# changelog

author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-31.el6]
changelog:
  - [mm] fix vma_adjust lock inversion (Andrea Arcangeli) [595808]
  - [mm] eliminate compiler warning introduced by my "kernel pagefault tracepoint for x86 & x86_64 patch" (Larry Woodman) [526032]
  - [netdrv] tg3: Fix INTx fallback when MSI fails (Steve Best) [594456]
  - [virt] correctly trace irq injection on SVM (Gleb Natapov) [594020]
  - [virt] KVM: remove CAP_SYS_RAWIO requirement from kvm_vm_ioctl_assign_irq (Alex Williamson) [594912]
  - [virt] KVM: Fix wallclock version writing race (Glauber Costa) [592033]
  - [x86] Fix double enable_IR_x2apic call on SMP kernel on !SMP boards (Luming Yu) [585122]
  - [block] Adjust elv_iosched_show to return "none" for bio-based DM (Mike Snitzer) [595393]
  - [dm] mpath: Add a feature flag attribute to the multipath structure (Mike Snitzer) [594503]
  - [kernel] fix compat_sys_sched_getaffinity() (Oleg Nesterov) [582407]
  - [usb] usbcore: Fix issue with disabled USB3 protocol ports (Bhavna Sarathy) [591916]
  - [kernel] python: change scripts to use system python instead of env (Don Zickus) [575965]
  - [scsi] mpt2sas: update to 05.100.00.02 (Tomas Henzl) [591971]
  - [virt] Fix FV Xen guest when xen_pv_hvm not enabled (Don Dutile) [523134]
  - [net] enhance network cgroup classifier to work in softirq context (Neil Horman) [595351]
  - [net] gro: Fix bogus gso_size on the first fraglist entry (Herbert Xu) [594561]
  - [nfs] sunrpc trace points (Steve Dickson) [567741]
  - [nfs] don't try to decode GETATTR if DELEGRETURN returned error (Jeff Layton) [584391]
  - [nfs] d_revalidate() is too trigger-happy with d_drop() (Jeff Layton) [587225]
  - [ppc64] Fix zero length strncmp() on powerpc (Steve Best) [593129]
  - [ppc64] pseries: Fix xics interrupt affinity (Steve Best) [592438]
  - [ppc] Improve 64bit copy_tofrom_user (Steve Best) [591344]
  - [fs] GFS2: Fix permissions checking for setflags ioctl() (Steven Whitehouse) [595395] {CVE-2010-1641}
  - [gfs] GFS2: Add two useful messages (Steven Whitehouse) [589510]
  - [serial] fix serial console hang after entering username (John Villalovos) [590851]
  - [kdump] kexec can't load capturing kernel on some big RAM systems (Vitaly Mayatskikh) [580843]
  - [fs] cleanup generic block based fiemap (Josef Bacik) [578560]
  - [fs] vfs: add NOFOLLOW/UNUSED to umount flags (Josef Bacik) [562078]
  - [fs] dlm: fix ast ordering for user locks (David Teigland) [592418]
  - [fs] cifs: fix noserverino handling when unix extensions are enabled (Jeff Layton) [591483]
  - [fs] cifs: don't update uniqueid in cifs_fattr_to_inode (Jeff Layton) [591483]
  - [fs] cifs: always revalidate hardlinked inodes when using noserverino (Jeff Layton) [591483]
  - [fs] cifs: Fix losing locks during fork() (Jeff Layton) [591483]
  - [fs] cifs: propagate cifs_new_fileinfo() error back to the caller (Jeff Layton) [591483]
  - [fs] cifs: add comments explaining cifs_new_fileinfo behavior (Jeff Layton) [591483]
  - [fs] cifs: Allow null nd (as nfs server uses) on create (Jeff Layton) [591483]
  - [fs] cifs: remove unused parameter from cifs_posix_open_inode_helper() (Jeff Layton) [591483]
  - [fs] cifs: drop quota operation stubs (Jeff Layton) [591483]
  - [fs] cifs: Remove unused cifs_oplock_cachep (Jeff Layton) [591483]
  - [fs] cifs: Cleanup various minor breakage in previous cFYI cleanup (Jeff Layton) [591483]
  - [fs] cifs: Neaten cERROR and cFYI macros, reduce text space (Jeff Layton) [591483]
  - [fs] cifs: trivial white space (Jeff Layton) [591483]
  - [fs] cifs: use add_to_page_cache_lru (Jeff Layton) [591483]
  - [fs] cifs: not overwriting file_lock structure after GET_LK (Jeff Layton) [591483]
  - [fs] cifs: Fix a kernel BUG with remote OS/2 server (Jeff Layton) [591483]
  - [fs] cifs: initialize nbytes at the beginning of CIFSSMBWrite() (Jeff Layton) [591483]
  - [fs] cifs: back out patches that didn't make it upstream (Jeff Layton) [591483]
  - [fs] cifs: guard against hardlinking directories (Jeff Layton) [591229]
  - [pci] check caps from sysfs file open to read device dependent config space (Don Dutile) [559709]
  - [fs] sysfs: add struct file* to bin_attr callbacks (Don Dutile) [559709]
  - [ata] pata_via: fixup detection issues (David Milburn) [591074]
  - [security] keys: call_sbin_request_key() must write lock keyrings before modifying them (David Howells) [591891]
  - [security] keys: Use RCU dereference wrappers in keyring key type code (David Howells) [591891]
  - [security] keys: find_keyring_by_name() can gain access to a freed keyring (David Howells) [585101 591891] {CVE-2010-1437}
  - [security] keys: Fix RCU handling in key_gc_keyring() (David Howells) [591891]
  - [security] keys: the request_key() syscall should link an existing key to the dest keyring (David Howells) [591891]
  - [security] keys: don't need to use RCU in keyring_read() as semaphore is held (David Howells) [591891]
  - [security] keys: fix an RCU warning (David Howells) [591891]
  - [security] keys: PTR_ERR return of wrong pointer in keyctl_get_security() (David Howells) [591891]
  - [fs] CacheFiles: Fix error handling in cachefiles_determine_cache_security() (David Howells) [591894]
  - [fs] CacheFiles: Fix occasional EIO on call to vfs_unlink() (David Howells) [591894]
  - [fs] fs-cache: order the debugfs stats correctly (David Howells) [591894]
  - [fs] SLOW_WORK: CONFIG_SLOW_WORK_PROC should be CONFIG_SLOW_WORK_DEBUG (David Howells) [591894]
  - [fs] fscache: add missing unlock (David Howells) [591894]
  - [fs] FS-Cache: Remove the EXPERIMENTAL flag (David Howells) [591894]
  - [fs] CacheFiles: Fix a race in cachefiles_delete_object() vs rename (David Howells) [591894]
  - [fs] switch cachefiles to kern_path() (David Howells) [591894]
  - [fs] FS-Cache: Avoid maybe-used-uninitialised warning on variable (David Howells) [591894]
  - [net] bonding: make bonding support netpoll (Amerigo Wang) [587751]
  - [net] bridge: make bridge support netpoll (Amerigo Wang) [587751]
  - [net] netpoll: add generic support for bridge and bonding devices (Amerigo Wang) [587751]
  - [ppc64] Use lwarx/ldarx hint in bit locks (Steve Best) [594515]
  - [ppc64] 85xx: Make sure lwarx hint isn't set on ppc32 (Steve Best) [594515]
  - [ppc64] Use lwarx hint in spinlocks (Steve Best) [594515]
  - [fs] tmpfs: Insert tmpfs cache pages to inactive list at first (Rik van Riel) [595210]
  - [mm] vmscan: detect mapped file pages used only once (Rik van Riel) [595210]
  - [mm] vmscan: drop page_mapping_inuse() (Rik van Riel) [595210]
  - [mm] vmscan: factor out page reference checks (Rik van Riel) [595210]
  - [nfs] SUNRPC: Don't spam gssd with upcall requests when the kerberos key expired (Steve Dickson) [595478]
  - [nfs] SUNRPC: Reorder the struct rpc_task fields (Steve Dickson) [595478]
  - [nfs] SUNRPC: Remove the 'tk_magic' debugging field (Steve Dickson) [595478]
  - [nfs] SUNRPC: Move the task->tk_bytes_sent and tk_rtt to struct rpc_rqst (Steve Dickson) [595478]
  - [nfs] Don't call iput() in nfs_access_cache_shrinker (Steve Dickson) [595478]
  - [nfs] Clean up nfs_access_zap_cache() (Steve Dickson) [595478]
  - [nfs] Don't run nfs_access_cache_shrinker() when the mask is GFP_NOFS (Steve Dickson) [595478]
  - [nfs] SUNRPC: Ensure rpcauth_prune_expired() respects the nr_to_scan parameter (Steve Dickson) [595478]
  - [nfs] SUNRPC: Ensure memory shrinker doesn't waste time in rpcauth_prune_expired() (Steve Dickson) [595478]
  - [nfs] SUNRPC: Dont run rpcauth_cache_shrinker() when gfp_mask is GFP_NOFS (Steve Dickson) [595478]
  - [nfs] Read requests can use GFP_KERNEL (Steve Dickson) [595478]
  - [nfs] Clean up nfs_create_request() (Steve Dickson) [595478]
  - [nfs] Don't use GFP_KERNEL in rpcsec_gss downcalls (Steve Dickson) [595478]
  - [nfs] NFSv4: Don't use GFP_KERNEL allocations in state recovery (Steve Dickson) [595478]
  - [nfs] SUNRPC: Fix xs_setup_bc_tcp() (Steve Dickson) [595478]
  - [nfs] SUNRPC: Replace jiffies-based metrics with ktime-based metrics (Steve Dickson) [595478]
  - [kernel] ktime: introduce ktime_to_ms() (Steve Dickson) [595478]
  - [nfs] SUNRPC: RPC metrics and RTT estimator should use same RTT value (Steve Dickson) [595478]
  - [nfs] Calldata for nfs4_renew_done() (Steve Dickson) [595478]
  - [nfs] nfs4: renewd renew operations should take/put a client reference (Steve Dickson) [595478]
  - [nfs] Squelch compiler warning in nfs_add_server_stats() (Steve Dickson) [595478]
  - [nfs] Clean up fscache_uniq mount option (Steve Dickson) [595478]
  - [nfs] Squelch compiler warning (Steve Dickson) [595478]
  - [nfs] SUNRPC: Trivial cleanups in include/linux/sunrpc/xdr.h (Steve Dickson) [595478]
  - [nfs] NFSv4: Clean up the NFSv4 setclientid operation (Steve Dickson) [595478]
  - [nfs] NFSv4: Allow attribute caching with 'noac' mounts if client holds a delegation (Steve Dickson) [595478]
  - [nfs] SUNRPC: Fail over more quickly on connect errors (Steve Dickson) [595478]
  - [nfs] SUNRPC: Move the test for XPRT_CONNECTING into xprt_connect() (Steve Dickson) [595478]
  - [nfs] SUNRPC: Cleanup - make rpc_new_task() call rpc_release_calldata on failure (Steve Dickson) [595478]
  - [nfs] SUNRPC: Clean up xprt_release() (Steve Dickson) [595478]
  - [nfs] NFSv4: Fix up the documentation for nfs_do_refmount (Steve Dickson) [595478]
  - [nfs] Replace nfsroot on-stack filehandle (Steve Dickson) [595478]
  - [nfs] Cleanup file handle allocations in fs/nfs/super.c (Steve Dickson) [595478]
  - [nfs] Prevent the mount code from looping forever on broken exports (Steve Dickson) [595478]
  - [nfs] Reduce stack footprint of nfs3_proc_getacl() and nfs3_proc_setacl() (Steve Dickson) [595478]
  - [nfs] Reduce stack footprint of nfs_statfs() (Steve Dickson) [595478]
  - [nfs] Reduce stack footprint of nfs_setattr() (Steve Dickson) [595478]
  - [nfs] Reduce stack footprint of nfs4_proc_create() (Steve Dickson) [595478]
  - [nfs] Reduce the stack footprint of nfs_proc_symlink() (Steve Dickson) [595478]
  - [nfs] Reduce the stack footprint of nfs_proc_create (Steve Dickson) [595478]
  - [nfs] Reduce the stack footprint of nfs_rmdir (Steve Dickson) [595478]
  - [nfs] Reduce stack footprint of nfs_proc_remove() (Steve Dickson) [595478]
  - [nfs] Reduce stack footprint of nfs3_proc_readlink() (Steve Dickson) [595478]
  - [nfs] Reduce the stack footprint of nfs_link() (Steve Dickson) [595478]
  - [nfs] Reduce stack footprint of nfs_readdir() (Steve Dickson) [595478]
  - [nfs] Reduce stack footprint of nfs3_proc_rename() and nfs4_proc_rename() (Steve Dickson) [595478]
  - [nfs] Reduce stack footprint of nfs_revalidate_inode() (Steve Dickson) [595478]
  - [nfs] NFSv4: Reduce stack footprint of nfs4_proc_access() and nfs3_proc_access() (Steve Dickson) [595478]
  - [nfs] NFSv4: Reduce the stack footprint of nfs4_remote_referral_get_sb (Steve Dickson) [595478]
  - [nfs] NFSv4: Reduce stack footprint of nfs4_get_root() (Steve Dickson) [595478]
  - [nfs] Reduce the stack footprint of nfs_follow_remote_path() (Steve Dickson) [595478]
  - [nfs] Reduce the stack footprint of nfs_lookup (Steve Dickson) [595478]
  - [nfs] NFSv4: Reduce the stack footprint of try_location() (Steve Dickson) [595478]
  - [nfs] Reduce the stack footprint of nfs_create_server (Steve Dickson) [595478]
  - [nfs] Reduce the stack footprint of nfs_follow_mountpoint() (Steve Dickson) [595478]
  - [nfs] NFSv4: Eliminate nfs4_path_walk() (Steve Dickson) [595478]
  - [nfs] Add helper functions for allocating filehandles and fattr structs (Steve Dickson) [595478]
  - [nfs] NFSv4: Fix the locking in nfs_inode_reclaim_delegation() (Steve Dickson) [595478]
  - [nfs] fix memory leak in nfs_get_sb with CONFIG_NFS_V4 (Steve Dickson) [595478]
  - [nfs] fix some issues in nfs41_proc_reclaim_complete() (Steve Dickson) [595478]
  - [nfs] Ensure that nfs_wb_page() waits for Pg_writeback to clear (Steve Dickson) [595478]
  - [nfs] Fix an unstable write data integrity race (Steve Dickson) [595478]
  - [nfs] testing for null instead of ERR_PTR() (Steve Dickson) [595478]
  - [nfs] NFSv4: Don't attempt an atomic open if the file is a mountpoint (Steve Dickson) [595478]
  - [nfs] SUNRPC: Fix a bug in rpcauth_prune_expired (Steve Dickson) [595478]
  - [nfs] NFSv4: fix delegated locking (Steve Dickson) [595478]
  - [nfs] Ensure that the WRITE and COMMIT RPC calls are always uninterruptible (Steve Dickson) [595478]
  - [nfs] Fix a race with the new commit code (Steve Dickson) [595478]
  - [nfs] Fix the mode calculation in nfs_find_open_context (Steve Dickson) [595478]
  - [nfs] NFSv4: Fall back to ordinary lookup if nfs4_atomic_open() returns EISDIR (Steve Dickson) [595478]
  - [nfs] SUNRPC: Fix the return value of rpc_run_bc_task() (Steve Dickson) [595478]
  - [nfs] SUNRPC: Fix a use after free bug with the NFSv4.1 backchannel (Steve Dickson) [595478]
  - [nfs] ensure bdi_unregister is called on mount failure (Steve Dickson) [595478]
  - [nfs] fix unlikely memory leak (Steve Dickson) [595478]
  - [nfs] nfs41: renewd sequence operations should take/put client reference (Steve Dickson) [595478]
  - [nfs] prevent backlogging of renewd requests (Steve Dickson) [595478]
  - [nfs] rpc client can not deal with ENOSOCK, so translate it into ENOCONN (Steve Dickson) [595478]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-30.el6]
changelog:
  - [perf] sync tools/perf to 2.6.34 (Jason Baron) [578987]
  - [drm] i915: Update to 2.6.34-rc7 (Adam Jackson) [592003]
  - [perf] userspace and core update fix (Jason Baron) [567828 578987]
  - [perf] rhel6 perf fixups (Jason Baron) [567828 578987]
  - [perf] backport latest core perf support (Jason Baron) [567828 578987]
  - [perf] pull back 'perf' userspace (Jason Baron) [567828 578987]
  - [drm] radeon/kms: report lvds status as unknown with closed lid (Jerome Glisse) [585111 591628]
  - [drm] fbdev: fix cloning on fbcon (Dave Airlie) [512023]
  - [drm] fbcon disconnected + hotplug operation (Jerome Glisse) [580789]
  - [kernel] slow-work: use get_ref wrapper instead of directly calling get_ref (Dave Airlie) [580789]
  - [drm] radeon/kms: add special workaround for triple head servers (Dave Airlie) [512023]
  - [infiniband] RDMA: Use rlimit helpers (Doug Ledford) [500229]
  - [infiniband] ipoib: returned back addrlen check for mc addresses (Doug Ledford) [500229]
  - [infiniband] RDMA/amso1100: Fix error paths in post_send and post_recv (Doug Ledford) [500229]
  - [infiniband] IB/srp: Clean up error path in srp_create_target_ib() (Doug Ledford) [500229]
  - [infiniband] IB/srp: Split send and recieve CQs to reduce number of interrupts (Doug Ledford) [500229]
  - [infiniband] rdma: potential ERR_PTR dereference (Doug Ledford) [500229]
  - [infiniband] RDMA/cm: Set num_paths when manually assigning path records (Doug Ledford) [500229]
  - [infiniband] IB/cm: Fix device_create() return value check (Doug Ledford) [500229]
  - [infiniband] IB/ucm: Clean whitespace errors (Doug Ledford) [500229]
  - [infiniband] IB/ucm: Increase maximum devices supported (Doug Ledford) [500229]
  - [infiniband] IB/ucm: Use stack variable 'base' in ib_ucm_add_one (Doug Ledford) [500229]
  - [infiniband] IB/ucm: Use stack variable 'devnum' in ib_ucm_add_one (Doug Ledford) [500229]
  - [infiniband] RDMA/cm: Remove unused definition of RDMA_PS_SCTP (Doug Ledford) [500229]
  - [infiniband] RDMA/cm: Revert association of an RDMA device when binding to loopback (Doug Ledford) [500229]
  - [infiniband] IB/addr: Correct CONFIG_IPv6 to CONFIG_IPV6 (Doug Ledford) [500229]
  - [infiniband] IB/addr: Fix IPv6 routing lookup (Doug Ledford) [500229]
  - [infiniband] IB/addr: Simplify resolving IPv4 addresses (Doug Ledford) [500229]
  - [infiniband] RDMA/cm: fix loopback address support (Doug Ledford) [500229]
  - [infiniband] IB/addr: Store net_device type instead of translating to RDMA transport (Doug Ledford) [500229]
  - [infiniband] IB/addr: Verify source and destination address families match (Doug Ledford) [500229]
  - [infiniband] RDMA/cma: Replace net_device pointer with index (Doug Ledford) [500229]
  - [infiniband] RDMA/cma: Fix AF_INET6 support in multicast joining (Doug Ledford) [500229]
  - [infiniband] RDMA/cma: Correct detection of SA Created MGID (Doug Ledford) [500229]
  - [infiniband] RDMA/addr: Use appropriate locking with for_each_netdev() (Doug Ledford) [500229]
  - [infiniband] RDMA/ucma: Add option to manually set IB path (Doug Ledford) [500229]
  - [infiniband] IB/mad: Ignore iWARP devices on device removal (Doug Ledford) [500229]
  - [infiniband] IB/umad: Clean whitespace (Doug Ledford) [500229]
  - [infiniband] IB/umad: Increase maximum devices supported (Doug Ledford) [500229]
  - [infiniband] IB/umad: Use stack variable 'base' in ib_umad_init_port (Doug Ledford) [500229]
  - [infiniband] IB/umad: Use stack variable 'devnum' in ib_umad_init_port (Doug Ledford) [500229]
  - [infiniband] IB/umad: Remove port_table[] (Doug Ledford) [500229]
  - [infiniband] IB/umad: Convert *cdev to cdev in struct ib_umad_port (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Use anon_inodes instead of private infinibandeventfs (Doug Ledford) [500229]
  - [infiniband] IB/core: Fix and clean up ib_ud_header_init() (Doug Ledford) [500229]
  - [infiniband] IB/core: Pack struct ib_device a little tighter (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Whitespace cleanup (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Pack struct ib_uverbs_event_file tighter (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Increase maximum devices supported (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: use stack variable 'base' in ib_uverbs_add_one (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Use stack variable 'devnum' in ib_uverbs_add_one (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Remove dev_table (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Convert *cdev to cdev in struct ib_uverbs_device (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Fix return of PTR_ERR() of wrong pointer in ib_uverbs_get_context() (Doug Ledford) [500229]
  - [infiniband] IB: Clarify the documentation of ib_post_send() (Doug Ledford) [500229]
  - [infiniband] IB/ehca: Allow access for ib_query_qp() (Doug Ledford) [500229]
  - [infiniband] IB/ehca: Do not turn off irqs in tasklet context (Doug Ledford) [500229]
  - [infiniband] IB/ehca: Fix error paths in post_send and post_recv (Doug Ledford) [500229]
  - [infiniband] IB/ehca: Rework destroy_eq() (Doug Ledford) [500229]
  - [infiniband] IPoIB: Include return code in trace message for ib_post_send() failures (Doug Ledford) [500229]
  - [infiniband] IPoIB: Fix TX queue lockup with mixed UD/CM traffic (Doug Ledford) [500229]
  - [infiniband] IPoIB: Remove TX moderation settings from ethtool support (Doug Ledford) [500229]
  - [infiniband] IB/ipath: Use bitmap_weight() (Doug Ledford) [500229]
  - [infiniband] Remove BKL from ipath_open() (Doug Ledford) [500229]
  - [rds] remove uses of NIPQUAD, use pI4 (Doug Ledford) [500229]
  - [rds] RDS/IB+IW: Move recv processing to a tasklet (Doug Ledford) [500229]
  - [rds] Do not send congestion updates to loopback connections (Doug Ledford) [500229]
  - [rds] Fix panic on unload (Doug Ledford) [500229]
  - [rds] Fix potential race around rds_i[bw]_allocation (Doug Ledford) [500229]
  - [rds] Add GET_MR_FOR_DEST sockopt (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Check correct variable for allocation failure (Doug Ledford) [500229]
  - [infiniband] mlx4: replace the dma_sync_single_range_for_cpu/device API (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Simplify retrieval of ib_device (Doug Ledford) [500229]
  - [infiniband] mlx4_core: Fix cleanup in __mlx4_init_one() error path (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Fix queue overflow check in post_recv (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Initialize SRQ scatter entries when creating an SRQ (Doug Ledford) [500229]
  - [infiniband] mlx4: use bitmap_find_next_zero_area (Doug Ledford) [500229]
  - [infiniband] mlx4_core: return a negative error value (Doug Ledford) [500229]
  - [infiniband] mlx4_core: Fix parsing of reserved EQ cap (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Remove limitation on LSO header size (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Remove unneeded code (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Correct cap.max_inline_data assignment in nes_query_qp() (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix CX4 link problem in back-to-back configuration (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Clear stall bit before destroying NIC QP (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Set assume_aligned_header bit (Doug Ledford) [500229]
  - [infiniband] convert to use netdev_for_each_mc_addr (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Add support for KR device id 0x0110 (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Change WQ overflow return code (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Multiple disconnects cause crash during AE handling (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix crash when listener destroyed during loopback setup (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Use atomic counters for CM listener create and destroy (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix stale ARP issue (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: FIN during MPA startup causes timeout (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Free kmap() resources (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Check for zero STag (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix Xansation test crash on cm_node ref_count (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Abnormal listener exit causes loopback node crash (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix crash in nes_accept() (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Resource not freed for REJECTed connections (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: MPA request/response error checking (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix query of ORD values (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix MAX_CM_BUFFER define (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Pass correct size to ioremap_nocache() (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Update copyright and branding string (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Add max_cqe check to nes_create_cq() (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Clean up struct nes_qp (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Implement IB_SIGNAL_ALL_WR as an iWARP extension (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Add additional SFP+ PHY uC status check and PHY reset (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Correct fast memory registration implementation (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Add support for IB_WR_*INV (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: In nes_post_recv() always set bad_wr on error (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: In nes_post_send() always set bad_wr on error (Doug Ledford) [500229]
  - [netdrv] cxgb3: fix linkup issue (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Wait at least one schedule cycle during device removal (Doug Ledford) [500229]
  - [netdrv] cxgb3: fix hot plug removal crash (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Mark RDMA device with CXIO_ERROR_FATAL when removing (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Don't allocate the SW queue for user mode CQs (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Increase the max CQ depth (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Doorbell overflow avoidance and recovery (Doug Ledford) [500229]
  - [netdrv] cxgb3: convert to use netdev_for_each_addr (Doug Ledford) [500229]
  - [netdrv] cxgb3: fix link flap (Doug Ledford) [500229]
  - [netdrv] cxgb3: FIx VLAN over Jumbo frames (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Remove BUG_ON() on CQ rearm failure (Doug Ledford) [500229]
  - [netdrv] cxgb3: fix GRO checksum check (Doug Ledford) [500229]
  - [netdrv] cxgb3: add memory barriers (Doug Ledford) [500229]
  - [netdrv] iwch_cm.c: use pM to show MAC address (Doug Ledford) [500229]
  - [netdrv] cxgb3: Use kzalloc for allocating only one thing (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Fix error paths in post_send and post_recv (Doug Ledford) [500229]
  - [netdrv] cxgb3: declare MODULE_FIRMWARE (Doug Ledford) [500229]
  - [netdrv] cxgb3: Set the rxq (Doug Ledford) [500229]
  - [netdrv] cxgb3: No need to wake queue in xmit handler (Doug Ledford) [500229]
  - [netdrv] cxgb3: Added private MAC address and provisioning packet handler for iSCSI (Doug Ledford) [500229]
  - [net] Hook up cxgb4 to Kconfig and Makefile (Doug Ledford) [500229]
  - [netdrv] cxgb4: Add remaining driver headers and L2T management (Doug Ledford) [500229]
  - [netdrv] cxgb4: Add main driver file and driver Makefile (Doug Ledford) [500229]
  - [netdrv] cxgb4: Add HW and FW support code (Doug Ledford) [500229]
  - [netdrv] cxgb4: Add packet queues and packet DMA code (Doug Ledford) [500229]
  - [netdrv] cxgb4: Add register, message, and FW definitions (Doug Ledford) [500229]
  - [net] use helpers to access mc list (Doug Ledford) [500229]
  - [net] use helpers to access uc list (Doug Ledford) [500229]
  - [kernel] strstrip incorrectly marked __must_check (Doug Ledford) [500229]
  - [pci] introduce pci_pcie_cap() (Doug Ledford) [500229]
  - [pci] cache PCIe capability offset (Doug Ledford) [500229]
  - [kernel] bitmap: introduce bitmap_set, bitmap_clear, bitmap_find_next_zero_area (Doug Ledford) [500229]
  - [md] Remove unnecessary casts of void * (Doug Ledford) [583050 586296 586299 588371]
  - [md] expose max value of behind writes counter (Doug Ledford) [583050 586296 586299 588371]
  - [md] remove some dead fields from mddev_s (Doug Ledford) [583050 586296 586299 588371]
  - [md] allow integers to be passed to md/level (Doug Ledford) [583050 586296 586299 588371]
  - [md] notify mdstat waiters of level change (Doug Ledford) [583050 586296 586299 588371]
  - [md] don't unregister the thread in mddev_suspend (Doug Ledford) [583050 586296 586299 588371]
  - [md] factor out init code for an mddev (Doug Ledford) [583050 586296 586299 588371]
  - [md] pass mddev to make_request functions rather than request_queue (Doug Ledford) [583050 586296 586299 588371]
  - [md] call md_stop_writes from md_stop (Doug Ledford) [583050 586296 586299 588371]
  - [md] split md_set_readonly out of do_md_stop (Doug Ledford) [583050 586296 586299 588371]
  - [md] factor md_stop_writes out of do_md_stop (Doug Ledford) [583050 586296 586299 588371]
  - [md] start to refactor do_md_stop (Doug Ledford) [583050 586296 586299 588371]
  - [md] factor do_md_run to separate accesses to ->gendisk (Doug Ledford) [583050 586296 586299 588371]
  - [md] remove ->changed and related code (Doug Ledford) [583050 586296 586299 588371]
  - [md] don't reference gendisk in getgeo (Doug Ledford) [583050 586296 586299 588371]
  - [md] move io accounting out of personalities into md_make_request (Doug Ledford) [583050 586296 586299 588371]
  - [md] notify level changes through sysfs (Doug Ledford) [583050 586296 586299 588371]
  - [md] Relax checks on ->max_disks when external metadata handling is used (Doug Ledford) [583050 586296 586299 588371]
  - [md] Correctly handle device removal via sysfs (Doug Ledford) [583050 586296 586299 588371]
  - [md] Add support for Raid5->Raid0 and Raid10->Raid0 takeover (Doug Ledford) [583050 586296 586299 588371]
  - [md] Add support for Raid0->Raid5 takeover (Doug Ledford) [583050 586296 586299 588371]
  - [md] discard StateChanged device flag (Doug Ledford) [583050 586296 586299 588371]
  - [md] manage redundancy group in sysfs when changing level (Doug Ledford) [583050 586296 586299 588371]
  - [md] remove unneeded sysfs files more promptly (Doug Ledford) [583050 586296 586299 588371]
  - [md] set mddev readonly flag on blkdev BLKROSET ioctl (Doug Ledford) [583050 586296 586299 588371]
  - [md] don't insist on valid event count for spare devices (Doug Ledford) [583050 586296 586299 588371]
  - [md] simplify updating of event count to sometimes avoid updating spares (Doug Ledford) [583050 586296 586299 588371]
  - [md] restore ability of spare drives to spin down (Doug Ledford) [583050 586296 586299 588371]
  - [md] raid6: Fix raid-6 read-error correction in degraded state (Doug Ledford) [583050 586296 586299 588371]
  - [md] raid5: allow for more than 2^31 chunks (Doug Ledford) [583050 586296 586299 588371]
  - [md] deal with merge_bvec_fn in component devices better (Doug Ledford) [583050 586296 586299 588371]
  - [md] fix some lockdep issues between md and sysfs (Doug Ledford) [583050 586296 586299 588371]
  - [md] fix 'degraded' calculation when starting a reshape (Doug Ledford) [583050 586296 586299 588371]
  - [md] allow a resync that is waiting for other resync to complete, to be aborted (Doug Ledford) [583050 586296 586299 588371]
  - [md] remove unnecessary code from do_md_run (Doug Ledford) [583050 586296 586299 588371]
  - [md] make recovery started by do_md_run() visible via sync_action (Doug Ledford) [583050 586296 586299 588371]
  - [md] use pU to print UUIDs (Doug Ledford) [583050 586296 586299 588371]
  - [md] add 'recovery_start' per-device sysfs attribute (Doug Ledford) [583050 586296 586299 588371]
  - [md] rcu_read_lock() walk of mddev->disks in md_do_sync() (Doug Ledford) [583050 586296 586299 588371]
  - [md] integrate spares into array at earliest opportunity (Doug Ledford) [583050 586296 586299 588371]
  - [md] move compat_ioctl handling into md.c (Doug Ledford) [583050 586296 586299 588371]
  - [md] add MODULE_DESCRIPTION for all md related modules (Doug Ledford) [583050 586296 586299 588371]
  - [md] raid: improve MD/raid10 handling of correctable read errors (Doug Ledford) [583050 586296 586299 588371]
  - [md] raid10: print more useful messages on device failure (Doug Ledford) [583050 586296 586299 588371]
  - [md] bitmap: update dirty flag when bitmap bits are explicitly set (Doug Ledford) [583050 586296 586299 588371]
  - [md] Support write-intent bitmaps with externally managed metadata (Doug Ledford) [583050 586296 586299 588371]
  - [md] bitmap: move setting of daemon_lastrun out of bitmap_read_sb (Doug Ledford) [583050 586296 586299 588371]
  - [md] support updating bitmap parameters via sysfs (Doug Ledford) [583050 586296 586299 588371]
  - [md] factor out parsing of fixed-point numbers (Doug Ledford) [583050 586296 586299 588371]
  - [md] support bitmap offset appropriate for external-metadata arrays (Doug Ledford) [583050 586296 586299 588371]
  - [md] remove needless setting of thread->timeout in raid10_quiesce (Doug Ledford) [583050 586296 586299 588371]
  - [md] change daemon_sleep to be in 'jiffies' rather than 'seconds' (Doug Ledford) [583050 586296 586299 588371]
  - [md] move offset, daemon_sleep and chunksize out of bitmap structure (Doug Ledford) [583050 586296 586299 588371]
  - [md] collect bitmap-specific fields into one structure (Doug Ledford) [583050 586296 586299 588371]
  - [md] add honouring of suspend_{lo,hi} to raid1 (Doug Ledford) [583050 586296 586299 588371]
  - [md] raid5: don't complete make_request on barrier until writes are scheduled (Doug Ledford) [583050 586296 586299 588371]
  - [md] support barrier requests on all personalities (Doug Ledford) [583050 586296 586299 588371]
  - [md] don't reset curr_resync_completed after an interrupted resync (Doug Ledford) [583050 586296 586299 588371]
  - [md] adjust resync_min usefully when resync aborts (Doug Ledford) [583050 586296 586299 588371]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-29.el6]
changelog:
  - [mm] fix mm_take_all_locks regression in 3-7/49 (Andrea Arcangeli) [556572]
  - [mm] avoid __cpuset_node_allowed_softwall to run when allocation is atomic (Andrea Arcangeli) [556572 591283]
  - [mm] fix race between do_huge_pmd_anonymous_page and pte_alloc_map (Andrea Arcangeli) [556572]
  - [mm] add missing update for root-anon-vma drop_anon_vma in memory compactation (Andrea Arcangeli) [556572]
  - [mm] exec vs split_huge_page (Andrea Arcangeli) [556572]
  - [mm] include anon hugepages into the anon stats (Andrea Arcangeli) [556572]
  - [mm] split_huge_page anon_vma ordering dependency (Andrea Arcangeli) [556572]
  - [mm] align page_add_new_anon_rmap (Andrea Arcangeli) [556572]
  - [mm] do_pages_move cannot handle hugepages (Andrea Arcangeli) [556572]
  - [mm] padding to decrease risk of kabi breakage (Andrea Arcangeli) [556572]
  - [mm] transhuge isolate_migratepages() (Andrea Arcangeli) [556572]
  - [mm] select CONFIG_COMPACTION if TRANSPARENT_HUGEPAGE enabled (Andrea Arcangeli) [556572]
  - [mm] compaction: Do not schedule work on other CPUs for compaction (Andrea Arcangeli) [556572]
  - [mm] Defer compaction using an exponential backoff when compaction fails (Andrea Arcangeli) [556572]
  - [mm] Add a tunable that decides when memory should be compacted and when it should be reclaimed (Andrea Arcangeli) [556572]
  - [mm] Direct compact when a high-order allocation fails (Andrea Arcangeli) [556572]
  - [mm] Add /sys trigger for per-node memory compaction (Andrea Arcangeli) [556572]
  - [mm] Add /proc trigger for memory compaction (Andrea Arcangeli) [556572]
  - [mm] Memory compaction core (Andrea Arcangeli) [556572]
  - [mm] Move definition for LRU isolation modes to a header (Andrea Arcangeli) [556572]
  - [mm] Export fragmentation index via /proc/extfrag_index (Andrea Arcangeli) [556572]
  - [mm] Export unusable free space index via /proc/unusable_index (Andrea Arcangeli) [556572]
  - [mm] Allow CONFIG_MIGRATION to be set without CONFIG_NUMA or memory hot-remove (Andrea Arcangeli) [556572]
  - [mm] Allow the migration of PageSwapCache pages (Andrea Arcangeli) [556572]
  - [mm] Do not try to migrate unmapped anonymous pages (Andrea Arcangeli) [556572]
  - [mm] Share the anon_vma ref counts between KSM and page migration (Andrea Arcangeli) [556572]
  - [mm] Take a reference to the anon_vma before migrating (Andrea Arcangeli) [556572]
  - [mm] add numa awareness to hugepage allocations (Andrea Arcangeli) [556572]
  - [mm] enable direct defrag (Andrea Arcangeli) [556572]
  - [mm] ksm: check for ERR_PTR from follow_page() (Andrea Arcangeli) [556572]
  - [mm] err.h: add helper function to simplify pointer error checking (Andrea Arcangeli) [556572]
  - [mm] don't leave orhpaned swap cache after ksm merging (Andrea Arcangeli) [556572]
  - [mm] adapt to anon-vma root locking (Andrea Arcangeli) [556572]
  - [mm] set default to never (Andrea Arcangeli) [556572]
  - [mm] transparent hugepage bootparam (Andrea Arcangeli) [556572]
  - [mm] remove lumpy reclaim (Andrea Arcangeli) [556572 583003]
  - [mm] memcg fix prepare migration (Andrea Arcangeli) [556572]
  - [mm] avoid false positive warning in mmio (Andrea Arcangeli) [556572]
  - [virt] fix kvm swapping memory corruption (Andrea Arcangeli) [556572 583861]
  - [mm] remove khugepaged/enabled (Andrea Arcangeli) [556572]
  - [mm] use only khugepaged_wait (Andrea Arcangeli) [556572]
  - [mm] khugepaged user stack (Andrea Arcangeli) [556572]
  - [mm] define hugetlb_page (Andrea Arcangeli) [556572]
  - [mm] migration: avoid race between shift_arg_pages() and rmap_walk() during migration by not migrating temporary stacks (Andrea Arcangeli) [556572]
  - [mm] extend KSM refcounts to the anon_vma root (Andrea Arcangeli) [556572]
  - [mm] always lock the root (oldest) anon_vma (Andrea Arcangeli) [556572]
  - [mm] track the root (oldest) anon_vma (Andrea Arcangeli) [556572]
  - [mm] change direct call of spin_lock(anon_vma->lock) to inline function (Andrea Arcangeli) [556572]
  - [mm] rename anon_vma_lock to vma_lock_anon_vma (Andrea Arcangeli) [556572]
  - [mm] rmap: remove anon_vma check in page_address_in_vma() (Andrea Arcangeli) [556572]
  - [mm] mmap: check ->vm_ops before dereferencing (Andrea Arcangeli) [556572]
  - [fs] xfs_export_operations.commit_metadata (Christoph Hellwig) [585442]
  - [fs] xfs: fix inode pincount check in fsync (Christoph Hellwig) [585442]
  - [fs] xfs: miscellaneous fixes from 2.6.34 (Dave Chinner) [585442]
  - [fs] xfs: reserved block pool and ENOSPC fixes from 2.6.34 (Dave Chinner) [542712 585442]
  - [fs] xfs: delayed write metadata from 2.6.34 (Dave Chinner) [585442]
  - [lib] introduce list_sort (Dave Chinner) [585442]
  - [fs] xfs: log fixes from 2.6.34 (Dave Chinner) [585442]
  - [fs] xfs: quota changes from 2.6.34 (Dave Chinner) [585442]
  - [fs] xfs: buffer API cleanups from 2.6.34 (Dave Chinner) [585442]
  - [fs] xfs: AG indexing fixes from 2.6.34 (Dave Chinner) [585442]
  - [fs] xfs: idle kernel thread fixes from 2.6.34 (Dave Chinner) [585442]
  - [fs] online defrag fixes from 2.6.34 (Dave Chinner) [585442]
  - [fs] jbd2: delay discarding buffers in journal_unmap_buffer (Eric Sandeen) [593082]
  - [fs] ext4: Use slab allocator for sub-page sized allocations (Eric Sandeen) [593082]
  - [fs] jbd2: don't use __GFP_NOFAIL in journal_init_common() (Eric Sandeen) [593082]
  - [fs] jbd: jbd-debug and jbd2-debug should be writable (Eric Sandeen) [593082]
  - [fs] ext4: Fixed inode allocator to correctly track a flex_bg's used_dirs (Eric Sandeen) [593082]
  - [fs] ext4: Fix estimate of # of blocks needed to write indirect-mapped files (Eric Sandeen) [593082]
  - [fs] ext4: fix up rb_root initializations to use RB_ROOT (Eric Sandeen) [593082]
  - [fs] ext4: Release page references acquired in ext4_da_block_invalidatepages (Eric Sandeen) [593082]
  - [fs] ext4: make "offset" consistent in ext4_check_dir_entry() (Eric Sandeen) [593082]
  - [fs] ext4: Convert BUG_ON checks to use ext4_error() instead (Eric Sandeen) [593082]
  - [fs] ext4: Handle non empty on-disk orphan link (Eric Sandeen) [593082]
  - [fs] ext4: explicitly remove inode from orphan list after failed direct io (Eric Sandeen) [593082]
  - [fs] ext4: Fix fencepost error in chosing choosing group vs file preallocation (Eric Sandeen) [593082]
  - [fs] ext4: Fix BUG_ON at fs/buffer.c:652 in no journal mode (Eric Sandeen) [593082]
  - [fs] ext4: correctly calculate number of blocks for fiemap (Eric Sandeen) [593082]
  - [fs] ext4: add missing error checking to ext4_expand_extra_isize_ea() (Eric Sandeen) [593082]
  - [fs] ext4: move __func__ into a macro for ext4_warning, ext4_error (Eric Sandeen) [593082]
  - [fs] ext4: Use bitops to read/modify EXT4_I(inode)->i_state (Eric Sandeen) [593082]
  - [fs] ext4: Drop EXT4_GET_BLOCKS_UPDATE_RESERVE_SPACE flag (Eric Sandeen) [593082]
  - [fs] ext4: return correct wbc.nr_to_write in ext4_da_writepages (Eric Sandeen) [593082]
  - [fs] ext4: replace BUG() with return -EIO in ext4_ext_get_blocks (Eric Sandeen) [593082]
  - [virt] KVM SVM Implement workaround for Erratum 383 (Bhavna Sarathy) [592311]
  - [virt] KVM SVM Handle MCEs early in the vmexit process (Bhavna Sarathy) [592311]
  - [usb] serial: ftdi: add CONTEC vendor and product id (Stanislaw Gruszka) [584757]
  - [usb] fix usbfs regression (Stanislaw Gruszka) [584757]
  - [usb] add new ftdi_sio device ids (Stanislaw Gruszka) [580067]
  - [usb] ftdi_sio: add device IDs (several ELV, one Mindstorms NXT) (Stanislaw Gruszka) [580067]
  - [usb] ftdi_sio: new device id for papouch AD4USB (Stanislaw Gruszka) [580067]
  - [v4l] gspca_mr973010a: Fix cif type 1 cameras not streaming on UHCI controllers (Stanislaw Gruszka) [580067]
  - [v4l] DVB: Add support for Asus Europa Hybrid DVB-T card (Stanislaw Gruszka) [580063]
  - [usb] mos7840: add device IDs for B&B electronics devices (Stanislaw Gruszka) [580063]
  - [ppc64] fsl: Add PCI device ids for new QoirQ chips (Stanislaw Gruszka) [580063]
  - [fs] vfs: Fix vmtruncate() regression (Stanislaw Gruszka) [579693]
  - [kernel] sched: Fix task priority bug (Stanislaw Gruszka) [579693]
  - [serial] 8250_pnp: add a new Fujitsu Wacom Tablet PC device (Stanislaw Gruszka) [579693]
  - [i2c] pca: Don't use *_interruptible (Stanislaw Gruszka) [579693]
  - [i2c] Do not use device name after device_unregister (Stanislaw Gruszka) [579693]
  - [kernel] sched: Fix cpu_clock() in NMIs, on !CONFIG_HAVE_UNSTABLE_SCHED_CLOCK (Stanislaw Gruszka) [579693]
  - [hid] add device IDs for new model of Apple Wireless Keyboard (Stanislaw Gruszka) [579693]
  - [v4l] gspca: sn9c20x: Fix test of unsigned (Stanislaw Gruszka) [579693]
  - [x86] SGI UV: Fix mapping of MMIO registers (Stanislaw Gruszka) [579693]
  - [perf] timechart: Use tid not pid for COMM change (Stanislaw Gruszka) [580062]
  - [usb] fix usbstorage for 2770:915d delivers no FAT (Stanislaw Gruszka) [580062]
  - [x86] PCI/PAT: return EINVAL for pci mmap WC request for !pat_enabled (Stanislaw Gruszka) [580062]
  - [acpi] EC: Add wait for irq storm (Stanislaw Gruszka) [580062]
  - [acpi] EC: Accelerate query execution (Stanislaw Gruszka) [580062]
  - [usb] add speed values for USB 3.0 and wireless controllers (Stanislaw Gruszka) [580062]
  - [usb] add missing delay during remote wakeup (Stanislaw Gruszka) [580062]
  - [usb] EHCI & UHCI: fix race between root-hub suspend and port resume (Stanislaw Gruszka) [580062]
  - [usb] EHCI: fix handling of unusual interrupt intervals (Stanislaw Gruszka) [580062]
  - [usb] Don't use GFP_KERNEL while we cannot reset a storage device (Stanislaw Gruszka) [580062]
  - [usb] serial: fix memory leak in generic driver (Stanislaw Gruszka) [580062]
  - [char] nozomi: quick fix for the close/close bug (Stanislaw Gruszka) [580062]
  - [tty] fix race in tty_fasync (Stanislaw Gruszka) [580062]
  - [netdrv] netiucv: displayed TX bytes value much too high (Stanislaw Gruszka) [580063]
  - [block] md: fix small irregularity with start_ro module parameter (Stanislaw Gruszka) [580063]
  - [input] i8042: add Dritek quirk for Acer Aspire 5610 (Stanislaw Gruszka) [580063]
  - [hid] fixup quirk for NCR devices (Stanislaw Gruszka) [580063]
  - [dmi] allow omitting ident strings in DMI tables (Stanislaw Gruszka) [580063]
  - [scsi] scsi_dh: create sysfs file, dh_state for all SCSI disk devices (Stanislaw Gruszka) [580063]
  - [nfs] Revert default r/wsize behavior (Stanislaw Gruszka) [580063]
  - [usb] SIS USB2VGA DRIVER: support KAIREN's USB VGA adaptor USB20SVGA-MB-PLUS (Stanislaw Gruszka) [580067]
  - [input] alps: add support for the touchpad on Toshiba Tecra A11-11L (Stanislaw Gruszka) [584757]
  - [fs] gfs2: stuck in inode wait, no glocks stuck (Robert S Peterson) [583737]
  - [netdrv] cnic: update to to 2.1.1 (Stanislaw Gruszka) [590019]
  - [netdrv] bnx2x: fix system hung after netdev watchdog (Stanislaw Gruszka) [581907]
  - [netdrv] bnx2: Fix most severe bugs in bnx2 2.0.8+ (John Feeney) [590879]
  - [netdrv] Update bnx2 driver to 2.0.8 and fw to mips-06-5.0.0.j6 et al (John Feeney) [464728]
  - [virt] VMware Balloon driver (Amit Shah) [582826]
  - [x86] With Sandybridge graphics, kernel reboots unless 'agp=off' used on command line (John Villalovos) [591294]
  - [kernel] unify string representation of NULL in vsprintf.c (Dave Anderson) [589613]
  - [kernel] coredump: fix the page leak in dump_seek() (Oleg Nesterov) [580126]
  - [edac] EDAC support for Nehalem Memory Controllers (Mauro Carvalho Chehab) [584507]
  - [iscsi] Include support for next gen Dell iSCSI PowerVault controller MD36xxi into RDAC scsi device handler's device list (Shyam Iyer) [593814]
  - [scsi] lpfc Update from 8.3.5.9 to 8.3.5.13 FC/FCoE (Rob Evers) [591648]
  - [infiniband] iser: fix failover slowdown (Mike Christie) [589174]
  - [net] TCP: avoid to send keepalive probes if receiving data (Flavio Leitner) [593052]
  - [nfs] commit_metadata export operation replacing nfsd_sync_dir (Christoph Hellwig) [593652]
  - [ppc64] numa: Add form 1 NUMA affinity (Steve Best) [593466]
  - [ppc64] eeh: Fix a bug when pci structure is null (Steve Best) [593854]
  - [ppc64] perf_event: Fix oops due to perf_event_do_pending call (Steve Best) [593464]
  - [ppc] pseries: Quieten cede latency printk (Steve Best) [591739]
  - [fs] GFS2: Don't "get" xattrs for ACLs when ACLs are turned off (Steven Whitehouse) [546294]
  - [kexec] fix OOPS in crash_kernel_shrink (Steve Best) [592336]
  - [fs] ext4: don't use quota reservation for speculative metadata blocks (Eric Sandeen) [587095]
  - [fs] quota: add the option to not fail with EDQUOT in block allocation (Eric Sandeen) [587095]
  - [fs] quota: use flags interface for dquot alloc/free space (Eric Sandeen) [587095]
  - [fs] ext4: Fix quota accounting error with fallocate (Eric Sandeen) [587095]
  - [fs] ext4: Ensure zeroout blocks have no dirty metadata (Eric Sandeen) [587095]
  - [virt] vhost-net: utilize PUBLISH_USED_IDX feature (Michael S. Tsirkin) [593158]
  - [virt] virtio: put last seen used index into ring itself (Michael S. Tsirkin) [593158]
  - [virt] vhost: fix barrier pairing (Michael S. Tsirkin) [593158]
  - [virt] virtio: use smp_XX barriers on SMP (Michael S. Tsirkin) [593158]
  - [virt] virtio_ring: remove a level of indirection (Michael S. Tsirkin) [593158]
  - [virt] trans_virtio: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio-rng: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio_net: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio_blk: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio_console: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio_balloon: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio: add virtqueue_ vq_ops wrappers (Michael S. Tsirkin) [593158]
  - [virt] vhost-net: fix vq_memory_access_ok error checking (Michael S. Tsirkin) [593158]
  - [virt] vhost: fix error handling in vring ioctls (Michael S. Tsirkin) [593158]
  - [virt] vhost: fix interrupt mitigation with raw sockets (Michael S. Tsirkin) [593158]
  - [virt] vhost: fix error path in vhost_net_set_backend (Michael S. Tsirkin) [593158]
  - [netdrv] iwlwifi: iwl_good_ack_health() only apply to AGN device (John Linville) [573029]
  - [netdrv] iwlwifi: code cleanup for connectivity recovery (John Linville) [573029]
  - [netdrv] iwlwifi: Recover TX flow failure (John Linville) [573029]
  - [netdrv] iwlwifi: move plcp check to separated function (John Linville) [573029]
  - [netdrv] iwlwifi: Recover TX flow stall due to stuck queue (John Linville) [573029]
  - [netdrv] iwlwifi: add internal short scan support for 3945 (John Linville) [573029]
  - [netdrv] iwlwifi: separated time check for different type of force reset (John Linville) [573029]
  - [netdrv] iwlwifi: Adjusting PLCP error threshold for 1000 NIC (John Linville) [573029]
  - [netdrv] iwlwifi: multiple force reset mode (John Linville) [573029]
  - [netdrv] iwlwifi: Tune radio to prevent unexpected behavior (John Linville) [573029]
  - [netdrv] iwlwifi: Logic to control how frequent radio should be reset if needed (John Linville) [573029]
  - [netdrv] iwlwifi: add function to reset/tune radio if needed (John Linville) [573029]
  - [netdrv] iwlwifi: clear all the stop_queue flag after load firmware (John Linville) [573029]
  - [netdrv] iwlwifi: check for aggregation frame and queue (John Linville) [573029]
  - [ppc64] kdump: Fix race in kdump shutdown (Steve Best) [559709]
  - [ppc64] kexec: Fix race in kexec shutdown (Steve Best) [593853]
  - [net] Add ndo_{set|get}_vf_port support for enic dynamic vnics (Chris Wright) [581087]
  - [net] Add netlink support for virtual port management (was iovnl) (Chris Wright) [581087]
  - [net] core: add IFLA_STATS64 support (Chris Wright) [581087]
  - [netdrv] igb: support for VF configuration tools (Chris Wright) [581087]
  - [net] rtnetlink: Add SR-IOV VF configuration methods (Chris Wright) [581087]
  - [pci] Add SR-IOV convenience functions and macros (Chris Wright) [581087]
  - [scsi] sync iscsi layer (Mike Christie) [564148 570682]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-28.el6]
changelog:
  - [mm] New round-robin rotor for SLAB allocations (Larry Woodman) [593154]
  - [netdrv] ixgbe: FCoE fixes (Andy Gospodarek) [593474]
  - [net] vlan: updates vlan real_num_tx_queues (Andy Gospodarek) [593474]
  - [net] vlan: adds vlan_dev_select_queue (Andy Gospodarek) [593474]
  - [net] vlan: Precise RX stats accounting (Andy Gospodarek) [593474]
  - [net] add dev_txq_stats_fold() helper (Andy Gospodarek) [593474]
  - [net] vlan: Add support to netdev_ops.ndo_fcoe_get_wwn for VLAN device (Andy Gospodarek) [593474]
  - [netdrv] ixgbe: fixes for link problems, possible DMA errors, and VF/SR-IOV changes (Andy Gospodarek) [575188]
  - [sound] ALSA HDA driver update 2010-05-11 (Jaroslav Kysela) [591083]
  - [mm] show per-process swap usage via procfs (Larry Woodman) [546533]
  - [netdrv] cxgb3 won't recover from EEH event twice (Steve Best) [591738]
  - [virt] x86, cpu: Print AMD virtualization features in /proc/cpuinfo (Gleb Natapov) [592688]
  - [x86] Intel ICH9 workaround for HPET timer issue on IbexPeak Platform (Luming Yu) [502629]
  - [pci] Update pci_dev and pci_bus structs before kabi freeze (Prarit Bhargava) [593322]
  - [pci] Output FW warning in pci_read/write_vpd (Prarit Bhargava) [586979]
  - [infiniband] ehca: Require in_wc in process_mad() (Steve Best) [593095]
  - [security] mmap_min_addr check CAP_SYS_RAWIO only for write (Eric Paris) [592417]
  - [scsi] aacraid: Eliminate use after free (Tomas Henzl) [592926]
  - [scsi] lpfc Update from 8.3.5.7 to 8.3.5.9 FC/FCoE (Rob Evers) [580677]
  - [char] Eliminate use after free (Amit Shah) [593189]
  - [ipmi] fix unlock balance (Tomas Henzl) [592925]
  - [ppc64] only call start-cpu when a CPU is stopped (Steve Best) [592440]
  - [ppc64] make query_cpu_stopped callable outside hotplug cpu (Steve Best) [592440]
  - [kernel] cpufreq: make the iowait-is-busy-time a sysfs tunable (Rik van Riel) [585330]
  - [kernel] ondemand: Solve the big performance issue with ondemand during disk IO (Rik van Riel) [585330]
  - [kernel] sched: introduce get_cpu_iowait_time_us() (Rik van Riel) [585330]
  - [kernel] sched: eliminate the ts->idle_lastupdate field (Rik van Riel) [585330]
  - [kernel] sched: fold updating of the last update time into update_ts_time_stats() (Rik van Riel) [585330]
  - [kernel] sched: update the idle statistics in get_cpu_idle_time_us (Rik van Riel) [585330]
  - [kernel] sched: introduce a function to update the idle statistics (Rik van Riel) [585330]
  - [kernel] sched: add a comment to get_cpu_idle_time_us (Rik van Riel) [585330]
  - [kernel] nohz: Reuse ktime in sub-functions of tick_check_idle (Rik van Riel) [585330]
  - [virt] Xen PV-on-HVM: Disable xen-blkfront for IDE & SCSI devices (Don Dutile) [523134]
  - [virt] xen: PV-on-HVM: Disable xen-blkfront for PV-on-HVM for now (Don Dutile) [523134]
  - [virt] xen: PV-on-HVM: Prevent pv drivers from crashing a FV guest if pv-on-hvm not configured (Don Dutile) [523134]
  - [virt] xen: PV-on-HVM: Add kernel command line enablement control (Don Dutile) [523134]
  - [virt] xen: backport PV-on-HVM (Don Dutile) [523134]
  - [ppc] pseries: Pass more accurate number of supported cores to firmware (Steve Best) [591341]
  - [ppc] Add static fields to ibm, client-architecture call (Steve Best) [591341]
  - [kernel] mutex: Fix optimistic spinning vs. BKL (Steve Best) [591735]
  - [kernel] mutex: Don't spin when the owner CPU is offline or other weird cases (Steve Best) [591735]
  - [kernel] sched: Don't use possibly stale sched_class (Stanislaw Gruszka) [580067]
  - [usb] unusual_devs: Add support for multiple Option 3G sticks (Stanislaw Gruszka) [580067]
  - [usb] cp210x: Add 81E8 Zephyr Bioharness (Stanislaw Gruszka) [580067]
  - [usb] serial: ftdi: add CONTEC vendor and product id (Stanislaw Gruszka) [580067]
  - [usb] ftdi_sio: sort PID/VID entries in new ftdi_sio_ids.h header (Stanislaw Gruszka) [580067]
  - [usb] ftdi_sio: isolate all device IDs to new ftdi_sio_ids.h header (Stanislaw Gruszka) [580067]
  - [usb] Move hcd free_dev call into usb_disconnect to fix oops (Stanislaw Gruszka) [580067]
  - [usb] remove debugging message for uevent constructions (Stanislaw Gruszka) [580067]
  - [usb] fix crash in uhci_scan_schedule (Stanislaw Gruszka) [580067]
  - [usb] fix the idProduct value for USB-3.0 root hubs (Stanislaw Gruszka) [580067]
  - [usb] xhci: Fix finding extended capabilities registers (Stanislaw Gruszka) [580067]
  - [x86] Fix SCI on IOAPIC != 0 (Stanislaw Gruszka) [580067]
  - [x86] Avoid race condition in pci_enable_msix() (Stanislaw Gruszka) [580067]
  - [x86] thinkpad-acpi: make driver events work in NVRAM poll mode (Stanislaw Gruszka) [580067]
  - [x86] thinkpad-acpi: document HKEY event 3006 (Stanislaw Gruszka) [580067]
  - [x86] thinkpad-acpi: R52 brightness_mode has been confirmed (Stanislaw Gruszka) [580067]
  - [x86] thinkpad-acpi: fix poll thread auto-start (Stanislaw Gruszka) [580067]
  - [net] scm: Only support SCM_RIGHTS on unix domain sockets. (Stanislaw Gruszka) [580067]
  - [usb] serial: sierra driver indat_callback fix (Stanislaw Gruszka) [580067]
  - [tty] Fix the ldisc hangup race (Stanislaw Gruszka) [580067]
  - [kernel] devtmpfs: reset inode permissions before unlinking (Stanislaw Gruszka) [580067]
  - [kernel] driver-core: fix race condition in get_device_parent() (Stanislaw Gruszka) [580067]
  - [pm] hibernate: Fix preallocating of memory (Stanislaw Gruszka) [580067]
  - [tpm] tpm_tis: TPM_STS_DATA_EXPECT workaround (Stanislaw Gruszka) [580067]
  - [fs] Switch proc/self to nd_set_link() (Stanislaw Gruszka) [580067]
  - [hid] usbhid: introduce timeout for stuck ctrl/out URBs (Stanislaw Gruszka) [580067]
  - [hid] add multi-input quirk for NextWindow Touchscreen (Stanislaw Gruszka) [580067]
  - [hid] remove TENX iBuddy from blacklist (Stanislaw Gruszka) [580067]
  - [fs] vfs: take f_lock on modifying f_mode after open time (Stanislaw Gruszka) [580067]
  - [acpi] thinkpad-acpi: wrong thermal attribute_group removed in thermal_exit() (Stanislaw Gruszka) [580067]
  - [acpi] fix "acpi=ht" boot option (Stanislaw Gruszka) [580067]
  - [acpi] remove Asus P2B-DS from acpi=ht blacklist (Stanislaw Gruszka) [580067]
  - [pci] hotplug: check ioremap() return value in ibmphp_ebda.c (Stanislaw Gruszka) [580067]
  - [pci] hotplug: ibmphp: read the length of ebda and map entire ebda region (Stanislaw Gruszka) [580067]
  - [x86] msr/cpuid: Pass the number of minors when unregistering MSR and CPUID drivers (Stanislaw Gruszka) [580063]
  - [fs] fnctl: f_modown should call write_lock_irqsave/restore (Stanislaw Gruszka) [580063]
  - [sound] ASoC: fix a memory-leak in wm8903 (Stanislaw Gruszka) [580063]
  - [mtd] UBI: initialise update marker (Stanislaw Gruszka) [580063]
  - [mtd] UBI: fix memory leak in update path (Stanislaw Gruszka) [580063]
  - [ipc] ns: fix memory leak (idr) (Stanislaw Gruszka) [580063]
  - [input] i8042: remove identification strings from DMI tables (Stanislaw Gruszka) [580063]
  - [netdrv] starfire: clean up properly if firmware loading fails (Stanislaw Gruszka) [580064]
  - [kernel] random: drop weird m_time/a_time manipulation (Stanislaw Gruszka) [580064]
  - [kernel] random: Remove unused inode variable (Stanislaw Gruszka) [580064]
  - [mm] purge fragmented percpu vmap blocks (Stanislaw Gruszka) [580064]
  - [mm] percpu-vmap fix RCU list walking (Stanislaw Gruszka) [580064]
  - [x86] Add quirk for Intel DG45FC board to avoid low memory corruption (Stanislaw Gruszka) [580064]
  - [regulator] Specify REGULATOR_CHANGE_STATUS for WM835x LED constraints (Stanislaw Gruszka) [580064]
  - [x86] Add Dell OptiPlex 760 reboot quirk (Stanislaw Gruszka) [580064]
  - [mm] fix migratetype bug which slowed swapping (Stanislaw Gruszka) [580064]
  - [input] winbond-cir: remove dmesg spam (Stanislaw Gruszka) [580064]
  - [acpi] Advertise to BIOS in _OSC: _OST on _PPC changes (Stanislaw Gruszka) [580064]
  - [infiniband] Fix failure exit in ipathfs (Stanislaw Gruszka) [580064]
  - [acpi] fix OSC regression that caused aer and pciehp not to load (Stanislaw Gruszka) [580064]
  - [acpi] Add platform-wide _OSC support (Stanislaw Gruszka) [580064]
  - [acpi] Add a generic API for _OSC (Stanislaw Gruszka) [580064]
  - [s390x] fix single stepped svcs with TRACE_IRQFLAGS=y (Stanislaw Gruszka) [580064]
  - [fs] sysfs: sysfs_sd_setattr set iattrs unconditionally (Stanislaw Gruszka) [580065]
  - [acpi] fix High cpu temperature with 2.6.32 (Stanislaw Gruszka) [580065]
  - [usb] usbfs: properly clean up the as structure on error paths (Stanislaw Gruszka) [580065]
  - [kernel] class: Free the class private data in class_release (Stanislaw Gruszka) [580065]
  - [serial] 8250: add serial transmitter fully empty test (Stanislaw Gruszka) [580065]
  - [rtc] rtc-fm3130: add missing braces (Stanislaw Gruszka) [580065]
  - [ata] Call flush_dcache_page after PIO data transfers in libata-sff.c (Stanislaw Gruszka) [580065]
  - [net] dst: call cond_resched() in dst_gc_task() (Stanislaw Gruszka) [580065]
  - [crypto] padlock-sha: Add import/export support (Stanislaw Gruszka) [580065]
  - [x86] dell-wmi, hp-wmi: check wmi_get_event_data() return value (Stanislaw Gruszka) [580065]
  - [tpm] tpm_infineon: fix suspend/resume handler for pnp_driver (Stanislaw Gruszka) [580065]
  - [usb] ftdi_sio: add USB device ID's for B&B Electronics line (Stanislaw Gruszka) [580063]
  - [fs] anon_inode: set S_IFREG on the anon_inode (Eric Paris) [591813]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-27.el6]
changelog:
  - [ppc] pseries: Flush lazy kernel mappings after unplug operations (Steve Best) [591340]
  - [fs] ext3: enable barriers by default (Eric Sandeen) [586062]
  - [tracing] regset xstate extensions + generic PTRACE_{GET,SET}REGSET support (Oleg Nesterov) [587724]
  - [scsi] hpsa: update to 2.0.2 (Tomas Henzl) [587418]
  - [mm] Print more information about the task being OOM killed (Larry Woodman) [546533]
  - [netdrv] igb/igbvf: use netdev_alloc_skb_ip_align() (Stefan Assmann) [589497]
  - [acpi] Fix regression where _PPC is not read at boot even when ignore_ppc=0 (Matthew Garrett) [571893]
  - [x86] i386: Do a global tlb flush on S4 resume (Matthew Garrett) [572818]
  - [pci] Add ABI for PCI runtime power management (Matthew Garrett) [589781]
  - [block] Fix regression in O_DIRECT|O_SYNC writes to block devices (Jeff Moyer) [582628]
  - [kernel] add skip_spaces() implementation (Jaroslav Kysela) [591078]
  - [kernel] sched: cpuacct: Use bigger percpu counter batch values for stats counters (Steve Best) [591343]
  - [kernel] idr: fix a critical misallocation bug (Eric Paris) [582109]
  - [net] tcp: Fix OOB POLLIN avoidance (Oleg Nesterov) [584786]
  - [s390x] qeth: synchronize configuration interface (Hendrik Brueckner) [586962]
  - [fs] inotify: race use after free/double free in inotify inode marks (Eric Paris) [582109]
  - [fs] ext4: Add flag to files with blocks intentionally past EOF (Eric Sandeen) [578562]
  - [drm] backport patches up to 2.6.34-rc7 (Adam Jackson) [589792]
  - [kernel] elf coredump: add extended numbering support (Amerigo Wang) [578659]
  - [kernel] binfmt_elf_fdpic: Fix build breakage introduced by coredump changes. (Amerigo Wang) [578659]
  - [kernel] elf coredump: make offset calculation process and writing process explicit (Amerigo Wang) [578659]
  - [kernel] elf coredump: replace ELF_CORE_EXTRA_* macros by functions (Amerigo Wang) [578659]
  - [kernel] coredump: move dump_write() and dump_seek() into a header file (Amerigo Wang) [578659]
  - [kernel] coredump: unify dump_seek() implementations for each binfmt_*.c (Amerigo Wang) [578659]
  - [mm] introduce coredump parameter structure (Amerigo Wang) [578659]
  - [powerpc] Reduce printk from pseries_mach_cpu_die() (Steve Best) [590754]
  - [powerpc] Move checks in pseries_mach_cpu_die() (Steve Best) [590754]
  - [powerpc] Reset kernel stack on cpu online from cede state (Steve Best) [590754]
  - [virt] don't compute pvclock adjustments if we trust the tsc (Glauber Costa) [569603]
  - [virt] Try using new kvm clock msrs (Glauber Costa) [569603]
  - [virt] Add a global synchronization point for pvclock (Glauber Costa) [569603]
  - [virt] Enable pvclock flags in vcpu_time_info structure (Glauber Costa) [569603]
  - [virt] Tell the guest we'll warn it about tsc stability (Glauber Costa) [592296]
  - [virt] export paravirtual cpuid flags in KVM_GET_SUPPORTED_CPUID (Glauber Costa) [592296]
  - [virt] add new KVMCLOCK cpuid feature (Glauber Costa) [592296]
  - [virt] change msr numbers for kvmclock (Glauber Costa) [592296]
  - [scsi] enclosure: fix oops while iterating enclosure_status array (Stanislaw Gruszka) [580062]
  - [usb] fix bitmask merge error (Stanislaw Gruszka) [580062]
  - [acpi] enable C2 and Turbo-mode on Nehalem notebooks on A/C (Stanislaw Gruszka) [580063]
  - [input] i8042: add Gigabyte M1022M to the noloop list (Stanislaw Gruszka) [580063]
  - [kernel] nohz: Prevent clocksource wrapping during idle (Stanislaw Gruszka) [580063]
  - [kernel] sched: Fix missing sched tunable recalculation on cpu add/remove (Stanislaw Gruszka) [580063]
  - [netdrv] atl1c: use common_task instead of reset_task and link_chg_task (Stanislaw Gruszka) [580063]
  - [netdrv] atl1e: disable NETIF_F_TSO6 for hardware limit (Stanislaw Gruszka) [580063]
  - [kernel] driver-core: fix devtmpfs crash on s390 (Stanislaw Gruszka) [580063]
  - [kernel] devtmpfs: set root directory mode to 0755 (Stanislaw Gruszka) [580063]
  - [input] ALPS: add interleaved protocol support for Dell E6x00 series (Stanislaw Gruszka) [580063]
  - [mm] flush dcache before writing into page to avoid alias (Stanislaw Gruszka) [580064]
  - [block] pktcdvd: removing device does not remove its sysfs dir (Stanislaw Gruszka) [580064]
  - [mm] add new 'read_cache_page_gfp()' helper function (Stanislaw Gruszka) [580064]
  - [acpi] Add NULL pointer check in acpi_bus_start (Stanislaw Gruszka) [580065]
  - [usb] usbfs: only copy the actual data received (Stanislaw Gruszka) [580065]
  - [net] netfilter: xtables: compat out of scope fix (Stanislaw Gruszka) [580065]
  - [net] pktgen: Fix freezing problem (Stanislaw Gruszka) [580065]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-26.el6]
changelog:
  - [scsi] Sync fcoe to upsteam (Mike Christie) [590781]
  - [netdrv] bnx2x: fix memory barrier (Stanislaw Gruszka) [580477]
  - [x86] kprobes: fix removed int3 checking order (Dave Anderson) [585400]
  - [net] fix oops at bootime in sysctl code (Stanislaw Gruszka) [580064]
  - [net] af_packet: Don't use skb after dev_queue_xmit() (Stanislaw Gruszka) [580064]
  - [net] restore ip source validation (Stanislaw Gruszka) [580064]
  - [net] tcp: update the netstamp_needed counter when cloning sockets (Stanislaw Gruszka) [580064]
  - [net] icmp: send fragment reassembly timeout w/ conntrack enabled (Neil Horman) [563175]
  - [fs] GFS2: stuck in inode wait, no glocks stuck (Robert S Peterson) [583737]
  - [mm] compcache: Backport compcache: ramzswap documentation (Jerome Marchand) [578641]
  - [mm] compcache: xvmalloc memory allocator (Jerome Marchand) [578641]
  - [mm] compcache: virtual block device driver (ramzswap) (Jerome Marchand) [578641]
  - [mm] readahead: fix NULL filp dereference (Josef Bacik) [591055]
  - [netdrv] tg3: 57780 and 5785 devices refuse to attach (Andy Gospodarek) [564117]
  - [x86] Fetch valid frequencies for powernow_k8.o from ACPI _PST table (Bhavna Sarathy) [464630]
  - [s390x] ptrace: fix return value of do_syscall_trace_enter() (Hendrik Brueckner) [588216]
  - [fs] gfs2: fix oops while copying from ext3 to gfs2 (Abhijith Das) [586009] {CVE-2010-1436}
  - [virt] virtio: console: Accept console size along with resize control message (Amit Shah) [589307]
  - [virt] virtio: console: Store each console's size in the console structure (Amit Shah) [589307]
  - [virt] virtio: console: Resize console port 0 on config intr only if multiport is off (Amit Shah) [589307]
  - [sound] ac97: Add IBM ThinkPad R40e to Headphone/Line Jack Sense blacklist (Stanislaw Gruszka) [584757]
  - [sound] ac97: Add Toshiba P500 to ac97 jack sense blacklist (Stanislaw Gruszka) [584757]
  - [x86] amd: Restrict usage of c1e_idle() (Stanislaw Gruszka) [584757]
  - [x86] Fix placement of FIX_OHCI1394_BASE (Stanislaw Gruszka) [584757]
  - [net] netfilter: xt_recent: fix regression in rules using a zero hit_count (Stanislaw Gruszka) [584757]
  - [kernel] softlockup: Stop spurious softlockup messages due to overflow (Stanislaw Gruszka) [584757]
  - [kernel] cpuset: fix the problem that cpuset_mem_spread_node() returns an offline node (Stanislaw Gruszka) [584757]
  - [pci] cleanup error return for pcix get and set mmrbc functions (Stanislaw Gruszka) [584757]
  - [pci] fix access of PCI_X_CMD by pcix get and set mmrbc functions (Stanislaw Gruszka) [584757]
  - [pci] fix return value from pcix_get_max_mmrbc() (Stanislaw Gruszka) [584757]
  - [net] if_tunnel.h: add missing ams/byteorder.h include (Stanislaw Gruszka) [584757]
  - [netdrv] jme: Protect vlgrp structure by pause RX actions (Stanislaw Gruszka) [584757]
  - [netdrv] jme: Fix VLAN memory leak (Stanislaw Gruszka) [584757]
  - [usb] option: add support for a new CMOTECH device to usb/serial/option (Stanislaw Gruszka) [584757]
  - [usb] option: move hardcoded PID to a macro in usb/serial/option (Stanislaw Gruszka) [584757]
  - [usb] option: fix incorrect manufacturer name in usb/serial/option: MAXON->CMOTECH (Stanislaw Gruszka) [584757]
  - [usb] xHCI: re-initialize cmd_completion (Stanislaw Gruszka) [584757]
  - [usb] EHCI: adjust ehci_iso_stream for changes in ehci_qh (Stanislaw Gruszka) [584757]
  - [usb] EHCI: fix ITD list order (Stanislaw Gruszka) [584757]
  - [tty] Take a 256 byte padding into account when buffering below sub-page units (Stanislaw Gruszka) [584757]
  - [tty] Keep the default buffering to sub-page units (Stanislaw Gruszka) [584757]
  - [mm] tmpfs: cleanup mpol_parse_str() (Stanislaw Gruszka) [584757]
  - [perf] Make the install relative to DESTDIR if specified (Stanislaw Gruszka) [584757]
  - [perf] perf_event: Fix oops triggered by cpu offline/online (Stanislaw Gruszka) [584757]
  - [isdn] gigaset: prune use of tty_buffer_request_room (Stanislaw Gruszka) [584757]
  - [isdn] gigaset: correct clearing of at_state strings on RING (Stanislaw Gruszka) [584757]
  - [sound] hda: Disable MSI for Nvidia controller (Stanislaw Gruszka) [584757]
  - [sound] hda: Fix 0 dB offset for HP laptops using CX20551 (Stanislaw Gruszka) [584757]
  - [sound] hda: Fix secondary ADC of ALC260 basic model (Stanislaw Gruszka) [584757]
  - [virt] virtio: fix out of range array access (Stanislaw Gruszka) [584757]
  - [ipc] mqueue: fix mq_open() file descriptor leak on user-space processes (Stanislaw Gruszka) [584757]
  - [security] sysctl: require CAP_SYS_RAWIO to set mmap_min_addr (Stanislaw Gruszka) [584757]
  - [kernel] sched: Mark boot-cpu active before smp_init() (Stanislaw Gruszka) [584757]
  - [pci] add support for 82576NS serdes to existing SR-IOV quirk (Stanislaw Gruszka) [584757]
  - [v4l] DVB: em28xx-dvb: fix memleak in dvb_fini() (Stanislaw Gruszka) [584757]
  - [pci] unconditionally clear AER uncorr status register during cleanup (Stanislaw Gruszka) [584757]
  - [tracing] Do not record user stack trace from NMI context (Stanislaw Gruszka) [584757]
  - [tracing] Disable buffer switching when starting or stopping trace (Stanislaw Gruszka) [584757]
  - [tracing] Use same local variable when resetting the ring buffer (Stanislaw Gruszka) [584757]
  - [tracing] function-graph: Init curr_ret_stack with ret_stack (Stanislaw Gruszka) [584757]
  - [tracing] ring-buffer: Move disabled check into preempt disable section (Stanislaw Gruszka) [584757]
  - [input] i8042: add ALDI/MEDION netbook E1222 to qurik reset table (Stanislaw Gruszka) [584757]
  - [net] netfilter: xt_recent: fix false match (Stanislaw Gruszka) [580067]
  - [net] netfilter: xt_recent: fix buffer overflow (Stanislaw Gruszka) [580067]
  - [tracing] oprofile/x86: fix msr access to reserved counters (Stanislaw Gruszka) [580067]
  - [tracing] oprofile/x86: use kzalloc() instead of kmalloc() (Stanislaw Gruszka) [580067]
  - [tracing] oprofile/x86: remove node check in AMD IBS initialization (Stanislaw Gruszka) [580067]
  - [tracing] oprofile: remove tracing build dependency (Stanislaw Gruszka) [580067]
  - [x86] oprofile: fix perfctr nmi reservation for mulitplexing (Stanislaw Gruszka) [580067]
  - [netdrv] via-rhine: Fix scheduling while atomic bugs (Stanislaw Gruszka) [580067]
  - [net] ipv6: conntrack: Add member of user to nf_ct_frag6_queue structure (Stanislaw Gruszka) [580067]
  - [net] Remove bogus IGMPv3 report handling (Stanislaw Gruszka) [580067]
  - [net] sysfs: Use rtnl_trylock in wireless sysfs methods (Stanislaw Gruszka) [580067]
  - [net] Fix sysctl restarts (Stanislaw Gruszka) [580067]
  - [mm] slab: initialize unused alien cache entry as NULL at alloc_alien_cache() (Stanislaw Gruszka) [580067]
  - [v4l] DVB: cxusb: Select all required frontend and tuner modules (Stanislaw Gruszka) [580067]
  - [v4l] dvb: l64781.ko broken with gcc 4.5 (Stanislaw Gruszka) [580067]
  - [v4l] DVB: uvcvideo: Fix controls blacklisting (Stanislaw Gruszka) [580063]
  - [net] netfilter: nf_conntrack: fix hash resizing with namespaces (Stanislaw Gruszka) [580065]
  - [net] netfilter: nf_conntrack: restrict runtime expect hashsize modifications (Stanislaw Gruszka) [580065]
  - [net] netfilter: xtables: fix conntrack match v1 ipt-save output (Stanislaw Gruszka) [580063]
  - [v4l] DVGB: DocBook/media: create links for included sources (Stanislaw Gruszka) [580063]
  - [v4l] DVB: DocBook/media: copy images after building HTML (Stanislaw Gruszka) [580063]
  - [v4l] DVB: dvb-core: fix initialization of feeds list in demux filter (Stanislaw Gruszka) [580065]
  - [dma] ioat: fix infinite timeout checking in ioat2_quiesce (Stanislaw Gruszka) [580065]
  - [v4l] DVB: smsusb: add autodetection support for five additional Hauppauge USB IDs (Stanislaw Gruszka) [580063]
  - [x86] cpufreq: Fix use after free of struct powernow_k8_data (Stanislaw Gruszka) [580065]
  - [regulator] Fix display of null constraints for regulators (Stanislaw Gruszka) [580065]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-25.el6]
changelog:
  - [fs] exec: Fix 'flush_old_exec()/setup_new_exec()' split (Jiri Olsa) [586024] {CVE-2010-0307}
  - [powerpc] TIF_ABI_PENDING bit removal (Jiri Olsa) [586024] {CVE-2010-0307}
  - [x86] set_personality_ia32() misses force_personality32 (Jiri Olsa) [586024] {CVE-2010-0307}
  - [x86] get rid of the TIF_ABI_PENDING bit (Jiri Olsa) [586024] {CVE-2010-0307}
  - [kernel] split 'flush_old_exec' into two functions (Jiri Olsa) [586024] {CVE-2010-0307}
  - [net] sctp: fix skb_over_panic from processing too many unknown params (Neil Horman) [584659] {CVE-2010-1173}
  - [virt] kvm: fix vmx null pointer dereference (Eduardo Habkost) [570534] {CVE-2010-0435}
  - [fs] gfs2: fix quota state reporting (Christoph Hellwig) [589945]
  - [fs] gfs2: fix quota file size not a multiple of struct gfs2_quota (Abhijith Das) [589813]
  - [x86] Use physical mode for IBM Summit platforms (John Villalovos) [558397]
  - [mm] page allocator: update NR_FREE_PAGES only when necessary (Stanislaw Gruszka) [579693]
  - [mm] memcg: ensure list is empty at rmdir (Stanislaw Gruszka) [579693]
  - [video] revert "drivers/video/s3c-fb.c: fix clock setting for Samsung SoC Framebuffer" (Stanislaw Gruszka) [579693]
  - [v4l] DVB: gspca - sunplus: Fix bridge exchanges (Stanislaw Gruszka) [580062]
  - [hwmon] fschmd: Fix a memleak on multiple opens of /dev/watchdog (Stanislaw Gruszka) [580063]
  - [sound] hda: Fix HP T5735 automute (Stanislaw Gruszka) [580063]
  - [sound] hda: Fix quirk for Maxdata obook4-1 (Stanislaw Gruszka) [580063]
  - [sound] ice1724: Patch for suspend/resume for ESI Juli@ (Stanislaw Gruszka) [580063]
  - [sound] usb-audio: Avoid Oops after disconnect (Stanislaw Gruszka) [580065]
  - [sound] ctxfi: fix PTP address initialization (Stanislaw Gruszka) [580065]
  - [hwmon] lm78: Request I/O ports individually for probing (Stanislaw Gruszka) [580065]
  - [hwmon] w83781d: Request I/O ports individually for probing (Stanislaw Gruszka) [580065]
  - [hwmon] tmp421: Fix temperature conversions (Stanislaw Gruszka) [580067]
  - [sound] via82xx: add quirk for D1289 motherboard (Stanislaw Gruszka) [580067]
  - [hwmon] tmp421: Restore missing inputs (Stanislaw Gruszka) [580067]
  - [sound] USB MIDI support for Access Music VirusTI (Stanislaw Gruszka) [580067]
  - [sound] hda-intel: Add position_fix quirk for ASUS M2V-MX SE (Stanislaw Gruszka) [580067]
  - [sound] pcm core: fix fifo_size channels interval check (Stanislaw Gruszka) [580067]
  - [sound] hda: Use 3stack quirk for Toshiba Satellite L40-10Q (Stanislaw Gruszka) [580067]
  - [bluetooth] Fix potential bad memory access with sysfs files (Stanislaw Gruszka) [584757]
  - [hwmon] coretemp: Add missing newline to dev_warn() message (Stanislaw Gruszka) [584757]
  - [bluetooth] Fix kernel crash on L2CAP stress tests (Stanislaw Gruszka) [584757]
  - [input] wacom: ensure the device is initialized properly upon resume (Stanislaw Gruszka) [584757]
  - [sound] hda: Fix input source elements of secondary ADCs on Realtek (Stanislaw Gruszka) [584757]
  - [x86] nmi watchdog: use generic interrupt source to determine deadlocks (Don Zickus) [574570]
  - [dm] eliminate some holes in data structures (Mike Snitzer) [586089]
  - [dm] ioctl: introduce flag indicating uevent was generated (Mike Snitzer) [586089]
  - [dm] free dm_io before bio_endio not after (Mike Snitzer) [586089]
  - [dm] table: remove unused dm_get_device range parameters (Mike Snitzer) [586089]
  - [dm] ioctl: only issue uevent on resume if state changed (Mike Snitzer) [586089]
  - [dm] raid1: always return error if all legs fail (Mike Snitzer) [586089]
  - [dm] mpath: refactor pg_init (Mike Snitzer) [586089]
  - [dm] mpath: wait for pg_init completion when suspending (Mike Snitzer) [586089]
  - [dm] mpath: hold io until all pg_inits completed (Mike Snitzer) [586089]
  - [dm] mpath: avoid storing private suspended state (Mike Snitzer) [586089]
  - [dm] document when snapshot has finished merging (Mike Snitzer) [586089]
  - [dm] table: remove dm_get from dm_table_get_md (Mike Snitzer) [586089]
  - [dm] mpath: skip activate_path for failed paths (Mike Snitzer) [586089]
  - [dm] mpath: pass struct pgpath to pg init done (Mike Snitzer) [586089]
  - [netdrv] mac80211: fix deferred hardware scan requests (John Linville) [561762]
  - [x86] asus-laptop: add Lenovo SL hotkey support (Stanislaw Gruszka) [579693]
  - [input] pmouse: move Sentelic probe down the list (Stanislaw Gruszka) [579693]
  - [pci] cardbus: Add a fixup hook and fix powerpc (Stanislaw Gruszka) [579693]
  - [mfd] Correct WM835x ISINK ramp time defines (Stanislaw Gruszka) [579693]
  - [mfd] WM835x GPIO direction register is not locked (Stanislaw Gruszka) [579693]
  - [edac] i5000_edac critical fix panic out of bounds (Stanislaw Gruszka) [579693]
  - [i2c] i2c-tiny-usb: Fix on big-endian systems (Stanislaw Gruszka) [580065]
  - [x86] thinkpad-acpi: fix bluetooth/wwan resume (Stanislaw Gruszka) [580067]
  - [v4l] DVB: bttv: Move I2C IR initialization (Stanislaw Gruszka) [580067]
  - [bluetooth] Fix sleeping function in RFCOMM within invalid context (Stanislaw Gruszka) [584757]
  - [i2c] i2c-i801: Don't use the block buffer for I2C block writes (Stanislaw Gruszka) [584757]
  - [s390x] vdso: use ntp adjusted clock multiplier (Hendrik Brueckner) [575728]
  - [s390x] timekeeping: Fix clock_gettime vsyscall time warp (Hendrik Brueckner) [575728]
  - [s390x] timekeeping: Fix accumulation bug triggered by long delay (Hendrik Brueckner) [575728]
  - [netdrv] igb: fix warning in drivers/net/igb/igb_main.c (Stefan Assmann) [589272]
  - [x86] Re-get cfg_new in case reuse/move irq_desc (Stanislaw Gruszka) [580065 583555]
  - [hwmon] adt7462: fix wrong ADT7462_VOLT_COUNT (Stanislaw Gruszka) [580065]
  - [fs] exec.c: fix initial stack reservation (Stanislaw Gruszka) [580067]
  - [fs] exec.c: restrict initial stack space expansion to rlimit (Stanislaw Gruszka) [580065]
  - [kernel] resource: add helpers for fetching rlimits (Stanislaw Gruszka) [580065]
  - [tracing] ext4: Convert some events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert some jbd2 events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert some block events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert some power events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert some workqueue events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert softirq events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert some kmem events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert module refcnt events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] xfs: use DECLARE_EVENT_CLASS (Mike Snitzer) [588108]
  - [tracing] Harmonize event field names and print output names (Mike Snitzer) [588108]
  - [tracing] Add DEFINE_EVENT(), DEFINE_SINGLE_EVENT() support to docbook (Mike Snitzer) [588108]
  - [block] blk-cgroup: config options re-arrangement (Vivek Goyal) [586182]
  - [block] blkio: Fix another BUG_ON() crash due to cfqq movement across groups (Vivek Goyal) [586182]
  - [block] blkio: Fix blkio crash during rq stat update (Vivek Goyal) [586182]
  - [block] blkio: Initialize blkg->stats_lock for the root cfqg too (Vivek Goyal) [586182]
  - [block] blkio: Fix compile errors (Vivek Goyal) [586182]
  - [block] Update to io-controller stats (Vivek Goyal) [586182]
  - [block] io-controller: Add a new interface "weight_device" for IO-Controller (Vivek Goyal) [586182]
  - [block] cfq-iosched: Fix the incorrect timeslice accounting with forced_dispatch (Vivek Goyal) [586182]
  - [block] blkio: Add more debug-only per-cgroup stats (Vivek Goyal) [586182]
  - [block] blkio: Add io_queued and avg_queue_size stats (Vivek Goyal) [586182]
  - [block] blkio: Add io_merged stat (Vivek Goyal) [586182]
  - [block] blkio: Changes to IO controller additional stats patches (Vivek Goyal) [586182]
  - [block] expose the statistics in blkio.time and blkio.sectors for the root cgroup (Vivek Goyal) [586182]
  - [block] blkio: Increment the blkio cgroup stats for real now (Vivek Goyal) [586182]
  - [block] blkio: Add io controller stats like (Vivek Goyal) [586182]
  - [block] blkio: Remove per-cfqq nr_sectors as we'll be passing (Vivek Goyal) [586182]
  - [block] cfq-iosched: Add additional blktrace log messages in CFQ for easier debugging (Vivek Goyal) [586182]
  - [block] cfq-iosched: requests "in flight" vs "in driver" clarification (Vivek Goyal) [586182]
  - [ppc] cxgb3: Wait longer for control packets on initialization (Steve Best) [588848]
  - [virt] KVM: convert ioapic lock to spinlock (Marcelo Tosatti) [588811]
  - [virt] KVM: fix the handling of dirty bitmaps to avoid overflows (Marcelo Tosatti) [588811]
  - [virt] KVM: MMU: fix kvm_mmu_zap_page() and its calling path (Marcelo Tosatti) [588811]
  - [virt] KVM: VMX: Save/restore rflags.vm correctly in real mode (Marcelo Tosatti) [588811]
  - [virt] KVM: Dont spam kernel log when injecting exceptions due to bad cr writes (Marcelo Tosatti) [588811]
  - [virt] KVM: SVM: Fix memory leaks that happen when svm_create_vcpu() fails (Marcelo Tosatti) [588811]
  - [virt] KVM: VMX: Update instruction length on intercepted BP (Marcelo Tosatti) [588811]
  - [drm] nouveau: initial eDP support + additional fixes (Ben Skeggs) [588581]
  - [s390x] zcore: Fix reipl device detection (Hendrik Brueckner) [587025]
  - [connector] Delete buggy notification code (Stanislaw Gruszka) [580064 586025] {CVE-2010-0410}
  - [netdrv] ath9k: fix beacon slot/buffer leak (Stanislaw Gruszka) [580064]
  - [fusion] mptsas: Fix issue with chain pools allocation on katmai (Stanislaw Gruszka) [580064]
  - [sunrpc] Fix a potential memory leak in auth_gss (Stanislaw Gruszka) [584757]
  - [tracing] scsi: Enhance SCSI command tracing (Mike Snitzer) [588108]
  - [tracing] scsi: Add missing verify command definitions (Mike Snitzer) [588108]
  - [tracing] scsi: ftrace based SCSI command tracing (Mike Snitzer) [588108]
  - [tracing] add __print_hex() (Mike Snitzer) [588108]
  - [tracing] Add notrace to TRACE_EVENT implementation functions (Mike Snitzer) [588108]
  - [tracing] Move a printk out of ftrace_raw_reg_event_foo() (Mike Snitzer) [588108]
  - [tracing] Rename TRACE_EVENT_TEMPLATE() to DECLARE_EVENT_CLASS() (Mike Snitzer) [588108]
  - [tracing] Convert some sched trace events to DEFINE_EVENT and _PRINT (Mike Snitzer) [588108]
  - [tracing] Create new DEFINE_EVENT_PRINT (Mike Snitzer) [588108]
  - [tracing] Create new TRACE_EVENT_TEMPLATE (Mike Snitzer) [588108]
  - [tracing] additional interface changes and fixes (Mike Snitzer) [588108]
  - [tracing] Ftrace dynamic ftrace_event_call support (Mike Snitzer) [588108]
  - [fs] quota: fix WARN_ON when quota reservations get out of sync (Eric Sandeen) [581951]
  - [scsi] fcoe: sync with upstream (Mike Christie) [577049 578328]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-24.el6]
changelog:
  - [fs] ecryptfs: disallow ecryptfs as underlying filesystem (Eric Sandeen) [585185]
  - [mm] Fix Section Mismatch warning in put_page_bootmem() (Prarit Bhargava) [587040]
  - [mm] transparent hugepage support update (Andrea Arcangeli) [556572]
  - [netdrv] ath9k: revert fb6635f6c114313f246cc34abc0b677264a765ed (Aristeu Rozanski) [584757]
  - [virt] KVM: take srcu lock before call to complete_pio() (Gleb Natapov) [585887]
  - [virt] virtio: Fix GFP flags passed from the virtio balloon driver (Amit Shah) [584680]
  - [x86] Check chip_data value in irq_force_complete_move() (Prarit Bhargava) [564398]
  - [x86] nmi_watchdog: use __cpuinit for 32-bit nmi_watchdog_default (Prarit Bhargava) [586967]
  - [acpi] Fall back to manually changing SCI_EN (Matthew Garrett) [587008]
  - [pci] Ensure that devices are resumed properly (Matthew Garrett) [586780]
  - [serial] usb-serial: Rework and update qcserial (Matthew Garrett) [587009]
  - [scsi] scsi_lib: Fix bug in completion of bidi commands (Stanislaw Gruszka) [580064]
  - [net] phonet: add check for null pernet mem pointer in notifier (Jiri Pirko) [573122]
  - [nfs] Ensure that writeback_single_inode() calls write_inode() when syncing (Jeff Layton) [584382]
  - [serial] 8250_pnp: use wildcard for serial Wacom tablets (Stanislaw Gruszka) [580062]
  - [fs] ext4: check s_log_groups_per_flex in online resize code (Eric Sandeen) [519461]
  - [x86] Fix sched_clock_cpu for systems with unsynchronized TSC (Prarit Bhargava) [568344]
  - [x86] Reenable TSC sync check at boot, even with NONSTOP_TSC (Prarit Bhargava) [568344]
  - [mm] slab: add memory hotplug support (Prarit Bhargava) [562880]
  - [x86] Set hotpluggable nodes in nodes_possible_map (Prarit Bhargava) [568344]
  - [x86] acpi: Auto Online Hot-Added Memory (Prarit Bhargava) [568344]
  - [mm] memory hotplug: fix a bug on /dev/mem for 64-bit kernels (Prarit Bhargava) [568344]
  - [mm] update all PGDs for direct mapping changes on 64 bit (Prarit Bhargava) [568344]
  - [x86] acpi: Map hotadded cpu to correct node (Prarit Bhargava) [568344]
  - [ipmi] Change timeout and event poll to one second (Matthew Garrett) [584106]
  - [ipmi] Attempt to register multiple SIs of the same type (Matthew Garrett) [584106]
  - [ipmi] Reduce polling (Matthew Garrett) [584106]
  - [ipmi] Reduce polling when interrupts are available (Matthew Garrett) [584106]
  - [ipmi] Change device discovery order (Matthew Garrett) [584106]
  - [ipmi] Only register one si per bmc (Matthew Garrett) [584106]
  - [ipmi] Split device discovery and registration (Matthew Garrett) [584106]
  - [ipmi] Change addr_source to an enum rather than strings (Matthew Garrett) [584106]
  - [drm] radeon: rs780/rs880: MSI quirk fixes (Dave Airlie) [586168]
  - [drm] radeon/kms: MC + watermark fixes + reset (Dave Airlie) [586168]
  - [drm] radeon/kms/evergreen: add evergreen stage 2 - HPD irq (Dave Airlie) [580757]
  - [drm] radeon: fixup radeon_asic struct c/h files (Dave Airlie) [586168]
  - [drm] radeon/kms: misc + tv dac fixes (Dave Airlie) [586168]
  - [drm] radeon/kms: squash upstream HDMI audio commits (Dave Airlie) [586168]
  - [drm] kms/radeon: Integrated graphics fixes (Dave Airlie) [586168]
  - [drm] radeon/kms: spread spectrum + pll fixes (Dave Airlie) [586168]
  - [drm] radeon: add initial evergreen support + fixes (Dave Airlie) [580757]
  - [kernel] tty: tty->pgrp races (Jiri Olsa) [586022]
  - [netdrv] kernel: fix the r8169 frame length check error (Jiri Olsa) [586017] {CVE-2009-4537}


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-23.el6]
changelog:
  - [doc] add the documentation for mpol=local (Stanislaw Gruszka) [584757]
  - [fs] tmpfs: handle MPOL_LOCAL mount option properly (Stanislaw Gruszka) [584757]
  - [fs] tmpfs: mpol=bind:0 don't cause mount error (Stanislaw Gruszka) [584757]
  - [netdrv] tun: orphan an skb on tx (Michael S. Tsirkin) [584428]
  - [s390x] vmalloc: IPL failure with enabled memory cgroups (Hendrik Brueckner) [580918]
  - [netdrv] b43: fall back gracefully to PIO mode after fatal DMA errors (John Linville) [583069]
  - [netdrv] b43: Allow PIO mode to be selected at module load (John Linville) [583069]
  - [netdrv] b43: Remove reset after fatal DMA error (John Linville) [583069]
  - [netdrv] b43: Optimize PIO scratchbuffer usage (John Linville) [583069]
  - [fs] vfs: get_sb_single() - do not pass options twice (Stanislaw Gruszka) [580063]
  - [fs] tmpfs: fix oops on mounts with mpol=default (Stanislaw Gruszka) [584757]
  - [kernel] cred.c: use kmem_cache_free (Stanislaw Gruszka) [580064]
  - [fs] partition/msdos: fix unusable extended partition for > 512B sector (Stanislaw Gruszka) [584757]
  - [fs] partitions/msdos: add support for large disks (Stanislaw Gruszka) [584757]
  - [fs] eCryptfs: Add getattr function (Stanislaw Gruszka) [580065]
  - [fs] ecryptfs: initialize private persistent file before dereferencing pointer (Stanislaw Gruszka) [580062]
  - [fs] ecryptfs: use after free (Stanislaw Gruszka) [580062]
  - [ppc] Track backing pages used allocated by vmemmap_populate() (Steve Best) [547854]
  - [netdrv] be2net: recent bug fixes from upstream (Ivan Vecera) [583766]
  - [sunrpc] handle allocation errors from __rpc_lookup_create() (Stanislaw Gruszka) [584757]
  - [nfs] Prevent another deadlock in nfs_release_page() (Stanislaw Gruszka) [584757]
  - [nfs] NFSv4: Don't ignore the NFS_INO_REVAL_FORCED flag in nfs_revalidate_inode() (Stanislaw Gruszka) [584757]
  - [nfs] Fix an allocation-under-spinlock bug (Stanislaw Gruszka) [580067]
  - [sunrpc] Handle EINVAL error returns from the TCP connect operation (Stanislaw Gruszka) [580067]
  - [sunrpc] remove unnecessary svc_xprt_put (Stanislaw Gruszka) [580067]
  - [x86] Add iMac9,1 to pci_reboot_dmi_table (Stanislaw Gruszka) [580067]
  - [rtc] rtc-core: fix memory leak (Stanislaw Gruszka) [580067]
  - [mm] readahead: introduce FMODE_RANDOM for POSIX_FADV_RANDOM (Stanislaw Gruszka) [580067]
  - [fs] fix LOOKUP_FOLLOW on automount "symlinks" (Stanislaw Gruszka) [580067]
  - [nfs] Too many GETATTR and ACCESS calls after direct I/O (Stanislaw Gruszka) [580065]
  - [virt] kvmclock: count total_sleep_time when updating guest clock (Stanislaw Gruszka) [580065]
  - [kernel] Export the symbol of getboottime and mmonotonic_to_bootbased (Stanislaw Gruszka) [580065]
  - [nfs] NFS: Fix the mapping of the NFSERR_SERVERFAULT error (Stanislaw Gruszka) [580065]
  - [nfs] NFS: Fix a umount race (Stanislaw Gruszka) [580065]
  - [x86] amd-iommu: Fix possible integer overflow (Stanislaw Gruszka) [580064]
  - [ata] libata: retry FS IOs even if it has failed with AC_ERR_INVALID (Stanislaw Gruszka) [580064]
  - [firewire] firewire: ohci: fix crashes with TSB43AB23 on 64bit systems (Stanislaw Gruszka) [580064]
  - [ata] pata_hpt3x2n: always stretch UltraDMA timing (Stanislaw Gruszka) [580067]
  - [cgroup] memcg: fix oom killing a child process in an other cgroup (Stanislaw Gruszka) [580067]
  - [ata] libata: retry link resume if necessary (Stanislaw Gruszka) [580064]
  - [firewire] core: add_descriptor size check (Stanislaw Gruszka) [580064]
  - [netdrv] iwlwifi: fix scan race (Stanislaw Gruszka) [584759]
  - [netdrv] iwlwifi: clear all tx queues when firmware ready (Stanislaw Gruszka) [584759]
  - [netdrv] iwlwifi: need check for valid qos packet before free (Stanislaw Gruszka) [584759]
  - [netdrv] mac80211: tear down all agg queues when restart/reconfig hw (Stanislaw Gruszka) [584759]
  - [netdrv] mac80211: move netdev queue enabling to correct spot (Stanislaw Gruszka) [584759]
  - [netdrv] setup correct int pipe type in ar9170_usb_exec_cmd (Stanislaw Gruszka) [584759]
  - [netdrv] iwlwifi: range checking issue (Stanislaw Gruszka) [584759]
  - [netdrv] iwlwifi: fix nfreed-- (Stanislaw Gruszka) [584759]
  - [netdrv] iwlwifi: counting number of tfds can be free for 4965 (Stanislaw Gruszka) [584759]
  - [netdrv] b43: Workaround circular locking in hw-tkip key update callback (Stanislaw Gruszka) [584757]
  - [ata] ahci: use BIOS date in broken_suspend list (Stanislaw Gruszka) [584757]
  - [netdrv] mac80211: Reset dynamic ps timer in Rx path (Stanislaw Gruszka) [584757]
  - [netdrv] ath9k: Enable IEEE80211_HW_REPORTS_TX_ACK_STATUS flag for ath9k (Stanislaw Gruszka) [584757]
  - [netdrv] mac80211: Retry null data frame for power save (Stanislaw Gruszka) [584757]
  - [netdrv] ath9k: Enable TIM timer interrupt only when needed. (Stanislaw Gruszka) [584757]
  - [netdrv] ath9k: fix BUG_ON triggered by PAE frames (Stanislaw Gruszka) [584757]
  - [netdrv] iwlwifi: Silence tfds_in_queue message (Stanislaw Gruszka) [584757]
  - [netdrv] iwlwifi: use dma_alloc_coherent (Stanislaw Gruszka) [584757]
  - [netdrv] wl1251: fix potential crash (Stanislaw Gruszka) [584757]
  - [block] readahead: add blk_run_backing_dev (Stanislaw Gruszka) [584757]
  - [netdrv] ath9k: fix lockdep warning when unloading module (Stanislaw Gruszka) [584757]
  - [scsi] mvsas: add support for Adaptec ASC-1045/1405 SAS/SATA HBA (Stanislaw Gruszka) [584757]
  - [netdrv] ath5k: fix setup for CAB queue (Stanislaw Gruszka) [584757]
  - [netdrv] ath5k: dont use external sleep clock in AP mode (Stanislaw Gruszka) [584757]
  - [netdrv] tg3: Fix tg3_poll_controller() passing wrong pointer to tg3_interrupt() (Stanislaw Gruszka) [584757]
  - [netdrv] b43/b43legacy: Wake queues in wireless_core_start (Stanislaw Gruszka) [580067]
  - [netdrv] ath5k: use correct packet type when transmitting (Stanislaw Gruszka) [580067]
  - [netdrv] ath9k: disable RIFS search for AR91xx based chips (Stanislaw Gruszka) [580067]
  - [netdrv] ath9k: fix rate control fallback rate selection (Stanislaw Gruszka) [580067]
  - [netdrv] ath9k: fix beacon timer restart after a card reset (Stanislaw Gruszka) [580067]
  - [netdrv] p54usb: Add the USB ID for Belkin (Accton) FD7050E ver 1010ec (Stanislaw Gruszka) [580067]
  - [netdrv] rndis_wlan: disable stall workaround (Stanislaw Gruszka) [580067]
  - [netdrv] rndis_wlan: fix buffer overflow in rndis_query_oid (Stanislaw Gruszka) [580067]
  - [netdrv] rndis_wlan: handle NL80211_AUTHTYPE_AUTOMATIC (Stanislaw Gruszka) [580067]
  - [netdrv] sky2: fix transmit DMA map leakage (Stanislaw Gruszka) [580067]
  - [netdrv] airo: fix setting zero length WEP key (Stanislaw Gruszka) [580067]
  - [netdrv] mac80211: quit addba_resp_timer if Tx BA session is torn down (Stanislaw Gruszka) [580067]
  - [netdrv] iwlwifi: sanity check before counting number of tfds can be free (Stanislaw Gruszka) [580067]
  - [netdrv] iwlwifi: set HT flags after channel in rxon (Stanislaw Gruszka) [580067]
  - [netdrv] iwlwifi: error checking for number of tfds in queue (Stanislaw Gruszka) [580067]
  - [netdrv] iwlwifi: Fix to set correct ht configuration (Stanislaw Gruszka) [580065]
  - [netdrv] mac80211: Fix probe request filtering in IBSS mode (Stanislaw Gruszka) [580065]
  - [netdrv] ath9k: Fix sequence numbers for PAE frames (Stanislaw Gruszka) [580065]
  - [netdrv] b43: Fix throughput regression (Stanislaw Gruszka) [580065]
  - [netdrv] rtl8187: Add new device ID (Stanislaw Gruszka) [580065]
  - [ata] ahci: add Acer G725 to broken suspend list (Stanislaw Gruszka) [580065]
  - [scsi] mptfusion: mptscsih_abort return value should be SUCCESS instead of value 0 (Stanislaw Gruszka) [580065]
  - [nfs] Fix an Oops when truncating a file (Stanislaw Gruszka) [580065]
  - [block] cciss: Make cciss_seq_show handle holes in the h->drv[] array (Stanislaw Gruszka) [580065]
  - [netdrv] ath9k: fix eeprom INI values override for 2GHz-only cards (Stanislaw Gruszka) [580064]
  - [netdrv] mac80211: fix NULL pointer dereference when ftrace is enabled (Stanislaw Gruszka) [580064]
  - [block] fix bugs in bio-integrity mempool usage (Stanislaw Gruszka) [580064]
  - [netdrv] sky2: Fix oops in sky2_xmit_frame() after TX timeout (Stanislaw Gruszka) [580064]
  - [netdrv] iwlwifi: set default aggregation frame count limit to 31 (Stanislaw Gruszka) [580064]
  - [netdrv] e1000/e1000e: don't use small hardware rx buffers (Stanislaw Gruszka) [580064]
  - [netdrv] e1000: enhance frame fragment detection (Stanislaw Gruszka) [580064]
  - [mm] rmap: anon_vma_prepare() can leak anon_vma_chain (Rik van Riel) [579936]
  - [mm] rmap: add exclusively owned pages to the newest anon_vma (Rik van Riel) [579936]
  - [mm] anonvma: when setting up page->mapping, we need to pick the _oldest_ anonvma (Rik van Riel) [579936]
  - [mm] anon_vma: clone the anon_vma chain in the right order (Rik van Riel) [579936]
  - [mm] vma_adjust: fix the copying of anon_vma chains (Rik van Riel) [579936]
  - [mm] Simplify and comment on anon_vma re-use for anon_vma_prepare() (Rik van Riel) [579936]
  - [mm] rmap: fix anon_vma_fork() memory leak (Rik van Riel) [579936]
  - [s390x] nss: add missing .previous statement to asm function (Hendrik Brueckner) [581521]
  - [ata] pata_mavell: correct check of AHCI config option (David Milburn) [584483]
  - [fs] ext4: Issue the discard operation before releasing the blocks (Eric Sandeen) [575884]
  - [scsi] 3w_sas: new driver (Tomas Henzl) [572781]
  - [kernel] hrtimer: Tune hrtimer_interrupt hang logic (Marcelo Tosatti) [576355]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-22.el6]
changelog:
  - [netdrv] b43: ssb: do not read SPROM if it does not exist (John Linville) [574895]
  - [netdrv] igb: add support for Intel I350 Gigabit Network Connection (Stefan Assmann) [580727]
  - [kernel] exec: refactor how usermodehelpers work and modify core_pipe recursion check (Neil Horman) [557387]
  - [kernel] re-export page_is_ram() for crash module (Prarit Bhargava) [583032]
  - [x86] amd_iommu: allow iommu to complete dma transactions during transition to kdump kernel (Neil Horman) [577788]
  - [nfs] rsize and wsize settings ignored on v4 mounts (Steve Dickson) [582697]
  - [net] igmp: fix ip_mc_sf_allow race (Flavio Leitner) [578932]
  - [net] Remove skb_dma_map/unmap calls from drivers (Thomas Graf) [576690]
  - [scsi] mpt2sas: IOs needs to be pause until handles are refreshed for all device after recovery (Tomas Henzl) [577909]
  - [scsi] mpt2sas: Reworked scmd->result priority for _scsih_qcmd (Tomas Henzl) [577909]
  - [x86] Suppress stack overrun message for init_task (Prarit Bhargava) [582625]
  - [sunrpc] gss_krb5: Advertise rc4-hmac enctype support in the rpcsec_gss/krb5 upcall (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Add support for rc4-hmac encryption (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Use confounder length in wrap code (Steve Dickson) [498317]
  - [sunrpc] gssd_krb5: More arcfour-hmac support (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Save the raw session key in the context (Steve Dickson) [498317]
  - [sunrpc] gssd_krb5: arcfour-hmac support (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Advertise AES enctype support in the rpcsec_gss/krb5 upcall (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: add remaining pieces to enable AES encryption support (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: add support for new token formats in rfc4121 (Steve Dickson) [498317]
  - [sunrpc] xdr: Add an export for the helper function write_bytes_to_xdr_buf() (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Advertise triple-des enctype support in the rpcsec_gss/krb5 upcall (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: add support for triple-des encryption (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Add upcall info indicating supported kerberos enctypes (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: handle new context format from gssd (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: import functionality to derive keys into the kernel (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: add ability to have a keyed checksum (hmac) (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: introduce encryption type framework (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: prepare for new context format (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: split up functions in preparation of adding new enctypes (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Don't expect blocksize to always be 8 when calculating padding (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Added and improved code comments (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Introduce encryption type framework (Steve Dickson) [498317]
  - [mm] Fix vfree race resulting in kernel bug (Steven Whitehouse) [582522]
  - [ata] libata: fix accesses at LBA28 boundary (David Milburn) [582432]
  - [netdrv] b43: Rewrite DMA Tx status handling sanity checks (John Linville) [574533]
  - [char] tty: release_one_tty() forgets to put pids (Oleg Nesterov) [582077] {CVE-2010-1162}
  - [mm] oom: fix the unsafe usage of badness() in proc_oom_score() (Oleg Nesterov) [582069]
  - [netdrv] bonding: fix broken multicast with round-robin mode (Andy Gospodarek) [581644]
  - [x86] Remove sysfs_attr_init, sysfs_bin_attr_init changes introduced in last MCE patch (Prarit Bhargava) [581659]
  - [kernel] sched_getaffinity: allow less than NR_CPUS length (Oleg Nesterov) [578970]
  - [scsi] bfa sync w/ upstream (Rob Evers) [576716]
  - [gfs] GFS2: Fix ordering of ordered buffers (Steven Whitehouse) [581011]
  - [gfs] GFS2: Don't withdraw on partial rindex entries (Robert S Peterson) [581009]
  - [gfs] GFS2: livelock while reclaiming unlinked dinodes (Robert S Peterson) [570182]
  - [scsi] mpt2sas: Do not reset handle before calling _scsih_remove_device in RESCAN task after HBA RESET (Tomas Henzl) [572646]
  - [scsi] mpt2sas: Device removal algorithm in interrupt ctx (Tomas Henzl) [572646]
  - [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [572646]
  - [scsi] Upgrading version to 04.100.01.02 (Tomas Henzl) [572646]
  - [scsi] mpt2sas: modified _scsih_sas_device_find_by_handle/sas_address (Tomas Henzl) [572646]
  - [scsi] mpt2sas: RESCAN Barrier work is added in case of HBA reset (Tomas Henzl) [572646]
  - [scsi] update the version to 04.100.01.00 (Tomas Henzl) [572646]
  - [scsi] scsi_transport_sas: add support for transport layer retries (TLR) (Tomas Henzl) [572646]
  - [scsi] mpt2sas: Added raid transport support (Tomas Henzl) [572646]
  - [scsi] eliminate potential kmalloc failure in scsi_get_vpd_page() (Tomas Henzl) [572646]
  - [ata] libata: fix ata_id_logical_per_physical_sectors (David Milburn) [582021]
  - [netdrv] iwlwifi: Fix throughput stall issue in HT mode for 5000 (Stanislaw Gruszka) [580063]
  - [infiniband] IPoIB: Clear ipoib_neigh.dgid in ipoib_neigh_alloc() (Stanislaw Gruszka) [580063]
  - [net] cfg80211: fix channel setting for wext (Stanislaw Gruszka) [580063]
  - [net] mac80211: check that ieee80211_set_power_mgmt only handles STA interfaces (Stanislaw Gruszka) [580063]
  - [ata] ata_piix: fix MWDMA handling on PIIX3 (Stanislaw Gruszka) [580063]
  - [ata] ahci: disable SNotification capability for ich8 (Stanislaw Gruszka) [580063]
  - [netdrv] ar9170: Add support for D-Link DWA 160 A2 (Stanislaw Gruszka) [580063]
  - [netdrv] sfc: Fix DMA mapping cleanup in case of an error in TSO (Stanislaw Gruszka) [580063]
  - [fs] ext4: don't call write_inode under the journal (Josef Bacik) [576202]
  - [fs] ext4: Calculate metadata requirements more accurately (Josef Bacik) [576202]
  - [fs] ext4: Patch up how we claim metadata blocks for quota purposes (Josef Bacik) [576202]
  - [fs] ext4: fix potential quota deadlock (Josef Bacik) [576202]
  - [virt] virtio: console: Add support for nonblocking write()s (Amit Shah) [576241]
  - [virt] virtio: console: Rename wait_is_over() to will_read_block() (Amit Shah) [576241]
  - [virt] virtio: console: Don't always create a port 0 if using multiport (Amit Shah) [576241]
  - [virt] virtio: console: Use a control message to add ports (Amit Shah) [576241]
  - [virt] virtio: console: Move code around for future patches (Amit Shah) [576241]
  - [virt] virtio: console: Remove config work handler (Amit Shah) [576241]
  - [virt] virtio: console: Don't call hvc_remove() on unplugging console ports (Amit Shah) [576241]
  - [virt] virtio: console: Return -EPIPE to hvc_console if we lost the connection (Amit Shah) [576241]
  - [virt] virtio: console: Let host know of port or device add failures (Amit Shah) [576241]
  - [virt] virtio: console: Add a __send_control_msg() that can send messages without a valid port (Amit Shah) [576241]
  - [virt] hvc_console: Fix race between hvc_close and hvc_remove (Amit Shah) [577222]
  - [virt] virtio: console makes incorrect assumption about virtio API (Amit Shah) [576241]
  - [virt] MAINTAINERS: Put the virtio-console entry in correct alphabetical order (Amit Shah) [576241]
  - [virt] virtio: console: Fix early_put_chars usage (Amit Shah) [576241]
  - [virt] virtio: console: Check if port is valid in resize_console (Amit Shah) [576241]
  - [virt] virtio: console: Generate a kobject CHANGE event on adding 'name' attribute (Amit Shah) [576241]
  - [virt] virtio: console: Use better variable names for fill_queue operation (Amit Shah) [576241]
  - [virt] virtio: console: Fix type of 'len' as unsigned int (Amit Shah) [576241]
  - [vfs] rename block_fsync() to blkdev_fsync() (Jeff Moyer) [579781]
  - [char] raw: add an fsync method (Jeff Moyer) [579781]
  - [x86] Don't use logical-flat mode when more than 8 CPUs are possible (John Villalovos) [563798]
  - [net] Backport the new socket API recvmmsg, receive multiple messages (Arnaldo Carvalho de Melo) [579850]
  - [kernel] coredump: fix the page leak in dump_seek() (Oleg Nesterov) [580126]
  - [s390x] callhome: fix broken proc interface and activate comp ID (Hendrik Brueckner) [579482]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-21.el6]
changelog:
  - [x86] Update x86 MCE code (Prarit Bhargava) [580587]
  - [scsi] 3w-xxxx: Force 60 second timeout default (Tomas Henzl) [572778]
  - [netdrv] enic: update to upstream version 1.3.1.1 (Andy Gospodarek) [575950]
  - [netdrv] igb: Add support for 82576 ET2 Quad Port Server Adapter (Stefan Assmann) [577421]
  - [kernel] resource: Fix generic page_is_ram() for partial RAM pages (Prarit Bhargava) [578834]
  - [x86] Use the generic page_is_ram() (Prarit Bhargava) [578834]
  - [x86] Remove BIOS data range from e820 (Prarit Bhargava) [578834]
  - [kernel] Move page_is_ram() declaration to mm.h (Prarit Bhargava) [578834]
  - [kernel] Generic page_is_ram: use __weak (Prarit Bhargava) [578834]
  - [kernel] resources: introduce generic page_is_ram() (Prarit Bhargava) [578834]
  - [fs] GFS2: Clean up copying from stuffed files (Steven Whitehouse) [580857]
  - [netdrv] igb: restrict WoL for 82576 ET2 Quad Port Server Adapter (Stefan Assmann) [578804]
  - [drm] radeon/kms: move radeon KMS on/off switch out of staging (Dave Airlie) [580766]
  - [netdrv] p54: fix deadlocks under tx load (Michal Schmidt) [580557]
  - [gfs2] GFS2: Mandatory locking fix (Steven Whitehouse) [571606] {CVE-2010-0727}
  - [x86] AMD: Fix NULL pointer dereference on 32-bit (Bhavna Sarathy) [571474]
  - [x86] Add wbinvd SMP helper routines (Bhavna Sarathy) [571474]
  - [x86] L3 cache: Remove NUMA dependency (Bhavna Sarathy) [571474]
  - [x86] Calculate L3 indices (Bhavna Sarathy) [571474]
  - [x86] Add cache index disable sys attributes (Bhavna Sarathy) [571474]
  - [x86] Fix disabling of L3 cache indices (Bhavna Sarathy) [571474]
  - [fs] NFS: Avoid a deadlock in nfs_release_page (Jeff Layton) [525963]
  - [fs] NFS: Remove requirement for inode->i_mutex from nfs_invalidate_mapping (Jeff Layton) [525963]
  - [fs] NFS: Clean up nfs_sync_mapping (Jeff Layton) [525963]
  - [fs] NFS: Simplify nfs_wb_page() (Jeff Layton) [525963]
  - [fs] NFS: Replace __nfs_write_mapping with sync_inode() (Jeff Layton) [525963]
  - [fs] NFS: Simplify nfs_wb_page_cancel() (Jeff Layton) [525963]
  - [fs] NFS: Ensure inode is always marked I_DIRTY_DATASYNC, if it has unstable pages (Jeff Layton) [525963]
  - [fs] NFS: Run COMMIT as an asynchronous RPC call when wbc->for_background is set (Jeff Layton) [525963]
  - [fs] NFS: Reduce the number of unnecessary COMMIT calls (Jeff Layton) [525963]
  - [fs] NFS: Add a count of the number of unstable writes carried by an inode (Jeff Layton) [525963]
  - [fs] NFS: Cleanup - move nfs_write_inode() into fs/nfs/write.c (Jeff Layton) [525963]
  - [fs] writeback: pass writeback_control to ->write_inode (Jeff Layton) [525963]
  - [fs] writeback: make sure data is on disk before calling ->write_inode (Jeff Layton) [525963]
  - [fs] writeback: introduce wbc.for_background (Jeff Layton) [525963]
  - [netdrv] macvlan: fix support for multiple driver backends (Anthony Liguori) [553337 566731]
  - [netdrv] net/macvtap: add vhost support (Anthony Liguori) [553337 566731]
  - [netdrv] macvtap: add GSO/csum offload support (Anthony Liguori) [553337 566731]
  - [netdrv] macvtap: rework object lifetime rules (Anthony Liguori) [553337 566731]
  - [netdrv] macvtap: fix reference counting (Anthony Liguori) [553337 566731]
  - [netdrv] net: macvtap driver (Anthony Liguori) [553337 566731]
  - [netdrv] macvlan: export macvlan mode through netlink (Anthony Liguori) [553337 566731]
  - [netdrv] macvlan: implement bridge, VEPA and private mode (Anthony Liguori) [553337 566731]
  - [netdrv] macvlan: cleanup rx statistics (Anthony Liguori) [553337 566731]
  - [netdrv] macvlan: Precise RX stats accounting (Anthony Liguori) [553337 566731]
  - [netdrv] macvlan: add private dev_txq_stats_fold function (Anthony Liguori) [553337 566731]
  - [netdrv] veth: move loopback logic to common location (Anthony Liguori) [553337 566731]
  - [s390x] zfcp: Remove lock dependency on unit remove (Hendrik Brueckner) [576860]
  - [s390x] zfcp: Remove lock dependency on unit add (Hendrik Brueckner) [576860]
  - [s390x] zfcp: Remove lock dependency on CCW remove (Hendrik Brueckner) [576860]
  - [s390x] dasd: fix alignment of transport mode recovery TCW (Hendrik Brueckner) [575824]
  - [s390x] cio: fix drvdata usage for the console subchannel (Hendrik Brueckner) [575826]
  - [s390x] zcore: CPU registers are not saved under LPAR (Hendrik Brueckner) [575221]
  - [s390x] zfcpdump: Use direct IO in order to increase dump speed (Hendrik Brueckner) [575189]
  - [s390x] qeth: change checksumming default for HiperSockets (Hendrik Brueckner) [572227]
  - [s390x] qeth: l3 send dhcp in non pass thru mode (Hendrik Brueckner) [572225]
  - [s390x] zfcp: Remove attached ports and units correctly (Hendrik Brueckner) [571938]
  - [drm] Bring in nouveau updates from upstream (Ben Skeggs) [558468]
  - [vfs] pass struct file to do_truncate on O_TRUNC opens (Jeff Layton) [573995]
  - [vfs] O_TRUNC open shouldn't fail after file truncation (Jeff Layton) [573995]
  - [net] netfilter: ctnetlink: compute message size properly (Jiri Pirko) [578476]
  - [block] cfq-iosched: Do not merge queues of BE and IDLE classes (Jeff Moyer) [577393]
  - [block] remove 16 bytes of padding from struct request on 64bits (Jeff Moyer) [577393]
  - [block] cfq: remove 8 bytes of padding from cfq_rb_root on 64 bit builds (Jeff Moyer) [577393]
  - [block] cfq-iosched: quantum check tweak (Jeff Moyer) [577393]
  - [block] remove padding from io_context on 64bit builds (Jeff Moyer) [577393]
  - [block] cfq: reorder cfq_queue removing padding on 64bit (Jeff Moyer) [577393]
  - [block] cfq-iosched: split seeky coop queues after one slice (Jeff Moyer) [577393]
  - [x86] edac, mce: Filter out invalid values (Bhavna Sarathy) [574487]
  - [x86] edac, mce, amd: silence GART TLB errors (Bhavna Sarathy) [574487]
  - [x86] edac, mce: correct corenum reporting (Bhavna Sarathy) [574487]
  - [x86] edac, mce: update AMD F10h revD check (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: Simplify ECC override handling (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: Do not falsely trigger kerneloops (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: Ensure index stays within bounds in amd64_get_scrub_rate (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: restrict PCI config space access (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: fix K8 chip select reporting (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: bump driver version (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: fix use-uninitialised bug (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: correct sys address to chip select mapping (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: add a leaner syndrome decoding algorithm (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: remove early hw support check (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: detect DDR3 memory type (Bhavna Sarathy) [574487]
  - [x86] edac: add memory types strings for debugging (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: remove unneeded extract_error_address wrapper (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: rename StinkyIdentifier (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: remove superfluous dbg printk (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: enhance address to DRAM bank mapping (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: cleanup f10_early_channel_count (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: dump DIMM sizes on K8 too (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: cleanup rest of amd64_dump_misc_regs (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: cleanup DRAM cfg low debug output (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: wrap-up pci config read error handling (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: make DRAM regions output more human-readable (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: clarify DRAM CTL debug reporting (Bhavna Sarathy) [574487]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-20.el6]
changelog:
  - [netdrv] iwlwifi: fix kdump hang (Stanislaw Gruszka) [575122]
  - [kernel] clockevent: Don't remove broadcast device when cpu is dead (Danny Feng) [572438]
  - [block] Export max number of segments and max segment size in sysfs (Jeff Moyer) [574132]
  - [block] Finalize conversion of block limits functions (Jeff Moyer) [574132]
  - [block] Fix overrun in lcm() and move it to lib (Jeff Moyer) [574132]
  - [block] jiffies fixes (Jeff Moyer) [574132]
  - [block] Consolidate phys_segment and hw_segment limits (Jeff Moyer) [574132]
  - [block] Rename blk_queue_max_sectors to blk_queue_max_hw_sectors (Jeff Moyer) [574132]
  - [block] Add BLK_ prefix to definitions (Jeff Moyer) [574132]
  - [block] Remove unused accessor function (Jeff Moyer) [574132]
  - [block] Update blk_queue_max_sectors and documentation (Jeff Moyer) [574132]
  - [ata] ahci: Turn off DMA engines when there's no device attached (Matthew Garrett) [577967]
  - [scsi] qla2xxx: minor updates and fixes from upstream (Rob Evers) [574526]
  - [scsi] Additional BSG corrections from upstream (Rob Evers) [574590]
  - [netdrv] be2net: Update be2net 10GB NIC driver to version 2.102.147u (Ivan Vecera) [576172]
  - [scsi] update fibre channel layer (Mike Christie) [571824]
  - [scsi] lpfc Update from 8.3.5.6 to 8.3.5.7 FC/FCoE (Rob Evers) [576174]
  - [netdrv] e100: fix the 'size' argument passed to pci_pool_create() (Dean Nelson) [576887]
  - [kernel] futex: remove rw parameter from get_futex_key() (Amerigo Wang) [555700]
  - [drm] Add drm_gem_object_handle_unreference_unlocked and drm_gem_object_unreference_unlocked (Adam Jackson) [575910]
  - [drm] i915: Update to 2.6.34-rc1 (pre-vga-switcheroo) (Adam Jackson) [575910]
  - [scsi] libfcoe: Send port LKA every FIP_VN_KA_PERIOD secs (Rob Evers) [570693]
  - [scsi] fnic: updating driver to 1.4.0.98 syncs w/ upstream (Rob Evers) [570693]
  - [sound] snd-hda-intel: avoid divide by zero (Jaroslav Kysela) [567173] {CVE-2010-1085}
  - [netdrv] bnx2x: use new firmware (Stanislaw Gruszka) [560993]
  - [netdrv] bnx2: remove old firmware (Stanislaw Gruszka) [560993]
  - [netdrv] bnx2x: 1.52.1-6 firmware (Stanislaw Gruszka) [560993]
  - [netdrv] bnx2x: 1.52.1-6 bug fixes (Stanislaw Gruszka) [560993]
  - [ata] ahci: support FIS-based switching (David Milburn) [463152]
  - [drm] radeon: better GPU reset for lockup (Jerome Glisse) [576511]
  - [block] cciss: add 30 second initial timeout wait on controller reset (Tomas Henzl) [574094]
  - [serial] fix hang in serial console open (Neil Horman) [568418]
  - [virt] vmw_pvscsi: adding vmware paravirtualized driver (Rob Evers) [553062]
  - [scsi] 3w-9xxx: update 3w-9xxx to v2.26.02.014RH (Tomas Henzl) [572779]
  - [netdrv] ixgbevf: initial support for 82599VF driver (Andy Gospodarek) [462790]
  - [netdrv] ixgbe: update to version 2.0.62-k2 (Andy Gospodarek) [462790]
  - [netdrv] netxen: More critical bug fixes and AER support (Tony Camuso) [516840]
  - [netdrv] netxen: Sync with upstream kernel bug fixes (Tony Camuso) [516840]
  - [fs] dlm: use bastmode in debugfs output (David Teigland) [568102]
  - [fs] dlm: send reply before bast (David Teigland) [568102]
  - [fs] dlm: fix ordering of bast and cast (David Teigland) [568102]
  - [virt] virtio-net: remove send queue (Anthony Liguori) [555698]
  - [virt] virtio-net: Defer skb allocation and remove recv queue (Anthony Liguori) [555698]
  - [net] bridge: Allow enable/disable UFO on bridge device via ethtool (Anthony Liguori) [555537]
  - [net] Make UFO on master device independent of attached devices (Anthony Liguori) [555537]
  - [fs] xfs: fix locking for inode cache radix tree tag updates (Christoph Hellwig) [573836]
  - [uv] fix microcode.ctl slow down in boot-time on large systems (George Beshers) [573018]
  - [scsi] lpfc Update from 8.3.5.5 to 8.3.5.6 FC/FCoE (Rob Evers) [568889]
  - [mm] transparent hugepage support update (Andrea Arcangeli) [556572]
  - [netdrv] e1000e: fix data corruptor in NFS packet split filtering hw (Neil Horman) [572350]
  - [security] selinux: dynamic class/perm discovery (Eric Paris) [570812]
  - [security] selinux/ss: correct size computation (Eric Paris) [573000]
  - [security] SELinux: reduce size of access vector hash table (Eric Paris) [570433]
  - [security] SELinux: reset the security_ops before flushing the avc cache (Eric Paris) [572998]
  - [sched] Fix sched_mc_power_savings for !SMT (Danny Feng) [571879]
  - [security] selinux: Only audit permissions specified in policy (Eric Paris) [573002]
  - [security] selinux: fix memory leak in sel_make_bools (Eric Paris) [573008]
  - [security] SELinux: Make selinux_kernel_create_files_as() shouldn't just always return 0 (Eric Paris) [573011]
  - [security] selinux: convert range transition list to a hashtab (Eric Paris) [572702]
  - [virt] x86: remove kmap_atomic_pte paravirt op (Paolo Bonzini) [567203]
  - [virt] vmi: disable highmem PTE allocation even when CONFIG_HIGHPTE=y (Paolo Bonzini) [567203]
  - [virt] xen: disable highmem PTE allocation even when CONFIG_HIGHPTE=y (Paolo Bonzini) [567203]
  - [virt] x86: allow allocation of highmem user page tables to be disabled when CONFIG_HIGHPTE=y (Paolo Bonzini) [567203]
  - [netdrv] qlge: update to latest upstream (Andy Gospodarek) [562311]
  - [netdrv] add netif_printk helpers (Andy Gospodarek) [562311]
  - [net] bridge: Fix build error when IGMP_SNOOPING is not enabled (Herbert Xu) [574321]
  - [net] bridge: Add multicast count/interval sysfs entries (Herbert Xu) [574321]
  - [net] bridge: Add hash elasticity/max sysfs entries (Herbert Xu) [574321]
  - [net] bridge: Add multicast_snooping sysfs toggle (Herbert Xu) [574321]
  - [net] bridge: Add multicast_router sysfs entries (Herbert Xu) [574321]
  - [net] bridge: Add multicast data-path hooks (Herbert Xu) [574321]
  - [net] bridge: Add multicast start/stop hooks (Herbert Xu) [574321]
  - [net] bridge: Add multicast forwarding functions (Herbert Xu) [574321]
  - [net] bridge: Move NULL mdb check into br_mdb_ip_get (Herbert Xu) [574321]
  - [net] bridge: ensure to unlock in error path in br_multicast_query() (Herbert Xu) [574321]
  - [net] bridge: Fix RCU race in br_multicast_stop (Herbert Xu) [574321]
  - [net] bridge: Use RCU list primitive in __br_mdb_ip_get (Herbert Xu) [574321]
  - [net] bridge: cleanup: remove unneed check (Herbert Xu) [574321]
  - [net] bridge: depends on INET (Herbert Xu) [574321]
  - [net] bridge: Make IGMP snooping depend upon BRIDGE. (Herbert Xu) [574321]
  - [net] bridge: Add core IGMP snooping support (Herbert Xu) [574321]
  - [net] bridge: Fix br_forward crash in promiscuous mode (Herbert Xu) [574321]
  - [net] bridge: Split may_deliver/deliver_clone out of br_flood (Herbert Xu) [574321]
  - [net] bridge: Use BR_INPUT_SKB_CB on xmit path (Herbert Xu) [574321]
  - [net] bridge: Avoid unnecessary clone on forward path (Herbert Xu) [574321]
  - [net] bridge: Allow tail-call on br_pass_frame_up (Herbert Xu) [574321]
  - [net] bridge: Do br_pass_frame_up after other ports (Herbert Xu) [574321]
  - [net] Add netdev_alloc_skb_ip_align() helper (Herbert Xu) [574321]
  - [kernel] futex_lock_pi() key refcnt fix (Danny Feng) [566347] {CVE-2010-0623}
  - [pci] AER: fix aer inject result in kernel oops (Prarit Bhargava) [568515]
  - [scsi] fix 32bit compatibility in BSG interface (Rob Evers) [554538]
  - [x86] ACPI: don't cond_resched if irq is disabled (Danny Feng) [572441]
  - [x86] Ensure dell-laptop buffers are below 4GB (Matthew Garrett) [570036]
  - [hwmon] add hex '0x' indication to coretemp module output (Dean Nelson) [571865]
  - [cifs] update cifs client code to latest upstream code (Jeff Layton) [562788]
  - [block] fix merge_bvec_fn return value checks (Mike Snitzer) [571455]
  - [fs] ext4: avoid uninit mem references on some mount options (Eric Sandeen) [562008]
  - [s390x] dasd: Correct offline processing (Hendrik Brueckner) [568376]
  - [s390x] dasd: Fix refcounting (Hendrik Brueckner) [568376]
  - [x86] amd_iommu: remove dma-ops warning message (Bhavna Sarathy) [560002]
  - [x86] amd_iommu: Fix IO page fault by adding device notifiers (Bhavna Sarathy) [560002]
  - [x86] amd_iommu: Fix IOMMU API initialization for iommu=pt (Bhavna Sarathy) [560002]
  - [x86] amd_iommu: Fix possible integer overflow (Bhavna Sarathy) [560002]
  - [x86] amd_iommu: Fix deassignment of a device from the pt domain (Bhavna Sarathy) [560002]
  - [gfs2] Allow the number of committed revokes to temporarily be negative (Benjamin Marzinski) [563907]
  - [ppc64] powerpc: export data from new hcall H_EM_GET_PARMS (Steve Best) [570019]
  - [x86] ACPI: Be in TS_POLLING state during mwait based C-state entry (Avi Kivity) [571440]
  - [net] tcp: fix ICMP-RTO war (Jiri Olsa) [567532]
  - [mm] Add padding to mm structures allow future patches during the RHEL6 life (Larry Woodman) [554511]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-18.el6]
changelog:
  - [kernel/time] revert cc2f92ad1d0e03fe527e8ccfc1f918c368964dc8 (Aristeu Rozanski) [567551]
  - [virt] hvc_console: Fix race between hvc_close and hvc_remove (Amit Shah) [568624]
  - [scsi] Add netapp to scsi dh alua dev list (Mike Christie) [559586]
  - [scsi] scsi_dh_emc: fix mode select setup (Mike Christie) [570685]
  - [drm] Remove loop in IronLake graphics interrupt handler (John Villalovos) [557838]
  - [x86] Intel Cougar Point chipset support (John Villalovos) [560077]
  - [vhost] vhost-net: restart tx poll on sk_sndbuf full (Michael S. Tsirkin) [562837]
  - [vhost] fix get_user_pages_fast error handling (Michael S. Tsirkin) [562837]
  - [vhost] initialize log eventfd context pointer (Michael S. Tsirkin) [562837]
  - [vhost] logging thinko fix (Michael S. Tsirkin) [562837]
  - [vhost] vhost-net: switch to smp barriers (Michael S. Tsirkin) [562837]
  - [net] bug fix for vlan + gro issue (Andy Gospodarek) [569922]
  - [uv] Fix unmap_vma() bug related to mmu_notifiers (George Beshers) [253033]
  - [uv] Have mmu_notifiers use SRCU so they may safely schedule (George Beshers) [253033]
  - [drm] radeon/kms: bring all v2.6.33 fixes into EL6 kernel (Dave Airlie) [547422 554323 566618 569704]
  - [dvb] Fix endless loop when decoding ULE at dvb-core (Mauro Carvalho Chehab) [569243]
  - [kernel] sched: Fix SCHED_MC regression caused by change in sched cpu_power (Danny Feng) [568123]
  - [s390x] vdso: glibc does not use vdso functions (Hendrik Brueckner) [567755]
  - [drm] bring drm core/ttm/fb layer fixes in from upstream (Dave Airlie) [569701]
  - [kernel] Fix SMT scheduler regression in find_busiest_queue() (Danny Feng) [568120]
  - [s390x] qeth: avoid recovery during device online setting (Hendrik Brueckner) [568781]
  - [mm] Fix potential crash with sys_move_pages (Danny Feng) [562591] {CVE-2010-0415}
  - [scsi] pmcraid: bug fixes from upstream (Rob Evers) [567376]
  - [scsi] lpfc Update from 8.3.5.4 to 8.3.5.5 FC/FCoE (Rob Evers) [564508]
  - [ata] ahci: disable FPDMA auto-activate optimization on NVIDIA AHCI (David Milburn) [568815]
  - [selinux] netlabel: fix corruption of SELinux MLS categories > 127 (Eric Paris) [568370]
  - [gfs2] print glock numbers in hex (Robert S Peterson) [566755]
  - [mm] Fix hugetlb.c clear_huge_page parameter (Andrea Arcangeli) [566604]
  - [mm] fix anon_vma locking updates for transparent hugepage code (Andrea Arcangeli) [564515]
  - [netdrv] cxgb3: add memory barriers (Steve Best) [568390]
  - [dm] raid45 target: constructor error path oops fix (Heinz Mauelshagen) [567605]
  - [scsi] mpt2sas: fix missing initialization (Tomas Henzl) [567965]
  - [net] netfilter: nf_conntrack: per netns nf_conntrack_cachep (Jiri Pirko) [567181]
  - [x86] nmi_watchdog: use __cpuinit for nmi_watchdog_default (Don Zickus) [567601]
  - [netdrv] ixgbe: prevent speculative processing of descriptors (Steve Best) [568391]
  - [kvm] Fix emulate_sys[call, enter, exit]()'s fault handling (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] Fix segment descriptor loading (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] Fix load_guest_segment_descriptor() to inject page fault (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Forbid modifying CS segment register by mov instruction (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Fix x86_emulate_insn() not to use the variable rc for non-X86EMUL values (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: X86EMUL macro replacements: x86_emulate_insn() and its helpers (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: X86EMUL macro replacements: from do_fetch_insn_byte() to x86_decode_insn() (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] inject #UD in 64bit mode from instruction that are not valid there (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Fix properties of instructions in group 1_82 (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: code style cleanup (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Add LOCK prefix validity checking (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Check CPL level during privilege instruction emulation (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Fix popf emulation (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Check IOPL level during io instruction emulation (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: fix memory access during x86 emulation (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Add Virtual-8086 mode of emulation (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Add group9 instruction decoding (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Add group8 instruction decoding (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Introduce No64 decode option (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Add 'push/pop sreg' instructions (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [x86] AES/PCLMUL Instruction support: Various fixes for AES-NI and PCLMMUL (John Villalovos) [463496]
  - [x86] AES/PCLMUL Instruction support: Use gas macro for AES-NI instructions (John Villalovos) [463496]
  - [x86] AES/PCLMUL Instruction support: Various small fixes for AES/PCMLMUL and generate .byte code for some new instructions via gas macro (John Villalovos) [463496]
  - [x86] AES/PCLMUL Instruction support: Add PCLMULQDQ accelerated implementation (John Villalovos) [463496]
  - [scsi] megaraid_sas: fix for 32bit apps (Tomas Henzl) [559941]
  - [kvm] fix large packet drops on kvm hosts with ipv6 (Neil Horman) [565525]
  - [kvm] Add MAINTAINERS entry for virtio_console (Amit Shah) [566391]
  - [kvm] virtio: console: Fill ports' entire in_vq with buffers (Amit Shah) [566391]
  - [kvm] virtio: console: Error out if we can't allocate buffers for control queue (Amit Shah) [566391]
  - [kvm] virtio: console: Add ability to remove module (Amit Shah) [566391]
  - [kvm] virtio: console: Ensure no memleaks in case of unused buffers (Amit Shah) [566391]
  - [kvm] virtio: console: update Red Hat copyright for 2010 (Amit Shah) [566391]
  - [kvm] virtio: Initialize vq->data entries to NULL (Amit Shah) [566391]
  - [kvm] virtio: console: outbufs are no longer needed (Amit Shah) [566391]
  - [kvm] virtio: console: return -efault for fill_readbuf if copy_to_user fails (Amit Shah) [566391]
  - [kvm] virtio: console: Allow sending variable-sized buffers to host, efault on copy_from_user err (Amit Shah) [566391]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-17.el6]
changelog:
  - [s390] hvc_iucv: allocate IUCV send/receive buffers in DMA zone (Hendrik Brueckner) [566188]
  - [s390] qdio: continue polling for buffer state ERROR (Hendrik Brueckner) [565528]
  - [s390] qdio: prevent kernel bug message in interrupt handler (Hendrik Brueckner) [565542]
  - [s390] zfcp: report BSG errors in correct field (Hendrik Brueckner) [564378]
  - [s390] zfcp: cancel all pending work for a to be removed zfcp_port (Hendrik Brueckner) [564382]
  - [nfs] mount.nfs: Unknown error 526 (Steve Dickson) [561975]
  - [x86] x86-64, rwsem: Avoid store forwarding hazard in __downgrade_write (Avi Kivity) [563801]
  - [x86] x86-64, rwsem: 64-bit xadd rwsem implementation (Avi Kivity) [563801]
  - [x86] x86-64: support native xadd rwsem implementation (Avi Kivity) [563801]
  - [x86] clean up rwsem type system (Avi Kivity) [563801]
  - [x86] x86-32: clean up rwsem inline asm statements (Avi Kivity) [563801]
  - [x86] nmi_watchdog: enable by default on RHEL-6 (Don Zickus) [523857]
  - [block] freeze_bdev: don't deactivate successfully frozen MS_RDONLY sb (Mike Snitzer) [565890]
  - [block] fix bio_add_page for non trivial merge_bvec_fn case (Mike Snitzer) [565890]
  - [watchdog] Add support for iTCO watchdog on Ibex Peak chipset (John Villalovos) [536698]
  - [kernel] time: Remove xtime_cache (Prarit Bhargava) [563135]
  - [kernel] time: Implement logarithmic time accumalation (Prarit Bhargava) [563135]
  - [dm] raid1: fail writes if errors are not handled and log fails (Mike Snitzer) [565890]
  - [dm] mpath: fix stall when requeueing io (Mike Snitzer) [565890]
  - [dm] log: userspace fix overhead_size calcuations (Mike Snitzer) [565890]
  - [dm] stripe: avoid divide by zero with invalid stripe count (Mike Snitzer) [565890]
  - [mm] anon_vma locking updates for transparent hugepage code (Rik van Riel) [564515]
  - [mm] anon_vma linking changes to improve multi-process scalability (Rik van Riel) [564515]
  - [virt] virtio_blk: add block topology support (Christoph Hellwig) [556477]
  - [kvm] PIT: control word is write-only (Eduardo Habkost) [560905] {CVE-2010-0309}
  - [kernel] Prevent futex user corruption to crash the kernel (Jerome Marchand) [563957]
  - [selinux] print the module name when SELinux denies a userspace upcall (Eric Paris) [563731]
  - [gfs] GFS2 problems on single node cluster (Steven Whitehouse) [564329]
  - [ppc] Add kdump support to Collaborative Memory Manager (Steve Best) [563316]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-16.el6]
changelog:
  - [nfs] Remove a redundant check for PageFsCache in nfs_migrate_page() (Steve Dickson) [563938]
  - [nfs] Fix a bug in nfs_fscache_release_page() (Steve Dickson) [563938]
  - [mm] fix BUG()s caused by the transparent hugepage patch (Larry Woodman) [556572]
  - [fs] inotify: fix inotify WARN and compatibility issues (Eric Paris) [563363]
  - [net] do not check CAP_NET_RAW for kernel created sockets (Eric Paris) [540560]
  - [pci] Enablement of PCI ACS control when IOMMU enabled on system (Don Dutile) [523278]
  - [pci] PCI ACS support functions (Don Dutile) [523278]
  - [uv] x86: Fix RTC latency bug by reading replicated cachelines (George Beshers) [562189]
  - [s390x] ctcm / lcs / claw: remove cu3088 layer (Hendrik Brueckner) [557522]
  - [uv] vgaarb: add user selectability of the number of gpus in a system (George Beshers) [555879]
  - [gpu] vgaarb: fix vga arbiter to accept PCI domains other than 0 (George Beshers) [555879]
  - [uv] x86_64: update uv arch to target legacy VGA I/O correctly (George Beshers) [555879]
  - [pci] update pci_set_vga_state to call arch functions (George Beshers) [555879]
  - [uv] PCI: update pci_set_vga_state to call arch functions (George Beshers) [555879]
  - [mm] remove madvise(MADV_HUGEPAGE) (Andrea Arcangeli) [556572]
  - [mm] hugepage redhat customization (Andrea Arcangeli) [556572]
  - [mm] introduce khugepaged (Andrea Arcangeli) [556572]
  - [mm] transparent hugepage vmstat (Andrea Arcangeli) [556572]
  - [mm] memcg huge memory (Andrea Arcangeli) [556572]
  - [mm] memcg compound (Andrea Arcangeli) [556572]
  - [mm] pmd_trans_huge migrate bugcheck (Andrea Arcangeli) [556572]
  - [mm] madvise(MADV_HUGEPAGE) (Andrea Arcangeli) [556572]
  - [mm] verify pmd_trans_huge isnt leaking (Andrea Arcangeli) [556572]
  - [mm] transparent hugepage core (Andrea Arcangeli) [556572]
  - [mm] dont alloc harder for gfp nomemalloc even if nowait (Andrea Arcangeli) [556572]
  - [mm] introduce _GFP_NO_KSWAPD (Andrea Arcangeli) [556572]
  - [mm] backport page_referenced microoptimization (Andrea Arcangeli) [556572]
  - [mm] kvm mmu transparent hugepage support (Andrea Arcangeli) [556572]
  - [mm] clear_copy_huge_page (Andrea Arcangeli) [556572]
  - [mm] clear_huge_page fix (Andrea Arcangeli) [556572]
  - [mm] split_huge_page paging (Andrea Arcangeli) [556572]
  - [mm] split_huge_page_mm/vma (Andrea Arcangeli) [556572]
  - [mm] add pmd_huge_pte to mm_struct (Andrea Arcangeli) [556572]
  - [mm] clear page compound (Andrea Arcangeli) [556572]
  - [mm] add pmd mmu_notifier helpers (Andrea Arcangeli) [556572]
  - [mm] pte alloc trans splitting (Andrea Arcangeli) [556572]
  - [mm] bail out gup_fast on splitting pmd (Andrea Arcangeli) [556572]
  - [mm] add pmd mangling functions to x86 (Andrea Arcangeli) [556572]
  - [mm] add pmd mangling generic functions (Andrea Arcangeli) [556572]
  - [mm] special pmd_trans_* functions (Andrea Arcangeli) [556572]
  - [mm] config_transparent_hugepage (Andrea Arcangeli) [556572]
  - [mm] comment reminder in destroy_compound_page (Andrea Arcangeli) [556572]
  - [mm] export maybe_mkwrite (Andrea Arcangeli) [556572]
  - [mm] no paravirt version of pmd ops (Andrea Arcangeli) [556572]
  - [mm] add pmd paravirt ops (Andrea Arcangeli) [556572]
  - [mm] add native_set_pmd_at (Andrea Arcangeli) [556572]
  - [mm] clear compound mapping (Andrea Arcangeli) [556572]
  - [mm] update futex compound knowledge (Andrea Arcangeli) [556572]
  - [mm] alter compound get_page/put_page (Andrea Arcangeli) [556572]
  - [mm] add a compound_lock (Andrea Arcangeli) [556572]
  - [mm] define MADV_HUGEPAGE (Andrea Arcangeli) [556572]
  - [oprofile] Support Nehalem-EX CPU in Oprofile (John Villalovos) [528998]
  - [nfs] nfs: handle NFSv3 -EKEYEXPIRED errors as we would -EJUKEBOX (Jeff Layton) [479359]
  - [nfs] handle NFSv2 -EKEYEXPIRED returns from RPC layer appropriately (Jeff Layton) [479359]
  - [nfs] sunrpc: parse and return errors reported by gssd (Jeff Layton) [479359]
  - [nfs] nfs4: handle -EKEYEXPIRED errors from RPC layer (Jeff Layton) [479359]
  - [net] nf_conntrack: fix memory corruption (Jon Masters) [559471]
  - [kvm] emulate accessed bit for EPT (Rik van Riel) [555106]
  - [vhost] fix TUN=m VHOST_NET=y (Michael S. Tsirkin) [562837]
  - [vhost] vhost-net: defer f->private_data until setup succeeds (Chris Wright) [562837]
  - [vhost] vhost-net: comment use of invalid fd when setting vhost backend (Chris Wright) [562837]
  - [vhost] access check thinko fixes (Michael S. Tsirkin) [562837]
  - [vhost] make default mapping empty by default (Michael S. Tsirkin) [562837]
  - [vhost] add access_ok checks (Michael S. Tsirkin) [562837]
  - [vhost] prevent modification of an active ring (Michael S. Tsirkin) [562837]
  - [vhost] fix high 32 bit in FEATURES ioctls (Michael S. Tsirkin) [562837]
  - [dm] dm-raid1: fix deadlock at suspending failed device (Takahiro Yasui) [557932]
  - [dm] fix kernel panic at releasing bio on recovery failed region (Takahiro Yasui) [557934]
  - [scsi] lpfc Update from 8.3.4 to 8.3.5.4 FC/FCoE (Rob Evers) [531028]
  - [nfs] sunrpc/cache: fix module refcnt leak in a failure path (Steve Dickson) [562285]
  - [nfs] Ensure that we handle NFS4ERR_STALE_STATEID correctly (Steve Dickson) [560784]
  - [nfs] NFSv4.1: Don't call nfs4_schedule_state_recovery() unnecessarily (Steve Dickson) [560784]
  - [nfs] NFSv4: Don't allow posix locking against servers that don't support it (Steve Dickson) [560784]
  - [nfs] Ensure that the NFSv4 locking can recover from stateid errors (Steve Dickson) [560784]
  - [nfs] Avoid warnings when CONFIG_NFS_V4=n (Steve Dickson) [560784]
  - [nfs] Make nfs_commitdata_release static (Steve Dickson) [560784]
  - [nfs] Try to commit unstable writes in nfs_release_page() (Steve Dickson) [560784]
  - [nfs] Fix a reference leak in nfs_wb_cancel_page() (Steve Dickson) [560784]
  - [nfs] nfs41: cleanup callback code to use __be32 type (Steve Dickson) [560785]
  - [nfs] nfs41: clear NFS4CLNT_RECALL_SLOT bit on session reset (Steve Dickson) [560785]
  - [nfs] nfs41: fix nfs4_callback_recallslot (Steve Dickson) [560785]
  - [nfs] nfs41: resize slot table in reset (Steve Dickson) [560785]
  - [nfs] nfs41: implement cb_recall_slot (Steve Dickson) [560785]
  - [nfs] nfs41: back channel drc minimal implementation (Steve Dickson) [560785]
  - [nfs] nfs41: prepare for back channel drc (Steve Dickson) [560785]
  - [nfs] nfs41: remove uneeded checks in callback processing (Steve Dickson) [560785]
  - [nfs] nfs41: directly encode back channel error (Steve Dickson) [560785]
  - [nfs] nfs41: fix wrong error on callback header xdr overflow (Steve Dickson) [560785]
  - [nfs] nfs41: Process callback's referring call list (Steve Dickson) [560785]
  - [nfs] nfs41: Check slot table for referring calls (Steve Dickson) [560785]
  - [nfs] nfs41: Adjust max cache response size value (Steve Dickson) [560785]
  - [nfs] NFSD: Create PF_INET6 listener in write_ports (Steve Dickson) [560785]
  - [nfs] SUNRPC: NFS kernel APIs shouldn't return ENOENT for "transport not found" (Steve Dickson) [560785]
  - [nfs] SUNRPC: Bury "#ifdef IPV6" in svc_create_xprt() (Steve Dickson) [560785]
  - [nfs] NFSD: Support AF_INET6 in svc_addsock() function (Steve Dickson) [560785]
  - [nfs] SUNRPC: Use rpc_pton() in ip_map_parse() (Steve Dickson) [560785]
  - [nfs] nfsd: 4.1 has an rfc number (Steve Dickson) [560785]
  - [nfs] nfsd41: Create the recovery entry for the NFSv4.1 client (Steve Dickson) [560785]
  - [nfs] nfsd: use vfs_fsync for non-directories (Steve Dickson) [560785]
  - [nfs] nfsd4: Use FIRST_NFS4_OP in nfsd4_decode_compound() (Steve Dickson) [560785]
  - [nfs] nfsd41: nfsd4_decode_compound() does not recognize all ops (Steve Dickson) [560785]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-15.el6]
changelog:
  - [block] blk-cgroup: Fix lockdep warning of potential deadlock in blk-cgroup (Vivek Goyal) [561903]
  - [block] cfq: Do not idle on async queues and drive deeper WRITE depths (Vivek Goyal) [561902]
  - [quota] 64-bit quota format fixes (Jerome Marchand) [546311]
  - [x86] fix Add AMD Node ID MSR support (Bhavna Sarathy) [557540]
  - [fs] ext4: fix type of "offset" in ext4_io_end (Eric Sandeen) [560097]
  - [x86] Disable HPET MSI on ATI SB700/SB800 (Prarit Bhargava) [557332]
  - [x86] arch specific support for remapping HPET MSIs (Prarit Bhargava) [557332]
  - [x86] intr-remap: generic support for remapping HPET MSIs (Prarit Bhargava) [557332]
  - [gfs] GFS2: Extend umount wait coverage to full glock lifetime (Steven Whitehouse) [561287]
  - [gfs] GFS2: Wait for unlock completion on umount (Steven Whitehouse) [561287]
  - [gfs] GFS2: Use MAX_LFS_FILESIZE for meta inode size (Steven Whitehouse) [561307]
  - [gfs] GFS2: Use GFP_NOFS for alloc structure (Steven Whitehouse) [561307]
  - [gfs] GFS2: Fix refcnt leak on gfs2_follow_link() error path (Steven Whitehouse) [561307]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-14.el6]
changelog:
  - [s390x] dasd: fix online/offline race (Hendrik Brueckner) [552840]
  - [netdrv] update tg3 to version 3.106 and fix panic (John Feeney) [555101]
  - [s390x] dasd: Fix null pointer in s390dbf and discipline checking (Hendrik Brueckner) [559615]
  - [s390x] zcrypt: Do not remove coprocessor in case of error 8/72 (Hendrik Brueckner) [559613]
  - [s390x] cio: channel path vary operation has no effect (Hendrik Brueckner) [559612]
  - [uv] x86: Ensure hub revision set for all ACPI modes (George Beshers) [559752]
  - [uv] x86: Add function retrieving node controller revision number (George Beshers) [559752]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-13.el6]
changelog:
  - [virtio] console: show error message if hvc_alloc fails for console ports (Amit Shah) [543824]
  - [virtio] console: Add debugfs files for each port to expose debug info (Amit Shah) [543824]
  - [virtio] console: Add ability to hot-unplug ports (Amit Shah) [543824]
  - [virtio] hvc_console: Export (GPL'ed) hvc_remove (Amit Shah) [543824]
  - [virtio] Add ability to detach unused buffers from vrings (Amit Shah) [543824]
  - [virtio] console: Handle port hot-plug (Amit Shah) [543824]
  - [virtio] console: Remove cached data on port close (Amit Shah) [543824]
  - [virtio] console: Register with sysfs and create a 'name' attribute for ports (Amit Shah) [543824]
  - [virtio] console: Ensure only one process can have a port open at a time (Amit Shah) [543824]
  - [virtio] console: Add file operations to ports for open/read/write/poll (Amit Shah) [543824]
  - [virtio] console: Associate each port with a char device (Amit Shah) [543824]
  - [virtio] console: Prepare for writing to / reading from userspace buffers (Amit Shah) [543824]
  - [virtio] console: Add a new MULTIPORT feature, support for generic ports (Amit Shah) [543824]
  - [virtio] console: Introduce a send_buf function for a common path for sending data to host (Amit Shah) [543824]
  - [virtio] console: Introduce function to hand off data from host to readers (Amit Shah) [543824]
  - [virtio] console: Separate out find_vqs operation into a different function (Amit Shah) [543824]
  - [virtio] console: Separate out console init into a new function (Amit Shah) [543824]
  - [virtio] console: Separate out console-specific data into a separate struct (Amit Shah) [543824]
  - [virtio] console: ensure console size is updated on hvc open (Amit Shah) [543824]
  - [virtio] console: struct ports for multiple ports per device. (Amit Shah) [543824]
  - [virtio] console: remove global var (Amit Shah) [543824]
  - [virtio] console: don't assume a single console port. (Amit Shah) [543824]
  - [virtio] console: use vdev->priv to avoid accessing global var. (Amit Shah) [543824]
  - [virtio] console: introduce a get_inbuf helper to fetch bufs from in_vq (Amit Shah) [543824]
  - [virtio] console: ensure add_inbuf can work for multiple ports as well (Amit Shah) [543824]
  - [virtio] console: encapsulate buffer information in a struct (Amit Shah) [543824]
  - [virtio] console: port encapsulation (Amit Shah) [543824]
  - [virtio] console: We support only one device at a time (Amit Shah) [543824]
  - [virtio] hvc_console: Remove __devinit annotation from hvc_alloc (Amit Shah) [543824]
  - [virtio] hvc_console: make the ops pointer const. (Amit Shah) [543824]
  - [virtio] console: statically initialize virtio_cons (Amit Shah) [543824]
  - [virtio] console: comment cleanup (Amit Shah) [543824]
  - [x86] Fix crash when profiling more than 28 events (Bhavna Sarathy) [557570]
  - [x86] Add AMD Node ID MSR support (Bhavna Sarathy) [557540]
  - [kvm] fix spurious interrupt with irqfd (Marcelo Tosatti) [559343]
  - [kvm] eventfd: allow atomic read and waitqueue remove (Marcelo Tosatti) [559343]
  - [kvm] properly check max PIC pin in irq route setup (Marcelo Tosatti) [559343]
  - [kvm] only allow one gsi per fd (Marcelo Tosatti) [559343]
  - [kvm] x86: Fix leak of free lapic date in kvm_arch_vcpu_init() (Marcelo Tosatti) [559343]
  - [kvm] x86: Fix probable memory leak of vcpu->arch.mce_banks (Marcelo Tosatti) [559343]
  - [kvm] MMU: bail out pagewalk on kvm_read_guest error (Marcelo Tosatti) [559343]
  - [kvm] x86: Fix host_mapping_level() (Marcelo Tosatti) [559343]
  - [kvm] Fix race between APIC TMR and IRR (Marcelo Tosatti) [559343]
  - [x86] acpi: Export acpi_pci_irq_{add|del}_prt() (James Paradis) [553781]
  - [kdump] backport upstream ppc64 kcrctab fixes (Neil Horman) [558803]
  - [mm] Memory tracking for Stratus (James Paradis) [512400]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-12.el6]
changelog:
  - [drm] radeon possible security issue (Jerome Glisse) [556692]
  - [mm] Memory tracking for Stratus (James Paradis) [512400]
  - [pci] Always set prefetchable base/limit upper32 registers (Prarit Bhargava) [553471]
  - [scsi] Sync be2iscsi with upstream (Mike Christie) [515256]
  - [x86] msr/cpuid: Register enough minors for the MSR and CPUID drivers (George Beshers) [557554]
  - [x86] Remove unnecessary mdelay() from cpu_disable_common() (Peter Bogdanovic) [463633]
  - [x86] ioapic: Document another case when level irq is seen as an edge (Peter Bogdanovic) [463633]
  - [x86] ioapic: Fix the EOI register detection mechanism (Peter Bogdanovic) [463633]
  - [x86] io-apic: Move the effort of clearing remoteIRR explicitly before migrating the irq (Peter Bogdanovic) [463633]
  - [x86] Remove local_irq_enable()/local_irq_disable() in fixup_irqs() (Peter Bogdanovic) [463633]
  - [x86] Use EOI register in io-apic on intel platforms (Peter Bogdanovic) [463633]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-11.el6]
changelog:
  - [kdump] Remove the 32MB limitation for crashkernel (Steve Best) [529270]
  - [dm] dm-raid45: export missing dm_rh_inc (Heinz Mauelshagen) [552329]
  - [block] dm-raid45: add raid45 target (Heinz Mauelshagen) [552329]
  - [block] dm-replicator: blockdev site link handler (Heinz Mauelshagen) [552364]
  - [block] dm-replicator: ringbuffer replication log handler (Heinz Mauelshagen) [552364]
  - [block] dm-replicator: replication log and site link handler interfaces and main replicator module (Heinz Mauelshagen) [552364]
  - [block] dm-replicator: documentation and module registry (Heinz Mauelshagen) [552364]
  - [s390x] qeth: set default BLKT settings dependend on OSA hw level (Hendrik Brueckner) [557474]
  - [drm] bring RHEL6 radeon drm up to 2.6.33-rc4/5 level (Jerome Glisse) [557539]
  - [netdrv] e1000e: enhance frame fragment detection (Andy Gospodarek) [462780]
  - [stable] ipv6: skb_dst() can be NULL in ipv6_hop_jumbo(). (David S. Miller) [555084]
  - [stable] module: handle ppc64 relocating kcrctabs when CONFIG_RELOCATABLE=y (Rusty Russell) [555084]
  - [stable] fix more leaks in audit_tree.c tag_chunk() (Al Viro) [555084]
  - [stable] fix braindamage in audit_tree.c untag_chunk() (Al Viro) [555084]
  - [stable] mac80211: fix skb buffering issue (and fixes to that) (Johannes Berg) [555084]
  - [stable] kernel/sysctl.c: fix stable merge error in NOMMU mmap_min_addr (Mike Frysinger) [555084]
  - [stable] libertas: Remove carrier signaling from the scan code (Samuel Ortiz) [555084]
  - [stable] mac80211: add missing sanity checks for action frames (Felix Fietkau) [555084]
  - [stable] iwl: off by one bug (Dan Carpenter) [555084]
  - [stable] cfg80211: fix syntax error on user regulatory hints (Luis R. Rodriguez) [555084]
  - [stable] ath5k: Fix eeprom checksum check for custom sized eeproms (Luis R. Rodriguez) [555084]
  - [stable] iwlwifi: fix iwl_queue_used bug when read_ptr == write_ptr (Zhu Yi) [555084]
  - [stable] xen: fix hang on suspend. (Ian Campbell) [555084]
  - [stable] quota: Fix dquot_transfer for filesystems different from ext4 (Jan Kara) [555084]
  - [stable] hwmon: (adt7462) Fix pin 28 monitoring (Roger Blofeld) [555084]
  - [stable] hwmon: (coretemp) Fix TjMax for Atom N450/D410/D510 CPUs (Yong Wang) [555084]
  - [stable] netfilter: nf_ct_ftp: fix out of bounds read in update_nl_seq() (Patrick McHardy) [555084]
  - [stable] netfilter: ebtables: enforce CAP_NET_ADMIN (Florian Westphal) [555084]
  - [stable] ASoC: Fix WM8350 DSP mode B configuration (Mark Brown) [555084]
  - [stable] ALSA: atiixp: Specify codec for Foxconn RC4107MA-RS2 (Daniel T Chen) [555084]
  - [stable] ALSA: ac97: Add Dell Dimension 2400 to Headphone/Line Jack Sense blacklist (Daniel T Chen) [555084]
  - [stable] mmc_block: fix queue cleanup (Adrian Hunter) [555084]
  - [stable] mmc_block: fix probe error cleanup bug (Jarkko Lavinen) [555084]
  - [stable] mmc_block: add dev_t initialization check (Anna Lemehova) [555084]
  - [stable] kernel/signal.c: fix kernel information leak with print-fatal-signals=1 (Andi Kleen) [555084]
  - [stable] dma-debug: allow DMA_BIDIRECTIONAL mappings to be synced with DMA_FROM_DEVICE and (Krzysztof Halasa) [555084]
  - [stable] lib/rational.c needs module.h (Sascha Hauer) [555084]
  - [stable] drivers/cpuidle/governors/menu.c: fix undefined reference to `__udivdi3' (Stephen Hemminger) [555084]
  - [stable] rtc_cmos: convert shutdown to new pnp_driver->shutdown (OGAWA Hirofumi) [555084]
  - [stable] Revert "x86: Side-step lguest problem by only building cmpxchg8b_emu for pre-Pentium" (Rusty Russell) [555084]
  - [stable] exofs: simple_write_end does not mark_inode_dirty (Boaz Harrosh) [555084]
  - [stable] modules: Skip empty sections when exporting section notes (Ben Hutchings) [555084]
  - [stable] ASoC: fix params_rate() macro use in several codecs (Guennadi Liakhovetski) [555084]
  - [stable] fasync: split 'fasync_helper()' into separate add/remove functions (Linus Torvalds) [555084]
  - [stable] untangle the do_mremap() mess (Al Viro)


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-10.el6]
changelog:
  - [mm] mmap: don't return ENOMEM when mapcount is temporarily exceeded in munmap() (Danny Feng) [557000]
  - [netdrv] vxge: fix issues found in Neterion testing (Michal Schmidt) [493985]
  - [x86] Force irq complete move during cpu offline (Prarit Bhargava) [541815]
  - [sound] Fix SPDIF-In for AD1988 codecs + add Intel Cougar IDs (Jaroslav Kysela) [557473]
  - [scsi] aic79xx: check for non-NULL scb in ahd_handle_nonpkt_busfree (Tomas Henzl) [557753]
  - [s390x] fix loading of PER control registers for utrace. (CAI Qian) [556410]
  - [s390x] ptrace: dont abuse PT_PTRACED (CAI Qian) [552102]
  - [perf] Remove the "event" callback from perf events (Jason Baron) [525517]
  - [perf] Use overflow handler instead of the event callback (Jason Baron) [525517]
  - [perf] Fix locking for PERF_FORMAT_GROUP (Jason Baron) [525517]
  - [perf] Fix event scaling for inherited counters (Jason Baron) [525517]
  - [perf] Fix PERF_FORMAT_GROUP scale info (Jason Baron) [525517]
  - [perf] Allow for custom overflow handlers (Jason Baron) [525517]
  - [perf] Add a callback to perf events (Jason Baron) [525517]
  - [perf] improve error reporting (Jason Baron) [525517]
  - [perf] add kernel internal interface (Jason Baron) [525517]
  - [utrace] fix utrace_maybe_reap() vs find_matching_engine() race (Oleg Nesterov) [557338]
  - [x86] Disable Memory hot add on x86 32-bit (Prarit Bhargava) [557131]
  - [netdrv] e1000e: update to the latest upstream (Andy Gospodarek) [462780]
  - [gfs] Use dquot_send_warning() (Steven Whitehouse) [557057]
  - [gfs] Add quota netlink support (Steven Whitehouse) [557057]
  - [netdrv] qlge: update to upstream version v1.00.00.23.00.00-01 (Andy Gospodarek) [553357]
  - [s390x] zfcp: set HW timeout requested by BSG request (Hendrik Brueckner) [556918]
  - [s390x] zfcp: introduce BSG timeout callback (Hendrik Brueckner) [556918]
  - [scsi] scsi_transport_fc: Allow LLD to reset FC BSG timeout (Hendrik Brueckner) [556918]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-9.el6]
changelog:
  - [kvm] fix cleanup_srcu_struct on vm destruction (Marcelo Tosatti) [554762]
  - [x86] core: make LIST_POISON less deadly (Avi Kivity) [554640]
  - [x86] dell-wmi: Add support for new Dell systems (Matthew Garrett) [525548]
  - [fs] xfs: 2.6.33 updates (Eric Sandeen) [554891]
  - [x86] Add kernel pagefault tracepoint for x86 & x86_64. (Larry Woodman) [526032]
  - [pci] PCIe AER: honor ACPI HEST FIRMWARE FIRST mode (Matthew Garrett) [537205]
  - [block] direct-io: cleanup blockdev_direct_IO locking (Eric Sandeen) [556547]
  - [tracing] tracepoint: Add signal tracepoints (Masami Hiramatsu) [526030]
  - [cgroups] fix for "kernel BUG at kernel/cgroup.c:790" (Dave Anderson) [547815]
  - [irq] Expose the irq_desc node as /proc/irq/*/node (George Beshers) [555866]
  - [scsi] qla2xxx - Update support for FC/FCoE HBA/CNA (Rob Evers) [553854]
  - [scsi] bfa update from 2.1.2.0 to 2.1.2.1 (Rob Evers) [475704]
  - [nfs] sunrpc: fix build-time warning (Steve Dickson) [437715]
  - [nfs] sunrpc: on successful gss error pipe write, don't return error (Steve Dickson) [437715]
  - [nfs] SUNRPC: Fix the return value in gss_import_sec_context() (Steve Dickson) [437715]
  - [nfs] SUNRPC: Fix up an error return value in gss_import_sec_context_kerberos() (Steve Dickson) [437715]
  - [nfs] sunrpc: fix peername failed on closed listener (Steve Dickson) [437715]
  - [nfs] nfsd: make sure data is on disk before calling ->fsync (Steve Dickson) [437715]
  - [uv] React 2.6.32.y: isolcpus broken in 2.6.32.y kernel (George Beshers) [548842]
  - [gru] GRU Rollup patch (George Beshers) [546680]
  - [uv] XPC: pass nasid instead of nid to gru_create_message_queue (George Beshers) [546695]
  - [uv] x86: XPC receive message reuse triggers invalid BUG_ON (George Beshers) [546695]
  - [uv] x86: xpc_make_first_contact hang due to not accepting ACTIVE state (George Beshers) [546695]
  - [uv] x86: xpc NULL deref when mesq becomes empty (George Beshers) [546695]
  - [uv] x86: update XPC to handle updated BIOS interface (George Beshers) [546695]
  - [uv] xpc needs to provide an abstraction for uv_gpa (George Beshers) [546695]
  - [uv] x86, irq: Check move_in_progress before freeing the vector mapping (George Beshers) [546668]
  - [uv] x86: Remove move_cleanup_count from irq_cfg (George Beshers) [546668]
  - [uv] x86, irq: Allow 0xff for /proc/irq/[n]/smp_affinity on an 8-cpu system (George Beshers) [546668]
  - [uv] x86, apic: Move SGI UV functionality out of generic IO-APIC code (George Beshers) [546668]
  - [uv] x86 SGI: Fix irq affinity for hub based interrupts (George Beshers) [546668]
  - [uv] x86 RTC: Always enable RTC clocksource (George Beshers) [546668]
  - [uv] x86 RTC: Rename generic_interrupt to x86_platform_ipi (George Beshers) [546668]
  - [uv] x86, mm: Correct the implementation of is_untracked_pat_range() (George Beshers) [548524]
  - [uv] x86: Change is_ISA_range() into an inline function (George Beshers) [548524]
  - [uv] x86, platform: Change is_untracked_pat_range() to bool (George Beshers) [548524]
  - [uv] x86, mm: is_untracked_pat_range() takes a normal semiclosed range (George Beshers) [548524]
  - [uv] x86, mm: Call is_untracked_pat_range() rather than is_ISA_range() (George Beshers) [548524]
  - [uv] x86 SGI: Dont track GRU space in PAT (George Beshers) [548524]
  - [scsi] megaraid: upgrade to 4.17 (Tomas Henzl) [520729]
  - [scsi] mpt2sas: Bump version 03.100.03.00 (Tomas Henzl) [470848]
  - [scsi] mpt2sas: don't update links nor unblock device at no link rate change (Tomas Henzl) [470848]
  - [scsi] mpt2sas: add support for RAID Action System Shutdown Initiated at OS Shutdown (Tomas Henzl) [470848]
  - [scsi] mpt2sas: freeze the sdev IO queue when firmware sends internal device reset (Tomas Henzl) [470848]
  - [scsi] mpt2sas: fix PPC endian bug (Tomas Henzl) [470848]
  - [scsi] mpt2sas: mpt2sas_base_get_sense_buffer_dma returns little endian (Tomas Henzl) [470848]
  - [scsi] mpt2sas: return DID_TRANSPORT_DISRUPTED in nexus loss and SCSI_MLQUEUE_DEVICE_BUSY if device is busy (Tomas Henzl) [470848]
  - [scsi] mpt2sas: retrieve the ioc facts prior to putting the controller into READY state (Tomas Henzl) [470848]
  - [scsi] mpt2sas: add new info messages for IR and Expander events (Tomas Henzl) [470848]
  - [scsi] mpt2sas: limit the max_depth to 32 for SATA devices (Tomas Henzl) [470848]
  - [scsi] mpt2sas: add TimeStamp support when sending ioc_init (Tomas Henzl) [470848]
  - [scsi] mpt2sas: add extended type for diagnostic buffer support (Tomas Henzl) [470848]
  - [scsi] mpt2sas: add command line option diag_buffer_enable (Tomas Henzl) [470848]
  - [scsi] mpt2sas: fix some comments (Tomas Henzl) [470848]
  - [scsi] mpt2sas: stop driver when firmware encounters faults (Tomas Henzl) [470848]
  - [scsi] mpt2sas: adding MPI Headers - revision L (Tomas Henzl) [470848]
  - [scsi] mpt2sas: new device SAS2208 support (Tomas Henzl) [470848]
  - [scsi] mpt2sas: check for valid response info (Tomas Henzl) [470848]
  - [scsi] mpt2sas: fix expander remove fail (Tomas Henzl) [470848]
  - [scsi] mpt2sas: use sas address instead of handle as a lookup (Tomas Henzl) [470848]
  - [sound] ALSA HDA driver update 2009-12-15 (Jaroslav Kysela) [555812]
  - [block] Honor the gfp_mask for alloc_page() in blkdev_issue_discard() (Mike Snitzer) [554719]
  - [scsi] sync fcoe with upstream (Mike Christie) [549945]
  - [net] dccp: modify how dccp creates slab caches to prevent bug halt in SLUB (Neil Horman) [553698]
  - [s390x] tape: Add pr_fmt() macro to all tape source files (Hendrik Brueckner) [554380]
  - [s390] qeth: fix packet loss if TSO is switched on (Hendrik Brueckner) [546632]
  - [s390x] qeth: Support for HiperSockets Network Traffic Analyzer (Hendrik Brueckner) [463706]
  - [serial] 8250: add support for DTR/DSR hardware flow control (Mauro Carvalho Chehab) [523848]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-7.el6]
changelog:
  - [drm] minor printk fixes from upstream (Dave Airlie) [554601]
  - [offb] add support for framebuffer handoff to offb. (Dave Airlie) [554948]
  - [x86] allow fbdev primary video code on 64-bit. (Dave Airlie) [554930]
  - [drm] nouveau: update to 2.6.33 level (Dave Airlie) [549930]
  - [drm] ttm: validation API changes + ERESTART fixes. (Dave Airlie) [554918]
  - [drm] radeon/kms: update to 2.6.33 (without TTM API changes) (Dave Airlie) [554918]
  - [drm] i915: bring Intel DRM/KMS driver up to 2.6.33 (Dave Airlie) [554616]
  - [drm] radeon/intel: realign displayport helper code with upstream. (Dave Airlie) [554601]
  - [drm] kms: rollup KMS core and helper changes to 2.6.33 (Dave Airlie) [554601]
  - [drm] remove address mask param for drm_pci_alloc() (Dave Airlie) [554601]
  - [drm] add new userspace core drm interfaces from 2.6.33 (Dave Airlie) [554601]
  - [drm] unlocked ioctl support for core + macro fixes (Dave Airlie) [554601]
  - [drm] ttm: rollup upstream TTM fixes (Dave Airlie) [554601]
  - [drm] mm: patch drm core memory range manager up to 2.6.33 (Dave Airlie) [554601]
  - [drm] drm/edid: update to 2.6.33 EDID parser code (Dave Airlie) [554601]
  - [net] dccp: fix module load dependency btw dccp_probe and dccp (Neil Horman) [554840]
  - [powerpc] pseries: Correct pseries/dlpar.c build break without CONFIG_SMP (Steve Best) [539318]
  - [powerpc] cpu-allocation/deallocation process (Steve Best) [539318]
  - [powerpc] Add code to online/offline CPUs of a DLPAR node (Steve Best) [539318]
  - [powerpc] CPU DLPAR handling (Steve Best) [539318]
  - [powerpc] sysfs cpu probe/release files (Steve Best) [539318]
  - [powerpc] Kernel handling of Dynamic Logical Partitioning (Steve Best) [539318]
  - [powerpc] pseries: Add hooks to put the CPU into an appropriate offline state (Steve Best) [539318]
  - [powerpc] pseries: Add extended_cede_processor() helper function. (Steve Best) [539318]
  - [gfs] GFS2: Fix glock refcount issues (Steven Whitehouse) [546634]
  - [gfs] GFS2: Ensure uptodate inode size when using O_APPEND (Steven Whitehouse) [547639]
  - [gfs] GFS2: Fix locking bug in rename (Steven Whitehouse) [547640]
  - [gfs] GFS2: Fix lock ordering in gfs2_check_blk_state() (Steven Whitehouse) [554673]
  - [gfs2] only show nobarrier option on /proc/mounts when the option is active (Steven Whitehouse) [546665]
  - [gfs2] add barrier/nobarrier mount options (Steven Whitehouse) [546665]
  - [gfs2] remove division from new statfs code (Steven Whitehouse) [298561]
  - [gfs2] Improve statfs and quota usability (Steven Whitehouse) [298561]
  - [gfs2] Add set_xquota support (Steven Whitehouse) [298561]
  - [gfs2] Add get_xquota support (Steven Whitehouse) [298561]
  - [gfs2] Clean up gfs2_adjust_quota() and do_glock() (Steven Whitehouse) [298561]
  - [gfs2] Remove constant argument from qd_get() (Steven Whitehouse) [298561]
  - [gfs2] Remove constant argument from qdsb_get() (Steven Whitehouse) [298561]
  - [gfs2] Add proper error reporting to quota sync via sysfs (Steven Whitehouse) [298561]
  - [gfs2] Add get_xstate quota function (Steven Whitehouse) [298561]
  - [gfs2] Remove obsolete code in quota.c (Steven Whitehouse) [298561]
  - [gfs2] Hook gfs2_quota_sync into VFS via gfs2_quotactl_ops (Steven Whitehouse) [298561]
  - [gfs2] Alter arguments of gfs2_quota/statfs_sync (Steven Whitehouse) [298561]
  - [gfs2] Fix -o meta mounts for subsequent mounts (Steven Whitehouse) [546664]
  - [gfs] GFS2: Fix gfs2_xattr_acl_chmod() (Steven Whitehouse) [546294]
  - [gfs] VFS: Use GFP_NOFS in posix_acl_from_xattr() (Steven Whitehouse) [546294]
  - [gfs] GFS2: Add cached ACLs support (Steven Whitehouse) [546294]
  - [gfs] GFS2: Clean up ACLs (Steven Whitehouse) [546294]
  - [gfs] GFS2: Use gfs2_set_mode() instead of munge_mode() (Steven Whitehouse) [546294]
  - [gfs] GFS2: Use forget_all_cached_acls() (Steven Whitehouse) [546294]
  - [gfs] VFS: Add forget_all_cached_acls() (Steven Whitehouse) [546294]
  - [gfs] GFS2: Fix up system xattrs (Steven Whitehouse) [546294]
  - [netdrv] igb: Update igb driver to support Barton Hills (Stefan Assmann) [462783]
  - [dm] add feature flags to reduce future kABI impact (Mike Snitzer) [547756]
  - [block] Stop using byte offsets (Mike Snitzer) [554718]
  - [dm] Fix device mapper topology stacking (Mike Snitzer) [554718]
  - [block] bdev_stack_limits wrapper (Mike Snitzer) [554718]
  - [block] Fix discard alignment calculation and printing (Mike Snitzer) [554718]
  - [block] Correct handling of bottom device misaligment (Mike Snitzer) [554718]
  - [block] Fix incorrect alignment offset reporting and update documentation (Mike Snitzer) [554718]
  - [kvm] Fix possible circular locking in kvm_vm_ioctl_assign_device() (Marcelo Tosatti) [554762]
  - [kvm] only clear irq_source_id if irqchip is present (Marcelo Tosatti) [554762]
  - [kvm] fix lock imbalance in kvm_*_irq_source_id() (Marcelo Tosatti) [554762]
  - [kvm] VMX: Report unexpected simultaneous exceptions as internal errors (Marcelo Tosatti) [554762]
  - [kvm] Allow internal errors reported to userspace to carry extra data (Marcelo Tosatti) [554762]
  - [kvm] x86: disable paravirt mmu reporting (Marcelo Tosatti) [554762]
  - [kvm] x86: disallow KVM_{SET, GET}_LAPIC without allocated in-kernel lapic (Marcelo Tosatti) [554762]
  - [kvm] x86: disallow multiple KVM_CREATE_IRQCHIP (Marcelo Tosatti) [554762]
  - [kvm] VMX: Disable unrestricted guest when EPT disabled (Marcelo Tosatti) [554762]
  - [kvm] SVM: remove needless mmap_sem acquision from nested_svm_map (Marcelo Tosatti) [554762]
  - [kvm] SVM: Notify nested hypervisor of lost event injections (Marcelo Tosatti) [554762]
  - [kvm] SVM: Move INTR vmexit out of atomic code (Marcelo Tosatti) [554762]
  - [kvm] remove pre_task_link setting in save_state_to_tss16 (Marcelo Tosatti) [554762]
  - [kvm] x86: Extend KVM_SET_VCPU_EVENTS with selective updates (Marcelo Tosatti) [554500]
  - [kvm] x86: Add KVM_GET/SET_VCPU_EVENTS (Marcelo Tosatti) [554500]
  - [kvm] fix kvmclock-adjust-offset ioctl to match upstream (Marcelo Tosatti) [554524]
  - [kvm] SVM: init_vmcb(): remove redundant save->cr0 initialization (Marcelo Tosatti) [554506]
  - [kvm] SVM: Reset cr0 properly on vcpu reset (Marcelo Tosatti) [554506]
  - [kvm] VMX: Use macros instead of hex value on cr0 initialization (Marcelo Tosatti) [554506]
  - [kvm] avoid taking ioapic mutex for non-ioapic EOIs (Marcelo Tosatti) [550809]
  - [kvm] Bump maximum vcpu count to 64 (Marcelo Tosatti) [550809]
  - [kvm] convert slots_lock to a mutex (Marcelo Tosatti) [550809]
  - [kvm] switch vcpu context to use SRCU (Marcelo Tosatti) [550809]
  - [kvm] convert io_bus to SRCU (Marcelo Tosatti) [550809]
  - [kvm] x86: switch kvm_set_memory_alias to SRCU update (Marcelo Tosatti) [550809]
  - [kvm] use SRCU for dirty log (Marcelo Tosatti) [550809]
  - [kvm] introduce kvm->srcu and convert kvm_set_memory_region to SRCU update (Marcelo Tosatti) [550809]
  - [kvm] use gfn_to_pfn_memslot in kvm_iommu_map_pages (Marcelo Tosatti) [550809]
  - [kvm] introduce gfn_to_pfn_memslot (Marcelo Tosatti) [550809]
  - [kvm] split kvm_arch_set_memory_region into prepare and commit (Marcelo Tosatti) [550809]
  - [kvm] modify alias layout in x86s struct kvm_arch (Marcelo Tosatti) [550809]
  - [kvm] modify memslots layout in struct kvm (Marcelo Tosatti) [550809]
  - [kvm] rcu: Enable synchronize_sched_expedited() fastpath (Marcelo Tosatti) [550809]
  - [kvm] rcu: Add synchronize_srcu_expedited() to the documentation (Marcelo Tosatti) [550809]
  - [kvm] rcu: Add synchronize_srcu_expedited() to the rcutorture test suite (Marcelo Tosatti) [550809]
  - [kvm] Add synchronize_srcu_expedited() (Marcelo Tosatti) [550809]
  - [kvm] Drop kvm->irq_lock lock from irq injection path (Marcelo Tosatti) [550809]
  - [kvm] Move IO APIC to its own lock (Marcelo Tosatti) [550809]
  - [kvm] Convert irq notifiers lists to RCU locking (Marcelo Tosatti) [550809]
  - [kvm] Move irq ack notifier list to arch independent code (Marcelo Tosatti) [550809]
  - [kvm] Move irq routing data structure to rcu locking (Marcelo Tosatti) [550809]
  - [kvm] Maintain back mapping from irqchip/pin to gsi (Marcelo Tosatti) [550809]
  - [kvm] Change irq routing table to use gsi indexed array (Marcelo Tosatti) [550809]
  - [kvm] Move irq sharing information to irqchip level (Marcelo Tosatti) [550809]
  - [kvm] Call pic_clear_isr() on pic reset to reuse logic there (Marcelo Tosatti) [550809]
  - [kvm] Dont pass kvm_run arguments (Marcelo Tosatti) [550809]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-6.el6]
changelog:
  - [modsign] Remove Makefile.modpost qualifying message for module sign failure (David Howells) [543529]
  - [nfs] fix oops in nfs_rename() (Jeff Layton) [554337]
  - [x86] AMD: Fix stale cpuid4_info shared_map data in shared_cpu_map cpumasks (Prarit Bhargava) [546610]
  - [s390] kernel: improve code generated by atomic operations (Hendrik Brueckner) [547411]
  - [s390x] tape: incomplete device removal (Hendrik Brueckner) [547415]
  - [netdrv] be2net: update be2net driver to latest upstream (Ivan Vecera) [515262]
  - [x86] mce: fix confusion between bank attributes and mce attributes (hiro muneda) [476606]
  - [tpm] autoload tpm_tis driver (John Feeney) [531891]
  - [stable] generic_permission: MAY_OPEN is not write access (Serge E. Hallyn) [555084]
  - [stable] rt2x00: Disable powersaving for rt61pci and rt2800pci. (Gertjan van Wingerde) [555084]
  - [stable] lguest: fix bug in setting guest GDT entry (Rusty Russell) [555084]
  - [stable] ext4: Update documentation to correct the inode_readahead_blks option name (Fang Wenqi) [555084]
  - [stable] sched: Sched_rt_periodic_timer vs cpu hotplug (Peter Zijlstra) [555084]
  - [stable] amd64_edac: fix forcing module load/unload (Borislav Petkov) [555084]
  - [stable] amd64_edac: make driver loading more robust (Borislav Petkov) [555084]
  - [stable] amd64_edac: fix driver instance freeing (Borislav Petkov) [555084]
  - [stable] x86, msr: msrs_alloc/free for CONFIG_SMP=n (Borislav Petkov) [555084]
  - [stable] x86, msr: Add support for non-contiguous cpumasks (Borislav Petkov) [555084]
  - [stable] amd64_edac: unify MCGCTL ECC switching (Borislav Petkov) [555084]
  - [stable] cpumask: use modern cpumask style in drivers/edac/amd64_edac.c (Rusty Russell) [555084]
  - [stable] x86, msr: Unify rdmsr_on_cpus/wrmsr_on_cpus (Borislav Petkov) [555084]
  - [stable] ext4: fix sleep inside spinlock issue with quota and dealloc (#14739) (Dmitry Monakhov) [555084]
  - [stable] ext4: Convert to generic reserved quota's space management. (Dmitry Monakhov) [555084]
  - [stable] quota: decouple fs reserved space from quota reservation (Dmitry Monakhov) [555084]
  - [stable] Add unlocked version of inode_add_bytes() function (Dmitry Monakhov) [555084]
  - [stable] udf: Try harder when looking for VAT inode (Jan Kara) [555084]
  - [stable] orinoco: fix GFP_KERNEL in orinoco_set_key with interrupts disabled (Andrey Borzenkov) [555084]
  - [stable] drm: disable all the possible outputs/crtcs before entering KMS mode (Zhao Yakui) [555084]
  - [stable] drm/radeon/kms: fix crtc vblank update for r600 (Dave Airlie) [555084]
  - [stable] sched: Fix balance vs hotplug race (Peter Zijlstra) [555084]
  - [stable] Keys: KEYCTL_SESSION_TO_PARENT needs TIF_NOTIFY_RESUME architecture support (Geert Uytterhoeven) [555084]
  - [stable] b43: avoid PPC fault during resume (Larry Finger) [555084]
  - [stable] hwmon: (sht15) Off-by-one error in array index + incorrect constants (Jonathan Cameron) [555084]
  - [stable] netfilter: fix crashes in bridge netfilter caused by fragment jumps (Patrick McHardy) [555084]
  - [stable] ipv6: reassembly: use seperate reassembly queues for conntrack and local delivery (Patrick McHardy) [555084]
  - [stable] e100: Fix broken cbs accounting due to missing memset. (Roger Oksanen) [555084]
  - [stable] memcg: avoid oom-killing innocent task in case of use_hierarchy (Daisuke Nishimura) [555084]
  - [stable] x86/ptrace: make genregs[32]_get/set more robust (Linus Torvalds) [555084]
  - [stable] V4L/DVB (13596): ov511.c typo: lock => unlock (Dan Carpenter) [555084]
  - [stable] kernel/sysctl.c: fix the incomplete part of sysctl_max_map_count-should-be-non-negative.patch (WANG Cong) [555084]
  - [stable] 'sysctl_max_map_count' should be non-negative (Amerigo Wang) [555084]
  - [stable] NOMMU: Optimise away the {dac_,}mmap_min_addr tests (David Howells) [555084]
  - [stable] mac80211: fix race with suspend and dynamic_ps_disable_work (Luis R. Rodriguez) [555084]
  - [stable] iwlwifi: fix 40MHz operation setting on cards that do not allow it (Reinette Chatre) [555084]
  - [stable] iwlwifi: fix more eeprom endian bugs (Johannes Berg) [555084]
  - [stable] iwlwifi: fix EEPROM/OTP reading endian annotations and a bug (Johannes Berg) [555084]
  - [stable] iwl3945: fix panic in iwl3945 driver (Zhu Yi) [555084]
  - [stable] iwl3945: disable power save (Reinette Chatre) [555084]
  - [stable] ath9k_hw: Fix AR_GPIO_INPUT_EN_VAL_BT_PRIORITY_BB and its shift value in 0x4054 (Vasanthakumar Thiagarajan) [555084]
  - [stable] ath9k_hw: Fix possible OOB array indexing in gen_timer_index[] on 64-bit (Vasanthakumar Thiagarajan) [555084]
  - [stable] ath9k: fix suspend by waking device prior to stop (Sujith) [555084]
  - [stable] ath9k: wake hardware during AMPDU TX actions (Luis R. Rodriguez) [555084]
  - [stable] ath9k: fix missed error codes in the tx status check (Felix Fietkau) [555084]
  - [stable] ath9k: Fix TX queue draining (Sujith) [555084]
  - [stable] ath9k: wake hardware for interface IBSS/AP/Mesh removal (Luis R. Rodriguez) [555084]
  - [stable] ath5k: fix SWI calibration interrupt storm (Bob Copeland) [555084]
  - [stable] cfg80211: fix race between deauth and assoc response (Johannes Berg) [555084]
  - [stable] mac80211: Fix IBSS merge (Sujith) [555084]
  - [stable] mac80211: fix WMM AP settings application (Johannes Berg) [555084]
  - [stable] mac80211: fix propagation of failed hardware reconfigurations (Luis R. Rodriguez) [555084]
  - [stable] iwmc3200wifi: fix array out-of-boundary access (Zhu Yi) [555084]
  - [stable] Libertas: fix buffer overflow in lbs_get_essid() (Daniel Mack) [555084]
  - [stable] KVM: LAPIC: make sure IRR bitmap is scanned after vm load (Marcelo Tosatti) [555084]
  - [stable] KVM: MMU: remove prefault from invlpg handler (Marcelo Tosatti) [555084]
  - [stable] ioat2,3: put channel hardware in known state at init (Dan Williams) [555084]
  - [stable] ioat3: fix p-disabled q-continuation (Dan Williams) [555084]
  - [stable] x86/amd-iommu: Fix initialization failure panic (Joerg Roedel) [555084]
  - [stable] dma-debug: Fix bug causing build warning (Ingo Molnar) [555084]
  - [stable] dma-debug: Do not add notifier when dma debugging is disabled. (Shaun Ruffell) [555084]
  - [stable] dma: at_hdmac: correct incompatible type for argument 1 of 'spin_lock_bh' (Nicolas Ferre) [555084]
  - [stable] md: Fix unfortunate interaction with evms (NeilBrown) [555084]
  - [stable] x86: SGI UV: Fix writes to led registers on remote uv hubs (Mike Travis) [555084]
  - [stable] drivers/net/usb: Correct code taking the size of a pointer (Julia Lawall) [555084]
  - [stable] USB: fix bugs in usb_(de)authorize_device (Alan Stern) [555084]
  - [stable] USB: rename usb_configure_device (Alan Stern) [555084]
  - [stable] Bluetooth: Prevent ill-timed autosuspend in USB driver (Oliver Neukum) [555084]
  - [stable] USB: musb: gadget_ep0: avoid SetupEnd interrupt (Sergei Shtylyov) [555084]
  - [stable] USB: Fix a bug on appledisplay.c regarding signedness (pancho horrillo) [555084]
  - [stable] USB: option: support hi speed for modem Haier CE100 (Donny Kurnia) [555084]
  - [stable] USB: emi62: fix crash when trying to load EMI 6|2 firmware (Clemens Ladisch) [555084]
  - [stable] drm/radeon: fix build on 64-bit with some compilers. (Dave Airlie) [555084]
  - [stable] ASoC: Do not write to invalid registers on the wm9712. (Eric Millbrandt) [555084]
  - [stable] powerpc: Handle VSX alignment faults correctly in little-endian mode (Neil Campbell) [555084]
  - [stable] ACPI: Use the return result of ACPI lid notifier chain correctly (Zhao Yakui) [555084]
  - [stable] ACPI: EC: Fix MSI DMI detection (Alexey Starikovskiy) [555084]
  - [stable] acerhdf: limit modalias matching to supported (Stefan Bader) [555084]
  - [stable] ALSA: hda - Fix missing capsrc_nids for ALC88x (Takashi Iwai) [555084]
  - [stable] sound: sgio2audio/pdaudiocf/usb-audio: initialize PCM buffer (Clemens Ladisch) [555084]
  - [stable] ASoC: wm8974: fix a wrong bit definition (Guennadi Liakhovetski) [555084]
  - [stable] pata_cmd64x: fix overclocking of UDMA0-2 modes (Bartlomiej Zolnierkiewicz) [555084]
  - [stable] pata_hpt3x2n: fix clock turnaround (Sergei Shtylyov) [555084]
  - [stable] clockevents: Prevent clockevent_devices list corruption on cpu hotplug (Thomas Gleixner) [555084]
  - [stable] sched: Select_task_rq_fair() must honour SD_LOAD_BALANCE (Peter Zijlstra) [555084]
  - [stable] x86, cpuid: Add "volatile" to asm in native_cpuid() (Suresh Siddha) [555084]
  - [stable] sched: Fix task_hot() test order (Peter Zijlstra) [555084]
  - [stable] SCSI: fc class: fix fc_transport_init error handling (Mike Christie) [555084]
  - [stable] SCSI: st: fix mdata->page_order handling (FUJITA Tomonori) [555084]
  - [stable] SCSI: qla2xxx: dpc thread can execute before scsi host has been added (Michael Reed) [555084]
  - [stable] SCSI: ipr: fix EEH recovery (Kleber Sacilotto de Souza) [555084]
  - [stable] implement early_io{re,un}map for ia64 (Luck, Tony) [555084]
  - [stable] perf_event: Fix incorrect range check on cpu number (Paul Mackerras) [555084]
  - [stable] netfilter: xtables: document minimal required version (Jan Engelhardt) [555084]
  - [stable] intel-iommu: ignore page table validation in pass through mode (Chris Wright) [555084]
  - [stable] jffs2: Fix long-standing bug with symlink garbage collection. (David Woodhouse) [555084]
  - [stable] ipvs: zero usvc and udest (Simon Horman) [555084]
  - [stable] mm: sigbus instead of abusing oom (Hugh Dickins) [555084]
  - [stable] drm/i915: Fix LVDS stability issue on Ironlake (Zhenyu Wang) [555084]
  - [stable] drm/i915: PineView only has LVDS and CRT ports (Zhenyu Wang) [555084]
  - [stable] drm/i915: Avoid NULL dereference with component_only tv_modes (Chris Wilson) [555084]
  - [stable] x86: Under BIOS control, restore AP's APIC_LVTTHMR to the BSP value (Yong Wang) [555084]
  - [stable] bcm63xx_enet: fix compilation failure after get_stats_count removal (Florian Fainelli) [555084]
  - [stable] V4L/DVB (13116): gspca - ov519: Webcam 041e:4067 added. (Rafal Milecki) [555084]
  - [stable] ext3: Fix data / filesystem corruption when write fails to copy data (Jan Kara) [555084]
  - [stable] net: Fix userspace RTM_NEWLINK notifications. (Eric W. Biederman) [555084]
  - [stable] ACPI: Use the ARB_DISABLE for the CPU which model id is less than 0x0f. (Zhao Yakui) [555084]
  - [stable] vmalloc: conditionalize build of pcpu_get_vm_areas() (Tejun Heo) [555084]
  - [stable] asus-laptop: change light sens default values. (Corentin Chary) [555084]
  - [stable] acerhdf: add new BIOS versions (Peter Feuerer) [555084]
  - [stable] matroxfb: fix problems with display stability (Alan Cox) [555084]
  - [stable] ipw2100: fix rebooting hang with driver loaded (Zhu Yi) [555084]
  - [stable] thinkpad-acpi: preserve rfkill state across suspend/resume (Henrique de Moraes Holschuh) [555084]
  - [stable] thinkpad-acpi: fix default brightness_mode for R50e/R51 (Henrique de Moraes Holschuh) [555084]
  - [stable] memcg: fix memory.memsw.usage_in_bytes for root cgroup (Kirill A. Shutemov) [555084]
  - [stable] mac80211: Fix dynamic power save for scanning. (Vivek Natarajan) [555084]
  - [stable] ath9k: fix tx status reporting (Felix Fietkau) [555084]
  - [stable] tracing: Fix event format export (Johannes Berg) [555084]
  - [stable] b43legacy: avoid PPC fault during resume (Larry Finger) [555084]
  - [stable] sparc: Set UTS_MACHINE correctly. (David S. Miller) [555084]
  - [stable] sparc64: Fix stack debugging IRQ stack regression. (David S. Miller) [555084]
  - [stable] sparc64: Fix overly strict range type matching for PCI devices. (David S. Miller) [555084]
  - [stable] sparc64: Don't specify IRQF_SHARED for LDC interrupts. (David S. Miller) [555084]
  - [stable] b44 WOL setup: one-bit-off stack corruption kernel panic fix (Stanislav Brabec) [555084]
  - [stable] ip_fragment: also adjust skb->truesize for packets not owned by a socket (Patrick McHardy) [555084]
  - [stable] tcp: Stalling connections: Fix timeout calculation routine (Damian Lukowski) [555084]
  - [stable] slc90e66: fix UDMA handling (Bartlomiej Zolnierkiewicz) [555084]
  - [stable] xen: try harder to balloon up under memory pressure. (Ian Campbell) [555084]
  - [stable] Xen balloon: fix totalram_pages counting. (Gianluca Guida) [555084]
  - [stable] xen: explicitly create/destroy stop_machine workqueues outside suspend/resume region. (Ian Campbell) [555084]
  - [stable] xen: use iret for return from 64b kernel to 32b usermode (Jeremy Fitzhardinge) [555084]
  - [stable] xen: don't leak IRQs over suspend/resume. (Ian Campbell) [555084]
  - [stable] xen: improve error handling in do_suspend. (Ian Campbell) [555084]
  - [stable] xen: call clock resume notifier on all CPUs (Ian Campbell) [555084]
  - [stable] xen: register runstate info for boot CPU early (Jeremy Fitzhardinge) [555084]
  - [stable] xen: don't call dpm_resume_noirq() with interrupts disabled. (Jeremy Fitzhardinge) [555084]
  - [stable] xen: register runstate on secondary CPUs (Ian Campbell) [555084]
  - [stable] xen: register timer interrupt with IRQF_TIMER (Ian Campbell) [555084]
  - [stable] xen: correctly restore pfn_to_mfn_list_list after resume (Ian Campbell) [555084]
  - [stable] xen: restore runstate_info even if !have_vcpu_info_placement (Jeremy Fitzhardinge) [555084]
  - [stable] xen: re-register runstate area earlier on resume. (Ian Campbell) [555084]
  - [stable] xen/xenbus: make DEVICE_ATTR()s static (Jeremy Fitzhardinge) [555084]
  - [stable] drm/i915: Add the missing clonemask for display port on Ironlake (Zhao Yakui) [555084]
  - [stable] drm/i915: Set the error code after failing to insert new offset into mm ht. (Chris Wilson) [555084]
  - [stable] drm/ttm: Fix build failure due to missing struct page (Martin Michlmayr) [555084]
  - [stable] drm/radeon/kms: rs6xx/rs740: clamp vram to aperture size (Alex Deucher) [555084]
  - [stable] drm/radeon/kms: fix vram setup on rs600 (Alex Deucher) [555084]
  - [stable] drm/radeon/kms: fix legacy crtc2 dpms (Alex Deucher) [555084]
  - [stable] drm/radeon/kms: handle vblanks properly with dpms on (Alex Deucher) [555084]
  - [stable] drm/radeon/kms: Add quirk for HIS X1300 board (Alex Deucher) [555084]
  - [stable] powerpc: Fix usage of 64-bit instruction in 32-bit altivec code (Benjamin Herrenschmidt) [555084]
  - [stable] powerpc/therm_adt746x: Record pwm invert bit at module load time] (Darrick J. Wong) [555084]
  - [stable] powerpc/windfarm: Add detection for second cpu pump (Bolko Maass) [555084]
  - [stable] mm: hugetlb: fix hugepage memory leak in walk_page_range() (Naoya Horiguchi) [555084]
  - [stable] mm: hugetlb: fix hugepage memory leak in mincore() (Naoya Horiguchi) [555084]
  - [stable] x86: Fix bogus warning in apic_noop.apic_write() (Thomas Gleixner) [555084]
  - [stable] rtl8187: Fix wrong rfkill switch mask for some models (Larry Finger) [555084]
  - [stable] wireless: correctly report signal value for IEEE80211_HW_SIGNAL_UNSPEC (John W. Linville) [555084]
  - [stable] mac80211: fix scan abort sanity checks (Johannes Berg) [555084]
  - [stable] mac80211: Revert 'Use correct sign for mesh active path refresh' (Javier Cardona) [555084]
  - [stable] mac80211: Fixed bug in mesh portal paths (Javier Cardona) [555084]
  - [stable] mac80211: Fix bug in computing crc over dynamic IEs in beacon (Vasanthakumar Thiagarajan) [555084]
  - [stable] Serial: Do not read IIR in serial8250_start_tx when UART_BUG_TXEN (Ian Jackson) [555084]
  - [stable] Driver core: fix race in dev_driver_string (Alan Stern) [555084]
  - [stable] debugfs: fix create mutex racy fops and private data (Mathieu Desnoyers) [555084]
  - [stable] devpts_get_tty() should validate inode (Sukadev Bhattiprolu) [555084]
  - [stable] futex: Take mmap_sem for get_user_pages in fault_in_user_writeable (Andi Kleen) [555084]
  - [stable] md/bitmap: protect against bitmap removal while being updated. (NeilBrown) [555084]
  - [stable] hfs: fix a potential buffer overflow (Amerigo Wang) [555084]
  - [stable] pxa/em-x270: fix usb hub power up/reset sequence (Igor Grinberg) [555084]
  - [stable] USB: Close usb_find_interface race v3 (Russ Dill) [555084]
  - [stable] USB: usb-storage: add BAD_SENSE flag (Alan Stern) [555084]
  - [stable] USB: usbtmc: repeat usb_bulk_msg until whole message is transfered (Andre Herms) [555084]
  - [stable] USB: option.c: add support for D-Link DWM-162-U5 (Zhang Le) [555084]
  - [stable] USB: musb_gadget_ep0: fix unhandled endpoint 0 IRQs, again (Sergei Shtylyov) [555084]
  - [stable] USB: xhci: Add correct email and files to MAINTAINERS entry. (Sarah Sharp) [555084]
  - [stable] jbd2: don't wipe the journal on a failed journal checksum (Theodore Ts'o) [555084]
  - [stable] UBI: flush wl before clearing update marker (Sebastian Andrzej Siewior) [555084]
  - [stable] bsdacct: fix uid/gid misreporting (Alexey Dobriyan) [555084]
  - [stable] V4L/DVB: Fix test in copy_reg_bits() (Roel Kluin) [555084]
  - [stable] pata_hpt{37x|3x2n}: fix timing register masks (take 2) (Sergei Shtylyov) [555084]
  - [stable] x86: Fix typo in Intel CPU cache size descriptor (Dave Jones) [555084]
  - [stable] x86: Add new Intel CPU cache size descriptors (Dave Jones) [555084]
  - [stable] x86: Fix duplicated UV BAU interrupt vector (Cliff Wickman) [555084]
  - [stable] x86/mce: Set up timer unconditionally (Jan Beulich) [555084]
  - [stable] x86, mce: don't restart timer if disabled (Hidetoshi Seto) [555084]
  - [stable] x86: Use -maccumulate-outgoing-args for sane mcount prologues (Thomas Gleixner) [555084]
  - [stable] x86: Prevent GCC 4.4.x (pentium-mmx et al) function prologue wreckage (Thomas Gleixner) [555084]
  - [stable] KVM: x86: include pvclock MSRs in msrs_to_save (Glauber Costa) [555084]
  - [stable] KVM: fix irq_source_id size verification (Marcelo Tosatti) [555084]
  - [stable] KVM: s390: Make psw available on all exits, not just a subset (Carsten Otte) [555084]
  - [stable] KVM: s390: Fix prefix register checking in arch/s390/kvm/sigp.c (Carsten Otte) [555084]
  - [stable] KVM: x86 emulator: limit instructions to 15 bytes (Avi Kivity) [555084]
  - [stable] ALSA: hrtimer - Fix lock-up (Takashi Iwai) [555084]
  - [stable] hrtimer: Fix /proc/timer_list regression (Feng Tang) [555084]
  - [stable] ath5k: enable EEPROM checksum check (Luis R. Rodriguez) [555084]
  - [stable] ath5k: allow setting txpower to 0 (Bob Copeland) [555084]
  - [stable] ssb: Fix range check in sprom write (Michael Buesch) [555084]
  - [stable] x86, apic: Enable lapic nmi watchdog on AMD Family 11h (Mikael Pettersson) [555084]
  - [stable] x86: ASUS P4S800 reboot=bios quirk (Leann Ogasawara) [555084]
  - [stable] x86: GART: pci-gart_64.c: Use correct length in strncmp (Joe Perches) [555084]
  - [stable] x86: Fix iommu=nodac parameter handling (Tejun Heo) [555084]
  - [stable] x86, Calgary IOMMU quirk: Find nearest matching Calgary while walking up the PCI tree (Darrick J. Wong) [555084]
  - [stable] x86/amd-iommu: un__init iommu_setup_msi (Joerg Roedel) [555084]
  - [stable] x86/amd-iommu: attach devices to pre-allocated domains early (Joerg Roedel) [555084]
  - [stable] sched: Fix and clean up rate-limit newidle code (Mike Galbraith) [555084]
  - [stable] sched: Rate-limit newidle (Mike Galbraith) [555084]
  - [stable] sched: Fix affinity logic in select_task_rq_fair() (Mike Galbraith) [555084]
  - [stable] sched: Check for an idle shared cache in select_task_rq_fair() (Mike Galbraith) [555084]
  - [stable] PM / Runtime: Fix lockdep warning in __pm_runtime_set_status() (Rafael J. Wysocki) [555084]
  - [stable] perf_event: Initialize data.period in perf_swevent_hrtimer() (Xiao Guangrong) [555084]
  - [stable] perf_event: Fix invalid type in ioctl definition (Arjan van de Ven) [555084]
  - [stable] rcu: Remove inline from forward-referenced functions (Paul E. McKenney) [555084]
  - [stable] rcu: Fix note_new_gpnum() uses of ->gpnum (Paul E. McKenney) [555084]
  - [stable] rcu: Fix synchronization for rcu_process_gp_end() uses of ->completed counter (Paul E. McKenney) [555084]
  - [stable] rcu: Prepare for synchronization fixes: clean up for non-NO_HZ handling of ->completed counter (Paul E. McKenney) [555084]
  - [stable] firewire: ohci: handle receive packets with a data length of zero (Jay Fenlason) [555084]
  - [stable] USB: option: add pid for ZTE (zhao.ming9@zte.com.cn) [555084]
  - [stable] USB: usb-storage: fix bug in fill_inquiry (Alan Stern) [555084]
  - [stable] ext4: Fix potential fiemap deadlock (mmap_sem vs. i_data_sem) (Theodore Ts'o) [555084]
  - [stable] ext4: Wait for proper transaction commit on fsync (Jan Kara) [555084]
  - [stable] ext4: fix incorrect block reservation on quota transfer. (Dmitry Monakhov) [555084]
  - [stable] ext4: quota macros cleanup (Dmitry Monakhov) [555084]
  - [stable] ext4: ext4_get_reserved_space() must return bytes instead of blocks (Dmitry Monakhov) [555084]
  - [stable] ext4: remove blocks from inode prealloc list on failure (Curt Wohlgemuth) [555084]
  - [stable] ext4: Avoid data / filesystem corruption when write fails to copy data (Jan Kara) [555084]
  - [stable] ext4: Return the PTR_ERR of the correct pointer in setup_new_group_blocks() (Roel Kluin) [555084]
  - [stable] jbd2: Add ENOMEM checking in and for jbd2_journal_write_metadata_buffer() (Theodore Ts'o) [555084]
  - [stable] ext4: move_extent_per_page() cleanup (Akira Fujita) [555084]
  - [stable] ext4: initialize moved_len before calling ext4_move_extents() (Kazuya Mio) [555084]
  - [stable] ext4: Fix double-free of blocks with EXT4_IOC_MOVE_EXT (Akira Fujita) [555084]
  - [stable] ext4: make "norecovery" an alias for "noload" (Eric Sandeen) [555084]
  - [stable] ext4: fix error handling in ext4_ind_get_blocks() (Jan Kara) [555084]
  - [stable] ext4: avoid issuing unnecessary barriers (Theodore Ts'o) [555084]
  - [stable] ext4: fix block validity checks so they work correctly with meta_bg (Theodore Ts'o) [555084]
  - [stable] ext4: fix uninit block bitmap initialization when s_meta_first_bg is non-zero (Theodore Ts'o) [555084]
  - [stable] ext4: don't update the superblock in ext4_statfs() (Theodore Ts'o) [555084]
  - [stable] ext4: journal all modifications in ext4_xattr_set_handle (Eric Sandeen) [555084]
  - [stable] ext4: fix i_flags access in ext4_da_writepages_trans_blocks() (Julia Lawall) [555084]
  - [stable] ext4: make sure directory and symlink blocks are revoked (Theodore Ts'o) [555084]
  - [stable] ext4: plug a buffer_head leak in an error path of ext4_iget() (Theodore Ts'o) [555084]
  - [stable] ext4: fix possible recursive locking warning in EXT4_IOC_MOVE_EXT (Akira Fujita) [555084]
  - [stable] ext4: fix lock order problem in ext4_move_extents() (Akira Fujita) [555084]
  - [stable] ext4: fix the returned block count if EXT4_IOC_MOVE_EXT fails (Akira Fujita) [555084]
  - [stable] ext4: avoid divide by zero when trying to mount a corrupted file system (Theodore Ts'o) [555084]
  - [stable] ext4: fix potential buffer head leak when add_dirent_to_buf() returns ENOSPC (Theodore Ts'o) [555084]
  - [stable] SCSI: megaraid_sas: fix 64 bit sense pointer truncation (Yang, Bo) [555084]
  - [stable] SCSI: osd_protocol.h: Add missing #include (Martin Michlmayr) [555084]
  - [stable] signal: Fix alternate signal stack check (Sebastian Andrzej Siewior) [555084]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-5.el6]
changelog:
  - [scsi] cciss: fix spinlock use (Tomas Henzl) [552910]
  - [scsi] cciss,hpsa: reassign controllers (Tomas Henzl) [552192]
  - [modsign] Don't attempt to sign a module if there are no key files (David Howells) [543529]
  - [x86] Compile mce-inject module (Prarit Bhargava) [553323]
  - [nfs] fix insecure export option (Steve Dickson) [437715]
  - [nfs] NFS update to 2.6.33 part 3 (Steve Dickson) [437715]
  - [nfs] NFS update to 2.6.33 part 2 (Steve Dickson) [437715]
  - [nfs] NFS update to 2.6.33 part 1 (Steve Dickson) [437715]
  - [s390] cio: deactivated devices can cause use after free panic (Hendrik Brueckner) [548490]
  - [s390] cio: memory leaks when checking unusable devices (Hendrik Brueckner) [548490]
  - [s390] cio: DASD steal lock task hangs (Hendrik Brueckner) [548490]
  - [s390] cio: DASD cannot be set online (Hendrik Brueckner) [548490]
  - [s390] cio: erratic DASD I/O behavior (Hendrik Brueckner) [548490]
  - [s390] cio: not operational devices cannot be deactivated (Hendrik Brueckner) [548490]
  - [s390] cio: initialization of I/O devices fails (Hendrik Brueckner) [548490]
  - [s390] cio: kernel panic after unexpected interrupt (Hendrik Brueckner) [548490]
  - [s390] cio: incorrect device state after device recognition and recovery (Hendrik Brueckner) [548490]
  - [s390] cio: setting a device online or offline fails for unknown reasons (Hendrik Brueckner) [548490]
  - [s390] cio: device recovery fails after concurrent hardware changes (Hendrik Brueckner) [548490]
  - [s390] cio: device recovery stalls after multiple hardware events (Hendrik Brueckner) [548490]
  - [s390] cio: double free under memory pressure (Hendrik Brueckner) [548490]
  - [sunrpc] Don't display zero scope IDs (Jeff Layton) [463530]
  - [sunrpc] Deprecate support for site-local addresses (Jeff Layton) [463530]
  - [input] dell-laptop: Update rfkill state on switch change (Matthew Garrett) [547892]
  - [input] Add support for adding i8042 filters (Matthew Garrett) [547892]
  - [vfs] force reval of target when following LAST_BIND symlinks (Jeff Layton) [548153]
  - [scsi] scsi_dh_rdac: add two IBM devices to rdac_dev_list (Rob Evers) [528576]
  - [fs] ext4: flush delalloc blocks when space is low (Eric Sandeen) [526758]
  - [fs] fs-writeback: Add helper function to start writeback if idle (Eric Sandeen) [526758]
  - [fat] make discard a mount option (Jeff Moyer) [552355]
  - [ext4] make trim/discard optional (and off by default) (Jeff Moyer) [552355]
  - [fusion] bump version to 3.04.13 (Tomas Henzl) [548408]
  - [fusion] fix for incorrect data underrun (Tomas Henzl) [548408]
  - [fusion] remove unnecessary printk (Tomas Henzl) [548408]
  - [cifs] NULL out tcon, pSesInfo, and srvTcp pointers when chasing DFS referrals (Jeff Layton) [545984]
  - [fs] ext4: wait for log to commit when unmounting (Josef Bacik) [524267]
  - [mm] hwpoison: backport the latest patches from linux-2.6.33 (Dean Nelson) [547705]
  - [netdrv] bnx2i: update to 2.1.0 (Stanislaw Gruszka) [463268]
  - [netdrv] cnic: fixes for RHEL6 (Stanislaw Gruszka) [463268]
  - [gfs2] Fix potential race in glock code (Steven Whitehouse) [546279]
  - [scsi] make driver PCI legacy I/O port free (Tomas Henzl) [549118]
  - [scsi] eliminate double free (Tomas Henzl) [549351]
  - [dlm] always use GFP_NOFS (David Teigland) [545904]
  - [block] Fix topology stacking for data and discard alignment (Mike Snitzer) [549766]
  - [scsi] scsi_dh: Make alua hardware handler s activate async (Rob Evers) [537257]
  - [scsi] scsi_dh: Make hp hardware handler s activate async (Rob Evers) [537257]
  - [scsi] scsi_dh: Make rdac hardware handler s activate async (Rob Evers) [537257]
  - [scsi] scsi_dh: Change the scsidh_activate interface to be asynchronous (Rob Evers) [537257]
  - [netdrv] update tg3 to version 3.105 (John Feeney) [465194]
  - [netdrv] bnx2x: update to 1.52.1-5 (Stanislaw Gruszka) [464427]
  - [netdrv] ixgbe: add support for 82599-KR and update to latest upstream (Andy Gospodarek) [462781]
  - [block] cfq-iosched: Remove prio_change logic for workload selection (Jeff Moyer) [548796]
  - [block] cfq-iosched: Get rid of nr_groups (Jeff Moyer) [548796]
  - [block] cfq-iosched: Remove the check for same cfq group from allow_merge (Jeff Moyer) [548796]
  - [block] cfq: set workload as expired if it doesn't have any slice left (Jeff Moyer) [548796]
  - [block] Fix a CFQ crash in "for-2.6.33" branch of block tree (Jeff Moyer) [548796]
  - [block] cfq: Remove wait_request flag when idle time is being deleted (Jeff Moyer) [548796]
  - [block] cfq-iosched: commenting non-obvious initialization (Jeff Moyer) [548796]
  - [block] cfq-iosched: Take care of corner cases of group losing share due to deletion (Jeff Moyer) [548796]
  - [block] cfq-iosched: Get rid of cfqq wait_busy_done flag (Jeff Moyer) [548796]
  - [block] cfq: Optimization for close cooperating queue searching (Jeff Moyer) [548796]
  - [block] cfq-iosched: reduce write depth only if sync was delayed (Jeff Moyer) [548796]
  - [x86] ucode-amd: Load ucode-patches once and not separately of each CPU (George Beshers) [548840]
  - [x86] Remove enabling x2apic message for every CPU (George Beshers) [548840]
  - [x86] Limit number of per cpu TSC sync messages (George Beshers) [548840]
  - [sched] Limit the number of scheduler debug messages (George Beshers) [548840]
  - [init] Limit the number of per cpu calibration bootup messages (George Beshers) [548840]
  - [x86] Limit the number of processor bootup messages (George Beshers) [548840]
  - [x86] cpu: mv display_cacheinfo -> cpu_detect_cache_sizes (George Beshers) [548840]
  - [x86] Remove CPU cache size output for non-Intel too (George Beshers) [548840]
  - [x86] Remove the CPU cache size printk's (George Beshers) [548840]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-4.el6]
changelog:
  - [kvm] VMX: Use shared msr infrastructure (Avi Kivity) [547777]
  - [kvm] x86 shared msr infrastructure (Avi Kivity) [547777]
  - [kvm] VMX: Move MSR_KERNEL_GS_BASE out of the vmx autoload msr area (Avi Kivity) [547777]
  - [kvm] core, x86: Add user return notifiers (Avi Kivity) [547777]
  - [quota] ext4: Support for 64-bit quota format (Jerome Marchand) [546311]
  - [quota] ext3: Support for vfsv1 quota format (Jerome Marchand) [546311]
  - [quota] Implement quota format with 64-bit space and inode limits (Jerome Marchand) [546311]
  - [quota] Move definition of QFMT_OCFS2 to linux/quota.h (Jerome Marchand) [546311]
  - [scsi] cciss: remove pci-ids (Tomas Henzl) [464649]
  - [scsi] hpsa: new driver (Tomas Henzl) [464649]
  - [mm] Add file page writeback mm tracepoints. (Larry Woodman) [523093]
  - [mm] Add page reclaim mm tracepoints. (Larry Woodman) [523093]
  - [mm] Add file page mm tracepoints. (Larry Woodman) [523093]
  - [mm] Add anonynmous page mm tracepoints. (Larry Woodman) [523093]
  - [mm] Add mm tracepoint definitions to kmem.h (Larry Woodman) [523093]
  - [ksm] fix ksm.h breakage of nommu build (Izik Eidus) [548586]
  - [ksm] remove unswappable max_kernel_pages (Izik Eidus) [548586]
  - [ksm] memory hotremove migration only (Izik Eidus) [548586]
  - [ksm] rmap_walk to remove_migation_ptes (Izik Eidus) [548586]
  - [ksm] mem cgroup charge swapin copy (Izik Eidus) [548586]
  - [ksm] share anon page without allocating (Izik Eidus) [548586]
  - [ksm] take keyhole reference to page (Izik Eidus) [548586]
  - [ksm] hold anon_vma in rmap_item (Izik Eidus) [548586]
  - [ksm] let shared pages be swappable (Izik Eidus) [548586]
  - [ksm] fix mlockfreed to munlocked (Izik Eidus) [548586]
  - [ksm] stable_node point to page and back (Izik Eidus) [548586]
  - [ksm] separate stable_node (Izik Eidus) [548586]
  - [ksm] singly-linked rmap_list (Izik Eidus) [548586]
  - [ksm] cleanup some function arguments (Izik Eidus) [548586]
  - [ksm] remove redundancies when merging page (Izik Eidus) [548586]
  - [ksm] three remove_rmap_item_from_tree cleanups (Izik Eidus) [548586]
  - [mm] stop ptlock enlarging struct page (Izik Eidus) [548586]
  - [mm] vmscan: do not evict inactive pages when skipping an active list scan (Rik van Riel) [548457]
  - [mm] vmscan: make consistent of reclaim bale out between do_try_to_free_page and shrink_zone (Rik van Riel) [548457]
  - [mm] vmscan: kill sc.swap_cluster_max (Rik van Riel) [548457]
  - [mm] vmscan: zone_reclaim() dont use insane swap_cluster_max (Rik van Riel) [548457]
  - [mm] vmscan: kill hibernation specific reclaim logic and unify it (Rik van Riel) [548457]
  - [mm] vmscan: separate sc.swap_cluster_max and sc.nr_max_reclaim (Rik van Riel) [548457]
  - [mm] vmscan: stop kswapd waiting on congestion when the min watermark is not being met (Rik van Riel) [548457]
  - [mm] vmscan: have kswapd sleep for a short interval and double check it should be asleep (Rik van Riel) [548457]
  - [mm] pass address down to rmap ones (Rik van Riel) [548457]
  - [mm] CONFIG_MMU for PG_mlocked (Rik van Riel) [548457]
  - [mm] mlocking in try_to_unmap_one (Rik van Riel) [548457]
  - [mm] define PAGE_MAPPING_FLAGS (Rik van Riel) [548457]
  - [mm] swap_info: note SWAP_MAP_SHMEM (Rik van Riel) [548457]
  - [mm] swap_info: swap count continuations (Rik van Riel) [548457]
  - [mm] swap_info: swap_map of chars not shorts (Rik van Riel) [548457]
  - [mm] swap_info: SWAP_HAS_CACHE cleanups (Rik van Riel) [548457]
  - [mm] swap_info: miscellaneous minor cleanups (Rik van Riel) [548457]
  - [mm] swap_info: include first_swap_extent (Rik van Riel) [548457]
  - [mm] swap_info: change to array of pointers (Rik van Riel) [548457]
  - [mm] swap_info: private to swapfile.c (Rik van Riel) [548457]
  - [mm] move inc_zone_page_state(NR_ISOLATED) to just isolated place (Rik van Riel) [548457]
  - [xen] support MAXSMP (Andrew Jones) [547129]
  - [xen] wait up to 5 minutes for device connetion and fix fallout (Paolo Bonzini) [523630]
  - [uv] x86 SGI: Map low MMR ranges (George Beshers) [548181]
  - [uv] gru: function to generate chipset IPI values (George Beshers) [548181]
  - [uv] x86 RTC: Clean up error handling (George Beshers) [548181]
  - [uv] x86: RTC: Add clocksource only boot option (George Beshers) [548181]
  - [uv] x86: RTC: Fix early expiry handling (George Beshers) [548181]
  - [uv] x86: introduce uv_gpa_is_mmr (George Beshers) [548181]
  - [uv] x86: function to translate from gpa -> socket_paddr (George Beshers) [548181]
  - [uv] x86: SGI UV: Fix BAU initialization (George Beshers) [548181]
  - [s390] zfcp: Block SCSI EH thread for rport state BLOCKED (Hendrik Brueckner) [547413]
  - [scsi] scsi_transport_fc: Introduce helper function for blocking scsi_eh (Hendrik Brueckner) [547413]
  - [s390] zfcp: improve FSF error reporting (Hendrik Brueckner) [547386]
  - [s390] zfcp: fix ELS ADISC handling to prevent QDIO errors (Hendrik Brueckner) [547385]
  - [s390] zfcp: Assign scheduled work to driver queue (Hendrik Brueckner) [547377]
  - [s390] zfcp: Don't fail SCSI commands when transitioning to blocked fc_rport (Hendrik Brueckner) [547379]
  - [s390] ctcm: suspend has to wait for outstanding I/O (Hendrik Brueckner) [546633]
  - [s390] cmm: free pages on hibernate (Hendrik Brueckner) [546407]
  - [s390] iucv: add work_queue cleanup for suspend (Hendrik Brueckner) [546319]
  - [s390] dasd: let device initialization wait for LCU setup (Hendrik Brueckner) [547735]
  - [s390] dasd: remove strings from s390dbf (Hendrik Brueckner) [547735]
  - [s390] dasd: enable prefix independent of pav support (Hendrik Brueckner) [547735]
  - [sound] ALSA HDA driver update 2009-12-15 (Jaroslav Kysela) [525391]
  - [utrace] utrace core (Roland McGrath) [549491]
  - [utrace] implement utrace-ptrace (Roland McGrath) [549491]
  - [ptrace] reorder the code in kernel/ptrace.c (Roland McGrath) [549491]
  - [ptrace] export __ptrace_detach() and do_notify_parent_cldstop() (Roland McGrath) [549491]
  - [ptrace_signal] check PT_PTRACED before reporting a signal (Roland McGrath) [549491]
  - [tracehooks] check PT_PTRACED before reporting the single-step (Roland McGrath) [549491]
  - [tracehooks] kill some PT_PTRACED checks (Roland McGrath) [549491]
  - [signals] check ->group_stop_count after tracehook_get_signal() (Roland McGrath) [549491]
  - [ptrace] x86: change syscall_trace_leave() to rely on tracehook when stepping (Roland McGrath) [549491]
  - [ptrace] x86: implement user_single_step_siginfo() (Roland McGrath) [549491]
  - [ptrace] change tracehook_report_syscall_exit() to handle stepping (Roland McGrath) [549491]
  - [ptrace] powerpc: implement user_single_step_siginfo() (Roland McGrath) [549491]
  - [ptrace] introduce user_single_step_siginfo() helper (Roland McGrath) [549491]
  - [ptrace] copy_process() should disable stepping (Roland McGrath) [549491]
  - [ptrace] cleanup ptrace_init_task()->ptrace_link() path (Roland McGrath) [549491]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-3.el6]
changelog:
  - [modsign] Don't check e_entry in ELF header (David Howells) [548027]
  - [pci] pciehp: Provide an option to disable native PCIe hotplug (Matthew Garrett) [517050]
  - [s390] OSA QDIO data connection isolation (Hendrik Brueckner) [537496]
  - [s390] zcrypt: adjust speed rating of cex3 adapters (Hendrik Brueckner) [537495]
  - [s390] zcrypt: adjust speed rating between cex2 and pcixcc (Hendrik Brueckner) [537495]
  - [s390] zcrypt: use definitions for cex3 (Hendrik Brueckner) [537495]
  - [s390] zcrypt: add support for cex3 device types (Hendrik Brueckner) [537495]
  - [s390] zcrypt: special command support for cex3 exploitation (Hendrik Brueckner) [537495]
  - [s390] zcrypt: initialize ap_messages for cex3 exploitation (Hendrik Brueckner) [537495]
  - [s390] kernel: performance counter fix and page fault optimization (Hendrik Brueckner) [546396]
  - [s390] kernel: fix dump indicator (Hendrik Brueckner) [546285]
  - [s390] dasd: support DIAG access for read-only devices (Hendrik Brueckner) [546309]
  - [s390] zcrypt: Do not simultaneously schedule hrtimer (Hendrik Brueckner) [546291]
  - [s390] kernel: clear high-order bits after switching to 64-bit mode (Hendrik Brueckner) [546314]
  - [virt] vhost: add missing architectures (Michael S. Tsirkin) [540389]
  - [virt] vhost_net: a kernel-level virtio server (Michael S. Tsirkin) [540389]
  - [virt] mm: export use_mm/unuse_mm to modules (Michael S. Tsirkin) [540389]
  - [virt] tun: export underlying socket (Michael S. Tsirkin) [540389]
  - [dm] snapshot-merge support from 2.6.33 (Mike Snitzer) [547563]
  - [dm] snapshot changes from 2.6.33 (Mike Snitzer) [547563]
  - [dm] crypt changes from 2.6.33 (Mike Snitzer) [547563]
  - [dm] raid1 changes from 2.6.33 (Mike Snitzer) [547563]
  - [dm] core and mpath changes from 2.6.33 (Mike Snitzer) [547563]
  - [scsi] fix dma handling when using virtual hosts (Mike Christie) [525241]
  - [nfs] convert proto= option to use netids rather than a protoname (Jeff Layton) [545973]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-2.el6]
changelog:
  - [block] config: enable CONFIG_BLK_DEV_INTEGRITY (Jeff Moyer) [490732]
  - [block] config: enable CONFIG_BLK_CGROUP (Jeff Moyer) [425895]
  - [libata] Clarify ata_set_lba_range_entries function (Jeff Moyer) [528046]
  - [libata] Report zeroed read after Trim and max discard size (Jeff Moyer) [528046]
  - [scsi] Correctly handle thin provisioning write error (Jeff Moyer) [528046]
  - [scsi] sd: WRITE SAME(16) / UNMAP support (Jeff Moyer) [528046]
  - [scsi] scsi_debug: Thin provisioning support (Jeff Moyer) [528046]
  - [scsi] Add missing command definitions (Jeff Moyer) [528046]
  - [block] Add support for the ATA TRIM command in libata. (Jeff Moyer) [528046]
  - [block] dio: fix performance regression (Jeff Moyer) [545507]
  - [block] cfq-iosched: Do not access cfqq after freeing it (Jeff Moyer) [425895]
  - [block] include linux/err.h to use ERR_PTR (Jeff Moyer) [425895]
  - [block] cfq-iosched: use call_rcu() instead of doing grace period stall on queue exit (Jeff Moyer) [425895]
  - [block] blkio: Allow CFQ group IO scheduling even when CFQ is a module (Jeff Moyer) [425895]
  - [block] blkio: Implement dynamic io controlling policy registration (Jeff Moyer) [425895]
  - [block] blkio: Export some symbols from blkio as its user CFQ can be a module (Jeff Moyer) [425895]
  - [block] cfq-iosched: make nonrot check logic consistent (Jeff Moyer) [545225]
  - [block] io controller: quick fix for blk-cgroup and modular CFQ (Jeff Moyer) [425895]
  - [block] cfq-iosched: move IO controller declerations to a header file (Jeff Moyer) [425895]
  - [block] cfq-iosched: fix compile problem with !CONFIG_CGROUP (Jeff Moyer) [425895]
  - [block] blkio: Documentation (Jeff Moyer) [425895]
  - [block] blkio: Wait on sync-noidle queue even if rq_noidle = 1 (Jeff Moyer) [425895]
  - [block] blkio: Implement group_isolation tunable (Jeff Moyer) [425895]
  - [block] blkio: Determine async workload length based on total number of queues (Jeff Moyer) [425895]
  - [block] blkio: Wait for cfq queue to get backlogged if group is empty (Jeff Moyer) [425895]
  - [block] blkio: Propagate cgroup weight updation to cfq groups (Jeff Moyer) [425895]
  - [block] blkio: Drop the reference to queue once the task changes cgroup (Jeff Moyer) [425895]
  - [block] blkio: Provide some isolation between groups (Jeff Moyer) [425895]
  - [block] blkio: Export disk time and sectors used by a group to user space (Jeff Moyer) [425895]
  - [block] blkio: Some debugging aids for CFQ (Jeff Moyer) [425895]
  - [block] blkio: Take care of cgroup deletion and cfq group reference counting (Jeff Moyer) [425895]
  - [block] blkio: Dynamic cfq group creation based on cgroup tasks belongs to (Jeff Moyer) [425895]
  - [block] blkio: Group time used accounting and workload context save restore (Jeff Moyer) [425895]
  - [block] blkio: Implement per cfq group latency target and busy queue avg (Jeff Moyer) [425895]
  - [block] blkio: Introduce per cfq group weights and vdisktime calculations (Jeff Moyer) [425895]
  - [block] blkio: Introduce blkio controller cgroup interface (Jeff Moyer) [425895]
  - [block] blkio: Introduce the root service tree for cfq groups (Jeff Moyer) [425895]
  - [block] blkio: Keep queue on service tree until we expire it (Jeff Moyer) [425895]
  - [block] blkio: Implement macro to traverse each service tree in group (Jeff Moyer) [425895]
  - [block] blkio: Introduce the notion of cfq groups (Jeff Moyer) [425895]
  - [block] blkio: Set must_dispatch only if we decided to not dispatch the request (Jeff Moyer) [425895]
  - [block] cfq-iosched: no dispatch limit for single queue (Jeff Moyer) [425895]
  - [block] Allow devices to indicate whether discarded blocks are zeroed (Jeff Moyer) [545203]
  - [block] Revert "cfq: Make use of service count to estimate the rb_key offset" (Jeff Moyer) [425895]
  - [block] cfq-iosched: fix corner cases in idling logic (Jeff Moyer) [425895]
  - [block] cfq-iosched: idling on deep seeky sync queues (Jeff Moyer) [425895]
  - [block] cfq-iosched: fix no-idle preemption logic (Jeff Moyer) [425895]
  - [block] cfq-iosched: fix ncq detection code (Jeff Moyer) [425895]
  - [block] cfq-iosched: cleanup unreachable code (Jeff Moyer) [425895]
  - [block] cfq: Make use of service count to estimate the rb_key offset (Jeff Moyer) [425895]
  - [block] partitions: read whole sector with EFI GPT header (Jeff Moyer) [463632]
  - [block] partitions: use sector size for EFI GPT (Jeff Moyer) [463632]
  - [block] Expose discard granularity (Jeff Moyer) [545203]
  - [block] cfq-iosched: fix next_rq computation (Jeff Moyer) [425895]
  - [block] cfq-iosched: simplify prio-unboost code (Jeff Moyer) [425895]
  - [block] blkdev: flush disk cache on ->fsync (Jeff Moyer) [545199]
  - [block] cfq-iosched: fix style issue in cfq_get_avg_queues() (Jeff Moyer) [425895]
  - [block] cfq-iosched: fairness for sync no-idle queues (Jeff Moyer) [425895]
  - [block] cfq-iosched: enable idling for last queue on priority class (Jeff Moyer) [425895]
  - [block] cfq-iosched: reimplement priorities using different service trees (Jeff Moyer) [425895]
  - [block] cfq-iosched: preparation to handle multiple service trees (Jeff Moyer) [425895]
  - [block] cfq-iosched: adapt slice to number of processes doing I/O (Jeff Moyer) [425895]
  - [block] cfq-iosched: improve hw_tag detection (Jeff Moyer) [425895]
  - [block] cfq: break apart merged cfqqs if they stop cooperating (Jeff Moyer) [533932]
  - [block] cfq: change the meaning of the cfqq_coop flag (Jeff Moyer) [533932]
  - [block] cfq: merge cooperating cfq_queues (Jeff Moyer) [533932]
  - [block] cfq: calculate the seek_mean per cfq_queue not per cfq_io_context (Jeff Moyer) [533932]
  - [block] CFQ is more than a desktop scheduler (Jeff Moyer) [533932]
  - [block] revert: cfq-iosched: limit coop preemption (Jeff Moyer) [533932]
  - perf: Don't free perf_mmap_data until work has been done (Aristeu Rozanski) [547432]
  - ext4: Fix insuficient checks in EXT4_IOC_MOVE_EXT (Aristeu Rozanski) [547432]
  - agp: clear GTT on intel (Aristeu Rozanski) [547432]
  - drm/i915: Fix sync to vblank when VGA output is turned off (Aristeu Rozanski) [547432]
  - drm: nouveau fixes (Aristeu Rozanski) [547432]
  - drm: radeon dp support (Aristeu Rozanski) [547432]
  - drm: radeon fixes (Aristeu Rozanski) [547432]
  - KVM: allow userspace to adjust kvmclock offset (Aristeu Rozanski) [547432]
  - ath9k backports (Aristeu Rozanski) [547432]
  - intel-iommu backport (Aristeu Rozanski) [547432]
  - updating patch linux-2.6-nfsd4-proots.patch (2.6.32-8.fc13 reference) (Aristeu Rozanski) [547432]
  - updating linux-2.6-execshield.patch (2.6.32-8.fc13 reference) (Aristeu Rozanski) [547432]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-0.54.el6]
changelog:
  - [edac] amd64_edac: disabling temporarily (Aristeu Rozanski)
  - [x86] Enable CONFIG_SPARSE_IRQ (Prarit Bhargava) [543174]
  - [x86] panic if AMD cpu_khz is wrong (Prarit Bhargava) [523468]
  - [infiniband] Rewrite SG handling for RDMA logic (Mike Christie) [540269]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-0.53.el6]
changelog:
  - [net] Add acession counts to all datagram protocols (Neil Horman) [445366]
  - [modsign] Enable module signing in the RHEL RPM (David Howells) [517341]
  - [modsign] Don't include .note.gnu.build-id in the digest (David Howells) [517341]
  - [modsign] Apply signature checking to modules on module load (David Howells) [517341]
  - [modsign] Module signature checker and key manager (David Howells) [517341]
  - [modsign] Module ELF verifier (David Howells) [517341]
  - [modsign] Add indications of module ELF types (David Howells) [517341]
  - [modsign] Multiprecision maths library (David Howells) [517341]
  - [procfs] add ability to modify proc file limits from outside a processes own context (Neil Horman) [461946]
  - [s390x] fix build failure with CONFIG_FTRACE_SYSCALLS (Aristeu Rozanski) [538978]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-0.52.el6]
changelog:
  - [x86] AMD Northbridge: Verify NB's node is online (Prarit Bhargava) [536769]
  - [scsi] devinfo update for Hitachi entries (Takahiro Yasui) [526763]
  - [net] export device speed and duplex via sysfs (Andy Gospodarek) [453432]
  - [ppc64] Fix kcrctab_ sections to undo undesireable relocations that break kdump (Neil Horman) [509012]
  - [mm] Limit 32-bit x86 systems to 16GB and prevent panic on boot when system has more than ~30GB (Larry Woodman) [532039]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-0.51.el6]
changelog:
  - [kernel] Set panic_on_oops to 1 (Prarit Bhargava) [529963]
  - [kdump] kexec: allow to shrink reserved memory (Amerigo Wang) [523091]
  - [kdump] doc: update the kdump document (Amerigo Wang) [523091]
  - [kdump] powerpc: implement crashkernel=auto (Amerigo Wang) [523091]
  - [kdump] powerpc: add CONFIG_KEXEC_AUTO_RESERVE (Amerigo Wang) [523091]
  - [kdump] ia64: implement crashkernel=auto (Amerigo Wang) [523091]
  - [kdump] ia64: add CONFIG_KEXEC_AUTO_RESERVE (Amerigo Wang) [523091]
  - [kdump] x86: implement crashkernel=auto (Amerigo Wang) [523091]
  - [kdump] x86: add CONFIG_KEXEC_AUTO_RESERVE (Amerigo Wang) [523091]
  - [block] aio: implement request batching (Jeff Moyer) [533931]
  - [block] get rid of the WRITE_ODIRECT flag (Jeff Moyer) [533931]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-0.50.el6]
changelog:
  - [crypto] padlock-aes: Use the correct mask when checking whether copying is required (Chuck Ebbert)
  - [rfkill] add support to a key to control all radios (Aristeu Rozanski)
  - [acpi] be less verbose about old BIOSes (Aristeu Rozanski)
  - [drm] intel big hammer (Aristeu Rozanski)
  - [e1000] add quirk for ich9 (Aristeu Rozanski)
  - [pci] cacheline sizing (Dave Jones)
  - [crash] add crash driver (Dave Anderson)
  - [fb] disable fbcon logo with parameter (Aristeu Rozanski)
  - [pci] silence some PCI resource allocation errors (Aristeu Rozanski)
  - [serio] disable error messages when i8042 isn't found (Peter Jones)
  - [serial] Enable higher baud rates for 16C95x (Aristeu Rozanski)
  - [input] remove pcspkr modalias (Aristeu Rozanski)
  - [floppy] remove the floppy pnp modalias (Aristeu Rozanski)
  - [input] remove unwanted messages on spurious events (Aristeu Rozanski)
  - [sound] hda intel prealloc 4mb dmabuffer (Aristeu Rozanski)
  - [sound] disables hda beep by default (Aristeu Rozanski)
  - [pci] sets PCIE ASPM default policy to POWERSAVE (Aristeu Rozanski)
  - [pci] add config option to control the default state of PCI MSI interrupts (Aristeu Rozanski)
  - [debug] always inline kzalloc (Aristeu Rozanski)
  - [debug] add would_have_oomkilled procfs ctl (Aristeu Rozanski)
  - [debug] add calls to print_tainted() on spinlock functions (Aristeu Rozanski)
  - [debug] display tainted information on other places (Aristeu Rozanski)
  - [x86] add option to control the NMI watchdog timeout (Aristeu Rozanski)
  - [debug] print common struct sizes at boot time (Aristeu Rozanski)
  - [acpi] Disable firmware video brightness change by default (Matthew Garrett)
  - [acpi] Disable brightness switch by default (Aristeu Rozanski)
  - [usb] enable autosuspend on UVC by default (Matthew Garrett)
  - [usb] enable autosuspend by default on qcserial (Matthew Garrett)
  - [usb] Allow drivers to enable USB autosuspend on a per-device basis (Matthew Garrett)
  - [nfs] make nfs4 callback hidden (Steve Dickson)
  - [nfsd4] proots (Aristeu Rozanski)
  - [execshield] introduce execshield (Aristeu Rozanski)
  - [powerpc] add modalias_show operation (Aristeu Rozanski)
  - [hwmon] add VIA hwmon temperature sensor support (Aristeu Rozanski)
  - [utrace] introduce utrace implementation (Aristeu Rozanski)
  - [build] introduce AFTER_LINK variable (Aristeu Rozanski)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-14
changelog:
  - run the config file upgrade in %posttrans to avoid problems on multilib
    (#706454)
  - convert UID to long long on all arches to catch negative values (#741362)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-11
changelog:
  - do not overflow big UID values, use explicit base when converting UIDs
    and GIDs to integer types (#741362)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-10
changelog:
  - update the validnames changes to the self-tests so that their expectations
    match the modified defaults (#737496)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-9
changelog:
  - include backported enhancement to take URIs in the form "dns:DOMAIN" in
    addition to the already-implemented "dns" (#730309)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-8
changelog:
  - switch to only munging the contents of /etc/nslcd.conf on the very first
    install (#706454)
  - make sure that we have enough space to parse any valid GID value when
    parsing a user's primary GID (#716822,#720230)
  - tweak the default "validnames" setting to also allow shorter and shorter
    names to pass muster (#706860)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-6
changelog:
  - backport patches from 0.7.10 to interpret more types of errors as indicators
    that we need to ask a different server (#692817) and from 0.7.12 to not
    get stuck while cleaning up SSL/TLS encrypted connections


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-5
changelog:
  - backport support for the "validnames" option from SVN and use it to allow
    parentheses characters by modifying the default setting (#690870)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-4
changelog:
  - tweak the pre-generated man pages to avoid a syntax error warning with older
    versions of groff (#676483)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-2
changelog:
  - don't return an uninitialized buffer as the value for an optional attribute
    that isn't present in the directory server entry (#592965)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.4-1
changelog:
  - update to 0.7.4 (#592385)
  - stop trying to migrate retry timeout parameters from old ldap.conf files
  - add an explicit requires: on nscd to make sure it's at least available
    on systems that are using nss-pam-ldapd; otherwise it's usually optional
    (#587306)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - rename to nss-pam-ldapd
  - also check for import settings in /etc/nss_ldap.conf and /etc/pam_ldap.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mitchell Berger's patch to clean up the init script, use %{_initddir},
    and correct the %post so that it only thinks about turning on nslcd when
    we're first being installed (#522947)
  - tell status() where the pidfile is when the init script is called for that


author: Nalin Dahyabhai <nalin@redhat.com> 0.6.8-1
changelog:
  - bump release number to 1 (part of #491767)
  - fix which group we check for during %pre (part of #491767)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-23.P1
changelog:
  - Build libraries with -fpic/-fPIC, not with -fPIE (#736999)
  - Add dhcp-common subpackage (#736194)
  - Do not run dhcpd as root (#693381)
    - Use '--enable-paranoia' configure flag
    - Create dhcpd user in %pre
    - Run dhcpd/dhcpd6 services with '-user dhcpd -group dhcpd'
    - Move changing of the effective user/group ID after writing new PID file.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-21.P1
changelog:
  - A pair of defects cause the server to halt upon processing certain packets
    (CVE-2011-2748, CVE-2011-2749, #729885)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-20.P1
changelog:
  - The 'hardware [ethernet|etc] ...;' parameter in host records has been
    extended to attempt to match DHCPv6 clients by the last octets
    of a DUID-LL or DUID-LLT provided by the client. (#706974)
  - Explicitly clear the ARP cache and flush all addresses & routes
    instead of bringing the interface down (#694799)
  - Use PID for seeding the random number generator in dhclient (#694798)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-16.P1
changelog:
  - Unexpected abort caused by a DHCPv6 decline message (CVE-2011-0413, #672995)
  - Write/accept a semi-colon at the end of the max-life and preferred-life
    clauses in dhcpv6 lease files (#672551)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-13.P1
changelog:
  - Add LICENSE file to dhclient subpackage (#613683)
  - Add DHCRELAYARGS variable to /etc/sysconfig/dhcrelay (#625846)
  - dhclient logs its pid to make troubleshooting systems
    with multiple dhclients running easier (#627257)
  - Fix parsing of date (#631071)
  - dhclient-script: when updating 'search' statement in resolv.conf,
    add domain part of hostname if it's not already there (#637763)
  - Fix for CVE-2010-3611 (#651914)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-10
changelog:
  - Add domain-search to the list of default requested DHCP options (#588352)
  - Move /etc/NetworkManager/dispatcher.d/10-dhclient script
    from dhcp to dhclient subpackage (#591140).
  - Compile with -fno-strict-aliasing (#594151).


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-9
changelog:
  - If the Reply was received in response to Renew or Rebind message,
    client adds any new addresses in the IA option to the IA (#578098)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-7
changelog:
  - In client initiated message exchanges stop retransmission
    upon reaching the MRD rather than at some point after it (#559404)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-6
changelog:
  - In dhclient-script check whether bound address
    passed duplicate address detection (DAD) (#559403)
  - If the bound address failed DAD (is found to be in use on the link),
    the dhcpv6 client sends a Decline message to the server
    as described in section 18.1.7 of RFC-3315 (#559403)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-5
changelog:
  - Discard unicast Request/Renew/Release/Decline message
    (unless we set unicast option) and respond with Reply
    with UseMulticast Status Code option (#554622)
  - Remove DHCPV6 OPERATION section from dhclient.conf.5
    describing deprecated 'send dhcp6.oro' syntax


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-4
changelog:
  - Add interface-mtu to the list of default requested DHCP options (#571719)
  - Fix paths in man pages (#571720)
  - Remove odd tests in %preun


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-3
changelog:
  - Fix pm-utils/sleep.d/ directory ownership conflict (#566751)
  - Fix pm-utils script location (#479639, c#16)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-2
changelog:
  - Fix dhclient-script to delete address which the client is going to release
    as soon as it begins the Release message exchange process (#559402)
  - Fix dhclient-decline-backoff.patch (#563458)
  - Improve documentation of -nc option in dhclient(8) man page


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.0p1-16
changelog:
  - Added init script (dhcpd6) to also start dhcpd for IPv6 (#558825)
  - Fixed dhcpd and dhcrelay initscripts
  - Added dhcpd6.conf.sample


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.0p1-15
changelog:
  - Memory leak in the load_balance_mine() function is fixed (#554384)
  - Use macro global instead of define


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-4
changelog:
  - Upgrade to latest ldap-for-dhcp patch which makes sure that only
    dhcpd links with OpenLDAP (#517474)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-3
changelog:
  - Update NetworkManager dispatcher script to remove case conversion
    and source /etc/sysconfig/network


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-2
changelog:
  - Add /usr/lib[64]/pm-utils/sleep.d/56dhclient to handle suspend and
    resume with active dhclient leases (#479639)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-22
changelog:
  - Set permissions on /etc/dhcp to 0750 (#508247)
  - Update to new ldap-for-dhcp patch set
  - Correct problems when upgrading from a previous release and your
    dhcpd.conf file not being placed in /etc/dhcp (#506600)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-21
changelog:
  - Handle cases in add_timeout() where the function is called with a NULL
    value for the 'when' parameter (#506626)
  - Fix SELinux denials in dhclient-script when the script makes backup
    configuration files and restores them later (#483747)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-19
changelog:
  - Restrict interface names given on the dhcpd command line to length
    IFNAMSIZ or shorter (#441524)
  - Change to /etc/sysconfig/network-scripts in dhclient-script before
    calling need_config or source_config (#496233)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-17
changelog:
  - Fix setting default route when client IP address changes (#486512, #473658)
  - 'reload' and 'try-restart' on dhcpd and dhcrelay init scripts
    will display usage information and return code 3


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-16
changelog:
  - Correct %post problems in dhclient package (#495361)
  - Read hooks scripts from /etc/dhcp (#495361)
  - Update to latest ldap-for-dhcp


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-6
changelog:
  - Enable dhcpv6 support (#480798)
  - Fix config file migration in scriptlets (#480543)
  - Allow dhclient-script expansion with /etc/dhcp/dhclient.d/*.sh scripts


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-2
changelog:
  - Make sure all /etc/dhcp config files are marked in the manifest
  - Include new config file directies in the dhcp and dhclient packages
  - Do not overwrite new config files if they already exist


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-1
changelog:
  - Upgraded to ISC dhcp-4.1.0
  - Had to rename the -T option to -timeout as ISC is now using -T
  - Allow package rebuilders to easily enable DHCPv6 support with:
        rpmbuild --with DHCPv6 dhcp.spec
    Note that Fedora is still using the 'dhcpv6' package, but some
    users may want to experiment with the ISC DHCPv6 implementation
    locally.


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-32
changelog:
  - Enable LDAP/SSL support in dhcpd (#467740)
  - Do not calculate a prefix for an address we did not receive (#473885)
  - Removed libdhcp4client because libdhcp has been removed from Fedora


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-31
changelog:
  - Use O_CLOEXEC in open(2) calls and "e" mode in fopen(3) calls, build
    with -D_GNU_SOURCE so we pick up O_CLOEXEC (#468984)
  - Add missing prototype for validate_port() in common/inet.c


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-30
changelog:
  - Fix dhclient.conf man page and sample config file to say 'supersede
    domain-search', which is what was actually demonstrated (#467955)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-26
changelog:
  - Validate port numbers for dhclient, dhcpd, and dhcrelay to ensure
    that are within the correct range (#438149)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-23
changelog:
  - Prevent $metric from being set to '' (#460640)
  - Remove unnecessary warning messages
  - Do not source config file (ifcfg-DEVICE) unless it exists


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-22
changelog:
  - Add missing '[' to dhclient-script (#459860)
  - Correct test statement in add_default_gateway() in dhclient-script (#459860)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-20
changelog:
  - Rewrite of /sbin/dhclient-script (make the script a little more readable,
    discontinue use of ifconfig in favor of ip, store backup copies of orig
    files in /var rather than in /etc)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-19
changelog:
  - Remove 'c' from the domain-search format string in common/tables.c
  - Prevent \032 from appearing in resolv.conf search line (#450042)
  - Restore SELinux context on saved /etc files (#451560)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-17
changelog:
  - Carry over RES_OPTIONS from ifcfg-ethX files to /etc/resolv.conf (#202923)
  - Clean up Requires tags for devel packages
  - Allow SEARCH variable in ifcfg files to override search path (#454152)
  - Do not down interface if there is an active lease (#453982)
  - Clean up how dhclient-script restarts ypbind
  - Set close-on-exec on dhclient.leases for SELinux (#446632)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-16
changelog:
  - Remove instaces of \032 in domain search option (#450042)
  - Make 'service dhcpd configtest' display text indicating the status


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-12
changelog:
  - Remove Requires on openldap-server (#432180)
  - Replace CLIENTBINDIR, ETCDIR, DBDIR, and RUNDIR in the man pages with the
    correct paths


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-10
changelog:
  - Save conf files adding '.predhclient.$interface' to the name (#306381)
  - Only restore conf files on EXPIRE/FAIL/RELEASE/STOP if there are no other
    dhclient processes running (#306381)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-9
changelog:
  - Match LDAP server option values in stables.c and dhcpd.h (#431003)
  - Fix invalid sprintf() statement in server/ldap.c (#431003)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-6
changelog:
  - read_function() comes from the LDAP patch, so fix it there
  - Init new struct universe structs in libdhcp4client so we don't crash on
    multiple DHCP attempts (#428203)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-4
changelog:
  - Fix dhclient.lease file parsing problems (#428785)
  - Disable IPv6 support for now as we already ship dhcpv6 (#428987)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-1
changelog:
  - Upgrade to ISC dhcp-4.0.0 (#426634)
       - first ISC release to incorporate DHCPv6 protocol support
       - source tree now uses GNU autoconf/automake
  - Removed the libdhcp4client-static package


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-8
changelog:
  - Put dhcp.schema in /etc/openldap/schema (#330471)
  - Remove manpages patch and keep modified man pages as Source files
  - Improve dhclient.8 man page to list options in a style consistent
    with most other man pages on the planet
  - Upgrade to latest dhcp LDAP patch, which brings in a new dhcpd-conf-to-ldap
    script, updated schema file, and other bug fixes including SSL support for
    LDAP authentication (#375711)
  - Do not run dhcpd and dhcrelay services by default (#362321)


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-6
changelog:
  - Rename Makefile.dist to Makefile.libdhcp4client
  - Spec file cleanups
  - Include stdarg.h in libdhcp_control.h


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-5
changelog:
  - Remove chkconfig usage for ypbind in dhclient-script (#351211)
  - Combine dhcp-static and dhcp-devel packages since there are no shared
    libraries offered
  - Remove Requires: openldap-devel on dhcp-devel and libdhcp4client-devel
  - Make libdhcp4client-devel require dhcp-devel (for libdhcp_control.h)
  - Do not make dhcp-devel require the dhcp package, those are independent


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-4
changelog:
  - Install libdhcp_control.h to /usr/include/isc-dhcp/libdhcp_control.h
  - Update libdhcp4client patch to use new libdhcp_control.h location
  - Remove __fedora_contrib/ subdirectory in /usr/share/doc/dhcp-3.1.0,
    install those docs to /usr/share/doc/dhcp-3.1.0


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-1
changelog:
  - Upgrade to ISC dhcp-3.1.0
  - Remove unnecessary /usr/include/dhcp4client/isc_dhcp headers
  - Make sure restorecon is run on /var/lib/dhcpd/dhcpd.leases (#251688)
  - Install dhcp.schema to /etc/openldap/dhcp.schema (#330471)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-8
changelog:
  - Init script fixes (#320761)
  - Removed linux.dbus-example script since we aren't using dhcdbd now
  - Remove dhcdbd leftovers from dhclient-script (#306381)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-7
changelog:
  - In dhcp.conf.5, explain that if no next-server statement applies to the
    requesting client, the address 0.0.0.0 is used (#184484).


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-3
changelog:
  - Remove the -x switch enabling extended new option info.  If given to
    dhclient now, it's ignored.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-36
changelog:
  - BOOTP_BROADCAST_ALWAYS is not the same as ATSFP, fixed
  - Added anycast mac support to dhclient for OLPC


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-35
changelog:
  - Disable -fvisibility=hidden for now as it breaks dhcpv4_client() from
    the shared library (#240804)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-34
changelog:
  - Init script fixes (#237985, #237983)
  - Reference correct scripts in dhclient-script.8 man page (#238036)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-31
changelog:
  - Spec file cleanups (#225691)
  - Put libdhcpctl.a and libomapi.a in dhcp-devel-static package
  - Put libdhcp4client.a in libdhcp4client-devel-static package


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-27
changelog:
  - Ensure that Perl and Perl modules are not added as dependencies (#234688)
  - Reorganize patches by feature/bug per packaging guidelines (#225691)
  - Move the following files from patches to source files:
       linux.dbus-example, linux, Makefile.dist, dhcp4client.h, libdhcp_control.h
  - Compile with -fno-strict-aliasing as ISC coding standards generally don't
    agree well with gcc 4.x.x


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-24
changelog:
  - Include contrib/ subdirectory in /usr/share/doc (#230476)
  - Added back Requires for perl since dhcpd-conf-to-ldap needs it (#225691)
  - Put copies of dhcp-options and dhcp-eval man pages in the dhcp and
    dhclient packages rather than having the elaborate symlink collection
  - Explicitly name man pages in the %files listings
  - Use the %{_sysconfdir} and %{_initrddir} macros (#225691)
  - Use macros for commands in %build and %install
  - Split README.ldap, draft-ietf-dhc-ldap-schema-01.txt, and
    dhcpd-conf-to-ldap.pl out of the LDAP patch
  - Split linux.dbus-example script out of the extended new option info patch
  - Remove unnecessary changes from the Makefile patch


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-23
changelog:
  - Update Xen partial checksums patch
  - Remove perl Requires (#225691)
  - Make dhcp-devel depend on dhcp = e:v-r (#225691)
  - libdhcp4client-devel Requires pkgconfig (#225691)
  - Do not add to RPM_OPT_FLAGS, use COPTS variable instead (#225691)
  - Use %{buildroot} macro instead of RPM_BUILD_ROOT variable (#225691)
  - Preserve timestamps on all installed data files (#225691)
  - Remove dhcp-options.5.gz and dhcp-eval.5.gz symlinking in post (#225691)
  - Use %defattr(-,root,root,-) (#225691)
  - Do not flag init scripts as %config in %files section (#225691)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-13
changelog:
  - Add support for dhcpd(8) to read dhcpd.conf from an LDAP server (#224352)
  - Remove invalid ja_JP.eucJP man pages from /usr/share/doc


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-9
changelog:
  - Remove dhcptables.pl from the source package
  - Mark libres.a symbols hidden (#198496)
  - Set DT_SONAME on libdhcp4client to libdhcp4client-VERSION.so.0
  - Make function definition for dst_hmac_md5_init() match the prototype


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-8
changelog:
  - Roll md5 patch in to libdhcp4client patch since it's related
  - Do not overwrite /etc/ntp/step-tickers (#217663)
  - Resolves: rhbz#217663


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-4
changelog:
  - Enable relinquish_timeouts() and cancel_all_timeouts() even when
    DEBUG_MEMORY_LEAKAGE_ON_EXIT is not defined
  - Add prototypes for b64_pton() and b64_ntop in dst/
  - Move variable declarations and labels around in the fix-warnings patch
  - Expand the list of objects needed for libdhcp4client (#215328)
  - Use libres.a in libdhcp4client since it gives correct minires objects
  - Remove the dhcp options table in C, Perl, Python, and text format (these
    were reference files added to /usr/share/doc)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-3
changelog:
  - Remove struct universe *universe from envadd_state in the client patch
  - Add struct universe *universe to envadd_state in the enoi patch
  - Add example dbusified dhclient-script in the enoi patch


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-2
changelog:
  - Change the way libdhcp4client is compiled (patch main source, create new
    Makefile rather than copy and patch code after main patches)
  - Fix up problems generating compiler warnings
  - Use 'gcc' for making dependencies
  - Pass -fPIC instead of -fpie/-fPIE in compiler flags
  - Combine the extended new option info changes in to one patch file (makes
    it easier for outside projects that want to use dhcdbd and NetworkManager)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.4-24
changelog:
  - Put typedef for dhcp_state_e before it's used in libdhcp_control.h (#212612)
  - Remove dhcpctl.3 from minires/Makefile.dist because it's in dhcpctl
  - Remove findptrsize.c and just set compiler flag for ppc64 and s390x


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.4-23
changelog:
  - Remove NODEBUGINFO junk from the spec file as well as old/unused code
  - Rolled all 68 patches in to one patch since more than half of them get
    overridden by later patches anyway.


author: Peter Jones <pjones@redhat.com> - 12:3.0.4-15
changelog:
  - Make timeout dispatch code not recurse while traversing a linked
    list, so it doesn't try to free an entries that have been removed.
    (bz #195723)
  - Don't patch in a makefile, do it in the spec.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-14
changelog:
  - fix bug 191461: preserve ntp.conf local clock fudge statements
  - fix bug 193047: both dhcp and dhclient need to ship common
                    man-pages: dhcp-options(5) dhcp-eval(5)


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-10
changelog:
  - fix bug 193047: allow $METRIC to be specified for dhclient routes
  - add a '-R <request option list>' dhclient argument


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-8.1
changelog:
  - fix a libdhcp4client memory leak (1 strdup) and 
    fill in client->packet.siaddr before bind_lease() for pump
    nextServer option.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Fix bug 191470: prevent dhcpd writing 8 byte dhcp-lease-time 
                    option in packets on 64-bit platforms


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Add the libdhcp4client library package for use by the new libdhcp 
    package, which enables dhclient to be invoked by programs in a 
    single process from the library. The normal dhclient code is
    unmodified by this.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-1
changelog:
  - Upgrade to upstream version 3.0.4, released Friday 2006-05-05 .
  - Add new dhclient command line arguments:
    -H <host-name> : parse as dhclient.conf 'send host-name "<host-name>";'
    -F <fqdn>      : parse as dhclient.conf 'send fqdn.fqdn "<fqdn>";'
    -T <timeout>   : parse as dhclient.conf 'timeout <timeout>;'


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-26
changelog:
  - fix bug 181908: enable dhclient to operate on IBM zSeries z/OS linux guests:
    o add -I <dhcp-client-identifier> dhclient command line option
    o add -B "always broadcast" dhclient command line option
    o add 'bootp-broadcast-always;' dhclient.conf statement


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-22
changelog:
  - fix bug 181482: resolv.conf not updated on RENEW :
    since dhcp-3.0.1rc12-RHScript.patch: "$new_domain_servers" should have
    been "$new_domain_name_servers" :-(


author: Dan Williams <dcbw@redhat.com> - 11:3.0.3-21
changelog:
  - Fix dhclient-script to use /bin/dbus-send now that all dbus related
    binaries are in /bin rather than /usr/bin


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-20
changelog:
  - fix bug 177845: allow client ip-address as default router 
  - fix bug 176615: fix DDNS update when Windows-NT client sends 
                    host-name with trailing nul


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-12
changelog:
  - fix bug 173619: dhclient-script should reconfig on RENEW if 
                    subnet-mask, broadcast-address, mtu, routers, etc.
                    have changed
  - apply upstream improvements to trailing nul options fix of bug 160655


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-11
changelog:
  - Rebuild for FC-5
  - fix bug 167028 - test IBM's unicast bootp patch (from xma@us.ibm.com)
  - fix bug 171312 - silence chkconfig error message if ypbind not installed
  - fix dhcpd.init when -cf arg given to dhcpd
  - make dhcpd init touch /var/lib/dhcpd/dhcpd.leases, not /var/lib/dhcp/dhcpd.leases


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-10
changelog:
  - Allow dhclient route metrics to be specified with DHCP options:
    The dhcp-options(5) man-page states:
    'option routers ... Routers should be listed in order of preference' 
    and
    'option static-routes ... are listed in descending order of priority' .
    No preference / priority could be set with previous dhclient-script .
    Now, dhclient-script provides: 
    Default Gateway (option 'routers') metrics:
      Instead of allowing only one default gateway, if more than one router 
      is specified in the routers option, routers following the first router
      will have a 'metric' of their position in the list (1,...N>1).
    Option static-routes metrics:
      If a target appears in the list more than once, routes for duplicate
      targets will have successively greater metrics, starting at 1.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-8
changelog:
  - further fix for bug 160655 / ISC bug 15293 - upstream patch:
    do NOT always strip trailing nulls in the dhcpd server
  - handle static-routes option properly in dhclient-script :
    trailing 0 octets in the 'target' IP specify the class -
    ie '172.16.0.0 w.x.y.z' specifies '172.16/16 via w.x.y.z'.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-7
changelog:
  - fix bug 169164: separate /var/lib/{dhcpd,dhclient} directories
  - fix bug 167292: update failover port info in dhcpd.conf.5; give
                    failover ports default values in server/confpars.c


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-6
changelog:
  - fix bug 167273: time-offset should not set timezone by default
                    tzdata's Etc/* files are named with reverse sign
                    for hours west - ie. 'GMT+5' is GMT offset -18000seconds.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-4
changelog:
  - fix bug 166926: make dhclient-script handle interface-mtu option
    make dhclient-script support /etc/dhclient{,-$IF}-{up,down}-hooks scripts
    to allow easy customization to support other non-default DHCP options -
    documented in 'man 8 dhclient-script' .
  - handle the 'time-offset' DHCP option, requested by default.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-3
changelog:
  - fix bug 160655: strip trailing '\0' bytes from text options before append
  - fix gcc4 compiler warnings ; now compiles with -Werror
  - add RPM_OPT_FLAGS to link as suggested in gcc man-page on '-pie' option
  - change ISC version string to 'V3.0.3-RedHat' at request of ISC


author: Jason Vas Dias <jvdias@redhat.com> 11:3.0.3-1
changelog:
  - Upgrade to upstream version 3.0.3 
  - Don't apply the 'default boot file server' patch: legacy
    dhcp behaviour broke RFC 2131, which requires that the siaddr
    field only be non-zero if the next-server or tftp-server-name
    options are specified.
  - Try removing the 1-5 second wait on dhclient startup altogether.
  - fix bug 163367: supply default configuration file for dhcpd


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.3rc1-1
changelog:
  - Upgrade to upstream version 3.0.3rc1
  - fix bug 163203: silence ISC blurb on configtest 
  - fix default 'boot file server' value (packet->siaddr):
    In dhcp-3.0.2(-), this was defaulted to the server address;
    now it defaults to 0.0.0.0 (a rather silly default!) and
    must be specified with the 'next-server' option (not the tftp-boot-server
    option ?!?) which causes PXE boot clients to fail to load anything after
    the boot file.


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-14
changelog:
  - Fix bug 159929: prevent dhclient flooding network on repeated DHCPDECLINE
  - dhclient fast startup:
     remove dhclient's  random 1-5 second delay on startup if only
     configuring one interface
     remove dhclient_script's "sleep 1" on PREINIT
  - fix new gcc-4.0.0-11 compiler warnings for binding_state_t


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-11
changelog:
  - as pointed out by Peter Jones, dhclient-script spews
  - 'chkconfig: Usage' if run in init state 1 (runlevel returns "unknown".)
  - this is now corrected.


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-9
changelog:
  - bugs 153244 & 155143 are now fixed with SELinux policy; 
    autotrans now works for dhcpc_t, so restorecons are not required,
    and dhclient runs OK under dhcpc_t with SELinux enforcing.
  - fix bug 155506: 'predhclien' typo (emacs!).


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-8
changelog:
  - Fix bugs 153244 & 155143: 
        o restore dhclient-script 'restorecon's
        o give dhclient and dhclient-script an exec context of
          'system_u:object_r:sbin_t' that allows them to run
          domainname / hostname and to update configuration files
          in dhclient post script.
  - Prevent dhclient emitting verbose ISC 'blurb' on error exit in -q mode


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-7
changelog:
  - Add '-x' "extended option environment" dhclient argument:
  -  When -x option given to dhclient:
  -    dhclient enables arbitrary option processing by writing information
  -    about user or vendor defined option space options to environment.
  -
  - fix bug 153244: dhclient should not use restorecon
  - fix bug 151023: dhclient no 'headers & libraries' 
  - fix bug 149780: add 'DHCLIENT_IGNORE_GATEWAY' variable
  - remove all usage of /sbin/route from dhclient-script


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-8
changelog:
  - Add better execshield security link options
  - fix dhcpd.init when no /etc/dhcpd.conf exists and -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-4
changelog:
  - make dhclient-script TIMEOUT mode do exactly the same configuration
  - as BOUND / RENEW / REBIND / REBOOT if router ping succeeds


author: Jason Vas Dias <jvdias@redhat.com> 3.0.2rc3-4
changelog:
  - fix bug 147926: dhclient-script should do restorecon for modified conf files
  - optimize execshield protection


author: Jason Vas Dias <jvdias@redhat.com> 8.3.0.4rc3-3
changelog:
  - fix bug 147375: dhcpd heap corruption on 32-bit 'subnet' masks
  - fix bug 147502: dhclient should honor GATEWAYDEV and GATEWAY settings
  - fix bug 146600: dhclient's timeout mode ping should use -I
  - fix bug 146524: dhcpd.init should discard dhcpd's initial output message
  - fix bug 147739: dhcpd.init configtest should honor -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-17
changelog:
  - fix bug 144250: gcc-3.4.3-11 is broken :
  - log_error ("Lease with bogus binding state: %d size: %d",
  -   comp -> binding_state,
  -   sizeof(comp->binding_state));
  - prints:    'Lease with bogus binding state: 257 1'    !
  - compiling with gcc33 (compat-gcc-8-3.3.4.2 fixes for now).


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-16
changelog:
  - fix bug 143704: dhclient -r does not work if lease held by
  - dhclient run from ifup . dhclient will now look for the pid
  - files created by ifup.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-14
changelog:
  - NTP: fix bug 139715: merge in new ntp servers only rather than replace
  - all the ntp configuration files; restart ntpd if configuration changed.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-12
changelog:
  - fix bug 138181 & bug 139468: do not attempt to listen/send on
  -     unconfigured  loopback, point-to-point or non-broadcast
  -     interfaces (don't generate annoying log messages)
  - fix bug 138869: dhclient-script: check if '$new_routers' is
  -     empty before doing 'set $new_routers;...;ping ... $1'


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-11
changelog:
  - dhcp-3.0.2b1 came out today. A diff of the 'ack_lease' function
  - Dave Hankins and I patched exposed a missing '!' on an if clause
  - that got dropped with the 'new-host' patch. Replacing the '!'.
  - Also found one missing host_dereference.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-10
changelog:
  - clean-up last patch: new-host.patch adds host_reference(host)
  - without host_dereference(host) before returns in ack_lease
  - (dhcp-3.0.1-host_dereference.patch)


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-9
changelog:
  - Fix bug 133522:
  - PXE Boot clients with static leases not given 'file' option
  - 104 by server - PXE booting was disabled for 'fixed-address'
  - clients.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-8
changelog:
  - Fix bug 131212:
  - If "deny booting" is defined for some group of hosts,
  - then after one of those hosts is denied booting, all
  - hosts are denied booting, because of a pointer not being
  - cleared in the lease record. 
  - An upstream patch was obtained which will be in dhcp-3.0.2.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-7
changelog:
  - Forward DNS update by client was disabled by a bug that I
  - found in code where 'client->sent_options' was being
  - freed too early.
  - Re-enabled it after contacting upstream maintainer
  - who confirmed that this was a bug (bug #130069) -
  - submitted patch dhcp-3.0.1.preserve-sent-options.patch.
  - Upstream maintainer informs me this patch will be in dhcp-3.0.2 .


author: Dan Walsh <dwalsh@redhat.com> 1:3.0.1rc14-1
changelog:
  - User kernelversion instead of uname-r
  - Update to latest package from ISC
  - Remove inherit-leases patch for now.


author: Elliot Lee <sopwith@redhat.com> 3.0pl1-8
changelog:
  - More #68650 (modify requested options)
  - Fix #71453 (dhcpctl man page) and #71474 (include libdst.a) and


author: David Sainty <saint@redhat.com> 3.0pl1-1
changelog:
  - Change to dhclient, dhcp, dhcp-devel packaging
  - Move to 3.0pl1, do not strip binaries
  - Drop in sysconfig-enabled dhclient-script


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix booting of JavaStations
    (reported by Pete Zaitcev <zaitcev@metabyte.com>).
  - fix SIGBUS crashes on SPARC (apparently gcc is too clever).


author: Erik Troan <ewt@redhat.com>
changelog:
  - applied patch from Chris Evans which makes the server a bit more paranoid
    about dhcp requests coming in from the wire


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated to build in a buildroot properly
  - don't package up the client, as it doens't work very well <sigh>


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - removed the actual inet.d links (chkconfig takes care of this for us)
    and made the %postun section handle upgrades.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-66.1
changelog:
  - Resolves: rhbz#758696 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758713 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-64
changelog:
  - Resolves: rhbz#749822 - SSSD may go into infinite loop during RFC2307bis
                            initgroups when groups appear in multiple nesting
                            levels


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-60
changelog:
  - Related:  rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-59
changelog:
  - Resolves: rhbz#742288 - RFC2307bis initgroups calls are slow
  - Resolves: rhbz#746654 - SSSD backend gets killed on slow systems
  - Related:  rhbz#743925 - HBAC processing is very slow when dealing with
                            FreeIPA deployments with large numbers of hosts
                            Fixes a crash introduced by the earlier patch.
  - Related:  rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names
                            Fixes for internationalization


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-57
changelog:
  - Resolves: rhbz#743925 - HBAC processing is very slow when dealing with
                            FreeIPA deployments with large numbers of hosts
  - Resolves: rhbz#745966 - sssd_pam segfaults on sssd restart
  - Related:  rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-56
changelog:
  - Resolves: rhbz#742278 - Rework the example config
  - Resolves: rhbz#746037 - Only access sssd_nss internal hash table if it was
                            initialized
  - Resolves: rhbz#742526 - SSSD's man pages are missing information
  - Resolves: rhbz#743841 - SSSD can crash due to dbus server removing a UNIX
                            socket


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-55
changelog:
  - Resolves: rhbz#738621 - Lookup fails for non-primary usernames with
                            multi-valued uid
  - Resolves: rhbz#738629 - Group lookups doesn't return it's member for
                            sometime when the member has multi-valued uid
  - Resolves: rhbz#742295 - Use an explicit base 10 when converting uidNumber
                            to integer
  - Resolves: rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-53
changelog:
  - Resolves: rhbz#741751 - HBAC rule evaluation does not properly handle host
                            groups
  - Resolves: rhbz#740501 - SSSD not functional after "self" reboot
  - Resolves: rhbz#742539 - HBAC: Hostname comparisons should be
                            case-insensitive


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-52
changelog:
  - Resolves: rhbz#728343 - SSSD taking 5 minutes to log in
  - Resolves: rhbz#739850 - Coverity defects newly introduced in rhel 6.2


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-51
changelog:
  - Resolves: rhbz#737157 - "System error" appears in log during change password
                            operation of a user in openldap server with ppolicy
                            enabled
  - Resolves: rhbz#737172 - "Unknown (private extension) error(21853), (null)"
                            messages are logged during change password operation
                            of a user in openldap server with ppolicy enabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-50
changelog:
  - Resolves: rhbz#736314 - sssd crashes during auth while there exists multiple
                            external hosts along with managed host
  - Resolves: rhbz#732974 - [RFE] Have SSSD cache properly with
    krb5_validate = True and SElinux enabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-49
changelog:
  - Resolves: rhbz#732010 - LDAP+GSSAPI needs explicit Kerberos realm
  - Resolves: rhbz#733382 - SSSD should pick a user/group name when there are
                            multi-valued names
  - Resolves: rhbz#733409 - Improve password policy error message
  - Resolves: rhbz#733663 - Authentication fails when there exists an empty
                            hbacsvcgroup
  - Resolves: rhbz#732935 - Add LDAP provider option to set
                            LDAP_OPT_X_SASL_NOCANON
  - Resolves: rhbz#734101 - sssd blocks login of ipa-users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-47
changelog:
  - Resolves: rhbz#728961 - Provide a mechanism for vetoing the use of certain
                            shells


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-46
changelog:
  - Related:  rhbz#728267 - When non-posix groups are skipped, initgroups
                            returns random GID


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-45
changelog:
  - Related:  rhbz#726466 - HBAC rule evaluation does not support extended
                            UTF-8 languages
  - Related:  rhbz#718250 - Remove DENY rules from the HBAC access provider
  - Fixes an issue on big endian platforms


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-44
changelog:
  - Resolves: rhbz#700828 - Process /usr/libexec/sssd/sssd_be was killed by
                            signal 11 (SIGSEGV) when ldap_uri is misconfigured
  - Resolves: rhbz#726438 - sssd doesn't honor ldap supportedControls 
  - Resolves: rhbz#726466 - HBAC rule evaluation does not support extended
                            UTF-8 languages
  - Resolves: rhbz#718250 - Remove DENY rules from the HBAC access provider
  - Resolves: rhbz#728267 - When non-posix groups are skipped, initgroups
                            returns random GID
  - Resolves: rhbz#726475 - sssd_pam leaks file descriptors
  - Resolves: rhbz#725868 - Explicitly ignore groups with gidNumber = 0


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-43
changelog:
  - Related:  rhbz#721052 - sssd does not handle kerberos server IP change
  -                         Use ares_search instead of ares_query to honor
  -                         search entries in /etc/resolv.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-42
changelog:
  - Resolves: rhbz#711416 - During the change password operation the ccache is
  -                         not replaced by a new one if the old one isn't
  -                         active anymore
  - Resolves: rhbz#715609 - Certificate validation fails with message
  -                         "Connection error: TLS: hostname does not match CN
  -                         in peer certificate"
  - Resolves: rhbz#719089 - IPA dynamic DNS update mangles AAAA records
  - Resolves: rhbz#721052 - sssd does not handle kerberos server IP change
  -                         Honor TTL values when resolving hostnames


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-41
changelog:
  - Resolves: rhbz#713961 - libsss_ldap segfault at login against OpenLDAP
  - Resolves: rhbz#713438 - sssd shuts down if inotify crashes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-39
changelog:
  - Resolves: rhbz#709342 - Typo in negative cache notification for initgroups()
  - Resolves: rhbz#708009 - "renew_all_tgts" and "renew_handlers" messages are
  -                         being logged multiple times when the provider comes
  -                         back online
  - Resolves: rhbz#707997 - The IPA provider does not work with IPv6
  - Resolves: rhbz#677327 - [RFE] Support overriding attribute value
  - Resolves: rhbz#692090 - SSSD is not populating nested groups in
  -                         Active Directory


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-38
changelog:
  - Resolves: rhbz#707627 - Include valid "ldap_uri" formats in sssd-ldap man
  -                         page


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-37
changelog:
  - Resolves: rhbz#707513 - Unable to authenticate users when username
  -                         contains "\0"


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-36
changelog:
  - Resolves: rhbz#698723 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-35
changelog:
  - Resolves: rhbz#707282 - latest sssd fails if ldap_default_authtok_type is
  -                         not mentioned
  - Resolves: rhbz#692404 - rfc2307bis groups are being enumerated even when the
  -                         gidNumber is out of the range of min_id,max_id.
  - Resolves: rhbz#699530 - Users with a local group as their primary GID are
  -                         denied access by the simple access provider
  - Resolves: rhbz#700172 - RFE: SSSD should support paged LDAP lookups
  - Resolves: rhbz#705434 - IPA provider fails initgroups() if user is not a
  -                         member of any group
  - Resolves: rhbz#703624 - SSSD's async resolver only tries the first
  -                         nameserver in /etc/resolv.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-34
changelog:
  - Resolves: rhbz#701700 - sssd client libraries use select() but should use
  -                         poll() instead


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-33
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix segfault in TGT renewal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-32
changelog:
  - Related: rhbz#693818 - Automatic TGT renewal overwrites cached password
  - Fix typo causing build breakage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-28
changelog:
  - Related:  rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS
  -                         information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-27
changelog:
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-26
changelog:
  - Resolves: rhbz#694444 - Unable to resolve SRV record when called with
  -                         _srv_,<fixed ldap uri> in ldap_uri
  - Related:  rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-25
changelog:
  - Resolves: rhbz#694783 - SSSD crashes during getent when anonymous bind is
  -                         disabled


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-24
changelog:
  - Resolves: rhbz#692472 - Process /usr/libexec/sssd/sssd_be was killed by
  -                         signal 11 (SIGSEGV)
  -                         Fix is to not attempt to resolve nameless servers


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-23
changelog:
  - Resolves: rhbz#691678 - SSSD needs to fall back to 'cn' for GECOS
  -                         information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-21
changelog:
  - Resolves: rhbz#690866 - Groups with a zero-length memberuid attribute can
  -                         cause SSSD to stop caching and responding to
  -                         requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-20
changelog:
  - Resolves: rhbz#690131 - Traceback messages seen while interrupting
  -                         sss_obfuscate using ctrl+d
  - Resolves: rhbz#690421 - [abrt] sssd-1.2.1-28.el6_0.4: _talloc_free: Process
  -                         /usr/libexec/sssd/sssd_be was killed by signal 11
  -                         (SIGSEGV)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-16
changelog:
  - Resolves: rhbz#683158 - SSSD breaks on RDNs with a comma in them
  - Resolves: rhbz#689886 - group memberships are not populated correctly during
  -                         IPA provider initgroups
  - Resolves: rhbz#683885 - SSSD should skip over groups with multiple names


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-15
changelog:
  - Resolves: rhbz#683860 - Skip users and groups that have incomplete contents
  - Resolves: rhbz#688491 - authconfig fails when access_provider is set as krb5
  -                         in sssd.conf


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-14
changelog:
  - Resolves: rhbz#683255 - sudo/ldap lookup via sssd gets stuck for 5min
  -                         waiting on netgroup
  - Resolves: rhbz#683431 - sssd consumes 100% CPU
  - Related: rhbz#680440  - sssd does not handle kerberos server IP change


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-13
changelog:
  - Related: rhbz#680440 - sssd does not handle kerberos server IP change
  -   SSSD was staying with the old server if it was still online


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-12
changelog:
  - Resolves: rhbz#682850 - IPA provider should use realm instead of ipa_domain
  -                         for base DN


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-11
changelog:
  - Resolves: rhbz#682340 - sssd-be segmentation fault - ipa-client on
  -                         ipa-server
  - Resolves: rhbz#680440 - sssd does not handle kerberos server IP change
  - Resolves: rhbz#680442 - Dynamic DNS update fails if multiple servers are
  -                         given in ipa_server config option
  - Resolves: rhbz#680932 - Do not delete sysdb memberOf if there is no memberOf
  -                         attribute on the server
  - Resolves: rhbz#682807 - sssd_nss core dumps with certain lookups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-10
changelog:
  - Related: rhbz#678614 - SSSD needs to look at IPA's compat tree for netgroups
  - Related: rhbz#679082 - SSSD IPA provider should honor the krb5_realm option


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-9
changelog:
  - Resolves: rhbz#679082 - SSSD IPA provider should honor the krb5_realm option
  - Resolves: rhbz#677318 - Does not read renewable ccache at startup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#678593 - User information not updated on login for secondary
  -                         domains
  - Resolves: rhbz#678777 - IPA provider does not update removed group
  -                         memberships on initgroups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-7
changelog:
  - Resolves: rhbz#677588 - sssd crashes at the next tgt renewals it tries
  - Resolves: rhbz#678410 - name service caches names, so id command shows
  -                         recently deleted users
  - Resolves: rhbz#678614 - SSSD needs to look at IPA's compat tree for
  -                         netgroups


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-6
changelog:
  - Resolves: rhbz#670511 - SSSD and sftp-only jailed users with pubkey login
  - Resolves: rhbz#675284 - "no matching rule" message logged on all successful
  -                         requests
  - Resolves: rhbz#676911 - SSSD attempts to use START_TLS over LDAPS for
  -                         authentication


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-5
changelog:
  - Resolves: rhbz#674164 - sss_obfuscate fails if there's no domain named
  -                         "default"
  - Resolves: rhbz#674515 - -p option always uses empty string to obfuscate
  -                         password
  - Resolves: rhbz#674141 - Traceback call messages displayed while
  -                         "sss_obfuscate" command is executed as a non-root
  -                         user


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-4
changelog:
  - Resolves: rhbz#674172 - Group members are not sanitized in nested group
  - processing
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Related:  rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1
  - Also add the updated ding-libs to the BuildRequires


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - Resolves: rhbz#670259 - Refresh SSSD in 6.1 to 1.5.1
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  - Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - Related: rhbz#644072 - Rebase SSSD to 1.5
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.4
changelog:
  - Resolves: rhbz#660592 - SSSD shutdown sometimes hangs
  - Resolves: rhbz#660585 - getent passwd <username>' returns nothing if its
  -                         uidNumber gt 2147483647


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-35
changelog:
  - Resolves: rhbz#645449 - 'getent passwd <username>' returns nothing if its
  -                         uidNumber gt 2147483647


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.1
changelog:
  - Resolves: rhbz#637070 - the krb5 locator plugin isn't packaged for multilib
  - Resolves: rhbz#642412 - SSSD initgroups does not behave as expected


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-32
changelog:
  - Resolves: rhbz#633406 - the krb5 locator plugin isn't packaged for multilib
  - Resolves: rhbz#633487 - SSSD initgroups does not behave as expected


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-23
changelog:
  - Resolves: rhbz#617623 - SSSD suffers from serious performance issues on
  -                         initgroups calls


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-21
changelog:
  - Resolves: rhbz#607233 - SSSD users cannot log in through GDM
  -                       - Real issue was that long-running services
  -                       - do not reconnect if sssd is restarted


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-20
changelog:
  - Resolves: rhbz#591715 - sssd should emit warnings if there are problems with
  -                         /etc/krb5.keytab file


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-19
changelog:
  - Resolves: rhbz#606836 - libcollection needs an soname bump before RHEL 6
  -                         final
  - Resolves: rhbz#608661 - SASL with OpenLDAP server fails
  - Resolves: rhbz#608688 - SSSD doesn't properly request RootDSE attributes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New upstream bugfix release 1.2.1
  - Resolves: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.
  - Resolves: rhbz#603041 - Remove unnecessary option krb5_changepw_principal
  - Resolves: rhbz#604704 - authconfig should provide error with no trace back
  -                         if disabling sssd when sssd is not enabled
  - Resolves: rhbz#591873 - Connecting to the network after an offline kerberos
  -                         auth logs continuous error messages to sssd_ldap.log
  - Resolves: rhbz#596295 - Authentication fails for user from the second domain
  -                         when the same user name is filtered out from the
  -                         first domain
  - Related:  rhbz#598559 - Update translation files for SSSD before RHEL 6
  -                         final


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-14
changelog:
  - Resolves: rhbz#593696 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart
  - Resolves: rhbz#600352 - Wrapping the value for "ldap_access_filter" in
  -                         parentheses causes ldap_search_ext to fail
  - Resolves: rhbz#600468 - Segfault in krb5_child
  - Related:  rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-13
changelog:
  - Resolves: rhbz#598670 - Ccache file of a user is removed too early
  - Resolves: rhbz#599057 - Incomplete comparison of a service name in
  -                         IPA access provider
  - Resolves: rhbz#598496 - Failure with IPA access provider
  - Resolves: rhbz#599027 - Makefile typo causes SSSD not to use the
  -                         kernel keyring


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP
  - Resolves: rhbz#584001 - Rebase sssd to 1.2
  - Resolves: rhbz#584017 - Unconfiguring sssd leaves KDC locator file
  - Resolves: rhbz#587384 - authconfig fails if krb5_kpasswd in sssd.conf
  - Resolves: rhbz#587743 - Need to replicate pam_ldap's pam_filter in sssd.conf
  - Resolves: rhbz#590134 - sssd: auth_provider = proxy regression
  - Resolves: rhbz#591131 - Kerberos provider needs to rewrite kdcinfo file when
  -                         going online
  - Resolves: rhbz#591136 - Change SSSD ipa BE to handle new structure of the
  -                         HBAC rule


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-125
changelog:
  - Change the postinstall to load_policy separately from the semodule command
  - This will put the proper files in place even if the kernel rejects the policy.
  - Allow login programs to connect to the pki_ca_port
  - Allow vhostmd to read /dev/rand and signal


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-123
changelog:
  - MLS Overrides needed for a user running at a level to be able to use sudo and talk to sssd
  - Allow initrc_t to manage dirsrv pid files with disabled unconfined module
  - Fixed for deltacloudd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-118
changelog:
  - Fix label for /root/.hushlogin
  - Allow domain to send/recv unlabeled packet
  - Allow sshd to relabel tun socket
  - Allow puppetmasterd to relabel puppet config files
  - Add label for lvs.conf
  - Fix labeling for matahari-netd agents


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-115
changelog:
  - Add unlabelednet policy module
  - Add chrome role for xguest
  - Fix for vdagent policy
  - Add fix to allow confined apps to execmod on chrome


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-114
changelog:
  - Fix httpd_selinux man page
  - Add corenet_packet() interface
  - Add support for Clustered Samba commands


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-112
changelog:
  - Fix description of allow_* booleans
  - Allow sanlock to manage libvirt lib files
  - Fix bug in lsassd policy
  - Add label for /var/run/luci
  - move port 18001 from http_port_t to jboss_management_port_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-111
changelog:
  - Add git_cgit_read_gitosis_content boolean
  - Add support for cma port
  - Add virt_use_sanlock boolean and make sanlock working together libvirt
  - Make passenger and puppet working together


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-110
changelog:
  - Add label for passwd.adjunct
  - Allow pulse to execute  /usr/sbin/fos
  - Fix labeling for passenger
  - Add selinux policy support for IP-in-SSH tunnelling
  - Allow sulogin to write /dev/pts/0 in single user mode


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-108
changelog:
  - Add squid man page
  - Add git man page
  - Make puppet working with passenger
  - Allow procmail to execute hostname command


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-107
changelog:
  - Make new domains as unconfined
  - Add abrt_handle_event_t domain for ABRT event script
  - Add selinux_mysql man page
  - Fix httpd selinux man page
  - Fix interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-104
changelog:
  - Allow puppet to Check access to the passwd executable
  - Add label for /var/www/html/logs directory
  - Add label for /var/lib/squeezeboxserver directory
  - Allow rgmanager executes init script files in initrc_t domain which ensure proper transitions


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-97
changelog:
  - Allow postfix-pickup to write files and directories regardless of their MCS category set.
  - Make xinetd trusted to write outbound packets regardless of the network's or node's MLS range
  Resolves: #705772


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-95
changelog:
  - Allow secadm to manage selinux config files
  - Allow apache to use jboss management port
  - Add fenced_can_ssh boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-87
changelog:
  - Allow $1_sudo_t to read default SELinux context
  - Allow tgtd to create a sock file
  - Allow initrc_t to manage faillock


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-83
changelog:
  - Add label for matahari-broker.pid file
  - Allow foghor to read snmp lib files
  - Make sysadm security admin
  - Fix ssh_sysadm_login boolean
  Resolves: #694551


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-81
changelog:
  - Add allow_sysadm_manage_security boolean
  - Add label for /dev/dlm.*
  - Allow auditadm_screen_t and secadm_screen_t dac_override capability
  - SSH_USE_STRONG_RNG is 1 which requires /dev/random
  - Fix auth_rw_faillog definition
  - Fixes for nslcd policy
  Resolves: #693368
  - Allow qpidd to manage pid and lib matahari files
  - Allow rgmanager to send the kill signal to all users


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-80
changelog:
  - Add support for a new cluster service - foghorn
  - sssd needs to read ~/.k5login in nfs, cifs or fusefs file systems
  - sssd wants to read .k5login file in users homedir
  - Add support for vdsm
  - Allow syslogd setrlimit, sys_nice
  Resolves: #689431
  - ipsec_mgmt_t wants to cause ipsec_t to dump core, needs to be allowed


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-79
changelog:
  - Fixes for sandbox/seunshare policy 
  Resolves:#684919
  - Allow ssh_keygen_t dac_override
  - Add matahari policy 
  - Add label for /etc/securetty 
  - Fixes for pirahna-pulse policy
  - Fixes for radius, samba, dirsrv, kerberos policies 
  - Allow console login on MLS
  - Fix file context to show several labels as SystemHigh
  - Add port definition for dogtag, matahari, movaz ports


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-76
changelog:
  - Fixes for ssh_keygen policy
  - Allow sysadm_t to run ssh-keygen in ssh_keygen_t domain
  - Backport spice vdagent policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-75
changelog:
  - Allow svirt to manage sock_file in ~/.libvirt directory
  - Allow sysamd to run udev in udev_t domain
  - Remove capability from svirt
  - Add lvm_exec_t label for kpartx


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-74
changelog:
  - Add virt_home_ type files located in ~/.libvirt directory
  - virt creates monitor sockets in the users home dir
  - Allow lvm setfscreate
  Resolves: #680388
  - Make lsusb and lsblk working on MLS
  Resolves: #680426


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-71
changelog:
  - Allow cmirrord to create physical disk devices in /dev
  - Allow cluster domains to use the system bus and send each other dbus messages
  - Add label for /dev/tgt


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-69
changelog:
  - Make Spacewalk to work with selinux-policy
  Resolves: #673112
  - Fix /root/.ssh labeling
  Resolves: #637109	
  - Fix for the spec file


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-64
changelog:
  - Add namespace policy
  - Allow udev to stream connect to init
  Resolves: #667370
  - Update for screen policy to handle pipe in homedir
  - Fixes for polyinstatiated homedir


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-61
changelog:
  - Fixes for passenger policy
  - Allow user_t to conditionally transition to ping_t and traceroute_t
  Resolves: #663054


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-60
changelog:
  - Fixes for certmonger
  - Backport passenger policy
  - Allow run_init to read console_device
  Resolves: #657568
  - Add label for /var/lib/dkim-milter
  - Fixes for munin policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-59
changelog:
  - Allow cdrecord setrlimiit
  Resolves: #615731
  - Define debugfs_t as mountpoint
  Resolves: #646856
  - Fix fenced_can_network_connect boolean description
  Resolves: #650136
  - Add label for /var/run/faillock
  - Add dirsrv and dirsrv-admin policy
  Resolves: #655206
  - Fixes for cobbler policy
  - Allow certmonger to manage dirsrv config
  Resolves: #658591


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-58
changelog:
  - Fix httpd_setrlimit boolean to allow sys_resource capability
  - Fix label for ip6tables.save
  - Allow ssh_t to exec ssh_exec_t
  - Dontaudit init leaks
  Resolves: #639083


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-57
changelog:
  - Allow system_mail_t to append ~/dead.letter
  - Allow mount to communicate with gfs_controld
  Resolves: #636683
  - Dontaudit hal leaks in setfiles
  - gpm needs to use the user terminal


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-56
changelog:
  - Allow smartd to read usr files
  - Allow devicekit-power transition to dhcpc
  - Add label for /etc/timezone
  - Remove transition from unconfined_t to iptables_t
  - Allow domains with different mcs levels to send each other signals as long as they are not identified as mcsconstrainproc
  Resolves: #634945
  - Allow nrpe to send signal and sigkill to the plugins
  - Fix up xguest to allow it to read hwdata and gconf_etc_t


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-55
changelog:
  - Add cluster_var_lib_t type and label for /var/lib/cluster
  - Add labeling for /root/.debug
  - Remove permissive from cmirrord domain
  - Dontaudit cmirrord_t sys_tty_config capability
  - Allow virtd to read from processes up to its clearance
  - Allow dovecot-deliver to create tmp files
  - Allow tor to send signals to itself
  - Handle /var/db/sudo
  - Remove allow_corosync_rw_tmpfs boolean
  Resolves: #631564


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-49
changelog:
  - Add label for /var/cache/rpcbind directory
  - Add chrome_role for xguest
  - Fix amavis_read_spool_files interface


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-48
changelog:
  - Fixes for shorewall policy
  - Allow sssd chown capability
  - Fix label for /usr/bin/mutter
  - Label dead.letter as mail_home_t
  - Allow pcscd to read  hardware state information 
  - Fixes for ulogd policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-47
changelog:
  - Fixes for boinc-project policy
  - Allow swat to read nmbd pid file
  - Allow fail2ban to read BIND log files
  - Fix cert handling from Dan 
  - Remove transition from unconfined to ncftool domain


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-45
changelog:
  - Fixes for cgroup policy
  - Fixes for ncftool policy
  - Add ncftool_read_user_content boolean
  - Fix label for boinc init script
  - Fix label for fence_tool
  - Allow vhostmd to write virt content
  - Allow ricci domtrans ot shutdown


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-43
changelog:
  - Allow ncftool to run brctl
  - Fixes for ricci-modclusterd policy
  - Allow uucpd to execute ssh client
  - Add label for dayplanner
  - Allow sandbox_xserver execstack


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-42
changelog:
  - Allow kdump to read information from the debugging filesystem
  - Update boinc policy
  - Fixes for logwatch-mail policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-41
changelog:
  - Allow logwatch_mail to read read the networking state information.
  - Add label for /usr/bin/dosbox
  - Allow systat sys_admin capability


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-40
changelog:
  - Fixes for puppetmaster
  - Fix label for kadmin init script
  - Fixes for logwatch-mail policy
  - Allow arpwatch to request the kernel to load modules
  - Allow cron jobs to run with context of user that started them


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-39
changelog:
  - Allow munin_system_plugin to read files in /usr
  - Do not audit insmod attempts to write virt daemon unnamed pipes
  - Allow corosync to read ricci lib files


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-38
changelog:
  - Allow xdm_t to manage gnome homedir content
  - Allow s-c-firewall to read and write virtual memory sysctls
  - Fixes for logwatch policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-37
changelog:
  - Redefine hi_reserved_port_t to include ports from 512 to 599 
  - Add label for /sbin/sushell
  - Fixes for munin plugin policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-36
changelog:
  - Allow netutils to read and write USB monitor devices
  - Fix label for /rhev
  - Add user_setrlimit boolean
  - Allow initrc to manage virt lib files
  - Add support for ebtables
  - Add label for /bin/mksh
  - Dontaudit aiccu sys_tty_config capability
  - Add httpd_setrlimit boolean


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-32
changelog:
  - Allow sectool to connect to users over unix stream socket
  - Add label for /var/spool/abrt-upload
  - Add audio_home_t type for homedir/Music files
  - Allow aiccu to read network config files
  - Allow qpidd to setsched
  - Allow virt domains to manage svirt_image_t fifo files
  - Fixes for NM-openswan
  - Fixes for admin interfaces


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-31
changelog:
  - Remove daemons dontaudit to search all dirs 
  - Add support for epylog
  - All all domains to read lib files
  - Allow denyhosts to send syslog messages
  - Allow mysql-safe setrlimit
  - Allow rpm to execute rpm_tmp_t
  - Allow dmesg to appen abrt_var_cache files
  - Fixed label for abrt.socket


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-30
changelog:
  - Allow sysadm to run ncftool
  - Fixes for cobbler policy
  - Allow Network Manager to transition to ipsec_mgmt domain
  - Add label for /usr/libexec/nm-openswan-service
  - Add label for /dev


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-27
changelog:
  - Allow ftpd ipc_lock capability
  - Allow audisp-remote to getcap and setcap
  - Allow iscsid to read and write raw memory devices
  - Fixes for bitlbee policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-26
changelog:
  - Allow krb5kdc to write krb5kdc_principal_t file
  - Allow hald to send generic signal to dhcp client
  - Fix dev_rw_vhost interface
  - Add /var/run/abrt.socket label


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-25
changelog:
  - Fixes for cmirrord policy
  - Dontaudit xauth to list inotifyfs filesystem.
  - Allow xserver to translate contexts.
  - Allow kdumpgui domain sys_admin capability
  - Allow vpnc to relabelfrom tun_socket
  - Allow prelink_cron_system_t to signal
  - Fixes for gitolite
  - Allow virt domain to read symbolic links in device directories


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-24
changelog:
  - Add support for /dev/vhost-net
  - Allow psad to read files in /usr
  - Allow systat to use nscd socket
  - Fixes for boinc policy


author: Miroslav Grepl <mgrepl@redhat.com> 3.7.19-23
changelog:
  - Add cmirrord policy
  - Fixes for accountsd policy
  - Fixes for boinc policy
  - Allow cups-pdf to set attributes on fonts cache directory
  - Allow radiusd to setrlimit
  - Allow nscd sys_ptrace capability


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-22
changelog:
  - Allow procmail to execute scripts in the users home dir that are labeled home_bin_t
  - Fix /var/run/abrtd.lock label


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-21
changelog:
  - Allow login programs to read krb5_home_t
  Resolves: 594833
  - Add obsoletes for cachefilesfd-selinux package
  Resolves: #575084


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-20
changelog:
  - Allow mount to r/w abrt fifo file
  - Allow svirt_t to getattr on hugetlbfs
  - Allow abrt to create a directory under /var/spool


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-19
changelog:
  - Add labels for /sys
  - Allow sshd to getattr on shutdown
  - Fixes for munin
  - Allow sssd to use the kernel key ring
  - Allow tor to send syslog messages
  - Allow iptabels to read usr files
  - allow policykit to read all domains state


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-17
changelog:
  - Fix path for /var/spool/abrt
  - Allow nfs_t as an entrypoint for http_sys_script_t
  - Add policy for piranha
  - Lots of fixes for sosreport


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-16
changelog:
  - Allow xm_t to read network state and get and set capabilities
  - Allow policykit to getattr all processes
  - Allow denyhosts to connect to tcp port 9911
  - Allow pyranha to use raw ip sockets and ptrace itself
  - Allow unconfined_execmem_t and gconfsd mechanism to dbus
  - Allow staff to kill ping process
  - Add additional MLS rules


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-15
changelog:
  - Allow gdm to edit ~/.gconf dir
  Resolves: #590677
  - Allow dovecot to create directories in /var/lib/dovecot
  Partially resolves 590224
  - Allow avahi to dbus chat with NetworkManager
  - Fix cobbler labels
  - Dontaudit iceauth_t leaks
  - fix /var/lib/lxdm file context
  - Allow aiccu to use tun tap devices
  - Dontaudit shutdown using xserver.log


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-14
changelog:
  - Fixes for sandbox_x_net_t  to match access for sandbox_web_t ++
  - Add xdm_etc_t for /etc/gdm directory, allow accountsd to manage this directory
  - Add dontaudit interface for bluetooth dbus
  - Add chronyd_read_keys, append_keys for initrc_t
  - Add log support for ksmtuned
  Resolves: #586663


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-12
changelog:
  - Allow initrc_t to remove dhcpc_state_t
  - Fix label on sa-update.cron
  - Allow dhcpc to restart chrony initrc
  - Don't allow sandbox to send signals to its parent processes
  - Fix transition from unconfined_t -> unconfined_mount_t -> rpcd_t
  Resolves: #589136


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-11
changelog:
  - Fix location of oddjob_mkhomedir
  Resolves: #587385
  - fix labeling on /root/.shosts and ~/.shosts
  - Allow ipsec_mgmt_t to manage net_conf_t
  Resolves: #586760


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-6
changelog:
  - Allow initrc_t to read slapd_db_t
  Resolves: #585476
  - Allow ipsec_mgmt to use unallocated devpts and to create /etc/resolv.conf
  Resolves: #585963


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-5
changelog:
  - Allow rlogind_t to search /root for .rhosts
  Resolves: #582760
  - Fix path for cached_var_t
  - Fix prelink paths /var/lib/prelink	
  - Allow confined users to direct_dri
  - Allow mls lvm/cryptosetup to work


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-3
changelog:
  - Fix label on /root/.rhosts
  Resolves: #582760
  - Add labels for Picasa
  - Allow openvpn to read home certs
  - Allow plymouthd_t to use tty_device_t
  - Run ncftool as iptables_t
  - Allow mount to unmount unlabeled_t
  - Dontaudit hal leaks


author: Dan Walsh <dwalsh@redhat.com> 3.7.19-1
changelog:
  - Update to upstream
  - Allow abrt to delete sosreport
  Resolves: #579998
  - Allow snmp to setuid and gid
  Resolves: #582155
  - Allow smartd to use generic scsi devices
  Resolves: #582145


author: Dan Walsh <dwalsh@redhat.com> 3.7.18-3
changelog:
  - Allow ipsec_t to create /etc/resolv.conf with the correct label
  - Fix reserved port destination
  - Allow autofs to transition to showmount
  - Stop crashing tuned


author: Dan Walsh <dwalsh@redhat.com> 3.7.18-1
changelog:
  - Update to upstream
  - Fix label for  /opt/google/chrome/chrome-sandbox
  - Allow modemmanager to dbus with policykit


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-6
changelog:
  - Fix allow_httpd_mod_auth_pam to use 	auth_use_pam(httpd_t)
  - Allow accountsd to read shadow file
  - Allow apache to send audit messages when using pam
  - Allow asterisk to bind and connect to sip tcp ports
  - Fixes for dovecot 2.0
  - Allow initrc_t to setattr on milter directories
  - Add procmail_home_t for .procmailrc file


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-4
changelog:
  - Fix /cgroup file context 
  - Fix broken afs use of unlabled_t
  - Allow getty to use the console for s390


author: Dan Walsh <dwalsh@redhat.com> 3.7.17-3
changelog:
  - Fix cgroup handling adding policy for /cgroup
  - Allow confined users to write to generic usb devices, if user_rw_noexattrfile boolean set


author: Dan Walsh <dwalsh@redhat.com> 3.7.16-2
changelog:
  - Fix ~/.fontconfig label
  - Add /root/.cert label
  - Allow reading of the fixed_file_disk_t:lnk_file if you can read file
  - Allow qemu_exec_t as an entrypoint to svirt_t


author: Dan Walsh <dwalsh@redhat.com> 3.7.16-1
changelog:
  - Update to upstream
  - Allow tmpreaper to delete sandbox sock files
  - Allow chrome-sandbox_t to use /dev/zero, and dontaudit getattr file systems
  - Fixes for gitosis
  - No transition on livecd to passwd or chfn
  - Fixes for denyhosts


author: Dan Walsh <dwalsh@redhat.com> 3.7.15-4
changelog:
  - Add label for /var/lib/upower
  - Allow logrotate to run sssd
  - dontaudit readahead on tmpfs blk files
  - Allow tmpreaper to setattr on sandbox files
  - Allow confined users to execute dos files
  - Allow sysadm_t to kill processes running within its clearance
  - Add accountsd policy
  - Fixes for corosync policy
  - Fixes from crontab policy
  - Allow svirt to manage svirt_image_t chr files
  - Fixes for qdisk policy
  - Fixes for sssd policy
  - Fixes for newrole policy


author: Dan Walsh <dwalsh@redhat.com> 3.7.14-2
changelog:
  - Dontaudit ipsec_mgmt sys_ptrace
  - Allow at to mail its spool files
  - Allow nsplugin to search in .pulse directory


author: Dan Walsh <dwalsh@redhat.com> 3.7.13-4
changelog:
  - Allow users to dbus chat with xdm
  - Allow users to r/w wireless_device_t
  - Dontaudit reading of process states by ipsec_mgmt


author: Dan Walsh <dwalsh@redhat.com> 3.7.11-1
changelog:
  - Update to upstream - These are merges of my patches
  - Remove 389 labeling conflicts
  - Add MLS fixes found in RHEL6 testing
  - Allow pulseaudio to run as a service
  - Add label for mssql and allow apache to connect to this database port if boolean set
  - Dontaudit searches of debugfs mount point
  - Allow policykit_auth to send signals to itself
  - Allow modcluster to call getpwnam
  - Allow swat to signal winbind
  - Allow usbmux to run as a system role
  - Allow svirt to create and use devpts


author: Dan Walsh <dwalsh@redhat.com> 3.7.10-5
changelog:
  - Add MLS fixes found in RHEL6 testing
  - Allow domains to append to rpm_tmp_t
  - Add cachefilesfd policy
  - Dontaudit leaks when transitioning


author: Dan Walsh <dwalsh@redhat.com> 3.7.10-4
changelog:
  - Change allow_execstack and allow_execmem booleans to on
  - dontaudit acct using console
  - Add label for fping
  - Allow tmpreaper to delete sandbox_file_t
  - Fix wine dontaudit mmap_zero
  - Allow abrt to read var_t symlinks


author: Dan Walsh <dwalsh@redhat.com> 3.7.8-3
changelog:
  - Allow abrt_helper to getattr on all filesystems
  - Add label for /opt/real/RealPlayer/plugins/oggfformat\.so


author: Dan Walsh <dwalsh@redhat.com> 3.7.7-1
changelog:
  - Move users file to selection by spec file.
  - Allow vncserver to run as unconfined_u:unconfined_r:unconfined_t


author: Dan Walsh <dwalsh@redhat.com> 3.6.32-13
changelog:
  - Allow cupsd_config to read user tmp
  - Allow snmpd_t to signal itself
  - Allow sysstat_t to makedir in sysstat_log_t


author: Dan Walsh <dwalsh@redhat.com> 3.6.31-5
changelog:
  - Fix label on /usr/bin/notepad, /usr/sbin/vboxadd-service
  - Remove policycoreutils-python requirement except for minimum


author: Dan Walsh <dwalsh@redhat.com> 3.6.31-4
changelog:
  - Fix devicekit_disk_t to getattr on all domains sockets and fifo_files
  - Conflicts seedit (You can not use selinux-policy-targeted and seedit at the same time.)


author: Dan Walsh <dwalsh@redhat.com> 3.6.25-1
changelog:
  - Fix polkit label
  - Remove hidebrokensymptoms for nss_ldap fix
  - Add modemmanager policy
  - Lots of merges from upstream
  - Begin removing textrel_shlib_t labels, from fixed libraries


author: Dan Walsh <dwalsh@redhat.com> 3.6.13-3
changelog:
  - Add fish as a shell
  - Allow fprintd to list usbfs_t
  - Allow consolekit to search mountpoints
  - Add proper labeling for shorewall


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-27
changelog:
  - Fix /sbin/ip6tables-save context
  - Allod udev to transition to mount
  - Fix loading of mls policy file


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-21
changelog:
  - Allow confined users to manage virt_content_t, since this is home dir content
  - Allow all domains to read rpm_script_tmp_t which is what shell creates on redirection


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-20
changelog:
  - Fix labeling on /var/lib/misc/prelink*
  - Allow xserver to rw_shm_perms with all x_clients
  - Allow prelink to execute files in the users home directory


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-19
changelog:
  - Allow initrc_t to delete dev_null
  - Allow readahead to configure auditing
  - Fix milter policy
  - Add /var/lib/readahead


author: Dan Walsh <dwalsh@redhat.com> 3.6.12-6
changelog:
  - Allow cupsd_t to create link files in print_spool_t
  - Fix iscsi_stream_connect typo
  - Fix labeling on /etc/acpi/actions
  - Don't reinstall unconfine and unconfineuser on upgrade if they are not installed


author: Dan Walsh <dwalsh@redhat.com> 3.5.13-14
changelog:
  - Additional fixes for cyphesis
  - Fix certmaster file context
  - Add policy for system-config-samba
  - Allow hal to read /var/run/video.rom


author: Dan Walsh <dwalsh@redhat.com> 3.5.10-1
changelog:
  - Allow NetworkManager to transition to avahi and iptables
  - Allow domains to search other domains keys, coverup kernel bug


author: Dan Walsh <dwalsh@redhat.com> 3.5.1-4
changelog:
  - Consolodate pyzor,spamassassin, razor into one security domain
  - Fix xdm requiring additional perms.


author: Dan Walsh <dwalsh@redhat.com> 3.5.1-1
changelog:
  - Fix xguest -> xguest_mozilla_t -> xguest_openiffice_t
  - Change dhclient to be able to red networkmanager_var_run


author: Dan Walsh <dwalsh@redhat.com> 3.4.2-12
changelog:
  - Allow amanda to read tape
  - Allow prewikka cgi to use syslog, allow audisp_t to signal cgi
  - Add support for netware file systems


author: Dan Walsh <dwalsh@redhat.com> 3.4.2-7
changelog:
  - Allow confined users to use postgres
  - Allow system_mail_t to exec other mail clients
  - Label mogrel_rails as an apache server


author: Dan Walsh <dwalsh@redhat.com> 3.4.1-3
changelog:
  - Dontaudit search of admin_home for init_system_domain
  - Rewrite of xace interfaces
  - Lots of new fs_list_inotify
  - Allow livecd to transition to setfiles_mac


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-44
changelog:
  - Change unconfined_t to transition to unconfined_mono_t when running mono
  - Change XXX_mono_t to transition to XXX_t when executing bin_t files, so gnome-do will work


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-28
changelog:
  - Allow radvd to use fifo_file
  - dontaudit setfiles reading links
  - allow semanage sys_resource
  - add allow_httpd_mod_auth_ntlm_winbind boolean
  - Allow privhome apps including dovecot read on nfs and cifs home 
  dirs if the boolean is set


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-27
changelog:
  - Allow nsplugin to read /etc/mozpluggerrc, user_fonts
  - Allow syslog to manage innd logs.
  - Allow procmail to ioctl spamd_exec_t


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-22
changelog:
  - Allow stunnel to transition to inetd children domains
  - Make unconfined_dbusd_t an unconfined domain


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-20
changelog:
  - Fix bug in mozilla policy to allow xguest transition
  - This will fix the 

  libsemanage.dbase_llist_query: could not find record value
  libsemanage.dbase_llist_query: could not query record value (No such file or
  directory)
   bug in xguest


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-15
changelog:
  - Allow init to transition to initrc_t on shell exec.
  - Fix init to be able to sendto init_t.
  - Allow syslog to connect to mysql
  - Allow lvm to manage its own fifo_files
  - Allow bugzilla to use ldap
  - More mls fixes


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-6
changelog:
  - Prepare policy for beta release
  - Change some of the system domains back to unconfined
  - Turn on some of the booleans


author: Dan Walsh <dwalsh@redhat.com> 3.3.1-5
changelog:
  - Allow nsplugin_config execstack/execmem
  - Allow nsplugin_t to read alsa config
  - Change apache to use user content


author: Dan Walsh <dwalsh@redhat.com> 3.2.5-6
changelog:
  - Fix role transition from unconfined_r to system_r when running rpm
  - Allow unconfined_domains to communicate with user dbus instances


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-30
changelog:
  - Allow XServer to read /proc/self/cmdline
  - Fix unconfined cron jobs
  - Allow fetchmail to transition to procmail
  - Fixes for hald_mac
  - Allow system_mail to transition to exim
  - Allow tftpd to upload files
  - Allow xdm to manage unconfined_tmp
  - Allow udef to read alsa config
  - Fix xguest to be able to connect to sound port


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-28
changelog:
  - Fixes for hald_mac 
  - Treat unconfined_home_dir_t as a home dir
  - dontaudit rhgb writes to fonts and root


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-15
changelog:
  - Allow tmpreadper to read man_t
  - Allow racoon to bind to all nodes
  - Fixes for finger print reader


author: Dan Walsh <dwalsh@redhat.com> 3.0.8-7
changelog:
  - Allow cupsd_config_t to read/write usb_device_t
  - Support for finger print reader,
  - Many fixes for clvmd
  - dbus starting networkmanager


author: Dan Walsh <dwalsh@redhat.com> 3.0.2-7
changelog:
  - Begin adding policy to separate setsebool from semanage
  - Fix xserver.if definition to not break sepolgen.if


author: Dan Walsh <dwalsh@redhat.com> 2.6.4-5
changelog:
  - More fixes for alsactl
  - Transition from hal and modutils
  - Fixes for suspend resume.  
       - insmod domtrans to alsactl
       - insmod writes to hal log


author: Dan Walsh <dwalsh@redhat.com> 2.5.11-6
changelog:
  - Fix hald_acl_t to be able to getattr/setattr on usb devices
  - Dontaudit write to unconfined_pipes for load_policy


author: Dan Walsh <dwalsh@redhat.com> 2.5.4-2
changelog:
  - Revert Nemiver change
  - Set sudo as a corecmd so prelink will work,  remove sudoedit mapping, since this will not work, it does not transition.
  - Allow samba to execute useradd


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-6
changelog:
  - Allow mozilla, evolution and thunderbird to read dev_random.
  Resolves: #227002
  - Allow spamd to connect to smtp port
  Resolves: #227184
  - Fixes to make ypxfr work
  Resolves: #227237


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-4
changelog:
  - Fix spamassisin so crond can update spam files
  - Fixes to allow kpasswd to work
  - Fixes for bluetooth


author: Dan Walsh <dwalsh@redhat.com> 2.5.2-1
changelog:
  - Add ability to generate webadm_t policy
  - Lots of new interfaces for httpd
  - Allow sshd to login as unconfined_t


author: Dan Walsh <dwalsh@redhat.com> 2.5.1-1
changelog:
  - Allow prelink when run from rpm to create tmp files
  Resolves: #221865
  - Remove file_context for exportfs
  Resolves: #221181
  - Allow spamassassin to create ~/.spamassissin
  Resolves: #203290
  - Allow ssh access to the krb tickets
  - Allow sshd to change passwd
  - Stop newrole -l from working on non securetty
  Resolves: #200110
  - Fixes to run prelink in MLS machine
  Resolves: #221233
  - Allow spamassassin to read var_lib_t dir
  Resolves: #219234


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-16
changelog:
  - Allow semanage to exec it self.  Label genhomedircon as semanage_exec_t
  Resolves: #219421
  - Allow sysadm_lpr_t to manage other print spool jobs
  Resolves: #220080


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-3
changelog:
  - Allow login programs to polyinstatiate homedirs
  Resolves: #216184
  - Allow quotacheck to create database files
  Resolves: #212957


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-1
changelog:
  - Dontaudit appending hal_var_lib files 
  Resolves: #217452
  Resolves: #217571
  Resolves: #217611
  Resolves: #217640
  Resolves: #217725


author: James Antill <james.antill@redhat.com> 2.4.2-6
changelog:
  - Fix policygentool specfile problem.
  - Allow apache to send signals to it's logging helpers.
  - Resolves: rhbz#212731


author: Dan Walsh <dwalsh@redhat.com> 2.3.16-9
changelog:
  - Remove bluetooth-helper transition
  - Add selinux_validate for semanage
  - Require new version of libsemanage


author: Dan Walsh <dwalsh@redhat.com> 2.3.9-4
changelog:
  - Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32 platform
  - Fix spec for /dev/adsp


author: Dan Walsh <dwalsh@redhat.com> 2.3.6-4
changelog:
  - Change allow_execstack to default to on, for RHEL5 Beta.  
    This is required because of a Java compiler problem.
    Hope to turn off for next beta


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-11
changelog:
  - Added Paul Howarth patch to only load policy packages shipped 
    with this package
  - Allow pidof from initrc to ptrace higher level domains
  - Allow firstboot to communicate with hal via dbus


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-3
changelog:
  - Allow prelink to read bin_t symlink
  - allow xfs to read random devices
  - Change gfs to support xattr


author: Dan Walsh <dwalsh@redhat.com> 2.2.32-2
changelog:
  - Add unconfined_mount_t
  - Allow privoxy to connect to httpd_cache
  - fix cups labeleing on /var/cache/cups


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-6
changelog:
  - Allow secadm_t ability to relabel all files
  - Allow ftp to search xferlog_t directories
  - Allow mysql to communicate with ldap
  - Allow rsync to bind to rsync_port_t


author: Russell Coker <rcoker@redhat.com> 2.2.29-5
changelog:
  - Fixed mailman with Postfix #183928
  - Allowed semanage to create file_context files.
  - Allowed amanda_t to access inetd_t TCP sockets and allowed amanda_recover_t
    to bind to reserved ports.  #149030
  - Don't allow devpts_t to be associated with tmp_t.
  - Allow hald_t to stat all mountpoints.
  - Added boolean samba_share_nfs to allow smbd_t full access to NFS mounts.
    - Make mount run in mount_t domain from unconfined_t to prevent mislabeling of
    /etc/mtab.
  - Changed the file_contexts to not have a regex before the first ^/[a-z]/
    whenever possible, makes restorecon slightly faster.
  - Correct the label of /etc/named.caching-nameserver.conf
  - Now label /usr/src/kernels/.+/lib(/.*)? as usr_t instead of
    /usr/src(/.*)?/lib(/.*)? - I don't think we need anything else under /usr/src
    hit by this.
  - Granted xen access to /boot, allowed mounting on xend_var_lib_t, and allowed
    xenstored_t rw access to the xen device node.


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-2
changelog:
  - Add mono dbus support
  - Lots of file_context fixes for textrel_shlib_t in FC5
  - Turn off execmem auditallow since they are filling log files


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-17
changelog:
  - MLS Fixes
       dmidecode needs mls_file_read_up
  - add ypxfr_t
  - run init needs access to nscd
  - udev needs setuid
  - another xen log file
  - Dontaudit mount getattr proc_kcore_t


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-8
changelog:
  - Blkid changes
  - Allow udev access to usb_device_t
  - Fix post script to create targeted policy config file


author: Dan Walsh <dwalsh@redhat.com> 2.2.20-1
changelog:
  - Fix load_policy to work on MLS
  - Fix cron_rw_system_pipes for postfix_postdrop_t
  - Allow audotmount to run showmount


author: Dan Walsh <dwalsh@redhat.com> 2.2.19-2
changelog:
  - Fix swapon
  - allow httpd_sys_script_t to be entered via a shell
  - Allow httpd_sys_script_t to read eventpolfs


author: Dan Walsh <dwalsh@redhat.com> 2.2.2-1
changelog:
  - Update to upstream
  - Turn off execheap execstack for unconfined users
  - Add mono/wine policy to allow execheap and execstack for them
  - Add execheap for Xdm policy


author: Dan Walsh <dwalsh@redhat.com> 2.1.12-3
changelog:
  - Fix for procmail/spamassasin
  - Update to upstream
  - Add rules to allow rpcd to work with unlabeled_networks.


author: Dan Walsh <dwalsh@redhat.com> 2.1.6-13
changelog:
  - Add dri libs to textrel_shlib_t
  - Add system_r role for java
  - Add unconfined_exec_t for vncserver
  - Allow slapd to use kerberos


author: Dan Walsh <dwalsh@redhat.com> 2.1.3-1
changelog:
  - Turn back on execmem since we need it for java, firefox, ooffice
  - Allow gpm to stream socket to itself


author: Jeremy Katz <katzj@redhat.com> - 2.1.2-3
changelog:
  - fix requirements to be on the actual packages so that policy can get
    created properly at install time


author: Dan Walsh <dwalsh@redhat.com> 2.1.2-1
changelog:
  - Update to upstream 
  - Turn off allow_execmem and allow_execmod booleans
  - Add tcpd and automount policies


author: Dan Walsh <dwalsh@redhat.com> 2.1.1-3
changelog:
  - Add two new httpd booleans, turned off by default
       * httpd_can_network_relay
       * httpd_can_network_connect_db


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1.3
changelog:
  - Resolves: Bug 705837 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory
  - Add ExclusiveArch for x86 and x86_64 only


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1.1
changelog:
  - note: following the z-stream N-V-R convention - this is a z-stream
  - package for rhel-6.1.z - the .1 at the end means this is the first
  - z-stream release for the 389-ds-base-1.2.8.2 package in RHEL 6.1
  - this package is really 389-ds-base-1.2.8.3
  - Resolves: Bug 701560 - memory leak: entryusn value is leaked when an entry is deleted
  - Resolves: Bug 701556 - windows sync can lose old multi-valued attribute values when a new value is added
  - Resolves: Bug 701558 - ldclt core dumps
  - Resolves: Bug 701559 - Linked attributes callbacks access free'd pointers after close
  - Resolves: Bug 701554 - userpasswd not replicating


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1
changelog:
  - 389-ds-base-1.2.8.2
  - Bug 696407 - If an entry with a mixed case RDN is turned to be
  -    a tombstone, it fails to assemble DN from entryrdn


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.0-2
changelog:
  - added srcver because the version from the source is now
  - different than the source in the package


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.0-1
changelog:
  - 389-ds-base-1.2.8.0
  - Bug 693523 - Unable to change schema online
  - Bug 693520 - matching rules do not inherit from superior attribute type
  - Bug 693522 - nsMatchingRule does not work with multiple values
  - Bug 693519 - cannot use localized matching rules
  - Bug 693516 - Segfault on index update during full replication push on 1.2.7.5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.9.rc4
changelog:
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv service is restarted
  - bump version to 1.2.8.rc4 - bump ds console version to 1.2.5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.7.rc2
changelog:
  - 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2
  - Bug 689908 - (cov#10610) Fix Coverity NULL pointer dereferences
  - Bug 689895 - ns-newpwpolicy.pl needs to use the new DN format
  - Bug 689889 - RFE: allow fine grained password policy duration attributes
  -              in days, hours, minutes, as well
  - Bug 688730 - Exported tombstone cannot be imported correctly
  - Bug 684349 - slapd crashing when traffic replayed
  - Bug 682897 - Allow maxlogsize to be set if logmaxdiskspace is -1
  - introduce the concept of the srcprerel - with rc2, we did not rebase
  - the source, we are still using the .rc1 source tarball, so we use
  - srcprerel of .rc1 but package pre-release is .rc2


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.6.rc1
changelog:
  - 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1
  - Resolves: Bug 680575 - Rebase 389-ds-base to pick the latest features and fixes 
  - Resolves: Bug 681720 - setup-ds-admin.pl - improve hostname validation
  - Resolves: Bug 681611 - RFE: allow fine grained password policy duration attributes in 
  -     days, hours, minutes, as well
  - Resolves: Bug 681550 - setup-ds-admin.pl --debug does not log to file
  - Resolves: Bug 681379 - ns-slapd segfaults if I have more than 100 DBs
  - Resolves: Bug 680290 - setup-ds.pl should set SuiteSpotGroup automatically
  - Resolves: Bug 681351 - crash in ldap-agent when using OpenLDAP
  - Resolves: Bug 681332 - modifying attr value crashes the server, which is supposed to
  -     be indexed as substring type, but has octetstring syntax
  - Resolves: Bug 680305 - ds-logpipe.py script is failing to validate "-s" and
  -     "--serverpid" options with "-t".


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.5.a3
changelog:
  - Bug 676598 - 389-ds-base multilib: file conflicts
  - split off libs into a separate -libs package
  - remove old crufty fedora-ds stuff


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.4.a3
changelog:
  - do not create /var/run/dirsrv - setup will create it instead
  - remove the fedora-ds initscript upgrade stuff - we do not support that anymore
  - convert the remaining lua stuff to plain old shell script


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.3.a3
changelog:
  - 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3
  - Bug 675320 - empty modify operation with repl on or lastmod off will crash server
  - Bug 675265 - preventryusn gets added to entries on a failed delete
  - Bug 677774 - added support for tmpfiles.d
  - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search
  es
  - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
  - Bug 671199 - Don't allow other to write to rundir
  - Bug 678646 - Ignore tombstone operations in managed entry plug-in
  - Bug 676053 - export task followed by import task causes cache assertion
  - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8
  - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used
  - Bug 676689 - crash while adding a new user to be synced to windows
  - Bug 604881 - admin server log files have incorrect permissions/ownerships
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
  ice is restarted
  - Bug 675853 - dirsrv crash segfault in need_new_pw()


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.2.a2
changelog:
  - 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2
  - Errata Patches in patch files
  - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result searches
  - Bug 671199 - Don't allow other to write to rundir
  - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
  - bugs fixed in released code
  - Bug 674430 - Improve error messages for attribute uniqueness
  - Bug 616213 - insufficient stack size for HP-UX on PA-RISC
  - Bug 615052 - intrinsics and 64-bit atomics code fails to compile
  -    on PA-RISC
  - Bug 151705 - Need to update Console Cipher Preferences with new ciphers
  - Bug 668862 - init scripts return wrong error code
  - Bug 670616 - Allow SSF to be set for local (ldapi) connections
  - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the 
  -    log output to the text file
  - Bug 668619 - slapd stops responding
  - Bug 624547 - attrcrypt should query the given slot/token for
  -    supported ciphers
  - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any 
  -    error message in logs


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.3-1
changelog:
  - 1.2.7.3 release - git tag 389-ds-base-1.2.7.3
  - Bug 658312 - Invalid free in Managed Entry plug-in
  - Bug 641944 - Don't normalize non-DN RDN values


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.2-1
changelog:
  - 1.2.7.2 release - git tag 389-ds-base-1.2.7.2
  - Bug 659456 - Incorrect usage of ber_printf() in winsync code
  - Bug 658309 - Process escaped characters in managed entry mappings
  - Bug 197886 - Initialize return value for UUID generation code
  - Bug 658312 - Allow mapped attribute types to be quoted
  - Bug 197886 - Avoid overflow of UUID generator


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.1-1
changelog:
  - 1.2.7.1 release - git tag 389-ds-base-1.2.7.1
  - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes
  - Bug 656392 - Remove calls to ber_err_print()
  - Bug 625950 - hash nsslapd-rootpw changes in audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-1
changelog:
  - the 1.2.7 release
  - remove the ds-replication sub-package - there will be a new package for it
  - remove the selinux policy - dirsrv policy will be provided by the base OS


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.5.a4
changelog:
  - 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4
  - Bug 647932 - multiple memberOf configuration adding memberOf where there is 
  no member
  - Bug 491733 - dbtest crashes
  - Bug 606545 - core schema should include numSubordinates
  - Bug 638773 - permissions too loose on pid and lock files
  - Bug 189985 - Improve attribute uniqueness error message
  - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat
  ions
  - Bug 619633 - Make attribute uniqueness obey requiredObjectClass


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.4.a3
changelog:
  - 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Adding the ancestorid fix code to ##upgradednformat.pl.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.3.a3
changelog:
  - 1.2.7.a3 release - a2 was never released
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Bug 629681 - Retro Changelog trimming does not behave as expected
  - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif
  -              are not upgraded in the server instance schema dir


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.2.a2
changelog:
  - 1.2.7.a2 release - a1 was the OpenLDAP testday release
  - git tag 389-ds-base-1.2.7.a2
  - added openldap support on platforms that use openldap with moznss
  - for crypto (F-14 and later)
  - many bug fixes
  - Account Policy Plugin (keep track of last login, disable old accounts)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6.1-1
changelog:
  - This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1
  - Bug 634561 - Server crushes when using Windows Sync Agreement
  - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self
  - Bug 612264 - ACI issue with (targetattr='userPassword')
  - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager"
  - Bug 631862 - crash - delete entries not in cache + referint


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.11.rc7
changelog:
  - 1.2.6 release candidate 7
  - git tag 389-ds-base-1.2.6.rc7
  - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.10.rc6
changelog:
  - 1.2.6 release candidate 6
  - git tag 389-ds-base-1.2.6.rc6
  - Bug 617013 - repl-monitor.pl use cpu upto 90%
  - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats
  - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors
  - Bug 613833 - Allow dirsrv_t to bind to rpc ports
  - Bug 612242 - membership change on DS does not show on AD
  - Bug 617629 - Missing aliases in new schema files
  - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears
  - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments
  - Bug 617862 - Replication: Unable to delete tombstone errors
  - Bug 594745 - Get rid of dirsrv_lib_t label


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.9.rc3
changelog:
  - make selinux-devel explicit Require the base package in order
  - to comply with Fedora Licensing Guidelines


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.8.rc3
changelog:
  - 1.2.6 release candidate 3
  - git tag 389-ds-base-1.2.6.rc3
  - Bug 603942 - null deref in _ger_parse_control() for subjectdn
  - 609256  - Selinux: pwdhash fails if called via Admin Server CGI
  - 578296  - Attribute type entrydn needs to be added when subtree rename switch is on
  - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"


author: Nathan Kinder <nkinder@redhat.com> - 1.2.6-0.4.a3
changelog:
  - 1.2.6.a3 release
  - add managed entries plug-in
  - many bug fixes
  - moved selinux subpackage into base package


author: Rich Megginson <rmeggins@redhat.com> - 1.2.4-1
changelog:
  - 1.2.4 release
  - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration
  - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif


author: Rich Megginson <rmeggins@redhat.com> - 1.2.3-1
changelog:
  - 1.2.3 release
  - added template-initconfig to %files
  - %posttrans now runs update to update the server instances
  - servers are shutdown, then restarted if running before install
  - scriptlets mostly use lua now to pass data among scriptlet phases


author: Rich Megginson <rmeggins@redhat.com> - 1.2.2-1
changelog:
  - backed out - added template-initconfig to %files - this change is for the next major release
  - bump version to 1.2.2
  - fix reopened 509472 db2index all does not reindex all the db backends correctly
  - fix 518520 -  pre hashed salted passwords do not work
  - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of
  - bugs fixed in 1.2.2


author: Rich Megginson <rmeggins@redhat.com> - 1.2.1-1
changelog:
  - change name to 389
  - change version to 1.2.1
  - added initial support for numeric string syntax
  - added initial support for syntax validation
  - added initial support for paged results including sorting


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-4
changelog:
  - final release 1.2.0
  - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer
  - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389
  - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-1
changelog:
  - new release 1.2.0
  - Made devel package depend on mozldap-devel
  - only create run dir if it does not exist
  - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330


author: Rich Megginson <rmeggins@redhat.com> - 1.1.2-1
changelog:
  - This is the 1.1.2 release.  The bugs fixed can be found here
  - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721
  - Added winsync-plugin.h to the devel subpackage


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.1.0.1-3
changelog:
  - add patch to allow server to work with NSS 3.11.99 and later
  - do NSS_Init after fork but before detaching from console


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0.1-1
changelog:
  - Resolves bug 434403 - GCC 4.3 build fails
  - Rolled new source tarball which includes Nathan's fix for the struct ucred
  - NOTE: Change version back to 1.1.1 for next release
  - this release was pulled from CVS tag FedoraDirSvr110_gcc43


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-4
changelog:
  - This is the GA release of Fedora DS 1.1
  - Removed version numbers for BuildRequires and Requires
  - Added full URL to source tarball


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-2.0
changelog:
  - This is the beta2 release
  - new file added to package - /etc/sysconfig/dirsrv - for setting
  - daemon environment as is usual in other linux daemons


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.2
changelog:
  - fix build breakage due to open()
  - mock could not find BuildRequires: db4-devel >= 4.2.52
  - mock works if >= version is removed - it correctly finds db4.6


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.3.20070720
changelog:
  - Added Requires for perldap, cyrus sasl plugins
  - Removed template-migrate* files
  - Added perl module directory
  - Removed install.inf - setup-ds.pl can now easily generate one


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070320
changelog:
  - update to latest sources
  - added migrateTo11 to allow migrating instances from 1.0.x to 1.1
  - ldapi support
  - fixed pam passthru plugin ENTRY method


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070223
changelog:
  - Renamed package to fedora-ds-base, but keep names of paths/files/services the same
  - use the shortname macro (fedora-ds) for names of paths, files, and services instead
  - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base
  - updated to latest sources


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070213
changelog:
  - More cleanup suggested by Dennis Gilmore
  - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-8.el4.20070125
changelog:
  - added logconv.pl
  - added slapi-plugin.h to devel package
  - added explicit dirs for /var/log/fedora-ds et. al.


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-6.el4.20070125
changelog:
  - Move the plugin *.so files into the main package instead of the devel
  - package because they are loaded directly by name via dlopen


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.el4.cvs20070119
changelog:
  - Changed version to 1.1.0 and added Release 1.el4.cvs20070119
  - merged in changes from Fedora Extras candidate spec file


author: Dennis Gilmore <dennis@ausil.us> - 1.1-0.1.cvs20070108
changelog:
  - update to a cvs snapshot
  - fedorafy the spec 
  - create -devel subpackage
  - apply a patch to use mozldap not mozldap6
  - apply a patch to allow --prefix to work correctly


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-16
changelog:
  - Fixed the problem where the server would crash upon shutdown in dblayer
  - due to a race condition among the database housekeeping threads
  - Fix a problem with normalized absolute paths for db directories


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-15
changelog:
  - Touch all of the ldap/admin/src/scripts/*.in files so that they
  - will be newer than their corresponding script template files, so
  - that make will rebuild them.


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-9
changelog:
  - The template scripts needed to use @libdir@ instead of hardcoding
  - /usr/lib
  - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall
  - do the actual build in a "built" subdirectory, until we remove
  - the old script templates


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-7
changelog:
  - Update expired PayPayEE.cert test certificate
  - Conditionalize some database tests on user not being root


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-3
changelog:
  - Add requires for pkcs11-devel on nss-softokn-freebl devel
  - Run the test suites in check section per packaging guidelines


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-2
changelog:
  - Prefer user database ca cert trust settings system's ones
  - Swap internal key slot on fips mode switches


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-2
changelog:
  - Add suppport for pkcs8 formatted keys in the pem module
  - Add verify(not md5 size mtime) to configuration files attributes
  - Prevent nss-sysinit disabling on package upgrade
  - Create pkcs11.txt with correct permissions regardless of current umask
  - Add option to setup-nsssysinit.sh to report nss-sysinit status
  - Update test certificate which had expired


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Appying the changes in previous log
  - Changing some BuildRequires to >= as well
  - Temporarily disabling all tests for faster builds


author: Elio Maldonado <emaldona@redhat.com> - 3.12.5-7.3
changelog:
  - Resolves: #551784 rebuilt after nss-softokn and nss-util builds
  - this will generate the coorect nss.spec


author: Elio Maldonado <emaldona@redhat.com> - 3.12.5-7.1
changelog:
  - Updated to 3.12.5 from CVS import from Fedora 12
  - Moved blank legacy databases to the lookaside cache
  - Reenabled the full test suite
  - Retagging for a RHEL-6-test-build


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.8
changelog:
  - Fix nsssysinit to set the default flags on the crypto module (#545779)
  - Fix nsssysinit to enable apps to use the system cert store, patch contributed by David Woodhouse (#546221)
  - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)
  - Sysinit requires coreutils for post install scriplet (#547067)
  - Remove redundant header from the pem module


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-14
changelog:
  - Fix bug where user was prompted for a password when listing keys on an empty system database (#527048)
  - Fix setup-nsssysinit to handle more general flags formats (#527051)


author: Elio Maldonado<emaldona@redhat.com - 3.12.4-9
changelog:
  - Install blank databases and configuration file for system shared database
  - nsssysinit queries system for fips mode before relying on environment variable


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - PEM module implements memory management for internal objects - 509705
  - PEM module doesn't crash when processing malformed key files - 512019


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-2
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - No rpath-link in nss-softokn-config


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-30
changelog:
  - Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
  - Fixed requires and buildrequires as per recommendations in spec file review


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-29
changelog:
  - Restoring patches 2 and 7 as we still compile all sources
  - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-25
changelog:
  - Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
  - Add a temprary hack to nss.pc.in to unblock builds


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-22
changelog:
  - Fix nss-config not to include nssutil
  - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-19
changelog:
  - remove patches that are now in nss-softokn and
  - remove spurious exec-permissions for nss.pc per rpmlint
  - single requires line in nss.pc.in


author: Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11
changelog:
  - split off nss-softokn and nss-util as subpackages with their own rpms
  - first phase of splitting nss-softokn and nss-util as their own packages


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-10
changelog:
  - must install libnssutil3.since nss-util is untagged at the moment
  - preserve time stamps when installing various files


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-5
changelog:
  - updated pem module incorporates various patches
  - fix off-by-one error when computing size to reduce memory leak. (483855)
  - fix data type to work on x86_64 systems. (429175)
  - fix various memory leaks and free internal objects on module unload. (501080)
  - fix to not clone internal objects in collect_objects().  (501118)
  - fix to not bypass initialization if module arguments are omitted. (501058)
  - fix numerous gcc warnings. (500815)
  - fix to support arbitrarily long password while loading a private key. (500180) 
  - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)


author: Kai Engert <kaie@redhat.com> - 3.12.3-7
changelog:
  - re-enable test suite
  - add patch for upstream bug 488646 and add newer paypal
    certs in order to make the test suite pass


author: Kai Engert <kaie@redhat.com> - 3.12.3-3
changelog:
  - ship .chk files instead of running shlibsign at install time
  - include .chk file in softokn-freebl subpackage
  - add patch for upstream nss bug 488350


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-3
changelog:
  - nss package should own /etc/prelink.conf.d folder, rhbz#452062
  - use upstream patch to fix test suite abort


author: Kai Engert <kengert@redhat.com> - 3.11.99.3-2
changelog:
  - Build against gcc 4.3.0, use workaround for bug 432146
  - Run the test suite after the build and abort on failures.


author: Kai Engert <kengert@redhat.com> - 3.11.7-10
changelog:
  - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
    our signed libraries and protect them from modification.


author: Kai Engert <kengert@redhat.com> - 3.11.7-2
changelog:
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5.
  - Use a workaround to avoid mozilla bug 51429.


author: Kai Engert <kengert@redhat.com> - 3.11.5-2
changelog:
  - Fix rhbz#230545, failure to enable FIPS mode
  - Fix rhbz#220542, make NSS more tolerant of resets when in the 
    middle of prompting for a user password.


author: Kai Engert <kengert@redhat.com> - 3.11.5-1
changelog:
  - Update to 3.11.5
  - This update fixes two security vulnerabilities with SSL 2
  - Do not use -rpath link option
  - Added several unsupported tools to tools package


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: David Knox <dknox@redhat.com> 0:6.0.24-35
changelog:
  - Resolves: cve-2011-3190
  - Resolves: cve-2011-2204
  - Resolves: cve-2011-2526
  - Resolves: cve-2011-1184
  - Resolves: rhbz 748807 - tomcat6 broken when LANG="fr"


author: David Knox <dknox@redhat.com> 0:6.0.24-29
changelog:
  - Resolves: rhbz#656403, rhbz#675926, rhbz#676011
  - CVE-2010-4172, CVE-2010-3718, CVE-2011-0013, CVE-2010-4476,
  - CVE-2011-0534


author: David Knox <dknox@redhat.com> 0:6.0.24-28
changelog:
  - Resovles  rhbz#695284 - wrapper logs to different locations
  - CVE-2010-4172, CVE-2011-0013, CVE-2010-3718 commented out 
  - until needed.


author: David Knox <dknox@redhat.com> 0:6.0.24-25
changelog:
  - Installed permissions do not allow tomcat to start
  - incrementing NVR so yum won't get confused with the zstream


author: David Knox <dknox@redhat.com> 0:6.0.24-23
changelog:
  - Resolves: rhbz 678671 - useradd sets shell to nologin
  - dangling symlink for log4j. Added it as R: and R(post)


author: David Knox <dknox@redhat.com> 0:6.0.24-18
changelog:
  - Resolves: rhbz# 661244 missing tomcat6-juli link
  - Fixed symlinks to commons-collections and log4j in libdir
  - Removed log4j package


author: David Knox <dknox@redhat.com> 0:6.0.24-12
changelog:
  - Resolves: rhbz#584699. A respin was required to fix post and
  - postun for el. Updated EL-spec to 2.1 from 1.0. Tomcat6 uses 
  - elspec 2.1


author: David Knox <dknox@redhat.com> 0:6.0.24-11
changelog:
  - Resolves: rhbz#584699 initscript collected problems LSB
  - compliant. Not complete yet. Return values are correct and 
  - usage function has been implemented.


author: David Knox <dknox@redhat.com> 0:6.0.24-3
changelog:
  - Removed prerun lib and post WEB-INF/lib. Moved build-jar-repos to
  - after the installs. Added Requires and BuildRequires for jakarta-
  - commons-{dbcp,pool,collections}-tomcat5 and ecj. Changed define macro to
  - global.


author: David Walluck <dwalluck@redhat.com> 0:6.0.18-2
changelog:
  - remove initscripts and /sbin/service requirement
  - call initscript directly without using /sbin/service
  - require /sbin/chkconfig instead of chkconfig
  - remove chkconfig requirement from packages that don't require it


author: David Walluck <dwalluck@redhat.com> 0:6.0.18-1
changelog:
  - 6.0.18
  - Resolves: CVE-2008-1232, CVE-2008-1947, CVE-2008-2370, CVE-2008-2938
  - fix definition of java.security.policy with d%{name} start-security
  - don't pass $CATALINA_OPTS with d%{name} stop
  - redefine tempdir and workdir for tmpwatch workaround
  - change eclipse-ecj references to ecj


author: David Walluck <dwalluck@redhat.com> 0:6.0.16-1jpp.7.fc9
changelog:
  - version jsp and servlet Provides with their spec versions
  - remove Obsoletes/Provides for servletapi6 package as it can co-exist
  - check for java-functions existence in wrapper script
  - move d%{name} to %{name} and create symlink for d%{name}
  - improve status function in initscript
  - change license to ASL 2.0 again as per Fedora guidelines


author: David Walluck <dwalluck@redhat.com> 0:6.0.16-1jpp.6.fc9
changelog:
  - remove Requires: tomcat-native
  - put back original JPackage Group (except javadoc) and License tags
  - add Provides for jsp and servlet
  - use ant macro
  - build and install sample webapp
  - call /sbin/service to stop service on uninstall
  - remove references to $RPM_BUILD_DIR
  - use copy instead of move to fix short-circuit install build
  - remove prebuilt sample.war
  - remove Thumbs.db files
  - add Requires: java >= 0:1.6.0


author: David Walluck <dwalluck@redhat.com> 0:6.0.16-1jpp.2.fc9
changelog:
  - use %{_var} for appdir instead of /srv
  - use ${JAVACMD} for java executable in wrapper script
  - use built-in status function in initscript where possible
  - add missing require on procps for status function
  - fix java.library.path setting in %{_sysconfdir}/sysconfig/%{name}
  - add patch to document webapps in %{_sysconfdir}/%{name}/tomcat-users.xml
  - remove %{appdir}/ROOT/admin
  - move %{_bindir}/d%{name} to %{_sbindir}/d%{name}


author: David Walluck <dwalluck@redhat.com> 0:6.0.16-1jpp.1.fc9
changelog:
  - use %{_initrddir} macro instead of %{_sysconfdir}/init.d (rhbz #153187)
  - fix java.library.path setting in %{name}.conf (rhbz #253605)
  - fix incorrect initscript output (rhbz #380921)
  - update initscript (rhbz #247077)
  - add logrotate support
  - fix strange-permission
  - fix %prep
  - replace /var with %{_var}
  - replace %{_localstatedir} with %{_var}
  - use %{logdir} where possible
  - call build-jar-repository with full path in scriptlets
  - remove file-based requires
  - build with icedtea and set as the default JAVA_HOME in %{name}.conf
  - fix non-standard-group
  - change ecj references to eclipse-ecj
  - change Apache Software License 2.0 to ASL 2.0 for rpmlint


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-4
changelog:
  - Address CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
    by applying the patch from Apple as included in
    http://bugzilla.redhat.com/587731.
    * ruby-1.8.7-webrick-CVE.patch: New file.
  - Resolves: rhbz#605418


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-5
changelog:
  - avoid a false-positive readline-related test failure
    * ruby-readline-TERM-dumb.patch: New file.
    * Run "make test-all" in addition to "make test", in spite of its known
    failures (e.g., when using out of date gdbm).  Suggested by Ondrej Moris.
  - skip minor gdbm test to avoid failure
    * ruby-skip-gdbm-test.patch: New file.
  - avoid segfault on powerpc64
    * ruby-ppc64-segv-fix.patch: New file.
  - Resolves: rhbz#628715


author: Jim Meyering <meyering@redhat.com> - 1.8.7.299-6
changelog:
  - Now that ruby uses the two-clause BSDL, it may once again use the
  latest readline, which is covered by the LGPLv3.  2-clause BSDL is
  GPLv3-compatible, per http://www.gnu.org/philosophy/license-list.html
  Before, ruby used the GPLv2, which precluded use of readline6, so it
  had to resort to using the old readline5 library.
  Remove references to the old readline5 library.
  - Resolves: rhbz#631701


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.299-8
changelog:
  - Address CVE-2011-1004 "Symlink race condition by removing directory trees in
    fileutils module"
    * ruby-1.8.7-CVE-2011-1004.patch
  - Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
    * ruby-1.8.7-CVE-2011-1005.patch
  - Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
    * ruby-1.8.7-CVE-2011-0188.patch
  - Resolves: rhbz#709964


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-1
changelog:
  - Update to Ruby 1.8.7-p352.
    * Remove Patch43: ruby-1.8.7-CVE-2011-1004.patch; subsumed
    * Remove Patch44: ruby-1.8.7-CVE-2011-1005.patch; subsumed
    * Remove Patch200: ruby-1.8.7-webrick-CVE.patch; subsumed
  - Resolves: rhbz#706332
  - Fix of conflict between 32bit and 64bit library versions.
  - Resolves: rhbz#674787
  - Add systemtap static probes.
  - Resolves: rhbz#673162
  - Remove duplicate path entry
  - Resolves: rhbz#722887


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-3
changelog:
  - mkconfig.rb: fix for continued lines.
    * ruby-1.8.7-p352-mkconfig.rb-fix-for-continued-lines.patch
  - Resolves: rhbz#730287


author: Vít Ondruch <vondruch@redhat.com> - 1.8.7.352-4
changelog:
  - Address CVE-2011-4815 "DoS (excessive CPU use) via hash meet-in-the-middle
    attacks (oCERT-2011-003)"
    * ruby-1.8.7-p352-CVE-2011-4815.patch
  - Resolves: rhbz#768831


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-6.4
changelog:
  - fix CVE-2011-3481: NULL pointer dereference via crafted 
    References header in email (#738391)
  - fix CVE-2011-3372: nntpd authentication bypass (#740822)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.16-5
changelog:
  - spec cleanup
  - simplified packaging (merge -perl in -utils)
  - remove obsoleted and/or unmaintained additional sources/patches
  - remove long time not used files from the cvs/srpm
  - update additional sources/patches from their upstream


author: Tomas Janousek <tjanouse@redhat.com> - 2.3.9-8
changelog:
  - move certificate creation from -utils postinst to main package
  - rebuild with newer openssl and openldap


author: Tomas Janousek <tjanouse@redhat.com> - 2.3.9-7
changelog:
  - updated the getgrouplist patch
  - fixed a few undeclared functions (and int to pointer conversions)


author: Tomas Janousek <tjanouse@redhat.com> - 2.3.9-4.rc1
changelog:
  - update to latest upstream beta
  - temporarily dropped the rmquota+deletemailbox patch (doesn't apply)
  - fixed to compile with newer glibc
  - added the getgrouplist patch from RHEL-4, dropped groupcache patch
  - dropped the allow_auth_plain patch
  - buildrequire perl-devel


author: Tomas Janousek <tjanouse@redhat.com> - 2.3.8-3.2
changelog:
  - removed the lm_sensors-devel dependency, since it's properly required in
    net-snmp-devel
  - #248984 - cyrus-imapd.logrotate updated for rsyslog


author: Petr Rockai <prockai@redhat.com> - 2.3.7-1
changelog:
  - update to latest upstream version, fixes a fair amount of issues
  - forward-port the autocreate and rmquota patches (used latest
    upstream patches, those are for 2.3.3)


author: Petr Rockai <prockai@redhat.com> - 2.3.1-3
changelog:
  - install perl modules into vendor_perl instead of site_perl
  - change mode of perl .so files to 755 instead of 555
  - update pam configuration to use include directive instead
    of deprecated pam_stack
  - change prereq on cyrus-imapd-utils to requires


author: Petr Rockai <prockai@redhat.com> - 2.3.1-2.99.test1
changelog:
  - address bunch of rpmlint errors and warnings
  - rename perl-Cyrus to cyrus-imapd-perl to be consistent with rest
    of package (the cyrus modules are not part of cpan)
  - added provides on cyrus-nntp and cyrus-murder (the functionality
    is part of main package now)
  - removed generation of README.buildoptions
  - the two above made it possible to get rid of most build-time parameter
    guessing from environment
  - get rid of internal autoconf (iew)
  - don't strip binaries, renders -debuginfo useless...
  - remove prereq's in favour of newly added requires(...)


author: John Dennis <jdennis@redhat.com> - 2.3.1-2
changelog:
  - bring up to Simon Matter's 2.3.1-2 release
  - fix bug #173319, require cyrus-sasl-lib instead of cyrus-sasl
  - fix bug #176470, hardcoded disttag


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.18
changelog:
  - update rpm_set_permissions script
  - add snmp support as build time option, disabled by default
    because it doesn't build on older distributions


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.13
changelog:
  - add autosievefolder patch
  - add rmquota+deletemailbox patch
  - change default path for make_md5, add md5 directory


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.10
changelog:
  - spec file cleanup
  - add more cvt_cyrusdb_all fixes
  - fix pre/post scripts
  - fix requirements
  - add patch to set Invoca RPM config defaults
  - add sync directory used for replication
  - add autocreate patch


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-12
changelog:
  - add quickstart/stop option to init script to bypass db import/export
  - add authid_normalize patch
  - add allow_auth_plain_proxying patch
  - update gcc4 patch
  - remove useless fdatasync patch
  - add private autoconf used for build, remove autoconf dependency
  - generate correct docs including man pages
  - remove unneeded files from doc directory


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-6
changelog:
  - fix recovery problems with db4, which do not exist with db3
  - fix logic for handling ssl certs
  - remove initlog from init script


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-5
changelog:
  - add notifytest to the distribution
  - add functionality to convert all berkeley databases to skiplist
    on shutdown and convert them back as needed on startup. This should
    solve the upgrade problems with Berkeley databases.


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-4.14
changelog:
  - add gcc4 patch
  - determine and handle pki directory for openssl correctly
  - add skiplist recovery docs
  - add notify_sms patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added nolinkimapspool patch
  - fix debug_package macro, it was still being expanded,
    comments don't hide macro expansion
  - change license field to BSD, its not exact BSD, but BSD is the closest


author: John Dennis <jdennis@redhat.com> - 2.2.12-6.fc4
changelog:
  - the openssl package moved all its certs, CA, Makefile, etc. to /etc/pki
    now we are consistent with the openssl directory changes.


author: John Dennis <jdennis@redhat.com> - 2.2.12-5.fc4
changelog:
  - we finally have a common directory, /etc/pki for certs, so create
    /etc/pki/cyrus-imapd and put the ssl pem file there. The /etc/cyrus-imapd
    location will not be used, this change supercedes that.


author: John Dennis <jdennis@redhat.com> - 2.2.12-4.fc4
changelog:
  - fix bug #141479, move ssl pem file from /usr/share/ssl/certs to /etc/cyrus-imapd/cyrus-imapd.pem
  - change license field to BSD, its not exact BSD, but BSD is the closest.


author: John Dennis <jdennis@redhat.com> - 2.2.12-1.2.fc4
changelog:
  - fix debug_package macro, it was still being expanded,
    comments don't hide macro expansion
  - fix changelog chronological order
  - fix bug 118832, cyrus-imapd is modifying /etc/services


author: John Dennis <jdennis@redhat.com> - 2.2.10-11.2.fc4
changelog:
  - make _contribdir identical to Simon's,
    I had been getting burned by rpm's bizarre handling of macros in comments


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - remove special ownership and permissions from deliver
  - enable deliver-wrapper per default
  - enable OutlookExpress seenstate patch per default


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added more fixes to the autocreate patch
  - don't use %_libdir for %_cyrexecdir, it's a mess on x86_64
  - don't use %_libdir for symlinks
  - remove %_libdir pachtes
  - change pam configs to work on x86_64
  - changed default build option for IDLED to on
  - changed rpm_set_permissions to honor partitions in /etc/imapd.conf


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - removed allnumeric patch, not needed anymore
  - made groupcache a compile time option
  - rename nntp's pam service, fixes RedHat's bug #142672


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated groupcache patch
  - updated cvt_cyrusdb_all to use runuser instead of su if available
  - added upd_groupcache tool


author: John Dennis <jdennis@redhat.com> 2.2.10-3.devel
changelog:
  - fix bug #141673, dup of bug #141470
    Also make cyrus.conf noreplace in addition to imapd.conf
    Remove the verify overrides on the noreplace config files,
    we do want config file changes visible when verifying


author: John Dennis <jdennis@redhat.com> 2.2.10-1.devel
changelog:
  - update to Simon Matter's 2.2.10 RPM,
    fixes bug #139382, 
    security advisories: CAN-2004-1011 CAN-2004-1012 CAN-2004-1013 CAN-2004-1015


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - changed requirement for file >= 3.35-1 from BuildPrereq to
    Requires, fixes RedHat's bug #124991
  - added acceptinvalidfrom patch to fix RedHat's bug #137705


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - fixed symlinks for x86_64, now uses the _libdir macro
    reported by John Dennis, fixes RedHat's bug #128964
  - removed obsoletes tag, fixes RedHat's bugs #127448, #129274


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate and autosieve patches
  - made authorization a compile time option
  - added sieve-bc_eval patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated to 2.2.7
  - modified autocreate patch or 2.2.7
  - removed snmpargs patch which was needed for RedHat 6.2


author: John Dennis <jdennis@redhat.com> - 2.2.6-2,FC3,1
changelog:
  - bring up to date with Simon Matter's latest upstream rpm 2.2.6-2
  - comment out illegal tags Packager, Vendor, Distribution
    build for FC3


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate, autosieve and rmquota patches
  - fixed rmquota patch to build on gcc v3.3.x
  - added lmtp_sieve patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - don't enable cyrus-imapd per default
  - rename fetchnews to cyrfetchnews to avoid namespace conflicts with leafnode
  - replace fetchnews with cyrfetchnews in man pages
  - replace master with cyrus-master in man pages


author: Dan Walsh <dwalsh@redhat.com>
changelog:
  - change su within init script to get input from /dev/null
    this prevents hang when running in SELinux
  - don't use -fpie as default, it breaks different distributions


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - merged in most changes from Karsten Hopp's RedHat package
  - fixed permissions of files in contrib, thank you
    Edward Rudd for reporting it.
  - modified snmp patch to make it build on RedHat 6.2 again


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - switch to Simon Matter's cyrus-imapd package, which has
    some major improvements over the old Red Hat package.
    - configdirectory moved from /var/imap to /var/lib/imap
    - sasl_pwcheck_method changed to saslauthd
  - needed to delete package/vendor tags for buildsystem.
  - added USEPIE variable for linking with -fpie flag
  - removed rpath from linker arguments
  - removed email header from README.HOWTO-recover-mailboxes
  - added lib64 patch
  - use CFLAGS from specfile in imtest subdir
  - disable -pie on ppc for now


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - convert sieve scripts to UTF-8 only if sievec failed before
  - add note to the readme about limiting loggin on busy servers
  - added build time option to chose the syslog facility


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - add sendmail m4 macro, some people were looking for it
  - just one source for pam default configuration (they were all the same)
  - added /etc/pam.d/lmtp
  - added build support for RedHat Beta severn


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate patch to 0.8.1
  - removed creation of spool/config dirs, not needed anymore
  - added cyrus_sharedbackup to contrib


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - upgraded to 2.1.14
  - removed now obsolete forcedowncase patch
  - use --with-extraident to add extra version information
  - updated munge8bit patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added functionality to patch the IPv6 patch on the fly if
    autoconf > 2.13, we can now use newer autoconf again.


author: Paul Bender <pbender@qualcomm.com>
changelog:
  - fixed spec file so that autoconf 2.13 will always be used,
    since the IPv6 patch requires autoconf <= 2.13


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - update to 2.1.12
  - added logrotate entry for /var/log/auth.log
  - modified init script to use builtin daemon mode


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - removed autoconf hack, not needed anymore
  - enabled build on RedHat Beta Phoebe
  - added services entry for lmtp
  - cleanup spec file


author: Troels Arvin <troels@arvin.dk>
changelog:
  - Explicitly changed files-section to
     - use defattr for simple (root-owned 0644) files
     - explictly set root as user/group owner where
       the user/group ownership was previously indicated
       as "-"; this allows building valid packages without
       having to being root when building


author: Simon Matter <simix@datacomm.ch>
changelog:
  - remove creation of cyrus user at build time
  - added scripts from ftp://kalamazoolinux.org/pub/projects/awilliam/cyrus/


author: Simon Matter <simix@datacomm.ch>
changelog:
  - modified path in deliver-wrapper, thank you Richard L. Phipps
  - added RedHat 2.1AS support to the perlhack detection
  - added build time option to force syncronous updates on ext3


author: Simon Matter <simix@datacomm.ch>
changelog:
  - included support for different autoconf versions
  - modified the perl build and install process
  - made some .spec changes to build on RedHat 7.x and limbo


author: Simon Matter <simix@datacomm.ch>
changelog:
  - added compile time parameters to configure the package based on
    the idea from Luca Olivetti <luca@olivetti.cjb.net>
  - make deliver-wrapper a compile time option


author: Simon Matter <simix@datacomm.ch>
changelog:
  - upgraded to cyrus-imapd 2.1.3
  - removed some stuff that was cleaned up in the sources
  - added compile time options for db backends


author: Simon Matter <simix@datacomm.ch>
changelog:
  - added some %dir flags
  - removed /usr/lib/sasl/Cyrus.conf
  - added conf templates
  - build time option for usage of saslauth group


author: Simon Matter <simix@datacomm.ch>
changelog:
  - dependency of cyrus-sasl >= 1.5.24-22
  - dotstuffing patch for sendmail calls made by sieve for outgoing
    mails
  - patch for ability to force ipurge to traverse personal folders


author: Simon Matter <simix@datacomm.ch>
changelog:
  - changed default auth to pam
  - remove several %dir from %files sections
  - change from /usr/lib/cyrus -> /usr/libexec/cyrus
  - rename source files to something like cyrus...
  - added rehash tool
  - changed to hashed spool


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.14-1.2
changelog:
  - Bug 771632 - Incorrect entryUSN index under high load in replicated environment
  - Bug 771631 - Add slapi_rwlock API and use POSIX rwlocks
  - WARNING - patches 0030 and 0031 remove and add back the file configure
  - this is necessary because the merge commit to "rebase" RHEL-6 to 1.2.9.6
  - seriously messed up configure - so in order to add the patch for 743979
  - which also touched configure, the file had to be removed and added back
  - also note that the commit for the RHEL-6 branch to remove configure does
  - not work - the way patch works, it has to match every line exactly in
  - order to remove the file, and because the merge commit messed things
  - up, it doesn't work
  - So, DO NOT TOUCH 0030-remove-configure-to-get-rid-of-merge-conflict.patch
  - BECAUSE IT IS HAND CRAFTED and not generated by git format-patch
  - if you must regenerate this file,
  - git format-patch ...args... to generate a file in patch format
  - remove all of the patch matches (all the lines beginning with -)
  - get the 1.2.9.6 version of configure from the source tarball
  - wc -l configure to get the number of lines in the file
  - sed 's/^/-/' configure >> thefile.patch
  - edit thefile.patch to have the right number of lines and have the
  - patch commands in the correct place
  - PROFIT!!!


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.14-1.1
changelog:
  - git branch RHEL-6_2-Z tag 389-ds-base-1.2.9.14-1.1
  - Bug 758682 - crash when simple paged fails to send entry to client
  - Bug 758683 - rhds81 modrn operation and 100% cpu use in replication
  - Bug 758688 - Fix Coverity (11104) Resource leak: ids_sasl_user_to_entry (slapd/saslbind.c)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.13-1
changelog:
  - Bug 742381 - part3 - MOD operations with chained delete/add get
  -  back error 53 on backend config


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.12-1
changelog:
  - Bug 742661 - allow resource limits to be set for paged searches
  -  independently of limits for other searches/operations
  - Bug 742381 - part2 - MOD operations with chained delete/add get
  -  back error 53 on backend config
  - Bug 742382 - allow nsslapd-idlistscanlimit to be set dynamically and per-user
  - Bug 742381 - MOD operations with chained delete/add get back
  -  error 53 on backend config
  - Bug 739959 - Allow separate fractional attrs for incremental and total protocols


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.11-1
changelog:
  - Bug 739196 - Consolidate DS and DS replication bits in one package in RHEL 6.2
  - There were two patches in ds-replication for RHEL 6.2 that were added post
  - rebase - the two patches for 722292 - these are now in the 389-ds-base package
  - and have been cherry-picked to the RHEL-6 internal branch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.8-1
changelog:
  - Bug 733443 - large targetattr list with syntax errors cause server to crash or hang
  - Bug 734267 - upgradednformat failed to add RDN value - subtree and user account lockout policies implemented?
  - Bug 733434 - passwordisglobalpolicy attribute brakes TLS chaining
  - Bug 733442 - Ignore an error 32 in this case since we're adding a new AutoMember definition
  - Bug 733440 - RFE: add option to allow server to start with an expired certificate


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.6-1
changelog:
  - Bug 728510 - Run dirsync after sending updates to AD
  - Bug 729717 - Fatal error messages when syncing deletes from AD
  - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working.
  - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed again - separate tests for atomic ops and atomic bool cas


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.5-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix another coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.4-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.3-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  previous patch broke build on el5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-2
changelog:
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed to use configure test for GCC provided 64-bit atomic functions


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-1
changelog:
  - Bug 663752 - Cert renewal for attrcrypt and encchangelog
  -   this was "re-fixed" due to a deadlock condition with cl2ldif task cancel
  - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma
  - Bug 725743 - Make memberOf use PRMonitor for it's operation lock
  - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  - look for separate openldap ldif library
  - Split automember regex rules into separate entries
  - writing Inf file shows SchemaFile = ARRAY(0xhexnum)
  - add support for ldif files with changetype: add
  - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file
  - Bug 713209 - Update sudo schema
  - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9


author: Nathan Kinder <nkinder@redhat.com> - 1.2.8.7-1
changelog:
  - Bug 726136 - memberOf plug-in can deadlock when used with other plug-ins
  - Bug 725912 - Instance upgrade fails when upgrading 389-ds-base package


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.6-1
changelog:
  - Bug 720452 - RDN with % can cause crashes or missing entries
  - Bug 720051 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2.
  - Bug 720458 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not
  - Bug 720459 - Update sudo schema


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.5-1
changelog:
  - Bug 718351 - Intensive updates on masters could break the consumer's cache
  - Bug 714298 - unresponsive LDAP service when deleting vlv on replica


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.4-1
changelog:
  - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package
  - Bug 713317 - Cert renewal for attrcrypt and encchangelog
  - Bug 711266 - DS can not restart after create a new objectClass has entryusn attribute
  - Bug 712167 - ns-slapd segfaults using suffix referrals
  - Bug 709868 - only allow FIPS approved cipher suites in FIPS mode
  - Bug 711516 - Support upgrade from Red Hat Directory Server
  - Bug 711241 - memory leak found by reliab12
  - Bug 711265 - Cannot disable SSLv3 and use TLS only
  - Bug 711513 - slapd stops responding


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.3-4
changelog:
  - Resolves: Bug 705172 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory
  - use ix86 macro instead of hardcoded i386 etc.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.3-3
changelog:
  - Resolves: Bug 705172 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory
  - cannot use wildcard in ExclusiveArch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.3-2
changelog:
  - Resolves: Bug 705172 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.3-1
changelog:
  - Resolves: Bug 697663 - memory leak: entryusn value is leaked when an entry is deleted
  - Resolves: Bug 699458 - windows sync can lose old multi-valued attribute values when a new value is added
  - Resolves: Bug 700215 - ldclt core dumps
  - Resolves: Bug 700665 - Linked attributes callbacks access free'd pointers after close
  - Resolves: Bug 701057 - userpasswd not replicating


author: Jiri Skala <jskala@rehat.com> - 2.2.2-3
changelog:
  - Resolves: #540818 - Local user access denied by default vsftpd.conf
  - Resolves: #580521 - vsftpd issues in RHEL5.4 (cloned)


author: Jiri Skala <jskala@rehat.com> - 2.2.2-1
changelog:
  - Resolves: #555321 - vsftpd segfaults with passive mode and SSL
  - updated to latest upstream version - fixes the bug #555321


author: Jiri Skala <jskala@redhat.com> - 2.1.0-3
changelog:
  - updated to latest upstream version
  - improved daemonizing - init script gets correct return code if binding fails
  - trim white spaces from option values
  - fixed #483604 - vsftpd not honouring delay_failed_login when userlist active


author: Martin Nagy <mnagy@redhat.com> - 2.1.0-0.3.pre4
changelog:
  - update to latest upstream release
  - enable ptrace sandbox again
  - don't mark vsftpd_conf_migrate.sh as a config file


author: Martin Nagy <mnagy@redhat.com> - 2.1.0-0.1.pre3
changelog:
  - update to latest upstream release
  - cleanup the spec file
  - drop patches fixed upstream:
      vsftpd-1.0.1-missingok.patch
      vsftpd-1.2.1-nonrootconf.patch
      vsftpd-2.0.1-tcp_wrappers.patch
      vsftpd-2.0.2-signal.patch
      vsftpd-2.0.3-daemonize_fds.patch
      vsftpd-2.0.5-correct_comments.patch
      vsftpd-2.0.5-pasv_dot.patch
      vsftpd-2.0.5-write_race.patch
      vsftpd-2.0.5-fix_unique.patch
      vsftpd-2.0.5-uname_size.patch
      vsftpd-2.0.5-bind_denied.patch
      vsftpd-2.0.5-pam_end.patch
      vsftpd-2.0.5-underscore_uname.patch
      vsftpd-2.0.6-listen.patch
  - join all configuration patches into one:
      vsftpd-1.1.3-rh.patch
      vsftpd-1.2.1-conffile.patch
      vsftpd-2.0.1-dir.patch
      vsftpd-2.0.1-server_args.patch
      vsftpd-2.0.3-background.patch
      vsftpd-2.0.5-default_ipv6.patch
      vsftpd-2.0.5-add_ipv6_option.patch
      vsftpd-2.0.5-man.patch


author: Martin Nagy <mnagy@redhat.com> - 2.0.6-1
changelog:
  - rebase for new upstream version
  - remove patches that were fixed in upstream: kickline, confspell, anon_umask


author: Martin Nagy <mnagy@redhat.com> - 2.0.5-21
changelog:
  - Remove uniq_rename patch.
  - Correct create/lock race condition, original patch by <mpoole@redhat.com>
    (#240550).
  - Fix bad handling of unique files (#392231).
  - Added userlist_log option.
  - Allow usernames to begin with underscore or dot (#339911).
  - Removed user_config patch.
  - Fix nonrootconf patch (#400921).
  - Increase maximum length of allowed username (#236326).
  - Fix file listing issue with wildcard (#392181).
  - Removed use_localtime patch (#243087).


author: Maros Barabas <mbarabas@redhat.com> - 2.0.5-16
changelog:
  - Merge review: - fix using %{_var}, %{_sbindir} and 
                    %{_sysconfigdir} macros for files and install
                  - fix BuildRoot
                  - dropped usermod, openssl & pam requirement


author: Maros Barabas <mbarabas@redhat.com> - 2.0.5-14
changelog:
  - remove file upload permission problem 
  - change name of patch vsfptd-2.0.3-user_config
  - Resolves #190193


author: Radek Vokal <rvokal@redhat.com> 2.0.3-10
changelog:
  - vsfptd.log as a default log file has to be rotated (#167359)
  - vsftpd does dns reverse before passing hosts to pam_access.so (#159745)


author: Radek Vokal <rvokal@redhat.com> 2.0.1-1
changelog:
  - tcp_wrapper patch updated, signal patch updated
  - upgrade to 2.0.1, fixes several bugs, RHEL and FC builds


author: Bill Nottingham <notting@redhat.com> 1.2.1-5
changelog:
  - fix all references to vsftpd.conf to be /etc/vsftpd/vsftpd.conf,
    including in the binary (#121199, #104075)


author: Karsten Hopp <karsten@redhat.de> 1.2.1-1
changelog:
  - update to 1.2.1, which fixes #89765 and lot of other issues
  - remove manpage patch, it isn't required anymore
  - clean up init script
  - don't use script to find libs to link with (lib64 issues)


author: Bill Nottingham <notting@redhat.com> 1.2.0-3
changelog:
  - tweak man page (#84584, #72798)
  - buildprereqs for pie (#99336)
  - free ride through the build system to fix (#101582)


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.1-9
changelog:
  - remove absolute paths from PAM configuration so that the right modules get
    used for whichever arch we're built for on multilib systems


author: Elliot Lee <sopwith@redhat.com> 1.0.1-8
changelog:
  - -D_FILE_OFFSET_BITS=64
  - smp make
  - remove forced optflags=-g for lack of supporting documentation


author: Bill Nottingham <notting@redhat.com> 1.0.1-5
changelog:
  - don't spit out ugly errors if anonftp isn't installed (#62987)
  - fix horribly broken userlist setup (#62321)


author: Trond Eivind Glomsrød <teg@redhat.com> 1.0.1-4
changelog:
  - s/Copyright/License/
  - add "missingok" to the logrotate script, so we don't get errors
    when nothing has happened


author: Seth Vidal <skvidal@phy.duke.edu>
changelog:
  - updated to 0.0.15
  - added entry for vsftpd.8 man page
  - added entry for vsftpd.log logrotate file
  - added TUNING file to docs list


author: Seth Vidal <skvidal@phy.duke.edu>
changelog:
  - First RPM packaging
  - Stolen items from wu-ftpd's pam setup
  - Separated rh 7 and rh 6.X's packages
  - Built for Rh6


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-22.1
changelog:
  - add candidate patch to fix a NULL pointer dereference while processing TGS
    requests (MITKRB5-SA-2011-007, #754046)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-22
changelog:
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#746341)
  - apply upstream patch to fix a null pointer derference with the LDAP kdb
    backend (CVE-2011-1527), an assertion failure with multiple kdb backends
    (CVE-2011-1528), and a null pointer dereference with multiple kdb backends
    (CVE-2011-1529) (MITKRB5-SA-2011-006, #740085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-21
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth with AD KDCs (#734341)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-19
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-17
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-16
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#724033)
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-15
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-14
changelog:
  - krb5kdc init script: pull in some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (#651466)
  - don't use %{?_smp_mflags} -- the build machinery doesn't always work
    right for those cases
  - tag the application of patches which we use to fix compile problems with
    %{_rawbuild} so that minimum-patches builds can be done (#711032)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-13
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-12
changelog:
  - incorporate a fix to teach the file labeling patch about when replay caches
    are expunged (#714217)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-11
changelog:
  - pull a fix from SVN to get libgssrpc clients (e.g. kadmin) authenticating
    using the old protocol over IPv4 again (#713252, RT#6920)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-10
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#713518)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696342,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - add backported patch to not fail receipt of an AP-REQ if the signature check
    on the included PAC (if there is one) fails (#679612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - switch to revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (CVE-2011-0284, #681565)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - add upstream patches to fix double-free in KDC while returning typed-data
    with errors (CVE-2011-0284, #681565)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, CVE-2011-0281,
    CVE-2011-0282, #671102, CVE-2011-0283, #669423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-0.beta1.0
changelog:
  - start moving to 1.9 with beta 1
    - drop patches for RT#5755, RT#6762, RT#6774, RT#6775
    - drop no-longer-needed backport patch for #539423
    - drop no-longer-needed patch for CVE-2010-1322
  - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-8
changelog:
  - incorporate upstream patch to fix uninitialized pointer crash in the KDC's
    authorization data handling (CVE-2010-1322, #636335)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-6
changelog:
  - pull down patches from trunk to implement k5login_authoritative and
    k5login_directory settings for krb5.conf (#539423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-4
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #629022, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #629022, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-1
changelog:
  - update to 1.8.3
    - drop backports of fixes for gss context expiration and error table
      registration/deregistration mismatch
    - drop patch for upstream #6750


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3
changelog:
  - tell krb5kdc and kadmind to create pid files, since they can
  - add logrotate configuration files for krb5kdc and kadmind (#462658)
  - fix parsing of the pidfile option in the KDC (upstream #6750)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull up fix for upstream #6745, in which the gssapi library would add the
    wrong error table but subsequently attempt to unload the right one


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596937), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)
    (#595828)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #593458)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - drop patch to suppress key expiration warnings sent from the KDC in
    the last-req field, as the KDC is expected to just be configured to either
    send them or not as a particular key approaches expiration (#556495)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
changelog:
  - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628, #576308)
  - kdc.conf: no more need to suggest keeping keys with v4-compatible salting


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
changelog:
  - remove the krb5-appl bits (the -workstation-clients and -workstation-servers
    subpackages) now that krb5-appl is its own package
  - replace our patch for #563431 (kpasswd doesn't fall back to guessing your
    principal name using your user name if you don't have a ccache) with the
    one upstream uses


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-2
changelog:
  - pull up patch to get the client libraries to correctly perform password
    changes over IPv6 (Sumit Bose, RT#6661)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-1
changelog:
  - update to 1.7.1
    - don't trip AD lockout on wrong password (#542687, #554351)
    - incorporates fixes for CVE-2009-4212 and CVE-2009-3295 (#553031)
    - fixes gss_krb5_copy_ccache() when SPNEGO is used
  - move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
    the devel subpackage, better lining up with the expected krb5/krb5-appl
    split in 1.8
  - drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
    depends on -workstation which also includes them


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-22
changelog:
  - use portreserve correctly -- portrelease takes the basename of the file
    whose entries should be released, so we need three files, not one


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-21
changelog:
  - suppress warnings of impending password expiration if expiration is more than
    seven days away when the KDC reports it via the last-req field, just as we
    already do when it reports expiration via the key-expiration field (#556495)
  - link with libtinfo rather than libncurses, when we can, in future RHEL


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-20
changelog:
  - krb5_get_init_creds_password: check opte->flags instead of options->flags
    when checking whether or not we get to use the prompter callback (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-19
changelog:
  - use portreserve to make sure the KDC can always bind to the kerberos-iv
    port, kpropd can always bind to the krb5_prop port, and that kadmind can
    always bind to the kerberos-adm port (#555279)
  - correct inadvertent use of macros in the changelog (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-18
changelog:
  - add upstream patch for integer underflow during AES and RC4 decryption
    (CVE-2009-4212), via Tom Yu (#545015)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-17
changelog:
  - put the conditional back for the -devel subpackage
  - back down to the earlier version of the patch for #551764; the backported
    alternate version was incomplete


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-16
changelog:
  - use %global instead of %define
  - pull up proposed patch for creating previously-not-there lock files for
    kdb databases when 'kdb5_util' is called to 'load' (#551764)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-15
changelog:
  - add upstream patch for KDC crash during referral processing (CVE-2009-3295),
    via Tom Yu (#545002)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages that live in the -libs subpackage into the regular
    %{_mandir} tree where they'll still be found if that package is the
    only one installed (#529319)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-11
changelog:
  - ksu: move account management checks to before we drop privileges, like
    su does (#540769)
  - selinux: set the user part of file creation contexts to match the current
    context instead of what we looked up
  - configure with --enable-dns-for-realm instead of --enable-dns, which isn't
    recognized any more


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-10
changelog:
  - move /etc/pam.d/ksu from krb5-workstation-servers to krb5-workstation,
    where it's actually needed (#538703)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-8
changelog:
  - specify the location of the subsystem lock when using the status() function
    in the kadmind and kpropd init scripts, so that we get the right error when
    we're dead but have a lock file - requires initscripts 8.99 (#521772)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if the init script fails to start krb5kdc/kadmind/kpropd because it's already
    running (according to status()), return 0 (part of #521772)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - simplify the man pages patch by only preprocessing the files we care about
    and moving shared configure.in logic into a shared function
  - catch the case of ftpd printing file sizes using %i, when they might be
    bigger than an int now


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-4
changelog:
  - try to merge and clean up all the large file support for ftp and rcp
    - ftpd no longer prints a negative length when sending a large file
      from a 32-bit host


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-3
changelog:
  - switch buildrequires: and requires: on e2fsprogs-devel into
    buildrequires: and requires: on libss-devel, libcom_err-devel, per
    sandeen on fedora-devel-list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a type mismatch in krb5_copy_error_message()
  - ftp: fix some odd use of strlen()
  - selinux labeling: use selabel_open() family of functions rather than
    matchpathcon(), bail on it if attempting to get the mutex lock fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - compile with %{?_smp_mflags} (Steve Grubb)
  - drop the bit where we munge part of the error table header, as it's not
    needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-1
changelog:
  - update to 1.7
    - no need to work around build issues with ASN1BUF_OMIT_INLINE_FUNCS
    - configure recognizes --enable/--disable-pkinit now
    - configure can take --disable-rpath now
    - no more libdes425, krb524d, krb425.info
    - kadmin/k5srvutil/ktutil are user commands now
    - new kproplog
    - FAST encrypted-challenge plugin is new
  - drop static build logic
  - drop pam_krb5-specific configuration from the default krb5.conf
  - drop only-use-v5 flags being passed to various things started by xinetd
  - put %{krb5prefix}/sbin in everyone's path, too (#504525)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-104
changelog:
  - extend PAM support to ksu: perform account and session management for the
    target user
  - pull up and merge James Leddy's changes to also set PAM_RHOST in PAM-aware
    network-facing services


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-103
changelog:
  - fix a typo in a ksu error message (Marek Mahut)
  - "rev" works the way the test suite expects now, so don't disable tests
    that use it


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-101
changelog:
  - add patches for read overflow and null pointer dereference in the
    implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
  - add patch for attempt to free uninitialized pointer in libkrb5
    (CVE-2009-0846)
  - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
  - put the krb5-user .info file into just -workstation and not also
    -workstation-clients


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


