# changelog

author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.14-11.el7uek]
changelog:
  - uek-rpm: aarch64 enable available DTrace options (Tom Saeger)  [Orabug: 27485993]  
  - nvme: add tracepoint for nvme_complete_rq (Johannes Thumshirn)  [Orabug: 27377976]  
  - nvme: add tracepoint for nvme_setup_cmd (Johannes Thumshirn)  [Orabug: 27377976]  
  - blk-mq: avoid to map CPU into stale hw queue (Ming Lei)  [Orabug: 27377976]  
  - blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei)  [Orabug: 27377976]  
  - blk-mq: quiesce queue before freeing queue (Ming Lei)  [Orabug: 27377976]  
  - blk-mq: only run the hardware queue if IO is pending (Jens Axboe)  [Orabug: 27377976]  
  - nvme-fc: don't use bit masks for set/test_bit() numbers (Jens Axboe)  [Orabug: 27377976]  
  - nvmet_fc: fix better length checking (James Smart)  [Orabug: 27377976]  
  - blk-mq: fix nr_requests wrong value when modify it from sysfs (weiping zhang)  [Orabug: 27377976]  
  - nvmet: make config_item_type const (Bhumika Goyal)  [Orabug: 27377976]  
  - scsi: qla2xxx: Use ql2xnvmeenable to enable Q-Pair for FC-NVMe (Himanshu Madhani)  [Orabug: 27377976]  
  - scsi: lpfc: Fix a precedence bug in lpfc_nvme_io_cmd_wqe_cmpl() (Dan Carpenter)  [Orabug: 27377976]  
  - scsi: lpfc: change version to 11.4.0.4 (Dick Kennedy)  [Orabug: 27377976]  
  - scsi: lpfc: correct nvme sg segment count check (James Smart)  [Orabug: 27377976]  
  - scsi: lpfc: Fix oops of nvme host during driver unload. (Dick Kennedy)  [Orabug: 27377976]  
  - scsi: lpfc: Extend RDP support (Dick Kennedy)  [Orabug: 27377976]  
  - scsi: lpfc: Ensure io aborts interlocked with the target. (Dick Kennedy)  [Orabug: 27377976]  
  - scsi: lpfc: Fix crash in lpfc_nvme_fcp_io_submit during LIP (Dick Kennedy)  [Orabug: 27377976]  
  - scsi: lpfc: Disable NPIV support if NVME is enabled (Dick Kennedy)  [Orabug: 27377976]  
  - scsi: lpfc: Revise NVME module parameter descriptions for better clarity (Dick Kennedy)  [Orabug: 27377976]  
  - scsi: lpfc: Set missing abort context (James Smart)  [Orabug: 27377976]  
  - scsi: lpfc: Reduce log spew on controller reconnects (James Smart)  [Orabug: 27377976]  
  - scsi: lpfc: Move CQ processing to a soft IRQ (Dick Kennedy)  [Orabug: 27377976]  
  - scsi: lpfc: Make ktime sampling more accurate (Dick Kennedy)  [Orabug: 27377976]  
  - scsi: lpfc: Fix lpfc nvme host rejecting IO with Not Ready message (Dick Kennedy)  [Orabug: 27377976]  
  - scsi: fcoe: open-code fcoe_destroy_work() for NETDEV_UNREGISTER (Hannes Reinecke)  [Orabug: 27377976]  
  - scsi: fcoe: separate out fcoe_vport_remove() (Hannes Reinecke)  [Orabug: 27377976]  
  - scsi: fcoe: move fcoe_interface_remove() out of fcoe_interface_cleanup() (Hannes Reinecke)  [Orabug: 27377976]  
  - scsi: lpfc: remove redundant null check on eqe (Colin Ian King)  [Orabug: 27377976]  
  - nvme: fix subsystem multiple controllers support check (Israel Rukshin)  [Orabug: 27377976]  
  - nvme: take refcount on transport module (Nitzan Carmi)  [Orabug: 27377976]  
  - nvme-pci: fix NULL pointer reference in nvme_alloc_ns (Jianchao Wang)  [Orabug: 27377976]  
  - nvme: modify the debug level for setting shutdown timeout (Max Gurtovoy)  [Orabug: 27377976]  
  - nvme-pci: don't open-code nvme_reset_ctrl (Sagi Grimberg)  [Orabug: 27377976]  
  - nvmet: rearrange nvmet_ctrl_free() (Israel Rukshin)  [Orabug: 27377976]  
  - nvmet: fix error flow in nvmet_alloc_ctrl() (Israel Rukshin)  [Orabug: 27377976]  
  - nvme-pci: remove an unnecessary initialization in HMB code (Minwoo Im)  [Orabug: 27377976]  
  - nvme-fabrics: protect against module unload during create_ctrl (Roy Shterman)  [Orabug: 27377976]  
  - nvmet-fc: cleanup nvmet add_port/remove_port (James Smart)  [Orabug: 27377976]  
  - nvme_fcloop: refactor host/target io job access (James Smart)  [Orabug: 27377976]  
  - nvme_fcloop: rework to remove xxx_IN_ISR feature flags (James Smart)  [Orabug: 27377976]  
  - nvme_fcloop: disassocate local port structs (James Smart)  [Orabug: 27377976]  
  - nvme_fcloop: fix abort race condition (James Smart)  [Orabug: 27377976]  
  - nvmet: lower log level for each queue creation (Sagi Grimberg)  [Orabug: 27377976]  
  - nvmet-rdma: lowering log level for chatty debug messages (Sagi Grimberg)  [Orabug: 27377976]  
  - nvmet-rdma: removed queue cleanup from module exit (Sagi Grimberg)  [Orabug: 27377976]  
  - blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei)  [Orabug: 27377976]  
  - nvme-fabrics: initialize default host->id in nvmf_host_default() (Ewan D. Milne)  [Orabug: 27377976]  
  - nvme-fcloop: avoid possible uninitialized variable warning (James Smart)  [Orabug: 27377976]  
  - nvme-mpath: fix last path removal during traffic (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme-rdma: fix concurrent reset and reconnect (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme: fix sector units when going between formats (Jeff Lien)  [Orabug: 27377976]  
  - nvme-pci: move use_sgl initialization to nvme_init_iod() (Minwoo Im)  [Orabug: 27377976]  
  - nvme: setup streams after initializing namespace head (Keith Busch)  [Orabug: 27377976]  
  - nvme: check hw sectors before setting chunk sectors (Keith Busch)  [Orabug: 27377976]  
  - nvme: call blk_integrity_unregister after queue is cleaned up (Ming Lei)  [Orabug: 27377976]  
  - nvme-fc: remove double put reference if admin connect fails (James Smart)  [Orabug: 27377976]  
  - nvme: set discard_alignment to zero (David Disseldorp)  [Orabug: 27377976]  
  - kyber: fix another domain token wait queue hang (Omar Sandoval)  [Orabug: 27377976]  
  - nvme-pci: fix NULL pointer dereference in nvme_free_host_mem() (Minwoo Im)  [Orabug: 27377976]  
  - nvme-rdma: fix memory leak during queue allocation (Max Gurtovoy)  [Orabug: 27377976]  
  - nvme-rdma: Use mr pool (Israel Rukshin)  [Orabug: 27377976]  
  - nvme-rdma: Check remotely invalidated rkey matches our expected rkey (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme-rdma: wait for local invalidation before completing a request (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme-rdma: don't complete requests before a send work request has completed (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme-rdma: don't suppress send completions (Sagi Grimberg)  [Orabug: 27377976]  
  - bcache: check return value of register_shrinker (Michael Lyle)  [Orabug: 27377976]  
  - nvmet-fc: correct ref counting error when deferred rcv used (James Smart)  [Orabug: 27377976]  
  - nvme: Suppress static analyis warning (Keith Busch)  [Orabug: 27377976]  
  - nvme: Fix NULL dereference on reservation request (Keith Busch)  [Orabug: 27377976]  
  - nvme: fix spelling mistake: "requeing" -> "requeuing" (Colin Ian King)  [Orabug: 27377976]  
  - nvme-pci: avoid hmb desc array idx out-of-bound when hmmaxd set. (Minwoo Im)  [Orabug: 27377976]  
  - nvme-pci: disable APST on Samsung SSD 960 EVO + ASUS PRIME B350M-A (Kai-Heng Feng)  [Orabug: 27377976]  
  - nvme-loop: check if queue is ready in queue_rq (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme-fc: check if queue is ready in queue_rq (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme-fabrics: introduce init command check for a queue that is not alive (Sagi Grimberg)  [Orabug: 27377976]  
  - blktrace: Use blk_trace_bio_get_cgid inside blk_add_trace_bio (Marcos Paulo de Souza)  [Orabug: 27377976]  
  - nvme: expose subsys attribute to sysfs (Hannes Reinecke)  [Orabug: 27377976]  
  - nvme: create 'slaves' and 'holders' entries for hidden controllers (Hannes Reinecke)  [Orabug: 27377976]  
  - block: create 'slaves' and 'holders' entries for hidden gendisks (Hannes Reinecke)  [Orabug: 27377976]  
  - nvme: also expose the namespace identification sysfs files for mpath nodes (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme: implement multipath access to nvme subsystems (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme: track shared namespaces (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme: introduce a nvme_ns_ids structure (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme: track subsystems (Christoph Hellwig)  [Orabug: 27377976]  
  - block, nvme: Introduce blk_mq_req_flags_t (Bart Van Assche)  [Orabug: 27377976]  
  - block, scsi: Make SCSI quiesce and resume work reliably (Bart Van Assche)  [Orabug: 27377976]  
  - block: Add the QUEUE_FLAG_PREEMPT_ONLY request queue flag (Bart Van Assche)  [Orabug: 27377976]  
  - ide, scsi: Tell the block layer at request allocation time about preempt requests (Bart Van Assche)  [Orabug: 27377976]  
  - block: Introduce BLK_MQ_REQ_PREEMPT (Bart Van Assche)  [Orabug: 27377976]  
  - block: Introduce blk_get_request_flags() (Bart Van Assche)  [Orabug: 27377976]  
  - block: Make q_usage_counter also track legacy requests (Ming Lei)  [Orabug: 27377976]  
  - blk-mq: fix issue with shared tag queue re-running (Jens Axboe)  [Orabug: 27377976]  
  - nvmet: kill nvmet_inline_bio_init (Christoph Hellwig)  [Orabug: 27377976]  
  - nvmet: better data length validation (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme-pci: avoid dereference of symbol from unloaded module (Ming Lei)  [Orabug: 27377976]  
  - nvme: send uevent for some asynchronous events (Keith Busch)  [Orabug: 27377976]  
  - nvme: unexport starting async event work (Keith Busch)  [Orabug: 27377976]  
  - nvme: remove handling of multiple AEN requests (Keith Busch)  [Orabug: 27377976]  
  - nvme-fc: remove unused "queue_size" field (Keith Busch)  [Orabug: 27377976]  
  - nvme: centralize AEN defines (Keith Busch)  [Orabug: 27377976]  
  - nvmet: remove redundant local variable (Sagi Grimberg)  [Orabug: 27377976]  
  - nvmet: remove redundant memset if failed to get_smart_log failed (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme: fix eui_show() print format (Javier González)  [Orabug: 27377976]  
  - nvme: compare NQN string with right size (Javier González)  [Orabug: 27377976]  
  - blk-mq: put driver tag if dispatch budget can't be got (Ming Lei)  [Orabug: 27377976]  
  - block: pass full fmode_t to blk_verify_command (Christoph Hellwig)  [Orabug: 27377976]  
  - block: remove __bio_kmap_atomic (Christoph Hellwig)  [Orabug: 27377976]  
  - block: kill bio_kmap/kunmap_irq() (Jens Axboe)  [Orabug: 27377976]  
  - Revert "blk-mq: don't handle TAG_SHARED in restart" (Jens Axboe)  [Orabug: 27377976]  
  - kthread: zero the kthread data structure (Shaohua Li)  [Orabug: 27377976]  
  - nvmet: fix comment typos in admin-cmd.c (Minwoo Im)  [Orabug: 27377976]  
  - nvme-rdma: fix nvme_rdma_create_queue_ib error flow (Max Gurtovoy)  [Orabug: 27377976]  
  - lpfc: tie in to new dev_loss_tmo interface in nvme transport (James Smart)  [Orabug: 27377976]  
  - nvme-fc: decouple ns references from lldd references (James Smart)  [Orabug: 27377976]  
  - nvme-fc: fix localport resume using stale values (James Smart)  [Orabug: 27377976]  
  - nvme: check admin passthru command effects (Keith Busch)  [Orabug: 27377976]  
  - nvme: factor get log into a helper (Keith Busch)  [Orabug: 27377976]  
  - nvme: fix and clarify the check for missing metadata (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme: split __nvme_revalidate_disk (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme: set the chunk size before freezing the queue (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme: don't pass struct nvme_ns to nvme_config_discard (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme: don't pass struct nvme_ns to nvme_init_integrity (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme: always unregister the integrity profile in __nvme_revalidate_disk (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme: move the dying queue check from cancel to completion (Christoph Hellwig)  [Orabug: 27377976]  
  - blktrace: fix unlocked registration of tracepoints (Jens Axboe)  [Orabug: 27377976]  
  - block: add a poll_fn callback to struct request_queue (Christoph Hellwig)  [Orabug: 27377976]  
  - block: introduce GENHD_FL_HIDDEN (Christoph Hellwig)  [Orabug: 27377976]  
  - block: don't look at the struct device dev_t in disk_devt (Christoph Hellwig)  [Orabug: 27377976]  
  - block: add a blk_steal_bios helper (Christoph Hellwig)  [Orabug: 27377976]  
  - block: provide a direct_make_request helper (Christoph Hellwig)  [Orabug: 27377976]  
  - block: add REQ_DRV bit (Christoph Hellwig)  [Orabug: 27377976]  
  - block: move REQ_NOWAIT (Christoph Hellwig)  [Orabug: 27377976]  
  - blk-mq: don't allocate driver tag upfront for flush rq (Ming Lei)  [Orabug: 27377976]  
  - blk-mq: move blk_mq_put_driver_tag*() into blk-mq.h (Ming Lei)  [Orabug: 27377976]  
  - blk-mq-sched: decide how to handle flush rq via RQF_FLUSH_SEQ (Ming Lei)  [Orabug: 27377976]  
  - blk-flush: use blk_mq_request_bypass_insert() (Ming Lei)  [Orabug: 27377976]  
  - block: pass 'run_queue' to blk_mq_request_bypass_insert (Ming Lei)  [Orabug: 27377976]  
  - blk-flush: don't run queue for requests bypassing flush (Ming Lei)  [Orabug: 27377976]  
  - blk-mq: put the driver tag of nxt rq before first one is requeued (Jianchao Wang)  [Orabug: 27377976]  
  - blk-mq: don't handle failure in .get_budget (Ming Lei)  [Orabug: 27377976]  
  - blk-mq: don't restart queue when .get_budget returns BLK_STS_RESOURCE (Ming Lei)  [Orabug: 27377976]  
  - blk-mq: don't handle TAG_SHARED in restart (Ming Lei)  [Orabug: 27377976]  
  - scsi: implement .get_budget and .put_budget for blk-mq (Ming Lei)  [Orabug: 27377976]  
  - scsi: allow passing in null rq to scsi_prep_state_check() (Ming Lei)  [Orabug: 27377976]  
  - blk-mq-sched: improve dispatching from sw queue (Ming Lei)  [Orabug: 27377976]  
  - blk-mq: introduce .get_budget and .put_budget in blk_mq_ops (Ming Lei)  [Orabug: 27377976]  
  - block: kyber: check if there are requests in ctx in kyber_has_work() (Ming Lei)  [Orabug: 27377976]  
  - sbitmap: introduce __sbitmap_for_each_set() (Ming Lei)  [Orabug: 27377976]  
  - blk-mq-sched: move actual dispatching into one helper (Ming Lei)  [Orabug: 27377976]  
  - nvme: comment typo fixed in clearing AER (Minwoo Im)  [Orabug: 27377976]  
  - nvme: Remove unused headers (Keith Busch)  [Orabug: 27377976]  
  - nvmet: fix fatal_err_work deadlock (James Smart)  [Orabug: 27377976]  
  - nvme-fc: add dev_loss_tmo timeout and remoteport resume support (James Smart)  [Orabug: 27377976]  
  - nvme: allow controller RESETTING to RECONNECTING transition (James Smart)  [Orabug: 27377976]  
  - nvme-fc: check connectivity before initiating reconnects (James Smart)  [Orabug: 27377976]  
  - nvme-fc: add a dev_loss_tmo field to the remoteport (James Smart)  [Orabug: 27377976]  
  - nvme-fc: change ctlr state assignments during reset/reconnect (James Smart)  [Orabug: 27377976]  
  - nvme: flush reset_work before safely continuing with delete operation (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme-rdma: reuse nvme_delete_ctrl when reconnect attempts expire (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme: consolidate common code from ->reset_work (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme-rdma: remove nvme_rdma_remove_ctrl (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme: move controller deletion to common code (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme-fc: merge __nvme_fc_schedule_delete_work into __nvme_fc_del_ctrl (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme-fc: avoid workqueue flush stalls (James Smart)  [Orabug: 27377976]  
  - nvme-fc: remove NVME_FC_MAX_SEGMENTS (James Smart)  [Orabug: 27377976]  
  - nvme-fc: add support for duplicate_connect option (James Smart)  [Orabug: 27377976]  
  - nvme-rdma: add support for duplicate_connect option (James Smart)  [Orabug: 27377976]  
  - nvme: add helper to compare options to controller (James Smart)  [Orabug: 27377976]  
  - nvme: add duplicate_connect option (James Smart)  [Orabug: 27377976]  
  - nvme: check for a live controller in nvme_dev_open (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme: get rid of nvme_ctrl_list (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme: switch controller refcounting to use struct device (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme: simplify nvme_open (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme-rdma: Add debug message when reaches timeout (Nitzan Carmi)  [Orabug: 27377976]  
  - nvme-rdma: align nvme_rdma_device structure (Max Gurtovoy)  [Orabug: 27377976]  
  - nvme-fc: correct io timeout behavior (James Smart)  [Orabug: 27377976]  
  - nvme-fc: correct io termination handling (James Smart)  [Orabug: 27377976]  
  - nvme-pci: add SGL support (Chaitanya Kulkarni)  [Orabug: 27377976]  
  - nvme: use ida_simple_{get,remove} for the controller instance (Christoph Hellwig)  [Orabug: 27377976]  
  - nvmet: Change max_nsid in subsystem due to ns_disable if needed (Roy Shterman)  [Orabug: 27377976]  
  - nvme-loop: Add BLK_MQ_F_NO_SCHED flag to admin tag set (Israel Rukshin)  [Orabug: 27377976]  
  - nvme-fc: Add BLK_MQ_F_NO_SCHED flag to admin tag set (Israel Rukshin)  [Orabug: 27377976]  
  - nvme-rdma: Add BLK_MQ_F_NO_SCHED flag to admin tag set (Israel Rukshin)  [Orabug: 27377976]  
  - nvme-pci: fix typos in comments (Minwoo Im)  [Orabug: 27377976]  
  - nvme-rdma: stop controller reset if the controller is deleting (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme-rdma: change queue flag semantics DELETING -> ALLOCATED (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme-rdma: Don't local invalidate if the queue is not live (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme-rdma: teardown admin/io queues once on error recovery (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme-rdma: Check that reinit_request got a proper mr (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme-rdma: move assignment to declaration (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme-rdma: fix wrong logging message (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme-rdma: pass tagset to directly nvme_rdma_free_tagset (Sagi Grimberg)  [Orabug: 27377976]  
  - block: remove blk_mq_reinit_tagset (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme: introduce nvme_reinit_tagset (Sagi Grimberg)  [Orabug: 27377976]  
  - block: introduce blk_mq_tagset_iter (Sagi Grimberg)  [Orabug: 27377976]  
  - nvme: simplify compat_ioctl handling (Christoph Hellwig)  [Orabug: 27377976]  
  - nvme-fc: move remote port get/put/free location (James Smart)  [Orabug: 27377976]  
  - nvme-fc: create fc class and transport device (James Smart)  [Orabug: 27377976]  
  - nvme-fc: add uevent for auto-connect (James Smart)  [Orabug: 27377976]  
  - nvme-fabrics: request transport module (Sagi Grimberg)  [Orabug: 27377976]  
  - nvmet: bump NVMET_NR_QUEUES to 128 (James Smart)  [Orabug: 27377976]  
  - nvme: use menu Kconfig interface (Randy Dunlap)  [Orabug: 27377976]  
  - nvme: update timeout module parameter type (Marc Olson)  [Orabug: 27377976]  
  - block: move __elv_next_request to blk-core.c (Christoph Hellwig)  [Orabug: 27377976]  
  - IB/ipoib: ioctls IPOIBACLNADD and IPOIBACLNGET do not work correctly (Ka-Cheong Poon)  [Orabug: 27533115]  
  - dtrace: self scoped variables are broken for idle threads (Tomas Jedlicka)  [Orabug: 27394019]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.14-10.el7uek]
changelog:
  - uek-rpm: Update to latest linux-firmware version (Somasundaram Krishnasamy)  [Orabug: 27523859]  
  - dtrace: Restrict access when the kernel is locked down (Eric Snowberg)  [Orabug: 27193819]  
  - MODSIGN: do not load mok when secure boot disabled (Lee, Chun-Yi)  [Orabug: 27193819]  
  - crypto: Don't enforce verifying cert chain with kexec pe files (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable LOCK_DOWN_IN_EFI_SECURE_BOOT (Eric Snowberg)  [Orabug: 27193819]  
  - efi: Lock down the kernel if booted in secure boot mode (David Howells)  [Orabug: 27193819]  
  - efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode (David Howells)  [Orabug: 27193819]  
  - bpf: Restrict kernel image access functions when the kernel is locked down (David Howells)  [Orabug: 27193819]  
  - Lock down kprobes (David Howells)  [Orabug: 27193819]  
  - Lock down /proc/kcore (David Howells)  [Orabug: 27193819]  
  - debugfs: Disallow use of debugfs files when the kernel is locked down (David Howells)  [Orabug: 27193819]  
  - x86/mmiotrace: Lock down the testmmiotrace module (David Howells)  [Orabug: 27193819]  
  - Lock down module params that specify hardware parameters (eg. ioport) (Eric Snowberg)  [Orabug: 27193819]  
  - Lock down TIOCSSERIAL (David Howells)  [Orabug: 27193819]  
  - Prohibit PCMCIA CIS storage when the kernel is locked down (David Howells)  [Orabug: 27193819]  
  - scsi: Lock down the eata driver (David Howells)  [Orabug: 27193819]  
  - acpi: Disable APEI error injection if the kernel is locked down (Linn Crosetto)  [Orabug: 27193819]  
  - acpi: Disable ACPI table override if the kernel is locked down (Linn Crosetto)  [Orabug: 27193819]  
  - acpi: Ignore acpi_rsdp kernel param when the kernel has been locked down (Josh Boyer)  [Orabug: 27193819]  
  - ACPI: Limit access to custom_method when the kernel is locked down (Matthew Garrett)  [Orabug: 27193819]  
  - asus-wmi: Restrict debugfs interface when the kernel is locked down (Matthew Garrett)  [Orabug: 27193819]  
  - x86/msr: Restrict MSR access when the kernel is locked down (Matthew Garrett)  [Orabug: 27193819]  
  - x86: Lock down IO port access when the kernel is locked down (Matthew Garrett)  [Orabug: 27193819]  
  - PCI: Lock down BAR access when the kernel is locked down (Matthew Garrett)  [Orabug: 27193819]  
  - uswsusp: Disable when the kernel is locked down (Matthew Garrett)  [Orabug: 27193819]  
  - hibernate: Disable when the kernel is locked down (Josh Boyer)  [Orabug: 27193819]  
  - kexec_file: Disable at runtime if the kernel is locked down (Chun-Yi Lee)  [Orabug: 27193819]  
  - Copy secure_boot flag in boot params across kexec reboot (Dave Young)  [Orabug: 27193819]  
  - kexec: Disable at runtime if the kernel is locked down (Matthew Garrett)  [Orabug: 27193819]  
  - Restrict /dev/{mem,kmem,port} when the kernel is locked down (Matthew Garrett)  [Orabug: 27193819]  
  - uek-rpm: Enable CONFIG_MODULE_SIG_ALL (Eric Snowberg)  [Orabug: 27193819]  
  - Enforce module signatures if the kernel is locked down (David Howells)  [Orabug: 27193819]  
  - Add a SysRq option to lift kernel lockdown (Kyle McMartin)  [Orabug: 27193819]  
  - uek-rpm: enable CONFIG_LOCK_DOWN_KERNEL (Eric Snowberg)  [Orabug: 27193819]  
  - Add the ability to lock down access to the running kernel image (David Howells)  [Orabug: 27193819]  
  - modsign: Use secondary trust keyring for module signing (David Howells)  [Orabug: 27193819]  
  - MODSIGN: Allow the "db" UEFI variable to be suppressed (Josh Boyer)  [Orabug: 27193819]  
  - uek-rpm: enable CONFIG_LOAD_UEFI_KEYS. (Eric Snowberg)  [Orabug: 27193819]  
  - MODSIGN: Import certificates from UEFI Secure Boot (Josh Boyer)  [Orabug: 27193819]  
  - uek-rpm: enable EFI_SIGNATURE_LIST_PARSER (Eric Snowberg)  [Orabug: 27193819]  
  - efi: Add an EFI signature blob parser (Dave Howells)  [Orabug: 27193819]  
  - efi: Add EFI signature data types (Dave Howells)  [Orabug: 27193819]  
  - uek-rpm: enable CONFIG_SECONDARY_TRUSTED_KEYRING (Eric Snowberg)  [Orabug: 27193819]  
  - kexec: Use secondary trust key ring (Eric Snowberg)  [Orabug: 27193819]  
  - KEYS: Allow unrestricted boot-time addition of keys to secondary keyring (David Howells)  [Orabug: 27193819]  
  - Revert "uek-rpm: config: enable some secure boot features" (Somasundaram Krishnasamy)  [Orabug: 27193819]  
  - IB/mlx4: Add contig support for control objects (Guy Levi)  [Orabug: 27510588]  
  - IB/mlx4: Use optimal numbers of MTT entries (Guy Levi)  [Orabug: 27510596]  
  - IB/mlx4: Do not generate random node_guid for VFs (Yuval Shaia)  [Orabug: 22145330] [Orabug: 27510511]  
  - IB/mlx4: Mark user mr as writable if actual virtual memory is writable (Moshe Lazer)  [Orabug: 27510512]  
  - fix warning about bitwise or between u32 and size_t (Haggai Eran)  [Orabug: 27510513]  
  - IB/mlx4: Check port_num before using it in mlx4_ib_port_link_layer (Moshe Lazer)  [Orabug: 27510514]  
  - IB/mlx4: Remove unnecessary warning message (Moni Shoua)  [Orabug: 27510515]  
  - IB/mlx4: Fix Coverity issues (Hadar Hen Zion)  [Orabug: 27510516]  
  - mlx4: Handle memory region deregistration failure (Shani Michaeli)  [Orabug: 27510464]  
  - net/mlx4_core: Use round robin scheme to avoid stale caches (Santosh Shilimkar)  [Orabug: 25730857] [Orabug: 27510465]  
  - net/mlx4_core: panic the system on unrecoverable errors (Santosh Shilimkar)  [Orabug: 25873690] [Orabug: 27510466]  
  - mlx4_core: Add func name to common error strings to locate uniquely (Mukesh Kacker)  [Orabug: 25440329] [Orabug: 27510467]  
  - net/mlx4_core: Disallow creation of RAW QPs on a VF (Eli Cohen)  [Orabug: 257846022] [Orabug: 27510549]  
  - ib/mlx4: add msi-x allocation kernel msg logging (Qing Huang)  [Orabug: 25307234] [Orabug: 23479018] [Orabug: 27510468]  
  - mlx4_core/ib: set the IB port MTU to 2K (Santosh Shilimkar)  [Orabug: 24946479] [Orabug: 27510469]  
  - IB/mlx4: Scatter CQs to different EQs (Majd Dibbiny)  [Orabug: 24705943] [Orabug: 27510470]  
  - mlx4_core: allow unprivileged VFs read physical port counters (Mukesh Kacker)  [Orabug: 24656803] [Orabug: 27510471]  
  - offload ib subnet manager port and node get info query handling. (Rama Nichanamatlu)  [Orabug: 23750258] [Orabug: 27510472]  
  - mlx4_core: use higher log_rdmarc_per_qp when scale_profile is set (Mukesh Kacker)  [Orabug: 23725942] [Orabug: 27510473]  
  - mlx4_core: scale_profile should work without params set to 0 (Mukesh Kacker)  [Orabug: 23078816] [Orabug: 27510474]  
  - mlx4_core: bump default scaled value of num of cqs and srqs (Mukesh Kacker)  [Orabug: 23078966] [Orabug: 27510475]  
  - net/mlx4_core: Modify default value of log_rdmarc_per_qp to be consistent with HW capability (Yuval Shaia)  [Orabug: 27510476]  
  - net/mlx4_core: Fix FMR unmapping to allow remapping afterward (Maor Gottlieb)  [Orabug: 21473880] [Orabug: 27510477]  
  - mlx4: indicate memory resource exhaustion (Ajaykumar Hotchandani)  [Orabug: 21549767] [Orabug: 27510478]  
  - mlx4_core: Introduce restrictions for PD update (Ajaykumar Hotchandani)  [Orabug: 27510479]  
  - mlx4_core: More support for automatically scaling profile parameters (Mukesh Kacker)  [Orabug: 27510480]  
  - mlx4_core: Fix resource tracker memory leak after Reset Flow (Hadar Hen Zion)  [Orabug: 27510481]  
  - mlx4_core: Change the name of the num_mtt in mlx4_profile to be num_mtt_segs. (Majd Dibbiny)  [Orabug: 27510482]  
  - mlx4_core: Use div_u64 to avoid unresolved symbol on 32-bit OSes (Vladimir Sokolovsky)  [Orabug: 27510483]  
  - mlx4_core: Extend num_mtt in dev caps to avoid overflow. (Majd Dibbiny)  [Orabug: 27510485]  
  - mlx4_core: fix FMR unmapping to allow remapping afterward (Moshe Lazer)  [Orabug: 27510486]  
  - mlx4_core: resolvs kernel panic when connectx_port_config fail to set ports (Moshe Lazer)  [Orabug: 27510487]  
  - mlx4_core: sysfs, fix usage of log_num_mtt module parameter (Yishai Hadas)  [Orabug: 27510488]  
  - mlx4_core: use msi_x module param to limit num of MSI-X irqs (Moshe Lazer)  [Orabug: 27510489]  
  - mlx4_core: Add more info to mlx4_cmd_post failure error messages (Jack Morgenstein)  [Orabug: 27510490]  
  - mlx4_core: disable mlx4_QP_ATTACH calls from guests if master is doing flow steering. (Jack Morgenstein)  [Orabug: 27510491]  
  - mlx4_core: change resource quotas to enable supporting upstream-kernel guests (Jack Morgenstein)  [Orabug: 27510492]  
  - mlx4_core: print more info when command times out (Jack Morgenstein)  [Orabug: 27510493]  
  - mlx4_core: move out label to the right place (Eugenia Emantayev)  [Orabug: 27510494]  
  - mlx4_core: Do not allow mlx4_bitmap_init to reserve more slots than available (Amir Vadai)  [Orabug: 27510495]  
  - mlx4_core: set device to use extended counters (Yishai Hadas)  [Orabug: 27510496]  
  - mlx4_core: Update minimum size for log_num_qp to 18 (Moshe Lazer)  [Orabug: 27510497]  
  - mlx4_core, mlx4_ib: Have enough room in steering range for pkey interfaces (Amir Vadai)  [Orabug: 27510498]  
  - net/mlx4_core: set used number of MTTs when using auto-detection (Dotan Barak)  [Orabug: 27510499]  
  - net/mlx4_core: the number of MTTs should consider log_mtts_per_seg (Dotan Barak)  [Orabug: 27510500]  
  - net/mlx4_core: limit to 4TB of memory registration (Yishai Hadas)  [Orabug: 27510501]  
  - net/mlx4_core: num mtt issues (Yishai Hadas)  [Orabug: 27510502]  
  - net/mlx4_core: add sanity check when creating bitmap structure (Dotan Barak)  [Orabug: 27510503]  
  - mlx4_core: fix wrong comment about the reason of subtract one from the max_cqes (Dotan Barak)  [Orabug: 27510504]  
  - net/mlx4: adjust initial value of vl_cap in mlx4_SET_PORT (Or Gerlitz)  [Orabug: 27510505]  
  - mlx4_core: Error message on mtt allocation failure (Marcel Apfelbaum)  [Orabug: 27510506]  
  - mlx4_core: log_num_mtt handling (Yishai Hadas)  [Orabug: 27510507]  
  - mlx4_core: limit min profile numbers (Dotan Barak)  [Orabug: 27510508]  
  - mlx4_core: allow to use 0 in log_mtts_per_seg (Dotan Barak)  [Orabug: 27510509]  
  - mlx4_core: enable changing default max HCA resource limits. (Dotan Barak)  [Orabug: 27510510]  
  - uek-rpm: Enable RDS_ACL in UEK5 (Aron Silverton)  [Orabug: 27503146]  
  - {IB/{core,ipoib},net/rds}: IPv6 support for ACL (Ka-Cheong Poon)  [Orabug: 25410192] [Orabug: 27487515]  
  - IB/ipoib: Remove ACL sysfs debug files (Ka-Cheong Poon)  [Orabug: 25410192] [Orabug: 27487514]  
  - IB/ipoib: Use ipoib_priv instead of netdev_priv (Yuval Shaia)  [Orabug: 27516158]  
  - IP/ipoib: Move initialization of ACL instances table to device init phase (Yuval Shaia)  [Orabug: 26175743] [Orabug: 27487387]  
  - Some unsupported ioctls get logged unnecessarily (Venkat Venkatsubra)  [Orabug: 24510137] [Orabug: 27487388]  
  - IB/ipoib: Expose acl_enable sysfs file as read only (Yuval Shaia)  [Orabug: 25993951] [Orabug: 27487389]  
  - IB/ipoib: ioctl interface to manage ACL tables (Yuval Shaia)  [Orabug: 23222944] [Orabug: 27487390]  
  - IB/ipoib: sysfs interface to manage ACL tables (Yuval Shaia)  [Orabug: 23222944] [Orabug: 27487391]  
  - IB/{cm,ipoib}: Filter traffic using ACL (Yuval Shaia)  [Orabug: 23222944] [Orabug: 27358292]  
  - IB/{cm,ipoib}: Manage ACL tables (Yuval Shaia)  [Orabug: 23222944] [Orabug: 27358299]  
  - IB/ipoib: Restore MM behavior in case of tx_ring allocation failure (Yuval Shaia)  [Orabug: 27313836]  
  - IB/ipoib: Warn when one port fails to initialize (Yuval Shaia)  [Orabug: 27302043]  
  - IB/ipoib: Remove device when one port fails to init (Yuval Shaia)  [Orabug: 27302043]  
  - IB/{ipoib, iser}: Consistent print format of vendor error (Ajaykumar Hotchandani)  [Orabug: 27303239]  
  - IB/ipoib: CSUM support in connected mode (Yuval Shaia)  [Orabug: 20559068] [Orabug: 27487353]  
  - RDS: IB: Include ethernet devices during initialization of active bonding (Avinash Repaka)  [Orabug: 26096238]  
  - RDS: IB: Remove gid from rds_ib_port array (Avinash Repaka)  [Orabug: 26096238]  
  - rds: System panic if RDS netfilter is enabled and RDS/TCP is used (Ka-Cheong Poon)  [Orabug: 26950401] [Orabug: 27487537]  
  - rds: IB active bonding IPv6 changes (Ka-Cheong Poon)  [Orabug: 25410192] [Orabug: 27487535]  
  - rds: Enable RDS IPv6 support (Ka-Cheong Poon)  [Orabug: 25410192] [Orabug: 27487532]  
  - rds: Changed IP address internal representation to struct in6_addr (Ka-Cheong Poon)  [Orabug: 25410192] [Orabug: 27487531]  
  - rds: C-style nits (Ka-Cheong Poon)  [Orabug: 25410192] [Orabug: 27487530]  
  - rds: Fix inaccurate accounting of unsignaled wrs in rds_ib_xmit_rdma (Håkon Bugge)  [Orabug: 27090772] [Orabug: 27487529]  
  - rds: Fix inaccurate accounting of unsignaled wrs (Håkon Bugge)  [Orabug: 27090772] [Orabug: 27487528]  
  - rds: Proper init/exit declaration for module init/exit function (Ka-Cheong Poon)  [Orabug: 27013833] [Orabug: 27487527]  
  - rds: Remove .exit from struct rds_transport (Ka-Cheong Poon)  [Orabug: 27013833] [Orabug: 27487526]  
  - uek-rpm: aarch64 enable OCFS2_FS (Tom Saeger)  [Orabug: 27525109]  
  - uek-rpm: Add support for QLogic 41000 Series Converged Network Adapters (Somasundaram Krishnasamy)  [Orabug: 27426190]  
  - uek-rpm: Enable KPTI and Retpoline config options in UEK5 (Victor Erminpour)  [Orabug: 27487028]  
  - uek-rpm: Enable Yama LSM in UEK5 (Victor Erminpour)  [Orabug: 27486963]  
  - uek-rpm: Enable config support for NVMe over Fabrics (NVMe-oF) (Victor Erminpour)  [Orabug: 27449641]  
  - uek-rpm: Enable support for iWarp QLogic QEDR in UEK5 (Victor Erminpour)  [Orabug: 27448989]  
  - uek-rpm: Enable config support for iWARP Intel i40iw (Victor Erminpour)  [Orabug: 27448941]  
  - uek-rpm: Enable config options for Heterogeneous Memory Management (HMM) (Victor Erminpour)  [Orabug: 27110778]  
  - uek-rpm: Enable eBPF related configs in UEK5 (Victor Erminpour)  [Orabug: 27416748]  
  - uek-rpm: Use olddefconfig instead of oldnoconfig (Somasundaram Krishnasamy)  [Orabug: 27283275]  
  - uek-rpm: aarch64 RPMs need Provides 'kernel' (Tom Saeger)  [Orabug: 27516320]  
  - cacheinfo: Use default cache properties for aarch64 (Jim Quigley)  [Orabug: 27428592]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.14-9.el7uek]
changelog:
  - uek-rpm: kabi: remove __stack_chk_fail from kABI list (Todd Vierling)  [Orabug: 27509305]  
  - Revert "tracing: Print nasty banner when trace_printk() is in use" (Avinash Repaka)  [Orabug: 23510486] [Orabug: 27199042]  
  - dtrace: systrace provider clobbers entry/return probe id during provide (Tomas Jedlicka)  [Orabug: 27488997]  
  - DTrace: initial ARM64 port of DTrace (Kris Van Hees)  [Orabug: 27438977]  
  - dtrace: add support for arm64 in the SDT collection process (Kris Van Hees)  [Orabug: 27458313]  
  - dtrace: add waitfd to the generic syscall list (Kris Van Hees)  [Orabug: 27458259]  
  - dtrace: add support for CONFIG_PREEMPT_NONE (Kris Van Hees)  [Orabug: 27464655]  
  - dtrace: change the dtrace_prototype to accommodate 8 args (Kris Van Hees)  [Orabug: 27457616]  
  - dtrace: allow SDT to be disabled even when DTrace is enabled (Kris Van Hees)  [Orabug: 27457396]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.14-8.el7uek]
changelog:
  - Xen: Fix regression from cpu microcode driver update for Xen (Aaron Young)  [Orabug: 27494532]  
  - qlcnic: fix deadlock bug (Junxiao Bi)  [Orabug: 27491257]  
  - uek-rpm: aarch64 needs kernel-headers by default (Tom Saeger)  [Orabug: 27495792]  
  - xfs: don't allow reflink + realtime filesystems (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: don't allow DAX on reflink filesystems (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: remove experimental tag for reflinks (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: don't screw up direct writes when freesp is fragmented (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: check reflink allocation mappings (Darrick J. Wong)  [Orabug: 27486378]  
  - iomap: warn on zero-length mappings (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: treat CoW fork operations as delalloc for quota accounting (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: only grab shared inode locks for source file during reflink (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: allow xfs_lock_two_inodes to take different EXCL/SHARED modes (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: reflink should break pnfs leases before sharing blocks (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: skip CoW writes past EOF when writeback races with truncate (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: preserve i_rdev when recycling a reclaimable inode (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: refactor accounting updates out of xfs_bmap_btalloc (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: always zero di_flags2 when we free the inode (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: call xfs_qm_dqattach before performing reflink operations (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: fix non-debug build compiler warnings (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: check sb_agblocks and sb_agblklog when validating superblock (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: recheck reflink / dirty page status before freeing CoW reservations (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: btree format ifork loader should check for zero numrecs (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: attr leaf verifier needs to check for obviously bad count (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: cancel tx on xfs_defer_finish() error during xattr set/remove (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: account finobt blocks properly in perag reservation (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: destroy mutex pag_ici_reclaim_lock before free (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: harden directory integrity checks some more (Darrick J. Wong)  [Orabug: 27486378]  
  - iomap: report collisions between directio and buffered writes to userspace (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: eliminate duplicate icreate tx reservation functions (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: refactor inode chunk alloc/free tx reservation (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: include an allocfree res for inobt modifications (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: truncate transaction does not modify the inobt (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: fix up agi unlinked list reservations (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: include inobt buffers in ifree tx log reservation (Darrick J. Wong)  [Orabug: 27486378]  
  - xfs: print transaction log reservation on overrun (Darrick J. Wong)  [Orabug: 27486378]  
  - uek-rpm: Update kernel-ueknano modules list (Somasundaram Krishnasamy)  [Orabug: 27494605]  
  - scsi: Don't abort scsi_scan due to unexpected response (John Sobecki)  [Orabug: 27429506]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.14-7.el7uek]
changelog:
  - uek-rpm: require CC=gcc7 on aarch64 (Tom Saeger)  [Orabug: 27438232]  
  - uek-rpm: add _kernel_cc to kernel-uek.spec (Tom Saeger)  [Orabug: 27438232]  
  - oracleasm: fix asmfs_dir_operations compiler error (Tom Saeger)  [Orabug: 27465296]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.14-6.el7uek]
changelog:
  - uek-rpm: config: enable numa balancing on by default (Henry Willard)  [Orabug: 27464647]  
  - uek-rpm: Do not create kernel-uek-base rpm (Somasundaram Krishnasamy)  [Orabug: 27364632]  
  - net/rds: Fix incorrect error handling (Håkon Bugge)  [Orabug: 27339257]  
  - net/rds: use multiple sge than buddy allocation in congestion code (Wei Lin Guay)  [Orabug: 27339270]  
  - Revert "RDS: fix the sg allocation based on actual message size" (Wei Lin Guay)  [Orabug: 27339270]  
  - Revert "RDS: avoid large pages for sg allocation for TCP transport" (Wei Lin Guay)  [Orabug: 27339270]  
  - Revert "net/rds: Reduce memory footprint in rds_sendmsg" (Wei Lin Guay)  [Orabug: 27339270]  
  - net/rds: reduce memory footprint during ib_post_recv in IB transport (Wei Lin Guay)  [Orabug: 27339270]  
  - net/rds: reduce memory footprint during rds_sendmsg with IB transport (Wei Lin Guay)  [Orabug: 27339270]  
  - net/rds: set the rds_ib_init_frag based on supported sge (Wei Lin Guay)  [Orabug: 27339270]  
  - Revert "net/rds: make copy_page_from_iter and copy_page_to_iter stay within page boundaries (WORKAROUND!)" (Håkon Bugge)  [Orabug: 27339270]  
  - Btrfs: fix unexpected EEXIST from btrfs_get_extent (Liu Bo)  [Orabug: 27446653]  
  - Btrfs: fix incorrect block_len in merge_extent_mapping (Liu Bo)  [Orabug: 27446653]  
  - Btrfs: add WARN_ONCE to detect unexpected error from merge_extent_mapping (Liu Bo)  [Orabug: 27446653]  
  - uek-rpm: enable CONFIG_PREEMPT_VOLUNTARY (Vincent Lim)  [Orabug: 27456269]  
  - uek-rpm: Enable SoftRoCE related configuration in UEK5 (Victor Erminpour)  [Orabug: 27449119]  
  - uek-rpm: Do not build kernel-uek-headers by default. (Somasundaram Krishnasamy)  [Orabug: 27363133]  
  - vmcore: quiet zero PT_NOTE warning (Dave Kleikamp)  [Orabug: 27199039]  
  - sched: Disable default sched_autogroup to avoid the DBA performance regression (Santosh Shilimkar)  [Orabug: 27199038]  
  - mlx4: Subscribe to PXM notifier (Konrad Rzeszutek Wilk)  [Orabug: 27206634]  
  - xen/pci: Add PXM node notifier for PXM (NUMA) changes. (Konrad Rzeszutek Wilk)  [Orabug: 27206634]  
  - xen/pcifront: Walk the PCI bus after XenStore notification (Konrad Rzeszutek Wilk)  [Orabug: 27206634]  
  - xen-pcifront/hvm: Slurp up "pxm" entry and set NUMA node on PCIe device. (V5) (Konrad Rzeszutek Wilk)  [Orabug: 27206634]  
  - perf: build TUI by default by pulling in slang and linking it statically (Todd Vierling)  [Orabug: 27199018]  
  - Xen: add CPU microcode update driver (Aaron Young)  [Orabug: 27145517]  
  - ksplice: Add ksplice signing key (Eric Snowberg)  [Orabug: 27290453]  
  - ctf: enable in debugging kernels (Nick Alcock)  [Orabug: 27266231]  
  - dtrace: automatically size the fasttrap_bucket's padding: work with lockdep (Nick Alcock)  [Orabug: 27266231]  
  - uek-rpm: build env files for aarch64 (Tom Saeger)  [Orabug: 27437589]  
  - uek-rpm: enable debug builds on aarch64 (Tom Saeger)  [Orabug: 27433384]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.14-5.el7uek]
changelog:
  - xen-netback: copy buffer on xenvif_start_xmit (Joao Martins)  [Orabug: 27248865]  
  - xen-netback: slightly rework xenvif_rx_skb (Joao Martins)  [Orabug: 27248865]  
  - xen-netfront: introduce rx copy mode (Joao Martins)  [Orabug: 27248865]  
  - xen-netfront: use gref mappings for Tx buffers (Joao Martins)  [Orabug: 27248865]  
  - xen-netfront: generalize recycling for grants (Joao Martins)  [Orabug: 27248865]  
  - xen-netfront: add rx page statistics (Joao Martins)  [Orabug: 27248865]  
  - xen-netfront: introduce rx page recyling (Joao Martins)  [Orabug: 27248865]  
  - xen-netfront: move rx_gso_checksum_fixup into netfront_stats (Joao Martins)  [Orabug: 27248865]  
  - xen-netfront: introduce staging gref pools (Joao Martins)  [Orabug: 27248865]  
  - xen-netback: use gref mappings for Tx requests (Joao Martins)  [Orabug: 27248865]  
  - xen-netback: use gref mappings for Rx requests (Joao Martins)  [Orabug: 27248865]  
  - xen-netback: shorten tx grant copy (Joao Martins)  [Orabug: 27248865]  
  - xen-netback: introduce staging grant mappings ops (Joao Martins)  [Orabug: 27248865]  
  - include/xen: import vendor extension to netif.h (Joao Martins)  [Orabug: 27248865]  
  - xfs: fix s_maxbytes overflow problems (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: quota: check result of register_shrinker() (Aliaksei Karaliou)  [Orabug: 27424599]  
  - xfs: quota: fix missed destroy of qi_tree_lock (Aliaksei Karaliou)  [Orabug: 27424599]  
  - xfs: only skip rmap owner checks for unknown-owner rmap removal (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: always honor OWN_UNKNOWN rmap removal requests (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: queue deferred rmap ops for cow staging extent alloc/free in the right order (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: set cowblocks tag for direct cow writes too (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: remove leftover CoW reservations when remounting ro (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: don't be so eager to clear the cowblocks tag on truncate (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: track cowblocks separately in i_flags (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: allow CoW remap transactions to use reserve blocks (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: avoid infinite loop when cancelling CoW blocks after writeback failure (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: relax is_reflink_inode assert in xfs_reflink_find_cow_mapping (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: remove dest file's post-eof preallocations before reflinking (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: move xfs_iext_insert tracepoint to report useful information (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: account for null transactions in bunmapi (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: hold xfs_buf locked between shortform->leaf conversion and the addition of an attribute (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: add the ability to join a held buffer to a defer_ops (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: make iomap_begin functions trim iomaps consistently (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: remove "no-allocation" reservations for file creations (Christoph Hellwig)  [Orabug: 27424599]  
  - fs: xfs: remove duplicate includes (Pravin Shedge)  [Orabug: 27424599]  
  - xfs: Properly retry failed dquot items in case of error during buffer writeback (Carlos Maiolino)  [Orabug: 27424599]  
  - xfs: scrub inode mode properly (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: remove unused parameter from xfs_writepage_map (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: ubsan fixes (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: calculate correct offset in xfs_scrub_quota_item (Eric Sandeen)  [Orabug: 27424599]  
  - xfs: fix uninitialized variable in xfs_scrub_quota (Eric Sandeen)  [Orabug: 27424599]  
  - xfs: fix leaks on corruption errors in xfs_bmap.c (Eric Sandeen)  [Orabug: 27424599]  
  - xfs: fortify xfs_alloc_buftarg error handling (Michal Hocko)  [Orabug: 27424599]  
  - xfs: log recovery should replay deferred ops in order (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: always free inline data before resetting inode fork during ifree (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: abstract out dev_t conversions (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: fix memory leak in xfs_iext_free_last_leaf (Shu Wang)  [Orabug: 27424599]  
  - xfs: fix type usage (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: on failed mount, force-reclaim inodes after unmounting quota controls (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: check the uniqueness of the AGFL entries (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: remove u_int* type usage (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: handle zero entries case in xfs_iext_rebalance_leaf (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: add comments documenting the rebalance algorithm (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: trivial indentation fixup for xfs_iext_remove_node (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: remove a superflous assignment in xfs_iext_remove_node (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: add some comments to xfs_iext_insert/xfs_iext_insert_node (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: fix number of records handling in xfs_iext_split_leaf (Christoph Hellwig)  [Orabug: 27424599]  
  - fs/xfs: Remove NULL check before kmem_cache_destroy (Tim Hansen)  [Orabug: 27424599]  
  - xfs: only check da node header padding on v5 filesystems (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: fix btree scrub deref check (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: fix uninitialized return values in scrub code (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: pass inode number to xfs_scrub_ino_set_{preen,warning} (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: refactor the directory data block bestfree checks (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: mark xlog_verify_dest_ptr STATIC (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: mark xlog_recover_check_summary STATIC (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: mark xfs_btree_check_lblock and xfs_btree_check_ptr static (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: remove unreachable error injection code in xfs_qm_dqget (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: remove unused debug counts for xfs_lock_inodes (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: mark xfs_errortag_ktype static (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: trivial sparse fixes for the new scrub code (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: always define STATIC to static noinline (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: move xfs_bmbt_irec and xfs_exntst_t to xfs_types.h (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: pass struct xfs_bmbt_irec to xfs_bmbt_validate_extent (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: remove the nr_extents argument to xfs_iext_remove (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: remove the nr_extents argument to xfs_iext_insert (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: use a b+tree for the in-core extent list (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: allow unaligned extent records in xfs_bmbt_disk_set_all (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: remove support for inlining data/extents into the inode fork (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: simplify xfs_reflink_convert_cow (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: iterate backwards in xfs_reflink_cancel_cow_blocks (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: introduce the xfs_iext_cursor abstraction (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: iterate over extents in xfs_bmap_extents_to_btree (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: iterate over extents in xfs_iextents_copy (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: pass an on-disk extent to xfs_bmbt_validate_extent (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: treat idx as a cursor in xfs_bmap_collapse_extents (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: treat idx as a cursor in xfs_bmap_del_extent_* (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: treat idx as a cursor in xfs_bmap_add_extent_unwritten_real (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: treat idx as a cursor in xfs_bmap_add_extent_hole_real (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: treat idx as a cursor in xfs_bmap_add_extent_hole_delay (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: treat idx as a cursor in xfs_bmap_add_extent_delay_real (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: remove a duplicate assignment in xfs_bmap_add_extent_delay_real (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: don't create overlapping extents in xfs_bmap_add_extent_delay_real (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: scrub: avoid uninitialized return code (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: convert remaining xfs_sb_version_... checks to bool (Dave Chinner)  [Orabug: 27424599]  
  - xfs: scrub extended attribute leaf space (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: move error injection tags into their own file (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: remove inode log format typedef (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: remove redundant assignment to variable bit (Colin Ian King)  [Orabug: 27424599]  
  - xfs: fix unused variable warning in xfs_buf_set_ref() (Brian Foster)  [Orabug: 27424599]  
  - xfs: compare btree block keys to parent block's keys during scrub (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: abort dir/attr btree operation if btree is obviously weird (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: refactor extended attribute list operation (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: validate sb_logsunit is a multiple of the fs blocksize (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: drain the buffer LRU on mount (Brian Foster)  [Orabug: 27424599]  
  - xfs: more robust recovery xlog buffer validation (Brian Foster)  [Orabug: 27424599]  
  - xfs: add a new xfs_iext_lookup_extent_before helper (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: merge xfs_bmap_read_extents into xfs_iread_extents (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: add asserts for the mmap lock in xfs_{insert,collapse}_file_space (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: rewrite xfs_bmap_first_unused to make better use of xfs_iext_get_extent (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: don't rely on extent indices in xfs_bmap_insert_extents (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: don't rely on extent indices in xfs_bmap_collapse_extents (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: update got in xfs_bmap_shift_update_extent (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: remove xfs_bmse_shift_one (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: split xfs_bmap_shift_extents (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: remove XFS_BMAP_MAX_SHIFT_EXTENTS (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: inline xfs_shift_file_space into callers (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: remove if_rdev (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: remove the never fully implemented UUID fork format (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: remove XFS_BMAP_TRACE_EXLIST (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: move pre/post-bmap tracing into xfs_iext_update_extent (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: remove post-bmap tracing in xfs_bmap_local_to_extents (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: make better use of the 'state' variable in xfs_bmap_del_extent_real (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: add a xfs_bmap_fork_to_state helper (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: scrub quota information (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub realtime bitmap/summary (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub directory parent pointers (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub symbolic links (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub extended attributes (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub directory freespace (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub directory metadata (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub directory/attribute btrees (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub inode block mappings (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub inodes (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub refcount btrees (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub rmap btrees (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub inode btrees (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub free space btrees (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub the AGI (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub AGF and AGFL (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub the secondary superblocks (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: create helpers to scan an allocation group (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub btree keys and records (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: scrub the shape of a metadata btree (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: create helpers to scrub a metadata btree (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: create helpers to record and deal with scrub problems (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: probe the scrub ioctl (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: dispatch metadata scrub subcommands (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: create an ioctl to scrub AG metadata (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: create inode pointer verifiers (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: refactor btree block header checking functions (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: refactor btree pointer checks (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: create block pointer check functions (Darrick J. Wong)  [Orabug: 27424599]  
  - xfs: buffer lru reference count error injection tag (Brian Foster)  [Orabug: 27424599]  
  - xfs: fail if xattr inactivation hits a hole (Brian Foster)  [Orabug: 27424599]  
  - xfs: check kthread_should_stop() after the setting of task state (Hou Tao)  [Orabug: 27424599]  
  - xfs: remove xfs_bmbt_get_state (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: remove all xfs_bmbt_set_* helpers except for xfs_bmbt_set_all (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: replace xfs_bmbt_lookup_ge with xfs_bmbt_lookup_first (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: pass a struct xfs_bmbt_irec to xfs_bmbt_lookup_eq (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: pass a struct xfs_bmbt_irec to xfs_bmbt_update (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: refactor xfs_bmap_add_extent_unwritten_real (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: refactor delalloc accounting in xfs_bmap_add_extent_delay_real (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: refactor xfs_bmap_add_extent_delay_real (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: refactor xfs_bmap_add_extent_hole_real (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: refactor xfs_bmap_add_extent_hole_delay (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: refactor xfs_del_extent_real (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: use the state defines in xfs_bmap_del_extent_real (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: use correct state defines in xfs_bmap_del_extent_{cow,delay} (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: move some more code into xfs_bmap_del_extent_real (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: use xfs_bmap_del_extent_delay for the data fork as well (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: rename bno to end in __xfs_bunmapi (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: don't set XFS_BTCUR_BPRV_WASDEL in xfs_bunmapi (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: use xfs_iext_get_extent instead of open coding it (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: simplify the xfs_getbmap interface (Christoph Hellwig)  [Orabug: 27424599]  
  - xfs: rewrite getbmap using the xfs_iext_* helpers (Christoph Hellwig)  [Orabug: 27424599]  
  - mm: numa: Do not trap faults on shared data section pages. (Henry Willard)   
  - kvm: vmx: Allow disabling virtual NMI support (Paolo Bonzini)  [Orabug: 27145550]  
  - KVM: arm/arm64: Don't queue VLPIs on INV/INVALL (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Fix GICv4 ITS initialization issues (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Theory of operations (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Enable VLPI support (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Prevent userspace from changing doorbell affinity (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Prevent a VM using GICv4 from being saved (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Enable virtual cpuif if VLPIs can be delivered (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Hook vPE scheduling into vgic flush/sync (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Use the doorbell interrupt as an unblocking source (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Add doorbell interrupt handling (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Use pending_last as a scheduling hint (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Handle INVALL applied to a vPE (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Propagate property updates to VLPIs (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Handle MOVALL applied to a vPE (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Handle CLEAR applied to a VLPI (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Propagate affinity changes to the physical ITS (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Unmap VLPI when freeing an LPI (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Handle INT command applied to a VLPI (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Wire mapping/unmapping of VLPIs in VFIO irq bypass (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Add init/teardown of the per-VM vPE irq domain (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: GICv4: Add property field and per-VM predicate (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: vITS: Add a helper to update the affinity of an LPI (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: vITS: Add MSI translation helpers (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: vgic: Move kvm_vgic_destroy call around (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm: Select ARM_GIC_V3 and ARM_GIC_V3_ITS (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: vgic: restructure kvm_vgic_(un)map_phys_irq (Eric Auger)  [Orabug: 27145550]  
  - KVM: arm/arm64: register irq bypass consumer on ARM/ARM64 (Eric Auger)  [Orabug: 27145550]  
  - KVM: s390: provide a capability for AIS state migration (Christian Borntraeger)  [Orabug: 27145550]  
  - KVM: s390: clear_io_irq() requests are not expected for adapter interrupts (Michael Mueller)  [Orabug: 27145550]  
  - KVM: s390: abstract conversion between isc and enum irq_types (Michael Mueller)  [Orabug: 27145550]  
  - KVM: s390: vsie: use common code functions for pinning (David Hildenbrand)  [Orabug: 27145550]  
  - KVM: s390: SIE considerations for AP Queue virtualization (Tony Krowiak)  [Orabug: 27145550]  
  - KVM: s390: document memory ordering for kvm_s390_vcpu_wakeup (Christian Borntraeger)  [Orabug: 27145550]  
  - KVM: PPC: Book3S HV: Cosmetic post-merge cleanups (Paul Mackerras)  [Orabug: 27145550]  
  - KVM: arm/arm64: fix the incompatible matching for external abort (Dongjiu Geng)  [Orabug: 27145550]  
  - KVM: arm/arm64: Unify 32bit fault injection (Marc Zyngier)  [Orabug: 27145550]  
  - KVM: arm/arm64: vgic-its: Implement KVM_DEV_ARM_ITS_CTRL_RESET (Eric Auger)  [Orabug: 27145550]  
  - KVM: arm/arm64: Document KVM_DEV_ARM_ITS_CTRL_RESET (Eric Auger)  [Orabug: 27145550]  
  - KVM: arm/arm64: vgic-its: Free caches when GITS_BASER Valid bit is cleared (Eric Auger)  [Orabug: 27145550]  
  - KVM: arm/arm64: vgic-its: New helper functions to free the caches (wanghaibin)  [Orabug: 27145550]  
  - KVM: arm/arm64: vgic-its: Remove kvm_its_unmap_device (Eric Auger)  [Orabug: 27145550]  
  - arm/arm64: KVM: Load the timer state when enabling the timer (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Rework kvm_timer_should_fire (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Get rid of kvm_timer_flush_hwstate (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Avoid phys timer emulation in vcpu entry/exit (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Move phys_timer_emulate function (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Use kvm_arm_timer_set/get_reg for guest register traps (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Support EL1 phys timer register access in set/get reg (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Avoid timer save/restore in vcpu entry/exit (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Set VCPU affinity for virt timer irq (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Move timer save/restore out of the hyp code (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Use separate timer for phys timer emulation (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Move timer/vgic flush/sync under disabled irq (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Rename soft timer to bg_timer (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Make timer_arm and timer_disarm helpers more generic (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Check that system supports split eoi/deactivate (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Support calling vgic_update_irq_pending from irq context (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: arm/arm64: Guard kvm_vgic_map_is_active against !vgic_initialized (Christoffer Dall)  [Orabug: 27145550]  
  - arm64: Use physical counter for in-kernel reads when booted in EL2 (Christoffer Dall)  [Orabug: 27145550]  
  - arm64: Implement arch_counter_get_cntpct to read the physical counter (Christoffer Dall)  [Orabug: 27145550]  
  - KVM: PPC: Book3S HV: Run HPT guests on POWER9 radix hosts (Paul Mackerras)  [Orabug: 27145550]  
  - KVM: PPC: Book3S HV: Allow for running POWER9 host in single-threaded mode (Paul Mackerras)  [Orabug: 27145550]  
  - KVM: PPC: Book3S HV: Add infrastructure for running HPT guests on radix host (Paul Mackerras)  [Orabug: 27145550]  
  - KVM: PPC: Book3S HV: Unify dirty page map between HPT and radix (Paul Mackerras)  [Orabug: 27145550]  
  - KVM: PPC: Book3S HV: Rename hpte_setup_done to mmu_ready (Paul Mackerras)  [Orabug: 27145550]  
  - KVM: PPC: Book3S HV: Don't rely on host's page size information (Paul Mackerras)  [Orabug: 27145550]  
  - KVM: PPC: Book3S: Fix gas warning due to using r0 as immediate 0 (Nicholas Piggin)  [Orabug: 27145550]  
  - KVM: PPC: Book3S PR: Only install valid SLBs during KVM_SET_SREGS (Greg Kurz)  [Orabug: 27145550]  
  - KVM: X86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Wanpeng Li)  [Orabug: 27145550]  
  - KVM: VMX: Fix VPID capability detection (Wanpeng Li)  [Orabug: 27145550]  
  - KVM: PPC: Tie KVM_CAP_PPC_HTM to the user-visible TM feature (Michael Ellerman)  [Orabug: 27145550]  
  - Revert "KVM: PPC: Book3S HV: POWER9 does not require secondary thread management" (Paul Mackerras)  [Orabug: 27145550]  
  - KVM: SVM: detect opening of SMI window using STGI intercept (Ladi Prosek)  [Orabug: 27145550]  
  - KVM: PPC: Book3S HV: Explicitly disable HPT operations on radix guests (Paul Mackerras)  [Orabug: 27145550]  
  - KVM: PPC: Book3S PR: Enable in-kernel TCE handlers for PR KVM (Alexey Kardashevskiy)  [Orabug: 27145550]  
  - KVM: PPC: Book3S HV: Delete an error message for a failed memory allocation in kvmppc_allocate_hpt() (Markus Elfring)  [Orabug: 27145550]  
  - KVM: PPC: BookE: Use vma_pages function (Thomas Meyer)  [Orabug: 27145550]  
  - KVM: PPC: Book3S HV: Use ARRAY_SIZE macro (Thomas Meyer)  [Orabug: 27145550]  
  - KVM: PPC: Book3S HV: Handle unexpected interrupts better (Paul Mackerras)  [Orabug: 27145550]  
  - KVM: x86: extend usage of RET_MMIO_PF_* constants (Paolo Bonzini)  [Orabug: 27145550]  
  - KVM: nSVM: fix SMI injection in guest mode (Ladi Prosek)  [Orabug: 27145550]  
  - KVM: nSVM: refactor nested_svm_vmrun (Ladi Prosek)  [Orabug: 27145550]  
  - KVM: nVMX: fix SMI injection in guest mode (Ladi Prosek)  [Orabug: 27145550]  
  - KVM: x86: introduce ISA specific smi_allowed callback (Ladi Prosek)  [Orabug: 27145550]  
  - KVM: x86: introduce ISA specific SMM entry/exit callbacks (Ladi Prosek)  [Orabug: 27145550]  
  - KVM: SVM: limit kvm_handle_page_fault to #PF handling (Paolo Bonzini)  [Orabug: 27145550]  
  - KVM: SVM: unconditionally wake up VCPU on IOMMU interrupt (Paolo Bonzini)  [Orabug: 27145550]  
  - arch/x86: remove redundant null checks before kmem_cache_destroy (Tim Hansen)  [Orabug: 27145550]  
  - KVM: VMX: Don't expose unrestricted_guest is enabled if ept is disabled (Wanpeng Li)  [Orabug: 27145550]  
  - KVM: X86: Processor States following Reset or INIT (Wanpeng Li)  [Orabug: 27145550]  
  - KVM: x86: thoroughly disarm LAPIC timer around TSC deadline switch (Radim Krčmář)  [Orabug: 27145550]  
  - KVM: x86: really disarm lapic timer when clearing TMICT (Radim Krčmář)  [Orabug: 27145550]  
  - KVM: x86: handle 0 write to TSC_DEADLINE MSR (Radim Krčmář)  [Orabug: 27145550]  
  - KVM: VMX: rename RDSEED and RDRAND vmx ctrls to reflect exiting (David Hildenbrand)  [Orabug: 27145550]  
  - KVM: x86: allow setting identity map addr with no vcpus only (David Hildenbrand)  [Orabug: 27145550]  
  - KVM: x86: document special identity map address value (David Hildenbrand)  [Orabug: 27145550]  
  - KVM: VMX: cleanup init_rmode_identity_map() (David Hildenbrand)  [Orabug: 27145550]  
  - KVM: nVMX: no need to set ept/vpid caps to 0 (David Hildenbrand)  [Orabug: 27145550]  
  - KVM: nVMX: no need to set vcpu->cpu when switching vmcs (David Hildenbrand)  [Orabug: 27145550]  
  - KVM: VMX: drop unnecessary function declarations (David Hildenbrand)  [Orabug: 27145550]  
  - KVM: VMX: require INVEPT GLOBAL for EPT (David Hildenbrand)  [Orabug: 27145550]  
  - KVM: VMX: call ept_sync_global() with enable_ept only (David Hildenbrand)  [Orabug: 27145550]  
  - KVM: VMX: drop enable_ept check from ept_sync_context() (David Hildenbrand)  [Orabug: 27145550]  
  - KVM: x86: no need to inititalize vcpu members to 0 (David Hildenbrand)  [Orabug: 27145550]  
  - KVM: VMX: vmx_vcpu_setup() cannot fail (David Hildenbrand)  [Orabug: 27145550]  
  - KVM: x86: drop BUG_ON(vcpu->kvm) (David Hildenbrand)  [Orabug: 27145550]  
  - KVM: x86: mmu: free_page can handle NULL (David Hildenbrand)  [Orabug: 27145550]  
  - KVM: x86: mmu: returning void in a void function is strange (David Hildenbrand)  [Orabug: 27145550]  
  - KVM: LAPIC: Apply change to TDCR right away to the timer (Wanpeng Li)  [Orabug: 27145550]  
  - KVM: LAPIC: Keep timer running when switching between one-shot and periodic mode (Wanpeng Li)  [Orabug: 27145550]  
  - KVM: LAPIC: Introduce limit_periodic_timer_frequency (Wanpeng Li)  [Orabug: 27145550]  
  - KVM: LAPIC: Fix lapic timer mode transition (Wanpeng Li)  [Orabug: 27145550]  
  - tools/kvm_stat: Add Python 3 support to kvm_stat (Jeremy Cline)  [Orabug: 27145550]  
  - KVM: VMX: Don't expose PLE enable if there is no hardware support (Wanpeng Li)  [Orabug: 27145550]  
  - s390/sthyi: add s390_sthyi system call (QingFeng Hao)  [Orabug: 27145550]  
  - s390/sthyi: add cache to store hypervisor info (QingFeng Hao)  [Orabug: 27145550]  
  - s390/sthyi: reorganize sthyi implementation (QingFeng Hao)  [Orabug: 27145550]  
  - irqchip/gic-v3-its: Setup VLPI properties at map time (Marc Zyngier)  [Orabug: 27145550]  
  - irqchip/gic-v3-its: Limit scope of VPE mapping to be per ITS (Marc Zyngier)  [Orabug: 27145550]  
  - irqchip/gic-v3-its: Make its_send_vmapp operate on a single ITS (Marc Zyngier)  [Orabug: 27145550]  
  - irqchip/gic-v3-its: Make its_send_vinvall operate on a single ITS (Marc Zyngier)  [Orabug: 27145550]  
  - irqchip/gic-v3-its: Make GICv4_ITS_LIST_MAX globally available (Marc Zyngier)  [Orabug: 27145550]  
  - irqchip/gic-v3-its: Track per-ITS list number (Marc Zyngier)  [Orabug: 27145550]  
  - genirq/irqdomain: Update irq_domain_ops.activate() signature (Thomas Gleixner)  [Orabug: 27145550]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.14-4.el7uek]
changelog:
  - net/rds: make copy_page_from_iter and copy_page_to_iter stay within page boundaries (WORKAROUND!) (Gerd Rausch)  [Orabug: 27222215] [Orabug: 27364391]  
  - net/rds: Fixing INIT2RTR_QP(0x503), syndrome (0x1796e4) (IB_AH_GRH present) issue. (Wei Lin Guay)  [Orabug: 27383162] [Orabug: 27364391]  
  - net/rds: Fix order of intitialization in rds_ib_add_one. (Gerd Rausch)  [Orabug: 27195622] [Orabug: 27364391]  
  - rds: RDS diagnostics when connections are stuck in Receiver Not Ready state. (hui.han)  [Orabug: 26522310] [Orabug: 27364391]  
  - RDS: IB: Change the proxy qp's path_mtu to IB_MTU_256 (Avinash Repaka)  [Orabug: 26864694] [Orabug: 27364391]  
  - rds: Fix non-atomic operation on shared flag variable (Håkon Bugge)  [Orabug: 26842076] [Orabug: 27364391]  
  - rds: Fix incorrect statistics counting (Håkon Bugge)  [Orabug: 26847583] [Orabug: 27364391]  
  - RDS: IB: Add proxy qp to support FRWR through RDS_GET_MR (Avinash Repaka)  [Orabug: 25669255] [Orabug: 27364391]  
  - RDS: Add support for fast registration work request (Avinash Repaka)  [Orabug: 22145384] [Orabug: 27364391]  
  - Revert "RDS: base connection dependency needed for rolling downgrade from version 4.1 to 3.1"" (Wei Lin Guay)  [Orabug: 26124147] [Orabug: 27364391]  
  - Revert "RDS: Ensure non-zero SL uses correct path before lane 0 connection is dropped" (Wei Lin Guay)  [Orabug: 26124147] [Orabug: 27364391]  
  - Revert "rds: make sure base connection is up on both sides" (Wei Lin Guay)  [Orabug: 26124147] [Orabug: 27364391]  
  - net/rds: remove the RDS specific path record caching (Wei Lin Guay)  [Orabug: 26124147] [Orabug: 27364391]  
  - Revert "net/rds: Revert "RDS: add reconnect retry scheme for stalled connections"" (Wei Lin Guay)  [Orabug: 26497333] [Orabug: 27364391]  
  - Revert "net/rds: prioritize the base connection establishment" (Wei Lin Guay)  [Orabug: 26497333] [Orabug: 27364391]  
  - Revert "net/rds: determine active/passive connection with IP addresses" (Wei Lin Guay)  [Orabug: 26497333] [Orabug: 27364391]  
  - Revert "net/rds: use different workqueue for base_conn" (Wei Lin Guay)  [Orabug: 26497333] [Orabug: 27364391]  
  - rds: reduce memory footprint for RDS when transport is RDMA (Ka-Cheong Poon)  [Orabug: 26412003] [Orabug: 27364391]  
  - RDS: IB: Destroy rdma_cm_id when unloading module (Avinash Repaka)  [Orabug: 26089296] [Orabug: 27364391]  
  - RDS: IB: Destroy aux_wq if rds_ib_init() fails (Avinash Repaka)  [Orabug: 26732887] [Orabug: 27364391]  
  - rds: Reintroduce statistics counting (Håkon Bugge)  [Orabug: 26717115] [Orabug: 27364391]  
  - rds: Make sure updates to cp_send_gen can be observed (Håkon Bugge)  [Orabug: 26519030] [Orabug: 27364391]  
  - rds: tcp: use sock_create_lite() to create the accept socket (Sowmini Varadhan)  [Orabug: 26477756] [Orabug: 27364391]  
  - rds: tcp: set linger to 1 when unloading a rds-tcp (Sowmini Varadhan)  [Orabug: 26477841] [Orabug: 27364391]  
  - rds: tcp: send handshake ping-probe from passive endpoint (Sowmini Varadhan)  [Orabug: 26477841] [Orabug: 27364391]  
  - net/rds: Replace printk in TX path with stat variable (Yuval Shaia)  [Orabug: 26402653] [Orabug: 27364391]  
  - net/rds: Add mutex exclusion for vector_load (Håkon Bugge)  [Orabug: 26406492] [Orabug: 27364391]  
  - [PATCH] RDS: Print failed rdma op details if failure is remote access (Rama Nichanamatlu)  [Orabug: 26277933] [Orabug: 27364391]  
  - [PATCH] RDS: When RDS socket is closed, print unreleased MR's (Rama Nichanamatlu)  [Orabug: 26276427] [Orabug: 27364391]  
  - net/rds: Reduce memory footprint in rds_sendmsg (Wei Lin Guay)  [Orabug: 26151323] [Orabug: 26350949] [Orabug: 27364391]  
  - net/rds: Fix minor linker warnings (Babu Moger)  [Orabug: 25393132] [Orabug: 27364391]  
  - net/rds: prioritize the base connection establishment (Wei Lin Guay)  [Orabug: 25521901] [Orabug: 27364391]  
  - net/rds: determine active/passive connection with IP addresses (Wei Lin Guay)  [Orabug: 25521901] [Orabug: 27364391]  
  - net/rds: use different workqueue for base_conn (Wei Lin Guay)  [Orabug: 25521901] [Orabug: 27364391]  
  - net/rds: Revert "RDS: add reconnect retry scheme for stalled connections" (Wei Lin Guay)  [Orabug: 25521901] [Orabug: 27364391]  
  - rds: tcp: Set linger when rejecting an incoming conn in rds_tcp_accept_one (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391]  
  - rds: tcp: various endian-ness fixes (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391]  
  - rds: tcp: remove cp_outgoing (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391]  
  - rds: tcp: Sequence teardown of listen and acceptor sockets to avoid races (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391]  
  - rds: tcp: Reorder initialization sequence in rds_tcp_init to avoid races (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391]  
  - rds: tcp: Take explicit refcounts on struct net (Sowmini Varadhan)  [Orabug: 26289770] [Orabug: 27364391]  
  - rds: tcp: fix memory leak in TIME_WAIT sockets (Sowmini Varadhan)  [Orabug: 26250066] [Orabug: 27364391]  
  - rds: tcp: canonical connection order for all paths with index > 0 (Sowmini Varadhan)  [Orabug: 26241322] [Orabug: 27364391]  
  - rds: tcp: allow progress of rds_conn_shutdown if the rds_connection is marked ERROR by an intervening FIN (Sowmini Varadhan)  [Orabug: 26241322] [Orabug: 27364391]  
  - Backport multipath RDS from upstream to UEK4 (Sowmini Varadhan)  [Orabug: 26241322] [Orabug: 27364391]  
  - RDS/IB: active bonding port state fix for intfs added late (Mukesh Kacker)  [Orabug: 26081079] [Orabug: 27364391]  
  - RDS/IB: 4KB receive buffers get posted by mistake on 16KB frag connections. (Venkat Venkatsubra)  [Orabug: 25920916] [Orabug: 27364391]  
  - Revert "RDS: Make message size limit compliant with spec" (Avinash Repaka)  [Orabug: 25472193] [Orabug: 27364391]  
  - RDS: ActiveBonding: Make its own thread for active active (Santosh Shilimkar)  [Orabug: 25026643] [Orabug: 27364391]  
  - RDS: correct condition check in reconnect_timeout() (Ajaykumar Hotchandani)  [Orabug: 25026643] [Orabug: 27364391]  
  - RDS: ActiveBonding: Create a cluster sync point for failback (Santosh Shilimkar)  [Orabug: 25026643] [Orabug: 27364391]  
  - RDS: don't commit to queue till transport connection is up (Santosh Shilimkar)  [Orabug: 25393611] [Orabug: 27364391]  
  - RDS: restrict socket connection reset to CAP_NET_ADMIN (Santosh Shilimkar)  [Orabug: 25393611] [Orabug: 27364391]  
  - rds: fix warning in rds_send_drop_to() (Ajaykumar Hotchandani)  [Orabug: 25116517] [Orabug: 27364391]  
  - RDS: Make message size limit compliant with spec (Avinash Repaka)  [Orabug: 24455231] [Orabug: 22303625] [Orabug: 27364391]  
  - RDS: rds debug messages are enabled by default (shamir rabinovitch)  [Orabug: 24956522] [Orabug: 27364391]  
  - net/rds: Fix new sparse warning (David Ahern)  [Orabug: 24817685] [Orabug: 27364391]  
  - net/rds: fix unaligned memory access (shamir rabinovitch)  [Orabug: 24817685] [Orabug: 27364391]  
  - RDS: IB: fix panic with handlers running post teardown (Santosh Shilimkar)  [Orabug: 24460805] [Orabug: 27364391]  
  - RDS: Drop the connection as part of cancel to avoid hangs (Avinash Repaka)  [Orabug: 22506032] [Orabug: 27364391]  
  - RDS: add reconnect retry scheme for stalled connections (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391]  
  - RDS: restore the exponential back-off scheme (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391]  
  - RDS: avoid duplicate connection drop for self loopback (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391]  
  - RDS: don't modify conn state directly in rds_connect_complete (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391]  
  - RDS: IB: log associates connection details for setup failures (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391]  
  - RDS: IB: suppress log prints for FLUSH_ERR/RETRY_EXC (Santosh Shilimkar)  [Orabug: 24663803] [Orabug: 27364391]  
  - RDS: use c_wq for all activities on a connection (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391]  
  - RDS: IB: Avoid double reject on ACL failures (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391]  
  - RDS: make the rds_{local_}wq part of rds_connection (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391]  
  - RDS: make rds_conn_drop() take reason argument (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391]  
  - RDS: IB: Remove unused PATH migration event code (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391]  
  - RDS: IB: remove delayed queuing of address change (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391]  
  - RDS: IB: use address change event for failover/failback (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391]  
  - RDS: IB: drop workaround for loopback connection hangs (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27364391]  
  - Revert "RDS: IB: skip rx/tx work when destroying connection" (Santosh Shilimkar)  [Orabug: 24746103] [Orabug: 27364391]  
  - RDS: IB: set default frag size to 16K (Santosh Shilimkar)  [Orabug: 24656820] [Orabug: 27364391]  
  - rds: avoid call to flush_mrs() in specific condition (Ajaykumar Hotchandani)  [Orabug: 24656750] [Orabug: 27364391]  
  - RDS: IB: skip rx/tx work when destroying connection (Wengang Wang)  [Orabug: 24395789] [Orabug: 27364391]  
  - RDS: TCP: rds_tcp_accept_one() should transition socket from RESETTING to UP (Sowmini Varadhan)  [Orabug: 27364391]  
  - RDS: TCP: fix race windows in send-path quiescence by rds_tcp_accept_one() (Sowmini Varadhan)  [Orabug: 23542064] [Orabug: 27364391]  
  - RDS: TCP: Retransmit half-sent datagrams when switching sockets in rds_tcp_reset_callbacks (Sowmini Varadhan)  [Orabug: 23542064] [Orabug: 27364391]  
  - RDS: TCP: Add/use rds_tcp_reset_callbacks to reset tcp socket safely (Sowmini Varadhan)  [Orabug: 23542064] [Orabug: 27364391]  
  - RDS: TCP: Avoid rds connection churn from rogue SYNs (Sowmini Varadhan)  [Orabug: 23542064] [Orabug: 27364391]  
  - RDS: TCP: rds_tcp_accept_worker() must exit gracefully when terminating rds-tcp (Sowmini Varadhan)  [Orabug: 27364391]  
  - RDS: TCP: Remove kfreed tcp conn from list (Sowmini Varadhan)  [Orabug: 23542064] [Orabug: 27364391]  
  - RDS: IB: Add MOS note details to link local(HAIP) address print (Santosh Shilimkar)  [Orabug: 23027670] [Orabug: 27364391]  
  - {IB/{core,ipoib},net/{mlx4,rds}}: Mark unload_allowed as __initdata variable (Yuval Shaia)  [Orabug: 23501273] [Orabug: 27364391]  
  - net/rds: Skip packet filtering if interface does not support ACL (Yuval Shaia)  [Orabug: 23541567] [Orabug: 27364391]  
  - RDS: Fix the rds_conn_destroy panic due to pending messages (Bang Nguyen)  [Orabug: 23222944] [Orabug: 27364391]  
  - RDS: add handshaking for ACL violation detection at passive (Ajaykumar Hotchandani)  [Orabug: 23222944] [Orabug: 27364391]  
  - RDS: IB: enforce IP anti-spoofing based on ACLs (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27300453] [Orabug: 27364391]  
  - RDS: Add acl fields to the rds_connection (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27364391]  
  - RDS: IB: invoke connection destruction in worker (Ajaykumar Hotchandani)  [Orabug: 23222944] [Orabug: 27364391]  
  - RDS: Add reset all conns for a source address to CONN_RESET (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27364391]  
  - RDS: IB: change rds_ib_active_bonding_excl_ips to only RFC3927 space (Todd Vierling)  [Orabug: 27364391]  
  - RDS: avoid large pages for sg allocation for TCP transport (Santosh Shilimkar)  [Orabug: 23635336] [Orabug: 27364391]  
  - {IBCM/IPoIB/MLX4/RDS}: Temporary backout Exasecure change (Santosh Shilimkar)  [Orabug: 23634771] [Orabug: 27364391]  
  - RDS/IB: Fix crash in SRQ initialization (Ajaykumar Hotchandani)  [Orabug: 23523586] [Orabug: 27364391]  
  - RDS: Remove the link-local restriction as a stop gap measure (Santosh Shilimkar)  [Orabug: 2360905] [Orabug: 27364391]  
  - RDS: IB: restore the vector spreading for the CQs (Santosh Shilimkar)  [Orabug: 23550561] [Orabug: 27364391]  
  - RDS: Fix the rds_conn_destroy panic due to pending messages (Bang Nguyen)  [Orabug: 23222944] [Orabug: 27364391]  
  - RDS: add handshaking for ACL violation detection at passive (Ajaykumar Hotchandani)  [Orabug: 23222944] [Orabug: 27364391]  
  - RDS: IB: enforce IP anti-spoofing for UUID context (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27300453] [Orabug: 27364391]  
  - RDS: IB: invoke connection destruction in worker (Ajaykumar Hotchandani)  [Orabug: 23222944] [Orabug: 27364391]  
  - RDS: message filtering based on UUID (Bang Nguyen)  [Orabug: 23222944] [Orabug: 27364391]  
  - RDS: Add UUID socket option (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27364391]  
  - RDS: Add reset all conns for a source address to CONN_RESET (Santosh Shilimkar)  [Orabug: 23222944] [Orabug: 27364391]  
  - RDS: Drop stale iWARP support (Santosh Shilimkar)  [Orabug: 23027670] [Orabug: 27364391]  
  - RDS: IB: drop discontinued IB CQ_VECTOR support (Santosh Shilimkar)  [Orabug: 23027670] [Orabug: 27364391]  
  - RDS: IB: Drop unused and broken APM support (Santosh Shilimkar)  [Orabug: 23027670] [Orabug: 27364391]  
  - RDS: IB: Make use of ARPOP_REQUEST instead of ARPOP_REPLY in bonding code (Santosh Shilimkar)  [Orabug: 23094704] [Orabug: 27364391]  
  - RDS: IB: don't use the link-local address for ib transport (Santosh Shilimkar)  [Orabug: 23027670] [Orabug: 27364391]  
  - RDS: IB: rebuild receive caches when needed (Santosh Shilimkar)  [Orabug: 27364391]  
  - OFED: indicate consistent vendor error (Ajaykumar Hotchandani)  [Orabug: 22381117] [Orabug: 27364391]  
  - RDS: Change number based conn-drop reasons to enum (Avinash Repaka)  [Orabug: 23294707] [Orabug: 27364391]  
  - RDS: Move rds_rtd definitions from rds_rt_debug files to common files (Avinash Repaka)  [Orabug: 23294707] [Orabug: 27364391]  
  - RDS: Change the default value of rds_rt_debug_bitmap modparam to 0x488B (Avinash Repaka)  [Orabug: 23294707] [Orabug: 27364391]  
  - RDS: Replace rds_rtd printk with trace_printk (Avinash Repaka)  [Orabug: 23294707] [Orabug: 27364391]  
  - RDS: IB: Print vendor error in recv completion error message (Avinash Repaka)  [Orabug: 23294707] [Orabug: 27364391]  
  - rds: schedule local connection activity in proper workqueue (Ajaykumar Hotchandani)  [Orabug: 23223537] [Orabug: 27364391]  
  - net/rds: Use max_mr from HCA caps than max_fmr (Yuval Shaia)  [Orabug: 23223564] [Orabug: 27364391]  
  - RDS: IB: disable ib_cache purging to avoid memory leak in reconnect path (Santosh Shilimkar)  [Orabug: 23275911] [Orabug: 27364391]  
  - RDS: IB: avoid bit fields for i_frag_pages (Wengang Wang)  [Orabug: 23275911] [Orabug: 27364391]  
  - RDS: TCP: Synchronize accept() and connect() paths on t_conn_lock. (Sowmini Varadhan)  [Orabug: 27364391]  
  - RDS:TCP: Synchronize rds_tcp_accept_one with rds_send_xmit when resetting t_sock (Sowmini Varadhan)  [Orabug: 27364391]  
  - RDS: TCP: Call pskb_extract() helper function (Sowmini Varadhan)  [Orabug: 27364391]  
  - RDS: support individual receive trace reporting (Santosh Shilimkar)  [Orabug: 23215779] [Orabug: 27364391]  
  - Revert "RDS: Make message size limit compliant with spec" (Chuck Anderson)  [Orabug: 22661521] [Orabug: 23217242] [Orabug: 27364391]  
  - RDS: TCP: Remove unused constant (Sowmini Varadhan)  [Orabug: 22993275] [Orabug: 27364391]  
  - RDS: TCP: Add sysctl tunables for sndbuf/rcvbuf on rds-tcp socket (Sowmini Varadhan)  [Orabug: 22993275] [Orabug: 27364391]  
  - RDS: Make message size limit compliant with spec (Avinash Repaka)  [Orabug: 22661521] [Orabug: 27364391]  
  - RDS: add flow control info to rds_info_rdma_connection (Wei Lin Guay)  [Orabug: 22306628] [Orabug: 27364391]  
  - RDS: update IB flow control algorithm (Wei Lin Guay)  [Orabug: 22306628] [Orabug: 27364391]  
  - RDS: Add flow control in runtime debugging (Wei Lin Guay)  [Orabug: 22306628] [Orabug: 27364391]  
  - RDS: fix IB transport flow control (Wei Lin Guay)  [Orabug: 22306628] [Orabug: 27364391]  
  - [PATCH 2/2] Avoid redundant call to rds_bind_lookup() in recv path. (Sowmini Varadhan)  [Orabug: 27364391]  
  - RDS: TOS fixes in failure paths when RDS-TCP and RDS-RDMA are run together (Sowmini Varadhan)  [Orabug: 27364391]  
  - rds: rds-stress show all zeros after few minutes (shamir rabinovitch)  [Orabug: 23045970] [Orabug: 27364391]  
  - RDS: IB: Run rds_fmr_flush WQ closer to ib_device (Wei Lin Guay)  [Orabug: 27364391]  
  - RDS: IB: support larger frag size up to 16KB (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391]  
  - RDS: IB: add frag size to per connection info (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391]  
  - RDS: IB: log the endpoint rds connection role (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391]  
  - RDS: IB: purge receive frag cache on connection shutdown (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391]  
  - RDS: IB: use i_frag_sz for cache stat updates (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391]  
  - RDS: IB: scale rds_ib_allocation based on fragment size (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391]  
  - RDS: IB: make fragment size (RDS_FRAG_SIZE) dynamic (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391]  
  - RDS: log the IP address as well on bind failure (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391]  
  - RDS: fix the sg allocation based on actual message size (Wei Lin Guay)  [Orabug: 21894138] [Orabug: 27364391]  
  - RDS: make congestion code independent of PAGE_SIZE (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391]  
  - RDS: Back out OoO send status fix since it causes the regression (Santosh Shilimkar)  [Orabug: 21894138] [Orabug: 27364391]  
  - RDS/IB: VRPC DELAY / OSS RECONNECT CAUSES 5 MINUTE STALL ON PORT FAILURE (Venkat Venkatsubra)  [Orabug: 22847528] [Orabug: 27364391]  
  - rds: add infrastructure to find more details for reconnect failure (Ajaykumar Hotchandani)  [Orabug: 22631108] [Orabug: 27364391]  
  - rds: find connection drop reason (Ajaykumar Hotchandani)  [Orabug: 22631108] [Orabug: 27364391]  
  - RDS: Add interface for receive MSG latency trace (Santosh Shilimkar)  [Orabug: 22630180] [Orabug: 27364391]  
  - RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in rds_tcp_data_recv (Sowmini Varadhan)  [Orabug: 22623837] [Orabug: 27364391]  
  - RDS: establish connection for legitimate remote RDMA message (Santosh Shilimkar)  [Orabug: 22139696] [Orabug: 27364391]  
  - rds: remove the _reuse_ rds ib pool statistics (Wengang Wang)  [Orabug: 22124214] [Orabug: 27364391]  
  - RDS: Add support for per socket SO_TIMESTAMP for incoming messages (Santosh Shilimkar)  [Orabug: 22190837] [Orabug: 27364391]  
  - RDS: Fix out-of-order RDS_CMSG_RDMA_SEND_STATUS (Wei Lin Guay)  [Orabug: 22126982] [Orabug: 27364391]  
  - net/rds: start rdma listening after ib/iw initialization is done (Qing Huang)  [Orabug: 21684447] [Orabug: 27364391]  
  - RDS-TCP: Reset tcp callbacks if re-using an outgoing socket in rds_tcp_accept_one() (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391]  
  - RDS: Invoke ->laddr_check() in rds_bind() for explicitly bound transports. (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391]  
  - RDS: rds_conn_lookup() should factor in the struct net for a match (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391]  
  - RDS: Use a single TCP socket for both send and receive. (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391]  
  - RDS-TCP: Do not bloat sndbuf/rcvbuf in rds_tcp_tune (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391]  
  - RDS-TCP: Set up MSG_MORE and MSG_SENDPAGE_NOTLAST as appropriate in rds_tcp_ (Sowmini Varadhan)  [Orabug: 22012202] [Orabug: 27364391]  
  - Revert "rds_rdma: rds_sendmsg should return EAGAIN if connection not setup" (Rama Nichanamatlu)  [Orabug: 21664735] [Orabug: 27364391]  
  - rds: make sure base connection is up on both sides (Ajaykumar Hotchandani)  [Orabug: 21675157] [Orabug: 27364391]  
  - rds_ib/iw: fixed big endianness conversion issue for dp->dp_ack_seq (Qing Huang)  [Orabug: 21684819] [Orabug: 27364391]  
  - RDS: fix race condition when sending a message on unbound socket. (Quentin Casasnovas)  [Orabug: 27364391]  {CVE-2015-6937} 
  - RDS: verify the underlying transport exists before creating a connection (Sasha Levin)  [Orabug: 22010933] [Orabug: 27364391]  
  - RDS: fix race condition when sending a message on unbound socket. (Quentin Casasnovas)  [Orabug: 27364391]  {CVE-2015-6937} 
  - RDS: make send_batch_count tunable effective (Santosh Shilimkar)  [Orabug: 22010933] [Orabug: 27364391]  
  - RDS: make use of kfree_rcu() and avoid the call_rcu() chain (Santosh Shilimkar)  [Orabug: 22010933] [Orabug: 27364391]  
  - RDS: verify the underlying transport exists before creating a connection (Sasha Levin)  [Orabug: 22010933] [Orabug: 27364391]  
  - RDS/IB: print string constants in more places (Zach Brown)  [Orabug: 27364391]  
  - ib/rds: runtime debuggability enhancement (Qing Huang)  [Orabug: 27364391]  
  - RDS: Handle RDMA_CM_EVENT_TIMEWAIT_EXIT event. (Venkat Venkatsubra)  [Orabug: 21675221] [Orabug: 27364391]  
  - rds: fix an integer overflow test in rds_info_getsockopt() (Dan Carpenter)  [Orabug: 27364391]  
  - RDS: change spin_lock to spin_lock_bh (Wengang Wang)  [Orabug: 21795851] [Orabug: 27364391]  
  - rds: add busy_list only when fmr allocated successfully (Wengang Wang)  [Orabug: 21795840] [Orabug: 27364391]  
  - rds: free ib_device related resource (Wengang Wang)  [Orabug: 21795824] [Orabug: 27364391]  
  - rds: srq initialization and cleanup (Wengang Wang)  [Orabug: 21795815] [Orabug: 27364391]  
  - IB/rds_rdma: unloading of ofed stack causes page fault panic (Rama Nichanamatlu)  [Orabug: 20861212] [Orabug: 27364391]  
  - RDS-TCP: Support multiple RDS-TCP listen endpoints, one per netns. (Sowmini Varadhan)  [Orabug: 21437445] [Orabug: 27364391]  
  - RDS-TCP: Make RDS-TCP work correctly when it is set up in a netns other than init_net (Sowmini Varadhan)  [Orabug: 21437445] [Orabug: 27364391]  
  - rds: print vendor error on error induced disconnect/re-connect (Wengang Wang)  [Orabug: 21527137] [Orabug: 27364391]  
  - rds: re-entry of rds_ib_xmit/rds_iw_xmit (Wengang Wang)  [Orabug: 21324078] [Orabug: 27364391]  
  - rds_rdma: rds_sendmsg should return EAGAIN if connection not setup (Wengang Wang)  [Orabug: 21551474] [Orabug: 27364391]  
  - rds_rdma: allocate FMR according to max_item_soft (Wengang Wang)  [Orabug: 21551548] [Orabug: 27364391]  
  - rds_rdma: do not dealloc fmrs in the pool under use (Wengang Wang)  [Orabug: 21551548] [Orabug: 27364391]  
  - rds: set fmr pool dirty_count correctly (Wengang Wang)  [Orabug: 21551548] [Orabug: 27364391]  
  - rds: rds_ib_device.refcount overflow (Wengang Wang)  [Orabug: 27364391]  
  - Add getsockopt support for SO_RDS_TRANSPORT (Sowmini Varadhan)  [Orabug: 21061146] [Orabug: 27364391]  
  - Add setsockopt support for SO_RDS_TRANSPORT (Sowmini Varadhan)  [Orabug: 21061146] [Orabug: 27364391]  
  - Declare SO_RDS_TRANSPORT and RDS_TRANS_* constants in uapi/linux/rds.h (Sowmini Varadhan)  [Orabug: 21061146] [Orabug: 27364391]  
  - RDS-TCP: only initiate reconnect attempt on outgoing TCP socket. (Sowmini Varadhan)  [Orabug: 20930687] [Orabug: 27364391]  
  - RDS-TCP: Always create a new rds_sock for an incoming connection. (Sowmini Varadhan)  [Orabug: 20930687] [Orabug: 27364391]  
  - rds: directly include header for vmalloc/vfree in ib_recv.c (Mukesh Kacker)  [Orabug: 21059667] [Orabug: 27364391]  
  - rds: return EMSGSIZE for oversize requests before processing/queueing (Mukesh Kacker)  [Orabug: 20971222] [Orabug: 27364391]  
  - net: rds: use correct size for max unacked packets and bytes (Sasha Levin)  [Orabug: 20585918] [Orabug: 27364391]  
  - RDS/IP: RDS takes 10 seconds to plumb the second IP back (Mukesh Kacker)  [Orabug: 20231857] [Orabug: 27364391]  
  - RDS/IB: Tune failover-on-reboot scheduling (Mukesh Kacker)  [Orabug: 20063740] [Orabug: 27364391]  
  - RDS: mark netdev UP for intfs added post module load (Mukesh Kacker)  [Orabug: 20130536] [Orabug: 27364391]  
  - RDS: Enable use of user named pkey devices (Mukesh Kacker)  [Orabug: 19064704] [Orabug: 27364391]  
  - rds: fix list corruption and tx hang when netfilter is used (shamir rabinovitch)  [Orabug: 18963548] [Orabug: 27364391]  
  - RDS: move more queing for loopback connections to separate queue (Mukesh Kacker)  [Orabug: 18977932] [Orabug: 27364391]  
  - RDS: add module parameter to allow module unload or not (Wengang Wang)  [Orabug: 27364391]  
  - rds: fix NULL pointer dereference panic during rds module unload (Rama Nichanamatlu)  [Orabug: 18952475] [Orabug: 27364391]  
  - RDS:active bonding: disable failover across HCAs(failover groups) (Mukesh Kacker)  [Orabug: 19430773] [Orabug: 27364391]  
  - RDS/IB: active bonding - failover down interfaces on reboot. (Mukesh Kacker)  [Orabug: 18697678] [Orabug: 27364391]  
  - RDS/IB: Remove dangling rcu_read_unlock() and other cleanups (Mukesh Kacker)  [Orabug: 18995395] [Orabug: 27364391]  
  - rds: new extension header: rdma bytes (Shamir Rabinovitch)  [Orabug: 18468180] [Orabug: 27364391]  
  - RDS: Ensure non-zero SL uses correct path before lane 0 connection is dropped (Ajaykumar Hotchandani)  [Orabug: 19133664] [Orabug: 27364391]  
  - rds: Lost locking in loop connection freeing (Pavel Emelyanov)  [Orabug: 19265200] [Orabug: 27364391]  
  - RDS: active bonding - failover/failback only to matching pkey (Mukesh Kacker)  [Orabug: 18681364] [Orabug: 27364391]  
  - RDS: active bonding - ports may not failback if all ports go down (Mukesh Kacker)  [Orabug: 18875563] [Orabug: 27364391]  
  - RDS: Use rds_local_wq for loopback connections in rds_conn_connect_if_down() (Chien-Hua Yen)  [Orabug: 18892380] [Orabug: 27364391]  
  - RDS: add workqueue for local loopback connections (Chien-Hua Yen)  [Orabug: 18892366] [Orabug: 27364391]  
  - RDS: SA query optimization (Bang Nguyen)  [Orabug: 18801977] [Orabug: 27364391]  
  - RDS: Remove cond_resched() in RX tasklet (Bang Nguyen)  [Orabug: 18801937] [Orabug: 27364391]  
  - RDS: Replace queue_work() by cond_resched() in the tasklet to breakup RX stream (Bang Nguyen)  [Orabug: 18801931] [Orabug: 27364391]  
  - RDS: looping to reap cq recv queue in rds_conn_shutdown (Chien-Hua Yen)  [Orabug: 18501034] [Orabug: 27364391]  
  - rds: Fix regression in dynamic active bonding configuration (Bang Nguyen)  [Orabug: 27364391]  
  - rds/rdma_cm: send RDMA_CM_EVENT_ADDR_CHANGE event for active bonding (Bang Nguyen)  [Orabug: 18421516] [Orabug: 27364391]  
  - RDS: Idle QoS connections during remote peer reboot causing application brownout (Chien-Hua Yen)  [Orabug: 18443194] [Orabug: 27364391]  
  - rds: dynamic active bonding configuration (Bang Nguyen)  [Orabug: 27364391]  
  - RDS: Fix slowdown when doing massively parallel workload (Bang Nguyen)  [Orabug: 18362838] [Orabug: 27364391]  
  - RDS: active bonding needs to set brcast and mask for its primary interface (Chien-Hua Yen)  [Orabug: 18479088] [Orabug: 27364391]  
  - RDS: bind hash table size increase, add per-bucket rw lock (Bang Nguyen)  [Orabug: 18071861] [Orabug: 27364391]  
  - RDMA CM: Add reason code for IB_CM_REJ_CONSUMER_DEFINED (Bang Nguyen)  [Orabug: 17484682] [Orabug: 27364391]  
  - RDS: protocol negotiation fails during reconnect (Bang Nguyen)  [Orabug: 17375389] [Orabug: 27364391]  
  - RDS: double free rdma_cm_id (Bang Nguyen)  [Orabug: 17192816] [Orabug: 27364391]  
  - RDS: ActiveBonding IP exclusion filter (Bang Nguyen)  [Orabug: 17075950] [Orabug: 27364391]  
  - RDS: Reconnect stalls for 15s (Bang Nguyen)  [Orabug: 17277974] [Orabug: 27364391]  
  - RDS: Reconnect causes panic at completion phase (Bang Nguyen)  [Orabug: 17213597] [Orabug: 27364391]  
  - RDS: added stats to track and display receive side memory usage (Venkat Venkatsubra)  [Orabug: 17045536] [Orabug: 27364391]  
  - RDS: RDS reconnect stalls (Bang Nguyen)  [Orabug: 1731355] [Orabug: 27364391]  
  - RDS: disable IP failover if device removed (Bang Nguyen)  [Orabug: 17206167] [Orabug: 27364391]  
  - RDS: Fix a bug in QoS protocol negotiation (Bang Nguyen)  [Orabug: 17079972] [Orabug: 27364391]  
  - RDS: alias failover is not working properly (Bang Nguyen)  [Orabug: 17177994] [Orabug: 27364391]  
  - add NETFILTER suppport (Ahmed Abbas)  [Orabug: 17082619] [Orabug: 27364391]  
  - RDS: Local address resolution may be delayed after IP has moved. RDS to update local ARP cache directly to speed it up. (Bang Nguyen)  [Orabug: 16979994] [Orabug: 27364391]  
  - RDS: restore two-sided reconnect with the lower IP node having a constant 100 ms backoff. (Bang Nguyen)  [Orabug: 16710287] [Orabug: 27364391]  
  - rds: set correct msg_namelen (Weiping Pan)  [Orabug: 27364391]  {CVE-2012-3430} 
  - RDS: IP config needs to be updated when network/rdma service restarted. (Bang Nguyen)  [Orabug: 16963884] [Orabug: 27364391]  
  - RDS: check for valid rdma id before initiating connection (Bang Nguyen)  [Orabug: 16857341] [Orabug: 27364391]  
  - RDS: reduce slab memory usage (Bang Nguyen)  [Orabug: 16935507] [Orabug: 27364391]  
  - RDS: Move connection along with IP when failing over/back. (Bang Nguyen)  [Orabug: 16916648] [Orabug: 27364391]  
  - RDS: Rename HAIP parameters to Active Bonding (Bang Nguyen)  [Orabug: 16810395] [Orabug: 27364391]  
  - rds shouldn't release fmr when ib_device was already released. (Zheng Li)  [Orabug: 16605377] [Orabug: 27364391]  
  - rds remove dev race. (Zheng Li)  [Orabug: 16605377] [Orabug: 27364391]  
  - reinit ip_config when service rdma restart. (Zheng Li)  [Orabug: 16605377] [Orabug: 27364391]  
  - rds: limit the size allocated by rds_message_alloc() (Cong Wang)  [Orabug: 16837486] [Orabug: 27364391]  
  - RDS: Fixes to improve throughput performance (Bang Nguyen)  [Orabug: 16571410] [Orabug: 27364391]  
  - RDS: fix rds-ping spinlock recursion (jeff.liu)  [Orabug: 16223050] [Orabug: 27364391]  
  - rds: Congestion flag does not get cleared causing the connection to hang (Bang Nguyen)  [Orabug: 16424692] [Orabug: 27364391]  
  - Add SIOCRDSGETTOS to get the current TOS for the socket (Bang Nguyen)  [Orabug: 16397197] [Orabug: 27364391]  
  - Changes to connect/TOS interface (Bang Nguyen)  [Orabug: 16397197] [Orabug: 27364391]  
  - rds: this resolved crash while removing rds_rdma module. orabug: 16268201 (Bang Nguyen)  [Orabug: 27364391]  
  - rds: scheduling while atomic on failover orabug: 16275095 (Bang Nguyen)  [Orabug: 27364391]  
  - rds: unregister IB event handler on shutdown (Bang Nguyen)  [Orabug: 27364391]  
  - rds: HAIP support child interface (Bang Nguyen)  [Orabug: 27364391]  
  - RDS HAIP misc fixes (Bang Nguyen)  [Orabug: 27364391]  
  - Ignore failover groups if HAIP is disabled (Bang Nguyen)  [Orabug: 27364391]  
  - RDS: RDS rolling upgrade (Saeed Mahameed)  [Orabug: 27364391]  
  - RDS: Fixes warning while rds-info. spin_lock_irqsave() is changed to spin_lock_bh(). (Ajaykumar Hotchandani)  [Orabug: 27364391]  
  - rds: UNDO reverts done for rebase code to compile with Linux 4.1 APIs (Mukesh Kacker)  [Orabug: 27364391]  
  - rds: port to UEK4, Linux-3.18* (Ajaykumar Hotchandani)  [Orabug: 27364391]  
  - rds: disable APM support (Ajaykumar Hotchandani)  [Orabug: 27364391]  
  - rds: disable cq balance (Ajaykumar Hotchandani)  [Orabug: 27364391]  
  - rds: move linux/rds.h to uapi/linux/rds.h (Ajaykumar Hotchandani)  [Orabug: 27364391]  
  - RDS: Kconfig and Makefile changes (Ajaykumar Hotchandani)  [Orabug: 27364391]  
  - RDS merge for UEK2 (Bang Nguyen)  [Orabug: 15997083] [Orabug: 27364391]  
  - rds: Misc Async Send fixes (Bang Nguyen)  [Orabug: 27364391]  
  - rds: call unregister_netdevice_notifier for rds_ib_nb in rds_ib_exit (Saeed Mahameed)  [Orabug: 27364391]  
  - rds: flush and destroy workqueue rds_aux_wq and fix creation order. (Saeed Mahameed)  [Orabug: 27364391]  
  - rds : fix compilation warning (Saeed Mahameed)  [Orabug: 27364391]  
  - rds: port the code to uek2 (Dotan Barak)  [Orabug: 27364391]  
  - rds: CQ balance (Bang Nguyen)  [Orabug: 27364391]  
  - rds: HAIP across HCAs (Bang Nguyen)  [Orabug: 27364391]  
  - rds: Misc HAIP fixes (Bang Nguyen)  [Orabug: 27364391]  
  - rds: off by one fixes (Dotan Barak)  [Orabug: 27364391]  
  - rds: Add Automatic Path Migration support (Dotan Barak)  [Orabug: 27364391]  
  - rds: fix error flow handling (Dotan Barak)  [Orabug: 27364391]  
  - net/rds: prevent memory leak in case of error flow (Dotan Barak)  [Orabug: 27364391]  
  - rds: fixed kernel oops in case of error flow (Dotan Barak)  [Orabug: 27364391]  
  - RDS: fixed compilation warnings (Dotan Barak)  [Orabug: 27364391]  
  - RDS SRQ optional (Bang Nguyen)  [Orabug: 27364391]  
  - RDS Async send support revised (Bang Nguyen)  [Orabug: 27364391]  
  - RDS Asynchronous Send support (Bang Nguyen)  [Orabug: 27364391]  
  - RDS: cleanup checkpatch errors (Bang Nguyen)  [Orabug: 27364391]  
  - RDS Quality Of Service (Bang Nguyen)  [Orabug: 27364391]  
  - RDS: Use IB_CQ_NEXT_COMP instead of IB_CQ_SOLICITED for TX CQ (Bang Nguyen)  [Orabug: 27364391]  
  - RDS: make sure rds_send_xmit doesn't loop forever (Chris Mason)  [Orabug: 27364391]  
  - RDS: issue warning if re-connect stalling for more than 1 min. (Bang Nguyen)  [Orabug: 27364391]  
  - RDS: don't test ring_empty or ring_low without locks held (Chris Mason)  [Orabug: 27364391]  
  - RDS: don't use RCU for the bind hash table (Chris Mason)  [Orabug: 27364391]  
  - RDS: avoid double destory of cm_id when rdms_resolve_route fails (Venkat Venkatsubra)  [Orabug: 27364391]  
  - RDS: make sure rds_send_drop_to properly takes the m_rs_lock (Chris Mason)  [Orabug: 27364391]  
  - RDS: kick krdsd to send congestion map updates (Chris Mason)  [Orabug: 27364391]  
  - RDS: add debuging code around sock_hold and sock_put. (Chris Mason)  [Orabug: 27364391]  
  - RDS: Don't destroy the rdma id until after we're dong using it (Chris Mason)  [Orabug: 27364391]  
  - RDS: adjust BUG()s for irqs disabled. (Chris Mason)  [Orabug: 27364391]  
  - rds: make sure we don't deref a null cm_id->device during address checks (Chris Mason)  [Orabug: 27364391]  
  - RDS: don't use GFP_ATOMIC for sk_alloc in rds_create (Chris Mason)  [Orabug: 27364391]  
  - RDS: Make sure we do a signaled send at least once per large send (Chris Mason)  [Orabug: 27364391]  
  - RDS: Fix an rcu race with rds_bin_lookup (Tina Yang)  [Orabug: 27364391]  
  - RDS: Fix RDS_MSG_MAPPED usage. (Chris Mason)  [Orabug: 27364391]  
  - RDS: add a sock_destruct callback with debugging (Chris Mason)  [Orabug: 27364391]  
  - RDS: add a sock_destruct callback with debugging (Tina Yang)  [Orabug: 27364391]  
  - RDS: limit the number of times we loop in rds_send_xmit (Chris Mason)  [Orabug: 27364391]  
  - RDS Make sure we check for congestion updates during rds_send_xmit (Chris Mason)  [Orabug: 27364391]  
  - Make sure to kick rds_send_xmit for both LL_SEND_FULL and for the congestion map updates. (Chris Mason)  [Orabug: 27364391]  
  - RDS: make sure we post recv buffers (Chris Mason)  [Orabug: 27364391]  
  - RDS: don't trust the LL_SEND_FULL bit (Chris Mason)  [Orabug: 27364391]  
  - RDS: give up on half formed connections after 15s (Chris Mason)  [Orabug: 27364391]  
  - rds_send_xmit is called uner a spinlock, lets not do a cond_resched() (Chris Mason)  [Orabug: 27364391]  
  - RDS: make sure not to loop forever inside rds_send_xmit (Chris Mason)  [Orabug: 27364391]  
  - rds: check for excessive looping in rds_send_xmit (Andy Grover)  [Orabug: 27364391]  
  - rds: don't update ipaddress tables if the address hasn't changed (Chris Mason)  [Orabug: 27364391]  
  - change ib default retry to 1 (Andy Grover)  [Orabug: 27364391]  
  - This patch adds the modparam to rds.ko. (Andy Grover)  [Orabug: 27364391]  
  - RDS: only use passive connections when addresses match (Zach Brown)  [Orabug: 27364391]  
  - RDS: destroy the ib state that generates call back earlier during shutdown (Chris Mason)  [Orabug: 27364391]  
  - RDS: check access on pages before doing copy_to_user (Chris Mason)  [Orabug: 27364391]  
  - RDS/IB: always free recv frag as we free its ring entry (Zach Brown)  [Orabug: 27364391]  
  - RDS/IB: Quiet warnings when leaking frags (Andy Grover)  [Orabug: 27364391]  
  - Fix loopback connection reference counts (Zach Brown)  [Orabug: 27364391]  
  - RDS: cancel connection work structs as we shut down (Zach Brown)  [Orabug: 27364391]  
  - RDS: don't call rds_conn_shutdown() from rds_conn_destroy() (Zach Brown)  [Orabug: 27364391]  
  - RDS: have sockets get transport module references (Zach Brown)  [Orabug: 27364391]  
  - RDS: remove old rs_transport comment (Zach Brown)  [Orabug: 27364391]  
  - RDS: lock rds_conn_count decrement in rds_conn_destroy() (Zach Brown)  [Orabug: 27364391]  
  - Use CQ_NEXT_COMP for recv completions (Andy Grover)  [Orabug: 27364391]  
  - RDS/IB: protect the list of IB devices (Zach Brown)  [Orabug: 27364391]  
  - RDS/IB: print IB event strings as well as their number (Zach Brown)  [Orabug: 27364391]  
  - RDS: flush the FMR pool less often. (Chris Mason)  [Orabug: 27364391]  
  - RDS: make sure the ring is really full before we return with ENOMEM (Chris Mason)  [Orabug: 27364391]  
  - RDS: use different cq handlers for send and recv (Andy Grover)  [Orabug: 27364391]  
  - RDS/IB: track signaled sends (Zach Brown)  [Orabug: 27364391]  
  - RDS: remove __init and __exit annotation (Zach Brown)  [Orabug: 27364391]  
  - RDS: fix races and other problems with rmmod and device removal (Zach Brown)  [Orabug: 27364391]  
  - RDS: properly init the sg table in our frags (Chris Mason)  [Orabug: 27364391]  
  - RDS: add support for atomic messages over the wire (Andy Grover)  [Orabug: 27364391]  
  - RDS: Fix BUG_ONs to not fire when in a tasklet (Andy Grover)  [Orabug: 27364391]  
  - RDS: Enable per-cpu workqueue threads (Tina Yang)  [Orabug: 27364391]  
  - RDS: Do not call set_page_dirty() with irqs off (Andy Grover)  [Orabug: 27364391]  
  - RDS: Properly unmap when getting a remote access error (Sherman Pun)  [Orabug: 27364391]  
  - RDS: only put sockets that have seen congestion on the poll_waitq (Andy Grover)  [Orabug: 27364391]  
  - RDS: Fix locking in rds_send_drop_to() (Tina Yang)  [Orabug: 27364391]  
  - RDS: Turn down alarming reconnect messages (Andy Grover)  [Orabug: 27364391]  
  - RDS: Workaround for in-use MRs on close causing crash (Andy Grover)  [Orabug: 27364391]  
  - RDS: Fix send locking issue (Tina Yang)  [Orabug: 27364391]  
  - RDS: Fix congestion issues for loopback (Andy Grover)  [Orabug: 27364391]  
  - RDS/TCP: Wait to wake thread when write space available (Andy Grover)  [Orabug: 27364391]  
  - RDS: use IB_CQ_VECTOR_LEAST_ATTACHED for cq's (Andy Grover)  [Orabug: 27364391]  
  - RDS: sendmsg() should check sndtimeo, not rcvtimeo (Andy Grover)  [Orabug: 27364391]  
  - RDS: Do not BUG() on error returned from ib_post_send (Andy Grover)  [Orabug: 27364391]  
  - RDS: Re-add pf/sol access via sysctl (Andy Grover)  [Orabug: 27364391]  
  - RDS/IB+IW: Move recv processing to a tasklet (Andy Grover)  [Orabug: 27364391]  
  - RDS: Do not send congestion updates to loopback connections (Andy Grover)  [Orabug: 27364391]  
  - RDS: Fix panic on unload (Andy Grover)  [Orabug: 27364391]  
  - RDS: Fix potential race around rds_i[bw]_allocation (Andy Grover)  [Orabug: 27364391]  
  - RDS: Add GET_MR_FOR_DEST sockopt (Andy Grover)  [Orabug: 27364391]  
  - RDS: Add a debug message suggesting to load transport modules (Andy Grover)  [Orabug: 27364391]  
  - RDS: Track transports via an array, not a list (Andy Grover)  [Orabug: 27364391]  
  - RDS: Modularize RDMA and TCP transports (Andy Grover)  [Orabug: 27364391]  
  - RDS: Export symbols from core RDS (Andy Grover)  [Orabug: 27364391]  
  - RDS: Re-add TCP transport to RDS (Andy Grover)  [Orabug: 27364391]  
  - RDS/IB: Drop connection when a fatal QP event is received (Andy Grover)  [Orabug: 27364391]  
  - RDS/IB: Disable flow control in sysctl and explain why (Andy Grover)  [Orabug: 27364391]  
  - RDS/IB: Move tx/rx ring init and refill to later (Andy Grover)  [Orabug: 27364391]  
  - RDS: Don't set c_version in __rds_conn_create() (Andy Grover)  [Orabug: 27364391]  
  - RDS/IB: Rename byte_len to data_len to enhance readability (Andy Grover)  [Orabug: 27364391]  
  - RDS/RDMA: Fix cut-n-paste errors in printks in rdma_transport.c (Andy Grover)  [Orabug: 27364391]  
  - RDS/IB: Fix printk to indicate remote IP, not local (Andy Grover)  [Orabug: 27364391]  
  - RDS/IB: Handle connections using RDS 3.0 wire protocol (Andy Grover)  [Orabug: 27364391]  
  - RDS/IB: Improve RDS protocol version checking (Andy Grover)  [Orabug: 27364391]  
  - RDS: Set retry_count to 2 and make modifiable via modparam (Andy Grover)  [Orabug: 27364391]  
  - RDS: Refactor end of __conn_create for readability (Andy Grover)  [Orabug: 27364391]  
  - RDS/IB: Always use PAGE_SIZE for FMR page size (Andy Grover)  [Orabug: 27364391]  
  - RDS: Fix completion notifications on blocking sockets (Andy Grover)  [Orabug: 27364391]  
  - FRV: Fix the section attribute on UP DECLARE_PER_CPU() (David Howells)  [Orabug: 27364391]  
  - net/rds Making RDS compile with 4.14 APIs (untested) & dropping iWarp (Gerd Rausch)  [Orabug: 27364391]  
  - net/rds Rewinding RDS to 8cbd9606 in order to rebase UEK commits on top of it (Gerd Rausch)  [Orabug: 27364391]  
  - ipoib: rfe- enable pkey and device name decoupling (Mukesh Kacker)  [Orabug: 19064704] [Orabug: 27383465]  
  - IB/Shared PD support from Oracle (Eli Cohen)  [Orabug: 21496696] [Orabug: 27358304]  
  - IB/{core,mlx4,mlx5}: Bring back UEK4/RDS enabling IB functions (Gerd Rausch)  [Orabug: 27300130]  
  - rdma_cm/cma: Cache broadcast domain record. (Erez Shitrit)  [Orabug: 27358309]  
  - IB/core - Don't modify outgoing DR SMP if first part is LID routed (Ralph Campbell)  [Orabug: 27358300]  
  - rdma_cm: use cma_info() instead of cma_dbg() (Ajaykumar Hotchandani)  [Orabug: 22381123] [Orabug: 27358301]  
  - rdma_cm: extend debug for remote mapping (Ajaykumar Hotchandani)  [Orabug: 27358295]  
  - rdma_cm: add debug functions and module parameter (Saeed Mahameed)  [Orabug: 27358307]  
  - rdma_cm: garbage-collection thread for rdma_destroy_id() (Saeed Mahameed)  [Orabug: 27358294]  
  - RDMA CM: init the return value to avoid false negative (Santosh Shilimkar)  [Orabug: 22347191] [Orabug: 27358310]  
  - rds/rdma_cm: send RDMA_CM_EVENT_ADDR_CHANGE event for active bonding (Bang Nguyen)  [Orabug: 18421516] [Orabug: 27358298]  
  - RDMA CM: Avoid possible SEGV during connection shutdown (Bang Nguyen)  [Orabug: 16750726] [Orabug: 27358296]  
  - ib_core: Do not transition MC groups to error on SM_CHANGE event (Jack Morgenstein)  [Orabug: 27358306]  
  - IB/cm: Add debug prints to ib_cm (Daniel Jurgens)  [Orabug: 27363812]  
  - RDMA/cma: Make sure that PSN is not over max allowed (Moni Shoua)  [Orabug: 27363738]  
  - IB/core: Make sure that PSN does not overflow (Majd Dibbiny)  [Orabug: 27363736]  
  - IB/core: Fix memory leak in cm_req_handler error flows (Matan Barak)  [Orabug: 27363737]  
  - {IB,net}/mlx5: Spread IB CQs more evenly over EQs (Parav Pandit)  [Orabug: 26790181]  
  - RDMA/core: Simplify rdma_addr_get_sgid() to not support RoCE (Parav Pandit)  [Orabug: 26639212]  
  - net/rds: Use rdma_read_gids to read connection GIDs (Parav Pandit)  [Orabug: 26639212]  
  - RDMA/ucma: Use rdma cm API to query GID (Parav Pandit)  [Orabug: 26639212]  
  - RDMA/cma: Introduce API to read GIDs for multiple transports (Parav Pandit)  [Orabug: 26639212]  
  - net/mlx5: Avoid deleting tree entry before destroying CQ (Parav Pandit)  [Orabug: 26639234]  
  - IB/mlx5: Implement clear counters (Parav Pandit)  [Orabug: 26761264]  
  - IB/core: Implement clear counters (Parav Pandit)  [Orabug: 26761264]  
  - IB/core: Fix unable to change lifespan entry for hw_counters (Parav Pandit)  [Orabug: 26761264]  
  - RDMA/cma: Fix returning correct path record entry for RoCE (Parav Pandit)  [Orabug: 27153906]  
  - RDMA/cma: Fix setting RoCE specific path record fields (Parav Pandit)  [Orabug: 27153906]  
  - RDMA/{cma, ucma}: Refactor to have transport specific checks (Parav Pandit)  [Orabug: 27153906]  
  - RDMA/cma: Introduce and use function to set RoCE path record L2 params (Parav Pandit)  [Orabug: 27153906]  
  - RDMA/cma: Set default GID type as RoCE when resolving RoCE route (Parav Pandit)  [Orabug: 27153906]  
  - RDMA/cma: Avoid setting path record type twice (Parav Pandit)  [Orabug: 27153906]  
  - RDMA/cma: Fix use the net namespace of the rdma_cm_id (Parav Pandit)  [Orabug: 27153906]  
  - RDMA/cma: Simplify netdev check (Parav Pandit)  [Orabug: 27153906]  
  - IB/cma: Introduce tos mapping configuration option (Parav Pandit)  [Orabug: 26761224]  
  - net/mlx5: Set num_vhca_ports capability (Daniel Jurgens)  [Orabug: 26875158]  
  - IB/mlx5: Set VHCA port in sniffer flow (Daniel Jurgens)  [Orabug: 26875158]  
  - IB/mlx5: Use correct mdev for vport queries in ib_virt (Daniel Jurgens)  [Orabug: 26875158]  
  - IB/mlx5: Route MADs for dual port RoCE (Daniel Jurgens)  [Orabug: 26875158]  
  - {net,IB}/mlx5: Change set_roce_gid to take a port number (Daniel Jurgens)  [Orabug: 26875158]  
  - IB/mlx5: Update counter implementation for dual port RoCE (Daniel Jurgens)  [Orabug: 26875158]  
  - IB/mlx5: Change debugfs to have per port contents (Parav Pandit)  [Orabug: 26875158]  
  - IB/mlx5: Implement dual port functionality in query routines (Daniel Jurgens)  [Orabug: 26875158]  
  - {net,IB}/mlx5: Manage port association for multiport RoCE (Daniel Jurgens)  [Orabug: 26875158]  
  - IB/core: Change roce_rescan_device to return void (Daniel Jurgens)  [Orabug: 26875158]  
  - net/mlx5: Set software owner ID during init HCA (Daniel Jurgens)  [Orabug: 26875158]  
  - net/mlx5: Fix race for multiple RoCE enable (Daniel Jurgens)  [Orabug: 26875158]  
  - net/mlx5e: Support DSCP trust state to Ethernet's IP packet on SQ (Huy Nguyen)  [Orabug: 27147689]  
  - net/mlx5e: Add dcbnl dscp to priority support (Huy Nguyen)  [Orabug: 27147689]  
  - net/mlx5: QPTS and QPDPM register firmware command support (Huy Nguyen)  [Orabug: 27147689]  
  - net/mlx5: Add MLX5_SET16 and MLX5_GET16 (Huy Nguyen)  [Orabug: 27147689]  
  - net/mlx5: QCAM register firmware command support (Huy Nguyen)  [Orabug: 27147689]  
  - net/dcb: Add dscp to priority selector type (Huy Nguyen)  [Orabug: 27147689]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.14-3.el7uek]
changelog:
  - PCI: Workaround wrong flags completions for IDT switch (Govinda Tatti)  [Orabug: 27199068]  
  - dccp: CVE-2017-8824: use-after-free in DCCP code (Mohamed Ghannam)  [Orabug: 27220222]  {CVE-2017-8824} 
  - uek-rpm: configs: Enabel Oracle HXGE and ASM driver (Allen Pais)  [Orabug: 27199116]  
  - fm10k: Add driver to the kernel config for UEK4 (Allen Pais)  [Orabug: 27199008]  
  - uek-rpm: config: enable some secure boot features (Allen Pais)  [Orabug: 27199002]  
  - uek-rpm: config: Enable OVM API (Allen Pais)  [Orabug: 27199003]  
  - uek-rpm: config: sxge/sxgevf: enable driver (Allen Pais)  [Orabug: 27199004]  
  - uek-rpm: enable CONFIG_KSPLICE. (Allen Pais)  [Orabug: 27199009]  
  - xen-blkback: add pending_req allocation stats (Ankur Arora)  [Orabug: 26670475]  
  - xen-blkback: move indirect req allocation out-of-line (Ankur Arora)  [Orabug: 26670475]  
  - xen-blkback: pull nseg validation out in a function (Ankur Arora)  [Orabug: 26670475]  
  - xen-blkback: make struct pending_req less monolithic (Ankur Arora)  [Orabug: 26670475]  
  - acpi, nfit: add 'Enable Latch System Shutdown Status' command support (Dan Williams)  [Orabug: 27139244]  
  - dax: stop requiring a live device for dax_flush() (Dan Williams)  [Orabug: 27139244]  
  - brd: remove dax support (Dan Williams)  [Orabug: 27139244]  
  - dax: quiet bdev_dax_supported() (Dan Williams)  [Orabug: 27139244]  
  - fs, dax: unify IOMAP_F_DIRTY read vs write handling policy in the dax core (Dan Williams)  [Orabug: 27139244]  
  - tools/testing/nvdimm: unit test clear-error commands (Dan Williams)  [Orabug: 27139244]  
  - acpi, nfit: validate commands against the device type (Dan Williams)  [Orabug: 27139244]  
  - tools/testing/nvdimm: stricter bounds checking for error injection commands (Vishal Verma)  [Orabug: 27139244]  
  - xfs: support for synchronous DAX faults (Christoph Hellwig)  [Orabug: 27139244]  
  - xfs: Implement xfs_filemap_pfn_mkwrite() using __xfs_filemap_fault() (Jan Kara)  [Orabug: 27139244]  
  - ext4: Support for synchronous DAX faults (Jan Kara)  [Orabug: 27139244]  
  - ext4: Simplify error handling in ext4_dax_huge_fault() (Jan Kara)  [Orabug: 27139244]  
  - dax: Implement dax_finish_sync_fault() (Jan Kara)  [Orabug: 27139244]  
  - dax, iomap: Add support for synchronous faults (Jan Kara)  [Orabug: 27139244]  
  - mm: Define MAP_SYNC and VM_SYNC flags (Jan Kara)  [Orabug: 27139244]  
  - dax: Allow tuning whether dax_insert_mapping_entry() dirties entry (Jan Kara)  [Orabug: 27139244]  
  - dax: Allow dax_iomap_fault() to return pfn (Jan Kara)  [Orabug: 27139244]  
  - dax: Fix comment describing dax_iomap_fault() (Jan Kara)  [Orabug: 27139244]  
  - dax: Inline dax_pmd_insert_mapping() into the callsite (Jan Kara)  [Orabug: 27139244]  
  - dax: Inline dax_insert_mapping() into the callsite (Jan Kara)  [Orabug: 27139244]  
  - dax: Create local variable for vmf->flags & FAULT_FLAG_WRITE test (Jan Kara)  [Orabug: 27139244]  
  - dax: Create local variable for VMA in dax_iomap_pte_fault() (Jan Kara)  [Orabug: 27139244]  
  - dax: Factor out getting of pfn out of iomap (Jan Kara)  [Orabug: 27139244]  
  - dax: Simplify arguments of dax_insert_mapping() (Jan Kara)  [Orabug: 27139244]  
  - mm: Remove VM_FAULT_HWPOISON_LARGE_MASK (Jan Kara)  [Orabug: 27139244]  
  - mm: introduce MAP_SHARED_VALIDATE, a mechanism to safely define new mmap flags (Dan Williams)  [Orabug: 27139244]  
  - nfit_test: when clearing poison, also remove badrange entries (Vishal Verma)  [Orabug: 27139244]  
  - libnvdimm, badrange: remove a WARN for list_empty (Vishal Verma)  [Orabug: 27139244]  
  - nfit_test: add error injection DSMs (Dave Jiang)  [Orabug: 27139244]  
  - libnvdimm: move poison list functions to a new 'badrange' file (Dave Jiang)  [Orabug: 27139244]  
  - acpi, nfit: add support for NVDIMM_FAMILY_INTEL v1.6 DSMs (Dan Williams)  [Orabug: 27139244]  
  - acpi, nfit: hide unknown commands from nmemX/commands (Dan Williams)  [Orabug: 27139244]  
  - MAINTAINERS: Add entry for device DAX (Ross Zwisler)  [Orabug: 27139244]  
  - libnvdimm, namespace: make a couple of functions static (Colin Ian King)  [Orabug: 27300246]  
  - libnvdimm: introduce 'flags' attribute for DIMM 'lock' and 'alias' status (Dan Williams)  [Orabug: 27300246]  
  - acpi, nfit: add support for the _LSI, _LSR, and _LSW label methods (Dan Williams)  [Orabug: 27300241]  
  - acpi nfit: nfit_test supports translate SPA (Yasunori Goto)  [Orabug: 27300232]  
  - acpi nfit: Enable to show what feature is supported via ND_CMD_CALL for nfit_test (Yasunori Goto)  [Orabug: 27300232]  
  - nfit_test Make private definitions to command emulation (Yasunori Goto)  [Orabug: 27300232]  
  - dax: pr_err() strings should end with newlines (Arvind Yadav)  [Orabug: 27300232]  
  - x86,xen: correct dma_get_required_mask() for Xen PV guests (David Vrabel)  [Orabug: 27145524]  
  - dma: add dma_get_required_mask_from_max_pfn() (David Vrabel)  [Orabug: 27145524]  
  - x86: add support for crashkernel=auto (Brian Maly)  [Orabug: 27234070]  
  - modsign: Add key for module signing (Eric Snowberg)  [Orabug: 27199070]  
  - kernel: VirtBox workaround for dynamically allocated text (Mike Kravetz)  [Orabug: 27199037]  
  - Allow mce to reset instead of panic on UE (Ashok Vairavan)  [Orabug: 24745271]  
  - perf tools: add --sym-lookup arg to enable symbol lookup in hugepage shm segment (ashok.vairavan)  [Orabug: 27199027]  
  - logging errors that get masked to EIO inside drivers/block/loop.c (Manjunath Patil)  [Orabug: 27198869]  
  - oracleasm: Kernel interface tweaks for 4.14 (Martin K. Petersen)  [Orabug: 27133176]  
  - oracleasm: Kernel interface changes for 4.12 (Divya Indi)  [Orabug: 27133176]  
  - oracleasm: Copy the integrity descriptor (Martin K. Petersen)  [Orabug: 27133176]  
  - oracleasm: Integrity profile has moved (Martin K. Petersen)  [Orabug: 27133176]  
  - oracleasm: Add support for inline bio error reporting (Martin K. Petersen)  [Orabug: 27133176]  
  - oracleasm: Fix trace output for warn_asm_ioc and check_asm_ioc (Martin K. Petersen)  [Orabug: 27133176]  
  - oracleasm: Fix occasional I/O stall due to merge error (Martin K. Petersen)  [Orabug: 27133176]  
  - oracleasm: Classify device connectivity issues as global errors (Martin K. Petersen)  [Orabug: 20117903]  
  - oracleasm: Deprecate mlog and implement support for tracepoints (Martin K. Petersen)  [Orabug: 27133176]  
  - oracleasm: Abolish mlog usage in integrity.c and clean up error printing. (Martin K. Petersen)  [Orabug: 27133176]  
  - oracleasm: Various code and whitespace cleanups. (Martin K. Petersen)  [Orabug: 27133176]  
  - oracleasm: 4.0 compat changes (Martin K. Petersen)  [Orabug: 27133176]  
  - oracleasm: Compat changes for 3.18 (Martin K. Petersen)  [Orabug: 27133176]  
  - oracleasm: claim FMODE_EXCL access on disk during asm_open (Srinivas Eeda)  [Orabug: 19454829]  
  - oracleasm: Restrict logical block size reporting (Martin K. Petersen)  [Orabug: 27133176]  
  - oracleasm: Report logical block size (Martin K. Petersen)  [Orabug: 27133176]  
  - oracleasm: Compat changes for 3.10 (Martin K. Petersen)  [Orabug: 27133176]  
  - oracleasm: Add support for new error return codes from block/SCSI (Martin K. Petersen)  [Orabug: 17484923]  
  - oracleasm: Compat changes for 3.8 (Martin K. Petersen)  [Orabug: 27133176]  
  - oracleasm: Compat changes for 3.5 (Dwight Engen)  [Orabug: 27133176]  
  - oracleasm: Introduce module parameter for block size selection (Martin K. Petersen)  [Orabug: 15924773]  
  - oracleasm: Data integrity support (Martin K. Petersen)  [Orabug: 27133176]  
  - oracleasm: Fix two merge errors (Martin K. Petersen)  [Orabug: 27133176]  
  - Oracle ASM Kernel Driver (Martin K. Petersen)  [Orabug: 27133176]  
  - uek-rpm: Add Mellanox drivers neeeded for Exadata to base_modules (Victor Erminpour)  [Orabug: 27300509]  
  - uek-rpm: Enable Mellanox hardware kernel config options for UEK5. (Victor Erminpour)  [Orabug: 27300509]  
  - uek-rpm: Disable CONFIG_DMA_CMA in UEK5 kernel config (Victor Erminpour)  [Orabug: 27201411]  
  - uek-rpm: Enable CONFIG_IMA_DEFAULT_HASH=sha256 (Victor Erminpour)  [Orabug: 27186234]  
  - uek-rpm: Enable CGROUP config in the UEK5 kernel (Victor Erminpour)  [Orabug: 25974804]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.14.14-2.el7uek]
changelog:
  - Initialize fiblink list head during fib initialization (Dave Carroll)  [Orabug: 27199026]  
  - block: loop: Enable directIO whenever possible (Dave Kleikamp)  [Orabug: 27194729]  
  - revert commit ff8fb335221e2c446b0d4cbea26be371fd2feb64 (Tariq Saeed)  [Orabug: 27199045]  
  - ocfs2: make 'buffered' as the default coherency option (Wengang Wang)  [Orabug: 27199044]  
  - ocfs2: fix a performance issue with synced buffer io (Ryan Ding)   
  - ocfs2: call ocfs2_abort when journal abort (Ryan Ding)   
  - ocfs2/trivial: Limit unaligned aio+dio write messages to once per day (Sunil Mushran)  [Orabug: 27199146]  
  - ocfs2/trivial: Print message indicating unaligned aio+dio write (Sunil Mushran)  [Orabug: 27199145]  
  - ocfs2: Tighten free bit calculation in the global bitmap (Sunil Mushran)  [Orabug: 27199147]  
  - ocfs2: Suppress the error message from being printed in ocfs2_rename (Xiaowei.Hu)  [Orabug: 27199148]  
  - Replace max_t() with sub_positive() in dequeue_entity_load_avg() (Gayatri Vasudevan)  [Orabug: 27229053]  
  - uek-rpm: Kernel config settings needed to support TCP-BBR (Victor Erminpour)  [Orabug: 27110608]  
  - uek-rpm: enable and configure PMEM/DAX for UEK (Victor Erminpour)  [Orabug: 27201433]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.14.14-1.el7uek]
changelog:
  - uek-rpm: enable DTrace. (Nick Alcock)  [Orabug: 27124490]  
  - uek-rpm: emit vmlinux.ctfa into -base package. (Nick Alcock)  [Orabug: 27124490]  
  - uek-rpm: set CONFIG_DTRACE depending on the value of with_dtrace (Nick Alcock)  [Orabug: 27124490]  
  - dtrace: increase instruction limit for FBT entry probe detection (Kris Van Hees)  [Orabug: 27410612]  
  - dtrace: set message to data area instead of text (David Mc Lean)  [Orabug: 27415801]  
  - dtrace: include for task_stack_page reference (David Mc Lean)  [Orabug: 27415821]  
  - dtrace: replace use of RESTORE REGS and REMOVE GPREGS macros (David Mc Lean)  [Orabug: 27415838]  
  - dtrace: Add dynamic debug support (Tomas Jedlicka)  [Orabug: 27396551]  
  - dtrace: handle failed allocations during probe providing (Tomas Jedlicka)  [Orabug: 27161612]  
  - dtrace: fix panic caused by unload of a provider module (Tomas Jedlicka)  [Orabug: 27161661]  
  - dtrace: Allocate DTrace's private data directly in kernel (Tomas Jedlicka)  [Orabug: 27161712]  
  - dtrace: lock text_mutex during instruction patching (Tomas Jedlicka)  [Orabug: 27381927]  
  - DTrace: IO wait probes b_flags can contain incorrect operation (Nicolas Droux)  [Orabug: 27229849]  
  - uek-rpm: Add signing options for aarch64 (Tom Saeger)  [Orabug: 27255646]  
  - uek-rpm: add aarch64 config files (Allen Pais)  [Orabug: 27255646]  
  - uek-rpm: add support for aarch64 (Allen Pais)  [Orabug: 27255646]  
  - PCI: Vulcan: AHCI PCI bar fix for Broadcom Vulcan early silicon (Ashok Kumar Sekar)  [Orabug: 27283543]  
  - ahci: thunderx2: Fix for errata that affects stop engine (Jayachandran C)  [Orabug: 27283537]  
  - config: CONFIG_FRAME_POINTER_UNWINDER is CONFIG_UNWINDER_FRAME_POINTER in 4.14.8 (Kris Van Hees)  [Orabug: 27419674]  
  - uek-rpm: create base config files for UEK5 (Victor Erminpour)  [Orabug: 26942304]  
  - uek-rpm: Enable signed modules (Dhaval Giani)  [Orabug: 27162491]  
  - uek-rpm: Downgrade linux-firmware version (Dhaval Giani)  [Orabug: 27162498]  
  - uek-rpm: define base_sublevel as 14 after pull of mainline stable 4.14.14 (Chuck Anderson)  [Orabug: 26942304]  
  - uek-rpm: Temporarily disable doc build (Chuck Anderson)  [Orabug: 26942304]  
  - uek-rpm: Add build dependencies to avoid build errors (Somasundaram Krishnasamy)  [Orabug: 26942304]  
  - uek-rpm: Add RPM build environment for UEK5 (Somasundaram Krishnasamy)  [Orabug: 26942304]  
  - ksplice: add sysctls for determining Ksplice features. (Jamie Iles)  [Orabug: 27119699]  
  - KSPLICE: clear the stack before going in the freezer. (Quentin Casasnovas)  [Orabug: 27119699]  
  - KSPLICE: avoid going in the __refrigerator without unwinding the stack. (Quentin Casasnovas)  [Orabug: 27119699]  
  - KSPLICE: do not skip tasks with TIF_KSPLICE_FREEZING. (Quentin Casasnovas)  [Orabug: 27119699]  
  - KSPLICE: Provide an interface to freeze tasks (Sasha Levin)  [Orabug: 27119699]  
  - dtrace: Fix NFS warnings when DTrace is disabled (Tomas Jedlicka)  [Orabug: 27255341]  
  - dtrace: do not use copy_from_user when accessing kernel stack (Kris Van Hees)  [Orabug: 27256839]  
  - dtrace: fix arg5 and up retrieval for FBT entry probes on x86 (Kris Van Hees)  [Orabug: 27256839]  
  - ctf: make rpm-pkg fails to run 'make ctf' (Nick Alcock)  [Orabug: 27246897]  
  - ctf: fix thinko preventing linking of out-of-tree modules when CTF is off (Nick Alcock)  [Orabug: 27215305]  
  - ctf: allow dwarf2ctf to run as root but produce no output (Nick Alcock)  [Orabug: 27205686]  
  - gitignore: ignore modules_thick.builtin (Tom Saeger)  [Orabug: 27236438]  
  - dtrace: fix compile errors on non-supported arch (Tom Saeger)  [Orabug: 27236438]  
  - kallsyms: remove use of bash in Makefile (Tom Saeger)  [Orabug: 27236438]  
  - kallsyms: fix use of 'ar' for CROSS_COMPILE (Tom Saeger)  [Orabug: 27236438]  
  - dtrace: Add SDT include to the qspinlock (Tomas Jedlicka)  [Orabug: 27161306]  
  - dtrace: DTrace state is freeing state pointers into wrong allocator (Tomas Jedlicka)  [Orabug: 27161626]  
  - dtrace: Fix warning in dtrace_sync() (Tomas Jedlicka)  [Orabug: 27161687]  
  - dtrace: SDT probes cause panic when kaslr is enabled (Tomas Jedlicka)  [Orabug: 27211706]  
  - dtrace: non-x86 builds fails due to mismerge of UAPI Kbuild configuration (Tomas Jedlicka)  [Orabug: 27165620]  
  - dtrace: ensure SDT stub function returns 0 (Kris Van Hees)  [Orabug: 26904796]  
  - dtrace: update xfs io probes to use bio bi_disk and bi_partno (Nicolas Droux)   
  - dtrace: The kmod module layout is wrong. (Tomas Jedlicka)   
  - dtrace: systrace cmpxchg complains about wrong type size (Tomas Jedlicka)   
  - dtrace: Fix broken dtrace_is_exec_addr (Tomas Jedlicka)   
  - dtrace: Fix build time warnings (Tomas Jedlicka)   
  - dtrace: syscall provider does not fall back to slow syscall path (Tomas Jedlicka)   
  - dtrace: remove NOFAULT protection from dtrace_getpcstack() (Kris Van Hees)   
  - dtrace lockstat provider probes (Alan Maguire)  [Orabug: 26149674] [Orabug: 26149956]  
  - ctf: pass the constituents of thin archives to dwarf2ctf (Nick Alcock)   
  - ctf: rip out the builtin_modules array (Nick Alcock)   
  - dtrace: Update walltimestamp to use latch interface (Tomas Jedlicka)   
  - dtrace: revive dtrace_gethrtime() (Tomas Jedlicka)  [Orabug: 26861864]  
  - ctf, kallsyms: properly blank out modules_thick.builtin (Nick Alcock)   
  - ctf: Fix offset of nested struct/unions during members inlining (Tomas Jedlicka)   
  - dtrace: fix trap handling for DTrace (Kris Van Hees)   
  - dtrace: fix retrieval of FBT entry probe arguments beyond the 5th (Kris Van Hees)  [Orabug: 26974281]  
  - dtrace: export modules list as dtrace_modules (Kris Van Hees)   
  - dtrace: fixup: change from CPU notifier to hotplug callbacks (Kris Van Hees)   
  - ctf: delete the deduplication blacklist (Nick Alcock)  [Orabug: 26765112]  
  - ctf: automate away the deduplication blacklist (Nick Alcock)  [Orabug: 26765112]  
  - ctf: drop CONFIG_DT_DISABLE_CTF, ctf.ko, and all that it implies (Nick Alcock)  [Orabug: 25815362]  
  - ctf: do not allow dwarf2ctf to run as root (Nick Alcock)  [Orabug: 25815362]  
  - ctf, kallsyms: support thin archives. (Nick Alcock)   
  - ctf: decouple CTF building from the kernel build (Nick Alcock)  [Orabug: 25815362]  
  - ctf: handle the bit_offset in members with a DW_FORM_block data_member_location (Nick Alcock)  [Orabug: 26387109]  
  - ctf: handle DW_AT_specification (Nick Alcock)  [Orabug: 26386100]  
  - dtrace: modules provide called from rcu atomic section (Tomas Jedlicka)  [Orabug: 26680982]  
  - dtrace: Implement high precision walltimestamp (Tomas Jedlicka)  [Orabug: 25883559]  
  - dtrace: fix lquantize for 32-bit overflow on values (Eugene Loh)  [Orabug: 26268136]  
  - dtrace: cyclics taking lock in atomic context (Tomas Jedlicka)  [Orabug: 26782572]  
  - dtrace: should not sleep in idr code paths (Tomas Jedlicka)  [Orabug: 26680802]  
  - dtrace: Removal of XCalls from dtrace_sync() (Tomas Jedlicka)  [Orabug: 26671843]  
  - dtrace: implement tracemem optional third arg (dyn size) (Eugene Loh)  [Orabug: 26223475]  
  - dtrace: implement llquantize log/linear aggregation (Eugene Loh)  [Orabug: 26675659]  
  - dtrace: IO provider unused variables when DTrace is disabled (Nicolas Droux)  [Orabug: 26570995]  
  - dtrace: failing to allocate more ECB space can cause a crash (Kris Van Hees)  [Orabug: 26503342]  
  - dtrace: work around libdtrace-ctf bug (Nick Alcock)  [Orabug: 26583958]  
  - dtrace: dtrace.ko won't build when DT_DISABLE_CTF is set (Tomas Jedlicka)  [Orabug: 26587631]  
  - dtrace: Integrate DTrace Modules into kernel proper (Tomas Jedlicka)  [Orabug: 26585689]  
  - dtrace: fixed for v4.12rc2 (Kris Van Hees)   
  - dtrace: Make dynamic variable cleanup self-throtling (Tomas Jedlicka)  [Orabug: 26385177]  
  - dtrace: Restore deadman original timing values (Tomas Jedlicka)  [Orabug: 26385159]  
  - dtrace: DTrace state deadman must use dtrace_sync() (Tomas Jedlicka)  [Orabug: 26385102]  
  - dtrace: FBT module support and SPARCs return probes (Tomas Jedlicka)  [Orabug: 26384179] [Orabug: 26384765]  
  - dtrace: fix spec file for 0.6.1-2 (Kris Van Hees)   
  - dtrace: FBT entry probes will now use int3 (Kris Van Hees)  [Orabug: 26190412] [Orabug: 26174895]  
  - dtrace: support x86 CPUs with SMAP (Nick Alcock)  [Orabug: 26166784]  
  - dtrace: fix spec file for 0.6.1-1 (Kris Van Hees)   
  - dtrace: ensure ustackdepth returns correct value (Kris Van Hees)  [Orabug: 25949692]  
  - dtrace: different probe trigger instruction for entry vs return (Kris Van Hees)  [Orabug: 25949048]  
  - dtrace: support passing offset as arg0 to FBT return probes (Kris Van Hees)  [Orabug: 25949086]  
  - dtrace: improve probe execution debugging (Kris Van Hees)   
  - dtrace: correct mutex_* subroutines (Kris Van Hees)  [Orabug: 26044447]  
  - dtrace: canload() for input of *_ntop(), *_nto*() (Nick Alcock)   
  - dtrace: implement link_ntop() DTrace subroutine logic (Girish Moodalbail)  [Orabug: 25931479]  
  - dtrace: update spec file for 0.6.0-4 (Kris Van Hees)   
  - dtrace: enforce inlining of dtrace_dif_variable (Kris Van Hees)  [Orabug: 25872472]  
  - dtrace: change files to comply with include ref change for uaccess.h (David Mc Lean)   
  - dtrace: idr_remove() now returns non-void (Nick Alcock)   
  - dtrace: adding include for signal for send_sig reference (David Mc Lean)   
  - dtrace: NEWS and spec file for 0.6.0-3 (Kris Van Hees)   
  - DTrace walltime lock-free implementation (Tomas Jedlicka)  [Orabug: 25715256]  
  - dtrace: incorrect aframes value and wrong logic messes up caller and stack (Kris Van Hees)  [Orabug: 25727046]  
  - dtrace: ensure we pass a limit to dtrace_stacktrace for stackdepth (Kris Van Hees)  [Orabug: 25559321]  
  - dtrace: get rid of dtrace_gethrtime() (Kris Van Hees)   
  - dtrace: update NEWS and spec file for 0.6.0-2 (Kris Van Hees)   
  - dtrace: comtinuing the FBT implementation and fixes (Kris Van Hees)  [Orabug: 21220305] [Orabug: 24829326]  
  - dtrace: handle modular IPv6 (Nick Alcock)  [Orabug: 25557554]  
  - dtrace: introduce and use typedef in6_addr_t (Alan Maguire)  [Orabug: 25557554]  
  - dtrace: update NEWS and spec file (Kris Van Hees)   
  - dtrace: function boundary tracing (FBT) implementation (Kris Van Hees)  [Orabug: 21220305] [Orabug: 24829326]  
  - dtrace: SDT cleanup and bring in line with kernel (Kris Van Hees)   
  - dtrace: make appropriate lock->owner change to adjust to change 3ca0ff57 (David Mc Lean)   
  - dtrace: (modules) remove tv64 references per change 2456e855 (David Mc Lean)   
  - dtrace: add missing header (Nick Alcock)   
  - dtrace: adjust for v4.9 fs/gs -> fsbase/gsbase renaming (Nick Alcock)   
  - dtrace: fix preemption checks (Kris Van Hees)   
  - dtrace: when calling all modules do not forget kernel (Kris Van Hees)   
  - dtrace: remove cleanup_module support (Kris Van Hees)   
  - dtrace: is-enabled probes for SDT (Kris Van Hees)  [Orabug: 25143173]  
  - dtrace: 0.6.0 specfile and NEWS. (Nick Alcock)   
  - dtrace: test the new DTRACE_PROBE() n-argument macro (Nick Alcock)  [Orabug: 24678897]  
  - dtrace: add a test probe with an empty translation or two (Nick Alcock)  [Orabug: 24661801]  
  - dtrace: parse sdpd_args to handle sdt_getargdesc() rather than hardwiring (Nick Alcock)  [Orabug: 24661801]  
  - Specfile adjustments for 0.5.4 release to autobuilders. (Nick Alcock)   
  - SPEC: dtrace-module specfile revamp. (Nick Alcock)   
  - dtrace: USDT SPARC parts (Nick Alcock)  [Orabug: 24455245]  
  - dtrace: split arch-dependent parts out of fasttrap (Nick Alcock)  [Orabug: 24455245]  
  - Release 0.5.3-2. (Nick Alcock)   
  - dtrace: version 0.5.3 (Kris Van Hees)   
  - dtrace: migrate pdata size assertion out of generic code (Nick Alcock)   
  - dtrace: ensure pdata and sdt_tab handling works on module reload (Kris Van Hees)  [Orabug: 23331667]  
  - dtrace: add the perf provider to SDT (Nick Alcock)  [Orabug: 23004534]  
  - dtrace: version 0.5.2 (Kris Van Hees)   
  - dtrace: apply stack bias to user stack walks on SPARC (Nick Alcock)  [Orabug: 22629102]  
  - dtrace: use current_user_stack_pointer() (Nick Alcock)  [Orabug: 22629102]  
  - dtrace: use copy_from_user() when walking userspace stacks (Nick Alcock)  [Orabug: 22629102]  
  - dtrace: do not overrun the start of the user stack (Nick Alcock)  [Orabug: 22629102]  
  - dtrace: fix access to uregs[R_L7] (Nick Alcock)  [Orabug: 22602870]  
  - dtrace: correct probe disable behaviour for syscalls (Kris Van Hees)  [Orabug: 22352636]  
  - dtrace: fix typo in date field in %changelog (Kris Van Hees)   
  - dtrace: Updated NEWS and spec files for 0.5.1-1 (Kris Van Hees)   
  - dtrace: avoid installonly-related kernel upgrade failure (Nick Alcock)  [Orabug: 21669543]  
  - dtrace: Support Linux-specific handling of envp / argv in psinfo (Kris Van Hees)  [Orabug: 21984854]  
  - dtrace: add missing dtrace_*canload() for copyout() and copyoutstr(). (Nick Alcock)   
  - dtrace: ensure dt_perf does not clash with dt_test (Kris Van Hees)  [Orabug: 21814949]  
  - dtrace: enable building on SPARC64 architecture. (Kris Van Hees)   
  - dtrace: provide OL6 and OL7 spec file with new features (Kris Van Hees)   
  - dtrace: update NEWS for new 0.5.0 version (Kris Van Hees)   
  - Fix spelling of %endif in specfile. (Nick Alcock)   
  - dtrace: only sparc64 uses sdt_tab in pdata (Kris Van Hees)   
  - dtrace: NEWS and spec file for 0.5.0 (Kris Van Hees)   
  - dtrace: apply sdt_instr_t change to asm_instr_t (Kris Van Hees)   
  - dtrace: fold NOPF into NOFAULT handling (Kris Van Hees)   
  - dtrace: improve debugging output (Kris Van Hees)   
  - dtrace: kernel provides SDT trampoline area on SPARC (Kris Van Hees)  [Orabug: 21220344]  
  - dtrace: record current IP as frame 0 in ustack (Kris Van Hees)   
  - dtrace: validate argument pointer to d_path() (Kris Van Hees)  [Orabug: 21304207]  
  - dtrace: update NEWS and specfile for 0.4.5 (Kris Van Hees)   
  - dtrace: support USDT for 32-bit applications on 64-bit hosts (Kris Van Hees)  [Orabug: 21219315]  
  - dtrace: use the initial user namespace in suitable {from,make}_kuid() calls (Nick Alcock)   
  - dtrace: use the current user namespace for DIF_VAR_[UG]ID lookups (Nick Alcock)   
  - dtrace: support sparc64 on appropriate kernels. (Nick Alcock)   
  - Revise dependencies to get out of the shadow of dtrace-modules-headers. (Nick Alcock)  [Orabug: 20508087]  
  - dtrace: no longer expose kuid_t in the userspace dtrace API (Nick Alcock)   
  - dtrace: percpu: move from __get_cpu_var() to this_cpu_ptr() (Nick Alcock)   
  - dtrace: fix dtrace_helptrace_buffer memory leak (Kris Van Hees)  [Orabug: 20514336]  
  - dtrace: support building on UEK4 (Kris Van Hees)  [Orabug: 20456825]  
  - dtrace: add support for DTrace on sparc64 (Kris Van Hees)  [Orabug: 19005048]  
  - dtrace: restructuring to support DTrace on multiple architectures (Kris Van Hees)  [Orabug: 20262965]  
  - dtrace: add .gitignore file (Kris Van Hees)  [Orabug: 20266608]  
  - dtrace: Updated NEWS and specfile (Kris Van Hees)   
  - dtrace: ensure one can try to get user pages without locking or faulting (Kris Van Hees)  [Orabug: 18653713]  
  - dtrace: Improve dtrace_getufpstack() (locks, stack detection, faults) (Nick Alcock)  [Orabug: 18412802]  
  - dtrace: Updated NEWS and specfile (Kris Van Hees)   
  - dtrace: update NEWS and spec file for 0.4.3-2 (Kris Van Hees)   
  - Drop CPU_DTRACE_NOFAULT manipulation in progenyof(). (Nick Alcock)  [Orabug: 18412802]  
  - Drop CPU_DTRACE_NOFAULT manipulation around ustack calls. (Nick Alcock)  [Orabug: 18412802]  
  - Pass down the tgid to userspace in u{stack,sym,mod,addr}(). (Nick Alcock)  [Orabug: 18412802]  
  - Fix the pid and ppid variables in multithreaded processes. (Nick Alcock)  [Orabug: 18412802]  
  - dtrace: NEWS and specfile update for 0.4.3 (Kris Van Hees)   
  - dtrace: add support for profile-* probes (Kris Van Hees)  [Orabug: 18323513]  
  - Updated specfile for 0.4.2-3. (Nick Alcock)   
  - Have the new dtrace-modules-provider-headers obsolete the old. (Nick Alcock)  [Orabug: 18061595]  
  - Remove kernel version from name of dtrace-modules-provider-headers package. (Nick Alcock)  [Orabug: 18061595]  
  - dtrace: updated spec file and NEWS (Kris Van Hees)   
  - dtrace: Fix RPM dependencies. (Kris Van Hees)  [Orabug: 17804881]  
  - dtrace: vtimestamp implementation (Kris Van Hees)  [Orabug: 17741477]  
  - dtrace: implement SDT in kernel modules (Kris Van Hees)  [Orabug: 17851716]  
  - dtrace: fix conditionals for changelog composition (Kris Van Hees)   
  - dtrace: make the release tag dependent on the kernel version (Kris Van Hees)   
  - dtrace: fix changelog for 0.4.0 series (Kris Van Hees)   
  - dtrace: support auto-building of dtrace-module for UEK kernels (Kris Van Hees)   
  - dtrace: prepare spec file for errata release (3.87.13-16.2.1/0.4.1-3) (Kris Van Hees)   
  - dtrace: Updated NEWS and spec file (Kris Van Hees)   
  - dtrace: provide a corrected implementation of the 'errno' D variable (Kris Van Hees)  [Orabug: 17704568]  
  - dtrace: Updated specfile and NEWS (Kris Van Hees)   
  - dtrace: fix lock ordering issues, mutex_owned(), and mutex debugging (Kris Van Hees)  [Orabug: 17624236]  
  - dtrace: ensure userspace stack memory access cannot page fault (Kris Van Hees)  [Orabug: 17591351]  
  - dtrace: ensure speculation buffer cleaning does not race with buffer freeing (Kris Van Hees)  [Orabug: 17553446]  
  - dtrace: reject enabling is referencing module fails and do not count it (Kris Van Hees)   
  - dtrace: ensure state is free'd after use (memleak fix) (Kris Van Hees)   
  - dtrace: align module code with new cyclics API (Kris Van Hees)  [Orabug: 17553446]  
  - dtrace: update getufpstack implementation to be safer (Kris Van Hees)  [Orabug: 17591351]  
  - dtrace: armour ustack() against kernel threads, !task->mm, and corrupt usersp. (Nick Alcock)  [Orabug: 17591351]  
  - dtrace: Ensure that provider names are unique in the context of a PID (Kris Van Hees)  [Orabug: 17476663]  
  - dtrace: ensure &tp->ftt_mtp is set to 0s for is-enabled probes also (Kris Van Hees)   
  - dtrace: Update NEWS (Kris Van Hees)   
  - dtrace: Various memory allocation fixes (leaks, footprint reduction, ...) (Kris Van Hees)  [Orabug: 17488207]  
  - dtrace: UEK3 build -16 (Kris Van Hees)   
  - dtrace: prevent Oops caused by preemption issues with probes (Kris Van Hees)  [Orabug: 17403196]  
  - dtrace: fix for psinfo allocation during execve (Kris Van Hees)  [Orabug: 17407069]  
  - dtrace: General cleanup of debug info and fix syscall probe module name. (Kris Van Hees)   
  - dtrace: fixes for the module build (Kris Van Hees)   
  - dtrace: remove debugging code (Kris Van Hees)   
  - dtrace: Ensure that USDT probes are carried over correctly across fork(). (Kris Van Hees)  [Orabug: 17346878]  
  - dtrace: Fix frame offsets for direct called probes (ERROR and syscalls). (Kris Van Hees)  [Orabug: 17368166]  
  - dtrace: fix retrieval of arg5 through arg9 (Kris Van Hees)  [Orabug: 17368166]  
  - Bug fix for logic to determine the (inode, offset) pair for uprobes. (Kris Van Hees)   
  - Ensure memory allocation results are checked throughout the code. (Kris Van Hees)   
  - Bug fix for fasttrap module unloading. (Kris Van Hees)   
  - Remove pre-alpha features for release. (Kris Van Hees)   
  - Bug fix for module unloading. (Kris Van Hees)   
  - Fix fasttrap ioctls and headers_check. (Nick Alcock)   
  - Re-enable DTrace ioctl()-size debugging. (Nick Alcock)   
  - Add RPM changelog. (Nick Alcock)   
  - Add a warning to be displayed when tracepoint enabling fails. Update NEWS. (Kris Van Hees)   
  - Fix provider header requirements. (Nick Alcock)   
  - SPEC: Changes for UEK merge. (Nick Alcock)   
  - Boost ustackframes_default. (Nick Alcock)   
  - Make old_rsp available to kernel modules. (Kris Van Hees)   
  - Remove unnecessary 32-bit code. (Kris Van Hees)   
  - Clean up ioctl debugging output, and remove dtrace_ioctl_sizes(). (Kris Van Hees)   
  - Add debugging for enablings. (Kris Van Hees)   
  - Ensure that the fasttrap device file can be opened. (Kris Van Hees)   
  - Fix format string errors in buffer storage debugging messages. (Nick Alcock)   
  - Drop stack debugging messages. (Nick Alcock)   
  - SPEC: Fix the name of the kernel development package in BuildRequires. (Nick Alcock)   
  - SPEC: Boost the associated kernel version to 3.8.12. (Nick Alcock)   
  - Ensure that arg6 through arg9 get retrieved correctly for USDT probes. (Kris Van Hees)   
  - Finish the implementation of is-enabled USDT probes. (Kris Van Hees)   
  - Fixes for tracepoint cleanup. (Kris Van Hees)   
  - Fixes for locking issues and cleanup workqueue handling. (Kris Van Hees)   
  - Update syscall tracing in view of Linux 3.8 changes. (Kris Van Hees)   
  - USDT implementation (phase 2). (Kris Van Hees)   
  - Fix to exclude stack addresses from pcstack. (Kris Van Hees)   
  - Revamp and split up DTrace headers. Add ioctl() debugging machinery. (Nick Alcock)   
  - OS/arch specific ustack implementation. (Kris Van Hees)   
  - Ensure PID is passed as first element for ustack. (Kris Van Hees)   
  - Revert "stack() / jstack(): Send PID to userspace." (Kris Van Hees)   
  - stack() / jstack(): Send PID to userspace. (Nick Alcock)   
  - Adding more compile time debugging for development. (Kris Van Hees)   
  - USDT implementation (Phase 1). (Kris Van Hees)   
  - Add basic development debugging framework. (Kris Van Hees)   
  - Update copyright statements. (Kris Van Hees)   
  - Disable providers that do not work. (Kris Van Hees)   
  - Differentiate between multi-providers and meta-providers. (Kris Van Hees)   
  - Adding missing build specs for dt_perf. (Kris Van Hees)   
  - Remove unnecessary and inconsistemt use of argument name in prototypes. (Kris Van Hees)   
  - Clean up a file that is no longer used. (Kris Van Hees)   
  - Internal performance measurement support code. (Kris Van Hees)   
  - Miscellaneous 3.6 porting work. (Kris Van Hees)   
  - DTrace-independent CTF. (Nick Alcock)   
  - Type and grammar fix. (Kris Van Hees)   
  - Fix name of lwp-create and lwp-exit probes in SDT argument mappings. (Kris Van Hees)   
  - Add NEWS file. (Kris Van Hees)   
  - SPEC: Rename the DTrace kernel to kernel-uek-dtrace-. (Nick Alcock)   
  - Fix depmod invocation on RPM %post-installation. (Nick Alcock)   
  - Add a specfile. (Nick Alcock)   
  - Additional action support (and bug fixes). (Kris Van Hees)   
  - Change the DTrace startup handling (at boot time) for SDT. (Kris Van Hees)   
  - Cleanup (and adding) of SDT probe points. (Kris Van Hees)   
  - Remove remnant of internal, for-my-use-only test code. (Kris Van Hees)   
  - DIF_SUBR_RW_READ_HELD's parameter should be an rwlock_t. (Nick Alcock)   
  - Force dtrace_ctf.ko to be loaded whenever dtrace.ko is. (Nick Alcock)   
  - Missing file. (Kris Van Hees)   
  - - sched-tick SDT probe. - FBT probe point discovery and probe creation. - Moving code around for the kernel pseudo-module handling since it gets used by both the SDT code and the FBT code. (Kris Van Hees)   
  - Add argument description info for SDT probes. (Kris Van Hees)   
  - Implement refcount handling in DTrace modules to ensure that they cannot be unloaded while probes are enabled. (Kris Van Hees)   
  - New DTrace option DTRACEOPT_QUIETRESIZE, and accordingly-boosted DTRACEOPT_MAX. (Nick Alcock)   
  - Changed from using mutex_is_locked() to a new mutex_owned(), in support of the Solaris MUTEX_HELD() macro. The former was merely testing whether the mutex was locked, whereas the real test needed here is whether the mutex is held by the current thread. (Kris Van Hees)   
  - Make all allocations that are allowed to fail atomic, and surpress warnings about out-of-memory conditions, since they are not harmful. Also, do not allow DTrace allocations to access the emergency pools. (Kris Van Hees)   
  - Fix signed division and modulo operations in DIF. Ensure that SDT probe points are patched with a NOP sequence at boot time. Remove debugging output during SDT registration. (Kris Van Hees)   
  - Forgot to commit the changes to the header file. (Kris Van Hees)   
  - The idr_empty() macro is no longer needed. (Kris Van Hees)   
  - Fix for incorrect handling of BUFSIZE = 0. The handling of aggregations was flawed in that even without any ECBs with aggregation, the code logic was assuming there was at least one aggregation (the sentinel in the IDR). The handling of the aggregations IDR in the DTrace state has been updated to use an explicit counter because the IDR functionality does not provide us with an API function to determine the amount of elements in the IDR. (Kris Van Hees)   
  - Initial values for min and max aggregate functions were incorrectly set to be UINT64 values rather than INT64 values, causing the initial minimum value to be -1, and the initial maximum value to be 0. Corrected to be INT64 values. (Kris Van Hees)   
  - Ensure that the trap handler is regisstered only once. Register with first use, (Kris Van Hees)   
  - Ensure that the die notifier hook is installed whenever DTrace is enabled, since page fault and general protection fault handling depends on it, and that is needed for safe memory access support in DTrace. (Kris Van Hees)   
  - Support for page fault and general protection fault detection for DTrace, to ensure that DTrace memory access faults are non-fatal. (Kris Van Hees)   
  - SDT implementation (core kernel support for providing a list of static probe points for the kernel pseudo-module, dtrace SDT meta-provider support, ...). Also, new script (dtrace_sdt.sh) to extract locations of SDT probe points in the core kernel. (Kris Van Hees)   
  - Enable processing the SDT probe point info at boot time (before SMP is actually enabled), if DTrace SDT support has been enabled (built-in or as module). For now, provide some verbose info on the probe points getting resolved. (Kris Van Hees)   
  - Fix resolving addresses of relocation records for SDT probe points. The addresses were being calculated based on the wrong starting point (_stext whereas it ought to be _text), and the base was not taken into account. Fixed the writing of NOPs in the location of the probe point calls, since the existing case was causing kernel paging faults. Made the add_nops() function in alternative.c non-static so it can be used in sdt_register. Use add_nops() to select the most appropriate NOP sequence for replacing the probe point call, and write the NOPs using text_poke(). (Kris Van Hees)   
  - Fixed the allocation of cyclics that was the cuase for some obscure crashes during the testsuite execution. Problem was that cyclics were being allocated in chunks, with a new array being allocated as (prev-size + chink-size), and then the old entries being copied over. However, because the hrtimer struct is embedded in the cyclic struct, this meant that hrtimer structs were being moved outside the hrtimer code. (Kris Van Hees)   
  - Handle the case where regs (during cyclic processing) is NULL. This indicates a bug but with this code change we'll survive that case and simply not have meaningful PC and UPC values as argument to the probe, which is better than a full scale OOPS due to NULL pointer dereference. (Kris Van Hees)   
  - Removed dead code (was #if 0 ... #endif). Cleaned up ;; -> ;. (Kris Van Hees)   
  - Implementation for tracing stub-based system calls. Due to the need for specialized code handling (mainly passing in a pt_regs structure as one of the arguments), some syscalls are called through a stub in assembly code. We duplicate the stub cdode in dtrace_stubs_x86_64.S, but instead of calling the actual syscall implementation code call our own syscall-specific handler, which ensures that entry and return probes are called as enabled, and then call the underlying implementation directly for handling the syscall. (Kris Van Hees)   
  - Stacktrace dumping has been moved to the GPL-licensed dtrace_os.c because it depends on a symbol that is exported as GPL-only. Functionality in dtrace_isa that requires stacktrace dumping can now use dtrace_stacktrace(). (Kris Van Hees)   
  - Fix porting issues from 2.6.32 to 2.6.39. Disable stub_* based syscalls (for now). (Kris Van Hees)   
  - Move cyclic.h into include/linux. (Nick Alcock)   
  - Finish GPL/CDDL splitting work. (Nick Alcock)   
  - Set MODULE_LICENSE to CDDL. (Nick Alcock)   
  - CDDL copyrights for everything needing it. (Nick Alcock)   
  - Initial commit of DTrace. (Nick Alcock)   
  - dtrace: update FBT blacklist for x86_64 (Kris Van Hees)   
  - dtrace: fix compilation with O= (Nick Alcock)  [Orabug: 26167475]  
  - dtrace: v4.13 changes to waitfd related code (David Mc Lean)   
  - dtrace: change to newer field references for 'struct module' (David Mc Lean)   
  - dtrace: remove .tv64 in cyclic.c to make appropriate for newer kernels (David Mc Lean)   
  - dtrace: add references to blacklist for new idr_find definition (David Mc Lean)   
  - dtrace: adjust references to modification of struct bio (David Mc Lean)   
  - dtrace: change references from REQ_WRITE to REQ_OP_WRITE (David Mc Lean)   
  - dtrace: FBT module support and SPARCs return probes (Tomas Jedlicka)  [Orabug: 26414392] [Orabug: 26414402]  
  - dtrace: Add support for manual triggered cyclics (Tomas Jedlicka)  [Orabug: 26384803]  
  - dtrace: LOW level cyclics should use workqueues (Tomas Jedlicka)  [Orabug: 26384779]  
  - dtrace: add kprobe-unsafe addresses to FBT blacklist (Kris Van Hees)  [Orabug: 26324039]  
  - dtrace: convert FBT blacklist to RB-tree (Kris Van Hees)  [Orabug: 26324039]  
  - dtrace: io provider probes for nfs (Nicolas Droux)  [Orabug: 26145701]  
  - ctf: fix a variety of memory leaks and use-after-free bugs (Nick Alcock)  [Orabug: 26323755]  
  - DTrace: IP provider use-after-free for drop-out probe points (Alan Maguire)  [Orabug: 25924594]  
  - dtrace: improve io provider coverage (Nicolas Droux)  [Orabug: 25816537]  
  - dtrace: proc:::exit should trigger only if thread group exits (Tomas Jedlicka)  [Orabug: 25904298]  
  - ctf: prevent modules on the dedup blacklist from sharing any types at all (Nick Alcock)  [Orabug: 26137220]  
  - ctf: emit bitfields in in-memory order (Nick Alcock)  [Orabug: 25815129]  
  - ctf: bitfield support (Nick Alcock)  [Orabug: 25815129]  
  - ctf: emit file-scope static variables (Nick Alcock)  [Orabug: 25962387]  
  - ctf: speed up the dwarf2ctf duplicate detector some more (Nick Alcock)  [Orabug: 25815306]  
  - ctf: strdup() -> xstrdup() (Nick Alcock)  [Orabug: 25815306]  
  - ctf: speed up the dwarf2ctf duplicate detector (Nick Alcock)  [Orabug: 25815306]  
  - ctf: add module parameter to simple_dwfl_new() and adjust both callers (Nick Alcock)   
  - ctf: fix the size of int and avoid duplicating it (Nick Alcock)  [Orabug: 25815129]  
  - ctf: allow overriding of DIE attributes: use it for parent bias (Nick Alcock)  [Orabug: 25815129]  
  - DTrace tcp/udp provider probes (Alan Maguire)  [Orabug: 25815197]  
  - dtrace: define DTRACE_PROBE_ENABLED to 0 when !CONFIG_DTRACE (Nick Alcock)  [Orabug: 26145788]  
  - dtrace: ensure limit is enforced even when pcs is NULL (Kris Van Hees)  [Orabug: 25949692]  
  - dtrace: make x86_64 FBT return probe detection less restrictive (Kris Van Hees)  [Orabug: 25949048]  
  - dtrace: support passing offset as arg0 to FBT return probes (Kris Van Hees)  [Orabug: 25949086]  
  - dtrace: make FBT entry probe detection less restrictive on x86_64 (Kris Van Hees)  [Orabug: 25949030]  
  - dtrace: adjust FBT entry probe dection for OL7 (Kris Van Hees)  [Orabug: 25921361]  
  - dtrace: change search_exception_tables to dynamic blacklist (Vincent Lim)   
  - added binfmts.h to adjust sched.h split work in 4.11 (Vincent Lim)   
  - dtrace: add new field pos_mod_end adjust; redefined kallsym_iter v4.11 (David Mc Lean)   
  - dtrace: Remove blacklist refs to undeclared v4.11 'idr_find_slowpath' (David Mc Lean)   
  - dtrace: Add includes for task and mm references required for v4.11 (David Mc Lean)   
  - dtrace: adjust to removed pmd_trans_splitting() for v4.10 (David Mc Lean)   
  - dtrace: remove unused variables (David Mc Lean)   
  - dtrace: fix dtrace_kmod->core_layout regression (David Mc Lean)   
  - dtrace: remove CFI annotations and GET_THREAD_INFO (David Mc Lean)   
  - dtrace: extend support passing return value from trap handlers for v4.10 (David Mc Lean)   
  - dtrace: remove tv64 references as 2456e855 for v4.10 (David Mc Lean)   
  - dtrace: make lock->owner change, adjusting to 3ca0ff57 for v4.10 (David Mc Lean)   
  - dtrace: touching the stack guard page is not always fatal (Kris Van Hees)   
  - dtrace: fix handling of save_stack_trace sentinel (x86 only) (Kris Van Hees)  [Orabug: 25727046]  
  - dtrace: DTrace walltime lock-free implementation (Tomas Jedlicka)  [Orabug: 25715256]  
  - dtrace: get rid of dtrace_gethrtime (Kris Van Hees)   
  - dtrace: continuing the FBT implementation and fixes (Kris Van Hees)  [Orabug: 21220305] [Orabug: 24829326]  
  - dtrace: ensure DTrace can use get_user_pages safely (Kris Van Hees)  [Orabug: 25640153]  
  - dtrace: enable paranoid mode and IST shift for xen_int3 (Kris Van Hees)  [Orabug: 25580519]  
  - dtrace: ensure we skip the entire SDT probe point (Kris Van Hees)  [Orabug: 25557283]  
  - dtrace: add ip SDT provider (Alan Maguire)  [Orabug: 25557554]  
  - dtrace: function boundary tracing (FBT) (Kris Van Hees)  [Orabug: 21220305] [Orabug: 24829326]  
  - dtrace: add support for passing return value from trap handlers (Kris Van Hees)  [Orabug: 25312278]  
  - dtrace: ensure that our die notifier gets executed amongst the first (Kris Van Hees)   
  - mm: export __get_user_pages again (Nick Alcock)   
  - dtrace: move away from CPU notifiers to the new state machine (Nick Alcock)   
  - dtrace: add missing header (Nick Alcock)   
  - dtrace: header additions for v4.8 (Nick Alcock)   
  - dtrace: allow invop handler to specify number of insns to skip (Nick Alcock)   
  - dtrace: is-enabled probes for SDT (Nick Alcock)  [Orabug: 25143173]  
  - dtrace: eliminate need for arg counting in sdt macros (Nick Alcock)  [Orabug: 24678897]  
  - dtrace: augment SDT probes with type information (Nick Alcock)  [Orabug: 24661801]  
  - dtrace: import the sdt type information into per-sdt_probedesc state (Nick Alcock)  [Orabug: 24661801]  
  - dtrace: record SDT and perf probe types in a new ELF section (Nick Alcock)  [Orabug: 24661801]  
  - dtrace: ensure new SDT info generation works on sparc64 (Kris Van Hees)  [Orabug: 24655168]  
  - dtrace: rework kernel sdtinfo generation to be more accurate (Kris Van Hees)  [Orabug: 24655168]  
  - ctf: fix CONFIG_CTF && !CONFIG_DTRACE and CONFIG_DT_DISABLE_CTF (Nick Alcock)  [Orabug: 23859082]  
  - dtrace: better Kconfig documentation (Nick Alcock)   
  - dtrace: put the SDT perf probes in the perf provider namespace (Nick Alcock)  [Orabug: 23004534]  
  - dtrace: make perf-events probes separately configured (Nick Alcock)  [Orabug: 23004534]  
  - dtrace: ensure pdata is large enough (Kris Van Hees)  [Orabug: 23004534]  
  - dtrace: use perf_events probes (Timothy J Fontaine)  [Orabug: 23004534]  
  - dtrace: add support for probes in sections other than .text (Kris Van Hees)  [Orabug: 23344927]  
  - dtrace, ctf: build sdtstubs and CTF after sdtinfo; sdtinfo follows modpost (Nick Alcock)   
  - dtrace: support SDT in single-file modules (Nick Alcock)  [Orabug: 23316392]  
  - dtrace: remove stub syscalls on x86 (Nick Alcock)   
  - kallsyms: adjust kallmodsyms code to mod_kallsyms symtab changes (Nick Alcock)   
  - dtrace: adjust to module core_layout changes in v4.5. (Nick Alcock)   
  - dtrace: support multiple instances of the same probe in a function (Kris Van Hees)  [Orabug: 22514493]  
  - dtrace: ensure signal-handled is fired with correct signal (Kris Van Hees)  [Orabug: 22573604]  
  - dtrace: ensure that PID 0 has a psinfo struct (Kris Van Hees)  [Orabug: 22561297]  
  - dtrace: syscall stubs CFI removal and cleanup (Nick Alcock)   
  - dtrace: adjust for calling.h move on x86 in 4.3. (Nick Alcock)   
  - dtrace: cater to do_fork() changes in 4.3. (Nick Alcock)   
  - kbuild: Set objects.builtin dependency to bzImage for CONFIG_CTF (Jerry Snitselaar)  [Orabug: 17510915] [Orabug: 22329011]  
  - dtrace: ensure return value of access_process_vm() is > 0 (Todd Vierling)  [Orabug: 22295336]  
  - dtrace: fire proc:::signal-send for queued signals too (Nick Alcock)  [Orabug: 22027302]  
  - dtrace: correct signal-handle probe semantics (Kris Van Hees)  [Orabug: 21974641]  
  - dtrace: remove trailing space in psargs (Kris Van Hees)  [Orabug: 21974606]  
  - kallsyms: unbreak kallmodsyms after CONFIG_KALLMODSYMS addition (Nick Alcock)  [Orabug: 21539840]  
  - kallsyms: de-ifdef kallmodsyms (Nick Alcock)  [Orabug: 21539840]  
  - dtrace: use syscall_get_nr() to obtain syscall number (Kris Van Hees)  [Orabug: 21630345]  
  - dtrace: only call dtrace functions when CONFIG_DTRACE is set (Kris Van Hees)  [Orabug: 21647525]  
  - dtrace: ensure SDT module probes work with NORX (Kris Van Hees)  [Orabug: 21630297]  
  - dtrace: prevent the stack protector from breaking syscall tracing. (Nick Alcock)  [Orabug: 21630345]  
  - kallsyms: make it possible to disable /proc/kallmodsyms (Nick Alcock)  [Orabug: 21539840]  
  - dtrace: accomodate changes in the 4.1 kernel for sparc64 (Kris Van Hees)   
  - dtrace: implement dtrace_handle_badaddr() for x86 (Kris Van Hees)   
  - dtrace: ignore any and all PFs during NOFAULT memory acceses (Kris Van Hees)   
  - dtrace: do not allocate space for trampolines when probec = 0 (Kris Van Hees)   
  - dtrace: convert from sdt_instr_t to asm_instr_t 2of2 (Kris Van Hees)  [Orabug: 21220305]  
  - dtrace: convert from sdt_instr_t to asm_instr_t 1of2 (Kris Van Hees)  [Orabug: 21220305]  
  - dtrace: allocate space for SDT trampolines using module_alloc (Kris Van Hees)  [Orabug: 21220344]  
  - dtrace: accomodate changes in the 4.1 kernels (Kris Van Hees)   
  - kallsyms: fix /proc/kallmodsyms to not be misled by const variables (Nick Alcock)  [Orabug: 21257163]  
  - kallsyms: fix /proc/kallmodsyms to not be misled by external symbols (Nick Alcock)  [Orabug: 21172433]  
  - wait: change waitfd() to use wait4(), not waitid(); reduce invasiveness (Nick Alcock)  [Orabug: 21245371]  
  - dtrace: use a nonzero reference count on the fake module (Nick Alcock)   
  - dtrace: percpu: move from __get_cpu_var() to this_cpu_ptr() (Nick Alcock)   
  - dtrace: x86: Cater for new instruction size limit in instruction decoder (Nick Alcock)   
  - mm: memcontrol: adjust prototype to allow for poll_wait_fixed() changes. (Nick Alcock)   
  - dtrace: zero-initialize the fake vmlinux module's pdata space (Nick Alcock)  [Orabug: 19005031]  
  - dtrace: remove obsolete function (Kris Van Hees)  [Orabug: 20456825]  
  - dtrace: make it possible to call do_sigaltstack() (Kris Van Hees)  [Orabug: 20456825]  
  - dtrace: do not vmalloc/vfree from probe context (Kris Van Hees)  [Orabug: 20456889]  
  - dtrace: fix dtrace_sdt.sh for UEK4 (Kris Van Hees)  [Orabug: 20456825]  
  - ctf: update dwarf2ctf documentation. (Nick Alcock)  [Orabug: 20229506]  
  - ctf: speed up dwarf2ctf by avoiding ctf_update() calls (Nick Alcock)  [Orabug: 20229506]  
  - ctf: move the module->ctf_file info into a structure. (Nick Alcock)  [Orabug: 20229506]  
  - ctf: duplicate-detect dependent types properly (Nick Alcock)  [Orabug: 20229431]  
  - Remove BUILD_BUG_ON for epitem size code to compile. (Nick Alcock)  [Orabug: 20456825]  
  - dtrace: stub syscall fixes for 3.18. (Nick Alcock)  [Orabug: 20456825]  
  - ctf: Prohibit a bunch of debug info options we don't support. (Nick Alcock)  [Orabug: 20456825]  
  - dtrace: add support for sparc64 3of3 (Kris Van Hees)  [Orabug: 19005031]  
  - dtrace: add support for sparc64 2of3 (Kris Van Hees)  [Orabug: 19005031]  
  - dtrace: add support for sparc64 1of3 (Kris Van Hees)  [Orabug: 19005031]  
  - dtrace: restructuring for multi-arch support (Kris Van Hees)  [Orabug: 20262965]  
  - dtrace: set ARCH_SUPPORTS_DTRACE for x86_64 (Kris Van Hees)  [Orabug: 20262965]  
  - dwarf2ctf: don't use O_PATH in rel_abs_file_name(). (Jamie Iles)  [Orabug: 19957565]  
  - dwarf2ctf: don't leak directory fd. (Jamie Iles)  [Orabug: 19957565]  
  - ctf: handle srcdir-relative paths properly. (Nick Alcock)  [Orabug: 19712731]  
  - kbuild/ctf: Fix out-of-tree module build when CONFIG_CTF=n. (Nick Alcock)  [Orabug: 19078361]  
  - dtrace: support order-only-prerequisites for sdtstub generation (Kris Van Hees)  [Orabug: 18906444]  
  - dtrace: ensure that building outside src tree works (Kris Van Hees)  [Orabug: 18691341]  
  - dtrace: ensure one can try to get user pages without locking or faulting (Kris Van Hees)  [Orabug: 18653173]  
  - mm / dtrace: Allow DTrace to entirely disable page faults. (Nick Alcock)  [Orabug: 18412802]  
  - mm: allow __get_user_pages() callers to avoid triggering page faults. (Nick Alcock)  [Orabug: 18412802]  
  - dtrace: implement omni-present cyclics (Kris Van Hees)  [Orabug: 18323501]  
  - gitignore: update .gitignore with generated SDT files (Nick Alcock)  [Orabug: 17851716]  
  - dtrace: avoid unreliable entries in stack() output (Kris Van Hees)  [Orabug: 18323450]  
  - dtrace: fix leaking psinfo objects (Kris Van Hees)  [Orabug: 18383027]  
  - ctf: spot non-struct/union/enum children of DW_TAG_structure_type (Nick Alcock)  [Orabug: 18117464]  
  - ctf: capture all DIEs with structs/enums as their ultimate supertype (Nick Alcock)  [Orabug: 18117464]  
  - ctf: handle structure and union offsets in form DW_FORM_data1 (Nick Alcock)  [Orabug: 18117464]  
  - ctf: cater for elfutils 0.156 change in dwfl_report_elf() prototype (Nick Alcock)  [Orabug: 18117421]  
  - dtrace: vtimestamp implementation (Kris Van Hees)  [Orabug: 17741477]  
  - dtrace: implement SDT in kernel modules (Kris Van Hees)  [Orabug: 17851716]  
  - dtrace: remove functionality of dtrace_os_exit() as deprecated (Kris Van Hees)  [Orabug: 17717401]  
  - dtrace: fix mutex_owned() implementation (Kris Van Hees)  [Orabug: 17624236]  
  - dtrace: new cyclic implementation (Kris Van Hees)  [Orabug: 17553446]  
  - dtrace: Use tasklet_hrtimer_*() instead of hrtimer_*() for cyclics (Kris Van Hees)  [Orabug: 17553446]  
  - dtrace: fix for psinfo allocation during execve (Kris Van Hees)  [Orabug: 17407069]  
  - kbuild/ctf: Use shell expansion, not $(wildcard ...), for CTF section copying. (Nick Alcock)  [Orabug: 17445637]  
  - kbuild/ctf: always build vmlinux when building CTF. (Jamie Iles)  [Orabug: 17397200]  
  - dtrace: remove unnecessary exported symbol (Kris Van Hees)  [Orabug: 17346878]  
  - dtrace: Ensure that USDT probes are carried over correctly across fork(). (Kris Van Hees)  [Orabug: 17346878]  
  - dtrace: fix retrieval of arg5 through arg9 (Kris Van Hees)  [Orabug: 17368166]  
  - dtrace: Ensure that task_struct members are initialized correctly (Kris Van Hees)   
  - dtrace: ensure that builds in a separate objdir work (Kris Van Hees)  [Orabug: 17369799]  
  - ctf: ensure the CTF directory exists before writing the filelist (Nick Alcock)  [Orabug: 17363469]  
  - ctf: avoid command-line length limits by passing .o filenames via a file (Nick Alcock)  [Orabug: 17363469]  
  - dtrace: DT_FASTTRAP should select UPROBE_EVENT (Jerry Snitselaar)  [Orabug: 17325699]  
  - dtrace: Fix for the argument validation code. (Kris Van Hees)  [Orabug: 17313687]  
  - dtrace: Include asm/current.h for the mutex_owned() fucntion. (Kris Van Hees)  [Orabug: 17313687]  
  - dtrace: Bug fix for logic to determine the (inode, offset) pair for uprobes. (Kris Van Hees)   
  - dtrace: ensure memory allocation results are checked throughout the code (Kris Van Hees)   
  - dtrace: remove pre-alpha features for release (Kris Van Hees)   
  - dtrace: CONFIG_UPROBES is needed by CONFIG_DT_FASTTRAP, not CONFIG_DTRACE (Nick Alcock)   
  - dtrace: CONFIG_DTRACE should depend on CONFIG_UPROBES (Nick Alcock)   
  - epoll, wait: introduce poll_wait_fixed(), and use it in waitfds (Nick Alcock)   
  - ctf: no longer reference 'ctf.ko.unsigned' in CTF debuginfo stripping machinery (Nick Alcock)   
  - wait: add waitfd(), and a testcase for it (Nick Alcock)   
  - dtrace: ensure that arg6 through arg9 get retrieved correctly for USDT probes (Kris Van Hees)   
  - dtrace: finish the implementation of is-enabled USDT probes (Kris Van Hees)   
  - dtrace: fixes for tracepoint cleanup (Kris Van Hees)   
  - dtrace: update syscall tracing in view of Linux 3.8 changes (Kris Van Hees)   
  - dtrace: USDT implementation (phase 2) (Kris Van Hees)   
  - dtrace: revamp and split up DTrace headers; add ioctl() debugging machinery (Nick Alcock)   
  - ctf: blacklist certain structure members entirely (Nick Alcock)   
  - ctf: repair faulty indentation (Nick Alcock)   
  - ctf: split the absolute-file-name caching machinery out of type_id() (Nick Alcock)   
  - ctf: sentinelize str_appendn() (Nick Alcock)   
  - dtrace: update execve() syscall probe support (Kris Van Hees)   
  - dtrace: add support for an SDT probe getting called from multiple functions (Kris Van Hees)   
  - dtrace: move SDT call location for surrender probe (Kris Van Hees)   
  - dtrace: USDT implementation (Phase 1) (Kris Van Hees)   
  - dtrace: remove incorrect FBT support code (Kris Van Hees)   
  - dtrace: move psinfo to its own header file (Kris Van Hees)   
  - dtrace: update copyright statements (Kris Van Hees)   
  - ctf: update the shared CTF file right after initialization (Nick Alcock)   
  - ctf: Improve debugging and indentation fixes (Nick Alcock)   
  - ctf: dwarf2ctf doc revisions (Nick Alcock)   
  - dtrace: internal performance measurement support code (Kris Van Hees)   
  - ctf: cosmetic improvements to CTF linking (Nick Alcock)   
  - dtrace: remove a few obsolete probes (Kris Van Hees)   
  - dtrace: cater for changes in the way the kernel is linked (Kris Van Hees)   
  - dtrace: miscellaneous 3.6 porting work (Kris Van Hees)   
  - dtrace: fix up rq.dtrace_cpu_info member (Kris Van Hees)   
  - gitignore: Ignore objects.builtin and dwarf2ctf. (Nick Alcock)   
  - dtrace: fix outright typos in the 3.6 forward-port. (Nick Alcock)   
  - dtrace: remove obsolete static probe documentation (Kris Van Hees)   
  - ctf: DTrace-independent CTF (Nick Alcock)   
  - ctf: do not build in CTF data for no-longer-built-in modules (Nick Alcock)   
  - ctf: document dwarf2ctf (Nick Alcock)   
  - ctf: Extend the deduplication blacklist (Nick Alcock)   
  - ctf: Improve error message on internal deduplication error (Nick Alcock)   
  - ctf: Note a future enhancement (Nick Alcock)   
  - ctf: document parameters to die_to_ctf() (Nick Alcock)   
  - ctf: do not construct objects.builtin if CTF is not being built (Nick Alcock)   
  - ctf: do not build dwarf2ctf nor attempt to use it if !CONFIG_DTRACE (Nick Alcock)   
  - dtrace: additional action support (and bug fixes) (Kris Van Hees)   
  - dtrace: add psinfo/cpuinfo OS level support (Kris Van Hees)   
  - dtrace: change the DTrace startup handling (at boot time) for SDT (Kris Van Hees)   
  - dtrace: cleanup (and adding) of SDT probe points (Kris Van Hees)   
  - ctf: write the CTF files for standalone modules to a subdir of the module dir (Nick Alcock)   
  - ctf: unnamed structure/union support (Nick Alcock)   
  - ctf: recurse_ctf() -> die_to_ctf() (Nick Alcock)   
  - ctf: fix the signed-modules case (Nick Alcock)   
  - ctf: correctly propagate IDs for array types (Nick Alcock)   
  - ctf: fix off-by-one in emitted array bounds (Nick Alcock)   
  - ctf: blacklist certain modules from deduplication (Nick Alcock)   
  - ctf: include enumeration types inside functions (Nick Alcock)   
  - dtrace: new IO and sched provider probes (Kris Van Hees)   
  - dtrace: fix to handle multiple SDT-based probes in a single function (Kris Van Hees)   
  - dtrace: require assembler symbol stripping and debug info (Nick Alcock)   
  - ctf: fix array dimensions (Nick Alcock)   
  - ctf: change the name of the CTF section in kernel modules (Nick Alcock)   
  - dtrace: fix a bug in the SDT probe location generator (Kris Van Hees)   
  - ctf: major duplicate detection fixes (Nick Alcock)   
  - ctf: optimize type_id() and fix array dimension lookup (Nick Alcock)   
  - dtrace: changed the logic for determining SDT probe point locations (Kris Van Hees)   
  - ctf: store away the types and names of non-static global variables (Nick Alcock)   
  - ctf: set the name of the parent of child modules to "dtrace_ctf" (Nick Alcock)   
  - ctf: clarify comments, improve a type name (Nick Alcock)   
  - ctf: force dtrace_ctf.ko to be loaded whenever dtrace.ko is (Nick Alcock)   
  - ctf: generate CTF information for the kernel (Nick Alcock)   
  - kallsyms: provide symbol sizes in /proc/kallmodsyms (Nick Alcock)   
  - ctf: add a dummy dtrace_ctf.ko module (Nick Alcock)   
  - kallsyms: fix /proc/kallmodsyms population bugs (Nick Alcock)   
  - kallsyms: work in a clean tree, and a non-modular tree. (Nick Alcock)   
  - kallsyms: work with older glibc. (Nick Alcock)   
  - kallsyms: add /proc/kallmodsyms (Nick Alcock)   
  - dtrace: add sched-tick SDT probe and FBT probe point discovery/creation (Kris Van Hees)   
  - dtrace: use new mutex_owned(), not mutex_is_locked() (Kris Van Hees)   
  - dtrace: fix signed division and modulo operations in DIF (Kris Van Hees)   
  - dtrace: initialize the insn length in the right branch of the die notifier (Nick Alcock)   
  - dtrace: ensure that the trap handler is regisstered only once (Kris Van Hees)   
  - dtrace: install the die notifier hook whenever DTrace is enabled (Kris Van Hees)   
  - dtrace: support for page fault and general protection fault detection (Kris Van Hees)   
  - dtrace: fix incorrect probe point name (Kris Van Hees)   
  - dtrace: add lwp-exit and lwp-create SDT probe points (Kris Van Hees)   
  - dtrace: SDT implementation (Kris Van Hees)   
  - dtrace: process the SDT probe point info early in boot (Kris Van Hees)   
  - dtrace: fix resolving addresses of relocation records for SDT probe points (Kris Van Hees)   
  - dtrace: fix cyclic allocation (Kris Van Hees)   
  - dtrace: stub-based syscall tracing (Kris Van Hees)   
  - dtrace: migrate stacktrace dumping and move headers about: fix reloc overrun (Kris Van Hees)   
  - dtrace: move cyclic.h into include/linux (Nick Alcock)   
  - dtrace: finish GPL/CDDL splitting work (Nick Alcock)   
  - dtrace: fix GPL and CDDL copyright notices (Nick Alcock)   
  - dtrace: Migrate to a standalone module, situated at the top level of the tree (Nick Alcock)   
  - dtrace: changes in how we collect the names of system calls (Kris Van Hees)   
  - dtrace: add dtrace_gethrtime() and fix walltimestamp. (Kris Van Hees)  [Orabug: 18376038]  
  - dtrace: syscall entry/return probes. (Kris Van Hees)   
  - dtrace: conflict with CONFIG_DEBUG_LOCK_ALLOC (Nick Alcock)   
  - dtrace: update sdt provider (sdt_mod.c) with lots of functions (Randy Dunlap)   
  - dtrace: add dtrace_module_loaded() and dtrace_module_unloaded() (Randy Dunlap)   
  - dtrace: added CONFIG_DT_DEBUG_MUTEX option (Kris Van Hees)   
  - dtrace: turn on gcov profiling in the kernel/dtrace directory by default (Nick Alcock)   
  - dtrace: add dt_test provider. (Kris Van Hees)   
  - dtrace: add Documentation/dtrace_static_probes.txt (Randy Dunlap)   
  - dtrace: remove incorrect header comments and copyright (Randy Dunlap)   
  - dtrace: build sdt_register.c into the kernel (Nick Alcock)   
  - dtrace: add missing include needed for DTrace probes (Nick Alcock)   
  - dtrace: convert relative probepoint relocation addresses to absolute (Randy Dunlap)   
  - dtrace: add some dtrace static probes that are easy to trigger (Randy Dunlap)   
  - dtrace: add FTRACE dependency (Kris Van Hees)   
  - dtrace: Remove debugging statements (Kris Van Hees)   
  - dtrace: fix unintended dependency on section ordering (Randy Dunlap)   
  - dtrace: minimal cyclic implementation and debug code. (Kris Van Hees)   
  - dtrace: DT_SYSTRACE should not depend on FTRACE_SYSCALLS. (Kris Van Hees)   
  - dtrace: fix off-by-one reading relocation info. (Randy Dunlap)   
  - dtrace: use _stext in dtrace_relocs. (Randy Dunlap)   
  - dtrace: Fix compilation when modular. (Kris Van Hees)   
  - dtrace: systrace should depend on FTRACE_SYSCALLS. (Randy Dunlap)   
  - dtrace: Initial import of kernelspace code. (Nick Alcock)   
  - Linux 4.14.14 (Greg Kroah-Hartman)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1.0.8-6
changelog:
  - Fix duplicate documentation (#1001256) by not using %doc
  - Turn on verbose build output via V=1 make
  - Use %?_isa in -devel base package dep


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 1.0.4-6
changelog:
  - Minor tweaks to summaries and descriptions.
  - Don't own /usr/include/X11.
  - Use a regular, unversioned dep on xorg-x11-filesystem.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "Requires: xorg-x11-proto-devel"
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libICE to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libICE to version 0.99.1 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Renamed package to remove "xorg-x11" from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro


author: Kalev Lember <kalev@smartlink.ee> - 2.26.2-2
changelog:
  - Co-own /usr/share/gtk-doc/ directory (#604407)
  - Dropped pkgconfig dep from -devel subpackage which is now automatically added


author: Denis Leroy <denis@poolshark.org> - 2.25.1.3-1
changelog:
  - Update to upstream 2.25.1.3
  - Package pangomm libdir directory with config include header
  - Fix documentation location


author: Adrian Reber <adrian@lisas.de> - 3.12-0.1
changelog:
  - Updated to 3.12 (pre-release)
  - Create libs subpackage
  - Build against SELinux (Fedora and RHEL8)
  - Build against libbsd (Fedora)


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.6-2
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.3-5
changelog:
  - Python 2 binary package renamed to python2-criu
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Adrian Reber <areber@redhat.com> - 1.6.1-2
changelog:
  - removed criu.service (CVE-2015-5228, CVE-2015-5231)
  - removed devel sub-package (related to above CVEs)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-42
changelog:
  - Add systemd support (thanks to Zbigniew Jędrzejewski-Szmek and Jóhann B. Guðmundsson)
    Resolves: #737219


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-37
changelog:
  - Improve message with response directions to reflect new option
    for user names with dot character


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.17-34
changelog:
  - Add dist tag, fix buildroot, defattr, obsoletes, provides and summary,
    comment patches and sources
    Resolves: #226476


author: Marcela Mašláňová <mmaslano@redhat.com> 3.37-3
changelog:
  - 677179 filter internal xml_split::state from requires and call filter properly
  - add new BR, which is now in Fedora


author: Chris Weyl <cweyl@alumni.drew.edu> 3.34-1
changelog:
  - update prov/dep filtering to current guidelines
  - auto-update to 3.34 (by cpan-spec-update 0.01)
  - added a new br on perl(ExtUtils::MakeMaker) (version 0)
  - altered br on perl(XML::Parser) (0 => 2.23)


author: Robin Norwood <rnorwood@redhat.com> - 3.29-4
changelog:
  - Resolves: rhbz#247247
  - Remove bogus Provides: perl(XML::XPathEngine::NodeSet), and move
    Requires filter into spec file.


author: David Lehman <dlehman@redhat.com> - 3.1.3-3
changelog:
  - spec file requires fixes from pcahyna
  - adjust to older pyudev API
  - adjust tags implementation to absence of enum in python-2.7
  - fix bare imports in example scripts
  - update factory example to match latest API


author: Pavel Cahyna <pcahyna@redhat.com> - 3.1.3-2
changelog:
  - Initial import of python-blivet3 by David Lehman <dlehman@redhat.com>
    derived from python-blivet-3.1.2-1
  - clear the old python-blivet %changelog except the most recent entry.


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.3-1
changelog:
  - Don't crash if blockdev mpath plugin isn't available. (#1672971) (dlehman)
  - iscsi: Add default value to unused 'storage' argument in 'write' (vtrefny)
  - Add exported property to LVMVolumeGroupDevice (vtrefny)
  - Add VG data to static_data (vtrefny)
  - Do not try to get format free space for non-existing formats (vtrefny)
  - Do not raise exception if can't get PV free space (vtrefny)
  - Fix undefined attribute in LVM info cache (vtrefny)
  - Use raw_device to get thinpool device in LVMThinPFactory (#1490174) (vtrefny)
  - Do not crash if DM RAID activation fails (#1661712) (vtrefny)
  - Remove the unused sysroot property (vponcova)
  - Remove unused attributes from the Blivet class (vponcova)
  - Remove the unused gpt flag (vponcova)
  - Copy the iSCSI initiator name file to the installed system (vtrefny)
  - Use udev to determine if disk is a multipath member. (dlehman)
  - Require libfc instead of fcoe for offloaded FCoE. (#1575953) (dlehman)


author: Petr Pisar <ppisar@redhat.com> 6.00-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Remove BuildRoot stuff
  - Conflict with perl-libwww-perl-5* and older


author: Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-10
changelog:
  - Updated the default configuration file. New defaults contributed
    by Steve Grubb.
    Resolves: rhbz#1304334


author: Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-6
changelog:
  - warn if processing prelinked binary objects and the prelink binary
    is not available
    Resolves: rbhz#1004826


author: Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-4
changelog:
  - added patch to fix aide in FIPS mode
  - use only FIPS approved digest algorithms in aide.conf so that
    aide works by default in FIPS mode


author: Steve Grubb <sgrubb@redhat.com> - 0.14-3
changelog:
  - Fix bz 590561 aide does not detect the change of SElinux context
  - Fix bz 590566 aide reports a changed file when it has not been changed


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0.12-3.20061027cvs
changelog:
  - CAUTION! This changes the database format and results in a report of
    false inconsistencies until an old database file is updated.
  - Check out CVS 20061027 which now contains Red Hat's
    acl/xattr/selinux/audit patches.
  - Patches merged upstream.
  - Update manual page substitutions.


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0.12-1
changelog:
  - Update to 0.12 release.
  - now offers --disable-static, so -no-static patch is obsolete
  - fill last element of getopt struct array with zeroes


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0.11-1
changelog:
  - Update to 0.11 release.
  - useless-includes patch merged upstream.
  - old Russian man pages not available anymore.
  - disable static linking.


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.10-0.fdr.1
changelog:
  - Update to 0.10 release.
  - memleaks patch merged upstream.
  - rootpath patch merged upstream.
  - fstat patch not needed anymore.
  - Updated URL.


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.10-0.fdr.0.1.cvs20031104
changelog:
  - Only tar.gz available upstream.
  - byacc not needed when bison -y is available.
  - Installed Russian manual pages.
  - Updated with changes from CVS (2003-11-04).
  - getopt patch merged upstream.
  - bison-1.35 patch incorporated upstream.


author: Petr Pisar <ppisar@redhat.com> - 6.02-1
changelog:
  - 6.02 bump
  - HTTPS support unbundled by upstream to break depency cycle in CPAN utilities.
    Install or depend on perl(LWP::Protocol::https) explicitly, if you need
    HTTPS support.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 5.837-2
changelog:
  - Add missing ':' to filter_from_requires perl(HTTP::GHTTP).
  - filter_from_provides /perl(HTTP::Headers)$/d instead of /perl(HTTP::Headers)/d.


author: Marcela Mašláňová <mmaslano@redhat.com> 5.816-1
changelog:
  - update to 5.816
  - fix #465855 - install --aliases by default
  - use upstream patch for previous problem (see rt 38736)


author: Robin Norwood <rnorwood@redhat.com> - 5.808-4
changelog:
  - Fix various issues from package review:
  - Fix tabs and spacing
  - Remove unneeded BR: perl
  - convert non-utf-8 files to utf-8
  - Resolves: bz#226268


author: Robin Norwood <rnorwood@redhat.com> - 5.808-1
changelog:
  - Update to latest CPAN version
  - Re-enable tests.  We'll see if they work now
  - Move Requires filter into spec file
  - Add Provides filter for unnecessary unversioned provides


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.19-1
changelog:
  - Rebase to supermin 5.1.19.
  - Build on s390x.
  - Add upstream signature.
  - Remove upstream patches.
    resolves: rhbz#1484890, rhbz#1484973


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-3
changelog:
  - Add all upstream patches since 5.1.15 was released.
  - These should improve boot performance and initrd size.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.15-1
changelog:
  - Rebase to supermin 5.1.15.
    resolves: rhbz#1271255
  - Create supermin5-devel package containing RPM dependency generator.


author: Richard W.M. Jones <rjones@redhat.com> - 5.1.9-1.4
changelog:
  - Completely remove dependency on prelink/execstack (RHBZ#1093261).
  - Rebuild for aarch64 and ppc64le (1125690).


author: Richard W.M. Jones <rjones@redhat.com> - 4.1.3-1
changelog:
  - New upstream version 4.1.3.
  - Remove patch which is now upstream.
  - Add examples directory to documentation.


author: Richard W.M. Jones <rjones@redhat.com> - 4.1.1-2
changelog:
  - Add upstream patch to ignore ghost non-regular files.
  - This fixes builds on Fedora 20 because the filesystem package has
    been changed so /var/lock and /var/run are marked as ghost.


author: Richard W.M. Jones <rjones@redhat.com> - 4.1.1-1
changelog:
  - New upstream version 4.1.1.
  - The program has been renamed 'supermin' from 'febootstrap'.
  - Obsolete, but don't Provide because supermin is not a compatible replacement.
  - Use '_isa' to specify architecture of supermin-helper subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 1:3.21-2
changelog:
  - Add upstream patch to drop supplemental groups (RHBZ#902476).
  - Remove 'Group:' RPM headers which are no longer necessary.
  - Remove some commented-out requirements.


author: Richard Jones <rjones@redhat.com> - 3.15-1
changelog:
  - New upstream version 3.15.
  - This version includes root=<device> support, needed for libguestfs
    with virtio-scsi.
  - Remove upstream patch.


author: Richard Jones <rjones@redhat.com> - 3.3-4
changelog:
  - Split package into febootstrap (for building) and febootstrap-supermin-helper
    (for running).  Note that febootstrap depends on febootstrap-supermin-helper,
    but you can install febootstrap-supermin-helper on its own.


author: Richard Jones <rjones@redhat.com> - 3.0-2
changelog:
  - New upstream version 3.0 (note this is incompatible with 2.x).
  - Fix upstream URLs.
  - fakeroot, fakechroot no longer required.
  - insmod.static is required at runtime (missing dependency from earlier).
  - The only programs are 'febootstrap' and 'febootstrap-supermin-helper'.
  - BR ocaml, ocaml-findlib-devel.
  - No examples are provided with this version of febootstrap.


author: Richard Jones <rjones@redhat.com> - 2.11-1
changelog:
  - New upstream version 2.11.
  - Fixes "ext2fs_mkdir .. No free space in directory" bug which affects
    libguestfs on rawhide.


author: Richard Jones <rjones@redhat.com> - 2.10-1
changelog:
  - New upstream version 2.10.
  - Adds -u and -g options to febootstrap-supermin-helper which are
    required by virt-v2v.


author: Richard Jones <rjones@redhat.com> - 2.8-0.2
changelog:
  - New pre-release version of 2.8.
    + Note this is based on 2.7 + mailing list patches.
  - New BRs on mke2fs, libext2fs, glibc-static.


author: Richard Jones <rjones@redhat.com> - 2.7-2
changelog:
  - New upstream version 2.7.
  - febootstrap-supermin-helper shell script rewritten in C for speed.
  - This package contains C code so it is no longer 'noarch'.
  - MAKEDEV isn't required.


author: Richard Jones <rjones@redhat.com> - 2.5-2
changelog:
  - New upstream release 2.5.
  - Remove BR upx (not needed by upstream).
  - Two more scripts / manpages.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.1.0-1
changelog:
  - New version
  - Dropped office_scen patch (upstreamed)
  - Dropped hdparm patch (upstream added support for LVM)
  - Reworked rm_sudo patch


author: Jiri Skala <jskala@redhat.com> 1.0.9-4
changelog:
  - added man mages
  - splitted patch to more files
  - filled up scen file of office workload
  - updated to latest upstream sources


author: Jiri Skala <jskala@redhat.com> 1.0.8-2
changelog:
  - optimized bltk.conf - SOFFICE_PROG
  - fixed working dir in reports
  - fixed SIGHUP handling
  - finalized implementation of stop file in office and reader WLs


author: Florian Müllner <fmuellner@redhat.com> 2.34.2-1
changelog:
  - Update to 2.34.2
  - Remove patches:
    - screenshot-forkbomb.patch: screenshot keybindings have been moved
      to gnome-settings-daemon
    - workspace.patch: default preference values now defined in
      gsettings-desktop-schemas
    - default-window-icon.patch: included upstream
  - Rebase remaining patches
  - Adjust spec file to dropped GConf dependency


author: Colin Walters <walters@verbum.org> - 2.32.0-1.git20110228
changelog:
  - Upstream git snapshot
    Includes Alt-` binding which we really want for gnome-shell
  - Drop upstreamed patches
  - Switch to my auto-autogen snippet which automatically invokes configure,
    so we can build from a pure git archive
  - Instead of using autoreconf, just rm -f configure and let autogen do
    the work
  - BR gnome-common so autogen works


author: Owen Taylor <otaylor@redhat.com> - 2.30.0-5
changelog:
  - Add a patch to fix confusion between windows (rhbz #533066)
  - Add additional tweeks no_focus_windows and new_windows_always_on_top
    preferences (gnome bz 599248, gnome bz 599261)


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-15
changelog:
  - Fix crash in _IceTransClose (rhbz 551994)
    The previous patch for rhbz 539905 didn't actually fix the
    problem; the ICE connection was still being closed twice.


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-14
changelog:
  - Fix crash in in tooltip on_style_set() (rhbz 546509)
  - Fix Crash in SmcSetProperties() on exit (rhbz 539905, gnome 604867)


author: Owen Taylor <otaylor@redhat.com> - 2.28.0-13
changelog:
  - Require gnome-themes rather than nodoka-metacity-theme (rhbz 532455, Stijn Hoop)
  - Add patches for GNOME bugs
     445447 - Application-induced window raise fails when raise_on_click off (rhbz 526045)
     530702 - compiz doesn't start if metacity compositor is enabled (rhbz 537791)
     559816 - Doesn't update keybindings being disabled/cleared (rhbz 473224)
     567528 - Cannot raise windows from applications in Tcl/Tk and Java (rhbz 503522)
     577576 - Failed to read saved session file warning on new sessions (rhbz 493245)
     598231 - When Chromium rings the bell, metacity quits (rhbz 532282)
     598995 - Don't focus ancestor window on a different workspace (rhbz 237158)
     599097 - For mouse and sloppy focus, return to "mouse mode" on motion (rhbz 530261)
     599248 - Add no_focus_windows preference to list windows that shouldn't be focused (rhbz 530262)
     599261 - Add a new_windows_always_on_top preference (rhbz 530263)
     599262 - Add XFCE Terminal as a terminal
     604319 - Handle XError and XIOError for unknown displays (rhbz 537845)


author: Peter Robinson <pbrobinson@gmail.com> - 2.27.0-9
changelog:
  - Add upstreamed patch for option to force fullscreen for sugar
  - https://bugzilla.redhat.com/show_bug.cgi?id=516225


author: Lennart Poettering <lpoetter@redhat.com> - 2.27.0-7
changelog:
  - Apply another trivial patch related to sound events
  - http://bugzilla.gnome.org/show_bug.cgi?id=593358


author: Lennart Poettering <lpoetter@redhat.com> - 2.27.0-6
changelog:
  - Apply two trivial patches for bell/sound
  - http://bugzilla.gnome.org/show_bug.cgi?id=593356
  - http://bugzilla.gnome.org/show_bug.cgi?id=593355


author: Owen Taylor <otaylor@redhat.com> - 2.27.0-5
changelog:
  - Add a fix for http://bugzilla.gnome.org/show_bug.cgi?id=588119,
    remove no-longer-needed no-lame-dialog patch


author: Colin Walters <walters@redhat.com> - 2.21.8.svn3554-1
changelog:
  - Drop random macros at top of file; spec files should be as amenable
    to static analysis as possible, easing our way into the bright future
    where our software build process isn't a horrible mismash of a
    preprocessor on shell script, with manual editing required, 
    but something scriptable.
  - Update to SVN 3554, to which our patches were designed to apply
  - Readd patch metacity-2.21.13-dont-move-windows.patch, which makes
    Firefox behave as those multiple-workspace users desire.


author: Colin Walters <walters@redhat.com> - 2.21.5-2
changelog:
  - Add patch for avoiding moving windows across workspaces
    This makes clicking on links in firefox do what you want.
    http://bugzilla.gnome.org/show_bug.cgi?id=482354


author: Soren Sandmann <sandmann@redhat.com>
changelog:
  - Remove GL dependencies.
  - Remove static-cm patch
  - add patch to fix more CurrentTime race conditions (bug 206263)


author: Soren Sandmann <sandmann@redhat.com> 2.15.5-1
changelog:
  - Update metacity to a cvs snapshot, and libcm 0.0.22. (The standalone
    libcm package is being put through the package review process).


author: Ray Strode <rstrode@redhat.com> - 2.13.89.0.2006.02.17-1
changelog:
  - Update to latest cvs snapshot to give meaningful failure error
    messages
  - Don't remove build root in install, because it triggers a
    rebuild of metacity


author: Ray Strode <rstrode@redhat.com> - 2.13.89.0.2006.02.16-1
changelog:
  - Update to cvs snapshot to add the ability to 
    runtime enable compositor
  - change %makeinstall to make install DESTDIR=..


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.4.5.90
  - add little script after configure that checks what config.h
    contains, to be sure we detected all the right features.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - grow size of top resize, and display proper cursor on enter notify
  - require latest intltool to try and fix metacity.schemas by
    regenerating it in non-UTF-8 locale


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.4.0.91 with raise/lower keybindings for msf, fixes to fullscreen
  - more apps that probably intend to be, fix for changing number of
    workspaces, fix for moving windows in multihead


author: Havoc Pennington <hp@redhat.com>
changelog:
  - upgrade to cvs snap 2.4.0.90 with pile of bugfixes from 
    this weekend
  - change default theme to bluecurve and require new redhat-artwork


author: Miloslav Trmač <mitr@redhat.com> - 0.112-12
changelog:
  - Fix a memory leak in PolkitPermission.
    Patch by Rui Matos <tiagomatos@gmail.com>
    Resolves: #1433915


author: Miloslav Trmač <mitr@redhat.com> - 0.112-2
changelog:
  - Workaround pam_systemd setting broken XDG_RUNTIME_DIR
    Resolves: #1033774
  - Always use mozjs-17.0 even if js-devel is installed


author: Miloslav Trmač <mitr@redhat.com> - 0.111-1
changelog:
  - Update to polkit-0.111
    Resolves: #917888
  - Use SpiderMonkey from mozjs17 instead of js
  - Ship the signature in the srpm
  - Try to preserve timestamps in (make install)


author: Miloslav Trmač <mitr@redhat.com> - 0.110-4
changelog:
  - Shut up rpmlint about Summary:
  - Build with V=1
  - Use %{_unitdir} instead of hard-coding the path
  - Use the new systemd macros, primarily to run (systemctl daemon-reload)
    Resolves: #857382


author: Miloslav Trmač <mitr@redhat.com> - 0.110-4
changelog:
  - Make the JavaScript engine mandatory.  The polkit-js-engine package has been
    removed, main polkit package Provides:polkit-js-engine for compatibility.
  - Add Requires: polkit-pkla-compat
    Resolves: #908808


author: David Zeuthen <davidz@redhat.com> 0.108-3.el7
changelog:
  - Attempt to open the correct libmozjs185 library, otherwise polkit
    authz rules will not work unless js-devel is installed (fdo #57146)


author: David Zeuthen <davidz@redhat.com> 0.108-1.el7
changelog:
  - Update to upstream release 0.108
  - Drop upstreamed patches
  - This release dynamically loads the JavaScript interpreter and can
    cope with it not being available. In this case, polkit authorization
    rules are not processed and the defaults for an action - as defined
    in its .policy file - are used for authorization decisions.
  - Add new meta-package, polkit-js-engine, that pulls in the required
    JavaScript bits to make polkit authorization rules work. The default
    install - not the minimal install - should include this package


author: David Zeuthen <davidz@redhat.com> 0.106-1.el7
changelog:
  - Update to upstream release 0.106
  - Authorizations are no longer controlled by .pkla files - from now
    on, use the new .rules files described in the polkit(8) man page


author: David Zeuthen <davidz@redhat.com> 0.105-1.el7
changelog:
  - Update to upstream release 0.105
  - Nuke patches that are now upstream
  - Change 'PolicyKit' to 'polkit' in summary and descriptions


author: David Zeuthen <davidz@redhat.com> 0.104-1.el7
changelog:
  - Update to upstream release 0.104
  - Force usage of systemd (instead of ConsoleKit) for session tracking


author: David Zeuthen <davidz@redhat.com> 0.103-1.el7
changelog:
  - Update to upstream release 0.103
  - Drop upstreamed patch
  - Drop Fedora-specific policy, it is now upstream (fdo #41008)


author: David Zeuthen <davidz@redhat.com> 0.102-2.el7
changelog:
  - Add patch to neuter the annoying systemd behavior where stdout/stderr
    is sent to the system logs


author: David Zeuthen <davidz@redhat.com> - 0.101-2
changelog:
  - Nuke desktop_admin_r and desktop_user_r groups - just use the
    wheel group instead (#688363)
  - Update the set of configuration directives that gives users
    in the wheel group extra privileges


author: David Zeuthen <davidz@redhat.com> - 0.97-3
changelog:
  - Add a patch to make pkcheck(1) work the way libvirtd uses it (#623257)
  - Require GLib >= 2.25.12 instead of 2.25.11
  - Ensure polkit-gnome packages earlier than 0.97 are not used with
    these packages


author: David Zeuthen <davidz@redhat.com> - 0.97-1
changelog:
  - Update to 0.97. This release contains a port from EggDBus to the
    GDBus code available in recent GLib releases.


author: David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913.1
changelog:
  - Add bugfix for polkit_unix_process_new_full() (thanks Bastien Nocera)
  - Obsolete old PolicyKit packages


author: David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913
changelog:
  - Update to git snapshot
  - Drop upstreamed patches
  - Turn on GObject introspection
  - Don't delete desktop_admin_r and desktop_user_r groups when
    uninstalling polkit-desktop-policy


author: David Zeuthen <davidz@redhat.com> - 0.94-4
changelog:
  - Add some patches from git master
  - Sort pkaction(1) output
  - Bug 23867 – UnixProcess vs. SystemBusName aliasing


author: David Zeuthen <davidz@redhat.com> - 0.94-3
changelog:
  - Add desktop_admin_r and desktop_user_r groups along with a first cut
    of default authorizations for users in these groups.


author: Matej Muzila <mmuzila@redhat.com> - 5:1.5.21-29
changelog:
  - Fix IMAP header caching path traversal vulnerability
  - Resolves: #1608011
  - Resolves: CVE-2018-14355


author: Matej Muzila <mmuzila@redhat.com> - 5:1.5.21-27
changelog:
  - Resolves #1388511 (System default CA bundle not set as default in compiled-in
    default or config)
  - Resolves #1388512 (mutt sends e-mail with broken "From" header, which has no
    host part)


author: Honza Horak <hhorak@redhat.com> - 5:1.5.21-12
changelog:
  - Fix segmentation fault while syncing mailbox
    (rhbz#691719)
  - Fix unhandled strchr output
    (rhbz#833044)


author: Honza Horak <hhorak@redhat.com> - 5:1.5.21-8
changelog:
  - Removed ca-bundle.crt since it is outdated (rhbz#734379)
  - Build with gpgme support by default (rhbz#748337)
  - Fixed segmentation fault during messages removal in thread mode
    (rhbz#674271)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-5
changelog:
  - fix certificate verification (CVE-2009-1390)
  - add support for gnutls INSECURE_ALGORITHM error code (#499390)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.19-4
changelog:
  - use PATH_MAX for buffers passed to realpath (#492861)
  - unconditionally inode-sort Maildir and MH folders
  - restore connection polling callback when closing SASL connection


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.18-2
changelog:
  - allow interrupts when reading, writing or closing sockets (#447887)
  - fix possible crash when opening IMAP mailbox


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.17-4
changelog:
  - fix sending long commands when using gnutls (#438275)
  - glob tilde in smime_keys (#424311)
  - fix awk script in mutt_ldap_query
  - force building with libdb
  - make enabling/disabling features in spec easier


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.17-2
changelog:
  - don't ignore $from in batch send mode (#392861)
  - check Maildir for not being NULL when expanding '='-paths
  - prevent mailto parsing buffer overflow by ignoring too long header
  - use strtok_r() to parse mailto: links, not strtok()
  - update UPDATING


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.14-4
changelog:
  - validate msgid in APOP authentication (CVE-2007-1558)
  - fix overflow in gecos field handling (CVE-2007-2683)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.5.14-2
changelog:
  - add check_mbox_size configuration variable; if enabled, file size is used
    instead of access time when checking for new mail
  - bind delete key to delete-char (#232601)


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.4.2.2-1
changelog:
  - update to 1.4.2.2
  - fix directories in manual.txt (#162207)
  - drop bcc patch (#197408)
  - don't package flea


author: Bill Nottingham <notting@redhat.com> 5:1.4.2.1-1
changelog:
  - update to 1.4.2.1 (#141007, <moritz@barsnick.net>)
  - include a /etc/Muttrc.local for site config (#123109)
  - add <f2> as a additional help key for terminals that use <f1> internally
    (#139277)


author: Nalin Dahyabhai <nalin@redhat.com> 5:1.4.1-10
changelog:
  - expect the server to prompt for additional auth data if we have some to
    send (#129961, upstream #1845)
  - use "pop" as the service name instead of "pop-3" when using SASL for POP,
    per rfc1734


author: Bill Nottingham <notting@redhat.com>
changelog:
  - get correct manual path the Right Way(tm)
  - make it so it uses default colors even if COLORFGBG isn't set


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-5
changelog:
  - fix brittle configuration settings (#1259633)
  - fix abort when generating large passwords on some architectures


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-1
changelog:
  - use rpm built-in filtering of provides (rhbz#830153)
  - remove strain debug fprintf() (rhbz#831567)


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-1
changelog:
  - fix leak when throwing PWQError exception
  - added pkgconfig file
  - call the simplicity checks before the cracklib check
  - add enforce_for_root option to the PAM module
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 0.9-2
changelog:
  - fixes for problems found in review (missing BR on pam-devel,
    License field, Source URL, Require pam, other cleanups)


author: Phil Sutter <psutter@redhat.com> - 1.4.21-34
changelog:
  - Fix iptables-restore for rules with '-' and 't' in comments (RHBZ#1749700)
  - Make services start before network-pre.target is reached (RHBZ#1736765)


author: Phil Sutter <psutter@redhat.com> - 1.4.21-31
changelog:
  - Fix iptables-restore with empty comment in rule (RHBZ#1668475)
  - Fix parsing and printing of -m ipvs --vproto option (RHBZ#1679726)
  - Fix for wrong location of devgroup definition file (RHBZ#1657075)
  - Fix for non-numeric devgroup name output (RHBZ#1657075)
  - Reject negative realm values (RHBZ#1657075)


author: Phil Sutter - 1.4.21-29
changelog:
  - Do not attempt to unload any modules when stopping the firewall (RHBZ#1520534)
  - Fix for covscan warnings (RHBZ#1525980)


author: Phil Sutter - 1.4.21-27
changelog:
  - libxt_tcpmss: Detect invalid ranges (RHBZ#1128510)
  - ip(6)tables-save/restore: Exit if invalid option was given (RHBZ#1465078)
  - ip(6)tables-save/restore: Require value to -W option (RHBZ#1465078)
  - ip(6)tables-save/restore: Don't accept -W without -w (RHBZ#1465078)
  - Ignore security table when setting policies (RHBZ#1494012)
  - Fix spec file changing SRPM content (RHBZ#1531290)


author: Phil Sutter - 1.4.21-25
changelog:
  - Fix for stopping iptables and ip6tables at the same time (RHBZ#1560012)
  - Propagate errors on service stop (RHBZ#1560012)


author: Phil Sutter - 1.4.21-20
changelog:
  - Prevent iptables.service and ip6tables.service from running in parallel
    (RHBZ#1486803)
  - Don't restart services upon upgrade (RHBZ#1380141)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-18
changelog:
  - Add support for --wait options to restore commands (RHBZ#1438597)
  - Do not set changed flag for rule check operations with module targets
    (RHBZ#1438597)
  - Add version option to restore commands (RHBZ#1438597)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-17
changelog:
  - Fixed init script not to fail on missing restorecon (RHBZ#1246380)
  - Adapted man page snipplet for TRACE to use proper logging backend names
    (RHBZ#1261238)
  - Warn about use of DROP in nat table (RHBZ#1298879)
  - Fixed modules unload in init script (RHBZ#1324102)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-16
changelog:
  - Fix important coverity findings: missing include for flock and use bash for
    init script (RHBZ#1264399)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-14
changelog:
  - Add cgroup support (RHBZ#1058660)
  - Add wait seonds support for commands (RHBZ#1156411)
  - Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
  - Add message for init script error returns (RHBZ#1200415)
  - Use flock for wait option (RHBZ#1202435)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-9
changelog:
  - fixed missing system hang at shutdown if root device is network based
    (RHBZ#1007934)
  - Fixed iptables-save man page completely wrong (RHBZ#1054871)
  - Fixed missing reload action for iptables service (RHBZ#1066007)
  - Fixed regressions from RHEL-6 iptables services (RHBZ#1067670)


author: Jiri Popelka <jpopelka@redhat.com> - 1.4.21-3
changelog:
  - no need to support the pre-systemd things
  - use systemd macros (#850166)
  - remove scriptlets for migrating to a systemd unit from a SysV initscripts
  - ./configure -> %configure
  - spec clean up
  - fix self-obsoletion


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-2
changelog:
  - fixed system hang at shutdown if root device is network based (RHBZ#1007934)
    Thanks to Rodrigo A B Freire for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-1
changelog:
  - no connlabel.conf upstream anymore
  - new version 1.4.21
    - doc: clarify DEBUG usage macro
    - iptables: use autoconf to process .in man pages
    - extensions: libipt_ULOG: man page should mention NFLOG as replacement
    - extensions: libxt_connlabel: use libnetfilter_conntrack
    - Introduce a new revision for the set match with the counters support
    - libxt_CT: Add the "NOTRACK" alias
    - libip6t_mh: Correct command to list named mh types in manpage
    - extensions: libxt_DNAT, libxt_REDIRECT, libxt_NETMAP, libxt_SNAT, libxt_MASQUERADE, libxt_LOG: rename IPv4 manpage and tell about IPv6 support
    - extensions: libxt_LED: fix parsing of delay
    - ip{6}tables-restore: fix breakage due to new locking approach
    - libxt_recent: restore minimum value for --seconds
    - iptables-xml: fix parameter parsing (similar to 2165f38)
    - extensions: add copyright statements
    - xtables: improve get_modprobe handling
    - ip[6]tables: Add locking to prevent concurrent instances
    - iptables: Fix connlabel.conf install location
    - ip6tables: don't print out /128
    - libip6t_LOG: target output is different to libipt_LOG
    - build: additional include path required after UAPI changes
    - iptables: iptables-xml: Fix various parsing bugs
    - libxt_recent: restore reap functionality to recent module
    - build: fail in configure on missing dependency with --enable-bpf-compiler
    - extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter
    - extensions: libxt_set, libxt_SET: check the set family too
    - ip6tables: Use consistent exit code for EAGAIN
    - iptables: libxt_hashlimit.man: correct address
    - iptables: libxt_conntrack.man extraneous commas
    - iptables: libip(6)t_REJECT.man default icmp types
    - iptables: iptables-xm1.1 correct man section
    - iptables: libxt_recent.{c,man} dead URL
    - iptables: libxt_string.man add examples
    - extensions: libxt_LOG: use generic syslog reference in manpage
    - iptables: extensions/GNUMakefile.in use CPPFLAGS
    - iptables: correctly reference generated file
    - ip[6]tables: fix incorrect alignment in commands_v_options
    - build: add software version to manpage first line at configure stage
    - extensions: libxt_cluster: add note on arptables-jf
    - utils: nfsynproxy: fix error while compiling the BPF filter
    - extensions: add SYNPROXY extension
    - utils: add nfsynproxy tool
    - iptables: state match incompatibilty across versions
    - libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks
    - iptables: improve chain name validation
    - iptables: spurious error in load_extension
    - xtables: trivial spelling fix


author: Thomas Woerner <twoerner@redhat.com> 1.4.19.1-1
changelog:
  - new version 1.4.19.1
    - libxt_NFQUEUE: fix bypass option documentation
    - extensions: add connlabel match
    - extensions: add connlabel match
    - ip[6]tables: show --protocol instead of --proto in usage
    - libxt_recent: Fix missing space in manpage for --mask option
    - extensions: libxt_multiport: Update manpage to list valid protocols
    - utils: nfnl_osf: use the right nfnetlink lib
    - libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency
    - Revert "build: resolve link failure for ip6t_NETMAP"
    - libxt_osf: fix missing --ttl and --log in save output
    - libxt_osf: fix bad location for location in --genre
    - libip6t_SNPT: add manpage
    - libip6t_DNPT: add manpage
    - utils: updates .gitignore to include nfbpf_compile
    - extensions: libxt_bpf: clarify --bytecode argument
    - libxtables: fix parsing of dotted network mask format
    - build: bump version to 1.4.19
    - libxt_conntrack: fix state match alias state parsing
    - extensions: add libxt_bpf extension
    - utils: nfbpf_compile
    - doc: mention SNAT in INPUT chain since kernel 2.6.36
  - fixed changelog date weekdays where needed


author: Thomas Woerner <twoerner@redhat.com> 1.4.18-1
changelog:
  - new version 1.4.18 
    - lots of documentation changes
    - Introduce match/target aliases
    - Add the "state" alias to the "conntrack" match
    - iptables: remove unused leftover definitions
    - libxtables: add xtables_rule_matches_free
    - libxtables: add xtables_print_num
    - extensions: libip6t_DNPT: fix wording in DNPT target
    - extension: libip6t_DNAT: allow port DNAT without address
    - extensions: libip6t_DNAT: set IPv6 DNAT --to-destination
    - extensions: S/DNPT: add missing save function
  - changes of 1.4.17:
    - libxt_time: add support to ignore day transition
    - Convert the NAT targets to use the kernel supplied nf_nat.h header
    - extensions: add IPv6 MASQUERADE extension
    - extensions: add IPv6 SNAT extension
    - extensions: add IPv6 DNAT target
    - extensions: add IPv6 REDIRECT extension
    - extensions: add IPv6 NETMAP extension
    - extensions: add NPT extension
    - extensions: libxt_statistic: Fix save output


author: Ville Skyttä <ville.skytta@iki.fi> - 1.4.16.2-6
changelog:
  - Own unowned -services libexec dirs (#894464, Michael Scherer).
  - Fix -services unit file permissions (#732936, Michal Schmidt).


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-4
changelog:
  - fixed missing services for update of pre F-18 installations (rhbz#867960)
    - provide and obsolete old main package in services sub package
    - provide and obsolete old ipv6 sub package (pre F-17) in services sub package


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-2
changelog:
  - new sub package services providing the systemd services (RHBZ#862922)
  - new sub package utils: provides nfnl_osf and the pf.os database
  - using %{_libexecdir}/iptables as script path for the original init scripts
  - added service iptables save funcitonality using the new way provided by 
    initscripts 9.37.1 (RHBZ#748134)
  - added virtual provide for libxtables.so.7


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-1
changelog:
  - new version 1.4.16.2
    - build: support for automake-1.12
    - build: separate AC variable replacements from xtables.h
    - build: have `make clean` remove dep files too
    - doc: grammatical updates to libxt_SET
    - doc: clean up interpunction in state list for xt_conntrack
    - doc: deduplicate extension descriptions into a new manpage
    - doc: trim "state" manpage and reference conntrack instead
    - doc: have NOTRACK manpage point to CT instead
    - doc: mention iptables-apply in the SEE ALSO sections
    - extensions: libxt_addrtype: fix type in help message
    - include: add missing linux/netfilter_ipv4/ip_queue.h
    - iptables: fix wrong error messages
    - iptables: support for match aliases
    - iptables: support for target aliases
    - iptables-restore: warn about -t in rule lines
    - ip[6]tables-restore: cleanup to reduce one level of indentation
    - libip6t_frag: match any frag id by default
    - libxtables: consolidate preference logic
    - libxt_devgroup: consolidate devgroup specification parsing
    - libxt_devgroup: guard against negative numbers
    - libxt_LED: guard against negative numbers
    - libxt_NOTRACK: replace as an alias to CT --notrack
    - libxt_state: replace as an alias to xt_conntrack
    - libxt_tcp: print space before, not after "flags:"
    - libxt_u32: do bounds checking for @'s operands
    - libxt_*limit: avoid division by zero
    - Merge branch 'master' of git://git.inai.de/iptables
    - Merge remote-tracking branch 'nf/stable'
    - New set match revision with --return-nomatch flag support
  - dropped fixrestore patch, upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.15-1
changelog:
  - new version 1.4.15
    - extensions: add HMARK target
    - iptables-restore: fix parameter parsing (shows up with gcc-4.7)
    - iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)
    - libxtables: add xtables_ip[6]mask_to_cidr
    - libxt_devgroup: add man page snippet
    - libxt_hashlimit: add support for byte-based operation
    - libxt_recent: add --mask netmask
    - libxt_recent: remove unused variable
    - libxt_HMARK: correct a number of errors introduced by Pablo's rework
    - libxt_HMARK: fix ct case example
    - libxt_HMARK: fix output of iptables -L
    - Revert "iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)"


author: Thomas Woerner <twoerner@redhat.com> 1.4.14-1
changelog:
  - new version 1.4.14
    - extensions: add IPv6 capable ECN match extension
    - extensions: add nfacct match
    - extensions: add rpfilter module
    - extensions: libxt_rateest: output all options in save hook
    - iptables: missing free() in function cache_add_entry()
    - iptables: missing free() in function delete_entry()
    - libiptc: fix retry path in TC_INIT
    - libiptc: Returns the position the entry was inserted
    - libipt_ULOG: fix --ulog-cprange
    - libxt_CT: add --timeout option
    - ip(6)tables-restore: make sure argv is NULL terminated
    - Revert "libiptc: Returns the position the entry was inserted"
    - src: mark newly opened fds as FD_CLOEXEC (close on exec)
    - tests: add rateest match rules
  - dropped patch5 (cloexec), merged upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.12.2-1
changelog:
  - new version 1.4.12.2 with new pkgconfig/libip4tc.pc and pkgconfig/libip6tc.pc
    - build: make check stage not fail when building statically
    - build: restore build order of modules
    - build: scan for unreferenced symbols
    - build: sort file list before build
    - doc: clarification on the meaning of -p 0
    - doc: document iptables-restore's -T option
    - doc: fix undesired newline in ip6tables-restore(8)
    - ip6tables-restore: implement missing -T option
    - iptables: move kernel version find routing into libxtables
    - libiptc: provide separate pkgconfig files
    - libipt_SAME: set PROTO_RANDOM on all ranges
    - libxtables: Fix file descriptor leak in xtables_lmap_init on error
    - libxt_connbytes: fix handling of --connbytes FROM
    - libxt_CONNSECMARK: fix spacing in output
    - libxt_conntrack: improve error message on parsing violation
    - libxt_NFQUEUE: fix --queue-bypass ipt-save output
    - libxt_RATEEST: link with -lm
    - libxt_statistic: link with -lm
    - Merge branch 'stable'
    - Merge branch 'stable' of git://dev.medozas.de/iptables
    - nfnl_osf: add missing libnfnetlink_CFLAGS to compile process
    - xtoptions: fill in fallback value for nvals
    - xtoptions: simplify xtables_parse_interface


author: Thomas Woerner <twoerner@redhat.com> 1.4.12.1-1
changelog:
  - new version 1.4.12.1 with new pkgconfig/libipq.pc
    - build: abort autogen on subcommand failure
    - build: strengthen check for overlong lladdr components
    - build: workaround broken linux-headers on RHEL-5
    - doc: clarify libxt_connlimit defaults
    - doc: fix typo in libxt_TRACE
    - extensions: use multi-target registration
    - libip6t_dst: restore setting IP6T_OPTS_LEN flag
    - libip6t_frag: restore inversion support
    - libip6t_hbh: restore setting IP6T_OPTS_LEN flag
    - libipq: add pkgconfig file
    - libipt_ttl: document that negation is available
    - libxt_conntrack: fix --ctproto 0 output
    - libxt_conntrack: remove one misleading comment
    - libxt_dccp: fix deprecated intrapositional ordering of !
    - libxt_dccp: fix random output of ! on --dccp-option
    - libxt_dccp: provide man pages options in short help too
    - libxt_dccp: restore missing XTOPT_INVERT tags for options
    - libxt_dccp: spell out option name on save
    - libxt_dscp: restore inversion support
    - libxt_hashlimit: default htable-expire must be in milliseconds
    - libxt_hashlimit: observe new default gc-expire time when saving
    - libxt_hashlimit: remove inversion from hashlimit rev 0
    - libxt_owner: restore inversion support
    - libxt_physdev: restore inversion support
    - libxt_policy: remove superfluous inversion
    - libxt_set: put differing variable names in directly
    - libxt_set: update man page about kernel support on the feature
    - libxt_string: define _GNU_SOURCE for strnlen
    - libxt_string: escape the escaping char too
    - libxt_string: fix space around arguments
    - libxt_string: replace hex codes by char equivalents
    - libxt_string: simplify hex output routine
    - libxt_tcp: always print the mask parts
    - libxt_TCPMSS: restore build with IPv6-less libcs
    - libxt_TOS: update linux kernel version list for backported fix
    - libxt_u32: fix missing allowance for inversion
    - src: remove unused IPTABLES_MULTI define
    - tests: add negation tests for libxt_statistic
    - xtoptions: flag use of XTOPT_POINTER without XTOPT_PUT
  - removed include/linux/types.h before build to be able to compile


author: Thomas Woerner <twoerner@redhat.com> 1.4.12-1.1
changelog:
  - added temporary provides for libxtables.so.6 to be able to rebuild iproute,
    which is part of the standard build environment


author: Thomas Woerner <twoerner@redhat.com> 1.4.12-1
changelog:
  - new version 1.4.12 with support of all new features of kernel 3.0
    - build: attempt to fix building under Linux 2.4
    - build: bump soversion for recent data structure change
    - build: install modules in arch-dependent location
    - doc: fix group range in libxt_NFLOG's man
    - doc: fix version string in ip6tables.8
    - doc: include matches/targets in manpage again
    - doc: mention multiple verbosity flags
    - doc: the -m option cannot be inverted
    - extensions: support for per-extension instance global variable space
    - iptables-apply: select default rule file depending on call name
    - iptables: consolidate target/match init call
    - iptables: Coverity: DEADCODE
    - iptables: Coverity: NEGATIVE_RETURNS
    - iptables: Coverity: RESOURCE_LEAK
    - iptables: Coverity: REVERSE_INULL
    - iptables: Coverity: VARARGS
    - iptables: restore negation for -f
    - libip6t_HL: fix option names from ttl -> hl
    - libipt_LOG: fix ignoring all but last flags
    - libxtables: ignore whitespace in the multiaddress argument parser
    - libxtables: properly reject empty hostnames
    - libxtables: set clone's initial data to NULL
    - libxt_conntrack: move more data into the xt_option_entry
    - libxt_conntrack: restore network-byte order for v1,v2
    - libxt_hashlimit: use a more obvious expiry value by default
    - libxt_rateest: abolish global variables
    - libxt_RATEEST: abolish global variables
    - libxt_RATEEST: fix userspacesize field
    - libxt_RATEEST: use guided option parser
    - libxt_state: fix regression about inversion of main option
    - option: remove last traces of intrapositional negation
  - complete changelog:
    http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.12.txt


author: Thomas Woerner <twoerner@redhat.com> 1.4.11.1-3
changelog:
  - added support for native systemd file (rhbz#694738)
    - new iptables.service file
    - additional requires
    - moved sysv init scripts to /usr/libexec
    - added new post, preun and postun scripts and triggers


author: Thomas Woerner <twoerner@redhat.com> 1.4.11.1-1.1
changelog:
  -  added temporary provides for libxtables.so.5 to be able to rebuild iproute,
     which is part of the standard build environment


author: Thomas Woerner <twoerner@redhat.com> 1.4.11-1
changelog:
  - new version 1.4.11 with all new features of 2.6.37-39 (not usable)
    - lots of changes and bugfixes for base and extensions
    - complete changelog:
      http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.11.txt


author: Thomas Woerner <twoerner@redhat.com> 1.4.10-1
changelog:
  - new version 1.4.10 with all new features of 2.6.36
    - all: consistent syntax use in struct option
    - build: fix static linking
    - doc: let man(1) autoalign the text in xt_cpu
    - doc: remove extra empty line from xt_cpu
    - doc: minimal spelling updates to xt_cpu
    - doc: consistent use of markup
    - extensions: libxt_quota: don't ignore the quota value on deletion
    - extensions: REDIRECT: add random help
    - extensions: add xt_cpu match
    - extensions: add idletimer xt target extension
    - extensions: libxt_IDLETIMER: use xtables_param_act when checking options
    - extensions: libxt_CHECKSUM extension
    - extensions: libipt_LOG/libip6t_LOG: support macdecode option
    - extensions: fix compilation of the new CHECKSUM target
    - extensions: libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
    - iptables-xml: resolve compiler warnings
    - iptables: limit chain name length to be consistent with targets
    - libiptc: add Libs.private to pkgconfig files
    - libiptc: build with -Wl,--no-as-needed
    - xtables: remove unnecessary cast
  - dropped xt_CHECKSUM, added upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.9-1
changelog:
  - new version 1.4.9 with all new features of 2.6.35
    - doc: xt_hashlimit: fix a typo
    - doc: xt_LED: nroff formatting requirements
    - doc: xt_string: correct copy-and-pasting in manpage
    - extensions: add the LED target
    - extensions: libxt_quota.c: Support option negation
    - extensions: libxt_rateest: fix bps options for iptables-save
    - extensions: libxt_rateest: fix typo in the man page
    - extensions: REDIRECT: add random help
    - includes: sync header files from Linux 2.6.35-rc1
    - libxt_conntrack: do print netmask
    - libxt_hashlimit: always print burst value
    - libxt_set: new revision added
    - utils: add missing include flags to Makefile
    - xtables: another try at chain name length checking
    - xtables: remove xtables_set_revision function
    - xt_quota: also document negation
    - xt_sctp: Trace DATA chunk that supports SACK-IMMEDIATELY extension
    - xt_sctp: support FORWARD_TSN chunk type


author: Thomas Woerner <twoerner@redhat.com> 1.4.8-1
changelog:
  - new version 1.4.8 all new features of 2.6.34 (rhbz#)
    - extensions: REDIRECT: fix --to-ports parser
    - iptables: add noreturn attribute to exit_tryhelp()
    - extensions: MASQUERADE: fix --to-ports parser
    - libxt_comment: avoid use of IPv4-specific examples
    - libxt_CT: add a manpage
    - iptables: correctly check for too-long chain/target/match names
    - doc: libxt_MARK: no longer restricted to mangle table
    - doc: remove claim that TCPMSS is limited to mangle
    - libxt_recent: add a missing space in output
    - doc: add manpage for libxt_osf
    - libxt_osf: import nfnl_osf program
    - extensions: add support for xt_TEE
    - CT: fix --ctevents parsing
    - extensions: add CT extension
    - libxt_CT: print conntrack zone in ->print/->save
    - xtables: fix compilation when debugging is enabled
    - libxt_conntrack: document --ctstate UNTRACKED
    - iprange: fix xt_iprange v0 parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-2
changelog:
  - added default values for IPTABLES_STATUS_VERBOSE and
    IPTABLES_STATUS_LINENUMBERS in init script
  - added missing lsb keywords Required-Start and Required-Stop to init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-1
changelog:
  - new version 1.4.7 with support for all new features of 2.6.33 (rhbz#570767)
    - libip4tc: Add static qualifier to dump_entry()
    - libipq: build as shared library
    - recent: reorder cases in code (cosmetic cleanup)
    - several man page and documentation fixes
    - policy: fix error message showing wrong option
    - includes: header updates
    - Lift restrictions on interface names
  - fixed license and moved iptables-xml into base package according to review


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-2
changelog:
  - moved libip*tc and libxtables libs to /lib[64], added symlinks for .so libs
    to /usr/lib[64] for compatibility (rhbz#558796)


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-1
changelog:
  - new version 1.4.6 with support for all new features of 2.6.32
    - several man page fixes
    - Support for nommu arches
    - realm: remove static initializations
    - libiptc: remove unused functions
    - libiptc: avoid strict-aliasing warnings
    - iprange: do accept non-ranges for xt_iprange v1
    - iprange: warn on reverse range
    - iprange: roll address parsing into a loop
    - iprange: do accept non-ranges for xt_iprange v1 (log)
    - iprange: warn on reverse range (log)
    - libiptc: fix wrong maptype of base chain counters on restore
    - iptables: fix undersized deletion mask creation
    - style: reduce indent in xtables_check_inverse
    - libxtables: hand argv to xtables_check_inverse
    - iptables/extensions: make bundled options work again
    - CONNMARK: print mark rules with mask 0xffffffff as set instead of xset
    - iptables: take masks into consideration for replace command
    - doc: explain experienced --hitcount limit
    - doc: name resolution clarification
    - iptables: expose option to zero packet/byte counters for a specific rule
    - build: restore --disable-ipv6 functionality on system w/o v6 headers
    - MARK: print mark rules with mask 0xffffffff as --set-mark instead of --set-xmark
    - DNAT: fix incorrect check during parsing
    - extensions: add osf extension
    - conntrack: fix --expires parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.5-1
changelog:
  - new version 1.4.5 with support for all new features of 2.6.31
    - libxt_NFQUEUE: add new v1 version with queue-balance option
    - xt_conntrack: revision 2 for enlarged state_mask member
    - libxt_helper: fix invalid passed option to check_inverse
    - libiptc: split v4 and v6
    - extensions: collapse registration structures
    - iptables: allow for parse-less extensions
    - iptables: allow for help-less extensions
    - extensions: remove empty help and parse functions
    - xtables: add multi-registration functions
    - extensions: collapse data variables to use multi-reg calls
    - xtables: warn of missing version identifier in extensions
    - multi binary: allow subcommand via argv[1]
    - iptables: accept multiple IP address specifications for -s, -d
    - several build fixes
    - several man page fixes
  - fixed two leaked file descriptors on sockets (rhbz#521397)


author: Thomas Woerner <twoerner@redhat.com> 1.4.4-1
changelog:
  - new version 1.4.4 with support for all new features of 2.6.30
    - several man page fixes
    - iptables: replace open-coded sizeof by ARRAY_SIZE
    - libip6t_policy: remove redundant functions
    - policy: use direct xt_policy_info instead of ipt/ip6t
    - policy: merge ipv6 and ipv4 variant
    - extensions: add `cluster' match support
    - extensions: add const qualifiers in print/save functions
    - extensions: use NFPROTO_UNSPEC for .family field
    - extensions: remove redundant casts
    - iptables: close open file descriptors
    - fix segfault if incorrect protocol name is used
    - replace open-coded sizeof by ARRAY_SIZE
    - do not include v4-only modules in ip6tables manpage
    - use direct xt_policy_info instead of ipt/ip6t
    - xtables: fix segfault if incorrect protocol name is used
    - libxt_connlimit: initialize v6_mask
    - SNAT/DNAT: add support for persistent multi-range NAT mappings


author: Thomas Woerner <twoerner@redhat.com> 1.4.3.1-1
changelog:
  - new version 1.4.3.1
    - libiptc is now shared
    - supports all new features of the 2.6.29 kernel
  - dropped typo_latter patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-3
changelog:
  - still more review fixes (rhbz#225906)
    - consistent macro usage
    - use sed instead of perl for rpath removal
    - use standard RPM CFLAGS, but also -fno-strict-aliasing (needed for libiptc*)


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-1
changelog:
  - new version 1.4.2
  - removed TOS value mask patch (upstream)
  - more review fixes (rhbz#225906)
  - install all header files (rhbz#462207)
  - dropped nf_ext_init (rhbz#472548)


author: Thomas Woerner <twoerner@redhat.com> 1.4.1-1
changelog:
  - new version 1.4.1 with new build environment
  - additional ipv6 network mask patch from Jan Engelhardt
  - spec file cleanup
  - removed old patches


author: Tom "spot" Callaway <tcallawa@redhat.com> 1.4.0-5
changelog:
  - use normal kernel headers, not linux/compiler.h
  - change BuildRequires: kernel-devel to kernel-headers
  - We need to do this to be able to build for both sparcv9 and sparc64 
    (there is no kernel-devel.sparcv9)


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-3
changelog:
  - use the kernel headers from the build tree for iptables for now to be able to 
    compile this package, but this makes the package more kernel dependant
  - use s6_addr32 instead of in6_u.u6_addr32


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-1
changelog:
  - new version 1.4.0
  - fixed condrestart (rhbz#428148)
  - report the module in rmmod_r if there is an error
  - use nf_ext_init instead of my_init for extension constructors


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-6
changelog:
  - fixed leaked file descriptor before fork/exec (rhbz#312191)
  - blacklisting is not working, use "install X /bin/(true|false)" test instead
  - return private exit code 150 for disabled ipv6 support
  - use script name for output messages


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-5
changelog:
  - fixed error code for stopping a already stopped firewall (rhbz#321751)
  - moved blacklist test into start


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4.1
changelog:
  - do not start ip6tables if ipv6 is blacklisted (rhbz#236888)
  - use simpler fix for (rhbz#295611)
    Thanks to Linus Torvalds for the patch.


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4
changelog:
  - fixed IPv6 reject type (rhbz#295181)
  - fixed init script: start, stop and status
  - support netfilter compiled into kernel in init script (rhbz#295611)
  - dropped inversion for limit modules from man pages (rhbz#220780)
  - fixed typo in ip6tables man page (rhbz#236185)


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-3
changelog:
  - do not depend on local_fs in lsb header - this delayes start after network
  - fixed exit code for initscript usage


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-2
changelog:
  - fixed initscript for LSB conformance (rhbz#246953, rhbz#242459)
  - provide iptc interface again, but unsupported (rhbz#216733)
  - compile all extension, which are supported by the kernel-headers package
  - review fixes (rhbz#225906)


author: Thomas Woerner <twoerner@redhat.com> 1.3.7-1
changelog:
  - new verison 1.3.7
  - iptc is not a public interface and therefore not installed anymore
  - dropped upstream secmark patch


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-2
changelog:
  - fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and 
    replace "_init" with "__attribute((constructor)) my_init"


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-1
changelog:
  - new version 1.3.4
  - dropped free_opts patch (upstream fixed)
  - made libipq PIC (#158623)
  - additional configuration options for iptables startup script (#172929)
    Thanks to Jan Gruenwald for the patch
  - spec file cleanup (dropped linux_header define and usage)


author: Thomas Woerner <twoerner@redhat.com> 1.3.0-2
changelog:
  - Remove unnecessary explicit kernel dep (#146142)
  - Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
    for the patch
  - Adapted iptables-config to reference to modprobe.conf (#150143)
  - Remove misleading message (#140154): Thanks to Ulrich Drepper
    for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1
changelog:
  - changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731)
  - modified config file to match this change and un-commented variables with
    default values


author: Thomas Woerner <twoerner@redhat.com> 1.2.9-1
changelog:
  - vew version 1.2.9
  - new config options in ipXtables-config:
    IPTABLES_MODULES_UNLOAD
  - more documentation in ipXtables-config
  - fix for netlink security issue in libipq (devel package)
  - print fix for libipt_icmp (#109546)


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-13
changelog:
  - marked all messages in iptables init script for translation (#107462)
  - enabled devel package (#105884, #106101)
  - bumped build for fedora for libipt_recent.so (#106002)


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1
changelog:
  - fixed lost udp port range in ip6tables-save (#104484)
  - fixed non numeric multiport port output in ipXtables-savs


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-6
changelog:
  - IPTABLES_SAVE_COUNTER defaults to no, now
  - install config file in /etc/sysconfig
  - exchange unload of ip_tables and ip_conntrack
  - fixed start function


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-5
changelog:
  - new config option IPTABLES_SAVE_ON_RESTART
  - init script: new status, save and restart
  - fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - remove check for very old kernel versions in init scripts
  - sync up both init scripts and remove some further ugly things
  - add some docu into rpm


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed iptables and ip6tables initscript output, based on #70511
  - check return status of all iptables calls, not just the last one
    in a 'for' loop.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2
changelog:
  - Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org>
    - Update URL (#59354)
  - Use /sbin/chkconfig rather than chkconfig in %postun script


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1
changelog:
  - Update to 1.2.4 (various fixes, including security fixes; among others:
    - Fix init script (#31133)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Yet another initscript fix (#30173)
  - Fix the fixes; they fixed some issues but broke more important
    stuff :/ (#30176)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix bugzilla #25986 (initscript not marked as config file)
  - fix bugzilla #25962 (iptables-restore)
  - mv chkconfig --del from postun to preun


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.2
  - fix up ipv6 split
  - add init script
  - Move the plugins from /usr/lib/iptables to /lib/iptables.
    This needs to work before /usr is mounted...
  - Use -O1 on alpha (compiler bug)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - move iptables to /sbin.
  - excludearch alpha for now, not building there because of compiler bug(?)


author: Dennis Gilmore <dennis@ausil.us> - 1.0.3-5
changelog:
  - set broken_fed_dbg_opts to 0 its the recomended option upstream
  - this works around sparc GCC problems
  - add smpflags and cflags to make check


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-5
changelog:
  - Bump version to 1.3.10.1-5
  - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-4
changelog:
  - Bump version to 1.3.10.1-4
  - Resolves: Bug 1765106 - ipa-server-install is failing with ipapython.admintool: ERROR failed to create DS instance Command


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-3
changelog:
  - Bump version to 1.3.10.1-3
  - Resolves: Bug 1756182 - ns-slapd crash on concurrent SASL BINDs, connection_call_io_layer_callbacks must hold hold c_mutex
  - Resolves: Bug 1749236 - etime displayed has an order of magnitude 10 times smaller than it should be
  - Resolves: Bug 1758109 - AddressSanitizer: heap-use-after-free in import_free_job
  - Resolves: Bug 1676948 - After audit log file is rotated, DS version string is logged after each update
  - Resolves: Bug 1749595 - Extremely slow LDIF import with ldif2db


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-2
changelog:
  - Bump version to 1.3.10.1-2
  - Resolves: Bug 1748199 - EMBARGOED CVE-2019-14824 389-ds-base: 389-ds and IDM: allows authenticated unprivileged user to retrieve content of userPassword field for any user 
  - Resolves: Bug 1610234 - nsslapd-defaultnamingcontext does not change when the assigned suffix got deleted
  - Resolves: Bug 1723545 - Directory Server 10 not RFC 4511 compliant
  - Resolves: Bug 1724914 - LDAP server returning controltype in different sequence
  - Resolves: Bug 1739182 - CleanAllRUV task limit not enforced
  - Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache
  - Resolves: Bug 1685059 - After running cl-dump dbdir/cldb/*ldif.done are not deleted


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-1
changelog:
  - Bump version to 1.3.10.1-1
  - Resolves: Bug 1639342 - Replace error by warning in the state machine defined in repl5_inc_run
  - Resolves: Bug 1691931 - memory leak in automember plugin
  - Resolves: Bug 1662461 - Log the actual base DN when the search fails with "invalid attribute request"
  - Resolves: Bug 1732053 - etime can contain invalid nanosecond value
  - Resolves: Bug 1546739 - consistency in the replication error codes while setting nsds5replicaid=65535


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-10
changelog:
  - Bump version to 1.3.9.1-10
  - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-9
changelog:
  - Bump version to 1.3.9.1-9
  - Resolves: Bug 1713361 - Update defaults.inf (fix missing first commit)
  - Resolves: Bug 1716267 - dse.ldif strip-off string after 1023 character


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-8
changelog:
  - Bump version to 1.3.9.1-8
  - Resolves: Bug 1702740 - ns-slapd craches on IPA Servers throughout the customer's topology
  - Resolves: Bug 1715091 - ds-replcheck does not always print a Result summary
  - Resolves: Bug 1713361 - Update defaults.inf
  - Resolves: Bug 1708215 - maxlogsperdir accepting negative values
  - Resolves: Bug 1701092 - segfault when using pam passthru and addn plugins together


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-7
changelog:
  - Bump version to 1.3.9.1-7
  - Resolves: Bug 1704314 - [abrt] [faf] 389-ds-base: objset_find(): /usr/sbin/ns-slapd killed by 11 
  - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
  - Resolves: Bug 1710848 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-6
changelog:
  - Bump version to 1.3.9.1-6
  - Resolves: Bug 1705125 - ipa-replica-install with 389-ds-base-1.3.9.1-5.el7
  - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
  - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
  - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-5
changelog:
  - Bump version to 1.3.9.1-5
  - Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck 
  - Resolves: Bug 1668457 - CVE-2019-3883 389-ds-base: DoS via hanging secured connections
  - Resolves: Bug 1695014 - Clarify the ability to change the NOFILE limit
  - Resolves: Bug 1615155 - extended search fails to match entries
  - Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-4
changelog:
  - Bump version to 1.3.9.1-4
  - Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database.
  - Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements.
  - Resolves: Bug 1627846 - Contention on virtual attribute lookup (parts 2 & 3)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-3
changelog:
  - Bump version to 1.3.9.1-3
  - Resolves: Bug 1651279 - The dirsrv user is no longer created with uid 389
  - Resolves: Bug 1542469 - Why does the mep_origination entry toggle from tombstone/not_tombstone 
  - Resolves: Bug 1689313 - OPERATIONS ERROR when trying to delete a group with automember members
  - Resolves: Bug 1673472 - the warning about skew time could last forever.
  - Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
  - Resolves: Bug 1482596 - referint update should discard any changes if mep update fails


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-2
changelog:
  - Bump version to 1.3.9.1-2
  - Resolves: Bug 1417340 - entry cache is not cleaned up if an operation is aborted
  - Resolves: Bug 1603140 - Export produces a non-importable ldif file
  - Resolves: Bug 1518320 - ns-slapd: crash in entrycache_add_int
  - Resolves: Bug 1680245 - Error in memberof-plugin cause failures in ipa group-mod
  - Resolves: Bug 1589144 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.9.1-1
changelog:
  * Bump version to 1.3.9.1-1
  - Resolves: Bug 1438144 - [RFE] Include autounmembering feature in IPA
  - Resolves: Bug 1645359 - Rebase 389-ds-base in RHEL 7.7 to 1.3.9
  - Resolves: Bug 1561769 - [RFE] revise the "transient error" message in a replication agreement's last update status
  - Resolves: Bug 1563999 - Is it possible for Directory server to reject the current password only?
  - Resolves: Bug 1597202 - PassSync not setting pwdLastSet attribute in Active Directory after Pw update from LDAP sync for normal user
  - Resolves: Bug 1601241 - ns-slapd - Crash when using bak2db.pl to restore a single database
  - Resolves: Bug 1629055 - ds-replcheck unreliable, showing false positives
  - Resolves: Bug 1630513 - Customer requesting -y option for ds-replcheck
  - Resolves: Bug 1639192 - Request to add passwordSendExpiringTime in password policy objectclass
  - Resolves: Bug 1643587 - default of "nsslapd-errorlog-maxlogsperdir: 1" causing huge log files
  - Resolves: Bug 1643772 - ds-replcheck should validate suffix exists and it's replicated
  - Resolves: Bug 1647133 - Log warn instead of ERR when aci target does not exist.
  - Resolves: Bug 1653163 - certmap fails when Issuer DN has comma in name
  - Resolves: Bug 1602001 - cannot add cenotaph in read only consumer
  - Resolves: Bug 1589144 - shadowWarning is not generated if passwordWarning is lower than 86400 seconds (1 day)
  - Resolves: Bug 1600631 - In repicated topology a single-valued attribute can diverge
  - Resolves: Bug 1626375 - on-line re-initialization hangs
  - Resolves: Bug 1627846 - Contention on virtual attribute lookup
  - Resolves: Bug 1642838 - after certain failed import operation, impossible to replay an import operation
  - Resolves: Bug 1647099 - audit logs does not capture the operation where nsslapd-lookthroughlimit is modified 
  - Resolves: Bug 1648922 - during MODRDN referential integrity can fail erronously while updating large groups
  - Resolves: Bug 1652984 - Subtree password policy overrides a user-defined password policy
  - Resolves: Bug 1663829 - import task should not be deleted after import finishes to be able to query the status.
  - Resolves: Bug 1623935 - upgrade of 389-ds-base could remove replication agreements
  - Resolves: Bug 1622049 - db2bak.pl does not work with LDAPS, but ok with STARTTLS
  - Resolves: Bug 1633488 - fixup-memberof.pl -D cn=<> -w - -b <> -P LDAP fails with ldap_start_tls error
  - Resolves: Bug 1451460 - error messages during ldif2db after enabling encryption on an attribute
  - Resolves: Bug 1627512 - After RHEL 7.6 HTB update, unable to set nsslapd-cachememsize (RHDS 10) to custom value


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-18
changelog:
  - Bump version to 1.3.8.4-18
  - Resolves: Bug 1638516 - CRIT - list_candidates - NULL idl was recieved from filter_candidates_ex


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-16
changelog:
  - Bump version to 1.3.8.4-16
  - Resolves: Bug 1638513 - Message: "CRIT - list_candidates - NULL idl was recieved from filter_candidates_ext." should not be critical


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-13
changelog:
  - Bump version to 1.3.8.4-13
  - Resolves: Bug 1623949 - Crash in delete_passwdPolicy when persistent search connections are terminated unexpectedly


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-12
changelog:
  - Bump version to 1.3.8.4-12
  - Resolves: Bug 1616412 - filter optimization fix causes regression(fix reverted)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-11
changelog:
  - Bump version to 1.3.8.4-11
  - Resolves: Bug 1614820 - Server crash through modify command with large DN


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-10
changelog:
  - Bump verison to 1.3.8.4-10
  - Resolves: Bug 1614501 - Disable nunc-stans by default
  - Resolves: Bug 1607078 - ldapsearch with server side sort crashes the ldap server


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-9
changelog:
  - Bump version to 1.3.8.4-9
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-8
changelog:
  - Bump version to 1.3.8.4-8
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-7
changelog:
  - Bump version to 1.3.8.4-7
  - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA (removed patch file all together)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-6
changelog:
  - Bump version to 1.3.8.4-6
  - Resolves: Bug 1595766 - backout this fix for now because it breaks FreeIPA


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-5
changelog:
  - Bump version to 1.3.8.4-5
  - Resolves: Bug 1595766 - CVE-2018-10871 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-4
changelog:
  - Bump version to 1.3.8.4-4
  - Resolves: Bug 1597384 - Async operations can hang when the server is running nunc-stans
  - Resolves: Bug 1598186 - A search with the scope "one" returns a non-matching entry
  - Resolves: Bug 1598718 - import fails if backend name is "default" 
  - Resolves: Bug 1598478 - If a replica is created with a bindDNGroup, this group is taken into account only after bindDNGroupCheckInterval seconds
  - Resolves: Bug 1525256 - Invalid SNMP MIB for 389 DS
  - Resolves: Bug 1597518 - ds-replcheck command returns traceback errors against ldif files having garbage content when run in offline mode


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-3
changelog:
  - Bump version to 1.3.8.4-3
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.8.4-2
changelog:
  - Bump version to 1.3.8.4-2
  - Resolves: Bug 1594484 - setup-ds.pl not able to handle/create the user "dirsrv" if there is an already existing user with the UID/GID 389 on the machine.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5.17
changelog:
  - Bump version to 1.3.7.5.17
  - Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
  - Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
  - Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-16
changelog:
  - Bump version to 1.3.7.5-16
  - Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-15
changelog:
  - Bump version to 1.3.7.5-15
  - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
  - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
  - Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-14
changelog:
  - Bump version to 1.3.7.5-14
  - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-13
changelog:
  - Bump version to 1.3.7.5-13
  - Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
  - Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
  - Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
  - Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
  - Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-12
changelog:
  - Bump version to 1.3.7.5-12
  - Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
  - Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
  - Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
  - Resolves: Bug 1518287 - heap-use-after-free in csn_as
  - Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
  - Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
  - Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
  - Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
  - Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-11
changelog:
  - Bump version to 1.3.7.5-11
  - Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
  - Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
  - Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
  - Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-10
changelog:
  - Bump version to 1.3.7.5-10
  - Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
  - Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
  - Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
  - Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
  - Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
  - Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
  - Resolves: Bug 1498980 - heap corruption during import
  - Resolves: Bug 1511462 - scope one searches give incorrect results
  - Resolves: Bug 1514033 - opened connection are hanging, no longer poll


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-8
changelog:
  - Bump version to 1.3.7.5-8
  - Resolves: Bug 1509016 - cleanallruv task is not logging any information


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-7
changelog:
  - Bump version to 1.3.7.5-7
  - Resolves: Bug 1474100 - Use of uninitialized value in string ne at /usr/bin/logconv.pl
  - Resolves: Bug 1506425 - Improve valueset sort performance during valueset purging
  - Resolves: Bug 1505046 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV
  - Resolves: Bug 1271208 - nsds5ReplicaProtocolTimeout attribute accepts negative values


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-6
changelog:
  - Bump version to 1.3.7.5-6
  - Resolves: Bug 1488836 - directory server fails to start because maxdisksize 
  - Resolves: Bug 1474100 - Use of uninitialized value in string ne at /usr/bin/logconv.pl
  - Resolves: Bug 1447308 - Add option to show full un-ellipsized output in status-dirsrv
  - Resolves: Bug 1438526 - Server allows to set any nsds5replicaid in the existing replica entry
  - Resolves: Bug 1185774 - Missing warning for invalid replica backoff configuration


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-5
changelog:
  - Bump version to 1.3.7.5-5
  - Resolves: Bug 1476207 - Enabling instance service doesn't work 
  - Resolves: Bug 1434335 - Errors log filled with attrlist_replace - attr_replace
  - Resolves: Bug 1453155 - unable to retrieve specific cosAttribute when subtree password policy is configured
  - Resolves: Bug 1459965 - repl-monitor - matches null string many times in regex 
  - Resolves: Bug 1463204 - Adding a database entry fails if the same database was deleted after an import
  - Resolves: Bug 1469567 - Activating roles returns error 16
  - Resolves: Bug 1498773 - Installation of ipa fails with crash in topology plugin
  - Resolves: Bug 1501058 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
  - Resolves: Bug 1352121 - [RFE] allow to enable MemberOf plugin in dedicated consumer


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.7.5-2
changelog:
  - Bump version to 1.3.7.5-2
  - specfile updates: add asan support, make nunc-stans default, and general cleanup


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-16
changelog:
  - Bump version to 1.3.6.1-16
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
  - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
  - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
  - Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
  - Resolves: Bug 1456774 - ipa-replica server fails to upgrade


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-15
changelog:
  - Bump version to 1.3.6.1-15
  - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
  - Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
  - Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
  - Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-14
changelog:
  - Bump version to 1.3.6.1-14
  - Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
  - Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
  - Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
  - Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
  - Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
  - Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
  - Resolves: Bug 1451657 - -v option is not working for db2ldif.pl


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-13
changelog:
  - Bump version to 1.3.6.1-13
  - Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-11
changelog:
  - Bump version to 1.3.6.1-11
  - Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
  - Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-10
changelog:
  - Bump version to 1.3.6.1-10
  - Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
  - Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
  - Resolves: Bug 1377452 - Integer overflow in performance counters
  - Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
  - Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
  - Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-9
changelog:
  - Bump version to 1.3.6.1-9
  - Resolves: Bug 1442880 - setup-ds-admin.pl -u with nsslapd-localhost changed
  - Resolves: Bug 1443682 - util_info_sys_pages should be able to detect memory restrictions in a cgroup


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-8
changelog:
  - Bump version to 1.3.6.1-8
  - Resolves: Bug 1432016 - Possible deadlock while installing an ipa replica
  - Resolves: Bug 1438029 - Overflow in memberof


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-7
changelog:
  - Bump version to 1.3.6.1-7
  - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set(fix crash regression)
  - Resolves: bug 1381326 - dirsrv-snmp.service is provided by 389-ds-base instead of 389-ds-base-snmp
  - Resolves: bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl.


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-6
changelog:
  - Bump version to 1.3.6.1-6
  - Resolves: bug 1437006 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages
  - Resolves: bug 1341689 - dbmon.sh / cn=monitor] nsslapd-db-pages-in-use is increasing
  - Resolves: bug 1394899 - RHDS should ignore passwordMinAge if "password must reset" is set
  - Resolves: bug 1397288 - typo in logconv.pl man page
  - Resolves: bug 1436994 - incorrect pathes in pkg-config files
  - Resolves: bug 1396448 - Add a hard dependency for >=selinux-policy-3.13.1-75


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-5
changelog:
  - Bump version to 1.3.6.1-5
  - Resolves: bug 1377452 - Integer overflow in counters and monitor
  - Resolves: bug 1425907 - Harden password storage scheme
  - Resolves: bug 1431207 - ns-slapd killed by SIGABRT


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-4
changelog:
  - Bump version to 1.3.6.1-4
  - Resolves: bug 1379424 - Reset-agmt-update-staus-and-total-init
  - Resolves: bug 1394000 - dbmon.sh-fails-if-you-have-nsslapd-requi.patch
  - Resolves: bug 1417344 - targetattr-wildcard-evaluation-is-incorr.patch
  - Resolves: bug 1429770 - ds-logpipe.py-crashes-for-non-existing-u.patch
  - Resolves: bug 1433697 - Fix-double-free-in-_cl5NewDBFile-error-path.patch
  - Resolves: bug 1433996 - retrocl-can-crash-server-at-shutdown.patch
  - Resolves: bug 1434967 - rpm-would-not-create-valid-pkgconfig-fi.patch
  - Resolves: bug 1417338 - To-debug-DB_DEADLOCK-condition-allow-to.patch
  - Resolves: bug 1433850 - Deleting-suffix-can-hang-server.patch


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.6.1-2
changelog:
  - Bump version to 1.3.6.1-2
  - Resolves: bug 1431877 - 389-1.3.6.1-1.el7 covscan errors
  - Resolves: bug 1432206 - content sync plugin can hang server shutdown
  - Resolves: bug 1432149 - sasl external binds fail in 1.3.6.1


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-12
changelog:
  - Release 1.3.5.10-12
  - Resolves: bug 1384785 - Replica install fails with old IPA master sometimes during replication process (DS 48992)
  - Resolves: bug 1388501 - 389-ds-base is missing runtime dependency - bind-utils (DS 48328)
  - Resolves: bug 1388581 - Replication stops working only when fips mode is set to true (DS 48909)
  - Resolves: bug 1390342 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin (DS 49014)
  - Resolves: bug 1390343 - trace args debug logging must be more restrictive (DS 49009)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-11
changelog:
  - Release 1.3.5.10-11
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-10
changelog:
  - Release 1.3.5.10-10
  - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957)
  - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-9
changelog:
  - Release 1.3.5.10-9
  - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950)
  - Resolves: bug 1366828 - audit on failure doesn't work if attribute nsslapd-auditlog-logging-enabled is NOT enabled (DS 48958)
  - Resolves: bug 1368520 - Crash in import_wait_for_space_in_fifo() (DS 48960)
  - Resolves: bug 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option
  - Resolves: bug 1369537 - passwordMinAge attribute doesn't limit the minimum age of the password (DS 48967)
  - Resolves: bug 1369570 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964)
  - Resolves: bug 1369425 - ACI behaves erratically (DS 48972)
  - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957)
  - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)
  - Resolves: bug 1371283 - Server Side Sorting crashes the server. (DS 48970)
  - Resolves: bug 1371284 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-8
changelog:
  - Release 1.3.5.10-8
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48954)
  - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950)
  - Resolves: bug 1366561 - ns-accountstatus.pl giving error even "No such object (32)" (DS 48956)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-7
changelog:
  - Release 1.3.5.10-7
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1360976 - fixing a compiler warning


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-6
changelog:
  - Release 1.3.5.10-6
  - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48928)
  - Resolves: bug 1360447 - nsslapd-workingdir is empty when ns-slapd is started by systemd (DS 48939)
  - Resolves: bug 1360327 - remove-ds.pl deletes an instance even if wrong prefix was specified (DS 48934)
  - Resolves: bug 1349815 - DS logs have warning:ancestorid not indexed for all CS subsystems (DS 48940)
  - Resolves: bug 1329061 - 389-ds-base-1.3.4.0-29.el7_2 "hang" (DS 48882)
  - Resolves: bug 1360976 - EMBARGOED CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack
  - Resolves: bug 1361134 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password (DS 48943) 
  - Resolves: bug 1361321 - Duplicate collation entries (DS 48936)
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-5
changelog:
  - Release 1.3.5.10-5
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-4
changelog:
  - Release 1.3.5.10-4
  - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)
  - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat
  - Resolves: bug 1354660 - flow control in replication also blocks receiving results (DS 48767)
  - Resolves: bug 1356261 - Fixup tombstone task needs to set proper flag when updating (DS 48924)
  - Resolves: bug 1355760 - ns-slapd crashes during the deletion of backend (DS 48922)
  - Resolves: bug 1353629 - DS shuts down automatically if dnaThreshold is set to 0 in a MMR setup (DS 48916)
  - Resolves: bug 1355879 - nunc-stans: ns-slapd crashes during startup with SIGILL on AMD Opteron 280 (DS 48925)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-2
changelog:
  - Release 1.3.5.10-2
  - Resolves: bug 1353714 - If a cipher is disabled do not attempt to look it up (DS 48743)
  - Resolves: bug 1353592 - Setup-ds.pl --update fails - regression (DS 48755)
  - Resolves: bug 1353544 - db2bak.pl task enters infinitive loop when bak fs is almost full (DS 48914)
  - Resolves: bug 1354374 - Upgrade to 389-ds-base >= 1.3.5.5 doesn't install 389-ds-base-snmp (DS 48918)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-1
changelog:
  - Release 1.3.5.10-1
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48905)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.9-1
changelog:
  - Release 1.3.5.9-1
  - Resolves: bug 1349571 - Improve MMR replication convergence (DS 48636)
  - Resolves: bug 1304682 - "stale" automember rule (associated to a removed group) causes discrepancies in the database (DS 48637)
  - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755)
  - Resolves: bug 1316731 - syncrepl search returning error 329; plugin sending a bad error code (DS 48904)
  - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule  (DS 48891)
  - Resolves: bug 1349577 - Values of dbcachetries/dbcachehits in cn=monitor could overflow. (DS 48899)
  - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT (DS 48898)
  - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538)
  - Resolves: bug 1350632 - ns-slapd shutdown crashes if pwdstorageschema name is from stack. (DS 48902)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.8-1
changelog:
  - Release 1.3.5.8-1
  - Resolves: bug 1290101 - proxyauth support does not work when bound as directory  manager (DS 48366)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.7-1
changelog:
  - Release 1.3.5.7-1
  - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109)
  - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449)
  - Resolves: bug 1290101 - proxyauth support does not work when bound as directory  manager (DS 48366)
  - Resolves: bug 1338872 - Wrong result code display in audit-failure log (DS 48892)
  - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538)
  - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule  (DS 48891)
  - Resolves: bug 1347407 - By default aci can be read by anonymous (DS 48354)
  - Resolves: bug 1347412 - cn=SNMP,cn=config entry can be read by anonymous (DS 48893)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.6-1
changelog:
  - Release 1.3.5.6-1
  - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982)
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48766, DS 48636)
  - Resolves: bug 1233926 - "matching rules" in ACI's "bind rules not fully evaluated (DS 48234)
  - Resolves: bug 1346165 - 389-ds-base-1.3.5.5-1.el7.x86_64 requires policycoreutils-py


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.5-1
changelog:
  - Release 1.3.5.5-1
  - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 48833)
  - Resolves: bug 1344414 - [RFE] adding pre/post extop ability (DS 48880)
  - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449)
  - Resolves: bug 1257568 - /usr/lib64/dirsrv/libnunc-stans.so is owned by both -libs and -devel (DS 48404)
  - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755)
  - Resolves: bug 1342609 - At startup DES to AES password conversion causes timeout in start script (DS 48862)
  - Resolves: bug 1316328 - search returns no entry when OR filter component contains non readable attribute (DS 48275)
  - Resolves: bug 1280456 - setup-ds should detect if port is already defined (DS 48336)
  - Resolves: bug 1312557 - dirsrv service fails to start when nsslapd-listenhost is configured (DS 48747)
  - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48752)
  - Resolves: bug 1340307 - Running db2index with no options breaks replication (DS 48854)
  - Resolves: bug 1337195 - Regression introduced in matching rules by DS 48746 (DS 48844)
  - Resolves: bug 1335492 - Modifier's name is not recorded in the audit log with modrdn and moddn operations (DS 48834)
  - Resolves: bug 1316741 - ldctl should support -H with ldap uris (DS 48754)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.4-1
changelog:
  - release 1.3.5.4-1
  - Resolves: bug 1334455 - db2ldif is not taking into account multiple suffixes or backends (DS 48828)
  - Resolves: bug 1241563 - The "repl-monitor" web page does not display "year" in date. (DS 48220)
  - Resolves: bug 1335618 - Server ram sanity checks work in isolation (DS 48617)
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48837)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.3-1
changelog:
  - release 1.3.5.3-1
  - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
  - Resolves: bug 1332533 - ns-accountstatus.pl gives error message on execution along with results. (DS 48815)
  - Resolves: bug 1332709 - password history is not updated when an admin resets the password (DS 48813)
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48822)
  - Resolves: bug 1333515 - Enable DS to offer weaker DH params in NSS  (DS 48798)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.2-1
changelog:
  - release 1.3.5.2-1
  - Resolves: bug 1270020 - Rebase 389-ds-base to 1.3.5 in RHEL-7.3 
  - Resolves: bug 1288229 - many attrlist_replace errors in connection with cleanallruv (DS 48283)
  - Resolves: bug 1315893 - License tag does not match actual license of code (DS 48757)
  - Resolves: bug 1320715 - DES to AES password conversion fails if a backend is empty (DS 48777)
  - Resolves: bug 190862  - [RFE] Default password syntax settings don't work with fine-grained policies (DS 142)
  - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 548)
  - Resolves: bug 1143066 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid (DS 48285)
  - Resolves: bug 1153758 - [RFE] Support SASL/GSSAPI when ns-slapd is behind a load-balancer (DS 48332)
  - Resolves: bug 1160902 - search, matching rules and filter error "unsupported type 0xA9" (DS 48016)
  - Resolves: bug 1186512 - High memory fragmentation observed in ns-slapd; OOM-Killer invoked (DS 48377, 48129)
  - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109)
  - Resolves: bug 1209094 - [RFE] Allow logging of rejected changes (DS 48145, 48280)
  - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
  - Resolves: bug 1210842 - [RFE] Add PIDFile option to systemd service file (DS 47951)
  - Resolves: bug 1223510 - [RFE] it could be nice to have nsslapd-maxbersize default to bigger than 2Mb (DS 48326)
  - Resolves: bug 1229799 - ldclt-bin killed by SIGSEGV (DS 48289)
  - Resolves: bug 1249908 - No validation check for the value for nsslapd-db-locks. (DS 48244)
  - Resolves: bug 1254887 - No man page entry for - option '-u' of dbgen.pl for adding group entries with uniquemembers (DS 48290)
  - Resolves: bug 1255557 - db2index creates index entry from deleted records (DS 48252)
  - Resolves: bug 1258610 - total update request must not be lost (DS 48255)
  - Resolves: bug 1258611 - dna plugin needs to handle binddn groups for authorization (DS 48258)
  - Resolves: bug 1259624 - [RFE] Provide a utility to detect accounts locked due to inactivity (DS 48269)
  - Resolves: bug 1259950 - Add config setting to MemberOf Plugin to add required objectclass got memberOf attribute (DS 48267)
  - Resolves: bug 1266510 - Linked Attributes plug-in - wrong behaviour when adding valid and broken links (DS 48295)
  - Resolves: bug 1266532 - Linked Attributes plug-in - won't update links after MODRDN operation (DS 48294)
  - Resolves: bug 1267750 - pagedresults - when timed out, search results could have been already freed. (DS 48299)
  - Resolves: bug 1269378 - ds-logpipe.py with wrong arguments - python exception in the output (DS 48302)
  - Resolves: bug 1271330 - nunc-stans: Attempt to release connection that is not acquired (DS 48311)
  - Resolves: bug 1272677 - nunc stans: ns-slapd killed by SIGTERM
  - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT
  - Resolves: bug 1273142 - crash in Managed Entry plugin (DS 48312)
  - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982)
  - Resolves: bug 1273550 - Deadlock between two MODs on the same entry between entry cache and backend lock (DS 47978)
  - Resolves: bug 1273555 - deadlock in mep delete post op (DS 47976)
  - Resolves: bug 1273584 - lower password history minimum to 1 (DS 48394)
  - Resolves: bug 1275763 - [RFE] add setup-ds.pl option to disable instance specific scripts (DS 47840)
  - Resolves: bug 1276072 - [RFE] Allow RHDS to be setup using a DNS CNAME alias for General.FullMachineName (DS 48328)
  - Resolves: bug 1278567 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)
  - Resolves: bug 1278584 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well. (DS 48339)
  - Resolves: bug 1278755 - deadlock on connection mutex (DS 48341)
  - Resolves: bug 1278987 - Cannot upgrade a consumer to supplier in a multimaster environment (DS 48325)
  - Resolves: bug 1280123 - acl - regression - trailing ', (comma)' in macro matched value is not removed. (DS 48344)
  - Resolves: bug 1290111 - [RFE] Support for rfc3673 '+' to return operational attributes (DS 48363)
  - Resolves: bug 1290141 - With exhausted range, part of DNA shared configuration is deleted after server restart (DS 48362)
  - Resolves: bug 1290242 - SimplePagedResults -- in the search error case, simple paged results slot was not released. (DS 48375)
  - Resolves: bug 1290600 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same ldapmodify operation (DS 48370)
  - Resolves: bug 1295947 - 389-ds hanging after a few minutes of operation (DS 48406, revert 48338)
  - Resolves: bug 1296310 - ldclt - segmentation fault error while binding (DS 48400)
  - Resolves: bug 1299758 - CVE-2016-0741 389-ds-base: Worker threads do not detect abnormally closed connections causing DoS [rhel-7.3]
  - Resolves: bug 1301097 - logconv.pl displays negative operation speeds (DS 48446)
  - Resolves: bug 1302823 - Crash in slapi_get_object_extension (DS 48536)
  - Resolves: bug 1303641 - heap corruption at schema replication. (DS 48492)
  - Resolves: bug 1307151 - keep alive entries can break replication (DS 48445)
  - Resolves: bug 1310848 - Supplier can skip a failing update, although it should retry. (DS 47788)
  - Resolves: bug 1314557 - change severity of some messages related to "keep alive" enties (DS 48420)
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1316742 - no plugin calls in tombstone purging (DS 48759)
  - Resolves: bug 1319329 - [RFE] add nsslapd-auditlog-logging-enabled: off to template-dse.ldif (DS 48145)
  - Resolves: bug 1320295 - If nsSSL3 is on, even if SSL v3 is not really enabled, a confusing message is logged. (DS 48775)
  - Resolves: bug 1326520 - db2index uses a buffer size derived from dbcachesize (DS 48383)
  - Resolves: bug 1328936 - objectclass values could be dropped on the consumer (DS 48799)
  - Resolves: bug 1287475 - [RFE] response control for password age should be sent by default by RHDS (DS 48369)
  - Resolves: bug 1331343 - Paged results search returns the blank list of entries (DS 48808)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-19
changelog:
  - release 1.3.4.0-19
  - Resolves: bug 1228823 - async simple paged results issue (DS 48299, DS 48192)
  - Resolves: bug 1266944 - ns-slapd crash during ipa-replica-manage del (DS 48298)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-18
changelog:
  - release 1.3.4.0-18
  - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266, DS 48284)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-17
changelog:
  - release 1.3.4.0-17
  - Resolves: bug 1259949 - A backport error (coverity -- unused variable 'init_retry')


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-16
changelog:
  - release 1.3.4.0-16
  - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48276, DS 48226)
  - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266)
  - Resolves: bug 1241723 - cleanallruv - fix regression with server shutdown (DS 48217)
  - Resolves: bug 1264224 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in (DS 48188)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-15
changelog:
  - release 1.3.4.0-15
  - Resolves: bug 1258996 - Complex filter in a search request doen't work as expected. (regression) (DS 48265)
  - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-14
changelog:
  - release 1.3.4.0-14
  - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228)
  - Resolves: bug 1255851 - Shell CLI fails with usage errors if an argument containing white spaces is given (DS 48254)
  - Resolves: bug 1256938 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax (DS 47757)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-12
changelog:
  - release 1.3.4.0-12
  - Resolves: bug 1252133 - replica upgrade failed in starting dirsrv service (DS 48243)
  - Resolves: bug 1254344 - Server crashes in ACL_LasFindFlush during shutdown if ACIs contain IP addresss restrictions (DS 48233)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-11
changelog:
  - release 1.3.4.0-11
  - Resolves: bug 1249784 - ipa-dnskeysyncd unhandled exception on named-pkcs11 start (DS 48249)
  - Resolves: bug 1252082 - removing chaining database links trigger valgrind read error (DS 47686)
  - Resolves: bug 1252207 - bashisms in 389-ds-base admin scripts (DS 47511)
  - Resolves: bug 1252533 - Man pages and help for remove-ds.pl doesn't display "-a" option (DS 48245)
  - Resolves: bug 1252781 - Slapd crashes reported from latest builds (DS 48250)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-9
changelog:
  - release 1.3.4.0-9
  - Resolves: bug 1240876 - verify_db.pl doesn't verify DB specified by -a option. (DS 48215)
  - Resolves: bug 1245235 - winsync lastlogon attribute not syncing between IPA & Windows 2008. (DS 48232)
  - Resolves: bug 1245519 - Deadlock with retrochangelog, memberof plugin (DS 47931)
  - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228)
  - Resolves: bug 1247811 - logconv autobind handling regression caused by 47446 (DS 48231)
  - Resolves: bug 1250177 - Investigate betxn plugins to ensure they return the correct error code (DS 47810)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-8
changelog:
  - release 1.3.4.0-8
  - Resolves: bug 1160243 - [RFE] allow logconv.pl -S/-E switches to work even when exact/same timestamps are not present in access log file (DS 47910)
  - Resolves: bug 1172037 - winsync range retrieval gets only 5000 values upon initialization (DS 48010)
  - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)
  - Resolves: bug 1243950 - When starting a replica agreement a deadlock can occur with an op updating nsuniqueid index (DS 48179)
  - Resolves: bug 1243970 -  In MMR, double free coould occur under some special condition (DS 48226)
  - Resolves: bug 1244926 - Crash while triming the retro changelog (DS 48206)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-7
changelog:
  - release 1.3.4.0-7
  - Resolves: bug 1235060 - Fix coverity issues - 07/14/2015 (DS 48203)
  - Resolves: bug 1242531 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-6
changelog:
  - release 1.3.4.0-6
  - Resolves: bug 1240845 - cleanallruv should completely clean changelog (DS 48208)
  - Resolves: bug 1095603 - Any negative LDAP error code number reported as Illegal error by ldclt. (DS 47799)
  - Resolves: bug 1168675 - Inconsistent behaviour of DS when LDAP Sync is used with an invalid cookie (DS 48013)
  - Resolves: bug 1241723 - cleanAllRUV hangs shutdown if not all of the replicas are online (DS 48217)
  - Resolves: bug 1241497 - crash in ns-slapd when deleting winSyncSubtreePair from sync agreement (DS 48216)
  - Resolves: bug 1240404 - Silent install needs to properly exit when INF file is missing (DS 48119)
  - Resolves: bug 1240406 - Remove warning suppression in 1.3.4 (DS 47878)
  - Resolves: bug 1242683 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute (DS 48223)
  - Resolves: bug 1160243 - logconv.pl - validate start and end time args (DS 47910)
  - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)
  - Resolves: bug 1230996 - CI test: fixing test cases for ticket 48194 (DS 48194)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-4
changelog:
  - release 1.3.4.0-4
  - Resolves: bug 1240404 - setup-ds.pl does not log invalid --file path errors the same (DS 48119)
  - Resolves: bug 1240406 - setup -u stops after first failure (DS 47878)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-3
changelog:
  - release 1.3.4.0-3
  - Resolves: bug 1228823 - async simple paged results issue (DS 48192)
  - Resolves: bug 1237325 - reindex off-line twice could provoke index corruption (DS 48212)
  - Resolves: bug 1238790 - ldapsearch on nsslapd-maxbersize returns 0 instead of current value (DS 48214)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-2
changelog:
  - release 1.3.4.0-2
  - Resolves: bug 1235060 - Fix coverity issues 
  - Resolves: bug 1235387 - Slow replication when deleting large quantities of multi-valued attributes (DS 48195)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-1
changelog:
  - Release 1.3.4.0-1 (rebase)
  - Enable nunc-stans for x86_64.
  - Resolves: bug 1034325 - Linked attributes betxnpreoperation - transaction not aborted when linked entry does not exit (DS 47640)
  - Resolves: bug 1052755 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute (DS 47669)
  - Resolves: bug 1096409 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown (DS 47801)
  - Resolves: bug 1145378 - Adding an entry with an invalid password as rootDN is incorrectly rejected (DS 47900)
  - Resolves: bug 1145382 - Bad manipulation of passwordhistory (DS 47905)
  - Resolves: bug 1154147 - Uniqueness plugin: should allow to exclude some subtrees from its scope (DS 47927)
  - Resolves: bug 1171358 - Make ReplicaWaitForAsyncResults configurable (DS 47957)
  - Resolves: bug 1171663 - MODDN fails when entry doesn't have memberOf attribute and new DN is in the scope of memberOfExcludeSubtree (DS 47526)
  - Resolves: bug 1174457 - [RFE] memberOf - add option to skip nested group lookups during delete operations (DS 47963)
  - Resolves: bug 1178640 - db2bak.pl man page should be improved. (DS 48008)
  - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)
  - Resolves: bug 1180331 - Local Password Policies for Nested OU's not honoured (DS 47980)
  - Resolves: bug 1180776 - nsslapd-db-locks modify not taking into account (DS 47934)
  - Resolves: bug 1181341 - nsslapd-changelogtrim-interval and nsslapd-changelogcompactdb-interval are not validated (DS 47617)
  - Resolves: bug 1185882 - ns-activate.pl fails to activate account if it was disabled on AD (DS 48001)
  - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005)
  - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030)
  - Resolves: bug 1206309 - winsync sets AccountUserControl in AD to 544 (DS 47723)
  - Resolves: bug 1210845 - slapd crashes during Dogtag clone reinstallation (DS 47966)
  - Resolves: bug 1210850 - add an option '-u' to dbgen.pl for adding group entries with (DS 48025)
  - Resolves: bug 1210852 - aci with wildcard and macro not correctly evaluated (DS 48141)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-19
changelog:
  - release 1.3.3.1-19
  - Resolves: bug 1230996 - nsSSL3Ciphers preference not enforced server side (DS 48194)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-18
changelog:
  - release 1.3.3.1-18
  - Resolves: bug 1228823 - async simple paged results issue (DS 48146, DS 48192)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-17
changelog:
  - release 1.3.3.1-17
  - Resolves: bug 1226510 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane (DS 48190)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-16
changelog:
  - release 1.3.3.1-16
  - Resolves: bug 1212894 - CVE-2015-1854 389ds-base: access control bypass with modrdn


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-14
changelog:
  - release 1.3.3.1-14
  - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030)
              Fixes spec file to make sure all the server instances are stopped before upgrade
  - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-12
changelog:
  - release 1.3.3.1-12
  - Resolves: bug 1182477 - Windows Sync accidentally cleared raw_entry (DS 47989)
  - Resolves: bug 1180325 - upgrade script fails if /etc and /var are on different file systems (DS 47991 )
  - Resolves: bug 1183655 - Schema learning mechanism, in replication, unable to extend an existing definition (DS 47988)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-11
changelog:
  - release 1.3.3.1-11
  - Resolves: bug 1080186 - During delete operation do not refresh cache entry if it is a tombstone (DS 47750)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-10
changelog:
  - release 1.3.3.1-10
  - Resolves: bug 1172731 - CVE-2014-8112 password hashing bypassed when "nsslapd-unhashed-pw-switch" is set to off 
  - Resolves: bug 1166265 - DS hangs during online total update (DS 47942)
  - Resolves: bug 1168151 - CVE-2014-8105 information disclosure through 'cn=changelog' subtree
  - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable (DS 47526)
  - Resolves: bug 1171356 - Bind DN tracking unable to write to internalModifiersName without special permissions (DS 47950)
  - Resolves: bug 1153737 - logconv.pl -- support parsing/showing/reporting different protocol versions (DS 47949)
  - Resolves: bug 1171355 - start dirsrv after chrony on RHEL7 and Fedora (DS 47947)
  - Resolves: bug 1170707 - cos_cache_build_definition_list does not stop during server shutdown (DS 47967)
  - Resolves: bug 1170708 - COS memory leak when rebuilding the cache (DS - Ticket 47969)
  - Resolves: bug 1170709 - Account lockout attributes incorrectly updated after failed SASL Bind (DS 47970)
  - Resolves: bug 1166260 - cookie_change_info returns random negative number if there was no change in a tree (DS 47960)
  - Resolves: bug 1012991 - Error log levels not displayed correctly (DS 47636)
  - Resolves: bug 1108881 - rsearch filter error on any search filter (DS 47722)
  - Resolves: bug 994690  - Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart (DS 47451)
  - Resolves: bug 1162997 - Running a plugin task can crash the server (DS 47451)
  - Resolves: bug 1166252 - RHEL7.1 ns-slapd segfault when ipa-replica-install restarts (DS 47451)
  - Resolves: bug 1172597 - Crash if setting invalid plugin config area for MemberOf Plugin (DS 47525)
  - Resolves: bug 1139882 - coverity defects found in 1.3.3.x (DS 47965)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-9
changelog:
  - release 1.3.3.1-9
  - Resolves: bug 1153737 - Disable SSL v3, by default. (DS 47928)
  - Resolves: bug 1163461 - Should not check aci syntax when deleting an aci (DS 47953)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-8
changelog:
  - release 1.3.3.1-8
  - Resolves: bug 1156607 - Crash in entry_add_present_values_wsi_multi_valued (DS 47937)
  - Resolves: bug 1153737 - Disable SSL v3, by default (DS 47928, DS 47945, DS 47948)
  - Resolves: bug 1158804 - Malformed cookie for LDAP Sync makes DS crash (DS 47939)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-6
changelog:
  - release 1.3.3.1-6
  - Resolves: bug 1151287 - dynamically added macro aci is not evaluated on the fly (DS 47922)
  - Resolves: bug 1080186 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten (DS 47897)
  - Resolves: bug 1150694 - Encoding of SearchResultEntry is missing tag (DS 47920)
  - Resolves: bug 1150695 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails. (DS 47919)
  - Resolves: bug 1139882 - Fix remaining compiler warnings (DS 47892)
  - Resolves: bug 1150206 - result of dna_dn_is_shared_config is incorrectly used (DS 47918)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-4
changelog:
  - release 1.3.3.1-4
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing  (DS 47750)
  - Resolves: bug 1145846 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server (DS 47908)
  - Resolves: bug 1117979 - harden the list of ciphers available by default (phase 2) (DS 47838)
                          - provide enabled ciphers as search result (DS 47880)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-2
changelog:
  - release 1.3.3.1-2
  - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748)
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47834)
  - Resolves: bug 1139882 - coverity defects found in 1.3.3.1 (DS 47890)
  - Resolves: bug 1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (DS 47885 - deref plugin should not return references with noc access rights)
  - Resolves: bug 1117979 - harden the list of ciphers available by default (DS 47838, DS 47895)
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47889 - DS crashed during ipa-server-install on test_ava_filter)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-1
changelog:
  - release 1.3.3.1-1
  - Resolves: bug 746646 - RFE: easy way to configure which users and groups to sync with winsync
  - Resolves: bug 881372 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts.
  - Resolves: bug 920597 - Possible to add invalid ACI value
  - Resolves: bug 921162 - Possible to add nonexistent target to ACI
  - Resolves: bug 923799 - if nsslapd-cachememsize set to the number larger than the RAM available, should result in proper error message.
  - Resolves: bug 924937 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync
  - Resolves: bug 951754 - Self entry access ACI not working properly
  - Resolves: bug 952517 - Dirsrv instance failed to start with Segmentation fault (core dump) after modifying 7-bit check plugin
  - Resolves: bug 952682 - nsslapd-db-transaction-batch-val turns to -1
  - Resolves: bug 966443 - Plugin library path validation
  - Resolves: bug 975176 - Non-directory manager can change the individual userPassword's storage scheme
  - Resolves: bug 979465 - IPA replica's - "SASL encrypted packet length exceeds maximum allowed limit"
  - Resolves: bug 982597 - Some attributes in cn=config should not be multivalued
  - Resolves: bug 987009 - 389-ds-base - shebang with /usr/bin/env
  - Resolves: bug 994690 - RFE: Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart
  - Resolves: bug 1012991 - errorlog-level 16384 is listed as 0 in cn=config
  - Resolves: bug 1013736 - Enabling/Disabling DNA plug-in throws "ldap_modify: Server Unwilling to Perform (53)" error
  - Resolves: bug 1014380 - setup-ds.pl doesn't lookup the "root" group correctly
  - Resolves: bug 1020459 - rsa_null_sha should not be enabled by default
  - Resolves: bug 1024541 - start dirsrv after ntpd
  - Resolves: bug 1029959 - Managed Entries betxnpreoperation - transaction not aborted upon failure to create managed entry
  - Resolves: bug 1031216 - add dbmon.sh
  - Resolves: bug 1044133 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result
  - Resolves: bug 1044134 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default
  - Resolves: bug 1044135 - make connection buffer size adjustable
  - Resolves: bug 1044137 - posix winsync should support ADD user/group entries from DS to AD
  - Resolves: bug 1044138 - mep_pre_op: Unable to fetch origin entry
  - Resolves: bug 1044139 - [RFE] Support RFC 4527 Read Entry Controls
  - Resolves: bug 1044140 - Allow search to look up 'in memory RUV'
  - Resolves: bug 1044141 - MMR stress test with dna enabled causes a deadlock
  - Resolves: bug 1044142 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist
  - Resolves: bug 1044143 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change
  - Resolves: bug 1044144 - resurrected entry is not correctly indexed
  - Resolves: bug 1044146 - Add a warning message when a connection hits the max number of threads
  - Resolves: bug 1044147 - 7-bit check plugin does not work for userpassword attribute
  - Resolves: bug 1044148 - The backend name provided to bak2db is not validated
  - Resolves: bug 1044149 - Winsync should support range retrieval
  - Resolves: bug 1044150 - 7-bit checking is not necessary for userPassword
  - Resolves: bug 1044151 - With SeLinux, ports can be labelled per range. setup-ds.pl or setup-ds-admin.pl fail to detect already ranged labelled ports
  - Resolves: bug 1044152 - ChainOnUpdate: "cn=directory manager" can modify userRoot on consumer without changes being chained or replicated. Directory integrity compromised.
  - Resolves: bug 1044153 - mods optimizer
  - Resolves: bug 1044154 - multi master replication allows schema violation
  - Resolves: bug 1044156 - DS crashes with some 7-bit check plugin configurations
  - Resolves: bug 1044157 - Some updates of "passwordgraceusertime" are useless when updating "userpassword"
  - Resolves: bug 1044159 - [RFE] Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533
  - Resolves: bug 1044160 - remove-ds.pl should remove /var/lock/dirsrv
  - Resolves: bug 1044162 - enhance retro changelog
  - Resolves: bug 1044163 - updates to ruv entry are written to retro changelog
  - Resolves: bug 1044164 - Password administrators should be able to violate password policy
  - Resolves: bug 1044168 - Schema replication between DS versions may overwrite newer base schema
  - Resolves: bug 1044169 - ACIs do not allow attribute subtypes in targetattr keyword
  - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable
  - Resolves: bug 1044171 - Allow referential integrity suffixes to be configurable
  - Resolves: bug 1044172 - Plugin library path validation prevents intentional loading of out-of-tree modules
  - Resolves: bug 1044173 - make referential integrity configuration more flexible
  - Resolves: bug 1044177 - allow configuring changelog trim interval
  - Resolves: bug 1044179 - objectclass may, must lists skip rest of objectclass once first is found in sup
  - Resolves: bug 1044180 - memberOf on a user is converted to lowercase
  - Resolves: bug 1044181 - report unindexed internal searches
  - Resolves: bug 1044183 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added
  - Resolves: bug 1044185 - dbscan on entryrdn should show all matching values
  - Resolves: bug 1044187 - logconv.pl - RFE - add on option for a minimum etime for unindexed search stats
  - Resolves: bug 1044188 - Recognize compressed log files
  - Resolves: bug 1044191 - support TLSv1.1 and TLSv1.2, if supported by NSS
  - Resolves: bug 1044193 - default nsslapd-sasl-max-buffer-size should be 2MB
  - Resolves: bug 1044194 - Complex filter in a search request doen't work as expected.
  - Resolves: bug 1044196 - Automember plug-in should treat MODRDN operations as ADD operations
  - Resolves: bug 1044198 - Replication of the schema may overwrite consumer 'attributetypes' even if consumer definition is a superset
  - Resolves: bug 1044202 - db2bak.pl issue when specifying non-default directory
  - Resolves: bug 1044203 - Allow referint plugin to use an alternate config area
  - Resolves: bug 1044205 - Allow memberOf to use an alternate config area
  - Resolves: bug 1044210 - idl switch does not work
  - Resolves: bug 1044211 - make old-idl tunable
  - Resolves: bug 1044212 - IDL-style can become mismatched during partial restoration
  - Resolves: bug 1044213 - backend performance - introduce optimization levels
  - Resolves: bug 1044215 - using transaction batchval violates durability
  - Resolves: bug 1044216 - examine replication code to reduce amount of stored state information
  - Resolves: bug 1048980 - 7-bit check plugin not checking MODRDN operation
  - Resolves: bug 1049030 - Windows Sync group issues
  - Resolves: bug 1052751 - Page control does not work if effective rights control is specified
  - Resolves: bug 1052754 - Allow nsDS5ReplicaBindDN to be a group DN
  - Resolves: bug 1057803 - logconv errors when search has invalid bind dn
  - Resolves: bug 1060032 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime.
  - Resolves: bug 1061060 - betxn: retro changelog broken after cancelled transaction
  - Resolves: bug 1061572 - improve dbgen rdn generation, output and man page.
  - Resolves: bug 1063990 - single valued attribute replicated ADD does not work
  - Resolves: bug 1064006 - Size returned by slapi_entry_size is not accurate
  - Resolves: bug 1064986 - Replication retry time attributes cannot be added
  - Resolves: bug 1067090 - Missing warning for invalid replica backoff configuration
  - Resolves: bug 1072032 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53
  - Resolves: bug 1074306 - Under heavy stress, failure of turning a tombstone into glue makes the server hung
  - Resolves: bug 1074447 - Part of DNA shared configuration is deleted after server restart
  - Resolves: bug 1076729 - Continuous add/delete of an entry in MMR setup causes entryrdn-index conflict
  - Resolves: bug 1077884 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf
  - Resolves: bug 1077897 - Memory leak with proxy auth control
  - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing
  - Resolves: bug 1082967 - attribute uniqueness plugin fails when set as a chaining component
  - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution
  - Resolves: bug 1086890 - empty modify returns LDAP_INVALID_DN_SYNTAX
  - Resolves: bug 1086902 - mem leak in do_bind when there is an error
  - Resolves: bug 1086904 - mem leak in do_search - rawbase not freed upon certain errors
  - Resolves: bug 1086908 - Performing deletes during tombstone purging results in operation errors
  - Resolves: bug 1090178 - #481 breaks possibility to reassemble memberuid list
  - Resolves: bug 1092099 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone
  - Resolves: bug 1092342 - nsslapd-ndn-cache-max-size accepts any invalid value.
  - Resolves: bug 1092648 - Negative value of nsSaslMapPriority is not reset to lowest priority
  - Resolves: bug 1097004 - Problem with deletion while replicated
  - Resolves: bug 1098654 - db2bak.pl error with changelogdb
  - Resolves: bug 1099654 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator.
  - Resolves: bug 1108405 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..."
  - Resolves: bug 1108407 - managed entry plugin fails to update managed entry pointer on modrdn operation
  - Resolves: bug 1108865 - memory leak in ldapsearch filter objectclass=*
  - Resolves: bug 1108870 - ACI warnings in error log
  - Resolves: bug 1108872 - Logconv.pl with an empty access log gives lots of errors
  - Resolves: bug 1108874 - logconv.pl memory continually grows
  - Resolves: bug 1108881 - rsearch filter error on any search filter
  - Resolves: bug 1108895 - [RFE - RHDS9] CLI report to monitor replication
  - Resolves: bug 1108902 - rhds91 389-ds-base-1.2.11.15-31.el6_5.x86_64 crash in db4 __dbc_get_pp env = 0x0 ?
  - Resolves: bug 1108909 - single valued attribute replicated ADD does not work
  - Resolves: bug 1109334 - 389 Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled.
  - Resolves: bug 1109336 - Parent numsubordinate count can be incorrectly updated if an error occurs
  - Resolves: bug 1109339 - Nested tombstones become orphaned after purge
  - Resolves: bug 1109354 - Tombstone purging can crash the server if the backend is stopped/disabled
  - Resolves: bug 1109357 - Coverity issue in 1.3.3
  - Resolves: bug 1109364 - valgrind - value mem leaks, uninit mem usage
  - Resolves: bug 1109375 - provide default syntax plugin
  - Resolves: bug 1109378 - Environment variables are not passed when DS is started via service
  - Resolves: bug 1111364 - Updating winsync one-way sync does not affect the behaviour dynamically
  - Resolves: bug 1112824 - Broken dereference control with the FreeIPA 4.0 ACIs
  - Resolves: bug 1113605 - server restart wipes out index config if there is a default index
  - Resolves: bug 1115177 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro
  - Resolves: bug 1117021 - Server deadlock if online import started while server is under load
  - Resolves: bug 1117975 - paged results control is not working in some cases when we have a subsuffix.
  - Resolves: bug 1117979 - harden the list of ciphers available by default
  - Resolves: bug 1117981 - Fix various typos in manpages & code
  - Resolves: bug 1117982 - Fix hyphens used as minus signed and other manpage mistakes
  - Resolves: bug 1118002 - server crashes deleting a replication agreement
  - Resolves: bug 1118006 - RFE - forcing passwordmustchange attribute by non-cn=directory manager
  - Resolves: bug 1118007 - [RFE] Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords
  - Resolves: bug 1118014 - Enhance ACIs to have more control over MODRDN operations
  - Resolves: bug 1118021 - Return all attributes in rootdse without explicit request
  - Resolves: bug 1118025 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  - Resolves: bug 1118032 - Schema Replication Issue
  - Resolves: bug 1118034 - 389 DS Server crashes and dies while handles paged searches from clients
  - Resolves: bug 1118043 - Failed deletion of aci: no such attribute
  - Resolves: bug 1118048 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed.
  - Resolves: bug 1118051 - Add switch to disable pre-hashed password checking
  - Resolves: bug 1118054 - Make ldbm_back_seq independently support transactions
  - Resolves: bug 1118055 - Add operations rejected by betxn plugins remain in cache
  - Resolves: bug 1118057 - online import crashes server if using verbose error logging
  - Resolves: bug 1118059 - add fixup-memberuid.pl script
  - Resolves: bug 1118060 - winsync plugin modify is broken
  - Resolves: bug 1118066 - memberof scope: allow to exclude subtrees
  - Resolves: bug 1118069 - 389-ds production segfault: __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:144
  - Resolves: bug 1118074_DELETE_FN - plugin returned error" messages
  - Resolves: bug 1118076 - ds logs many "Operation error fetching Null DN" messages
  - Resolves: bug 1118077 - Improve import logging and abort handling
  - Resolves: bug 1118079 - Multi master replication initialization incomplete after restore of one master
  - Resolves: bug 1118080 - Don't add unhashed password mod if we don't have an unhashed value
  - Resolves: bug 1118081 - Investigate betxn plugins to ensure they return the correct error code
  - Resolves: bug 1118082 - The error result text message should be obtained just prior to sending result
  - Resolves: bug 1123865 - CVE-2014-3562 389-ds-base: 389-ds: unauthenticated information disclosure [rhel-7.1]


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-26
changelog:
  - release 1.3.1.6-26
  - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution (Ticket 346)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-24
changelog:
  - release 1.3.1.6-24
  - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735); regression - sub-type length in attribute type was mistakenly subtracted.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-23
changelog:
  - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind) (Added 0095-Ticket-47739-directory-server-is-insecurely-misinter.patch)

    Tue Mar 11 2014 Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-23
  - release 1.3.1.6-22
  - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-22
changelog:
  - release 1.3.1.6-22
  - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-21
changelog:
  - release 1.3.1.6-21
  - Resolves: bug 918694 - Fix covscan defect FORWARD_NULL (Ticket 408)
  - Resolves: bug 918717 - Fix covscan defect COMPILER WARNINGS (Ticket 571)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-20
changelog:
  - release 1.3.1.6-20
  - Resolves: bug 1065242 - 389-ds-base, conflict occurs at yum installation if multilib_policy=all. (Ticket 47709)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-19
changelog:
  - release 1.3.1.6-19
  - Resolves: bug 1065971 - Enrolling a host into IdM/IPA always takes two attempts (Ticket 47704)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-18
changelog:
  - release 1.3.1.6-18
  - Resolves: bug 838656 - logconv.pl tool removes the access logs contents if "-M" is not correctly used (Ticket 471)
  - Resolves: bug 922538 - improve dbgen rdn generation, output (Ticket 47374)
  - Resolves: bug 970750 - flush.pl is not included in perl5 (Ticket 47374)
  - Resolves: bug 1013898 - Fix various issues with logconv.pl (Ticket 471)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-17
changelog:
  - release 1.3.1.6-17
  - Resolves: bug 853106 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (Ticket 443)
  - Resolves: bug 1049525 - Server hangs in cos_cache when adding a user entry (Ticket 47649)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-15
changelog:
  - release 1.3.1.6-15
  - Resolves: bug 918702 -  better error message when cache overflows (Ticket 342)
  - Resolves: bug 1009679 - replication stops with excessive clock skew (Ticket 47516)
  - Resolves: bug 1042855 - Unable to delete protocol timeout attribute (Ticket 47620)
  - Resolves: bug 918694 - Fix crash when disabling/enabling the setting (Ticket 408)
  - Resolves: bug 853355 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read (Ticket 47660)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-14
changelog:
  - release 1.3.1.6-14
  - Resolves: bug 853355 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs (Ticket 447) 
  - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613)
  - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribut; Fix logically dead code; Fix dereferenced NULL pointer in agmtlist_modify_callback(); Fix missing left brackete (Ticket 47620)
  - Resolves: bug 1042855 - nsds5ReplicaProtocolTimeout attribute is not validated when added to replication agreement; Config value validation improvement (Ticket 47620)
  - Resolves: bug 918717 - server does not accept 0 length LDAP Control sequence (Ticket 571)
  - Resolves: bug 1034902 - replica init/bulk import errors should be more verbose (Ticket 47606)
  - Resolves: bug 1044219 - fix memleak caused by 47347 (Ticket 47623)
  - Resolves: bug 1049522 - Crash after replica is installed; Fix cherry-pick error for 1.3.2 and 1.3.1 (Ticket 47620)
  - Resolves: bug 1049568 - changelog iteration should ignore cleaned rids when getting the minCSN (Ticket 47627)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-12
changelog:
  - release 1.3.1.6-12
  - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute (Ticket 47620)
  - Resolves: bug 1034898 - automember plugin task memory leaks (Ticket 47592)
  - Resolves: bug 1034451 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms (Ticket 47614)
  - Resolves: bug 1032318 - entries with empty objectclass attribute value can be hidden (Ticket 47591)
  - Resolves: bug 1032316 - attrcrypt fails to find unlocked key (Ticket 47596)
  - Resolves: bug 1031227 - Reduce lock scope in retro changelog plug-in (Ticket 47599)
  - Resolves: bug 1031226 - Convert ldbm_back_seq code to be transaction aware (Ticket 47598)
  - Resolves: bug 1031225 - Convert retro changelog plug-in to betxn (Ticket 47597)
  - Resolves: bug 1031223 - hard coded limit of 64 masters in agreement and changelog code (Ticket 47587)
  - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613)
  - Resolves: bug 1035824 - Automember betxnpreoperation - transaction not aborted when group entry does not exist (Ticket 47622)


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-11
changelog:
  - Resolves: bug 1024979 - CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-10
changelog:
  - release 1.3.1.6-10
  - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep
  -     had to revert earlier change - does not work and breaks ipa


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-9
changelog:
  - release 1.3.1.6-9
  - Resolves: bug 1028440 - Winsync replica initialization and incremental updates from DS to AD fails on RHEL
  - Resolves: bug 1027502 - Replication Failures related to skipped entries due to cleaned rids
  - Resolves: bug 1027047 - Winsync plugin segfault during incremental backoff


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-8
changelog:
  - release 1.3.1.6-8
  - Resolves: bug 971111 - DNA plugin failed to fetch replication agreement 
  - Resolves: bug 1026931 - 1.2.11.29 crash when removing entries from cache


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-7
changelog:
  - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep
  - Resolves: bug 1018914 fixup memberof task does not work: task entry not added


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-6
changelog:
  - Resolves: bug 1013900 - logconv: some stats do not work across server restarts
  -  previous patch introduced regressions
  -  fixed by c2eced0 ticket #47550 and e2a880b Ticket #47550 and 8b10f83 Ticket #47551
  - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock
  -  previous patch not complete, fixed by a11be5c Ticket 47513
  - Resolves: bug 1016749 - DS crashes when "cn=Directory Manager" is changing it's password
  -  cherry picked upstream f786600 Ticket 47329 and b67e230 Coverity Fixes
  - Resolves: bug 1015252 locale "nl" not supported by collation plugin
  - Resolves: bug 1016317 Need to update supported locales
  - Resolves: bug 1016722 memory leak in range searches


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-5
changelog:
  - Resolves: bug 1013896 - logconv.pl - Use of comma-less variable list is deprecated
  - Resolves: bug 1008256 - backend txn plugin fixup tasks should be done in a txn
  - Resolves: bug 1013738 - CLEANALLRUV doesnt run across all replicas
  - Resolves: bug 1011220 - PassSync removes User must change password flag on the Windows side
  - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock
  - Resolves: bug 1012125 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch
  - Resolves: bug 1013063 - RUV tombstone search with scope "one" doesn`t work
  - Resolves: bug 1013893 - Indexed search are logged with 'notes=U' in the access logs
  - Resolves: bug 1013894 - improve logconv.pl performance with large access logs
  - Resolves: bug 1013898 - Fix various issues with logconv.pl
  - Resolves: bug 1013897 - logconv.pl uses /var/tmp for BDB temp files
  - Resolves: bug 1013900 - logconv: some stats do not work across server restarts
  - Resolves: bug 1014354 - Coverity fixes - 12023, 12024, and 12025


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-4
changelog:
  - bump version to 1.3.1.6-4
  - Resolves Bug 1007988 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing (Ticket 47489)
  - Resolves Bug 853931 - Allow macro aci keywords to be case-insensitive (Ticket 449)
  - Resolves Bug 1006563 - automember rebuild task not working as expected (Ticket 47507)


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-3
changelog:
  - Ticket #47455 - valgrind - value mem leaks, uninit mem usage
  - Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-2
changelog:
  - bump version to 1.3.1.6-2
  - Resolves Bug 1000633 - ns-slapd crash due to bogus DN
  - Ticket #47488 - Users from AD sub OU does not sync to IPA


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-1
changelog:
  - bump version to 1.3.1.6
  - Ticket 47455 - valgrind - value mem leaks, uninit mem usage
  - fix coverity 11915 - dead code - introduced with fix for ticket 346
  - fix coverity 11895 - null deref - caused by fix to ticket 47392
  - fix compiler warning in posix winsync code for posix_group_del_memberuid_callback
  - Fix compiler warnings for Ticket 47395 and 47397
  - fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107)
  - Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch
  - fix compiler warnings
  - Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.5-1
changelog:
  - bump version to 1.3.1.5
  - Ticket 47456 - delete present values should append values to deleted values
  - Ticket 47455 - valgrind - value mem leaks, uninit mem usage
  - Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication
  - Ticket 47440 - Fix runtime errors caused by last patch.
  - Ticket 47440 - Fix compilation warnings and header files
  - Ticket 47405 - CVE-2013-2219 ACLs inoperative in some search scenarios
  - Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D
  - Ticket 47378 - fix recent compiler warnings
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47449 - deadlock after adding and deleting entries
  - Ticket 47441 - Disk Monitoring not checking filesystem with logs
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.4-1
changelog:
  - bump version to 1.3.1.4
  - Ticket 47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negat
  - Ticket 47424 - Replication problem with add-delete requests on single-valued attributes
  - Ticket 47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
  - Ticket 47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
  - Ticket 47421 - memory leaks in set_krb5_creds
  - Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute v
  - Ticket 47369  version2 - provide default syntax plugin
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47339 - RHDS denies MODRDN access if ACI list contains any DENY rule
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47428 - Memory leak in 389-ds-base 1.2.11.15
  - Ticket 47392 - ldbm errors when adding/modifying/deleting entries
  - Ticket 47385 - Disk Monitoring is not triggered as expected.
  - Ticket 47410 - changelog db deadlocks with DNA and replication


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.3-1
changelog:
  - bump version to 1.3.1.3
  - Ticket 47374 - flush.pl is not included in perl5
  - Ticket 47391 - deleting and adding userpassword fails to update the password (additional fix)
  - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization
  - Ticket 47395 47397 - v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured
  - Ticket 47396 - crash on modrdn of tombstone
  - Ticket 47400 - MMR stress test with dna enabled causes a deadlock
  - Ticket 47409 - allow setting db deadlock rejection policy
  - Ticket 47419 - Unhashed userpassword can accidentally get removed from mods
  - Ticket 47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.2-1
changelog:
  - bump version to 1.3.1.2
  - Ticket 47391 - deleting and adding userpassword fails to update the password
  - Coverity Fixes (Part 7)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.1-1
changelog:
  - bump version to 1.3.1.1
  - Ticket 402 - nhashed#user#password in entry extension
  - Ticket 511 - Revision - allow turning off vattr lookup in search entry return
  - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate
  - Ticket 47327 - error syncing group if group member user is not synced
  - Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback
  - Ticket 47359 - new ldap connections can block ldaps and ldapi connections
  - Ticket 47362 - ipa upgrade selinuxusermap data not replicating
  - Ticket 47375 - flush_ber error sending back start_tls response will deadlock
  - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3)
  - Ticket 47377 - make listen backlog size configurable
  - Ticket 47378 - fix recent compiler warnings
  - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice
  - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached
  - Coverity Fixes (part 1)
  - Coverity Fixes (Part 2)
  - Coverity Fixes (Part 3)
  - Coverity Fixes (Part 4)
  - Coverity Fixes (Part 5)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.0-1
changelog:
  - bump version to 1.3.1.0
  - Ticket 332 - Command line perl scripts should attempt most secure connection type first
  - Ticket 342 - better error message when cache overflows
  - Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager
  - Ticket 419 - logconv.pl - improve memory management
  - Ticket 422 - 389-ds-base - Can't call method "getText"
  - Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts
  - Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords
  - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used
  - Ticket 487 - Possible to add invalid attribute values to PAM PTA plugin configuration
  - Ticket 502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen
  - Ticket 505 - use lock-free access name2asi and oid2asi tables (additional)
  - Ticket 508 - lock-free access to FrontendConfig structure
  - Ticket 511 - allow turning off vattr lookup in search entry return
  - Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time
  - Ticket 528 - RFE - get rid of instance specific scripts
  - Ticket 529 - dn normalization must handle multiple space characters in attributes
  - Ticket 532 - RUV is not getting updated for both Master and consumer
  - Ticket 533 - only scan for attributes to decrypt if there are encrypted attrs configured
  - Ticket 534 - RFE: Add SASL mappings fallback
  - Ticket 537 - Improvement of range search
  - Ticket 539 - logconv.pl should handle microsecond timing
  - Ticket 543 - Sorting with attributes in ldapsearch gives incorrect result
  - Ticket 545 - Segfault during initial LDIF import: str2entry_dupcheck()
  - Ticket 547 - Incorrect assumption in ndn cache
  - Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval
  - Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation
  - Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration
  - Ticket 558 - Replication - make timeout for protocol shutdown configurable
  - Ticket 561 - disable writing unhashed#user#password to changelog
  - Ticket 563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized.
  - Ticket 565 - turbo mode and replication - allow disable of turbo mode
  - Ticket 571 - server does not accept 0 length LDAP Control sequence
  - Ticket 574 - problems with dbcachesize disk space calculation
  - Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions
  - Ticket 585 - Behaviours of "db2ldif -a <filename>" and "db2ldif.pl -a <filename>" are inconsistent
  - Ticket 587 - Replication error messages in the DS error logs
  - Ticket 588 - Create MAN pages for command line scripts
  - Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control
  - Ticket 603 - A logic error in str2simple
  - Ticket 604 - Required attribute not checked during search operation
  - Ticket 608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message
  - Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND
  - Ticket 612 - improve dbgen rdn generation, output
  - Ticket 613 - ldclt: add timestamp, interval, nozeropad, other improvements
  - Ticket 616 - High contention on computed attribute lock
  - Ticket 618 - Crash at shutdown while stopping replica agreements
  - Ticket 620 - Better logging of error messages for 389-ds-base
  - Ticket 621 - modify operations without values need to be written to the changelog
  - Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory
  - Ticket 631 - Replication: "Incremental update started" status message without consumer initialized
  - Ticket 633 - allow nsslapd-nagle to be disabled, and also tcp cork
  - Ticket 47299 - allow cmdline scripts to work with non-root user
  - Ticket 47302 - get rid of sbindir start/stop/restart slapd scripts
  - Ticket 47303 - start/stop/restart dirsrv scripts should report and error if no instances
  - Ticket 47304 - reinitialization of a master with a disabled agreement hangs
  - Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task)
  - Ticket 47312 - replace PR_GetFileInfo with PR_GetFileInfo64
  - Ticket 47315 - filter option in fixup-memberof requires more clarification
  - Ticket 47325 - Crash at shutdown on a replica aggrement
  - Ticket 47330 - changelog db extension / upgrade is obsolete
  - Ticket 47336 - logconv.pl -m not working for all stats
  - Ticket 47341 - logconv.pl -m time calculation is wrong
  - Ticket 47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide
  - Ticket 47347 - Simple paged results should support async search
  - Ticket 47348 - add etimes to per second/minute stats
  - Ticket 47349 - DS instance crashes under a high load


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.5-1
changelog:
  - bump version to 1.3.0.5
  - Ticket 47308 - unintended information exposure when anonymous access is set to rootdse
  - Ticket 628 - crash in aci evaluation
  - Ticket 627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so
  - Ticket 634 - Deadlock in DNA plug-in Ticket #576 - DNA: use event queue for config update only at the start up
  - Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC
  - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.0.4-1
changelog:
  - e53d691 bump version to 1.3.0.4
  - Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data
  - Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled)
  - Ticket 490 - Slow role performance when using a lot of roles
  - Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.3-1
changelog:
  - bump version to 1.3.0.3
  - Ticket #584 - Existence of an entry is not checked when its password is to be deleted
  - Ticket 562 - Crash when deleting suffix


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.3.rc3
changelog:
  - bump version to 1.3.0.rc3
  - Ticket 549 - DNA plugin no longer reports additional info when range is depleted
  - Ticket 541 - need to set plugin as off in ldif template
  - Ticket 541 - RootDN Access Control plugin is missing after upgrade


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.2.rc2
changelog:
  - bump version to 1.3.0.rc2
  - Trac Ticket #497 - Escaped character cannot be used in the substring search filter
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Trac Ticket #522 - betxn: upgrade is not implemented yet


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.1.rc1
changelog:
  - bump version to 1.3.0.rc1
  - Ticket #322 - Create DOAP description for the 389 Directory Server project
  - Trac Ticket #499 - Handling URP results is not corrrect
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Ticket 456 - improve entry cache sizing
  - Trac Ticket #531 - loading an entry from the database should use str2entry_f
  - Trac Ticket #536 - Clean up compiler warnings for 1.3
  - Trac Ticket #531 - loading an entry from the database should use str2entry_fast
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Ticket 527 - ns-slapd segfaults if it cannot rename the logs
  - Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't
  - Ticket 216 - disable replication agreements
  - Ticket 518 - dse.ldif is 0 length after server kill or machine kill
  - Ticket 393 - Change in winSyncInterval does not take immediate effect
  - Ticket 20 - Allow automember to work on entries that have already been added
  - Coverity Fixes
  - Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5
  - Ticket 337 - improve CLEANRUV functionality
  - Fix for ticket 504
  - Ticket 394 - modify-delete userpassword
  - minor fixes for bdb 4.2/4.3 and mozldap
  - Trac Ticket #276 - Multiple threads simultaneously working on connection's private buffer causes ns-slapd to abort
  - Fix for ticket 465: cn=monitor showing stats for other db instances
  - Ticket 507 - use mutex for FrontendConfig lock instead of rwlock
  - Fix for ticket 510 Avoid creating an attribute just to determine the syntax for a type, look up the syntax directly by type
  - Coverity defect: Resource leak 13110
  - Ticket 517 - crash in DNA if no dnaMagicRegen is specified
  - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry
  - Trac Ticket #519 - Search with a complex filter including range search is slow
  - Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error
  - Trac Ticket #311 - IP lookup failing with multiple DNS entries
  - Trac Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs
  - Trac Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error
  - Ticket #503 - Improve AD version in winsync log message
  - Trac Ticket #190 - Un-resolvable server in replication agreement produces unclear error message
  - Coverity fixes
  - Trac Ticket #391 - Slapd crashes when deleting backends while operations are still in progress
  - Trac Ticket #448 - Possible to set invalid macros in Macro ACIs
  - Trac Ticket #498 - Cannot abaondon simple paged result search
  - Coverity defects
  - Trac Ticket #494 - slapd entered to infinite loop during new index addition
  - Fixing compiler warnings in the posix-winsync plugin
  - Coverity defects
  - Ticket 147 - Internal Password Policy usage very inefficient
  - Ticket 495 - internalModifiersname not updated by DNA plugin
  - Revert "Ticket 495 - internalModifiersname not updated by DNA plugin"
  - Ticket 495 - internalModifiersname not updated by DNA plugin
  - Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h])
  - Ticket 486 - nsslapd-enablePlugin should not be multivalued
  - Ticket 488 - Doc: DS error log messages with typo
  - Trac Ticket #451 - Allow db2ldif to be quiet
  - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes
  - Ticket #481 - expand nested posix groups
  - Trac Ticket #455 - Insufficient rights to unhashed#user#password when user deletes his password
  - Ticket #446 - anonymous limits are being applied to directory manager


author: Mark Reynolds <mareynol@redhat.com> - 1.3.0.a1-1
changelog:
  Ticket #28 	MOD operations with chained delete/add get back error 53 on backend config
  Ticket #173 	ds-logpipe.py script's man page and script help should be updated for -t option.
  Ticket #196 	RFE: Interpret IPV6 addresses for ACIs, replication, and chaining 
  Ticket #218 	RFE - Make RIP working with Replicated Entries 
  Ticket #328 	make sure all internal search filters are properly escaped 
  Ticket #329 	389-admin build fails on F-18 with new apache 	
  Ticket #344 	deadlock in replica_write_ruv
  Ticket #351 	use betxn plugins by default
  Ticket #352 	make cos, roles, views betxn aware 
  Ticket #356 	logconv.pl - RFE - track bind info
  Ticket #365 	Audit log - clear text password in user changes 
  Ticket #370 	Opening merge qualifier CoS entry using RHDS console changes the entry. 
  Ticket #372 	Setting nsslapd-listenhost or nsslapd-securelistenhost breaks ACI processing 	
  Ticket #386 	Overconsumption of memory with large cachememsize and heavy use of ldapmodify 	
  Ticket #402 	unhashedTicket #userTicket #password in entry extension 	
  Ticket #408 	Create a normalized dn cache 	
  Ticket #453 	db2index with -tattrname:type,type fails 	
  Ticket #461 	fix build problem with mozldap c sdk 	
  Ticket #462 	add test for include file mntent.h 	
  Ticket #463 	different parameters of getmntent in Solaris


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-1
changelog:
  - Trac Ticket #470 - 389 prevents from adding a posixaccount with userpassword after schema reload
  - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang
  - Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start
  - Ticket 473 - change VERSION.sh to have console version be major.minor
  - Ticket 475 - Root DN Access Control - improve value checking for config
  - Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension
  - Ticket 474 - Root DN Access Control - days allowed not working correctly
  - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas
  - 0b79915 fix compiler warnings in ticket 374 code
  - Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.14-1
changelog:
  - Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement
  - Ticket 386 - large memory growth with ldapmodify(heap fragmentation)
  -  this patch doesn't fix the bug - it allows us to experiment with
  -  different values of mxfast
  - Ticket #374 - consumer can go into total update mode for no reason


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.13-1
changelog:
  - Ticket #426 - support posix schema for user and group sync
  -   1) plugin config ldif must contain pluginid, etc. during upgrade or it
  -      will fail due to schema errors
  -   2) posix winsync should have a lower precedence (25) than the default (50)
  -      so that it will be run first
  -   3) posix winsync should support the Winsync API v3 - the v2 functions are
  -      just stubs for now - but the precedence cb is active


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.12-1
changelog:
  - 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete
  - Trac Ticket #437 - variable dn should not be used in ldbm_back_delete
  - ba1f5b2 fix coverity resource leak in windows_plugin_add
  - e3e81db Simplify program flow: change while loops to for
  - a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0)
  - 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar
  - 77eb760 Simplify program flow: eliminate unnecessary continue
  - c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new
  - a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking
  - d49035c Factorize into new isPosixGroup function
  - 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free
  - 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain
  - Ticket #440 - periodic dirsync timed event causes server to loop repeatedly
  - Ticket #355 - winsync should not delete entry that appears to be out of scope
  - Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values.
  - 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code
  - 2734a71 CLEANALLRUV coverity fixes
  - Ticket #426 - support posix schema for user and group sync
  - Ticket #430 - server to server ssl client auth broken with latest openldap


author: Mark Reynolds <mareynol@redhat.com> - 1.2.11.11-1
changelog:
  6c0778f bumped version to 1.2.11.11
  Ticket 429 - added nsslapd-readonly to DS schema
  Ticket 403 - fix CLEANALLRUV regression from last commit
  Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values


author: Mark Reynolds <mareynol@redhat.com> - 1.2.11.8-1
changelog:
  ddcf669 bump version to 1.2.11.8 for offical release
  Ticket #425 - support multiple winsync plugins
  Ticket 403 - cleanallruv coverity fixes
  Ticket 407 - memory leak in dna plugin
  Ticket 403 - CLEANALLRUV feature
  Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs
  3168f04 Coverity defects
  5ff0a02 COVERITY FIXES
  Ticket #388 - Improve replication agreement status messages
  0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns
  Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion
  Ticket #409 - Report during startup if nsslapd-cachememsize is too small
  Ticket #412 - memberof performance enhancement
  12813: Uninitialized pointer read string_values2keys
  Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  Ticket #410 - Referential integrity plug-in does not work when update interval is not zero
  Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled
  Ticket #405 - referint modrdn not working if case is different
  Ticket 399 - slapi_ldap_bind() doesn't check bind results


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.7-2
changelog:
  - Ticket 378 - unhashed#user#password visible after changing password
  -  fix func declaration from previous patch
  - Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.6-1
changelog:
  - Ticket #378 - audit log does not log unhashed password: enabled, by default.
  - Ticket #378 - unhashed#user#password visible after changing password
  - Ticket #365 - passwords in clear text in the audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.5-1
changelog:
  - Ticket #387 - managed entry sometimes doesn't delete the managed entry
  - 5903815 improve txn test index handling
  - Ticket #360 - ldapmodify returns Operations error - fix delete caching
  - bcfa9e3 Coverity Fix for CLEANALLRUV
  - Trac Ticket #335 - transaction retries need to be cache aware
  - Ticket #389 - ADD operations not in audit log
  - 44cdc84 fix coverity issues with uninit vals, no return checking
  - Ticket 368 - Make the cleanAllRUV task one step
  - Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.4-1
changelog:
  - Ticket #360 - ldapmodify returns Operations error
  - Ticket #321 - krbExtraData is being null modified and replicated on each ssh login
  - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress
  - Ticket #361: Bad DNs in ACIs can segfault ns-slapd
  - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object
  - Ticket #337 - Improve CLEANRUV task


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.2-1
changelog:
  - Ticket #351 - use betxn plugins by default
  -   revert - make no plugins betxn by default - too great a risk
  -   for deadlocks until we can test this better
  - Ticket #348 - crash in ldap_initialize with multiple threads
  -   fixes PR_Init problem in ldclt


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.1-1
changelog:
  - f227f11 Suppress alert on unavailable port with forced setup
  - Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return
  - Ticket #351 - use betxn plugins by default
  - Trac Ticket #345 - db deadlock return should not log error
  - Ticket #348 - crash in ldap_initialize with multiple threads
  - Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied
  - Ticket #207 - [RFE] enable attribute that tracks when a password was last set
  - Ticket #216 - RFE - Disable replication agreements
  - Ticket #337 - RFE - Improve CLEANRUV functionality
  - Ticket #326 - MemberOf plugin should work on all backends
  - Trac Ticket #19 - Convert entryUSN plugin to transaction aware type
  - Ticket #347 - IPA dirsvr seg-fault during system longevity test
  - Trac Ticket #310 - Avoid calling escape_string() for logged DNs
  - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object
  - Ticket #183 - passwordMaxFailure should lockout password one sooner
  - Trac Ticket #335 - transaction retries need to be cache aware
  - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - Ticket #325 - logconv.pl : use of getopts to parse command line options
  - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - 554e29d Coverity Fixes
  - Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions
  - Ticket #315 - small fix to libglobs
  - Ticket #315 - ns-slapd exits/crashes if /var fills up
  - Ticket #20 - Allow automember to work on entries that have already been added
  - Trac Ticket #45 - Fine Grained Password policy: if passwordHistory is on, deleting the password fails.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11-0.1.a1
changelog:
  - 453eb97 schema def must have DESC '' - close paren must be preceded by space
  - Trac Ticket #46 - (additional) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #331 - transaction errors with db 4.3 and db 4.2
  - Ticket #261 - Add Solaris i386
  - Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks
  - Ticket #324 - Sync with group attribute containing () fails
  - Ticket #319 - ldap-agent crashes on start with signal SIGSEGV
  - 77cacd9 coverity 12606 Logically dead code
  - Trac Ticket #303 - make DNA range requests work with transactions
  - Ticket #320 - allow most plugins to be betxn plugins
  - Ticket #24 - Add nsTLS1 to the DS schema
  - Ticket #271 - Slow shutdown when you have 100+ replication agreements
  - TIcket #285 - compilation fixes for '--format-security'
  - Ticket 211 - Avoid preop range requests non-DNA operations
  - Ticket #271 - replication code cleanup
  - Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages.
  - Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration
  - Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs
  - 6f8680a coverity 12563 Read from pointer after free (fix 2)
  - e6a9b22 coverity 12563 Read from pointer after free
  - 245d494 Config changes fail because of unknown attribute "internalModifiersname"
  - Ticket #191  - Implement SO_KEEPALIVE in network calls
  - Ticket #289 - allow betxn plugin config changes
  - 93adf5f destroy the entry cache and dn cache in the dse post op delete callback
  - e2532d8 init txn thread private data for all database modes
  - Ticket #291 - cannot use & in a sasl map search filter
  - 6bf6e79 Schema Reload crash fix
  - 60b2d12 Fixing compiler warnings
  - Trac Ticket #260 - 389 DS does not support multiple paging controls on a single connection
  - Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName
  - fdcc256 Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e
  - Ticket #306 - void function cannot return value
  - ticket 181 - Allow PAM passthru plug-in to have multiple config entries
  - ticket 211 - Use of uninitialized variables in ldbm_back_modify()
  - Ticket #74 - Add schema for DNA plugin (RFE)
  - Ticket #301 - implement transaction support using thread local storage
  - Ticket #211 - dnaNextValue gets incremented even if the user addition fails
  - 144af59 coverity uninit var and resource leak
  - Trac Ticket #34 - remove-ds.pl does not remove everything
  - Trac Ticket #169 - allow 389 to use db5
  - bc78101 fix compiler warning in acct policy plugin
  - Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints
  - Trac Ticket #27 - SASL/PLAIN binds do not work
  - Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFYops
  - Ticket #17 - new replication optimizations


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.4-4
changelog:
  - Ticket #46 - (revised) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #66 - 389-ds-base spec file does not have a BuildRequires on gcc-c++


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.3-1
changelog:
  - b05139b memleak in normalize_mods2bvals
  - c0eea24 memleak in mep_parse_config_entry
  - 90bc9eb handle null smods
  - Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
  - Ticket #306 - void function cannot return value
  - ticket 304 - Fix kernel version checking in dsktune


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-1
changelog:
  - Trac Ticket #298 - crash when replicating orphaned tombstone entry
  - Ticket #281 - TLS not working with latest openldap
  - Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails
  - Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.0-1
changelog:
  - Ticket 284 - Remove unnecessary SNMP MIB files
  - Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5?
  - Ticket 175 - logconv.pl improvements


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.10.rc1
changelog:
  - ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources
  - Ticket #281 - TLS not working with latest openldap
  - Ticket #280 - extensible binary filters do not work
  - Ticket #279 - filter normalization does not use matching rules
  - Trac Ticket #275 - Invalid read reported by valgrind
  - Ticket #277 - cannot set repl referrals or state
  - Ticket #278 - Schema replication update failed: Invalid syntax
  - Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled
  - Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server
  - Ticket #87 - Manpages fixes
  - c493fb4 fix a couple of minor coverity issues
  - Ticket #55 - Limit of 1024 characters for nsMatchingRule
  - Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned
  - Ticket #6 - protocol error from proxied auth operation
  - Ticket #38 - nisDomain schema is incorrect
  - Ticket #273 - ruv tombstone searches don't work after reindex entryrdn
  - Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword
  - Ticket #22 - RFE: Support sendmail LDAP routing schema
  - Ticket #161 - Review and address latest Coverity issues
  - Ticket #140 - incorrect memset parameters
  - Trac Ticket 35 - Log not clear enough on schema errors
  - Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn
  - Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if IPv4-mapped-IPv6 address is given


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.8.a7
changelog:
  - fixes for systemd - remove .pid files after shutting down servers
  - Ticket #263 - add systemd include directive
  - Ticket #264 - upgrade needs better check for "server is running"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.7.a7
changelog:
  - Ticket #262 - pid file not removed with systemd
  - Ticket #50 - server should not call a plugin after the plugin close function is called
  - Ticket #18 - Data inconsitency during replication
  - Ticket #49 - better handling for server shutdown while long running tasks are active
  - Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead
  - Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same
  - Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI
  - 6aaeb77 add a hack to disable sasl hostname canonicalization
  - Ticket 168 - minssf should not apply to rootdse
  - Ticket #177 - logconv.pl doesn't detect restarts
  - Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating
  - Ticket 75 - Unconfigure plugin opperations are being called.
  - Ticket 26 - Please support setting defaultNamingContext in the rootdse.
  - Ticket #71 - unable to delete managed entry config
  - Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock
  - Ticket #256 - debug build assertion in ACL_EvalDestroy()
  - Ticket #4 - bak2db gets stuck in infinite loop
  - Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS
  - Ticket #3: acl cache overflown problem
  - Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations
  - Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.6.a6
changelog:
  - Bug 755725 - 389 programs linked against openldap crash during shutdown
  - Bug 755754 - Unable to start dirsrv service using systemd
  - Bug 745259 - Incorrect entryUSN index under high load in replicated environment
  - d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere
  - 5910551 csn_init_as_string should not use sscanf
  - b53ba00 reduce calls to csn_as_string and slapi_log_error
  - c897267 fix member variable name error in slapi_uniqueIDFormat
  - 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf
  - 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf
  - Bug 751645 - crash when simple paged fails to send entry to client
  - Bug 752155 - Use restorecon after creating init script lock file


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.5.a5
changelog:
  - Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD'
  - Bug 750625 750624 750622 744946 Coverity issues
  - Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication
  - Bug 748575 - rhds81 modrn operation and 100% cpu use in replication
  - Bug 745259 - Incorrect entryUSN index under high load in replicated environment
  - f639711 Reduce the number of DN normalization
  - c06a8fa Keep unhashed password psuedo-attribute in the adding entry
  - Bug 744945 - nsslapd-counters attribute value cannot be set to "off"
  - 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular
  - d316a67 Change referential integrity to be a betxnpostoperation plugin


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.4.a4
changelog:
  - Bug 741744 - part3 - MOD operations with chained delete/add get back error 53
  - 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in
  - b6d3ba7 pass the plugin config entry to the plugin init function
  - 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins
  - Bug 743966 - Compiler warnings in account usability plugin


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.a2-0.2
changelog:
  - Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations
  - Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config
  - Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.9-1
changelog:
  - Bug 735121 - simple paged search + ip/dns based ACI hangs server
  - Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code
  - Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server
  - Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.8-1
changelog:
  - Bug 732153 - subtree and user account lockout policies implemented?
  - Bug 722292 - Entries in DS are not updated properly when using WinSync API


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.7-1
changelog:
  - Bug 733103 - large targetattr list with syntax errors cause server to crash or hang
  - Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining
  - Bug 732541 - Ignore error 32 when adding automember config
  - Bug 728592 - Allow ns-slapd to start with an invalid server cert


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.6-1
changelog:
  - Bug 728510 - Run dirsync after sending updates to AD
  - Bug 729717 - Fatal error messages when syncing deletes from AD
  - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working.
  - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed again - separate tests for atomic ops and atomic bool cas


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.5-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix another coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.4-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.3-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  previous patch broke build on el5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-2
changelog:
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed to use configure test for GCC provided 64-bit atomic functions


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-1
changelog:
  - Bug 663752 - Cert renewal for attrcrypt and encchangelog
  -   this was "re-fixed" due to a deadlock condition with cl2ldif task cancel
  - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma
  - Bug 725743 - Make memberOf use PRMonitor for it's operation lock
  - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.0-1
changelog:
  - Bug 720059 - RDN with % can cause crashes or missing entries
  - Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2.
  - Bug 691313 - Need TLS/SSL error messages in repl status and errors log
  - Bug 712855 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not
  - Bug 713209 - Update sudo schema
  - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9
  - Bug 718303 - Intensive updates on masters could break the consumer's cache
  - Bug 711679 - unresponsive LDAP service when deleting vlv on replica


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9-0.2.a2
changelog:
  - 389-ds-base-1.2.9.a2
  - look for separate openldap ldif library
  - Split automember regex rules into separate entries
  - writing Inf file shows SchemaFile = ARRAY(0xhexnum)
  - add support for ldif files with changetype: add
  - Bug 716980 - winsync uses old AD entry if new one not found
  - Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9
  - bump console version to 1.2.6
  - Bug 711679 - unresponsive LDAP service when deleting vlv on replica
  - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file
  - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package
  - Bug 663752 - Cert renewal for attrcrypt and encchangelog
  - Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute
  - Bug 711906 - ns-slapd segfaults using suffix referrals
  - Bug 707384 - only allow FIPS approved cipher suites in FIPS mode
  - Bug 710377 - Import with chain-on-update crashes ns-slapd
  - Bug 709826 - Memory leak: when extra referrals configured


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.3-1
changelog:
  - 389-ds-base-1.2.8.3
  - Bug 700145 - userpasswd not replicating
  - Bug 700557 - Linked attrs callbacks access free'd pointers after close
  - Bug 694336 - Group sync hangs Windows initial Sync
  - Bug 700215 - ldclt core dumps
  - Bug 695779 - windows sync can lose old values when a new value is added
  - Bug 697027 - 12 - minor memory leaks found by Valgrind + TET


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1
changelog:
  - 389-ds-base-1.2.8.2
  - Bug 696407 - If an entry with a mixed case RDN is turned to be
  -    a tombstone, it fails to assemble DN from entryrdn


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.0-1
changelog:
  - 389-ds-base-1.2.8.0
  - Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1
  - Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1
  - Bug 693466 - Unable to change schema online
  - Bug 693503 - matching rules do not inherit from superior attribute type
  - Bug 693455 - nsMatchingRule does not work with multiple values
  - Bug 693451 - cannot use localized matching rules
  - Bug 692331 - Segfault on index update during full replication push on 1.2.7.5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.10.rc5
changelog:
  - 389-ds-base-1.2.8.rc5
  - Bug 692469 - Replica install fails after step for "enable GSSAPI for replication"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.9.rc4
changelog:
  - 389-ds-base-1.2.8.rc4
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
  ice is restarted
  - 389-ds-base-1.2.8.rc3
  - Bug 690955 - Mrclone fails due to the replica generation id mismatch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.8.rc2
changelog:
  - 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2
  - Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences
  - Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format
  - Bug 681015 - RFE: allow fine grained password policy duration attributes
  -              in days, hours, minutes, as well
  - Bug 684996 - Exported tombstone cannot be imported correctly
  - Bug 683250 - slapd crashing when traffic replayed
  - Bug 668909 - Can't modify replication agreement in some cases
  - Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1
  - Bug 644784 - Memory leak in "testbind.c" plugin
  - Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.6.rc1
changelog:
  - 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1
  - Bug 518890 - setup-ds-admin.pl - improve hostname validation
  - Bug 681015 - RFE: allow fine grained password policy duration attributes in 
  -     days, hours, minutes, as well
  - Bug 514190 - setup-ds-admin.pl --debug does not log to file
  - Bug 680555 - ns-slapd segfaults if I have more than 100 DBs
  - Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically
  - Bug 674852 - crash in ldap-agent when using OpenLDAP
  - Bug 679978 - modifying attr value crashes the server, which is supposed to
  -     be indexed as substring type, but has octetstring syntax
  - Bug 676655 - winsync stops working after server restart
  - Bug 677705 - ds-logpipe.py script is failing to validate "-s" and
  -     "--serverpid" options with "-t".
  - Bug 625424 - repl-monitor.pl doesn't work in hub node


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.4.a3
changelog:
  - do not create /var/run/dirsrv - setup will create it instead
  - remove the fedora-ds initscript upgrade stuff - we do not support that anymore
  - convert the remaining lua stuff to plain old shell script


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.3.a3
changelog:
  - 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3
  - Bug 675320 - empty modify operation with repl on or lastmod off will crash server
  - Bug 675265 - preventryusn gets added to entries on a failed delete
  - Bug 677774 - added support for tmpfiles.d
  - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search
  es
  - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
  - Bug 671199 - Don't allow other to write to rundir
  - Bug 678646 - Ignore tombstone operations in managed entry plug-in
  - Bug 676053 - export task followed by import task causes cache assertion
  - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8
  - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used
  - Bug 676689 - crash while adding a new user to be synced to windows
  - Bug 604881 - admin server log files have incorrect permissions/ownerships
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
  ice is restarted
  - Bug 675853 - dirsrv crash segfault in need_new_pw()


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.2.a2
changelog:
  - 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2
  - Bug 674430 - Improve error messages for attribute uniqueness
  - Bug 616213 - insufficient stack size for HP-UX on PA-RISC
  - Bug 615052 - intrinsics and 64-bit atomics code fails to compile
  -    on PA-RISC
  - Bug 151705 - Need to update Console Cipher Preferences with new ciphers
  - Bug 668862 - init scripts return wrong error code
  - Bug 670616 - Allow SSF to be set for local (ldapi) connections
  - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the 
  -    log output to the text file
  - Bug 668619 - slapd stops responding
  - Bug 624547 - attrcrypt should query the given slot/token for
  -    supported ciphers
  - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any 
  -    error message in logs


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.3-1
changelog:
  - 1.2.7.3 release - git tag 389-ds-base-1.2.7.3
  - Bug 658312 - Invalid free in Managed Entry plug-in
  - Bug 641944 - Don't normalize non-DN RDN values


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.2-1
changelog:
  - 1.2.7.2 release - git tag 389-ds-base-1.2.7.2
  - Bug 659456 - Incorrect usage of ber_printf() in winsync code
  - Bug 658309 - Process escaped characters in managed entry mappings
  - Bug 197886 - Initialize return value for UUID generation code
  - Bug 658312 - Allow mapped attribute types to be quoted
  - Bug 197886 - Avoid overflow of UUID generator


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.1-1
changelog:
  - 1.2.7.1 release - git tag 389-ds-base-1.2.7.1
  - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes
  - Bug 656392 - Remove calls to ber_err_print()
  - Bug 625950 - hash nsslapd-rootpw changes in audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.6.a5
changelog:
  - 1.2.7.a5 release - git tag 389-ds-base-1.2.7.a5
  - Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-ref
  erral)
  - Bug 635009 - Add one-way AD sync capability
  - Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot
  - put replication config entries in separate file
  - Bug 567282 - server can not abandon searchRequest of "simple paged results"
  - Bug 329751 - "nested" filtered roles searches candidates more than needed
  - Bug 521088 - DNA should check ACLs before getting a value from the range


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.5.a4
changelog:
  - 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4
  - Bug 647932 - multiple memberOf configuration adding memberOf where there is 
  no member
  - Bug 491733 - dbtest crashes
  - Bug 606545 - core schema should include numSubordinates
  - Bug 638773 - permissions too loose on pid and lock files
  - Bug 189985 - Improve attribute uniqueness error message
  - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat
  ions
  - Bug 619633 - Make attribute uniqueness obey requiredObjectClass


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.4.a3
changelog:
  - 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Adding the ancestorid fix code to ##upgradednformat.pl.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.3.a3
changelog:
  - 1.2.7.a3 release - a2 was never released
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Bug 629681 - Retro Changelog trimming does not behave as expected
  - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif
  -              are not upgraded in the server instance schema dir


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.2.a2
changelog:
  - 1.2.7.a2 release - a1 was the OpenLDAP testday release
  - git tag 389-ds-base-1.2.7.a2
  - added openldap support on platforms that use openldap with moznss
  - for crypto (F-14 and later)
  - many bug fixes
  - Account Policy Plugin (keep track of last login, disable old accounts)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6.1-1
changelog:
  - This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1
  - Bug 634561 - Server crushes when using Windows Sync Agreement
  - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self
  - Bug 612264 - ACI issue with (targetattr='userPassword')
  - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager"
  - Bug 631862 - crash - delete entries not in cache + referint


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.11.rc7
changelog:
  - 1.2.6 release candidate 7
  - git tag 389-ds-base-1.2.6.rc7
  - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.10.rc6
changelog:
  - 1.2.6 release candidate 6
  - git tag 389-ds-base-1.2.6.rc6
  - Bug 617013 - repl-monitor.pl use cpu upto 90%
  - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats
  - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors
  - Bug 613833 - Allow dirsrv_t to bind to rpc ports
  - Bug 612242 - membership change on DS does not show on AD
  - Bug 617629 - Missing aliases in new schema files
  - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears
  - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments
  - Bug 617862 - Replication: Unable to delete tombstone errors
  - Bug 594745 - Get rid of dirsrv_lib_t label


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.9.rc3
changelog:
  - make selinux-devel explicit Require the base package in order
  - to comply with Fedora Licensing Guidelines


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.8.rc3
changelog:
  - 1.2.6 release candidate 3
  - git tag 389-ds-base-1.2.6.rc3
  - Bug 603942 - null deref in _ger_parse_control() for subjectdn
  - 609256  - Selinux: pwdhash fails if called via Admin Server CGI
  - 578296  - Attribute type entrydn needs to be added when subtree rename switch is on
  - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"


author: Nathan Kinder <nkinder@redhat.com> - 1.2.6-0.4.a3
changelog:
  - 1.2.6.a3 release
  - add managed entries plug-in
  - many bug fixes
  - moved selinux subpackage into base package


author: Rich Megginson <rmeggins@redhat.com> - 1.2.4-1
changelog:
  - 1.2.4 release
  - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration
  - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif


author: Rich Megginson <rmeggins@redhat.com> - 1.2.3-1
changelog:
  - 1.2.3 release
  - added template-initconfig to %files
  - %posttrans now runs update to update the server instances
  - servers are shutdown, then restarted if running before install
  - scriptlets mostly use lua now to pass data among scriptlet phases


author: Rich Megginson <rmeggins@redhat.com> - 1.2.2-1
changelog:
  - backed out - added template-initconfig to %files - this change is for the next major release
  - bump version to 1.2.2
  - fix reopened 509472 db2index all does not reindex all the db backends correctly
  - fix 518520 -  pre hashed salted passwords do not work
  - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of
  - bugs fixed in 1.2.2


author: Rich Megginson <rmeggins@redhat.com> - 1.2.1-1
changelog:
  - change name to 389
  - change version to 1.2.1
  - added initial support for numeric string syntax
  - added initial support for syntax validation
  - added initial support for paged results including sorting


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-4
changelog:
  - final release 1.2.0
  - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer
  - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389
  - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-1
changelog:
  - new release 1.2.0
  - Made devel package depend on mozldap-devel
  - only create run dir if it does not exist
  - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330


author: Rich Megginson <rmeggins@redhat.com> - 1.1.2-1
changelog:
  - This is the 1.1.2 release.  The bugs fixed can be found here
  - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721
  - Added winsync-plugin.h to the devel subpackage


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.1.0.1-3
changelog:
  - add patch to allow server to work with NSS 3.11.99 and later
  - do NSS_Init after fork but before detaching from console


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0.1-1
changelog:
  - Resolves bug 434403 - GCC 4.3 build fails
  - Rolled new source tarball which includes Nathan's fix for the struct ucred
  - NOTE: Change version back to 1.1.1 for next release
  - this release was pulled from CVS tag FedoraDirSvr110_gcc43


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-4
changelog:
  - This is the GA release of Fedora DS 1.1
  - Removed version numbers for BuildRequires and Requires
  - Added full URL to source tarball


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-2.0
changelog:
  - This is the beta2 release
  - new file added to package - /etc/sysconfig/dirsrv - for setting
  - daemon environment as is usual in other linux daemons


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.2
changelog:
  - fix build breakage due to open()
  - mock could not find BuildRequires: db4-devel >= 4.2.52
  - mock works if >= version is removed - it correctly finds db4.6


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.3.20070720
changelog:
  - Added Requires for perldap, cyrus sasl plugins
  - Removed template-migrate* files
  - Added perl module directory
  - Removed install.inf - setup-ds.pl can now easily generate one


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070320
changelog:
  - update to latest sources
  - added migrateTo11 to allow migrating instances from 1.0.x to 1.1
  - ldapi support
  - fixed pam passthru plugin ENTRY method


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070223
changelog:
  - Renamed package to fedora-ds-base, but keep names of paths/files/services the same
  - use the shortname macro (fedora-ds) for names of paths, files, and services instead
  - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base
  - updated to latest sources


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070213
changelog:
  - More cleanup suggested by Dennis Gilmore
  - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-8.el4.20070125
changelog:
  - added logconv.pl
  - added slapi-plugin.h to devel package
  - added explicit dirs for /var/log/fedora-ds et. al.


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-6.el4.20070125
changelog:
  - Move the plugin *.so files into the main package instead of the devel
  - package because they are loaded directly by name via dlopen


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.el4.cvs20070119
changelog:
  - Changed version to 1.1.0 and added Release 1.el4.cvs20070119
  - merged in changes from Fedora Extras candidate spec file


author: Dennis Gilmore <dennis@ausil.us> - 1.1-0.1.cvs20070108
changelog:
  - update to a cvs snapshot
  - fedorafy the spec 
  - create -devel subpackage
  - apply a patch to use mozldap not mozldap6
  - apply a patch to allow --prefix to work correctly


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-16
changelog:
  - Fixed the problem where the server would crash upon shutdown in dblayer
  - due to a race condition among the database housekeeping threads
  - Fix a problem with normalized absolute paths for db directories


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-15
changelog:
  - Touch all of the ldap/admin/src/scripts/*.in files so that they
  - will be newer than their corresponding script template files, so
  - that make will rebuild them.


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-9
changelog:
  - The template scripts needed to use @libdir@ instead of hardcoding
  - /usr/lib
  - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall
  - do the actual build in a "built" subdirectory, until we remove
  - the old script templates


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.1-17
changelog:
  - Prevent possible buffer overflow in yyerror()
    Resolves: CVE-2014-1235
  - Fix possible buffer overflow problem in chkNum of scanner
    Resolves: CVE-2014-1236


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.1-13
changelog:
  - Fixed multilib conflicts
    Rewrote lefty IO lib to use getaddrinfo instead of gethostbyname
    (by lefty-getaddrinfo patch)
    Resolves: rhbz#881173


author: Remi Collet <rcollet@redhat.com> - 2.30.1-3
changelog:
  - rebuild for http://fedoraproject.org/wiki/Features/Php55
  - add explicit BuildRequires: perl-Carp (workaround)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.30.0-1
changelog:
  - New version
    Resolves: rhbz#895027
  - Dropped guile-detect, ocaml4 patches (not needed)
  - Fixed bogus date in changelog (guessing)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.28.0-26
changelog:
  - Rebuilt with -fno-strict-overflow to workaround the overflow problem
    (upstream ticket: http://www.graphviz.org/mantisbt/view.php?id=2244)
  - The dot_builtins was removed rather then excluded to fix the dangling
    symlinks problem in debuginfo


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.28.0-23
changelog:
  - Silenced 'dot -c' errors/warnings in post/postun
  - Do not remove dot config in plugins post/postun


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.28.0-22
changelog:
  - dot_builtins no longer installed (lowers implicit deps)
  - Fixed post/postuns for plugins
  - Removed -ffast-math, added -ffloat-store (on i386) to fix arithmetic on i386


author: Richard W.M. Jones <rjones@redhat.com> - 2.28.0-19
changelog:
  - Rebuild for OCaml 4.00.0.
  - Enable OCaml on arm and ppc64, since there are working native compilers
    for both.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.28.0-17
changelog:
  - All docs are now installed into /usr/share/doc/graphviz-%{version}
  - Demos packaged as docs not to automatically bring in unnecessary deps


author: Remi Collet <remi@fedoraproject.org> - 2.28.0-13
changelog:
  - build against php 5.4.0
  - add filter to fix private-shared-object-provides
  - add %check for php extension


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.28.0-11
changelog:
  - Added conditionals for ARRRR, DEVIL, QTAPPS (gvedit), GTS, LASI
  - Fixed conditionals for SHARP, OCAML
  - Built with gts, ghostscript, rsvg and lasi
    Resolves: rhbz#760926
  - Disabled gvedit
    Resolves: rhbz#751807
  - Fixed rpmlint warnings about executable sources


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.28.0-1
changelog:
  - New version 2.28.0
  - Added perl-ExtUtils-Embed to BuildRequires, it is now required
  - Fixed build failure due to change in php_zend_api macro type
  - Removed sparc64, gtk-progname, doc-index-fix, ppc-darwinhack
    patches (all were upstreamed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.3-1
changelog:
  - New version (#580017)
  - Fixed gtk plugin program-name (#640671, gtk-progname patch)
  - Fixed broken links in doc index (#642536, doc-index-fix patch)
  - Fixed SIGSEGVs on testsuite (#645703, testsuite-sigsegv-fix patch)
  - Testsuite now do diff check also in case of err output (#645703,
    rtest-errout-fix patch)
  - Testsuite enabled on all arches (#645703)
  - Added urw-fonts to BuildRequires
  - Compiled with -fno-strict-aliasing
  - Fixed rpmlint warnings on spec file
  - Removed unused patches


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.26.0-1
changelog:
  - Updated to latest release
  - Removed patches that have been applied upstream
  - Fixed man page paths (mann -> man3)
  - Disabled mono and ocaml for ARM (Jitesh Shah, BZ#532047)
  - Disabled regression tests on sparc64 as well as ppc/ppc64 (Dennis Gilmore)


author: Remi Collet <Fedora@FamilleCollet.com> 2.20.3-4
changelog:
  - rebuild for new PHP 5.3.0 ABI (20090626)
  - add PHP ABI check
  - use php_extdir (and don't own it)
  - add php configuration file (/etc/php.d/graphviz.ini)


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.20.3-3
changelog:
  - this spec makes baby animals cry... massively clean it up
  - hack in java includes to build against openjdk
  - add ruby as a BuildRequires (configure checks for /usr/bin/ruby)


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.16.1-0.2
changelog:
  - New upstream release (fixes BZ#433205, BZ#427376)
  - Merged spec changes in from upstream
  - Added patch from BZ#432683


author: John Ellson <ellson@research.att.com>
changelog:
  - split out language bindings into their own rpms so that 
    main rpm doesn't depend on (e.g.) ocaml


author: Mike FABIAN <mfabian@redhat.com> - 50.2-2
changelog:
  - Fix rpmdiff failure: File /usr/src/debug/icu/source/i18n/unicode/selfmt.h
    relaxed permissions from 0644 to 0755 on all architectures
  - Related: rhbz#1677092


author: Mike FABIAN <mfabian@redhat.com> - 50.2-1
changelog:
  - Update to 50.2 maintenance release including support for new Japanese era Reiwa (令和).
  - Resolves: rhbz#1677092


author: Eike Rathke <erack@redhat.com> - 50.1.2-6
changelog:
  - Resolves: rhbz#966141 various flaws in Layout Engine font processing
  - Resolves: rhbz#966077 aarch64 support for icu-config.sh wrapper


author: Eike Rathke <erack@redhat.com> - 50.1.2-1
changelog:
  - Update to 50.1.2
  - Resolves: rhbz#856594 to-do add --disable-renaming on next soname bump
  - removed upstream applied icu.9283.regexcmp.crash.patch


author: Eike Rathke <erack@redhat.com> - 4.8.1-3
changelog:
  - Resolves: rhbz#766542 CVE-2011-4599 Stack-based buffer overflow
  - add icu.8984.CVE-2011-4599.patch


author: Caolán McNamara <caolanm@redhat.com> - 4.6-1
changelog:
  - latest version
  - upgrade includes a .pc now of its own, drop ours
  - drop integrated icu.6995.kannada.patch
  - drop integrated icu.7971.buildfix.patch
  - drop integrated icu.7972.buildfix.patch
  - drop integrated icu.7932.doublecompare.patch
  - drop integrated icu.8011.buildfix.patch


author: Caolán McNamara <caolanm@redhat.com> - 4.4.1-2
changelog:
  - Resolves: rhbz#596171 drop icu.icu6284.strictalias.patch and use
    -fno-strict-aliasig as upstream has added a pile more and doesn't look
    interested in proposed patchs


author: Caolán McNamara <caolanm@redhat.com> - 4.4-1
changelog:
  - latest version
  - drop integrated icu.6969.pkgdata.patch
  - drop integrated icu.icu7039.badextract.patch
  - drop integrated icu.XXXX.buildfix.patch


author: Caolán McNamara <caolanm@redhat.com> - 4.2-0.1.d03
changelog:
  - 4.2 release candidate
  - drop resolved icu.icu6008.arm.padding.patch
  - drop resolved icu.icu6439.bare.elif.patch


author: Caolán McNamara <caolanm@redhat.com> - 4.0-2
changelog:
  - Resolves: rhbz#459698 drop Malayalam patches. Note test with Rachana/Meera
    instead of Lohit Malayalam before filing bugs against icu wrt.
    Malayalam rendering


author: Caolán McNamara <caolanm@redhat.com> - 3.8.1-5
changelog:
  - Resolves: rhbz#431401 split syllables on 1st 0d4d of a 0d4d + 
    (>= 0d15 && <= 0d39) + 0d4d + 0d30 sequence


author: Caolán McNamara <caolanm@redhat.com> - 3.8.1-3
changelog:
  - CVE-2007-4770 CVE-2007-4771 add icu.regexp.patch
  - Resolves: rhbz#423211 fix malalayam stuff in light of syllable
    changes


author: Caolán McNamara <caolanm@redhat.com> - 3.8.1-2
changelog:
  - remove icu.icu5365.dependantvowels.patch and cleanup
    icu.icu5506.multiplevowels.patch as they patch and unpatch 
    eachother (thanks George Rhoten for pointing out that madness)


author: Caolán McNamara <caolanm@redhat.com> - 3.8-0.1.d01
changelog:
  - 3.8 release candidate
  - drop integrated icu.icu5433.oriya.patch
  - drop integrated icu.icu5488.assamese.patch
  - drop integrated icu.icu5500.devicetablecrash.patch
  - drop integrated icu.icu5501.sinhala.biggerexpand.patch
  - drop integrated icu.icu5594.gujarati.patch
  - drop integrated icu.icu5465.telegu.patch


author: Caolán McNamara <caolanm@redhat.com> - 3.6-20
changelog:
  - Resolves: rhbz#243984 change the icu group as it is libicu 
    which is "System Environment/Libraries" not icu


author: Caolán McNamara <caolanm@redhat.com> - 3.6-5
changelog:
  - rh#208705# add pkg-config Require for -devel package
  - add icu.icu5431.malayam.patch for rh#208551#/rh#209084#
  - add icu.icu5433.oriya.patch for rh#208559#/rh#209083#


author: Caolán McNamara <caolanm@redhat.com> - 3.6-2
changelog:
  - fix rh#205252#/icu#5365 (gnome#121882#/#icu#4026#) to make icu 
    like pango for multiple dependant vowels


author: Caolán McNamara <caolanm@redhat.com> - 3.6-0.1.d01
changelog:
  - rh#200728# update to prelease 3.6d01 to pick up on sinhala fixes
  - drop integrated rh190879.patch
  - drop integrated icu-3.4-sinhala1.patch


author: Ville Skyttä <ville.skytta at iki.fi> - 3.2-3
changelog:
  - Apply upstream case mapping mutex lock removal patch.
  - Build with gcc 3.2 as a temporary workaround for #152495.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:3.0-0.fdr.1
changelog:
  - Update to 3.0, datadirs patch no longer needed.
  - Package data in shared libs, drop -locales subpackage.
  - Rename -docs subpackage to libicu-doc, and generate graphs with graphviz.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.6.1-0.fdr.3
changelog:
  - Partial fix for bad datadirs returned by icu-config (works as long as
    data packaging mode is not "common" or "dll").


author: Paul Howarth <paul@city-fan.org> 2.110-18
changelog:
  - don't build-require modules that this package provides (problem stupidly
    introduced in previous release)
  - don't need to remove empty directories from buildroot
  - drop %defattr, redundant since rpm 4.4


author: Paul Howarth <paul@city-fan.org> 2.110-17
changelog:
  - spec clean-up:
    - nobody else likes macros for commands
    - use DESTDIR rather than PERL_INSTALL_ROOT
    - add buildreqs for core perl modules, which may be dual-lived


author: Paul Howarth <paul@city-fan.org> 2.110-3
changelog:
  - use search.cpan.org download URL
  - use full paths for all commands used in build
  - assume rpm knows about %check and %{perl_vendorlib}
  - cosmetic spec file changes


author: Ville Skyttä <ville.skytta at iki.fi> - 3.3-1
changelog:
  - Update to 3.3.
  - Address minor issues in merge review (#225918): update %description,
    don't use %makeinstall, drop unneeded %debug_package override, use
    parallel build.


author: Matthias Clasen <mclasen@redhat.com> 1.3-1
changelog:
  - Update to 1.3
  - Update the license field
  - Use %find_lang for translations
  - Don't create debuginfo


author: Christopher Aillon <caillon@redhat.com> 0.46-2
changelog:
  - The .pc file should be installed in %{_datadir} instead of %{_libdir}
    since this is a noarch package.  64bit platforms will otherwise look in
    the 64bit version of the %{_libdir} and not find the .pc file and 
    cause them to not find iso-codes


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-4
changelog:
  - Resolves: rhbz#1727842 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-3
changelog:
  - Resolves: rhbz#1712458 - [machines] The function of 'Auto-detect guest
                             operating system' is not available on rhel 7.7


author: Christophe Fergeau <cfergeau@redhat.com> - 0.2.5-2
changelog:
  - BuildRequires /usr/bin/pod2man as this will automatically pick the right
    package rather than conditionally requiring a package that is only
    available in f19+
  - Do not Requires: udev when building libosinfo without its udev rule
    (which is done on f19+)


author: Christophe Fergeau <cfergeau@redhat.com> 0.2.5-1
changelog:
  - New upstream release 0.2.5
  - Disable udev rule as it's no longer required with newer
    systemd/util-linux


author: Zeeshan Ali <zeenix@redhat.com> - 0.2.1-1
changelog:
  - Fix and simplify udev rule.
  - Fedora:
    - Fix minimum RAM requirements for F16 and F17.
  - Add data on:
    - Fedora 18
    - GNOME 3.6
    - Ubuntu 12.10
  - Fixes to doc build.
  - Install script:
    - Add get_config_param method.
    - Differenciate between expected/output script names.
    - Add more utility functions.
  - Add 'installer-reboots' parameter to medias.
  - osinfo-detect does not die of DB loading errors anymore.
  - More type-specific entity value getters/setters.
  - Fixe and update RNG file.
  - Add 'subsystem' property/attribute to devices.


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-28
changelog:
  - createrepo: allow xz and bz2 for xml files.
  - Resolves: bug#1125437
  - modifyrepo: fix handling of already compressed input.
  - Resolves: bug#1227782
  - modifyrepo: handle empty file with LZMA.
  - Resolves: bug#1287685
  - modifyrepo: docs: remove compat compress type.
  - Resolves: bug#1287714


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-27
changelog:
  - Fix temporary files cleanup.
  - Resolves: bug#1406418
  - Fix --update for pkgs with same nevra.
  - Resolves: bug#1404239


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-26
changelog:
  - Make sure filename doesn't already contain a checksum.
  - Resolves: bug#1270784
  - Catch IOErrors when loading pkglist.
  - Resolves: bug#1083182
  - Add missing options to the manpage.
  - Resolves: bug#1285761


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-24
changelog:
  - mergerepo: merge package versions from multiple repos.
  - Related: bug#1178763
  - Close lock file before unlink().
  - Related: bug#1256216


author: Zdenek Pavlas <zpavlas@redhat.com> - 0.9.9-21
changelog:
  - update to latest HEAD
  - don't BuildRequire bash-completion in rhel
  - Fail for bad compress-type options to modifyrepo, like createrepo. BZ 886589
  - Fix options documentation. BZ 892657.
  - modifyrepo: fix --compress option bug. BZ 950724
  - modifyrepo: add --checksum and --{unique,simple}-md-filenames options


author: Zdenek Pavlas <zpavlas at redhat.com> - 0.9.9-16
changelog:
  - update to latest HEAD
  - turn off stdout buffering in worker to prevent a deadlock
  - modifyrepo: use integer timestamps


author: Zdenek Pavlas <zpavlas at redhat.com> - 0.9.9-14
changelog:
  - update to latest HEAD
  - Fix the deadlock issue.  BZ 856363
  - Manually set the permmissions for tempfile created cachefiles. BZ 833350
  - modifyrepo: use available compression only.  BZ 865845
  - No baseurl means no baseurl.  BZ 875029
  - Change the compress-type for modifyrepo to .gz for compat. BZ 874682.
  - fix the --skip-symlinks option
  - no repomd.xml && --checkts: skip .rpm timestamp checking.  BZ 877301
  - new worker piping code (no tempfiles, should be faster)


author: Václav Pavlín <vpavlin@redhat.com> - 0.9.33
changelog:
  - Update to latest uptsream release 0.9.33 due to
    security issues.
    Resolves: rhbz#1039393, rhbz#1039387


author: Tim Niemueller <tim@niemueller.de> - 0.9.2-3
changelog:
  - Add missing BR gnutls-devel and libgcrypt-devel
  - Added patch to fix test apps (NSS instead of GnuTLS/OpenSSL curl,
    implicit DSO linking)
  - Disable test cases for now due to false errors, reported upstream


author: Erik van Pienbroek <info@nntpgrab.nl> - 0.4.0a-1
changelog:
  - Update to version 0.4.0a
  - Drop upstreamed patch
  - Added a new patch to fix a 64bit issue
  - The -devel package now contains a pkgconfig file
  - The configure script is now run with '--enable-messages --enable-https'
  - Made the -doc subpackage noarch (F11+)


author: Erik van Pienbroek <info@nntpgrab.nl> - 0.4.0-1
changelog:
  - Update to version 0.4.0
  - This version introduces a API bump (which is required for
    supporting large files on 32bit environments)
  - The license issues we had with version 0.3.1 of this package (as
    discussed in #457924) are resolved in this version. The license
    of this package is now changed to LGPLv2+
  - Added a patch to fix two testcases on 64bit environments (upstream bug #1454)


