# changelog

author: Jakub Jelinek <jakub@redhat.com> 4.4.7-2
changelog:
  - update from gcc-4_4-branch
    - GCC 4.4.7 release
    - fix up -freorder-blocks-and-partition EH handling
      (#821901, PR middle-end/45566)
  - add -f{,no-}strict-enums option, make -fno-strict-enums the default for C++
    (#826882, PR c++/43680)
  - lazily declare destructor when needed (#750545)
  - fix graphite ICE with VIEW_CONVERT_EXPR (#820281)
  - fix power6 ICE with bswap (#819100, PR target/53199)
  - handle multilib options in gnatmake (#801144)
  - fix up std::__uninitialized_copy (#808590)
  - fix ICE in cp_tree_equal (#831832, PR c++/54858)
  - use F_SETLKW locking for *.gcda not just in libgcov.a, but also
    in the compiler when reading it (PR gcov-profile/54487)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-4
changelog:
  - fix diagnostics reporting with digraphs (#906234)
  - handle %{, %| and %} in inline asm on multiple asm dialect
    targets as {, | and } rather than asm dialect separators (#908025)
  - fix ICE in build_zero_init_1 with va_list data member in a class
    (#921758, PR c++/56403)
  - ignore out of range registers in the unwinder (#959564, PR target/49146)
  - fix ICE in fold_stmt on debug stmts (#967003)


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.1-21.fc13
changelog:
  - Make gdb-6.8-bz254229-gcore-prpsinfo.patch RHEL-5 /usr/bin/patch compatible
    (bugreported by Jonas Maebe).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.1-22.fc13
changelog:
  - Remove core file when starting a process (BZ 594560).
  - Fix lock up on loops in the solib chain (BZ 593926).
  - Import fix of TUI layout internal error (BZ 595475).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.1-23.fc13
changelog:
  - Fix and support DW_OP_*piece (Tom Tromey, BZ 589467).
  - Fix follow-exec for C++ programs (bugreported by Martin Stransky).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.1-24.fc13
changelog:
  - Fix crash on /proc/PID/stat race during inferior exit (BZ 596751).
  - testsuite: gdb.threads/watchthreads-reorder.exp kernel-2.6.33 compat. fix.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.1-27.fc13
changelog:
  - Fix obstack corruptions on C++ (BZ 606185, Chris Moller, Jan Kratochvil).
  - Improve support for typedefs in classes (BZ 602314).
  - Fix `set print object on' for some non-dynamic classes (BZ 606660).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.1-29.fc13
changelog:
  - Fix prelinked executables with sepdebug and copy relocations (BZ 614659).
  - [delayed-symfile] Fix a backtrace regression on CFIs without DIE (BZ 614604).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-42.fc14
changelog:
  - Fix occasionall unfound source lines (affecting at least glibc debugging).
  - Fix const/volatile qualifiers of C++ types (PR c++/12328).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-45.el6
changelog:
  - [vla] Disable the unfinished types garbage collector (BZ 682891).
  - [vla] New testcase for the unfinished types garbage collector (for BZ 682891).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-47.el6
changelog:
  - [ifunc] Fix ppc64 function descriptors compatibility.
  - detach-as-stopped kernel workaround is now always active, not just on RHEL-5.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-49.el6
changelog:
  - Support -gdwarf-4 -fdebug-types-section debug info (Tom Tromey, BZ 718141).
  - doc: make gdb's help a bit clearer re: ptype & whatis (BZ 704010).
  - Fix printing of memory statistics (Tom Tromey, BZ 692386).
  - Fix `info sources' output regression (BZ 712117).
  - Support DW_AT_data_member_location even for DWARF <4 (Tom Tromey, BZ 702427).
  - Core files should use linux-thread-db.c also on ppc and s390x (BZ 697900).
  - Fix case insensitive symbols for Fortran by iFort (BZ 669434).
  - Test GDB opcodes/ disassembly of Intel Ivy Bridge instructions (BZ 696890).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-50.el6
changelog:
  - Fix dlopen of libpthread.so, updated glibc required (Gary Benson, BZ 669432).
    - SystemTap probes support (Sergio Durigan Junior, for BZ 669432).
  - Improve GDB performance on inferior dlopen calls (Gary Benson, BZ 698001).
  - Fix runtime evaluation of strings, for gdb -write (Tom Tromey, BZ 730475).
  - Fix dw2-simple-locdesc.S for better arch compatibility  (for BZ 702427).
  - Fix dw2-case-insensitive.exp compatibility with ppc64 (for BZ 669434).
  - Fix backport of core files PID also for s390x (for BZ 697900).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 7.2-51.el6
changelog:
  - Fix threading internal error on corrupted memory (BZ 739685).
  - Fix cp_scan_for_anonymous_namespace crash (Aleksandar Ristovski, BZ 750341).
  - testsuite: Fix break-interp.exp expections for updated glibc (BZ 752834).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-57.el6
changelog:
  - Fix `Backport gdb fix to handle identical binaries via additional build-id
    symlinks' (RH BZ 836966).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-58.el6
changelog:
  - Fix `Cannot find new threads: generic error' (RH BZ 811648).
  - Delete gdb-core-threads-5of5.patch; rename gdb-core-threads-Nof5.patch to gdb-core-threads-Nof4.patch.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-59.el6
changelog:
  - Fix `CVE-2011-4355 gdb: arbitrary code execution via .debug_gdb_scripts'
    (Jan Kratochvil, RH BZ 756116).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-60.el6
changelog:
  - Fix `GDB cannot access struct member whose offset is larger than 256MB'
    (Siddhesh Poyarekar, RH BZ 795424).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6
changelog:
  - Fix `gdb/findvar.c:417: internal-error: read_var_value: Assertion `frame'
    failed.' (Tom Tromey, RH BZ 954300).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-60.el6_4.2
changelog:
  - Fix 'gdb crashes while thread apply all bt is run on the core file'
    (Jan Kratochvil, RH BZ 1108489).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-60.el6_4.3
changelog:
  - One more fix needed for 'gdb crashes while thread apply all bt is run on
    the core file' (Jan Kratochvil, RH BZ 1108489).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-60.el6_4.4
changelog:
  - Yet another fix needed for ''gdb crashes while thread apply all bt is run
    on the core file' (Tom Tromey and Paul Pluzhnikov, RH BZ 1108489).
  - Fix NVR on last ChangeLog entry.


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6
changelog:
  - Fix `gdb/findvar.c:417: internal-error: read_var_value: Assertion `frame'
    failed.' (Tom Tromey, RH BZ 947564).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6_5.1
changelog:
  - Fix 'gdb crashes while thread apply all bt is run on the core file'
    (Jan Kratochvil, RH BZ 1108490).


author: Sergio Durigan Junior <sergiodj@redhat.com> - 7.2-64.el6_5.2
changelog:
  - Improve fix to ''gdb crashes while thread apply all bt is run on the core
    file' (Jan Kratochvil, Tom Tromey, Paul Pluzhnikov, RH BZ 1108490).


author: Stepan Kasal <skasal@redhat.com> - 1.8.0-31
changelog:
  - drop *-cflags.patch, move all makefile fixes to *-fhs.patch
  - propagate libdir to Makefile; no need to set it on cmdline


author: Karel Klic <kklic@redhat.com> - 1.8.0-34
changelog:
  - -jbj patch replaced with -zeroheaders, which extends the header zeroing
    and also zeroes the buckets (#572601)
  - Fixed a memory leak in gdbm_reorganize(gdb) (rhbz#572598)
  - Handle read() returning less data than it was asked for (rhbz#572900)
  - Remove static builds from the devel package (#556050)
  - Moved autotools reinitialization from %build to %prep section


author: Ray Strode <rstrode@redhat.com> 2.30.4-15
changelog:
  - Drop 2 second delay when restarting conversations
  - Drop "Cancelling" message in all circumstances.  It's very
    fast out of the box, so we don't really need it, and we
    wouldn't want to slow canceling down just so the user can
    read the message
  - Add 2 second delay for all messages coming from pam modules
    Resolves: #563297


author: Ray Strode <rstrode@redhat.com> 2.30.4-16
changelog:
  - Fix some widget layout issues related to multi-stack
    Resolves: #614669
  - Make "Other..." item only run password stack
    Resolves: #615086
  - Add workaround for libc not handling nsswitch changes at runtime.
    Resolves: #621700


author: Ray Strode <rstrode@redhat.com> 2.30.4-24
changelog:
  - defuzz patches so they're easier to update for upcoming
    errata.
    Related: #670619, #661618, #708430, #688158, #645453, #628462, #622561
  - escape id calls so they don't fail with fully qualified
    network logon ids
    Resolves: #688158


author: Ray Strode <rstrode@redhat.com> 2.30.4-27
changelog:
  - Fix leak in xdmcp chooser
    Resolves: #723515
  - Don't show shutdown/restart buttons when non-functional
    Resolves: #645453


author: Ray Strode <rstrode@redhat.com> 2.30.4-28
changelog:
  - Place pointer thoughtfully, so it doesn't show up on a random
    monitor, or on top of the user list.
    Resolves: #670619


author: Ray Strode <rstrode@redhat.com> 2.30.4-30
changelog:
  - Add small delay between consecutive messages,
    instead of immediately overwriting any previous messages.
    Resolves: #661618, #708430


author: Ray Strode <rstrode@redhat.com> 2.30.4-31
changelog:
  - Rebuild with -fno-strict-aliasing to quiet rpmdiff
    Related: #670619, #661618, #708430, #688158, #645453, #628462, #622561


author: Ray Strode <rstrode@redhat.com> 2.30.4-33
changelog:
  - Increase X server verbosity by default, and increase it even
    more when debug is enabled.
    Resolves: #738462


author: Ray Strode <rstrode@redhat.com> 2.30.4-45
changelog:
  - Fix smartcard crash if coolkey isn't installed
    Resolves: #953552
  - Forward port RHEL5 crasher/hang fixes
    Resolves: #874202


author: Ray Strode <rstrode@redhat.com> 2.30.4-50
changelog:
  - Quietly run headless if the X server isn't installed.
    Prevents warning on s390
    Resolves: #1006947


author: Dodji Seketeli <dodji@redhat.org> - 2.26.0-1
changelog:
  - Update to upstream release (2.26.1)
  - Add plugin files from %{_datadir}
  - Don't check for vte anymore, the package checks it pkg-config
  - Add 'bookmarks' to the plugin set


author: Dodji Seketeli <dodji@redhat.org> - 2.26.1-1
changelog:
  - Update to upstream release 2..26.1
  - Fixes GNOME bugzilla bug #576766 - Crash when Configuring "Draw Spaces"
  - Make sure to remove all *.la files
  - Remove BuildRequire libgnomeui-devel as needless now


author: Deji Akingunola <dakingun@gmail.com> - 0.1.0-3
changelog:
  - Rebuild for babl-0.1.2
  - Backport upstream patch that removed babl processing time instrumentation


author: Nils Philippsen <nils@redhat.com> - 0.1.2-1
changelog:
  - version 0.1.2
  - remove obsolete cflags, babl-instrumentation, autoreconf patches
  - backported: don't leak each node set on a GeglProcessor


author: Nils Philippsen <nils@redhat.com>
changelog:
  - avoid buffer overflow in gegl_buffer_header_init()
  - correct gegl library version, use macro for it


author: Nils Philippsen <nils@redhat.com> - 0.1.2-3
changelog:
  - build with -fno-strict-aliasing
  - use PIC/PIE because gegl is likely to deal with data coming from untrusted
    sources


author: Ding-Yi Chen <dchen at redhat dot com> - 0.17-7
changelog:
  - Remove the gettext-libs docs, as they are talking about autoconf, libtool, 
    which are not directly related to the gettext-libs.
  - Remove unused definition and trailing space.
  - Fix the build failure with mock .


author: Jens Petersen <petersen@redhat.com> - 0.17-9
changelog:
  - add buildjava switch to allow turning off the java bits completely
  - add buildcheck to allow turning off make check
  - drop cvs requires for autopoint (Karl Lattimer, #469555)
  - add upstream gettext-xgettext-python-unicode-surrogate-473946.patch by
    Bruno Haible to fix xgettext handling of utf16 surrogates in python (#473946)


author: Jens Petersen <petersen@redhat.com> - 0.17-15
changelog:
  - bring back autopoint requires cvs (#517361)
  - requires info rather than /sbin/install-info
  - drop install_info and remove_install_info macros


author: Jens Petersen <petersen@redhat.com> - 0.17-16
changelog:
  - fix FTBFS by removing openmp.m4 which conflicts with recent autoconf (#539211)
  - cleanup gettext-0.17-rpathFix.patch
    - separate gl_AC_TYPE_LONG_LONG replacement to another patch
    - use trailing ':' for tests LD_LIBRARY_PATH
  - run autogen.sh with --quick and --skip-gnulib


author: Daiki Ueno <dueno@redhat.com> - 0.17-18
changelog:
  - drop BR: java-1.6.0-openjdk-devel, because:
    - it was only needed for javadoc, but the regeneration of javadoc
      files is not necessary
    - the s390/s390x buildroots are lacking the package for el6


author: Rex Dieter <rdieter@fedoraproject.org> 0.99.5-3
changelog:
  - conflict with ggz-client-libs, include epoch in Obsoletes/Provides: 
    libggz ggz-client-libs (#491638)


author: Tim Waugh <twaugh@redhat.com> 8.70-2
changelog:
  - Fix debugging output from gdevcups (CVE-2009-4270, bug #550293).
  - Harden ghostscript's debugging output functions (bug #550293).


author: Tim Waugh <twaugh@redhat.com> - 8.70-3
changelog:
  - Fixed summary.
  - Fixed macros in changelog.
  - Avoid mixed spaces and tabs.
  - Ship COPYING file.
  - Added comments for all patches.
  - Don't ship libtool la files (bug #542674).
  - Don't build static library for ijs (bug #556051).
  - Added comment next to /usr/lib/cups paths.
  - More consistent macro use.


author: Tim Waugh <twaugh@redhat.com> - 8.70-4
changelog:
  - Fixed Y-axis when duplexing with cups device (bug #557458).  This
    patch incorporates upstream commits 10625, 10631, and 10890.


author: Tim Waugh <twaugh@redhat.com> - 8.70-7
changelog:
  - Fixed jbig2dec-nullderef patch (bug #621118).
  - Applied upstream patch to fix iname.c segfault (bug #629562).


author: Tim Waugh <twaugh@redhat.com> - 8.70-11:.3
changelog:
  - Applied patch to prevent integer underflow in TrueType bytecode
    interpreter (CVE-2009-3743, bug #627902).
  - Applied patch to avoid reading initialization files from CWD
    (CVE-2010-2055, bug #599564).


author: Tim Waugh <twaugh@redhat.com> - 8.70-13
changelog:
  - Applied patch to prevent null pointer dereference (CVE-2010-4054,
    bug #646086).
  - Applied patch to prevent integer underflow in TrueType bytecode
    interpreter (CVE-2009-3743, bug #627902).
  - Applied patch to avoid reading initialization and library files from
    CWD (CVE-2010-2055, bug #599564; CVE-2010-4820, bug #771853).


author: Tim Waugh <twaugh@redhat.com> - 8.70-14
changelog:
  - Fixed character spacing problems using backported patch (bug #695766).
  - Apply some fixes from upstream to avoid gdevcups segfaults (bug #643105).


author: Tim Waugh <twaugh@redhat.com> 8.64-11
changelog:
  - Fixed CVE-2009-0583,0584 patch by using 255 as the maximum number of
    points, not 100, and by not treating a missing black point tag as an
    error (bug #487744).


author: Tim Waugh <twaugh@redhat.com> 8.70-1
changelog:
  - 8.70.
  - License has changed to GPLv3+.  Packages containing programs that
    link to libgs/libijs are:
    - foomatic (GPLv2+)
    - libspectre (GPLv2+)
    - ImageMagick (ImageMagick, listed on Licensing wiki page under
      "Good Licenses" and marked as GPLv3 compat)
    - gutenprint (GPLv2+)


author: Tim Waugh <twaugh@redhat.com> 5.50-15
changelog:
  - Fixed URL (bug #225794).
  - Fixed build root tag (bug #225794).
  - This package does not require ghostscript (bug #225794).


author: Tim Waugh <twaugh@redhat.com> 5.50-16
changelog:
  - Fixed URL again (bug #225794).
  - Fixed requires tags (bug #225794).
  - Preserve timestamps on installed files (bug #225794).
  - Added empty %build section (bug #225794).
  - Use FHS macros for file manifest (bug #225794).
  - Fixed summary (bug #225794).
  - Fixed description (bug #225794).
  - Fixed license (bug #225794).


author: Tim Waugh <twaugh@redhat.com> 5.50-21
changelog:
  - Changes from package review (bug #225794):
    - Requires xorg-x11-font-utils, not mkfontscale/mkfontdir.
    - Use macro for /etc.
    - Don't own catalogue directory.


author: Tim Waugh <twaugh@redhat.com> 5.50-22
changelog:
  - Further changes from package review (bug #225794):
    - Don't use umask in scriptlet.
    - Don't use 'which' in scriptlet.


author: Robert Scheck <robert@fedoraproject.org> 4.1.6-2
changelog:
  - Solved multilib problems with documentation (#465208, #474538)
  - Removed static library from giflib-devel package (#225796 #c1)


author: Nils Philippsen <nils@redhat.com> - 2:2.6.9-1
changelog:
  - version 2.6.9

    Overview of Changes from GIMP 2.6.8 to GIMP 2.6.9
    =================================================

    * Bugs fixed:

     612618 - Font selection remains visible
     622234 - gimp.desktop: image/x-psd in MimeTypes twice
     622196 - Unportable test(1) construct in configure script
     620604 - Description of "histogram" procedure is slightly inaccurate
     541586 - Tool options not saved/loaded correctly?
     614153 - Importing PDF files with long titles
     600112 - blur-gauss-selective.exe crashes
     599233 - Dialog of "Save as BMP" ignores changes which are not made
              with a mous
     565001 - Text-Tool crashes when edit a 2.4.2 version xcf
     610478 - Layer preview suddenly stops getting updated
     609026 - leaks shared memory
     609056 - Exporting to Alias PIX format fails
     608188 - a few strings in Save as... > Raw image data dialog are always
              in English
     604820 - GEGL Operation "path" crashes GIMP
     603711 - Crashes when using path tool
     607242 - GIMP 2.7.0 fails to build against libpng 1.4.0
     606372 - Saving to .ppm fails on indexed colorspace
     605237 - the "Antialiasing..." message in the progress bar does not show
              translated
     604508 - gimp-layer-new-from-visible should work from updated projection

    * Updated and new translations:

     Asturian (ast)
     Basque (eu)
     Burmese (my)
     Catalan (ca)
     Chinese (Hong Kong) (zh_HK)
     Chinese (Taiwan) (zh_HK)
     German (de)
     Italian (it)
     Latvian (lv)
     Low German (nds)
     Romanian (ro)
     Simplified Chinese (zh_CN)
     Slovenian (sl)
     Ukrainian (uk)
     Valencian (ca@valencia)

  - remove obsolete gtk219, never-stack-trace-desktop, indexed-pnm patches
  - don't manually provide "gimp-libs%{?_isa}" in gimp-libs
  - don't package %{_datadir}/gtk-doc/html, but dirs beneath


author: Nils Philippsen <nphilipp@redhat.com> - 2.0.2-0.1
changelog:
  - version 2.0.2
  - use RPM macros where appropriate
  - use "make DESTDIR=... install"
  - merge review (#225797)
    - add dist tag
    - change license tag to GPLv2+
    - sanitize buildroot
    - set default mode 0755 for directories
    - add documentation files
    - separate BuildRequires, add epoch to BR: gimp-devel ...
    - sanitize summary
    - recode SPEC file to UTF-8
    - clean buildroot at beginning of %install


author: Nils Philippsen <nils@redhat.com> - 2.0.2-0.2
changelog:
  - don't require gimptool file, but gimp-devel-tools package for building
  - merge review (#225797)
    - don't require /usr/share/gimp/2.0 directory, but specific minimum gimp
      version
    - work around problematic gimpdatadir macro definition if gimptool is not
      available


author: Nils Philippsen <nils@redhat.com> - 2.4.2-2
changelog:
  - Merge Review (#225798):
    - ship AUTHORS, ChangeLog, COPYING, NEWS, README, TERMINOLOGY
    - don't own directories included in the gimp package
    - use %defattr(-, root, root, -)


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.2-1
changelog:
  - git-1.6.5.2
  - Drop asciidoc --unsafe option, it should not be needed anymore
  - Don't use install -t/-T, they're not compatible with older coreutils
  - Don't use -perm /a+x with find, it's incompatible with older findutils


author: Adam Tkac <atkac redhat com> - 1.7.1-1
changelog:
  - update to 1.7.1 (#585990)
  - Use %{gitcoredir}/git-daemon as xinetd server (#529682) [Todd Zullinger]
  - Remove long fixed xinetd IPv6 workaround (#557528) [Todd Zullinger]
  - Make %{_var}/lib/git the default gitweb root (#556299) [Todd Zullinger]
  - Include gitweb/INSTALL file as documentation [Todd Zullinger]
  - Ship example gitweb config (%{_sysconfdir}/gitweb.conf) [Todd Zullinger]
  - Install missing gitweb.js (#558740) [Todd Zullinger]
  - Only BR perl(Error) [Todd Zullinger]
  - Use config.mak to set build options [Todd Zullinger]
  - Disable building of unused python remote helper libs [Todd Zullinger]
  - Comply with Emacs add-on packaging guidelines (#573423) [Jonathan Underwood]
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros
  - Replace $RPM_BUILD_ROOT with %{buildroot} [Todd Zullinger]


author: Matthias Clasen <mclasen@redhat.com> - 3.5.7-1
changelog:
  - Version bump to 3.5.7.
    * Allow Anjuta to handle clicks on widgets in the designer. (GNOME Bugzilla
        * Allow custom signal editors. (GNOME Bugzilla #540691)
    * Support running from gtk2-2.14 targetting gtk2-2.16.
    * Translation updates: de, es, fi, he, ko and pt_BR.
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.5/glade3-3.5.7.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.5/glade3-3.5.7.changes


author: Debarshi Ray <rishi@fedoraproject.org> - 3.6.0-1
changelog:
  - Version bump to 3.6.0.
    * Support for both GtkBuilder and Libglade, and conversion from one format
      to the other.
    * Support for GtkAction.
    * New interface to allow plugins to define editor layouts on a class level
      basis, and new customized editors for GtkButton, GtkImage and GtkEntry.
    * New Python plugin for instrospecting and loading Python class properties
      and signals, and adding them to the palette automatically.
    * Support for filtering and searching the project using the inspector.
    * Support for inline editing of widgets in a dialog.
    * Cut and pasted widgets should retain original names. (GNOME Bugzilla
        * The "after" property for a signal handler should be saved to the project
      file. (GNOME Bugzilla #573453)
    * Fixed crash when choosing not to save a project with errors. (GNOME
      Bugzilla #574706)
    * Translation updates: el, fr, da, ml, gl, te, lt, pt, or, cs, it, th, en_GB,
      sv, ru, fi, de, tr, lv, ko, es, sv, hu, eu, vi and pt_BR.
  - Updated License to reflect recent licensing changes according to Fedora
    licensing guidelines.
  - Stripped redundant translations from .mo files. (GNOME Bugzilla #474987)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.6.1-1
changelog:
  - Version bump to 3.6.1.
    * Fixed crash during internal widget selection.
    * Fixed Libglade regression. Libglade needs specific ordering of properties,
      ATK props, signals and accelerators.
    * Disable loading and displaying of 'data' property on GtkTreeStore. Only
      GtkListStore understands the 'data' construct.
    * Properly initialize a GValue on the stack. (GNOME Bugzilla #577822)
    * Translation updates: ar and cs.
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.1.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.1.changes
  - Added 'Requires: devhelp' to glade3-libgladeui.
  - Removed 'Requires: gtk2-devel >= 2.14.0 libxml2-devel pkgconfig' from
    glade3-libgladeui-devel. Let rpm-4.6 autogenerate them.


author: Debarshi Ray <rishi@fedoraproject.org> - 3.6.2-1
changelog:
  - Version bump to 3.6.2.
    * Fixed missing properties/attributes when serializing a GtkWindow. (GNOME
      Bugzilla #578211)
    * Fixed loading state of GtkCellRenderer attributes (whether to use
      attribute or property directly). (GNOME Bugzilla #566928)
    * Translation updates: es, sr and sr@latin.
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.2.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.2.changes
  - Fixed gladeui-1.0.pc.in by trimming 'Requires' list.


author: Matthias Clasen <mclasen@redhat.com> - 3.6.5-1
changelog:
  - Version bump to 3.6.5.
    * GtkButton only accepts real stock items and GtkImage but not icons.
    * Removed buggy query dialog from GtkNotebook creation. (GNOME Bugzilla
        * Removed hard coded size request to palette. (GNOME Bugzilla #579624)
    * Atk proxy objects should always have unique names. (GNOME Bugzilla
        * Fixed output format for GtkLabel attributes. (GNOME Bugzilla #579793)
    * Widget names should be unique withing the project. (GNOME Bugzilla
        * Dialogs should not disappear on pressing ESC. (GNOME Bugzilla #582559)
    * Properly load sizes of fixed/layout children. (GNOME Bugzilla #584334)
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.5.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.4.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.3.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.5.changes
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.4.changes
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.3.changes


author: Matthias Clasen <mclasen@redhat.com> - 3.6.7-1
changelog:
  - Version bump to 3.6.7.
    * Fixed crashes when handling GtkTextView in GtkBuilder format.
    * Fixed loading and saving of GtkIconSources.
    * GNOME Goal: removed deprecated Gtk+ symbols. (GNOME Bugzilla #572756)
    * Fixed obscure crash when loading a project. (GNOME Bugzilla #585860)
    * Introspect lowest GTK+ project dependancy when loading files with missing 
      versioning information. (GNOME Bugzilla #586046)
    * Detect correct modifiers and buttons to spawn a context menu in a platform
      independant way. (GNOME Bugzilla #587128)
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.7.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.6.news
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.7.changes
    * http://ftp.gnome.org/pub/GNOME/sources/glade3/3.6/glade3-3.6.6.changes
  - Drop the menu patch, since glade-3 is the version we install
    by default now, and it didn't work right anyway


author: Matthew Barnes <mbarnes@redhat.com> - 2.26.0-3
changelog:
  - Rebase to 2.26.0 based on the Fedora 14 package.
  - Retain glib-2.22.5-gio-hide-dot-mounts.patch
  - Drop all other patches.  Code patches were already merged into
    the 2.26.0 tarball, translation patches no longer apply.
  Resolves: #883021


author: Matthew Barnes <mbarnes@redhat.com> - 2.26.1-1
changelog:
  - Update to 2.26.1 to pick up some additional bug fixes.
  - Remove 0001-message_to_write_data_free-Don-t-unref-data-message-.patch
    (included in 2.26.1).
  Resolves: #883021


author: Colin Walters <walters@redhat.com> - 2.26.1-3
changelog:
  - Explicitly disable systemtap for this rebase; I am not aware
    of a significant number of current users in upstream, and it
    has not to my knowledge been tested in RHEL6.
    Resolves: #1000287


author: Colin Walters <walters@redhat.com> - 2.26.1-4
changelog:
  - Remove /usr/bin/gsettings and g_settings_*() symbols; many
    projects such as OpenJDK and VMWare Workstation conflate the
    existence of these symbols with the presence of gsettings-desktop-schemas
    schemas such as org.gnome.system.proxy.
    Resolves: rhbz#1065429


author: Colin Walters <walters@redhat.com> - 2.26.1-7
changelog:
  - Split off a separate -doc package (as is done currently in RHEL7)
    to avoid multilib conflicts with gtk-doc.
    Resolves: rhbz#1065429


author: Patsy Franklin <pfrankli@redhat.com> - 2.12-1.98
changelog:
  - Backport upstream glibc 4f031072a5055abd83717820b59efdaa463d5853
      locale/findlocale.c (_nl_find_locale): Return right away if
      _nl_explode_name failed.
      locale/programs/locarchive.c (add_locale_to_archive): Likewise. (#848082)


author: Jeff Law <law@redhat.com> - 2.12-1.99
changelog:
  - Allow broken code to avoid the 32 bit SSSE3 memcpy implementations
      by setting the environment variable
      32BIT_SSSE3_MEMCPY_VIA_32BIT_SSSE3_MEMMOVE to any value (#846342)


author: Jeff Law <law@redhat.com> - 2.12-1.104
changelog:
  - Change from magic environment variable to existance of
      magic file /etc/sysconfig/32bit_ssse3_mempy_via_32bit_ssse3_memmove
      to trigger change in memcpy behavior. (#846342, #865375)
    - Fix IPTOS_CLASS #define. (#864322)


author: Jeff Law <law@redhat.com> - 2.12-1.107
changelog:
  - Simplify test for magic file to change memcpy behaviour
      and correctly handle encoded return value from inlined
      syscall (#846342, #874642)
    -


author: Patsy Franklin <pfrankli@redhat.com> - 2.12.1.107.3
changelog:
  - Consistantly MANGLE/DEMANGLE function pointers and
      fix use after free in dcigettext.c (#989558).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.123
changelog:
  - Backport GLIBC sched_getcpu and gettimeofday vDSO functions for ppc (#929302).
  - Fall back to local DNS if resolv.conf does not define nameservers (#928318).
  - Add systemtap probes to slowexp and slowpow (#905575).


author: Carlos O'Donell <carlos@redhat.com> - 2.12-1.132
changelog:
  - Revert the addition of gettimeofday vDSO function for ppc and ppc64 until
    OPD VDSO function call issues are resolved (#1026533).


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.21.1
changelog:
  - Revert "Optimize memcpy, mempcpy and memmove" to let broken software
    continue to be broken (#676065)
  - Optimize memset (#676076)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.22.1
changelog:
  - Avoid too much stack use in fnmatch (#681054, CVE-2011-1071)
  - Properly quote output of locale (#625893, CVE-2011-1095)
  - Don't leave empty element in rpath when skipping the first element,
    ignore rpath elements containing non-isolated use of $ORIGIN when
    privileged (#667974, CVE-2011-0536)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.25.el6_1.1
changelog:
  - Define initgroups callback for nss_files (#705465)
  - Schedule nscd cache pruning more accurately from re-added values
    (#703481)
  - Use mmap for allocation of buffers used for __abort_msg (#676591)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.39
changelog:
  - Make sure AVC thread has capabilities (#700507)
  - Fix memory leak in dlopen with RTLD_NOLOAD (#699724)


author: Jeff Law <law@redhat.com> - 2.12-1.47.el6_2.4
changelog:
  - Make implementation of ARENAS_TEST and ARENAS_MAX match
    documentation (#769594)
  - Check malloc arena atomically  (#769594)


author: Jeff Law <law@redhat.com> - 2.12-1.47.el6_2.9
changelog:
  - Always use another area after a failed allocation in the
      main arena (#795328)
    - Remove sse3 memcpy (#695812) changes (#799259)


author: Andreas Schwab <schwab@redhat.com> - 2.11.90-20
changelog:
  - Update from master
    - Fix bugs in x86-32 strcmp-sse4.S and strcmp-ssse3.S
    - Add x86-32 FMA support
    - Don't crash in trace mode when dependencies are missing
    - x86-64 SSE4 optimized memcmp
    - Fix makecontext on s390/s390x


author: Roland McGrath <roland@redhat.com> - 2.12-1
changelog:
  - Update to 2.12 release.
    - Fix ldconfig chroot handling.
    - Don't deadlock in __dl_iterate_phdr while (un)loading objects.
    - Fix handling of newline in addmntent.
    - Fix AIO when thread creation failed.


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.1
changelog:
  - Fix exit codes in nscd start script (#582738)
  - Fix lookup of collation sequence value during regexp matching (#587360)
  - Handle too-small buffers in Linux getlogin_r (BZ#11571)
  - Fix name of tt_RU.UTF-8@iqtelif locale (#589138)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.3
changelog:
  - Implement recvmmsg on all archs (#594194)
  - Avoid strict aliasing issues (#594194)
  - Fix nscd user creation (#594256)
  - Fix access outside of red zone on ppc (#593771)
  - Fix scope handling during dl_close (#593686)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.7
changelog:
  - Round cache sizes to handle odd sizes (#607010)
  - Fix initializsation of cpu features (#630801)
  - Fix ifunc thunk for strspn on x86 in static libc (#631011)


author: Andreas Schwab <schwab@redhat.com> - 2.12-1.7.el6_0.1
changelog:
  - Fix bug in generic strstr/memmem implementation handling certain
    repeated patterns (#643341)
  - Correctly align TCB for AVX (#643343)


author: Jeff Law <law@redhat.com> - 2.12-1.74
changelog:
  - Correctly handle large response to AF_UNSPEC dns lookup (#795498)
    - Always use another area after a failed allocation in the
     main arena (#795328)


author: Jeff Law <law@redhat.com> - 2.12-1.78
changelog:
  - Fix option rotate with single IPV6 server (#804630)
    - Fix loading first object along a path when tracing (#808337)
    - Don't free non-malloced memory.  (#809602)


author: Jeff Law <law@redhat.com> - 2.12-1.80.el6_3.3
changelog:
  - Fix incorrect/corrupt patchfile for 833716.  Did not
      affect generated code, but tests were missing (#833716).


author: Jeff Law <law@redhat.com> - 2.12-1.80.el6_3.5
changelog:
  - Fix integer overflow leading to buffer overflow in strto*
    and related out of bounds array index (#847931)


author: Amar Tumballi <atumball@redhat.com> - 3.4.0.31rhs-1
changelog:
  - fixes to geo-replication upgrade script to handle symlink (bz#1001089)
  - fixes to glusterd to handle op-version properly to allow 'volume set' to
    happen even in older clients connected case (bz#1002871)
  - fixes in geo-replication to handle hardlink migration properly (bz#1001498)


author: Amar Tumballi <atumball@redhat.com> - 3.4.0.32rhs-1
changelog:
  - fixes to hardened build to pass execstack check in rpmdiff
  - fix the compatibility issue with older servers (bz#999944)


author: Amar Tumballi <atumball@redhat.com> - 3.4.0.34rhs-1
changelog:
  - bug fixes for 852140 950314 980778 998832 998914 998943 1000922
    1000996 1001893 1001895 1002022 1002613 1003580 1005460 1005478
    1005553 1006172 1007866 1008173 1009851 1011694 1011905


author: Arumugam Balamurugan <barumuga@redhat.com> - 3.4.0.35rhs-1
changelog:
  - bug fixes for 969461 1000948 1000936 1011694 1013556 1016971 979641
    950314 852140 980778 1006172 1005553 1005478 1007866 998914 981035


author: Arumugam Balamurugan <barumuga@redhat.com> - 3.4.0.36rhs-1
changelog:
  - bug fixes for 1002885 1021808 1007536 1017014 1012216 998786 977544
    1016385 858434 1001895 1012900 980910 1001556


author: Ravishankar N <ranaraya@redhat.com> - 3.4.0.47.1u2rhs-1
changelog:
  - This build has fixes for bugs in glusterd, gNFS, dht, afr, gfapi, fuse,
    cli, gsyncd etc.
    1035519, 1028325, 1034547, 1037274, 1034238, 1027727, 1030443, 1024316,
    1028282, 1032359, 1030021, 1020995, 979861, 1032558, 929036, 1033469,
    916857


author: Ravishankar N <ranaraya@redhat.com> - 3.4.0.49rhs-1
changelog:
  - This build has fixes for bugs in cli, glusterd, fuse, dht etc.
    1023950, 1032081, 923809, 1028995, 1023921, 1037851, 956655, 1015630, 1010975,


author: Ravishankar N<ranaraya@redhat.com> - 3.4.0.52rhs-1
changelog:
  - fixes bugs in guota, gNFS, glusterd, afr etc.
    1024371, 1024316, 1021776, 1043535, 1019908, 965400, 1020816


author: Arumugam Balamurugan <barumuga@redhat.com> - 3.4.0.53rhs-1
changelog:
  - fixes bug 916857 1005663 1032034 1046294 1046318 1042830 1045313
    1046571 1046604 1045991 1022822 1031687 1045374 972021


author: Bastien Nocera <bnocera@redhat.com> 2.28.6-7
changelog:
  - Add killswitch clean up patches
  - Fix status of the applet icon when bringing back from hard
    killswitch
  Resolves: #609291


author: Bastien Nocera <bnocera@redhat.com> 2.28.6-8
changelog:
  - Add more killswitch patches, handle the case where the
    only killswitch disappears with the adapter
  Resolves: #609291


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 2.12.0-4
changelog:
  - Add a patch from gnome-common cvs to address bug #218717 (gnome-common
    does not work with automake-1.10).


author: Ray Strode <rstrode@redhat.com> 2.28.2-7
changelog:
  - Hide randr events from "Detect Displays" button from g-s-d's
    autoconfiguration logic
    Resolves: #582564


author: David Zeuthen <davidz@redhat.com> - 2.29.90-1.el6
changelog:
  - Update to new release for LVM2/Multipath support
  - Don't include support for connecting to remote udisks instances
  - Related: rhbz#548874
  - Related: rhbz#548870


author: Richard Hughes <rhughes@redhat.com> - 2.28.2-0.2.20091116git
changelog:
  - New snapshot from the gnome-2-28 branch
  - Use the desktop icon when we unselect the installed application in gpk-application.
  - Added and Updated translations.
  - Fix crash when removing certain packages with gpk-application.
  - Only wait 3 seconds (not 60) when we get the updates changed signal


author: Richard Hughes <rhughes@redhat.com> - 2.28.2-1
changelog:
  - Update to 2.28.2
  - Remove the original package from the dep-confirmation screen
  - Ignore generic errors such as 'Failed' and do not show UI in this case
  - Use the desktop icon when we unselect the installed application in gpk-application. Fixes fd#25098


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-0.1.20091211git
changelog:
  - New snapshot from the gnome-2-28 branch
  - Don't show the selected packages as deps of the to be updated packages.
    Note, this only affects PackageKit >= 0.5.5. Fixes rh#546247
  - Check the GpkDbusTask object only replies once to each session request


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-1
changelog:
  - Update to 2.28.3
  - When we ask to logout, actually logout, rather than shutdown
  - Don't hide the restart status icon just because the daemon exited
  - Don't check for updates every day when the user had specified 'Never'
  - Allow the user to select the GPG key information to be able to verify it
  - Fix the error when the user clicks the about menu item
  - Fix a crash where the desktop file that was installed has no root directory
  - Fix a crash when the process-working icon has zero height
  - Resolves: #585086


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-2
changelog:
  - Backport a patch from upstream that adds support for support media repos
    such as those found on additional CDs or DVDs.
  - This patch just calls GetUpdates after a detected media repo is inserted,
    which is enough for PackageKit to add the repo to the default set, and for
    the repo to be used in all the GNOME and KDE tools.
  - This patch will not add explicit support for media repos in client programs,
    so the media is not requested if it is not inserted when the package tools
    are open. This functionality can be backported at a later time if required.
  - Resolves: #591534


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-4
changelog:
  - Don't allow shutting down when a transaction is active and cannot
    be cancelled.
  - Resolves: #669798


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-6
changelog:
  - Fix the progress update of the update viewer when multiarch packages
    are installed.
  - Resolves: #744906


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-7
changelog:
  - Do not attempt to refresh the updates list when a transaction is in
    progress. This prevents the update UI from going blank.
  - Resolves: #744980


author: Ray Strode <rstrode@redhat.com> 2.30.2-7
changelog:
  - Drop panel names from default config so they don't override
    translated fallback names
    Resolves: #633853


author: Ray Strode <rstrode@redhat.com> 2.30.2-10
changelog:
  - Fix monitor naming problem noticed by QE when testing fix
    that went in 2.30.2-8
    Related: #585312


author: Ray Strode <rstrode@redhat.com> 2.30.2-11
changelog:
  - Fix size negotiation problem noticed by QE and GSS when
    testing fix that went in 2.30.2-9
    Resolves: #671088
    Related: #607665


author: Ray Strode <rstrode@redhat.com> 2.30.2-12
changelog:
  - Fix positioning negotiation problem noticed by QE when
    testing fix that went in 2.30.2-11
    Resolves: #671088
  - Improve monitor labeling heuristics
    Related: #585312


author: Matthias Clasen <mclasen@redhat.com> - 2.0.17-6
changelog:
  - Don't show gnome-pilot in the menus. It is already available
    from evolution, and this menuitem about 'PalmOS devices' is just
    confusing in the age of the Palm Pre.


author: Richard Hughes <rhughes@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Translation updates
  - Remove upstreamed patch
  - Help the kernel through its sleep key confusion
  - Correctly set the focus on the last used device in gnome-power-statistics
  - Do not hide some radio buttons depending on the current machine state
  - Throttle screensaver before suspend/hibernate


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-1
changelog:
  - Update to 2.28.3
  - Fix the double suspend on lid close issue when not using KMS hardware.
  - Resolves: #543948


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-4
changelog:
  - Do not ask the user to look at the help file on suspend failure,
    it is already out of date.
  - Resolves: #640296


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-5
changelog:
  - Reinstate the "Do nothing" option on the lid close combo because
    per-screen DPMS does not work in RHEL6.
  - Resolves: #623674


author: Richard Hughes <rhughes@redhat.com> - 2.28.3-7
changelog:
  - Don't dim the screen by default on battery power -- it was never a
    good default, and we're doing this a different way in GNOME 3.
  - Resolves: #912270


author: Ray Strode <rstrode@redhat.com> 2.28.3-16
changelog:
  - More monitor dock fixes
    Resolves: #719023 746237
  - Potential workaround for libxklavier brokeness
    Related: #677580


author: Ray Strode <rstrode@redhat.com> 2.28.3-18
changelog:
  - Revert libxklavier workarounds introduced in -16 and -17
    They're causing additional problems.
    Resolves: #677580


author: Ray Strode <rstrode@redhat.com> 2.28.3-22
changelog:
  - Don't show unlock dialog immediately after user locks
    screen in some multimonitor scanarios
    Resolves: #744763


author: Ray Strode <rstrode@redhat.com> 2.28.3-24.1
changelog:
  - When trying to acquire a contentious keyboard grab, don't
    nuke input focus, but instead move it to new grab window
    before taking grab.
    Resolves: #994868


author: Ray Strode <rstrode@redhat.com> 2.28.3-25
changelog:
  - When trying to acquire a contentious keyboard grab, don't
    nuke input focus, but instead move it to new grab window
    before taking grab.
    Resolves: #905935


author: Ray Strode <rstrode@redhat.com> 2.28.3-26
changelog:
  - Fix up fix-fade-on-nvidia patch from -19 to properly
    handle X servers that don't support setting gamma ramp.
    Resolves: #947671


author: Jon McCann <jmccann@redhat.com> 2.28.3-6
changelog:
  - Properly handle monitor configuration changes
    Resolves: #594696
  - Remove the leave a message feature
    Resolves: #559652


author: Bastien Nocera <bnocera@redhat.com> 2.28.2-6
changelog:
  - Don't remove the sound plugin if we want the samples to be dropped
    when needed
  Resolves: rhbz#591902


author: Ray Strode <rstrode@redhat.com> 2.28.2-11
changelog:
  - Add a sanity check to prevent the "p" key and related
    from ever getting grabbed on accident.
    Related: #595763


author: Ray Strode <rstrode@redhat.com> 2.28.2-13
changelog:
  - GDM doesn't handle keyboard selection for the session anymore,
    yet it still claims to.  Ignore what it says.
    Resolves: #693843


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.2-17
changelog:
  - wacom: add support for NV-CONTROL extension (#805036)
  - wacom: fix button mapping (#805042)
  - wacom: add LED support from upstream (#805064)
    Resolves: #805036 #805042 #805064


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.2-23
changelog:
  - wacom: fix sysfs pach for status_led?_select/wacom_led (#805064)
  - wacom: fix crash when using a shortcut with the Shift key (#839328)
  - wacom: match builtin monitor if edid-matching fails for screen
    tablets (#826128)
    Resolves: #805064 #839328 #826128


author: Olivier Fourdan <ofourdan@redhat.com> 2.28.2-29
changelog:
  - wacom: Update input transformation matrix on monitor changes (#861890)
    wacom: Re-fix LED as per latest discussions on linuxwacom-devel (#805064)
    Resolves: #805064 #861890


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.28.0-10
changelog:
  - Add a patch from upstream to ignore non CPU data from /proc/cpuinfo,
    which would lead to a spurious processor displayed in the application,
    under certain architectures
  Resolves: #682011


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.28.0-11
changelog:
  - Add a patch from upstream that looks for the "clock" line in the
    /proc/cpuinfo output. This fixes missing CPU speed for architectures
    that put such information in the "clock" line, such as Power6
  Resolves: #692956


author: Matthias Clasen <mclasen@redhat.com> 2.28.0-8
changelog:
  - Add explicit requires to avoid interoperability problems
    between combinations of old and new subpackages
  - Remove a space-saving hack that causes multilib conflicts
  Resolves: #596165


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.5.1-1
changelog:
  - Fixes a regression and some bugs
  - http://mail.gnome.org/archives/gnote-list/2009-June/msg00002.html


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0.6.1-1
changelog:
  - D-Bus support enabled, many new features and bug fixes
  - http://mail.gnome.org/archives/gnote-list/2009-July/msg00016.html
  - 0.6.0 skipped due to applet breakage fixed in this release
  - http://mail.gnome.org/archives/gnote-list/2009-July/msg00020.html


author: Chris Lumens <clumens@redhat.com> 3.0g-1
changelog:
  - Update to gnu-efi-3.0g, which gets rid of the need for the no-relocations
    patch.
    Related: rhbz#555835


author: Chris Ricker <kaboom@oobleck.net> 5.07-6
changelog:
  - Update for Fedora Extras
  - Copyright -> License
  - Don't strip binaries
  - Preserve time stamps
  - Update BuildRoot
  - Drop unapplied patch


author: Tomas Mraz <tmraz@redhat.com> - 2.0.13-3
changelog:
  - drop s390 specific ifnarchs as all the previously missing dependencies
    are now there
  - split out gpgsm into a smime subpackage to reduce main package dependencies


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.13-4
changelog:
  - Explicitly BR libassuan-static in accordance with the Packaging
    Guidelines (libassuan-devel is still static-only).


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-3
changelog:
  - initialize small amount of secmem for list of algorithms in help (#598847)
    (necessary in the FIPS mode of libgcrypt)


author: Tomas Mraz <tmraz@redhat.com> - 2.0.14-5
changelog:
  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser


author: Tomáš Mráz <tmraz@redhat.com> - 2.0.14-8
changelog:
  - fix aborts and default algorithms when running in FIPS mode (#1078957, #966493)
  - add missing initialization of libgcrypt in gpgv
  - properly encode s2k iteration count in gpg-agent (#638635)


author: Ivana Varekova <varekova@redhat.com> - 4.2.4-5
changelog:
  - fix #489069 (update of the package from nonsplit version
    causes the absence of gnuplot binary -
    fixed using posttrans instead of post)


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-3
changelog:
  - drop superfluous rpath from binaries
  - do not call autoreconf during build
  - specify the license on utils subpackage
  - do not create static libraries (#556052)


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-5
changelog:
  - fix CVE-2012-1573 - security issue in packet parsing (#805432)
  - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
  - TLS-1.2 certificate request compatibility fix


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-9
changelog:
  - documentation fixes in gnutls_priority_init(3), gnutls-serv(1),
    and gnutls-cli-debug(1) manual pages (#648297, #807746)
  - add fallback to import the private keys as PKCS#8 (#745242)
  - silence the strict aliasing warnings


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-4.2
changelog:
  - fix CVE-2012-1573 - security issue in packet parsing (#805432)
  - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.7-3
changelog:
  - track shlib sonames closer, to highlight future abi/soname changes
  - _with_gpg macro, to potentially conditionalize gnupg vs gnupg2 defaults
    for various os/releases (ie, fedora vs rhel)


author: Zdenek Prikryl <zprikryl@redhat.com> 1.20.6-6
changelog:
  - Don't complain if installing with --excludedocs (#515927)
  - Drop unnecessary capabilities in gpm (#517659)


author: Nikola Pajkovsky <npajkovs@redhat.com> - 1.20.6-11
changelog:
  - add manpages
  - add Requires: gpm-libs = 1.20.6-11.el6
  - Resolves: #605053 - RPMdiff run failed for package gpm-1.20.6-10.el6
  [snip from email]
   npajkovs@redhat.com: I'd like to ask you what kind of license did you use for inputattach?
   steve@sk2.org: I didn't mention it in debian/copyright, but
   all the packaging (including the manpages) are licensed under the same
   terms as the packaged source, ie. GPL-2 or later.


author: Nikola Pajkovsky <npajkovs@redhat.com> - 1.20.6-11
changelog:
  - add manpages
  - add Requires: gpm-libs = 1.20.6-12.el6
  - Resolves: #605053 - RPMdiff run failed for package gpm-1.20.6-10.el6
  [snip from email]
   npajkovs@redhat.com: I'd like to ask you what kind of license did you use for inputattach?
   steve@sk2.org: I didn't mention it in debian/copyright, but
   all the packaging (including the manpages) are licensed under the same
   terms as the packaged source, ie. GPL-2 or later.


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.2.el6
changelog:
  - Build only on x86_64
  - Resolves: bz#554863
    (gpxe should not be shipped on i686/ppc64/s390x, only on x86_64)


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.3.el6
changelog:
  - gpxe-Don-t-use-lret-2-to-return-from-an-interrupt.patch [bz#579964]
  - Resolves: bz#579964
    (Keyboard cannot be used during pxe boot when using one kind of pxe server)


author: Luiz Capitulino <lcapitulino@redhat.com> - gpxe-0.9.7-6.4.el6
changelog:
  - gpxe-virtio-avoid-padding-for-len-64.patch [bz#672529]
  - Resolves: bz#672529
    (VMs with virtIO NIC can't access the PXE server)


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.5.el6
changelog:
  - gpxe-Support-underlying-UNDI-devices-that-don-t-support-i.patch [bz#661840 bz#668005]
  - Resolves: bz#661840
    (undi polling fix for Emulex NICs)
  - Resolves: bz#668005
    ([RFE] gpxe should support polling NICs)


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.6.el6
changelog:
  - gpxe-Revert-Support-underlying-UNDI-devices-that-don-t-su.patch [bz#661840]
    (patch is broken)
  - Related: bz#661840
    (undi polling fix for Emulex NICs)


author: Eduardo Habkost <ehabkost@redhat.com> - gpxe-0.9.7-6.7.el6
changelog:
  - gpxe-Add-SUPPORTED_-constants-to-pxe_api.h.patch [bz#661840]
  - gpxe-Support-underlying-UNDI-devices-that-don-t-support-i-reapply.patch [bz#661840]
  - Resolves: bz#661840
    (undi polling fix for Emulex NICs)


author: Michal Novotny <minovotn@redhat.com> - gpxe-0.9.7-6.8.el6
changelog:
  - gpxe-Replace-virtio-net-with-native-gPXE-driver.patch [bz#743893]
  - gpxe-Fix-DEBUG-builds-for-filenames-with-hyphens.patch [bz#743893]
  - Resolves: bz#743893
    (Failed to PXE boot when using Virtio)


author: Michal Novotny <minovotn@redhat.com> - gpxe-0.9.7-6.10.el6
changelog:
  - gpxe-Provide-fetch_setting_origin.patch [bz#972671]
  - gpxe-Use-next-server-from-filename-s-settings-block.patch [bz#972671]
  - Resolves: bz#972671
    (pxe boot fails if next-server details come from a different dhcp server)


author: Luiz Capitulino <lcapitulino@redhat.com> - gpxe-0.9.7-6.3.el6_0.1
changelog:
  - gpxe-virtio-avoid-padding-for-len-64.patch [bz#680148]
  - Resolves: bz#680148
    (VMs with virtIO NIC can't access the PXE server)


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.26.0-1
changelog:
  - Updated to latest release
  - Removed patches that have been applied upstream
  - Fixed man page paths (mann -> man3)
  - Disabled mono and ocaml for ARM (Jitesh Shah, BZ#532047)
  - Disabled regression tests on sparc64 as well as ppc/ppc64 (Dennis Gilmore)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-5
changelog:
  - Fixed broken links in index.html (doc-index-fix patch)
    Resolves: rhbz#624658
  - Enabled and fixed testsuite (testsuite-sigsegv-fix, rtest-errout-fix patches)
    Resolves: rhbz#624690
  - Fixed rpmlint warnings on spec file
  - Rebuilt with updated swig
    Resolves: rhbz#679715
  - Fixed gtk plugin program-name (gtk-progname patch)
    Resolves: rhbz#640247
  - Added urw-fonts to BuildRequires
  - Compiled with -fno-strict-aliasing


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-8
changelog:
  - All docs are now installed into /usr/share/doc/graphviz-%{version}
  - Demos packaged as docs not to automatically bring in unnecessary deps
    Resolves: rhbz#821920
  - Removed -ffast-math, added -ffloat-store (on i386) to fix arithmetic on i386
    Resolves: rhbz#772637
  - Fixed build failure due to change in php_zend_api macro type


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.20.3-3
changelog:
  - this spec makes baby animals cry... massively clean it up
  - hack in java includes to build against openjdk
  - add ruby as a BuildRequires (configure checks for /usr/bin/ruby)


author: Remi Collet <Fedora@FamilleCollet.com> 2.20.3-4
changelog:
  - rebuild for new PHP 5.3.0 ABI (20090626)
  - add PHP ABI check
  - use php_extdir (and don't own it)
  - add php configuration file (/etc/php.d/graphviz.ini)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.4-1
changelog:
  - New version: grep-2.5.4
  - Fixed typos in %description
  - Updated utf-8 patch
  - Added dfa-optional patch (#538423)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6-1
changelog:
  - New version: grep-2.6
  - Added sigsegv patch (after release patch from upstream)
  - Dropped obsoleted patches: fedora-tests, pcrewrap, case, egf-speedup,
    bz460641, utf8, dfa-optional, w


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-2
changelog:
  - Added dfa-optimize-period patch (speedup for . patterns in UTF-8)
  - Added glibc-matcher-fallback patch (speedup for [a-z] patterns in UTF-8)
  - Added mmap-option-fix patch
  - Added dfa-convert-to-wide-char patch (speedup for -m and remove quadratic
    complexity when going to glibc)
  - Added dfa-speedup-digit-xdigit patch (speedup for [[:digit:]] [:xdigit:]])


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-4
changelog:
  - Fixed crash on grep -Fif /dev/null (fif-null-fix patch)
    Resolves: rhbz#797934
  - Fixed heap overrun on specific REs (dfa-heap-overrun-fix patch)
    Resolves: rhbz#715295
  - Fixed -i (case insensitive matching)
    Resolves: rhbz#826997


author: Stepan Kasal <skasal@redhat.com> - 1.18.1.14-15
changelog:
  - Replace groff-1.18-nohtml.patch by a code in spec file
  - fix groff-1.18-gzip.patch to apply cleanly
  - simplify the code for symlinking in %install


author: Peter Jones <pjones@redhat.com> - 0.97-622
changelog:
  - Update relocatable kernel support for UEFI/x86_64 .
    Related: rhbz #476230
  - grub-0.97-gate-a20.patch: Patch from Suse. Make really, really sure that
    A20 is behaving itself. (mjg)
  - add "silent" option (mjg)
  - Rework EFI Graphics Output Protocol mode selection.


author: Peter Jones <pjones@redhat.com> - 0.97-63
changelog:
  - Clear the screen when the timeout finishes, not just if verbose is set.
    Patch from Eelko Berkenpies.


author: Peter Jones <pjones@redhat.com> - 0.97-65
changelog:
  - Draw the inverted line correctly in the menu
    Resolves: rhbz#613153
  - Don't fail to boot on UEFI when the memory map changes (shayes)
    Resolves: rhbz#607213


author: Peter Jones <pjones@redhat.com> - 0.97-70.1
changelog:
  - Fix error on invocation of "grub-install /dev/cciss/c0d0" (patch from jnevill)
    Resolves: rhbz#742976


author: Peter Jones <pjones@redhat.com> - 0.97-74
changelog:
  - Fix error on invocation of "grub-install /dev/cciss/c0d0" (patch from jnevill)
    Resolves: rhbz#736833


author: Peter Jones <pjones@redhat.com> - 0.97-76
changelog:
  - [UEFI] Iterate PXE objects and try to find an active one instead
    of letting the firmware pick for us.
    Resolves: rhbz#670266
  - [UEFI] Handle tftp implementations that give invalid error codes
    from TFTP_GET_FILE_SIZE.
    Related: rhbz#670266


author: Václav Pavlín <vpavlin@redhat.com> - 1:0.97-79
changelog:
  - Scan for virtio disks
    Resolves: rhbz#814014
  - Let user specify efi boot disk as root
    Resolves: rhbz#737732
  - Pass hig order bits to EFI system map and memory map
    Resolves: rhbz#825054


author: Václav Pavlín <vpavlin@redhat.com> - 1:0.97-82
changelog:
  - Disable the watchdog timer on EFI platforms
    Resolves: rhbz#911715
  - Add MACAPPEND command
    Resolves: rhbz#848628
  - Retry getting memory map and exit boot services on fail
    Resolves: rhbz#918824
  - Fixed regexps for matching devices in device.map and resolve symlinks
    when getting stats for block device
    Resolves: rhbz#928938
  - Remove grub.info when make clean is called to be sure that it is
    recreated with all changes.
    Resolves: rhbz#854652
  - Replace glibc-static with /usr/lib/libc.a in BuildRequires
    Resolves: rhbz#922705
  - If the title is too long, print remaining seconds to the new line
    Resolves: rhbz#851706
  - Recognize virtio-blk devices when running on OVMF
    Resolves: rhbz#916016


author: Václav Pavlín <vpavlin@redhat.com> - 1:0.97-83
changelog:
  - Allocate size of struct instead of size of pointer
    Resolves: rhbz#1008305
  - Add support for NVMe to grub-install
    Resolves: rhbz#1017296


author: Peter Jones <pjones@redhat.com> - 7.0.13-1
changelog:
  - Strip boot partition prefix from initrd path if present during --update.
  - add host only support for local kernel compiles (airlied)


author: Peter Jones <pjones@redhat.com> - 7.0.15-3
changelog:
  - Ensure that all stanzas are fixed with --update-kernel=ALL (patch from bcl)
    Resolves: rhbz#696960


author: Bastien Nocera <bnocera@redhat.com> 0.10.25.1-1
changelog:
  - Update to snapshot
  - Fix text subtitles causing hangs on startup
  - Fix missing plugins installation requiring a restart
  - Queue2 element moved to gstreamer core


author: Bastien Nocera <bnocera@redhat.com> 0.10.25.1-2
changelog:
  - Fix theoradec bug with timestamps for Empathy video calls (#537170)
  - Fix text subtitle display regression (#537559)


author: Bastien Nocera <bnocera@redhat.com> 0.10.17-2
changelog:
  - Update Farsight plugins to 0.10.17
  - Disable LADSPA plugins, they should be in -bad (#540198)
  - Add support for authenticating RTSP sources
  Related: rhbz#543948


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.10-2
changelog:
  - Drop VNC connection if the server sends a update spaning outside bounds of desktop (rhbz #590068)
  - Fix gcrypt threading initialization (rhbz #591827)


author: Matthias Clasen <mclasen@redhat.com> - 2.18.9-5
changelog:
  - Update Gujarati translation
  - Fix a problem with the location entry in file choosers
  Resolves: #636476, #625440. #647922, #647923


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-7
changelog:
  - Set a wrap width on the type filter combobox to avoid overflowing
    the screen when a very long filter is set on the file chooser.
  Resolves: #689188


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-8
changelog:
  - Apply the show-size-column setting when switching from search to 
    browse mode.
  Resolves: #697437


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-10
changelog:
  - Backport a patch fixing GtkBuilder behavior with construct properties
    initialization.
  Resolves: #801620


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-12
changelog:
  - Additional filechooser patch to make sure the size column is shown
    when switching from Recent Files to Search
  Resolves: #889172


author: Matthew Barnes <mbarnes@redhat.com> - 2.20.1-2
changelog:
  - Rebase to 2.20.0 based on the Fedora 13 package.
  - Removed patches (merged into 2.20.0 tarball):
    0001-Avoid-spurious-notifications-from-GtkEntry.patch
    0001-Prevent-the-destruction-of-the-menu-label-on-page-re.patch
    0002-Yet-another-fix-for-shape-handling.patch
    allow-set-hint.patch
    filesystemref.patch
    gtk2-preview.patch
    gtk2-rotate-layout.patch
    o-minus.patch
    strftime-format.patch
  - Removed translation patches that no longer apply:
    gtk2-translations.patch
    gtk2-translations-gu.patch
  - Fixed conflicts in patches:
    gtk2-filechooser-empty-location.patch
    gtk2-filechooser-size-column-hiding-additional.patch
    gtk2-landscape-pdf-print.patch
    icon-padding.patch
    tooltip-positioning.patch
  Resolves: #883022


author: Milan Crha <mcrha@redhat.com> - 2.20.1-3
changelog:
  - Add patch for RH bug #970594 (a11y combo names not shown without string column in model)
  Resolves: #970594


author: Milan Crha <mcrha@redhat.com> - 2.20.1-4
changelog:
  - Add patch for RH bug #979049 (GtkTreeView: make tree expanding/collapsing more robust)
  Resolves: #979049


author: Milan Crha <mcrha@redhat.com> - 3.32.2-1.el6
changelog:
  - Rebase to 3.32.2
  - Remove patch for RH bug #588457 (part of rebase)
  - Remove patch for RH bug #590877 (part of rebase)


author: Milan Crha <mcrha@redhat.com> - 3.32.2-2.el6
changelog:
  - Add patch for some issues found by Coverity scan
  - Add patch for RH bug #577797 (Cursor misplaced after paste)
  - Add patch for RH bug #615969 (Whitespaces drop on paste)
  - Add patch for RH bug #627199 (Underline/strikeout misplaced in printout)
  - Add patch for RH bug #626690 (Paragraph style not drawn after font style change)


author: Matthias Clasen <mclasen@redhat.com> - 1:1.8.5-2
changelog:
  - Add an epoch and downgrade to 1.8.5; gtksourceview 2.x 
    will live in the gtksourceview2 package2


author: Matthew Barnes <mbarnes@redhat.com> - 2.0.13-1.fc9
changelog:
  - Update to 2.0.13
  - Add BuildRequires: intltool
  - Remove "libs" patch (fixed upstream).
  - Remove patch for RH bug #216412 (fixed upstream).
  - Remove patch for RH bug #245888 (fixed upstream).


author: Miroslav Lichvar <mlichvar@redhat.com> - 5:1.8.5-1
changelog:
  - update to 1.8.5
  - fix continuations on ia64
  - remove umask setting from scriptlet, rpm sets it now


author: Tim Waugh <twaugh@redhat.com> 5.2.4-10
changelog:
  - Better defattr use in file manifests.
  - Fixed mixed spaces and tabs.
  - Fixed main package summary.
  - Added comments for all sources and patches.
  - The cups sub-package requires the exactly-matching main gutenprint
    package.


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-6
changelog:
  - SFTP: Fix crash on unmount
  - FTP: Backport several PASV/EPSV fixes from upstream (#542205, #555033)
  - AFC: Use new libimobiledevice library (#565567)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-10
changelog:
  - Fix emblem handling in trash (#616145)
  - Require new gnome-disk-utility (#636540)
  - Hide mounts having a path element starting with dot (#624795)
  - Fix SELinux while accessing a leaked /dev/ptmx file descriptor (#616838)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-13
changelog:
  - Fix interaction with LUKS volumes with fstab records (#599055)
  - Fix defects revealed by Coverity scan (#722465)
  - Correct return values on error for programs (#682799)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-15
changelog:
  - Fix several memory leaks (#809708)
  - Fix formatted BD-RE media detection (#669526)
  - Fix gvfs-open exit code on error (#746978)
  - Fix gvfs-info exit code on error (#746977)
  - Fix gvfs-cat exit code on error (#749369)
  - Fix gvfs-ls exit code on error (#749371)
  - Fix gvfs-mount exit code on error (#749372)


author: David Zeuthen <davidz@redhat.com> - 1.4.2-3
changelog:
  - Backport fixes from git
  - Correct wrong assumptions about how libgdu.so works
  - Make LUKS volumes work with new mount(8) behavior
  - Be more careful deciding what volumes to automatically mount


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.3-2
changelog:
  - Nuke HAL volume monitor
  - Don't leak mount job operation (#552842)
  - Recognize gphoto2 cameras which don't implement get storageinfo (#552856)
  - ObexFTP: Use a private D-Bus connection for obex-data-server (#539347)


author: Karel Klic <kklic@redhat.com> - 1.3.12-15
changelog:
  - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
    LZW format files
  - Added fix for CVE-2009-2624: Missing input sanitation by decompressing 
    dynamic Huffman code blocks
    Resolves: rhbz#555090


author: Karel Klic <kklic@redhat.com> - 1.3.12-16
changelog:
  - Improved the patch fixing CVE-2009-2624: get "Bad table" output 
    instead of "Unknown error" in gzip-1.3.12/unlzh.c:make_table()
    Related: rhbz#555090


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-4
changelog:
  - Create a haldaemon group in the spec file as shadow-utils has been updated
    and no longer automatically creates a private group for UIDs < 200.
  - Resolves: #594305


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-9
changelog:
  - Modify /etc/init.d/haldaemon to parse the /etc/sysconfig/haldaemon
    config file in for extra parameters.
  - Resolves: #576048


author: Richard Hughes <rhughes@redhat.com> - 0.5.14-10
changelog:
  - Modify /etc/init.d/haldaemon to parse the /etc/sysconfig/haldaemon
    config file in for extra parameters. This fixes the patch from -9.
  - Resolves: #576048


author: Peter Hutterer <peter.hutterer@redhat.com> 0.5.13-9
changelog:
  - hal-xen-unignore-axes.patch: force evdev to allow rel+abs axes on the Xen
    Virtual Pointer device (#523914)


author: Adam Jackson <ajax@redhat.com> 0.5.13-10
changelog:
  - hal-0.5.13-touchpad.patch: Make the logic for input.touchpad match the
    logic in the synaptics driver.


author: - Bastien Nocera <bnocera@redhat.com> - 20090202-3
changelog:
  - Remove the Dell native killswitches, replaced by the kernel killswitches
    in dell_laptop (#488177)


author: Richard Hughes <rhughes@redhat.com> - 20090330-2
changelog:
  - A key labelled "Music" on a Dell USB keyboard shows up in X as "XF86Tools"
    which is wrong. Reassigns the key to be "Media".


author: Richard Hughes <rhughes@redhat.com> - 20090716-1
changelog:
  - New upstream release to fix some more music players, resume problems and
    keymaps. See http://lists.freedesktop.org/archives/hal/2009-July/013481.html
    for full list.


author: David Walluck <dwalluck@redhat.com> 0:1.1-7.1
changelog:
  - Fedora-specific: enable GCJ support
  - Fedora-specific: build with java 1.6.0
  - Fedora-specific: disable integration and tests


author: Ryan O'Hara <rohara@redhat.com> - 1.4.24-1
changelog:
  - Rebase to upstream version 1.4.24.
    Resolves: rhbz#947987
  - Rewrite rules flaw can lead to arbitrary code execution (CVE-2013-1912).
    Resolves: rhbz#947701
  - Fix possible crash when using negative header occurrences (CVE-2013-2175).
    Resolves: rhbz#974263
  - Enable TPROXY support.
    Resolves: rhbz#921064


author: Nalin Dahyabhai <nalin@redhat.com> 3.1.0-7
changelog:
  - drop unnecessary %post/%postun
  - tweak default payload file attributes (guidelines)
  - tweak summary (guidelines)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-12
changelog:
  - call aclocal directly, because autoreconf didn't see the magic comment in
    the distributed version of aclocal.m4 which made it look like it was safe
    to generate a new one (#449550)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-18
changelog:
  - adjust buildroot location (guidelines)
  - disable static libraries (guidelines)
  - tweak default payload attributes (guidelines)


author: Nalin Dahyabhai <nalin@fedoraproject.org> - 3.1.0-19
changelog:
  - fix the release number noted for the previous changelog entry (#225884)
  - remove unapplied "classes" patch (#225884)


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.1-1
changelog:
  - Backport hivex package from Fedora Rawhide.
  - Exclude s390, s390x because of lack of OCaml packages.


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-2
changelog:
  - Rebase to upstream version 1.2.4 (RHBZ#642631).
    * Python bindings (python-hivex subpackage).
    * Adds hivex_set_value API call (Conrad Meyer).
    * Miscellaneous small bug fixes.
  - Fix Source0.
  - Fix builds with recent perl (Dan Horák).


author: Richard W.M. Jones <rjones@redhat.com> - 1.2.4-3
changelog:
  - Fix multilib conflicts in *.pyc and *.pyo files.
  - Only install unversioned *.so file for Python bindings.


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-4
changelog:
  - Rebase to upstream version 1.3.3
    resolves: rhbz#734208
  - Add upstream patch: hivexml: Remove unused variable.
  - Add upstream patch: hivex: Added gnulib includes from builddir [...]


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.3-4.2
changelog:
  - Remove loaded text from description
    resolves: rhbz#822741
  - Add patch to fix parsing of hives that contain large ri-records
    resolves: rhbz#841924


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6-1
changelog:
  - fix 'make check' by using binaries built with a different path for their
    own check files
  - add a non-fips compile-time option, which we don't use


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.9-1
changelog:
  - look for prelink at compile-time, and if we find it try to invoke it
    using a full pathname before trying with $PATH (#512275)
  - buildrequires: prelink so that it will be found at compile-time


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.10-1
changelog:
  - refuse to truncate output below half the size of the hash length, or 80
    bits, whichever is higher, in case we get used in a situation where
    not doing so would make us vulnerable to CVE-2009-0217, in which an
    attacker manages to convince a party doing verification to truncate
    both the just-computed value and the value to be checked before
    comparing them, as comparing just 1 bit would make detecting forgeries
    close to impossible


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.11-1
changelog:
  - error out when we previously skipped a check entry because the value to be
    checked is the wrong size
  - fix estimation of the expected length for truncated values


author: Jiri Popelka <jpopelka@redhat.com> - 3.9.8-28
changelog:
  - Fixed crash when using Preferences dialog (bug #557099).
  - Ship %{_datadir}/hplip/prnt/plugins directory (bug #565875).


author: Tim Waugh <twaugh@redhat.com> - 3.9.8-30
changelog:
  - Explicitly destroy tray icon on exit (bug #576282).
  - Fixed duplex handling in hpcups.drv (bug #557515).


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-1
changelog:
  - Re-based to 3.10.9 with fixes from Fedora (bug #652255).
  - Change shebang /usr/bin/env python -> /usr/bin/python (bug #608003).
  - Added COPYING to common sub-package (bug #613707).
  - Call cupsSetUser in cupsext's addPrinter method before connecting so
    that we can get an authentication callback (bug #616569).
  - Fixed "CUPS Web Interface" button (bug #633899).


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-4
changelog:
  - The hpijs sub-package no longer requires cupsddk-drivers (which no
    longer exists as a real package), but cups >= 1.4 (bug #829453).


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-1
changelog:
  - Re-based to 3.12.4 with fixes from Fedora (bug #731900).  No longer
    need no-system-tray, openPPD, addgroup, emit-SIGNAL, fab-root-crash,
    newline, hpaio-segfault, dbus-threads, or cups-web patches.


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-4
changelog:
  - Applied patch to fix CVE-2013-0200, temporary file vulnerability
    (bug #902163).
  - Fixed hpijs-marker-supply patch.


author: Tim Waugh <twaugh@redhat.com> - 3.12.4-4:.1
changelog:
  - Applied patch to avoid unix-process authorization subject when using
    polkit as it is racy (CVE-2013-4325).


author: Tim Waugh <twaugh@redhat.com> 3.9.8-25
changelog:
  - Retry when connecting to device fails (bug #552582).
  - Don't ship PolicyKit mechanism (bug #552536).
  - Don't run automake/autoconf etc as it causes build failures.
  - Reverted fix for bug #533462 until bug #541604 is solved (bug #553220).


author: Igor Foox <ifoox@redhat.com> 2.0-3
changelog:
  - Remove comment to reference license and include a copy as another source file.
  - Add Requires for Python.
  - Add dist tag.


author: Adam Tkac <atkac redhat com> 4:3.2.0-0.1.b6
changelog:
  - report proper error message when external parser fails (#435741)
  - ignore numbers when using allow_numbers: true and soundex (#435743)
  - correct N-V-R


author: Petr Pisar <ppisar@redhat.com> - 1.0-0.4.b5
changelog:
  - Fix spelling
  - Default attributes for xhtml2ps %files
  - Backport SSI traversal fix from 1.0b6 upstream version (#586356)
  - Replace libpaper dependency with paperconf binary to make rpmlint happy


author: Joe Orton <jorton@redhat.com> - 2.2.15-6
changelog:
  - ab: fail gracefully for OOM allocating stats structures (#645846)
  - init script: use $STOP_DELAY as delay before SIGKILL of parent (#657480)
  - stop multiple invocations of filter init functions (#631849)
  - mod_ssl: avoid overlapping memcpy (#652335)
  - mark httpd.conf as noreplace


author: Joe Orton <jorton@redhat.com> - 2.2.15-7
changelog:
  - mod_ldap: fix caching with per-vhost directive use (#676635)
  - mod_ssl: fix startup with duplicate SSL vhost configurations (#676831)
  - prefork: ensure early child exit during graceful restart (#679476)


author: Joe Orton <jorton@redhat.com> - 2.2.15-11
changelog:
  - rebase mod_reqtimeout to 2.2.17 (#676634)
  - mod_proxy_ajp: honour ProxyErrorOverride (#694939)
  - mod_ssl: add fix for handling incomplete lines w/revproxy (#700074)
  - mod_filter: fix matching against non-std response headers (#700075)
  - core: abort() on malloc() failure (#700393)
  - mod_ssl: fix startup crash w/client cert shared across vhosts (#720980)


author: Joe Orton <jorton@redhat.com> - 2.2.15-12
changelog:
  - mod_ssl: ignore SNI hints unless required by config (#714704)
  - mod_ssl: fix segfault with bad SSLCryptoDevice argument (#729585)


author: Joe Orton <jorton@redhat.com> - 2.2.15-15
changelog:
  - mod_proxy_ftp: fix handling of EPSV w/IPv6 localhost (#737960)
  - core: add security fix for CVE-2011-3368 (#743659)
  - mod_proxy_ajp: add security fix for CVE-2011-3348 (#738961)
  - mod_cache: forward-port CacheMaxExpire "hard" option (#740242)


author: Joe Orton <jorton@redhat.com> - 2.2.15-15.1
changelog:
  - add security fixes for CVE-2011-4317, CVE-2012-0053, CVE-2012-0031,
    CVE-2011-3607 (#787598)
  - obviates fix for CVE-2011-3638, patch removed


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-17
changelog:
  - mod_proxy: allow change BalancerMember state in web interface (#748400)
  - mod_proxy: Tone down "worker [URL] used by another worker" warning (#787247)
  - mod_proxy: add support for "failonstatus" option (#824571)
  - mod_proxy: avoid DNS lookup on hostname from request URI if
    ProxyRemote* is configured (#837086)
  - rotatelogs: create files even if they are empty (#757739)
  - rotatelogs: option to rotate files into a custom location (#757735)
  - rotatelogs: add support for -L option (#838493)
  - fix handling of long chunk-line (#842376)
  - add server aliases to "httpd -S" output (#833092)
  - omit %posttrans daemon restart if
     /etc/sysconfig/httpd-disable-posttrans exists (#833064)
  - mod_ldap: treat LDAP_UNAVAILABLE as a transient error (#829689)
  - ab: fix double free when SSL request fails in verbose mode (#837613)
  - mod_cache: do not cache partial results (#822587)
  - mod_ldap: add LDAPReferrals directive alias (#796958)
  - mod_ssl: add _userID DN variable suffix for NID_userId (#842375)
  - mod_ssl: fix test for missing decrypted private keys, and ensure that
    the keypair matches (#848954)
  - mod_authnz_ldap: set AUTHORIZE_* variables in LDAP authorization (#828896)
  - relax checks for status-line validity (#853348)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-21
changelog:
  - mod_proxy_ajp: ignore flushing if headers have not been sent (#853160)
  - mod_proxy_ajp: do not mark worker in error state when one request
    timeouts (#864317)
  - mod_ssl: do not run post script if all files are already created (#752618)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-22
changelog:
  - mod_cache: fix header merging for 304 case, thanks to Roy Badami (#868283)
  - mod_cache: fix handling of 304 responses (#868253)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-25
changelog:
  - htcacheclean: exit with code 4 if nonprivileged user runs initscript (#805810)
  - rotatelogs: omit the second arg when invoking a post-rotate program (#876923)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.15-30
changelog:
  - mod_dav: add security fix for CVE-2013-6438 (#1078174)
  - mod_log_config: add security fix for CVE-2014-0098 (#1078174)


author: Joe Orton <jorton@redhat.com> - 2.2.14-1
changelog:
  - update to 2.2.14
  - relax permissions on /var/run/httpd (#495780)
  - Requires(pre): httpd in mod_ssl subpackage (#543275)
  - add partial security fix for CVE-2009-3555 (#533125)


author: Joe Orton <jorton@redhat.com> - 2.2.14-4
changelog:
  - mod_ssl: add further mitigation for CVE-2009-3555
  - drop proxy_ajp.conf
  - update httpd.conf: decrease Timeout to 1m, update LoadModule
    directives, bump worker to 4 proc/300clients
  - fix hard-coded default pidfile to match default config (#547629)
  - drop legacy X-Pad header from short responses (#526110)
  - disable keepalive for Expect: 100-continue and error response (#533407)
  - mod_ext_filter: fix spurious error log output (#479463)
  - mod_rewrite: don't serialize logfile access (#493023)
  - fix spurious error messages on graceful restart (#233955)
  - mod_ssl: fix potential hang in renegotiation (#510515)
  - mod_proxy_connect: support use SSL client connection (#523594)


author: Joe Orton <jorton@redhat.com> - 2.2.14-5
changelog:
  - mod_ssl: fix CVE-2009-3555 backport (#563119)
  - mod_authnz_ldap: fix for dynamic group support
  - mod_ssl: add SSLInsecureRenegotiation directive (#561435)


author: Joe Orton <jorton@redhat.com> - 2.2.15-1
changelog:
  - update to 2.2.15 (#570465, #570442)
  - fix version string (#572140)
  - mod_ssl: use ASN1_STRING_print() in SSLRequire's OID() (#552942)
  - prevent use of rsync during "make install" (#557049)
  - load mod_version by default in httpd.conf


author: Joe Orton <jorton@redhat.com> - 2.2.15-2
changelog:
  - init script fixes for LSB compliance (#546252)
   * exit code 2 for an unknown script argument
   * exit code 6 for a reload if config-test fails
   * exit code 7 for a reload on a stopped service
   * fixed help output to cover all options
  - mod_dav: handle PUT failure more cleanly (#572911)


author: Joe Orton <jorton@redhat.com> - 2.2.15-3
changelog:
  - add "Satisfy All" for .htaccess in httpd.conf (#594981)
  - adjust user/group creation in %pre (#594395)
  - mod_ssl: tweak OID() evaluation of unknown exts (#594980)


author: Joe Orton <jorton@redhat.com> - 2.2.15-4
changelog:
  - use init script to rotate logs (#606955)
  - disable keepalive for 100-continue and error response (#606964)


author: Joe Orton <jorton@redhat.com> - 2.2.15-9.3
changelog:
  - add security fixes for CVE-2011-3347, CVE-2011-3368 (#743901)
  - fix regressions in CVE-2011-3192 patch (#736592)


author: Caolan McNamara <caolanm@redhat.com> - 0.20090216-3
changelog:
  - Change two suspicious words with two initial capitals in en_GB
    from ADte TEirtza to ADTe Teirtza


author: Parag Nemade <pnemade AT redhat.com> - 0.2.1-2
changelog:
  - Resolves: rh#567895: Fix license tag in spec file with new upstream release
  - Removed CREDITS file as upstream provides now README and LICENSE files.


author: Parag <pnemade@redhat.com> - 0.20050929-3
changelog:
  - Use aspell source instead to pull source as BR:aspell-te
  - Resolves:rh#511262 buildrequires aspell-te


author: Karsten Hopp <karsten@redhat.com> 0.232-1
changelog:
  - update usb.ids, out.txt and pci.ids (#550020, #611860)
  - fix incorrect syntax doc/comment in blacklist.conf (Ville Skyttä, #532802)
  - add Acer B243HL and BenQ G2420HDBL (Ville Skyttä, #590787)
  - add HP LP2475w and Samsung 2494HM (Ville Skyttä, #595059)


author: Karsten Hopp <karsten@redhat.com> 0.233-7
changelog:
  - bump release
  - update oui.txt URL
  - fix tarball name in spec file
  - update usb.ids, out.txt and pci.ids


author: Michal Minar <miminar@redhat.com> 0.233-7.9
changelog:
  - updated pci.ids, usb.ids, oui.txt
  - Resolves: #739816, #739819, #739821, #739824
  - Resolves: #739825, #760031, #830253, #839221, #841423


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.1-0
changelog:
  - 1.1 rel# Patch to the 1.1 fix 2967 http://www.open-mpi.org/software/hwloc/nightly/v1.1/hwloc-1.1rc6r2967.tar.bz2
  - Fix hwloc_bitmap_to_ulong right after allocating the bitmap.
  - Fix the minimum width of NUMA nodes, caches and the legend in the graphical lstopo output.
  - Cleanup error management in hwloc-gather-topology.sh.
  - Add a manpage and usage for hwloc-gather-topology.sh on Linux.
  - Rename hwloc-gather-topology.sh to hwloc-gather-topology to be consistent with the upcoming version 1.2ease


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.3-0
changelog:
  - 1.3 release
   - added dependency on libibverbs-devel pciutils-devel
   - cannot provide support for cuda (cuda_runtime_api.h). 
   - Nvidia CUDA is free but not open-source therefore not in Fedora.


author: Tomas Hozza <thozza@redhat.com> - 0-0.8
changelog:
  - Bumping release to 0.8 to avoid update path from RHEL5
  - changing the way how Netlink source address is validated (#872593)
  - fix for long names from readdir (#872566)
  - applied reasonable Debian/Ubuntu patches (#872584)


author: Tomas Hozza <thozza@redhat.com> - 0-0.9
changelog:
  - Fix a typo in hv_set_ifconfig.sh script
  - Fix creation process of ifcfg-* files when doing IP injection
  - Use CLOEXEC when opening pool files to prevent FD leaking
  - Changes in SPEC file:
   - remove/create %{_sharedstatedir}/hyperv if removing/installing package
   - install scripts without ".sh" extension


author: Tomas Hozza <thozza@redhat.com> - 0-0.10
changelog:
  - Fix segfault when cgred is running (#920032)
  - Fix errors found by static analysis of code (#965944)
  - Start hypervkvpd only if Hyper-V drivers are loaded (#962565)


author: Tomas Hozza <thozza@redhat.com> - 0-0.11
changelog:
  - Fix initscript test if Hyper-V drivers are loaded (#978300)
  - Build the daemon with full RELRO and PIE (#977861)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 3.0.0-3
changelog:
  - Change /dev/i2c-# creation from /lib/udev/devices to /etc/udev/makedev.d
    usage
  - Add an /etc/modprobe.d/i2c-dev file to work around bug 380971


author: Till Maas <opensource till name> - 20061109-2
changelog:
  - Make description line less than 80 instead of less that 81 characters long
  - Permissions of manpage are 0644 instead of 0755 now


author: Doug Ledford <dledford@redhat.com> - 1.0.5-2
changelog:
  - Don't install the address file or config file, the config file isn't
    strictly needed and defaults will be used if it isn't installed, but
    with the address file we specifically need to build one based upon
    the machine where the program is installed, a default file is not only
    not helpful, but it messes up the daemon.
  - Related: bz700285


author: Doug Ledford <dledford@redhat.com> - 1.0.5-3
changelog:
  - Until the next upstream release, the pid file is in a wonky location.
    Make the init script know about that location so we can stop properly.
  - Resolves: bz808599


author: Doug Ledford <dledford@redhat.com> - 0.4-3
changelog:
  - Rebuild against updated libibmad and libibumad libraries
  - Only need to build require libibmad, it pulls in libibumad
  - Resolves: bz451466


author: Doug Ledford <dledford@redhat.com> - 0.5-4.el6
changelog:
  - Rebuild against latest opensm, which was required for latest ibutils,
    which was required to resolve licensing issues during pkgwrangler review
  - Related: bz555835


author: Peng Huang <shawn.p.huang@gmail.com> - 1.3.0-3
changelog:
  - Update ibus-HEAD.patch
  - Fix bug - some time panel does not show candidates.
  - Update some po files


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-2
changelog:
  - Revert the version not to be rebased.
  - Fix bug 608988 - Cannot de-select Hanja lock in applet menu
    Resolves: #608988


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-4
changelog:
  - Resolves: #651915 Wrong window position with ibus-x11
    Added ibus-651915-x11-position.patch
  - Resolves: #633330 Fixed kn.po
  - Resolves: #635541 Fixed gu.po
    Added ibus-1.3.4-po-2010-11-17.tar.bz2


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.4-6
changelog:
  - Fixed Bug 667031 - ibus requires dbus-x11
  - Fixed Bug 670137 - QT_IM_MODULE=xim in ibus.conf without ibus-qt


author: Takao Fujiwara <takao.fujiwara1@gmail.com> - 1.2.0.20091127-1
changelog:
  - Update to 1.2.0.20091127
  - Fix bug 520989 - ibus-anthy icon enhancement
  - Fix bug 531696 - ibus-anthy KeyError is still reported by abrt
  - Fix bug 536716 - ibus-anthy: Symbol type change support in ibus-anthy


author: Takao Fujiwara <takao.fujiwara1@gmail.com> - 1.2.1-3
changelog:
  - Fixed Bug 661597 - the latest page_size for ibus.LookupTable.
  - Added -fno-strict-aliasing option in CFLAGS for rpmdiff


author: Ding-Yi Chen <dchen at redhat.com> - 1.2.99.20100212-1
changelog:
  - Fixed Google issue 505.
  - Google issue 755 is fixed in libchewing-0.3.2-22,
    See Chewing Google issue 10
  - Fixed behavior of Del, Backspace,  Home, End
  - Revert the change that fix Google issue 758.
  - Change the default input style to "in candidate window",
    because not all application handle the on-the-spot mode well.
  - Fixed Google issue 776


author: Ding-Yi Chen <dchen at redhat.com> - 1.2.99.20100216-1
changelog:
  - Fixed when typing English immediately after incomplete Chinese character.
  - Add zh_TW summary.
  - Revised description and write its zh_TW translation.


author: Ding-Yi Chen <dchen at redhat.com> - 1.2.99.20100317-1
changelog:
  - Fix google 796: English input for dvorak
  - Fix google 797: Zhuyin input for dvorak
  - Fix google 807: ibus-chewing shows the over-the-spot panel
    even when not necessary


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.4.20100605-1
changelog:
  - Fix Issue 942: Fix unsunk references in ibus-chewing
    Applied the patch provided by zork@chromium.org.
  - Rename CVS_DIST_TAGS to FEDORA_DIST_TAGS, and move its
    definition to cmake_modules/
  - Gob2 generated file is now removed, because
    Bug 519108 is fixed from Fedora 11.


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.4.20100608-1
changelog:
  - ibus-chewing can now use mouse to click on mouse. Thus
    Fix Issue 951: Chewing does not support selection of candidates via mouseclick
    Thanks zork@chromium.org for the patch.


author: Ding-Yi Chen <dchen at redhat.com> - 1.3.5.20100706-1
changelog:
  - Fixed google issue 965:
    Candidate missing if both "Plain Zhuyin" and "Space As selection" are enabled.
  - Revised Basic.macro
  - Resolved: #608991


author: Peng Huang <shawn.p.huang@gmail.com> - 1.1.0.20090330-1
changelog:
  - Update version to 1.1.0.20090330.
  - Fix bug 486056 - missing options for 2bul, 3bul and other Korean layouts
  - Fix bug 487269 - missing Hanja Conversion


author: Warren Togami <wtogami@redhat.com> - 1.1.0.20090330-2
changelog:
  - Bug 493706: ibus-hangul Hanja arrow keys are wrong
  - Bug 493509: ibus-hangul missing right Ctrl for Hanja button
    These fixes are not ideal, but they make it usable for Fedora 11.
    These must become configurable in a future version.


author: Peng Huang <shawn.p.huang@gmail.com> - 1.1.0.20091031-1
changelog:
  - Update version to 1.2.0.20091031.
  - Drop ibus-hangul-1.1.0.20090328-right-ctrl-hanja.patch and
    ibus-hangul-1.1.0.20090328-hanja-arrow-keys.patch temporarily, because
    patches conflict with 1.2.0.20091031, and the key configure will available
    in next release.


author: Daiki Ueno <dueno@redhat.com> - 1.3.0.20100329-5
changelog:
  - Add workaround for the race of XIM client and IBUS_ENGINE_PREEDIT_COMMIT
  - Fix bug 965554 - ibus-hangul may not handle key event after focus change


author: Peng Huang <shawn.p.huang@gmail.com> - 1.3.0-1
changelog:
  - Update to 1.3.0.
  - Update iok patch.
  - Fix bug 577148 - IOK screen appears with all keyboard layouts on ibus language panel


author: Daiki Ueno <dueno@redhat.com> - 1.3.0-2
changelog:
  - Add ibus-m17n-641243-indic-ranks.patch.
  - Fix bug 641243 - Ibus does not load all the keymaps for a language
    that is used for logging in
  - Add ibus-m17n-652201-altgr.patch.
  - Fix bug 652201 - [Indic] Rupee Symbol (U+20B9) Need to include in
    Indic Keyboard


author: Caius 'kaio' Chance <cchance at redhat.com> - 1.2.0.20100111-3
changelog:
  - Resolves: rhbz#559799.
  - Split devel file into devel package.
  - Fix non-executable-script of tabcreatedb.py.


author: Caius 'kaio' Chance <cchance at redhat.com> - 1.2.0.20100119-8
changelog:
  - Resolves: rhbz#559807
  - Change BuildRequires from ibus-table to ibus-table-devel, as .pc is moved.


author: Caius 'kaio' Chance <k at kaio.me> - 1.1.0.20090717-2.fc12
changelog:
  - Removed unneccessary BuildRequires.
  - Removed unneccessary owned directories.
  - Changed autogen.sh into configure.


author: Caius 'kaio' Chance <cchance at redhat.com> - 1.2.0.20090901-5.el6
changelog:
  - Resolves: rhbz#567749
  - Fixes build error with BuildRequires from ibus-table to ibus-table-devel.
  - Removes ibus from Requires as ibus-table should have request that.


author: Caius 'kaio' Chance - 1.2.0.20090715-4.el6
changelog:
  - Resolves: rhbz#554946
  - Add translations for supported non-English languages to summary and descriptions.


author: Caius 'kaio' Chance <cchance at redhat.com> - 1.2.0.20090715-8.el6
changelog:
  - Resolves: rhbz#567750
  - Fixes build error with BuildRequires from ibus-table to ibus-table-devel.
  - Removes ibus from Requires as ibus-table should have request that.


author: Doug Ledford <dledford@redhat.com> - 1.2-4
changelog:
  - Upstream has updated the tarball without changing the version number,
    grab the tarball from the OFED-1.4-beta1 tarball and use it.
  - Resolves: bz451467


author: Doug Ledford <dledford@redhat.com> - 1.2-7
changelog:
  - Grab the upstream ibutils git repo, find a checkout that supports the
    recent opensm library versions and yet doesn't require graphviz-tcl,
    export that tree to a tarball with a git designation, build from it.
  - Resolves: bz468122


author: Doug Ledford <dledford@redhat.com> - 1.2-8
changelog:
  - Remove ibdiagui from the package entirely since it still doesn't work
    without graphviz-tcl
  - Related: bz468122


author: Doug Ledford <dledford@redhat.com> - 1.5.4-1.el6
changelog:
  - Update to latest upstream version, which cleans up some licensing issues
    found in the previous versions during review
  - Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> 1.5.7-8
changelog:
  - Add the -output patch to have programs use /var/cache/ibutils
    instead of /tmp
    Resolves: bz958569


author: Deepak Bhole <dbhole@redhat.com> - 1.0-3
changelog:
  - Bump to 1.0 proper
  - Install to jre dir only
  - Restrict access to net.sourceforge.jnlp.*
  - Resolves bugs 674519, 674517, 674524, 671470


author: Deepak Bhole <dbhole@redhat.com> - 1.0-5
changelog:
  - Minor comment/group/etc. updates from omajid@redhat.com
  - Added base package requirement for javadoc subpackage


author: Deepak Bhole <dbhole@redhat.com> - 1.0.1-1
changelog:
  - Bumped to 1.0.1
  - Removed icedtea-web-pkg-access.patch (now upstream)
  - Resolves CVE-2011-0706 and CVE-2010-4450


author: Deepak Bhole <dbhole@redhat.com> - 1.0.1-3
changelog:
  - Resolves rhbz#645781 (desktop sharing now works)
  - Updated the classloader sharing patch to fix loader sharing rules
  - Added version and release string in plugin display


author: Deepak Bhole <dbhole@redhat.com> 1.0.2-1
changelog:
  - Resolves rhbz#693601 
  - Update to IcedTea-Web 1.0.2
  - Dropped patch0 (instance validity check). Now part of 1.0.2
  - Also resolves #682674 by adding a javaws Provides


author: Deepak Bhole <dbhole@redhat.com> 1.1.1-1
changelog:
  - Bump to 1.1.1
  - Removed icedtea-web-shared-classloader.patch (now upstream)
  - Updated alternative removal commands to reflect the situation in RHEL6
  - Resolves: rhbz#713514


author: Deepak Bhole <dbhole@redhat.com> 1.1.2-1
changelog:
  - Updated to 1.1.2
  - Resolves: rhbz#683479
  - Resolves: rhbz#725794
  - Resolves: rhbz#718181 
  - Resolves: rhbz#731358
  - Resolves: rhbz#725718
  - Use the new --with-jre-home switch (#731358)


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-0
changelog:
  - Updated to latest ustream release of 1.2 branch - 1.2.3
   - Security Updates
    - CVE-2013-1927, RH884705 - fixed gifar vulnerability
    - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
   - Common
    - PR1161: X509VariableTrustManager does not work correctly with OpenJDK7
   - Plugin
    - PR1157: Applets can hang browser after fatal exception
  - Removed upstreamed patch 0- icedtea-web-PR1161.patch
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-1
changelog:
  - fixed postun - removal of alternatives for plugin restricted to 
    (correct) removal process only
  - fixed date in changelog previous entry
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-2
changelog:
  - Added (temporally!) posttrans forcing creation of symlinks
    - should be removed next release
  - Resolves: rhbz#949094


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-3
changelog:
  - added patch1 b25-appContextFix.patch to make it run with future openjdk
  - rmeoved posttrans
  - Resolves: rhbz#975426


author: Jiri Vanek <jvanek@redhat.com> 1.2.3-4
changelog:
  - improved patch1 b25-appContextFix.patch to make it run with future openjdk better
  - Resolves: rhbz#975426


author: Jiri Vanek <jvanek@redhat.com> 1.3.2-0
changelog:
  - Updated to icedtea-web 1.3.2 - see RHBZ 916161 for details
  - this update contains security fixes:
    - CVE-2013-1927, RH884705: fixed gifar vulnerability
    - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
  -Common
    - Added new option in itw-settings which allows users to set JVM arguments when plugin is initialized.
  - NetX
    - PR580: http://www.horaoficial.cl/ loads improperly
  - Plugin
     PR1260: IcedTea-Web should not rely on GTK
     PR1157: Applets can hang browser after fatal exceptio
  - and much more since 1.3, over 1.3.1
  - Resolves: rhbz#949095


author: Jiri Vanek <jvanek@redhat.com> 1.4-0
changelog:
  - Updated to 1.4
  - See announcement for detail
   - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-May/023195.html
  - Resolves: rhbz#916161


author: Jiri Vanek <jvanek@redhat.com> 1.4.1-0
changelog:
  - updated to 1.4.1
  - add icedtea-web man page
  - removed upstreamed  patch1 b25-appContextFix.patch
  - Resolves: rhbz#916161


author: Caolan McNamara <caolanm@redhat.com> - 4.2.1-9
changelog:
  - Resolves: rhbz#596171 drop icu.icu6284.strictalias.patch and use
    -fno-strict-aliasig as upstream has added a pile more and doesn't look
    interested in proposed patchs


author: Andrew Overholt <overholt@redhat.com> 0:3.8.1-2
changelog:
  - Remove GCJ support due to
    com.sun.tools.doclets.internal.toolkit.taglets.* import (not in gjdoc)


author: Andrew Overholt <overholt@redhat.com> 3.8.1-3
changelog:
  - Get rid of eclipse_name macro
  - Rebuild with Eclipse 3.4 and put into Eclipse stuff into
    %{_libdir}/eclipse
  - Remove now-unnecessary OSGi configuration dir patch
  - Add patch to point to PDE Build location


author: Ville Skyttä <ville.skytta at iki.fi> - 0:3.8.1-4
changelog:
  - Disable debuginfo package when built with Eclipse support, change to
    noarch when built without it (#464017).


author: Rex Dieter <rdieter[AT]fedoraproject.org> 1.0.0-2
changelog:
  - update %summary
  - -devel: +Requires: libGL-devel libGLU-devel
  - make install ... INSTALL="install -p" to preserve timestamps


author: Jens Petersen <petersen@redhat.com> - 1.2.7-2
changelog:
  - add new gnome-icon-theme style icons by Lapo Calamandrei and Jakub Steiner
    (mizmo, #587712)
  - add scriptlets for icon cache


author: Akira TAGOH <tagoh@redhat.com> - 1.3.1-1
changelog:
  - New upstream release.
    - Fallback to the themed icon if no icons are installed
      on the specified path. (#604482)


author: Adam Jackson <ajax@redhat.com> 1.0.2-8
changelog:
  - imake-1.0.2-find-pedantry.patch: Silence useless pedantry warning from
    find(1) when running cleanlinks. (#483126)


author: Akira TAGOH <tagoh@redhat.com> - 0.108.0-2
changelog:
  - Fix issue the invocation of IM always fails in the internal status. (#582448)
  - Add imsettings-lxde subpackage.


author: Jens Petersen <petersen@redhat.com> - 0.108.0-3.5
changelog:
  - only enable XIM for X locale compose for necessary locales (#616061)
    (for pt_BR, fi_FI, am_ET, el_GR, and ru_RU):
  - drop imsettings-none.conf-gtk-xim-default.patch
  - add imsettings-xinput-xcompose.patch


author: Petr Machata <pmachata@redhat.com> - 2.2.9-17
changelog:
  - Tidy up the specfile per rpmlint comments
  - Use utf-8 and fix national characters in contributor's names


author: Doug Ledford <dledford@redhat.com> - 1.5.3-1.el5
changelog:
  - Update to latest upstream version
  - Don't include the newly added devel stuff as it's likely only needed
    internally (and certainly not needed by anything we've supported before
    since we've never shipped it)
  - Related: bz518218


author: Jay Fenlason <fenlason@redhat.com> 1.5.3-3.el6
changelog:
  - Correct the perldir macro for rhel-6's perl.
  - Remove the unrecognized --with-node-name-map configure option.
  - reorganize the files section to use fewer globs, so that it's less likely
    to pick up files inappropriately.


author: Doug Ledford <dledford@redhat.com> - 1.5.5-1.el6
changelog:
  - Update and rebuild against latest opensm (which was needed for latest
    ibutils, which was needed for licensing issues resolved in new upstream
    tarball, which was needed for pkgwrangler review)
  - Related: bz555835


author: Doug Ledford <dledford@redhat.com> - 1.5.8-1.el6
changelog:
  - Update to latest upstream version
  - Make build work on i686 arch
  - Modify perfquery to be able to loop through all HCAs in a single host
  - Resolves: bz593767
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.5.12-1
changelog:
  - Update to latest upstream release
  - Initial Fedora import
  - Add devel and devel static packages (review item)
  - Make etc file config(noreplace) (review item)
  - Remove no longer support scripts (review item)
  - Related: bz750609


author: Jay Fenlason <fenlason@redhat.com> - 1.5.12-3
changelog:
  - Reorganize this spec file to include /usr/sbin/ibswportwatch.pl
    and remove man pages for programs that aren't included.
    Resolves: bz814518


author: Doug Ledford <dledford@redhat.com> - 1.5.12-4
changelog:
  - Update the all_hcas patch to resolve several problems
  - Give a simple help message to the ibnodes script
  - Resolves: bz818606, bz847129


author: Jay Fenlason <fenlason@redhat.com> - 1.13-2
changelog:
  - Use macros for lib and include directories, and include dist tag in
    release field.
  - Corrected License field.
  - Corrected Requires lines for libuuid.
  - Add Exclusive-arch x86_64
    Related: rhbz570274


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include the -execstack patch to get libinfinipath.so correctly
    labeled as not executing the stack.
    Resolves: rhbz612936


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Put the udev rules file in the right place
    Resolves: rhbz866732
  - include a patch from upstream to fix undefined references
    Resolves: rhbz887730


author: Bill Nottingham <notting@redhat.com> - 9.03.8-1
changelog:
  - clean up plymouth shtudown splash (#590103, <rstrode@redhat.com>)
  - rc.sysinit: use lvm2 --sysinit option (#588777)
  - network-functions: behave sanely in the absence of $DEVICE (#592108)
  - sysconfig/debug: export debug variables (#592102)
  - netfs: check for NM to be connected, not just running (#592095)
  - rcS*.conf: check if /etc/inittab exists (#590706, <plautrba@redhat.com>)
  - port vlan code to /sbin/ip (#566485, <plautrba@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 9.03.9-1
changelog:
  - check NM_CONTROLLED before deciding to use NM for a connection. (#600454)
  - always reboot on autorelabel. (#599879)
  - correct the fix for not clearing  environment with runuser. (#564105)
  - properly handle permission denied on pid file (#595597)


author: Bill Nottingham <notting@redhat.com> - 9.03.10-1
changelog:
  - ifup-eth: check for dhclient configuration in /etc/dhcp as well (#607766)
  - network-functions: handle quoted SUBCHANNELS (#607481)
  - netfs: allow for encrypted network block devices (#605600)


author: Bill Nottingham <notting@redhat.com> - 9.03.13-1
changelog:
  - rename_device - handle quoted 'DEVICE' (#614943, <harald@redhat.com>)
  - rename_device - fix handling of s390 subchannels (#614739, <harald@redhat.com>)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.18-1
changelog:
  - don't use the ipv6_exec_ip wrapper
  - don't accidentally cause sit module to be loaded on shutdown. (#654098, <ejsheldrake@gmail.com>)
  - simplify various string match constructs. (#558575, <ville.skytta@iki.fi>)
  - explicitly pass both device and dir when remounting read-only (#620461, <phr@doc.ic.ac.uk>)
  - add infiniband mapping (#648524, <monis@voltaire.com>)
  - fix ifdown calling nmcli for NM-managed devices (#612934, <jklimes@redhat.com>)
  - allow 0 as a vlan tag. (#635360)
  - support multiple IP addreses via IPADDRn, PREFIXn (or NETMASKn) (#633984)
  - stop tty and serial also on runlevel 's' (#629257)
  - system z optimized sysctl settings per default (#633323)
  - don't run kexec-disable for runlevels [S016] (#658138)
  - add # as a valid character in network device names (<Matt_Domsch@dell.com>)
  - use SYSCTLDEVICE without . (#667211, <notting@redhat.com>)
  - handle 'MASTER' being quoted. (#651450, <gfidente@redhat.com>)
  - test if there is /dev/rtc before syncing hardware clock (#598850)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.19-1
changelog:
  - sys-unconfig(8) manpage fix (#674397)
  - set default shmmax and shmall for certain architectures (#660036)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.22-1
changelog:
  - init.d/functions: fix mishandled argument to fstab-decode (#682879)
  - network-functions: fix check for unmanaged devices (#670154)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.24-1
changelog:
  - add support for sysctl.d (#680527)
  - log network messages via syslog (#653630, #672202)
  - document NM_CONTROLLED (#692123)
  - don't explictly disallow IPv6 aliases (#692240)
  - make sure the bond exists when we bring up the slaves. (#694501)
  - properly add and remove arp_ip_target's (#675079)
  - load static arp entries from ethers file (#696788)
  - fix logic error in rc.sysinit (#698520, <jlau@redhat.com>)
  - handle IPADDRx correctly for static addresses (#700184)
  - don't match filesystem types in hostnames (#703210, <jmueller@data-tronics.com>)
  - check for VLAN interfaces is being slave first (#703475)
  - override NETMASK from PREFIX where specified (#705367, <mpoole@redhat.com>)
  - allow multiple ETHTOOL_OPTS option types (#692410, #693583)
  - don't mount gfs2 in netfs (#689593)
  - fix pid file usage for IPv6. (#729292, <daveg@dgit.ndo.co.uk>)


author: Petr Lautrbach <plautrba@redhat.com> 9.03.26-1
changelog:
  - add 'emergency' mode (#681357)
  - kexec - free reservation memory only for crashkernel=auto (#734987)


author: Lukas Nykryn <lnykryn@redhat.com> 9.03.28-1
changelog:
  - sysconfig support for IPv6 policy based routing (#781493)
  - fix typo in translation (#757637)
  - fix logic error with removing arp_ip_target (#787107, #746045)
  - don't set primary before we enslave devices. (#749610, <agospoda@redhat.com>)
  - do not check mounted filesystems (#745224)
  - eviscerate ifconfig uses from ip-aliases (#721010, #588993)
  - improve comment in init/serial.conf (#746808)
  - turn off UPS in powerfail situation (#754984, <robert@fedoraproject.org>)
  - netconsole exit arping on first response (#765835)
  - add cifs to check for network filesystem (#760018)
  - fix comments in sysctl.conf (#755175)
  - rc.sysinit - use rcS-emergency job instead of sulogin (#582002)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.32-1
changelog:
  - check an IP address for existence in ifup-alias
  - remount /dev/shm in sysinit to apply attributes from fstab
  - sets BONDING_OPTS before interface is brougth up and checks if it is not already added
  - Add support for setting random bridge options via BRIDGING_OPTS
  - use vgchange -aay in rc.sysinit and netfs init script
  - script should not kill itself during shutdown
  - fix the NIS domain setting
  - be less strict about VLAN name
  - clarification of work with white spaces in crypttab manpage
  - re-read sysctl values for VLANs on ifup
  - pass useful arguments to halt.local
  - start serial console when we return from runlevel1
  - move VLAN= docs to the interface configuration section, rather than /etc/sysconfig/network.
  - don't accidentally match other bonding devices
  - add usage stanzas for tty.conf and serial.conf
  - rename_device: skip VLAN=yes configuration files
  - allow duplicate address dectection to be disabled


author: Václav Pavlín <vpavlin@redhat.com> - 9.03.34-1
changelog:
  - there should be crypttab instead of crypptab in man page (#870025)
  - sysconfig.txt advised saslauthd -a instad of -v (#869075)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 9.03.39-1
changelog:
  - remount /proc to set attributes from fstab #984003
  - print something when arping is detecting colliding ip addresses
  - try dhcpv6 after v4 failed
  - Allow dhclient configuration files for DHCPv6 as well. (#815676)
  - ifdown: don't call nmcli on interface that is alread down
  - call flush addresses with scope global
  - init: inform users about .override files in .conf files
  - netfs: do not force NFS exports to be mounted before _netdev mounts
  - set net.ipv6.conf..autoconf in ifup-ipv6
  - mention rule6 files
  - securetty: check if the device is in the file before attempting to write to it
  - Process rule6-* for sit devices (#840009)
  - Killproc -d should parse same values as sleep
  - Make killproc more granular when delay is passed. (#428029, <xjakub@fi.muni.cz>)
  - bonding: set master up before slaves
  - Fix greps to correctly handle comments and quotation (#915659)


author: Lukas Nykryn <lnykryn@redhat.com> - 9.03.40-1
changelog:
  - sync disks before halt (#1006294)
  - provide KVM guest count and limit info message (#1014731)
  - add ability to disable LVM activation on boot (#1015065)


author: Lubomir Rintel <lkundrak@v3.sk> - 0.47-0.16.pre3.20090925svn
changelog:
  - Move to a later snapshot
  - Drop debugging compiler flags, enable optimizations again
  - Make it build on everything since EL5 again


author: Stepan Kasal <skasal@redhat.com> - 0.47-5
changelog:
  - require perl(:MODULE_COMPAT_5.10.x) because the package requires libperl.so
  - the same for inkscape-view


author: Parag Nemade <pnemade AT redhat DOT com>- 1.3.13-1
changelog:
  - Resolves:rh#752667 - iok looks for ~/.m17n not ~/.m17n.d
  - Resolves:rh#752668 - input fail on touch-screen with finger, while mouse click is working for iok
  - Resolves:rh#736992 - iok crashed and segfaults occurred while selecting xkb-Hindi Wx keyboard
  - Update to 1.3.13 release


author: Parag Nemade <pnemade AT redhat DOT com>- 1.3.13-2
changelog:
  - Resolves:rh#798592 - iok crashed while selecting 'xkb-Malayalam (enhanced Inscript with Rupee Sign)'


author: Parag Nemade <pnemade AT redhat DOT com>- 1.3.13-3
changelog:
  - Resolves:rh#814548: Save File option should suggests a predefined file name format
  - Resolves:rh#814521: iok does not fetch any .mim file name which does not contain "inscript2" word.
  - Resolves:rh#814541: Predefined naming convention followed when save File name, but no clue of that to user 
  - Resolves:rh#819795: Translation tracker for iok


author: Michal Hlavinka <mhlavink@redhat.com> - 0.3.2-6
changelog:
  - PRIO field was not shown correctly on powerpc platforms (#826875)
  - iotop failed when locale was incorrect (#849559)
  - move iotop to sbin (#908149)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-14
changelog:
  - Update to upstream 2.0.0rc3 (#680993)
  - Set minimum version of sssd to 1.5.1-12
  - Remove SuitespotGroup patch
  - Rebase remove-pkinit patch


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-16
changelog:
  - Use realm provided by installer in LDAP Updater (#684744)
  - Use args for domain and server when doing DNS discovery in client (#684780)
  - Fix 2 SELinux issues in dogtag replication (#684269)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-17
changelog:
  - Wait for Directory Service ports to open (#688934)
  - Mixed case hostname can cause issues and confusion (#688622)
  - Wrong timeout parameter in ipapython (#684273)
  - Run ipa-ldap-updater on upgrades (#688931)
  - Internal Error and trace back when adding DNS AAAA record (#689452)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-19
changelog:
  - Port 7390 is managed by selinux-policy-3.7.19-80. Update
    ipa-repl_selinux.patch to not manage it any more. (#691883)
  - Patch to fix setting gidnumber when a user is created. (#692168)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-20
changelog:
  - Set min version of 389-ds-base to 1.2.8.0-1 for fix in BZ 693466.
  - Fix some problems in IPA schema (#692978)
  - postalCode should be a string not an integer (#692945)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-23.el6_1.1
changelog:
  - Wait for 389-ds tasks to complete (#709329)
  - Set replica to restart ipa on boot (#709330)
  - Managed Entries not configured on replicas (#709331)
  - Don't create bogus aRecord when creating new zone (#709332)


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-23.el6_1.2
changelog:
  - Use updated xmlrpc-c API to do GSSAPI ticket delegation (#729805) 
  - Set minimum requires of xmlrpc-c to 1.16.24-1200.1840.el6_1.4
  - Set minimum requires of libcurl to 7.19.7-26.el6_1.2


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-1.el6
changelog:
  - Update to upstream 2.1.3 release (#736170)
  - Additional branding (#742264)
  - Disable automember cli (#746717)
  - ipa-client-install sometimes fails to start sssd properly (#736954)
  - ipa-client-install adds duplicate information to krb5.conf (#714597)
  - ipa-client-install should configure hostname (#714919)
  - inconsistency in enabling "delete" buttons (#730751)
  - hbactest does not resolve canonical names during simulation (#740850)
  - Default DNS Administration Role - Permissions missing (#742327)
  - named fails to start after installing ipa server when short (#742875)
  - Duplicate hostgroup and netgroup should not be allowed (#743253)
  - named fails to start (#743680)
  - Global password policy should not be able to be deleted (#744074)
  - Client install fails when anonymous bind is disabled (#744101)
  - Internal Server Error adding invalid reverse DNS zone (#744234)
  - ipa hbactest does not evaluate indirect members from groups. (#744410)
  - Leaks KDC password and master password via command line arguments (#744422)
  - Traceback when upgrading from ipa-server-2.1.1-1 (#744798)
  - IPA User's Primary GID is not being set to their UPG's GID (#745552)
  - --forwarder option of ipa-dns-install allows invalid IP addr (#745698)
  - UI does not grant access based on roles (#745957)
  - Unable to add external user for RunAs User for Sudo (#746056)
  - Typo in error message while adding invalid ptr record. (#746199)
  - Don't use python 2.7-only syntax (#746229)
  - Error when using ipa-client-install with --no-sssd option (#746276)
  - Installation fails if sssd.conf exists and is already config (#746298)
  - External hosts are not removed properly from sudorule (#709665)
  - Competely remove entitlement support (#739060)
  - Add winsync section to ipa-replica-manage man page (#744306)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-2.el6
changelog:
  - ipa-client-install hangs if the discovered server is unresponsive (#745392)
  - Fix minor problems in help system (#747028)
  - Remove help fix from Disable automember patch (#746717)
  - Update minimum version of sssd to 1.5.1-60 to pick up SELinux fix (#746265)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-3.el6
changelog:
  - hbactest fails while you have svcgroup in hbacrule (#746227)
  - Add Kerberos domain mapping for system hostname (#747443)
  - Format certificates as PEM in browser (#701325)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-8.el6
changelog:
  - Updated patch for CVE-2011-3636 to include CR in the HTTP headers.
    xmlrpc-c in RHEL-6 doesn't suppose the dont_advertise option so that is
    not set any more. Another fake header, X-Original-User_Agent, is added
    so there is no more trailing junk after the Referer header.  (#749870)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-9.el6
changelog:
  - Add current password prompt when changing own password in web UI (#751179)
  - Remove extraneous trailing ' from netgroup patch (#749352)


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-8.el6
changelog:
  - Fix ambiguous error msg in automount indirect map creation (#790131)
  - Invalid error message attempting to delete config attributes (#791373)
  - Enforce single-value attributes (#794746)
  - config-mod allowed to add additional certificate subjects bases (#794750)
  - Embedded carriage returns in a CSV not handled (#797569)
  - WebUI displays "Insufficient access: invalid credentials" when a password
    doesn't meet policy requirements (#802786)
  - Tech Preview: SELinux User Mapping (#803821)
  - Tech Preview: Add support for central management of the SSH keys (#803822)
  - Password Policy Failure Interval Reset is not working. (#804096)
  - Set SELinux booleans properly (#806330)
  - DNS records in LDAP are publicly accessible (#807361)
  - Upgrading replication agreements without nsDS5ReplicatedAttributeList fails
    (#808201)
  - IPA Upgrade Web UI failure with internal server error (#809262)
  - Do not create private groups for migrated users (#809560)


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-9.el6
changelog:
  - Fix password policy history enforcement (#810900)
  - Privilege page should not have choice to list permissions by "indirect
    membership" (#810350)
  - ipa-server-install fails when domain name is not resolvable (#809190)
  - Identity->DNS->Settings:Forward policy: change check box to radio buttons
    (#808620)
  - When adding permissions for a type, attributes that are not allowed are
    listed (#807755)
  - user-mod --rename is successful for more than max login characters
    (#807417)
  - Can't specify netgroup host, user category to all in Web UI (#807366)
  - Permission names cannot contains '<' or '>' (#807304)
  - ipa-server-install --uninstall errors out when trying to start dirsrv.
    (#801376)
  - Should not be allowed to run host-disable on an IPA Server or
    service-disable on an IPA Server service  (#800119)
  - permission with filter or subtree does not allow attr to be specified
    (#783536)
  - Netgroups compat plugin not reporting users correctly (#767372)
  - certmonger renews server certificates ok but those services need a restart
    (related #766167)
  - Set minimum vresion of certmonger to 0.56 (related #766167)
  - Set minimum version of slapi-nis to 0.40 (#767372)
  - Unable to disable or enable hbacrule with --setattr (#810948)
  - When adding a user with --noprivate option gidNumber should be required
    (#805546)
  - Fix error when no value is given in --revocation-reason optional argument
    with "ipa cert-revoke" (#808099)
  - Set minimum version of bind-dyndb-ldap to 1.1.0-0.5.b1 (related #805814)


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-10.el6
changelog:
  - Don't interactively prompt for dnsrecord options provided on the
    command-line options (#790295)
  - Validate external hosts added to netgroups (#797256)
  - Handle invalid RDN for container in migration (#804807)
  - Unable to use permission-mod to rename permission object (#805478)
  - Migration: don't append basedn to container if it is included (#807371)
  - Raise correct exception when LDAP limits are exceeded (#808042)
  - Notify user that password needs to be reset in forms-based login (#811296)
  - DNS Resource records: add & delete A & AAAA record does not work in root
    (#811744)
  - user-mod --rename with an empty string fails (#811748)
  - DNS CNAME record: delete sometimes does not work (#811758)
  - Delegation UI does not allow to specify permission (#812110)
  - IPA uninstall after upgrade returns some sysrestore.state errors (#812391)
  - Improve migration plugin error when 2 groups have identical GID (#813389)


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-11.el6
changelog:
  - Make new DNS permission mixed-case (#807361)
  - hbactest returns failure when hostgroups are chained (#801769)
  - Man Page : Document client IP addressing / FQDN requirements (#768257)
  - Login failed attempts counter or locked out status are not displayed (#759501)
  - Wrong title and icon in login and logout pages (#814752)


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-12.el6
changelog:
  - Remove patch 0042 and add revert patch for handling which attributes are
    allowed in a permission. (#783502)
  - ipa-client-install sets "KerberosAuthenticate yes" in sshd.conf, breaking
    SSSD auth (#817030)
  - pwpolicy_find does not sort by priority in UI (#815799)
  - Improve zonemgr validation (#745705)


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-17.el6_3.1
changelog:
  - Fix changelog issue. The dist tag was in each entry and changing the
    build release changed history. (#878219)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-17.el6
changelog:
  - ipa delegation-find --group option returns internal error (#888524)
  - Add missing Requires for python-crypto replacement (#878969)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-19.el6
changelog:
  - Client installation crashes when Kerberos SRV record is not found (#889583)
  - Fix typo in patch 0048 for CVE-2012-5484 (#878220)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-20.el6
changelog:
  - Set maxbersize to a large value to accomondate large CRLs during replica
    installation. (#888956)
  - Set minimum version of pki-ca, pki-slient and pki-setup to 9.0.3-29 to
    pick up default CA validity period of 20 years. (#891980)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-21.el6
changelog:
  - Properly handle migrated uniqueMember attributes (#894090)
  - ipa permission-find using valid targetgroup throws internal error (#893827)
  - Fix migration of CRLs to new directory location (#893722)
  - Installing IPA with a single realm component sometimes fails (#893187)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-22.el6
changelog:
  - Set minimum version of bind-dyndb-ldap to 2.3-2 to pick up missing DNS
    zone SOA serial fix (#894131)
  - Stopped named service crashed ipa-upgradeconfig program (#895298)
  - ipa-replica-prepare crashed when manipulating DNS zone without SOA
    serial (#894143)
  - Use new certmonger locking to prevent NSS database corruption during
    CA subsystem renewal (#883484)
  - Set minimum selinux-policy to 3.7.19-193 to allow certmonger to talk
    to dbus in an rpm scriptlet. (related #883484)
  - Set minimum vresion of certmonger to 0.61-3 for new locking scheme
    (related #883484)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-23.el6
changelog:
  - Installer should not connect to 127.0.0.1. (#895561)
  - Don't initialize NSS if we don't have to. (#878220)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-24.el6
changelog:
  - Add certmonger condrestart to server post scriptlet (#903758)
  - Make certmonger a (pre) Requires (#903758)
  - Add selinux-policy to Requires(pre) to avoid post scriptlet AVCs
    (#903758)
  - Set minimum version of pki-ca to 9.0.3-30 and add to Requires(pre)
    to pick up certmonger upgrade fix (#902474)
  - Update anonymous access ACI to protect secret attributes (#902481)


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-26.el6_4
changelog:
  - Significant decrease in migration performance. (#908308)
  - ipa-client-install failed to fall over to replica with master down (#909161)
  - During Migration - If Schema is unavailable migration fails (#908400)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-26.el6_4.2
changelog:
  - Missing LDAP schema attributeType and objectClass after upgrade (#916535)
  - ipa-adtrust-install and ipa-replica-conncheck may not parse krb5.conf
    correctly and crash (#917065)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-26.el6_4.3
changelog:
  - client installation fails with anonymous binds set to rootdse (#952741)
  - LDAP upload CA cert sometimes double-encodes the value (#964128)
  - wrong trust argument assigned to renewed certs in ipa cert automatic
    renew (#964130)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-28.el6
changelog:
  - ipa-adtrust-install and ipa-replica-conncheck may not parse krb5.conf
    correctly and crash (#916209)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-29.el6
changelog:
  - ipa-client-install fails to autodiscover on LDAP servers with disabled
    anonymous access (#922843)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-30.el6
changelog:
  - LDAP upload CA cert sometimes double-encodes the value (#948928)
  - wrong trust argument assigned to renewed certs in ipa cert automatic
    renew (#952241)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-31.el6
changelog:
  - Require 389-ds-base >= 1.2.11.15-14 to pick up fix for CVE-2013-1897
    (#928162)
  - Password policy lockout plugin does not work as expected (#907881
  - Remove deprecated support of the HBAC source host (#924542)
  - ipa-client-install may not obtain CA certificate (#924004)
  - Allow client to re-enroll without first unenrolling (#924009)
  - Enrolling a host into may take two attempts (#950014)
  - Add userClass attribute for host objects (#955698)
  - Inconsistent replies from FreeIPA to Netlogon ping queries (#967870)
  - Performance improvement for IPA CLI and UI user and group related
    plugins (#970541)
  - Do not create /var/lib/ipa/pki-ca/publish, retain reference as
    ghost (#975431)
  - Add support for AD 2012 trusted domains (#980409)
  - XML-RPC server may return a wrong Content-Type (#976716)
  - Add missing openssh-clients Requires to ipa-server package (#983463)
  - Add an option to edit "Gecos" field from Web UI (#986211)


author: Martin Kosek <mkosek@redhat.com> - 3.0.0-37.el6
changelog:
  - group-add-member command reported wrong error on duplicates (#970541)
  - ipa-client installation succeeding in ipa server instance (#1011044)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-1
changelog:
  - Initial spec
  - policycoreutils version set to 2.0.78-3 to fix problem with
    restorecon returning 1 in non-failure cases.


author: Rob Crittenden <rcritten@redhat.com> - 2.0-2
changelog:
  - Remove some commented-out Requires
  - Replace Requires on nss_ldap with nss-pam-ldapd (#559004)
  - Add patch to attempt to configure a number of nss_ldap related files
    if installed and configure nslcd.conf if installed (#559004)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-4
changelog:
  - Update source tarball to freeIPA v2.0 alpha 3 (tag 1.9.0_alpha3) (#556620)
  - More spec file clean ups
  - Don't install the po files so it doesn't conflict with the server
    ipa-python package


author: Rob Crittenden <rcritten@redhat.com> - 2.0-7
changelog:
  - Update nokrbv patch to remove another usage of python-krbV that
    isn't directly used by ipa-client but fails the build. (#598626)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-8
changelog:
  - Re-add patch to attempt to configure a number of nss_ldap related files
    if installed and configure nslcd.conf if installed. This got inadvertantly
    dropped when the source tarball was re-based (#559004)
  - Update nokrbv patch to remove another usage of python-krbV that
    isn't directly used by ipa-client but fails at runtime. (#598626)


author: Akira TAGOH <tagoh@redhat.com> - 003.02-4.1
changelog:
  - Backport from Fedora.
  - Improve the fontconfig config file further more to match ja as well. (#586837)


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.0-2
changelog:
  - Bugzilla Bug #668836 - Review Request: ipa-pki-theme
  -   Modified overview to pertain more to these packages
  -   Removed "Obsoletes:" lines (only pertinent to internal deployments)
  -   Modified installation section to preserve timestamps
  -   Removed sectional comments


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.1-1
changelog:
  - Made 'ipa-pki-common-theme' a runtime dependency of 'ipa-pki-ca-theme'
  - https://pkgdb.lab.eng.bos.redhat.com/pkg/packages/srpm/5936/
  -   Package Wrangler:  applied GPLv2 license header to 'xml.vm'


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.2-1
changelog:
  - 'ipa-pki-common-theme'
  -     Bugzilla Bug #671058 - ipa2 - ipa-server-install fails on pkisilent -
        xml parsing string -- ?


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-1
changelog:
  - Augmented overview description.
  - 'ipa-pki-ca-theme'
  -     Bugzilla Bug #564207 - Searches for completed requests in the agent
        interface returns zero entries


author: Matthew Harmsen <mharmsen@redhat.com> 9.0.3-2
changelog:
  - Resolves 643543
  - Resolves #683172 - pkisilent needs to provide option to set
    nsDS5ReplicaTransportInfo to TLS in replication agreements
    when creating a clone, r1886


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - updated 'delloem setled' command to indicate SES status and drive
    activities for a PCI-e SSD (#727314)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - added -Y option for ipmitool to hide Kg key from cmdline (#698647)
  - added 'channel setkg' command to set Kg encryption key on remote machine
    (#726390)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-11
changelog:
  - fixed delloem powermonitor on bigendian systems (#731718)
  - fixed memory leak in Serial-over-Lan module (#731977)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-13
changelog:
  - added new options to configure retransmissions on lan/lanplus interfaces
    (#748073)
  - updated dellem command (#739358)
  - fixed exit code of ipmitool -o list (#715615)
  - improved checking of command line arguments (#725993)


author: Jan Safranek <jsafrane@redhat.com> 1.8.10-2
changelog:
  - fix issues found during package review:
    - clear Default-Start: line in the init script, the service should be 
      disabled by default
    - added Obsoletes: OpenIPMI-tools
    - compile with --disable-dependency-tracking to speed things up
    - compile with --enable-file-security
    - compile with --disable-intf-free, don't depend on FreeIPMI libraries
      (FreeIPMI has its own ipmitool-like utility)


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.32-2
changelog:
  - add macvlan aka VESA support d63a9b2b1e4e3eab0d0577d0a0f412d50be1e0a7
  - kernel headers 2.6.33 ab322673298bd0b8927cdd9d11f3d36af5941b93
    are needed for macvlan features and probably for other added later.
  - fix number of release which contains 2.6.32 kernel headers and features
    but it was released as 2.6.31
  - Resolves: rhbz#553344


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.32-6
changelog:
  - apply patch from Petr Lautrbach to fix rpmdiff issues -> merge all 
    Makefile patches into one iproute-Makefile-RHEL-setting.patch
  - fix man page by plautrba
  - fix typo in lnstat by plautrba
  - add missing options for ss by plautrba
  - fix usage and man of arpd by plautrba
  - Resolves: rhbz#596172, rhbz#592201, rhbz#592230, rhbz#592226, rhbz#592266


author: Petr Sabata <psabata@redhat.com> - 2.6.32-8
changelog:
  - Add support for setting and showing SR-IOV virtual function link params
  - Patch from Petr Lautrbach
  - Resolves: rhbz#606680


author: Petr Sabata <psabata@redhat.com> - 2.6.32-13
changelog:
  - Do not segfault when creating veth with peer option without any name provided
  - link_veth_segv.patch
  - Resolves: rhbz#636943


author: Petr Sabata <psabata@redhat.com> - 2.6.32-14
changelog:
  - Fix'd to properly build against xtables interface
  - Related: rhbz#670295
  - Related: rhbz#636943 
  - Related: rhbz#641918 
  - Related: rhbz#678986


author: Petr Sabata <psabata@redhat.com> - 2.6.32-16
changelog:
  - Link and install m_xt.so properly
  - Related: rhbz#670295
  - Related: rhbz#636943 
  - Related: rhbz#641918 
  - Related: rhbz#678986
  - Related: rhbz#678986


author: Petr Sabata <contyk@redhat.com> - 2.6.32-17
changelog:
  - Fix GRED options clearing
  - Resolves: rhbz#709652
  - Add macvlan/macvtap passtru support
  - Resolves: rhbz#692867
  - Resolves: rhbz#693878


author: Petr Šabata <contyk@redhat.com> - 2.6.32-18
changelog:
  - Fix changing of ip6ip6 tunnel hoplimit
  - Resolves: rhbz#730627
  - lnstat -d should dump to stdout
  - Resolves: rhbz#736106


author: Petr Šabata <contyk@redhat.com> - 2.6.32-19
changelog:
  - Adding mqprio qdisc support (#748767)
  - Adding QFQ discipline support (#788120)
  - A required update of include/linux/pkt_sched.h


author: Petr Šabata <contyk@redhat.com> - 2.6.32-20
changelog:
  - Add support for multicast rules, IPv4 only due to kernel limitations;
    see #631984, comment 14 for details (#812779)


author: Petr Šabata <contyk@redhat.com> - 2.6.32-24
changelog:
  - Don't hang on rtnl_send() in a confined domain (#985526)
  - Run lnstat indefinitely if -c was not specified (#977845)
  - lnstat manpage SEE ALSO path fixes (#974694)
  - Document tc's force and batch options (#950122)
  - Fix include/linux/if_link.h to get in line with upstream again (#903228)
  - Add support for the IPv6 tokenized interface (#950400)
  - Handle ip-route rto_min parameters correctly (#859145)
  - Add VXLAN support (#929313, #908155)
  - Add mdb subcommand to bridge (#885977)
  - tc now supports the -OK option (#851371)


author: Petr Pisar <ppisar@redhat.com> - 2.6.32-29
changelog:
  - Document tc -OK option (#851371)
  - Document "bridge mdb" and "bridge monitor mdb" (#885977)
  - Document bridge unsupported features (#929313)


author: Petr Šabata <contyk@redhat.com> - 2.6.32-31
changelog:
  - Removed the unsporrted features from the bridge(8) manpage and
    document bridge fdb replace (#929313)


author: Petr Šabata <contyk@redhat.com> - 2.6.32-32
changelog:
  - Fix a floating point exception regression introduced with the
    incorrect fix of #859145 (#1045200)


author: Will Woods <wwoods@redhat.com> - 2.2.13-2
changelog:
  - Fix iprdump startup - #483340
  - iprutils-swab-moved.patch - fix compilation with 2.6.29 kernels (#483643)


author: Roman Rakus <rrakus@redhat.com> 2.2.18-3
changelog:
  - Added missing man page
  - moved files from /sbin to /usr/sbin and made symlinks
    Resolves: #558784


author: Jiri Skala <jskala@redhat.com> - 2.3.4-1
changelog:
  - Resolves: #693816 - Update iprutil tool to 2.3.4 for enabling SAS VRAID
  - Resolves: #694756 - iprconfig was killed by signal 11
  - Resolves: #703255 - IPR utils can't perform raid migrate or asymmetric access


author: Lukas Nykryn <lnykryn@redhat.com> - 2.3.9-2
changelog:
  - Resolves: #817087 - Missing some patches in iprutils 2.3.9
  - Displays Hardware Location Code for disk/expander.
  - Changes concurrent maintenance GUI to 3 ways toggle.
  - Changes README for concurrent maintenance command line.
  - Adds structures and functions for query resource paths aliases.
  - Fixes a bug in suspend/resume device bus.
  - Supports concurrent maintenance for 64bit adapter.
  - Supports not physical remove disk.
  - Fixes header problem when query-remove/add-device.
  - Sometimes receive diag failed at first time after update adapter firmware.
  - If the disk in a RAID, iprutils itself has to delete sysfs name for secondary
    adapter.
  - Old drawers don't support query page 4 for physical location.


author: Filip Kocina <fkocina@redhat.com> - 2.3.12-1
changelog:
  - Resolves: #822648 - updates iprutils package to 2.3.12
  - Resolves: #830982 - iprconfig fails to change
    the IOA asymmetric access mode
  - Resolves: #829761 - fix displaying wrong status for
    a RAID disk on sis32bit adapter


author: Ondrej Vasik <ovasik@redhat.com> - 2.3.12-2
changelog:
  - Resolves: #860532 - Add additional patches to 2.3.12
  - Platform location fix for "Concurrent Remove devices" for
    32bit adapter
  - Add the support for optical devices and fix some format
    issues for 32 bit adapter
  - fix the platform location for hard disk in iprconfig


author: Filip Kocina <fkocina@redhat.com> - 2.3.12-3
changelog:
  - Resolves: #869751 - Fix platform location of disk with ses location + slot
    location
  - Showed the wrong platform location for disk when iprconfig -c show-details
    sgx


author: Thomas Woerner <twoerner@redhat.com> - 6.11-1
changelog:
  - new version 6.11 with so library version 2, includes
  - cleaned up spec file for 6.11, dropped patch, no kernel will be built
  - adapted for RHEL-6: added clean tag, BuildRoot


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-2
changelog:
  - fixed initscript to be LSB compliant (rhbz#593228)
    - added euid 0 check
    - reload returns 3 (unimplemented feature)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-4
changelog:
  - added IPv6 transparent proxy support (rhbz#590186)
  - added auditing support (rhbz#642393)
    Thanks to Thomas Graf for the patch
  - init: restore context for save and use /etc/sysconfig for temps (rhbz#644273)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-5
changelog:
  - fixed option parser problem (mark matches with mark options) (rhbz#725879)
    based on upstream commits:
      600f38db82548a683775fd89b6e136673e924097
      59e8114c6792242e80785f4461d5e663fb9a3d64
      d3b2e391e3b944581e20e216af76339cc87d0590
      2d68ae7ce6e40e3977ee11a57296cf76801ae320
      1dc27393b7ba401e6228a5ee2472a6eb72836c43
      1e128bd804b676ee91beca48312de9b251845d09
      fa503ad59f73d20d85f4cdf53324a01d2ad8591e


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-6
changelog:
  - reverted upstream patches, because they are breaking the ABI
  - created new patch based on upstream but without ABI break (rhbz#725879)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-7
changelog:
  - Use alternatives to support other iptables versions for MRG kernels
    (rhbz#747068)
  - Restore sysctl values on service restart (rhbz#800208)
  - Added fallback support in case of error in service start (rhbz#808272)
  - Added AUDIT targets to to man pages (rhbz#809108)
  - Fixed maximum chain name length (rhbz#821441)
  - Added missing dependency for poliycoreutils package (rhbz#836286)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-9
changelog:
  - make alternatives names arch dependant for multilib (rhbz#860148)
  - added virtual provides for base libraries to be able to resolve library file requires


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-10
changelog:
  - New reload action for ip*tables services (rhbz#928812)
    It tries to reload the firewall rules from /etc/sysconfig/ip*tables. If this
    failes, it does not load the fallbacks and the old firewall rules are still
    there.
  - Use /lib*/xtables without version and not linked by alternatives again for 
    compatibility to older versions (rhbz#924362)
    The symlink for /lib*/xtables with the previous version will be cleaned up
    in a pre script.
  - Backport of --queue-bypass (rhbz#845435)
    Thanks to Florian Westphal and kay
  - Make ip*tables-save consistent to man page (rhbz#983198)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-11
changelog:
  - fixed shutdown hang if root filesystem is network based (rhbz#1007632)
    Thanks to Rodrigo A B Freire for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.4-1
changelog:
  - new version 1.4.4 with support for all new features of 2.6.30
    - several man page fixes
    - iptables: replace open-coded sizeof by ARRAY_SIZE
    - libip6t_policy: remove redundant functions
    - policy: use direct xt_policy_info instead of ipt/ip6t
    - policy: merge ipv6 and ipv4 variant
    - extensions: add `cluster' match support
    - extensions: add const qualifiers in print/save functions
    - extensions: use NFPROTO_UNSPEC for .family field
    - extensions: remove redundant casts
    - iptables: close open file descriptors
    - fix segfault if incorrect protocol name is used
    - replace open-coded sizeof by ARRAY_SIZE
    - do not include v4-only modules in ip6tables manpage
    - use direct xt_policy_info instead of ipt/ip6t
    - xtables: fix segfault if incorrect protocol name is used
    - libxt_connlimit: initialize v6_mask
    - SNAT/DNAT: add support for persistent multi-range NAT mappings


author: Thomas Woerner <twoerner@redhat.com> 1.4.5-1
changelog:
  - new version 1.4.5 with support for all new features of 2.6.31
    - libxt_NFQUEUE: add new v1 version with queue-balance option
    - xt_conntrack: revision 2 for enlarged state_mask member
    - libxt_helper: fix invalid passed option to check_inverse
    - libiptc: split v4 and v6
    - extensions: collapse registration structures
    - iptables: allow for parse-less extensions
    - iptables: allow for help-less extensions
    - extensions: remove empty help and parse functions
    - xtables: add multi-registration functions
    - extensions: collapse data variables to use multi-reg calls
    - xtables: warn of missing version identifier in extensions
    - multi binary: allow subcommand via argv[1]
    - iptables: accept multiple IP address specifications for -s, -d
    - several build fixes
    - several man page fixes
  - fixed two leaked file descriptors on sockets (rhbz#521397)


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-1
changelog:
  - new version 1.4.6 with support for all new features of 2.6.32
    - several man page fixes
    - Support for nommu arches
    - realm: remove static initializations
    - libiptc: remove unused functions
    - libiptc: avoid strict-aliasing warnings
    - iprange: do accept non-ranges for xt_iprange v1
    - iprange: warn on reverse range
    - iprange: roll address parsing into a loop
    - iprange: do accept non-ranges for xt_iprange v1 (log)
    - iprange: warn on reverse range (log)
    - libiptc: fix wrong maptype of base chain counters on restore
    - iptables: fix undersized deletion mask creation
    - style: reduce indent in xtables_check_inverse
    - libxtables: hand argv to xtables_check_inverse
    - iptables/extensions: make bundled options work again
    - CONNMARK: print mark rules with mask 0xffffffff as set instead of xset
    - iptables: take masks into consideration for replace command
    - doc: explain experienced --hitcount limit
    - doc: name resolution clarification
    - iptables: expose option to zero packet/byte counters for a specific rule
    - build: restore --disable-ipv6 functionality on system w/o v6 headers
    - MARK: print mark rules with mask 0xffffffff as --set-mark instead of --set-xmark
    - DNAT: fix incorrect check during parsing
    - extensions: add osf extension
    - conntrack: fix --expires parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-2
changelog:
  - moved libip*tc and libxtables libs to /lib[64], added symlinks for .so libs
    to /usr/lib[64] for compatibility (rhbz#558796)


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-3
changelog:
  - fixes according to review:
  - fixed license
  - moved /bin/iptables-xml to iptables main package fixes dangling symlink in
    ipv6 sub-package
  - added missing lsb keywords Required-Start and Required-Stop to init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-1
changelog:
  - rebase to version 1.4.7:
    - libip4tc: Add static qualifier to dump_entry()
    - libipq: build as shared library
    - recent: reorder cases in code (cosmetic cleanup)
    - several man page and documentation fixes
    - policy: fix error message showing wrong option
    - includes: header updates
    - Lift restrictions on interface names
  - fixed license and moved iptables-xml into base package according to review
  - added default values for IPTABLES_STATUS_VERBOSE and
    IPTABLES_STATUS_LINENUMBERS in init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-5.1
changelog:
  - reverted upstream patches, because they are breaking the ABI (rhbz#725879)
  - created new patch based on upstream but without ABI break (rhbz#725879)


author: Zdenek Prikryl <zprikryl@redhat.com> - 3.0.1-5
changelog:
  - Added support for ipv6 (#200503)
  - Fixed vlan support (#219772)
  - Added support for bond interfaces


author: Nikola Pajkovsky <npajkovs@redhat.com> - 3.0.1-12
changelog:
  - add patch 0001-fix-strcpy-overlap-memory.patch
  - Resolves: 595454  - Doesn't detect any ethernet interface


author: Nikola Pajkovsky <npajkovs@redhat.com> - 3.0.1-13
changelog:
  - add patch iptraf-3.0.1-strict-aliasing.patch
  - Resolves: #596173 - RPMdiff run failed for package iptraf-3.0.1-11.el6


author: Thomas Woerner <twoerner@redhat.com> 2.2.1-3
changelog:
  - fixed compile problem because of strerror undefined in scope
    Fixes (rhbz#434482)
  - fixed description (rhbz#140516)


author: Matthias Saou <http://freshrpms.net/> 1.25-1
changelog:
  - Prepare update to 1.25 for when devel will update to kernel 2.6.28.
  - Build require libnl-devel and popt-devel (+ patch to fix popt detection).


author: Matthias Saou <http://freshrpms.net> 1.3-2
changelog:
  - Convert spec file to UTF-8.
  - Remove all symlinks to keep only /lib/firmware like in ipw2200-firmware.


author: Matthias Saou <http://freshrpms.net> 1.3-3
changelog:
  - Move the LICENSE as LICENSE.ipw2100 in the firmware directory to fully
    comply to the Intel redistribution terms and conditions.


author: Matthias Saou <http://freshrpms.net> 1.3-5
changelog:
  - Don't mark the LICENSE in /lib/firmware as %doc since it could be excluded
    when using --excludedocs, symlink a file in %doc to it instead.


author: Matthias Saou <http://freshrpms.net> 3.0-10
changelog:
  - Remove LICENSE file from %doc (was +x), mark the other as %doc (#440553).
  - Remove the included older 2.4 firmware, since 3.0 has been required by all
    kernels for a long while now.


author: Petr Holasek <pholasek@redhat.com> - 2:0.55-32
changelog:
  - NUMA awareness bits were thrown away (from #673234 and #798648)
  - Mistake in sysconfig documentation was fixed (bz 732435)


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.4
changelog:
  - 590580 libiscsi get_firmware_foo does not work without first creating a
    libiscsi context
  - 588931 Fix uip and iscsid initialization race
  - 570664 Add basic vlan support for bnx2i's brcm uip daemon
  - 589761 Fix multiple init script bugs: rh_status does not detect offload,
    start/stop does not work due to iscsiadm output being directed to stderr,
    discovery daemon does not get auto started/stopped, iscsid restart does
    not restart daemon if force-start was used.
  - 585649 Fix iscsid "-eq: unary operator expected" bug.


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.5
changelog:
  - 602286 No need to compile iscsistart as static. This also fixes
    the segfault when hostnames are passed in for the portal ip.


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.6
changelog:
  - 602899 Add discovery db support.
  - 595591 Sync brcm_iscsiuio to 0.5.15.
  - 589256 Do not log success message and return ENODEV
  - 601434 Fix iscsiadm handling of non-default port


author: Ales Kozumplik <akozumpl@redhat.com> 6.2.0.872.12
changelog:
  - 442980 partial offload boot: Remove the OFFLOAD_BOOT_SUPPORTED ifdef. This
    effectively makes OFFLOAD_BOOT_SUPPORTED always enabled.


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.14
changelog:
  - 593269 iscsi was built against libcrypto, but was not using the code
  so this disabled the building of that code.
  - 599539 document brcm_iscsiuio options in man page.
  - 599542 document iscsiadm host mode hostno argument.
  - 631821 iscsi discovery was not incrementing ITT when multiple text
  commands were sent. This prevented discovery from finding all targets.
  - 634021 iscsi init script did not shutdown all sessions during system
  shutdown/reboot causing the host to hang.
  - 658428 iscsi init script should not shutdown sessions when root is
  using them and should not fail startup on all iscsiadm login failures.
  - 635899 sync brcm_iscsiuio to 0.6.2.13 to add support for IPv6, VLAN,
  57711E, and 57712 hardware.
  - 640115 fix hang caused due to race in ISCSI_ERR_INVALID_HOST handling.
  - 640340 fix iscsiadm exit codes.
  - 624437 support hostnames in node mode.


author: Ales Kozumplik <akozumpl@redhat.com> 6.2.0.872.16
changelog:
  - 529443 fwparam_sysfs: fix pathname manipulation error in
    fwparam_sysfs_boot_info.
  - 529443 Make libiscsi nodes remember the interface they connect through.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.17
changelog:
  - 634021 Fix in .14 added regression during iscsi startup that prevented
  sessions from getting created.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.18
changelog:
  - fix iscsiadm exit code when iscsid is not running and the
  discovery command is run.
  - 689359 Fix uIP when using DCB for FCoE
  - 691902 Fix iscsiadm SendTargets offload support when the PDU's data len
  is 8K.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.20
changelog:
  - 696267 Create a offloaded session if the iscsi_host MAC and ibft
  MAC match. This enables support for Broadcoms hba boot mode.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.21
changelog:
  - 593269 iscsi was built against libcrypto, but was not using the code
  so this disabled the building of that code [patch from .14 got dropped
  due to mismerge].


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.23
changelog:
  - 696808 Sync brcm/uio to v0.7.0.8.
  - 715434 Fix iscsiadm command line help discoverydb/discovery2 description.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.25
changelog:
  - 732912 Fix return value/msg when iscsiadm fails to log into target
  - 696808 Update iscsiuio to v0.7.0.14.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.28
changelog:
  - 736116 (again) fix aligment for iface nl msgs.
  - Fix iscsid restart issue when using qla4xxx boot.
  - Fix ipv6 boot when using ibft.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.31
changelog:
  - 749051 Sync iscsiuio to iscsiuio-0.7.0.14g to fix boot hang
    when connection is lost during startup.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.36
changelog:
  - 740054 sync iscsiuio to 0.7.2.1
  - 790609 Add ping and host chap support to iscsiadm
  - 636013 scalability testing.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.37
changelog:
  - 805467 Have iscsistart/iscsiadm bring up offload net interface.
  - 796574 Fix port handling when hostnames are used for portals.
  - 739843 Fix default iface setup handling.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.40
changelog:
  - 738192 Fix regression added when handling 738192 where unknown params
    messages got logged by mistake.


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-1
changelog:
  - Sync with upstream 2.0.873
  - 854776 Bring up network interface for iSCSI boot with bnx2i
  - 811428 make version string reported by iscsiadm match RPM version
  - fix iscsid segfault during qla4xxx login


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-3
changelog:
  - 831003 boot over VLAN support patches
  - 916007 replace iscsiuio with code merged upstream 0.7.8.1b
  - 884427 fix for db errors when vdsm creates static entries for
           target portals already setup through discovery
  - 983553 run target refresh in parallel so unreachable doesn't block others


author: Andy Grover <agrover@redhat.com> - 6.2.0.873-6
changelog:
  - Update bnx2i-vlan-boot-support.patch to check session != NULL
    before calling iscsi_sysfs_read_iface


author: Radek Vykydal <rvykydal@redhat.com> - 1:1.0.6-1
changelog:
  - Add abort check feature (dpierce, rvykydal)
    Resolves: rhbz#555107
  - Remove output to stderr from library (bcl)
    Resolves: rhbz#586339
  - Use separate return value for image not found (bcl)
    Resolves: rhbz#586351


author: John W. Linville <linville@tuxdriver.com> - 39.31.5.1-1
changelog:
  - Update for upstream version 39.31.5.1
  - Add logic to preserve version 128.50.3.1 for use by older kernels
  - Add Epoch tag to account for Intel's bizarre release numbering


author: Matthias Saou <http://freshrpms.net> 2.14.4-1
changelog:
  - Rename package from iwlwifi-firmware to iwlwifi-3945-firmware.
  - Add provides and obsoletes.
  - Fix description to reference the right LICENSE file name.
  - Change from using dos2unix to chmod/sed/touch, preserve timestamps on docs.


author: Matthias Saou <http://freshrpms.net> 15.28.2.8-1
changelog:
  - Update to 15.28.2.8.
  - Keep both 2.14.4 (iwlwifi-3945.ucode) and 2.14.1.5 (iwlwifi-3945-1.ucode) as
    the new 15.28.2.8 is now iwlwifi-3945-2.ucode.


author: John W. Linville <linville@tuxdriver.com> - 41.28.5.1-2
changelog:
  - need to keep old firmware version available for kernels that need it
  - use available macros for standard packaging-related commands


author: Ondrej Vasik <ovasik@redhat.com> 3.13-1
changelog:
  - update to latest upstream version( 3.13)
  - removed jadetex-3.12-theta.patch(included in 3.13)
  - added small typo fix from upstream


author: Ondrej Vasik <ovasik@redhat.com> 3.13-2
changelog:
  - removed TeXdir macro, replaced by /usr(in fact by other
    rpm macros)
  - used texcongig-sys rehash instead of texhash
  - added documentation html file
  - dist tag, license fix


author: David Walluck <dwalluck@redhat.com> 0:1.7.0-8.jpp5
changelog:
  - fix duplicate files
  - correctly unpack sources
  - remove spurious gnu-crypto requirement
  - remove spurious javadoc package requirements
  - fix javadoc directory
  - fix build-classpath call
  - use macros


author: Devrim GUNDUZ <devrim@commandprompt.com> - 0:3.2.1-1
changelog:
  - Updated to 3.2.1
  - Updated patch #1 and #4
  - Own %dir /usr/lib/gcj/jakarta-commons-collections, per #473612.


author: James Ralston <ralston at pobox.com> - 1:1.0.1-6jpp.3
changelog:
  - update License tag to reflect new acceptable licenses
  - update main Group tag (old value "System/Boot" is invalid)
  - update jsvc Group tag as well
  - update javadoc Group tag as well
  - building jsvc is no longer mutually exclusive with building javadoc
  - jsvc is built by default (use "--without native" to disable)
  - build jsvc man page from DocBook source via xmlto; install
  - move jsvc from sbindir to bindir (man page is section 1)


author: Matt Wringe <mwringe at redhat.com> - 1:0:3-4jpp.1
changelog:
  - Merge with upstream version
   - Add missing javadoc post and postun
   - Add missing javadoc requires


author: Fernando Nasser <fnasser@redhat.com> - 1:0.4-2jpp
changelog:
  - Remove distribution and vendor tags
  - Fix empty post postun messages
  - Use spaces and no tabs all over


author: Fernando Nasser <fnasser@redhat.com> - 0:1.0-18.1
changelog:
  - Merge with upstream for:
    Add pom and depmap fragment
    Removal of ghost symlink
    Some spec file cleanups
  - Build without AOT compilation


author: Matt Wringe <mwringe@redhat.com> 0:1.3-9jpp.1
changelog:
  - Merge with updated jpp version
  - Updated commons-build, no longer need patchs to get around local
    building.


author: Fernando Nasser <fnasser.redhat.com> 2.0.8-3jpp
changelog:
  - Add AOT bits
  - Fix javadoc unversioned link handling
  - Add requires for post/postun javadoc sections added above


author: Rex Dieter <rdieter@fedoraproject.org> - 1.900.1-13
changelog:
  - CVE-2008-3520 jasper: multiple integer overflows in jas_alloc calls (#461476)
  - CVE-2008-3522 jasper: possible buffer overflow in 
    jas_stream_printf() (#461478)


author: Deepak Bhole <dbhole@redhat.com> 1.6.0.0-1.18.b16
changelog:
  - Build only on x86 and x86_64
  - Added STRIP_KEEP_SYMTAB=libjvm* to install section, fix bz530402
  - Added java-1.6.0-openjdk-jar-misc.patch
  - Added java-1.6.0-openjdk-linux-separate-debuginfo.patch to separate debuginfo
  - Added patch for March 2010 security issues (java-1.6.0-openjdk-securitypatches-20100323.patch)


author: Martin Matejovic <mmatejov@redhat.com> - 1.6.0.0-1.19.b17
changelog:
  - Added icedtea6-1.7.3
  - Added openjdk b17
  - Enabled NPPlugin
  - Removed Files:
      java-1.6.0-openjdk-icedtea-gcc-stack-markings.patch
      java-1.6.0-openjdk-jar-misc.patch
      java-1.6.0-openjdk-linux-separate-debuginfo.patch
      java-1.6.0-openjdk-memory-barriers.patch
      java-1.6.0-openjdk-rhino-rewrite.patch
      java-1.6.0-openjdk-s390-optimizer-failure.patch
      java-1.6.0-openjdk-s390-serializer.patch
      java-1.6.0-openjdk-systemtap-fixes-jni-jstack.patch
      java-1.6.0-openjdk-x11.patch
  - Resolves: rhbz#593135
  - Resolves: rhbz#572675


author: Martin Matejovic <mmatejov@redhat.com> - 1.6.0.0-1.20.b17
changelog:
  - Fixed brew build for i686
  - Removed Files:
      java-1.6.0-openjdk-securitypatches-20091103.patch
      java-1.6.0-openjdk-securitypatches-20100323.patch
      java-1.6.0-openjdk-sparc-fixes.patch
      java-1.6.0-openjdk-sparc-hotspot.patch


author: Deepak Bhole <dbhole@redhat.com> - 1.6.0.0-1.21.b17
changelog:
  - Updated to IcedTea 1.7.4
  - Resolves: rhbz#537121
  - Resolves: rhbz#612467
  - Resolves: rhbz#613824
  - Additionally, fixed rh bugs 616893 and 616895


author: Deepak Bhole <dbhole@redhat.com> - 1.6.0.0-1.22.b17
changelog:
  - Update to IcedTea 1.7.5
  - Import debuginfo patch from el5
  - Parallelize build
  - Removed systemtap probepoint patch (now upstream)
  - Resolves: bz#639954


author: Jiri Vanek <jvanek@redhat.com> - 1.6.0.0-1.31.b17
changelog:
  - excluded bin/javaws files
  		exclude  %{_jvmdir}/java-1.6.0-openjdk-1.6.0.0.x86_64/jre/bin/javaws
  		files devel
  		exclude  %{_jvmdir}/java-1.6.0-openjdk-1.6.0.0.x86_64/bin/javaws

  - garbage removed to separated file
  - Resolves: rhbz#639954


author: Jiri Vanek <jvanek@redhat.com> - 1.6.0.0-1.33.b17
changelog:
  - bumped release number, it was accidentaly reduced, and now lower version then last one was released.
  - Resolves: rhbz#676295


author: Deepak Bhole <dbhole@redhat.com> - 1.6.0.0-1.33.1.b20
changelog:
  - Bump to IcedTea 1.9.3
  - Build with --disable-webstart and remove all javaws and plugin references
  - Moved pre 2009 changelog entries to a separate file to keep spec file small
  - Resolves: rhbz#658208


author: Deepak Bhole <dbhole@redhat.com> - 1.6.0.0-1.39.1.9.8
changelog:
  - Resolves: rhbz#709375
  - Bumped to IcedTea6 1.9.8
  - Copy fontconfig files to match names for current and next release
  - RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
    disabled get still selected for read ops (win)
  - RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
  - RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
    FileDialog.show()
  - RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
    code
  - RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
    bindings
  - RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
  - RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
  - RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
    with scale close to zero
  - RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
  - RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
    size variables


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.40.1.9.10
changelog:
  - Resolves: rhbz#744788
  - Bumped to IcedTea6 1.9.8
  -removed font copying
   Security fixes
    - S7000600, CVE-2011-3547: InputStream skip() information leak
    - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
    - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
    - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
    - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
    - S7055902, CVE-2011-3521: IIOP deserialization code execution
    - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
    - S7064341, CVE-2011-3389: JSSE
    - S7070134, CVE-2011-3558: Hotspot unspecified issue
    - S7077466, CVE-2011-3556: RMI DGC server remote code execution
    - S7083012, CVE-2011-3557: RMI registry privileged code execution
    - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
   NetX
    - PR794: javaws does not work if a Web Start app jar has a Class-Path element in the manifest


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.43.1.10.6
changelog:
  - Updated to IcedTea6 1.10.6
  - Resolves: rhbz#787144
  - Security fixes
    - S7082299: Fix in AtomicReferenceArray
    - S7088367: Fix issues in java sound
    - S7110683: Issues with some KeyboardFocusManager method
    - S7110687: Issues with TimeZone class
    - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
    - S7110704: Issues with some method in corba
    - S7112642: Incorrect checking for graphics rendering object
    - S7118283: Better input parameter checking in zip file processing
    - S7126960: Add property to limit number of request headers to the HTTP Server
  - Bug fixes
    - RH580478: Desktop files should not use hardcoded path
  - Removed upstreamed patch7 - java-1.6.0-openjdk-6_2-Z-rmi-fix.patch


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.41.1.11.1
changelog:
  - Resolves: rhbz#771971
  - Updated to IcedTea6 1.11.1
  - Security fixes:
    - S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object
    - S7082299, CVE-2011-3571: AtomicReferenceArray insufficient array type check
    - S7110687, CVE-2012-0503: Unrestricted use of TimeZone.setDefault
    - S7110700, CVE-2012-0505: Incomplete info in the deserialization exception
    - S7110683, CVE-2012-0502: KeyboardFocusManager focus stealing
    - S7088367, CVE-2011-3563: JavaSound incorrect bounds check
    - S7126960, CVE-2011-5035: Add property to limit number of request headers to the HTTP Server
    - S7118283, CVE-2012-0501: Off-by-one bug in ZIP reading code
    - S7110704, CVE-2012-0506: CORBA fix


author: Mark Wielaard <mjw@redhat.com> - 1:1.6.0.0-1.42.1.11.1
changelog:
  - Resolves: rhbz#804632
  - Added patch7 java-1.6.0-openjdk-jstack.patch based on upstream patches:
    http://thread.gmane.org/gmane.comp.java.openjdk.distro-packaging.devel/17667


author: Mark Wielaard <mjw@redhat.com> - 1:1.6.0.0-1.45.1.11.1
changelog:
  - Resolves: rhbz#804632
  - Tweak java-1.6.0-openjdk-jstack.patch stack to remove two uses of sprintf
    to make it work against systemtap 1.7.


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.46.1.11.3
changelog:
  - Sync with 6.3:
  - Bump to IcedTea6 1.11.3
  - With removed patch8 - java-1.6.0-openjdk-jirafix_2820_2821.patch
  - Including patch7 - java-1.6.0-openjdk-jstack.patch
  - Including patch3, java-1.6.0-openjdk-java-access-bridge-security.patch modification
  - Resolves: rhbz#828751


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.47.1.11.3
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828751


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.46.1.11.3
changelog:
  - Updated to IcedTea6 1.11.3
  - Removed upstreamed patch8 - java-1.6.0-openjdk-jirafix_2820_2821.patch
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added to patch
  - Resolves: rhbz#828752


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.47.1.11.3
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828752


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.49.1.11.5
changelog:
  - Updated to IcedTea6 1.11.5
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.51.1.11.6
changelog:
  - Updated to icedtea6 1.11.6
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.53.1.11.6
changelog:
  - added patch8 revertTwoWrongSecurityPatches2013-02-06.patch
    to remove   6664509 and 7201064 from 1.11.6 tarball
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.54.1.11.6
changelog:
  - removed patch8 revertTwoWrongSecurityPatches2013-02-06.patch
  - added patch8:   7201064.patch to be reverted
  - added patch9:   8005615.patch to fix the 6664509.patch
  - Resolves: rhbz#906707


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.55.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but working
  - Resolves: rhbz#911524


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.51.1.11.6
changelog:
  - Updated to icedtea6 1.11.6
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Access gnome bridge jar is forced to have 644 permissions
  - Resolves: rhbz#906708


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.53.1.11.6
changelog:
  - added patch8 revertTwoWrongSecurityPatches2013-02-06.patch
    to remove   6664509 and 7201064 from 1.11.6 tarball
  - Resolves: rhbz#906708


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.54.1.11.6
changelog:
  - removed patch8 revertTwoWrongSecurityPatches2013-02-06.patch
  - added patch8:   7201064.patch to be reverted
  - added patch9:   8005615.patch to fix the 6664509.patch
  - Resolves: rhbz#906708


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.34.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but working
  - Resolves: rhbz#911525


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.58.1.11.10
changelog:
  - Updated to icedtea6 1.11.10
  - rewritten java-1.6.0-openjdk-java-access-bridge-security.patch
  - excluded aarch64.patch
    - by patch 8 -  removingOfAarch64.patch.patch
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.59.1.11.11
changelog:
  - Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
  - removed patch 8 -  removingOfAarch64.patch.patch - fixed upstream
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.60.1.11.11
changelog:
  - added and applied (temporally) one more patch to xalan/xerces privileges
   - patch9 jaxp-backport-factoryfinder.patch
  - will be upstreamed
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950386


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.62.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973129


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.63.1.11.13
changelog:
  - removed upstreamed  patch100  8000791-regression-fix.patch
  - bumped release
  - updated to icedtea-1.11.13
  - Resolves: rhbz#992909


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - adapted patch8 java-1.6.0-openjdk-timezone-id.patch
  - removed useless runtests parts
  - included also java.security.old files
  - Resolves: rhbz#1017618


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.68.1.11.14
changelog:
  - updated to icedtea6-1.11.14.tar.gz
  - added and applied 1.11.14-fixes.patch, patch10 to fix build issues
  - adapted patch8 java-1.6.0-openjdk-timezone-id.patch
  - Resolves: rhbz#1017618


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.58.1.11.10
changelog:
  - Updated to icedtea6 1.11.10
  - rewritten java-1.6.0-openjdk-java-access-bridge-security.patch
  - excluded aarch64.patch
    - by patch 8 -  removingOfAarch64.patch.patch
  - Resolves: rhbz#950387


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.59.1.11.11
changelog:
  - Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
  - removed patch 8 -  removingOfAarch64.patch.patch - fixed upstream
  - Resolves: rhbz#950387


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.60.1.11.11
changelog:
  - added and applied (temporally) one more patch to xalan/xerces privileges
   - patch9 jaxp-backport-factoryfinder.patch
  - will be upstreamed
  - Resolves: rhbz#950387


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950387


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.62.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973130


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.63.1.11.11.90
changelog:
  - added patch100  8000791-regression-fix.patch
  - bumped release
  - updated to icedtea-1.11.12
  - Resolves: rhbz#976897
  - Resolves: rhbz#983411


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.63.1.11.13
changelog:
  - removed upstreamed  patch100  8000791-regression-fix.patch
  - bumped release
  - updated to icedtea-1.11.13
  - Resolves: rhbz#983411


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - adapted patch8 java-1.6.0-openjdk-timezone-id.patch
  - removed useless runtests parts
  - included also java.security.old files
  - Resolves: rhbz#1017621


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#1050190


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - Resolves: rhbz#1085009


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.2.el6
changelog:
  - Unapplied but kept (for 2.3revert) patch110,  java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
  - Added and applied patch113: java-1.7.0-openjdk-aes-update_reset.patch
  - Added and applied patch114: java-1.7.0-openjdk-nss-tck.patch
  - Added and applied patch115: java-1.7.0-openjdk-nss-split_results.patch
  - NSS enabled by default - enable_nss set to 1
  - rewritten patch109 - java-1.7.0-openjdk-nss-config-1.patch
  - rewritten patch111 - java-1.7.0-openjdk-nss-config-2.patch
  - Resolves: rhbz#831734


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre2.3.el6
changelog:
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.4.0.pre2, updated?
  - Added java -Xshare:dump to post (see 513605) fo jitarchs
  - Resolves: rhbz#911530


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre3.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre3, updated!
  - Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911530


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre4.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre4, 
  - Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911530


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.8.1.el6
changelog:
  - Added and applied patch 116 - patch 116 rh905128-non_block_ciphers.patch
  - Added and applied patch 117 - patch 117 java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch
   - to enable handleStartupErrors = ignoreMultipleInitialisation in icedtea 2.3
  - Restorered removed nss support
  - Fixed java-1.7.0-openjdk-nss-config-{1,2} patches to be valid for icedtea 2.3.x
  - enable_nss switch to 0 - disabled
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.8.2.el6
changelog:
  - Added latest Fedora spec changes
  - Bumped release
  - Removed patch2 java-1.7.0-openjdk-java-access-bridge-idlj.patch (unapplied)
  - zlib in BuildReq restricted for  1.2.3-7 or higher
   - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
  - Removed a -icedtea tag from the version
    - package have less and less connections to icedtea7
  - Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
  - Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
    - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
  - Removed all fonconfig files. Fonts are now handled differently in JDK 
    and those files are redundant. This is going to be usptreamed.
    - see https://bugzilla.redhat.com/show_bug.cgi?id=902227 for details
  - logging.properties marked as config(noreplace)
    - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
  - classes.jsa marked as ghost on full path
    - see https://bugzilla.redhat.com/show_bug.cgi?id=918172 for details
  - nss.cfg was marked as config(noreplace)
  - Add symlink to default soundfont (see 541466)
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.9-2.3.9.0.el6
changelog:
  - updated to IcedTea  2.3.9 with latest security patches
  - buildver sync to b19
  - rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.9.1.el6
changelog:
  - updated to updated IcedTea  2.3.9 with fix to one of security fixes
    -  fixed font glyph offset
  - Resolves: rhbz#950380


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.10.0.el6
changelog:
  - Updated to latest IcedTea7-forest 2.3.10
  - patch 107 renamed to 500 for cosmetic purposes
  - improved handling of patch111 - nss-config-2.patch
  - removed patch 117, java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch
    duplicated with patch 108 (java-1.7.0-openjdk-nss-icedtea-e9c857dcb964)
  - Added client/server directories so they can be owned
  - Added fix for RH857717, owned /etc/.java/ and /etc/.java/.systemPrefs
  - Resolves: rhbz#973119


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.2.el6
changelog:
  - added patch1000 MBeanFix.patch to fix regressions caused by security patches
  - Resolves: rhbz#973119


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.3.el6
changelog:
  - removed upstreamed patch1000 MBeanFix.patch
  - updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
  - Resolves: rhbz#973119


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.7.0.25-2.3.10.4.el6
changelog:
  - Sync with upstream IcedTea7-forest 2.3.10 tag
  - Fixes regressions as introduced with 1.7.0.25-2.3.10.3.el6:
    rhbz#978005, rhbz#977979, rhbz#976693, IcedTeaBZ#1487.
  - Related: rhbz#973119


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.fc17.1
changelog:
  - Added flag so that debuginfo is built into classfiles (rhbz# 796400)
  - Updated rhino.patch to build scripting support (rhbz# 796398)


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.fc17.2
changelog:
  - Resolved rhbz#740762: java.library.path is missing some paths
  - Unified spec file for x86, x86_64, ARM and s390
    - Integrated changes from Dan Horák <dhorak@redhat.com> for Zero/s390
    - Integrated changes from Chris Phillips <chphilli@redhat.com> for Zero/ARM


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6
changelog:
  - Imported from Fedora into RHEL 6.3 branch
  - Removed unused macros
  - Removed rh740762 patch (removed from Fedora now too)
  - Disabled system lcms (not available in RHEL6)
  - Updated virtual provides to provide "7" specific items
  - Made exclusive arch for i686 and x86_64


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.1
changelog:
  - Synched with 7.0 branch
  - Removed unnecessary unsetting of USE_SYSTEM_LCMS
  - Added SystemTap fixes from Mark Wielaard


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.3-2.1.el6.3
changelog:
  - Added ALT_STRIP_POLICY="no_strip" flag so that binaries are not stripped
  - Collapsed if cases for x86
  - Decreased priority
  - Removed xalan and xerces reqs in favor of libxslt which is what we use


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.0.el6
changelog:
  - security update to 2.3.13
  - adapted java-1.7.0-openjdk-disable-system-lcms.patch (and redeclared to 105)
  - removed bootstrap
  - fixed nss
  - fixed buildver and updatever (Set to 25,30)
  - moved to xz compression of sources
  - all patches moved correctly to prep
  - added patch404 tck20131015_1.patch, to resolve one of tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.1.el6
changelog:
  - removed useless  patch404 tck20131015_1.patch
  - added patch405 tck20131015_2.patch, to resolve one of tck failures
  - added patch406 tck20131015_3.patch, to resolve one of tck failures
  - added patch407 tck20131015_4.patch, to resolve one of tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.2.el6
changelog:
  - updated to newer security tarball of 2.3.13
  - removed patch405 tck20131015_2.patch, no longer necessary to fix tck failures
  - removed patch406 tck20131015_3.patch, no longer necessary to fix tck failures
  - removed patch407 tck20131015_4.patch, no longer necessary to fix tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.13.3.el6
changelog:
  - added back patch404 tck20131015_1.patch, to resolve one of tck failures
  - added back patch405 tck20131015_2.patch, to resolve one of tck failures
  - added back patch406 tck20131015_3.patch, to resolve one of tck failures (modified)
  - added back patch407 tck20131015_4.patch, to resolve one of tck failures
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.1.el6
changelog:
  - sync with rhel 6.5 to icedtea 2.4 because of pernament tck failures
   - nss kept disabled
  - Resolves: rhbz#1017626


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.4.1.4.el6
changelog:
  - updated to icedtea 2.4.1
  - fsg.sh  moved form sources to repository
  - all (where applicable) usages of patch command replaced by patch macro
  - removed upstreamed  patch 401 657854-openjdk7.patch (see RH947731)
  - adapted patch 402 gstackbounds.patch - see (RH902004)
  - Resolves: rhbz#978423


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.60-2.4.2.0.el6
changelog:
  - updated to icedtea7-forest 2.4.2 + aprtial sync with fedoras
  - removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
  - renamed patch103 java-1.7.0-openjdk-arm-fixes.patch to 
  patch120: java-1.7.0-openjdk-freetype-check-fix.patch
  - adapted patch104 java-1.7.0-openjdk-ppc-zero-jdk.patch
  - adapted patch105 java-1.7.0-openjdk-ppc-zero-hotspot.patch
  - added patch404 RH661505-toBeReverted.patch, to be *reverted* during prep
  - added source12, TestCryptoLevel.java to ensure used crypto
  - ppc64 repalced by macro
  - buildver bumbed to 60
  - Resolves: rhbz#978423


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.2.1.el6
changelog:
  - buildver replaced by updatever
  - buildver reset to 60
  - updatever set to 40
  - added   JDK_BUILD_NUMBER=b`printf "%02d" buildver to make parameters
  - buildversion included in id
  - desktop icons extracted to text files
  - Resolves: rhbz#978423


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.0.el6
changelog:
  - security update to icedtea 2.4.3  (u45, b15)
  - removed unnecessary revert patch404: RH661505-toBeReverted.patch
  - get rid of unaplied patch110 java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
  - Resolves:rhbz#1017627


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.4.el6
changelog:
  -  patch111 - nss-config-2.patch applied jsut as dry-run
    (== not applied) as it have invalid consequences
  - Resolves: rhbz#1036813


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.3-2.2.1.el6
changelog:
  - Used newly prepared tarball with security fixes
  - Bump to icedtea7-forest-2.2.1
  - _mandir/man1/jcmd-name.1 added to alternatives
  - Updated rhino.patch
  - Updated java-1.7.0-openjdk-java-access-bridge-security.patch
  - Modified partially upstreamed patch302 - systemtap.patch
  - Temporarly disabled patch102 - java-1.7.0-openjdk-size_t.patch
  - Removed already upstreamed patches 104,108,109,301,110:
    - java-1.7.0-openjdk-arm-ftbfs.patch
    - java-1.7.0-openjdk-system-zlib.patch
    - java-1.7.0-openjdk-remove-mimpure-opt.patch
    - systemtap-alloc-size-workaround.patch
    - java-1.7.0-fix-gio-detection.patch
  - Access gnome bridge jar forced to be 644
  - Added patch303 - java-1.7.0-openjdk-jstack.patch which resolved RH804632 for openjdk6
  - Resolves: rhbz#828759


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.el6
changelog:
  - Updated priority to be > 17000 and to depend on buildver variable
  - Variable buildver increased to 5 as it should be
  - Resolves: rhbz#828759


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.1.el6
changelog:
  - Added patch 304 java-1.7.0-openjdk-beans-isPackageAccessible.patch
    to fix vulnerability until it is fixed in upstream sources. 
  - Resolves: rhbz#852299


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.el6.3
changelog:
  - Removed patch 304 java-1.7.0-openjdk-beans-isPackageAccessible.patch
  - Applied upstream patches for same issue:
     patch 1001 sec-webrevs-openjdk7-29_aug_2012-7162473.patch
     patch 1002 sec-webrevs-openjdk7-29_aug_2012-7162476.patch
     patch 1003 sec-webrevs-openjdk7-29_aug_2012-7163201.patch
     patch 1004 sec-webrevs-openjdk7-29_aug_2012-7194567.patch
     patch 1005 sec-webrevs-openjdk7-29_aug_2012-78e01a6ca8d3.patch
  - Resolves: rhbz#852299


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.4.0.el6
changelog:
  - updated to security icedtea 2.4.4
   - icedtea_version set to 2.4.4
   - updatever bumped to       51
   - release reset to 0
  - sync with fedora
   - added and applied patch411 1029588.patch (rh 1029588)
   - added aand applied patch410, 1015432 (rh 1015432)
  - Resolves: rhbz#1050935


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.7.0.el6
changelog:
  - bumped to future icedtea-forest 2.4.7
  - updatever set to 55, buildver se to 13, release reset to 0
  - removed upstreamed patch402 gstackbounds.patch
  - removed BuildRequires on pulseaudio >= 0.9.1, devel is enough
  - removed Requires: rhino, BuildRequires is enough
  - added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
  - fixed FT2_CFLAGS and FT2_LIBS
  - ppc64 repalced by power64 macro
  - patch111 applied as dry-run (6.5 forward port)
  - Resolves: rhbz#1085002


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.1.el6.4
changelog:
  - Cleanup before security release
  - Removed patches:
     patch 1001 sec-webrevs-openjdk7-29_aug_2012-7162473.patch
     patch 1002 sec-webrevs-openjdk7-29_aug_2012-7162476.patch
     patch 1003 sec-webrevs-openjdk7-29_aug_2012-7163201.patch
     patch 1004 sec-webrevs-openjdk7-29_aug_2012-7194567.patch
     patch 1005 sec-webrevs-openjdk7-29_aug_2012-78e01a6ca8d3.patch
  - Resolves: rhbz#852299


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.3.el6
changelog:
  - Updated to 2.3.3
  - Updated java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.2.el6
changelog:
  - Sync with 6.4
  - introduced tmp-patches source tarball
  - release tag moved before dist (see 875245)
  - Resolves: rhbz#880352


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.1.el6
changelog:
  - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Added jxmd and idlj to alternatives
  - make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Unapplied patch302 and deleted systemtap.patch
  - buildver increased to 11
  - icedtea_version set to 2.4.0
  - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - removed tmp-patches source tarball
  - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - Resolves: rhbz#895033


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.4.1.el6
changelog:
  - Rewerted to IcedTea 2.3.4
    - rewerted patch105: java-1.7.0-openjdk-disable-system-lcms.patch
    - removed jxmd and idlj to alternatives
    - make NOT executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
    - re-applied patch302 and restored systemtap.patch
    - buildver set to 9
    - icedtea_version set to 2.3.4
    - unapplied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
    - restored tmp-patches source tarball
    - removed /lib/security/US_export_policy.jar and lib/security/local_policy.jar
    - java-1.7.0-openjdk-java-access-bridge-security.patch's path moved from 
      java.security-linux back to java.security
  - Resolves: rhbz#895033


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.el6.2
changelog:
  - Added nss support (see 831733)
    -added  enable_nss variable, set to true - 1 as default
    -added and applied if enable_nss true patch108 java-1.7.0-openjdk-aes-buffering.patch
    -added and applied if enable_nss true patch109 java-1.7.0-openjdk-nss-config-1.patch
    -added and applied if enable_nss true patch111 java-1.7.0-openjdk-nss-config-2.patch
    -added and applied if enable_nss true patch110 java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
  - openjdk-nss-config-2.patch, is dynamically modified after build time and is
    changing build dependence (nss last) to runtime depndecne (nss first)
  - release tag moved before dist (see 875245)
  - Resolves: rhbz#871771


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.1.el6
changelog:
  - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Added jxmd and idlj to alternatives
  - make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Unapplied patch302 and deleted systemtap.patch
  - buildver increased to 11
  - icedtea_version set to 2.4.0
  - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - removed tmp-patches source tarball
  - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - Disabled nss - enable_nss set to 0
  - Resolves: rhbz#895034


author: Jerry James <loganjerry@gmail.com> - 0:4.1-0.1
changelog:
  - Update to 4.1
  - Also ship the jjrun script
  - Own the appropriate gcj directory
  - Minor spec file changes to comply with latest Fedora guidelines
  - Include the top-level index.html file in the manual


author: Matt Wringe <mwringe@redhat.com> - 0:4.1-0.2
changelog:
  - Update to remove packaged jars in source tar
  - Build with bootstrap jar so that required java source 
    files get generated


author: Andrew Overholt <overholt@redhat.com> 3.9.0-6
changelog:
  - Add ability to build with ant and not maven
  - Remove maven2-plugin-release BR (part of maven2 now)


author: Andrew Overholt <overholt@redhat.com> 0:2.9-1.2
changelog:
  - Fix mixed tabs and spaces
  - Remove spurious post/postun Requires
  - Add cleaning of buildroot to beginning of %install and remove from
    beginning of %prep
  - Fix Group tags
  - Install unversioned javadoc (Alex Kurtakov)


author: Matt Wringe <mwringe@redhat.com> - 0:1.3.5-2jpp.1
changelog:
  - Remove javadoc post and postun sections due to new jpp standard 
  - Update makefile patch to compress jar
  - Fix rpmlint issues


author: Matt Wringe <mwringe@redhat.com> - 0:1.3.5-2jpp.2
changelog:
  - Add patches jflex-CharSet_java.patch and jflex-StateSet_java.patch
    to allow building with the new gcj


author: Andrew Overholt <overholt@redhat.com> 0:1.2.6-9.5
changelog:
  - Fix Group tags
  - Remove ghost symlinking in %post{,un}
  - Add cleaning of buildroot in %install
  - Remove dot in javadoc Summary
  - Fix URL for Source0
  - Fix mixed tabs and spaces


author: Orion Poplawski <orion@cora.nwra.com> - 0:1.7.5-3.8
changelog:
  - Add Requires: coreutils because we provide scripts that are being executed
    in rpm %post scriptlets that require it.


author: Rob Crittenden <rcritten@redhat.com> 4.2.6-1
changelog:
  - Resolves: bug 455305 - <cfu@redhat.com>
    CA ECC Signing Key Failure
  - Resolves: bug 502111 - <cfu@redhat.com>
    Need JSS interface for NSS's PK11_GenerateKeyPairWithOpFlags() function
  - Resolves: bug 503809 - <mharmsen@redhat.com>
    Update JSS version to 4.2.6
  - Resolves: bug 503817 - <mharmsen@redhat.com>
    Create JSS Javadocs as their own RPM


author: Rob Crittenden <rcritten@redhat.com> 4.2.6-4
changelog:
  - Resolves: bug 224688 - <cfu@redhat.com>
    Support ECC POP on the server
  - Resolves: bug 469456 - <jmagne@redhat.com>
    Server Sockets are hard coded to IPV4
  - Resolves: bug 509183 - <mharmsen@redhat.com>
    Set NSS dependency >= 3.12.3.99


author: John Dennis <jdennis@redhat.com> - 4.2.6-10
changelog:
  - Resolves: bug 656094 - <jdennis@redhat.com>
    Rebase jss to at least jss-4.2.6-9
  - <jdennis@redhat.com>
    merge in updates from Fedora
    move jar location to %{_libdir}/jss and provide symlinks, on 32bit looks like this:
      /usr/lib/java/jss4.jar -> /usr/lib/jss/jss4.jar
      /usr/lib/jss/jss4-<version>.jar
      /usr/lib/jss/jss4.jar -> jss4-<version>.jar
      /usr/lib/jss/libjss4.so
  - bug 654657 - <jdennis@redhat.com>
    Incorrect socket accept error message due to bad pointer arithmetic
  - bug 647364 - <cfu@redhat.com>
    Expose updated certificate verification function in JSS
  - bug 529945 - <cfu@redhat.com>
    expose NSS calls for OCSP settings
  - bug 638833 - <cfu@redhat.com>
    rfe ecc - add ec curve name support in JSS and CS
  - <rcritten@redhat.com>
    Need to explicitly catch UnsatisfiedLinkError exception for System.load()
  - bug 533304 - <rcritten@redhat.com>
    Move location of libjss4.so to subdirectory and use System.load() to
    load it instead of System.loadLibrary() for Fedora packaging compliance


author: Christina Fu <cfu@redhat.com> - 4.2.6-11
changelog:
  - bug 654657 - <jdennis@redhat.com>
    Incorrect socket accept error message due to bad pointer arithmetic
  - bug 661142 - <cfu@redhat.com>
    Verification should fail when a revoked certificate is added


author: Jack Magne <jmagne@redhat.com> - 4.2.6-16
changelog:
  - bug 694661 - TKS instance crash during token enrollment.
    Back out of previous patch for #676083.


author: Christina Fu <cfu@redhat.com> - 4.2.6-17
changelog:
  - Bug 670980 - Cannot create system certs when using LunaSA HSM in FIPS Mode
    and ECC algorithms (support tokens that don't do ECDH)


author: Christina Fu <cfu@redhat.com> - 4.2.6-21
changelog:
  - Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping
    unwrapping keys should be done in the token
  - support for PKCS5v2; support for secure PKCS12
  - Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after the
    in-place upgrade( CS 8.0->8.1)


author: Christina Fu <cfu@redhat.com> - 4.2.6-23
changelog:
  - Bugzilla Bug #804838 - [RFE] ECC encryption keys cannot be archived
    ECC phase2 work - support for ECC encryption key archival and recovery (cfu)
  - Bugzilla Bug #797352 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . (mharmsen)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.2.6-24
changelog:
  - Bugzilla Bug #797353 - Un-deprecate previously deprecated methods in
    JSS 4.2.6 . . . BadPaddingException (mharmsen)


author: Rob Crittenden <rcritten@redhat.com> 4.2.4-6
changelog:
  - Use _jnidir macro instead of _javadir for the jar files. This will break
    multilib installs but adheres to the jpackage spec.


author: Rob Crittenden <rcritten@redhat.com> 4.2.6-1
changelog:
  - Update to 4.2.6
  - Include patch to add jss interface to PK11_GenerateKeyPairWithOpFlags()
  - Add javadocs subpackage


author: Rob Crittenden <rcritten@redhat.com> 4.2.6-4
changelog:
  - Support ECC POP on the server (#224688)
  - Server Sockets are hard coded to IPV4 (#469456)
  - Set NSS dependency >= 3.12.3.99


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 3.8.2-3jpp.1
changelog:
  - Committed on behalf of Tania Bento <tbento@redhat.com>
  - Update per Fedora review process
  - Resolves rhbz#225954


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.0-10
changelog:
  - Close config file descriptor when finished reading the config file
  - Add support for ENUM domains into jwhois.conf
    Resolves: #465182


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.0-12
changelog:
  - Large jwhois.conf update
    Resolves: #48677{3,4,5,6,8}, #48678{0,2-9}, #48679{0-9}
    Resolves: #48680{0-3}, #48682{2,3,7}, #48683{0,2-5,7-9}
    Resolves: #48684{0,2,3,5,7,8}, #48685{0,3,7}, #486862


author: Robert Scheck <robert@fedoraproject.org> - 4.0-17
changelog:
  - Update jwhois.conf for .edu.ar, .bs, .by, .dk, .name, .ng, .ps,
    .sg, .sl, .sv, .co.zw domains and handles from .name and .aero


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 4.0-19
changelog:
  - Fix IDN encoding failed with error code 5
    Resolves: #682832
  - Update jwhois.conf for dotEmarat extension
    Resolves: #664449


author: Rex Dieter <rdieter@fedoraproject.org> - 0:1.0.5-5
changelog:
  - resurrect -devel (!=f9), grow -libs (f10+, #341651)
  - avoid auto*foo
  - fix build on rawhide (libdvdread header changes)
  - conditionalize i18n bits


author: Radek Novacek <rnovacek@redhat.com> 1:1.0.5-12
changelog:
  - Added "-fno-strict-aliasing" flag
  - Added missing % to the summary of k3b-common
  - Resolves: #596179


author: Akira TAGOH <tagoh@redhat.com> - 2.3-4
changelog:
  - Remove .desktop file since it's accessible from scim-panel and it's not
    necessarily used for every users, particularly on Live. (#439173)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15-4
changelog:
  - Merge review (drop Provides/Obsoletes, change Prereq to Requires,
    add URL, convert ChangeLog to utf-8, replace locale destination
    with macro, add COPYING and add dvorak documentation)
    Resolves: #225958


author: Lukas Tinkl <ltinkl@redhat.com> - 4.3.3-2
changelog:
  - Resolves: #605063 - RPMdiff run failed for package kcoloredit-4.3.3-1.el6
    (create a noarch doc subpackage to fix multilib issues)


author: Than Ngo <than@redhat.com> - 4.3-15.2
changelog:
  - drop KPackageKit for RHEL
  - use default ksplash, default.jpg as wallpaper and oxygen-air as kdm theme


author: Than Ngo <than@redhat.com> - 4.3.4-5
changelog:
  - Resolves: bz#692737, hidde Network Settings in Control Center
  - Resolves: bz#587904, add missing hicolor icons


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.3-3
changelog:
  - allow 'Open Folder in Tabs' in Konsole to support SSH bookmarks (kde#177637)
    (upstream patch backported from 4.4)


author: Than Ngo <than@redhat.com> - 6:4.3.4-5
changelog:
  - Resolves: bz#631481, Undecodable sequence message starting konsole
  - Resolves: bz#609039, Password & User account becomes non responding


author: Than Ngo <than@redhat.com> - 6:4.3.4-6
changelog:
  - Resolves: bz#608007, "Show menu bar" is always checked
  - Resolves: bz#729307, not possible to set default konsole size


author: Than Ngo <than@redhat.com> - 4.3.4-6
changelog:
  - backport patch from stable branch
    fix kde#210463, Don't watch subdirs for changes unless they've been listed.


author: Than Ngo <than@redhat.com> - 4.3.4-9
changelog:
  - Resolves: bz#607100, Requires: hal-storage-addon 
  - Resolves: bz#597271, drop WebKit support in Qt


author: Than Ngo <than@redhat.com> - 4.3.4-22
changelog:
  - Resolves: bz#666295, Missing help page(s) for Plasma workspace
  - Resolves: bz#587917, gnome/kde system monitor tool use same icon


author: Than Ngo <than@redhat.com> - 4.3.4-3
changelog:
  - fix bz#531211, backport sonnet patch, fix rendering issue in indic, asian, arabic 
    languages
  - drop noarch hack


author: Than Ngo <than@redhat.com> - 6:4.3.4-6
changelog:
  - Redhat branding 
  - make kdeinit4 quiet
  - backport to fix critical performance
  - backport to fix issue in printing on pages with form widgets


author: Than Ngo <than@redhat.com> - 6:4.3.4-15
changelog:
  - Resolves: bz#587016, print dialogue does not remember previous settings
  - Resolves: bz#682611, Konqueror splash page in zh_TW is wrong
  - Resolves: bz#734734, plasma eating up cpu-time when systemtray some icon
  - Resolves: bz#826114, konqueror crash when trying to add "Terminal Emulator" to main menu bar


author: Than Ngo <than@redhat.com> - 3.5.10-21
changelog:
  - fix security issues in libltdl bundle within kdelibs CVE-2009-3736
  - backport upstream patches
  - patch autoconfigury to build with autoconf >= 2.64 (Stepan Kasal)


author: Than Ngo <than@redhat.com> - 3.5.10-25
changelog:
  - Resolves: bz#681901, drops old Obsoletes/Provides
  - Resolves; bz#734447, use ca-certificates' ca-bundle.crt


author: Jaroslav Reznik <jreznik@redhat.com> - 7:4.3.4-8
changelog:
  - Resolves: #591967,
      CVE-2010-1000, CVE-2010-1511: improper sanitization of metalink 
      attribute


author: Than Ngo <than@redhat.com> 6:4.3.4-6
changelog:
  - Resolves: bz#587895, ark does not seem to have icon on menu
  - Resolves: bz#595784, disable JS / Java / plugins in khtml file preview


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.7.el6]
changelog:
  - [virt] x86: better fix for race between nmi injection and enabling nmi window (Aristeu Rozanski)
  - [virt] x86: revert "fix race between nmi injection and enabling nmi window" (Aristeu Rozanski)


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.8.el6]
changelog:
  - [scsi] mark bfa fc adapters tech preview (Rob Evers) [698384]
  - [virt] Revert pdpte registers are not flushed when PGD entry is changed in x86 PAE mode (Aristeu Rozanski) [691310]
  - [i686] nmi watchdog: Enable panic on hardlockup (Don Zickus) [677532]
  - [netdrv] Adding Chelsio Firmware for cxgb4 (Neil Horman) [691929]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.9.el6]
changelog:
  - [net] limit socket backlog add operation to prevent possible DoS (Jiri Pirko) [694396] {CVE-2010-4251}
  - [scsi] mpt2sas: prevent heap overflows and unchecked (Tomas Henzl) [694023] {CVE-2011-1494 CVE-2011-1495}
  - [fs] epoll: prevent creating circular epoll structures (Don Howard) [681683] {CVE-2011-1082}
  - [mm] Prevent page_fault at do_mm_track_pte+0xc when Stratus dirty page tracking is active (Larry Woodman) [693786]
  - [fs] GFS2 causes kernel panic in spectator mode (Steven Whitehouse) [696535]
  - [net] bonding: interface doesn't issue IGMP report on slave interface during failover (Flavio Leitner) [640690]
  - [scsi] isci: validate oem parameters early, and fallback (David Milburn) [698016]
  - [scsi] isci: fix oem parameter header definition (David Milburn) [698016]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.10.el6]
changelog:
  - [netdrv] cnic: fix hang due to rtnl_lock (Mike Christie) [694874]
  - [netdrv] firmware: re-add the recently deleted bnx2x fw 6.2.5.0 (Michal Schmidt) [690470]
  - [netdrv] firmware/bnx2x: add 6.2.9.0 fw, remove unused fw (Michal Schmidt) [690470]
  - [netdrv] bnx2x, cnic: Disable iSCSI if DCBX negotiation is successful (Michal Schmidt) [690470]
  - [netdrv] bnx2x: don't write dcb/llfc fields in STORM memory (Michal Schmidt) [690470]
  - [netdrv] bnx2x: Update firmware to 6.2.9 (Michal Schmidt) [690470]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.12.el6]
changelog:
  - [scsi] beiscsi: update version (Mike Christie) [674340]
  - [scsi] be2iscsi: fix chip cleanup (Mike Christie) [674340]
  - [scsi] be2iscsi: fix boot hang due to interrupts not getting rearmed (Mike Christie) [674340]
  - [scsi] bnx2fc: fix regression due to incorrect setup of em for npiv port (Mike Christie) [700672]
  - [ppc] pseries: Use a kmem cache for DTL buffers (Steve Best) [695678]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.13.el6]
changelog:
  - [scsi] hpsa: fix lost command problem (Tomas Henzl) [700430]
  - [scsi] cciss: fix lost command problem (Tomas Henzl) [700430]
  - [scsi] ibft: fix oops during boot (Mike Christie) [698737]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-131.0.14.el6]
changelog:
  - [scsi] hpsa: fix reading a write only register causes a hang (Rob Evers) [703262]
  - [scsi] mpt2sas: remove the use of writeq, since writeq is not atomic (Tomas Henzl) [701947]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.5.1.el6]
changelog:
  - [kernel] cgroupfs: use init_cred when populating new cgroupfs mount (Eric Paris) [713135 700538]
  - [netdrv] ixgbe: adding FdirMode module option (Andy Gospodarek) [711550 707287]
  - [crypto] testmgr: add xts-aes-256 self-test (Jarod Wilson) [711548 706167]
  - [fs] ext3: Fix lost extented attributes for inode with ino == 11 (Eric Sandeen) [712413 662666]
  - [mm] Prevent Disk IO throughput degradation due to memory allocation stalls (Larry Woodman) [711540 679526]
  - [net] sock: adjust prot->obj_size always (Jiri Pirko) [709381 704231]
  - [fs] GFS2: resource group bitmap corruption resulting in panics and withdraws (Robert S Peterson) [711528 702057]
  - [x86] kprobes: Disable irqs during optimized callback (Jiri Olsa) [711545 699865]
  - [mm] slab, kmemleak: pass the correct pointer to kmemleak_erase() (Steve Best) [712414 698023]
  - [net] fix netns vs proto registration ordering (Wade Mealing) [702305 702306] {CVE-2011-1767 CVE-2011-1768}
  - [ppc] Fix oops if scan_dispatch_log is called too early (Steve Best) [711524 696777]
  - [virt] i8259: initialize isr_ack (Avi Kivity) [711520 670765]
  - [virt] VMX: Save and restore tr selector across mode switches (Gleb Natapov) [711535 693894]
  - [virt] VMX: update live TR selector if it changes in real mode (Gleb Natapov) [711535 693894]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.6.1.el6]
changelog:
  - [audit] ia32entry.S sign extend error codes when calling 64 bit code (Eric Paris) [713831 703935]
  - [audit] push audit success and retcode into arch ptrace.h (Eric Paris) [713831 703935]
  - [x86] intel-iommu: Flush unmaps at domain_exit (Alex Williamson) [713458 705441]
  - [x86] intel-iommu: Only unlink device domains from iommu (Alex Williamson) [713458 705441]
  - [virt] x86: Mask out unsupported CPUID features if running on xen (Igor Mammedov) [711546 703055]
  - [block] fix accounting bug on cross partition merges (Jerome Marchand) [682989 669363]
  - [net] vlan: remove multiqueue ability from vlan device (Neil Horman) [713494 703245]
  - [net] Fix netif_set_real_num_tx_queues (Neil Horman) [713492 702742]
  - [scsi] mpt2sas: move event handling of MPT2SAS_TURN_ON_FAULT_LED in process context (Tomas Henzl) [714190 701951]
  - [mm] thp: simple fix for /dev/zero THP mprotect bug (Andrea Arcangeli) [714762 690444]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.8.1.el6]
changelog:
  - [fs] GFS2: force a log flush when invalidating the rindex glock (Benjamin Marzinski) [717018 702263]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.9.1.el6]
changelog:
  - [scsi] cciss: Annotate cciss_kdump_soft_reset and cciss_sent_reset as __devinit (Tomas Henzl) [715397 698268]
  - [scsi] cciss: Don't wait forever for soft reset to complete, give up after awhile (Tomas Henzl) [715397 698268]
  - [scsi] cciss: use cmd_alloc not cmd_special_alloc for the kdump soft reset command (Tomas Henzl) [715397 698268]
  - [scsi] cciss: do not use bit 2 doorbell reset (Tomas Henzl) [715397 698268]
  - [scsi] cciss: do not attempt PCI power management reset method if we know it won't work (Tomas Henzl) [715397 698268]
  - [scsi] cciss: increase timeouts for post-reset no-ops (Tomas Henzl) [715397 698268]
  - [scsi] cciss: remove superfluous sleeps around reset code (Tomas Henzl) [715397 698268]
  - [scsi] cciss: do soft reset if hard reset is broken (Tomas Henzl) [715397 698268]
  - [scsi] cciss: clarify messages around reset behavior (Tomas Henzl) [715397 698268]
  - [scsi] cciss: increase time to wait for board reset to start (Tomas Henzl) [715397 698268]
  - [scsi] cciss: factor out irq_request code (Tomas Henzl) [715397 698268]
  - [scsi] cciss: factor out scatterlist allocation functions (Tomas Henzl) [715397 698268]
  - [scsi] cciss: factor out command pool allocation functions (Tomas Henzl) [715397 698268]
  - [scsi] cciss: use new doorbell-bit-5 reset method (Tomas Henzl) [715397 698268]
  - [scsi] cciss: wait longer for no-op to complete after resetting controller (Tomas Henzl) [715397 698268]
  - [scsi] cciss: do a better job of detecting controller reset failure (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: do not attempt PCI PM reset if we know it will not work (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: remove superfluous sleeps around reset code (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: do soft reset if hard reset is broken (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: clarify messages around reset behavior (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: factor out irq request code (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: factor out cmd_pool allocation functions (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: do not use bit 2 doorbell reset, it causes NMIs (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: wait longer for no-op to complete after resetting controller (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: use new doorbell-bit-5 reset method (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: adjust timing of post-reset sleeps (Tomas Henzl) [715397 698268]
  - [scsi] hpsa: do a better job of detecting controller reset failure (Tomas Henzl) [715397 698268]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.10.1.el6]
changelog:
  - [virt] ksm: fix race between ksmd and exiting task (Andrea Arcangeli) [710340 710341] {CVE-2011-2183}
  - [kernel] proc: signedness issue in next_pidmap() (Jerome Marchand) [697824 697825] {CVE-2011-1593}
  - [net] bluetooth: Prevent buffer overflow in l2cap config request (Jiri Pirko) [716809 716810] {CVE-2011-2497}
  - [fs] NLM: Don't hang forever on NLM unlock requests (Jeff Layton) [709548 709549] {CVE-2011-2491}
  - [fs] NFS: Fix NFSv3 exclusive open semantics (Jeff Layton) [719925 694210]
  - [fs] GFS2: Incorrect inode state during deallocation (Steven Whitehouse) [714982 712139]
  - [virt] KVM: Fix register corruption in pvclock_scale_delta (Avi Kivity) [719910 712102]
  - [netdrv] ehea: Fix memory hotplug oops (Steve Best) [720914 702036]
  - [net] Fix memory leak/corruption on VLAN GRO_DROP (Herbert Xu) [695175 695176] {CVE-2011-1576}
  - [md] Fix resync hang after surprise removal (James Paradis) [719928 707268]
  - GFS2: make sure fallocate bytes is a multiple of blksize (Benjamin Marzinski) [720863 695763] {CVE-2011-2689}
  - [kernel] Prevent rt_sigqueueinfo and rt_tgsigqueueinfo from spoofing the signal code (Oleg Nesterov) [715521 690033] {CVE-2011-1182}
  - [redhat] config: enable parallel port printer support (Aristeu Rozanski) [713827 635968]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.11.1.el6]
changelog:
  - [mm] hold the page lock until after set_page_stable_node (Andrea Arcangeli) [726095 683658]
  - [netdrv] be2net: remove certain cmd failure logging (Ivan Vecera) [725329 719304]
  - [net] nl80211: missing check for valid SSID size in scan operation (Stanislaw Gruszka) [718157 718158] {CVE-2011-2517}
  - [net] bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace. (Thomas Graf) [703022 703023] {CVE-2011-2492}
  - [net] inet_diag: fix validation of user data in inet_diag_bc_audit() (Thomas Graf) [714540 714541] {CVE-2011-2213}
  - [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716829 716830] {CVE-2011-2495}
  - [fs] validate size of EFI GUID partition entries (Anton Arapov) [703029 703030] {CVE-2011-1776}
  - [fs] ext4: Fix max file size and logical block counting of extent format file (Lukas Czerner) [722568 722569] {CVE-2011-2695}
  - [virt] kvm: Disable device assignment without interrupt remapping (Alex Williamson) [716306 711504] {CVE-2011-1898}
  - [virt] iommu-api: Extension to check for interrupt remapping (Alex Williamson) [716306 711504] {CVE-2011-1898}
  - [netdrv] r8169: fix Rx checksum offloading bugs (Ivan Vecera) [723807 635596]
  - [netdrv] be2net: changes for BE3 native mode support (Ivan Vecera) [723820 695231]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.13.1.el6]
changelog:
  - [net] af_packet: prevent information leak (Jiri Pirko) [728032 728033] {CVE-2011-2898}
  - [net] gro: Only reset frag0 when skb can be pulled (Jiri Pirko) [726555 726556] {CVE-2011-2723}
  - [fs] FS-Cache: Only call mark_tech_preview() when caching is actually begun (David Howells) [713463 696396]
  - [fs] Fix mark_tech_preview() to not disable lock debugging (David Howells) [713463 696396]
  - [fs] ext4: Rewrite ext4_page_mkwrite() to use generic helpers (Eric Sandeen) [723551 692167]
  - [fs] vfs: Block mmapped writes while the fs is frozen (Eric Sandeen) [723551 692167]
  - [fs] vfs: Create __block_page_mkwrite() helper passing error values back (Eric Sandeen) [723551 692167]
  - [mm] avoid wrapping vm_pgoff in mremap() and stack expansion (Jerome Marchand) [716540 716541] {CVE-2011-2496}
  - [pci] MSI: Restore read_msi_msg_desc(); add get_cached_msi_msg_desc() (Don Zickus) [728522 696511]
  - [pci] MSI: Remove unsafe and unnecessary hardware access (Don Zickus) [728522 696511]
  - [net] sock: do not change prot->obj_size (Jiri Pirko) [726626 725711]
  - [virt] x86: report valid microcode update ID (Marcelo Tosatti) [727838 694747]
  - [agp] fix arbitrary kernel memory writes (Jerome Marchand) [699307 699308] {CVE-2011-2022 CVE-2011-1745}
  - [agp] fix OOM and buffer overflow (Jerome Marchand) [699305 699306] {CVE-2011-1746}
  - [kernel] taskstats: don't allow duplicate entries in listener mode (Jerome Marchand) [715447 715448] {CVE-2011-2484}
  - [netdrv] bnx2x: remove a log-spamming message (Michal Schmidt) [732379 712000]
  - [scsi] ibmvscsi: Improve CRQ reset reliability (Steve Best) [727618 700165]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.14.1.el6]
changelog:
  - [scsi] megaraid_sas: Convert 6, 10, 12 byte CDB's for FastPath IO (Tomas Henzl) [710047 705835]
  - [x86] perf, x86: Fix Intel fixed counters base initialization (Don Zickus) [719229 736284] {CVE-2011-2521}
  - [net] ipv6: make fragment identifications less predictable (Jiri Pirko) [723432 723433] {CVE-2011-2699}
  - [fs] Ecryptfs: Add mount option to check uid of device being mounted = expect uid (Eric Sandeen) [731175 731176] {CVE-2011-1833}
  - [char] tpm: Fix uninitialized usage of data buffer (Stanislaw Gruszka) [684674 684675] {CVE-2011-1160}
  - [kernel] perf: Fix software event overflow (Frantisek Hrbata) [730707 730708] {CVE-2011-2918}
  - [serial] 8250_pci: ifdef for powerpc, to only add functionality to this arch (Steve Best) [732382 696695]
  - [serial] 8250: Fix capabilities when changing the port type (Steve Best) [732382 696695]
  - [serial] 8250_pci Add EEH support to the 8250 driver for IBM/Digi PCIe 2-port Adapter (Steve Best) [732382 696695]
  - [serial] 8250_pci: Add support for the Digi/IBM PCIe 2-port Adapter (Steve Best) [732382 696695]
  - [ppc] pseries/iommu: Add additional checks when changing iommu mask (Steve Best) [736065 704401]
  - [ppc] pseries/iommu: Use correct return type in dupe_ddw_if_already_created (Steve Best) [736065 704401]
  - [ppc] iommu: Restore iommu table pointer when restoring iommu ops (Steve Best) [736065 704401]
  - [ppc] Fix kexec with dynamic dma windows (Steve Best) [736065 704401]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.16.1.el6]
changelog:
  - [net] br_multicast: Ensure to initialize BR_INPUT_SKB_CB(skb)->mrouters_only. (Frantisek Hrbata) [739477 738110]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.17.1.el6]
changelog:
  - Revert: [net] ipv6: make fragment identifications less predictable (Jiri Pirko) [723432 723433] {CVE-2011-2699}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.1.1.el6]
changelog:
  - [net] dccp: handle invalid feature options length (Jiri Pirko) [703012 703013] {CVE-2011-1770}
  - [fs] cifs: check for private_data before trying to put it (Jeff Layton) [703017 702642] {CVE-2011-1771}
  - [net] can: add missing socket check in can/raw and can/bcm release (Jiri Pirko) [698482 698483] {CVE-2011-1748 CVE-2011-1598}
  - [netdrv] ixgbe: do not clear FCoE DDP error status for received ABTS (Andy Gospodarek) [704011 695966]
  - [netdrv] ixgbe: DCB remove ixgbe_fcoe_getapp routine (Andy Gospodarek) [704002 694358]
  - [fs] setup_arg_pages: diagnose excessive argument size (Oleg Nesterov) [645228 645229] {CVE-2010-3858}
  - [scsi] bfa: change tech-preview to cover all cases (Rob Evers) [704014 703251]
  - [scsi] bfa: driver version update (Rob Evers) [704282 703265]
  - [scsi] bfa: kdump fix (Rob Evers) [704282 703265]
  - [scsi] bfa: firmware download fix (Rob Evers) [704282 703265]
  - [netdrv] bna: fix memory leak during RX path cleanup (Ivan Vecera) [704000 698625]
  - [netdrv] bna: fix for clean fw re-initialization (Ivan Vecera) [704000 698625]
  - [scsi] ipr: improve interrupt service routine performance (Steve Best) [704009 696754]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.2.1.el6]
changelog:
  - [kernel] lib/vsprintf.c: add %pU to print UUID/GUIDs (Frantisek Hrbata) [704280 700299]
  - [scsi] megaraid_sas: Driver only report tape drive, JBOD and logic drives (Tomas Henzl) [704601 619422]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.18.1.el6]
changelog:
  - [sched] wait_for_completion_interruptible_timeout() should return signed long (J. Bruce Fields) [745413 738379]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.19.1.el6]
changelog:
  - [scsi] scan: don't fail scans when host is in recovery (Mike Christie) [734774 713682]
  - [netdrv] b43: allocate receive buffers big enough for max frame len + offset (RuiRui Yang) [738204 738205] {CVE-2011-3359}
  - [fs] fuse: check size of FUSE_NOTIFY_INVAL_ENTRY message (RuiRui Yang) [736764 736765] {CVE-2011-3353}
  - [fs] cifs: fix possible memory corruption in CIFSFindNext (Jeff Layton) [737482 730354] {CVE-2011-3191}
  - [kernel] perf tools: do not look at ./config for configuration (Jiri Benc) [730203 730204] {CVE-2011-2905}
  - [x86] mm: Fix pgd_lock deadlock (Andrew Jones) [737570 691310]
  - [mm] pdpte registers are not flushed when PGD entry is changed in x86 PAE mode (Andrew Jones) [737570 691310]
  - [mm] Revert "fix pgd_lock deadlock" (Andrew Jones) [737570 691310]
  - [fs] corrupted GUID partition tables can cause kernel oops (Jerome Marchand) [695981 695982] {CVE-2011-1577}
  - [net] Compute protocol sequence numbers and fragment IDs using MD5. (Jiri Pirko) [732664 732665] {CVE-2011-3188}
  - [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732664 732665] {CVE-2011-3188}
  - [fs] SUNRPC: Fix use of static variable in rpcb_getport_async (Steve Dickson) [740230 723650]
  - [fs] NFSv4.1: update nfs4_fattr_bitmap_maxsz (Steve Dickson) [740230 723650]
  - [fs] SUNRPC: Fix a race between work-queue and rpc_killall_tasks (Steve Dickson) [740230 723650]
  - [fs] SUNRPC: Ensure we always run the tk_callback before tk_action (Steve Dickson) [740230 723650]
  - [misc] enclosure: fix error path to actually return ERR_PTR() on error (Tomas Henzl) [741166 713730]
  - [virt] KVM: make guest mode entry to be rcu quiescent state (Gleb Natapov) [740352 712653]
  - [virt] rcu: provide rcu_virt_note_context_switch() function (Gleb Natapov) [740352 712653]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-131.20.1.el6]
changelog:
  - [net] vlan: fix panic when handling priority tagged frames (Andy Gospodarek) [742849 714936] {CVE-2011-3593}
  - [netdrv] igb: fix WOL on second port of i350 device (Frantisek Hrbata) [743807 718293]
  - [kernel] fix taskstats io infoleak (Jerome Marchand) [716847 716848] {CVE-2011-2494}
  - [tpm] Zero buffer after copying to userspace (Jiri Benc) [732632 732633] {CVE-2011-1162}
  - [scsi] Revert megaraid_sas: Driver only report tape drive, JBOD and logic drives (Tomas Henzl) [741167 736667]
  - [x86] acpi: Prevent acpiphp from deadlocking on PCI-to-PCI bridge remove (Prarit Bhargava) [745557 732706]
  - [net] sctp: deal with multiple COOKIE_ECHO chunks (Frantisek Hrbata) [743510 729220]
  - [scsi] iscsi_tcp: fix locking around iscsi sk user data (Mike Christie) [741704 647268]
  - [kernel] first time swap use results in heavy swapping (Hendrik Brueckner) [747868 722461]
  - [scsi] Reduce error recovery time by reducing use of TURs (Mike Christie) [744811 691945]
  - [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738301 692709] {CVE-2011-3363}
  - [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738301 692709] {CVE-2011-3363}
  - [net] ipv6: fix NULL dereference in udp6_ufo_fragment() (Jason Wang) [748808 740465]
  - [net] ipv6: make fragment identifications less predictable (Jiri Pirko) [723432 723433] {CVE-2011-2699}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.4.1.el6]
changelog:
  - [fs] Revert "proc: enable writing to /proc/pid/mem" (Johannes Weiner) [782649 782650] {CVE-2012-0056}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.5.1.el6]
changelog:
  - [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772870 772871] {CVE-2012-0207}
  - [fs] xfs: validate acl count (Eric Sandeen) [773282 773283] {CVE-2012-0038}
  - [fs] Fix sendfile write-side file position (Steven Whitehouse) [771870 770023]
  - [virt] kvm: x86: fix missing checks in syscall emulation (Marcelo Tosatti) [773390 773391] {CVE-2012-0045}
  - [virt] kvm: x86: extend "struct x86_emulate_ops" with "get_cpuid" (Marcelo Tosatti) [773390 773391] {CVE-2012-0045}
  - [fs] nfs: when attempting to open a directory, fall back on normal lookup (Jeff Layton) [771981 755380]
  - [kernel] crypto: ghash - Avoid null pointer dereference if no key is set (Jiri Benc) [749481 749482] {CVE-2011-4081}
  - [fs] jbd2: validate sb->s_first in journal_get_superblock() (Eryu Guan) [753344 693981] {CVE-2011-4132}
  - [net] fix unsafe pointer access in sendmmsg (Jiri Benc) [761668 760798] {CVE-2011-4594}
  - [scsi] increase qla2xxx firmware ready time-out (Mark Goodwin) [781971 731917]
  - [perf] powerpc: Handle events that raise an exception without overflowing (Steve Best) [767917 755737] {CVE-2011-4611}
  - [sched] x86: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [781974 765720]
  - [virt] x86: Prevent starting PIT timers in the absence of irqchip support (Marcelo Tosatti) [769634 769550] {CVE-2011-4622}
  - [virt] vmxnet3: revert hw features change (Neil Horman) [761536 759613]
  - [netdrv] qlge: fix size of external list for TX address descriptors (Steve Best) [783226 772237]
  - [netdrv] e1000e: Avoid wrong check on TX hang (Dean Nelson) [768916 751087]
  - [virt] KVM: Device assignment permission checks (Alex Williamson) [756092 756093] {CVE-2011-4347}
  - [virt] KVM: Remove ability to assign a device without iommu support (Alex Williamson) [756092 756093] {CVE-2011-4347}
  - [virt] kvm: device-assignment: revert Disable the option to skip iommu setup (Alex Williamson) [756092 756093] {CVE-2011-4347}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.6.1.el6]
changelog:
  - [scsi] qla2xxx: Module parameter to control use of async or sync port login (Chad Dupuis) [788003 769007]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.7.1.el6]
changelog:
  - [netdrv] tg3: Fix single-vector MSI-X code (John Feeney) [787162 703555]
  - [mm] export remove_from_page_cache() to modules (Jerome Marchand) [772687 751419]
  - [block] cfq-iosched: fix cfq_cic_link() race confition (Vivek Goyal) [786022 765673]
  - [fs] cifs: lower default wsize when unix extensions are not used (Jeff Layton) [789058 773705]
  - [net] svcrpc: fix double-free on shutdown of nfsd after changing pool mode (J. Bruce Fields) [787580 753030]
  - [net] svcrpc: avoid memory-corruption on pool shutdown (J. Bruce Fields) [787580 753030]
  - [net] svcrpc: destroy server sockets all at once (J. Bruce Fields) [787580 753030]
  - [net] svcrpc: simplify svc_close_all (J. Bruce Fields) [787580 753030]
  - [net] svcrpc: fix list-corrupting race on nfsd shutdown (J. Bruce Fields) [787580 753030]
  - [fs] xfs: Fix missing xfs_iunlock() on error recovery path in xfs_readlink() (Carlos Maiolino) [749161 694702] {CVE-2011-4077}
  - [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749161 694702] {CVE-2011-4077}
  - [x86] hpet: Disable per-cpu hpet timer if ARAT is supported (Prarit Bhargava) [772884 750201]
  - [x86] Improve TSC calibration using a delayed workqueue (Prarit Bhargava) [772884 750201]
  - [kernel] clocksource: Add clocksource_register_hz/khz interface (Prarit Bhargava) [772884 750201]
  - [kernel] clocksource: Provide a generic mult/shift factor calculation (Prarit Bhargava) [772884 750201]
  - [block] cfq-iosched: fix a kbuild regression (Vivek Goyal) [769208 705698]
  - [block] cfq-iosched: rethink seeky detection for SSDs (Vivek Goyal) [769208 705698]
  - [block] cfq-iosched: rework seeky detection (Vivek Goyal) [769208 705698]
  - [block] cfq-iosched: don't regard requests with long distance as close (Vivek Goyal) [769208 705698]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.9.1.el6]
changelog:
  - [x86] Fix c-state transitions when !NOHZ (Prarit Bhargava) [798572 767753]
  - [x86] tsc: Skip TSC synchronization checks for tsc=reliable (Prarit Bhargava) [798572 767753]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.11.1.el6]
changelog:
  - [netdrv] igb: reset PHY after recovering from PHY power down (Frantisek Hrbata) [789371 737714]
  - [drm] Ivybridge force wake fixes (Dave Airlie) [790007 786272]
  - [fs] xfs: fix inode lookup race (Dave Chinner) [804961 796277]
  - [kernel] regset: Return -EFAULT, not -EIO, on host-side memory fault (Jerome Marchand) [799212 799213] {CVE-2012-1097}
  - [kernel] regset: Prevent null pointer reference on readonly regsets (Jerome Marchand) [799212 799213] {CVE-2012-1097}
  - [block] Fix io_context leak after failure of clone with CLONE_IO (Vivek Goyal) [796846 791125] {CVE-2012-0879}
  - [block] Fix io_context leak after clone with CLONE_IO (Vivek Goyal) [796846 791125] {CVE-2012-0879}
  - [fs] cifs: fix dentry refcount leak when opening a FIFO on lookup (Sachin Prabhu) [798298 781893] {CVE-2012-1090}
  - [fs] NFSv4: include bitmap in nfsv4 get acl data (Sachin Prabhu) [753231 753232] {CVE-2011-4131}
  - [mm] fix nrpages assertion (Josef Bacik) [797182 766861]
  - [mm] Eliminate possible panic in page compaction code (Larry Woodman) [802430 755885]
  - [mm] Prevent panic on 2-node x3850 X5 w/2 MAX5 memory drawers panics while running certification tests caused by page list corruption (Larry Woodman) [802430 755885]
  - [sched] Fix cgroup movement of waking process (Larry Woodman) [795326 773517]
  - [sched] Fix cgroup movement of forking process (Larry Woodman) [795326 773517]
  - [sched] Fix cgroup movement of newly created process (Larry Woodman) [795326 773517]
  - [sched] Fix ->min_vruntime calculation in dequeue_entity() (Larry Woodman) [795326 773517]
  - [sched] cgroup: Fixup broken cgroup movement (Larry Woodman) [795326 773517]
  - [kernel] Prevent system deadlock when moving tasks between cgroups (Larry Woodman) [789060 773522]
  - [kernel] sched: fix {s,u}time values decrease (Stanislaw Gruszka) [789061 748559]
  - [mm] mempolicy.c: refix mbind_range() vma issue (Motohiro Kosaki) [802379 727700]
  - [mm] mempolicy.c: fix pgoff in mbind vma merge (Motohiro Kosaki) [802379 727700]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.12.1.el6]
changelog:
  - [net] net_sched: qdisc_alloc_handle() can be too slow (Jiri Pirko) [805458 785891]
  - [fs] procfs: add hidepid= and gid= mount options (Jerome Marchand) [770651 770652]
  - [fs] procfs: parse mount options (Jerome Marchand) [770651 770652]
  - [fs] fuse: add O_DIRECT support (Josef Bacik) [800552 753798]
  - [kernel] sysctl: restrict write access to dmesg_restrict (Phillip Lougher) [749248 749251]
  - [block] dm io: fix discard support (Mike Snitzer) [799943 758404]
  - [net] netlink: wrong size was calculated for vfinfo list blob (Andy Gospodarek) [790338 772136]
  - [netdrv] mlx4_en: fix endianness with blue frame support (Steve Best) [789911 750166]
  - [usb] Fix deadlock in hid_reset when Dell iDRAC is reset (Shyam Iyer) [797205 782374]
  - [virt] vmxnet3: Cap the length of the pskb_may_pull on transmit (bz 790673) (Neil Horman) [801723 790673]
  - [scsi] megaraid_sas: Fix instance access in megasas_reset_timer (Tomas Henzl) [790341 759318]
  - [netdrv] macvtap: Fix the minor device number allocation (Steve Best) [796828 786518]
  - [net] tcp: bind() fix autoselection to share ports (Flavio Leitner) [787764 784671]
  - [fs] cifs: change oplock break slow work to very slow work (Jeff Layton) [789373 772874]
  - [net] sunrpc: remove xpt_pool (J. Bruce Fields) [795338 753301]
  - [net] Potential null skb->dev dereference (Flavio Leitner) [795335 769590]
  - [net] pkt_sched: Fix sch_sfq vs tcf_bind_filter oops (Jiri Pirko) [786873 667925]
  - [net] mac80211: cancel auth retries when deauthenticating (John Linville) [797241 754356]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.13.1.el6]
changelog:
  - Revert: [fs] NFSv4: include bitmap in nfsv4 get acl data (Sachin Prabhu) [753231 753232] {CVE-2011-4131}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.14.1.el6]
changelog:
  - [net] fix vlan gro path (Jiri Pirko) [810454 720611]
  - [virt] VMX: vmx_set_cr0 expects kvm->srcu locked (Marcelo Tosatti) [808206 807507] {CVE-2012-1601}
  - [virt] KVM: Ensure all vcpus are consistent with in-kernel irqchip settings (Marcelo Tosatti) [808206 807507] {CVE-2012-1601}
  - [scsi] fcoe: Move destroy_work to a private work queue (Neil Horman) [809388 806119]
  - [fs] jbd2: clear BH_Delay & BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [749727 748713] {CVE-2011-4086}
  - [net] af_iucv: offer new getsockopt SO_MSGSIZE (Hendrik Brueckner) [804547 786997]
  - [net] af_iucv: performance improvements for new HS transport (Hendrik Brueckner) [804548 786996]
  - [s390x] af_iucv: remove IUCV-pathes completely (Hendrik Brueckner) [807158 786960]
  - [x86] iommu/amd: Fix wrong shift direction (Don Dutile) [809376 781531]
  - [x86] iommu/amd: Don't use MSI address range for DMA addresses (Don Dutile) [809374 781524]
  - [fs] NFSv4: Further reduce the footprint of the idmapper (Steve Dickson) [802852 730045]
  - [fs] NFSv4: Reduce the footprint of the idmapper (Steve Dickson) [802852 730045]
  - [scsi] fcoe: Make fcoe_transport_destroy a synchronous operation (Neil Horman) [809372 771251]
  - [net] ipv4: Constrain UFO fragment sizes to multiples of 8 bytes (Jiri Benc) [809104 797731]
  - [net] ipv4: Don't use ufo handling on later transformed packets (Jiri Benc) [809104 797731]
  - [net] udp: Add UFO to NETIF_F_GSO_SOFTWARE (Jiri Benc) [809104 797731]
  - [fs] nfs: Try using machine credentials for RENEW calls (Sachin Prabhu) [806205 795441]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.15.1.el6]
changelog:
  - [net] SUNRPC: We must not use list_for_each_entry_safe() in rpc_wake_up() (Steve Dickson) [811299 809928]
  - [char] ipmi: Increase KCS timeouts (Matthew Garrett) [806906 803378]
  - [kernel] sched: Fix ancient race in do_exit() (Frantisek Hrbata) [805457 784758]
  - [scsi] sd: Unmap discard alignment needs to be converted to bytes (Mike Snitzer) [810322 805519]
  - [scsi] sd: Fix VPD buffer allocations (Mike Snitzer) [810322 805519]
  - [x86] Ivy Bridge kernel rdrand support (Jay Fenlason) [800268 696442]
  - [scsi] fix system lock up from scsi error flood (Frantisek Hrbata) [809378 800555]
  - [sound] ALSA: pcm midlevel code - add time check for (Jaroslav Kysela) [801329 798984]
  - [pci] Add pcie_hp=nomsi to disable MSI/MSI-X for pciehp driver (hiro muneda) [807426 728852]
  - [sound] ALSA: enable OSS emulation layer for PCM and mixer (Jaroslav Kysela) [812960 657291]
  - [scsi] qla4xxx: Fixed BFS with sendtargets as boot index (Chad Dupuis) [803881 722297]
  - [fs] nfs: Additional readdir cookie loop information (Steve Dickson) [811135 770250]
  - [fs] NFS: Fix spurious readdir cookie loop messages (Steve Dickson) [811135 770250]
  - [x86] powernow-k8: Fix indexing issue (Frank Arnold) [809391 781566]
  - [x86] powernow-k8: Avoid Pstate MSR accesses on systems supporting CPB (Frank Arnold) [809391 781566]
  - [redhat] spec: Add python-perf-debuginfo subpackage (Josh Boyer) [806859 806859]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-213.el6]
changelog:
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in niu.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in myri10ge.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in igb_main.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in cxgb4_main.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in cxgb3_main.c (Neil Horman) [742117]
  - [netdrv] Fixing use of netif_set_real_num_tx_queues in bnx2.c (Neil Horman) [742117]
  - [ppc] kabi: add symbol 'paca' to ppc KABI (Jiri Olsa) [737466]
  - [fs] proc: fix oops on invalid /proc/pid/maps access (Johannes Weiner) [746613] {CVE-2011-3637}
  - [nfs] fix pNFS hang and oops on umounts (Steve Dickson) [746861]
  - [scsi] qla4xxx: export address/port of connection (Mike Christie) [728156]
  - [netdrv] Fix pktgen to not oops on unsupported drivers (Neil Horman) [678794]
  - [kernel] tracing: Update the comm field in the right variable in update_max_tr (Jiri Olsa) [736955]
  - [kernel] kabi: Add missing compat_alloc_user_space symbol to kABI (Jiri Olsa) [747047]
  - [kernel] fix taskstats io infoleak (Jerome Marchand) [716848] {CVE-2011-2494}
  - [x86] ACPI, APEI, HEST: Detect duplicated hardware error source ID (Don Zickus) [737189]
  - [netdrv] Add latest cxgb3 firmware (Neil Horman) [742011]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-214.el6]
changelog:
  - [dm] table: add immutable feature (Mike Snitzer) [747438]
  - [mm] reduce overhead on paravirt functions (Larry Woodman) [743554]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-215.el6]
changelog:
  - [virt] index of virtio disk is not decremented when removed (Mark Wu) [692767]
  - [edac] i7core_edac: Initialize memory name with cpu, channel, bank (Mauro Carvalho Chehab) [712957]
  - [kernel] perf: Optimize event scheduling locking (Steve Best) [744986]
  - [drm] i915: set the right SDVO transcoder for CPT (Adam Jackson) [735122]
  - [scsi] libfc: Prevent race that causes panic during FCoE port destroy (Neil Horman) [735959]
  - [scsi] qla4xxx: Update driver version to 5.02.00-k8 (Mike Christie) [732622]
  - [scsi] qla4xxx: updated device id check for BFS (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed target discovery failed issue (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed active session re-open issue (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed device blocked issue on link up-down (Mike Christie) [732622]
  - [scsi] qla4xxx: Fixed session destroy issue on link up-down (Mike Christie) [732622]
  - [scsi] qla4xxx: Clear DDB map index on the basis of AEN (Mike Christie) [732622]
  - [scsi] qla4xxx: Free Device Database (DDB) reserved by FW (Mike Christie) [732622]
  - [scsi] qla4xxx: Fix getting BIDI CHAP for boot targets (Mike Christie) [732622]
  - [scsi] qla4xxx: Fix exporting boot targets to sysfs (Mike Christie) [732622]
  - [scsi] qla4xxx: Do not add duplicate CHAP entry in FLASH (Mike Christie) [732622]
  - [scsi] qla4xxx: Fix bidirectional CHAP (Mike Christie) [732622]
  - [scsi] qla4xxx: Add new FLT firmware region (Mike Christie) [732622]
  - [scsi] qla4xxx: Update license (Mike Christie) [732622]
  - [scsi] iscsi class: fix vlan configuration (Mike Christie) [732622]
  - [scsi] qla4xxx: fix data alignment and use nl helpers (Mike Christie) [732622]
  - [scsi] iscsi class: fix link local mispelling (Mike Christie) [732622]
  - [scsi] qla4xxx: Added Get ACB support using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Added restore factory defaults support using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: added support to update initiator iscsi port (Mike Christie) [732622]
  - [scsi] scsi_transport_iscsi: Added support to update initiator iscsi port (Mike Christie) [732622]
  - [scsi] qla4xxx: Added vendor specific sysfs attributes (Mike Christie) [732622]
  - [scsi] qla4xxx: Add read/update NVRAM support for 40xx adapters using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Add get ACB state support using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Code cleanup for read/update flash using BSG (Mike Christie) [732622]
  - [scsi] qla4xxx: Added support to update mtu (Mike Christie) [732622]
  - [scsi] scsi_transport_iscsi: Added support to update mtu (Mike Christie) [732622]
  - [scsi] libfc: improve flogi retries to avoid lport stuck (Mike Christie) [745667]
  - [scsi] libfc: avoid exchanges collision during lport reset (Mike Christie) [745667]
  - [scsi] libfc: fix checking FC_TYPE_BLS (Mike Christie) [745667]
  - [scsi] libfc: revert fix deadlock bug in fc_exch_abort_locked (Mike Christie) [745667]
  - [dm] log userspace: Allow for 'log device name' response in CTR msg exchange (Jonathan E Brassow) [746254]
  - [dm] kcopyd: fix job_pool leak (Mike Snitzer) [748441]
  - [netdrv] igb: Fix for Alt MAC Address feature on 82580 and later (Andy Gospodarek) [748503]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-216.el6]
changelog:
  - [scsi] lockless queuecommand dispatch fixup (Rob Evers) [749018]
  - [scsi] iscsi class: export pid of process that created session (Mike Christie) [747696]
  - [scsi] qla4xxx: Autologin persisted target entries (Mike Christie) [747696]
  - [netdrv] iwlagn: enable 11n aggregation without checking traffic load (John Linville) [744361]
  - [s390x] qdio: EQBS retry after CCQ 96 (Hendrik Brueckner) [747578]
  - [s390x] dasd: fix UID readout for z/VM (Hendrik Brueckner) [746000]
  - [x86] PCI: irq and pci_ids patch for Intel Panther Point DeviceIDs (Prarit Bhargava) [747638]
  - [netdrv] Help 6.1 out of tree drivers cope with ABI breakage (Thomas Graf) [746570]
  - [mm] shmem: let shared anonymous be nonlinear again (Larry Woodman) [690129]
  - [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [742091] {CVE-2011-3638}
  - [ipc] mqueue: separate mqueue default value from maximum value (Motohiro Kosaki) [746606]
  - [ipc] mqueue: don't use kmalloc with KMALLOC_MAX_SIZE (Motohiro Kosaki) [746606]
  - [ipc] mqueue: revert bump up DFLT_*MAX (Motohiro Kosaki) [746606]
  - [kernel] ipc/mqueue: Up the hard limit on message queues per namespace (Doug Ledford) [746606]
  - [kernel] ipc/mqueue: update maximums for the mqueue subsystem (Doug Ledford) [746606]
  - [kernel] ipc/mqueue: enforce hard limits (Doug Ledford) [746606]
  - [kernel] ipc/mqueue: switch back to using non-max values on create (Doug Ledford) [746606 746898]
  - [kernel] ipc/mqueue: cleanup definition names and locations (Doug Ledford) [746606]
  - [kernel] Revert "Restore max mqueue message size to its previous RHEL 5 value" (Doug Ledford) [746606]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-217.el6]
changelog:
  - [fs] GFS2: rewrite fallocate code to write blocks directly (Benjamin Marzinski) [750208] {CVE-2011-4098}
  - [netdrv] bnx2x: link fixes for 57810 (Andy Gospodarek) [749421]
  - [netdrv] enic: fix accidental GRO off by default (Stefan Assmann) [749390]
  - [scsi] qla2xxx: Correct inadvertent clearing of RISC_INTR status (Chad Dupuis) [748978]
  - [debug] lockdep: double MAX_LOCKDEP_ENTRIES (Kyle McMartin) [748941]
  - [x86] Add missing KERN_DEBUG to x86 module printk (Prarit Bhargava) [747837]
  - [x86] Update module alternatives message (Prarit Bhargava) [745596]
  - [x86] UV: KABI breakage in uv_blade_info (George Beshers) [745253]
  - [net] vlan: fix panic when handling priority tagged frames (Andy Gospodarek) [714936] {CVE-2011-3593}
  - [scsi] qla4xxx: Autologin persisted target entries update (Mike Christie) [747696]
  - [mm] oom: fix integer overflow of points in oom_badness (Frantisek Hrbata) [741207] {CVE-2011-4097}


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-218.el6]
changelog:
  - [netdrv] benet: remove bogus "unlikely" on vlan check (Ivan Vecera) [736429] {CVE-2011-3347}
  - [netdrv] be2net: non-member vlan pkts not received in promiscous mode (Ivan Vecera) [736429] {CVE-2011-3347}
  - [netdrv] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736429] {CVE-2011-3347}
  - [mm] fix race between mremap and removing migration entry (Andrea Arcangeli) [751084]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-219.el6]
changelog:
  - [kernel] KEYS: Fix a NULL pointer deref in the user-defined key type (David Howells) [751190] {CVE-2011-4110}
  - [scsi] fc class: fix building of Fibre Channel DUP drivers in 6.2 (Mike Christie) [750268]
  - [fs] nfs: don't call __mark_inode_dirty while holding i_lock (Steve Dickson) [747391]
  - [netdrv] vxge: allow rebinding the driver with a different number of SR-IOV VFs (Michal Schmidt) [694742]
  - [netdrv] vxge: fix crash of VF when unloading PF (Michal Schmidt) [694742]
  - [ata] revert libata: remove SCSI host lock (David Milburn) [751426]
  - [crypto] ansi_cprng: enforce key != seed in fips mode (Jarod Wilson) [751198]
  - [net] mac80211: Fix reassociation processing within ESS roaming (John Linville) [750350]
  - [net] nl80211: Allow association to change channels during reassociation (John Linville) [750350]
  - [net] mac80211: let cfg80211 manage auth state (John Linville) [750350]
  - [net] cfg80211: avoid sending spurious deauth to userspace (John Linville) [750350]
  - [net] mac80211: recalculate idle later in MLME (John Linville) [750350]
  - [net] mac80211: avoid spurious deauth frames/messages (John Linville) [750350]
  - [net] cfg80211: Allow reassociation in associated state (John Linville) [750350]
  - [net] cfg80211: remove warning in deauth case (John Linville) [750350]
  - [net] netfilter: fix nf_conntrack refcount leak in l4proto->error() (Thomas Graf) [745472]
  - [scsi] qla2xxx: Remove check for null fcport from host reset handler (Chad Dupuis) [744741]
  - [scsi] qla2xxx: Perform implicit logout during rport tear-down (Chad Dupuis) [744741]
  - [scsi] Revert "qla2xxx: Remove host_lock in queuecommand function" (Chad Dupuis) [744741]
  - [drm] nv50/disp: shutdown display on suspend/hibernate (Ben Skeggs) [740857]
  - [edac] Add sb_edac driver into the Red Hat Building system (Mauro Carvalho Chehab) [647700]
  - [edac] Fix incorrect edac mode reporting in sb_edac (Mauro Carvalho Chehab) [647700]
  - [edac] Add an experimental new driver to support Sandy Bridge CPU's (Mauro Carvalho Chehab) [647700]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-220.el6]
changelog:
  - [drm] i915: fix unmap race condition introduced with VT-d fix (Dave Airlie) [750583]
  - [scsi] iscsi: revert lockless queuecommand dispatch (Rob Evers) [751426]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.1.1.el6]
changelog:
  - [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752379 752380] {CVE-2011-4127}
  - [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752379 752380] {CVE-2011-4127}
  - [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752379 752380] {CVE-2011-4127}
  - [x86] amd: Fix align_va_addr kernel parameter (Frank Arnold) [758028 753237]
  - [md] RAID1: Do not call md_raid1_unplug_device while holding spinlock (Jonathan E Brassow) [755545 752528]
  - [pci] intel-iommu: Default to non-coherent for domains unattached to iommus (Don Dutile) [757671 746484]
  - [x86] initialize min_delta_ns in one_hpet_msi_clockevent() (Prarit Bhargava) [756426 728315]
  - [x86] Update hpet_next_event() (Prarit Bhargava) [756426 728315]
  - [kernel] sched: Use resched IPI to kick off the nohz idle balance (Vivek Goyal) [750459 717179]
  - [drm] i915: enable ring freq scaling, RC6 and graphics turbo on Ivy Bridge (Prarit Bhargava) [758513 752163]
  - [drm] i915: load a ring frequency scaling table (Prarit Bhargava) [758513 752163]
  - [x86] cpufreq: expose a cpufreq_quick_get_max routine (Prarit Bhargava) [758513 752163]
  - [sched] Cleanup/optimize clock updates (Larry Woodman) [751403 750237]
  - [sched] fix skip_clock_update optimization (Larry Woodman) [751403 750237]
  - [block] virtio-blk: Use ida to allocate disk index (Michael S. Tsirkin) [756427 692767]
  - [virt] virtio_blk: Replace cryptic number with the macro (Michael S. Tsirkin) [756427 692767]
  - [kernel] ida: simplified functions for id allocation (Michael S. Tsirkin) [756427 692767]
  - [virt] revert virtio-blk: Use ida to allocate disk index (Aristeu Rozanski) [756427 692767]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.18.1.el6]
changelog:
  - [netdrv] iwlwifi: add option to disable 5Ghz band (Stanislaw Gruszka) [816226 812259]
  - [netdrv] iwlwifi: cancel scan before nulify ctx->vif (Stanislaw Gruszka) [816225 801730]
  - [netdrv] iwlwifi: do not nulify ctx->vif on reset (Stanislaw Gruszka) [816225 801730]
  - [net] mac80211: workaround crash at ieee80211_mgd_probe_ap_send (Stanislaw Gruszka) [814657 808095]
  - [net] bonding: 802.3ad - fix agg_device_up (Veaceslav Falico) [817466 806081]
  - [scsi] st: fix memory leak with 1MB tape I/O (David Milburn) [816271 811703]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.19.1.el6]
changelog:
  - [pci] Fix unbootable HP DL385G6 on 2.6.32-220 by properly disabling pcie aspm (Dave Wysochanski) [819614 769626]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.20.1.el6]
changelog:
  - [vhost] net: fix possible NULL pointer dereference of vq->bufs (Jason Wang) [814286 814288] {CVE-2012-2119}
  - [net] macvtap: validate zerocopy vectors before building skb (Jason Wang) [814286 814288] {CVE-2012-2119}
  - [net] macvtap: set SKBTX_DEV_ZEROCOPY only when skb is built successfully (Jason Wang) [814286 814288] {CVE-2012-2119}
  - [net] macvtap: put zerocopy page when fail to get all requested user pages (Jason Wang) [814286 814288] {CVE-2012-2119}
  - [net] macvtap: fix zerocopy offset calculation when building skb (Jason Wang) [814286 814288] {CVE-2012-2119}
  - [net] bonding: remove entries for master_ip and vlan_ip and query devices instead (Andy Gospodarek) [816197 810299]
  - [virt] KVM: lock slots_lock around device assignment (Alex Williamson) [814154 811653] {CVE-2012-2121}
  - [virt] kvm: unmap pages from the iommu when slots are removed (Alex Williamson) [814154 811653] {CVE-2012-2121}
  - [virt] xenfv: fix hangs when kdumping (Andrew Jones) [812953 811815]
  - [s390x] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810125 808487]
  - [drm] i915: suspend fbdev device around suspend/hibernate (Dave Airlie) [818503 746169]
  - [fs] tmpfs: fix off-by-one in max_blocks checks (Eric Sandeen) [809399 783497]
  - [net] bonding: Allow Bonding driver to disable/enable LRO on slaves (Neil Horman) [818504 772317]
  - [virt] xen-blkfront: conditionally drop name and minor adjustments for emulated scsi devs (Laszlo Ersek) [818505 729586]
  - [virt] xen-blk: plug device number leak on error path in xlblk_init (Laszlo Ersek) [818505 729586]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.21.1.el6]
changelog:
  - [security] fix compile error in commoncap.c (Eric Paris) [806725 806726] {CVE-2012-2123}
  - [security] fcaps: clear the same personality flags as suid when fcaps are used (Eric Paris) [806725 806726] {CVE-2012-2123}
  - [net] rds: fix rds-ping inducing kernel panic (Jay Fenlason) [822757 803936] {CVE-2012-2372}
  - [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816292 814504] {CVE-2012-2136}
  - [virt] kvm: Fix buffer overflow in kvm_set_irq() (Avi Kivity) [816154 816155] {CVE-2012-2137}
  - [drm] integer overflow in drm_mode_dirtyfb_ioctl() (Dave Airlie) [773249 773250] {CVE-2012-0044}
  - [net] netfilter: Fix ip_route_me_harder triggering ip_rt_bug (Jiri Benc) [824429 812108]
  - [net] netfilter/tproxy: do not assign timewait sockets to skb->sk (Jiri Benc) [824429 812108]
  - [virt] xenpv: avoid paravirt __pmd in read_pmd_atomic (Andrew Jones) [823903 822697]
  - [infiniband] mlx4: fix RoCE oops (Doug Ledford) [799946 749059]
  - [mm] read_pmd_atomic: fix pmd_populate SMP race condition (Andrea Arcangeli) [822824 820762] {CVE-2012-2373}
  - [infiniband] mlx4: check return code and bail on error (Doug Ledford) [799946 749059]
  - [infiniband] mlx4: use locking when walking netdev list (Doug Ledford) [799946 749059]
  - [mm] thp: fix pmd_bad() triggering in code paths holding mmap_sem read mode (Andrea Arcangeli) [803808 800328] {CVE-2012-1179}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-220.3.1.el6]
changelog:
  - [kernel] Remove "WARNING: at kernel/sched.c:5915" (Larry Woodman) [768288 766051]
  - [x86] kernel: Fix memory corruption in module load (Prarit Bhargava) [769595 767140]
  - [kernel] Reset clocksource watchdog after sysrq-t (Prarit Bhargava) [755867 742890]
  - [x86] AMD: Make tsc=reliable override boot time stability checks (Prarit Bhargava) [755867 742890]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-211.el6]
changelog:
  - [scsi] libsas: fix warnings when checking sata/stp protocol (David Milburn) [695950]
  - [scsi] libsas: disable scanning lun > 0 on ata devices (David Milburn) [695950]
  - [scsi] libsas: Allow expander T-T attachments (David Milburn) [695950]
  - [usb] xhci: Make xHCI driver endian-safe (Don Zickus) [745967]
  - [infiniband] RDMA/cxgb3: Don't post zero-byte read if endpoint is going away (Neil Horman) [717379]
  - [scsi] isci: atapi support (David Milburn) [743692]
  - [x86] amd: Move BSP code to cpu_dev helper (Larry Woodman) [739456]
  - [x86] Add a BSP cpu_dev helper (Larry Woodman) [739456]
  - [x86] amd: Avoid cache aliasing penalties on AMD family 15h (Larry Woodman) [739456]
  - [net] ipv6: fix NULL dereference in udp6_ufo_fragment() (Jason Wang) [740465]
  - [netdrv] cxgb4: Updating NIC driver firmware (Neil Horman) [717806]
  - [netdrv] cxgb3: Fix NULL pointer dereference in t3_l2t_get (Neil Horman) [729737]
  - [netdrv] bnx2x: remaining fixes from upstream 3.1 (Michal Schmidt) [743917]
  - [netdrv] e1000e: fix WoL on 82578DM and 82567V3 (Andy Gospodarek) [699042]
  - [netdrv] tg3: Use netif_set_real_num_tx_queues() (Jiri Pirko) [740477]
  - [netdrv] bnx2x: critical fixes (Veaceslav Falico) [745211]
  - [netdrv] bonding: properly stop queuing work when requested (Andy Gospodarek) [736904]
  - [netdrv] tg3: negate USE_PHYLIB flag check (Jiri Pirko) [746006]
  - [x86] Add new cpu capabilities to /proc/cpuinfo (Prarit Bhargava) [745799]
  - [kabi] add missing multipath symbols for s390x (Aristeu Rozanski) [714992]
  - [perf] sched: Fix script command documentation (Jiri Olsa) [726589]
  - [pm] hibernate: Fix memory corruption related to swap (Stanislaw Gruszka) [701857]
  - [scsi] hpsa: add heartbeat sysfs host attribute (Tomas Henzl) [730027]
  - [scsi] Revert megaraid_sas: Driver only report tape drive, JBOD and logic drives (Tomas Henzl) [736667]
  - [fs] GFS2: Fix ->page_mkwrite() races (Steven Whitehouse) [725091]
  - [scsi] scsi_transport_fc: Fix deadlock during fc_remove_host (Mike Christie) [714320]
  - [kernel] workqueue: Fix workqueue deadlock during destroy_workqueue (Mike Christie) [714320]
  - [sched] Avoid expensive initial update_cfs_load() (Larry Woodman) [741569 742414]
  - [sched] Simplify update_cfs_shares parameters (Larry Woodman) [741569 742414]
  - [sched] Fix/remove redundant cfs_rq checks (Larry Woodman) [741569 742414]
  - [sched] Fix sign under-flows in wake_affine (Larry Woodman) [741569 742414]
  - [sched] Update effective_load() to use global share weights (Larry Woodman) [741569 742414]
  - [sched] Fix interactivity bug by charging unaccounted run-time on entity re-weight (Larry Woodman) [741569 742414]
  - [sched] Move periodic share updates to entity_tick() (Larry Woodman) [741569 742414]
  - [sched] Fix UP build breakage (Larry Woodman) [741569 742414]
  - [sched] Update tg->shares after cpu.shares write (Larry Woodman) [741569 742414]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-212.el6]
changelog:
  - [net] bridge: fix use after free in __br_deliver() (Amerigo Wang) [730756] {CVE-2011-2942}
  - [scsi] Update lpfc version for 8.3.5.45.4p driver release (Rob Evers) [746668]
  - [scsi] Fix crash when cfg_fcp_eq_count is zero (Rob Evers) [746668]
  - [scsi] Fix kernel crash during boot with SLI4 card installed (Rob Evers) [746668]
  - [scsi] Properly clean up EQ and CQ child lists to prevent kernel crash (Rob Evers) [746668]
  - [kabi] add missing symbols for Emulex be2net driver (Jiri Olsa) [745712]
  - [netdrv] netxen-firmware: Install the 4.0.579 firmware (Kyle McMartin) [741776]
  - [perf] symbols: Treat all memory maps without dso file as loaded (Jiri Olsa) [726582]
  - [debug] increase MAX_STACK_TRACE_ENTRIES (Kyle McMartin) [645777]
  - [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [692709] {CVE-2011-3363}
  - [tpm] Zero buffer after copying to userspace (Jiri Benc) [732633] {CVE-2011-1161 CVE-2011-1162}
  - [pci] intel-iommu: IOTLB hang workaround (Dave Airlie) [728476]
  - [drm] i915: Fix hang on Ironlake mobile GPU with VT-d (Dave Airlie) [728476]
  - [drm] i915: Remove early exit on i915_gpu_idle (Dave Airlie) [728476]
  - [drm] nv50/bios: fixup mpll programming from the init table parser (Ben Skeggs) [744992]
  - [drm] nv50/vram: fix incorrect detection of bank count on newer chipsets (Ben Skeggs) [744992]
  - [drm] radeon: fix llano output setup + memory corruption (Dave Airlie) [747292]
  - [drm] radeon caicos enablement fixes (Dave Airlie) [747291]
  - [pci] Disable SRIOV on powerpc (Prarit Bhargava) [742089]
  - [pci] Add pci=nosriov to disable SRIOV (Prarit Bhargava) [742089]
  - [x86] apic: ack all pending irqs when crashed/on kexec (Takao Indoh) [704142]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-271.el6]
changelog:
  - [scsi] qla2xxx: Update version number to 8.04.00.04.06.3-k (Chad Dupuis) [816331]
  - [scsi] qla2xxx: Properly check for current state after the fabric-login request (Chad Dupuis) [816331]
  - [scsi] qla2xxx: Proper completion to scsi-ml for scsi status task_set_full and busy (Chad Dupuis) [816331]
  - [scsi] qla2xxx: Fix reset time out as qla2xxx not ack to reset request (Chad Dupuis) [816331]
  - [scsi] qla2xxx: Block flash access from application when device is initialized for ISP82xx (Chad Dupuis) [816331]
  - [scsi] qla2xxx: Remove resetting memory during device initialization for ISP82xx (Chad Dupuis) [816331]
  - [scsi] qla2xxx: Proper detection of firmware abort error code for ISP82xx (Chad Dupuis) [816331]
  - [scsi] qla2xxx: Additional corrections for ISP83xx support (Chad Dupuis) [816331]
  - [scsi] bfa: remove tech-preview tainting (Rob Evers) [744301]
  - [input] wacom: add support for Cintiq 24HD (Aristeu Rozanski) [773052]
  - [netdrv] bna: remove tech-preview status (Ivan Vecera) [744302]
  - [net] xfrm: impement kabi work-arounds for alg_trunc_len (Jarod Wilson) [768460]
  - [net] xfrm: Add SHA384 and SHA512 HMAC authentication algorithms to XFRM (Jarod Wilson) [768460]
  - [net] xfrm: Use the user specified truncation length in ESP and AH (Jarod Wilson) [768460]
  - [net] xfrm: Store aalg in xfrm_state with a user specified truncation length (Jarod Wilson) [768460]
  - [net] xfrm: Define new XFRM netlink auth attribute with specified truncation bits (Jarod Wilson) [768460]
  - [scsi] bxn2fc: Bumped version to 1.0.11 (Mike Christie) [813065]
  - [scsi] bnx2fc: cleanup task management IO when it times out. (Mike Christie) [813065]
  - [scsi] bnx2fc: Decrememnt io ref count when abort times out (Mike Christie) [813065]
  - [scsi] bnx2fc: Allow FLOGI to be retried when receiving bad responses. (Mike Christie) [813065]
  - [netdrv] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [818561]
  - [netdrv] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [818561]
  - [netdrv] be2net: Fix traffic stall INTx mode (Ivan Vecera) [818561]
  - [netdrv] be2net: Fix FW download in Lancer (Ivan Vecera) [818561]
  - [netdrv] be2net: enable RSS for ipv6 pkts (Ivan Vecera) [818561]
  - [s390] af_iucv: allow shutdown for HS transport sockets (Hendrik Brueckner) [815273]
  - [infiniband] cxgb4: handle wake up waiters and add check for invalid endpoint (Steve Best) [811023]
  - [drm] radeon: deal with errors from framebuffer init path (Dave Airlie) [736376]
  - [fs] proc: restore "huge" tag for hugetlb vmas in numa_maps (Larry Woodman) [818746]
  - [fs] proc: teach /proc/$pid/numa_maps about transparent hugepages (Larry Woodman) [818746]
  - [fs] proc: break out numa_maps gather_pte_stats() checks (Larry Woodman) [818746]
  - [fs] proc: make /proc/$pid/numa_maps gather_stats() take variable page size (Larry Woodman) [818746]
  - [fs] proc: allocate storage for numa_maps statistics once (Larry Woodman) [818746]
  - [fs] proc: make struct proc_maps_private truly private (Larry Woodman) [818746]
  - [fs] proc: move show_numa_map() to fs/proc/task_mmu.c (Larry Woodman) [818746]
  - [mm] mempolicy: declare mpol_to_str() when CONFIG_TMPFS=n (Larry Woodman) [818746]
  - [mm] mempolicy: remove check_huge_range() (Larry Woodman) [818746]
  - [mm] mempolicy: make gather_stats() type-safe and remove forward declaration (Larry Woodman) [818746]
  - [mm] mempolicy: remove MPOL_MF_STATS (Larry Woodman) [818746]
  - [mm] mempolicy: use walk_page_range() instead of custom page table walking code (Larry Woodman) [818746]
  - [mm] mempolicy: export get_vma_policy() (Larry Woodman) [818746]
  - [block] mtip32xx: fix missing mtip32xx.ko in installer initrd (Shyam Iyer) [819947]
  - [input] wacom: add LED support for Cintiq 24HD (Aristeu Rozanski) [808315]
  - [input] wacom: make LED status readable through sysfs (Aristeu Rozanski) [808315]
  - [input] wacom: add LED support for Cintiq 21ux2 (Aristeu Rozanski) [808315]
  - [input] wacom: add interface to control LEDs in Wacom tablets (Aristeu Rozanski) [808315]
  - [vhost] net: fix possible NULL pointer dereference of vq->bufs (Jason Wang) [814288] {CVE-2012-2119}
  - [net] macvtap: validate zerocopy vectors before building skb (Jason Wang) [814288] {CVE-2012-2119}
  - [net] macvtap: set SKBTX_DEV_ZEROCOPY only when skb is built successfully (Jason Wang) [814288] {CVE-2012-2119}
  - [net] macvtap: put zerocopy page when fail to get all requested user pages (Jason Wang) [814288] {CVE-2012-2119}
  - [net] macvtap: fix zerocopy offset calculation when building skb (Jason Wang) [814288] {CVE-2012-2119}
  - [netdrv] be2net: Fix EEH error reset before a flash dump completes (Ivan Vecera) [818568]
  - [netdrv] be2net: cancel be_worker during EEH recovery (Ivan Vecera) [818568]
  - [net] bonding: assign slaves their own vlan_groups (Neil Horman) [804232]
  - [net] vlan: Add helper functions to manage vlans on bonds and slaves (Neil Horman) [804232]
  - [virt] kvm: Fix kvm_arch_vcpu_put() crash with vmm_exclusive=0 (Avi Kivity) [704173]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-272.el6]
changelog:
  - [md] bitmap: ensure to load bitmap when creating via sysfs (Jes Sorensen) [821329]
  - [infiniband] mlx4: fix RoCE oops (Doug Ledford) [749059]
  - [x86] setup: Add rh_check_supported() (Prarit Bhargava) [821561]
  - [mm] read_pmd_atomic: fix pmd_populate SMP race condition (Andrea Arcangeli) [820762] {CVE-2012-1179}
  - [drm] i915: add Ivy Bridge GT2 Server entries (Dave Airlie) [817926]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-273.el6]
changelog:
  - [s390] qeth: remove siga retry for HiperSockets devices (Hendrik Brueckner) [817090]
  - [scsi] lpfc: Changed version number to 8.3.5.68.5p (Rob Evers) [821515]
  - [scsi] lpfc: Fixed system crash due to not providing SCSI error-handling host reset handler (Rob Evers) [821515]
  - [scsi] lpfc: Correct handling of SLI4-port XRI resource-provisioning profile change (Rob Evers) [821515]
  - [scsi] lpfc: Fix driver crash during back-to-back ramp events. (Rob Evers) [821515]
  - [scsi] lpfc: Fixed system panic due to midlayer abort and driver complete race on SCSI cmd (Rob Evers) [821515]
  - [scsi] sd: Fix device removal NULL pointer dereference (Rob Evers) [817853]
  - [md] Add del_timer_sync to mddev_suspend, fixes a panic (Jonathan E Brassow) [818371]
  - [virt] virtio_net: invoke softirqs after __napi_schedule (Michael S. Tsirkin) [819435]
  - [virt] virtio_net: do not reschedule rx refill forever (Michael S. Tsirkin) [819435]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-274.el6]
changelog:
  - [net] sunrpc: fix loss of task->tk_status after rpc_delay call in xprt_alloc_slot (Jeff Layton) [822189]
  - [net] sunrpc: suppress page allocation warnings in xprt_alloc_slot() (Jeff Layton) [822189]
  - [net] netfilter: Fix ip_route_me_harder triggering ip_rt_bug (Jiri Benc) [812108]
  - [net] netfilter/tproxy: do not assign timewait sockets to skb->sk (Jiri Benc) [812108]
  - [usb] Don't fail USB3 probe on missing legacy PCI IRQ (Don Zickus) [812254]
  - [usb] Fix handoff when BIOS disables host PCI device (Don Zickus) [812254]
  - [usb] Remove duplicate USB 3.0 hub feature #defines (Don Zickus) [812254]
  - [usb] Set hub depth after USB3 hub reset (Don Zickus) [812254]
  - [usb] xhci: Fix encoding for HS bulk/control NAK rate (Don Zickus) [812254]
  - [usb] Fix issue with USB 3.0 devices after system resume (Don Zickus) [812254]
  - [virt] xenpv: avoid paravirt __pmd in read_pmd_atomic (Andrew Jones) [822697]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-275.el6]
changelog:
  - [net] bridge: fix broadcast flood regression (Jesper Brouer) [817157]
  - [ipc] mqueue: use correct gfp flags in msg_insert (Doug Ledford) [750260]
  - [security] fix compile error in commoncap.c (Eric Paris) [806726] {CVE-2012-2123}
  - [security] fcaps: clear the same personality flags as suid when fcaps are used (Eric Paris) [806726] {CVE-2012-2123}
  - [fs] proc: Fix vmstat crashing with trap divide error (Larry Woodman) [820507]
  - [net] rds: fix rds-ping inducing kernel panic (Jay Fenlason) [803936] {CVE-2012-2372}
  - [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [814504] {CVE-2012-2136}
  - [virt] kvm: Fix buffer overflow in kvm_set_irq() (Avi Kivity) [816155] {CVE-2012-2137}


author: Jarod Wilson <jarod@redhat.com> [2.6.32-277.el6]
changelog:
  - [scsi] be2iscsi: fix dma free size mismatch regression (Mike Christie) [824287]
  - [scsi] libsas: check dev->gone before submitting sata i/o (David Milburn) [824025]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-278.el6]
changelog:
  - [kernel] sysctl: silence warning about missing strategy for file-max at boot time (Jeff Layton) [803431]
  - [net] sunrpc: make new tcp_max_slot_table_entries sysctl use CTL_UNNUMBERED (Jeff Layton) [803431]
  - [drm] i915: set AUD_CONFIG N_value_index for DisplayPort (Dave Airlie) [747890]
  - [scsi] scsi_lib: fix scsi_io_completion's SG_IO error propagation (Mike Snitzer) [827163]
  - [fs] nfs: Fix corrupt read data after short READ from server (Sachin Prabhu) [817738]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.1.1.el6]
changelog:
  - [kernel] Prevent keyctl new_session from causing a panic (David Howells) [833433 827424] {CVE-2012-2745}
  - [net] ipv6/netfilter: fix null pointer dereference in nf_ct_frag6_reasm() (Petr Matousek) [833410 833412] {CVE-2012-2744}
  - [fs] nfs: Map minor mismatch error to protocol not support error (Steve Dickson) [832365 796352]
  - [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate() (Lukas Czerner) [833034 830209]
  - [ata] libata: Add 2GB ATA Flash Disk/ADMA428M to DMA blacklist (Prarit Bhargava) [832363 812904]
  - [netdrv] r8169: fix typo in firmware filenames (Ivan Vecera) [832359 829211]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.2.1.el6]
changelog:
  - [net] bonding: Fix up refcounting issues with bond/vlan config (Neil Horman) [837843 836164]
  - [net] bonding: Always add vid to new slave group (Neil Horman) [837227 834764]
  - [net] bonding: fix regression on vlan module removal (Neil Horman) [837218 823822]
  - [kernel] futex: Fix uninterruptible loop due to gate_area (Jerome Marchand) [836904 834038]
  - [kernel] futex: Fix regression with read only mappings (Jerome Marchand) [836904 834038]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.4.1.el6]
changelog:
  - [fs] proc: stats: Use arch_idle_time for idle and iowait times if available (Steve Best) [841579 841149]
  - [drm] i915: fix integer overflow in i915_gem_execbuffer2() (Jacob Tanenbaum) [824553 824555] {CVE-2012-2383}
  - [usb] core: change the memory limits in usbfs URB submission (Don Zickus) [841667 828271]
  - [usb] core: unify some error pathways in usbfs (Don Zickus) [841667 828271]
  - [netdrv] ixgbe: BIT_APP_UPCHG not set by ixgbe_copy_dcb_cfg() (Andy Gospodarek) [840156 814044]
  - [netdrv] ixgbe: driver fix for link flap (Andy Gospodarek) [840156 814044]
  - [net] bridge: Fix enforcement of multicast hash_max limit (Thomas Graf) [840023 832575]
  - [net] bluetooth: fix sco_conninfo infoleak (Jacob Tanenbaum) [681307 681308] {CVE-2011-1078}
  - [wireless] ipw2200: remove references to CFG80211_WEXT config option (John Linville) [841406 839311]
  - [netdrv] be2net: enable GRO by default (Ivan Vecera) [838821 837230]
  - [virt] kvm/vmx: Fix KVM_SET_SREGS with big real mode segments (Orit Wasserman) [841411 756044]
  - [fs] writeback: merge for_kupdate and !for_kupdate cases (Eric Sandeen) [832360 818172]
  - [fs] writeback: fix queue_io() ordering (Eric Sandeen) [832360 818172]
  - [fs] writeback: don't redirty tail an inode with dirty pages (Eric Sandeen) [832360 818172]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.6.1.el6]
changelog:
  - [net] ipv4: add RCU protection to inet->opt (Jiri Pirko) [844274 829109]
  - [net] tun: allow tap iface in netconsole'd bridge (Jiri Benc) [842984 838025]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.8.1.el6]
changelog:
  - [netdrv] e1000e: prevent oops when adapter is being closed and reset simultaneously (Dean Nelson) [847045 826375]
  - [net] tcp: clear hints to avoid a stale one (Andy Gospodarek) [846832 807704]
  - [md] dm-raid1: Fix mirror crash when discard request is sent and sync is in progress (Mikulas Patocka) [846839 837607]
  - [netdrv] bond_alb: don't disable softirq under bond_alb_xmit (Jiri Pirko) [846216 841987]
  - [x86] ioapic: Fix kdump race with migrating irq (Don Zickus) [812962 783322]
  - [net] rds: set correct msg_namelen (Weiping Pan) [822729 822731] {CVE-2012-3430}
  - [x86] amd_iommu: Fix SRIOV and hotplug devices (Stefan Assmann) [846838 832009]
  - [mm] hugetlb: fix resv_map leak in error path (Motohiro Kosaki) [824350 824351] {CVE-2012-2390}
  - [netdrv] dl2k: fix unfiltered netdev rio_ioctl access by users (Jacob Tanenbaum) [818824 818825] {CVE-2012-2313}
  - [drm] i915: fix integer overflow in i915_gem_do_execbuffer() (Jacob Tanenbaum) [824561 824563] {CVE-2012-2384}
  - [virt] kvm: handle last_boosted_vcpu = 0 case (Rik van Riel) [847042 827031]
  - [md] raid5: Reintroduce locking in handle_stripe() to avoid racing (Jes Sorensen) [846836 828065]
  - [kernel] timekeeping: Fix leapsecond triggered load spike issue (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] hrtimer: Provide clock_was_set_delayed() (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] ntp: Add ntp_lock to replace xtime_locking (Prarit Bhargava) [847366 840950 836803 836748]
  - [fs] proc/stat: fix whitespace damage in use arch_idle_time patch (Steve Best) [841579 841149]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.9.1.el6]
changelog:
  - [md] raid1, raid10: avoid deadlock during resync/recovery. (Dave Wysochanski) [845464 835613]
  - [fs] dlm: fix deadlock between dlm_send and dlm_controld (David Teigland) [849051 824964]
  - [ata] libata: Add space to fix 2GB ATA Flash Disk/ADMA428M blacklist (Prarit Bhargava) [851445 843849]
  - [fs] nfs: nfs_attr_use_mounted_on_file() missing return value (Frantisek Hrbata) [847945 842312]
  - [fs] gfs2: Make gfs2_write_end not dirty the inode with every write (Robert S Peterson) [849551 844814]
  - [net] sched/act_mirred: do not drop packets when fails to mirror it (Jason Wang) [851444 846585]
  - [net] sched: fix race in mirred device removal (Jason Wang) [851444 846585]
  - [net] sched: printk message severity (Jason Wang) [851444 846585]
  - [net] sched: act_mirred cleanup (Jason Wang) [851444 846585]
  - [kernel] sched: Fix signed unsigned comparison in check_preempt_tick() (Frederic Weisbecker) [843102 835797]
  - [netdrv] be2net: reduce gso_max_size setting to account for ethernet header (Ivan Vecera) [842757 834185]
  - [powerpc] Fix wrong divisor in usecs_to_cputime backport (Steve Best) [847727 821374]
  - [fs] procfs: do not confuse jiffies with cputime64_t (Frantisek Hrbata) [847727 821374]
  - [kernel] time: Add nsecs_to_cputime64 interface for asm-generic (Steve Best) [847727 821374]
  - [powerpc] Fix wrong divisor in usecs_to_cputime (Steve Best) [847727 821374]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.10.1.el6]
changelog:
  - [mm] hugetlbfs: close race during teardown of hugetlbfs shared page tables (Rafael Aquini) [857334 856325]
  - [mm] hugetlbfs: Correctly detect if page tables have just been shared (Rafael Aquini) [857334 856325]
  - [kernel] sched: fix divide by zero at {thread_group,task}_times (Stanislaw Gruszka) [856703 843771]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.11.1.el6]
changelog:
  - [net] core: Fix napi_gro_frags vs netpoll path (Amerigo Wang) [857854 845347]
  - [netdrv] benet: disable BH in callers of be_process_mcc() (Amerigo Wang) [857854 845347]
  - [net] bonding: remove IFF_IN_NETPOLL flag (Amerigo Wang) [857854 845347]
  - [mm] fix contig_page_data kABI breakage and related memory corruption (Satoru Moriya) [857012 853007]
  - [net] sctp: backport sctp cache ipv6 source after route lookup (Michele Baldessari) [858284 855759]
  - [net] sctp: backport support of sctp multi-homing ipv6 source address selection (Michele Baldessari) [858284 855759]
  - [net] ipv6: backport RTA_PREFSRC ipv6 source route selection support (Michele Baldessari) [858285 851118]
  - [netdrv] sfc: Fix maximum number of TSO segments and minimum TX queue size (Nikolay Aleksandrov) [845556 845557] {CVE-2012-3412}
  - [s390] zfcp: No automatic port_rescan on events (Hendrik Brueckner) [856316 855131]
  - [fs] xfs: push the AIL from memory reclaim and periodic sync (Dave Chinner) [856686 855139]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.12.1.el6]
changelog:
  - [netdrv] mlx4: check promisc on proper port (Doug Ledford) [858955 854052]
  - [netdrv] mlx4: attach multicast with correct flag (Doug Ledford) [858956 854376]
  - [netdrv] mlx4: remove redundant adding of steering type to gid (Doug Ledford) [859436 854053]
  - [netdrv] Revert: Fix a merge issue (Doug Ledford) [859436 854053]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.13.1.el6]
changelog:
  - [net] sctp: Implement quick failover draft from tsvwg (Neil Horman) [861953 830716]
  - [net] sctp: be more restrictive in transport selection on bundled sacks (Neil Horman) [861953 830716]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.14.1.el6]
changelog:
  - [usb] usbhid: Fix use-after-free in USBHID (James Paradis) [864827 857518]
  - [usb] Add kernel parameter to force io_watchdog for Intel EHCI HCD (James Paradis) [865713 846024]
  - [block] Fix hanging kernel threads in blk_execute_rq() (James Paradis) [865308 855984]
  - [mm] hugetlb: do not use vma_hugecache_offset() for vma_prio_tree_foreach (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [mm] hugepages: fix use after free bug in "quota" handling (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [mm] hugetlb: fix pgoff computation when unmapping page from vma (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [mm] hugetlb: fix ENOSPC returned by handle_mm_fault() (Frederic Weisbecker) [843034 843035] {CVE-2012-2133}
  - [fs] gfs2: Write out dirty inode metadata in delayed deletes (Frantisek Hrbata) [859326 748827]
  - [usb] core: Fix device removal race condition (James Paradis) [864821 849188]
  - [mm] x86_32: fix SHLIB_BASE address typo (Aristeu S. Rozanski F) [804955 804956] {CVE-2012-1568}
  - [hid] hidraw: fix window in hidraw_release (Don Zickus) [841824 839973]
  - [hid] hidraw: protect hidraw_disconnect() better (Don Zickus) [841824 839973]
  - [hid] hidraw: remove excessive _EMERG messages from hidraw (Don Zickus) [841824 839973]
  - [hid] hidraw: fix hidraw_disconnect() (Don Zickus) [841824 839973]
  - [hid] fix a NULL pointer dereference in hidraw_write (Don Zickus) [841824 839973]
  - [hid] fix a NULL pointer dereference in hidraw_ioctl (Don Zickus) [841824 839973]
  - [hid] remove BKL from hidraw (Don Zickus) [841824 839973]
  - [mm] x86_32: randomize SHLIB_BASE (Aristeu Rozanski) [804955 804956] {CVE-2012-1568}
  - [block] fix up use after free in __blkdev_get (Jeff Moyer) [853943 847838]
  - [scsi] remove no longer valid BUG_ON in scsi_lld_busy (Jeff Garzik) [860640 842881]
  - [scsi] fix NULL request_queue in scsi_requeue_run_queue() (Jeff Garzik) [860640 842881]
  - [net] svcrpc: fix BUG() in svc_tcp_clear_pages (J. Bruce Fields) [856106 769045]
  - [scsi] lpfc: Fixed SCSI device reset escalation (Rob Evers) [861390 827566]
  - [scsi] lpfc: Fix abort status (Rob Evers) [861390 827566]
  - [kernel] cgroup: add cgroup_root_mutex (Frederic Weisbecker) [858954 844531]
  - [mm] Hold a file reference in madvise_remove (Jerome Marchand) [849738 849739] {CVE-2012-3511}
  - [base] driver-core: fix device_register race (Rob Evers) [860784 833098]
  - [netdrv] e1000e: drop check of RXCW.CW to eliminate link going up and down (Dean Nelson) [857055 847310]
  - [scsi] be2iscsi: Format the MAC_ADDR with sysfs (Rob Evers) [863147 827594]
  - [usb] usbdevfs: Add a USBDEVFS_GET_CAPABILITIES ioctl (Don Zickus) [841667 828271]
  - [fs] udf: fix retun value on error path in udf_load_logicalvol (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Avoid run away loop when partition table length is corrupted (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [fs] udf: Use 'ret' instead of abusing 'i' in udf_load_logicalvol() (Nikola Pajkovsky) [843142 843143] {CVE-2012-3400}
  - [netdrv] bnx2x: Add remote-fault link detection (Michal Schmidt) [852450 814877]
  - [net] sunrpc: svc_xprt sends on closed socket should stop immediately (J. Bruce Fields) [853257 849702]
  - [mm] Never OOM kill tasks outside of memory cgroup when memory.limit_in_bytes is exceeded by a Transparent Huge Page (Larry Woodman) [860942 811255]
  - [powerpc] pseries: Support lower minimum entitlement for virtual processors (Steve Best) [860165 822651]
  - [usbhid] hiddev: Consolidate device existence checks in hiddev_ioctl (Don Zickus) [841824 839973]
  - [usbhid] hiddev: Fix race between disconnect and hiddev_ioctl (Don Zickus) [841824 839973]
  - [usbhid] hiddev: protect against disconnect/NULL-dereference race (Don Zickus) [841824 839973]
  - [crypto] algapi: Move larval completion into algboss (Herbert Xu) [854476 832135]
  - [fs] xfs: disable xfsaild idle mode (Brian Foster) [860787 813137]
  - [fs] xfs: fix the logspace waiting algorithm (Brian Foster) [860787 813137]
  - [fs] xfs: add AIL pushing tracepoints (Brian Foster) [860787 813137]
  - [fs] xfs: force the log if we encounter pinned buffers in .iop_pushbuf (Brian Foster) [860787 813137]
  - [fs] xfs: do not update xa_last_pushed_lsn for locked items (Brian Foster) [860787 813137]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.17.1.el6]
changelog:
  - [mm] Prevent kernel panic in NUMA related system calls after memory hot-add (Larry Woodman) [875382 870350] {CVE-2012-5517}
  - [md] Don't truncate size at 4TB for RAID0 and Linear (Jes Sorensen) [866470 865637]
  - [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Lukas Czerner) [809690 809691] {CVE-2012-2100}
  - [fs] ext4: fix undefined behavior in ext4_fill_flex_info() (Lukas Czerner) [809690 809691] {CVE-2012-2100}
  - [kernel] sched_rt: Ignore RT queue throttling if idle task has RT policy (Igor Mammedov) [853950 843541]
  - [kernel] sched: Create special class for stop/migrate work (Igor Mammedov) [853950 843541]
  - [net] ipv6: fix overlap check for fragments (Amerigo Wang) [874550 819952] {CVE-2012-4444}
  - [net] ipv6: discard overlapping fragment (Jiri Pirko) [874550 819952] {CVE-2012-4444}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.18.1.el6]
changelog:
  - [scsi] sd: fix crash when UA received on DIF enabled device (Ewan Milne) [876487 865682]
  - [mm] hugetlb: fix non-atomic enqueue of huge page (Rafael Aquini) [876101 869750]
  - [x86] amd_iommu: attach device fails on the last pci device (Don Dutile) [876493 861164]
  - [net] nfs: Fix buffer overflow checking in __nfs4_get_acl_uncached (Frantisek Hrbata) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Fix the acl cache size calculation (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Fix range checking in __nfs4_get_acl_uncached and __nfs4_proc_set_acl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: nfs_getaclargs.acl_len is a size_t (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Don't use private xdr_stream fields in decode_getacl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Fix pointer arithmetic in decode_getacl (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] nfs: Simplify the GETATTR attribute length calculation (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: Add the helper xdr_stream_pos (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: Don't decode beyond the end of the RPC reply message (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: Clean up xdr_set_iov() (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [net] sunrpc: xdr_read_pages needs to clear xdr->page_ptr (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [fs] nfs: Avoid beyond bounds copy while caching ACL (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [fs] nfs: Avoid reading past buffer when calling GETACL (Sachin Prabhu) [811794 822871] {CVE-2012-2375}
  - [scsi] ibmvfc: Fix double completion on abort timeout (Steve Best) [876088 865115]
  - [net] core: allocate skbs on local node (Andy Gospodarek) [876491 843163]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.19.1.el6]
changelog:
  - [drm] i915: don't clobber the pipe param in sanitize_modesetting (Frantisek Hrbata) [876549 857792]
  - [drm] i915: Sanitize BIOS debugging bits from PIPECONF (Frantisek Hrbata) [876549 857792]
  - [net] fix divide by zero in tcp algorithm illinois (Flavio Leitner) [871920 866514] {CVE-2012-4565}
  - [fs] xfs: fix reading of wrapped log data (Dave Chinner) [876499 874322]
  - [x86] mm: fix signedness issue in mmap_rnd() (Petr Matousek) [876496 875036]
  - [net] WARN if struct ip_options was allocated directly by kmalloc (Jiri Pirko) [877950 872799]
  - [fs] block_dev: Fix crash when block device is read and block size is changed at the same time (Frantisek Hrbata) [864826 855906]
  - [mm] tracing: Move include of trace/events/kmem.h out of header into slab.c (Jeff Moyer) [864826 855906]
  - [mm] slab: Move kmalloc tracepoint out of inline code (Jeff Moyer) [864826 855906]
  - [netdrv] bnx2x: organize BDs calculation for stop/resume (Frantisek Hrbata) [874022 819842]
  - [netdrv] bnx2x: fix panic when TX ring is full (Michal Schmidt) [874022 819842]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-279.5.2.el6]
changelog:
  - [kernel] timekeeping: Fix leapsecond triggered load spike issue (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] hrtimer: Provide clock_was_set_delayed() (Prarit Bhargava) [847366 840950 836803 836748]
  - [kernel] ntp: Add ntp_lock to replace xtime_locking (Prarit Bhargava) [847366 840950 836803 836748]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-270.el6]
changelog:
  - [netdrv] be2net: Record receive queue index in skb to aid RPS (Ivan Vecera) [818558]
  - [scsi] bnx2i: Updated version and copyright year (Mike Christie) [816376]
  - [scsi] bnx2i: Added the setting of target can_queue via target_alloc (Mike Christie) [816376]
  - [netdrv] be2net: fix calling __vlan_put_tag() after eth_type_trans() (Ivan Vecera) [815670]
  - [s390] af_iucv: detect down state of HS transport interface (Hendrik Brueckner) [815274]
  - [s390] qeth: Improve OSA Express 4 blkt defaults (Hendrik Brueckner) [808486]
  - [netdrv] ixgbe: Correct Adaptive Interrupt Moderation so that it will change values (Andy Gospodarek) [802837]
  - [mm] x86: Move do_page_fault()'s error path under unlikely() (Motohiro Kosaki) [770376]
  - [mm] x86: make pagefault killable (Motohiro Kosaki) [770376]
  - [mm] x86: Handle mm_fault_error() in kernel space (Motohiro Kosaki) [770376]
  - [mm] introduce wait_on_page_locked_killable() (Motohiro Kosaki) [770376]
  - [mm] oom_kill: remove memcg argument from oom_kill_task() (Motohiro Kosaki) [770376]
  - [mm] oom-kill: remove boost_dying_task_prio() (Motohiro Kosaki) [770376]
  - [net] rds: RDS over QLogic hardware fails to work (Jay Fenlason) [797530]
  - [net] netpoll: fix Allow netpoll_setup/cleanup recursion (Herbert Xu) [816034]
  - [netdrv] atl1c: add workaround for issue of bit INTX-disable for MSI interrupt (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: enlarge L1 response waiting timer (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove PHY polling from atl1c_change_mtu (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Disable L0S when no cable link (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: do MAC-reset when PHY link down (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: cancel task when interface closed (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: refine mac address related code (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove code of closing register writable attribution (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: clear WoL status when reset pcie (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: add PHY link event(up/down) patch (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: refine start/enable code for MAC module (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: add function atl1c_power_saving (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove PHY reset/init for link down event (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: update PHY reset related routine (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove PHY polling from atl1c_open (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: refine SERDES-clock related code (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove PHY contrl in atl1c_reset_pcie (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: refine phy-register read/write function (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove REG_PHY_STATUS (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove MDIO_REG_ADDR_MASK in atl1c_mdio_read/write (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: fix WoL(magic) issue for l2cb 1.1 (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: refine atl1c_pcie_patch (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: refine/update ASPM configuration (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: clear bit MASTER_CTRL_CLK_SEL_DIS in atl1c_pcie_patch (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: refine reg definition of REG_MASTER_CTRL (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: clear PCIE error status in atl1c_reset_pcie (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove dmar_dly_cnt and dmaw_dly_cnt (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: update right threshold for TSO (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: add module parameter for l1c_wait_until_idle (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: threshold for ASPM is changed based on chip capability (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: restore max-read-request-size in Device Conrol Register (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: using fixed TXQ configuration for l2cb and l1c (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove dmaw_block (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: correct wrong definition of REG_DMA_CTRL (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: wrong register used to stop TXQ (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove code related to rxq 1/2/3 (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: split 2 32bit registers of TPD to 4 16bit registers (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove SMB/CMB DMA related code (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove VPD register (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove HDS register (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove multiple-RX-Q code (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: update author contact info & company/driver desciption (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: stop using net_device.{base_addr, irq} (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: set ATL1C_WORK_EVENT_RESET bit correctly (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: dont use highprio tx queue (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: set addr_assign_type if random_ether_addr() used (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: ethernet dev_alloc_skb to netdev_alloc_skb (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Remove alloc_etherdev error messages (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Sweep away N/A fw_version dustbunnies from the .get_drvinfo routine (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: add skb frag size accessors (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: use DMA_x_DEVICE and dma_mapping_error with skb_frag_dma_map (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: convert to SKB paged frag API (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Remove unneeded version.h includes from drivers/net/ (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove interrupt.h inclusion from netdevice.h (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: atl1c_resume() is only used when CONFIG_PM_SLEEP is defined (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Use ethtool's ethtool_cmd_speed API (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Use full 32 bit speed range in ethtool's set_settings (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Fix work event interrupt/task races (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Fix set-but-unused variable (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: fix sparse warnings (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Do not call device_init_wakeup() in atl1c_probe() (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Add missing PCI device ID (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove private #define (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Comment typo fixes for 'descriptor' (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Do not use legacy PCI power management (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Fix hardware type check for enabling OTP CLK (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: make functions static (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Don't check for vlan group before vlan_tx_tag_present (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: avoid some skb->ip_summed initializations (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Remove double test (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: use net_device_stats from struct net_device (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Add AR8151 v2 support and change L0s/L1 routine (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Remove unnecessary returns from void function()s (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove redundant code (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: convert multiple drivers to use netdev_for_each_mc_addr, part3 (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: Add support for Atheros AR8152 and AR8152 (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: use DEFINE_PCI_DEVICE_TABLE() (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: fix assorted typos all over the place (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: use pM to show MAC address (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c:add pci map direction in atl1c_buffer flags (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: remove exceptional & on function name (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: change atl1c_buffer struct and restructure clean atl1c_buffer procedure (Stanislaw Gruszka) [809036]
  - [netdrv] atl1c: duplicate atl1c_get_tpd (Stanislaw Gruszka) [809036]
  - [fs] epoll: clear the tfile_check_list on -ELOOP (Jason Baron) [817140]
  - [fs] epoll: Don't limit non-nested epoll paths (Jason Baron) [817137]
  - [netdrv] tg3: Fix ethtool self tests (John Feeney) [808243 809036]
  - [infiniband] mlx4: check return code and bail on error (Doug Ledford) [749059]
  - [infiniband] mlx4: use locking when walking netdev list (Doug Ledford) [749059]
  - [x86] asm: undo paravirt_patch_template kABI breakage (Rik van Riel) [813682]
  - [fs] cifs: check S_AUTOMOUNT in revalidate (Ian Kent) [786149]
  - [fs] vfs: fix LOOKUP_DIRECTORY not propagated to managed_dentry() (Ian Kent) [786149]
  - [s390x] kdump: Change default action from reipl to stop for on_restart (Hendrik Brueckner) [806152]
  - [s390x] qeth: add missing wake_up call (Hendrik Brueckner) [806151]
  - [s390x] lcs: lcs offline failure (Hendrik Brueckner) [804643]
  - [s390x] ctcmpc: use correct idal word list for ctcmpc (Hendrik Brueckner) [798641]
  - [s390x] dasd: fix fixpoint divide exception in define_extent (Hendrik Brueckner) [798002]
  - [s390x] mm: prevent memory zone interleave (Hendrik Brueckner) [797936]
  - [s390x] qeth: synchronize discipline module loading (Hendrik Brueckner) [795462]
  - [powerpc] perf: Check current->mm in read_user_stack_slow (Steve Best) [804569]
  - [powerpc] perf: Disable pagefaults during callchain stack read (Jiri Olsa) [804569]
  - [tools] selftests: mqueue mq_perf_tests checkpatch fixes (Doug Ledford) [750260]
  - [ipc] mqueue: strengthen checks on mqueue creation fix (Doug Ledford) [750260]
  - [misc] rbtree: backport rb_init_node() (Doug Ledford) [750260]
  - [tools] selftests: add mq_perf_tests (Doug Ledford) [750260]
  - [tools] selftests: add mq_open_tests (Doug Ledford) [750260]
  - [ipc] mqueue: strengthen checks on mqueue creation (Doug Ledford) [750260]
  - [ipc] mqueue: correct mq_attr_ok test (Doug Ledford) [750260]
  - [ipc] mqueue: improve performance of send/recv (Doug Ledford) [750260]
  - [watchdog] iTCO_wdt: default SMI clearing to old behaviour (Prarit Bhargava) [727875 811324]
  - [watchdog] iTCO_wdt: problems with newer hardware due to SMI clearing (Prarit Bhargava) [727875 811324]
  - [sound] alsa: fix Conexant CX20561 audio mute functionality (Jaroslav Kysela) [816569]
  - [s390] kdump: Use 4 GiB for KEXEC_AUTO_THRESHOLD (Hendrik Brueckner) [815599]
  - [net] bonding: verify for NULL when getting bridge from bond_dev->br_port (Veaceslav Falico) [816034 817145]
  - [md] dm-mpath: only try to load the scsi_dh module if the scsi_dh doesn't exist (Mike Snitzer) [788591]
  - [virt] kvm/svm: handle adjustment of negative tsc offsets (Marcelo Tosatti) [817236]
  - [netdrv] be2net: fix programming of VLAN tags for VF (Ivan Vecera) [816013]
  - [scsi] isci: End the RNC resumption wait when the RNC is destroyed. (David Milburn) [809954]
  - [scsi] isci: Fixed RNC bug that lost the suspension or resumption during destroy (David Milburn) [809954]
  - [scsi] isci: Fix RNC AWAIT_SUSPENSION->INVALIDATING transition. (David Milburn) [809954]
  - [scsi] isci: Manage the IREQ_NO_AUTO_FREE_TAG under scic_lock. (David Milburn) [809954]
  - [scsi] isci: Remove obviated host callback list. (David Milburn) [809954]
  - [scsi] isci: Check IDEV_GONE before performing abort path operations. (David Milburn) [809954]
  - [scsi] isci: Restore the ATAPI device RNC management code. (David Milburn) [809954]
  - [scsi] isci: Don't wait for an RNC suspend if it's being destroyed. (David Milburn) [809954]
  - [scsi] isci: Change the phy control and link reset interface for HW reasons. (David Milburn) [809954]
  - [scsi] isci: Added timeouts to RNC suspensions in the abort path. (David Milburn) [809954]
  - [scsi] isci: Add protocol indicator for TMF requests. (David Milburn) [809954]
  - [scsi] isci: Directly control IREQ_ABORT_PATH_ACTIVE when completing TMFs. (David Milburn) [809954]
  - [scsi] isci: Wait for RNC resumption before leaving the abort path. (David Milburn) [809954]
  - [scsi] isci: Fix RNC suspend call for SCI_RESUMING state. (David Milburn) [809954]
  - [scsi] isci: Manage tag releases differently when aborting tasks. (David Milburn) [809954]
  - [scsi] isci: Callbacks to libsas occur under scic_lock and are synchronized. (David Milburn) [809954]
  - [scsi] isci: When in the abort path, defeat other resume calls until done. (David Milburn) [809954]
  - [scsi] isci: Implement waiting for suspend in the abort path. (David Milburn) [809954]
  - [scsi] isci: Make sure all TCs are terminated and cleaned in LUN reset. (David Milburn) [809954]
  - [scsi] isci: Manage the LLHANG timer enable/disable per-device. (David Milburn) [809954]
  - [scsi] isci: Save the suspension hint for upcoming suspensions. (David Milburn) [809954]
  - [scsi] isci: Fix the terminated I/O to not call sas_task_abort(). (David Milburn) [809954]
  - [scsi] isci: Distinguish between remote device suspension cases (David Milburn) [809954]
  - [scsi] isci: Remove isci_device reqs_in_process and dev_node from isci_device. (David Milburn) [809954]
  - [scsi] isci: Only set IDEV_GONE in the device stop path. (David Milburn) [809954]
  - [scsi] isci: All pending TCs are terminated when the RNC is invalidated. (David Milburn) [809954]
  - [scsi] isci: Device access in the error path does not depend on IDEV_GONE. (David Milburn) [809954]
  - [scsi] isci: Add suspension cases for RNC INVALIDATING, POSTING states. (David Milburn) [809954]
  - [scsi] isci: Redesign device suspension, abort, cleanup. (David Milburn) [809954]
  - [scsi] isci: Escalate to I_T_Nexus_Reset when the device is gone. (David Milburn) [809954]
  - [scsi] isci: Remote device stop also suspends the RNC and terminates I/O. (David Milburn) [809954]
  - [scsi] isci: Remote device must be suspended for NCQ cleanup. (David Milburn) [809954]
  - [scsi] isci: Manage device suspensions during TC terminations. (David Milburn) [809954]
  - [scsi] isci: Terminate outstanding TCs on TX/RX RNC suspensions. (David Milburn) [809954]
  - [scsi] isci: Handle all suspending TC completions (David Milburn) [809954]
  - [scsi] isci: Fixed bug in resumption from RNC Tx/Rx suspend state. (David Milburn) [809954]
  - [scsi] isci: Manage the link layer hang detect timer for RNC suspensions. (David Milburn) [809954]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-350.el6]
changelog:
  - [powerpc] perf: power_pmu_start restores incorrect values, breaking frequency events (Jiri Olsa) [880525]
  - [netdrv] mlx4: Allow choosing flow steering mode (Doug Ledford) [885191]
  - [netdrv] mlx4: Adjustments to Flow Steering activation logic for SRIOV (Doug Ledford) [885191]
  - [netdrv] mlx4: Fix wrong error flow in the flow steering wrapper (Doug Ledford) [885191]
  - [netdrv] mlx4: Add QPN enforcement for flow steering rules set by VFs (Doug Ledford) [885191]
  - [infiniband] mlx4: 64-byte CQE/EQE support (Doug Ledford) [885191]
  - [netdrv] mlx4: Fix potential deadlock in mlx4_eq_int() (Doug Ledford) [885191]
  - [infiniband] mlx4: Fix spinlock order to avoid lockdep warnings (Doug Ledford) [885191]
  - [netdrv] mlx4: Removing reserve vectors (Doug Ledford) [885191]
  - [netdrv] mlx4: Fix double-release-range in tx-rings (Doug Ledford) [885191]
  - [infiniband] mlx4: Fix QP1 P_Key processing in the Primary Physical Function (PPF) (Doug Ledford) [885191]
  - [infiniband] mlx4: Synchronize cleanup of MCGs in MCG paravirtualization (Doug Ledford) [885191]
  - [net] bonding: Bonding driver does not consider the gso_max_size setting of slave devices (Ivan Vecera) [883643]
  - [net] tcp: Fix >4GB writes on 64-bit (Daniel Borkmann) [885238]
  - [net] bridge: skip forwarding delay if not using STP (Thomas Graf) [881682]
  - [fs] nfs: Fix open(O_TRUNC) and ftruncate() error handling (Steve Dickson) [884263]
  - [fs] nfsd: add proc file listing kernel's gss_krb5 enctypes (Steve Dickson) [877113]
  - [fs] nfs: add nfs_sb_deactive_async to avoid deadlock (Steve Dickson) [871968]
  - [fs] nfs: fix page dirtying in NFS DIO read codepath (Jeff Layton) [876514]
  - [fs] nfs: don't zero out the rest of the page if we hit the EOF on a DIO READ (Jeff Layton) [876514]
  - [fs] handle null sb in get_super_thawed (Eric Sandeen) [874521]
  - [scsi] Fix race when removing SCSI devices (Tomas Henzl) [820880]
  - [netdrv] be2net: enable GRO by default (Ivan Vecera) [849930]
  - [netdrv] igb: fix compile warning if CONFIG_IGB_PTP is not set (Stefan Assmann) [886519]
  - [netdrv] bnx2x: Prevent link flaps when booting from SAN (Michal Schmidt) [881068]
  - [netdrv] bnx2x: Activate LFA (Michal Schmidt) [881068]
  - [acpi] apei: Fixup common access width firmware bug (Prarit Bhargava) [880465]
  - [acpi] apei: Avoid too much error reporting in runtime (Prarit Bhargava) [880465]
  - [acpi] apei: Fix incorrect APEI register bit width check and usage (Prarit Bhargava) [880465]
  - [virt] vhost: fix length for cross region descriptor (Michael S. Tsirkin) [862265]
  - [fs] nfs: Use FS-Cache invalidation (David Howells) [699931]
  - [fs] cachefiles: Implement invalidation (David Howells) [699931]
  - [fs] vfs: Make more complete truncate operation available to CacheFiles (David Howells) [699931]
  - [fs] fscache: Provide proper invalidation (David Howells) [699931]
  - [fs] fscache: Fix operation state management and accounting (David Howells) [699931]
  - [fs] fscache: Make cookie relinquishment wait for outstanding reads (David Howells) [699931]
  - [fs] cachefiles: Make some debugging statements conditional (David Howells) [699931]
  - [fs] fscache: Check cookie is still correct in __fscache_read_or_alloc_pages() (David Howells) [699931]
  - [fs] fscache: Check that there are no read ops when cookie relinquished (David Howells) [699931]
  - [fs] cachefiles: Downgrade the requirements passed to the allocator (David Howells) [699931]
  - [fs] fscache: Validate page mapping pointer value (David Howells) [699931]
  - [fs] fscache: Fix the marking of cached pages (David Howells) [699931]
  - [fs] fscache: nfs_migrate_page() does not wait for FS-Cache to finish with a page (David Howells) [699931]
  - [fs] fscache: Fix __fscache_uncache_all_inode_pages()'s outer loop (David Howells) [699931]
  - [fs] fscache: Add a helper to bulk uncache pages on an inode (David Howells) [699931]
  - [scsi] qla2xxx: Ramp down queue depth for attached SCSI devices when driver resources are low (Chad Dupuis) [829739]
  - [scsi] qla2xxx: Determine the number of outstanding commands based on available resources (Chad Dupuis) [829739]
  - [s390] zfcp: return early from slave_destroy if slave_alloc returned early (Hendrik Brueckner) [878372]
  - [scsi] fcoe: fix fcoe enable on link toggle while it is still disabled (Neil Horman) [875271]
  - [scsi] Log thin provisioning threshold event (Ewan Milne) [847998]
  - [netdrv] qlge: NETIF_F_GRO needs to be part of hw_features instead of features (John Green) [849749]
  - [s390] qeth: set new mac even if old mac is gone (Hendrik Brueckner) [883458]
  - [s390] qeth: Fix IPA_CMD_QIPASSIST return code handling (Hendrik Brueckner) [882792]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-351.el6]
changelog:
  - [kernel] ptrace-utrace: fix PTRACE_GETEVENTMSG(pid) in sub-namespace (Oleg Nesterov) [782330]
  - [scsi] mpt2sas: fix for driver fails EEH recovery from injected pci bus error (Tomas Henzl) [829149]
  - [mm] memcontrol: propagate LRU accounting state when splitting THP (Johannes Weiner) [881714]
  - [net] sctp: proc: protect bind_addr->address_list accesses with rcu_read_lock() (Thomas Graf) [706038]
  - [net] sctp: Add RCU protection to assoc->transport_addr_list (Thomas Graf) [706038]
  - [s390] zfcp: Adapt to new FC_PORTSPEED semantics (Hendrik Brueckner) [855128]
  - [virt] virtio_net: allow to change mac when iface is running (Jiri Pirko) [882868]
  - [virt] kvm: Minimal hyper-v support (Vadim Rozenfeld) [871350]
  - [fs] gfs2: Journal DLM lock has wrong label (Steven Whitehouse) [884822]
  - [mm] huge_memory: fix typo in transparent_hugepage sysfs symlink (Jeremy Eder) [887308]
  - [mm] ksm: numa awareness sysfs knob (Petr Holasek) [743643]
  - [fs] btrfs: handle IS_ERR(inode) in btrfs_lookup() (Zach Brown) [870944]
  - [kernel] sched: Add irq_{enter,exit}() to scheduler_ipi() (Stanislaw Gruszka) [836964]
  - [kernel] panic: fix a possible deadlock in panic() (Tatsuya Kitamura) [871939]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-352.el6]
changelog:
  - [md] raid10: Do not call md_raid10_unplug_device while holding spinlock (Jonathan E Brassow) [886658]
  - [md] dm-thin: commit before gathering status (Mike Snitzer) [882426]
  - [md] dm-thin: cleanup dead code (Mike Snitzer) [882426]
  - [md] dm-thin: rename cell_defer_except to cell_defer_no_holder (Mike Snitzer) [882426]
  - [md] dm-thin: emit "ignore_discard" in status if discards are disabled (Mike Snitzer) [882426]
  - [md] dm-thin: wake the worker when a discard is prepared (Mike Snitzer) [882426]
  - [md] dm-thin: fix race between simultaneous io and discards to same block (Mike Snitzer) [882426]
  - [md] dm-thin: replace calls to cell_release_singleton with cell_defer_except (Mike Snitzer) [882426]
  - [mm] Revert: ksm: numa awareness sysfs knob (Jarod Wilson) [743643]
  - [fs] gfs2: Reset rd_last_alloc when it reaches the end of the rgrp (Robert S Peterson) [882381]
  - [fs] gfs2: Stop looking for free blocks at end of rgrp (Robert S Peterson) [882381]
  - [drm] nouveau: cache ramcfg value for RAM_RESTRICT_ZM_GROUP (Ben Skeggs) [878384]
  - [drm] nouveau: disable use of tesla/fermi copy engines for buffer moves (Ben Skeggs) [878384]
  - [fs] xfs: fix direct IO nested transaction deadlock (Dave Chinner) [876426]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-353.el6]
changelog:
  - [mm] pageattr: prevent PSE and GLOABL leftovers to confuse pmd/pte_present and pmd_huge (Andrea Arcangeli) [878877]
  - [fs] gfs2: Fix FITRIM argument handling (Abhijith Das) [866932]
  - [fs] gfs2: Require user to provide argument for FITRIM (Abhijith Das) [866932]
  - [fs] exec: do not leave bprm->interp on stack (Josh Poimboeuf) [880146] {CVE-2012-4530}
  - [fs] exec: use -ELOOP for max recursion depth (Josh Poimboeuf) [880146] {CVE-2012-4530}
  - [fs] btrfs: close exclusive opens with close_bdev_exclusive() (Zach Brown) [874505]
  - [kernel] sched_rt: Fix hang where umount is stuck in synchronize_sched_expedited (Larry Woodman) [814768]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-354.el6]
changelog:
  - [char] ipmi: add new kernel options to prevent automatic ipmi init (Tony Camuso) [877177]
  - [usb] xhci: New system added for Compliance Mode Patch on SN65LVPE502CP (Don Zickus) [856709]
  - [x86] quirks: Mark Haswell HDMI Audio as unsupported (Prarit Bhargava) [883428]
  - [scsi] bfa: fix crash in bfa_cb_ioim_done when performing failover/failback tests (Vijay Guvva) [878618]
  - [fs] autofs4: Fix sparse warning: context imbalance in autofs4_d_automount() different lock contexts for basic block (Ian Kent) [876795]
  - [fs] jbd, jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [886318]
  - [scsi] qla4xxx: v5.03.00.00.06.04-k2 (Rob Evers) [890727]
  - [scsi] qla4xxx: Correct the validation to check in get_sys_info mailbox (Rob Evers) [890727]
  - [scsi] qla4xxx: Pass correct function param to qla4_8xxx_rd_direct (Rob Evers) [890727]
  - [scsi] qla4xxx: v5.03.00.00.06.04-k1 (Chad Dupuis) [878048]
  - [scsi] qla4xxx: update copyrights in LICENSE.qla4xxx (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Disable generating pause frames for ISP83XX (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Fix double clearing of risc_intr for ISP83XX (Chad Dupuis) [878048]
  - [scsi] qla4xxx: IDC implementation for Loopback (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Fix panic while rmmod (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Fail probe_adapter if IRQ allocation fails (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Prevent MSI/MSI-X falling back to INTx for ISP82XX (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Update idc reg in case of PCI AER (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Fix double IDC locking in qla4_8xxx_error_recovery (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Clear interrupt while unloading driver for ISP83XX (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Print correct IDC version (Chad Dupuis) [878048]
  - [scsi] qla4xxx: Added new mbox cmd to pass driver version to FW (Chad Dupuis) [878048]
  - [scsi] qla4xxx: fix various printk and comment typos (Chad Dupuis) [878048]
  - [fs] autofs4: use simple_empty() for empty directory check (Ian Kent) [876795]
  - [fs] autofs4: dont clear DCACHE_NEED_AUTOMOUNT on rootless mount (Ian Kent) [876795]
  - [fs] gfs2: Fix race in gfs2_rs_alloc (Abhijith Das) [878476]
  - [fs] xfs: fix broken error handling in xfs_vm_writepage (Dave Chinner) [874539]
  - [drm] radeon: force rn50 chip to always report connected on analog output (Jerome Glisse) [892723]
  - [sound] alsa: add support for Teradici 2200 host card audio (Jaroslav Kysela) [890581]
  - [md] dm-raid: Fix RAID10's check for sufficient redundancy (Jonathan E Brassow) [889358]
  - [scsi] hpsa: update version number to 3.2.0 (Tomas Henzl) [891935]
  - [netdrv] cxgb4: Initialize data structures before using (Steve Best) [885756]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-355.el6]
changelog:
  - [netdrv] qlge: remove NETIF_F_TSO6 flag (Amerigo Wang) [891839]
  - [fs] ext3: Remove BKL from ext3_put_super() and ext3_remount() (Carlos Maiolino) [885945]
  - [lib] switch the protection of percpu_counter list to spinlock (Carlos Maiolino) [885945]
  - [virt] hv: Add Hyper-V balloon driver (Jason Wang) [885572]
  - [mm] export a function to get vm committed memory (Jason Wang) [885572]
  - [drm] nouveau: extend prevent display switching issues by disabling pageflip (Ben Skeggs) [853226]
  - [netdrv] mlx4: Fix advertisement of wrong PF context behaviour (Alex Williamson) [894060]


author: Jarod Wilson <jarod@redhat.com> [2.6.32-356.el6]
changelog:
  - [char] ipmi: use a tasklet for handling received messages (Prarit Bhargava) [890160]
  - [char] ipmi: handle run_to_completion properly in deliver_recv_msg() (Prarit Bhargava) [890160]
  - [usb] xhci: Reset reserved command ring TRBs on cleanup (Don Zickus) [843520]
  - [usb] xhci: handle command after aborting the command ring (Don Zickus) [874541]
  - [usb] xhci: cancel command after command timeout (Don Zickus) [874541]
  - [usb] xhci: add aborting command ring function (Don Zickus) [874541]
  - [usb] xhci: add cmd_ring_state (Don Zickus) [874541]
  - [usb] xhci: Fix Null pointer dereferencing with non-DMI systems (Don Zickus) [874542]
  - [usb] xhci: Intel Panther Point BEI quirk (Don Zickus) [874542]
  - [usb] xhci: Increase XHCI suspend timeout to 16ms (Don Zickus) [874542]
  - [powerpc] Revert: pseries/iommu: remove default window before attempting DDW manipulation (Steve Best) [890454]
  - [serial] 8250_pnp: add Intermec CV60 touchscreen device (Mauro Carvalho Chehab) [894445]
  - [char] ipmi: apply missing hunk from upstream commit 2407d77a (Tony Camuso) [882787]
  - [acpi] Fix broken kernel build if CONFIG_ACPI_DEBUG is enabled (Lenny Szubowicz) [891948]
  - [scsi] qla2xxx: Test and clear FCPORT_UPDATE_NEEDED atomically (Chad Dupuis) [854736]
  - [mm] vmalloc: remove guard page from between vmap blocks (Johannes Weiner) [873737]
  - [mm] vmalloc: vmap area cache (Johannes Weiner) [873737]
  - [fs] vfs: prefer EEXIST to EROFS when creating on an RO filesystem (Eric Sandeen) [878091]
  - [scsi] qla2xxx: change queue depth ramp print to debug print (Rob Evers) [893113]
  - [fs] nfs: Fix umount when filelayout DS is also the MDS (Steve Dickson) [895194]
  - [fs] nfs/pnfs: add set-clear layoutdriver interface (Steve Dickson) [895194]
  - [fs] nfs: Don't call nfs4_deviceid_purge_client() unless we're NFSv4.1 (Steve Dickson) [895194]
  - [fs] nfs: Wait for session recovery to finish before returning (Steve Dickson) [895176]
  - [mm] compaction: validate pfn range passed to isolate_freepages_block (Johannes Weiner) [889456 890498]
  - [drm] nouveau: ensure legacy vga is re-enabled during POST (Ben Skeggs) [625441]
  - [netdrv] be2net: Remove stops to further access to BE NIC on UE bits (Ivan Vecera) [894344]
  - [virt] kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (Petr Matousek) [862904] {CVE-2012-4461}


author: Jarod Wilson <jarod@redhat.com> [2.6.32-357.el6]
changelog:
  - [virt] xen: Fix stack corruption in xen_failsafe_callback for 32bit PVOPS guests (Andrew Jones) [896050] {CVE-2013-0190}
  - [block] sg_io: use different default filters for each device class (Paolo Bonzini) [875361] {CVE-2012-4542}
  - [block] sg_io: prepare for adding per-device-type filters (Paolo Bonzini) [875361] {CVE-2012-4542}
  - [virt] virtio-blk: Don't free ida when disk is in use (Asias He) [870344]
  - [netdrv] mlx4: Remove FCS bytes from packet length (Doug Ledford) [893707]
  - [net] netfilter: nf_ct_reasm: fix conntrack reassembly expire code (Amerigo Wang) [726807]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.0.1.el6]
changelog:
  - [kernel] utrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL (Oleg Nesterov) [912073 912074] {CVE-2013-0871}


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.4.1.el6]
changelog:
  - [fs] NLM: Ensure that we resend all pending blocking locks after a reclaim (Steve Dickson) [921150 913704]
  - [fs] xfs: remove log force from xfs_buf_cond_lock() (Brian Foster) [921961 896224]
  - [fs] xfs: recheck buffer pinned status after push trylock failure (Brian Foster) [921961 896224]
  - [fs] nfs: Ensure that we check lock exclusive/shared type against open modes (Dave Wysochanski) [920268 916324]
  - [powerpc] pseries: Fix partition migration hang in stop_topology_update (Steve Best) [921963 910597]
  - [infiniband] qib: correction for faulty sparse warning correction (Jay Fenlason) [922154 901701]
  - [usb] io_ti: Fix NULL dereference in chase_port() (Nikola Pajkovsky) [916198 916200] {CVE-2013-1774}
  - [net] bluetooth: Fix incorrect strncpy() in hidp_setup_hid() (Nikola Pajkovsky) [914690 914691] {CVE-2013-0349}
  - [char] tty: set_termios/set_termiox should not return -EINTR (Oleg Nesterov) [921145 904907]
  - [netdrv] ehea: fix VLAN support (Steve Best) [921535 911359]
  - [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919388 919389] {CVE-2013-1826}
  - [net] dccp: check ccid before NULL poiter dereference (Weiping Pan) [919187 919188] {CVE-2013-1827}
  - [mm] tmpfs: fix use-after-free of mempolicy object (Nikola Pajkovsky) [915714 915715] {CVE-2013-1767}
  - [fs] fuse: set page_descs length in fuse_buffered_write() (Brian Foster) [916957 915135]
  - [fs] vfs: fix pointer dereference validation in d_validate (Carlos Maiolino) [915583 876600]
  - [fs] cifs: after upcalling for krb5 creds, invalidate key rather than revoking it (Niels de Vos) [912452 885899]
  - [fs] cifs: tmp_key_invalidate() should not set key->expiry to 0 (Niels de Vos) [912452 885899]
  - [block] disable discard request merge temporarily (Mike Snitzer) [911475 907844]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.5.1.el6]
changelog:
  - [fs] xfs: use maximum schedule timeout when ail is empty (Brian Foster) [921958 883905]
  - [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_auth() (Thomas Graf) [922428 922429] {CVE-2012-6537}
  - [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922386 922387] {CVE-2012-6546}
  - [net] atm: fix info leak via getsockname() (Thomas Graf) [922386 922387] {CVE-2012-6546}
  - [fs] nls: improve UTF8 -> UTF16 string conversion routine (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
  - [fs] fat: Fix stat->f_namelen (Nikola Pajkovsky) [916118 916119] {CVE-2013-1773}
  - [netdrv] tun: fix ioctl() based info leaks (Thomas Graf) [922350 922351] {CVE-2012-6547}
  - [virt] x86: Add a check to catch Xen emulation of Hyper-V (Andrew Jones) [923204 918239]
  - [fs] cifs: fix expand_dfs_referral (Sachin Prabhu) [923098 902492]
  - [fs] cifs: factor smb_vol allocation out of cifs_setup_volume_info (Sachin Prabhu) [923098 902492]
  - [fs] cifs: have cifs_cleanup_volume_info not take a double pointer (Sachin Prabhu) [923098 902492]
  - [fs] nfs: Dont allow NFS silly-renamed files to be deleted, no signal (Dave Wysochanski) [920266 905095]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.6.1.el6]
changelog:
  - [virt] kvm: accept unaligned MSR_KVM_SYSTEM_TIME writes (Petr Matousek) [917020 917021] {CVE-2013-1796}
  - [char] tty: hold lock across tty buffer finding and buffer filling (Prarit Bhargava) [928686 901780]
  - [net] tcp: fix for zero packets_in_flight was too broad (Thomas Graf) [927309 920794]
  - [net] tcp: frto should not set snd_cwnd to 0 (Thomas Graf) [927309 920794]
  - [net] tcp: fix an infinite loop in tcp_slow_start() (Thomas Graf) [927309 920794]
  - [net] tcp: fix ABC in tcp_slow_start() (Thomas Graf) [927309 920794]
  - [netdrv] ehea: avoid accessing a NULL vgrp (Steve Best) [921535 911359]
  - [net] sunrpc: Get rid of the redundant xprt->shutdown bit field (J. Bruce Fields) [915579 893584]
  - [virt] kvm: do not #GP on unaligned MSR_KVM_SYSTEM_TIME write (Gleb Natapov) [917020 917021] {CVE-2013-1796}
  - [drm] i915: bounds check execbuffer relocation count (Nikola Pajkovsky) [920523 920525] {CVE-2013-0913}
  - [x86] irq: add quirk for broken interrupt remapping on 55XX chipsets (Neil Horman) [911267 887006]
  - [kvm] Convert MSR_KVM_SYSTEM_TIME to use gfn_to_hva_cache functions (Gleb Natapov) [917024 917025] {CVE-2013-1797}
  - [kvm] Fix for buffer overflow in handling of MSR_KVM_SYSTEM_TIME (Gleb Natapov) [917020 917021] {CVE-2013-1796}
  - [kvm] Fix bounds checking in ioapic indirect register reads (Gleb Natapov) [917030 917032] {CVE-2013-1798}
  - [kvm] x86: release kvmclock page on reset (Gleb Natapov) [917024 917025] {CVE-2013-1797}
  - [security] keys: Fix race with concurrent install_user_keyrings() (David Howells) [916681 913258] {CVE-2013-1792}
  - [virt] hv_balloon: Make adjustments to the pressure report (Jason Wang) [909156 902232]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.8.1.el6]
changelog:
  - [fs] raw: don't call set_blocksize when not changing the blocksize (Jeff Moyer) [951406 909482]
  - [x86] Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [952570 876275]
  - [netdrv] ixgbe: Only set gso_type to SKB_GSO_TCPV4 as RSC does not support IPv6 (Michael S. Tsirkin) [927292 908196]
  - [netdrv] bnx2x: set gso_type (Michael S. Tsirkin) [927292 908196]
  - [netdrv] qlcnic: set gso_type (Michael S. Tsirkin) [927292 908196]
  - [netdrv] ixgbe: fix gso type (Michael S. Tsirkin) [927292 908196]
  - [fs] gfs2: Allocate reservation structure before rename and link (Robert S Peterson) [924847 922999]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.9.1.el6]
changelog:
  - [fs] nfs: Fix handling of revoked delegations by setattr (Steve Dickson) [960415 952329]
  - [fs] nfs: Return the delegation if the server returns NFS4ERR_OPENMODE (Steve Dickson) [960415 952329]
  - [fs] nfs: Fix another potential state manager deadlock (Steve Dickson) [960436 950598]
  - [fs] nfs: Fix another open/open_recovery deadlock (Steve Dickson) [960433 916806]
  - [fs] nfs: Hold reference to layout hdr in layoutget (Steve Dickson) [960429 916726]
  - [fs] nfs: add "pnfs_" prefix to get_layout_hdr() and put_layout_hdr() (Steve Dickson) [960429 916726]
  - [fs] nfs: nfs4_open_done first must check that GETATTR decoded a file type (Steve Dickson) [960412 916722]
  - [net] sunrpc: Dont start the retransmission timer when out of socket space (Steve Dickson) [960426 916735]
  - [fs] nfs: Dont use SetPageError in the NFS writeback code (Steve Dickson) [960420 912867]
  - [fs] nfs: Dont decode skipped layoutgets (Steve Dickson) [927294 904025]
  - [fs] nfs: nfs4_proc_layoutget returns void (Steve Dickson) [927294 904025]
  - [fs] nfs: defer release of pages in layoutget (Steve Dickson) [927294 904025]
  - [fs] nfs: Use kcalloc() when allocating arrays (Steve Dickson) [927294 904025]
  - [fs] nfs: Fix an ABBA locking issue with session and state serialisation (Steve Dickson) [960417 912842]
  - [fs] nfs: Fix a race in the pNFS return-on-close code (Steve Dickson) [960417 912842]
  - [fs] nfs: Do not accept delegated opens when a delegation recall is in effect (Steve Dickson) [960417 912842]
  - [fs] nfs: Fix a reboot recovery race when opening a file (Steve Dickson) [952613 908524]
  - [fs] nfs: Ensure delegation recall and byte range lock removal don't conflict (Steve Dickson) [952613 908524]
  - [fs] nfs: Fix up the return values of nfs4_open_delegation_recall (Steve Dickson) [952613 908524]
  - [fs] nfs: Dont lose locks when a server reboots during delegation return (Steve Dickson) [952613 908524]
  - [fs] nfs: Move nfs4_wait_clnt_recover and nfs4_client_recover_expired_lease (Steve Dickson) [952613 908524]
  - [fs] nfs: Add NFSDBG_STATE (Steve Dickson) [952613 908524]
  - [fs] nfs: nfs_inode_return_delegation() should always flush dirty data (Steve Dickson) [952613 908524]
  - [fs] nfs: nfs_client_return_marked_delegations cant flush data (Steve Dickson) [952613 908524]
  - [fs] nfs: Prevent deadlocks between state recovery and file locking (Steve Dickson) [952613 908524]
  - [fs] nfs: Allow the state manager to mark an open_owner as being recovered (Steve Dickson) [952613 908524]
  - [kernel] seqlock: Dont smp_rmb in seqlock reader spin loop (Steve Dickson) [952613 908524]
  - [kernel] seqlock: add 'raw_seqcount_begin()' function (Steve Dickson) [952613 908524]
  - [kernel] seqlock: optimise seqlock (Steve Dickson) [952613 908524]
  - [fs] nfs: don't allow nfs_find_actor to match inodes of the wrong type (Jeff Layton) [921964 913660]
  - [net] sunrpc: Add barriers to ensure read ordering in rpc_wake_up_task_queue_locked (Dave Wysochanski) [956979 840860]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.10.1.el6]
changelog:
  - [scsi] be2iscsi : Fix the NOP-In handling code path (Nikola Pajkovsky) [955504 947550]
  - [scsi] be2iscsi: Fix memory leak in control path of driver (Rob Evers) [955504 947550]
  - [virt] kvm: validate userspace_addr of memslot (Petr Matousek) [950496 950498] {CVE-2013-1943}
  - [virt] kvm: fix copy to user with irq disabled (Michael S. Tsirkin) [949985 906602] {CVE-2013-1935}
  - [net] veth: Dont kfree_skb() after dev_forward_skb() (Jiri Benc) [957712 957713] {CVE-2013-2017}
  - [net] tcp: Reallocate headroom if it would overflow csum_start (Thomas Graf) [954298 896233]
  - [net] tcp: take care of misalignments (Thomas Graf) [954298 896233]
  - [net] skbuff.c cleanup (Thomas Graf) [954298 896233]
  - [idle] intel_idle: Initialize driver_data correctly in ivb_cstates on IVB processor (Prarit Bhargava) [960864 953630]
  - [x86] Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [962482 869736]
  - [mm] enforce mmap_min_addr on x86_64 (Rik van Riel) [961431 790921]
  - [mm] optional next-fit policy for arch_get_unmapped_area (Rik van Riel) [961431 790921]
  - [mm] fix quadratic behaviour in get_unmapped_area_topdown (Rik van Riel) [961431 790921]
  - [scsi] Revert: qla2xxx: Optimize existing port name server query matching (Chad Dupuis) [950529 924804]
  - [scsi] Revert: qla2xxx: Avoid losing any fc ports when loop id's are exhausted (Chad Dupuis) [950529 924804]
  - [fs] defer do_filp_open() access checks to may_open() (Eric Sandeen) [928683 920752]
  - [md] dm thin: bump the target version numbers (Mike Snitzer) [924823 922931]
  - [md] dm-thin: fix discard corruption (Mike Snitzer) [924823 922931]
  - [md] persistent-data: rename node to btree_node (Mike Snitzer) [924823 922931]
  - [md] dm: fix limits initialization when there are no data devices (Mike Snitzer) [923096 908851]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.11.1.el6]
changelog:
  - [kernel] perf: fix perf_swevent_enabled array out-of-bound access (Petr Matousek) [962793 962794] {CVE-2013-2094}


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.12.1.el6]
changelog:
  - [fs] Panic in gfs2_inplace_reserve after fix from BZ#875753 (Robert S Peterson) [924847 922999]
  - [nfs] sunrpc: Prevent an rpc_task wakeup race (Dave Wysochanski) [956979 840860]
  - [nfs] sunrpc: clarify comments on rpc_make_runnable (Dave Wysochanski) [956979 840860]
  - [x86] acpi: Avoid SRAT table checks for Fujitsu Primequest systems (Prarit Bhargava) [973198 966853]
  - [x86] oprofile: Fix crash when unloading module in nmi timer mode (Don Zickus) [972586 828936]
  - [block] propagate proper return codes from blk_get_request callers (Jeff Moyer) [958684 927918]
  - [block] Check the return value from blk_get_request (Jeff Moyer) [958684 927918]
  - [virt] kvm/mmu: fix hashing for TDP and non-paging modes (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Fix free memory accounting race in mmu_alloc_roots() (Marcelo Tosatti) [966432 908751]
  - [virt] kvm/mmu: Don't flush shadow when enabling dirty tracking (Marcelo Tosatti) [966432 908751]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.13.1.el6]
changelog:
  - [wireless] b43: stop format string leaking into error msgs (John Linville) [971387 971389] {CVE-2013-2852}
  - [pci] make sriov work with hotplug remove (Takahiro MUNEDA) [973555 965002]
  - [net] rtnl: fix info leak on RTM_GETLINK request for VF devices (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] dcbnl: fix various netlink info leaks (Flavio Leitner) [923657 923659] {CVE-2013-2634 CVE-2013-2635}
  - [net] bonding: fix enslaving in alb mode when link down (Veaceslav Falico) [969306 965132]
  - [net] tcp: Fix oops from tcp_collapse() when using splice() (Nikola Pajkovsky) [968871 863512] {CVE-2013-2128}
  - [usb] uhci: fix IRQ race during initialization (Dave Young) [968557 915834]
  - [netdrv] e1000e: enable VLAN RX/TX in PROMISC mode (Stefan Assmann) [963564 886420]
  - [netdrv] bnx2x: strip VLAN header in PROMISC mode (Stefan Assmann) [963564 886420]
  - [net] vlan: handle packets with empty vlan_group via VLAN code (Stefan Assmann) [963564 886420]
  - [fs] namei.c: Dont allow to create hardlink for deleted file (Brian Foster) [956296 908158]
  - [fs] gfs2: Reinstate withdraw ack system (Robert S Peterson) [927308 908093]
  - [fs] nfs: open a file descriptor for fsync in nfs4 recovery (J. Bruce Fields) [964046 915479]
  - [net] macvlan: remove bogus check in macvlan_handle_frame() (Jiri Pirko) [962370 952785]
  - [net] macvlan: fix passthru mode race between dev removal and rx path (Jiri Pirko) [962370 952785]
  - [kernel] rcu: Replace list_first_entry_rcu() with list_first_or_null_rcu() (Jiri Pirko) [962370 952785]
  - [net] bluetooth/rfcomm: Fix missing msg_namelen update in rfcomm_sock_recvmsg() (Weiping Pan) [955653 955654] {CVE-2013-3225}
  - [net] bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955603 955604] {CVE-2013-3224}
  - [fs] gfs2: Issue discards in 512b sectors (Robert S Peterson) [927317 922779]
  - [fs] udf: avoid info leak on export (Nikola Pajkovsky) [922354 922355] {CVE-2012-6548}
  - [scsi] lpfc: Fixed deadlock between hbalock and nlp_lock use (Rob Evers) [962368 960717]
  - [kernel] tracing: Fix possible NULL pointer dereferences (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [kernel] tracing: Fix panic when lseek() called on "trace" opened for writing (Weiping Pan) [952212 952213] {CVE-2013-3301}
  - [net] atm: update msg_namelen in vcc_recvmsg() (Nikola Pajkovsky) [955224 955225] {CVE-2013-3222}
  - [x86] apic: Work around boot failure on HP ProLiant DL980 G7 Server systems (Prarit Bhargava) [969326 912963]
  - [x86] apic: Use probe routines to simplify apic selection (Prarit Bhargava) [969326 912963]
  - [x86] x2apic: Simplify apic init in SMP and UP builds (Prarit Bhargava) [969326 912963]
  - [kvm] vmx: provide the vmclear function and a bitmap to support VMCLEAR in kdump (Andrew Jones) [962372 908608]
  - [x86] kexec: VMCLEAR VMCSs loaded on all cpus if necessary (Andrew Jones) [962372 908608]
  - [fs] ext3: Fix format string issues (Nikola Pajkovsky) [920784 920785] {CVE-2013-1848}
  - [kernel] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920505 920506] {CVE-2013-0914}


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.15.1.el6]
changelog:
  - [mm] block: optionally snapshot page contents to provide stable pages during write (Rafael Aquini) [981177 951937]
  - [mm] only enforce stable page writes if the backing device requires it (Rafael Aquini) [981177 951937]
  - [mm] bdi: allow block devices to say that they require stable page writes (Rafael Aquini) [981177 951937]
  - [mm] fix writeback_in_progress() (Rafael Aquini) [981177 951937]
  - [kernel] sched: Do not account bogus utime (Stanislaw Gruszka) [959930 912662]
  - [kernel] sched: Avoid cputime scaling overflow (Stanislaw Gruszka) [959930 912662]
  - [char] n_tty: Remove BUG_ON from n_tty_read() (Stanislaw Gruszka) [982496 848085]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.16.1.el6]
changelog:
  - [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981558 981559]
  - [x86] Revert: Allow greater than 1TB of RAM on AMD x86_64 sytems (Larry Woodman) [982703 970735]
  - [x86] Revert: Prevent panic in init_memory_mapping() when booting more than 1TB on AMD systems (Larry Woodman) [982703 970735]
  - [mm] reinstate the first-fit scheme for arch_get_unmapped_area_topdown() (Rafael Aquini) [982571 980273]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.17.1.el6]
changelog:
  - [net] ipv4: fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980144 979788] {CVE-2013-2224}
  - [net] sctp: Use correct sideffect command in duplicate cookie handling (Daniel Borkmann) [976571 963843] {CVE-2013-2206}
  - [virt] kvm: limit difference between kvmclock updates (Marcelo Tosatti) [979912 952174]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.18.1.el6]
changelog:
  - [x86] perf/x86: Fix offcore_rsp valid mask for SNB/IVB (Nikola Pajkovsky) [971314 971315] {CVE-2013-2146}
  - [net] br: fix schedule while atomic issue in br_features_recompute() (Jiri Pirko) [990464 980876]
  - [scsi] isci: Fix a race condition in the SSP task management path (David Milburn) [990470 978609]
  - [bluetooth] L2CAP - Fix info leak via getsockname() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [bluetooth] HCI - Fix info leak in getsockopt() (Jacob Tanenbaum) [922417 922418] {CVE-2012-6544}
  - [net] tuntap: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [net] af_key: initialize satype in key_notify_policy_flush() (Thomas Graf) [981225 981227] {CVE-2013-2237}
  - [usb] uhci: fix for suspend of virtual HP controller (Gopal) [982697 960026]
  - [usb] uhci: Remove PCI dependencies from uhci-hub (Gopal) [982697 960026]
  - [netdrv] bnx2x: Change MDIO clock settings (Michal Schmidt) [982116 901747]
  - [scsi] st: Take additional queue ref in st_probe (Tomas Henzl) [979293 927988]
  - [kernel] audit: wait_for_auditd() should use TASK_UNINTERRUPTIBLE (Oleg Nesterov) [982472 962976]
  - [kernel] audit: avoid negative sleep durations (Oleg Nesterov) [982472 962976]
  - [fs] ext4/jbd2: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] jbd: dont wait (forever) for stale tid caused by wraparound (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix waiting and sending of a barrier in ext4_sync_file() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Eric Sandeen) [963557 955807]
  - [fs] jbd2: fix sending of data flush on journal commit (Eric Sandeen) [963557 955807]
  - [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [963557 955807]
  - [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [963557 955807]
  - [fs] ext4: Rewrite __jbd2_log_start_commit logic to match upstream (Eric Sandeen) [963557 955807]
  - [net] bridge: Set vlan_features to allow offloads on vlans (Vlad Yasevich) [984524 951458]
  - [virt] virtio-net: initialize vlan_features (Vlad Yasevich) [984524 951458]
  - [mm] swap: avoid read_swap_cache_async() race to deadlock while waiting on discard I/O completion (Rafael Aquini) [977668 827548]
  - [dma] ioat: Fix excessive CPU utilization (John Feeney) [982758 883575]
  - [fs] vfs: revert most of dcache remove d_mounted (Ian Kent) [974597 907512]
  - [fs] xfs: don't free EFIs before the EFDs are committed (Carlos Maiolino) [975578 947582]
  - [fs] xfs: pass shutdown method into xfs_trans_ail_delete_bulk (Carlos Maiolino) [975576 805407]
  - [net] ipv6: bind() use stronger condition for bind_conflict (Flavio Leitner) [989923 917872]
  - [net] tcp: bind() use stronger condition for bind_conflict (Flavio Leitner) [977680 894683]
  - [x86] remove BUG_ON(TS_USEDFPU) in __sanitize_i387_state() (Oleg Nesterov) [956054 920445]
  - [fs] coredump: ensure the fpu state is flushed for proper multi-threaded core dump (Oleg Nesterov) [956054 920445]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.1.1.el6]
changelog:
  - [netdrv] mlx4: Set number of msix vectors under SRIOV mode to firmware defaults (Michal Schmidt) [911663 904726]
  - [netdrv] mlx4: Fix bridged vSwitch configuration for non SRIOV mode (Michal Schmidt) [910998 903644]
  - [net] rtnetlink: Fix IFLA_EXT_MASK definition (regression) (Thomas Graf) [909815 903220]
  - [x86] msr: Add capabilities check (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
  - [x86] msr: Remove incorrect, duplicated code in the MSR driver (Nikola Pajkovsky) [908698 908699] {CVE-2013-0268}
  - [virt] xen: don't assume ds is usable in xen_iret for 32-bit PVOPS (Andrew Jones) [906310 906311] {CVE-2013-0228}
  - [kernel] cputime: Avoid multiplication overflow on utime scaling (Stanislaw Gruszka) [908794 862758]
  - [net] sunrpc: When changing the queue priority, ensure that we change the owner (Steve Dickson) [910370 902965]
  - [net] sunrpc: Ensure we release the socket write lock if the rpc_task exits early (Steve Dickson) [910370 902965]
  - [fs] nfs: Ensure that we free the rpc_task after read and write cleanups are done (Steve Dickson) [910370 902965]
  - [net] sunrpc: Ensure that we free the rpc_task after cleanups are done (Steve Dickson) [910370 902965]
  - [net] sunrpc: Don't allow low priority tasks to pre-empt higher priority ones (Steve Dickson) [910370 902965]
  - [fs] nfs: Add sequence_priviliged_ops for nfs4_proc_sequence() (Steve Dickson) [910370 902965]
  - [fs] nfs: The NFSv4.0 client must send RENEW calls if it holds a delegation (Steve Dickson) [910370 902965]
  - [fs] nfs: nfs4_proc_renew should be declared static (Steve Dickson) [910370 902965]
  - [fs] nfs: nfs4_locku_done must release the sequence id (Steve Dickson) [910370 902965]
  - [fs] nfs: We must release the sequence id when we fail to get a session slot (Steve Dickson) [910370 902965]
  - [fs] nfs: Add debugging messages to NFSv4's CLOSE procedure (Steve Dickson) [910370 902965]
  - [net] sunrpc: Clear the connect flag when socket state is TCP_CLOSE_WAIT (Steve Dickson) [910370 902965]
  - [fs] nfs: cleanup DS stateid error handling (Steve Dickson) [910370 902965]
  - [fs] nfs: handle DS stateid errors (Steve Dickson) [910370 902965]
  - [fs] nfs: Fix potential races in xprt_lock_write_next() (Steve Dickson) [910370 902965]
  - [fs] nfs: Ensure correct locking when accessing the 'lock_states' list (Steve Dickson) [910370 902965]
  - [fs] nfs: Fix the handling of NFS4ERR_SEQ_MISORDERED errors (Steve Dickson) [910370 902965]
  - [netdrv] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [910373 909464]
  - [netdrv] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [910373 909464]
  - [netdrv] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [910373 909464]
  - [fs] gfs2: Get a block reservation before resizing a file (Robert S Peterson) [908398 875753]
  - [net] ipv6: do not create neighbor entries for local delivery (Jiri Pirko) [909159 896020]
  - [net] bonding: check for assigned mac before adopting the slaves mac address (Veaceslav Falico) [908737 905126]
  - [fs] nfs: nfs4_xdr_enc_layout{commit, return} must return status (Steve Dickson) [908733 907227]
  - [fs] set s_type before destroy_super in sget() (Eric Sandeen) [909813 904982]
  - [scsi] ses: Avoid kernel panic when lun 0 is not mapped (Ewan Milne) [908739 886867]
  - [block] avoid divide-by-zero with zero discard granularity (Mike Snitzer) [911000 901705]
  - [block] discard granularity might not be power of 2 (Mike Snitzer) [911000 901705]
  - [netdrv] tg3: Fix crc errors on jumbo frame receive (Ivan Vecera) [909816 895336]
  - [netdrv] igb: set E1000_IMS_TS interrupt bit in igb_irq_enable (Stefan Assmann) [909818 871795]
  - [pci] intel-iommu: Prevent devices with RMRRs from being placed into SI Domain (Tony Camuso) [908744 678451]
  - [scsi] sd: Reshuffle init_sd to avoid crash (Ewan Milne) [911655 888417]
  - [mm] add numa node symlink for cpu devices in sysfs (Neil Horman) [909814 878708]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.19.1.el6]
changelog:
  - [fs] gfs2: Reserve journal space for quota change in do_grow (Robert S Peterson) [988384 976823]
  - [netdrv] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [995458 988460]
  - [fs] nfs4: Fix infinite loop in nfs4_lookup_root (Scott Mayhew) [996014 987426]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.20.1.el6]
changelog:
  - [fs] nfs: Add functionality to allow waiting on all outstanding reads to complete (Dave Wysochanski) [996424 976915]
  - [fs] nfs: Ensure that NFS file unlock waits for readahead to complete (Dave Wysochanski) [996424 976915]
  - [fs] nfs: Convert nfs_get_lock_context to return an ERR_PTR on failure (Dave Wysochanski) [996424 976915]
  - [x86] thermal: Disable power limit notification interrupt (Shyam Iyer) [999328 908990]
  - [x86] thermal: Delete power-limit-notification console messages (Shyam Iyer) [999328 908990]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.21.1.el6]
changelog:
  - [fs] autofs: remove autofs dentry mount check (Ian Kent) [1000314 947275]
  - [net] sctp: Fix list corruption resulting from freeing an association on a list (Jiri Pirko) [1002184 887868]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.22.1.el6]
changelog:
  - [x86] Round the calculated scale factor in set_cyc2ns_scale() (Prarit Bhargava) [1001954 975507]
  - [x86] sched: Fix overflow in cyc2ns_offset (Prarit Bhargava) [1001954 975507]


author: Nikola Pajkovsky <npajkovs@redhat.com> [2.6.32-358.23.1.el6]
changelog:
  - [md] raid1, raid10: use freeze_array in place of raise_barrier in various places (Jes Sorensen) [1003765 997845]
  - [scsi] megaraid_sas: megaraid_sas driver init fails in kdump kernel (Nikola Pajkovsky) [1001963 833299]
  - [char] ipmi: eliminate long delay in ipmi_si on SGI UV2 (Nikola Pajkovsky) [988228 876778]
  - [net] bridge: Add multicast_querier toggle and disable queries by default (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Fix fatal typo in setup of multicast_querier_expired (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Restart queries when last querier expires (Nikola Pajkovsky) [995334 905561]
  - [net] bridge: Add br_multicast_start_querier (Flavio Leitner) [995334 905561]
  - [kernel] Prevent RT process stall due to missing upstream scheduler bug fix (Larry Woodman) [1006932 1002765]
  - [fs] nfs: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (Dave Wysochanski) [1006956 998752]
  - [firmware] efivars: Use correct efi_pstore_info struct when calling pstore_register (Lenny Szubowicz) [993547 867689]
  - [net] bridge: do not call setup_timer() multiple times (Amerigo Wang) [997746 994430]
  - [fs] lockd: protect nlm_blocked list (David Jeffery) [993544 967095]
  - [net] ipv6: call udp_push_pending_frames when uncorking a socket with AF_INET pending data (Jiri Benc) [987649 987651] {CVE-2013-4162}
  - [fs] fuse: readdirplus sanity checks (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus cleanup (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus change attributes once (Niels de Vos) [988708 981741]
  - [fs] fuse: readdirplus fix instantiate (Niels de Vos) [988708 981741]
  - [fs] fuse: fix readdirplus dentry leak (Niels de Vos) [988708 981741]
  - [fs] cifs: fix issue mounting of DFS ROOT when redirecting from one domain controller to the next (Sachin Prabhu) [994866 976535]
  - [fs] nfs: Make nfs_readdir revalidate less often (Scott Mayhew) [994867 976879]
  - [fs] nfs: Make nfs_attribute_cache_expired() non-static (Scott Mayhew) [994867 976879]
  - [fs] nfs: set verifier on existing dentries in nfs_prime_dcache (Scott Mayhew) [994867 976879]
  - [fs] nfs: Allow nfs_updatepage to extend a write under additional circumstances (Scott Mayhew) [987262 983288]
  - [fs] nfs: fix a leak at nfs_lookup_revalidate() (Dave Wysochanski) [987261 975211]
  - [acpi] efivars: If pstore_register fails, free unneeded pstore buffer (Lenny Szubowicz) [993547 867689]
  - [acpi] Eliminate console msg if pstore.backend excludes ERST (Lenny Szubowicz) [993547 867689]
  - [acpi] Return unique error if backend registration excluded by kernel param (Lenny Szubowicz) [993547 867689]
  - [net] bridge: fix some kernel warning in multicast timer (Amerigo Wang) [997745 952012]
  - [net] bridge: send query as soon as leave is received (Amerigo Wang) [997745 952012]
  - [net] bridge: only expire the mdb entry when query is received (Amerigo Wang) [997745 952012]
  - [net] bridge: Replace mp->mglist hlist with a bool (Amerigo Wang) [997745 952012]
  - [mm] fadvise: drain all pagevecs if POSIX_FADV_DONTNEED fails to discard all pages (Larry Woodman) [994140 957821]
  - [net] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1003931 955712]
  - [virt] xen-netfront: reduce gso_max_size to account for max TCP header (Andrew Jones) [1004657 957231]
  - [pps] Fix a use-after free bug when unregistering a source (Jiri Benc) [997916 920155]
  - [scsi] fnic: Fix SGEs limit (Chris Leech) [991346 829506]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-424.el6]
changelog:
  - [block] loop: fix crash when using unassigned loop device (Mike Snitzer) [989795]
  - [fs] xfs: prevent deadlock trying to cover an active log (Dave Chinner) [1014867]
  - [x86] microcode: Fix patch level reporting for AMD family 15h (Prarit Bhargava) [1014401]
  - [hda] alsa: enable switcheroo code in the snd-hda-intel driver (Jaroslav Kysela) [1013993]
  - [x86] reboot: Fix a warning message triggered by stop_other_cpus() (Jerome Marchand) [840710]
  - [kernel] async: Bump up the MAX_THREADS count for the async subsystem (Neil Horman) [1010666]
  - [pci] Calculate right add_size (Myron Stowe) [997672]
  - [netdrv] iwlwifi: pcie: add SKUs for 6000, 6005 and 6235 series (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: pcie: add new SKUs for 7000 & 3160 NIC series (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: enable shadow registers for 7000 (Stanislaw Gruszka) [1013951]
  - [netdrv] iwlwifi: add new 7260 and 3160 series device IDs (Stanislaw Gruszka) [1013951]
  - [netdrv] be2net: pass if_id for v1 and V2 versions of TX_CREATE cmd (Ivan Vecera) [1014360]
  - [netdrv] be2net: call ENABLE_VF cmd for Skyhawk-R too (Ivan Vecera) [1014360]
  - [netdrv] be2net: Fix to prevent Tx stall on SH-R when packet size < 32 (Ivan Vecera) [1014360]
  - [scsi] pm8001: Queue rotation logic for inbound and outbound queues (Rich Bono) [1013771]
  - [scsi] lpfc: Update lpfc version for 8.3.7.21.4p driver release (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed spinlock hang (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed spinlock inversion problem (Rob Evers) [1004841]
  - [scsi] lpfc: Fixed inconsistent spin lock useage (Rob Evers) [1004841]
  - [scsi] qla2xxx: Update version number to 8.05.00.03.06.5-k2 (Chad Dupuis) [912652]
  - [scsi] qla2xxx: Fix request queue null dereference (Chad Dupuis) [912652]
  - [net] tcp: TSQ can use a dynamic limit (Jiri Pirko) [996802]
  - [net] tcp: TSO packets automatic sizing (Jiri Pirko) [996802]
  - [net] tcp: Apply device TSO segment limit earlier (Jiri Pirko) [996802]
  - [net] Allow driver to limit number of GSO segments per skb (Jiri Pirko) [996802]
  - [net] cleanups in RX queue allocation (Ivan Vecera) [1012388]
  - [net] Update kernel-doc for netif_set_real_num_rx_queues() (Ivan Vecera) [1012388]
  - [net] netif_set_real_num_rx_queues may cap num_rx_queues at init time (Ivan Vecera) [1012388]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-425.el6]
changelog:
  - [md] dm-snapshot: fix data corruption (Mikulas Patocka) [974481] {CVE-2013-4299}
  - [watchdog] iTCO_wdt: add platform driver module alias (Neil Horman) [1019497]
  - [hda] alsa: disable 44.1kHz rate for Haswell HDMI/DP audio (Jaroslav Kysela) [831970]
  - [x86] Update UV3 hub revision ID (George Beshers) [1018962]
  - [fs] xfs: Don't reference the EFI after it is freed (Eric Sandeen) [1018469]
  - [security] keys: Fix a race between negating a key and reading the error set (Dave Wysochanski) [890231]
  - [fs] nfsv4: Ensure memory ordering between nfs4_ds_connect and nfs4_fl_prepare_ds (Jeff Layton) [1012439]
  - [fs] nfsv4: nfs4_fl_prepare_ds - fix bugs when the connect attempt fails (Jeff Layton) [1012439]
  - [md] Disable TRIM on RAID5 for RHEL 6.5 (Jes Sorensen) [837097]
  - [md] raid5: BIO_RW_SYNCIO is a bit number, not a bitmask (Jes Sorensen) [837097]
  - [virt] hyperv: framebuffer pci stub (Gerd Hoffmann) [1013335]
  - [netdrv] bnx2x: add missing enum channel_tlvs definitions (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: KR2 disablement fix (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: Specific Active-DAC is not detected on 57810 (Michal Schmidt) [1015137]
  - [netdrv] bnx2x: Generalize KR work-around (Michal Schmidt) [1015137]
  - [usb] usbnet: use ethd name for known ethernet devices (Don Zickus) [1014224]
  - [usb] cdc_ether: use ethd name for known ethernet devices (Don Zickus) [1014224]
  - [mm] Revert "Find_early_table_space based on ranges that are actually being mapped" (Rafael Aquini)
  - [mm] Revert "Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping" (Rafael Aquini)
  - [mm] Revert "Group e820 entries together and add map_individual_e820 boot option" (Rafael Aquini)
  - [net] bridge: update mdb expiration timer upon reports (Vlad Yasevich) [1013816]
  - [net] veth: Remove NETIF_F_HW_VLAN_RX capability (Thomas Graf) [1018158]
  - [net] gre/vxlan: handle 802.1Q inner header properly (Thomas Graf) [997632]
  - [net] disable the new NAPI weight error message for RHEL 6.5 (Michal Schmidt) [1012090]
  - [scsi] sd: Fix parsing of 'temporary ' cache mode prefix (Ewan Milne) [955441]
  - [scsi] sd: fix array cache flushing bug causing performance problems (Ewan Milne) [955441]
  - [scsi] bfa: firmware update to 3.2.1.1 (Rob Evers) [1002770]
  - [netdrv] bna: firmware update to 3.2.1.1 (Ivan Vecera) [1002771]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-426.el6]
changelog:
  - [block] loop: unplug_fn only when backing file is attached (Lukas Czerner) [1022997]
  - [fs] ext4: Remove warning from ext4_da_update_reserve_space() (Lukas Czerner) [1011876]
  - [kernel] async: Revert MAX_THREADS to 256 (Neil Horman) [1021705]
  - [net] ipv6: restrict neighbor entry creation to output flow (Jiri Pirko) [997103]
  - [net] ipv6: udp packets following an UFO enqueued packet need also be handled by UFO (Jiri Pirko) [1011930] {CVE-2013-4387}
  - [net] ipv4: blackhole route should always be recalculated (Herbert Xu) [1010347]
  - [net] unix: revert/fix race in stream sockets with SOCK_PASS* flags (Daniel Borkmann) [1019343]
  - [net] Loosen constraints for recalculating checksum in skb_segment() (Vlad Yasevich) [1020298]
  - [drm] nouveau: fix vblank deadlock (Rob Clark) [1013388]
  - [usb] xhci: refactor EHCI/xHCI port switching (Don Zickus) [970715]
  - [fs] compat_ioctl: VIDEO_SET_SPU_PALETTE missing error check (Phillip Lougher) [949573] {CVE-2013-1928}
  - [fs] vfs: fix d_mountpoint() (Ian Kent) [1011337]
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [999708]
  - [fs] nfs: Remove the 'FIFO' behaviour for nfs41_setup_sequence (Steve Dickson) [1022257]
  - [fs] nfs: Record the OPEN create mode used in the nfs4_opendata structure (Steve Dickson) [1019439]
  - [fs] nfs: Simulate the change attribute (Steve Dickson) [1018653]
  - [scsi] megaraid_sas: Fix synchronization problem between sysPD IO path and AEN path (Tomas Henzl) [1019811]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-427.el6]
changelog:
  - [tools] perf: Add ref-cycles into array of tested events (Jiri Olsa) [968806]
  - [pci] Revert "make SRIOV resources optional" (Myron Stowe) [1022270]
  - [pci] Revert "ability to relocate assigned pci-resources" (Myron Stowe) [1022270]
  - [pci] Revert "honor child buses add_size in hot plug configuration" (Myron Stowe) [1022270]
  - [pci] Revert "make cardbus-bridge resources optional" (Myron Stowe) [1022270]
  - [pci] Revert "code and comments cleanup" (Myron Stowe) [1022270]
  - [pci] Revert "make re-allocation try harder by reassigning ranges higher in the heirarchy" (Myron Stowe) [1022270]
  - [pci] Revert "Calculate right add_size" (Myron Stowe) [1022270]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-428.el6]
changelog:
  - [fs] Revert "vfs: allow umount to handle mountpoints without revalidating them" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: massage umount_lookup_last() a bit to reduce nesting" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: rename user_path_umountat() to user_path_mountpoint_at()" (Rafael Aquini) [1024607]
  - [fs] Revert "vfs: introduce kern_path_mountpoint()" (Rafael Aquini) [1024607]
  - [fs] Revert "autofs4: fix device ioctl mount lookup" (Rafael Aquini) [1024607]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-430.el6]
changelog:
  - [x86] Revert "efi: be more paranoid about available space when creating variables" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efivars: firmware bug workarounds should be in platform code" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Export efi_query_variable_store() for efivars.ko" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Check max_size only if it is non-zero" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Distinguish between "remaining space" and actually used space" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Implement efi_no_storage_paranoia parameter" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "Modify UEFI anti-bricking code" (Rafael Aquini) [1012370 1023173]
  - [x86] Revert "efi: Fix dummy variable buffer allocation" (Rafael Aquini) [1012370 1023173]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.1.1.el6]
changelog:
  - [netdrv] mlx4_en: Check device state when setting coalescing (Amir Vadai) [1032395 975908]
  - [net] ip_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1023490 1023491] {CVE-2013-4470}
  - [net] ip6_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1023490 1023491] {CVE-2013-4470}
  - [net] sunrpc: Fix a data corruption issue when retransmitting RPC calls (Jeff Layton) [1032424 1030046]
  - [fs] gfs2: Implement a rgrp has no extents longer than X scheme (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: Drop inadequate rgrps from the reservation tree (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: If requested is too large, use the largest extent in the rgrp (Robert S Peterson) [1032162 998625]
  - [fs] gfs2: Add allocation parameters structure (Robert S Peterson) [1032162 998625]
  - [fs] nfs: Don't check lock owner compatability unless file is locked - part 2 (Jeff Layton) [1032260 1007039]
  - [fs] nfs: Don't check lock owner compatibility in writes unless file is locked (Jeff Layton) [1032260 1007039]
  - [netdrv] ixgbevf: move API neg to reset path (Andy Gospodarek) [1032168 1019346]
  - [netdrv] ixgbe: fix inconsistent clearing of the multicast table (Andy Gospodarek) [1032170 975248]
  - [mm] Group e820 entries together and add map_individual_e820 boot option (Larry Woodman) [1020518 876275]
  - [mm] Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping (Larry Woodman) [1020518 876275]
  - [mm] Find_early_table_space based on ranges that are actually being mapped (Larry Woodman) [1020518 876275]
  - [fs] nfs: Fix the sync mount option for nfs4 mounts (Scott Mayhew) [1030171 915862]
  - [fs] nfsv4: Missing Chunk of Back Port Patch Causes Hang (Steve Dickson) [1032250 1024006]
  - [fs] xfs: Ensure sync updates the log tail correctly (Dave Chinner) [1032249 1025439]
  - [fs] xfs: only update the last_sync_lsn when a transaction completes (Dave Chinner) [1032249 1025439]
  - [fs] xfs: prevent deadlock trying to cover an active log (Dave Chinner) [1032688 1014867]
  - [kernel] signal: stop info leak via the tkill and the tgkill syscalls (Petr Holasek) [970876 970878] {CVE-2013-2141}
  - [block] rsxx: Disallow discards from being unmapped (Steve Best) [1028278 1023897]
  - [netdrv] brcmsmac: Module alias support missing from backport (John Green) [1029330 1020461]
  - [netdrv] mlx4_en: Fix pages never dma unmapped on rx (Steve Best) [1027343 1023272]
  - [netdrv] mlx4_en: Fix BlueFlame race (Amir Vadai) [1029997 987634]
  - [scsi] lpfc 8.3.42: Fixed failure to allocate SCSI buffer on PPC64 platform for SLI4 devices (Rob Evers) [1030713 1024683]
  - [scsi] Revert: qla2xxx: Ramp down queue depth for attached SCSI devices when driver resources are low. [1032167 995576]
  - [netdrv] tg3: avoid double-freeing of rx data memory (Ivan Vecera) [1032423 1020685]
  - [hda] alsa: Final fix for the Haswell HDMI audio 44.1kHz rate (Jaroslav Kysela) [1032247 1024548]
  - [input] wacom: do not report ABS_MISC on TPC2FG touch device (Aristeu Rozanski) [1032426 1032256]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.1.2.el6]
changelog:
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.3.1.el6]
changelog:
  - [net] don't drop TSO features for NO_CSUM devices (Ivan Vecera) [1037812 1030631]
  - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
  - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.4.1.el6]
changelog:
  - [powerpc] signals: Improved mark VSX not saved with small contexts fix (Seth Jennings) [1044566 1044117]
  - [powerpc] signals: Mark VSX not saved with small contexts (Seth Jennings) [1044566 1044117]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.5.1.el6]
changelog:
  - [net] sctp: fix checksum marking for outgoing packets (Daniel Borkmann) [1046041 1040385]
  - [kernel] ptrace: Cleanup useless header (Aaron Tomlin) [1046043 1036312]
  - [kernel] ptrace: kill BKL in ptrace syscall (Aaron Tomlin) [1046043 1036312]
  - [fs] nfs: Prevent a 3-way deadlock between layoutreturn, open and state recovery (Steve Dickson) [1045094 1034487]
  - [fs] nfs: Ensure that rmdir() waits for sillyrenames to complete (Steve Dickson) [1051395 1034348]
  - [fs] nfs: wait on recovery for async session errors (Steve Dickson) [1051393 1030049]
  - [fs] nfs: Re-use exit code in nfs4_async_handle_error() (Steve Dickson) [1051393 1030049]
  - [fs] nfs: Update list of irrecoverable errors on DELEGRETURN (Steve Dickson) [1051393 1030049]
  - [exec] ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039486 1039487] {CVE-2013-2929}
  - [net] ipv6: router reachability probing (Jiri Benc) [1043779 1029585]
  - [net] ipv6: remove the unnecessary statement in find_match() (Jiri Benc) [1043779 1029585]
  - [net] ipv6: fix route selection if kernel is not compiled with CONFIG_IPV6_ROUTER_PREF (Jiri Benc) [1043779 1029585]
  - [net] ipv6: Fix default route failover when CONFIG_IPV6_ROUTER_PREF=n (Jiri Benc) [1043779 1029585]
  - [net] ipv6: probe routes asynchronous in rt6_probe (Jiri Benc) [1040826 1030094]
  - [net] ndisc: Update neigh->updated with write lock (Jiri Benc) [1040826 1030094]
  - [net] ipv6: prevent fib6_run_gc() contention (Jiri Benc) [1040826 1030094]
  - [net] netfilter: push reasm skb through instead of original frag skbs (Jiri Pirko) [1049590 1011214]
  - [net] ip6_output: fragment outgoing reassembled skb properly (Jiri Pirko) [1049590 1011214]
  - [net] netfilter: nf_conntrack_ipv6: improve fragmentation handling (Jiri Pirko) [1049590 1011214]
  - [net] ipv4: fix path MTU discovery with connection tracking (Jiri Pirko) [1049590 1011214]
  - [net] ipv6: Make IP6CB(skb)->nhoff 16-bit (Jiri Pirko) [1049590 1011214]
  - [edac] Add error decoding support for AMD Fam16h processors (Prarit Bhargava) [1051394 1020290]
  - [netdrv] bnx2x: correct VF-PF channel locking scheme (Michal Schmidt) [1040498 1029203]
  - [netdrv] bnx2x: handle known but unsupported VF messages (Michal Schmidt) [1040498 1029203]
  - [netdrv] bnx2x: Lock DMAE when used by statistic flow (Michal Schmidt) [1040497 1029200]
  - [net] ipv6: fix leaking uninitialized port number of offender sockaddr (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] inet: fix addr_len/msg->msg_namelen assignment in recv_error functions (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] inet: prevent leakage of uninitialized memory to user in recv syscalls (Florian Westphal) [1035882 1035883] {CVE-2013-6405}
  - [net] ipvs: Add boundary check on ioctl arguments (Denys Vlasenko) [1030817 1030818] {CVE-2013-4588}
  - [s390] qeth: avoid buffer overflow in snmp ioctl (Hendrik Brueckner) [1038935 1034266]
  - [md] fix calculation of stacking limits on level change (Jes Sorensen) [1035347 1026864]
  - [ata] ahci: fix turning on LEDs in ahci_start_port() (David Milburn) [1035339 1017105]
  - [ata] libata: implement cross-port EH exclusion (David Milburn) [1035339 1017105]
  - [ata] libata add ap to ata_wait_register and intro ata_msleep (David Milburn) [1035339 1017105]
  - [netdrv] igb: Update link modes display in ethtool (Stefan Assmann) [1032389 1019578]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.6.1.el6]
changelog:
  - [mm] memcg: fix oom schedule_timeout() (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: change memcg_oom_mutex to spinlock (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: fix hierarchical oom locking (Ulrich Obergfell) [1054072 1034237]
  - [mm] memcg: make oom_lock 0 and 1 based rather than counter (Ulrich Obergfell) [1054072 1034237]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.7.1.el6]
changelog:
  - [char] n_tty: Fix unsafe update of available buffer space (Jiri Benc) [1060491 980188]
  - [char] n_tty: Fix stuck throttled driver (Jiri Benc) [1060491 980188]
  - [char] tty: Add safe tty throttle/unthrottle functions (Jiri Benc) [1060491 980188]
  - [char] tty: note race we need to fix (Jiri Benc) [1060491 980188]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.10.1.el6]
changelog:
  - [fs] xfs: xfs_remove deadlocks due to inverted AGF vs AGI lock ordering (Brian Foster) [1067775 1059334]
  - [x86] apic: Map the local apic when parsing the MP table (Prarit Bhargava) [1063507 1061873]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.1.el6]
changelog:
  - [net] netpoll: take rcu_read_lock_bh() in netpoll_send_skb_on_dev() (Florian Westphal) [1063271 1049052]
  - [fs] cifs: sanity check length of data to send before sending (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [fs] cifs: ensure that uncached writes handle unmapped areas correctly (Sachin Prabhu) [1065668 1062590] {CVE-2014-0069}
  - [infiniband] ipoib: Report operstate consistently when brought up without a link (Michal Schmidt) [1064464 995300]
  - [security] selinux: fix broken peer recv check (Paul Moore) [1059991 1043051]
  - [fs] GFS2: Fix slab memory leak in gfs2_bufdata (Robert S Peterson) [1064913 1024024]
  - [fs] GFS2: Fix use-after-free race when calling gfs2_remove_from_ail (Robert S Peterson) [1064913 1024024]
  - [fs] nfs: always make sure page is up-to-date before extending a write to cover the entire page (Scott Mayhew) [1066942 1054493]
  - [fs] xfs: ensure we capture IO errors correctly (Lachlan McIlroy) [1058418 1021325]
  - [mm] get rid of unnecessary pageblock scanning in setup_zone_migrate_reserve (Motohiro Kosaki) [1062113 1043353]
  - [security] selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: look for IPsec labels on both inbound and outbound packets (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute() (Paul Moore) [1055364 1024631]
  - [security] selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output() (Paul Moore) [1055364 1024631]
  - [edac] e752x_edac: Fix pci_dev usage count (Aristeu Rozanski) [1058420 1029530]
  - [s390] mm: handle asce-type exceptions as normal page fault (Hendrik Brueckner) [1057164 1034268]
  - [s390] mm: correct tlb flush on page table upgrade (Hendrik Brueckner) [1057165 1034269]
  - [net] fix memory information leaks in recv protocol handlers (Florian Westphal) [1039868 1039869]
  - [usb] cdc-wdm: fix buffer overflow (Alexander Gordeev) [922000 922001] {CVE-2013-1860}
  - [usb] cdc-wdm: Fix race between autosuspend and reading from the device (Alexander Gordeev) [922000 922001] {CVE-2013-1860}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.11.2.el6]
changelog:
  - [net] sctp: fix sctp_sf_do_5_1D_ce to verify if peer is AUTH capable (Daniel Borkmann) [1070715 1067451] {CVE-2014-0101}
  - [vhost] validate vhost_get_vq_desc return value (Michael S. Tsirkin) [1062579 1058677] {CVE-2014-0055}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.12.1.el6]
changelog:
  - [mm] vmscan: re-introduce the ZONE_RECLAIM_NOSCAN bailout for zone_reclaim() (Rafael Aquini) [1073562 1039534]
  - [mm] vmscan: compaction works against zones, not lruvecs (Johannes Weiner) [1073564 982770]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-431.13.1.el6]
changelog:
  - [fs] dcache: fix cleanup on warning in d_splice_alias (J. Bruce Fields) [1063201 1042731]
  - [net] sctp: fix sctp_connectx abi for ia32 emulation/compat mode (Daniel Borkmann) [1076242 1053547]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.14.1.el6]
changelog:
  - [net] ip_tunnel: (revert old)/fix ecn decapsulation behaviour (Jiri Pirko) [1078011 1059402]
  - [net] ipv6: del unreachable route when an addr is deleted on lo (Vivek Dasgupta) [1078798 1028372]
  - [net] ipv6: add ip6_route_lookup (Vivek Dasgupta) [1078798 1028372]
  - [net] packet: improve socket create/bind latency in some cases (Daniel Borkmann) [1079870 1045150]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.15.1.el6]
changelog:
  - [kernel] sched: Avoid throttle_cfs_rq() racing with period_timer stopping (Seth Jennings) [1083350 844450]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.17.1.el6]
changelog:
  - [scsi] qla2xxx: Fixup looking for a space in the outstanding_cmds array in qla2x00_alloc_iocbs() (Chad Dupuis) [1085660 1070856]
  - [scsi] isci: fix reset timeout handling (David Milburn) [1080600 1040393]
  - [scsi] isci: correct erroneous for_each_isci_host macro (David Milburn) [1074855 1059325]
  - [kernel] sched: Fix small race where child->se.parent, cfs_rq might point to invalid ones (Naoya Horiguchi) [1081907 1032350]
  - [kernel] sched: suppress RCU lockdep splat in task_fork_fair (Naoya Horiguchi) [1081907 1032350]
  - [kernel] sched: add local variable to store task_group() to avoid kernel stall (Naoya Horiguchi) [1081908 1043733]
  - [fs] cifs: mask off top byte in get_rfc1002_length() (Sachin Prabhu) [1085358 1069737]
  - [kernel] Prevent deadlock when post_schedule_rt() results in calling wakeup_kswapd() on multiple CPUs (Larry Woodman) [1086095 1009626]
  - [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033533 1033534] {CVE-2013-6383}
  - [md] dm-thin: fix rcu_read_lock being held in code that can sleep (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: irqsave must always be used with the pool->lock spinlock (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: sort the per thin deferred bios using an rb_tree (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: use per thin device deferred bio lists (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: simplify pool_is_congested (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix dangling bio in process_deferred_bios error path (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: take care to copy the space map root before locking the superblock (Mike Snitzer) [1086007 1060381]
  - [md] dm-transaction-manager: fix corruption due to non-atomic transaction commit (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix refcount decrement below 0 which caused corruption (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix Documentation for held metadata root feature (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix noflush suspend IO queueing (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix deadlock in __requeue_bio_list (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix out of data space handling (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: ensure user takes action to validate data and metadata consistency (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: synchronize the pool mode during suspend (Mike Snitzer) [1086007 1060381]
  - [md] fix Kconfig indentation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: allow metadata space larger than supported to go unused (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix the error path for the thin device constructor (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: avoid metadata commit if a pool's thin devices haven't changed (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix bug in resizing of thin metadata (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix pool feature parsing (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: fix extending the space map (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-common: make sure new space is used during extend (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix set_pool_mode exposed pool operation races (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: eliminate the no_free_space flag (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add error_if_no_space feature (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: requeue bios to DM core if no_free_space and in read-only mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: cleanup and improve no space handling (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: log info when growing the data or metadata device (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: handle metadata failures more consistently (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: factor out check_low_water_mark and use bools (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add mappings to end of prepared_* lists (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: return error from alloc_data_block if pool is not in write mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: use bool rather than unsigned for flags in structures (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: cleanup dm-thin specific references in text (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: limit errors in sm_metadata_new_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix discard support to a previously shared block (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: initialize dm_thin_new_mapping returned by get_next_mapping (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map: disallow decrementing a reference count below zero (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: allow pool in read-only mode to transition to read-write mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: re-establish read-only state when switching to fail mode (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: always fallback the pool mode if commit fails (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: switch to read-only mode if metadata space is exhausted (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: switch to read only mode if a mapping insert fails (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-metadata: return on failure in sm_metadata_new_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map-disk: optimise sm_disk_dec_block (Mike Snitzer) [1086007 1060381]
  - [md] dm-table: print error on preresume failure (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: do not expose non-zero discard limits if discards disabled (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: always return -ENOSPC if no_free_space is set (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: set pool read-only if breaking_sharing fails block allocation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: prefix pool error messages with pool device name (Mike Snitzer) [1086007 1060381]
  - [md] dm-space-map: optimise sm_ll_dec and sm_ll_inc (Mike Snitzer) [1086007 1060381]
  - [md] dm-btree: prefetch child nodes when walking tree for a dm_btree_del (Mike Snitzer) [1086007 1060381]
  - [md] dm-btree: use pop_frame in dm_btree_del to cleanup code (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix stacking of geometry limits (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: add data block size limits to Documentation (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: fix metadata dev resize detection (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: generate event when metadata threshold passed (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-metadata: add space map threshold callback (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: add threshold callback to space map (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: detect metadata device resizing (Mike Snitzer) [1086007 1060381]
  - [md] dm-persistent-data: support space map resizing (Mike Snitzer) [1086007 1060381]
  - [md] dm-thin: refactor data dev resize (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: initialize read-only module parameters (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: submit writes outside lock (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: add recursive IO request BUG_ON (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: prefetch (Mike Snitzer) [1086007 1060381]
  - [md] dm-bufio: fix slow IO latency issue specific to RHEL6 (Mike Snitzer) [1086490 1058528]
  - [netdrv] mlx4_en: Fixed crash when port type is changed (Amir Vadai) [1085658 1059586]
  - [netdrv] vmxnet3: fix netpoll race condition (Neil Horman) [1083175 1073218]
  - [net] netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages (Jiri Pirko) [1077345 1077346] {CVE-2014-2523}
  - [scsi] megaraid_sas: fix a small problem when reading state value from hw (Tomas Henzl) [1078641 1065187]
  - [fs] gfs2: Increase the max number of ACLs (Robert S Peterson) [1078874 1075713]
  - [net] filter: let bpf_tell_extensions return SKF_AD_MAX (Daniel Borkmann) [1079872 960275]
  - [net] introduce SO_BPF_EXTENSIONS (Daniel Borkmann) [1079872 960275]
  - [scsi] scsi_dh: cosmetic change to sizeof() (Ewan Milne) [1075554 1062494]
  - [acpi] thermal: Check for thermal zone requirement (Nigel Croxon) [1075651 1021044]
  - [acpi] thermal: Don't invalidate thermal zone if critical trip point is bad (Nigel Croxon) [1075651 1021044]
  - [mm] flush pages from pagevec of offlined CPU (Naoya Horiguchi) [1078007 1037467]
  - [fs] xfs: deprecate nodelaylog option (Eric Sandeen) [1076056 1055644]
  - [fs] Fix mountpoint reference leakage in linkat (Jeff Layton) [1069848 1059943]
  - [net] sock: Fix release_cb kABI brekage (Thomas Graf) [1066535 1039723]
  - [vhost] fix total length when packets are too short (Michael S. Tsirkin) [1064442 1064444] {CVE-2014-0077}
  - [net] sctp: fix sctp_sf_do_5_1D_ce to verify if peer is AUTH capable (Daniel Borkmann) [1070715 1067451] {CVE-2014-0101}
  - [vhost] validate vhost_get_vq_desc return value (Michael S. Tsirkin) [1062579 1058677] {CVE-2014-0055}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.19.1.el6]
changelog:
  - [kernel] sched: fix cpu_power initialization (Radim Krcmar) [1091826 1065304]
  - [fs] gfs2: Fix uninitialized VFS inode in gfs2_create_inode (Abhijith Das) [1092002 1059808]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.1.el6]
changelog:
  - [net] rtnetlink: Only supply IFLA_VF_PORTS information when RTEXT_FILTER_VF is set (Jiri Pirko) [1092870 1081282]
  - [net] rtnetlink: Warn when interface's information won't fit in our packet (Jiri Pirko) [1092870 1081282]
  - [net] bridge: Correctly receive hw-accelerated vlan traffic (Vlad Yasevich) [1096214 1067722]
  - [net] vlan: Allow accelerated packets to flow through the bridge (Vlad Yasevich) [1096214 1067722]
  - [infiniband] qib: Add missing serdes init sequence (Doug Ledford) [1080104 1005491]
  - [infiniband] qib: Fix txselect regression (Doug Ledford) [1080104 1005491]
  - [netdrv] ixgbevf: fix vlan acceleration (Nikolay Aleksandrov) [1094287 1069028]
  - [security] selinux: Fix kernel BUG on empty security contexts (Paul Moore) [1062502 1064545] {CVE-2014-1874}
  - [netdrv] libertas: potential oops in debugfs (Denys Vlasenko) [1034176 1034177] {CVE-2013-6378}
  - [kernel] cgroup: move put_css_set() after setting CGRP_RELEASABLE bit to fix notify_on_release (Naoya Horiguchi) [1081909 1037465]
  - [kernel] sched: Use exit hook to avoid use-after-free crash (Naoya Horiguchi) [1081914 1032347]
  - [kernel] cgroup: replace list_del() with list_del_init() to avoid panic (Naoya Horiguchi) [1081915 1032343]
  - [x86] turbostat: display C8, C9, C10 residency (Neil Horman) [1096711 1080637]
  - [scsi] lpfc 8.3.44: Fix kernel panics from corrupted ndlp list (Rob Evers) [1086839 1063699]
  - [s390] fix kernel crash due to linkage stack instructions (Hendrik Brueckner) [1067678 1067679] {CVE-2014-2039}
  - [x86] kvm: rate-limit global clock updates (Andrew Jones) [1090750 1072373]
  - [kernel] hrtimers: Move SMP function call to thread context (Mateusz Guzik) [1079869 1073129]
  - [kernel] hrtimers: Support resuming with two or more CPUs online (Mateusz Guzik) [1079869 1073129]
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - [fs] ext4: fix WARN_ON from ext4_releasepage() (Carlos Maiolino) [1063508 1036814]
  - [fs] vfs: fix getname() && do_getname() interaction (Oleg Nesterov) [1075653 1024689]
  - [x86] apic: Make disabled_cpu_apicid static read_mostly, fix typos (Nigel Croxon) [1082622 980621]
  - [x86] kexec: Add disable_cpu_apicid kernel parameter (Nigel Croxon) [1082622 980621]
  - [kvm] x86: use kvm_read/write_guest_virt_system in task switch (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: small cleanups to kvm_task_switch (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: propagate error from kvm_load_segment_descriptor (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: improve save_guest_segment_descriptor (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: introduce kvm_write_guest_virt_system (Paolo Bonzini) [1070296 1018581]
  - [kvm] x86: Fix task switch privilege checks (Paolo Bonzini) [1070296 1018581]
  - [powerpc] Make function that parses RTAS error logs global (Steve Best) [1091424 1028682]
  - [powerpc] pseries: Add RTAS event log v6 definition (Steve Best) [1091424 1028682]
  - [powerpc] pseries: Parse and handle EPOW interrupts (Steve Best) [1091424 1028682]
  - [fs] nfsd: don't try to reuse an expired DRC entry off the list (Jeff Layton) [1088779 1036972]
  - [fs] nfsd: when reusing an existing repcache entry, unhash it first (Jeff Layton) [1088779 1036972]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.2.el6]
changelog:
  - [block] floppy: don't write kernel-only members to FDRAWCMD ioctl output (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [block] floppy: ignore kernel-only members in FDRAWCMD ioctl input (Denys Vlasenko) [1094308 1094310] {CVE-2014-1738 CVE-2014-1737}
  - [fs] vfs: fix autofs/afs/etc magic mountpoint breakage (Frantisek Hrbata) [1094370 1079347] {CVE-2014-0203}
  - [char] n_tty: Fix n_tty_write crash when echoing in raw mode (Aristeu Rozanski) [1094236 1094237] {CVE-2014-0196}


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.20.3.el6]
changelog:
  - [kernel] futex: Make lookup_pi_state more robust (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Always cleanup owner tid in unlock_pi (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: Validate atomic acquisition in futex_lock_pi_atomic() (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [kernel] futex: prevent requeue pi on same futex (Jerome Marchand) [1104516 1104517] {CVE-2014-3153}
  - [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]
  - [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: allow umount to handle mountpoints without revalidating them (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: massage umount_lookup_last() a bit to reduce nesting (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: rename user_path_umountat() to user_path_mountpoint_at() (Ian Kent) [1069630 999708]
  - Revert: [fs] vfs: introduce kern_path_mountpoint() (Ian Kent) [1069630 999708]
  - Revert: [fs] autofs4: fix device ioctl mount lookup (Ian Kent) [1069630 999708]


author: Petr Holasek <pholasek@redhat.com> [2.6.32-431.2.1.el6]
changelog:
  - [netdrv] bonding: Remove redundant VLAN tag insertion logic (Nikolay Aleksandrov) [1039562 1025224]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-422.el6]
changelog:
  - [fs] fuse: drop dentry on failed revalidate (Brian Foster) [924014]
  - [fs] fuse: clean up return in fuse_dentry_revalidate() (Brian Foster) [924014]
  - [fs] fuse: use d_materialise_unique() (Brian Foster) [924014]
  - [mm] Group e820 entries together and add map_individual_e820 boot option (Larry Woodman) [876275]
  - [mm] Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping (Larry Woodman) [876275]
  - [mm] Find_early_table_space based on ranges that are actually being mapped (Larry Woodman) [876275]
  - [hid] pantherlord: heap overflow flaw (Radomir Vrbovsky) [1000435] {CVE-2013-2892}
  - [virt] hv: Correctly support ws2008R2 and earlier (Jason Wang) [1007341]
  - [powerpc] iommu: Use GFP_KERNEL instead of GFP_ATOMIC in iommu_init_table() (Steve Best) [1012666]
  - [powerpc] Add isync to copy_and_flush (Steve Best) [1014475]
  - [block] rsxx: Kernel Panic caused by mapping Discards (Steve Best) [1013728]
  - [kernel] audit: avoid soft lockup due to audit_log_start() incorrect loop termination (Richard Guy Briggs) [990806]
  - [fs] nfsv4: Remove the BUG_ON() from nfs4_get_lease_time_prepare() (Steve Dickson) [1012688]
  - [netdrv] bnx2x: fix loss of VLAN priority information in received TPA-aggregated packets (Michal Schmidt) [1014694]
  - [fs] gfs2: garbage quota usage reported due to uninitialized inode during creation (Abhijith Das) [1008947]
  - [fs] nfs: fix filelayout_commit_call_ops (Scott Mayhew) [1012479]
  - [netdrv] igb: fix driver reload with VF assigned to guest (Stefan Assmann) [985733]
  - [md] Fix bio flags for md raid5 (Jes Sorensen) [837097]
  - [md] Fix bio flags for md raid10 (Jes Sorensen) [837097]
  - [scsi] qla4xxx: 5.03.00.00.06.05-k3 (Chad Dupuis) [1011476]
  - [scsi] qla4xxx: Support setting of local CHAP index for flash target entry (Chad Dupuis) [1011476]
  - [scsi] qla4xxx: Correct the check for local CHAP entry type (Chad Dupuis) [1011476]
  - [scsi] lpfc: Update lpfc version for 8.3.7.21.3p driver release (Rob Evers) [1012961]
  - [scsi] lpfc: Fixed function mode field defined too small for not recognizing dual-chute mode (Rob Evers) [1012961]
  - [net] Revert "net: more accurate skb truesize" (Francesco Fusco) [889181]
  - [net] fix multiqueue selection (Michal Schmidt) [1011939]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-423.el6]
changelog:
  - [kvm] pmu: add proper support for fixed counter 2 (Gleb Natapov) [1000956]
  - [kvm] vmx: do not check bit 12 of EPT violation exit qualification when undefined (Gleb Natapov) [1006139]
  - [kvm] vmx: set "blocked by NMI" flag if EPT violation happens during IRET from NMI (Gleb Natapov) [1006139]
  - [edac] Fix workqueue-related crashes (Aristeu Rozanski) [831127]
  - [edac] amd64_edac: Fix driver module removal (Aristeu Rozanski) [831127]
  - [md] raid5: BIO flags adjust (Jes Sorensen) [837097]
  - [md] Fix skipping recovery for read-only arrays (Jes Sorensen) [1014102]
  - [kernel] audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_names record (Richard Guy Briggs) [1009386]
  - [kernel] audit: log the audit_names record type (Richard Guy Briggs) [1009386]
  - [kernel] audit: add child record before the create to handle case where create fails (Richard Guy Briggs) [1009386]
  - [kernel] audit: format user messages to size of MAX_AUDIT_MESSAGE_LENGTH (Richard Guy Briggs) [1007069]
  - [netdrv] tg3: Expand led off fix to include 5720 (Ivan Vecera) [991498]
  - [netdrv] tg3: Don't turn off led on 5719 serdes port 0 (Ivan Vecera) [991498]
  - [netdrv] tg3: Fix UDP fragments treated as RMCP (Ivan Vecera) [991498]
  - [netdrv] tg3: Remove incorrect switch to aux power (Ivan Vecera) [991498]
  - [i2c] ismt: initialize DMA buffer (Neil Horman) [1014753]
  - [scsi] libfcoe: Make fcoe_sysfs optional / fix fnic NULL exception (Neil Horman) [1014864]
  - [fs] gfs2: Fix race in iteration of glocks for unfreeze/umount (Abhijith Das) [999909]
  - [fs] gfs2: dirty inode correctly in gfs2_write_end (Benjamin Marzinski) [991596]
  - [x86] Mark Intel Atom Avoton processor as supported (Prarit Bhargava) [914842]
  - [mm] vmscan: fix zone shrinking exit when scan work is done (David Gibson) [985155]
  - [block] free bios when failing blk_execute_rq_nowait calls (Jeff Moyer) [1009312]
  - [netdrv] be2net: fix disabling TX in be_close() (Ivan Vecera) [951271]
  - [crypto] Fix race condition in larval lookup (Herbert Xu) [916361]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.5.1.el6]
changelog:
  - [security] IMA: require command line option to enabled (Eric Paris) [644636 643667]
  - [net] Fix priv escalation in rds protocol (Neil Horman) [642899 642900] {CVE-2010-3904}
  - [v4l] Remove compat code for VIDIOCSMICROCODE (Mauro Carvalho Chehab) [642472 642473] {CVE-2010-2963}
  - [kernel] tracing: do not allow llseek to set_ftrace_filter (Jiri Olsa) [631625 631626] {CVE-2010-3079}
  - [virt] xen: hold mm->page_table_lock in vmalloc_sync (Andrew Jones) [644038 643371]
  - [fs] xfs: properly account for reclaimed inodes (Dave Chinner) [642680 641764]
  - [drm] fix ioctls infoleak (Danny Feng) [626319 621437] {CVE-2010-2803}
  - [netdrv] wireless extensions: fix kernel heap content leak (John Linville) [628437 628438] {CVE-2010-2955}
  - [netdrv] niu: buffer overflow for ETHTOOL_GRXCLSRLALL (Danny Feng) [632071 632072] {CVE-2010-3084}
  - [mm] add debug checks for mapcount related invariants (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] move VM_BUG_ON inside the page_table_lock of zap_huge_pmd (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] compaction: handle active and inactive fairly in too_many_isolated (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] start_khugepaged after setting transparent_hugepage_flags (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] fix hibernate memory corruption (Andrea Arcangeli) [644037 642570]
  - [mm] ksmd wait_event_freezable (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] khugepaged wait_event_freezable (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] unlink_anon_vmas in __split_vma in case of error (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] fix memleak in copy_huge_pmd (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] fix hang on anon_vma->root->lock (Andrea Arcangeli) [642679 622327 644037 642570]
  - [mm] avoid breaking huge pmd invariants in case of vma_adjust failures (Andrea Arcangeli) [642679 622327 644037 642570]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.7.1.el6]
changelog:
  - [drm] ttm: fix regression introduced in dfb4a4250168008c5ac61e90ab2b86f074a83a6c (Dave Airlie) [646994 644896]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.9.1.el6]
changelog:
  - [fs] Do not mix FMODE_ and O_ flags with break_lease() and may_open() (Harshula Jayasuriya) [648408 642677]
  - [fs] aio: check for multiplication overflow in do_io_submit (Jeff Moyer) [629450 629451] {CVE-2010-3067}
  - [net] fix info leak from kernel in ethtool operation (Neil Horman) [646727 646728] {CVE-2010-3861}
  - [net] packet: fix information leak to userland (Jiri Pirko) [649899 649900] {CVE-2010-3876}
  - [net] clean up info leak in act_police (Neil Horman) [636393 636394] {CVE-2010-3477}
  - [kernel] sys_semctl: fix kernel stack leakage (Danny Feng) [648723 648724] {CVE-2010-4083}
  - [sound] sound/pci/rme9652: prevent reading uninitialized stack memory (Stanislaw Gruszka) [648710 648715 648711 648716] {CVE-2010-4080 CVE-2010-4081}
  - [mm] Prevent Out Of Memory when changing cpuset's mems on NUMA (Larry Woodman) [651996 597127]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.10.1.el6]
changelog:
  - [fs] xfs: prevent reading uninitialized stack memory (Dave Chinner) [630808 630809] {CVE-2010-3078}
  - [net] fix rds_iovec page count overflow (Jiri Pirko) [647423 647424] {CVE-2010-3865}
  - [scsi] Fix megaraid_sas driver SLAB memory leak detected with CONFIG_DEBUG_SLAB (Shyam Iyer) [649436 633836]
  - [usb] serial/mos*: prevent reading uninitialized stack memory (Don Zickus) [648697 648698] {CVE-2010-4074}
  - [kernel] ecryptfs_uid_hash() buffer overflow (Jerome Marchand) [626320 611388] {CVE-2010-2492}
  - [sound] seq/oss - Fix double-free at error path of snd_seq_oss_open() (Jaroslav Kysela) [630554 630555] {CVE-2010-3080}
  - [virt] virtio-net: init link state correctly (Jason Wang) [653340 646369]
  - [netdrv] prevent reading uninitialized memory in hso driver (Thomas Graf) [633143 633144] {CVE-2010-3298}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.11.1.el6]
changelog:
  - [kernel] posix-cpu-timers: workaround to suppress the problems with mt exec (Oleg Nesterov) [656267 656268] {CVE-2010-4248}
  - [fs] bio: take care not overflow page count when mapping/copying user data (Danny Feng) [652530 652531] {CVE-2010-4162}
  - [net] can-bcm: fix minor heap overflow (Danny Feng) [651846 651847] {CVE-2010-3874}
  - [net] filter: make sure filters dont read uninitialized memory (Jiri Pirko) [651704 651705] {CVE-2010-4158}
  - [net] inet_diag: Make sure we actually run the same bytecode we audited (Jiri Pirko) [651268 651269] {CVE-2010-3880}
  - [v4l] ivtvfb: prevent reading uninitialized stack memory (Mauro Carvalho Chehab) [648832 648833] {CVE-2010-4079}
  - [drm] via/ioctl.c: prevent reading uninitialized stack memory (Dave Airlie) [648718 648719] {CVE-2010-4082}
  - [char] nozomi: clear data before returning to userspace on TIOCGICOUNT (Mauro Carvalho Chehab) [648705 648706] {CVE-2010-4077}
  - [serial] clean data before filling it on TIOCGICOUNT (Mauro Carvalho Chehab) [648702 648703] {CVE-2010-4075}
  - [net] af_unix: limit unix_tot_inflight (Neil Horman) [656761 656762] {CVE-2010-4249}
  - [block] check for proper length of iov entries in blk_rq_map_user_iov() (Danny Feng) [652958 652959] {CVE-2010-4163}
  - [net] Limit sendto()/recvfrom()/iovec total length to INT_MAX (Jiri Pirko) [651894 651895] {CVE-2010-4160}
  - [netdrv] mlx4: Add OFED-1.5.2 patch to increase log_mtts_per_seg (Jay Fenlason) [643815 637284]
  - [kernel] kbuild: fix external module compiling (Aristeu Rozanski) [658879 655231]
  - [net] bluetooth: Fix missing NULL check (Jarod Wilson) [655667 655668] {CVE-2010-4242}
  - [kernel] ipc: initialize structure memory to zero for compat functions (Danny Feng) [648694 648695] {CVE-2010-4073}
  - [kernel] shm: fix information leak to userland (Danny Feng) [648688 648689] {CVE-2010-4072}
  - [md] dm: remove extra locking when changing device size (Mike Snitzer) [653900 644380]
  - [block] read i_size with i_size_read() (Mike Snitzer) [653900 644380]
  - [kbuild] don't sign out-of-tree modules (Aristeu Rozanski) [655122 653507]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.12.1.el6]
changelog:
  - [netdrv] igb: only use vlan_gro_receive if vlans are registered (Stefan Assmann) [652804 660192] {CVE-2010-4263}
  - [net] core: neighbour update Oops (Jiri Pirko) [660591 658518]
  - [scsi] lpfc: Set heartbeat timer off by default (Rob Evers) [660244 655935]
  - [scsi] lpfc: Fixed crashes for BUG_ONs hit in the lpfc_abort_handler (Rob Evers) [659611 645882]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.15.1.el6]
changelog:
  - [net] bonding: prevent oopsing on calling pskb_may_pull on shared skb (Andy Gospodarek) [671342 665110]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.16.1.el6]
changelog:
  - [net] ipsec: fragment locally generated tunnel-mode IPSec6 packets as needed (Herbert Xu) [670421 661113]
  - [net] tcp: Increase TCP_MAXSEG socket option minimum to TCP_MIN_MSS (Frantisek Hrbata) [652510 652511] {CVE-2010-4165}
  - [perf] perf_events: Fix perf_counter_mmap() hook in mprotect() (Oleg Nesterov) [651672 651673] {CVE-2010-4169}
  - [md] dm mpath: revert "dm: Call blk_abort_queue on failed paths" (Mike Snitzer) [658854 636771]
  - [x86] UV: Address interrupt/IO port operation conflict (George Beshers) [662921 659480]
  - [mm] guard page for stacks that grow upwards (Johannes Weiner) [666796 630562]
  - [scsi] enable state transistions from OFFLINE to RUNNING (Mike Christie) [660590 643237]
  - [scsi] set queue limits no_cluster for stacked devices (Mike Snitzer) [662050 658293]
  - [mm] Out-of-memory under memory cgroup can call both of oom-killer-for-memcg and oom-killer-for-page-fault (Larry Woodman) [661732 592879]
  - [scsi] libfc: possible race could panic system due to NULL fsp->cmd (Mike Christie) [662049 638297]
  - [kernel] exec: copy-and-paste the fixes into compat_do_execve() paths (Oleg Nesterov) [627811 625695] {CVE-2010-4243}
  - [kernel] exec: make argv/envp memory visible to oom-killer (Oleg Nesterov) [627811 625695] {CVE-2010-4243}
  - [virt] virtio: console: Send SIGIO in case of port unplug (Amit Shah) [652720 624628]
  - [virt] virtio: console: Send SIGIO on new data arrival on ports (Amit Shah) [652720 624628]
  - [virt] virtio: console: Send SIGIO to processes that request it for host events (Amit Shah) [652720 624628]
  - [virt] virtio: console: Reference counting portdev structs is not needed (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add reference counting for port struct (Amit Shah) [662721 628805]
  - [virt] virtio: console: Use cdev_alloc() instead of cdev_init() (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add a find_port_by_devt() function (Amit Shah) [662721 628805]
  - [virt] virtio: console: Add a list of portdevs that are active (Amit Shah) [662721 628805]
  - [virt] virtio: console: open: Use a common path for error handling (Amit Shah) [662721 628805]
  - [virt] virtio: console: remove_port() should return void (Amit Shah) [662721 628805]
  - [virt] virtio: console: Make write() return -ENODEV on hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Make read() return -ENODEV on hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Unblock poll on port hot-unplug (Amit Shah) [662721 628805]
  - [virt] virtio: console: Un-block reads on chardev close (Amit Shah) [662721 628805]
  - [virt] virtio: console: Check if portdev is valid in send_control_msg() (Amit Shah) [662721 628805]
  - [virt] virtio: console: Remove control vq data only if using multiport support (Amit Shah) [662721 628805]
  - [virt] virtio: console: Reset vdev before removing device (Amit Shah) [662721 628805]
  - [fs] Fix nfsv4 client lock reclaim behaviour (Sachin Prabhu) [661730 638269]
  - [scsi] scsi_dh_alua: Handle all states correctly (Mike Snitzer) [659610 636994]
  - [kernel] execve: improve interactivity and respond to SIGKILL with large arguments (Dave Anderson) [661731 629178]
  - [virt] xen: handle events as edge-triggered (Andrew Jones) [661737 550724]
  - [virt] xen: use percpu interrupts for IPIs and VIRQs (Andrew Jones) [661737 550724]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.17.1.el6]
changelog:
  - [s390x] kdump: allow zfcpdump to mount and write to ext4 file systems (Amerigo Wang) [661667 628676]
  - [scsi] qla2xxx: Properly set the return value in function qla2xxx_eh_abort (Chad Dupuis) [664398 635710]
  - [scsi] qla2xxx: Drop srb reference before waiting for completion (Chad Dupuis) [664398 635710]
  - [virt] KVM: VMX: Really clear cr0.ts when giving the guest ownership of the fpu (Avi Kivity) [658891 645898]
  - [virt] KVM: SVM: Initialize fpu_active in init_vmcb() (Avi Kivity) [658891 645898]
  - [virt] KVM: x86: Use unlazy_fpu() for host FPU (Avi Kivity) [658891 645898]
  - [virt] KVM: Set cr0.et when the guest writes cr0 (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: Give the guest ownership of cr0.ts when the fpu is active (Avi Kivity) [658891 645898]
  - [virt] KVM: Lazify fpu activation and deactivation (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: Allow the guest to own some cr0 bits (Avi Kivity) [658891 645898]
  - [virt] KVM: Replace read accesses of vcpu->arch.cr0 by an accessor (Avi Kivity) [658891 645898]
  - [virt] KVM: VMX: trace clts and lmsw instructions as cr accesses (Avi Kivity) [658891 645898]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.18.1.el6]
changelog:
  - [netdrv] ixgbe: make sure FCoE DDP user buffers are really released by the HW (Frantisek Hrbata) [674002 617193]
  - [netdrv] ixgbe: invalidate FCoE DDP context when no error status is available (Frantisek Hrbata) [674002 617193]
  - [netdrv] ixgbe: avoid doing FCoE DDP when adapter is DOWN or RESETTING (Frantisek Hrbata) [674002 617193]
  - [fcoe] libfc: remove tgt_flags from fc_fcp_pkt struct (Mike Christie) [666797 633915]
  - [fcoe] libfc: use rport timeout values for fcp recovery (Frantisek Hrbata) [666797 633915]
  - [fcoe] libfc: incorrect scsi host byte codes returned to scsi-ml (Mike Christie) [666797 633915]
  - [scsi] scsi_dh_alua: fix overflow in alua_rtpg port group id check (Mike Snitzer) [673978 670572]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.19.1.el6]
changelog:
  - [crypto] sha-s390: Reset index after processing partial block (Herbert Xu) [678996 626515]
  - [net] clear heap allocations for privileged ethtool actions (Jiri Pirko) [672434 672435] {CVE-2010-4655}
  - [usb] iowarrior: don't trust report_size for buffer size (Don Zickus) [672421 672422] {CVE-2010-4656}
  - [virt] virtio: console: Wake up outvq on host notifications (Amit Shah) [678558 643750]
  - [fs] inotify: stop kernel memory leak on file creation failure (Eric Paris) [656831 656832] {CVE-2010-4250}
  - [net] sctp: fix kernel panic resulting from mishandling of icmp dest unreachable msg (Neil Horman) [667028 667029] {CVE-2010-4526}
  - [mm] install_special_mapping skips security_file_mmap check (Frantisek Hrbata) [662198 662199] {CVE-2010-4346}
  - [kdump] vt-d: Handle previous faults after enabling fault handling (Takao Indoh) [678485 617137]
  - [kdump] Enable the intr-remap fault handling after local apic setup (Takao Indoh) [678485 617137]
  - [kdump] vt-d: Fix the vt-d fault handling irq migration in the x2apic mode (Takao Indoh) [678485 617137]
  - [kdump] vt-d: Quirk for masking vtd spec errors to platform error handling logic (Takao Indoh) [678485 617137]
  - [virt] virtio: console: Don't block entire guest if host doesn't read data (Amit Shah) [678562 643751]
  - [virt] virtio: console: Prevent userspace from submitting NULL buffers (Amit Shah) [678559 635535]
  - [virt] virtio: console: Fix poll blocking even though there is data to read (Amit Shah) [678561 634232]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.20.1.el6]
changelog:
  - [dvb] kernel: av7110 negative array offset (Mauro Carvalho Chehab) [672403 672404] {CVE-2011-0521}
  - [fs] sunrpc: Correct a misapplied patch (J. Bruce Fields) [678094 678146] {CVE-2011-0714}
  - [netdrv] orinoco: fix TKIP countermeasure behaviour (Stanislaw Gruszka) [667908 667909] {CVE-2010-4648}
  - [kernel] /proc/vmcore: speed up access to vmcore file (Neil Horman) [683442 672937]
  - [netdrv] cnic: Fix big endian bug (Steve Best) [678484 676640]
  - [scsi] fcoe: drop FCoE LOGO in FIP mode (Mike Christie) [683814 668114]
  - [s390x] remove task_show_regs (Danny Feng) [677854 677855] {CVE-2011-0710}
  - [ib] cm: Bump reference count on cm_id before invoking callback (Doug Ledford) [676190 676191] {CVE-2011-0695}
  - [rdma] cm: Fix crash in request handlers (Doug Ledford) [676190 676191] {CVE-2011-0695}
  - [net] bridge: Fix mglist corruption that leads to memory corruption (Herbert Xu) [678172 659421] {CVE-2011-0716}
  - [netdrv] r8169: use RxFIFO overflow workaround and prevent RxFIFO induced infinite loops (Ivan Vecera) [680080 630810]
  - [s390x] kernel: nohz vs cpu hotplug system hang (Hendrik Brueckner) [683815 668470]
  - [netdrv] cxgb3/cxgb3_main.c: prevent reading uninitialized stack memory (Doug Ledford) [633156 633157] {CVE-2010-3296}
  - [configs] redhat: added CONFIG_SECURITY_DMESG_RESTRICT option (Frantisek Hrbata) [683822 653245]
  - [kernel] restrict unprivileged access to kernel syslog (Frantisek Hrbata) [683822 653245]
  - [fs] cifs: allow matching of tcp sessions in CifsNew state (Jeff Layton) [683812 629085]
  - [fs] cifs: fix potential double put of TCP session reference (Jeff Layton) [683812 629085]
  - [fs] cifs: prevent possible memory corruption in cifs_demultiplex_thread (Jeff Layton) [683812 629085]
  - [fs] cifs: eliminate some more premature cifsd exits (Jeff Layton) [683812 629085]
  - [fs] cifs: prevent cifsd from exiting prematurely (Jeff Layton) [683812 629085]
  - [fs] CIFS: Make cifs_convert_address() take a const src pointer and a length (Jeff Layton) [683812 629085]
  - [kdump] kexec: accelerate vmcore copies by marking oldmem in /proc/vmcore as cached (Neil Horman) [683445 641315]
  - [virt] KVM: VMX: Disallow NMI while blocked by STI (Avi Kivity) [683783 616296]
  - [virt] kvm: write protect memory after slot swap (Michael S. Tsirkin) [683781 647367]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.21.1.el6]
changelog:
  - [netdrv] ixgbe: limit VF access to network traffic (Frantisek Hrbata) [684129 678717]
  - [netdrv] ixgbe: work around for DDP last buffer size (Frantisek Hrbata) [684129 678717]
  - [net] gro: reset dev and skb_iff on skb reuse (Andy Gospodarek) [688311 681970]
  - [x86] mtrr: Assume SYS_CFG[Tom2ForceMemTypeWB] exists on all future AMD CPUs (Frank Arnold) [683813 652208]
  - [virt] virtio_net: Add schedule check to napi_enable call (Michael S. Tsirkin) [684268 676579]
  - [s390x] mm: add devmem_is_allowed() for STRICT_DEVMEM checking (Hendrik Brueckner) [684267 647365]
  - [powerpc] Don't use kernel stack with translation off (Steve Best) [684266 628951]
  - [powerpc] Initialise paca->kstack before early_setup_secondary (Steve Best) [684266 628951]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.23.1.el6]
changelog:
  - [x86] Revert "[x86] mtrr: Assume SYS_CFG[Tom2ForceMemTypeWB] exists on all future AMD CPUs" (Frank Arnold) [683813 652208]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.24.1.el6]
changelog:
  - [fs] Revert "[fs] inotify: stop kernel memory leak on file creation failure" (Eric Paris) [656831 656832] {CVE-2010-4250}


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.26.1.el6]
changelog:
  - [net] bnep: fix buffer overflow (Don Howard) [681315 681316] {CVE-2011-1079}
  - [scsi] aic94xx: world-writable sysfs update_bios file (Don Howard) [679306 679307]
  - [x86] tc1100-wmi: world-writable sysfs wireless and jogdial files (Don Howard) [679306 679307]
  - [x86] acer-wmi: world-writable sysfs threeg file (Don Howard) [679306 679307]
  - [mfd] ab3100: world-writable debugfs *_priv files (Don Howard) [679306 679307]
  - [v4l] sn9c102: world-wirtable sysfs files (Don Howard) [679306 679307]
  - [x86] Fix EFI pagetable to map whole memory (Takao Indoh) [670850 664364]
  - [kernel] CAP_SYS_MODULE bypass via CAP_NET_ADMIN (Phillip Lougher) [681772 681773] {CVE-2011-1019}
  - [kernel] failure to revert address limit override in OOPS error path (Dave Anderson) [659572 659573] {CVE-2010-4258}
  - [fs] xfs: zero proper structure size for geometry calls (Phillip Lougher) [677267 677268] {CVE-2011-0711}
  - [fs] xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1 (Phillip Lougher) [677267 677268] {CVE-2011-0711}
  - [tty] tty_audit: fix tty_audit_add_data live lock on audit disabled (Danny Feng) [684275 680126]
  - [kernel] proc: protect mm start_code/end_code in /proc/pid/stat (Eugene Teo) [684572 684573] {CVE-2011-0726}
  - [net] dccp oops (Eugene Teo) [682957 682958] {CVE-2011-1093}
  - [firmware] dcdbas: force SMI to happen when expected (Shyam Iyer) [683440 664832]
  - [security] ima: fix add LSM rule bug (Eric Paris) [667914 667915] {CVE-2011-0006}
  - [sound] caiaq: Fix possible string buffer overflow (Jaroslav Kysela) [678475 678476] {CVE-2011-0712}
  - [net] ixgbe: add option to control interrupt mode (Andy Gospodarek) [670114 670110 622640 637332]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.27.1.el6]
changelog:
  - [scsi] megaraid: give FW more time to recover from reset (Tomas Henzl) [695322 692673]
  - [netdrv] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [683820 669231]
  - [sound] ALSA: hda - nvhdmi: Add missing codec IDs, unify names (Jaroslav Kysela) [683817 636922]
  - [mm] pdpte registers are not flushed when PGD entry is changed in x86 PAE mode (Larry Woodman) [695256 691310]
  - [net] fix ebtables stack infoleak (Eugene Teo) [681322 681323] {CVE-2011-1080}
  - [drm] fix unsigned vs signed comparison issue in modeset ctl ioctl (Don Howard) [679927 679928] {CVE-2011-1013}
  - [pci] Enable ASPM state clearing regardless of policy (Alex Williamson) [694073 681017]
  - [pci] Disable ASPM if BIOS asks us to (Alex Williamson) [694073 681017]
  - [mm] do not keep kswapd awake for an unreclaimable zone (Johannes Weiner) [694186 633825]


author: Frantisek Hrbata <fhrbata@redhat.com> [2.6.32-71.28.1.el6]
changelog:
  - [net] bonding: fix jiffy comparison issues (Andy Gospodarek) [698109 696337]
  - [drm] radeon/kms: check AA resolve registers on r300 + regression fix (Dave Airlie) [680001 680002] {CVE-2011-1016}
  - [infiniband] uverbs: Handle large number of entries in poll CQ (Eugene Teo) [688429 696137] {CVE-2011-1044 CVE-2010-4649}
  - [net] sctp: fix the INIT/INIT-ACK chunk length calculation (Thomas Graf) [695386 690743] {CVE-2011-1573}
  - [net] CAN: Use inode instead of kernel address for /proc file (Danny Feng) [664560 664561] {CVE-2010-4565}
  - [fs] inotify: fix double free/corruption of stuct user (Eric Paris) [656831 656832] {CVE-2010-4250}
  - [net] netfilter: ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689341 689342]
  - [net] bonding: change test for presence of VLANs (Jiri Pirko) [696487 683496]
  - [scsi] scsi_dh: fix reference counting in scsi_dh_activate error path (Mike Snitzer) [696889 680140]
  - [net] enable VLAN NULL tagging (Neil Horman) [683810 633571]
  - [scsi] scsi_dh: propagate SCSI device deletion (Mike Snitzer) [698114 669411]
  - [fs] inotify: stop kernel memory leak on file creation failure (Eric Paris) [656831 656832] {CVE-2010-4250}


