# changelog

author: Rafael Aquini <aquini@redhat.com> [2.6.32-551.el6]
changelog:
  - [net] netfilter: ipset: autoload set type modules safely (Jiri Pirko) [1208051]
  - [net] dynticks: avoid flow_cache_flush() interrupting every core (Marcelo Leitner) [1191559]
  - [x86] Mark Intel Broadwell-DE processor as supported (Steve Best) [1099685]
  - [x86] Mark Intel Skylake-S processor as supported (Steve Best) [1132156]
  - [x86] Mark Intel Skylake-Y processor as supported (Steve Best) [1194009]
  - [netdrv] mlx4_core: Fix error message deprecation for ConnectX-2 cards (Amir Vadai) [1157841]
  - [netdrv] mlx4_core: Deprecate error message at ConnectX-2 cards startup to debug (Amir Vadai) [1157841]
  - [netdrv] ixgbevf: Add code to check for Tx hang (John Greene) [1150344]
  - [netdrv] ixgbevf: Fix ordering of shutdown to correctly disable Rx and Tx (John Greene) [1150344]
  - [netdrv] ixgbevf: set vlan_features in a single write instead of several ORs (John Greene) [1150344]
  - [netdrv] ixgbevf: add RSS support for X550 (John Greene) [1150344]
  - [netdrv] ixgbevf: enable multiple queue support (John Greene) [1150344]
  - [netdrv] ixgbevf: Fix checksum error when using stacked vlan (John Greene) [1150344]
  - [netdrv] ixgbevf: fix possible crashes in probe and remove (John Greene) [1150344]
  - [netdrv] ixgbevf: add support for X550 VFs (John Greene) [1150344]
  - [netdrv] ixgbevf: compare total_rx_packets and budget in ixgbevf_clean_rx_irq (John Greene) [1150344]
  - [netdrv] ixgbevf: Update Rx next to clean in real time (John Greene) [1150344]
  - [netdrv] ixgbevf: reorder main loop in ixgbe_clean_rx_irq to allow for do/while/continue (John Greene) [1150344]
  - [netdrv] ixgbevf: Cleanup variable usage, improve stack performance (John Greene) [1150344]
  - [netdrv] ixgbevf: Combine the logic for post Rx processing into single function (John Greene) [1150344]
  - [netdrv] ixgbevf: Test Rx status bits directly out of the descriptor (John Greene) [1150344]
  - [netdrv] ixgbevf: Update ixgbevf_alloc_rx_buffers to handle clearing of status bits (John Greene) [1150344]
  - [netdrv] ixgbevf: remove useless bd_number from struct ixgbevf_adapter (John Greene) [1150344]
  - [netdrv] ixgbevf: Resolve missing-field-initializers warnings (John Greene) [1150344]
  - [netdrv] ixgbevf: introduce delay for checking VFLINKS on 82599 (John Greene) [1150344]
  - [netdrv] ixgbevf: Remove unused get_supported_physical_layer pointer (John Greene) [1150344]
  - [netdrv] ixgbevf: do vlan cleanup (John Greene) [1150344]
  - [netdrv] ibmveth: Add function to enable live MAC address changes (Gustavo Duarte) [1198748]
  - [netdrv] ibmveth: Add function to enable live MAC address changes (Gustavo Duarte) [1198748]
  - [tools] perf: Fix race in build_id_cache__add_s() (Milos Vyletel) [1204102]
  - [edac] sb_edac: Add support for Broadwell-DE processor (Seth Jennings) [1197939]
  - [edac] sb_edac: Fix typo computing number of banks (Seth Jennings) [1197939]
  - [acpi] memhotplug: add parameter to disable memory hotplug (Igor Mammedov) [1207249]
  - [acpi] processor: Convert apic_id to phys_id to make it arch agnostic (Prarit Bhargava) [1201164]
  - [acpi] processor: Make it possible to get local x2apic id via _MAT (Prarit Bhargava) [1201164]
  - [acpi] scan: bail out early if failed to parse APIC ID for CPU (Prarit Bhargava) [1201164]
  - [acpi] processor: use apic_id and remove duplicated _MAT evaluation (Prarit Bhargava) [1201164]
  - [acpi] processor: Introduce apic_id in struct processor to save parsed APIC id (Prarit Bhargava) [1201164]
  - [acpi] processor: export acpi_get_cpuid() (Prarit Bhargava) [1201164]
  - [acpi] video: Fix use_native_backlight selection logic (Benjamin Tissoires) [1205233]
  - [acpi] video: Change the default for video.use_native_backlight to 1 (Benjamin Tissoires) [1205233]
  - [acpi] video: Add systems that should favour native backlight interface (Benjamin Tissoires) [1205233]
  - [acpi] video: Do not register backlight if win8 and native interface exists (Benjamin Tissoires) [1205233]
  - [acpi] video: separate backlight control and event interface (Benjamin Tissoires) [1205233]
  - [acpi] video: correct acpi_video_bus_add error processing (Benjamin Tissoires) [1205233]
  - [acpi] video: use after input_unregister_device() (Benjamin Tissoires) [1205233]
  - [acpi] video: Don't start video device until its associated input device has been allocated (Benjamin Tissoires) [1205233]
  - [acpi] video: Harden video bus adding (Benjamin Tissoires) [1205233]
  - [acpi] video: fix unused but set variables in ACPI (Benjamin Tissoires) [1205233]
  - [acpi] video: use kasprintf (Benjamin Tissoires) [1205233]
  - [video] backlight: fix KABI breakage (Benjamin Tissoires) [1205233]
  - [video] backlight: introduce backlight_device_registered (Benjamin Tissoires) [1205233]
  - [video] backlight: add backlight type (Benjamin Tissoires) [1205233]
  - [acpi] preparation of backlight backports (Benjamin Tissoires) [1205233]
  - [acpi] acpica: expose OSI version (Benjamin Tissoires) [1205233]
  - [scsi] hpsa: dont meddle with hw which isn't ours (cciss) (Tomas Henzl) [1204886]
  - [scsi] be2iscsi: Bump driver version (Rob Evers) [1189845]
  - [scsi] be2iscsi: Fix kernel panic when device initialization fails (Rob Evers) [1189845]
  - [x86] tls: Interpret an all-zero struct user_desc as "no segment" (Kurt Stutsman) [1172798] {CVE-2014-8133}
  - [x86] tls: Don't validate lm in set_thread_area() after all (Kurt Stutsman) [1172798] {CVE-2014-8133}
  - [x86] tls: Disallow unusual TLS segments (Kurt Stutsman) [1172798] {CVE-2014-8133}
  - [x86] tls: Validate TLS entries to protect espfix (Kurt Stutsman) [1172798] {CVE-2014-8133}


author: Rafael Aquini <aquini@redhat.com> [2.6.32-552.el6]
changelog:
  - [fs] cifs: Don't replace dentries for dfs mounts (Sachin Prabhu) [1204047]
  - [fs] nfsv4: Don't decode fs_locations if we didn't ask for them (Benjamin Coddington) [1206695]
  - [usb] storage: Use normalized sense when emulating autosense (Gopal Tiwari) [1202951]
  - [scsi] virtio-scsi: avoid cancelling uninitialized work items (Paolo Bonzini) [1066623]
  - [sound] alsa: hda_intel: apply the Seperate stream_tag for Sunrise Point (Adrian Huang) [1209541]
  - [netdrv] qlcnic: Update version to 5.3.62.1 (Chad Dupuis) [1196516]
  - [netdrv] qlcnic: Delete existing multicast MAC list before adding new (Chad Dupuis) [1196516]
  - [netdrv] bnx2x: Force fundamental reset for EEH recovery (Michal Schmidt) [1199576]
  - [drivers] core: fix possible missing of device probe (Michal Schmidt) [1149614]
  - [drivers] core: deferral race condition fix (Michal Schmidt) [1149614]
  - [drivers] core: Fix ordering between deferred_probe and exiting initcalls (Michal Schmidt) [1149614]
  - [drivers] core: Move deferred devices to the end of dpm_list before probing (Michal Schmidt) [1149614]
  - [drivers] core: fixup reversed deferred probe order (Michal Schmidt) [1149614]
  - [drivers] core: KABI fix, put deferred_probe in device_private under __GENKSYMS__ (Michal Schmidt) [1149614]
  - [drivers] core: move the deferred probe pointer into the private area (Michal Schmidt) [1149614]
  - [drivers] revert "core: fix addition of delayed probe infrastructure" (Michal Schmidt) [1149614]
  - [infiniband] qib: Fix potential NULL d_inode dereference (Doug Ledford) [1185095]
  - [infiniband] qib: Add support for the new QMH7360 card (Doug Ledford) [1185095]
  - [infiniband] qib: Do not write EEPROM (Doug Ledford) [1185095]
  - [infiniband] qib: remove pointless assignments (Doug Ledford) [1185095]
  - [infiniband] qib: Correct reference counting in debugfs qp_stats (Doug Ledford) [1185095]
  - [infiniband] qib: Change get_user_pages() usage to always NULL vmas (Doug Ledford) [1185095]
  - [infiniband] qib: Return error for unsupported QP creation flags (Doug Ledford) [1185095]
  - [infiniband] qib: Additional Intel branding changes (Doug Ledford) [1185095]
  - [infiniband] qib: Fix port in pkey change event (Doug Ledford) [1185095]
  - [infiniband] qib: Use pci_enable_msix_range() instead of pci_enable_msix() (Doug Ledford) [1185095]
  - [infiniband] ocrdma: Update sli data structure for endianness (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Report correct value of max_fast_reg_page_list_len (Doug Ledford) [1149273]
  - [infiniband] ocrdma: report asic-id in query device (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Fix off by one in ocrdma_query_gid() (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Use unsigned for bit index (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Help gcc generate better code for ocrdma_srq_toggle_bit (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Update the ocrdma module version string (Doug Ledford) [1149273]
  - [infiniband] ocrdma: set vlan present bit for user AH (Doug Ledford) [1149273]
  - [infiniband] ocrdma: remove reference of ocrdma_dev out of ocrdma_qp structure (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Add support for interrupt moderation (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Honor return value of ocrdma_resolve_dmac (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Allow expansion of the SQ CQEs via buddy CQ expansion of the QP (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Discontinue support of RDMA-READ-WITH-INVALIDATE (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Host crash on destroying device resources (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Do proper cleanup even if FW is in error state (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Report correct state in ibv_query_qp (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Debugfs enhancments for ocrdma driver (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Report correct count of interrupt vectors while registering ocrdma device (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Move PD resource management to driver (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Increase the GID table size (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Add support for IB stack compliant stats in sysfs (Doug Ledford) [1149273]
  - [infiniband] core: Replace ib_umem's offset field with a full address (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Always resolve destination mac from GRH for UD QPs (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Fix ocrdma_query_qp() to report q_key value for UD QPs (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Save the bit environment, spare unncessary parenthesis (Doug Ledford) [1149273]
  - [infiniband] ocrdma: The kernel has a perfectly good BIT() macro - use it (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Don't memset() buffers we just allocated with kzalloc() (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Remove a unused-label warning (Doug Ledford) [1149273]
  - [infiniband] ocrdma: Convert kernel VA to PA for mmap in user (Doug Ledford) [1149273]
  - [infiniband] ipoib: drop mcast_mutex usage (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: deserialize multicast joins (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: fix MCAST_FLAG_BUSY usage (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: No longer use flush as a parameter (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: Use dedicated workqueues per interface (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: Make the carrier_on_task race aware (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: Consolidate rtnl_lock tasks in workqueue (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: change init sequence ordering (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: factor out ah flushing (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: validate struct ipoib_cb size (Doug Ledford) [1141191 1145910]
  - [infiniband] ipoib: Remove unnecessary test for NULL before debugfs_remove() (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: Consolidate rtnl_lock tasks in workqueue" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: Make the carrier_on_task race aware" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: fix MCAST_FLAG_BUSY usage" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: fix mcast_dev_flush/mcast_restart_task race" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: change init sequence ordering" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: Use dedicated workqueues per interface" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: Make ipoib_mcast_stop_thread flush the workqueue" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: No longer use flush as a parameter" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: fix IPOIB_MCAST_RUN flag usage" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: Add a helper to restart the multicast task" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: make delayed tasks not hold up everything" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: Handle -ENETRESET properly in our callback" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: don't restart our thread on ENETRESET" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: remove unneeded locks" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: fix race between mcast_dev_flush and mcast_join" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: fix ipoib_mcast_restart_task" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: flush the ipoib_workqueue on unregister" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: cleanup a couple debug messages" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: make sure we reap all our ah on shutdown" (Doug Ledford) [1141191 1145910]
  - [infiniband] revert "ipoib: don't queue a work struct up twice" (Doug Ledford) [1141191 1145910]
  - [pci] msi: Fix pci_msix_vec_count() htmldocs failure (Doug Ledford) [1185095]
  - [pci] msi: Add pci_msix_vec_count() (Doug Ledford) [1185095]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-553.el6]
changelog:
  - [scsi] fnic: IOMMU Fault occurs when IO and abort IO is out of order (Chris Leech) [1024066]
  - [scsi] fnic Driver crashed with NULL pointer reference (Chris Leech) [1024066]
  - [scsi] fnic: For Standalone C series, "sending VLAN request" message (Chris Leech) [1024066]
  - [scsi] fnic: Improper resue of exchange Ids (Chris Leech) [1024066]
  - [scsi] fnic: Memcopy only mimumum of data or trace buffer (Chris Leech) [1024066]
  - [scsi] fnic: assign FIP_ALL_FCF_MACS to fcoe_all_fcfs (Chris Leech) [1024066]
  - [scsi] fnic: part of treewide: fix errors in printk (Chris Leech) [1024066]
  - [scsi] fnic: fnic Control Path Trace Utility (Chris Leech) [1024066]
  - [scsi] fnic: Failing to queue aborts due to Q full cause terminate (Chris Leech) [1024066]
  - [scsi] fnic: NoFIP solicitation frame in NONFIP mode and changed IO (Chris Leech) [1024066]
  - [scsi] remove unnecessary pci_set_drvdata() (Chris Leech) [1024066]
  - [scsi] scsi: Convert uses of compare_ether_addr to ether_addr_equal (Chris Leech) [1024066]
  - [scsi] fnic: Incremented driver version (Chris Leech) [1024066]
  - [scsi] fnic: Fnic Statistics Collection (Chris Leech) [1024066]
  - [scsi] fnic: host reset returns nonzero value(errno) on (Chris Leech) [1024066]
  - [scsi] fnic: fnic Driver Tuneables Exposed through CLI (Chris Leech) [1024066]
  - [scsi] fnic: Kernel panic while running sh/nosh with max lun (Chris Leech) [1024066]
  - [scsi] fnic: Hitting BUG_ON(io_req->abts_done) (Chris Leech) [1024066]
  - [scsi] fnic: Remove QUEUE_FULL handling code (Chris Leech) [1024066]
  - [scsi] fnic: On system with >1.1TB RAM, VIC fails multipath (Chris Leech) [1024066]
  - [scsi] fnic: FC stat param seconds_since_last_reset not (Chris Leech) [1024066]
  - [scsi] lseek(fd, n, SEEK_END) does *not* go to eof - n (Chris Leech) [1024066]
  - [netdrv] tun: Fix csum_start with VLAN acceleration (Jason Wang) [1036482]
  - [netdrv] tun: unbreak truncated packet signalling (Jason Wang) [1036482]
  - [netdrv] tuntap: hardware vlan tx support (Jason Wang) [1036482]
  - [vhost] vhost-net: fix handle_rx buffer size (Jason Wang) [1036482]
  - [netdrv] mlx4_en: Reduce memory consumption on kdump kernel (Amir Vadai) [1100303]
  - [netdrv] mlx4_core: Use low memory profile on kdump kernel (Amir Vadai) [1100303]
  - [netdrv] mlx4: Use is_kdump_kernel() to detect kdump kernel (Amir Vadai) [1100303]
  - [kernel] crash_dump: Make is_kdump_kernel() accessible from modules (Amir Vadai) [1100303]


author: Rafael Aquini <aquini@redhat.com> [2.6.32-554.el6]
changelog:
  - [kabi] Adding symbol si_meminfo (Petr Oros) [1150668]
  - [kabi] Adding symbol pv_mmu_ops (Petr Oros) [1177818]
  - [kabi] Adding symbol mmput (Petr Oros) [1177818]
  - [kabi] Adding symbol get_task_mm (Petr Oros) [1177818]
  - [kabi] Adding symbol cpu_active_mask (Petr Oros) [1177818]
  - [kabi] Adding symbol __node_distance (Petr Oros) [1177818]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-555.el6]
changelog:
  - [crypto] testmgr: fix RNG return code enforcement (Herbert Xu) [1208804]
  - [netdrv] i40e: Fix RSS size at init since default num queue calculation has changed (Stefan Assmann) [1209444]
  - [netdrv] i40e: Move RSS table size for VSIs to the VSI struct (Stefan Assmann) [1209444]
  - [netdrv] i40e: Enable more than 64 qps for the Main VSI (Stefan Assmann) [1209444]
  - [netdrv] i40e: use netdev_rss_key_fill() helper (Stefan Assmann) [1209444]
  - [net] netfilter: xtables: make use of caller family rather than target family (Florian Westphal) [1210697]
  - [s390] dasd: fix panic in DASD driver during boot (Hendrik Brueckner) [1193535]
  - [md] dm-io: fix a race condition in the wake up code for sync_io (Mike Snitzer) [1205853]
  - [edac] sb_edac: fix corruption/crash on imbalanced Haswell home agents (Seth Jennings) [1210148]
  - [fs] proc: show all supplementary groups in /proc/pid/status (Jerome Marchand) [960050]
  - [kernel] futex: Take hugepages into account when generating futex_key (Jerome Marchand) [1193250]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-556.el6]
changelog:
  - [mm] readahead: get back a sensible upper limit (Rafael Aquini) [1187940]
  - [fs] quota: Properly invalidate caches even for filesystems with blocksize < pagesize (Lukas Czerner) [893926]
  - [fs] xfs: fix behaviour of XFS_IOC_FSSETXATTR on directories (Zorro Lang) [1200705]
  - [fs] xfs: allow logical-sector-sized DIO (Eric Sandeen) [1197195]
  - [fs] xfs: rename xfs_buftarg structure members (Eric Sandeen) [1197195]
  - [fs] xfs: clean up xfs_buftarg (Eric Sandeen) [1197195]
  - [fs] xfs: simplify xfs_setsize_buftarg callchain; remove unused arg (Eric Sandeen) [1197195]
  - [fs] fuse: avoid scheduling while atomic (Brian Foster) [1144128]
  - [fs] pipe: kill ->map() and ->unmap() (Brian Foster) [1144128]
  - [fs] fuse: use clear_highpage() and KM_USER0 instead of KM_USER1 (Brian Foster) [1144128]
  - [s390] af_iucv: fix AF_IUCV sendmsg() errno (Hendrik Brueckner) [1211173]
  - [s390] zcrypt: improve device probing for zcrypt adapter cards (Hendrik Brueckner) [1211174]
  - [cpufreq] fix null ptr dereference (Petr Oros) [1186720]
  - [powerpc] eeh: Remove reference to PCI device (Gustavo Duarte) [1189019]
  - [powerpc] pci: Override pcibios_release_device() (Gustavo Duarte) [1189019]
  - [powerpc] eeh: Export functions for hotplug (Gustavo Duarte) [1189019]
  - [pci] Add pcibios_release_device() (Gustavo Duarte) [1189019]
  - [netdrv] mlx4_en: do not ignore autoneg in mlx4_en_set_pauseparam (Amir Vadai) [1121491]
  - [netdrv] mlx4_core: Replace pr_warning with pr_warn (Amir Vadai) [1136753]
  - [netdrv] mlx4_core: Deprecate use_prio module parameter (Amir Vadai) [1136753]
  - [x86] intel_pstate: Add CPUID for BDW-H CPU (Steve Best) [1164883]
  - [x86] crypto: aesni - fix memory usage in GCM decryption (Kurt Stutsman) [1213330] {CVE-2015-3331}


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-557.el6]
changelog:
  - [firmware] cxgb4: update firmware to revision 1.13.32.0 for T4 and T5 (Jarod Wilson) [1189255]
  - [netdrv] cxgb4: Add warning msg when attaching to adapters which have FLASHes smaller than 2Mb (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Increase epd buff size for debug interface (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Configure 0B MRs to match HW implementation (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Fix locking issue in process_mpa_request (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Limit MRs to < 8GB for T4/T5 devices (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Wake up waiters after flushing the qp (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Handle NET_XMIT return codes (Sai Vemuri) [1211742]
  - [netdrv] libcxgbi: fix freeing skb prematurely (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: use set_wr_txq() to set tx queues (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: handle non-pdu-aligned rx data (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: additional types of negative advice (Sai Vemuri) [1211742]
  - [netdrv] cxgb4/cxgb4i: set the max. pdu length in firmware (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: fix credit check for tx_data_wr (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: fix tx immediate data credit check (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: Don't block unload/cxgb4 unload when remote closes TCP connection (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Update FW version string to match FW binary version 1.12.25.0 (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Add a check for flashing FW using ethtool (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fill in supported link mode for SFP modules (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fix missing initialization of win0_lock (Sai Vemuri) [1211742]
  - [netdrv] cxgb4vf: FL Starvation Threshold needs to be larger than the SGE's Egress Congestion Threshold (Sai Vemuri) [1211742]
  - [netdrv] cxgb4/cxgb4vf: For T5 use Packing and Padding Boundaries for SGE DMA transfers (Sai Vemuri) [1211742]
  - [netdrv] cxgb4vf: Move fl_starv_thres into adapter->sge data structure (Sai Vemuri) [1211742]
  - [netdrv] cxgb4vf: Replace repetitive pci device ID's with right ones (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: send abort_rpl correctly (Sai Vemuri) [1211742]
  - [netdrv] libcxgbi: support ipv6 address host_param (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: Fix -Wmaybe-uninitialized warning (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: Fix -Wunused-function warning (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fix build failure in cxgb4 when ipv6 is disabled/not in-built (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: Remove duplicated CLIP handling code (Sai Vemuri) [1211742]
  - [netdrv] cxgb4i: avoid holding mutex in interrupt context (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Fix ntuple calculation for ipv6 and remove duplicate line (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Take IPv6 into account for best_mtu and set_emss (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Make c4iw_wr_log_size_order static (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fix FW flash logic using ethtool (Sai Vemuri) [1211742]
  - [netdrv] cxgb4vf: Add 40G support for cxgb4vf driver (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Wait for device to get ready before reading any register (Sai Vemuri) [1211742]
  - [netdrv] cxgb4/cxgb4vf: Updated the LSO transfer length in CPL_TX_PKT_LSO for T5 (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: clean up a type issue (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: potential shift wrapping bug (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Add support for adaptive rx (Sai Vemuri) [1211742]
  - [netdrv] cxgb4/cxgb4vf: Add Devicde ID for two more adapter (Sai Vemuri) [1211742]
  - [netdrv] cxgb4vf: Remove superfluous "idx" parameter of CH_DEVICE() macro (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Use BAR2 Going To Sleep (GTS) for T5 and later (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Don't allocate adapter structure for all PF's (Sai Vemuri) [1211742]
  - [netdrv] cxgb4/cxgb4vf: Add device ID for new adapter and remove for dbg adapter (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fix t4_flash_erase_sectors() to throw an error when requested to erase sectors which aren't in the FLASH (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Add support to S25FL032P flash (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Allow T4/T5 firmware sizes up to 1MB (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Issue mbox commands on correct mbox (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Avoid dumping Write-only registers in register dump (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Detect and display firmware reported errors (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fix T5 adapter accessing T4 adapter registers (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fixed the code to use correct length for part number (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fix for handling 1Gb/s SFP+ Transceiver Modules (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Free completed tx skbs promptly (Sai Vemuri) [1211742]
  - [netdrv] cxgb4: Fix race condition in cleanup (Sai Vemuri) [1211742]
  - [infiniband] cxgb4: Only call CQ completion handler if it is armed (Sai Vemuri) [1211742]
  - [netdrv] iw_cxgb4: Don't limit TPTE count to 32KB (Sai Vemuri) [1211742]
  - [netdrv] iw_cxgb4: advertise the correct device max attributes (Sai Vemuri) [1211742]
  - [netdrv] iw_cxgb4: Support query_qp() verb (Sai Vemuri) [1211742]
  - [netdrv] iw_cxgb4: log detailed warnings for negative advice (Sai Vemuri) [1211742]
  - [scsi] cxgb4i: Fix ipv6 build failure caught with randconfig (Sai Vemuri) [1145278]
  - [scsi] cxgb4i: remove spurious use of rcu (Sai Vemuri) [1145278]
  - [scsi] cxgb4i: Guard ipv6 code with a config check (Sai Vemuri) [1145278]
  - [scsi] cxgb4i: Add ipv6 code to driver, call into libcxgbi ipv6 api (Sai Vemuri) [1145278]
  - [scsi] libcxgbi: Add ipv6 api to driver (Sai Vemuri) [1145278]
  - [scsi] cxgb4i: Use cxgb4_select_ntuple to correctly calculate ntuple fields (Sai Vemuri) [1145278]
  - [scsi] cxgb4i: add support for T5 adapter (Sai Vemuri) [1145278]
  - [scsi] csgb4i: convert skb->transport_header into skb_transport_header(skb) (Sai Vemuri) [1145278]
  - [netdrv] cxgb4: Export symbols required by cxgb4i for ipv6 support and required defines (Sai Vemuri) [1145278]
  - [netdrv] cxfb4vf: Add config option to enable Chelsio cxgb4vf driver (Sai Vemuri) [1112417]
  - [netdrv] cxfb4vf: Call dev_kfree/consume_skb_any instead of <dev_>kfree_skb (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Use pci_enable_msix_range() instead of pci_enable_msix() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Turn off SGE RX/TX Callback Timers and interrupts in PCI shutdown routine (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Adds device ID for few more Chelsio T4 Adapters (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Check if rx checksum offload is enabled, while reading hardware calculated checksum (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Adds device Id for few more Chelsio adapters (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Remove superfluous call to pci_disable_msix() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: make functions static and remove dead code (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: added much cleaner implementation of is_t4() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: use DEFINE_PCI_DEVICE_TABLE (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: remove unnecessary pci_set_drvdata() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Staticize local symbols (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Support CPL_SGE_EGR_UPDATEs encapsulated in a CPL_FW4_MSG (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add support for Chelsio T5 adapter (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add support for Chelsio's T480-CR and T440-LP-CR adapters (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Fix VLAN extraction counter increment (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Fix extraction of cpl_rx_pkt from the response queue descriptor (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Use netdev_<level> and pr_<level> (Sai Vemuri) [1112417 1145275]
  - [netdrv] cxgb4vf: remove __dev* attributes (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: do vlan cleanup (Sai Vemuri) [1112417]
  - [netdrv] cxgb<3, 4>*: improve Kconfig dependencies (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Use defined Mailbox Timeout (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Quiesce Virtual Interfaces on shutdown (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Behave properly when CONFIG_DEBUG_FS isn't defined (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Check driver parameters in the right place (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: recover from failure in cxgb4vf_open (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix mailbox data/control coherency domain race (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Ingress Queue Entry Size needs to be 64 bytes (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix setting unicast/multicast addresses (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Advertise NETIF_F_TSO_ECN (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix up "Section Mismatch" compiler warning (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: add ethtool statistics for GRO (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: minor comment/symbolic name cleanup (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: add call to Firmware to reset VF State (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Fail open if link_start() fails (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: flesh out PCI Device ID Table (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix some errors in Gather List to skb conversion (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix bug in Generic Receive Offload (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: don't implement trivial (and incorrect) ndo_select_queue() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: remove call to stop TX queues at load time (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: make single bit signed bitfields unsigned (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Use netif_set_real_num_<rx, tx>_queues (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: do not use PCI resources before pci_enable_device() (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Fix bug where we were only allocating one queue in MSI mode (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Fix off-by-one error checking for the end of the mailbox delay array (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix SGE resource resource deallocation bug (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: fix TX Queue restart (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Implement "Unhandled Interrupts" statistic (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: remove obsolete DECLARE_PCI_UNMAP_ADDR usage (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Use correct shift factor for extracting the SGE DMA Ingress Padding Boundary (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Remove obsolete comment about the lack of a TX Timer Callback (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Stitch new T4 PCI-E SR-IOV Virtual Function driver into the build (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add new Makefile for T4 PCI-E SR-IOV Virtual Function driver cxgb4vf (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add main T4 PCI-E SR-IOV Virtual Function driver for cxgb4vf (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add T4 Virtual Function Scatter-Gather Engine DMA code (Sai Vemuri) [1112417]
  - [netdrv] cxgb4vf: Add core T4 PCI-E SR-IOV Virtual Function hardware definitions and device communication code (Sai Vemuri) [1112417]
  - [infiniband] iw_cxgb4: fix for 64-bit integer division (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: only free allocated fls (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fixed incorrect check for memory operation in t4_memory_rw (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add the MC1 registers to read in the interrupt handler (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Update FW version string to match FW binary version (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix for SR-IOV VF initialization (Sai Vemuri) [1145275]
  - [netdrv] cxgb4i: Move stray CPL definitions to cxgb4 driver (Sai Vemuri) [1145275]
  - [netdrv] cxgb4/iw_cxgb4: Move common defines to cxgb4 (Sai Vemuri) [1145275]
  - [netdrv] cxgb4/iw_cxgb4: work request logging feature (Sai Vemuri) [1145275]
  - [netdrv] cxgb4/iw_cxgb4: display TPTE on errors (Sai Vemuri) [1145275]
  - [netdrv] cxgb4/iw_cxgb4: use firmware ord/ird resource limits (Sai Vemuri) [1145275]
  - [netdrv] iw_cxgb4: Detect Ing. Padding Boundary at run-time (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Initialize the device status page (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Clean up connection on ARP error (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix skb_leak in reject_cr() (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: remove unnecessary null test before debugfs_remove_recursive (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Adds device ID for few more Chelsio T4 Adapters (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Replaced the backdoor mechanism to access the HW memory with PCIe Window method (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Use FW interface to get BAR0 value (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fixes cxgb4 probe failure in VM when PF is exposed through PCI Passthrough (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Not need to hold the adap_rcu_lock lock when read adap_rcu_list (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Change default Interrupt Holdoff Packet Count Threshold (Sai Vemuri) [1145275]
  - [netdrv] iw_cxgb4: don't truncate the recv window size (Sai Vemuri) [1145275]
  - [netdrv] iw_cxgb4: Choose appropriate hw mtu index and ISS for iWARP connections (Sai Vemuri) [1145275]
  - [netdrv] iw_cxgb4: Allocate and use IQs specifically for indirect interrupts (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: add missing padding at end of struct c4iw_alloc_ucontext_resp (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Add missing padding at end of struct c4iw_create_cq_resp (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix vlan support (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Check if rx checksum offload is enabled, while reading hardware calculated checksum (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Decode the firmware port and module type a bit more for ethtool (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Decode PCIe Gen3 link speed (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Update Kconfig to include Chelsio T5 adapter (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Only allow kernel db ringing for T4 devs (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Force T5 connections to use TAHOE congestion control (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix endpoint mutex deadlocks (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: use the correct max size for firmware flash (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Save the correct mac addr for hw-loopback connections in the L2T (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix over-dereference when terminating (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Use uninitialized_var() (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Add missing debug stats (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Initialize reserved fields in a FW work request (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Use pr_warn_ratelimited (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Max fastreg depth depends on DSGL support (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: SQ flush fix (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: rmb() after reading valid gen bit (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Endpoint timeout fixes (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Use the BAR2/WC path for kernel QPs and T5 devices (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Disable DSGL use by default (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: rx_data() needs to hold the ep mutex (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Drop RX_DATA packets if the endpoint is gone (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Lock around accept/reject downcalls (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: set error code on kmalloc() failure (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Adds device ID for few more Chelsio Adapters (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Remove addressof casts to same type (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Call dev_kfree/consume_skb_any instead of <dev_>kfree_skb (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Update snd_seq when sending MPA messages (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Connect_request_upcall fixes (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Ignore read reponse type 1 CQEs (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix possible memory leak in RX_PKT processing (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Don't leak skb in c4iw_uld_rx_handler() (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Save the correct map length for fast_reg_page_lists (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Default peer2peer mode to 1 (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Mind the sq_sig_all/sq_sig_type QP attributes (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix incorrect BUG_ON conditions (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Always release neigh entry (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Allow loopback connections (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Cap CQ size at T4_MAX_IQ_SIZE (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix four byte info leak in c4iw_create_cq() (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix underflows in c4iw_create_qp() (Sai Vemuri) [1145275]
  - [netdrv] cxgb4/iw_cxgb4: Doorbell Drop Avoidance Bug Fixes (Sai Vemuri) [1145275]
  - [netdrv] cxgb4/iw_cxgb4: Treat CPL_ERR_KEEPALV_NEG_ADVICE as negative advice (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Calculate len properly for LSO path (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Updates for T5 SGE's Egress Congestion Threshold (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Rectify emitting messages about SGE Ingress DMA channels being potentially stuck (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add code to dump SGE registers when hitting idma hangs (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix some small bugs in t4_sge_init_soft() when our Page Size is 64KB (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: use remove handler as shutdown handler (Sai Vemuri) [1145275]
  - [netdrv] cgxb4: Stop using ethtool SPEED_* constants (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add more PCI device ids (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Don't assume LSO only uses SGL path in t4_eth_xmit() (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Remove unused registers and add missing ones (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Query firmware for T5 ULPTX MEMWRITE DSGL capabilities (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: LE-Workaround is not atomic in firmware (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Allow >10G ports to have multiple queues (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Print adapter VPD Part Number instead of Engineering Change field (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add support to recognize 40G links (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Use pci_enable_msix_range() instead of pci_enable_msix() (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Add missing neigh_release in LE-Workaround path (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix referencing freed adapter (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Don't retrieve stats during recovery (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix gcc warning on 32-bit arch (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Avoid disabling PCI device for towice (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: silence shift wrapping static checker warning (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Changed FW check version to match FW binary version (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: allow large buffer size to have page size (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Use cxgb4_select_ntuple to correctly calculate ntuple fields (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Server filters are supported only for IPv4 (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Calculate the filter server TID properly (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: make functions static and remove dead code (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add API to correctly calculate tuple fields (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Account for stid entries properly in case of IPv6 (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Assign filter server TIDs properly (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Include TCP as protocol when creating server filters (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Reserve stid 0 for T4/T5 adapters (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: calls skb_set_hash (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Make _c4iw_write_mem_dma() static (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix formatting of physical address (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add new scheme to update T4/T5 firmware (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Much cleaner implementation of is_t4()/is_t5() (Sai Vemuri) [1145275]
  - [netdrv] cgxb4: remove duplicate include in cxgb4.h (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: remove unnecessary pci_set_drvdata() (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: remove workqueue when driver registration fails (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Issue RI.FINI before closing when entering TERM (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Advertise ~0ULL as max MR size (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Always do GTS write if cidx_inc == CIDXINC_MASK (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Set arp error handler for PASS_ACCEPT_RPL messages (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix accounting for unsignaled SQ WRs to deal with wrap (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix QP flush logic (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Use correct bit shift macros for vlan filter tuples (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Handle newer firmware changes (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Add support for active and passive open connection with IPv6 address (Sai Vemuri) [1145275]
  - [infiniband] cma: Add IPv6 support for iWARP (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add CLIP support to store compressed IPv6 address (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add routines to create and remove listening IPv6 servers (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix stack info leak in c4iw_create_qp() (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Do not set net_device::dev_id to VI index (Sai Vemuri) [1145275]
  - [netdrv] cxgb3: Correct comparisons and calculations using skb->tail and skb-transport_header (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Force uninitialized state if FW_ON_ADAPTER is < FW_VERSION and we're the MASTER_PF (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: fix error recovery when t4_fw_hello returns a positive value (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Support CPL_SGE_EGR_UPDATEs encapsulated in a CPL_FW4_MSG (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix pci_device_id structure initialization with correct PF number (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix SQ allocation when on-chip SQ is disabled (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix error return code in create_qp() (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix onchip queue support for T5 (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Bump tcam_full stat and WR reply timeout (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Map pbl buffers for dma if using DSGL (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Use DSGLs for fastreg and adapter memory writes for T5 (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Add module_params to enable DB FC & Coalescing on T5 (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Turn off db coalescing when RDMA QPs are in use (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Add Support for Chelsio T5 adapter (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Disable SR-IOV support for PF4-7 for T5 (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Update driver version and description (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add T5 PCI ids (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add T5 debugfs support (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Enable doorbell drop recovery only for T4 adapter (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add T5 write combining support (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Dump T5 registers (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Initialize T5 (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add macros, structures and inline functions for T5 (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add register definations for T5 (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Allow for backward compatibility with new VPD scheme (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix cast warning (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: "cookie" can stay in host endianness (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Address sparse warnings (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Insert hwtid in pass_accept_req instead in pass_establish (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Don't wakeup threads for MPAv2 (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Don't reconnect on abort for mpa_rev 1 (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix endpoint timeout race condition (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Only log rx_data warnings if cpl status is non-zero (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Always log async errors (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Keep QP referenced until TID released (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Display streaming mode error only if detected in RTS (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Abort connections when moving to ERROR state (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Abort connections that receive unexpected streaming mode data (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix incorrect PFVF CMASK (Sai Vemuri) [1145275]
  - [netdrv] cxgb3/cxgb4: Use netdev_<level> and pr_<level> (Sai Vemuri) [1145275 1145278]
  - [infiniband] cxgb4: Fix bug for active and passive LE hash collision path (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix LE hash collision bug for passive open connection (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix LE hash collision bug for active open connection (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add LE hash collision bug fix path in LLD driver (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add T4 filter support (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: remove __dev* attributes (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Chelsio FCoE offload driver submission (common header updates) (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: use WARN (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix initialization of SGE_CONTROL register (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix unable to get UP event from the LLD (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Don't free chunk that we have failed to allocate (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Remove unnecessary #ifdef condition (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Address various sparse warnings (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: allocate enough data in t4_memory_rw() (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix build error due to missing linux/vmalloc.h include (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Dynamically allocate memory in t4_memory_rw() and get_vpd_params() (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Fix error handling in create_qp() (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Don't attempt to upgrade T4 firmware when cxgb4 will end up as a slave (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Inform caller if driver didn't upgrade firmware (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add support for T4 hardwired driver configuration settings (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add support for T4 configuration file (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Code cleanup to enable T4 Configuration File support (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Add functions to read memory via PCIE memory window (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Fix incorrect values for MEMWIN*_APERTURE and MEMWIN*_BASE (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Move dereference below NULL test (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Remove duplicate register definitions (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Update RDMA/cxgb4 due to macro definition removal in cxgb4 driver (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: set maximal number of default RSS queues (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Include vmalloc.h for vmalloc and vfree (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Use vmalloc() for debugfs QP dump (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Add debugfs RDMA memory stats (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Convert import_ep() over to dst_neigh_lookup() (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Debugfs dump_qp() updates (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Use ULP_MODE_TCPDDP (Sai Vemuri) [1145275]
  - [infiniband] cxgb4: Turn on delayed ACK (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: Use netif_set_real_num_<rx, tx>_queues (Sai Vemuri) [1145275]
  - [netdrv] cxgb4: set skb->rxhash (Sai Vemuri) [1145275]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-558.el6]
changelog:
  - [x86] mm: Linux stack ASLR implementation (Jacob Tanenbaum) [1195683] {CVE-2015-1593}
  - [scsi] megaraid_sas: do not process IOCTLs and SCSI commands during driver removal - a fix (Tomas Henzl) [1212364]
  - [fs] xfs: DIO write completion size updates race (Brian Foster) [1198440]
  - [x86] KVM: Fix lost interrupt on irr_pending race (Paolo Bonzini) [1213741]
  - [sound] ALSA: seq-oss: Initialize MIDI clients asynchronously (Jaroslav Kysela) [1212596]
  - [net] ipv6: Don't reduce hop limit for an interface (Denys Vlasenko) [1208493] {CVE-2015-2922}
  - [net] vlan: more careful checksum features handling (Vlad Yasevich) [1212384]
  - [kernel] tracing: Export tracing clock functions (Jerry Snitselaar) [1212502]
  - [input] wacom - use new input-mt routines (Aristeu Rozanski) [1111332 1111333]
  - [input] wacom: enable touch on Intuos 5 (Aristeu Rozanski) [1111332 1111333]
  - [netdrv] bnx2x: Fix kdump when iommu=on (Michal Schmidt) [1211695]
  - [netdrv] bnx2x: Fix busy_poll vs netpoll (Michal Schmidt) [1212365]
  - [netdrv] bnx2x: Fix statistics locking scheme (Michal Schmidt) [1211695]
  - [netdrv] bnx2x: Fix kdump on 4-port device (Michal Schmidt) [1211695]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-559.el6]
changelog:
  - [x86] perf: Add cpu_<prepare|starting|dying> for core_pmu (Jiri Olsa) [1188336]
  - [block] NVMe: Initialize device list head before starting (David Milburn) [1158606]
  - [block] NVMe: Fix potential corruption on sync commands (David Milburn) [1158606]
  - [block] NVMe: Fix potential corruption during shutdown (David Milburn) [1158606]
  - [block] NVMe: Asynchronous controller probe (David Milburn) [1158606]
  - [block] NVMe: Register management handle under nvme class (David Milburn) [1158606]
  - [block] NVMe: Update module version (David Milburn) [1158606]
  - [block] NVMe: Handling devices incapable of I/O (David Milburn) [1158606]
  - [x86] Mark Intel Broadwell-EP processor as supported (Steve Best) [1132146]
  - [fs] nfs: Don't attempt to decode missing directory entries (Benjamin Coddington) [1182830]
  - [acpi] Skip creation of /proc/acpi/power_resource/ entries for duplicate power resource names (Lenny Szubowicz) [1206643]
  - [powerpc] perf: Cap 64bit userspace backtraces to PERF_MAX_STACK_DEPTH (Steve Best) [1213966]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-560.el6]
changelog:
  - [powercap] RAPL: Add support for Intel Skylake processors (Steve Best) [1187314]
  - [powercap] rapl: add ID for Broadwell server (Steve Best) [1189925]
  - [s390] dasd: Fix unresumed device after suspend/resume having no paths (Hendrik Brueckner) [1213800]
  - [s390] dasd: fix inability to set a DASD device offline (Hendrik Brueckner) [1213799]
  - [s390] dasd: fix unresumed device after suspend/resume (Hendrik Brueckner) [1213801]
  - [netdrv] netvsc: don't flush peers notifying work during setting mtu (Jason Wang) [1203623]
  - [input] wacom: clear ABS_MISC on the touch device (Aristeu Rozanski) [1111332 1111333]
  - [x86] asm/entry/64: Remove a bogus 'ret_from_fork' optimization (Mateusz Guzik) [1209233] {CVE-2015-2830}
  - [fs] gfs2: try harder to obtain journal lock during recovery (Abhijith Das) [1110846]
  - [thermal] intel_powerclamp: add id for broadwell server (Steve Best) [1189954]
  - [net] Fix checksum features handling in netif_skb_features() (Vlad Yasevich) [1220247]
  - [scsi] megaraid_sas : Modify return value of megasas_issue_blocked_cmd() and wait_and_poll() to consider command status returned by firmware (Tomas Henzl) [1219105]
  - [netdrv] Revert "netxen: remove init of dev->perm_addr in drivers" (Tony Camuso) [1213689]
  - [ppc] Build RPA PCI Hotplug driver as module instead of directly into the kernel (Gustavo Duarte) [1095456]
  - [drm] radeon: fix wait in radeon_mn_invalidate_range_start (Rob Clark) [1218794]
  - [drm] i915: Fix and clean BDW PCH identification (Rob Clark) [1218794]
  - [drm] i915/vlv: save/restore the power context base reg (Rob Clark) [1218794]
  - [drm] radeon: Do not directly dereference pointers to BIOS area. (Rob Clark) [1218794]
  - [kernel] makefile: update drm version (Rob Clark) [1218794]
  - [drm] i915/vlv: remove wait for previous GFX clk disable request (Rob Clark) [1218794]
  - [drm] radeon: add extra check in radeon_ttm_tt_unpin_userptr (Rob Clark) [1218794]
  - [drm] i915: Reject the colorkey ioctls for primary and cursor planes (Rob Clark) [1218794]
  - [drm] radeon/dpm: fix 120hz handling harder (Rob Clark) [1218794]
  - [drm] radeon: do a posting read in cik_set_irq (Rob Clark) [1218794]
  - [drm] i915/vlv: remove wait for previous GFX clk disable request (Rob Clark) [1218794]
  - [drm] i915: Align initial plane backing objects correctly (Rob Clark) [1218794]
  - [drm] radeon: drop ttm two ended allocation (Rob Clark) [1218794]
  - [drm] edid: set ELD for firmware and debugfs override EDIDs (Rob Clark) [1218794]
  - [drm] radeon: drop setting UPLL to sleep mode (Rob Clark) [1218794]
  - [drm] radeon: do a posting read in si_set_irq (Rob Clark) [1218794]
  - [drm] radeon: fix interlaced modes on DCE8 (Rob Clark) [1218794]
  - [drm] Fixup racy refcounting in plane_force_disable (Rob Clark) [1218794]
  - [drm] Don't assign fbs for universal cursor support to files (Rob Clark) [1218794]
  - [drm] radeon: fix wait to actually occur after the signaling callback (Rob Clark) [1218794]
  - [drm] radeon: do a posting read in rs600_set_irq (Rob Clark) [1218794]
  - [drm] i915: Dell Chromebook 11 has PWM backlight (Rob Clark) [1218794]
  - [drm] radeon: do a posting read in evergreen_set_irq (Rob Clark) [1218794]
  - [drm] radeon: do a posting read in r600_set_irq (Rob Clark) [1218794]
  - [drm] i915: avoid processing spurious/shared interrupts in low-power states (Rob Clark) [1218794]
  - [drm] radeon: do a posting read in r100_set_irq (Rob Clark) [1218794]
  - [drm] i915: Prevent use-after-free in invalidate_range_start callback (Rob Clark) [1218794]
  - [drm] i915: Check obj->vma_list under the struct_mutex (Rob Clark) [1218794]
  - [drm] radeon: fix DRM_IOCTL_RADEON_CS oops (Rob Clark) [1218794]
  - [drm] i915/bdw: PCI IDs ending in 0xb are ULT. (Rob Clark) [1218794]
  - [drm] i915: Correct the IOSF Dev_FN field for IOSF transfers (Rob Clark) [1218794]
  - [drm] radeon: fix 1 RB harvest config setup for TN/RL (Rob Clark) [1218794]
  - [drm] i915: Insert a command barrier on BLT/BSD cache flushes (Rob Clark) [1218794]
  - [drm] radeon: use drm_mode_vrefresh() rather than mode->vrefresh (Rob Clark) [1218794]
  - [drm] i915: Drop vblank wait from intel_dp_link_down (Rob Clark) [1218794]
  - [drm] radeon: enable native backlight control on old macs (Rob Clark) [1218794]
  - [drm] radeon: fix voltage setup on hawaii (Rob Clark) [1218794]
  - [drm] radeon/dp: Set EDP_CONFIGURATION_SET for bridge chips if necessary (Rob Clark) [1218794]
  - [drm] radeon: workaround for CP HW bug on CIK (Rob Clark) [1218794]
  - [drm] radeon: only enable kv/kb dpm interrupts once v3 (Rob Clark) [1218794]
  - [drm] radeon: Don't try to enable write-combining without PAT (Rob Clark) [1218794]
  - [netdrv] i40e/i40evf: implement KR2 support (Stefan Assmann) [1214872]
  - [kernel] ethtool, net/mlx4_en: Add 100M, 20G, 56G speeds ethtool reporting support (Stefan Assmann) [1214872]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-561.el6]
changelog:
  - [net] Reinstate WIRELESS_EXT_SYSFS in net/wireless/Kconfig (John Linville) [1219434]
  - [netdrv] cxgb4: Firmware macro changes for fw verison 1.13.32.0 (Sai Vemuri) [1219233]
  - [netdrv] cxgb4: Move firmware version MACRO to t4fw_version.h (Sai Vemuri) [1219233]
  - [netdrv] be2net: fix SR-IOV resources optimization (Ivan Vecera) [1211535]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-563.el6]
changelog:
  - [net] tcp: relax tcp_paws_check() (Thadeu Lima de Souza Cascardo) [1209147]
  - [x86] Mark Intel Broadwell-H processor as supported (Steve Best) [1132147]
  - [x86] kernel: ignore NMI IOCK when in kdump kernel (Jerry Snitselaar) [1196263]
  - [kernel] virtio: don't expose u16 in userspace api (Michael S. Tsirkin) [1154634]
  - [x86] apic/uv: Update the UV APIC HUB check (George Beshers) [1219207]
  - [x86] apic/uv: Update the UV APIC driver check (George Beshers) [1219207]
  - [x86] apic/uv: Update the APIC UV OEM check (George Beshers) [1219207]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-564.el6]
changelog:
  - [tools] perf trace: Handle legacy syscalls tracepoints (Jiri Olsa) [1212402]
  - [scsi] qla2xxx: fix busy wait regression (Chad Dupuis) [1207270]
  - [fs] eCryptfs: Remove buggy and unnecessary write in file name decode routine (Mateusz Guzik) [1202156] {CVE-2014-9683}
  - [net] ipv4: Missing sk_nulls_node_init in ping_unhash (Denys Vlasenko) [1218103] {CVE-2015-3636}
  - [s390] dasd: disable CUIR support for z/VM (Hendrik Brueckner) [1223721]
  - [ata] ahci: avoton port-disable reset-quirk (David Milburn) [1223187]
  - [inifinband] iw_cxgb4: don't call neigh_release (Sai Vemuri) [1215835]
  - [fs] sunrpc: Set alloc_slot for backchannel tcp ops (Sachin Prabhu) [1208339]
  - [fs] epoll: convert max_user_watches to long (George Beshers) [741705]
  - [firmware] cxgb4: add missing Makefile invocation for 1.13.32.0 images (Jarod Wilson) [1189255]
  - [fs] proc: make proc_fd_permission() thread-friendly (Carlos Maiolino) [1201593]
  - [acpi] scan: reduce log level of "ACPI: \_PR_.CPU4: failed to get CPU APIC ID" (Charles Rose) [1222466]
  - [netdrv] mlx5: wrong page mask if CONFIG_ARCH_DMA_ADDR_T_64BIT enabled for 32Bit architectures (Doug Ledford) [1141604]
  - [netdrv] vmxnet3: Receive vlan stripped frames in hwaccel path (Neil Horman) [1218404]
  - [fs] NFSv4.1: Deal effectively with interrupted RPC calls (Steve Dickson) [1200956]
  - [fs] NFSv4.1: Try to deal with NFS4ERR_SEQ_MISORDERED (Steve Dickson) [1200956]
  - [fs] NFSv4.1: Handle NFS4ERR_BADSLOT errors correctly (Steve Dickson) [1200956]
  - [kernel] cgroup: fix cgroup_rmdir vs close<eventfd> race (Johannes Weiner) [1167772]
  - [thermal] intel_powerclamp: add id for Avoton SoC (Steve Best) [1225544]
  - [kernel] tracing: Buffer the output of seq_file in case of filled buffer (Jiri Olsa) [1123102]
  - [kernel] tracing: Consolidate protection of reader access to the ring buffer (Jiri Olsa) [1123102]
  - [kernel] tracing: Fix ring_buffer_read_page reading out of page boundary (Jiri Olsa) [1123102]
  - [kernel] ring-buffer: Check for end of page in iterator (Jiri Olsa) [1123102]
  - [netdrv] be2net: use PCI MMIO read instead of config read for errors (Ivan Vecera) [1216088]
  - [thermal] powerclamp: add ids for future xeon cpus (Steve Best) [1183181]
  - [powercap] RAPL: add IDs for future Xeon CPUs (Steve Best) [1183177]
  - [net] flow_dissector: fail on evil iph->ihl (Jason Wang) [1179559]
  - [netdrv] hyperv: Add IPv6 into the hash computation for vRSS (Jason Wang) [1179559]
  - [netdrv] hyperv: Add handling of IP header with option field in netvsc_set_hash (Jason Wang) [1179559]
  - [net] bridge: check return value of ipv6_dev_get_saddr() (Thadeu Lima de Souza Cascardo) [765987]
  - [net] bridge: Fix possibly wrong MLD queries' ethernet source address (Thadeu Lima de Souza Cascardo) [765987]
  - [net] bridge: Use IPv6 link-local address for multicast listener queries (Thadeu Lima de Souza Cascardo) [765987]
  - [net] conntrack: RFC5961 challenge ACK confuse conntrack LAST-ACK transition (Jesper Brouer) [1200541 1212801]
  - [net] tcp: Restore RFC5961-compliant behavior for SYN packets (Jesper Brouer) [1200541 1212801]
  - [crypto] drbg - fix maximum value checks on 32 bit systems (Herbert Xu) [1219907]
  - [crypto] drbg - remove configuration of fixed values (Herbert Xu) [1219907]
  - [netdrv] iwlwifi: mvm: protect rate scaling against non-mvm IBSS stations (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: send AP probe as unicast again (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: count interfaces correctly for combination checks (Stanislaw Gruszka) [1206103]
  - [netdrv] wl18xx: show rx_frames_per_rates as an array as it really is (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: fix RX A-MPDU session reorder timer deletion (Stanislaw Gruszka) [1206103]
  - [netdrv] ath9k: fix tracking of enabled AP beacons (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: dvm: run INIT firmware again upon .start() (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: rs: fix BT Coex check to look at the correct ant (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: Fix ROC removal (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: BT Coex - fix a NULL pointer exception (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: fix max_ht_ampdu_exponent for older devices (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: drop unencrypted frames in mesh fwding (Stanislaw Gruszka) [1206103]
  - [netdrv] b43: fix support for 5 GHz only BCM43228 model (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: disable u-APSD queues by default (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: notify channel switch at the end of ieee80211_chswitch_post_beacon() (Stanislaw Gruszka) [1206103]
  - [netdrv] nl80211: ignore HT/VHT capabilities without QoS/WMM (Stanislaw Gruszka) [1206103]
  - [netdrv] ath5k: fix spontaneus AR5312 freezes (Stanislaw Gruszka) [1206103]
  - [netdrv] mac80211: Send EAPOL frames at lowest rate (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: always use mac color zero (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: fix failure path when power_update fails in add_interface (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: mvm: validate tid and sta_id in ba_notif (Stanislaw Gruszka) [1206103]
  - [netdrv] iwlwifi: pcie: disable the SCD_BASE_ADDR when we resume from WoWLAN (Stanislaw Gruszka) [1206103]
  - [x86] perf: Don't use -ENOSPC for out of PMU resources (Jiri Olsa) [1215827]
  - [x86] perf: Blacklist all MEM_*_RETIRED events for Ivy Bridge (Jiri Olsa) [1215827]
  - [x86] perf: Add Intel IvyBridge event scheduling constraints (Jiri Olsa) [1215827]
  - [firmware] iwlwifi: update -12.ucode for 3160 / 7260 / 7265 / 7265D (Stanislaw Gruszka) [1194517]
  - [firmware] iwlwifi: update -10.ucode for 3160 / 7260 / 7265 / 7265D (Stanislaw Gruszka) [1194517]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-565.el6]
changelog:
  - [x86] perf/intel: Add INST_RETIRED.ALL workarounds (Jiri Olsa) [1189949]
  - [x86] perf/intel: Add Broadwell core support (Jiri Olsa) [1189949]
  - [x86] perf/intel: Add new cache events table for Haswell (Jiri Olsa) [1189949]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-566.el6]
changelog:
  - [netdrv] iwlwifi: use custom workqueue (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: remove not used *bt-coex* files (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: avoid use-after-free on iwl_mvm_d0i3_enable_tx() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: clean net-detect info if device was reset during suspend (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: take the UCODE_DOWN reference when resuming (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: BT Coex - duplicate the command if sent ASYNC (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: nvm: force mac from otp in case nvm mac is reserved (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Free fw_status after use to avoid memory leak (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix MLME trigger (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: don't disable the busmaster DMA clock for family 8000 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: 7000: modify the firmware name for 3165 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: forbid MIMO on devices that don't support it (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: force quota update update after FW restart (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix typo in CONFIG option (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't power off the device between INIT and OPER firmwares (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: prevent using unmapped memory in fw monitor (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Avoid signal based decisions if ave beacon RSSI is 0 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix scan iteration complete notification handling (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't stop the FW monitor too early (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix Tx Power firmware API (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: capture connection loss as part of MLME trigger (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for time events (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: do string formatting in debug triggers (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: fix spelling errors (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't return uninitialized value in get_survey() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove unused arguments (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Fix wrongfully flushing frames in the roc/off channel queue (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add debugfs entry with the number of net-detect scans (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: refactor rs_update_rate_tbl (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: check the size of the trigger struct from the firmware file (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon MLME failures (Stanislaw Gruszka) [1134606]
  - [net] mac80211: Fix mac80211.h docbook comments (Stanislaw Gruszka) [1134606]
  - [net] mac80211: notify the driver about deauth (Stanislaw Gruszka) [1134606]
  - [net] mac80211: notify the driver about association status (Stanislaw Gruszka) [1134606]
  - [net] mac80211: notify the driver about authentication status (Stanislaw Gruszka) [1134606]
  - [netdrv] mac80211: convert rssi_callback() to event_callback() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: fix comment indentation (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Clean up UMAC scan UIDs in the reset and drv_stop flows (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: 8000: change PNVM in case it doesn't match to the HW step (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix debug print in the RSA ownership workaround (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: allow to configure the timeout for the Tx queues (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: drop support for early versions of 8000 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: use debugfs_create_bool() for enable_scan_iteration_notif (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: initialize trans_pcie->ref_count on configure() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: inform mac80211 about umac scans that was aborted by restart (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove d0i3 ref correctly during AP start (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: Fix memory leak in iwl_req_fw_callback() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove WARN_ON for invalid BA notification (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: take IWL_MVM_REF_UCODE_DOWN before restarting hw (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't wait for firmware verification (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: add new 3165 series PCI IDs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove time-event start/end failure warning (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add iccm data to 8000 b-step data dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: add rx packet sequence number to dbg print (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: properly flush the queues for buffering transport (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: assign new TLV bit for multi-source LAR (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: continue (with error) CSA on GO time event failure (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: simplify iwl_mvm_get_wakeup_status() return (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't double unlock the mutex in __iwl_mvm_resume() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: clarify time event end handling (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Always enable the smart FIFO (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: update copyright to include 2015 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: add more new 8260 series PCI IDs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: BT Coex - update the new API (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix force NMI for 8000 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: freeze the non-shared queues when a station goes to sleep (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: allow the op_mode to freeze the stuck queue timer (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: update Tx statistics when using fixed rate (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't init MCC during CT-kill (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove warning on station exhaustion (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: trans: Take ownership on secure machine before FW load (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: add new 8260 series PCI IDs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: improve ss_params debug print (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: don't allow the FW to return invalid ch indices (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: reflect TDLS pm state in mvmvif->pm_enabled (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix identation (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove unneeded include iwl-fw-error-dump.h (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: use correct NVM offset for LAR enable for new NVMs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: fix smatch warning: warn: inconsistent indenting (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: include more registers in the prph dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: speed up the Tx DMA stop flow (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support family 8000 B2/C steps (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: always update the quota after association (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: BT Coex - disable RRC by default (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove IWL_UCODE_TLV_API_SF_NO_DUMMY_NOTIF (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove IWL_UCODE_TLV_API_DISABLE_STA_TX (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: bump API to 13 for devices that use iwlmvm (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: set LAR MCC on D3/D0 transitions (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support LAR updates from BIOS (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: take the MAC address from HW registers (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: allow disabling LAR via module param (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support new PHY_SKU nvm section for family 8000 B0 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: disable 11ac if 11n is disabled (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: iwlmvm: LAR: disable LAR support due to NVM vs TLV conflict (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: change last 5ghz channel to 165 & add support for 8000 family (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: use IWL_DEFAULT_MAX_TX_POWER for max_eirp (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: nvm: init correct nvm channel list for 8000 devices (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: LAR: Add chub mcc change notify command (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: don't declare support for 5ghz if not supported (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: ignore IBSS flag as regulatory NO-IR indication (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: consider LAR support during NVM parse (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: create regdomain from mcc_update_cmd response (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: init country code on init/recovery (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add MCC update FW API (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: disconnect if CSA time event fails scheduling (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: dvm: drop VO packets when mac80211 tells us to (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix compilation with IWLWIFI_DEBUGFS not set (Stanislaw Gruszka) [1134606]
  - [netdrv] wireless: Use eth_<foo>_addr instead of memset (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't override passive dwell in case of fragmented scan (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon low RSSI (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon statistics (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: restart firmware recording when no configuration is set (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon command response (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon channel switch (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add trigger for firmware dump upon missed beacons (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add the cause of the firmware dump in the dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add framework for triggers for fw dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: use only 40 ms for fragmented scan (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: allow to force the Rx chains from debugfs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: add new TLV capability flag for BT PLCR (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't iterate interfaces to disconnect in net-detect (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: new Alive / error table API (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support beacon statistics for BSS client (Stanislaw Gruszka) [1134606]
  - [net] cfg80211: add nl80211 beacon-only statistics (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't write to DBGC_OUT_CTRL when stopping the recording (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove deprecated scan API code (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: deprecate -9.ucode for 3160 / 7260 / 7265 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support radio statistics as global survey (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add statistics API version 10 (Stanislaw Gruszka) [1134606]
  - [net] cfg80211: add scan time to survey data (Stanislaw Gruszka) [1134606]
  - [netdrv] cfg80211: remove "channel" from survey names (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: apply destination before releasing reset (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove unused function in BT coex (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix BT coex shared antenna activity check (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: print single stream params via debugfs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: avoid ss_force from being reset after tx idle (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: increase the number of PAPD channel groups to 9 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: consider TDLS queues as used during drain (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: disable MIMO for low latency P2P (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: adapt rate matching to new STBC/BFER (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: disable beamformer unless FW supports it (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't try to stop scans that are not running anymore (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: better match tx response rate to the LQ table (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: call ieee80211_scan_completed() even if scan abort fails (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: reduce quota threshold (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't send a command the firmware doesn't know (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Fix building channels in scan_config_cmd (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Enable EBS also in single scan on umac interface (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Fix a few EBS error handling bugs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: allow to define the stuck queue timer per queue (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: enable watchdog on Tx queues for mvm (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: ignore stale TDLS ch-switch responses (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: improve TDLS ch-sw state machine (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: prepare the enablement of 31 TFD queues (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: enable forcing single stream Tx decision (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: remove space padding after sysassert description (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add beamformer support (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: don't dump useless data when a TFD queue hangs (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't reprobe if we fail during reconfig and fw_restart is false (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: check IWL_UCODE_TLV_API_SCD_CFG in API and not in capa (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: fix rx chains configuration in phy ctxt cmd (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: support secured boot flow for family 8000 B step (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: use a new API for enabling STBC (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: refactor ht/vht init (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: remove stats argument from functions (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: really disable TDLS queues (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: BT Coex - set all the co-running values to 0 (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Do not consider invalid HW queues in queue mask (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support family 8000 C step (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: init ref_lock (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: document switch case fall-through in iwl_mvm_send_sta_key (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: use STBC regardless of power save mode (Stanislaw Gruszka) [1134606]
  - [netdrv] Revert "iwlwifi: mvm: drop non VO frames when flushing" (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add support for new LTR command (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: BT Coex - fine tune the MPLUT register (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: move U-APSD decision to authentication (Stanislaw Gruszka) [1134606]
  - [netdrv] mac80211: move U-APSD enablement to vif flags (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: ignore temperature updates in the RX statistics notification (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: cleanup unuseful and overflowing traces (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: generate statistics debugfs code (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: move statistics API to new header file (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: sync statistics firmware API (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: correctly set the NMI register (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add rxf and txf to dump data (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add support for dumping a secondary SRAM (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add debugfs file for misbehaving U-APSD AP (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: let the firmware configure the scheduler (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: remove unused TLV capability flags (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add print of he nvm version (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: set max_out_time equal to frag_passive_dwell in fragmented scan (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: allow to disable MIMO for P2P only (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: allow to collect debug data from non-sleepable context (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: make sure state isn't in d0i3 when stopping fw monitor (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Add debugfs entry to enable scan offload notification (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: add new config and PCI IDs for 4165 series (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: make sure state isn't in d0i3 when collecting fw dbg (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: repeat initial legacy rates in LQ table (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: don't indicate no BA if STA was in powersave (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: organize and cleanup consts (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Alter passive scan fragmentation parameters in case of multi-MAC (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: call to pcie_apply_destination also on family 8000 B step (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: ask the fw to wakeup (from d0i3) on sysassert (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: tlv: add support for IWL_UCODE_TLV_SDIO_ADMA_ADDR TLV (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: use iwl_mvm_sta_from_mac80211() consistently (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: use iwl_mvm_vif_from_mac80211() consistently (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: remove useless extern definition of iwl4265_2ac_sdio_cfg (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: clean refs before stop_device() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: dvm: main: Use setup_timer (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: dvm: tt: Use setup_timer (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support 2 different channels (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: wait for d0i3 exit on hw restart (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: consider d0i3_disable in iwl_mvm_is_d0i3_supported() (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: support multiple d0i3 modes (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support IWL_D0I3_MODE_ON_SUSPEND d0i3 mode (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: allow both d0i3 and d3 wowlan configuration modes (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: add basic reference accounting (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: convert the SRAM dump to the generic memory dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: change SMEM dump to general purpose memory dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add smem content to dump data (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support additional nvm_file in family 8000 B step (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: rs: fix max rate allowed if no rate is allowed (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: clear tt values when entering CT-kill (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: Set the HW step in the core dump (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: allow RSSI compensation (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add debugfs to trigger fw debug logs collection (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: pcie: let the Manageability Engine know when we leave (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: support LnP 1x1 antenna configuration (Stanislaw Gruszka) [1134606]
  - [netdrv] Revert "iwlwifi: use correct fw file in 8000 b-step" (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: mvm: add fw runtime stack to dump data (Stanislaw Gruszka) [1134606]
  - [netdrv] iwlwifi: remove MODULE_VERSION (Stanislaw Gruszka) [1134606]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-567.el6]
changelog:
  - [serial] add ability to set IRQ via module parameter (Prarit Bhargava) [1210848]
  - [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Seth Jennings) [1185166] {CVE-2015-1805}
  - [netdrv] macvlan: add VLAN filters to lowerdev (Ivan Vecera) [1213846]
  - [x86] Mark Intel Broadwell-DE processor as unsupported (Steve Best) [1226904]
  - [net] ipv6: reallocate addrconf router for ipv6 address when lo device up (Hannes Frederic Sowa) [1223610]
  - [mm] memory-failure: move refcount only in !MF_COUNT_INCREASED (Rafael Aquini) [1222832]
  - [mm] memory-failure: shift page lock from head page to tail page after thp split (Rafael Aquini) [1222832]
  - [mm] memory-failure: transfer page count from head page to tail page after split thp (Rafael Aquini) [1222832]
  - [scsi] lpfc: Correct loss of target discovery after cable swap (Rob Evers) [1226779]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-568.el6]
changelog:
  - [base] reduce boot delay on large memory systems (Seth Jennings) [1221389]
  - [md] dm: run queue on re-queue (Mike Snitzer) [1225158]
  - [fs] take i_mutex during prepare_binprm for set<u,g>id executables (Mateusz Guzik) [1216269] {CVE-2015-3339}
  - [netdrv] i40e: Make sure to be in VEB mode if SRIOV is enabled at probe (Stefan Assmann) [1206000]
  - [netdrv] i40e: start up in VEPA mode by default (Stefan Assmann) [1206000]
  - [netdrv] e1000e: Bump the version to 3.2.5 (John Greene) [1211531]
  - [netdrv] e1000e: fix unit hang during loopback test (John Greene) [1211531]
  - [netdrv] e1000e: fix systim issues (John Greene) [1211531]
  - [netdrv] e1000e: fix legacy interrupt handling in i219 (John Greene) [1211531]
  - [netdrv] e1000e: fix flush_desc_ring implementation (John Greene) [1211531]
  - [netdrv] e1000e: fix logical error in flush_desc_rings (John Greene) [1211531]
  - [netdrv] e1000e: remove call to do_div and sign mismatch warning (John Greene) [1211531]
  - [netdrv] e1000e: i219 execute unit hang fix on every reset or power state transition (John Greene) [1211531]
  - [netdrv] e1000e: i219 fix unit hang on reset and runtime D3 (John Greene) [1211531]
  - [netdrv] e1000e: fix call to do_div to use u64 arg (John Greene) [1211531]
  - [netdrv] e1000e: Cleanup handling of VLAN_HLEN as a part of max frame size (John Greene) [1211531]
  - [netdrv] e1000e: Correctly include VLAN_HLEN when changing interface MTU (John Greene) [1211531]
  - [netdrv] e1000e: call netif_carrier_off early on down (John Greene) [1211531]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-569.el6]
changelog:
  - [gpu] drm/radeon: fix freeze for laptop with Turks/Thames GPU (Jerome Glisse) [1213297]
  - [md] dm: fix casting bug in dm_merge_bvec (Mike Snitzer) [1226453]
  - [fs] nfs: Send the size attribute on open(O_TRUNC) (Benjamin Coddington) [1208065]
  - [net] inet: fix processing of ICMP frag_needed messages (Sabrina Dubroca) [1210321]
  - [net] tcp: double default TSQ output bytes limit (Hannes Frederic Sowa) [1140590]
  - [hv] hv_balloon: correctly handle num_pages>INT_MAX case (Vitaly Kuznetsov) [1006234]
  - [hv] hv_balloon: correctly handle val.freeram<num_pages case (Vitaly Kuznetsov) [1006234]
  - [hv] hv_balloon: survive ballooning request with num_pages=0 (Vitaly Kuznetsov) [1006234]
  - [hv] hv_balloon: eliminate jumps in piecewiese linear floor function (Vitaly Kuznetsov) [1006234]
  - [hv] hv_balloon: do not online pages in offline blocks (Vitaly Kuznetsov) [1006234]
  - [hv] hv_balloon: don't lose memory when onlining order is not natural (Vitaly Kuznetsov) [1006234]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-570.el6]
changelog:
  - [block] fix ext_dev_lock lockdep report (Jeff Moyer) [1230927]
  - [md] Revert "md dm: run queue on re-queue" (Mike Snitzer) [1232007]
  - [firmware] another cxgb4 firmware load fixup (Sai Vemuri) [1189255]
  - [char] tty: Don't protect atomic operation with mutex (Aristeu Rozanski) [1184182]
  - [edac] i5100 add 6 ranks per channel (Aristeu Rozanski) [1171333]
  - [edac] i5100 clean controller to channel terms (Aristeu Rozanski) [1171333]
  - [crypto] rng - Remove krng (Herbert Xu) [1226418]
  - [crypto] drbg - Add stdrng alias and increase priority (Herbert Xu) [1226418]
  - [crypto] seqiv - Move IV seeding into init function (Herbert Xu) [1226418]
  - [crypto] eseqiv - Move IV seeding into init function (Herbert Xu) [1226418]
  - [crypto] chainiv - Move IV seeding into init function (Herbert Xu) [1226418]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-571.el6]
changelog:
  - [netdrv] bnx2x: Move statistics implementation into semaphores (Michal Schmidt) [1231348]
  - [scsi] storvsc: Set the SRB flags correctly when no data transfer is needed (Vitaly Kuznetsov) [1221404]


author: Kurt Stutsman <kstutsma@redhat.com> [2.6.32-573.el6]
changelog:
  - [security] selinux: don't waste ebitmap space when importing NetLabel categories (Paul Moore) [1130197]
  - [x86] Revert "Add driver auto probing for x86 features v4" (Prarit Bhargava) [1231280]
  - [net] bridge: netfilter: don't call iptables on vlan packets if sysctl is off (Florian Westphal) [1236551]
  - [net] ebtables: Allow filtering of hardware accelerated vlan frames (Florian Westphal) [1236551]


author: Nalin Dahyabhai <nalin@redhat.com> 0.7
changelog:
  - add openldap-devel as a buildprereq
  - krb5: use a continuous connection
  - krb5: add "realm" config directive
  - ldap: use a continuous connection
  - ldap: add "server", "basedn", "binddn", "user", "authuser" config directives
  - ldap: actually finish the account deletion function
  - ldap: don't send cleartext passwords to the directory
  - fix naming attribute for users (should be uid, not gid)
  - refine the search-by-id,convert-to-name,search-by-name logic
  - fix handling of defaults when the config file is read in but contains no value
  - implement an LDAP information store
  - try to clean up module naming with libtool
  - luseradd: pass plaintext passwords along
  - luseradd: use symbolic attribute names instead of hard-coded
  - lusermod: pass plaintext passwords along
  - lgroupadd: pass plaintext passwords along
  - lgroupmod: pass plaintext passwords along
  - add libuser as a dependency of libuser-devel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - the great adding-of-the-copyright-statements
  - take more care when creating backup files in the files module


author: Nalin Dahyabhai <nalin@redhat.com> 0.8
changelog:
  - add a "quiet" prompter
  - add --interactive flag to sample apps and default to using quiet prompter
  - ldap: attempt a "self" bind if other attempts fail
  - krb5: connect to the password-changing service if the user principal has
    the NULL instance


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add functions for enumerating users and groups, optionally per-module
  - lusermod.c: -s should specify the shell, not the home directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - get bindings for prompts to work correctly
  - clean up some of the add/remove semantics (set source on add)
  - ldap: implement enumeration
  - samples/enum: fix the argument order


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clean up quota bindings some more
  - finish most of the ldap bindings
  - fix a subtle bug in the files module that would show up when renaming accounts
  - fix mapping methods for entity structures in python


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish implementing is_locked methods in files/shadow module
  - finish cleanup of the python bindings
  - allow conditional builds of modules so that we can build without
    all of the prereqs for all of the modules


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't bail when writing empty fields to colon-delimited files
  - use permissions of the original file when making backup files instead of 0600


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix errors due to uninitialized fields in the python bindings
  - add kwargs support to all python wrappers
  - add a mechanism for passing arguments to python callbacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix group password setting in the files module
  - setpass affects both auth and info, so run both stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - lib/user.c: catch and ignore errors when running stacks
  - lusermod: fix slightly bogus help messages
  - luseradd: when adding a user and group, use the gid of the group
    instead of the user's uid as the primary group
  - properly set the password field in user accounts created using
    auth-only auth modules (shadow needs "x" instead of "!!")
  - implement home directory removal, start on population


author: Nalin Dahyabhai <nalin@redhat.com> 0.16.1-1
changelog:
  - finish home directory population
  - implement home directory moving
  - change entity get semantics in the python bindings to allow default values for .get()
  - add lu_ent_has(), and a python has_key() method to Entity types
  - don't include tools in the binary package
  - add translated strings


author: Nalin Dahyabhai <nalin@redhat.com> 0.18-1
changelog:
  - actually make the new optional arguments optional
  - fix lu_error_new() to actually report errors right
  - fix part of the python bindings
  - include tools in the binary package again
  - fixup modules so that password-changing works right again
  - add a "key" field to prompt structures for use by apps which like to
    cache these things
  - add an optional "mvhomedir" argument to userModify (python)


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - only call the auth module when setting passwords (oops)
  - use GTrees instead of GHashTables for most internal tables
  - files: complain properly about unset attributes
  - files: group passwords are single-valued, not multiple-valued
  - add lpasswd app, make sure all apps start up popt with the right names


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - luserdel: remove the user's primary group if it has the same name as
    the user and has no members configured (-G disables)
  - fixup some configure stuff to make libuser.conf get generated correctly
    even when execprefix isn't specified


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-1
changelog:
  - finish adding a sasldb module which manipulates a sasldb file
  - add users_enumerate_by_group and groups_enumerate_by_users


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - print uids and gids of users and names in lid app
  - fix tree traversal in users_enumerate_by_group and groups_enumerate_by_users
  - implement enumerate_by_group and enumerate_by_user in ldap module
  - fix id-based lookups in the ldap module
  - implement islocked() method in ldap module
  - implement setpass() method in ldap module
  - add lchfn and lchsh apps
  - add %d substitution to libuser.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - install sv translation
  - make lpasswd prompt for passwords when none are given on the command line
  - make sure all user-visible strings are marked for translation
  - clean up some user-visible strings
  - require PAM authentication in lchsh, lchfn, and lpasswd for non-networked modules


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-3
changelog:
  - stop leaking descriptors in the files module
  - speed up user creation by reordering some checks for IDs being in use
  - update the shadowLastChanged attribute when we set a password
  - adjust usage of getXXXXX_r where needed
  - fix assorted bugs in python binding which break prompting


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - close up some memory leaks
  - add the ability to include resident versions of modules in the library


author: Nalin Dahyabhai <nalin@redhat.com> 0.25.1-1
changelog:
  - rename the quota source files to match the library, which clears up a
    file conflict with older quota packages
  - add ja translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - lusermod: change user name in groups the user is a member of during renames
  - lgroupmod: change primary GID for users who are in the group during renumbers
  - ldap.c: handle new attributes more gracefully if possible
  - add ru translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-1
changelog:
  - add ko translation files
  - files.c: fix a heap corruption bug in lock/unlock (#51750)
  - files.c: close a memory leak in reading of files


author: Nalin Dahyabhai <nalin@redhat.com> 0.28-1
changelog:
  - apps: print usage on errors
  - lnewusers.c: initialize groups as groups, not users
  - lnewusers.c: set passwords for new accounts
  - luseradd.c: accept group names in addition to IDs for the -g flag
  - luseradd.c: allow the primary GID to be a preexisting group


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - HUP nscd on modifications
  - userutil.c: mmap files we're reading for probable speed gain
  - userutil.c: be conservative with the amount of random data we read
  - docs fixes


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - quotaq: fix argument order when reading quota information
  - user_quota: set quota grace periods correctly
  - luseradd: never create home directories for system accounts


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-1
changelog:
  - link the python module against libpam
  - attempt to import the python modules at build-time to verify dependencies


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - renamed the python module
  - revamped internals to use gobject's gvalues and gvaluearrays instead of
    glists of cached strings
  - add enumeration-with-data functions to the C library


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.91-1
changelog:
  - ldap: finish port to new API
  - sasl: finish port to new API (needs test)
  - libuser: don't commit object changes before passing data to service
    functions which might need differing data sets to figure out what to
    change (for example, ldap)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.93-1
changelog:
  - move shadow initialization for groups to the proper callback
  - rework locking in the files module to not require that files be writable


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.97-1
changelog:
  - files: fix bug in removals
  - ldap: revert attempts at being smart at startup time, because it makes UIs
    very messy (up the three whole dialogs just to start the ldap stuff!)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.98-1
changelog:
  - automatically refresh entities after add, modify, setpass, removepass,
    lock, and unlock operations
  - remove debug spewage when creating and removing mail spools
  - files: fix saving of multi-valued attributes
  - rename MEMBERUID attribute for groups to MEMBERNAME


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.100-1
changelog:
  - be more careful about printing error messages
  - fix refreshing after adding of accounts
  - ldap: try to use a search to convert names to DNs, and only fall back to
    guessing if it turns up nothing
  - files: fix an off-by-one in removal of entries


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.101-1
changelog:
  - fix python bindings of enumerateFull functions
  - adjust prompter wrapping to not error out on successful returns


author: Nalin Dahyabhai <nalin@redhat.com> 0.51-1
changelog:
  - files: ignore blank lines in files
  - libuser: disallow creation of accounts with names containing whitespace,
    control characters, or non-ASCII characters


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.5-1
changelog:
  - expose lu_get_first_unused_id() as a package-private function
  - provide libuser.ADMIN.getFirstUnusedUid and libuser.ADMIN.getFirstUnusedGid
    in python


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.6-1
changelog:
  - use a crypt salt consistent with the defaults/crypt_style setting when
    setting new passwords (#79337)


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.7-1
changelog:
  - ldap: set error codes correctly when we encounter failures initializing
  - don't double-close modules which fail initialization
  - ldap: don't set an error in cases where one is already set


author: Miloslav Trmac <mitr@redhat.com> - 0.51.8-1
changelog:
  - Update to build with latest autotools and gtk-doc
  - Update ALL_LINGUAS and POTFILES.in
  - Rebuild to depend on newer openldap


author: Miloslav Trmac <mitr@redhat.com> - 0.51.10-1
changelog:
  - Don't attempt to lookup using original entity name after entity
    modification (rename in particular) (#78376, #121252)
  - Fix copying of symlinks from /etc/skel (#87572, original patch from gLaNDix)
  - Make --enable-quota work, and fix the quota code to at least compile (#89114)
  - Fix several bugs (#120168, original patch from Steve Grubb)
  - Don't hardcode python version in spec file (#130952, from Robert Scheck)
  - Properly integrate the SELinux patch, it should actually be used now, even
    though it was "enabled" since 0.51.7-6


author: Miloslav Trmac <mitr@redhat.com> - 0.51.11-1
changelog:
  - Allow documented optional arguments in Python
    ADMIN.{addUser,modifyUser,deleteUser} (#119812)
  - Add man pages for lchfn and lchsh
  - LDAP fixes, first round
  - Avoid file conflict on multilib systems
  - Call ldconfig correctly


author: Miloslav Trmac <mitr@redhat.com> - 0.51.12-1
changelog:
  - Don't claim success and exception at the same time (#133479)
  - LDAP fixes, second round
  - Various other bugfixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.2-1
changelog:
  - Allow LDAP connection using ldaps, custom ports or without TLS (original
    patch from Pawel Salek).


author: Miloslav Trmac <mitr@redhat.com> - 0.52.5-1
changelog:
  - Fix home directory renaming in ADMIN.modifyUser (#135280)
  - Further Python reference counting fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.6-1
changelog:
  - Make error reporting more consistent, more verbose and always on stderr
    (partly #133861, original patch by Pawel Salek)
  - Mark strings previously blocked by string freeze for translation


author: Miloslav Trmac <mitr@redhat.com> - 0.53-1
changelog:
  - Support UID and GID values larger than LONG_MAX (#124967)
  - Fix updating of groups after user renaming in lusermod
  - Allow setting a shadow password even if the current shadow password is
    invalid (#131180)
  - Add lu_{user,group}_unlock_nonempty (#86414); module interface ABI has 
    changed
  - Miscellaneous bug and memory leak fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.53.2-1
changelog:
  - Important bug fixes in lchage, lgroupmod, lnewusers and lusermod
  - Minor bug fixes in lpasswd and luseradd
  - Add man pages for the utilities (#61673)


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-1
changelog:
  - Don't silently ignore some I/O errors
  - Don't include a Cyrus SASL v1 header file when libldap links to v2 (#150046)
  - Rebuild with gcc 4


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-2
changelog:
  - Add Requires: glib2-devel to libuser-devel (#152501)
  - Run ldconfig using %post{,un} -p to let RPM play tricks


author: Miloslav Trmac <mitr@redhat.com> - 0.53.5-1
changelog:
  - Ignore nss_compat lines in the "files" module (#154651)
  - Autodetect Python version (#154096)
  - Add BuildRequires: libselinux-devel, s/BuildPrereq/BuildRequires/


author: Miloslav Trmac <mitr@redhat.com> - 0.53.8-1
changelog:
  - Permit "portable" user and group names as defined by SUSv3, plus trailing $
    (#159452)
  - Don't build static libraries


author: Miloslav Trmac <mitr@redhat.com> - 0.54-1
changelog:
  - Make sure attributes with no values can never appear
  - Fix crash in the "files" module when an attribute is missing
  - Use hidden visibility for internal functions, remove them from
    libuser/user_private.h; this changes module interface ABI


author: Miloslav Trmac <mitr@redhat.com> - 0.54.1-1
changelog:
  - Support importing of configuration from shadow-utils (/etc/login.defs and
    /etc/default/useradd)
  - Add libuser.conf(5) man page


author: Miloslav Trmac <mitr@redhat.com> - 0.54.6-1
changelog:
  - Fix bugs in handling of invalid lines in the files and shadow modules
  - Fix pattern matching in lu_*_enumerate_full in the files and shadow modules
  - Add more error reporting, return non-zero exit status on error from utils
  - Use the skeleton directory specified in libuser.conf by Python
    admin.createHome and admin.addUser, add parameter skeleton= to admin.addUser
    (#189984)


author: Miloslav Trmac <mitr@redhat.com> - 0.56-1
changelog:
  - Tighten the API and implementation to avoid corrupting number-like strings;
    the module interface ABI has changed
    Resolves: #226976


author: Miloslav Trmac <mitr@redhat.com> - 0.56.1-1
changelog:
  - When changing passwords, only silently ignore know shadow markers, not all
    invalid hashes
    Resolves: #225495


author: Miloslav Trmač <mitr@redhat.com> - 0.56.4-2
changelog:
  - Split the Python module to a separate subpackage (original patch by Yanko
    Kaneti)
  - Update the License: tag


author: Miloslav Trmač <mitr@redhat.com> - 0.56.5-1
changelog:
  - Work around spurious error messages when run against the Fedora Directory
    server
  - Fix error reporting when creating home directories and creating/removing mail
    spool files
    Resolves: #318121


author: Miloslav Trmač <mitr@redhat.com> - 0.56.6-1
changelog:
  - Set SELinux file contexts when creating home directories, preserve them when
    moving home directories
    Resolves: #351201


author: Miloslav Trmač <mitr@redhat.com> - 0.56.7-1
changelog:
  - Add support for SHA256 and SHA512 in password hashes
    Related: #173583
  - Fix file locking on some architectures
  - Rename sr@Latn.po to sr@latin.po
    Resolves: #426584
  - Address issues from a review by Jason Tibbitts:
    - Remove default.-c, moving the provided functions to libuser proper
    - Remove the WITH_SELINUX build option
    - Move Python library test to %check
    Resolves: #226054


author: Miloslav Trmač <mitr@redhat.com> - 0.56.11-1
changelog:
  - Update to libuser-0.56.11.
    Resolves: #454091
    Resolves: #456267
    Resolves: #456270
    Resolves: #487129


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-1
changelog:
  - Update to libuser-0.56.13.
    Resolves: #251951
    Resolves: #454079
    Resolves: #456373
    Resolves: #456382
    Resolves: #530513


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-2
changelog:
  - Allow supplying passwords from scripts
  - Allow specifying a LDAP simple bind password in libuser.conf
    Resolves: #562832


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-5
changelog:
  - Correctly mark the LDAP default password value as encrypted (CVE-2011-0002)
    Resolves: #668021
  - Default LDAP cn to username if gecos is empty
    Resolves: #670151
  - Preserve setuid and setgid bits when copying files from /etc/skel
    Resolves: #724987
  - Fix segfault when reading database files with certain sizes
    Resolves: #788521


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-7
changelog:
  - Don’t use 512-bit RSA private keys in tests
    Related: #1235518
  - Fix testsuite failures if more than one architecture is building concurrently
    Related: #1235518


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Kai Engert <kengert@redhat.com> - 3.11.5-1
changelog:
  - Update to 3.11.5
  - This update fixes two security vulnerabilities with SSL 2
  - Do not use -rpath link option
  - Added several unsupported tools to tools package


author: Kai Engert <kengert@redhat.com> - 3.11.5-2
changelog:
  - Fix rhbz#230545, failure to enable FIPS mode
  - Fix rhbz#220542, make NSS more tolerant of resets when in the 
    middle of prompting for a user password.


author: Kai Engert <kengert@redhat.com> - 3.11.7-2
changelog:
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5.
  - Use a workaround to avoid mozilla bug 51429.


author: Kai Engert <kengert@redhat.com> - 3.11.7-10
changelog:
  - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
    our signed libraries and protect them from modification.


author: Kai Engert <kengert@redhat.com> - 3.11.99.3-2
changelog:
  - Build against gcc 4.3.0, use workaround for bug 432146
  - Run the test suite after the build and abort on failures.


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-3
changelog:
  - nss package should own /etc/prelink.conf.d folder, rhbz#452062
  - use upstream patch to fix test suite abort


author: Kai Engert <kaie@redhat.com> - 3.12.3-3
changelog:
  - ship .chk files instead of running shlibsign at install time
  - include .chk file in softokn-freebl subpackage
  - add patch for upstream nss bug 488350


author: Kai Engert <kaie@redhat.com> - 3.12.3-7
changelog:
  - re-enable test suite
  - add patch for upstream bug 488646 and add newer paypal
    certs in order to make the test suite pass


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-5
changelog:
  - updated pem module incorporates various patches
  - fix off-by-one error when computing size to reduce memory leak. (483855)
  - fix data type to work on x86_64 systems. (429175)
  - fix various memory leaks and free internal objects on module unload. (501080)
  - fix to not clone internal objects in collect_objects().  (501118)
  - fix to not bypass initialization if module arguments are omitted. (501058)
  - fix numerous gcc warnings. (500815)
  - fix to support arbitrarily long password while loading a private key. (500180) 
  - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-10
changelog:
  - must install libnssutil3.since nss-util is untagged at the moment
  - preserve time stamps when installing various files


author: Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11
changelog:
  - split off nss-softokn and nss-util as subpackages with their own rpms
  - first phase of splitting nss-softokn and nss-util as their own packages


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-19
changelog:
  - remove patches that are now in nss-softokn and
  - remove spurious exec-permissions for nss.pc per rpmlint
  - single requires line in nss.pc.in


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-22
changelog:
  - Fix nss-config not to include nssutil
  - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-25
changelog:
  - Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
  - Add a temprary hack to nss.pc.in to unblock builds


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-29
changelog:
  - Restoring patches 2 and 7 as we still compile all sources
  - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-30
changelog:
  - Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
  - Fixed requires and buildrequires as per recommendations in spec file review


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-2
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - No rpath-link in nss-softokn-config


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - PEM module implements memory management for internal objects - 509705
  - PEM module doesn't crash when processing malformed key files - 512019


author: Elio Maldonado<emaldona@redhat.com - 3.12.4-9
changelog:
  - Install blank databases and configuration file for system shared database
  - nsssysinit queries system for fips mode before relying on environment variable


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-14
changelog:
  - Fix bug where user was prompted for a password when listing keys on an empty system database (#527048)
  - Fix setup-nsssysinit to handle more general flags formats (#527051)


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.8
changelog:
  - Fix nsssysinit to set the default flags on the crypto module (#545779)
  - Fix nsssysinit to enable apps to use the system cert store, patch contributed by David Woodhouse (#546221)
  - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)
  - Sysinit requires coreutils for post install scriplet (#547067)
  - Remove redundant header from the pem module


author: Elio Maldonado <emaldona@redhat.com> - 3.12.5-7.1
changelog:
  - Updated to 3.12.5 from CVS import from Fedora 12
  - Moved blank legacy databases to the lookaside cache
  - Reenabled the full test suite
  - Retagging for a RHEL-6-test-build


author: Elio Maldonado <emaldona@redhat.com> - 3.12.5-7.3
changelog:
  - Resolves: #551784 rebuilt after nss-softokn and nss-util builds
  - this will generate the coorect nss.spec


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Appying the changes in previous log
  - Changing some BuildRequires to >= as well
  - Temporarily disabling all tests for faster builds


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-2
changelog:
  - Add suppport for pkcs8 formatted keys in the pem module
  - Add verify(not md5 size mtime) to configuration files attributes
  - Prevent nss-sysinit disabling on package upgrade
  - Create pkcs11.txt with correct permissions regardless of current umask
  - Add option to setup-nsssysinit.sh to report nss-sysinit status
  - Update test certificate which had expired


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-2
changelog:
  - Prefer user database ca cert trust settings system's ones
  - Swap internal key slot on fips mode switches


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-3
changelog:
  - Add requires for pkcs11-devel on nss-softokn-freebl devel
  - Run the test suites in check section per packaging guidelines


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-7
changelog:
  - Update expired PayPayEE.cert test certificate
  - Conditionalize some database tests on user not being root


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-1
changelog:
  - Resolves: Bug 744070 - Update to 3.13.1
  - Resolves: Bug 784674 - nss should protect against being called before nss_Init
  - Resolves: Bug 784490 - CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-4
changelog:
  - Add two needed patches
  - Resolves: rhbz#783315 - Need nss workaround for freebl bug that causes openswan to drop connections
  - Resolves: rhbz#747387 - Unable to contact LDAP Server during winsync


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-1
changelog:
  - Update to 3.13.3
  - Resolves: rhbz#798539 - Distrust MITM subCAs issued by TrustWave
  - Remove builtins-nssckbi_1_88_rtm.patch which the rebase obsoletes


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Resolves: rhbz#768669 - PEM unregistered callback causes SIGSEGV


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-3
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Use completed patch per code review


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-1
changelog:
  - Rebase to nss-3.14.0.0-1
  - Resolves: rhbz#837089
  - Update ssl-cbc-random-iv patch for new sources
  - Remove patches rendered obsoleted by rebase to 3.14
  - Add a patch to enforce no pkcs11 bypass


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-7
changelog:
  - Add dummy sources file to test for and prevent breaking rhpkg commands
  - Enable testing for 'rhpk upload' and 'rhpk new-sources' breakage such as hangs
  - Related: rhbz#837089


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-8
changelog:
  - PEM peminit returns CKR_CANT_LOCK when needed to inform caller module isn't thread safe
  - Resolves: rhbz#555019 - [PEM] invalid writes in multi-threaded libcurl based application


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-9
changelog:
  - Fix locking issue causing curl hangs and authenticate to the correct session
  - Resolves: rhbz#872838


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-12
changelog:
  - Recreate the distrust patch by backporting the upstream one
  - Resolves: rhpbz#890914 - Dis-trust TURKTRUST mis-issued *.google.com certificate


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3.14.3_RTM
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Update expired test certificates (fixed in upstream bug 852781)
  - Sync up pem module's rsawrapr.c with softoken's upstream changes for nss-3.14.3
  - Reactivate the aia tests


author: Elio Maldonado - 3.14.3-2
changelog:
  - Install sechash.h and secmodt.h which are now provided by nss-devel
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Remove unsafe -r option from commands that remove headers already shipped by nss-util and nss-softoken


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Ensure pem uses system freebl as with this update freebl brings in new API's
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Revert to accepting MD5 on digital signatures by default
  - Resolves: rhbz#918136 - nss 3.14 - MD5 hash algorithm disabled


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Syncup with uptream changes for aes gcm and ecc suiteb
  - Enable ecc support for suite b
  - Apply several upstream AES GCM fixes
  - Use the pristine nss upstream sources with ecc included
  - Export NSS_ENABLE_ECC=1 in both the build and the check sections
  - Make failed requests for unsupoprted ssl pkcs 11 bypass non fatal
  - Resolves: rhbz#882408 - NSS_NO_PKCS11_BYPASS must preserve ABI
  - Related:  rhbz#918950  - rebase nss to 3.14.3


author: Kai Engert <kaie@redhat.com> - 3.14.3-33
changelog:
  - Configure libnssckbi.so to use the alternatives system
    in order to prepare for a drop in replacement.
    Please ensure that older packages that don't use the alternatives
    system for libnssckbi.so have a smaller n-v-r.


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-34
changelog:
  - Fix race condition in cert code related to smart cards
  - Resolves: rhbz#903017 - Firefox hang when CAC/PIV smart card certificates are viewed in the certificate manager


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-37
changelog:
  - Do not hold issuer certificate handles in the crl cache
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-1
changelog:
  - Rebase to NSS_3.15.1_RTM
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x) 
  - Update patches on account of the shallow tree with the rebase to 3.15.1
  - Update the pem module sources  nss-pem-20130405.tar.bz2 with latest patches applied
  - Remove patches rendered obsolete by the nss rebase and the updated nss-pem sources
  - Enable the iquote.patch to access newly introduced types


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-2
changelog:
  - Fix relative path in %check section to prevent undetected test failures
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-4
changelog:
  - Require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-5
changelog:
  - Disable the cipher suite already run as part of the nss-softokn build
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-6
changelog:
  - Fix all.sh test for which application was last build by updating nss-versus-softoken-test.path
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Kai Engert <kaie@redhat.com> - 3.15.1-7
changelog:
  - Additional syntax fixes in nss-versus-softoken-test.patch
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-8
changelog:
  - Don't require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-9
changelog:
  - Rebuild for the pem module to link with freel from nss-softokn-3.14.3-6.el6
  - Related: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]
  - Related: rhbz#1010224 - NSS 3.15 breaks SSL in OpenLDAP clients


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-10
changelog:
  - Restore a mistakenly removed patch
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-11
changelog:
  - Fix the test for zero failures in the %check section
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-12
changelog:
  - Add a zero default value to the DISABLETEST and TEST_FAILURES checks
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-13
changelog:
  - Add zero default value to DISABLETEST check and fix the TEST_FAILURES check and reporting
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS
  - Related: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-14
changelog:
  - Add s390x and ia64 to the %define multilib_arches list used for defining alt_ckbi
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-15
changelog:
  - Using export NSS_DISABLE_HW_GCM=1 to deal with some problemmatic build systems
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-1
changelog:
  - Update to NSS_3_15_3_RTM
  - Resolves: Bug 1032472 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741
  - Resolves: Bug 1031238 - deadlock in trust domain lock and object lock


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Build nss without softoken, freebl, or util sources in the build source tree
  - Resolves: Bug 1032472 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Disable hw gcm on rhel-5 based build environments where OS lacks support
  - Rollback changes to build nss without softokn until Bug 689919 is approved
  - Cipher suite was run as part of the nss-softokn build


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1042686 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-5
changelog:
  - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-6
changelog:
  - make derEncodingsMatch work with encrypted keys
  - rename a patch, dropped the experimental moniker from it
  - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-7
changelog:
  - Fix the numbering and naming of the patches
  - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-8
changelog:
  - Install man pages for the nss security tools
  - Resolves: Bug 606022 - nss security tools lack man pages


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-9
changelog:
  - Improve support for ECDSA algorithm via pluggable ECC
  - Document the purpose of the iquote.patch
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-10
changelog:
  - Prevent users from disabling the internal crypto module
  - Resolves: Bug 1059176 - nss segfaults with opencryptoki module


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-11
changelog:
  - Resolves: Bug 689919 - build without any softoken or util sources in the tree
  - Add define-uint32.patch to deal with using older version of nss-softokn
  - Fix suboptimal test failure detection shell code in the %check
  unset DISPLAY
   section


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-2
changelog:
  - Restore use of indentation patch until another bug is resolved
  - Resolves: Bug 606022 - nss security tools lack man pages


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-3
changelog:
  - Fix pem module trashing of private keys on failed login
  - Resolves: Bug 1002205 - PEM module trashes private keys if login fails


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-5
changelog:
  - Move removal of directories to the end of the %prep section
  - Resolves: Bug 689919 - build without any softoken or util sources in the tree


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-6
changelog:
  - Update pem sources to the same ones used on rhel-7
  - Remove no longer needed patches on account of this update
  - Resolves: Bug 1002205


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-15
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Support TLS_FALLBACK_SCSV in tstclnt and ssltap


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Restore patch for certutil man page
  - supply missing options descriptions to the man page
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-3
changelog:
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove unused indentation pseudo patch
  - require nss util 3.16.2.3


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-1
changelog:
  - Rebase to NSS 3.18
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]
  - Keep the same cipher suite order as we had in NSS_3_15_3_RTM
  - Resolves: Bug 1202488 - openldap-2.4.23-34.el6_5.1.i686 fails after updating nss to nss-3.16.1-4.el6_5.i686
  - Resolves: Bug 1182902 - rhel65 ns-slapd crash, segfault error 4 in libnss3.so in PK11_DoesMechanism at pk11slot.c:1824


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1207052 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-3
changelog:
  - Restore a patch that had been mistakenly disabled
  - Resolves: Bug 1207052 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Fix shell syntax error in nss/tests/all.sh
  - Resolves: Bug 1207052 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-5
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Resolves: Bug 1207052 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Kai Engert <kaie@redhat.com> - 3.18.0-5.1
changelog:
  - Require softokn build 22 to ensure runtime compatibility.
  - Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)


author: Dennis Gilmore <dennis@ausil.us> 3.12.3.99.3-10
changelog:
  - dont include the headers in nss-util only in the -devel package
  - nss-util-devel Requires nss-devel since its only providing a subset of the headers.


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-11
changelog:
  - Remove spurious executable permissions from nss-util-config
  - Shorten some descriptions to keep rpmlint happy


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - Apply nss-nolocalsql patch subset for nss-util
  - No rpath-link in nss-util-config


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#799192 - Update to 3.13.3
  - Update minimum nspr version for Requires and BuildRequires to 4.9
  - Fix version/release in changelog to match the Version and Release tags, now 3.13.3-2


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-1
changelog:
  - Update to NSS_3_13_5_RTM
  - Resolves: rhbz#833480 - Update nss-util on RHEL 6.x to NSS 3.13.5 for Mozilla 10.0.6
  - Add -L${libdir}/nss3 to Libs: line in nspr.pc.in


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-3
changelog:
  - Update to nss-3.14.0.0-1
  - Add temporary patch so utilmod doesn't include any headers from softoken
  - Keep the hasht.h from current nss-softokn-devel
  - Remove the long obsoleted nss-nolocalsql.patch


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919174 - Rebase to 3.14.3 as part of the fix for the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Resolves: rhbz#976572 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Update to NSS_3_15_1_RTM
  - Resolves: rhbz#1002644 - Rebase RHEL 6 to NSS-UTIL 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-3
changelog:
  - Preserve existing permissions when replacing existing pkcs11.txt file, but keep strict default permissions for new files
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Add nss-util portion of a fix for pluggable ecc bug in nss and nss-util
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Apply the patch for the pluggable ecc fix
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - nssutil_growList and nssutil_ReadSecmodDB cleanup
  - Resolves: Bug 1019529 - New defect found in nss-util-3.14.0.0-2.el6


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-4
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove patches rendered obsolete by the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-2
changelog:
  - Resolves: Bug 1165003 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Fix the required nspr version to be 4.10.6


author: Tom Callaway <tcallawa@redhat.com>
changelog:
  - bump to 5.0.0
  - add patch to prevent clobbering struct re_registers from regex.h
  - remove domxml references, replaced with dom now built-in
  - fix php.ini to refer to php5 not php4


author: Joe Orton <jorton@redhat.com> 5.0.1-1
changelog:
  - update to 5.0.1
  - only build shared modules once
  - put dom extension in php-dom subpackage again
  - move extension modules into %{_libdir}/php/modules
  - don't use --with-regex=system, it's ignored for the apache* SAPIs


author: Joe Orton <jorton@redhat.com> 5.0.2-4
changelog:
  - update to 5.0.2 (#127980)
  - build against mysqlclient10-devel
  - use new RTLD_DEEPBIND to load extension modules
  - drop explicit requirement for elfutils-devel
  - use AddHandler in default conf.d/php.conf (#135664)
  - "fix" round() fudging for recent gcc on x86
  - disable sqlite pending audit of warnings and subpackage split


author: Joe Orton <jorton@redhat.com> 5.0.2-5
changelog:
  - fix phpize installation for lib64 platforms
  - add fix for segfault in variable parsing introduced in 5.0.2


author: Joe Orton <jorton@redhat.com> 5.0.2-7
changelog:
  - truncate changelog at 4.3.1-1
  - merge from 4.3.x package:
   - enable mime_magic extension and Require: file (#130276)


author: Joe Orton <jorton@redhat.com> 5.0.3-1
changelog:
  - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
  - enable xsl extension (#142174)
  - package both the xsl and dom extensions in php-xml
  - enable soap extension, shared (php-soap package) (#142901)
  - add patches from upstream 5.0 branch:
   * Zend_strtod.c compile fixes
   * correct php_sprintf return value usage


author: Joe Orton <jorton@redhat.com> 5.0.3-2
changelog:
  - install the ext/gd headers (#145891)
  - enable pcntl extension in /usr/bin/php (#142903)
  - add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
  - add BuildRequire for recent pcre-devel (#147448)


author: Joe Orton <jorton@redhat.com> 5.0.3-4
changelog:
  - package mysqli extension in php-mysql
  - really enable pcntl (#142903)
  - don't build with --enable-safe-mode (#148969)
  - use "Instant Client" libraries for oci8 module (Kai Bolay, #149873)


author: Joe Orton <jorton@redhat.com> 5.0.3-5
changelog:
  - BuildRequire mysql-devel >= 4.1
  - don't mark php.ini as noreplace to make upgrades work (#152171)
  - fix subpackage descriptions (#152628)
  - fix memset(,,0) in Zend (thanks to Dave Jones)
  - fix various compiler warnings in Zend


author: Joe Orton <jorton@redhat.com> 5.0.4-1
changelog:
  - update to 5.0.4 (#153068)
  - add .phps AddType to php.conf (#152973)
  - better gcc4 fix for libxmlrpc


author: Joe Orton <jorton@redhat.com> 5.0.4-4
changelog:
  - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
  - snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
  - mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282)


author: Joe Orton <jorton@redhat.com> 5.0.4-6
changelog:
  - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
    built with the CGI SAPI (thanks to Edward Rudd, #137704)
  - add php(1) man page for CLI
  - fix more test cases to use -n when invoking php


author: Joe Orton <jorton@redhat.com> 5.0.4-7
changelog:
  - split out dba and bcmath extensions into subpackages
  - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
  - pear: update to DB-1.7.6
  - enable FastCGI support in /usr/bin/php-cgi (#149596)


author: Joe Orton <jorton@redhat.com> 5.0.4-9
changelog:
  - build simplexml_import_dom even with shared dom (#156434)
  - prevent truncation of copied files to ~2Mb (#155916)
  - install /usr/bin/php from CLI build alongside CGI
  - enable sysvmsg extension (#142988)


author: Joe Orton <jorton@redhat.com> 5.0.5-3
changelog:
  - update to 5.0.5
  - add fix for upstream #34435
  - devel: require autoconf, automake (#159283)
  - pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
  - fix imagettftext et al (upstream, #161001)


author: Joe Orton <jorton@redhat.com> 5.1.1-2
changelog:
  - update to 5.1.1
  - remove pear subpackage
  - enable pdo extensions (php-pdo subpackage)
  - remove non-standard conditional module builds
  - enable xmlreader extension


author: Joe Orton <jorton@redhat.com> 5.1.2-5
changelog:
  - provide php-api (#183227)
  - add provides for all builtin modules (Tim Jackson, #173804)
  - own %{_libdir}/php/pear for PEAR packages (per #176733)
  - add obsoletes to allow upgrade from FE4 PDO packages (#181863)


author: Joe Orton <jorton@redhat.com> 5.1.4-5
changelog:
  - provide mod_php (#187891)
  - provide php-cli (#192196)
  - use correct LDAP fix (#181518)
  - define _GNU_SOURCE in php_config.h and leave it defined
  - drop (circular) dependency on php-pear


author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Joe Orton <jorton@redhat.com> 5.2.0-3
changelog:
  - update to 5.2.0 (#213837)
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)


author: Joe Orton <jorton@redhat.com> 5.2.0-4
changelog:
  - provide php-zend-abi (#212804)
  - add /etc/rpm/macros.php exporting interface versions
  - synch with upstream recommended php.ini


author: Joe Orton <jorton@redhat.com> 5.2.0-5
changelog:
  - build json and zip shared, in -common (Remi Collet, #215966)
  - obsolete php-json and php-pecl-zip
  - build readline extension into /usr/bin/php* (#210585)
  - change module subpackages to require php-common not php (#177821)


author: Joe Orton <jorton@redhat.com> 5.2.0-9
changelog:
  - add php(api), php(zend-abi) provides (#221302)
  - package /usr/share/php and append to default include_path (#225434)


author: Joe Orton <jorton@redhat.com> 5.2.0-10
changelog:
  - bump default memory_limit to 32M (#220821)
  - mark config files noreplace again (#174251)
  - drop trailing dots from Summary fields
  - use standard BuildRoot
  - drop libtool15 patch (#226294)


author: Joe Orton <jorton@redhat.com> 5.2.3-3
changelog:
  - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
  - enable dbase extension and package in -common


author: Joe Orton <jorton@redhat.com> 5.2.6-3
changelog:
  - update to 5.2.6
  - sync default php.ini with upstream
  - drop extension_dir from default php.ini, rely on hard-coded
    default, to make php-common multilib-safe (#455091)
  - update to r3 of systzdata patch


author: Joe Orton <jorton@redhat.com> 5.2.6-6
changelog:
  - move gd_README to php-gd
  - update to r4 of systzdata patch; introduces a default timezone
    name of "System/Localtime", which uses /etc/localtime (#469532)


author: Joe Orton <jorton@redhat.com> 5.2.8-4
changelog:
  - move wddx to php-xml, build curl shared in -common
  - remove BR for expat-devel, bogus configure option


author: Joe Orton <jorton@redhat.com> 5.2.8-9
changelog:
  - add recode support, -recode subpackage (#106755)
  - add -zts subpackage with ZTS-enabled build of httpd SAPI
  - adjust php.conf to use -zts SAPI build for worker MPM


author: Remi Collet <Fedora@famillecollet.com> 5.3.0-1
changelog:
  - update to 5.3.0
  - remove ncurses, dbase, mhash extensions
  - add enchant, sqlite3, intl, phar, fileinfo extensions
  - raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
  - sync with upstream "production" php.ini


author: Joe Orton <jorton@redhat.com> 5.3.0-2
changelog:
  - update to v5 of systzdata patch; parses zone.tab and extracts
    timezone->{country-code,long/lat,comment} mapping table


author: Remi Collet <Fedora@famillecollet.com> 5.3.1-1
changelog:
  - update to 5.3.1
  - remove openssl patch (merged upstream)
  - add provides for php-pecl-json
  - add prod/devel php.ini in doc


author: Remi Collet <Fedora@famillecollet.com>
changelog:
  - PHP 5.3.2 Released!
  - remove mime_magic option (now provided by fileinfo, by emu)
  - add patch for http://bugs.php.net/50578
  - remove patch for libedit (upstream)


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-1866, CVE-2010-2094, CVE-2010-1917,
    CVE-2010-2531, MOPS-2010-060 (#624469)


author: Joe Orton <jorton@redhat.com> - 5.3.3-1
changelog:
  - update to 5.3.3 (#645591)
  - add security fixes for CVE-2010-3709, CVE-2010-3710,
    CVE-2010-3870, CVE-2009-5016 (#651953)
  - prevent extract() cloberring $GLOBALS (#655118)
  - ensure correct mysql_config is used in biarch builds


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 5.3.3-6
changelog:
  - merge Joe's changes:
  - improve CVE-2011-1466 fix to cover CAL_GREGORIAN, CAL_JEWISH
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470,
    CVE-2011-1471, CVE-2011-1938, and CVE-2011-2202 (#740732)


author: Joe Orton <jorton@redhat.com> - 5.3.3-11
changelog:
  - add security fixes for CVE-2012-0781, CVE-2011-4153, CVE-2012-0057,
    CVE-2012-0789, CVE-2012-1172, CVE-2012-2143, CVE-2012-2386


author: Remi Collet <rcollet@redhat.com> - 5.3.3-15
changelog:
  - fix permission on source files (#676364)
  - fix negative keys with var_export (#771738)
  - fix setDate when DateTime created from timestamp (#812819)
  - add php(language) and missing provides (#837042)
  - use arch-specific requires (#833545)
  - fix possible buffer overflow in pdo_odbc (#836264)
  - fix possible segfault in pdo_mysql (#824199)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-16
changelog:
  - fix stream support in fileinfo (#858653)
  - fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859371)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-22
changelog:
  - php-xml provides php-xmlreader and php-xmlwriter (#874987)
  - fix possible NULL derefence and buffer overflow (#879179)
  - fix zend garbage collector (#848186, #868375)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-24
changelog:
  - fix buffer overflow in _pdo_pgsql_error (#969110)
  - fix double free when destroy_zend_class fails (#910466)
  - fix segfault in error_handler with
    allow_call_time_pass_reference = Off (#892158)
  - fix copy doesn't report failure on partial copy (#947428)
  - add rpm macros for packagers: %php_inidir,
    %php_incldir and %__php (#953814)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-29
changelog:
  - drop unneeded part of CVE-2006-724.patch and fileinfo.patch
    extension not provided or git binary patches (#1064027)
  - odbc: fix incompatible pointer type (#1053982)
  - mysqli: fix possible segfault in mysqli_stmt::bind_result
    php bug 66762 (#1069167)
  - mysql: fix php_mysql_fetch_hash writes long value into int
    php bug 52636 (#1054953)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-31
changelog:
  - soap: fixRFC2616 transgression (#1045019)
  - fix static calling in non-static method (#953786)
  - fix autoload called from closing session (#954027)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-34
changelog:
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Jan Kaluza <jkaluza@redhat.com> - 5.3.3-35
changelog:
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480


author: Remi Collet <rcollet@redhat.com> - 5.3.3-36
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515


author: Remi Collet <rcollet@redhat.com> - 5.3.3-37
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
    CVE-2014-2497
  - fileinfo: fix incomplete fix for CVE-2012-1571 in
    cdf_read_property_info. CVE-2014-3587
  - core: fix incomplete fix for CVE-2014-4049 DNS TXT
    record parsing. CVE-2014-3597


author: Remi Collet <rcollet@redhat.com> - 5.3.3-38
changelog:
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670


author: Remi Collet <rcollet@redhat.com> - 5.3.3-39
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Remi Collet <rcollet@redhat.com> - 5.3.3-41
changelog:
  - core: fix double in zend_ts_hash_graceful_destroy CVE-2014-9425
  - core: fix use-after-free in unserialize CVE-2015-2787
  - exif: fix free on unitialized pointer CVE-2015-0232
  - gd: fix buffer read overflow in gd_gif.c CVE-2014-9709
  - date: fix use after free vulnerability in unserialize CVE-2015-0273
  - enchant: fix heap buffer overflow in enchant_broker_request_dict
    CVE-2014-9705
  - phar: use after free in phar_object.c CVE-2015-2301
  - soap: fix type confusion through unserialize


author: Remi Collet <rcollet@redhat.com> - 5.3.3-43
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4026, #1213407
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - soap: more fix type confusion through unserialize #1222538


author: Kaj J. Niemi <kajtzu@fi.basen.net> 7.4-0.1
changelog:
  - 7.4
  - Fixed Patch #1 (now rpm-pgsql-7.4.patch)
  - Fixed Patch #2 (now rpm-multilib-7.4.patch):
  - Patch #4 is unnecessary (upstream)
  - Fixed Patch #6 (now postgresql-7.4-src-tutorial.patch)
  - Added Patch #8 (postgresql-7.4-com_err.patch) as com_err()
    is provided by e2fsprogs and CPPFLAGS gets lost somewhere
    inside configure (bad macro?)
  - No 7.4 PDF docs available yet (Source #17)
  - PyGreSQL is separated from the upstream distribution but
    we include it as usual (Source #18)
  - Default to compiling libpq and ECPG as fully thread-safe

  - 7.4 Origin.  See previous spec files for previous history. Adapted
  - from Red Hat and PGDG's 7.3.4 RPM, directly descended from 
  - postgresql-7.3.4-2 as shipped in Fedora Core 1.


author: Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>
changelog:
  - 7.4-0.1PGDG
  - Development JDBC jars in addition to the 7.3 jars; will replace the
  - 7.3 jars once 7.4 official jars are released.
  - Changed to use the bzip2 source to save a little size.
  - Removed some commented out portions of the specfile.
  - Removed the 7.3.4 PDF docs.  Will replace with 7.4 PDF's once they
  - are ready.


author: David Jee <djee@redhat.com> 7.4-4
changelog:
  - Add PyGreSQL patch for deprecated column pg_type.typprtlen [Bug #111263]
  - Add headers patch which moves ecpg headers to /usr/include/ecpg
    [Bug #111195]


author: Lamar Owen <lowen@pari.edu>
changelog:
  - 7.4.1-1PGDG
  - Merge Sander Steffann's changes up to 7.4-0.5PGDG
  - Proper 7.4.1 JDBC jars this time.
  - Patch for no pl/python from Alvaro


author: Tom Lane <tgl@redhat.com> 7.4.2-1
changelog:
  - Update to PostgreSQL 7.4.2; sync with community SRPM as much as possible.
  - Support PGOPTS from /etc/sysconfig/pgsql, per bug 111504.
  - Fix permissions on /etc/sysconfig/pgsql, per bug 115278.
  - SELinux patch in init file: always su </dev/null, per bug 117901.
  - Rebuilt


author: Tom Lane <tgl@redhat.com> 7.4.3-1
changelog:
  - Update to PostgreSQL 7.4.3.
  - Uninstalling server RPM stops postmaster first, per bug 114846.
  - Fix su commands to not assume PG user's shell is sh-like, per bug 124024.
  - Fix permissions on postgresql-python doc files, per bug 124822.
  - Minor postgresql.init improvements.


author: Tom Lane <tgl@redhat.com> 7.4.3-3
changelog:
  - Undo ill-considered chkconfig change that causes server to start
    immediately upon install.  Mea culpa (bug 127552).


author: Tom Lane <tgl@redhat.com> 7.4.5-1
changelog:
  - Update to PostgreSQL 7.4.5.
  - Update JDBC jars to driver build 215.
  - Add Obsoletes: entries for rh-postgresql packages, per bug 129278.


author: Tom Lane <tgl@redhat.com> 7.4.5-3
changelog:
  - Solve the stale lockfile problem (bugs 71295, 96981, 134090)
  - Use runuser instead of su for SELinux (bug 134588)


author: Tom Lane <tgl@redhat.com> 7.4.5-4
changelog:
  - Remove contrib/oidjoins stuff from installed fileset; it's of no use
    to ordinary users and has a security issue (bugs 136300, 136301)
  - adjust chkconfig priority (bug 128852)


author: Tom Lane <tgl@redhat.com> 7.4.6-1
changelog:
  - Update to PostgreSQL 7.4.6 (bugs 136947, 136949)
  - Make init script more paranoid about mkdir step of initializing a new
    database (bugs 136947, 136949)


author: Tom Lane <tgl@redhat.com> 7.4.6-3
changelog:
  - Update to PyGreSQL 3.6 (to fix bug #142711)
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)


author: Tom Lane <tgl@redhat.com> 8.0.0-1
changelog:
  - Update to PostgreSQL 8.0.0, PyGreSQL 3.6.1, pgtcl 1.5.2,
    and jdbc driver build 309.
  - Extensive cleanout of obsolete cruft in patch set.
  - Regression tests are run during RPM build (NOTE: cannot build as root when
    this is enabled).
  - Postmaster stderr goes someplace useful, not /dev/null (bz#76503, #103767)
  - Make init script return a useful exit status (bz#80782)
  - Move docs' tutorial directory to %{_libdir}/pgsql/tutorial, since it
    includes .so files that surely do not belong under /usr/share.
  - Remove useless .sgml files from docs RPM (bz#134450)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 8.0.1-2
changelog:
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.


author: Tom Lane <tgl@redhat.com> 8.0.1-4
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 8.0.3-1
changelog:
  - Update to PostgreSQL 8.0.3 (includes security and data-loss fixes; see
    bz#156727, CAN-2005-1409, CAN-2005-1410)
  - Update to jdbc driver build 311
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 8.0.4-1
changelog:
  - Update to PostgreSQL 8.0.4, PyGreSQL 3.6.2, and jdbc driver build 312
  - Adjust pgtcl link command to ensure it binds to correct libpq (bug #166665)
  - Remove obsolete Conflicts: against other python versions (bug #166754)
  - Add /etc/pam.d/postgresql (bug #167040)
  - Include contrib/xml2 in build (bug #167492)


author: Tom Lane <tgl@redhat.com> 8.1.0-1
changelog:
  - Update to PostgreSQL 8.1.0, PyGreSQL 3.7, and jdbc driver build 404
  - Fix PAM config file (must have account not only auth) (bug #167040)
  - Add BuildPrereq: libxslt-devel (bug #170141)
  - Sync with PGDG SRPM as much as feasible


author: Tom Lane <tgl@redhat.com> 8.1.1-1
changelog:
  - Update to PostgreSQL 8.1.1
  - Make pg_config.h architecture-independent for multilib installs;
    put the original pg_config.h into pg_config_$ARCH.h


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.2.0-1
changelog:
  - Update to PostgreSQL 8.2.0
  - Update to PyGreSQL 3.8.1
  - Fix chcon arguments in test/regress/Makefile
  Related: #201035
  - Adjust init script to not fool /etc/rc.d/rc
  Resolves: #161470
  - Change init script to not do initdb automatically, but require
    manual "service postgresql initdb" for safety.  Per upstream discussions.


author: Tom Lane <tgl@redhat.com> 8.2.1-1
changelog:
  - Update to PostgreSQL 8.2.1
  - Update to pgtcl 1.5.3
  - Be sure we link to libncurses, not libtermcap which is disappearing in Fedora


author: Tom Lane <tgl@redhat.com> 8.2.1-2
changelog:
  - Split -pl subpackage into three new packages to reduce dependencies
    and track upstream project's packaging.


author: Tom Lane <tgl@redhat.com> 8.2.4-2
changelog:
  - Fix oversight in postgresql-test makefile: pg_regress isn't a shell script
    anymore.  Per upstream bug 3398.


author: Tom Lane <tgl@redhat.com> 8.2.4-4
changelog:
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates
  - Don't remove postgres user/group during RPM uninstall, per Fedora
    packaging guidelines
  - Seems we need an explicit BuildRequires on gawk now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 8.2.4-5
changelog:
  - Use nicer solution for tzdata file substitution: upstream discussion
    concluded that hardwiring the path was better than a symlink after all.


author: Tom Lane <tgl@redhat.com> 8.2.6-1
changelog:
  - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  - Make initscript and pam config files be installed unconditionally;
    seems new buildroots don't necessarily have those directories in place


author: Tom Lane <tgl@redhat.com> 8.3RC2-1
changelog:
  - Update to PostgreSQL 8.3RC2 (not waiting for 8.3.0 because Fedora 9 alpha
    should be 8.3-based not 8.2-based).
  - Update to pgtcl 1.6.2


author: Tom Lane <tgl@redhat.com> 8.3.1-2
changelog:
  - Clean up cross-subpackage Requires: to ensure that updating any one
    subpackage brings in the matching versions of others.
  Resolves: #444271


author: Tom Lane <tgl@redhat.com> 8.3.1-4
changelog:
  - Enable LDAP support
  Resolves: #445315
  - Use -Wl,--as-needed to suppress bogus dependencies for libraries that
    are really only needed by some of the subpackages


author: Tom Lane <tgl@redhat.com> 8.3.3-1
changelog:
  - Update to PostgreSQL 8.3.3.
  - Remove postgresql-prefer-ncurses.patch, no longer needed in recent
    Fedora releases because libtermcap is gone.


author: Tom Lane <tgl@redhat.com> 8.3.3-2
changelog:
  - Install Pgtcl in /usr/lib/tcl$TCL_VERSION, not directly in /usr/lib.
    Needed because tcl 8.5 no longer puts /usr/lib into its package search path.
    NOTE: do not back-port this change into branches using pre-8.5 tcl, because
    /usr/lib/tcl8.4 had been a symlink to /usr/share/tcl8.4, and /usr/share
    is exactly where we must not put Pgtcl.
  Resolves: #228263


author: Tom Lane <tgl@redhat.com> 8.3.5-1
changelog:
  - Update to PostgreSQL 8.3.5.
  - Improve display from init script's initdb action, per Michael Schwendt


author: Tom Lane <tgl@redhat.com> 8.3.6-1
changelog:
  - Update to PostgreSQL 8.3.6, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-6.html


author: Tom Lane <tgl@redhat.com> 8.3.6-4
changelog:
  - Prevent dependent packages from needing to include sys/sdt.h
    (unintended side effect of previous patch)
  - Use -O1 on alpha, per report from Oliver Falk; -O2 tickles gcc bugs


author: Tom Lane <tgl@redhat.com> 8.3.7-1
changelog:
  - Update to PostgreSQL 8.3.7, for various fixes described at
    http://www.postgresql.org/docs/8.3/static/release-8-3-7.html
    notably the fix for CVE-2009-0922


author: Tom Lane <tgl@redhat.com> 8.4.0-1
changelog:
  - Update to PostgreSQL 8.4.0.  See release notes at
    http://www.postgresql.org/docs/8.4/static/release-8-4.html


author: Tom "spot" Callaway <tcallawa@redhat.com> 8.4.0-2
changelog:
  - update License tag to MIT (PostgreSQL calls it "BSD", but it is MIT)
  - Note: This changes nothing from a license compatibility perspective.


author: Tom Lane <tgl@redhat.com> 8.4.1-1
changelog:
  - Update to PostgreSQL 8.4.1, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-1.html
    including two security issues
  Related: #522085
  Related: #522092


author: Tom Lane <tgl@redhat.com> 8.4.2-4
changelog:
  - Sync with Fedora devel, including:
  - Update to PostgreSQL 8.4.2, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-2.html
    including two security issues
  Resolves: #552617
  - Remove the postgresql-python and postgresql-tcl subpackages.  These files
    are now broken out as their own packages (PyGreSQL and tcl-pgtcl,
    respectively), to reflect the now longstanding split of upstream projects.
  Related: #554431
  - Arrange for the postmaster, but not any of its child processes, to be run
    with oom_adj -17.  This compensates for the OOM killer not being smart about
    accounting for shared memory usage.
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines
  - Use -N not the obsolete -n in useradd call
  - Clean up specfile to eliminate rpmlint gripes, mainly by removing
    no-longer-needed provisions for superseding rh-postgresql
  - add sparc/sparc64 to multilib header support


author: Tom Lane <tgl@redhat.com> 8.4.2-5
changelog:
  - Latest version of systemtap needs the probes.o file to be built again
  Resolves: #557297
  - Provide script and instructions for building the documentation PDF


author: Tom Lane <tgl@redhat.com> 8.4.3-1
changelog:
  - Update to PostgreSQL 8.4.3, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-3.html
  Resolves: #565558
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Resolves: #561010
  - adjust license tag to reflect OSI decision


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #593033


author: Tom Lane <tgl@redhat.com> 8.4.4-2
changelog:
  - Add -p "$pidfile" to initscript's status call to improve corner cases.
    (Note: can't be fixed in Fedora until 595597 is fixed there.)
  Resolves: #561010


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Resolves: #640090
  - Duplicate COPYRIGHT in -libs subpackage, per revised packaging guidelines


author: Tom Lane <tgl@redhat.com> 8.4.7-1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672635


author: Tom Lane <tgl@redhat.com> 8.4.7-2
changelog:
  - Add fix to make plpgsql cope with dropped columns in rowtypes
  Resolves: #694249
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines,
    and add explicit dependencies on the -libs subpackage to pacify rpmdiff


author: Tom Lane <tgl@redhat.com> 8.4.9-1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740736


author: Tom Lane <tgl@redhat.com> 8.4.11-1
changelog:
  - Update to PostgreSQL 8.4.11, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #812082


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830726


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852021


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.18-1
changelog:
  - Update to PostgreSQL 8.4.18, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
    including fixes for CVE-2013-0255, CVE-2013-1900 (#1017837)


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-1
changelog:
  - Update to PostgreSQL 8.4.20 (#1065843) for fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-20.html


