# changelog

author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-0.b03
changelog:
  - Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
  - Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b04
changelog:
  - Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04
changelog:
  - Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13
changelog:
  - Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
  - Remove 8187577/PR3578 now applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04
changelog:
  - Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo"
  - Resolves: rhbz#1582032


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04
changelog:
  - Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails"
  - Resolves: rhbz#1568033


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04
changelog:
  - Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
  - Resolves: rhbz#1597825


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04
changelog:
  - Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage"
  - Resolves: rhbz#1463098


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0
changelog:
  - Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
  - Update to aarch64-shenandoah-jdk8u181-b15.
  - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
  - Move buildver to where it should be in the OpenJDK version.
  - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
  - Update pr3539-rh1548475.patch to apply after 8187045.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0
changelog:
  - Update to aarch64-shenandoah-jdk8u181-b16.
  - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b10.
  - Drop 8146115/PR3508/RH1463098 applied upstream.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0
changelog:
  - Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
  - Update to aarch64-shenandoah-jdk8u181-b15.
  - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
  - Move buildver to where it should be in the OpenJDK version.
  - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
  - Update pr3539-rh1548475.patch to apply after 8187045.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0
changelog:
  - Update to aarch64-shenandoah-jdk8u181-b16.
  - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream.
  - Resolves: rhbz#1633822


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-0
changelog:
  - Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b13.
  - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
  - Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b14.
  - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1
changelog:
  - Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-0
changelog:
  - Update to aarch64-shenandoah-jdk8u192-b12.
  - Remove patches included upstream
    - JDK-8031668/PR2842
    - JDK-8148351/PR2842
    - JDK-6260348/PR3066
    - JDK-8061305/PR3335/RH1423421
    - JDK-8188030/PR3459/RH1484079
    - JDK-8205104/PR3539/RH1548475
    - JDK-8185723/PR3553
    - JDK-8186461/PR3557
    - JDK-8201509/PR3579
    - JDK-8075942/PR3602
    - JDK-8203182/PR3603
    - JDK-8206406/PR3610/RH1597825
    - JDK-8206425
    - JDK-8036003
    - JDK-8201495/PR2415
    - JDK-8150954/PR2866/RH1176206
  - Re-generate patches (mostly due to upstream build changes)
    - JDK-8073139/PR1758/RH1191652
    - JDK-8143245/PR3548 (due to JDK-8202600)
    - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
    - JDK-8199936/PR3533
    - JDK-8199936/PR3591
    - JDK-8207057/PR3613
    - JDK-8210761/RH1632174 (due to JDK-8207402)
    - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
    - PR3593 (due to JDK-8081202)
    - RH1566890/CVE-2018-3639 (due to JDK-8189170)
    - RH1649664 (due to JDK-8196516)
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-0
changelog:
  - Add port of 8189170 to AArch64 which is missing from upstream 8u version.
  - Resolves: rhbz#1661577


author: Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2
changelog:
  - Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
  - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-3
changelog:
  - Update patch for RH1566890.
    - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
      rh1566890-CVE_2018_3639-speculative_store_bypass.patch
    - Added dependent patch,
      rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-0
changelog:
  - Update to aarch64-shenandoah-jdk8u201-b13.
  - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream.
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u202-b08.
  - Remove patches included upstream
    - JDK-8211387/PR3559
    - JDK-8207057/PR3613
    - JDK-8165852/PR3468
    - JDK-8073139/PR1758/RH1191652
    - JDK-8044235
    - JDK-8172850/RH1640127
    - JDK-8209639/RH1640127
    - JDK-8131048/PR3574/RH1498936
    - JDK-8164920/PR3574/RH1498936
  - Re-generate patches
    - JDK-8210647/RH1632174
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-0
changelog:
  - Update to aarch64-shenandoah-jdk8u212-b02.
  - Remove patches included upstream
    - JDK-8197429/PR3546/RH153662{2,3}
    - JDK-8184309/PR3596
    - JDK-8210647/RH1632174
  - Re-generate patches
    - JDK-8203030
  - Add casts to resolve s390 ambiguity in calls to log2_intptr
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1
changelog:
  - Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions
  - Yet another cast to resolve s390 ambiguity in call to log2_intptr
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b01.
  - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575.
  - Drop 8171000, 8197546 & PR3634 as applied upstream.
  - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b02.
  - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100).
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b03.
  - Set milestone to "ea" as this is not the final release.
  - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u.
  - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes.
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1
changelog:
  - Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately.
  - Drop unused use_shenandoah_hotspot variable.
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-0.1.ea
changelog:
  - Provide Javadoc debug subpackages for now, but populate them from the normal build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-0.1.ea
changelog:
  - Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b04.
  - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b08.
  - Adjust PR3083/RH134640 to apply after JDK-8182999
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2
changelog:
  - Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
  - Don't perform a bootcycle build for the debug variant build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b01.
  - Switch to EA mode.
  - Drop JDK-8210761/RH1632174 as now upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05.
  - Drop upstreamed patch JDK-8141570/PR3548.
  - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
  - Update version logic to handle -shenandoah* tag suffix.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b09.
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1
changelog:
  - Remove CVE-2018-3639 mitigation due to performance regression and
      OpenJDK position on speculative execution vulnerabilities.
      https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea
changelog:
  - Revert SSBD removal for now, until appropriate messaging has been decided.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b05.
  - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
  - Revise b05 snapshot to include JDK-8236178.
  - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b07.
  - Switch to GA mode for final release.
  - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3
changelog:
  - Mark net.properties as a config file (based on Fedora patch by James Cassell)
  - Resolves: rhbz#1710928


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4
changelog:
  - Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve.
  - Regenerate source tarball using the updated script and add the -'4curve' suffix.
  - Resolves: rhbz#1746874


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5
changelog:
  - Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u252-b03.
  - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea
changelog:
  - Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds
  - Sync stapinstall handling with RHEL 8 implementation
  - Need to support noarch for creating source RPMs for non-scratch builds.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b07.
  - Require tzdata 2020a so system tzdata matches resource updates in b07
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b09.
  - With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u262 release.
  - Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
  - Split JDK-8042159 patch into per-repo patches as upstream.
  - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b07.
  - Drop JDK-8243541 backport now applied upstream.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea
changelog:
  - With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea
changelog:
  - Restructure the build so a minimal initial build is then used for the final build (with docs)
  - This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  - Introduce jfr_arches for architectures which support JFR.
  - Introduce sa_arches for architectures which support the serviceability agent.
  - Introduce share_arches for architectures which support class sharing (-Xshare:dump).
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u262 release.
  - Split JDK-8042159 patch into per-repo patches as upstream.
  - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
  - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea
changelog:
  - Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b06.
  - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea
changelog:
  - Include a test in the RPM to check the build has the correct vendor information.
  - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
  - Improve quoting of vendor name
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u272 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - Delay tzdata 2020b dependency until tzdata update has shipped.
  - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
  - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1
changelog:
  - Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0
changelog:
  - Update to aarch64-shenandoah-jdk8u275-b01 (GA)
  - Update release notes for 8u275.
  - Resolves: rhbz#1895062


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea
changelog:
  - Added patch600: rh1750419-redhat_alt_java.patch
  - Replaced alt-java placeholder with real patched alt-java
  - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
  - Both surpassed by new patch
  - Resolves: rhbz#1901690


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea
changelog:
  - Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
  - Resolves: rhbz#1901690


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b02 (EA)
  - Update release notes for 8u282-b02.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b03 (EA)
  - Update release notes for 8u282-b03.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b04 (EA)
  - Update release notes for 8u282-b04.
  - Remove upstreamed patch PR3519
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b05 (EA)
  - Update release notes for 8u282-b05 and make some minor corrections.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b06 (EA)
  - Update release notes for 8u282-b06.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b07 (EA)
  - Update release notes for 8u282-b07.
  - Fix placement issue in release notes, caught by comparing with vanilla version.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b08 (GA)
  - Update release notes for 8u282-b08.
  - This tarball is embargoed until 2021-01-19 @ 1pm PT.
  - Resolves: rhbz#1908963


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b04 (EA)
  - Update release notes for 8u292-b04.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b05 (EA)
  - Update release notes for 8u292-b05.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea
changelog:
  - Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
  - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
  - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
  - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
  - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b06 (EA)
  - Update release notes for 8u292-b06.
  - Require tzdata 2020f due to JDK-8259048
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b07 (EA)
  - Update release notes for 8u292-b07.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b08 (EA)
  - Update release notes for 8u292-b08.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b09 (EA)
  - Update release notes for 8u292-b09.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b10 (GA)
  - Update release notes for 8u292-b10.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b01 (EA)
  - Update release notes for 8u302-b01.
  - Switch to EA mode.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b02 (EA)
  - Update release notes for 8u302-b02.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b03 (EA)
  - Update release notes for 8u302-b03.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
  - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b04 (EA)
  - Update release notes for 8u302-b04.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b05 (EA)
  - Update release notes for 8u302-b05.
  - Remove JDK-8266929/RH1960024 as now upstream.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b06 (EA)
  - Update release notes for 8u302-b06.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b07 (EA)
  - Update release notes for 8u302-b07.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b08 (EA)
  - Update release notes for 8u302-b08.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-07-20 @ 1pm PT.
  - Resolves: rhbz#1972395


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26
changelog:
  - Remove LIBDIR and funny definition of _libdir.
  - Fix rpmlint warnings about macros in comments.
  - Resolves: rhbz#1125260


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17
changelog:
  - added patch12,removeSunEcProvider-RH1154143
  - xdump excluded from ppc64le (rh1156151)
  - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com)
  - Resolves: rhbz#1125260


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Fix configure script to use ppc64le, not ppc64.
  - Add ppc64le support to LIBJSOUND_CFLAGS.
  - Add a jvm.cfg for ppc64le
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Print contents of spec.gmk to see what is being passed to the HotSpot build.
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build.
  - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7.
  - Print contents of hotspot-spec.gmk
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build.
  - Add property test case from java-1.7.0-openjdk build.
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13
changelog:
  - Adjust ppc64le HotSpot patch for OpenJDK 8.
  - Enable AArch64 configure/JDK patch on all archs to minimise patching issues.
  - Adjust ppc64le patches to apply after the enableAArch64 patch.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b01 (EA)
  - Update release notes for 8u312-b01.
  - Switch to EA mode.
  - Remove "-clean" suffix as no 8u312 builds are unclean.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b02 (EA)
  - Update release notes for 8u312-b02.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b03 (EA)
  - Update release notes for 8u312-b03.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b04 (EA)
  - Update release notes for 8u312-b04.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05 (EA)
  - Update release notes for 8u312-b05.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
  - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
  - Resolves: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.ea
changelog:
  - Add patch to improve performance of common separators in Scanner.useLocale
  - Move alt-java patch to correct section.
  - Resolves: rhbz#1862929


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b07 (EA)
  - Update release notes for 8u312-b07.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2011826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
  - Update release notes for 8u322-b04.
  - Require tzdata 2021c as of JDK-8274407.
  - Switch to EA mode.
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Related: rhbz#2022809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b06 (EA)
  - Update release notes for 8u322-b06.
  - Switch to GA mode for final release.
  - Require tzdata 2021e as of JDK-8275766.
  - Update tarball generation script to use git following shenandoah-jdk8u's move to github
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u332-b01 (EA)
  - Update release notes for shenandoah-8u332-b01.
  - Switch to EA mode.
  - Related: rhbz#2047529


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u332-b06 (EA)
  - Update release notes for shenandoah-8u332-b06.
  - Resolves: rhbz#2047529


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1
changelog:
  - Update to shenandoah-jdk8u332-b09 (GA)
  - Update release notes for 8u332-b09.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2022-04-19 @ 1pm PT.
  - Resolves: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1
changelog:
  - Update to shenandoah-jdk8u342-b07
  - Update release notes for shenandoah-8u342-b07.
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Remove redundant "REPOS" variable from tarball script
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Rebase JDK-8186464 patch so it applies after JDK-8190753
  - Resolves: rhbz#2106502


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2112383


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Related: rhbz#2133695


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13
changelog:
  - updated to security u45
  - minor sync with 7.2
   - generate_source_tarball.sh
   - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch
   - reworked (synced) zero patches (removed 103,11 added 204, 400-403)
   - family of 5XX patches renamed to 6XX
   - added upstreamed patch 501 and 505
   - included removeSunEcProvider-RH1154143.patch
  - returned java (jre only) provides
  - repacked policies (source20)
  - removed duplicated NVR provides
  - added automated test for priority (length7)
  - Resolves: RHBZ#1209076


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-7.b13
changelog:
  - Re-add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Remove ppc64le test case now fix has been verified.
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16
changelog:
  - July 2015 security update to u51b16.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60.
  - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea.
  - Re-generate EC disablement patch following CPU DH changes.
  - Resolves: rhbz#1235162


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16
changelog:
  - Add md5sum for January 2015 java.security update so it gets updated this time.
  - Resolves: rhbz#1235162


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17
changelog:
  - October 2015 security update to u65b17.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Update RH1191652 patch to build against current AArch64 tree.
  - Use appropriate source ID to avoid unpacking both tarballs on AArch64.
  - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs.
  - Resolves: rhbz#1257656


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17
changelog:
  - October 2015 security update to u65b17.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Update RH1191652 patch to build against current AArch64 tree.
  - Use appropriate source ID to avoid unpacking both tarballs on AArch64.
  - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs.
  - Resolves: rhbz#1257657


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17
changelog:
  - moved to integration forest 
  - sync with fedora (all but extracted luas and family)
  - Resolves: rhbz#1295753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-0.b15
changelog:
  - January 2016 security update to u71b15.
  - Improve verbosity and helpfulness of tarball generation script.
  - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32.
  - Update patch documentation using version originally written for Fedora.
  - Drop prelink requirement as we no longer use execstack.
  - Drop ifdefbugfix patch as this is fixed upstream.
  - Provide optional boostrap build and turn it off by default.
  - Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed.
  - Add patch for size_t formatting on s390 as size_t != intptr_t there.
  - Resolves: rhbz#1295753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15
changelog:
  - Restore upstream version of system LCMS patch removed by 'sync with Fedora'
  - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
  - Resolves: rhbz#1295753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-0.b03
changelog:
  - Remove what remains of the SunEC sources in the remove-intree-libraries script.
  - Resolves: rhbz#1320664


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-0.b14
changelog:
  - Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway.
  - Resolves: rhbz#1325422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-0.b14
changelog:
  - Add 8132051 port to Zero.
  - Turn on bootstrap build for all to ensure we are now good to go.
  - Resolves: rhbz#1325422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-0.b14
changelog:
  - Add additional fix to Zero patch to properly handle result on 64-bit big-endian
  - Resolves: rhbz#1325422


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-5
changelog:
  - Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
    so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
    JDK-8210461.
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-6
changelog:
  - Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
    so as to disable log math intrinsic on aarch64. Work-around for
    JDK-8210858
  - Resolves: rhbz#1570856


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.28-8
changelog:
  - removed version less provides
  - javadocdir moved to arched dir as it is no longer noarch
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-9
changelog:
  - Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
    RHBZ-1624122.
  - Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
    optimize compilation of fdlibm library.
  - Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
    as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
  - Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
    optimize compilation of libsaproc (extra c flags won't override
    optimization).
  - Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
    optimize compilation of libjsig.
  - Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
    optimize compilation of vmStructs.cpp (part of libjvm.so).
  - Reinstate filtering of opt flags coming from redhat-rpm-config.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.0.28-1
changelog:
  - Identify as GA version and no longer as early access (EA).
  - JDK 11 has been released for GA on 2018-09-25.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-5
changelog:
  - Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
  - Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
  - RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
  - Resolves: rhbz#1901695


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea
changelog:
  - Update to jdk-11.0.10.0+1
  - Update release notes to 11.0.10.0+1
  - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
  - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
  - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
  - Cleanup debug package descriptions and version number placement.
  - Switch to EA mode for 11.0.10 pre-release builds.
  - Drop JDK-8222286 & JDK-8254177 as applied upstream
  - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
  - Resolves: rhbz#1903907


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea
changelog:
  - Update to jdk-11.0.10.0+2
  - Update release notes to 11.0.10.0+2
  - Update tarball generation script to use PR3818 which handles JDK-8171279 changes
  - Drop JDK-8250861 as applied upstream.
  - Resolves: rhbz#1903907


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea
changelog:
  - Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
  - Resolves: rhbz#1903907


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea
changelog:
  - Update to jdk-11.0.10.0+5
  - Update release notes to 11.0.10.0+5
  - Drop JDK-8222527 as applied upstream.
  - Resolves: rhbz#1903907


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea
changelog:
  - Update to jdk-11.0.10.0+8
  - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
  - Resolves: rhbz#1903907


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0
changelog:
  - Update to jdk-11.0.10.0+9
  - Update release notes to 11.0.10.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-01-19 @ 1pm PT.
  - Resolves: rhbz#1908970


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea
changelog:
  - Perform static library build on a separate source tree with bundled image libraries
  - Make static library build optional
  - Based on initial work by Severin Gehwolf
  - Resolves: rhbz#1930527


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea
changelog:
  - Debug builds need to find their documentation from the release build.
  - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
  - Resolves: rhbz#1930527


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea
changelog:
  - Fix issue where CheckVendor.java test erroneously passes when it should fail.
  - Add proper quoting so '&' is not treated as a special character by the shell.
  - Resolves: rhbz#1938082


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0
changelog:
  - Update to jdk-11.0.11.0+9
  - Update release notes to 11.0.11.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1940228


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+1
  - Update release notes to 11.0.12.0+1
  - Switch to EA mode for 11.0.12 pre-release builds.
  - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
  - Remove local JDK-8187450 backport as now included upstream.
  - Resolves: rhbz#1967811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+4
  - Update release notes to 11.0.12.0+4
  - Correct bug ID JDK-8264846 to intended ID of JDK-8264848
  - Resolves: rhbz#1967811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+6
  - Update release notes to 11.0.12.0+6
  - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
  - Resolves: rhbz#1967811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0
changelog:
  - Update to jdk-11.0.12.0+7
  - Update release notes to 11.0.12.0+7
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-07-20 @ 1pm PT.
  - Resolves: rhbz#1972395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3
changelog:
  - Restructure the build so a minimal initial build is then used for the final build (with docs)
  - This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  - Related: rhbz#1999936


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.13.0+1
  - Update release notes to 11.0.13.0+1
  - Update tarball generation script to use git following OpenJDK 11u's move to github
  - Switch to EA mode for 11.0.13 pre-release builds.
  - Remove non-Free test from source tarball.
  - Related: rhbz#1999936


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1
changelog:
  - Update to jdk-11.0.12.0+8
  - Update release notes to 11.0.12.0+8
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2012332


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.ea
changelog:
  - Replaced hardcoded 11 by featurever where appropriate
  - Fixed comment of `for slowdebug` to correct `any debug`
  - Related: rhbz#2022810


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.ea
changelog:
  - Update to jdk-11.0.14.0+8
  - Update release notes to 11.0.14.0+8
  - Switch to EA mode for 11.0.14 pre-release builds.
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Rename blacklisted.certs to blocked.certs following JDK-8253866
  - Resolves: rhbz#2022810


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1
changelog:
  - Update to jdk-11.0.14.0+9
  - Update release notes to 11.0.14.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2022-01-18 @ 1pm PT.
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.15.0+1
  - Update release notes to 11.0.15.0+1
  - Switch to EA mode for 11.0.15 pre-release builds.
  - Related: rhbz#2047531


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1
changelog:
  - Update to jdk-11.0.15.0+9
  - Update release notes to 11.0.15.0+9
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
  - Resolves: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2
changelog:
  - Remove security items from release notes that were only in 17u and N/A for 11u
  - Related: rhbz#2073422


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2106510


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8284920 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2106510


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119512


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.17+1
  - Update release notes to 11.0.17+1
  - Switch to EA mode for 11.0.17 pre-release builds.
  - Related: rhbz#2130373


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.ea
changelog:
  - Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
  - Related: rhbz#2130373


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.ea
changelog:
  - Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
  - Related: rhbz#2130373


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
  - Related: rhbz#2133695


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-9
changelog:
  - Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
    RHBZ-1624122.
  - Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
    optimize compilation of fdlibm library.
  - Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
    as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
  - Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
    optimize compilation of libsaproc (extra c flags won't override
    optimization).
  - Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
    optimize compilation of libjsig.
  - Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
    optimize compilation of vmStructs.cpp (part of libjvm.so).
  - Reinstate filtering of opt flags coming from redhat-rpm-config.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.1.13-3
changelog:
  - Use upstream's version of Aarch64 intrinsics disable patch:
    - Removed:
      RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
      RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    - Superceded by:
      jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.1.13-4
changelog:
  - Update to shenandoah-jdk-11.0.1+13-20190101
  - Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
  - Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
  - Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
  - Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
  - Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.2.7-0
changelog:
  - Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
  - Make tagsuffix optional and comment it out while unused.
  - Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
  - Drop JDK-8209639/RH1640127 applied upstream.
  - Re-generate JDK-8210416/RH1632174 following JDK-8209786
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.3.6-0
changelog:
  - Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
  - Drop JDK-8210416/RH1632174 applied upstream.
  - Drop JDK-8210425/RH1632174 applied upstream.
  - Drop JDK-8210647/RH1632174 applied upstream.
  - Drop JDK-8210761/RH1632174 applied upstream.
  - Drop JDK-8210703/RH1632174 applied upstream.
  - Add cast to resolve s390 ambiguity in call to log2_intptr
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.2.7-4
changelog:
  - Replace pcsc-lite-devel with pcsc-lite-libs so deps can be resolved without optional repository
  - Add JDK-8009550/RH910107 patch so OpenJDK checks for libpcsclite.so.1 (in pcsc-lite-libs)
  - Add missing ISA to cups-libs requirement
  - Remove duplicate lksctp-tools requirement
  - Resolves: rhbz#1684617


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.3.6-1
changelog:
  - Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
  - Drop JDK-8210416/RH1632174 applied upstream.
  - Drop JDK-8210425/RH1632174 applied upstream.
  - Drop JDK-8210647/RH1632174 applied upstream.
  - Drop JDK-8210761/RH1632174 applied upstream.
  - Drop JDK-8210703/RH1632174 applied upstream.
  - Resolves: rhbz#1677516


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.4.11-0
changelog:
  - Update to shenandoah-jdk-11.0.4+11 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.1-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.5+1 (EA)
  - Switch to EA mode for 11.0.5 pre-release builds.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.10-0
changelog:
  - Update to shenandoah-jdk-11.0.5+10 (GA)
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.1-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.6+1 (EA)
  - Switch to EA mode for 11.0.6 pre-release builds.
  - Add support for jfr binary.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-0
changelog:
  - Update to shenandoah-jdk-11.0.6+10 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-3
changelog:
  - Add JDK-8237396 backport to resolve Shenandoah TCK breakage in traversal mode.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.7.10-0
changelog:
  - Update to shenandoah-jdk-11.0.7+10 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.4-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+4 (EA)
  - Require tzdata 2020a due to resource changes in JDK-8243541
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.7-0.1.ea
changelog:
  - java-11-openjdk doesn't have a JRE tree, so don't try and copy alt-java there...
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.9-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+9 (EA)
  - Update release notes for 11.0.8 release.
  - This tarball is embargoed until 2020-07-14 @ 1pm PT.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-0
changelog:
  - Update to shenandoah-jdk-11.0.8+10 (GA)
  - Switch to GA mode for final release.
  - Update release notes with last minute fix (JDK-8248505).
  - This tarball is embargoed until 2020-07-14 @ 1pm PT.
  - Resolves: rhbz#1838811


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.8.5-0.2.ea
changelog:
  - Disable stripping of debug symbols for static libraries part of
    the -static-libs sub-package.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.6-0.0.ea
changelog:
  - Update to jdk-11.0.9+6 (EA)
  - Update tarball generation script to use PR3802, handling JDK-8233228 & JDK-8177334
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea
changelog:
  - Update to jdk-11.0.9+8 (EA)
  - Remove JDK-8252258/RH1868406 now applied upstream.
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Moved vendor_version_string to a better place
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0
changelog:
  - Update to jdk-11.0.9+11
  - Update release notes for 11.0.9 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1
changelog:
  - Move all license files to NVR-specific JVM directory.
  - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
  - Resolves: rhbz#1896609


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1
changelog:
  - Update to jdk-11.0.9.1+1
  - RPM version stays at 11.0.9.11 so as to not break upgrade path.
  - Adds a single patch for JDK-8250861.
  - Resolves: rhbz#1895275


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2
changelog:
  - Add backport of JDk-8222537 so the Host header is sent when using proxies.
  - Resolves: rhbz#1869530


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.22-5
changelog:
  - Initial Load
  - removed -fno-lifetime-dse; rhel7 gcc to old (4.8.5)
  - lib/classlist do not exists s390, ifarch-ed via jit_arches out
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.22-8
changelog:
  - Adjust system NSS patch, RHBZ-1565658-system-nss-SunEC.patch, so
    as to filter -Wl,--as-needed from linker flags. Fixes FTBFS issue.
  - Resolves: rhbz#1570856


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.28-2
changelog:
  - jfr/*jfc files listed for all arches
  - lib/classlist do not exists s390, ifarch-ed via jit_arches out
  - specfile slightly improved to allow srpm rebuild on rhel8/fedoras
  - Resolves: rhbz#1570856


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-5
changelog:
  - Moving from rpmfusion-free to Fedora because it will be free of known patents
    in all countries from 2012-04-04 onwards
  - Changed license from GPL to GPLv2+ and included up-to-date license file


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1:1.8.5-11
changelog:
  - Thanks to Ville Skyttä (bz#875343) build against libedit instead of readline
  	what simplify licensing apparently without any loss of functionality


author: Christina Fu <cfu@redhat.com> - 4.2.6-35
changelog:
  - Bugzilla Bug #1040640 - Incorrect OIDs for SHA2 algorithms
    (cfu for jnimeh@gmail.com)
  - Bugzilla Bug #1133718 - Key strength validation is not performed for RC4
    algorithm (nkinder)
  - Bugzilla Bug #816396 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS (cfu)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-4
changelog:
  - Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
  - Updated build requirements for NSPR
  - Updated build and runtime requirements for NSS
  - ## 'jss-post-rebase.patch' resolves the following issues ported from
    - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
    code for RFC5272+ (cfu)
  - Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
  - Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
    class. (edewata)
  - Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
  - Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
  - Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
    (edewata)
  - Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
  - Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
  - Mozilla Bugzilla #1350130 - Missing
    CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-5
changelog:
  - Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
    idm-console-framework < 1.1.17-4
  - Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-6
changelog:
  - Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
    release tag (mharmsen)
  - Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
    exporting EncryptedPrivateKeyInfo (ftweedal)
  - Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
    (ftweedal)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-7
changelog:
  - Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
    Mozilla Bugzilla #1360207 - Fix incorrect if (ss->...) in SSL_ReconfigFD


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-8
changelog:
  - Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
    (jmagne)
  - Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
    [RHEL-7.4.z] (ftweedal)
  - Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
    export fails [rhel-7.4.z] (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-9
changelog:
  - Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
    FIPSMODE [rhel-7.4.z] (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-10
changelog:
  - Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
    (edewata)
  - Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
    producing signatures (especially for EC) (cfu,dstutzman)


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-11
changelog:
  - Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
    producing signatures (especially for EC) (cfu,dstutzman)
  - Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
    types (cfu,dstutzman)
  - Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
    resulting structure (cfu,dstutzman)


author: Dogtag Team <pki-devel@redhat.com> 4.4.2-12
changelog:
  - Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
    AlgorithmIdentifier [rhel-7.5.z] (cfu)


author: Dogtag Team <pki-devel@redhat.com> 4.4.2-13
changelog:
  - Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
    decode/encode process alters original data [rhel-7.5.z] (cfu)
  - Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
    [rhel-7.5.z] (cfu)


author: Christina Fu <cfu@redhat.com> - 4.2.6-42
changelog:
  - Sync up patches from both Fedora and RHEL; adding two patches
    (cfu, edewata, mharmsen) from RHEL:
  - Bugzilla Bug #1238450 - UnsatisfiedLinkError on Windows (cfu)
  - make it compile on Windows platforms (cfu for nhosoi)


author: Elio Maldonado <emaldona@redhat.com> - 4.4.0-1
changelog:
  - Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
  - ## JSS 4.4.0 includes the following patches ported from downstream:
  - Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
  - Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
  - Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
    CS interface
  - Mozilla Bugzilla #1307993 - Expose updated certificate verification function
    in JSS
  - Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
    pointer arithmetic
  - Mozilla Bugzilla #1308001 - Verification should fail when a revoked
    certificate is added
  - Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
  - Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
    (HSM + NSS)
  - Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
  - Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
  - Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
    unwrapping keys should be done in the token
  - Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
    manufacturer identifier
  - Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
    JSS 4.2.6
  - Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS
  - Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
    error from NSS
  - Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
  - Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
  - Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
  - Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
    PKCS#11 bypass support
  - Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
  - Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
    in FIPS Mode and ECC algorithms
  - Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
    functions
  - Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
  - ## JSS 4.4.0 includes the following changes for building and testing:
  - Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
  - Mozilla Bugzilla #1346420 - Document steps required to use the proper
    libjss4.so when running certain HMAC Algorithms tests


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-3
changelog:
  - Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
    decode/encode process alters original data (cfu)
  - Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-4
changelog:
  - Bugzilla #1671244 - x25519 allowed in FIPS mode [rhel-7.6.z] (ascheel)
  - Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
    chain [rhel-7.6.z] (jmagne)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-5
changelog:
  - Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
    chain [rhel-7.6.z] (jmagne)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.6-2
changelog:
  - Bugzilla #1747966 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.7-2
changelog:
  - Bugzilla #1747967 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.7-3
changelog:
  - Bugzilla #1710105 - JSS: add RSA PSS support (jmagne)
  - Bugzilla #1796642 - JSS -- remove hardcoded native library
    /usr/lib{64}/jss/libjss4.so (ascheel)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-1
changelog:
  - Update to kbd-1.15.5 (removed kbd-1.15-resizecon-x86_64.patch,
    kbd-1.15-defkeymap.patch, kbd-1.15.3-fix-es-translation.patch,
    kbd-1.15.3-loadkeys-d.patch)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-3
changelog:
  - Include xkb layouts from xkeyboard-config converted to console keymaps
  - Add version to vlock provides
    Resolves: #902564


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8
changelog:
  - Fix vlock doesn't perform PAM account management or credential reinitialization
    Resolves: #1032140


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14
changelog:
  - Replace CtrlL_Lock with Caps_Lock in generated us.map
    Resolves: #1441411
  - Improve man pages and usage messages quality and consistency
    Resolves: #949015


author: Rex Dieter <rdieter@fedoraproject.org> 0.5.3-5
changelog:
  - kcm-gtk : "GTK+ Appearance" in systemsettings->lost and found (#628381)
  - Requires: kdebase-runtime


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 0.5.3-8
changelog:
  - add support for GTK+ 3 (backported from upstream bzr gtk3 branch)
  - drop ancient Fedora < 13 env_script conditional, now always in kde-settings


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 0.5.3-10
  - update kcm_category patch
  - kubuntu_01_xsettings_kipc.patch
  - drop old Obsoletes: gtk-qt-engine


author: Ryan Rix <ry@n.rix.si> - 0.3.1-3
changelog:
  - Update the category to adhere to new SC 4.5 systemsettings layout. Will now
    appear under the "input devices" section.


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.3.1-6
changelog:
  - Merge bugfixes from Kubuntu, fixes circular scrolling and more (#633353)
  - Drop default kcmtouchpadrc, use driver defaults (#611611)
  - Make the Scrolling tab use a vertical scrollbar if needed (#600121)


author: Jan Grulich <jgrulich@redhat.com> 0.9.0.8-2
changelog:
  - remove mobile-broadband-mobile-provider-devel as BR
  - add ModemManager as runtime dependency
  - add mobile-broadband-mobile-provider as runtime dependency


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-10
changelog:
  - Avoid duplicates in solid device automounter kcm
    Resolves: bz#1084191
  - Enable automount overrides even when automatic mounting is disabled
    Resolves: bz#1084497


author: Than Ngo <than@redhat.com> - 4.10.5-20
changelog:
  - Resolves: bz#1040678 - cannot assign custom keyboard shortcut for Show Desktop Grid
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-21
changelog:
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed (fixed patch)
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays (fixed patch)


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-8
changelog:
  - Powerdevil: do not notify about a non existent action
    Resolves: bz#1289149
  - Plasma taskmanager: close context menu when task is closed
    Resolves: bz#1262603


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-10
changelog:
  - Fix grouping of tasks in taskmanager applet
    Resolves: bz#1348917
  - Fix unlocking of kscreenlocker, unlock it just once
    Resolves: bz#1333441


author: Jan Grulich <jgrulich@redhat.com> - 4.11-19-13
changelog:
  - Sanitise notification HTML
    Resolves: bz#1568853

  - Increase cpu buffer size in ksysguard
    Resolves: bz#1611762


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-14
changelog:
  - Do not show disabled buttons in Plastik decoration theme
    Resolves: bz#1677641

  - Taskmanager: dismiss group when application is closed and there is enough space
    Resolve: bz#1698048


author: Rex Dieter <rdieter@fedoraproject.org> - 6:4.10.3-2
changelog:
  - pull in a few upstream fixes, including a couple minor security issues
  - Crash in DialogShadows::Private::freeX11Pixmaps() (kde#319137)


author: Martin Briza <mbriza@redhat.com> - 4.10.5-3
changelog:
  - make kpac_dhcp_helper full relro
  - set the variables in the generated cmake files to contain both 64b and 32b paths
  - hide "command not found" for one pkg-config invocation in the spec
  - fix macro expansion in the spec changelog
  - Resolves: #884052


author: Martin Briza <mbriza@redhat.com> - 4.10.5-4
changelog:
  - use a better way to figure out if lib or lib64 should be used
  - use -fno-strict-aliasing for type punned source files
  - Resolves: #884052


author: Jan Grulich <jgrulich@redhat.com> - 6:4.14.8-9
changelog:
  - Do not fork konsole process when opening terminal from apps using dolphin-part
    Resolves: bz#1710362


author: Jan Grulich <jgrulich@redhat.com> - 6:4.14.8-6
changelog:
  - KAuth: verify that whoever is calling us is actually who he says he is (CVE-2017-8422)
    Resolves: CVE-2017-8422


author: Mark Langsdorf <mlangsdo@redhat.com> [3.19.0-0.73.aa7a]
changelog:
  - CVE-2015-2922 kernel: denial of service (DoS) attack against IPv6 network stacks due to improper handling of Router Advertisements (Mark Salter)
  - CVE-2015-2686 kernel: sys_sendto/sys_recvfrom does not validate the user provided ubuf pointer (Mark Salter)
  - arm64: redhat: Lower NR_CPUS from 4096 to 64 (Don Dutile)
  - arm64: default CPUMASK_OFFSTACK for SMP (Don Dutile)
  - arm64: topology: Correct core_id calculation (Don Dutile)
  - Undo revert of "ahci_xgene: Skip the PHY and clock initialization if already configured by the firmware." (Kyle McMartin)
  - drivers: net: xgene: Add shutdown function (Mark Salter) [1203109]
  - arm64: add smp spin-table cpu hotplug support for X-Gene platform (Mark Salter) [1209589]
  - Add CRASH_DUMP into generic config (Pratyush Anand)
  - arm64: use ioremap_cache in copy_oldmem_page (Pratyush Anand)
  - arm64/kdump: Find free area for crash kernel memory (Pratyush Anand)
  - arm: kvm: add stub implementation for kvm_cpu_reset() (Pratyush Anand)
  - arm64: kvm: add cpu reset at module exit (Pratyush Anand)
  - arm64: kvm: add cpu reset hook for cpu hotplug (Pratyush Anand)
  - arm64: kvm: allow EL2 context to be reset on shutdown (Pratyush Anand)
  - arm64: kvm: add a cpu tear-down function (Pratyush Anand)
  - arm64: add kdump support (Pratyush Anand)
  - arm64: kdump: do not go into EL2 before starting a crash dump kernel (Pratyush Anand)
  - arm64: kdump: implement machine_crash_shutdown() (Pratyush Anand)
  - arm64: kdump: reserve memory for crash dump kernel (Pratyush Anand)
  - arm64/kexec: Add pr_devel output (Pratyush Anand)
  - arm64/kexec: Add core kexec support (Pratyush Anand)
  - arm64: Add EL2 switch to soft_restart (Pratyush Anand)
  - arm64: Add new hcall HVC_CALL_FUNC (Pratyush Anand)
  - arm64: Convert hcalls to use HVC immediate value (Pratyush Anand)
  - arm64: Fold proc-macros.S into assembler.h (Pratyush Anand)
  - kexec: add IND_FLAGS macro (Pratyush Anand)
  - kexec: add bit definitions for kimage entry flags (Pratyush Anand)
  - kexec: simplify conditional (Pratyush Anand)
  - kexec: Fix make headers_check (Pratyush Anand)
  - arm64: guard asm/assembler.h against multiple inclusions (Pratyush Anand)
  - arm64: kvm: decode ESR_ELx.EC when reporting exceptions (Pratyush Anand)
  - arm64: kvm: remove ESR_EL2_* macros (Pratyush Anand)
  - arm64: remove ESR_EL1_* macros (Pratyush Anand)
  - arm64: kvm: move to ESR_ELx macros (Pratyush Anand)
  - arm64: decode ESR_ELx.EC when reporting exceptions (Pratyush Anand)
  - arm64: move to ESR_ELx macros (Pratyush Anand)
  - arm64: introduce common ESR_ELx_* definitions (Pratyush Anand)
  - arm64/efi: move virtmap init to early initcall (Pratyush Anand)
  - arm64: add better page protections to arm64 (Pratyush Anand)
  - arm64/efi: handle potential failure to remap memory map (Pratyush Anand)
  - arm64/efi: remove idmap manipulations from UEFI code (Pratyush Anand)
  - arm64/efi: remove free_boot_services() and friends (Pratyush Anand)
  - arm64/efi: move SetVirtualAddressMap() to UEFI stub (Pratyush Anand)
  - arm64/efi: set EFI_ALLOC_ALIGN to 64 KB (Pratyush Anand)
  - efi: efistub: allow allocation alignment larger than EFI_PAGE_SIZE (Pratyush Anand)
  - efi: split off remapping code from efi_config_init() (Pratyush Anand)
  - arm64/mm: add create_pgd_mapping() to create private page tables (Pratyush Anand)
  - arm64/mm: add explicit struct_mm argument to __create_mapping() (Pratyush Anand)


author: Mark Langsdorf <mlangsdo@redhat.com> [3.19.0-0.74.aa7a]
changelog:
  - config: increase CONFIG_CMA_SIZE_MBYTES from 16 to 64MB (Jon Masters) [1201885]
  - DO NOT UPSTREAM PCI: X-Gene1: Add ACPI MSI support (Jon Masters) [1201885]
  - PCI: X-Gene: Add the MAINTAINERS entry for APM X-Gene v1 PCIe MSI driver (Jon Masters) [1201885]
  - arm64: dts: Add the device tree entry for the APM X-Gene PCIe MSI node (Jon Masters) [1201885]
  - PCI: X-Gene: Add the APM X-Gene v1 PCIe MSI/MSIX termination driver (Jon Masters) [1201885]
  - documentation: dts: Add the device tree binding for APM X-Gene v1 PCIe MSI device tree node (Jon Masters) [1201885]
  - KVM: arm/arm64: check IRQ number on userland injection (Wei Huang) [1210813]
  - arm64: kexec: Fix relocate_new_kernel when CONFIG_DEBUG_RODATA is enabled (Pratyush Anand) [1215041]
  - arm64: kexec: Remove arm64_kexec_dtb_addr refrences (Pratyush Anand) [1215036]
  - : Disable CONFIG_DEBUG_RODATA for kdump to work (Pratyush Anand) [1215090]


author: Mark Langsdorf <mlangsdo@redhat.com> [3.19.0-0.75.aa7a]
changelog:
  - mlx4_en: Disbale GRO for incoming loopback/selftest packets (Yulong Pei) [1210603]
  - arm64: KVM: Add CPU hyp mode re-initialization to complement KVM CPU reset (Wei Huang) [1169828]


author: Mark Langsdorf <mlangsdo@redhat.com> [3.19.0-0.76.aa7a]
changelog:
  - CVE-2015-3636 ipv4: Missing sk_nulls_node_init() in ping_unhash(). (Yulong Pei) [1218112]
  - arm64: add missing PAGE_ALIGN() to __dma_free_*coherent() (Dean Nelson) [1211906]
  - DONOTUPSTREAM: arm64: smp_send_stop: increase CPU stop IPI timeout to 60 seconds (Jon Masters) [1218374]
  - mm: page_alloc: revert inadvertent !__GFP_FS retry behavior change (Don Dutile) [1206235]
  - arm64: move kdump memory init into arm64_memblock_init() (Mark Salter) [1219838]
  - arm64: support ACPI tables outside of kernel RAM (Mark Salter) [1219838]
  - arm64: respect mem= for EFI (Mark Salter) [1219838]
  - ACPI: update acpi_os_ioremap for arm64 (Mark Salter) [1219838]
  - Add CONFIG_KEXEC_AUTO_RESERVE into generic config (Pratyush Anand) [1216287]
  - crashkernel auto reservation code for ARM64 (Pratyush Anand) [1216287]
  - forward port crashkernel auto reservation code (Pratyush Anand) [1216287]


author: Mark Langsdorf <mlangsdo@redhat.com> [3.19.0-0.77.aa7a]
changelog:
  - xgene: msi: fix crash in dump-collection kernel (Mark Salter) [1220926]
  - crashkernel: Allocate 2G memory for auto reservation (Pratyush Anand)
  - [redhat] don't build kernel docs (Mark Langsdorf)


author: Mark Langsdorf <mlangsdo@redhat.com> [3.19.0-0.79.aa7a]
changelog:
  - [redhat] build mellanox mlx4 drivers into the kernel (Mark Langsdorf) [1220581]
  - ahci_xgene: set ATA_HORKAGE_NOLPM for all attached disks (Kyle McMartin) [1228573]


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-15.el7a]
changelog:
  - [kernel] sched/deadline: Use the revised wakeup rule for suspending constrained dl tasks (Xunlei Pang) [1471599]
  - [kernel] sched/deadline: Fix dl_bw comment (Xunlei Pang) [1471599]
  - [kernel] sched/deadline: Zero out positive runtime after throttling constrained tasks (Xunlei Pang) [1471599]
  - [virt] KVM: trigger uevents when creating or destroying a VM (BZ#1394223) (Paolo Bonzini) [1394223]
  - [redhat] config: x86_64/powerpc64le: enable DEVICE_PUBLIC & DEVICE_PUBLIC (Jerome Glisse) [1459704]
  - [mm] memcontrol: support MEMORY_DEVICE_PRIVATE and MEMORY_DEVICE_PUBLIC v3 (Jerome Glisse) [1459704]
  - [mm] memcontrol: allow to uncharge page without using page->lru field (Jerome Glisse) [1459704]
  - [mm] hmm: add new helper to hotplug CDM memory region v3 (Jerome Glisse) [1459704]
  - [mm] device-public-memory: device memory cache coherent with CPU v4 (Jerome Glisse) [1459704]
  - [mm] zone-device: rename DEVICE_PUBLIC to DEVICE_HOST (Jerome Glisse) [1459704]
  - [mm] hmm: fix handling of pmd inside HMM CPU page table snapshot helper (Jerome Glisse) [1459704]
  - [mm] hmm: update pegas HMM to lastest HMM v24 (Jerome Glisse) [1459704]
  - [powerpc] hugetlbfs: Export HPAGE_SHIFT (Jerome Glisse) [1459703]
  - [mm] huge_memory.c: deposit a pgtable for DAX PMD faults when required (Jerome Glisse) [1459703]
  - [mm] huge_memory.c: use zap_deposited_table() more (Jerome Glisse) [1459703]
  - [powerpc] mm: Enable ZONE_DEVICE on powerpc (Jerome Glisse) [1459703]
  - [mm] x86: Add ARCH_HAS_ZONE_DEVICE to Kconfig (Jerome Glisse) [1459703]
  - [powerpc] mm: Add devmap support for ppc64 (Jerome Glisse) [1459703]
  - [powerpc] vmemmap: Add altmap support (Jerome Glisse) [1459703]
  - [powerpc] vmemmap: Reshuffle vmemmap_free() (Jerome Glisse) [1459703]
  - [redhat] configs: Enable CONFIG_MPROFILE_KERNEL for powerpc64le related fixes (Jiri Olsa) [1368733]
  - [redhat] configs: Enable CONFIG_KPROBES_ON_FTRACE for powerpc64le (Jiri Olsa) [1368733]
  - [redhat] configs: Enable function tracer for powerpc64le (Jiri Olsa) [1368733]
  - [powerpc] ftrace: Move stack setup and teardown code into ftrace_graph_caller() (Jiri Olsa) [1368733]
  - [powerpc] kprobes: Remove duplicate saving of MSR (Jiri Olsa) [1368733]
  - [tools] perf powerpc: Choose local entry point with kretprobes (Jiri Olsa) [1368733]
  - [tools] perf kretprobes: Offset from reloc_sym if kernel supports it (Jiri Olsa) [1368733]
  - [tools] perf probe: Factor out the ftrace README scanning (Jiri Olsa) [1368733]
  - [tools] perf probe: Generalize probe event file open routine (Jiri Olsa) [1368733]
  - [powerpc] kprobes: Fix handling of instruction emulation on probe re-entry (Jiri Olsa) [1368733]
  - [tools] perf sdt: Add scanning of sdt probes arguments (Jiri Olsa) [1368733]
  - [powerpc] kprobes: Prefer ftrace when probing function entry (Jiri Olsa) [1368733]
  - [powerpc] Introduce a new helper to obtain function entry points (Jiri Olsa) [1368733]
  - [powerpc] kprobes: Add support for KPROBES_ON_FTRACE (Jiri Olsa) [1368733]
  - [powerpc] ftrace: Restore LR from pt_regs (Jiri Olsa) [1368733]
  - [powerpc] kprobes: Convert __kprobes to NOKPROBE_SYMBOL() (Jiri Olsa) [1368733]
  - [powerpc] kprobes: Emulate instructions on kprobe handler re-entry (Jiri Olsa) [1368733]
  - [powerpc] kprobes: Factor out code to emulate instruction into a helper (Jiri Olsa) [1368733]
  - [powerpc] kretprobes: Override default function entry offset (Jiri Olsa) [1368733]
  - [kernel] powerpc/kprobes: Fix handling of function offsets on ABIv2 (Jiri Olsa) [1368733]
  - [kernel] kprobes: Convert kprobe_lookup_name() to a function (Jiri Olsa) [1368733]
  - [kernel] kprobes: Skip preparing optprobe if the probe is ftrace-based (Jiri Olsa) [1368733]
  - [tools] perf sdt powerpc: Add argument support (Jiri Olsa) [1368733]
  - [tools] perf/sdt/x86: Move OP parser to tools/perf/arch/x86/ (Jiri Olsa) [1368733]
  - [tools] perf/sdt/x86: Add renaming logic for (missing) 8 bit registers (Jiri Olsa) [1368733]
  - [tools] perf sdt x86: Add renaming logic for rNN and other registers (Jiri Olsa) [1368733]
  - [tools] perf probe: Add sdt probes arguments into the uprobe cmd string (Jiri Olsa) [1368733]
  - [kernel] trace/kprobes: Fix check for kretprobe offset within function entry (Jiri Olsa) [1368733]
  - [kernel] trace/kprobes: Add back warning about offset in return probes (Jiri Olsa) [1368733]
  - [kernel] trace/kprobes: Allow return probes with offsets and absolute addresses (Jiri Olsa) [1368733]
  - [kernel] kretprobes: Ensure probe location is at function entry (Jiri Olsa) [1368733]


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-16.el7a]
changelog:
  - [net] netfilter: xt_socket: Fix broken IPv6 handling (Hangbin Liu) [1471001]
  - [scsi] csiostor: update module version (Sai Vemuri) [1458005]
  - [scsi] csiostor: add check for supported fw version (Sai Vemuri) [1458005]
  - [scsi] csiostor: Avoid content leaks and casts (Sai Vemuri) [1458005]
  - [scsi] csiostor: add support for Chelsio T6 adapters (Sai Vemuri) [1458005]
  - [scsi] csiostor: fix use after free in csio_hw_use_fwconfig() (Sai Vemuri) [1458005]
  - [scsi] csiostor: switch to pci_alloc_irq_vectors (Sai Vemuri) [1458005]
  - [net] netfilter: ipt_CLUSTERIP: do not hold dev (Xin Long) [1449013]
  - [tools] perf vendor events: Add POWER9 PVRs to mapfile (Jiri Olsa) [1416317]
  - [tools] perf vendor events: Add POWER9 PMU events (Jiri Olsa) [1416317]
  - [net] netfilter: xtables: fix build failure from COMPAT_XT_ALIGN outside CONFIG_COMPAT (Florian Westphal) [1470745]
  - [net] netfilter: xtables: zero padding in data_to_user (Florian Westphal) [1470745]
  - [block] Fix __blkdev_issue_zeroout loop (Ming Lei) [1470923]
  - [block] blk-mq-sched: fix performance regression of mq-deadline (Ming Lei) [1470923]
  - [block] provide bio_uninit() free freeing integrity/task associations (Ming Lei) [1470923]
  - [block] blk-mq: fix performance regression with shared tags (Ming Lei) [1470923]
  - [block] Fix a blk_exit_rl() regression (Ming Lei) [1470923]
  - [block] Avoid that blk_exit_rl() triggers a use-after-free (Ming Lei) [1470923]
  - [block] cfq-iosched: fix the delay of cfq_group's vdisktime under iops mode (Ming Lei) [1470923]
  - [block] blk-mq: Take tagset lock when updating hw queues (Ming Lei) [1470923]
  - [block] partitions/msdos: FreeBSD UFS2 file systems are not recognized (Ming Lei) [1470923]
  - [block] blk-mq: NVMe 512B/4K+T10 DIF/DIX format returns I/O error on dd with split op (Ming Lei) [1470923]
  - [block] mq: fix potential deadlock during cpu hotplug (Ming Lei) [1470923]
  - [block] mq: Cure cpu hotplug lock inversion (Ming Lei) [1470923]
  - [block] cfq: Disable writeback throttling by default (Ming Lei) [1470923]
  - [block] fix inheriting request priority from bio (Ming Lei) [1470923]
  - [block] blkcg: allocate struct blkcg_gq outside request queue spinlock (Ming Lei) [1470923]
  - [block] block new I/O just after queue is set as dying (Ming Lei) [1470923]
  - [block] rename blk_mq_freeze_queue_start() (Ming Lei) [1470923]
  - [block] add a read barrier in blk_queue_enter() (Ming Lei) [1470923]
  - [block] blk-mq: comment on races related with timeout handler (Ming Lei) [1470923]
  - [block] Fix oops scsi_disk_get() (Ming Lei) [1470923]
  - [lib] kobject: Export kobject_get_unless_zero() (Ming Lei) [1470923]


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-17.el7a]
changelog:
  - [char] ipmi:ssif: Add missing unlock in error branch (Tony Camuso) [1473422]
  - [char] ipmi: constify bmc_dev_attr_group and bmc_device_type (Tony Camuso) [1473422]
  - [char] ipmi:ssif: Check dev before setting drvdata (Tony Camuso) [1473422]
  - [char] ipmi: get rid of field-by-field __get_user() (Tony Camuso) [1473422]
  - [char] ipmi: get COMPAT_IPMICTL_RECEIVE_MSG in sync with the native one (Tony Camuso) [1473422]
  - [char] ipmi: Convert DMI handling over to a platform device (Tony Camuso) [1473422]
  - [char] ipmi: Create a platform device for a DMI-specified IPMI interface (Tony Camuso) [1473422]
  - [char] ipmi: use rcu lock around call to intf->handlers->sender() (Tony Camuso) [1473422]
  - [char] ipmi:ssif: Use i2c_adapter_id instead of adapter->nr (Tony Camuso) [1473422]
  - [char] ipmi: Use the proper default value for register size in ACPI (Tony Camuso) [1473422]
  - [char] ipmi_ssif: remove redundant null check on array client->adapter->name (Tony Camuso) [1473422]
  - [char] ipmi/watchdog: fix watchdog timeout set on reboot (Tony Camuso) [1473422]
  - [char] ipmi_ssif: unlock on allocation failure (Tony Camuso) [1473422]
  - [char] ipmi/watchdog: fix wdog hang on panic waiting for ipmi response (Tony Camuso) [1473422]
  - [char] Annotate hardware config module parameters in drivers/char/ipmi/ (Tony Camuso) [1473422]
  - [kernel] Annotate module params that specify hardware parameters (eg. ioport) (Tony Camuso) [1473422]
  - [char] ipmi: bt-bmc: Add ast2500 compatible string (Tony Camuso) [1473422]
  - [char] ipmi_ssif: use setup_timer (Tony Camuso) [1473422]
  - [char] ipmi: Fix kernel panic at ipmi_ssif_thread() (Tony Camuso) [1473422]
  - [powerpc] KVM: PPC: Book3S HV: Don't sleep if XIVE interrupt pending on POWER9 (Mauricio Oliveira) [1474963]
  - [powerpc] KVM: PPC: Book3S HV: Don't let VCPU sleep if it has a doorbell pending (Mauricio Oliveira) [1474963]
  - [mm] mmap: expand_downwards: don't require the gap if !vm_prev (Rafael Aquini) [1461915] {CVE-2017-1000364}
  - [mm] fix overflow check in expand_upwards() (Rafael Aquini) [1461915] {CVE-2017-1000364}
  - [mm] mmap: do not blow on PROT_NONE MAP_FIXED holes in the stack (Rafael Aquini) [1461915] {CVE-2017-1000364}
  - [mm] fs/proc/task_mmu.c: remove obsolete comment in show_map_vma() (Rafael Aquini) [1461915] {CVE-2017-1000364}
  - [mm] fix new crash in unmapped_area_topdown() (Rafael Aquini) [1461915] {CVE-2017-1000364}
  - [mm] Allow stack to grow up to address space limit (Rafael Aquini) [1461915] {CVE-2017-1000364}
  - [mm] larger stack guard gap, between vmas (Rafael Aquini) [1461915] {CVE-2017-1000364}
  - [net] netfilter: ipt_CLUSTERIP: fix use-after-free of proc entry (Stefano Brivio) [1472835]
  - [redhat] configs: enable CHECKPOINT_RESTORE on aarch64 (Adrian Reber) [1464595]
  - [net] ipv6: avoid unregistering inet6_dev for loopback (Hangbin Liu) [1470935]
  - [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Hangbin Liu) [1470935]
  - [net] ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf (Hangbin Liu) [1470935]
  - [net] ipv6: initialize route null entry in addrconf_init() (Hangbin Liu) [1470935]
  - [netdrv] net/mlx5e: Initialize CEE's getpermhwaddr address buffer to 0xff (Slava Shwartsman) [1472946]
  - [powerpc] powernv/npu-dma: Add explicit flush when sending an ATSD (Mauricio Oliveira) [1464978]
  - [powerpc] Only do ERAT invalidate on radix context switch on P9 DD1 (Mauricio Oliveira) [1471172]
  - [powerpc] Fix /proc/cpuinfo revision for POWER9 DD2 (Mauricio Oliveira) [1465951]
  - [powerpc] 64s: Invalidate ERAT on powersave wakeup for POWER9 (Mauricio Oliveira) [1465875]
  - [powerpc] 64s/idle: Branch to handler with virtual mode offset (Mauricio Oliveira) [1465875]
  - [powerpc] xive: Fix offset for store EOI MMIOs (Mauricio Oliveira) [1471163]
  - [fs] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1466806]


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-18.el7a]
changelog:
  - [powerpc] KVM: PPC: Book3S HV: Enable TM before accessing TM registers (David Gibson) [1456910]
  - [powerpc] KVM: PPC: Book3S HV: Save/restore host values of debug registers (David Gibson) [1456910]
  - [powerpc] KVM: PPC: Book3S HV: Preserve userspace HTM state properly (David Gibson) [1456910]
  - [powerpc] KVM: PPC: Book3S HV: Restore critical SPRs to host values on guest exit (David Gibson) [1456910]
  - [powerpc] KVM: PPC: Book3S HV: Context-switch EBB registers properly (David Gibson) [1456910]
  - [netdrv] virtio-net: fix module unloading (Andrew Jones) [1472694]
  - [net] xfrm6: Fix IPv6 payload_len in xfrm6_transport_finish (Hangbin Liu) [1474815]
  - [net] xfrm: NULL dereference on allocation failure (Hangbin Liu) [1474815]
  - [net] xfrm: Oops on error in pfkey_msg2xfrm_state() (Hangbin Liu) [1474815]
  - [net] xfrm: fix stack access out of bounds with CONFIG_XFRM_SUB_POLICY (Hangbin Liu) [1474815]
  - [net] tcp: reset sk_rx_dst in tcp_disconnect() (Florian Westphal) [1474881]
  - [net] tcp: fix wraparound issue in tcp_lp (Florian Westphal) [1474881]
  - [net] tcp: fix access to sk->sk_state in tcp_poll() (Florian Westphal) [1474881]
  - [net] tcp: avoid fragmenting peculiar skbs in SACK (Florian Westphal) [1474881]
  - [net] tcp: eliminate negative reordering in tcp_clean_rtx_queue (Florian Westphal) [1474881]
  - [net] tcp: avoid fastopen API to be used on AF_UNSPEC (Florian Westphal) [1474881]
  - [net] ipv4: add reference counting to metrics (Florian Westphal) [1474881]
  - [net] tcp: disallow cwnd undo when switching congestion control (Florian Westphal) [1474881]
  - [net] igmp: acquire pmc lock for ip_mc_clear_src() (Florian Westphal) [1474881]
  - [net] igmp: add a missing spin_lock_init() (Florian Westphal) [1474881]
  - [powerpc] hotplug-mem: Fix missing endian conversion of aa_index (Laurent Vivier) [1473203]
  - [netdrv] net/mlx5e: Fix TX carrier errors report in get stats ndo (Slava Shwartsman) [1473362]
  - [mmc] core: Use device_property_read instead of of_property_read (Slava Shwartsman) [1466917]
  - [mmc] dw_mmc: Use device_property_read instead of of_property_read (Slava Shwartsman) [1466917]
  - [base] device property: Make dev_fwnode() public (Slava Shwartsman) [1466917]


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-19.el7a]
changelog:
  - [powerpc] pseries: Fix of_node_put() underflow during reconfig remove (Laurent Vivier) [1471745]
  - [powerpc] mm: Fix pmd/pte_devmap() on non-leaf entries (David Gibson) [1475118]
  - [powerpc] powernv: Enable PCI peer-to-peer (Steve Best) [1437849]
  - [scsi] ses: do not add a device to an enclosure if enclosure_add_links() fails (Maurizio Lombardi) [1427426]
  - [net] bridge: mdb: fix leak on complete_info ptr on fail path (Stefano Brivio) [1475402]
  - [net] bridge: fix a null pointer dereference in br_afspec (Stefano Brivio) [1475402]
  - [net] bridge: netlink: check vlan_default_pvid range (Stefano Brivio) [1475402]
  - [redhat] spec: don't ship build-id links installed by vdso_install target ("Herton R. Krzesinski") [1464263]
  - [redhat] configs: disable CHACHA20POLY1305 on ppc64le and SHA3 on ppc64le/arm64 ("Herton R. Krzesinski") [1475646]
  - [net] sctp: fix an array overflow when all ext chunks are set (Xin Long) [1474759]
  - [net] sctp: ensure ep is not destroyed before doing the dump (Xin Long) [1474759]
  - [net] sctp: return next obj by passing pos + 1 into sctp_transport_get_idx (Xin Long) [1474759]
  - [net] sctp: disable BH in sctp_for_each_endpoint (Xin Long) [1474759]
  - [net] sctp: set new_asoc temp when processing dupcookie (Xin Long) [1474759]
  - [net] sctp: fix stream update when processing dupcookie (Xin Long) [1474759]
  - [net] sctp: fix ICMP processing if skb is non-linear (Xin Long) [1474759]
  - [net] sctp: fix src address selection if using secondary addresses for ipv6 (Xin Long) [1474759]
  - [net] ipvs: explicitly forbid ipv6 service/dest creation if ipv6 mod is disabled (Matteo Croce) [1470957]


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-20.el7a]
changelog:
  - [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1472535]
  - [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1472535]
  - [net] ipv4: fib: Fix NULL pointer deref during fib_sync_down_dev() (Stefano Brivio) [1476681]
  - [redhat] configs: Disable CONFIG_IP_DCCP (Stefano Brivio) [1432597]
  - [redhat] configs: enable CONFIG_NET_ACT_TUNNEL_KEY (Davide Caratti) [1470564]
  - [net] account for current skb length when deciding about UFO (Sabrina Dubroca) [1476185]
  - [net] ping: do not abuse udp_poll() (Sabrina Dubroca) [1476185]
  - [net] sched: Fix one possible panic when no destroy callback (Stefano Brivio) [1475862]
  - [net] fix compile error in skb_orphan_partial() (Stefano Brivio) [1475856]
  - [net] netem: fix skb_orphan_partial() (Stefano Brivio) [1475856]
  - [net] netfilter: nft_set_rbtree: handle element re-addition after deletion (Stefano Brivio) [1475849]
  - [net] netfilter: synproxy: fix conntrackd interaction (Stefano Brivio) [1475849]
  - [wireless] mac80211: don't send SMPS action frame in AP mode when not needed (Stefano Brivio) [1475840]
  - [wireless] mac80211: don't look at the PM bit of BAR frames (Stefano Brivio) [1475840]
  - [wireless] mac80211: free netdev on dev_alloc_name() error (Stefano Brivio) [1475840]
  - [wireless] mac80211: fix dropped counter in multiqueue RX (Stefano Brivio) [1475840]
  - [wireless] mac80211: strictly check mesh address extension mode (Stefano Brivio) [1475840]
  - [wireless] mac80211: fix IBSS presp allocation size (Stefano Brivio) [1475840]
  - [netdrv] brcmfmac: fix double free upon register_netdevice() failure (Stefano Brivio) [1475527]
  - [net] 8021q: Fix one possible panic caused by BUG_ON in free_netdev (Stefano Brivio) [1475527]
  - [s390] net: s390: fix up for "Fix inconsistent teardown and release of private netdev state" (Stefano Brivio) [1475527]
  - [net] Fix inconsistent teardown and release of private netdev state (Stefano Brivio) [1475527]
  - [net] Fix an intermittent pr_emerg warning about lo becoming free (Stefano Brivio) [1475414]
  - [net] net/packet: fix missing net_device reference release (Stefano Brivio) [1475414]
  - [net] bpf: add bpf_clone_redirect to bpf_helper_changes_pkt_data (Stefano Brivio) [1475385]
  - [net] Bluetooth: Fix user channel for 32bit userspace on 64bit kernel (Stefano Brivio) [1475376]
  - [net] af_unix: Add sockaddr length checks before accessing sa_family in bind and connect handlers (Stefano Brivio) [1475324]
  - [net] sock: reset sk_err when the error queue is empty (Sabrina Dubroca) [1475709]
  - [net] rtnetlink: NUL-terminate IFLA_PHYS_PORT_NAME string (Sabrina Dubroca) [1475709]
  - [net] rtnetlink: add IFLA_GROUP to ifla_policy (Sabrina Dubroca) [1475709]
  - [net] Zero ifla_vf_info in rtnl_fill_vfinfo() (Sabrina Dubroca) [1475709]
  - [net] Improve handling of failures on link and route dumps (Sabrina Dubroca) [1475709]
  - [net] handle NAPI_GRO_FREE_STOLEN_HEAD case also in napi_frags_finish() (Sabrina Dubroca) [1475709]
  - [net] don't call strlen on non-terminated string in dev_set_alias() (Sabrina Dubroca) [1475709]
  - [net] core: Fix slab-out-of-bounds in netdev_stats_to_stats64 (Sabrina Dubroca) [1475709]
  - [net] iov_iter: don't revert iov buffer if csum error (Sabrina Dubroca) [1475709]
  - [net] ppp: Fix false xmit recursion detect with two ppp devices (Matteo Croce) [1473902]
  - [net] ip6_tunnel: Correct tos value in collect_md mode (Hangbin Liu) [1474767]
  - [net] ipv6: fix calling in6_ifa_hold incorrectly for dad work (Hangbin Liu) [1474767]
  - [net] ipv6: Compare lwstate in detecting duplicate nexthops (Hangbin Liu) [1474767]
  - [net] ipv6: Do not leak throw route references (Hangbin Liu) [1474767]
  - [net] ipv6: Release route when device is unregistering (Hangbin Liu) [1474767]
  - [net] ipv6: Fix CALIPSO causing GPF with datagram support (Hangbin Liu) [1474767]
  - [net] ip6_tunnel: fix traffic class routing for tunnels (Hangbin Liu) [1474767]
  - [net] ip6_tunnel, ip6_gre: fix setting of DSCP on encapsulated packets (Hangbin Liu) [1474767]
  - [net] ipv4, ipv6: ensure raw socket message is big enough to hold an IP header (Hangbin Liu) [1474767]
  - [net] ipv6: Do not duplicate DAD on link up (Hangbin Liu) [1474767]
  - [scsi] hisi_sas: optimise DMA slot memory (Jun Ma) [1474164]
  - [scsi] hisi_sas: create hisi_sas_get_fw_info() (Jun Ma) [1474164]
  - [scsi] hisi_sas: add pci_dev in hisi_hba struct (Jun Ma) [1474164]
  - [scsi] hisi_sas: relocate get_ncq_tag_v2_hw() (Jun Ma) [1474164]
  - [scsi] hisi_sas: relocate sata_done_v2_hw() (Jun Ma) [1474164]
  - [scsi] hisi_sas: relocate get_ata_protocol() (Jun Ma) [1474164]
  - [scsi] hisi_sas: optimise the usage of hisi_hba.lock (Jun Ma) [1474164]
  - [scsi] hisi_sas: define hisi_sas_device.device_id as int (Jun Ma) [1474164]
  - [scsi] hisi_sas: fix timeout check in hisi_sas_internal_task_abort() (Jun Ma) [1474164]


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-21.el7a]
changelog:
  - [netdrv] tap: convert a mutex to a spinlock (Steve Best) [1477345]
  - [net] rtnetlink: allocate more memory for dev_set_mac_address() (Stefano Brivio) [1477127]
  - [irqchip] gic-v3: Fix out-of-bound access in gic_set_affinity (Auger Eric) [1477112]
  - [irqchip] gic-v3-its: Don't assume GICv3 hardware supports 16bit INTID (Auger Eric) [1477112]
  - [irqchip] gic-v3-its: Fix MSI alias accounting (Auger Eric) [1477112]
  - [block] disable runtime-pm for blk-mq (Ming Lei) [1476998]
  - [tools] power turbostat: decode MSR_IA32_MISC_ENABLE only on Intel (Jiri Olsa) [1456386]
  - [mm] hmm: various fixes for powerpc and HMM (Jerome Glisse) [1459703]
  - [powerpc] mm: Wire up hpte_removebolted for powernv (Jerome Glisse) [1459703]
  - [scsi] qla2xxx: Deprecate unsupported ISP (Himanshu Madhani) [1452822]


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-22.el7a]
changelog:
  - [fs] xfs: drop iolock from reclaim context to appease lockdep (Brian Foster) [1450297]
  - [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Eric Sandeen) [1475852]
  - [net] netfilter: nf_ct_helper: permit cthelpers with different names via nfnetlink (Matteo Croce) [1472057]
  - [net] sit: use __GFP_NOWARN for user controlled allocation (Matteo Croce) [1472614]
  - [crypto] authencesn: Fix digest_null crash (Herbert Xu) [1425049]
  - [powerpc] perf: Add thread IMC PMU support (Jiri Olsa) [1379294]
  - [powerpc] perf: Add core IMC PMU support (Jiri Olsa) [1379294]
  - [powerpc] perf: Add nest IMC PMU support (Jiri Olsa) [1379294]
  - [powerpc] powernv: Detect and create IMC device (Jiri Olsa) [1379294]
  - [powerpc] powernv: Add IMC OPAL APIs (Jiri Olsa) [1379294]
  - [iommu] arm-smmu, ACPI: Enable Cavium SMMU-v3 (Robert Richter) [1431610]
  - [iommu] arm-smmu-v3: Add workaround for Cavium ThunderX2 erratum #126 (Robert Richter) [1431610]
  - [iommu] arm-smmu-v3: Add workaround for Cavium ThunderX2 erratum #74 (Robert Richter) [1431610]
  - [acpi] ACPI/IORT: Fixup SMMUv3 resource size for Cavium ThunderX2 SMMUv3 model (Robert Richter) [1431610]
  - [acpi] iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT model number definitions (Robert Richter) [1431610]
  - [iommu] arm-smmu: Plumb in new ACPI identifiers (Robert Richter) [1431610]
  - [i2c] xgene-slimpro: Add ACPI support by using PCC mailbox (Iyappan Subramanian) [1437693]
  - [i2c] xgene-slimpro: Use a single function to send command message (Iyappan Subramanian) [1437693]
  - [i2c] xgene: Set ACPI_COMPANION_I2C (Iyappan Subramanian) [1437693]
  - [i2c] mailbox: pcc: Fix crash when request PCC channel 0 (Iyappan Subramanian) [1474962]


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-14.el7a]
changelog:
  - [netdrv] cxgb4: Update register ranges of T4/T5/T6 adapters (Arjun Vynipadath) [1473388]
  - [redhat] aarch64: configs: Enable X-Gene PMU (Iyappan Subramanian) [1469302]
  - [perf] xgene: Add support for SoC PMU version 3 (Iyappan Subramanian) [1469302]
  - [perf] xgene: Move PMU leaf functions into function pointer structure (Iyappan Subramanian) [1469302]
  - [perf] xgene: Parse PMU subnode from the match table (Iyappan Subramanian) [1469302]
  - [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1472412]
  - [kernel] sched/fair: Spare idle load balancing on nohz_full CPUs (Lauro Ramos Venancio) [1470850]
  - [kernel] nohz: Move idle balancer registration to the idle path (Lauro Ramos Venancio) [1470850]
  - [kernel] sched/loadavg: Generalize "_idle" naming to "_nohz" (Lauro Ramos Venancio) [1470850]
  - [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Lauro Ramos Venancio) [1470850]
  - [kernel] nohz: Fix buggy tick delay on IRQ storms (Lauro Ramos Venancio) [1470850]
  - [kernel] nohz: Reset next_tick cache even when the timer has no regs (Lauro Ramos Venancio) [1470850]
  - [kernel] nohz: Fix collision between tick and other hrtimers, again (Lauro Ramos Venancio) [1470850]
  - [kernel] nohz: Add hrtimer sanity check (Lauro Ramos Venancio) [1470850]


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-42.el7a]
changelog:
  - [kernel] sched,wake: simplify wake_affine (Rik van Riel) [1388460]
  - [kernel] sched, numa: scale scan period with tasks in group and shared/private (Rik van Riel) [1388460]
  - [kernel] numa, sched: slow down scan rate if shared faults dominate (Rik van Riel) [1388460]
  - [kernel] sched/fair: Fix wake_affine_llc() balancing rules (Rik van Riel) [1388460]
  - [kernel] sched/fair: Fix wake_affine() for !NUMA_BALANCING (Rik van Riel) [1388460]
  - [kernel] sched/numa: Hide numa_wake_affine() from UP build (Rik van Riel) [1388460]
  - [kernel] sched,fair: remove effective_load (Rik van Riel) [1388460]
  - [kernel] sched, numa: implement numa node level wake_affine (Rik van Riel) [1388460]
  - [kernel] sched: simplify wake_affine for single socket case (Rik van Riel) [1388460]
  - [kernel] sched/numa: Override part of migrate_degrades_locality() when idle balancing (Rik van Riel) [1388460]


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-43.el7a]
changelog:
  - [kernel] cgroup: Reinit cgroup_taskset structure before cgroup_migrate_execute() returns (Waiman Long) [1496999]
  - [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1500586]
  - [fs] fs/locks: Remove fl_nspid and use fs-specific l_pid for remote locks (Benjamin Coddington) [1493427]
  - [powerpc] KVM: PPC: Book3S HV: Don't access XIVE PIPR register using byte accesses (Suraj Jitindar Singh) [1496875]
  - [powerpc] KVM: PPC: Book3S HV: Workaround POWER9 DD1.0 bug causing IPB bit loss (Suraj Jitindar Singh) [1496875]
  - [arm64] mm: Use READ_ONCE when dereferencing pointer to pte table (Mark Langsdorf) [1475855]


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.11.0-44.1.1.el7a]
changelog:
  - [netdrv] ib/mlx5: set UMR wqe fence according to HCA cap (Honggang Li) [1508606 1494261]
  - [netdrv] ib/mlx5: Define interface bits for fencing UMR wqe (Honggang Li) [1508606 1494261]
  - [scsi] aacraid: Fix controller initialization failure (Mauricio Oliveira) [1508580 1502892]
  - [powerpc] KVM: PPC: Book3S HV: Add more barriers in XIVE load/unload code (Suraj Jitindar Singh) [1508526 1497013]
  - [powerpc] xive: Fix the size of the cpumask used in xive_find_target_in_mask() (Steve Best) [1507413 1501747]
  - [redhat] hardcode .el7a dist tag (Frantisek Hrbata)


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.11.0-44.2.1.el7a]
changelog:
  - [powerpc] perf: Fix core-imc hotplug callback failure during imc initialization (Jiri Olsa) [1510165 1507609]
  - [misc] cxl: Set the valid bit in PE for dedicated mode (Waiman Long) [1510152 1498927]
  - [misc] cxl: Enable global TLBIs for cxl contexts (Waiman Long) [1510152 1498927]
  - [powerpc] powerpc/mm: Export flush_all_mm() (Waiman Long) [1510152 1498927]
  - [misc] cxl: Fix memory page not handled (Waiman Long) [1510152 1498927]
  - [misc] cxl: Fix driver use count (Waiman Long) [1510152 1498927]
  - [powerpc] powerpc/mm: Optimize detection of thread local mm's (Waiman Long) [1510152 1498927]
  - [powerpc] powerpc/mm: Ensure cpumask update is ordered (Waiman Long) [1510152 1498927]
  - [powerpc] perf: Fix for core/nest imc call trace on cpuhotplug (Jiri Olsa) [1508905 1493444]
  - [powerpc] perf: Fix IMC initialization crash (Jiri Olsa) [1508527 1500707]
  - [sched] core: Address more wake_affine() regressions (Lauro Ramos Venancio) [1508368 1465041]
  - [sched] core: Fix wake_affine() performance regression (Lauro Ramos Venancio) [1508368 1465041]
  - [kernel] revert "sched,wake: simplify wake_affine" (Lauro Ramos Venancio) [1508368 1465041]


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.11.0-44.3.1.el7a]
changelog:
  - [block] blk-mq-tag: check for NULL rq when iterating tags (Ming Lei) [1518433 1498563]
  - [scsi] sd: Do not override max_sectors_kb sysfs setting (Steve Best) [1518432 1514951]
  - [net] i40e: Use smp_rmb rather than read_barrier_depends (Mauricio Oliveira) [1518412 1513182]
  - [net] ixgbe: Fix skb list corruption on Power systems (Mauricio Oliveira) [1518412 1513182]


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.11.0-44.4.1.el7a]
changelog:
  - [mm] kernel: pmd can become dirty without going through a COW cycle (Chris von Recklinghausen) [1518611 1518612] {CVE-2017-1000405}
  - [powerpc] powernv: Fix missing attr initialisation in (Frantisek Hrbata) [1522845 1513834]
  - [powerpc] powernv: Add OPAL exports attributes to sysfs (Frantisek Hrbata) [1522845 1513834]
  - [cpufreq] stats: Handle the case when trans_table goes beyond PAGE_SIZE (Desnes Augusto Nunes do Rosario) [1522844 1499411]
  - [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Frantisek Hrbata) [1522843 1511691]
  - [netdrv] i40e: point wb_desc at the nvm_wb_desc during (Frantisek Hrbata) [1522843 1511691]
  - [block] drain queue before waiting for q_usage_counter becoming zero (Ming Lei) [1522645 1513036]
  - [block] wake up all tasks blocked in get_request() (Ming Lei) [1522645 1513036]
  - [block] Make q_usage_counter also track legacy requests (Ming Lei) [1522645 1513036]
  - [powerpc] kvm: Tie KVM_CAP_PPC_HTM to the user-visible TM feature (Waiman Long) [1509974 1498555]
  - [powerpc] tm: P9 disable transactionally suspended sigcontexts (Waiman Long) [1509974 1498555]
  - [powerpc] powernv: Enable TM without suspend if possible (Waiman Long) [1509974 1498555]
  - [powerpc] Add PPC_FEATURE2_HTM_NO_SUSPEND (Waiman Long) [1509974 1498555]
  - [powerpc] tm: Add commandline option to disable hardware transactional memory (Waiman Long) [1509974 1498555]


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.11.0-44.5.1.el7a]
changelog:
  - [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1527484 1527483] {CVE-2017-5754}
  - [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1527484 1527483] {CVE-2017-5754}


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.11.0-44.6.1.el7a]
changelog:
  - [powerpc] perf: Dereference BHRB entries safely (Gustavo Duarte) [1538031 1525101]
  - [fs] debugfs: fix debugfs_real_fops() build error (Gustavo Duarte) [1538030 1533827]
  - [fs] debugfs: defer debugfs_fsdata allocation to first usage (Gustavo Duarte) [1538030 1533827]
  - [fs] debugfs: call debugfs_real_fops() only after debugfs_file_get() (Gustavo Duarte) [1538030 1533827]
  - [fs] debugfs: purge obsolete SRCU based removal protection (Gustavo Duarte) [1538030 1533827]
  - [infiniband] ib/hfi1: convert to debugfs_file_get() and -put() (Gustavo Duarte) [1538030 1533827]
  - [fs] debugfs: convert to debugfs_file_get() and -put() (Gustavo Duarte) [1538030 1533827]
  - [fs] debugfs: debugfs_real_fops(): drop __must_hold sparse annotation (Gustavo Duarte) [1538030 1533827]
  - [fs] debugfs: implement per-file removal protection (Gustavo Duarte) [1538030 1533827]
  - [fs] debugfs: add support for more elaborate ->d_fsdata (Gustavo Duarte) [1538030 1533827]
  - [tools] perf vendor events: Use more flexible pattern matching for CPU identification for mapfile.csv (Jiri Olsa) [1536567 1513805]
  - [tools] perf pmu: Extract function to get JSON alias map (Jiri Olsa) [1536567 1513805]
  - [tools] perf pmu: Add helper function is_pmu_core to detect PMU CORE devices (Jiri Olsa) [1536567 1513805]
  - [netdrv] tg3: Fix rx hang on MTU change with 5717/5719 (Mauricio Oliveira) [1533478 1526319]
  - [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1546950 1539109]
  - [powerpc] powerpc/64s: Initialize ISAv3 MMU registers before setting partition table (Steve Best) [1533476 1523226]
  - [net] ipv4: fix for a race condition in raw_sendmsg (Stefano Brivio) [1527028 1527027] {CVE-2017-17712}
  - [mm] pagewalk.c:walk_hugetlb_range function mishandles holes in hugetlb ranges causing information leak [rhel-alt-7.4.z] (Chris von Recklinghausen) [1520394 1520395] {CVE-2017-16994}


author: Johnny Hughes <johnny@centos.org> [4.11.0-45.6.1.el7a]
changelog:
  - Rolled in CentOS certificates and signed modules with a CentOS certificates.
  - add backported patches from APM, 8001, and 8002
  - updated with patch from QCOM for network functionality


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-36.el7a]
changelog:
  - [base] driver core: platform: fix race condition with driver_override (Mark Salter) [1494199] {CVE-2017-12146}
  - [powerpc] KVM: PPC: Book3S HV: Check for updated HDSISR on P9 HDSI exception (Mauricio Oliveira) [1489479]
  - [vfio] Stall vfio_del_group_dev() for container group detach (David Gibson) [1493216]
  - [vfio] vfio/pci: Virtualize Maximum Payload Size (Auger Eric) [1483768]
  - [powerpc] powerpc/sstep: mullw should calculate a 64 bit signed result (Steve Best) [1493926]
  - [powerpc] powerpc/sstep: Fix issues with mcrf (Steve Best) [1493926]
  - [powerpc] powerpc/sstep: Fix issues with set_cr0() (Steve Best) [1493926]
  - [net] xfrm: policy: check policy direction value (Herbert Xu) [1479418] {CVE-2017-11600}
  - [net] packet: Don't write vnet header beyond end of buffer (Stefano Brivio) [1492602] {CVE-2017-14497}
  - [net] Bluetooth: Properly check L2CAP config option output buffer length (Neil Horman) [1489794] {CVE-2017-1000251}
  - [powerpc] powerpc/tm: Flush TM only if CPU has TM feature (Steve Best) [1490282]
  - [net] packet: hold bind lock when rebinding to fanout hook (Xin Long) [1490772]
  - [netdrv] vxlan: do not output confusing error message (Sabrina Dubroca) [1490811]
  - [netdrv] vxlan: correctly handle ipv6.disable module parameter (Sabrina Dubroca) [1490811]
  - [arm64] aarch64: topology: Fix CPU topology description on multi-socket platforms (Al Stone) [1461591]
  - [kernel] sched/topology: Fix memory leak in __sdt_alloc() (Lauro Ramos Venancio) [1481077]
  - [vhost] vhost_net: disable zerocopy by default (Jason Wang) [1395105]
  - [acpi] ACPICA: Dispatcher: Remove unnecessary call to debugger (Al Stone) [1488850]
  - [block] bsg-lib: fix kernel panic resulting from missing allocation of reply-buffer (Ming Lei) [1485447]
  - [block] Change argument type of scsi_req_init() (Ming Lei) [1485447]
  - [block] Make most scsi_req_init() calls implicit (Ming Lei) [1485447]
  - [block] Introduce request_queue.initialize_rq_fn() (Ming Lei) [1485447]
  - [powerpc] kernel: Initialize load_tm on task creation (Gustavo Duarte) [1481880]
  - [powerpc] kernel: Fix FP and vector register restoration (Gustavo Duarte) [1481880]
  - [netdrv] mlx4_core: Enable 4K UAR if SRIOV module parameter is not enabled (Kamal Heib) [1459983]
  - [block] blk-mq: map queues to all present CPUs (Scott Wood) [1466046]
  - [block] blk-mq: Include all present CPUs in the default queue mapping (Scott Wood) [1466046]
  - [nvme] Allocate queues for all possible CPUs (Scott Wood) [1466046]
  - [block] blk-mq: Create hctx for each present CPU (Scott Wood) [1466046]
  - [block] blk-mq: Register <dev>/queue/mq after having registered <dev>/queue (Scott Wood) [1466046]


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-37.el7a]
changelog:
  - [mm] ratelimit PFNs busy info message (Jonathan Toppins) [1496525]
  - [powerpc] powerpc/eeh: Create PHB PEs after EEH is initialized (Steve Best) [1493012]
  - [powerpc] Handle MCE on POWER9 with only DSISR bit 30 set (Steve Best) [1489480]
  - [powerpc] powerpc/powernv: Clear LPCR(PECE1) via stop-api only for deep state offline (Mauricio Oliveira) [1488412]
  - [sound] ALSA: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1466001] {CVE-2017-1000380}
  - [sound] ALSA: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1466001] {CVE-2017-1000380}
  - [sound] ALSA: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1466001] {CVE-2017-1000380}
  - [sound] ALSA: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1466001] {CVE-2017-1000380}
  - [sound] ALSA: timer: Improve user queue reallocation (Jaroslav Kysela) [1466001] {CVE-2017-1000380}
  - [sound] ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1466001] {CVE-2017-1000380}
  - [sound] ALSA: timer: Fix race between read and ioctl (Jaroslav Kysela) [1466001] {CVE-2017-1000380}
  - [sound] ALSA: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1466001] {CVE-2017-1000380}
  - [sound] ALSA: timer: remove some dead code (Jaroslav Kysela) [1466001] {CVE-2017-1000380}
  - [crypto] scompress: defer allocation of scratch buffer to first use (Herbert Xu) [1487149]


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-38.el7a]
changelog:
  - [powerpc] powerpc/powernv: Rework EEH initialization on powernv (Steve Best) [1496734]
  - [powerpc] powerpc/eeh: Remove unnecessary config_addr from eeh_dev (Steve Best) [1496734]
  - [powerpc] powerpc/eeh: Remove unnecessary pointer to phb from eeh_dev (Steve Best) [1496734]
  - [powerpc] powerpc/eeh: Reduce to one the number of places where edev is allocated (Steve Best) [1496734]
  - [scsi] aacraid: Fix 2T+ drives on SmartIOC-2000 (Raghava Aditya Renukunta) [1496666]
  - [scsi] aacraid: Add a small delay after IOP reset (Mauricio Oliveira) [1494623]
  - [scsi] scsi_transport_iscsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly (Chris Leech) [1481997] {CVE-2017-14489}
  - [powerpc] Fix VSX enabling/flushing to also test MSR_FP and MSR_VEC (Steve Best) [1489477]
  - [powerpc] powerpc/64s: Add workaround for P9 vector CI load issue (Steve Best) [1489477]
  - [powerpc] powerpc/mce: Move 64-bit machine check code into mce.c (Steve Best) [1489477]
  - [powerpc] powerpc/book3s/mce: Move add_taint() later in virtual mode (Steve Best) [1489477]
  - [powerpc] powerpc/64s: Fix system reset vs general interrupt reentrancy (Steve Best) [1489477]
  - [scsi] scsi_transport_fc: fix NULL pointer dereference in fc_bsg_job_timeout (Ming Lei) [1495488]
  - [block] bsg-lib: don't free job in bsg_prepare_job (Ming Lei) [1495488]
  - [powerpc] powerpc/mm: Don't send IPI to all cpus on THP updates (David Gibson) [1493966]
  - [scsi] qla2xxx: Update driver version to 10.00.00.07.4a-k (Himanshu Madhani) [1490638]
  - [scsi] qla2xxx: Fix system crash while triggering FW dump (Himanshu Madhani) [1490638]
  - [scsi] Avoid that scsi_exit_rq() triggers a use-after-free (Ewan Milne) [1479753]
  - [scsi] qla2xxx: Fix an integer overflow in sysfs code ("Ewan D. Milne") [1487660] {CVE-2017-14051}


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-39.el7a]
changelog:
  - [powerpc] Fix workaround for spurious MCE on POWER9 (Steve Best) [1496591]
  - [net] netfilter: ipset: pernet ops must be unregistered last (Florian Westphal) [1495042]
  - [infiniband] IB/mlx5: Write combine mapping workaround for ThunderX2 (Vadim Lomovtsev) [1496554]
  - [pci] PCI: Avoid slot reset if bus reset is not possible (Robert Richter) [1439575]
  - [pci] PCI: Avoid bus reset for Cavium cn8xxx root ports (Robert Richter) [1439575]
  - [pci] PCI: Allow PCI_DEV_FLAGS_NO_BUS_RESET to be used on bus device (Robert Richter) [1439575]
  - [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1487528]
  - [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1487528]
  - [fs] Reorder inode_owner_or_capable() to avoid needless (Bill O'Donnell) [1458832]
  - [netdrv] netdrivers: mark drivers unsupported (Jonathan Toppins) [1486939]
  - [redhat] config: re-enable bnx2 driver and mark unsupported (Jonathan Toppins) [1481788]
  - [kernel] rh_taint: add support for marking driver as unsupported (Jonathan Toppins) [1486929]


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-40.el7a]
changelog:
  - [of] drivers: of: increase MAX_RESERVED_REGIONS to 32 (Steve Best) [1494626]
  - [kernel] audit: fix memleak in auditd_send_unicast_skb (Jerome Marchand) [1479708]
  - [powerpc] KVM: PPC: Book3S: Fix server always zero from kvmppc_xive_get_xive() (Sam Bobroff) [1477391]
  - [vfio] vfio/spapr: Add cond_resched() for huge updates (Sam Bobroff) [1494122]
  - [drm] drm/vmwgfx: Make sure backup_handle is always valid (Rob Clark) [1462817] {CVE-2017-9605}
  - [drm] drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl() (Rob Clark) [1437863] {CVE-2017-7346}
  - [net] l2tp: fix race condition in l2tp_tunnel_delete (Sabrina Dubroca) [1485209]
  - [net] l2tp: prevent creation of sessions on terminated tunnels (Sabrina Dubroca) [1485209]
  - [net] l2tp: hold tunnel used while creating sessions with netlink (Sabrina Dubroca) [1485209]
  - [net] l2tp: hold tunnel while handling genl TUNNEL_GET commands (Sabrina Dubroca) [1485209]
  - [net] l2tp: hold tunnel while handling genl tunnel updates (Sabrina Dubroca) [1485209]
  - [net] l2tp: hold tunnel while processing genl delete command (Sabrina Dubroca) [1485209]
  - [net] l2tp: hold tunnel while looking up sessions in l2tp_netlink (Sabrina Dubroca) [1485209]
  - [net] l2tp: initialise session's refcount before making it reachable (Sabrina Dubroca) [1485209]
  - [net] netfilter: ebtables: fix race condition in frame_filter_net_init() (Artem Savkov) [1497221]
  - [pci] quirks: update Cavium ThunderX ACS quirk implementation (Vadim Lomovtsev) [1479894]
  - [net] netfilter: xtables: add scheduling opportunity in get_counters (Florian Westphal) [1496169]
  - [redhat] configs: Disable buggy vmx driver on ppc (Herbert Xu) [1490972]
  - [net] ip6_tunnel: do not allow loading ip6_tunnel if ipv6 is disabled in cmdline (Xin Long) [1490799]
  - [scsi] scsi_transport_sas: select BLK_DEV_BSGLIB (Gustavo Duarte) [1488371]
  - [scsi] scsi_transport_sas: switch to bsg-lib for SMP passthrough (Gustavo Duarte) [1488371]
  - [scsi] smartpqi: remove the smp_handler stub (Gustavo Duarte) [1488371]
  - [scsi] hpsa: remove the smp_handler stub (Gustavo Duarte) [1488371]
  - [scsi] bsg-lib: pass the release callback through bsg_setup_queue (Gustavo Duarte) [1488371]
  - [net] netfilter: ipvs: do not create conn for ABORT packet in sctp_conn_schedule (Xin Long) [1479257]
  - [net] netfilter: ipvs: fix the issue that sctp_conn_schedule drops non-INIT packet (Xin Long) [1479257]
  - [net] netlink: fix an use-after-free issue for nlk groups (Xin Long) [1482463]
  - [net] ipv6: do not set sk_destruct in IPV6_ADDRFORM sockopt (Xin Long) [1483284]
  - [netdrv] i40e: use cpumask_copy instead of direct assignment (Stefano Brivio) [1483725]


author: Herton R. Krzesinski <herton@redhat.com> [4.11.0-41.el7a]
changelog:
  - [tty] amba-pl011: Fix spurious TX interrupts (Iyappan Subramanian) [1498582]
  - [mm] cma: Limit cma reserve support only to systems with >=2G RAM (Bhupesh Sharma) [1492799]
  - [arm64] kexec: Limit crash dump support only to systems with >=2G RAM (Bhupesh Sharma) [1492799]
  - [net] netfilter: nat: avoid use of nf_conn_nat extension (Florian Westphal) [1471714]
  - [net] netfilter: nat: Do not use ARRAY_SIZE() on spinlocks to fix zero div (Florian Westphal) [1471714]
  - [net] netfilter: nat: use keyed locks (Florian Westphal) [1471714]
  - [net] netfilter: nat: Revert netfilter: nat: convert nat bysrc hash to rhashtable (Florian Westphal) [1471714]
  - [net] netfilter: nat: use atomic bit op to clear the _SRC_NAT_DONE_BIT (Florian Westphal) [1471714]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.1.1.el7a]
changelog:
  - [s390] kvm: fix deadlock when killed by oom (Hendrik Brueckner) [1638042]
  - [redhat] Update Scripts/Makefile for 7.6.z kernels (Augusto Caringi)


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.2.1.el7a]
changelog:
  - [mm] vmstat.c: fix outdated vmstat_text (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
  - [mm] get rid of vmacache_flush_all() entirely (Chris von Recklinghausen) [1631295] {CVE-2018-17182}
  - [arm64] Sanitize PSTATE.M when being set from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
  - [arm64] kvm: Tighten guest core register access from userspace (Chris von Recklinghausen) [1637828] {CVE-2018-18021}
  - [s390] qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1629867]
  - [s390] crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633352]
  - [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633344]
  - [s390] qdio: reset old sbal_state flags (Hendrik Brueckner) [1629865]
  - [powerpc] numa: Skip onlining a offline node in kdump path (Steve Best) [1640499]
  - [char] ipmi:ssif: Add support for multi-part transmit messages > 2 parts (Tony Camuso) [1639298]
  - [powerpc] numa: Use associativity if VPHN hcall is successful (Steve Best) [1633189]
  - [kvm] arm64: Move timer/vgic flush/sync under disabled irq (Auger Eric) [1637293]
  - [scsi] ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633215]
  - [crypto] vmx: Fix sleep-in-atomic bugs (Steve Best) [1626594]
  - [powerpc] pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1635143]
  - [block] blk-mq: fix updating tags depth (Ming Lei) [1611901]
  - [block] really disable runtime-pm for blk-mq (Ming Lei) [1610226]
  - [block] reset bi_iter.bi_done after splitting bio (Ming Lei) [1611881]
  - [block] mq-deadline: add 'deadline' as a name alias (Ming Lei) [1611133]
  - [block] elevator: allow name aliases (Ming Lei) [1611133]
  - [block] elevator: lookup mq vs non-mq elevators (Ming Lei) [1611133]
  - [powerpc] powernv/npu: Remove atsd_threshold debugfs setting (Steve Best) [1641210]
  - [powerpc] powernv/npu: Use size-based ATSD invalidates (Steve Best) [1641210]
  - [powerpc] powernv/npu: Reduce eieio usage when issuing ATSD invalidates (Steve Best) [1641210]
  - [powerpc] powernv: Use __raw_[rm_]writeq_be() in npu-dma.c (Steve Best) [1641210]
  - [powerpc] powernv/npu: Add a debugfs setting to change ATSD threshold (Steve Best) [1641210]
  - [powerpc] io: Add __raw_writeq_be() __raw_rm_writeq_be() (Steve Best) [1641210]
  - [kvm] arm/arm64: vgic/its save/restore: protect kvm_read_guest() calls (Robert Richter) [1610741]
  - [arm64] kvm: vgic/its: protect kvm_read_guest() calls with SRCU lock (Robert Richter) [1610741]
  - [kvm] arm/arm64: vgic/its: Promote irq_lock() in update_affinity (Robert Richter) [1610741]
  - [kvm] arm64: Properly protect VGIC locks from IRQs (Robert Richter) [1610741]
  - [powerpc] tm: Fix userspace r13 corruption (Steve Best) [1635308]
  - [powerpc] tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1635308]
  - [powerpc] cacheinfo: Report the correct shared_cpu_map on big-cores (Steve Best) [1640191]
  - [powerpc] Use cpu_smallcore_sibling_mask at SMT level on bigcores (Steve Best) [1640191]
  - [powerpc] Detect the presence of big-cores via "ibm, thread-groups" (Steve Best) [1640191]
  - [powerpc] pkeys: make protection key 0 less special (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] pkeys: Preallocate execute-only key (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] pkeys: Save the pkey registers before fork (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] pkeys: Fix calculation of total pkeys (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] pkeys: key allocation/deallocation must not change pkey registers (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] pkeys: Deny read/write/execute by default (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] pkeys: Give all threads control of their key permissions (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] pkeys: Detach execute_only key on !PROT_EXEC (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] mm/keys: Update documentation and remove unnecessary check (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] mm/keys: Move pte bits to correct headers (Desnes Augusto Nunes do Rosario) [1641729]
  - [powerpc] mm: Fix thread_pkey_regs_init() (Desnes Augusto Nunes do Rosario) [1641729]
  - [kernel] mm, powerpc, x86: define VM_PKEY_BITx bits if CONFIG_ARCH_HAS_PKEYS is enabled (Desnes Augusto Nunes do Rosario) [1641729]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.4.1.el7a]
changelog:
  - [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
  - [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
  - [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
  - [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
  - [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
  - [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
  - [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
  - [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
  - [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
  - [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
  - [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
  - [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
  - [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
  - [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
  - [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
  - [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
  - [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
  - [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
  - [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
  - [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
  - [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
  - [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
  - [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
  - [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
  - [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
  - [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
  - [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
  - [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
  - [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
  - [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
  - [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
  - [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
  - [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
  - [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
  - [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
  - [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
  - [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
  - [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
  - [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
  - [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
  - [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
  - [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]
  - [netdrv] tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths (Desnes Augusto Nunes do Rosario) [1623796]
  - [tools] perf test: "Session topology" dumps core on s390 (Jiri Olsa) [1610504]
  - [redhat] update RHMAINTAINERS (Rafael Aquini)


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.5.1.el7a]
changelog:
  - [powerpc] kvm: book3s hv: Fix ppc_breakpoint_available compile error (Steve Best) [1649716]
  - [powerpc] kvm: Fix guest boot failure on Power9 since DAWR changes (Steve Best) [1649716]
  - [powerpc] Don't write to DABR on >= Power8 if DAWR is disabled (Steve Best) [1649716]
  - [powerpc] hw_breakpoint: Only disable hw breakpoint if cpu supports it (Steve Best) [1649716]
  - [netdrv] ena: update driver version from 2.0.1 to 2.0.2 (John Linville) [1653764]
  - [netdrv] ena: fix crash during ena_remove() (John Linville) [1653764]
  - [netdrv] ena: fix crash during failed resume from hibernation (John Linville) [1653764]
  - [usb] xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc (Robert Richter) [1650026]
  - [usb] xhci: Allow more than 32 quirks (Robert Richter) [1650026]
  - [powerpc] Update xmon to use ppc_breakpoint_available() (Steve Best) [1648196]
  - [powerpc] kvm: book3s hv: Return error from h_set_mode(SET_DAWR) on POWER9 (Steve Best) [1648196]
  - [powerpc] kvm: book3s hv: Return error from h_set_dabr() on POWER9 (Steve Best) [1648196]
  - [powerpc] kvm: book3s hv: Handle migration with POWER9 disabled DAWR (Steve Best) [1648196]
  - [powerpc] Add ppc_breakpoint_available() (Steve Best) [1648196]
  - [powerpc] Update ptrace to use ppc_breakpoint_available() (Steve Best) [1648196]
  - [powerpc] Disable DAWR on POWER9 via CPU feature quirk (Steve Best) [1648196]
  - [powerpc] Disable DAWR in the base POWER9 CPU features (Steve Best) [1648196]
  - [powerpc] pseries: mm: call H_BLOCK_REMOVE (Steve Best) [1640508]
  - [powerpc] pseries: mm: factorize PTE slot computation (Steve Best) [1640508]
  - [powerpc] pseries: mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1640508]
  - [powerpc] rtas: Fix a potential race between CPU-Offline & Migration (Steve Best) [1640500]
  - [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1640500]
  - [infiniband] rdma/hns: Fix usage of bitmap allocation functions return values (Zhou Wang) [1623884]
  - [infiniband] rdma/hns: Support flush cqe for hip08 in kernel space (Zhou Wang) [1623884]
  - [infiniband] rdma/hns: Program the tclass and flow label into the hardware (Zhou Wang) [1623884]
  - [infiniband] rdma/hns: Use macro instead of magic number (Zhou Wang) [1623884]
  - [infiniband] rdma/hns: Modify qp will return errno when qp type is illegal (Zhou Wang) [1623884]
  - [infiniband] rdma/hns: Assign the value for vlan field of qp context (Zhou Wang) [1623884]
  - [infiniband] rdma/hns: Only assgin the fields of the av if IB_QP_AV bit is set (Zhou Wang) [1623884]
  - [infiniband] rdma/hns: Enable modify_cq for uverbs (Zhou Wang) [1623884]
  - [infiniband] rdma/hns: Update the data type of immediate data (Zhou Wang) [1623884]
  - [infiniband] rdma/hns: Use delay instead of usleep (Zhou Wang) [1623884]
  - [infiniband] rdma/hns: Add illegal hop_num judgement (Zhou Wang) [1623884]
  - [infiniband] rdma/hns: Return correct error code from hns_roce_v1_rsv_lp_qp() (Zhou Wang) [1623884]
  - [infiniband] rdma/hns: Add 50GE type of hnae3 device match (Zhou Wang) [1623884]
  - [infiniband] rdma/hns: Do not overwrite the error code during error unwind in hns_roce_init (Zhou Wang) [1623884]
  - [scsi] hisi_sas: Add SATA FIS check for v3 hw (Zhou Wang) [1622559]
  - [scsi] hisi_sas: add memory barrier in task delivery function (Zhou Wang) [1622559]
  - [scsi] hisi_sas: Tidy hisi_sas_task_prep() (Zhou Wang) [1622559]
  - [scsi] hisi_sas: Implement handlers of PCIe FLR for v3 hw (Zhou Wang) [1622559]
  - [scsi] hisi_sas: relocate some common code for v3 hw (Zhou Wang) [1622559]
  - [scsi] hisi_sas: tidy host controller reset function a bit (Zhou Wang) [1622559]
  - [scsi] hisi_sas: Fix the failure of recovering PHY from STP link timeout (Zhou Wang) [1622559]
  - [scsi] hisi_sas: tidy channel interrupt handler for v3 hw (Zhou Wang) [1622559]
  - [scsi] hisi_sas: Drop hisi_sas_slot_abort() (Zhou Wang) [1622559]
  - [netdrv] hns: add netif_carrier_off before change speed and duplex (Xiaojun Tan) [1622066]
  - [netdrv] hns: add the code for cleaning pkt in chip (Xiaojun Tan) [1622066]
  - [arm64] numa: rework ACPI NUMA initialization (Xiaojun Tan) [1619970]
  - [arm64] irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Xiaojun Tan) [1619970]
  - [kernel] locking/qspinlock: Handle ticket unlock code in old kernel modules (Waiman Long) [1607858]
  - [arm64] locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607858]
  - [arm64] barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607858]
  - [kernel] locking/qspinlock: Remove duplicate clear_pending() function from PV code (Waiman Long) [1607858]
  - [kernel] locking/qspinlock: Add stat tracking for pending vs. slowpath (Waiman Long) [1607858]
  - [kernel] locking/qspinlock: Use try_cmpxchg() instead of cmpxchg() when locking (Waiman Long) [1607858]
  - [kernel] locking/qspinlock: Elide back-to-back RELEASE operations with smp_wmb() (Waiman Long) [1607858]
  - [kernel] locking/qspinlock: Use smp_store_release() in queued_spin_unlock() (Waiman Long) [1607858]
  - [kernel] locking/qspinlock: Use smp_cond_load_relaxed() to wait for next node (Waiman Long) [1607858]
  - [kernel] locking/mcs: Use smp_cond_load_acquire() in MCS spin loop (Waiman Long) [1607858]
  - [kernel] locking/qspinlock: Use atomic_cond_read_acquire() (Waiman Long) [1607858]
  - [kernel] locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue (Waiman Long) [1607858]
  - [kernel] locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath (Waiman Long) [1607858]
  - [kernel] locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound (Waiman Long) [1607858]
  - [kernel] locking/qspinlock: Bound spinning on pending->locked transition in slowpath (Waiman Long) [1607858]
  - [kernel] locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock' (Waiman Long) [1607858]
  - [kernel] locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() (Waiman Long) [1607858]
  - [kernel] locking/pvqspinlock: Implement hybrid PV queued/unfair locks (Waiman Long) [1607858]
  - [kernel] locking/qspinlock: Ensure node->count is updated before initialising node (Waiman Long) [1607858]
  - [kernel] locking/qspinlock: Ensure node is initialised before updating prev->next (Waiman Long) [1607858]
  - [kernel] locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath() (Waiman Long) [1607858]
  - [powerpc] pseries: Remove unneeded uses of dlpar work queue (Desnes Augusto Nunes do Rosario) [1602215]
  - [powerpc] pseries: Remove prrn_work workqueue (Desnes Augusto Nunes do Rosario) [1602215]
  - [cpufreq] cppc: Add cpuinfo_cur_freq support for CPPC (Robert Richter) [1650348]
  - [char] ipmi: Fix timer race with module unload (Robert Richter) [1650032]
  - [s390] keyboard: sanitize array index in do_kdsk_ioctl (Steve Best) [1639663]
  - [iommu] iova: Optimise attempts to allocate iova from 32bit address range (Robert Richter) [1639200]
  - [fs] ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Lukas Czerner) [1584985] {CVE-2018-10840}
  - [netdrv] cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (Arjun Vynipadath) [1549428]
  - [scsi] iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1540155]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.6.1.el7a]
changelog:
  - [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
  - [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
  - [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
  - [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
  - [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
  - [powerpc] kvm: book3s hv: Read kvm->arch.emul_smt_mode under kvm->lock (Sam Bobroff) [1634653]
  - [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
  - [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
  - [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
  - [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
  - [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
  - [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
  - [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
  - [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
  - [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
  - [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
  - [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
  - [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
  - [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
  - [fs] ext4: fix check to prevent initializing reserved inodes (Lukas Czerner) [1615845] {CVE-2018-10876}
  - [fs] ext4: only look at the bg_flags field if it is valid (Lukas Czerner) [1615845] {CVE-2018-10876}
  - [fs] ext4: don't update checksum of new initialized bitmaps (Lukas Czerner) [1615845] {CVE-2018-10876}
  - [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas Czerner) [1583452] {CVE-2018-11412}
  - [fs] ext4: do not allow external inodes for inline data (Lukas Czerner) [1583452] {CVE-2018-11412}


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.7.1.el7a]
changelog:
  - [tty] n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Chris von Recklinghausen) [1650106] {CVE-2018-18386}
  - [security] selinux: kasan: slab-out-of-bounds in xattr_getsecurity (Paul Moore) [1595706]
  - [nfs] revert "nfs: Move the flock open mode check into nfs_flock()" (Xiaojun Tan) [1670650]
  - [mm] enforce min addr even if capable() in expand_downwards() (Rafael Aquini) [1686219] {CVE-2019-9213}
  - [net] sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (Scott Mayhew) [1678922]
  - [net] sunrpc: Don't use stack buffer with scatterlist (Scott Mayhew) [1678922]
  - [netdrv] hns3: add 8 BD limit for tx flow (Xiaojun Tan) [1677643]
  - [netdrv] hns3: fix a SSU buffer checking bug (Xiaojun Tan) [1677643]
  - [netdrv] hns3: aligning buffer size in SSU to 256 bytes (Xiaojun Tan) [1677643]
  - [netdrv] hns3: getting tx and dv buffer size through firmware (Xiaojun Tan) [1677643]
  - [netdrv] hns3: Fix for packet buffer setting bug (Xiaojun Tan) [1677643]
  - [netdrv] hns3: fix for multiple unmapping DMA problem (Xiaojun Tan) [1677643]
  - [netdrv] hns3: rename hns_nic_dma_unmap (Xiaojun Tan) [1677643]
  - [netdrv] hns3: add handling for big TX fragment (Xiaojun Tan) [1677643]
  - [netdrv] hns3: move DMA map into hns3_fill_desc (Xiaojun Tan) [1677643]
  - [netdrv] hns3: remove hns3_fill_desc_tso (Xiaojun Tan) [1677643]
  - [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1670018]
  - [mm] ksm.c: ignore STABLE_FLAG of rmap_item->address in rmap_walk_ksm() (Andrea Arcangeli) [1663565]
  - [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1657614] {CVE-2018-18397}
  - [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1657614] {CVE-2018-18397}
  - [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1657614] {CVE-2018-18397}
  - [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1657614] {CVE-2018-18397}
  - [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1657614] {CVE-2018-18397}
  - [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
  - [fs] userfaultfd: clear flag if remap event not enabled (Andrea Arcangeli) [1657614] {CVE-2018-18397}
  - [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1657614] {CVE-2018-18397}
  - [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1657614] {CVE-2018-18397}
  - [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1657614] {CVE-2018-18397}
  - [fs] userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1657614] {CVE-2018-18397}
  - [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1657614] {CVE-2018-18397}
  - [nvme] update timeout module parameter type (Andrew Jones) [1654958]
  - [kernel] alarmtimer: Prevent overflow for relative nanosleep (Christoph von Recklinghausen) [1653681] {CVE-2018-13053}
  - [ipc] shm: fix use-after-free of shm file via remap_file_pages() (Rafael Aquini) [1649637] {CVE-2018-18281}
  - [mm] mremap: properly flush TLB before releasing the page (Rafael Aquini) [1649637] {CVE-2018-18281}
  - [netdrv] hns3: Add egress/ingress vlan filter for revision 0x21 (Xiaojun Tan) [1639713]
  - [tty] vt_ioctl: fix potential Spectre v1 (Christoph von Recklinghausen) [1639679]
  - [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638195] {CVE-2018-17972}
  - [arm64] cmpwait: Clear event register before arming exclusive monitor (Iyappan Subramanian) [1636261]
  - [mm] page_mapped: don't assume compound page is huge or THP (Christoph von Recklinghausen) [1623193]
  - [infiniband] fix a possible use-after-free bug (Kamal Heib) [1615043] {CVE-2018-14734}
  - [fs] xfs: More robust inode extent count validation (Carlos Maiolino) [1602040] {CVE-2018-13095}
  - [fs] xfs: don't call xfs_da_shrink_inode with NULL bp (Carlos Maiolino) [1601941] {CVE-2018-13094}
  - [fs] cifs: Fix stack out-of-bounds in smb2_create_lease_buf() and smb3_create_lease_buf() (Leif Sahlberg) [1598757]
  - [tools] perf test: "probe libc's inet_pton" fails on s390 due to missing inline (Jiri Olsa) [1518836]
  - [tools] perf test: Adapt test case record+probe_libc_inet_pton.sh for s390 (Jiri Olsa) [1518836]
  - [tools] perf test: Fix exit code for record+probe_libc_inet_pton.sh (Jiri Olsa) [1518836]
  - [tools] perf tests: Rename trace+probe_libc_inet_pton to record+probe_libc_inet_pton (Jiri Olsa) [1518836]
  - [tools] perf tests: Switch trace+probe_libc_inet_pton to use record (Jiri Olsa) [1518836]
  - [tools] perf tests shell lib: Use a wildcard to remove the vfs_getname probe (Jiri Olsa) [1518836]
  - [tools] perf test: Fix test case inet_pton to accept inlines (Jiri Olsa) [1518836]
  - [tools] perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Jiri Olsa) [1518836]
  - [tools] perf test shell: Fix check open filename arg using 'perf trace' (Jiri Olsa) [1518836]
  - [tools] perf test shell: Fix test case probe libc's inet_pton on s390x (Jiri Olsa) [1518836]
  - [tools] perf test shell: Fix check open filename arg using 'perf trace' on s390x (Jiri Olsa) [1518836]
  - [x86] idt: Load idt early in start_secondary (Jerome Marchand) [1501024]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.8.1.el7a]
changelog:
  - [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695643]
  - [powerpc] powernv: ioda: Fix locked_vm counting for memory used by IOMMU tables (David Gibson) [1693146]
  - [mm] memory.c: do_fault: avoid usage of stale vm_area_struct (Jan Stancek) [1679243]
  - [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1692682]
  - [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1692682]
  - [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1692682]
  - [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1692682]
  - [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1692682]
  - [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1692682]
  - [powerpc] asm: Add a patch_site macro & helpers for patching instructions (Gustavo Duarte) [1692682]
  - [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1692682]
  - [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1692682]
  - [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1692682]
  - [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1692682]
  - [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1692682]
  - [powerpc] powerpc/64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1692682]
  - [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1692682]
  - [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1692682]
  - [powerpc] Use barrier_nospec in copy_from_user() (Gustavo Duarte) [1692682]
  - [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1692682]
  - [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1692682]
  - [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1692682]
  - [powerpc] Avoid code patching freed init sections (Gustavo Duarte) [1692682]
  - [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1692682]
  - [trace] Quiet gcc warning about maybe unused link variable (Artem Savkov) [1677171]
  - [trace] kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov) [1677171]
  - [xfs] fix error handling in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
  - [xfs] fix a null pointer dereference in xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}
  - [xfs] set format back to extents if xfs_bmap_extents_to_btree (Carlos Maiolino) [1602040] {CVE-2018-13095}


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.9.1.el7a]
changelog:
  - [sched] fair: Do not re-read ->h_load_next during hierarchical load calculation (Phil Auld) [1557242]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.10.1.el7a]
changelog:
  - [powerpc] tm: Fix stack pointer corruption (Desnes Augusto Nunes do Rosario) [1707630]
  - [vhost] vsock: add weight support (Jason Wang) [1702950] {CVE-2019-3900}
  - [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702950] {CVE-2019-3900}
  - [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702950] {CVE-2019-3900}
  - [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702950] {CVE-2019-3900}
  - [vhost] vhost_net: do not stall on zerocopy depletion (Jason Wang) [1702950] {CVE-2019-3900}
  - [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702950] {CVE-2019-3900}
  - [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702950] {CVE-2019-3900}
  - [nfs] Don't use page_file_mapping after removing the page (Benjamin Coddington) [1671943]
  - [nfs] Fix up return value on fatal errors in nfs_page_async_flush() (Benjamin Coddington) [1671943]
  - [fs] lockd: double unregister of inetaddr notifiers (Scott Mayhew) [1637542]
  - [fs] race of nfsd inetaddr notifiers vs nn->nfsd_serv change (Scott Mayhew) [1637541]
  - [fs] nfds: avoid gettimeofday for nfssvc_boot time (Scott Mayhew) [1637541]
  - [fs] race of lockd inetaddr notifiers vs nlmsvc_rqst change (Scott Mayhew) [1637541]
  - [mm] slub: restore the original intention of prefetch_freepointer() (Rafael Aquini) [1596489]
  - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Augusto Caringi) [1719620] {CVE-2019-11479}
  - [net] tcp: add tcp_min_snd_mss sysctl (Augusto Caringi) [1719620] {CVE-2019-11479}
  - [net] tcp: tcp_fragment() should apply sane memory limits (Augusto Caringi) [1719612] {CVE-2019-11478}
  - [net] tcp: limit payload size of sacked skbs (Augusto Caringi) [1719606] {CVE-2019-11477}
  - [net] tcp: pass previous skb to tcp_shifted_skb() (Augusto Caringi) [1719606] {CVE-2019-11477}


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-109.el7a]
changelog:
  - [scsi] qla2xxx: Fix crash on qla2x00_mailbox_command (Himanshu Madhani) [1592456]
  - [gpu] drm: udl: Properly check framebuffer mmap offsets (Ben Crocker) [1573097] {CVE-2018-8781}
  - [scsi] libiscsi: fix possible NULL pointer dereference in case of TMF (Chris Leech) [1613266]
  - [base] driver core: partially revert "driver core: correct device's shutdown order" (Pingfan Liu) [1507829]
  - [scsi] lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1615887]
  - [scsi] lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1615881]
  - [scsi] lpfc: Correct LCB ACCept payload (Dick Kennedy) [1615879]
  - [crypto] algif_aead: fix reference counting of null skcipher (Herbert Xu) [1600394]
  - [netdrv] mlx5-core: Mark unsupported devices (Jonathan Toppins) [1623600 1623599]
  - [media] v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: avoid sizeof(type) (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: fix the indentation (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-ioctl.c: don't copy back the result for -ENOTTY (Jarod Wilson) [1548728] {CVE-2017-13166}
  - [media] v4l2-ioctl.c: use check_fmt for enum/g/s/try_fmt (Jarod Wilson) [1548728] {CVE-2017-13166}


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-110.el7a]
changelog:
  - [net] ip: process in-order fragments efficiently (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] ipv6: defrag: drop non-last frags smaller than min mtu (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] modify skb_rbtree_purge to return the truesize of all purged skbs (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] ipv4: frags: precedence bug in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] ip: use rb trees for IP frag queue (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] inet: frags: do not clone skb in ip_expire() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] inet: frags: get rif of inet_frag_evicting() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] ip: discard IPv4 datagrams with overlapping segments (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] ipv4: frags: handle possible skb truesize change (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [net] speed up skb_rbtree_purge() (Sabrina Dubroca) [1613929] {CVE-2018-5391}
  - [powerpc] kvm: book3s hv: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1609115]
  - [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622553]
  - [netdrv] cxgb4: update latest firmware version supported (Arjun Vynipadath) [1622553]
  - [arm64] entry: Apply BP hardening for high-priority synchronous exceptions (Robert Richter) [1614914] {CVE-2017-5715 CVE-2017-5753 CVE-2017-5754}
  - [powerpc] kvm: book3s: Fix guest DMA when guest partially backed by THP pages (David Gibson) [1613190]
  - [powerpc] kvm: Check if IOMMU page is contained in the pinned physical page (David Gibson) [1613190]
  - [vfio] spapr: Use IOMMU pageshift rather than pagesize (David Gibson) [1613190]
  - [scsi] target: iscsi: cxgbit: fix max iso npdu calculation (Arjun Vynipadath) [1613308]
  - [scsi] csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1613308]
  - [powerpc] mm/radix: Only need the Nest MMU workaround for R -> RW transition (Gustavo Duarte) [1625826]
  - [powerpc] mm/books3s: Add new pte bit to mark pte temporarily invalid (Gustavo Duarte) [1625826]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-111.el7a]
changelog:
  - [powerpc] kvm: book3s hv: Don't truncate HPTE index in xlate function (David Gibson) [1613839]
  - [char] ipmi: Fix I2C client removal in the SSIF driver (Robert Richter) [1624907]
  - [char] ipmi: Rework SMI registration failure (Robert Richter) [1624907]
  - [char] ipmi: Cleanup oops on initialization failure (Robert Richter) [1624907]
  - [char] ipmi_ssif: Fix uninitialized variable issue (Robert Richter) [1624907]
  - [char] ipmi_si: Clean up shutdown a bit (Robert Richter) [1624907]
  - [char] ipmi: ipmi_unregister_smi() cannot fail, have it return void (Robert Richter) [1624907]
  - [char] ipmi_si: Convert over to a shutdown handler (Robert Richter) [1624907]
  - [char] ipmi: Rework locking and shutdown for hot remove (Robert Richter) [1624907]
  - [char] ipmi: Fix some counter issues (Robert Richter) [1624907]
  - [char] ipmi: Change ipmi_smi_t to struct ipmi_smi * (Robert Richter) [1624907]
  - [char] ipmi: Rename ipmi_user_t to struct ipmi_user * (Robert Richter) [1624907]
  - [char] ipmi: Consolidate cleanup code (Robert Richter) [1624907]
  - [char] ipmi: Fix some error cleanup issues (Robert Richter) [1624907]
  - [powerpc] kvm: book3s hv: Don't use compound_order to determine host mapping size (David Gibson) [1609129]
  - [powerpc] kvm: book3s hv: radix: Refine IO region partition scope attributes (David Gibson) [1609129]
  - [powerpc] kvm: book3s hv: Use __gfn_to_pfn_memslot() in page fault handler (David Gibson) [1609129]
  - [powerpc] kvm: book3s hv: Handle 1GB pages in radix page fault handler (David Gibson) [1609129]
  - [powerpc] kvm: book3s hv: Radix page fault handler optimizations (David Gibson) [1609129]
  - [powerpc] kvm: book3s hv: Streamline setting of reference and change bits (David Gibson) [1609129]
  - [powerpc] kvm: ppc: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1620360]
  - [powerpc] powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1620360]
  - [powerpc] powernv: Rework TCE level allocation (David Gibson) [1620360]
  - [powerpc] powernv: Add indirect levels to it_userspace (David Gibson) [1620360]
  - [powerpc] kvm: ppc: Make iommu_table::it_userspace big endian (David Gibson) [1620360]
  - [powerpc] kvm: ppc: book3s: Allow backing bigger guest IOMMU pages with smaller physical pages (David Gibson) [1620360]
  - [powerpc] powernv: Move TCE manupulation code to its own file (David Gibson) [1620360]
  - [powerpc] ioda: Use ibm, supported-tce-sizes for IOMMU page size mask (David Gibson) [1620360]
  - [powerpc] powernv/ioda: Remove explicit max window size check (David Gibson) [1620360]
  - [s390] lib: use expoline for all bcr instructions (Hendrik Brueckner) [1625206]
  - [s390] kvm: force bp isolation for VSIE (Hendrik Brueckner) [1625206]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-112.el7a]
changelog:
  - [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573706] {CVE-2018-1118}
  - [powerpc] kprobes: Fix call trace due to incorrect preempt count (Jiri Olsa) [1610512]
  - [fs] dcache: Avoid livelock between d_alloc_parallel and __d_add (Robert Richter) [1613285]
  - [arm64] kvm: Move VCPU_WORKAROUND_2_FLAG macros to the top of the file (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] kvm: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] kvm: Handle guest's ARCH_WORKAROUND_2 requests (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] kvm: Add ARCH_WORKAROUND_2 support for guests (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] kvm: Add HYP per-cpu accessors (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] ssbd: Add prctl interface for per-thread mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] ssbd: Introduce thread flag to control userspace mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] ssbd: Restore mitigation status on CPU resume (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] ssbd: Skip apply_ssbd if not using dynamic mitigation (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] ssbd: Add global mitigation state accessor (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] Add 'ssbd' command-line option (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] Add ARCH_WORKAROUND_2 probing (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] smccc: Add SMCCC-specific return codes (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] kvm: Avoid storing the vcpu pointer on the stack (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] kvm: Stop save/restoring host tpidr_el1 on VHE (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] alternatives: use tpidr_el2 on VHE hosts (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] kvm: Change hyp_panic()s dependency on tpidr_el2 (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] Convert kvm_host_cpu_state to a static per-cpu allocation (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] kvm: Store vcpu on the stack during __guest_enter() (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] prctl: Add force disable speculation (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] nospec: Allow getting/setting on non-current task (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] seccomp: Enable speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] proc: Provide details on speculation flaw mitigations (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] prctl: Add speculation control prctls (Jeremy Linton) [1596417] {CVE-2018-3639}
  - [arm64] fixup: vfs, fdtable: Prevent bounds-check bypass via speculative execution (Jeremy Linton) [1596417] {CVE-2018-3639}


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-113.el7a]
changelog:
  - [net] ip: frags: fix crash in ip_do_fragment() (Sabrina Dubroca) [1629658] {CVE-2018-14641}
  - [kernel] posix-timer: Properly check sigevent->sigev_notify (Phil Auld) [1613718] {CVE-2017-18344}
  - [fs] ext4: update i_disksize if direct write past ondisk size (Lukas Czerner) [1554214]
  - [fs] ext4: protect i_disksize update by i_data_sem in direct write path (Lukas Czerner) [1554214]
  - [fs] ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner) [1554214]
  - [fs] ext4: fix interaction between i_size, fallocate, and delalloc after a crash (Lukas Czerner) [1554214]
  - [fs] ext4: set h_journal if there is a failure starting a reserved handle (Lukas Czerner) [1554214]
  - [fs] ext4: verify the depth of extent tree in ext4_find_extent() (Lukas Czerner) [1602821] {CVE-2018-10877}
  - [fs] ext4: never move the system.data xattr out of the inode body (Lukas Czerner) [1605633] {CVE-2018-10880}
  - [fs] ext4: clear i_data in ext4_inode_info when removing inline data (Lukas Czerner) [1607600] {CVE-2018-10881}
  - [fs] ext4: add more inode number paranoia checks (Lukas Czerner) [1609237] {CVE-2018-10882}
  - [fsnotify] Fix fsnotify_mark_connector race (Miklos Szeredi) [1596532]
  - [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600958] {CVE-2018-13405}
  - [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552983] {CVE-2017-18208}
  - [mm] oom: fix concurrent munlock and oom reaper unmap (Rafael Aquini) [1570542] {CVE-2018-1000200}
  - [fs] cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Leif Sahlberg) [1598772]
  - [scsi] core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei) [1627969]
  - [iommu] arm-smmu: workaround DMA mode issues (Mark Salter) [1596055]
  - [powerpc] tm: Fix HFSCR bit for no suspend case (Gustavo Duarte) [1628637]
  - [powerpc] vdso: Correct call frame information (Desnes Augusto Nunes do Rosario) [1627647]
  - [fs] ext4: limit xattr size to INT_MAX (Lukas Czerner) [1564531] {CVE-2018-1095}
  - [fs] ext4: fail ext4_iget for root directory if unallocated (Lukas Czerner) [1564592] {CVE-2018-1092}
  - [fs] ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Lukas Czerner) [1564563] {CVE-2018-1094}
  - [fs] ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Lukas Czerner) [1564563] {CVE-2018-1094}
  - [fs] ext4: always initialize the crc32c checksum driver (Lukas Czerner) [1564563] {CVE-2018-1094}
  - [fs] ext4: always verify the magic number in xattr blocks (Lukas Czerner) [1607578] {CVE-2018-10879}
  - [fs] ext4: move call to ext4_error() into ext4_xattr_check_block() (Lukas Czerner) [1607578] {CVE-2018-10879}
  - [fs] ext4: add corruption check in ext4_xattr_set_entry() (Lukas Czerner) [1607578] {CVE-2018-10879}
  - [fs] jbd2: don't mark block as modified if the handle is out of credits (Lukas Czerner) [1609762] {CVE-2018-10883}
  - [fs] ext4: avoid running out of journal credits when appending to an inline file (Lukas Czerner) [1609762] {CVE-2018-10883}
  - [irqchip] gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Mark Salter) [1625315]
  - [irqchip] gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1625315]
  - [irqchip] gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1625315]
  - [irqchip] gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1625315]
  - [irqchip] gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1625315]
  - [irqchip] gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1625315]
  - [irqchip] gic-v3-its: Use full range of LPIs (Mark Salter) [1625315]
  - [irqchip] gic-v3-its: Refactor LPI allocator (Mark Salter) [1625315]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-114.el7a]
changelog:
  - [block] blkdev: __blkdev_direct_io_simple: fix leak in error case (Ming Lei) [1602223]
  - [block] bio_iov_iter_get_pages: pin more pages for multi-segment IOs (Ming Lei) [1602223]
  - [block] bio_iov_iter_get_pages: fix size of last iovec (Ming Lei) [1602223]
  - [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Andrea Claudi) [1625958]
  - [net] udp6: add missing checks on edumux packet processing (Andrea Claudi) [1625958]
  - [fs] ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Lukas Czerner) [1607353] {CVE-2018-10878}
  - [fs] ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Lukas Czerner) [1607353] {CVE-2018-10878}
  - [fs] ext4: always check block group bounds in ext4_init_block_bitmap() (Lukas Czerner) [1607353] {CVE-2018-10878}
  - [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578209] {CVE-2018-10940}
  - [fs] nfs: lockd: fix "list_add double add" caused by legacy signal interface ("J. Bruce Fields") [1600442]
  - [nvme] pci: move nvme_kill_queues to nvme_remove_dead_ctrl (Ming Lei) [1612743]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.el7a]
changelog:
  - [fs] fanotify: fix fsnotify_prepare_user_wait() failure (Miklos Szeredi) [1631194]
  - [fs] fsnotify: fix pinning group in fsnotify_prepare_user_wait() (Miklos Szeredi) [1631194]
  - [fs] fsnotify: pin both inode and vfsmount mark (Miklos Szeredi) [1631194]
  - [fs] fsnotify: clean up fsnotify_prepare/finish_user_wait() (Miklos Szeredi) [1631194]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.2.2.el7a]
changelog:
  - [tty] Fix for a serial driver (Poseidon) (Jon Masters) [1642751]
  - [netdrv] ena: enable CONFIG_ENA_ETHERNET for aarch64 ("John W. Linville") [1627516]
  - [netdrv] ena: enable Low Latency Queues ("John W. Linville") [1627516]
  - [netdrv] ena: Fix Kconfig dependency on X86 ("John W. Linville") [1627516]
  - [netdrv] ena: fix indentations in ena_defs for better readability ("John W. Linville") [1627516]
  - [netdrv] ena: update driver version to 2.0.1 ("John W. Linville") [1627516]
  - [netdrv] ena: remove redundant parameter in ena_com_admin_init() ("John W. Linville") [1627516]
  - [netdrv] ena: change rx copybreak default to reduce kernel memory pressure ("John W. Linville") [1627516]
  - [netdrv] ena: limit refill Rx threshold to 256 to avoid latency issues ("John W. Linville") [1627516]
  - [netdrv] ena: explicit casting and initialization, and clearer error handling ("John W. Linville") [1627516]
  - [netdrv] ena: use CSUM_CHECKED device indication to report skb's checksum status ("John W. Linville") [1627516]
  - [netdrv] ena: add functions for handling Low Latency Queues in ena_netdev ("John W. Linville") [1627516]
  - [netdrv] ena: add functions for handling Low Latency Queues in ena_com ("John W. Linville") [1627516]
  - [netdrv] ena: introduce Low Latency Queues data structures according to ENA spec ("John W. Linville") [1627516]
  - [netdrv] ena: complete host info to match latest ENA spec ("John W. Linville") [1627516]
  - [netdrv] ena: minor performance improvement ("John W. Linville") [1627516]
  - [netdrv] ena: fix auto casting to boolean ("John W. Linville") [1627516]
  - [netdrv] ena: fix NULL dereference due to untimely napi initialization ("John W. Linville") [1627516]
  - [netdrv] ena: fix rare bug when failed restart/resume is followed by driver removal ("John W. Linville") [1627516]
  - [netdrv] ena: fix warning in rmmod caused by double iounmap ("John W. Linville") [1627516]
  - [netdrv] ena: remove ndo_poll_controller ("John W. Linville") [1627516]
  - [netdrv] ena: fix incorrect usage of memory barriers ("John W. Linville") [1627516]
  - [netdrv] ena: fix missing calls to READ_ONCE ("John W. Linville") [1627516]
  - [netdrv] ena: fix missing lock during device destruction ("John W. Linville") [1627516]
  - [netdrv] ena: fix potential double ena_destroy_device() ("John W. Linville") [1627516]
  - [netdrv] ena: fix device destruction to gracefully free resources ("John W. Linville") [1627516]
  - [netdrv] ena: fix driver when PAGE_SIZE == 64kB ("John W. Linville") [1627516]
  - [netdrv] ena: fix surprise unplug NULL dereference kernel crash ("John W. Linville") [1627516]
  - [netdrv] ena: Fix use of uninitialized DMA address bits field ("John W. Linville") [1627516]
  - [netdrv] ena: Eliminate duplicate barriers on weakly-ordered archs ("John W. Linville") [1627516]
  - [netdrv] ena: fix error handling in ena_down() sequence ("John W. Linville") [1627516]
  - [netdrv] ena: unmask MSI-X only after device initialization is completed ("John W. Linville") [1627516]
  - [netdrv] ena: increase ena driver version to 1.5.0 ("John W. Linville") [1627516]
  - [netdrv] ena: add detection and recovery mechanism for handling missed/misrouted MSI-X ("John W. Linville") [1627516]
  - [netdrv] ena: fix race condition between device reset and link up setup ("John W. Linville") [1627516]
  - [netdrv] ena: increase ena driver version to 1.3.0 ("John W. Linville") [1627516]
  - [netdrv] ena: add new admin define for future support of IPv6 RSS ("John W. Linville") [1627516]
  - [netdrv] ena: add statistics for missed tx packets ("John W. Linville") [1627516]
  - [netdrv] ena: add power management ops to the ENA driver ("John W. Linville") [1627516]
  - [netdrv] ena: remove legacy suspend suspend/resume support ("John W. Linville") [1627516]
  - [netdrv] ena: improve ENA driver boot time ("John W. Linville") [1627516]
  - [netdrv] ena: Remove redundant unlikely() ("John W. Linville") [1627516]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.6.1.el7a]
changelog:
  - [powerpc] kvm: book3s hv: Fix race between kvm_unmap_hva_range and MMU mode switch (David Gibson) [1651065]
  - [powerpc] kvm: book3s hv: Handle host system reset in guest mode (David Gibson) [1649196]
  - [powerpc] kvm: book3s hv: Avoid crash from THP collapse during radix page fault (David Gibson) [1637890]
  - [powerpc] kvm: book3s hv: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1628817]
  - [scsi] lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1615875]
  - [powerpc] kvm: book3s hv: Read kvm->arch.emul_smt_mode under kvm->lock (Sam Bobroff) [1634653]
  - [powerpc] kvm: book3s hv: Allow creating max number of VCPUs on POWER9 (Sam Bobroff) [1634653]
  - [powerpc] kvm: book3s hv: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff) [1634653]
  - [block] blk-mq: avoid starving tag allocation after allocating process migrates (Ming Lei) [1581223]
  - [block] sbitmap: fix race in wait batch accounting (Ming Lei) [1581223]
  - [block] sbitmap: warn if using smaller shallow depth than was setup (Ming Lei) [1581223]
  - [block] sbitmap: fix missed wakeups caused by sbitmap_queue_get_shallow() (Ming Lei) [1581223]
  - [block] sbitmap: use test_and_set_bit_lock()/clear_bit_unlock() (Ming Lei) [1581223]
  - [block] blk-mq: improve heavily contended tag case (Ming Lei) [1581223]
  - [redhat] Enable CONFIG_ACPI_APEI_SEA for aarch64 (Al Stone) [1664495]
  - [redhat] Enable CONFIG_EDAC_GHES (Al Stone) [1664495]
  - [netdrv] i40e: allow XPS with QoS enabled (Stefan Assmann) [1644606]
  - [netdrv] i40e/i40evf: use DECLARE_BITMAP for state (Stefan Assmann) [1644606]
  - [netdrv] i40e/i40evf: spread CPU affinity hints across online CPUs only (Stefan Assmann) [1644606]
  - [fs] ext4: fix check to prevent initializing reserved inodes (Lukas meh) [1615845] {CVE-2018-10876}
  - [fs] ext4: only look at the bg_flags field if it is valid (Lukas meh) [1615845] {CVE-2018-10876}
  - [fs] ext4: don't update checksum of new initialized bitmaps (Lukas meh) [1615845] {CVE-2018-10876}
  - [fs] ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Lukas meh) [1583452] {CVE-2018-11412}
  - [fs] ext4: do not allow external inodes for inline data (Lukas meh) [1583452] {CVE-2018-11412}


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-115.8.2.el7a]
changelog:
  - [net] tcp: tcp_fragment() should apply sane memory limits (Augusto Caringi) [1719612] {CVE-2019-11478}
  - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Augusto Caringi) [1719620] {CVE-2019-11479}
  - [net] tcp: add tcp_min_snd_mss sysctl (Augusto Caringi) [1719620] {CVE-2019-11479}
  - [net] tcp: limit payload size of sacked skbs (Augusto Caringi) [1719606] {CVE-2019-11477}
  - [net] tcp: pass previous skb to tcp_shifted_skb() (Augusto Caringi) [1719606] {CVE-2019-11477}


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-107.el7a]
changelog:
  - [tools] power: cpupower : Fix header name to read idle state name (Steve Best) [1619598]
  - [arm64] kpti: Use early_param for kpti= command-line option (Xiaojun Tan) [1611957]
  - [powerpc] eeh: avoid misleading message "eeh: no capable adapters found" (Steve Best) [1619377]
  - [s390] uprobes: implement arch_uretprobe_is_alive() (Steve Best) [1615977]
  - [powerpc] topology: Get topology for shared processors at boot (Steve Best) [1620038]
  - [powerpc] fadump: cleanup crash memory ranges support (Steve Best) [1622084]
  - [powerpc] fadump: merge adjacent memory ranges to reduce PT_LOAD segements (Steve Best) [1622084]
  - [powerpc] fadump: handle crash memory ranges array index overflow (Steve Best) [1622084]
  - [powerpc] fadump: Unregister fadump on kexec down path (Steve Best) [1622084]
  - [powerpc] fadump: Do not use hugepages when fadump is active (Steve Best) [1622084]
  - [powerpc] fadump: exclude memory holes while reserving memory in second kernel (Steve Best) [1622084]
  - [powerpc] fadump: use kstrtoint to handle sysfs store (Steve Best) [1622084]
  - [powerpc] powernv/pci: Work around races in PCI bridge enabling (Steve Best) [1619735]
  - [powerpc] pci: Add wrappers for dev_printk() (Steve Best) [1619735]
  - [s390] kvm: add etoken support for guests (Thomas Huth) [1622956]
  - [s390] kvm: implement CPU model only facilities (Thomas Huth) [1622956]
  - [s390] detect etoken facility (Thomas Huth) [1622956]


author: Augusto Caringi <acaringi@redhat.com> [4.14.0-108.el7a]
changelog:
  - [net] sched: Fix missing res info when create new tc_index filter (Hangbin Liu) [1614741]
  - [net] sched: fix NULL pointer dereference when delete tcindex filter (Hangbin Liu) [1614741]
  - [redhat] configs: Enable CONFIG_IP_SET_HASH_IPMAC as module (Stefano Brivio) [1608662]
  - [net] ipv6: send netlink notifications for manually configured addresses (Florian Westphal) [1605088]
  - [netdrv] hns3: modify variable type in hns3_nic_reuse_page (Xiaojun Tan) [1622022]
  - [netdrv] hns3: fix page_offset overflow when CONFIG_ARM64_64K_PAGES (Xiaojun Tan) [1622022]
  - [netdrv] hns: use eth_get_headlen interface instead of hns_nic_get_headlen (Xiaojun Tan) [1622022]
  - [netdrv] hns: fix skb->truesize underestimation (Xiaojun Tan) [1622022]
  - [netdrv] hns: modify variable type in hns_nic_reuse_page (Xiaojun Tan) [1622022]
  - [netdrv] hns: fix length and page_offset overflow when CONFIG_ARM64_64K_PAGES (Xiaojun Tan) [1622022]
  - [netdrv] bnx2x: disable GSO where gso_size is too big for hardware (Jonathan Toppins) [1546762] {CVE-2018-1000026}
  - [net] create skb_gso_validate_mac_len() (Jonathan Toppins) [1546762] {CVE-2018-1000026}
  - [i2c] xlp9xx: Fix case where SSIF read transaction completes early (Robert Richter) [1610749]
  - [i2c] xlp9xx: Make sure the transfer size is not more than I2C_SMBUS_BLOCK_SIZE (Robert Richter) [1610749]
  - [i2c] xlp9xx: Fix issue seen when updating receive length (Robert Richter) [1610749]
  - [i2c] xlp9xx: Add support for SMBAlert (Robert Richter) [1610749]
  - [ipmi] ipmi_ssif: Remove usecount handling (Robert Richter) [1610749]
  - [ipmi] ipmi_ssif: Convert over to a shutdown handler (Robert Richter) [1610749]
  - [ipmi] Add shutdown functions for users and interfaces (Robert Richter) [1610749]
  - [ipmi] Remove ACPI SPMI probing from the SSIF (I2C) driver (Robert Richter) [1610749]
  - [infiniband] iw_cxgb4: correctly enforce the max reg_mr depth (Arjun Vynipadath) [1613318]
  - [redhat] configs: enable CONFIG_VHOST_VSOCK and CONFIG_VIRTIO_VSOCKETS (David Gibson) [1619214]
  - [acpi] sbshc: remove raw pointer from printk() message (Al Stone) [1547007] {CVE-2018-5750}


author: Johnny Hughes <johnny@centos.org> [4.14.0-49.13.1.el7a]
changelog:
  - Rolled in CentOS certificates and signed modules with a CentOS certificate.
  - Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE on aarch64
  - added git as buildrequirement to do patches (if/when required)
  - added 46 MVPP2 patches
  - set CONFIG_ARCH_MVEBU=y, CONFIG_MVPP2=m, CONFIG_MARVELL_10G_PHY=m on aarch64


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.14.0-49.2.1.el7a]
changelog:
  - [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
  - [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.14.0-49.3.1.el7a]
changelog:
  - [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.14.0-49.4.1.el7a]
changelog:
  - [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
  - [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
  - [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.14.0-49.5.1.el7a]
changelog:
  - [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
  - [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
  - [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
  - [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
  - [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.14.0-49.6.1.el7a]
changelog:
  - [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
  - [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.14.0-49.7.1.el7a]
changelog:
  - [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
  - [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
  - [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
  - [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
  - [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
  - [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
  - [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
  - [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
  - [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
  - [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
  - [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
  - [fs] ovl: update ctx->pos on impure dir iteration (Thomas Huth) [1570546 1561534]
  - [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
  - [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
  - [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
  - [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
  - [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
  - [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
  - [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
  - [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
  - [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
  - [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
  - [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
  - [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
  - [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
  - [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
  - [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
  - [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
  - [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
  - [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
  - [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
  - [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
  - [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
  - [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.14.0-49.8.1.el7a]
changelog:
  - [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.14.0-49.9.1.el7a]
changelog:
  - [powerpc] mm/radix: Change pte relax sequence to handle nest MMU hang (Desnes Augusto Nunes do Rosario) [1592769 1582537]
  - [powerpc] mm: Change function prototype (Desnes Augusto Nunes do Rosario) [1592769 1582537]
  - [powerpc] mm/radix: Move function from radix.h to pgtable-radix.c (Desnes Augusto Nunes do Rosario) [1592769 1582537]
  - [powerpc] mm/hugetlb: Update huge_ptep_set_access_flags to call __ptep_set_access_flags directly (Desnes Augusto Nunes do Rosario) [1592769 1582537]


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.14.0-49.10.1.el7a]
changelog:
  - [powerpc] rtc: opal: Fix OPAL RTC driver OPAL_BUSY loops (Steve Best) [1596614 1593301]
  - [powerpc] rtc-opal: Fix handling of firmware error codes, prevent busy loops (Steve Best) [1596614 1593301]
  - [powerpc] powernv: define a standard delay for OPAL_BUSY type retry loops (Steve Best) [1596614 1593301]
  - [powerpc] stf-barrier: update (static) rfi_flush_enable as in upstream (Gustavo Duarte) [1596287 1585298]
  - [powerpc] stf-barrier: update (rfi_)enabled_flush_types as in upstream (Gustavo Duarte) [1596287 1585298]
  - [powerpc] stf-barrier: update debugfs as in upstream (Gustavo Duarte) [1596287 1585298]
  - [powerpc] stf-barrier: update handle_ssbd() as in upstream (Gustavo Duarte) [1596287 1585298]
  - [powerpc] stf-barrier: update stf_barrier_enable() as in upstream (Gustavo Duarte) [1596287 1585298]
  - [powerpc] stf-barrier: add cpu_show_spec_store_bypass() as in upstream (Gustavo Duarte) [1596287 1585298]
  - [powerpc] stf-barrier: add comment as in upstream (Gustavo Duarte) [1596287 1585298]
  - [powerpc] stf-barrier: move code from setup_64.c to security.c as in upstream (Gustavo Duarte) [1596287 1585298]
  - [powerpc] stf-barrier: move code from setup.h to security_features.h as in upstream (Gustavo Duarte) [1596287 1585298]
  - [powerpc] stf-barrier: update entry barrier slot as in upstream (Gustavo Duarte) [1596287 1585298]
  - [netdrv] ixgbevf: Free IRQ when PCI error recovery removes the device (Ken Cox) [1595738 1586016]
  - [cpufreq] powernv: Fix hardlockup due to synchronous smp_call in timer interrupt (Gustavo Duarte) [1593278 1574857]
  - [powerpc] mce: Fix a bug where mce loops on memory UE (Desnes Augusto Nunes do Rosario) [1583071 1571178]
  - [scsi] cxlflash: Handle spurious interrupts (Steve Best) [1579687 1520410]
  - [scsi] cxlflash: Remove commmands from pending list on timeout (Steve Best) [1579687 1520410]
  - [scsi] cxlflash: Synchronize reset and remove ops (Steve Best) [1579687 1520410]
  - [scsi] cxlflash: Reset command ioasc (Steve Best) [1579687 1520410]
  - [i2c] ipmi_ssif: Fix kernel panic at msg_done_handler (Robert Richter) [1563569 1555339]
  - [i2c] xlp9xx: Handle NACK on DATA properly (Robert Richter) [1563569 1555339]
  - [i2c] xlp9xx: Check for Bus state before every transfer (Robert Richter) [1563569 1555339]
  - [i2c] revert "xlp9xx: Check for Bus state after every transfer" (Robert Richter) [1563569 1555339]


author: Johnny Hughes <johnny@centos.org> [4.14.0-49.10.1.el7a]
changelog:
  - Rolled in CentOS certificates and signed modules with a CentOS certificate.
  - Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
  - added git as buildrequirement to do patches (if/when required)


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.14.0-49.11.1.el7a]
changelog:
  - [powerpc] powernv: Fix concurrency issue with npu->mmio_atsd_usage (Desnes Augusto Nunes do Rosario) [1614292 1611676]


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.14.0-49.12.1.el7a]
changelog:
  - [arm64] aarch64: support meltdown/spectre status in sysfs (Mark Salter) [1609160 1555408]
  - [kernel] x86/bugs: Expose /sys/../spec_store_bypass (Gustavo Duarte) [1602340 1597392]
  - [scsi] aacraid: Correct hba_send to include iu_type (Raghava Aditya Renukunta) [1597190 1525240]
  - [mm] oom_reaper: gather each vma to prevent leaking TLB entry (Chris von Recklinghausen) [1554356 1554355] {CVE-2017-18202}


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.14.0-49.13.1.el7a]
changelog:
  - [s390] use expoline thunks in the BPF JIT (Hendrik Brueckner) [1619667 1588933]
  - [s390] extend expoline to BC instructions (Hendrik Brueckner) [1619667 1588933]
  - [s390] move spectre sysfs attribute code (Hendrik Brueckner) [1619667 1588933]
  - [s390] kernel: use expoline for indirect branches (Hendrik Brueckner) [1619667 1588933]
  - [s390] ftrace: use expoline for indirect branches (Hendrik Brueckner) [1619667 1588933]
  - [s390] lib: use expoline for indirect branches (Hendrik Brueckner) [1619667 1588933]
  - [s390] crc32-vx: use expoline for indirect branches (Hendrik Brueckner) [1619667 1588933]
  - [s390] move expoline assembler macros to a header (Hendrik Brueckner) [1619667 1588933]
  - [s390] add assembler macros for CPU alternatives (Hendrik Brueckner) [1619667 1588933]
  - [redhat] spec: add gcc with expoline support (Hendrik Brueckner) [1619667 1578285]
  - [redhat] configs: enable s390 auto expoline support (Hendrik Brueckner) [1619667 1578285]
  - [s390] correct nospec auto detection init order (Hendrik Brueckner) [1619667 1578285]
  - [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1619667 1578285]
  - [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1619667 1578285]
  - [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1619667 1578285]
  - [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1619667 1578285]
  - [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1619667 1578285]


author: Herton R. Krzesinski <herton@redhat.com> [4.14.0-44.el7a]
changelog:
  - [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
  - [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
  - [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
  - [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
  - [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
  - [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
  - [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
  - [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
  - [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
  - [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
  - [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
  - [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
  - [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
  - [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
  - [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
  - [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
  - [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
  - [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]


author: Herton R. Krzesinski <herton@redhat.com> [4.14.0-45.el7a]
changelog:
  - [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
  - [redhat] fix rh_get_maintainer.pl (Andrew Jones)
  - [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]


author: Herton R. Krzesinski <herton@redhat.com> [4.14.0-46.el7a]
changelog:
  - [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
  - [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
  - [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
  - [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
  - [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
  - [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
  - [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
  - [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
  - [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
  - [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
  - [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
  - [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
  - [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
  - [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
  - [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
  - [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
  - [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
  - [redhat] RHMAINTAINERS: update power management sections (Al Stone)
  - [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
  - [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
  - [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
  - [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
  - [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
  - [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]


author: Herton R. Krzesinski <herton@redhat.com> [4.14.0-47.el7a]
changelog:
  - [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}


author: Herton R. Krzesinski <herton@redhat.com> [4.14.0-49.el7a]
changelog:
  - [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
  - [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
  - [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.14.0-49.1.1.el7a]
changelog:
  - [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
  - [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
  - [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
  - [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
  - [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
  - [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
  - [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
  - [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
  - [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
  - [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
  - [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
  - [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
  - [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
  - [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
  - [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
  - [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
  - [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
  - [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
  - [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
  - [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
  - [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
  - [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
  - [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
  - [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
  - [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
  - [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
  - [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
  - [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
  - [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
  - [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
  - [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
  - [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
  - [redhat] hardcode .el7a dist tag (Frantisek Hrbata)


author: Frantisek Hrbata <fhrbata@hrbata.com> [4.14.0-49.2.2.el7a]
changelog:
  - [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}


author: Herton R. Krzesinski <herton@redhat.com> [4.14.0-41.el7a]
changelog:
  - [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
  - [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
  - [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
  - [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
  - [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
  - [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
  - [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
  - [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
  - [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
  - [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
  - [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
  - [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
  - [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
  - [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
  - [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
  - [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
  - [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]


author: Herton R. Krzesinski <herton@redhat.com> [4.14.0-42.el7a]
changelog:
  - [net] sched: cbq: create block for q->link.block (Davide Caratti) [1544314]
  - [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
  - [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
  - [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}


author: Herton R. Krzesinski <herton@redhat.com> [4.14.0-43.el7a]
changelog:
  - [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
  - [netdrv] ibmvnic: Remove skb->protocol checks in ibmvnic_xmit (Steve Best) [1544017]
  - [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
  - [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
  - [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
  - [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
  - [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
  - [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
  - [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
  - [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
  - [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
  - [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
  - [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
  - [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
  - [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
  - [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
  - [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]


author: Mark Langsdorf <mlangsdo@redhat.com> [4.2.0-0.19.el7]
changelog:
  - [redhat] rebase to 4.2.0 (Mark Langsdorf)
  - phylib: fix device deletion order in mdiobus_unregister() (Mark Langsdorf)
  - net: sunrpc: fix tracepoint Warning: unknown op '->' (Pratyush Anand) [1252439]
  - drivers: net: xgene: fix: Oops in linkwatch_fire_event (Dean Nelson) [1240785]
  - tools lib traceevent: Add checks for returned EVENT_ERROR type (Dean Nelson) [1237310]
  - pci: fix gicv2m MSI support (Mark Salter) [1185078]
  - [redhat] disable 842 crypto accellerator emulation for ARM64 (Mark Langsdorf) [1254782]
  - [redhat] kernel-4.2.0-0.rc5.18.el7 (Mark Langsdorf)
  - net, thunder, bgx: Add support to get MAC address from ACPI. (David Daney) [1252569]
  - arm64/pci/acpi: Call pcibios_assign_resources later. (David Daney) [1250263]
  - [redhat] kernel-4.2.0-0.rc5.17.el7 (Mark Langsdorf)
  - DO NOT UPSTREAM: pci, cavium: Fix thunder_pci_requester_id() (David Daney) [1250227]
  - arm64:ftrace: add save_stack_trace_regs() (Pratyush Anand) [1247190]
  - [redhat] Rebase to 4.2-rc5 (Mark Langsdorf)
  - [redhat] kernel-4.2.0-0.rc3.16.el7 (Mark Langsdorf)
  - [redhat] add Cavium ThunderX networking to configs (Mark Langsdorf)
  - net: cavium: thunder_bgx/nic: Factor out DT specific code (Robert Richter) [1242981]
  - net: thunderx: Add receive error stats reporting via ethtool (Robert Richter) [1242981]
  - net: thunderx: Receive hashing HW offload support (Robert Richter) [1242981]
  - net: thunderx: Fixes for nicvf_set_rxfh() (Robert Richter) [1242981]
  - [redhat] DO NOT UPSTREAM: pci, cavium: Disable PEM support (Mark Langsdorf)
  - Add Cavium Thunder PCI driver configs. (David Daney) [1242680]
  - PCI: Add host drivers for Cavium ThunderX processors. (David Daney) [1242680]
  - gic-its: Allow pci_requester_id to be overridden. (David Daney) [1242680]
  - ARM64, ACPI, PCI, MSI: I/O Remapping Table (IORT) initial support. (David Daney) [1242995]
  - irqchip: gicv3: its: probe ITS in ACPI way (David Daney) [1242995]
  - irqchip/GICv3/ITS: refator ITS dt init code to prepare for ACPI (David Daney) [1242995]
  - irqchip / GICv3 / ITS: mark its_init() as __init (David Daney) [1242995]
  - irqchip / GICv3: remove gic root node in ITS (David Daney) [1242995]
  - ACPI, GICV3+: Add support for GICv3+ initialization. (David Daney) [1242995]
  - GICv3: Refactor gic_of_init() of GICv3 driver to allow for FDT and ACPI initialization. (David Daney) [1242995]
  - arm64, acpi: Implement new "GIC version" field of MADT GIC entry. (David Daney) [1242995]
  - arm64: gicv3: its: Add range check for number of allocated pages (David Daney) [1242984]
  - irqchip, gicv3-its: Implement Cavium ThunderX errata 22375, 24313 (David Daney) [1242984]
  - irqchip, gicv3: Implement Cavium ThunderX erratum 23154 (David Daney) [1242984]
  - irqchip, gicv3: Add HW revision detection and configuration (David Daney) [1242984]
  - irqchip, gicv3-its: Read typer register outside the loop (David Daney) [1242984]
  - DO NOT UPSTREAM PCI: pci: xgene: Use default irq domain for MSI (Iyappan Subramanian) [1247716]
  - arm64: Make all entry code as non-kprobe-able (Pratyush Anand) [1234589]
  - arm64: Blacklist _mcount for kprobing (Pratyush Anand) [1234589]
  - arm64: Add trampoline code for kretprobes (Pratyush Anand) [1234589]
  - [redhat] kernel-4.2.0-0.rc3.15.el7 (Mark Langsdorf)
  - arm64: Align regs name with latest upstream uapi headers (Pratyush Anand) [1243663]
  - arm64: support initrd outside kernel linear map (Mark Salter) [1230869]
  - mm: add utility for early copy from unmapped ram (Mark Salter) [1230869]
  - arm64: don't panic on crash kernel alloc failure (Mark Salter) [1240381]
  - arm64: select uprobe only if kprobe is selected (Pratyush Anand) [1210154]
  - [redhat] kernel-4.2.0-0.rc3.14.el7 (Mark Langsdorf)
  - crypto: ccp - Provide support to autoload CCP driver (Kim Naru)
  - arm64: put cpu_reset in idmap (Mark Salter) [1243150]
  - [redhat] rebase to 4.2-rc3 (Mark Langsdorf)
  - arm64: perf fixes for 4.1 and 4.2 kernels (Mark Salter) [1243583]
  - amd-xgbe-a0: Unify coherency checking logic (Mark Salter) [1243551]
  - amd-xgbe-a0: add back CONFIG_AMD_XGBE_PHY (Mark Salter) [1243551]
  - sata/xgene: support acpi probing (Mark Salter) [1144036, 1243551]
  - [redhat] kernel-4.2.0-0.rc2.13.el7 (Mark Langsdorf)
  - [redhat] Rebase to 4.2-rc1 (Mark Langsdorf)
  - DO NOT UPSTREAM: move PL011 SBSA init later (Mark Salter)
  - [redhat] kernel-4.1.0-0.12.el7 (Mark Langsdorf)
  - [redhat] rebase to 4.1 (Mark Langsdorf)
  - [redhat] set build targets to rhelsa-7.2-candidate (Mark Langsdorf)
  - [redhat] don't build kernel docs - REMOVE ME IF ASKED (Mark Langsdorf)
  - Update dynamic ftrace configs (Pratyush Anand) [1186517]
  - KVM: Update RHMAINTAINERS (Andrew Jones)
  - redhat: Update RHMAINTAINERS for APM (Iyappan Subramanian) [1230887]
  - ahci_xgene: set ATA_HORKAGE_NOLPM for all attached disks (Kyle McMartin) [1229454]
  - KVM: fix vgic_v2_acpi_probe (Andrew Jones) [1226348]
  - crashkernel: Allocate 2G memory for auto reservation (Pratyush Anand)
  - DONOTUPSTREAM: arm64: smp_send_stop: increase CPU stop IPI timeout to 60 seconds (Jon Masters) [1218374]
  - arm64: move kdump memory init into arm64_memblock_init() (Mark Salter) [1219838]
  - arm64: support ACPI tables outside of kernel RAM (Mark Salter) [1219838]
  - tty/console: use SPCR table to define console (Torez Smith)
  - Add CONFIG_KEXEC_AUTO_RESERVE into generic config (Pratyush Anand) [https://bugzilla.redhat.com/show_bug.cgi?id=1216287]
  - crashkernel auto reservation code for ARM64 (Pratyush Anand) [https://bugzilla.redhat.com/show_bug.cgi?id=1216287]
  - forward port crashkernel auto reservation code (Dave Young) [https://bugzilla.redhat.com/show_bug.cgi?id=1216287]
  - arm64: KVM: Add CPU hyp mode re-initialization to complement KVM CPU reset (Wei Huang) [1169828]
  - config: increase CONFIG_CMA_SIZE_MBYTES from 16 to 64MB (Jon Masters) [1201885]
  - DO NOT UPSTREAM PCI: X-Gene1: Add ACPI MSI support (Jon Masters) [1201885]
  - arm64: kexec: Fix relocate_new_kernel when CONFIG_DEBUG_RODATA is enabled (Pratyush Anand) [1215041]
  - arm64: kexec: Remove arm64_kexec_dtb_addr refrences (Pratyush Anand) [1215036]
  - arm64: default CPUMASK_OFFSTACK for SMP (Don Dutile)
  - arm64: topology: Correct core_id calculation (Don Dutile)
  - 	drivers: net: xgene: Add shutdown function (Mark Salter) [1203109]
  - arm64: add smp spin-table cpu hotplug support for X-Gene platform (Mark Salter) [1209589]
  - Add CRASH_DUMP into generic config (Pratyush Anand)
  - arm64: use ioremap_cache in copy_oldmem_page (Pratyush Anand)
  - arm64/kdump: Find free area for crash kernel memory (Pratyush Anand)
  - arm: kvm: add stub implementation for kvm_cpu_reset() (Pratyush Anand)
  - arm64: kvm: add cpu reset at module exit (Pratyush Anand)
  - arm64: kvm: add cpu reset hook for cpu hotplug (Pratyush Anand)
  - arm64: kvm: allow EL2 context to be reset on shutdown (Pratyush Anand)
  - arm64: kvm: add a cpu tear-down function (Pratyush Anand)
  - arm64: kdump: do not go into EL2 before starting a crash dump kernel (Pratyush Anand)
  - arm64: add kdump support (Pratyush Anand)
  - arm64: kdump: implement machine_crash_shutdown() (Pratyush Anand)
  - arm64: kdump: reserve memory for crash dump kernel (Pratyush Anand)
  - arm64/kexec: Add pr_devel output (Pratyush Anand)
  - arm64/kexec: Add core kexec support (Pratyush Anand)
  - arm64: Add EL2 switch to soft_restart (Pratyush Anand)
  - arm64: Add new hcall HVC_CALL_FUNC (Pratyush Anand)
  - arm64: Convert hcalls to use HVC immediate value (Pratyush Anand)
  - arm64: Fold proc-macros.S into assembler.h (Pratyush Anand)
  - [redhat] kernel-3.19.0-0.69.aa7a (Mark Langsdorf)
  - Increase NR_CPUS from 8 to 4096 for RHELSA (Don Dutile) [1189951]
  - uprobe: Add uprobe_pre/post_sstep_notifier to NOKPROBE_SYMBOL (Pratyush Anand) [963432]
  - ARM64: Add symbols in NOKPROBE_SYMBOL (Pratyush Anand) [963432]
  - ARM64: Add uprobe support (Pratyush Anand) [963432]
  - ARM64: rename enum debug_el to enum debug_elx to fix "wrong kind of tag" (Pratyush Anand) [963432]
  - ARM64: Handle TRAP_BRKPT for user mode as well (Pratyush Anand) [963432]
  - ARM64: Handle TRAP_HWBRKPT for user mode as well (Pratyush Anand) [963432]
  - ARM64: Re-factor flush_ptrace_access (Pratyush Anand) [963432]
  - ARM64: Add helper for link pointer (Pratyush Anand) [963432]
  - ARM64: include asm-generic/ptrace.h in asm/ptrace.h (Pratyush Anand) [963432]
  - ARM64: fix kgdb_step_brk_fn to ignore other's exception (Pratyush Anand) [963432]
  - ARM64: kprobe: Make prepare and handler function struct kprobe independent (Pratyush Anand) [963432]
  - kprobes: Add arm64 case in kprobe example module (Pratyush Anand) [963432]
  - arm64: Add kernel return probes support (kretprobes) (Pratyush Anand) [963432]
  - arm64: Kprobes instruction simulation support (Pratyush Anand) [963432]
  - arm64: Kprobes with single stepping support (Pratyush Anand) [963432]
  - arm64: Add more test functions to insn.c (Pratyush Anand) [963432]
  - arm64: Add HAVE_REGS_AND_STACK_ACCESS_API feature (Pratyush Anand) [963432]
  - arm64: don't state topo is unsupported if !acpi (Don Dutile) [1186788]
  - arm64: Change 'Call trace' to 'Call Trace' for dump tools (Don Dutile) [1189098]
  - ARM64: gic: Do not allow bypass FIQ signals to reach to processor (Pratyush Anand) [1179954]
  - kernel-aarch64.spec: disable noarch kernel-doc (Kyle McMartin)
  - remove all uses of {name} in kernel-aarch64.spec.template (Mark Langsdorf) [1195790]
  - [redhat] kernel-3.19.0-0.68.aa7a (Mark Langsdorf)
  - update to 3.19 (Mark Langsdorf)
  - kernel-aarch64.spec: implement seperate binary and src rpm names (Mark Langsdorf)
  - Rename kernel.spec.template to kernel-aarch64.spec.template (Mark Langsdorf)
  - Change extension to aa7a (Mark Langsdorf)
  - remove legacy/non-server compile options for arm64 (Mark Langsdorf)
  - [redhat] Add and modify redhat configs for 3.19 (Don Dutile)
  - amd-xgbe-phy-a0: Add support for XGBE PHY on A0 (Tom Lendacky)
  - amd-xgbe-a0: Add support for XGBE on A0 (Tom Lendacky)
  - arm64: add smp parking protocol cpu hotplug support for X-Gene platform (Mark Langsdorf) [1175864]
  - arm64: remove wfe in arm64 spinlock to workaround Xgene Ax silicon bug (Don Dutile) [1081562]
  - xgene: add support for ACPI-probed serial port (Donald Dutile) [1144036]
  - Change POWER_RESET_XGENE to POWER_RESET_SYSCON (Don Dutile) [1065469]
  - arm64: Select reboot driver for X-Gene platform (Don Dutile) [1065469]
  - power: reset: Add generic SYSCON register mapped reset (Mark Langsdorf) [1065469]
  - virtio-mmio: add ACPI probing (Don Dutile) [1093352]
  - net: smc91x: add ACPI probing support (Mark Langsdorf) [1093352]
  - add support for ACPI identification to xhci-platform (Mark Langsdorf) [1080659]
  - make xhci platform driver use 64 bit or 32 bit DMA (Mark Langsdorf) [1080659]
  - DO NOT UPSTREAM: redhat: arm64: topology: Adjust sysfs topology (Don Dutile) [1056268 1127292]
  - arm64: add sev to parking protocol (Mark Salter)
  - arm64: add parking protocol support (Mark Salter)
  - KVM/ACPI: Enable ACPI support for virt arch timer (Wei Huang) [1144036]
  - Revert "arm64: kill flush_cache_all()" (Mark Langsdorf)
  - arm/arm64: DT: Fix GICv2 CPU interface size (Don Dutile)
  - arm: amba: of_platform_populate try deferred devices again (Andrew Jones) [963483]
  - arm64: don't set READ_IMPLIES_EXEC for EM_AARCH64 ELF objects (Kyle McMartin) [1085528]
  - pci: add support for setting DMA ops from ACPI info (Mark Salter)
  - DO NOT UPSTREAM - pci/xgene: Provide fixup for ACPI MCFG support (Mark Salter) [1185078]
  - DO NOT UPSTREAM - provide hook for MCFG fixups (Mark Salter) [1185078]
  - arm64/pci/acpi: initial support for ACPI probing of PCI (Mark Salter) [1185078]
  - pci, acpi: Share ACPI PCI config space accessors. (Mark Salter) [1185078]
  - x86, acpi, pci: mmconfig_64.c becomes default implementation for arch agnostic low-level direct PCI config space accessors via MMCONFIG. (Mark Salter) [1185078]
  - x86, acpi, pci: mmconfig_{32, 64}.c code refactoring - remove code duplication. (Mark Salter) [1185078]
  - x86, acpi, pci: Move PCI config space accessors. (Mark Salter) [1185078]
  - x86, acpi, pci: Move arch-agnostic MMCFG code out of arch/x86/ directory (Mark Langsdorf) [1185078]
  - x86, acpi, pci: Reorder logic of pci_mmconfig_insert() function (Mark Salter) [1185078]
  - DO NOT UPSTREAM YET: Clean up GIC irq domain for ACPI (Mark Langsdorf)
  - DO NOT UPSTREAM YET: Introducing ACPI support for GICv2m (Mark Salter) [1185078]
  - PCI/MSI: Drop domain field from msi_controller (Mark Salter) [1185078]
  - PCI/MSI, xgene: Remove references to mchip.domain in pci-xgene-msi (Mark Langsdorf)
  - irqchip: gicv3-its: Get rid of struct msi_controller (Marc Zyngier)
  - irqchip: GICv2m: Get rid of struct msi_controller (Mark Salter) [1185078]
  - PCI/MSI: Let pci_msi_get_domain use struct device's msi_domain (Mark Salter) [1185078]
  - PCI/MSI: of: Allow msi_domain lookup using the PHB node (Mark Salter) [1185078]
  - PCI/MSI: of: Add support for OF-provided msi_domain (Mark Salter) [1185078]
  - PCI/MSI: Add hooks to populate the msi_domain field (Mark Salter) [1185078]
  - device core: Introduce per-device MSI domain pointer (Mark Salter) [1185078]
  - arm64/perf: add ACPI support (Mark Salter) [1152120]
  - acpi: add utility to test for device dma coherency (Mark Salter) [1144036]
  - crash: enable /dev/crash driver (Mark Langsdorf) [1077329]
  - arm64/acpi: DO NOT UPSTREAM set ACPI enabled by default (Mark Langsdorf)
  - acpi/arm64: remove EXPERT dependency (Mark Salter) [1163947]
  - [debuginfo] enable generation (Donald Dutile)
  - [redhat] Import redhat/ subdirectory (Mark Langsdorf)


author: Mark Langsdorf <mlangsdo@redhat.com> [4.5.0-10.el7]
changelog:
  - CVE-2016-6480 aacraid: Check size values after double-fetch from user (Mark Salter) [1369775]
  - xfs: revert "xfs: Don't wrap growfs AGFL indexes" (Eric Sandeen) [1373963]
  - xfs: revert "libxfs: pack the agfl header structure so XFS_AGFL_SIZE is correct" (Eric Sandeen) [1373963]
  - xfs: track and serialize in-flight async buffers against unmount (Eric Sandeen) [1373963]
  - xfs: exclude never-released buffers from buftarg I/O accounting (Eric Sandeen) [1373963]
  - xfs: don't reset b_retries to 0 on every failure (Eric Sandeen) [1373963]
  - xfs: remove extraneous buffer flag changes (Eric Sandeen) [1373963]
  - xfs: fix xfs_error_get_cfg for negative errnos (Eric Sandeen) [1373963]
  - xfs: cancel eofblocks background trimming on remount read-only (Eric Sandeen) [1373963]
  - xfs: add "fail at unmount" error handling configuration (Eric Sandeen) [1373963]
  - xfs: add configuration handlers for specific errors (Eric Sandeen) [1373963]
  - xfs: add configuration of error failure speed (Eric Sandeen) [1373963]
  - xfs: introduce table-based init for error behaviors (Eric Sandeen) [1373963]
  - xfs: add configurable error support to metadata buffers (Eric Sandeen) [1373963]
  - xfs: introduce metadata IO error class (Eric Sandeen) [1373963]
  - xfs: configurable error behavior via sysfs (Eric Sandeen) [1373963]
  - xfs: disallow rw remount on fs with unknown ro-compat features (Eric Sandeen) [1373963]
  - xfs: fix xfs_log_ticket leak in xfs_end_io() after fs shutdown (Eric Sandeen) [1373963]
  - xfs: clean up unwritten buffers on write failure (Eric Sandeen) [1373963]
  - xfs: Split default quota limits by quota type (Eric Sandeen) [1373963]
  - quota: Fixup comments about return value of Q_[X]GETNEXTQUOTA (Eric Sandeen) [1373963]
  - xfs: wire up Q_XGETNEXTQUOTA / get_nextdqblk (Eric Sandeen) [1373963]
  - xfs: Factor xfs_seek_hole_data into helper (Eric Sandeen) [1373963]
  - xfs: get quota inode from mp & flags rather than dqp (Eric Sandeen) [1373963]
  - xfs: don't overflow quota ID when initializing dqblk (Eric Sandeen) [1373963]
  - quota: add new quotactl Q_GETNEXTQUOTA (Eric Sandeen) [1373963]
  - quota: add new quotactl Q_XGETNEXTQUOTA (Eric Sandeen) [1373963]
  - quota: remove unused cmd argument from quota_quotaon() (Eric Sandeen) [1373963]


author: Mark Langsdorf <mlangsdo@redhat.com> [4.5.0-12.el7]
changelog:
  - arm64: Call numa_store_cpu_info() earlier. (David Daney) [1377488]
  - redhat: config: arm64: Turn off DMA driver (Iyappan Subramanian) [1376872]
  - copy x509.genkey to certs/ directory (Jeffrey Bastian) [1377468]
  - PCI: Vulcan: AHCI PCI bar fix for Broadcom Vulcan early silicon (Ashok Kumar Sekar) [1376499]


author: Mark Langsdorf <mlangsdo@redhat.com> [4.5.0-13.el7]
changelog:
  - dm mpath: delay the requeue of blk-mq requests while all paths down (Mike Snitzer) [1376926]
  - dm mpath: use dm_mq_kick_requeue_list() (Mike Snitzer) [1376926]
  - dm rq: introduce dm_mq_kick_requeue_list() (Mike Snitzer) [1376926]
  - dm rq: reduce arguments passed to map_request() and dm_requeue_original_request() (Mike Snitzer) [1376926]
  - dm rq: add DM_MAPIO_DELAY_REQUEUE to delay requeue of blk-mq requests (Mike Snitzer) [1376926]
  - blk-mq: introduce blk_mq_delay_kick_requeue_list() (Mike Snitzer) [1376926]
  - dm: convert wait loops to use autoremove_wake_function() (Mike Snitzer) [1376926]
  - dm: use signal_pending_state() in dm_wait_for_completion() (Mike Snitzer) [1376926]
  - dm: rename task state function arguments (Mike Snitzer) [1376926]
  - dm: add two lockdep_assert_held() statements (Mike Snitzer) [1376926]
  - dm rq: simplify dm_old_stop_queue() (Mike Snitzer) [1376926]
  - dm mpath: check if path's request_queue is dying in activate_path() (Mike Snitzer) [1376926]
  - dm rq: take request_queue lock while clearing QUEUE_FLAG_STOPPED (Mike Snitzer) [1376926]
  - dm rq: factor out dm_mq_stop_queue() (Mike Snitzer) [1376926]
  - dm: mark request_queue dead before destroying the DM device (Mike Snitzer) [1376926]
  - dm: return correct error code in dm_resume()'s retry loop (Mike Snitzer) [1376926]
  - dm flakey: fix reads to be issued if drop_writes configured (Mike Snitzer) [1376926]
  - dm crypt: increase mempool reserve to better support swappin (Mike Snitzer) [1376926]
  - dm round robin: do not use this_cpu_ptr() without having preemption disabled (Mike Snitzer) [1376926]
  - dm: set DMF_SUSPENDED* _before_ clearing DMF_NOFLUSH_SUSPENDING (Mike Snitzer) [1376926]
  - dm rq: fix the starting and stopping of blk-mq queues (Mike Snitzer) [1376926]
  - dm mpath: add locking to multipath_resume and must_push_back (Mike Snitzer) [1376926]
  - dm flakey: error READ bios during the down_interval (Mike Snitzer) [1376926]
  - dm btree: fix a bug in dm_btree_find_next_single() (Mike Snitzer) [1376926]
  - dm: call PR reserve_unreserve on each underlying device (Mike Snitzer) [1376926]
  - dm: fix second blk_delay_queue() parameter to be in msec units not jiffies (Mike Snitzer) [1376926]
  - dm rq: check kthread_run return for .request_fn request-based DM (Mike Snitzer) [1376926]
  - dm verity fec: fix block calculation (Mike Snitzer) [1376926]
  - dm ioctl: Simplify parameter buffer management code (Mike Snitzer) [1376926]
  - dm crypt: Fix sparse complaints (Mike Snitzer) [1376926]
  - dm mpath: add optional "queue_mode" feature (Mike Snitzer) [1376926]
  - dm mpath: remove bio-based bloat from struct dm_mpath_io (Mike Snitzer) [1376926]
  - dm mpath: reinstate bio-based support (Mike Snitzer) [1376926]
  - dm: move request-based code out to dm-rq.[hc] (Mike Snitzer) [1376926]
  - dm raid: make sure no feature flags are set in metadata (Mike Snitzer) [1376926]
  - dm ioctl: drop use of __GFP_REPEAT in copy_params()'s __vmalloc() call (Mike Snitzer) [1376926]
  - dm stats: fix spelling mistake in Documentation (Mike Snitzer) [1376926]
  - dm cache: update cache-policies.txt now that mq is an alias for smq (Mike Snitzer) [1376926]
  - dm mpath: eliminate use of spinlock in IO fast-paths (Mike Snitzer) [1376926]
  - dm mpath: move trigger_event member to the end of 'struct multipath' (Mike Snitzer) [1376926]
  - dm mpath: use atomic_t for counting members of 'struct multipath' (Mike Snitzer) [1376926]
  - dm mpath: switch to using bitops for state flags (Mike Snitzer) [1376926]
  - dm thin: Remove return statement from void function (Mike Snitzer) [1376926]
  - dm: remove unused mapped_device argument from free_tio() (Mike Snitzer) [1376926]
  - dm cache metadata: fix cmd_read_lock() acquiring write lock (Mike Snitzer) [1376926]
  - dm cache metadata: fix READ_LOCK macros and cleanup WRITE_LOCK macros (Mike Snitzer) [1376926]
  - dm: fix dm_target_io leak if clone_bio() returns an error (Mike Snitzer) [1376926]
  - dm: fix rq_end_stats() NULL pointer in dm_requeue_original_request() (Mike Snitzer) [1376926]
  - dm thin: consistently return -ENOSPC if pool has run out of data space (Mike Snitzer) [1376926]
  - dm cache: bump the target version (Mike Snitzer) [1376926]
  - dm cache: make sure every metadata function checks fail_io (Mike Snitzer) [1376926]
  - dm: add missing newline between DM_DEBUG_BLOCK_STACK_TRACING and DM_BUFIO (Mike Snitzer) [1376926]
  - dm cache policy smq: clarify that mq registration failure was for 'mq' (Mike Snitzer) [1376926]
  - dm: return error if bio_integrity_clone() fails in clone_bio() (Mike Snitzer) [1376926]
  - dm thin metadata: don't issue prefetches if a transaction abort has failed (Mike Snitzer) [1376926]
  - dm snapshot: disallow the COW and origin devices from being identical (Mike Snitzer) [1376926]
  - dm cache: make the 'mq' policy an alias for 'smq' (Mike Snitzer) [1376926]
  - dm: drop unnecessary assignment of md->queue (Mike Snitzer) [1376926]
  - dm: reorder 'struct mapped_device' members to fix alignment and holes (Mike Snitzer) [1376926]
  - dm: remove dummy definition of 'struct dm_table' (Mike Snitzer) [1376926]
  - dm: add 'dm_numa_node' module parameter (Mike Snitzer) [1376926]
  - dm thin metadata: remove needless newline from subtree_dec() DMERR message (Mike Snitzer) [1376926]
  - dm mpath: cleanup reinstate_path() et al based on code review (Mike Snitzer) [1376926]
  - dm mpath: remove __pgpath_busy forward declaration, rename to pgpath_busy (Mike Snitzer) [1376926]
  - dm mpath: switch from 'unsigned' to 'bool' for flags where appropriate (Mike Snitzer) [1376926]
  - dm round robin: use percpu 'repeat_count' and 'current_path' (Mike Snitzer) [1376926]
  - dm path selector: remove 'repeat_count' return from .select_path hook (Mike Snitzer) [1376926]
  - dm mpath: push path selector locking down to path selectors (Mike Snitzer) [1376926]
  - dm mpath: remove repeat_count support from multipath core (Mike Snitzer) [1376926]
  - dm mpath: remove unnecessary casts in front of ti->private (Mike Snitzer) [1376926]
  - dm mpath: use blk_mq_alloc_request() and blk_mq_free_request() directly (Mike Snitzer) [1376926]
  - dm mpath: cleanup 'struct dm_mpath_io' management code (Mike Snitzer) [1376926]
  - dm mpath: use blk-mq pdu for per-request 'struct dm_mpath_io' (Mike Snitzer) [1376926]
  - dm: allow immutable request-based targets to use blk-mq pdu (Mike Snitzer) [1376926]
  - dm: rename target's per_bio_data_size to per_io_data_size (Mike Snitzer) [1376926]
  - dm: distinquish old .request_fn (dm-old) vs dm-mq request-based DM (Mike Snitzer) [1376926]
  - dm: remove support for stacking dm-mq on .request_fn device(s) (Mike Snitzer) [1376926]
  - dm: fix a couple locking issues with use of block interfaces (Mike Snitzer) [1376926]
  - dm: allocate blk_mq_tag_set rather than embed in mapped_device (Mike Snitzer) [1376926]
  - dm: add 'dm_mq_nr_hw_queues' and 'dm_mq_queue_depth' module params (Mike Snitzer) [1376926]
  - dm: optimize dm_request_fn() (Mike Snitzer) [1376926]
  - dm: optimize dm_mq_queue_rq() (Mike Snitzer) [1376926]
  - dm: set DM_TARGET_WILDCARD feature on "error" target (Mike Snitzer) [1376926]
  - dm: cleanup dm_any_congested() (Mike Snitzer) [1376926]
  - dm: remove unused dm_get_rq_mapinfo() (Mike Snitzer) [1376926]
  - dm: fix excessive dm-mq context switching (Mike Snitzer) [1376926]
  - dm: fix sparse "unexpected unlock" warnings in ioctl code (Mike Snitzer) [1376926]
  - dm: do not return target from dm_get_live_table_for_ioctl() (Mike Snitzer) [1376926]


author: Mark Langsdorf <mlangsdo@redhat.com> [4.5.0-14.el7]
changelog:
  - DO NOT UPSTREAM: cputopo: support multiple sockets (Andrew Jones) [1378244]
  - xfs: quiesce the filesystem after recovery on readonly mount (Eric Sandeen) [1365979]
  - xfs: log recovery tracepoints to track current lsn and buffer submission (Jeffrey Bastian) [1379821]
  - xfs: update metadata LSN in buffers during log recovery (Jeffrey Bastian) [1379821]
  - xfs: don't warn on buffers not being recovered due to LSN (Jeffrey Bastian) [1379821]
  - xfs: pass current lsn to log recovery buffer validation (Jeffrey Bastian) [1379821]
  - xfs: rework log recovery to submit buffers on LSN boundaries (Jeffrey Bastian) [1379821]


author: Duc Dang <dhdang@apm.com> [4.5.0-17.el7]
changelog:
  - Integrate upstream fix to make X-Gene HWmon access mailbox as RAM and avoid eror when built as module
  - Integrated posted patch to support SMBus block read/write for Designware I2C
  - Integrate upstream fix for GIC default PCI IRQ polarity
  - Integrate upstream updates for X-Gene Enet driver
  - Avoid dma_buffer overrun for SlimPRO I2C driver 
  - Add X-Gene SoC PMU support
  - Add X-Gene HWMon support
  - mailbox: PCC: Fix return value of pcc_mbox_request_channel
  - Add cpufreq CPPC bug fixes


author: Duc Dang <dhdang@apm.com> [4.5.0-18.el7]
changelog:
  - Integrate upstream fix for a lockdep warning when request PCC channel
  - Backport upstream patches to support fwupdate
  - Integrate upstream patch to add interrupt support for X-Gene Standby GPIO


author: Jim Perrin <jperrin@centos.org> [4.5.0-21.el7]
changelog:
  - Fix Cavium retrain link patch
  - Apply APM patches 1029, 1030 
  - Add CONFIG_LEDS_PCA955X and CONFIG_LEDS_PCA963X


author: Jim Perrin <jperrin@centos.org> [4.5.0-21.el7]
changelog:
  - Fix Cavium retrain link patch
  - Apply APM patches 1029, 1030
  - Add CONFIG_LEDS_PCA955X and CONFIG_LEDS_PCA963X


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - Add patch for HID i2c from Seth Forshee (rhbz 1188439)
  - CVE-2015-0275 ext4: fallocate zero range page size > block size BUG (rhbz 1193907 1195178)


author: Josh Boyer <jwboyer@fedoraproject.org> - 4.0.0-0.rc6.git1.1
changelog:
  - Linux v4.0-rc6-31-gd4039314d0b1
  - CVE-2015-2150 xen: NMIs triggerable by guests (rhbz 1196266 1200397)


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-9
changelog:
  - kdumpctl: bail out earlier in case of no reserved memory
  - kdumpctrl: kdump feasibility should fail if no crash memory
  - kdumpctl: improve "while read" time for /etc/kdump.conf
  - kdumpctl: update check_dump_fs_modified() to use "lsinitrd -f"
  - kdumpctl: improve check_wdt_modified()
  - kdumpctl: remove is_mode_switched()
  - arm64: cmdline: modify to optimize size for memory reservation


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-10
changelog:
  - kdumpctl: call strip_comments only when necessary to speedup
  - Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-12
changelog:
  - kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
  - Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-14
changelog:
  - kdump.conf.5: clarify the fence_kdump_nodes option
  - kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-15
changelog:
  - Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
  - udev rules: mask cpu hotplug rules


author: Pingfan Liu <piliu@redhat.com> 2.0.15-3
changelog:
  - makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
  - makedumpfile: ppc64: get the info of mem reserved for crashkernel
  - makedumpfile: Fix SECTION_MAP_MASK for kernel >= v.13


author: Pingfan Liu <piliu@redhat.com> 2.0.15-5
changelog:
  - Revert "Update kdump anaconda addon"
  - Revert "Update kdump anaconda addon: fix the md5sum in source file"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-7
changelog:
  - mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
  - Change dump_to_rootfs to use "--mount" instead of "root=X"
  - kdumpctl: move is_fadump_capable() to kdump-lib.sh
  - module-setup: fix 99kdumpbase network dependency
  - mkdumprd: change for_each_block_target() to use get_kdump_targets()
  - kdump-lib.sh: introduce get_kdump_targets()
  - kdump-lib.sh: fix improper get_block_dump_target()
  - kdumpctl: remove "root=X" for kdump boot
  - kdumpctl: fix a bug in remove_cmdline_param()


author: Pingfan Liu <piliu@redhat.com> 2.0.15-9
changelog:
  - makedumpfile: Fix 'kernel_version' variable being uninitialized & introduce minor reorganization
  - makedumpfile: Fix segmentation fault when using --split on a vmcore
  - dracut-module-setup.sh: check whether to include multipath-hostonly or not


author: Pingfan Liu <piliu@redhat.com> 2.0.15-10
changelog:
  - kexec-tools.spec: require dracut >= 033-522 to make 99kdump module installed correctly
  - kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
  - Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-11
changelog:
  - dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
  - kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
  - kdumpctl: skip selinux-relabel for dracut_args --mount dump target


author: Pingfan Liu <piliu@redhat.com> 2.0.15-13
changelog:
  * Thu Feb 1 2018 Pingfan Liu <piliu@redhat.com> 2.0.15-12
  - makedumpfile/sadump: Fix a problem of PTI enabled kernel
  - makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'


author: Pingfan Liu <piliu@redhat.com> 2.0.15-14
changelog:
  - kdumpctl: Remove 'netroot' and 'iscsi initiator' entries from kdump cmdline
  - doc: remove btrfs from supported filesystems list
  - Update kdump anaconda addon
  - makedumpfile/arm64: Add '--mem-usage' support
  - Fix warning about persistent device name not found.
  - kdumpctl: Check the modification time of core_collector
  - kdump.sysconfig.x86_64: Remove 'notsc' from KDUMP_COMMANDLINE_REMOVE
  - makedumpfile: fix for hugepages filtering


author: Pingfan Liu <piliu@redhat.com> 2.0.15-15
changelog:
  - dracut-module-setup.sh: pass ip=either6 param for ipv6
  - dracut-module-setup.sh: install /etc/hosts when using fence_kdump
  - update kdump-anaconda-addon-003-29-g4c517c5.tar.gz


author: Pingfan Liu <piliu@redhat.com> 2.0.15-18
changelog:
  kdumpctl: Rebuild initramfs if loaded kernel modules changed
  dracut-module-setup.sh: don't include multipath-hostonly
  Add document to declare FCoE support (V2)
  Revert "Add document to declare FCoE support"
  Add document to declare FCoE support
  makedumpfile: fix makedumpfile Not tainted in 2nd kernel


author: Pingfan Liu <piliu@redhat.com> 2.0.15-20
changelog:
  - makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
  - dracut-module-setup: Fix DRM module inclusion test for hyper-v
  - kdumpctl: remove some cmdline inheritage from 1st kernel
  - kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
  - kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
  - Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
  - dracut-module-setup: Fix test for inclusion of DRM modules


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-24
changelog:
  - mkdumprd: use --quiet dracut argument to speedup initramfs build
  - mkdumprd: refine regex on dropping mount options


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-32
changelog:
  - makedumpfile: exclude pages that are logically offline
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-33
changelog:
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
    [Fix the Fix the patch to make sure makedumpfile-1.6.2/ path is used]


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-34
changelog:
  - kdump.sysconfig/x86_64: Disable HEST by default
  - Introduce kdumpctl rebuild command and update document


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-37
changelog:
  - dracut-module-setup: get localhost alias by manual
  - dracut-module-setup: filter out localhost for generic_fence_kdump
  - kdumpctl: distinguish the reason for ssh failure


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43
changelog:
  - module-setup: re-fix 99kdumpbase network dependency
  - kdumpctl: bail out immediately if host key verification failed


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48
changelog:
  - dracut-module-setup.sh: ensure cluster info is ready before query.
  - dracut-module-setup.sh: improve get_alias()


author: Baoquan He <bhe@redhat.com> - 2.0.7-33
changelog:
  mkdumprd: Remove ifcfg from dracut's modules
  arm64: move -fno-exceptions from purgatory code to spec file
  module-setup: Choose the first matched gateway in kdump_static_ip


author: Baoquan He <bhe@redhat.com> - 2.0.7-34
changelog:
  arm64: Overwrite CFLAGS and remove -fno-exceptions from kexec purgatory code
  Fix comment to exclude keyword 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  }" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches  }" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "aarch64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=aarch64-redhat-linux-gnu --host=aarch64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info
  Revert "arm64: move -fno-exceptions from purgatory code to spec file"


author: David Howells <dhowells@redhat.com>
changelog:
  - Adjust the manual page for 'keyctl unlink' to show keyring is optional.
  - Add --version support for the keyutils version and build date.


author: David Howells <dhowells@redhat.com> - 1.5.4-1
changelog:
  - Fix the keyctl padd command and similar to handle binary input.
  - Make keyctl show able to take a keyring to dump.
  - Make keyctl show able to take a flag to request hex key IDs.
  - Make keyctl show print the real ID of the root keyring.


author: David Howells <dhowells@redhat.com> - 1.5.6-1
changelog:
  - Fix the request-key.conf.5 manpage.
  - Fix the max depth of key tree dump (keyctl show) [BZ 1002761].
  - The input buffer size for keyctl padd and pinstantiate should be larger [BZ 1002761].
  - Add keyctl_invalidate.3 manpage [BZ 1002761].


author: David Howells <dhowells@redhat.com> - 1.5.7-1
changelog:
  - Provide a utility function to find a key by type and name.
  - Allow keyctl commands to take a type+name arg instead of a key-id arg.
  - Add per-UID get_persistent keyring function [BZ 1014739].


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-2
changelog:
  - Resolves: #997594, misbehaving checkbox "Allow encryption with untrusted keys"
  - Resolves: #997599, Key Manager does not refresh after change
  - Resolves: #999850, shows error message despite the change was successful


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.4.0-2
changelog:
  - update docbook version to make doc-translations build with kdelibs >= 4.5,
    fixes FTBFS (#599843)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.10.1-2
changelog:
  - pull a few upstream patches, in particular...
  - kmix crahes moving streams between sinks (#922849)


author: David Shea <dshea@redhat.com> - 20-6
changelog:
  - Accept '.' as part of a symbol exported by the kernel
    Resolves: rhbz#1283486
  - Check the addon modules of the new kernel for exported symbols
    Resolves: rhbz#1296465


author: Tony Camuso <tcamuso@redhat.com> - 20-9
changelog:
  - Must be bumped to 20-9 due to changes and version bumps in the
    7.2-z stream.
    Resolves: rhbz#1320204


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-10
changelog:
  - weak-modules: deprecate --delete-modules switch.
  - weak-modules: implement some pathes configuration from cmdline.
  - weak-modules: redesign to reuse depmod -aeE functionality
    (with some preparation changes).
    This is an updated version of the script which doesn't support
    multiple installation of the same out-of-tree module (stored in the
    'extra' subdirectory). But it more correctly checks dependencies
    between the modules.
    Resolves: rhbz#1367942


author: Tony Camuso <tcamuso@redhat.com> - 20-10
changelog:
  - Rename patches so they are not specific to the build. This was
    causing problems with z-stream builds.
    Resolves: rhbz#1416498


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-12
changelog:
  - weak-modules: fix coverity introduced by latest changes
  - weak-modules: fix "permission denied" on some upgrades.
    Resolves: rhbz#1416566


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.2
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1482385


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.3
changelog:
  - weak-modules: implement dry run by symlink restoration.
  - weak-modules: fix dry-run for non-lib-modules installation.
    Resolves: rhbz#1489696.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.5
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1511943.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-17
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1468305
  - weak-modules: implement dry run by symlink restoration.
    Resolves: rhbz#1477073


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-18
changelog:
  - depmod: external directories support.
    Resolves: rhbz#1361857
  - BuildRequires automake autoconf libtool.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-20
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1510058


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-23
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1619889.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-26
changelog:
  - weak-modules: handle independent modules in one run
  - weak-modules: use asterisk for kernel version in sandbox
    Resolves: rhbz#1695547


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-28
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1774925


author: David Shea <dshea@redhat.com> - 20-5
changelog:
  - Check for changes in non-module files that affect that initramfs
    Resolves: rhbz#1108166
  - Use dracut to skip early cpio archives in the initramfs
    Resolves: rhbz#1210449


author: Radek Novacek <rnovacek@redhat.com> 0.9.0-3
changelog:
  - Enable direct calls
  - Fix method arguments that are both input and output
  - Don't install Find*.cmake files


author: Radek Novacek <rnovacek@redhat.com> 0.9.1-3
changelog:
  - Set format(printf) attribute to __KReturn2 function
  - Fix possible integer overflow
  - Resolves: rhbz#1000434, rhbz#1000430


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-40
changelog:
  - pull in fix from master to make reporting of errors encountered by
    the SPNEGO mechanism work better (RT#7045, part of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-42
changelog:
  - add proposed patch to fix the GSSAPI library's checks for expired
    client creds in gss_init_sec_context() so that they work with keyring
    caches (RT#7820, #1030607)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-44
changelog:
  - pull in and backport multiple changes to allow replay caches to be added to
    a GSS credential store as "rcache"-type credentials (RT#7818/#7819/#7836,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-46
changelog:
  - pull in patch from master to move the default directory which the KDC uses
    when computing the socket path for a local OTP daemon from the database
    directory (/var/kerberos/krb5kdc) to the newly-added run directory
    (/run/krb5kdc), in line with what we're expecting in 1.13 (RT#7859, more
    of #1040056 as #1063905)
  - add a tmpfiles.d configuration file to have /run/krb5kdc created at
    boot-time
  - own /var/run/krb5kdc


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-47
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1066002, RT#7858)


author: Nathaniel McCallum <npmccallum@redhat.com> - 1.11.3-48
changelog:
  - add Nathaniel's backported fix for to make password changes work properly
    when performed while obtaining creds over FAST (RT#7868, #1072579)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-49
changelog:
  - mark the pkinit module "nodelete" so that applications which cause it
    to be loaded and unloaded repeatedly don't suffer from memory loss when
    libcrypto is initialized, allocating memory in the process, and then
    unloaded along with the module (most of #1063732)
  - when copying creds from one ccache to another, if we single out one
    server for which creds shouldn't be copied, don't leak the memory
    that those creds use (a bit more of #1063732)
  - fix an uninitialized variable warning that could, rarely, cause a
    service-unavailable error to be reported when a server was merely
    unreachable (spotted while chasing #1063732)
  - don't leak the per-request context allocated by preauth modules (a
    bit more of #1063732)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-5
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1078888)
  - define _GNU_SOURCE in files where we use EAI_NODATA, to make sure that
    it's declared (#1059730,#1084068,#1109102)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-6
changelog:
  - backport patch to make the client skip checking the server's reply
    address when processing responses to password-change requests, which
    between NAT and upcoming HTTPS support, can cause us to erroneously
    report an error to the user when the server actually reported success
    (RT#7886)
  - backport support for accessing KDCs and kpasswd services via HTTPS
    proxies (marked by being specified as https URIs instead as hostnames
    or hostname-and-port), such as the one implemented in python-kdcproxy
    (RT#7929, #109919), and pick up a subsequent patch to build HTTPS
    as a plugin


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-8
changelog:
  - fix the problem where the %license file has been a dangling symlink
  - ksu: pull in fix from pull #206 to avoid breakage when the
    default_ccache_name doesn't include a cache type as a prefix
  - ksu: pull in a proposed fix for pull #207 to avoid breakage when the
    invoking user doesn't already have a ccache


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-9
changelog:
  - Undo libkadmclnt SONAME change (from 8 to 9) which originally
    happened in the krb5 1.12 rebase (#1166012) but broke
    rubygem-rkerberos (sort of ruby language bindings for
    libkadmclnt&co.) dependicies, as side effect of
    rubygem-rkerberos using private interfaces in libkadmclnt.


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-10
changelog:
  - In ksu, without the -e flag, also check .k5users (#1105489)
    When ksu was explicitly told to spawn a shell, a line in .k5users which
    listed "*" as the allowed command would cause the principal named on the
    line to be considered as a candidate for authentication.
    When ksu was not passed a command to run, which implicitly meant that
    the invoking user wanted to run the target user's login shell, knowledge
    that the principal was a valid candidate was ignored, which could cause
    a less optimal choice of the default target principal.
    This doesn't impact the authorization checks which we perform later.
    Patch by Nalin Dahyabhai <nalin@redhat.com>


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-13
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9423 (#1179863) "libgssrpc server applications
    leak uninitialized bytes (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-14
changelog:
  - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, "Do not
    loop on principal unknown errors").


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-29
changelog:
  - Process profile includedir in sorted order
  - Also, ignore dotfiles in included directories
  - Resolves: #1539824


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-32
changelog:
  - Include preauth name in trace output if possible
  - Update cert generation scripts to work on modern openssl
  - Fix per-request preauth scoping
  - Add test case for PKINIT DH renegotiation
  - Echo KDC cookies in preauth tryagain
  - Fall back to other preauth mechanisms after failures
  - Resolves: #1540130


author: Robbie Harwood <rharwood@redhat.com> - 1.15-1
changelog:
  - Rebase to 1.15-final
  - Resolves: #1389073
  - Resolves: #1367169
  - Resolves: #1389072
  - Resolves: #1366863


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-1
changelog:
  - Bump to krb5-1.15.1 (very small change)
  - Apply some sanity to our patches and ordering
  - Resolves: #1389073


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-4
changelog:
  - Backport certauth plugin and related pkinit changes
  - Note: related changes cannot be tested because RHEL does not allow
    binary git diffs
  - Resolves: #1428484


author: Siteshwar Vashisht <svashisht@redhat.com> - 20120801-37
changelog:
  - Add configuration option to enable signal bubbling for backward compatibility
    Resolves: #1484937


author: Kamil Dudka <kdudka@redhat.com> - 20120801-137
changelog:
  - Increase the release number by 100 to make sure it stays higher than in RHEL-6
    Related: #1484937


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-15
changelog:
  - fix argv rewrite (#1047507)
  - fix memory leak (#1048995)
  - standard error output could get misdirected (#1048272)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-19
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1070328)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-20
changelog:
  - fix segfault in job list code (#1084406)
  - do not resend signal on termination (#1085385)
  - fix brace expansion on/off (#1099935)
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1070871)
  - fix parser errors related to the end of the here-document marker (#1111120)
  - ksh hangs when command substitution fills out the pipe buffer (#1077090)
  - using typeset -l with a restricted variabled caused segmentation fault (#1121960)
  - monitor mode was documented incorrectly (#1100215)
  - do not crash when unsetting running function from another one (#1100215)
  - should report an error when trying to cd into directory without execution bit (#1109893)
  - job locking mechanism did not survive compiler optimization (#1116506)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-21
changelog:
  - include symlink for restricted shell (#1146161)
  - ksh hangs when command substitution containing pipe fills out the pipe buffer (#1138751)
  - current directory could differ from PWD (#1135573)
  - cd builtin could break IO redirection (#1133585)
  - return code from a function could be wrong (#1116507)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - closing a file descriptor in a command substitution caused loss of the output (#1202439)
  - fix: in a login shell "( cmd & )" does nothing (#1217237)
  - exporting fixed with variable corrupted its data (#1192026)
  - fix segfault when handling a trap (#1211540)
  - combining alarm and IFS caused segfault (#1192119)
  - declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
  - do not inherit invalid variables during shell initializaton (#1211538)
  - case in a for loop inside a subshell caused syntax error (#1241014)


author: jchaloup <jchaloup@redhat.com> - 1.2.0-0.7.alpha7.git8632732
changelog:
  - Bump to upstream 125f050150ef45b31e6b671d269bb69dc93541e5
    Disable extensions/v1beta1 implicitly
    resolves: #1314728


author: jchaloup <jchaloup@redhat.com> - 1.2.0-0.11.git738b760
changelog:
  - Set correct permissions for kubernetes-unit-test/docs/user-guide/ui.md (not shipped)
    related: #1327666


author: Jan Chaloupka <jchaloup@redhat.com> - 1.4.0-0.1.git87d9d8d
changelog:
  - Update to ose v3.4.0.34
    resolves: #1403892
  - Add missing dependency of kube-proxy on conntrack-tools
    resolves: #1403196


author: Robert Scheck <robert@fedoraproject.org> - 1.13-5
changelog:
  - Really added the plugindir patch now (thanks to Karsten Hopp)
  - Avoid the make errors because of mkdirhier better than until now


author: Jakub Martisko <jamartis@redhat.com> - 3.4.2-7
changelog:
  - fix issue with creation of srpm where __isa_bits on noarch leads to an error
  - Related: rhbz#1176026


author: Remi Collet <rcollet@redhat.com> - 2.4.0-4
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/Php56
  - add numerical prefix to extension configuration file
  - drop unneeded dependency on pecl
  - add provides php-lasso


author: John Dennis <jdennis@redhat.com> - 2.4.1-7
changelog:
  - Add ECP support, brings Lasso up to current upstream tip + revised ECP patches
    Resolves: #1205342


author: John Dennis <jdennis@redhat.com> - 2.4.1-8
changelog:
  - Add explicit minimum dependency on glib2 2.42,
    for some reason RPM is not automatically detecting the dependency
    Resolves: #1254989


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3
changelog:
  - Resolves: #1634267 - ECP signature check fails with
                         LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                         instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4
changelog:
  - Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5
changelog:
  - Resolves: #1719014 - Expired certificate prevents tests from running
  - Actually apply the patch file for the previous build
  - Related: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6
changelog:
  - Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                         vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7
changelog:
  - Fix Coverity warning introduced by the previous patch
  - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                        vulnerability when parsing SAML responses


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-6
changelog:
  - Build both with and without GUI to allow the use on systems where Gtk
    dependency is undesirable. The latencytop package is still the full-blown build.
    latencytop-tui is the miminal build. latencytop-common has the shared files.


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-7
changelog:
  - Remove the broken fsync view, stop using the obsolete 'tracing_enabled'.
  - Better error message when run as non-root.


author: Richard Hughes <richard@hughsie.com> 2.4-1
changelog:
  - Update to new upstream version.
  - Black point detection from the algorithm disclosed by Adobe
  - Added support for transforms on planar data with different stride
  - Added a new plug-in type for optimizing full transforms
  - Linear (gamma 1.0) profiles can now operate in unbounded mode
  - Added "half" float support


author: Richard Hughes <richard@hughsie.com> 2.5-1
changelog:
  - Update to new upstream version.
  - Added a reference for Mac MLU tag
  - Added a way to read the profile creator from header
  - Added error descriptions on cmsSmoothToneCurve
  - Added identity curves support for write V2 LUT
  - Added new cmsPlugInTHR() and fixed some race conditions
  - Added TIFF Lab16 handling on tifficc
  - Fixed a bug on big endian platforms not supporting uint64 or long long.
  - Fixed a multithead bug on optimization
  - Fixed devicelink generation for 8 bits
  - Fixed some 64 bit warnings on size_t to uint32 conversions
  - Rendering intent used when creating the transform is now propagated to profile
  - RGB profiles store only one copy of the curve to save space
  - Transform2Devicelink now keeps white point when guessing deviceclass is enabled
  - Update black point detection algorithm to reflect ICC changes
  - User defined parametric curves can now be saved in ICC profiles


author: Paul Wouters <pwouters@redhat.com> - 1.6.14-1
changelog:
  - [pulled before release]
  - Updated to 1.6.14
  - Removed merged in patch
  - Added new dependancy on ca-certificates for ldns-dane PKIX validation


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Fridolin Pokorny <fpokorny@redhat.com> - 458-3
changelog:
  - Expanded lessecho usage (#948597)
  - Added lessfilter info to man (#948597)
  - Expanded lesskey usage (#948597)
  - Added --old-bot to help (#948597)


author: Jozef Mlich <jmlich@redhat.com> - 458-5
changelog:
  - fixing regression in 72dfd3f63594e1d4c9416180a95c47ae583934c6
    incorrect parsing of commandline arguments
  - Resolves #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-8
changelog:
  - changes introduced in less-458-old-bot-in-help.patch
    wasn't compiled in. It is necessary to use mkhelp tool.
    Resolves: #948597


author: Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6
changelog:
  - Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
  - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
  - Added RFE - lftp configurations for restricting each SSL/TLS 
    version (#1182987)
  - Fixed bogus dates of this SPEC


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp


author: Michal Ruprich - 4.4.8-10
changelog:
  - Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                      - Patch edited so that it corresponds to upstream


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11
changelog:
  - Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
  - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11.1
changelog:
  - Resolves: #1797963 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-12
changelog:
  - Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased


author: Michal Ruprich <michalruprich@gmail.com> - 4.4.8-12.1
changelog:
  - Resolves: #1797964 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-13
changelog:
  - Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1392944 - File size decreases when synchronizing folders with a sftp account using lftp


author: Benjamin Tissoires <btissoir@redhat.com> 1.4.7-2
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163604, bug 1163603)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163604, bug 1163603)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163604, bug 1163603)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.4.7-3
changelog:
  - CVE-2015-1802: missing range check in bdfReadProperties (bug 1258894)
  - CVE-2015-1803: crash on invalid read in bdfReadCharacters (bug 1258894)
  - CVE-2015-1804: out-of-bounds memory access in bdfReadCharacters (bug 1258894)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.2-1
changelog:
  - libXp 1.0.2. Drags in a bunch of general cleanup, code changes are quite
    limited and CVE-2013-2062 (#960362)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.1.5-3
changelog:
  - libXt 1.1.5
  - Merge F25:
  - Fix duplicate documentation (#1001246) by not using %doc
  - Turn on verbose build output via V=1 make
  - Remove %defattr
  - Use %?_isa in explicit package deps
  - Exclude docs from main package


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-8
changelog:
  - Change the source location to the new upstream on fedorahosted
  - import a new tarball from the new source


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-10
changelog:
  - Un-revert the RHEL-specific changes. (Jeff Moyer)
  - Make devel sub-package depend on specific ver-rel (Jeff Moyer)
  - Resolves: bz#905462


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-1
changelog:
  - Pull in upstream .109 to get ARM architecture support.
  - Remove the broken sparc patch;  it should go upstream first.


author: Tomas Popela <tpopela@redhat.com> - 12.10.0-12
changelog:
  - Move package from EPEL 7 to RHEL 7, but leave the mono support in EPEL in
    libappindicator-sharp package.
  - Resolves: rhbz#1546657


author: Pavel Raiskup <praiskup@redhat.com> - 3.1.2-11
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.4-3
changelog:
  - better install manual pages for libarchive/bsdtar/bsdcpio (# ... )
  - several fedora-review fixes ...:
  - Source0 has moved to github.com
  - remove trailing white spaces
  - repair summary to better describe bsdtar/cpiotar utilities


author: Jochen Schmitt <Jochen herr-schmitt de> - 2.3.21-7
changelog:
  - Add aarch64 as a 65-Bit architecture (#975267)
  - Add libtool as a BR
  - Call libtoolize before autoreconf


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7-1
changelog:
  - Skip btrfs min size tests on Fedora 25 (vtrefny)
  - Make sure the loop device doesn't disappear during tests (vpodzime)
  - Close the loop device when autoclear is (un)set (vpodzime)
  - Do not enforce Python 3 for running tests in CI (vpodzime)
  - Revert "Use different BTRFS_MIN_MEMBER_SIZE on aarch64" (vtrefny)
  - Use both 'old' and 'new' sysfs files to read zRAM stats (vtrefny)
  - Check if libparted-fs-resize pkgconfig is available (vpodzime)
  - Do not try to get name for inactive partitions (vtrefny)
  - Skip tests for getting free regions on CentOS/RHEL (vpodzime)
  - Free the container holding the specs of free regions (vpodzime)
  - Open loop devices as O_RDONLY when getting flags (vpodzime)
  - Resolve maximum partition size when we know its start (vpodzime)
  - Use --id instead of --part-type when setting partition id (vpodzime)
  - Fix mdadm command for removing failed device from an array (vtrefny)
  - Skip bcache tests on CentOS/RHEL 7 (vpodzime)
  - Use six.assertRaisesRegex in the FS tests (vpodzime)
  - Use mkdtemp() instead of TemporaryDirectory() (vpodzime)
  - Fix installation without specifying --exec-prefix (vpodzime)
  - Add options to force mkfs.ext4/vfat to create a FS on the whole device (vpodzime)
  - Skip the test for device escrow on CentOS/RHEL (vpodzime)
  - Define DEVNULL on our own if not in subprocess (vpodzime)
  - Remove the patches from the spec file (vpodzime)
  - Sync the spec file with downstream (vpodzime)
  - Stop skipping zRAM stats tests (vtrefny)
  - Add more tests for zRAM stats (vtrefny)
  - Fix reading zRAM properties from sysfs (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.8-1
changelog:
  - Temporarily skip vfat generic resize test on rawhide (vtrefny)
  - Use "safeprobe" in "bd_fs_wipe" (vtrefny)
  - Add a generic filesystem resize function (vtrefny)
  - Add a function to get mountpoint for a device (vtrefny)
  - Add a function to get filesystem type for a device (vtrefny)
  - Only include the LVM DBus config when shipping LVM DBus (vpodzime)
  - Skip the LVM DBus vgreduce tests on Rawhide (vpodzime)
  - Do not build the lvm-dbus plugin on RHEL/CentOS (vpodzime)
  - Give zRAM more time to settle before trying to remove a device (vpodzime)
  - Put zram tests adding/removing devices into a separate class (vpodzime)
  - Skip LVM cache and RAID tests on Rawhide (vpodzime)
  - Fix the skip_on decorator factory for tests (vpodzime)
  - Use 'blkid -p' instead of lsblk to get device's FS type (vpodzime)
  - Improve the lvm_set_global_config test (vpodzime)
  - Pass '-y' to pvresize (vpodzime)
  - Create a copy of os.environ for a child process (vpodzime)
  - Revert "Use the "C.UTF-8" locale instead of just "C"" (vpodzime)
  - Fix how we create vfat FS in tests (vpodzime)
  - Skip the test if requiring unavailable locales (vpodzime)
  - Use the "C.UTF-8" locale instead of just "C" (vpodzime)
  - Add functions for working with ext2 and ext3 filesystems (vtrefny)
  - Link to gobject when lvm or btrfs is enabled (andreas)
  - Link to libm where needed (andreas)
  - Add a function for cleaning a device (vtrefny)
  - Add few code exaples to documentation (vtrefny)
  - Use a special exception for no fs signature when doing wipe (vpodzime)
  - One more incompatible os.symlink() call (vpodzime)
  - Do not use pass-by-name in the os.symlink() call (vpodzime)
  - Ignore previous errors when falling back to using ioctl() (vpodzime)
  - Use ioctl() call to teardown loop devices (vpodzime)
  - Resolve the device to remove for mdadm (vpodzime)
  - Add a function for getting device symlinks (vpodzime)
  - Use the new resolve_device() function where appropriate (vpodzime)
  - Add the resolve_device() function to the utils library (vpodzime)
  - First try to read the 'autoclear' flag from /sys/ (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.9-1
changelog:
  - Fix hardcoded reference to gcc (timo.gurr)
  - Catch and ignore partial failures in LVM tests' cleanups (vpodzime)
  - Fix hardcoded reference to pkg-config (timo.gurr)
  - Make GObject introspection optional (vpodzime)
  - Do not link libraries required by plugins to the GI files (vpodzime)
  - Make sure the whole build status image is shown (vpodzime)
  - Show CI status in README (at the GH repo's front page) (vpodzime)
  - Always require the libudev pkg (tgurr)
  - Make sure we give kernel time to fully setup zram device(s) (vpodzime)
  - fs_test.py: Close FDs when calling utilities (tasleson)
  - crypto.c: Correct segmentation fault (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.10-1
changelog:
  - Only enable partition size tolerance with alignment (vpodzime)
  - Limit the requested partition size to maximum possible (vpodzime)
  - Do not verify vfat FS' size after generic resize (vpodzime)
  - Specify tolerance for partition size (kailueke)
  - Only use the exact constraint if not using any other (vpodzime)
  - Check resulting FS size in tests for generic FS resize (vpodzime)
  - Query setting FS label support and generic relabeling (kailueke)
  - Do not strictly require all FS utilities (vpodzime)
  - Compile everything with the C99 standard (vpodzime)
  - Add partition resize function (kailueke)
  - Generic Check and Repair Functions (kailueke)
  - Query functions for FS resize and repair support (kailueke)
  - Update the project/source URL in the spec file (vpodzime)
  - Add functions for opening/closing TrueCrypt/VeraCrypt volumes (vpodzime)
  - Adapt to a change in behaviour in new libmount (vpodzime)
  - Try RO mount also if we get EACCES (vpodzime)
  - Size in bytes for xfs_resize_device (kailueke)
  - src/plugins/Makefile.am: Remove hard coded include path in /usr prefix (tristan.vanberkom)
  - Fixed include for libvolume_key.h (tristan.vanberkom)
  - Ignore parted warnings if possible (squimrel)
  - bcache tests: Remove FEELINGLUCKY checks (tasleson)
  - kbd.c: Code review corrections (tasleson)
  - kbd.c: Make bd_kbd_bcache_create work without abort (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.11-1
changelog:
  - Make the KbdZRAMDevicesTestCase inherit from KbdZRAMTestCase (vpodzime)
  - Allow non-source directory builds (kailueke)
  - Add a way to disable runtime dependency checks (vpodzime)
  - Link to GObject even if no plugin is activated (kailueke)
  - Skip zram tests on Rawhide (vpodzime)
  - Keep most utilities available for tests (vpodzime)
  - Use new libmount function to get (un)mount error message (vtrefny)
  - Update the documentation URL (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.12-1
changelog:
  - Own directories /etc/libblockdev and /etc/libblockdev/conf.d (vtrefny)
  - Wait for resized partition (kailueke)
  - Make sure the device is opened for libparted (vpodzime)
  - Fix label check in swap_test (vtrefny)
  - Use "run_tests" script for running tests from Makefile (vtrefny)
  - Add a script for running tests (vtrefny)
  - Tests: Move library initialization to setUpClass method (vtrefny)
  - Stop skipping FAT resize tests on rawhide (vtrefny)
  - Close filesystem before closing the partition during FAT resize (vtrefny)
  - Use mountpoint for "xfs_info" calls (vtrefny)
  - Use libmount cache when parsing /proc/mounts (vtrefny)
  - Add some space for the CI status (vpodzime)
  - Confirm the force when creating PVs in FS tests (vpodzime)
  - Skip vgremove tests on 32bit Debian (vtrefny)
  - Fix names of backing files in tests (vtrefny)
  -  Fix checking for available locales (vtrefny)
  - Skip dependency checking in mpath tests on Debian (vtrefny)
  - Skip zRAM tests on Debian (vtrefny)
  - Skip the test for device escrow on Debian too (vtrefny)
  - Skip free region tests on Debian too (vtrefny)
  - Fix redirecting command output to /dev/null in tests (vtrefny)
  - Try harder to unmount devices in test cleanup (vtrefny)
  - Require only plugins that are needed for given test (vtrefny)
  - Try to get distribution info from "PrettyName" if "CPEName" isn't available (vtrefny)
  - Use -ff when creating PVs in FS tests (vpodzime)
  - Sync spec with downstream (vpodzime)


author: Bastien Nocera <bnocera@redhat.com> - 0.2.3-6
changelog:
  + libbluray-0.2.3-0.12.git
  - Fix security issues in parts of the library that we never exercised
  Related: rhbz#1045453 rhbz#1045452


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.9-1
changelog:
  - Allow the Size python class to be easily imported (vpodzime)
  - Make sure pyexecdir is defined (vpodzime)
  - Do not run Python 3 tests without python3 (vpodzime)
  - Disable python3 on RHEL (vpodzime)
  - Reflect the configuration in the spec file template (vpodzime)
  - Make documentation generation conditional (vpodzime)
  - Make python3 support conditional (vpodzime)
  - Require lower version of libpcre (vpodzime)
  - Sync the spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.10-1
changelog:
  - Fix installation without specifying --exec-prefix (martin)
  - Sync the spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.11-1
changelog:
  - Fix README file name (vtrefny)
  - Add a build status image to the README.md (vpodzime)
  - Remove "glibc-all-langpacks" from test dependencies (vtrefny)
  - Check for requires in generated spec file, not in the template (vtrefny)
  - Fix checking for available locales (vtrefny)
  - Fix library name in acinclude.m4 (vtrefny)
  - Do not try to run translation tests on CentOS/RHEL 7 (vtrefny)
  - Skip tests if they require unavailable locales (vpodzime)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.11-4
changelog:
  - Python 2 binary package renamed to python2-libbytesize
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.0-1
changelog:
  - Make more space for CI status image (vtrefny)
  - Include limits.h to make sure ULONG_MAX is defined (vpodzime)
  - Remove extra 'is' in two docstrings (vpodzime)
  - Properly support 64bit operands (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.1-1
changelog:
  - Add NEWS.rst file (vtrefny)
  - Fix source and url in spec file (vtrefny)
  - Use only one git tag for new releases (vtrefny)
  - Actually translate the units when expected (vpodzime)
  - Add two temporary test files to .gitignore (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.2-1
changelog:
  - Use only version as a tag of the last release (vpodzime)
  - Do not require the glib-2.0 pkgconfig package (vpodzime)
  - Do not lie about tag creation (vpodzime)


author: Kyle McMartin <kyle@redhat.com> 0.7.4-5
changelog:
  - Clamp CAP_LAST_CAP at /proc/sys/kernel/cap_last_cap's value in the
    Python bindings test if possible, otherwise use the value from
    <linux/capability.h> since the kernel now has 37 capabilities upstream,
    but our builders are not that up to date.


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-2
changelog:
  - added missing files from git: COPYING-GPL and COPYING-LGPL
  - added patch from git for missing pkgconfig requires
    and fixed FSF address


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-3
changelog:
  - included upstreamed patches which are changing the license
    headers to be LGPLv2+ for the library parts and GPLv2+ for the
    binaries


author: jchaloup <jchaloup@redhat.com> - 0.41-8
changelog:
  - resolves: #885174
    loading configuration files from /etc/cgconfig.d/ directory
  - resolves: #885166
    use * character as a meta character for all mounted
  - resolves: #886920
    add examples to man pages
  - resolves: #1143851
    extending cgroup names with default
  - resolves: #1142807
    api.c: support for setting multiline values in control files
    config.c: xfs file system sets item->d_type to zero, stat() and S_ISREG() test added (#885174)


author: Nikola Forró <nforro@redhat.com> - 0.41-12
changelog:
  - resolves: #1406927
    start cgred service after nss-user-lookup target
    show warnings about unsuccessful user/group lookups


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - show warning when "tasks" file can not be opened
  - extend description of "controllers" section in cgrules.conf man page
    resolves: #1561736


author: Peter Schiffer <pschiffe@redhat.com> 0.40-0.rc1.1
changelog:
  - resolves: #819568, #740113
    rebased to 0.40.rc1
  - resolves: #983264
    rebuilt with full relro and PIE
  - resolves: #1016810
    removed cgrulesengd daemon


author: Peter Schiffer <pschiffe@redhat.com> 0.40-0.rc1.2
changelog:
  - related: #1016810
    returned creation of cgred group, which was removed in previous commit by mistage


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.12.4-1
changelog:
  - Update to 0.12.4
  - http://ftp.gnome.org/pub/GNOME/sources/libchamplain/0.12/libchamplain-0.12.4.news


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.3-4
changelog:
  - BuildRequires for libchewing-python changed
    from python-devel to python2-devel
  - RPM_BUILD_ROOT changed to buildroot


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-1
changelog:
  - Upstream update to 0.3.4
  - Download is changed to Google Code.
  - /usr/share/chewing is removed, data files now located in
    /usr/lib(64)/libchewing
  - Info for libchewing is included.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-3
changelog:
  - Fixed [Bug 913214] libchewing complains "no info dir entry" while installing
    Add direntry in libchewing.texi so it can be listed under 
    Category "Localization"


author: David Tardon <dtardon@redhat.com> - 0.3.1-5
changelog:
  - Resolves: rhbz#918079 libcmis::sha1() can return digests with fewer
    than 40 hexadecimal digits
  - Resolves: rhbz#918080 restrict redirection protocols


author: Doug Ledford <dledford@redhat.com> - 1.3.1-6
changelog:
  - Update valgrind settings and build against newest valgrind libs
    that resolve a register clobber issue on ppc (1142101)
  - Build against latest libibverbs
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.3.1-7
changelog:
  - Remove modprobe file and move it to rdma package
  - Add requires on rdma package
  - Related: bz1164618


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Fix package description to differentiate the fact that this is for the T4
    Chelsio based adapters instead of the previous T3 generation


author: Doug Ledford <dledford@redhat.com> - 1.2.0-6
changelog:
  - Our -fno-strict-alias option patch was lost, and we discovered it
    was lost when I rebuilt the package.  Put it back and rebuild
    again.
  - Related: bz1062281


author: Doug Ledford <dledford@redhat.com> - 1.3.5-2
changelog:
  - Rebuild without modprobe file
  - Add requires on rdma package that now contains modprobe file
  - Related: bz1164618


author: Matej Mužila <mmuzila@redhat.com> - 5.3.21-23
changelog:
  - Mention in man page that care should be taken when running db_hotbackup
    with -c option. Resolves: rhbz#1460077


author: Tom Lane <tgl@redhat.com> 0.8.3-4
changelog:
  - Do not use -ffast-math; it breaks things and seems quite unlikely to offer
    any useful performance benefit for this type of package, anyway
  Resolves: #629964


author: Tom Lane <tgl@redhat.com> 0.8.4-1
changelog:
  - Update to version 0.8.4 (seems to contain only configure-support updates,
    but might as well adopt it)
  - Fix memory leak due to incorrect test in _is_row_fetched()
  Related: #733413


author: Tom Lane <tgl@redhat.com> 0.8.3-12
changelog:
  - Remove unnecessary package-name Requires:, since dependencies on library
    sonames should be enough, and we don't want to hard-wire assumptions about
    which packages provide which libraries
  - isa-ify cross-subpackage Requires:


author: Simone Caronni <negativo17@gmail.com> - 16.04.0-2
changelog:
  - Add tests, remove valgrind-devel build requirements (#1262274).
  - Disable tests until dbus-test-runner is available.


author: Richard W.M. Jones <rjones@redhat.com> - 1.12-13.1.el7
changelog:
  - Add patch to fix multilib conflicts in dnet-config
    resolves: rhbz#1059593
  - Remove RPM cruft from the spec file.


author: Jaroslav Mracek <jmracek@redhat.com> - 0.10.1-1
changelog:
  - Update to 0.10.1
  - It improves query performance with name and arch filters. Also nevra filter will now
    handle string with or without epoch.
  - Additionally for python bindings it renames NEVRA._has_just_name() to NEVRA.has_just_name() due
    to movement of code into c part of library.
  - Resolves: rhbz#1260242 - --exclude does not affect dnf remove's removal of requirements
  - Resolves: rhbz#1485881 - DNF claims it cannot install package, which have been already installed
  - Resolves: rhbz#1361187 - [abrt] python-ipython-console: filter_updown(): python3.5 killed by SIGABRT


author: Jaroslav Mracek <jmracek@redhat.com> - 0.11.1-1
changelog:
  - Rerelease of 0.11.1-1
  - Improvement query performance
  - Run file query in hy_subject_get_best_solution only for files (arguments that start with ``/`` or
    ``*/``)
  - Resolves: rhbz#1498207 - DNF crash during upgrade installation F26 -> F27


author: Dominik Mierzejewski <rpm[AT]greysector.net> 4.1.4-0.1.svn1184
changelog:
  - fix multilib conflict, based on a patch by Rex Dieter (rhbz#477684)
  - update to SVN r1184
  - move TODO to devel docs


author: Dominik Mierzejewski <rpm@greysector.net> 4.1.4-0.1.svn1183
changelog:
  - updated to SVN r1183
  - simplified multilib patch
  - fixed endianness issues (rhbz#442508)
  - added some docs


author: Tom Hughes <tom@compton.nu> - 20120410-1
changelog:
  - Update to 20120410 release
  - Drop the 0. from the version - the dates are the upstream versions
  - Remove explicit dependencies on elfutils-libelf


author: Kamil Dudka <kdudka@redhat.com> 3.0-7.20120601cvs
changelog:
  - Update to 3.0 (20120601 snap)
  - fix crash of el_insertstr() on incomplete multi-byte sequence (#840598)


author: Pawel Salek <pawsa@theochem.kth.se> - 1.0.4-14
changelog:
  - fix bug 599428: use 'version' macro instead of '_version'.
  - Use SSL patch by Ludwig Nussel of SUSE (bugzilla att id 399130).


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.11-2
changelog:
  - Make a patch out of Michal's pkgconfig support.
  - Modernize the configure.ac file for Automake >= 1.13.
  - Respect the Fedora CFLAGS
    https://bugzilla.redhat.com/show_bug.cgi?id=908096


author: Mathieu Bridon <bochecha@fedoraproject.org> - 4.15-3
changelog:
  - Get the package closer to what upstream intended:
    - Do not move the headers into a subfolder of /usr/include
    - Make a libev-libevent-devel subpackage to contain the libevent
      compatibility header, so that only this subpackage conflicts with
      libevent-devel, not all of libev-devel
    - Drop the pkgconfig file, as upstream rejected it several times already.


author: Steve Dickson <steved@redhat.com> 2.0.14-1
changelog:
  - Updated to latest stable upstream version: 2.0.14-stable (bz 727129)
  - Removed the installion of the outdate man pages and the latex raw docs.
  - Corrected where the other doc are installed.


author: Steve Dickson <steved@redhat.com> 2.0.18-1
changelog:
  - Updated to latest stable upstream version: 2.0.18-stable
  - Moved documentation into its own rpm (bz 810138)


author: Petr Sabata <psabata@redhat.com> - 0.6.20-1
changelog:
  - 0.6.20 bump
  - Repackaging prehistoric libexif-docs, introducing version string in filename
  - Buildroot cleanup


author: Petr Šabata <contyk@redhat.com> - 0.6.21-1
changelog:
  - 0.6.21 bump
  - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
    CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845)
  - Drop the pre-generated docs and introduce a doc subpackage


author: Dan Horák <dhorak@redhat.com> - 3.0.13-16
changelog:
  - Drop ppc64le from the multilib list
  - Use additional BR: only in ppc64le build
  - Resolves: RHBZ1116945


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-5
changelog:
  - add FIPS DRBG implementation
  - run the FIPS POST tests in shared library constructor
  - make it possible to run the test suite in the FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-13
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-14
changelog:
  - add DRBG CAVS driver and other necessary CAVS driver updates (#1172568)
  - allow ath reinitialization in FIPS mode
  - allow for auto-initialization of DRBG


author: Debarshi Ray <rishi@fedoraproject.org> - 0.10.4-4
changelog:
  - Ensure that the new exiv2 soname is used during the build
  - Adapt to Exiv2::BasicIo API change
    Resolves: rhbz#1486570


author: David Shea <dshea@redhat.com> - 0.26.3-2
changelog:
  - Initial package for Red Hat Enterprise Linux 7
    Resolves: rhbz#1548043
  - Remove the compatibility .so file from the EPEL package
    Related: rhbz#1548043


author: Brian C. Lane <bcl@redhat.com> - 0.26.8-1
changelog:
  - New upstream security release v0.26.8
    Resolves: rhbz#1644827
  - Disable online and ssh tests
    Related: rhbz#1644827


author: Chris Lumens <clumens@redhat.com> - 0.26.4-5
changelog:
  - Update patch to allow building python2 or python3 bindings, depending on the setting
    in the spec file.


author: David Cantrell <dcantrell@redhat.com> - 0.26.4-6
changelog:
  - Drop python2 patch; not needed for lorax on EL7
  - Adjust spec to guard python3 building conditionally
  - Exclude vala files unless python3 bindings can build


author: Adam Jackson <ajax@redhat.com> - 1.0.1-0.6.git5baa1e5
changelog:
  - Enable %check for all but ppc64 and s390x, which has known but low-impact
    failures
  - Simplify %release


author: Ray Strode <rstrode@redhat.com> 2.32.1-4
changelog:
  - drop /etc/skel entry. libgnome creates it by default if it's
    not around and it needs it anyway. Better not to clutter users
    home directories just because they install glade.


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Kalev Lember <kalevlember@gmail.com> - 3.4.0.1-1
changelog:
  - Update to 3.4.0.1
  - Obsolete the -capplet subpackage; the whole plugins architecture is
    removed from libgnomekbd


author: Christophe Fergeau <cfergeau@redhat.com> 0.0.3-2
changelog:
  - Removed definition of BuildRoot and cleanup of BuildRoot in %clean
  - Added missing arch to versioned Requires: %{name} in the -devel package
  - Don't include empty NEWS and ChangeLog in built RPM


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-1.3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Related: rhbz#1344633


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-1.4
changelog:
  - Add upstream patch forcing use of the older v3 REST API as we don't support
    yet the v4 API
    Resolves: rhbz#1346215


author: Fabiano Fidêncio <fidencio@redhat.com> 0.3.3-2
changelog:
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274356
  - Add OvirtProxy::sso-token support for oVirt 4.0
    Resolves: rhbz#1324457


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Resolves: rhbz#1346256


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.3-5
changelog:
  - New storage format added in oVirt 4.1
    Resolves: rhbz#1346215
  - Check if operation was cancelled before disconnecting signal
    Resolves: rhbz#1431275


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.4-1
changelog:
  - Rebase to latest 0.3.4 upstream release. Still quite a few patches as
    there was no 0.3.5 release yet
    Resolves: rhbz#1584266


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.4-2
changelog:
  - Parse XML nodes automatically
    Related: rhbz#1427467
  - Set detailed error message for async call
    Related: rhbz#1427467


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.4-4
changelog:
  - Use certificate data from XML
    Resolves: rhbz#https://bugzilla.redhat.com/show_bug.cgi?id=1402909


author: Rex Dieter <rdieter@fedoraproject.org> - 0.8.2-7
changelog:
  - libgpod.pc Requires: libimobiledevice-1.0 ... overlinking (#818594)
  - tighten subpkg deps (via %_isa)
  - omit -devel deps that (should) get autodetected already


author: Caolán McNamara <caolanm@redhat.com> 1.14.26-1
changelog:
  - latest version
  - drop integrated gnome689706.gsf_input_dup.patch
  - libgsf-python is gone with "excise old bit-rotted python support"


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.50
changelog:
  - v2v:
    * When debugging, dump OVF to stderr.
    * Ignore missing kernels from grub
      resolves: rhbz#1230412
    * Calculate VMware dcPath correctly (1256823)
    * Map empty VMware network or bridge name to default (1257895)
  - p2v:
    * Wait for network to come online before testing connection
      resolves: rhbz#1256222
  - Fix tests to run correctly with libguestfs-winsupport 7.2.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.51
changelog:
  - v2v: Fix handling of extra slashes in dcPath calculation
    resolves: rhbz#1258342 rhbz#1256823
  - v2v: Fix -oa preallocation option
    resolves: rhbz#1251909


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.52
changelog:
  - v2v: Warn if Group Policy or AV software may result in 7B boot failure
    (1260689)
  - v2v: Fix OVF XML to enable qxl display
    resolves: rhbz#1260590


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.53
changelog:
  - v2v: Error if certain options appear twice on the command line (1261242)
  - v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
  - v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
  - v2v: Detect AVG Technologies as AV software (1261436)
    resolves: rhbz#1261281


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.46
changelog:
  - v2v: Refuse to convert Windows > 7
    reverts: rhbz#1190669
  - v2v: Depend directly on libguestfs-xfs
    resolves: rhbz#1240275
  - v2v: Inclusion of libguestfs-winsupport in RHEL 7.2
    resolves: rhbz#1240274, rhbz#1240276


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.47
changelog:
  - v2v: Work around 'umount: /sysroot: target is busy'
    resolves: rhbz#1246032
  - v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
    virt-inspector
    resolves: rhbz#1243493


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.32.7-3
changelog:
  - Rebase to libguestfs 1.32 in RHEL 7.3
    resolves: rhbz#1218766
  - The full tests are now run after the package has been built.
  - New tool and subpackage: virt-dib (safe diskimage-builder replacement).
  - New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
    (see https://bugzilla.redhat.com/1194158).
  - New tool: virt-get-kernel.
  - Depend on java-headless instead of full java.
  - New tool: virt-v2v-copy-to-local.
  - Disable virt-v2v subpackage on ppc64 etc
    resolves: rhbz#1287826
  - v2v: Remove VirtualBox Additions correctly
    resolves: rhbz#1296606
  - Add clearer warnings sections to all man pages
    resolves: rhbz#1293527
  - v2v: Disable the --in-place option.
  - v2v: Support conversion of Windows > 7
    resolves: rhbz#1190669
  - Add code to verify tarball signatures.
  - General performance improvements.
  - v2v: Prevent duplicate -b, -n, -oa options
    resolves: rhbz#1326266
    resolves: rhbz#1325825
  - v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
  - v2v: Fix alignment issues in treeviews in conversion dialog
    resolves: rhbz#1340407
  - p2v: spinner should be hidden when it stops spinning
    resolves: rhbz#1341564
  - p2v: ethtool command is not supported on p2v client
    resolves: rhbz#1341608
  - p2v: Add ifconfig command to ISO
    resolves: rhbz#1342447
  - p2v: Warn if virt-p2v-make-disk used on a partition
    resolves: rhbz#1342337
  - Build using OCaml with fix for CVE-2015-8869.
    resolves: rhbz#1343101
  - customize: Add --uninstall option (upstream 1343375)
  - p2v: Document permissions on id_rsa file
    resolves: rhbz#1343414
  - p2v: Print full curl error message
    resolves: rhbz#1343423
  - get-kernel: Fix --format auto
    resolves: rhbz#1341984
  - v2v: Provide better <Origin/> information to RHEV-M
    resolves: rhbz#1342398
  - customize: Give an error if --truncate-recursive path does not exist
    resolves: rhbz#1345809
  - sysprep: Add --network option so that --install option can be used
    resolves: rhbz#1345813
  - p2v: Print proper error if incorrect password is given
    resolves: rhbz#1227599
  - p2v: Print ssh error if incorrect hostname is given
    resolves: rhbz#1167916
  - p2v: Display progress of operation in non-GUI mode
    resolves: rhbz#1229386
  - p2v: Add a dialog confirming the user really means to cancel
    resolves: rhbz#1340464
  - p2v: log window should process colour escapes and backspaces
    resolves: rhbz#1314244
  - v2v: Fix installation of virtio drivers with *.dll files
    resolves: rhbz#1311373
  - p2v: Improve error message when ssh login to conversion server fails
    resolves: rhbz#1348900
  - v2v: Remove --dcpath parameter from manual
    resolves: rhbz#1315237
  - v2v: Fix conversion of guests with floppy drives
    resolves: rhbz#1309706
  - p2v: Better error when sudo requires a password
    resolves: rhbz#1340809
  - v2v: Refuse to convert if there is < 1GB free in temporary directory
    resolves: rhbz#1316479
  - inspection: Get Windows drive letters for GPT disks
    resolves: rhbz#1349237
  - p2v: Add disk utils and display serial number of disks
    resolves: rhbz#855058
  - p2v: Fix timeout error when connecting to unresponsive ssh server
    resolves: rhbz#1350363
  - Remove external dependency generator.  Use supermin RPM deps instead.
    related: rhbz#1309796
  - p2v: Flush messages to the journal immediately
    resolves: rhbz#1229386
  - customize: Fix --install on ppc64le
    resolves: rhbz#1264835
  - lib: Fix finding icons in Windows 7 64 bit guests
    resolevs: rhbz#1352761
  - v2v: Add virsh --quiet flag when running virt-v2v --quiet
    resolves: rhbz#1358142
  - lib: Fix inspection of ISOs with latest libosinfo
    resolves: rhbz#1359652
  - dib: Fix run_command exit handlers on failure
    resolves: rhbz#1362357
  - dib: Rework run of extra-data.d hooks
    resolves: rhbz#1362354
  - Miscellaneous fixes to man pages and --help output
    resolves: rhbz#1362668
  - lib: Specify backing format for read-only files
    resolves: rhbz#1354335
  - Fix --selinux-relabel option
    resolves: rhbz#1362669
  - sparsify: Fix --in-place option with UEFI guest
    resolves: rhbz#1364347
  - p2v: Use latest linux-firmware in ISO
    resolves: rhbz#1364419
  - v2v: Fix guest name when using -i disk
    resolves: rhbz#1365005
  - p2v: Fix GUI message.
  - v2v: Make fstrim message clearer
    resolves: rhbz#1366456
  - v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
    resolves: rhbz#1367615
  - lib: Fix assert-fail if port is missing in libvirt XML
    resolves: rhbz#1370424


author: Pino Toscano <ptoscano@redhat.com> - 1:1.32.7-3.el7_3.1
changelog:
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1406289
  - Disable EDD when launching the appliance
    resolves: rhbz#1406393
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1406854


author: Pino Toscano <ptoscano@redhat.com> - 1:1.32.7-3.el7_3.2
changelog:
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1408124
  - Avoid spurious dependency on kernel-rt.


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.3-6
changelog:
  - Rebase to libguestfs 1.36 in RHEL 7.4.
    resolves: rhbz#1359086
  - v2v: always use names for libvirt pools
    resolves: rhbz#1141631
  - v2v: correctly find GRUB in RHEL UEFI guests
  - v2v: uninstall VMware tools packages from guests
    resolves: rhbz#1155150
  - v2v: install RHEV-APT only when using -o rhev/-o vdsm
    resolves: rhbz#1161019
  - New API: btrfs-filesystem-show
    resolves: rhbz#1164765
  - p2v: always enable debugging when running virt-v2v
    resolves: rhbz#1167623
  - libguestfs prefers virtio-pci on aarch64
    resolves: rhbz#1237250
  - v2v: make sure to copy all the driver files on Windows
    resolves: rhbz#1255610
  - Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
    Requires to >= 1.3.10-5.8.el7
    resolves: rhbz#1311890
  - v2v: ignore all the environment variables for proxy when exporting from
    vCenter
    resolves: rhbz#1354507
  - virt-sysprep can deal with full-LUKS encrypted guests
    resolves: rhbz#1362649
  - All the tools have bash completion scripts.
    resolves: rhbz#1367738
  - v2v: do not remove Processor and Intelppm nodes in Windows guests
    resolves: rhbz#1372668
  - Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
    regular expression in file_contexts file
    resolves: rhbz#1374232
  - v2v: set all the properties on creation when exporting to Glance
    resolves: rhbz#1374405
  - v2v: set hw_video_model when exporting to Glance
    resolves: rhbz#1374651
  - v2v: fix OVA conversion as root using the libvirt backend
    resolves: rhbz#1375157
  - Various improvements and fixes to the documentation
    resolves: rhbz#1377081
    resolves: rhbz#1390876
    resolves: rhbz#1398070
    resolves: rhbz#1425306
  - v2v: support <listen type='socket'> and <listen type='none'>
    resolves: rhbz#1378022
  - v2v: allow libvirt >= 2.1.0 for vCenter conversions
    resolves: rhbz#1379240
  - p2v: enable mnemonics in the GUI
    resolves: rhbz#1379289
  - Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
    resolves: rhbz#1382275
  - Correctly parse mount options in btrfs entries in /etc/fstab.
    resolves: rhbz#1383517
  - Read secrets from libvirt domains, when inspecting them
    resolves: rhbz#1392798
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1400205
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1401474
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1402301
  - resize: allow URIs for the output disk
    resolves: rhbz#1404182
  - Disable EDD when launching the appliance
    resolves: rhbz#1404287
  - v2v: increase the memory allocated to the appliance
    resolves: rhbz#1418283
  - p2v: switch from GTK+ 2 to GTK+ 3
  - p2v: add dbus-devel as BuildRequires to disable suspension during the
    conversion
  - libguestfs-java: bump the java-headless Require to >= 1.7.0, matching the
    Build-Require, and the generated bytecode
    resolves: rhbz#1364518
  - Do not try to use/write to /var/cache/yum & /var/log/yum.log
  - Bump ocaml-findlib-devel BuildRequires to >= 1.3.3-7.el7, because of
    RHBZ#1403897
  - v2v: remove --dcpath & --dcPath from --help output too
    resolves: rhbz#1429430
  - v2v: force VNC as display for -i disk, as SDL is not supported
    resolves: rhbz#1372671
  - v2v, p2v: rename rhvm network to ovirtmgmt
    resolves: rhbz#1429491
  - v2v: when exporting to local disk, check that UEFI firmware is installed
    before conversion
    resolves: rhbz#1429506
  - dib: actually generate SHA256 checksums when using --checksum
    resolves: rhbz#1430184
  - v2v: do not mention SUSE Xen hosts as supported
    resolves: rhbz#1430203
  - v2v: depend on OVMF/AAVMF, for converting EFI guests
    resolves: rhbz#1429643
  - v2v: use absolute path when using an OVA as backing file
    resolves: rhbz#1430680
  - v2v: support Debian/Ubuntu guests
    resolves: rhbz#1387213
  - sysprep: remove DHCP_HOSTNAME entries
    resolves: rhbz#1427529
  - v2v: avoid repeated "run virt-v2v -v -x" message on error
    resolves: rhbz#1167623
  - bash-completion: add script for virt-v2v-copy-to-local
    resolves: rhbz#1367738
  - v2v: fix virtio block driver installation for Windows 10 and Windows 2016
    resolves: rhbz#1434737
  - Replace the libosinfo dependency with osinfo-db, since we are only using
    the osinfo database.
  - v2v: fix virtio driver installation for Windows 8 UEFI
    resolves: rhbz#1431579
  - v2v: new 'vmx' import method
    resolves: rhbz#1441197
  - v2v: properly identify Windows 2016 guests when exporting them to RHV-M
    resolves: rhbz#1447202
  - Run pvresize in non-interactive mode
    resolves: rhbz#1460692
  - resize: make sure the input disk is read-only
    resolves: rhbz#1463714
  - Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
    resolves: rhbz#1463646


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.10-6
changelog:
  - Rebase to libguestfs 1.36.10 in RHEL 7.5.
    resolves: rhbz#1472272
  - Build against OCaml 4.05
    resolves: rhbz#1447981
  - Enable the copyonread flag when running the appliance using libvirt.
    resolves: rhbz#1466563
  - Make sure kernel-rt is never used as Requires.
    resolves: rhbz#1471651
  - v2v: disable unconfiguration of manually installed VMware tools.
    resolves: rhbz#1477905
  - v2v: prefer pigz or pxz for uncompressing OVA files, if available
    resolves: rhbz#1448739
  - resize: handle empty UUIDs for swap partitions
    resolves: rhbz#1482737
  - v2v: remove mention of --dcpath in an error message
    resolves: rhbz#1486197
  - Disables the QEMU image file locking when opening disks as read-only
    resolves: rhbz#1417306
    resolves: rhbz#1503497
  - Briefly document the format used for URIs
    resolves: rhbz#1450325
  - v2v: deal with grub2 configurations without a default set
    resolves: rhbz#1472288
  - v2v: warn when a guest has passthrough devices
    resolves: rhbz#1472719
  - v2v: fix three regular expressions
    resolves: rhbz#1494555
  - v2v: enable conversion of full-disk LUKS-encrypted Linux guests
    resolves: rhbz#1451665
  - v2v: new 'vddk' import method
    resolves: rhbz#1477912
    resolves: rhbz#1513884
  - Enable libguestfs to work on z Systems
    resolves: rhbz#1479526
  - p2v: fx check for sudo requiring a password
    resolves: rhbz#1500673
  - v2v: handle disks with snapshots in vCenter
    resolves: rhbz#1172425
  - rescue: backport improved version
    resolves: rhbz#1438710
  - v2v: improve bootloader detection
    resolves: rhbz#1508299
  - v2v: parse MAC address of network interfaces in OVF files
    resolves: rhbz#1506572
  - Unconditionally depend on libvirt-daemon-kvm >= 3.9.0-1, which will always
    pull the right qemu-kvm too, and thus remove the unversioned dependencies
    on it
    resolves: rhbz#1500870
  - v2v: fix RPM file owned test
    resolves: rhbz#1503958
  - Do not open read-only disks using <shareable/> in the libvirt backend
    resolves: rhbz#1518517
  - v2v: handle better when grubby does not report any default kernel
    resolves: rhbz#1519204
  - v2v: enhance vmx import method to access via SSH
    resolves: rhbz#1523767
  - builder: fix caching of templates when using --cache-all-templates
    resolves: rhbz#1523650


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12
changelog:
  - Rebase to libguestfs 1.38.2 in RHEL 7.6.
    resolves: rhbz#1551055
  - v2v: warn about unknown VMware controller types
    resolves: rhbz#1510801
  - df: show correct sizes in human-readable mode for filesystems with
    block size = 512
    resolves: rhbz#1525262
  - v2v: fix example URL in man page
    resolves: rhbz#1540535
  - Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
    resolves: rhbz#1541525
  - Fix qemu-img-ma dependency in non-x86_64 architectures
    resolves: rhbz#1568676
  - v2v: update "resume=/dev/sdaX" entries in GRUB command lines
    resolves: rhbz#1532224
  - v2v: fix virtio-rng and memballoon OVF fragment for RHV
    resolves: rhbz#1550168
  - v2v: detect whether the root filesystem was not mounted in read-write mode
    resolves: rhbz#1567763
  - v2v: import OVAs with snapshots
    resolves: rhbz#1570407
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1571237
  - Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
    place where it used now (by virt-builder-repository).
  - v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
    oVirt REST API
    resolves: rhbz#1557273
  - Start lvmetad earlier when booting the appliance
    resolves: rhbz#1581810
  - v2v: fix kernel detection in Ubuntu guests since 18.04
    resolves: rhbz#1591248
  - v2v: convert the CPU topology correctly
    resolves: rhbz#1541908
  - Add a new inspect_get_osinfo API, and add its result to the output of
    virt-inspector
    resolves: rhbz#1544842
  - Pass absolute paths to NBD sockets when using the libvirt backend
    resolves: rhbz#1588451
  - v2v: do not write only <vendor> without <model> in libvirt XMLs
    resolves: rhbz#1591789
  - v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
    used for -it vddk, and -o rhv-upload
    resolves: rhbz#1589776
    resolves: rhbz#1608718
  - v2v/p2v: disable on aarch64, since it is not supported (nor even working)
    there
    resolves: rhbz#1601488
  - v2v: handle srN devices in libvirt XML (for virt-p2v)
    resolves: rhbz#1612785
  - Do not use the -cpu parameter under any circumstances for ppc64le.
    resolves: rhbz#1605071


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12.el7_6.1
changelog:
  - v2v: update documentation regarding SHA-2 certificates in Windows 7 and
    Windows Server 2008 R2
    resolves: rhbz#1632788
  - v2v: fix rhev-apt firstboot command for Windows
    resolves: rhbz#1625216


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-5
changelog:
  - Rebase to libguestfs 1.40.2 in RHEL 7.7.
    resolves: rhbz#1621895
  - v2v: uninstall the VMware Tools correctly
    resolves: rhbz#1465849
    resolves: rhbz#1481930
  - v2v: fix VMware vCenter roles needed for conversion
    resolves: rhbz#1530967
  - v2v: preserve the VM Generation ID
    resolves: rhbz#1598350
  - Query QEMU to known whether KVM is supported
    resolves: rhbz#1605071
  - v2v: add --mac option
    resolves: rhbz#1607274
  - v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
    resolves: rhbz#1619665
    resolves: rhbz#1691659
  - v2v: provide a way to query for the estimated size of the disks
    resolves: rhbz#1622785
  - Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
    resolves: rhbz#1634248
  - p2v: add an option to Shutdown the machine after the conversion
    resolves: rhbz#1642044
  - v2v: fix epoch when querying installed RPM packages
    resolves: rhbz#1669395
  - Use a better icon for RHEL >= 7 guests
    resolves: rhbz#1679482
  - v2v: improve the architecture detection of Linux kernel modules
    resolves: rhbz#1690574
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1688155
  - v2v: update nbdkit information in documentation
    resolves: rhbz#1605242
  - v2v: warn when a guest has 'direct' network interfaces
    resolves: rhbz#1151902
  - v2v: use proper SELinux label for nbdkit sockets
    resolves: rhbz#1698437


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-5.el7_7.1
changelog:
  - v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
    for 'rhv-upload'
    resolves: rhbz#1726168


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-7
changelog:
  - v2v: -o rhv-upload: improve wait logic after finalize
    resolves: rhbz#1680361
  - v2v: fix DISKTYPE value in generated .ovf files
    resolves: rhbz#1750719


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream version
  - Do not use deprecated GLib functionality
  - Unref the GMainloop after it has been run, not when just quit


author: Marek Kasik <mkasik@redhat.com> - 0.2.4-1
changelog:
  - Update to 0.2.4
  - Backport several important patches from current master
  - Revert addition of GXPSImage (it would change ABI)
  - Resolves: #1384959


author: Marek Kasik <mkasik@redhat.com> - 0.2.5-1
changelog:
  - Update to newly released 0.2.5
  - Preserve ABI by exporting the same set of methods as before
  - Resolves: #1384959


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-2
changelog:
  - Ensure gxps_archive_read_entry() fills the GError in case of failure
  - Handle errors returned by archive_read_data()
  - Resolves: #1574844


author: Rafael Aquini <aquini@redhat.com> - 2.16-13
changelog:
  - tests/stack_grow_into libhugetlbfs test fixes (#1422960)
  - PPC vm/hugepage/libhugetlbfs test fix (#1515365)


author: Doug Ledford <dledford@redhat.com> - 1.3.11-1
changelog:
  - Update to latest upstream release (dependency for another package)
  - Enable valgrind in build
  - Related: bz1092538


author: Doug Ledford <dledford@redhat.com> - 1.3.12-1
changelog:
  - Build on s390
  - Update to latest version to work with OPA enabled libibumad
  - Related: bz1169962, bz1186159


author: Doug Ledford <dledford@redhat.com> - 1.1.6-5
changelog:
  - Correct the Url and Source tags now that the openfabrics server no longer
    responds if you don't include the www in the link


author: Doug Ledford <dledford@redhat.com> - 1.1.7-6
changelog:
  - Add in support for flow steering and IP addressing of UD RoCE QPs
  - Resolves: bz1058537, bz1062281


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Grab official upstream release.  This includes all of the pre-release
    items we had in the last release except for the IP based RoCE GID
    addressing changes.  So we are still carrying patches for those two
    items
  - Upstream fixed the copy-n-paste error that broke flow steering
  - Related: bz1094988
  - Resolves: bz947308


author: Doug Ledford <dledford@redhat.com> - 1.1.8-2
changelog:
  - Update RoCE IP addressing patches to latest version under review
  - Build against valgrind on ppc64le
  - Fix a coverity found issue
  - Resolves: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.1.8-4
changelog:
  - Fix one of the coverity bugs in a different way (the original fix
    caused a problem in libmlx4)
  - Related: bz1137044


author: Robert Scheck <robert@fedoraproject.org> 0.46-1
changelog:
  - Upgrade to 0.46 (#525933, #628893)
  - Fixed race in populating builtin timezone components (#637150)
  - Fixed wrong ICAL_ERRORS_ARE_FATAL preprocessor check (#575715)


author: Jarod Wilson <jarod@redhat.com> 1.2.0-1
changelog:
  - Update to libiec61883 v1.2.0 release
  - Rework installtests patch to not require autoreconf
  - Make iso channel allocation work w/o local fw node r/w


author: Tim Waugh <twaugh@redhat.com> 0.2.11-9
changelog:
  - The python sub-package now requires the exactly-matching main
    package (bug #605169).
  - Fixed strict aliasing warnings (bug #605170).


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.4-3
changelog:
  - disable broken python/cython bindings (for now, currently FTBFS)
  - track soname
  - tighten  subpkg deps


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.3-3
changelog:
  - Fix touchpad tap timestamps (#1491525)
  - Fix missing show-keycodes entry in man page (#1491532)
  - Change palm detection thresholds (#1491537)
  - Ignore tap motion threshold for nfingers > nslots (#1491533)
  - Fix a memory leak on destroy
  - Ignore hovering touches while tapping
  - Fix a man page typo


author: Peter Hutterer <peter.hutterer@redhat.com> 1.5.2-2
changelog:
  - Swap to the correct tarball so we match the checksums from upstream (had a
    local mixup of tarballs)


author: Rex Dieter <rdieter@fedoraproject.org> 3.52.6-3
changelog:
  - capitalize Name,Summary,Version tags
  - -devel: capitalize Summary
  - fix spurious permissions on header files
  - refresh upstream source
  - -admin,-devel: add %defattr(...)


author: Rex Dieter <rdieter@fedoraproject.org> 3.52.6-4
changelog:
  - -devel: install headers to /usr/include/libiodbc/ to better avoid
    conflicts and need for bogus unixODBC-devel dep


author: Paolo Bonzini <pbonzini@redhat.com> - 1.7.0-3
changelog:
  - Correct license for libiscsi-utils, prefer %global to %define
  - Add Requires
  - Remove %clean section


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-3
changelog:
  - Fixed issues reported by coverity (bz #1026820)
  - Do not mark /etc/ld.so.conf.d/ as config (bz #1011126)
  - Resolves: #1026820 
  - Resolves: #1011126


author: Honza Horak <hhorak@redhat.com> 1.2.4-2
changelog:
  - Changed license from GPLv2 to GPLv2+ to correspond with source
  - Added license LGPLv2+ due to make_isohybrid_mbr.c


author: Matthias Clasen <mclasen@redhat.com> - 1.2.8-2
changelog:
  - Don't ship api docs twice (they were included in both
    the main and the devel package, by accident (need to save
    space on the f19 live images)


author: Nikola Forró <nforro@redhat.com> - 1.2.90-7
changelog:
  - Fix CVE-2018-11212 (#1586062)
  - Fix CVE-2016-3616 (#1318509), CVE-2018-11213 (#1589091)
    and CVE-2018-11214 (#1589110)
  - Fix CVE-2018-11813 (#1591203)


author: Than Ngo <than@redhat.com> - 4.10.5-2
changelog:
  - bz#970713, CVE-2013-2126, double-free flaw when handling
    damaged full-color in Foveon and sRAW files


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.14-2
changelog:
  - Add patch by Stephen Gallagher to include manual pages for
    ldb_connect() and several other functions.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.17-2
changelog:
  - Fix the minimal required tdb version
  - Related: rhbz#1133914 - Rebase libldb to version 1.1.17 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-1.1
changelog:
  - Resolves: rhbz#1290714 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.2.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-1.2
changelog:
  - Resolves: rhbz#1290714 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.2.z]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-2
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-3
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1
changelog:
  - Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1
changelog:
  - Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                             version 4.7.x


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-8
changelog:
  - rename to liblockfile
  - sorting file to main and -devel package
  - explicitly list files in files-section


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-9
changelog:
  - change description and summary of -devel-subpackage
  - make wildcard for man-pages even match against uncompressed files


author: Mahaveer Darade <mah.darade@gmail.com> - 0.3.5-1
changelog:
  - upgrade to upstream version 0.3.5
  - drop patch0, merged upstream
    liblognorm-0.3.4-rename-to-lognormalizer.patch
  - remove trailing whitespace


author: Jiri Vymazal <jvymazal@redhat.com> 2.0.2-2
changelog:
  RHEL 7.6 erratum
  - added patch with skipempty support
    resolves: rhbz#1565219
  - removed no longer used patch file


author: Michal Ruprich <mruprich@redhat.com> - 1.2.0-5
changelog:
  - Resolves: #1643464 - Add libmaxminddb package as a successor of deprecated GeoIP package
  - Lowering the release to 1.2.0-5 due to current version in el8 - having larger version would break the migration from el7 to el8


author: Remi Collet <remi@fedoraproject.org> - 1.0.12-1
changelog:
  - update to 1.0.12
  - add aclocal/ax_lib_libmemcached.m4
  - abi-compliance-checker verdict : Compatible
  - uggly hack for man pages


author: Remi Collet <remi@fedoraproject.org> - 1.0.14-1
changelog:
  - update to 1.0.14
  - libmemcachedprotocol removed
  - sasl support is back
  - run test during build
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1079994 (bigendian)
    https://bugs.launchpad.net/libmemcached/+bug/1079995 (config.h)
    https://bugs.launchpad.net/libmemcached/+bug/1079996 (dtrace)
    https://bugs.launchpad.net/libmemcached/+bug/1079997 (-ldl)
    https://bugs.launchpad.net/libmemcached/+bug/1080000 (touch)


author: Remi Collet <remi@fedoraproject.org> - 1.0.15-1
changelog:
  - update to 1.0.15
  - libmemcachedprotocol is back
  - add memaslap command line tool
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1094413 (libevent)
    https://bugs.launchpad.net/libmemcached/+bug/1094414 (c99 MODE)


author: Remi Collet <remi@fedoraproject.org> - 1.0.16-1
changelog:
  - update to 1.0.16
  - ignore test result for memaslap (XFAIL but PASS)
    https://bugs.launchpad.net/libmemcached/+bug/1115357


author: Václav Pavlín <vpavlin@redhat.com> - 0.9.33
changelog:
  - Update to latest uptsream release 0.9.33 due to
    security issues.
    Resolves: rhbz#1039393, rhbz#1039387


author: Doug Ledford <dledford@redhat.com> - 1.0.5-1
changelog:
  - Update to latest upstream
  - Drop awk based setup for a bash based setup, making including
    the setup code on an initramfs easier
  - Modernize spec file


author: Doug Ledford <dledford@redhat.com> - 1.0.5-7
changelog:
  - Fix dracut module support to work with rdma dracut module
  - Add support for IP based RoCE addressing and UD QPs
  - Add flow steering support
  - Related: bz1064316, bz1062284, bz1058538


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream release
  - Update RoCE IP GID support
  - Fix flow steering support
  - Resolves: bz1094988


author: Doug Ledford <dledford@redhat.com> - 1.0.6-2
changelog:
  - Bump and rebuilt against latest libibverbs (updated RoCE GID
    patch in libibverbs)
  - Fix a couple compiler warnings (the problems were bogus, but
    we still prefer a silent build)
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Drop the module init stuff and move it to the rdma package
  - Make sure we require the rdma package, and that we conflict
    with older versions of the package
  - Related: bz1164618


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1
changelog:
  - Update to latest upstream release
  - Remove files related to setting ports to Ethernet mode as that
    isn't even supported on this card yet and the files that are
    there will be wrong when it is supported
  - Resolves: bz1061584


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-5
changelog:
  - Remove conflict with libproxy, its not really necessary since
    we already have the latest libproxy in rawhide.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - Update to 1.6.0
  - Adds Modulemd.ModuleStream object, deprecating Modulemd.Module
  - Adds Modulemd.Translation and Modulemd.TranslationEntry objects
  - Adds Modulemd.ImprovedModule object that collects streams, defaults and
    translations together
  - Adds new Modulemd.index_from_*() funtions to get a hash table of
    Modulemd.ImprovedModule objects for easier searching
  - Moves function documentation to the public headers
  - Corrects the license headers to MIT (they were incorrectly listed as MITNFA
    in previous releases)
  - Makes the "eol" field optional for Modulemd.ServiceLevel
  - Clean up HTML documentation
  - Fixes a type error on 32-bit systems


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - Update to 1.6.3
  - Drop upstreamed patch
  - Don't return ModuleStream objects from modulemd_module_new_all_from_*_ext()
  - Ensure that Component buildorder property is signed
  - Work around optimization bug
  - Don't crash dumping translation events without summary or desc
  - Remove Obsoletes: python-modulemd from EPEL


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0-2
changelog:
  - %files: track lib soname (so bumps aren't a surprise)
  - tighten subpkg deps (%_isa)
  - %build: --disable-static


author: John5342 <john5342 at, fedoraproject.org> 4.2-1
changelog:
  - Rebase to new upstream version
  - Drop patches (they were already both upstream waiting for this new release)
  - No real changes in this version since we already carried all patches except the version change


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.4.alpha
changelog:
  - Avoid 'test/md5.c:126:3: warning: dereferencing type-punned pointer
    will break strict-aliasing rules' by adding -fno-strict-aliasing flag.


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.6.alpha
changelog:
  - Fixes for CVE-2018-14679 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682
  - resolves: rhbz#1611550 rhbz#1611551 rhbz#1611552 rhbz#1611553


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Undo pseudoprovide workaround as it's no longer needed due to
    a change in the libibverbs requirements


author: Christophe Fergeau <cfergeau@redhat.com> - 4.0.3-1
changelog:
  - New upstream 4.0.3 release, should fix a bug breaking metadata fetching
    from musicbrainz servers


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-1
changelog:
  - Package libmusicbrainz5, apart from the name/version it's identical to
    libmusicbrainz4 so this .spec is based on it.


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-2
changelog:
  - Address review comments (rhbz#832670)
      fix licence (LGPLv2+ -> LGPLv2)
      fix tarball URL
      remove obsolete use of RPM_BUILD_ROOT
      remove BuildRequires on pkg-config
      remove use of %defattr


author: Jiri Pirko <jpirko@redhat.com> - 1.2-1
changelog:
  - Update to 1.2
  - libndp: silently ignore packets with optlen 0 [1016064]
  - libndp: fix processing for larger options [1016064]
  - libndp: do not fail on receiving non-ndp packets [1016078]


author: Jiri Pirko <jpirko@redhat.com> - 1.2-3
changelog:
  - libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf() [1044084]


author: Lubomir Rintel <lrintel@redhat.com> - 1.2-5
changelog:
  - libndp: validate the IPv6 hop limit [CVE-2016-3698]
  - libndb: reject redirect and router advertisements from non-link-local [CVE-2016-3698]


author: Eric Garver <egarver@redhat.com> - 1.2-7
changelog:
  - libndp: add option flags to send messages
  - ndptool: add option to send messages types
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - libndp: revert API change for ndp_msg_send() and add


author: Doug Ledford <dledford@redhat.com> - 1.1.4-1
changelog:
  - Update to latest and rebuild against latest libibverbs and
    valgrind (1142116)
  - Related: bz1137044


author: Steve Dickson <steved@redhat.com> 0.25-13
changelog:
  - Strip newlines out of IDMAP_LOG messages (bz 1261124)
  - Fixed some NEGATIVE_RETURNS that a Covscan scan found (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-15
changelog:
  - nss_getpwnam: correctly check for negative values (bz 1271449)
  - Fixed a memory leak in nss_name_to_gid() (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-16
changelog:
  - Add options to aid id mapping in multi domain environments (bz 1378557)
  - Query DNS for the the NFSv4 domain (bz 980925)


author: Steve Dickson <steved@redhat.com> 0.25-18
changelog:
  - Enlarge the TXT record to lager than 127 characters (bz 1498210)
  - Allow white spaces in static IP mapping (bz 1455923)


author: Phil Sutter <psutter@redhat.com> [1.0.6-5.el7]
changelog:
  - expr: lookup: give support for inverted matching (Phil Sutter) [1441084]
  - tests: stricter string attribute validation (Phil Sutter) [1441084]


author: Phil Sutter <psutter@redhat.com> [1.0.6-6.el7]
changelog:
  - chain: dynamically allocate name (Phil Sutter) [1353320]
  - src: Avoid returning uninitialized data (Phil Sutter) [1353319]
  - expr/limit: Drop unreachable code in limit_to_type() (Phil Sutter) [1353312]
  - ruleset: Initialize ctx.flags before calling nftnl_ruleset_ctx_set() (Phil Sutter) [1353322]
  - src: Fix nftnl_*_get_data() to return the real attribute length (Phil Sutter) [1353322]
  - expr/ct: prevent array index overrun in ctkey2str() (Phil Sutter) [1353309]
  - utils: Don't return directly from SNPRINTF_BUFFER_SIZE (Phil Sutter) [1353311]
  - set: prevent memleak in nftnl_jansson_parse_set_info() (Phil Sutter) [1353311]


author: Phil Sutter <psutter@redhat.com> [1.0.8-2.el7]
changelog:
  - trace: Check return value of mnl_attr_parse_nested() (Phil Sutter) [1510538]
  - set_elem: Don't return garbage in nftnl_set_elems_parse() (Phil Sutter) [1510538]
  - ruleset: Avoid reading garbage in nftnl_ruleset_cb() (Phil Sutter) [1510538]
  - object: Avoid returning garbage in nftnl_obj_do_parse() (Phil Sutter) [1510538]
  - gen: Remove a pointless call to mnl_nlmsg_get_payload() (Phil Sutter) [1510538]
  - data_reg: Add a missing break in nftnl_data_reg_snprintf (Phil Sutter) [1510538]


author: Dan Williams <dcbw@redhat.com> - 1.1-14
changelog:
  - Fix portmap position calculation (rh #677526) (rh #677725)
  - Make port allocation threadsafe (rh #677527) (rh #677724)


author: Thomas Haller <thaller@redhat.com> - 3.2.21-6
changelog:
  - fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
  - fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
  - fix printing in nl_msec2str for whole seconds
  - don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
  - backport nl_has_capability function


author: Thomas Haller <thaller@redhat.com> - 3.2.21-9
changelog:
  - improve local port handling for netlink socket with EADDRINUSE (rh #1249158)
  - rtnl: backport support for link-netnsid attribute (rh #1255050)


author: Dan Mashal <dan.mashal@fedoraproject.org> - 0.7.5-5
changelog:
  - Fix RHBZ #925824
  - Update source URL
  - Fix mix of spaces and tabs in spec file
  - Fix bogus changelog date


author: Ray Strode <rstrode@redhat.com> 0.7.5-8
changelog:
  - Don't require desktop notification daemon (breaks a build loop with mutter/gnome-shell)
    Related: #1174722


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.0.9-1
changelog:
  - Updated to 0.0.9
  - Dropped obsolete Group, Buildroot, %clean and %defattr
  - Switched to .bz2 sources
  - Dropped included patches


author: Zeeshan Ali <zeenix@redhat.com> - 0.2.7-3
changelog:
  - rhel: Add info on 6.5 and 7.0 (#1015055).
  - install-script,rhel: Fix for 'Server' & 7.0 (#1033007).


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-3
changelog:
  - Resolves: rhbz#1712458 - [machines] The function of 'Auto-detect guest
                             operating system' is not available on rhel 7.7


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-4
changelog:
  - Resolves: rhbz#1727842 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-3.1
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1169773)


author: Adam Jackson <ajax@redhat.com> 0.12.902-4
changelog:
  - libpciaccess-lol-dev-port.patch: Don't use /dev/port since the kernel insists
    that it remain unusably broken.


author: Tom Lane <tgl@redhat.com> 2:1.5.10-3
changelog:
  - Remove compat subpackage (it's now a separate package "libpng12")
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 2:1.5.12-1
changelog:
  - Update to libpng 1.5.12 for minor bug fixes
  - Activate chunk size limits by default, with a very generous default limit


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptf based on upstream
  - Related: #1283576


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptr base on upstream
  - Related: #1283575


author: Peter Robinson <pbrobinson@fedoraproject.org> - 0.4.7-4
changelog:
  - Add upstream patches to use js rather than xulrunner
  - Add patch to fix FTBFS on gcc 4.7
  - Cleanup spec for latest updates and remove obsolete bits


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-1
changelog:
  - fix leak when throwing PWQError exception
  - added pkgconfig file
  - call the simplicity checks before the cracklib check
  - add enforce_for_root option to the PAM module
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-1
changelog:
  - use rpm built-in filtering of provides (rhbz#830153)
  - remove strain debug fprintf() (rhbz#831567)


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-5
changelog:
  - fix brittle configuration settings (#1259633)
  - fix abort when generating large passwords on some architectures


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.4-1
changelog:
  LOG: prevent the last char of the blackbox message from getting lost.
  Example: make the blackbox example more practical.
  Add the processing which remove notifier at skiplist_destroy function
  Add the processing which remove hash node and notifier at hashtable_destroy function
  Unify to QB_TRUE/QB_FALSE a boolean value
  Document the default prefix in INSTALL
  Unify the list processing with qb_list function
  Add travis link to the readme.
  Fix return code which is an error occurred at pthread function
  TEST: add a progam to compare the speed of vsnprintf and qb_vsnprintf_serialize
  LOG: add a test for a padded hex int.
  Fedora's splint has a strange syntax error, don't fail on it.
  LOG: fix truncation in some messages that get padded.
  Fix the blackbox formatter when specifing the string len/precision
  Fix strlcpy and strlcat functions
  IPC: don't over log on disconnect
  Make sure we don't use the format string whilst it is getting changed.
  ptrie: deref the current node in trie_iter_free()
  LOG: fix the format comparison to avoid generating multiple entries.
  LOG: set the return code when calloc fails
  IPC: call poll if we are mid message and get EAGAIN
  Remove extra ";"
  IPC: set the error more correctly when qb_sys_mmap_file_open() fails.
  Make sure that mmap'ed files smaller than a page size are written to.
  example/test: check for error in qb_ipc_run()
  example: check for error in qb_ipc_run()
  TEST: fix typo s/,/; in check_ipc.c


author: David Vossel <dvossel@redhat.com> - 0.16.0-4
changelog:
  - Require log filtering to match function and file exactly.
    No substring matching.

  - Fixes complile time issue with 'make check' unit tests.

    Resolves: rhbz#1018091


author: David Vossel <dvossel@redhat.com> - 0.17.1-1
changelog:
  Fix: ipcs: Correctly allocate receive buffer size
    Fix: ipc_socket: Signalhandler must be resetted to Default, use only cleanup_sigpipe to return from qb_ipc_dgram_sock_setup.
    Fix: trie: allow modifying the trie map during the notify callback
    Fix: fix invalid option when run 'ipcclient -h'
    Fix: epoll: don't miss poll events under high load
    Fix: ipc_shm: fix error handling in qb_ipcs_shm_connect()
    Fix: ringbuffer: fix size in qb_rb_create_from_file()
    Fix: ringbuffer: fix qb_rb_open_2() debug format string
    Fix: trie: fixes regression caused by ref count refactoring
    Fix: ipcc: Properly timeout during recv when timeout value is provided

    Resolves: rhbz#1110043
    Resolves: rhbz#975903


author: David Vossel <dvossel@redhat.com> - 0.17.1-1.1
changelog:
  Fix bug that prevents ipc server from working in pid with realtime priority.

    Resolves: rhbz#1198718


author: Christine Caulfield <ccaulfie@redhat.com> - 0.17.1-2.1
changelog:
  Increase size of the buffer where we make the socket name to allow for 
    longer PIDs
    Resolves: rhbz#1277538


author: Christine Caulfield <ccaulfie@redhat.com> - 0.17.1-2.1
changelog:
  Increase size of the buffer where we make the socket name to allow for longer PIDs
    Resolves bz#1114852


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-2
changelog:
  Detect IPC Shared memory corruption in peek as well as read. Prevents
    the mainloop from spinning if multithreaded IPC (which is currently 
    not supported) is attempted without locking.
    Resolves: rhbz#1422454


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-3
changelog:
  Allow IPC system to use filesystem sockets instead of abstract
    sockets if a configuration file exists.
    Resolves: rhbz#1446254


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-4
changelog:
  Revert git patch 189ca28 which caused problems with pacemaker CIB
    closing down.
    Resolves: rhbz#1459276


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-5
changelog:
  Put backpatch 189ca28 as it's not the culprit
    
    Don't truncate IPC files in the client as it can cause servers to crash.
    I've also had to (for this release) disable one of the tests as it checks
    for truncated files.
    Resolves: rhbz#1459276


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-7
changelog:
  Prevent crashes when client truncates SHM segment
    I've reverted the patch for 1459276 which is no longer needed as this
    is a proper fix.
    Resolves: rhbz#1473695


author: David Tardon <dtardon@redhat.com> - 1:4.3.7.2-2
changelog:
  - Related: rhbz#1205091 add more fixes from f21
  - Resolves: tdf#91078 check also DBData modified, not only named expressions
  - don't include red spelling underlines on bitmap copy/paste


author: David Tardon <dtardon@redhat.com> - 1:4.3.7.2-4
changelog:
  - Related: rhbz#1205091 add another bunch of fixes from Fedora
  - rhbz#1219137 tweak ruler for happenchance side-effect
  - Related: rhbz#1205091 do not filter out requires


author: David Tardon <dtardon@redhat.com> - 1:4.3.7.2-5
changelog:
  - Related: rhbz#1205091 fix for ppc64
  - Related: rhbz#1205091 fix deps for gdb-debug-support subpackage


author: David Tardon <dtardon@redhat.com> - 1:4.3.7.2-5.1
changelog:
  - Resolves: rhbz#1285820 various flaws
  - CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
  - CVE-2015-5212 Integer underflow in PrinterSetup length
  - CVE-2015-5213 Integer overflow in DOC files
  - CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
    causing memory corruption


author: Caolán McNamara <caolanm@redhat.com> - 1:5.0.6.2-6
changelog:
  - Resolves: rhbz#1401082 gnome hangs opening certain docx
  - Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE


author: David Tardon <dtardon@redhat.com> - 1:5.0.6.2-7
changelog:
  - Resolves: rhbz#1431539 gnome-documents needs libreofficekit
  - Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
    Calc and Writer


author: David Tardon <dtardon@redhat.com> - 1:5.0.5.2-2
changelog:
  - Related: rhbz#1290148 remove unintentional dependency of libreoffice-core on
    libreoffice-calc
  - Related: rhbz#1290148 restore lost changelog entry
  - Related: rhbz#1290148 add additional 5.0.6 patches


author: Caolán McNamara <caolanm@redhat.com> - 1:5.0.6.2-4
changelog:
  - Resolves: rhbz#1425535 crash in calc on exit after using csv dialog with a11y enabled
  - Resolves: rhbz#1425536 crash in calc on closing dialog with a11y enabled


author: Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17
changelog:
  - Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
  - Resolves: rhbz#1610692 silence console warnings from print dialog


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 3.2-4
changelog:
  - Specify CC_FLAGS and COMP_LINK_FLAGS so that an extra -O switch and setting an
    rpath are avoided.


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-1
changelog:
  - Substitute vars in URL in the lr_downloadtarget_new()
  - New module repoconf for reading of *.repo files
  - Add LRE_VALUE code + LR_REPOCONF_ERROR error domain
  - Fail if gpgcheck enabled but repomd.xml signature is not available
  - Support for RHEL6
  - Add LRO_GNUPGHOMEDIR option
  - Refactoring to prevent RhBug: 1144741
  - fastest_mirror: Use <0.0 (-1.0) instead of DBL_MAX when a connection time wasn't measured
  - Add sanity checks in order to avoid bugs like: 1166533, 1160087
  - Refactoring


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1
changelog:
  - downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
  - downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
  - downloader: Show also calculated checksums in error message about bad checksum
  - Python: Return all strings in unicode


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1
changelog:
  - Fix ABI compatibility (RhBug: 1185180)
  - fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
  - downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
  - Make building tests and docs optional
  - librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1
changelog:
  - tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
  - Add LRO_OFFLINE
  - Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
  - Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
  - Add LR_VERSION constant with version string
  - python: Import contants from C librepo module in a loop
  - repoconf: Add support for failover and skip_if_unavailable options
  - handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
  - Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
  - util: Add lr_is_local_path()
  - New module repoconf for reading *.repo files
  - Add LRO_HTTPHEADER option (RhBug: 1181123)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.15-1
changelog:
  - Do not inlude header in the body output (RhBug: 1207685)
  - metalink: Proper error handling
  - New LRR_RPMMD_* contants
  - Support for client certificates
  - Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
  - CMakeLists.txt: do not check for CXX
  - build: Use solely pkg-config to find glib


author: Colin Walters <tmlcoch@redhat.com> - 1.7.16-1
changelog:
  - Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
  - downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
  - test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
  - repoconf: Proper handling of gint64 and guint64 types
  - build: Be compatible with cmake 2.8
  - handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
  - utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
  - Python: call lr_global_init() during module initialization
  - Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
  - util: Honor RFC 3986 (Issue #55)


author: Marek Blaha <mblaha@redhat.com> - 1.8.1-1
changelog:
  - Add yumrecord substitution mechanism (mluscon)
  - Fix a memory leak in signature verification (cwalters)
  - Add new option LRO_FTPUSEEPSV
  - downloader prepare_next_transfer(): simplify long line
  - downloader prepare_next_transfer(): add missing error check
  - downloader prepare_next_transfer(): cleanup error path
  - downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
  - handle: Don't use proxy cache for downloads of metalink/mirrorlist
  - handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
  - downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
  - Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
  - New test: always try to download from the fastest mirror (Alexander Todorov)


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-22
changelog:
  - switch the default dump dir mode to 0750
  - harden against directory traversal, crafted symbolic links
  - avoid race-conditions in dump dir opening
  - Resolves: #1212096, #1217499, #1218610, #1217484


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-23.el7.centos.0.1
changelog:
  - add reporter mantisbt plugin
  - add problem format api
  - set url to public faf server
  - add event for reporting AVCs
  - Resolves bugs.centos#8422


author: Richard Marko <rmarko@redhat.com> - 2.1.11-28
changelog:
  - don't warn about missing 'type' if the locking fails
  - don't spit unnecessary debug messages
  - Related: #1243280, #1243280


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-31
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Related: #1266853


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-32
changelog:
  - Save remote name in reported_to
  - Add a function for compressing dumpdirs
  - Introduce global configuration + option for excluded elements
  - attach the URL of the uploaded problem to the relevant report
  - Resolves: #1300780


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-33
changelog:
  - lib: allow report SELinux denial from sealert under common user
  - mailx: stop creating dead.letter on mailx failures
  - mailx: introduce debug parameter -D
  - mailx: mail formatting: add comment right after %oneline
  - mailx: use problem report api to define an emais' content
  - lib: remove unused function make_description_bz
  - rhtsupport: attach all dump dir's element to a new case
  - rhtsupport: add pkg_vendor, reproducer and reproducible to description
  - rhtsupport: use problem report API to create description
  - lib: add Problem Format API
  - augeas: trim spaces before key value
  - rhtsupport: Discourage users from reporting in non Red Hat stuff
  - rhtsupport: Discourage users from opening one-shot crashes
  - report-gtk: Require Reproducer for RHTSupport
  - Add workflow for RHEL anonymous report
  - bugzilla: don't report private problem as comment
  - lib: move CREATE_PRIVATE_TICKET to the global configuration
  - event config: add support for 'restricted access'
  - report-gtk: offer users to create private ticket
  - bugzilla: make the event configurable
  - uploader: /etc/libreport/plugins/upload.conf as default conf file
  - dd: make function uid_in_group() public
  - uploader: add possibility to set SSH keyfiles
  - uploader: move username and password to the advanced options
  - uploader: allow empty username and password
  - curl: add possibility to configure SSH keys
  - Resolves #1289513, #1277849, #1289513, #1279453, #1258482, #1236613, #1261358, #1281312, #1309317, #1264921


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-35
changelog:
  * Thu Sep  1 2016 Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-35.el7.centos
  - Translation updates
  - Related: #1304240


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-36
changelog:
  - introduce 'stop_on_not_reportable' option
  - fix a double free of config at exit in reporter-rhtsupport
  - Related: #1373094, #1257159


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-39.el7.centos
changelog:
  - Introduce workflow for adding data to existing case
  - Change default URL to the FAF server
  - wizard: fix 'Show log' window not displaying correctly
  - augeas: fix parsing spaces in configuration files
  - Related: #1303326, #1435256, #1463313


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-43
changelog:
  - dd: extend the scope of DD_DONT_WAIT_FOR_LOCK
  - dd: log lock warning only once not x times per sec
  - dd: add functions for opening dd item
  - testsuite: Add macros for value comparison
  - testsuite: assert for common function results
  - testsuite: expose the last check result
  - testsuite: fix dd_open_item_file test
  - tests: include testsuite.h in the dist archive
  - spec: include testsuite headers in the devel package
  - Related: #1588272, #1613236


author: Paul Wouters <pwouters@redhat.com> - 3.12-1
changelog:
  - Resolves: rhbz#1136124 rebase to libreswan 3.12
  - Resolves: rhbz#1052811 [TAHI] (also clear reserved flags for isakmp_sa header)
  - Resolves: rhbz#1157379 [TAHI][IKEv2] IKEv2.EN.R.1.3.3.1: Non RESERVED fields in INFORMATIONAL request


author: Paul Wouters <pwouters@redhat.com> - 3.12-2
changelog:
  - Resolves: rhbz#1105171 (Update man page entry)
  - Resolves: rhbz#1144120 (Update for ESP CAMELLIA with IKEv2)
  - Resolves: rhbz#1074018 Audit key agreement


author: Paul Wouters <pwouters@redhat.com> - 3.12-4
changelog:
  - Resolves: rhbz#1134297 aes-ctr cipher is not supported
  - Resolves: rhbz#1131503 non-zero rSPI on INVALID_KE (and proper INVALID_KE handling)


author: Paul Wouters <pwouters@redhat.com> - 3.12-5
changelog:
  - Resolves: rhbz#826264 aes-gcm implementation support (for IKEv2)
  - Resolves: rhbz#1074018 Audit key agreement (integ gcm fixup)


author: Paul Wouters <pwouters@redhat.com> - 3.12-6
changelog:
  - Resolves: rhbz#1198650 SELinux context string size limit
  - Resolves: rhbz#1198649 Add new option for BSI random requirement


author: Paul Wouters <pwouters@redhat.com> - 3.12-7
changelog:
  - Resolves: rhbz#1208022 libreswan ignores module blacklist rules
  - Resolves: rhbz#1208023 Libreswan with IPv6 in RHEL7 fails after reboot
  - Resolves: rhbz#1211146 pluto crashes in fips mode


author: Paul Wouters <pwouters@redhat.com> - 3.12-9
changelog:
  - Resolves: rhbz#1213652 Support CAVS [updated to kill another copy of prf()]
  - Resolves: rhbz#1208023 Libreswan with IPv6 [updated patch by Jaroslav Aster]
  - Resolves: rhbz#1208022 libreswan ignores module blacklist [updated modprobe handling]


author: Paul Wouters <pwouters@redhat.com> - 3.11-1
changelog:
  - Resolves: rhbz#1136124 rebase to libreswan 3.11
  - Resolves: rhbz#1099905 ikev2 delete payloads are not delivered to peer
  - Resolves: rhbz#1147693 NetworkManger-libreswan can not connect to Red Hat IPSec Xauth VPN
  - Resolves: rhbz#1055865 [TAHI][IKEv2] libreswan do not ignore the content of version bit
  - Resolves: rhbz#1146106 Pluto crashes after start when some ah algorithms are used
  - Resolves: rhbz#1108256 addconn compatibility with openswan
  - Resolves: rhbz#1152625 [TAHI][IKEv2] IKEv2.EN.I.1.1.6.2 Part D: Integrity Algorithm AUTH_AES_XCBC_96 fail
  - Resolves: rhbz#1119704 [TAHI][IKEv2]IKEv2Interop.1.13a test fail
  - Resolves: rhbz#1100261 libreswan does not send response when when it receives Delete Payload for a CHILD_SA
  - Resolves: rhbz#1100239 ikev2 IKE SA responder does not send delete request to IKE SA initiator
  - Resolves: rhbz#1052811 [TAHI][IKEv2]IKEv2.EN.I.1.1.11.1: Non zero RESERVED fields in IKE_SA_INIT response
  - Resolves: rhbz#1126868 ikev2 sequence numbers are implemented incorrectly
  - Resolves: rhbz#1145245 Libreswan appears to start with systemd before all the NICs are up and running.
  - Resolves: rhbz#1145231 libreswan 3.10 upgrade breaks old ipsec.secrets configs
  - Resolves: rhbz#1144123 Add ESP support for AES_XCBC hash for USGv6 and IPsec-v3 compliance
  - Resolves: rhbz#1144120 Add ESP support for CAMELLIA for USGv6 and IPsec-v3 compliance
  - Resolves: rhbz#1099877 Missing man-pages ipsec_whack, ipsec_manual
  - Resolves: rhbz#1100255 libreswan Ikev2 implementation does not send an INFORMATIONAL response when it receives an INFORMATIONAL request with a Delete Payload for an IKE_SA


author: Paul Wouters <pwouters@redhat.com> - 3.15-2
changelog:
  - Resolves: rhbz#1259208 CVE-2015-3240
  - Merge rhel6 and rhel7 spec into one
  - Be lenient for racoon padding behaviour
  - Fix seedev option to /dev/random
  - Some IKEv1 PAM methods always gave 'Permission denied'
  - Parser workarounds for differences in gcc/flex/bison on rhel6/rhel7
  - Parser fix to allow specifying time without unit (openswan compat)
  - Fix Labeled IPsec on rekeyed IPsec SA's
  - Workaround for wrong padding by racoon2
  - Disable NSS HW GCM to workaround rhel6 xen builers bug


author: Paul Wouters <pwouters@redhat.com> - 3.15-4
changelog:
  - Resolves: rhbz#1268775 libreswan should support strictcrlpolicy alias
  - Resolves: rhbz#1268776 Pluto crashes after stop when I use floating ip address
  - Resolves: rhbz#1268773 Pluto crashes on INITIATOR site during 'service ipsec stop'
  - Resolves: rhbz#1208022 libreswan ignores module blacklist rules
  - Resolves: rhbz#1270673 ipsec does not work properly on loopback


author: Paul Wouters <pwouters@redhat.com> - 3.12-6
changelog:
  - Resolves: rhbz#1056559 loopback support deprecated
  - Resolves: rhbz#1182224 Add new option for BSI random requirement
  - Resolves: rhbz#1170018 [increase] SELinux context string size limit
  - Resolves: rhbz#1127313 Libreswan with IPv6 in RHEL7 fails after reboot
  - Resolves: rhbz#1207689 libreswan ignores module blacklist rules
  - Resolves: rhbz#1203794 pluto crashes in fips mode


author: Paul Wouters <pwouters@redhat.com> - 3.12-10
changelog:
  - Resolves: rhbz#1212121 Support CAVS testing of the PRF/PRF+ functions
  - Resolves: rhbz#1127313 Libreswan with IPv6 [updated patch by Jaroslav Aster]
  - Resolves: rhbz#1207689 libreswan ignores module blacklist [updated modprobe handling]
  - Resolves: rhbz#1218358 pluto crashes in fips mode without dracut-fips package


author: Paul Wouters <pwouters@redhat.com> - 3.15-4
changelog:
  - Resolves: rhbz#1267370 libreswan should support strictcrlpolicy alias
  - Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address
  - Resolves: rhbz#1166146 Pluto crashes on INITIATOR site during 'service ipsec stop'
  - Resolves: rhbz#1259209 CVE-2015-3240
  - Resolves: rhbz#1199374 libreswan does not enforce all FIPS or IPsec Suite B restrictions
  - Resolves: rhbz#1207689 libreswan ignores module blacklist rules
  - Merge rhel6 and rhel7 spec into one
  - Be lenient for racoon padding behaviour
  - Fix seedev option to /dev/random
  - Some IKEv1 PAM methods always gave 'Permission denied'
  - Parser workarounds for differences in gcc/flex/bison on rhel6/rhel7
  - Parser fix to allow specifying time without unit (openswan compat)
  - Fix Labeled IPsec on rekeyed IPsec SA's
  - Workaround for wrong padding by racoon2
  - Disable NSS HW GCM to workaround rhel6 xen builers bug


author: Paul Wouters <pwouters@redhat.com> - 3.15-6
changelog:
  - Resolves: rhbz#1283468 keyingtries=0 is broken
  - Resolves: rhbz#1297816 When using SHA2 as PRF algorithm, nonce payload is below the RFC minimum size
  - Resolves: rhbz#1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack
  - Resolves: rhbz#1313747 ipsec pluto returns zero even if it fails
  - Resolves: rhbz#1302778 fips does not check hash of some files (like _import_crl)
  - Resolves: rhbz#1278063 Unable to authenticate with PAM for IKEv1 XAUTH
  - Resolves: rhbz#1257079 Libreswan doesn't call NetworkManager helper in case of a connection error
  - Resolves: rhbz#1272112 ipsec whack man page discrepancies
  - Resolves: rhbz#1280449 PAM xauth method does not work with pam_sss
  - Resolves: rhbz#1290907 ipsec initnss/checknss custom directory not recognized
  - Resolves: rhbz#1309764 ipsec barf does not show pluto log correctly in the output
  - Resolves: rhbz#1347735 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
  - Resolves: rhbz#1219049 Pluto does not handle delete message from responder site in ikev1
  - Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request
  - Resolves: rhbz#1315412 ipsec.conf manpage does not contain any mention about crl-strict option
  - Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address


author: Paul Wouters <pwouters@redhat.com> - 3.15-7
changelog:
  - Resolves: rhbz#1311360  When IKE rekeys, if on a different tunnel, all subsequent attempts to rekey fail
  - Resolves: rhbz#1361721 libreswan pluto segfault


author: Paul Wouters <pwouters@redhat.com> - 3.15-8
changelog:
  - Resolves: rhbz#1361721 libreswan pluto segfault [UPDATED]
  - Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request [UPDATED]
  - Resolves: rhbz#1309764 ipsec barf [additional man page update and --no-pager]


author: Paul Wouters <pwouters@redhat.com> - 3.20-2
changelog:
  - Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels
  - Resolves: rhbz#1444115 FIPS: libreswan must generate RSA keys with a minimal exponent of F4, nor E=3
  - Resolves: rhbz#1341353 Allow Preshared Key authentication in FIPS mode for libreswan


author: Paul Wouters <pwouters@redhat.com> - 3.20-3
changelog:
  - Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels [updated]
  - Resolves: rhbz#1458227 CAVS test driver does not work in FIPS mode
  - Resolves: rhbz#1452672 (new-ksk-libreswan-el7) DNSSEC trust anchor cannot be updated without recompilation


author: Paul Wouters <pwouters@redhat.com> - 3.21-2
changelog:
  - Resolves: rhbz#1499845 libreswan does not establish IKE with xauth enabled but modecfg disabled
  - Resolves: rhbz#1497158 xauth password length limited to 64 bytes while XAUTH_MAX_PASS_LENGTH (128)


author: Paul Wouters <pwouters@redhat.com> - 3.22-2
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555)
  - Resolves: rhbz#1372050 RFE: Support IKE and ESP over TCP: RFC 8229


author: Paul Wouters <pwouters@redhat.com> - 3.22-3
changelog:
  - Resolves: rhbz#1475434 Add support for AES-GMAC for ESP (RFC-4543) to libreswan
  - Resolves: rhbz#1300759 Implement RFC-7427 Digital Signature authentication


author: Paul Wouters <pwouters@redhat.com> - 3.22-5
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [updated]
  - Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
  - Resolves: rhbz#1375776 [IKEv2 Conformance] Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA reques failed
  - Resolves: rhbz#1375750 SECCOMP support for libreswan [updated for libunbound syscalls]
  - Resolves: rhbz#1300763 Implement draft-ietf-ipsecme-split-dns for libreswan


author: Paul Wouters <pwouters@redhat.com> - 3.23-0.1.rc4
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
  - Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
  - Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
  - Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
  - Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
  - Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA


author: Paul Wouters <pwouters@redhat.com> - 3.23-2
changelog:
  - Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
  - Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]


author: Paul Wouters <pwouters@redhat.com> - 3.23-4
changelog:
  - Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1574456 Shared IKE SA leads to rekey interop issues
  - Resolves: rhbz#1574457 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted


author: Paul Wouters <pwouters@redhat.com> - 3.23-4
changelog:
  - Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
  - Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues


author: Paul Wouters <pwouters@redhat.com> - 3.25-1
changelog:
  - Resolves: rhbz#1591817 rebase libreswan to 3.25
  - Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
  - Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs >= 1.6.6


author: Paul Wouters <pwouters@redhat.com> - 3.25-2
changelog:
  - Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors


author: Paul Wouters <pwouters@redhat.com> - 3.25-3
changelog:
  - Resolves: rhbz#1655440 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth


author: Paul Wouters <pwouters@redhat.com> - 3.25-4
changelog:
  - Resolves: rhbz#1660536 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
  - Resolves: rhbz#1660544 config: recursive include check doesn't work
  - Resolves: rhbz#1660542 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
  - Resolves: rhbz#1664244 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.1
changelog:
  - Resolves: rhbz#1665369 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.2
changelog:
  - Resolves: rhbz#1672921 - Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated bugfix]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.3
changelog:
  - Resolves: rhbz#1680483 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.4
changelog:
  - Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.5
changelog:
  - Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart [rhel-7.6.z] [updated]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.6
changelog:
  - Resolves: rhbz#1680483 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure [rhel-7.6.z] [updated]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.7
changelog:
  - Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start [updated for eclipsed handling]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.8
changelog:
  - Resolves: rhbz#1708060 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-5
changelog:
  - Resolves: rhbz#1639404 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
  - Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
  - Resolves: rhbz#1629902 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
  - Resolves: rhbz#1623279 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11
  - Resolves: rhbz#1625303 config: recursive include check doesn't work
  - Resolves: rhbz#1664521 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits


author: Paul Wouters <pwouters@redhat.com> - 3.25-6
changelog:
  - Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated]
  - Resolves: rhbz#1679735 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure


author: Paul Wouters <pwouters@redhat.com> - 3.25-7
changelog:
  - Resolves: rhbz#1673105 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart


author: Paul Wouters <pwouters@redhat.com> - 3.25-8
changelog:
  - Resolves: rhbz#1686991 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE


author: Paul Wouters <pwouters@redhat.com> - 3.25-8.1
changelog:
  - Resolves: rhbz#1746052 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire [rhel-7.7.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-9
changelog:
  - Resolves: rhbz#1724200 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire


author: Paul Wouters <pwouters@redhat.com> - 3.5-1
changelog:
  - Initial package for RHEL7
  - Added interop patch for (some?) Cisco VPN clients sending 16 zero
    bytes of extraneous IKE data
  - Removed fipscheck_version


author: Paul Wouters <pwouters@redhat.com> - 3.6-1
changelog:
  - Updated to version 3.6 (IKEv2, MODECFG, Cisco interop fixes)
  - Generate empty NSS db if none exists
  - FIPS update using /etc/system-fips
  - Provide: openswan-doc


author: Paul Wouters <pwouters@redhat.com> - 3.8-1
changelog:
  - Resolves: rhbz#CVE-2013-6467 
  - Resolves: rhbz#1043642 rebase to version 3.8
  - Resolves: rhbz#1029912 ipsec force-reload doesn't work
  - Resolves: rhbz#826261 Implement SHA384/512 support for Openswan
  - Resolves: rhbz#1039655 ipsec newhostkey generates false configuration


author: Paul Wouters <pwouters@redhat.com> - 3.8-3
changelog:
  - Resolves: rhbz#1069024  erroneous debug line with mixture [...]
  - Resolves: rhbz#1030939 update nss/x509 documents, don't load acerts
  - Resolves: rhbz#1058813 newhostkey returns zero value when it fails


author: Paul Moore <pmoore@redhat.com> - 2.2.1-1
changelog:
  - Removed '--disable-static' from the build to ensure that scmp_sys_resolver
    is self contained and resolve RPATH issues


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-1
changelog:
  - Update to upstream 
        * Fix userspace AVC handling of per-domain permissive mode.
  - Verify context is not null when passed into *setfilecon_raw


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.2-4
changelog:
  - Fix libselinux.spec file
  - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
  - Add Int_to_mcs function to generate MCS labels from integers.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-5
changelog:
  - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
  - Add Int_to_mcs function to generate MCS labels from integers.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-6
changelog:
  - Add additional go bindings for get*con calls
  - Add go bindings test command
  - Modify man pages of set*con calls to mention that they are thread specific
  Resolves:#1053122


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Fix location of selinuxfs mount point (#1321086)
  - Only mount /proc if necessary
  - procattr: return einval for <= 0 pid args
  - procattr: return error on invalid pid_t inpu


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix setexecfilecon() to work better in a chroot (#1329931)
  - Fix typo in sefcontext_compile.8 (#1320062)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-4
changelog:
  - Clarify is_selinux_mls_enabled() description
  - Explain how to free policy type from selinux_getpolicytype()
  - Compare absolute pathname in matchpathcon -V
  - Add selinux_snapperd_contexts_path()
  - Modify audit2why analyze function to use loaded policy
  - Sort object files for deterministic linking order
  - Respect CC and PKG_CONFIG environment variable
  - Avoid mounting /proc outside of selinux_init_load_policy()
  - Fix multiple spelling errors


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Add missing av_permission values (#1025931)
  - Set an appropriate errno in booleans.c (#1402140)
  - Change matchpathcon usage to match with matchpathcon manpage (#1412797)


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-7
changelog:
  - Move handling of role audit records into the library
  - Patch stops semanage from removing user record while in use


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-10
changelog:
  - Do not write error message to screen when looking for previous record for auditing.
  - Add mls_range from user record if the MLS range is not specified by the seuser add record.
  - Error out if seuser or mls range is not specified when adding user records


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-14
changelog:
  - Cleanup handling of missing mls_range to fix problems with useradd -Z
  - Fix auditing of login record changes, roles were not working correctly.
  Resolves: #1018840


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Sort object files for deterministic linking order
  - Support overriding Makefile RANLIB
  - Respect CC and PKG_CONFIG environment variable
  - Fix multiple spelling errors
  - genhomedircon: %{USERID} and %{USERNAME} support and code cleanups


author: Petr Lautrbach <plautrba@redhat.com> 2.5-4
changelog:
  - genhomedircon: add support for Development/Debug syntax
  - genhomedircon: generate contexts for logins mapped to the default user
  - Validate and compile file contexts before installing
  - Swap tcp and udp protocol numbers


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-8
changelog:
  - Save linked policy, skip re-link when possible
  - Replace access(,F_OK) checks to make setuid programs work (#1186431)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-9
changelog:
  - Update semanage to allow runtime labeling of Infiniband Pkeys (#1466274)
  - Update semanage to allow runtime labeling of ibendports (#1466274)
  - Keep copy of file_contexts.homedirs in policy store (#1409813)
  - Add support for listing fcontext.homedirs file (#1409813)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-12
changelog:
  - Do not change file mode of seusers and users_extra (#1512639)
  - Improve warning for installing disabled module (#1337199)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-14
changelog:
  - Include user name in ROLE_REMOVE audit events (#1622045)
  - Improve "reset umask before creating directories"


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  	* filename_trans: use some better sorting to compare and merge
  	* coverity fixes
  	* implement default type policy syntax
  	* Fix memory leak issues found by Klocwork
  - Add CONTRAINT_NAMES to the kernel


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Correctly detect unknown classes in sepol_string_to_security_class
  - Sort object files for deterministic linking order
  - Fix neverallowxperm checking on attributes
  - Remove libsepol.map when cleaning
  - Add high-level language line marking support to CIL
  - Change logic of bounds checking to match change in kernel
  - Fix multiple spelling errors
  - Only apply bounds checking to source types in rules
  - Fix CIL and not add an attribute as a type in the attr_type_map
  - Build policy on systems not supporting DCCP protocol
  - Fix extended permissions neverallow checking
  - Fix CIL neverallow and bounds checking
  - Android.mk: Add -D_GNU_SOURCE to common_cflags


author: Petr Lautrbach <plautrba@redhat.com> 2.5-5
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6
changelog:
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-7
changelog:
  - Define cgroup_seclabel policy capability (rhbz#1493517)
  - Fix unitialized jmp and invalid dereference


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-8.1
changelog:
  - Define nnp_nosuid_transition policy capability (rhbz#1480519)
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - Allow runtime labeling of ibendports (rhbz#1464489)
  - Allow runtime labeling of Infiniband Pkeys (rhbz#1464489)
  - Add IB end port handling to CIL (rhbz#1464489)
  - Add ibendport ocontext handling (rhbz#1464489)
  - Add support for ibendportcon labels (rhbz#1464489)
  - Add Infiniband Pkey handling to CIL (rhbz#1464489)
  - Add ibpkey ocontext handling (rhbz#1464489)
  - Add support for ibpkeycon labels (rhbz#1464489)
  - Remove unused attribute on a used argument from avrule_read() (rhbz#1464489)
  - Add binary module support for xperms
  - Add support for converting extended permissions to CIL


author: kwizart < kwizart at gmail.com > - 2.2.2-2
changelog:
  - Fix http://bugzilla.redhat.com/415121
  - Add disable-static
  - Don't use makeinstall macro
  - Update License field


author: Kalev Lember <kalev@smartlink.ee> - 2.2.8-4
changelog:
  - Spec cleanup
  - Use macro for automatically calculating ftp directory name with
    first two digits of tarball version.
  - Dropped R: pkgconfig from -devel as it's now automatically added by rpm
  - Own /usr/share/doc/libsigc++-2.0/ dir and mark /usr/share/devhelp/ as %doc
  - Require base package from -doc subpackage
  - Drop unneeded doxygen and graphviz BRs


author: Tom Callaway <spot@fedoraproject.org> - 0.4.8-9
changelog:
  - mark symbols which conflict with RPM as "internal", resolves bz 864324
    Thanks to Michele Baldessari


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12.1
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)


author: Jaroslav Mracek <jmracek@redhat.com> - 0.6.34-3
changelog:
  - Make sure that targeted updates don't do reinstalls
  - Resolves: bug#1668256
  - Fix NULL pointer dereference (CVE-2018-20532, CVE-2018-20533)
  - Resolves: bug#1669562
  - Resolves: bug#1669576
  - Fix illegal address access in pool_whatprovides (CVE-2018-20534)
  - Resolves: bug#1670453


author: Milan Crha <mcrha@redhat.com> - 2.62.2-2
changelog:
  - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c: get_cookies() on empty hostnames
  - Resolves: #1598838


author: Jan Grulich <jgrulich@redhat.com> - 1.4.4-11.20101004cvs
changelog:
  - Fix global buffer overflow
    Resolves: bz#1301202

  - Fix improper handling of CSRC count and extension header length in RTP header
    Resolves: bz#1323705

  - Fix buffer overflow in application of crypto profiles
    Resolves: bz#1141897


author: - Andreas Schneider <asn@redhat.com> - 0.6.1-1
changelog:
  - Update to version 0.6.1.
  - resolves: #1056757 - Fix scp mode.
  - resolves: #1053305 - Fix known_hosts heuristic.


author: Martin Pitt <mpitt@redhat.com> - 0.7.1-7
changelog:
  - resolves: #1637182 - Add SHA256 fingerprint support
  - Fix regression with keyboard interactive authentication introduced in
    previous update


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-9
changelog:
  - curl consumes too much memory during scp download (#1080459)
  - prevent a not-connected agent from closing STDIN (#1147717)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12
changelog:
  - session: avoid printing misleading debug messages (#1503294)
  - scp: send valid commands for remote execution (#1489733)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12.el7_6.1
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12.el7_6.3
changelog:
  - fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)


author: Kamil Dudka <kdudka@redhat.com> 1.4.2-3
changelog:
  - Fix basic functionality of libssh2 in FIPS mode
  - Skip SELinux-related quirks on recent distros to prevent a test-suite failure


author: Kamil Dudka <kdudka@redhat.com> 1.4.2-4
changelog:
  - examples: use stderr for messages, stdout for data (upstream commit b31e35ab)
  - Update libssh2_hostkey_hash(3) man page (upstream commit fe8f3deb)


author: Paul Howarth <paul@city-fan.org> 1.4.3-1
changelog:
  - Update to 1.4.3
    - compression: add support for zlib@openssh.com
    - sftp_read: return error if a too large package arrives
    - libssh2_hostkey_hash.3: update the description of return value
    - Fixed MSVC NMakefile
    - examples: use stderr for messages, stdout for data
    - openssl: do not leak memory when handling errors
    - improved handling of disabled MD5 algorithm in OpenSSL
    - known_hosts: Fail when parsing unknown keys in known_hosts file
    - configure: gcrypt doesn't come with pkg-config support
    - session_free: wrong variable used for keeping state
    - libssh2_userauth_publickey_fromfile_ex.3: mention publickey == NULL
    - comp_method_zlib_decomp: handle Z_BUF_ERROR when inflating
  - Drop upstreamed patches


author: Kamil Dudka <kdudka@redhat.com> 1.8.0-2
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
  - fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
  - fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Tony Asleson <tasleson@redhat.com> - 1.0.0-3
changelog:
  - Use new systemd rpm macros
    https://bugzilla.redhat.com/show_bug.cgi?id=1149010
  - Place config file in correct tmpfiles.d directory
    https://bugzilla.redhat.com/show_bug.cgi?id=1122087


author: Tony Asleson <tasleson@redhat.com> - 1.0.0-4
changelog:
  - Fix rpmdiff, error for path names
    https://bugzilla.redhat.com/show_bug.cgi?id=1149368
  - Fix rpmdiff, multilib regressions
    https://bugzilla.redhat.com/show_bug.cgi?id=1149371


author: Gris Ge <fge@redhat.com> 1.4.0-1
changelog:
  - Add Python3 support.
  - New sub rpm package python3-libstoragemgmt.
  - Add support of lmiwbem.
  - Allow plugin test to be run concurrently.
  - Bug fixes:
      * Fix megaraid plugin for dell PERC.
      * Fix local disk rotation speed query on NVMe disk.
      * Fix lsmcli incorrect try-expect on local disk query.
      * Fix all the gcc compile warnings.
      * Fix the obsolete usage of AC_OUTPUT in configure.ac.
  - Library adds:
      * Query serial of local disk:
          lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
      * Query LED status of local disk:
          lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
      * Query link speed of local disk:
          lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()


author: Gris Ge <fge@redhat.com> - 1.5.0-2
changelog:
  - Fix multilib confliction of nfs-plugin by move binrary file to
    another subpackage libstoragemgmt-nfs-plugin-clibs


author: Tony Asleson <tasleson@redhat.com> - 1.8.1-2
changelog:
  - https://bugzilla.redhat.com/show_bug.cgi?id=1872745
  - https://bugzilla.redhat.com/show_bug.cgi?id=1903665


author: Simo Sorce <ssorce@redhat.com> - 2.0.6-1
changelog:
  - New upstream release
  - Fixes various bugs with talloc_free_children and freeing complex
    hierarchies with many siblinbgs.


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.8-1
changelog:
  - Rebase to libtalloc 2.1.8
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.9-1
changelog:
  - Rebase to libtalloc 2.1.9
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.10-1
changelog:
  - Rebase to libtalloc 2.1.10
  - Resolves: rhbz#1470053 - Rebase libtalloc to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.14-1
changelog:
  - Rebase to libtalloc 2.1.14
  - Resolves: rhbz#1658747 - Rebase libtalloc to version 2.1.14 for Samba


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-1
changelog:
  - Rebase to libtalloc 2.1.16
  - Resolves: rhbz#1736005 - Rebase libtalloc to version 2.1.16 for Samba


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.10-15
changelog:
  - New upstream release 1.2.10
  - Remove upstreamed patches
  - Provides functionality for the upcoming Samba 4 beta


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.6-2
changelog:
  - Resolves: rhbz#1241015 - tdb deadlocks if you acquire allrecord_lock
                             and start two traverses


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.12-2
changelog:
  - Resolves: rhbz#1441231 - The tdb robust mutexes runtime check is not thread safe and ends in a deadlock


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.15-1
changelog:
  - Resolves: rhbz#1470049 - Rebase libtdb to enable samba rebase to
                             version 4.7.x


author: Jiri Pirko <jpirko@redhat.com> - 1.9-13
changelog:
  - teamdctl: add command for easy port presention checking [1081214]
  - initscripts: do not try to re-add port if it is already there [1081214]


author: Jiri Pirko <jpirko@redhat.com> - 1.9-14
changelog:
  - teamd_link_watch: allow to send ARP probes if no source_host is specified [1078993]
  - bond2team: do not guess source_host option [1079059]
  - teamd_link_watch: specify "missed_max" option default value [1079059]
  - man: correct type of "*_host" options [1078993]


author: Marcelo Ricardo Leitner <mleitner@redhat.com> - 1.25-2
changelog:
  - Updated to 1.25 [1286840 1286063]
  - Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]


author: Marcelo Ricardo Leitner <mleitner@redhat.com> - 1.25-4
changelog:
  - Added patches to avoid hung on shutdown [1330550]
  - Added patch to fix an out-of-bound write with zero-length hardware
    address [1286840]


author: Xin Long <lxin@redhat.com> - 1.25-5
changelog:
  - Added patch to escape some sensitive characters [1383997]
  - Added patch to check port link_up when a port is added for lb runner
    [1393430]


author: Xin Long <lxin@redhat.com> - 1.27-5
changelog:
  - Added patch to fix runner.sys_prio default in man docs [1533813]
  - Added patch to empty LDFLAGS before checking for libnl3 in configure.ac [1533847]
  - Added patch to not crash when trying to print unregistered device name [1563155]


author: Xin Long <lxin@redhat.com> - 1.27-7
changelog:
  - Added an option to force log output to stdout, stderr or syslog [1596917]
  - Fixed s32/u32 data storage on big endian [1545574]
  - Documented ARP Ping link_watch.vlanid option [1645169]
  - Sent LACPDU when port state transitions from DEFAULT to CURRENT [1645169]


author: Xin Long <lxin@redhat.com> - 1.29-1
changelog:
  - man teamd.conf: update some parameter default values [1732586]
  - 1.29 release
  - teamd: improve the error output for non-integer port prio
  - teamd: return 0 if tdport doesn't exist in teamd_config_port_set
  - teamd: add port_master_ifindex_changed for link_watch_port_watch_ops [1720137]
  - initscripts: fix if/fi align
  - teamd: fix a json object memleak in get_port_obj() [1704451]
  - libteam: set netlink event socket as non-blocking [1680655]
  - libteam: double NETLINK_RCVBUF to fix -ENOMEM error
  - teamd: add a default value 1000 for link_watch.interval
  - teamd: use enabled option_changed to sync enabled to link_up for lb runner [1629670]
  - teamd: tdport has to exist if item->per_port is set in __find_by_item_path
  - teamd: remove port if adding fails
  - teamd: lacp: update port state according to partner's sync bit
  - man: fix runner.min_ports default value
  - teamd: lw: nsna_ping: only send ns on enabled port [1730558]
  - teamd: lw: arp_ping: only check arp reply message
  - teamd: config: update local prio to kernel [1714440]
  - teamnl: update help message


author: Xin Long <lxin@redhat.com> - 1.29-2
changelog:
  - teamd/lacp: fix segfault due to NULL pointer dereference [1758072]
  - teamd: fix build error in expansion of macro teamd_log_dbgx [1758072]
  - teamd: update ctx->hwaddr after setting team dev to new hwaddr [1772799]
  - libteam: wapper teamd_log_dbg with teamd_log_dbgx [1758072]


author: Jiri Pirko <jpirko@redhat.com> - 1.9-8
changelog:
  - teamd: fixed couple comments [1067851]
  - teamd: update hwaddr when changing team's macaddr [1067851]
  - redhat: fix boolean types in example 2 [1067851]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.18-2
changelog:
  - Apply a patch from upstream to fix tevent_poll's additional_flags
    on 32bit architectures
  - Resolves: rhbz#975490


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.18-3
changelog:
  - Make the dependency requirements arch-specific
  - Remove ancient, unused patches
  - Remove python variables that are not needed on modern systems


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-2
changelog:
  - Allow building with RHEL-7.0 libtalloc
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-3
changelog:
  - BuildRequire the minimal applicable libtalloc version
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.31-2
changelog:
  - Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                         heavy threaded load [rhel-7.4.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.33-1
changelog:
  - Resolves: #1470054 - Rebase libtevent to enable samba rebase to version
                         4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.34-1
changelog:
  - Resolves: #1512414 - tevent can cause a Samba file corruption bug under
                         heavy threaded load


author: Hans de Goede <hdegoede@redhat.com> - 1:1.1.1-6
changelog:
  - run autoreconf for aarch64 support (#925898)
  - add a patch from upstream fixing a crash when compiled with gcc-4.8 (#959001)
  - cleanup spec-file


author: Petr Hracek <phracek@redhat.com> - 4.0.3-8
changelog:
  - tiff2ps manual page doesn't contain help for all options
  - tiffcp options differ in program help and manual page
  Resolves: #510240
  Resolves: #510258


author: Petr Hracek <phracek@redhat.com> - 4.0.3-10
changelog:
  - Resolves: #996827  CVE-2013-4231 CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
    libtiff various flaws


author: Nikola Forró <nforro@redhat.com> - 4.0.3-21
changelog:
  - Remove patches for CVEs:
    CVE-2014-8127, CVE-2014-8129, CVE-2014-8130,
    CVE-2014-9330, CVE-2015-7554, CVE-2015-8665,
    CVE-2015-8683, CVE-2015-8781, CVE-2015-8784
  - Add patches for CVEs:
    CVE-2016-3632, CVE-2016-3945, CVE-2016-3990,
    CVE-2016-3991, CVE-2016-5320
  - Update patches for CVEs:
    CVE-2014-9655, CVE-2015-1547, CVE-2015-8668
  - Related: #1299920


author: Nikola Forró <nforro@redhat.com> - 4.0.3-25
changelog:
  - Add patches for CVEs:
    CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,
    CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,
    CVE-2015-8784
  - Related: #1299920


author: Nikola Forró <nforro@redhat.com> - 4.0.3-21
changelog:
  - Remove patches for CVEs:
    CVE-2014-8127, CVE-2014-8129, CVE-2014-8130,
    CVE-2014-9330, CVE-2015-7554, CVE-2015-8665,
    CVE-2015-8683, CVE-2015-8781, CVE-2015-8784
  - Add patches for CVEs:
    CVE-2016-3632, CVE-2016-3945, CVE-2016-3990,
    CVE-2016-3991, CVE-2016-5320
  - Update patches for CVEs:
    CVE-2014-9655, CVE-2015-1547, CVE-2015-8668
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-25
changelog:
  - Add patches for CVEs:
    CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,
    CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,
    CVE-2015-8784
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-26
changelog:
  - Add patches for CVEs:
    CVE-2016-9533, CVE-2016-9534, CVE-2016-9535,
    CVE-2016-9536, CVE-2016-9537, CVE-2016-9540,
    CVE-2016-5652, CVE-2015-8870
  - Resolves: #1412080


author: Nikola Forró <nforro@redhat.com> - 4.0.3-26
changelog:
  - Add patches for CVEs:
    CVE-2016-9533, CVE-2016-9534, CVE-2016-9535,
    CVE-2016-9536, CVE-2016-9537, CVE-2016-9540,
    CVE-2016-5652, CVE-2015-8870
  - Resolves: #1412081


author: Nikola Forró <nforro@redhat.com> - 4.0.3-28
changelog:
  - Fix CVE-2016-3186
  - Resolves: #1319503
  - Fix CVE-2018-7456
  - Resolves: #1561318
  - Fix CVE-2018-8905
  - Resolves: #1574548
  - Fix CVE-2018-10779
  - Resolves: #1598503
  - Fix CVE-2018-10963
  - Resolves: #1598726
  - Fix CVE-2018-12900
  - Resolves: #1600430
  - Fix CVE-2018-17100
  - Resolves: #1632578
  - Fix CVE-2018-17101
  - Resolves: #1632579
  - Fix CVE-2018-18557
  - Resolves: #1647737
  - Fix CVE-2018-18661
  - Resolves: #1647965


author: David Shea <dshea@redhat.com> - 0.4.1-4
changelog:
  - Merge fixes from lp:timezonemap
  - Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane)
  - Set en_name correctly (iain.lane)
  - Don't call g_type_init() on glib >= 2.35; it's deprecated (iain.lane)


author: David Shea <dshea@redhat.com> - 0.4.2-6
changelog:
  - Updated the time zone map images
  - Updated the city data from geonames.org
  - Fix a memory leak and potential crash with the locations list
  - Cycle through a smaller list of map locations on repeated clicks


author: David Shea <dshea@redhat.com> - 0.4.4-1
changelog:
  - Fixes for LP#1440157:
    Port to libsoup directly for geoname results
    Fix some memory leaks
    Do not reuse GCancellables
  - Upstream merges of SVG update and constrained location cycles


author: Steve Dickson <steved@redhat.com> 0.2.4-0.7
changelog:
  - Backported upstream debugging (bz 1273159)
  - Fixed memory leak in svc_vc_create (bz 1276685)
  - Fixed memory leaks in server-side GSS authenticator (bz 1282488)


author: Steve Dickson <steved@redhat.com> 0.2.4-0.16
changelog:
  - getnetconfig.c: fix a BAD_FREE (CWE-763) (bz 1631609)
  - Fix EOF detection on non-blocking socket (bz 1331554)


author: Simone Caronni <negativo17@gmail.com> - 1.17-20
changelog:
  - Make doc package noarch.
  - Remove executable bits from LICENSE file and source files.
  - Require isaed library for devel subpackage.
  - Require CVE fixed libtommath library.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.17-26
changelog:
  - Merge EPEL changes: fix CVE-2016-6129 (#1370955, #1370957), update URLs (#1463608, #1463547)
  - Fix strict aliasing warnings by adding -fno-strict-aliasing


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.2-14
changelog:
  - allow root to copy files into NFS in libtoolize (#740079)
  - pre-filter sed's input by dd (#636045)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-2
changelog:
  - lu-Fix-rpmdiff-failure.patch [bz#1229359]
  - lu-Fix-buffer-overflow-reported-by-Coverity.patch [bz#1233114]
  - Resolves: bz#1229359
    (Fix multilib support)
  - Resolves: bz#1233114
    (fix off-by-one in dwarf_to_unw_regnum (CVE-2015-3239))


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-5
changelog:
  - Version bumped [bz#1238864]
  - Resolves: bz#1238864
    libunwind: bump version to win against existing branches


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-5.el7_2.2
changelog:
  - Fix update from EPEL version [bz#1289950]
  - Resolves: bz#1289950
    (libunwind in RHEL 7.2 has a smaller release than the last libunwind package in EPEL-7)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-2.el7
changelog:
  - Rebase to 1.2 [bz#1384435]
  - Resolves: bz#1384435
    (Rebase libunwind package (and add for ppc64le): libunwind)


author: Hans de Goede <hdegoede@redhat.com> - 1.0.11-2
changelog:
  - Fix URL to actually point to libusbx
  - Improve description to explain the relation between libusbx and libusb
  - Build the examples (to test linking, they are not packaged)


author: Miloslav Trmač <mitr@redhat.com> - 0.58-2
changelog:
  - Always use secure_getenv() or __secure_getenv(), fail build if neither is
    available.  Patch by Viktor Hercinger <vhercing@redhat.com>.


author: Doug Ledford <dledford@redhat.com> - 1.1.0.237-2
changelog:
  - Some of the scripts are missing the execute bit, fix that
  - Clean up the check script to be more appropriate for in-box use
  - Resolves: bz1182413, bz1182417


author: Jarod Wilson <jarod@redhat.com> - 2.0.1-1
changelog:
  - Update to libusnic_verbs v2.0.1 and usnic-tools v1.1.0.0
  - Use actual upstream tarballs
  - Call usnic-tools usnic-tools instead of libusnic_verbs-utils
  - Resolves: bz1281635


author: Jarod Wilson <jarod@redhat.com> - 2.0.1-3
changelog:
  - Add missing Requires: libusnic_verbs to usnic-tools sub-package
  - Bump to usnic-tools v1.1.1.0, drop patch that was merged upstream
  - BuildRequires: libibverbs v1.2.0 or later now, and infinipath-psm-devel
  - Related: bz1096997


author: Jarod Wilson <jarod@redhat.com>
changelog:
  - Drop libusnic_verbs from package, obsoleted by rdma-core
  - Update to usnic-tools v1.1.2.0 upstream release
  - Fix upgrade paths with rdma-core
  - Resolves: rhbz#1507612


author: Benjamin Tissoires <benjamin.tissoires@redhat.com>
changelog:
  - Resolves rhbz #1253829 - fix 3 CVEs:
   - CVE-2015-5198: libvdpau incorrect check for security transition
   - CVE-2015-5199: libvdpau directory traversal in dlopen
   - CVE-2015-5200: libvdpau vulnerability in trace functionality


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-6
changelog:
  - api: Remove check on iothread_id arg in virDomainPinIOThread (rhbz#1251886)
  - api: Adjust comment for virDomainAddIOThread (rhbz#1251886)
  - qemu: Add check for invalid iothread_id in qemuDomainChgIOThread (rhbz#1251886)
  - conf: Check for attach disk usage of iothread=0 (rhbz#1253108)
  - virNetDevBandwidthUpdateRate: turn class_id into integer (rhbz#1252473)
  - bridge_driver: Introduce networkBandwidthChangeAllowed (rhbz#1252473)
  - bridge_driver: Introduce networkBandwidthUpdate (rhbz#1252473)
  - qemuDomainSetInterfaceParameters: Use new functions to update bandwidth (rhbz#1252473)
  - cpu: Don't update host-model guest CPUs on ppc64 (rhbz#1251927)
  - cpu: Better support for ppc64 compatibility modes (rhbz#1251927)
  - cpu: Move check for NULL CPU model inside the driver (rhbz#1251927)
  - tests: Add some compatibility-related cases to the CPU tests (rhbz#1251927)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-7
changelog:
  - Start daemon only after filesystems are mounted (rhbz#1255228)
  - virfile: Add error for root squash change mode failure (rhbz#1253609)
  - virfile: Introduce virFileUnlink (rhbz#1253609)
  - storage: Correct the 'mode' check (rhbz#1253609)
  - storage: Handle failure from refreshVol (rhbz#1253609)
  - util: Add virStringGetFirstWithPrefix (rhbz#1165580)
  - util: Add virCgroupGetBlockDevString (rhbz#1165580)
  - util: Add getters for cgroup block device I/O throttling (rhbz#1165580)
  - lxc: Sync BlkioDevice values when setting them in cgroups (rhbz#1165580)
  - qemu: Sync BlkioDevice values when setting them in cgroups (rhbz#1165580)
  - Allow vfio hotplug of a device to the domain which owns the iommu (rhbz#1256486)
  - hostdev: skip ACS check when using VFIO for device assignment (rhbz#1256486)
  - docs: Clarify unprivileged sgio feature (rhbz#1072736)
  - qemu: Introduce qemuIsSharedHostdev (rhbz#1072736)
  - qemu: Introduce qemuGetHostdevPath (rhbz#1072736)
  - qemu: Refactor qemuCheckSharedDisk to create qemuCheckUnprivSGIO (rhbz#1072736)
  - qemu: Inline qemuGetHostdevPath (rhbz#1072736)
  - qemu: Refactor qemuSetUnprivSGIO return values (rhbz#1072736)
  - qemu: Fix integer/boolean logic in qemuSetUnprivSGIO (rhbz#1072736)
  - RHEL: qemu: Add ability to set sgio values for hostdev (rhbz#1072736)
  - RHEL: qemu: Add check for unpriv sgio for SCSI generic host device (rhbz#1072736)
  - security_selinux: Use proper structure to access socket data (rhbz#1146886)
  - security_dac: Label non-listening sockets (rhbz#1146886)
  - security: Add virSecurityDomainSetDirLabel (rhbz#1146886)
  - security_stack: Add SetDirLabel support (rhbz#1146886)
  - security_selinux: Add SetDirLabel support (rhbz#1146886)
  - security_dac: Add SetDirLabel support (rhbz#1146886)
  - qemu: Fix access to auto-generated socket paths (rhbz#1146886)
  - tests: Use qemuProcessPrepareMonitorChr in qemuxmlnstest (rhbz#1146886)
  - qemu: Label correct per-VM path when starting (rhbz#1146886)
  - selinux: fix compile errors (rhbz#1146886)
  - conf: Add ioeventfd option for controllers (rhbz#1150484)
  - qemu: Enable ioeventfd usage for virtio-scsi controllers (rhbz#1150484)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-8
changelog:
  - util: make virNetDev(Replace|Restore)MacAddress public functions (rhbz#1257004)
  - util: don't use netlink to save/set mac for macvtap+passthrough+802.1Qbh (rhbz#1257004)
  - cpu: Introduce IvyBridge CPU model (rhbz#1254420)
  - examples: Add example polkit ACL rules (rhbz#1115289)
  - qemu: don't use initialized ret in qemuRemoveSharedDevice (rhbz#1072736)
  - qemu: Introduce qemuDomainMachineIsS390CCW (rhbz#1258361)
  - qemu: Need to check for machine.os when using ADDRESS_TYPE_CCW (rhbz#1258361)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-9
changelog:
  - conf: fix crash when parsing a unordered NUMA <cell/> (rhbz#1260846)
  - vmx: Some whitespace cleanup (rhbz#1172544)
  - vmx: The virVMXParseDisk deviceType can be NULL, add some missing checks (rhbz#1172544)
  - vmx: Add handling for CDROM devices with SCSI passthru (rhbz#1172544)
  - qemu: hotplug: Properly clean up drive backend if frontend hotplug fails (rhbz#1262399)
  - qemu: Introduce QEMU_CAPS_DEVICE_RTL8139 (rhbz#1254044)
  - qemu: Introduce QEMU_CAPS_DEVICE_E1000 (rhbz#1254044)
  - qemu: Introduce QEMU_CAPS_DEVICE_VIRTIO_NET (rhbz#1254044)
  - qemu: Try several network devices when looking for a default (rhbz#1254044)
  - qemu: Report error if per-VM directory cannot be created (rhbz#1146886)
  - qemu: Do not allow others into per-VM subdirectories (rhbz#1146886)
  - qemu: Allow others to browse /var/lib/libvirt/qemu (rhbz#1146886)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-10
changelog:
  - virSecuritySELinuxSetSecurityAllLabel: drop useless virFileIsSharedFSType (rhbz#1124841)
  - security_selinux: Replace SELinuxSCSICallbackData with proper struct (rhbz#1124841)
  - virSecurityManager: Track if running as privileged (rhbz#1124841)
  - security_selinux: Take @privileged into account (rhbz#1124841)
  - qemu: Fix using guest architecture as lookup key (rhbz#1260753)
  - virfile: Check for existence of dir in virFileDeleteTree (rhbz#1146886)
  - Revert "qemu: Fix integer/boolean logic in qemuSetUnprivSGIO" (rhbz#1072736)
  - qemu: migration: Relax enforcement of memory hotplug support (rhbz#1252685)
  - conf: Add helper to determine whether memory hotplug is enabled for a vm (rhbz#1252685)
  - qemu: Make memory alignment helper more universal (rhbz#1252685)
  - conf: Drop VIR_DOMAIN_DEF_PARSE_CLOCK_ADJUST flag (rhbz#1252685)
  - conf: Document all VIR_DOMAIN_DEF_PARSE_* flags (rhbz#1252685)
  - conf: Add XML parser flag that will allow us to do incompatible updates (rhbz#1252685)
  - conf: Split memory related post parse stuff into separate function (rhbz#1252685)
  - conf: Rename max_balloon to total_memory (rhbz#1252685)
  - conf: Pre-calculate initial memory size instead of always calculating it (rhbz#1252685)
  - conf: Don't always recalculate initial memory size from NUMA size totals (rhbz#1252685)
  - qemu: command: Align memory sizes only on fresh starts (rhbz#1252685)
  - qemu: ppc64: Align memory sizes to 256MiB blocks (rhbz#1249006)
  - test: Add test to validate that memory sizes don't get updated on migration (rhbz#1252685)
  - qemu: Align memory module sizes to 2MiB (rhbz#1252685)
  - qemu: Refresh memory size only on fresh starts (rhbz#1242940)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-13
changelog:
  - qemu: Add conditions for qemu-kvm use on ppc64 (rhbz#1267882)
  - qemu: Move simplification variable to begining of the function (rhbz#1266856)
  - qemu: Extract -mem-path building into its own function (rhbz#1266856)
  - qemu: Add -mem-path even with numa (rhbz#1266856)
  - qemu: Use memory-backing-file only when needed (rhbz#1266856)
  - qemu: Always update migration times on destination (rhbz#1265902)
  - qemu: Copy completed migration stats only on success (rhbz#1265902)
  - qemu: Introduce flags in qemuMigrationCompleted (rhbz#1265902)
  - qemu: Make updating stats in qemuMigrationCheckJobStatus optional (rhbz#1265902)
  - qemu: Wait until destination QEMU consumes all migration data (rhbz#1265902)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-13.el7_2.1
changelog:
  - qemu: migration: Properly parse memory hotplug migration flag (rhbz#1280419)
  - qemu: Emit correct audit message for memory hot unplug (rhbz#1280420)
  - qemu: Emit correct audit message for memory hot plug (rhbz#1280420)
  - qemu: Extract logic to determine the mlock limit size for VFIO (rhbz#1280420)
  - qemu: hotplug: Fix mlock limit handling on memory hotplug (rhbz#1280420)
  - qemu: domain: Restructurate control flow in qemuDomainGetMlockLimitBytes (rhbz#1280420)
  - qemu: Explain mlock limit size more in detail (rhbz#1280420)
  - qemu: hotplug: Reject VFIO hotplug if setting RLIMIT_MEMLOCK fails (rhbz#1283924)
  - process: Log when limiting the amount of locked memory (rhbz#1283924)
  - qemu: Use qemuDomainRequiresMlock() in qemuBuildCommandLine() (rhbz#1283924)
  - qemu: Use qemuDomainRequiresMlock() when attaching PCI hostdev (rhbz#1283924)
  - qemu: Add ppc64-specific math to qemuDomainGetMlockLimitBytes() (rhbz#1283924)
  - qemu: Always set locked memory limit for ppc64 domains (rhbz#1283924)


