> - 1.12.2-21
changelog:
  - Update to 1.12.2.
  - Create a fakeroot-libs subpackage so that the package is multilib
    aware (by Richard W.M. Jones <rjones@redhat.com>, see RH bug


author: Mike A. Harris <mharris@redhat.com> 1.0.3-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel >= 7.0-1" as xcursor.pc indicates
    "damageproto >= 1.0" is required.
  - Added "Requires: xorg-x11-proto-devel >= 7.0-1, libXfixes-devel" to devel
    package also, as per xcursor.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.2.1-1
changelog:
  - Updated libXdamage to version 1.0.2.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-1
changelog:
  - Updated libXdamage to version 1.0.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Jacob Wang <jacob.wang@oracle.com> - 9.03.49-1.0.1
changelog:
  - Adding correct bug numbers for patches in the previous tag. (ashish.samant@oracle.com)
  - Add check before calling install bonding driver [ Orabug 19897588 ] (ashish.samant@oracle.com)
  - Improve check for bond master in install bonding driver [ Orabug 18635119 ] (ashish.samant@oracle.com)
  - Add check before calling install bonding driver [ Orabug 18906188 ] (ashish.samant@oracle.com)
  - Set net.rds.ib.trigger_active_bonding on start (mukesh.kacker@oracle.com)
    after vlan interfaces brought up [ Orabug 19582525 ] (mukesh.kacker@oracle.com)
  - Set net.rds.ib.active_bonding on service start and stop (mukesh.kacker@oracle.com)
  - set-rds-ib-active_bonding.patch (mukesh.kacker@oracle.com) [ Orabug 19368427, Basebug 18492380 ]
  - Do not do rename related check if interface is vlan, bond or bridge.
    (John Haxby, Joe Jin) [17937709]
  - require /etc/oracle-release and oracle-logos [10211998]
  - add initscripts-oracle-enterprise.patch


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.47-1
changelog:
  - rc.sysinit: be more verbose
  - init.d/functions: rc.debug option to debug initscripts
  - ifup-aliases: inherit ARPCHECK from parent device
  - netfs: don't race NFS umount to network shutdown
  - network: report that we can't shut down network for root on netfs
  - Fix tcsh + grep-2.7. (#636552)
  - sysctl.conf: move bridge setting to module-init-tools
  - rc.sysinit: set affinity also for current shell
  - ifdown-eth: use scope host for lo
  - improve_check_for_bond_master_in_install_bonding_driver
  - network-functions: fix check in install_bonding_driver
  - ifdown-post: remove resolv.conf only in specific cases
  - netconsole: lets run earlier
  - ipcalc: support RFC3021 (#997271)
  - halt: add delay after upsdrvctl shutdown
  - ifup: also set multicast_snooping after the bridge is up


author: Lukáš Nykrýn - 9.03.43-1
changelog:
  - ifup-aliases: arpcheck - check for parent operstate and carrier
  - ifdown: don't wait for aliases
  - hotplug: don't call ifup when new vlan appears
  - ifup-wireless: add support for wowlan (second part)
  - readonly-root: remount rpc_pipefs if readonly-root is used


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.42-1
changelog:
  - ipcalc: -c allow netmask
  - ipcalc: parse prefix more safely
  - vi.po: fix parentheses
  - network-functions: handle BONDING_OPTS better
  - custom naming for VLAN devices
  - bonding: match whole name of interface
  - network-functions: ETHTOOL_DELAY introduction patch
  - ifup-wireless: add support for wowlan
  - Remove NETWORKING_IPV6 from sysconfig.txt (#918622)
  - bridging: add possibility to set prio and ageing


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.41-1
changelog:
  - netfs: implicitly handle glusterfs as a network filesystemd
  - init.d/functions: check parent dir of pid file for accessibility
  - ifup-eth: some options for bridge can be applied after the bridge is up
  - rc.sysinit: apply sysctl settings before starting udev
  - ifup: add possibility to specify value for -w parameter of arping
  - ifup-tunnel: call ifup-ipv6 in the end
  - pids_var_run: handle '(deleted)'
  - require correct version of upstart
  - rc.sysinit: use 'vgchange --ignoreskippedcluster'
  - during install do not create /var/lib/random-seed if /dev/urandom does not exist
  - rc.sysinit: increase the saved random-seed to 4K (#1023471)
  - umount-loop: make sure that we don't kill our own process
  - umount-loop: don't use xargs
  - ifup-eth: remove ipx relic (#1028135)
  - init.d/functions: add -b optin to status and killproc (#1047948)
  - remove duplicit then


author: Lukas Nykryn <lnykryn@redhat.com> - 9.03.40-1
changelog:
  - sync disks before halt (#1006294)
  - provide KVM guest count and limit info message (#1014731)
  - add ability to disable LVM activation on boot (#1015065)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.39-1
changelog:
  - remount /proc to set attributes from fstab #984003
  - print something when arping is detecting colliding ip addresses
  - try dhcpv6 after v4 failed
  - Allow dhclient configuration files for DHCPv6 as well. (#815676)
  - ifdown: don't call nmcli on interface that is alread down
  - call flush addresses with scope global
  - init: inform users about .override files in .conf files
  - netfs: do not force NFS exports to be mounted before _netdev mounts
  - set net.ipv6.conf..autoconf in ifup-ipv6
  - mention rule6 files
  - securetty: check if the device is in the file before attempting to write to it
  - Process rule6-* for sit devices (#840009)
  - Killproc -d should parse same values as sleep
  - Make killproc more granular when delay is passed. (#428029, <xjakub@fi.muni.cz>)
  - bonding: set master up before slaves
  - Fix greps to correctly handle comments and quotation (#915659)


author: Václav Pavlín <vpavlin@redhat.com> - 9.03.34-1
changelog:
  - there should be crypttab instead of crypptab in man page (#870025)
  - sysconfig.txt advised saslauthd -a instad of -v (#869075)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.32-1
changelog:
  - check an IP address for existence in ifup-alias
  - remount /dev/shm in sysinit to apply attributes from fstab
  - sets BONDING_OPTS before interface is brougth up and checks if it is not already added
  - Add support for setting random bridge options via BRIDGING_OPTS
  - use vgchange -aay in rc.sysinit and netfs init script
  - script should not kill itself during shutdown
  - fix the NIS domain setting
  - be less strict about VLAN name
  - clarification of work with white spaces in crypttab manpage
  - re-read sysctl values for VLANs on ifup
  - pass useful arguments to halt.local
  - start serial console when we return from runlevel1
  - move VLAN= docs to the interface configuration section, rather than /etc/sysconfig/network.
  - don't accidentally match other bonding devices
  - add usage stanzas for tty.conf and serial.conf
  - rename_device: skip VLAN=yes configuration files
  - allow duplicate address dectection to be disabled


author: Lukas Nykryn <lnykryn@redhat.com> 9.03.28-1
changelog:
  - sysconfig support for IPv6 policy based routing (#781493)
  - fix typo in translation (#757637)
  - fix logic error with removing arp_ip_target (#787107, #746045)
  - don't set primary before we enslave devices. (#749610, <agospoda@redhat.com>)
  - do not check mounted filesystems (#745224)
  - eviscerate ifconfig uses from ip-aliases (#721010, #588993)
  - improve comment in init/serial.conf (#746808)
  - turn off UPS in powerfail situation (#754984, <robert@fedoraproject.org>)
  - netconsole exit arping on first response (#765835)
  - add cifs to check for network filesystem (#760018)
  - fix comments in sysctl.conf (#755175)
  - rc.sysinit - use rcS-emergency job instead of sulogin (#582002)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.26-1
changelog:
  - add 'emergency' mode (#681357)
  - kexec - free reservation memory only for crashkernel=auto (#734987)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.24-1
changelog:
  - add support for sysctl.d (#680527)
  - log network messages via syslog (#653630, #672202)
  - document NM_CONTROLLED (#692123)
  - don't explictly disallow IPv6 aliases (#692240)
  - make sure the bond exists when we bring up the slaves. (#694501)
  - properly add and remove arp_ip_target's (#675079)
  - load static arp entries from ethers file (#696788)
  - fix logic error in rc.sysinit (#698520, <jlau@redhat.com>)
  - handle IPADDRx correctly for static addresses (#700184)
  - don't match filesystem types in hostnames (#703210, <jmueller@data-tronics.com>)
  - check for VLAN interfaces is being slave first (#703475)
  - override NETMASK from PREFIX where specified (#705367, <mpoole@redhat.com>)
  - allow multiple ETHTOOL_OPTS option types (#692410, #693583)
  - don't mount gfs2 in netfs (#689593)
  - fix pid file usage for IPv6. (#729292, <daveg@dgit.ndo.co.uk>)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.22-1
changelog:
  - init.d/functions: fix mishandled argument to fstab-decode (#682879)
  - network-functions: fix check for unmanaged devices (#670154)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.19-1
changelog:
  - sys-unconfig(8) manpage fix (#674397)
  - set default shmmax and shmall for certain architectures (#660036)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.18-1
changelog:
  - don't use the ipv6_exec_ip wrapper
  - don't accidentally cause sit module to be loaded on shutdown. (#654098, <ejsheldrake@gmail.com>)
  - simplify various string match constructs. (#558575, <ville.skytta@iki.fi>)
  - explicitly pass both device and dir when remounting read-only (#620461, <phr@doc.ic.ac.uk>)
  - add infiniband mapping (#648524, <monis@voltaire.com>)
  - fix ifdown calling nmcli for NM-managed devices (#612934, <jklimes@redhat.com>)
  - allow 0 as a vlan tag. (#635360)
  - support multiple IP addreses via IPADDRn, PREFIXn (or NETMASKn) (#633984)
  - stop tty and serial also on runlevel 's' (#629257)
  - system z optimized sysctl settings per default (#633323)
  - don't run kexec-disable for runlevels [S016] (#658138)
  - add # as a valid character in network device names (<Matt_Domsch@dell.com>)
  - use SYSCTLDEVICE without . (#667211, <notting@redhat.com>)
  - handle 'MASTER' being quoted. (#651450, <gfidente@redhat.com>)
  - test if there is /dev/rtc before syncing hardware clock (#598850)


author: Bill Nottingham <notting@redhat.com> - 9.03.13-1
changelog:
  - rename_device - handle quoted 'DEVICE' (#614943, <harald@redhat.com>)
  - rename_device - fix handling of s390 subchannels (#614739, <harald@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.03.10-1
changelog:
  - ifup-eth: check for dhclient configuration in /etc/dhcp as well (#607766)
  - network-functions: handle quoted SUBCHANNELS (#607481)
  - netfs: allow for encrypted network block devices (#605600)


author: Bill Nottingham <notting@redhat.com> - 9.03.9-1
changelog:
  - check NM_CONTROLLED before deciding to use NM for a connection. (#600454)
  - always reboot on autorelabel. (#599879)
  - correct the fix for not clearing  environment with runuser. (#564105)
  - properly handle permission denied on pid file (#595597)


author: Bill Nottingham <notting@redhat.com> - 9.03.8-1
changelog:
  - clean up plymouth shtudown splash (#590103, <rstrode@redhat.com>)
  - rc.sysinit: use lvm2 --sysinit option (#588777)
  - network-functions: behave sanely in the absence of $DEVICE (#592108)
  - sysconfig/debug: export debug variables (#592102)
  - netfs: check for NM to be connected, not just running (#592095)
  - rcS*.conf: check if /etc/inittab exists (#590706, <plautrba@redhat.com>)
  - port vlan code to /sbin/ip (#566485, <plautrba@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.03.6-1
changelog:
  - fix plymouth startup/shutdown (#586040)
  - fstab-decode.8: tweak manpage so it formats correctly (#586476)
  - init.d/functions: handle being unable to read a specified pid file. (#584575)
  - ifup-eth: run dhclient -6 similar to dhclient -4. (#585047)


author: Bill Nottingham <notting@redhat.com> - 9.03.5-1
changelog:
  - network-scripts: integrate with NetworkManager (#550154)
  - clean up obsolete package requirements
  - RAID fixes (<dledford@redhat.com>)
  - network: only blacklist the original loopback interface. (#579829, <evgsyr@gmail.com>)
  - rc.sysinit: check dmraid's return code, to catch 'no raid sets' error. (#568869)
  - po/*: fix mistranslated checks for user input. (#566791)


author: Bill Nottingham <notting@redhat.com> - 9.03.4-1
changelog:
  - move ccw_init, ccw udev rules to s390utils (#539491)
  - network-functions: clean up device checks (#564505)


author: Bill Nottingham <notting@redhat.com> - 9.03.3-1
changelog:
  - pass -m to runuser to not clear environment (#564105)
  - don't use deprecated udev syntax in clock rules (#560801)
  - don't quote regex argument to bash's =~ (#558575, <ville.skytta@iki.fi>)
  - if HWADDR is set and DEVICE is not, use HWADDR to determine DEVICE. (#557941)
  - don't HUP init when messagebus starts (#557821)
  - setsysfont: use UNIMAP rather than SYSFONTACM when calling /bin/unicode_start. (#557173)


author: Bill Nottingham <notting@redhat.com> - 9.03.2-1
changelog:
  - ifup-eth: use dhclient's -H option instead of munging dhclient config files
  - rc.sysinit: move mdadm after dmraid (#554423)
  - ifup-eth: use dhclient -6, not the no-longer-included dhcp6c (#553019, <dcantrell@redhat.com>)
  - add more man pages (#529328, <plautrba@redhat.com>)
  - remove useless echo (#552785)
  - move is_wireless after MACADDR/MTU setting (#552641)
  - serial.conf: respawn correctly. (#552611, <zing@fastmail.fm>)
  - network-functions: use sysfs for wireless check (#552381, <adel.gadllah@gmail.com>)
  - reload init on started messagebus (<plautrba@redhat.com>)
  - honor HOTPLUG in ifdown (#547737)


author: Bill Nottingham <notting@redhat.com> - 9.03.1-1
changelog:
  - re-enable network service (#545255)
  - ifdown: honor HOTPLUG (#547737)
  - silence any erros from bonding adds (#516569)
  - remove assorted configurations we don't support the tools for
    (ipsec-tools ipsec, cipe, IPX)


author: Bill Nottingham <notting@redhat.com> - 9.03-1
changelog:
  - migrate to upstart 0.6.x (<notting@redhat.com>, <plautrba@redhat.com>)
  -- jobs move to /etc/init
  -- collapse rcX and ttyX jobs into single job definitions
  -- jobs are no longer %config
  - remove obsolete doexec command
  - rc.sysinit: handle yet another random return string from dmraid
  - remove never-used 'sulogin' upstart event
  - fix time-setting udev rules for old-style RTC devices (#537595)
  - init.d/network: keep error codes limited to '1'. (#537841)
  - add initial ifup/ifdown man pages. (#529328, <plautrba@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.02-1
changelog:
  - remove long-since deprecated initlog
  - remove IUCV support (#507217)
  - halt: put a wrapper around killall5 to account for retval 2 not being an error (#526539, <hdegoede@redhat.com>)
  - ifup-eth: honor DEFROUTE=yes|no for 'all' connection types. (#528822)
  - network-functions: load bonding driver if BONDING_OPTS is defined. (#516569)
  - rc.sysinit: put /dev/shm in mtab too, as dracut now mounts it. (#528667)


author: Bill Nottingham <notting@redhat.com> - 9.01-1
changelog:
  - rc.sysinit: fix handling of dmraid output to avoid error messages (#527726, <mschmidt@redhat.com>)
  - rwtab: add /var/lib/xend (#526046)
  - translation updates: fi, nb, pl


author: Bill Nottingham <notting@redhat.com> - 9.00-1
changelog:
  - halt: wrap /sbin/killall5 to catch some return codes (#526539)
  - netfs, netconsle, network: fix return codes to match LSB spec (#524489, #524480, #524486)
  - handle kernels compiled both with and without CONFIG_RTC_HCTOSYS
  - halt: use killall5's return code to avoid unncesssary sleeping (#524359, <hdegoede@redhat.com>)
  - halt: don't kill mdmon on shutdown. (#524357, <hdegoede@redhat.com>)
  - rc.sysinit: do not try and activate ISW raidsets, unless noiswmd is passed. (#524355, <hdegoede@redhat.com>)
  - translation updates: ca, cs, da, mai, po, sv, uk


author: Bill Nottingham <notting@redhat.com> - 8.99-1
changelog:
  - init.d/functions: add a '-l' option to status to pass lock file name (#521772)
  - tweak kernel conflict
  - translation updates: as, bn_IN, de, fr, hi, it, hu, kn, mr, or, pa, pt, ru, te


author: Bill Nottingham <notting@redhat.com> - 8.98-1
changelog:
  - sysconfig.txt: doucment DHCP_HOSTNAME (#498052)
  - 88-clock.rules: Use --systz instead of --hctosys. (#517886, #489494)
  - Support rwtab and state passed from dracut initrd (#515771, <wtogami@redhat.com>)
  - restore context of *tmp files (#519748)
  - halt: don't try and save mixer settings if it's not writable. (#515771)
  - rwtab: add /var/spool, /var/lib/dbus, others (#494973, #515771)
  - sysconfig.txt: clarify docs (#518614)
  - rc.sysinit: don't pretend /selinux is configurable (#518164)
  - assorted ipv6 redundant code deletion
  - translation updates: bn, ca, de, es, fi, fr, gu, hi, it, ja, ko, ml, nb, nl, pl, pt, pt_BR, ru, sr, ta, zh_CN, zh_TW


author: Bill Nottingham <notting@redhat.com> - 8.97-1
changelog:
  - ipcalc: fix IPv6 address checking (#516319)
  - ifup-aliases: fix syntax error from earlier cleanups. (#515612, <jik@kamens.brookline.ma.us>)
  - translation updates: nb
  - rc.sysinit: remove useless call to pam_console_apply


author: Bill Nottingham <notting@redhat.com> - 8.96-1
changelog:
  - fix up upstart rules for s390(x). (#515222)
  - leave ChangeLog in the tarball only. (#515012)
  - disable netfilter on bridged interfaces. (#512206)
  - assorted shell-related cleanups to ipv6 and other code (<victor.lowther@gmail.com>)
  - use resolv.conf from dracut netboot before setting hostname. (#514801, <wtogami@redhat.com>)
  - ipcalc updates (<victor.lowther@gmail.com>)
  - only use ethtool for link checking; no more mii-tool
  - require /sbin/blkid directly, as it moves between packages (#508413)
  - redirect bash errors on 'unset' to /dev/null. (#482888)
  - fix dmraid partition naming (#501476, <hdegoede@redhat.com>)
  - don't quote upstart signals. (#501155)
  - translation updates: bn_IN, da, es, sk


author: Bill Nottingham <notting@redhat.com> - 8.95-1
changelog:
  - don't kill runlevel events on subsequent entering of the same runlevel (#498514)
  - lang.*sh: handle spaces in $HOME (#498482)
  - network-functions: explicitly source from the proper directory. (#496233)
  - remove persistent names on sys-unconfig. (#448322)
  - init.d/functions: cgexec has moved to /bin (#495715)
  - allow changing of VLAN type even if the module is already loaded. (#495053, <pietro@bertera.it>)
  - translation updates: fr, ml, pt


author: Bill Nottingham <notting@redhat.com> - 8.94-1
changelog:
  - prefdm: add simple fallbacks, sort rpmdb query for consistency (#494461)
  - translation updates; bn, de, pt, ru, te


author: Bill Nottingham <notting@redhat.com> - 8.93-1
changelog:
  - rc.sysinit: add a disk synchronization point with scsi_wait_scan post-udev (#481470)
  - netfs: drop smbfs support, we don't even ship the module or tools any more
  - setsysfont: honor LC_CTYPE (#487133, <skasal@redhat.com>)
  - prefdm: do fallbacks based on provides of 'service(graphical-login)' (#485751)
  - rc.sysinit: handle multiple IP addresses without choking in the stateless code (#443945)
  - rc.sysinit: catch the right error code from checking for passphrases (#483269, <vladis.kletnieks@vt.edu>)
  - prefdm: handle empty /etc/sysconfig/desktop correctly (#480113)
  - ifup-ipsec: allow use of either ESP only or AH only (#251494, <stijn.tintel@x-tend.be>)
  - ifup-eth: allow passing of arguments to dhcp6c (#437949, <pekkas@netcore.fi>)
  - ifup-eth: fix dhcpv6 when there is no IPv4 configuration (#486507)
  - ifup-ppp: avoid spurious SIGCHLD to pppd (#448881)
  - ifup-eth: add support for creating TUN/TAP devices on the fly (#453973, <scott@zahna.com>)
  - stop plymouth when starting single-user mode. (#491062)
  - add plymouth shutdown script (#473237, <jmccann@redhat.com>)
  - fix lang.sh/lang.sh/consoletype for execution with '-e'
  - ifdown-eth: remove arp_ip_target on ifdown for bonding devices. (#483711)
  - add vlan support for s390 HSI interfaces. (#490584)
  - ipcalc: support IPv6 (#464268, <dcantrell@redhat.com>)
  - translation updates: all


author: Bill Nottingham <notting@redhat.com> - 8.91-1
changelog:
  - fix DHCP reading of options from ifcfg-XXX (#483257)
  - ifdown-eth: clean up bridges on ifdown (#463325, <sean@bruenor.org>)
  - support MD on iSCSI (#480627)
  - remove support for 'ifcfg-foo-bar' configurations that inherit from 'ifcfg-foo'
  - remove slip support
  - translation updates: es, pl, ca, sr, de, sv, pa, pt_BR


author: Bill Nottingham <notting@redhat.com> - 8.90-1
changelog:
  - init.d/functions: cgroup support (<jsafrane@redhat.com>)
  - fix various issues with dmraid handling (#485895, <hdegoede@redhat.com>)
  - rc.sysinit: fix typo. (#487926)
  - console_init: loadkeys has a -q option for silent running. Use it.
  - ifup-tunnel: add compatiblity for openNHRP tunnels (#486559, <claude.tompers@ieee.lu>)
  - ccw_init: don't re-init an existing device, it causes errors. (#484411, <jpayne@redhat.com>)
  - netfs: use same kpartx arguments as rc.sysinit
  - don't list mtab in rwtab (#457941)
  - translation updates: fi, de, mai


author: Bill Nottingham <notting@redhat.com> - 8.89-1
changelog:
  - use a leading path when sourcing files (#482826)
  - netfs: don't unmount nfsd filesystem by accident (#481794, <sprabhu@redhat.com>)
  - bring up ipsec interfaces last (#481733)
  - ifdown-eth: fix bridge + vlan (#481557, <danken@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 8.87-1
changelog:
  - rename_device: be much faster in the presence of many devices (#480687, <danms@us.ibm.com>)
  - fix switching from targeted to MLS policy (#479054, <dwalsh@redhat.com>)
  - rc.sysinit: don't set $(uname -r) or $(uname -m); they're not used
  - network-functions-ipv6: set MTU correctly for 6to4. (#477976, <ackistler@yahoo.com>)
  - add more entries to rwtab (#476799, <harald@redhat.com>)
  - net.hotplug: Bail out sooner if the network service isn't running
  - init.d/halt: determine reboot/halt via existing INIT_HALT environment variable. (#475227)
  - event.d/serial: add some docs
  - init.d/functions: __pids_var_run: Handle multi-line pid files correctly (#473287)
  - remove support for no longer existing 'brctl setgcint' command. (#360471)
  - add %config back for ifcfg-lo (#472761)
  - rcS/rcS-sulogin: don't match commented lines when finding runlevel (#472717)
  - updated translations: de, sk


author: Bill Nottingham <notting@redhat.com> - 8.86-1
changelog:
  - stop plymouth before stopping the runlevel (#467207)
  - fix get_config_by_subchannel (#459044, <harald@redhat.com>)
  - use blkid -l to pick a single most appropriate device (#470027)
  - don't mkswap on halt, as it breaks swap-by-label/UUID (#469823)


author: Bill Nottingham <notting@redhat.com> - 8.85-1
changelog:
  - add some error handling/hiding to netfs NM dispatcher script (#469197)
  - halt: fix code that causes a syntax error on multiple sound cards (#469156)
  - require a new enough udev version to handle where we put the rules
  - exit 0 in /etc/rc.d/rc (#469050)
  - don't set up encrypted devices that have already been set up under different
    names (#462371, <wwoods@redhat.com>)
  - accept either the '+<addr>', or comma-separated addresses for arp_ip_target. (#467954,
    <darcy.sherwood@gmail.com>)
  - translation updates: hu, kn, ko, ml, sr, sr@latin


author: Bill Nottingham <notting@redhat.com> - 8.84-1
changelog:
  - override Arabic, Persian, and Hebrew on the console (<alsadi@ojuba.org>)
  - explicitly run mdadm on boot to catch degraded arrays. (<dledford@redhat.com>)
  - fix setting of console font/map (#458362, <ak@sensi.org>)
  - translations updates: hi, kn, nb, sk, sv, ta


author: Bill Nottingham <notting@redhat.com> - 8.83-1
changelog:
  - various merge review fixes (#225900)
    Notably: init scripts/network scripts are no longer %config
  - remove some extraneous device-mapper initialization
  - use pidfile in status before calling pidof (#463205)
  - use plymouth directly, not the rhgb-client wrapper
  - move bridging after bonding (#449950, <djuran@redhat.com>)
  - use alsactl to save sound settings. (#462677, <jkysela@redhat.com>)
  - quit plymouth differently (<rstrode@redhat.com>)
  - make sure we don't try and spawn a repair shell when there's no
    tty (#463161)
  - move udev rules to /lib
  - stateless updates (#433702, <harald@redhat.com>)
  - call logger with a full path (#447928, <harald@redhat.com>)
  - translation updates: as, bn_IN, ca, cz, de, es, fi, fr, gu, it, ja,
    lv, mr, nl, or, pa, pl, pt_BR, ru, te, zh_TW


author: Bill Nottingham <notting@redhat.com> - 8.82-1
changelog:
  - refresh translation strings
  - plymouth updates. (#460702, <rstrode@redhat.com>)
  - translation updates: fi, lv, no
  - remove duplicate dependency (#465182)
  - ifup-eth: Change how we set the zeroconf route. (#239609)
  - ifup*: Use 0.0.0.0/0, not 0/0. (#460580)


author: Bill Nottingham <notting@redhat.com> - 8.81-1
changelog:
  - rc.sysinit: Don't use -L in find (#458652, #458504, CVE-2008-3524)
  - ifup: kill more code from loopback bringup


author: Bill Nottingham <notting@redhat.com> - 8.80-1
changelog:
  - Fix translation typo (#455804, <ruslanpisarev@gmail.com>)
  - Turn off syncookies
  - Cleanups for proper plymouth support
  - Move the mcheck code to a debugmode package, make it more generic


author: Bill Nottingham <notting@redhat.com> - 8.79-1
changelog:
  - fix mcheck stuff to be installed correctly
  - don't do an arping check for loopback interfaces
  - console_init: don't wait (<arjan@infradead.org>)
  - rc: clean up extraneous set -x noise
  - remove references to static dmraid/multipath binaries (#453987)
  - translation updates: lv


author: Bill Nottingham <notting@redhat.com> - 8.77-1
changelog:
  - NMDispatcher/05-netfs: fix check for default route (#445509)
  - service: don't set $LANG, rely on it to inherit from system locales (#422141)
  - init.d/functions: fix resolve_dm_raid() for older dmraid configs
  - Don't unmount sysfs in halt. (#446292)
  - rc.sysinit: don't try to startup crypto if we can't find the device
  - rc.sysinit: don't echo crypto stuff unless we're actually *doing* something
  - ifup: don't try to rename devices - udev rules are the way to go
  - rc.sysinit: fix typo, and don't restorecon on swap, etc. partitions (#448886)
  - set MALLOC_CHECK_ & MALLOC_PERTURB_ if configured (<pjones@redhat.com>)
  - console_init: support SYSFONTACM correctly, and support UNIMAP (#448704,
    <vvv+fedora@colocall.net>)
  - don't export GRAPHICAL - plymouth is for all modes. also, don't start rhgb
  - fix clock rules to properly handle old-style RTC devices (#447019)
  - translation updates: ko, or, pl


author: Bill Nottingham <notting@redhat.com> - 8.74-1
changelog:
  - use full path to /sbin/ip in NetworkManagerDispatcher script (#444378)
  - lang.{sh,csh}: read only user customization if LANG is already set (#372151)


author: Bill Nottingham <notting@redhat.com> - 8.73-1
changelog:
  - move event-compat-sysv events here, obsolete it
  - fix ctrl-alt-del during rc.sysinit (#444050)
  - fix 'telinit X' from single-user mode (#444001)


author: Bill Nottingham <notting@redhat.com> - 8.71-1
changelog:
  - adjust to gdm using LANG instead of GDM_LANG (#372151, <rstrode@redhat.com>)
  - rework netfs' check for networking availability to properly handle both network
    and NetworkManager


author: Bill Nottingham <notting@redhat.com> - 8.70-1
changelog:
  - find is now in /bin. Use it. (#192991, #239914, #244941, #442178)
  - require event-compat-sysv for now (#442291)
  - fix serial event to wait properly
  - handle encrypted LVs properly (#441728)
  - add a sit tunnel type (#441635)
  - translation updates: ru


author: Bill Nottingham <notting@redhat.com> - 8.69-1
changelog:
  - Bring up lo whenever it shows up, not just in network/NM
  - fix shutdown-related oddities (#438444)
  - translation updates: el, sr, sr@latin, sv


author: Bill Nottingham <notting@redhat.com> - 8.68-1
changelog:
  - netfs: umount 'ncp' filesystems as well (#437117)
  - improve performance of s390 ccw rules (#437110, <mernst@de.ibm.com>)
  - fix consoletype environment leak (#439546)
  - ifdown-eth: make sure NEWCONFIG exists before grepping for it (#390271, continued)
  - console_check: always open with NONBLOCK, clear the serial structs first,
    handle non-16550 ports (<dwmw2@infradead.org>)
  - halt: don't use /etc/sysconfig/clock (#438337)
  - ifup: don't attempt to re-enslave already-enslaved devices (#440077)
  - netfs: run as a NetworkManagerDispatcher script (#439242)
  - netfs: remove $local_fs from the list of provides (making it implicitly provided
    by booting)
  - serial: add a crude hack to wait for runlevels to finish (#437379)
  - serial: frob /etc/securetty when necessary (#437381)
  - add a upstart-specific inittab
  - translation updates: as, bn_IN, cs, de, es, fi, fr, gu, hi, it, ja, kn, ml, mr, nb,
    nl, pa, pl, pt_BR, ru, sk, sr, ta, te, zh_CN


author: Bill Nottingham <notting@redhat.com> - 8.65-1
changelog:
  - Add a serial console udev/upstart handler (#434764, indirectly)
  - Add some upstart notification for sysv scripts (modified from <cjdahlin@ncsu.edu>, #431231)
  - Handle _rnetdev correctly (#435358, <pjones@redhat.com>)
  - various minor speedups (<arjan@infradead.org>)
  - translation updates: el, fr
  - disable network by default, in favor of NetworkManager


author: Bill Nottingham <notting@redhat.com> - 8.64-1
changelog:
  - Add a console_init udev helper to do console initialization
  - add /sbin/pidof requirement (#434863)


author: Bill Nottingham <notting@redhat.com> - 8.63-1
changelog:
  - don't start RAID arrays in rc.sysinit, that's done by udev (corollary of #429604)
  - add a NetworkManager-dispatcher script that does netreport on interface changes
  - use udev rules to set the clock, avoiding issues with modular rtcs (#290731)


author: Bill Nottingham <notting@redhat.com> - 8.61-1
changelog:
  - use lvm, not lvm.static (#429222)
  - ifup-eth: don't do something odd if we find a mac address that
    matches the user-set MACADDR (#251415)
  - rc.sysinit: fix root fs check to catch 'rw,ordered,noatime,etc.' properly
    (#334171)
  - rc.sysinit: Use proper invocations for authconfig, system-config-network
    (#426372, #428202)
  - service: handle unreadable scripts (#427767)
  - initscripts.spec: add requirements for stateless
  - fix perms on /etc/profile.d (#407531, <ville.skytta@iki.fi>)
  - rename_device: handle quoted HWADDR, etc. in ifcfg scripts (#351291)
  - minor stateless fixes
  - Makefile cleanups (from OLPC, <cscott@cscott.net>)
  - translation updates: fr, ru, nb
  - don't endelessly loop on ifdown (#390271)
  - rc.sysinit: - fix encrypted swap partitions with random key
    (<harald@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 8.59-1
changelog:
  - rc.sysinit: fix rhgb check
  - prefdm: add wdm section (#248087)
  - init.d/functions, halt: clean up some extraneous delays (#219816)
  - ifup-wireless: set mode before bringing link up (#254046, <linville@redhat.com>)
  - translation updates: pt_BR, hr


author: Bill Nottingham <notting@redhat.com> - 8.58-1
changelog:
  - revert kernel conflict so that xen can still work (#319401)
  - rename_device, 60-net.rules: only suggest an interface name (part of #264901)
  - require newer udev for persistent net rules (part of #264901)
  - don't hang if someone puts a dangling pipe in /etc/rhgb/temp (#251219)
  - genhostid: fix for 64-bit systems (#306811)
  - more bash matching fixes (#220087)
  - translation updates: is, nb


