# changelog

author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-5.el6_7.2
changelog:
  - check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
  - allow only one step larger than panic threshold with -g (CVE-2015-5300)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-5
changelog:
  - reject packets without MAC when authentication is enabled (CVE-2015-1798)
  - protect symmetric associations with symmetric key against DoS attack
    (CVE-2015-1799)
  - fix generation of MD5 keys with ntp-keygen on big-endian systems
    (CVE-2015-3405)
  - log when stepping clock for leap second or ignoring it with -x (#1204625)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-3
changelog:
  - validate lengths of values in extension fields (CVE-2014-9297)
  - drop packets with spoofed source address ::1 (CVE-2014-9298)
  - add nanosecond support to SHM refclock (#1117704)
  - allow creating all SHM segments with owner-only access (#1122015)
  - allow symmetric keys up to 32 bytes again (#1053551)
  - fix calculation of root dispersion (#1045376)
  - fix crash in ntpq mreadvar command (#1165141)
  - don't step clock for leap second with -x option (#1190619)
  - don't drop packets with source port below 123 (#1171630)
  - use larger RSA exponent in ntp-keygen (#1184421)
  - refresh peers on routing updates (#1193850)
  - increase memlock limit again (#1053568)
  - warn when monitor can't be disabled due to limited restrict (#1166596)
  - improve documentation of restrict command (#1069019)
  - update logconfig documentation for patched default (#1193849)
  - don't build ntpsnmpd (#995134)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-2
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)
  - don't mobilize passive association when authentication fails (CVE-2014-9296)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-1
changelog:
  - update to 4.2.6p5 (#654004, #641800, #714079, #714084, #716968, #819781,
    - bind broadcast client to new interfaces (#973807)
  - allow selection of cipher for private key files (#749530)
  - retry few times in ntpdate init script before giving up (#673198)
  - print synchronization distance instead of dispersion in ntpstat (#830821)
  - ignore duplicate servers from dhclient (#862983)
  - add fourth server to default ntp.conf and use iburst (#667524, #623616)
  - drop comment enabling local driver in default config (#816645)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-3
changelog:
  - handle system time jumps better
  - don't wake up every second for refclocks without timer
  - don't crash in ntpstat when unknown clock type is received (#505564)
  - make ntpstat process first packet in multipacket response
  - switch to editline
  - set pool.ntp.org vendor zone in spec (#512711)
  - compile with -fno-strict-aliasing


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-2
changelog:
  - fix frequency calculation when starting with no drift file
  - reduce phase adjustments beyond Allan intercept in daemon PLL


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p7-1
changelog:
  - update to 4.2.4p7 (CVE-2009-1252)
  - improve PLL response when kernel discipline is disabled
  - don't log STA_MODE changes
  - enable nanokernel support
  - allow minpoll 3
  - increase memlock limit
  - move html documentation to -doc subpackage (#492444)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p6-4
changelog:
  - don't restart ntpd in dhclient script with every renewal
  - fix buffer overflow in ntpq (#490617)
  - check status in condrestart (#481261)
  - don't crash when compiled with HAVE_TIMER_CREATE (#486217)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p6-1
changelog:
  - update to 4.2.4p6 (CVE-2009-0021)
  - include dhclient script (David Cantrell)
  - convert COPYRIGHT to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p5-2
changelog:
  - retry failed name resolution few times before giving up (#460561)
  - don't write drift file upon exit
  - run ntpq with full path in ntp-wait script


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-7
changelog:
  - reload resolv.conf after temporary failure in name resolution (#456743)
  - use clock_gettime
  - make subpackages for perl scripts and ntpdate (#452097, #456116)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-5
changelog:
  - fix building IPv6 support with new glibc-headers (#436713)
  - avoid unaligned memory access (#435301)
  - fix receiving broadcasts on 255.255.255.255


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-4
changelog:
  - reset kernel frequency when -x option is used
  - create separate init script for ntpdate
  - add note about paths and exit codes to ntpd man page


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p4-1
changelog:
  - update to 4.2.4p4
  - fix default NTP version for outgoing packets in ntpdate man page
    (#245408)
  - replace BSD with advertising code in ntpdc and ntpq


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p2-5
changelog:
  - avoid use of uninitialized floating-point values in clock_select
  - update license tag (Tom "spot" Callaway)
  - drop sntp, MSNTP license is non-free


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p2-2
changelog:
  - ignore tentative addresses (#246297)
  - improve init script (#247003)
  - fix sleep patch
  - ease Autokey setup (#139673)
    - change default keysdir to /etc/ntp/crypto
    - set crypto password in /etc/ntp/crypto/pw
    - don't use randfile if /dev/urandom is used by OpenSSL
  - change default statsdir to /var/log/ntpstats/, use statistics type
    as default filename
  - package more doc files


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p0-3
changelog:
  - fix interface updates with -I or -L option (#240254)
  - accept multiple -I options
  - fix broadcast client/server to accept/allow sending
    broadcasts on 255.255.255.255 (#226958)
  - fix return codes in init script (#240120)
  - exit with nonzero code if ntpd -q did not set clock (#240134)
  - drop revert452 patch, fixed in kernel 2.6.19
  - make with _smp_mflags


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4p0-1
changelog:
  - update to 4.2.4p0
  - fix init script
    - don't add second -g to ntpd options (#228424)
    - update getopts
    - skip all refclocks when parsing ntp.conf
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-4
changelog:
  - don't wake up every second (#204748)
  - add option to enable memory locking (#195617)
  - fix broadcast client
  - use option values in ntp-keygen
  - improve man pages


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-3
changelog:
  - disable autoopts option preset mechanisms for ntpd
  - document -I option of ntpd
  - generate makewhatis friendly man pages


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.4-1
changelog:
  - update to 4.2.4 (#146884)
  - don't use local clock in default config
  - autogenerate man pages from HTML
  - clean up spec a bit


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p4-1
changelog:
  - update to 4.2.2p4
  - fix buffer overflow in WWV Audio driver (#216309)
  - don't mark init script as config


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2-3
changelog:
  - fix manycast support in ntpdate (#194329)
  - reply to manycast requests with null refid
  - enable mlockall (#195617)
  - correct threshold value in ntpdate manpage


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-14
changelog:
  - modify ntp.conf, change default restrict, remove broadcastdelay,
    use fedora.pool.ntp.org (#189667)
  - don't install drift file
  - remove unsupported options from ntptrace manpage (#137717)
  - fix default paths in manpages for ntp-keygen and ntpdate


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-12
changelog:
  - fix initscript:
    - replace -U with -u in getopts (#187003)
    - don't pass group to ntpdate -U argument and ignore -i in options (#142926)
    - set ntpconf for -c
    - remove -p 8 from ntpdate arguments
    - don't call ntpdate when step-tickers doesn't contain anything useful
      and -x isn't in options
  - fix default keyfile for ntpdate (#183196)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-11
changelog:
  - update man pages (#153195, #162856)
  - drop C-Frame-121, vsnprintf, minusTi and loconly patch
  - prevent segfault when loopback interface is not configured (#159056)
  - spec cleanup


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-10
changelog:
  - ntpd does not submit his local clock (if there is no peer).
    ntpdate->ntpd #163862 , Patch13: ntp-stable-4.2.0a-20050816-loconly.patch


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-3
changelog:
  - A similar patch as ntp-4.0.99j-vsnprintf.patch in FEDORA CORE 4
  - (current patch is ntp-stable-4.2.0a-20050816-vsnprintf.patch)


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-2
changelog:
  - Fix fails on upgrade, if ntpd is disabled (#166773)
  - A cosmetic patch. There are some comments and braces '{' '}' added.
  - One unprintable character was converted to octal-form .
  - It can be removed anytime (conversion of the cvs-projets for C-Frame 121,
  - (auto-debug, auto-trace for cfr-printnet server).


author: Jindrich Novy <jnovy@redhat.com> 4.2.0.a.20050816-1
changelog:
  - update to the latest stable 4.2.0.a.20050816
  - drop upstreamed .gcc4, .vsnprintf patches
  - remove obsolete .autofoo patch
  - make patch numbering less chaotic
  - don't package backup for .droproot patch


author: Harald Hoyer <harald@redhat.com> - 4.2.0.a.20040617-4
changelog:
  - removed firewall hole punching from the initscript; rely on iptables
    ESTABLISHED,RELATED or manual firewall configuration


author: Harald Hoyer <harald@redhat.de> 4.1.1b-1
changelog:
  - updated to version 4.1.1b
  - improved initscript - use ntpdate on -x
  - improved initscript - open firewall only for timeservers
  - ntp-4.1.1a-adjtime.patch removed (already in source)
  - ntp-4.1.1a-mfp.patch removed (already in source)
  - ntp-4.0.99j-vsnprintf.patch removed (already in source)


author: Harald Hoyer <harald@redhat.de> 4.1.0b-4
changelog:
  - created drift with dummy value #58294
  - grep for timeservers in ntp.conf also for ntpdate #57837
  - check return value of ntpdate #58836


author: Harald Hoyer <harald@redhat.de> 4.1.0-1
changelog:
  - wow, how stupid can a man be ;).. fixed #50698 
  - updated to 4.1.0 (changes are small and in non-critical regions)


author: Harald Hoyer <harald@redhat.de>
changelog:
  - new snapshot
  - removed typos and security patch (already there)
  - commented multicastclient in config file


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Add the remote root exploit patch (based on ntp-hackers).
  - Enhance droproot patch (more documentation, etc.) <Jarno.Huuskonen@uku.fi>
  - Tweak the droproot patch to include sys/prctl.h, not linux/prctl.h
  (implicit declarations)
  - Remote groupdel commands, shouldn't be needed.
  - Removed -Wcast-qual and -Wconversion due to excessive warnings (hackish).
  - Make ntp compilable with both glibc 2.1 and 2.2.x (very dirty hack)
  - Add %{_sysconfdir}/sysconfig/ntpd which drops root privs by default


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - require/buildprereq libcap/libcap-devel
  - use 'ntp' user, tune the pre/post scripts, %files
  - add $OPTIONS to the init script


author: Preston Brown <pbrown@redhat.com>
changelog:
  - allow comments in %{_sysconfdir}/ntp/step-tickers file (#28786).
  - need patch0 (glibc patch) on ia64 too


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - comment out default values for keys, warn about starting with -A (#19316).
  - take out -A from ntpd startup as well.
  - update to 4.0.99k.


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-13
changelog:
  - fix buffer overflow in datum refclock driver (CVE-2017-6462)
  - fix crash with invalid unpeer command (CVE-2017-6463)
  - fix potential crash with invalid server command (CVE-2017-6464)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-12
changelog:
  - don't limit rate of packets from sources (CVE-2016-7426)
  - don't change interface from received packets (CVE-2016-7429)
  - fix calculation of root distance again (CVE-2016-7433)
  - require authentication for trap commands (CVE-2016-9310)
  - fix crash when reporting peer event to trappers (CVE-2016-9311)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-11
changelog:
  - don't allow spoofed packets to demobilize associations (CVE-2015-7979,
    CVE-2016-1547)
  - don't allow spoofed packet to enable symmetric interleaved mode
    (CVE-2016-1548)
  - check mode of new source in config command (CVE-2016-2518)
  - make MAC check resilient against timing attack (CVE-2016-1550)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-10
changelog:
  - don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
  - fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.6p5-9
changelog:
  - fix crash with invalid logconfig command (CVE-2015-5194)
  - fix crash when referencing disabled statistic type (CVE-2015-5195)
  - don't hang in sntp with crafted reply (CVE-2015-5219)
  - don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
    CVE-2015-7702)
  - fix memory leak with autokey (CVE-2015-7701)
  - don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
  - don't crash in ntpq with crafted packet (CVE-2015-7852)
  - add option to set Differentiated Services Code Point (DSCP) (#1228314)
  - extend rawstats log (#1242895)
  - fix resetting of leap status (#1243034)
  - report clock state changes related to leap seconds (#1242937)
  - allow -4/-6 on restrict lines with mask (#1232146)
  - retry joining multicast groups (#1288534)
  - explain synchronised state in ntpstat man page (#1286969)


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-11
changelog:
  - Resolves: rhbz#701501
  - Resolves: rhbz#729971
  - Resolves: rhbz#729032
    (not reproducable any more {zkabelac])


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-7
changelog:
  - Create symlink from full versioned libdmraid dso files
    to libdmraid.so.1 and libdmraid-events-isw.so.1
    (ie. soname we use for linking)
  - Resolves: rhbz#557514


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-5
changelog:
  - Resolves: rhbz#554698
    SGPIO spare led is still in rebuilding state fix
  - Resolves rhbz#554700
    switch to using /var/cache/logwatch/dmeventd/syslogpattern.txt;
    explicitly claim logwatch files in dmraid-events-logwatch
  - Resolves rhbz#554708
    gets size of Silicon Image JBOD set wrong fix
  - Resolves rhbz#554710
    try to register non-existent dmeventd DSO fix


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc16-4
changelog:
  - bz526157: fix manual pages for dmraid.static and dm_dso_reg_tool
  - bz505562: ddf1 metadata format handler LSI persistent name fix
  - bz524168: fix pdc metadata format handler to report the correct number
    of devices in a RAID10 subset
  - bz528097: move libraries to /lib* in order to avoid catch22
    with unmountable /usr


author: Hans de Goede <hdegoede@redhat.com> - 1.0.0.rc16-3
changelog:
  - Add Obsoletes for dmraid-libs packages (merged into the main pkg, #524261)
  - Make -devel Require the main package now the dmraid-libs package is gone


author: Hans de Goede <hdegoede@redhat.com> - 1.0.0.rc15-7
changelog:
  - Fix activation of isw raid sets when the disks have serialnumber longer
    then 16 characters (#490121)


author: Hans de Goede <hdegoede@redhat.com> - 1.0.0.rc15-5
changelog:
  - Make --rm_partitions work with older kernels which return EINVAL when trying
    to remove a partition with a number > 16
  - Document --rm_partitions in the man page


author: Alasdair Kergon <agk@redhat.com> - 1.0.0.rc14-8
changelog:
  - Move library into libs subpackage.
  - Fix summary and licence tags.
  - Replace static build with symlink.


author: Ian Kent <ikent@redhat.com> - 1.0.0.rc14-6
changelog:
  - Bug 379911: dmraid needs to generate UUIDs for lib device-mapper
    - add "DMRAID-" prefix to dmraid UUID string.


author: Ian Kent <ikent@redhat.com> - 1.0.0.rc14-5
changelog:
  - Bug 379911: dmraid needs to generate UUIDs for lib device-mapper
  - Bug 379951: dmraid needs to activate device-mapper mirror resynchronization error handling


author: Alasdair Kergon <agk@redhat.com> - 1.0.0.rc14-2
changelog:
  - Add build dependency on new device-mapper-devel package.
  - Add dependency on device-mapper.
  - Add post and postun ldconfig.
  - Update BuildRoot and Summary.


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc14-1
changelog:
  - asr.c: fixed Adaptec HostRAID DDF1 metadata discovery (bz#211016)
  - ddf1_crc.c: added crc() routine to avoid linking to zlib alltogether,
                because Ubuntu had problems with this
  - dropped zlib build requirement


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc13-1
changelog:
  - metadata.c: fixed bug returning wrang unified RAID type (bz#210085)
  - pdc.c: fixed magic number check


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc12-1
changelog:
  - sil.c: quorate() OBO fix
  - activate.c: handler() OBO fix
  - added SNIA DDF1 support
  - added reload functionality to devmapper.c
  - added log_zero_sectors() to various metadata format handlers
  - sil.[ch]: added JBOD support


author: Peter Jones <pjones@redhat.com> - 1.0.0.rc11-FC6.2
changelog:
  - Fix bounds checking on hpt37x error log
  - Only build the .so, not the .a
  - Fix asc.c duplication in makefile rule


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc11-FC5_7.1
changelog:
  - jm.c: checksum() calculation
  - misc.c: support "%d" in p_fmt and fix segfault with wrong format identifier
  - nv.c: size fix in setup_rd()
  - activate.c:
          o striped devices could end on non-chunk boundaries
          o calc_region_size() calculated too small sizes causing large
            dirty logs in memory
  - isw.c: set raid5 type to left asymmetric
  - toollib.c: fixed 'No RAID...' message
  - support selection of RAID5 allocation algorithm in metadata format handlers
  - build


author: Heinz Mauelshagen <heinzm@redhat.com> - 1.0.0.rc10-FC5_6
changelog:
  - add doc/dmraid_design.txt to %doc (#181885)
  - add --enable-libselinux --enable-libsepol to configure
  - rebuilt


author: Peter Jones <pjones@redhat.com> 1.0.0.rc9-FC5_2
changelog:
  - update to 1.0.0.rc9
  - make "make install" do the right thing with the DSO
  - eliminate duplicate definitions in the headers
  - export more symbols in the DSO
  - add api calls to retrieve dm tables
  - fix DESTDIR for 'make install' 
  - add api calls to identify degraded devices
  - remove several arch excludes


author: Heinz Mauelshagen <heinzm@redhat.com> 1.0.0.rc8-FC4_1
changelog:
  - nv.c: fixed stripe size
  - sil.c: avoid incarnation_no in name creation, because the Windows
           driver changes it every time
  - added --ignorelocking option to avoid taking out locks in early boot
    where no read/write access to /var is given


author: Heinz Mauelshagen <heinzm@redhat.com> 1.0.0.rc6.1-4_FC4
changelog:
  - VIA metadata format handler
  - added RAID10 to lsi metadata format handler
  - "dmraid -rD": file device size into {devicename}_{formatname}.size
  - "dmraid -tay": pretty print multi-line tables ala "dmsetup table"
  - "dmraid -l": display supported RAID levels + manual update
  - _sil_read() used LOG_NOTICE rather than LOG_INFO in order to
    avoid messages about valid metadata areas being displayed
    during "dmraid -vay".
  - isw, sil filed metadata offset on "-r -D" in sectors rather than in bytes.
  - isw needed dev_sort() to sort RAID devices in sets correctly.
  - pdc metadata format handler name creation. Lead to
    wrong RAID set grouping logic in some configurations.
  - pdc RAID1 size calculation fixed (rc6.1)
  - dos.c: partition table code fixes by Paul Moore
  - _free_dev_pointers(): fixed potential OOB error
  - hpt37x_check: deal with raid_disks = 1 in mirror sets
  - pdc_check: status & 0x80 doesn't always show a failed device;
    removed that check for now. Status definitions needed.
  - sil addition of RAID sets to global list of sets
  - sil spare device memory leak
  - group_set(): removal of RAID set in case of error
  - hpt37x: handle total_secs > device size
  - allow -p with -f
  - enhanced error message by checking target type against list of
    registered target types


author: Tom Lane <tgl@redhat.com> 3.9.4-8
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885310


author: Tom Lane <tgl@redhat.com> 3.9.4-3
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688830
  - Add fix for CVE-2011-1167
  Resolves: #688743


author: Tom Lane <tgl@redhat.com> 3.9.4-1
changelog:
  - Update to libtiff 3.9.4, for numerous bug fixes including fixes for
    CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, CVE-2010-2233
  Resolves: #606708, #588784, #589034, #603024
  - Add fixes for multiple SIGSEGV problems
  Resolves: #603081, #603699, #603703


author: Tom Lane <tgl@redhat.com> 3.9.2-3
changelog:
  - Sync with F-12, including:
  - Update to libtiff 3.9.2; stop carrying a lot of old patches
  - Apply Warmerdam's partial fix for bug #460322 ... better than nothing.
  - Use build system's libtool instead of what package contains;
    among other cleanup this gets rid of unwanted rpath specs in executables
  - add sparc/sparc64 to multilib header support
  - Apply Adam Goode's fix for Warmerdam's fix
  Resolves: #552360
  Resolves: #533353
  - Add some defenses to prevent tiffcmp from crashing on downsampled JPEG
    images; this isn't enough to make it really work correctly though


author: Tom Lane <tgl@redhat.com> 3.8.2-11
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Related: #458674
  - Use -fno-strict-aliasing per rpmdiff recommendation


author: Tom Lane <tgl@redhat.com> 3.8.2-8
changelog:
  - Restore static library to distribution, in a separate -static subpackage
  Resolves: #219905
  - Don't apply multilib header hack to unrecognized architectures
  Resolves: #233091
  - Remove documentation for programs we don't ship
  Resolves: #205079
  Related: #185145


author: Jindrich Novy <jnovy@redhat.com> - 3.8.2-6
changelog:
  - fix CVE-2006-2193, tiff2pdf buffer overflow (#194362)
  - fix typo in man page for tiffset (#186297)
  - use %{?dist}


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
    CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)


author: Matthias Saou <http://freshrpms.net/> 3.7.4-2
changelog:
  - Remove useless explicit dependencies.
  - Minor spec file cleanups.
  - Move make check to %check.
  - Add _smp_mflags.


author: Matthias Clasen <mclasen@redhat.com> - 3.7.1-3
changelog:
  - Drop the largefile patch again
  - Fix a problem with the handling of alpha channels
  - Fix an integer overflow in tiffdump (#143576)


author: Phil Knirsch <phil@redhat.de>
changelog:
  - Fixed ia64 problem with tiffinfo. Was general 64 bit arch problem where s390x
    and ia64 were missing (#52129).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages from devel package to the regular one
  - integrate Frank Warmerdam's fixed .fax handling code (keep until next release
    of libtiff)
  - fix fax2ps breakage (bug #8345)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - enable zip and jpeg codecs
  - change defattr in normal package to 0755
  - add defattr to -devel package


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297891 - Rebase RHEL 6.8 to NSPR 4.11 in preparation for Firefox 45


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269361 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-1
changelog:
  - Rebase to nspr-4.10.8
  - Resolves: Bug 1200920 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Rebase to nspr-4.10.2
  - Resolves: rhbz#1032488 - CVE-2013-5607 (MFSA 2013-103) Avoid unsigned integer wrapping in PL_ArenaAllocate (MFSA 2013-103)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-1
changelog:
  - Update Version to 4.10.0 to prevent Mozilla apps update problems as
  - reported and fixed on https://bugzilla.redhat.com/show_bug.cgi?id=981166
  - Resolves: rhbz#1002643 - Rebase RHEL 6 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.9.5-3
changelog:
  - Bump the release tag so it's higher than the one for rhel-6.4.z
  - Resolves: rhbz#919180 - Rebase to nspr-4.9.5


author: Kai Engert <kengert@redhat.com> - 4.6.6-2
changelog:
  - Update thread-cleanup patch to latest upstream version
  - Add upstream patch to support PR_STATIC_ASSERT


author: Kai Engert <kengert@redhat.com> - 4.6.5-2
changelog:
  - Update to latest ipv6 upstream patch
  - Add upstream patch to fix a thread cleanup issue
  - Now requires pkgconfig


author: Kai Engert <kengert@redhat.com> 4.6.1-2
changelog:
  - Do not use -ansi when compiling, because of a compilation
    problem with latest glibc and anonymous unions.
    See also bugzilla.mozilla.org # 322427.


author: Christopher Aillon <caillon@redhat.com>
changelog:
  - Stop shipping static libraries; NSS and dependencies no longer
    require static libraries to build.


author: Christopher Aillon <caillon@redhat.com> 4.6-4
changelog:
  - Use the NSPR version numbering scheme reported by NSPR,
    which unfortunately is not exactly the same as the real
    version (4.6 != 4.6.0 according to RPM and pkgconfig).


author: Karsten Hopp <karsten@redhat.com> 1.12-1
changelog:
  - update to wget-1.12
  - fixes CVE-2009-3490 wget: incorrect verification of SSL certificate
    with NUL in name


author: Karsten Hopp <karsten@redhat.com> 1.11.3-1
changelog:
  - wget-1.11.3, downgrades the combination of the -N and -O options
    to a warning instead of an error


author: Karsten Hopp <karsten@redhat.com> 1.10.2-15
changelog:
  - fix discarding of expired cookies
  - escape non-printable characters
  - drop to11 patch for now (#223754, #227853, #227498)


author: Karsten Hopp <karsten@redhat.com> 1.10.2-13
changelog:
  - merge review changes (#226538)
    - use version/release/... in buildroot tag
    - remove BR perl
    - use SMP flags
    - use make install instead of %makeinstall
    - include copy of license
    - use Requires(post)/Requires(preun)
    - use optflags
    - remove trailing dot from summary
    - change tabs to spaces


author: Karsten Hopp <karsten@redhat.de> 1.10-2
changelog:
  - update to wget-1.10
    - drop passive-ftp patch, already in 1.10
    - drop CVS patch
    - drop LFS patch, similar fix in 1.10
    - drop protdir patch, similar fix in 1.10
    - drop actime patch, already in 1.10


author: Karsten Hopp <karsten@redhat.de> 1.9.1-20
changelog:
  - texi2pod doesn't handle texinfo xref's. rewrite some lines so that
    the man page doesn't have incomplete sentences anymore (#140470)


author: Karsten Hopp <karsten@redhat.de> 1.9.1-19
changelog:
  - Don't set actime to access time of the remote file or tmpwatch might 
    remove the file again (#146440).  Set it to the current time instead.
    timestamping checks only modtime, so this should be ok.


author: Karsten Hopp <karsten@redhat.de> 1.9.1-18
changelog:
  - add support for --protocol-directories option as documented
    in the man page (Ville Skyttä, #145571)


author: Karsten Hopp <karsten@redhat.de> 1.9.1-7
changelog:
  - clean up manpage (#117519)
  - buildrequire texinfo (#123780)
  - LFS patch, based on wget-LFS-20040630.patch from Leonid Petrov
    (#123524, #124628, #115348)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 1.7
  - Require perl for building (to get man pages)
  - Don't include the Japanese po file, it's now included
  - Use %{_tmppath}
  - no patches necessary
  - Make /etc/wgetrc noreplace
  - More docs


author: Bill Nottingham <notting@redhat.com>
changelog:
  - setlocale for LC_CTYPE too, or else all the translations think their
    characters are unprintable.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - upgraded to 1.5.0
  - they removed the man page from the distribution (Duh!) and I added it back
    from 1.4.5. Hey, removing the man page is DUMB!


author: Adam Jackson <ajax@redhat.com> 1.3.3-1
changelog:
  - libXfont 1.3.3.
  - libXfont-1.3.1-fast-retry.patch: Retry font server connections faster.
    (#443070)


author: Adam Jackson <ajax@redhat.com> 1.2.3-2.fc7
changelog:
  - libXfont-1.2.3-namespace-pollution.patch: Hide some symbols from the dynamic
    linker to avoid colliding with other libs.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXfont to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Removed libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch, which is now
    integrated upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-3
changelog:
  - Added libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch to remove
    conditionalization of FONTDIRATTRIB from sources instead of tweaking
    CFLAGS for bug (#172997, fdo#5047).


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXfont to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXfont to version 0.99.1 from X11R7 RC1
  - Remove libfontcache* from file manifests, as it is static linked into Xfont


author: Mike A. Harris <mharris@redhat.com> 0.99.0-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix BuildRequires to use new libX* style package names


author: Mike A. Harris <mharris@redhat.com> 0.99.0-4
changelog:
  - Added xorg-x11-proto-devel dependency to 'devel' subpackage, because the
    libXfont headers use some of the protocol headers, but the autotooling of
    libXfont doesn't autodetect this yet.  Discovered when bdftopcf failed to
    compile while trying to package xorg-x11-font-utils, even though libXfont
    headers were installed.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Changed all virtual BuildRequires to the "xorg-x11-" prefixed non-virtual
    package names, as we want xorg-x11 libs to explicitly build against
    X.Org supplied libs, rather than "any implementation", which is what the
    virtual provides is intended for.
  - Added freetype-devel build dependency


author: Mike A. Harris <mharris@redhat.com> 0.99.0-2
changelog:
  - Renamed package to prepend "xorg-x11" to the name for consistency with
    the rest of the X11R7 packages.
  - Added "Requires: %{name} = %{version}-%{release}" dependency to devel
    subpackage to ensure the devel package matches the installed shared libs.
  - Added virtual "Provides: lib<name>" and "Provides: lib<name>-devel" to
    allow applications to use implementation agnostic dependencies.
  - Added post/postun scripts which call ldconfig.
  - Added Conflicts with XFree86-libs and xorg-x11-libs to runtime package,
    and Conflicts with XFree86-devel and xorg-x11-devel to devel package.


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.30
changelog:
  - Fix restorecond init script
  - Make setools.seinfo working only on SELinux enabled systems in seobjet.py
  Resolves:#893065


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.28
changelog:
  - Allow to define sock file in /etc directory 
  Resolves:#816460
  - Make output of audit2allow when AVC can be allowed by boolean more readable


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.27
changelog:
  - Fix restorecond usage
  - Add missing te_stream_rules and if_stream_rules templates
  Resolves:#816460
  - Print a message if no default labels are assigned
  Resolves:#851479


author: Miroslav Grepl <mgrepl@redhat.com> - 2.0.83-19.25
changelog:
  - Make restorecon to return proper exit codes on failure
  Resolves:#824779
  - Fix generated role_types for *.te
  Resolves:#843727


author: Dan Walsh <dwalsh@redhat.com> - 2.0.83-19.22
changelog:
  - Make sure installing po files use -p
  - Fix unchecked return codes
  Resolves: #684015
  - Fix semanage is sending the wrong kind of audit events 
  - Fix Polyinstantiated namespace mount leaking to excluded users 
  Related: #786664 
  - Fix selinux-policy update shows error parsing file obj_perm_s... 
  Related: #786191


author: Dan Walsh <dwalsh@redhat.com> - 2.0.83-19.19
changelog:
  - Change semanage to produce proper audit records for Common Criteria
  - Fix the handling of namespaces in seunshare/sandbox.
  - Currently mounting of directories within sandbox is propogating to the 
  - parent namesspace.
  - restorecond -u needs to watch terminal for exit if run outside of dbus.
  - Fix unchecked return codes
  Related: #785678


author: Miroslav Grepl <mgrepl@redhat.com> 2.0.83-19.18
changelog:
  - Other fix for semanage man page
  Resolves: #677541
  - Don't report error on load_policy when system is disabled.


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.16
changelog:
  - Restorecon should not be exiting with a 1 when it is successful in relabeling a file
  Resolves: #740699
  Resolves: #739587


author: Miroslav Grepl <mgrepl@redhat.com> 2.0.83-19.15
changelog:
  - Needs require gnome-python2-gtkhtml2 to make system-config-selinux working
  - Not use open_init_pty by default


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.13
changelog:
  - Fix spec file to require rsync for sandbox
  Resolves: #734467
  - Fix spec file to require gtkhtml2 for lockdown booleans program
  Resolves: #702860
  - Fix bugs found by Coverity
  Resolves: #717640
  Resolves: #728833


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.12
changelog:
  - Back port option handling in semanage to handle semodule module -D correctly
  - Back port manpage from Fedora
  Resolves: #666861


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.11
changelog:
  - Remove sandbox calling -k, only should be used by seunshare, should not be
  called all the time.
  Resolves: #679690
  >>>>>>> c2a6de616017e800342523076acf56bb12ccadbf
  Resolves: #679689
  Resolves: #677541
  Resolves: #679798


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.10
changelog:
  - Fix policycoreutils-sandbox description
  - Change sepolgen-ifgen to search all available policy files
  - Fix portspage in system-config-selinux to not crash
  - fix to sandbox 
    - Fix seunshare to use more secure handling of /tmp
      - Rewrite seunshare to make sure /tmp is mounted stickybit owned by root
     - Change to allow sandbox to run on nfs homedirs, add start python script
     - change default location of HOMEDIR in sandbox to /tmp/.sandbox_home_*
     - Move seunshare to sandbox package
     - Fix sandbox to show correct types in  usage statement
  Resolves: #679690
  Resolves: #679689
  Resolves: #677541
  Resolves: #679798
  - Fixes for sepologen 
    - Usage statement needs -n name
    - Names with _ are being prevented
    - dbus apps should get _chat interface
    - Cleaup selinux-polgengui to be a little more modern, fix comments and use selected name
    - Add sandbox to sepolgen
    - Polgengui raises the wrong type of exception.  #471078
  - Cleanup chcat man page
  - Update translations
  - restorecond fixes
    - Have restorecond watch more directories in homedir
    - Fix restorecond watching utmp file for people logging in our out
    - Exit in restorecond if it can not find a UID in the passwd database

  - Stop fixfiles from complaining about missing dirs

  - Semanage fixes
    - Fix up node handling in semanage command
    - Fix proper handling of getopt errors
    - Do not allow modules names to contain spaces
    - Change semanage to not allow it to semanage module -D
  Resolves: #677542
  - Change setsebool to suggest run as root on failure
  - Don't report error on load_policy when system is disabled.
  - Fix unchecked return value of getpwuid()


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19.9
changelog:
  - selinux-polgengui should not blow up on disabled SELinux system
  Resolves: #695288
  CVE-2011-1011 policycoreutils: insecure temporary directory handling in seunshare
  Resolves: #679690
  check return value of getpwuid()
  Fix semanage module -D' traceback
  Resolves: #666861 
  sandbox -- AttributeError: 'module' object has no attribute 'chcon' 	
  Resolves: #690502 	
  system-config-selinux could not open interface info 	
  Resolves: #696809
  Mv sandbox.conf.5.gz to sandbox.5.gz and put in base package
  Resolves: #690744 
  sestatus usage message not complete (missing -b option) 	
  Resolves: #705027
  correct package name in the -sandbox subpackage description 	
  Resolves: #679798
  dracut attempts to load_policy with SELinux=disabled 	
  Resolves: #659076
  Resolves: #658532
  8 options are not described in semanage man page 	
  Resolves: #677541
  Mention "semanage module" in semanage man page 	 
  Resolves: #677542
  Update translations
  Allow polcycoreutils-gui and tools to run on disabled SELinux systems
  Resolves: #695288 
  Resolves: #689153


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-19
changelog:
  - Fix sandbox -H and -T regression
  Resolves: #626404
  - Fix fcontext translation handling in system-config-selinux


author: Dan Walsh <dwalsh@redhat.com> 2.0.83-17
changelog:
  - Apply patch to restorecond from Chris Adams, which will cause restorecond 
  - to watch first user that logs in.


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-27
changelog:
  - Move genhomedircon.8 to same package as genhomedircon
  - Fix sandbox to pass unit test
  Resolves: #595796


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-23
changelog:
  - Fix seunshare translations
  - Fix seunshare to work on all arches
  - Fix icon for system-config-selinux
  Resolves: #595276


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-17
changelog:
  - Fix policy tool to have correct name in menus
  - Fix seunshare to handle /tmp being in ~/home
  - Fix saving of altered files
  - Update translations


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-13
changelog:
  - Make semanage boolean work on disabled machines and during livecd xguest
  - Fix homedir and tmpdir handling in sandbox
  Resolves: #587263


author: Dan Walsh <dwalsh@redhat.com> 2.0.82-7
changelog:
  - Fix crash when args are empty
  Resolves: #582542
  - Fix semange to exit on bad options
  - Fix semanage dontaudit man page section
  Resolves: #582533


author: Dan Walsh <dwalsh@redhat.com> 2.0.81-4
changelog:
  - Update to upstream - sepolgen
  	* Add since-last-boot option to audit2allow from Dan Walsh.
  	* Fix sepolgen output to match what Chris expects for upstream
  	  refpolicy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-14
changelog:
  - Add session capability to sandbox 
  - sandbox -SX -H ~/.homedir -t unconfined_t -l s0:c15 /etc/gdm/Xsession


author: Dan Walsh <dwalsh@redhat.com> 2.0.78-1
changelog:
  - Update to upstream
  	* Remove non-working OUTFILE from fixfiles from Dan Walsh.
  	* Additional exception handling in chcat from Dan Walsh.

  	* fix sepolgen to read a "type 1403" msg as a policy load by Stephen
  	  Smalley <sds@tycho.nsa.gov>
  	* Add support for Xen ocontexts from Paul Nuzzi.


author: Dan Walsh <dwalsh@redhat.com> 2.0.77-1
changelog:
  - Update to upstream
  	* Fixed bug preventing semanage node -a from working
  	  from Chad Sellers
  	* Fixed bug preventing semanage fcontext -l from working
  	  from Chad Sellers
  - Change semanage to use unicode


author: Dan Walsh <dwalsh@redhat.com> 2.0.76-1
changelog:
  - Update to upstream
  	* Remove setrans management from semanage, as it does not work
  	  from Dan Walsh.
  	* Move load_policy from /usr/sbin to /sbin from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-14
changelog:
  - Allow semanage -i and semanage -o to generate customization files.
  - semanage -o will generate a customization file that semanage -i can read and set a machines to the same selinux configuration


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-8
changelog:
  - Add check to sandbox to verify save changes - Chris Pardy
  - Fix memory leak in restorecond - Steve Grubb


author: Dan Walsh <dwalsh@redhat.com> 2.0.74-1
changelog:
  - Update to upstream
  	* Change semodule upgrade behavior to install even if the module
  	  is not present from Dan Walsh.
  	* Make setfiles label if selinux is disabled and a seclabel aware
  	  kernel is running from Caleb Case.
  	* Clarify forkpty() error message in run_init from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 2.0.73-1
changelog:
  - Update to upstream
          * Add semanage dontaudit to turn off dontaudits from Dan Walsh.
          * Fix semanage to set correct mode for setrans file from Dan Walsh.
          * Fix malformed dictionary in portRecord from Dan Walsh.
  	* Restore symlink handling support to restorecon based on a patch by
  	Martin Orr.  This fixes the restorecon /dev/stdin performed by Debian
  	udev scripts that was broken by policycoreutils 2.0.70.


author: Ville Skyttä <ville.skytta@iki.fi> - 2.0.71-9
changelog:
  - Don't try to remove restorecond after last erase (done already in %preun).
  - Ensure scriptlets exit with status 0.
  - Fix %post and %pr


author: Dan Walsh <dwalsh@redhat.com> 2.0.71-1
changelog:
  - Fix chcat to report error on non existing file
  - Update to upstream
  	* Modify setfiles/restorecon checking of exclude paths.  Only check
  	user-supplied exclude paths (not automatically generated ones based on
  	lack of seclabel support), don't require them to be directories, and
  	ignore permission denied errors on them (it is ok to exclude a path to
  	which the caller lacks permission).


author: Dan Walsh <dwalsh@redhat.com> 2.0.70-1
changelog:
  - Update to upstream
  	* Modify restorecon to only call realpath() on user-supplied pathnames
  	from Stephen Smalley.
  	* Fix typo in fixfiles that prevented it from relabeling btrfs 
  	  filesystems from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.68-1
changelog:
  - Fix location of man pages
  - Update to upstream
  	* Modify setfiles to exclude mounts without seclabel option in
  	/proc/mounts on kernels >= 2.6.30 from Thomas Liu.
  	* Re-enable disable_dontaudit rules upon semodule -B from Christopher
  	Pardy and Dan Walsh.
  	* setfiles converted to fts from Thomas Liu.


author: Dan Walsh <dwalsh@redhat.com> 2.0.64-1
changelog:
  - Update to upstream
  	* Keep setfiles from spamming console from Dan Walsh.
  	* Fix chcat's category expansion for users from Dan Walsh.
  - Update po files
  - Fix sepolgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.63-1
changelog:
  - Update to upstream
  	* Fix transaction checking from Dan Walsh.
  	* Make fixfiles -R (for rpm) recursive.
  	* Make semanage permissive clean up after itself from Dan Walsh.
  	* add /root/.ssh/* to restorecond.conf


author: Dan Walsh <dwalsh@redhat.com> 2.0.62-1
changelog:
  - Update to upstream
  	* Add btrfs to fixfiles from Dan Walsh.
  	* Remove restorecond error for matching globs with multiple hard links
   	  and fix some error messages from Dan Walsh.
  	* Make removing a non-existant module a warning rather than an error
  	  from Dan Walsh.
  	* Man page fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-3
changelog:
  - Add Domains Page to system-config-selinux
  - Add ability to create dbus confined applications to polgen


author: Dan Walsh <dwalsh@redhat.com> 2.0.61-1
changelog:
  - Update to upstream
  	* chcat: cut categories at arbitrary point (25) from Dan Walsh
  	* semodule: use new interfaces in libsemanage for compressed files
  	  from Dan Walsh
  	* audit2allow: string changes for usage


author: Dan Walsh <dwalsh@redhat.com> 2.0.58-1
changelog:
  - Update to upstream
  	* Allow local file context entries to override policy entries in
  	semanage from Dan Walsh.
  	* Newrole error message corrections from Dan Walsh.
  	* Add exception to audit2why call in audit2allow from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.56-1
changelog:
  - Fix semanage help display
  - Update to upstream
  	* fixfiles will now remove all files in /tmp and will check for
  	  unlabeled_t in /tmp and /var/tmp from Dan Walsh.
  	* add glob support to restorecond from Dan Walsh.
  	* allow semanage to handle multi-line commands in a single transaction
  	  from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.54-1
changelog:
  - Update to upstream
  	* Add support for boolean files and group support for seusers from Dan Walsh.
  	* Ensure that setfiles -p output is newline terminated from Russell Coker.


author: Dan Walsh <dwalsh@redhat.com> 2.0.53-1
changelog:
  - Update to upstream
  	* Change setfiles to validate all file_contexts files when using -c from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.52-2
changelog:
  - Add lockdown wizard
  - Allow semanage booleans to take an input file an process lots of booleans at once.


author: Dan Walsh <dwalsh@redhat.com> 2.0.49-1
changelog:
  - Update to upstream
  	* Remove security_check_context calls for prefix validation from semanage.
  	* Change setfiles and restorecon to not relabel if the file already has the correct context value even if -F/force is specified.


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-2
changelog:
  - Add 	rm -rf /tmp/gconfd-* /tmp/pulse-* /tmp/orbit-* to fixfiles restore
  - So that mislabeled files will get removed on full relabel


author: Dan Walsh <dwalsh@redhat.com> 2.0.47-1
changelog:
  - Make restorecond not start by default
  - Fix polgengui to allow defining of confined roles.
  - Add patches from Lubomir Rintel <lkundrak@v3.sk> 
    * Add necessary runtime dependencies on setools-console for -gui
    * separate stderr when run seinfo commands
  - Update to upstream
    * Update semanage man page for booleans from Dan Walsh.
    * Add further error checking to seobject.py for setting booleans.


author: Dan Walsh <dwalsh@redhat.com> 2.0.46-1
changelog:
  - Update to upstream
  	* Update audit2allow to report dontaudit cases from Dan Walsh.
  	* Fix semanage port to use --proto from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> 2.0.43-1
changelog:
  - Update to upstream
  	* Merged fix fixfiles option processing from Vaclav Ovsik.
  - Added existing users, staff and user_t users to polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.42-1
changelog:
  - Update to upstream
  	* Make semodule_expand use sepol_set_expand_consume_base to reduce
  	  peak memory usage.


author: Dan Walsh <dwalsh@redhat.com> 2.0.41-1
changelog:
  - Update to upstream
  	* Merged audit2why fix and semanage boolean --on/--off/-1/-0 support from Dan Walsh.
  	* Merged a second fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.39-1
changelog:
  - Don't initialize audit2allow for audit2why call.  Use default
  - Update to upstream
  	* Merged fixfiles -C fix from Marshall Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Update to upstream
    * Merged audit2allow cleanups and boolean descriptions from Dan Walsh.
    * Merged setfiles -0 support by Benny Amorsen via Dan Walsh.
    * Merged fixfiles fixes and support for ext4 and gfs2 from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.36-1
changelog:
  - Update to upstream
  	* Merged update to chcat, fixfiles, and semanage scripts from Dan Walsh.
  	* Merged sepolgen fixes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.35-1
changelog:
  - Update to upstream
  	* Merged support for non-interactive newrole command invocation from Tim Reed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-2
changelog:
  - Make sepolgen set error exit code when partial failure
  - audit2why now checks booleans for avc diagnosis


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-1
changelog:
  - Update to upstream
  	* Update Makefile to not build restorecond if
  	  /usr/include/sys/inotify.h is not present


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-4
changelog:
  - Fix sepolgen to be able to parse Fedora 9 policy
        Handle ifelse statements
        Handle refpolicywarn inside of define
        Add init.if and inetd.if into parse
        Add parse_file to syntax error message


author: Dan Walsh <dwalsh@redhat.com> 2.0.33-1
changelog:
  - Upgrade from NSA
  	* Drop verbose output on fixfiles -C from Dan Walsh.
  	* Fix argument handling in fixfiles from Dan Walsh.
  	* Enhance boolean support in semanage, including using the .xml description when available, from Dan Walsh.
  - Fix handling of final screen in polgengui


author: Dan Walsh <dwalsh@redhat.com> 2.0.31-1
changelog:
  - Remove no.po
  - Update to upstream
  	* Fix semodule option handling from Dan Walsh.
  	* Add deleteall support for ports and fcontexts in semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.29-1
changelog:
  - Update to upstream
  	* Add genhomedircon script to invoke semodule -Bn from Dan Walsh.
  - Add deleteall for ports and fcontext


author: Dan Walsh <dwalsh@redhat.com> 2.0.28-1
changelog:
  - Update to upstream
  	* Update semodule man page for -D from Dan Walsh.
  	* Add boolean, locallist, deleteall, and store support to semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-13
changelog:
  - Upgrade version of sepolgen from NSA
  	* Expand the sepolgen parser to parse all current refpolicy modules from Karl MacMillan.
  	* Suppress generation of rules for non-denials from Karl MacMillan (take 3).


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-1
changelog:
  - Update semodule man page
  	* Fix genhomedircon searching for USER from Todd Miller
  	* Install run_init with mode 0755 from Dan Walsh.
  	* Fix chcat from Dan Walsh.
  	* Fix fixfiles pattern expansion and error reporting from Dan Walsh.	
  	* Optimize genhomedircon to compile regexes once from Dan Walsh.
  	* Fix semanage gettext call from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.22-13
changelog:
  - Speed up genhomedircon by an order of magnitude by compiling regex
  - Allow semanage fcontext -a -t <<none>> /path to work


author: Dan Walsh <dwalsh@redhat.com> 2.0.20-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged setfiles -c usage fix from Dan Walsh.
  	* Merged restorecon fix from Yuichi Nakamura.
  	* Dropped -lsepol where no longer needed.


author: Dan Walsh <dwalsh@redhat.com> 2.0.16-1
changelog:
  - Updated version of policycoreutils
  	* Merged support for modifying the prefix via semanage from Dan Walsh.
  - Fixed genhomedircon to find homedirs correctly.


author: Dan Walsh <dwalsh@redhat.com> 2.0.15-1
changelog:
  - Updated version of policycoreutils
  	* Merged po file updates from Dan Walsh.
  - Fix semanage to be able to modify prefix in user record


author: Dan Walsh <dwalsh@redhat.com> 2.0.13-1
changelog:
  - Updated version of policycoreutils
  	* Merged setsebool patch to only use libsemanage for persistent boolean changes from Stephen Smalley.
  	* Merged genhomedircon patch to use the __default__ setting from Dan Walsh.
  	* Dropped -b option from load_policy in preparation for always preserving booleans across reloads in the kernel.


author: Dan Walsh <dwalsh@redhat.com> 2.0.10-1
changelog:
  - Updated version of policycoreutils
  	* Merged chcat, fixfiles, genhomedircon, restorecond, and restorecon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.9-1
changelog:
  - Updated version of sepolgen
  	* Merged seobject setransRecords patch to return the first alias from Xavier Toth.


author: Dan Walsh <dwalsh@redhat.com> 2.0.8-1
changelog:
  - Updated version of sepolgen
  	* Merged updates to sepolgen-ifgen from Karl MacMillan.
  	* Merged updates to sepolgen parser and tools from Karl MacMillan.
  	  This includes improved debugging support, handling of interface 
  	  calls with list parameters, support for role transition rules,
  	  updated range transition rule support, and looser matching.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-8
changelog:
  - system-config-selinux should be able to run on a disabled system,
  - at least enough to get it enabled.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-6
changelog:
  - Updated version of sepolgen
  	* Merged patch to discard self from types when generating requires from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-5
changelog:
  - Change location of audit2allow and sepol-ifgen to sbin
  - Updated version of sepolgen
  	* Merged patch to move the sepolgen runtime data from /usr/share to /var/lib to facilitate a read-only /usr from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-1
changelog:
  - Update to upstream
  	* Merged restorecond init script LSB compliance patch from Steve Grubb.
    -sepolgen
  	* Merged better matching for refpolicy style from Karl MacMillan
  	* Merged support for extracting interface paramaters from interface calls from Karl MacMillan
  	* Merged support for parsing USER_AVC audit messages from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-3
changelog:
  - Update to upstream
    -sepolgen
  	* Merged support for enabling parser debugging from Karl MacMillan.
  - Add sgrupp cleanup of restorcon init script


author: Dan Walsh <dwalsh@redhat.com> 2.0.6-1
changelog:
  - Update to upstream
    - policycoreutils
  	* Merged newrole O_NONBLOCK fix from Linda Knippers.
  	* Merged sepolgen and audit2allow patches to leave generated files 
  	  in the current directory from Karl MacMillan.
  	* Merged restorecond memory leak fix from Steve Grubb.
    -sepolgen
  	* Merged patch to leave generated files (e.g. local.te) in current directory from Karl MacMillan.
  	* Merged patch to make run-tests.py use unittest.main from Karl MacMillan.
  	* Merged patch to update PLY from Karl MacMillan.
  	* Merged patch to update the sepolgen parser to handle the latest reference policy from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.3-1
changelog:
  - Update to upstream
  	* Merged translations update from Dan Walsh.
  	* Merged chcat fixes from Dan Walsh.
  	* Merged man page fixes from Dan Walsh.
  	* Merged seobject prefix validity checking from Dan Walsh.
  	* Merged Makefile and refparser.py patch from Dan Walsh.
  	  Fixes PYTHONLIBDIR definition and error handling on interface files.


author: Dan Walsh <dwalsh@redhat.com> 2.0.2-1
changelog:
  - Update to upstream
  	* Merged seobject exception handler fix from Caleb Case.
  	* Merged setfiles memory leak patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.1-1
changelog:
  - Update to upstream
  	* Merged small fix to correct include of errcodes.h in semodule_deps from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 2.0.0-1
changelog:
  - Update to upstream
  	* Merged new audit2allow from Karl MacMillan.
  	  This audit2allow depends on the new sepolgen python module.
  	  Note that you must run the sepolgen-ifgen tool to generate
  	  the data needed by audit2allow to generate refpolicy. 
  	* Fixed newrole non-pam build.
  - Fix Changelog and spelling error in man page


author: Dan Walsh <dwalsh@redhat.com> 1.34.1-1
changelog:
  - Fix system-config-selinux ports view
  - Update to upstream
  	* Fixed newrole non-pam build.
  	* Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> 1.33.15-1
changelog:
  - Update to upstream
  	* Merged unicode-to-string fix for seobject audit from Dan Walsh.
  	* Merged man page updates to make "apropos selinux" work from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.14-1
changelog:
  * Merged newrole man page patch from Michael Thompson.
  	* Merged patch to fix python unicode problem from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-1
changelog:
  - Want to update to match api
  - Update to upstream
  	* Merged newrole securetty check from Dan Walsh.
  	* Merged semodule patch to generalize list support from Karl MacMillan.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 1.33.11-1
changelog:
  - Update to upstream
  	* Merged fixfiles and seobject fixes from Dan Walsh.
  	* Merged semodule support for list of modules after -i from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.33.10-1
changelog:
  - Update to upstream
  	* Merged patch to correctly handle a failure during semanage handle
  	  creation from Karl MacMillan.
  	* Merged patch to fix seobject role modification from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.8-1
changelog:
  - Update to upstream
  	* Merged patches from Dan Walsh to:
  	  - omit the optional name from audit2allow
  	  - use the installed python version in the Makefiles
  	  - re-open the tty with O_RDWR in newrole


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-9
changelog:
  - Fix fixfiles script to use tty command correctly.  If this command fails, it 
  should set the LOGFILE to /dev/null
  Resolves: #220879


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-7
changelog:
  - add exists switch to semanage to tell it not to check for existance of Linux user
  Resolves: #219421


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-6
changelog:
  - Fix audit2allow generating reference policy
  - Fix semanage to manage user roles properly 
  Resolves: #220071


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-5
changelog:
  - Update po files
  - Fix newrole to open stdout and stderr rdrw so more will work on MLS machines
  Resolves: #216920


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-1
changelog:
  - Update to upstream
  	* Patch from Dan Walsh to add an pam_acct_msg call to run_init
  	* Patch from Dan Walsh to fix error code returns in newrole
  	* Patch from Dan Walsh to remove verbose flag from semanage man page
  	* Patch from Dan Walsh to make audit2allow use refpolicy Makefile
  	  in /usr/share/selinux/<SELINUXTYPE>


author: Dan Walsh <dwalsh@redhat.com> 1.33.4-1
changelog:
  - Upstream accepted my patches
  	* Merged setsebool patch from Karl MacMillan. 
  	  This fixes a bug reported by Yuichi Nakamura with
  	  always setting booleans persistently on an unmanaged system.


author: Dan Walsh <dwalsh@redhat.com> 1.32-1
changelog:
  - Add newrole audit patch from sgrubb
  - Update to upstream
  	* Merged audit2allow -l fix from Yuichi Nakamura.
  	* Merged restorecon -i and -o - support from Karl MacMillan.
  	* Merged semanage/seobject fix from Dan Walsh.
  	* Merged fixfiles -R and verify changes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.30-1
changelog:
  - Update to upstream
  	* Merged newrole auditing of failures due to user actions from
  	  Michael Thompson.


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-6
changelog:
  - Change setfiles and restorecon to use stderr except for -o flag
  - Also -o flag will now output files


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-1
changelog:
  - Security fixes to run python in a more locked down manner
  - More Translations
  - Update to upstream
  	* Merged fix for restorecon // handling from Erich Schubert.
  	* Merged translations update and fixfiles fix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.27-4
changelog:
  - Add -i qualified to restorecon to tell it to ignore files that do not exist
  - Fixfiles also modified for this change


author: Dan Walsh <dwalsh@redhat.com> 1.30.26-1
changelog:
  - Update to upstream
  	* Merged semanage local file contexts patch from Chris PeBenito.
  - Fix fixfiles log creation
  - More translations


author: Dan Walsh <dwalsh@redhat.com> 1.30.25-1
changelog:
  - Update to upstream
  	* Merged patch from Dan Walsh with:
  	  * audit2allow: process MAC_POLICY_LOAD events
  	  * newrole:  run shell with - prefix to start a login shell
  	  * po:  po file updates
  	  * restorecond:  bail if SELinux not enabled
  	  * fixfiles: omit -q 
  	  * genhomedircon:  fix exit code if non-root
  	  * semodule_deps:  install man page
  	* Merged secon Makefile fix from Joshua Brindle.
  	* Merged netfilter contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.22-1
changelog:
  - Update to upstream
  	* Merged restorecond size_t fix from Joshua Brindle.
  	* Merged secon keycreate patch from Michael LeMay.
  	* Merged restorecond fixes from Dan Walsh.
  	  Merged updated po files from Dan Walsh.
  	* Merged python gettext patch from Stephen Bennett.
  	* Merged semodule_deps from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.30.17-1
changelog:
  - Update to upstream
  	* Lindent.
  	* Merged patch from Dan Walsh with:
  	  * -p option (progress) for setfiles and restorecon.
  	  * disable context translation for setfiles and restorecon.
  	  * on/off values for setsebool.
  	* Merged setfiles and semodule_link fixes from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.30.14-1
changelog:
  - Update to upstream
  	* Merged fix for setsebool error path from Serge Hallyn.
  	* Merged patch from Dan Walsh with:
  	*    Updated po files.
  	*    Fixes for genhomedircon and seobject.
  	*    Audit message for mass relabel by setfiles.


author: Dan Walsh <dwalsh@redhat.com> 1.30.11-1
changelog:
  - Update to upstream
  	* Merged more translations from Dan Walsh.
  	* Merged patch to relocate setfiles to /sbin for early relabel
  	  when /usr might not be mounted from Dan Walsh.
  	* Merged semanage/seobject patch to preserve fcontext ordering in list.
  	* Merged secon patch from James Antill.


author: James Antill <jantill@redhat.com> 1.30.10-2
changelog:
  - secon fixes for --self-exec etc.
  - secon change from level => sensitivity, add clearance.
  - Add mass relabel AUDIT patch, but disable it until kernel problem solved.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Update to upstream
  	* Merged patch with updates to audit2allow, secon, genhomedircon,
  	  and semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.9-1
changelog:
  - Update to upstream
  	* Fixed audit2allow and po Makefiles for DESTDIR= builds.
  	* Merged .po file patch from Dan Walsh.
  	* Merged bug fix for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - Update to upstream
  	* Merged fix warnings patch from Karl MacMillan.
  	* Merged patch from Dan Walsh.
  	  This includes audit2allow changes for analysis plugins,
  	  internationalization support for several additional programs 
  	  and added po files, some fixes for semanage, and several cleanups.
  	  It also adds a new secon utility.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Add /etc/samba/secrets.tdb to restorecond.conf
  - Update from upstream
  	* Merged semanage prefix support from Russell Coker.
  	* Added a test to setfiles to check that the spec file is
  	  a regular file.


author: Dan Walsh <dwalsh@redhat.com> 1.30.4-1
changelog:
  - Update from upstream
  	* Merged audit2allow fixes for refpolicy from Dan Walsh.
  	* Merged fixfiles patch from Dan Walsh.
  	* Merged restorecond daemon from Dan Walsh.
  	* Merged semanage non-MLS fixes from Chris PeBenito.
  	* Merged semanage and semodule man page examples from Thomas Bleher.


author: Dan Walsh <dwalsh@redhat.com> 1.30.1-1
changelog:
  - Make audit2allow translate dontaudit as well as allow rules
  - Update from upstream
  	* Merged semanage labeling prefix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.26-1
changelog:
  - Update from upstream
  	* Merged semanage bug fix patch from Ivan Gyurdiev.
  	* Merged improve bindings patch from Ivan Gyurdiev.
  	* Merged semanage usage patch from Ivan Gyurdiev.
  	* Merged use PyList patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.23-1
changelog:
  - Update from upstream
  	* Merged newrole -V/--version support from Glauber de Oliveira Costa.
  	* Merged genhomedircon prefix patch from Dan Walsh.
  	* Merged optionals in base patch from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.20-1
changelog:
  - Update from upstream
  	* Merged seuser/user_extra support patch to semodule_package 
  	  from Joshua Brindle.
  	* Merged getopt type fix for semodule_link/expand and sestatus
  	  from Chris PeBenito.
  - Fix genhomedircon output


author: Dan Walsh <dwalsh@redhat.com> 1.29.17-1
changelog:
  - Update from upstream
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged seusers.system patch from Ivan Gyurdiev.
  	* Merged improve port/fcontext API patch from Ivan Gyurdiev.
  	* Merged genhomedircon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.15-1
changelog:
  - Update from upstream
  	* Merged newrole audit patch from Steve Grubb.
  	* Merged seuser -> seuser local rename patch from Ivan Gyurdiev.
  	* Merged semanage and semodule access check patches from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.11-1
changelog:
  - Added translation support to semanage
  - Update from upstream
  	* Modified newrole and run_init to use the loginuid when
  	  supported to obtain the Linux user identity to re-authenticate,
  	  and to fall back to real uid.  Dropped the use of the SELinux
  	  user identity, as Linux users are now mapped to SELinux users
  	  via seusers and the SELinux user identity space is separate.
  	* Merged semanage bug fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat.8 and genhomedircon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.8-1
changelog:
  - Update to match NSA
  	* Merged semanage fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.7-1
changelog:
  - Update to match NSA
  	* Merged newrole cleanup patch from Steve Grubb.
  	* Merged setfiles/restorecon performance patch from Russell Coker.
  	* Merged genhomedircon and semanage patches from Dan Walsh.
  	* Merged remove add_local/set_local patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon and semanage patch from Dan Walsh.
  	* Changed semodule error reporting to include argv[0].


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Update to match NSA
  	* Merged semanage getpwnam bug fix from Serge Hallyn (IBM).
  	* Merged patch series from Ivan Gyurdiev.
  	  This includes patches to:
  	  - cleanup setsebool
  	  - update setsebool to apply active booleans through libsemanage
  	  - update semodule to use the new semanage_set_rebuild() interface
  	  - fix various bugs in semanage
  	* Merged patch from Dan Walsh (Red Hat).
  	  This includes fixes for restorecon, chcat, fixfiles, genhomedircon,
  	  and semanage.


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Fix genhomedircon to work in installer
  - Update to match NSA
  	* Merged patch for chcat script from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.1-1
changelog:
  - Update to match NSA
  	* Merged fix for audit2allow long option list from Dan Walsh.
  	* Merged -r option for restorecon (alias for -R) from Dan Walsh.
  	* Merged chcat script and man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.36-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to warn on use of ROLE in homedir_template
  	  if using managed policy, as libsemanage does not yet support it.


author: Dan Walsh <dwalsh@redhat.com> 1.27.35-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon bug fix from Dan Walsh.
  	* Revised semodule* man pages to refer to checkmodule and
  	  to include example sections.


author: Dan Walsh <dwalsh@redhat.com> 1.27.33-1
changelog:
  - Update to match NSA
  	* Merged audit2allow --tefile and --fcfile support from Dan Walsh.
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged semodule* man pages from Dan Walsh, and edited them.
  	* Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
  	  retain validation/canonicalization of contexts during init.


author: Dan Walsh <dwalsh@redhat.com> 1.27.31-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to always use user_r for the role in the
  	  managed case since user_get_defrole is broken.
  - Add te file capabilities to audit2allow
  - Add man pages for semodule


author: Dan Walsh <dwalsh@redhat.com> 1.27.30-1
changelog:
  - Update to match NSA
  	* Merged sestatus, audit2allow, and semanage patch from Dan Walsh.
  	* Fixed semodule -v option.


author: Dan Walsh <dwalsh@redhat.com> 1.27.29-1
changelog:
  - Update to match NSA
  	* Merged audit2allow python script from Dan Walsh.
  	  (old script moved to audit2allow.perl, will be removed later).
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged semodule quieting patch from Dan Walsh
  	  (inverts default, use -v to restore original behavior).


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-2
changelog:
  - Update to match NSA
  	* Merged genhomedircon rewrite from Dan Walsh.
  - Rewrite audit2allow to python


author: Dan Walsh <dwalsh@redhat.com> 1.27.26-1
changelog:
  * Added -B (--build) option to semodule to force a rebuild.
  	* Reverted setsebool patch to call semanage_set_reload_bools().
  	* Changed setsebool to disable policy reload and to call
  	  security_set_boolean_list to update the runtime booleans.
  	* Changed setfiles -c to use new flag to set_matchpathcon_flags()
  	  to disable context translation by matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.27.23-1
changelog:
  - Update to match NSA
  	* Changed setfiles for the context canonicalization support.
  	* Changed setsebool to call semanage_is_managed() interface
  	  and fall back to security_set_boolean_list() if policy is
  	  not managed.
  	* Merged setsebool memory leak fix from Ivan Gyurdiev.
  	* Merged setsebool patch to call semanage_set_reload_bools()
  	  interface from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to match NSA
  	* Merged setsebool patch from Ivan Gyurdiev.
  	  This moves setsebool from libselinux/utils to policycoreutils,
  	  and rewrites it to use libsemanage for permanent boolean changes.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to match NSA
  	* Merged semodule support for reload, noreload, and store options
  	  from Joshua Brindle.
  	* Merged semodule_package rewrite from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.18-1
changelog:
  - Update to match NSA
  	* Cleaned up usage and error messages and releasing of memory by
     	  semodule_* utilities.
  	* Corrected error reporting by semodule.
  	* Updated semodule_expand for change to sepol interface.
  	* Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to match NSA
  	* Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.


author: Dan Walsh <dwalsh@redhat.com> 1.27.11-1
changelog:
  - Update to match NSA
  	* Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
  	* Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
  	* Merged fixfiles patch from Dan Walsh (Red Hat).
  	* Updated semodule for removal of semanage_strerror.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to match NSA
  	* Updated semodule_link and semodule_expand to use shared libsepol.
  	Fixed audit2why to call policydb_init prior to policydb_read (still
  	uses the static libsepol).


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to match NSA
  	* Updated for changes to libsepol. 
  	Changed semodule and semodule_package to use the shared libsepol.
  	Disabled build of semodule_link and semodule_expand for now.
  	Updated audit2why for relocated policydb internal headers,
  	still needs to be converted to a shared lib interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.5-1
changelog:
  - Update to match NSA
  	* Fixed warnings in load_policy.
  	* Rewrote load_policy to use the new selinux_mkload_policy()
  	interface provided by libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to match NSA
  	* Merged patch to update semodule to the new libsemanage API
  	and improve the user interface from Karl MacMillan (Tresys).
  	* Modified semodule for the create/connect API split.


author: Dan Walsh <dwalsh@redhat.com> 1.27.2-1
changelog:
  - Update to match NSA
  	* Merged run_init open_init_pty bug fix from Manoj Srivastava
  	  (unblock SIGCHLD).  Bug reported by Erich Schubert.


author: Dan Walsh <dwalsh@redhat.com> 1.27.1-1
changelog:
  - Update to match NSA
  	* Merged error shadowing bug fix for restorecon from Dan Walsh.
  	* Merged setfiles usage/man page update for -r option from Dan Walsh.
  	* Merged fixfiles -C patch to ignore :s0 addition on update
  	  to a MCS/MLS policy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.25.9-1
changelog:
  - Update to match NSA
  	* Changed setfiles -c to translate the context to raw format
  	prior to calling libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update to match NSA
  	* Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).
  	  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.25.5-1
changelog:
  - Update to match NSA
  	* Merged patch to move module read/write code from libsemanage
  	  to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update to match NSA
  	* Merged fixfiles and newrole patch from Dan Walsh.
  	* Merged audit2why man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update to match NSA
  	* Extended audit2why to incorporate booleans and local user 
  	  settings when analyzing audit messages.


author: Dan Walsh <dwalsh@redhat.com> 1.23.9-1
changelog:
  - Update to match NSA
  	* Updated audit2why for sepol_ prefixes on Flask types to
  	  avoid namespace collision with libselinux, and to 
  	  include <selinux/selinux.h> now.


author: Dan Walsh <dwalsh@redhat.com> 1.23.7-1
changelog:
  - Change -f flag in fixfiles to remove stuff from /tmp
  - Change -F flag to pass -F flag  to restorecon/fixfiles.  (IE Force relabel).


author: Dan Walsh <dwalsh@redhat.com> 1.23.6-1
changelog:
  - Update to match NSA
  	* Fixed signed/unsigned pointer bug in load_policy.
  	* Reverted context validation patch for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.23.5-1
changelog:
  - Update to match NSA
  	* Reverted load_policy is_selinux_enabled patch from Dan Walsh.
  	  Otherwise, an initial policy load cannot be performed using
  	  load_policy, e.g. for anaconda.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update to version from NSA
  	* Merged load_policy is_selinux_enabled patch from Dan Walsh.
  	* Merged restorecon verbose output patch from Dan Walsh.
  	* Merged setfiles altroot patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.23.3-1
changelog:
  - Update to version from NSA
          * Merged context validation patch for genhomedircon from Eric Paris.
  - Fix verbose output of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.23.2-1
changelog:
  - Update to version from NSA
  	* Changed setfiles -c to call set_matchpathcon_flags(3) to
  	  turn off processing of .homedirs and .local.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update to released version from NSA
  	* Merged rewrite of genhomedircon by Eric Paris.
  	* Changed fixfiles to relabel jfs since it now supports security xattrs
  	  (as of 2.6.11).  Removed reiserfs until 2.6.12 is released with 
  	  fixed support for reiserfs and selinux.


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-2
changelog:
  - Apply Uli patch
  	* The Makefiles should use the -Wall option even if compiled in beehive
  	* Add -W, too
  	* use -Werror when used outside of beehive.  This could also be used unconditionally
  	* setfiles/setfiles.c: fix resulting warning
  	* restorecon/restorecon.c: Likewise
  	* run_init/open_init_pty.c: argc hasn't been checked, the program would crash if
  called without parameters.  ignore the return value of nice properly.
  	* run_init: don't link with -ldl lutil
  	* load_policy: that's the bad bug.  pointer to unsigned int is passed, size_t is
  written to.  fails on 64-bit archs
  	* sestatus: signed vs unsigned problem
  	* newrole: don't link with -ldl


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-1
changelog:
  - Update to latest from NSA
  	* Changed load_policy to fall back to the original policy upon
  	  an error from sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.17-1
changelog:
  - Update to latest from NSA
  	* Merged new genhomedircon script from Dan Walsh.
  	* Changed load_policy to call sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.13-1
changelog:
  - Update from NSA
  	* Merged further change to fixfiles -C from Dan Walsh.
  	* Merged updated fixfiles script from Dan Walsh.
  - Fix error handling of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.21.12-1
changelog:
  - More cleanup of fixfiles sed patch
  	* Merged further patches for restorecon/setfiles -e and fixfiles -C.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - More cleanup of fixfiles sed patch
  - Upgrade to latest from NSA
  	* Merged patch for open_init_pty from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.9-1
changelog:
  - More cleanup of sed patch
  - Upgrade to latest from NSA
  	* Merged updated fixfiles script from Dan Walsh.
  	* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
  	* Reverted fixfiles patch for file_contexts.local; 
  	  obsoleted by setfiles rewrite.
  	* Merged error handling patch for restorecon from Dan Walsh.
  	* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
  	* Rewrote setfiles to use matchpathcon and the new interfaces
  	  exported by libselinux (>= 1.21.5).


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-3
changelog:
  - Fix fixfiles patch
  - Upgrade to latest from NSA
  	* Prevent overflow of spec array in setfiles.
  - Add diff comparason between file_contexts to fixfiles
  - Allow restorecon to give an warning on file not found instead of exiting


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged newrole -l support from Darrel Goeddel (TCS).
  - Fix genhomedircon STARTING_UID


author: Dan Walsh <dwalsh@redhat.com> 1.21.3-1
changelog:
  - Upgrade to latest from NSA
  	* Fixed restorecon to not treat errors from is_context_customizable()
  	  as a customizable context.
  	* Merged setfiles/restorecon patch to not reset user field unless
  	  -F option is specified from Dan Walsh.
  	* Merged open_init_pty helper for run_init from Manoj Srivastava.
  	* Merged audit2allow and genhomedircon man pages from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.1-3
changelog:
  - Don't change user componant if it is all that changed unless forced.
  - Change fixfiles to concatinate file_context.local for setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.20.1-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles rewrite from Dan Walsh.
  	* Merged restorecon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles and restorecon patches from Dan Walsh.
  	* Don't display change if only user part changed.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-4
changelog:
  - Fix fixfiles handling of rpm
  - Fix restorecon to not warn on symlinks unless -v -v 
  - Fix output of verbose to show old context as well as new context


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Update to latest from NSA
  	* Changed restorecon to ignore ENOENT errors from matchpathcon.
  	* Merged nonls patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Update with NSA
  	* Added -l option to setfiles to log changes via syslog.
  	* Merged -e option to setfiles to exclude directories.
  	* Merged -R option to restorecon for recursive descent.


author: Dan Walsh <dwalsh@redhat.com> 1.14.1-2
changelog:
  - Fix fixfiles.cron to not run on non SELinux boxes
  - Fix several problems in fixfiles and fixfiles.cron


author: Dan Walsh <dwalsh@redhat.com> 1.13.3-1
changelog:
  - Update latest from NSA
  - Add -o option to setfiles to save output of any files with incorrect context.


author: Colin Walters <walters@redhat.com> 1.10-3
changelog:
  - Add patch to fall back to authenticating via uid if
    the current user's SELinux user identity is the default
    identity
  - Add BuildRequires pam-devel


author: Dan Walsh <dwalsh@redhat.com> 1.9-9
changelog:
  - Change restorecon to not follow symlinks.  It is too difficult and confusing
  - to figure out the file context for the file pointed to by a symlink.


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-17
changelog:
  - reduce xenstore watches and fix a regular expression which may cause xend been killed
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Firas Azar <firas.azar@oracle.com> [bug 18556579]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-16
changelog:
  - fix get tty path
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Steve Noyes <steve.noyes@oracle.com> [bug 18420874]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-15
changelog:
  - fix tty port re: it should be ungreedy
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Steve Noyes <steve.noyes@oracle.com> [bug 18421069]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-13
changelog:
  - fix the way to get manager IP after SSL authentication
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>


author: Carson Hovey <carson.hovey@oracle.com> - 0.1-12
changelog:
  - Code to support condrestart was missing; added same.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 17180175] [bug -] [bug OVM-CONSOLED] [bug CONDRESTART] [bug DOES] [bug NOT] [bug WORK]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-11
changelog:
  - Support hvm serial console
    We should setup the SSL tunnel against serial console for hvm and against pv
    console for pvm.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 15881557]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-10
changelog:
  - With this patch, during VM migration, the tunnel on the source side will be
    removed. It also restrict one connection to the tunnel.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 14481292]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-8
changelog:
  - restrict Manager IP only for SSL vnc/tty console access - add missing part.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com>


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-7
changelog:
  - fix agent notification module path.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Alexandre Chartre <alexandre.chartre@oracle.com>


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 0.1-6
changelog:
  - restrict Manager IP only for SSL vnc/tty console access.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com>


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-30.2
changelog:
  - fix CVE-2014-3567 - memory leak when handling session tickets
  - fix CVE-2014-3513 - memory leak in srtp support
  - add support for fallback SCSV to partially mitigate CVE-2014-3566
    (padding attack on SSL3)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-29
changelog:
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3507 - avoid memory leak in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3509 - fix race condition when parsing server hello
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
  - fix CVE-2014-3511 - disallow protocol downgrade via fragmentation


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-26
changelog:
  - drop EXPORT, RC2, and DES from the default cipher list (#1057520)
  - print ephemeral key size negotiated in TLS handshake (#1057715)
  - do not include ECC ciphersuites in SSLv2 client hello (#1090952)
  - properly detect encryption failure in BIO (#1100819)
  - fail on hmac integrity check if the .hmac file is empty (#1105567)
  - FIPS mode: make the limitations on DSA, DH, and RSA keygen
    length enforced only if OPENSSL_ENFORCE_MODULUS_BITS environment
    variable is set


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-25
changelog:
  - fix CVE-2010-5298 - possible use of memory after free
  - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment
  - fix CVE-2014-0198 - possible NULL pointer dereference
  - fix CVE-2014-0221 - DoS from invalid DTLS handshake packet
  - fix CVE-2014-0224 - SSL/TLS MITM vulnerability
  - fix CVE-2014-3470 - client-side DoS when using anonymous ECDH


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-21
changelog:
  - add DH_compute_key_padded needed for FIPS CAVS testing
  - make 3des strength to be 128 bits instead of 168 (#1056616)
  - FIPS mode: do not generate DSA keys and DH parameters < 2048 bits
  - FIPS mode: use approved RSA keygen (allows only 2048 and 3072 bit keys)
  - FIPS mode: add DH selftest
  - FIPS mode: reseed DRBG properly on RAND_add()
  - FIPS mode: add RSA encrypt/decrypt selftest
  - FIPS mode: add hard limit for 2^32 GCM block encryptions with the same key
  - use the key length from configuration file if req -newkey rsa is invoked


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-15
changelog:
  - make DTLS1 work in FIPS mode
  - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-28
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-27
changelog:
  - fix sslrand(1) and sslpasswd(1) reference in openssl(1) manpage (#841645)
  - drop superfluous lib64 fixup in pkgconfig .pc files (#770872)
  - force BIO_accept_new(*:<port-number>) to listen on IPv4


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-26
changelog:
  - use PKCS#8 when writing private keys in FIPS mode as the old
    PEM encryption mode is not FIPS compatible (#812348)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-25
changelog:
  - fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)
  - properly initialize tkeylen in the CVE-2012-0884 fix


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-21
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-16
changelog:
  - merge the optimizations for AES-NI, SHA1, and RC4 from the intelx
    engine to the internal implementations


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-15
changelog:
  - better documentation of the available digests in apps (#693858)
  - backported CHIL engine fixes (#693863)
  - allow testing build without downstream patches (#708511)
  - enable partial RELRO when linking (#723994)
  - add intelx engine with improved performance on new Intel CPUs
  - add OPENSSL_DISABLE_AES_NI environment variable which disables
    the AES-NI support (does not affect the intelx engine)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-8
changelog:
  - add -x931 parameter to openssl genrsa command to use the ANSI X9.31
    key generation method
  - use FIPS-186-3 method for DSA parameter generation
  - add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
    to allow using MD5 when the system is in the maintenance state
    even if the /proc fips flag is on
  - make openssl pkcs12 command work by default in the FIPS mode


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-7
changelog:
  - listen on ipv6 wildcard in s_server so we accept connections
    from both ipv4 and ipv6 (#601612)
  - fix openssl speed command so it can be used in the FIPS mode
    with FIPS allowed ciphers (#619762)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-3
changelog:
  - fix wrong ASN.1 definition of OriginatorInfo - CVE-2010-0742 (#598738)
  - fix information leak in rsa_verify_recover - CVE-2010-1633 (#598732)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-2
changelog:
  - make CA dir readable - the private keys are in private subdir (#584810)
  - a few fixes from upstream CVS
  - make X509_NAME_hash_old work in FIPS mode (#568395)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.21.beta5
changelog:
  - gracefully handle zero length in assembler implementations of
    OPENSSL_cleanse (#564029)
  - do not fail in s_server if client hostname not resolvable (#561260)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.19.beta4
changelog:
  - fix CVE-2009-4355 - leak in applications incorrectly calling
    CRYPTO_free_all_ex_data() before application exit (#546707)
  - upstream fix for future TLS protocol version handling


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.17.beta4
changelog:
  - upstream fix compression handling on session resumption
  - various null checks and other small fixes from upstream
  - upstream changes for the renegotiation info according to the latest draft


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.13.beta4
changelog:
  - disable enforcement of the renegotiation extension on the client (#537962)
  - add fixes from the current upstream snapshot


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.12.beta4
changelog:
  - keep the beta status in version number at 3 so we do not have to rebuild
    openssh and possibly other dependencies with too strict version check


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.11.beta4
changelog:
  - update to new upstream version, no soname bump needed
  - fix CVE-2009-3555 - note that the fix is bypassed if SSL_OP_ALL is used
    so the compatibility with unfixed clients is not broken. The
    protocol extension is also not final.


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-6
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS
  - make CA dir absolute path (#445344)
  - change default length for RSA key generation to 2048 (#484101)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-1
changelog:
  - update to new upstream release (minor bug fixes, security
    fixes and machine code optimizations only)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-7
changelog:
  - must also verify checksum of libssl.so in the FIPS mode
  - obtain the seed for FIPS rng directly from the kernel device
  - drop the temporary symlinks


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-6
changelog:
  - drop the temporary triggerpostun and symlinking in post
  - fix the pkgconfig files and drop the unnecessary buildrequires
    on pkgconfig as it is a rpmbuild dependency (#481419)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-1
changelog:
  - new upstream version with necessary soname bump (#455753)
  - temporarily provide symlink to old soname to make it possible to rebuild
    the dependent packages in rawhide
  - add eap-fast support (#428181)
  - add possibility to disable zlib by setting
  - add fips mode support for testing purposes
  - do not null dereference on some invalid smime files
  - add buildrequires pkgconfig (#479493)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-9
changelog:
  - fix CVE-2008-0891 - server name extension crash (#448492)
  - fix CVE-2008-1672 - server key exchange message omit crash (#448495)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-3
changelog:
  - set default paths when no explicit paths are set (#418771)
  - do not add tls extensions to client hello for SSLv3 (#422081)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-2
changelog:
  - enable some new crypto algorithms and features
  - add some more important bug fixes from openssl CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-16
changelog:
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309801)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321191)
  - add alpha sub-archs (#296031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-14
changelog:
  - use localhost in testsuite, hopefully fixes slow build in koji
  - CVE-2007-3108 - fix side channel attack on private keys (#250577)
  - make ssl session cache id matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-13
changelog:
  - allow building on ARM architectures (#245417)
  - use reference timestamps to prevent multilib conflicts (#218064)
  - -devel package must require pkgconfig (#241031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-8
changelog:
  - drop patch 5 which introduced a regression
    resolves: #927405
    reverts: #847568
  - add a patch to prevent 'RepeatedMsgReduction' causing missing hostnames
    resolves: #893197
  - add a patch to enable specifying UID/GID as a number
    resolves: #886117
  - add a patch to prevent a segfault in gssapi
    resolves: #862517


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-7
changelog:
  - add a patch to support large groups in the $FileGroup directive
    resolves: #924754
  - add a patch to fix 'pri-text' property format
    resolves: #951727
  - add a patch to fix the behavior of the *QueueMaxFileSize directives
    resolves: #963942


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-6
changelog:
  - the previous patch to enable RFC3339 timestamps revealed a bug
    in the upstream code - adding another patch
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-5
changelog:
  - add a patch to permit RFC3339 timestamps in messages comming from
    the local log socket, patch taken from upstream - commit:
    bfae69d68b0032a383821a54bc52aeff36a90e52
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-2
changelog:
  - add patch to update information on debugging in the man page
    Resolves: #820311
  - add patch to prevent debug output to stdout after forking
    Resolves: #820996
  - add patch to support ssl certificates with domain names longer than 128 chars
    Resolves: #822118


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-1
changelog:
  - rebase to rsyslog 5.8.10
    Resolves: #803550
    Resolves: #805424
    Resolves: #813079
    Resolves: #813084
  - consider lock file in 'status' action
    Resolves: #807608
  - add impstats and imptcp modules
  - include new license text files
  - specify which versions of sysklogd are obsoleted


author: Tomas Heinrich <theinric@redhat.com> 5.8.7-1
changelog:
  - rebase to rsyslog-5.8.7
    - change license from 'GPLv3+' to '(GPLv3+ and ASL 2.0)'
      http://blog.gerhards.net/2012/01/rsyslog-licensing-update.html
    - remove patches obsoleted by rebase
    - add patches for better sysklogd compatibility (taken from upstream)
    - update included files for the new major version
    Resolves: #672182
    Resolves: #727380
    Resolves: #756664
    Resolves: #767527
    Resolves: #769025
  - add several directories for storing auxiliary data
    Resolves: #740420
  - fix source package URL


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-11
changelog:
  - provide configuration directive for sysklogd message format compatibility
  - provide log format template for sysklogd message format compatibility
    Resolves: #737096


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-8
changelog:
  - workaround the mysql_conf multilib issue by directly using
    the arch-specific script
    Resolves: #694414


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-7
changelog:
  - add patch to correct the behavior of the ActionExecOnlyOnceEveryInterval
    configuration directive
    Resolves: #727208


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-5
changelog:
  - provide omsnmp module in rsyslog-snmp subpackage
    Resolves: #618488
  - modify logrotate configuration to omit boot.log
    Resolves: #683537
  - use correct lock file name
    Resolves: #698705
  - provide ommail module
    Resolves: #702314


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-3
changelog:
  - build rsyslog with PIE and RELRO
    Resolves: #642994
  - add ChangeLog file to documentation
  - add /etc/pki/rsyslog directory


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-2
changelog:
  - Fix a potential segfault upon SIGHUP induced restart
    Resolves: #598421
  - Add Obsoletes: sysklogd
    Resolves: #513277


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-1
changelog:
  - upgrade to new upstream stable version 4.6.2
    Resolves: #554998
  - correct the default value of the OMFileFlushOnTXEnd directive
  - add upstream fix for message-induced off-by-one error
  - change the default value of the HUPisRestart directive to enabled
  - remove autoconf, automake, libtool from BuildRequires
  - change exec-prefix to nil
  - redefine _libdir as it doesn't use _exec_prefix
    Resolves: #591860


author: Tomas Heinrich <theinric@redhat.com> - 4.4.2-3
changelog:
  - remove '_smp_mflags' make argument as it seems to be
    producing corrupted builds
    Resolves: #556522


author: Tomas Heinrich <theinric@redhat.com> - 4.4.2-1
changelog:
  - upgrade to new upstream stable version 4.4.2
    Resolves: #554998
  - add support for arbitrary number of open file descriptors
  - run libtoolize to avoid errors due mismatching libtool version
  - change exec-prefix to /


author: Peter Vrabec <pvrabec@redhat.com> 3.21.3-4
changelog:
  - use RPM_OPT_FLAGS
  - use same pid file and logrotate file as syslog-ng (#441664)
  - mark config files as noreplace (#428155)


author: Tomas Heinrich <theinric@redhat.com> 3.21.3-3
changelog:
  - fix a wrong module name in the rsyslog.conf manual page (#455086)
  - expand the rsyslog.conf manual page (#456030)


author: Peter Vrabec <pvrabec@redhat.com> 1.17.1-1
changelog:
  - upstream bug fix release
  - include html docs (#248712)
  - make "-r" option compatible with sysklogd config (248982)


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.62
changelog:
  - libxl: explicitly allocate BUFIOREQ event channel
    There is an OVM-only change for domain creation that is only
    implemented for xend. The change is to allocate the buffered IO
    request server explicitly instead of doing it by default for VCPU 0.
    Without this change qemu cannot initialize and thus failing the domain
    creation with the following error in the device model:
    bind interdomain ioctl error 22
    qemu: hardware error: xen hardware virtual machine initialisation failed
    Commit bebfe22 ("Xen: Fix pvhvm  migration issue from ovm3.2.8 to
    ovm3.4") introduces this change for xend and this patch introduces
    it for libxl.
    Signed-off-by: Joao Martins <joao.m.martins@oracle.com>
    Acked-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 22157512]


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.61
changelog:
  - Revert "Keep the maxmem and memory same in vm.cfg"
    This commit saves original config mem and maxmem and use that in
    the populate on demand check. This patch would be a partial fix to Bug
    21673915 but memory is still being increased by 4M (with cirrus video)
    over reboots and this was being caused by commit
    "xend: Fix xm list bug reporting incorrect memory size". Since the
    latter is reverted the original behaviour of memory/maxmem is restored and
    leaves this commit with no use.
    Reviewed-by: Annie Li <annie.li@oracle.com>
    Signed-off-by: Joao Martins <joao.m.martins@oracle.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21648484]


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.60
changelog:
  - xend: fix xm list introducing memory_actual R/O field
    Introduces a field to sxp data structures named "memory_actual"
    that xm will use to have up-to-date domain memory values from Xen.
    This value is always up-to-date when xend refresh the list of domains,
    though it's not used in domain management functions like memory_dynamic_max
    and memory_static_max to determine the memory the domain will have if
    rebooted/balloned/saved/restored.
    Signed-off-by: Joao Martins <joao.m.martins@oracle.com>
    Acked-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21648484]


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.59
changelog:
  - Revert "xend: Fix xm list bug reporting incorrect memory size"
    This patch reverts 6797b4c5 because it introduces a regression
    when a guest reboots (on its own initiative) with a PCI passthrough.
    By changing xcinfo domain memory with the most up-to-date values
    from libxc we will cause a failed reboot (with PCI) and the creation
    of a bigger guest and with balloning enabled.
    xm creates a guest with X MBs plus 4 (default) megabytes in a HVM guest.
    Plus, Xen/libxc won't allocate exactly that amount of memory (e.g. there
    is a 128k VGA hole, 8 pages for console/xenstore/etc). This means from the
    view of the toolstack we will always see a gap between mem and maxmem which
    means that PoD gets enabled when guest is rebooted if these memory
    values are up-to-date with libxc. Since PCI devices can't be attached with
    PoD enabled, it later causes the bug we observed.
    The previous behaviour was to change this domain state only when explicit
    for example on xm mem-set, pretty much as xl is doing right now. The next
    patch will (re)fix the memory size listing issue which this commit we are
    reverting intended to fix.
    Signed-off-by: Joao Martins <joao.m.martins@oracle.com>
    Acked-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21648484]


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.58
changelog:
  - x86: rate-limit logging in do_xen{oprof,pmu}_op()
    Some of the sub-ops are acessible to all guests, and hence should be
    rate-limited. In the xenoprof case, just like for XSA-146, include them
    only in debug builds. Since the vPMU code is rather new, allow them to
    be always present, but downgrade them to (rate limited) guest messages.
    This is XSA-152.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 22088895] {CVE-2015-7971}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.57
changelog:
  - xenoprof: free domain's vcpu array
    This was overlooked in fb442e2171 ("x86_64: allow more vCPU-s per
    guest").
    This is XSA-151.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Ian Campbell <ian.campbell@citrix.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 22088828] {CVE-2015-7969}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.56
changelog:
  - x86: guard against undue super page PTE creation
    When optional super page support got added (commit bd1cd81d64 "x86: PV
    support for hugepages"), two adjustments were missed: mod_l2_entry()
    needs to consider the PSE and RW bits when deciding whether to use the
    fast path, and the PSE bit must not be removed from L2_DISALLOW_MASK
    unconditionally.
    This is XSA-148.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 22088391] {CVE-2015-7835}


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.47.55
changelog:
  - x86/kexec: fix kexec on systems which boot in x2apic mode
    Moving straight from fully disabled to x2apic mode is an illegal state
    transition, and causes an unconditional #GP fault.  Bounce through xapic mode
    to avoid the fault.
    In addition, avoid bouncing through the various apic modes if the mode is
    already correct.
    Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    Upstream commit 77ffa26374370c1c9805f9596f37a44d412a7fdb
    Signed-off-by: Zhenzhong Duan <zhenzhong.duan@oracle.com> [bug 21550791]


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.54
changelog:
  - rtl8139: check TCP Data Offset field (qemu traditional)
    The TCP Data Offset field contains the length of the header.  Make sure
    it is valid and does not exceed the IP data length.
    Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
    Blind-porting to Xen 4.1.4 by Sebastian Pipping <sebastian@pipping.org>
    This is 7/7 qemu traditional XSA-140 CVE-2015-5165
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21535438] {CVE-2015-5165}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.53
changelog:
  - rtl8139: skip offload on short TCP header (qemu traditional)
    TCP Large Segment Offload accesses the TCP header in the packet.  If the
    packet is too short we must not attempt to access header fields:
    tcp_header *p_tcp_hdr = (tcp_header*)(eth_payload_data + hlen);
    int tcp_hlen = TCP_HEADER_DATA_OFFSET(p_tcp_hdr);
    Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
    Blind-porting to Xen 4.1.4 by Sebastian Pipping <sebastian@pipping.org>
    This is 6/7 qemu traditional XSA-140 CVE-2015-5165
    Conflicts:
    added "(qemu traditional)" to the patch subject line
    tools/qemu-xen-traditional-dir/hw/rtl8139.c
    different patch context
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21535438] {CVE-2015-5165}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.52
changelog:
  - rtl8139: check IP Total Length field (qemu traditional)
    The IP Total Length field includes the IP header and data.  Make sure it
    is valid and does not exceed the Ethernet payload size.
    Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
    Blind-porting to Xen 4.1.4 by Sebastian Pipping <sebastian@pipping.org>
    This is 5/7 qemu traditional XSA-140 CVE-2015-5165
    Conflicts:
    added "(qemu traditional)" to the patch subject line
    tools/qemu-xen-traditional-dir/hw/rtl8139.c
    different patch context
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21535438] {CVE-2015-5165}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.51
changelog:
  - rtl8139: check IP Header Length field (qemu traditional)
    The IP Header Length field was only checked in the IP checksum case, but
    is used in other cases too.
    Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
    Blind-porting to Xen 4.1.4 by Sebastian Pipping <sebastian@pipping.org>
    This is 4/7 qemu traditional XSA-140 CVE-2015-5165
    Conflicts:
    added "(qemu traditional)" to the patch subject line
    tools/qemu-xen-traditional-dir/hw/rtl8139.c
    different patch context
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21535438] {CVE-2015-5165}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.50
changelog:
  - rtl8139: skip offload on short Ethernet/IP header (qemu traditional)
    Transmit offload features access Ethernet and IP headers the packet.  If
    the packet is too short we must not attempt to access header fields:
    int proto = be16_to_cpu(*(uint16_t *)(saved_buffer + 12));
    ...
    eth_payload_data = saved_buffer + ETH_HLEN;
    ...
    ip = (ip_header*)eth_payload_data;
    if (IP_HEADER_VERSION(ip) != IP_HEADER_VERSION_4) {
    Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
    Blind-porting to Xen 4.1.4 by Sebastian Pipping <sebastian@pipping.org>
    This is 3/7 qemu traditional XSA-140 CVE-2015-5165
    Conflicts:
    added "(qemu traditional)" to the patch subject line
    tools/qemu-xen-traditional-dir/hw/rtl8139.c
    different patch context
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21535438] {CVE-2015-5165}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.49
changelog:
  - rtl8139: drop tautologous if (ip) {...} statement (qemu traditional)
    The previous patch stopped using the ip pointer as an indicator that the
    IP header is present.  When we reach the if (ip) {...} statement we know
    ip is always non-NULL.
    Remove the if statement to reduce nesting.
    Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
    Blind-porting to Xen 4.1.4 by Sebastian Pipping <sebastian@pipping.org>
    This is 2/7 qemu traditional XSA-140 CVE-2015-5165
    Conflicts:
    added "(qemu traditional)" to the patch subject line
    tools/qemu-xen-traditional-dir/hw/rtl8139.c
    DPRINTF() changed to DEBUG_PRINT()
    args to rtl8139_transfer_frame()
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21535438] {CVE-2015-5165}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.48
changelog:
  - rtl8139: avoid nested ifs in IP header parsing (qemu traditional)
    Transmit offload needs to parse packet headers.  If header fields have
    unexpected values the offload processing is skipped.
    The code currently uses nested ifs because there is relatively little
    input validation.  The next patches will add missing input validation
    and a goto label is more appropriate to avoid deep if statement nesting.
    Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
    Blind-porting to Xen 4.1.4 by Sebastian Pipping <sebastian@pipping.org>
    This is 1/7 qemu traditional XSA-140 CVE-2015-5165
    Conflicts:
    added "(qemu traditional)" to the patch subject line
    replaced incorrect 3/7 patch comment block with 1/7
    tools/qemu-xen-traditional-dir/hw/rtl8139.c
    DPRINTF() changed to DEBUG_PRINT()
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21535438] {CVE-2015-5165}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.47
changelog:
  - rtl8139: check TCP Data Offset field
    The TCP Data Offset field contains the length of the header.  Make sure
    it is valid and does not exceed the IP data length.
    Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
    This is 7/7 XSA-140 CVE-2015-5165
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21535438] {CVE-2015-5165}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.46
changelog:
  - rtl8139: skip offload on short TCP header
    TCP Large Segment Offload accesses the TCP header in the packet.  If the
    packet is too short we must not attempt to access header fields:
    tcp_header *p_tcp_hdr = (tcp_header*)(eth_payload_data + hlen);
    int tcp_hlen = TCP_HEADER_DATA_OFFSET(p_tcp_hdr);
    Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
    This is 6/7 XSA-140 CVE-2015-5165
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21535438] {CVE-2015-5165}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.45
changelog:
  - rtl8139: check IP Total Length field
    The IP Total Length field includes the IP header and data.  Make sure it
    is valid and does not exceed the Ethernet payload size.
    Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
    This is 5/7 XSA-140 CVE-2015-5165
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21535438] {CVE-2015-5165}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.44
changelog:
  - rtl8139: check IP Header Length field
    The IP Header Length field was only checked in the IP checksum case, but
    is used in other cases too.
    Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
    This is 4/7 XSA-140 CVE-2015-5165
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21535438] {CVE-2015-5165}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.43
changelog:
  - rtl8139: skip offload on short Ethernet/IP header
    Transmit offload features access Ethernet and IP headers the packet.  If
    the packet is too short we must not attempt to access header fields:
    int proto = be16_to_cpu(*(uint16_t *)(saved_buffer + 12));
    ...
    eth_payload_data = saved_buffer + ETH_HLEN;
    ...
    ip = (ip_header*)eth_payload_data;
    if (IP_HEADER_VERSION(ip) != IP_HEADER_VERSION_4) {
    Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
    This is 3/7 XSA-140 CVE-2015-5165
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21535438] {CVE-2015-5165}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.42
changelog:
  - rtl8139: drop tautologous if (ip) {...} statement
    The previous patch stopped using the ip pointer as an indicator that the
    IP header is present.  When we reach the if (ip) {...} statement we know
    ip is always non-NULL.
    Remove the if statement to reduce nesting.
    Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
    This is 2/7 XSA-140 CVE-2015-5165
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21535438] {CVE-2015-5165}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.41
changelog:
  - rtl8139: avoid nested ifs in IP header parsing
    Transmit offload needs to parse packet headers.  If header fields have
    unexpected values the offload processing is skipped.
    The code currently uses nested ifs because there is relatively little
    input validation.  The next patches will add missing input validation
    and a goto label is more appropriate to avoid deep if statement nesting.
    Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
    This is 1/7 XSA-140 CVE-2015-5165
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21535438] {CVE-2015-5165}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.40
changelog:
  - pci: completely unhook the unplugged IDEDevice from the corresponding BlockBackend
    pci_piix3_xen_ide_unplug should completely unhook the unplugged
    IDEDevice from the corresponding BlockBackend, otherwise the next call
    to release_drive will try to detach the drive again.
    Suggested-by: Kevin Wolf <kwolf@redhat.com>
    Signed-off-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
    This is XSA-139 / CVE-2015-5166
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21518709] {CVE-2015-5166}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.39
changelog:
  - ide: Clear DRQ after handling all expected accesses
    This is additional hardening against an end_transfer_func that fails to
    clear the DRQ status bit. The bit must be unset as soon as the PIO
    transfer has completed, so it's better to do this in a central place
    instead of duplicating the code in all commands (and forgetting it in
    some).
    Signed-off-by: Kevin Wolf <kwolf@redhat.com>
    This is XSA-138 CVE-2015-5154
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21497187] {CVE-2015-5154}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.38
changelog:
  - ide/atapi: Fix START STOP UNIT command completion
    The command must be completed on all code paths. START STOP UNIT with
    pwrcnd set should succeed without doing anything.
    Signed-off-by: Kevin Wolf <kwolf@redhat.com>
    This is XSA-138 CVE-2015-5154
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21497187] {CVE-2015-5154}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.37
changelog:
  - ide: Check array bounds before writing to io_buffer
    (CVE-2015-5154)
    If the end_transfer_func of a command is called because enough data has
    been read or written for the current PIO transfer, and it fails to
    correctly call the command completion functions, the DRQ bit in the
    status register and s->end_transfer_func may remain set. This allows the
    guest to access further bytes in s->io_buffer beyond s->data_end, and
    eventually overflowing the io_buffer.
    One case where this currently happens is emulation of the ATAPI command
    START STOP UNIT.
    This patch fixes the problem by adding explicit array bounds checks
    before accessing the buffer instead of relying on end_transfer_func to
    function correctly.
    Cc: qemu-stable@nongnu.org
    Signed-off-by: Kevin Wolf <kwolf@redhat.com>
    This is XSA-138 CVE-2015-5154
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com>
    Tested-by: boris.ostrovsky@oracle.com
    Tested-by: konrad.wilk@oracle.com [bug 21497187] {CVE-2015-5154}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.36
changelog:
  - ide: Clear DRQ after handling all expected accesses
    This is additional hardening against an end_transfer_func that fails to
    clear the DRQ status bit. The bit must be unset as soon as the PIO
    transfer has completed, so it's better to do this in a central place
    instead of duplicating the code in all commands (and forgetting it in
    some).
    Signed-off-by: Kevin Wolf <kwolf@redhat.com>
    This is XSA-138 CVE-2015-5154
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com>
    Tested-by: boris.ostrovsky@oracle.com
    Tested-by: konrad.wilk@oracle.com [bug 21497187] {CVE-2015-5154}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.35
changelog:
  - ide: Check array bounds before writing to io_buffer
    If the end_transfer_func of a command is called because enough data has
    been read or written for the current PIO transfer, and it fails to
    correctly call the command completion functions, the DRQ bit in the
    status register and s->end_transfer_func may remain set. This allows the
    guest to access further bytes in s->io_buffer beyond s->data_end, and
    eventually overflowing the io_buffer.
    One case where this currently happens is emulation of the ATAPI command
    START STOP UNIT.
    This patch fixes the problem by adding explicit array bounds checks
    before accessing the buffer instead of relying on end_transfer_func to
    function correctly.
    Cc: qemu-stable@nongnu.org
    Signed-off-by: Kevin Wolf <kwolf@redhat.com>
    This is XSA-138 CVE-2015-5154
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com>
    Tested-by: boris.ostrovsky@oracle.com
    Tested-by: konrad.wilk@oracle.com [bug 21497187] {CVE-2015-5154}


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.47.34
changelog:
  - tools: libxl: Explicitly disable graphics backends on qemu cmdline
    By default qemu will try to create some sort of backend for the
    emulated VGA device, either SDL or VNC.
    However when the user specifies sdl=0 and vnc=0 in their configuration
    libxl was not explicitly disabling either backend, which could lead to
    one unexpectedly running.
    If either sdl=1 or vnc=1 is configured then both before and after this
    change only the backends which are explicitly enabled are configured,
    i.e. this issue only occurs when all backends are supposed to have
    been disabled.
    This affects qemu-xen and qemu-xen-traditional differently.
    If qemu-xen was compiled with SDL support then this would result in an
    SDL window being opened if $DISPLAY is valid, or a failure to start
    the guest if not. Passing "-display none" to qemu before any further
    -sdl options disables this default behaviour and ensures that SDL is
    only started if the libxl configuration demands it.
    If qemu-xen was compiled without SDL support then qemu would instead
    start a VNC server listening on ::1 (IPv6 localhost) or 127.0.0.1
    (IPv4 localhost) with IPv6 preferred if available. Explicitly pass
    "-vnc none" when vnc is not enabled in the libxl configuration to
    remove this possibility.
    qemu-xen-traditional would never start a vnc backend unless asked.
    However by default it will start an SDL backend, the way to disable
    this is to pass a -vnc option. In other words passing "-vnc none" will
    disable both vnc and sdl by default. sdl can then be reenabled if
    configured by subsequent use of the -sdl option.
    Tested with both qemu-xen and qemu-xen-traditional built with SDL
    support and:
    xl cr # defaults
    xl cr sdl=0 vnc=0
    xl cr sdl=1 vnc=0
    xl cr sdl=0 vnc=1
    xl cr sdl=0 vnc=0 vga="none"
    xl cr sdl=0 vnc=0 nographic=1
    with both valid and invalid $DISPLAY.
    This is XSA-119 / CVE-2015-2152.
    Reported-by: Sander Eikelenboom <linux@eikelenboom.it>
    Signed-off-by: Ian Campbell <ian.campbell@citrix.com>
    Acked-by: Ian Jackson <ian.jackson@eu.citrix.com>
    Signed-off-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21249563] {CVE-2015-2152}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.33
changelog:
  - x86/traps: loop in the correct direction in compat_iret()
    This is XSA-136.
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21219179] {CVE-2015-4164}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.32
changelog:
  - pcnet: force the buffer access to be in bounds during tx
    4096 is the maximum length per TMD and it is also currently the size of
    the relay buffer pcnet driver uses for sending the packet data to QEMU
    for further processing. With packet spanning multiple TMDs it can
    happen that the overall packet size will be bigger than sizeof(buffer),
    which results in memory corruption.
    Fix this by only allowing to queue maximum sizeof(buffer) bytes.
    This is CVE-2015-3209.
    Signed-off-by: Petr Matousek <pmatouse@redhat.com>
    Reported-by: Matt Tait <matttait@google.com>
    Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
    Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21218579] {CVE-2015-3209}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.31
changelog:
  - pcnet: fix Negative array index read
    
    From: Gonglei <arei.gonglei@huawei.com>
    s->xmit_pos maybe assigned to a negative value (-1),
    but in this branch variable s->xmit_pos as an index to
    array s->buffer. Let's add a check for s->xmit_pos.
    
    upstream-commit-id: 7b50d00911ddd6d56a766ac5671e47304c20a21b
    Signed-off-by: Gonglei <arei.gonglei@huawei.com>
    Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
    Reviewed-by: Jason Wang <jasowang@redhat.com>
    Reviewed-by: Jason Wang <jasowang@redhat.com>
    Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21218579] {CVE-2015-3209}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.28
changelog:
  - gnttab: add missing version check to GNTTABOP_swap_grant_ref handling
    ... avoiding NULL derefs when the version to use wasn't set yet (via
    GNTTABOP_setup_table or GNTTABOP_set_version).
    This is XSA-134.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Ian Campbell <ian.campbell@citrix.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 21218000] {CVE-2015-4163}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.27
changelog:
  - xen/pt: unknown PCI config space fields should be read-only
    ... by default. Add a per-device "permissive" mode similar to pciback's
    to allow restoring previous behavior (and hence break security again,
    i.e. should be used only for trusted guests).
    This is part of XSA-131.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
    Reviewed-by: Anthony PERARD <anthony.perard@citrix.com>)
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21164488] {CVE-2015-4106}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.25
changelog:
  - xen/pt: add a few PCI config space field descriptions
    Since the next patch will turn all not explicitly described fields
    read-only by default, those fields that have guest writable bits need
    to be given explicit descriptors.
    This is a preparatory patch for XSA-131.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21164488] {CVE-2015-4106}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.24
changelog:
  - xen/pt: add a few PCI config space field descriptions
    Since the next patch will turn all not explicitly described fields
    read-only by default, those fields that have guest writable bits need
    to be given explicit descriptors.
    This is a preparatory patch for XSA-131.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    ---
    Notes:
    - blindly allowing all VPD reads may still be a problem (out of bounds
    addresses aren't allowed, but the spec doesn't say what the effect
    would be) ==> also an issue in pciback?
    - Vendor Specific cap regs aren't in the table (will become r/o by
    default with this change)
    - many PCIe cap regs aren't in the table (will again become r/o)
    - same for PM cap regs at offsets 6 and 7
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21164488] {CVE-2015-4106}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.23
changelog:
  - xen/pt: mark reserved bits in PCI config space fields
    The adjustments are solely to make the subsequent patches work right
    (and hence make the patch set consistent), namely if permissive mode
    (introduced by the last patch) gets used (as both reserved registers
    and reserved fields must be similarly protected from guest access in
    default mode, but the guest should be allowed access to them in
    permissive mode).
    This is a preparatory patch for XSA-131.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21164488] {CVE-2015-4106}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.21
changelog:
  - xen/pt: mark all PCIe capability bits read-only
    xen_pt_emu_reg_pcie[]'s PCI_EXP_DEVCAP needs to cover all bits as read-
    only to avoid unintended write-back (just a precaution, the field ought
    to be read-only in hardware).
    This is a preparatory patch for XSA-131.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-By: Todd Vierling <todd.vierling@oracle.com> [bug 21164488] {CVE-2015-4106}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.20
changelog:
  - xen/pt: mark all PCIe capability bits read-only
    xen_pt_emu_reg_pcie[]'s PCI_EXP_DEVCAP needs to cover all bits as read-
    only to avoid unintended write-back (just a precaution, the field ought
    to be read-only in hardware).
    This is a preparatory patch for XSA-131.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21164488] {CVE-2015-4106}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.19
changelog:
  - xen/pt: split out calculation of throughable mask in PCI config space handling
    This is just to avoid having to adjust that calculation later in
    multiple places.
    Note that including ->ro_mask in get_throughable_mask()'s calculation
    is only an apparent (i.e. benign) behavioral change: For r/o fields it
    doesn't matter > whether they get passed through - either the same flag
    is also set in emu_mask (then there's no change at all) or the field is
    r/o in hardware (and hence a write won't change it anyway).
    This is a preparatory patch for XSA-131.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
    Reviewed-by: Anthony PERARD <anthony.perard@citrix.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21164488] {CVE-2015-4106}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.18
changelog:
  - xen/MSI: don't open-code pass-through of enable bit modifications
    Without this the actual XSA-131 fix would cause the enable bit to not
    get set anymore (due to the write back getting suppressed there based
    on the OR of emu_mask, ro_mask, and res_mask).
    Note that the fiddling with the enable bit shouldn't really be done by
    qemu, but making this work right (via libxc and the hypervisor) will
    require more extensive changes, which can be postponed until after the
    security issue got addressed.
    This is a preparatory patch for XSA-131.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-By: Todd Vierling <todd.vierling@oracle.com> [bug 21164488] {CVE-2015-4106}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.17
changelog:
  - xen/MSI-X: disable logging by default
    ... to avoid allowing the guest to cause the control domain's disk to
    fill.
    This is XSA-130.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21159377] {CVE-2015-4105}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.16
changelog:
  - xen: don't allow guest to control MSI mask register
    It's being used by the hypervisor. For now simply mimic a device not
    capable of masking, and fully emulate any accesses a guest may issue
    nevertheless as simple reads/writes without side effects.
    This is XSA-129.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21158638] {CVE-2015-4104}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.15
changelog:
  - xen: properly gate host writes of modified PCI CFG contents
    The old logic didn't work as intended when an access spanned multiple
    fields (for example a 32-bit access to the location of the MSI Message
    Data field with the high 16 bits not being covered by any known field).
    Remove it and derive which fields not to write to from the accessed
    fields' emulation masks: When they're all ones, there's no point in
    doing any host write.
    This fixes a secondary issue at once: We obviously shouldn't make any
    host write attempt when already the host read failed.
    This is XSA-128.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21157363] {CVE-2015-4103}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.13
changelog:
  - xen/pt: correctly handle PM status bit
    xen_pt_pmcsr_reg_write() needs an adjustment to deal with the RW1C
    nature of the not passed through bit 15 (PCI_PM_CTRL_PME_STATUS).
    This is a preparatory patch for XSA-131.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21164488] {CVE-2015-4106}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.11
changelog:
  - xen/pt: consolidate PM capability emu_mask
    There's no point in xen_pt_pmcsr_reg_{read,write}() each ORing
    PCI_PM_CTRL_STATE_MASK and PCI_PM_CTRL_NO_SOFT_RESET into a local
    emu_mask variable - we can have the same effect by setting the field
    descriptor's emu_mask member suitably right away. Note that
    xen_pt_pmcsr_reg_write() is being retained in order to allow later
    patches to be less intrusive.
    This is a preparatory patch for XSA-131.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
    Acked-by: Ian Campbell <ian.campbell@citrix.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-By: Todd Vierling <todd.vierling@oracle.com> [bug 21164488] {CVE-2015-4106}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.9
changelog:
  - xen/MSI: don't open-code pass-through of enable bit modifications
    Without this the actual XSA-131 fix would cause the enable bit to not
    get set anymore (due to the write back getting suppressed there based
    on the OR of emu_mask, ro_mask, and res_mask).
    Note that the fiddling with the enable bit shouldn't really be done by
    qemu, but making this work right (via libxc and the hypervisor) will
    require more extensive changes, which can be postponed until after the
    security issue got addressed.
    This is a preparatory patch for XSA-131.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21164488] {CVE-2015-4106}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.8
changelog:
  - xen/MSI-X: limit error messages resulting from bad guest behavior
    ... to avoid allowing the guest to cause the control domain's disk to
    fill.
    The first message in pci_msix_write() can simply be deleted, as this
    is indeed bad guest behavior, but such out of bounds writes don't
    really need to be logged.
    The second one is more problematic, as there guest behavior may only
    appear to be wrong: For one, the old logic didn't take the mask-all bit
    into account. And then this shouldn't depend on host device state (i.e.
    the host may have masked the entry without the guest having done so).
    Plus these writes shouldn't be dropped even when an entry is unmasked.
    Instead, if they can't be made take effect right away, they should take
    effect on the next unmasking or enabling operation - the specification
    explicitly describes such caching behavior. Until we can validly drop
    the message (implementing such caching/latching behavior), issue the
    message just once per MSI-X table entry.
    Note that the log message in pci_msix_read() similar to the one being
    removed here is not an issue: "addr" being of unsigned type, and the
    maximum size of the MSI-X table being 32k, entry_nr simply can't be
    negative and hence the conditonal guarding issuing of the message will
    never be true.
    This is XSA-130.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21159377] {CVE-2015-4105}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.6
changelog:
  - xen: properly gate host writes of modified PCI CFG contents
    The old logic didn't work as intended when an access spanned multiple
    fields (for example a 32-bit access to the location of the MSI Message
    Data field with the high 16 bits not being covered by any known field).
    Remove it and derive which fields not to write to from the accessed
    fields' emulation masks: When they're all ones, there's no point in
    doing any host write.
    This fixes a secondary issue at once: We obviously shouldn't make any
    host write attempt when already the host read failed.
    This is XSA-128.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-By: Todd Vierling <todd.vierling@oracle.com> [bug 21157363] {CVE-2015-4103}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.5
changelog:
  - fdc: force the fifo access to be in bounds of the allocated buffer
    During processing of certain commands such as FD_CMD_READ_ID and
    FD_CMD_DRIVE_SPECIFICATION_COMMAND the fifo memory access could
    get out of bounds leading to memory corruption with values coming
    from the guest.
    Fix this by making sure that the index is always bounded by the
    allocated memory.
    This is CVE-2015-3456.
    Signed-off-by: Petr Matousek <pmatouse@redhat.com>
    Reviewed-by: John Snow <jsnow@redhat.com>
    XSA-133
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21133919] {CVE-2015-3456}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.3
changelog:
  - x86: vcpu_destroy_pagetables() must not return -EINTR
    .. otherwise it has the side effect that: domain_relinquish_resources
    will stop and will return to user-space with -EINTR which it is not
    equipped to deal with that error code; or vcpu_reset - which will
    ignore it and convert the error to -ENOMEM..
    The preemption mechanism we have for domain destruction is to return
    -EAGAIN (and then user-space calls the hypercall again) and as such we need
    to catch the case of:
    domain_relinquish_resources
    ->vcpu_destroy_pagetables
    -> put_page_and_type_preemptible
    -> __put_page_type
    returns -EINTR
    and convert it to the proper type. For:
    XEN_DOMCTL_setvcpucontext
    -> vcpu_reset
    -> vcpu_destroy_pagetables
    we need to return -ERESTART otherwise we end up returning -ENOMEM.
    There are also other callers of vcpu_destroy_pagetables: arch_vcpu_reset
    (vcpu_reset) are:
    - hvm_s3_suspend (asserts on any return code),
    - vlapic_init_sipi_one (asserts on any return code),
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21133414]


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.2
changelog:
  - mm: Make scrubbing a low-priority task
    An idle processor will attempt to scrub pages left over by a previously
    exited guest. The processor takes global heap_lock in scrub_free_pages(),
    manipulates pages on the heap lists and releases the lock before performing
    the actual scrubbing in __scrub_free_pages().
    It has been observed that on some systems, even though scrubbing itself
    is done with the lock not held, other unrelated heap users are unable
    to take the (now free) lock. We theorize that massive scrubbing locks out
    the bus (or some other HW resources), preventing lock requests from reaching
    the scrubbing node.
    This patch tries to alleviate this problem by having the scrubber monitor
    whether there are other waiters for the heap lock and, if such waiters
    exist, stop scrubbing.
    To achieve this, we make two changes to existing code:
    1. Parallelize the heap lock by breaking it to per-node locks
    2. Create an atomic per-node counter array. Before a CPU on a particular
    node attempts to acquire the (now per-node) lock it increments the counter.
    The scrubbing processor periodically checks this counter and, if it is
    non-zero, stops scrubbing.
    Few notes:
    1. Until now, total_avail_pages and midsize_alloc_zone_pages updates have been
    performed under global heap_lock which was also used to control access to heap.
    Since now those accesses are guarded by per-node locks, we introduce heap_lock_global.
    Note that this is really only to protect readers of this variables from reading
    inconsistent values (such as if another CPU is in the middle of updating them).
    The values themselves are somewhat "unsynchronized" from actual heap state. We
    try to be conservative and decrement them before pages are taken from the heap
    and increment them after they are placed there.
    2. Similarly, page_broken/offlined_list are no longer under heap_lock.
    pglist_lock is added to synchronize access to those lists.
    3. d->last_alloc_node used to be updated under heap_lock. It was read, however,
    without holding this lock so it seems that lockless updates will not make the
    situation any worse (and since these updates are simple writes, as opposed to
    some sort of RMW, we shouldn't need to convert it to an atomic).
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
    Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21133543]


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.47.1
changelog:
  - IOMMU: make page table deallocation preemptible
    Backport of cedfdd43a97.
    We are spending lots of time flushing CPU cache, one PTE at a time, to
    make sure that IOMMU (which may not be able to watch coherence traffic
    on the bus) doesn't load stale PTE from memory.
    For guests with lots of memory (say, >512GB) this may take as much as
    half a minute or more and as result (because this is a non-preemptable
    operation) things start to break down.
    Below is the original commit message:
    This too can take an arbitrary amount of time.
    In fact, the bulk of the work is being moved to a tasklet, as handling
    the necessary preemption logic in line seems close to impossible given
    that the teardown may also be invoked on error paths.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Acked-by: Xiantao Zhang <xiantao.zhang@intel.com>
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com> [bug 21133626]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.47
changelog:
  - Use AUTO_PHP_SLOT as virtual devfn for rebooted pvhvm guest
    Xend try to get vdevfn from dictionary and use it as vdevfn for reboot.
    In first boot, if simulated nic is unplugged before passthroughed device hotplug,
    and in reboot, the order is reversed, there will be a conflict of vdevfn.
    qemu.log shows "hot add pci devfn -2 exceed."
    This patch can't be upstreamed as upstream has dropped 'xend' completely.
    Signed-off-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Signed-off-by: Chuang Cao <chuang.cao@oracle.com>
    Signed-off-by: Wengang Wang <wen.gang.wang@oracle.com>
    Acked-by: Konrad Rzeszutek Wilk<konrad.wilk@oracle.com> [bug 20781679]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.3.0-55.el6.46
changelog:
  - xend: disable vbd discard feature for file type backend
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 20888341] [bug 20905655]


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.45
changelog:
  - domctl: don't allow a toolstack domain to call domain_pause() on itself
    These DOMCTL subops were accidentally declared safe for disaggregation
    in the wake of XSA-77.
    This is XSA-127.
    Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Ian Campbell <ian.campbell@citrix.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 20739527] {CVE-2015-2751}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.44
changelog:
  - xen: limit guest control of PCI command register
    Otherwise the guest can abuse that control to cause e.g. PCIe
    Unsupported Request responses (by disabling memory and/or I/O decoding
    and subsequently causing [CPU side] accesses to the respective address
    ranges), which (depending on system configuration) may be fatal to the
    host.
    This is CVE-2015-2756 / XSA-126.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
    Acked-by: Ian Campbell <ian.campbell@citrix.com>
    Conflicts:
    tools/qemu-xen-traditional-dir/hw/pass-through.c
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 20739164] {CVE-2015-2756}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.43
changelog:
  - xen: limit guest control of PCI command register
    Otherwise the guest can abuse that control to cause e.g. PCIe
    Unsupported Request responses (by disabling memory and/or I/O decoding
    and subsequently causing [CPU side] accesses to the respective address
    ranges), which (depending on system configuration) may be fatal to the
    host.
    This is CVE-2015-2756 / XSA-126.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
    Acked-by: Ian Campbell <ian.campbell@citrix.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 20739164] {CVE-2015-2756}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.42
changelog:
  - Limit XEN_DOMCTL_memory_mapping hypercall to only process up to 64 GFNs (or less)
    Said hypercall for large BARs can take quite a while. As such
    we can require that the hypercall MUST break up the request
    in smaller values.
    Another approach is to add preemption to it - whether we do the
    preemption using hypercall_create_continuation or returning
    EAGAIN to userspace (and have it re-invocate the call) - either
    way the issue we cannot easily solve is that in 'map_mmio_regions'
    if we encounter an error we MUST call 'unmap_mmio_regions' for the
    whole BAR region.
    Since the preemption would re-use input fields such as nr_mfns,
    first_gfn, first_mfn - we would lose the original values -
    and only undo what was done in the current round (i.e. ignoring
    anything that was done prior to earlier preemptions).
    Unless we re-used the return value as 'EAGAIN|nr_mfns_done<<10' but
    that puts a limit (since the return value is a long) on the amount
    of nr_mfns that can provided.
    This patch sidesteps this problem by:
    - Setting an hard limit of nr_mfns having to be 64 or less.
    - Toolstack adjusts correspondingly to the nr_mfn limit.
    - If the there is an error when adding the toolstack will call the
    remove operation to remove the whole region.
    The need to break this hypercall down is for large BARs can take
    more than the guest (initial domain usually) time-slice. This has
    the negative result in that the guest is locked out for a long
    duration and is unable to act on any pending events.
    We also augment the code to return zero if nr_mfns instead
    of trying to the hypercall.
    Suggested-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Jan Beulich <jbeulich@suse.com>
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Acked-by: Ian Campbell <ian.campbell@citrix.com>
    This is CVE-2015-2752 / XSA-125.
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 20732294] {CVE-2015-2752}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.41
changelog:
  - x86/paging: make log-dirty operations preemptible
    Both the freeing and the inspection of the bitmap get done in (nested)
    loops which - besides having a rather high iteration count in general,
    albeit that would be covered by XSA-77 - have the number of non-trivial
    iterations they need to perform (indirectly) controllable by both the
    guest they are for and any domain controlling the guest (including the
    one running qemu for it).
    Note that the tying of the continuations to the invoking domain (which
    previously [wrongly] used the invoking vCPU instead) implies that the
    tools requesting such operations have to make sure they don't issue
    multiple similar operations in parallel.
    Note further that this breaks supervisor-mode kernel assumptions in
    hypercall_create_continuation() (where regs->eip gets rewound to the
    current hypercall stub beginning), but otoh
    hypercall_cancel_continuation() doesn't work in that mode either.
    Perhaps time to rip out all the remains of that feature?
    This is part of CVE-2014-5146 / XSA-97.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    Tested-by: Andrew Cooper <andrew.cooper3@citrix.com>
    master commit: 070493dfd2788e061b53f074b7ba97507fbcbf65
    master date: 2014-10-06 11:22:04 +0200
    Port of Xen stable-4.3 425e9039b6532a8c5884e7fe4b6676f6cd493770
    "x86/paging: make log-dirty operations preemptible"
    Conflicts:
    xen/common/domain.c
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 20759717] {CVE-2014-5146}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.40
changelog:
  - Revert "x86/paging: make log-dirty operations preemptible"
    Both the freeing and the inspection of the bitmap get done in (nested)
    loops which - besides having a rather high iteration count in general,
    albeit that would be covered by XSA-77 - have the number of non-trivial
    iterations they need to perform (indirectly) controllable by both the
    guest they are for and any domain controlling the guest (including the
    one running qemu for it).
    This is XSA-97.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    Conflicts:
    xen/common/domain.c
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 20759717] {CVE-2014-5146}


author: Joe Jin <joe.jin@oracle.com> - 4.3.0-55.el6.39
changelog:
  - xend: fix python fork and log consume %100 cpu issue
    It is caused by python internal bug: http://bugs.python.org/issue6721 .
    When xend forks subprocess then calls logging function, deadlock occurred.
    Because python has no fix yet, so remove the logging.debug() call in
    XendBootloader.py to workaround it.
    Signed-off-by: Joe Jin <joe.jin@oracle.com>
    Reviewed-by: Zhigang Wang <zhigang.x.wang@oracle.com> [bug 20752002]


author: Annie Li <annie.li@oracle.com> - 4.3.0-55.el6.38
changelog:
  - Xen: Fix migration issue from ovm3.2.8 to ovm3.3.x
    This patch is a newer fix for pvhvm migration failure from
    Xen4.1(ovm3.2.x) to Xen4.3(ovm3.3.x), and this issue exists in
    upstream xen too. The original fix casues issue for released ovm
    versions if user wants to do live migration with no downtime since
    that fix requires rebooting the migration source server too.
    This patch keeps the xenstore eventchannel allcation mechanism of
    Xen4.3 as same as the one in Xen4.1. So migration can works well through
    Xen4.1 to later Xen, no need to reboot  migration source server.
    The patch that causes this migration issue is,
    http://lists.xen.org/archives/html/xen-devel/2011-11/msg01046.html
    Signed-off-by: Annie Li <annie.li@oracle.com>
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 19517860]


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.37
changelog:
  - switch internal hypercall restart indication from -EAGAIN to -ERESTART
    
    -EAGAIN being a return value we want to return to the actual caller in
    a couple of cases makes this unsuitable for restart indication, and x86
    already developed two cases where -EAGAIN could not be returned as
    intended due to this (which is being fixed here at once).
    
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Ian Campbell <ian.campbell@citrix.com
    Acked-by: Aravind Gopalakrishnan<Aravind.Gopalakrishnan@amd.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    (cherry-pick from f5118cae0a7f7748c6f08f557e2cfbbae686434a)
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Conflicts:
    A LOT
    [There are lot of changes to for this change. We only care about the
    one in the domain destruction. We need the value -EAGAIN to be passed
    in the toolstack so that it will retry the destruction. Any other
    value (-ERESTART) and it will stop it - which some of the other
    backports do we convert -ERESTART to -EAGAIN only].
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 20664678]


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.36
changelog:
  - rc/xendomains: 'stop' - also take care of stuck guests.
    When we are done shutting down the guests (xm --shutdown --all)
    are at that point not running at all. They might still have
    QEMU or backend drivers setup due to the asynchronous nature
    of 'shutdown' process. As such doing an 'destroy' on all
    the guests will assure us that the backend drivers and QEMU
    are indeed stopped.
    The mechanism by which 'shutdown' works is quite complex. There
    are three actors at play:
    a) xm client (Which connects to the XML RPC),
    b) Xend Xenstore watch thread,
    c) XML RPC server thread
    The way shutdown starts is:
    xm client                |  XML RPC          | watch thread
    shutdown.py
    - server....shutdown  ---|--> XenDomainInfo:shutdown
    Sets "control/shutdown"
    calls xc.domain_shutdown
    returns
    - loops calling:
    domains_with_state ----|-->XendDomain:list_names
    gets active   |
    and inactive    | watchMain
    list             _on_domains_changed
    - _refresh
    -> _refreshTxn
    -> update [sets to
    DOM_STATE_SHUTDOWN]
    ->refreshShutd
    own
    [spawns a ne
    w thread calling _maybeRestart]
    [_maybeRestart thread]:
    destroy
    [sets it to DOM_STATE_HALTED]
    -cleanupDomain
    - _releaseDevices
    - ..
    Four threads total.
    There is a race between 'watchMain' being executed and 'domains_with_state'
    calling 'list_names'. For guests that are in DOM_STATE_UNKNOWN or DOM_STATE_PAUS
    ED
    they might not be updated to DOM_STATE_SHUTDOWN as list_names can be called
    _before_ watchMain triggers. There is an lock acquisition to call 'refresh'
    in list_names - but if it fails - it will just use the stale list.
    As such the process works great for guests that are in STATE_SHUTDOWN,
    STATE_HALT, or STATE_RUNNING - which 'domains_with_state' will present
    to shutdown process.
    For the other states (The more troublesome ones) we might have them
    still laying around.
    As such this patch calls 'xm destroy' on all those remaining guests
    to do cleanup.
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 20663386]


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.35
changelog:
  - xend: Fix race between shutdown and cleanup.
    When we invoke 'xm shutdown --wait --all' we will exit the moment
    the guest has stopped executing. That is when xcinfo returns
    shutdown=1. However that does not mean that all the infrastructure
    around the guest has been torn down - QEMU can be still running,
    Netback and Blkback as well. In the past the time between
    the shutdown and qemu being disposed of was quick - however
    the race was still present there.
    With our usage of PCIe passthrough we MUST unbind those devices
    from a guest before we can continue on with the reboot of
    the system. That is due to the complex interaction the SR-IOV
    devices have with VF and PFs - as you cannot unload the PF driver
    before the VFs driver have been unbound from the guest.
    If you try to reboot the machine at this point the PF driver
    will not unload.
    The VF drivers are bound to Xen pciback - and they are unbound
    when QEMU is stopped and XenStore keys are torn down - which
    is done _after_ the 'shutdown' xcinfo is set (in the cleanup
    stage). Worst the Xen blkback is still active - which means
    we cannot unmount the storage until said cleanup has finished.
    But as mentioned - 'xm shutdown --wait --all' would happily
    exit before the cleanup finished and the shutdown (or reboot)
    of the initial domain would continue on. It would eventually
    get wedged when trying to unmount the storage which still
    had a refcount from Xen block driver - which was not cleaned up
    as Xend was killed earlier.
    This patch solves this by delaying 'xm shutdown --wait --all'
    to wait until the guest has transitioned from RUNNING ->
    SHUTDOWN  -> HALTED stage. The SHUTDOWN means it has ceased
    to execute. The HALTED is that the cleanup is being performed.
    We will cycle through all of the guests in that state until
    they have moved out of those states (removed completly from
    the system).
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 20659992]


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.34
changelog:
  - x86emul: fully ignore segment override for register-only operations
    For ModRM encoded instructions with register operands we must not
    overwrite ea.mem.seg (if a - bogus in that case - segment override was
    present) as it aliases with ea.reg.
    This is CVE-2015-2151 / XSA-123.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    Reviewed-by: Keir Fraser <keir@xen.org>
    Acked-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 20659522] {CVE-2015-2151}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.33
changelog:
  - pre-fill structures for certain HYPERVISOR_xen_version sub-ops
    ... avoiding to pass hypervisor stack contents back to the caller
    through space unused by the respective strings.
    This is XSA-122.
    Acked-by: Jan Beulich <jbeulich@suse.com>
    Signed-off-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 20588547] {CVE-2015-2045}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.32
changelog:
  - x86/HVM: return all ones on wrong-sized reads of system device I/O ports
    So far the value presented to the guest remained uninitialized.
    This is XSA-121.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Ian Campbell <ian.campbell@citrix.com>
    Signed-off-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 20588145] {CVE-2015-2044}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.31
changelog:
  - switch to write-biased r/w locks
    This is to improve fairness: A permanent flow of read acquires can
    otherwise lock out eventual writers indefinitely.
    This is XSA-114 / CVE-2014-9065.
    Signed-off-by: Keir Fraser <keir@xen.org>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Tested-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Confilcts:
    xen/include/asm-arm/spinlock.h
    OVM does not support the ARM architecture so asm-arm/spinlock.h is a stub
    Signed-off-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 20330487] {CVE-2014-9065,CVE-2014-9066}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.30
changelog:
  - x86/HVM: confine internally handled MMIO to solitary regions
    While it is generally wrong to cross region boundaries when dealing
    with MMIO accesses of repeated string instructions (currently only
    MOVS) as that would do things a guest doesn't expect (leaving aside
    that none of these regions would normally be accessed with repeated
    string instructions in the first place), this is even more of a problem
    for all virtual MSI-X page accesses (both msixtbl_{read,write}() can be
    made dereference NULL "entry" pointers this way) as well as undersized
    (1- or 2-byte) LAPIC writes (causing vlapic_read_aligned() to access
    space beyond the one memory page set up for holding LAPIC register
    values).
    Since those functions validly assume to be called only with addresses
    their respective checking functions indicated to be okay, it is generic
    code that needs to be fixed to clip the repetition count.
    To be on the safe side (and consistent), also do the same for buffered
    I/O intercepts, even if their only client (stdvga) doesn't put the
    hypervisor at risk (i.e. "only" guest misbehavior would result).
    This is CVE-2014-8867 / XSA-112.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    Signed-off-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 20330340] {CVE-2014-8867}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.29
changelog:
  - x86: limit checks in hypercall_xlat_continuation() to actual arguments
    HVM/PVH guests can otherwise trigger the final BUG_ON() in that
    function by entering 64-bit mode, setting the high halves of affected
    registers to non-zero values, leaving 64-bit mode, and issuing a
    hypercall that might get preempted and hence become subject to
    continuation argument translation (HYPERVISOR_memory_op being the only
    one possible for HVM, PVH also having the option of using
    HYPERVISOR_mmuext_op). This issue got introduced when HVM code was
    switched to use compat_memory_op() - neither that nor
    hypercall_xlat_continuation() were originally intended to be used by
    other than PV guests (which can't enter 64-bit mode and hence have no
    way to alter the high halves of 64-bit registers).
    This is XSA-111.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    Signed-off-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 20330231] {CVE-2014-8866}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.28
changelog:
  - x86emul: enforce privilege level restrictions when loading CS
    Privilege level checks were basically missing for the CS case, the
    only check that was done (RPL == DPL for nonconforming segments)
    was solely covering a single special case (return to non-conforming
    segment).
    Additionally in long mode the L bit set requires the D bit to be clear,
    as was recently pointed out for KVM by Nadav Amit
    <namit@cs.technion.ac.il>.
    Finally we also need to force the loaded selector's RPL to CPL (at
    least as long as lret/retf emulation doesn't support privilege level
    changes).
    This is XSA-110.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    Signed-off-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 20329982] {CVE-2014-8595}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.27
changelog:
  - x86/HVM: properly bound x2APIC MSR range
    While the write path change appears to be purely cosmetic (but still
    gets done here for consistency), the read side mistake permitted
    accesses beyond the virtual APIC page.
    Note that while this isn't fully in line with the specification
    (digesting MSRs 0x800-0xBFF for the x2APIC), this is the minimal
    possible fix addressing the security issue and getting x2APIC related
    code into a consistent shape (elsewhere a 256 rather than 1024 wide
    window is being used too). This will be dealt with subsequently.
    This is XSA-108.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Signed-off-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 20329544] {CVE-2014-7188}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.26
changelog:
  - x86emul: only emulate software interrupt injection for real mode
    Protected mode emulation currently lacks proper privilege checking of
    the referenced IDT entry, and there's currently no legitimate way for
    any of the respective instructions to reach the emulator when the guest
    is in protected mode.
    This is XSA-106.
    Reported-by: Andrei LUTAS <vlutas@bitdefender.com>
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Keir Fraser <keir@xen.org>
    Signed-off-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 20329151] {CVE-2014-7156}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.25
changelog:
  - x86/emulate: check cpl for all privileged instructions
    Without this, it is possible for userspace to load its own IDT or GDT.
    This is XSA-105.
    Reported-by: Andrei LUTAS <vlutas@bitdefender.com>
    Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    Tested-by: Andrei LUTAS <vlutas@bitdefender.com>
    Signed-off-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 20329080] {CVE-2014-7155}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.24
changelog:
  - page-alloc: scrub pages used by hypervisor upon freeing
    ... unless they're part of a fully separate pool (and hence can't ever
    be used for guest allocations).
    This is XSA-100.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Ian Campbell <ian.campbell@citrix.com>
    Acked-by: Keir Fraser <keir@xen.org>
    Confilcts:
    xen/common/page_alloc.c
    Signed-off-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 20328694] {CVE-2014-4021}


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.3.0-55.el6.23
changelog:
  - x86/paging: make log-dirty operations preemptible
    Both the freeing and the inspection of the bitmap get done in (nested)
    loops which - besides having a rather high iteration count in general,
    albeit that would be covered by XSA-77 - have the number of non-trivial
    iterations they need to perform (indirectly) controllable by both the
    guest they are for and any domain controlling the guest (including the
    one running qemu for it).
    This is XSA-97.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    Confilcts:
    xen/arch/x86/mm/paging.c
    xen/common/domain.c
    Signed-off-by: Chuck Anderson <chuck.anderson@oracle.com>
    Reviewed-by: John Haxby <john.haxby@oracle.com> [bug 20328415] {CVE-2014-5146,CVE-2014-5149}


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.22
changelog:
  - hvmloader: don't use AML operations on 64-bit fields
    WinXP and Win2K3, while having no problem with the QWordMemory resource
    (there was another one there before), don't like operations on 64-bit
    fields. Split the fields d0688669 ("hvmloader: also cover PCI MMIO
    ranges above 4G with UC MTRR ranges") added to 32-bit ones, handling
    carry over explicitly.
    Sadly the constructs needed to create the sub-fields - nominally
    CreateDWordField(PRT0, _SB.PCI0._CRS._Y02._MIN, MINL)
    CreateDWordField(PRT0, Add(_SB.PCI0._CRS._Y02._MIN, 4), MINH)
    - can't be used: The former gets warned upon by newer iasl, i.e. would
    need to be replaced by the latter just with the addend changed to 0,
    and the latter doesn't translate properly with recent iasl). Hence,
    short of having an ASL/iasl expert at hand, we need to work around the
    shortcomings of various iasl versions. See the code comment.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Ian Campbell <ian.campbell@citrix.com>
    (cherry picked from commit 7f8d8abcf6dfb85fae591a547b24f9b27d92272c)
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Committed-by: Zhenzhong Duan <zhenzhong.duan@oracle.com> [bug 20140061]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.21
changelog:
  - hvmloader: fix build with certain iasl versions
    While most of them support what we have now, Wheezy's dislikes the
    empty range. Put a fake one in place - it's getting overwritten upon
    evaluation of _CRS anyway.
    The range could be grown (downwards) if necessary; the way it is now
    it is
    - the highest possible one below the 36-bit boundary (with 36 bits
    being the lowest common denominator for all supported systems),
    - the smallest possible one that said iasl accepts.
    Reported-by: Sander Eikelenboom <linux@eikelenboom.it>
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Ian Campbell <ian.campbell@citrix.com>
    (cherry picked from commit 119d8a42d3bfe6ebc1785720e1a7260e5c698632)
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Committed-by: Zhenzhong Duan <zhenzhong.duan@oracle.com> [bug 20140061]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.20
changelog:
  - hvmloader: also cover PCI MMIO ranges above 4G with UC MTRR ranges
    When adding support for BAR assignments to addresses above 4G, the MTRR
    side of things was left out.
    Additionally the MMIO ranges in the DSDT's _SB.PCI0._CRS were having
    memory types not matching the ones put into MTRRs: The legacy VGA range
    is supposed to be WC, and the other ones should be UC.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Ian Campbell <ian.campbell@citrix.com>
    (cherry picked from commit d06886694328a31369addc1f614cf326728d65a6)
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Committed-by: Zhenzhong Duan <zhenzhong.duan@oracle.com> [bug 20140061]


author: Zhenzhong Duan <zhenzhong.duan@oracle.com> - 4.3.0-55.el6.19
changelog:
  - Add 64-bit support to QEMU.
    Currently it is assumed PCI device BAR access < 4G memory. If there is such a
    device whose BAR size is larger than 4G, it must access > 4G memory address.
    This patch enable the 64bits big BAR support on qemu-xen.
    Signed-off-by: Xiantao Zhang <xiantao.zhang@intel.com>
    Signed-off-by: Xudong Hao <xudong.hao@intel.com>
    Tested-by: Michel Riviere <michel.riviere@oracle.com>
    Signed-off-by: Zhenzhong Duan<zhenzhong.duan@oracle.com>
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Committed-by: Zhenzhong Duan <zhenzhong.duan@oracle.com> [bug 20140061]


author: Joe Jin <joe.jin@oracle.com> - 4.3.0-55.el6.18
changelog:
  - tasklet: Introduce per-cpu tasklet for softirq (v5)
    This implements a lockless per-cpu tasklet mechanism.
    The existing tasklet mechanism has a single global
    spinlock that is taken every-time the global list
    is touched. And we use this lock quite a lot - when
    we call do_tasklet_work which is called via an softirq
    and from the idle loop. We take the lock on any
    operation on the tasklet_list.
    The problem we are facing is that there are quite a lot of
    tasklets scheduled. The most common one that is invoked is
    the one injecting the VIRQ_TIMER in the guest. Guests
    are not insane and don't set the one-shot or periodic
    clocks to be in sub 1ms intervals (causing said tasklet
    to be scheduled for such small intervalls).
    The problem appears when PCI passthrough devices are used
    over many sockets and we have an mix of heavy-interrupt
    guests and idle guests. The idle guests end up seeing
    1/10 of its RUNNING timeslice eaten by the hypervisor
    (and 40% steal time).
    The mechanism by which we inject PCI interrupts is by
    hvm_do_IRQ_dpci which schedules the hvm_dirq_assist
    tasklet every time an interrupt is received.
    The callchain is:
    _asm_vmexit_handler
    -> vmx_vmexit_handler
    ->vmx_do_extint
    -> do_IRQ
    -> __do_IRQ_guest
    -> hvm_do_IRQ_dpci
    tasklet_schedule(&dpci->dirq_tasklet);
    [takes lock to put the tasklet on]
    [later on the schedule_tail is invoked which is 'vmx_do_resume']
    vmx_do_resume
    -> vmx_asm_do_vmentry
    -> call vmx_intr_assist
    -> vmx_process_softirqs
    -> do_softirq
    [executes the tasklet function, takes the
    lock again]
    While on other CPUs they might be sitting in a idle loop
    and invoked to deliver an VIRQ_TIMER, which also ends
    up taking the lock twice: first to schedule the
    v->arch.hvm_vcpu.assert_evtchn_irq_tasklet (accounted to
    the guests' BLOCKED_state); then to execute it - which is
    accounted for in the guest's RUNTIME_state.
    The end result is that on a 8 socket machine with
    PCI passthrough, where four sockets are busy with interrupts,
    and the other sockets have idle guests - we end up with
    the idle guests having around 40% steal time and 1/10
    of its timeslice (3ms out of 30 ms) being tied up
    taking the lock. The latency of the PCI interrupts delieved
    to guest is also hindered.
    With this patch the problem disappears completly.
    That is removing the lock for the PCI passthrough use-case
    (the 'hvm_dirq_assist' case).
    As such this patch introduces the code to setup
    softirq per-cpu tasklets and only modifies the PCI
    passthrough cases instead of doing it wholesale. This
    is done because:
    - We want to easily bisect it if things break.
    - We modify the code one section at a time to
    make it easier to review this core code.
    Now on the code itself. The Linux code (softirq.c)
    has an per-cpu implementation of tasklets on which
    this was based on. However there are differences:
    - This patch executes one tasklet at a time - similar
    to how the existing implementation does it.
    - We use a double-linked list instead of a single linked
    list. We could use a single-linked list but folks are
    more familiar with 'list_*' type macros.
    - This patch does not have the cross-CPU feeders
    implemented. That code is in the patch
    titled: tasklet: Add cross CPU feeding of per-cpu
    tasklets. This is done to support:
    "tasklet_schedule_on_cpu"
    - We add an temporary 'TASKLET_SOFTIRQ_PERCPU' which
    is can co-exist with the TASKLET_SOFTIRQ. It will be
    replaced in 'tasklet: Remove the old-softirq
    implementation."
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Backported-by: Joe Jin <joe.jin@oracle.com> [bug 20138111]


author: Joe Jin <joe.jin@oracle.com> - 4.3.0-55.el6.17
changelog:
  - libxl/sysctl/ionuma: Make 'xl info -n' print device topology
    'xl info -n' will provide both CPU and IO topology information. Note
    that xend (i.e. 'xm' variant of this command) will continue to only
    print CPU topology.
    To minimize code changes, libxl_get_topologyinfo (libxl's old interface
    for topology) is preserved so its users (other than output_topologyinfo())
    are not modified.
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
    Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Backported-by: Joe Jin <joe.jin@oracle.com> [bug 20088513]


author: Joe Jin <joe.jin@oracle.com> - 4.3.0-55.el6.16
changelog:
  - pci: Manage NUMA information for PCI devices
    Keep track of device's PXM data (in the form of node ID)
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
    Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Backported-by: Joe Jin <joe.jin@oracle.com> [bug 20088513]


author: Joe Jin <joe.jin@oracle.com> - 4.3.0-55.el6.15
changelog:
  - libxl: ocaml: support for Arrays in bindings generator.
    No change in generated code because no arrays are currently generated.
    Signed-off-by: Ian Campbell <ian.campbell@citrix.com>
    Signed-off-by: Rob Hoes <rob.hoes@citrix.com>
    Acked-by: David Scott <dave.scott@eu.citrix.com>
    Backported-by: Joe Jin <joe.jin@oracle.com> [bug 20088513]


author: Joe Jin <joe.jin@oracle.com> - 4.3.0-55.el6.14
changelog:
  - Reduce domain destroy time by delay page scrubbing
    Because of page scrubbing, it's very slow to destroy a domain with large
    memory.
    This patch introduced a "PGC_need_scrub" flag, pages with this flag means it
    need to be scrubbed before use.
    During domain destory, pages are marked as "PGC_need_scrub" and be added to free
    heap list, so that xl can return quickly. The real scrub is delayed to the
    allocation path if a page with "PGC_need_scrub" is allocated.
    Besides that, trigger all idle vcpus to do the scrub job in parallel before
    them enter sleep.
    In order to get rid of heavy lock contention, a percpu list is used:
    - Delist a batch of pages to a percpu list from "scrub" free page list.
    - Scrub pages on this percpu list.
    - Return those clean pages to normal "heap" free page list, merge with other
    chunks if needed.
    On a ~500GB guest, shutdown took slightly over one minute compared with over 6
    minutes if without this patch.
    Signed-off-by: Bob Liu <bob.liu@oracle.com>
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Backported-by: Joe Jin <joe.jin@oracle.com> [bug 18489484]


author: Joe Jin <joe.jin@oracle.com> - 4.3.0-55.el6.13
changelog:
  - Revert 'pci: Manage NUMA information for PCI devices'
    Backport-by: Joe Jin <joe.jin@oracle.com> [bug 20088513]


author: Joe Jin <joe.jin@oracle.com> - 4.3.0-55.el6.12
changelog:
  - Revert 'libxl/sysctl/ionuma: Make 'xl info -n' print device topology'
    Signed-off-by: Joe Jin <joe.jin@oracle.com> [bug 20088513]


author: Joe Jin <joe.jin@oracle.com> - 4.3.0-55.el6.10
changelog:
  - pci: Manage NUMA information for PCI devices
    Keep track of device's PXM data (in the form of node ID)
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
    Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Backport-by: Joe Jin <joe.jin@oracle.com> [bug 20088513]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.3.0-55.el6.9
changelog:
  - tools/python: expose xc_getcpuinfo()
    This API can be used to get per physical CPU utilization.
    Testing:
      >>> import xen.lowlevel.xc
    >>> xc = xen.lowlevel.xc.xc()
    >>> xc.getcpuinfo()
    Traceback (most recent call last):
    File "<stdin>", line 1, in <module>
    TypeError: Required argument 'max_cpus' (pos 1) not found
    >>> xc.getcpuinfo(4)
    [{'idletime': 109322086128854}, {'idletime': 109336447648802},
    {'idletime': 109069270544960}, {'idletime': 109065612611363}]
    >>> xc.getcpuinfo(100)
    [{'idletime': 109639015806078}, {'idletime': 109654551195681},
    {'idletime': 109382107891193}, {'idletime': 109382057541119}]
    >>> xc.getcpuinfo(1)
    [{'idletime': 109682068418798}]
    >>> xc.getcpuinfo(2)
    [{'idletime': 109711311201330}, {'idletime': 109728458214729}]
    >>> xc.getcpuinfo(max_cpus=4)
    [{'idletime': 109747116214638}, {'idletime': 109764982453261},
    {'idletime': 109491373228931}, {'idletime': 109489858724432}]
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Acked-by: Ian Campbell <ian.campbell@citrix.com>
    Upsteam commit: a9958947e49644c917c2349a567b2005b08e7c1f [bug 19707017]


author: Chuang Cao <chuang.cao@oracle.com> - 4.3.0-55.el6.8
changelog:
  - xend: disable sslv3 due to CVE-2014-3566
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Backported-by: Chuang Cao <chuang.cao@oracle.com> [bug 19831402]


author: Joe Jin <joe.jin@oracle.com> - 4.3.0-55.el6.7
changelog:
  - xend: fix domain destroy after reboot
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Joe Jin <joe.jin@oracle.com>
    Signed-off-by: Iain MacDonnell <iain.macdonnell@oracle.com> [bug 19557384]


author: Joe Jin <joe.jin@oracle.com> - 4.3.0-55.el6.6
changelog:
  - Keep the maxmem and memory same in vm.cfg
    Signed-off-by: Annie Li <annie.li@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Joe Jin <joe.jin@oracle.com> [bug 19440731]


author: Joe Jin <joe.jin@oracle.com> - 4.3.0-55.el6.5
changelog:
  - xen: Only allocating the xenstore event channel earlier
    This patch allocates xenstore event channel earlier to fix the migration
    issue from ovm3.2.8 to 3.3.1, and also reverts the change for console
    event channel to avoid it is set to none after allocation.
    Signed-off-by: Annie Li <annie.li@oracle.com>
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Backported-by: Joe Jin <joe.jin@oracle.com> [bug 19517860]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 4.3.0-55.el6.4
changelog:
  - Increase xen max_phys_cpus to support hardware with 384 CPUs
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> 
    Backported-by:  Adnan Misherfi <adnan.misherfi@oracle.com> [bug 19564352]


author: Joe Jin <joe.jin@oracle.com> - 4.3.0-55.el6.3
changelog:
  - Fix migration bug from OVM3.2.8(Xen4.1.3) to OVM3.3.1(Xen4.3.x)
    The pvhvm migration from ovm3.2.8 to ovm3.3.1 fails because xenstore event channel number changes,
    this patch allocate xenstore event channel as ealier as possible to avoid this issue.
    Signed-off-by: Annie Li <annie.li@oracle.com>
    Backported-by: Joe Jin <joe.jin@oracle.com> [bug 19517860]


author: Chuang Cao <chuang.cao@oracle.com> - 4.3.0-55.el6.2
changelog:
  - Fix the panic on HP DL580 Gen8.
    Signed-off-by: Konrad Wilk <konrad.wilk@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Backported-by: Chuang Cao <chuang.cao@oracle.com> [bug 19295185]


author: Chuang Cao <chuang.cao@oracle.com> - 4.3.0-55.el6.1
changelog:
  - Before connecting the emulated network interface (vif.x.y-emu) to a bridge, change the emu MTU to
    equal the MTU of the bridge to prevent the bridge from downgrading its own MTU to equal the emu MTU.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Backported-by: Chuang Cao <chuang.cao@oracle.com> [bug 19241260]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-55
changelog:
  - x86/HVM: use fixed TSC value when saving or restoring domain
    
    When a domain is saved each VCPU's TSC value needs to be preserved. To get it we
    use hvm_get_guest_tsc(). This routine (either itself or via get_s_time() which
    it may call) calculates VCPU's TSC based on current host's TSC value (by doing a
    rdtscll()). Since this is performed for each VCPU separately we end up with
    un-synchronized TSCs.
    
    Similarly, during a restore each VCPU is assigned its TSC based on host's current
    tick, causing virtual TSCs to diverge further.
    
    With this, we can easily get into situation where a guest may see time going
    backwards.
    
    Instead of reading new TSC value for each VCPU when saving/restoring it we should
    use the same value across all VCPUs.
    
    Reported-by: Philippe Coquard <philippe.coquard@mpsa.com>
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    commit: 88e64cb785c1de4f686c1aa1993a0003b7db9e1a [bug 18755631]


author: Konrad Wilk <konrad.wilk@oracle.com> - 4.3.0-54
changelog:
  - iommu: set correct IOMMU entries when iommu_hap_pt_share == 0
    If the memory map is not shared between HAP and IOMMU we fail to set
    correct IOMMU mappings for memory types other than p2m_ram_rw.
    This patchs adds IOMMU support for the following memory types:
    p2m_grant_map_rw, p2m_map_foreign, p2m_ram_ro, p2m_grant_map_ro and
    p2m_ram_logdirty.
    Signed-off-by: Roger Pau Monn?195?169 <roger.pau@citrix.com>
    Cc: Tim Deegan <tim@xen.org>
    Cc: Jan Beulich <jbeulich@suse.com>
    Tested-by: David Zhuang <david.zhuang@oracle.com>
    ---
    Changes since v1:
    - Move the p2m type switch to IOMMU flags to an inline function that
    is shared between p2m-ept and p2m-pt.
    - Make p2m_set_entry also use p2m_get_iommu_flags.
    ---
    When backporting this patch it would not apply cleanly due to two commits
    not existing in the Xen 4.3 repo:
    commit 243cebb3dfa1f94ec7c2b040e8fd15ae4d81cc5a
    Author: Mukesh Rathor <mukesh.rathor@oracle.com>
    Date:   Thu Apr 17 10:05:07 2014 +0200
    pvh dom0: introduce p2m_map_foreign
    [adds the p2m_map_foreign type]
    commit 3d8d2bd048773ababfa65cc8781b9ab3f5cf0eb0
    Author: Jan Beulich <jbeulich@suse.com>
    Date:   Fri Mar 28 13:37:10 2014 +0100
    x86/EPT: simplification and cleanup
    [simplifies the loop in ept_set_entry]
    As such the original patch from
    http://lists.xen.org/archives/html/xen-devel/2014-04/msg02928.html
    has been slightly changed.
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 17789939]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-53
changelog:
  - x86/svm: enable TSC scaling
    
    TSC ratio enabling logic is inverted: we want to use it when we
    are running in native tsc mode, i.e. when d->arch.vtsc is zero.
    
    Also, since now svm_set_tsc_offset()'s calculations depend
    on vtsc's value, we need to call hvm_funcs.set_tsc_offset() after
    vtsc changes in tsc_set_info().
    
    In addition, with TSC ratio enabled, svm_set_tsc_offset() will
    need to do rdtsc. With that we may end up having TSCs on guest's
    processors out of sync. d->arch.hvm_domain.sync_tsc which is set
    by the boot processor can now be used by APs as reference TSC
    value instead of host's current TSC.
    
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    commit: b95fd03b5f0b66384bd7c190d5861ae68eb98c85 [bug 18755631]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-52
changelog:
  - x86: use native RDTSC(P) execution when guest and host frequencies are the same
    We should be able to continue using native RDTSC(P) execution on
    HVM/PVH guests after migration if host and guest frequencies are
    equal (this includes the case when the frequencies are made equal
    by TSC scaling feature).
    
    This also allows us to revert main part of commit 4aab59a3 (svm: Do not
    intercept RDTSC(P) when TSC scaling is supported by hardware) which
    was wrong: while RDTSC intercepts were disabled domain's vtsc could
    still be set, leading to inconsistent view of guest's TSC.
    
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
    Acked-by: Jan Beulich <jbeulich@suse.com>
    commit: 82713ec8d2b65d17f13e46a131e38bfe5baf8bd6 [bug 18755631]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-51
changelog:
  - x86/HVM: restrict HVMOP_set_mem_type
    Xen Security Advisory CVE-2014-3124 / XSA-92
    version 3
    HVMOP_set_mem_type allows invalid P2M entries to be created
    UPDATES IN VERSION 3
    ====================
    This issue has been assigned CVE-2014-3124.
    ISSUE DESCRIPTION
    =================
    The implementation in Xen of the HVMOP_set_mem_type HVM control
    operations attempts to exclude transitioning a page from an
    inappropriate memory type.  However, only an inadequate subset of
    memory types is excluded.
    There are certain other types that don't correspond to a particular
    valid page, whose page table translation can be inappropriately
    changed (by HVMOP_set_mem_type) from not-present (due to the lack of
    valid memory page) to present.  If this occurs, an invalid translation
    will be established.
    IMPACT
    ======
    In a configuration where device models run with limited privilege (for
    example, stubdom device models), a guest attacker who successfully
    finds and exploits an unfixed security flaw in qemu-dm could leverage
    the other flaw into a Denial of Service affecting the whole host.
    In the more general case, in more abstract terms: a malicious
    administrator of a domain privileged with regard to an HVM guest can
    cause Xen to crash leading to a Denial of Service.
    Arbitrary code execution, and therefore privilege escalation, cannot
    be entirely excluded: On a system with a RAM page present immediately
    below the 52-bit address boundary, this would be possible.  However,
    we are not aware of any systems with such a memory layout.
    VULNERABLE SYSTEMS
    ==================
    All Xen versions from 4.1 onwards are vulnerable.
    The vulnerability is only exposed to service domains for HVM guests
    which have privilege over the guest.  In a usual configuration that
    means only device model emulators (qemu-dm).
    In the case of HVM guests whose device model is running in an
    unrestricted dom0 process, qemu-dm already has the ability to cause
    problems for the whole system.  So in that case the vulnerability is
    not applicable.
    The situation is more subtle for an HVM guest with a stub qemu-dm.
    That is, where the device model runs in a separate domain (in the case
    of xl, as requested by "device_model_stubdomain_override=1" in the xl
    domain configuration file).  The same applies with a qemu-dm in a dom0
    process subjected to some kind kernel-based process privilege
    limitation (eg the chroot technique as found in some versions of
    XCP/XenServer).
    In those latter situations this issue means that the extra isolation
    does not provide as good a defence (against denial of service) as
    intended.  That is the essence of this vulnerability.
    However, the security is still better than with a qemu-dm running as
    an unrestricted dom0 process.  Therefore users with these
    configurations should not switch to an unrestricted dom0 qemu-dm.
    Finally, in a radically disaggregated system: where the HVM service
    domain software (probably, the device model domain image) is not
    always supplied by the host administrator, a malicious service domain
    administrator can exercise this vulnerability.
    MITIGATION
    ==========
    Running only PV guests will avoid this vulnerability.
    In a radically disaggregated system, restricting HVM service domains
    to software images approved by the host administrator will avoid the
    vulnerability.
    =================================================================
    Permitting arbitrary type changes here has the potential of creating
    present P2M (and hence EPT/NPT/IOMMU) entries pointing to an invalid
    MFN (INVALID_MFN truncated to the respective hardware structure field's
    width). This would become a problem the latest when something real sat
    at the end of the physical address space; I'm suspecting though that
    other things might break with such bogus entries.
    Along with that drop a bogus (and otherwise becoming stale) log
    message.
    Afaict the similar operation in p2m_set_mem_access() is safe.
    This is XSA-92.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    commit: 83bb5eb4d340acebf27b34108fb1dae062146a68
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 18692196]


author: Firas Azar <firas.azar@oracle.com> - 4.3.0-50
changelog:
  - Signed-off by: Adnan G Misherfi <adnan.misherfi@oracle.com>
    Signed-off by: Zhigang Wang <zhigang.x.wang@oracle.com> [bug 18560587]


author: Jingjie Jiang <jingjie.jiang@oracle.com> - 4.3.0-49
changelog:
  - Check in the following patch for Konrad:
    From Message-ID: <1332267691-13179-1-git-send-email-david.vrabel@citrix.com>
    If a maximum reservation for dom0 is not explictly given (i.e., no
    dom0_mem=max:MMM command line option), then set the maximum
    reservation to the initial number of pages.  This is what most people
    seem to expect when they specify dom0_mem=512M (i.e., exactly 512 MB
    and no more).
    This change means that with Linux 3.0.5 and later kernels,
    dom0_mem=512M has the same result as older, 'classic Xen' kernels. The
    older kernels used the initial number of pages to set the maximum
    number of pages and did not query the hypervisor for the maximum
    reservation.
    It is still possible to have a larger reservation by explicitly
    specifying dom0_mem=max:MMM.
    Signed-off-by: David Vrabel <david.vrabel@citrix.com>
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    NOTE: This behaviour should also be implemented in the Linux kernel. [bug 13860516] [bug 18552768]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 4.3.0-48
changelog:
  - Check in the following patch for Konrad:
    From: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    When we migrate an HVM guest, by default our shared_info can
    only hold up to 32 CPUs. As such the hypercall
    VCPUOP_register_vcpu_info was introduced which allowed us to
    setup per-page areas for VCPUs. This means we can boot PVHVM
    guest with more than 32 VCPUs. During migration the per-cpu
    structure is allocated fresh by the hypervisor (vcpu_info_mfn
    is set to INVALID_MFN) so that the newly migrated guest
    can do make the VCPUOP_register_vcpu_info hypercall.
    Unfortunatly we end up triggering this condition:
    /* Run this command on yourself or on other offline VCPUS. */
    if ( (v != current) && !test_bit(_VPF_down, &v->pause_flags) )
    which means we are unable to setup the per-cpu VCPU structures
    for running vCPUS. The Linux PV code paths make this work by
    iterating over every vCPU with:
    1) is target CPU up (VCPUOP_is_up hypercall?)
    2) if yes, then VCPUOP_down to pause it.
    3) VCPUOP_register_vcpu_info
    4) if it was down, then VCPUOP_up to bring it back up
    But since VCPUOP_down, VCPUOP_is_up, and VCPUOP_up are
    not allowed on HVM guests we can't do this. This patch
    enables this.
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 18552539]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-47
changelog:
  - x86: enforce preemption in HVM_set_mem_access / p2m_set_mem_access()
    Xen Security Advisory CVE-2014-2599 / XSA-89
    version 3
    HVMOP_set_mem_access is not preemptible
    UPDATES IN VERSION 3
    ====================
    This issue has been assigned CVE-2014-2599.
    ISSUE DESCRIPTION
    =================
    Processing of the HVMOP_set_mem_access HVM control operations does not
    check the size of its input and can tie up a physical CPU for extended
    periods of time.
    IMPACT
    ======
    In a configuration where device models run with limited privilege (for
    example, stubdom device models), a guest attacker who successfully
    finds and exploits an unfixed security flaw in qemu-dm could leverage
    the other flaw into a Denial of Service affecting the whole host.
    In the more general case, in more abstract terms: a malicious
    administrator of a domain privileged with regard to an HVM guest can
    cause Xen to become unresponsive leading to a Denial of Service.
    VULNERABLE SYSTEMS
    ==================
    All Xen versions from 4.1 onwards are vulnerable. In 4.2 only 64-bit
    versions of the hypervisor are vulnerable (HVMOP_set_mem_access is not
    available in 32-bit hypervisors).
    The vulnerability is only exposed to service domains for HVM guests
    which have privilege over the guest.  In a usual configuration that
    means only device model emulators (qemu-dm).
    In the case of HVM guests whose device model is running in an
    unrestricted dom0 process, qemu-dm already has the ability to cause
    problems for the whole system.  So in that case the vulnerability is
    not applicable.
    The situation is more subtle for an HVM guest with a stub qemu-dm.
    That is, where the device model runs in a separate domain (in the case
    of xl, as requested by "device_model_stubdomain_override=1" in the xl
    domain configuration file).  The same applies with a qemu-dm in a dom0
    process subjected to some kind kernel-based process privilege
    limitation (eg the chroot technique as found in some versions of
    XCP/XenServer).
    In those latter situations this issue means that the extra isolation
    does not provide as good a defence (against denial of service) as
    intended.  That is the essence of this vulnerability.
    However, the security is still better than with a qemu-dm running as
    an unrestricted dom0 process.  Therefore users with these
    configurations should not switch to an unrestricted dom0 qemu-dm.
    Finally, in a radically disaggregated system: where the HVM service
    domain software (probably, the device model domain image) is not
    always supplied by the host administrator, a malicious service domain
    administrator can excercise this vulnerability.
    MITIGATION
    ==========
    Running only PV guests will avoid this vulnerability.
    In a radically disaggregated system, restricting HVM service domains
    to software images approved by the host administrator will avoid the
    vulnerability.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    commit: 0fe53c4f279e1a8ef913e71ed000236d21ce96de
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 18521502]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 4.3.0-46
changelog:
  - The flowing patch was missed when we upgraded OVM xen to 4.3:
    From 5eda9dfe0a2e11d9c91717f83ddbb2f52e7535e7 Mon Sep 17 00:00:00 2001
    From: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Date: Fri, 4 Apr 2014 15:36:36 -0400
    Subject: [PATCH] qemu-xen-trad: free all the pirqs for msi/msix when driver
    unloads
    Pirqs are not freed when driver unloads, then new pirqs are allocated when
    driver reloads. This could exhaust pirqs if do it in a loop.
    This patch fixes the bug by freeing pirqs when ENABLE bit is cleared in
    msi/msix control reg.
    There is also other way of fixing it such as reuse pirqs between driver reload,
    but this way is better.
    Xen-devel: http://marc.info/?l=xen-devel&m=136800120304275&w=2
    Signed-off-by: Zhenzhong Duan <zhenzhong.duan@oracle.com>
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.c [bug 16910937]


author: Chuang Cao <chuang.cao@oracle.com> - 4.3.0-44
changelog:
  - Just release running lock after a domain is gone.
    Signed-off-by: Chuang Cao <chuang.cao@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Acked-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Acked-by: Julie Trask <julie.trask@oracle.com> [bug 17936558]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.3.0-42
changelog:
  - Release domain running lock correctly
    When the domain dies very early by:
    VmError: HVM guest support is unavailable: is VT/AMD-V supported by your CPU and enabled in your BIOS?
    We don't release release the domain running lock correctly.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 18328751]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-41
changelog:
  - x86/pci: Store VF's memory space displacement in a 64-bit value
    VF's memory space offset can be greater than 4GB and therefore needs
    to be stored in a 64-bit variable.
    commit: 001bdcee7bc19be3e047d227b4d940c04972eb02
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 18262495]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-40
changelog:
  - libxc: Fix out-of-memory error handling in xc_cpupool_getinfo()
    Xen Security Advisory CVE-2014-1950 / XSA-88
    version 3
    use-after-free in xc_cpupool_getinfo() under memory pressure
    UPDATES IN VERSION 3
    ====================
    CVE assigned.
    ISSUE DESCRIPTION
    =================
    If xc_cpumap_alloc() fails then xc_cpupool_getinfo() will free and incorrectly
    return the then-free pointer to the result structure.
    IMPACT
    ======
    An attacker may be able to cause a multi-threaded toolstack using this
    function to race against itself leading to heap corruption and a
    potential DoS.
    Depending on the malloc implementation, privilege escalation cannot be
    ruled out.
    VULNERABLE SYSTEMS
    ==================
    The flaw is present in Xen 4.1 onwards.  Only multithreaded toolstacks
    are vulnerable.  Only systems where management functions (such as
    domain creation) are exposed to untrusted users are vulnerable.
    xl is not multithreaded, so is not vulnerable.  However, multithreaded
    toolstacks using libxl as a library are vulnerable.  xend is
    vulnerable.
    MITIGATION
    ==========
    Not allowing untrusted users access to toolstack functionality will
    avoid this issue.
    Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    commit: d883c179a74111a6804baf8cb8224235242a88fc
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 18252940]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-39
changelog:
  - x86: PHYSDEVOP_{prepare,release}_msix are privileged
    Xen Security Advisory CVE-2014-1666 / XSA-87
    version 2
    PHYSDEVOP_{prepare,release}_msix exposed to unprivileged guests
    UPDATES IN VERSION 2
    ====================
    CVE assigned.
    ISSUE DESCRIPTION
    =================
    The PHYSDEVOP_{prepare,release}_msix operations are supposed to be available
    to privileged guests (domain 0 in non-disaggregated setups) only, but the
    necessary privilege check was missing.
    IMPACT
    ======
    Malicious or misbehaving unprivileged guests can cause the host or other
    guests to malfunction. This can result in host-wide denial of service.
    Privilege escalation, while seeming to be unlikely, cannot be excluded.
    VULNERABLE SYSTEMS
    ==================
    Xen 4.1.5 and 4.1.6.1 as well as 4.2.2 and later are vulnerable.
    Xen 4.2.1 and 4.2.0 as well as 4.1.4 and earlier are not vulnerable.
    Only PV guests can take advantage of this vulnerability.
    MITIGATION
    ==========
    Running only HVM guests will avoid this issue.
    There is no mitigation available for PV guests.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
    commit: 9c7e789a1b60b6114e0b1ef16dff95f03f532fb5
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 18252940]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-38
changelog:
  - libvchan: Fix handling of invalid ring buffer indices
    Xen Security Advisory CVE-2014-1896 / XSA-86
    version 3
    libvchan failure handling malicious ring indexes
    UPDATES IN VERSION 3
    ====================
    CVE assigned.
    ISSUE DESCRIPTION
    =================
    libvchan (a library for inter-domain communication) does not correctly
    handle unusual or malicious contents in the xenstore ring.  A
    malicious guest can exploit this to cause a libvchan-using facility to
    read or write past the end of the ring.
    IMPACT
    ======
    libvchan-using facilities are vulnerable to denial of service and
    perhaps privilege escalation.
    There are no such services provided in the upstream Xen Project
    codebase.
    VULNERABLE SYSTEMS
    ==================
    All versions of libvchan are vulnerable.  Only installations which use
    libvchan for communication involving untrusted domains are vulnerable.
    libvirt, xapi, xend, libxl and xl do not use libvchan.  If your
    installation contains other Xen-related software components it is
    possible that they use libvchan and might be vulnerable.
    Xen versions 4.1 and earlier do not contain libvchan.
    MITIGATION
    ==========
    Disabling libvchan-based facilities could be used to mitigate the
    vulnerability.
    ===================================================================
    The remote (hostile) process can set ring buffer indices to any value
    at any time. If that happens, it is possible to get "buffer space"
    (either for writing data, or ready for reading) negative or greater
    than buffer size.  This will end up with buffer overflow in the second
    memcpy inside of do_send/do_recv.
    Fix this by introducing new available bytes accessor functions
    raw_get_data_ready and raw_get_buffer_space which are robust against
    mad ring states, and only return sanitised values.
    Proof sketch of correctness:
    Now {rd,wr}_{cons,prod} are only ever used in the raw available bytes
    functions, and in do_send and do_recv.
    The raw available bytes functions do unsigned arithmetic on the
    returned values.  If the result is "negative" or too big it will be
    >ring_size (since we used unsigned arithmetic).  Otherwise the result
    is a positive in-range value representing a reasonable ring state, in
    which case we can safely convert it to int (as the rest of the code
    expects).
    do_send and do_recv immediately mask the ring index value with the
    ring size.  The result is always going to be plausible.  If the ring
    state has become mad, the worst case is that our behaviour is
    inconsistent with the peer's ring pointer.  I.e. we read or write to
    arguably-incorrect parts of the ring - but always parts of the ring.
    And of course if a peer misoperates the ring they can achieve this
    effect anyway.
    So the security problem is fixed.
    This is XSA-86.
    (The patch is essentially Ian Jackson's work, although parts of the
    commit message are by Marek.)
    Signed-off-by: Marek Marczykowski-G?195?179recki <marmarek@invisiblethingslab.com>
    Signed-off-by: Ian Jackson <ian.jackson@eu.citrix.com>
    commit: 2efcb0193bf3916c8ce34882e845f5ceb1e511f7
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 18252940]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-37
changelog:
  - xsm/flask: correct off-by-one in flask_security_avc_cachestats cpu id check
    Xen Security Advisory CVE-2014-1895 / XSA-85
    version 3
    Off-by-one error in FLASK_AVC_CACHESTAT hypercall
    UPDATES IN VERSION 3
    ====================
    CVE assigned.
    ISSUE DESCRIPTION
    =================
    The FLASK_AVC_CACHESTAT hypercall, which provides access to per-cpu
    statistics on the Flask security policy, incorrectly validates the
    CPU for which statistics are being requested.
    IMPACT
    ======
    An attacker can cause the hypervisor to read past the end of an
    array. This may result in either a host crash, leading to a denial of
    service, or access to a small and static region of hypervisor memory,
    leading to an information leak.
    VULNERABLE SYSTEMS
    ==================
    Xen version 4.2 and later are vulnerable to this issue when built with
    XSM/Flask support. XSM support is disabled by default and is enabled
    by building with XSM_ENABLE=y.
    Only systems with the maximum supported number of physical CPUs are
    vulnerable. Systems with a greater number of physical CPUs will only
    make use of the maximum supported number and are therefore vulnerable.
    By default the following maximums apply:
    * x86_32: 128 (only until Xen 4.2.x)
    * x86_64: 256
    These defaults can be overridden at build time via max_phys_cpus=N.
    The vulnerable hypercall is exposed to all domains.
    MITIGATION
    ==========
    Rebuilding Xen with more supported physical CPUs can avoid the
    vulnerability; provided that the supported number is strictly greater
    than the actual number of CPUs on any host on which the hypervisor is
    to run.
    If XSM is compiled in, but not actually in use, compiling it out (with
    XSM_ENABLE=n) will avoid the vulnerability.
    Signed-off-by: Matthew Daley <mattd@bugfuzz.com>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Ian Campbell <ian.campbell@citrix.com>
    commit: 2e1cba2da4631c5cd7218a8f30d521dce0f41370
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 18252940]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-36
changelog:
  - flask: fix reading strings from guest memory
    Xen Security Advisory CVE-2014-1891,CVE-2014-1892,CVE-2014-1893,CVE-2014-1894 / XSA-84
    version 3
    integer overflow in several XSM/Flask hypercalls
    UPDATES IN VERSION 3
    ====================
    CVE numbers have been assigned.
    ISSUE DESCRIPTION
    =================
    The FLASK_{GET,SET}BOOL, FLASK_USER and FLASK_CONTEXT_TO_SID
    suboperations of the flask hypercall are vulnerable to an integer
    overflow on the input size. The hypercalls attempt to allocate a
    buffer which is 1 larger than this size and is therefore vulnerable to
    integer overflow and an attempt to allocate then access a zero byte
    buffer.  (CVE-2014-1891)
    Xen 3.3 through 4.1, while not affected by the above overflow, have a
    different overflow issue on FLASK_{GET,SET}BOOL (CVE-2014-1893) and
    expose unreasonably large memory allocation to aribitrary guests
    (CVE-2014-1892).
    Xen 3.2 (and presumably earlier) exhibit both problems with the
    overflow issue being present for more than just the suboperations
    listed above.  (CVE-2014-1894 for the subops not covered above.)
    The FLASK_GETBOOL op is available to all domains.
    The FLASK_SETBOOL op is only available to domains which are granted
    access via the Flask policy.  However the permissions check is
    performed only after running the vulnerable code and the vulnerability
    via this subop is exposed to all domains.
    The FLASK_USER and FLASK_CONTEXT_TO_SID ops are only available to
    domains which are granted access via the Flask policy.
    IMPACT
    ======
    Attempting to access the result of a zero byte allocation results in
    a processor fault leading to a denial of service.
    VULNERABLE SYSTEMS
    ==================
    All Xen versions back to at least 3.2 are vulnerable to this issue when
    built with XSM/Flask support. XSM support is disabled by default and is
    enabled by building with XSM_ENABLE=y.
    We have not checked earlier versions of Xen, but it is likely that
    they are vulnerable to this or related vulnerabilities.
    All Xen versions built with XSM_ENABLE=y are vulnerable.
    MITIGATION
    ==========
    There is no useful mitigation available in installations where XSM
    support is actually in use.
    In other systems, compiling it out (with XSM_ENABLE=n) will avoid the
    vulnerability.
    Reported-by: Matthew Daley <mattd@bugfuzz.com>
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
    commit: 6c79e0ab9ac6042e60434c02e1d99b0cf0cc3470
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 18252940]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-35
changelog:
  - x86/irq: avoid use-after-free on error path in pirq_guest_bind()
    Xen Security Advisory CVE-2014-1642 / XSA-83
    version 3
    Out-of-memory condition yielding memory corruption during IRQ setup
    UPDATES IN VERSION 3
    ====================
    CVE assigned.
    ISSUE DESCRIPTION
    =================
    When setting up the IRQ for a passed through physical device, a flaw
    in the error handling could result in a memory allocation being used
    after it is freed, and then freed a second time.  This would typically
    result in memory corruption.
    IMPACT
    ======
    Malicious guest administrators can trigger a use-after-free error, resulting
    in hypervisor memory corruption.  The effects of memory corruption could be
    anything, including a host-wide denial of service, or privilege escalation.
    VULNERABLE SYSTEMS
    ==================
    Xen 4.2.x and later are vulnerable.
    Xen 4.1.x and earlier are not vulnerable.
    Only systems making use of device passthrough are vulnerable.
    Only systems with a 64-bit hypervisor configured to support more than 128
    CPUs or with a 32-bit hypervisor configured to support more than 64 CPUs are
    vulnerable.
    MITIGATION
    ==========
    This issue can be avoided by not assigning PCI devices to untrusted guests on
    systems supporting Intel VT-d or AMD Vi.
    Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    commit: 650fc2f76d0a156e23703683d0c18fa262ecea36
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 18252940]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 4.3.0-34
changelog:
  - Test if openvswitch kernel module is loaded to determine where to attach the VIF (bridge or openvswitch) [bug 17885201]


author: Firas Azar <firas.azar@oracle.com> - 4.3.0-33
changelog:
  - Signed-off by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off by: Adnan G Misherfi <adnan.misherfi@oracle.com> [bug 18048615]


author: Daniel Kiper <daniel.kiper@oracle.com> - 4.3.0-32
changelog:
  Add following upstream commits:
      - 2cebe22e6924439535cbf4a9f82a7d9d30c8f9c7
        (libxenctrl: Fix xc_interface_close() crash if it gets NULL as an argument),
      - dc37e0bfffc673f4bdce1d69ad86098bfb0ab531
        (x86: fix early boot command line parsing),
      - 7113a45451a9f656deeff070e47672043ed83664
        (kexec/x86: do not map crash kernel area).


author: Firas Azar <firas.azar@oracle.com> - 4.3.0-31
changelog:
  - Signed-off by: Adnan G Misherfi <adnan.misherfi@oracle.com>
    Signed-off by: Zhigang Wang <zhigang.x.wang@oracle.com> [bug 18048615]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-30
changelog:
  - VMX patches for XSA-60
    Xen Security Advisory CVE-2013-2212 / XSA-60
    version 5
    Excessive time to disable caching with HVM guests with PCI passthrough
    UPDATES IN VERSION 5
    ====================
    Corrected credit.
    ISSUE DESCRIPTION
    =================
    HVM guests are able to manipulate their physical address space such that
    processing a subsequent request by that guest to disable caches takes an
    extended amount of time changing the cachability of the memory pages assigned
    to this guest. This applies only when the guest has been granted access to
    some memory mapped I/O region (typically by way of assigning a passthrough
    PCI device).
    This can cause the CPU which processes the request to become unavailable,
    possibly causing the hypervisor or a guest kernel (including the domain 0 one)
    to halt itself ("panic").
    For reference, as long as no patch implementing an approved alternative
    solution is available (there's only a draft violating certain requirements
    set by Intel's documentation), the problematic code is the function
    vmx_set_uc_mode() (in that it calls ept_change_entry_emt_with_range() with
    the full guest GFN range, which the guest has control over, but which also
    would be a problem with sufficiently large but not malicious guests).
    IMPACT
    ======
    A malicious domain, given access to a device with memory mapped I/O
    regions, can cause the host to become unresponsive for a period of
    time, potentially leading to a DoS affecting the whole system.
    VULNERABLE SYSTEMS
    ==================
    Xen version 3.3 onwards is vulnerable.
    Only systems using the Intel variant of Hardware Assisted Paging (aka EPT) are
    vulnerable.
    MITIGATION
    ==========
    This issue can be avoided by not assigning PCI devices to untrusted guests, or
    by running HVM guests with shadow mode paging (through adding "hap=0" to the
    domain configuration file).
    This XSA is addressed by 3 patches:
    1. VMX: disable EPT when !cpu_has_vmx_pat
    Recently Oracle developers found a Xen security issue as DOS affecting,
    named as XSA-60. Please refer http://xenbits.xen.org/xsa/advisory-60.html
    Basically it involves how to handle guest cr0.cd setting, which under
    some environment it consumes much time resulting in DOS-like behavior.
    This is a preparing patch for fixing XSA-60. Later patch will fix XSA-60
    via PAT under Intel EPT case, which depends on cpu_has_vmx_pat.
    Signed-off-by: Liu Jinsong <jinsong.liu@intel.com>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    Acked-by: Jun Nakajima <jun.nakajima@intel.com>
    commit: 72380ecbcd9f870db1c60e698c9df71bdea6d819
    2. VMX: remove the problematic set_uc_mode logic
    XSA-60 security hole comes from the problematic vmx_set_uc_mode.
    This patch remove vmx_set_uc_mode logic, which will be replaced by
    PAT approach at later patch.
    Signed-off-by: Liu Jinsong <jinsong.liu@intel.com>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    Acked-by: Jun Nakajima <jun.nakajima@intel.com>
    commit: e81d0ac25464825b3828cff5dc9e8285612992c4
    3. VMX: fix cr0.cd handling
    This patch solves XSA-60 security hole:
    1. For guest w/o VT-d, and for guest with VT-d but snooped, Xen need
    do nothing, since hardware snoop mechanism has ensured cache coherency.
    2. For guest with VT-d but non-snooped, cache coherency can not be
    guaranteed by h/w snoop, therefore it need emulate UC type to guest:
    2.1). if it works w/ Intel EPT, set guest IA32_PAT fields as UC so that
    guest memory type are all UC.
    2.2). if it works w/ shadow, drop all shadows so that any new ones would
    be created on demand w/ UC.
    This patch also fix a bug of shadow cr0.cd setting. Current shadow has a
    small window between cache flush and TLB invalidation, resulting in possilbe
    cache pollution. This patch pause vcpus so that no vcpus context involved
    into the window.
    Signed-off-by: Liu Jinsong <jinsong.liu@intel.com>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Acked-by: Jun Nakajima <jun.nakajima@intel.com>
    Acked-by: Keir Fraser <keir@xen.org>
    commit: 064275dcfb6002dc4327ba94b6bd758806735538
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-29
changelog:
  - x86/AMD: work around erratum 793
    Xen Security Advisory CVE-2013-6885 / XSA-82
    version 3
    Guest triggerable AMD CPU erratum may cause host hang
    UPDATES IN VERSION 3
    ====================
    Early public release.
    This issue was predisclosed under embargo by the Xen Project Security
    team, on the 27th of November.  We treated the issue as not publicly
    known because it was not evident from the public sources that this
    erratum constitutes a vulnerability (particularly, that it was a
    vulnerability in relation to some Xen configurations).
    Since then, the fact that this CPU erratum is likely to constitute a
    security problem has been publicly disclosed, on the oss-security
    mailing list.
    Under the circumstances, and in accordance with the Xen Project
    security vulnerability policy, it has been decided that it is no
    longer appropriate to retain the embargo, as the key facts are now in
    the open.
    ISSUE DESCRIPTION
    =================
    AMD CPU erratum 793 "Specific Combination of Writes to Write Combined
    Memory Types and Locked Instructions May Cause Core Hang" describes a
    situation under which a CPU core may hang.
    IMPACT
    ======
    A malicious guest administrator can mount a denial of service attack
    affecting the whole system.
    VULNERABLE SYSTEMS
    ==================
    The vulnerability is applicable only to family 16h model 00h-0fh AMD
    CPUs.
    Such CPUs running Xen versions 3.3 onwards are vulnerable.  We have
    not checked earlier versions of Xen.
    HVM guests can always exploit the vulnerability if it is present.
    PV guests can exploit the vulnerability only if they have been granted
    access to physical device(s).
    Non-AMD CPUs are not vulnerable.
    CREDITS
    =======
    This issue's security impact was discovered by Jan Beulich.
    MITIGATION
    ==========
    This issue can be avoided by neither running HVM guests, nor assigning
    PCI devices to PV guests.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Suravee Suthikulpanit <suravee.suthikulpanit@amd.com>
    commit in xen-unstable: 98162f256ee33994a9881a720419dda9ad4c03a8
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-28
changelog:
  - IOMMU: clear "don't flush" override on error paths
    Xen Security Advisory CVE-2013-6400 / XSA-80
    version 3
    IOMMU TLB flushing may be inadvertently suppressed
    UPDATES IN VERSION 3
    ====================
    Public release.
    Corrected explanatory text to refer to the correct patch filename.
    ISSUE DESCRIPTION
    =================
    An internal flag is used to temporarily suppress IOMMU TLB flushes, in
    order to consolidate multiple single page flushes into one wider
    flush.  This flag is not cleared again, on certain error paths.  This
    can result in TLB flushes not happening when they are needed.
    Retaining stale TLB entries could allow guests access to memory that
    ought to have been revoked, or grant greater access than intended.
    IMPACT
    ======
    Malicious guest administrators might be able to cause host-wide denial of
    service, or escalate their privilege to that of the host.
    VULNERABLE SYSTEMS
    ==================
    Only VMs which have been assigned PCI devices can exploit the bug.
    Only systems using Intel VT-d are vulnerable, since the bug is in the
    VT-d specific code in Xen.
    Xen 4.2.x and later are vulnerable.
    Xen 4.1.x and earlier are not vulnerable.
    MITIGATION
    ==========
    This issue can be avoided by not assigning PCI devices to untrusted guests on
    systems supporting Intel VT-d.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Ian Campbell <ian.campbell@citrix.com>
    commit: 8940a13d6de1295cfdc4a189e0a5610849a9ef59
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-27
changelog:
  - VT-d: fix TLB flushing in dma_pte_clear_one()
    Xen Security Advisory CVE-2013-6375 / XSA-78
    version 2
    Insufficient TLB flushing in VT-d (iommu) code
    UPDATES IN VERSION 2
    ====================
    This issue has been assigned CVE-2013-6375.
    ISSUE DESCRIPTION
    =================
    An inverted boolean parameter resulted in TLB flushes not happening
    upon clearing of a present translation table entry.  Retaining stale
    TLB entries could allow guests access to memory that ought to have
    been revoked, or grant greater access than intended.
    IMPACT
    ======
    Malicious guest administrators might be able to cause host-wide denial
    of service, or escalate their privilege to that of the host.
    VULNERABLE SYSTEMS
    ==================
    Xen 4.2.x and later are vulnerable.
    Xen 4.1.x and earlier are not vulnerable.
    Only systems using Intel VT-d for PCI passthrough are vulnerable.
    MITIGATION
    ==========
    This issue can be avoided by not assigning PCI devices to untrusted guests on
    systems supporting Intel VT-d.
    Suggested-by: Cheng Yueqiang <yqcheng.2008@phdis.smu.edu.sg>
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Acked-by: Keir Fraser <keir@xen.org>
    commit: 7482b89e67e4681d515224b6fc8c00f017979d6f
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-26
changelog:
  - x86/HVM: only allow ring 0 guest code to make hypercalls
    Xen Security Advisory CVE-2013-4554 / XSA-76
    version 3
    Hypercalls exposed to privilege rings 1 and 2 of HVM guests
    UPDATES IN VERSION 3
    ====================
    Public release.
    ISSUE DESCRIPTION
    =================
    The privilege check applied to hypercall attempts by a HVM guest only refused
    access from ring 3; rings 1 and 2 were allowed through.
    IMPACT
    ======
    Code running in the intermediate privilege rings of HVM guest OSes may be able
    to elevate its privileges inside the guest by careful hypercall use.
    VULNERABLE SYSTEMS
    ==================
    Xen 3.0.3 and later are vulnerable.
    Xen 3.0.2 and earlier are not vulnerable.
    MITIGATION
    ==========
    Running only PV guests, or running HVM guests known to not make use of
    protection rings 1 and 2 will avoid this issue. As far as we are aware no
    mainstream OS (Linux, Windows, BSD) make use of these rings.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Acked-by: Ian Campbell <ian.campbell@citrix.com>
    commit: 82b79aceed17a3ca45e2b87b4c95965ba19f803e
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-25
changelog:
  - nested VMX: VMLANUCH/VMRESUME emulation must check permission first thing
    Xen Security Advisory CVE-2013-4551 / XSA-75
    version 2
    Host crash due to guest VMX instruction execution
    UPDATES IN VERSION 2
    ====================
    This issue has been assigned CVE-2013-4551.
    ISSUE DESCRIPTION
    =================
    Permission checks on the emulation paths (intended for guests using
    nested virtualization) for VMLAUNCH and VMRESUME were deferred too
    much.  The hypervisor would try to use internal state which is not set
    up unless nested virtualization is actually enabled for a guest.
    IMPACT
    ======
    A malicious or misbehaved HVM guest, including malicious or misbehaved user
    mode code run in the guest, might be able to crash the host.
    VULNERABLE SYSTEMS
    ==================
    Xen 4.2.x and later are vulnerable.
    Xen 4.1.x and earlier are not vulnerable.
    Only HVM guests run on VMX capable (e.g. Intel) hardware can take
    advantage of this vulnerability.
    MITIGATION
    ==========
    Running only PV guests, or running HVM guests on SVM capable
    (e.g. AMD) hardware will avoid this issue.
    Enabling nested virtualization for a HVM guest running on VMX capable
    hardware would also allow avoiding the issue.  However this
    functionality is still considered experimental, and is not covered by
    security support from the Xen Project security team.  This approach is
    therefore not recommended for use in production.
    Reported-and-tested-by: Jeff Zimmerman <Jeff_Zimmerman@McAfee.com>
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-and-tested-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Acked-by: Ian Campbell <ian.campbell@citrix.com>
    commit: d86a985a273662f3275ee60585d7507d457802a1
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 18049441]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-24
changelog:
  - x86: restrict XEN_DOMCTL_getmemlist
    Xen Security Advisory CVE-2013-4553 / XSA-74
    version 3
    Lock order reversal between page_alloc_lock and mm_rwlock
    UPDATES IN VERSION 3
    ====================
    Public release.
    ISSUE DESCRIPTION
    =================
    The locks page_alloc_lock and mm_rwlock are not always taken in
    the same order.  This raises the possibility of deadlock.
    The incorrect order occurs only in the implementation of the
    deprecated domctl hypercall XEN_DOMCTL_getmemlist.
    IMPACT
    ======
    A malicious guest administrator may be able to deny service to the
    entire host.
    VULNERABLE SYSTEMS
    ==================
    Xen 3.4.x and later are vulnerable.
    Xen 3.3.x and earlier are not vulnerable.
    Only systems where a privileged domain frequently or predictably uses
    XEN_DOMCTL_getmemlist are vulnerable.  (Its use by manually invoked
    debugging and stress testing tools is not a security problem.)
    We are not aware of any toolstack software which has relevant (and
    hence vulnerable) uses of this hypercall.  xend, libxl, xapi and
    libvirt are known not to do so.
    We are therefore not aware of any deployed Xen-based systems which are
    vulnerable.  We are issuing this advisory primarily for the benefit of
    any Xen-derived systems using unusual toolstack software.
    MITIGATION
    ==========
    If you are using a toolstack (or other software) which uses
    XEN_DOMCTL_getmemlist, disabling the relevant feature or functions may
    be possible, and would avoid the vulnerability.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    commit: 9229cff72fd9490c103ebf644e432bb6c4fb69c5
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 18049441]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.3.0-23
changelog:
  - gnttab: correct locking order reversal
    Xen Security Advisory CVE-2013-4494 / XSA-73
    version 3
    Lock order reversal between page allocation and grant table locks
    UPDATES IN VERSION 3
    ====================
    The issue has been assigned CVE-2013-4494.
    NOTE REGARDING LACK OF EMBARGO
    ==============================
    While the response to this issue was being prepared by the security
    team, the bug was independently discovered by a third party who
    publicly disclosed it without realising the security impact.
    ISSUE DESCRIPTION
    =================
    The locks page_alloc_lock and grant_table.lock are not always taken in
    the same order.  This opens the possibility of deadlock.
    IMPACT
    ======
    A malicious guest administrator can deny service to the entire host.
    VULNERABLE SYSTEMS
    ==================
    Xen versions going back to at least Xen 3.2 are vulnerable.
    To exploit the vulnerability, the attacker must have control of more
    than one vcpu, either by controlling a malicious multi-vcpu guest, or
    by controlling more than one guest.
    MITIGATION
    ==========
    There is no practical mitigation for this issue.
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Keir Fraser <keir@xen.org>
    Tested-by: Matthew Daley <mattjd@gmail.com>
    commit: 96b59ae2dcaa639a4f58c68f122f8ba8738009dc
    Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com> [bug 18049441]


author: Konrad Wilk <konrad.wilk@oracle.com> - 4.3.0-21
changelog:
  - xend: Fix xm list bug reporting incorrect memory size
    From: Marcos Matsunaga <Marcos.Matsunaga@oracle.com>
    This change allows xend to double-check the xcinfo info (which
    hypercall it had already do) and use the up-to-date contents.
    'xl' already does this by using the xcinfo.
    Signed-off-by: Marcos Matsunaga <Marcos.Matsunaga@oracle.com>
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 14553104] [bug (] [bug MEM(K)] [bug IN] [bug XENTOP] [bug MISMATCH] [bug MEMTOTAL] [bug IN] [bug /PROC/MEMINFO] [bug AND] [bug MEM] [bug IN] [bug "XM] [bug LIST")]


author: Konrad Wilk <konrad.wilk@oracle.com> - 4.3.0-20
changelog:
  - Xen: Spread boot time page scrubbing across all available CPU's
    The page scrubbing is done in 128MB chunks in lockstep across all the CPU's.
    This allows for the boot CPU to hold the heap_lock whilst each chunk is being
    scrubbed and then release the heap_lock when all CPU's are finished scrubing
    their individual chunk. This allows for the heap_lock to not be held
    continously and for pending softirqs are to be serviced periodically across
    all CPU's.
    The page scrub memory chunks are allocated to the CPU's in a NUMA aware
    fashion to reduce Socket interconnect overhead and improve performance.
    This patch reduces the boot page scrub time on a 128GB 64 core AMD Opteron
    6386 machine from 49 seconds to 3 seconds.
    Changes in v2
    - Reduced default chunk size to 128MB
    - Added code to scrub NUMA nodes with no active CPU linked to them
    - Be robust to boot CPU not being linked to a NUMA node
    Signed-off-by: Malcolm Crossley <malcolm.crossley@citrix.com>
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 17962921]


author: Joe Jin <joe.jin@oracle.com> - 4.3.0-19
changelog:
  - Xend: handle died domain in getVCPUInfo()
    When created new guest on NUMA server, xend tried to get the best node
    by calculated all vcpus info, if domain already be terminated then
    getVCPUInfo() will throw below exception and guest start failed:
    [2013-09-04 20:01:26 6254] ERROR (XendDomainInfo:496) VM start failed
    Traceback (most recent call last):
    File "/usr/lib64/python2.4/site-packages/xen/xend/XendDomainInfo.py", line 482, in start
    XendTask.log_progress(31, 60, self._initDomain)
    File "/usr/lib64/python2.4/site-packages/xen/xend/XendTask.py", line 209, in log_progress
    retval = func(*args, **kwds)
    File "/usr/lib64/python2.4/site-packages/xen/xend/XendDomainInfo.py", line 2918, in _initDomain
    node = self._setCPUAffinity()
    File "/usr/lib64/python2.4/site-packages/xen/xend/XendDomainInfo.py", line 2835, in _setCPUAffinity
    best_node = find_relaxed_node(candidate_node_list)[0]
    File "/usr/lib64/python2.4/site-packages/xen/xend/XendDomainInfo.py", line 2803, in find_relaxed_node
    cpuinfo = dom.getVCPUInfo()
    File "/usr/lib64/python2.4/site-packages/xen/xend/XendDomainInfo.py", line 1600, in getVCPUInfo
    raise XendError(str(exn))
    XendError: (3, 'No such process')
    This patch will check return value of xc.vcpu_getinfo() and make sure the
    error not caused by domain died before throw the exception.
    Signed-off-by: Joe Jin <joe.jin@oracle.com>
    Acked-by: Matt Wilson <msw@amazon.com>
    Acked-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Oracle-bug: 16819966


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.3.0-18
changelog:
  - reduce minimum restart time to 10 seconds
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.3.0-17
changelog:
  - as we move to loop from dm-nfs, revert commit 6370
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 4.3.0-15
changelog:
  - This patch fixes a crash in guests 2.6.32 when PLE is enabled. It has not made upstream yet,
    and we missed it in xen 4.3. There are two changes in this patch,  xen/arch/x86/hvm/vpt.c,
    and xen/arch/x86/hvm/vmx/vmcs.c. The changes in vmcs.c is not needed as it is already xen in 4.3


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.3.0-14
changelog:
  - Restore C xenstored and put tdb to tmpfs.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>


author: Carson Hovey <carson.hovey@oracle.com> - 4.3.0-12
changelog:
  - Requests to connect on port 8003 with a Med strength cipher are now rejected.
    See also Bugs 16721961, 16721654
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>


author: Carson Hovey <carson.hovey@oracle.com> - 4.3.0-11
changelog:
  - Add "allowhugepage" flag as a synonym for "allowsuperpage"
    for compatibility with previous releases.
    Signed-off-by: Dave McCracken <dave.mccracken@oracle.com>
    Acked-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 13821795] 
  - Requests to connect on port 8003 with a LOW/weak cipher are now rejected.
    Signed-off-by: Cathy A. Avery <cathy.avery@oracle.com>;
    Oracle-bug: 16721961 - SECURE LIVE MIGRATION PORT ALLOWS WEAK CIPHER CONNECTION


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.3.0-10
changelog:
  - Add vif-switch to the makefile so that it is put in the xen scripts
    directory. [bug 15886237] 
  - Disable netfilter on bridges. [bug 15871028] 
  - Disable bridge multicast_snooping: Linux bridge can not forward packets
    to its ports and it is not needed.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 16746299]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.3.0-9
changelog:
  - Put back the patch that prevents older guests that use kudzu from
    hanging on reboot. Fixed the patch to prevent excessive watcher writes
    which causes xend, xenstored to run at a 100% cpu usage. Now the watch
    is written only if the console in Initialising, InitWait, Initialised
    states which happen once at boot time.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 13523487] 
  - Disable iptables when adding a VIF to a Bridge.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 14611657] 
  - Add support for openvswitch.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.3.0-8
changelog:
  - Remove unnecessary balloon retries on vm creation.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 14143327] 
  - Expose host uuid to guest via xenstore.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>
  - Revert change set 22315 because it breaks live migration:
    Do not wait for memory teardown when live migrate
    When trying to live migrate guest with great memory (e.g. 20 GB),
    there's delay caused by destroying source copy of domain. To speed up
    this process we can close socket before starting guest destroy, as
    source guest is not running anymore.
    Signed-off-by: Miroslav Rezanina <mrezanin@redhat.com>
    Signed-off-by: Ian Jackson <ian.jackson@eu.citrix.com> [bug 13808326] [bug 13874471]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.3.0-7
changelog:
  - Fix xm create vcpu_avail exceeds XMLRPC int limits.
    If maxvcpus = vcpus = 40, (1<<40 -1) will exceed XMLRPC int limit.
    Changing it to str will work. Then in the xend side, it will be
    converted back to int.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 14473041] 
  - Fix bootloader hang/crash xend on wrong bootargs.
    When dom0 under heavy pressure, the pipe read in xen bootloader may
    return -EAGAIN. This may result in no data read or partial data read.
    With this patch, bootloader will read again when that happens.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Steve Prochniak <steve.prochniak@oracle.com> [bug 14195864] [bug 14325570] [bug 14268749] [bug 14527250] 
  - Create a loop device node if it does not exist on VM start.
    After this patch, kernel max_loop could be 8.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.3.0-6
changelog:
  - Add "OVM" to version information. This is visible through
    smbios/dmidecode information for HVM guests. [bug 11792774] 
  - Fix xm reboot wait exception.
    For VM reboot, the VM will first shutdown and then xend will recreate
    it. This bug is caused by: when we do server.xend.domains(), the VM is
    live; when we do server.xend.domain.getRestartCount(), the VM is dead,
    thus raise an exception.
    We can ignore this exception and just continue: this domain will be
    handled in the next loop (it will not in the live vm list).
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Jingjie Jiang <jingjie.jiang@oracle.com>
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com> [bug 14836200] 
  - xend: disable SCSI device discover during xend start.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 14538564]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.3.0-5
changelog:
  - Enable Xend SSL relocation server.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>
  - Disable ballooning of dom0. [bug 8604766] [bug 9485681] 
  - Disable network-script.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.3.0-4
changelog:
  - Fix file descriptor leak in SSL migration.
    Signed-off-by: Steve Prochniak <steve.prochniak@oracle.com
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com> [bug 16706361] 
  - Setup dmnfs device mapper for files on NFS.
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
  - Avoid ballooning when dom0-min-mem is set and enable-dom0-ballooning is
    enabled.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com> [bug 12404026]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.3.0-3
changelog:
  - Add domain running lock callout hook.
    
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com>
  - Set max cstate to 1.
    
    Signed-off-by: Joe Jin <joe.jin@oracle.com>
     [bug 13703504] 
  - xen: increase default max grant frames from 32 to 64.
    We advertise as being able to launch 32VIFs and 8 VBDs.
    But currently the amount of frames that a guest uses is
    based on this simple algebra:
      So if we have 31VIFs we cannot have any more VBDs nor any
    more VIFs. By increasing the value to 64 we have some extra
    headroom _and_ we can have at least 8VBDs (or more).
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 16039922] 
  - Avoid concurrent calls to destory() for the same domain.
    Signed-off-by: Joe Jin <joe.jin@oracle.com>
    Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Reviewed-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 16098765]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.3.0-2
changelog:
  - Use local qemu insead of downloading.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
  - In bootloader(), domains_lock is first released to avoid a stunk
    bootloder from denying service to the other xend clients. It is
    re-acquired before returning to domain creation to cover the changes
    to be made. But if something goes wrong and domains_lock is not
    re-acquired, we may hit an error when releasing it one more time.
    This patch makes sure that the released domains_lock is re-acquired
    before returning.
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 14407719]


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-10
changelog:
  - support ACLs under skel directory
  - refer to PAM in /etc/login.defs
  - userdel option to remove Linux login <-> SELinux login mapping
  - useradd special exit value if SELinux user mapping is invalid
  - usermod special exit value if SELinux user mapping is invalid
  - fix gshadow functions from shadow utils
  - fix find_new_uid/gid for big UID/GID_MAX
  - don't show users who were not logged in lastlog
    Resolves: #586796 #629277 #639900 
    Resolves: #639975 #639976 #667593 #672510
    Resolves: #693377 #706321


author: Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-5
changelog:
  - newusers man page more informative
  - userdel should not need to run semanage
    Resolves: #586330 #586408


author: Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-11
changelog:
  - fix license tag (#226416)
  - get rid of tabs in spec file (#226416)
  - convert HOWTO to UTF8 (#226416)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-8
changelog:
  - groupmems: check username for valid character (#455603)
  - groupmems: don't segfault on nonexistent group (#456088)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-2
changelog:
  - improve audit logging (#211659)
  - improve "-l" option. Do not reset faillog if it's used (#213450).


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-6
changelog:
  - fix regression. Permissions on user* group* binaries 
    should be 0750, because of CAPP/LSPP certification
  - fix groupdel man page


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.7-5
changelog:
  - fix memory leak, and CPU spinning when grp_update() and 
    duplicate group entries in /etc/group (#151484)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.7-4
changelog:
  - use newgrp binary
  - newgrp don't ask for password if user's default GID = group ID,
    ask for password if there is some in /etc/gshadow 
    and in /etc/group is 'x' (#149997)


author: Adrian Havill <havill@redhat.com> 2:4.0.3-35
changelog:
  - make the limit for the group name the same as the username (determined
    by the header files, rather than a constant) (#56850)


author: Adrian Havill <havill@redhat.com> 2:4.0.3-33
changelog:
  - allow for mixed case and dots in usernames (#135401)
  - all man pages to UTF-8, not just Japanese (#133883)
  - add Polish blurb for useradd -n man page option (#82177)


author: Adrian Havill <havill@redhat.com> 2:4.0.3-31
changelog:
  - check for non-standard legacy place for ncsd HUP (/var/run/nscd.pid) and
    then the std FHS place (/var/run/nscd.pid) (#125421)


author: Dan Walsh <dwalsh@redhat.com> 4.0.3-23
changelog:
  - Add get_enforce checks
  - Clean up patch for potential upstream submission
  - Add removemalloc patch to get it to build on 3.4


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.3-15
changelog:
  - don't convert man pages to UTF-8 for RHEL 3, conditionalized using macro
  - fixup dangling man page references


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.3-14
changelog:
  - lastlog: don't pass a possibly-smaller field to localtime (#109648)
  - configure: call AC_SYS_LARGEFILE to get large file support


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.3-6
changelog:
  - adjust mailspool patch to complain if no group named "mail" exists, even
    though that should never happen


author: Nalin Dahyabhai <nalin@redhat.com> 20000902-13
changelog:
  - prevent libshadow from being built more than once, to keep automake happy
  - change how md5 and md5crypt are enabled, to keep autoconf happy
  - remove unpackaged files after %install


author: Nalin Dahyabhai <nalin@redhat.com> 20000902-12
changelog:
  - force .mo files to be regenerated with current gettext to flush out possible
    problems
  - fixup non-portable encodings in translations
  - make sv translation header non-fuzzy so that it will be included (#71281)


author: Nalin Dahyabhai <nalin@redhat.com> 20000902-4
changelog:
  - use -O0 instead of -O on ia64
  - build in source directory
  - don't leave lock files on the filesystem when useradd creates a group for
    the user (#50269)
  - fix the -o option to check for duplicate UIDs instead of login names (#52187)


author: Bernhard Rosenkraenzer <bero@redhat.com> 20000902-1
changelog:
  - Create an empty mailspool when creating a user so non-setuid/non-setgid
    MDAs (postfix+procmail) can deliver mail (#41811)
  - 20000902
  - adapt patches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't overwrite user dot files in useradd (#19982)
  - truncate new files when moving overwriting files with the contents of other
    files while moving directories (keeps files from looking weird later on)
  - configure using %{_prefix} as the prefix


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - take LOG_CONS out of the openlog() call so that we don't litter the
    screen during text-mode upgrades


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Remove a fixed-size buffer that caused problems when adding a huge number
    of users to a group (>8192 bytes) (Bugs #3809, #11930)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change symlinked man pages to includers
  - require /usr/bin/newgrp (util-linux) so that /usr/bin/sg isn't left dangling


author: Matt Wilson <msw@redhat.com>
changelog:
  - use mandir for FHS
  - added patches in src/ and po/ to honor DESTDIR
  - use make install DESTDIR=$RPM_BUILD_ROOT


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix usermod patch to check for shadow before doing any shadow-specific stuff
    and merge it into the pwlock patch


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - Serial: 1 because now we are using 19990827 (why the heck can't they have
    a normal version just like everybody else?!)
  - ported all patches to the new code base


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - have userdel remove user private groups when it is safe to do so
  - allow -f to force user removal even when user appears busy in utmp


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - Note that /usr/sbin/mkpasswd conflicts with /usr/bin/mkpasswd;
    one of these (I think /usr/sbin/mkpasswd but other opinions are valid)
    should probably be renamed.  In any case, mkpasswd.8 from this package
    needs to be installed. (problem #823)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the spec file
  - updated the patch so that new accounts created on shadowed system won't
    confuse pam_pwdb anymore ('!!' default password instead on '!')
  - fixed a bug that made useradd -G segfault
  - the check for the ut_user is now patched into configure


author: Erik Troan <ewt@redhat.com>
changelog:
  - added patch for XOPEN oddities in glibc headers
  - check for ut_user before checking for ut_name -- this works around some
    confusion on glibc 2.1 due to the utmpx header not defining the ut_name
    compatibility stuff. I used a gross sed hack here because I couldn't make
    automake work properly on the sparc (this could be a glibc 2.0.99 problem
    though). The utuser patch works fine, but I don't apply it.
  - sleep after running autoconf


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.15.1.el6uek]
changelog:
  - Revert "i40e: Set defport behavior for the Main VSI when in promiscuous mode" (Jack Vogel)  [Orabug: 22683573]  
  - mlx4: avoid multiple free on id_map_ent (Wengang Wang)   
  - xen-netfront: cast grant table reference first to type int (Dongli Zhang)   
  - xen-netfront: do not cast grant table reference to signed short (Dongli Zhang)   
  - RDS: Drop the connection as part of cancel to avoid hangs (Avinash Repaka)  [Orabug: 25045360]  
  - sctp: validate chunk len before actually using it (Marcelo Ricardo Leitner)  [Orabug: 25142879]  {CVE-2016-9555} 
  - mpi: Fix NULL ptr dereference in mpi_powm() [ver #3] (Andrey Ryabinin)  [Orabug: 25154098]  {CVE-2016-8650} {CVE-2016-8650} 
  - aacraid: Check size values after double-fetch from user (Dave Carroll)  [Orabug: 25060050]  {CVE-2016-6480} {CVE-2016-6480} 
  - IB/srpt: Simplify srpt_handle_tsk_mgmt() (Bart Van Assche)  [Orabug: 25060011]  {CVE-2016-6327} 
  - audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore)  [Orabug: 25059945]  {CVE-2016-6136} 
  - ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt (Kangjie Lu)  [Orabug: 25059899]  {CVE-2016-4578} 
  - ALSA: timer: Fix leak in events via snd_timer_user_ccallback (Kangjie Lu)  [Orabug: 25059899]  {CVE-2016-4578} 
  - ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS (Kangjie Lu)  [Orabug: 25059753]  {CVE-2016-4569} 
  - acpi: Disable ACPI table override if securelevel is set (Linn Crosetto)  [Orabug: 25058991]  {CVE-2016-3699} 
  - Bluetooth: Fix potential NULL dereference in RFCOMM bind callback (Jaganath Kanakkassery)  [Orabug: 25058903]  {CVE-2015-8956} 
  - ASN.1: Fix non-match detection failure on data overrun (David Howells)  [Orabug: 25059046]  {CVE-2016-2053} 
  - mm: migrate dirty page without clear_page_dirty_for_io etc (Hugh Dickins)  [Orabug: 25059194]  {CVE-2016-3070}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.14.1.el6uek]
changelog:
  - ecryptfs: forbid opening files without mmap handler (Jann Horn)  [Orabug: 24971919]  {CVE-2016-1583} 
  - RDS: IB: fix panic with handlers running post teardown (Santosh Shilimkar)  [Orabug: 24395795]  
  - mm, gup: close FOLL MAP_PRIVATE race (Linus Torvalds)  [Orabug: 24928591]  {CVE-2016-5195} 
  - HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Scott Bauer)  [Orabug: 24798695]  {CVE-2016-5829}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.12.1.el6uek]
changelog:
  - scsi_sysfs: protect against double execution of __scsi_remove_device() (Vitaly Kuznetsov)  [Orabug: 23720563]  
  - ocfs2: Fix double put of recount tree in ocfs2_lock_refcount_tree() (Ashish Samant)  [Orabug: 24691666]  
  - netfilter: x_tables: speed up jump target validation (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES (Pablo Neira Ayuso)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: remove unused comefrom hookmask argument (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: introduce and use xt_copy_counters_from_user (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: do compat validation via translate_table (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: xt_compat_match_from_user doesn't need a retval (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: ip6_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: ip_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: arp_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: don't reject valid target size on some architectures (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: validate all offsets and sizes in a rule (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: check for bogus target offset (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: check standard target size too (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: add compat version of xt_check_entry_offsets (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: assert minimum target size (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: kill check_entry helper (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: add and use xt_check_entry_offsets (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: validate targets of jumps (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: fix unconditional helper (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: validate targets of jumps (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: don't move to non-existent next rule (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: fix unconditional helper (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: check for size overflow (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - NFSv4: Fail I/O if the state recovery fails irrevocably (Trond Myklebust)  [Orabug: 24681407]  
  - rds: skip rx/tx work when destroying connection (Wengang Wang)  [Orabug: 24395795]  
  - ocfs2: Fix start offset to ocfs2_zero_range_for_truncate() (Ashish Samant)  [Orabug: 23747627]  
  - sched/core: Clear the root_domain cpumasks in init_rootdomain() (Xunlei Pang)  [Orabug: 23518545]  
  - ocfs2: move dquot_initialize() in ocfs2_delete_inode() somewhat later (Jan Kara)  [Orabug: 23097098]  
  - fuse: fix typo while displaying fuse numa mount option (Ashish Samant)   
  - IB/mlx4: Replace kfree with kvfree in mlx4_ib_destroy_srq (Wengang Wang)  [Orabug: 22570521]  
  - ocfs2: return non-zero st_blocks for inline data (John Haxby)  [Orabug: 22218260]  
  - watchdog: update watchdog_thresh properly (Michal Hocko)  [Orabug: 21868337]  
  - Btrfs: fix truncation of compressed and inlined extents (Ashish Samant)  [Orabug: 22307285]  {CVE-2015-8374} 
  - Btrfs: fix file corruption and data loss after cloning inline extents (Divya Indi)  [Orabug: 22307285]  {CVE-2015-8374} 
  - netfilter: x_tables: make sure e->next_offset covers remaining blob size (Florian Westphal)  [Orabug: 24682074]  {CVE-2016-4997} {CVE-2016-4998} 
  - netfilter: x_tables: validate e->target_offset early (Florian Westphal)  [Orabug: 24682074]  {CVE-2016-4997} {CVE-2016-4998}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.11.1.el6uek]
changelog:
  - rds: schedule local connection activity in proper workqueue (Ajaykumar Hotchandani)  [Orabug: 24624195]  
  - ib_core: make wait_event uninterruptible in ib_flush_fmr_pool() (Avinash Repaka)  [Orabug: 24655952]  
  - net/mlx4: Support shutdown() interface (Gavin Shan)  [Orabug: 24624181]  
  - tcp: make challenge acks less predictable (Eric Dumazet)  [Orabug: 24010012] [Orabug: 2401010]  {CVE-2016-5696}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.10.1.el6uek]
changelog:
  - ocfs2: call ocfs2_journal_access_di() before ocfs2_journal_dirty() in ocfs2_write_end_nolock() (yangwenfang)  [Orabug: 19601200]  
  - ocfs2: improve recovery performance (Junxiao Bi)  [Orabug: 24395691]  
  - KEYS: potential uninitialized variable (Dan Carpenter)  [Orabug: 24393864]  {CVE-2016-4470}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.9.1.el6uek]
changelog:
  - mlx4: Increase SYNC_TPT command timeout (Mukesh Kacker)  [Orabug: 22895790]  
  - neigh: do not modify unlinked entries (Julian Anastasov)  [Orabug: 23072705]  
  - mm/slab: Improve performance of slabinfo stats gathering (Aruna Ramakrishna)  [Orabug: 23720437]  
  - atl2: Disable unimplemented scatter/gather feature (Ben Hutchings)  [Orabug: 23703901]  {CVE-2016-2117} {CVE-2016-2117}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.7.1.el6uek]
changelog:
  - megaraid_sas : Update threshold based reply post host index register (Sumit.Saxena@avagotech.com)  [Orabug: 23562756]  
  - xen/events: Don't move disabled irqs (Ross Lagerwall)  [Orabug: 23055234]  
  - xen/events: Mask a moving irq (Boris Ostrovsky)  [Orabug: 23055234]  
  - xen/pciback: Save the number of MSI-X entries to be copied later. (Dongli Zhang)  [Orabug: 23202410]  
  - xen/pciback: Save xen_pci_op commands before processing it (Dongli Zhang)  [Orabug: 23202410]  
  - xen-blkback: read from indirect descriptors only once (Dongli Zhang)  [Orabug: 23202410]  
  - xen-blkback: only read request operation from shared ring once (Dongli Zhang)  [Orabug: 23202410]  
  - xen-netback: use RING_COPY_REQUEST() throughout (Dongli Zhang)  [Orabug: 23202410]  
  - xen-netback: don't use last request to determine minimum Tx credit (Dongli Zhang)  [Orabug: 23202410]  
  - xen: Add RING_COPY_REQUEST() (Dongli Zhang)  [Orabug: 23202410]  
  - IB/security: Restrict use of the write() interface (Jason Gunthorpe)  [Orabug: 23283925]  {CVE-2016-4565} 
  - KEYS: Fix ASN.1 indefinite length object parsing This fixes CVE-2016-0758. (David Howells)  [Orabug: 23279020]  {CVE-2016-0758} 
  - net: add validation for the socket syscall protocol argument (Hannes Frederic Sowa)  [Orabug: 23267997]  {CVE-2015-8543} {CVE-2015-8543} 
  - ipv6: addrconf: validate new MTU before applying it (Marcelo Leitner)  [Orabug: 23263252]  {CVE-2015-8215} 
  - unix: properly account for FDs passed over unix sockets (willy tarreau)  [Orabug: 23262276]  {CVE-2013-4312} {CVE-2013-4312}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.6.1.el6uek]
changelog:
  - skbuff: skb_segment: orphan frags before copying (Dongli Zhang)  [Orabug: 23018911]  
  - RDS/IB: VRPC DELAY / OSS RECONNECT CAUSES 5 MINUTE STALL ON PORT FAILURE (Venkat Venkatsubra)  [Orabug: 22888920]  
  - mlx4_core: Introduce restrictions for PD update (Ajaykumar Hotchandani)   
  - filename should be destroyed via final_putname() instead of __putname() (John Sobecki)  [Orabug: 22346320]  
  - RDS: Fix the atomicity for congestion map update (Wengang Wang)  [Orabug: 23141554]  
  - sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Karl Heiss)  [Orabug: 23222753]  {CVE-2015-8767}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.5.1.el6uek]
changelog:
  - x86_64: expand kernel stack to 16K (Minchan Kim)  [Orabug: 21140371]  
  - iommu/vt-d: add quirk for broken interrupt remapping on 55XX chipsets (Neil Horman)  [Orabug: 22534160]  
  - xen: remove unneeded variables and one constant (Daniel Kiper)  [Orabug: 22288700]  
  - Revert "x86/xen: delay construction of mfn_list_list" (Daniel Kiper)  [Orabug: 22288700]  
  - ocfs2/dlm: fix misuse of list_move_tail() in dlm_run_purge_list() (Tariq Saeed)  [Orabug: 22898384]  
  - ocfs2/dlm: do not purge lockres that is queued for assert master (Xue jiufei)  [Orabug: 22898384]  
  - pipe: Fix buffer offset after partially failed read (Ben Hutchings)  [Orabug: 22985903]  {CVE-2016-0774} {CVE-2015-1805} {CVE-2016-0774}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.4.1.el6uek]
changelog:
  - xen-blkback: replace work_pending with work_busy in purge_persistent_gnt() (Bob Liu)  [Orabug: 22463905]  
  - coredump: add new %PATCH variable in core_pattern (Herbert van den Bergh)  [Orabug: 22666980]  
  - veth: don’t modify ip_summed; doing so treats packets with bad checksums as good. (Vijay Pandurangan)  [Orabug: 22725572]  
  - libiscsi: Fix host busy blocking during connection teardown (John Soni Jose)  [Orabug: 22735756]  
  - RDS: Add interface for receive MSG latency trace (Santosh Shilimkar)  [Orabug: 22868366]  
  - RDS: Add support for per socket SO_TIMESTAMP for incoming messages (Santosh Shilimkar)  [Orabug: 22868366]  
  - x86/nmi/64: Use DF to avoid userspace RSP confusing nested NMI detection (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157} 
  - x86/nmi/64: Reorder nested NMI checks (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157} 
  - x86/nmi/64: Improve nested NMI comments (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157} 
  - x86/nmi/64: Switch stacks on userspace NMI entry (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157} 
  - x86/paravirt: Replace the paravirt nop with a bona fide empty function (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.3.1.el6uek]
changelog:
  - Revert "xen-netfront: set max_queue default to 8" (Brian Maly)  [Orabug: 22096098]  
  - net/sunrpc: xpt_auth_cache should be ignored when expired. (NeilBrown)  [Orabug: 21287382]  
  - Prevent syncing frozen file system -- part 2 (Tariq Saeed)  [Orabug: 21807344]  
  - Prevent syncing frozen file system (Tariq Saeed)  [Orabug: 21807344]  
  - KEYS: Fix UID check in keyctl_get_persistent() (David Howells)   
  - mlx4_vnic: Release lock when flush is not needed (Yuval Shaia)  [Orabug: 22173261]  
  - IPoIB: restore uniqueness check for child interfaces (Santosh Shilimkar)  [Orabug: 22257430]  
  - block: bump BLK_DEF_MAX_SECTORS to 2560 (Jeff Moyer)  [Orabug: 22488554]  
  - Revert "block: remove artifical max_hw_sectors cap" (Jeff Moyer)  [Orabug: 22488554]  
  - KEYS: Fix keyring ref leak in join_session_keyring() (Yevgeny Pats)  [Orabug: 22563965]  {CVE-2016-0728} 
  - KEYS: Don't permit request_key() to construct a new keyring (David Howells)  [Orabug: 22373442]  {CVE-2015-7872} 
  - dcache: Handle escaped paths in prepend_path (Eric W. Biederman)  [Orabug: 22373283]  
  - vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman)  [Orabug: 22249875]  
  - KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells)  [Orabug: 22373442]  {CVE-2015-7872} 
  - KEYS: Fix race between key destruction and finding a keyring by name (David Howells)  [Orabug: 22373442]  
  - KVM: svm: unconditionally intercept #DB (Paolo Bonzini)  [Orabug: 22333698]  {CVE-2015-8104} 
  - KVM: x86: work around infinite loop in microcode when #AC is delivered (Eric Northup)  [Orabug: 22333689]  {CVE-2015-5307} {CVE-2015-5307} 
  - KVM: x86: Defining missing x86 vectors (Nadav Amit)  [Orabug: 22333689]


author: Guru Anbalagane <guru.anbalagane@oracle.com> [3.8.13-118.2.1.el6uek]
changelog:
  - ipc/sem.c: fully initialize sem_array before making it visible (Manfred Spraul)  [Orabug: 22277382]  {CVE-2015-7613} 
  - ipc: fix msg newqueue add (Guru Anbalagane)  [Orabug: 22277382]  {CVE-2015-7613}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.1.1.el6uek]
changelog:
  - sctp: fix race on protocol/netns initialization (Marcelo Ricardo Leitner)  [Orabug: 22249981]  {CVE-2015-5283} 
  - Initialize msg/shm IPC objects before doing ipc_addid() (Linus Torvalds)  [Orabug: 22250045]  {CVE-2015-7613} 
  - ixgbe: reset copper phy power mode (Ethan Zhao)  [Orabug: 22271769]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.el6uek]
changelog:
  - Update ql2400/ql2500 firmware version to 8.02.00 (Dan Duval)  [Orabug: 22159505]  
  - update qla2400/ql2500 firmware version to 8.02.00 (Dan Duval)  [Orabug: 22159505]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-117.el6uek]
changelog:
  - virtio-net: drop NETIF_F_FRAGLIST (Jason Wang)  [Orabug: 22145600]  {CVE-2015-5156} 
  - team: check return value of team_get_port_by_index_rcu() for NULL (Jiri Pirko)  [Orabug: 21944235]  
  - team: check return value of team_get_port_by_index_rcu() for NULL (Jiri Pirko)  [Orabug: 21944235]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-116.el6uek]
changelog:
  - team: check return value of team_get_port_by_index_rcu() for NULL (Jiri Pirko)  [Orabug: 21944235]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-115.el6uek]
changelog:
  - Disable VLAN 0 tagging for none VLAN traffic (Joe Jin)  [Orabug: 20832922]  
  - x86/efi: Make efi virtual runtime map passing more robust (Borislav Petkov)  [Orabug: 22020990]  
  - IB/rds_rdma: unloading of ofed stack causes page fault panic (Rama Nichanamatlu)  [Orabug: 22039748]  
  - xen-blkfront: check for null drvdata in blkback_changed (XenbusStateClosing) (Cathy Avery)  [Orabug: 21924428]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-114.el6uek]
changelog:
  - rds: revert commit 4348013 (Rama Nichanamatlu)  [Orabug: 22039425]  
  - qlcnic: Fix mailbox completion handling in spurious interrupt (Rajesh Borundia)   
  - xen-netfront: set max_queue default to 8 (Joe Jin)  [Orabug: 21981690]  
  - xen-netfront: update num_queues to real created (Joe Jin)  [Orabug: 21981690]  
  - lpfc: Update version to 11.0.0.1 for patch set (James Smart)  [Orabug: 21860804]  
  - lpfc: Fix default RA_TOV and ED_TOV in the FC/FCoE driver  for all topologies (James Smart)  [Orabug: 21860804]  
  - lpfc: The linux driver does not reinitiate discovery after a failed FLOGI (James Smart)  [Orabug: 21860804]  
  - lpfc: Fix for discovery failure in PT2PT when FLOGI's ELS  ACC response gets aborted (James Smart)  [Orabug: 21860804]  
  - lpfc: Add support for Lancer G6 and 32G FC links (James Smart)  [Orabug: 21860804]  
  - fix: lpfc_send_rscn_event sends bigger buffer size (James Smart)  [Orabug: 21860804]  
  - lpfc: Fix possible use-after-free and double free (James Smart)  [Orabug: 21860804]  
  - lpfc: remove set but not used variables (James Smart)  [Orabug: 21860804]  
  - lpfc: Make the function lpfc_sli4_mbox_completions_pending static (James Smart)  [Orabug: 21860804]  
  - Fix kmalloc overflow in LPFC driver at large core count (James Smart)  [Orabug: 21860804]  
  - lpfc: Destroy lpfc_hba_index IDR on module exit (James Smart)  [Orabug: 21860804]  
  - lpfc: in sli3 use configured sg_seg_cnt for sg_tablesize (James Smart)  [Orabug: 21860804]  
  - lpfc: Remove unnessary cast (James Smart)  [Orabug: 21860804]  
  - lpfc: fix model description (James Smart)  [Orabug: 21860804]  
  - lpfc: Fix to drop PLOGIs from fabric node till LOGO proce ssing completes (James Smart)  [Orabug: 21860804]  
  - lpfc: Fix scsi task management error message. (James Smart)  [Orabug: 21860804]  
  - lpfc: Fix cq_id masking problem. (James Smart)  [Orabug: 21860804]  
  - lpfc: Fix scsi prep dma buf error. (James Smart)  [Orabug: 21860804]  
  - lpfc: Add support for using block multi-queue (James Smart)  [Orabug: 21860804]  
  - lpfc: Devices are not discovered during takeaway/giveback  testing. (James Smart)  [Orabug: 21860804]  
  - lpfc: Fix vport deletion failure. (James Smart)  [Orabug: 21860804]  
  - lpfc: Check for active portpeerbeacon. (James Smart)  [Orabug: 21860804]  
  - RDS: fix race condition when sending a message on unbound socket. (Quentin Casasnovas)  [Orabug: 21882586]  {CVE-2015-6937} 
  - RDS: make send_batch_count tunable effective (Santosh Shilimkar)  [Orabug: 21882586]  
  - RDS: make use of kfree_rcu() and avoid the call_rcu() chain (Santosh Shilimkar)  [Orabug: 21882586]  
  - RDS: verify the underlying transport exists before creating a connection (Sasha Levin)  [Orabug: 21882586]  
  - RDS: Disable broken APM feature code (Santosh Shilimkar)  [Orabug: 22045256]  
  - RDS: return EMSGSIZE for oversize requests before processing/queueing (Mukesh Kacker)  [Orabug: 21882586]  
  - RDS: Make active bonding parameters names consistent (Santosh Shilimkar)  [Orabug: 21882586]  
  - IB/mlx4: Use vmalloc for WR buffers when needed (Wengang Wang)  [Orabug: 21835374]  
  - mm: move kvfree to mm/util (Wengang Wang)  [Orabug: 21835374]  
  - x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when sanitizing map (Malcolm Crossley)   
  - netdev: fix NETIF_F_GSO_UDP_TUNNEL_BIT enum shift in i40e driver import (Todd Vierling)  [Orabug: 21958024]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-113.el6uek]
changelog:
  - mlx4_core: Release counters while releasing slave resources (Wengang Wang)  [Orabug: 21116780]  
  - IB/ipoib: Disable TSO in connected mode (Yuval Shaia)  [Orabug: 21684386]  
  - Revert "IB/ipoib: Disable TSO in connected mode" (Yuval Shaia)  [Orabug: 21968983]  
  - Revert "IB/ipoib: Disable TSO in connected mode" (Yuval Shaia)  [Orabug: 21968983]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-112.el6uek]
changelog:
  - i40e/i40evf: Bump i40e to 1.3.21 and i40evf to 1.3.13 (Catherine Sullivan)  [Orabug: 21539654]  
  - i40e/i40evf: add get AQ result command to nvmupdate utility (Shannon Nelson)  [Orabug: 21539654]  
  - i40e/i40evf: add exec_aq command to nvmupdate utility (Shannon Nelson)  [Orabug: 21539654]  
  - i40e/i40evf: add wait states to NVM state machine (Shannon Nelson)  [Orabug: 21539654]  
  - i40e/i40evf: add GetStatus command for nvmupdate (Shannon Nelson)  [Orabug: 21539654]  
  - i40e/i40evf: add handling of writeback descriptor (Shannon Nelson)  [Orabug: 21539654]  
  - i40e/i40evf: save aq writeback for future inspection (Shannon Nelson)  [Orabug: 21539654]  
  - i40e: rename variable to prevent clash of understanding (Shannon Nelson)  [Orabug: 21539654]  
  - i40e: Set defport behavior for the Main VSI when in promiscuous mode (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Bump i40e to 1.3.9 and i40evf to 1.3.5 (Catherine Sullivan)  [Orabug: 21539654]  
  - i40e/i40evf: Cache the CEE TLV status returned from firmware (Neerav Parikh)  [Orabug: 21539654]  
  - i40e/i40evf: add VIRTCHNL_VF_OFFLOAD flag (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e: Remove redundant and unneeded messages (Greg Rose)  [Orabug: 21539654]  
  - i40evf: Remove PF specific register definitions from the VF (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40evf: Use the correct defines to match the VF registers (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e: Fix comment for ethtool diagnostic link test (Greg Rose)  [Orabug: 21539654]  
  - i40e/i40evf: Add capability to gather VEB per TC stats (Neerav Parikh)  [Orabug: 21539654]  
  - i40e: Fix ethtool offline diagnostic with netqueues (Greg Rose)  [Orabug: 21539654]  
  - i40e: Fix legacy interrupt mode in the driver (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e: Move function calls to i40e_shutdown instead of i40e_suspend (Catherine Sullivan)  [Orabug: 21539654]  
  - i40e: add RX to port CRC errors label (Shannon Nelson)  [Orabug: 21539654]  
  - i40e: don't degrade __le16 (Mitch Williams)  [Orabug: 21539654]  
  - i40e: Add AQ commands for NVM Update for X722 (Shannon Nelson)  [Orabug: 21539654]  
  - i40e/i40evf: Add ATR HW eviction support for X722 (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e: Add IWARP support for X722 (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Add TX/RX outer UDP checksum support for X722 (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Add support for writeback on ITR feature for X722 (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Update register.h file for X722 (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Update FW API with X722 support (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Add flags for X722 capabilities (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Add device ids for X722 (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e: use BIT and BIT_ULL macros (Jesse Brandeburg)  [Orabug: 21539654]  
  - i40e: clean up error status messages (Shannon Nelson)  [Orabug: 21539654]  
  - i40e: clean up error status messages (Shannon Nelson)  [Orabug: 21539654]  
  - i40e: provide correct API version to older VF drivers (Mitch Williams)  [Orabug: 21539654]  
  - i40evf: support virtual channel API version 1.1 (Mitch Williams)  [Orabug: 21539654]  
  - i40evf: handle big resets (Mitch Williams)  [Orabug: 21539654]  
  - i40e: support virtual channel API 1.1 (Mitch Williams)  [Orabug: 21539654]  
  - i40e/i40evf: add macros for virtual channel API version and device capability (Mitch Williams)  [Orabug: 21539654]  
  - i40e: add VF capabilities to virtual channel interface (Mitch Williams)  [Orabug: 21539654]  
  - i40e: clean up unneeded gotos (Shannon Nelson)  [Orabug: 21539654]  
  - i40e/i40evf: Fix and refactor dynamic ITR code (Carolyn Wyborny)  [Orabug: 21539654]  
  - i40e: only report generic filters in get_ts_info (Jacob Keller)  [Orabug: 21539654]  
  - i40e/i40evf: Bump version to 1.3.6 for i40e and 1.3.2 for i40evf (Catherine Sullivan)  [Orabug: 21539654]  
  - i40e: Refine an error message to avoid confusion (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Add support for pre-allocated pages for PD (Faisal Latif)  [Orabug: 21539654]  
  - i40evf: add MAC address filter in open, not init (Mitch Williams)  [Orabug: 21539654]  
  - i40evf: don't delete all the filters (Mitch Williams)  [Orabug: 21539654]  
  - i40e: un-disable VF after reset (Mitch Williams)  [Orabug: 21539654]  
  - i40e: do a proper reset when disabling a VF (Mitch Williams)  [Orabug: 21539654]  
  - i40e: correctly program filters for VFs (Mitch Williams)  [Orabug: 21539654]  
  - i40e/i40evf: Update the admin queue command header (Greg Rose)  [Orabug: 21539654]  
  - i40e: ignore duplicate port VLAN requests (Mitch Williams)  [Orabug: 21539654]  
  - i40evf: Allow for an abundance of vectors (Mitch Williams)  [Orabug: 21539654]  
  - i40e/i40evf: Update Flex-10 related device/function capabilities (Pawel Orlowski)  [Orabug: 21539654]  
  - i40e/i40evf: Add stats to track FD ATR and SB dynamic enable state (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40evf: don't configure unused RSS queues (Mitch Williams)  [Orabug: 21539654]  
  - i40evf: fix panic during MTU change (Mitch Williams)  [Orabug: 21539654]  
  - i40e: Bump version to 1.3.4 (Catherine Sullivan)  [Orabug: 21539654]  
  - i40e/i40evf: remove time_stamp member (Jesse Brandeburg)  [Orabug: 21539654]  
  - i40e/i40evf: force inline transmit functions (Jesse Brandeburg)  [Orabug: 21539654]  
  - i40e: Move the FD ATR/SB messages to a higher debug level (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e: fix unrecognized FCOE EOF case (Vasu Dev)  [Orabug: 21539654]  
  - i40e: Remove unnecessary pf members (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Add stats to count Tunnel ATR hits (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Add ATR support for tunneled TCP/IPv4/IPv6 packets. (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e: Disable offline diagnostics if VFs are enabled (Greg Rose)  [Orabug: 21539654]  
  - i40e: Collect PFC XOFF RX stats even in single TC case (Neerav Parikh)  [Orabug: 21539654]  
  - i40e/i40evf: Fix mixed size frags and linearization (Anjali Singhai Jain)  [Orabug: 21539654]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-111.el6uek]
changelog:
  - qla2xxx: Update driver version to 8.07.00.26.39.0-k. (Sawan Chandak)  [Orabug: 21946579]  
  - qla2xxx: Add pci device id 0x2261. (Sawan Chandak)  [Orabug: 21946579]  
  - qla2xxx: Fix missing device login retries. (Arun Easi)  [Orabug: 21946579]  
  - qla2xxx: do not clear slot in outstanding cmd array (Himanshu Madhani)  [Orabug: 21946579]  
  - qla2xxx: Remove decrement of sp reference count in abort handler. (Chad Dupuis)  [Orabug: 21946579]  
  - qla2xxx: Add support to show MPI and PEP FW version for ISP27xx. (Sawan Chandak)  [Orabug: 21946579]  
  - qla2xxx: Do not reset ISP for error entry with an out of range handle. (Chad Dupuis)  [Orabug: 21946579]  
  - qla2xxx: Do not reset adapter if SRB handle is in range. (Chad Dupuis)  [Orabug: 21946579]  
  - qla2xxx: Do not crash system for sp ref count zero (Hiral Patel)  [Orabug: 21946579]  
  - qla2xxx: Pause risc before manipulating risc semaphore. (Joe Carnuccio)  [Orabug: 21946579]  
  - qla2xxx: Use ssdid to gate semaphore manipulation. (Joe Carnuccio)  [Orabug: 21946579]  
  - qla2xxx: Handle AEN8014 incoming port logout. (Joe Carnuccio)  [Orabug: 21946579]  
  - qla2xxx: Add serdes register read/write support for ISP25xx. (Joe Carnuccio)  [Orabug: 21946579]  
  - qla2xxx: Remove dead code (Bart Van Assche)  [Orabug: 21946579]  
  - qla2xxx: Remove a superfluous test (Bart Van Assche)  [Orabug: 21946579]  
  - qla2xxx: Avoid that sparse complains about duplicate [noderef] attributes (Bart Van Assche)  [Orabug: 21946579]  
  - qla2xxx: Remove __constant_ prefix (Bart Van Assche)  [Orabug: 21946579]  
  - qla2xxx: Replace two macros with an inline function (Bart Van Assche)  [Orabug: 21946579]  
  - qla2xxx: Remove set-but-not-used variables (Bart Van Assche)  [Orabug: 21946579]  
  - qla2xxx: Declare local functions static (Bart Van Assche)  [Orabug: 21946579]  
  - bnx2i: rebase 2.11.2.0 (Brian Maly)  [Orabug: 21955132]  
  - bnx2fc: update to 2.9.6 (Brian Maly)  [Orabug: 21955132]  
  - bnx2x: update to 1.713.01 (Brian Maly)  [Orabug: 21955132]  
  - bnx2: update to 2.2.5p (Brian Maly)  [Orabug: 21955132]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-110.el6uek]
changelog:
  - xen-netfront: respect user provided max_queues (Wei Liu)  [Orabug: 21976319]  
  - net/xen-netfront: only napi_synchronize() if running (Chas Williams)  [Orabug: 21976319]  
  - net/xen-netfront: only clean up queues if present (Chas Williams)  [Orabug: 21976319]  
  - xen-netfront: Remove the meaningless code (Li, Liang Z)  [Orabug: 21976319]  
  - net/xen-netfront: Correct printf format in xennet_get_responses (Julien Grall)  [Orabug: 21976319]  
  - xen-netfront: properly destroy queues when removing device (David Vrabel)  [Orabug: 21976319]  
  - xen-netfront: Use setup_timer (Vaishali Thakkar)  [Orabug: 21976319]  
  - xen-netfront: transmit fully GSO-sized packets (Jonathan Davies)  [Orabug: 21976319]  
  - xen-netfront: Use static attribute groups for sysfs entries (Takashi Iwai)  [Orabug: 21976319]  
  - xen-netfront: use different locks for Rx and Tx stats (David Vrabel)  [Orabug: 21976319]  
  - xen-netfront: refactor making Tx requests (David Vrabel)  [Orabug: 21976319]  
  - xen-netfront: refactor skb slot counting (David Vrabel)  [Orabug: 21976319]  
  - drivers: net: xen-netfront: remove residual dead code (Vincenzo Maffione)  [Orabug: 21976319]  
  - xen-netfront: use napi_complete() correctly to prevent Rx stalling (David Vrabel)  [Orabug: 21976319]  
  - xen-netfront: always keep the Rx ring full of requests (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: respect user provided max_queues (Wei Liu)  [Orabug: 21976319]  
  - xen-netback: require fewer guest Rx slots when not using GSO (David Vrabel)  [Orabug: 21976319]  
  - xen/netback: Wake dealloc thread after completing zerocopy work (Ross Lagerwall)  [Orabug: 21976319]  
  - xen-netback: Allocate fraglist early to avoid complex rollback (Ross Lagerwall)  [Orabug: 21976319]  
  - net/xen-netback: off by one in BUG_ON() condition (Dan Carpenter)  [Orabug: 21976319]  
  - xen-netback: remove duplicated function definition (Li, Liang Z)  [Orabug: 21976319]  
  - xen-netback: fix a BUG() during initialization (Palik, Imre)  [Orabug: 21976319]  
  - net/xen-netback: Don't mix hexa and decimal with 0x in the printf format (Julien Grall)  [Orabug: 21976319]  
  - net/xen-netback: Remove unused code in xenvif_rx_action (Julien Grall)  [Orabug: 21976319]  
  - xen: netback: read hotplug script once at start of day. (Ian Campbell)  [Orabug: 21976319]  
  - xen: netback: fix printf format string warning (Ian Campbell)  [Orabug: 21976319]  
  - xen/netback: Properly initialize credit_bytes (Ross Lagerwall)  [Orabug: 21976319]  
  - net:xen-netback - Change 1 to true for bool type variable. (Shailendra Verma)  [Orabug: 21976319]  
  - xen-netback: notify immediately after pushing Tx response. (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: making the bandwidth limiter runtime settable (Palik, Imre)  [Orabug: 21976319]  
  - xen-netback: refactor xenvif_handle_frag_list() (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: return correct ethtool stats (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: release pending index before pushing Tx responses (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: fix sparse warning (Lad, Prabhakar)  [Orabug: 21976319]  
  - xen-netback: always fully coalesce guest Rx packets (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: stop the guest rx thread after a fatal error (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: fixing the propagation of the transmit shaper timeout (Palik, Imre)  [Orabug: 21976319]  
  - xen-netback: support frontends without feature-rx-notify again (David Vrabel)  [Orabug: 21976319]  
  - netback: don't store invalid vif pointer (Jan Beulich)  [Orabug: 21976319]  
  - xen-netback: do not report success if backend_create_xenvif() fails (Alexey Khoroshilov)  [Orabug: 21976319]  
  - xen-netback: remove unconditional __pskb_pull_tail() in guest Tx path (Malcolm Crossley)  [Orabug: 21976319]  
  - xen-netback: reintroduce guest Rx stall detection (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: fix unlimited guest Rx internal queue and carrier flapping (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: make feature-rx-notify mandatory (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: Remove __GFP_COLD (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Disable NAPI after disabling interrupts (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: move netif_napi_add before binding interrupt (Wei Liu)  [Orabug: 21976319]  
  - xen-netback: remove loop waiting function (Wei Liu)  [Orabug: 21976319]  
  - xen-netback: don't stop dealloc kthread too early (Wei Liu)  [Orabug: 21976319]  
  - xen-netback: move NAPI add/remove calls (Wei Liu)  [Orabug: 21976319]  
  - xen-netback: fix debugfs entry creation (Wei Liu)  [Orabug: 21976319]  
  - xen-netback: fix debugfs write length check (Wei Liu)  [Orabug: 21976319]  
  - xen-netback: Don't deschedule NAPI when carrier off (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Fix vif->disable handling (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Turn off the carrier if the guest is not able to receive (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Using a new state bit instead of carrier (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Fix pointer incrementation to avoid incorrect logging (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Fix releasing header slot on error path (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Fix releasing frag_list skbs in error path (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Fix handling frag_list on grant op error path (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Adding debugfs "io_ring_qX" files (Zoltan Kiss)  [Orabug: 21976319]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-109.el6uek]
changelog:
  - mm: check if section present during memory block registering (Yinghai Lu)  [Orabug: 20382859]  
  - be2net: post buffers before destroying RXQs in Lancer (Kalesh AP)   
  - be2net: enable IFACE filters only after creating RXQs (Kalesh AP)   
  - be2net: bump up the driver version to 10.6.0.3 (Sathya Perla)   
  - be2net: make SET_LOOPBACK_MODE cmd asynchrounous (Suresh Reddy)   
  - be2net: return error status from be_mcc_notify() (Suresh Reddy)   
  - ipoib/ib: fix merge of Orabug 19468224 fix from uek2 into uek3 resulting in ipoib not functioning. (Rama Nichanamatlu)  [Orabug: 21897912]  
  - mlx4: indicate memory resource exhaustion (Ajaykumar Hotchandani)  [Orabug: 21549766]  
  - be2iscsi: Bump the driver version (Jitendra Bhivare)  [Orabug: 21903294]  
  - be2iscsi: Fix updating the next pointer during WRB posting (Jitendra Bhivare)  [Orabug: 21903294]  
  - be2iscsi: add obsolete warning messages (Jitendra Bhivare)  [Orabug: 21903294]  
  - be2iscsi: ownership change (Jitendra Bhivare)  [Orabug: 21903294]  
  - be2iscsi: update MAINTAINERS list (Jitendra Bhivare)  [Orabug: 21903294]  
  - be2iscsi : Logout of FW Boot Session (Jitendra Bhivare)  [Orabug: 21903294]  
  - be2iscsi : Fix memory check before unmapping. (Jitendra Bhivare)  [Orabug: 21903294]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-108.el6uek]
changelog:
  - prevent spurious PMU NMIs on Haswell systems (Dan Duval)  [Orabug: 21616327]  
  - sched/x86: Fix up typo in topology detection (Dave Hansen)  [Orabug: 21662502]  
  - mlx4_ib: Memory leak on Dom0 with SRIOV. (Venkat Venkatsubra)  [Orabug: 21675212]  
  - mlx4_core: On CQ access violation print syndrome and vendor_error_syndrome (Venkat Venkatsubra)  [Orabug: 21675224]  
  - IB/ipoib: Disable TSO in connected mode (Yuval Shaia)  [Orabug: 21684386]  
  - xen/blkfront: remove redundant flush_op (Vitaly Kuznetsov)  [Orabug: 21833822]  
  - xen/blkfront: improve protection against issuing unsupported REQ_FUA (Vitaly Kuznetsov)  [Orabug: 21833822]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-107.el6uek]
changelog:
  - sctp: fix ASCONF list handling (Marcelo Ricardo Leitner)  [Orabug: 21842665]  {CVE-2015-3212} 
  - KEYS: ensure we free the assoc array edit if edit is valid (Colin Ian King)  [Orabug: 21842653]  {CVE-2015-1333}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-106.el6uek]
changelog:
  - NVMe: Setup max hardware sector count to 512KB (Santosh Shilimkar)  [Orabug: 21818575]  
  - Btrfs: optimize the error handling of use_block_rsv() (Ashish Samant)  [Orabug: 21539248]  
  - xen-blkfront: introduce blkfront_gather_backend_features() (Bob Liu)  [Orabug: 21825900]  
  - iw/rds: fixed big endianness conversion issue for dp->dp_ack_seq (Qing Huang)  [Orabug: 21825863]  
  - bonding: change error message to debug message in bond_release (Wengang Wang)  [Orabug: 21825838]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-105.el6uek]
changelog:
  - rds: make sure base connection is up on both sides (Ajaykumar Hotchandani)  [Orabug: 21439115]  
  - IB/ipoib: Disable TSO in connected mode (Yuval Shaia)  [Orabug: 21439115]  
  - ib/rds: fixed big endianness conversion issue for dp->dp_ack_seq (Qing Huang)  [Orabug: 21439115]  
  - ib/rds: fixed crashes caused by incoming requests with wrong destination (Qing Huang)  [Orabug: 21439115]  
  - RDS: Handle RDMA_CM_EVENT_TIMEWAIT_EXIT (Venkat Venkatsubra)  [Orabug: 21439115]  
  - RDS/IP: RDS takes 10 seconds to plumb the second IP back (Mukesh Kacker)  [Orabug: 21439115]  
  - RDS/IB: Tune failover-on-reboot scheduling (Mukesh Kacker)  [Orabug: 21439115]  
  - RDS: mark netdev UP for intfs added post module load (Mukesh Kacker)  [Orabug: 21439115]  
  - rds: fix list corruption and tx hang when netfilter is used (shamir rabinovitch)  [Orabug: 21439115]  
  - RDS: move more queing for loopback connections to separate queue (Mukesh Kacker)  [Orabug: 21439115]  
  - IPoIB/pkey: delete_child should only delete create_child devices (Mukesh Kacker)  [Orabug: 21439115]  
  - IB/ipoib: order:1 failure in ipoib_cm_alloc_rx_skb causes softlockup (Rama Nichanamatlu)  [Orabug: 21439115]  
  - rds: fix NULL pointer dereference panic during rds module unload (Rama Nichanamatlu)  [Orabug: 21439115]  
  - RDS:active bonding: disable failover across HCAs(failover groups) (Mukesh Kacker)  [Orabug: 21439115]  
  - RDS/IB: active bonding - failover down interfaces on reboot. (Guangyu Sun)  [Orabug: 21439115]  
  - RFE: remove pkey coupling to device name (Mukesh Kacker)  [Orabug: 21439115]  
  - RDS/IB: Remove dangling rcu_read_unlock() and other cleanups (Mukesh Kacker)  [Orabug: 21439115]  
  - rds: new extension header: rdma bytes (Shamir Rabinovitch)  [Orabug: 21439115]  
  - RDS: Ensure non-zero SL uses correct path before lane 0 connection is dropped (Ajaykumar Hotchandani)  [Orabug: 21439115]  
  - iser: handle RDMA_CM_EVENT_TIMEWAIT_EXIT in iser code (Shamir Rabinovitch)  [Orabug: 21439115]  
  - RDS: active bonding - failover/failback only to matching pkey (Mukesh Kacker)  [Orabug: 21439115]  
  - RDS: active bonding - ports may not failback if all ports go down (Mukesh Kacker)  [Orabug: 21439115]  
  - RDS: Use rds_local_wq for loopback connections in rds_conn_connect_if_down() (Chien-Hua Yen)  [Orabug: 21439115]  
  - RDS: add workqueue for local loopback connections (Chien-Hua Yen)  [Orabug: 21439115]  
  - APM/cma: Kernel panic during IB port failover test (Chien-Hua Yen)  [Orabug: 21439115]  
  - RDS: SA query optimization (Bang Nguyen)  [Orabug: 21439115]  
  - RDS: Remove cond_resched() in RX tasklet (Bang Nguyen)  [Orabug: 21439115]  
  - RDS: Replace queue_work() by cond_resched() in the tasklet to breakup RX stream (Bang Nguyen)  [Orabug: 21439115]  
  - RDS: looping to reap cq recv queue in rds_conn_shutdown (Chien-Hua Yen)  [Orabug: 21439115]  
  - rds: Fix regression in dynamic active bonding configuration (Bang Nguyen)  [Orabug: 21439115]  
  - RDS: Idle QoS connections during remote peer reboot causing application brownout (Chien-Hua Yen)  [Orabug: 21439115]  
  - rds: dynamic active bonding configuration (Bang Nguyen)  [Orabug: 21439115]  
  - RDS: active bonding needs to set brcast and mask for its primary interface (Chien-Hua Yen)  [Orabug: 21439115]  
  - (REAPPLY!) rds: limit the size allocated by rds_message_alloc() (Cong Wang)  [Orabug: 21439115]  
  - xen/events: Set irq_info->evtchn before binding the channel to CPU in __startup_pirq() (Boris Ostrovsky)  [Orabug: 20891536]  
  - xen/console: Update console event channel on resume (Boris Ostrovsky)  [Orabug: 20891536]  
  - xen/xenbus: Update xenbus event channel on resume (Boris Ostrovsky)  [Orabug: 20891536]  
  - xen/events: Clear cpu_evtchn_mask before resuming (Boris Ostrovsky)  [Orabug: 20891536]  
  - x86/efi: Quirk out SGI UV (Borislav Petkov)  [Orabug: 21771830]  
  - oracleasm: Classify device connectivity issues as global errors (Martin K. Petersen)  [Orabug: 21760144]  
  - IB/ipoib: Potential false positive with peer support for ib-crc-as-csum (Yuval Shaia)  [Orabug: 21684866]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-104.el6uek]
changelog:
  - idr: fix unexpected ID-removal when idr_remove(unallocated_id) (Lai Jiangshan)  [Orabug: 21684956]  
  - idr: remove WARN_ON_ONCE() on negative IDs (Tejun Heo)  [Orabug: 21684956]  
  - ipc,shm: fix shm_file deletion races (Greg Thelen)  [Orabug: 21684956]  
  - rds_rdma: setup connection before rds_cmsg_send (Wengang Wang)  [Orabug: 21683962]  
  - mm/hugetlb: Add locking to region_{add,change,truncate,count} when using shared files with hugepages (Mike Kravetz)  [Orabug: 21683388]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-103.el6uek]
changelog:
  - xen-netback: unref frags when handling a from-guest skb with a frag list (David Vrabel)  [Orabug: 21571556]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-102.el6uek]
changelog:
  - megaraid_sas : Firmware crash dump feature support (Sumit.Saxena@avagotech.com)  [Orabug: 21660728]  
  - NVMe: Use pci_stop_and_remove_bus_device_locked() (Keith Busch)  [Orabug: 21576939]  
  - xen/pciback: Don't print scary messages when unsupported by hypervisor. (Konrad Rzeszutek Wilk)  [Orabug: 21660162]  
  - config: ol7: enable teaming driver build (Guangyu Sun)  [Orabug: 21517939]  
  - config: enable CONFIG_CHELSIO_T4VF option (Guangyu Sun)  [Orabug: 21500967]  
  - ext4: fix warning in ext4_da_update_reserve_space() (Jan Kara)  [Orabug: 21621299]  
  - ext4: remove unused variable in ext4_free_blocks() (Lukas Czerner)  [Orabug: 21621299]  
  - quota: provide interface for readding allocated space into reserved space (Jan Kara)  [Orabug: 21621299]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-101.el6uek]
changelog:
  - efi: fix 32bit kernel boot failed problem using efi (Fupan Li)  [Orabug: 21635677]  
  - iscsi-target: Fix use-after-free during TPG session shutdown (Nicholas Bellinger)  [Orabug: 21635676]  
  - blkcg: fix gendisk reference leak in blkg_conf_prep() (Tejun Heo)  [Orabug: 21635675]  
  - md/raid1: fix test for 'was read error from last working device'. (NeilBrown)  [Orabug: 21635674]  
  - st: null pointer dereference panic caused by use after kref_put by st_open (Seymour, Shane M)  [Orabug: 21635671]  
  - genirq: Prevent resend to interrupts marked IRQ_NESTED_THREAD (Thomas Gleixner)  [Orabug: 21635670]  
  - freeing unlinked file indefinitely delayed (Al Viro)  [Orabug: 21635668]  
  - mm: avoid setting up anonymous pages into file mapping (Kirill A. Shutemov)  [Orabug: 21635667]  
  - Fix firmware loader uevent buffer NULL pointer dereference (Linus Torvalds)  [Orabug: 21635666]  
  - rbd: use GFP_NOIO in rbd_obj_request_create() (Ilya Dryomov)  [Orabug: 21635665]  
  - SUNRPC: Fix a memory leak in the backchannel code (Trond Myklebust)  [Orabug: 21635664]  
  - fixing infinite OPEN loop in 4.0 stateid recovery (Olga Kornievskaia)  [Orabug: 21635662]  
  - __bitmap_parselist: fix bug in empty string handling (Chris Metcalf)  [Orabug: 21635660]  
  - Btrfs: use kmem_cache_free when freeing entry in inode cache (Filipe Manana)  [Orabug: 21635659]  
  - dmaengine: mv_xor: bug fix for racing condition in descriptors cleanup (Lior Amsalem)  [Orabug: 21635658]  
  - tracing/filter: Do not allow infix to exceed end of string (Steven Rostedt (Red Hat))  [Orabug: 21635657]  
  - tracing/filter: Do not WARN on operand count going below zero (Steven Rostedt (Red Hat))  [Orabug: 21635656]  
  - dm btree: silence lockdep lock inversion in dm_btree_del() (Joe Thornber)  [Orabug: 21635655]  
  - dm btree remove: fix bug in redistribute3 (Dennis Yang)  [Orabug: 21635654]  
  - usb: xhci: Bugfix for NULL pointer deference in xhci_endpoint_init() function (AMAN DEEP)  [Orabug: 21635653]  
  - jbd2: fix ocfs2 corrupt when updating journal superblock fails (Joseph Qi)  [Orabug: 21635652]  
  - jbd2: use GFP_NOFS in jbd2_cleanup_journal_tail() (Dmitry Monakhov)  [Orabug: 21635651]  
  - ext4: fix reservation release on invalidatepage for delalloc fs (Lukas Czerner)  [Orabug: 21635650]  
  - ext4: don't retry file block mapping on bigalloc fs with non-extent file (Darrick J. Wong)  [Orabug: 21635648]  
  - ext4: call sync_blockdev() before invalidate_bdev() in put_super() (Theodore Ts'o)  [Orabug: 21635647]  
  - ext4: fix race between truncate and __ext4_journalled_writepage() (Theodore Ts'o)  [Orabug: 21635646]  
  - sctp: Fix race between OOTB responce and route removal (Alexander Sverdlin)  [Orabug: 21635645]  
  - packet: read num_members once in packet_rcv_fanout() (Eric Dumazet)  [Orabug: 21635644]  
  - bridge: fix br_stp_set_bridge_priority race conditions (Nikolay Aleksandrov)  [Orabug: 21635640]  
  - pipe: iovec: Fix memory corruption when retrying atomic copy as non-atomic (Ben Hutchings)  [Orabug: 21635639]  {CVE-2015-1805} 
  - tracing: Have filter check for balanced ops (Steven Rostedt)  [Orabug: 21635638]  
  - net_sched: invoke ->attach() after setting dev->qdisc (WANG Cong)  [Orabug: 21635636]  
  - ipv4: Avoid crashing in ip_error (Eric W. Biederman)  [Orabug: 21635634]  
  - fs/binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Andrew Morton)  [Orabug: 21635632]  
  - vfs: read file_handle only once in handle_to_path (Sasha Levin)  [Orabug: 21635631]  
  - ACPI / init: Fix the ordering of acpi_reserve_resources() (Rafael J. Wysocki)  [Orabug: 21635630]  
  - rtlwifi: rtl8192cu: Fix kernel deadlock (Larry Finger)  [Orabug: 21635629]  
  - md/raid5: don't record new size if resize_stripes fails. (NeilBrown)  [Orabug: 21635628]  
  - libata: Ignore spurious PHY event on LPM policy change (Gabriele Mazzotta)  [Orabug: 21635626]  
  - libata: Add helper to determine when PHY events should be ignored (Gabriele Mazzotta)  [Orabug: 21635624]  
  - ext4: check for zero length extent explicitly (Eryu Guan)  [Orabug: 21635623]  
  - target/pscsi: Don't leak scsi_host if hba is VIRTUAL_HOST (Andy Grover)  [Orabug: 21635622]  
  - lib: Fix strnlen_user() to not touch memory after specified maximum (Jan Kara)  [Orabug: 21635621]  
  - libceph: request a new osdmap if lingering request maps to no osd (Ilya Dryomov)  [Orabug: 21635620]  
  - gpio: sysfs: fix memory leaks and device hotplug (Johan Hovold)  [Orabug: 21635619]  
  - gpio: unregister gpiochip device before removing it (Johan Hovold)  [Orabug: 21635616]  
  - mm/memory-failure: call shake_page() when error hits thp tail page (Naoya Horiguchi)  [Orabug: 21635614]  
  - ocfs2: dlm: fix race between purge and get lock resource (Junxiao Bi)  [Orabug: 21635612]  
  - 3w-sas: fix command completion race (Christoph Hellwig)  [Orabug: 21635611]  
  - 3w-9xxx: fix command completion race (Christoph Hellwig)  [Orabug: 21635610]  
  - 3w-xxxx: fix command completion race (Christoph Hellwig)  [Orabug: 21635608]  
  - rbd: end I/O the entire obj_request on error (Ilya Dryomov)  [Orabug: 21635607]  
  - e1000: add dummy allocator to fix race condition between mtu change and netpoll (Sabrina Dubroca)  [Orabug: 21635606]  
  - ksoftirqd: Enable IRQs and call cond_resched() before poking RCU (Calvin Owens)  [Orabug: 21635605]  
  - RCU pathwalk breakage when running into a symlink overmounting something (Al Viro)  [Orabug: 21635604]  
  - ext4: make fsync to sync parent dir in no-journal for real this time (Lukas Czerner)  [Orabug: 21635602]  
  - ptrace: fix race between ptrace_resume() and wait_task_stopped() (Oleg Nesterov)  [Orabug: 21635601]  
  - fs/binfmt_elf.c: fix bug in loading of PIE binaries (Michael Davidson)  [Orabug: 21635600]  
  - Btrfs: fix log tree corruption when fs mounted with -o discard (Filipe Manana)  [Orabug: 21635598]  
  - Btrfs: fix inode eviction infinite loop after cloning into it (Filipe Manana)  [Orabug: 21635596]  
  - tcp: avoid looping in tcp_send_fin() (Eric Dumazet)  [Orabug: 21635595]  
  - tcp: fix possible deadlock in tcp_send_fin() (Eric Dumazet)  [Orabug: 21635594]  
  - splice: Apply generic position and size checks to each write (Ben Hutchings)  [Orabug: 21635592]  {CVE-2014-7822} 
  - ixgb: Call dev_kfree_skby_any instead of dev_kfree_skb. (Eric W. Biederman)  [Orabug: 21635591]  
  - r8169: Call dev_kfree_skby_any instead of dev_kfree_skb. (Eric W. Biederman)  [Orabug: 21635590]  
  - 8139too: Call dev_kfree_skby_any instead of dev_kfree_skb. (Eric W. Biederman)  [Orabug: 21635589]  
  - tcp: tcp_make_synack() should clear skb->tstamp (Eric Dumazet)  [Orabug: 21635588]  
  - tcp: prevent fetching dst twice in early demux code (Michal Kubeček)  [Orabug: 21635587]  
  - pagemap: do not leak physical addresses to non-privileged userspace (Kirill A. Shutemov)  [Orabug: 21635585]  
  - console: Fix console name size mismatch (Peter Hurley)  [Orabug: 21635583]  
  - net: llc: use correct size for sysctl timeout entries (Sasha Levin)  [Orabug: 21635577]  
  - ocfs2: _really_ sync the right range (Al Viro)  [Orabug: 21635576]  
  - be2iscsi: Fix kernel panic when device initialization fails (John Soni Jose)  [Orabug: 21635575]  
  - cifs: fix use-after-free bug in find_writable_file (David Disseldorp)  [Orabug: 21635574]  
  - dmaengine: omap-dma: Fix memory leak when terminating running transfer (Peter Ujfalusi)  [Orabug: 21635572]  
  - Defer processing of REQ_PREEMPT requests for blocked devices (Bart Van Assche)  [Orabug: 21635569]  
  - writeback: fix possible underflow in write bandwidth calculation (Tejun Heo)  [Orabug: 21635568]  
  - writeback: add missing INITIAL_JIFFIES init in global_update_bandwidth() (Tejun Heo)  [Orabug: 21635567]  
  - nbd: fix possible memory leak (Sudip Mukherjee)  [Orabug: 21635565]  
  - dm: hold suspend_lock while suspending device during device deletion (Mikulas Patocka)  [Orabug: 21635563]  
  - perf: Fix irq_work 'tail' recursion (Peter Zijlstra)  [Orabug: 21635562]  
  - tcm_qla2xxx: Fix incorrect use of __transport_register_session (Bart Van Assche)  [Orabug: 21635561]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-100.el6uek]
changelog:
  - udp: fix behavior of wrong checksums (Eric Dumazet)  [Orabug: 21628846]  {CVE-2015-5364} {CVE-2015-5366} 
  - ocfs2: __ocfs2_mknod_locked should return error when ocfs2_create_new_inode_locks() failed (Xue jiufei)  [Orabug: 21622756]  
  - rds: rds_ib_device.refcount overflow (Wengang Wang)  [Orabug: 21534432]  
  - rds: print vendor error (Wengang Wang)  [Orabug: 21527136]  
  - BUG_ON(lockres->l_level != DLM_LOCK_EX && !checkpointed) tripped in ocfs2_ci_checkpointed (Tariq Saeed)  [Orabug: 21526794]  
  - HID: hyperv: match wait_for_completion_timeout return type (Nicholas Mc Guire)  [Orabug: 21258923]  
  - storvsc: force SPC-3 compliance on win8 and win8 r2 hosts (K. Y. Srinivasan)  [Orabug: 21258923]  
  - storvsc: force discovery of LUNs that may have been removed. (K. Y. Srinivasan)  [Orabug: 21258923]  
  - storvsc: in responce to a scan event, scan the host (K. Y. Srinivasan)  [Orabug: 21258923]  
  - sched: replace INIT_COMPLETION with reinit_completion (Wolfram Sang)  [Orabug: 21258923]  
  - x86: Add proper vector accounting for HYPERVISOR_CALLBACK_VECTOR (Thomas Gleixner)  [Orabug: 21258923]  
  - mei: bus: () can be static (kbuild test robot)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: Suport an API to send packet with additional control (K. Y. Srinivasan)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: Suport an API to send pagebuffers with additional control (K. Y. Srinivasan)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: Use a round-robin algorithm for picking the outgoing channel (K. Y. Srinivasan)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: Add support for VMBus panic notifier handler (Nick Meier)  [Orabug: 21258923]  
  - Drivers: hv: hv_balloon: refuse to balloon below the floor (Vitaly Kuznetsov)  [Orabug: 21258923]  
  - Drivers: hv: hv_balloon: report offline pages as being used (Vitaly Kuznetsov)  [Orabug: 21258923]  
  - Drivers: hv: hv_balloon: eliminate the trylock path in acquire/release_region_mutex (Vitaly Kuznetsov)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: Get rid of some unnecessary messages (K. Y. Srinivasan)  [Orabug: 21258923]  
  - Drivers: hv: util: On device remove, close the channel after de-initializing the service (K. Y. Srinivasan)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: Remove the channel from the channel list(s) on failure (K. Y. Srinivasan)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: Handle both rescind and offer messages in the same context (K. Y. Srinivasan)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: Introduce a function to remove a rescinded offer (K. Y. Srinivasan)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: Properly handle child device remove (K. Y. Srinivasan)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: Add support for the NetworkDirect GUID (K. Y. Srinivasan)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: Fix a bug in the error path in vmbus_open() (K. Y. Srinivasan)  [Orabug: 21258923]  
  - hv: hv_balloon: match var type to return type of wait_for_completion (Nicholas Mc Guire)  [Orabug: 21258923]  
  - hv: channel_mgmt: match var type to return type of wait_for_completion (Nicholas Mc Guire)  [Orabug: 21258923]  
  - hv: channel: match var type to return type of wait_for_completion (Nicholas Mc Guire)  [Orabug: 21258923]  
  - hv: vmbus_open(): reset the channel state on ENOMEM (Dexuan Cui)  [Orabug: 21258923]  
  - hv: vmbus_post_msg: retry the hypercall on some transient errors (Dexuan Cui)  [Orabug: 21258923]  
  - hv: hv_util: move vmbus_open() to a later place (Dexuan Cui)  [Orabug: 21258923]  
  - drivers: hv: vmbus: Teardown synthetic interrupt controllers on module unload (Vitaly Kuznetsov)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: teardown hv_vmbus_con workqueue and vmbus_connection pages on shutdown (Vitaly Kuznetsov)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: avoid double kfree for device_obj (Vitaly Kuznetsov)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: rename channel work queues (Vitaly Kuznetsov)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: prevent cpu offlining on newer hypervisors (Vitaly Kuznetsov)  [Orabug: 21258923]  
  - hyperv: Implement netvsc_get_channels() ethool op (Andrew Schwartzmeyer)  [Orabug: 21258923]  
  - hyperv: fix sparse warnings (Lad, Prabhakar)  [Orabug: 21258923]  
  - hyperv: Fix the error processing in netvsc_send() (Haiyang Zhang)  [Orabug: 21258923]  
  - hyperv: match wait_for_completion_timeout return type (Nicholas Mc Guire)  [Orabug: 21258923]  
  - hyperv: netvsc.c: match wait_for_completion_timeout return type (Nicholas Mc Guire)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: serialize Offer and Rescind offer (Vitaly Kuznetsov)  [Orabug: 21258923]  
  - Drivers: hv: rename sc_lock to the more generic lock (Vitaly Kuznetsov)  [Orabug: 21258923]  
  - Drivers: hv: check vmbus_device_create() return value in vmbus_process_offer() (Vitaly Kuznetsov)  [Orabug: 21258923]  
  - hv: hv_fcopy: drop the obsolete message on transfer failure (Dexuan Cui)  [Orabug: 21258923]  
  - x86, hyperv: Mark the Hyper-V clocksource as being continuous (K. Y. Srinivasan)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: Fix a bug in vmbus_establish_gpadl() (K. Y. Srinivasan)  [Orabug: 21258923]  
  - Drivers: hv: hv_balloon: Don't post pressure status from interrupt context (K. Y. Srinivasan)  [Orabug: 21258923]  
  - Drivers: hv: hv_balloon: Fix a locking bug in the balloon driver (K. Y. Srinivasan)  [Orabug: 21258923]  
  - Drivers: hv: hv_balloon: Make adjustments in computing the floor (K. Y. Srinivasan)  [Orabug: 21258923]  
  - hyperv: Fix some variable name typos in send-buffer init/revoke (Haiyang Zhang)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: Use get_cpu() to get the current CPU (K. Y. Srinivasan)  [Orabug: 21258923]  
  - hyperv: Add support for vNIC hot removal (Haiyang Zhang)  [Orabug: 21258923]  
  - net: Hyper-V: Deletion of an unnecessary check before the function call "vfree" (Markus Elfring)  [Orabug: 21258923]  
  - hv: hv_balloon: avoid memory leak on alloc_error of 2MB memory block (Dexuan Cui)  [Orabug: 21258923]  
  - Drivers: hv: kvp,vss: Fast propagation of userspace communication failure (Vitaly Kuznetsov)  [Orabug: 21258923]  
  - Drivers: hv: vss: Introduce timeout for communication with userspace (Vitaly Kuznetsov)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: Fix a race condition when unregistering a device (Vitaly Kuznetsov)  [Orabug: 21258923]  
  - Drivers: hv: vmbus: Properly protect calls to smp_processor_id() (K. Y. Srinivasan)  [Orabug: 21258923]  
  - HID: hyperv: register as a wakeup source (Dexuan Cui)  [Orabug: 21258923]  
  - hyperv: Fix error return code in netvsc_init_buf() (Wei Yongjun)  [Orabug: 21258923]  
  - hyperv: Add netpoll support (Richard Weinberger)  [Orabug: 21258923]  
  - hyperv: Add handler for RNDIS_STATUS_NETWORK_CHANGE event (Haiyang Zhang)  [Orabug: 21258923]  
  - hyperv: fix apparent cut-n-paste error in send path teardown (Dave Jones)  [Orabug: 21258923]  
  - hyper-v: make uuid_le const (stephen hemminger)  [Orabug: 21258923]  
  - Drivers: hv: balloon: Ensure pressure reports are posted regularly (K. Y. Srinivasan)  [Orabug: 21258923]  
  - x86, irq, pic: Probe for legacy PIC and set legacy_pic appropriately (K. Y. Srinivasan)  [Orabug: 21258923]  
  - x86: hyperv: Fixup the (brain) damage caused by the irq cleanup (Thomas Gleixner)  [Orabug: 21258923]  
  - x86: hyperv: Fix brown paperbag typos reported by Fenguangs build robot (Thomas Gleixner)  [Orabug: 21258923]  
  - x86: hyperv: Make it build with CONFIG_HYPERV=m again (Thomas Gleixner)  [Orabug: 21258923]  
  - x86, hyperv: Bypass the timer_irq_works() check (Jason Wang)  [Orabug: 21258923]  
  - x86: Hyperv: Cleanup the irq mess (Thomas Gleixner)  [Orabug: 21258923]  
  - connector: add portid to unicast in addition to broadcasting (David Fries)  [Orabug: 21258923]  
  - Input: hyperv-keyboard - register as a wakeup source (Dexuan Cui)  [Orabug: 21258923]  
  - vmxnet3: Bump up driver version number (Shreyas Bhatewara)  [Orabug: 21386876]  
  - vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (Shreyas Bhatewara)  [Orabug: 21386876]  
  - vmxnet3: Fix memory leaks in rx path (fwd) (Shreyas Bhatewara)  [Orabug: 21386876]  
  - vmxnet3: Register shutdown handler for device (fwd) (Shreyas Bhatewara)  [Orabug: 21386876]  
  - vmxnet3: spelling fixes (stephen hemminger)  [Orabug: 21386876]  
  - Driver: Vmxnet3: Copy TCP header to mapped frame for IPv6 packets (Shrikrishna Khare)  [Orabug: 21386876]  
  - Driver: Vmxnet3: Change the hex constant to its decimal equivalent (Shrikrishna Khare)  [Orabug: 21386876]  
  - Driver: Vmxnet3: Fix ethtool -S to return correct rx queue stats (Shrikrishna Khare)  [Orabug: 21386876]  
  - Driver: Vmxnet3: Reinitialize vmxnet3 backend on wakeup from hibernate (Shrikrishna Khare)  [Orabug: 21386876]  
  - Driver: Vmxnet3: Make Rx ring 2 size configurable (Shrikrishna Khare)  [Orabug: 21386876]  
  - VMXNET3: Check for map error in vmxnet3_set_mc (Andy King)  [Orabug: 21386876]  
  - ixgbe: Look up MAC address in Open Firmware or IDPROM (Martin K Petersen)  [Orabug: 21518724]  
  - ixgbe: add dev id's for X550 hardware (Brian Maly)  [Orabug: 21518724]  
  - ixgbe: update to ver 4.1.2 (Brian Maly)  [Orabug: 21518724]  
  - block: remove artifical max_hw_sectors cap (Christoph Hellwig)  [Orabug: 21511611]  
  - scsi: don't add scsi_device if its already visible (Subhash Jadavani)  [Orabug: 21474881]  
  - Introduce [compat_]save_altstack_ex() to unbreak x86 SMAP (Al Viro)  [Orabug: 21184490]  
  - x86, smap: Handle csum_partial_copy_*_user() (H. Peter Anvin)  [Orabug: 21184490]  
  - igbvf: integer wrapping bug setting the mtu (Dan Carpenter)  [Orabug: 20374737]  
  - igb: Fixes needed for surprise removal support (Brian Maly)  [Orabug: 20374737]  
  - igb: fix race conditions on queuing skb for HW time stamp (Jakub Kicinski)  [Orabug: 20374737]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-99.el6uek]
changelog:
  - md: use kzalloc() when bitmap is disabled (Benjamin Randazzo)  [Orabug: 19573152]  {CVE-2015-5697}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-98.el6uek]
changelog:
  - KVM: x86: SYSENTER emulation is broken (Nadav Amit)  [Orabug: 21502729]  {CVE-2015-0239} {CVE-2015-0239} 
  - fs: take i_mutex during prepare_binprm for set[ug]id executables (Jann Horn)  [Orabug: 21502159]  {CVE-2015-3339}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-97.el6uek]
changelog:
  - add ql2400, ql2500 firmware versions to prerequisites (Dan Duval)  [Orabug: 21474929]  
  - correct QLogic firmware dependencies in the spec file (Dan Duval)  [Orabug: 21474929]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-96.el6uek]
changelog:
  - xen-blkfront: don't add indirect page to list when !feature_persistent (Bob Liu)  [Orabug: 21459266]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-94.el6uek]
changelog:
  - ipv6: Don't reduce hop limit for an interface (D.S. Ljungmark)  [Orabug: 21444784]  {CVE-2015-2922} 
  - ipv4: Missing sk_nulls_node_init() in ping_unhash(). (David S. Miller)  [Orabug: 21444685]  {CVE-2015-3636}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-93.el6uek]
changelog:
  - config: sync up config files to make build clean (Guangyu Sun)  [Orabug: 21425838]  
  - acpi: fix typo in drivers/acpi/osl.c (Guangyu Sun)  [Orabug: 21418329]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-92.el6uek]
changelog:
  - Revert "i40e: Add support for getlink, setlink ndo ops" (Brian Maly)  [Orabug: 21314906]  
  - x86: Do not try to sync identity map for non-mapped pages (Dave Hansen)  [Orabug: 21326516]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-91.el6uek]
changelog:
  - rds: re-entry of rds_ib_xmit/rds_iw_xmit (Wengang Wang)  [Orabug: 21324074]  
  - drm/mgag200: Reject non-character-cell-aligned mode widths (Adam Jackson)  [Orabug: 20868823]  
  - drm/mgag200: fix typo causing bw limits to be ignored on some chips (Dave Airlie)  [Orabug: 20868823]  
  - drm/mgag200: remove unused driver_private access (David Herrmann)  [Orabug: 20868823]  
  - drm/mgag200: Invalidate page tables when pinning a BO (Egbert Eich)  [Orabug: 20868823]  
  - drm/mgag200: Fix LUT programming for 16bpp (Egbert Eich)  [Orabug: 20868823]  
  - drm/mgag200: Fix framebuffer pitch calculation (Takashi Iwai)  [Orabug: 20868823]  
  - drm/mgag200: Add sysfs support for connectors (Egbert Eich)  [Orabug: 20868823]  
  - drm/mgag200: Add an crtc_disable callback to the crtc helper funcs (Egbert Eich)  [Orabug: 20868823]  
  - drm/mgag200: Fix logic in mgag200_bo_pin() (v2) (Egbert Eich)  [Orabug: 20868823]  
  - drm/mgag200: inline reservations (Maarten Lankhorst)  [Orabug: 20868823]  
  - drm/mgag200: do not attempt to acquire a reservation while in an interrupt handler (Maarten Lankhorst)  [Orabug: 20868823]  
  - drm/mgag200: Added resolution and bandwidth limits for various G200e products. (Julia Lemire)  [Orabug: 20868823]  
  - drm/mgag200: Reject modes that are too big for VRAM (Christopher Harvey)  [Orabug: 20868823]  
  - drm/mgag200: Don't do full cleanup if mgag200_device_init fails (Christopher Harvey)  [Orabug: 20868823]  
  - drm/mgag200: Hardware cursor support (Christopher Harvey)  [Orabug: 20868823]  
  - drm/mgag200: Add missing write to index before accessing data register (Christopher Harvey)  [Orabug: 20868823]  
  - drm/mgag200: Fix framebuffer base address programming (Christopher Harvey)  [Orabug: 20868823]  
  - drm/mgag200: Convert counter delays to jiffies (Christopher Harvey)  [Orabug: 20868823]  
  - drm/mgag200: Fix writes into MGA1064_PIX_CLK_CTL register (Christopher Harvey)  [Orabug: 20868823]  
  - drm/mgag200: Don't change unrelated registers during modeset (Christopher Harvey)  [Orabug: 20868823]  
  - Revert "lpfc: Fix for lun discovery issue with 8Gig adapter." (Guru Anbalagane)  [Orabug: 21304962]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [3.8.13-90.el6uek]
changelog:
  - x86/asm/entry/64: Remove a bogus 'ret_from_fork' optimization (Andy Lutomirski)  [Orabug: 21308309]  {CVE-2015-2830} 
  - Update patched for lpfc from 10.6.61.0 to 10.6.61.1 for UEK R3 U6 release. (Dick Kennedy)   
  - lpfc: Change buffer pool empty message to miscellaneous category (Dick Kennedy)   
  - lpfc: Fix incorrect log message reported for empty FCF record. (Dick Kennedy)   
  - lpfc: Fix rport leak. (Dick Kennedy)   
  - lpfc: Correct loss of RSCNs during array takeaway/giveback testing. (Dick Kennedy)   
  - lpfc: Fix crash in vport_delete. (Dick Kennedy)   
  - lpfc: Fix to remove IRQF_SHARED flag for MSI/MSI-X vectors. (Dick Kennedy)   
  - lpfc: Fix discovery issue when changing from Pt2Pt to Fabric. (Dick Kennedy)   
  - lpfc: Correct reporting of vport state on fdisc command failure. (Dick Kennedy)   
  - lpfc: Add support for RDP ELS command. (Dick Kennedy)   
  - lpfc: Fix ABORTs WQ selection in terminate_rport_io (Dick Kennedy)   
  - lpfc: Correct reference counting of rport (Dick Kennedy)   
  - lpfc: Add support for ELS LCB. (Dick Kennedy)   
  - lpfc: Correct loss of target discovery after cable swap. (Dick Kennedy)   
  - dtrace: sigaltstack is no longer a stub syscall (Kris Van Hees)  [Orabug: 21304183]  
  - hpsa: add in new offline mode (Don Brace)  [Orabug: 21289871]  
  - hpsa: add in new controllers (Don Brace)  [Orabug: 21289871]  
  - hpsa: hpsa decode sense data for io and tmf (Don Brace)  [Orabug: 21289871]  
  - hpsa: enable bus mastering during init (Don Brace)  [Orabug: 21289871]  
  - hpsa: enhance kdump (Don Brace)  [Orabug: 21289871]  
  - hpsa: enhance error checking. (Don Brace)  [Orabug: 21289871]  
  - hpsa: enhance driver output (Don Brace)  [Orabug: 21289871]  
  - hpsa: update pci device table (Don Brace)  [Orabug: 21289871]  
  - vmw_pvscsi: Fix pvscsi_abort() function. (Arvind Kumar)  [Orabug: 21266080]  
  - qla2xxx: Update driver version to 8.07.00.18.39.0-k. (Sawan Chandak)  [Orabug: 21241070]  
  - qla2xxx: Restore physical port WWPN only, when port down detected for FA-WWPN port. (Sawan Chandak)  [Orabug: 21241070]  
  - qla2xxx: Fix virtual port configuration, when switch port is disabled/enabled. (Sawan Chandak)  [Orabug: 21241070]  
  - qla2xxx: Prevent multiple firmware dump collection for ISP27XX. (Himanshu Madhani)  [Orabug: 21241070]  
  - qla2xxx: Disable Interrupt handshake for ISP27XX. (Himanshu Madhani)  [Orabug: 21241070]  
  - qla2xxx: Add debugging info for MBX timeout. (Himanshu Madhani)  [Orabug: 21241070]  
  - qla2xxx: Add serdes read/write support for ISP27XX (Andrew Vasquez)  [Orabug: 21241070]  
  - qla2xxx: Add udev notification to save fw dump for ISP27XX (Himanshu Madhani)  [Orabug: 21241070]  
  - qla2xxx: Add message for sucessful FW dump collected for ISP27XX. (Himanshu Madhani)  [Orabug: 21241070]  
  - qla2xxx: Add support to load firmware from file for ISP 26XX/27XX. (Sawan Chandak)  [Orabug: 21241070]  
  - qla2xxx: Fix beacon blink for ISP27XX. (Nigel Kirkland)  [Orabug: 21241070]  
  - qla2xxx: Increase the wait time for firmware to be ready for P3P. (Chad Dupuis)  [Orabug: 21241070]  
  - qla2xxx: Fix printks in ql_log message (Yannick Guerrini)  [Orabug: 21241070]  
  - qla2xxx: Fix printk in qla25xx_setup_mode (Yannick Guerrini)  [Orabug: 21241070]  
  - bnx2i: update to 2.11.2.0 (Vaughan Cao)  [Orabug: 21241055]  
  - bnx2fc: update to 2.9.3 (Vaughan Cao)  [Orabug: 21241055]  
  - bnx2x: update to 1.712.33 (Vaughan Cao)  [Orabug: 21241055]  
  - cnic: update to 2.5.20h (Vaughan Cao)  [Orabug: 21241055]  
  - bnx2: update to 2.2.5o (Vaughan Cao)  [Orabug: 21241055]  
  - md: use SRCU to improve performance (Mikulas Patocka)  [Orabug: 18231164]  
  - kvm: raise KVM_SOFT_MAX_VCPUS to support more vcpus (Dan Duval)  [Orabug: 21144488]  
  - vsock: Make transport the proto owner (Andy King)  [Orabug: 21266075]  
  - VSOCK: Move af_vsock.h and vsock_addr.h to include/net (Asias He)  [Orabug: 21266075]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [3.8.13-89.el6uek]
changelog:
  - drivers: xen-blkfront: only talk_to_blkback() when in XenbusStateInitialising (Bob Liu)   
  - xen/block: add multi-page ring support (Bob Liu)   
  - driver: xen-blkfront: move talk_to_blkback to a more suitable place (Bob Liu)   
  - drivers: xen-blkback: delay pending_req allocation to connect_ring (Bob Liu)   
  - xen/grant: introduce func gnttab_unmap_refs_sync() (Bob Liu)   
  - xen/blkback: safely unmap purge persistent grants (Bob Liu)   
  - xenbus_client: Extend interface to support multi-page ring (Wei Liu)   
  - be2net: update the driver version to 10.6.0.2 (Sathya Perla)  [Orabug: 21275400]  
  - be2net: update copyright year to 2015 (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: use be_virtfn() instead of !be_physfn() (Kalesh AP)  [Orabug: 21275400]  
  - be2net: simplify UFI compatibility checking (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: post full RXQ on interface enable (Suresh Reddy)  [Orabug: 21275400]  
  - be2net: check for INSUFFICIENT_VLANS error (Kalesh AP)  [Orabug: 21275400]  
  - be2net: receive pkts with L3, L4 errors on VFs (Somnath Kotur)  [Orabug: 21275400]  
  - be2net: log link status (Ivan Vecera)  [Orabug: 21275400]  
  - be2net: Fix a bug in Rx buffer posting (Ajit Khaparde)  [Orabug: 21275400]  
  - be2net: bump up the driver version to 10.6.0.1 (Sathya Perla)  [Orabug: 21275400]  
  - be2net: use PCI MMIO read instead of config read for errors (Suresh Reddy)  [Orabug: 21275400]  
  - be2net: restrict MODIFY_EQ_DELAY cmd to a max of 8 EQs (Suresh Reddy)  [Orabug: 21275400]  
  - be2net: Prevent VFs from enabling VLAN promiscuous mode (Vasundhara Volam)  [Orabug: 21275400]  
  - ethernet: codespell comment spelling fixes (Joe Perches)  [Orabug: 21275400]  
  - be2net: avoid creating the non-RSS default RXQ if FW allows to (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: use a wrapper to schedule and cancel error detection task (Sathya Perla)  [Orabug: 21275400]  
  - be2net: shorten AMAP_GET/SET_BITS() macro calls (Sathya Perla)  [Orabug: 21275400]  
  - be2net: MODULE_DEVICE_TABLE: fix some callsites (Andrew Morton)  [Orabug: 21275400]  
  - be2net: avoid unncessary swapping of fields in eth_tx_wrb (Sathya Perla)  [Orabug: 21275400]  
  - be2net: process port misconfig async event (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: refactor be_set_rx_mode() and be_vid_config() for readability (Sathya Perla)  [Orabug: 21275400]  
  - be2net: remove duplicate code in be_cmd_rx_filter() (Sathya Perla)  [Orabug: 21275400]  
  - be2net: use offset based FW flashing for Skyhawk chip (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: avoid flashing SH-B0 UFI image on SH-P2 chip (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: refactor code that checks flash file compatibility (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: replace (1 << x) with BIT(x) (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: move un-exported routines from be.h to respective src files (Sathya Perla)  [Orabug: 21275400]  
  - bridge: add flags argument to ndo_bridge_setlink and ndo_bridge_dellink (Roopa Prabhu)  [Orabug: 21275400]  
  - be2net: move definitions related to FW cmdsfrom be_hw.h to be_cmds.h (Vasundhara Volam)  [Orabug: 21275400]  
  - be2net: issue function reset cmd in resume path (Kalesh AP)  [Orabug: 21275400]  
  - be2net: add a log message for POST timeout in Lancer (Kalesh AP)  [Orabug: 21275400]  
  - be2net: fix failure case in setting flow control (Kalesh AP)  [Orabug: 21275400]  
  - be2net: move interface create code to a separate routine (Kalesh AP)  [Orabug: 21275400]  
  - VMCI: Guard against overflow in queue pair allocation (Jorgen Hansen)  [Orabug: 21266077]  
  - VMCI: Check userland-provided datagram size (Andy King)  [Orabug: 21266077]  
  - VMCI: Fix two UVA mapping bugs (Jorgen Hansen)  [Orabug: 21266077]  
  - VMCI: integer overflow in vmci_datagram_dispatch() (Dan Carpenter)  [Orabug: 21266077]  
  - VMCI: fix error handling path when registering guest driver (Dmitry Torokhov)  [Orabug: 21266077]  
  - VMCI: Add support for virtual IOMMU (Andy King)  [Orabug: 21266077]  
  - VMCI: Remove non-blocking/pinned queuepair support (Andy King)  [Orabug: 21266077]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [3.8.13-88.el6uek]
changelog:
  - Oracle Linux Kernel Module Signing Key (Alexey Petrenko)  [Orabug: 21249387]  
  - extrakeys.pub is not needed for the build (Alexey Petrenko)  [Orabug: 21249387]  
  - Fix kabi break due to find_special_page was introduced (Bob Liu)  [Orabug: 21250018]  
  - xen/gntdev: provide find_special_page VMA operation (David Vrabel)  [Orabug: 21250018]  
  - xen/gntdev: mark userspace PTEs as special on x86 PV guests (David Vrabel)  [Orabug: 21250018]  
  - xen-blkback: safely unmap grants in case they are still in use (Jennifer Herbert)  [Orabug: 21250018]  
  - xen/gntdev: safely unmap grants in case they are still in use (Jennifer Herbert)  [Orabug: 21250018]  
  - xen/gntdev: convert priv->lock to a mutex (David Vrabel)  [Orabug: 21250018]  
  - xen/grant-table: add a mechanism to safely unmap pages that are in use (Jennifer Herbert)  [Orabug: 21250018]  
  - xen-netback: use foreign page information from the pages themselves (Jennifer Herbert)  [Orabug: 21250018]  
  - xen: mark grant mapped pages as foreign (Jennifer Herbert)  [Orabug: 21250018]  
  - xen/grant-table: add helpers for allocating pages (David Vrabel)  [Orabug: 21250018]  
  - x86/xen: require ballooned pages for grant maps (Jennifer Herbert)  [Orabug: 21250018]  
  - xen: remove scratch frames for ballooned pages and m2p override (David Vrabel)  [Orabug: 21250018]  
  - xen/grant-table: pre-populate kernel unmap ops for xen_gnttab_unmap_refs() (David Vrabel)  [Orabug: 21250018]  
  - mm: add 'foreign' alias for the 'pinned' page flag (Jennifer Herbert)  [Orabug: 21250018]  
  - mm: provide a find_special_page vma operation (David Vrabel)  [Orabug: 21250018]  
  - NFS hangs in __ocfs2_cluster_lock due to race with ocfs2_unblock_lock (Tariq Saeed)  [Orabug: 20933419]  
  - swiotlb: don't assume PA 0 is invalid (Jan Beulich)  [Orabug: 21249144]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [3.8.13-87.el6uek]
changelog:
  - qla4xxx: Update driver version to v5.04.00.07.06.02-uek3 (Nilesh Javali)  [Orabug: 21241091]  
  - qla4xxx: check the return value of dma_alloc_coherent() (Maurizio Lombardi)  [Orabug: 21241091]  
  - scsi: qla4xxx: ql4_mbx.c: Cleaning up missing null-terminate in conjunction with strncpy (Rickard Strandqvist)  [Orabug: 21241091]  
  - scsi: qla4xxx: ql4_os.c: Cleaning up missing null-terminate in conjunction with strncpy (Rickard Strandqvist)  [Orabug: 21241091]  
  - qla4xxx: fix get_host_stats error propagation (Mike Christie)  [Orabug: 21241091]  
  - scsi_ibft: Fix finding Broadcom specific ibft sign (Vikas Chaudhary)  [Orabug: 21241091]  
  - dtrace: convert from sdt_instr_t to asm_instr_t (Kris Van Hees)  [Orabug: 21267945]  
  - dtrace: percpu: move from __get_cpu_var() to this_cpu_ptr() (Kris Van Hees)  [Orabug: 21265599]  
  - dtrace: do not vmalloc/vfree from probe context (Kris Van Hees)  [Orabug: 21267934]  
  - dtrace: restructuring for multi-arch support (Kris Van Hees)  [Orabug: 21267922]  
  - kallsyms: fix /proc/kallmodsyms to not be misled by const variables (Nick Alcock)  [Orabug: 21257170]  
  - storvsc: force discovery of LUNs that may have been removed. (K. Y. Srinivasan)  [Orabug: 20768211]  
  - storvsc: in responce to a scan event, scan the host (K. Y. Srinivasan)  [Orabug: 20768211]  
  - builds: configs: Enable mgs driver for OL7 (Santosh Shilimkar)  [Orabug: 20505584]  
  - aacraid: driver version change (Mahesh Rajashekhara)  [Orabug: 21208741]  
  - aacraid: AIF raw device remove support (Mahesh Rajashekhara)  [Orabug: 21208741]  
  - aacraid: performance improvement changes (Mahesh Rajashekhara)  [Orabug: 21208741]  
  - aacraid: IOCTL fix (Mahesh Rajashekhara)  [Orabug: 21208741]  
  - aacraid: IOP RESET command handling changes (Mahesh Rajashekhara)  [Orabug: 21208741]  
  - aacraid: 240 simple volume support (Mahesh Rajashekhara)  [Orabug: 21208741]  
  - aacraid: vpd page code 0x83 support (Mahesh Rajashekhara)  [Orabug: 21208741]  
  - aacraid: MSI-x support (Mahesh Rajashekhara)  [Orabug: 21208741]  
  - aacraid: 4KB sector support (Mahesh Rajashekhara)  [Orabug: 21208741]  
  - aacraid: IOCTL pass-through command fix (Mahesh Rajashekhara)  [Orabug: 21208741]  
  - aacraid: AIF support for SES device add/remove (Mahesh Rajashekhara)  [Orabug: 21208741]  
  - scsi: use 64-bit LUNs (Hannes Reinecke)  [Orabug: 21208741]  
  - remove deprecated IRQF_DISABLED from SCSI (Michael Opdenacker)  [Orabug: 21208741]  
  - aacraid: kdump fix (Mahesh Rajashekhara)  [Orabug: 21208741]  
  - drivers: avoid parsing names as kthread_run() format strings (Kees Cook)  [Orabug: 21208741]  
  - aacraid: Fix for arrays are going offline in the system. System hangs (Mahesh Rajashekhara)  [Orabug: 21208741]  
  - aacraid: Dual firmware image support (Mahesh Rajashekhara)  [Orabug: 21208741]  
  - aacraid: suppress two GCC warnings (Paul Bolle)  [Orabug: 21208741]  
  - aacraid: 1024 max outstanding command support for Series 7 and above (Mahesh Rajashekhara)  [Orabug: 21208741]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-86.el6uek]
changelog:
  - kallsyms: fix /proc/kallmodsyms to not be misled by external symbols (Nick Alcock)  [Orabug: 21245508]  
  - wait: change waitfd() to use wait4(), not waitid(); reduce invasiveness (Nick Alcock)  [Orabug: 21245391]  
  - ixgbevf: upgrade to version 2.16.1 (Brian Maly)  [Orabug: 21104474]  
  - ipv6: don't call addrconf_dst_alloc again when enable lo (Gao feng)  [Orabug: 21088702]  
  - efi/xen: Pass missing argument to EFI runtime Xen hypercall (Daniel Kiper)  [Orabug: 21247143]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-85.el6uek]
changelog:
  - fanotify: fix notification of groups with inode & mount marks (Jan Kara)  [Orabug: 21168905]  
  - NVMe: Fix VPD B0 max sectors translation (Keith Busch)  [Orabug: 21117187]  
  - NVMe: Add translation for block limits (Keith Busch)  [Orabug: 21117187]  
  - nvme: Fix PRP list calculation for non-4k system page size (Murali Iyer)  [Orabug: 21117187]  
  - NVMe: Fix potential corruption on sync commands (Keith Busch)  [Orabug: 21117187]  
  - NVMe: Fix potential corruption during shutdown (Keith Busch)  [Orabug: 21117187]  
  - NVMe: Initialize device list head before starting (Keith Busch)  [Orabug: 21117187]  
  - NVMe: Asynchronous controller probe (Keith Busch)  [Orabug: 21117187]  
  - NVMe: Register management handle under nvme class (Keith Busch)  [Orabug: 21117187]  
  - NVMe: Update SCSI Inquiry VPD 83h translation (Keith Busch)  [Orabug: 21117187]  
  - NVMe: Update data structures for NVMe 1.2 (Matthew Wilcox)  [Orabug: 21117187]  
  - NVMe: Update namespace and controller identify structures to the 1.1a spec (Dimitri John Ledkov)  [Orabug: 21117187]  
  - NVMe: Update module version (Keith Busch)  [Orabug: 21117187]  
  - fnic: Override the limitation on number of scsi timeouts (Narsimhulu Musini)  [Orabug: 21084835]  
  - fnic: IOMMU Fault occurs when IO and abort IO is out of order (Anil Chintalapati (achintal))  [Orabug: 21084835]  
  - Fnic: Fnic Driver crashed with NULL pointer reference (Hiral Shah)  [Orabug: 21084835]  
  - Fnic: For Standalone C series, "sending VLAN request" message seen even if the link is down (Hiral Shah)  [Orabug: 21084835]  
  - Fnic: Improper resue of exchange Ids (Hiral Shah)  [Orabug: 21084835]  
  - Fnic: Memcopy only mimumum of data or trace buffer (Hiral Shah)  [Orabug: 21084835]  
  - Fnic: Not probing all the vNICS via fnic_probe on boot (Hiral Shah)  [Orabug: 21084835]  
  - fnic: assign FIP_ALL_FCF_MACS to fcoe_all_fcfs (Hiral Shah)  [Orabug: 21084835]  
  - uek-rpm: ol6: update build environment to 6.6 (Guangyu Sun)


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-84.el6uek]
changelog:
  - x86_64, vdso: Fix the vdso address randomization algorithm (Andy Lutomirski)  [Orabug: 21226722]  {CVE-2014-9585}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-83.el6uek]
changelog:
  - snic: fix format string overflow (Brian Maly)  [Orabug: 21091759]  
  - scsi: add snic driver to makefile (Brian Maly)  [Orabug: 21091759]  
  - snic: enable snic in kernel configs (Brian Maly)  [Orabug: 21091759]  
  - snic: minor checkpatch fixes (Narsimhulu Musini)  [Orabug: 21091759]  
  - snic: Add Makefile, patch Kconfig, MAINTAINERS (Narsimhulu Musini)  [Orabug: 21091759]  
  - snic: Add event tracing to capture IO events. (Narsimhulu Musini)  [Orabug: 21091759]  
  - snic: Add sysfs entries to list stats and trace data (Narsimhulu Musini)  [Orabug: 21091759]  
  - snic: Add low level queuing interfaces (Narsimhulu Musini)  [Orabug: 21091759]  
  - snic: add SCSI handling, AEN, and fwreset handling (Narsimhulu Musini)  [Orabug: 21091759]  
  - snic: Add snic target discovery (Narsimhulu Musini)  [Orabug: 21091759]  
  - snic: Add meta request, handling of meta requests. (Narsimhulu Musini)  [Orabug: 21091759]  
  - snic: Add interrupt, resource firmware interfaces (Narsimhulu Musini)  [Orabug: 21091759]  
  - snic: snic module infrastructure (Narsimhulu Musini)  [Orabug: 21091759]  
  - xen/mmu: Move the setting of pvops.write_cr3 to later phase in bootup. (Konrad Rzeszutek Wilk)  [Orabug: 21197204]  
  - x86-64, xen, mmu: Provide an early version of write_cr3. (Konrad Rzeszutek Wilk)  [Orabug: 21197204]  
  - uek-rpm: build: Use SHA512 instead of SHA256 for module signing (Natalya Naumova)  [Orabug: 20687425]  
  - config: ol6: make CONFIG_SERIAL_8250_NR_UARTS 64 (Guangyu Sun)  [Orabug: 21141039]  
  - config: enable CONFIG_INTEL_TXT (Guangyu Sun)  [Orabug: 21176777]  
  - export host-only net/core and net/ipv4 parameters to a container as read-only (Thomas Tanaka)  [Orabug: 21151210]  
  - Revert "i40e: Add FW check to disable DCB and wrap autoneg workaround with FW check" (Brian Maly)  [Orabug: 21103806]  
  - xen-netfront: print correct number of queues (David Vrabel)  [Orabug: 21150627]  
  - xen-netfront: release per-queue Tx and Rx resource when disconnecting (David Vrabel)  [Orabug: 21150627]  
  - xen-netfront: fix locking in connect error path (David Vrabel)  [Orabug: 21150627]  
  - xen-netfront: call netif_carrier_off() only once when disconnecting (David Vrabel)  [Orabug: 21150627]  
  - xen-netfront: don't nest queue locks in xennet_connect() (David Vrabel)  [Orabug: 21150627]  
  - xen-net{back, front}: Document multi-queue feature in netif.h (Andrew J. Bennieston)  [Orabug: 21150627]  
  - xen-netfront: recreate queues correctly when reconnecting (David Vrabel)  [Orabug: 21150627]  
  - xen-netfront: fix oops when disconnected from backend (David Vrabel)  [Orabug: 21150627]  
  - xen-netfront: initialise queue name in xennet_init_queue (Wei Liu)  [Orabug: 21150627]  
  - xen-netfront: Add support for multiple queues (Andrew J. Bennieston)  [Orabug: 21150627]  
  - xen-netfront: Factor queue-specific data into queue struct. (Andrew J. Bennieston)  [Orabug: 21150627]  
  - xen-netback: bookkeep number of active queues in our own module (Wei Liu)  [Orabug: 21150627]  
  - net: xen-netback: include linux/vmalloc.h again (Arnd Bergmann)  [Orabug: 21150627]  
  - xen-netback: Add support for multiple queues (Andrew J. Bennieston)  [Orabug: 21150627]  
  - xen-netback: Factor queue-specific data into queue struct (Wei Liu)  [Orabug: 21150627]  
  - xen-netback: Move grant_copy_op array back into struct xenvif. (Andrew J. Bennieston)  [Orabug: 21150627]  
  - ixgbe: Look up MAC address in Open Firmware or IDPROM (Martin K Petersen)  [Orabug: 20983421]  
  - ixgbe: update to ver 4.0.3 (Ethan Zhao)  [Orabug: 20983421]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-82.el6uek]
changelog:
  - config: enable some secure boot features for ol7 (Guangyu Sun)  [Orabug: 18961720]  
  - efi: Disable secure boot if shim is in insecure mode (Josh Boyer)  [Orabug: 18961720]  
  - hibernate: Disable in a signed modules environment (Josh Boyer)  [Orabug: 18961720]  
  - efi: Add EFI_SECURE_BOOT bit (Josh Boyer)  [Orabug: 18961720]  
  - Add option to automatically set securelevel when in Secure Boot mode (Matthew Garrett)  [Orabug: 18961720]  
  - asus-wmi: Restrict debugfs interface when securelevel is set (Matthew Garrett)  [Orabug: 18961720]  
  - x86: Restrict MSR access when securelevel is set (Matthew Garrett)  [Orabug: 18961720]  
  - uswsusp: Disable when securelevel is set (Matthew Garrett)  [Orabug: 18961720]  
  - kexec: Disable at runtime if securelevel has been set. (Matthew Garrett)  [Orabug: 18961720]  
  - acpi: Ignore acpi_rsdp kernel parameter when securelevel is set (Matthew Garrett)  [Orabug: 18961720]  
  - acpi: Limit access to custom_method if securelevel is set (Matthew Garrett)  [Orabug: 18961720]  
  - Restrict /dev/mem and /dev/kmem when securelevel is set. (Matthew Garrett)  [Orabug: 18961720]  
  - x86: Lock down IO port access when securelevel is enabled (Matthew Garrett)  [Orabug: 18961720]  
  - PCI: Lock down BAR access when securelevel is enabled (Matthew Garrett)  [Orabug: 18961720]  
  - Enforce module signatures when securelevel is greater than 0 (Matthew Garrett)  [Orabug: 18961720]  
  - Add BSD-style securelevel support (Matthew Garrett)  [Orabug: 18961720]  
  - MODSIGN: Support not importing certs from db (Josh Boyer)  [Orabug: 18961720]  
  - MODSIGN: Import certificates from UEFI Secure Boot (Josh Boyer)  [Orabug: 18961720]  
  - MODSIGN: Add module certificate blacklist keyring (Josh Boyer)  [Orabug: 18961720]  
  - Add an EFI signature blob parser and key loader. (Dave Howells)  [Orabug: 18961720]  
  - Add EFI signature data types (Dave Howells)  [Orabug: 18961720]  
  - efi: fix error handling in add_sysfs_runtime_map_entry() (Dan Carpenter)  [Orabug: 18961720]  
  - PEFILE: Relax the check on the length of the PKCS#7 cert (David Howells)  [Orabug: 18961720]  
  - kexec: purgatory: add clean-up for purgatory directory (Michael Welling)  [Orabug: 18961720]  
  - x86/purgatory: use approprate -m64/-32 build flag for arch/x86/purgatory (Vivek Goyal)  [Orabug: 18961720]  
  - kexec: remove CONFIG_KEXEC dependency on crypto (Vivek Goyal)  [Orabug: 18961720]  
  - kexec: create a new config option CONFIG_KEXEC_FILE for new syscall (Vivek Goyal)  [Orabug: 18961720]  
  - resource: fix the case of null pointer access (Vivek Goyal)  [Orabug: 18961720]  
  - kexec: verify the signature of signed PE bzImage (Vivek Goyal)  [Orabug: 18961720]  
  - kexec: support kexec/kdump on EFI systems (Vivek Goyal)  [Orabug: 18961720]  
  - kexec: support for kexec on panic using new system call (Vivek Goyal)  [Orabug: 18961720]  
  - kexec-bzImage64: support for loading bzImage using 64bit entry (Vivek Goyal)  [Orabug: 18961720]  
  - kexec: load and relocate purgatory at kernel load time (Vivek Goyal)  [Orabug: 18961720]  
  - purgatory: core purgatory functionality (Vivek Goyal)  [Orabug: 18961720]  
  - purgatory/sha256: provide implementation of sha256 in purgaotory context (Vivek Goyal)  [Orabug: 18961720]  
  - kexec: implementation of new syscall kexec_file_load (Vivek Goyal)  [Orabug: 18961720]  
  - kexec: new syscall kexec_file_load() declaration (Vivek Goyal)  [Orabug: 18961720]  
  - kexec: make kexec_segment user buffer pointer a union (Vivek Goyal)  [Orabug: 18961720]  
  - resource: provide new functions to walk through resources (Vivek Goyal)  [Orabug: 18961720]  
  - kexec: use common function for kimage_normal_alloc() and kimage_crash_alloc() (Vivek Goyal)  [Orabug: 18961720]  
  - kexec: move segment verification code in a separate function (Vivek Goyal)  [Orabug: 18961720]  
  - kexec: rename unusebale_pages to unusable_pages (Vivek Goyal)  [Orabug: 18961720]  
  - kernel: build bin2c based on config option CONFIG_BUILD_BIN2C (Vivek Goyal)  [Orabug: 18961720]  
  - bin2c: move bin2c in scripts/basic (Vivek Goyal)  [Orabug: 18961720]  
  - kexec: remove unnecessary return (Xishi Qiu)  [Orabug: 18961720]  
  - keys: remove duplicated loads of ksplice certificate (Guangyu Sun)  [Orabug: 21034277]  
  - X.509: Support parse long form of length octets in Authority Key Identifier (Chun-Yi Lee)  [Orabug: 18961720]  
  - KEYS: Pre-clear struct key on allocation (David Howells)  [Orabug: 18961720]  
  - KEYS: Fix searching of nested keyrings (David Howells)  [Orabug: 18961720]  
  - KEYS: Fix multiple key add into associative array (David Howells)  [Orabug: 18961720]  
  - KEYS: Fix the keyring hash function (David Howells)  [Orabug: 18961720]  
  - PKCS#7: Fix the parser cleanup to drain parsed out X.509 certs (David Howells)  [Orabug: 18961720]  
  - PKCS#7: Provide a single place to do signed info block freeing (David Howells)  [Orabug: 18961720]  
  - PKCS#7: Add a missing static (David Howells)  [Orabug: 18961720]  
  - X.509: Need to export x509_request_asymmetric_key() (David Howells)  [Orabug: 18961720]  
  - PKCS#7: X.509 certificate issuer and subject are mandatory fields in the ASN.1 (David Howells)  [Orabug: 18961720]  
  - PKCS#7: Use x509_request_asymmetric_key() (David Howells)  [Orabug: 18961720]  
  - X.509: x509_request_asymmetric_keys() doesn't need string length arguments (David Howells)  [Orabug: 18961720]  
  - PKCS#7: fix sparse non static symbol warning (Wei Yongjun)  [Orabug: 18961720]  
  - PKCS#7: Missing inclusion of linux/err.h (David Howells)  [Orabug: 18961720]  
  - ima: define '.ima' as a builtin 'trusted' keyring (Mimi Zohar)  [Orabug: 18961720]  
  - KEYS: validate certificate trust only with builtin keys (Dmitry Kasatkin)  [Orabug: 18961720]  
  - KEYS: validate certificate trust only with selected key (Dmitry Kasatkin)  [Orabug: 18961720]  
  - KEYS: verify a certificate is signed by a 'trusted' key (Mimi Zohar)  [Orabug: 18961720]  
  - KEYS: make partial key id matching as a dedicated function (Dmitry Kasatkin)  [Orabug: 18961720]  
  - KEYS: Reinstate EPERM for a key type name beginning with a '.' (David Howells)  [Orabug: 18961720]  
  - KEYS: special dot prefixed keyring name bug fix (Mimi Zohar)  [Orabug: 18961720]  
  - pefile: Validate PKCS#7 trust chain (David Howells)  [Orabug: 18961720]  
  - pefile: Digest the PE binary and compare to the PKCS#7 data (David Howells)  [Orabug: 18961720]  
  - pefile: Handle pesign using the wrong OID (Vivek Goyal)  [Orabug: 18961720]  
  - pefile: Parse the "Microsoft individual code signing" data blob (David Howells)  [Orabug: 18961720]  
  - pefile: Parse the presumed PKCS#7 content of the certificate blob (David Howells)  [Orabug: 18961720]  
  - pefile: Strip the wrapper off of the cert data block (David Howells)  [Orabug: 18961720]  
  - pefile: Parse a PE binary to find a key and a signature contained therein (David Howells)  [Orabug: 18961720]  
  - Provide PE binary definitions (David Howells)  [Orabug: 18961720]  
  - KEYS: X.509: Fix a spelling mistake (David Howells)  [Orabug: 18961720]  
  - PKCS#7: Provide a key type for testing PKCS#7 (David Howells)  [Orabug: 18961720]  
  - PKCS#7: Find intersection between PKCS#7 message and known, trusted keys (David Howells)  [Orabug: 18961720]  
  - PKCS#7: Verify internal certificate chain (David Howells)  [Orabug: 18961720]  
  - PKCS#7: Find the right key in the PKCS#7 key list and verify the signature (David Howells)  [Orabug: 18961720]  
  - PKCS#7: Digest the data in a signed-data message (David Howells)  [Orabug: 18961720]  
  - PKCS#7: Implement a parser [RFC 2315] (David Howells)  [Orabug: 18961720]  
  - X.509: Export certificate parse and free functions (David Howells)  [Orabug: 18961720]  
  - X.509: Add bits needed for PKCS#7 (David Howells)  [Orabug: 18961720]  
  - x86/efi: Support initrd loaded above 4G (Yinghai Lu)  [Orabug: 18961720]  
  - x86, boot: Do not include boot.h in string.c (Vivek Goyal)  [Orabug: 18961720]  
  - x86, boot: Move memcmp() into string.h and string.c (Vivek Goyal)  [Orabug: 18961720]  
  - x86, boot: Create a separate string.h file to provide standard string functions (Vivek Goyal)  [Orabug: 18961720]  
  - kexec: add sysctl to disable kexec_load (Kees Cook)  [Orabug: 18961720]  
  - x86: Add xloadflags bit for EFI runtime support on kexec (Dave Young)  [Orabug: 18961720]  
  - x86/efi: Pass necessary EFI data for kexec via setup_data (Dave Young)  [Orabug: 18961720]  
  - efi: Export EFI runtime memory mapping to sysfs (Dave Young)  [Orabug: 18961720]  
  - efi: Export more EFI table variables to sysfs (Dave Young)  [Orabug: 18961720]  
  - x86/efi: Cleanup efi_enter_virtual_mode() function (Dave Young)  [Orabug: 18961720]  
  - x86/efi: Fix off-by-one bug in EFI Boot Services reservation (Dave Young)  [Orabug: 18961720]  
  - x86/efi: Add a wrapper function efi_map_region_fixed() (Dave Young)  [Orabug: 18961720]  
  - keys: change asymmetric keys to use common hash definitions (Dmitry Kasatkin)  [Orabug: 18961720]  
  - crypto: provide single place for hash algo information (Dmitry Kasatkin)  [Orabug: 18961720]  
  - KEYS: fix error return code in big_key_instantiate() (Wei Yongjun)  [Orabug: 18961720]  
  - KEYS: Fix keyring quota misaccounting on key replacement and unlink (David Howells)  [Orabug: 18961720]  
  - KEYS: Fix a race between negating a key and reading the error set (David Howells)  [Orabug: 18961720]  
  - KEYS: Make BIG_KEYS boolean (Josh Boyer)  [Orabug: 18961720]  
  - X.509: remove possible code fragility: enumeration values not handled (Antonio Alecrim Jr)  [Orabug: 18961720]  
  - X.509: add module description and license (Konstantin Khlebnikov)  [Orabug: 18961720]  
  - MPILIB: add module description and license (Konstantin Khlebnikov)  [Orabug: 18961720]  
  - KEYS: initialize root uid and session keyrings early (Mimi Zohar)  [Orabug: 18961720]  
  - KEYS: verify a certificate is signed by a 'trusted' key (Mimi Zohar)  [Orabug: 18961720]  
  - KEYS: Make the system 'trusted' keyring viewable by userspace (Mimi Zohar)  [Orabug: 18961720]  
  - KEYS: Set the asymmetric-key type default search method (David Howells)  [Orabug: 18961720]  
  - KEYS: Add a 'trusted' flag and a 'trusted only' flag (David Howells)  [Orabug: 18961720]  
  - KEYS: Separate the kernel signature checking keyring from module signing (David Howells)  [Orabug: 18961720]  
  - KEYS: Have make canonicalise the paths of the X.509 certs better to deduplicate (David Howells)  [Orabug: 18961720]  
  - KEYS: Load *.x509 files into kernel keyring (David Howells)  [Orabug: 18961720]  
  - X.509: Remove certificate date checks (David Howells)  [Orabug: 18961720]  
  - X.509: Handle certificates that lack an authorityKeyIdentifier field (David Howells)  [Orabug: 18961720]  
  - X.509: Check the algorithm IDs obtained from parsing an X.509 certificate (David Howells)  [Orabug: 18961720]  
  - X.509: Embed public_key_signature struct and create filler function (David Howells)  [Orabug: 18961720]  
  - X.509: struct x509_certificate needs struct tm declaring (David Howells)  [Orabug: 18961720]  
  - KEYS: Store public key algo ID in public_key_signature struct (David Howells)  [Orabug: 18961720]  
  - KEYS: Split public_key_verify_signature() and make available (David Howells)  [Orabug: 18961720]  
  - KEYS: Store public key algo ID in public_key struct (David Howells)  [Orabug: 18961720]  
  - KEYS: Move the algorithm pointer array from x509 to public_key.c (David Howells)  [Orabug: 18961720]  
  - KEYS: Rename public key parameter name arrays (David Howells)  [Orabug: 18961720]  
  - KEYS: Add per-user_namespace registers for persistent per-UID kerberos caches (Guangyu Sun)  [Orabug: 18961720]  
  - KEYS: Implement a big key type that can save to tmpfs (David Howells)  [Orabug: 18961720]  
  - KEYS: Expand the capacity of a keyring (David Howells)  [Orabug: 18961720]  
  - Add a generic associative array implementation. (David Howells)  [Orabug: 18961720]  
  - KEYS: Drop the permissions argument from __keyring_search_one() (David Howells)  [Orabug: 18961720]  
  - KEYS: Define a __key_get() wrapper to use rather than atomic_inc() (David Howells)  [Orabug: 18961720]  
  - KEYS: Search for auth-key by name rather than target key ID (David Howells)  [Orabug: 18961720]  
  - KEYS: Introduce a search context structure (David Howells)  [Orabug: 18961720]  
  - KEYS: Consolidate the concept of an 'index key' for key access (David Howells)  [Orabug: 18961720]  
  - KEYS: key_is_dead() should take a const key pointer argument (David Howells)  [Orabug: 18961720]  
  - KEYS: Use bool in make_key_ref() and is_key_possessed() (David Howells)  [Orabug: 18961720]  
  - KEYS: Skip key state checks when checking for possession (David Howells)  [Orabug: 18961720]  
  - userns: Avoid recursion in put_user_ns (Eric W. Biederman)  [Orabug: 18961720]  
  - x86/efi: Check krealloc return value (Borislav Petkov)  [Orabug: 18961720]  
  - x86/efi: Runtime services virtual mapping (Borislav Petkov)  [Orabug: 18961720]  
  - x86/mm/cpa: Map in an arbitrary pgd (Borislav Petkov)  [Orabug: 18961720]  
  - x86/mm/pageattr: Add last levels of error path (Borislav Petkov)  [Orabug: 18961720]  
  - x86/mm/pageattr: Add a PUD error unwinding path (Borislav Petkov)  [Orabug: 18961720]  
  - x86/mm/pageattr: Add a PTE pagetable populating function (Borislav Petkov)  [Orabug: 18961720]  
  - x86/mm/pageattr: Add a PMD pagetable populating function (Borislav Petkov)  [Orabug: 18961720]  
  - x86/mm/pageattr: Add a PUD pagetable populating function (Borislav Petkov)  [Orabug: 18961720]  
  - x86/mm/pageattr: Add a PGD pagetable populating function (Borislav Petkov)  [Orabug: 18961720]  
  - x86/mm/pageattr: Lookup address in an arbitrary PGD (Borislav Petkov)  [Orabug: 18961720]  
  - x86/efi: Simplify EFI_DEBUG (Borislav Petkov)  [Orabug: 18961720]  
  - efi: Generalize handle_ramdisks() and rename to handle_cmdline_files(). (Roy Franz)  [Orabug: 18961720]  
  - efi: Rename memory allocation/free functions (Roy Franz)  [Orabug: 18961720]  
  - efi: Add system table pointer argument to shared functions. (Roy Franz)  [Orabug: 18961720]  
  - efi: Move common EFI stub code from x86 arch code to common location (Roy Franz)  [Orabug: 18961720]  
  - efivars: Mark local function as static (Bojan Prtvar)  [Orabug: 18961720]  
  - pstore: Introduce new argument 'compressed' in the read callback (Aruna Balakrishnaiah)  [Orabug: 18961720]  
  - pstore: Add new argument 'compressed' in pstore write callback (Aruna Balakrishnaiah)  [Orabug: 18961720]  
  - efi-pstore: Read and write to the 'compressed' flag of pstore (Aruna Balakrishnaiah)  [Orabug: 18961720]  
  - x86: Don't clear olpc_ofw_header when sentinel is detected (Daniel Drake)  [Orabug: 18961720]  
  - efivars: check for EFI_RUNTIME_SERVICES (Matt Fleming)  [Orabug: 18961720]  
  - pstore: Pass header size in the pstore write callback (Aruna Balakrishnaiah)  [Orabug: 18961720]  
  - efivars: If pstore_register fails, free unneeded pstore buffer (Lenny Szubowicz)  [Orabug: 18961720]  
  - efi, pstore: Cocci spatch "memdup.spatch" (Thomas Meyer)  [Orabug: 18961720]  
  - efivar: fix oops in efivar_update_sysfs_entries() caused by memory reuse (Seiji Aguchi)  [Orabug: 18961720]  
  - efi: remove "kfree(NULL)" (Dan Carpenter)  [Orabug: 18961720]  
  - efi: locking fix in efivar_entry_set_safe() (Dan Carpenter)  [Orabug: 18961720]  
  - efi, pstore: Read data from variable store before memcpy() (Matt Fleming)  [Orabug: 18961720]  
  - efi, pstore: Remove entry from list when erasing (Matt Fleming)  [Orabug: 18961720]  
  - efi, pstore: Initialise 'entry' before iterating (Matt Fleming)  [Orabug: 18961720]  
  - efi: split efisubsystem from efivars (Tom Gundersen)  [Orabug: 18961720]  
  - efivarfs: Move to fs/efivarfs (Matt Fleming)  [Orabug: 18961720]  
  - efivars: Move pstore code into the new EFI directory (Matt Fleming)  [Orabug: 18961720]  
  - efivars: efivar_entry API (Matt Fleming)  [Orabug: 18961720]  
  - efivars: Keep a private global pointer to efivars (Matt Fleming)  [Orabug: 18961720]  
  - efi: move utf16 string functions to efi.h (Matt Fleming)  [Orabug: 18961720]  
  - efivars: Handle duplicate names from get_next_variable() (Matt Fleming)  [Orabug: 18961720]  
  - x86, doc: Be explicit about what the x86 struct boot_params requires (Peter Jones)  [Orabug: 18961720]  
  - x86: Don't clear efi_info even if the sentinel hits (Josh Boyer)  [Orabug: 18961720]  
  - export kernel_write(), convert open-coded instances (Al Viro)  [Orabug: 18961720]  
  - efi_pstore: Introducing workqueue updating sysfs (Seiji Aguchi)  [Orabug: 18961720]  
  - x86/mm: Fix boot crash with DEBUG_PAGE_ALLOC=y and more than 512G RAM (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Make sure to find a 2M free block for the first mapped area (Yinghai Lu)  [Orabug: 18961720]  
  - x86: Fix adjust_range_size_mask calling position (Yinghai Lu)  [Orabug: 18961720]  
  - x86, kdump: Change crashkernel_high/low= to crashkernel=,high/low (Yinghai Lu)  [Orabug: 18961720]  
  - x86, kdump: Retore crashkernel= to allocate under 896M (Yinghai Lu)  [Orabug: 18961720]  
  - x86, kdump: Set crashkernel_low automatically (Yinghai Lu)  [Orabug: 18961720]  
  - x86: Don't panic if can not alloc buffer for swiotlb (Yinghai Lu)  [Orabug: 18961720]  
  - mm: Add alloc_bootmem_low_pages_nopanic() (Yinghai Lu)  [Orabug: 18961720]  
  - x86, 64bit, mm: hibernate use generic mapping_init (Yinghai Lu)  [Orabug: 18961720]  
  - x86, 64bit, mm: Mark data/bss/brk to nx (Yinghai Lu)  [Orabug: 18961720]  
  - x86: Merge early kernel reserve for 32bit and 64bit (Yinghai Lu)  [Orabug: 18961720]  
  - x86: Add Crash kernel low reservation (Yinghai Lu)  [Orabug: 18961720]  
  - x86, kdump: Remove crashkernel range find limit for 64bit (Yinghai Lu)  [Orabug: 18961720]  
  - memblock: Add memblock_mem_size() (Yinghai Lu)  [Orabug: 18961720]  
  - x86, boot: Not need to check setup_header version for setup_data (Yinghai Lu)  [Orabug: 18961720]  
  - x86, boot: Update comments about entries for 64bit image (Yinghai Lu)  [Orabug: 18961720]  
  - x86, boot: Support loading bzImage, boot_params and ramdisk above 4G (Yinghai Lu)  [Orabug: 18961720]  
  - x86, kexec, 64bit: Only set ident mapping for ram. (Yinghai Lu)  [Orabug: 18961720]  
  - x86, kexec: Replace ident_mapping_init and init_level4_page (Yinghai Lu)  [Orabug: 18961720]  
  - x86, kexec: Set ident mapping for kernel that is above max_pfn (Yinghai Lu)  [Orabug: 18961720]  
  - x86, kexec: Remove 1024G limitation for kexec buffer on 64bit (Yinghai Lu)  [Orabug: 18961720]  
  - x86, boot: Move lldt/ltr out of 64bit code section (Yinghai Lu)  [Orabug: 18961720]  
  - x86, boot: Move verify_cpu.S and no_longmode down (Yinghai Lu)  [Orabug: 18961720]  
  - x86, boot: Pass cmd_line_ptr with unsigned long instead (Yinghai Lu)  [Orabug: 18961720]  
  - x86, boot: Move checking of cmd_line_ptr out of common path (Yinghai Lu)  [Orabug: 18961720]  
  - x86, boot: Add get_cmd_line_ptr() (Yinghai Lu)  [Orabug: 18961720]  
  - x86, boot: Sanitize boot_params if not zeroed on creation (H. Peter Anvin)  [Orabug: 18961720]  
  - x86: Add get_ramdisk_image/size() (Yinghai Lu)  [Orabug: 18961720]  
  - x86: Merge early_reserve_initrd for 32bit and 64bit (Yinghai Lu)  [Orabug: 18961720]  
  - x86, 64bit: Don't set max_pfn_mapped wrong value early on native path (Yinghai Lu)  [Orabug: 18961720]  
  - x86, 64bit: #PF handler set page to cover only 2M per #PF (Yinghai Lu)  [Orabug: 18961720]  
  - x86, 64bit: Use a #PF handler to materialize early mappings on demand (H. Peter Anvin)  [Orabug: 18961720]  
  - x86, realmode: Separate real_mode reserve and setup (Yinghai Lu)  [Orabug: 18961720]  
  - x86, 64bit, realmode: Use init_level4_pgt to set trampoline_pgd directly (Yinghai Lu)  [Orabug: 18961720]  
  - x86, 64bit: Copy struct boot_params early (Yinghai Lu)  [Orabug: 18961720]  
  - x86, 64bit, mm: Add generic kernel/ident mapping helper (Yinghai Lu)  [Orabug: 18961720]  
  - x86, realmode: Set real_mode permissions early (Yinghai Lu)  [Orabug: 18961720]  
  - x86, 64bit, mm: Make pgd next calculation consistent with pud/pmd (Yinghai Lu)  [Orabug: 18961720]  
  - x86: Factor out e820_add_kernel_range() (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Fix page table early allocation offset checking (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Let "memmap=" take more entries one time (Yinghai Lu)  [Orabug: 18961720]  
  - mm: Kill NO_BOOTMEM version free_all_bootmem_node() (Yinghai Lu)  [Orabug: 18961720]  
  - sparc, mm: Remove calling of free_all_bootmem_node() (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: kill numa_64.h (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: kill numa_free_all_bootmem() (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Use clamp_t() in init_range_memory_mapping (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Move after_bootmem to mm_internel.h (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Unifying after_bootmem for 32bit and 64bit (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: use limit_pfn for end pfn (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: use pfn instead of pos in split_mem_range (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: use PFN_DOWN in split_mem_range() (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: use round_up/down in split_mem_range() (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Add check before clear pte above max_low_pfn on 32bit (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Move function declaration into mm_internal.h (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: change low/hignmem_pfn_init to static on 32bit (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Move init_gbpages() out of setup.c (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Move back pgt_buf_* to mm/init.c (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: only call early_ioremap_page_table_range_init() once (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Add pointer about Xen mmu requirement for alloc_low_pages (Stefano Stabellini)  [Orabug: 18961720]  
  - x86, mm: Add alloc_low_pages(num) (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm, Xen: Remove mapping_pagetable_reserve() (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Move min_pfn_mapped back to mm/init.c (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Merge alloc_low_page between 64bit and 32bit (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Remove parameter in alloc_low_page for 64bit (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Remove early_memremap workaround for page table accessing on 64bit (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: setup page table in top-down (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Break down init_all_memory_mapping (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Don't clear page table if range is ram (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Use big page size for small memory range (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Align start address to correct big page size (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: relocate initrd under all mem for 64bit (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Only direct map addresses that are marked as E820_RAM (Jacob Shin)  [Orabug: 18961720]  
  - x86, mm: use pfn_range_is_mapped() with reserve_initrd (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: use pfn_range_is_mapped() with gart (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: use pfn_range_is_mapped() with CPA (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Fixup code testing if a pfn is direct mapped (Jacob Shin)  [Orabug: 18961720]  
  - x86, mm: if kernel .text .data .bss are not marked as E820_RAM, complain and fix (Jacob Shin)  [Orabug: 18961720]  
  - x86, mm: Set memblock initial limit to 1M (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Separate out calculate_table_space_size() (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Find early page table buffer together (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Change find_early_table_space() paramters (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Revert back good_end setting for 64bit (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Move init_memory_mapping calling out of setup.c (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Move down find_early_table_space() (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Split out split_mem_range from init_memory_mapping (Yinghai Lu)  [Orabug: 18961720]  
  - x86, mm: Add global page_size_mask and probe one time only (Yinghai Lu)  [Orabug: 18961720]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-81.el6uek]
changelog:
  - i40e: Bump version to 1.3.2 (Catherine Sullivan)  [Orabug: 20639907]  
  - i40e: Use new 40G speeds (Brian Maly)  [Orabug: 20639907]  
  - i40e: handle possible memory allocation failure (Jesse Brandeburg)  [Orabug: 20639907]  
  - i40e/i40evf: Save WR_CSR_PROT field from DEV/FUNC capabilities (Kevin Scott)  [Orabug: 20639907]  
  - i40e: enable user dump of internal hardware state (Jesse Brandeburg)  [Orabug: 20639907]  
  - i40e: print FCoE capability reported by the device function (Vasu Dev)  [Orabug: 20639907]  
  - i40e: For VF reset (VFR and VFLR) add some more delay (Anjali Singhai Jain)  [Orabug: 20639907]  
  - i40e: move VF notification routines up (Mitch Williams)  [Orabug: 20639907]  
  - i40e: notify VFs of link state (Mitch Williams)  [Orabug: 20639907]  
  - i40evf: remove aq_pending (Mitch Williams)  [Orabug: 20639907]  
  - i40e: Add support to program FDir SB rules for VF from PF through ethtool (Anjali Singhai Jain)  [Orabug: 20639907]  
  - i40evf: fix bad indentation (Mitch Williams)  [Orabug: 20639907]  
  - i40e: stop VF rings (Mitch Williams)  [Orabug: 20639907]  
  - i40e: Bump to version 1.3.1 (Catherine Sullivan)  [Orabug: 20639907]  
  - i40evf: Refactor VF RSS code (Anjali Singhai Jain)  [Orabug: 20639907]  
  - i40evf: protect VLAN filter list (Mitch Williams)  [Orabug: 20639907]  
  - i40e: Communicate VSI id in place of VSI index to the VFs (Anjali Singhai Jain)  [Orabug: 20639907]  
  - i40e: stop flow director on shutdown (Mitch Williams)  [Orabug: 20639907]  
  - 40e/i40evf: Set Ethernet protocol correctly when Tx VLAN offloads are disabled (Brian Maly)  [Orabug: 20639907]  
  - i40e: fix invalid void return in FCoE code (Jesse Brandeburg)  [Orabug: 20639907]  
  - i40e: Change some memcpys to struct assignments (Jesse Brandeburg)  [Orabug: 20639907]  
  - i40e: Print some more info to help figure out the cause of HMC error (Anjali Singhai Jain)  [Orabug: 20639907]  
  - i40e: validate VSI param from VFs (Mitch Williams)  [Orabug: 20639907]  
  - i40evf: Fix Outer UDP RX checksum code (Anjali Singhai Jain)  [Orabug: 20639907]  
  - Update of TLB shootdown code for UV3. (Cliff Wickman)  [Orabug: 20578414]  
  - x86: UV BAU: Avoid NULL pointer reference in ptc_seq_show (James Custer)  [Orabug: 20578414]  
  - x86: UV BAU: Increase maximum CPUs per socket/hub (James Custer)  [Orabug: 20578414]  
  - x86/UV: Set n_lshift based on GAM_GR_CONFIG MMR for UV3 (Dimitri Sivanich)  [Orabug: 20578414]  
  - x86/UV: Fix NULL pointer dereference in uv_flush_tlb_others() if the 'nobau' boot option is used (cpw)  [Orabug: 20578414]  
  - x86: Update UV3 hub revision ID (Russ Anderson)  [Orabug: 20578414]  
  - x86, uv, uv3: Trim MMR register definitions after code changes for SGI UV3 (Mike Travis)  [Orabug: 20578414]  
  - x86, uv, uv3: Check current gru hub support for SGI UV3 (Mike Travis)  [Orabug: 20578414]  
  - x86, uv, uv3: Update Time Support for SGI UV3 (Mike Travis)  [Orabug: 20578414]  
  - x86, uv, uv3: Update x2apic Support for SGI UV3 (Mike Travis)  [Orabug: 20578414]  
  - x86, uv, uv3: Update Hub Info for SGI UV3 (Mike Travis)  [Orabug: 20578414]  
  - x86, uv, uv3: Update ACPI Check to include SGI UV3 (Mike Travis)  [Orabug: 20578414]  
  - x86, uv, uv3: Update MMR register definitions for SGI Ultraviolet System 3 (UV3) (Mike Travis)  [Orabug: 20578414]  
  - xen/efi: Fix mismatch reference errors during build. (Marcos Matsunaga)  [Orabug: 20951518]  
  - PCI: Restore detection of read-only BARs (Myron Stowe)  [Orabug: 21037617]  
  - PCI: Add informational printk for invalid BARs (Myron Stowe)  [Orabug: 21037617]  
  - PCI: Handle read-only BARs on AMD CS553x devices (Myron Stowe)  [Orabug: 21037617]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-80.el6uek]
changelog:
  - dtrace: use strnlen_user() to get the length of env vars and cmdline args (Kris Van Hees)  [Orabug: 20468084]  
  - scsi: storvsc: Set the tablesize based on the information given by the host (K. Y. Srinivasan)  [Orabug: 21027987]  
  - Drivers: hv: vmbus: Support a vmbus API for efficiently sending page arrays (K. Y. Srinivasan)  [Orabug: 21027987]  
  - scsi: storvsc: Don't assume that the scatterlist is not chained (K. Y. Srinivasan)  [Orabug: 21027987]  
  - scsi: storvsc: Fix a bug in copy_from_bounce_buffer() (K. Y. Srinivasan)  [Orabug: 21027987]  
  - scsi: storvsc: Retrieve information about the capability of the target (K. Y. Srinivasan)  [Orabug: 21027987]  
  - scsi: storvsc: Always send on the selected outgoing channel (K. Y. Srinivasan)  [Orabug: 21027987]  
  - scsi: storvsc: Size the queue depth based on the ringbuffer size (K. Y. Srinivasan)  [Orabug: 21027987]  
  - scsi: storvsc: Increase the ring buffer size (K. Y. Srinivasan)  [Orabug: 21027987]  
  - hpsa: correct compiler warnings introduced by hpsa-add-local-workqueue patch (Don Brace)  [Orabug: 20910674]  
  - hpsa: Use local workqueues instead of system workqueues (Don Brace)  [Orabug: 20910674]  
  - hpsa: add in P840ar controller model name (Don Brace)  [Orabug: 20910674]  
  - hpsa: add in gen9 controller model names (Don Brace)  [Orabug: 20910674]  
  - hpsa: detect and report failures changing controller transport modes (Robert Elliott)  [Orabug: 20910674]  
  - hpsa: shorten the wait for the CISS doorbell mode change ack (Robert Elliott)  [Orabug: 20910674]  
  - hpsa: refactor duplicated scan completion code into a new routine (Webb Scales)  [Orabug: 20910674]  
  - hpsa: move SG descriptor set-up out of hpsa_scatter_gather() (Webb Scales)  [Orabug: 20910674]  
  - hpsa: do not use function pointers in fast path command submission (Stephen Cameron)  [Orabug: 20910674]  
  - hpsa: print CDBs instead of kernel virtual addresses for uncommon errors (Stephen Cameron)  [Orabug: 20910674]  
  - hpsa: do not use a void pointer for scsi_cmd field of struct CommandList (Stephen Cameron)  [Orabug: 20910674]  
  - hpsa: return failed from device reset/abort handlers (Don Brace)  [Orabug: 20910674]  
  - hpsa: check for ctlr lockup after command allocation in main io path (Stephen Cameron)  [Orabug: 20910674]  
  - hpsa: guard against overflowing raid map array (Stephen Cameron)  [Orabug: 20910674]  
  - hpsa: do not ack controller events on controllers that do not support it (Stephen Cameron)  [Orabug: 20910674]  
  - hpsa: remove incorrect BUG_ONs checking for raid offload enable (Stephen Cameron)  [Orabug: 20910674]  
  - hpsa: do not check for msi(x) in interrupt_pending (Stephen Cameron)  [Orabug: 20910674]  
  - hpsa: slightly optimize SA5_performant_completed (Don Brace)  [Orabug: 20910674]  
  - hpsa: count passthru cmds with atomics, not a spin locked int (Don Brace)  [Orabug: 20910674]  
  - hpsa: optimize cmd_alloc function by remembering last allocation (Robert Elliott)  [Orabug: 20910674]  
  - hpsa: fix race between abort handler and main i/o path (Webb Scales)  [Orabug: 20910674]  
  - hpsa: honor queue depth of physical devices (Don Brace)  [Orabug: 20910674]  
  - hpsa: use workqueue to resubmit failed ioaccel commands (Don Brace)  [Orabug: 20910674]  
  - hpsa: factor out hpsa_ciss_submit function (Stephen Cameron)  [Orabug: 20910674]  
  - hpsa: do not request device rescan on every ioaccel path error (Stephen Cameron)  [Orabug: 20910674]  
  - hpsa: do not queue commands internally in driver (Don Brace)  [Orabug: 20910674]  
  - hpsa: get rid of cmd_special_alloc and cmd_special_free (Stephen Cameron)  [Orabug: 20910674]  
  - hpsa: reserve some commands for use by driver (Stephen Cameron)  [Orabug: 20910674]  
  - hpsa: avoid unneccesary calls to resource freeing functions (Robert Elliott)  [Orabug: 20910674]  
  - hpsa: fix memory leak in hpsa_alloc_cmd_pool (Robert Elliott)  [Orabug: 20910674]  
  - hpsa: report allocation failures while allocating SG chain blocks (Robert Elliott)  [Orabug: 20910674]  
  - hpsa: pass error from pci_set_consistent_dma_mask from hpsa_message (Robert Elliott)  [Orabug: 20910674]  
  - hpsa: rename hpsa_request_irq to hpsa_request_irqs (Robert Elliott)  [Orabug: 20910674]  
  - hpsa: report failure to ioremap config table (Robert Elliott)  [Orabug: 20910674]  
  - hpsa: trivial message and comment clean ups (Stephen Cameron)  [Orabug: 20910674]  
  - hpsa: refactor hpsa_find_board_params() to encapsulate legacy test (Webb Scales)  [Orabug: 20910674]  
  - hpsa: downgrade the Waiting for no-op print to dev_info (Robert Elliott)  [Orabug: 20910674]  
  - hpsa: propagate return value from board ID lookup (Robert Elliott)  [Orabug: 20910674]  
  - hpsa: propagate hard_reset failures in reset_devices mode (Robert Elliott)  [Orabug: 20910674]  
  - hpsa: remove 0x from queue depth print which is in decimal (Robert Elliott)  [Orabug: 20910674]  
  - hpsa: notice all request_irq errors (Robert Elliott)  [Orabug: 20910674]  
  - hpsa: Fix -Wunused-but-set-variable warning (Fabian Frederick)  [Orabug: 20910674]  
  - hpsa: rename free_irqs to hpsa_free_irqs (Robert Elliott)  [Orabug: 20910674]  
  - hpsa: adjust RAID-1, RAID-1ADM, and RAID-6 names (Robert Elliott)  [Orabug: 20910674]  
  - hpsa: change how SA controllers are reset (Don Brace)  [Orabug: 20910674]  
  - hpsa: turn off interrupts when kdump starts (Tomas Henzl)  [Orabug: 20910674]  
  - hpsa: fix memory leak in kdump hard reset (Tomas Henzl)  [Orabug: 20910674]  
  - hpsa: correct endian sparse warnings (Don Brace)  [Orabug: 20910674]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-79.el6uek]
changelog:
  - Revert "Implement support for wire-only DIF devices" (Vaughan Cao)  [Orabug: 20952398]  
  - xen-netfront: use correct linear area after linearizing an skb (David Vrabel)  [Orabug: 20903396]  
  - x86, sched: Add new topology for multi-NUMA-node CPUs (Dave Hansen)  [Orabug: 20825479]  
  - sched: Rework sched_domain topology definition (Vincent Guittot)  [Orabug: 20825479]  
  - x86 thermal: Disable power limit notification interrupt by default (Fenghua Yu)  [Orabug: 20808816]  
  - x86 thermal: Delete power-limit-notification console messages (Fenghua Yu)  [Orabug: 20808816]  
  - vfs: allow umount to handle mountpoints without revalidating them (Jeff Layton)  [Orabug: 20425402]  
  - ptp: dynamic allocation of PHC char devices (Jiri Benc)  [Orabug: 20305451]  
  - sched: Prevent divide by zero when cpu power calculation is 0 (Todd Vierling)  [Orabug: 17936428]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-78.el6uek]
changelog:
  - ceph: fix the unused varibale warnings (Santosh Shilimkar)  [Orabug: 20304006]  
  - vfs: call d_op->d_prune() before unhashing dentry (Yan, Zheng)  [Orabug: 20304006]  
  - ceph: fix kick_requests() (Yan, Zheng)  [Orabug: 20304006]  
  - ceph: fix sizeof(struct tYpO *) typo (Ilya Dryomov)  [Orabug: 20304006]  
  - ceph: remove redundant memset(0) (Ilya Dryomov)  [Orabug: 20304006]  
  - ceph: replace comma with a semicolon (Himangi Saraogi)  [Orabug: 20304006]  
  - libceph: do not hard code max auth ticket len (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: add process_one_ticket() helper (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: gracefully handle large reply messages from the mon (Sage Weil)  [Orabug: 20304006]  
  - libceph: set last_piece in ceph_msg_data_pages_cursor_init() correctly (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: remove extra newlines from rbd_warn() messages (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: allocate img_request with GFP_NOIO instead GFP_ATOMIC (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: rework rbd_request_fn() (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: take snap_id into account when reading in parent info (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: do not read in parent info before snap context (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: update mapping size only on refresh (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: harden rbd_dev_refresh() and callers a bit (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: split rbd_dev_spec_update() into two functions (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: remove unnecessary asserts in rbd_dev_image_probe() (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: introduce rbd_dev_header_info() (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: show the entire chain of parent images (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: use rbd_segment_name_free() instead of kfree() (Himangi Saraogi)  [Orabug: 20304006]  
  - rbd: do not leak image_id in rbd_dev_v2_parent_info() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: drop osd ref when canceling con work (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: nuke ceph_osdc_unregister_linger_request() (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: use rbd_obj_watch_request_helper() helper (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: add rbd_obj_watch_request_helper() helper (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: rbd_obj_request_wait() should cancel the request if interrupted (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: introduce ceph_osdc_cancel_request() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: fix linger request check in __unregister_request() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: unregister only registered linger requests (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: harden ceph_osdc_request_release() a bit (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: move and add dout()s to ceph_osdc_request_{get,put}() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: move and add dout()s to ceph_msg_{get,put}() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: add maybe_move_osd_to_lru() and switch to it (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: rename ceph_osd_request::r_linger_osd to r_linger_osd_item (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: support CEPH_FEATURE_EXPORT_PEER (Yan, Zheng)  [Orabug: 20304006]  
  - block: rbd: use NULL instead of 0 (Jingoo Han)  [Orabug: 20304006]  
  - uek-rpm: ol6/7: config: enable CEPH_LIB_USE_DNS_RESOLVER (Santosh Shilimkar)  [Orabug: 20304006]  
  - rbd: handle parent_overlap on writes correctly (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: only set disk to read-only once (Josh Durgin)  [Orabug: 20304006]  
  - rbd: move calls that may sleep out of spin lock range (Josh Durgin)  [Orabug: 20304006]  
  - rbd: add ioctl for rbd (Guangliang Zhao)  [Orabug: 20304006]  
  - rbd: fix ida/idr memory leak (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: use reference counts for image requests (Alex Elder)  [Orabug: 20304006]  
  - rbd: fix osd_request memory leak in __rbd_dev_header_watch_sync() (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: make sure we have latest osdmap on 'rbd map' (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: add ceph_monc_wait_osdmap() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: mon_get_version request infrastructure (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: recognize poolop requests in debugfs (Ilya Dryomov)  [Orabug: 20304006]  
  - ceph: remove bogus extern (stephen hemminger)  [Orabug: 20304006]  
  - crush: decode and initialize chooseleaf_vary_r (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: fix non-default values check in apply_primary_affinity() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: dump pool {read,write}_tier to debugfs (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: output primary affinity values on osdmap updates (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: enable PRIMARY_AFFINITY feature bit (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: redo ceph_calc_pg_primary() in terms of ceph_calc_pg_acting() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: add support for osd primary affinity (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: add support for primary_temp mappings (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: return primary from ceph_calc_pg_acting() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: switch ceph_calc_pg_acting() to new helpers (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: introduce apply_temps() helper (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: introduce pg_to_raw_osds() and raw_to_up_osds() helpers (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: ceph_can_shift_osds(pool) and pool type defines (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: ceph_osd_{exists,is_up,is_down}(osd) definitions (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: enable OSDMAP_ENC feature bit (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: primary_affinity decode bits (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: primary_affinity infrastructure (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: primary_temp decode bits (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: primary_temp infrastructure (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: generalize ceph_pg_mapping (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: introduce get_osdmap_client_data_v() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: introduce decode{,_new}_pg_temp() and switch to them (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: switch osdmap_set_max_osd() to krealloc() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: introduce decode{,_new}_pools() and switch to them (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: rename __decode_pool{,_names}() to decode_pool{,_names}() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: fix and clarify ceph_decode_need() sizes (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: nuke bogus encoding version check in osdmap_apply_incremental() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: fixup error handling in osdmap_apply_incremental() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: fix crush_decode() call site in osdmap_decode() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: check length of osdmap osd arrays (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: safely decode max_osd value in osdmap_decode() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: fixup error handling in osdmap_decode() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: split osdmap allocation and decode steps (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: dump osdmap and enhance output on decode errors (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: dump pg_temp mappings to debugfs (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: do not prefix osd lines with 	 in debugfs output (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: refer to osdmap directly in osdmap_show() (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: support chooseleaf_vary_r tunable (tunables3) by default (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: add SET_CHOOSELEAF_VARY_R step (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: add chooseleaf_vary_r tunable (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: allow crush rules to set (re)tries counts to 0 (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: fix off-by-one errors in total_tries refactor (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: fix oops in ceph_msg_data_{pages,pagelist}_advance() (Yan, Zheng)  [Orabug: 20304006]  
  - rbd: prefix rbd writes with CEPH_OSD_OP_SETALLOCHINT osd op (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: num_ops parameter for rbd_osd_req_create() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: bump CEPH_OSD_MAX_OP to 3 (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: add support for CEPH_OSD_OP_SETALLOCHINT osd op (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: encode CEPH_OSD_OP_FLAG_* op flags (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: fix error paths in rbd_img_request_fill() (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: remove out_partial label in rbd_img_request_fill() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: a per-osdc crush scratch buffer (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: drop an unsafe assertion (Alex Elder)  [Orabug: 20304006]  
  - libceph: take map_sem for read in handle_reply() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: factor out logic from ceph_osdc_start_request() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: fix error handling in ceph_osdc_init() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: support CEPH_FEATURE_OSD_CACHEPOOL feature (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: follow redirect replies from osds (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: rename ceph_osd_request::r_{oloc,oid} to r_base_{oloc,oid} (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: follow {read,write}_tier fields on osd request submission (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: add ceph_pg_pool_by_id() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: CEPH_OSD_FLAG_* enum update (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: replace ceph_calc_ceph_pg() with ceph_oloc_oid_to_pg() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: introduce and start using oid abstraction (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: rename MAX_OBJ_NAME_SIZE to CEPH_MAX_OID_NAME_LEN (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: move ceph_file_layout helpers to ceph_fs.h (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: start using oloc abstraction (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: dout() is missing a newline (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: add ceph_kv{malloc,free}() and switch to them (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: fix preallocation check in get_reply() (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: rename front to front_len in get_reply() (Josh Durgin)  [Orabug: 20304006]  
  - libceph: rename ceph_msg::front_max to front_alloc_len (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: use CEPH_MON_PORT when the specified port is 0 (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: support new indep mode and SET_* steps (crush v2) by default (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: fix crush_choose_firstn comment (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: attempts -> tries (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: add set_choose_local_[fallback_]tries steps (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: generalize descend_once (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: CHOOSE_LEAF -> CHOOSELEAF throughout (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: add SET_CHOOSE_TRIES rule step (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: apply chooseleaf_tries to firstn mode too (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: new SET_CHOOSE_LEAF_TRIES command (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: pass parent r value for indep call (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: clarify numrep vs endpos (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: strip firstn conditionals out of crush_choose, rename (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: add note about r in recursive choose (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: use breadth-first search for indep mode (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: return CRUSH_ITEM_UNDEF for failed placements with indep (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: eliminate CRUSH_MAX_SET result size limitation (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: fix some comments (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: reduce scope of some local variables (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: factor out (trivial) crush_destroy_rule() (Ilya Dryomov)  [Orabug: 20304006]  
  - crush: pass weight vector size to map function (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: update ceph_features.h (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: all features fields must be u64 (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: tear down watch request if rbd_dev_device_setup() fails (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: introduce rbd_dev_header_unwatch_sync() and switch to it (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: enable extended devt in single-major mode (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: add support for single-major device number allocation scheme (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: add 'minor' sysfs rbd device attribute (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: switch to ida for rbd id assignments (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: refactor rbd_init() a bit (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: tweak "loaded" message and module description (Ilya Dryomov)  [Orabug: 20304006]  
  - rbd: rbd_device::dev_id is an int, format it as such (Ilya Dryomov)  [Orabug: 20304006]  
  - libceph: block I/O when PAUSE or FULL osd map flags are set (Josh Durgin)  [Orabug: 20304006]  
  - ceph: Add necessary clean up if invalid reply received in handle_reply() (Li Wang)  [Orabug: 20304006]  
  - rbd: fix error handling from rbd_snap_name() (Josh Durgin)  [Orabug: 20304006]  
  - rbd: ignore unmapped snapshots that no longer exist (Josh Durgin)  [Orabug: 20304006]  
  - rbd: fix use-after free of rbd_dev->disk (Josh Durgin)  [Orabug: 20304006]  
  - rbd: make rbd_obj_notify_ack() synchronous (Josh Durgin)  [Orabug: 20304006]  
  - rbd: complete notifies before cleaning up osd_client and rbd_dev (Josh Durgin)  [Orabug: 20304006]  
  - libceph: add function to ensure notifies are complete (Josh Durgin)  [Orabug: 20304006]  
  - rbd: fix null dereference in dout (Josh Durgin)  [Orabug: 20304006]  
  - rbd: fix buffer size for writes to images with snapshots (Josh Durgin)  [Orabug: 20304006]  
  - libceph: create_singlethread_workqueue() doesn't return ERR_PTRs (Dan Carpenter)  [Orabug: 20304006]  
  - libceph: fix error handling in handle_reply() (Dan Carpenter)  [Orabug: 20304006]  
  - libceph: call r_unsafe_callback when unsafe reply is received (Yan, Zheng)  [Orabug: 20304006]  
  - rbd: fix a couple warnings (Sage Weil)  [Orabug: 20304006]  
  - libceph: fix truncate size calculation (Yan, Zheng)  [Orabug: 20304006]  
  - libceph: fix safe completion (Yan, Zheng)  [Orabug: 20304006]  
  - rbd: take a little credit (Alex Elder)  [Orabug: 20304006]  
  - rbd: use rwsem to protect header updates (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't hold ctl_mutex to get/put device (Alex Elder)  [Orabug: 20304006]  
  - rbd: protect against concurrent unmaps (Alex Elder)  [Orabug: 20304006]  
  - rbd: set removing flag while holding list lock (Alex Elder)  [Orabug: 20304006]  
  - libceph: print more info for short message header (Alex Elder)  [Orabug: 20304006]  
  - rbd: protect against duplicate client creation (Alex Elder)  [Orabug: 20304006]  
  - rbd: clean up a few things in the refresh path (Alex Elder)  [Orabug: 20304006]  
  - rbd: flush dcache after zeroing page data (Alex Elder)  [Orabug: 20304006]  
  - libceph: add lingering request reference when registered (Alex Elder)  [Orabug: 20304006]  
  - rbd: drop original request earlier for existence check (Alex Elder)  [Orabug: 20304006]  
  - rbd: Use min_t() to fix comparison of distinct pointer types warning (Geert Uytterhoeven)  [Orabug: 20304006]  
  - rbd: fix I/O error propagation for reads (Josh Durgin)  [Orabug: 20304006]  
  - libceph: use pg_num_mask instead of pgp_num_mask for pg.seed calc (Sage Weil)  [Orabug: 20304006]  
  - libceph: unregister request in __map_request failed and nofail == false (majianpeng)  [Orabug: 20304006]  
  - libceph: fix invalid unsigned->signed conversion for timespec encoding (Josh Durgin)  [Orabug: 20304006]  
  - ceph: fix sleeping function called from invalid context. (majianpeng)  [Orabug: 20304006]  
  - rbd: send snapshot context with writes (Josh Durgin)  [Orabug: 20304006]  
  - rbd: fetch object order before using it (Josh Durgin)  [Orabug: 20304006]  
  - rbd: use the correct length for format 2 object names (Josh Durgin)  [Orabug: 20304006]  
  - rbd: fix cleanup in rbd_add() (Alex Elder)  [Orabug: 20304006]  
  - ceph: ceph_pagelist_append might sleep while atomic (Jim Schutt)  [Orabug: 20304006]  
  - ceph: add cpu_to_le32() calls when encoding a reconnect capability (Jim Schutt)  [Orabug: 20304006]  
  - rbd: re-submit flattened write request (part 2) (Alex Elder)  [Orabug: 20304006]  
  - rbd: re-submit write request for flattened clone (Alex Elder)  [Orabug: 20304006]  
  - rbd: re-submit read request for flattened clone (Alex Elder)  [Orabug: 20304006]  
  - rbd: detect when clone image is flattened (Alex Elder)  [Orabug: 20304006]  
  - rbd: reference count parent requests (Alex Elder)  [Orabug: 20304006]  
  - rbd: define parent image request routines (Alex Elder)  [Orabug: 20304006]  
  - rbd: define rbd_dev_unparent() (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't release write request until necessary (Alex Elder)  [Orabug: 20304006]  
  - rbd: get parent info on refresh (Alex Elder)  [Orabug: 20304006]  
  - rbd: ignore zero-overlap parent (Alex Elder)  [Orabug: 20304006]  
  - rbd: support reading parent page data for writes (Alex Elder)  [Orabug: 20304006]  
  - rbd: fix parent request size assumption (Alex Elder)  [Orabug: 20304006]  
  - libceph: init sent and completed when starting (Alex Elder)  [Orabug: 20304006]  
  - rbd: kill rbd_img_request_get() (Alex Elder)  [Orabug: 20304006]  
  - rbd: only set up watch for mapped images (Alex Elder)  [Orabug: 20304006]  
  - rbd: set mapping read-only flag in rbd_add() (Alex Elder)  [Orabug: 20304006]  
  - rbd: support reading parent page data (Alex Elder)  [Orabug: 20304006]  
  - rbd: fix an incorrect assertion condition (Alex Elder)  [Orabug: 20304006]  
  - rbd: define rbd_dev_v2_header_info() (Alex Elder)  [Orabug: 20304006]  
  - rbd: get rid of trivial v1 header wrappers (Alex Elder)  [Orabug: 20304006]  
  - rbd: simplify rbd_dev_v1_probe() (Alex Elder)  [Orabug: 20304006]  
  - rbd: update in-core header directly (Alex Elder)  [Orabug: 20304006]  
  - rbd: refactor rbd_header_from_disk() (Alex Elder)  [Orabug: 20304006]  
  - rbd: zero format 1 header structure earlier (Alex Elder)  [Orabug: 20304006]  
  - rbd: set the mapping size and features later (Alex Elder)  [Orabug: 20304006]  
  - rbd: always set read-only flag in rbd_add() (Alex Elder)  [Orabug: 20304006]  
  - rbd: kill rbd_dev_clear_mapping() (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't look up snapshot id in rbd_dev_mapping_set() (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't print warning if not mapping a parent (Alex Elder)  [Orabug: 20304006]  
  - rbd: kill rbd_update_mapping_size() (Alex Elder)  [Orabug: 20304006]  
  - rbd: update capacity in rbd_dev_refresh() (Alex Elder)  [Orabug: 20304006]  
  - rbd: revalidate only for mapping size changes (Alex Elder)  [Orabug: 20304006]  
  - rbd: fix leak of format 2 snapshot context (Alex Elder)  [Orabug: 20304006]  
  - rbd: fix image request leak on parent read (Alex Elder)  [Orabug: 20304006]  
  - libceph: use slab cache for osd client requests (Alex Elder)  [Orabug: 20304006]  
  - libceph: allocate ceph message data with a slab allocator (Alex Elder)  [Orabug: 20304006]  
  - libceph: allocate ceph messages with a slab allocator (Alex Elder)  [Orabug: 20304006]  
  - rbd: allocate image object names with a slab allocator (Alex Elder)  [Orabug: 20304006]  
  - rbd: allocate object requests with a slab allocator (Alex Elder)  [Orabug: 20304006]  
  - rbd: allocate name separate from obj_request (Alex Elder)  [Orabug: 20304006]  
  - rbd: allocate image requests with a slab allocator (Alex Elder)  [Orabug: 20304006]  
  - rbd: use binary search for snapshot lookup (Alex Elder)  [Orabug: 20304006]  
  - rbd: clear EXISTS flag if mapped snapshot disappears (Alex Elder)  [Orabug: 20304006]  
  - rbd: kill off the snapshot list (Alex Elder)  [Orabug: 20304006]  
  - rbd: define rbd_snap_size() and rbd_snap_features() (Alex Elder)  [Orabug: 20304006]  
  - rbd: use snap_id not index to look up snap info (Alex Elder)  [Orabug: 20304006]  
  - rbd: look up snapshot name in names buffer (Alex Elder)  [Orabug: 20304006]  
  - rbd: drop obj_request->version (Alex Elder)  [Orabug: 20304006]  
  - rbd: drop rbd_obj_method_sync() version parameter (Alex Elder)  [Orabug: 20304006]  
  - rbd: more version parameter removal (Alex Elder)  [Orabug: 20304006]  
  - rbd: get rid of some version parameters (Alex Elder)  [Orabug: 20304006]  
  - rbd: stop tracking header object version (Alex Elder)  [Orabug: 20304006]  
  - rbd: snap names are pointer to constant data (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't revalidate so much (Alex Elder)  [Orabug: 20304006]  
  - rbd: fix up the layering warning message (Alex Elder)  [Orabug: 20304006]  
  - ceph: use ceph_create_snap_context() (Alex Elder)  [Orabug: 20304006]  
  - libceph: create source file "net/ceph/snapshot.c" (Alex Elder)  [Orabug: 20304006]  
  - rbd: set up devices only for mapped images (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't have device release destroy rbd_dev (Alex Elder)  [Orabug: 20304006]  
  - rbd: define rbd_dev_unprobe() (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't destroy rbd_dev in device release function (Alex Elder)  [Orabug: 20304006]  
  - rbd: drop module later (Alex Elder)  [Orabug: 20304006]  
  - rbd: set up watch in rbd_dev_image_probe() (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't bother checking whether order changes (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't clean up watch in device release function (Alex Elder)  [Orabug: 20304006]  
  - rbd: define rbd_header_name() (Alex Elder)  [Orabug: 20304006]  
  - rbd: move more initialization into rbd_dev_image_probe() (Alex Elder)  [Orabug: 20304006]  
  - rbd: probe for the parent earlier (Alex Elder)  [Orabug: 20304006]  
  - rbd: remove parent devices on probe error (Alex Elder)  [Orabug: 20304006]  
  - rbd: fix rbd_dev_remove_parent() (Alex Elder)  [Orabug: 20304006]  
  - rbd: kill __rbd_remove() (Alex Elder)  [Orabug: 20304006]  
  - rbd: set mapping info earlier (Alex Elder)  [Orabug: 20304006]  
  - rbd: encapsulate removing parent devices (Alex Elder)  [Orabug: 20304006]  
  - rbd: encapsulate probing for parent devices (Alex Elder)  [Orabug: 20304006]  
  - rbd: defer setting disk capacity (Alex Elder)  [Orabug: 20304006]  
  - rbd: only set device exists flag when ready (Alex Elder)  [Orabug: 20304006]  
  - rbd: fix up some sysfs stuff (Alex Elder)  [Orabug: 20304006]  
  - rbd: fix a bug in resizing a mapping (Alex Elder)  [Orabug: 20304006]  
  - rbd: refactor rbd_dev_probe_update_spec() (Alex Elder)  [Orabug: 20304006]  
  - rbd: rename rbd_dev_probe() (Alex Elder)  [Orabug: 20304006]  
  - rbd: make rbd_dev_destroy() match rbd_dev_create() (Alex Elder)  [Orabug: 20304006]  
  - rbd: define rbd snap context routines (Alex Elder)  [Orabug: 20304006]  
  - rbd: use rbd_warn(), not WARN_ON() (Alex Elder)  [Orabug: 20304006]  
  - rbd: move stripe_unit and stripe_count into header (Alex Elder)  [Orabug: 20304006]  
  - rbd: make rbd spec names pointer to const (Alex Elder)  [Orabug: 20304006]  
  - rbd: set snapshot id in rbd_dev_probe_update_spec() (Alex Elder)  [Orabug: 20304006]  
  - rbd: have snap_by_name() return a snapshot (Alex Elder)  [Orabug: 20304006]  
  - rbd: fix image id leak in initial probe (Alex Elder)  [Orabug: 20304006]  
  - rbd: have rbd_dev_image_id() set format 1 image id (Alex Elder)  [Orabug: 20304006]  
  - rbd: avoid dropping extra reference in rbd_free_disk() (Alex Elder)  [Orabug: 20304006]  
  - rbd: use rbd_obj_method_sync() return value (Alex Elder)  [Orabug: 20304006]  
  - rbd: fix leak of format 2 snapshot names (Alex Elder)  [Orabug: 20304006]  
  - rbd: rename __rbd_add_snap_dev() (Alex Elder)  [Orabug: 20304006]  
  - rbd: only update values on snap_info success (Alex Elder)  [Orabug: 20304006]  
  - rbd: make snap_size order parameter optional (Alex Elder)  [Orabug: 20304006]  
  - rbd: fix leak of snapshots during initial probe (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't create sysfs entries for non-mapped snapshots (Alex Elder)  [Orabug: 20304006]  
  - libceph: fix byte order mismatch (Alex Elder)  [Orabug: 20304006]  
  - rbd: activate support for layered images (Alex Elder)  [Orabug: 20304006]  
  - rbd: get and check striping parameters (Alex Elder)  [Orabug: 20304006]  
  - rbd: have rbd_obj_method_sync() return transfer count (Alex Elder)  [Orabug: 20304006]  
  - rbd: void data pointers for rbd_obj_method_sync() (Alex Elder)  [Orabug: 20304006]  
  - rbd: give rbd_obj_read_sync() buffer void type (Alex Elder)  [Orabug: 20304006]  
  - libceph: validate timespec conversions (Alex Elder)  [Orabug: 20304006]  
  - libceph: add signed type limits (Alex Elder)  [Orabug: 20304006]  
  - rbd: enforce parent overlap (Alex Elder)  [Orabug: 20304006]  
  - rbd: issue a copyup for layered writes (Alex Elder)  [Orabug: 20304006]  
  - rbd: implement full object parent reads (Alex Elder)  [Orabug: 20304006]  
  - rbd: revalidate_disk upon rbd resize (Laurent Barbe)  [Orabug: 20304006]  
  - rbd: support page array image requests (Alex Elder)  [Orabug: 20304006]  
  - rbd: define zero_pages() (Alex Elder)  [Orabug: 20304006]  
  - rbd: encapsulate submission of image object requests (Alex Elder)  [Orabug: 20304006]  
  - rbd: define separate read and write format funcs (Alex Elder)  [Orabug: 20304006]  
  - libceph: support pages for class request data (Alex Elder)  [Orabug: 20304006]  
  - libceph: fix two messenger bugs (Alex Elder)  [Orabug: 20304006]  
  - rbd: issue stat request before layered write (Alex Elder)  [Orabug: 20304006]  
  - rbd: add target object existence flags (Alex Elder)  [Orabug: 20304006]  
  - rbd: always check IMG_DATA flag (Alex Elder)  [Orabug: 20304006]  
  - rbd: adjust image object request ref counting (Alex Elder)  [Orabug: 20304006]  
  - libceph: support raw data requests (Alex Elder)  [Orabug: 20304006]  
  - libceph: clean up osd data field access functions (Alex Elder)  [Orabug: 20304006]  
  - libceph: kill off osd data write_request parameters (Alex Elder)  [Orabug: 20304006]  
  - ceph: fix printk format warnings in file.c (Randy Dunlap)  [Orabug: 20304006]  
  - ceph: fix race between writepages and truncate (Yan, Zheng)  [Orabug: 20304006]  
  - ceph: apply write checks in ceph_aio_write (Yan, Zheng)  [Orabug: 20304006]  
  - ceph: take i_mutex before getting Fw cap (Yan, Zheng)  [Orabug: 20304006]  
  - libceph: change how "safe" callback is used (Alex Elder)  [Orabug: 20304006]  
  - ceph: let osd client clean up for interrupted request (Alex Elder)  [Orabug: 20304006]  
  - ceph: fix symlink inode operations (Yan, Zheng)  [Orabug: 20304006]  
  - ceph: Use pseudo-random numbers to choose mds (Sam Lang)  [Orabug: 20304006]  
  - rbd: implement layered reads (Alex Elder)  [Orabug: 20304006]  
  - rbd: probe the parent of an image if present (Alex Elder)  [Orabug: 20304006]  
  - rbd: add an object request flag for image data objects (Alex Elder)  [Orabug: 20304006]  
  - rbd: define an rbd object request flags field (Alex Elder)  [Orabug: 20304006]  
  - rbd: encapsulate image object end request handling (Alex Elder)  [Orabug: 20304006]  
  - rbd: define image request layered flag (Alex Elder)  [Orabug: 20304006]  
  - rbd: define image request originator flag (Alex Elder)  [Orabug: 20304006]  
  - rbd: define image request flags (Alex Elder)  [Orabug: 20304006]  
  - rbd: record image-relative offset in object requests (Alex Elder)  [Orabug: 20304006]  
  - rbd: record aggregate image transfer count (Alex Elder)  [Orabug: 20304006]  
  - rbd: record overall image request result (Alex Elder)  [Orabug: 20304006]  
  - rbd: update feature bits (Alex Elder)  [Orabug: 20304006]  
  - libceph: make method call data be a separate data item (Alex Elder)  [Orabug: 20304006]  
  - libceph: add, don't set data for a message (Alex Elder)  [Orabug: 20304006]  
  - libceph: implement multiple data items in a message (Alex Elder)  [Orabug: 20304006]  
  - libceph: replace message data pointer with list (Alex Elder)  [Orabug: 20304006]  
  - libceph: have cursor point to data (Alex Elder)  [Orabug: 20304006]  
  - libceph: move cursor into message (Alex Elder)  [Orabug: 20304006]  
  - libceph: record bio length (Alex Elder)  [Orabug: 20304006]  
  - libceph: skip message if too big to receive (Alex Elder)  [Orabug: 20304006]  
  - libceph: fix possible CONFIG_BLOCK build problem (Alex Elder)  [Orabug: 20304006]  
  - libceph: kill off osd request r_data_in and r_data_out (Alex Elder)  [Orabug: 20304006]  
  - libceph: set the data pointers when encoding ops (Alex Elder)  [Orabug: 20304006]  
  - libceph: combine initializing and setting osd data (Alex Elder)  [Orabug: 20304006]  
  - libceph: set message data when building osd request (Alex Elder)  [Orabug: 20304006]  
  - libceph: move ceph_osdc_build_request() (Alex Elder)  [Orabug: 20304006]  
  - libceph: format class info at init time (Alex Elder)  [Orabug: 20304006]  
  - rbd: rearrange some code for consistency (Alex Elder)  [Orabug: 20304006]  
  - rbd: separate initialization of osd data (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't set data in rbd_osd_req_format_op() (Alex Elder)  [Orabug: 20304006]  
  - libceph: specify osd op by index in request (Alex Elder)  [Orabug: 20304006]  
  - libceph: add data pointers in osd op structures (Alex Elder)  [Orabug: 20304006]  
  - libceph: rename data out field in osd request op (Alex Elder)  [Orabug: 20304006]  
  - libceph: keep source rather than message osd op array (Alex Elder)  [Orabug: 20304006]  
  - rbd: define rbd_osd_req_format_op() (Alex Elder)  [Orabug: 20304006]  
  - libceph: a few more osd data cleanups (Alex Elder)  [Orabug: 20304006]  
  - libceph: define ceph_osd_data_length() (Alex Elder)  [Orabug: 20304006]  
  - libceph: define a few more helpers (Alex Elder)  [Orabug: 20304006]  
  - libceph: define osd data initialization helpers (Alex Elder)  [Orabug: 20304006]  
  - libceph: compute incoming bytes once (Alex Elder)  [Orabug: 20304006]  
  - rbd: define inbound data size for method ops (Alex Elder)  [Orabug: 20304006]  
  - libceph: provide data length when preparing message (Alex Elder)  [Orabug: 20304006]  
  - ceph: build osd request message later for writepages (Alex Elder)  [Orabug: 20304006]  
  - libceph: hold off building osd request (Alex Elder)  [Orabug: 20304006]  
  - ceph: kill ceph alloc_page_vec() (Alex Elder)  [Orabug: 20304006]  
  - ceph: define ceph_writepages_osd_request() (Alex Elder)  [Orabug: 20304006]  
  - libceph: don't build request in ceph_osdc_new_request() (Alex Elder)  [Orabug: 20304006]  
  - libceph: record message data length (Alex Elder)  [Orabug: 20304006]  
  - libceph: record length of bio list with bio (Alex Elder)  [Orabug: 20304006]  
  - libceph: drop ceph_osd_request->r_con_filling_msg (Alex Elder)  [Orabug: 20304006]  
  - ceph: use page_offset() in ceph_writepages_start() (Alex Elder)  [Orabug: 20304006]  
  - libceph: define ceph_decode_pgid() only once (Alex Elder)  [Orabug: 20304006]  
  - libceph: drop mutex on error in handle_reply() (Alex Elder)  [Orabug: 20304006]  
  - ceph: set up page array mempool with correct size (Alex Elder)  [Orabug: 20304006]  
  - libceph: use osd_req_op_extent_init() (Alex Elder)  [Orabug: 20304006]  
  - libceph: clean up ceph_osd_new_request() (Alex Elder)  [Orabug: 20304006]  
  - libceph: don't update op in calc_layout() (Alex Elder)  [Orabug: 20304006]  
  - libceph: pass offset and length out of calc_layout() (Alex Elder)  [Orabug: 20304006]  
  - libceph: define source request op functions (Alex Elder)  [Orabug: 20304006]  
  - libceph: define osd_req_opcode_valid() (Alex Elder)  [Orabug: 20304006]  
  - ceph: move max constant definitions (Alex Elder)  [Orabug: 20304006]  
  - libceph: be explicit in masking bottom 16 bits (Alex Elder)  [Orabug: 20304006]  
  - libceph: account for alignment in pages cursor (Alex Elder)  [Orabug: 20304006]  
  - libceph: page offset must be less than page size (Alex Elder)  [Orabug: 20304006]  
  - libceph: fix broken data length assertions (Alex Elder)  [Orabug: 20304006]  
  - libceph: make message data be a pointer (Alex Elder)  [Orabug: 20304006]  
  - libceph: use only ceph_msg_data_advance() (Alex Elder)  [Orabug: 20304006]  
  - libceph: don't add to crc unless data sent (Alex Elder)  [Orabug: 20304006]  
  - libceph: kill last of ceph_msg_pos (Alex Elder)  [Orabug: 20304006]  
  - libceph: kill most of ceph_msg_pos (Alex Elder)  [Orabug: 20304006]  
  - libceph: use cursor resid for loop condition (Alex Elder)  [Orabug: 20304006]  
  - libceph: collapse all data items into one (Alex Elder)  [Orabug: 20304006]  
  - libceph: get rid of read helpers (Alex Elder)  [Orabug: 20304006]  
  - libceph: no outbound zero data (Alex Elder)  [Orabug: 20304006]  
  - libceph: use cursor for inbound data pages (Alex Elder)  [Orabug: 20304006]  
  - libceph: kill ceph message bio_iter, bio_seg (Alex Elder)  [Orabug: 20304006]  
  - libceph: use cursor for bio reads (Alex Elder)  [Orabug: 20304006]  
  - libceph: record residual bytes for all message data types (Alex Elder)  [Orabug: 20304006]  
  - libceph: drop pages parameter (Alex Elder)  [Orabug: 20304006]  
  - libceph: initialize data fields on last msg put (Alex Elder)  [Orabug: 20304006]  
  - libceph: send queued requests when starting new one (Alex Elder)  [Orabug: 20304006]  
  - libceph: keep request lists in tid order (Alex Elder)  [Orabug: 20304006]  
  - libceph: requeue only sent requests when kicking (Alex Elder)  [Orabug: 20304006]  
  - libceph: no more kick_requests() race (Alex Elder)  [Orabug: 20304006]  
  - libceph: slightly defer registering osd request (Alex Elder)  [Orabug: 20304006]  
  - libceph: wrap auth methods in a mutex (Sage Weil)  [Orabug: 20304006]  
  - libceph: wrap auth ops in wrapper functions (Sage Weil)  [Orabug: 20304006]  
  - libceph: add update_authorizer auth method (Sage Weil)  [Orabug: 20304006]  
  - libceph: fix authorizer invalidation (Sage Weil)  [Orabug: 20304006]  
  - libceph: clear messenger auth_retry flag when we authenticate (Sage Weil)  [Orabug: 20304006]  
  - libceph: implement RECONNECT_SEQ feature (Sage Weil)  [Orabug: 20304006]  
  - ceph: fix buffer pointer advance in ceph_sync_write (Henry C Chang)  [Orabug: 20304006]  
  - ceph: use i_release_count to indicate dir's completeness (Yan, Zheng)  [Orabug: 20304006]  
  - libceph: more cleanup of write_partial_msg_pages() (Alex Elder)  [Orabug: 20304006]  
  - libceph: kill message trail (Alex Elder)  [Orabug: 20304006]  
  - libceph: kill osd request r_trail (Alex Elder)  [Orabug: 20304006]  
  - libceph: have osd requests support pagelist data (Alex Elder)  [Orabug: 20304006]  
  - libceph: let osd ops determine request data length (Alex Elder)  [Orabug: 20304006]  
  - libceph: implement pages array cursor (Alex Elder)  [Orabug: 20304006]  
  - libceph: implement bio message data item cursor (Alex Elder)  [Orabug: 20304006]  
  - libceph: use data cursor for message pagelist (Alex Elder)  [Orabug: 20304006]  
  - libceph: prepare for other message data item types (Alex Elder)  [Orabug: 20304006]  
  - libceph: start defining message data cursor (Alex Elder)  [Orabug: 20304006]  
  - libceph: abstract message data (Alex Elder)  [Orabug: 20304006]  
  - libceph: be explicit about message data representation (Alex Elder)  [Orabug: 20304006]  
  - libceph: define ceph_msg_has_*() data macros (Alex Elder)  [Orabug: 20304006]  
  - libceph: define and use ceph_crc32c_page() (Alex Elder)  [Orabug: 20304006]  
  - libceph: define and use ceph_tcp_recvpage() (Alex Elder)  [Orabug: 20304006]  
  - libceph: encapsulate reading message data (Alex Elder)  [Orabug: 20304006]  
  - libceph: small write_partial_msg_pages() refactor (Alex Elder)  [Orabug: 20304006]  
  - libceph: consolidate message prep code (Alex Elder)  [Orabug: 20304006]  
  - libceph: use local variables for message positions (Alex Elder)  [Orabug: 20304006]  
  - libceph: don't clear bio_iter in prepare_write_message() (Alex Elder)  [Orabug: 20304006]  
  - libceph: activate message data assignment checks (Alex Elder)  [Orabug: 20304006]  
  - libceph: set response data fields earlier (Alex Elder)  [Orabug: 20304006]  
  - libceph: record message data byte length (Alex Elder)  [Orabug: 20304006]  
  - ceph: only set message data pointers if non-empty (Alex Elder)  [Orabug: 20304006]  
  - libceph: isolate other message data fields (Alex Elder)  [Orabug: 20304006]  
  - libceph: set page info with byte length (Alex Elder)  [Orabug: 20304006]  
  - libceph: isolate message page field manipulation (Alex Elder)  [Orabug: 20304006]  
  - libceph: record byte count not page count (Alex Elder)  [Orabug: 20304006]  
  - libceph: simplify new message initialization (Alex Elder)  [Orabug: 20304006]  
  - libceph: advance pagelist with list_rotate_left() (Alex Elder)  [Orabug: 20304006]  
  - libceph: define and use in_msg_pos_next() (Alex Elder)  [Orabug: 20304006]  
  - libceph: kill args in read_partial_message_bio() (Alex Elder)  [Orabug: 20304006]  
  - libceph: change type of ceph_tcp_sendpage() "more" (Alex Elder)  [Orabug: 20304006]  
  - libceph: minor byte order problems in read_partial_message() (Alex Elder)  [Orabug: 20304006]  
  - libceph: define CEPH_MSG_MAX_MIDDLE_LEN (Alex Elder)  [Orabug: 20304006]  
  - libceph: clean up skipped message logic (Alex Elder)  [Orabug: 20304006]  
  - libceph: separate read and write data (Alex Elder)  [Orabug: 20304006]  
  - libceph: distinguish page and bio requests (Alex Elder)  [Orabug: 20304006]  
  - libceph: separate osd request data info (Alex Elder)  [Orabug: 20304006]  
  - libceph: don't assign page info in ceph_osdc_new_request() (Alex Elder)  [Orabug: 20304006]  
  - ceph: simplify ceph_sync_write() page_align calculation (Alex Elder)  [Orabug: 20304006]  
  - ceph: use calc_pages_for() in start_read() (Alex Elder)  [Orabug: 20304006]  
  - libceph: no need for alignment for mds message (Alex Elder)  [Orabug: 20304006]  
  - libceph: define mds_alloc_msg() method (Alex Elder)  [Orabug: 20304006]  
  - libceph: drop mutex while allocating a message (Alex Elder)  [Orabug: 20304006]  
  - libceph: rename ceph_calc_object_layout() (Alex Elder)  [Orabug: 20304006]  
  - libceph: kill ceph_msg->pagelist_count (Alex Elder)  [Orabug: 20304006]  
  - libceph: use (void *) for untyped data in osd ops (Alex Elder)  [Orabug: 20304006]  
  - libceph: fix wrong opcode use in osd_req_encode_op() (Alex Elder)  [Orabug: 20304006]  
  - libceph: complete lingering requests only once (Alex Elder)  [Orabug: 20304006]  
  - ceph: acquire i_mutex in __ceph_do_pending_vmtruncate (Yan, Zheng)  [Orabug: 20304006]  
  - ceph: don't early drop Fw cap (Yan, Zheng)  [Orabug: 20304006]  
  - ceph: revert commit 22cddde104 (Sage Weil)  [Orabug: 20304006]  
  - ceph: use I_COMPLETE inode flag instead of D_COMPLETE flag (Yan, Zheng)  [Orabug: 20304006]  
  - ceph: set mds_want according to cap import message (Yan, Zheng)  [Orabug: 20304006]  
  - ceph: queue cap release when trimming cap (Yan, Zheng)  [Orabug: 20304006]  
  - ceph: fix LSSNAP regression (Yan, Zheng)  [Orabug: 20304006]  
  - libceph: set page alignment in start_request() (Alex Elder)  [Orabug: 20304006]  
  - libceph: distinguish page array and pagelist count (Alex Elder)  [Orabug: 20304006]  
  - libceph: don't pass request to calc_layout() (Alex Elder)  [Orabug: 20304006]  
  - libceph: format target object name in caller (Alex Elder)  [Orabug: 20304006]  
  - libceph: pass object number back to calc_layout() caller (Alex Elder)  [Orabug: 20304006]  
  - libceph: make ceph_msg->bio_seg be unsigned (Alex Elder)  [Orabug: 20304006]  
  - libceph: fix a osd request memory leak (Alex Elder)  [Orabug: 20304006]  
  - rbd: do a safe list traversal in rbd_img_request_submit() (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't zero-fill non-image object requests (Alex Elder)  [Orabug: 20304006]  
  - libceph: fix decoding of pgids (Sage Weil)  [Orabug: 20304006]  
  - libceph: add support for HASHPSPOOL pool flag (Sage Weil)  [Orabug: 20304006]  
  - libceph: update osd request/reply encoding (Sage Weil)  [Orabug: 20304006]  
  - libceph: calculate placement based on the internal data types (Sage Weil)  [Orabug: 20304006]  
  - ceph: update support for PGID64, PGPOOL3, OSDENC protocol features (Sage Weil)  [Orabug: 20304006]  
  - ceph: update "ceph_features.h" (Alex Elder)  [Orabug: 20304006]  
  - libceph: decode into cpu-native ceph_pg type (Sage Weil)  [Orabug: 20304006]  
  - libceph: rename ceph_pg -> ceph_pg_v1 (Sage Weil)  [Orabug: 20304006]  
  - rbd: pass length, not op for osd completions (Alex Elder)  [Orabug: 20304006]  
  - rbd: move rbd_osd_trivial_callback() (Alex Elder)  [Orabug: 20304006]  
  - libceph: use a do..while loop in con_work() (Alex Elder)  [Orabug: 20304006]  
  - libceph: use a flag to indicate a fault has occurred (Alex Elder)  [Orabug: 20304006]  
  - libceph: separate non-locked fault handling (Alex Elder)  [Orabug: 20304006]  
  - libceph: encapsulate connection backoff (Alex Elder)  [Orabug: 20304006]  
  - libceph: eliminate sparse warnings (Alex Elder)  [Orabug: 20304006]  
  - ceph: eliminate sparse warnings in fs code (Alex Elder)  [Orabug: 20304006]  
  - rbd: eliminate sparse warnings (Alex Elder)  [Orabug: 20304006]  
  - libceph: define connection flag helpers (Alex Elder)  [Orabug: 20304006]  
  - rbd: normalize dout() calls (Alex Elder)  [Orabug: 20304006]  
  - rbd: barriers are hard (Alex Elder)  [Orabug: 20304006]  
  - rbd: ignore zero-length requests (Alex Elder)  [Orabug: 20304006]  
  - ceph: fix statvfs fr_size (Sage Weil)  [Orabug: 20304006]  
  - libceph: drop return value from page vector copy routines (Alex Elder)  [Orabug: 20304006]  
  - rbd: ignore result of ceph_copy_from_page_vector() (Alex Elder)  [Orabug: 20304006]  
  - rbd: prevent bytes transferred overflow (Alex Elder)  [Orabug: 20304006]  
  - libceph: use void pointers in page vector functions (Alex Elder)  [Orabug: 20304006]  
  - ceph: remove a few bogus declarations (Alex Elder)  [Orabug: 20304006]  
  - libceph: allow STAT osd operations (Alex Elder)  [Orabug: 20304006]  
  - rbd: add parentheses to object request iterator macros (Alex Elder)  [Orabug: 20304006]  
  - libceph: simplify data length calculation (Alex Elder)  [Orabug: 20304006]  
  - libceph: update ceph_mds_state_name() and ceph_mds_op_name() (Alex Elder)  [Orabug: 20304006]  
  - libceph: update ceph_fs.h (Alex Elder)  [Orabug: 20304006]  
  - libceph: remove dead code in osd_req_encode_op() (Alex Elder)  [Orabug: 20304006]  
  - libceph: report defined but unsupported osd ops (Alex Elder)  [Orabug: 20304006]  
  - libceph: update ceph_osd_op_name() (Alex Elder)  [Orabug: 20304006]  
  - libceph: add ceph_osd_state_name() (Alex Elder)  [Orabug: 20304006]  
  - libceph: update rados.h (Alex Elder)  [Orabug: 20304006]  
  - libceph: kill ceph_osdc_wait_event() (Alex Elder)  [Orabug: 20304006]  
  - libceph: kill ceph_osdc_create_event() "one_shot" parameter (Alex Elder)  [Orabug: 20304006]  
  - libceph: kill ceph_calc_raw_layout() (Alex Elder)  [Orabug: 20304006]  
  - libdeph: don't export ceph_osdc_init() or ceph_osdc_stop() (Alex Elder)  [Orabug: 20304006]  
  - libceph: lock outside send_queued() (Alex Elder)  [Orabug: 20304006]  
  - ceph: kill ceph_osdc_new_request() "num_reply" parameter (Alex Elder)  [Orabug: 20304006]  
  - ceph: kill ceph_osdc_writepages() "flags" parameter (Alex Elder)  [Orabug: 20304006]  
  - ceph: kill ceph_osdc_writepages() "dosync" parameter (Alex Elder)  [Orabug: 20304006]  
  - ceph: kill ceph_osdc_writepages() "nofail" parameter (Alex Elder)  [Orabug: 20304006]  
  - libceph: improve packing in struct ceph_osd_req_op (Alex Elder)  [Orabug: 20304006]  
  - rbd: add barriers near done flag operations (Alex Elder)  [Orabug: 20304006]  
  - rbd: turn off interrupts for open/remove locking (Alex Elder)  [Orabug: 20304006]  
  - libceph: don't require r_num_pages for bio requests (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't take extra bio reference for osd client (Alex Elder)  [Orabug: 20304006]  
  - libceph: add a compatibility check interface (Alex Elder)  [Orabug: 20304006]  
  - rbd: prevent open for image being removed (Alex Elder)  [Orabug: 20304006]  
  - rbd: define flags field, use it for exists flag (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't drop watch requests on completion (Alex Elder)  [Orabug: 20304006]  
  - rbd: decrement obj request count when deleting (Alex Elder)  [Orabug: 20304006]  
  - rbd: track object rather than osd request for watch (Alex Elder)  [Orabug: 20304006]  
  - rbd: unregister linger in watch sync routine (Alex Elder)  [Orabug: 20304006]  
  - rbd: get rid of rbd_req_sync_exec() (Alex Elder)  [Orabug: 20304006]  
  - rbd: implement sync method with new code (Alex Elder)  [Orabug: 20304006]  
  - rbd: send notify ack asynchronously (Alex Elder)  [Orabug: 20304006]  
  - rbd: get rid of rbd_req_sync_notify_ack() (Alex Elder)  [Orabug: 20304006]  
  - rbd: use new code for notify ack (Alex Elder)  [Orabug: 20304006]  
  - rbd: get rid of rbd_req_sync_watch() (Alex Elder)  [Orabug: 20304006]  
  - rbd: implement watch/unwatch with new code (Alex Elder)  [Orabug: 20304006]  
  - rbd: get rid of rbd_req_sync_read() (Alex Elder)  [Orabug: 20304006]  
  - rbd: implement sync object read with new code (Alex Elder)  [Orabug: 20304006]  
  - rbd: kill rbd_req_coll and rbd_request (Alex Elder)  [Orabug: 20304006]  
  - rbd: kill rbd_rq_fn() and all other related code (Alex Elder)  [Orabug: 20304006]  
  - rbd: new request tracking code (Alex Elder)  [Orabug: 20304006]  
  - libceph: fix messenger CONFIG_BLOCK dependencies (Alex Elder)  [Orabug: 20304006]  
  - ceph: implement hidden per-field ceph.*.layout.* vxattrs (Sage Weil)  [Orabug: 20304006]  
  - ceph: add ceph.dir.layout vxattr (Sage Weil)  [Orabug: 20304006]  
  - ceph: change ceph.file.layout.* implementation, content (Sage Weil)  [Orabug: 20304006]  
  - ceph: fix listxattr handling for vxattrs (Sage Weil)  [Orabug: 20304006]  
  - ceph: fix getxattr vxattr handling (Sage Weil)  [Orabug: 20304006]  
  - ceph: add exists_cb to vxattr struct (Sage Weil)  [Orabug: 20304006]  
  - ceph: pass ceph.* removexattrs through to MDS (Sage Weil)  [Orabug: 20304006]  
  - ceph: pass unhandled ceph.* setxattrs through to MDS (Sage Weil)  [Orabug: 20304006]  
  - ceph: support hidden vxattrs (Sage Weil)  [Orabug: 20304006]  
  - ceph: remove 'ceph.layout' virtual xattr (Sage Weil)  [Orabug: 20304006]  
  - libceph: fix undefined behavior when using snprintf() (Cong Ding)  [Orabug: 20304006]  
  - rbd: don't retry setting up header watch (Alex Elder)  [Orabug: 20304006]  
  - rbd: check for overflow in rbd_get_num_segments() (Alex Elder)  [Orabug: 20304006]  
  - rbd: small changes (Alex Elder)  [Orabug: 20304006]  
  - rbd: fix type of snap_id in rbd_dev_v2_snap_info() (Alex Elder)  [Orabug: 20304006]  
  - rbd: assign watch request more directly (Alex Elder)  [Orabug: 20304006]  
  - rbd: move remaining osd op setup into rbd_osd_req_op_create() (Alex Elder)  [Orabug: 20304006]  
  - rbd: move call osd op setup into rbd_osd_req_op_create() (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't assign extent info in rbd_req_sync_op() (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't assign extent info in rbd_do_request() (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't leak rbd_req for rbd_req_sync_notify_ack() (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't leak rbd_req on synchronous requests (Alex Elder)  [Orabug: 20304006]  
  - rbd: combine rbd sync watch/unwatch functions (Alex Elder)  [Orabug: 20304006]  
  - rbd: use a common layout for each device (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't bother calculating file mapping (Alex Elder)  [Orabug: 20304006]  
  - rbd: open code rbd_calc_raw_layout() (Alex Elder)  [Orabug: 20304006]  
  - rbd: pull in ceph_calc_raw_layout() (Alex Elder)  [Orabug: 20304006]  
  - rbd: kill ceph_osd_req_op->flags (Alex Elder)  [Orabug: 20304006]  
  - rbd: assume single op in a request (Alex Elder)  [Orabug: 20304006]  
  - rbd: there is really only one op (Alex Elder)  [Orabug: 20304006]  
  - libceph: pass num_op with ops (Alex Elder)  [Orabug: 20304006]  
  - rbd: pass num_op with ops array (Alex Elder)  [Orabug: 20304006]  
  - libceph: don't set pages or bio in ceph_osdc_alloc_request() (Alex Elder)  [Orabug: 20304006]  
  - libceph: don't set flags in ceph_osdc_alloc_request() (Alex Elder)  [Orabug: 20304006]  
  - libceph: drop osdc from ceph_calc_raw_layout() (Alex Elder)  [Orabug: 20304006]  
  - libceph: drop snapid in ceph_calc_raw_layout() (Alex Elder)  [Orabug: 20304006]  
  - libceph: pass length to ceph_calc_file_object_mapping() (Alex Elder)  [Orabug: 20304006]  
  - libceph: pass length to ceph_osdc_build_request() (Alex Elder)  [Orabug: 20304006]  
  - libceph: kill op_needs_trail() (Alex Elder)  [Orabug: 20304006]  
  - libceph: always allow trail in osd request (Alex Elder)  [Orabug: 20304006]  
  - rbd: don't bother setting snapid in rbd_do_request() (Alex Elder)  [Orabug: 20304006]  
  - rbd: kill rbd_req_sync_op() snapc and snapid parameters (Alex Elder)  [Orabug: 20304006]  
  - rbd: drop flags parameter from rbd_req_sync_exec() (Alex Elder)  [Orabug: 20304006]  
  - rbd: drop snapid parameter from rbd_req_sync_read() (Alex Elder)  [Orabug: 20304006]  
  - rbd: drop oid parameters from ceph_osdc_build_request() (Alex Elder)  [Orabug: 20304006]  
  - rbd: separate layout init (Alex Elder)  [Orabug: 20304006]  
  - rbd: only get snap context for write requests (Alex Elder)  [Orabug: 20304006]  
  - rbd: make exists flag atomic (Alex Elder)  [Orabug: 20304006]  
  - rbd: a little more cleanup of rbd_rq_fn() (Alex Elder)  [Orabug: 20304006]  
  - rbd: end request on error in rbd_do_request() caller (Alex Elder)  [Orabug: 20304006]  
  - rbd: encapsulate handling for a single request (Alex Elder)  [Orabug: 20304006]  
  - rbd: be picky about osd request status type (Alex Elder)  [Orabug: 20304006]  
  - rbd: standardize ceph_osd_request variable names (Alex Elder)  [Orabug: 20304006]  
  - rbd: standardize rbd_request variable names (Alex Elder)  [Orabug: 20304006]  
  - rbd: add warnings to rbd_dev_probe_update_spec() (Alex Elder)  [Orabug: 20304006]  
  - rbd: add a warning in bio_chain_clone_range() (Alex Elder)  [Orabug: 20304006]  
  - rbd: add warning messages for missing arguments (Alex Elder)  [Orabug: 20304006]  
  - rbd: define and use rbd_warn() (Alex Elder)  [Orabug: 20304006]  
  - ceph: define ceph_encode_8_safe() (Alex Elder)  [Orabug: 20304006]  
  - rbd: use kmemdup() (Alex Elder)  [Orabug: 20304006]  
  - rbd: kill rbd_spec->image_id_len (Alex Elder)  [Orabug: 20304006]  
  - rbd: kill rbd_spec->image_name_len (Alex Elder)  [Orabug: 20304006]  
  - rbd: document rbd_spec structure (Alex Elder)  [Orabug: 20304006]  
  - libceph: reformat __reset_osd() (Alex Elder)  [Orabug: 20304006]  
  - crush: avoid recursion if we have already collided (Sage Weil)  [Orabug: 20304006]  
  - libceph: for chooseleaf rules, retry CRUSH map descent from root if leaf is failed (Jim Schutt)  [Orabug: 20304006]  
  - ceph: check mds_wanted for imported cap (Yan, Zheng)  [Orabug: 20304006]  
  - ceph: allocate cap_release message when receiving cap import (Yan, Zheng)  [Orabug: 20304006]  
  - ceph: allow revoking duplicated caps issued by non-auth MDS (Yan, Zheng)  [Orabug: 20304006]  
  - ceph: move dirty inode to migrating list when clearing auth caps (Yan, Zheng)  [Orabug: 20304006]  
  - ceph: re-calculate truncate_size for strip object (Yan, Zheng)  [Orabug: 20304006]  
  - ceph: Check for created flag in response from mds (Sam Lang)  [Orabug: 20304006]  
  - ceph: Check for err on mds request in atomic_open (Sam Lang)  [Orabug: 20304006]


