# changelog

author: Jakub Jelinek <jakub@redhat.com> 2.5-23
changelog:
  - fix gettext race conditions (#439486, BZ#5058, BZ#5443)
  - fix x86_64 pthread_mutex_timedlock (#434601)
  - only service sshd condrestart if /etc/rc.d/init.d/sshd exists
    (#428859)


author: Jakub Jelinek <jakub@redhat.com> 2.5-24.el5_2.1
changelog:
  - fix _mcount and socket syscalls on s390x (#467106)
  - try harder to allocate memory in valloc and pvalloc (#463135)
  - fix dynamic TLS handling (#469861)


author: Jakub Jelinek <jakub@redhat.com> 2.5-25
changelog:
  - fix yp_order (#435519, BZ#5854)
  - new x86_64 optimized memset (#437394)
  - fix ppc64 dynamic linker synchronization (#441702, BZ#5741)
  - malloc speedup (#451184, #460154, BZ#4349)
  - document that setenv and putenv aren't thread-safe (#316791)
  - speed up qsort (#435182)
  - provide unwind info for x86_64 signal return pad (#445259)
  - use DNS provided TTL for nscd hosts cache (#454299)
  - robustify nscd.conf reading (#438456, BZ#5818)
  - power4/power6 math backports (#440103)
  - fix expf (BZ#3406)
  - fix ISO 646-IRV iconv error handling (BZ#6461)
  - fix setvbuf (BZ#6719)
  - fix unbuffered vfprintf (#455360)


author: Andreas Schwab <schwab@redhat.com> - 2.5-34.el5_3.1
changelog:
  - force malloc hook pointers into register to avoid rereading them
    from memory non-atomically (#507530, BZ#9957)


author: Jakub Jelinek <jakub@redhat.com> 2.5-35
changelog:
  - increase default buffer size in opendir, if malloc fails,
    retry malloc with smaller size (#484440)


author: Jakub Jelinek <jakub@redhat.com> 2.5-36
changelog:
  - nscd GC fixes (#483636, BZ#5382, BZ#5381, BZ#9741, BZ#9750)
  - change mtrim to trim all arenas, not just main_arena (#403231)
  - fix a corner case in realloc (#478499)
  - fix a setlocale race (#455580, BZ#6712)
  - fix getifaddrs for Infiniband interfaces (#463252, BZ#6589)
  - use private futexes for process private PI mutexes (#495955, BZ#6955)
  - optimize pthread_mutex_{,un}lock for the most common mutex types (#467316)
  - fix getgrouplist with [!NOTFOUND=return] (#470768)
  - don't open /var/run/utmp in setutent_file read-write unnecessarily
    to avoid audit messages (#475332)
  - fix dlopen memory leak (#476725, BZ#6763)
  - fix crashes when fork is running in one thread concurrently with
    pthread stack cache updates in another thread (#477705)
  - fix getent to not print comma in between network aliases (#484082)
  - attempt to preserve nscd process name in paranoia mode restarts
    (#490010)
  - fix inet6_opt_init (#488748, BZ#5760)
  - fix getnameinfo with both nodename and servname NULL
    and NI_NAMEREQD in flags (#489419, BZ#7080)
  - fix inet6_rth_add (#494850, BZ#9881)
  - fix inet6_rth_reverse (#494849, BZ#9880)
  - fix _dl_runtime_profile on s390x (#470300)


author: Jakub Jelinek <jakub@redhat.com> 2.5-37
changelog:
  - remove const attribute from sysconf (#490821, BZ#3493)
  - add RUSAGE_THREAD definition (#484214)
  - update i?86/x86_64 cache info for sysconf on newer CPUs


author: Jakub Jelinek <jakub@redhat.com> 2.5-38
changelog:
  - add optional experimental malloc (enable with MALLOC_PER_THREAD=1
    in environment, #494758)
  - nscd backport (#483636)


author: Jakub Jelinek <jakub@redhat.com> 2.5-39
changelog:
  - force malloc hook pointers into register to avoid rereading them
    from memory non-atomically (#502901, BZ#9957)
  - avoid extraneous comma at the end of enum in dlfcn.h (#504704)


author: Jakub Jelinek <jakub@redhat.com> 2.5-40
changelog:
  - add a barrier to ATOMIC_FASTBINS _int_free code needed
    on ppc/ppc64 (#508395)
  - don't stop parsing fopen mode string after seing 'c'
    letter (#509853)


author: Andreas Schwab <schwab@redhat.com> - 2.5-54
changelog:
  - Add timestamps to nscd logs (#527558)
  - Fix index wraparound handling in memusage (#531576)
  - Handle running out of buffer space with IPv6 mapping enabled (#533367)
  - Don't deadlock in __dl_iterate_phdr while (un)loading objects (#549813)
  - Avoid alloca in setenv for long strings (#559974)
  - Recognize POWER7 and ISA 2.06 (#563563)
  - Add support for AT_BASE_PLATFORM (#563599)
  - Restore locking in free_check (#585674)
  - Fix lookup of collation sequence value during regexp matching (#587360)


author: Andreas Schwab <schwab@redhat.com> - 2.5-58.el5_6.2
changelog:
  - Avoid too much stack use in fnmatch (#681054, CVE-2011-1071)
  - Properly quote output of locale (#625893, CVE-2011-1095)
  - Don't leave empty element in rpath when skipping the first element,
    ignore rpath elements containing non-isolated use of $ORIGIN when
    privileged (#667974, CVE-2011-0536)
  - Fix handling of newline in addmntent (#559579, CVE-2010-0296)


author: Andreas Schwab <schwab@redhat.com> - 2.5-64
changelog:
  - Don't allocate executable stack when it cannot be allocated in the
    first 4G (#448011)
  - Initialize resolver state in nscd (#676039)
  - No cancel signal in unsafe places (#684808)


author: Jeff Law <law@redhat.com> - 2.5-65.el5_7.3
changelog:
  - Use correct type when casting d_tag (#767687)
  - Report write error  in addmnt even for cached streams (#767687)
  - ldd: Never run file directly (#767687).
  - Workaround misconfigured system (#767687)


author: Jeff Law <law@redhat.com> - 2.5-79
changelog:
  - Complete the numeric settings fix (#675259)
  - Complete the change for error codes from pthread_create (#707998)


author: Jeff Law <law@redhat.com> - 2.5-81.el5_8.1
changelog:
  - Add dist tag
  - Filter out <built-in> when building file lists (#784646).
  - Avoid "nargs" integer overflow which could be used to bypass FORTIFY_SOURCE (#794813)


author: Patsy Franklin <pfrankli@redhat.com> - 2.5-81.el5_8.4
changelog:
  - Fix iconv() segfault if the invalid multibyte character 0xffff is input when converting from IBM930 (#837896)


author: Jeff Law <loaw@redhat.com> - 2.5-81.el5_8.5
changelog:
  - Do not use PT_IEEE_IP ptrace calls (#839411)
  - Update ULPs (#839411)
  - Fix various transcendentals in non-default rounding modes (#839411)


author: Jakub Jelinek <jakub@redhat.com> 4.1.4-10.el5
changelog:
  - make sure libmpfr.a doesn't contain SSE2 instructions on i?86 (#223038)
  - rebase to mpfr 2.2.1 from 2.2.0 + cumulative fixes


author: Chris Feist <cfeist@redhat.com> - 0.1.3-2
changelog:
  - Now requires kABI rather than specific kernel (code from
    jcm@redhat.com)
  - Resolves: rhbz#212428


author: Chris Feist <cfeist@redhat.com> - 0.1.5-1
changelog:
  - gnbd now uses the deadline scheduler by default.
  - Sending requests after a send has failed is now disallowed.
  - The gnbd kernel module on 64 bit architectures now handles ioctls from 32
    bit userspace processes.
  - Related: rhbz#442606 rhbz#449812 rhbz#440454


author: Karel Zak <kzak@redhat.com> 0.1.0-1
changelog:
  - upgrade to stable upstream release
  - fix build requires
  - fix #205930 - missing dependency for virt-manager


author: Karel Zak <kzak@redhat.com> 0.1.2-1
changelog:
  - sync with upstream
  - remove dependence on dbus libs
  - fix #211539, #211560 - gnome-applet-vm traceback (virt-manager usage)


author: John (J5) Palmieri <johnp@redhat.com> - 0.4-6
changelog:
  - Patch from Brian Pepple <bdpepple@ameritech.net> Add BR for 
    gnome-keyring-devel & libgnomeui-devel.


author: John (J5) Palmieri <johnp@redhat.com> - 0.4.0.2006.07.24-1
changelog:
  - Update to a CVS version of gnome-mount
  - create nautilus-properties sub package
  - Add BR for nautilus and eel2


author: David Zeuthen <davidz@redhat.com> - 0.5.0-1
changelog:
  - Update to upstream release 0.5
  - BR libnotify-devel
  - Require and BuildRequire HAL 0.5.8.1
  - Should fix #194296


author: David Malcolm <dmalcolm@redhat.com> - 2.0.13-3.FC5
changelog:
  - extend patch 2 to handle a missing fix in the email conduit, renaming it from
    gnome-pilot-conduits-2.0.12-port-to-pilot-link-0.12.patch to
    gnome-pilot-conduits-2.0.13-port-to-pilot-link-0.12.patch in the process 
    (#159165)


author: Than Ngo <than@redhat.com> 2.0.13-4
changelog:
  - rebuilt against pilot-link-0.11.8
  - don't apply gnome-pilot-conduits-2.0.13-port-to-pilot-link-0.12.patch


author: Richard Hughes <rhughes@redhat.com> - 2.16.0-8.el5
changelog:
  - Add patches 6..17 from upstream to fix various bugs and crashers.
    None of these patches are risky, and pose little risk for a large gain in
    stability.
  - Resolves: #244982


author: Richard Hughes <rhughes@redhat.com> - 2.16.0-10.el5
changelog:
  - Don't poke the screensaver when we get a button press else we can
    trigger the LCD panel to wakeup when the lid is closed on some laptops.
  - Resolves: #423931


author: Dan Williams <dcbw@redhat.com> - 2.15.90-2.fc6
changelog:
  - Remove unecessary dependencies on gnome-python2-desktop from
      -libwnck and -rsvg subpackages (OLPC)


author: John (J5) Palmieri <johnp@redhat.com> - 2.14.2-3
changelog:
  - Remove the Requires on the parent package from gtkmozembed
    so we don't pull in gnome-python2 also.  At some point we
    should look at what requires gnome-python2 and only Require it
    for those sub packages and not the parent package.


author: Matthew Barnes <mbarnes@redhat.com> - 2.14.2-6
changelog:
  - Require gecko-libs instead of firefox.
  - Add patch to make pkg-config look for mozilla-gtkmozembed even
    though we're using xulrunner.


author: Ray Strode <rstrode@redhat.com> - 2.16.0-9.el5
changelog:
  - handle PAM messages in a separate thread so that when a pam
    module blocks, the cancel button still works (bug 206322)
  - set cursor to busy while waiting on pam module (bug 202276)
  - hide prompt label/entry/unlock button until pam asks the
    user for input (bug 202276)
  - dont assume first pam message will be "Password:" 
    (bug 201858, 202278)


author: Ray Strode <rstrode@redhat.com> - 2.16.0-11.el5
changelog:
  - report token events from helper process using token name instead
    of slot id and slot series number, since slot id and slot series
    number are relative to each process (bug 208018)


author: Ray Strode <rstrode@redhat.com> - 2.16.0-12.el5
changelog:
  - have security token monitor helper process kill itself when 
    the communication pipe to the main process goes away (bug
    210677).


author: Ray Strode <rstrode@redhat.com> - 2.16.0-14.el5
changelog:
  - prefer smart card drivers found in system secmod db over the
    hardcoded /usr/lib/pkcs11/libcoolkeypk11.so


author: Ray Strode <rstrode@redhat.com> - 2.16.0-5.el5
changelog:
  - don't hose users with a stale http_proxy variable if they
    use autoconfiguration and uses to use manual configuration.
    Patch by Mark McLoughlin (bug 212319)


author: Jeff Bastian <jbastian@redhat.com> - 2.16.0-7.el5
changelog:
  Resolves: #484431
  - backport patch from upstream bug #341286 as recommended by Ray Strode
    to fix restoration of multiple konsole windows (#484431)


author: Ray Strode <rstrode@redhat.com> - 2.16.0-8.el5
changelog:
  - Replace "Ask on logout" checkbox with "Save the current session"
    button in session properties
    Resolves: #432538


author: Matthew Barnes <mbarnes@redhat.com> - 1.0.7-1
changelog:
  - Update to 1.0.7
  - Disable pspell compatibility layer (added 3 years ago).
  - Update gnome-spell-1.0.4-multilib.patch and rename it to version 1.0.7.


author: Ray Strode <rstrode@redhat.com> 2.16.0-5.3.1
changelog:
  - Proxy fixes, patch by
    Behdad Esfahbod <besfahbo@redhat.com>
    and
    Olivier Fourdan <ofourdan@redhat.com>
    Resolves: #719399


author: Ray Strode <rstrode@redhat.com> - 2.16.0-4
changelog:
  Resolves: #228631 - log viewer crash on logout
  - initialize variable to 0 before using it as an index


author: Ray Strode <rstrode@redhat.com> - 2.16.0-5
changelog:
  Resolves: #216964 - disk usage analyzer crash/lockup on search
  - pass correct values with correct types into variadic functions
  - skip /proc and /sys to prevent read() hangs


author: Tomas Bzatek <tbzatek@redhat.com> - 2.16.2-5.el5
changelog:
  - Fix daemon restart due to invalid utf-8 device file (#486286)
  - Fix Search stops upon encountering an unreadable directory (#432764)
  - Fix moving files between different NFS mounts (#438116)
  - Copy file when following symlink (#481593)
  - DAV: Handle filenames with reserved chars (#503112)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.16.2-8.el5
changelog:
  - Fix Gnome trashcan doesn't work on ext4 filesystems (#594836)
  - Fix a crash in ImageMagick after conversion is done (#472253)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.16.2-9.el5
changelog:
  - Prevent deleting items linking out of the trash (#586015)
  - Do not stat every file on an ClearCase mvfs filesystem (#822817)
  - Do not silently skip directory having no read permission during copy (#772307)
  - Allow trashing symlink to filesystem root that does not support trashing (#621394)
  - CVE-2009-2473 gnome-vfs2 embedded neon: billion laughs DoS attack (#540548)


author: Alexander Larsson <alexl@redhat.com> - 2.16.0-2
changelog:
  - Backport fixes from cvs:
  -  Fix crash on shutdown (gnome bug 347470)
  -  Import gtk+ fixes to xdgmime


author: John (J5) Palmieri <johnp@redhat.com> - 2.15.0-1
changelog:
  - Update to 2.15.0
  - Add dist tag to release
  - Fix defaults to run the autophoto program when a camera is inserted


author: John (J5) Palmieri <johnp@redhat.com> - 2.15.0-2
changelog:
  - Add patch to use the console user files to check for local users
    instead of using utmp which is unreliable


author: Matt Wringe <mwringe at redhat.com> - 0:2.1.0-2jpp
changelog:
  - Add the sasl classes from GNU Classpath to build the sasl-jdk1.4
    package as this has been removed from gnu-crypto 2.1.0 sources.
  - gnu-crypto-noarch.patch no longer applies as ant is no longer used
  - Update to 2.1.0
  - From Thomas Fitzsimmons <fitzsim at redhat.com>:
    - Add gcj endorsed dir support.
    - Add GnuCrypto security provider to classpath.security
    - Call rebuild-security-providers and rebuild-gcj-db-conditionally on
      their existence.


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-9
changelog:
  - rebuild
  - give configure a --with-termlib option which can be used to force the
    selection of libtermcap or libncurses, but don't flip the switch yet


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-10
changelog:
  - incorporate patch from Werner to fix use of stack variable after it goes
    out of scope (CVE-2006-6235, #218483)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-13
changelog:
  - incorporate patch from Werner to work around clients which
    can't tell that multiple plain messages have been processed (#230457)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.4.5-14
changelog:
  - add patch from David Shaw to fix incorrectly detecting multiple plaintexts
    when processing multiple input files (#442815)


author: Tomas Mraz <tmraz@redhat.com> - 1.4.5-17
changelog:
  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4242 GnuPG susceptible to Yarom/Falkner side-channel attack
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser


author: Peter Vrabec <pvrabec@redhat.com> - 2.0.8-3
changelog:
  - fix Requires(postun), postun -> preun
  - compile with $RPM_OPT_FLAGS
  - remove Requires(hint) dirmngr, not available in RHEL
  - remove kde-filesystem requires, not available in RHEL


author: Tomas Mraz <tmraz@redhat.com> - 2.0.10-5
changelog:
  - fix CVE-2012-6085 GnuPG: read_block() corrupt key input validation
  - fix CVE-2013-4402 GnuPG: infinite recursion in the compressed packet parser


author: Phil Knirsch <pknirsch@redhat.com> 4.0.0-8
changelog:
  - Fixed missing Requires: emacs for the gnuplot-emacs package
  - Added a gnuplot-init.el file for startup (#151122)


author: Phil Knirsch <pknirsch@redhat.com> 4.0.0-9
changelog:
  - Fixed 64bit problem with x11 display (#167508)
  - Added missing file ownage of /usr/share/gnuplot (#169333)


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-5
changelog:
  - fix NUL characters in DN and SAN cert fields issue,
    make sure gnutls_x509_crt_check_hostname() fails when certificate
    has no CN or SAN CVE-2009-2730 (#516231)


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-6
changelog:
  - implement safe renegotiation - CVE-2009-3555 (#533125)
  - do not allow MD2 in certificate signatures by default - CVE-2009-2409
    (#510197)


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-8
changelog:
  - fix multiple possible NULL dereferences and other problems
    that can potentially lead to segfault in the client


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-9
changelog:
  - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
  - fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920)
  - fix CVE-2012-1573 - security issue in packet parsing (#805432)


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-10
changelog:
  - do not generate invalid certificate requests without challenge password
  - store subject DN instead of issuer DN in the CA list


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 1.4.1-14
changelog:
  - Renamed gnutls-1.4.1-cve-2014-0092-1.patch to cve-2014-5138.patch
  - Renamed gnutls-1.4.1-cve-2014-0092-2.patch to cve-2014-0092.patch


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 1.4.1-15
changelog:
  - fix session ID length check and null pointer dereference (#1102355)
  - fix minitasn1 issues (#1102355)
  - Renamed gnutls-1.4.1-cve-2014-5138.patch to cve-2009-5138.patch


author: Petr Rockai <prockai@redhat.com> 1.20.1-73
changelog:
  - do not ooops in gpm when console device cannot be found, print
    an error message instead and exit(1), as per BR 140025, 176178
  - do not print messages in libgpm, unless envvar GPM_VERBOSE
    is set -- avoids unwanted clutter from libgpm in apps like dialog
    or mc when gpm is not available


author: Tim Waugh <twaugh@redhat.com> 2.5.1-54.2
changelog:
  - Fixed count of patterns when the last is an empty string (bug #216934).
  - Fix 'memory exhausted' errors by limiting in-memory buffer (bug #216882).


author: Stepan Kasal <skasal@redhat.com> 2.5.1-55
changelog:
  - fix hang under non-UTF-8 multibyte locales (#479151)
  - with lines longer than 200 MB, give up rather than print incorrect
    output (#483073)
  - fix an off-by-one error which might cause segfault (#452127)
  - a doc improvement (#484366)
  - Resolves: #479151, #452127, #483073, and 484366


author: Jindrich Novy <jnovy@redhat.com> - 1.18.1.1-6
changelog:
  - add BuildRequires imake and update dependencies for modular X
  - spec cleanup
  - fix compilation with gcc-4.1.0


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.18.1.1-8
changelog:
  - fix segfault in grotty on 64-bit big endian machines (#176904)
  - fix assertion failure on abort message (#141912)
  - attempt to fix a space problem with several european languages (#137728)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.18.1.1-9
changelog:
  - remove gxditview from groff package (#179684)
  - remove obsolete "--enable-japanese" configure option


author: Peter Jones <pjones@redhat.com> - 0.97-13.1
changelog:
  - Fix handling of CCISS devices when installing to the MBR.
    Resolves: rhbz#429187
  - Allow longer kernel command lines
    Resolves: rhbz#336341


author: Peter Jones <pjones@redhat.com> - 0.97-13.6
changelog:
  - Copy the kernel and initrd using a smaller buffer to avoid using memory
    we can't correctly map
    Resolves: rhbz#464178


author: Peter Jones <pjones@redhat.com> - 0.97-13.8.el5
changelog:
  - Update documentation for "savedefault" grub-shell command
    Resolves: rhbz#212649
  - Support more than 10 devices
    Resolves: rhbz#829228


author: Václav Pavlín <vpavlin@redhat.com> - 0.97-13.11.1
changelog:
  - grub-install: fix regex for partition and multipath when
    use_friendly_names is off
    Resolves: rhbz#1034595


author: Peter Jones <pjones@redhat.com> - 0.97-5
changelog:
  - Fix merge error for "bootonce" patch (broken in 0.95->0.97 update)
  - Get rid of the 0.97 "default" stuff, since it conflicts with our working
    method.


author: Ivana Varekova <varekova@redhat.com> - 1.10-4
changelog:
  - add pkgconfig dependency
  - separate static libraries to -static subpackage
  - fix gsl-config script - thanks Patrice Dumas


author: Matthias Clasen <mclasen@redhat.com> - 0.10.9-5
changelog:
  - Backport changes from gstreamer 0.10.10 that are necessary
    for working playback of streaming media (#215556)


author: - Bastien Nocera <bnocera@redhat.com> - 0.10.20-2
changelog:
  - Remove increased liboil req, otherwise we can't actually install
    the package
  Related: rhbz #450104


author: Adam Jackson <ajax@redhat.com> 0.10.4-4.1
changelog:
  - gst-plugins-good-0.10.4-cve-2008-1686.patch: Fix CVE-2008-1686, insufficient
    boundary check in speex codec. (#442030)


author: Cosimo Cecchi <cosimoc@redhat.com> - 1.2.10-57
changelog:
  - Use pointer coordinates to compute input events scaling, when a
    device bound to a screen is used in multihead scenarios.
    Resolves: #694888


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.2-2.el5
changelog:
  - Fix keyboard state tracking (rhbz #435763)
  - Fix endian conversion logic in framebuffer updates (rhbz #431811)


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.2-3.el5
changelog:
  - Fix colour conversions for mixed-endian setups (rhbz #431811)
  - Fix mouse pointer grab semantics (rhbz #433711)


author: Matthias Clasen <mclasen@redhat.com> - 2.10.4-8
changelog:
  - Fix a crash in the handling of invalid icon themes (#218247)
  - Give accessible names to message dialogs (#215472)


author: Matthias Clasen <mclasen@redhat.com> - 2.10.4-10
changelog:
  - Fix error handling in pixbuf loaders (#218755)
  - Properly pass multi-value options to cups (#219115)


author: Matthias Clasen <mclasen@redhat.com> - 2.10.4-13
changelog:
  - Further fixes for bug 218755:
    - Make gdk_pixbuf_loader_close() idempotent
    - Always emit the closed signal when the loader is closed


author: Matthias Clasen <mclasen@redhat.com> - 2.10.4-17
changelog:
  - Make printing to raw print queues work  (#224202)
  - Fix a crash in gdk_region_polygon()  (#237153)
  - Fix a warning from GtkCalendar   (#218676)


author: Matthias Clasen <mclasen@redaht.com> - 2.10.4-20
changelog:
  - Update Telugu translations (Resolves: #225373)
  - Fix a problem with tray icons in KDE (Resolves: #216847, #236650, #240049)


author: Matthias Clasen <mclasen@redhat.com> - 2.10.4-21..el5_5.1
changelog:
  - Fix some cases where the file chooser is not responding
    well to initial selection (Resolves: #648555, #648557)


author: Matthias Clasen <mclasen@redhat.com> - 2.10.4-21..el5_5.2
changelog:
  - Fix multilib upgrade problems on ia64 (#649682)
  - Fix test problems with multilib workaround for ia64 (#649725)


author: Matthias Clasen <mclasen@redhat.com> - 2.10.4-21
changelog:
  - Fix some cases where the file chooser is not responding
    well to initial selection (Resolves: #523657, #518483)


author: Cosimo Cecchi <ccecchi@redhat.com> - 2.10.4-23
changelog:
  - Only destroy XIM object if it exists. Fix a crash with some applications
    when using Big5 character encoding.
    Resolves: #487630


author: Cosimo Cecchi <ccecchi@redhat.com> - 2.10.4-25
changelog:
  - Fix a problem with Wacom tablets pen event positions when using dual
    head displays
    Resolves: #743658


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.10.4-27
changelog:
  - Fix integer overflow in GdkPixbuf's XBM image file format loader
    (CVE-2012-2370)
    Resolves: #846252


author: Cosimo Cecchi <ccecchi@redhat.com> - 2.10.4-29
changelog:
  - Improve patch to parse CUPS user lpoptions file to avoid crashes
    on s390 and ia64
    Resolves: #603809


author: Matthew Barnes <mbarnes@redhat.com> - 2.0.11-2
changelog:
  - Remove @SPELLER_LIB@ from Libs in gtkspell-2.0.pc.in (closes #116914).
  - Disable gtk-doc to resolve multilib conflict (closes #192683).
  - Various spec file cleanups.


author: Miroslav Lichvar <mlichvar@redhat.com> - 5:1.8.0-1
changelog:
  - update to guile-1.8.0
  - fix slib.scm for slib-3a3
  - install guile-tut info
  - move guile.m4 to devel package
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> - 5:1.8.0-3
changelog:
  - don't package .la files and static libraries (#191595)
  - move module .so files from devel to main package


author: Miroslav Lichvar <mlichvar@redhat.com> - 5:1.8.0-5
changelog:
  - remove dependency on slib, provide support through triggers
  - fix multilib -devel conflicts in guile-snarf and scmconfig.h (#192684)


author: Ivana Varekova <varekova@redhat.com> 1.3.5-8
changelog:
  - fix bug 204676 (patches by Tavis Ormandy)
    - cve-2006-4334 - null dereference problem
    - cve-2006-4335 - buffer overflow problem
    - cve-2006-4336 - buffer underflow problem
    - cve-2006-4338 - infinite loop problem
    - cve-2006-4337 - buffer overflow problem


author: Karel Klic <kklic@redhat.com> 1.3.5-11:.1
changelog:
  - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
    LZW format files
    Resolves: rhbz#555088


author: Karel Klic <kklic@redhat.com> 1.3.5-11.el5
changelog:
  - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
    LZW format files
    Resolves: rhbz#555089


author: Florian Festi <ffesti@redhat.com> - 0.6.1-1
changelog:
  - bump to 0.6.1 (fixed hal policy file)
  - added dummy init script for cups-config-daemon to fix the postun
    script of the 0.5.5 version


author: Tim Waugh <twaugh@redhat.com> - 0.6.2-5.1
changelog:
  - Use correct page size in locales that do not use US Letter (bug #221871).
    Requires system-config-printer-libs >= 0.7.32.6.


author: Tim Waugh <twaugh@redhat.com> - 0.6.2-5.2
changelog:
  - Initialize locale when setting page size from locale (bug #221871).  If
    locale is not set by HAL, fetch it from i18n sysconfig file.


author: David Zeuthen <davidz@redhat.com> - 0.5.8.1-20.el5
changelog:
  - Update for fine-grained suspend/hibernate support
  - Resolves: #236907
  - Add support for IBM's EBus
  - Resolves: #238626
  - Add support for /sys/bus/vio
  - Resolves: #241940
  - Create lock files with predictable permissions (#241032)


author: David Zeuthen <davidz@redhat.com> - 0.5.8.1-22.el5
changelog:
  - Report primary videocard as system.hardware.primary_video.vendor and
    system.hardware.primary_video.product
    (backport of upstream commit f0552218bb71daa863a62d9ad578810e9f3e24e7)
  - Pass --quirk-none to pm-{suspend,hibernate} if the property
    power_management.quirk.none is set
    (backport of upstream commit 3f4580dfe7a5abf3acb1aabf58d03a50cf5137fa)
  - Resolves: #236907


author: David Zeuthen <davidz@redhat.com> - 0.5.8.1-23.el5
changelog:
  - Leave out F7 suspend/resume quirks for now as these F7 specific quirks
    don't work too well on RHEL5
  - Resolves: #236907


author: David Zeuthen <davidz@redhat.com> - 0.5.8.1-27.el5
changelog:
  - Backport retain privileges patch to avoid relying on haldaemon user
  - (slightly mod. upstream commit e3996a7b5fa880657458494ef4a4f99ed6d4fe5e)
  - Resolves: #378621


author: David Zeuthen <davidz@redhat.com> - 0.5.8.1-34{?dist}
changelog:
  - Add some more quirks
  - Resolves: #435290
  - Resolves: #435292
  - Resolves: #435295
  - Resolves: #435296


author: Richard Hughes <rhughes@redhat.com> - 0.5.8.1-36{?dist}
changelog:
  - Add the keymap setkeycode ioctl set code and the quirks from hal-info
    to fix many, many models of laptops.
  - Resolves: #442623


author: Richard Hughes <rhughes@redhat.com> - 0.5.8.1-44{?dist}
changelog:
  - Backport a fix to detect where buggy firmware causes hald to see pressed
    CDs and DVDs as blank
  - Resolves: #488265


author: Richard Hughes <rhughes@redhat.com> - 0.5.8.1-46{?dist}
changelog:
  - Add the same UDI checks for hal-set-property and hal-device to
    hal-0.5.8.1-udi-not-exist-get-property.patch to fix QA failure.
  - Resolves: #461314


author: Richard Hughes <rhughes@redhat.com> - 0.5.8.1-60{?dist}
changelog:
  - Do not force noexec onto media devices as it offers no real security
    and breaks some of the existing tools.
  - Resolves: #480716


author: Richard Hughes <rhughes@redhat.com> - 0.5.8.1-61{?dist}
changelog:
  - Do not poll drives that have the storage.media_check_enabled key set
    to FALSE.
  - Resolves: #454923


author: Richard Hughes <rhughes@redhat.com> - 0.5.8.1-62{?dist}
changelog:
  - Modify /etc/init.d/haldaemon to parse the /etc/sysconfig/haldaemon
    config file in for extra parameters.
  - Resolves: #576045


author: Richard Hughes <rhughes@redhat.com> - 0.5.8.1-64{?dist}
changelog:
  - Do not print an incorrect console warning when hald spawns a runner
    with input values. Fixes the error message:
    'Warning: Error while wite r->input () to stdin_v.'
  - Resolves: #704079


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add hardlink man page
  - add -h option
  - use _sbindir instead of /usr/sbin directly
  - don't warn because of uninitialized variable
  - spec cleanup


author: Karsten Hopp <karsten@redhat.de> 6.1-1
changelog:
  - update to 6.1 (BLKGETSIZE fixes)
  - work around hdparm's usage of kernel headers, assume
    that we run it on little-endian machines only


author: Nalin Dahyabhai <nalin@redhat.com> - 3.1.0-5
changelog:
  - don't override libtool's defaults for permissions on its .la file, because
    we don't get debuginfo if the execute bit isn't set (pjones, in #190219)


author: Nalin Dahyabhai <nalin@redhat.com> - 3.1.0-6
changelog:
  - run autoreconf instead of autoconf after untarring so that we get a
    config.h.in which suits the changes we make to configure.in (part of #197938)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9-2
changelog:
  - add URL to fedorahosted home page, and mention it in the man page as a means
    to report bugs and whatnot (part of #491719)
  - correct the license tag: "X11" -> "MIT" (part of #491719)
  - expand the acronym HMAC in the description (part of #491719)
  - disable the sumfile prefix (part of #491719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.2-1
changelog:
  - provide a way to override the directory which will be searched for self-check
    values (part of #491719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6-1
changelog:
  - fix 'make check' by using binaries built with a different path for their
    own check files
  - add a non-fips compile-time option, which we don't use


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6-2
changelog:
  - backport changes to ensure that hmaccalc can always find prelink where it
    was at build-time, regardless of the value of $PATH at runtime (#512275)
  - buildrequire prelink on architectures where we have it, so that it will be
    found at build-time


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6-4
changelog:
  - when checking, don't truncate the sums we read from the checkfile, just check
    them as they are (#658178)


author: Tim Waugh <twaugh@redhat.com> 1.6.7-2
changelog:
  - 1.6.7.
  - Conflict with selinux-policy < 2.3.4 to make sure new port numbers are
    known about (bug #201357).


author: Tim Waugh <twaugh@redhat.com> 1.6.7-4.1
changelog:
  - Fixed default config file (bug #212953).
  - Fixed operation on IPv6-enabled machines (bug #212948).  Local-only
    sockets are IPv4,
  - Moved libhpip to hpijs sub-package (bug #212532).


author: Tim Waugh <twaugh@redhat.com> 1.6.7-4.1.el5_2.4
changelog:
  - Applied patch to make hpssd message parser more robust (bug #457052).
  - Applied patches to fix insecure alert emails (bug #455235).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixed post scriptlet to make sure it restarts the daemon on upgrade
    (part of bug #320021).
  - Build requires openssl-devel (part of bug #320021).


author: Tim Waugh <twaugh@redhat.com> 1.6.7-5
changelog:
  - Moved libhpip library to main package (bug #457440).
  - Don't use "/usr/bin/env python" for Python scripts (bug #521857).


author: Tim Waugh <twaugh@redhat.com> 3.9.8-2
changelog:
  - Fixes from package review:
    - Main package and hpijs sub-package require cups for directories.
    - The common sub-package requires udev for directories.
    - The libs sub-package requires python for directories.
    - Avoided macro in comment.
    - The lib sub-package now runs ldconfig for post/postun.


author: Tim Waugh <twaugh@redhat.com> 3.9.8-3
changelog:
  - Fixes from package review:
    - Use python_sitearch macro.
    - Avoided macro in comment.
    - The libsane-hpaio3 sub-package requires sane-backends-libs for
      directories.


author: Tim Waugh <twaugh@redhat.com> 3.9.8-9
changelog:
  - Further use of unavailable dbus features removed.
  - Don't ship hp3-devicesettings as it requires PyQt4.


author: Tim Waugh <twaugh@redhat.com> 3.9.8-10
changelog:
  - Remove more programs that require PyQt4: hp3-faxsetup,
    hp3-linefeedcal, hp3-pqdiag, hp3-printsettings, hp3-wificonfig.


author: Deepak Bhole <dbhole@redhat.com> 1:1.8.0.4-2jpp.1
changelog:
  - Add missing requirements.
  - Merge with fc spec.
    - From gbenson@redhat.com:
      - Change /etc/init.d to /etc/rc.d/init.d.
      - Create hsqldb user and group with low IDs (RH bz #165670).
      - Do not remove hsqldb user and group on uninstall.
      - Build with servletapi5.
    - From ashah@redhat.com:
      - Change hsqldb user shell to /sbin/nologin.
    - From notting@redhat.com
      - use an assigned user/group id


author: Jon Prindiville <jprindiv@redhat.com> 1:1.8.0.4-3jpp.6
changelog:
  - Updating the config files forgotten in the previous revision
  - Still addressing CVE-2007-4576
  - Resolves: #303581


author: Adam Tkac <atkac redhat com> 3:3.2.0b6-11
changelog:
  - handle databases with zero words well (#222419)
  - htstat got segfault when there are no words in db
  - write error message when external parser doesn't exist (#435741)
  - don't write spurious error when allow_numbers is true (#435743)
  - mark modifiable config files as noreplace (#459971)


author: Joe Orton <jorton@redhat.com> 2.2.3-8.el5
changelog:
  - add 'ServerTokens Full-Release' config option (#240857)
  - use init script in logrotate postrotate (#241680)
  - fix mod_proxy option inheritance (#245719)
  - fix ProxyErrorOverride to only affect 4xx, 5xx responses (#240024)
  - bump logresolve line buffer length to 10K (#245763)
  - add security fixes for CVE-2007-1863, CVE-2007-3304,
    and CVE-2006-5752 (#244666)


author: Joe Orton <jorton@redhat.com> 2.2.3-11.el5_1.1
changelog:
  - add security fixes for CVE-2007-6388, CVE-2007-6421
    and CVE-2007-6422 (#427240)
  - add security fix for CVE-2007-4465, CVE-2007-5000 (#421631)
  - add security fix for mod_proxy_ftp UTF-7 XSS (#427745)


author: Joe Orton <jorton@redhat.com> 2.2.3-13.el5
changelog:
  - mod_proxy_balancer: allow alternative string to match for
    stickysession parameter (#439218)
  - fix dist tag in Release (#440615)


author: Joe Orton <jorton@redhat.com> 2.2.3-15.el5
changelog:
  - mod_ldap: fix memory lifetime issues (#440259)
  - mod_ssl: configure OpenSSL dynamic lock callbacks (#462044)
  - escape the Request-Method in canned error responses (#445888)
  - build the event MPM and fix a deadlock therein (#444643)
  - mod_headers: support "RequestHeader edit" (#428253)
  - use "OPTIONS *" rather than "GET /" in dummy connection (#367981)


author: Joe Orton <jorton@redhat.com> 2.2.3-16.el5
changelog:
  - mod_proxy*, mod_cache*: rebase to 2.2.9 (#252024, #249534,
    - backport changes to make chunk filter non-blocking (#454098)


author: Joe Orton <jorton@redhat.com> 2.2.3-22.el5
changelog:
  - add security fixes for CVE-2008-2939 (#468841)
  - note that the mod_proxy 2.2.9 rebase fixed CVE-2008-2634


author: Joe Orton <jorton@redhat.com> 2.2.3-25.el5
changelog:
  - mod_rewrite: fix URI escaping with [P] in directory context (#480604)
  - mod_cgi: fix headers/status in error responses (#480932)
  - mod_speling: fix handling of directory names (#485524)
  - init script: use ${pidfile} in more places (#491135)
  - mod_log_config: support remote/local with 'p' format (#493070)
  - remove Obsolete for mod_jk (#493592)
  - mod_ssl: fix SSL per-dir-reneg buffering with internal redirects (#488886)
  - fix spurious error messages on graceful restart (#233955)


author: Joe Orton <jorton@redhat.com> 2.2.3-27.el5
changelog:
  - mod_cgi, mod_cgid: fix logging on input read error (#498170)
  - mod_rewrite: don't serialize logfile access (#493023)
  - mod_ext_filter: fix spurious error log output (#479463)


author: Joe Orton <jorton@redhat.com> - 2.2.3-31.3
changelog:
  - mod_ssl: add SSLInsecureRenegotiation (#567980)
  - add security fixes for CVE-2010-0408, CVE-2010-0434 (#570440)


author: Joe Orton <jorton@redhat.com> - 2.2.3-38
changelog:
  - mod_ssl: fix additional case for OID() handling (#552942)
  - mod_authnz_ldap: fix handling of empty filter in group defn (#252038)


author: Joe Orton <jorton@redhat.com> - 2.2.3-43.2
changelog:
  - add security fixes for CVE-2010-1452, CVE-2010-2791 (#623210)
  - mod_deflate: rebase to 2.2.15 (#625435)
  - stop multiple invocations of filter init functions (#625451)


author: Joe Orton <jorton@redhat.com> - 2.2.3-44
changelog:
  - mod_ssl: improved fix for SSLRequire's OID() function (#614423)
  - add security fixes for CVE-2010-1452, CVE-2010-2791 (#623211)
  - mod_deflate: rebase to 2.2.15 (#612211)
  - stop multiple invocations of filter init functions (#570628)


author: Joe Orton <jorton@redhat.com> - 2.2.3-45
changelog:
  - ab: fail gracefully for OOM allocating stats structures (#645845)
  - init script: use $STOP_DELAY as delay before SIGKILL of parent (#644223)
  - mod_dav: don't delete the existing resource if a PUT fails (#572910)
  - core: don't replace Date header when acting as reverse proxy (#565865)
  - mod_dbd: fix pool usage (#633955)


author: Joe Orton <jorton@redhat.com> - 2.2.3-49
changelog:
  - mod_proxy: add support for 'bybusyness' balancer (#555870)
  - mod_authnz_ldap: enable handling of referrals (#604727)
  - add mod_reqtimeout (#612198)
  - mod_ssl: fix use of overlapping memcpy (#636427)
  - mod_ssl: fix startup with duplicate SSL vhost configurations (#649648)
  - mod_proxy: fix proxy via chained SSL intermediary (#658766)
  - mod_proxy: fix header mapping for balancer:// URLS (#678057)
  - mod_filter: fix matching against response headers (#679994)
  - mod_ldap: fix caching in some configs (#264681)
  - mod_headers: correctly handle multiple matched headers (#673276)


author: Joe Orton <jorton@redhat.com> 2.2.2-5
changelog:
  - require pkgconfig for -devel (#194152)
  - fixes for installed support makefiles (special.mk et al)
  - BR autoconf


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.3-59
changelog:
  - mod_proxy: add connectiontimeout option (#719907)
  - mod_alias: support Redirect to local path (#714725)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.3-60
changelog:
  - rotatelogs: create files even if they are empty (#677279)
  - rotatelogs: option to rotate files into a custom location (#677288)
  - mod_proxy: allow change BalancerMember state in web interface (#709869)


author: Joe Orton <jorton@redhat.com> - 2.2.3-62
changelog:
  - mod_ldap: add support for nested groups (#546443)
  - mod_ssl: fix segfault with bad SSLCryptoDevice argument (#767990)


author: Joe Orton <jorton@redhat.com> - 2.2.3-63.1
changelog:
  - add security fixes for CVE-2012-0053, CVE-2012-0031, CVE-2011-3607 (#787596)	
  - remove patch for CVE-2011-3638, obviated by fix for CVE-2011-3639


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.3-66
changelog:
  - check if localhost.key is valid (#752618)
  - mod_proxy_ajp: honour ProxyErrorOverride (#767890)
  - mod_ssl: fixed start with FIPS 140-2 mode enabled (#773473)


author: Joe Orton <jorton@redhat.com> - 2.2.3-67
changelog:
  - add server aliases to "httpd -S" output (#833043)
  - LSB compliance fixes for init script (#783242)
  - mod_ldap: add LDAPReferrals directive alias (#727342)


author: Joe Orton <jorton@redhat.com> - 2.2.3-68
changelog:
  - mod_ssl: add _userID DN variable suffix for NID_userId (#840036)
  - fix handling of long chunk-line (#840845)
  - omit %posttrans daemon restart if
     /etc/sysconfig/httpd-disable-posttrans exists (#833042)


author: Joe Orton <jorton@redhat.com> - 2.2.3-69
changelog:
  - mod_cache: fix header merging for 304 case, thanks to Roy Badami (#845532)
  - correct CVE reference in old changelog entry (#849160)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.3-86
changelog:
  - mod_proxy: ignore EINTR when polling in proxy_connect (#976465)
  - mod_ssl: do not cache CRL lookups (#1058426)
  - mod_ldap: fix crash in uldap_cache_getattrvals (#1047319)
  - mod_authnz_ldap: fix setting up environment variables for auth only (#1038276)


author: Doug Ledford <dledford@redhat.com> - 0.4-3
changelog:
  - Rebuild against updated libibmad and libibumad libraries
  - Only need to build require libibmad, it pulls in libibumad
  - Resolves: bz451466


author: Doug Ledford <dledford@redhat.com> 1.0-2
changelog:
  - Make spec file name convention/multilib compliant
  - Move all the files to FHS compliant locations for a distributor


author: Doug Ledford <dledford@redhat.com>
changelog:
  - Bump and rebuild against latest openib packages
  - Disable ibmgtsim until I can figure out why it's failing to wrap a
    perfectly existent library function (I hate c++)


author: Doug Ledford <dledford@redhat.com> - 1.2-4
changelog:
  - Upstream has updated the tarball without changing the version number,
    grab the tarball from the OFED-1.4-beta1 tarball and use it.
  - Resolves: bz451467


author: Doug Ledford <dledford@redhat.com> - 1.2-7
changelog:
  - Grab the upstream ibutils git repo, find a checkout that supports the
    recent opensm library versions and yet doesn't require graphviz-tcl,
    export that tree to a tarball with a git designation, build from it.
  - Resolves: bz468122


author: Doug Ledford <dledford@redhat.com> - 1.2-8
changelog:
  - Remove ibdiagui from the package entirely since it still doesn't work
    without graphviz-tcl
  - Related: bz468122


author: Jay Fenlason <fenlason@redhat.com> 1.2-11.2.el5
changelog:
  - Added Requires lines for ibutils-libs to make rpmdiff happier.
  - Add patch for CVE-2008-3277
    Resolves: bz768400


author: Caolan McNamara <caolanm@redhat.com> - 3.6-5.10
changelog:
  - Resolves: rhbz#226949 telegu rendering problem in OOo
  - Resolves: rhbz#228458 gujarati dependent vowel treated as independent
  - Resolves: rhbz#214948 multiple dependant vowel signs displayed as one


author: Caolan McNamara <caolanm@redhat.com> - 3.6-5
changelog:
  - rh#208705# add pkg-config Require for -devel package
  - add icu.icu5431.malayam.patch for rh#208551#/rh#209084#
  - add icu.icu5433.oriya.patch for rh#208559#/rh#209083#


author: Bob Relyea <rrelyea@redhat.com> 0.05-8
changelog:
  - add provides pcsc-ifd-handler so which fulfills the pcsc-lite dependency for
    at least one reader.


author: Bob Relyea <rrelyea@redhat.com> 0.05-9
changelog:
  - integrate review comments:
  - rename timing patch.
  - make libusb-version a define.
  - use pkg-config to find the appropriate flags and directories for pcsc-lite
  - fix service restart to be more friendly
  - remove mac specific README


author: Akira TAGOH <tagoh@redhat.com> - 0.3.2-1
changelog:
  - New upstream release.
    - added an icon. (#199337)
  - removed the unnecessary patches:
    - im-chooser-r49.patch
    - im-chooser-r53.patch


author: Petr Machata <pmachata@redhat.com> 2.2.9-9
changelog:
  - Silenting some warnings, voidifying some functions that were
    implicitly int but didn't actually return anything. (#114376)


author: Petr Machata <pmachata@redhat.com> 2.2.9-10
changelog:
  - Changed the placement of closing `while' of `do {} while' command
    under a -cdw option.  It's now cuddled up to the brace. (#67781)
  - Changed the indentation of cuddled `else': the brace is lined up
    under opening brace.  Let's see if people like it.  It looks less
    strange than before, but still it looks strange.


author: Hal Rosenstock <halr@voltaire.com> - 1.2.4
changelog:
  - OpenFabrics 1.2.4 release
  - Fix diag rpmbuild from make dist
  - Include set_mthca_nodedesc.sh and dump_lfts.sh in the rpm


author: Hal Rosenstock <halr@voltaire.com> - 1.2.5
changelog:
  - Find perl modules in perl sitearch directory
  - Fix non standard prefix install for diag scripts
  - Clean gcc-4.1 warnings in saquery and ibdiag_common


author: Hal Rosenstock <halr@voltaire.com> - 1.3.0
changelog:
  - Add some extra debug information to IBswcountlimits.pm
  - Send normal output to stdout in ibtracert
  - Don't truncate NodeDescriptions containing ctl characters in ibdiag_common
  - Fix ibnetdiscover grouping for Cisco SFS7000
  - Add support to query the GUIDInfo table in smpquery
  - Allow user to specify a default switch map file


author: Hal Rosenstock <halr@voltaire.com> - 1.3.1
changelog:
  - Add link width and speed to topology file output in ibnetdiscover
  - Add support for -R(outer_list) in ibnetdiscover
  - Add script and man page for ibidsverify
  - Moved diags from bin to sbin
  - Add scripts and man pages for display on IB routers
  - Add GUID to output line for ports in ibqueryerrors.pl
  - Add ibdatacounts and ibdatacounters scripts and man pages
  - Add peer port link width and speed validation in iblinkinfo.pl
  - Display remote LID with peer port info in IBswcountlimits.pm
  - Handle peer ports at 1x that should be wider and 2.5 Gbps
    links that should be faster in ibportstate
  - Add LinkSpeed/Width components to output of ibportstate
  - Add support for IB routers 
  - Add grouping support for ISR2012 and ISR2004 in ibnetdiscover
  - Remove all uses of "/tmp" from perl scripts
  - Add switch map support for saquery -O and -U options
  - Add support for saquery -s (isSMdisabled)
  - Add name input checks to saquery (-O and -U)


author: Doug Ledford <dledford@redhat.com> - 1.5.3-1.el5
changelog:
  - Update to latest upstream version
  - Don't include the newly added devel stuff as it's likely only needed
    internally (and certainly not needed by anything we've supported before
    since we've never shipped it)
  - Related: bz518218


author: Jay Fenlason <fenlason@redhat.com> 1.5.3-3.el6
changelog:
  - Correct the perldir macro for rhel-6's perl.
  - Remove the unrecognized --with-node-name-map configure option.
  - reorganize the files section to use fewer globs, so that it's less likely
    to pick up files inappropriately.


author: Doug Ledford <dledford@redhat.com> - 1.5.5-1.el6
changelog:
  - Update and rebuild against latest opensm (which was needed for latest
    ibutils, which was needed for licensing issues resolved in new upstream
    tarball, which was needed for pkgwrangler review)
  - Related: bz555835


author: Doug Ledford <dledford@redhat.com> - 1.5.8-1.el6
changelog:
  - Update to latest upstream version
  - Make build work on i686 arch
  - Modify perfquery to be able to loop through all HCAs in a single host
  - Resolves: bz593767
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 1.5.12-2.el5
changelog:
  - Update the all_hcas patch to resolve several problems
  - Give a simple help message to the ibnodes script
  - Resolves: bz772602


author: Bill Nottingham <notting@redhat.com> 8.45.4.EL-1
changelog:
  - don't set CJKI as the language on virtual consoles (#209579)
  - use dmraid.static in rc.sysinit (#211297)
  - use sysfs interface for bonding, so multiple bonds work again (#202443, <agospoda@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.45.5.EL-1
changelog:
  - fix handling of undisplayable locales on the console some more (#209579, #212438)
  - use SUBCHANNEL as the primary identifier for s390 networking (#204803)


author: Bill Nottingham <notting@redhat.com> 8.45.7.EL-1
changelog:
  - fix gdm in CJKI (#209579, #213196)
  - rename_device: correctly ignore backup interface files
  - mount tmpfs with -n (#213132)


author: Bill Nottingham <notting@redhat.com> 8.45.10.EL-1
changelog:
  - add a step to rename any temporarily renamed devices (#208740, #204803, #214817)
  - rc.sysinit: fix reversed dmraid test (#216490)
  - translation updates (#216097)
  - don't automatically reload modules on module reomvals (#211474)
  - don't unmount network file systems (#217625)


author: Bill Nottingham <notting@redhat.com> 8.45.16.EL-1
changelog:
  - init.d/network: add support for VLAN_PLUS_VID_NO_PAD vlans (#229285)
  - network-functions: fix logic error in install_bonding_driver (#229643)
  - add init script for netconsole (#223742)
  - ifup-eth: set 'primary' later for bonding devices (#236897, <agospoda@redhat.com>)
  - init.d/halt: don't shut down the network in kexec (#223932, <mchristi@redhat.com>)


author: Bill Nottingham <notting@redhat.com>, Harald Hoyer <harald@redhat.com> 8.45.18.EL-1
changelog:
  - IKE_DHGROUP is now an option for IPsec configuration files, which allows
  to set the dh group used during PHASE 1 of IPsec SA (#251506)
  - arp_ip_target can now be used with a comma seperated IP list in BONDING_OPTS (#288151)
  - genhostid now generates only 32 bit hostids on 64 bit systems (#306811)
  - the check for the need of remounting the root file system read-writable
  is now refined (#334171)
  - quoted SUBCHANNELS and HWADDR options in network configuration files are
  now handled properly (#351291)
  - support for resuming from an encrypted swap has been added (#360071)
  - rc.sysinit now executes the proper configuration tools, if /.unconfigured
  is present (#426372)
  - Resolves: rhbz#251506 rhbz#288151 rhbz#306811 rhbz#334171 rhbz#351291 rhbz#360071 rhbz#426372


author: Bill Nottingham <notting@redhat.com> 8.45.19.EL-1
changelog:
  - also skip network shutdown if there is a '_rnetdev' root device (part of #435358, <pjones@redhat.com>)


author: Harald Hoyer <harald@redhat.com> 8.45.20-1
changelog:
  - changes to init scripts to better support stateless (#433702, <ahecox@redhat.com>)
  - call logger with full path (#447928, Mihai Vintila)
  - add a udevsettle before mounting _netdev devices (#452866, <bmr@redhat.com>)
  - reduce device initialization overhead for ccw devices (#437110, Glen Johnson)
  - Resolves: rhbz#433702 rhbz#452866 rhbz#447928 rhbz#437110


author: Harald Hoyer <harald@redhat.com> 8.45.22-1
changelog:
  - refined SUBCHANNEL grep statement (bug #459044)
  - blkid has a -l option to pick a single device. Use it. (#470027)
  - don't mkswap on halt (#469823)
  - fixed bonding arp_ip_target handling (#467954) (Darcy Sherwood)
  - Resolves: rhbz#459044, rhbz#470027, rhbz#469823, rhbz#467954


author: Harald Hoyer <harald@redhat.com> 8.45.26-1
changelog:
  - add md activation before lvm/device-mapper in netfs (#480627)
  - fixed SUBCHANNEL grep for s390
  - Move the bridge member handling later in the ifdown sequence (#463325, Sean E. Millichamp <sean@bruenor.org>)
  - Allow changing of VLAN type even if the module is already loaded. (#495053, <pietro@bertera.it>)
  - add gfs2 to rc.sysinit mount (#494963)
  - support ETHTOOL_OPTS on bridge devices (#493255, <bbaetz@acm.org>)
  - Add vlan support for s390 HSI interfaces. (#490584)
  - Don't re-init an existing device, it causes errors. (#484411, <jpayne@redhat.com>)
  - Remove arp_ip_target on ifdown for bonding devices. (#483711)
  - Don't unmount the nfsd filesystem when unmounting nfs client mounts. (#481794, <sprabhu@redhat.com>)
  - Bring up ipsec interfaces last. (#481733)
  - Break deadlock by explicitly handling alias for CTC and IUCV (#475721)
  - Determine reboot/halt via existing INIT_HALT environment variable. (#475006)
  - Add some docs on BONDING_OPTS. (#472480)
  - Don't say that we're shutting off crypto if we aren't actually doing it. (#471944)
  - remove empty bridges (#463325)
  - Add a address check capability for IPv4 and IPv6 addresses. (#464268)
  - fail if HWADDR specified in ifcfg is not present in the system (#487718)
  - fix ifdown of vlan iface which is a bridge member (#481557)
  - add proper return codes for /etc/init.d/network (#481002)
  - fixed brigde setup (bug #463014)
  - Add an option for consoletype to always return 0. (#453798, <notting@redhat.com>)
  - Use the pidfile before running pidof in status(). (#440658)
  - Allow passing of arguments to dhcp6c (#437949, <pekkas@netcore.fi>)
  - Remove /.suspended as well on boot (#270861)
  - Allow use of either ESP only or AH only (#251494, <stijn.tintel@x-tend.be>)
  - Resolves: rhbz#251494,rhbz#270861,rhbz#437949,rhbz#440658,rhbz#453798,
              rhbz#463014,rhbz#463325,rhbz#464268,rhbz#471944,rhbz#472480,
              rhbz#475006,rhbz#475721,rhbz#475770,rhbz#480627,rhbz#481002,
              rhbz#481557,rhbz#481733,rhbz#481794,rhbz#483711,rhbz#484411,
              rhbz#487718,rhbz#490584,rhbz#493255,rhbz#494963,rhbz#495053


author: Harald Hoyer <harald@redhat.com> 8.45.28-1
changelog:
  - fixed "Determine reboot/halt via existing INIT_HALT environment variable. (#475006)
  - Resolves: rhbz#475006


author: Phil Knirsch <pknirsch@redhat.com> 8.45.29-3
changelog:
  - Final fixes for IP address validation (#464268)
  - Added required 54-cu3088-fix.rules udev rules file (#475721)
  - Resolves: #464268,#475721


author: Harald Hoyer <harald@redhat.com> 8.45.30-2
changelog:
  - fix raw path in initscript (#472891)
  - remove deprecation comments (#472891)
  - Resolves: rhbz#472891


author: Harald Hoyer <harald@redhat.com> 8.45.30-2
changelog:
  - fix raw path in initscript (#472891)
  - remove deprecation comments (#472891)
  - applied missing ipcalc patch for IPv6 address validation (#464268)
  - Resolves: rhbz#472891 rhbz#464268


author: Harald Hoyer <harald@redhat.com> 8.45.31-1
changelog:
  - do not killall racoon with the full path
  Resolves: rhbz#567295
  - fixed the interactive startup keys in translation
  Resolves: rhbz#566579
  - do not clear the environment for daemon()
  Resolves: rhbz#564093
  - call unicode_start with $UNIMAP instead of $SYSFONTACM
  Resolves: rhbz#557089
  - fixed the network interface name grep in checks
  Resolves: rhbz#538863
  - make /var/lib/xend a bind mount for read-only root systems
  Resolves: rhbz#526046
  - do not try to activate individual dmraid subsets
  Resolves: rhbz#524356
  - create /var/run/utmp* /var/log/wtmp* with the correct selinux context
  Resolves: rhbz#519748
  - load the bonding driver, if bonding options are present in the ifcfg file
  Resolves: rhbz#516569
  - run quotacheck after the local filesystems have been mounted
  Resolves: rhbz#499207
  - add DHCP_HOSTNAME documentation to sysconfig.txt
  Resolves: rhbz#498052
  - remove /var/run/dovecot/* also (not only /var/run/dovecot/*/*)
  Resolves: rhbz#492994


author: Harald Hoyer <harald@redhat.com> 8.45.34-1
changelog:
  - if $LANG is set, don't override it
  Resolves: rhbz#692893
  - fix arp_ip_target for ifup/ifdown
  Resolves: rhbz#604669
  - add udev rules for OSX Devices (1731/2)
  Resolves: rhbz#653621


author: Harald Hoyer <harald@redhat.com> 8.45.35-1
changelog:
  - fix VLAN configs with non-numeric interface names
  Resolves: rhbz#462095
  - do not ignore IPv6 aliases
  Resolves: rhbz#612877
  - support vlan tag 0
  Resolves: rhbz#624704
  - clarify comment of checkpid()
  Resolves: rhbz#637176
  - specify DEVICETYPE for InfiniBand
  Resolves: rhbz#648524
  - fix grep in lang.csh
  Resolves: rhbz#649995
  - support "#" in interface names
  Resolves: rhbz#664091
  - fixed sysctl calls fail with VLANs
  Resolves: rhbz#665601
  - fixed loop for switched MACs
  Resolves: rhbz#669728
  - fixed dmraid output parsing
  Resolves: rhbz#671386
  - fixed MASTER in double quotes
  Resolves: rhbz#674221
  - don't do force/lazy umount for the first nfs umount
  Resolves: rhbz#676851 rhbz#687890
  - fixed DHCPv6 if no IPv4 address configured
  Resolves: rhbz#684909
  - disable link checking when PERSISTENT_DHCLIENT is set
  Resolves: rhbz#685038
  - no more noisy output for iscsid check during shutdown or reboot
  Resolves: rhbz#687849
  - clarified mount option in netfs
  Resolves: rhbz#689898


author: Harald Hoyer <harald@redhat.com> 8.45.36-1
changelog:
  - add net_log
  Resolves: rhbz#507515
  - do not umount mount points with nfs in the path
  Resolves: rhbz#703203
  - remove /var/run/subsys/rhsm on startup
  Resolves: rhbz#705236


author: Petr Lautrbach <plautrba@redhat.com> 8.45.39-1
changelog:
  - suppress remove error message during boot (#679998)
  - fix logic error with removing arp_ip_target (#745681)


author: Lukas Nykryn <lnykryn@redhat.com> - 8.45.43-1
changelog:
  - add a -l option to status to pass the lock file name (#852967)
  - clarify docs around IPV6INIT=yes/no (#545881)
  - support ipv6 routing rules by merging IPv4/IPv6, and route/rule code (#853038)
  - make killproc more granular when delay is passed (#843386)
  - don't accidentally match other bonding devices (#880890)
  - set NIS domain (#705218)
  - don't set primary before we enslave devices (#747418)


author: Lukas Nykryn <lnykryn@redhat.com> - 8.45.44-1
changelog:
  - move VLAN= docs to the interface configuration section, rather than /etc/sysconfig/network (#860252)
  - fix comments in sysctl.conf (#862597)
  - sysctl.d manpage (#735982)
  - check_device_down: Don't bother calling ip to check link state if the device doesn't exist (#814058)
  - test if there is /dev/rtc before syncing hardware clock (#636861)
  - sysconfig.txt advised saslauthd -a instad of -v (#957109)


author: Lukas Nykryn <lnykryn@redhat.com> - 8.45.45-2
changelog:
  - bridging: add possibility to set prio and ageing
  - ifup: add possibility to specify value for -w parameter of arping
  - Don't try to startup crypto if we can't find the device, or if it isn't there.
  - create /tmp/.X11-unix in rc.sysinit


author: Karsten Hopp <karsten@redhat.de> 2.4.2-4
changelog:
  - rebuild with current rpm
  - include .pyc and pyo files created by /usr/lib/rpm/brp-python-bytecompile


author: Martin Stransky <stransky@redhat.com> 2.4.3-6
changelog:
  - added dist tag
  - added patch from #204371 - innd.init script should use 
    ctlinnd to stop the server


author: Ondrej Vasik <ovasik@redhat.com> 2.4.3-7
changelog:
  - moved makedbz command from post to init script due to 
    sporadic failures of su in install everything


author: Ondrej Vasik <ovasik@redhat.com> 2.4.3-8
changelog:
  - Make innd init script LSB compliant (#238133)
  - Inn package now should own several more its directories
    under /usr/lib/news(#448088)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-1
changelog:
  - Initial spec
  - policycoreutils version set to 2.0.78-3 to fix problem with
    restorecon returning 1 in non-failure cases.


author: Rob Crittenden <rcritten@redhat.com> - 2.0-2
changelog:
  - Remove some commented-out Requires
  - Replace Requires on nss_ldap with nss-pam-ldapd (#559004)
  - Add patch to attempt to configure a number of nss_ldap related files
    if installed and configure nslcd.conf if installed (#559004)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-4
changelog:
  - Update source tarball to freeIPA v2.0 alpha 3 (tag 1.9.0_alpha3) (#556620)
  - More spec file clean ups
  - Don't install the po files so it doesn't conflict with the server
    ipa-python package


author: Rob Crittenden <rcritten@redhat.com> - 2.0-7
changelog:
  - Update nokrbv patch to remove another usage of python-krbV that
    isn't directly used by ipa-client but fails the build. (#598626)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-8
changelog:
  - Re-add patch to attempt to configure a number of nss_ldap related files
    if installed and configure nslcd.conf if installed. This got inadvertantly
    dropped when the source tarball was re-based (#559004)
  - Update nokrbv patch to remove another usage of python-krbV that
    isn't directly used by ipa-client but fails at runtime. (#598626)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-10
changelog:
  - Port to RHEL-5 (#607772)
  - Drop nslcd patch
  - Drop move binaries patch
  - authconfig 6.0 isn't available so we can't automatically configure sssd
    so configure nss_ldap instead


author: Rob Crittenden <rcritten@redhat.com> - 2.0-12
changelog:
  - Update to upstream 2.0.0rc3 (#631907)
  - Add patch to work on Python 2.4
  - Set minimum Requires for authconfig to 5.3.21-7 (sssd support)
  - Set minimum Requires for openssl to 0.9.8e-18 (sha2 support)
  - Add Requires for sssd, set minimum to sssd-1.5.1-18
  - Add Requires for bind-utils
  - Remove Requires on nss_ldap
  - Update license to GPLv3+


author: Rob Crittenden <rcritten@redhat.com> - 2.0-14.1
changelog:
  - Use updated xmlrpc-c API to do GSSAPI ticket delegation (#736658)
  - Set minimum curl and xmlrpc-c to pull in new delegation API (#736658)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-15
changelog:
  - KDC autodiscovery may fail when domain != realm (#710143)
  - Use updated xmlrpc-c API to do GSSAPI ticket delegation (#723667)
  - Set minimum curl and xmlrpc-c versions (#723667)
  - Require arch-specific cyrus-sasl-gssapi (#723620)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-16
changelog:
  - _isa is not defined in RHEL 5, use alternate mechanism to require
    arch-specific cyrus-sasl-gssapi (#723620)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-1
changelog:
  - Rebase to upstream 2.1.3 (#753936)
  - Updated patch for CVE-2011-3636 to include CR in the HTTP headers.
    xmlrpc-c in RHEL-6 doesn't support the dont_advertise option so that is
    not set any more. Another fake header, X-Original-User_Agent, is added
    so there is no more trailing junk after the Referer header.  (#752226)
  - Add ia64 to list for 64-bit cyrus-sasl-gssapi (#750338)
  - Set minimum n-v-r of sssd to 1.5.1-40


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-3
changelog:
  - Fix method that replaced values in config files, it would result
    in a zero-length file (#813387)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-6
changelog:
  - Make certutil failures non-fatal (#821500)
  - Fix segfault in ipa-join when unenrolling a client (#961132)
  - Handle double-encoded CA certificate (#915504)
  - Fix client enrollment failover (#949632)
  - Add missing Requires on pyOpenSSL (#907071)
  - Client functionality in CA-less mode (#955652)
  - Add Requires on python-kerberos (#955652)


author: Radek Vokal <rvokal@redhat.com> - 2.6.18-1
changelog:
  - upgrade to upstream 2.6.18
  - initcwnd patch merged
  - bug fix for xfrm monitor
  - alignment fixes for cris
  - documentation corrections


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.18-7
changelog:
  - [iPv6DoD] fix RFC 4309 Using AES CCM Mode with IPsec ESP
  - change xfrm.h header according to ibm patch
  - Resolves: #441384


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.18-8
changelog:
  - change ss.c - use standart library
  - fix segfault - only hexadecimal keys are possible values for xfrm
  - support for TCP_RTO_MIN
  - update of man ip - xfrm details
  - IPv6 Default Address Selection - User Configurable Policy Table
  - Resolves: rhbz#446198, rhbz#449933, rhbz#358351, rhbz#431011, rhbz#439524


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.18-10
changelog:
  - “ip maddr show” on an infiniband address causes a stack corruption 
   because the length of the address for Infiniband
  - Resolves: rhbz#472878


author: Petr Sabata <contyk@redhat.com> - 2.6.18-13
changelog:
  - Correct lnstat usage (dump, keys)
  - Resolves: rhbz#645264
  - Correct arpd usage (various missing options), based on Petr Lautrbach's patch
    for bug 592266
  - Resolves: rhbz#645260
  - Correct ss usage (query, diag)
  - Resolves: rhbz#645267


author: Steve Grubb <sgrubb@redhat.com> - 0.6.5-8
changelog:
  - Upstream fix for Racoon DOS, informational delete must be encrypted
  - Resolves: rhbz#235388 - CVE-2007-1841 ipsec-tools racoon DoS


author: Tomas Mraz <tmraz@redhat.com> - 0.6.5-11
changelog:
  - fix cleanup of IPSEC SAs in SADB (#231604)
  - fix segfault in timer (#378551)
  - handle new interfaces immediately (#247301)
  - eliminate debug logging overhead when log level is lower (#248567)
  - use the adminsock_path as specified on the command line (#247294)
  - link only necessary libraries (#458631)
  - make racoon PIE executable (#210023)
  - fix for DoS through various memory leaks (CVE-2008-3651 #456660,
    CVE-2008-3652 #458846)


author: Tomas Mraz <tmraz@redhat.com> - 0.6.5-14.4
changelog:
  - fix non-exact policy matching (#606904)
  - make pfkey socket buffer size configurable (#607361)
  - use separate pfkey socket for sadb dumps (#590783)
  - do not delete phase 2 SAs when phase 1 delete notification is received (#599115)


author: Tomas Mraz <tmraz@redhat.com> - 0.6.5-14.2
changelog:
  - use separate pfkey socket for sadb dumps (#590783)
  - do not delete phase 2 SAs when phase 1 delete notification is received (#599115)


author: Tomas Mraz <tmraz@redhat.com> - 0.6.5-14.5
changelog:
  - do not dereference ph1 when it might be NULL
  - increase the default pfkey socket buffer size and never decrease it


author: Dan Walsh <dwalsh@redhat.com> - 0.6.5-1
changelog:
  - Update to latest upstream version
  - Add MLS Patch to allow use of labeled networks
  - Patch provided by Joy Latten <latten@austin.ibm.com>


author: Harald Hoyer <harald@redhat.com> - 0.6.5-4
changelog:
  - backport of important 0.6.6 fixes:
    - sets NAT-T ports to 0 if no NAT encapsulation
    - fixed memory leak


author: Steve Grubb <sgrubb@redhat.com> - 0.6.5-6.3
changelog:
  - Resolves: #234491 kernel sends ACQUIRES that racoon is not catching
  - Resolves: #218386 labeled ipsec does not work over loopback


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-1
changelog:
  - new version 1.3.4
  - dropped free_opts patch (upstream fixed)
  - made libipq PIC (#158623)
  - additional configuration options for iptables startup script (#172929)
    Thanks to Jan Gruenwald for the patch
  - spec file cleanup (dropped linux_header define and usage)


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-2
changelog:
  - fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and 
    replace "_init" with "__attribute((constructor)) my_init"


author: Thomas Woerner <twoerner@redhat.com> 1.3.5-4.el5
changelog:
  - fixed man page for dscp extension max value
    Resolves: rhbz#239383
  - fixed missing extension modules, because of build problems
    Resolves: rhbz#244047


author: Thomas Woerner <twoerner@redhat.com> 1.3.5-5
changelog:
  - fixed init script return codes for LSB conformance
    Resolves: rhbz#242457
  - fixed ICMP6 reject types
    Resolves: rhbz#253014
  - fixed missing headers in iptables-devel package
    Resolves: rhbz#402281, rhbz#487649
  - fixed dist tag in release
    Resolves: rhbz#440622
  - added all options to the man page of iptables-restore
    Resolves: rhbz#474847
  - added DSCP match target for IPv6
    Resolves: rhbz#480371
  - removed unsuppported ipt_ROUTE from documentation
    Resolves: rhbz#485834


author: Thomas Woerner <twoerner@redhat.com> 1.3.5-5.2
changelog:
  - reverting init script return codes because of bahaviour change, only fixing
    the ipchains test
    Related: rhbz#242457


author: Thomas Woerner <twoerner@redhat.com> 1.3.5-7
changelog:
  - reverting to 1.3.5-5.4
    - dropped SECMARK targets again (rhbz#535074)
    - dropped ipt_connlimit_data alignment patch (rhbz#520797)


author: Thomas Woerner <twoerner@redhat.com> 1.3.5-8
changelog:
  - added libipt_statistic support (rhbz#471163)
  - added patch to load sysctl settings on iptables start (rhbz#552522)
    Thanks to Martin Foster for the patch
  - added patch to load ip_tables.ko just before checking revision support in
    kernel. (rhbz#554340)
  - added reload action for service script (rhbz#710050)


author: Thomas Woerner <twoerner@redhat.com> 1.3.5-9.1
changelog:
  - added reload to usage output of init script (rhbz#710050)
  - only reload if iptables was started before (rhbz#710050)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.0.0-1
changelog:
  - update to release 3.0.0
  - spec cleanup
  - drop cfgpath patch
  - fix bad display of frames on linux console (#140698)


author: Martin Bacovsky <mbacovsk@redhat.com> - 20020927-40
changelog:
  - tracepath doesn't continue past destination host (#174032) 
    previous patch replaced by new one provided by <mildew@gmail.com>
    option -c added


author: Karsten Hopp <karsten@redhat.de> 0.9.17-1
changelog:
  - update to 0.9.17
  - makefile fixes
  - disable smcinit
  - use manpages from 0.9.17-pre3 as those from 0.9.17 are corrupted


author: Neil Horman <nhorman@redhat.com> - 0.55-7
changelog:
  - Fixed cpu parsing bugs (bz 311341)
  - Added docs/config for irqbalance env. vars. (bzs 339551 339571 339581)


author: Jesse Keating <jkeating@redhat.com> - 1.13-2
changelog:
  - rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc*
    (#203001)
  - Remove hack to use cvs checkin ID as release as it doesn't follow
    packaging guidelines


author: Neil Horman <nhorman@redhat.com> - 1.13-6
changelog:
  - Increase MAX_INTERRUPTS to support xen kernels (bz 212747)
  - Rediffed patch2 and patch3 to remove fuzz


author: Mike Christie <mchristie@redhat.com> - 6.2.0.695-0.7
changelog:
  - BZ 210470 update man pages for file moves
  - Fix targetname strcmp
  - read default config before doing discovery


author: Mike Christie <mchristie@redhat.com> - 6.2.0.730-0.0
changelog:
  - BZ 212263 - load iser
  - Rebase to upstream open-iscsi-2.0-730 to bring in fixes we were
  - managing but are now upstream and bring in fixes I had done upstream
  - for other partner/distro testing.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.742-0.1
changelog:
  - BZ 216715 again. Fix regression from documenting the iscsid.conf file (set to better match RHEL4).


author: Mike Christie <mchristie@redhat.com> - 6.2.0.742-0.5
changelog:
  - BZ 218791 - We get a network hang when the firewall is started
  - and to allow iscsi root boot to work we start iscsid early.
  - This breaks up iscsi.init into iscsidevs.init (start iscsi targets)
  - and iscsid.init (start iscsi daemon). Users should be using
  - iscsiadm for management instead of the rc script, but we add some compat
  - code to make it a little easier.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.742-0.6
changelog:
  -  Patch for 218841 was not getting applied because 'BZ' in the patch
  caused rpm to try and bunzip it instead of apply it.
  - 227815 update docs to make it more clear what is node mode.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.865-0.0
changelog:
  - Rebase to upstream to bring in bug and security fixes.
  - 243727 CVE-2007-3099 CVE-2007-3100
  - 227554 Support only passing in a target with iscsiadm commands.
  - 227698 ipv6 fixups


author: Mike Christie <mchristie@redhat.com> - 6.2.0.865-0.1
changelog:
  - Bring in fixes that got merged in git but did not make the 865 release and
  code that partners need to test due to lack of hw limitations.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.865-0.2
changelog:
  - 244987 old tools used to make the root db dir for apps and anaconda relied
  on that. This is a regression from 227554.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.865-0.7
changelog:
  - 250140 Document how to set timers when using multipath or iscsi root.
  - 249053 Document iscsid and iscsiadm debug argument.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.8
changelog:
  - Related to 445721 - when using intel nics some network values are
  not set, so iscsiadm would fail instead of just printing what we got.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.9
changelog:
  - Related to 445721 - Install fw helpers as lib so first stage of
  installer can easily use it. This is a temp lib, and is not a stable
  interface. For now, just for install, we are adding this library.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.17
changelog:
  - 472562 (additional fixup to patch) only use logout time2wait for
  relogins when response code is 2 or 3.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.18
changelog:
  - 476752 Must install list.h (install as iscsi_list.h) because fw_context.h
  is bringing it in. Also revert ibft name changes because anaconda is using
  them instead of the fw_context.h functions.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.5
changelog:
  - 438092 Print ibft net info (waiting on ppc support from IBM).
  - 437195 Use CHAP values from sysfs during resync, incase they were from ibft.
  - 437195 Update README to reflect that users should set node.startup


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.2
changelog:
  - 249049 create debug rpms by removing -s from the install command
  - 499565 Install libfwparam.a and headers for anaconda


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.7
changelog:
  - 505958 load bnx2i and cxgb3i drivers
  - 481807 Fix ownership of /etc/iscsi dir
  - Fix leak in iscsid when setting iscsi wq thread nice/priority.
  - 442418 Add Broadcom bnx2i userspace support.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.8
changelog:
  - 508782 fix iscsid/iscsistart segfault due to bad conn context cast
  - Fix bnx2i login when iface uses only the hwaddress.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.11
changelog:
  - 549629 Sync brcm uio to 0.4.8 to fix ifdown reconnection handling
  - 520508 Fix login/connect timeout due to MAC addr mishandling.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.11
changelog:
  - 514926 Sync brcm uio to 0.4.8 to fix ifdown reconnection handling
  - 520508 Fix login/connect timeout due to MAC addr mishandling.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.13
changelog:
  - 517380 Update Broadcom iSCSI userspace components.
  - 504666 When using iscsi ifaces with different initiator names only the default name is used for discovery.
  - 514926 iSCSI does not reconnect after ifdown and ifup.
  - 511271 Do not run chkconfig on net scripts on startup.
  - 531748 Fix typo in iscsiadm session print out where REOPEN was mispelled
  as REPOEN.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.16
changelog:
  - 570893 Fix bnx2x uip panic due to the packet index in the VLAN field of the
  BD does not match the packet index expected by the firmware when the index crosses a BD page.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.872-2
changelog:
  - 633122 Ensure that the itt is the same for all requests within sequence.
  - 608074 Fix iscsi script start return code.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.872-3
changelog:
  - 634979 Revert code to stop network from running in spec. This will
  be fixed by the network script in 583218.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.872-0
changelog:
  - 588990 Fix iscsiadm iface op return value.
  - 568609 Sync uip to uIP-0.5.15.rhel60.1.
  - 568517 Add uip vlan support.
  - 521222 Stablize iSNS support, and add iSNS discovery deamon support.
  - 583086 Fix "iscsid dead but pid file exists" messages


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:3.1-4jpp-1fc
changelog:
  - Add conditional native compilation.
  - Update commons-collections-3.1-project_xml.patch to exclude reference
    to maven-plugin-changelog which requires netbeans-svc etc.
  - Set test.failonerror to false and add patch for build.xml for ant builds
    with gcj to avoid stopping the build on test failures on GCJ.
  - Merge with latest JPP version.


author: Matt Wringe <mwringe@redhat.com> - 0:3.1-7jpp
changelog:
  - Add tomcat5 subpackage
  - Add versioning to provides and obsoletes
  - Move rm -rf %RPM_BUILD_ROOT from %prep to %install
  - Add missing maven dependencies


author: Jason Corley <jason.corley@gmail.com> 0:3.1-9jpp
changelog:
  - update copyright to contain current year
  - rebuild on RHEL4 to avoid broken jar repack script in FC6


author: Ville Skyttä <ville.skytta at iki.fi> - 1:1.0-0.alpha.1jpp
changelog:
  - Update to 1.0 alpha, bump epoch.
  - Non-versioned, crosslinked javadocs.
  - Build native jsvc with "--with native".


author: Deepak Bhole <dbhole@redhat.com> - 1:1.0.1-6jpp.1
changelog:
  - Added missing requirements
  - Fixed bug that cause post/postun to not run when built with --with native


author: Ralph Apel <r.apel@r-apel.de> - 0:1.2.1-4jpp
changelog:
  - First JPP-1.7 release
  - Build with maven by default
  - Add option to build with straight ant
  - Add -manual subpackage when built with maven
  - Backported TestJOCLed from HEAD


author: Matt Wringe <mwringe at redhat.com> - 1:0:3-4jpp.1
changelog:
  - Merge with upstream version
   - Add missing javadoc post and postun
   - Add missing javadoc requires


author: Ville Skyttä <ville.skytta at iki.fi> - 1:1.0-1jpp
changelog:
  - Update to 1.0.
  - Add Epochs to dependencies.
  - Nuke beanutils dependency.
  - Versionless javadoc dir symlinks.


author: Deepak Bhole <dbhole@redhat.com> - 1:3.0-6jpp_1fc
changelog:
  - Added conditional native compilation.
  - Disable certain ssl related tests that are known to fail with libgcj.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.0-1jpp
changelog:
  - Update to 2.0.
  - Add non-versioned javadocs dir symlink.
  - Crosslink with local J2SE javadocs.
  - Convert specfile to UTF-8.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.0.3-4jpp
changelog:
  - Drop log4j requirement and manifest Class-Path.
  - Run unit tests during build.
  - Nuke spurious subdir in -javadoc package.
  - Some spec file cleanups.


author: Kaj J. Niemi <kajtzu@fi.basen.net> - 0:1.0.4-1jpp
changelog:
  - Update to 1.0.4 (tomcat 5.0.27 wants it)
  - Drop Patch #0 (jakarta-commons-logging-noclasspath.patch), unnecessary


author: Matt Wringe <mwringe at redhat.com> - 0:1.1-8jpp.1
changelog:
  - Merge with upstream version:
   - Add missing javadoc requires
   - Add patches to properly set the classpath in build.xml and
     build.properties.default


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:1.1-8jpp.1.0.1.el5
changelog:
  - Add patch to fix jira task: MODELER-15 to allow tomcat5 5.5.23
    to build against j-c-modeler
  - Resolves: bug 238694


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:1.1-8jpp.2.el5
changelog:
  - Add patch to fix jira task: MODELER-15 to allow tomcat5 5.5.23
    to build against j-c-modeler
  - Resolves: bug 237704


author: Randy Watler <rwatler at finali.com> - 0:1.3-1jpp
changelog:
  - Upgrade to 1.3
  - First JPP-1.7 release
  - Build with maven by default
  - Add option to build with straight ant
  - Add -manual subpackage when built with maven
  - This version doesn't require commons-collections


author: Matt Wringe <mwringe at redhat.com> 1:1.3-4jpp
changelog:
  - Add jakarta-commons-pool-build.patch to remove external dependencies
    on javadocs when ant is used for building.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.0.2-1jpp
changelog:
  - Update to 1.0.2 and JPackage 1.5.
  - Move DTDs from %doc to %{_datadir}/%{name}.
  - Include catalog for DTDs, and install it if %{_bindir}/install-catalog
    is available.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.0.2-2jpp
changelog:
  - Move DTDs from %{_datadir}/jakarta-commons-validator to %{_datadir}/sgml/%{name} for FHS
    compliance, <http://www.pathname.com/fhs/2.2/fhs-4.11.html#4.11.7>.


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.0.4-7jpp
changelog:
  - section macro
  - use sed instead of bash 2.x extension in link area to make spec compatible with distro using bash 1.1x


author: Fernando Nasser <fnasser.redhat.com> 2.0.8-3jpp
changelog:
  - Add AOT bits
  - Fix javadoc unversioned link handling
  - Add requires for post/postun javadoc sections added above


author: Matt Wringe <mwringe at redhat.com> 0:1.1.1-6jpp
changelog:
  - Add conditional native compilation
  - Add missing BuildRequires and Requires for tomcat5-jsp-2.0-api and xalan-j2
    (from Deepak Bhole <dbhole at redhat.com>)


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 0:1.4.2.0-40jpp.108
changelog:
  - Move Double.html manipulation within ppc64 filesystem check.
  - Import java-gcj-compat 1.0.68 to eliminate rebuild-gcj-db multilib
    conflict.
  - Work around gjdoc/libgcj rounding error in Double.html.


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 0:1.4.2.0-40jpp.115
changelog:
  - Do not depend on arch-specific gcc-java.
  - Add comment about depending on 4.1.1 directory.
  - Resolves: rhbz#236526


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.15.b09
changelog:
  - Adapted for RHEL.
  - Hard-code i386 architecture.
  - Point --with-openjdk-home at Fedora OpenJDK bootstrap JDK.
  - Add Fedora OpenJDK bootstrap tarballs.
  - Patch freetype requirement down to 2.2.1.
  - Replace lesstif-devel build requirement with openmotif-devel.
  - Remove mercurial build requirement.
  - Comment out java-1.6.0-openjdk-devel build requirement.
  - Decrease freetype-devel build requirement to 2.2.1.
  - Set ExclusiveArch to x86_64 and i386.
  - Remove tzdata-java runtime requirement.
  - Decrease jpackage-utils runtime requirement to 1.7.3-1jpp.2.
  - Hard-code vendor prefix in files list.
  - Prevent brp-repack-jars from being run.
  - Remove IcedTea Obsoletes and Provides.
  - Remove NetX and gcjwebplugin.
  - Renamed generate-fedora-zip.sh to generate-rhel-zip.sh.
  - Renamed fedorazip to rhelzip.
  - Added SOURCE comments.
  - Added --disable-gcjwebplugin option to icedteaopt.
  - Removed mauve and jtreg sources.


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.22.b09
changelog:
  - Added execshield calls to 
  /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0/jre/lib/i386/client/libjvm.so, 
  /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0/jre/lib/i386/server/libjvm.so and 
  /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre/lib/amd64/server/libjvm.so.
  - Added prelink to build requirements.


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.24.b09
changelog:
  - Added java-1.6.0-openjdk-securitypatches.patch. Applies all current
  OpenJDK patches.
  - Updated release.
  - Resolves: rhbz#473317


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.25.b09
changelog:
  - Updated java-1.6.0-openjdk-securitypatches.patch. Removed all tests, and added patch for
  Makefile.in.
  - Updated release.


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.26.b09
changelog:
  - Updated java-1.6.0-openjdk-securitypatches.patch.
  - Added java-1.6.0-openjdk-lcms.patch.
  - Updated release.
  - Removed fedora sources. We can now build with system-installed openjdk.
  - Resolves: rhbz#490182


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-1.1.b09
changelog:
  - Moved policytool to devel package.
  - Updated release to 1.1, so there is considered newer than the outdated 
  EPEL package.
  - Resolves: rhbz#499079


author: Martin Matejovic <mmatejov@redhat.com> - 1:1.6.0-1.10.b16
changelog:
  - Update to openjdk build b16
  - Update to icedtea6-1.6
  - Added tzdata-java requirement
  - Added autoconf and automake build requirement
  - Added tzdata-java requirement
  - Added java-1.6.0-openjdk-gcc-stack-markings.patch
  - Added java-1.6.0-openjdk-memory-barriers.patch
  - Added java-1.6.0-openjdk-jar-misc.patch
  - Added java-1.6.0-openjdk-linux-separate-debuginfo.patch
  - Added java-1.6.0-openjdk-securitypatches-20100323.patch
  - Added STRIP_KEEP_SYMTAB=libjvm* to install section, fix bz530402
  - Resolves: rhbz#576124


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.14.b17.el5
changelog:
  - Synched with el6 branch
  - Updated to IcedTea 1.7.5
  - Resolves: bz639951
  - Also resolves 619800 and 621303


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-1.2.b09
changelog:
  - Updated release.
  - Moved java-1.6.0-openjdk-securitypatches.patch to 
  java-1.6.0-openjdk-march24-securitypatches.patch.
  - Created new java-1.6.0-openjdk-july28-securitypatches.patch.
  - Updated release.
  - Resolves: rhbz#513391


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.22.1.9.7
changelog:
  - Resolves bz690289
  - Import from RHEL-5_6-Z
  - Updated to IcedTea6 1.9.7
  - Removed all plugin/webstart related commented lines
  - Modified bz entry format in previous logs to get around cvs ack checking bug


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.22.1.9.8
changelog:
  - Resolves: rhbz#668488
  - Bumped to IcedTea6 1.9.8
  - RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
    disabled get still selected for read ops (win)
  - RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
  - RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
    FileDialog.show()
  - RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
    code
  - RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
    bindings
  - RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
  - RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
  - RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
    with scale close to zero
  - RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
  - RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
    size variables


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.23.1.9.10
changelog:
  - Resolves: rhbz#744786
  - Bumped to IcedTea6 1.9.8
   Security fixes
    - S7000600, CVE-2011-3547: InputStream skip() information leak
    - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
    - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
    - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
    - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
    - S7055902, CVE-2011-3521: IIOP deserialization code execution
    - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
    - S7064341, CVE-2011-3389: JSSE
    - S7070134, CVE-2011-3558: Hotspot unspecified issue
    - S7077466, CVE-2011-3556: RMI DGC server remote code execution
    - S7083012, CVE-2011-3557: RMI registry privileged code execution
    - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
   NetX
    - PR794: javaws does not work if a Web Start app jar has a Class-Path element in the manifest


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.25.1.10.6
changelog:
  - Updated to IcedTea6 1.10.6
  - Resolves: rhbz#787142
  - Security fixes
    - S7082299: Fix in AtomicReferenceArray
    - S7088367: Fix issues in java sound
    - S7110683: Issues with some KeyboardFocusManager method
    - S7110687: Issues with TimeZone class
    - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
    - S7110704: Issues with some method in corba
    - S7112642: Incorrect checking for graphics rendering object
    - S7118283: Better input parameter checking in zip file processing
    - S7126960: Add property to limit number of request headers to the HTTP Server
  - Bug fixes
    - RH580478: Desktop files should not use hardcoded path
  - Removed and deleted upstreamed  patch7 - name-rmi-fix.patch
  - Removed and deleted upstreamed Hugepages patches:
    - Source100: 7034464-hugepage.patch
    - Source101: 7037939-hugepage.patch
    - Source102: 7043564-hugepage.patch


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.26.1.10.8
changelog:
  - Updated to IcedTea6 1.10.8
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added to patch
  - Resolves: rhbz#828749


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.27.1.10.8
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828749


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.28.1.10.10
changelog:
  - Updated to IcedTea6 1.10.10
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.26.1.10.8
changelog:
  - Updated to IcedTea6 1.10.8
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added to patch
  - Resolves: rhbz#828750


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.27.1.10.8
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828750


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.31.1.11.6
changelog:
  - Updated to icedtea6 1.11.6
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Resolves: rhbz#906705


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.32.1.11.6
changelog:
  - added patch9 revertTwoWrongSecurityPatches2013-02-06.patch
    to remove   6664509 and 7201064 from 1.11.6 tarball
  - Resolves: rhbz#906705


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.33.1.11.6
changelog:
  - removed patch9 revertTwoWrongSecurityPatches2013-02-06.patch
  - added patch9:   7201064.patch to be reverted
  - added patch10:   8005615.patch to fix the 6664509.patch
  - Resolves: rhbz#906705


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.34.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but valid
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Resolves: rhbz#911522


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.37.1.11.10
changelog:
  - Updated to icedtea6 1.11.10
  - rewritten java-1.6.0-openjdk-java-access-bridge-security.patch
  - excluded aarch64.patch
    - by patch 8 -  removingOfAarch64.patch.patch
  - due to old patch on rhel5 added patch10  patchToFixMalformed8007667.patch
   - fixing 8007667 patch  to be valid for rhel5 patch
  - Resolves: rhbz#950383


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.59.1.11.11
changelog:
  - Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
  - removed patch 9 -  removingOfAarch64.patch.patch - fixed upstream
  - removed patch10  patchToFixMalformed8007667.patch - upstreamed
  - Resolves: rhbz#950383


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.39.1.11.11
changelog:
  - added and applied (temporally) one more patch to xalan/xerces privileges
   - patch9 jaxp-backport-factoryfinder.patch
  - will be upstreamed
  - Resolves: rhbz#950383


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950383


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.41.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973126


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.34.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but valid
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Resolves: rhbz#911523


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.37.1.11.10
changelog:
  - Updated to icedtea6 1.11.10
  - rewritten java-1.6.0-openjdk-java-access-bridge-security.patch
  - excluded aarch64.patch
    - by patch 8 -  removingOfAarch64.patch.patch
  - due to old patch on rhel5 added patch10  patchToFixMalformed8007667.patch
   - fixing 8007667 patch  to be valid for rhel5 patch
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.59.1.11.11
changelog:
  - Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
  - removed patch 9 -  removingOfAarch64.patch.patch - fixed upstream
  - removed patch10  patchToFixMalformed8007667.patch - upstreamed
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.39.1.11.11
changelog:
  - added and applied (temporally) one more patch to xalan/xerces privileges
   - patch9 jaxp-backport-factoryfinder.patch
  - will be upstreamed
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.41.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973128


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.42.1.11.14
changelog:
  - updated to icedtea6-1.11.14.tar.gz
  - added and applied 1.11.14-fixes.patch, patch10 to fix build issues
  - Resolves: rhbz#1017615


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#1050187


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - Resolves: rhbz#1085007


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - Resolves: rhbz#1115865


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - removed useless runtests parts
  - included also java.security.old files
  - adapted patch8 java-1.6.0-openjdk-pstack.patch 
  - Resolves: rhbz#1017616


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#1050188


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - renmoved upstreamed patch9, 1051245.patch
  - Resolves: rhbz#1085008


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - Resolves: rhbz#1115866


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.33-1.13.5.0
changelog:
  - Update to IcedTea 1.13.5
  - Change versioning to match java-1.7.0-openjdk so revisions work.
  - No need to explicitly disable system LCMS any more (bug fixed upstream).
  - Add icedteasnapshot to setup lines so they work with pre-release tarballs.
  - Resolves: rhbz#1148898


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Update to IcedTea 1.13.6
  - Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
  - Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
  - Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
  - Add US_export_policy.jar and local_policy.jar to packages.
  - Resolves: rhbz#1180289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.1
changelog:
  - Update to latest 1.13.6 release candidate tarball
  - Fixes a number of issues found with b34:
  - * OJ51, PR2187: Sync patch for 4873188 with 7 version
  - * OJ52, PR2185: Application of 6786276 introduces compatibility issue
  - * OJ53, PR2181: strict-aliasing warnings issued on PPC32
  - * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
  - * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - Also includes PR2180, so patch dropped from RPM.
  - Resolves: rhbz#1180289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.36-1.13.8.0
changelog:
  - Update to IcedTea 1.13.8
  - Update no_pr2125.patch to work against new version.
  - Resolves: rhbz#1235149


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.1
changelog:
  - Drop java-1.6.0-openjdk-pstack.patch. 6310967, the upstream version, is applied in OpenJDK 6.
  - Resolves: rhbz#1271926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.2
changelog:
  - Update with new IcedTea & b37 tarballs, including Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.3
changelog:
  - Update with new IcedTea & b37 tarballs, including more Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.4
changelog:
  - Update with new IcedTea & b37 tarballs, including fix for appletviewer regression.
  - Resolves: rhbz#1271926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.38-1.13.10.0
changelog:
  - Add patch to replace -fno-strict-overflow with -fwrapv on older RHEL 5.11 GCC.
  - Resolves: rhbz#1295772


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.39-1.13.11.0
changelog:
  - Explictly required libXcomposite-devel for PR2868 as nothing else pulls it in
  - Resolves: rhbz#1325429


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.0
changelog:
  - Update to IcedTea 1.13.12 & OpenJDK 6 b40.
  - Depend on mailcap for /etc/mime.types (PR2800)
  - Use configure macro and disable long-running JTreg & SystemTap tests from make check
  - Remove redundant patch-ecj target invocation for bootstrap build.
  - Add check section to run the new tests introduced in 1.13.12.
  - Add RHEL version of b40 tarball.
  - Require mailcap at build time as well, so configure finds /etc/mime.types
  - No need to require openssl at run time.
  - Drop old_gcc patch as this is now supported upstream (S8161262)
  - Resolves: rhbz#1350043


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.1
changelog:
  - Separate bootstrap option as it should not be tied to the JDK used.
  - Enable bootstrapping on JIT architectures going forward.
  - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
  - Resolves: rhbz#1350043


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.1
changelog:
  - Introduce bootstrapping variable to test whether we are bootstrapping or not.
  - Add build requirement of xsltproc when bootstrapping.
  - Resolves: rhbz#1350043


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.4
changelog:
  - Set install directories in configure so that @prefix@ is substituted correctly in tapset
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.4
changelog:
  - Require a JDK with RH1334465/PR2956 fixed and turn off bootstrapping for Zero architectures.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Update to IcedTea 1.13.13 & OpenJDK 6 b41.
  - Fix context for rpath patch following PR3213.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Update to new 1.13.13 tarball with PR3275 and PR3276 fixes.
  - Ignore any xz tarballs as RHEL 5.11 does not support them.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.0
changelog:
  - Bump to 2.6.4 and u95b00.
  - Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
  - Drop 8072932or8074489 patch as applied upstream in u91b01.
  - Resolves: rhbz#1295764


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.0
changelog:
  - Replace addition of -fno-strict-overflow to IndicRearrangementProcessor{,2}.cpp with -fwrapv
  - Resolves: rhbz#1295764


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.0
changelog:
  - Remove unneeded build dependencies on jakarta-commons-logging and prelink/execstack
  - Resolves: rhbz#1295764


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.0
changelog:
  - Bump to 2.6.5 and u99b00.
  - Correct check for fsg.sh in tarball creation script
  - Resolves: rhbz#1320655


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.0
changelog:
  - Explictly required libXcomposite-devel for PR2867 as nothing else pulls it in
  - Resolves: rhbz#1320655


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.101-2.6.6.0
changelog:
  - Bump to 2.6.6 and u101b00.
  - Drop a leading zero from the priority as the update version is now three digits
  - Resolves: rhbz#1325424


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.0
changelog:
  - Bump to 2.6.7 and u111b00.
  - Update SystemTap bundle with fix for PR3091/RH1204159
  - Drop patches (S8161262 (8147466_wrapv) and PR2939 (fontpath)) applied upstream.
  - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
  - Resolves: rhbz#1350038


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.0
changelog:
  - Bump to 2.6.8 and u121b00.
  - Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.1
changelog:
  - Require a version of java-1.7.0-openjdk-devel with a working jar uf
  - Remove unneeded AArch64 environment variable setting.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.0
changelog:
  - Bump to 2.6.9 and u131b00.
  - Remove patch application debris in fsg.sh.
  - Re-generate RH1022017 against 2.6.9.
  - Resolves: rhbz#1410612


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.5.el5_9
changelog:
  - Updated to 2.3.5
  - Changed BR to java7-devel >= 1:1.7.0 as required by CORBA changes in 2.3.5
  - Resolves: rhbz#906709


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.7.0.el5_9
changelog:
  - Removed patch1000 sec-2013-02-01-8005615.patch
  - Removed patch1001 sec-2013-02-01-8005615-sync_with_jdk7u.patch
  - Removed patch1010 sec-2013-02-01-7201064.patch
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.3.7
  - Resolves: rhbz#911527


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.7.1.el5_9
changelog:
  - Updated main source tarball
  - Removed wrong relinking of cacerts (see rhbz 904165)
  - Resolves: rhbz#911527


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.9-2.3.8.1.el5
changelog:
  - Added some of the latest Fedora spec bugfixes
  - Bumped release
  - zlib in BuildReq restricted for  1.2.3-7 or higher
   - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
  - Removed a -icedtea tag from the version
    - package have less and less connections to icedtea7
  - Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
  - Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
    - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
  - logging.properties marked as config(noreplace)
    - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
  - nss.cfg was marked as config(noreplace)
  - slaves sync with el6
  - Resolves: rhbz#950376


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.9.0.el5
changelog:
  - updated to IcedTea  2.3.9 with latest security patches
  - buildver sync to b19
  - rewritten java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#950376


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.19-2.3.9.1.el5
changelog:
  - updated to updated IcedTea  2.3.9 with fix to one of security fixes
    -  fixed font glyph offset
  - Resolves: rhbz#950376


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.10.0.el5
changelog:
  - Updated to latest IcedTea7-forest 2.3.10
  - patch 107 renamed to 500 for cosmetic purposes
  - Added fix for RH857717, owned /etc/.java/ and /etc/.java/.systemPrefs
  - Resolves: rhbz#973117


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.2.el5
changelog:
  - added patch1000 MBeanFix.patch to fix regressions caused by security patches
  - Resolves: rhbz#973117


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.4.el5
changelog:
  - updated to newer IcedTea7-forest 2.3.10 with 8010118 fix
  - removed upstreamed patch1000 MBeanFix.patch
  - Resolves: rhbz#973117


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.7.0.25-2.3.10.5.el5
changelog:
  - Sync with upstream IcedTea7-forest 2.3.10 tag
  - Fixes regressions as introduced with 1.7.0.25-2.3.10.4.el5:
    rhbz#978005, rhbz#977979, rhbz#976693, IcedTeaBZ#1487.
  - Related: rhbz#973117


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.3.el5
changelog:
  - Updated to IcedTea7-OpenJDK 2.3.3
  - Removed upstreamed java-1.7.0-openjdk-rhel5-gio.patch
  - Updated java-1.7.0-openjdk-java-access-bridge-security.patch
  - Updated java-1.7.0-openjdk-remove-gstabs.patch
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.el5.1
changelog:
  - Changed permissions of sa-jdi.jar to correct 644
  - Correctly removed noarch tag form javadoc, rhel5 donot support noarch subpackages
  - Resolves: rhbz#803732


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.el6.1
changelog:
  - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Added jxmd and idlj to alternatives
  - make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Unapplied patch302 and deleted systemtap.patch
  - buildver increased to 11
  - icedtea_version set to 2.4.0
  - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - Resolves: rhbz#895032


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre2.3.el5
changelog:
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.4.0.pre2, updated?
  - Resolves: rhbz#911528


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre3.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre3, updated!
  - Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911528


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre4.3.el5
changelog:
  - Updated  to icedtea 2.4.0.pre4, 
  - Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911528


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.9-2.3.8.1.el5
changelog:
  - Added latest Fedora spec changes and nss (disabled) support
  - Bumped release
  - Removed patch2 java-1.7.0-openjdk-java-access-bridge-idlj.patch (unapplied)
  - zlib in BuildReq restricted for  1.2.3-7 or higher
   - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
  - Removed a -icedtea tag from the version
    - package have less and less connections to icedtea7
  - Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
  - Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
    - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
  - Removed all fonconfig files. Fonts are now handled differently in JDK 
    and those files are redundant. This is going to be usptreamed.
    - see https://bugzilla.redhat.com/show_bug.cgi?id=902227 for details
  - logging.properties marked as config(noreplace)
    - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
  - nss.cfg was marked as config(noreplace)
  - Added and applied if enable_nss patch113: java-1.7.0-openjdk-aes-update_reset.patch
  - Added and applied if enable_nss patch114: java-1.7.0-openjdk-nss-tck.patch
  - Added and applied if enable_nss patch115: java-1.7.0-openjdk-nss-split_results.patch
  - Added and applied if enable_nss patch 116 - Patch116: rh905128-non_block_ciphers.patch
  - NSS disabled by default - enable_nss set to 0
  - Added and applied if enable_nss patch109 - java-1.7.0-openjdk-nss-config-1.patch
  - Added and applied if enable_nss patch111 - java-1.7.0-openjdk-nss-config-2.patch
  - Added nss.cfg file
  - Resolves: rhbz#950378


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.4.1.4.el5
changelog:
  - updated to icedtea 2.4.1
  - improoved handling of patch111 - nss-config-2.patch
  - backported uniquesuffix from 6.5
  - Resolves: rhbz#978421


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.45-2.4.3.0.el5
changelog:
  - fixed and updated tapset
  - removed bootstrap
  - source 11 redeclared to 1111
  - added source12: TestCryptoLevel.java
  - removed upstreamed patch103 java-1.7.0-openjdk-arm-fixes.patch
  - removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
  - added patch120: java-1.7.0-openjdk-freetype-check-fix.patch
  - fixed nss 
  - cleaned sources
  - Resolves: rhbz#1017623


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.4.1.el5
changelog:
  - updated to security icedtea 2.4.4
   - icedtea_version set to 2.4.4
   - updatever bumped to       51
   - release reset to 1
  - build requires: java-devel >= 1:1.6.0 changed java7-devel 
  - Resolves: rhbz#1050192


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.55-2.4.7.0.el5
changelog:
  - bumped to future icedtea-forest 2.4.7
  - updatever set to 55, buildver se to 13, release reset to 0
  - removed BuildRequires on pulseaudio >= 0.9.1, devel is enough
  - removed Requires: rhino, BuildRequires is enough
  - updated patch400, java-1.7.0-openjdk-remove-gstabs.patch
  - added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
  - ppc64 repalced by power64 macro
  - patch111 applied as dry-run (6.5 forward port)
  - Resolves: rhbz#1085000


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115872


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.4.1.el5
changelog:
  - updated to security icedtea 2.4.4
   - icedtea_version set to 2.4.4
   - updatever bumped to       51
   - release reset to 1
  - build requires: java-devel >= 1:1.6.0 changed java7-devel 
  - Resolves: rhbz#1050193


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.55-2.4.7.0.el5
changelog:
  - bumped to future icedtea-forest 2.4.7
  - updatever set to 55, buildver se to 13, release reset to 0
  - removed BuildRequires on pulseaudio >= 0.9.1, devel is enough
  - removed Requires: rhino, BuildRequires is enough
  - updated patch400, java-1.7.0-openjdk-remove-gstabs.patch
  - added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
  - ppc64 repalced by power64 macro
  - patch111 applied as dry-run (6.5 forward port)
  - Resolves: rhbz#1085001


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115873


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.71-2.5.3.1
changelog:
  - Bump to 2.5.3 with security updates.
  - Remove obsolete patches which are now included upstream.
  - Disable LCMS via environment variables rather than maintaining a patch.
  - Resolves: rhbz#1148890


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.0
changelog:
  - Bump to 2.5.4 using OpenJDK 7u75 b13.
  - Fix elliptic curve list as part of fsg.sh
  - Resolves: rhbz#1180294


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Remove libxslt and mercurial dependencies pulled in from IcedTea builds.
  - Reduce redhat-lsb dependency to redhat-lsb-core (lsb_release)
  - Resolves: rhbz#1235155


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - The RHEL 5 version of libsctp is too old for the OpenJDK SCTP implementation.
  - Resolves: rhbz#1235155


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.85-2.6.1.3
changelog:
  - Check return value of gio_init in gsettings_init and return false if necessary.
  - Re-enable the use of system GConf.
  - Only ifdef g_type_init&g_free if USE_SYSTEM_GIO and USE_SYSTEM_GCONF are undefined.
  - Resolves: rhbz#1242587


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.1.el5
changelog:
  - ca-certificates replaced by in-package script
  - Re-added debuginfo package
  - Priority kept as 17xxx
  - Resolves: rhbz#803732


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.3.el5
changelog:
  - Added patch499: java-1.7.0-openjdk-remove-gstabs.patch, fixing debuginfo package
  - Resolves: rhbz#803732


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.el6.1
changelog:
  - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Added jxmd and idlj to alternatives
  - make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Unapplied patch302 and deleted systemtap.patch
  - buildver increased to 11
  - icedtea_version set to 2.4.0
  - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - Resolves: rhbz#895031


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.4.el6.1
changelog:
  - Rewerted to IcedTea 2.3
    - Rewerted patch105: java-1.7.0-openjdk-disable-system-lcms.patch
    - Removed jcmd and idlj to alternatives
    - make NOT executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
    - Reapplied patch302 and deleted systemtap.patch
    - buildver set to 9
    - icedtea_version set to 2.3.4
    - Unapplied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
    - removed /lib/security/US_export_policy.jar and lib/security/local_policy.jar
    - java-1.7.0-openjdk-java-access-bridge-security.patch's path moved from 
      java.security-linux back to java.security
  - Resolves: rhbz#895031


author: Matthew Wringe <mwringe at redhat.com> - 0:4.0-3jpp_1fc
changelog:
  - Merged with upstream version
  - Changed directory locations to rpm macros
  - Added conditional native compiling


author: Deepak Bhole <dbhole@redhat.com> - 0:1.0-4jpp.1
changelog:
  - Added missing requirements.
  - Remove jaxen requirement, since we don't have it in fc yet.
  - Merge with fc spec.


author: Deepak Bhole <dbhole@redhat.com> - 0:2.8.9-6jpp_1fc
changelog:
  - Added conditional native compilation.
  - From gbenson@redhat:
  -    Remove classes that don't build without said jarfiles.
  -    Avoid Sun-specific classes.


author: Deepak Bhole <dbhole@redhat.com> - 0:0.1.28-1jpp.4
changelog:
  - Added conditional compiling support.
  - Added missing requirements.
  - Additionally, for synchronizaion between logs:
  - From r.apel@r-apel.de:
    - 0.1.26
  - From fnasser@redhat.com:
    - 0.1.20


author: Miloslav Trmac <mitr@redhat.com> - 3.2.3-5
changelog:
  - Update to upstream config as of May 15 2006 (#191291)
  - Add more IPv6 address ranges (#191290, original patch by Peter Bieringer)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 3.2.3-9
changelog:
  - Fix reversed logic of trying to connect to whois server
    Resolves: #415491
  - Update jwhois.conf file
    Resolves: #512930, #509475, #479061


author: Roman Rakus <rrakus@redhat.com> - 0:0.12.17-2
changelog:
  - Use manual buffer size by default
  - .el5 changed to .el5
  - added BuildRequires - libutempter-devel
  - Resolves: rhbz#220481, rhbz#440611


author: Akira TAGOH <tagoh@redhat.com> - 1.0-1
changelog:
  - New upstream release.
  - kasumi-1.0-gcc41.patch: build with -ffriend-injection to temporarily get it
    built with gcc-4.1.


author: Akira TAGOH <tagoh@redhat.com> - 2.0.1-1
changelog:
  - New upstream release.
  - use dist tag.
  - kasumi-2.0.1-errorcode.patch: fixed not working when the private dictionary is empty. (#197313)


author: Miloslav Trmac <mitr@redhat.com> - 1.12-13
changelog:
  - Fix build with new coreutils
  - Hardcode paths in unicode_start to avoid a few file lookups (#178329)
  - Drop unnecessary Prereq: sed mktemp


author: Miloslav Trmac <mitr@redhat.com> - 1.12-19
changelog:
  - Ship "el" translation instead of the obsolete "gr" translation
    Resolves: #210749
  - Fix % quoting in %changelog


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.12-20
changelog:
  - Fix ro.map.gz, add ro_std.map.gz, drop ro_win.map.gz,
    add Lat2-Terminus16.psf console font (many thanks to Alexandru Szasz
    <alexxed@gmail.com>)
    Resolves: #294471


author: Akira TAGOH <tagoh@redhat.com> 2.3-22
changelog:
  - kcc-2.3-fix-segv.patch: applied to fix segfaults with invalid options. (#126338)
  - add kcc.1 from Debian package.


author: Than Ngo <than@redhat.com> 7:3.5.4-0.pre1
changelog:
  - prerelease of 3.5.4 (from the first-cut tag)
  - drop kdeadmin-3.5.2-knetworkconf-fedora.patch, it's include in 3.5.4 upstream


author: Than Ngo <than@redhat.com> 6:3.5.4-10
changelog:
  - FedoraDNA for KDM
  - fix #205566, don't overwrite config files
  - fix #178320,#198828, follow menu-spec


author: Than Ngo <than@redhat.com> 6:3.5.4-13.3.el5
changelog:
  - second login attempt by validated user bypasses login passwords (#201507), CVE-2006-3742
  - fix #211979, switchuser only available with KDM
  - fix kde#134816, XDG's NoDisplay flag is not processed correcrly
  - devices that are in fstab should show up no matter what HAL thinks
  - get rid of unneeded dependency on xorg-x11-xdm
  - fix Theme/Colors/ksplash for RHEL5


author: Than Ngo <than@redhat.com> - 6:3.5.4-17
changelog:
  - Resolves: #222970, khelpcenter crashes if press F1 at least 2 consecutive times
  - Resolves: #380281, kcmshell desktop - default button on virtual
    desktop doesn't work


author: Than Ngo <than@redhat.com> 3.5.4-19
changelog:
  - Resolves: #251414, knotification cannot be enabled after re-enabling arts from kcontrol
  - Resolves: #251968, kdesktop_lock issue
  - Resolves: #236931, kdm does not cleanup PAM state


author: Than Ngo <than@redhat.com> - 3.5.4-20
changelog:
  - Resolves: #469723, Cannot mount floppy disk
  - Resolves: #472295, KDE Desktop icons do not refresh correctly


author: Lukas Tinkl <ltinkl@redhat.com> - 6:3.5.4-22
changelog:
  - Resolves: #499442, Kdesktop_lock does not work on multiuser 
    systems and for single user with multiple login


author: Than Ngo <than@redhat.com> - 6:3.5.4-23
changelog:
  - Resolves: #580485, konsole crashed and caused the signal 11
  - Resolves: #501483, kwin crashes when closing Java dialog boxes
  - Resolves: #561844, kwin ignores configure requests causing wrong size of Motif windows
  - Resolves: #579707, kdm hangs when forced change password window is cancelled
  - Resolves: #584822, kwin uses smart placement instead of cascade in multi-screen
    even if cascade placement is selected
  - Resolves: #638849, rebuild failed if the build system has lm_sensors-devel installed


author: Than Ngo <than@redhat.com> - 6:3.5.4-25
changelog:
  - Resolves: #653970, add overrides directory to default manpaths
  - Resolves: #607781, drop empty mozilla, plugins directories


author: Than Ngo <than@redhat.com> - 6:3.5.4-26
changelog:
  - Resolves: #500399, fix screenlook issue with multiuser
  - Resolves: #663638, HAL backend does not honor mount options set in HAL config files
  - Resolves: #669354, fix timetamp issue in kwin on 64bit machine


author: Than Ngo <than@redhat.com> - 7:3.5.4-6
changelog:
  - Resolves: #239473, JPEG-EXIF Meta Information DoS vulnerability
  - Resolves: #356631, CVE-2007-4352 CVE-2007-5392 CVE-2007-5393


author: Than Ngo <than@redhat.com> - 3.5.4-10
changelog:
  - Resolves: #490729, CVE-2009-0146 CVE-2009-0147 CVE-2009-0166
    revised patch that adds a fix for badpage10910.pdf


author: Than Ngo <than@redhat.com> - 3.5.4-11
changelog:
  - Resolves: #490729, CVE-2009-0146 CVE-2009-0147 CVE-2009-0166
    revised patch that adds a fix for some potential problems,
    latest upstream patch


author: Than Ngo <than@redhat.com> - 3.5.4-13
changelog:
  - Resolves: #506302
     CVE-2009-0945, KSVG NULL-pointer dereference in the SVGList interface implementation
     CVE-2009-1709, KSVG Pointer use-after-free error in the SVG animation element


author: Than Ngo <than@redhat.com> - 3.5.4-17.1
changelog:
  - Resolves: #639841
      CVE-2010-3702, uninitialized Gfx::parser pointer dereference
      CVE-2010-3704, array indexing error in FoFiType1::parse()


author: Than Ngo <than@redhat.com> 6:3.5.4-3
changelog:
  - apply upstream patches
     fix kde#131366, Padding-bottom and padding-top not applied to inline elements
     fix kde#131933, crash when pressing enter inside a doxygen comment block
     fix kde#106812, text-align of tables should only be reset in quirk mode
     fix kde#90462, konqueror crash while rendering in khtml


author: Than Ngo <than@redhat.com> 6:3.5.4-5
changelog:
  - apply upstream patches
     fix #123413, kded crash when KDED modules make DCOP calls in their destructors
     fix #133529, konqueror's performance issue
     fix kdebug crash
     more icon contexts (Tango icontheme)
     fix #133677, file sharing doesn't work with 2-character long home directories


author: Than Ngo <than@redhat.com> 6:3.5.4-6
changelog:
  - fix #205767, konsole no longer register itself to utmp
  - fix #123941, qt xim plugin sometimes leads to crash


author: Than Ngo <than@redhat.com> 6:3.5.4-7
changelog:
  - apply upstream patches
     fix #132678, Google search encoding fix
     khtml rendering issue
     fix #134118, silent startup notification never going away
     fix #133401, crash when attempting to remove a standard shortcut that isn't actually in 
     the KStdAccel::ShortcutList
     fix #131979, unbreak "latest" and "most downloads" views


author: <than@redhat.com> 6:3.5.4-8
changelog:
  - fix #115891/bz#208270, CUPS 1.2.x unix socket support
  - apply upstream patches
     fix #123915, Page format display is 'overlaid'
     fix #100188, Fix incorrect 'endl' usage


author: Than Ngo <than@redhat.com> 6:3.5.4-9
changelog:
  - fix #178320,#198828, follow menu-spec
  - fix #119167, page rendered incorrectly at larger font sizes


author: Than Ngo <than@redhat.com> 6:3.5.4-10
changelog:
  - fix utf8 issue in kdeprint
  - fix #178320,#198828, follow menu-spec
  - upstream patches,
     fix #106748, Evaluate scripts in <iframe src=javascript:..> in the right context
     fix #133071, Crash when characterSet was accessed on newly-created document


author: Than Ngo <than@redhat.com> - 6:3.5.4-12.el5
changelog:
  - resolves: #293421, CVE-2007-3820 CVE-2007-4224 CVE-2007-4225
  - Resolves: #293911, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242
  - Resolves: #293571, Konqueror improper HTML comment rendering, CVE-2007-0537


author: Than Ngo <than@redhat.com> - 6:3.5.4-13.el5
changelog:
  - Resolves: #293571
    CVE-2007-0537 Konqueror improper HTML comment rendering
    CVE-2007-1564 FTP protocol PASV design flaw affects konqueror


author: Than Ngo <than@redhat.com> - 6:3.5.4-11.1.el5
changelog:
  - Resolves: #234633, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242
  - Resolves: #225414, Konqueror improper HTML comment rendering, CVE-2007-0537


author: Than Ngo <than@redhat.com> - 6:3.5.4-14.el5
changelog:
  - Resolves: #293581, CVE-2007-0537
  - Resolves: #293921, CVE-2007-0242
  - Resolves: #293431, CVE-2007-4224, CVE-2007-4225, CVE-2007-3820
  - Resolves: #293581, CVE-2007-1564 FTP protocol PASV design flaw affects konqueror


author: Than Ngo <than@redhat.com> 3.5.4-16
changelog:
  - Resolves: #223958, add missing documentation menu
  - Resolves: #422011, libutemper issue, konsole doesn't write to utmp


author: Than Ngo <than@redhat.com> - 3.5.4-20
changelog:
  - Resolves: #505621,
      CVE-2009-1687, integer overflow in KJS JavaScript garbage collector
      CVE-2009-1698, KHTML CSS parser - incorrect handling CSS "style" attribute content (DoS, ACE)


author: Than Ngo <than@redhat.com> 7:3.5.3-2
changelog:
  - enable --enable-new-ldflags again since ld bug fixed
  - move only *.so symlinks to -devel subpackage


author: Than Ngo <than@redhat.com> 7:3.5.4-2
changelog:
  - apply upstream patches,
     - check the return value from XF86VidModeGetAllModeLines() to avoid crashing kde#73519
     - Fixed flickering when scrolling in newsticker kde#63494


author: Than Ngo <than@redhat.com> 6:3.5.4-1
changelog:
  - apply upstream patches,
     - Kmail crashes on startup, kde#132008
     - Cannot send to addresses containing an ampersand (&), kde#117882


author: Than Ngo <than@redhat.com> 3.5.4-2
changelog:
  - fix #205217, multilib issue
  - apply upstream patches
      fix #131717, kompare won't parse diffs from git


author: Than Ngo <than@redhat.com> 6:3.5.4-2
changelog:
  - apply upstream patch to fix ark crashes, kde#127341
  - apply upstream patch to fix kgpg crashes, kde#132420


author: Than Ngo <than@redhat.com> 6:3.5.4-3
changelog:
  - fix #205553, Printing text with kedit always Bold
  - apply upstream patch
     fix #128925, menu displays question marks instead of unicode characters


author: Than Ngo <than@redhat.com> 6:3.5.4-4
changelog:
  - fix #207920, klaptop_acpi_help to use pm-utils and pam
  - fix crash in klaptopdaemon
  - apply upstream patches
     fix #134192, computes negative real raised 0 power equals nan


author: Than Ngo <than@redhat.com> 6:3.5.4-5
changelog:
  - apply upstream patches
      fix #132929, Apply default settings in Power Control->Laptop Battery crash
      fix #113622, kde logout on low battery
      fix #129161, kwalletmanager does not show up in systray


author: Don Zickus <dzickus@redhat.com> [2.6.18-120.el5]
changelog:
  - [misc] futex: fixup futex compat for private futexes (Peter Zijlstra ) [467459]
  - [pci] set domain/node to 0 in PCI BIOS enum code path (Prarit Bhargava ) [463418]
  - [scsi] qla2xxx: prevent NPIV conf for older hbas (Marcus Barrow ) [467153]
  - [scsi] fix oops after trying to removing rport twice (Marcus Barrow ) [465945]
  - [agp] re-introduce 82G965 graphics support (Prarit Bhargava ) [466307]
  - [agp] correct bug in stolen size calculations (Dave Airlie ) [463853]
  - [scsi] qla2xxx: merge errors caused initialize failures (Marcus Barrow ) [442946]
  - [dm] mpath: moving path activation to workqueue panics (Milan Broz ) [465570]
  - [scsi] aacraid: remove some quirk AAC_QUIRK_SCSI_32 bits (Tomas Henzl ) [453472]
  - Revert: [ppc64] compile and include the addnote binary (Don Zickus ) [462663]
  - [scsi] cciss: the output of LUN size and type wrong (Tomas Henzl ) [466030]
  - [misc] posix-timers: event vs dequeue_signal() race (Mark McLoughlin ) [466167]
  - [ata] libata: ahci enclosure management support (David Milburn ) [437190]
  - [gfs2] fix jdata page invalidation (Steven Whitehouse ) [437803]
  - [net] sky2: fix hang resulting from link flap (Neil Horman ) [461681]
  - [ata] libata: ata_piix sata/ide combined mode fix (David Milburn ) [463716]
  - [gfs2] fix for noatime support (Steven Whitehouse ) [462579]
  - [fs] remove SUID when splicing into an inode (Eric Sandeen ) [464452]
  - [fs] open() allows setgid bit when user is not in group (Eugene Teo ) [463687] {CVE-2008-4210}
  - [dlm] add old plock interface (David Teigland ) [462354]
  - [audit] fix NUL handling in TTY input auditing (Miloslav Trmač ) [462441]
  - [xen] ia64: fix INIT injection (Tetsu Yamamoto ) [464445]


author: Don Zickus <dzickus@redhat.com> [2.6.18-121.el5]
changelog:
  - [net] tun: fix printk warning (Mark McLoughlin ) [468536]
  - [xen] FV: fix lockdep warnings when running debug kernel (Don Dutile ) [459876]
  - [xen] fix crash on IRQ exhaustion (Bill Burns ) [442736]
  - [net] ipv4: fix byte value boundary check (Jiri Pirko ) [468148]
  - [ia64] fix ptrace hangs when following threads (Denys Vlasenko ) [461456]
  - [net] tcp: let skbs grow over a page on fast peers (Mark McLoughlin ) [467845]
  - [md] random memory corruption in snapshots (Mikulas Patocka ) [465825]
  - [misc] ptrace: fix exec report (Jerome Marchand ) [455060]
  - [gfs2] set gfp for data mappings to GFP_NOFS (Steven Whitehouse ) [467689]
  - [nfs] remove recoverable BUG_ON (Steve Dickson ) [458774]
  - [openib] ehca: attempt to free srq when none exists (AMEET M. PARANJAPE ) [463487]
  - [fs] don't allow splice to files opened with O_APPEND (Eugene Teo ) [466710] {CVE-2008-4554}
  - [fs] ext4: add missing aops (Eric Sandeen ) [466246]
  - [ppc64] add missing symbols to vmcoreinfo (Neil Horman ) [465396]
  - [net] sctp: INIT-ACK indicates no AUTH peer support oops (Eugene Teo ) [466082] {CVE-2008-4576}
  - [ppc64] fix race for a free SPU (AMEET M. PARANJAPE ) [465581]
  - [ppc64] SPUs hang when run with affinity-2 (AMEET M. PARANJAPE ) [464686]
  - [ppc64] SPUs hang when run with affinity-1 (AMEET M. PARANJAPE ) [464686]
  - [openib] ehca: add flush CQE generation (AMEET M. PARANJAPE ) [462619]
  - [x86] PAE: limit RAM to 64GB/PAE36 (Larry Woodman ) [465373]
  - [nfs] portmap client race (Steve Dickson ) [462332]
  - [input] atkbd: delay executing of LED switching request (Jiri Pirko ) [461233]
  - [x86] powernow_k8: depend on newer version of cpuspeed (Brian Maly ) [468764]
  - [fs] ext4: fix warning on x86_64 build (Eric Sandeen ) [463277]
  - [crypto] fix ipsec crash with MAC longer than 16 bytes (Neil Horman ) [459812]
  - [fs] ecryptfs: depend on newer version of ecryptfs-utils (Eric Sandeen ) [468772]
  - [ppc64] support O_NONBLOCK in /proc/ppc64/rtas/error_log (Vitaly Mayatskikh ) [376831]
  - [xen] ia64: make viosapic SMP-safe by adding lock/unlock (Tetsu Yamamoto ) [466552]
  - [xen] ia64: VT-i2 performance restoration (Bill Burns ) [467487]


author: Don Zickus <dzickus@redhat.com> [2.6.18-122.el5]
changelog:
  - [acpi] check common dmi tables on systems with acpi (Andy Gospodarek ) [469444]
  - [scsi] qla3xxx, qla4xxx: update/use new version format (Marcus Barrow ) [469414]
  - [md] dm-stripe.c: RAID0 event handling (Heinz Mauelshagen ) [437173]
  - [md] dm-raid45.c: add target to makefile (Heinz Mauelshagen ) [437180]
  - [md] dm-raid45.c: revert to RHEL5 dm-io kabi (Heinz Mauelshagen ) [437180]
  - [wireless] iwlwifi: avoid sleep in softirq context (John W. Linville ) [467831]
  - [net] bonding: allow downed interface before mod remove (Andy Gospodarek ) [467244]
  - [acpi] fix boot hang on old systems without _CST methods (Matthew Garrett ) [467927]
  - [scsi] qla2xxx: fix entries in class_device_attributes (Marcus Barrow ) [468873]
  - [ppc64] clock_gettime is not incrementing nanoseconds (AMEET M. PARANJAPE ) [469073]
  - [scsi] add fnic driver (mchristi@redhat.com ) [462385]
  - [scsi] add libfc and software fcoe driver (mchristi@redhat.com ) [436051]
  - [openib] ppc64: fix using SDP on 64K page systems (AMEET M. PARANJAPE ) [468872]
  - [fs] ext4: delay capable checks to avoid avc denials (Eric Sandeen ) [467216]
  - [fs] ext3: fix accessing freed memory in ext3_abort (Eric Sandeen ) [468547]
  - [fs] autofs4: correct offset mount expire check (Ian Kent ) [468187]
  - [fs] autofs4: cleanup autofs mount type usage (Ian Kent ) [468187]
  - [openib] ehca: queue and completion pair setup problem (AMEET M. PARANJAPE ) [468237]
  - [xen] PV: dom0 hang when device re-attached to in guest (Don Dutile ) [467773]
  - [scsi] qla2xxx: correct Atmel flash-part handling (Marcus Barrow ) [468573]
  - [scsi] qla2xxx: 84xx show FW VER and netlink code fixes (Marcus Barrow ) [464681]
  - [scsi] qla2xxx: restore disable by default of MSI, MSI-X (Marcus Barrow ) [468555]
  - [scsi] lpfc: Emulex RHEL-5.3 bugfixes (Tom Coughlan ) [461795]
  - [s390] qdio: speedup multicast on full HiperSocket queue (Hans-Joachim Picht ) [463162]
  - [ppc64] kexec/kdump: disable ptcal on QS21 (AMEET M. PARANJAPE ) [462744]
  - [ppc64] ptcal has to be disabled to use kexec on QS21 (AMEET M. PARANJAPE ) [462744]
  - [net] ixgbe: bring up device without crashing fix (AMEET M. PARANJAPE ) [467777]
  - [fs] ecryptfs: storing crypto info in xattr corrupts mem (Eric Sandeen ) [468192]
  - [misc] rtc: disable SIGIO notification on close (Vitaly Mayatskikh ) [465747]
  - [net] allow rcv on inactive slaves if listener exists (Andy Gospodarek ) [448144]
  - [net] e1000e: update driver to support recovery (AMEET M. PARANJAPE ) [445299]
  - [xen] virtio_net: some relatively minor fixes (Mark McLoughlin ) [468034]
  - [kabi] add dlm_posix_set_fsid (Jon Masters ) [468538]
  - [wireless] iwlwifi: fix busted tkip encryption _again_ (John W. Linville ) [467831]
  - [x86] make halt -f command work correctly (Ivan Vecera ) [413921]
  - [ppc64] EEH PCI-E: recovery fails E1000; support MSI (AMEET M. PARANJAPE ) [445299]
  - [x86_64] create a fallback for IBM Calgary (Pete Zaitcev ) [453680]
  - [drm] i915 driver arbitrary ioremap (Eugene Teo ) [464509] {CVE-2008-3831}
  - [xen] x86: allow the kernel to boot on pre-64 bit hw (Chris Lalancette ) [468083]


author: Don Zickus <dzickus@redhat.com> [2.6.18-123.el5]
changelog:
  - [s390] cio: reduce cpu utilization during device scan (Hans-Joachim Picht ) [459793]
  - [s390] cio: fix double unregistering of subchannels (Hans-Joachim Picht ) [456087]
  - [video] uvc: buf overflow in format descriptor parsing (Jay Fenlason ) [470427] {CVE-2008-3496}
  - [usb] add HID_QUIRK_RESET_LEDS to some keyboards (mchehab@infradead.org ) [434538]
  - [acpi] always use 32 bit value for GPE0 on HP xw boxes (Prarit Bhargava ) [456638]
  - [wireless] iwlagn/mac80211 IBSS fixes (John W. Linville ) [438388]
  - [ppc64] cell: fix page fault error checking in spufs (AMEET M. PARANJAPE ) [470301]
  - [input] atkbd: cancel delayed work before freeing struct (Jiri Pirko ) [461233]
  - [openib] ehca: deadlock race when creating small queues (Jesse Larrew ) [470137]
  - [openib] mthca: fix dma mapping leak (AMEET M. PARANJAPE ) [469902]
  - [openib] ib_core: use weak ordering for user memory (AMEET M. PARANJAPE ) [469902]
  - [ppc64] dma-mapping: provide attributes on cell platform (AMEET M. PARANJAPE ) [469902]
  - [net] bnx2: prevent ethtool -r EEH event (AMEET M. PARANJAPE ) [469962]
  - [net] bonding: update docs for arp_ip_target behavior (Andy Gospodarek ) [468870]
  - [xen] uninitialized watch structure can lead to crashes (Don Dutile ) [465849]
  - [openib] ehca: remove ref to QP if port activation fails (AMEET M. PARANJAPE ) [469941]
  - [usb] fix locking for input devices (James Paradis ) [468915]
  - [nfs] oops in direct I/O error handling (Steve Dickson ) [466164]
  - [md] crash in device mapper if the user removes snapshot (Mikulas Patocka ) [468473]
  - [openib] config update: enable some debugging (Doug Ledford ) [469410]
  - [sata] libata is broken with large disks (David Milburn ) [469715]
  - [md] dm-raid1: support extended status output (Jonathan Brassow ) [437177]
  - [s390] qdio: repair timeout handling for qdio_shutdown (Hans-Joachim Picht ) [463164]
  - [openib] race in ipoib_cm_post_receive_nonsrq (AMEET M. PARANJAPE ) [463485]
  - [xen] remove contiguous_bitmap (Chris Lalancette ) [463500]
  - [xen] ia64: backport check_pages_physically_contiguous (Chris Lalancette ) [463500]
  - [ppc64] cell: corrupt SPU coredump notes (AMEET M. PARANJAPE ) [431881]
  - [ppc64] spufs: missing context switch notification log-2 (AMEET M. PARANJAPE ) [462622]
  - [ppc64] spufs: missing context switch notification log-1 (AMEET M. PARANJAPE ) [462622]
  - [misc] spec: add generic Obsoletes for 3rd party drivers (Jon Masters ) [460047]
  - [x86] vDSO: use install_special_mapping (Peter Zijlstra ) [460276] {CVE-2008-3527}
  - [xen] limit node poking to available nodes (Joachim Deguara ) [449803]
  - [xen] live migration of PV guest fails (Don Dutile ) [469230]


author: Don Zickus <dzickus@redhat.com> [2.6.18-124.el5]
changelog:
  - [s390] qeth: EDDP for large TSO skb fragment list (Hans-Joachim Picht ) [468068]
  - [s390] missing bits for audit-fork (Alexander Viro ) [461831]
  - [net] ixgbe: add support for 82598AT (Andy Gospodarek ) [454910]
  - [libata] avoid overflow in ata_tf_read_block (David Milburn ) [471576]
  - [md] dm-mpath: NULL ptr access in path activation code (Milan Broz ) [471393]
  - [scsi] qla2xxx: no NPIV for loop connections (Marcus Barrow ) [471269]
  - [ppc64] spufs: clean up page fault error checking (AMEET M. PARANJAPE ) [470301]
  - [fs] cifs: corrupt data due to interleaved write calls (Jeff Layton ) [470267]
  - [misc] lots of interrupts with /proc/.../hz_timer=0 (Hans-Joachim Picht ) [470289]
  - [selinux] recognize addrlabel netlink messages (Thomas Graf ) [446063]
  - [acpi] thinkpad: fix autoloading (Matthew Garrett ) [466816]
  - [net] bnx2x: eeh, unload, probe, and endian fixes (Andy Gospodarek ) [468922]
  - [firewire] various bug and module unload hang fixes (Jay Fenlason ) [469710 469711]


author: Don Zickus <dzickus@redhat.com> [2.6.18-125.el5]
changelog:
  - [net] cxgb3: embed firmware in driver (Andy Gospodarek ) [469774]
  - [net] cxgb3: eeh, lro, and multiqueue fixes (Andy Gospodarek ) [441959]
  - [misc] support for Intel's Ibex Peak (peterm@redhat.com ) [472961]
  - [audit] race between inotify watch removal and unmount (Josef Bacik ) [472329] {CVE-2008-5182}
  - [net] mlx4: panic when inducing pci bus error (AMEET M. PARANJAPE ) [472769]
  - [s390] cio: DASD device driver times out (Hans-Joachim Picht ) [459803]
  - [misc] hugepages: ia64 stack overflow and corrupt memory (Larry Woodman ) [472802]
  - [net] niu: fix obscure 64-bit read issue (Andy Gospodarek ) [472849]
  - [x86] nmi_watchdog: call do_nmi_callback from traps-xen (Aristeu Rozanski ) [471111]
  - [GFS2] recovery stuck (Abhijith Das ) [465856]
  - [misc] fix check_dead_utrace vs do_wait() race (Oleg Nesterov ) [466774]
  - [scsi] cciss: add two new PCI IDs (Tom Coughlan ) [471679]
  - [x86] fix memory-less NUMA node booting (Prarit Bhargava ) [471424]
  - [pci] generic fix for EEH restore all registers (Jesse Larrew ) [470580]
  - [net] e1000e: remove fix for EEH restore all registers (Jesse Larrew ) [470580]
  - [agp] use contiguous memory to support xen (Rik van Riel ) [412691]
  - [edac] i5000_edac: fix misc/thermal error messages (Aristeu Rozanski ) [471933]
  - [alsa] fix PCM write blocking (Jaroslav Kysela ) [468202]
  - [xen] build xen-platform-pci as a module (Don Dutile ) [472504]
  - [scsi] qla2xx/qla84xx: failure to establish link (Marcus Barrow ) [472382]
  - [acpi] add systems to GPE register blacklist (Prarit Bhargava ) [471341]
  - [ia64] replace printk with mprintk in MCA/INIT context (Kei Tokunaga ) [471970]
  - [usb] add support for dell keyboard 431c:2003 (Mauro Carvalho Chehab ) [471469]
  - [net] e1000e: enable ECC correction on 82571 silicon (Andy Gospodarek ) [472095]
  - [dlm] fix up memory allocation flags (David Teigland ) [471871]
  - [xen] x86: fix highmem-xen.c BUG() (Chris Lalancette ) [452175]
  - [xen] guest crashes if RTL8139 NIC is only one specified (Don Dutile ) [471110]
  - [net] bnx2: fix oops on call to poll_controller (Neil Horman ) [470625]
  - [scsi] update fcoe drivers (mchristi@redhat.com ) [436051]
  - [net] bnx2: add support for 5716s (Andy Gospodarek ) [471903]
  - [openib] IPoIB: fix oops on fabric events (Doug Ledford ) [471890]
  - [libata] force sb600/700 ide mode into ahci on resume (David Milburn ) [466422]
  - [xen] increase maximum DMA buffer size (Rik van Riel ) [412691]
  - [xen] fix physical memory address overflow (Rik van Riel ) [412691]


author: Don Zickus <dzickus@redhat.com> [2.6.18-126.el5]
changelog:
  - [scsi] mpt fusion: disable msi by default (Tomas Henzl ) [474465]
  - [scsi] fcoe: update drivers (mchristi@redhat.com ) [474089]
  - [scsi] fix error handler to call scsi_decide_disposition (Tom Coughlan ) [474345]
  - [scsi] lpfc: fix cancel_retry_delay (Tom Coughlan ) [470610]
  - [x86] disable hpet on machine_crash_shutdown (Neil Horman ) [473038]
  - Revert [mm] keep pagefault from happening under pagelock (Don Zickus ) [473150]
  - [net] enic: update to version 1.0.0.648 (Andy Gospodarek ) [473871]
  - [scsi] qla4xxx: increase iscsi session check to 3-tuple (Marcus Barrow ) [474736]
  - [agp] update the names of some graphics drivers (John Villalovos ) [472438]
  - [net] atm: prevent local denial of service (Eugene Teo ) [473701] {CVE-2008-5079}
  - [scsi] remove scsi_dh_alua (mchristi@redhat.com ) [471920]
  - [scsi] qla2xx/qla84xx: occasional panic on loading (Marcus Barrow ) [472382]
  - [net] cxgb3: eeh and eeprom fixups (Andy Gospodarek ) [441959]
  - [net] cxgb3: fixup embedded firmware problems (Andy Gospodarek ) [469774]
  - [wireless] iwlwifi/mac80211: various small fixes (John W. Linville ) [468967]
  - [x86_64] fix AMD IOMMU boot issue (Joachim Deguara ) [473464]
  - [x86_64] limit num of mce sysfs files removed on suspend (Prarit Bhargava ) [467725]
  - [xen] console: make LUKS passphrase readable (Bill Burns ) [466240]
  - [x86_64] Calgary IOMMU sysdata fixes (Prarit Bhargava ) [474047]
  - [alsa] select 3stack-dig model for SC CELSIUS R670 (Jaroslav Kysela ) [470449]
  - [ata] libata: lba_28_ok sector off by one (David Milburn ) [464868]
  - [ppc64] fix system calls on Cell entered with XER.SO=1 (Jesse Larrew ) [474196]
  - [block] fix max_segment_size, seg_boundary mask setting (Milan Broz ) [471639]
  - [fs] jbd: alter EIO test to avoid spurious jbd aborts (Eric Sandeen ) [472276]
  - [acpi] acpi_cpufreq: fix panic when removing module (Prarit Bhargava ) [472844]
  - [openib] ehca: fix generating flush work completions (AMEET M. PARANJAPE ) [472812]
  - [ata] libata: sata_nv hard reset mcp55 (David Milburn ) [473152]
  - [misc] fix add return signal to ptrace_report_exec (AMEET M. PARANJAPE ) [471112]
  - [misc] utrace: prevent ptrace_induce_signal() crash (Oleg Nesterov ) [469754]
  - [misc] utrace: make ptrace_state refcountable (Oleg Nesterov ) [469754]
  - [net] virtio_net: mergeable receive buffers (Mark McLoughlin ) [473120]
  - [net] virtio_net: jumbo frame support (Mark McLoughlin ) [473114]
  - [net] tun: jumbo frame support (Mark McLoughlin ) [473110]
  - [net] fix unix sockets kernel panic (Neil Horman ) [470436] {CVE-2008-5029}
  - [xen] x86: emulate movzwl with negative segment offsets (Chris Lalancette ) [471801]


author: Don Zickus <dzickus@redhat.com> [2.6.18-127.el5]
changelog:
  - Revert: [i386]: check for dmi_data in powernow_k8 driver (Prarit Bhargava ) [476184]
  - [xen] re-enable using xenpv in boot path for FV guests (Don Dutile ) [473899]
  - [xen] pv_hvm: guest hang on FV save/restore (Don Dutile ) [475778]
  - [openib] fix ipoib oops in unicast_arp_send (Doug Ledford ) [476005]
  - [scsi] fnic: remove link down count processing (mchristi@redhat.com ) [474935]
  - Revert: [x86] disable hpet on machine_crash_shutdown (Neil Horman ) [475652]
  - [scsi] ibmvscsi: EH fails due to insufficient resources (AMEET M. PARANJAPE ) [475618]
  - [x86_64] proc: export GART region through /proc/iomem (Neil Horman ) [475507]
  - [acpi] add xw8600 and xw6600 to GPE0 block blacklist (Prarit Bhargava ) [475418]
  - [net] cxgb3: fixup embedded firmware problems take 2 (Andy Gospodarek ) [469774]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.1.1.el5]
changelog:
  - [security] introduce missing kfree (Jiri Pirko ) [480597 480598] {CVE-2009-0031}
  - [sched] fix clock_gettime monotonicity (Peter Zijlstra ) [481122 477763]
  - [nfs] create rpc clients with proper auth flavor (Jeff Layton ) [481119 465456]
  - [net] sctp: overflow with bad stream ID in FWD-TSN chunk (Eugene Teo ) [478804 478805] {CVE-2009-0065}
  - [md] fix oops with device-mapper mirror target (Heinz Mauelshagen ) [481120 472558]
  - [openib] restore traffic in connected mode on HCA (AMEET M. PARANJAPE ) [479812 477000]
  - [net] add preemption point in qdisc_run (Jiri Pirko ) [477746 471398] {CVE-2008-5713}
  - [x86_64] copy_user_c assembler can leave garbage in rsi (Larry Woodman ) [481117 456682]
  - [misc] setpgid returns ESRCH in some situations (Oleg Nesterov ) [480576 472433]
  - [s390] zfcp: fix hexdump data in s390dbf traces (Hans-Joachim Picht ) [480996 470618]
  - [fs] hfsplus: fix buffer overflow with a corrupted image (Anton Arapov ) [469637 469638] {CVE-2008-4933}
  - [fs] hfsplus: check read_mapping_page return value (Anton Arapov ) [469644 469645] {CVE-2008-4934}
  - [fs] hfs: fix namelength memory corruption (Anton Arapov ) [470772 470773] {CVE-2008-5025}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.1.2.el5]
changelog:
  - [scsi] libata: sas_ata fixup sas_sata_ops (David Milburn ) [485909 483171]
  - [fs] ecryptfs: readlink flaw (Eric Sandeen ) [481606 481607] {CVE-2009-0269}
  - [qla2xxx] correct endianness during flash manipulation (Marcus Barrow ) [485908 481691]
  - [net] ixgbe: frame reception and ring parameter issues (Andy Gospodarek ) [483210 475625]
  - [misc] fix memory leak during pipe failure (Benjamin Marzinski ) [481576 478643]
  - [block] enforce a minimum SG_IO timeout (Eugene Teo ) [475405 475406] {CVE-2008-5700}
  - [nfs] handle attribute timeout and u32 jiffies wrap (Jeff Layton ) [483201 460133]
  -  [fs] ext[234]: directory corruption DoS (Eugene Teo ) [459601 459604] {CVE-2008-3528}
  - [net] deadlock in Hierarchical token bucket scheduler (Neil Horman ) [481746 474797]
  - [wireless] iwl: fix BUG_ON in driver (Neil Horman ) [483206 477671]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.1.3.el5]
changelog:
  - [net] skfp_ioctl inverted logic flaw (Eugene Teo ) [486539 486540] {CVE-2009-0675}
  - [net] memory disclosure in SO_BSDCOMPAT gsopt (Eugene Teo ) [486517 486518] {CVE-2009-0676}
  - [x86] limit max_cstate to use TSC on some platforms (Tony Camuso ) [488239 470572]
  - [ptrace] correctly handle ptrace_update return value (Jerome Marchand ) [487394 483814]
  - [misc] minor signal handling vulnerability (Oleg Nesterov ) [479963 479964] {CVE-2009-0028}
  - [firmware] dell_rbu: prevent oops (Don Howard ) [482941 482942]
  - [gfs2] panic in debugfs_remove when unmounting (Abhijith Das ) [485910 483617]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.1.4.el5]
changelog:
  - [x86_64] mce: do not clear an unrecoverable error status (Aristeu Rozanski ) [490433 489692]
  - [wireless] iwlwifi: booting with RF-kill switch enabled (John W. Linville ) [489846 482990]
  - [x86_64] fix gettimeoday TSC overflow issue (Prarit Bhargava ) [489847 467942]
  - [misc] signal: modify locking to handle large loads (AMEET M. PARANJAPE ) [489457 487376]
  - [x86] TSC keeps running in C3+ (Luming Yu ) [489310 474091]
  - [net] fix icmp_send and icmpv6_send host re-lookup code (Jiri Pirko ) [489253 439670] {CVE-2009-0778}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.1.7.el5]
changelog:
  - [nfs] remove bogus lock-if-signalled case (Bryn M. Reeves ) [456287 456288] {CVE-2008-4307}
  - [x86] NONSTOP_TSC in tsc clocksource (Luming Yu ) [493356 474091]
  - [ppc] keyboard not recognized on bare metal (Justin Payne ) [494293 455232]
  - [fs] ecryptfs: fix memory leak into crypto headers (Eric Sandeen ) [491255 491256] {CVE-2009-0787}
  - [xen] x86: silence WRMSR warnings (Chris Lalancette ) [488928 470035]
  - [ptrace] audit_syscall_entry to use right syscall number (Jiri Pirko ) [488001 488002] {CVE-2009-0834}
  - [dlm] fix length calculation in compat code (David Teigland ) [491677 487672]
  - [nfs] fix hung clients from deadlock in flush_workqueue (David Jeffery ) [488929 483627]
  - [ia64] use current_kernel_time/xtime in hrtimer_start() (Prarit Bhargava ) [490434 485323]
  - [net] bonding: fix arp_validate=3 slaves behaviour (Jiri Pirko ) [488064 484304]
  - [net] enic: return notify intr credits (Andy Gospodarek ) [472474 484824]
  - [input] wacom: 12x12 problem while using lens cursor (Aristeu Rozanski ) [489460 484959]
  - [net] ehea: improve behaviour in low mem conditions (AMEET M. PARANJAPE ) [487035 483148]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.1.8.el5]
changelog:
  - [misc] exit_notify: kill the wrong capable check [494270 494271] {CVE-2009-1337}
  - [misc] fork: CLONE_PARENT && parent_exec_id interaction (Don Howard ) [479963 479964] {CVE-2009-0028}
  - [scsi] qla2xxx: reduce DID_BUS_BUSY failover errors (Marcus Barrow ) [495635 244967]
  - [nfs] v4: client crash on file lookup with long names (Sachin S. Prabhu ) [494078 493942] {CVE-2009-1336}
  - [net] ixgbe: stop double counting frames and bytes (Andy Gospodarek ) [489459 487213]
  - [xen] x86: update the earlier APERF/MPERF patch (Chris Lalancette ) [495929 493557]
  - [xen] x86: fix dom0 panic when using dom0_max_vcpus (Chris Lalancette ) [495931 485119]
  - [net] fix oops when using openswan (Neil Horman ) [496044 484590]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.1.13.el5]
changelog:
  - [misc] add some long-missing capabilities to CAP_FS_MASK (Eric Paris ) [499075 497271 499076 497272] {CVE-2009-1072}
  - [agp] zero pages before sending to userspace (Jiri Olsa ) [497025 497026] {CVE-2009-1192}
  - [fs] keep eventpoll from locking up the box (Josef Bacik ) [497322 487585]
  - [misc] waitpid reports stopped process more than once (Vitaly Mayatskikh ) [486945 481199]
  - [ata] libata: ahci enclosure management bios workaround (David Milburn ) [500120 488471]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.1.14.el5]
changelog:
  - [nfs] v4: client handling of MAY_EXEC in nfs_permission (Peter Staubach ) [500301 500302] {CVE-2009-1630}
  - [fs] proc: avoid info leaks to non-privileged processes (Amerigo Wang ) [499546 499541]
  - [net] tg3: Fix firmware event timeouts (Jiri Pirko ) [502837 481715]
  - [scsi] libiscsi: fix nop response/reply and session cleanup race (Jiri Pirko ) [502916 497411]
  - [fs] cifs: fix pointer and checks in cifs_follow_symlink (Jeff Layton ) [496576 496577] {CVE-2009-1633}
  - [fs] cifs: fix error handling in parse_DFS_referrals (Jeff Layton ) [496576 496577] {CVE-2009-1633}
  - [fs] cifs: buffer overruns when converting strings (Jeff Layton ) [496576 496577] {CVE-2009-1633}
  - [fs] cifs: unicode alignment and buffer sizing problems (Jeff Layton ) [494279 494280] {CVE-2009-1439}
  - [x86] xen: fix local denial of service (Chris Lalancette ) [500950 500951] {CVE-2009-1758}
  - [misc] compile: add -fwrapv to gcc CFLAGS (Don Zickus ) [501751 491266]
  - [misc] random: make get_random_int more random (Amerigo Wang ) [499783 499776]
  - [gfs2] fix uninterruptible quotad sleeping (Steven Whitehouse ) [501742 492943]
  - [mm] cow vs gup race fix (Andrea Arcangeli ) [486921 471613]
  - [mm] fork vs gup race fix (Andrea Arcangeli ) [486921 471613]
  - [nfs] fix hangs during heavy write workloads (Peter Staubach ) [486926 469848]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.3.1.el5]
changelog:
  - [pci] quirk: disable MSI on VIA VT3364 chipsets (Dean Nelson ) [507529 501374]
  - [char] tty: prevent an O_NDELAY writer from blocking (Mauro Carvalho Chehab ) [510239 506806]
  - [misc] hrtimer: fix a soft lockup (Amerigo Wang ) [418061 418071] {CVE-2007-5966}
  - [misc] hrtimer: check relative timeouts for overflow (AMEET M. PARANJAPE ) [510018 492230]


author: Don Howard <dhoward@redhat.com> [2.6.18-128.4.1.el5]
changelog:
  - [fs] ecryptfs: check tag 11 packet literal data buffer size (Eric Sandeen ) [512862 512863] {CVE-2009-2406}
  - [fs] ecryptfs: check tag 3 packet encrypted key size (Eric Sandeen ) [512886 512887] {CVE-2009-2407}
  - [misc] personality handling: fix PER_CLEAR_ON_SETID (Vitaly Mayatskikh ) [511173 508842] {CVE-2009-1895}
  - [xen] HV: remove high latency spin_lock (Chris Lalancette ) [512311 459410]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.7.1.el5]
changelog:
  - [net] prevent null pointer dereference in udp_sendmsg (Vitaly Mayatskikh) [518047 518043] {CVE-2009-2698}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.8.1.el5]
changelog:
  - [x86] detect APIC clock calibration problems (Prarit Bhargava ) [521237 503957]
  - [misc] information leak in sigaltstack (Vitaly Mayatskikh ) [515397 515396] {CVE-2009-2847}
  - [misc] execve: must clear current->clear_child_tid (Oleg Nesterov ) [515430 515429] {CVE-2009-2848}
  - [misc] build with -fno-delete-null-pointer-checks (Eugene Teo ) [515468 511181]
  - [md] increase pg_init_in_progress only if work is queued (Jesse Larrew ) [506905 489582]
  - [md] retry immediate in 2 seconds (Jesse Larrew ) [506905 489582]
  - [scsi] retry for NOT_READY condition (Jesse Larrew ) [506905 489582]
  - [md] handle multiple paths in pg_init (Jesse Larrew ) [506905 489582]
  - [scsi] fix compilation error (Jesse Larrew ) [506905 489582]
  - [scsi] add LSI storage IDs (Jesse Larrew ) [506905 489582]
  - [scsi] handle quiescence in progress (Jesse Larrew ) [506905 489582]
  - [scsi] retry IO on unit attention (Jesse Larrew ) [506905 489582]
  - [scsi] handle unit attention in mode select (Jesse Larrew ) [506905 489582]
  - [scsi] make the path state active by default (Jesse Larrew ) [506905 489582]
  - [scsi] Retry mode select in rdac device handler (Jesse Larrew ) [506905 489582]
  - [x86] use [ml]fence to synchronize rdtsc (Chris Lalancette ) [523280 448588]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.9.1.el5]
changelog:
  - [nfs] r/w I/O perf degraded by FLUSH_STABLE page flush (Peter Staubach ) [521243 498433]
  - [scsi] cciss: fix spinlock (Tomas Henzl ) [525728 509818]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.10.1.el5]
changelog:
  - [security] require root for mmap_min_addr (Eric Paris ) [531703 518143] {CVE-2009-2695}
  - [pci] pciehp: fix PCIe hotplug slot detection (Michal Schmidt ) [530381 521731]
  - [nfs] fix cache invalidation problems in nfs_readdir (Jeff Layton ) [526959 511170]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.12.1.el5]
changelog:
  - [net] e1000, r9169: fix rx length check errors (Cong Wang ) [550913 552136 550915 552138] {CVE-2009-4537 CVE-2009-4536}
  - [net] e1000e: fix rx length check errors (Amerigo Wang ) [551221 551223] {CVE-2009-4538}
  - [net] ipv6: fix ipv6_hop_jumbo remote system crash (Amerigo Wang ) [549226 548643] {CVE-2007-4567}
  - [net] igb: add link check function [548023 474881]
  - [ia64] kdump: restore registers in the stack on init (Takao Indoh ) [542581 515753]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.13.1.el5]
changelog:
  - [net] e1000: fix rx length check errors (Neil Horman) [552136 552138] {CVE-2009-4536}
  - [net] r8169: improved frame length filtering (Neil Horman) [550913 550915] {CVE-2009-4537}
  - Revert: [net] e1000, r9169: fix rx length check errors (Cong Wang ) [550913 552136 550915 552138] {CVE-2009-4537 CVE-2009-4536}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.14.1.el5]
changelog:
  - [net] sctp: backport cleanups for ootb handling V2 (Neil Horman) [555665 555667] {CVE-2010-0008}
  - [x86_64] wire up compat sched_rr_get_interval (Danny Feng) [557683 557092]
  - [net] ipv6: fix OOPS in ip6_dst_lookup_tail (Thomas Graf) [563784 552354]
  - [fs] fasync: split 'fasync_helper()' into separate add/remove functions (Danny Feng) [557320 548657] {CVE-2009-4141}
  - [net] e1000e: fix broken wol (Andy Gospodarek) [559334 557974]
  - [fs] inotify: remove debug code (Danny Feng ) [568663 499019]
  - [fs] inotify: fix race (Danny Feng ) [568663 499019]
  - [x86_64] copy_user_c can zero more data than needed (Vitaly Mayatskikh ) [568307 490938]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.15.1.el5]
changelog:
  - [x86_64] xen: fix missing 32-bit syscalls on 64-bit Xen (Christopher Lalancette) [569596 559410]
  - [x86_64] fix missing 32 bit syscalls on 64 bit (Wade Mealing) [569596 559410]
  - [fs] proc: make errno values consistent when race occurs (Danny Feng) [571361 556545]
  - [misc] support Intel multi-APIC-cluster systems (Prarit Bhargava ) [574488 507333]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.17.1.el5]
changelog:
  - [net] ipv4: fix an unexpectedly freed skb in tcp (Amerigo Wang) [577717 546402] {CVE-2010-1188}
  - [misc] don't call printk while crashing (Mauro Carvalho Chehab ) [588211 497195]
  - [nfs] memory leak when reading files wth option 'noac' (Peter Staubach ) [588221 493045]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.18.1.el5]
changelog:
  - [net] bonding: fix broken multicast with round-robin mode (Andy Gospodarek) [594055 570645]
  - [net] sched: fix SFQ qdisc crash w/limit of 2 packets (Jiri Pirko) [594051 579774]
  - [nfs] revert retcode check in nfs_revalidate_mapping() (Jeff Layton) [594059 557423]
  - [s390] dasd: fix waitqueue for sleep_on_immediatly (Hans-Joachim Picht ) [595234 480161]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.2.1.el5]
changelog:
  - Revert: [mm] cow vs gup race fix (Andrea Arcangeli ) [486921 471613]
  - Revert: [mm] fork vs gup race fix (Andrea Arcangeli ) [486921 471613]
  - Revert: [mm] fix swap race condition in fork-gup-race patch (Andrea Arcangeli ) [507297 506684]
  - Revert: [mm] prevent panic in copy_hugetlb_page_range (Larry Woodman ) [508030 507860]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.20.1.el5]
changelog:
  - [fs] gfs2: fix rename causing kernel oops (Robert S Peterson) [614913 602025] {CVE-2010-2798}
  - [scsi] megaraid_sas: fix physical disk handling (Tomas Henzl) [619362 564249]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.21.1.el5]
changelog:
  - [net] bnx2x: use single tx queue (Stanislaw Gruszka) [620669 567979]
  - [net] bnx2x: update to 1.52.1-6 firmware (Stanislaw Gruszka) [620668 560556]
  - [net] bnx2x: update to 1.52.1-6 (Stanislaw Gruszka) [620668 560556]
  - [net] bnx2x: update to 1.52.1-5 (Stanislaw Gruszka) [620665 515716 522600]
  - [net] bnx2x: add mdio support (Stanislaw Gruszka) [620665 515716 522600]
  - [net] bnx2x: add firmware version 5.2.7.0 (Stanislaw Gruszka) [620665 515716 522600]
  - [net] bnx2x: update to 1.52.1 (Stanislaw Gruszka) [620665 515716 522600]
  - [net] bnx2x: add support for bcm8727 phy (Stanislaw Gruszka ) [620665 515716]
  - [net] bnx2x: update to 1.48.105 (Stanislaw Gruszka ) [620663 475481]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.22.1.el5]
changelog:
  - [mm] pass correct mm when growing stack (Jiri Pirko) [625635 607858] {CVE-2010-2240}
  - [mm] fix up some user-visible effects of stack guard page (Jiri Pirko) [625635 607858] {CVE-2010-2240}
  - [mm] fix page table unmap for stack guard page properly (Jiri Pirko) [625635 607858] {CVE-2010-2240}
  - [mm] fix missing unmap for stack guard page failure case (Jiri Pirko) [625635 607858] {CVE-2010-2240}
  - [mm] keep a guard page below a grow-down stack segment (Jiri Pirko) [625635 607858] {CVE-2010-2240}


author: Don Howard <dhoward@redhat.com> [2.6.18-128.23.2.el5]
changelog:
  - [misc] make compat_alloc_user_space() incorporate the access_ok() (Don Howard) [634506 634464] {CVE-2010-3081}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.24.1.el5]
changelog:
  - [pci] msi: add option for lockless interrupt mode (Jiri Pirko) [621938 599295]
  - [net] bnx2: fix lost MSI-X problem on 5709 NICs (John Feeney) [631811 511368]


author: Don Howard <dhoward@redhat.com> [2.6.18-128.23.2.el5]
changelog:
  - Branch build based on 2.6.18-128.23.1.el5
  - [misc] make compat_alloc_user_space() incorporate the access_ok() (Don Howard) [634506 634464] {CVE-2010-3081}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.25.1.el5]
changelog:
  - Syncing following patch from branched build:
  - [misc] make compat_alloc_user_space() incorporate the access_ok() (Don Howard) [634506 634464] {CVE-2010-3081}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.26.1.el5]
changelog:
  - [misc] fix race in pid generation causing immediate reuse (Dave Anderson) [638864 634850]
  - [fs] nfs: fix bug in nfsd4 read_buf (Jiri Olsa) [645207 612035] {CVE-2010-2521}
  - [fs] jbd: fix race in slab creation/deletion (Josef Bacik) [645653 496847]
  - [fs] aio: race in aio_complete leads to process hang (Jeff Moyer ) [638868 475814]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.28.1.el5]
changelog:
  - [misc] kernel: remove yield from stop_machine paths (Oleg Nesterov) [651814 634454]
  - [kernel] add stop_machine barrier to fix lock contention (Prarit Bhargava) [651814 634454]
  - [scsi] scsi_transport_fc: fc_user_scan correction (David Milburn ) [651455 515176]
  - [block] disable iostat collection in gendisk (Jerome Marchand ) [651809 484158]
  - [block] fix request flags (Jerome Marchand ) [651809 484158]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-128.32.1.el5]
changelog:
  - [x86_64] fix time drift due to faulty lost tick tracking (Phillip Lougher) [711791 579711]
  - [net] e1000: fix race condition e1000_clean_tx_irq: Detected Tx Unit Hang (Dean Nelson) [709150 515524]
  - [fs] writeback: fix persistent inode->dirtied_when val (Jeff Layton ) [706545 489359]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-128.33.1.el5]
changelog:
  - [xen] correct bitsize calculation for 32-on-64 (Phillip Lougher) [717216 616827]
  - [xen] fix 32-on-64 PV oops in xen_set_pud (Chris Lalancette ) [718066 467698]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-128.34.1.el5]
changelog:
  - [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [713451 675781]
  - [fs] proc: Fix procfs race vs rmmod or hot-remove (David Howells) [713451 675781]
  - Revert: [xen] fix 32-on-64 PV oops in xen_set_pud (Chris Lalancette ) [718066 467698]
  - Revert: [xen] correct bitsize calculation for 32-on-64 (Phillip Lougher) [717216 616827]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-128.39.1.el5]
changelog:
  - [x86_32] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [835447 834562]
  - [x86_64] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [825979 818787]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-128.1.17.el5]
changelog:
  - [net] bnx2: fix problem of using wrong IRQ handler (Jiri Pirko ) [503689 489519]
  - [misc] wacom: reset state when tool is not in proximity (Aristeu Rozanski ) [508275 499870]
  - [net] r8169: fix crash when large packets are received (Ivan Vecera ) [504731 504732] {CVE-2009-1389}
  - [scsi] libsas: use the supplied address for SATA devices (David Milburn ) [506029 494658]
  - [char] TPM: get_event_name stack corruption (Dean Nelson ) [506906 503905]
  - [ptrace] fix do_coredump vs ptrace_start() deadlock (Oleg Nesterov ) [504265 504157] {CVE-2009-1388}
  - [xen] netback: change back to a flipping interface (Chris Lalancette ) [497812 479754]
  - [net] e1000: fix skb_over_panic (Neil Horman ) [503440 503441] {CVE-2009-1385}
  - [misc] core dump: wrong thread info in core dump file (Amerigo Wang ) [505322 503553]
  - [fs] vfs: skip I_CLEAR state inodes in drop_pagecache_sb (Eric Sandeen ) [503692 500164]
  - [audit] watch: fix removal of AUDIT_DIR rule on rmdir (Alexander Viro ) [507561 501321]
  - [ia64] xen: switch from flipping to copying interface (Chris Lalancette ) [497812 479754]


author: Don Zickus <dzickus@redhat.com> [2.6.18-119.el5]
changelog:
  - [ppc64] compile and include the addnote binary (Don Zickus ) [462663]
  - [scsi] qla2xxx: new version string defintion (Marcus Barrow ) [465023]
  - [acpi] configs update for acpi-cpufreq driver (Matthew Garrett ) [449787]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.1.1.el5]
changelog:
  - [net] sky2: revert some phy power refactoring changes (Neil Horman ) [517976 509891]
  - [net] atalk/irda: memory leak to user in getname (Danny Feng ) [519309 519310] {CVE-2009-3001 CVE-2009-3002}
  - [x86_64] fix gettimeoday TSC overflow issue - 1 (Prarit Bhargava ) [489847 467942]
  - [md] prevent crash when accessing suspend_* sysfs attr (Danny Feng ) [518135 518136] {CVE-2009-2849}
  - [nfs] nlm_lookup_host: don't return invalidated nlm_host (Sachin S. Prabhu ) [517967 507549]
  - [net] bonding: tlb/alb: set active slave when enslaving (Jiri Pirko ) [517971 499884]
  - [nfs] r/w I/O perf degraded by FLUSH_STABLE page flush (Peter Staubach ) [521244 498433]
  - [SELinux] allow preemption b/w transition perm checks (Eric Paris ) [520919 516216]
  - [scsi] scsi_transport_fc: fc_user_scan correction (David Milburn ) [521239 515176]
  - [net] tg3: refrain from touching MPS (John Feeney ) [521241 516123]
  - [net] qlge: fix hangs and read performance (Marcus Barrow ) [519783 517893]
  - [scsi] qla2xxx: allow use of MSI when MSI-X disabled (Marcus Barrow ) [519782 517922]
  - [net] mlx4_en fix for vlan traffic (Doug Ledford ) [520906 514141]
  - [net] mlx4_core: fails to load on large systems (Doug Ledford ) [520908 514147]
  - [x86] disable kvmclock by default (Glauber Costa ) [520685 476075]
  - [x86] disable kvmclock when shuting the machine down (Glauber Costa ) [520685 476075]
  - [x86] re-register clock area in prepare_boot_cpu (Glauber Costa ) [520685 476075]
  - [x86] kvmclock smp support (Glauber Costa ) [520685 476075]
  - [x86] use kvm wallclock (Glauber Costa ) [520685 476075]
  - [x86_64] kvm clocksource's implementation (Glauber Costa ) [520685 476075]
  - [x86] kvm: import kvmclock.c (Glauber Costa ) [520685 476075]
  - [x86] kvm: import pvclock.c and headers (Glauber Costa ) [520685 476075]
  - [x86] export additional cpu flags in /proc/cpuinfo (Prarit Bhargava ) [520686 517928]
  - [x86] detect APIC clock calibration problems (Prarit Bhargava ) [521238 503957]
  - [x86] pnpacpi: fix serial ports on IBM Point-of-Sale HW (Kevin Monroe ) [520905 506799]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.2.1.el5]
changelog:
  - [x86_64] kvm: bound last_kvm to prevent backwards time (Glauber Costa ) [524527 524076]
  - [x86] kvm: fix vsyscall going backwards (Glauber Costa ) [524527 524076]
  - [misc] fix RNG to not use first generated random block (Neil Horman ) [523289 522860]
  - [x86] kvm: mark kvmclock_init as cpuinit (Glauber Costa ) [524151 523450]
  - [x86_64] kvm: allow kvmclock to be overwritten (Glauber Costa ) [524150 523447]
  - [x86] kvmclock: fix bogus wallclock value (Glauber Costa ) [524152 519771]
  - [scsi] scsi_dh_rdace: add more sun hardware (mchristi@redhat.com ) [523237 518496]
  - [misc] cprng: fix cont test to be fips compliant (Neil Horman ) [523290 523259]
  - [net] bridge: fix LRO crash with tun (Andy Gospodarek ) [522636 483646]
  - Revert: [x86_64] fix gettimeoday TSC overflow issue - 1 (Don Zickus ) [489847 467942]
  - Revert: [net] atalk/irda: memory leak to user in getname (Danny Feng ) [519309 519310] {CVE-2009-3001 CVE-2009-3002}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.4.1.el5]
changelog:
  - [net] bonding: set primary param via sysfs (Jiri Pirko ) [517971 499884]
  - [scsi] fusion: re-enable mpt_msi_enable option (Tomas Henzl ) [526963 520820]
  - [net] ipt_recent: sanity check hit count (Amerigo Wang ) [527434 523982]
  - [net] ipv4: ip_append_data handle NULL routing table (Jiri Pirko ) [527436 520297]
  - [nfs] fix cache invalidation problems in nfs_readdir (Jeff Layton ) [526960 511170]
  - [net] tc: fix unitialized kernel memory leak (Jiri Pirko ) [520994 520863]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.5.1.el5]
changelog:
  - [fs] eCryptfs: prevent lower dentry from going negative (Eric Sandeen ) [527834 527835] {CVE-2009-2908}
  - [nfs] v4: reclaimer thread stuck in an infinite loop (Sachin S. Prabhu ) [529162 526888]
  - [net] r8169: avoid losing MSI interrupts (Ivan Vecera ) [529366 514589]
  - [scsi] st.c: memory use after free after MTSETBLK ioctl (David Jeffery ) [528133 520192]
  - [net] r8169: balance pci_map/unmap pair, use hw padding (Ivan Vecera ) [529143 515857] {CVE-2009-3613}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.6.1.el5]
changelog:
  - [fs] fix pipe null pointer dereference (Jeff Moyer) [530938 530939] {CVE-2009-3547}
  - [security] require root for mmap_min_addr (Eric Paris ) [518142 518143] {CVE-2009-2695}
  - [net] lvs: adjust sync protocol handling for ipvsadm -2 (Neil Horman ) [528645 524129]
  - [xen] allow booting with broken serial hardware (Chris Lalancette ) [524153 518338]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-164.7.1.el5]
changelog:
  - [xen] fix numa on magny-cours systems (Bhavna Sarathy ) [539684 526051]
  - [xen] fix crash with memory imbalance (Bhavna Sarathy ) [539690 526785]
  - [net] sched: fix panic in bnx2_poll_work (John Feeney ) [539686 526481]
  - [acpi] prevent duplicate dirs in /proc/acpi/processor (Matthew Garrett ) [539692 537395]
  - [x86] fix boot crash with < 8-core AMD Magny-cours system (Bhavna Sarathy) [539682 522215]
  - [x86] support amd magny-cours power-aware scheduler fix (Bhavna Sarathy ) [539680 513685]
  - [x86] disable NMI watchdog on CPU remove (Prarit Bhargava ) [539691 532514]
  - [acpi] bm_check and bm_control update (Luming Yu ) [539677 509422]
  - [x86_64] amd: iommu system management erratum 63 fix (Bhavna Sarathy ) [539689 531469]
  - [net] bnx2i/cnic: update driver version for RHEL5.5 (Mike Christie ) [537014 516233]
  - [x86] fix L1 cache by adding missing break (Bhavna Sarathy ) [539688 526770]
  - [x86] amd: fix hot plug cpu issue on 32-bit magny-cours (Bhavna Sarathy ) [539688 526770]
  - [acpi] disable ARB_DISABLE on platforms where not needed (Luming Yu ) [539677 509422]
  - [fs] private dentry list to avoid dcache_lock contention (Lachlan McIlroy ) [537019 526612]
  - [scsi] qla2xxx: enable msi-x correctly on qlogic 2xxx series (Marcus Barrow ) [537020 531593]
  - [apic] fix server c1e spurious lapic timer events (Bhavna Sarathy ) [539681 519422]
  - [net] netlink: fix typo in initialization (Jiri Pirko ) [528872 527906]
  - [x86] set cpu_llc_id on AMD CPUs (Bhavna Sarathy ) [539678 513684]
  - [x86] fix up threshold_bank4 support on AMD Magny-cours (Bhavna Sarathy ) [539678 513684]
  - [x86] fix up L3 cache information for AMD Magny-cours (Bhavna Sarathy ) [539678 513684]
  - [x86] amd: fix CPU llc_shared_map information (Bhavna Sarathy ) [539678 513684]
  - [nfs] v4: fix setting lock on open file with no state (Jeff Layton ) [533114 533115] {CVE-2009-3726}
  - [misc] futex priority based wakeup (Jon Thomas ) [533858 531552]
  - [dlm] use GFP_NOFS on all lockspaces (David Teigland ) [533859 530537]
  - [drm] r128: check for init on all ioctls that require it (Danny Feng ) [529602 529603] {CVE-2009-3620}
  - [scsi] mpt: errata 28 fix on LSI53C1030 (Tomas Henzl ) [529308 518689]
  - [x86] add ability to access Nehalem uncore config space (John Villalovos ) [539675 504330]
  - [net] AF_UNIX: deadlock on connecting to shutdown socket (Jiri Pirko ) [529630 529631] {CVE-2009-3621}
  - [fs] inotify: remove debug code (Danny Feng ) [533822 499019]
  - [fs] inotify: fix race (Danny Feng ) [533822 499019]
  - [audit] dereferencing krule as if it were an audit_watch (Alexander Viro ) [533861 526819]
  - [mm] fix spinlock performance issue on large systems (John Villalovos ) [539685 526078]
  - [x86] finish sysdata conversion (Danny Feng ) [537346 519633]
  - [pci] pciehp: fix PCIe hotplug slot detection (Michal Schmidt ) [530383 521731]
  - [x86] oprofile: support arch perfmon (John Villalovos ) [539683 523479]
  - [x86] oprofile: fix K8/core2 on multiple cpus (John Villalovos ) [539683 523479]
  - [x86] oprofile: utilize perf counter reservation (John Villalovos ) [539683 523479]
  - [pci] avoid disabling acpi to use non-core PCI devices (Mauro Carvalho Chehab ) [539675 504330]
  - [misc] support Intel multi-APIC-cluster systems (Prarit Bhargava ) [539676 507333]
  - [x86] suspend-resume: work on large logical CPU systems (John Villalovos ) [539674 499271]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-164.8.1.el5]
changelog:
  - [xen] iommu-amd: extend loop ctr for polling completion wait (Bhavna Sarathy ) [539687 518474 526766]
  - [xen] iommu: add passthrough and no-intremap parameters (Bhavna Sarathy ) [539687 518474 526766]
  - [xen] iommu: enable amd iommu debug at run-time (Bhavna Sarathy ) [539687 518474 526766]
  - [xen] support interrupt remapping on M-C (Bhavna Sarathy ) [539687 518474 526766]
  - [xen] iommu: move iommu_setup() to setup ioapic correctly (Bhavna Sarathy ) [539687 518474 526766]
  - [net] bnx2x: add support for bcm8727 phy (Stanislaw Gruszka ) [540381 515716]
  - [x86] cpu: upstream cache fixes needed for amd m-c (Bhavna Sarathy ) [540469 526315]
  - [x86_64] set proc id and core id before calling fixup_dcm (Bhavna Sarathy) [540469 526315]
  - [x86] mce_amd: fix up threshold_bank4 creation (Bhavna Sarathy ) [540469 526315]
  - Revert: [net] sched: fix panic in bnx2_poll_work (John Feeney ) [539686 526481]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.10.1.el5]
changelog:
  - [net] e1000, r9169: fix rx length check errors (Cong Wang ) [550914 550915]
  - [net] e1000e: fix rx length check errors (Amerigo Wang ) [551222 551223]
  - [net] ipv6: fix ipv6_hop_jumbo remote system crash (Amerigo Wang ) [548642 548643] {CVE-2007-4567}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.11.1.el5]
changelog:
  - [firewire] ohci: handle receive packets with zero data (Jay Fenlason) [547241 547242] {CVE-2009-4138}
  - [x86] sanity check for AMD northbridges (Andrew Jones) [549905 547518]
  - [x86_64] disable vsyscall in kvm guests (Glauber Costa) [550968 542612]
  - [fs] ext3: replace lock_super with explicit resize lock (Eric Sandeen) [549908 525100]
  - [fs] respect flag in do_coredump (Danny Feng) [544188 544189] {CVE-2009-4036}
  - [gfs2] make O_APPEND behave as expected (Steven Whitehouse) [547521 544342]
  - [fs] hfs: fix a potential buffer overflow (Amerigo Wang) [540740 540741] {CVE-2009-4020}
  - [fuse] prevent fuse_put_request on invalid pointer (Danny Feng) [538736 538737] {CVE-2009-4021}
  - [mm] call vfs_check_frozen after unlocking the spinlock (Amerigo Wang) [548370 541956]
  - [infiniband] init neigh->dgid.raw on bonding events (Doug Ledford) [543448 538067]
  - [scsi] gdth: prevent negative offsets in ioctl (Amerigo Wang) [539420 539421] {CVE-2009-3080}
  - [fs] gfs2: fix glock ref count issues (Steven Whitehouse) [544978 539240]
  - [net] call cond_resched in rt_run_flush (Amerigo Wang) [547530 517588]
  - [scsi] megaraid: fix sas permissions in sysfs (Casey Dahlin) [537312 537313] {CVE-2009-3889 CVE-2009-3939}
  - [ia64] kdump: restore registers in the stack on init (Takao Indoh ) [542582 515753]
  - [x86] kvm: don't ask HV for tsc khz if not using kvmclock (Glauber Costa ) [537027 531268]
  - [net] sched: fix panic in bnx2_poll_work (John Feeney ) [539686 526481]
  - [x86_64] fix 32-bit process register leak (Amerigo Wang ) [526797 526798]
  - [cpufreq] add option to avoid smi while calibrating (Matthew Garrett ) [537343 513649]
  - [kvm] use upstream kvm_get_tsc_khz (Glauber Costa ) [540896 531025]
  - [net] fix unbalance rtnl locking in rt_secret_reschedule (Neil Horman ) [549907 510067]
  - [net] r8169: imporved rx length check errors (Neil Horman ) [552913 552438]
  - [scsi] lpfc: fix FC ports offlined during target controller faults (Rob Evers ) [549906 516541]
  - [net] emergency route cache flushing fixes (Thomas Graf ) [545662 545663] {CVE-2009-4272}
  - [fs] fasync: split 'fasync_helper()' into separate add/remove functions (Danny Feng ) [548656 548657] {CVE-2009-4141}
  - [scsi] qla2xxx: NPIV vport management pseudofiles are world writable (Tom Coughlan ) [537317 537318] {CVE-2009-3556}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.11.1.el5]
changelog:
  - [firewire] ohci: handle receive packets with zero data (Jay Fenlason) [547241 547242] {CVE-2009-4138}
  - [x86] sanity check for AMD northbridges (Andrew Jones) [549905 547518]
  - [x86_64] disable vsyscall in kvm guests (Glauber Costa) [550968 542612]
  - [fs] ext3: replace lock_super with explicit resize lock (Eric Sandeen) [549908 525100]
  - [fs] respect flag in do_coredump (Danny Feng) [544188 544189] {CVE-2006-6304}
  - [gfs2] make O_APPEND behave as expected (Steven Whitehouse) [547521 544342]
  - [fs] hfs: fix a potential buffer overflow (Amerigo Wang) [540740 540741] {CVE-2009-4020}
  - [fuse] prevent fuse_put_request on invalid pointer (Danny Feng) [538736 538737] {CVE-2009-4021}
  - [mm] call vfs_check_frozen after unlocking the spinlock (Amerigo Wang) [548370 541956]
  - [infiniband] init neigh->dgid.raw on bonding events (Doug Ledford) [543448 538067]
  - [scsi] gdth: prevent negative offsets in ioctl (Amerigo Wang) [539420 539421] {CVE-2009-3080}
  - [fs] gfs2: fix glock ref count issues (Steven Whitehouse) [544978 539240]
  - [net] call cond_resched in rt_run_flush (Amerigo Wang) [547530 517588]
  - [scsi] megaraid: fix sas permissions in sysfs (Casey Dahlin) [537312 537313] {CVE-2009-3889 CVE-2009-3939}
  - [ia64] kdump: restore registers in the stack on init (Takao Indoh ) [542582 515753]
  - [x86] kvm: don't ask HV for tsc khz if not using kvmclock (Glauber Costa ) [537027 531268]
  - [net] sched: fix panic in bnx2_poll_work (John Feeney ) [539686 526481]
  - [x86_64] fix 32-bit process register leak (Amerigo Wang ) [526797 526798]
  - [cpufreq] add option to avoid smi while calibrating (Matthew Garrett ) [537343 513649]
  - [kvm] use upstream kvm_get_tsc_khz (Glauber Costa ) [540896 531025]
  - [net] fix unbalance rtnl locking in rt_secret_reschedule (Neil Horman ) [549907 510067]
  - [net] r8169: imporved rx length check errors (Neil Horman ) [550914 550915] {CVE-2009-4537}
  - [scsi] lpfc: fix FC ports offlined during target controller faults (Rob Evers ) [549906 516541]
  - [net] emergency route cache flushing fixes (Thomas Graf ) [545662 545663] {CVE-2009-4272}
  - [fs] fasync: split 'fasync_helper()' into separate add/remove functions (Danny Feng ) [548656 548657] {CVE-2009-4141}
  - [scsi] qla2xxx: NPIV vport management pseudofiles are world writable (Tom Coughlan ) [537317 537318] {CVE-2009-3556}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.12.1.el5]
changelog:
  - [net] e1000: fix rx length check errors (Neil Horman) [552137 552138] {CVE-2009-4536}
  - Revert: [net] e1000, r9169: fix rx length check errors (Cong Wang ) [550914 550915]
  - [fs] jbd: fix race in slab creation/deletion (Josef Bacik) [553132 496847]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.13.1.el5]
changelog:
  - [net] e1000e: fix broken wol (Andy Gospodarek) [559335 557974]
  - [net] gro: fix illegal merging of trailer trash (Herbert Xu) [561417 537876]
  - [xen] hook sched rebalance logic to opt_hardvirt (Christopher Lalancette ) [562777 529271]
  - [xen] crank the correct stat in the scheduler (Christopher Lalancette ) [562777 529271]
  - [xen] whitespace fixups in xen scheduler (Christopher Lalancette ) [562777 529271]
  - [scsi] cciss: ignore stale commands after reboot (Tomas Henzl ) [562772 525440]
  - [scsi] cciss: version change (Tomas Henzl ) [562772 525440]
  - [scsi] cciss: switch to using hlist (Tomas Henzl ) [562772 525440]
  - [net] bonding: allow bond in mode balance-alb to work (Jiri Pirko ) [560588 487763]
  - [net] e1000e: fix WoL on 82577/82578 (Jiri Pirko ) [543449 517593]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.14.1.el5]
changelog:
  - [fs] ext4: Avoid null pointer dereference when decoding EROFS w/o a journal (Jiri Pirko) [547256 547257] {CVE-2009-4308}
  - [net] sctp: backport cleanups for ootb handling (Neil Horman) [555666 555667] {CVE-2010-0008}
  - [mm] fix sys_move_pages infoleak (Eugene Teo) [562589 562590] {CVE-2010-0415}
  - [x86_64] wire up compat sched_rr_get_interval (Danny Feng) [557684 557092]
  - [net] netfilter: enforce CAP_NET_ADMIN in ebtables (Danny Feng) [555242 555243] {CVE-2010-0007}
  - [misc] fix kernel info leak with print-fatal-signals=1 (Danny Feng) [554583 554584] {CVE-2010-0003}
  - [net] ipv6: fix OOPS in ip6_dst_lookup_tail (Thomas Graf) [559238 552354]
  - [kvm] pvclock on i386 suffers from double registering (Glauber Costa) [561454 557095]
  - [pci] VF can't be enabled in dom0 (Don Dutile) [560665 547980]
  - [kvm] kvmclock won't restore properly after resume (Glauber Costa) [560640 539521]
  - [mm] prevent performance hit for 32-bit apps on x86_64 (Larry Woodman) [562746 544448]
  - [fs] fix possible inode corruption on unlock (Eric Sandeen) [564281 545612]
  - [gfs2] careful unlinking inodes (Steven Whitehouse ) [564288 519049]
  - [gfs2] gfs2_delete_inode failing on RO filesystem (Abhijith Das ) [564290 501359]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.15.1.el5]
changelog:
  - [net] sctp: backport cleanups for ootb handling V2 (Neil Horman) [555666 555667] {CVE-2010-0008}
  - Reverting: [net] sctp: backport cleanups for ootb handling (Neil Horman) [555666 555667] {CVE-2010-0008}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.16.1.el5]
changelog:
  - [net] mac80211: fix spurious delBA handling (Danny Feng) [541151 541152] {CVE-2009-4026 CVE-2009-4027}
  - [fs] gfs2: locking fix for potential dos (Steven Whitehouse) [572389 572390] {CVE-2010-0727}
  - [x86_64] xen: fix missing 32-bit syscalls on 64-bit Xen (Christopher Lalancette) [569597 559410]
  - [net] e1000e: disable NFS filtering capabilites in ICH hw (Andy Gospodarek) [569797 558809]
  - [x86_64] fix missing 32 bit syscalls on 64 bit (Wade Mealing) [569597 559410]
  - [fs] ext4: avoid divide by 0 when mounting corrupted fs (Eric Sandeen) [547252 547253] {CVE-2009-4307}
  - [fs] proc: make errno values consistent when race occurs (Danny Feng) [571362 556545]
  - [cpufreq] P-state limit: limit can never be increased (Stanislaw Gruszka ) [569727 489566]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.17.1.el5]
changelog:
  - [net] bnx2x: use single tx queue (Jiri Pirko) [576951 567979]
  - [net] ipv4: fix an unexpectedly freed skb in tcp (Amerigo Wang) [577718 546402]
  - [misc] sysctl: require CAP_SYS_RAWIO to set mmap_min_addr (Amerigo Wang) [577206 534018]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.18.1.el5]
changelog:
  - [mm] don't let reserved memory overlap bootmem_map (Amerigo Wang) [580837 550974]
  - [iscsi] fix slow failover times (Mike Christie) [583899 570681]
  - [misc] don't call printk while crashing (Mauro Carvalho Chehab ) [588215 497195]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.19.1.el5]
changelog:
  - [net] igb: only disable/enable interrupt bits for igb physical function (Stefan Assmann) [568750 513710]
  - [net] bonding: fix broken multicast with round-robin mode (Andy Gospodarek) [594056 570645]
  - [net] sched: fix SFQ qdisc crash w/limit of 2 packets (Jiri Pirko) [594053 579774]
  - [nfs] revert retcode check in nfs_revalidate_mapping() (Jeff Layton) [594060 557423]


author: Don Zickus <dzickus@redhat.com> [2.6.18-157.el5]
changelog:
  - [mm] readv: sometimes returns less than it should (Amerigo Wang ) [500693]
  - [net] be2net: fix races in napi and interrupt handling (Andy Gospodarek ) [508839]
  - [net] be2net: fix deadlock with bonding (Andy Gospodarek ) [508871]
  - [xen] quiet printk on FV guest shutdown (Don Dutile ) [501474]
  - [fs] fuse: enable building the subsystem (Josef Bacik ) [457975]
  - [gfs2] fix panic in glock memory shrinker (Benjamin Marzinski ) [508806]
  - [net] rt2x00: use mac80211-provided workqueue (John W. Linville ) [506845]
  - [pci] quirk: disable MSI on VIA VT3364 chipsets (Dean Nelson ) [501374]
  - [net] undo vlan promiscuity count when unregistered (Neil Horman ) [481283]
  - [net] be2net: crash on PPC with LRO and jumbo frames (Andy Gospodarek ) [508404]
  - [net] RTNL: assertion failed due to bonding notify (Stanislaw Gruszka ) [508297]
  - [scsi] ibmvfc: process async events before cmd responses (AMEET M. PARANJAPE ) [508127]
  - [scsi] ibmvfc: fix endless PRLI loop in discovery (AMEET M. PARANJAPE ) [508127]
  - [scsi] ibmvfc: improve LOGO/PRLO ELS handling (AMEET M. PARANJAPE ) [508127]
  - [net] iucv: provide second per-cpu cmd parameter block (Hans-Joachim Picht ) [503240]
  - [net] sky2: /proc/net/dev statistics are broken (Flavio Leitner ) [507932]
  - [scsi] qla2xxx: prevent I/O stoppage (Marcus Barrow ) [507620]
  - [scsi] qla2xxx: updates 24xx firmware to 4.04.09 (Marcus Barrow ) [507398]
  - [scsi] qla2xxx: updates 25xx firmware to 4.04.09 (Marcus Barrow ) [507398]
  - [scsi] qla4xxx: extended sense data errors, cleanups (Marcus Barrow ) [506981]
  - [char] tty: prevent an O_NDELAY writer from blocking (Mauro Carvalho Chehab ) [506806]
  - [xen] allow msi reconfigure for pt_bind_irq (ddugger@redhat.com ) [507970]


author: Don Zickus <dzickus@redhat.com> [2.6.18-158.el5]
changelog:
  - [s390] add missing kernel option CONFIG_SHARED_KERNEL (Hans-Joachim Picht ) [506947]
  - [gfs2] fix incorrent statfs_slow consistency check (Benjamin Marzinski ) [505171]
  - [net] be2net: fix msix performance regression (Andy Gospodarek ) [510008]
  - [gfs2] umount.gfs2 hangs eating CPU (Abhijith Das ) [508876]
  - [block] protect the per-gendisk partition array with rcu (Jeff Moyer ) [495866]
  - [net] igb: fix panic when assigning device to guest (Andy Gospodarek ) [507173]
  - [ia64] xen: dom0 get/set_address_size (Chris Lalancette ) [510069]
  - [x86] fix suspend/resume issue on SB800 chipset (Bhavna Sarathy ) [498135]
  - [scsi] cciss: fix spinlock (Tomas Henzl ) [509818]
  - [scsi] qla2xxx: NPIV broken for PPC, endian fix (Marcus Barrow ) [510268]
  - [scsi] qla2xxx: prevent hangs in extended error handling (Marcus Barrow ) [470510]
  - [mm] prevent softlockups in copy_hugetlb_page_range (Larry Woodman ) [508919]
  - [scsi] cxgb3i: fix vlan support (mchristi@redhat.com ) [508409]
  - [net] bnx2i: RHEL-5.4 code cleanups (mchristi@redhat.com ) [504181]
  - [x86_64] import asm/svm.h and asm/vmx.h (Eduardo Habkost ) [507483]
  - [x86_64] import asm/virtext.h (Eduardo Habkost ) [507483]
  - [x86_64] add MSR_VM_* defines (Eduardo Habkost ) [507483]
  - [x86_64] disable VMX and SVM on machine_crash_shutdown (Eduardo Habkost ) [507483]
  - [x86_64] add EFER_SVME define (Eduardo Habkost ) [507483]
  - [x86_64] define X86_CR4_VMXE (Eduardo Habkost ) [507483]
  - [net] qlge: rhel-5.4 cleanups (Marcus Barrow ) [509647]
  - [scsi] lpfc: fix ctx_idx increase and update version (Rob Evers ) [509010]
  - [scsi] lpfc: move pointer ref. inside alloc check in (Rob Evers ) [509010]
  - [scsi] lpfc: update to version 8.2.0.48 (Rob Evers ) [509010]
  - [mm] fix re-read performance regression (Josef Bacik ) [506511]
  - [net] ipsec: add missing braces to fix policy querying (Herbert Xu ) [462731]
  - [net] tg3: 5785F and 50160M support (Andy Gospodarek ) [506205]
  - [pci] intel-iommu: fix iommu address space allocation (Chris Wright ) [509207]
  - [xen] virtio: do not statically allocate root device (Mark McLoughlin ) [501468]
  - [xen] virtio: add PCI device release function (Mark McLoughlin ) [501468]
  - [misc] driver core: add root_device_register (Mark McLoughlin ) [501468]
  - [block] blktrace: fix recursive block remap tracepoint (Jason Baron ) [502573]
  - [scsi] qla2xxx: rhel-5.4 fixes and cleanups (Marcus Barrow ) [507246]
  - [xen] HV: remove high latency spin_lock (Chris Lalancette ) [459410]
  - [xen] ia64: add get/set_address_size support (Chris Lalancette ) [510069]


author: Don Zickus <dzickus@redhat.com> [2.6.18-159.el5]
changelog:
  - [scsi] cciss: fix sysfs broken symlink regression (Rob Evers ) [510178]
  - [kabi] add consume_skb (Jon Masters ) [479200]
  - [net] ipv6: fix incorrect disable_ipv6 behavior (jolsa@redhat.com ) [512258]
  - [net] ipv6: fix BUG when disabled module is unloaded (jolsa@redhat.com ) [512258]
  - [net] ipv6: add 'disable' module parameter support (jolsa@redhat.com ) [512258]
  - Revert: [mm] fix swap race in fork-gup patch group (Larry Woodman ) [508919]
  - [scsi] mptfusion: fix OOPS in failover path (Rob Evers ) [504835]
  - [scsi] stex: minimize DMA coherent allocation (David Milburn ) [486466]
  - [misc] personality handling: fix PER_CLEAR_ON_SETID (Vitaly Mayatskikh ) [508842]
  - [misc] build with -fno-delete-null-pointer-checks (Eugene Teo ) [511181]
  - [scsi] qla2xxx: provide reset capability for EEH (Marcus Barrow ) [511141]
  - [scsi] bnx2i: fix host setup and libiscsi abort locking (mchristi@redhat.com ) [511096]
  - [xen] ia64: fix rmmod of PCI devices (Chris Lalancette ) [507520]
  - [pci] kvm: PCI FLR support for device assignment (Don Dutile ) [510805]
  - [gfs2] don't put unlikely reclaim glocks on reclaim list (Benjamin Marzinski ) [504335]


author: Don Zickus <dzickus@redhat.com> [2.6.18-160.el5]
changelog:
  - [scsi] mptsas: fix max_id initialization (mchristi@redhat.com ) [455678]
  - [ata] ahci: add IDs for Ibex Peak ahci controllers (David Milburn ) [513067]
  - [scsi] lpfc: update to 8.2.0.48.2p, fix multiple panics (Rob Evers ) [512266]
  - [gfs2] remove dcache entries for remote deleted inodes (Benjamin Marzinski ) [505548]
  - [alsa] add native support for IbexPeak audio (Jaroslav Kysela ) [509526]
  - [alsa] IbexPeak related patches for codec auto-config (Jaroslav Kysela ) [509526]
  - [scsi] cciss: call bus_unregister in cciss_remove_one (Rob Evers ) [513070]
  - [scsi] cciss: add driver sysfs entries (Rob Evers ) [513070]
  - [net] e1000e/igb: make sure wol can be configured (Andy Gospodarek ) [513032]
  - [fs] xfs: only compile for x86_64 (Eric Sandeen ) [512827]
  - [ahci] add SATA GEN3 related messages (David Milburn ) [512086]
  - [net] tun/tap: open /dev/net/tun and then poll() it fix (Danny Feng ) [512286] {CVE-2009-1897}
  - [net] mlx4_en: problem with LRO that segfaults KVM host (Doug Ledford ) [510789]
  - [openib] mthca: fix over sized kmalloc usage (Doug Ledford ) [508902]
  - [s390] zcrypt: request gets timed out under high load (Hans-Joachim Picht ) [511289]


author: Don Zickus <dzickus@redhat.com> [2.6.18-161.el5]
changelog:
  - [dlm] free socket in error exit path (David Teigland ) [508829]
  - [net] tg3: fix concurrent migration of VM clients (John Feeney ) [511918]
  - [scsi] mptfusion: revert to pci_map (Tomas Henzl ) [514049]
  - [scsi] bnx2i: fix conn disconnection bugs (mchristi@redhat.com ) [513802]
  - [scsi] qla2xxx: unable to destroy npiv HBA ports (Marcus Barrow ) [514352]
  - [scsi] ALUA: send STPG if explicit and implicit (mchristi@redhat.com ) [482737]
  - [scsi] megaraid: fix the tape drive issue (Tomas Henzl ) [510665]
  - [scsi] cxgb3i: fix skb allocation (mchristi@redhat.com ) [514073]
  - [fs] __bio_clone: don't calculate hw/phys segment counts (Milan Broz ) [512387]
  - [fs] ecryptfs: check tag 11 packet data buffer size (Eric Sandeen ) [512863] {CVE-2009-2406}
  - [fs] ecryptfs: check tag 3 packet encrypted key size (Eric Sandeen ) [512887] {CVE-2009-2407}
  - [xen] amd iommu: crash with pass-through on large memory (Bhavna Sarathy ) [514910]


author: Don Zickus <dzickus@redhat.com> [2.6.18-164.el5]
changelog:
  - [misc] information leak in sigaltstack (Vitaly Mayatskikh ) [515396]
  - [misc] execve: must clear current->clear_child_tid (Oleg Nesterov ) [515429]
  - [net] igb: set lan id prior to configuring phy (Stefan Assmann ) [508870]
  - [net] udp: socket NULL ptr dereference (Vitaly Mayatskikh ) [518043] {CVE-2009-2698}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.20.1.el5]
changelog:
  - [net] bnx2: fix lost MSI-X problem on 5709 NICs (John Feeney) [601523 511368]
  - [net] fix race in data receive/select (Amerigo Wang ) [596383 509866]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.22.1.el5]
changelog:
  - [fs] gfs2: fix rename causing kernel oops (Robert S Peterson) [614914 602025] {CVE-2010-2798}
  - [net] ixgbe: Enable L2 header split in 82599 (Andy Gospodarek) [618275 516699]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.23.1.el5]
changelog:
  - [scsi] megaraid_sas: fix physical disk handling (Tomas Henzl) [619363 564249]
  - [pci] msi: add option for lockless interrupt mode (Jiri Pirko) [621939 599295]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.24.1.el5]
changelog:
  - [mm] pass correct mm when growing stack (Jiri Pirko) [625636 607858] {CVE-2010-2240}
  - [mm] fix up some user-visible effects of stack guard page (Jiri Pirko) [625636 607858] {CVE-2010-2240}
  - [mm] fix page table unmap for stack guard page properly (Jiri Pirko) [625636 607858] {CVE-2010-2240}
  - [mm] fix missing unmap for stack guard page failure case (Jiri Pirko) [625636 607858] {CVE-2010-2240}
  - [mm] keep a guard page below a grow-down stack segment (Jiri Pirko) [625636 607858] {CVE-2010-2240}


author: Don Howard <dhoward@redhat.com> [2.6.18-164.25.2.el5]
changelog:
  - [misc] make compat_alloc_user_space() incorporate the access_ok() (Don Howard) [634507 634464] {CVE-2010-3081}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.26.1.el5]
changelog:
  - [s390] dasd: force online does not work (Hendrik Brueckner) [631809 619466]
  - [s390] dasd: allocate fallback cqr for reserve/release (Hendrik Brueckner) [631807 619465]


author: Don Howard <dhoward@redhat.com> [2.6.18-164.25.2.el5]
changelog:
  - Branch build based on 2.6.18-164.25.1.el5
  - [misc] make compat_alloc_user_space() incorporate the access_ok() (Don Howard) [634507 634464] {CVE-2010-3081}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.27.1.el5]
changelog:
  - [xen] hvm: fix UP suspend/resume/migration w/PV drivers (Miroslav Rezanina) [630987 629773]
  - [virt] xen: fix xennet driver to not corrupt data (Neil Horman) [637219 630129]
  - [net] qla3xxx: fix oops on too-long netdev priv structure (Neil Horman) [637204 620508]
  - [net] bnx2: avoid restarting cnic in some contexts (Andy Gospodarek) [631854 554706]
  - Syncing following patch from branched build:
  - [misc] make compat_alloc_user_space() incorporate the access_ok() (Don Howard) [634507 634464] {CVE-2010-3081}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.29.1.el5]
changelog:
  - [misc] fix race in pid generation causing immediate reuse (Dave Anderson) [638865 634850]
  - [fs] dlm: fix try 1cb failure, part 2 (Abhijith Das) [639071 504188]
  - [fs] dlm: no node callback when try 1cb lock req fails (David Teigland) [639071 504188]
  - [fs] nfs: fix bug in nfsd4 read_buf (Jiri Olsa) [645208 612035] {CVE-2010-2521}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.30.1.el5]
changelog:
  - [net] bnx2: Increase max rx ring size from 1K to 2K (Andy Gospodarek) [649254 640026]
  - [net] bnx2: fixup broken NAPI accounting (Andy Gospodarek) [649254 640026]
  - [pci] include DL580 G7 in bfsort whitelist (Tony Camuso) [646764 644879]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.31.1.el5]
changelog:
  - [misc] kernel: remove yield from stop_machine paths (Oleg Nesterov) [651816 634454]
  - [kernel] add stop_machine barrier to fix lock contention (Prarit Bhargava) [651816 634454]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.33.1.el5]
changelog:
  - [net] gro: reset dev pointer on reuse (Andy Gospodarek) [674585 600350]
  - [block] fix accounting bug on cross partition merges (Jerome Marchand) [672252 646816]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.34.1.el5]
changelog:
  - [virt] fix 64-bit compile issue in VMWare TSC update (Prarit Bhargava) [679412 538022]
  - [virt] update VMWare TSC code (Jiri Pirko) [679412 538022]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-164.35.1.el5]
changelog:
  - [fs] gfs2: creating large files suddenly slow to a crawl (Robert S Peterson) [690237 683155]
  - [virt] hypervisor: Overflow fix for clocks > 4GHz (Zachary Amsden) [690133 673242]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-164.37.1.el5]
changelog:
  - [block] cciss: reading a write only register causes a hang (Phillip Lougher) [696502 696153]
  - [block] cciss: fix lost command problem (Phillip Lougher) [696502 696153]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-164.38.1.el5]
changelog:
  - [net] e1000: fix race condition e1000_clean_tx_irq: Detected Tx Unit Hang (Dean Nelson) [711841 515524]
  - [fs] lockd: make lockd_down wait for lockd to come down (Jeff Layton) [714729 653286]
  - [x86_64] fix time drift due to faulty lost tick tracking (Ulrich Obergfell) [711792 579711]


author: Don Zickus <dzickus@redhat.com> [2.6.18-155.el5]
changelog:
  - [mm] fix swap race condition in fork-gup-race patch (Andrea Arcangeli ) [506684]
  - [net] e1000e: stop unnecessary polling when using msi-x (Andy Gospodarek ) [506841]


author: Don Zickus <dzickus@redhat.com> [2.6.18-156.el5]
changelog:
  - [misc] kdump: make mcp55 chips work (Neil Horman ) [462519]
  - [ide] enable VX800 to use UDMA mode (John Feeney ) [504121]
  - [misc] wacom: reset state when tool is not in proximity (Aristeu Rozanski ) [499870]
  - [scsi] lpfc: update to version 8.2.0.46 (Rob Evers ) [506792]
  - [mm] prevent panic in copy_hugetlb_page_range (Larry Woodman ) [507860]
  - [gfs2] keep statfs info in sync on grows (Benjamin Marzinski ) [494885]
  - [gfs2] always queue work after after setting GLF_LOCK (Benjamin Marzinski ) [506140]
  - [scsi] cxgb3i: use kref to track ddp, support page sizes (mchristi@redhat.com ) [506151]
  - [security] drop mmap_min_addr to 4096 (Eric Paris ) [507017]
  - [misc] hrtimer: fix a soft lockup (Amerigo Wang ) [418071] {CVE-2007-5966}
  - [net] backport net_rx_action tracepoint (Neil Horman ) [506138]
  - [gfs2] fix truncate buffered/direct I/O issue (Steven Whitehouse ) [504676]
  - [xen] x86: fix IRQ problem on legacy hardware (ddugger@redhat.com ) [505491]
  - [xen] disable 2MB support on PAE kernels (Bhavna Sarathy ) [503737]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.4.1.el5]
changelog:
  - [acpi] warn on hot-add of memory exceeding 4G boundary (Prarit Bhargava) [587957 571544]
  - [net] tipc: fix various oopses in uninitialized code (Neil Horman) [578058 558693] {CVE-2010-1187}
  - [block] cfq-iosched: fix IOPRIO_CLASS_IDLE accounting (Jeff Moyer) [588219 574285]
  - [block] cfq-iosched: async queue allocation per priority (Jeff Moyer) [588219 574285]
  - [block] cfq-iosched: fix async queue behaviour (Jeff Moyer) [588219 574285]
  - [block] cfq-iosched: propagate down request sync flag (Jeff Moyer) [588219 574285]
  - [block] introduce the rq_is_sync macro (Jeff Moyer) [588219 574285]
  - [fs] vfs: fix LOOKUP_FOLLOW on automount symlinks (Jeff Layton) [567815 567816] {CVE-2010-1088}
  - [nfs] fix an oops when truncating a file (Jeff Layton) [567194 567195] {CVE-2010-1087}
  - [fs] fix kernel oops while copying from ext3 to gfs2 (Abhijith Das) [586008 555754] {CVE-2010-1436}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.5.1.el5]
changelog:
  - [net] bonding: fix broken multicast with round-robin mode (Andy Gospodarek) [594057 570645]
  - [net] tg3: fix INTx fallback when MSI fails (Steve Best) [592844 587666]
  - [net] sched: fix SFQ qdisc crash w/limit of 2 packets (Jiri Pirko) [594054 579774]
  - [nfs] revert retcode check in nfs_revalidate_mapping() (Jeff Layton) [594061 557423]
  - [misc] futex: handle futex value corruption gracefully (Jerome Marchand) [563093 480396] {CVE-2010-0622}
  - [misc] futex: handle user space corruption gracefully (Jerome Marchand) [563093 480396] {CVE-2010-0622}
  - [misc] futex: fix fault handling in futex_lock_pi (Jerome Marchand) [563093 480396] {CVE-2010-0622}
  - [net] e1000: fix WoL init when WoL disabled in EEPROM (Dean Nelson) [591493 568561]
  - [virtio] fix GFP flags passed by virtio balloon driver (Amit Shah) [591611 584683]
  - [net] sctp: fix skb_over_panic w/too many unknown params (Neil Horman) [584657 584658] {CVE-2010-1173}
  - [acpi] fix WARN on unregister in power meter driver (Matthew Garrett) [592846 576246]
  - [mm] keep get_unmapped_area_prot functional (Danny Feng) [556709 556710] {CVE-2010-0291}
  - [mm] switch do_brk to get_unmapped_area (Danny Feng) [556709 556710] {CVE-2010-0291}
  - [mm] take arch_mmap_check into get_unmapped_area (Danny Feng) [556709 556710] {CVE-2010-0291}
  - [mm] get rid of open-coding in ia64_brk (Danny Feng) [556709 556710] {CVE-2010-0291}
  - [mm] unify sys_mmap* functions (Danny Feng) [556709 556710] {CVE-2010-0291}
  - [mm] kill ancient cruft in s390 compat mmap (Danny Feng) [556709 556710] {CVE-2010-0291}
  - [mm] fix pgoff in have to relocate case of mremap (Danny Feng) [556709 556710] {CVE-2010-0291}
  - [mm] fix the arch checks in MREMAP_FIXED case (Danny Feng) [556709 556710] {CVE-2010-0291}
  - [mm] fix checks for expand-in-place mremap (Danny Feng) [556709 556710] {CVE-2010-0291}
  - [mm] add new vma_expandable helper function (Danny Feng) [556709 556710] {CVE-2010-0291}
  - [mm] move MREMAP_FIXED into its own header (Danny Feng) [556709 556710] {CVE-2010-0291}
  - [mm] move locating vma code and checks on it (Danny Feng) [556709 556710] {CVE-2010-0291}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.6.1.el5]
changelog:
  - [fs] gfs2: fix permissions checking for setflags ioctl (Steven Whitehouse) [595580 595399] {CVE-2010-1641}
  - [mm] clear page errors when issuing a fresh read of page (Rik van Riel) [599739 590763]
  - [misc] keys: do not find already freed keyrings (Vitaly Mayatskikh) [585099 585100] {CVE-2010-1437}
  - [net] sctp: file must be valid before setting timeout (Jiri Pirko) [598355 578261]
  - [net] tg3: fix panic in tg3_interrupt (John Feeney) [600498 569106]
  - [net] e1000/e1000e: implement simple interrupt moderation (Andy Gospodarek) [599332 586416]
  - [net] cnic: Fix crash during bnx2x MTU change (Stanislaw Gruszka) [596385 582367]
  - [net] bxn2x: add dynamic lro disable support (Stanislaw Gruszka) [596385 582367]
  - [net] implement dev_disable_lro api for RHEL5 (Stanislaw Gruszka) [596385 582367]
  - [x86_64] fix time drift due to faulty lost tick tracking (Ulrich Obergfell) [601090 579711]
  - [net] neigh: fix state transitions via Netlink request (Jiri Pirko) [600215 485903]
  - [mm] fix hugepage corruption using vm.drop_caches (Larry Woodman) [599737 579469]
  - [nfs] don't unhash dentry in nfs_lookup_revalidate (Jeff Layton) [596384 582321]
  - [fs] remove unneccessary f_ep_lock from fasync_helper (Lachlan McIlroy) [599730 567479]
  - [xen] set hypervisor present CPUID bit (Paolo Bonzini) [599734 573771]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.7.1.el5]
changelog:
  - [virt] don't compute pvclock adjustments if we trust tsc (Glauber Costa) [601080 570824]
  - [virt] add a global synchronization point for pvclock (Glauber Costa) [601080 570824]
  - [virt] enable pvclock flags in vcpu_time_info structure (Glauber Costa) [601080 570824]
  - [misc] add atomic64_cmpxcgh to x86_64 include files (Glauber Costa) [601080 570824]
  - [x86] grab atomic64 types from upstream (Glauber Costa) [601080 570824]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.9.1.el5]
changelog:
  - [xen] ia64: unset be from the task psr (Andrew Jones) [587475 587477] {CVE-2010-2070}
  - [fs] ext4: MOVE_EXT can't overwrite append-only files (Eric Sandeen) [601007 601008] {CVE-2010-2066}
  - [pci] acpiphp: fix missing acpiphp_glue_exit (Prarit Bhargava) [607486 515556]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.10.1.el5]
changelog:
  - [fs] xfs: don't let swapext operate on write-only files (Jiri Pirko) [605160 605161] {CVE-2010-2226}
  - [fs] nfs: fix bug in nfsd4 read_buf (Jiri Olsa) [612034 612035] {CVE-2010-2521}
  - [fs] cifs: reject DNS upcall add_key req from userspace (Jeff Layton) [612170 612171] {CVE-2010-2524}
  - [security] keys: new key flag for add_key from userspace (Jeff Layton) [612170 612171] {CVE-2010-2524}
  - [message] mptsas: fix disk add failing due to timeout (Rob Evers) [612539 542892]
  - [block] cfq-iosched: fix bad locking in changed_ioprio (Jeff Moyer) [607483 582435]
  - [block] cfq-iosched: kill cfq_exit_lock (Jeff Moyer) [607483 582435]
  - [fs] cifs: fix kernel BUG with remote OS/2 server (Jeff Layton) [608587 608588] {CVE-2010-2248}
  - [net] bluetooth: fix possible bad memory access via sysfs (Mauro Carvalho Chehab) [576020 576021] {CVE-2010-1084}
  - [net] tcp: fix rcv mss estimate for lro (Stanislaw Gruszka) [613900 593801]
  - [net] cnic: fix panic when nl msg rcvd when device down (Stanislaw Gruszka) [615260 595862]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.11.2.el5]
changelog:
  - [mm] pass correct mm when growing stack (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix up some user-visible effects of stack guard page (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix page table unmap for stack guard page properly (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix missing unmap for stack guard page failure case (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] keep a guard page below a grow-down stack segment (Jiri Pirko) [607857 607858] {CVE-2010-2240}


author: Don Howard <dhoward@redhat.com> [2.6.18-194.11.4.el5]
changelog:
  - [misc] make compat_alloc_user_space() incorporate the access_ok() (Don Howard) [634463 634464] {CVE-2010-3081}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.12.1.el5]
changelog:
  - [pci] msi: add option for lockless interrupt mode (Prarit Bhargava) [621940 599295]
  - [fs] ecryptfs: fix ecryptfs_uid_hash buffer overflow (Jerome Marchand) [611386 611387] {CVE-2010-2492}
  - [scsi] ips driver sleeps while holding spin_lock (Steve Best) [620661 616961]
  - [fs] gfs2: fix rename causing kernel oops (Robert S Peterson) [614916 602025] {CVE-2010-2798}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.11.2.el5]
changelog:
  - Branch build based on 2.6.18-194.11.1.el5
  - [mm] pass correct mm when growing stack (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix up some user-visible effects of stack guard page (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix page table unmap for stack guard page properly (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix missing unmap for stack guard page failure case (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] keep a guard page below a grow-down stack segment (Jiri Pirko) [607857 607858] {CVE-2010-2240}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.13.1.el5]
changelog:
  - [xen] fix guest crash on non-EPT machine may crash host (Paolo Bonzini) [621429 621430] {CVE-2010-2938}
  - [fs] ext4: consolidate in_range definitions (Eric Sandeen) [624331 624332] {CVE-2010-3015}
  - [mm] add option to skip ZERO_PAGE mmap of /dev/zero (Larry Woodman) [623141 619541]
  - [net] bonding: check if clients MAC addr has changed (Flavio Leitner) [623143 610234]
  - [net] sctp: fix length checks (Neil Horman) [624369 605305]
  - [xen] bring back VMXE/SVME flags (Andrew Jones) [624365 570091]
  - Syncing following patches from branched builds:
  - [mm] accept an abutting stack segment (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] pass correct mm when growing stack (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix up some user-visible effects of stack guard page (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix page table unmap for stack guard page properly (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] fix missing unmap for stack guard page failure case (Jiri Pirko) [607857 607858] {CVE-2010-2240}
  - [mm] keep a guard page below a grow-down stack segment (Jiri Pirko) [607857 607858] {CVE-2010-2240}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.14.1.el5]
changelog:
  - [s390] dasd: force online does not work (Hendrik Brueckner) [627194 619466]
  - [s390] dasd: allocate fallback cqr for reserve/release (Hendrik Brueckner) [627195 619465]
  - [fs] xfs: fix untrusted inode number lookup (Dave Chinner) [629219 624862]
  - [net] sched: fix some kernel memory leaks (Jiri Pirko) [624904 624638] {CVE-2010-2942}
  - [usb] fix usbfs information leak (Eugene Teo) [566628 566629] {CVE-2010-1083}
  - [fs] xfs: rename XFS_IGET_BULKSTAT to XFS_IGET_UNTRUSTED (Dave Chinner) [624366 607032] {CVE-2010-2943}
  - [fs] xfs: validate untrusted inode numbers during lookup (Dave Chinner) [624366 607032] {CVE-2010-2943}
  - [fs] xfs: always use iget in bulkstat (Dave Chinner) [624366 607032] {CVE-2010-2943}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.15.1.el5]
changelog:
  - [net] cxgb3: don't flush workqueue if called from wq (Doug Ledford) [630978 630124]
  - [net] cxgb3: get fatal parity error status on interrupt (Doug Ledford) [630978 630124]
  - [net] cxgb3: clear fatal parity error register on init (Doug Ledford) [630978 630124]
  - [net] cxgb3: add define for fatal parity error bit (Doug Ledford) [630978 630124]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.17.1.el5]
changelog:
  - Syncing following patch from branched build:
  - [misc] make compat_alloc_user_space() incorporate the access_ok() (Don Howard) [634463 634464] {CVE-2010-3081}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.19.1.el5]
changelog:
  - [virt] xen: fix xennet driver to not corrupt data (Neil Horman) [637220 630129]
  - [pnp] ignore both UNSET and DISABLED ioresources (Prarit Bhargava) [629861 560540]
  - [pnp] reserve system board iomem and ioport resources (Prarit Bhargava) [629861 560540]
  - [net] bonding: fix ALB mode to balance traffic on VLANs (Andy Gospodarek) [630540 578531]
  - [net] qla3xxx: fix oops on too-long netdev priv structure (Neil Horman) [637206 620508]
  - [acpi] thinkpad-acpi: lock down video output state access (Don Howard) [629241 607037]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.20.1.el5]
changelog:
  - [scsi] megaraid_sas: fix physical disk handling (Tomas Henzl) [619365 564249]
  - [scsi] lpfc: fix ioctl crash in lpfc_nlp_put (Rob Evers) [637727 625841]
  - [net] sched: fix info leak in traffic policing (Neil Horman) [636391 636392] {CVE-2010-3477}
  - [md] dm: fix deadlock with fsync vs. resize in lvm (Mikulas Patocka) [632255 624068]
  - [misc] fix race in pid generation causing immediate reuse (Dave Anderson) [638866 634850]
  - [scsi] fix disk spinup for shorter path restore times (Rob Evers) [634977 608109]
  - [fs] aio: check for multiplication overflow in io_submit (Jeff Moyer) [629448 629449] {CVE-2010-3067}
  - [fs] xfs: prevent reading uninitialized stack memory (Dave Chinner) [630806 630807] {CVE-2010-3078}
  - [fs] aio: fix cleanup in io_submit_one (Jeff Moyer) [631720 631721] {CVE-2010-3066}
  - [net] ipv4: fix buffer overflow in icmpmsg_put (Frantisek Hrbata) [634976 601391]
  - [xen] hvm: fix UP suspend/resume/migration w/PV drivers (Miroslav Rezanina) [630989 629773]
  - [fs] dlm: fix try 1cb failure, part 2 (Abhijith Das) [639073 504188]
  - [fs] dlm: no node callback when try 1cb lock req fails (David Teigland) [639073 504188]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.21.1.el5]
changelog:
  - [scsi] qla2xxx: Correct use-after-free issue in terminate_rport_io callback (Chad Dupuis) [643135 567428]
  - [misc] futex: replace LOCK_PREFIX in futex.h (Peter Zijlstra) [633175 633176] {CVE-2010-3086}
  - [v4l] remove compat code for VIDIOCSMICROCODE (Mauro Carvalho Chehab) [642470 642471] {CVE-2010-2963}
  - [xen] hvm: correct accuracy of pmtimer (Andrew Jones) [641915 633028]
  - [net] bonding: fix IGMP report on slave during failover (Flavio Leitner) [640973 637764]
  - [fs] nfsv4: fix bug when server returns NFS4ERR_RESOURCE (Steve Dickson) [628889 620502]
  - [fs] nfsv4: ensure lockowners are labelled correctly (Steve Dickson) [628889 620502]
  - [fs] nfsv4: add support for RELEASE_LOCKOWNER operation (Steve Dickson) [628889 620502]
  - [fs] nfsv4: clean up for lockowner XDR encoding (Steve Dickson) [628889 620502]
  - [fs] nfsv4: ensure we track lock state in r/w requests (Steve Dickson) [628889 620502]
  - [time] implement fine grained accounting for PM timer (Ulrich Obergfell) [637069 586285]
  - [time] initialize tick_nsec based on kernel parameters (Ulrich Obergfell) [637069 586285]
  - [time] introduce 'pmtimer_fine_grained' kernel parameter (Ulrich Obergfell) [637069 586285]
  - [fs] nfs: wait for close before silly-renaming (Jeff Layton) [642628 565974]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.17.4.el5]
changelog:
  - Branch build based on 2.6.18-194.17.1.el5
  - [net] rds: fix local privilege escalation (Eugene Teo) [642897 642898] {CVE-2010-3904}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.23.1.el5]
changelog:
  - [net] bonding: correctly process non-linear skbs (Andy Gospodarek) [644822 619070]
  - Syncing following patch from branched build:
  - [net] rds: fix local privilege escalation (Eugene Teo) [642897 642898] {CVE-2010-3904}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-188.el5]
changelog:
  - [net] be2net: latest bugfixes from upstream for rhel5.5 (Ivan Vecera) [561322]
  - [infiniband] fix bitmask handling from QP control block (Steve Best) [561953]
  - [infiniband] fix issue w/sleep in interrupt ehca handler (Steve Best) [561952]
  - [char] ipmi: fix ipmi_watchdog deadlock (Tony Camuso) [552675]
  - [net] cnic: additional fixes for rhel5.5 update (Mike Christie) [517378]
  - [net] cxgb3: add memory barriers (Steve Best) [561957]
  - [fs] nfsv4: distinguish expired from stale stateid (Wade Mealing) [514654]
  - [net] igb: fix msix_other interrupt masking (Stefan Assmann) [552348]
  - [net] niu: fix deadlock when using bonding (Andy Gospodarek) [547943]
  - [x86] xen: invalidate dom0 pages before starting guest (Christopher Lalancette) [466681]
  - [cpufreq] powernow-k8: fix crash on AMD family 0x11 procs (Bhavna Sarathy) [555180]
  - [misc] ptrace: PTRACE_KILL hangs in 100% cpu loop (Vitaly Mayatskikh) [544138]
  - [scsi] megaraid: fix 32-bit apps on 64-bit kernel (Tomas Henzl) [518243]
  - [misc] fix APIC and TSC reads for guests (Prarit Bhargava) [562006]
  - [mm] fix sys_move_pages infoleak (Eugene Teo) [562590] {CVE-2010-0415}
  - [fs] aio: fix .5% OLTP perf regression from eventfd (Jeff Moyer) [548565]
  - [net] sky2: fix initial link state errors (Andy Gospodarek) [559329]
  - [x86_64] wire up compat sched_rr_get_interval (Danny Feng) [557092]
  - [net] netfilter: enforce CAP_NET_ADMIN in ebtables (Danny Feng) [555243] {CVE-2010-0007}
  - [misc] fix kernel info leak with print-fatal-signals=1 (Danny Feng) [554584] {CVE-2010-0003}
  - [fs] gfs2: don't withdraw on partial rindex entries (Benjamin Marzinski) [553447]
  - [net] ipv6: fix OOPS in ip6_dst_lookup_tail (Thomas Graf) [552354]
  - [misc] khungtaskd: set PF_NOFREEZE flag to fix suspend (Amerigo Wang) [550014]
  - [block] loop: fix aops check for GFS (Josef Bacik) [549397]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-189.el5]
changelog:
  - [net] wireless fixes from 2.6.32.7 (John Linville) [559711]
  - [net] wireless fixes from 2.6.32.4 (John Linville) [559711]
  - [net] wireless fixes through 2.6.32.3 (John Linville) [559711]
  - [net] wireless fixes from 2.6.32.2 (John Linville) [559711]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-190.el5]
changelog:
  - [x86_64] mce: avoid deadlocks during MCE broadcasts (Prarit Bhargava) [562866]
  - [scsi] device_handler: add netapp to alua dev list (Mike Christie) [562080]
  - [misc] wacom: add Intuos4 support (Don Zickus) [502708]
  - [scsi] be2iscsi: fix eh bugs and enable new hw support (Mike Christie) [564145]
  - [net] ixgbe: initial support of ixgbe PF and VF drivers (Andy Gospodarek) [525577]
  - [fs] ext4: avoid divide by 0 when mounting corrupted fs (Eric Sandeen) [547253]
  - [net] bnx2x: update to 1.52.1-6 firmware (Stanislaw Gruszka) [560556]
  - [net] bnx2x: update to 1.52.1-6 (Stanislaw Gruszka) [560556]
  - [misc] hvc_iucv: alloc send/receive buffers in DMA zone (Hendrik Brueckner) [566202]
  - [net] ixgbe: prevent speculatively processing descriptors (Steve Best) [566309]
  - [fs] fix randasys crashes x86_64 systems regression (Peter Bogdanovic) [562857]
  - [scsi] fix bugs in fnic and libfc (Mike Christie) [565594]
  - [net] tg3: fix 57765 LED (John Feeney) [566016]
  - [net] tg3: fix race condition with 57765 devices (John Feeney) [565965]
  - [fs] gfs2: use correct GFP for alloc page on write (Steven Whitehouse) [566221]
  - [scsi] lpfc: update version for 8.2.0.63.3p release (Rob Evers) [564506]
  - [scsi] lpfc: fix driver build issues in rhel5.5 (Rob Evers) [564506]
  - [scsi] lpfc: relax event queue field checking (Rob Evers) [564506]
  - [scsi] lpfc: implement the PORT_CAPABITIES mailbox cmd (Rob Evers) [564506]
  - [scsi] lpfc: fix a merge issue (Rob Evers) [564506]
  - [scsi] lpfc: Add support for new SLI features (Rob Evers) [564506]
  - [scsi] lpfc: Add support for 64-bit PCI BAR region 0 (Rob Evers) [564506]
  - [nfs] fix a deadlock in the sunrpc code (Steve Dickson) [548846]
  - [fs] ecryptfs: fix metadata in xattr feature regression (Eric Sandeen) [553670]
  - [scsi] qla2xxx: return FAILED if abort command fails (Rob Evers) [559972]
  - [virtio] fix module loading for virtio-balloon module (Anthony Liguori) [564361]
  - [mm] xen: make mmap() with PROT_WRITE (Andrew Jones) [562761]
  - [hwmon] w83627hf: fix data to platform_device_add_data (Dean Nelson) [557172]
  - [hwmon] smsc47m1: fix data to platform_device_add_data (Dean Nelson) [560944]
  - [hwmon] it87: fix sio_data to platform_device_add_data (Dean Nelson) [559950]
  - [hwmon] f71805f: fix sio_data to platform_device_add_data (Dean Nelson) [564399]
  - [base] make platform_device_add_data accept const pointer (Dean Nelson) [557172 559950 560944 564399]
  - [net] forcedeth: fix putting system into S4 (Matthew Garrett) [513203]
  - [net] netfilter: allow changing queue length via netlink (Steve Best) [562945]
  - [mm] i386: fix iounmap's use of vm_struct's size field (Danny Feng) [549465]
  - [ppc] fix sched while atomic error in alignment handler (Steve Best) [543637]
  - [pci] aer: disable advanced error reporting by default (Prarit Bhargava) [559978]
  - [s390] qeth: set default BLKT settings by OSA hw level (Hendrik Brueckner) [559621]
  - [net] e1000e: fix deadlock unloading module on some ICH8 (Andy Gospodarek) [555818]
  - [misc] rwsem: fix a bug in rwsem_is_locked() (Amerigo Wang) [526092]
  - [s390] clear high-order bits after switch to 64-bit mode (Hendrik Brueckner) [546302]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-191.el5]
changelog:
  - [wireless] iwlwifi: fix dual band N-only use on 5x00 (Stanislaw Gruszka) [566696]
  - [net] be2net: critical bugfix from upstream (Ivan Vecera) [567718]
  - [net] tg3: fix 5717 and 57765 asic revs panic under load (John Feeney) [565964]
  - [net] bnx2x: use single tx queue (Stanislaw Gruszka) [567979]
  - [net] igb: fix WoL initialization when disabled in eeprom (Stefan Assmann) [564102]
  - [net] igb: fix warning in igb_ethtool.c (Stefan Assmann) [561076]
  - [net] s2io: restore ability to tx/rx vlan traffic (Neil Horman) [562732]
  - [net] ixgbe: stop unmapping DMA buffers too early (Andy Gospodarek) [568153]
  - [net] e1000e: disable NFS filtering capabilites in ICH hw (Andy Gospodarek) [558809]
  - [net] bnx2: update firmware and version to 2.0.8 (Andy Gospodarek) [561578]
  - [net] mlx4: fix broken SRIOV code (Doug Ledford) [567730]
  - [net] mlx4: pass eth attributes down to vlan interfaces (Doug Ledford) [557109]
  - [x86_64] fix missing 32 bit syscalls on 64 bit (Wade Mealing) [559410]
  - [s390] zcrypt: Do not remove coprocessor on error 8/72 (Hendrik Brueckner) [561067]
  - [misc] usb-serial: add support for Qualcomm modems (Pete Zaitcev) [523888]
  - [scsi] mpt2sas: fix missing initialization (Tomas Henzl) [565637]
  - [i386] mce: avoid deadlocks during MCE broadcasts (Prarit Bhargava) [562862]
  - [x86_64] k8: do not mark early_is_k8_nb as __init (Paolo Bonzini) [567275]
  - [ia64] kdump: fix a deadlock while redezvousing (Neil Horman) [506694]
  - [dm] raid45: constructor error path oops fix (Heinz Mauelshagen) [565494]
  - [mm] prevent severe performance degradation hang fix (Dave Anderson) [544448]
  - [net] cxgb3: memory barrier addition fixup (Steve Best) [561957]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-192.el5]
changelog:
  - [cpu] fix amd l3 cache disable functionality (Jarod Wilson) [517586]
  - [misc] backport upstream strict_strto* functions (Jarod Wilson) [517586]
  - [wireless] rt2x00: fix work cancel race conditions (Stanislaw Gruszka) [562972]
  - [net] igb: fix DCA support for 82580 NICs (Stefan Assmann) [513712]
  - Revert: [ia64] kdump: fix a deadlock while redezvousing (Neil Horman) [506694]
  - [block] cfq: kick busy queues w/o waiting for merged req (Jeff Moyer) [570814]
  - [fs] cifs: max username len check in setup does not match (Jeff Layton) [562947]
  - [fs] cifs: CIFS shouldn't make mountpoints shrinkable (Jeff Layton) [562947]
  - [fs] cifs: fix dentry hash for case-insensitive mounts (Jeff Layton) [562947]
  - [fs] cifs: fix len for converted unicode readdir names (Jeff Layton) [562947]
  - [x86_64] xen: fix missing 32-bit syscalls on 64-bit Xen (Christopher Lalancette) [559410]
  - [fs] gfs2: fix kernel BUG when using fiemap (Abhijith Das) [569610]
  - [net] sctp: backport cleanups for ootb handling (Neil Horman) [555667] {CVE-2010-0008}
  - [xen] vtd: ignore unknown DMAR entries (Don Dugger) [563900]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-193.el5]
changelog:
  - [fs] gfs2: locking fix for potential dos (Steven Whitehouse) [572390] {CVE-2010-0727}
  - [acpi] power_meter: avoid oops on driver load (Matthew Garrett) [566575]
  - [net] r8169: fix assignments in backported net_device_ops (Ivan Vecera) [568040]
  - [net] virtio_net: refill rx buffer on out-of-memory (Herbert Xu) [554078]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-194.el5]
changelog:
  - [net] mlx4: pass attributes down to vlan interfaces (Doug Ledford) [573098]
  - [block] cfq-iosched: fix sequential read perf regression (Jeff Moyer) [571818]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.1.1.el5]
changelog:
  - [xen] arpl on MMIO area crashes the guest (Paolo Bonzini) [572979 572982] {CVE-2010-0730}
  - [mm] fix boot on s390x after bootmem overlap patch (Amerigo Wang) [580838 550974]
  - [net] bnx2: avoid restarting cnic in some contexts (Andy Gospodarek) [581148 554706]
  - [iscsi] fix slow failover times (Mike Christie) [580840 570681]
  - [misc] kernel: fix elf load DoS on x86_64 (Danny Feng) [560552 560553] {CVE-2010-0307}
  - [netlink] connector: delete buggy notification code (Jiri Olsa) [561684 561685] {CVE-2010-0410}
  - [sound] hda_intel: avoid divide by zero in azx devices (Jaroslav Kysela) [567171 567172] {CVE-2010-1085}
  - [dvb] fix endless loop when decoding ULE at dvb-core (Mauro Carvalho Chehab) [569241 569242] {CVE-2010-1086}
  - [scsi] fnic: fix tx queue handling (Mike Christie) [580829 576709]
  - [fusion] mptsas: fix event_data alignment (Tomas Henzl) [580832 570000]
  - [edac] fix internal error message in amd64_edac driver (Bhavna Sarathy) [580836 569938]
  - [x86_64] fix floating point state corruption after signal (Oleg Nesterov) [580841 560891]
  - [mm] don't let reserved memory overlap bootmem_map (Amerigo Wang) [580838 550974]
  - [s390] kernel: correct TLB flush of page table entries (Hendrik Brueckner) [580839 545527]
  - [xen] iommu: clear IO-APIC pins on boot and shutdown (Paolo Bonzini) [580199 548201]
  - [xen] vtd: fix ioapic pin array (Don Dugger) [581150 563546]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.28.1.el5]
changelog:
  - [net] bnx2: Increase max rx ring size from 1K to 2K (Andy Gospodarek) [649255 640026]
  - [net] bnx2: fixup broken NAPI accounting (Andy Gospodarek) [649255 640026]
  - [pci] include DL580 G7 in bfsort whitelist (Tony Camuso) [646765 644879]
  - [sound] core: prevent heap corruption in snd_ctl_new (Jerome Marchand) [638483 638484] {CVE-2010-3442}
  - [net] ixgbe: add option to control interrupt mode (Andy Gospodarek) [643339 571495]
  - [fs] execve: fix interactivity and response to SIGKILL (Dave Anderson) [643344 629176]
  - [usb] fix test of wrong variable in create_by_name (Don Howard) [643347 594635]
  - [fs] gfs2: fix stuck in inode wait, no glocks stuck (Robert S Peterson) [651805 595397]
  - [net] gro: fix bogus gso_size on the first fraglist entry (Herbert Xu) [648938 588015]
  - [virt] xen: fix Connected state after netback dev closed (Paolo Bonzini) [643345 591548]
  - [net] tun: orphan an skb on tx (Michael S. Tsirkin) [643348 584412]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.29.1.el5]
changelog:
  - [net] rds: fix rds_iovec page count overflow (Jiri Pirko) [647421 647422] {CVE-2010-3865}
  - [net] fix deadlock in sock_queue_rcv_skb (Danny Feng) [652536 652537] {CVE-2010-4161}
  - [net] packet: fix information leak to userland (Jiri Pirko) [649897 649898] {CVE-2010-3876}
  - [ipc] sys_semctl: fix kernel stack leakage (Danny Feng) [648721 648722] {CVE-2010-4083}
  - [misc] kernel: remove yield from stop_machine paths (Oleg Nesterov) [651818 634454]
  - [fs] dlm: reduce cond_resched during send (David Teigland) [653335 604139]
  - [fs] dlm: use TCP_NODELAY (David Teigland) [653335 604139]
  - [net] sctp: do not reset packet during sctp_packet_config (Jiri Pirko) [637866 637867] {CVE-2010-3432}
  - [net] bonding: no lock on copy/clear VLAN list on slave (Andy Gospodarek) [652561 627974]
  - [scsi] gdth: prevent integer overflow in ioc_general (Frantisek Hrbata) [651175 651176] {CVE-2010-4157}
  - [kernel] add stop_machine barrier to fix lock contention (Prarit Bhargava) [651818 634454]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.30.1.el5]
changelog:
  - [scsi] lpfc: set heartbeat timer off by default (Rob Evers) [658079 655119]
  - [misc] posix-cpu-timers: workaround for mt exec problems (Oleg Nesterov) [656265 656266] {CVE-2010-4248}
  - [fs] setup_arg_pages: diagnose excessive argument size (Oleg Nesterov) [645226 645227] {CVE-2010-3858}
  - [net] inet_diag: make sure we run audited bytecode (Jiri Pirko) [651266 651267] {CVE-2010-3880}
  - [net] limit sendto/recvfrom/iovec total length to INT_MAX (Jiri Pirko) [645871 645872] {CVE-2010-3859}
  - [bluetooth] hci_ldisc: fix missing NULL check (Jarod Wilson) [655664 655666] {CVE-2010-4242}
  - [virt] xen: add bounds req-process loop in blkback/blktap (Laszlo Ersek) [656208 654546] {CVE-2010-4247}
  - [virt] xen: don't leak dev refs on bad xenbus transitions (Laszlo Ersek) [636412 635999] {CVE-2010-3699}
  - [scsi] lpfc: fix crashes on NULL pnode dereference (Rob Evers) [658864 649489]
  - [scsi] qla2xxx: check null fcport in _queuecommands (Chad Dupuis) [657029 644863]
  - [fs] gfs2: fix race in unlinked inode deallocation (Robert S Peterson) [651811 643165]
  - [scsi] lpfc: fix a BUG_ON in lpfc_abort_handler (Rob Evers) [658378 639028]
  - [scsi] re-enable transistions from OFFLINE to RUNNING (Mike Christie) [658934 641193]
  - [scsi] scsi_dh_alua: handle transitioning state correctly (Mike Snitzer) [657028 619361]
  - [misc] add round_jiffies_up and related routines (Michal Schmidt) [658520 556476]
  - [fs] fix dcache accounting bug (Josef Bacik) [658857 596548]
  - [usb] uhci: fix oops in uhci_scan_schedule (Pete Zaitcev) [657319 516851]
  - [scsi] lpfc: fix panic in lpfc_scsi_cmd_iocb_cmpl (Rob Evers) [658379 603806]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-194.31.1.el5]
changelog:
  - [fs] nfs: set lock_context field in nfs_writepage_sync (Jeff Layton) [663381 660580]
  - [fs] nfs: remove problematic calls to nfs_clear_request (Jeff Layton) [663353 656492]
  - [fs] nfs: handle alloc failures in nfs_create_request (Jeff Layton) [663353 656492]
  - [fs] nfs: clean up nfs_create_request (Jeff Layton) [663353 656492]
  - [virt] xen: fix netback hotplug regression in xenbus fix (Laszlo Ersek) [636412 635999] {CVE-2010-3699}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-185.el5]
changelog:
  - [net] e1000e: fix rx length check errors (Amerigo Wang) [551223] {CVE-2009-4538}
  - [net] e1000: fix rx length check errors (Neil Horman) [552138] {CVE-2009-4536}
  - [net] r8169: improved frame length filtering (Neil Horman) [550915] {CVE-2009-4537}
  - kabi: fix dma_async_register symbol move (Jarod Wilson) [526342]
  - [kabi] add {napi,vlan}_gro_receive and intel dca symbols (Jon Masters) [526342]
  - Revert: amd64_edac: fix access to pci conf space type 1 (Jarod Wilson) [479070]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-186.el5]
changelog:
  - [net] emergency route cache flushing fixes (Thomas Graf) [545663] {CVE-2009-4272}
  - [fs] fasync: split 'fasync_helper()' into separate add/remove functions (Danny Feng) [548657] {CVE-2009-4141}
  - [scsi] qla2xxx: NPIV vport management pseudofiles are world writable (Tom Coughlan) [537318] {CVE-2009-3556}
  - [net] ipv6: fix ipv6_hop_jumbo remote system crash (Amerigo Wang) [548643] {CVE-2007-4567}
  - [net] e1000e: fix broken wol (Andy Gospodarek) [557974]
  - [net] r8169: add missing hunk from frame length filtering fix (Jarod Wilson) [552438]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-187.el5]
changelog:
  - [misc] EDAC driver fix for non-MMCONFIG systems (Bhavna Sarathy) [550123]
  - [misc] audit: fix breakage and leaks in audit_tree.c (Alexander Viro) [549750]
  - [mm] prevent hangs during memory reclaim on large systems (Larry Woodman) [546428]
  - [usb] support more Huawei modems (Pete Zaitcev) [517454]
  - [x86] fix AMD M-C boot inside xen on pre-5.5 hypervisor (Paolo Bonzini) [560013]
  - [kvm] pvclock on i386 suffers from double registering (Glauber Costa) [557095]
  - [md] fix kernel panic releasing bio after recovery failed (Takahiro Yasui) [555171]
  - [md] fix deadlock at suspending mirror device (Takahiro Yasui) [555120]
  - [pci] VF can't be enabled in dom0 (Don Dutile) [547980]
  - [acpi] fix NULL pointer panic in acpi_run_os (Prarit Bhargava) [547733]
  - [kvm] kvmclock won't restore properly after resume (Glauber Costa) [539521]
  - [x86_64] export additional features in cpuinfo for xen (Prarit Bhargava) [517928]
  - [fs] proc: make smaps readable even after setuid (Dave Anderson) [322881]
  - [net] iptables: fix routing of REJECT target packets (Jiri Olsa) [548079]
  - [net] niu: fix the driver to be functional with vlans (Jiri Pirko) [538649]
  - [mm] prevent performance hit for 32-bit apps on x86_64 (Larry Woodman) [544448]
  - [mm] mmap: don't ENOMEM when mapcount is temp exceeded (Danny Feng) [552648]
  - [fs] proc: make errno values consistent when race occurs (Danny Feng) [556545]
  - [net] igb: update driver to support End Point DCA (Stefan Assmann) [513712]
  - [scsi] qla2xxx: FCP2 update, dpc bug, fast mailbox read (Rob Evers) [550286]
  - [scsi] qla2xxx: fix timeout value for CT passthru cmds (Rob Evers) [552327]
  - [scsi] lpfc: update to version 8.2.0.63.p2 (Rob Evers) [557792]
  - [scsi] lpfc: update driver to version 8.2.0.63.1p FC/FCoE (Rob Evers) [555604]
  - [scsi] be2iscsi: upstream driver refresh for rhel5.5 (Mike Christie) [554545]
  - [pci] add ids for intel b43 graphics controller (John Villalovos) [523637]
  - [misc] support Nehalem-EX processors in Oprofile (John Villalovos) [521992]
  - [scsi] scsi_dh: make rdac hw handler's activate() async (Rob Evers) [537514]
  - [scsi] scsi_dh: change scsidh_activate interface to async (Rob Evers) [537514]
  - [alsa] support Creative X-Fi EMU20K1 and EMU20K2 chips (Jaroslav Kysela) [523786]
  - [net] tg3: update to version 3.106 for 57765 asic support (John Feeney) [545135]
  - [net] bonding: fix alb mode locking regression (Andy Gospodarek) [533496]
  - [scsi] stex: don't try to scan a nonexistent lun (David Milburn) [531488]
  - [scsi] bnx2i: additional fixes for rhel5.5 update (Mike Christie) [517378]
  - [misc] hpilo: fix build warning in ilo_isr (Tony Camuso) [515010]
  - [scsi] qla2xxx: add AER support (Rob Evers) [513927]
  - [x86] relocate initramfs so we can increase vmalloc space (Neil Horman) [499253]
  - [mm] memory mapped files not updating timestamps (Peter Staubach) [452129]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-230.el5]
changelog:
  - [fs] nfs: fix regression in NFS Direct I/O path (Steve Dickson) [647297]
  - [fs] nfs: allow different protocol mounts to same server (Steve Dickson) [460659]
  - [scsi] lpfc: update version for 8.2.0.85 driver release (Rob Evers) [639028]
  - [scsi] lpfc: fix a BUG_ON in lpfc_abort_handler (Rob Evers) [639028]
  - [scsi] lpfc: use pci reset function on driver unload (Rob Evers) [639028]
  - [scsi] lpfc: replace some spin_lock_irqs w/spin_locks (Rob Evers) [639028]
  - [scsi] lpfc: fail io w/lost frame and target check cond (Rob Evers) [639028]
  - [scsi] lpfc: fix abort WQEs for FIP frames (Rob Evers) [639028]
  - [scsi] lpfc: update version for 8.2.0.84 driver release (Rob Evers) [639028]
  - [scsi] lpfc: unreg all rpi mbox command before unreg vpi (Rob Evers) [639028]
  - [scsi] lpfc: make all error values negative (Rob Evers) [639028]
  - [scsi] lpfc: remove duplicate code from lpfc_els_retry (Rob Evers) [639028]
  - [scsi] lpfc: fix circular spinlock dep w/scsi midlayer (Rob Evers) [639028]
  - [scsi] lpfc: update version for 8.2.0.83 driver release (Rob Evers) [639028]
  - [scsi] lpfc: fix FLOGI issue with McData4700 FC switch (Rob Evers) [639028]
  - [scsi] lpfc: fix possible roundrobin failover failure (Rob Evers) [639028]
  - [scsi] lpfc: fix unregister of unused FCF on timeout (Rob Evers) [639028]
  - [scsi] lpfc: fix heartbeat timeout during pause test (Rob Evers) [639028]
  - [scsi] lpfc: update version for 8.2.0.82 driver release (Rob Evers) [639028]
  - [scsi] lpfc: fix lpfc_els_retry delay/retry for PLOGI (Rob Evers) [639028]
  - [scsi] lpfc: streamline some spin locks (Rob Evers) [639028]
  - [scsi] lpfc: fix lpfc_initial_flogi return on failure (Rob Evers) [639028]
  - [scsi] lpfc: fix stray state update issue with new FCF (Rob Evers) [639028]
  - [scsi] lpfc: treat FCF prop with different index as error (Rob Evers) [639028]
  - [scsi] lpfc: fix misc auth issues on EmulexSecure FC HBA (Rob Evers) [639028]
  - [scsi] lpfc: update version for 8.2.0.81 driver release (Rob Evers) [639028]
  - [scsi] lpfc: move unload flag earlier in vport delete (Rob Evers) [639028]
  - [scsi] lpfc: fix IOCB leak on FDISC completion (Rob Evers) [639028]
  - [scsi] lpfc: fix possible crash on non-SLI4 hba (Rob Evers) [639028]
  - [scsi] mpt2sas: fix panic w/direct attached SEP (Jarod Wilson) [641086]
  - [redhat] spec: clean up rpmbuild kabideps detritus (Jarod Wilson) [644129]
  - [net] bnx2: Increase max rx ring size from 1K to 2K (Andy Gospodarek) [640026]
  - [net] bnx2: fixup broken NAPI accounting (Andy Gospodarek) [640026]
  - [s390] qeth: portno 1 support for OSM-device insufficient (Hendrik Brueckner) [644008]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-231.el5]
changelog:
  - [scsi] scsi_dh_alua: remove IBM Power Virtual SCSI ALUA (Steve Best) [567292]
  - [fs] gfs2: flock (LOCK_EX|LOCK_NB) blocks (Robert S Peterson) [648602]
  - [scsi] lpfc: update version for 8.2.0.86 driver release (Rob Evers) [645881]
  - [scsi] lpfc: fix race sending FDISC to un-init VPI (Rob Evers) [645881]
  - [scsi] lpfc: fix mailbox handling for UNREG_RPI_ALL case (Rob Evers) [645881]
  - [kernel] add stop_machine barrier to fix lock contention (Prarit Bhargava) [634454]
  - [scsi] bnx2i: fix ip address formatting and oops (Mike Christie) [646708]
  - [scsi] be2iscsi: remove premature free of cid (Mike Christie) [640029]
  - [fs] proc: make proc pid limits world readable (Jiri Olsa) [611535]
  - [ide] atiixp: fix locking hang in ide layer ATIIXP driver (James Leddy) [586482]
  - [security] only check mmap_min_addr perms for write (Eric Paris) [623519]
  - [ata] sata_sil24: add DID for another adaptec flavor (David Milburn) [640586]
  - [s390] cio: prevent panic in I/O cancel function (Hendrik Brueckner) [647807]
  - [s390] cio: prevent panic after unexpected I/O interrupt (Hendrik Brueckner) [647502]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-232.el5]
changelog:
  - [scsi] mpt2sas: use correct pci_resource_flag for compare (Tomas Henzl) [649885]
  - [sound] rme9652: prevent reading uninitialized stack mem (Stanislaw Gruszka) [648709 648714] {CVE-2010-4080 CVE-2010-4081}
  - [net] packet: fix information leak to userland (Jiri Pirko) [649898]
  - [ipc] sys_semctl: fix kernel stack leakage (Danny Feng) [648722] {CVE-2010-4083}
  - [misc] kernel: remove yield from stop_machine paths (Oleg Nesterov) [634454]
  - [fs] dlm: reduce cond_resched during send (David Teigland) [604139]
  - [fs] dlm: use TCP_NODELAY (David Teigland) [604139]
  - [fs] nfs: fix a referral error Oops (Steve Dickson) [556886]
  - [fs] gfs2: fix race in unlinked inode deallocation (Robert S Peterson) [643165]
  - [scsi] retry on DID_REQUEUE errors (Mike Christie) [627836]
  - [net] sctp: do not reset packet during sctp_packet_config (Jiri Pirko) [637867]
  - [net] bnx2: add AER support (John Feeney) [617024]
  - [net] bonding: no lock on copy/clear VLAN list on slave (Andy Gospodarek) [627974]
  - [scsi] gdth: prevent integer overflow in ioc_general (Frantisek Hrbata) [651176]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-233.el5]
changelog:
  - [scsi] mpt2sas: use sas device list for enclosure id (Tomas Henzl) [652284]
  - [scsi] ipr: fix mailbox register definition and add delay (Steve Best) [654446]
  - [scsi] ipr: fix lun assignment and comparison (Steve Best) [654446]
  - [powerpc] add AT_BASE_PLATFORM to Aux Vector and power7 (Steve Best) [652279]
  - [infiniband] ehea: use shca_list_lock spinlock (Steve Best) [613797]
  - [powerpc] kdump: CPUs assume context of oopsing CPU (Steve Best) [509792]
  - [scsi] lpfc: Update version for 8.2.0.87 driver release (Rob Evers) [649489]
  - [scsi] lpfc: add handling SLI4 unsolicted ELS RTV (Rob Evers) [649489]
  - [scsi] lpfc: add handling ECHO response support (Rob Evers) [649489]
  - [scsi] lpfc: add handling of SLI4 unsolicted ELS (Rob Evers) [649489]
  - [scsi] lpfc: fix locking for security mailbox commands (Rob Evers) [649489]
  - [scsi] lpfc: abort I/Os and wait on XRI in SLI4 unload (Rob Evers) [649489]
  - [scsi] lpfc: handle devloss timeout in FIP engine (Rob Evers) [649489]
  - [scsi] lpfc: fix crashes on NULL pnode dereference (Rob Evers) [649489]
  - [net] cnic: Add cnic_free_uio (Mike Christie) [651287]
  - [net] cnic: Add cnic_uio_dev struct (Mike Christie) [651287]
  - [net] cnic: Add cnic_free_uio (Mike Christie) [651287]
  - [net] cnic: Fine-tune ring init code (Mike Christie) [651287]
  - [misc] fix dirty_bytes sysctl name (Larry Woodman) [635782]
  - [fs] procfs: acquire inode mutex around llseek operation (Lachlan McIlroy) [644726]
  - [virt] netfront: default to copying instead of flipping (Laszlo Ersek) [653262]
  - [virt] netback: don't balloon up for copying receivers (Laszlo Ersek) [653501]
  - [net] rds: fix rds_iovec page count overflow (Jiri Pirko) [647422]
  - [net] virtio_net: add link status handling (Jason Wang) [649573]
  - [net] be2net: Update be2net to version 2.102.512r (Ivan Vecera) [647259]
  - [char] watchdog: another LPC Controller ID for Patsburg (David Milburn) [570868]
  - [misc] another LPC Controller ID for Intel Patsburg PCH (David Milburn) [570868]
  - [i2c] i2c-i801: Add Intel Patsburg device ID (David Milburn) [570868]
  - [misc] pci: update Intel Patsburg defines (David Milburn) [570868]
  - [misc] x86/PCI irq and pci_ids for Intel Patsburg Devices (David Milburn) [570868]
  - [sound] ALSA HD Audio for Intel Patsburg DeviceIDs (David Milburn) [570868]
  - [char] watchdog: TCO Watchdog for Intel Patsburg Devices (David Milburn) [570868]
  - [ata] ahci: AHCI and RAID mode for Intel Patsburg Devices (David Milburn) [570868]
  - [ata] ata_piix: IDE Mode SATA for Intel Patsburg Devices (David Milburn) [570868]
  - [net] fix deadlock in sock_queue_rcv_skb (Danny Feng) [652537]
  - [scsi] qla2xxx: check null fcport in _queuecommands (Chad Dupuis) [644863]
  - [net] qlcnic: Fix missing error codes (Chad Dupuis) [637194]
  - [usb] wacom: add support for Cintiq 21UX2 (Aristeu Rozanski) [652731]
  - [xen] hvm: add HVMOP_get_time hypercall (Paolo Bonzini) [638082]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-234.el5]
changelog:
  - [s390] vmlogrdr: purge after recording is switched off (Hendrik Brueckner) [653479]
  - [wireless] ieee80211: fix deauthentication (Stanislaw Gruszka) [644367]
  - [wireless] zd1211rw: fix associate after disassociate (Stanislaw Gruszka) [644367]
  - [fs] proc: fix NULL ->i_fop oops (Steve Best) [655083]
  - [scsi] lpfc: Update version to 8.2.0.87.1p (Rob Evers) [655119]
  - [scsi] lpfc: set heartbeat timer off by default (Rob Evers) [655119]
  - [scsi] lpfc: fix NULL deref duing allocation failure (Rob Evers) [655119]
  - [scsi] lpfc: fix remote SLI4 firmware download data bug (Rob Evers) [655119]
  - [scsi] lpfc: fix FDMI_DID login failure after link bounce (Rob Evers) [655119]
  - [scsi] lpfc: handle CVL after nameserver PLOGI timeouts (Rob Evers) [655119]
  - [scsi] lpfc: cleanup mbox cmds in mboxq_cmpl if CVL rcvd (Rob Evers) [655119]
  - [misc] posix-cpu-timers: workaround for mt exec problems (Oleg Nesterov) [656266]
  - [fs] setup_arg_pages: diagnose excessive argument size (Oleg Nesterov) [645227]
  - [net] bnx2x: force interrupt mode for iscsi unset mac (Michal Schmidt) [655885]
  - [scsi] bnx2i: allow to abort connect if request times out (Mike Christie) [653991]
  - [scsi] bnx2i: fix remote TCP RST handling for 570X (1g) (Mike Christie) [653991]
  - [scsi] bnx2i: fix a cid leak issue for 5771X (10g) (Mike Christie) [653991]
  - [scsi] bnx2i: fix endian bug in TMF LUN cmd send (Mike Christie) [653991]
  - [misc] prevent divide by 0 in the kernel during boot (Larry Woodman) [508140]
  - [net] filter: make sure filters don't read uninit memory (Jiri Pirko) [651703] {CVE-2010-4158}
  - [net] inet_diag: make sure we run audited bytecode (Jiri Pirko) [651267]
  - [net] limit sendto/recvfrom/iovec total length to INT_MAX (Jiri Pirko) [645872] {CVE-2010-3859}
  - [bluetooth] hci_ldisc: fix missing NULL check (Jarod Wilson) [655666]
  - [net] be2net: avoid firmware update if interface not open (Ivan Vecera) [651948]
  - [ipc] shm: fix information leak to userland (Danny Feng) [648687] {CVE-2010-4072}
  - [ipc] initialize struct memory to 0 for compat functions (Danny Feng) [648693] {CVE-2010-4073}
  - [net] netxen: don't use reset_devices, it may go away (Chad Dupuis) [643254]
  - [net] netxen: fix kdump (Chad Dupuis) [643254]
  - [net] qlcnic: avoid reset_devices, it may become obsolete (Chad Dupuis) [656008]
  - [net] qlcnic: fix for kdump (Chad Dupuis) [656008]
  - [pci] block on access to temporarily unavailable device (Chad Dupuis) [656008]
  - [serial] serial_core: clean data before filling it (Mauro Carvalho Chehab) [648701] {CVE-2010-4075}
  - [edac] i7core_edac: return -ENODEV if dev already probed (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: properly terminate pci_dev_table (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: fix PCI refcounting on reloads (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: fix refcount error at PCI devices (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: safe to unregister mci when mci NULL (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: fix an oops at i7core probe (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: remove unused member in i7core_pvt (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: remove unused arg in get_dimm_config (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: reduce args of i7core_register_mci (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: use saved pointers (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: check probe counter in i7core_remove (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: call pci_dev_put on alloc failure (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: fix error path of i7core_register_mci (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: fix line order in i7core_register_mci (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: always do get/put for all devices (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: ensure edac pci handler release (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: introduce free_i7core_dev (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: introduce alloc_i7core_dev (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: reduce args of i7core_get_onedevice (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: fix the logic in i7core_remove (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: don't do legacy PCI probe by default (Mauro Carvalho Chehab) [651869]
  - [edac] edac_core: print debug messages at release calls (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: remove PCI devices from devices list (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: MCE NMI handling should stop first (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: improve debug register/remove errors (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: move #if PAGE_SHIFT to edac_core.h (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: terminate the group of udimm counters (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: mark const static vars as such (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: move static vars to the top of file (Mauro Carvalho Chehab) [651869]
  - [virt] xen: add bounds req-process loop in blkback/blktap (Laszlo Ersek) [654546] {CVE-2010-4247}
  - [virt] xen: don't leak dev refs on bad xenbus transitions (Laszlo Ersek) [635999] {CVE-2010-3699}
  - [mm] fix possible integer overflow in mm/fremap.c (Larry Woodman) [637047]
  - [misc] futex: replace LOCK_PREFIX in futex.h (Jiri Pirko) [633176] {CVE-2010-3086}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-236.el5]
changelog:
  - [powerpc] support DLPAR remove operations (Steve Best) [655089]
  - [net] igb: fix tx packet count (Stefan Assmann) [658801]
  - [usb] serial: new driver MosChip MCS7840 (Stefan Assmann) [574507]
  - [fs] exec: copy fixes into compat_do_execve paths (Oleg Nesterov) [625694] {CVE-2010-4243}
  - [fs] exec: make argv/envp memory visible to oom-killer (Oleg Nesterov) [625694] {CVE-2010-4243}
  - [misc] binfmts: kill bprm->argv_len (Oleg Nesterov) [625694] {CVE-2010-4243}
  - [mm] backport upstream stack guard page /proc reporting (Larry Woodman) [643426]
  - [mm] add guard page for stacks that grow upwards (Johannes Weiner) [630563]
  - [net] tipc: fix information leak to userland (Jiri Pirko) [649892] {CVE-2010-3877}
  - [sound] ALSA: fix sysfs unload and OSS mixer mutex issues (Jaroslav Kysela) [652165]
  - [net] tg3: fix 5719 bugs (John Feeney) [657097]
  - [net] bnx2: update firmware to 6.0.x (John Feeney) [644438]
  - [redhat] configs: add CONFIG_SECURITY_DMESG_RESTRICT (Frantisek Hrbata) [653250]
  - [misc] kernel: restrict unprivileged access to dmesg (Frantisek Hrbata) [653250]
  - [virt] xen: don't allow blkback virtual CDROM device (Andrew Jones) [635638] {CVE-2010-4238}
  - Revert: [xen] cd-rom drive does not recognize new media (Andrew Jones) [635638] {CVE-2010-4238}
  - [net] qlge: fix deadlock when interface is going down (Chad Dupuis) [654420]
  - [net] qlge: reset chip before freeing buffers (Chad Dupuis) [654420]
  - [net] qlge: restore vlan setting during ql_adapter_up (Chad Dupuis) [654420]
  - [scsi] qla4xxx: Update version to V5.02.04.00.05.06-d0 (Chad Dupuis) [656999]
  - [scsi] qla4xxx: Document Driver Versioning Scheme (Chad Dupuis) [656999]
  - [scsi] qla4xxx: Updated the Copyright header to 2010 (Chad Dupuis) [656999]
  - [scsi] qla4xxx: don't process devices untill probe done (Chad Dupuis) [656999]
  - [scsi] qla4xxx: free DDB when application calls for it (Chad Dupuis) [656999]
  - [scsi] qla4xxx: memory wedge with peg_halt test in loop (Chad Dupuis) [656999]
  - [scsi] qla4xxx: clear AF_FW_RECOVERY flag after reset (Chad Dupuis) [656999]
  - [scsi] qla4xxx: fix new IP address caching (Chad Dupuis) [656999]
  - [scsi] qla4xxx: replace hard coded values with macros (Chad Dupuis) [656999]
  - [scsi] qla4xxx: mark dev FAILED on 82XX init failure (Chad Dupuis) [656999]
  - [scsi] qla4xxx: fail init if pci mem write fails (Chad Dupuis) [656999]
  - [scsi] qla4xxx: ensure proper qla4xxx_conn_start state (Chad Dupuis) [656999]
  - [scsi] qla4xxx: do not process interrupts unconditionally (Chad Dupuis) [656999]
  - [scsi] qla4xxx: fix add w/iscsi2_create_conn not done yet (Chad Dupuis) [656999]
  - [scsi] qla4xxx: no fw hung if reset retry is in progress (Chad Dupuis) [656999]
  - [scsi] qla4xxx: correct use of cmd->host_scribble (Chad Dupuis) [656999]
  - [scsi] qla4xxx: msi init request_irq parameter usage fix (Chad Dupuis) [656999]
  - [scsi] qla4xxx: cleanup qla4xxx_wait_for_hba_online (Chad Dupuis) [656999]
  - [scsi] qla4xxx: grab hardware_lock before accessing srb (Chad Dupuis) [656999]
  - [scsi] qla4xxx: remove unwanted check for bad spd (Chad Dupuis) [656999]
  - [scsi] qla4xxx: update AER support for ISP82XX (Chad Dupuis) [656999]
  - [scsi] qla4xxx: clear rom lock if firmware died holding (Chad Dupuis) [656999]
  - [scsi] qla4xxx: CRB Register for Request Queue in-pointer (Chad Dupuis) [656999]
  - [scsi] qla4xxx: dump mailbox registers on System Error (Chad Dupuis) [656999]
  - [scsi] qla4xxx: add support for 8130/8131 AENs (Chad Dupuis) [656999]
  - [scsi] qla4xxx: fix seconds_since_last_heartbeat reset (Chad Dupuis) [656999]
  - [scsi] qla4xxx: no wait for outstanding command complete (Chad Dupuis) [656999]
  - [scsi] qla4xxx: free_irqs on failed initialize_adapter (Chad Dupuis) [656999]
  - [virt] xen: fix netback hotplug regression in xenbus fix (Laszlo Ersek) [635999]
  - [xen] fix 64-bit PV guest user mode segv crashing host (Paolo Bonzini) [658354] {CVE-2010-4255}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-237.el5]
changelog:
  - [block] fully zeroize request struct in rq_init (Rob Evers) [662154]
  - [scsi] qla4xxx: update to 5.02.04.02.05.06-d0 (Chad Dupuis) [656999]
  - [scsi] qla4xxx: make get_sys_info function return void (Chad Dupuis) [656999]
  - [scsi] qla4xxx: don't default device to FAILED state (Chad Dupuis) [656999]
  - [scsi] qla4xxx: mask bits in F/W Options during init (Chad Dupuis) [656999]
  - [scsi] qla4xxx: update to 5.02.04.01.05.06-d0 (Chad Dupuis) [661768]
  - [scsi] qla4xxx: disable irq instead of req pci_slot_reset (Chad Dupuis) [661768]
  - [scsi] qla4xxx: no device add until scsi_add_host success (Chad Dupuis) [661768]
  - [fs] nfs: set lock_context field in nfs_writepage_sync (Jeff Layton) [660580]
  - [scsi] bfa: fix crash reading driver sysfs statistics (Rob Evers) [659880] {CVE-2010-4343}
  - [misc] cpufeature: avoid corrupting cpuid vendor id (Matthew Garrett) [568751]
  - [char] drm: don't set signal blocker on master process (Dave Airlie) [570604]
  - [fs] nfs: remove problematic calls to nfs_clear_request (Jeff Layton) [656492]
  - [fs] nfs: handle alloc failures in nfs_create_request (Jeff Layton) [656492]
  - [fs] nfs: clean up nfs_create_request (Jeff Layton) [656492]
  - [net] forcedeth: fix race condition in latest backport (Ivan Vecera) [658434]
  - [net] cxgb3: fix read of uninitialized stack memory (Jay Fenlason) [633155] {CVE-2010-3296}
  - [net] tg3: increase jumbo flag threshold (John Feeney) [660506]
  - [net] s2io: fix netdev initialization failure (Bob Picco) [654948]
  - [net] igb: only use vlan_gro_receive if vlans registered (Stefan Assmann) [660190] {CVE-2010-4263}
  - [net] ipv6: try all routers with unknown reachable state (Thomas Graf) [661393]
  - [misc] kernel: fix address limit override in OOPS path (Dave Anderson) [659571] {CVE-2010-4258}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-238.el5]
changelog:
  - [net] bnx2: remove extra call to pci_map_page (John Feeney) [663509]
  - [fs] nfs: set lock_context field in nfs_readpage_sync (Jeff Layton) [663853]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-238.1.1.el5]
changelog:
  - [scsi] megaraid: give FW more time to recover from reset (Tomas Henzl) [667141 665427]
  - [fs] gfs2: fix statfs error after gfs2_grow (Robert S Peterson) [666792 660661]
  - [mm] prevent file lock corruption using popen(3) (Larry Woodman) [667050 664931]
  - [net] sctp: fix panic from bad socket lock on icmp error (Neil Horman) [665476 665477] {CVE-2010-4526}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-238.3.1.el5]
changelog:
  - [net] tcp: fix shrinking windows with window scaling (Jiri Pirko) [669300 627496]
  - [virt] xen: no enable extended PCI cfg space via IOports (Don Dutile) [671340 661478]
  - [net] e1000: Avoid unhandled IRQ (Dean Nelson) [670807 651512]
  - [net] e1000: fix screaming IRQ (Dean Nelson) [670807 651512]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-238.4.1.el5]
changelog:
  - [net] be2net: fix missing trans_start update (Ivan Vecera) [674273 671595]
  - [net] fix unix socket local dos (Neil Horman) [656759 656760] {CVE-2010-4249}
  - [net] core: clear allocs for privileged ethtool actions (Jiri Pirko) [672432 672433] {CVE-2010-4655}
  - [net] limit socket backlog add operation to prevent DoS (Jiri Pirko) [657308 657309] {CVE-2010-4251}
  - [block] fix accounting bug on cross partition merges (Jerome Marchand) [672253 646816]
  - [char] virtio: Wake console outvq on host notifications (Amit Shah) [673983 673459]
  - [char] virtio: make console port names a KOBJ_ADD event (Amit Shah) [673984 669909]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-238.7.1.el5]
changelog:
  - [fs] partitions: Validate map_count in Mac part tables (Danny Feng) [679283 679284] {CVE-2011-1010}
  - [x86] fix AMD family 0x15 guest boot issue on 64-bit host (Frank Arnold) [679747 667234]
  - [sound] alsa: cache mixer values on usb-audio devices (Don Zickus) [680043 678074]
  - [media] dvb: fix av7110 negative array offset (Mauro Carvalho Chehab) [672401 672402] {CVE-2011-0521}
  - [message] mptfusion: add required mptctl_release call (Tomas Henzl) [677173 660871]
  - [fs] nfs: pure nfs client performance using odirect (Jeff Layton) [677172 643441]
  - [mm] fix install_special_mapping skips security_file_mmap (Frantisek Hrbata) [662196 662197] {CVE-2010-4346}
  - [scsi] device_handler: fix alua_rtpg port group id check (Mike Snitzer) [681795 669961]
  - [net] cnic: fix big endian bug with device page tables (Steve Best) [674774 669527]
  - [net] gro: reset dev pointer on reuse (Andy Gospodarek) [674588 600350]
  - [misc] add ignore_loglevel kernel parameter (Amerigo Wang) [675665 662102]
  - [misc] add bootmem_debug kernel parameter (Amerigo Wang) [675665 662102]
  - [fs] gfs2: remove iopen glocks from cache on delete fail (Benjamin Marzinski) [675909 666080]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-238.8.1.el5]
changelog:
  - [message] mptfusion: fix msgContext in mptctl_hp_hostinfo (Tomas Henzl) [684128 646513]
  - [fs] nfs: fix use of slab alloc'd pages in skb frag list (Neil Horman) [682642 682643] {CVE-2011-1090}
  - [s390] remove task_show_regs (Danny Feng) [677852 677853] {CVE-2011-0710}
  - [misc] vdso: export wall_to_monotonic (Prarit Bhargava) [688312 675727]
  - [x86_64] Use u32, not long, to set reset vector back to 0 (Don Zickus) [682673 675258]
  - [misc] vmware: increase apic_calibration_diff to 10000 (Prarit Bhargava) [680350 665197]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-238.9.1.el5]
changelog:
  - [md] dm-mpath: fix NULL deref when path parameter missing (Mike Snitzer) [683443 673058]
  - [md] dm-mpath: wait for pg_init completion on suspend (Mike Snitzer) [683443 673058]
  - [md] dm-mpath: hold io until all pg_inits completed (Mike Snitzer) [683443 673058]
  - [md] dm-mpath: skip activate_path for failed paths (Mike Snitzer) [683443 673058]
  - [md] dm-mpath: pass struct pgpath to pg init done (Mike Snitzer) [683443 673058]
  - [md] dm-mpath: prevent io from work queue while suspended (Mike Snitzer) [683443 673058]
  - [md] dm-mpath: add mutex to sync adding and flushing work (Mike Snitzer) [683443 673058]
  - [md] dm-mpath: flush workqueues before suspend completes (Mike Snitzer) [683443 673058]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.10.1.el5]
changelog:
  - [fs] gfs2: creating large files suddenly slow to a crawl (Robert S Peterson) [690239 683155]
  - [virt] hypervisor: Overflow fix for clocks > 4GHz (Zachary Amsden) [690134 673242]
  - [usb] fix usbfs isochronous data transfer regression (Don Zickus) [696136 688926]
  - [fs] partitions: Fix corrupted OSF partition table parsing (Danny Feng) [688022 688023] {CVE-2011-1163}
  - [misc] pm: add comment explaining is_registered kabi work-around (Don Zickus) [689699 637930]
  - [media] sn9c102: fix world-wirtable sysfs files (Don Howard) [679304 679305]
  - [scsi] scsi_dh_rdac: Add two new IBM devices to rdac_dev_list (Rob Evers) [692370 691460]
  - [fs] block: fix submit_bh discarding barrier flag on sync write (Lukas Czerner) [690795 667673]
  - [net] netfilter/ipt_CLUSTERIP: fix buffer overflow (Jiri Pirko) [689339 689340]
  - [net] netfilter: ip6_tables: fix infoleak to userspace (Jiri Pirko) [689348 689349] {CVE-2011-1172}
  - [net] netfilter/ip_tables: fix infoleak to userspace (Jiri Pirko) [689331 689332] {CVE-2011-1171}
  - [net] netfilter/arp_tables: fix infoleak to userspace (Jiri Pirko) [689322 689323] {CVE-2011-1170}
  - [base] Fix potential deadlock in driver core (Don Zickus) [689699 637930]
  - [net] forcedeth/r8169: call netif_carrier_off at end of probe (Ivan Vecera) [689808 689805 664705 664707]
  - [net] ixgbe: fix for 82599 erratum on Header Splitting (Andy Gospodarek) [693751 680531]
  - [net] ixgbe: limit VF access to network traffic (Andy Gospodarek) [693751 680531]
  - [fs] lockd: make lockd_down wait for lockd to come down (Jeff Layton) [688156 653286]
  - [fs] proc: protect mm start_/end_code in /proc/pid/stat (Eugene Teo) [684570 684571] {CVE-2011-0726}
  - [net] dccp: fix oops in dccp_rcv_state_process (Eugene Teo) [682955 682956] {CVE-2011-1093}
  - [net] bluetooth: fix bnep buffer overflow (Don Howard) [681318 681319] {CVE-2011-1079}
  - [fs] nfs: break nfsd v4 lease on unlink, link, and rename (J. Bruce Fields) [693755 610093]
  - [fs] nfs: break lease on nfsd v4 setattr (J. Bruce Fields) [693755 610093]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.12.1.el5]
changelog:
  - [x86_64] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
  - [i386] Ignore spurious IPIs left over from crash kernel (Myron Stowe) [699610 692921]
  - [xen] fix MAX_EVTCHNS definition (Laszlo Ersek) [701242 701240]
  - [net] ixgbe: fix for link failure on SFP+ DA cables (Don Howard) [696181 653236]
  - [net] netxen: limit skb frags for non tso packet (Phillip Lougher) [699609 672368]
  - [block] cciss: fix lost command problem (Phillip Lougher) [696503 696153]
  - [fs] gfs2: fix filesystem hang caused by incorrect lock order (Robert S Peterson) [688855 656032]
  - [fs] gfs2: restructure reclaim of unlinked dinodes (Phillip Lougher) [688855 656032]
  - [fs] gfs2: unlock on gfs2_trans_begin error (Robert S Peterson) [688855 656032]
  - [scsi] mpt2sas: prevent heap overflows and unchecked access (Tomas Henzl) [694526 694527] {CVE-2011-1495 CVE-2011-1494}
  - [net] bridge/netfilter: fix ebtables information leak (Don Howard) [681325 681326] {CVE-2011-1080}
  - [net] bluetooth: fix sco information leak to userspace (Don Howard) [681310 681311] {CVE-2011-1078}
  - [fs] fix corrupted GUID partition table kernel oops (Jerome Marchand) [695979 695980] {CVE-2011-1577}
  - [xen] x86/domain: fix error checks in arch_set_info_guest (Laszlo Ersek) [688581 688582] {CVE-2011-1166}
  - [net] bridge: fix initial packet flood if !STP (Jiri Pirko) [701222 695369]
  - [fs] nfsd: fix auth_domain reference leak on nlm operations (J. Bruce Fields) [697448 589512]
  - [scsi] qla2xxx: no reset/fw-dump on CT/ELS pt req timeout (Chad Dupuis) [689700 660386]
  - [mm] set barrier and send tlb flush to all affected cpus (Prarit Bhargava) [696908 675793]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.13.1.el5]
changelog:
  - [fs] gfs2: fix processes waiting on already-available inode glock (Phillip Lougher) [709767 694669]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.14.1.el5]
changelog:
  - [input] evdev: implement proper locking (Marc Milgram) [710426 680561]
  - [input] evdev: rename list to client in handlers (Marc Milgram) [710426 680561]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.15.1.el5]
changelog:
  - [block] cciss: reading a write only register causes a hang (Phillip Lougher) [713948 696153]
  - [fs] gfs2: fix resource group bitmap corruption (Robert S Peterson) [711519 690555]
  - [net] sctp: fix calc of INIT/INIT-ACK chunk length to set (Thomas Graf) [695384 695385] {CVE-2011-1573}
  - [fs] xfs: prevent leaking uninit stack memory in FSGEOMETRY_V1 p2 (Phillip Lougher) [677265 677266] {CVE-2011-0711}
  - [fs] xfs: prevent leaking uninit stack memory in FSGEOMETRY_V1 (Phillip Lougher) [677265 677266] {CVE-2011-0711}
  - [net] core: Fix memory leak/corruption on VLAN GRO_DROP (Herbert Xu) [695174 691565] {CVE-2011-1576}
  - [pci] SRIOV: release VF BAR resources when device is hot unplug (Don Dutile) [707899 698879]
  - [scsi] iscsi_tcp: fix iscsi's sk_user_data access (Mike Christie) [703056 677703]
  - [message] mptfusion: add ioc_reset_in_progress reset in SoftReset (Tomas Henzl) [712034 662160]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.16.1.el5]
changelog:
  - [xen] hvm: secure vmx cpuid (Andrew Jones) [706324 706323] {CVE-2011-1936}
  - [xen] hvm: secure svm_cr_access (Andrew Jones) [703715 702657] {CVE-2011-1780}
  - [xen] hvm: svm support cleanups (Andrew Jones) [703715 702657] {CVE-2011-1780}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-238.17.1.el5]
changelog:
  - [net] bluetooth: l2cap and rfcomm: fix info leak to userspace (Thomas Graf) [703020 703021] {CVE-2011-2492}
  - [net] inet_diag: fix inet_diag_bc_audit data validation (Thomas Graf) [714538 714539] {CVE-2011-2213}
  - [misc] signal: fix kill signal spoofing issue (Oleg Nesterov) [690030 690031] {CVE-2011-1182}
  - [fs] proc: fix signedness issue in next_pidmap (Oleg Nesterov) [697826 697827] {CVE-2011-1593}
  - [char] agp: fix OOM and buffer overflow (Jerome Marchand) [699009 699010] {CVE-2011-1746}
  - [char] agp: fix arbitrary kernel memory writes (Jerome Marchand) [699005 699006] {CVE-2011-2022 CVE-2011-1745}
  - [infiniband] core: Handle large number of entries in poll CQ (Jay Fenlason) [668370 668371] {CVE-2011-1044 CVE-2010-4649}
  - [infiniband] core: fix panic in ib_cm:cm_work_handler (Jay Fenlason) [679995 679996] {CVE-2011-0695}
  - [fs] validate size of EFI GUID partition entries (Anton Arapov) [703027 703028] {CVE-2011-1776}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.18.1.el5]
changelog:
  - [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]
  - [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
  - [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
  - [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.19.1.el5]
changelog:
  - Revert: [xen] hvm: svm support cleanups (Andrew Jones) [703715 702657] {CVE-2011-1780}
  - Revert: [xen] hvm: secure svm_cr_access (Andrew Jones) [703715 702657] {CVE-2011-1780}
  - Revert: [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]
  - Revert: [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
  - Revert: [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
  - Revert: [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.20.1.el5]
changelog:
  - [fs] lockd: don't use file's credentials on RPCSEC_GSS mounts (Max Matveev) [722854 701574]
  - [xen] Fix x86_emulate handling of imul with immediate operands (Igor Mammedov) [712884 700565]
  - [scsi] ibmvscsi: Improve CRQ reset reliability (Steve Best) [720929 704963]
  - [net] tc: Ignore noqueue_qdisc default qdisc when dumping (Thomas Graf) [720555 627850] {CVE-2011-2525}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.21.1.el5]
changelog:
  - [xen] svm: fix invlpg emulator regression (Paolo Bonzini) [725928 719894]
  - [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [719066 717742]
  - [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [719066 717742]
  - [xen] remove unused argument to __get_instruction_length (Phillip Lougher) [719066 717742]
  - [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [719066 717742]
  - [xen] hvm: secure svm_cr_access (Andrew Jones) [703715 702657] {CVE-2011-1780}
  - [xen] hvm: svm support cleanups (Andrew Jones) [703715 702657] {CVE-2011-1780}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.24.1.el5]
changelog:
  - [misc] hypervisor: fix race in interrupt hook code (Prarit Bhargava) [730688 692966]
  - [net] sctp: reset packet information after packet transmit (Thomas Graf) [727591 725573]
  - [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [713454 675781]
  - [fs] proc: Fix rmmod/read/write races in /proc entries (David Howells) [713454 675781]
  - [fs] gfs2: Make delayed workqueues submit immediately if delay 0 (Robert S Peterson) [729082 650494]
  - [fs] gfs2: improve performance with bouncing locks in a cluster (Robert S Peterson) [729082 650494]
  - [fs] gfs2: no exclusive glocks on mmapped read-only fs (Steven Whitehouse) [729090 672724]
  - [fs] gfs2: support for growing a full filesytem (Benjamin Marzinski) [729094 661904]
  - [fs] gfs2: reserve more blocks for transactions (Benjamin Marzinski) [729092 637970]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.25.1.el5]
changelog:
  - [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [713454 675781]
  - [fs] proc: Fix procfs race vs rmmod or hot-remove (David Howells) [713454 675781]
  - Revert: [fs] proc: Fix rmmod/read/write races in /proc entries (David Howells) [713454 675781]
  - Revert: [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [713454 675781]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-238.28.1.el5]
changelog:
  - [fs] gfs2: fix recovery stuck on transaction lock (Robert S Peterson) [733678 553803]
  - [fs] gfs2: speed up large file delete/unlink (Robert S Peterson) [743805 738440]
  - [net] Compute protocol seq numbers and fragment IDs using MD5 (Jiri Pirko) [743808 732663] {CVE-2011-3188}
  - [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [743808 732663] {CVE-2011-3188}
  - [fs] aio: fix aio+dio completion path regression w/3rd-party bits (Jeff Moyer) [734156 727504]
  - [scsi] scsi_dh: allow scsi_dh_detach to detach when attached (Mike Christie) [739900 666304]
  - [misc] remove div_long_long_rem (Prarit Bhargava) [739787 732614] {CVE-2011-3209}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-238.30.1.el5]
changelog:
  - [virt] kvm: fix regression w/ 32 bit KVM clock (Rik van Riel) [753787 751742]
  - [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747874 731599]
  - [net] tg3: call netif_carrier_off to initialize operstate value (Alexander Gordeev) [744699 635982]
  - [net] sctp: fix memory reclaim and panic in sctp_sock_rfree (Thomas Graf) [753002 714870] {CVE-2011-2482}
  - [wireless] nl80211: check for valid SSID size in scan operation (Stanislaw Gruszka) [753005 718155] {CVE-2011-2517}
  - [net] sunrpc: Don't hang forever on NLM unlock requests (Jeff Layton) [752999 709547] {CVE-2011-2491}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-238.31.1.el5]
changelog:
  - [net] sctp: Fix another race during accept/peeloff (Thomas Graf) [753002 714870] {CVE-2011-2482}
  - [xen] x86_emulate: Fix SAHF emulation (Igor Mammedov) [753008 718884] {CVE-2011-2519}
  - [xen] fix off-by-one shift in x86_64 __addr_ok (Laszlo Ersek) [753009 719850] {CVE-2011-2901}
  - [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [753003 716828] {CVE-2011-2495}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-238.32.1.el5]
changelog:
  - [block] cciss: need to delay after a PCI Power Management reset (Tomas Henzl) [758021 714129]
  - [block] cciss: version change from rh1 to rhz (Tomas Henzl) [749187 695493]
  - [block] cciss: fix mapping of config table (Tomas Henzl) [749187 695493]
  - [block] cciss: fix dev_info null pointer deref after freeing h (Tomas Henzl) [749187 695493]
  - [block] cciss: do not call request_irq with spinlocks held (Tomas Henzl) [749187 695493]
  - [block] cciss: prototype cciss_sent_reset to fix error (Tomas Henzl) [749187 695493]
  - [block] cciss: mark functions as dev_init to clean up warnings (Tomas Henzl) [749187 695493]
  - [block] cciss: timeout if soft reset fails (Tomas Henzl) [749187 695493]
  - [block] cciss: use cmd_alloc for kdump (Tomas Henzl) [749187 695493]
  - [block] cciss: Use cciss not hpsa in init_driver_version (Tomas Henzl) [749187 695493]
  - [block] cciss: reduce stack usage a reset verifying code (Tomas Henzl) [749187 695493]
  - [block] cciss: do not store pci state on stack (Tomas Henzl) [749187 695493]
  - [block] cciss: no PCI power management reset method if known bad (Tomas Henzl) [749187 695493]
  - [block] cciss: increase timeouts for post-reset no-ops (Tomas Henzl) [749187 695493]
  - [block] cciss: remove superfluous sleeps around reset code (Tomas Henzl) [749187 695493]
  - [block] cciss: do soft reset if hard reset is broken (Tomas Henzl) [749187 695493]
  - [block] cciss: flush writes in interrupt mask setting code (Tomas Henzl) [749187 695493]
  - [block] cciss: clarify messages around reset behavior (Tomas Henzl) [749187 695493]
  - [block] cciss: increase time to wait for board reset to start (Tomas Henzl) [749187 695493]
  - [block] cciss: get rid of message related magic numbers (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out irq request code (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out scatterlist allocation functions (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out command pool allocation functions (Tomas Henzl) [749187 695493]
  - [block] cciss: Define print_cmd even without tape support (Tomas Henzl) [749187 695493]
  - [block] cciss: do not use bit 2 doorbell reset (Tomas Henzl) [749187 695493]
  - [block] cciss: use new doorbell-bit-5 reset method (Tomas Henzl) [749187 695493]
  - [block] cciss: improve controller reset failure detection (Tomas Henzl) [749187 695493]
  - [block] cciss: wait longer after resetting controller (Tomas Henzl) [749187 695493]
  - [block] cciss: fix export resettable host attribute fix (Tomas Henzl) [749187 695493]
  - [block] cciss: export resettable host attribute (Tomas Henzl) [749187 695493]
  - [block] cciss: use short tags where supported (Tomas Henzl) [749187 695493]
  - [block] cciss: Fix memory leak in cciss_sysfs_stat_inquiry (Tomas Henzl) [749187 695493]
  - [block] cciss: do not reorder commands in internal queue (Tomas Henzl) [749187 695493]
  - [block] cciss: fix panic in cciss_revalidate (Tomas Henzl) [749187 695493]
  - [block] cciss: Do not remove /proc entry if we never created it (Tomas Henzl) [749187 695493]
  - [block] cciss: do not leak stack to userland (Tomas Henzl) [749187 695493]
  - [block] cciss: catch kmalloc failure of h->scatter_list (Tomas Henzl) [749187 695493]
  - [block] cciss: fix missed command status value CMD_UNABORTABLE (Tomas Henzl) [749187 695493]
  - [block] cciss: remove ifdef'ed out interrupt_not_for_us (Tomas Henzl) [749187 695493]
  - [block] cciss: change printks to dev_warn (Tomas Henzl) [749187 695493]
  - [block] cciss: use consistent variable names (Tomas Henzl) [749187 695493]
  - [block] cciss: mark performant mode function as __devinit (Tomas Henzl) [749187 695493]
  - [block] cciss: cleanup some debug ifdefs (Tomas Henzl) [749187 695493]
  - [block] cciss: fix leak of ioremapped memory in init error path (Tomas Henzl) [749187 695493]
  - [block] cciss: Fix panic in multipath configurations (Tomas Henzl) [749187 695493]
  - [block] cciss: version bump (Tomas Henzl) [749187 695493]
  - [block] cciss: add option to enforce simple mode (Tomas Henzl) [749187 695493]
  - [block] cciss: patch to make kdump work in rhel5 (Tomas Henzl) [749187 695493]
  - [block] cciss: cleanup warnings (Tomas Henzl) [749187 695493]
  - [block] cciss: patch to support kdump on new controllers (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out code to find max commands (Tomas Henzl) [749187 695493]
  - [block] cciss: split out cciss_defs (Tomas Henzl) [749187 695493]
  - [block] cciss: scsi tape updates (Tomas Henzl) [749187 695493]
  - [block] cciss: remove fail_all_cmds (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_passthru (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_getdrivver (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_getfirmver (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_getbustypes (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_getheartbeat (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_setnodename (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_getnodename (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_setintinfo (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_getintinfo (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_getpciinfo (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_reset_devices (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_find_cfg_addrs (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_wait_for_mode_change_ack (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_p600_dma_prefetch_quirk (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_enable_scsi_prefetch (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out CISS_signature_present (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_find_board_params (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_find_cfgtables (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out wait_for_board_ready (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_find_memory_BAR (Tomas Henzl) [749187 695493]
  - [block] cciss: remove board_id from cciss_interrupt_mode (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_board_disabled (Tomas Henzl) [749187 695493]
  - [block] cciss: factor out cciss_lookup_board_id (Tomas Henzl) [749187 695493]
  - [block] cciss: save off pdev struct early (Tomas Henzl) [749187 695493]
  - [block] cciss: add performant mode support (Tomas Henzl) [749187 695493]
  - [block] cciss: remove generic sa support (Tomas Henzl) [749187 695493]
  - [block] cciss: copyright update (Tomas Henzl) [749187 695493]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-238.33.1.el5]
changelog:
  - [misc] irq: Check for spurious IRQ only on disabled IRQs (Prarit Bhargava) [759386 756412]
  - [x86] apic: ack all pending irqs when crashed/on kexec (hiro muneda) [756943 742079]
  - [misc] irq: fix interrupt handling for kdump under high load (Stefan Assmann) [761535 720212]
  - [kernel] irq: Note and disable spurious interrupts on kexec (Prarit Bhargava) [761539 611407]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-238.34.1.el5]
changelog:
  - [fs] hfs: add sanity check for file name length (Eric Sandeen) [770598 755433] {CVE-2011-4330}
  - [net] ipv6: make fragment identifications less predictable (Jiri Pirko) [773543 723431] {CVE-2011-2699}
  - [net] ipv6: Remove unused skb argument of ipv6_select_ident (Jiri Pirko) [773543 723431] {CVE-2011-2699}
  - [xen] hvm: build guest timers on monotonic system time (Paolo Bonzini) [773359 705725]
  - [xen] hvm: explicitly use the TSC as the base for the hpet (Paolo Bonzini) [773359 705725]
  - [xen] hvm: provide param to disable HPET in HVM guests (Paolo Bonzini) [773360 702652]
  - [xen] add accessors for arch/x86/hvm/hpet.c (Paolo Bonzini) [773359 418501]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-238.35.1.el5]
changelog:
  - [misc] Move exit_robust_list to mm_release, null lists on cleanup (Laszlo Ersek) [789370 750283] {CVE-2012-0028}
  - [block] disable SG_IO ioctls on virtio-blk devices (Paolo Bonzini) [784658 771592]
  - [scsi] sd: fix 32-on-64 block device ioctls (Paolo Bonzini) [783031 752386] {CVE-2011-4127}
  - [md] dm: do not forward ioctls from LVs to the underlying devices (Paolo Bonzini) [783031 752386] {CVE-2011-4127}
  - [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [783031 752386] {CVE-2011-4127}
  - [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [783031 752386] {CVE-2011-4127}
  - [xen] make test_assign_device domctl dependent on intremap hw (Laszlo Ersek) [790780 740203]
  - [xen] Propagate target dom within XEN_DOMCTL_test_assign_device (Alexander Gordeev) [790780 740203]
  - [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [785089 716302] {CVE-2011-1898}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-238.36.1.el5]
changelog:
  - [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [795379 747946] {CVE-2011-3638}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-238.37.1.el5]
changelog:
  - [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Alexander Gordeev) [809790 804800]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-238.38.1.el5]
changelog:
  - [net] ipv6: fix skb double free in xfrm6_tunnel (Jiri Benc) [816270 743375] {CVE-2012-1583}
  - [net] sunrpc: Don't use list_for_each_entry_safe in rpc_wake_up (Steve Dickson) [817570 809937]
  - [scsi] fc class: fix scanning when devs are offline (Mike Christie) [816683 799530]
  - [md] dm-multipath: delay retry of bypassed pg (Mike Christie) [816683 799530]
  - [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807929 805799]
  - [net] igb: Fix for Alt MAC Address feature on 82580 and later (Stefan Assmann) [813195 748792]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-238.39.1.el5]
changelog:
  - [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [817489 813431] {CVE-2012-0217}
  - [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [817489 813431] {CVE-2012-0217}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-238.40.1.el5]
changelog:
  - [x86_32] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [835449 834562]
  - [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [827064 816106] {CVE-2012-2136}
  - [x86_64] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [825981 818787]
  - [x86] disable TSC synchronization when using kvmclock (Marcelo Tosatti) [834557 799170]
  - [fs] jbd: fix write_metadata_buffer and get_write_access race (Eric Sandeen) [833764 494927]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-238.43.1.el5]
changelog:
  * Fri Jul 13 2012 Alexander Gordeev <agordeev@redhat.com> [2.6.18-238.42.1.el5]
  - [fs] nfs: Do not allow multiple mounts on same mountpoint when using -o noac (Sachin Prabhu) [840020 839753]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-238.45.1.el5]
changelog:
  - [net] sfc: Fix max no of TSO segments and min TX queue size (Alexander Gordeev) [852354 845555] {CVE-2012-3412}
  - [fs] hfsplus: Buffer overflow in the HFS plus filesystem (Jacob Tanenbaum) [825332 820256] {CVE-2012-2319}
  - [misc] ERESTARTNOINTR seen from fork call in userspace (Oleg Nesterov) [855754 693822]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-238.47.1.el5]
changelog:
  - [net] dl2k: Clean up rio_ioctl (Weiping Pan) [869030 818823] {CVE-2012-2313}
  - [edac] i7300_edac: Fix error cleanup logic (Mauro Carvalho Chehab) [866796 712948]
  - [net] netxen: support for GbE port settings (Chad Dupuis) [865304 660437]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-238.48.1.el5]
changelog:
  - [scsi] libfc: fix indefinite rport restart (Neil Horman) [884738 595184]
  - [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884738 595184]
  - [scsi] libfc: Fix remote port restart problem (Neil Horman) [884738 595184]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-238.2.1.el5]
changelog:
  - [acpi] bus: check if list is empty before kfree()ing it (Matthew Garrett) [670797 670373]
  - [net] ipv6: fragment local tunnel IPSec6 pkts if needed (Herbert Xu) [670824 661110]
  - [block] cciss: fix null pointer problem in tur usage (Tomas Henzl) [668976 664592]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-238.49.1.el5]
changelog:
  - [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [916531 912072] {CVE-2013-0871}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-229.el5]
changelog:
  - [pci] include DL580 G7 in bfsort whitelist (Tony Camuso) [644879]
  - [net] igb: fix TX hang when loading igb with max_vfs > 7 (Stefan Assmann) [645284]
  - [virt] fix timekeeping_use_tsc check in init_tsc_timer (Prarit Bhargava) [643926]
  - [net] bonding: support netconsole over bonded link (Neil Horman) [235343]
  - [virt] xen: increase txqueuelen of netback vif devices (Miroslav Rezanina) [539626]
  - [sound] core: prevent heap corruption in snd_ctl_new (Jerome Marchand) [638484] {CVE-2010-3442}
  - [net] updated drivers need version string updates too (Andy Gospodarek) [635027]
  - [misc] softlockup: increase timeout to 60 seconds (Don Zickus) [643707]
  - [virt] xen: fix vdso failure under xen pv environment (Danny Feng) [644860]
  - [scsi] qla2xxx: fix zero test on array in ql_fc_loopback (Chad Dupuis) [644136]
  - [usb] net/catc: change NIC's TX_MAX_BURST, fixes probe (Bob Picco) [637826]
  - [virt] console: don't block guest if host doesn't read (Amit Shah) [644735]
  - [media] video: remove compat code for VIDIOCSMICROCODE (Mauro Carvalho Chehab) [642471] {CVE-2010-2963}
  - [xen] vtd: let IOMMU use another IRQ without conflict (Don Dugger) [575790]
  - [net] bonding: correctly process non-linear skbs (Andy Gospodarek) [619070]
  - [net] rds: fix local privilege escalation (Eugene Teo) [642898] {CVE-2010-3904}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.4.1.el5]
changelog:
  - [serial] ifdef for powerpc, to only add functionality to this arch (Steve Best) [732377 707051]
  - [serial] 8250: Fix capabilities when changing the port type (Steve Best) [732377 707051]
  - [serial] 8250_pci EEH support for IBM/Digi PCIe 2-port Adapter (Steve Best) [732377 707051]
  - [serial] 8250_pci: Add support for Digi/IBM PCIe 2-port Adapter (Steve Best) [732377 707051]
  - [fs] ecryptfs: Add mount option to check uid of mounting device (Eric Sandeen) [731173 731174] {CVE-2011-1833}
  - [scsi] qla2xxx: Re-add checks for null fcport references (Chad Dupuis) [736275 728219]
  - [net] ipv6: make fragment identifications less predictable (Jiri Pirko) [723430 723431] {CVE-2011-2699}
  - [net] ipv6: Remove unused skb argument of ipv6_select_ident (Jiri Pirko) [723430 723431] {CVE-2011-2699}
  - [misc] taskstats: don't allow duplicate entries in listener mode (Jerome Marchand) [715449 715450] {CVE-2011-2484}
  - [net] gro: Only reset frag0 when skb can be pulled (Herbert Xu) [726553 679682] {CVE-2011-2723}
  - [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}
  - [xen] iommu: disable bus-mastering on hw that causes IOMMU fault (Laszlo Ersek) [730342 730343] {CVE-2011-3131}
  - [usb] auerswald: fix buffer overflow (Don Zickus) [722395 722396] {CVE-2009-4067}
  - [fs] cifs: fix possible memory corruption in CIFSFindNext (Jeff Layton) [732870 736654 732869 732471] {CVE-2011-3191}
  - [fs] cifs: revert special handling for matching krb5 sessions (Jeff Layton) [697395 697396] {CVE-2011-1585}
  - [fs] cifs: check for NULL session password (Jeff Layton) [697395 697396] {CVE-2011-1585}
  - [fs] cifs: fix NULL pointer dereference in cifs_find_smb_ses (Jeff Layton) [697395 697396] {CVE-2011-1585}
  - [fs] cifs: clean up cifs_find_smb_ses (Jeff Layton) [697395 697396] {CVE-2011-1585}
  - [net] be2net: account for skb allocation failures (Ivan Vecera) [733152 730108]
  - [net] bnx2x: downgrade Max BW error message to debug (Michal Schmidt) [732440 727614]
  - [net] sock: do not change prot->obj_size (Jiri Pirko) [736742 725713]
  - [net] be2net: Fix Tx stall issue (Ivan Vecera) [732946 722549]
  - [net] be2net: rx-dropped wraparound fix (Ivan Vecera) [732945 722302]
  - [net] be2net: fix netdev_stats_update (Ivan Vecera) [732945 722302]
  - [char] tpm: Fix uninitialized usage of data buffer (Stanislaw Gruszka) [684672 684673] {CVE-2011-1160}
  - [fs] ext4: Fix max size and logical block counting of extent file (Lukas Czerner) [722562 722563] {CVE-2011-2695}
  - [fs] nfs: have nfs_flush_list issue FLUSH_SYNC writes in parallel (Jeff Layton) [730686 728508]
  - [xen] mm: fix race with ept_entry management (Andrew Jones) [730685 729529]
  - [xen] hvm: support more opcodes for MMIO (Paolo Bonzini) [728518 723755]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.5.1.el5]
changelog:
  - [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [732775 675781]
  - [fs] proc: Fix procfs race vs rmmod or hot-remove (David Howells) [732775 675781]
  - [net] Compute protocol seq numbers and fragment IDs using MD5 (Jiri Pirko) [732662 732663] {CVE-2011-3188}
  - [crypto] Move md5_transform to lib/md5.c (Jiri Pirko) [732662 732663] {CVE-2011-3188}
  - [fs] nfs: Fix client not honoring nosharecache mount option (David Jeffery) [734772 730097]
  - [mm] avoid wrapping vm_pgoff in mremap and stack expansion (Jerome Marchand) [716543 716544] {CVE-2011-2496}
  - [mm] Fix incorrect off-by-one centisec dirty values (Larry Woodman) [733665 691087]
  - [net] bnx2x: fix bringup of BCM57710 (Michal Schmidt) [737475 680411]
  - [virt] xen/netfront: no disable s/g when renegotiating features (Paolo Bonzini) [738392 733416]
  - [fs] aio: fix aio+dio completion path regression w/3rd-party bits (Jeff Moyer) [734157 727504]
  - [virt] xen: Allow arbitrary mtu size until frontend connected (Paolo Bonzini) [738389 697021]
  - [misc] hypervisor: fix race in interrupt hook code (Prarit Bhargava) [730689 692966]
  - [net] cnic, bnx2: Check iSCSI support early in bnx2_init_one (Neil Horman) [734761 710272]
  - [net] igb: fix WOL on 2nd port on i350 (Stefan Assmann) [730682 718988]
  - [misc] irq: fix interrupt handling for kdump under high load (Stefan Assmann) [728521 720212]


author: Don Howard <dhoward@redhat.com> [2.6.18-274.6.1.el5]
changelog:
  - [net] bridge: fix use after free in __br_deliver (Amerigo Wang) [730949 703045] {CVE-2011-2942}
  - [misc] remove	div_long_long_rem (Prarit Bhargava) [732879 732614] {CVE-2011-3209}
  - [net] be2net: fix crash receiving non-member VLAN packets (Ivan Vecera) [736430 730239] {CVE-2011-3347}
  - [net] be2net: Use NTWK_RX_FILTER command for promiscous mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
  - [net] be2net: non-member vlan pkts not received in promisc mode (Ivan Vecera) [736430 730239] {CVE-2011-3347}
  - [net] be2net: remove bogus unlikely on vlan check (Ivan Vecera) [736430 730239] {CVE-2011-3347}
  - [x86] nmi: make NMI_NONE default watchdog in x86_64 hvm guests (Laszlo Ersek) [739823 707966]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.7.1.el5]
changelog:
  - Revert: [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.10.1.el5]
changelog:
  - [net] be2net: enable NETIF_F_LLTX and add own locking of Tx path (Ivan Vecera) [750912 731806]
  - [net] be2net: fix multicast filter programming (Ivan Vecera) [750912 731806]
  - [net] be2net: fix cmd-rx-filter not notifying MCC (Ivan Vecera) [750912 731806]
  - [net] be2net: use RX_FILTER cmd to program multicast addresses (Ivan Vecera) [750912 731806]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.11.1.el5]
changelog:
  - [fs] gfs2: speed up large file delete/unlink (Robert S Peterson) [743806 738440]
  - [fs] cifs: fix wrong buffer length returned by SendReceive (Sachin Prabhu) [750842 720363]
  - [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
  - [virt] xen/netback: disable features not supported by netfront (Paolo Bonzini) [746600 746225]
  - [fs] nfs: don't redirty inodes with no outstanding commits (Jeff Layton) [750477 739665]
  - [net] tg3: call netif_carrier_off to initialize operstate value (John Feeney) [744700 635982]
  - [xen] make test_assign_device domctl dependent on intremap hw (Laszlo Ersek) [745726 740203]
  - [xen] Propagate target dom within XEN_DOMCTL_test_assign_device (Laszlo Ersek) [745726 740203]
  - [net] sctp: encode PROTOCOL VIOLATION error cause correctly (Thomas Graf) [750457 636828]
  - [fs] cifs: always do is_path_accessible check in cifs_mount (Jeff Layton) [738299 738300] {CVE-2011-3363}
  - [fs] cifs: add fallback in is_path_accessible for old servers (Jeff Layton) [738299 738300] {CVE-2011-3363}
  - [char] tpm: Zero buffer after copying to userspace (Jiri Benc) [732630 732631] {CVE-2011-1162}
  - [fs] hfs: fix hfs_find_init() sb->ext_tree NULL ptr oops (Phillip Lougher) [712775 712776] {CVE-2011-2203}
  - [net] sctp: Set correct error cause value for missing parameters (Thomas Graf) [750451 629938]
  - [misc] kernel: plug taskstats io infoleak (Jerome Marchand) [716845 716846] {CVE-2011-2494}
  - [usb] Make device reset stop retrying after disconnect (Don Zickus) [750841 709699]
  - [net] ipv6: properly use ICMP6MSGOUT_INC_STATS in ndisc_send_skb (Jiri Pirko) [743611 698728]
  - [scsi] Reduce error recovery time by reducing use of TURs (Mike Christie) [741273 694625]
  - [mm] s390: fix first time swap use results in heavy swapping (Hendrik Brueckner) [747876 722482]
  - [virt] xen: fix GFP mask handling in dma_alloc_coherent (Laszlo Ersek) [742282 730247]
  - [s390] kernel: fix system hang if hangcheck timer expires (Hendrik Brueckner) [747872 730313]
  - [usb] fix interface sysfs file-creation bug (Don Zickus) [750848 637930]
  - [usb] don't touch sysfs stuff when altsetting is unchanged (Don Zickus) [750848 637930]
  - [base] Fix potential deadlock in driver core (Don Zickus) [750848 637930]
  - [security] keys: Fix NULL deref in user-defined key type (David Howells) [751300 751301]
  - [xen] passthrough: block VT-d MSI trap injection (Paolo Bonzini) [716301 716302] {CVE-2011-1898}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.13.1.el5]
changelog:
  - [fs] dcache: Log ELOOP rather than creating a loop (David Howells) [754129 717959]
  - [fs] dcache: Fix loop checks in d_materialise_unique (David Howells) [754129 717959]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.14.1.el5]
changelog:
  - [input] evdev: Fix spin lock context in evdev_pass_event() (Don Zickus) [744147 734900]
  - [fs] dcache: Fix dentry loop detection deadlock (David Howells) [754129 717959]
  - [input] evdev: disable interrupts when processing events (Don Zickus) [744147 734900]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.15.1.el5]
changelog:
  - [net] e1000e: Avoid wrong check on TX hang (Dean Nelson) [766485 746272]
  - [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749159 749160] {CVE-2011-4077}
  - [pci] intel-iommu: Default to non-coherent for unattached domains (Don Dutile) [766803 753924]
  - [fs] nfs: remove BUG() from encode_share_access() (Jeff Layton) [755442 754901] {CVE-2011-4324}
  - [misc] irq: Check for spurious IRQ only on disabled IRQs (Prarit Bhargava) [759387 756412]
  - [fs] hfs: add sanity check for file name length (Eric Sandeen) [755432 755433] {CVE-2011-4330}
  - [fs] proc: Fix select on /proc files without ->poll (David Howells) [755483 751214]
  - [fs] nfs: Ensure we mark inode as dirty if early exit from commit (Jeff Layton) [755482 714020]
  - [x86] apic: ack all pending irqs when crashed/on kexec (hiro muneda) [750460 742079]
  - [virt] kvm: fix regression w/ 32 bit KVM clock (Rik van Riel) [747875 753789 751742 731599]
  - [virt] kvm: fix lost tick accounting for 32 bit kvm-clock (Rik van Riel) [747875 731599]
  - [fs] jbd/jbd2: validate sb->s_first in journal_get_superblock (Eryu Guan) [753343 706810] {CVE-2011-4132}
  - [net] igb: enable link power down (Stefan Assmann) [752735 742514]
  - [fs] proc: fix oops on invalid /proc/<pid>/maps access (Johannes Weiner) [747851 747699] {CVE-2011-3637}
  - [block] cciss: bump driver version (Tomas Henzl) [758024 714129]
  - [block] cciss: need to delay after a PCI Power Management reset (Tomas Henzl) [758024 714129]
  - [block] cciss: auto engage scsi susbsystem (Tomas Henzl) [758024 714129]
  - [block] cciss: store pdev in hba struct (Tomas Henzl) [758024 714129]
  - [block] cciss: use consistent variable names (Tomas Henzl) [758024 714129]
  - [block] cciss: add a commandline switch for simple mode (Tomas Henzl) [758024 714129]
  - [fs] proc: close race with exec in mem_read() (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [mm] implement access_remote_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [mm] factor out main logic of access_process_vm (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [mm] use mm_struct to resolve gate vma's in __get_user_pages (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [mm] make in_gate_area take mm_struct instead of a task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [mm] make get_gate_vma take mm_struct instead of task_struct (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [x86_64] mark assoc mm when running task in 32 bit compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [misc] sched: add ctx tag to mm running task in ia32 compat mode (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [fs] proc: require the target to be tracable (or yourself) (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [fs] proc: close race in /proc/*/environ (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [fs] proc: report errors in /proc/*/*map* sanely (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [fs] proc: shift down_read(mmap_sem) to the caller (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [fs] detect exec transition phase with new mm but old creds (Johannes Weiner) [692041 692042] {CVE-2011-1020}
  - [net] igb: fix i350 SR-IOV failture (Stefan Assmann) [741877 714313]
  - [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - [fs] nfs: Fix an O_DIRECT Oops (Jeff Layton) [755457 754620] {CVE-2011-4325}
  - [net] sctp: Fix another race during accept/peeloff (Thomas Graf) [757146 714870] {CVE-2011-4348}
  - [scsi] isci: fix 32-bit operation when CONFIG_HIGHMEM64G=n (Phillip Lougher) [750458 713904]
  - [net] tg3: Only allow phy ioctls while netif_running (Phillip Lougher) [746343 683393]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.17.1.el5]
changelog:
  - Revert:  [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - Revert:  [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - Revert:  [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - Revert:  [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.18.1.el5]
changelog:
  - [misc] Move exit_robust_list to mm_release, null lists on cleanup (Laszlo Ersek) [771774 750283] {CVE-2012-0028}
  - [block] disable SG_IO ioctls on virtio-blk devices (Paolo Bonzini) [773322 771592]
  - [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
  - [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [747943 747946] {CVE-2011-3638}
  - [scsi] don't fail scans when host is in recovery (Rob Evers) [772162 657345]
  - [fs] jbd2: clear BH_Delay & BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [783477 783284] {CVE-2011-4086}
  - [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772868 772869] {CVE-2012-0207}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-268.el5]
changelog:
  - [net] sctp: fix calc of INIT/INIT-ACK chunk length to set (Thomas Graf) [695385] {CVE-2011-1573}
  - [scsi] ibmvfc: Fix Virtual I/O failover hang (Steve Best) [710477]
  - [kernel] irq: Note and disable spurious interrupts on kexec (Prarit Bhargava) [611407]
  - [net] bnx2x: Update firmware to 6.2.9 (Michal Schmidt) [711079]
  - [net] bnx2x: Update bnx2x_firmware.h to version 6.2.9 (Michal Schmidt) [711079]
  - [net] xt_hashlimit: fix race between htable_destroy and htable_gc (Jiri Pirko) [705905]
  - [fs] cifs: clear write bits if ATTR_READONLY is set (Justin Payne) [700263]
  - [net] bna: clear some statistics before filling them (Ivan Vecera) [711990]
  - [net] ixgbe: Disable RSC by default (Herbert Xu) [703416]
  - [scsi] isci: fix scattergather list handling for smp commands (David Milburn) [710584]
  - [net] netconsole: prevent setup netconsole on a slave device (Amerigo Wang) [698873]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-269.el5]
changelog:
  - [mm] only throttle page dirtying for specially marked BDIs (Jeff Layton) [711450]
  - Revert: [base] Fix potential deadlock in driver core (Don Zickus) [703084]
  - [fs] proc: Fix rmmod/read/write races in /proc entries (David Howells) [675781]
  - [scsi] qla4xxx: Update driver version to V5.02.04.01.05.07-d0 (Chad Dupuis) [704153]
  - [scsi] qla4xxx: clear SCSI COMPLETION INTR bit during F/W init (Chad Dupuis) [704153]
  - [usb] wacom: add support for DTU-2231 (Aristeu Rozanski) [683549]
  - [xen] fix MAX_EVTCHNS definition (Laszlo Ersek) [701243] {CVE-2011-1763}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-270.el5]
changelog:
  - [fs] proc: fix compile warning in pdeaux addition (Jarod Wilson) [675781]
  - [net] bluetooth: l2cap and rfcomm: fix info leak to userspace (Thomas Graf) [703021]
  - [net] inet_diag: fix inet_diag_bc_audit data validation (Thomas Graf) [714539] {CVE-2011-2213}
  - [misc] signal: fix kill signal spoofing issue (Oleg Nesterov) [690031] {CVE-2011-1182}
  - [fs] proc: fix signedness issue in next_pidmap (Oleg Nesterov) [697827] {CVE-2011-1593}
  - [char] agp: fix OOM and buffer overflow (Jerome Marchand) [699010] {CVE-2011-1746}
  - [char] agp: fix arbitrary kernel memory writes (Jerome Marchand) [699006] {CVE-2011-1745 CVE-2011-2022}
  - [net] be2net: fix queue creation order and pci error recovery (Ivan Vecera) [711653]
  - [infiniband] core: Handle large number of entries in poll CQ (Jay Fenlason) [668371] {CVE-2010-4649 CVE-2011-1044}
  - [infiniband] core: fix panic in ib_cm:cm_work_handler (Jay Fenlason) [679996] {CVE-2011-0695}
  - [fs] validate size of EFI GUID partition entries (Anton Arapov) [703026] {CVE-2011-1776}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-271.el5]
changelog:
  - [net] igmp: ip_mc_clear_src only when we no users of ip_mc_list (Veaceslav Falico) [707179]
  - [scsi] cxgb3i: fix programing of dma page sizes (Neil Horman) [710498]
  - [xen] hvm: secure vmx cpuid (Andrew Jones) [706325] {CVE-2011-1936}
  - [xen] hvm: secure svm_cr_access (Andrew Jones) [703716] {CVE-2011-1780}
  - [xen] hvm: svm support cleanups (Andrew Jones) [703716] {CVE-2011-1780}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-272.el5]
changelog:
  - [xen] x86: spinlock support for up to 255 CPUs (Laszlo Ersek) [713123]
  - [xen] remove block scope mtrr identifiers shadowing file scope (Laszlo Ersek) [713123]
  - [xen] Actually hold back MTRR init while booting secondary CPUs (Laszlo Ersek) [713123]
  - [xen] remove unused mtrr_bp_restore (Laszlo Ersek) [713123]
  - [xen] x86: Fix crash on amd iommu systems (Igor Mammedov) [714275]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-273.el5]
changelog:
  - Revert: [fs] proc: Fix rmmod/read/write races in /proc entries (Jarod Wilson) [717068]
  - [xen] disregard trailing bytes in an invalid page (Paolo Bonzini) [717742]
  - [xen] prep __get_instruction_length_from_list for partial buffers (Paolo Bonzini) [717742]
  - [xen] remove unused argument to __get_instruction_length (Paolo Bonzini) [717742]
  - [xen] let __get_instruction_length always read into own buffer (Paolo Bonzini) [717742]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-274.1.1.el5]
changelog:
  - [net] sctp: fix memory reclaim and panic in sctp_sock_rfree (Thomas Graf) [714869 714867]
  - [x86_64] Revert ACPI APIC mode test (Prarit Bhargava) [728163 721361]
  - [net] sctp: reset packet information after packet transmit (Thomas Graf) [727592 725573]
  - [fs] block: initialise bd_super in bdget (Lachlan McIlroy) [726628 707425]
  - [fs] nfs: Remove bogus call to nfs4_drop_state_owner (Jeff Layton) [726625 724923]
  - [net] be2net: clear interrupt bit in be_probe (Ivan Vecera) [723552 713703]
  - [net] be2net: remove certain cmd failure logging (Ivan Vecera) [726619 716821]
  - [wireless] nl80211: check for valid SSID size in scan operation (Stanislaw Gruszka) [718154 718155] {CVE-2011-2517}
  - [fs] xfs: handle NULL mount struct in error reports (Eric Sandeen) [727835 720551]
  - [fs] proc: restrict access to /proc/PID/io (Oleg Nesterov) [716827 716828] {CVE-2011-2495}
  - [fs] lockd: don't use file's credentials on RPCSEC_GSS mounts (Max Matveev) [722855 701574]
  - [fs] xfs: add a missing mutex_unlock to a dio error path (Jeff Moyer) [727590 718232]
  - [net] sunrpc: Don't hang forever on NLM unlock requests (Jeff Layton) [709546 709547] {CVE-2011-2491}
  - [xen] x86_emulate: Fix SAHF emulation (Igor Mammedov) [718883 718884]
  - [xen] Fix x86_emulate handling of imul with immediate operands (Igor Mammedov) [712885 700565]
  - [fs] Fix wrongly vfree'ing a kmalloc'ed area (Larry Woodman) [721300 719495]
  - [fs] dlm: bump default hash table and maximum allocatable sizes (Bryn M. Reeves) [719930 715603]
  - [net] tipc: Overhaul of socket locking logic (Max Matveev) [719746 704192]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-265.el5]
changelog:
  - [scsi] be2iscsi: Fix MSIX interrupt names (Prarit Bhargava) [704735]
  - [misc] signal: fix SIGPROF keeps large task from completing fork (Oleg Nesterov) [645528]
  - [fs] gfs2: fix processes waiting on already-available inode glock (Robert S Peterson) [694669]
  - Revert: [pci] msi: remove infiniband compat code (Prarit Bhargava) [636260]
  - Revert: [pci] msi: use msi_desc save areas in drivers/pci code (Prarit Bhargava) [636260]
  - Revert: [pci] msi: use msi_desc save areas in msi state functions (Prarit Bhargava) [636260]
  - Revert: [pci] msi: remove pci_save_msi|x_state() functions (Prarit Bhargava) [636260]
  - [s390] mm: diagnose 10 does not release memory above 2GB (Hendrik Brueckner) [701275]
  - [input] evdev: implement proper locking (Marc Milgram) [680561]
  - [input] evdev: rename list to client in handlers (Marc Milgram) [680561]
  - [net] netpoll: disable netpoll when enslave a device (Amerigo Wang) [698873]
  - [net] disable lro on phys device when dev is a vlan (Neil Horman) [696374]
  - [scsi] qla2xxx: Update version number to 8.03.07.03.05.07-k (Chad Dupuis) [686462]
  - [scsi] qla2xxx: Free firmware PCB on logout request (Chad Dupuis) [686462]
  - [scsi] qla2xxx: dump registers for more info about ISP82xx errors (Chad Dupuis) [686462]
  - [scsi] qla2xxx: Updated the reset sequence for ISP82xx (Chad Dupuis) [686462]
  - [scsi] qla2xxx: Update copyright banner (Chad Dupuis) [686462]
  - [scsi] qla2xxx: Perform FCoE context reset before adapter reset (Chad Dupuis) [686462]
  - [scsi] qla2xxx: Limit logs in case device state does not change (Chad Dupuis) [686462]
  - [scsi] qla2xxx: Abort pending commands for faster reset recovery (Chad Dupuis) [686462]
  - [scsi] qla2xxx: Check for match before setting FCP-priority info (Chad Dupuis) [686462]
  - [scsi] qla2xxx: Display PortID info during FCP command-status (Chad Dupuis) [686462]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-266.el5]
changelog:
  - [scsi] megaraid: update to driver version 5.38-rh1 (Tomas Henzl) [706244]
  - [block] cciss: fix mapping of config table (Tomas Henzl) [695493]
  - [block] cciss: fix dev_info null pointer deref after freeing h (Tomas Henzl) [695493]
  - [block] cciss: do not call request_irq with spinlocks held (Tomas Henzl) [695493]
  - [block] cciss: prototype cciss_sent_reset to fix error (Tomas Henzl) [695493]
  - [block] cciss: mark functions as dev_init to clean up warnings (Tomas Henzl) [695493]
  - [block] cciss: timeout if soft reset fails (Tomas Henzl) [695493]
  - [block] cciss: use cmd_alloc for kdump (Tomas Henzl) [695493]
  - [block] cciss: Use cciss not hpsa in init_driver_version (Tomas Henzl) [695493]
  - [block] cciss: reduce stack usage a reset verifying code (Tomas Henzl) [695493]
  - [block] cciss: do not store pci state on stack (Tomas Henzl) [695493]
  - [block] cciss: no PCI power management reset method if known bad (Tomas Henzl) [695493]
  - [block] cciss: increase timeouts for post-reset no-ops (Tomas Henzl) [695493]
  - [block] cciss: remove superfluous sleeps around reset code (Tomas Henzl) [695493]
  - [block] cciss: do soft reset if hard reset is broken (Tomas Henzl) [695493]
  - [block] cciss: flush writes in interrupt mask setting code (Tomas Henzl) [695493]
  - [block] cciss: clarify messages around reset behavior (Tomas Henzl) [695493]
  - [block] cciss: increase time to wait for board reset to start (Tomas Henzl) [695493]
  - [block] cciss: get rid of message related magic numbers (Tomas Henzl) [695493]
  - [block] cciss: factor out irq request code (Tomas Henzl) [695493]
  - [block] cciss: factor out scatterlist allocation functions (Tomas Henzl) [695493]
  - [block] cciss: factor out command pool allocation functions (Tomas Henzl) [695493]
  - [block] cciss: Define print_cmd even without tape support (Tomas Henzl) [695493]
  - [block] cciss: do not use bit 2 doorbell reset (Tomas Henzl) [695493]
  - [block] cciss: use new doorbell-bit-5 reset method (Tomas Henzl) [695493]
  - [block] cciss: improve controller reset failure detection (Tomas Henzl) [695493]
  - [block] cciss: wait longer after resetting controller (Tomas Henzl) [695493]
  - [infiniband] cxgb4: Use completion objects for event blocking (Steve Best) [708081]
  - [fs] ext4: fix quota deadlock (Eric Sandeen) [702197]
  - [fs] ext3, ext4: update ctime when changing permission by setfacl (Eric Sandeen) [709224]
  - [scsi] bfa: properly reinitialize adapter during kdump (Rob Evers) [710300]
  - [scsi] lpfc: Update for 8.2.0.96.2p release (Rob Evers) [707336]
  - [scsi] lpfc: Fix back to back Flogis sent without logo (Rob Evers) [707336]
  - [scsi] lpfc: Fix not updating wwnn and wwpn after name change (Rob Evers) [707336]
  - [scsi] lpfc: Fix CT command never completing on Big Endian host (Rob Evers) [707336]
  - [scsi] lpfc: Revert fix that introduced a race condition (Rob Evers) [707336]
  - [scsi] lpfc: Fix crash in rpi clean when driver load fails (Rob Evers) [707336]
  - [scsi] lpfc: fix limiting RPI Count to a minimum of 64 (Rob Evers) [707336]
  - [scsi] lpfc: fix overriding CT field for SLI4 IF type 2 (Rob Evers) [707336]
  - [scsi] lpfc: force retry in queuecommand when port transitioning (Rob Evers) [707336]
  - [scsi] lpfc: Update version for 8.2.0.96.1p release (Rob Evers) [698432]
  - [scsi] lpfc: Fix double byte swap on received RRQ (Rob Evers) [698432]
  - [scsi] lpfc: Fix Vports not sending FDISC after lips (Rob Evers) [698432]
  - [scsi] lpfc: Fix system crash during driver unload (Rob Evers) [698432]
  - [scsi] lpfc: Fix FCFI incorrect on received unsolicited frames (Rob Evers) [698432]
  - [scsi] lpfc: Fix driver sending FLOGI to a disconnected FCF (Rob Evers) [698432]
  - [scsi] lpfc: Fix bug with incorrect BLS Response to BLS Abort (Rob Evers) [698432]
  - [scsi] lpfc: Fix adapter on Powerpc unable to login into Fabric (Rob Evers) [698432]
  - [pci] export msi_desc struct and msi_desc array (Prarit Bhargava) [697666]
  - [net] bonding: prevent deadlock on slave store with alb mode (Neil Horman) [706414]
  - [net] mlx4: Fix dropped promiscuity flag (Michael S. Tsirkin) [592370]
  - [edac] amd64_edac: Fix NULL pointer on Interlagos (Mauro Carvalho Chehab) [705040 709529]
  - [scsi] ses: fix ses_set_fault() to set the fault LED function (James Takahashi) [682351]
  - [redhat] configs: config file changes for SES Enablement (James Takahashi) [682351]
  - [misc] enclosure: return ERR_PTR() on error (James Takahashi) [682351]
  - [misc] enclosure: fix oops while iterating enclosure_status array (James Takahashi) [682351]
  - [scsi] ses: fix VPD inquiry overrun (James Takahashi) [682351]
  - [scsi] ses: Fix timeout (James Takahashi) [682351]
  - [scsi] ses: fix data corruption (James Takahashi) [682351]
  - [scsi] ses: fix memory leaks (James Takahashi) [682351]
  - [scsi] ses: add new Enclosure ULD (James Takahashi) [682351]
  - [misc] enclosure: add support for enclosure services (James Takahashi) [682351]
  - [net] tg3: Include support for Broadcom 5719/5720 (John Feeney) [654956 696182 707299]
  - [misc] module: remove over-zealous check in __module_get() (Jon Masters) [616125]
  - [redhat] kabi: Add pci_ioremap_bar and pci_reset_function to kABI (Jon Masters) [677683]
  - [redhat] kabi: Add dm_put to kABI (Jon Masters) [707003]
  - [redhat] kabi: Add compat_alloc_user_space to kABI (Jon Masters) [703167]
  - [redhat] kabi: Add random32 and srandom32 to kABI (Jon Masters) [668815]
  - [redhat] kabi: Add cancel_work_sync to kABI (Jon Masters) [664991]
  - [net] bna: add r suffix to the driver version (Ivan Vecera) [709951]
  - [net] bna: fix for clean fw re-initialization (Ivan Vecera) [709951]
  - [net] bna: fix memory leak during RX path cleanup (Ivan Vecera) [709951]
  - [net] bridge: Disable multicast snooping by default (Herbert Xu) [506630]
  - [net] bonding: fix block_netpoll_tx imbalance (Andy Gospodarek) [704426]
  - [scsi] qla2xxx: Fix virtual port login failure after chip reset (Chad Dupuis) [703879]
  - [scsi] qla2xxx: fix dsd_list_len for dsd_chaining in cmd type 6 (Chad Dupuis) [703879]
  - [net] force new skbs to allocate a minimum of 16 frags (Amerigo Wang) [694308]
  - [pci] intel-iommu: Flush unmaps at domain_exit (Alex Williamson) [705455]
  - [pci] intel-iommu: Only unlink device domains from iommu (Alex Williamson) [705455]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-267.el5]
changelog:
  - [fs] xfs: prevent leaking uninit stack memory in FSGEOMETRY_V1 p2 (Phillip Lougher) [677266] {CVE-2011-0711}
  - [fs] xfs: prevent leaking uninit stack memory in FSGEOMETRY_V1 (Phillip Lougher) [677266] {CVE-2011-0711}
  - [net] core: Fix memory leak/corruption on VLAN GRO_DROP (Herbert Xu) [691565] {CVE-2011-1576}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-300.el5]
changelog:
  - [pci] intel-iommu: Default to non-coherent for unattached domains (Don Dutile) [753924]
  - [scsi] bfa: update driver embedded firmware to 3.0.0.0 (Rob Evers) [752972]
  - [scsi] bnx2i: Fix endian on TTT for NOP out transmission (Mike Christie) [752626]
  - [input] evdev: Fix spin lock context in evdev_pass_event() (Don Zickus) [734900]
  - [net] bnx2x: Add new PHY BCM54616 (Michal Schmidt) [733889]
  - [scsi] ipr: add definitions for additional adapter (Steve Best) [753910]
  - [scsi] ipr: Fix BUG on adapter dump timeout (Steve Best) [753910]
  - [scsi] ipr: Add support to flash FPGA and flash back DRAM images (Steve Best) [753910]
  - [scsi] ipr: Stop reading adapter dump prematurely (Steve Best) [753910]
  - [char] rtc: fix reported IRQ rate for when HPET is enabled (Prarit Bhargava) [740299]
  - [block] cciss: add Smart Array 5i to the kdump blacklist (Tomas Henzl) [752690]
  - [scsi] qla4xxx: Update version number to V5.02.04.00.05.08-d0 (Chad Dupuis) [714214]
  - [scsi] qla4xxx: Do not recover adapter if in FAILED state (Chad Dupuis) [714214]
  - [scsi] qla4xxx: Fix duplicate targets in BIOS do not show up (Chad Dupuis) [714214]
  - [scsi] qla4xxx: Fix rmmod kernel trace with ql4xdontresethba=1 (Chad Dupuis) [714214]
  - [scsi] qla4xxx: Add ql4xmaxcmds Command Line Parameter (Chad Dupuis) [714214]
  - [scsi] qla4xxx: Correct the locking mechanism (Chad Dupuis) [714214]
  - [scsi] qla4xxx: Minidump implementation (Chad Dupuis) [714214]
  - [scsi] qla4xxx: Device quiescent and loopback changes (Chad Dupuis) [714214]
  - [scsi] qla4xxx: Add new FLT firmware region (Chad Dupuis) [714214]
  - [scsi] qla4xxx: Prevent CPU lockups when ql4xdontresethba is set (Chad Dupuis) [714214]
  - [scsi] qla4xxx: Updated the reset sequence for ISP82xx (Chad Dupuis) [714214]
  - [scsi] qla4xxx: set set_ddb_entry with correct dma buffer (Chad Dupuis) [714214]
  - [scsi] qla4xxx: Reset retry_relogin_timer to trigger a relogin (Chad Dupuis) [714214]
  - [scsi] qla4xxx: Update ddb_entry on fw_ddb_index changes (Chad Dupuis) [714214]
  - [scsi] qla4xxx: BFS issue when same target devices added twice (Chad Dupuis) [714214]
  - [scsi] qla4xxx: mark device missing in recover adapter (Chad Dupuis) [714214]
  - [scsi] qla4xxx: Perform context resets on context failures (Chad Dupuis) [714214]
  - [scsi] qla4xxx: show hardware/firmware regs for more debug info (Chad Dupuis) [714214]
  - [scsi] qla4xxx: Pass correct fw_ddb_index to abort_task (Chad Dupuis) [714214]
  - [scsi] qla4xxx: check command already completed when abort issued (Chad Dupuis) [714214]
  - [scsi] qla4xxx: Use os_target_id to identify a session (Chad Dupuis) [714214]
  - [fs] dcache: Fix dentry loop detection deadlock (David Howells) [717959]
  - [net] cxgb4: fix ability to disable tx cksum and change tso (Neil Horman) [754711]
  - [fs] nfs: when attempting dir open, fall back on normal lookup (Jeff Layton) [740162]
  - [fs] nfs: remove BUG() from encode_share_access() (Jeff Layton) [754901]
  - [fs] epoll: use up all the timeout (Jason Baron) [705138]
  - [s390] qdio: avoid race leading to stall if CQ is used (Hendrik Brueckner) [753193]
  - [scsi] libsas: disable scanning lun > 0 on ata devices (David Milburn) [749309]
  - [scsi] isci: atapi support (David Milburn) [749309]
  - [scsi] isci: initial sgpio write support (David Milburn) [743965]
  - [scsi] isci: fix sgpio register definitions (David Milburn) [743965]
  - [scsi] isci: export phy events via ->lldd_control_phy() (David Milburn) [747670]
  - [scsi] isci: port state should be set to stopping on last phy (David Milburn) [747670]
  - [scsi] isci: fix decode of DONE_CRC_ERR TC completion status (David Milburn) [747670]
  - [scsi] isci: SATA/STP I/O only returned in normal path to libsas (David Milburn) [747670]
  - [scsi] isci: fix support for large smp requests (David Milburn) [747670]
  - [scsi] isci: fix missed unlock in apc_agent_timeout() (David Milburn) [747670]
  - [scsi] isci: fix event-get pointer increment (David Milburn) [747670]
  - [scsi] isci: add version number (David Milburn) [747670]
  - [scsi] isci: dynamic interrupt coalescing (David Milburn) [747670]
  - [scsi] isci: fix sata response handling (David Milburn) [747670]
  - [scsi] isci: Leave requests alone if already terminating (David Milburn) [747670]
  - [misc] irq: Check for spurious IRQ only on disabled IRQs (Prarit Bhargava) [756412]
  - [net] sctp: Fix another race during accept/peeloff (Thomas Graf) [714870]
  - [net] bonding: change slave->speed from u16 to u32 (Weiping Pan) [747547]
  - [scsi] bnx2i: set PF_NOFREEZE in IO thread (Mike Christie) [753729]
  - [fs] hfs: add sanity check for file name length (Eric Sandeen) [755433] {CVE-2011-4330}
  - [fs] aio: remove upper bound on retries (Jeff Moyer) [753271]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-301.el5]
changelog:
  - [net] e1000e: Avoid wrong check on TX hang (Dean Nelson) [746272]
  - [net] tg3: Fix TSO loopback test (John Feeney) [755202]
  - [net] ipvs: Fix memory leak when using one packet scheduler (Thomas Graf) [757882]
  - [net] ipv6: Defer device init until valid qdisc specified (Neil Horman) [758736]
  - [block] nbd: prevent sock_xmit from attempting to use NULL socket (Jeff Moyer) [676491]
  - [net] tg3: Scale back code that modifies MRRS (John Feeney) [758882]
  - [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749160] {CVE-2011-4077}
  - [net] cxgb3: key cxgb3 driver to work based on NETIF_F_GRO (Neil Horman) [754709]
  - [net] cxgb3: fix vfree BUG halt in rcu calback (Neil Horman) [756410]
  - [net] ipv4: fix IN_DEV_ACCEPT_LOCAL() (Weiping Pan) [758993]
  - [misc] cpu: Fix APIC calibration issues on VMware (Prarit Bhargava) [743368]
  - [net] igb: Loopback functionality support for i350 devices (Stefan Assmann) [758059]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-302.el5]
changelog:
  - [redhat] configs: Include generic ppc64 opts on all ppc64 configs (Alexander Gordeev) [748426]
  - [fs] xfs: don't block on buffer read errors (Boris Ranto) [709223]
  - [fs] nfs: Display lookupcache option in /proc/mounts (Sachin Prabhu) [706305]
  - [net] bonding: Don't allow mode change via sysfs w/slaves present (Veaceslav Falico) [768208]
  - [net] be2net: Fix disabling multicast promiscuous mode (Ivan Vecera) [751998]
  - [net] be2net: Fix endian issue in RX filter command (Ivan Vecera) [751998]
  - [net] be2net: Changing MAC Address of a VF was broken (Ivan Vecera) [751998]
  - [net] be2net: don't create multiple rings in multi channel mode (Ivan Vecera) [751998]
  - [net] be2net: Making die temperature ioctl call async (Ivan Vecera) [751998]
  - [net] be2net: Fix Endian issues in response read log length field (Ivan Vecera) [751998]
  - [net] be2net: Change data type of on die temperature stat (Ivan Vecera) [751998]
  - [net] be2net: Add 60 second delay for dump on recovery from EEH (Ivan Vecera) [751998]
  - [net] be2net: Show newly flashed FW ver in ethtool (Ivan Vecera) [751998]
  - [net] be2net: increase FW update completion timeout (Ivan Vecera) [751998]
  - [net] be2net: Fix race in posting rx buffers (Ivan Vecera) [751998]
  - [net] be2net: Store vid from grp5 event instead of vlan_tag (Ivan Vecera) [751998]
  - [net] be2net: drop pkts that do not belong to the port (Ivan Vecera) [751998]
  - [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [747946] {CVE-2011-3638}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-303.el5]
changelog:
  - [scsi] qla2xxx: Update FC-transport port_state translation matrix (Chad Dupuis) [765866]
  - [scsi] qla2xxx: Don't call alloc_fw_dump for ISP82XX (Chad Dupuis) [765866]
  - [scsi] qla2xxx: Remove qla2x00_wait_for_loop_ready function (Chad Dupuis) [765866]
  - [scsi] qla2xxx: Display FCP_CMND priority on update (Chad Dupuis) [765866]
  - [scsi] qla2xxx: Check for SCSI status on underruns (Chad Dupuis) [765866]
  - [scsi] qla4xxx: v5.02.04.02.05.08-d0 (Chad Dupuis) [769019]
  - [scsi] qla4xxx: clear the RISC interrupt bit during firmware init (Chad Dupuis) [769019]
  - [scsi] qla4xxx: v5.02.04.01.05.08-d0 (Chad Dupuis) [758762]
  - [scsi] qla4xxx: Fix panic due to incorrect tag_value_stride (Chad Dupuis) [758762]
  - [fs] xfs: implement ->dirty_inode to fix timestamp handling (Carlos Maiolino) [653215]
  - [net] drop_monitor: return -EAGAIN on duplicate state changes (Neil Horman) [688791]
  - [net] ipv6: make disable_ipv6 work (Weiping Pan) [760199]
  - [net] bnx2x: fix failure to bring link up on BCM57810 (Michal Schmidt) [751025]
  - [scsi] isci: link speeds default to gen2 (David Milburn) [768151]
  - [fs] jbd: fix race in buffer processing in commit code (Josef Bacik) [756643]
  - [s390] kernel: cpu hotplug vs missing pfault completion interrupt (Hendrik Brueckner) [753194]
  - [block] loop: Don't call loop_unplug on non-configured device (Veaceslav Falico) [617668]
  - [virt] xen/netback: Clear IFF_TX_SKB_SHARING flags (Neil Horman) [753173]
  - [scsi] sd: fix 32-on-64 block device ioctls (Paolo Bonzini) [752386] {CVE-2011-4127}
  - [md] dm: do not forward ioctls from LVs to the underlying devices (Paolo Bonzini) [752386] {CVE-2011-4127}
  - [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752386] {CVE-2011-4127}
  - [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752386] {CVE-2011-4127}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-304.el5]
changelog:
  - [fs] gfs2: Fix inode allocation error path (Robert S Peterson) [767377]
  - [fs] gfs2: Clean up fsync (Robert S Peterson) [767377]
  - [misc] fix list_head userspace export regression error (Jarod Wilson) [772663]
  - [block] disable SG_IO ioctls on virtio-blk devices (Paolo Bonzini) [771592]
  - [net] cxgb4: fix firmware corruption (Neil Horman) [756661]
  - [net] be2net: remove incorrect calls to netif_carrier_off (Ivan Vecera) [771391]
  - [scsi] lpfc: Update lpfc version for 8.2.0.108.3p driver release (Rob Evers) [769385]
  - [scsi] lpfc: Fix panic during EEH recovery on SLI4 FC port (Rob Evers) [769385]
  - [scsi] lpfc: Fix a crash while deleting 256 vports (Rob Evers) [769385]
  - [scsi] lpfc: Fixed OCM failing *_OBJECT mailbox pass-through (Rob Evers) [769385]
  - [scsi] lpfc: Fixed firmware download regression (Rob Evers) [769385]
  - [scsi] lpfc: Fix system crash when LPe16000 fails to initialize (Rob Evers) [769385]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-305.el5]
changelog:
  - [edac] i5000: don't crash before showing the edac error (Mauro Carvalho Chehab) [713034]
  - [Documentation] Add pci=noseg to kernel-parameters.txt (Prarit Bhargava) [743168]
  - [net] ipv6: fix tcp_v6_conn_request (Jiri Benc) [714670]
  - [redhat] update RHEL_MINOR to 8 for 5.8 release (Jarod Wilson) [773033]
  - [misc] Move exit_robust_list to mm_release, null lists on cleanup (Laszlo Ersek) [750283] {CVE-2012-0028}
  - [fs] nfs: Fix an O_DIRECT Oops (Jeff Layton) [754620] {CVE-2011-4325}
  - [xen] x86: fix a few 32-on-64 compat mode issues (Igor Mammedov) [700752]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-306.el5]
changelog:
  - [s390] pfault: ignore leftover completion interrupts (Jarod Wilson) [753194]
  - [cpufreq] powernow-k8: Fix indexing issue (Frank Arnold) [782773]
  - [scsi] device_handler: optimize transition retries (Rob Evers) [733635]
  - [net] qlge: fix size of external list for TX address descriptors (Chad Dupuis) [772696]
  - [net] igmp: Avoid zero delay when rx'ing odd mix of IGMP queries (Jiri Pirko) [772869]
  - [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [773114]
  - [net] ipv6: track device renames in snmp6 (Andy Gospodarek) [758923]
  - [fs] jbd2: clear BH_Delay & BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [783284] {CVE-2011-4086}
  - [fs] epoll: workarounds to preserve kernel ABI (Jason Baron) [681692] {CVE-2011-1083}
  - [fs] epoll: limit paths (Jason Baron) [681692] {CVE-2011-1083}
  - [fs] epoll: prevent creating circular epoll structures (Jason Baron) [681692] {CVE-2011-1083}
  - [fs] epoll: add ep_call_nested() (Jason Baron) [681692] {CVE-2011-1083}
  - [fs] gfs2: additional fix for inode allocation error path (Robert S Peterson) [767377]
  - [fs] gfs2: Revert clean up fsync changes (Robert S Peterson) [767377]
  - [fs] ext4: ignore EXT4_INODE_JOURNAL_DATA flag with delalloc (Lukas Czerner) [769386]
  - [mm] filemap: Make write(2) interruptible by a fatal signal (Lukas Czerner) [740898]
  - [mm] Make task in balance_dirty_pages killable (Lukas Czerner) [740898]
  - [fs] ext4: fix the deadlock in mpage_da_map_and_submit (Lukas Czerner) [740898]
  - [fs] ext4: fix deadlock in ext4_ordered_write_end (Lukas Czerner) [740898]
  - [fs] ext4: mark multi-page IO complete on mapping failure (Lukas Czerner) [740898]
  - [fs] ext4: make invalidate pages handle page range properly (Lukas Czerner) [740898]
  - [fs] ext4: call mpage_da_submit_io from mpage_da_map_blocks (Lukas Czerner) [740898]
  - [fs] nfsd: Avoid excess stack usage in svc_tcp_recvfrom (J. Bruce Fields) [765751]
  - [fs] nfsd: Replace two page lists in struct svc_rqst with one (J. Bruce Fields) [765751]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-307.el5]
changelog:
  - [s390] crypto: Reset sha2 index after processing partial block (David Howells) [677860]
  - Revert: [fs] xfs: implement ->dirty_inode to fix timestamp (Eric Sandeen) [653215]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-308.el5]
changelog:
  - [scsi] lpfc: Update lpfc version for 8.2.0.108.4p driver release (Rob Evers) [784073]
  - [scsi] lpfc: Fix FCP EQ memory check init w/single int vector (Rob Evers) [784073]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.1.1.el5]
changelog:
  - Revert: [scsi] qla2xxx: avoid SCSI host_lock dep in queuecommand (Chad Dupuis) [790907 782790]
  - Revert: [scsi] qla2xxx: fix IO failure during chip reset (Chad Dupuis) [790907 782790]
  - [net] tg3: Fix 4k tx and recovery code (John Feeney) [790910 782677]
  - [net] bnx2x: make bnx2x_close static again (Michal Schmidt) [790912 782124]
  - [net] bnx2x: add fan failure event handling (Michal Schmidt) [790912 782124]
  - [usb] cdc-acm: make lock use interrupt safe (Bryn M. Reeves) [790778 789067]
  - [kernel] sysctl: restrict write access to dmesg_restrict (Phillip Lougher) [749246 749247]
  - [net] igb: reset PHY after recovering from PHY power down (Stefan Assmann) [786168 783043]
  - [fs] prevent lock contention in shrink_dcache_sb via private list (Lachlan McIlroy) [789369 746122]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.3.1.el5]
changelog:
  - [net] be2net: cancel be_worker during EEH recovery (Ivan Vecera) [805462 773735]
  - [net] be2net: add vlan/rx-mode/flow-control config to be_setup (Ivan Vecera) [805462 773735]
  - [x86] disable TSC synchronization when using kvmclock (Marcelo Tosatti) [805460 799170]
  - [fs] vfs: fix LOOKUP_DIRECTORY not propagated to managed_dentry (Ian Kent) [801726 798809]
  - [fs] vfs: fix d_instantiate_unique (Ian Kent) [801726 798809]
  - [fs] nfs: allow high priority COMMITs to bypass inode commit lock (Jeff Layton) [799941 773777]
  - [fs] nfs: don't skip COMMITs if system under is mem pressure (Jeff Layton) [799941 773777]
  - [scsi] qla2xxx: Read the HCCR register to flush any PCIe writes (Chad Dupuis) [798748 772192]
  - [scsi] qla2xxx: Complete mbox cmd timeout before next reset cycle (Chad Dupuis) [798748 772192]
  - [s390] qdio: wrong buffers-used counter for ERROR buffers (Hendrik Brueckner) [801724 790840]
  - [net] bridge: Reset IPCB when entering IP stack (Herbert Xu) [804721 749813]
  - [fs] procfs: add hidepid= and gid= mount options (Jerome Marchand) [770649 770650]
  - [fs] procfs: parse mount options (Jerome Marchand) [770649 770650]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.6.1.el5]
changelog:
  - [scsi] fc class: fix scanning when devs are offline (Mike Christie) [816684 799530]
  - [md] dm-multipath: delay retry of bypassed pg (Mike Christie) [816684 799530]
  - [net] bonding: properly unset current_arp_slave on slave link up (Veaceslav Falico) [811927 800575]
  - [net] bonding: remove {master,vlan}_ip and query devices instead (Andy Gospodarek) [810321 772216]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.8.1.el5]
changelog:
  - [net] sock: validate data_len before allocating skb in sock_alloc_send_pskb() (Jason Wang) [816290 816106] {CVE-2012-2136}
  - [net] tg3: Fix VLAN tagging assignments (John Feeney) [817691 797011]
  - [net] ixgbe: do not stop stripping VLAN tags in promiscuous mode (Andy Gospodarek) [809791 804800]
  - [s390] zcrypt: Fix parameter checking for ZSECSENDCPRB ioctl (Hendrik Brueckner) [810123 808489]
  - [x86] unwind information fix for the vsyscall DSO (Prarit Bhargava) [807930 805799]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.9.1.el5]
changelog:
  - [fs] jbd: clear b_modified before moving the jh to a different transaction (Josef Bacik) [827205 563247]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.10.1.el5]
changelog:
  - [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
  - [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
  - [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970] {CVE-2012-2934}
  - [scsi] qla2xxx: Use ha->pdev->revision in 4Gbps MSI-X check. (Chad Dupuis) [816373 800653]
  - [fs] sunrpc: do array overrun check in svc_recv before page alloc (J. Bruce Fields) [820358 814626]
  - [fs] knfsd: fix an NFSD bug with full size non-page-aligned reads (J. Bruce Fields) [820358 814626]
  - [fs] sunrpc: fix oops due to overrunning server's page array (J. Bruce Fields) [820358 814626]
  - [fs] epoll: clear the tfile_check_list on -ELOOP (Jason Baron) [829670 817131]
  - [x86_64] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [824654 818787]
  - [net] sunrpc: Don't use list_for_each_entry_safe in rpc_wake_up (Steve Dickson) [817571 809937]
  - [s390] qeth: add missing wake_up call (Hendrik Brueckner) [829059 790900]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.11.1.el5]
changelog:
  - [net] ixgbe: remove flow director stats (Andy Gospodarek) [832169 830226]
  - [net] ixgbe: fix default return value for ixgbe_cache_ring_fdir (Andy Gospodarek) [832169 830226]
  - [net] ixgbe: reverting setup redirection table for multiple packet buffers (Andy Gospodarek) [832169 830226]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.13.1.el5]
changelog:
  - [net] e1000e: Cleanup logic in e1000_check_for_serdes_link_82571 (Dean Nelson) [841370 771366]
  - [net] e1000e: Correct link check logic for 82571 serdes (Dean Nelson) [841370 771366]
  - [mm] NULL pointer dereference in __vm_enough_memory (Jerome Marchand) [840077 836244]
  - [fs] dlm: fix slow rsb search in dir recovery (David Teigland) [838140 753244]
  - [fs] autofs: propogate LOOKUP_DIRECTORY flag only for last comp (Ian Kent) [830264 814418]
  - [fs] ext4: properly dirty split extent nodes (Eric Sandeen) [840946 839770]
  - [scsi] don't offline devices with a reservation conflict (David Jeffery) [839196 835660]
  - [fs] ext4: Fix overflow caused by missing cast in ext4_fallocate (Lukas Czerner) [837226 830351]
  - [net] dl2k: Clean up rio_ioctl (Weiping Pan) [818822 818823] {CVE-2012-2313}
  - [x86] sched: Avoid unnecessary overflow in sched_clock (Prarit Bhargava) [835450 834562]
  - [net] tg3: Fix TSO handling (John Feeney) [833182 795672]
  - [input] evdev: use after free from open/disconnect race (David Jeffery) [832448 822166]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.15.1.el5]
changelog:
  - [net] sfc: Fix max no of TSO segments and min TX queue size (Michal Schmidt) [845554 845555] {CVE-2012-3412}
  - [kernel] xacct_add_tsk: fix pure theoretical ->mm use-after-free (Nikola Pajkovsky) [849723 849725] {CVE-2012-3510}
  - [fs] hfsplus: Buffer overflow in the HFS plus filesystem (Jacob Tanenbaum) [820255 820256] {CVE-2012-2319}
  - [net] netfilter: add dscp netfilter match (Thomas Graf) [847327 842029]
  - [net] rds: set correct msg_namelen (Weiping Pan) [822727 822728] {CVE-2012-3430}
  - [misc] ERESTARTNOINTR seen from fork call in userspace (Oleg Nesterov) [847359 693822]
  - [fs] quota: manage reserved space when quota is not active (Eric Sandeen) [847326 818087]
  - [fs] quota: Fix warning if delayed write before quota is enabled (Eric Sandeen) [847326 818087]
  - [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]
  - [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
  - [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
  - [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
  - [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
  - [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
  - [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
  - [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
  - [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
  - [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
  - [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
  - [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
  - [xen] x86: whitelist Enhanced SpeedStep for dom0 (Laszlo Ersek) [846125 809103]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.16.1.el5]
changelog:
  - Revert: [fs] nfsd4: Remove check for a 32-bit cookie in nfsd4_readdir() (Eric Sandeen) [847943 784191]
  - Revert: [fs] add new FMODE flags: FMODE_32bithash and FMODE_64bithash (Eric Sandeen) [847943 784191]
  - Revert: [fs] nfsd: rename 'int access' to 'int may_flags' in nfsd_open() (Eric Sandeen) [847943 784191]
  - Revert: [fs] nfsd: vfs_llseek() with 32 or 64 bit offsets (hashes) (Eric Sandeen) [847943 784191]
  - Revert: [fs] vfs: add generic_file_llseek_size (Eric Sandeen) [847943 784191]
  - Revert: [s390/ppc64] add is_compat_task() for s390 and ppc64 (Eric Sandeen) [847943 784191]
  - Revert: [fs] ext3: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
  - Revert: [fs] ext4: improve llseek error handling for large seek offsets (Eric Sandeen) [847943 784191]
  - Revert: [fs] ext4: return 32/64-bit dir name hash according to usage type (Eric Sandeen) [847943 784191]
  - Revert: [fs] vfs: allow custom EOF in generic_file_llseek code (Eric Sandeen) [847943 784191]
  - Revert: [fs] ext4: use core vfs llseek code for dir seeks (Eric Sandeen) [847943 784191]
  - Revert: [fs] ext3: pass custom EOF to generic_file_llseek_size() (Eric Sandeen) [847943 784191]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.19.1.el5]
changelog:
  - [net] be2net: Remove code that stops further access to BE NIC based on UE bits (Alexander Gordeev) [867896 862811]
  - [net] netpoll: fix an incorrect check for NULL pointer (Alexander Gordeev) [856079 848098]
  - [net] mlx4: Add support for EEH error recovery (Alexander Gordeev) [847404 798048]
  - [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
  - [fs] ext4: fix undefined behavior in ext4_fill_flex_info (Eric Sandeen) [809688 809689] {CVE-2012-2100}
  - [fs] fix crash if block {device|size} read & changed at sametime (Mikulas Patocka) [864823 756506]
  - [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804953 804954] {CVE-2012-1568}
  - [net] ipv6: Fix fib6_dump_table walker leak (Jiri Benc) [861387 819830]
  - [fs] cifs: update cifs_dfs_d_automount caller path (Sachin Prabhu) [858774 857448]
  - [xen] x86: change the default behaviour of CVE-2012-2934 fix (Petr Matousek) [859946 858724]
  - [net] ipvs: allow transmit of GRO aggregated skbs (Jesper Brouer) [857966 854067]
  - [scsi] isci: fixup linkspeed definitions (David Milburn) [854986 833000]
  - [fs] nfs: nfs_d_automount update caller path after do_add_mount (Carlos Maiolino) [857552 834379]
  - [fs] vfs: Fix vfsmount overput on simultaneous automount (Carlos Maiolino) [857552 834379]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-308.21.1.el5]
changelog:
  - [fs] ext4: race-cond protect for convert_unwritten_extents_endio (Lukas Czerner) [869910 869911] {CVE-2012-4508}
  - [fs] ext4: serialize fallocate w/ ext4_convert_unwritten_extents (Lukas Czerner) [869910 869911] {CVE-2012-4508}
  - [fs] ext4: flush the i_completed_io_list during ext4_truncate (Lukas Czerner) [869910 869911] {CVE-2012-4508}
  - [net] WARN if struct ip_options was allocated directly by kmalloc (Jiri Pirko) [874973 872612]
  - [net] ipv4: add RCU protection to inet->opt (Jiri Pirko) [872113 855302] {CVE-2012-3552}
  - [scsi] qla2xx: Don't toggle inter bits after IRQ lines attached (Chad Dupuis) [870118 800708]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.23.1.el5]
changelog:
  - [net] bnx2x: Add remote-fault link detection (Alexander Gordeev) [870120 796905]
  - [net] bnx2x: Cosmetic changes (Alexander Gordeev) [870120 796905]
  - [net] rds-ping cause kernel panic (Alexander Gordeev) [822755 822756] {CVE-2012-2372}
  - [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878033 878034] {CVE-2012-5513}
  - [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870148 870149] {CVE-2012-4537}
  - [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870150 870151] {CVE-2012-4535}
  - [scsi] sg: fix races during device removal (Ewan Milne) [868950 861004]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-308.8.2.el5]
changelog:
  - [xen] x86_64: check address on trap handlers or guest callbacks (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
  - [xen] x86_64: Do not execute sysret with a non-canonical return address (Paolo Bonzini) [813430 813431] {CVE-2012-0217}
  - [xen] x86: prevent hv boot on AMD CPUs with Erratum 121 (Laszlo Ersek) [824969 824970]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-299.el5]
changelog:
  - [scsi] be2iscsi: Move driver Version to 4.1.239.0 (Mike Christie) [744343]
  - [scsi] be2iscsi: memset wrb for ring create (Mike Christie) [744343]
  - [scsi] be2iscsi: Fix for when task->sc was cleaned up earlier (Mike Christie) [744343]
  - [scsi] be2iscsi: Fix for wrong dmsg setting in wrb (Mike Christie) [744343]
  - [scsi] be2iscsi: Fix for kdump failure (Mike Christie) [744343]
  - [net] ethtool: Support large register dumps (Neil Horman) [753200]
  - [fs] proc: Fix select on /proc files without ->poll (David Howells) [751214]
  - [net] igb: bump version to reflect RHEL5.8 updates (Stefan Assmann) [754359]
  - [fs] dcache: Log ELOOP rather than creating a loop (David Howells) [717959]
  - [fs] dcache: Fix loop checks in d_materialise_unique (David Howells) [717959]
  - [fs] nfs: Ensure we mark inode as dirty if early exit from commit (Jeff Layton) [714020]
  - [scsi] qla2xxx: Update the 4G and 8G firmware to 5.06.03 (Chad Dupuis) [750362]
  - [x86] apic: ack all pending irqs when crashed/on kexec (hiro muneda) [742079]
  - [net] cxgb3: Fix VLAN over Jumbo frames (Neil Horman) [753053]
  - [net] cxgb3: Fix out of bounds index of adapter_info (Neil Horman) [753044]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-340.el5]
changelog:
  - [fs] cifs: Invalidate file cache in case of posix open (Sachin Prabhu) [852526]
  - [scsi] bfa: Address memory leaks in rare cases (Rob Evers) [843634]
  - [scsi] bfa: add comment regarding firmware versioning (Rob Evers) [843634]
  - [scsi] bfa: set correct return codes, misc. cleanup (Rob Evers) [843634]
  - [ia64] export cpu_sibling_map (like i386 and x86_64) (Nikola Pajkovsky) [847026]
  - [net] sfc: Fix VLAN TX offload features (Michal Schmidt) [847026]
  - [net] sfc: Set default parallelism to per-core by default (Michal Schmidt) [847026]
  - [net] sfc: Remove ancient support for nesting of TX stop (Michal Schmidt) [847026]
  - [net] sfc: Properly initialise NAPI context (Michal Schmidt) [847026]
  - [net] sfc: Warn if unable to create MTDs (Michal Schmidt) [847026]
  - [net] sfc: Fix ethtool_ops::get_link (Michal Schmidt) [847026]
  - [x86] amd: Re-enable CPU topology extensions (Frank Arnold) [848487]
  - [x86] amd: Fix L1i/L2 cache sharing info for AMD family 15h procs (Frank Arnold) [848487]
  - [net] bnx2x: Fix compiler warnings (Michal Schmidt) [846985]
  - [net] bnx2x: Fix recovery flow cleanup during probe (Michal Schmidt) [846985]
  - [net] bnx2x: fix unload previous driver flow when flr-capable (Michal Schmidt) [846985]
  - [net] bnx2x: fix mem leak when command is unknown (Michal Schmidt) [846985]
  - [net] bnx2x: Correct EEE statistics gathering (Michal Schmidt) [846985]
  - [net] bnx2x: fix 57840_MF pci id (Michal Schmidt) [846987]
  - [net] bnx2x: Add new 57840 device IDs (Michal Schmidt) [846987]
  - [infiniband] Backport of deactivate_locked_super (Doug Ledford) [846159]
  - [infiniband] More device->class_device conversions (Doug Ledford) [846159]
  - [infiniband] Don't use vmalloc_user (Doug Ledford) [846159]
  - [infiniband] make up for lack of HT_IRQ config option (Doug Ledford) [846159]
  - [infiniband] aio_write not right entrypoint to use in our kernel (Doug Ledford) [846159]
  - [infiniband] Pull in backport from ofed 1.4.2 (Doug Ledford) [846159]
  - [infiniband] Import of backport patch from ofed 1.4.2 (Doug Ledford) [846159]
  - [infiniband] Revert upstream 'cpumask: use new cpumask API ...' (Doug Ledford) [846159]
  - [infiniband] Revert upstream 'IB/ipath: Convert from .nopage ...' (Doug Ledford) [846159]
  - [infiniband] Revert upstream 'IB/ipath: Make ipath_portdata ...' (Doug Ledford) [846159]
  - [infiniband] Revert upstream 'Infiniband: make ipath driver ...' (Doug Ledford) [846159]
  - [infiniband] Enable Kconfig for ipath (Doug Ledford) [846159]
  - [net] ipvs: allow transmit of GRO aggregated skbs (Jesper Brouer) [854067]
  - [scsi] bnx2i: Fixed NULL ptr deference for 1G Linux iSCSI offload (Tomas Henzl) [851320]
  - [net] netpoll: fix an incorrect check for NULL pointer (Amerigo Wang) [848098]
  - [net] bridge: fix bridge module unloading race (Jiri Pirko) [854815]
  - [net] add unknown state to sysfs NIC duplex export (Nikolay Aleksandrov) [853472]
  - [scsi] isci: fixup linkspeed definitions (David Milburn) [833000]
  - [virt] hv: detect hyperv platform through x86_hyper_vendor (Jason Wang) [852692]
  - [misc] lockdep: double MAX_LOCKDEP_ENTRIES (Prarit Bhargava) [852546]
  - [scsi] qla2xx: Don't toggle inter bits after IRQ lines attached (Chad Dupuis) [800708]
  - [fs] autofs4: Merge the remaining dentry ops tables (Ian Kent) [850977]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-341.el5]
changelog:
  - [fs] ext4: fix missing iput of root for some mount error paths (Phillip Lougher) [845906]
  - [ata] libata-eh: fix slave link EH action mask handling (David Milburn) [855228]
  - [fs] cifs: update cifs_dfs_d_automount caller path (Sachin Prabhu) [857448]
  - [net] bnx2x: fix rx checksum validation for IPv6 (Michal Schmidt) [852096]
  - [fs] tcp: bind() fix autoselection to share ports (Jacob Tanenbaum) [846518]
  - [xen] x86: change the default behaviour of CVE-2012-2934 fix (Petr Matousek) [858724]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-342.el5]
changelog:
  - [fs] nfsd: don't fail unchecked creates of non-special files (J. Bruce Fields) [848666]
  - [fs] nfsd4: return nfserr_symlink on v4 OPEN of non-regular file (J. Bruce Fields) [848666]
  - [sound] alsa: snd-aloop - improve the sample copy accurracy (Jaroslav Kysela) [854008]
  - [sound] alsa: aloop - Fix possible IRQ lock inversion (Jaroslav Kysela) [854008]
  - [sound] alsa: snd-aloop - add pause support (Jaroslav Kysela) [854008]
  - [redhat] kabi: Adding symbol nmi_watchdog (Jiri Olsa) [796988]
  - [redhat] kabi: Adding symbol ip_mc_rejoin_group (Jiri Olsa) [796988]
  - [redhat] kabi: Adding symbol kernel_sock_ioctl (Jiri Olsa) [796988]
  - [redhat] kabi: Adding symbol kernel_bind (Jiri Olsa) [796988]
  - [redhat] kabi: Adding symbol netdev_fix_features (Jiri Olsa) [796988]
  - [redhat] kabi: Adding symbol netdev_increment_features (Jiri Olsa) [796988]
  - [redhat] kabi: Adding symbol unregister_kprobe (Jiri Olsa) [796988]
  - [redhat] kabi: Adding symbol register_kprobe (Jiri Olsa) [796988]
  - [fs] cifs: fix name parsing in CIFSSMBQAllEAs (Sachin Prabhu) [846522]
  - [fs] xfs: obey minleft values during extent allocation correctly (Carlos Maiolino) [611746]
  - [net] vlan support ethtool get driver info (Jacob Tanenbaum) [844277]
  - [net] bnx2x: remove false warning regarding interrupt number (Michal Schmidt) [859158]
  - [net] ipv6: Fix fib6_dump_table walker leak (Jiri Benc) [819830]
  - [scsi] fcoe: move link speed checking into its own routine (Neil Horman) [852340]
  - [net] tg3: fix get stats to avoid lockup (John Feeney) [840864]
  - [pci] Quirk for still enabled interrupts Intel Sandy Bridge GPUs (Prarit Bhargava) [816725]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-343.el5]
changelog:
  - [fs] ext4: correct comments for ext4_free_blocks() (Lukas Czerner) [847975]
  - [fs] ext4: fix i_blocks/quota accounting when extent insert fails (Eric Sandeen) [847975]
  - [fs] ext4: Add flags to the ext4_free_blocks() (Lukas Czerner) [847975]
  - [fs] ext4: fold ext4_free_blocks() and ext4_mb_free_blocks() (Eric Sandeen) [847975]
  - [fs] ext4: fix race in xattr block allocation path (Nikola Pajkovsky) [844854]
  - [misc] kdump: fix crash_kexec()/smp_send_stop() race in panic() (Takahiro MUNEDA) [748004]
  - [char] ipmi: lock si_lock in poll() to avoid system stall (Nikolay Aleksandrov) [795344]
  - [sound] alsa: add one more Haswell PCI ID (Jaroslav Kysela) [831964]
  - [net] tg3: Fix autoneg off (John Feeney) [854827]
  - [net] ethtool: Report link-down while interface is down (Ivan Vecera) [849566]
  - [x86] mm: randomize SHLIB_BASE (Dave Anderson) [804954] {CVE-2012-1568}
  - [net] bnx2x: fix rx performance regression due to small ring size (Michal Schmidt) [852096]
  - [fs] ext4: Add err check after calling ext4_mb_regular_allocator (Eric Sandeen) [833636]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-344.el5]
changelog:
  - [fs] ext4: fix undefined bit shift result in ext4_fill_flex_info (Eric Sandeen) [809689] {CVE-2012-2100}
  - [fs] ext4: fix undefined behavior in ext4_fill_flex_info (Eric Sandeen) [809689] {CVE-2012-2100}
  - [misc] panic: fix a possible deadlock in panic() (Takahiro MUNEDA) [864553]
  - [fs] xfs: ensure f_ffree returned by statfs() is non-negative (Carlos Maiolino) [844961]
  - [fs] fix crash if block {device|size} read & changed at sametime (Mikulas Patocka) [756506]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-345.el5]
changelog:
  - [net] revert igb: Drop unnecessary write of E1000_IMS from ... (Stefan Assmann) [864848]
  - [net] bna: remove tech preview status (Ivan Vecera) [816215]
  - [scsi] bfa: remove tech-preview tainting (Rob Evers) [816212]
  - [scsi] bfa: Fix NULL pointer dereference with vport module unload (Rob Evers) [865962]
  - [scsi] sg: fix races during device removal (Ewan Milne) [861004]
  - [fs] autofs4: fix reset pending flag on mount fail (Ian Kent) [866937]
  - [net] mlx4: Fix an oops in vlan handling (Doug Ledford) [842486]
  - [net] be2net: Remove stops to further access to BE NIC on UE bits (Ivan Vecera) [862811]
  - [net] be2net: Fix traffic stall INTx mode (Ivan Vecera) [857872]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-346.el5]
changelog:
  - [mm] check for populated zone in __drain_pages (Rafael Aquini) [873708]
  - [mm] do not allocate pagesets for unpopulated zones (Rafael Aquini) [873708]
  - [mm] do not check unpopulated zones for draining/counter updates (Rafael Aquini) [873708]
  - [x86] Mark Haswell HDMI Audio as unsupported. (Prarit Bhargava) [874248]
  - [misc] Backport mark_hardware_unsupported() (Prarit Bhargava) [874248]
  - [fs] ext4: race-cond protect for convert_unwritten_extents_endio (Lukas Czerner) [869911] {CVE-2012-4508}
  - [fs] ext4: serialize fallocate w/ ext4_convert_unwritten_extents (Lukas Czerner) [869911] {CVE-2012-4508}
  - [fs] ext4: flush the i_completed_io_list during ext4_truncate (Lukas Czerner) [869911] {CVE-2012-4508}
  - [fs] ext4: init pagevec in ext4_da_block_invalidatepages (Eric Sandeen) [869980]
  - [scsi] megaraid_sas: mark Invader support as tech preview (Tomas Henzl) [855434]
  - [scsi] mpt2sas: Fix panic when drives removed during diag reset (Tomas Henzl) [871422]
  - [net] bnx2x: Fix 57810 1G-KR link against certain switches. (Michal Schmidt) [865639]
  - [fs] Fix FREEZE/THAW compat_ioctl regression (Lukas Czerner) [874029]
  - [net] WARN if struct ip_options was allocated directly by kmalloc (Jiri Pirko) [872612]
  - [net] ipv4: add RCU protection to inet->opt (Jiri Pirko) [855302] {CVE-2012-3552}
  - [net] rds-ping cause kernel panic (Jay Fenlason) [822756] {CVE-2012-2372}
  - [x86] exclude iomem resource over 4G for i686 non PAE kernel (Dave Young) [875743]
  - [fs] ext4: remove mb_groups before tearing down the buddy_cache (Carlos Maiolino) [869135]
  - [fs] ext3: retry failed direct IO allocations (Carlos Maiolino) [657575]
  - [net] svcrpc: enforce a maximum socket buffer size (J. Bruce Fields) [863535]
  - [x86] Revert 'mm: randomize SHLIB_BASE' (Dave Anderson) [871692]
  - [xen] x86: whitelist AMD thermal & power management for dom0 (Laszlo Ersek) [872306]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-347.el5]
changelog:
  - [xen] add guest address range checks to XENMEM_exchange handlers (Igor Mammedov) [878034] {CVE-2012-5513}
  - [xen] x86/physmap: Prevent incorrect updates of m2p mappings (Igor Mammedov) [870149] {CVE-2012-4537}
  - [xen] VCPU/timer: Dos vulnerability prev overflow in calculations (Igor Mammedov) [870151] {CVE-2012-4535}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.1.1.el5]
changelog:
  - [pci] intel-iommu: reduce max num of domains supported (Don Dutile) [886876 885125]
  - [fs] gfs2: Fix leak of cached directory hash table (Steven Whitehouse) [886124 831330]
  - [x86] mm: randomize SHLIB_BASE (Petr Matousek) [804953 804954] {CVE-2012-1568}
  - [net] be2net: create RSS rings even in multi-channel configs (Ivan Vecera) [884702 878209]
  - [net] tg3: Avoid dma read error (John Feeney) [885692 877474]
  - [misc] Fix unsupported hardware message (Prarit Bhargava) [885063 876587]
  - [net] ipv6: discard overlapping fragment (Jiri Pirko) [874837 874838] {CVE-2012-4444}
  - [usb] Fix serial port reference counting on hotplug remove (Don Zickus) [885700 845447]
  - [net] bridge: export its presence and fix bonding igmp reporting (Veaceslav Falico) [884742 843473]
  - [fs] nfs: move wait for server->active from put_super to kill_sb (Jeff Layton) [884708 839839]
  - [scsi] libfc: fix indefinite rport restart (Neil Horman) [884740 595184]
  - [scsi] libfc: Retry a rejected PRLI request (Neil Horman) [884740 595184]
  - [scsi] libfc: Fix remote port restart problem (Neil Horman) [884740 595184]
  - [xen] memop: limit guest specified extent order (Laszlo Ersek) [878449 878450] {CVE-2012-5515}
  - [xen] get bottom of EBDA from the multiboot data structure (Paolo Bonzini) [885062 881885]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.3.1.el5]
changelog:
  - [utrace] ensure arch_ptrace() can never race with SIGKILL (Oleg Nesterov) [912071 912072] {CVE-2013-0871}
  - [x86] msr: Add capabilities check (Nikola Pajkovsky) [908696 908697] {CVE-2013-0268}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.4.1.el5]
changelog:
  - [virt] xen-netback: backports (Andrew Jones) [910884 910885] {CVE-2013-0216}
  - [virt] xen-netback: netif_schedulable should take a netif (Andrew Jones) [910884 910885] {CVE-2013-0216}
  - [virt] pciback: rate limit error mess from pciback_enable_msi() (Igor Mammedov) [910876 910877] {CVE-2013-0231}
  - [net] be2net: remove BUG_ON() in be_mcc_compl_is_new() (Ivan Vecera) [923910 907524]
  - [net] ipv4: Update MTU to all related cache entries (Amerigo Wang) [923353 905190]
  - [net] annotate rt_hash_code() users (Amerigo Wang) [923353 905190]
  - [net] xfrm_user: fix info leak in copy_to_user_state() (Thomas Graf) [922426 922427] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_policy() (Thomas Graf) [922426 922427] {CVE-2012-6537}
  - [net] xfrm_user: fix info leak in copy_to_user_tmpl() (Thomas Graf) [922426 922427] {CVE-2012-6537}
  - [net] atm: fix info leak in getsockopt(SO_ATMPVC) (Thomas Graf) [922384 922385] {CVE-2012-6546}
  - [net] atm: fix info leak via getsockname() (Thomas Graf) [922384 922385] {CVE-2012-6546}
  - [net] tun: fix ioctl() based info leaks (Thomas Graf) [922348 922349] {CVE-2012-6547}
  - [net] llc, zero sockaddr_llc struct (Thomas Graf) [922327 922329] {CVE-2012-6542}
  - [net] llc: fix info leak via getsockname() (Thomas Graf) [922327 922329] {CVE-2012-6542}
  - [net] xfrm_user: return error pointer instead of NULL (Thomas Graf) [919386 919387] {CVE-2013-1826}
  - [net] ixgbevf: allocate room for mailbox MSI-X interrupt's name (Laszlo Ersek) [924134 862862]
  - [fs] knfsd: allow nfsd READDIR to return 64bit cookies (Niels de Vos) [924087 918952]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.6.1.el5]
changelog:
  - [char] ipmi: use a tasklet for handling received messages (Tony Camuso) [953435 947732]
  - [char] ipmi: do run_to_completion properly in deliver_recv_msg (Tony Camuso) [953435 947732]
  - [fs] nfs4: fix locking around cl_state_owners list (Dave Wysochanski) [954296 948317]
  - [fs] nfs: Fix bugs on short read (Sachin Prabhu) [952098 924011]
  - [xen] AMD IOMMU: spot missing IO-APIC entries in IVRS table (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [xen] AMD, IOMMU: Make per-device interrupt remap table default (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [xen] AMD, IOMMU: Disable IOMMU if SATA Combined mode is on (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [xen] AMD, IOMMU: On creating entry clean up in remapping tables (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [xen] ACPI: acpi_table_parse() should return handler's err code (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [xen] introduce xzalloc() & Co (Igor Mammedov) [910912 910913] {CVE-2013-0153}
  - [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
  - [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
  - [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.9.1.el5]
changelog:
  - [net] tg3: buffer overflow in VPD firmware parsing (Jacob Tanenbaum) [949939 949940] {CVE-2013-1929}
  - [net] atm: update msg_namelen in vcc_recvmsg() (Nikola Pajkovsky) [955222 955223] {CVE-2013-3222}
  - [fs] ext4: prevent race while walking extent tree for fiemap (Lukas Czerner) [960014 692071]
  - [fs] ext4: Fix possibly very long loop in fiemap (Lukas Czerner) [960014 692071]
  - [fs] ext4: make FIEMAP and delayed allocation play well together (Lukas Czerner) [960014 692071]
  - [fs] ext4: handle NULL p_ext in ext4_ext_next_allocated_block() (Lukas Czerner) [960014 692071]
  - [fs] ext4: drop ec_type from the ext4_ext_cache structure (Lukas Czerner) [960014 692071]
  - [fs] afs: export a couple of core functions for AFS write support (Lukas Czerner) [960014 692071]
  - [net] llc: Fix missing msg_namelen update in llc_ui_recvmsg() (Jesper Brouer) [956096 956097] {CVE-2013-3231}
  - [net] tipc: fix info leaks via msg_name in recv_msg/recv_stream (Jesper Brouer) [956148 956149] {CVE-2013-3235}
  - [net] Bluetooth: RFCOMM Fix info leak in ioctl(RFCOMMGETDEVLIST) (Radomir Vrbovsky) [922406 922407] {CVE-2012-6545}
  - [net] Bluetooth: RFCOMM - Fix info leak via getsockname() (Radomir Vrbovsky) [922406 922407] {CVE-2012-6545}
  - [kernel] kmod: avoid deadlock from recursive request_module call (Frantisek Hrbata) [957152 949568]
  - [kernel] wait_for_helper: SIGCHLD from u/s cause use-after-free (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - [kernel] Fix ____call_usermodehelper errs being silently ignored (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - [kernel] wait_for_helper: remove unneeded do_sigaction() (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - [kernel] kmod: avoid deadlock from recursive kmod call (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - [kernel] kmod: make request_module() killable (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.10.1.el5]
changelog:
  - [net] Bluetooth: fix possible info leak in bt_sock_recvmsg() (Radomir Vrbovsky) [955600 955601] {CVE-2013-3224}
  - [net] Bluetooth: HCI & L2CAP information leaks (Jacob Tanenbaum) [922415 922416] {CVE-2012-6544}
  - [misc] signal: use __ARCH_HAS_SA_RESTORER instead of SA_RESTORER (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
  - [misc] signal: always clear sa_restorer on execve (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
  - [misc] signal: Def __ARCH_HAS_SA_RESTORER for sa_restorer clear (Nikola Pajkovsky) [920503 920504] {CVE-2013-0914}
  - [net] cxgb4: zero out another firmware request struct (Jay Fenlason) [971872 872531]
  - [net] cxgb4: clear out most firmware request structures (Jay Fenlason) [971872 872531]
  - [kernel] Make futex_wait() use an hrtimer for timeout (Prarit Bhargava) [958021 864648]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.11.1.el5]
changelog:
  - Revert: [kernel] kmod: make request_module() killable (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - Revert: [kernel] kmod: avoid deadlock from recursive kmod call (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - Revert: [kernel] wait_for_helper: remove unneeded do_sigaction() (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - Revert: [kernel] Fix ____call_usermodehelper errs being silently ignored (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - Revert: [kernel] wait_for_helper: SIGCHLD from u/s cause use-after-free (Frantisek Hrbata) [858752 858753] {CVE-2012-4398}
  - Revert: [kernel] kmod: avoid deadlock from recursive request_module call (Frantisek Hrbata) [957152 949568]
  - Revert: [x86-64] non lazy sleazy fpu implementation (Prarit Bhargava) [948187 731531]
  - Revert: [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
  - Revert: [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
  - Revert: [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.12.1.el5]
changelog:
  - Revert: [fs] afs: export a couple of core functions for AFS write support (Lukas Czerner) [960014 692071]
  - Revert: [fs] ext4: drop ec_type from the ext4_ext_cache structure (Lukas Czerner) [960014 692071]
  - Revert: [fs] ext4: handle NULL p_ext in ext4_ext_next_allocated_block() (Lukas Czerner) [960014 692071]
  - Revert: [fs] ext4: make FIEMAP and delayed allocation play well together (Lukas Czerner) [960014 692071]
  - Revert: [fs] ext4: Fix possibly very long loop in fiemap (Lukas Czerner) [960014 692071]
  - Revert: [fs] ext4: prevent race while walking extent tree for fiemap (Lukas Czerner) [960014 692071]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.13.1.el5]
changelog:
  - [net] sctp: Disallow new connection on a closing socket (Daniel Borkmann) [976569 974936] {CVE-2013-2206}
  - [net] sctp: Use correct sideffect command in dup cookie handling (Daniel Borkmann) [976569 974936] {CVE-2013-2206}
  - [net] sctp: deal with multiple COOKIE_ECHO chunks (Daniel Borkmann) [976569 974936] {CVE-2013-2206}
  - [net] tcp: bind() use stronger condition for bind_conflict (Flavio Leitner) [980811 957604]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.14.1.el5]
changelog:
  - [net] Fix panic for vlan over gre via tun (Thomas Graf) [983452 981337]
  - [x86] mm: introduce proper mem barriers smp_invalidate_interrupt (Rafael Aquini) [983628 865095]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.15.1.el5]
changelog:
  - [fs] nfs: flush cached dir information slightly more readily (Scott Mayhew) [976441 853145]
  - [fs] nfs: Fix resolution prob with cache_change_attribute (Scott Mayhew) [976441 853145]
  - [fs] nfs: define function to update nfsi->cache_change_attribute (Scott Mayhew) [976441 853145]
  - [net] af_key: fix info leaks in notify messages (Jiri Benc) [980999 981000] {CVE-2013-2234}
  - [net] af_key: initialize satype in key_notify_policy_flush() (Jiri Benc) [981222 981224] {CVE-2013-2237}
  - [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981556 981557] {CVE-2013-2232}
  - [net] fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980141 980142] {CVE-2013-2224}
  - [x86_64] Early segment setup for VT (Paolo Bonzini) [979920 978305]
  - [block] cpqarray: info leak in ida_locked_ioctl() (Tomas Henzl) [971245 971246] {CVE-2013-2147}
  - [block] cdrom: use kzalloc() for failing hardware (Frantisek Hrbata) [973103 973104] {CVE-2013-2164}
  - [mm] Break out when there is nothing more to write for the fs. (Larry Woodman) [972583 965359]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.16.1.el5]
changelog:
  - [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [988251 987244]
  - [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [987976 967053]
  - [ia64] fix KABI breakage on ia64 (Prarit Bhargava) [966878 960783]
  - [x86] fpu: fix CONFIG_PREEMPT=y corruption of FPU stack (Prarit Bhargava) [948187 731531]
  - [i386] add sleazy FPU optimization (Prarit Bhargava) [948187 731531]
  - [x86-64] non lazy 'sleazy' fpu implementation (Prarit Bhargava) [948187 731531]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.17.1.el5]
changelog:
  - [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [999819 995961]
  - [net] be2net: Mark checksum fail for IP fragmented packets (Ivan Vecera) [983864 956322]
  - [net] be2net: Avoid double insertion of vlan tags (Ivan Vecera) [983864 956322]
  - [net] be2net: disable TX in be_close() (Ivan Vecera) [983864 956322]
  - [net] be2net: fix EQ from getting full while cleaning RX CQ (Ivan Vecera) [983864 956322]
  - [net] be2net: avoid napi_disable() when not enabled (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix receive Multicast Packets w/ Promiscuous mode (Ivan Vecera) [983864 956322]
  - [net] be2net: Fixed memory leak (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix PVID tag offload for packets w/ inline VLAN tag (Ivan Vecera) [983864 956322]
  - [net] be2net: fix a Tx stall bug caused by a specific ipv6 packet (Ivan Vecera) [983864 956322]
  - [net] be2net: Remove an incorrect pvid check in Tx (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix issues in error recovery with wrong queue state (Ivan Vecera) [983864 956322]
  - [net] netpoll: revert 6bdb7fe3104 and fix be_poll() instead (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix to parse RSS hash Receive completions correctly (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix cleanup path when EQ creation fails (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix Endian (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix to trim skb for padded vlan packets (Ivan Vecera) [983864 956322]
  - [net] be2net: Explicitly clear reserved field in Tx Descriptor (Ivan Vecera) [983864 956322]
  - [net] be2net: remove unnecessary usage of unlikely() (Ivan Vecera) [983864 956322]
  - [net] be2net: do not modify PCI MaxReadReq size (Ivan Vecera) [983864 956322]
  - [net] be2net: cleanup be_vid_config() (Ivan Vecera) [983864 956322]
  - [net] be2net: don't call vid_config() when there no vlan config (Ivan Vecera) [983864 956322]
  - [net] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [983864 956322]
  - [net] be2net: Fix VLAN/multicast packet reception (Ivan Vecera) [983864 956322]
  - [net] be2net: fix wrong frag_idx reported by RX CQ (Ivan Vecera) [983864 956322]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.18.1.el5]
changelog:
  - [net] be2net: enable polling prior enabling interrupts globally (Ivan Vecera) [1005239 987539]
  - [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970874 970875] {CVE-2013-2141}
  - [net] ipv6: do udp_push_pending_frames AF_INET sock pending data (Jiri Benc) [987647 987648] {CVE-2013-4162}
  - [mm] use-after-free in madvise_remove() (Jacob Tanenbaum) [849735 849736] {CVE-2012-3511}
  - [fs] autofs: remove autofs dentry mount check (Ian Kent) [1001488 928098]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.2.1.el5]
changelog:
  - [misc] tainted flags, fix buffer size (Prarit Bhargava) [905829 901547]
  - [net] be2net: fix unconditionally returning IRQ_HANDLED in INTx (Ivan Vecera) [884704 878316]
  - [net] be2net: fix INTx ISR for interrupt behaviour on BE2 (Ivan Vecera) [884704 878316]
  - [net] be2net: fix a possible events_get() race on BE2 (Ivan Vecera) [884704 878316]
  - [firmware] Expand kernel boot-time storage for DMI table structs (Lenny Szubowicz) [902683 862865]
  - [fs] udf: Fortify loading of sparing table (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
  - [fs] udf: Improve table length check to avoid possible overflow (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}
  - [fs] udf: Avoid run away loop when partition table is corrupted (Nikola Pajkovsky) [843140 843141] {CVE-2012-3400}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.20.1.el5]
changelog:
  - [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023347 1008691]
  - [net] be2net: fix calling __vlan_put_tag() after eth_type_trans() (Ivan Vecera) [1019893 916640]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.21.1.el5]
changelog:
  - [md] dm snapshot: fix data corruption (Mikulas Patocka) [1019678 975353] {CVE-2013-4299}
  - [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [884735 867997]
  - [net] be2net: Activate new FW after FW download for Lancer (Ivan Vecera) [1019892 982590]
  - [net] be2net: Fix initialization sequence for Lancer (Ivan Vecera) [1019892 982590]
  - [net] be2net: Fix FW download in Lancer (Ivan Vecera) [1019892 982590]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.22.1.el5]
changelog:
  - [char] ipmi: fix message handling during panics (Tony Camuso) [1049730 995293]
  - [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1036117 1036115]
  - [x86] fix timeout of poll(2) w/ 32-bit processes on x86_64 (Naoya Horiguchi) [1037437 794670]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-348.23.1.el5]
changelog:
  - [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066299 1063955]
  - [net] be2net: prevent Tx stall on SH-R when packet size < 32 (Ivan Vecera) [1051534 1007995]
  - [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051534 1007995]
  - [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051534 1007995]
  - [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051534 1007995]


author: Aristeu Rozanski <aris@redhat.com> [2.6.18-339.el5]
changelog:
  - [netdrv] igb: Change how we check for pre-existing and assigned VFs (Stefan Assmann) [845399]
  - [pci] Add SR-IOV convenience functions and macros (Stefan Assmann) [845399]
  - [netdrv] bnx2: Enable vlan tso and csum offload for bnx2 (Neil Horman) [844251]
  - [kernel] xacct_add_tsk: fix pure theoretical ->mm use-after-free (Nikola Pajkovsky) [849725] {CVE-2012-3510}
  - [net] net_sched: qdisc_alloc_handle() can be too slow (Jiri Pirko) [846939]
  - [netdrv] igb: reset PHY in the link_up process to recover PHY setting after power down (Stefan Assmann) [849103]
  - [net] igb: fix VLAN for i350 (Stefan Assmann) [845962]
  - [net] igb: Fix for failure to init on some 82576 devices (Stefan Assmann) [841410]
  - [fs] hfsplus: Buffer overflow in the HFS plus filesystem (Jacob Tanenbaum) [820256] {CVE-2012-2319}
  - [netdrv] igb: add delay to allow igb loopback test to succeed on 8086:10c9 (Stefan Assmann) [815701]
  - [net] netfilter: add dscp netfilter match (Thomas Graf) [842029]
  - [net] e1000e: drop check of RXCW.CW to eliminate link up and down (Dean Nelson) [840642]
  - [usb] fix interrupt disabling for HCDs with shared interrupt handlers (Don Zickus) [834665]
  - [net] sysfs: export nic speed and duplex (Nikolay Aleksandrov) [640206]
  - [redhat] kabi: Adding symbol kobject_uevent_env (Jiri Olsa) [739414]
  - [scsi] aacraid: Fixes kernel oops in  (Tomas Henzl) [801409]
  - [virt] hv: remove the compact version of netif_notify_peers() (Jason Wang) [824877]
  - [net] ipv4, ipv6, bonding: Restore control over number of peer notifications (Amerigo Wang) [845892]
  - [netdrv] bonding: Remove obsolete source file 'bond_ipv6.c' (Amerigo Wang) [845892]
  - [netdrv] bonding, ipv4, ipv6, vlan: Handle NETDEV_BONDING_FAILOVER in event notifier (Amerigo Wang) [845892]
  - [netdrv] vlan: Propagate NETDEV_NOTIFY_PEERS notifier (Amerigo Wang) [845892]
  - [net] ipv6: Send unsolicited neighbour advertismements when notified (Amerigo Wang) [845892]
  - [netdrv] arp_notify: unconditionally send gratuitous ARP for NETDEV_NOTIFY_PEERS (Amerigo Wang) [845892]
  - [netdrv] arp_notify: allow drivers to explicitly request a notification event (Amerigo Wang) [845892]
  - [scsi] mpt2sas: Bump driver vesion to 13.101.00.00 (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix for panic happening because of improper memory allocation (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix for hard drive going OFFLINE when hard reset issued and simultaneously another hard drive is hot unplugged (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Set the phy identifier of the end device to to the phy number of the parent device it is linked to (Tomas Henzl) [785653]
  - [scsi] mpt2sas: While enabling phy, read the current port number from sas iounit page 0 instead of page 1 (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix linux driver sparse errors (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix security scan issues reported by source code analysis tool (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Improvement were made to better protect the sas_device, raid_device, and expander_device lists (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Perform Target Reset instead of HBA reset when a SATA_PASSTHROUGH cmd timeout happens (Tomas Henzl) [785653]
  - [scsi] mpt2sas: MPI next revision header update (Tomas Henzl) [785653]
  - [scsi] mpt2sas: use pci_dev->revision (Tomas Henzl) [785653]
  - [scsi] mpt2sas: remove extraneous sas_log_info messages (Tomas Henzl) [785653]
  - [scsi] mpt2sas: spell  correctly in function prototype (Tomas Henzl) [785653]
  - [scsi] mpt2sas: add missing allocation check (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix mismatch in mpt2sas_base_hard_reset_handler() mutex lock-unlock (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix possible integer truncation of cpu_count (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix leak on mpt2sas_base_attach() error path (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix for memory allocation error for large host credits (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Do not retry a timed out direct IO for warpdrive (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Release spinlock for the raid device list before blocking it (Tomas Henzl) [785653]
  - [scsi] mpt2sas: MPI next revision header update (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Added support for customer specific branding (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Increase max transfer support from 4MB to 16MB (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Support for greater than 2TB capacity WarpDrive (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Rearrange the the code so that the completion queues are initialized prior to sending the request to controller firmware (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Do not set sas_device->starget to NULL from the slave_destroy callback when all the LUNS have been deleted (Tomas Henzl) [785653]
  - [scsi] mpt2sas: MPI next revision header update (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Adding support for customer specific branding (Tomas Henzl) [785653]
  - [scsi] mpt2sas: When IOs are terminated, update the result to DID_SOFT_ERROR to avoid infinite resets (Tomas Henzl) [785653]
  - [scsi] mpt2sas: _scsih_smart_predicted_fault uses GFP_KERNEL in interrupt context (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix for Panic when inactive volume is tried deleting (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix for issue Port Reset taking long time(around 5 mins) to complete while issued during creating a volume (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix for deadlock between hot plug worker threads and host reset context (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix for dead lock occurring between host_lock and sas_device_lock (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix drives not getting properly deleted if sas cable is removed while host reset is active (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix failure message displayed during diag reset (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Fix for system hang when discovery in progress (Tomas Henzl) [785653]
  - [scsi] mpt2sas: MPI next revision header update (Tomas Henzl) [785653]
  - [scsi] mpt2sas: take size of pointed value, not pointer (Tomas Henzl) [785653]
  - [scsi] mpt2sas: Support added for controllers capable of multi reply queues (Tomas Henzl) [785653]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-364.el5]
changelog:
  - [net] sctp: Disallow new connection on a closing socket (Daniel Borkmann) [974936] {CVE-2013-2206}
  - [net] sctp: Use correct sideffect command in dup cookie handling (Daniel Borkmann) [974936] {CVE-2013-2206}
  - [net] sctp: deal with multiple COOKIE_ECHO chunks (Daniel Borkmann) [974936] {CVE-2013-2206}
  - [scsi] qla4xxx: Update vers to 5.02.04.06.05.10-d0 for Inbox rel (Chad Dupuis) [978150]
  - [scsi] qla4xxx: ISP8xxx: Correct retry of adapter initialization (Chad Dupuis) [978150]
  - [scsi] qla4xxx: Fix req queue count manipulation on response path (Chad Dupuis) [978150]
  - [scsi] qla4xxx: Fix targets not coming back if chap is enabled (Chad Dupuis) [978150]
  - [scsi] qla4xxx: Correct early completion of pending mbox (Chad Dupuis) [978150]
  - [net] fix invalid free in ip_cmsg_send() callers (Petr Matousek) [980142] {CVE-2013-2224}
  - [x86_64] Early segment setup for VT (Paolo Bonzini) [978305]
  - [block] cpqarray: info leak in ida_locked_ioctl() (Tomas Henzl) [971246] {CVE-2013-2147}
  - [net] tcp: bind() use stronger condition for bind_conflict (Flavio Leitner) [957604]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-365.el5]
changelog:
  - [net] be2net: Mark checksum fail for IP fragmented packets (Ivan Vecera) [956322]
  - [net] be2net: Avoid double insertion of vlan tags (Ivan Vecera) [956322]
  - [net] be2net: disable TX in be_close() (Ivan Vecera) [956322]
  - [net] be2net: fix EQ from getting full while cleaning RX CQ (Ivan Vecera) [956322]
  - [net] be2net: avoid napi_disable() when not enabled (Ivan Vecera) [956322]
  - [net] be2net: Fix receive Multicast Packets w/ Promiscuous mode (Ivan Vecera) [956322]
  - [net] be2net: Fixed memory leak (Ivan Vecera) [956322]
  - [net] be2net: Fix PVID tag offload for packets w/ inline VLAN tag (Ivan Vecera) [956322]
  - [net] be2net: fix a Tx stall bug caused by a specific ipv6 packet (Ivan Vecera) [956322]
  - [net] be2net: Remove an incorrect pvid check in Tx (Ivan Vecera) [956322]
  - [net] be2net: Fix issues in error recovery with wrong queue state (Ivan Vecera) [956322]
  - [net] netpoll: revert 6bdb7fe3104 and fix be_poll() instead (Ivan Vecera) [956322]
  - [net] be2net: Fix to parse RSS hash Receive completions correctly (Ivan Vecera) [956322]
  - [net] be2net: Fix cleanup path when EQ creation fails (Ivan Vecera) [956322]
  - [net] be2net: Fix Endian (Ivan Vecera) [956322]
  - [net] be2net: Fix to trim skb for padded vlan packets (Ivan Vecera) [956322]
  - [net] be2net: Explicitly clear reserved field in Tx Descriptor (Ivan Vecera) [956322]
  - [net] be2net: remove unnecessary usage of unlikely() (Ivan Vecera) [956322]
  - [net] be2net: do not modify PCI MaxReadReq size (Ivan Vecera) [956322]
  - [net] be2net: cleanup be_vid_config() (Ivan Vecera) [956322]
  - [net] be2net: don't call vid_config() when there no vlan config (Ivan Vecera) [956322]
  - [net] be2net: Ignore status of some ioctls during driver load (Ivan Vecera) [956322]
  - [net] be2net: Fix wrong status getting returned for MCC commands (Ivan Vecera) [956322]
  - [net] be2net: Fix VLAN/multicast packet reception (Ivan Vecera) [956322]
  - [net] be2net: fix wrong frag_idx reported by RX CQ (Ivan Vecera) [956322]
  - [infiniband] cxgb4: Compile when CXGB4 is set, not CXGB3 (Doug Ledford) [871555]
  - Revert: [infiniband] qib: add qib, mod ipath to only support HTX (Doug Ledford) [871555]
  - Revert: [infiniband] Enable Kconfig for ipath (Doug Ledford) [871555]
  - Revert: [infiniband] Revert upstream 'Infiniband: make ipath' (Doug Ledford) [871555]
  - Revert: [infiniband] Revert upstream 'IB/ipath: Make ipath_port' (Doug Ledford) [871555]
  - Revert: [infiniband] Revert upstream 'IB/ipath: Convert from ...' (Doug Ledford) [871555]
  - Revert: [infiniband] Revert upstream 'cpumask: use new cpumask' (Doug Ledford) [871555]
  - Revert: [infiniband] Import of backport patch from ofed 1.4.2 (Doug Ledford) [871555]
  - Revert: [infiniband] Pull in backport from ofed 1.4.2 (Doug Ledford) [871555]
  - Revert: [infiniband] aio_write not right entrypoint to use in our (Doug Ledford) [871555]
  - Revert: [infiniband] make up for lack of HT_IRQ config option (Doug Ledford) [871555]
  - Revert: [infiniband] Don't use vmalloc_user (Doug Ledford) [871555]
  - Revert: [infiniband] More device->class_device conversions (Doug Ledford) [871555]
  - Revert: [scsi] qla4xxx: ISP8xxx: Correct retry of adapter initial (Chad Dupuis) [978150]
  - [net] af_key: fix info leaks in notify messages (Jiri Benc) [981000] {CVE-2013-2234}
  - [net] af_key: initialize satype in key_notify_policy_flush() (Jiri Benc) [981224] {CVE-2013-2237}
  - [net] Fix panic for vlan over gre via tun (Thomas Graf) [981337]
  - [net] ipv6: ip6_sk_dst_check() must not assume ipv6 dst (Jiri Pirko) [981557] {CVE-2013-2232}


author: Phillip Lougher <plougher@redhat.com> [2.6.18-366.el5]
changelog:
  - [net] be2net: Activate new FW after FW download for Lancer (Ivan Vecera) [982590]
  - [net] be2net: Fix initialization sequence for Lancer (Ivan Vecera) [982590]
  - [net] be2net: Fix FW download in Lancer (Ivan Vecera) [982590]
  - [net] qlge: Fix receive path to drop error frames (Chad Dupuis) [975852]
  - [net] qlge: remove NETIF_F_TSO6 flag (Chad Dupuis) [975852]
  - [net] qlge: Moving low level frame error to ethtool statistics (Chad Dupuis) [975852]
  - [net] qlge: Fixed double pci free on tx_ring->q allocation fail (Chad Dupuis) [975852]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-367.el5]
changelog:
  - [net] ipv6: do udp_push_pending_frames AF_INET sock pending data (Jiri Benc) [987648] {CVE-2013-4162}
  - [net] mlx4: restore pre-RHEL5.9 default value of log_num_mac (Michal Schmidt) [968352]
  - [x86_64] Fix kdump failure due to 'x86_64: Early segment setup' (Paolo Bonzini) [987244]
  - [fs] vfs: remove unused __d_splice_alias argument (J. Bruce Fields) [785916]
  - [fs] vfs: stop d_splice_alias creating directory aliases (J. Bruce Fields) [785916]
  - [xen] skip tracing if it was disabled instead of dying (Igor Mammedov) [967053]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-368.el5]
changelog:
  - [net] tg3: Add read dma workaround for 5720 (Ivan Vecera) [984064]
  - [net] tg3: Add New 5719 Read DMA workaround (Ivan Vecera) [984064]
  - [net] vlan: fix perf regression due to missing features flags (Michal Schmidt) [977711]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-369.el5]
changelog:
  - [fs] nlm: Ensure we resend pending blocking locks after a reclaim (Steve Dickson) [918592]
  - [kernel] kmod: kthread_run causes oom killer deadlock (Frantisek Hrbata) [983506]
  - [fs] nfs4: ratelimit some messages, add name to bad seq-id mess (Dave Wysochanski) [953121]
  - [fs] nfsd: fix EXDEV checking in rename (J. Bruce Fields) [515599]
  - [misc] tty: Fix abusers of current-sighand->tty (Aaron Tomlin) [858981]
  - [net] ipv6: don't call addrconf_dst_alloc again when enable lo (Jiri Benc) [981417]
  - [redhat] kabi: Adding symbol fc_fabric_login (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_recv (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_exch_mgr_reset (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_lport_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_exch_recv (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_lport_destroy (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_els_send (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_destroy (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_exch_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_fabric_logoff (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_set_mfs (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_elsct_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_link_up (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_recv_flogi (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_change_queue_depth (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fcoe_ctlr_link_down (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_change_queue_type (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_exch_mgr_free (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_exch_mgr_alloc (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_lport_config (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_disc_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol strict_strtoul (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_rport_init (Jiri Olsa) [864256]
  - [redhat] kabi: Adding symbol fc_get_host_port_state (Jiri Olsa) [864256]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-370.el5]
changelog:
  - [net] be2net: Fix to avoid hardware workaround when not needed (Ivan Vecera) [995961]
  - [kernel] signals: stop info leak via tkill and tgkill syscalls (Oleg Nesterov) [970875] {CVE-2013-2141}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.1.1.el5]
changelog:
  - [crypto] ansi_cprng fix off by one err in non-block size request (Neil Horman) [1007692 1007693] {CVE-2013-4345}
  - [fs] gfs2: yield() in shrinker to allow glock_workqueues to run (Abhijith Das) [1014714 928518]
  - [net] ipv6: ipv6_create_tempaddr cleanup (Petr Holasek) [999361 999362] {CVE-2013-0343}
  - [net] ipv6: remove max_addresses check from ipv6_create_tempaddr (Petr Holasek) [999361 999362] {CVE-2013-0343}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.1.2.el5]
changelog:
  - [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
  - [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.2.1.el5]
changelog:
  - [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
  - [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
  - [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
  - [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.3.1.el5]
changelog:
  - [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
  - [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
  - [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
  - [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.4.1.el5]
changelog:
  - [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
  - [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
  - [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
  - [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.6.1.el5]
changelog:
  - [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
  - [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
  - [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
  - [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
  - [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
  - [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
  - [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
  - [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
  - [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
  - [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
  - [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
  - [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
  - [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
  - [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
  - [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
  - [net] fix addr_len/msg->msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
  - [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
  - [net] be2net: prevent Tx stall on SH-R when packet size < 32 (Ivan Vecera) [1051535 1007995]
  - [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
  - [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
  - [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
  - [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.7.1.el5]
changelog:
  - [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.8.1.el5]
changelog:
  - [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
  - [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
  - [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
  - [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
  - [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
  - [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.9.1.el5]
changelog:
  - [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
  - [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
  - [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
  - [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
  - [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
  - [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
  - [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
  - [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.11.1.el5]
changelog:
  - [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
  - [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
  - [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ndisc: Update neigh->updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
  - [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
  - [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
  - [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
  - [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
  - [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
  - [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
  - [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
  - [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.12.1.el5]
changelog:
  - [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102702 1102703] {CVE-2014-3917}
  - [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1125246 1080194]
  - [net] tg3: Fix Read DMA workaround for 5719 A0 (Ivan Vecera) [1121017 924590]
  - [fs] jbd: don't wake kjournald unnecessarily (Denys Vlasenko) [1116027 1081785]
  - [fs] jbd: don't wait (forever) for stale tid caused by wraparound (Denys Vlasenko) [1116027 1081785]
  - [fs] ext4: fix waiting and sending of barrier in ext4_sync_file() (Denys Vlasenko) [1116027 1081785]
  - [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Denys Vlasenko) [1116027 1081785]
  - [fs] jbd2: fix sending of data flush on journal commit (Denys Vlasenko) [1116027 1081785]
  - [fs] ext4, jbd2: Add barriers for file systems with ext journals (Denys Vlasenko) [1116027 1081785]
  - [fs] jbd: fix fsync() tid wraparound bug (Denys Vlasenko) [1116027 1081785]
  - [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [1117665 1102768]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-362.el5]
changelog:
  - [block] cciss: Silence noisy per-device cciss messages (Tomas Henzl) [827515]
  - [fs] gfs2: flush work queue before clearing glock hash tables (Abhijith Das) [959532]
  - [fs] extN: tighten restrictions on inode flags (Eric Sandeen) [756309]
  - [mm] use-after-free in madvise_remove() (Jacob Tanenbaum) [849736] {CVE-2012-3511}
  - [internal] kernel.spec: add Provides line to kernel-debug-devel (Phillip Lougher) [709658]


author: Phillip Lougher <plougher@redhat.com> [2.6.18-363.el5]
changelog:
  - [virt] netback: don't disconnect frontend with oversize packet (Andrew Jones) [971155]
  - [virt] netfront: reduce gso_max_size to account max TCP header (Andrew Jones) [971155]
  - [block] cdrom: use kzalloc() for failing hardware (Frantisek Hrbata) [973104] {CVE-2013-2164}
  - [block] cciss: Update version string (Linda Knippers) [919633]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-389.el5]
changelog:
  - [block] floppy: don't write kern-only members to FDRAWCMD output (Denys Vlasenko) [1094303] {CVE-2014-1737 CVE-2014-1738}
  - [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094303] {CVE-2014-1737 CVE-2014-1738}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-390.el5]
changelog:
  - [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1090806]
  - [net] ndisc: Update neigh->updated with write lock (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1090806]
  - [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1090806]
  - [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [980268]
  - [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [980268]
  - [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [980268]
  - [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [980268]
  - [fs] knfsd: demote some printk()s to dprintk()s (J. Bruce Fields) [984732]
  - [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093312] {CVE-2014-2678}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-391.el5]
changelog:
  - [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1080606]
  - [net] forcedeth: run loopback test only on chips that support it (Ivan Vecera) [661959]
  - [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1109888]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-392.el5]
changelog:
  - [redhat] kabi: Adding symbol pci_num_vf (Jiri Olsa) [999389]
  - [fs] gfs2: Allocate directory memory with GFP_NOFS (Robert S Peterson) [1103256]
  - [kernel] compat: compat_sys_times: don't take tasklist_lock (Mateusz Guzik) [984541]
  - [fs] nfs4: Add recovery for individual stateids (Dave Wysochanski) [867570]
  - [fs] nfs4: Don't start state recovery in nfs4_close_done (Dave Wysochanski) [867570]
  - [s390] kernel: fix save and restore of the fp-control register (Hendrik Brueckner) [1034342]
  - [net] bridge: fix some kernel warning in multicast timer (Amerigo Wang) [902454]
  - [net] bridge: send query as soon as leave is received (Amerigo Wang) [902454]
  - [net] bridge: only expire the mdb entry when query is received (Amerigo Wang) [902454]
  - [net] bridge: Fix typo that may render snooping less effective (Amerigo Wang) [902454]
  - [net] AF_UNIX: EOF on non-blocking SOCK_SEQPACKET (Swapnil Nagarkar) [1025410]
  - [fs] gfs2: clear directory cache from master directory at unmount (Robert S Peterson) [859964]
  - [net] netlink: Make netlink processing routines semi-synchronious (Daniel Borkmann) [947562]
  - [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103649]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-393.el5]
changelog:
  - [fs] jbd: don't wake kjournald unnecessarily (Denys Vlasenko) [1081785]
  - [fs] jbd: don't wait (forever) for stale tid caused by wraparound (Denys Vlasenko) [1081785]
  - [fs] ext4: fix waiting and sending of barrier in ext4_sync_file() (Denys Vlasenko) [1081785]
  - [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Denys Vlasenko) [1081785]
  - [fs] jbd2: fix sending of data flush on journal commit (Denys Vlasenko) [1081785]
  - [fs] ext4, jbd2: Add barriers for file systems with ext journals (Denys Vlasenko) [1081785]
  - [fs] jbd: fix fsync() tid wraparound bug (Denys Vlasenko) [1081785]
  - [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [1102768]
  - [fs] ext3: explicitly rm inode from orphan list after failed io (Eric Sandeen) [1088041]
  - [infiniband] mlx4: Fix BlueFlame race (Amir Vadai) [1088582]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-394.el5]
changelog:
  - Revert: [net] bridge: Fix typo that may render snooping less effective (Amerigo Wang) [902454]
  - Revert: [net] bridge: only expire the mdb entry when query is received (Amerigo Wang) [902454]
  - Revert: [net] bridge: send query as soon as leave is received (Amerigo Wang) [902454]
  - Revert: [net] bridge: fix some kernel warning in multicast timer (Amerigo Wang) [902454]


