# changelog

author: Jan Stancek <jstancek@redhat.com> [3.10.0-1089.el7]
changelog:
  - [fs] xfs: don't crash on null attr fork xfs_bmapi_read (Bill O'Donnell) [1719096]
  - [fs] gfs2: Clean up freeing struct gfs2_sbd (Robert S Peterson) [1737087]
  - [fs] dlm: Don't swamp the CPU with callbacks queued (Robert S Peterson) [1072066]
  - [fs] fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys inodes (Alex Gladkov) [1713642]
  - [fs] dquot: For now explicitly don't support filesystems outside of init_user_ns (Alex Gladkov) [1713642]
  - [security] selinux: allow context mounts on tmpfs, ramfs, devpts within user namespaces (Alex Gladkov) [1713642]
  - [fs] vfs: Use upper filesystem inode in bprm_fill_uid() (Alex Gladkov) [1713642]
  - [fs] vfs: open() with O_CREAT should not create inodes with unknown ids (Alex Gladkov) [1713642]
  - [fs] mount: Prevent MNT_DETACH from disconnecting locked mounts (Alex Gladkov) [1713642]
  - [fs] fs: Update i_[ug]id_(read|write) to translate relative to s_user_ns (Alex Gladkov) [1713642]
  - [fs] quota: Ensure qids map to the filesystem (Alex Gladkov) [1713642]
  - [fs] vfs: Don't create inodes with a uid or gid unknown to the vfs (Alex Gladkov) [1713642]
  - [fs] vfs: Don't modify inodes with a uid or gid unknown to the vfs (Alex Gladkov) [1713642]
  - [fs] cred: Reject inodes with invalid ids in set_create_file_as() (Alex Gladkov) [1713642]
  - [fs] fs: Check for invalid i_uid in may_follow_link() (Alex Gladkov) [1713642]
  - [fs] vfs: Verify acls are valid within superblock's s_user_ns. (Alex Gladkov) [1713642]
  - [fs] userns: Handle -1 in k[ug]id_has_mapping when !CONFIG_USER_NS (Alex Gladkov) [1713642]
  - [fs] fs: Refuse uid/gid changes which don't map into s_user_ns (Alex Gladkov) [1713642]
  - [fs] selinux: Add support for unprivileged mounts from user namespaces (Alex Gladkov) [1713642]
  - [fs] fs: Use correct xattr length (Alex Gladkov) [1713642]
  - [fs] capabilities: Use d_find_any_alias() instead of d_find_alias() (Alex Gladkov) [1713642]
  - [fs] commoncap: Handle memory allocation failure. (Alex Gladkov) [1713642]
  - [fs] evm: Don't update hmacs in user ns mounts (Alex Gladkov) [1713642]
  - [fs] vfs: Don't allow changing the link count of an inode with an invalid uid or gid (Alex Gladkov) [1713642]
  - [fs] namei: permit linking with CAP_FOWNER in userns (Alex Gladkov) [1713642]
  - [fs] fs: Allow superblock owner to replace invalid owners of inodes (Alex Gladkov) [1713642]
  - [fs] fs: Allow superblock owner to access do_remount_sb() (Alex Gladkov) [1713642]
  - [fs] capabilities: Allow privileged user in s_user_ns to set security.* xattrs (Alex Gladkov) [1713642]
  - [fs] fs: Allow CAP_SYS_ADMIN in s_user_ns to freeze and thaw filesystems (Alex Gladkov) [1713642]
  - [fs] fuse: Allow fully unprivileged mounts (Alex Gladkov) [1713642]
  - [fs] fuse: Restrict allow_other to the superblock's namespace or a descendant (Alex Gladkov) [1713642]
  - [fs] fuse: Support fuse filesystems outside of init_user_ns (Alex Gladkov) [1713642]
  - [fs] fuse: Fail all requests with invalid uids or gids (Alex Gladkov) [1713642]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1090.el7]
changelog:
  - [net] inet: switch IP ID generator to siphash (Xin Long) [1733067] {CVE-2019-10638}
  - [lib] siphash: add cryptographically secure PRF (Xin Long) [1733067] {CVE-2019-10638}
  - [fs] dcache: allow word-at-a-time name hashing with big-endian CPUs (Xin Long) [1733067] {CVE-2019-10638}
  - [net] tun: allow positive return values on dev_get_valid_name() call (Xin Long) [1723645] {CVE-2018-7191}
  - [net] tun: call dev_get_valid_name() before register_netdevice() (Xin Long) [1723645] {CVE-2018-7191}
  - [net] xfrm/xfrm_policy: fix dst dev null pointer dereference in collect_md mode (Hangbin Liu) [1725596]
  - [net] ipv4/icmp: fix rt dst dev null pointer dereference (Hangbin Liu) [1725596]
  - [net] ipv6_gre: Fix GRO to work on IPv6 over GRE tap (Hangbin Liu) [1725596]
  - [net] ip6_gre: add ip6 gre and gretap collect_md mode (Hangbin Liu) [1725596]
  - [net] ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6 (Hangbin Liu) [1725596]
  - [net] ip6_gre: Refactor ip6gre xmit codes (Hangbin Liu) [1725596]
  - [net] gre6: use log_ecn_error module parameter in ip6_tnl_rcv() (Hangbin Liu) [1725596]
  - [net] ip6_tunnel: collect_md xmit: Use ip_tunnel_key's provided src address (Hangbin Liu) [1725596]
  - [net] adding missing rcu_read_unlock in ipxip6_rcv (Hangbin Liu) [1725596]
  - [net] ip6_tunnel: fix ip6 tunnel lookup in collect_md mode (Hangbin Liu) [1725596]
  - [net] ip6_tunnel: fix potential issue in __ip6_tnl_rcv (Hangbin Liu) [1725596]
  - [net] ip6_tunnel: add collect_md mode to IPv6 tunnels (Hangbin Liu) [1725596]
  - [net] sched: fold tcf_block_cb_call() into tc_setup_cb_call() (Ivan Vecera) [1660900]
  - [net] sched: Remove egdev mechanism (Ivan Vecera) [1660900]
  - [net] fix IPv6 prefix route residue (Stefano Brivio) [1725990]
  - [net] vxlan: Don't assume linear buffers in error handler (Stefano Brivio) [1720150]
  - [net] geneve: Don't assume linear buffers in error handler (Stefano Brivio) [1720150]
  - [net] ipv6: Return error for RTA_VIA attribute (Stefano Brivio) [1725992]
  - [net] netlink: fix missing newline in the implementation of NL_SET_ERR_MSG (Ivan Vecera) [1724867]
  - [net] Make RX-FCS and HW GRO mutually exclusive (Ivan Vecera) [1745672]
  - [net] Make RX-FCS and LRO mutually exclusive (Ivan Vecera) [1745672]
  - [net] af_unix: split 'u->readlock' into two: 'iolock' and 'bindlock' (Vladis Dronov) [1582552]
  - [net] ppp: Remove direct skb_queue_head list pointer access. (Ivan Vecera) [1746914]
  - [net] fq: support filtering a given tin (Ivan Vecera) [1746900]
  - [net] inet: frags: re-introduce skb coalescing for local delivery (Guillaume Nault) [1632906]
  - [net] fib_rules: Added NLM_F_EXCL support to fib_nl_newrule (Hangbin Liu) [1700691]
  - [net] tun: use socket locks for sk_{attach, detatch}_filter (Paolo Abeni) [1725202]
  - [net] introduce lockdep_is_held and update various places to use it (Paolo Abeni) [1725202]
  - [net] tun, bpf: fix suspicious RCU usage in tun_{attach, detach}_filter (Paolo Abeni) [1725202]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1091.el7]
changelog:
  - [sound] ALSA: hda: Initialize power_state field properly (Jaroslav Kysela) [1750735]
  - [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1749766]
  - [security] KEYS: add missing permission check for request_key() destination (Vladis Dronov) [1543262] {CVE-2017-17807}
  - [security] KEYS: remove unnecessary get/put of explicit dest_keyring (Vladis Dronov) [1543262] {CVE-2017-17807}
  - [security] KEYS: Strip trailing spaces (Vladis Dronov) [1543262] {CVE-2017-17807}
  - [iommu] iommu/amd: Add support for X2APIC IOMMU interrupts (Suravee Suthikulpanit) [1734847]
  - [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1749524]
  - [powercap] powercap/intel_rapl: add support for ICX (Steve Best) [1749265]
  - [nvme] nvmet-rdma: fix null dereference under heavy load (David Milburn) [1737251]
  - [nvme] nvmet-rdma: Add unlikely for response allocated check (David Milburn) [1737251]
  - [nvme] nvme-core: Fix extra device_put() call on error path (David Milburn) [1737251]
  - [nvme] nvme: avoid that deleting a controller triggers a circular locking complaint (David Milburn) [1737251]
  - [nvme] nvme: introduce a helper function for controller deletion (David Milburn) [1737251]
  - [nvme] nvme: unexport nvme_delete_ctrl_sync() (David Milburn) [1737251]
  - [nvme] nvme-rdma: fix possible use-after-free in connect error flow (David Milburn) [1737251]
  - [nvme] nvme-rdma: fix a NULL deref when an admin connect times out (David Milburn) [1737251]
  - [nvme] nvme: remove the .stop_ctrl callout (David Milburn) [1737251]
  - [hwtracing] intel_th: pci: Add support for another Lewisburg PCH (Jiri Olsa) [1714483]
  - [md] block: trace completion of all bios (Xiao Ni) [1741466]
  - [md] md/raid1, raid10: add blktrace records when IO is delayed (Xiao Ni) [1741466]
  - [md] md/bitmap: add blktrace event for writes to the bitmap (Xiao Ni) [1741466]
  - [md] md: add block tracing for bio_remapping (Xiao Ni) [1741466]
  - [md] md: add blktrace event for writes to superblock (Xiao Ni) [1741466]
  - [x86] efi/x86: drop task_lock() from efi_switch_mm() (Scott Wood) [1749081]
  - [scsi] scsi: qla2xxx: cleanup trace buffer initialization (Himanshu Madhani) [1749039]
  - [scsi] scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha->eft (Himanshu Madhani) [1749039]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1092.el7]
changelog:
  - [kernel] sched/core: Use TASK_ON_RQ_MIGRATING in __migrate_swap_task (Phil Auld) [1616140]
  - [kernel] sched/fair: Remove double_lock_balance() from load_balance() (Phil Auld) [1616140]
  - [kernel] sched/fair: Remove double_lock_balance() from active_load_balance_cpu_stop() (Phil Auld) [1616140]
  - [kernel] sched: Remove double_rq_lock() from __migrate_task() (Phil Auld) [1616140]
  - [kernel] sched: Fix CACHE_HOT_BUDY condition (Phil Auld) [1616140]
  - [kernel] sched: Clean up the task_hot() function (Phil Auld) [1616140]
  - [kernel] sched/deadline: Make update_curr_dl() more accurate (Phil Auld) [1616140]
  - [kernel] sched/deadline: Fix the intention to re-evalute tick dependency for offline CPU (Phil Auld) [1616140]
  - [kernel] sched/deadline: Fix switched_from_dl() warning (Phil Auld) [1616140]
  - [kernel] sched/deadline: Fix missing clock update (Phil Auld) [1616140]
  - [kernel] sched/deadline: Fix switching to -deadline (Phil Auld) [1616140]
  - [scsi] scsi: qla2xxx: Fix driver reload for ISP82xx (Himanshu Madhani) [1743185]
  - [scsi] scsi: qla2xxx: Fix flash read for Qlogic ISPs (Himanshu Madhani) [1743185]
  - [scsi] scsi: Ensure SCSI EH wakeup in when host_failed == host_busy (Ewan Milne) [1668869]
  - [netdrv] virtio_net: fix error return code in virtnet_probe() (Eugenio Perez) [1589888]
  - [netdrv] net_failover: fix typo in net_failover_slave_register() (Eugenio Perez) [1589888]
  - [netdrv] net_failover: Use netdev_features_t instead of u32 (Eugenio Perez) [1589888]
  - [documentation] [netdrv] virtio_net: Extend virtio to use VF datapath when available (Eugenio Perez) [1589888]
  - [uapi] [netdrv] virtio_net: Introduce VIRTIO_NET_F_STANDBY feature bit (Eugenio Perez) [1589888]
  - [netdrv] Introduce net_failover driver (Eugenio Perez) [1589888]
  - [net] Introduce generic failover module (Eugenio Perez) [1589888]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1093.el7]
changelog:
  - [wireless] ath9k_htc: use non-QoS NDP for AP probing (Stanislaw Gruszka) [1641110 1641098 1641096 1640935]
  - [wireless] wil6210: compile with new cfg80211 (Stanislaw Gruszka) [1641110 1641098 1641096 1640935]
  - [wireless] rtw88: compile with new mac80211 (Stanislaw Gruszka) [1641110 1641098 1641096 1640935]
  - [wireless] mac80211: call rate_control_send_low() internally (Stanislaw Gruszka) [1641110 1641098 1641096 1640935]
  - [wireless] Backport iwlwifi driver from linux-5.3-rc5 (Stanislaw Gruszka) [1641110 1641098 1641096 1640935]
  - [net] Backport mac80211 from linux-5.3-rc5 (Stanislaw Gruszka) [1641110 1641098 1641096 1640935]
  - [net] Backport wireless core from linux-5.3-rc5 (Stanislaw Gruszka) [1641110 1641098 1641096 1640935]
  - [net] devlink: fix double lock on devlink register dump (Paolo Abeni) [1750664]
  - [net] fix ifindex collision during namespace removal (Paolo Abeni) [1750810]
  - [net] neigh: fix use-after-free read in pneigh_get_next (Paolo Abeni) [1750810]
  - [net] gro: fix use-after-free read in napi_gro_frags() (Paolo Abeni) [1750810]
  - [net] openvswitch: fix csum updates for MPLS actions (Eelco Chaudron) [1749269]
  - [net] bridge: mcast: don't delete permanent entries when fast leave is enabled (Hangbin Liu) [1749658]
  - [net] bridge: delete local fdb on device init failure (Hangbin Liu) [1749658]
  - [net] bridge: stp: don't cache eth dest pointer before skb pull (Hangbin Liu) [1749658]
  - [net] bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query (Hangbin Liu) [1749658]
  - [net] bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling (Hangbin Liu) [1749658]
  - [net] bridge: fix per-port af_packet sockets (Hangbin Liu) [1749658]
  - [net] bridge: multicast: use rcu to access port list from br_multicast_start_querier (Hangbin Liu) [1749658]
  - [net] bridge: Fix ethernet header pointer before check skb forwardable (Hangbin Liu) [1749658]
  - [net] bridge: fix early call to br_stp_change_bridge_id and plug newlink leaks (Hangbin Liu) [1749658]
  - [net] bridge: add vlan_tunnel to bridge port policies (Hangbin Liu) [1749658]
  - [net] bridge: fix returning of vlan range op errors (Hangbin Liu) [1749658]
  - [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748358] {CVE-2019-15239}
  - [net] netfilter: nf_log: don't hold nf_log_mutex during user access (Florian Westphal) [1749777]
  - [net] netfilter: nf_queue: augment nfqa_cfg_policy (Florian Westphal) [1749777]
  - [net] netfilter: nf_tables: add missing netlink attrs to policies (Florian Westphal) [1749777]
  - [net] netfilter: IDLETIMER: be syzkaller friendly (Florian Westphal) [1749777]
  - [net] netfilter: x_tables: fix missing timer initialization in xt_LED (Florian Westphal) [1749777]
  - [net] netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert (Florian Westphal) [1749777]
  - [net] netfilter: xt_bpf: add overflow checks (Florian Westphal) [1749777]
  - [net] netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user (Florian Westphal) [1749777]
  - [net] netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize (Florian Westphal) [1749777]
  - [net] netfilter: ctnetlink: make it safer when updating ct->status (Florian Westphal) [1749777]
  - [net] netfilter: ctnetlink: Fix regression in CTA_STATUS processing (Florian Westphal) [1749777]
  - [net] netfilter: ctnetlink: fix deadlock due to acquire _expect_lock twice (Florian Westphal) [1749777]
  - [net] netfilter: ctnetlink: drop the incorrect cthelper module request (Florian Westphal) [1749777]
  - [net] netfilter: nfnetlink_queue: reject verdict request from different portid (Florian Westphal) [1749777]
  - [net] nf_conntrack: avoid kernel pointer value leak in slab name (Florian Westphal) [1749777]
  - [net] netfilter: nfnetlink: don't probe module if it exists (Florian Westphal) [1749777]
  - [net] netfilter: ctnetlink: put back references to master ct and expect objects (Florian Westphal) [1749777]
  - [net] netfilter: xt_socket: fix a stack corruption bug (Florian Westphal) [1749777]
  - [net] ifb: add multiqueue operation (Davide Caratti) [1746626]
  - [net] netfilter: ipset: Copy the right MAC address in bitmap:ip, mac and hash:ip, mac sets (Stefano Brivio) [1723609]
  - [net] netfilter: ipset: Actually allow destination MAC address for hash:ip, mac sets too (Stefano Brivio) [1723609]
  - [net] ipset: Fix memory accounting for hash types on resize (Stefano Brivio) [1711520]
  - [net] uapi: Add 802.11 Preauthentication to if_ether (Ivan Vecera) [1748261]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1094.el7]
changelog:
  - [scsi] libiscsi: fall back to sendmsg for slab pages (Oleksandr Natalenko) [1720506]
  - [fs] ext4: do not delete unlinked inode from orphan list on failed truncate (Lukas Czerner) [1747387]
  - [fs] ext4: wait for outstanding dio during truncate in nojournal mode (Lukas Czerner) [1747387]
  - [fs] ext4: fix data corruption caused by overlapping unaligned and aligned IO (Lukas Czerner) [1747387]
  - [fs] ext4: actually request zeroing of inode table after grow (Lukas Czerner) [1747387]
  - [fs] jbd2: check superblock mapped prior to committing (Lukas Czerner) [1747387]
  - [fs] ext4: prohibit fstrim in norecovery mode (Lukas Czerner) [1747387]
  - [fs] ext4: cleanup bh release code in ext4_ind_remove_space() (Lukas Czerner) [1747387]
  - [fs] ext4: brelse all indirect buffer in ext4_ind_remove_space() (Lukas Czerner) [1747387]
  - [fs] ext4: report real fs size after failed resize (Lukas Czerner) [1747387]
  - [fs] ext4: add missing brelse() in add_new_gdb_meta_bg() (Lukas Czerner) [1747387]
  - [fs] ext4: add missing brelse() in add_new_gdb_meta_bg() (Lukas Czerner) [1747387]
  - [fs] ext4: avoid panic during forced reboot due to aborted journal (Lukas Czerner) [1747387]
  - [fs] ext4: avoid panic during forced reboot (Lukas Czerner) [1747387]
  - [fs] ext4: fix NULL pointer dereference while journal is aborted (Lukas Czerner) [1747387]
  - [fs] jbd2: fix invalid descriptor block checksum (Lukas Czerner) [1747387]
  - [fs] jbd2: clear dirty flag when revoking a buffer from an older transaction (Lukas Czerner) [1747387]
  - [fs] jbd2: fix deadlock while checkpoint thread waits commit thread to finish (Lukas Czerner) [1747387]
  - [fs] gfs2: Use async glocks for rename (Robert S Peterson) [1677686]
  - [fs] gfs2: create function gfs2_glock_update_hold_time (Robert S Peterson) [1677686]
  - [fs] gfs2: separate holder for rgrps in gfs2_rename (Robert S Peterson) [1677686]
  - [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1724344]
  - [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1724344]
  - [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1724344]
  - [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1724344]
  - [netdrv] net/mlx5e: Add device out of buffer counter (Alaa Hleihel) [1724344]
  - [include] net/mlx5: Add support for VNIC_ENV internal rq counter (Alaa Hleihel) [1724344]
  - [netdrv] net/mlx5: Fix the order of fc_stats cleanup (Alaa Hleihel) [1724344]
  - [netdrv] net/mlx5: Add flow counter pool (Alaa Hleihel) [1724344]
  - [netdrv] net/mlx5: Add flow counter bulk infrastructure (Alaa Hleihel) [1724344]
  - [netdrv] net/mlx5: Add flow counter bulk allocation hardware bits and command (Alaa Hleihel) [1724344]
  - [netdrv] net/mlx5: Refactor and optimize flow counter bulk query (Alaa Hleihel) [1724344]
  - [netdrv] net/mlx5: Move flow counters data structures from flow steering header (Alaa Hleihel) [1724344]
  - [netdrv] Add missing ndo_size parameter (Jonathan Toppins) [1715376]
  - [nvme] nvme: Revert Simplify metadata setup (David Milburn) [1746946]
  - [scsi] hpsa: bump driver version (Joseph Szczypek) [1741355]
  - [scsi] scsi: hpsa: remove printing internal cdb on tag collision (Joseph Szczypek) [1741355]
  - [scsi] scsi: hpsa: correct scsi command status issue after reset (Joseph Szczypek) [1741355]
  - [vhost] vhost: make sure log_num < in_num (Eugenio Perez) [1750880] {CVE-2019-14835}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1095.el7]
changelog:
  - [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1745053]
  - [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1745053]
  - [nvme] nvmet: fix setting ns queue's segment boundary (David Milburn) [1741853]
  - [nvme] nvmet: set loop queue's segment boundary mask as PAGE_SIZE - 1 (David Milburn) [1741853]
  - [nvme] nvme: update comment to make the code easier to read (David Milburn) [1741853]
  - [nvme] nvmet: Fix use-after-free bug when a port is removed (David Milburn) [1741853]
  - [nvme] nvmet: return a specified error it subsys_alloc fails (David Milburn) [1741853]
  - [nvme] nvmet: add safety check for subsystem lock during nvmet_ns_changed (David Milburn) [1741853]
  - [nvme] nvmet: use unlikely for req status check (David Milburn) [1741853]
  - [nvme] nvmet: support fabrics sq flow control (David Milburn) [1741853]
  - [nvme] nvme-loop: kill timeout handler (David Milburn) [1741853]
  - [netdrv] i40e: fix retrying in i40e_aq_get_phy_capabilities (Stefan Assmann) [1720236]
  - [netdrv] i40e: Persistent LLDP support (Stefan Assmann) [1720236]
  - [netdrv] i40e: Remove function i40e_update_dcb_config() (Stefan Assmann) [1720236]
  - [netdrv] i40e: Fix crash caused by stress setting of VF MAC addresses (Stefan Assmann) [1720236]
  - [netdrv] i40e: reset veb.tc_stats when resetting veb.stats (Stefan Assmann) [1720236]
  - [netdrv] i40e: Update FW API version to 1.9 (Stefan Assmann) [1720236]
  - [netdrv] i40e: Add drop mode parameter to set mac config (Stefan Assmann) [1720236]
  - [netdrv] i40e: fix shifts of signed values (Stefan Assmann) [1720236]
  - [netdrv] i40e: add check on i40e_configure_tx_ring() return value (Stefan Assmann) [1720236]
  - [netdrv] i40e: Check if transceiver implements DDM before access (Stefan Assmann) [1720236]
  - [netdrv] i40e: reduce stack usage in i40e_set_fc (Stefan Assmann) [1720236]
  - [netdrv] i40e: no need to check return value of debugfs_create functions (Stefan Assmann) [1720236]
  - [netdrv] i40e: Remove unicast log when VF is leaving multicast mode (Stefan Assmann) [1720236]
  - [netdrv] i40e: verify string count matches even on early return (Stefan Assmann) [1720236]
  - [netdrv] i40e: Log info when PF is entering and leaving Allmulti mode (Stefan Assmann) [1720236]
  - [netdrv] i40e: Update visual effect for advertised FEC mode (Stefan Assmann) [1720236]
  - [netdrv] i40e: fix code comments (Stefan Assmann) [1720236]
  - [netdrv] i40e: don't report link up for a VF who hasn't enabled queues (Stefan Assmann) [1720236]
  - [netdrv] i40e: Log disable-fw-lldp flag change by ethtool (Stefan Assmann) [1720236]
  - [netdrv] i40e: fix incorrect ethtool statistics veb and veb.tc_ (Stefan Assmann) [1720236]
  - [netdrv] i40e: Use dev_get_drvdata (Stefan Assmann) [1720236]
  - [netdrv] net: Use skb accessors in network drivers (Stefan Assmann) [1720236]
  - [netdrv] i40e/i40e_virtchnl_pf: Use struct_size() in kzalloc() (Stefan Assmann) [1720236]
  - [netdrv] i40e: update copyright string (Stefan Assmann) [1720236]
  - [netdrv] i40e: Fix descriptor count manipulation (Stefan Assmann) [1720236]
  - [netdrv] i40e: missing priorities for any QoS traffic (Stefan Assmann) [1720236]
  - [netdrv] i40e: Add log entry while creating or deleting TC0 (Stefan Assmann) [1720236]
  - [netdrv] i40e: fix incorrect function documentation comment (Stefan Assmann) [1720236]
  - [netdrv] i40e: Fix for missing "link modes" info in ethtool (Stefan Assmann) [1720236]
  - [netdrv] i40e: fix 'Unknown bps' in dmesg for 2.5Gb/5Gb speeds (Stefan Assmann) [1720236]
  - [netdrv] i40e: mark expected switch fall-through (Stefan Assmann) [1720236]
  - [netdrv] i40e: Missing response checks in driver when starting/stopping FW LLDP (Stefan Assmann) [1720236]
  - [netdrv] i40e: remove duplicate stat calculation for tx_errors (Stefan Assmann) [1720236]
  - [netdrv] i40e: Check if the BAR size is large enough before writing to registers (Stefan Assmann) [1720236]
  - [netdrv] i40e: Missing response checks in driver when starting/stopping FW LLDP (Stefan Assmann) [1720236]
  - [netdrv] i40e: add input validation for virtchnl handlers (Stefan Assmann) [1720236]
  - [netdrv] i40e: Improve AQ log granularity (Stefan Assmann) [1720236]
  - [netdrv] i40e: Add bounds check for charray (Stefan Assmann) [1720236]
  - [netdrv] i40e: Use signed variable (Stefan Assmann) [1720236]
  - [netdrv] i40e: add constraints for accessing veb array (Stefan Assmann) [1720236]
  - [netdrv] i40e: let untrusted VF to create up to 16 VLANs (Stefan Assmann) [1720236]
  - [netdrv] i40e: add functions stubs to support EEE (Stefan Assmann) [1720236]
  - [netdrv] i40e: Check and set the PF driver state first in i40e_ndo_set_vf_mac (Stefan Assmann) [1720236]
  - [netdrv] i40e: Use LLDP ethertype define ETH_P_LLDP (Stefan Assmann) [1720236]
  - [netdrv] i40e: Memory leak in i40e_config_iwarp_qvlist (Stefan Assmann) [1720236]
  - [netdrv] i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c (Stefan Assmann) [1720236]
  - [netdrv] i40e: Use struct_size() in kzalloc() (Stefan Assmann) [1720236]
  - [netdrv] i40e: Revert ShadowRAM checksum calculation change (Stefan Assmann) [1720236]
  - [netdrv] i40e: missing input validation on VF message handling by the PF (Stefan Assmann) [1720236]
  - [netdrv] i40e: Add support for X710 B/P & SFP+ cards (Stefan Assmann) [1720236]
  - [netdrv] i40e: Wrong truncation from u16 to u8 (Stefan Assmann) [1720236]
  - [netdrv] i40e: add num_vectors checker in iwarp handler (Stefan Assmann) [1720236]
  - [netdrv] i40e: Fix the typo in adding 40GE KR4 mode (Stefan Assmann) [1720236]
  - [netdrv] i40e: Setting VF to VLAN 0 requires restart (Stefan Assmann) [1720236]
  - [netdrv] i40e: add new pci id for X710/XXV710 N3000 cards (Stefan Assmann) [1720236]
  - [netdrv] i40e: VF's promiscuous attribute is not kept (Stefan Assmann) [1720236]
  - [netdrv] i40e: print PCI vendor and device ID during probe (Stefan Assmann) [1720236]
  - [netdrv] i40e: fix misleading message about promisc setting on un-trusted VF (Stefan Assmann) [1720236]
  - [netdrv] i40e: update version number (Stefan Assmann) [1720236]
  - [netdrv] i40e: remove out-of-range comparisons in i40e_validate_cloud_filter (Stefan Assmann) [1720236]
  - [netdrv] i40e: Further implementation of LLDP (Stefan Assmann) [1720236]
  - [netdrv] i40e: Report advertised link modes on 40GBase_LR4, CR4 and fibre (Stefan Assmann) [1720236]
  - [netdrv] i40e: ShadowRAM checksum calculation change (Stefan Assmann) [1720236]
  - [netdrv] i40e: remove error msg when vf with port vlan tries to remove vlan 0 (Stefan Assmann) [1720236]
  - [netdrv] i40e: change behavior on PF in response to MDD event (Stefan Assmann) [1720236]
  - [netdrv] i40e: Fix for allowing too many MDD events on VF (Stefan Assmann) [1720236]
  - [netdrv] i40e: Fix misleading error message (Stefan Assmann) [1720236]
  - [netdrv] i40e: Able to add up to 16 MAC filters on an untrusted VF (Stefan Assmann) [1720236]
  - [netdrv] i40e: Report advertised link modes on 40GBASE_SR4 (Stefan Assmann) [1720236]
  - [netdrv] i40e: The driver now prints the API version in error message (Stefan Assmann) [1720236]
  - [netdrv] i40e: Changed maximum supported FW API version to 1.8 (Stefan Assmann) [1720236]
  - [netdrv] i40e: Remove misleading messages for untrusted VF (Stefan Assmann) [1720236]
  - [netdrv] i40e: Update i40e_init_dcb to return correct error (Stefan Assmann) [1720236]
  - [netdrv] i40e: Fix for 10G ports LED not blinking (Stefan Assmann) [1720236]
  - [netdrv] i40e: save PTP time before a device reset (Stefan Assmann) [1720236]
  - [netdrv] i40e: don't allow changes to HW VLAN stripping on active port VLANs (Stefan Assmann) [1720236]
  - [netdrv] i40e: Queues are reserved despite "Invalid argument" error (Stefan Assmann) [1720236]
  - [netdrv] i40e: move i40e_xsk_umem function (Stefan Assmann) [1720236]
  - [netdrv] i40e: fix i40e_ptp_adjtime when given a negative delta (Stefan Assmann) [1720236]
  - [netdrv] i40e: fix XDP_REDIRECT/XDP xmit ring cleanup race (Stefan Assmann) [1720236]
  - [netdrv] i40e: fix potential RX buffer starvation for AF_XDP (Stefan Assmann) [1720236]
  - [netdrv] net: bpf: remove XDP_QUERY_XSK_UMEM enumerator (Stefan Assmann) [1720236]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1096.el7]
changelog:
  - [net] ip_gre: fix parsing gre header in ipgre_err (Guillaume Nault) [1750474]
  - [net] ipip: only increase err_count for some certain type icmp in ipip_err (Guillaume Nault) [1750474]
  - [net] tunnels: Don't apply GRO to multiple layers of encapsulation. (Guillaume Nault) [1750474]
  - [net] ip_tunnel: fix ip tunnel lookup in collect_md mode (Guillaume Nault) [1750474]
  - [net] netfilter: ipset: Fix rename concurrency with listing (Stefano Brivio) [1751322]
  - [net] ipv4: Return error for RTA_VIA attribute (Stefano Brivio) [1751301]
  - [net] netem: fix backlog accounting for corrupted GSO frames (Davide Caratti) [1750670]
  - [net] netem: fix skb length BUG_ON in __skb_to_sgvec (Davide Caratti) [1750670]
  - [net] sched: act_sample: fix psample group handling on overwrite (Davide Caratti) [1750670]
  - [net] sched: don't dereference a->goto_chain to read the chain index (Davide Caratti) [1750670]
  - [net] l2tp: prevent pppol2tp_connect() from creating kernel sockets (Guillaume Nault) [1749931]
  - [net] l2tp: check sockaddr length in pppol2tp_connect() (Guillaume Nault) [1749931]
  - [net] l2tp: do not accept arbitrary sockets (Guillaume Nault) [1749931]
  - [net] l2tp: cast l2tp traffic counter to unsigned (Guillaume Nault) [1749931]
  - [net] l2tp: don't mask errors in pppol2tp_getsockopt() (Guillaume Nault) [1749931]
  - [net] l2tp: don't mask errors in pppol2tp_setsockopt() (Guillaume Nault) [1749931]
  - [net] l2tp: Correctly return -EBADF from pppol2tp_getname. (Guillaume Nault) [1749931]
  - [net] sctp: use transport pf_retrans in sctp_do_8_2_transport_strike (Xin Long) [1750092]
  - [net] sctp: fix the transport error_count check (Xin Long) [1750092]
  - [net] sctp: fix warning "NULL check before some freeing functions is not needed" (Xin Long) [1750092]
  - [net] sctp: change to hold sk after auth shkey is created successfully (Xin Long) [1750092]
  - [net] sctp: Free cookie before we memdup a new one (Xin Long) [1750092]
  - [net] Fix memory leak in sctp_process_init (Xin Long) [1750092]
  - [net] sctp: Check address length before reading address family (Xin Long) [1750092]
  - [net] sctp: initialize _pad of sockaddr_in before copying to user memory (Xin Long) [1750092]
  - [net] sctp: not copy sctp_sock pd_lobby in sctp_copy_descendant (Xin Long) [1750092]
  - [net] sctp: Replace use of sockets_allocated with specified macro. (Xin Long) [1750092]
  - [net] ipv6: fix neighbour resolution with raw socket (Stefano Brivio) [1724586]
  - [net] ipv6: constify rt6_nexthop() (Stefano Brivio) [1724586]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1097.el7]
changelog:
  - [tools] perf version: Fix segfault due to missing OPT_END() (Michael Petlan) [1750687]
  - [net] vsock: split dwork to avoid reinitializations (Artem Savkov) [1650408]
  - [fs] fscache: Don't use a constructor function on the slab allocator (David Howells) [1739996]
  - [tools] tools/power turbostat: Fix Haswell Core systems (Prarit Bhargava) [1715723]
  - [netdrv] net/ibmvnic: Fix missing { in __ibmvnic_reset (Steve Best) [1751815]
  - [netdrv] net/ibmvnic: free reset work of removed device from queue (Steve Best) [1751815]
  - [netdrv] ibmvnic: Do not process reset during or after device removal (Steve Best) [1751815]
  - [netdrv] ice: add missing ndo_size (Jonathan Toppins) [1752586]
  - [kernel] tracing: Fix wraparound problems in "uptime" trace clock (Aristeu Rozanski) [1507122]
  - [netdrv] e1000e: add workaround for possible stalled packet (Ken Cox) [1711234 1668912]
  - [scsi] virtio_scsi: support multi hw queue of blk-mq (Ming Lei) [1752305]
  - [drm] drm/edid: Fix a missing-check bug in drm_load_edid_firmware() (Lyude Paul) [1732709] {CVE-2019-12382}
  - [netdrv] e1000e: PCIm function state support (Ken Cox) [1689436]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1098.el7]
changelog:
  - [powerpc] powerpc/rtas: use device model APIs and serialization during LPM (Steve Best) [1742885]
  - [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1750202]
  - [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1750202]
  - [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1750202]
  - [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1750202]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1099.el7]
changelog:
  - [char] tpm: tpm_try_transmit() refactor error flow (Jerry Snitselaar) [1731225]
  - [powerpc] powerpc/pseries: correctly track irq state in default idle (Steve Best) [1751970]
  - [md] raid5 improve too many read errors msg by adding limits (Nigel Croxon) [1700665]
  - [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1750856]
  - [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1750819]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1100.el7]
changelog:
  - [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746798] {CVE-2019-14821}
  - [iommu] iommu/amd: Flush old domains in kdump kernel (Jerry Snitselaar) [1738735]
  - [iommu] Revert "iommu/amd: Suppress IO_PAGE_FAULTs in kdump kernel" (Jerry Snitselaar) [1738735]
  - [tools] perf script: Fix crash with printing mixed trace point and other events (Michael Petlan) [1741743]
  - [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1708465]
  - [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1708465]
  - [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1708465]
  - [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1708465]
  - [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1708465]
  - [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1708465]
  - [hv] hv: vmbus: Offload the handling of channels to two workqueues (Mohammed Gamal) [1747352]
  - [hv] hv: vmbus: Use cpumask_var_t for on-stack cpu mask (Mohammed Gamal) [1747352]
  - [hv] hv: vmbus: Fix the offer_in_progress in vmbus_process_offer() (Mohammed Gamal) [1747352]
  - [drm] drm/nouveau/kms/nv50-: Don't create MSTMs for eDP connectors (Lyude Paul) [1728383]
  - [x86] x86/acpi: Prevent LAPIC id 0xff from being accounted (David Arcari) [1755008]
  - [x86] perf/x86/intel: Fix spurious NMI on fixed counter (Michael Petlan) [1755134]
  - [x86] perf/x86/intel: Fix race in intel_pmu_disable_event() (Michael Petlan) [1755134]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1101.el7]
changelog:
  - [tools] tools/power turbostat: fix buffer overrun (Prarit Bhargava) [1710537]
  - [tools] perf top: Fix global-buffer-overflow issue (Michael Petlan) [1757325]
  - [tools] perf top: Always sample time to satisfy needs of use of ordered queuing (Michael Petlan) [1757325]
  - [infiniband] IB/mad: Fix use-after-free in ib mad completion handling (Kamal Heib) [1748453]
  - [nvme] nvme: introduce NVME_QUIRK_IGNORE_DEV_SUBNQN (David Milburn) [1754940]
  - [netdrv] i40e: Add support for X710 device (Stefan Assmann) [1711843]
  - [watchdog] watchdog: iTCO: Add support for Cannon Lake PCH iTCO (Alexander Beregalov) [1711811]
  - [i2c] i2c: i801: Use iTCO version 6 in Cannon Lake PCH and beyond (Alexander Beregalov) [1711811]
  - [i2c] i2c: i801: Restore the presence state of P2SB PCI device after reading BAR (Alexander Beregalov) [1711811]
  - [tools] perf header: Assign proper ff->ph in perf_event__synthesize_features() (Michael Petlan) [1705531]
  - [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1752136]
  - [pci] PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it (Mohammed Gamal) [1737567]
  - [pci] hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1634251]
  - [pci] hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1634251]
  - [pci] hv: Serialize the present and eject work items (Mohammed Gamal) [1634251]
  - [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1668767]
  - [kernel] kernel/panic.c: Fix TAINT_UNSAFE_SMP comment (Prarit Bhargava) [1731549]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1102.el7]
changelog:
  - [netdrv] net/mlx5e: Fix number of vports for ingress ACL configuration (Alaa Hleihel) [1758857]
  - [netdrv] net/mlx5: E-Switch, Split VF and special vports for offloads mode (Alaa Hleihel) [1758857]
  - [rtc] rtc: opal: Fix OPAL RTC driver OPAL_BUSY loops (Alexey Klimov) [1752968]
  - [powerpc] powerpc/powernv: define a standard delay for OPAL_BUSY type retry loops (Alexey Klimov) [1752968]
  - [rtc] rtc-opal: Fix handling of firmware error codes, prevent busy loops (Alexey Klimov) [1752968]
  - [powerpc] powerpc/powernv: Only delay opal_rtc_read() retry when necessary (Alexey Klimov) [1752968]
  - [scsi] lpfc: Fix wrong lockdep assertion (Dick Kennedy) [1752570]
  - [netdrv] iavf: fix MAC address setting for VFs when filter is rejected (Stefan Assmann) [1698052]
  - [netdrv] iavf: allow permanent MAC address to change (Stefan Assmann) [1698052]
  - [x86] x86/stacktrace: Prevent access_ok() warnings in arch_stack_walk_user() (Jerome Marchand) [1757641]
  - [netdrv] i40e: clear __I40E_VIRTCHNL_OP_PENDING on invalid min Tx rate (Stefan Assmann) [1746636]
  - [kernel] timer: don't let base->timer_jiffies go backwards (Jan Stancek) [1752885]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1103.el7]
changelog:
  - [fs] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Bill O'Donnell) [1751468]
  - [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1759117]
  - [fs] binfmt_elf: switch to new creds when switching to new mm (Vladis Dronov) [1700360] {CVE-2019-11190}
  - [fs] revert "[fs] nfsd: Implement the COPY call" ("J. Bruce Fields") [1688067]
  - [fs] fs: do not fall back to splice in copy_file_range ("J. Bruce Fields") [1688067]
  - [fs] proc/sysctl: don't return ENOMEM on lookup when a table is unregistering (Carlos Maiolino) [1752099]
  - [fs] proc: Fix proc_sys_prune_dcache to hold a sb reference (Carlos Maiolino) [1752099]
  - [fs] proc/sysctl: Don't grab i_lock under sysctl_lock. (Carlos Maiolino) [1752099]
  - [fs] proc/sysctl: prune stale dentries during unregistering (Carlos Maiolino) [1752099]
  - [kvm] kvm: x86: always expose VIRT_SSBD to guests (Eduardo Habkost) [1744281]
  - [kvm] kvm: x86: fix reporting of AMD speculation bug CPUID leaf (Eduardo Habkost) [1744281]
  - [md] dm crypt: don't decrease device limits (Mike Snitzer) [1656103]
  - [netdrv] cxgb4: RHEL-only disable device dump (Jonathan Toppins) [1708513]
  - [s390] s390/cmf: set_schib_wait add timeout (Philipp Rudo) [1759508]
  - [s390] s390: add support for IBM z15 machines (Philipp Rudo) [1758627]
  - [tools] perf callchain: Honour the ordering of PERF_CONTEXT_{USER, KERNEL, etc} (Michael Petlan) [1758046]
  - [tools] perf callchain: Stop validating callchains by the max_stack sysctl (Michael Petlan) [1758046]
  - [tools] perf tools: Separate accounting of contexts and real addresses in a stack trace (Michael Petlan) [1758046]
  - [netdrv] net/ibmvnic: prevent more than one thread from running in reset (Steve Best) [1759809]
  - [netdrv] net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (Steve Best) [1759809]
  - [netdrv] ibmvnic: Warn unknown speed message only when carrier is present (Steve Best) [1759809]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1104.el7]
changelog:
  - [md] raid5: don't set STRIPE_HANDLE to stripe which is in batch list (Nigel Croxon) [1631765 1750287]
  - [kernel] alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (Vladis Dronov) [1760639]
  - [kernel] alarmtimer: Remove unused but set variable (Vladis Dronov) [1760639]
  - [x86] efi/x86: do not clean dummy variable in kexec path (Bhupesh Sharma) [1707669]
  - [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1756843]
  - [x86] perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp (David Arcari) [1730884]
  - [infiniband] RDMA/bnxt_re: Fix stack-out-of-bounds in bnxt_qplib_rcfw_send_message (Selvin Xavier) [1629037]
  - [infiniband] RDMA/bnxt_re: Increase depth of control path command queue (Selvin Xavier) [1629037]
  - [x86] x86/efi/pti: In __load_cr3(), EFI PGD has no shadow (Lenny Szubowicz) [1750767]
  - [char] hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable (Prarit Bhargava) [1660800]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1105.el7]
changelog:
  - [nvme] nvme: Treat discovery subsystems as unique subsystems (Ewan Milne) [1731579]
  - [scsi] scsi: core: Log SCSI command age with errors (Ewan Milne) [1751716]
  - [security] selinux: fix context string corruption in convert_context() (Ondrej Mosnacek) [1759803]
  - [usb] xhci: Prevent deadlock when xhci adapter breaks during init (Torez Smith) [1710090]
  - [scsi] scsi: core: add new RDAC LENOVO/DE_Series device (Ewan Milne) [1699439]
  - [wireless] Correct strange error in Makefiles for building modules in separate directories (Neil Horman) [1753927]
  - [md] dm snapshot: rework COW throttling to fix deadlock (Mike Snitzer) [1758603]
  - [md] dm snapshot: introduce account_start_copy() and account_end_copy() (Mike Snitzer) [1758603]
  - [drm] i915: Stop reconfiguring our shmemfs mountpoint (Vladis Dronov) [1759980]
  - [kernel] perf/core: Fix perf_event_open() vs. execve() race (Jiri Olsa) [1701620] {CVE-2019-3901}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1106.el7]
changelog:
  - [net] sysfs: Fix mem leak in netdev_register_kobject (Stefano Brivio) [1752690] {CVE-2019-15916}
  - [fs] revert "[fs] cifs: use cifsInodeInfo->open_file_lock while iterating to avoid a panic (Dave Wysochanski) [1757872]
  - [fs] revert "[fs] cifs: add spinlock for the openFileList to cifsInodeInfo (Dave Wysochanski) [1757872]
  - [fs] revert "[fs] cifs: add more spinlocks to pretect against races" (Dave Wysochanski) [1757872]
  - [fs] fix inode leaks on d_splice_alias() failure exits (Miklos Szeredi) [1749390]
  - [mm] percpu: remove spurious lock dependency between percpu and sched (Vladis Dronov) [1744633]
  - [mm] percpu: stop printing kernel addresses (Vladis Dronov) [1744633]
  - [mm] percpu: use chunk scan_hint to skip some scanning (Vladis Dronov) [1744633]
  - [mm] percpu: convert chunk hints to be based on pcpu_block_md (Vladis Dronov) [1744633]
  - [mm] percpu: make pcpu_block_md generic (Vladis Dronov) [1744633]
  - [mm] percpu: use block scan_hint to only scan forward (Vladis Dronov) [1744633]
  - [mm] percpu: remember largest area skipped during allocation (Vladis Dronov) [1744633]
  - [mm] percpu: add block level scan_hint (Vladis Dronov) [1744633]
  - [mm] percpu: set PCPU_BITMAP_BLOCK_SIZE to PAGE_SIZE (Vladis Dronov) [1744633]
  - [mm] percpu: relegate chunks unusable when failing small allocations (Vladis Dronov) [1744633]
  - [mm] percpu: manage chunks based on contig_bits instead of free_bytes (Vladis Dronov) [1744633]
  - [mm] percpu: introduce helper to determine if two regions overlap (Vladis Dronov) [1744633]
  - [mm] percpu: do not search past bitmap when allocating an area (Vladis Dronov) [1744633]
  - [mm] percpu: update free path with correct new free region (Vladis Dronov) [1744633]
  - [mm] mm/percpu: add checks for the return value of memblock_alloc*() (Vladis Dronov) [1744633]
  - [mm] percpu: km: no need to consider pcpu_group_offsets (Vladis Dronov) [1744633]
  - [mm] percpu: use nr_groups as check condition (Vladis Dronov) [1744633]
  - [mm] percpu: stop leaking bitmap metadata blocks (Vladis Dronov) [1744633]
  - [fs] /proc/meminfo: add percpu populated pages count (Vladis Dronov) [1744633]
  - [mm] mm: Allow to kill tasks doing pcpu_alloc() and waiting for pcpu_balance_workfn() (Vladis Dronov) [1744633]
  - [mm] percpu: include linux/sched.h for cond_resched() (Vladis Dronov) [1744633]
  - [mm] percpu: add a schedule point in pcpu_balance_workfn() (Vladis Dronov) [1744633]
  - [mm] percpu: fix iteration to prevent skipping over block (Vladis Dronov) [1744633]
  - [mm] percpu: fix starting offset for chunk statistics traversal (Vladis Dronov) [1744633]
  - [mm] percpu: update header to contain bitmap allocator explanation (Vladis Dronov) [1744633]
  - [mm] percpu: update pcpu_find_block_fit to use an iterator (Vladis Dronov) [1744633]
  - [mm] percpu: use metadata blocks to update the chunk contig hint (Vladis Dronov) [1744633]
  - [mm] percpu: update free path to take advantage of contig hints (Vladis Dronov) [1744633]
  - [mm] percpu: update alloc path to only scan if contig hints are broken (Vladis Dronov) [1744633]
  - [mm] percpu: keep track of the best offset for contig hints (Vladis Dronov) [1744633]
  - [mm] percpu: skip chunks if the alloc does not fit in the contig hint (Vladis Dronov) [1744633]
  - [mm] percpu: add first_bit to keep track of the first free in the bitmap (Vladis Dronov) [1744633]
  - [mm] percpu: introduce bitmap metadata blocks (Vladis Dronov) [1744633]
  - [mm] percpu: replace area map allocator with bitmap (Vladis Dronov) [1744633]
  - [mm] percpu: generalize bitmap (un)populated iterators (Vladis Dronov) [1744633]
  - [mm] percpu: increase minimum percpu allocation size and align first regions (Vladis Dronov) [1744633]
  - [mm] percpu: introduce nr_empty_pop_pages to help empty page accounting (Vladis Dronov) [1744633]
  - [mm] percpu: change the number of pages marked in the first_chunk pop bitmap (Vladis Dronov) [1744633]
  - [mm] percpu: combine percpu address checks (Vladis Dronov) [1744633]
  - [mm] percpu: modify base_addr to be region specific (Vladis Dronov) [1744633]
  - [mm] percpu: setup_first_chunk rename schunk/dchunk to chunk (Vladis Dronov) [1744633]
  - [mm] percpu: end chunk area maps page aligned for the populated bitmap (Vladis Dronov) [1744633]
  - [mm] percpu: unify allocation of schunk and dchunk (Vladis Dronov) [1744633]
  - [mm] percpu: setup_first_chunk remove dyn_size and consolidate logic (Vladis Dronov) [1744633]
  - [mm] percpu: remove has_reserved from pcpu_chunk (Vladis Dronov) [1744633]
  - [mm] percpu: introduce start_offset to pcpu_chunk (Vladis Dronov) [1744633]
  - [mm] percpu: setup_first_chunk enforce dynamic region must exist (Vladis Dronov) [1744633]
  - [mm] percpu: update the header comment and pcpu_build_alloc_info comments (Vladis Dronov) [1744633]
  - [mm] percpu: expose pcpu_nr_empty_pop_pages in pcpu_stats (Vladis Dronov) [1744633]
  - [mm] percpu: change the format for percpu_stats output (Vladis Dronov) [1744633]
  - [mm] percpu: pcpu-stats change void buffer to int buffer (Vladis Dronov) [1744633]
  - [mm] percpu: fix static checker warnings in pcpu_destroy_chunk (Vladis Dronov) [1744633]
  - [mm] percpu: fix early calls for spinlock in pcpu_stats (Vladis Dronov) [1744633]
  - [mm] percpu: resolve err may not be initialized in pcpu_alloc (Vladis Dronov) [1744633]
  - [mm] percpu: add tracepoint support for percpu memory (Vladis Dronov) [1744633]
  - [mm] percpu: expose statistics about percpu memory via debugfs (Vladis Dronov) [1744633]
  - [mm] percpu: migrate percpu data structures to internal header (Vladis Dronov) [1744633]
  - [mm] percpu: add missing lockdep_assert_held to func pcpu_free_area (Vladis Dronov) [1744633]
  - [mm] percpu: ensure the requested alignment is power of two (Vladis Dronov) [1744633]
  - [mm] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1744633]
  - [mm] mm/percpu: use offset_in_page macro (Vladis Dronov) [1744633]
  - [mm] percpu: clean up of schunk->mapassignment in pcpu_setup_first_chunk (Vladis Dronov) [1744633]
  - [mm] mm/percpu.c: fix panic triggered by BUG_ON() falsely (Vladis Dronov) [1744633]
  - [mm] mm/percpu.c: fix potential memory leakage for pcpu_embed_first_chunk() (Vladis Dronov) [1744633]
  - [mm] mm/percpu.c: correct max_distance calculation for pcpu_embed_first_chunk() (Vladis Dronov) [1744633]
  - [mm] mm: percpu: use pr_fmt to prefix output (Vladis Dronov) [1744633]
  - [mm] mm: convert printk(KERN_<LEVEL> to pr_<level> (Vladis Dronov) [1744633]
  - [mm] mm: coalesce split strings (Vladis Dronov) [1744633]
  - [mm] mm: convert pr_warning to pr_warn (Vladis Dronov) [1744633]
  - [mm] percpu: use *pbto print bitmaps including cpumasks and nodemasks (Vladis Dronov) [1744633]
  - [mm] percpu: off by one in BUG_ON() (Vladis Dronov) [1744633]
  - [mm] mm/percpu.c: use memblock apis for early memory allocations (Vladis Dronov) [1744633]
  - [mm] percpu: use VMALLOC_TOTAL instead of VMALLOC_END - VMALLOC_START (Vladis Dronov) [1744633]
  - [mm] percpu: fix bootmem error handling in pcpu_page_first_chunk() (Vladis Dronov) [1744633]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1107.el7]
changelog:
  - [x86] x86/kdump: Reserve extra memory when SME or SEV is active (Kairui Song) [1724887]
  - [block] block: fix blk_recount_segments (Ming Lei) [1762459]
  - [nvme] nvme-pci: Fix a race in controller removal (Gopal Tiwari) [1761998]
  - [char] hpet: Fix output of hpet_mmap kernel parameter (Prarit Bhargava) [1764790]
  - [tools] perf tools: Apply new CPU topology sysfs attributes (Jiri Olsa) [1640900]
  - [tools] perf header: Rename "sibling cores" to "sibling sockets" (Jiri Olsa) [1640900]
  - [tools] perf stat: Support per-die aggregation (Jiri Olsa) [1640900]
  - [tools] perf stat: Support 'percore' event qualifier (Jiri Olsa) [1640900]
  - [tools] perf stat: Factor out aggregate counts printing (Jiri Olsa) [1640900]
  - [tools] perf tools: Add a 'percore' event qualifier (Jiri Olsa) [1640900]
  - [tools] perf header: Add die information in CPU topology (Jiri Olsa) [1640900]
  - [tools] perf cpumap: Retrieve die id information (Jiri Olsa) [1640900]
  - [tools] perf tools: Use sysfs__mountpoint() when reading cpu topology (Jiri Olsa) [1640900]
  - [tools] perf tools: Add numa_topology object (Jiri Olsa) [1640900]
  - [tools] perf header: Fix wrong node write in NUMA_TOPOLOGY feature (Jiri Olsa) [1640900]
  - [tools] perf tools: Add cpu_topology object (Jiri Olsa) [1640900]
  - [tools] perf header: Remove unused 'cpu_nr' field from 'struct cpu_topo' (Jiri Olsa) [1640900]
  - [acpi] ACPICA: Increase total number of possible Owner IDs (Frank Ramsay) [1756339]
  - [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1764567]
  - [netdrv] mark the intel igc driver as tech preview (David Arcari) [1721615]
  - [netdrv] igc: Clean up unused shadow_vfta pointer (David Arcari) [1721615]
  - [netdrv] igc: Add Rx checksum support (David Arcari) [1721615]
  - [netdrv] igc: Add set_rx_mode support (David Arcari) [1721615]
  - [netdrv] igc: Add SCTP CRC checksumming functionality (David Arcari) [1721615]
  - [netdrv] igc: Add tx_csum offload functionality (David Arcari) [1721615]
  - [netdrv] igc: Remove unneeded PCI bus defines (David Arcari) [1721615]
  - [netdrv] igc: Add NVM checksum validation (David Arcari) [1721615]
  - [netdrv] igc: Remove useless forward declaration (David Arcari) [1721615]
  - [netdrv] ethernet: Delete unnecessary checks before the macro call "dev_kfree_skb" (David Arcari) [1721615]
  - [netdrv] igc: Add more SKUs for i225 device (David Arcari) [1721615]
  - [netdrv] igc: Update the MAC reset flow (David Arcari) [1721615]
  - [netdrv] igc: Remove the unused field from a device specification structure (David Arcari) [1721615]
  - [netdrv] igc: Remove the polarity field from a PHY information structure (David Arcari) [1721615]
  - [netdrv] igc: Prefer pcie_capability_read_word() (David Arcari) [1721615]
  - [netdrv] igc: Cleanup the redundant code (David Arcari) [1721615]
  - [netdrv] igc: Add flow control support (David Arcari) [1721615]
  - [netdrv] igc: Remove the obsolete workaround (David Arcari) [1721615]
  - [netdrv] igc: Clean up unused pointers (David Arcari) [1721615]
  - [netdrv] igc: Fix double definitions (David Arcari) [1721615]
  - [netdrv] igb/igc: warn when fatal read failure happens (David Arcari) [1721615]
  - [netdrv] Revert "mark the intel igc driver as tech preview" (David Arcari) [1721615]
  - [md] dm: Use kzalloc for all structs with embedded biosets/mempools (Mike Snitzer) [1766389]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1108.el7]
changelog:
  - [powerpc] powerpc/pseries: Remove confusing warning message (Gustavo Duarte) [1748306]
  - [powerpc] powerpc/pseries: Call H_BLOCK_REMOVE when supported (Gustavo Duarte) [1748306]
  - [powerpc] powerpc/pseries: Read TLB Block Invalidate Characteristics (Gustavo Duarte) [1748306]
  - [scsi] hpsa: update driver version (Joseph Szczypek) [1761978]
  - [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1761978]
  - [tty] TTY: serial_core, add ->install (Kenneth Yin) [1443152]
  - [scsi] scsi: core: Avoid that SCSI device removal through sysfs triggers a deadlock (Ewan Milne) [1734685]
  - [fs] scsi: sysfs: Introduce sysfs_{un, }break_active_protection() (Ewan Milne) [1734685]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1109.el7]
changelog:
  - [netdrv] net/mlx5e: Initialize on stack link modes bitmap (Alaa Hleihel) [1764272]
  - [netdrv] net/mlx5e: Fix ethtool self test: link speed (Alaa Hleihel) [1764272]
  - [netdrv] net/mlx5e: ethtool, Avoid setting speed to 56GBASE when autoneg off (Alaa Hleihel) [1764272]
  - [fs] xfs: end sync buffer I/O properly on shutdown error (Brian Foster) [1750602]
  - [fs] xfs: kill __xfs_buf_submit_common() (Brian Foster) [1750602]
  - [fs] xfs: combinesync buffer submission apis (Brian Foster) [1750602]
  - [fs] xfs: lobotomise xfs_trans_read_buf_map() (Brian Foster) [1750602]
  - [fs] cifs: Fix use after free of file info structures (Dave Wysochanski) [1757872]
  - [fs] vfs: Fix EOVERFLOW testing in put_compat_statfs64 (Eric Sandeen) [1758001]
  - [mm] mm, compaction: avoid isolating pinned pages (Rafael Aquini) [1344862]
  - [scsi] scsi: smartpqi: change TMF timeout from 60 to 30 seconds (Don Brace) [1709620]
  - [scsi] scsi: smartpqi: fix LUN reset when fw bkgnd thread is hung (Don Brace) [1709620]
  - [scsi] scsi: smartpqi: add inquiry timeouts (Don Brace) [1709620]
  - [scsi] scsi: smartpqi: increase LUN reset timeout (Don Brace) [1709620]
  - [firmware] x86, efi: never relocate kernel below lowest acceptable address (Kairui Song) [1732737]
  - [powerpc] powerpc: dump kernel log before carrying out fadump or kdump (Desnes Augusto Nunes do Rosario) [1750250]
  - [s390] s390/cpumsf: Check for CPU Measurement sampling (Philipp Rudo) [1765124]
  - [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1765123]
  - [mm] s390/mm: Fix swiotlb for protected virtualization (Philipp Rudo) [1765122]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1110.el7]
changelog:
  - [nvme] nvme-pci: Fix controller freeze wait disabling (David Milburn) [1766279]
  - [net] mac80211: fix kfree() on stack memory in ieee80211_crypto_aes_gmac_decrypt() (Stanislaw Gruszka) [1764510]
  - [md] dm rq: fix handling underlying queue busy (Ming Lei) [1767482]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1111.el7]
changelog:
  - [md] md: support for queue flag QUEUE_FLAG_NO_SG_MERGE (Nigel Croxon) [1767472]
  - [net] ipv4: Return -ENETUNREACH if we can't create route but saddr is valid (Stefano Brivio) [1633140]
  - [net] ipv6: Rewind hlist offset on interrupted /proc/net/if_inet6 read (Stefano Brivio) [1753480]
  - [net] revert "[net] ipv6: Display all addresses in output of /proc/net/if_inet6" (Stefano Brivio) [1753480]
  - [net] sock: fix lockdep annotation in release_sock (Paolo Abeni) [1753150]
  - [mm] mm-vmstat-reduce-zone-lock-holding-time-by-proc-pagetypeinfo-fix (Waiman Long) [1757943]
  - [mm] mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo (Waiman Long) [1757943]
  - [mm] mm, vmstat: hide /proc/pagetypeinfo from normal users (Waiman Long) [1757943]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1112.el7]
changelog:
  - [scsi] scsi: mpt3sas: change allocation option (Tomas Henzl) [1763796]
  - [md] md: improve handling of bio with REQ_PREFLUSH in md_flush_request() (Xiao Ni) [1752061]
  - [kvm] KVM: x86: switch KVMCLOCK base to monotonic raw clock (Marcelo Tosatti) [1760668]
  - [net] mac80211: Reject malformed SSID elements (Stanislaw Gruszka) [1748266]
  - [net] cfg80211: wext: avoid copying malformed SSIDs (Stanislaw Gruszka) [1748266]
  - [wireless] iwlwifi: pcie: change qu with jf devices to use qu configuration (Stanislaw Gruszka) [1748266]
  - [net] mac80211: fix txq null pointer dereference (Stanislaw Gruszka) [1748266]
  - [net] nl80211: fix null pointer dereference (Stanislaw Gruszka) [1748266]
  - [net] cfg80211: initialize on-stack chandefs (Stanislaw Gruszka) [1748266]
  - [net] cfg80211: validate SSID/MBSSID element ordering assumption (Stanislaw Gruszka) [1748266]
  - [net] nl80211: validate beacon head (Stanislaw Gruszka) [1748266]
  - [net] mac80211: keep BHs disabled while calling drv_tx_wake_queue() (Stanislaw Gruszka) [1748266]
  - [net] cfg80211: Purge frame registrations on iftype change (Stanislaw Gruszka) [1748266]
  - [wireless] rtw88: pci: Use DMA sync instead of remapping in RX ISR (Stanislaw Gruszka) [1748266]
  - [wireless] rtw88: pci: Rearrange the memory usage for skb in RX ISR (Stanislaw Gruszka) [1748266]
  - [wireless] iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36 (Stanislaw Gruszka) [1748266]
  - [net] nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds (Stanislaw Gruszka) [1748266]
  - [net] mac80211: Do not send Layer 2 Update frame before authorization (Stanislaw Gruszka) [1748266]
  - [wireless] iwlwifi: assign directly to iwl_trans->cfg in QuZ detection (Stanislaw Gruszka) [1748266]
  - [wireless] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Stanislaw Gruszka) [1748266]
  - [net] mac80211: Correctly set noencrypt for PAE frames (Stanislaw Gruszka) [1748266]
  - [net] mac80211: Don't memset RXCB prior to PAE intercept (Stanislaw Gruszka) [1748266]
  - [wireless] iwlwifi: pcie: handle switching killer Qu B0 NICs to C0 (Stanislaw Gruszka) [1748266]
  - [net] Revert "cfg80211: fix processing world regdomain when non modular" (Stanislaw Gruszka) [1748266]
  - [net] mac80211: fix possible sta leak (Stanislaw Gruszka) [1748266]
  - [wireless] iwlwifi: pcie: fix recognition of QuZ devices (Stanislaw Gruszka) [1748266]
  - [wireless] iwlwifi: pcie: don't switch FW to qnj when ax201 is detected (Stanislaw Gruszka) [1748266]
  - [wireless] iwlwifi: pcie: fix the byte count table format for 22560 devices (Stanislaw Gruszka) [1748266]
  - [wireless] iwlwifi: mvm: Allow multicast data frames only when associated (Stanislaw Gruszka) [1748266]
  - [netdrv] i40e: initialize ITRN registers with correct values (Stefan Assmann) [1630307]
  - [net] tuntap: synchronize through tfiles array instead of tun->numqueues (Eugenio Perez) [1713616]
  - [net] tuntap: fix use after free during release (Eugenio Perez) [1713616]
  - [net] tun: fix use after free for ptr_array (Eugenio Perez) [1713616]
  - [net] tun/tap: sanitize TUNSETSNDBUF input (Eugenio Perez) [1713616]
  - [block] block: Don't merge requests if integrity flags differ (Ming Lei) [1767605]
  - [block] blk-mq: insert rq with DONTPREP to hctx dispatch list when requeue (Ming Lei) [1767605]
  - [x86] x86/atomic: Fix smp_mb__{before,after}_atomic() (Prarit Bhargava) [1769569]
  - [netdrv] qede: fix NULL pointer deref in __qede_remove() (Manish Chopra) [1766574]
  - [fs] xfs: only trace buffer items if they exist (Brian Foster) [1768722]
  - [nvme] nvme: make fabrics command run on a separate request queue (David Milburn) [1769900]
  - [nvme] nvme: Restart request timers in resetting state (David Milburn) [1769900]
  - [nvme] nvme-rdma: fix possible use-after-free in connect timeout (David Milburn) [1769900]
  - [netdrv] i40e: enable X710 support (Stefan Assmann) [1764987]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1113.el7]
changelog:
  - [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756883] {CVE-2019-0155}
  - [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756816] {CVE-2019-0154}
  - [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756816] {CVE-2019-0154}
  - [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756883] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756883] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756883] {CVE-2019-0155}
  - [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756883] {CVE-2019-0155}
  - [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756883] {CVE-2019-0155}
  - [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756883] {CVE-2019-0155}
  - [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756883] {CVE-2019-0155}
  - [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756883] {CVE-2019-0155}
  - [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756883] {CVE-2019-0155}
  - [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756883] {CVE-2019-0155}
  - [fs] Fix error code in nfs_lookup_verify_inode() (Benjamin Coddington) [1761957]
  - [scsi] scsi: qla2xxx: Initialized mailbox to prevent driver load failure (Himanshu Madhani) [1770307]
  - [powerpc] powerpc/ptrace: run seccomp after ptrace (Vladis Dronov) [1760294]
  - [s390] s390/ptrace: run seccomp after ptrace (Vladis Dronov) [1760294]
  - [s390] s390/seccomp: fix error return for filtered system calls (Vladis Dronov) [1760294]
  - [netdrv] bnxt_en: flow_offload: offload tunnel decap rules via indirect callbacks (Davide Caratti) [1717422]
  - [x86] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1771849]
  - [x86] kvm: x86: skip populating logical dest map if apic is not sw enabled (Bandan Das) [1738496]
  - [x86] kvm: x86: remove unnecessary recalculate_apic_map (Bandan Das) [1738496]
  - [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1750577]
  - [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1750577]
  - [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1750577]
  - [scsi] scsi: bnx2fc: remove set but not used variable 'fh' (Nilesh Javali) [1750577]
  - [scsi] scsi: qedi: Remove WARN_ON from clear task context (Nilesh Javali) [1461697]
  - [scsi] scsi: qedi: Remove WARN_ON for untracked cleanup (Nilesh Javali) [1461697]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1114.el7]
changelog:
  - [kernel] sched/numa: Fix a possible divide-by-zero (Vladis Dronov) [1765959]
  - [x86] x86/boot/64: Round memory hole size up to next PMD page (Frank Ramsay) [1773762]
  - [x86] x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area (Frank Ramsay) [1773762]
  - [kernel] seccomp: Fix tracer exit notifications during fatal signals (Vladis Dronov) [1770484]
  - [x86] x86/ptrace: run seccomp after ptrace (Vladis Dronov) [1770484]
  - [fs] cifs: Fix retry mid list corruption on reconnects (Dave Wysochanski) [1614201]
  - [fs] cifs: add a warning if we try to to dequeue a deleted mid (Dave Wysochanski) [1614201]
  - [fs] cifs: Fix use after free of a mid_q_entry (Dave Wysochanski) [1614201]
  - [fs] Don't log confusing message on reconnect by default (Dave Wysochanski) [1614201]
  - [fs] ceph: mark Fw cap dirty after splice write (Zheng Yan) [1710751]
  - [fs] cifs: Force reval dentry if LOOKUP_REVAL flag is set (Dave Wysochanski) [1771657]
  - [fs] cifs: Force revalidate inode when dentry is stale (Dave Wysochanski) [1771657]
  - [fs] cifs: Gracefully handle QueryInfo errors during open (Dave Wysochanski) [1771657]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1115.el7]
changelog:
  - [scsi] Fix stack tarce when lpfc driver is unloaded (Dick Kennedy) [1774744]
  - [scsi] qla2xxx: Update driver version (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Fix partial flash write of MBI (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Fix device connect issues in P2P configuration (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Fix a NULL pointer dereference (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Fix double scsi_done for abort path (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp reference count (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Fix driver unload hang (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Fix SRB leak on switch command timeout (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Fix premature timer expiration (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Uninline qla2x00_init_timer() (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Do command completion on abort timeout (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Inline the qla2x00_fcport_event_handler() function (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Dual FCP-NVMe target port support (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Use tabs instead of spaces for indentation (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Fix N2N link up fail (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Fix N2N link reset (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Fix a race condition between aborting and completing a SCSI command (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Introduce the function qla2xxx_init_sp() (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Really fix qla2xxx_eh_abort() (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Make qla24xx_async_abort_cmd() static (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Reduce the number of forward declarations (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Remove a superfluous forward declaration (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Fix stuck login session (Himanshu Madhani) [1731581]
  - [scsi] scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Himanshu Madhani) [1731581]
  - [media] cx24116: fix a buffer overflow when checking userspace params (Jarod Wilson) [1737279] {CVE-2015-9289}
  - [scsi] qedf: Initialize rport while creation of vport (Nilesh Javali) [1760746]
  - [fs] Fix the locking in dcache_readdir() and friends (Ondrej Mosnacek) [1510603]
  - [fs] much milder d_walk() race (Ondrej Mosnacek) [1510603]
  - [fs] libfs.c: new helper - next_positive() (Ondrej Mosnacek) [1510603]
  - [fs] dcache_{readdir, dir_lseek}(): don't bother with nested ->d_lock (Ondrej Mosnacek) [1510603]
  - [security] selinuxfs: don't open-code d_genocide() (Ondrej Mosnacek) [1510603]
  - [fs] fs/dcache: Enable automatic reclaim of excess negative dentries (Waiman Long) [1489573]
  - [fs] fs/dcache: Add sysctl parameter negative-dentry-limit as a soft limit on negative dentries (Waiman Long) [1489573]
  - [fs] fs/dcache: Move percpu count updates out of dcache_lru_lock (Waiman Long) [1489573]
  - [fs] fs/dcache: Don't set DCACHE_REFERENCED on dentries when first put into LRU (Waiman Long) [1489573]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1116.el7]
changelog:
  - [netdrv] net/mlx5: Fix auto group size calculation (Alaa Hleihel) [1769309]
  - [mm] x86/io: add interface to reserve io memtype for a resource range. (v1.1) (Dave Airlie) [1739623]
  - [sound] alsa: emux: Fix potential Spectre v1 vulnerabilities (Jaroslav Kysela) [1672561]
  - [s390] s390/smt: Fix s390 SMT reporting (Josh Poimboeuf) [1764184]
  - [mm] mm: swap: clean up swap readahead (Rafael Aquini) [1725396]
  - [mm] mm: do_swap_page: clean up parameter list passing a pointer to struct vm_fault (Rafael Aquini) [1725396]
  - [mm] mm: __handle_mm_fault: introduce explicit barrier after orig_pte dereference (Rafael Aquini) [1725396]
  - [fs] cachefiles: Fix page leak in cachefiles_read_backing_file while vmscan is active (David Howells) [1765975]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1117.el7]
changelog:
  - [x86] x86/speculation: Remove unneeded STIBP code (Waiman Long) [1766540] {CVE-2019-11135}
  - [x86] x86/speculation: Fix redundant MDS mitigation message (Waiman Long) [1766540] {CVE-2019-11135}
  - [documentation] x86/speculation: Fix incorrect MDS/TAA mitigation status (Waiman Long) [1766540] {CVE-2019-11135}
  - [x86] x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs (Waiman Long) [1766540] {CVE-2019-11135}
  - [x86] x86/tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766540] {CVE-2019-11135}
  - [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766540] {CVE-2019-11135}
  - [x86] x86/tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766540] {CVE-2019-11135}
  - [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766540] {CVE-2019-11135}
  - [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766540] {CVE-2019-11135}
  - [x86] x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766540] {CVE-2019-11135}
  - [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766540] {CVE-2019-11135}
  - [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766540] {CVE-2019-11135}
  - [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1690343] {CVE-2018-12207}
  - [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1690343] {CVE-2018-12207}
  - [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1690343] {CVE-2018-12207}
  - [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1690343] {CVE-2018-12207}
  - [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1690343] {CVE-2018-12207}
  - [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1690343] {CVE-2018-12207}
  - [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1690343] {CVE-2018-12207}
  - [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1690343] {CVE-2018-12207}
  - [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1690343] {CVE-2018-12207}
  - [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1690343] {CVE-2018-12207}
  - [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1690343] {CVE-2018-12207}
  - [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1690343] {CVE-2018-12207}
  - [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1690343] {CVE-2018-12207}
  - [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1690343] {CVE-2018-12207}
  - [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1690343] {CVE-2018-12207}
  - [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1690343] {CVE-2018-12207}
  - [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1690343] {CVE-2018-12207}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1118.el7]
changelog:
  - [net] ipv6: support more tunnel interfaces for EUI64 link-local generation (Guillaume Nault) [1770686]
  - [net] netfilter: masquerade: don't flush all conntracks if only one address deleted on device (Patrick Talbert) [1771396]
  - [net] netfilter: conntrack: resched in nf_ct_iterate_cleanup (Patrick Talbert) [1771396]
  - [net] ipvs: fix buffer overflow with sync daemon and service (Davide Caratti) [1725440]
  - [net] ipvs: fix rtnl_lock lockups caused by start_sync_thread (Davide Caratti) [1725440]
  - [net] ipvs: Pass ipvs not net to make_receive_sock (Davide Caratti) [1725440]
  - [net] ipvs: Pass ipvs not net to make_send_sock (Davide Caratti) [1725440]
  - [net] ipvs: Pass ipvs not net to start_sync_thread (Davide Caratti) [1725440]
  - [net] ipvs: Pass ipvs not net to ip_vs_genl_new_daemon (Davide Caratti) [1725440]
  - [net] ipvs: add sync_maxlen parameter for the sync daemon (Davide Caratti) [1725440]
  - [net] ipvs: call rtnl_lock early (Davide Caratti) [1725440]
  - [net] netfilter: don't use mutex_lock_interruptible() (Davide Caratti) [1725440]
  - [net] ipvs: fix memory leak in ip_vs_ctl.c (Davide Caratti) [1725440]
  - [wireless] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Stanislaw Gruszka) [1776206]
  - [scsi] Revert "qla2xxx: Mark NVMe/FC initiator mode usage as technology preview" (Ewan Milne) [1642968]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1119.el7]
changelog:
  - [x86] mm: serialize against gup_fast in pmdp_splitting_flush() (Vitaly Kuznetsov) [1674266]
  - [vhost] vsock: split packets to send using multiple buffers (Stefano Garzarella) [1777349]
  - [md] md/raid10: prevent access of uninitialized resync_pages offset (Nigel Croxon) [1767935]
  - [x86] perf/x86: Modify error message in virtualized environment (Michael Petlan) [1759758]
  - [fs] cifs: Fix infinite loop when using hard mount option (Dave Wysochanski) [1770404]
  - [wireless] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Stanislaw Gruszka) [1776157] {CVE-2019-14901}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1120.el7]
changelog:
  - [md] raid5: need to set STRIPE_HANDLE for batch head (Xiao Ni) [1774330]
  - [drm] drm/radeon: fix si_enable_smc_cac() failed issue (Dave Airlie) [1780026]
  - [block] block: don't change REQ_NR_BITS (Ming Lei) [1779712]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1121.el7]
changelog:
  - [platform] thinkpad_acpi: Don't yell on unsupported brightness interfaces (Lyude Paul) [1305619]
  - [platform] thinkpad-acpi: fix handle locate for video and query of _BCL (Lyude Paul) [1305619]
  - [s390] kernel: avoid cpu yield in SMT environment (Philipp Rudo) [1777876]
  - [scsi] scsi: qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1783016]
  - [scsi] scsi: qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1783016]
  - [scsi] scsi: qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1783016]
  - [powerpc] KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1777710]
  - [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1777710]
  - [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1777710]
  - [net] openvswitch: fix flow command message size (Paolo Abeni) [1776578]
  - [block] brd: re-enable __GFP_HIGHMEM in brd_insert_page() (Jeff Moyer) [1781298]
  - [block] brd: remove dax support (Jeff Moyer) [1781298]
  - [nvme] nvme: don't access the inlined bio after nvmet request is completed (Ming Lei) [1631120]
  - [fs] epoll: fix race between ep_poll_callback(POLLFREE) and ep_free()/ep_remove() (Miklos Szeredi) [1780128]
  - [nvme] nvme: fix NULL pointer dereference in nvme_init_subsystem (Ewan Milne) [1781316]
  - [nvme] nvme-fabrics: allow duplicate connections to the discovery controller (Ewan Milne) [1781316]
  - [scsi] scsi: bnx2fc: timeout calculation invalid for bnx2fc_eh_abort() (Nilesh Javali) [1772966]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1122.el7]
changelog:
  - [drm] drm/amd/powerplay: use hardware fan control if no powerplay fan table (Lyude Paul) [1729286]
  - [nvme] nvme-fc: fix double-free scenarios on hw queues (Ewan Milne) [1731286]
  - [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1779768]
  - [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [x86] kvm: x86: Mark expected switch fall-throughs (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1782927]
  - [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1782927]
  - [s390] s390/qeth: consolidate skb allocation (Philipp Rudo) [1782927]
  - [s390] s390/qeth: clean up page frag creation (Philipp Rudo) [1782927]
  - [netdrv] i40e: Fix for persistent lldp support (Stefan Assmann) [1782689]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1123.el7]
changelog:
  - [mm] mm: prevent get_user_pages() from overflowing page refcount (Aristeu Rozanski) [1705005] {CVE-2019-11487}
  - [mm] mm/hugetlb.c: __get_user_pages ignores certain follow_hugetlb_page errors (Aristeu Rozanski) [1705005] {CVE-2019-11487}
  - [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1771255]
  - [net] netfilter: xt_TRACE: add explicitly nf_logger_find_get call (Phil Sutter) [1774444]
  - [wireless] rtlwifi: Fix potential overflow on P2P code (Josef Oskera) [1775236] {CVE-2019-17666}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1123.1.el7]
changelog:
  - [kernel] tick: broadcast-hrtimer: Fix a race in bc_set_next (Vladis Dronov) [1785680]
  - [mm] mremap: remove LATENCY_LIMIT from mremap to reduce the number of TLB shootdowns (Rafael Aquini) [1781325]
  - [x86] x86/CPU: mask X86_CR4_PCIDE from trampoline_cr4_features in clear_in_cr4() too (Vitaly Kuznetsov) [1785626]
  - [scsi] scsi: ibmvfc: fix WARN_ON during event pool release (Desnes Augusto Nunes do Rosario) [1635959]
  - [dma] dma-mapping: relax warning for per-device areas (Desnes Augusto Nunes do Rosario) [1635959]
  - [kernel] sched: Fix schedule_tail() to disable preemption (Phil Auld) [1771094]
  - [virtio] scsi: virtio: Reduce BUG if total_sg > virtqueue size to WARN (Lu Lu) [1625065]
  - [netdrv] vmxnet3: turn off lro when rxcsum is disabled (Neil Horman) [1775367]
  - [x86] x86: respect memory size limiting via mem= parameter (Joel Savitz) [1750253]
  - [x86] sched/topology: Improve load balancing on AMD EPYC systems (Phil Auld) [1505941]
  - [kernel] sched/topology: Fix off by one bug (Phil Auld) [1505941]
  - [s390] s390/idle: fix cpu idle time calculation (Philipp Rudo) [1777505]
  - [vhost] vhost: Fix incorrect allocation size for vq indirect iovec (Eugenio Perez) [1749726]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1124.1.el7]
changelog:
  - [netdrv] net/ibmvnic: Fix typo in retry check (Steve Best) [1780300]
  - [netdrv] ibmvnic: Serialize device queries (Steve Best) [1780300]
  - [netdrv] ibmvnic: Bound waits for device queries (Steve Best) [1780300]
  - [netdrv] ibmvnic: Terminate waiting device threads after loss of service (Steve Best) [1780300]
  - [netdrv] ibmvnic: Fix completion structure initialization (Steve Best) [1780300]
  - [netdrv] net/ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE (Steve Best) [1780300]
  - [powerpc] powerpc/pseries/mobility: use cond_resched when updating device tree (Desnes Augusto Nunes do Rosario) [1759209]
  - [powerpc] powerpc/rtas: allow rescheduling while changing cpu states (Desnes Augusto Nunes do Rosario) [1759209]
  - [base] of: to support binding numa node to specified device in devicetree (Jeff Moyer) [1791883]
  - [s390] s390: wire up sys_renameat2 (Miklos Szeredi) [1773504]
  - [net] ipvs: do not use random local source address for tunnels (Xin Long) [1786676]
  - [misc] mei: me: add cannon point device ids for 4th device (Jerry Snitselaar) [1745139]
  - [misc] mei: me: add cannon point device ids (Jerry Snitselaar) [1745139]
  - [netdrv] bnxt_en: Support all variants of the 5750X chip family (Jonathan Toppins) [1789345]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1125.1.el7]
changelog:
  - [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1794812]
  - [ptp] ptp: free ptp device pin descriptors properly (Vladis Dronov) [1774657]
  - [ptp] ptp: fix the race between the release of ptp_clock and cdev (Vladis Dronov) [1774657]
  - [ptp] ptp: Fix pass zero to ERR_PTR() in ptp_clock_register (Vladis Dronov) [1774657]
  - [ptp] ptp: create "pins" together with the rest of attributes (Vladis Dronov) [1774657]
  - [ptp] ptp: use is_visible method to hide unused attributes (Vladis Dronov) [1774657]
  - [ptp] ptp: use kcalloc when allocating arrays (Vladis Dronov) [1774657]
  - [ptp] ptp: do not explicitly set drvdata in ptp_clock_register() (Vladis Dronov) [1774657]
  - [ptp] drivers/ptp: Fix kernel memory disclosure (Vladis Dronov) [1774657]
  - [ptp] ptp: Fix resource leak in case of error (Vladis Dronov) [1774657]
  - [netdrv] ptp: drivers: set the number of programmable pins (Vladis Dronov) [1774657]
  - [ptp] ptp: expose the programmable pins via sysfs (Vladis Dronov) [1774657]
  - [documentation] ptp: add the pin GET/SETFUNC ioctls to the testptp program (Vladis Dronov) [1774657]
  - [documentation] ptp: Allow selecting trigger/event index in testptp (Vladis Dronov) [1774657]
  - [documentation] ptp: add the PTP_SYS_OFFSET ioctl to the testptp program (Vladis Dronov) [1774657]
  - [fs] mark struct file that had write access grabbed by open() (Miklos Szeredi) [1679829]
  - [fs] fold __get_file_write_access() into its only caller (Miklos Szeredi) [1679829]
  - [powerpc] get rid of DEBUG_WRITECOUNT (Miklos Szeredi) [1679829]
  - [fs] don't bother with {get, put}_write_access() on non-regular files (Miklos Szeredi) [1679829]
  - [fs] gfs2: Use d_materialise_unique instead of d_splice_alias (2) (Andreas Grunbacher) [1784550]
  - [fs] gfs2: gfs2_create_inode(): don't bother with d_splice_alias() (Andreas Grunbacher) [1784550]
  - [fs] gfs2: bugger off early if O_CREAT open finds a directory (Andreas Grunbacher) [1784550]
  - [fs] libceph: fix PG split vs OSD (re)connect race (Ilya Dryomov) [1785656]
  - [scsi] Fix driver intialization failure for sli4 non nvme (Dick Kennedy) [1783899]
  - [netdrv] hv_netvsc: fix race that may miss tx queue wakeup (Mohammed Gamal) [1781322]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1126.1.el7]
changelog:
  - [kernel] tick-sched: Update nohz load even if tick already stopped (Scott Wood) [1694877]
  - [powerpc] powerpc/pseries: safely roll back failed DLPAR cpu add (Desnes Augusto Nunes do Rosario) [1772210]
  - [powerpc] powerpc/pseries: address checkpatch warnings in dlpar_offline_cpu (Desnes Augusto Nunes do Rosario) [1772210]
  - [fs] fs/proc/proc_sysctl.c: Fix a NULL pointer dereference (Vladis Dronov) [1795522] {CVE-2019-20054}
  - [fs] fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links (Vladis Dronov) [1795522] {CVE-2019-20054}
  - [tools] cpupower: mperf_monitor: Update cpupower to use the RDPRU instruction (Janakarajan Natarajan) [1791014]
  - [tools] cpupower: mperf_monitor: Introduce per_cpu_schedule flag (Janakarajan Natarajan) [1791014]
  - [tools] cpupower: Move needs_root variable into a sub-struct (Janakarajan Natarajan) [1791014]
  - [fs] xfs: properly serialise fallocate against AIO+DIO (Carlos Maiolino) [1786004]
  - [fs] xfs: flush removing page cache in xfs_reflink_remap_prep (Carlos Maiolino) [1786004]
  - [edac] EDAC, skx, i10nm: Fix source ID register offset (Aristeu Rozanski) [1514705]
  - [edac] EDAC, i10nm: Check ECC enabling status per channel (Aristeu Rozanski) [1514705]
  - [edac] EDAC, i10nm: Add Intel additional Ice-Lake support (Aristeu Rozanski) [1514705]
  - [edac] EDAC, skx, i10nm: Make skx_common.c a pure library (Aristeu Rozanski) [1514705]
  - [edac] EDAC, skx_common: Add code to recognise new compound error code (Aristeu Rozanski) [1514705]
  - [edac] EDAC, i10nm: Fix randconfig builds (Aristeu Rozanski) [1514705]
  - [edac] EDAC, i10nm: Add a driver for Intel 10nm server processors (Aristeu Rozanski) [1514705]
  - [edac] EDAC, skx_edac: Delete duplicated code (Aristeu Rozanski) [1514705]
  - [edac] EDAC, skx_common: Separate common code out from skx_edac (Aristeu Rozanski) [1514705]
  - [edac] EDAC, skx: Move debugfs node under EDACs hierarchy (Aristeu Rozanski) [1514705]
  - [edac] EDAC, skx: Prepend hex formatting with 0x (Aristeu Rozanski) [1514705]
  - [edac] EDAC, skx: Fix function calling order in skx_exit() (Aristeu Rozanski) [1514705]
  - [edac] EDAC, skx_edac: Fix logical channel intermediate decoding (Aristeu Rozanski) [1514705]
  - [edac] EDAC, {i7core, sb, skx}_edac: Fix uncorrected error counting (Aristeu Rozanski) [1514705]
  - [edac] EDAC: Correct DIMM capacity unit symbol (Aristeu Rozanski) [1514705]
  - [x86] x86/mce: Add notifier_block forward declaration (Aristeu Rozanski) [1514705]
  - [edac] EDAC: Handle return value of kasprintf() (Aristeu Rozanski) [1514705]
  - [edac] EDAC, i5100: Convert to debugfs wrappers (Aristeu Rozanski) [1514705]
  - [edac] EDAC: Add debugfs wrappers (Aristeu Rozanski) [1514705]
  - [edac] EDAC: Carve out debugfs functionality (Aristeu Rozanski) [1514705]
  - [x86] x86/reboot: Always use NMI fallback when shutdown via reboot vector IPI fails (Grzegorz Halat) [1594848]
  - [scsi] scsi: qla2xxx: Fix unbound NVME response length (Himanshu Madhani) [1788669]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1126.2.el7]
changelog:
  - [kernel] sched: print_rq(): Don't use tasklist_lock (Phil Auld) [1797429]
  - [kernel] sched: s/do_each_thread/for_each_process_thread/ in debug.c (Phil Auld) [1797429]
  - [kernel] sched/rt: Optimize checking group RT scheduler constraints (Phil Auld) [1726700]
  - [iommu] iommu/iova: Fix tracking of recently failed iova address (Jerry Snitselaar) [1759072]
  - [iommu] iommu/iova: Optimise attempts to allocate iova from 32bit address range (Jerry Snitselaar) [1759072]
  - [mm] memcg: Use a more cacheline efficient ways to sum percpu stats (Waiman Long) [1796920]
  - [mm] memcg: Add preemption point in accumulate_memcg_tree() (Waiman Long) [1796920]
  - [mm] memcg: reduce memcg tree traversals for stats collection (Waiman Long) [1796920]
  - [fs] vfs: show_vfsstat: do not ignore errors from show_devname method (Ian Kent) [1751787]
  - [fs] vfs: make mounts and mountstats honor root dir like mountinfo does (Ian Kent) [1751787]
  - [fs] xfs: bulkstat should copy lastip whenever userspace supplies one (Carlos Maiolino) [1786007]
  - [fs] xfs: attach dquots and reserve quota blocks during unwritten conversion (Carlos Maiolino) [1786005]
  - [fs] cifs: Fix NULL pointer dereference of devname (Leif Sahlberg) [1722592]
  - [x86] hyper-v: make hyperv_init() __init (Vitaly Kuznetsov) [1782192]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1127.1.el7]
changelog:
  - [scsi] scsi: fcoe: fix off by one in eth2fc_speed() (Chris Leech) [1665951]
  - [scsi] scsi: fcoe: provide translation table between Ethernet and FC port speeds (Chris Leech) [1665951]
  - [scsi] fcoe: use defines from ethtool for 20Gbit and 40Gbit speeds (Chris Leech) [1665951]
  - [scsi] smartpqi: bump version (Don Brace) [1795408]
  - [scsi] scsi: smartpqi: fix problem with unique ID for physical device (Don Brace) [1795408]
  - [scsi] scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask (Don Brace) [1795408]
  - [drm] drm/nouveau/kms/gv100-: avoid sending a core update until the first modeset (Ben Skeggs) [1769905]
  - [drm] drm/nouveau/kms/gv100-: move window ownership setup into modesetting path (Ben Skeggs) [1769905]
  - [drm] drm/nouveau/disp/gv100-: halt NV_PDISP_FE_RM_INTR_STAT_CTRL_DISP_ERROR storms (Ben Skeggs) [1769905]
  - [drm] drm/nouveau/sec2/gp102: add missing MODULE_FIRMWAREs (Ben Skeggs) [1629576]
  - [drm] drm/nouveau/secboot/gp10: support newer FW to fix SEC2 failures on some boards (Ben Skeggs) [1629576]
  - [drm] drm/nouveau/secboot: enable loading of versioned LS PMU/SEC2 ACR msgqueue FW (Ben Skeggs) [1629576]
  - [drm] drm/nouveau/secboot: split out FW version-specific LS function pointers (Ben Skeggs) [1629576]
  - [drm] drm/nouveau/secboot: pass max supported FW version to LS load funcs (Ben Skeggs) [1629576]
  - [drm] drm/nouveau/core: support versioned firmware loading (Ben Skeggs) [1629576]
  - [drm] drm/nouveau/core: pass subdev into nvkm_firmware_get, rather than device (Ben Skeggs) [1629576]
  - [drm] drm/nouveau/secboot/gp102-: remove WAR for SEC2 RTOS start bug (Ben Skeggs) [1629576]
  - [drm] drm/nouveau/flcn/gp102-: improve implementation of bind_context() on SEC2/GSP (Ben Skeggs) [1629576]
  - [infiniband] IB/core: Do not notify GID change event of an unregistered device (Kamal Heib) [1707036]
  - [infiniband] IB/core: Let IB core distribute cache update events (Kamal Heib) [1707036]
  - [scsi] lpfc: Fix stack trace when running the debug kernel (Dick Kennedy) [1793410]
  - [mm] mm, sparse: do not swamp log with huge vmemmap allocation failures (Artem Savkov) [1515625]
  - [netdrv] nfp: flower: fix stats id allocation (Pablo Cascon) [1786498]
  - [netdrv] virtio-net: switch to use XPS to choose txq (Lu Lu) [1769479]
  - [vhost] vhost_net: validate sock before trying to put its fd (Vladis Dronov) [1767060]
  - [vhost] vhost_net: stop device during reset owner (Vladis Dronov) [1767060]
  - [vhost] vhost: don't open-code sockfd_put() (Vladis Dronov) [1767060]
  - [netdrv] bnx2x: Prevent ptp_task to be rescheduled indefinitely (Manish Chopra) [1720384]
  - [netdrv] bnx2x: Check if transceiver implements DDM before access (Manish Chopra) [1720384]
  - [netdrv] bnx2x: Add support for detection of P2P event packets (Manish Chopra) [1720384]
  - [netdrv] bnx2x: Replace magic numbers with macro definitions (Manish Chopra) [1720384]
  - [fs] flexfiles: Don't tie up all the rpciod threads in resends (Benjamin Coddington) [1778963]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1127.2.el7]
changelog:
  - [mm] mm: thp: use down_read_trylock() in khugepaged to avoid long block (Rafael Aquini) [1261799]
  - [mm] mm: oom: avoid attempting to kill init sharing same memory (Rafael Aquini) [1261799]
  - [mm] mm: oom: fix the wrong task->mm == mm checks in oom_kill_process() (Rafael Aquini) [1261799]
  - [mm] mm: oom: cleanup the "kill sharing same memory" loop (Rafael Aquini) [1261799]
  - [mm] mm: oom: fix potentially killing unrelated process (Rafael Aquini) [1261799]
  - [mm] mm: oom: reverse the order of setting TIF_MEMDIE and sending SIGKILL (Rafael Aquini) [1261799]
  - [mm] mm: oom: make sure that TIF_MEMDIE is set under task_lock (Rafael Aquini) [1261799]
  - [mm] mm: oom: don't count on mm-less current process (Rafael Aquini) [1261799]
  - [mm] mm: oom: kill the insufficient and no longer needed PT_TRACE_EXIT check (Rafael Aquini) [1261799]
  - [mm] mm: oom: don't assume that a coredumping thread will exit soon (Rafael Aquini) [1261799]
  - [netdrv] r8169: fix network stalls due to missing bit TXCFG_AUTO_FIFO (Corinna Vinschen) [1787263]
  - [kernel] audit: CONFIG_CHANGE don't log internal bookkeeping as an event (Richard Guy Briggs) [1777239]
  - [mm] writeback: use |1 instead of +1 to protect against div by zero (Christoph von Recklinghausen) [1801628]
  - [mm] Revert "mm: always flush VMA ranges affected by zap_page_range" (Christoph von Recklinghausen) [1801628]
  - [x86] x86/platform/uv: Account for UV Hubless in is_uvX_hub Ops (Frank Ramsay) [1789128]
  - [x86] x86/platform/uv: Check EFI Boot to set reboot type (Frank Ramsay) [1789128]
  - [x86] x86/platform/uv: Decode UVsystab Info (Frank Ramsay) [1789128]
  - [x86] x86/platform/uv: Add UV Hubbed/Hubless Proc FS Files (Frank Ramsay) [1789128]
  - [x86] x86/platform/uv: Setup UV functions for Hubless UV (Frank Ramsay) [1789128]
  - [x86] x86/platform/uv: Add return code to UV BIOS Init function (Frank Ramsay) [1789128]
  - [x86] x86/platform/uv: Return UV Hubless System Type (Frank Ramsay) [1789128]
  - [x86] x86/platform/uv: Save OEM_ID from ACPI MADT probe (Frank Ramsay) [1789128]
  - [net] openvswitch: support asymmetric conntrack (Aaron Conole) [1757759]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1127.3.el7]
changelog:
  - [virtio] virtio_ring: fix return code on DMA mapping fails (Philipp Rudo) [1804276]
  - [mm] swiotlb: make panic on mapping failures optional (Philipp Rudo) [1804276]
  - [virtio] virtio_ring: fix unmap of indirect descriptors (Philipp Rudo) [1804276]
  - [virtio] virtio_ring: fix num_free handling in error case (Philipp Rudo) [1804276]
  - [mm] s390/mm: fix dynamic pagetable upgrade for hugetlbfs (Philipp Rudo) [1804173]
  - [s390] s390/qeth: fix potential deadlock on workqueue flush (Philipp Rudo) [1804156]
  - [include] mm, slab: make sure that KMALLOC_MAX_SIZE will fit into MAX_ORDER (Rafael Aquini) [1804092]
  - [include] mm: slb: fix misleading comments (Rafael Aquini) [1804092]
  - [include] slob: Rework #ifdeffery in slab.h (Rafael Aquini) [1804092]
  - [kernel] tracing: Fix possible double free on failure of allocating trace buffer (Jerome Marchand) [1803011] {CVE-2017-18595}
  - [kernel] tracing: Fix crash when it fails to alloc ring buffer (Jerome Marchand) [1803011] {CVE-2017-18595}
  - [mm] x86/mm: In the PTE swapout page reclaim case clear the accessed bit instead of flushing the TLB (Rafael Aquini) [1799224]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1127.4.el7]
changelog:
  - [fs] gfs2: fix gfs2_find_jhead that returns uninitialized jhead with seq 0 (Abhijith Das) [1794508]
  - [fs] xfs: fix inode fork extent count overflow (Brian Foster) [1751015]
  - [fs] xfs: simplify xfs_idata_realloc (Brian Foster) [1751015]
  - [fs] xfs: remove if_real_bytes (Brian Foster) [1751015]
  - [s390] s390/diag: add tracepoint for diagnose calls (Philipp Rudo) [1805195]
  - [s390] s390/diag: add a statistic for diagnose calls (Philipp Rudo) [1805195]
  - [md] md/raid6: Set R5_ReadError when there is read failure on parity disk (Xiao Ni) [1804569]
  - [md] dm rq: fix checking of dm_dispatch_clone_request's return value (Ming Lei) [1805401]
  - [s390] scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices (Philipp Rudo) [1804806]
  - [s390] scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) (Philipp Rudo) [1804803]
  - [s390] scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove (Philipp Rudo) [1804805]
  - [s390] scsi: zfcp: fix request object use-after-free in send path causing wrong traces (Philipp Rudo) [1804802]
  - [virt] kvm: fix overflow of zero page refcount with ksm running (Paolo Bonzini) [1790534]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1127.5.el7]
changelog:
  - [scsi] scsi: libsas: fix a race condition when smp task timeout (Tomas Henzl) [1798263] {CVE-2018-20836}
  - [netdrv] can: peak_usb: fix slab info leak (Guillaume Nault) [1787484] {CVE-2019-19534}
  - [fs] xfs: also remove cached ACLs when removing the underlying attr (Carlos Maiolino) [1808676]
  - [fs] direct-io: allow direct writes to empty inodes (Eric Sandeen) [1785657]
  - [x86] x86/spec_ctrl: Make IBPB = IBRS || retpoline (Waiman Long) [1808114]
  - [infiniband] IB/mlx5: Do reverse sequence during device removal (Alaa Hleihel) [1808786]
  - [kernel] kprobes: Allow kprobes coexist with livepatch (Yannick Cote) [1764262]
  - [kernel] kprobes: Replace p with other pointer types (Yannick Cote) [1764262]
  - [scsi] qla2xxx: initialize the check_stop_free pointer (Maurizio Lombardi) [1805682]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1128.el7]
changelog:
  - [fs] ceph: only use d_name directly when parent is locked (Jeff Layton) [1699402]
  - [fs] ext4: work around deleting a file with i_nlink == 0 safely (Carlos Maiolino) [1801046]
  - [fs] xfs: attach dquots and reserve quota blocks during unwritten conversion (Carlos Maiolino) [1786005]
  - [fs] Revert "xfs: attach dquots and reserve quota blocks during unwritten conversion" (Carlos Maiolino) [1786005]
  - [md] dm mpath: call clear_request_fn_mpio() in multipath_release_clone() (Mike Snitzer) [1806400]
  - [scsi] scsi: implement .cleanup_rq callback (Mike Snitzer) [1806400]
  - [md] blk-mq: add callback of .cleanup_rq (Mike Snitzer) [1806400]
  - [target] target: call init_timer_on_stack() to initialize login_timer (Maurizio Lombardi) [1810037]
  - [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1807077]
  - [tools] selftests/livepatch: Test interaction with ftrace_enabled (Yannick Cote) [1806653]
  - [tools] selftests/livepatch: Make dynamic debug setup and restore generic (Yannick Cote) [1806653]
  - [kernel] ftrace: Introduce PERMANENT ftrace_ops flag (Yannick Cote) [1806653]
  - [tools] selftests/livepatch: push and pop dynamic debug config (Yannick Cote) [1806653]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1129.el7]
changelog:
  - [tools] perf header: Use last modification time for timestamp (Michael Petlan) [1789947]
  - [tools] perf header: Fix up argument to ctime() (Michael Petlan) [1789947]
  - [hid] HID: multitouch: Add pointstick support for ALPS Touchpad (Benjamin Tissoires) [1672425]
  - [kernel] blktrace: fix dereference after null check (Ming Lei) [1798318] {CVE-2019-19768}
  - [kernel] blktrace: Protect q->blk_trace with RCU (Ming Lei) [1798318] {CVE-2019-19768}
  - [kernel] blktrace: fix trace mutex deadlock (Ming Lei) [1798318] {CVE-2019-19768}
  - [kernel] blktrace: fix unlocked registration of tracepoints (Ming Lei) [1798318] {CVE-2019-19768}
  - [kernel] blktrace: fix unlocked access to init/start-stop/teardown (Ming Lei) [1798318] {CVE-2019-19768}
  - [kernel] tracing: Handle NULL formats in hold_module_trace_bprintk_format() (Oleksandr Natalenko) [1811565]
  - [kernel] tracing: Fix trace_printk() to print when not using bprintk() (Oleksandr Natalenko) [1811565]
  - [sound] ALSA: timer: Fix incorrectly assigned timer instance (Jaroslav Kysela) [1798457] {CVE-2019-19807}
  - [x86] kvm: OOB memory write via kvm_dev_ioctl_get_cpuid (CVE-2019-19332) (Philippe Mathieu-Daud) [1783455] {CVE-2019-19332}
  - [x86] kvm: x86: do not reset microcode version on INIT or RESET (Paolo Bonzini) [1801852]
  - [x86] kvm: x86: list MSR_IA32_UCODE_REV as an emulated MSR (Paolo Bonzini) [1801852]
  - [x86] kvm: x86: Allow userspace to define the microcode version (Paolo Bonzini) [1801852]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1130.el7]
changelog:
  - [scsi] scsi: avoid repetitive logging of device offline messages (Nilesh Javali) [1798042]
  - [scsi] qla2xxx: Fix I/Os being passed down when FC device is being deleted (Nilesh Javali) [1798042]
  - [scsi] scsi: qla2xxx: Fix unbound sleep in fcport delete path (Nilesh Javali) [1798042]
  - [scsi] scsi: qla2xxx: Fix hang in fcport delete path (Nilesh Javali) [1798042]
  - [scsi] scsi: qla2xxx: Fix stuck session in GNL (Nilesh Javali) [1798042]
  - [scsi] scsi: qla2xxx: Correct fcport flags handling (Nilesh Javali) [1798042]
  - [scsi] scsi: qla2xxx: Remove defer flag to indicate immeadiate port loss (Nilesh Javali) [1798042]
  - [scsi] iscsi: Avoid potential deadlock in iscsi_if_rx func (Oleksandr Natalenko) [1715986]
  - [netdrv] hv/netvsc: Fix NULL dereference at single queue mode fallback (Mohammed Gamal) [1806488]
  - [netdrv] hv/netvsc: fix handling of fallback to single queue mode (Mohammed Gamal) [1806488]
  - [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1806488]
  - [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1806488]
  - [netdrv] hv_netvsc: fix typos in code comments (Mohammed Gamal) [1806488]
  - [netdrv] hv_netvsc: Fix a deadlock by getting rtnl lock earlier in netvsc_probe() (Mohammed Gamal) [1806488]
  - [netdrv] hv_netvsc: Fix hash key value reset after other ops (Mohammed Gamal) [1806488]
  - [netdrv] hv_netvsc: Refactor assignments of struct netvsc_device_info (Mohammed Gamal) [1806488]
  - [netdrv] hv_netvsc: split sub-channel setup into async and sync (Mohammed Gamal) [1806488]
  - [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1806488]
  - [netdrv] hv_netvsc: Add NetVSP v6 and v6.1 into version negotiation (Mohammed Gamal) [1806488]
  - [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1806488]
  - [netdrv] hv_netvsc: simplify receive side calling arguments (Mohammed Gamal) [1806488]
  - [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1810643]
  - [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1810643]
  - [s390] s390/vdso: add vdso support for coarse clocks (Philipp Rudo) [1791822]
  - [s390] s390/vdso: remove NULL pointer check from clock_gettime (Philipp Rudo) [1791822]
  - [s390] scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host (Philipp Rudo) [1804807]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1131.el7]
changelog:
  - [x86] kvm: x86: clear stale x86_emulate_ctxt->intercept value (Jon Maloy) [1806818] {CVE-2020-2732}
  - [x86] kvm: vmx: check descriptor table exits on instruction emulation (Jon Maloy) [1806818] {CVE-2020-2732}
  - [x86] kvm: nvmx: Check IO instruction VM-exit conditions (Jon Maloy) [1806818] {CVE-2020-2732}
  - [x86] kvm: nvmx: Refactor IO bitmap checks into helper function (Jon Maloy) [1806818] {CVE-2020-2732}
  - [x86] kvm: nvmx: Don't emulate instructions in guest mode (Jon Maloy) [1806818] {CVE-2020-2732}
  - [x86] kvm: x86: Fix kvm_bitmap_or_dest_vcpus() to use irq shorthand (Nitesh Narayan Lal) [1772082]
  - [x86] kvm: x86: Initializing all kvm_lapic_irq fields in ioapic_write_indirect (Nitesh Narayan Lal) [1772082]
  - [virt] kvm: x86: remove set but not used variable 'called' (Nitesh Narayan Lal) [1772082]
  - [x86] kvm: x86: Zero the IOAPIC scan request dest vCPUs bitmap (Nitesh Narayan Lal) [1772082]
  - [x86] kvm: x86: deliver KVM IOAPIC scan request to target vCPUs (Nitesh Narayan Lal) [1772082]
  - [kernel] kvm: remember position in kvm->vcpus array (Nitesh Narayan Lal) [1772082]
  - [x86] kvm: x86: Drop KVM_APIC_SHORT_MASK and KVM_APIC_DEST_MASK (Nitesh Narayan Lal) [1772082]
  - [virt] kvm: introduce kvm_make_vcpus_request_mask() API (Nitesh Narayan Lal) [1772082]
  - [virt] kvm: avoid unused variable warning for UP builds (Nitesh Narayan Lal) [1772082]
  - [kernel] smp, cpumask: Use non-atomic cpumask_{set, clear}_cpu() (Nitesh Narayan Lal) [1772082]
  - [fs] nfs: change sign of nfs_fh length ("J. Bruce Fields") [1813326]
  - [netdrv] ibmvnic: Do not process device remove during device reset (Steve Best) [1813903]
  - [x86] x86/debug: Extend the lower bound of crash kernel low reservations (Pingfan Liu) [1811511]
  - [net] tcp: make tcp_space() aware of socket backlog (Guillaume Nault) [1790840]
  - [net] ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup (Sabrina Dubroca) [1774447] {CVE-2020-1749}
  - [net] ipv6: add net argument to ip6_dst_lookup_flow (Sabrina Dubroca) [1774447] {CVE-2020-1749}
  - [net] ipv6: constify ip6_dst_lookup_{flow|tail}() sock arguments (Sabrina Dubroca) [1774447] {CVE-2020-1749}
  - [net] macvlan: return correct error value (Matteo Croce) [1654878]
  - [net] ieee802154: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779494] {CVE-2019-17053}
  - [net] ipv4: fix fnhe usage by non-cached routes (Hangbin Liu) [1788435]
  - [net] route: do not cache fib route info on local routes with oif (Hangbin Liu) [1788435]
  - [net] ip6_tunnel: fix potential NULL pointer dereference (Hangbin Liu) [1767045]
  - [net] net_sched: remove a bogus warning in hfsc (Davide Caratti) [1781323]
  - [netdrv] net/mlx5e: allow TSO on VXLAN over VLAN topologies (Davide Caratti) [1780646]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1132.el7]
changelog:
  - [tools] tools/power turbostat: Support Ice Lake server (Steve Best) [1776508]
  - [nvme] nvme-fc: ensure association_id is cleared regardless of a Disconnect LS (Ewan Milne) [1816752]
  - [nvme] nvme-fc: clarify error messages (Ewan Milne) [1816752]
  - [nvme] nvme-fc: fix module unloads while lports still pending (Ewan Milne) [1816752]
  - [scsi] scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI (Ewan Milne) [1816307]
  - [scsi] scsi: core: Fix a compiler warning triggered by the SCSI logging code (Ewan Milne) [1816307]
  - [scsi] scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6) (Ewan Milne) [1816307]
  - [scsi] scsi: core: scsi_trace: Use get_unaligned_be*() (Ewan Milne) [1816307]
  - [scsi] scsi: core: try to get module before removing device (Ewan Milne) [1816307]
  - [scsi] scsi: scsi_dh_alua: handle RTPG sense code correctly during state transitions (Ewan Milne) [1816307]
  - [scsi] scsi: device_handler: remove VLAs (Ewan Milne) [1816307]
  - [scsi] scsi: scsi_dh: Document alua_rtpg_queue() arguments (Ewan Milne) [1816307]
  - [scsi] scsi: scsi_dh_alua: skip RTPG for devices only supporting active/optimized (Ewan Milne) [1816307]
  - [scsi] scsi: scsi_dh_emc: return success in clariion_std_inquiry() (Ewan Milne) [1816307]
  - [target] scsi: target: iscsi: rename some variables to avoid confusion (Maurizio Lombardi) [1806966]
  - [target] scsi: target: iscsi: tie the challenge length to the hash digest size (Maurizio Lombardi) [1806966]
  - [target] scsi: target: iscsi: CHAP: add support for SHA1, SHA256 and SHA3-256 (Maurizio Lombardi) [1806966]
  - [target] scsi: target: compare full CHAP_A Algorithm strings (Maurizio Lombardi) [1806966]
  - [base] device_release() can call device_rh_free() too (Christoph von Recklinghausen) [1793248]
  - [nvdimm] driver boilerplate changes to properly manage device_rh (Christoph von Recklinghausen) [1793248]
  - [base] Add an interface for certain drivers who manage their own struct device's to disassociate their device_rh's (Christoph von Recklinghausen) [1793248]
  - [base] kfree(dev->device_rh) in device_create_release() (Christoph von Recklinghausen) [1793248]
  - [base] kfree and zero device_rh in device_release() (Christoph von Recklinghausen) [1793248]
  - [input] Revert "Fix device_rh memory leak" (Christoph von Recklinghausen) [1793248]
  - [scsi] Revert "Fix device_rh leak in scsi_alloc_target()" (Christoph von Recklinghausen) [1793248]
  - [scsi] Revert "Fix memory leaks in scsi_alloc_sdev()" (Christoph von Recklinghausen) [1793248]
  - [nvdimm] libnvdimm/security: Consolidate 'security' operations (Jeff Moyer) [1735364]
  - [nvdimm] libnvdimm/security: Tighten scope of nvdimm->busy vs security operations (Jeff Moyer) [1735364]
  - [nvdimm] libnvdimm/security: Introduce a 'frozen' attribute (Jeff Moyer) [1735364]
  - [acpi] libnvdimm/security, acpi/nfit: unify zero-key for all security commands (Jeff Moyer) [1735364]
  - [nvdimm] libnvdimm/security: provide fix for secure-erase to use zero-key (Jeff Moyer) [1735364]
  - [block] block: fix checking return value of blk_mq_init_queue (Maxim Levitsky) [1795777]
  - [bluetooth] Bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in hci_uart_set_proto() (Aristeu Rozanski) [1808803] {CVE-2019-15917}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1133.el7]
changelog:
  - [powerpc] powerpc/pseries/dlpar: Fix a missing check in dlpar_parse_cc_property() (Steve Best) [1806629] {CVE-2019-12614}
  - [s390] s390/pci: Recover handle in clp_set_pci_fn() (Philipp Rudo) [1816662]
  - [fs] xfs: fix attr leaf header freemap.size underflow (Bill O'Donnell) [1808671]
  - [block] floppy: check FDC index for errors before assigning it (Ming Lei) [1815403] {CVE-2020-9383}
  - [block] virtio-blk: improve virtqueue error to BLK_STS (Philipp Rudo) [1818001]
  - [block] virtio-blk: fix hw_queue stopped on arbitrary error (Philipp Rudo) [1818001]
  - [s390] dasd: fix endless loop after read unit address configuration (Philipp Rudo) [1816661]
  - [fs] CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks (Leif Sahlberg) [1504193]
  - [fs] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (Leif Sahlberg) [1504193]
  - [char] ipmi: Fix memory leak in __ipmi_bmc_register (Tony Camuso) [1812836] {CVE-2019-19046}
  - [net] ipvs: Remove noisy debug print from ip_vs_del_service (Alexey Klimov) [1769816]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1134.el7]
changelog:
  - [net] netfilter: nf_log: fix uninit read in nf_log_proc_dostring (Phil Sutter) [1770232]
  - [net] netfilter: nf_log: fix error on write NONE to logger choice sysctl (Phil Sutter) [1770232]
  - [net] ethtool: convert large order kmalloc allocations to vzalloc (Davide Caratti) [1786448]
  - [net] l2tp: Allow duplicate session creation with UDP (Guillaume Nault) [1808928]
  - [net] sched: flower: insert new filter to idr after setting its mask (Davide Caratti) [1785141]
  - [net] ipv6: remove printk (Hangbin Liu) [1779533]
  - [net] netfilter: ctnetlink: netns exit must wait for callbacks (Florian Westphal) [1766816]
  - [net] raw: do not report ICMP redirects to user space (Hangbin Liu) [1758386]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1135.el7]
changelog:
  - [fs] fscache: Fix race in fscache_op_complete() due to split atomic_sub & read (Dave Wysochanski) [1683490]
  - [fs] fscache: Pass the correct cancelled indications to fscache_op_complete() (Dave Wysochanski) [1683490]
  - [char] tpm: ibmvtpm: Wait for buffer to be set before proceeding (Jerry Snitselaar) [1815536]
  - [fs] NFS: Fix a race between mmap() and O_DIRECT (Benjamin Coddington) [1813803]
  - [fs] NFS: Remove a redundant call to unmap_mapping_range() (Benjamin Coddington) [1813803]
  - [fs] NFS: Remove redundant waits for O_DIRECT in fsync() and write_begin() (Benjamin Coddington) [1813803]
  - [fs] NFS: Cleanup nfs_direct_complete() (Benjamin Coddington) [1813803]
  - [fs] NFS: Do not serialise O_DIRECT reads and writes (Benjamin Coddington) [1813803]
  - [fs] NFS: Move buffered I/O locking into nfs_file_write() (Benjamin Coddington) [1813803]
  - [fs] bdi: make inode_to_bdi() inline (Benjamin Coddington) [1813803]
  - [fs] NFS: Remove racy size manipulations in O_DIRECT (Benjamin Coddington) [1813803]
  - [fs] NFS: Don't hold the inode lock across fsync() (Benjamin Coddington) [1813803]
  - [fs] nfs: remove nfs_inode_dio_wait (Benjamin Coddington) [1813803]
  - [fs] nfs: remove nfs4_file_fsync (Benjamin Coddington) [1813803]
  - [fs] NFS: Kill NFS_INO_NFS_INO_FLUSHING: it is a performance killer (Benjamin Coddington) [1813803]
  - [fs] filesystem-dax: Fix dax_layout_busy_page() livelock (Carlos Maiolino) [1817866]
  - [block] blk-mq: fix hang caused by freeze/unfreeze sequence (Ming Lei) [1821718]
  - [fs] ceph: don't NULL terminate virtual xattrs (Jeff Layton) [1717454]
  - [fs] ceph: return -ERANGE if virtual xattr value didn't fit in buffer (Jeff Layton) [1717454]
  - [fs] ceph: make getxattr_cb return ssize_t (Jeff Layton) [1717454]
  - [fs] ceph: use bit flags to define vxattr attributes (Jeff Layton) [1717454]
  - [tty] tty: Prevent ldisc drivers from re-using stale tty fields (Vladis Dronov) [1820031]
  - [powerpc] powerpc64/kexec: Hard disable ftrace before switching to the new kernel (Jerome Marchand) [1731578]
  - [powerpc] powerpc64/ftrace: Delay enabling ftrace on secondary cpus (Jerome Marchand) [1731578]
  - [powerpc] powerpc64/ftrace: Add helpers to hard disable ftrace (Jerome Marchand) [1731578]
  - [powerpc] powerpc64/ftrace: Rearrange #ifdef sections in ftrace.h (Jerome Marchand) [1731578]
  - [powerpc] powerpc64/ftrace: Add a field in paca to disable ftrace in unsafe code paths (Jerome Marchand) [1731578]
  - [powerpc] powerpc/ftrace: Pass the correct stack pointer for DYNAMIC_FTRACE_WITH_REGS (Jerome Marchand) [1731578]
  - [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779474] {CVE-2019-17055}
  - [virtio] virtio-balloon: fix managed page counts when migrating pages between zones (David Hildenbrand) [1780330]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1136.el7]
changelog:
  - [fs] sunrpc: expiry_time should be seconds not timeval (Benjamin Coddington) [1794055]
  - [nvdimm] Revert "driver boilerplate changes to properly manage device_rh" (Christoph von Recklinghausen) [1823750]
  - [base] call device_rh_free in device_release before driver/class/type release is called (Christoph von Recklinghausen) [1822888]
  - [md] md:md-faulty kernel panic is caused by QUEUE_FLAG_NO_SG_MERGE (Nigel Croxon) [1822462]
  - [firmware] efi: cper: print AER info of PCIe fatal error (Vladis Dronov) [1820646]
  - [scsi] qla2xxx: Update driver version to 10.01.00.22.07.9-k (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: Fix message indicating vectors used by driver (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: Move free of fcport out of interrupt context (Nilesh Javali) [1808129]
  - [scsi] qla2xxx: delete all sessions before unregister local nvme port (Nilesh Javali) [1808129]
  - [scsi] qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: Fix a NULL pointer dereference in an error path (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: Fix mtcp dump collection failure (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: Fix RIDA Format-2 (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: Fix stuck login session using prli_pend_timer (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: Use common routine to free fcport struct (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: Fix update_fcport for current_topology (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: Fix fabric scan hang (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: Complain if sp->done() is not called from the completion path (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: Change discovery state before PLOGI (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: Initialize free_work before flushing it (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: Retry fabric Scan on IOCB queue full (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: initialize fc4_type_priority (Nilesh Javali) [1808129]
  - [scsi] scsi: qla2xxx: Fix a dma_pool_free() call (Nilesh Javali) [1808129]
  - [security] selinux: ensure we cleanup the internal AVC counters on error in avc_insert() (Artem Savkov) [1808675]
  - [acpi] ACPICA: Mark acpi_ut_create_internal_object_dbg() memory allocations as non-leaks (Artem Savkov) [1808675]
  - [x86] x86/microcode/AMD: Free unneeded patch before exit from update_cache() (Artem Savkov) [1808675]
  - [mm] memcg: ensure mem_cgroup_idr is updated in a coordinated manner (Aaron Tomlin) [1822405]
  - [mm] mm/page_alloc: increase default min_free_kbytes bound (Joel Savitz) [1704326]
  - [scsi] scsi: lpfc: Fix unexpected error messages during RSCN handling (Dick Kennedy) [1743667]
  - [scsi] scsi: lpfc: Fix discovery failures when target device connectivity bounces (Dick Kennedy) [1743667]
  - [scsi] scsi: lpfc: Fix devices that don't return after devloss followed by rediscovery (Dick Kennedy) [1743667]
  - [scsi] scsi: lpfc: Fix port relogin failure due to GID_FT interaction (Dick Kennedy) [1743667]
  - [video] vgacon: Fix a UAF in vgacon_invert_region (Vladis Dronov) [1818730] {CVE-2020-8647 CVE-2020-8649}
  - [x86] uprobes/x86: Fix detection of 32-bit user mode (Oleg Nesterov) [1804959]
  - [powerpc] module: Handle R_PPC64_ENTRY relocations (Yauheni Kaliuta) [1657540]
  - [scripts] recordmcount.pl: support data in text section on powerpc (Yauheni Kaliuta) [1657540]
  - [powerpc] boot: Request no dynamic linker for boot wrapper (Yauheni Kaliuta) [1657540]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1137.el7]
changelog:
  - [tty] tty/hvc: Use IRQF_SHARED for OPAL hvc consoles (Gustavo Duarte) [1600213]
  - [mm] mm/swap_slots.c: fix race conditions in swap_slots cache init (Rafael Aquini)
  - [block] loop: set PF_MEMALLOC_NOIO for the worker thread (Ming Lei) [1825950]
  - [tty] serial: 8250: drop the printk from serial8250_interrupt() (Prarit Bhargava) [1825049]
  - [net] net: linkwatch: add check for netdevice being present to linkwatch_do_dev (Alaa Hleihel) [1595302]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1138.el7]
changelog:
  - [infiniband] RDMA/bnxt_re: Fix chip number validation Broadcom's Gen P5 series (Jonathan Toppins) [1823679]
  - [scsi] scsi: qla2xxx: Silence fwdump template message (Ewan Milne) [1783191]
  - [scsi] scsi: hpsa: Update driver version (Joseph Szczypek) [1808403]
  - [scsi] scsi: hpsa: correct race condition in offload enabled (Joseph Szczypek) [1808403]
  - [netdrv] bonding: fix active-backup transition after link failure (Jarod Wilson) [1712235]
  - [netdrv] bonding: fix state transition issue in link monitoring (Jarod Wilson) [1712235]
  - [netdrv] bonding: fix potential NULL deref in bond_update_slave_arr (Jarod Wilson) [1712235]
  - [netdrv] bonding: Force slave speed check after link state recovery for 802.3ad (Jarod Wilson) [1712235]
  - [i2c] i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA (Vladis Dronov) [1822641] {CVE-2017-18551}
  - [acpi] ACPI / EC: Ensure lock is acquired before accessing ec struct (Al Stone) [1811132]
  - [x86] x86/mce: Do not log spurious corrected mce errors (Prarit Bhargava) [1797205]
  - [wireless] mwifiex: Fix mem leak in mwifiex_tm_cmd (Jarod Wilson) [1804971] {CVE-2019-20095}
  - [kernel] kernel/module.c: wakeup processes in module_wq on module unload (Prarit Bhargava) [1771939]
  - [acpi] ACPICA: acpi: acpica: fix acpi operand cache leak in nseval.c (Prarit Bhargava) [1790782]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1139.el7]
changelog:
  - [fs] nfsd: Fix races between nfsd4_cb_release() and nfsd4_shutdown_callback() ("J. Bruce Fields") [1448750]
  - [fs] nfsd: minor 4.1 callback cleanup ("J. Bruce Fields") [1448750]
  - [fs] nfsd: Don't release the callback slot unless it was actually held (Benjamin Coddington) [1448750]
  - [lib] kobject: don't use WARN for registration failures (Ewan Milne) [1756495]
  - [lib] lib/kobject: Join string literals back (Ewan Milne) [1756495]
  - [scsi] scsi: ibmvfc: Don't send implicit logouts prior to NPIV login (Steve Best) [1828726]
  - [fs] nfs: Serialize O_DIRECT reads and writes (Benjamin Coddington) [1826571]
  - [mm] mm/page_owner: convert page_owner_inited to static key (Rafael Aquini) [1781726]
  - [mm] mm/page_owner: set correct gfp_mask on page_owner (Rafael Aquini) [1781726]
  - [mm] mm/page_owner: fix possible access violation (Rafael Aquini) [1781726]
  - [mm] mm/page_owner: use late_initcall to hook in enabling (Rafael Aquini) [1781726]
  - [mm] mm/page_owner: remove unnecessary stack_trace field (Rafael Aquini) [1781726]
  - [mm] mm/page_owner: correct owner information for early allocated pages (Rafael Aquini) [1781726]
  - [mm] mm/page_owner: keep track of page owners (Rafael Aquini) [1781726]
  - [documentation] Documentation: add new page_owner document (Rafael Aquini) [1781726]
  - [kernel] stacktrace: introduce snprint_stack_trace for buffer output (Rafael Aquini) [1781726]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1140.el7]
changelog:
  - [netdrv] mlx5: Remove unsupported tag for ConnectX-6 Dx device (Alaa Hleihel) [1829777]
  - [fs] xfs: clear PF_MEMALLOC before exiting xfsaild thread (Brian Foster) [1827910]
  - [fs] gfs2: fix O_EXCL|O_CREAT handling on cold dcache (Andrew Price) [1812558]
  - [fs] nfs: Correct an nfs page array calculation error (Jay Shin) [1824270]
  - [infiniband] RDMA/bnxt_re: Fix stat push into dma buffer on gen p5 devices (Jonathan Toppins) [1828475 1824438]
  - [netdrv] bnxt_en: Fix allocation of zero statistics block size regression (Jonathan Toppins) [1824438]
  - [netdrv] bnxt_en: Allocate the larger per-ring statistics block for 57500 chips (Jonathan Toppins) [1824438]
  - [netdrv] bnxt_en: Expand bnxt_tpa_info struct to support 57500 chips (Jonathan Toppins) [1824438]
  - [netdrv] bnxt_en: Refactor TPA logic (Jonathan Toppins) [1824438]
  - [netdrv] bnxt_en: Add TPA structure definitions for BCM57500 chips (Jonathan Toppins) [1824438]
  - [netdrv] bnxt_en: Update firmware interface spec. to 1.10.0.89 (Jonathan Toppins) [1824438]
  - [netdrv] bnxt_en: Update firmware interface to 1.10.0.69 (Jonathan Toppins) [1824438]
  - [netdrv] bnxt_en: Update firmware interface spec. to 1.10.0.47 (Jonathan Toppins) [1824438]
  - [netdrv] bnxt_en: Refactor ethtool ring statistics logic (Jonathan Toppins) [1824438]
  - [block] blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (Ming Lei) [1825431]
  - [scsi] scsi: fnic: do not queue commands during fwreset (Govindarajulu Varadarajan) [1794150]
  - [scsi] scsi: fnic: fix invalid stack access (Govindarajulu Varadarajan) [1794150]
  - [scsi] scsi: fnic: fix use after free (Govindarajulu Varadarajan) [1794150]
  - [netdrv] enic: prevent waking up stopped tx queues over watchdog reset (Govindarajulu Varadarajan) [1794148]
  - [fs] ceph: use ceph_evict_inode to cleanup inode's resource (Jeff Layton) [1784016]
  - [fs] ceph: fix use-after-free in __ceph_remove_cap() (Jeff Layton) [1784016]
  - [fs] ceph: hold i_ceph_lock when removing caps for freeing inode (Jeff Layton) [1784016]
  - [input] Input: ff-memless - kill timer in destroy() (Chris von Recklinghausen) [1815021] {CVE-2019-19524}
  - [scsi] scsi: qla2xxx: fix a potential NULL pointer dereference ("Ewan D. Milne") [1829246] {CVE-2019-16233}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1141.el7]
changelog:
  - [kernel] sched/fair: Scale bandwidth quota and period without losing quota/period ratio precision (Artem Savkov) [1752067]
  - [edac] EDAC: skx_common: downgrade message importance on missing PCI device (Aristeu Rozanski) [1832683]
  - [s390] s390/qdio: consider ERROR buffers for inbound-full condition (Philipp Rudo) [1831791]
  - [s390] s390/ftrace: fix potential crashes when switching tracers (Philipp Rudo) [1813124]
  - [netdrv] ibmvnic: Skip fatal error reset after passive init (Steve Best) [1830992]
  - [scsi] smartpqi: bump driver version (Don Brace) [1822762]
  - [scsi] scsi: smartpqi: add bay identifier (Don Brace) [1822762]
  - [scsi] scsi: smartpqi: add module param to hide vsep (Don Brace) [1822762]
  - [scsi] scsi: bnx2fc: Update the driver version to 2.12.13 (Nilesh Javali) [1709542]
  - [scsi] scsi: bnx2fc: fix boolreturn.cocci warnings (Nilesh Javali) [1709542]
  - [scsi] scsi: bnx2fc: Fix SCSI command completion after cleanup is posted (Nilesh Javali) [1709542]
  - [scsi] scsi: bnx2fc: Process the RQE with CQE in interrupt context (Nilesh Javali) [1709542]
  - [scsi] scsi: qla2xxx: Fix a recently introduced kernel warning (Nilesh Javali) [1828875]
  - [scsi] Fix abort timeouts in CQ Full conditions (Dick Kennedy) [1802654]
  - [input] Input: add safety guards to input_set_keycode() (Chris von Recklinghausen) [1828222] {CVE-2019-20636}
  - [scsi] scsi: libsas: delete sas port if expander discover failed (Tomas Henzl) [1829965] {CVE-2019-15807}
  - [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827240] {CVE-2020-10711}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1142.el7]
changelog:
  - [fs] gfs2: Another gfs2_walk_metadata fix (Andreas Grunbacher) [1822230]
  - [fs] ext4: prevent ext4_quota_write() from failing due to ENOSPC (Lukas Czerner) [1068952]
  - [fs] ext4: do not zeroout extents beyond i_disksize (Lukas Czerner) [1834320]
  - [fs] pnfs: Ensure we layoutcommit before revalidating attributes (Benjamin Coddington) [1827647]
  - [fs] nfs: flush data when locking a file to ensure cache coherence for mmap (Scott Mayhew) [1813811]
  - [fs] call fsnotify_sb_delete after evict_inodes (Jay Shin) [1760145]
  - [fs] inode: don't softlockup when evicting inodes (Jay Shin) [1760145]
  - [fs] drop_caches.c: avoid softlockups in drop_pagecache_sb() (Jay Shin) [1760145]
  - [fs] gfs2: More gfs2_find_jhead fixes (Abhijith Das) [1828454]
  - [fs] gfs2: Another gfs2_find_jhead fix (Abhijith Das) [1828454]
  - [fs] nfs: fix mount/umount race in nlmclnt (Jay Shin) [1771205]
  - [fs] nlm_shutdown_hosts_net() cleanup (Jay Shin) [1771205]
  - [scsi] scsi: megaraid: Use true, false for bool variables (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid: make two symbols static in megaraid_sas_base.c (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid: make some symbols static in megaraid_sas_fusion.c (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid: make some symbols static in megaraid_sas_fp.c (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: Use scnprintf() for avoiding potential buffer overflow (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: silence a warning (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: fix indentation issue (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: Limit the number of retries for the IOCTLs causing firmware fault (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: Re-Define enum DCMD_RETURN_STATUS (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: Do not set HBA Operational if FW is not in operational state (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: Do not kill HBA if JBOD Seqence map or RAID map is disabled (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: Do not kill host bus adapter, if adapter is already dead (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: Update optimal queue depth for SAS and NVMe devices (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: Reset adapter if FW is not in READY state after device resume (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: Make poll_aen_lock static (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: Fix a compilation warning (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: Make a bunch of functions static (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: Make some functions static (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: remove unused variables 'debugBlk', 'fusion' (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: Unique names for MSI-X vectors (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: fix panic on loading firmware crashdump (Tomas Henzl) [1827037]
  - [scsi] scsi: megaraid_sas: fix spelling mistake "megarid_sas" -> "megaraid_sas" (Tomas Henzl) [1827037]
  - [scsi] scsi: mpt3sas: Disable DIF when prot_mask set to zero (Tomas Henzl) [1832868]
  - [scsi] scsi: mpt3sas: Handle RDPQ DMA allocation in same 4G region (Tomas Henzl) [1832868]
  - [scsi] scsi: mpt3sas: Separate out RDPQ allocation to new function (Tomas Henzl) [1832868]
  - [scsi] scsi: mpt3sas: Rename function name is_MSB_are_same (Tomas Henzl) [1832868]
  - [scsi] scsi: mpt3sas: Don't change the DMA coherent mask after allocations (Tomas Henzl) [1832868]
  - [scsi] scsi: mpt3sas: Fix kernel panic observed on soft HBA unplug (Tomas Henzl) [1832868]
  - [scsi] scsi: mpt3sas: Fix double free in attach error handling (Tomas Henzl) [1832868]
  - [scsi] scsi: mpt3sas: Use Component img header to get Package ver (Tomas Henzl) [1832868]
  - [scsi] scsi: mpt3sas: Fix module parameter max_msix_vectors (Tomas Henzl) [1832868]
  - [scsi] scsi: mpt3sas: Reject NVMe Encap cmnds to unsupported HBA (Tomas Henzl) [1832868]
  - [netdrv] hv_netvsc: Fix error handling in netvsc_set_features() (Mohammed Gamal) [1821814]
  - [netdrv] hv_netvsc: Sync offloading features to VF NIC (Mohammed Gamal) [1821814]
  - [netdrv] hv_netvsc: Fix IP header checksum for coalesced packets (Mohammed Gamal) [1821814]
  - [netdrv] hv_netvsc: Fix rndis_per_packet_info internal field initialization (Mohammed Gamal) [1821814]
  - [netdrv] hv_netvsc: Add handler for LRO setting change (Mohammed Gamal) [1821814]
  - [netdrv] hv_netvsc: Add support for LRO/RSC in the vSwitch (Mohammed Gamal) [1821814]
  - [netdrv] hv_netvsc: Add handlers for ethtool get/set msg level (Mohammed Gamal) [1821814]
  - [netdrv] hv_netvsc: Fix the variable sizes in ipsecv2 and rsc offload (Mohammed Gamal) [1821814]
  - [fs] fix mntput/mntput race (Miklos Szeredi) [1828320]
  - [wireless] rtlwifi: prevent memory leak in rtl_usb_probe (Jarod Wilson) [1829847] {CVE-2019-19063}
  - [wireless] iwlwifi: dbg_ini: fix memory leak in alloc_sgtable (Jarod Wilson) [1829375] {CVE-2019-19058}
  - [net] nl80211: fix memory leak in nl80211_get_ftm_responder_stats (Jarod Wilson) [1829289] {CVE-2019-19055}
  - [wireless] iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init (Jarod Wilson) [1829393] {CVE-2019-19059}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1143.el7]
changelog:
  - [mm] mm: mempolicy: require at least one nodeid for MPOL_PREFERRED (Rafael Aquini) [1834434] {CVE-2020-11565}
  - [fs] fs: avoid softlockups in s_inodes iterators (Jay Shin) [1760145]
  - [scsi] scsi: core: Add DID_ALLOC_FAILURE and DID_MEDIUM_ERROR to hostbyte_table (Maurizio Lombardi) [1832019]
  - [fs] locks: allow filesystems to request that ->setlease be called without i_lock (Jeff Layton) [1830606]
  - [fs] locks: move fasync setup into generic_add_lease (Jeff Layton) [1830606]
  - [fs] revert "[fs] xfs: catch bad stripe alignment configurations" (Carlos Maiolino) [1836292]
  - [scsi] scsi: scsi_debug: num_tgts must be >= 0 (Ewan Milne) [1834998]
  - [scsi] scsi: scsi_debug: Avoid PI being disabled when TPGS is enabled (Ewan Milne) [1834998]
  - [scsi] scsi: scsi_debug: Fix memory leak if LBP enabled and module is unloaded (Ewan Milne) [1834998]
  - [scsi] scsi_debug: check for bigger value first (Ewan Milne) [1834998]
  - [scsi] scsi_debug: vfree is null safe so drop the check (Ewan Milne) [1834998]
  - [scsi] scsi_debug: error message should say scsi_host_alloc not scsi_register (Ewan Milne) [1834998]
  - [fs] xfs: Fix tail rounding in xfs_alloc_file_space() (Bill O'Donnell) [1833223]
  - [fs] ceph: don't drop message if it contains more data than expected (Jeff Layton) [1828340]
  - [fs] ceph: don't error out on larger-than-expected session messages (Jeff Layton) [1828340]
  - [acpi] ACPI: disable BERT by default, add parameter to enable it (Aristeu Rozanski) [1525298]
  - [acpi] ACPI: APEI: Fix possible out-of-bounds access to BERT region (Aristeu Rozanski) [1525298]
  - [acpi] ACPI / sysfs: Extend ACPI sysfs to provide access to boot error region (Aristeu Rozanski) [1525298]
  - [acpi] ACPI: APEI: Fix BERT resources conflict with ACPI NVS area (Aristeu Rozanski) [1525298]
  - [acpi] ACPI / APEI: Add Boot Error Record Table (BERT) support (Aristeu Rozanski) [1525298]
  - [acpi] ACPICA: Restore error table definitions to reduce code differences between Linux and ACPICA upstream (Aristeu Rozanski) [1525298]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1144.el7]
changelog:
  - [crypto] crypto: user - fix memory leak in crypto_report (Vladis Dronov) [1825132] {CVE-2019-18808 CVE-2019-19062}
  - [crypto] crypto: ccp - Release all allocated memory if sha type is invalid (Vladis Dronov) [1825132] {CVE-2019-18808}
  - [net] xfrm: policy: Fix doulbe free in xfrm_policy_timer (Xin Long) [1836813]
  - [net] xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire (Xin Long) [1836813]
  - [net] xfrm: fix uctx len check in verify_sec_ctx_len (Xin Long) [1836813]
  - [net] rtnetlink: validate IFLA_MTU attribute in rtnl_create_link() (Jiri Benc) [1835352]
  - [net] rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices (Jiri Benc) [1835352]
  - [net] netlink: fix uninit-value in netlink_sendmsg (Jiri Benc) [1835352]
  - [net] netlink: make sure nladdr has correct size in netlink_connect() (Jiri Benc) [1835352]
  - [net] rtnetlink: fix info leak in RTM_GETSTATS call (Jiri Benc) [1835352]
  - [net] rtnetlink: release net refcnt on error in do_setlink() (Jiri Benc) [1835352]
  - [net] bridge: deny dev_set_mac_address() when unregistering (Hangbin Liu) [1834203]
  - [net] bridge/mdb: remove wrong use of NLM_F_MULTI (Hangbin Liu) [1834203]
  - [net] udp: disable inner UDP checksum offloads in IPsec case (Sabrina Dubroca) [1826244]
  - [net] sctp: Fix SHUTDOWN CTSN Ack in the peer restart case (Xin Long) [1833869]
  - [net] sctp: Fix bundling of SHUTDOWN with COOKIE-ACK (Xin Long) [1833869]
  - [net] sctp: fix possibly using a bad saddr with a given dst (Xin Long) [1833869]
  - [net] sctp: fix refcount bug in sctp_wfree (Xin Long) [1833869]
  - [net] sctp: move the format error check out of __sctp_sf_do_9_1_abort (Xin Long) [1833869]
  - [net] sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY (Xin Long) [1833869]
  - [net] sctp: fully initialize v4 addr in some functions (Xin Long) [1833869]
  - [net] sctp: simplify addr copy (Xin Long) [1833869]
  - [net] sctp: cache netns in sctp_ep_common (Xin Long) [1833869]
  - [net] sctp: destroy bucket if failed to bind addr (Xin Long) [1833869]
  - [net] sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' (Xin Long) [1833869]
  - [net] netfilter: nat: never update the UDP checksum when it's 0 (Guillaume Nault) [1834278]
  - [net] esp4: add length check for UDP encapsulation (Sabrina Dubroca) [1825155]
  - [net] sit: fix memory leak in sit_init_net() (Andrea Claudi) [1830011] {CVE-2019-16994}
  - [net] sched: cbs: fix NULL dereference in case cbs_init() fails (Davide Caratti) [1830245]
  - [net] netfilter: nf_tables: use-after-free in dynamic operations (Phil Sutter) [1819087]
  - [net] tcp: tcp_v4_err() should be more careful (Marcelo Leitner) [1749964]
  - [net] tcp: remove BUG_ON from tcp_v4_err (Marcelo Leitner) [1749964]
  - [net] tcp: clear icsk_backoff in tcp_write_queue_purge() (Marcelo Leitner) [1749964]
  - [net] psample: fix skb_over_panic (Sabrina Dubroca) [1823251]
  - [net] sched: ensure opts_len <= IP_TUNNEL_OPTS_MAX in act_tunnel_key (Patrick Talbert) [1823691]
  - [netdrv] fjes: Handle workqueue allocation failure (Masayoshi Mizuma) [1830563] {CVE-2019-16231}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1145.el7]
changelog:
  - [scsi] scsi: qla2xxx: Do not log message when reading port speed via sysfs (Ewan Milne) [1837543]
  - [mm] mm: dmapool: add/remove sysfs file outside of the pool lock lock (Waiman Long) [1836837]
  - [mm] Fix unbalanced mutex in dma_pool_create() (Waiman Long) [1836837]
  - [mm] mm/dmapool.c: remove redundant NULL check for dev in dma_pool_create() (Waiman Long) [1836837]
  - [x86] x86/speculation: Prevent deadlock on ssb_state::lock (Waiman Long) [1836322]
  - [netdrv] can, slip: Protect tty->disc_data in write_wakeup and close with RCU (John Linville) [1805590]
  - [netdrv] slcan: Port write_wakeup deadlock fix from slip (John Linville) [1805590]
  - [fs] ext4: fix support for inode sizes > 1024 bytes (Lukas Czerner) [1817634] {CVE-2019-19767}
  - [fs] ext4: add more paranoia checking in ext4_expand_extra_isize handling (Lukas Czerner) [1817634] {CVE-2019-19767}
  - [fs] ext4: forbid i_extra_isize not divisible by 4 (Lukas Czerner) [1817634] {CVE-2019-19767}
  - [fs] ext4: validate the debug_want_extra_isize mount option at parse time (Lukas Czerner) [1817634] {CVE-2019-19767}
  - [fs] cachefiles: Fix race between read_waiter and read_copier involving op->to_do (Dave Wysochanski) [1829662]
  - [fs] jbd2: Fix possible overflow in jbd2_log_space_left() (Lukas Czerner) [1626092]
  - [media] media: v4l: event: Add subscription to list before calling "add" operation (Jarod Wilson) [1828802] {CVE-2019-9458}
  - [media] media: v4l: event: Prevent freeing event subscriptions while accessed (Jarod Wilson) [1828802] {CVE-2019-9458}
  - [fs] block: Prevent hung_check firing during long sync IO (Ming Lei) [1724345]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1146.el7]
changelog:
  - [net] revert "rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()" (Jiri Benc) [1839608]
  - [net] ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface (Davide Caratti) [1838936]
  - [net] ipv6: Handle missing host route in __ipv6_ifa_notify (Davide Caratti) [1838936]
  - [net] ipv6: drop incoming packets having a v4mapped source address (Davide Caratti) [1838936]
  - [net] l2tp: fix infoleak in l2tp_ip6_recvmsg() (Andrea Claudi) [1837546]
  - [net] vti6: Fix memory leak of skb if input policy check fails (Patrick Talbert) [1836160]
  - [net] tcp: prevent bogus FRTO undos with non-SACK flows (Guillaume Nault) [1694860]
  - [scsi] scsi: smartpqi: fix controller lockup observed during force reboot (Don Brace) [1775369]
  - [fs] ext4: fix setting of referenced bit in ext4_es_lookup_extent() (Lukas Czerner) [1663720]
  - [fs] ext4: introduce aging to extent status tree (Lukas Czerner) [1663720]
  - [fs] ext4: cleanup flag definitions for extent status tree (Lukas Czerner) [1663720]
  - [fs] ext4: limit number of scanned extents in status tree shrinker (Lukas Czerner) [1663720]
  - [fs] ext4: move handling of list of shrinkable inodes into extent status code (Lukas Czerner) [1663720]
  - [fs] ext4: change LRU to round-robin in extent status tree shrinker (Lukas Czerner) [1663720]
  - [fs] ext4, jbd2: ensure panic when aborting with zero errno (Lukas Czerner) [1834783]
  - [fs] jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record (Lukas Czerner) [1834783]
  - [fs] jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal (Lukas Czerner) [1834783]
  - [fs] ext4: fix buffer leak in ext4_xattr_move_to_block() on error path (Lukas Czerner) [1834783]
  - [fs] ext4: fix missing return values checks in ext4_cross_rename (Lukas Czerner) [1836819]
  - [fs] ext4: Fix POSIX ACL leak in ext4_xattr_set_acl (Lukas Czerner) [1543020]
  - [vfio] vfio-pci: Mask cap zero (Alex Williamson) [1838717]
  - [x86] Mark Intel Cooper Lake (CPX) supported (Steve Best) [1773681]
  - [fs] fs/bio-integrity: don't enable integrity for data-less bio (Ming Lei) [1835943]
  - [char] ipmi_si: Only schedule continuously in the thread in maintenance mode (Alexey Klimov) [1837127]
  - [kernel] wait/ptrace: assume __WALL if the child is traced (Oleg Nesterov) [1497808]
  - [mm] mm, hugetlb, soft_offline: save compound page order before page migration (Artem Savkov) [1751589]
  - [fs] fs/hugetlbfs/inode.c: fix hwpoison reserve accounting (Artem Savkov) [1751589]
  - [fs] mm: hwpoison: dissolve in-use hugepage in unrecoverable memory error (Artem Savkov) [1751589]
  - [mm] mm: soft-offline: dissolve free hugepage if soft-offlined (Artem Savkov) [1751589]
  - [mm] mm: hugetlb: soft-offline: dissolve source hugepage after successful migration (Artem Savkov) [1751589]
  - [mm] mm: hwpoison: change PageHWPoison behavior on hugetlb pages (Artem Savkov) [1751589]
  - [mm] mm: hugetlb: prevent reuse of hwpoisoned free hugepages (Artem Savkov) [1751589]
  - [netdrv] net/mlx5: Tidy up and fix reverse christmas ordring (Alaa Hleihel) [1831134]
  - [netdrv] net/mlx5: Expose port speed when possible (Alaa Hleihel) [1831134]
  - [include] net/mlx5: Expose link speed directly (Alaa Hleihel) [1831134]
  - [usb] USB: core: Fix races in character device registration and deregistraion (Torez Smith) [1785065] {CVE-2019-19537}
  - [usb] usb: cdc-acm: make sure a refcount is taken early enough (Torez Smith) [1802548] {CVE-2019-19530}
  - [usb] USB: adutux: fix use-after-free on disconnect (Torez Smith) [1798822] {CVE-2019-19523}
  - [media] media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap (Torez Smith) [1795597] {CVE-2019-15217}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1147.el7]
changelog:
  - [nvme] nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info (Gopal Tiwari) [1839991]
  - [fs] pipe: actually allow root to exceed the pipe buffer limits (Jan Stancek) [1839629]
  - [scsi] Revert "scsi: mpt3sas: Don't change the DMA coherent mask after allocations" (Tomas Henzl) [1839128]
  - [scsi] Revert "scsi: mpt3sas: Rename function name is_MSB_are_same" (Tomas Henzl) [1839128]
  - [scsi] Revert "scsi: mpt3sas: Separate out RDPQ allocation to new function" (Tomas Henzl) [1839128]
  - [scsi] Revert "scsi: mpt3sas: Handle RDPQ DMA allocation in same 4G region" (Tomas Henzl) [1839128]
  - [netdrv] net/mlx5e: Avoid duplicating rule destinations (Alaa Hleihel) [1727593]
  - [netdrv] net/mlx5e: Extend encap entry with reference counter (Alaa Hleihel) [1727593]
  - [netdrv] net/mlx5e: Fix free peer_flow when refcount is 0 (Alaa Hleihel) [1727593]
  - [netdrv] net/mlx5e: Extend tc flow struct with reference counter (Alaa Hleihel) [1727593]
  - [netdrv] net/mlx5e: Don't make internal use of errno to denote missing neigh (Alaa Hleihel) [1727593]
  - [netdrv] net/mlx5e: Fix freeing flow with kfree() and not kvfree() (Alaa Hleihel) [1727593]
  - [drm] drm/nouveau/gr/gp107, gp108: implement workaround for HW hanging during init (Karol Herbst) [1834360 1834356 1833485]
  - [drm] drm/nouveau: workaround runpm fail by disabling PCI power management on certain intel bridges (Karol Herbst) [1834360 1834356 1833485]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1148.el7]
changelog:
  - [x86] hyper-v: Report crash data in die() when panic_on_oops is set (Mohammed Gamal) [1828450]
  - [hv] x86/hyper-v: Report crash register data when sysctl_record_panic_msg is not set (Mohammed Gamal) [1828450]
  - [x86] hyper-v: Report crash register data or kmsg before running crash kernel (Mohammed Gamal) [1828450]
  - [hv] x86/hyper-v: Trigger crash enlightenment only once during system crash (Mohammed Gamal) [1828450]
  - [hv] x86/hyper-v: Free hv_panic_page when fail to register kmsg dump (Mohammed Gamal) [1828450]
  - [hv] x86/hyper-v: Unload vmbus channel in hv panic callback (Mohammed Gamal) [1828450]
  - [hv] vmbus: Fix the issue with freeing up hv_ctl_table_hdr (Mohammed Gamal) [1828450]
  - [hv] vmus: Fix the check for return value from kmsg get dump buffer (Mohammed Gamal) [1828450]
  - [hv] Send one page worth of kmsg dump over Hyper-V during panic (Mohammed Gamal) [1828450]
  - [x86] kvm: x86: Allow suppressing prints on RDMSR/WRMSR of unhandled MSRs (Vitaly Kuznetsov) [1837412]
  - [fs] ext4: Fix race when checking i_size on direct i/o read (Lukas Czerner) [1506437]
  - [fs] copy_file_range should return ENOSYS not EOPNOTSUPP ("J. Bruce Fields") [1783554]
  - [fs] NFSv4.1 fix incorrect return value in copy_file_range ("J. Bruce Fields") [1783554]
  - [x86] Remove the unsupported check for Intel IceLake (Steve Best) [1841237]
  - [md] md/raid1: release pending accounting for an I/O only after write-behind is also finished (Nigel Croxon) [1792520]
  - [net] gre: fix uninit-value in __iptunnel_pull_header (Guillaume Nault) [1840321]
  - [net] inet: protect against too small mtu values. (Guillaume Nault) [1840321]
  - [net] Fix one possible memleak in ip_setup_cork (Guillaume Nault) [1840321]
  - [net] fix a potential recursive NETDEV_FEAT_CHANGE (Guillaume Nault) [1839130]
  - [net] fix null de-reference of device refcount (Guillaume Nault) [1839130]
  - [net] sch_choke: avoid potential panic in choke_reset() (Davide Caratti) [1839118]
  - [net] net_sched: fix datalen for ematch (Davide Caratti) [1839118]
  - [net] netem: fix error path for corrupted GSO frames (Davide Caratti) [1839118]
  - [net] avoid potential infinite loop in tc_ctl_action() (Davide Caratti) [1839118]
  - [net] net_sched: let qdisc_put() accept NULL pointer (Davide Caratti) [1839118]
  - [net] ipv4: really enforce backoff for redirects (Paolo Abeni) [1832332]
  - [net] ipv4: avoid mixed n_redirects and rate_tokens usage (Paolo Abeni) [1832332]
  - [net] ipv4: use a dedicated counter for icmp_v4 redirect packets (Paolo Abeni) [1832332]
  - [net] ipset: Update byte and packet counters regardless of whether they match (Phil Sutter) [1801366]
  - [net] xfrm: skip rt6i_idev update in xfrm6_dst_ifdown if loopback_idev is gone (Sabrina Dubroca) [1390049]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1149.el7]
changelog:
  - [mm] mm/memory_hotplug.c: only respect mem= parameter during boot stage (Joel Savitz) [1838795]
  - [netdrv] qed: Reduce the severity of ptp debug message (Manish Chopra) [1703770]
  - [kernel] pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes (Jay Shin) [1836620]
  - [fs] gfs2: remove BUG_ON() from gfs2_log_alloc_bio() (Abhijith Das) [1828454]
  - [fs] gfs2: Even more gfs2_find_jhead fixes (Abhijith Das) [1828454]
  - [fs] quota: fix return value in dqget() (Eric Sandeen) [1842761]
  - [fs] proc_sysctl.c: fix potential page fault while unregistering sysctl table (Carlos Maiolino) [1843368]
  - [fs] ext4: fix error handling in ext4_ext_shift_extents (Lukas Czerner) [1843366]
  - [vhost] vhost: Check docket sk_family instead of call getname (Vladis Dronov) [1823302] {CVE-2020-10942}
  - [input] hyperv-keyboard - add module description (Mohammed Gamal) [1842689]
  - [hv] hv: Add a module description line to the hv_vmbus driver (Mohammed Gamal) [1842689]
  - [hid] hyperv: Add a module description line (Mohammed Gamal) [1842689]
  - [x86] sched/cputime: Improve cputime_adjust() (Oleg Nesterov) [1511040]
  - [acpi] ACPI: APEI: call into AER handling regardless of severity (Al Stone) [1737246]
  - [acpi] ACPI: APEI: handle PCIe AER errors in separate function (Al Stone) [1737246]
  - [acpi] ras: acpi/apei: cper: add support for generic data v3 structure (Al Stone) [1737246]
  - [acpi] ACPICA: ACPI 6.1: Updates for the HEST ACPI table (Al Stone) [1737246]
  - [acpi] ACPI / APEI: Switch to use new generic UUID API (Al Stone) [1737246]
  - [x86] x86/efi-bgrt: Quirk for BGRT when memory encryption active (Lenny Szubowicz) [1723477]
  - [scsi] scsi: megaraid_sas: Update driver version to 07.714.04.00-rc1 (Tomas Henzl) [1840550]
  - [scsi] scsi: megaraid_sas: TM command refire leads to controller firmware crash (Tomas Henzl) [1840550]
  - [scsi] scsi: megaraid_sas: Replace undefined MFI_BIG_ENDIAN macro with __BIG_ENDIAN_BITFIELD macro (Tomas Henzl) [1840550]
  - [scsi] scsi: megaraid_sas: Limit device queue depth to controller queue depth (Tomas Henzl) [1840550]
  - [vfio] vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson) [1820632] {CVE-2020-12888}
  - [vfio] vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson) [1820632] {CVE-2020-12888}
  - [vfio] vfio/type1: Support faulting PFNMAP vmas (Alex Williamson) [1820632] {CVE-2020-12888}
  - [vfio] vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (Alex Williamson) [1820632] {CVE-2020-12888}
  - [vfio] vfio/pci: call irq_bypass_unregister_producer() before freeing irq (Alex Williamson) [1820632] {CVE-2020-12888}
  - [vfio] vfio_pci: Enable memory accesses before calling pci_map_rom (Alex Williamson) [1820632] {CVE-2020-12888}
  - [fs] signal: Extend exec_id to 64bits (Chris von Recklinghausen) [1834650] {CVE-2020-12826}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1150.el7]
changelog:
  - [netdrv] net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget (Alaa Hleihel) [1845020]
  - [mm] memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event (Waiman Long) [1842715]
  - [mm] memcg: only free spare array when readers are done (Waiman Long) [1842715]
  - [powerpc] powerpc/crashkernel: Take "mem=" option into account (Pingfan Liu) [1751555]
  - [infiniband] IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode (Kamal Heib) [1597952]
  - [security] selinux: properly handle multiple messages in selinux_netlink_send() (Ondrej Mosnacek) [1839650] {CVE-2020-10751}
  - [netdrv] net: ena: Add PCI shutdown handler to allow safe kexec (Bhupesh Sharma) [1841578]
  - [x86] x86/speculation: Support old struct x86_cpu_id & x86_match_cpu() kABI (Waiman Long) [1827188] {CVE-2020-0543}
  - [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827188] {CVE-2020-0543}
  - [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827188] {CVE-2020-0543}
  - [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827188] {CVE-2020-0543}
  - [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827188] {CVE-2020-0543}
  - [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827188] {CVE-2020-0543}
  - [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827188] {CVE-2020-0543}
  - [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827188] {CVE-2020-0543}
  - [cpufreq] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827188] {CVE-2020-0543}
  - [x86] x86/cpufeature: Fix various quality problems in the <asm/cpu_device_hd.h> header (Waiman Long) [1827188] {CVE-2020-0543}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1151.el7]
changelog:
  - [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
  - [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
  - [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
  - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
  - [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
  - [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
  - [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
  - [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
  - [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
  - [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
  - [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
  - [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
  - [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1152.el7]
changelog:
  - [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
  - [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
  - [kernel] futex: Unlock hb->lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
  - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
  - [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
  - [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
  - [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
  - [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
  - [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
  - [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
  - [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
  - [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
  - [kernel] audit: fix potential null dereference 'context->module.name' (Richard Guy Briggs) [1843370]
  - [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1153.el7]
changelog:
  - [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
  - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
  - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
  - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
  - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
  - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
  - [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1154.el7]
changelog:
  - [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
  - [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
  - [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
  - [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
  - [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
  - [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
  - [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
  - [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
  - [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
  - [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
  - [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1155.el7]
changelog:
  - [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
  - [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
  - [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
  - [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
  - [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1156.el7]
changelog:
  - [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
  - [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
  - [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
  - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1159.el7]
changelog:
  - [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
  - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
  - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1160.el7]
changelog:
  - [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
  - [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
  - [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
  - [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]


author: Denis Leroy <denis@poolshark.org> - 0.6.0-1
changelog:
  - Update to 0.6.0
  - Removed libburn support until it compiles against libisofs 0.2.8
  - Fixed project URL
  - Added patch to port to new Gtk+ tooltip interface
  - Added patch to fix filter dialog crash


author: Denis Leroy <denis@poolshark.org> - 2.25.90-1
changelog:
  - Update to upstream 2.25.90
  - Split media library into separate RPM (#483754)
  - Added patch to validate desktop files


author: Denis Leroy <denis@poolshark.org> - 2.25.91.2-1
changelog:
  - Update to upstream 2.25.91.2
  - Dvdcss patch upstreamed
  - Split nautilus extension into subpackage (#485918)


author: Matthias Clasen <mclasen@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1, fixes a number of crashes and other serious bugs:
   - Fix a crash when we try to download a missing gstreamer plugin through PK
   - Don't fail if a drive cannot be checksumed after a burn
   - Fix a data corruption when libisofs was used for a dummy session
   - Fix #596625: brasero crashed with SIGSEGV in brasero_track_data_cfg_add
   - Fix progress reporting
   ...


author: David Woodhouse <dwmw2@redhat.com> 1.0.4-4
changelog:
  - BuildRequires: sysfsutils-devel to make the horrid autoconf script magically
    change the entire package's behaviour just because it happens to find 
    slightly different header files lying around.
  - Include our own kernel-derived headers


author: Petr Sabata <contyk@redhat.com> - 1.5-1
changelog:
  - 1.5 bump
  - BuildRoot and defattr cleanup
  - Use macros in Sources
  - Drop show-ports and foreach patches -- those have been included upstream


author: Petr Sabata <contyk@redhat.com> - 1.5-2
changelog:
  - Add three latest bugfixes from upstream git on top of 1.5
  - Dropping params patch (included upstream variant)


author: Adrian Havill <havill@redhat.com> 3.2-2
changelog:
  - changed spec "Copyright" to "License"
  - use %configure macro, %{_libdir} for non-ia32 archs
  - removed unnecessary set and unset, assumed/default spec headers
  - fixed unpackaged man page, duplicate /bin and /lib entries
  - use plain install vs scripts for non-i386 buildsys


author: Tomas Janousek <tjanouse@redhat.com> - 3.8-1
changelog:
  - update to latest upstream
  - added the at-spi driver, tcl and python bindings
  - fixed the license tags


author: Stepan Kasal <skasal@redhat.com> - 3.9-3
changelog:
  - add brltty-3.9-autoconf.patch to fix to build with Autoconf 2.62
  - add brltty-3.9-parallel.patch to fix race condition with parallel make
  - add brltty-3.9-pyxfix.patch to fix build with current pyrex
  - Summary lines shall not end with a dot


author: Stepan Kasal <skasal@redhat.com> - 3.10-1
changelog:
  - new upstream release
  - drop brltty-3.9-java-svn.patch, brltty-3.9-tcl85path.patch,
    and brltty-3.9-pyxfix.patch, they are upstream
  - fix BuildRoot
  - fix many sub-packages' Requires on brlapi


author: Stepan Kasal <skasal@redhat.com> - 3.10-4
changelog:
  - own the tcl subdirectory (#474032)
  - set CPPFLAGS to java include dirs, so that the java bindings build with
    any java implementation (#498964)
  - add --without-curses; there is no curses package BuildRequired anyway


author: Stepan Kasal <skasal@redhat.com> - 4.0-1
changelog:
  - new upstream version
  - drop upstreamed patches; ./autogen not needed anymore
  - pack the xbrlapi server; move its man page to brlapi package
  - add man-page for brltty.conf (#526168)


author: Stepan Kasal <skasal@redhat.com> - 4.0-2
changelog:
  - escape rpm macros in the rpm change log
  - add requires to bind subpackages from one build together


author: Stepan Kasal <skasal@redhat.com> - 4.1-1
changelog:
  - new upstream version
  - use --disable-stripping instead of make variable override
  - install the default brltty-pm.conf to docdir only (#526168)
  - remove the duplicate copies of rhmkboot and rhmkroot from docdir
  - patch configure so that the dirs in summary are not garbled:
    brltty-autoconf-quote.patch
  - move data-directory to ${datadir}/brltty


author: Stepan Kasal <skasal@redhat.com> - 4.1-2
changelog:
  - move data-directory back to default: /etc/brltty
  - move brltty to /bin and /lib, so that it can be used to repair the system
    without /usr mounted (#276181)
  - move vstp and libbrlttybba.so to brlapi
  - brltty no longer requires brlapi
  - brlapi now requires brltty from the same build


author: Stepan Kasal <skasal@redhat.com> - 4.1-3
changelog:
  - build the TTY driver (it was disabled since it first appered in 3.7.2-1)
  - build with speech-dispatcher, packed into a separate sub-package


author: Jon Ciesla <limb@jcomserv.net> - 4.3-1
changelog:
  - New upstream.
  - S_ISCHR patch upstreamed.
  - parallel patch updated.
  - Cleaned up some file encodings.


author: Jon Ciesla <limburgher@gmail.com> - 4.5-5
changelog:
  - Add systemd unit file, BZ 916628.
  - Drop spurious post scripts.
  - Move eveything but man pages and license files top -docs.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-10
changelog:
  - Hardened build
    Resolves: rhbz#1092547
  - Fixed Braille display emulator to start
    Resolves: rhbz#1304725


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-11
changelog:
  - Fixed Braille characters not displaying in the XW driver window
    Resolves: rhbz#1324669
  - Added AT-SPI2 driver
    Resolves: rhbz#1324672
  - Fixed requirements
    Resolves: rhbz#1324850


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-12
changelog:
  - Improved fix for Braille characters not displaying in the XW driver window
    Related: rhbz#1324669


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-13
changelog:
  - Made brltty-config executable, currently useless, but FHS compliant
    Resolves: rhbz#1332981
  - Fixed multilib
    Related: rhbz#1324850


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-14
changelog:
  - Rebuilt for new architectures
    Resolves: rhbz#1379884
  - Added fix to support compilation with ocaml-4.04.0
    Resolves: rhbz#1393750


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-15
changelog:
  - Fixed build in case ocaml is preinstalled in the build root and
    support shouldn't be built
    Resolves: rhbz#1443907


author: Josef Bacik <josef@toxicpanda.com> 0.15-2
changelog:
  -Removed a . at the end of the description
  -Fixed the copyright to be GPLv2 since GPL doesn't work anymore


author: Eric Sandeen <sandeen@redhat.com> 0.20.rc1.20130917git194aa4a-1
changelog:
  - New upstream snapshot
  - Deprecated btrfsctl, btrfs-show, and btrfs-vol; still available in btrfs cmd


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to the version in FreeBSD CVS - it's actively maintained, unlike
    the 1993 4BSD version we used to have


author: Petr Machata <pmachata@redhat.com> - 1.9.20050813-1
changelog:
  - Thomas Dickey's 20050813 version of byacc:
    - own build system (linux patch reverted)
    - use tmpfile (security patch reverted)
  - Tidy up the specfile per rpmlint comments


author: Matthias Saou <http://freshrpms.net/> 1.9.20050813-2
changelog:
  - Update summary.
  - Remove useless doc copying in install section.
  - Add NOTES and NO_WARRANTY docs.


author: Petr Machata <pmachata@redhat.com> - 1.9.20100610-1
changelog:
  - Rebase to 20100610
  - Update the description in accordance with upstream spec template
  - Resolves: #643598


author: Petr Machata <pmachata@redhat.com> - 1.9.20111219-1
changelog:
  - Rebase to 20111219
    - add "-s" option
    - Resolves: #769237
  - Revert default stack size to 10000
    - Related: #743343


author: Tania Bento <tbento@redhat.com> - 0:1.11-2jpp.1
changelog:
  - Fixed the %Release tag.
  - Changed the %License tag.
  - Fixed the %BuildRoot tag.
  - Removed the %Vendor tag.
  - Removed the %Distribution tag.
  - Removed the %BuildRequires: gcc and make tags as these d not need to be
  listed.
  - Removed "%define section free".
  - Added "sed -i 's/\r//g docs/tf.y' to fix a warning generated by
  rpmlint.
  - Fixed the %Source0 tag.
  - Changed the %Group tag.
  - Installed man pages in proper directory.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - force compilation with egcs to avoid gcc optimization bug (thank God 
    we haven't been beaten by it)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - autoconfed and libtoolized package 
  - fixed Copyright (it's BSD, not GPL)
  - dumped bzless (less works fine with bz2-files)
  - rewrote build and install parts
  - separated main package and devel package


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - FHS packaging to build on solaris2.5.1.
  - remove config.cache from autoconf patch.
  - sparc: use %configure, but not the m4 macros.


author: Trond Eivind Glomsrød <teg@redhat.com> 1.0.1-5
changelog:
  - Don't segfault when infile is a directory and "-f" is used (#56623)
  - Automake is evil. Add workaround


author: Trond Eivind Glomsrød <teg@redhat.com> 1.0.2-1
changelog:
  - 1.0.2
  - Total overhaul of build precedure
  - Add many small helper programs added to 1.0.2
  - drop old patches


author: Toshio Kuratomi <a.badger@gmail.com> - 0.90-0.1.rc1
changelog:
  - Update to 0.90rc1.
  - 0.90 contains some pyrex code to speed things up.  bzr is now arch specific.
  - Update license tag.


author: Toshio Kuratomi <a.badger@gmail.com> - 1.1-1
changelog:
  - Upstream 1.1 bugfix and performance enhancement release.
  - Enable bash completion script from the contrib directory.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.3.1-0.1.rc1
changelog:
  - Update to 1.3.1rc1 to fix a bug when you have a pack based remote repo and
    knit based local branch.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 2.1.0-0.1.b1
changelog:
  - Highlights for this release include support for `bzr+ssh://host/~/homedir`
    style urls, finer control over the plugin search path via extended
    BZR_PLUGIN_PATH syntax, visible warnings when extension modules fail to
    load, and improved error handling during unlocking.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 2.1.0-0.6.rc2
changelog:
  - Build HTML documentation and package in separate bzr-doc package
    (Bug #562392, Patch by Cheese Lee)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.2-0.6.b1
changelog:
  - Add an icon for bzr.  This lets the gtk and qbzr plugins share the same icon
    for things like associating an image with a file type.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.5.1-12
changelog:
  - Patch for failure to gpg sign commits with no gpg-agent 
    https://bugzilla.redhat.com/show_bug.cgi?id=905087


author: Ville Skyttä <ville.skytta at iki.fi> - 1.6.0-3
changelog:
  - Patch to make upstream build system honor our CFLAGS and friends.
  - Don't bother building throwaway static libs.
  - Disable autotools dependency tracking for cleaner build logs and possible
    slight build speedup.
  - Convert docs to UTF-8.
  - Update URLs.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.3-1
changelog:
  - Upgrade to new upstream release 1.7.3 (obsoletes search/domain patch)
  - Fix conflict of -devel packages on multilib architectures (#602880)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.5-1
changelog:
  - New upstream release 1.7.5
  - Obsoletes patch #2
  - Rebase patch #1 (optflags) to match the 1.7.5 code
  - Fixed Source0 URL to point at the upstream tarball


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5
changelog:
  - Apply a patch by Stephen Gallagher to patch autoconf, not configure to
    allow optflags to be passed in by build environment
  - Run autoreconf before configure
  - git rm obsolete patches
  - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1
changelog:
  - New upstream release 1.10
  - Obsolete upstreamed patches
  - Amend the multilib patch, there's no need to patch configure since we
    are running autoreconf anyways
  - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES


author: Steve Dickson <steved@redhat.com> 0.2-1
changelog:
  - Made the daemon 64-bit application.
  - Changed the syslog logging to log the daemon's PID
  - Changed OS error logging to log errno number as well the string


author: Steve Dickson <steved@redhat.com> 0.4-3
changelog:
  - Updated init.d script to look for cachefilesd in /sbin
  - Added postun and preun rules so cachefilesd is stopped
    and started when the rpm is updated or removed.


author: David Howells <dhowells@redhat.com> 0.8-1
changelog:
  - Use /dev/cachefiles if it present in preference to /proc/fs/cachefiles.
  - Use poll rather than SIGURG on /dev/cachefilesd.


author: David Howells <dhowells@redhat.com> 0.8-15
changelog:
  - Made cachefilesd ask the kernel whether cullable objects are in use and omit
    them from the cull table if they are.
  - Made the size of cachefilesd's culling tables configurable.
  - Updated the manual pages.


author: David Howells <dhowells@redhat.com> 0.9-1
changelog:
  - The cachefiles module no longer accepts directory fds on cull and inuse
    commands, but rather uses current working directory.


author: David Howells <dhowells@redhat.com>
changelog:
  - Must include sys/stat.h to use stat() and co. [RH BZ 565135].
  - Remove tail comments from functions.


author: David Howells <dhowells@redhat.com> 0.10.1-1
changelog:
  - The SELinux policies for cachefilesd now live in the selinux-policy RPM, so
    the cachefilesd-selinux RPM is now redundant.
  - Move the default cache dir to /var/cache/fscache.
  - Make the initscript do a restorecon when starting the cache to make sure the
    labels are correct.
  - Fix a wildchar that should be a literal dot in the SELinux policy.


author: David Howells <dhowells@redhat.com> 0.10.6-1
changelog:
  - Note the correct licence.
  - Handle malformed kernel status correctly.
  - Permit culling to be disabled on the command line with the -N flag.
  - Suspend culling when cache space is short and cache objects are pinned.


author: David Howells <dhowells@redhat.com> 0.10.8-1
changelog:
  - Use systemd interaction macros in specfile installation sections [RH BZ 850053].
  - Fix the service file to use /usr/sbin/ rather than /sbin/.
  - Turn on RELRO and PIE build hardening in RPM builds (#1092561).


author: Kristian Høgsberg <krh@redhat.com> - 0.2.0-1
changelog:
  - Incorporate changes suggested by katzj: Require: ldconfig and run it
    in %post and %postun, don't pass CFLAGS to make.


author: Kristian Høgsberg <krh@redhat.com> - 0.5.1-1
changelog:
  - Update to cairo 0.5.1.
  - Remove gtk-doc files, since --disable-gtk-doc doesn't work.
  - Disable gtk-doc and add freetype and fontconfig BuildRequires.


author: Kristian Høgsberg <krh@redhat.com> - 0.5.1-2
changelog:
  - Package gtk docs as part of devel package.
  - Nuke static library.
  - Update devel files so /usr/include/cairo is owned by devel package.


author: Kristian Høgsberg <krh@redhat.com> - 0.5.1-4
changelog:
  - Add more missing devel package requires (libpng-devel and
    xorg-x11-devel) (#161688)
  - Add Owens patch (cairo-0.5.1-bitmap-fonts.patch) to make bitmap
    fonts work with cairo (#161653).


author: Kristian Høgsberg <krh@redhat.com> - 0.6.0-2
changelog:
  - Add cairo-0.6.0-font-options-to-scaled-font.patch to make sure font
    cache eviction works correctly (#164664).


author: Kristian Høgsberg <krh@redhat.com> 0.9.2-1
changelog:
  - Update to cairo 0.9.2.  Add Obsoletes: for libpixman <= 0.1.6.
  - Drop cairo-0.6.0-font-options-to-scaled-font.patch.


author: Kristian Høgsberg <krh@redhat.com> 0.9.2-1
changelog:
  - Also obsolete libpixman-debuginfo.
  - Add cairo-0.9.2-cache-eviction-fix.patch to fix ft font cache eviction.


author: Kristian Høgsberg <krh@redhat.com> 0.9.2-3
changelog:
  - Add cairo-0.9.2-dont-hash-null-string.patch to avoid crash when
    creating a cairo font from a FT_Face.


author: Kristian Høgsberg <krh@redhat.com> - 1.0.0-1
changelog:
  - Update to cairo-1.0.0.
  - Drop cairo-0.9.2-cache-eviction-fix.patch and
    cairo-0.9.2-dont-hash-null-string.patch.


author: Carl Worth <cworth@redhat.com> - 1.1.2-1
changelog:
  - Update to new upstream 1.1.2
  - Port forward the embedded bitmaps patch (now committed upstream to
    1.1.3)
  - Drop build-fix and chunk-glyphs patches which now come from upstream


author: Carl Worth <cworth@redhat.com> - 1.1.2-2
changelog:
  - Add suggested patch for XRenderAddGlyphs crash of bug #4705
    https://bugs.freedesktop.org/show_bug.cgi?id=4705


author: Carl Worth <cworth@redhat.com> - 1.1.4-1
changelog:
  - Update to new upstream 1.1.4
  - Drop both embedded-bitmaps and XRenderAddGlyphs patches as both now
    have upstream versions


author: Carl Worth <cworth@redhat.com> - 1.1.4-2
changelog:
  - Revert upstream commit that introduced a dependency on a newer
    poppler version for the PDF tests.


author: Ray Strode <rstrode@redhat.com> - 1.2.2-2
changelog:
  - add lame libXt-devel BuildReq to get things building again.
  - small spec tweaks to follow conventions


author: Behdad Esfahbod <besfahbo@redhat.com> 1.2.2-3
changelog:
  - Remove unnecessary --disable-* arguments to configure, add --enable-*
    for those backends we really want to make sure are enabled.


author: Adam Jackson <ajax@redhat.com> 1.8.6-3
changelog:
  - cairo-1.8.6-repeat-modes.patch: Enable the repeat and pad blend modes in
    the xlib backend to make firefox performance slightly less dire.


author: Adam Jackson <ajax@redhat.com> 1.12.6-2
changelog:
  - *-x{c,li}b-Don-t-crash-when-swapping-a-0-sized-glyph.patch: Fix some
    crashes when client and server endian don't match.


author: Rick L Vinyard Jr <rvinyard@cs.nmsu.edu> - 0.6.0-1
changelog:
  - New upstream version should fix the upstream issues like AUTHORS and README
  - Added pkgconfig to cairomm BuildRequires and cairomm-devel Requires
  - Replaced makeinstall
  - Fixed devel package description
  - Modified includedir syntax
  - docs included via the mv in install and in the devel files as html dir


author: Rick L Vinyard Jr <rvinyard@cs.nmsu.edu> - 1.1.10-1
changelog:
  - First release for cairo 1.2
  - Adjusted cairo dependencies for new version
  - Docs were in html, moved to reference/html


author: Rick L Vinyard Jr <rvinyard@cs.nmsu.edu> - 1.4.2-1
changelog:
  - New upstream release
  - Changed install to preserve timestamps
  - Removed mv of docs/reference and include files directly


author: Rick L Vinyard Jr <rvinyard@cs.nmsu.edu> - 1.9.1-1
changelog:
  - New upstream release
  - Removed html docs from -devel package
  - Seperated requires into one per line
  - Fixed devhelp docs


author: Haïkel Guémar <hguemar@fedoraproject.org> - 1.9.8-1
changelog:
  - upstream 1.9.8
  - fix issues with f15/rawhide (RHBZ #676878)
  - drop gtk-doc dependency (RHBZ #604169)


author: Kalev Lember <kalevlember@gmail.com> - 1.10.0-1
changelog:
  - Update to 1.10.0
  - Have the -doc subpackage depend on the base package
  - Modernize the spec file
  - Really own /usr/share/devhelp directory


author: Parag Nemade <pnemade AT redhat.com> - 0.2.00-2
changelog:
  - Caribou now only be shown in GNOME. (rh#698603)
  - Add desktop-file-validate for caribou-autostart.desktop
  - Add ||: for caribou-autostart.desktop to skip the error.


author: Parag Nemade <pnemade AT redhat DOT com> - 0.4.5-1
changelog:
  - Update to 0.4.5
  - Resolves:rh#744852 - Pressing | in on-screen keyboard produces <
  - Resolves:rh#880379 - Another service acquired %s, quitting..
  - Resolves:rh#880382


author: Peter Jones <pjones@redhat.com>
changelog:
  - updated package for alpha9.7, based on input from:
    Monty <xiphmont@xiph.org> 
    David Philippi <david@torangan.saar.de>


author: Peter Jones <pjones@redhat.com>
changelog:
  - update package to provide cdparanoia-alpha9.7-2.*.rpm and 
    cdparanoia-devel-alpha9.7-2.*.rpm.  Also, URLs point at xiph.org
    like they should.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Switched spec file from the one used in Red Hat Linux 6.2, which
    also changes the name
  - gzip man page


author: Peter Jones <pjones@redhat.com> alpha9.8-5
changelog:
  - make a -libs package which contains the .so files
  - make the cdparanoia dependancy towards that, not -devel


author: Peter Jones <pjones@redhat.com> alpha9.8-23
changelog:
  - "This time, with a meaningful changelog" release.  Just like -22.
  - new SG_IO code in rawhide.  This means ripping will no longer use the 
    "cooked ioctl" mode that it has since we moved to 2.6, instead utilizing
    the real scsi-based command set to talk to most drives.  This should
    result in better error correction handling, and usage of much more
    commonly used kernel features.
  - environment variable "CDDA_TRANSPORT" added.  If you set this to "cooked",
    cdparanoia will try to use the "cooked ioctl" mode instead of SCSI/SG_IO
    based modes first, and then fall back to SG_IO.
  - It'd be good if this got some testing.  A prior version of the SG_IO code
    was known to fail on some USB drives.  This version should mitigate that
    quite a bit, but I lack the hardware to test it for sure.


author: Adam Jackson <ajax@redhat.com> alpha9.8-29
changelog:
  - cdparanoia-III-alpha9.8.scsi-setspeed.patch: Allow setting the speed of
    SCSI CD drives. (#431178)


author: Adam Jackson <ajax@redhat.com> alpha9.8-30
changelog:
  - Add -Werror-implicit-function-declarations.
  - cdparanoia-III-alpha9.8-headers.patch: Fix the resulting errors.


author: Adam Jackson <ajax@redhat.com> 10.2-3
changelog:
  - cdparanoia-10.2-endian.patch: Backport a crash fix for host/drive
    endianness mismatch. (#466659)


author: Matthias Saou <http://freshrpms.net/> 10.2-6
changelog:
  - Fix all of the problems detected during the review which aren't acceptable
    according to the current policies and guidelines (part of #225638).
  - Don't prefix summaries with "A" nor suffix them with a dot.
  - Move .so symlink to the devel sub-package (#203620).
  - Add highest known version to the cdparanoia-III obsoletes.
  - Remove incorrect buildroot removal from %build.
  - Use acceptable %clean section.
  - Provide cdparanoia-static in the devel sub-package since the *.a is there.
  - Use single-command scriplet syntax for /sbin/ldconfig calls.
  - Escape all macros in changelog.
  - Include license file since it is present with the sources.


author: Peter Jones <pjones@redhat.com> - 10.2-8
changelog:
  - Incorporate changes from Matthias Saou:
  - Include install patch, to avoid all of the ugly manual installation.
  - Cosmetic fixes (libs group, scriplets, don't mix %name with hardcode...).


author: Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 10.2-15
changelog:
  - Patched configure to use config.{guess,sub} files so 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-Anolis-linux --host=x86_64-Anolis-linux \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info macro can
    replace them with proper version. With this change it builds fine for AArch64
    architecture.
    Resolves: rhbz#1023783


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - gtk-- does not wokr on the alpha, so we have no xcdrdao for it.
  - cheesy workaround for the broken tar archive


author: Tim Powers <timp@redhat.com>
changelog:
  - removed all references to xcdrdao, we don't ship it. So no applnk, no gtkmm
    requirements either.


author: Mike A. Harris <mharris@redhat.com> 1.1.5-1
changelog:
  - Updated to 1.1.5
  - Updated endianness patch for ia64
  - s/Copyright/License/ in specfile
  - Changed to bz2 compression for smaller sources
  - Fixed BuildRoot line (was hard coded)


author: Mike A. Harris <mharris@redhat.com> 1.1.5-2
changelog:
  - Bumped release and rebuilt so rawhide package doesn't release number
    conflict with previous 1.1.5-1 package built against 7.2


author: Denis Leroy <denis@poolshark.org> - 1.2.3-0.rc2.1
changelog:
  - Update to latest 1.2.3 release candidate
  - Merged with gcdmaster spec file
  - Added scripts to manage gcdmaster new schemas file
  - Moved desktop file fix into patch
  - Added patch to fix gcc 4.4 compile


author: Nikola Pajkovsky <npajkovs@redhat.com> - 1.2.3-4
changelog:
  - Merge review #225639
  - no need option --with-mp3-support. it needs libmad(don't ship)
  - change license to GPLv2+


author: Harald Hoyer <harald@redhat.com> - 1.1.6-4
changelog:
  - play stupid tricks, to let alternatives make the links and
    rpm not removing them afterwards
  - removed bogus warning for "." and ".."


author: Roman Rakus <rrakus@redhat.com> - 1.1.8-1
changelog:
  - Version 1.1.8 - old patches included
                  - added bzip2-devel to build requirements
  - fixed #171510 - preserve directory permissions


author: Roman Rakus <rrakus@redhat.com> - 1.1.9-6
changelog:
  - rename functions as they conflict with glibc
  - Don't push cdda2mp3 because we don't have any mp3 coder
    Resolves: #505918


author: Honza Horak <hhorak@redhat.com> 1.1.11-2
changelog:
  - fixed man page missing arguments (Resolves: #647024)
    https://bugzilla.redhat.com/show_bug.cgi?id=647024
  - fixed erroneous "Unknown file type (unallocated)" warning 
    (Resolves: #174667)
    https://bugzilla.redhat.com/show_bug.cgi?id=174667


author: Honza Horak <hhorak@redhat.com> - 1.1.11-4
changelog:
  - Library libusal is installed in order to be used by other apps
    (Resolves: #588508)
    https://bugzilla.redhat.com/show_bug.cgi?id=588508


author: Honza Horak <hhorak@redhat.com> - 1.1.11-12
changelog:
  - Use system cdparanoia instead of old bundled version
  - Build libusal as a shared library
  - Messages from rpmlint clean-up


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-18
changelog:
  - ported from cdda-paranoia to libcdio-paranoia, modified paranoia-cdda.patch
  - fixed bogus date in changelog


author: Jakub Martisko <jamartis@redhat.com> - 1.1.11-25
changelog:
  - add support for device names of the form /dev/srN
  - fix provided by Frantisek Kluknavsky
  - resolves:rhbz#1058446


author: Jonathan Dieter <jdieter@lesbg.com> 0.19.1-2
changelog:
  - Add missing libhadoopcephfs.so* to file list
  - Add COPYING to all subpackages
  - Fix ownership of /usr/lib[64]/ceph
  - Enhance description of fuse client


author: Sage Weil <sage@newdream.net> 0.19.1-5
changelog:
  - Remove java deps (no need to build hadoop by default)
  - Include all required librados helpers
  - Include fetch_config sample
  - Include rbdtool
  - Remove misc debugging, test binaries


author: Steven Pritchard <steve@kspei.com> 0.21.1-1
changelog:
  - Update to 0.21.1.
  - Sample configs moved to /usr/share/doc/ceph/.
  - Added cclass, rbd, and cclsinfo.
  - Dropped mkmonfs and rbdtool.
  - mkcephfs moved to /sbin.
  - Add libcls_rbd.so.


author: David Nalley <david@gnsa.us> 0.37-1
changelog:
  - create /etc/ceph - bug 745462
  - upgrading to 0.37, fixing 745460, 691033
  - fixing various logrotate bugs 748930, 747101


author: Michael Schwendt <mschwendt@fedoraproject.org> - 0.61.7-3
changelog:
  - let base package include all its documentation files via %doc magic,
    so for Fedora 20 Unversioned Docdirs no files are included accidentally
  - include the sample config files again (instead of just an empty docdir
    that has been added for #846735)
  - don't include librbd.so.1 also in -devel package (#1003202)
  - move one misplaced rados plugin from -devel into -libs package (#891993)
  - include missing directories in -devel and -libs packages
  - move librados-config into the -devel pkg where its manual page is, too
  - add %_isa to subpackage dependencies
  - don't use %defattr anymore
  - add V=1 to make invocation for verbose build output


author: Ken Dreyer <ken.dreyer@inktank.com> 0.72.2-1
changelog:
  - Update to latest stable upstream release
  - Use HTTPS for URLs
  - Submit Automake 1.12 patch upstream
  - Move unversioned shared libs from ceph-libs into ceph-devel


author: Boris Ranto <branto@redhat.com> - 1:0.80.5-1
changelog:
  - Bump the Epoch, we need to keep the latest stable, not development,
    ceph version in fedora
  - Use the upstream spec file with the ceph-libs split
  - Add libs-compat subpackage [1116546]
  - use fedora in rhel 7 checks
  - obsolete libcephfs [1116614]
  - depend on redhat-lsb-core for the initscript [1108696]


author: Boris Ranto <branto@redhat.com> - 1:0.80.5-5
changelog:
  - Do not require xfsprogs/xfsprogs-devel for el6
  - Require gperftools-devel for non-ppc*/s390* architectures only
  - Do not require junit -- no need to build libcephfs-test.jar
  - Build without libxfs for el6
  - Build without tcmalloc for ppc*/s390* architectures
  - Location of mkcephfs must depend on a rhel release
  - Use epoch in the Requires fields [1130700]


author: Boris Ranto <branto@redhat.com> - 1:0.80.5-8
changelog:
  - Revert the previous change
  - Fix bz 1118504, second attempt (yasm appears to be the package that caused this


author: Boris Ranto <branto@redhat.com> - 1:10.2.5-1
changelog:
  - New version (1:10.2.5-1)
  - Makefile: Fix dencoder build
  - Add fake fcgiapp.h for rgw
  - common: Build more files of libcommon in client
  - libradosstripper: Build libradostripper for rados as noinst


author: Nalin Dahyabhai <nalin@redhat.com> 0.5-1
changelog:
  - update to 0.5
    - packaging fixes
    - add a selfsign-getcert client
    - self-signed certs now get basic constraints and their own serial numbers
    - accept id-ms-kp-sc-logon as a named EKU value in a request


author: Nalin Dahyabhai <nalin@redhat.com> 0.6-1
changelog:
  - update to 0.6
    - man pages
    - 'getcert stop-tracking' actually makes the server forget now
    - 'getcert request -e' was redundant, dropped the -e option
    - 'getcert request -i' now sets the request nickname
    - 'getcert start-tracking -i' now sets the request nickname


author: Nalin Dahyabhai <nalin@redhat.com> 0.7-1
changelog:
  - update to 0.7
    - first cut at a getting-started document
    - refactor some internal key handling with NSS
    - check for duplicate request nicknames at add-time


author: Nalin Dahyabhai <nalin@redhat.com> 0.8-1
changelog:
  - update to 0.8
    - encode windows UPN values in requests correctly
    - watch for netlink routing changes and restart stalled submission requests
    - 'getcert resubmit' can force a regeneration of the CSR and submission


author: Nalin Dahyabhai <nalin@redhat.com> 0.9-1
changelog:
  - update to 0.9
    - run external submission helpers correctly
    - fix signing of signing requests generated for keys stored in files
    - only care about new interface and route notifications from netlink,
      and ignore notifications that don't come from pid 0
    - fix logic for determining expiration status
    - correct the version number in self-signed certificates


author: Nalin Dahyabhai <nalin@redhat.com> 0.11-1
changelog:
  - update to 0.11
    - add XML-RPC submission for certmaster and IPA
    - prune entries with duplicate names from the data store


author: Nalin Dahyabhai <nalin@redhat.com> 0.12-1
changelog:
  - update to 0.12
    - add a crucial bit of error reporting when CAs reject our requests
    - count the number of configured CAs correctly


author: Nalin Dahyabhai <nalin@redhat.com> 0.13-1
changelog:
  - update to 0.13
    - change the default so that we default to trying to auto-refresh
      certificates unless told otherwise
    - preemptively enforce limitations on request nicknames so that they
      make valid D-Bus object path components


author: Nalin Dahyabhai <nalin@redhat.com> 0.14-1
changelog:
  - update to 0.14
    - check key and certificate location at add-time to make sure they're
      absolute paths to files or directories, as appropriate
    - IPA: dig into the 'result' item if the named result value we're looking
      for isn't in the result struct


author: Nalin Dahyabhai <nalin@redhat.com> 0.15-1
changelog:
  - update to 0.15
    - notice that a directory with a trailing '/' is the same location as the
      directory without it
    - fix handling of the pid file when we write one (by actually giving it
      contents)


author: Nalin Dahyabhai <nalin@redhat.com> 0.17-1
changelog:
  - update to 0.17
    - fix a hang in the daemon (Rob Crittenden)
    - documentation updates
    - fix parsing of submission results from IPA (Rob Crittenden)


author: Nalin Dahyabhai <nalin@redhat.com> 0.17-2
changelog:
  - make the D-Bus configuration file (noreplace) (#541072)
  - make the %check section and the deps we have just for it conditional on
    the same macro (#541072)


author: Nalin Dahyabhai <nalin@redhat.com> 0.18-1
changelog:
  - update to 0.18
    - add support for using encrypted storage for keys, using PIN values
      supplied directly or read from files whose names are supplied
    - don't choke on NSS database locations that use the "sql:" or "dbm:"
      prefix


author: Nalin Dahyabhai <nalin@redhat.com> 0.19-1
changelog:
  - update to 0.19
    - correctly initialize NSS databases that need to be using a PIN
    - add certmonger.conf, for customizing notification timings and settings,
      and use of digests other than the previously-hard-coded SHA256, and
      drop those settings from individual requests
    - up the default self-sign validity interval from 30 days to 365 days
    - drop the first default notification interval from 30 days to 28 days
      (these two combined to create a fun always-reissuing loop earlier)
    - record the token which contains the key or certificate when we're
      storing them in an NSS database, and report it
    - improve handling of cases where we're supposed to use a PIN but we
      either don't have one or we have the wrong one
    - teach getcert to accept a PIN file's name or a PIN value when adding
      a new entry
    - update the IPA submission helper to use the new 'request_cert' signature
      that's landing soon
    - more tests


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - update to 0.20
    - correctly parse certificate validity periods given in years (spotted by
      Stephen Gallagher)
    - setup for translation
      - es by Héctor Daniel Cabrera!
      - ru by Yulia Poyarkova!
      - uk by Yuri Chornoivan!
    - fix unpreprocessed defaults in certmonger.conf's man page
    - tweak the IPA-specific message that indicates a principal name also needs
      to be specified if we're not using the default subject name (#579542)
    - make the validity period of self-signed certificates into a configuration
      setting and not a piece of the state information we track about the signer
    - init script: exit with status 2 instead of 1 when invoked with an
      unrecognized argument (#584517)


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-1
changelog:
  - update to 0.21
    - getcert/*-getcert: relay the desired CA to the local service, whether
      specified on the command line (in getcert) or as a built-in hard-wired
      default (in *-getcert) (#584983)
    - flesh out the default certmonger.conf so that people can get a feel for
      the expected formatting (Jenny Galipeau)


author: Nalin Dahyabhai <nalin@redhat.com> 0.22-1
changelog:
  - update to 0.22
    - new translations
      - de by Fabian Affolter!
    - certmaster-submit: don't fall over when we can't find a certmaster.conf
      or a minion.conf (i.e., certmaster isn't installed) (#588932)
    - when reading extension values from certificates, prune out duplicate
      principal names, email addresses, and hostnames


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - update to 0.23
    - new translations
      - pl by Piotr Drąg!
    - cancel daemon startup if we can't gain ownership of our well-known
      service name on the DBus (#596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-1
changelog:
  - update to 0.24
    - keep the lock on the pid file, if we have one, when we fork, and cancel
      daemon startup if we can't gain ownership of the lock (the rest of #596719)
    - make the man pages note which external configuration files we consult when
      submitting requests to certmaster and ipa CAs


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-2
changelog:
  - don't create the daemon pidfile until after we've connected to the D-Bus
    (still more of #596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-3
changelog:
  - more gracefully handle manual daemon startups and cleaning up of unexpected
    crashes (still more of #596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-4
changelog:
  - init script: ensure that the subsys lock is created whenever we're called to
    "start" when we're already running (even more of #596719)


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - update to 0.25
    - new translations
      - in by Okta Purnama Rahadian!
    - fix detection of cases where we can't access a private key in an NSS
      database because we don't have the PIN
    - teach '*getcert start-tracking' about the -p and -P options which the
      '*getcert request' commands already understand (#621670), and also
      the -U, -K, -E, and -D flags
    - double-check that the nicknames of keys we get back from
      PK11_ListPrivKeysInSlot() match the desired nickname before accepting
      them as matches, so that our tests won't all blow up on EL5
    - fix dynamic addition and removal of CAs implemented through helpers


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - update to 0.26
    - when canceling a submission request that's being handled by a helper,
      reap the child process's status after killing it (#624120)


author: Nalin Dahyabhai <nalin@redhat.com> 0.28-1
changelog:
  - update to 0.28
    - fix self-signing certificate notBefore and notAfter values on 32-bit
      machines


author: Nalin Dahyabhai <nalin@redhat.com> 0.29-1
changelog:
  - update to 0.29
    - fix 64-bit cleanliness issue using libdbus
    - actually include the full set of tests in tarballs


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - update to 0.30
    - fix errors computing the time at the end of an interval that were
      caught by self-tests


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-2
changelog:
  - try to SIGHUP the messagebus daemon at first install so that it'll
    let us claim our service name if it isn't restarted before we are
    first started (#636876)


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-4
changelog:
  - explicitly require "dbus" to try to ensure we have a running system bus
    when we get started (#639126)


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-1
changelog:
  - oops, rfc5280 says we shouldn't be populating unique identifiers, so
    make it a configuration option and default the behavior to off


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-2
changelog:
  - depend on the e2fsprogs libuuid on Fedora and RHEL releases where it's
    not part of util-linux-ng


author: Nalin Dahyabhai <nalin@redhat.com> 0.33-1
changelog:
  - update to 0.33
    - new translations
      - id by Okta Purnama Rahadian!
    - updated translations
      - pl, uk
    - roll up assorted fixes for defects


author: Nalin Dahyabhai <nalin@redhat.com> 0.34-1
changelog:
  - update to 0.34
    - explicitly note the number of requests we're tracking in the output of
      "getcert list" (#652049)
    - try to offer some suggestions when we get certain specific errors back
      in "getcert" (#652047)
    - updated translations
      - es


author: Nalin Dahyabhai <nalin@redhat.com> 0.35.1-1
changelog:
  - fix a self-test that broke because one-year-from-now is now a day's worth
    of seconds further out than it was a few days ago


author: Nalin Dahyabhai <nalin@redhat.com> 0.36-1
changelog:
  - update to 0.36
    - fix some use-after-free bugs in the daemon (#689776)
    - fix a copy/paste error in certmonger-ipa-submit(8)
    - getcert now suppresses error details when not given its new -v option
      (#683926, more of #681641/#652047)
    - updated translations
      - de, es, pl, ru, uk
      - indonesian translation is now for "id" rather than "in"


author: Nalin Dahyabhai <nalin@redhat.com> 0.37-1
changelog:
  - update to 0.37
    - be more careful about checking if we can read a PIN file successfully
      before we even call an API that might need us to try (#688229)
    - fix strict aliasing warnings


author: Nalin Dahyabhai <nalin@redhat.com> 0.38-1
changelog:
  - update to 0.38
    - catch cases where we can't read a PIN file, but we never have to log
      in to the token to access the private key (more of #688229)


author: Nalin Dahyabhai <nalin@redhat.com> 0.39-1
changelog:
  - update to 0.39
    - fix use of an uninitialized variable in the xmlrpc-based submission
      helpers (#690886)


author: Nalin Dahyabhai <nalin@redhat.com> 0.40-1
changelog:
  - update to 0.40
    - fix validation check on EKU OIDs in getcert (#691351)
    - get session bus mode sorted
    - add a list of recognized EKU values to the getcert-request man page


author: Nalin Dahyabhai <nalin@redhat.com> 0.41-1
changelog:
  - read information about the keys we've just generated before proceeding
    to generating a CSR (part of #694184, part of #695675)
  - when processing a "resubmit" request from getcert, go back to key
    generation if we don't have keys yet, else go back to CSR generation as
    before (#694184, #695675)
  - configure with --with-tmpdir=/var/run/certmonger and own /var/run/certmonger
    (#687899), and add a systemd tmpfiles.d control file for creating
    /var/run/certmonger on Fedora 15 and later
  - let session instances exit when they get disconnected from the bus
  - use a lock file to make sure there's only one session instance messing
    around with the user's files at a time
  - fix errors saving certificates to NSS databases when there's already a
    certificate there with the same nickname (#695672)
  - make key and certificate location output from 'getcert list' more properly
    translatable (#7)


author: Nalin Dahyabhai <nalin@redhat.com> 0.42-1
changelog:
  - getcert: fix a buffer overrun preparing a request for the daemon when
    there are more parameters to encode than space in the array (#696185)
  - updated translations: de, es, id, pl, ru, uk


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - treat the ability to access keys in an NSS database without using a PIN,
    when we've been told we need one, as an error (#692766)
  - when handling "getcert resubmit" requests, if we don't have a key yet,
    make sure we go all the way back to generating one (#694184)
  - getcert: try to clean up tests for NSS and PEM file locations (#699059)
  - don't try to set reconnect-on-exit policy unless we managed to connect
    to the bus (#712500)
  - handle cases where we specify a token but the storage token isn't
    known (#699552)
  - getcert: recognize -i and storage options to narrow down which requests
    the user wants to know about (#698772)
  - output hints when the daemon has startup problems, too (#712075)
  - add flags to specify whether we're bus-activated or not, so that we can
    exit if we have nothing to do after handling a request received over
    the bus if some specified amount of time has passed
  - explicitly disallow non-root access in the D-Bus configuration (#712072)
  - migrate to systemd on releases newer than Fedora 15 or RHEL 6 (#718172)
  - fix a couple of incorrect calls to talloc_asprintf() (#721392)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if xmlrpc-c's struct xmlrpc_curl_xportparms has a gss_delegate field, set
    it to TRUE when we're doing Negotiate auth (#727864, #727863, #727866)


author: Nalin Dahyabhai <nalin@redhat.com> 0.44-1
changelog:
  - check specifically for cases where a specified token that we need to
    use just isn't present for whatever reason (#697058)


author: Nalin Dahyabhai <nalin@redhat.com> 0.46-1
changelog:
  - treat the ability to access keys in an NSS database without using a PIN,
    when we've been told we need one, as an error (#692766, really this time)


author: Nalin Dahyabhai <nalin@redhat.com> 0.47-1
changelog:
  - getcert: distinguish between {stat() succeeds but isn't a directory} and
    {stat() failed} when printing an error message (#739903)
  - getcert resubmit/start-tracking: when we're looking for an existing request
    by ID, and we don't find one, note that specifically (#741262)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49-1
changelog:
  - when using an NSS database, skip loading the module database (#743042)
  - when using an NSS database, skip loading root certs
  - generate SPKAC values when generating CSRs, though we don't do anything
    with SPKAC values yet
  - internally maintain and use challenge passwords, if we have them
  - behave better when certificates have shorter lifetimes
  - add/recognize/handle notification type "none"
  - getcert: error out when "list -c" finds no matching CA (#743488)
  - getcert: error out when "list -i" finds no matching request (#743485)


author: Nalin Dahyabhai <nalin@redhat.com> 0.50-1
changelog:
  - really fix these this time:
   - getcert: error out when "list -c" finds no matching CA (#743488)
   - getcert: error out when "list -i" finds no matching request (#743485)


author: Nalin Dahyabhai <nalin@redhat.com> 0.51-1
changelog:
  - api: lift restrictions on characters used in request and CA nicknames by
    making their object names not incorporate their nicknames
  - api: add find_request_by_nickname and find_ca_by_nickname
  - certmonger-ipa-submit.8: list -k, -K, -t in the summary, document -K
  - getcert: print "invalid option" error messages ourselves (#756291)
  - ipa-submit: supply a Referer: header when submitting requests to IPA
    (#750617, needed for #747710)


author: Nalin Dahyabhai <nalin@redhat.com> 0.52-1
changelog:
  - note that SELinux usually confines us to writing only to cert_t in
    doc/getting-started.txt (#765599)
  - fix crashes when we add a request during our first run when we're
    populating the hard-coded CA list
  - properly deal with cases where a path is passed to us is "./XXX"
  - in session mode, create our data directories as we go


author: Nalin Dahyabhai <nalin@redhat.com> 0.53-1
changelog:
  - large changes to the D-Bus glue, exposing a lot of data which we were
    providing via D-Bus getter methods as properties, and providing more
    accurate introspection data
  - emit a signal when the daemon saves a certificate to the destination
    location, and provide an option to have the daemon spawn an arbitrary
    command at that point, too (#766167)
  - enable starting the service by default on RHEL (#765600)


author: Nalin Dahyabhai <nalin@redhat.com> 0.55-1
changelog:
  - allow root to use our implementation of org.freedesktop.DBus.Properties
  - take more care to not emit useless PropertiesChanged signals


author: Nalin Dahyabhai <nalin@redhat.com> 0.56-1
changelog:
  - when a caller sets the is-default flag on a CA, and another CA is no longer
    the default, emit the PropertiesChanged signal on the CA which is not the
    default, instead on the new default a second time
  - drop some dead code from the D-Bus message handlers (static analysis,
    - cache public keys when we read private keys
  - go back to printing an error indicating that we're missing a required
    argument when we're missing a required argument, not that the option is
    invalid (broken since 0.51, #796542)


author: Nalin Dahyabhai <nalin@redhat.com> 0.57-1
changelog:
  - clarify that the command passed to getcert -C is a "post"-save command
  - add a "pre"-save command option to getcert, specified with the -B flag (#9)
  - after we notify of an impending not-valid-after approaching, don't do it
    again immediately


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a command option (-T) to getcert for specifying which enrollment
    profile to tell a CA that we're using, in case it cares (#10)


author: Nalin Dahyabhai <nalin@redhat.com> 0.58-1
changelog:
  - add a "dogtag-ipa-renew-agent" CA so that we can renew certificates using
    an IPA server's internal Dogtag instance
  - export the requested profile and old certificate to enrollment helpers
  - make libxml and libcurl into hard build-time requirements
  - serialize all pre/save/post sequences to make sure that stop/save/start
    doesn't become stop1/save1/stop2/start1/save2/start2 when we're stopping
    a service while we muck with more than one of its certificates


author: Nalin Dahyabhai <nalin@redhat.com> 0.60-1
changelog:
  - adjust internals of logic for talking to dogtag to at least have a
    concept of non-agent cases
  - when talking to an IPA server's internal Dogtag instance, infer which
    ports the CA is listening on from the "dogtag_version" setting in the
    IPA configuration (Ade Lee)
  - send a notification (or log a message, whatever) when we save a new
    certificate (#766167)


author: Nalin Dahyabhai <nalin@redhat.com> 0.61-1
changelog:
  - fix a regression in reading old request tracking files where the
    request was in state NEED_TO_NOTIFY or NOTIFYING


author: Nalin Dahyabhai <nalin@redhat.com> 0.61-3
changelog:
  - backport change from git to not choke if X509_REQ_to_X509() fails when we're
    self-signing using OpenSSL
  - backport another change from git to represent this as a CA-rejected error


author: Nalin Dahyabhai <nalin@redhat.com> 0.62-1
changelog:
  - add a -u flag to getcert to enable requesting a keyUsage extension value
  - request subjectKeyIdentifier extensions from CAs, and include them in
    self-signed certificates
  - request basicConstraints from CAs, defaulting to requests for end-entity
    certificates
  - when requesting CA certificates, also request authorityKeyIdentifier
  - add support for requesting CRL distribution point and authorityInfoAccess
    extensions that specify OCSP responder locations
  - don't crash when OpenSSL can't build a template certificate from a request
    when we're in FIPS mode
  - put NSS in FIPS mode, when the system booted that way, except when we're
    trying to write certificates to a database
  - fix CSR generation and self-signing in FIPS mode with NSS
  - fix self-signing in FIPS mode with OpenSSL
  - new languages from the translation team: mai, ml, nn, ga


author: Nalin Dahyabhai <nalin@redhat.com> 0.63-1
changelog:
  - serialize access to NSS databases and the running of pre- and post-save
    commands which might also access them (possibly fixing part of #883484)


author: Nalin Dahyabhai <nalin@redhat.com> 0.64-1
changelog:
  - at startup, if we resume the state machine for a given certificate to a state
    which expects to have the newly-added lock already acquired, acquire it
    before moving on with the certificate's work (still aimed at fixing #883484)


author: Nalin Dahyabhai <nalin@redhat.com> 0.66-1
changelog:
  - build as position-independent executables with early binding (#883966)
  - also don't tag the unit file as a configuration file (internal tooling)


author: Nalin Dahyabhai <nalin@redhat.com> 0.67-1
changelog:
  - when saving certificates to NSS databases, try to preserve the trust
    value assigned to a previously-present certificate with the same nickname
    and subject, if one is found
  - when saving certificates to NSS databases, also prune certificates from
    the database which have both the same nickname and subject as the one
    we're adding, to avoid tripping up tools that only fetch one certificate
    by nickname


author: Nalin Dahyabhai <nalin@redhat.com> 0.67-3
changelog:
  - pull up a patch from master to adapt self-tests to certutil's diagnostic
    output having changed (#992050)


author: Nalin Dahyabhai <nalin@redhat.com> 0.68-1
changelog:
  - notice when the OpenSSL RNG isn't seeded
  - notice when saving certificates or keys fails due to filesystem-related
    permission denial (#996581)


author: Nalin Dahyabhai <nalin@redhat.com> 0.69-1
changelog:
  - tweak how we decide whether we're on the master or a minion when we're
    told to use certmaster as a CA
  - clean up one of the tests so that it doesn't have to work around internal
    logging producing duplicate messages
  - when logging errors while setting up to contact xmlrpc servers, explicitly
    note that the error is client-side
  - don't abort() due to incorrect locking when an attempt to save an issued
    certificate to the designated location fails (part of #1032760/#1033333,
    ticket #22)
  - when reading an issued certificate from an enrollment helper, ignore
    noise before or after the certificate itself (more of #1032760/1033333,
    ticket #22)
  - run subprocesses in a cleaned-up environment (more of #1032760/1033333,
    ticket #22)
  - clear the ca-error that we saved when we had an error talking to the CA if we
    subsequently succeed in talking to the CA
  - various other static-analysis fixes


author: Nalin Dahyabhai <nalin@redhat.com> 0.70-1
changelog:
  - add a --with-homedir option to configure, and use it, since subprocesses
    which we run and which use NSS may attempt to write to $HOME/.pki, and
    0.69's strategy of setting that to "/" was rightly hitting SELinux policy
    denials (#1047798)


author: Nalin Dahyabhai <nalin@redhat.com> 0.71-1
changelog:
  - check for cases where we fail to allocate memory while reading a request
    or CA entry from disk (John Haxby)
  - only handle one watch at a time, which should avoid abort() during
    attempts to reconnect to the message bus after losing our connection
    to it (#1055521)


author: Nalin Dahyabhai <nalin@redhat.com> 0.72-1
changelog:
  - update to 0.72
    - support generating DSA parameters and keys on sufficiently-new OpenSSL
      and NSS
    - support generating EC keys when OpenSSL and NSS support it, using key
      size to select the curve to use from among secp256r1, secp384r1,
      secp521r1 (which are the ones that are usually available, though
      secp521r1 isn't always, even if the other two are)
    - stop trying to cache public key parameters at all and instead cache public
      key info properly
    - encode the friendlyName attribute in signing requests as a BMPString,
      not as a PrintableString
    - catch more filesystem permissions problems earlier (more of #996581)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - updates for 0.73
    - set the flag to encode EC public key parameters using named curves
      instead of the default of all-the-details when using OpenSSL
    - don't break when NSS supports secp521r1 but OpenSSL doesn't
    - also pass the CA nickname to enrollment helpers in the environment as
      a text value in "CERTMONGER_CA_NICKNAME", so they can use that value
      when reading configuration settings
    - also pass the SPKAC value to enrollment helpers in the environment as
      a base64 value in "CERTMONGER_SPKAC"
    - also pass the request's SubjectPublicKeyInfo value to enrollment helpers
      in the environment as a base64 value in "CERTMONGER_SPKI" (part of #16)
    - when generating signing requests using NSS, be more accommodating of
      requested subject names that don't parse properly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - updates to 0.73
    - also pass the key type to enrollment helpers in the environment as
      a the value of "CERTMONGER_KEY_TYPE"


author: Nalin Dahyabhai <nalin@redhat.com> 0.73-1
changelog:
  - updates to 0.73
    - getcert no longer claims to be stuck when a CA is unreachable,
      because the daemon isn't actually stuck


author: Nalin Dahyabhai <nalin@redhat.com> 0.74-1
changelog:
  - also save state when we exit due to SIGHUP
  - don't get tripped up when enrollment helpers hand us certificates which
    include CRLF line terminators (ticket #25)
  - be tolerant of certificate issuer names, subject names, DNS, email, and
    Kerberos principal namem subjectAltNames, and crl distribution point URLs
    that contain newlines
  - read and cache the certificate template extension in certificates
  - enforce different minimum key sizes depending on the type of key we're
    trying to generate
  - store DER versions of subject, issuer and template subject, if we have
    them (Jan Cholasta, ticket #26)
  - when generating signing requests with subject names that don't quite parse
    as subject names, encode what we're given as PrintableString rather than
    as a UTF8String
  - always chdir() to a known location at startup, even if we're not becoming
    a daemon
  - fix a couple of memory leaks (static analysis)
  - add missing buildrequires: on which


author: Nalin Dahyabhai <nalin@redhat.com> 0.74.92-1
changelog:
  - retrieve CA information from CAs, if the helpers can do so, and
    add a command to explicitly refresh that data: "getcert refresh-ca"
  - offer to save CA certificates to files and databases, when specified with
    new -a and -F flags to getcert request/resubmit/start-tracking (#1098208,
    trac #31)
  - add IP address subject alternate names when getcert request/resubmit
    is passed the -A option (trac #35)
  - read and cache the freshestCRL extension in certificates
  - properly interpret KDC-unreachable errors encountered in the IPA
    submission error as a server-unreachable error that we will retry,
    rather than a misconfiguration error which we won't
  - don't let tests get tripped up by new formatting used in dos2unix status
    messages (#1099080)
  - updated translations
  - be explicit that we are going to use bashisms in test scripts by calling
    the shell interpreter as 'bash' rather than 'sh' (trac #27)


author: Nalin Dahyabhai <nalin@redhat.com> 0.74.93-1
changelog:
  - add some self-tests
  - simplify the internal submit-to-CA logic
  - fixes for more problems found through static analysis


author: Nalin Dahyabhai <nalin@redhat.com> 0.74.94-1
changelog:
  - fix self-test errors that we trigger with new OpenSSL
  - fix a build error that would sometimes happen when we're told to
    build PIE binaries
  - quiet a compile warning


author: Nalin Dahyabhai <nalin@redhat.com> 0.74.96-1
changelog:
  - make the trust settings we apply to CA-supplied certificates while
    saving them to NSS databases run-time configurable
  - fix compiling against EL5-era OpenSSL
  - when saving CA certificates we pull from an IPA server, nickname
    it using the realm name with " IPA CA" appended rather than just
    naming it "IPA CA"
  - fix the local signer so that when it issues itself a new certificate,
    it uses the same subject name
  - add a -w flag to getcert's request, resubmit, and start-tracking
    commands, telling it to wait until either the certificate is issued,
    we get to a state where we know that we won't be able to get one, or
    we are waiting for a CA


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-1
changelog:
  - add a -w (wait) flag to the getcert's request/resubmit/start-tracking
    commands, and add a non-waiting status command


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.2-1
changelog:
  - when generating keys using OpenSSL, if key generation fails, try
    again with the default key size, in case we're in FIPS mode
  - documentation updates


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.3-1
changelog:
  - read and cache whether or not we saw a noOCSPcheck extension in certificates
  - documentation updates


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.4-2
changelog:
  - add a %trigger to remove knowledge of the "dogtag-ipa-renew-agent" CA
    when we detect certmonger versions prior to 0.58 being installed, to
    avoid cases where some older versions choke on CAs with nicknames that
    contain characters that can't legally be part of a D-Bus name (#948993)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.6-1
changelog:
  - avoid potential use-after-free and read overrun after a CA is added
    dynamically (thanks to Jan Cholasta)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.7-1
changelog:
  - fix an inconsistency in how we parse cookie values returned by CA helpers,
    in that single-line values would lose the end-of-line after a daemon
    restart, but not before
  - handle timeout values and exit status values when calling CA helpers
    in non-SUBMIT, non-POLL modes (#1118468)
  - rework how we save CA certificates so that we save CA certificates associated
    with end-entity certificates when we save that end-entity certificate, which
    requires running all of the involved pre- and post-save commands
  - drop package Requires: on systemd-sysv (#1104138)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.7-2
changelog:
  - reintroduce package Requires: on systemd-sysv on F19 and EL6 and older,
    conditionalized it so that it's ignored on newer releases, and make
    whether or not we call systemd-sysv-convert in triggers depend on that,
    too (#1104138)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.8-1
changelog:
  - add a 'refresh' option to the getcert command
  - add a '-a' flag to the getcert command's 'refresh-ca' option


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.9-1
changelog:
  - avoid potential use-after-free after a CA is removed dynamically (thanks to
    Keenan Brock) (#1125342)
  - add a "external-helper" property to CA objects


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.10-1
changelog:
  - when attempting to contact an IPA LDAP server, if no "ldap_uri" is set in
    default.conf, and no "host" is set either, try to construct the server URI
    using the "server" setting (#1126985)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.11-1
changelog:
  - when getcert is passed a -a flag, to indicate that CA root certificates
    should be stored in the specified database, don't ignore locations which
    don't include a storage scheme (#1129537)
  - when called to 'start-tracking' with the -a or -F flags, if we have
    applicable certificates on-hand for a CA that we're either told to use
    or which we decide is the correct one, save the certificates (#1129696)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.12-1
changelog:
  - correct encoding/decoding of variant-typed data which we receive and send
    as part of the org.freedesktop.DBus.Properties interface over the bus, and
    add some tests for them (based on patch from David Kupka, ticket #36)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75.14-1
changelog:
  - make pathname canonicalization slightly smarter, to handle ".." in
    locations (#1131758)
  - updates to self-tests (#1144082)


author: Jan Cholasta <jcholast@redhat.com> - 0.75.14-2
changelog:
  - backport dogtag-submit: accept additional options to pass to the server when
    approving requests using agent creds (#1165155)


author: Jan Cholasta <jcholast@redhat.com> - 0.75.14-3
changelog:
  - backport change from git to correctly retrieve string values from DBus
    property interface replies (#1181022)


author: Jan Cholasta <jcholast@redhat.com> - 0.78.1-1
changelog:
  - Resolves: #1140241 RFE: Add SCEP support to certmonger
  - Resolves: #1148001 ipa-getcert killed by SIGABRT
  - Resolves: #1205756 Rebase certmonger to 0.77 or later
    - Update to upstream 0.78.1


author: Jan Cholasta <jcholast@redhat.com> - 0.78.3-1
changelog:
  - Resolves: #1244914 scep ca helper does not parse command line options
    correctly
  - Related:  #1205756 Rebase certmonger to 0.77 or later
    - Update to upstream 0.78.3


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-1
changelog:
  - Resolves: #1249753 challenge password not added in csr using start-tracking
  - Resolves: #1250397 Remove certmonger rekey feature in 7.2
    - Remove rekey feature
  - Related:  #1205756 Rebase certmonger to 0.77 or later
    - Update to upstream 0.78.4


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-2
changelog:
  - Resolves: #1345755 Support for specifying IPA lightweight CA
    - Add 'issuer' request option for specifying issuer
    - Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
    - Comment/whitespace fixup
    - ipa-submit: Retry without "ca" on OptionError
    - getcert: fix a potential out-of-bounds
    - Document the -X option in the ipa-submit man page
  - Resolves: #1351052 certmonger build for RHEL 7.3 failure
    - Stop assuming RSA 512 works
    - Stop assuming RSA 512 works, part two
    - Fix a flakiness in the 028-dbus test


author: Jan Cholasta <jcholast@redhat.com> - 0.78.4-3
changelog:
  - Resolves: #1367683 getcert request command fails to use Sub CA using -X
    argument
    - Fix CA option name for ipa cert-request


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-4
changelog:
  - Use required DER encoding when setting CA basic constraint (#1551635)
  - NSS 3.34 more strictly enforces length checking when verifying signatures
    (#1551702)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-5
changelog:
  - Add Requires on psmsic for killall in post script (#1458890)
  - upstream project migrated from fedorahosted.org to pagure.io (#1501723)
  - Strip CR/LF from passwords read from a file (#1545935)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-8
changelog:
  - Disable iterate-10 test which fails intermitently (#1596161)
  - Add BuildRequires for running autoreconf


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-9
changelog:
  - Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
    variables to helpers. The root cause was a bug in IPA (#1596161)


author: Rob Crittenden <rcritten@redhat.com> - 0.78.4-12
changelog:
  - Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
    man page (#1651368)
  - SCEP: Don't set message=<ca ident> with GetCaps and GetCACert (#1608781)
  - SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
  - Document owner and permission parameters to getcert (#1549585)


author: Jerry James <loganjerry@gmail.com> - 0.9.5-3
changelog:
  - Fix unowned directory (bz 473635)
  - Drop unnecessary BuildRequires
  - Replace patches with addition of -fPIC to CFLAGS in the spec file
  - Add some more documentation files


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Latest from NSA
  	* Merged typeattribute statement patch from Darrel Goeddel of TCS.
  	* Changed genpolusers to handle multiple user config files.
  	* Merged nodecon ordering patch from Chad Hanson of TCS.


author: Dan Walsh <dwalsh@redhat.com> 1.21.4-1
changelog:
  * Merged define_user() cleanup patch from Darrel Goeddel (TCS).
  	* Moved genpolusers utility to libsepol.
  	* Merged range_transition support from Darrel Goeddel (TCS).


author: Dan Walsh <dwalsh@redhat.com> 1.23,1-1
changelog:
  * Merged hierarchical type/role patch from Tresys Technology.
  	* Merged MLS fixes from Darrel Goeddel of TCS.


author: Dan Walsh <dwalsh@redhat.com> 1.23-3-1
changelog:
  - Update to NSA Release
  	* Added sepol_ prefix to Flask types to avoid namespace
  	  collision with libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.25.2-1
changelog:
  - Update to NSA Release
  	* Merged loadable module support from Tresys Technology.
  	* Merged patch to prohibit the use of * and ~ in type sets 
  	  (other than in neverallow statements) and in role sets
  	  from Joshua Brindle (Tresys).
  	* Updated version for release.


author: Dan Walsh <dwalsh@redhat.com> 1.25.5-1
changelog:
  - Update to NSA Release
  	* Fixed call to hierarchy checking code to pass the right policydb.
  	* Merged patch to update dismod for the relocation of the
  	  module read/write code from libsemanage to libsepol, and
  	  to enable build of test subdirectory from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.25.8-1
changelog:
  - Update to NSA Release
  	* Updated checkpolicy and dispol for the new avtab format.
  	  Converted users of ebitmaps to new inline operators.
    	  Note:  The binary policy format version has been incremented to 
  	  version 20 as a result of these changes.  To build a policy
  	  for a kernel that does not yet include these changes, use
  	  the -c 19 option to checkpolicy.
  	* Merged patch to prohibit use of "self" as a type name from Jason Tang (Tresys).
  	* Merged patch to fix dismod compilation from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.25.10-1
changelog:
  - Update to NSA Release
  	* Fixed further memory leaks found by valgrind.
  	* Changed checkpolicy to destroy the policydbs prior to exit
  	  to allow leak detection.
  	* Fixed several memory leaks found by valgrind.


author: Dan Walsh <dwalsh@redhat.com> 1.25.11-1
changelog:
  - Update to NSA Release
  	* Merged use-after-free fix from Serge Hallyn (IBM).  
  	  Bug found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.25.12-1
changelog:
  - Update to NSA Release
  	* Fixed handling of validatetrans constraint expressions.
  	Bug reported by Dan Walsh for checkpolicy -M.


author: Dan Walsh <dwalsh@redhat.com> 1.27.4-1
changelog:
  - Latest upgrade from NSA
  	* Merged bugfix for dup role transition error messages from
  	Karl MacMillan (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.27.5-1
changelog:
  - Latest upgrade from NSA
  	* Merged error handling improvement in checkmodule from Karl MacMillan (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.27.9-1
changelog:
  - Latest upgrade from NSA
  	* Merged support for require blocks inside conditionals from
  	Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.27.10-1
changelog:
  - Latest upgrade from NSA
  	* Updated for changes to sepol expand_module and link_modules interfaces.


author: Dan Walsh <dwalsh@redhat.com> 1.27.16-1
changelog:
  - Latest upgrade from NSA
  	* Removed obsolete cond_check_type_rules() function and call and 
  	  cond_optimize_lists() call from checkpolicy.c; these are handled
  	  during parsing and expansion now.
  	* Updated calls to expand_module for interface change.
  	* Changed checkmodule to verify that expand_module succeeds 
  	  when building base modules.
  	* Merged module compiler fixes from Joshua Brindle.
  	* Removed direct calls to hierarchy_check_constraints() and 
  	  check_assertions() from checkpolicy since they are now called 
  	  internally by expand_module().


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Latest upgrade from NSA
  	* Added error checking of all ebitmap_set_bit calls for out of
  	  memory conditions.
  	* Merged removal of compatibility handling of netlink classes
  	  (requirement that policies with newer versions include the
  	   netlink class definitions, remapping of fine-grained netlink
  	   classes in newer source policies to single netlink class when
  	   generating older policies) from George Coker.


author: Dan Walsh <dwalsh@redhat.com> - 1.29.4-1
changelog:
  - Latest upgrade from NSA
  	* Added a check for failure to declare each sensitivity in
  	  a level definition.
  	* Changed to clone level data for aliased sensitivities to
  	  avoid double free upon sens_destroy.  Bug reported by Kevin
  	  Carr of Tresys Technology.


author: Dan Walsh <dwalsh@redhat.com> - 1.30-1
changelog:
  - Latest upgrade from NSA
  	* Updated version for release.
  	* Fixed bug in role dominance (define_role_dom).


author: Dan Walsh <dwalsh@redhat.com> - 1.30.3-1
changelog:
  - Latest upgrade from NSA
  	* Fixed checkmodule to call link_modules prior to expand_module
  	  to handle optionals.
  	* Fixed require_class to avoid shadowing permissions already defined
  	  in an inherited common definition.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.4-1
changelog:
  - Latest upgrade from NSA
  	* Changed require_class to reject permissions that have not been
  	  declared if building a base module.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.5-1
changelog:
  - Latest upgrade from NSA
  	* Merged compiler cleanup patch from Karl MacMillan.
  	* Merged fix warnings patch from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.8-1
changelog:
  - Latest upgrade from NSA
  	* Lindent.
  	* Merged patch to remove TE rule conflict checking from the parser
  	  from Joshua Brindle.  This can only be done properly by the 
  	  expander.
  	* Merged patch to make checkpolicy/checkmodule handling of
  	  duplicate/conflicting TE rules the same as the expander 
  	  from Joshua Brindle.
  	* Merged optionals in base take 2 patch set from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.11-1
changelog:
  - Latest update from NSA
  	* merged range_transition enhancements and user module format
  	  changes from Darrel Goeddel
  	* Merged symtab datum patch from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.12-1
changelog:
  - Latest update from NSA
  	* Merged user and range_transition support for modules from 
  	  Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Latest update from NSA
  	* Merged patch to use new libsepol error codes by Karl MacMillan.
  	* Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.3-1
changelog:
  - Latest update from NSA
  	* Merged fix for segfault on duplicate require of sensitivity from Caleb Case.
  	* Merged fix for dead URLs in checkpolicy man pages from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  * Merged handle unknown policydb flag support from Eric Paris.
  	  Adds new command line options -U {allow, reject, deny} for selecting
  	  the flag when a base module or kernel policy is built.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.6-1
changelog:
  - Latest update from NSA
  	* Initialize the source file name from the command line argument so that checkpolicy/checkmodule report something more useful than "unknown source".
  	* Merged remove use of REJECT and trailing context in lex rules; make ipv4 address parsing like ipv6 from James Carter.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.10-1
changelog:
  - Latest update from NSA
  	* Use yyerror2() where appropriate from Todd C. Miller.
  - Build against latest libsepol


author: Dan Walsh <dwalsh@redhat.com> - 2.0.13-1
changelog:
  - Latest update from NSA
  	* Split out non-grammar parts of policy_parse.yacc into
  	  policy_define.c and policy_define.h from Todd C. Miller.
  	* Initialize struct policy_file before using it, from Todd C. Miller.
  	* Remove unused define, move variable out of .y file, simplify COND_ERR, from Todd C. Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.15-1
changelog:
  - Latest update from NSA
  	* Fix for policy module versions that look like IPv4 addresses from Jim Carter.
  	  Resolves bug 444451.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Latest update from NSA
  	* Update checkpolicy for user and role mapping support from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Latest update from NSA
  	* Properly escape regex symbols in the lexer from Stephen Smalley.
  	* Add bounds support from KaiGai Kohei.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.19-1
changelog:
  - Latest update from NSA
  	* Fix alias field in module format, caused by boundary format change
  	  from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.21-1
changelog:
  - Latest update from NSA
  	* Add support for building Xen policies from Paul Nuzzi.
  	* Add long options to checkpolicy and checkmodule by Guido
  	  Trentalancia <guido@trentalancia.com>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
changelog:
  - Latest update from NSA
  	* Update checkmodule man page and usage by Daniel Walsh and Steve Lawrence
  - Allow policy version to be one number


author: Dan Walsh <dwalsh@redhat.com> - 2.0.23-1
changelog:
  - Latest update from NSA
    * Remove unused variables to fix compliation under GCC 4.6 by Justin Mattock


author: Dan Walsh <dwalsh@redhat.com> - 2.0.23-2
changelog:
  - Add James Carters Patch
    *This patch is needed because some filesystem names (such as 9p) start
    with a digit.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.23-4
changelog:
  - Patches from Eric Paris 
  We just use random numbers to make menu selections.  Use #defines and
  names that make some sense instead.

  This patch adds support for using the last path component as part of the
  information in making labeling decisions for new objects.  A example
  rule looks like so:

  type_transition unconfined_t etc_t:file system_conf_t eric;

  This rule says if unconfined_t creates a file in a directory labeled
  etc_t and the last path component is "eric" (no globbing, no matching
  magic, just exact strcmp) it should be labeled system_conf_t.

  The kernel and policy representation does not have support for such
  rules in conditionals, and thus policy explicitly notes that fact if
  such a rule is added to a conditional.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.26-1
changelog:
  -Update to upstream
  	* Wrap file names in filename transitions with quotes by Steve Lawrence.
  	* Allow filesystem names to start with a digit by James Carter.
  	* Add support for using the last path compnent in type transitions by Eric


author: Dan Walsh <dwalsh@redhat.com> - 2.1.2-0
changelog:
  -Update to upstream
  	* .gitignore changes
  	* dispol output of role trans
  	* man page update: build a module with an older policy version


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  - Upgrade to upstream
  	* Revert "checkpolicy: Redo filename/filesystem syntax to support filename trans rules"
  	* drop libsepol dynamic link in checkpolicy


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Upgrade to upstream
  	* dis* fixed signed vs unsigned errors
  	* dismod: fix unused parameter errors
  	* test: Makefile: include -W and -Werror
  	* allow ~ in filename transition rules
  - Allow policy to specify the source of target for generating the default user,role 
  - or mls label for a new target.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  -Update to upstream
  	* add ignoredirs config for genhomedircon
  	* Fallback_user_level can be NULL if you are not using MLS


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  	* implement new default labeling behaviors for usr, role, range
  	* Fix dead links to www.nsa.gov/selinux


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  - Update to upstream 
  	* sepolgen: We need to support files that have a + in them
  	* Android/MacOS X build support


author: Dan Walsh <dwalsh@redhat.com> - 2.1.11-3
changelog:
  - Update to latest patches from eparis/Upstream
  -   checkpolicy: libsepol: implement default type policy syntax
  -   
  -   We currently have a mechanism in which the default user, role, and range
  -   can be picked up from the source or the target object.  This implements
  -   the same thing for types.  The kernel will override this with type
  -   transition rules and similar.  This is just the default if nothing
  -   specific is given.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-1
changelog:
  - Update to upstream 
          * Fix errors found by coverity
          * implement default type policy syntax
          * Free allocated memory when clean up / exit.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.12-4
changelog:
  - Fix a segmentation fault if the --handle-unknown option was set without
  arguments.
  - Thanks to Alexandre Rebert and his team at Carnegie Mellon University
  for detecting this crash.


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix typos in test/dispol
  - Set flex as default lexer
  - Fix checkmodule output message
  - Build policy on systems not supporting DCCP protocol
  - Fail if module name different than output base filename


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-6
changelog:
  - Add ibendport ocontext handling
  - Add support for ibendportcon labels
  - Add ibpkey ocontext handling
  - Add support for ibpkeycon labels
  - Add binary module support for xperms


author: Alexander Larsson <alexl@redhat.com> - 1:2.91.93-3
changelog:
  - Move gsettings schema to cheese-libs, fixes control-center crash (#691667)
  - Move typelib to cheese-libs


author: Hans de Goede <hdegoede@redhat.com> - 2:3.5.1-2
changelog:
  - Fix missing images on buttons, also fixes the "Gtk-WARNING **: Attempting to
    add a widget with type GtkImage to a GtkButton ..." warnings (gnome#677543)
  - Fix cheese crashing when started on machines with v4l2 radio or vbi devices
    (rhbz#810429, gnome#677544)


author: Hans de Goede <hdegoede@redhat.com> - 2:3.4.2-3
changelog:
  - Reduce camerabin pipeline creation time (rhbz#797188, gnome#677731)
  - Don't add 0 byte sized files to the thumb-view (rhbz#830166, gnome#677735)
  - Fix sizing of horizontal thumbnail list (rhbz#829957)
  - Optimize encoding parameters (rhbz#572169)


author: Hans de Goede <hdegoede@redhat.com> - 2:3.5.5-1
changelog:
  - New upstream release 3.5.5
  - Fix cheese crashing on tvcards which report they can capture 0x0 as
    minimum resolution (rhbz#850505)


author: Hans de Goede <hdegoede@redhat.com> - 2:3.8.2-3
changelog:
  - Add a number of bug-fixes to deal better with high res cams (#873434)
  - Fix cheese-introduction.png being in both cheese and cheese-libs (#893756)
  - Put the COPYING file in the docs for cheese-libs (#893800)
  - Fix the flash when taking a photo being dark grey instead of white (#965813)
  - Fix needing to press the effects button twice to select effects after
    selecting an effect for the first time
  - Various other bug-fixes


author: Hans de Goede <hdegoede@redhat.com> - 2:3.8.2-4
changelog:
  - Fix misbehavior when started without a camera
  - Don't crash when the (last) camera gets unplugged
  - Automatically use a newly plugged camera when going from 0 to 1 cameras
  - Misc. other bugfixes


author: Arnaldo Carvalho de Melo <acme@conectiva.com.br>
changelog:
  - added pt_BR translations
  - added more translatable strings
  - support for i18n init.d scripts description


author: Matt Wilson <msw@redhat.com>
changelog:
  - added support for a "hide: true" tag in initscripts that will make
    services not appear in ntsysv when run with the "--hide" flag


author: Matt Wilson <msw@redhat.com>
changelog:
  - changed Prereq: initscripts >= 5.18 to Conflicts: initscripts < 5.18
  - fixed sumary and description where a global string replace nuked them


author: Bill Nottingham <notting@redhat.com>
changelog:
  - actually, put the alternatives stuff back in /usr/sbin
  - ship /etc/alternatives dir
  - random alternatives fixes


author: Bill Nottingham <notting@redhat.com>
changelog:
  - alternatives: handle initscripts too; --initscript command-line option
  - chkconfig/ntsysv (and serviceconf, indirectly): services with
     *no* links in /etc/rc*.d are no longer displayed with --list, or
     available for configuration except via chkconfig command-line options
  - alternatives: fix trying to enable disable a null service


author: Bill Nottingham <notting@redhat.com> 1.3.4-1
changelog:
  - don't apply the dependency logic to things that already have
    start/stop priorities
  - fix silly display bug in --config


author: Dan Walsh <dwalsh@redhat.com> 1.3.8-2
changelog:
  - Fix readXinetdServiceInfo to return error on not regular files
  - Fix chkconfig to not write messages if readXinetdServiceInfo gets an error


author: Bill Nottingham <notting@redhat.com> 1.3.14-1
changelog:
  - resize reasonably with larger screens (#74156)
  - don't error out completely on bad symlink (#74324)
  - use ngettext (#106176)
  - error out on invalid start/stop values (#109858)
  - some man page updates
  - fix return code of chkconfig for xinetd services (#63123)
  - sort chkconfig --list display (#61576, <shishz@alum.rpi.edu>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix segfault on directories in /etc/xinetd.d (#166385)
  - don't needlessly rewrite xinetd files (#81008)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - for LSB scripts, use any chkconfig: priorities as a basis,
    instead of 50/50 (#172599)
  - fix LSB script dependency setting when no chkconfig: line
    is present (#161870, <jean-francois.larvoire@hp.com>)
  - fix LSB script dependency setting when one of Required-Stop
    or Required-Start: is missing (#168457)


author: Bill Nottingham <notting@redhat.com> 1.3.31-1
changelog:
  - fix man page (#220558, <esr@thyrus.com>)
  - add some more verbiage in alternatives man page (#221089)
  - don't print usage message on a nonexstent service (#226804)


author: Bill Nottingham <notting@redhat.com> 1.3.33-1
changelog:
  - various changes from review - support alternate %{_sbindir}, fix
    summaries, add version to requires, assorted other bits


author: Bill Nottingham <notting@redhat.com> 1.3.34-1
changelog:
  - translation updates: as, bg, bn_IN, bs, ca, de, fr, hi, hu, id, ja,
    ka, ml, ms, nb, or, sk, sl
  - add resetpriorities to the man page (#197399)


author: Bill Nottingham <notting@redhat.com> 1.3.40-1
changelog:
  - fix some overflows. (#176944)
  - add --type parameter to specify either xinetd or sysv services.
    (#467863, <mschmidt@redhat.com>
  - do a permissions check before add/remove/on/off/resetpriorities. (#450254)
  - parse Short-Description correctly (#441813, <peter_e@gmx.net>)


author: Bill Nottingham <notting@redhat.com> 1.3.42-1
changelog:
  - further LSB fixes (#474223)
  - throw errors on various malformed init scripts (#481198)
  - man page updates re: LSB (#487979)
  - translation updates: mai, gu, pt_BR, ro, ca, pa, sr, fr, hu


author: Bill Nottingham <notting@redhat.com> 1.3.44-1
changelog:
  - alternatives: update symlinks if they exist on installation (#104940)
  - alternatives: clarify error messages with more context (#441443)
  - alternatives: fix removal of manual links (#525021, <dtardon@redhat.com>)
  - translation updates: ml, mr, pl, ta, uk


author: Bill Nottingham <notting@redhat.com> 1.3.45-1
changelog:
  - add support for Should-Start, Should-Stop (#98470, <iarnell@gmail.com>)
  - ntsysv: don't drop initscripts with '.' in the name (#556751)
  - translation updates: el, id


author: Bill Nottingham <notting@redhat.com> 1.3.50-1
changelog:
  - forward actions to systemctl when necessary (<lennart@poettering.net>)
  - assorted translation updates


author: Bill Nottingham <notting@redhat.com> 1.3.52-1
changelog:
  - set state before frobbing dependencies (#693202)
  - ntsysv: don't list or configure service overridden by systemd (#691224)
  - chkconfig: don't show services overridden by systemd in --list (#693504, #693500)
  - don't forward to systemd if it's not installed (<arvidjaar@gmail.com>)
  - update translations


author: Bill Nottingham <notting@redhat.com> 1.3.53-1
changelog:
  - ntsysv: change the default to configure runlevels 2/3/4/5 (#709254)
  - alternatives: check whether the --initscript param is a systemd service, act appropriately (#714830)
  - forward chkconfig --del to systemctl disable where necessary


author: Bill Nottingham <notting@redhat.com> 1.3.54-1
changelog:
  - alternatives: fix --initscript systemd support (#714830)
  - revert forwarding of 'chkconfig --del' to 'systemctl disable'


author: Bill Nottingham <notting@redhat.com> 1.3.57-1
changelog:
  - assorted cleanups to LSB dependency support (#693202 fixed properly, #701573)
  - fix kill values for LSB-only scripts (#696305, <jbastian@redhat.com>)
  - don't apply start deps for services that aren't starting anywhere (#750446)


author: Bill Nottingham <notting@redhat.com> 1.3.58-1
changelog:
  - fix forwarding to systemctl with systemd >= 41 (#789256)
  - assorted regression fixes from 1.3.57 (#782152, etc.)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.60-1
changelog:
  - don't completely override LDFLAGS
  - pass along any rpm-configured LD flags
  - make sure install_initd/remove_initd provides appropriate help output for those commands (#803818)
  - check for overridden services in /etc too (#850899)
  - chconfig should own /etc/rc.d (#894328)
  - isXinetdEnabled should also ask systemd (#820363)
  - alternatives: look for service file also in /etc
  - alternatives: add --list option (#622635)
  - chkconfig: add hint to call systemctl list-unit-files and list-dependencies (#800334)
  - chkconfig: correctly handle unreadable init.d (#913807)
  - alternatives: call systemctl enable with --force (#915667)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.62-1
changelog:
  - use systemctl preset, not systemctl enable
  - fix typo in manpage
  - partly support socket activated services


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.4-1
changelog:
  - ntsysv: show systemd services and sockets
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files
  - alternatives: remove unused variable
  - alternatives: warn if the target is not a symlink
  - spec: add link to git
  - lets simplify version


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.5-1
changelog:
  - add systemd-sysv-install alias
  - don't create symlinks if they already exist
  - fix wrongly behaving LDFLAGS


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.6-1
changelog:
  - systemd-sysv-install: don't play ping-pong with systemctl
  - ntsysv: add description to systemd services
  - ntsysv: skip templates
  - Makefile: fix typo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.7.2-1
changelog:
  - alternatives: introduce --keep-missing
  - alternatives: allow family in --set and display it in --config


author: Jan Macku <jamacku@redhat.com> - 1.7.5-1
changelog:
  - Fix issues with extra backslashes in path string - (#1485304)
  - Add documentation for --keep-missing option - (#1371146)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.23-2.20081106gitbe42b4
changelog:
  - fix info uninstall
  - generate random command key in init script
  - support cyclelogs, online, offline commands in init script
  - add logrotate script


author: Miroslav Lichvar <mlichvar@redhat.com> 1.24-1
changelog:
  - update to 1.24 (#555367, CVE-2010-0292 CVE-2010-0293 CVE-2010-0294)
  - modify default config
    - step clock on start if it is off by more than 100 seconds
    - disable client log
  - build with -fPIE on sparc


author: Miroslav Lichvar <mlichvar@redhat.com> 1.24-4.20100428git73d775
changelog:
  - update to 20100428git73d775
  - replace initstepslew directive with makestep in default config
  - add NetworkManager dispatcher script
  - add dhclient script
  - retry server/peer name resolution at least once to workaround
    NetworkManager race condition on boot
  - don't verify chrony.keys


author: Miroslav Lichvar <mlichvar@redhat.com> 1.25-0.1.pre1
changelog:
  - update to 1.25-pre1
  - use iburst, four pool servers, rtcsync, stratumweight in default config
  - add systemd support
  - drop sysconfig file 
  - suppress install-info errors


author: Miroslav Lichvar <mlichvar@redhat.com> 1.26-0.1.pre1
changelog:
  - update to 1.26-pre1
  - fix service name in %triggerun
  - drop SysV init script
  - add chrony-wait service


author: Miroslav Lichvar <mlichvar@redhat.com> 1.26-3.20110831gitb088b7
changelog:
  - update to git snapshot 20110831gitb088b7
  - on first start generate password with 16 chars
  - change systemd service type to forking
  - add forced-command to chrony-helper (#735821)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.26-5.20110831gitb088b7
changelog:
  - improve chrony-helper to keep track of servers added from DHCP (#787042)
  - fix dhclient script to always return with zero exit code (#767859)


author: Miroslav Lichvar <mlichvar@redhat.com> 1.27-0.5.pre1.git1ca844
changelog:
  - update to git snapshot 1ca844
  - update systemd integration (#846303)
  - use systemd macros if available (#850151)
  - use correct vendor pool.ntp.org zone on RHEL (#845981)
  - don't log output of chrony-wait service


author: Miroslav Lichvar <mlichvar@redhat.com> 1.27-1
changelog:
  - update to 1.27
  - start chrony-wait service with chronyd
  - start chronyd service after sntp
  - remove obsolete macros


author: Miroslav Lichvar <mlichvar@redhat.com> 1.27-2
changelog:
  - suppress error messages from tr when generating key (#907914)
  - fix delta calculation with extreme frequency offsets


author: Miroslav Lichvar <mlichvar@redhat.com> 1.27-3
changelog:
  - disable chrony-wait service by default (#961047)
  - drop old systemd scriptlets
  - don't own ntp-units.d directory
  - move files from /lib
  - remove unncessary dependency on syslog target


author: Miroslav Lichvar <mlichvar@redhat.com> 1.29.1-1
changelog:
  - update to 1.29.1 (#1053022, CVE-2014-0021)
  - fix selecting of sources with prefer option (#1061048)
  - fix potential bug in writing of drift files (#1061106)
  - replace hardening build flags with _hardened_build (#1061036)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.1-1
changelog:
  - update to 2.1 (#1117882 #1169353 #1206504 #1209568 CVE-2015-1821
    CVE-2015-1822 CVE-2015-1853)
  - extend chrony-helper to allow using servers from DNS SRV records (#1211600)
  - add servers from DHCP with iburst option by default (#1219492)
  - execute test suite


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-1
changelog:
  - update to 3.1 (#1387223 #1274250 #1350669 #1406445)
  - don't start chronyd without capability to set system clock (#1306046)
  - fix chrony-helper to escape names of systemd units (#1418968)
  - package chronyd sysconfig file (#1396840)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.2-1
changelog:
  - update to 3.2 (#1482565 #1462081 #1454765)
  - use ID from /etc/os-release to set pool.ntp.org vendor zone


author: Miroslav Lichvar <mlichvar@redhat.com> 3.4-1
changelog:
  - update to 3.4 (#1636117, #1565544, #1565548, #1596239, #1600882)
  - drop support for HW timestamping on kernels < 3.10.0-613


author: Petr Machata <pmachata@redhat.com> - 0.13-11
changelog:
  - Add missing last entry in long options array
    (chrpath-0.13-getopt_long.patch)
  - Update config.sub and config.guess to support aarch64
    (chrpath-0.13-aarch64.patch)


author: Jeff Layton <jlayton@redhat.com> 5.9-1
changelog:
  - update to 5.9
  - move mount.cifs to /usr/sbin per new packaging guidelines
  - add -devel package to hold cifsidmap.h


author: Jeff Layton <jlayton@redhat.com> 6.2-3
changelog:
  - fixes for bugs reported by coverity:
  - update bad bit shift patch with one that patches getcifsacl.c too
  - remove some dead code from getcifsacl.c, asn1.c, and data_blob.c
  - fix bad handling of allocated memory in del_mtab in mount.cifs.c


author: Sachin Prabhu <sprabhu@redhat.com> - 6.2-8
changelog:
  - Prevent unnecessary linking of libwbclient
  - Uppercase orig_dev on 2nd try at mounting
  - Include paths.h in mtab.c
  - Clarify use of backupuid/backupgid in manpage
  - Ignore x-* mount options


author: Sachin Prabhu <sprabhu@redhat.com> - 6.2-10
changelog:
  - aclocal: fix typo in idmap.m4
  - mount.cifs: Removed extra comma in front of domain
  - mount.cifs: Accept empty domains on the command line
  - mount.cifs: Fixed command line parsing and aligned with kernel
  - mount.cifs: Remove unneeded stdbool header include
  - manpage: document mfsymlinks in the mount.cifs man page


author: Nathaniel McCallum <npmccallum@redhat.com> - 5-1
changelog:
  - New upstream release
  - Run clevis decryption from udisks2 under an unprivileged user
  - Reenable udisks2 subpackage


author: Nathaniel McCallum <npmccallum@redhat.com> - 6-1
changelog:
  - New upstream release
  - Specify unprivileged user/group during configuration
  - Move clevis user/group creation to base clevis package


author: Nathaniel McCallum <npmccallum@redhat.com> - 7-1
changelog:
  - Update to v7
  - Resolves: rhbz#1467907
  - Resolves: rhbz#1467908
  - Resolves: rhbz#1475406
  - Resolves: rhbz#1500975
  - Resolves: rhbz#1478888


author: Deji Akingunola <dakingun@gmail.com> - 0.9.15-3
changelog:
  - Don't package APACHE.license since we've LGPL instead 
  - Package documentation in devel subpackage


author: Rex Dieter <rdieter@fedoraproject.org> 2.3.3.4-6
changelog:
  - contribs-lib is not built and installed even with config (#794795, upstream ID: 3392466)
  - pkgconfig file is missing clucene-shared (upstream ID: 3461512)
  - non-descriptive descripton (#757319)


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.10.0-1
changelog:
  - packaging enhacements (structure, redundancy, ownership, scriptlets, symlink)
  - version bump so as not to collide with python-clufter co-packaged with pcs


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.10.1-2
changelog:
  - packaging fixes (clufter-cli requires python-setuptools, adjust for
    older schema of Bash completions)


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.57.0-1
changelog:
  - bump upstream package, see https://pagure.io/clufter/releases
  - generate man pages also for offered commands
  - auto-generate SEE ALSO sections for the man pages
  - move entry_points.txt to clufter-cli sub-package
  - general spec file refresh (pagure.io as a default project base, etc.)
  - make Python interpreter execution sane
  - fix *2pcscmd* commands so they do not suggest
    "pcs cluster cib <file> --config" that doesn't currently
    work for subsequent local-modification pcs commands
    [rhbz#1328078]
  - add support for ticket constraints to *2pcscmd commands
    [rhbz#1340243]


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.58.0-1
changelog:
  - fix Python interpreter propagated as enquoted string with old setuptools
  - bump upstream package, see https://pagure.io/clufter/releases


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.59.0-1
changelog:
  - add ability to borrow validation schemas from pacemaker installed along
  - bump upstream package, see https://pagure.io/clufter/releases
  - build for s390x


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.70.0-2
changelog:
  - split -bin and -common packages, the former becoming the only arch-specific
  - also move python-specific (entry points, main files) back from -cli package
  - also add virtual provides for python-clufter as python2-clufter
  - bump upstream package (version rolling the above changes out)
  - build for ppc64le
    [rhbz#1402565]


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.75.0-1
changelog:
  - move nano fallback editor dependency to -cli package [PGissue#1]
  - bump upstream package, see https://pagure.io/clufter/releases


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.76.0-1
changelog:
  - factor "borrow validation schemas from pacemaker" out to a separate script
  - bump upstream package, see https://pagure.io/clufter/releases


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.77.0-2
changelog:
  - fix nodelist.node.name configuration option (originaly devised by pacemaker)
    not supported in corosync.conf with the built-in validation schema
    [rhbz#1517834]


author: Jan Pokorný <jpokorny+rpm-clufter@redhat.com> - 0.77.1-1
changelog:
  - bump upstream package, see https://pagure.io/clufter/releases
  - build for aarch64
    [rhbz#1569111]


author: Bastien Nocera <bnocera@redhat.com> - 3.0.4-2
changelog:
  - Remove the GStreamer plugin, as it can cause the one in the
    clutter-gst2 package to become unavailable, breaking Cheese
    https://bugzilla.gnome.org/show_bug.cgi?id=746883


author: Allisson Azevedo <allisson@gmail.com> 0.1.0-2
changelog:
  - INSTALL removed from docs
  - fix make install for keeping timestamps
  - fix devel files section
  - changed license for LGPL


author: Colin Walters <walters@redhat.com> 0.6.1-1
changelog:
  - Update to 0.6.1 so we can make tweet go
  - Loosen files globs so we don't have to touch them every version


author: Orion Poplawski <orion@cora.nwra.com> - 2.4.3-2
changelog:
  - vim 7.0 now ships cmake files, so don't ship ours (bug #201018)
  - Add patch to Linux.cmake for Fortran soname support for plplot


author: Orion Poplawski <orion@cora.nwra.com> - 2.4.6-4
changelog:
  - Update macros.cmake to add CMAKE_INSTALL_LIBDIR, INCLUDE_INSTALL_DIR,
    LIB_INSTALL_DIR, SYSCONF_INSTALL_DIR, and SHARE_INSTALL_PREFIX


author: Rex Dieter <rdieter@fedoraproject.org> - 2.6.2-3
changelog:
  - Add -DCMAKE_VERBOSE_MAKEFILE=ON to %cmake (#474053)
  - preserve timestamp of macros.cmake
  - cosmetics


author: Orion Poplawski <orion@cora.nwra.com> - 2.8.0-0.5.rc4
changelog:
  - Update to 2.8.0 RC 4
  - Add FindJNI patch
  - Add test patch from cvs to fix Fedora build test build error


author: Orion Poplawski <orion@cora.nwra.com> - 2.8.3-0.3.rc4
changelog:
  - Update to 2.8.3 RC 4
  - Drop python 2.7 patch fixed upstream
  - No need to fixup source file permissions anymore


author: Orion Poplawski <orion@cora.nwra.com> - 2.8.5-0.3.rc3
changelog:
  - Update to 2.8.5 RC 3
  - Drop upstreamed swig patch
  - Apply upstream fix for issue 12307 (bug #723652)


author: Orion Poplawski <orion@cora.nwra.com> - 2.8.10.2-5
changelog:
  - Add patch from upstream to fix UsrMove handling (bug #917407)
  - Drop %config from rpm macros
  - Define FCFLAGS in cmake macro


author: Petr Machata <pmachata@redhat.com> - 2.8.11-2
changelog:
  - Pass -fno-strict-aliasing to cm_sha2.c to avoid strict aliasing
    problems that GCC warns about.
  - Icon name in CMake.desktop shouldn't include filename extension.


author: Patsy Franklin <pfrankli@redhat.com> - 2.8.12.2-1
changelog:
  - Rebase to 2.8.12.2 including some recent patches. (BZ #1195919)
  - Fix to find python libs version 3.4 (BZ #1246369)
  - Don't fail if certain Qt modules are unavailable. (BZ #1192188)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.5.2-3
changelog:
  - Fixed passing NULL array from get_instance
  - Add bindings for CMTraceMessage
    (patches by Jan Safranek)


author: Jan Safranek <jsafrane@redhat.com> - 0.5.2-6
changelog:
  - Fixed 'env' parameter value in 'get_providers()' function
    Resolves: #919082
  - Fixed embedded instance properties
    Resolves: #919081


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.9.5-3
changelog:
  - Fix placement of *.py[co] files
    Resolves: #921547
  - Remove /usr/share/cmpi - it's used by ruby binding that we don't build


author: Patrick Uiterwijk (LOCAL) <puiterwijk@redhat.com> - 0.2-0.3.5e1faadgit
changelog:
  - Fixed license tag
  - Updated to new FSF address upstream
  - Removing libgsystem before build
  - Now claiming specific manpages
  - Made the config files noreplace
  - Removed the test assets
  - Put the web assets in a subpackage


author: Stef Walter <stefw@redhat.com> 0.18-1
changelog:
  - Update to 0.18 release
  - Add glib-networking build requirement
  - Let selinux-policy-targetted distribute selinux policy


author: Stef Walter <stefw@redhat.com> - 0.26-1
changelog:
  - Update to 0.26 release
  - Can see disk usage on storage page rhbz#1142459
  - Better order for lists of block devices rhbz#1142443
  - Setting container memory limit fixed rhbz#1142362
  - Can create storage volume of maximum capacity rhbz#1142259
  - Fix RAID device Bitmap enable/disable error rhbz#1142248
  - Docker page connects to right machine rhbz#1142229
  - Clear the format dialog label correctly rhbz#1142228
  - No 'Drop Privileges' item in menu for root rhbz#1142197
  - Don't flash 'Server has closed Connection on logout rhbz#1142175
  - Non-root users can manipulate user accounts rhbz#1142154
  - Fix strange error message when editing user accounts rhbz#1142154


author: Stef Walter <stefw@redhat.com> - 0.27-1
changelog:
  - Update to 0.27 release
  - Don't create cockpit-*-admin groups rhbz#1145135
  - Fix user management for non-root users rhbz#1140562
  - Fix 'out of memory' error during ssh auth rhbz#1142282


author: Peter <petervo@redhat.com> - 0.49-1
changelog:
  - Update to 0.49 release.
  - cockpitd was renamed to cockpit-wrapper the cockpit-daemon
    package was removed and is now installed with the
    cockpit-bridge package.


author: Peter <petervo@redhat.com> - 0.63-1
changelog:
  - Update to 0.63 release
  - Remove cockpit-docker for armv7hl while docker
    packages are being fixed


author: Stef Walter <stefw@redhat.com> - 0.77-1
changelog:
  - Work better with multipath storage
  - Deletion of kubernetes objects
  - Cleaner URLs in the bookmark bar
  - Show a warning when adding too many machines
  - Make authentication work when embedding Cockpit
  - Complete componentizing Cockpit


author: Dominik Perpeet <dperpeet@redhat.com> - 0.91-1
changelog:
  - Update to 0.91 release
  - Fix Cockpit session issues with a second machine rhbz#1277938
  - Split out docker rhbz#1297797
  - Distribute licenses of included components in the source rpm
  - Reworked TLS certificates for Cockpit
  - Remove custom SELinux policy
  - SOS report UI page
  - User interface for OSTree upgrades and rollbacks
  - Offer to activate multipathd for multipath disks


author: Dominik Perpeet <dperpeet@redhat.com> - 0.96-1
changelog:
  - Update to 0.96 release
  - Fix memory leaks, mostly related to DBus code
  - Compatible with docker 1.10
  - Limit concurrent authentication similar to sshd using 'MaxStartups' setting
  - Fixed up server disconnection UI
  - Navigation fixes


author: Dominik Perpeet <dperpeet@redhat.com> - 0.103-1
changelog:
  - Update to 0.103 release
  - When Cockpit fails to connect to a host, relevant SSH command or host details are displayed to help resolve the issue
  - Docker restart policy can be configured when starting a new container
  - Display a single combined dialog for creating logical volumes
  - Don't offer a 'Computer OU' option when joining IPA domains
  - Display binary journal data correctly
  - Display IEC names (eg: MiB) for disk or file system sizes
  - Refuse to shrink logical volumes and prevent negative sizes in file system partition dialogs
  - Apply strict Content-Security-Policy on most of Cockpit to prevent a number of browser based attacks
  - Numerous other bug fixes and admin interface improvements


author: Dominik Perpeet <dperpeet@redhat.com> - 0.108-1
changelog:
  - Update to 0.108 release
  - Strict browser security policy for Cockpit is now enforced. This defines which code can be run in a Cockpit session and mitigates a number of browser based attacks.


author: Dominik Perpeet <dperpeet@redhat.com> - 0.114-1
changelog:
  - Update to 0.114 release
  - Red Hat Subscriptions can now specify activation keys and orgs rhbz#1338680
  - Network configuration of the Ethernet MTU rhbz#1339552
  - SSH Host keys are show on system page rhbz#1318414
  - Properly show SSH keys on authentication page rhbz#1336686
  - Use 'active-backup' as the default for new network bonds rhbz#1348066
  - Don't show network interfaces where NM_CONTROLLED=no is set rhbz#1330552
  - Disable tuned correctly when clearing a performance profile rhbz#1330473
  - Use CockpitLang cookie and Accept-Language for localization
  - Cockpit terminal now supports shells like fish
  - Disable the network on/off switch for unknown or unmanaged interfaces
    rhbz#1329954 rhbz#1329956
  - Show intelligent password score error messages rhbz#1330838
  - Show full string for system hardware info and operating system name rhbz#1331243
  - Ensure popup-info when creating an account remains on screen rhbz#1340749
  - Remove erroneous docker dependency rhbz#1349375


author: Dominik Perpeet <dperpeet@redhat.com> - 0.114-2
changelog:
  - The API of cockpit-bridge and cockpit-shell is now stable, other components
    only depend on a version >= 0.114 now, not an exact match to their own version


author: Dominik Perpeet <dperpeet@redhat.com> 118-1
changelog:
  - Update to 118 release
  - SELinux audit failures can be diagnosed and solutions applied to the system
  - Configure storage for Docker containers and images
  - Volumes and environment variables can be configured for Docker containers
  - Support PAM conversations on the Login screen, enabling two factor authentication
  - Cockpit URLs can be proxied with a configured HTTP path prefix
  - Timer jobs in systemd can be created and configured
  - Display all managed NetworkManager devices
  - Add support for network teams
  - Prevent removal of last volume from volume group rhbz#1354421


author: Dominik Perpeet <dperpeet@redhat.com> 122-1
changelog:
  - Update to 122 release
  - Cockpit can rollback network configuration that would otherwise disconnect an admin from the system
  - Unmanaged network devices are now shown
  - The list of Docker containers can be filtered and expanded inline
  - Cockpit can be a "bastion host" by using the login page to connect to an alternate system via SSH
  - Only connect to an alternate system if it has a known SSH host key
  - When connecting to other systems, each SSH connection is run in a separate process
  - Fixes bugs that prevent the "Logs" page from working in Firefox 49
  - A network proxy can be used when registering with RHEL subscriptions rhbz#1338681


author: Dominik Perpeet <dperpeet@redhat.com> 122-3
changelog:
  - Fix regression when activating virtual network interfaces rhbz#1394667
  - Support network connections that don't have an interface name rhbz#1394668
  - Fix registry console Windows IE and Edge login rhbz#1378810 rhbz#1393740
  - Fix reloading of projects and users in kubernetes rhbz#1393785
  - Only set websocket protocols if they are available rhbz#1394675


author: Dominik Perpeet <dperpeet@redhat.com> 125-1
changelog:
  - Update to 125 release
  - Display OSTree signatures on Atomic Host
  - Expand logical volumes and partitions inline on their devices
  - No longer offer to format read-only block devices
  - Use stored passphrases for LUKS devices properly
  - System shutdown can be scheduled by date
  - Properly terminate user sessions on the Accounts page
  - Fix regression on login screen in older Internet Explorer browsers


author: Dominik Perpeet <dperpeet@redhat.com> 126-1
changelog:
  - Update to 126 release
  - Show security scan information about containers
  - During login users can choose whether password is cached and reused
  - Allow renaming of active devices in networking interface
  - More clearly indicate when checking network connectivity
  - Allow more time for rollback when making network changes rhbz#1395108
  - The remotectl command can now combine certificate and key files
  - Domain join operations can now be properly cancelled
  - Make Kerberos authentication work even if gss-proxy is in use
  - When proxied, support X-Forwarded-Proto
  - Ignore block devices with a zero size in the storage interface


author: Stef Walter <stefw@redhat.com> 131-1
changelog:
  - Update to 131 release
  - Support for configuring kdump kernel crash dumping
  - Support for rebasing OSTrees and configuring OSTree remotes
  - Cockpit now respects /etc/shells and prevents login when user has an invalid shell
  - Add a 'LoginTo' option in cockpit.conf to toggle ability to login to other servers
  - Validate textual input on the Networking page properly


author: Dominik Perpeet <dperpeet@redhat.com> 131-3
changelog:
  - Fix size of list heading rhbz#1422184
  - Fix button tooltips rhbz#1365372 rhbz#1412036
  - Make basic selinux functionality available without rhbz#1422181


author: Dominik Perpeet <dperpeet@redhat.com> 135-3
changelog:
  - Update to 135 release
  - Redesigned page menu and machine switcher
  - Show /etc/motd in the "System" page
  - Allow changing the MAC address for ethernet adapters and see them for bonds
  - NetworkManager now activates slave interfaces by itself
  - Show "Locked/Unlocked" indicator for privilege escalation in the top bar
  - Privilege escalation works with sudo reauthorization
  - Use official /etc/ssh/ssh_known_hosts when connecting to remote hosts


author: Dominik Perpeet <dperpeet@redhat.com> 135-4
changelog:
  - The cockpit package doesn't require the dashboard anymore
  - The dashboard package conflicts with older bridge and ws versions


author: Dominik Perpeet <dperpeet@redhat.com> 137-1
changelog:
  - Update to 137 release
  - Cockpit's web server understands and properly responds to HTTP HEAD requests


author: Dominik Perpeet <dperpeet@redhat.com> 138-3
changelog:
  - Fix issues with connections between multiple hosts
  - Fix format string type mismatch on some architectures


author: Martin Pitt <mpitt@redhat.com> 154-1
changelog:
  - Rebase to version 154, drop all patches rhbz#1470780
  - This allows ssh keys to be loaded from arbitrary directories
    rhbz#1425887


author: Martin Pitt <mpitt@redhat.com> 154-3
changelog:
  - Update source po for Japanese translations rhbz#1512923
  - Adjust build system to avoid build failure for the above


author: Martin Pitt <mpitt@redhat.com> 169-3
changelog:
  - Rebase to version 169, drop all patches rhbz#1568728
  - Fix Subscriptions page hang when accessing as non-admin rhbz#1442540
  - Show an indicator on front page if updates are available rhbz#1495543
  - Properly localize "Log in" rhbz#1541454
  - Improve check for root privilege availability, to e. g. also work for FreeIPA
    admins rhbz#1574630


author: Martin Pitt <mpitt@redhat.com> 173-6
changelog:
  - Fix remote unauthenticated crash with crafted URLs rhbz#1627631
  - Fix off-by-one error in flow control rhbz#1626846


author: Martin Pitt <mpitt@redhat.com> 173.1-1
changelog:
  - Crash fixes spotted by coverity rhbz#1644345
  - Fix race condition with fslist channels rhbz#1644346
  - Fix remotectl crash on errors rhbz#1644348


author: Martin Pitt <mpitt@redhat.com> 190-1
changelog:
  - kdump: Add NFS and SSH dump targets rhbz#1533366
  - kdump: Fix confusing design of target selector rhbz#1536327
  - firewall: Hide already enabled items from "Add Services" dialog rhbz#1598625
  - networking: Gracefully handle when NetworkManager is  not running
    rhbz#1551615
  - web server: Mark deleted cookie as "secure", and add X-Content-Type-Options
    header rhbz#1677767
  - web server: Mark deleted cookie as "HttpOnly" rhbz#1656339
  - Fix various crashes spotted by coverity rhbz#1644209
  - Fix remotectl crash with inaccessible files rhbz#1644213
  - Fix race condition with fslist1 channels rhbz#1644223
  - Fix crash with parsing invalid bas64 headers rhbz#1663712


author: Martin Pitt <mpitt@redhat.com> 195.2-1
changelog:
  - firewall: Only reload firewall when adding custom services (rhbz#1725094)
  - networking: Activate a connection after clearing master/slave fields (rhbz#1729378)
  - Add Obsoletes: for ancient cockpit-shell package (rhbz#1744208)


author: Martin Pitt <mpitt@redhat.com> 195.3-1
changelog:
  - subscriptions: Add support for Red Hat Insights (rhbz#1748026)
  - systemd: Warn if not connected to Insights (rhbz#1748350)


author: Martin Pitt <mpitt@redhat.com> 195.8-1
changelog:
  - webserver: Fix large requests with TLS (rhbz#1785497)
  - Machines: Avoid D-Bus introspection to libvirt-dbus, to speed up polkit
    operations (rhbz#1780400)
  - Machines: Fix CPU statistics (rhbz#1763641)


author: Martin Pitt <mpitt@redhat.com> 195.9-1
changelog:
  - ws: Add support for EC certificates (rhbz#1841070)
  - Translation fixes (rhbz#1796834)
  - Use RHSM1 service instead of the deprecated (and now removed)
    com.redhat.SubscriptionManager


author: Peter Robinson <pbrobinson@fedoraproject.org> - 1.8.2-1
changelog:
  - 1.8.2 stable release
  - http://ftp.gnome.org/pub/GNOME/sources/cogl/1.8/cogl-1.8.2.news
  - Enable gdk-pixbuf2 support - Fixes RHBZ # 738092


author: Adam Jackson <ajax@redhat.com> 1.8.2-4
changelog:
  - cogl-1.8.2-lp-no-framebuffer-blit.patch: Disable the subbuffer blit code
    when running on llvmpipe until it's unbroken.


author: Kalev Lember <kalevlember@gmail.com> - 1.17.4-1
changelog:
  - Update to 1.17.4, which includes soname bump
  - Build a temporary compat-libcogl19 subpackage to ease the rebuilds


author: Owen Taylor <otaylor@redhat.com> - 1.18.2-12
changelog:
  - Add patches to improve display synchronization on NVIDIA
      
    When testing quadbuffer stereo patches, GNOME Shell would sometimes
    hang up on restart. This turned out to be a problem with display
    synchronization on NVIDIA. The patches added here make display
    synchronization work much more similarly with the NVIDIA drivers
    and the open source drivers, which not only fixes this bug, but should
    reduce future bugs.
      
    Resolves: #1305076

  - Add patches improving frame completion events in Cogl


author: Richard Hughes <richard@hughsie.com> 0.1.7-1
changelog:
  - New upstream version.
  - Create /var/lib/colord at buildtime not runtime for SELinux
  - Ensure profiles with embedded profile checksums are parsed correctly
  - Move the colorimeter rules to be run before 70-acl.rules
  - Stop watching the client when the sensor is finalized
  - Ensure the source is destroyed when we unref CdUsb to prevent a crash
  - Only enable the volume mount tracking when searching volumes


author: Richard Hughes <richard@hughsie.com> 0.1.8-1
changelog:
  - New upstream version
  - Add a webcam device kind
  - Add a timestamp when making profiles default
  - Add support for reading and writing ICC profile metadata
  - Allow the client to pass file descriptors out of band to CreateProfile
  - Prettify the device vendor and model names
  - Split out the sensors into runtime-loadable shared objects
  - Provide some GIO async variants for the methods in CdClient
  - Ensure GPhoto2 devices get added to the device list


author: Richard Hughes <richard@hughsie.com> 0.1.11-2
changelog:
  - Remove the sedding libtool's internals as it breaks
    generation of the GObject Introspection data.


author: Richard Hughes <richard@hughsie.com> 0.1.13-1
changelog:
  - New upstream version
  - Ensure uid 0 can always create devices and profiles
  - Reduce the CPU load of clients when assigning profiles


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream version
  - This release fixes an important security bug: CVE-2011-4349.
  - Do not crash the daemon if adding the device to the db failed
  - Fix a memory leak when getting properties from a device


author: Richard Hughes <richard@hughsie.com> 0.1.16-1
changelog:
  - New upstream version
  - Now runs as a colord user rather than as root.
  - Support more ICC metadata keys
  - Install a systemd service file
  - Support 2nd generation Huey hardware


author: Richard Hughes <richard@hughsie.com> 0.1.17-1
changelog:
  - New upstream version
  - Add an LED sample type
  - Add PrivateNetwork and PrivateTmp to the systemd service file
  - Fix InstallSystemWide() when running as the colord user


author: Richard Hughes <richard@hughsie.com> 0.1.18-1
changelog:
  - New upstream version
  - Add a Manager.CreateProfileWithFd() method for QtDBus
  - Split out the SANE support into it's own process
  - Fix a small leak when creating devices and profiles in clients
  - Fix cd-fix-profile to add and remove metadata entries
  - Install per-machine profiles in /var/lib/colord/icc


author: Richard Hughes <richard@hughsie.com> 0.1.20-1
changelog:
  - New upstream version
  - Add a sensor-set-options command to the colormgr tool
  - Add the concept of 'options' on each color sensor device
  - Enable gtk-doc in the default distro build


author: Richard Hughes <richard@hughsie.com> 0.1.21-1
changelog:
  - New upstream version
  - Do not install any parts of colord-sane if --disable-sane is specified
  - Fix InstallSystemWide() by not writing a private file
  - Save the CCMX and ITx files to be compatible with argyllcms
  - The ColorHug has a new VID and PID


author: Richard Hughes <richard@hughsie.com> 0.1.22-1
changelog:
  - New upstream version
  - Split out colord-gtk to a new sub-project to prevent a dep loop
  - Add many generic introspection type arguments
  - Check any files in /usr/share/color/icc have the content type
  - Do not create the same object paths if two sensors are plugged in
  - Fix the udev rules entry for the i1Display3


author: Richard Hughes <richard@hughsie.com> 0.1.24-1
changelog:
  - New upstream version
  - Fix a critical warning when user tries to dump a non-icc file
  - Remove libsane support and rely only on udev for scanner information
  - Set the seat for devices created in the session and from udev


author: Richard Hughes <richard@hughsie.com> 0.1.25-1
changelog:
  - New upstream version
  - Add a create-standard-space sub-command to cd-create-profile
  - Add a profile metadata key of 'License'
  - Add a set-version command to the cd-fix-profile command line tool
  - Create linear vcgt tables when using create-x11-gamma
  - Fix GetStandardSpace so it can actually work
  - Move the named color examples to shared-color-profiles


author: Richard Hughes <richard@hughsie.com> 0.1.26-1
changelog:
  - New upstream version
  - Add a session helper that can be used to calibrate the screen
  - Add some defines for the Spyder4 display colorimeter
  - Add support for reading and writing .cal files to CdIt8
  - Add the ability to 'disable' a device from a color POV
  - Create ICCv2 profiles when using cd-create-profile
  - Use enumerated error values in the client library
  - Use spotread when there is no native sensor driver


author: Richard Hughes <richard@hughsie.com> 0.1.27-1
changelog:
  - New upstream version
  - Add some more calibration attach images
  - Import shared-color-profiles into colord
  - Install a header with all the session helper defines


author: Kalev Lember <kalevlember@gmail.com> 0.1.27-2
changelog:
  - Split out libcolord to colord-libs subpackage, so that the daemon package
    doesn't get multilibbed


author: Richard Hughes <richard@hughsie.com> 0.1.27-4
changelog:
  - Add BR systemd-devel so the seat tracking stuff works
  - Build with full compiler output
  - Do not build the profiles in parallel, backported from upstream
  - Limit the memory allocation to 2GiB when building profiles
  - Do not attempt to build the print profiles on ARM or PPC hardware


author: Richard Hughes <richard@hughsie.com> 0.1.28-1
changelog:
  - New upstream version
  - Add some default GSetting schema values for the calibration helper
  - Add the sensor images as metadata on the D-Bus interface
  - Quit the session helper if the device or sensor was not found


author: Richard Hughes <richard@hughsie.com> 0.1.29-1
changelog:
  - New upstream version
  - Add a --verbose and --version argument to colormgr
  - Add DTP94 native sensor support
  - Allow profiles to have a 'score' which affects the standard space
  - Change the Adobe RGB description to be 'Compatible with Adobe RGB (1998)'
  - Detect profiles from adobe.com and color.org and add metadata
  - Do not auto-add profiles due to device-id metadata if they have been removed
  - Ensure profiles with MAPPING_device_id get auto-added to devices
  - Install various helper libraries for access to hardware
  - Set the additional 'OwnerCmdline' metadata on each device


author: Richard Hughes <richard@hughsie.com> 0.1.30-1
changelog:
  - New upstream version
  - Append -private to the driver libraries as they have no headers installed
  - Do not show duplicate profiles when icc-profiles-openicc is installed
  - Speed up the daemon loading and use less I/O at startup


author: Richard Hughes <richard@hughsie.com> 0.1.31-1
changelog:
  - New upstream version
  - Calculate the display calibration based on the Lab and target display gamma
  - Interpolate the gamma data to the VCGT size using Akima
  - Add some more display vendor names to the display fixup table
  - Fix the argyll sensor driver when using the ColorMunki Smile
  - Fix the gamut warning to check primaries wider than CIERGB and ProPhoto
  - Move the private sensor libraries out of the pure lib space


author: Richard Hughes <richard@hughsie.com> 0.1.32-1
changelog:
  - New upstream version
  - Add a new tool 'cd-iccdump' that can dump V4 and V2 profiles
  - Add translated descriptions to the ICC profiles


author: Richard Hughes <richard@hughsie.com> 0.1.33-1
changelog:
  - New upstream version
  - Add some translated profile descriptions for the CMYK profiles
  - Add the FOGRA45L and FOGRA47L CMYK and eciRGBv1 profiles
  - Check the generated CCMX matrix for invalid data
  - Do not print a warning if the DBus property does not exist
  - Ensure mbstowcs() has an LC_CTYPE of 'en_US.UTF-8'
  - Always write C-locale floating point values in IT8 files
  - Initialize the value of the CCMX matrix
  - Never promote localized v2 ICC profiles to v4
  - Rename ISOnewspaper26 to IFRA26S_2004_newsprint


author: Richard Hughes <richard@hughsie.com> 0.1.34-1
changelog:
  - New upstream version
  - Add a ICC transform object for simple RGB conversions
  - Add a warning for RGB profiles with unlikely whitepoint values
  - Add Qt DBus annotations
  - Allow clients to call org.freedesktop.DBus.Peer
  - Correct a lot more company names when creating devices
  - Do not automatically add EDID profiles with warnings to devices
  - Increase the delay between patches in the session-helper
  - Install the bash completion support into /usr


author: Richard Hughes <richard@hughsie.com> 1.0.0-1
changelog:
  - New upstream version
  - Add a config option for monitors with identical EDID values
  - Allow a different input and output format in CdTransform
  - Build all installed binaries with PIE
  - Build the colord binary with full RELRO
  - Do not show a warning when using 'colormgr device-get-profile-for-qualifier'
  - Fix crash in cd-iccdump by working around an lcms2 bug
  - Fix using the color sensors on ARM hardware
  - Set the STANDARD_space metadata for the print profiles
  - Show all the translations when dumping an ICC profile


author: Richard Hughes <richard@hughsie.com> 1.0.1-1
changelog:
  - New upstream version
  - Do not unconditionally enable BPC on the color transform
  - Fix profile created time for non-UTC timezones
  - Record the gamma table in the session helper error message


author: Richard Hughes <richard@hughsie.com> 1.0.2-1
changelog:
  - New upstream version
  - Add cd_icc_save_data() so that we can easily set _ICC_PROFILE
  - Add CdIccStore to monitor directories of ICC profiles
  - Add SystemVendor and SystemModel properties to the main interface
  - Allow to specify a non-qualified path when using FindProfileByFilename
  - Allow using the key 'Filename' when using FindProfileByProperty
  - Always return the error if any sync method failed
  - Fix GObject introspection when getting lists
  - Fix GObject introspection when getting metadata


author: Richard Hughes <richard@hughsie.com> 1.0.4-1
changelog:
  - Rebase to a new upstream version to fix small security bug
  - Use %ghost in the to avoid removing databases on upgrades
  - Resolves: #1012832


author: Richard Hughes <richard@hughsie.com> 0.1.22-2
changelog:
  - Backport a patch from git master that fixes an include issue with
    projects that want to use colord-gtk.h and colord.h at the same time.


author: Richard Hughes <richard@hughsie.com> 0.1.25-1
changelog:
  - New upstream version.
  - Give the sample widget slightly curved corners and a gray outline
  - Do not use deprecated functions from libcolord
  - Fix warnings when building ColordGtk-1.0.gir
  - Fix up the licence boilerplate for CdSampleWidget


author: Jay Fenlason <fenlason@redhat.com> 1:1.2.15-1.el5
changelog:
  - Change sysconfig file to /etc/rdma/compat-dapl to match the change in dapl
  - Split out into separate source rpm from the dapl-2.0.25-2.el5.src.rpm
    Resolves: rhbz#557170 split compat-dapl into a separate srpm


author: Doug Ledford <dledford@redhat.com> - 1:1.2.15-2.el6
changelog:
  - Fix various rpmlint wanrings in spec file
  - Version all of the obsoletes
  - Now that this is no longer part of the dapl rpm, it needs its own
    doc macro so that the license and whatnot are on the system when the
    package is installed
  - Related: bz555835


author: Jay Fenlason <fenlason@redhat.com> - 1:1.2.15-2.1.el6
changelog:
  - Include pipe-leak patch to close
    Resolves: rhbz619439 - OFED1.5.1: uDAPL - cma: memory leak of FD's (DB2 pureScale)
    This required some whitspace editing--apparently the patch was garbled
    somewhere in transit.
  - Include the cma-memleak-verbs-CQ-compl-chans-fix patch to close
    Resolves: rhbz619443 - OFED1.5.1: uDAPL handles close on forked child exit (DB2 pureScale)


author: Doug Ledford <dledford@redhat.com> - 1:1.2.19-1
changelog:
  - Update to latest upstream release (1.2.15 -> 1.2.19)
  - Remove 3 patches rolled into upstream
  - Update exclusive arch to accommodate i686 arch
  - Related: bz725016, bz724896


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - add 3.0.55.1 alignment patch.
  - add --enable-posixmutexes (linux threads has not pthread_*attr_setpshared).
  - add --enable-tcl (needed -lpthreads).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - disable --enable-test --enable-debug_rop --enable-debug_wop.
  - disable --enable-posixmutexes --enable-tcl as well, to avoid glibc-2.1.3
    problems.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 3.1.14.
  - create db3-utils sub-package to hide tcl dependency, enable tcl Yet Again.
  - FHS packaging.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - summaries from specspo.
  - all of libdb_tcl* (including symlinks) in db3-utils, should be db3->tcl?


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - remove redundant strip of libnss_db* that is nuking symbols.
  - change location in /usr/lib/libdb-3.1.la to point to /lib (#16776).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - rather than hack *.la (see below), create /usr/lib/libdb-3.1.so symlink.
  - turn off --enable-diagnostic for performance.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't build with --enable-diagnostic.
  - add build prereq on tcl.
  - default value for %_lib macro if not found.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix URLs in docs for the -utils and -devel subpackages to point to the
    images in the main package's documentation directory (#33328)
  - change Copyright: GPL to License: BSDish


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - rename to db31, drop the -devel subpackage, merge the -utils package
  - remove berkeley_db_svc, libdb_tcl.so (conflicts with current -utils)


author: Nalin Dahyabhai <nalin@redhat.com> 3.2.9-3
changelog:
  - don't list the tcl include path before other flags when building libdb_tcl
    3.1.x (tcl is in /usr, so this pulls in /usr/include/db.h, which is wrong)


author: Nalin Dahyabhai <nalin@redhat.com> 3.3.11-1
changelog:
  - pull in db 3.3, obsolete db3 and db32 in addition to db31
  - build with compat-gcc/compat-gcc-c++ to get C++ shared libraries suitable
    for use in applications built with db3-devel on RHL 7.x
  - pull in db2, obsolete db2/db2-devel/db3-devel, rename to compat-db
  - obsolete db3x


author: Jeff Johnson <jbj@redhat.com> 4.0.14-3
changelog:
  - compile on all platforms, use gcc296 only on i386/alpha/ia64
  - avoid ppc64 toolchain for the nonce.


author: Jeff Johnson <jbj@jbj.org> 4.2.52-1
changelog:
  - apply patch.4.1.25.2.
  - retire db-4.2.52 with patch.4.2.52.{1,2} into compat-db.
  - nuke db2 and db-3.3.11.
  - nuke db1 as well.


author: Jindrich Novy <jnovy@redhat.com> 4.2.52-5
changelog:
  - package libdb_cxx, which is a dependency for OpenOffice.org-1.x and
    other legacy software (#198130), thanks to Sivasankar Chander
    <siva.chander@gmail.com>


author: Jindrich Novy <jnovy@redhat.com> 4.3.29-1
changelog:
  - add 4.3.29 and remove 4.1.25
  - spec reduction diet, remove old unapplied patches
  - apply patches 3-5 with upstream fixes for 4.2.52
  - apply first upstream fix patch for 4.3.29
  - all patches/sources now point to correct URLs
  - ship headers for db-4.3.29


author: Jindrich Novy <jnovy@redhat.com> 4.3.29-2
changelog:
  - include also headers for db4-4.2.52
  - sync db4 and compat-db licenses to BSD-style as the result of
    consultation with legal department
  - BuildPreReq -> BuildRequires, rpmlint fixes


author: Jindrich Novy <jnovy@redhat.com> 4.5.20-1
changelog:
  - add 4.5.20 to compat-db
  - package db45_hotbackup
  - correct open() calls so that compat-db compiles with the new glibc
  - apply db185 patches to all compat-db db4s


author: Jindrich Novy <jnovy@redhat.com> 4.5.20-3
changelog:
  - remove db4 provides to workaround RPM obsoletes/provides problem (#111071),
    automatic library provides should be enough for compat-db
  - obsolete old db4s again


author: Jindrich Novy <jnovy@redhat.com> 4.6.21-1
changelog:
  - move db-4.6.21 to compat-db (#449741)
  - remove db-4.2.52
  - package db46_codegen
  - create symlinks to ease detection for autofoo
  - fix license and filelists


author: Jindrich Novy <jnovy@redhat.com> 4.6.21-3
changelog:
  - fix URL to 4.3.29 patch
  - official upstream tarball for db-4.3.29 has changed, the only change
    is in license text that allows dual licensing of skiplist.[ch] from
    LGPL to BSD


author: Jindrich Novy <jnovy@redhat.com> 4.6.21-5
changelog:
  - drop support for 4.3.29
  - split compat-db to compat-db45 and compat-db46 subpackages
    to avoid dependency bloat (#459710)


author: Jindrich Novy <jnovy@redhat.com> 4.6.21-6
changelog:
  - remove libtool hacks so that compat-db builds again
  - remove support for old BDBs: 4.3.29, 4.2.52, 4.1.25


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-18
changelog:
  - really fix the update path (#627019, #627387)
  - introduce -headers subpackage to avoid conflicts on multiarch
    systems (#590973)
  - install package license


author: Jan Grulich <jgrulich@redhat.com> - 0.23-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1568618


author: Jan Grulich <jgrulich@redhat.com> - 0.26-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1668355


author: Jakub Jelinek <jakub@redhat.com> 3.4.6-4
changelog:
  - buildrequire elfutils-devel, so that libgcc_s is properly built
    on ia64
  - on ppc*/s390* make sure all needed math *l stubs are included
  - add -lnldbl_nonshared to ppc*/s390* specs


author: Jakub Jelinek <jakub@redhat.com> 3.4.6-7
changelog:
  - ignore install-info failures in scriptlets (#223680)
  - don't include cpp.debug in compat-gcc-34-debuginfo (#227021)
  - fix .debug_line for inline function parameter blocks
    (Alexandre Oliva, #214353)
  - fix hang in vt_find_locations with -O{2,3} -g
    (Alexandre Oliva, #216695, #218377)
  - fix if-conversion ICE (Eric Botcazou, #207277)
  - fix template instantiation ICE (Alexandre Oliva, #205919)


author: Jakub Jelinek <jakub@redhat.com> 3.4.6-8
changelog:
  - update License tag
  - build with ld --build-id
  - grok makeinfo >= 4.10 during configury
  - avoid aliasing warnings in libstdc++-v3 headers when compiled
    with g++ 4.x (Paolo Carlini, PR libstdc++/24975, #240020)
  - fix RTL expansion of COMPLEX_EXPR (#233941)
  - fix deque<>::erase(iterator, iterator) (Steve LoBasso,
    Paolo Carlini, #234515)
  - fix french and kinyarwanda translations (#235008)
  - handle PARALLELs in GCSE store motion (Alexandre Oliva, #235255)
  - ensure zero termination for invalid, overly long, std::__enc_traits
    internal or external character set names (Jatin Nansi, #242685)


author: Jakub Jelinek <jakub@redhat.com> 4.4.7-7
changelog:
  - change -fstack-protector-strong to -fstack-protector in optflags,
    remove -march=x86-64 and -mfpmath=sse for ix86 (#1048852)


author: Ian Chapman <packages@amiga-hardware.com> 1.3.4-2.an7
changelog:
  - Replaced %{_sed} macro with sed
  - Replaced xorg-x11-devel (build)requires with libGLU-devel for compatibility
    with modular / non-modular X
  - Replaced source URL to use primary sf site rather than a mirror
  - Removed superfluous docs from devel package
  - Removed wglew.h, seems to be only useful for windows platforms


author: Ian Chapman <packages@amiga-hardware.com> 1.3.5-1.an7
changelog:
  - Updated to 1.3.5
  - Fixed stripping of the binaries
  - Reinstate parallel building, no longer appears broken
  - Removed FC4 specifics from spec (no longer supported)


author: Ian Chapman <packages@amiga-hardware.com> 1.3.6-1.an7
changelog:
  - Updated to 1.3.6
  - Updated pathandstrip patch
  - Dropped xlib patch - fixed upstream
  - Dropped sed EOL replacements - fixed upstream
  - Changed license to GPL


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.4.0-2
changelog:
  - Remove SGI encumbered files to make this ok to go into Fedora
  - Replace some removed files with (modified) mesa files
  - Regenerate some of the removed files using the mesa replacemenmt files
    and the scripts in the auto directory
  - Readd wglew.h, some programs may need this to compile
  - Update License tag for new Licensing Guidelines compliance


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.4.0-3
changelog:
  - Fix multiple unused direct shlib dependencies in libGLEW.so
  - Remove the "SGI Free Software License B" and "GLX Public License" tekst from
    the doc dir in the tarbal
  - Patch credits.html to no longer refer to the 2 non free licenses, instead it
    now points to LICENSE-README.fedora
  - Put API docs in -devel instead of main package


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.5.0-1
changelog:
  - New upstream version, now SGI licensed stuff free out of the box!
  - Unfortunately some of the included docs are under a non free license,
    therefor this package is based on a modified tarbal with these files removed


author: Adam Williamson <awilliam@redhat.com> - 1.5.7-3
changelog:
  - add glewmx.patch (upstream commit 302c224016, always build the
    MX-enabled version of the library as well as non-MX version, under
    a different name)
  - revise add-needed.patch to change the LDFLAGS in a better place
    and add -lGLU as well as -lX11


author: Adam Jackson <ajax@redhat.com> 1.5.8-2
changelog:
  - glew-1.5.8-glewmx.patch: Install libGLEWmx 0755 so autoprovs work
  - Split runtime libraries to their own packages


author: Adam Williamson <awilliam@redhat.com> - 1.5.8-3
changelog:
  - instead of taking flags out in makefile.patch and adding them back
    in add-needed.patch, let's just not take them out...


author: Jan Vcelak <jvcelak@redhat.com> 1:2.3.43-3
changelog:
  - enhancement: build with hardening flags (RELRO)
  - fix: querying for IPv6 DNS records when IPv6 is disabled on the host (#835013)
  - drop unnecessary patches
  - clean configure flags


author: Doug Ledford <dledford@redhat.com> - 3.3.5-2
changelog:
  - Drop libibmad as it didn't soname bump, and also remove the lower level
    opensm libs, libosm{comp,vendor} as they didn't soname bump either
  - Related: bz725016


author: Doug Ledford <dledford@redhat.com> - 3.3.5-3
changelog:
  - Change the file spec so we don't accidentally pick up the debug files in
    the base package on 32bit arches
  - Resolves: bz732495


author: Honggang Li <honli@redhat.com> - 3.3.15-3
changelog:
  - Package up libosmcomp.so.3* to fix dependency issue after rebase
    opensm to release 3.3.21
  - Resolves: bz1670692


author: Marek Kasik <mkasik@redhat.com> - 0.22.5-4
changelog:
  - Add back glib, cpp and qt frontends so that existing applications
  - loads correct libpoppler.so.*.
  - Resolves: #1184215


author: Jarod Wilson <jwilson@redhat.com> 0.1.9.1-2
changelog:
  - Create log directories and install working logrotate config
  - Use a much cleaner RH/FC-specific initscript


author: Jarod Wilson <jwilson@redhat.com> 0.1.9.1-3
changelog:
  - Add Requires: logrotate
  - Ugh, conmand exits cleanly if no CONSOLE(s) are defined in
    /etc/conman.conf, add check to initscript to report failure
    if none are defined


author: Jarod Wilson <jarod@redhat.com> 0.2.2-2
changelog:
  - The console option in conman.conf is case-insensitive, so relax
    defined consoles check in initscript (Mark McLoughlin, #465777)


author: Denys Vlasenko <dvlasenk@redhat.com> - 0.2.7-4
changelog:
  - Forward-porting fixes from RHEL6.
  - Enlarge buffer used for formatting date in a string format.
  - Resolves: rhbz#891938.
  - Allow configuration of the maximum number of open files.
  - Resolves: rhbz#738967.


author: Denys Vlasenko <dvlasenk@redhat.com> - 0.2.7-9
changelog:
  - Added commented-out "LimitNOFILE=" directive to conman.service.
  - This is systemd-esque way to change process limits for serivces.
  - Also and a comment when to use it.
  - Resolves: rhbz#1035228.


author: Paul Wouters <pwouters@redhat.com> - 1.4.2-8
changelog:
  - Resolves: rhbz#CVE-2015-6496
  - Fold in upstream patches since 1.4.2 release up to git 900d7e8
  - Fold in upstream patch set of 2015-08-18 for coverity issues


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-3
changelog:
  - Resolves: rhbz#1425552 (explicitely Require: libnetfilter_conntrack >= 1.0.6 as it is same .so version)


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-4
changelog:
  - Resolves: rhbz#1578059 Greatest NVR version of conntrack-tools for ppc64le and x86_64 are different


author: Phil Sutter <psutter@redhat.com> - 1.4.4-5
changelog:
  - Add git commit info to IPv6 NAT support patch
  - Backport: conntrackd: helpers: dhcpv6: Fix potential array overrun
  - Backport: nfct: Drop dead code in nfct_timeout_parse_params()
  - Backport: src: Fix for implicit-fallthrough warnings


author: Adam Williamson <awilliam@redhat.com> 2.91.2-2
changelog:
  - add upstream patch to fix sound module to link against libxml
    https://bugzilla.gnome.org/show_bug.cgi?id=634467


author: Richard Hughes <rhughes@redhat.com> 2.91.91-3
changelog:
  - Ensure we have NetworkManager-glib-devel to get the network panel
  - Explicitly list all the panels so we know if one goes missing


author: Kalev Lember <kalevlember@gmail.com> - 1:3.7.3-1
changelog:
  - Update to 3.7.3
  - Drop upstreamed wacom-osd-window patch
  - Adjust for the statically linked plugins and panel applet removal


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-6
changelog:
  + control-center-3.26.2-6
  - Fix Clone MAC not being saved in Ethernet device properties
  - Resolves: #1467295


author: Bastien Nocera <bnocera@redhat.com> - 3.26.2-8
changelog:
  + control-center-3.26.2-8
  - Fix Wi-Fi networks not getting updated
  - Show "Wi-Fi disabled" page when Wi-Fi is disabled
  - Resolves: #1545713


author: Bob Relyea <rrelyea@redhat.com> - 1.0.1-4
changelog:
  - make the coolkey token caches persist over application calls.
  - make a separate cache for each user.


author: Bob Relyea <rrelyea@redhat.com> - 1.0.1-11
changelog:
  - CAC cards sometimes need to reset before they can get their
  - initial transaction (problem is noticed on insertion an removal)


author: Bob Relyea <rrelyea@redhat.com> - 1.0.1-14
changelog:
  - Shared memory directory needs to be writeable by all so
  - coolkey can create caches for any user. (lack of caches
  - show up in screen savers reactly slowly).


author: Robert Relyea <rrelyea@redhat.com> - 1.1.0-12
changelog:
  - Fix threading issue. Coolkey will now work with non-threaded applications 
  - that don't link with libpthread.


author: Robert Relyea <rrelyea@redhat.com> - 1.1.0-34
changelog:
  - recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
  - own our cache file.
  - verify we are using the correct mechanisms


author: Thierry Vignaud <tvignaud@mandrakesoft.com> 4.5.2-1mdk
changelog:
  - initial release (merge fileutils, sh-utils & textutils)
  - obsoletes/provides: sh-utils/fileutils/textutils
  - fileutils stuff go in 1xx range
  - sh-utils stuff go in 7xx range
  - textutils stuff go in 5xx range
  - drop obsoletes patches 1, 2, 10 (somes files're gone but we didn't ship
    most of them)
  - rediff patches 103, 105, 111, 113, 180, 706
  - temporary disable patch 3 & 4
  - fix fileutils url


author: Thierry Vignaud <tvignaud@mandrakesoft.com> 4.5.2-2mdk
changelog:
  - fix build
  - don't chmode two times su
  - build with large file support
  - fix description
  - various spec cleanups
  - fix chroot installation
  - fix missing /bin/env
  - add old fileutils, sh-utils & textutils ChangeLogs


author: Tim Waugh <twaugh@redhat.com> 4.5.3-3
changelog:
  - Adapted for Red Hat Linux.
  - Self-host for help2man.
  - Don't ship readlink just yet (maybe later).
  - Merge patches from fileutils and sh-utils (textutils ones are already
    merged it seems).
  - Keep the binaries where the used to be (in particular, id and stat).


author: Tim Waugh <twaugh@redhat.com> 4.5.3-4
changelog:
  - Fix scriplets.
  - Fix i18n patch so it doesn't break uniq.
  - Fix several other patches to either make the test suite pass or
    not run the relevant tests.
  - Run 'make check'.
  - Fix file list.


author: Tim Waugh <twaugh@redhat.com> 4.5.10-1
changelog:
  - 4.5.10.
  - Update lug, touch_errno, acl, utmp, printf-ll, i18n, test-bugs patches.
  - Drop fr_fix, LC_TIME, preserve, regex patches.


author: Tim Waugh <twaugh@redhat.com> 5.0-5
changelog:
  - Both kon and kterm support colours (bug #83701).
  - Fix 'ls -l' alignment in zh_CN locale (bug #88346).


author: Tim Waugh <twaugh@redhat.com> 5.0-12
changelog:
  - Don't run 'make check' for this build (build environment problem).
  - Another uninitialized variable in i18n (from bug #98683).


author: Tim Waugh <twaugh@redhat.com> 5.0-13
changelog:
  - Made su use pam again (oops).
  - Fixed another i18n bug causing sort --month-sort to fail.
  - Don't run dubious stty test, since it fails when backgrounded
    (bug #102033).
  - Re-enable make check.


author: Tim Waugh <twaugh@redhat.com> 5.0-20
changelog:
  - Restrict ACL support to only those programs needing it (bug #106141).
  - Fix default PATH for LSB (bug #102567).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Stop 'sort -g' leaking memory (i18n patch bug #115620).
  - Don't ship kill, since util-linux already does.
  - Tidy AFS patch.


author: Tim Waugh <twaugh@redhat.com> 5.2.0-6
changelog:
  - Apply Paul Eggert's chown patch (bug #116536).
  - Merged chdir patch into pam patch where it belongs.


author: Tim Waugh <twaugh@redhat.com> 5.2.1-9
changelog:
  - Mention pam in the info for su (bug #122592).
  - Remove wheel group rant again (bug #122886).
  - Change default behaviour for chgrp/chown (bug #123263).  Patch from
    upstream.


author: Tim Waugh <twaugh@redhat.com> 5.2.1-19
changelog:
  - Added 'gnome' TERM to DIR_COLORS (bug #129112).
  - Worked around a bash bug #129128.
  - Fixed an i18n patch bug in cut (bug #129114).


author: Tim Waugh <twaugh@redhat.com> 5.2.1-21
changelog:
  - Apply upstream patch to fix 'cp -a' onto multiply-linked files (bug #128874).
  - SELinux patch fix: don't error out if lgetfilecon() returns ENODATA.


author: Dan Walsh <dwalsh@redhat.com> 5.2.1-53
changelog:
  - Allow id to run even when SELinux security context can not be run
  - Change chcon to use raw functions.


author: Tim Waugh <twaugh@redhat.com> 5.92-0.1
changelog:
  - 5.92.
  - No longer need afs, dircolors, utmp, gcc4, brokentest, dateseconds,
    chown, rmaccess, copy, stale-utmp, no-sign-extend, fchown patches.
  - Updated acl, dateman, pam, langinfo, i18n, getgrouplist, selinux patches.
  - Dropped printf-ll, allow_old_options, jday, zh_CN patches.
  - NOTE: i18n patch not ported for sort(1) yet.


author: Tim Waugh <twaugh@redhat.com> 5.93-2
changelog:
  - Call setsid() in su under some circumstances (bug #173008).
  - Prevent runuser operating when setuid (bug #173113).


author: Tim Waugh <twaugh@redhat.com> 5.93-4
changelog:
  - Rebuild to pick up new glibc *at functions.
  - Apply runuser PAM patch from bug #173807.  Ship runuser PAM file.


author: Dan Walsh <dwalsh@redhat.com> 5.93-6
changelog:
  - Remove pam_selinux.so from su.pamd, not needed for targeted and Strict/MLS 
    will have to newrole before using.


author: Tim Waugh <twaugh@redhat.com> 5.96-4
changelog:
  - Include new hashes (bug #196369).  Patch from upstream.
  - Build at -O1 on s390 for the moment (bug #196369).


author: David Howells <dhowells@redhat.com> 5.97-4
changelog:
  - split the PAM scripts for "su -l"/"runuser -l" from that of normal "su" and
    "runuser" (#198639)
  - add keyinit instructions to PAM scripts


author: Tim Waugh <twaugh@redhat.com> 5.97-6
changelog:
  - Added runuser '-g' and '-G' options (bug #199344).
  - Added su '--session-command' option (bug #199066).


author: Tim Waugh <twaugh@redhat.com> 5.97-10
changelog:
  - Ignore 'cifs' filesystems for 'df -l' (bug #183703).
  - Include -g/-G in runuser man page (part of bug #199344).
  - Corrected runuser man page (bug #200620).


author: Tim Waugh <twaugh@redhat.com> 5.97-15
changelog:
  - Fixed stat's 'C' format specifier (bug #216676).
  - Misleading 'id -Z root' error message (bug #211089).


author: Tim Waugh <twaugh@redhat.com> 6.7-1
changelog:
  - 6.7.  No longer need sort-compatibility, rename, newhashes, timestyle,
    acl, df-cifs, afs or autoconf patches.


author: Tim Waugh <twaugh@redhat.com> 6.7-4
changelog:
  - Ship COPYING file (bug #225655).
  - Use datadir and infodir macros in %pre scriptlet (bug #225655).
  - Use spaces not tabs (bug #225655).
  - Fixed build root.
  - Change prereq to requires (bug #225655).
  - Explicitly version some obsoletes tags (bug #225655).
  - Removed obsolete pl translation fix.


author: Tim Waugh <twaugh@redhat.com> 6.7-5
changelog:
  - Removed unnecessary stuff in pre scriptlet (bug #225655).
  - Prefix sources with 'coreutils-' (bug #225655).
  - Avoid %makeinstall (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-7
changelog:
  - Better Obsoletes/Provides versioning (bug #225655).
  - Use better defattr (bug #225655).
  - Be info file compression tolerant (bug #225655).
  - Moved changelog compression to %install (bug #225655).
  - Prevent upstream changes being masked (bug #225655).
  - Added a comment (bug #225655).
  - Use install -p for non-compiled files (bug #225655).
  - Use sysconfdir macro for /etc (bug #225655).
  - Use Requires(pre) etc for install-info (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-8
changelog:
  - Don't mark profile scripts as config files (bug #225655).
  - Avoid extra directory separators (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-9
changelog:
  - Use sed instead of perl for text replacement (bug #225655).
  - Use install-info scriptlets from the guidelines (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.9-3
changelog:
  - Fixed 'ls -x' output (bug #240298).
  - Disambiguate futimens() from the glibc implementation (bug #242321).


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-10
changelog:
  - modified coreutils-i18n.patch because of sort -R in
    a non C locales(fix by Andreas Schwab) (#249315)


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-12
changelog:
  - added some upstream supported dircolors TERMs(#239266)
  - fixed du output for unaccesible dirs(#250089)
  - a bit of upstream tunning for symlinks


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-17
changelog:
  - added several missing colored TERMs(including rxvt-unicode,
    screen-256color and xterm-256color) to DIR_COLORS and
    DIR_COLORS.xterm(#239266)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-1
changelog:
  - New upstream release(changed %prep because of lack of lzma
    support in %setup macro)
  - License GPLv3+
  - removed patches cp-i-u,du-ls-upstream,statsecuritycontext,
    futimens,getdateYYYYMMDD,ls-x
  - modified patches to be compilable after upstream changes
  - selinux patch reworked to have backward compatibility with
    F8(cp,ls and stat behaviour differ from upstream in SELinux
    options)
  - su-l/runuser-l pam file usage a bit documented(#368721)
  - more TERMs for DIR_COLORS, added colors for audio files,
    more image/compress file types(taken from upstream 
    dircolors.hin)
  - new file DIR_COLORS.256color which takes advantage from 
    256color term types-not really used yet(#429121)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-3
changelog:
  - fix unability of echo to display certain strings(added --
    separator, #431005)
  - do not require only one long_opt for certain commands 
    e.g. sleep, yes - but use first usable (#431005)
  - do not override userspecified LS_COLORS variable, but
    use it for colored ls(#430827)
  - discard errors from dircolors to /dev/null + some tuning 
    of lscolor sh/csh scripts(#430823)
  - do not consider files with SELinux security context as
    files having ACL in ls long format(#430779)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-5
changelog:
  - enabled 256-color support in colorls shell scripts(#429121)
  - fixed syntax error in csh script(#431315)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-8
changelog:
  - use default security context in install - broken by 
    coreutils-6.10 update(#319231)
  - some sh/csh scripts optimalizations(by ville.skytta@iki.fi,
    - #433189, #433190)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-13
changelog:
  - disable echo option separator behavior(added by #431005,
    request for removal #437653 + upstream)
  - temporarily disabled longoptions change until full 
    clarification upstreamery (#431005)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-15
changelog:
  - covered correct handling for some test conditions failures
    e.g. root build+selinux active and not running mcstrans(d)
    or selinux enforcing (#436717)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-16
changelog:
  - keep LS_COLORS when USER_LS_COLORS defined
  - someupstream fixes:
  - mkdir -Z invalid-selinux-context dir no longer segfaults
  - ptx with odd number of backslashes no longer leads to buffer
    overflow
  - paste -d'\' file" no longer ovveruns memory


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-17
changelog:
  - better workaround of glibc getoptc change(factor test)
  - don't segfault mknod, mkfifo with invalid-selinux-context


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-18
changelog:
  - fix colorls.sh syntax with Zsh (#440652)
  - mention that cp -a includes -c option + mention cp -c 
    option in manpages (#440056)
  - fix typo in runuser manpages (#439410)


author: Ondrej Vasik <ovasik@redhat.com> - 6.11-2
changelog:
  - Do not show misleading scontext in id command when user
    is specified (#443485)
  - Avoid possible test failures on non-english locales


author: Ondrej Vasik <ovasik@redhat.com> - 6.11-3
changelog:
  - added arch utility (from util-linux-ng)
  - do not show executable file types without executable bit
    in colored ls as executable


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-2
changelog:
  - workaround for strange koji failures(#449910,#442352)
  - fixed ls -ZC segfault(#449866, introduced by 6.10-1 
    SELinux patch reworking)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-3
changelog:
  - workaround for koji failures(#449910, #442352) now 
    preserves timestamps correctly - fallback to supported
    functions, added test case
  - runuser binary is no longer doubled in /usr/bin/runuser


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-5
changelog:
  - fix authors for basename and echo
  - fix who info pages, print last runlevel only for printable
    chars


author: Kamil Dudka <kdudka@redhat.com> - 6.12-7
changelog:
  - dd: iflag=fullblock now read full blocks if possible
    (#431997, #449263)
  - ls: --color now highlights files with capabilities (#449985)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-10
changelog:
  - seq should no longer fail to display final number of some
    float usages of seq with utf8 locales(#463556)


author: Jarod Wilson <jarod@redhat.com> - 6.12-12
changelog:
  - fix up potential test failures when building in certain
    slightly quirky environments (part of bz#442352)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-13
changelog:
  - remove unimplemented (never accepted by upstream) option
    for chcon changes only. Removed from help and man.
  - remove ugly lzma hack as lzma is now supported by setup
    macro


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-14
changelog:
  - cp -Z now correctly separated in man page (#466646)
  - cp -Z works again (#466653)
  - make preservation of SELinux CTX non-mandatory for
    preserve=all cp option


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-15
changelog:
  - fix several date issues(e.g. countable dayshifts, ignoring
    some cases of relative offset, locales conversions...)
  - clarify ls exit statuses documentation (#446294)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-16
changelog:
  - make possible to disable capability in ls due to
    performance impact when not cached(#467508)
  - do not patch generated manpages - generate them at build
    time
  - do not mistakenly display -g and -G runuser option in su
    --help output


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-1
changelog:
  - new upstream release
  - modification/removal of related patches
  - use automake 1.10.1 instead of 1.10a
  - temporarily skip df --total tests (failures),
    timeout-paramaters (failure on ppc64)


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-2
changelog:
  - added requirements for util-linux-ng >= 2.14
    because of file conflict in update from F-8/F-9(#472445)
  - some sed cleanup, df totaltests patch changes (not working
    correctly yet :( )


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-4
changelog:
  - fixed syntax error w/ "expr" command using negative
    string/integer as first (i.e expr -125) - due to
    complexity of changes used diff against upstream git-head
    (#474434)
  - enable total-awk test again (and skip it when df not working)


author: Ondrej Vasik <ovasik@redhat.com> - 7.1-1
changelog:
  - New upstream release 7.1 (temporarily using tar.gz tarball
    as there are no xz utils in Fedora), removed applied
    patches, amended patches and LS_COLORS files


author: Ondrej Vasik <ovasik@redhat.com> 7.1-2
changelog:
  - workaround libcap issue with broken headers (#483548)
  - fix gnulib testsuite failure (4x77 (skip) is not
    77(skip) ;) )


author: Ondrej Vasik <ovasik@redhat.com> 7.1-7
changelog:
  - do not ship /etc/DIR_COLORS.xterm - as many terminals
    use TERM xterm and black background as default - making
    ls color output unreadable
  - shipping /etc/DIR_COLORS.lightbgcolor instead of it for
    light(white/gray) backgrounds
  - try to preserve xattrs in cp -a when possible


author: Ondrej Vasik <ovasik@redhat.com> 7.2-1
changelog:
  - New upstream bugfix release 7.2
  - removed applied patches
  - temporarily disable strverscmp failing gnulib test


author: Kamil Dudka <kdudka@redhat.com> - 7.4-5
changelog:
  - ls -1U with two or more arguments (or with -R or -s) works properly again
  - install runs faster again with SELinux enabled (#479502)


author: Ondrej Vasik <ovasik@redhat.com> - 7.4-6
changelog:
  - do process install-info only with info files present(#515970)
  - BuildRequires for xz, use xz tarball


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-1
changelog:
  - New upstream release 7.5, remove already applied patches,
    defuzz few others, xz in default set(by dependencies),
    so no explicit br required
  - skip two new tests on system with insufficient utimensat
    support(e.g. koji)
  - libstdbuf.so in separate coreutils-libs subpackage
  - update /etc/DIRCOLORS*


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-2
changelog:
  - Better fix than workaround the koji insufficient utimensat
    support issue to prevent failures in other packages


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-4
changelog:
  - fixed regression where df -l <device> as regular user
    cause "Permission denied" (#520630, introduced by fix for
    rhbz #497830)


author: Ondrej Vasik <ovasik@redhat.com> - 7.6-6
changelog:
  - ls -LR exits with status 2, not 0, when it encounters
    a cycle(#525402)
  - ls: print "?", not "0" as inode of dereferenced dangling
    symlink(#525400)
  - call the install-info on .gz info files


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-1
changelog:
  - new upstream release 8.1
  - fix build under koji (no test failures with underlying
    RHEL-5 XEN kernel due to unsearchable path and lack of
    futimens functionality)


author: Ondrej Vasik <ovasik@redhat.com> - 8.2-1
changelog:
  - new upstream release 8.2
  - removed applied patches, temporarily do not run dup_cloexec()
    dependent gnulib tests failing in koji


author: Ondrej Vasik <ovasik@redhat.com> - 8.2-3
changelog:
  - use grep instead of deprecated egrep in colorls.sh script
    (#548174)
  - remove unnecessary versioned requires/conflicts
  - remove non-upstream hack for uname -p


author: Ondrej Vasik <ovasik@redhat.com> - 8.5-2
changelog:
  - doublequote LS_COLORS in colorls.*sh scripts to speedup
    shell start(#586029)
  - add patch for mkstemp on sparc64(Dennis Gilmore)
  - update /etc/DIR_COLORS* files


author: Dan Horák <dan[at]danny.cz> - 8.5-3
changelog:
  - rebuilt with the updated configuration patch
  - drop the old -O1 exception for s390(x)
  - updated the getgrouplist patch (Kamil Dudka)


author: Ondrej Vasik <ovasik@redhat.com> - 8.5-8
changelog:
  - change assertion failure for invalid multibyte input
    in sort to less confusing error message(#591352)


author: Ondrej Vasik <ovasik@redhat.com> - 8.6-1
changelog:
  - new upstream release 8.6
  - remove applied patches, temporarily disable sort
    debug-keys test for multibyte locales (failing
    because of i18n patch)


author: Ondrej Vasik <ovasik@redhat.com> - 8.12-4
changelog:
  - deprecate non-upstream cp -Z/--context (install should be
    used instead of it), make it working if destination exists
    (#715557)


author: Ondrej Vasik <ovasik@redhat.com> - 8.12-7
changelog:
  - incorporate some i18n patch fixes from OpenSUSE:
    - fix cut output-delimiter option
    - prevent infinite loop in sort when ignoring chars
    - prevent using unitialized variable in cut


author: Ondrej Vasik <ovasik@redhat.com> - 8.13-1
changelog:
  - new upstream release 8.13
  - temporarily disable recently added multibyte checks in
    misc/cut test
  - fix the SUSE fix for cut output-delimiter
  - drop coreutils-libs subpackage, no longer needed


author: Ondrej Vasik <ovasik@redhat.com> 8.20-1
changelog:
  - new upstream release 8.20
  - Temporarily require util-linux >= 2.22.1-3 (to prevent missing
    su/runuser on system)


author: Ondrej Vasik <ovasik@redhat.com> 8.21-12
changelog:
  - pr -e, with a mix of backspaces and TABs, could corrupt the heap
    in multibyte locales (analyzed by J.Koncicky)
  - Fix sort multibyte incompatibilities (by O.Oprala)
  - change the TMP variable name in colorls.csh to _tmp (#981373)
  - optimization of colorls scripts by Ville Skytta (#961012)


author: Ondrej Vasik <ovasik@redhat.com> 8.21-14
changelog:
  - mv: fails to overwrite directory on cross-filesystem
    copy with EISDIR (#1035224)
  - tail -F does not handle dead symlinks gracefully
    (#1035219)


author: Ondrej Vasik <ovasik@redhat.com> 8.22-1
changelog:
  - new upstream version 8.22 (#1043552)
  - temporarily df symlink test (incomplete upstream fix, not
    regression)
  - enable build with openssl for better performance of
    HASHsum utilities (not for md5sum because of FIPS)
  - turn on the multibyte path in the testsuite to cover
    i18n regressions
  - fix possible colorls.csh script errors for tcsh with
    noclobber set and entered include file


author: Ondrej Vasik <ovasik@redhat.com> 8.22-3
changelog:
  - mark deprecated SELinux related downstream options as
    deprecated in usage/man
  - temporarily disable setting SELinux contexts recursively
    for existing directories - broken (#1045122)


author: Ondrej Vasik <ovasik@redhat.com> 8.22-5
changelog:
  - do not modify SELinux contexts of existing parent
    directories when copying files (fix by P.Brady, #1045122)


author: Ondrej Vasik <ovasik@redhat.com> 8.22-10
changelog:
  - cp/mv/install: do not crash when getfscreatecon() is
    returning a NULL context
  - fix the cut optimizations to UTF-8 locales only
  - unset the unnecessary envvars after colorls scripts


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-13
changelog:
  - call utilities in colorls.* scripts with full path (#1222223)
  - tail: disable inotify in --follow for vxfs (#1109083)
  - remove circular dependency for util-linux (not relevant for RHEL 7 - #1155963)
  - sort: do not look at more than specified keys for mb locales (#1148347)
  - i18n patch: fix buffer overruns and compiler warnings (#1148347)
  - xfs: fix dd sparse false test failure on btrfs and xfs (#1223041)
  - dd: new status=progress level to print stats periodically (#1147701)
  - id/groups - print correct group for session (#1115430)
  - cp,install,mknod,mkfifo,mkdir: separate -Z and --context options
    in --help and manpage (#1084471)
  - ls: clarify --scontext/--context/--lcontext options behaviour
    in info documentation, mention deprecation (#1099508)
  - du: handle bindmount cycles more gracefully (#1238191)
  - mv: prevent possible race condition for hardlinks (#1166570)
  - df: improve filtering of NFS mounts and bind mounts
    (#1197463, #1100026, #1129661)


author: Ondrej Vasik <ovasik@redhat.com> - 8.22-18
changelog:
  - fix xfs build failure in chrooted environment (#1263341)
  - update filesystem lists for stat and tail from latest upstream
    (#1327881, #1280357) 
  - disable id/setgid.sh test(missing chroot feature), fix 
    cp-a-selinux test (#1266500,#1266501)
  - colorls.sh - change detection of interactive shell for ksh
    compatibility (#1321648)
  - fix date --date crash with empty or invalid TZ envvar (#1325786)
  - df -l: do not hang on a dead autofs mount point (#1309247)
  - sort -h: fix functionality of human readable numeric sort for other
    than first field (#1328360)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-19
changelog:
  - timeout: fix race possibly terminating wrong process (#1439465)
  - ls: allow interruption when reading slow directories (#1421802)
  - fold: preserve new-lines in mutlibyte text (#1418505)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-23
changelog:
  - update description of the -a/--all option in df.1 man page (#1553212)
  - sort -M: fix memory leak when using multibyte locale (#1540059)


author: Kamil Dudka <kdudka@redhat.com> - 8.22-24
changelog:
  - doc: improve description of the --kibibytes option of ls (#1527391)
  - doc: fix typo in date example (#1620624)
  - stat,tail: sync the list of file systems with coreutils-8.31 (#1659530)
  - df: avoid stat() for dummy file systems with -l (#1668137)
  - df: prioritize mounts nearer the device root (#1042840)


author: Steven Dake <sdake@redhat.com> - 0.91-2
changelog:
  - use /sbin/service instead of calling init script directly.
  - put corosync-objctl man page in the main package.
  - change all initrddir to initddir for fedora 10 guidelines.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.92-4.svn1707
changelog:
  - Update to svn trunk at revision 1707 from upstream.
  - Update spec file to include new lcrso services and include file.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.92-5.svn1709
changelog:
  - Update to svn trunk at revision 1709 from upstream.
  - Update spec file to include new include files.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.92-6.svn1750
changelog:
  - Update to svn trunk at revision 1750 from upstream.
  - Include new quorum service in the packaging.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.92-7.svn1756
changelog:
  - Update to svn trunk at revision 1756 from upstream.
  - Add support pkgconfig to devel package.
  - Tidy up spec files by re-organazing sections according to packages.
  - Split libraries from corosync to corosynclib.
  - Rename corosync-devel to corosynclib-devel.
  - Comply with multiarch requirements (libraries).


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.93-1
changelog:
  - New upstream release.
  - Drop alphatag from spec file.
  - Drop trunk patch.
  - Update Provides for corosynclib-devel.
  - Backport gcc-4.4 build fix from trunk.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.93-2
changelog:
  - Rename gcc-4.4 patch to match svn commit (r1767).
  - Backport patch from trunk (commit r1774) to fix quorum engine.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.94-1
changelog:
  - New upstream release.
  - Drop obsolete patches.
  - Add soname bump patch that was missing from upstream.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.94-2.svn1792
changelog:
  - Import fixes from upstream:
    * Fix uninitialized memory. Spotted by valgrind (1788)
    * Fix logsys_set_format by updating the right bits (1789)
    * logsys: re-add support for timestamp  (1790)
    * Fix cpg crash (1791)
    * Allow logsys_format_set to reset to default (1792)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.94-3.svn1794
changelog:
  - Import fixes from upstream:
    * Add reserve/release feature to totem message queue space (1793)
    * Fix CG shutdown (1794)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.94-4.svn1797
changelog:
  - Import fixes from upstream:
    * Cleanup logsys format init around to use default settings (1795)
    * logsys_format_set should use its own internal copy of format_buffer (1796)
    * Add logsys_format_get to logsys API (1797)
  - Cherry pick svn1807 to unbreak CPG.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.95-1
changelog:
  - New upstream release
  - spec file updates:
    * Drop alpha tag
    * Drop local patches (no longer required)
    * Allow to build from svn trunk by supporting rpmbuild --with buildtrunk 
    * BuildRequires autoconf automake if building from trunk
    * Execute autogen.sh if building from trunk and if no configure is available
    * Switch to use rpm configure macro and set standard install paths
    * Build invokation now supports _smp_mflags
    * Remove install section for docs and use proper doc macro instead
    * Add tree fixup bits to drop static libs and html docs (only for now)
    * Add LICENSE file to all subpackages
    * libraries have moved to libdir. Drop ld.so.conf.d corosync file
    * Update BuildRoot usage to preferred versions/names


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.97-1.svn2232
changelog:
  - New upstream release
  - spec file updates:
    * Drop pkgconfig fix that's now upstream
    * Update to svn version 2232
    * Define buildtrunk if we are using svn snapshots
    * BuildRequires: nss-devel to enable nss crypto for network communication
    * Force autogen invokation if buildtrunk is defined
    * Whitespace cleanup
    * Stop shipping corosync.conf in favour of a generic example
    * Update file list


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.98-1
changelog:
  - New upstream release
  - spec file updates:
    * Drop corosync-trunk patch and alpha tag.
    * Fix alphatag vs buildtrunk handling.
    * Drop requirement on ais user/group and stop creating them.
    * New config file locations from upstream: /etc/corosync/corosync.conf.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.1.0-1
changelog:
  - New upstream release
  - spec file updates:
    * enable IB support
    * explicitly define built-in features at configure time


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.2.0-1
changelog:
  - New upstream release
  - Use global instead of define
  - Update Source0 url
  - Use more name macro around
  - Cleanup install section. Init script is now installed by upstream
  - Cleanup whitespace
  - Don't deadlock between package upgrade and corosync condrestart
  - Ship service.d config directory
  - Fix Conflicts vs Requires
  - Ship new sam library and man pages


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.2.2-1
changelog:
  - New upstream release
  - Add upstream trunk revision 2770 to add cpg_model_initialize api.
  - Fix URL and Source0 entries.
  - Add workaround to broken 1.2.2 Makefile with make -j.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.3.0-1
changelog:
  - New upstream release
  - drop upstream patch revision-2770.patch now included in release
  - update spec file to ship corosync-blackbox


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.99.2-1
changelog:
  - New upstream release
  - Re-enable xmlconfig bits
  - Ship cmap man pages
  - Add workaround to usrmove breakage!!


author: Jan Friesse <jfriesse@redhat.com> 2.3.1-3
changelog:
  - Resolves: rhbz#998362

  - Fix scheduler pause-detection timeout (rhbz#998362)
  - merge upstream commit 2740cfd1eac60714601c74df2137fe588b607866 (rhbz#998362)


author: Jan Friesse <jfriesse@redhat.com> 2.3.2-3
changelog:
  - Resolves: rhbz#1031832

  - cfgtool: return error on reload failure (rhbz#1031832)
  - merge upstream commit 7014f10123a634cf026491edc9a09d6044106116 (rhbz#1031832)


author: Jan Friesse <jfriesse@redhat.com> 2.3.3-2
changelog:
  - Resolves: rhbz#1067028

  - cpg: Refactor mh_req_exec_cpg_procleave (rhbz#1067028)
  - merge upstream commit fcf26e03036b6ae5a8ef762ea0b5691a4f790c92 (rhbz#1067028)
  - cpg: Make sure nodid is always logged as hex num (rhbz#1067028)
  - merge upstream commit 83c63b247f4030fe8123df7c9f96d7a1c8e245b1 (rhbz#1067028)
  - cpg: Make sure left nodes are really removed (rhbz#1067028)
  - merge upstream commit fbe8768f1bbab6d546023d70e7f7b91a9dc213b0 (rhbz#1067028)


author: Jan Friesse <jfriesse@redhat.com> 2.3.3-3
changelog:
  - Resolves: rhbz#1059607
  - Resolves: rhbz#1069254
  - Resolves: rhbz#1074673
  - Resolves: rhbz#1078361
  - Resolves: rhbz#1078363
  - Resolves: rhbz#1085468
  - Resolves: rhbz#1086233
  - Resolves: rhbz#1108508
  - Resolves: rhbz#1108511
  - Resolves: rhbz#1108522
  - Resolves: rhbz#1108525
  - Resolves: rhbz#1108708
  - Resolves: rhbz#1117911

  - Free object allocated at quorum_register_callback (rhbz#1059607)
  - merge upstream commit fa71067a93ea99d8dc4812e3a028ae154216a91a (rhbz#1059607)
  - votequorum: Add extended options to auto_tie_breaker (rhbz#1059607)
  - merge upstream commit 90d448af3b4b4508ca890cce67113cb226475d3b (rhbz#1059607)
  - totemsrp: Fix typo with cont gather (rhbz#1108508)
  - merge upstream commit 38c04d9a66ba41dae14a57eba119dabb31cbb18f (rhbz#1108508)
  - mon: Make mon compilable with libstatgrab ver 0.9 (rhbz#1108511)
  - merge upstream commit e1e2390b61fb5d47a8639f2538721675dd411b08 (rhbz#1108511)
  - mon: Fix comparsion typo (rhbz#1108511)
  - merge upstream commit 57ff693b70cb7aaa81e52e9d24f38aa0399a8c46 (rhbz#1108511)
  - mon: Pass correct pointer to inst (rhbz#1108511)
  - merge upstream commit 099f704cdddfb3b72fe93fb1f4fc777672eb9fdf (rhbz#1108511)
  - mon: Make monitoring work (rhbz#1108511)
  - merge upstream commit ff67daa55f6cfcb48357a8fddaa312b9fb49602b (rhbz#1108511)
  - votequorum: Properly initialize atb and atb_string (rhbz#1059607)
  - merge upstream commit e1801ba49738a3ae2ba3ca08c2b74dda5ff9056c (rhbz#1059607)
  - config: Handle totem_set_volatile_defaults errors (rhbz#1078361)
  - merge upstream commit 2f0cad20a9a368683fd59a869b2cb360bd31f95b (rhbz#1078361)
  - Log: Make reload of logging work (rhbz#1078361)
  - merge upstream commit 1b6abcc7d5afd4651efcdba1a65effb259f6ee3e (rhbz#1078361)
  - Really clear totemconfig nodes on reload (rhbz#1078361)
  - merge upstream commit eeb2384157351ff460be0648d954e5e97213d532 (rhbz#1078361)
  - totemconfig: Key change process dependencies (rhbz#1078361)
  - merge upstream commit b95ebd640eb45267d69822c8292a0098a8e4180e (rhbz#1078361)
  - totemconfig: Log errors on key change and reload (rhbz#1078361)
  - merge upstream commit 9a8de87c34071f54a9e3b545a1a7460d64568579 (rhbz#1078361)
  - Add token_coefficient option (rhbz#1078361)
  - merge upstream commit 58176d6779a0f5ff23dabf61dff7544db29af25a (rhbz#1078361)
  - init: Make init script configurable (rhbz#1078363)
  - merge upstream commit 1f7e78ab9cc686a7528ac4601651ded9d204b01f (rhbz#1078363)
  - config: Allow dynamic change of token_coefficient (rhbz#1078361)
  - merge upstream commit 7557fdec487cb5fad7c449949ba58496bd396458 (rhbz#1078361)
  - upstart: Make job conf file configurable (rhbz#1108522)
  - merge upstream commit d23ee6a3e0d5299f488bf9abed98f1853fd0e8b0 (rhbz#1108522)
  - Indent: Remove space in negation of expression (rhbz#1108522)
  - merge upstream commit b6e2c8024dd314ce17eac4f3f83a2320ebb7017d (rhbz#1108522)
  - Indent: Remove newline before else branch start (rhbz#1108522)
  - merge upstream commit d0dc9ae93c6f41ab9139242d754428fcf9bcc653 (rhbz#1108522)
  - totemiba: Add multicast recovery (rhbz#1108522)
  - merge upstream commit 4d6a18d8a5c0001f2eaeebb79d75f999c671cb74 (rhbz#1108522)
  - totemiba: Fix incorrect failed log message (rhbz#1108522)
  - merge upstream commit e905f92bf532c291d9be23b6a16d972f36d5d464 (rhbz#1108522)
  - logsys: Log error if blackbox cannot be created (rhbz#1108525)
  - merge upstream commit 19c5b63ff5fae43c2acf28ce95cca6460f500176 (rhbz#1108525)
  - logsys: Log warning if flightrecorder init fails (rhbz#1108525)
  - merge upstream commit 8f13a983204c2bc16c7490cee6db90138ecc43f1 (rhbz#1108525)
  - Introduce get_run_dir function (rhbz#1108525)
  - merge upstream commit d310b251c3ba5e92c7ca1b8f6f8197d71141a8d6 (rhbz#1108525)
  - Move ringid store and load from totem library (rhbz#1108525)
  - merge upstream commit da46ecfc3087de97ad9a76fe6a156f10170503a2 (rhbz#1108525)
  - init: change return value when starting corosync (rhbz#1078363)
  - merge upstream commit 7a6cc6b5a2f6ec5d88e52e34e62f18db1915afd7 (rhbz#1078363)
  - Install doc: Correct a typo (rhbz#1108522)
  - merge upstream commit a64696698718071e4e531a5a3332c363742c550b (rhbz#1108522)
  - coroparse: More strict numbers parsing (rhbz#1108708)
  - merge upstream commit 4e9716ed30ffe6a5750f5c6c2565815e88413c23 (rhbz#1108708)
  - Doc: Enhance INSTALL file a bit (rhbz#1108522)
  - merge upstream commit e8a5c56ab27fff4beef910804841d73aaa17a6a1 (rhbz#1108522)
  - Make config.reload_in_progress key read only (rhbz#1085468)
  - merge upstream commit c8e3f14fdb284aadf023d7e62c0f951181f21736 (rhbz#1085468)
  - votequorum: Do not process events during reload (rhbz#1085468)
  - merge upstream commit 72cf15af27ea9dbf918839ac44929ed9c65eea5e (rhbz#1085468)
  - systemd: Config example for corosync wd service (rhbz#1108522)
  - merge upstream commit f6d6a9b0a0ca99a201bb9e9353a05075b700bcbd (rhbz#1108522)
  - fix memory leak produced by 'corosync -v' (rhbz#1117911)
  - merge upstream commit cc80c8567d6eec1d136f9e85d2f8dfb957337eef (rhbz#1117911)
  - Handle SIGSEGV and SIGABRT signals (rhbz#1117911)
  - merge upstream commit 384760cb670836dc37e243f594612c6e68f44351 (rhbz#1117911)
  - Fix compiler warning introduced by previous patch (rhbz#1117911)
  - merge upstream commit dfaca4b10a005681230a81e229384b6cd239b4f6 (rhbz#1117911)
  - corosync-cmapctl: Allow -p option to delete keys (rhbz#1108522)
  - merge upstream commit 7a4bb37723777bf6bcd08035696d8d7317c0ce1d (rhbz#1108522)
  - Implement config file testing mode (rhbz#1108522)
  - merge upstream commit e3ffd4fedc8158cdb5057f9fe40b6459e3d85846 (rhbz#1108522)
  - cleanup after test-driver (rhbz#1108522)
  - merge upstream commit c7ebb09530349b7b1bbec7b1d9ef4b05ad186a63 (rhbz#1108522)
  - be consistent in using CPPFLAGS vs CFLAGS (rhbz#1108522)
  - merge upstream commit 84b9e5989aa4a7090aeccbeb6cb8910735274a65 (rhbz#1108522)
  - Slightly rework corosync-keygen. (rhbz#1108522)
  - merge upstream commit 520fe686c5e45f0f7143e749a3f6c2001a2ea0d7 (rhbz#1108522)
  - totemconfig: Free ifaddrs list (rhbz#1108522)
  - merge upstream commit dc35bfae6213256fd7f0d5bf4dd9d5fa0f77a6f6 (rhbz#1108522)
  - totemconfig: totem_config_get_ip_version (rhbz#1108522)
  - merge upstream commit 10c80f454e70b42fc394d3326af1eb81c4be0d75 (rhbz#1108522)
  - totemconfig: refactor nodelist_to_interface func (rhbz#1108522)
  - merge upstream commit 63bf09776fb84e939cd56ec2c2d1bbea97c2e0e1 (rhbz#1108522)
  - corosync-keygen: Replace printf/exit call with err (rhbz#1108522)
  - merge upstream commit 0ce8d51c6d989c4e62d8c1f3fc42785c4f3d250c (rhbz#1108522)
  - config: Fix typos (rhbz#1108522)
  - merge upstream commit 3b8365e80668eea55bdd3f7178693c82884331ae (rhbz#1108522)
  - totemconfig: Make sure join timeout is less than consensus (rhbz#1074673)
  - merge upstream commit 88dbb9f722122f04dc7c95681375a53a3a1301a5 (rhbz#1074673)
  - votequorum: Return current ring id in callback (rhbz#1108522)
  - merge upstream commit 5f6f68805c48f8f72f66f7fff9abc44b4c65df1e (rhbz#1108522)
  - votequorum: Add ring id to poll call (rhbz#1108522)
  - merge upstream commit b8902464d1b040326108ce7ec0934c1de5fe04ee (rhbz#1108522)
  - ipc: Process votequorum messages during sync (rhbz#1108522)
  - merge upstream commit 7cad804629fe7d936d098569122f84979959b554 (rhbz#1108522)
  - votequorum: Block sync until qdevice poll (rhbz#1108522)
  - merge upstream commit b4c99346352ce39cf96f7b12943811c896b89caa (rhbz#1108522)
  - testvotequorum2: Opt for polling with old ringid (rhbz#1108522)
  - merge upstream commit f8413350b2df4e37822e6d34e9337da87993d271 (rhbz#1108522)
  - votequorum: Make qdev timeout in sync configurable (rhbz#1108522)
  - merge upstream commit 17488909d4ae0dc948eb9a4a15133570faaf9c0b (rhbz#1108522)
  - Cancel token holding while in retransmition (rhbz#1108522)
  - merge upstream commit f135b680967aaef1d466f40170c75ae3e470e147 (rhbz#1108522)
  - votequorum: Add cmap key to reset wait_for_all (rhbz#1086233)
  - merge upstream commit cbf753405b7924e48aa1838cc1d14044229449b3 (rhbz#1086233)
  - quorumtool: Sort output by nodeid (rhbz#1108522)
  - merge upstream commit ddb017fa0e2026ee4f0d05e9bf780898c32c129a (rhbz#1108522)
  - YKD: Fix loading of YKD quorum module (rhbz#1108522)
  - merge upstream commit 02f58aec9cd53887aa1dfe1616fcbb32671987d4 (rhbz#1108522)
  - corosync-quorumtool: add sort options (rhbz#1108522)
  - merge upstream commit f53580c2c1c8fa621cbc18de81974811799bafd8 (rhbz#1108522)
  - TODO: Remove TODO file (rhbz#1108522)
  - merge upstream commit c9232d5d6cbfb1e4de9eb09afadda630ad4fee83 (rhbz#1108522)
  - Makefile: Do not install TODO file (rhbz#1108522)
  - merge upstream commit 4b7293da7a03253a7f96401642e1afb006e7750c (rhbz#1108522)
  - totem: Inform RRP about membership changes (rhbz#1069254)
  - merge upstream commit acb55cdb03808a4cea745b1b6a80c7ef1769880f (rhbz#1069254)
  - totemnet: Add totemnet_member_set_active (rhbz#1069254)
  - merge upstream commit 4c717942cf5f35902be630f393b81a03a81bb194 (rhbz#1069254)
  - totemrrp: Implement *_membership_changed (rhbz#1069254)
  - merge upstream commit 371a99e96147f600510bd9d819b92a4de94fcc30 (rhbz#1069254)
  - totemudpu: Implement member_set_active (rhbz#1069254)
  - merge upstream commit 71f1b99649329ab06309791d0a621d3cfbb74bdb (rhbz#1069254)
  - totemudpu: Send msgs to all members occasionally (rhbz#1069254)
  - merge upstream commit 2429481b96d895c366ca27c82a2bd7cfee55af15 (rhbz#1069254)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-3
changelog:
  - Resolves: rhbz#1078361
  - Resolves: rhbz#1136429
  - Resolves: rhbz#1149916

  - [crypto] fix crypto block rounding/padding calculation (rhbz#1136429)
  - merge upstream commit 239e2397820f9fa7ef430ebef0947ec1246eb50f (rhbz#1136429)
  - Adjust MTU for IPv6 correctly (rhbz#1136429)
  - merge upstream commit 03f95ddaa1d223e1e93788a307dc1b36d86b22b5 (rhbz#1136429)
  - init: Don't wait for ipc if corosync doesn't start (rhbz#1149916)
  - merge upstream commit b627844f3d5c5788bd8bb140d8852ba666da16aa (rhbz#1149916)
  - manpage: Fix English (rhbz#1078361)
  - merge upstream commit f77a61ac1795e794244440e1bfe804f02cc5d2b6 (rhbz#1078361)
  - Store configuration values used by totem to cmap (rhbz#1078361)
  - merge upstream commit bb52fc2774ef690d6bb951fe9cc34e5b373caffe (rhbz#1078361)
  - man page: Improve description of token timeout (rhbz#1078361)
  - merge upstream commit 57539d1abc09e5aef322cb9cca5b3e6c496cfae9 (rhbz#1078361)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-4
changelog:
  - Resolves: rhbz#1184154

  - Handle adding and removing UDPU members atomically (rhbz#1184154)
  - merge upstream commit d77cec24d0025d353681762fe707794c621665c7 (rhbz#1184154)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-5
changelog:
  - Resolves: rhbz#1197091
  - Resolves: rhbz#1197671

  - Votequorum: Fix auto_tie_breaker default (rhbz#1197091)
  - merge upstream commit 314a01c98e5f98ff686333966dbe675935b7b6a8 (rhbz#1197091)
  - Don't allow both two_node and auto_tie_breaker in corosync.conf (rhbz#1197671)
  - merge upstream commit c832ade034fa737561ccabefbe417c9d7855d970 (rhbz#1197671)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-6
changelog:
  - Resolves: rhbz#1170347
  - Resolves: rhbz#1225441
  - Resolves: rhbz#1226842
  - Resolves: rhbz#1229194
  - Resolves: rhbz#1234261
  - Resolves: rhbz#1234266
  - Resolves: rhbz#682771
  - Resolves: rhbz#773464

  - config: Make sure user doesn't mix IPv6 and IPv4 (rhbz#773464)
  - merge upstream commit 6c028d4d9c53decaa9469c792ac68fd2a886e7d9 (rhbz#773464)
  - config: Process broadcast option consistently (rhbz#773464)
  - merge upstream commit 70bd35fc06e68a010d780dfa39bd68d4bd2f7da7 (rhbz#773464)
  - config: Ensure mcast address/port differs for rrp (rhbz#773464)
  - merge upstream commit 6449bea835c90045baa23e3e041fed1df2abf070 (rhbz#773464)
  - Reset timer_problem_decrementer on fault (rhbz#1234261)
  - merge upstream commit 8f284b26b3331e1ab252969ba65543e6d9217ab1 (rhbz#1234261)
  - automake: Check minimum automake version (rhbz#773464)
  - merge upstream commit 114b826c67126fe1f690ad976b5217a8487994a4 (rhbz#773464)
  - Set RR priority by default (rhbz#1170347)
  - merge upstream commit 177ef0e5240b4060ff5b14eab6f2eefee3aa777d (rhbz#1170347)
  - Log auto-recovery of ring only once (rhbz#773464)
  - merge upstream commit e0ac861efdc32831366a2b5f5cc1d61e2ffa5504 (rhbz#773464)
  - totem: Ignore duplicated commit tokens in recovery (rhbz#1234261)
  - merge upstream commit 4ee84c51fa73c4ec7cbee922111a140a3aaf75df (rhbz#1234261)
  - corosync_ring_id_store: Use safer permissions (rhbz#1234266)
  - merge upstream commit 252b38ab8a62ff083e83b1d6f514109f7b7cbb42 (rhbz#1234266)
  - totemsrp: Format member list log as unsigned int (rhbz#773464)
  - merge upstream commit 5d9acc5604eb4e8a739cb37a4ad46bcc5ad8deb6 (rhbz#773464)
  - cpg: Add support for messages larger than 1Mb (rhbz#682771)
  - merge upstream commit 8cc8e513633a1a8b12c416e32fb5362fcf4d65dd (rhbz#682771)
  - Really add cpghum (rhbz#682771)
  - merge upstream commit 3842ba6080e00fd9484a2a875d982e149f67bc44 (rhbz#682771)
  - quorum: don't allow quorum_trackstart to be called twice (rhbz#1229194)
  - merge upstream commit 82526d2fe9137e8b604f1bbae6d6e39ba41377f9 (rhbz#1229194)
  - totemconfig: Check for duplicate nodeids (rhbz#773464)
  - merge upstream commit 997074cc3e1ea425ca63e453b7e2181741bdcef0 (rhbz#773464)
  - totem: Log a message if JOIN or LEAVE message is ignored (rhbz#773464)
  - merge upstream commit 53f67a2a7914228f1a406aad61ea6768525e11b0 (rhbz#773464)
  - totemsrp: Improve logging of left/down nodes (rhbz#773464)
  - merge upstream commit ab8942f6260fde93824ed2a18e09e572b59ceb25 (rhbz#773464)
  - votequorum: Fix auto_tie_breaker behaviour in odd-sized clusters (rhbz#1229194)
  - merge upstream commit b9f5c290b7dedd0a677cdfc25db7dd111245a745 (rhbz#1229194)
  - Add note about rrp active beeing unsupported (rhbz#1226842)
  - merge upstream commit 219965f4fe694eaaf2eb4ea05cdc7e35f5146114 (rhbz#1226842)
  - Log: Add logrotate configuration file (rhbz#1225441)
  - merge upstream commit aabbace625b3c68332b4356887378fca81f8f387 (rhbz#1225441)


author: Jan Friesse <jfriesse@redhat.com> 2.3.4-7
changelog:
  - Related: rhbz#682771

  - Don't link with libz when not needed (rhbz#682771)
  - merge upstream commit 145f9279d12cf0b981494bbd4dabbc9c3641378e (rhbz#682771)


author: Jan Friesse <jfriesse@redhat.com> 2.3.6-1
changelog:
  - Related: rhbz#1306680
  - Resolves: rhbz#1289169
  - Resolves: rhbz#1306349
  - Resolves: rhbz#1282372
  - Resolves: rhbz#1317573
  - Resolves: rhbz#1336462

  - Rebase to Corosync 2.3.6


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-2
changelog:
  - Resolves: rhbz#1363654

  - Config: Flag config uidgid entries (rhbz#1363654)
  - merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-3
changelog:
  - Related: rhbz#1363654

  - Enhance spec so corosync-qdevice subpackage depends on same version of
    the corosync and corosynclib packages.


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-4
changelog:
  - Resolves: rhbz#1367813

  - Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
  - merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
  - man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
  - merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
  - Qnetd LMS: Fix two partition use case (rhbz#1367813)
  - merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-6
changelog:
  - Resolves: rhbz#1371880

  - libvotequorum: Bump version (rhbz#1371880)
  - merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
  - votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
  - merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
  - votequorum: simplify reconfigure message handling (rhbz#1371880)
  - merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-7
changelog:
  - Related: rhbz#1371880

  - Fix build on RHEL7.3 latest (rhbz#1371880)
  - merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
  - Enable aarch64 build (bz#1422598)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-8
changelog:
  - Resolves: rhbz#1434528
  - Resolves: rhbz#1434529
  - Resolves: rhbz#1434534

  - cfg: Prevents use of uninitialized buffer (rhbz#1434528)
  - merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
  - man: Fix typos in man page (rhbz#1434529)
  - merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
  - Fix typo: Destorying -> Destroying (rhbz#1434529)
  - merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
  - init: Add doc URIs to the systemd service files (rhbz#1434529)
  - merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
  - man: Modify man-page according to command usage (rhbz#1434529)
  - merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
  - Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
  - merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
  - upstart: Add softdog module loading example (rhbz#1434529)
  - merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
  - Remove deprecated doxygen flags (rhbz#1434529)
  - merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
  - Remove redundant header file inclusion (rhbz#1434528)
  - merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
  - Qdevice: fix spell errors in qdevice (rhbz#1434529)
  - merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
  - doc: document watchdog_device parameter (rhbz#1434529)
  - merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
  - Logsys: Change logsys syslog_priority priority (rhbz#1434534)
  - merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
  - logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
  - merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-9
changelog:
  - Resolves: rhbz#1445001

  - Main: Call mlockall after fork (rhbz#1445001)
  - merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
  - Disable aarch64 build (bz#1422598)


author: Jan Friesse <jfriesse@redhat.com> 2.4.0-10
changelog:
  - Resolves: rhbz#1439205
  - Resolves: rhbz#1461450
  - Resolves: rhbz#1469170
  - Resolves: rhbz#1476214

  - main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
  - merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
  - totem: Propagate totem initialization failure (rhbz#1461450)
  - merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
  - totemcrypto: Refactor symmetric key importing (rhbz#1461450)
  - merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
  - totemcrypto: Use different method to import key (rhbz#1461450)
  - merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
  - main: Add option to set priority (rhbz#1469170)
  - merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
  - main: Add support for libcgroup (rhbz#1476214)
  - merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
  - totemcrypto: Fix compiler warning (rhbz#1461450)
  - merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)


author: Jan Friesse <jfriesse@redhat.com> 2.4.3-2
changelog:
  - Resolves: rhbz#1536219

  - logging: Make blackbox configurable (rhbz#1536219)
  - merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
  - logging: Close before and open blackbox after fork (rhbz#1536219)
  - merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)


author: Jan Friesse <jfriesse@redhat.com> 2.4.3-5
changelog:
  - Resolves: rhbz#1376819
  - Resolves: rhbz#1634710

  - configure: add --with-initconfigdir option (rhbz#1376819)
  - merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
  - Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
  - merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
  - totemcrypto: Fix importing of the private key (rhbz#1634710)
  - merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
  - qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
  - merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-1
changelog:
  - Resolves: rhbz#1732039
  - Resolves: rhbz#1153818
  - Resolves: rhbz#1647120

  - Rebase to Corosync 2.4.5


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-2
changelog:
  - Resolves: rhbz#1656492

  - totem: Increase ring_id seq after load (rhbz#1656492)
  - merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)


author: Jan Friesse <jfriesse@redhat.com> - 2.4.5-3
changelog:
  - Resolves: rhbz#1737884
  - Resolves: rhbz#1737887

  - Do not set exec permission for service file
  - Fix CFLAGS definition


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-5
changelog:
  - Resolves: rhbz#1679792
  - Resolves: rhbz#1780134

  - votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
  - merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
  - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
  - merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
  - votequorum: set wfa status only on startup (rhbz#1679792)
  - merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-6
changelog:
  - Resolves: rhbz#1835885

  - stats: Add basic schedule-miss stats to needle (rhbz#1835885)
  - merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
  - main: Add schedmiss timestamp into message (rhbz#1835885)
  - merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)


author: Jan Friesse <jfriesse@redhat.com> 2.4.5-7
changelog:
  - Related: rhbz#1835885

  - main: Make schedmiss in cmap and log equal (rhbz#1835885)
  - merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - Fiddle bindir/libexecdir to get RH install correct.
  - Don't include /sbin/rmt -- use the rmt from dump package.
  - Don't include /bin/mt -- use the mt from mt-st package.
  - Add prereq's


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - fix infinite loop unpacking empty files with hard links (#4208).
  - stdout should contain progress information (#3358).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - revert the stdout patch (#3358), restoring original GNU cpio behavior
    (#6376, #7538), the patch was dumb.


author: Jeff Johnson <jbj@redhat.com> 2.5-1
changelog:
  - update 2.5, restack and consolidate patches.
  - don't apply (but include for now) freebsd and #56346 patches.
  - add url (#54598).


author: Peter Vrabec <pvrabec@redhat.com> 2.6-8
changelog:
  - fix large file support, archive >4GiB, archive members <4GiB (#160056)
  - fix race condition holes, use mode 0700 for dir creation


author: Peter Vrabec <pvrabec@redhat.com> 2.6-12
changelog:
  - fix warn_if_file_changed() and set exit code to #1 when 
    cpio fails to store file > 4GB (#183224)


author: Peter Vrabec <pvrabec@redhat.com> 2.6-13
changelog:
  - merge toAsciiError.patch with writeOutHeaderBufferOverflow.patch
  - merge largeFileGrew.patch with lfs.patch
  - fix large file support, cpio is able to store files<8GB 
    in 'old ascii' format (-H odc option)
  - adjust warnings.patch


author: Radek Brich <rbrich@redhat.com> 2.9-6
changelog:
  - when extracting archive created with 'find -depth',
    restore the permissions of directories properly (bz#430835)
  - fix for GCC 4.3


author: Radek Brich <rbrich@redhat.com> 2.9-7
changelog:
  - fix -dir_perm patch to restore permissions correctly even
    in passthrough mode -- revert affected code to cpio 2.8 state
    (bz#430835)


author: Ondrej Vasik <ovasik@redhat.com> 2.10-5
changelog:
  - remove redundant setLocale patch
  - fix segfault with nonexisting file with patternnames
    (#567022)


author: Ondrej Vasik <ovasik@redhat.com> 2.10-6
changelog:
  - CVE-2010-0624 fix heap-based buffer overflow by expanding
    a specially-crafted archive(#572150)
  - comment patches


author: Ondrej Vasik <ovasik@redhat.com> 2.11-8
changelog:
  - drop unnecessary patches: cpio-2.9-dir_perm.patch and
    cpio-2.9-sys_umask.patch - reported by M.Castellini


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-14
changelog:
  - fix bad changelog entries
  - allow to build in Fedora Rawhide (temporarily because of #872336) (the value
    is guessed from from /usr/include/asm-generic/fcntl.h)


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-17
changelog:
  - fix small memory leak in copyin.c (#919454)
  - remove %defattr and install 'cpio' to real %{_bindir}
  - CovScan: add %{?_rawbuild}


author: Pavel Raiskup <praiskup@redhat.com> - 2.11-20
changelog:
  - fix another bogus date in changelog
  - update config.guess/config.sub for aarm64 build (#925189)
  - run autoreconf instead of autoheader


author: Patrice Dumas <pertusus@free.fr> 1.12.0-3
changelog:
  - add rightly files to -devel (#224106)
  - add necessary requires for -devel (#224106)
  - ship examples


author: Patrice Dumas <pertusus@free.fr> 1.12.0-4
changelog:
  - remove libdir reference to cppunit-config, should fix multiarch conflict
    (#340951)
  - fix encoding and remove windows related files in examples
  - keep timestamps


author: Fabian Affolter <mail@fabian-affolter.ch> - 20060917-2
changelog:
  - Switch to ExclusiveArch
  - Remove %doc from man page and general changes to the man page installation


author: Nalin Dahyabhai <nalin@redhat.com> 2.7-12
changelog:
  - remove cruft that ldconfig already knows how to manage
  - don't explicitly strip anything -- the brp setup decides that
  - tweak the header so that it can be used in C++ (#46685)
  - buildprereq the words package


author: Nalin Dahyabhai <nalin@redhat.com> 2.7-24
changelog:
  - include packer.h for reading dictionaries directly, since we already include
    packer in the -dicts subpackage (#68339)
  - don't include the soname symlink in the package, let ldconfig do its job


author: Nalin Dahyabhai <nalin@redhat.com> 2.7-25
changelog:
  - fix ldconfig invocation in trigger for older versions which included the
    soname symlink (#114620)


author: Nalin Dahyabhai <nalin@redhat.com> 2.7-29
changelog:
  - correctly build on 64-bit systems (part of #143417)
  - patch so that 32- and 64-bit libcrack can read dictionaries which were
    incorrectly generated on 64-bit systems of the same endianness (more #143417)
  - include a sample cracklib magic file
  - stop using /usr/dict/* when building the dictionary
  - list words as a build requirement, which it is, instead of a run-time
    requirement
  - provide a virtual arch-specific dep in cracklib-dicts, require it in
    cracklib (part of #143417)


author: Nalin Dahyabhai <nalin@redhat.com> 2.8.1-1
changelog:
  - update to 2.8.1
    - moves dictionary to new default location under %{_datadir} -- the
      dictionary format is the same across all architectures
    - renames "packer" to "cracklib-packer"
  - conflict with cracklib-dicts < 2.8, where the on-disk format was not
    compatible on 64-bit arches due to now-fixed cleanliness bugs
  - move binaries for manipulating and checking words against dictionaries
    from -dicts into the main package


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-2
changelog:
  - update to 2.8.9
  - only create compat symlinks for the dictionaries if we aren't installing
    them into the old locations


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-7
changelog:
  - fix check for the existence of dictionaries when the caller specifies a
    location (#224347, upstream #1644628)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-9
changelog:
  - drop final "." from summaries (Jef Spaleta, #225659)
  - drop static library from -devel subpackage (Jef Spaleta, #225659)
  - note that the most recently-added wordlist came from bugzilla (#225659)
  - remove explicit dependency on gzip, as it's implicit (Jef Spaleta, #225659)
  - convert %triggerpostun to not use a shell as an interpreter (#225659)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-10
changelog:
  - explicitly include required headers from <packer.h> (#228698)
  - attempt to provide doc strings in the python module


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-11
changelog:
  - improve reports of out-of-memory exceptions so that they don't include a
    bogus filename
  - improve reports of file-missing exceptions from the python module so that
    they give the right filename (#225858)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.12-1
changelog:
  - update to 2.8.12, which was relicensed to GPLv2
  - package the now-bundled cracklib-small dictionary in cracklib-dicts


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.13-1
changelog:
  - update to 2.8.13, which overhauls the python bindings and revises
    FascistCheck()'s behavior:
    2.8.12 success: returns None, fail: returns error text, other: exceptions
    2.8.13 success: returns candidate, fail: throws ValueError, other: exceptions


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.15-1
changelog:
  - update to 2.8.15
  - update cracklib-words to the current version (2008-05-07)
  - fixup URLs for various dictionary sources that we use
  - fix freeing-an-uninitialized-pointer in the python module (SF#2907102)
  - add a disttag


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.18-1
changelog:
  - update to 2.8.18
  - add man pages from Debian (#583932)
  - replace zh_CN translation (related to #627449)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.19-3
changelog:
  - update the copy of the debian source package to one that can currently be
    retrieved using the URL we list for it


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.22-1
changelog:
  - update to 2.8.22 (#887461), which now returns an error instead of exiting
    when there's a failure opening the dictionary in FascistCheck()


author: Nalin Dahyabhai <nalin@redhat.com> - 2.9.0-1
changelog:
  - update to 2.9.0 (#970065)
    - adds FascistCheckUser()
  - go ahead and compress the main dictionary, since we're linking with zlib
    anyway


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-3
changelog:
  - fix the python module to work with compressed dictionaries (#972542)
  - fix various dictionary lookup errors (#986400, #986401)
  - make the library reentrant and fix compilation warnings


author: Tomáš Mráz <tmraz@redhat.com> - 2.9.0-5
changelog:
  - make the simplistic check and the purging of special characters much
    less aggressive (#1003624, #985378)


author: Jay Fenlason <fenlason@redhat.com> 3.5-2
changelog:
  - remove ppc from arch list, since it doesn't work with ppc64 kernels
  - remove alpha from the arch list since we don't build it any more


author: Dave Anderson <anderson@redhat.com> 3.8-3
changelog:
  - remove (harmless) error message during ia64 diskdump invocation when
    an SMP system gets booted with maxcpus=1
  - several 2.6 kernel specific updates


author: Dave Anderson <anderson@redhat.com> 3.10-9
changelog:
  - Updated source package to crash-3.10.tar.gz, containing
    IBM's final ppc64 processor support for RHEL4
  - Fixes potential "bt -a" hang on dumpfile where netdump IPI interrupted
    an x86 process while executing the instructions just after it had entered
    the kernel for a syscall, but before calling the handler.  BZ #139437
  - Update to handle backtraces in dumpfiles generated on IA64 with the
    INIT switch (functionality intro'd in RHEL3-U5 kernel).  BZ #139429
  - Fix for handling ia64 and x86_64 machines booted with maxcpus=1 on
    an SMP kernel.  BZ #139435
  - Update to handle backtraces in dumpfiles generated on x86_64 from the
    NMI exception stack (functionality intro'd in RHEL3-U5 kernel).
  - "kmem -[sS]" beefed up to more accurately verify slab cache chains
    and report errors found.
  - Fix for ia64 INIT switch-generated backtrace handling when
    init_handler_platform() is inlined into ia64_init_handler();
    properly handles both RHEL3 and RHEL4 kernel patches.
    BZ #138350
  - Update to enhance ia64 gdb disassembly output so as to
    symbolically display call targets from kernel module
    text without requiring module debuginfo data.


author: Dave Anderson <anderson@redhat.com> 3.10-13
changelog:
  - Compiler error- and warning-related fixes for gcc 4 build.
  - Update to enhance x86 and x86_64 gdb disassembly output so as to
    symbolically display call targets from kernel module text without
    requiring module debuginfo data.
  - Fix hole where an ia64 vmcore could be mistakenly accepted as a
    usable dumpfile on an x86_64 machine, leading eventually to a
    non-related error message.


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.1
changelog:
  - Updated crash.patch to bring it up to 4.0-2.26, which should 
    address BZ #191719 - "crash fails to build in mock"


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.2
changelog:
  - Updated crash.patch such that <asm/segment.h> is not #include'd
    by lkcd_x86_trace.c; also for BZ #191719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.3
changelog:
  - Updated crash.patch such that <asm/page.h> is not #include'd
    by vas_crash.h; only ia64 build complained; BZ #191719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.4
changelog:
  - Updated crash.patch such that <asm/page.h> is not #include'd
    by s390_dump.c; IBM did not make the file s390[s] only; BZ #192719


author: Dave Anderson <anderson@redhat.com> - 4.0-3.1
changelog:
  - Updated crash.patch to match upstream version 4.0-3.1.
  - Added kdump reference to description.
  - Added s390 and s390x to ExclusiveArch list.  BZ #199125
  - Removed LKCD v1 pt_regs references for s390/s390x build.
  - Removed LKCD v2_v3 pt_regs references for for s390/s390x build.


author: Dave Anderson <anderson@redhat.com> - 4.0-3.3
changelog:
  - Updated crash.patch to match upstream version 4.0-3.3.
  - Support for x86_64 relocatable kernels.  BZ #204557


author: Dave Anderson <anderson@redhat.com> - 4.0-6.0.4
changelog:
  - First attempt at addressing the GCC 4.3 build, which failed on x86_64
    because ptrace-abi.h (included by ptrace.h) uses the "u32" typedef,
    which relies on <asm/types.h>, and include/asm-x86_64/types.h
    does not not typedef u32 as done in include/asm-x86/types.h.


author: Dave Anderson <anderson@redhat.com> - 4.0-6.0.5
changelog:
  - Second attempt at addressing the GCC 4.3 build, which failed due
    to additional ptrace.h includes in the lkcd vmdump header files.


author: Dave Anderson <anderson@redhat.com> - 4.0-7.7.1
changelog:
  - Updates to this file per crash merge review
  - Update to upstream version 4.0-7.7.  Full changelog viewable in:
      http://people.redhat.com/anderson/crash.changelog.html


author: Lubomir Rintel <lkundrak@v3.sk> - 4.0.8.11-1
changelog:
  - Update to later upstream release
  - Fix abuse of Revision tag

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild


author: Dave Anderson <anderson@redhat.com> - 4.0.9-1
changelog:
  - Update to upstream release, which allows the removal of the 
    Revision tag workaround, the crash-4.0-8.11-dwarf3.patch and 
    the crash-4.0-8.11-optflags.patch


author: Dave Anderson <anderson@redhat.com> - 5.1.8-1
changelog:
  - Update to latest upstream release
  - Additional fixes for gcc-4.6 -Werror compile failures for ARM architecture.


author: Dave Anderson <anderson@redhat.com> - 7.0.2-1
changelog:
  - Update to latest upstream release
  - Fix for ppc64 embedded gdb NULL pointer translation sigsegv
  - Fix for bt -F failure


author: Dave Anderson <anderson@redhat.com> - 7.0.2-2
changelog:
  - Compressed kdump 46-bit physical memory support
    Resolves: rhbz#1015250
  - Fix incorrect backtrace for dumps taken with "virsh dump --memory-only"
    Resolves: rhbz#1020469
  - Fix cpu number display on systems with more than 254 cpus
    Resolves: rhbz#1020536


author: Dave Anderson <anderson@redhat.com> - 7.0.2-4
changelog:
  - Fixes for "kmem -S" command for CONFIG_SLUB.
  - Resolves: rhbz#1045591
  - Increase S390X NR_CPUS
  - Resolves: rhbz#1051156


author: Dave Anderson <anderson@redhat.com> - 7.0.2-5
changelog:
  - Fix for a missing kernel-mode exception frame dump by the x86_64 
    "bt" command if a page fault was generated by a bogus RIP.
  - Resolves: rhbz#1057353
  - Fix for the x86_64 "bt" command to prevent an unwarranted message
    indicating "WARNING: possibly bogus exception frame" generated
    from a blocked kernel thread that was in the process of exec'ing
    a user process via the call_usermodehelper() facility.
  - Resolves: rhbz#1057357


author: Dave Anderson <anderson@redhat.com> - 7.0.8-1
changelog:
  - Rebase to upstream version 7.0.8.
  - Resolves: rhbz#1110513
  - Fix to calculate the physical base address of dumpfiles created
    by a "virsh dump" of an OVMF guest.
  - Resolves: rhbz#1080698
  - Support for aarch64 architecture.
  - Resolves: rhbz#1110551
  - Fix to prevent crash from spinning endlessly on a corrupted/truncated
    dumpfile whose bitmap data is not wholly contained within the file.
  - Resolves: rhbz#1114088
  - Support for ppc64le architecture.
  - Resolves: rhbz#1123991


author: Dave Anderson <anderson@redhat.com> - 7.0.8-2
changelog:
  - Fix ps performance patch regression on live systems.
  - Resolves: rhbz#1134177
  - Minor build-related fixes for ppc64le.
  - Resolves: rhbz#1123991


author: Dave Anderson <anderson@redhat.com> - 7.0.9-2
changelog:
  - Use registers from QEMU-generated ELF and compressed kdump headers 
    for active task backtraces.
  - Resolves: rhbz#1169555


author: Dave Anderson <anderson@redhat.com> - 7.0.9-5
changelog:
  - Support new sadump format that can represent more than 16 TB physical memory space
    Resolves: rhbz#1182383


author: Dave Anderson <anderson@redhat.com> - 7.1.1-1
changelog:
  - Rebase to upstream version 7.1.1
    Resolves: rhbz#1207696
  - Display s390x vector registers from a kernel dump.
    Resolves: rhbz#1182161
  - Fix date displayed on initial system banner and by the "sys" command on ARM64.
    Resolves: rhbz#1223044
  - Fix ARM64 page size calculation on 4.1 and later kernels.
    Resolves: rhbz#1222645


author: Dave Anderson <anderson@redhat.com> - 7.1.2-1
changelog:
  - Rebase to upstream version 7.1.2
    Resolves: rhbz#1207696
  - Fix several ppc64 backtrace issues
    Resolves: rhbz#1235447


author: Dave Anderson <anderson@redhat.com> - 7.1.2-2
changelog:
  - Fix "kmem -s <address>", "bt -F[F]", and "rd -S[S]" options in kernels 
    configured with CONFIG_SLUB having multiple-page slabs.
    Resolves: rhbz#1244003
  - Fix for SIGSEGV generated by "bt -[f|F]" in ARM64 kernels.
    Resolves: rhbz#1248859


author: Dave Anderson <anderson@redhat.com> - 7.1.2-3
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1282997


author: Dave Anderson <anderson@redhat.com> - 7.1.5-1
changelog:
  - Rebase to upstream version 7.1.5
    Resolves: rhbz#1292566
  - Decode clflushopt instruction
    Resolves: rhbz#1262479
  - Support AArch64 QEMU generated dumps 
    Resolves: rhbz#1299873
  - crash: zero-size memory allocation (aarch64) 
    Resolves: rhbz#1312738


author: Dave Anderson <anderson@redhat.com> - 7.1.5-2
changelog:
  - Fix for kernel module symbol gathering when the ordering of module
    symbol name strings does not match the order of the kernel_symbol
    structures.
  - Resolves: rhbz#1375130


author: Dave Anderson <anderson@redhat.com> - 7.1.8-1
changelog:
  - Rebase to upstream version 7.1.8
    Resolves: rhbz#1393534
  - POWER9 - Power ISA 3.0 related support for crash utility
    Resolves: rhbz#1368711
  - crash package update - ppc64/ppc64le
    Resolves: rhbz#1384944
  - exception RIP: unknown or invalid address
    Resolves: rhbz#1350457
  - Crash does not always parse correctly the modules symbol tables
    Resolves: rhbz#1360415
  - ARM64: crash live system from: WARNING: cannot read linux_banner string
    Resolves: rhbz#1392007
  - kmem: invalid structure member offset: page_count
    Resolves: rhbz#1392011
  - Kernel address space randomization [KASLR] support 
    Resolves: rhbz#1392658
  - invalid structure size: tnt
    Resolves: rhbz#1420653


author: Dave Anderson <anderson@redhat.com> - 7.1.9-1
changelog:
  - Rebase to upstream version 7.1.9
    Resolves: rhbz#1393534
  - Fix gdb "set scope" option for KASLR kernels.
    Resolves: rhbz#1440725
  - Fix for the determination of the x86_64 "phys_base" value when it is
    not passed in the VMCOREINFO data of ELF vmcores
    Resolves: rhbz#1439170


author: Dave Anderson <anderson@redhat.com> - 7.1.9-2
changelog:
  - Rebase to github commits 87179026 to ad3b8476
    Resolves: rhbz#1393534
  - Prohibit native gdb disassemble command when KASLR
    Resolves: rhbz#1445649


author: Dave Anderson <anderson@redhat.com> - 7.2.0-1
changelog:
  - Rebase to upstream version 7.2.0
  - Rebase to github commits da9bd35a to e2efacdd
    Resolves: rhbz#1497316
  - ppc64le: fix for "WARNING: cannot access vmalloc'd module memory"
    Resolves: rhbz#1485391
  - Support for analyzing an SADUMP crash dump if KASLR is enabled
    Resolves: rhbz#1504467


author: Dave Anderson <anderson@redhat.com> - 7.2.0-3
changelog:
  - Rebase to github commits 494a796e to 63419fb9
    Resolves: rhbz#1497316
  - Fix IRQ stack transition failure due to kernel's removal of 64-byte gap
    Resolves: rhbz#1530887


author: Dave Anderson <anderson@redhat.com> - 7.2.0-5
changelog:
  - Additional support for analyzing an SADUMP dumpfile if KASLR
    and KPTI are both enabled
    Resolves: rhbz#1504467


author: Dave Anderson <anderson@redhat.com> - 7.2.3-1
changelog:
  - Rebase to upstream version 7.2.3
    Resolves: rhbz#1559460
  - eBPF support with new bpf command
    Resolves: rhbz#1559758


author: Dave Anderson <anderson@redhat.com> - 7.2.3-2
changelog:
  - Work around rhel-7.6 s390/s390x ptrace.h incompatiblity FTBFS issue
  - Rebase to github commit 46d21219
    Resolves: rhbz#1559460


author: Dave Anderson <anderson@redhat.com> - 7.2.3-5
changelog:
  - Rebase to github commits b9d76838 to c79a11fa
    Resolves: rhbz#1559460
  - Fix ppc64/ppc6le stacksize calculation
    Resolves: rhbz#1589685


author: Dave Anderson <anderson@redhat.com> - 7.2.3-7
changelog:
  - Support ppc64 increased VA range
  - Fix ppc64 "bt" command failure reporting invalid NIP value
    Resolves: rhbz#1617936


author: Dave Anderson <anderson@redhat.com> - 7.2.3-8
changelog:
  - Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. 
    Resolves: rhbz#1617936


author: Dave Anderson <anderson@redhat.com> - 7.2.3-9
changelog:
  - Alternate list loop detection option
    Resolves: rhbz#1595389
  - Readline library tab completion plugin
    Resolves: rhbz#1656165


author: HATAYAMA Daisuke <d.hatayama@jp.fujitsu.com> - 1.0-1
changelog:
  - Remove inclusion of kvmdump.h and unwind_x86_64.h due to non-supporting issue
    on crash-devel package. Instead, use a new interface for them.
  - Remove ppc64, ia64, s390 and s390x from ExclusiveArch, leave x86_64
    and %{ix86} there.
  - Add descriptions in BuildRequires and Requires about crash and crash-devel.


author: Dave Anderson <anderson@redhat.com> - 1.0.3-2.el7
changelog:
  - Add RPM_OPT_FLAGS to gcc line in ptdump.mk
    Resolves: rhbz#1450708
  - Set gdb scope to get appropriate ring_buffer structure
    Resolves: rhbz#1451181


author: Dave Anderson <anderson@redhat.com> - 1.0.3-3.el7
changelog:
  - ptdump: fix build warning: warning: this ‘if’ clause does not guard
  - ptdump: fix failure: ptdump: invalid size request: 0 type: "read page for write" 
  - ptdump: fix heap memory and fd leak when fault happens
    Resolves: rhbz#1791525


author: Dave Anderson <anderson@redhat.com> - 1.0-1.2
changelog:
  - fix Makefile to account for s390 build
  - change exclusive arch entry from i386 to {ix86}
  - Resolves: rbhz#545564


author: Dave Anderson <anderson@redhat.com> - 1.0-2
changelog:
  - Fix for segmentation violation with "trace show -c cpu" command,
    and add "trace dump -t" command.
    Resolves: rbhz#592887


author: Dave Anderson <anderson@redhat.com> - 1.0-3
changelog:
  - Remove trace_dump.patch, which requires a kernel later than
    the RHEL6 base of 2.6.32.
    Resolves: rbhz#601536


author: Dave Anderson <anderson@redhat.com> - 2.0-3
changelog:
  - Replace obsolete _init() and _fini() functions.
  - Fix possible segmentation violation on calloc() failure.
  - Initialize trace_dat to avoid compiler warning.


author: Dave Anderson <anderson@redhat.com> - 2.0.12
changelog:
  - Differentiate ppc64 .ring_buffer_read text symbol from ring_buffer_read data symbol
  - Fix for ring_buffer_per_cpu.nr_pages size change on big-endian systems 
  - Fix for Linux 4.7 change to the TRACE_EVENT_FL_TRACEPOINT flag
    Resolves: rhbz#1441914
    Resolves: rhbz#1440726


author: Dave Anderson <anderson@redhat.com> - 2.0.13
changelog:
  - Build requires crash-devel-7.2.0-2 and usage requires crash-7.2.0-2
    because of load_module structure change.
    Resolves: rhbz#1520825


author: John W. Linville <linville@redhat.com> 1.0.1_2009_01_15-3
changelog:
  - Update for CRDA verion 1.0.1
  - Account for lack of "v" in upstream release tarball naming
  - Add patch to let wireless-regdb install w/o being root


author: John W. Linville <linville@redhat.com> 1.0.1_2009.01.30-4
changelog:
  - Change version to reflect new wireless-regdb upstream release practices
  - Update wireless-regdb version to pick-up recent updates and fixes (#483816)


author: John W. Linville <linville@redhat.com> 1.0.1_2009.03.09-8
changelog:
  - Add setregdomain script to set regulatory domain based on timezone
  - Expand 85-regulatory.rules to invoke setregdomain script on device add


author: John W. Linville <linville@redhat.com> 1.0.1_2009.03.09-9
changelog:
  - Add Requires line for iw package (#492762)
  - Update setregdomain script to correctly check if COUNTRY is set


author: John W. Linville <linville@redhat.com> 1.1.0_2009.09.08-1
changelog:
  - Update wireless-regdb to version 2009.09.08 
  - Start resetting release number with version updates


author: John W. Linville <linville@redhat.com> 1.1.0_2009.11.25-3
changelog:
  - Add man page for setregdomain (from Andrew Hecox <ahecox@redhat.com>)
  - Change $RPM_BUILD_ROOT to buildroot


author: John W. Linville <linville@redhat.com> 1.1.1_2009.11.25-2
changelog:
  - Change RPM_OPT_FLAGS to optflags
  - Leave man page compression to rpmbuild
  - Correct date in previous changelog entry


author: John W. Linville <linville@redhat.com> 1.1.1_2009.11.25-3
changelog:
  - Correct license tag from BSD to ISC
  - Comment purpose of regulatory-rules-setregdomain.patch
  - Add copyright and license statement to setregdomain
  - Add comment for why /lib is hardcoded in files section
  - Reformat Dec 21 2009 changelog entry so rpmlint stops complaining


author: John W. Linville <linville@redhat.com> 1.1.2_2011.04.28-1
changelog:
  - Update crda to version 1.1.2
  - Update wireless-regdb to version 2011.04.28 
  - Fix mis-numbered version comment in changelog for Nov 23 2010


author: John W. Linville <linville@redhat.com> - 1.1.3_2013.02.13-3
changelog:
  - setregdomain: remove sed and awk calls
  - setregdomain: reimplement COUNTRY assignment with shell function


author: John W. Linville <linville@redhat.com> - 1.1.3_2014.06.13-1
changelog:
  - Update wireless-regdb to version 2014.06.13
  - Add logger commands to setregdomain to make it more communicative


author: John W. Linville <linville@redhat.com> - 1.1.3_2015.04.06-2
changelog:
  - Update wireless-regdb to version 2015.04.06
  - Add patch for regdbdump to display DFS region
  - Make some improvements to setregdomain and its man page


author: Adrian Reber <areber@redhat.com> - 1.6.1-2
changelog:
  - removed criu.service (CVE-2015-5228, CVE-2015-5231)
  - removed devel sub-package (related to above CVEs)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.3-5
changelog:
  - Python 2 binary package renamed to python2-criu
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.6-2
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Tomas Mraz <tmraz@redhat.com> - 1.1-3
changelog:
  - fix setting keycreate context
  - unify logging a bit
  - cleanup some warnings and fix a typo in TZ code
  - 450993 improve and fix inotify support


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.1-1
changelog:
  - update to 1.4.1
  - create and own /var/spool/anacron/cron.{daily,weekly,monthly} to
   remove false warning about non existent files
  - Resolves: 517398


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.7-2
changelog:
  - use only systemd units with systemd
  - add trigger for restart on glibc, libselinux or pam upgrades (#699189)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.8-4
changelog:
  - drop the without systemd build condition
  - add the chkconfig readding trigger to the sysvinit subpackage


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.10-5
changelog:
  - add support for RANDOM_DELAY - delaying job startups
  - pass some environment variables to processes (LANG, etc.) (#969761)
  - do not use putenv() with string literals (#971516)


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.11-2
changelog:
  - scriptlets are not created correctly if systemd is not in BR 986698
  - remove sub-package sysvinit, which is not needed anymore
  - update license, anacron is under GPLv2+


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.11-3
changelog:
  - 919290 systemd script use "KillMode=process"
  - Fcntl locking has different semantics than flock. Prefer flock.
    - 49225e172d156531ca142518d2638350752e373a
  - Pull PAM environment variables also from session modules.
    - c8e7d1b43c86a85441cb09cf7e08090f3ec1f384


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.11-5
changelog:
  - Cronie doesn't work when is executed as stand alone without systemd (for 
    debuging issues)
  - Fix another permission, hopefully all now.
  - Resolves: rhbz#1012420, rhbz#1015567


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-14
changelog:
  - mark the 0hourly and dailyjobs crontabs as config
  - properly handle users for whose getpwnam() returns NULL temporarily
  - log when crond is shutting down


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-16
changelog:
  - disable mail from anacron with empty MAILTO
  - crontab: do not block access with PAM when running as root
  - improve the crontab man page
  - do not hardcode system_u selinux user but use the user from
    the current context


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-17
changelog:
  - make anacron not to contradict itself in syslog
    (job output does not have to be necessarily mailed)


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.11-18
changelog:
  - fix regression - spurious PAM log message from crontab (#1479064)
  - allow empty variables in crontabs (#1439217)


author: Marcel Plch <mplch@redhat.com> - 1.4.11-20
changelog:
  - Fix race condition when crontab is modified the same second
    before and after reading the crontab
  - Resolves: rhbz#1638691


author: Marcel Plch <mplch@redhat.com> - 1.4.11-22
changelog:
  - Backport upstream patch to fix cron failing on
    smart card authentication
  - Resolves: rhbz#1650314


author: Mark Cox <mjc@redhat.com>
changelog:
  - First version. Because this depends on a build environment
  - We won't worry about ni-scripts for now, they're not used anyhow


author: Joe Orton <jorton@redhat.com>
changelog:
  - Put the stronghold/bin -> stronghold/ssl/bin symlink in the %files section
    rather than creating it in %post.


author: Joe Orton <jorton@redhat.com> 2.1-5
changelog:
  - certwatch: prevent warnings for duplicate certs (#103807)
  - make /etc/cron.daily/certwatch 0755 (#141003)
  - add genkey(1) man page (#134821)


author: Joe Orton <jorton@redhat.com> 2.2-2
changelog:
  - add configuration options for certwatch (#152990)
  - allow passing options in certwatch.cron via $CERTWATCH_OPTS
  - require openssl with /etc/pki/tls


author: Joe Orton <jorton@redhat.com> 2.3-5
changelog:
  - genkey: skip the CA selection dialog; the CA-specific 
    instructions are all out-of-date
  - man page updates, add man page for keyrand


author: Elio Maldonado <emaldona@redhat.com> - 2.4.1-2
changelog:
  - enabled renewal for certs in the nss database
  - disabled renewal for certs in pem files
  - added man page examples
  - requires nss 3.12.2 or higher


author: Elio Maldonado <emaldona@redhat.com> - 2.4.1-9
changelog:
  - certwatch: Fixed cert expiry time calculations (#473860)
  - keyutil: Fixed segfault on certificate generation (#479886)
  - genkey: Fixed key file name extension


author: Elio Maldonado <emaldona@redhat.com> - 2.4.1-14
changelog:
  - keyutil: Fixed bug where key pem file was not written (#473860)
  - keyutil: Fixed reverse logic that prevented output of the pem encoded key


author: Elio Maldonado <emaldona@redhat.com> - 2.4.1-18
changelog:
  - certwatch: Fixed cert expiry time calculations (#473860)
  - keyutil: Fixed segfault on certificate generation and missing of key/cert pem files (#479886)


author: Elio Maldonado <emaldona@redhat.com> - 2.4.1-33
changelog:
  - Resolves: Bug 782142 - keyutil should use error string utilities provided by nss since 3.13
  - Update Requires and BuildRequires nss and nss-util mininimum versions
  - Add needed line breaks to the keyutil usage message


author: Joe Orton <jorton@redhat.com> - 2.4.1-40.1
changelog:
  - keyutil: use SHA1 as default hash in created certs (#1030470)
  - genkey: default to 2048 bit keysize (#1039896)


author: Joe Orton <jorton@redhat.com> - 2.4.1-42
changelog:
  - genkey: skip cert generation after CSR for OpenSSL (#1039896)
  - keyutil: fix error reporting (#1039896)


author: Alasdair Kergon <agk@redhat.com> - 1.0.3-4
changelog:
  - Add build dependency on new device-mapper-devel package.
  - Add preun and post ldconfig requirements.
  - Update BuildRoot.


author: Till Maas <opensource till name> - 1.0.5-2
changelog:
  - Use /lib as libdir (#243228)
  - sync header and library (#215349)
  - do not use %makeinstall (recommended by PackageGuidelines)
  - select sbindir with %configure instead with make
  - add TODO


author: Till Maas <opensource till name> - 1.0.5-4
changelog:
  - disable patch2, libsepol is now detected by configure
  - move libcryptsetup.so to %{_libdir} instead of /%{_lib}


author: Till Maas <opensource till name> - 1.0.5-5
changelog:
  - fix devel subpackage requires
  - remove empty NEWS README
  - remove uneeded INSTALL
  - remove uneeded ldconfig requires
  - add readonly detection patch


author: Till Maas <opensource till name> - 1.0.5-6
changelog:
  - cleanup BuildRequires:
  - removed versions, packages in Fedora are new enough
  - changed popt to popt-devel


author: Till Maas <opensource till name> - 1.0.6-0.1.pre2
changelog:
  - Update to new version with several bugfixes
  - remove patches that have been merged upstream
  - add patch from cryptsetup newsgroup
  - fix typo / missing luksRemoveKey in manpage (patch)


author: Till Maas <opensource till name> - 1.0.6-3
changelog:
  - remove a duplicate sentence from the manpage (RH #448705)
  - add patch metadata about upstream status


author: Milan Broz <mbroz@redhat.com> - 1.0.6-5
changelog:
  - Change new project home page.
  - Print more descriptive messages for initialization errors.
  - Refresh patches to versions commited upstream.


author: Milan Broz <mbroz@redhat.com> - 1.0.7-1
changelog:
  - Update to upstream final release.
  - Split libs subpackage.
  - Remove rpath setting from cryptsetup binary.


author: Milan Broz <mbroz@redhat.com> - 1.1.0-0.1
changelog:
  - Update to new upstream testing version with new API interface.
  - Add luksSuspend and luksResume commands.
  - Introduce pkgconfig.


author: Milan Broz <mbroz@redhat.com> - 1.4.1-1
changelog:
  - Update to cryptsetup 1.4.1.
  - Add Python cryptsetup bindings.
  - Obsolete separate python-cryptsetup package.


author: Milan Broz <mbroz@redhat.com> - 1.5.0-0.1
changelog:
  - Update to cryptsetup 1.5.0-rc1.
  - Add veritysetup subpackage.
  - Move localization files to libs subpackage.


author: Milan Broz <mbroz@redhat.com> - 1.6.0-0.1
changelog:
  - Update to cryptsetup 1.6.0-rc1.
  - Relax license to GPLv2+ according to new release.
  - Compile cryptsetup with libpwquality support.


author: Milan Broz <mbroz@redhat.com> - 1.6.0-1
changelog:
  - Update to cryptsetup 1.6.0.
  - Change default LUKS encryption mode to aes-xts-plain64 (AES128).
  - Force use of gcrypt PBKDF2 instead of internal implementation.


author: Ondrej Kozina <okozina@redhat.com> - 1.6.2-1
changelog:
  - Update to cryptsetup 1.6.2.
  - Add dracut module for cryptsetup-reencrypt (90reencrypt).
  - 90reencrypt: Rename dracut parameteres to be compliant with actual naming guidance.
  - 90reencrypt: Install and load loop kernel module.
  - 90reencrypt: Fix lock file name.
  - 90reencrypt: Add conflict with 90crypt dracut module (more info in #1010287)
  - Resolves: #1010278 #1010287


author: Ondrej Kozina <okozina@redhat.com> - 1.6.2-2
changelog:
  - 90reencrypt: Move conflict with 90crypt to install() section.
  - 90reencrypt: Drop to emergency_shell after successful reencryption.
  - Resolves: #1021593


author: Ondrej Kozina <okozina@redhat.com> - 1.6.3-1
changelog:
  - Update to cryptsetup 1.6.3.
  - various fixes related to block devices with 4KiB sectors
  - enable reencryption using specific keyslot (dracut module)
  - fix failure in reading last keyslot from external LUKS header
  - update FIPS POST to be complaint with actual requirements
  - fix hash limiting if parameter is not numeric
  - Resolves: #1028362 #1029032 #1029406 #1030288 #1034388 #1038097


author: Ondrej Kozina <okozina@redhat.com> - 1.6.7-1
changelog:
  - Update to cryptsetup 1.6.7.
  - patch: avoid use of kernel crypto API socket which is known
    to be broken in RHEL7.0 kernel (7.1+ is fine).
  - Resolves: #1206170


author: Ondrej Kozina <okozina@redhat.com> - 1.7.4-4
changelog:
  - patch: fix regression in blockwise functions
  - patch: avoid repeating error messages when device holders
    detected.
  - patch: add option to cryptsetup-reencrypt to print progress
    log sequentaly
  - patch: use --progress-frequency in reencryption dracut module
  - Resolves: #1480006 #1447632 #1479857


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-2
changelog:
  - patch: stop LUKS2 auto-recovery if device is no longer LUKS
    type
  - patch: update cryptsetup man page for --type option
  - patch: rephrase error message for invalid --type option in
    convert action
  - Resolves: #1599281 #1601477 #1601481


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-3
changelog:
  - Add expected permissions explicitly for locking directory.
  - Reinstate sed script removing library rpath from libtool
    script due to bug in upstream sources distribution.
  - Resolves: #1609847 #1610379


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-4
changelog:
  - patch: Fix broken LUKS2 api test.
  - patch: Allow cryptsetup to process all LUKS2 metadata variants
    according to LUKS2 specifiation.
  - Resolves: #1653388


author: Ondrej Kozina <okozina@redhat.com> - 2.0.3-5
changelog:
  - patch: calculate alignment offset correctly for LUKS2 devices.
  - patch: fix memory leak in LUKS2 validation.
  - Resolves: #1613953 #1693592


author: Neil Horman <nhorman@redhat.com>
changelog:
  - Added upstream ocs fix
  - Added feature to find symbol assignments
  - Changed default SYSDIR directory to /var/lib/cs
  - Incoproated M. Schwendt's fix for ocs -s


author: Neil Horman <nhorman@redhat.com>
changelog:
  - Added cscope-indexer helper and xcscope lisp addon
  - Added man page for xcscope
  - Added triggers to add xcscope.el pkg to (x)emacs
  - Thanks to Ville, Michael and Jens for thier help :)


author: John Dennis <jdennis@redhat.com> - 5.8-11
changelog:
  - add ctags-5.8-memmove.patch
    bug #284 absoluteFilename uses strcpy on overlapping strings 
    http://sourceforge.net/p/ctags/bugs/284/  
    The bug was fixed upstream on 2012-03-26 in the following commit
    http://sourceforge.net/p/ctags/code/782/
    ctags-5.8-memmove.patch simply adds the same patch as the above commit.


author: Tim Powers <timp@redhat.com>
changelog:
  - started changelog 
  - fixed init.d script location
  - changed script in init.d quite a bit and made more like the rest of our
    startup scripts


author: Than Ngo <than@redhat.de>
changelog:
  - update to 1.1 release
  - move back to /etc/rc.d/init.d
  - fix cupsd.init to work with /etc/init.d and /etc/rc.d/init.d
  - split cups


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.1.1 (this has some major bugfixes)
  - Fix a typo in initscript (it's $?, not ?$)
  - Fix /usr/etc vs. /etc trouble, don't insist on /usr/var (YUCK!)
  - Create the spool dir


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-1
changelog:
  - 1.1.13
  - Add patch for koi8-{r,u} and iso8859-8 encodings (#59018)
  - Rename init scripts so we can safely "killall cupsd" from there


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-5
changelog:
  - Move cups-config to cups-devel subpackage
  - Make alternatives usage a %define to simplify builds for earlier
    releases
  - Explicitly provide things we're supplying through alternatives
    to shut up kdeutils dependencies


author: Bill Nottingham <notting@redhat.com> 1.1.14-7
changelog:
  - lpc man page is alternative too
  - run ldconfig in -libs %post/%postun, not main
  - remove alternatives in %preun


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-12
changelog:
  - Support SMB printing (#62407)
  - Add HTML redirections to doc files to work around users mistaking
    /usr/share/doc/cups-1.1.14 for the web frontend (#62405)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-1
changelog:
  - 1.1.15-1
  - Fix up smb printing trigger (samba-client, not samba-clients)
  - Start cupsd earlier, apparently it needs to be running before samba
    starts up for smb printing to work.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-3
changelog:
  - Add a symlink /usr/share/cups/doc -> /usr/share/doc/cups-devel-1.1.15
    because some applications expect to find the cups docs in
    /usr/share/cups/doc


author: Tim Waugh <twaugh@redhat.com> 1.1.15-7
changelog:
  - Really add cups-lpd xinetd file (bug #63919).
  - Ship pstoraster (bug #69573).
  - Prevent fread from trying to read from beyond EOF (fixes a segfault
    with new glibc).


author: Tim Waugh <twaugh@redhat.com> 1.1.15-11
changelog:
  - Use %configure for multilib correctness.
  - Use libexec instead of lib for CUPS_SERVERBIN.
  - Ship translated man pages.
  - Remove unshipped files.
  - Fix file list permissions (bug #59021, bug #74738).
  - Fix messy initscript output (bug #65857).
  - Add 'reload' to initscript (bug #76114).


author: Tim Waugh <twaugh@redhat.com> 1.1.15-13
changelog:
  - Use logrotate for log rotation (bug #76791).
  - No longer need cups.desktop, since redhat-config-printer handles it.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.15-14
changelog:
  - Buildrequire pam-devel.
  - Patch default PAM config file to remove directory names from module paths,
    allowing the configuration files to work equally well on multilib systems.
  - Patch default PAM config file to use system-auth, require the file at build-
    time because that's what data/Makefile checks for.


author: Tim Waugh <twaugh@redhat.com> 1.1.17-6
changelog:
  - Add epoch to internal requirements.
  - Make 'condrestart' return success exit code when daemon isn't running.


author: Tim Waugh <twaugh@redhat.com> 1.1.18-1
changelog:
  - 1.1.18.
  - No longer need uninit patch.
  - Some parts of the iDefense and pdftops patches seem to have been
    picked up, but not others.


author: Havoc Pennington <hp@redhat.com> 1:1.1.18-4
changelog:
  - adjust dbus patch - dbus_bus_get() sends the hello for you, 
    and there were a couple of memleaks
  - buildprereq dbus 0.9
  - rebuild for new dbus
  - hope it works, I'm ssh'd in with no way to test. ;-)


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc4.1
changelog:
  - 1.1.19rc4.  Ported initscript, idefense, ppdsdat, dbus patches.
  - No longer need error, sigchld patches.
  - Ship cupstestppd.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-7
changelog:
  - Add some %if %use_dbus / %endif's to make it compile without dbus
    (bug #97397).  Patch from Jos Vos.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-10
changelog:
  - Pass correct attributes-natural-language through even in the absence
    of translations for that language (bug #100984).
  - Show compilation command lines.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't ignore the file descriptor when ShutdownClient is called: it
    might get closed before we next try to read it (bug #107787).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-1
changelog:
  - 1.1.20.
  - No longer need idefense, str226 patches.
  - Updated sanity patch.
  - The devel sub-package requires openssl-devel (bug #110772).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-2
changelog:
  - Try harder to find a translated page for the web interface (bug #107619).
  - Added build_as_pie conditional to spec file to facilitate debugging.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-4
changelog:
  - Tracked D-BUS API changes.
  - Updated D-BUS configuration file.
  - Symlinks to avoid conflicting with bash builtins (bug #102490).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-7
changelog:
  - Fix non-conformance with HTTP/1.1, which caused failures when printing
    to a Xerox Phaser 8200 via IPP (bug #122352).
  - Make lppasswd(1) PIE.
  - Rotate logs within cupsd (instead of relying on logrotate) if we start
    to approach the filesystem file size limit (bug #123003).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix cups/util.c:get_num_sdests() to use encryption when it is necessary
    or requested (bug #118982).
  - Use upstream patch for the HTTP/1.1 Continue bug (from STR716).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-8
changelog:
  - If cupsd fails to start, make it exit with an appropriate code so that
    initlog notifies the user (bug #110135).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-9
changelog:
  - Apply patches from CVS (authtype) to fix STR #434, STR #611, and as a
    result STR #719.  This fixes several problems including those noted in
    bug #114999.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc2.1
changelog:
  - 1.1.21rc2.
  - No longer need state, reload-timeout or str743 patches.
  - httpnBase64 patch no longer applies; alternate method implemented
    upstream.
  - Fix single byte overread in usersys.c (spotted by Colin Walters).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.7
changelog:
  - Prevent filters generating incorrect PS in locales where "," is the
    decimal separator (bug #136102).  Patch from STR #970.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc2.1
changelog:
  - Make cancel-cups(1) man page point to lp-cups(1) not lp(1) (bug #136973).
  - Use upstream patch for STR #953.
  - 1.1.22rc2.


