# changelog

author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1829.el7uek]
changelog:
  - uek-rpm: Enable ovmapi.ko in nano_modules file (Victor Erminpour)  [Orabug: 28144761]  
  - ipmi: Remove ACPI SPMI probing from the SSIF (I2C) driver (Corey Minyard)  [Orabug: 28348439]  
  - scsi: megaraid_sas: fix selection of reply queue (Ming Lei)  [Orabug: 28342108]  
  - genirq/affinity: assign vectors to all possible CPUs (Christoph Hellwig)  [Orabug: 28342108]  
  - rds: tcp: cancel all worker threads before shutting down socket (Sowmini Varadhan)  [Orabug: 28298233]  
  - net/rds: Implement ARP flushing correctly (Håkon Bugge)  [Orabug: 28219823]  
  - Revert "aarch64: remove duplicate dtb in kernel rpm" (Jack Vogel)   
  - device-dax: implement ->pagesize() for smaps to report MMUPageSize (Dan Williams)  [Orabug: 27262713]  
  - mm, hugetlbfs: introduce ->pagesize() to vm_operations_struct (Dan Williams)  [Orabug: 27262713]  
  - mm, powerpc: use vma_kernel_pagesize() in vma_mmu_pagesize() (Dan Williams)  [Orabug: 27262713]  
  - aarch64: remove duplicate dtb in kernel rpm (Eric Saint-Etienne)  [Orabug: 28216582]  
  - mm/gup.c: teach get_user_pages_unlocked to handle FOLL_NOWAIT (Andrea Arcangeli)  [Orabug: 27960955]  
  - rdmaip: fix returned value not set error (Zhu Yanjun)  [Orabug: 28175433]  
  - rds: Avoid compiler warning in ib_send.c (Knut Omang)  [Orabug: 28227497]  
  - rds: signedness bug (Dan Carpenter)  [Orabug: 28312881]  
  - proc/kcore: don't bounds check against address 0 (Laura Abbott)  [Orabug: 28172481]  
  - iommu/arm-smmu-v3: limit reporting of MSI allocation failures (Nate Watterson)  [Orabug: 27995572]  
  - Linux 4.14.54 (Greg Kroah-Hartman)   
  - net: dsa: b53: Add BCM5389 support (Damien Thébault)   
  - net/sonic: Use dma_mapping_error() (Finn Thain)   
  - platform/x86: asus-wmi: Fix NULL pointer dereference (João Paulo Rechi Vita)   
  - sched/core: Require cpu_active() in select_task_rq(), for user tasks (Paul Burton)   
  - sched/core: Fix rules for running on online && !active CPUs (Peter Zijlstra)   
  - fs: clear writeback errors in inode_init_always (Darrick J. Wong)   
  - perf bpf: Fix NULL return handling in bpf__prepare_load() (YueHaibing)   
  - perf test: "Session topology" dumps core on s390 (Thomas Richter)   
  - net: qmi_wwan: Add Netgear Aircard 779S (Josh Hill)   
  - atm: zatm: fix memcmp casting (Ivan Bornyakov)   
  - iwlwifi: pcie: compare with number of IRQs requested for, not number of CPUs (Hao Wei Tee)   
  - ipvs: fix buffer overflow with sync daemon and service (Julian Anastasov)   
  - netfilter: nft_limit: fix packet ratelimiting (Pablo Neira Ayuso)   
  - s390/dasd: use blk_mq_rq_from_pdu for per request data (Sebastian Ott)   
  - netfilter: ebtables: handle string from userspace with care (Paolo Abeni)   
  - afs: Fix directory permissions check (David Howells)   
  - xfrm6: avoid potential infinite loop in _decode_session6() (Eric Dumazet)   
  - mtd: rawnand: fix return value check for bad block status (Abhishek Sahu)   
  - ARM: dts: imx6q: Use correct SDMA script for SPI5 core (Sean Nyekjaer)   
  - netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain() (Taehee Yoo)   
  - netfilter: ip6t_rpfilter: provide input interface for route lookup (Vincent Bernat)   
  - netfilter: don't set F_IFACE on ipv6 fib lookups (Florian Westphal)   
  - md: remove special meaning of ->quiesce(.., 2) (NeilBrown)   
  - md: allow metadata update while suspending. (NeilBrown)   
  - md: use mddev_suspend/resume instead of ->quiesce() (NeilBrown)   
  - md: move suspend_hi/lo handling into core md code (NeilBrown)   
  - md: don't call bitmap_create() while array is quiesced. (NeilBrown)   
  - md: always hold reconfig_mutex when calling mddev_suspend() (NeilBrown)   
  - netfilter: nf_tables: fix NULL-ptr in nf_tables_dump_obj() (Taehee Yoo)   
  - netfilter: nf_tables: add missing netlink attrs to policies (Florian Westphal)   
  - netfilter: nf_tables: fix memory leak on error exit return (Colin Ian King)   
  - netfilter: nf_tables: increase nft_counters_enabled in nft_chain_stats_replace() (Taehee Yoo)   
  - netfilter: nf_tables: disable preemption in nft_update_chain_stats() (Pablo Neira Ayuso)   
  - netfilter: nft_meta: fix wrong value dereference in nft_meta_set_eval (Taehee Yoo)   
  - netfilter: nf_tables: bogus EBUSY in chain deletions (Pablo Neira Ayuso)   
  - netfilter: nf_tables: don't assume chain stats are set when jumplabel is set (Florian Westphal)   
  - netfilter: nft_compat: fix handling of large matchinfo size (Florian Westphal)   
  - netfilter: nft_compat: prepare for indirect info storage (Florian Westphal)   
  - netfilter: nf_tables: nft_compat: fix refcount leak on xt module (Florian Westphal)   
  - drm/i915: Enable provoking vertex fix on Gen9 systems. (Kenneth Graunke)   
  - drm/amdgpu: Refactor amdgpu_vram_mgr_bo_invisible_size helper (Michel Dänzer)   
  - drm/amdgpu: Use kvmalloc_array for allocating VRAM manager nodes array (Michel Dänzer)   
  - drm/atmel-hlcdc: check stride values in the first plane (Stefan Agner)   
  - drm/qxl: Call qxl_bo_unref outside atomic context (Jeremy Cline)   
  - drm/amdgpu: fix the missed vcn fw version report (Huang Rui)   
  - drm/amdgpu: Add APU support in vi_set_vce_clocks (Rex Zhu)   
  - drm/amdgpu: Add APU support in vi_set_uvd_clocks (Rex Zhu)   
  - vt: prevent leaking uninitialized data to userspace via /dev/vcs* (Alexander Potapenko)   
  - serdev: fix memleak on module unload (Johan Hovold)   
  - serial: 8250_pci: Remove stalled entries in blacklist (Andy Shevchenko)   
  - staging: android: ion: Return an ERR_PTR in ion_map_kernel (Laura Abbott)   
  - n_tty: Access echo_* variables carefully. (Tetsuo Handa)   
  - n_tty: Fix stall at n_tty_receive_char_special(). (Tetsuo Handa)   
  - xhci: Fix kernel oops in trace_xhci_free_virt_device (Zhengjun Xing)   
  - usb: typec: ucsi: Fix for incorrect status data issue (Heikki Krogerus)   
  - usb: typec: ucsi: acpi: Workaround for cache mode issue (Heikki Krogerus)   
  - acpi: Add helper for deactivating memory region (Heikki Krogerus)   
  - usb: dwc2: fix the incorrect bitmaps for the ports of multi_tt hub (William Wu)   
  - USB: serial: cp210x: add Silicon Labs IDs for Windows Update (Karoly Pados)   
  - USB: serial: cp210x: add CESINEL device ids (Johan Hovold)   
  - usb: cdc_acm: Add quirk for Uniden UBC125 scanner (Houston Yaroschoff)   
  - Linux 4.14.53 (Greg Kroah-Hartman)   
  - xhci: Fix use-after-free in xhci_free_virt_device (Mathias Nyman)   
  - dm thin: handle running out of data space vs concurrent discard (Mike Snitzer)   
  - dm zoned: avoid triggering reclaim from inside dmz_map() (Bart Van Assche)   
  - x86/efi: Fix efi_call_phys_epilog() with CONFIG_X86_5LEVEL=y (Kirill A. Shutemov)   
  - block: Fix cloning of requests with a special payload (Bart Van Assche)   
  - block: Fix transfer when chunk sectors exceeds max (Keith Busch)   
  - slub: fix failure when we delete and create a slab cache (Mikulas Patocka)   
  - ALSA: hda/realtek - Fix the problem of two front mics on more machines (Hui Wang)   
  - ALSA: hda/realtek - Add a quirk for FSC ESPRIMO U9210 (Takashi Iwai)   
  - ALSA: hda/realtek - Fix pop noise on Lenovo P50 & co (Takashi Iwai)   
  - ALSA: timer: Fix UBSAN warning at SNDRV_TIMER_IOCTL_NEXT_DEVICE ioctl (Takashi Iwai)   
  - Input: elantech - fix V4 report decoding for module with middle key (???)   
  - Input: elantech - enable middle button of touchpads on ThinkPad P52 (Aaron Ma)   
  - Input: elan_i2c_smbus - fix more potential stack buffer overflows (Ben Hutchings)   
  - Input: xpad - fix GPD Win 2 controller name (Enno Boland)   
  - udf: Detect incorrect directory size (Jan Kara)   
  - xen: Remove unnecessary BUG_ON from __unbind_from_irq() (Boris Ostrovsky)   
  - mm: fix devmem_is_allowed() for sub-page System RAM intersections (Dan Williams)   
  - mm/ksm.c: ignore STABLE_FLAG of rmap_item->address in rmap_walk_ksm() (Jia He)   
  - rbd: flush rbd_dev->watch_dwork after watch is unregistered (Dongsheng Yang)   
  - pwm: lpss: platform: Save/restore the ctrl register over a suspend/resume (Hans de Goede)   
  - Input: elan_i2c - add ELAN0618 (Lenovo v330 15IKB) ACPI ID (Alexandr Savca)   
  - ACPI / LPSS: Add missing prv_offset setting for byt/cht PWM devices (Hans de Goede)   
  - video: uvesafb: Fix integer overflow in allocation (Kees Cook)   
  - NFSv4: Fix a typo in nfs41_sequence_process (Trond Myklebust)   
  - NFSv4: Revert commit 5f83d86cf531d ("NFSv4.x: Fix wraparound issues..") (Trond Myklebust)   
  - NFSv4: Fix possible 1-byte stack overflow in nfs_idmap_read_and_verify_message (Dave Wysochanski)   
  - nfsd: restrict rd_maxcount to svc_max_payload in nfsd_encode_readdir (Scott Mayhew)   
  - media: dvb_frontend: fix locking issues at dvb_frontend_get_event() (Mauro Carvalho Chehab)   
  - media: cx231xx: Add support for AverMedia DVD EZMaker 7 (Kai-Heng Feng)   
  - media: v4l2-compat-ioctl32: prevent go past max size (Mauro Carvalho Chehab)   
  - media: vsp1: Release buffers for each video node (Kieran Bingham)   
  - perf/x86/intel/uncore: Add event constraint for BDX PCU (Kan Liang)   
  - perf vendor events: Add Goldmont Plus V1 event file (Kan Liang)   
  - perf intel-pt: Fix packet decoding of CYC packets (Adrian Hunter)   
  - perf intel-pt: Fix "Unexpected indirect branch" error (Adrian Hunter)   
  - perf intel-pt: Fix MTC timing after overflow (Adrian Hunter)   
  - perf intel-pt: Fix decoding to accept CBR between FUP and corresponding TIP (Adrian Hunter)   
  - perf intel-pt: Fix sync_switch INTEL_PT_SS_NOT_TRACING (Adrian Hunter)   
  - perf tools: Fix symbol and object code resolution for vdso32 and vdsox32 (Adrian Hunter)   
  - arm: dts: mt7623: fix invalid memory node being generated (Sean Wang)   
  - mfd: intel-lpss: Fix Intel Cannon Lake LPSS I2C input clock (Jarkko Nikula)   
  - mfd: intel-lpss: Program REMAP register in PIO mode (Andy Shevchenko)   
  - backlight: tps65217_bl: Fix Device Tree node lookup (Johan Hovold)   
  - backlight: max8925_bl: Fix Device Tree node lookup (Johan Hovold)   
  - backlight: as3711_bl: Fix Device Tree node lookup (Johan Hovold)   
  - UBIFS: Fix potential integer overflow in allocation (Silvio Cesare)   
  - ubi: fastmap: Correctly handle interrupted erasures in EBA (Richard Weinberger)   
  - ubi: fastmap: Cancel work upon detach (Richard Weinberger)   
  - rpmsg: smd: do not use mananged resources for endpoints and channels (Srinivas Kandagatla)   
  - md: fix two problems with setting the "re-add" device state. (NeilBrown)   
  - rtc: sun6i: Fix bit_idx value for clk_register_gate (Michael Trimarchi)   
  - clk: at91: PLL recalc_rate() now using cached MUL and DIV values (Marcin Ziemianowicz)   
  - linvdimm, pmem: Preserve read-only setting for pmem devices (Robert Elliott)   
  - scsi: zfcp: fix missing REC trigger trace on enqueue without ERP thread (Steffen Maier)   
  - scsi: zfcp: fix missing REC trigger trace for all objects in ERP_FAILED (Steffen Maier)   
  - scsi: zfcp: fix missing REC trigger trace on terminate_rport_io for ERP_FAILED (Steffen Maier)   
  - scsi: zfcp: fix missing REC trigger trace on terminate_rport_io early return (Steffen Maier)   
  - scsi: zfcp: fix misleading REC trigger trace where erp_action setup failed (Steffen Maier)   
  - scsi: zfcp: fix missing SCSI trace for retry of abort / scsi_eh TMF (Steffen Maier)   
  - scsi: zfcp: fix missing SCSI trace for result of eh_host_reset_handler (Steffen Maier)   
  - scsi: qla2xxx: Mask off Scope bits in retry delay (Anil Gurumurthy)   
  - scsi: qla2xxx: Fix setting lower transfer speed if GPSC fails (Himanshu Madhani)   
  - scsi: hpsa: disable device during shutdown (Sinan Kaya)   
  - mm: fix __gup_device_huge vs unmap (Dan Williams)   
  - iio: sca3000: Fix an error handling path in 'sca3000_probe()' (Christophe JAILLET)   
  - iio: adc: ad7791: remove sample freq sysfs attributes (Alexandru Ardelean)   
  - Btrfs: fix return value on rename exchange failure (Filipe Manana)   
  - X.509: unpack RSA signatureValue field from BIT STRING (Maciej S. Szmigiero)   
  - irqchip/gic-v3-its: Don't bind LPI to unavailable NUMA node (Yang Yingliang)   
  - time: Make sure jiffies_to_msecs() preserves non-zero time periods (Geert Uytterhoeven)   
  - MIPS: io: Add barrier after register read in inX() (Huacai Chen)   
  - cpufreq: intel_pstate: Fix scaling max/min limits with Turbo 3.0 (Srinivas Pandruvada)   
  - pinctrl: devicetree: Fix pctldev pointer overwrite (Fabio Estevam)   
  - pinctrl: samsung: Correct EINTG banks order (Paweł Chmiel)   
  - auxdisplay: fix broken menu (Randy Dunlap)   
  - PCI: pciehp: Clear Presence Detect and Data Link Layer Status Changed on resume (Mika Westerberg)   
  - PCI: Add ACS quirk for Intel 300 series (Mika Westerberg)   
  - PCI: Add ACS quirk for Intel 7th & 8th Gen mobile (Alex Williamson)   
  - PCI: hv: Make sure the bus domain is really unique (Sridhar Pitchai)   
  - MIPS: BCM47XX: Enable 74K Core ExternalSync for PCIe erratum (Tokunori Ikegami)   
  - mtd: cfi_cmdset_0002: Avoid walking all chips when unlocking. (Joakim Tjernlund)   
  - mtd: cfi_cmdset_0002: Fix unlocking requests crossing a chip boudary (Joakim Tjernlund)   
  - mtd: cfi_cmdset_0002: fix SEGV unlocking multiple chips (Joakim Tjernlund)   
  - mtd: cfi_cmdset_0002: Use right chip in do_ppb_xxlock() (Joakim Tjernlund)   
  - mtd: cfi_cmdset_0002: Change write buffer to check correct value (Tokunori Ikegami)   
  - xprtrdma: Return -ENOBUFS when no pages are available (Chuck Lever)   
  - RDMA/mlx4: Discard unknown SQP work requests (Leon Romanovsky)   
  - IB/hfi1: Fix user context tail allocation for DMA_RTAIL (Mike Marciniszyn)   
  - IB/hfi1: Optimize kthread pointer locking when queuing CQ entries (Sebastian Sanchez)   
  - IB/hfi1: Reorder incorrect send context disable (Michael J. Ruhl)   
  - IB/hfi1: Fix fault injection init/exit issues (Mike Marciniszyn)   
  - IB/isert: fix T10-pi check mask setting (Max Gurtovoy)   
  - IB/isert: Fix for lib/dma_debug check_sync warning (Alex Estrin)   
  - IB/mlx5: Fetch soft WQE's on fatal error state (Erez Shitrit)   
  - IB/core: Make testing MR flags for writability a static inline function (Jack Morgenstein)   
  - IB/mlx4: Mark user MR as writable if actual virtual memory is writable (Jack Morgenstein)   
  - IB/{hfi1, qib}: Add handling of kernel restart (Alex Estrin)   
  - IB/qib: Fix DMA api warning with debug kernel (Mike Marciniszyn)   
  - tpm: fix race condition in tpm_common_write() (Tadeusz Struk)   
  - tpm: fix use after free in tpm2_load_context() (Tadeusz Struk)   
  - of: platform: stop accessing invalid dev in of_platform_device_destroy (Srinivas Kandagatla)   
  - of: unittest: for strings, account for trailing - of: overlay: validate offset from property fixups (Frank Rowand)   
  - ARM64: dts: meson: disable sd-uhs modes on the libretech-cc (Jerome Brunet)   
  - arm64: mm: Ensure writes to swapper are ordered wrt subsequent cache maintenance (Will Deacon)   
  - arm64: kpti: Use early_param for kpti= command-line option (Will Deacon)   
  - arm64: Fix syscall restarting around signal suppressed by tracer (Dave Martin)   
  - ARM: dts: socfpga: Fix NAND controller node compatible for Arria10 (Dinh Nguyen)   
  - ARM: dts: socfpga: Fix NAND controller clock supply (Marek Vasut)   
  - ARM: dts: socfpga: Fix NAND controller node compatible (Marek Vasut)   
  - ARM: dts: Fix SPI node for Arria10 (Thor Thayer)   
  - ARM: 8764/1: kgdb: fix NUMREGBYTES so that gdb_regs[] is the correct size (David Rivshin)   
  - cxl: Disable prefault_mode in Radix mode (Vaibhav Jain)   
  - soc: rockchip: power-domain: Fix wrong value when power up pd with writemask (Finley Xiao)   
  - powerpc/fadump: Unregister fadump on kexec down path. (Mahesh Salgaonkar)   
  - cpuidle: powernv: Fix promotion from snooze if next state disabled (Gautham R. Shenoy)   
  - powerpc/powernv/cpuidle: Init all present cpus for deep states (Akshay Adiga)   
  - powerpc/powernv: copy/paste - Mask SO bit in CR (Haren Myneni)   
  - powerpc/powernv/ioda2: Remove redundant free of TCE pages (Alexey Kardashevskiy)   
  - powerpc/ptrace: Fix enforcement of DAWR constraints (Michael Neuling)   
  - powerpc/perf: Fix memory allocation for core-imc based on num_possible_cpus() (Anju T Sudhakar)   
  - powerpc/ptrace: Fix setting 512B aligned breakpoints with PTRACE_SET_DEBUGREG (Michael Neuling)   
  - powerpc/mm/hash: Add missing isync prior to kernel stack SLB switch (Aneesh Kumar K.V)   
  - fuse: fix control dir setup and teardown (Miklos Szeredi)   
  - fuse: don't keep dead fuse_conn at fuse_fill_super(). (Tetsuo Handa)   
  - fuse: atomic_o_trunc should truncate pagecache (Miklos Szeredi)   
  - fuse: fix congested state leak on aborted connections (Tejun Heo)   
  - printk: fix possible reuse of va_list variable (Tetsuo Handa)   
  - Bluetooth: hci_qca: Avoid missing rampatch failure with userspace fw loader (Amit Pundir)   
  - ipmi:bt: Set the timeout before doing a capabilities check (Corey Minyard)   
  - branch-check: fix long->int truncation when profiling branches (Mikulas Patocka)   
  - mips: ftrace: fix static function graph tracing (Matthias Schiffer)   
  - ftrace/selftest: Have the reset_trigger code be a bit more careful (Steven Rostedt (VMware))   
  - lib/vsprintf: Remove atomic-unsafe support for %pCr (Geert Uytterhoeven)   
  - clk: renesas: cpg-mssr: Stop using printk format %pCr (Geert Uytterhoeven)   
  - thermal: bcm2835: Stop using printk format %pCr (Geert Uytterhoeven)   
  - ASoC: cirrus: i2s: Fix {TX|RX}LinCtrlData setup (Alexander Sverdlin)   
  - ASoC: cirrus: i2s: Fix LRCLK configuration (Alexander Sverdlin)   
  - ASoC: cs35l35: Add use_single_rw to regmap config (Paul Handrigan)   
  - ASoC: dapm: delete dapm_kcontrol_data paths list before freeing it (Srinivas Kandagatla)   
  - 1wire: family module autoload fails because of upper/lower case mismatch. (Ingo Flaschberger)   
  - usb: do not reset if a low-speed or full-speed device timed out (Maxim Moseychuk)   
  - PM / OPP: Update voltage in case freq == old_freq (Waldemar Rymarkiewicz)   
  - PM / core: Fix supplier device runtime PM usage counter imbalance (Rafael J. Wysocki)   
  - PM / Domains: Fix error path during attach in genpd (Ulf Hansson)   
  - signal/xtensa: Consistenly use SIGBUS in do_unaligned_user (Eric W. Biederman)   
  - serial: sh-sci: Use spin_{try}lock_irqsave instead of open coding version (Daniel Wagner)   
  - m68k/mac: Fix SWIM memory resource end address (Finn Thain)   
  - m68k/mm: Adjust VM area to be unmapped by gap size for __iounmap() (Michael Schmitz)   
  - x86: Call fixup_exception() before notify_die() in math_error() (Siarhei Liakh)   
  - x86/mce: Do not overwrite MCi_STATUS in mce_no_way_out() (Borislav Petkov)   
  - x86/mce: Fix incorrect "Machine check from unknown source" message (Tony Luck)   
  - x86/mce: Check for alternate indication of machine check recovery on Skylake (Tony Luck)   
  - x86/mce: Improve error message when kernel cannot recover (Tony Luck)   
  - x86/xen: Add call of speculative_store_bypass_ht_init() to PV paths (Juergen Gross)   
  - x86/spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Dan Williams)   
  - Linux 4.14.52 (Greg Kroah-Hartman)   
  - mm, page_alloc: do not break __GFP_THISNODE by zonelist reset (Vlastimil Babka)   
  - fs/binfmt_misc.c: do not allow offset overflow (Thadeu Lima de Souza Cascardo)   
  - vhost: fix info leak due to uninitialized memory (Michael S. Tsirkin)   {CVE-2018-1118} 
  - HID: wacom: Correct logical maximum Y for 2nd-gen Intuos Pro large (Jason Gerecke)   
  - HID: intel_ish-hid: ipc: register more pm callbacks to support hibernation (Even Xu)   
  - orangefs: report attributes_mask and attributes for statx (Martin Brandenburg)   
  - orangefs: set i_size on new symlink (Martin Brandenburg)   
  - iwlwifi: fw: harden page loading code (Luca Coelho)   
  - x86/intel_rdt: Enable CMT and MBM on new Skylake stepping (Tony Luck)   
  - w1: mxc_w1: Enable clock before calling clk_get_rate() on it (Stefan Potyra)   
  - libata: Drop SanDisk SD7UB3Q*G1001 NOLPM quirk (Hans de Goede)   
  - libata: zpodd: small read overflow in eject_tray() (Dan Carpenter)   
  - cpufreq: governors: Fix long idle detection logic in load calculation (Chen Yu)   
  - cpufreq: Fix new policy initialization during limits updates via sysfs (Tao Wang)   
  - bdi: Move cgroup bdi_writeback to a dedicated low concurrency workqueue (Tejun Heo)   
  - blk-mq: reinit q->tag_set_list entry only after grace period (Roman Pen)   
  - nbd: use bd_set_size when updating disk size (Josef Bacik)   
  - nbd: update size when connected (Josef Bacik)   
  - nbd: fix nbd device deletion (Josef Bacik)   
  - cifs: For SMB2 security informaion query, check for minimum sized security descriptor instead of sizeof FileAllInformation class (Shirish Pargaonkar)   
  - CIFS: 511c54a2f69195b28afb9dd119f03787b1625bb4 adds a check for session expiry (Mark Syms)   
  - smb3: on reconnect set PreviousSessionId field (Steve French)   
  - smb3: fix various xid leaks (Steve French)   
  - x86/MCE: Fix stack out-of-bounds write in mce-inject.c: Flags_read() (Tony Luck)   
  - ALSA: hda: add dock and led support for HP ProBook 640 G4 (Dennis Wassenberg)   
  - ALSA: hda: add dock and led support for HP EliteBook 830 G5 (Dennis Wassenberg)   
  - ALSA: hda - Handle kzalloc() failure in snd_hda_attach_pcm_stream() (Bo Chen)   
  - ALSA: hda/conexant - Add fixup for HP Z2 G4 workstation (Takashi Iwai)   
  - ALSA: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Hui Wang)   
  - btrfs: scrub: Don't use inode pages for device replace (Qu Wenruo)   
  - btrfs: return error value if create_io_em failed in cow_file_range (Su Yue)   
  - Btrfs: fix memory and mount leak in btrfs_ioctl_rm_dev_v2() (Omar Sandoval)   
  - Btrfs: fix clone vs chattr NODATASUM race (Omar Sandoval)   
  - driver core: Don't ignore class_dir_create_and_add() failure. (Tetsuo Handa)   
  - ext4: fix fencepost error in check for inode count overflow during resize (Jan Kara)   
  - ext4: correctly handle a zero-length xattr with a non-zero e_value_offs (Theodore Ts'o)   {CVE-2018-10840} 
  - ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget() (Theodore Ts'o)   {CVE-2018-11412} 
  - ext4: do not allow external inodes for inline data (Theodore Ts'o)   {CVE-2018-11412} 
  - ext4: update mtime in ext4_punch_hole even if no blocks are released (Lukas Czerner)   
  - ext4: fix hole length detection in ext4_ind_map_blocks() (Jan Kara)   
  - NFSv4.1: Fix up replays of interrupted requests (Trond Myklebust)   
  - tls: fix use-after-free in tls_push_record (Daniel Borkmann)   
  - hv_netvsc: Fix a network regression after ifdown/ifup (Dexuan Cui)   
  - net: in virtio_net_hdr only add VLAN_HLEN to csum_start if payload holds vlan (Willem de Bruijn)   
  - udp: fix rx queue len reported by diag and proc interface (Paolo Abeni)   
  - socket: close race condition between sock_close() and sockfs_setattr() (Cong Wang)   
  - tcp: verify the checksum of the first data segment in a new connection (Frank van der Linden)   
  - net/sched: act_simple: fix parsing of TCA_DEF_DATA (Davide Caratti)   
  - net: dsa: add error handling for pskb_trim_rcsum (Zhouyang Jia)   
  - ipv6: allow PMTU exceptions to local routes (Julian Anastasov)   
  - cdc_ncm: avoid padding beyond end of skb (Bjørn Mork)   
  - bonding: re-evaluate force_primary when the primary slave name changes (Xiangning Yu)   
  - Linux 4.14.51 (Greg Kroah-Hartman)   
  - tcp: do not overshoot window_clamp in tcp_rcv_space_adjust() (Eric Dumazet)   
  - Btrfs: make raid6 rebuild retry more (Liu Bo)   
  - Btrfs: fix scrub to repair raid6 corruption (Liu Bo)   
  - Revert "Btrfs: fix scrub to repair raid6 corruption" (Sasha Levin)   
  - ARM: kexec: fix kdump register saving on panic() (Russell King)   
  - ARM: 8758/1: decompressor: restore r1 and r2 just before jumping to the kernel (Łukasz Stelmach)   
  - ARM: 8753/1: decompressor: add a missing parameter to the addruart macro (Łukasz Stelmach)   
  - efi/libstub/arm64: Handle randomized TEXT_OFFSET (Mark Rutland)   
  - parisc: Move setup_profiling_timer() out of init section (Helge Deller)   
  - sched/deadline: Make the grub_reclaim() function static (Mathieu Malaterre)   
  - sched/debug: Move the print_rt_rq() and print_dl_rq() declarations to kernel/sched/sched.h (Mathieu Malaterre)   
  - drm/dumb-buffers: Integer overflow in drm_mode_create_ioctl() (Dan Carpenter)   
  - locking/percpu-rwsem: Annotate rwsem ownership transfer by setting RWSEM_OWNER_UNKNOWN (Waiman Long)   
  - locking/rwsem: Add a new RWSEM_ANONYMOUSLY_OWNED flag (Waiman Long)   
  - clk: imx6ull: use OSC clock during AXI rate change (Stefan Agner)   
  - ARM: davinci: board-dm646x-evm: set VPIF capture card name (Sekhar Nori)   
  - ARM: davinci: board-dm646x-evm: pass correct I2C adapter id for VPIF (Sekhar Nori)   
  - ARM: davinci: dm646x: fix timer interrupt generation (Sekhar Nori)   
  - i2c: viperboard: return message count on master_xfer success (Peter Rosin)   
  - i2c: pmcmsp: fix error return from master_xfer (Peter Rosin)   
  - i2c: pmcmsp: return message count on master_xfer success (Peter Rosin)   
  - ARM: keystone: fix platform_domain_notifier array overrun (Russell King)   
  - usb: musb: fix remote wakeup racing with suspend (Daniel Glöckner)   
  - afs: Fix the non-encryption of calls (David Howells)   
  - mtd: Fix comparison in map_word_andequal() (Ben Hutchings)   
  - x86/pkeys/selftests: Add a test for pkey 0 (Dave Hansen)   
  - x86/pkeys/selftests: Save off 'prot' for allocations (Dave Hansen)   
  - x86/pkeys/selftests: Fix pointer math (Dave Hansen)   
  - x86/pkeys/selftests: Fix pkey exhaustion test off-by-one (Dave Hansen)   
  - x86/pkeys/selftests: Add PROT_EXEC test (Dave Hansen)   
  - x86/pkeys/selftests: Factor out "instruction page" (Dave Hansen)   
  - x86/pkeys/selftests: Allow faults on unknown keys (Dave Hansen)   
  - x86/pkeys/selftests: Remove dead debugging code, fix dprint_in_signal (Dave Hansen)   
  - x86/pkeys/selftests: Stop using assert() (Dave Hansen)   
  - x86/pkeys/selftests: Give better unexpected fault error messages (Dave Hansen)   
  - x86/selftests: Add mov_to_ss test (Andy Lutomirski)   
  - x86/mpx/selftests: Adjust the self-test to fresh distros that export the MPX ABI (Ingo Molnar)   
  - x86/pkeys/selftests: Adjust the self-test to fresh distros that export the pkeys ABI (Ingo Molnar)   
  - objtool, kprobes/x86: Sync the latest <asm/insn.h> header with tools/objtool/arch/x86/include/asm/insn.h (Ingo Molnar)   
  - uprobes/x86: Prohibit probing on MOV SS instruction (Masami Hiramatsu)   
  - kprobes/x86: Prohibit probing on exception masking instructions (Masami Hiramatsu)   
  - ocfs2: take inode cluster lock before moving reflinked inode from orphan dir (Ashish Samant)   
  - proc/kcore: don't bounds check against address 0 (Laura Abbott)   
  - init: fix false positives in W+X checking (Jeffrey Hugo)   
  - net sched actions: fix invalid pointer dereferencing if skbedit flags missing (Roman Mashak)   
  - ixgbe: return error on unsupported SFP module when resetting (Emil Tantilov)   
  - x86: Delay skip of emulated hypercall instruction (Marian Rotariu)   
  - KVM: Extend MAX_IRQ_ROUTES to 4096 for all archs (Wanpeng Li)   
  - rxrpc: Fix the min security level for kernel calls (David Howells)   
  - rxrpc: Fix error reception on AF_INET6 sockets (David Howells)   
  - qede: Fix gfp flags sent to rdma event node allocation (Michal Kalderon)   
  - qed: Fix l2 initializations over iWARP personality (Michal Kalderon)   
  - tipc: eliminate KMSAN uninit-value in strcmp complaint (Ying Xue)   
  - agp: uninorth: make two functions static (Mathieu Malaterre)   
  - cifs: smb2ops: Fix listxattr() when there are no EAs (Paulo Alcantara)   
  - arm64: Add MIDR encoding for NVIDIA CPUs (David Gilhooley)   
  - can: dev: increase bus-off message severity (Jakob Unterwurzacher)   
  - net: aquantia: driver should correctly declare vlan_features bits (Igor Russkikh)   
  - x86/xen: Reset VCPU0 info pointer after shared_info remap (van der Linden, Frank)   
  - mac80211: use timeout from the AddBA response instead of the request (Sara Sharon)   
  - ARM: dts: cygnus: fix irq type for arm global timer (Clément Péron)   
  - driver core: add __printf verification to __ata_ehi_pushv_desc (Mathieu Malaterre)   
  - drm/omap: handle alloc failures in omap_connector (Tomi Valkeinen)   
  - drm/omap: check return value from soc_device_match (Tomi Valkeinen)   
  - drm/omap: fix possible NULL ref issue in tiler_reserve_2d (Tomi Valkeinen)   
  - drm/omap: fix uninitialized ret variable (Tomi Valkeinen)   
  - drm/omap: silence unititialized variable warning (Dan Carpenter)   
  - mac80211: Adjust SAE authentication timeout (Ilan Peer)   
  - tee: check shm references are consistent in offset/size (Etienne Carriere)   
  - sh: fix build failure for J2 cpu with SMP disabled (Rich Felker)   
  - sched/core: Introduce set_special_state() (Peter Zijlstra)   
  - spi: bcm2835aux: ensure interrupts are enabled for shared handler (Rob Herring)   
  - RDMA/cma: Do not query GID during QP state transition to RTR (Parav Pandit)   
  - IB/hfi1: Fix memory leak in exception path in get_irq_affinity() (Sebastian Sanchez)   
  - IB/hfi1 Use correct type for num_user_context (Michael J. Ruhl)   
  - smc: fix sendpage() call (Stefan Raspl)   
  - ARM: OMAP1: ams-delta: fix deferred_fiq handler (Janusz Krzysztofik)   
  - nvme: Set integrity flag for user passthrough commands (Keith Busch)   
  - nvme: fix potential memory leak in option parsing (Chengguang Xu)   
  - iommu/vt-d: fix shift-out-of-bounds in bug checking (Changbin Du)   
  - arm64: tegra: Make BCM89610 PHY interrupt as active low (Bhadram Varka)   
  - kthread, sched/wait: Fix kthread_parkme() wait-loop (Peter Zijlstra)   
  - stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Peter Zijlstra)   
  - parisc: drivers.c: Fix section mismatches (Helge Deller)   
  - bpf, x64: fix memleak when not converging after image (Daniel Borkmann)   
  - scsi: vmw-pvscsi: return DID_BUS_BUSY for adapter-initated aborts (Jim Gill)   
  - hexagon: export csum_partial_copy_nocheck (Arnd Bergmann)   
  - hexagon: add memset_io() helper (Arnd Bergmann)   
  - Input: atmel_mxt_ts - fix the firmware update (Nick Dyer)   
  - ARM: dts: logicpd-som-lv: Fix Audio Mute (Adam Ford)   
  - ARM: dts: logicpd-som-lv: Fix WL127x Startup Issues (Adam Ford)   
  - ARM: OMAP2+: powerdomain: use raw_smp_processor_id() for trace (Tero Kristo)   
  - dt-bindings: panel: lvds: Fix path to display timing bindings (Geert Uytterhoeven)   
  - ARM: davinci: board-dm355-evm: fix broken networking (Sekhar Nori)   
  - ARM: davinci: board-omapl138-hawk: fix GPIO numbers for MMC/SD lookup (Sekhar Nori)   
  - ARM: davinci: board-da850-evm: fix GPIO lookup for MMC/SD (Sekhar Nori)   
  - ARM: davinci: board-da830-evm: fix GPIO lookup for MMC/SD (Sekhar Nori)   
  - IB/core: Make ib_mad_client_id atomic (Håkon Bugge)   
  - <linux/stringhash.h>: fix end_name_hash() for 64bit long (Amir Goldstein)   
  - IB/rxe: avoid double kfree_skb (Zhu Yanjun)   
  - IB/rxe: add RXE_START_MASK for rxe_opcode IB_OPCODE_RC_SEND_ONLY_INV (Jianchao Wang)   
  - RDMA/iwpm: fix memory leak on map_info (Colin Ian King)   
  - RDMA/cma: Fix use after destroy access to net namespace for IPoIB (Parav Pandit)   
  - IB/uverbs: Fix validating mandatory attributes (Matan Barak)   
  - IB: make INFINIBAND_ADDR_TRANS configurable (Greg Thelen)   
  - ib_srp: depend on INFINIBAND_ADDR_TRANS (Greg Thelen)   
  - ib_srpt: depend on INFINIBAND_ADDR_TRANS (Greg Thelen)   
  - nvmet-rdma: depend on INFINIBAND_ADDR_TRANS (Greg Thelen)   
  - nvme: depend on INFINIBAND_ADDR_TRANS (Greg Thelen)   
  - tipc: fix bug in function tipc_nl_node_dump_monitor (Jon Maloy)   
  - i2c: sprd: Fix the i2c count issue (Baolin Wang)   
  - i2c: sprd: Prevent i2c accesses after suspend is called (Baolin Wang)   
  - bpf: fix uninitialized variable in bpf tools (John Fastabend)   
  - x86/cpu/intel: Add missing TLB cpuid values (jacek.tomaka@poczta.fm)   
  - ata: ahci: mvebu: override ahci_stop_engine for mvebu AHCI (Evan Wang)   
  - libahci: Allow drivers to override stop_engine (Evan Wang)   
  - KVM: arm/arm64: vgic: fix possible spectre-v1 in vgic_mmio_read_apr() (Mark Rutland)   
  - arm64: fix possible spectre-v1 in ptrace_hbp_get_event() (Mark Rutland)   
  - blk-mq: fix sysfs inflight counter (Omar Sandoval)   
  - HID: intel-ish-hid: use put_device() instead of kfree() (Arvind Yadav)   
  - rpmsg: added MODULE_ALIAS for rpmsg_char (Ramon Fried)   
  - remoteproc: qcom: Fix potential device node leaks (Tobias Jordan)   
  - perf/x86/intel: Don't enable freeze-on-smi for PerfMon V1 (Kan Liang)   
  - rds: ib: Fix missing call to rds_ib_dev_put in rds_ib_setup_qp (Dag Moxnes)   
  - selftests: ftrace: Add a testcase for multiple actions on trigger (Masami Hiramatsu)   
  - HID: wacom: Release device resource data obtained by devres_alloc() (Arvind Yadav)   
  - HID: lenovo: Add support for IBM/Lenovo Scrollpoint mice (pgzh)   
  - arm64: ptrace: remove addr_limit manipulation (Mark Rutland)   
  - net: ethtool: Add missing kernel doc for FEC parameters (Florian Fainelli)   
  - thermal: int3403_thermal: Fix NULL pointer deref on module load / probe (Hans de Goede)   
  - drm/amdkfd: fix clock counter retrieval for node without GPU (Andres Rodriguez)   
  - ACPI / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (Mika Westerberg)   
  - ARM: dts: da850: fix W=1 warnings with pinmux node (Sekhar Nori)   
  - net: phy: marvell: clear wol event before setting it (Jingju Hou)   
  - powerpc/powernv/memtrace: Let the arch hotunplug code flush cache (Balbir Singh)   
  - dt-bindings: meson-uart: DT fix s/clocks-names/clock-names/ (Geert Uytterhoeven)   
  - ACPI / PM: Blacklist Low Power S0 Idle _DSM for ThinkPad X1 Tablet(2016) (Chen Yu)   
  - usb: typec: ucsi: fix tracepoint related build error (Tobias Regnery)   
  - mm: memcg: add __GFP_NOWARN in __memcg_schedule_kmem_cache_create() (Minchan Kim)   
  - kexec_file: do not add extra alignment to efi memmap (Dave Young)   
  - proc: revalidate kernel thread inodes to root:root (Alexey Dobriyan)   
  - mm, pagemap: fix swap offset value for PMD migration entry (Huang Ying)   
  - scsi: isci: Fix infinite loop in while loop (Colin Ian King)   
  - scsi: storvsc: Set up correct queue depth values for IDE devices (Long Li)   
  - parisc: time: Convert read_persistent_clock() to read_persistent_clock64() (Baolin Wang)   
  - vfs: Undo an overly zealous MS_RDONLY -> SB_RDONLY conversion (David Howells)   
  - net: hns: Avoid action name truncation (dann frazier)   
  - blkcg: init root blkcg_gq under lock (Jiang Biao)   
  - drm/msm: don't deref error pointer in the msm_fbdev_create error path (Emil Velikov)   
  - drm/msm/dsi: use correct enum in dsi_get_cmd_fmt (Stefan Agner)   
  - drm/msm: Fix possible null dereference on failure of get_pages() (Ben Hutchings)   
  - ASoC: msm8916-wcd-analog: use threaded context for mbhc events (Srinivas Kandagatla)   
  - netfilter: nf_tables: fix out-of-bounds in nft_chain_commit_update (Taehee Yoo)   
  - netfilter: nf_tables: NAT chain and extensions require NF_TABLES (Pablo Neira Ayuso)   
  - scsi: target: fix crash with iscsi target and dvd (Ming Lei)   
  - scsi: megaraid_sas: Do not log an error if FW successfully initializes. (Vinson Lee)   
  - scsi: iscsi: respond to netlink with unicast when appropriate (Chris Leech)   
  - tipc: fix infinite loop when dumping link monitor summary (Tung Nguyen)   
  - blkcg: don't hold blkcg lock when deactivating policy (Jiang Biao)   
  - spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo() (sxauwsk)   
  - ASoC: topology: Check widget kcontrols before deref. (Liam Girdwood)   
  - xen: xenbus_dev_frontend: Really return response string (Simon Gaiser)   
  - ASoC: topology: Fix bugs of freeing soc topology (Yan Wang)   
  - PCI: kirin: Fix reset gpio name (Loic Poulain)   
  - soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure (Geert Uytterhoeven)   
  - soc: bcm: raspberrypi-power: Fix use of __packed (Florian Fainelli)   
  - eCryptfs: don't pass up plaintext names when using filename encryption (Tyler Hicks)   
  - ASoC: rt5514: Add the missing register in the readable table (oder_chiou@realtek.com)   
  - clk: honor CLK_MUX_ROUND_CLOSEST in generic clk mux (Jerome Brunet)   
  - dt-bindings: dmaengine: rcar-dmac: document R8A77965 support (Jacopo Mondi)   
  - dt-bindings: serial: sh-sci: Add support for r8a77965 (H)SCIF (Jacopo Mondi)   
  - dt-bindings: pinctrl: sunxi: Fix reference to driver (Matheus Castello)   
  - doc: Add vendor prefix for Kieback & Peter GmbH (Lukasz Majewski)   
  - spi: sh-msiof: Fix bit field overflow writes to TSCR/RSCR (Vladimir Zapolskiy)   
  - MIPS: dts: Boston: Fix PCI bus dtc warnings: (Matt Redfearn)   
  - isofs: fix potential memory leak in mount option parsing (Chengguang Xu)   
  - s390/smsgiucv: disable SMSG on module unload (Martin Schwidefsky)   
  - MIPS: io: Add barrier after register read in readX() (Sinan Kaya)   
  - fsnotify: fix ignore mask logic in send_to_group() (Amir Goldstein)   
  - perf report: Fix switching to another perf.data file (Arnaldo Carvalho de Melo)   
  - nfp: ignore signals when communicating with management FW (Jakub Kicinski)   
  - MIPS: io: Prevent compiler reordering writeX() (Sinan Kaya)   
  - x86: Add check for APIC access address for vmentry of L2 guests (Krish Sadhukhan)   
  - KVM: X86: fix incorrect reference of trace_kvm_pi_irte_update (hu huajun)   
  - Input: synaptics-rmi4 - fix an unchecked out of memory error path (Christophe JAILLET)   
  - clocksource/drivers/imx-tpm: Correct some registers operation flow (Anson Huang)


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1828.el7uek]
changelog:
  - aarch64: fix device mapper multipathing (Eric Saint-Etienne)  [Orabug: 27893211]  
  - x86/speculation: Implement per-cpu IBRS control (Alexandre Chartre)  [Orabug: 28064033]  
  - uek-rpm: config-debug: Turn off torture testing by default (Knut Omang)  [Orabug: 27746166]  
  - dtrace: added runtime option DTRACEOPT_NORESOLVE (Vincent Lim)  [Orabug: 28142974]  
  - uio_hv_generic: fix subchannel ring mmap (Stephen Hemminger)  [Orabug: 27824321]  
  - uio_hv_generic: use correct channel in isr (Stephen Hemminger)  [Orabug: 27824321]  
  - uio_hv_generic: make ring buffer attribute for primary channel (Stephen Hemminger)  [Orabug: 27824321]  
  - uio_hv_generic: set size of ring buffer attribute (Stephen Hemminger)  [Orabug: 27824321]  
  - uio_hv_generic: support sub-channels (Stephen Hemminger)  [Orabug: 27824321]  
  - hv_netvsc: Clean up extra parameter from rndis_filter_receive_data() (Haiyang Zhang)  [Orabug: 27824321]  
  - hv: add SPDX license id to Kconfig (Stephen Hemminger)  [Orabug: 27824321]  
  - hv: add SPDX license to trace (Stephen Hemminger)  [Orabug: 27824321]  
  - Drivers: hv: vmbus: respect what we get from hv_get_synint_state() (Dexuan Cui)  [Orabug: 27824321]  
  - drivers/net: Use octal not symbolic permissions (Joe Perches)  [Orabug: 27824321]  
  - hv_netvsc: Add range checking for rx packet offset and length (Haiyang Zhang)  [Orabug: 27824321]  
  - hv_netvsc: Fix the return status in RX path (Haiyang Zhang)  [Orabug: 27824321]  
  - hv_netvsc: add trace points (Stephen Hemminger)  [Orabug: 27824321]  
  - hv_netvsc: pass netvsc_device to rndis halt (Stephen Hemminger)  [Orabug: 27824321]  
  - PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Dexuan Cui)  [Orabug: 27824321]  
  - PCI: hv: Remove the bogus test in hv_eject_device_work() (Dexuan Cui)  [Orabug: 27824321]  
  - PCI: hv: Fix a comment typo in _hv_pcifront_read_config() (Dexuan Cui)  [Orabug: 27824321]  
  - Drivers: hv: vmbus: Implement Direct Mode for stimer0 (Michael Kelley)  [Orabug: 27824321]  
  - hv_vmbus: Correct the stale comments regarding cpu affinity (Haiyang Zhang)  [Orabug: 27824321]  
  - tools: hv: include string.h in hv_fcopy_daemon (Olaf Hering)  [Orabug: 27824321]  
  - tools: hv: fix compiler warnings about major/target_fname (Dexuan Cui)  [Orabug: 27824321]  
  - hv: Synthetic typo correction (Joe Perches)  [Orabug: 27824321]  
  - virtio-net: Fix operstate for virtio when no VIRTIO_NET_F_STATUS (Jay Vosburgh)  [Orabug: 27824321]  
  - x86/xen: Remove use of VLAs (Laura Abbott)  [Orabug: 27824321]  
  - x86/xen: Reset VCPU0 info pointer after shared_info remap (van der Linden, Frank)  [Orabug: 27824321]  
  - signal: Introduce clear_siginfo (Eric W. Biederman)  [Orabug: 27824321]  
  - arm64: capabilities: Update prototype for enable call back (Dave Martin)  [Orabug: 27824321]  
  - signal/arm64: Document conflicts with SI_USER and SIGFPE,SIGTRAP,SIGBUS (Eric W. Biederman)  [Orabug: 27824321]  
  - arm64: fault: avoid send SIGBUS two times (Dongjiu Geng)  [Orabug: 27824321]  
  - arm64: Pass user fault info to arm64_notify_die instead of printing it (Will Deacon)  [Orabug: 27824321]  
  - arm64: Don't walk page table for user faults in do_mem_abort (Will Deacon)  [Orabug: 27824321]  
  - arm64: consistently log ESR and page table (Mark Rutland)  [Orabug: 27824321]  
  - arm64: Update fault_info table with new exception types (Julien Thierry)  [Orabug: 27824321]  
  - arm64: mm: Remove useless and wrong comments from fault.c (Will Deacon)  [Orabug: 27824321]  
  - KVM: x86: fix #UD address of failed Hyper-V hypercalls (Radim Krčmář)  [Orabug: 27824321]  
  - x86: Delay skip of emulated hypercall instruction (Marian Rotariu)  [Orabug: 27824321]  
  - kvm: x86: IA32_ARCH_CAPABILITIES is always supported (Jim Mattson)  [Orabug: 27824321]  
  - KVM: x86: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang)  [Orabug: 27824321]  
  - x86/kvm: fix LAPIC timer drift when guest uses periodic mode (David Vrabel)  [Orabug: 27824321]  
  - virtio-net: fix leaking page for gso packet during mergeable XDP (Jason Wang)  [Orabug: 27824321]  
  - virtio-net: correctly check num_buf during err path (Jason Wang)  [Orabug: 27824321]  
  - virtio-net: correctly transmit XDP buff after linearizing (Jason Wang)  [Orabug: 27824321]  
  - kvm: rename KVM_HINTS_DEDICATED to KVM_HINTS_REALTIME (Michael S. Tsirkin)  [Orabug: 27824321]  
  - KVM: x86: Fix pv tlb flush dependencies (Wanpeng Li)  [Orabug: 27824321]  
  - KVM: s390: vsie: fix < 8k check for the itdba (David Hildenbrand)  [Orabug: 27824321]  
  - KVM: PPC: Book 3S HV: Do ptesync in radix guest exit path (Paul Mackerras)  [Orabug: 27824321]  
  - KVM: PPC: Book3S HV: XIVE: Resend re-routed interrupts on CPU priority change (Benjamin Herrenschmidt)  [Orabug: 27824321]  
  - KVM: PPC: Book3S HV: Make radix clear pte when unmapping (Nicholas Piggin)  [Orabug: 27824321]  
  - KVM: PPC: Book3S HV: Snapshot timebase offset on guest entry (Paul Mackerras)  [Orabug: 27824321]  
  - KVM: arm/arm64: VGIC/ITS: Promote irq_lock() in update_affinity (Andre Przywara)  [Orabug: 27824321]  
  - KVM: arm/arm64: Properly protect VGIC locks from IRQs (Andre Przywara)  [Orabug: 27824321]  
  - KVM: X86: Lower the default timer frequency limit to 200us (Wanpeng Li)  [Orabug: 27824321]  
  - KVM: Fix spelling mistake: "cop_unsuable" -> "cop_unusable" (Colin Ian King)  [Orabug: 27824321]  
  - KVM: vmx: update sec exec controls for UMIP iff emulating UMIP (Sean Christopherson)  [Orabug: 27824321]  
  - kvm: x86: Suppress CR3_PCID_INVD bit only when PCIDs are enabled (Junaid Shahid)  [Orabug: 27824321]  
  - KVM: selftests: exit with 0 status code when tests cannot be run (Paolo Bonzini)  [Orabug: 27824321]  
  - KVM: hyperv: idr_find needs RCU protection (Paolo Bonzini)  [Orabug: 27824321]  
  - KVM: Extend MAX_IRQ_ROUTES to 4096 for all archs (Wanpeng Li)  [Orabug: 27824321]  
  - tools headers kvm: Sync ARM UAPI headers with the kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 27824321]  
  - tools headers kvm: Sync uapi/linux/kvm.h with the kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 27824321]  
  - KVM: arm/arm64: vgic_init: Cleanup reference to process_maintenance (Valentin Schneider)  [Orabug: 27824321]  
  - KVM: arm64: Fix order of vcpu_write_sys_reg() arguments (James Morse)  [Orabug: 27824321]  
  - KVM: arm/arm64: vgic: Fix source vcpu issues for GICv2 SGI (Marc Zyngier)  [Orabug: 27824321]  
  - powerpc/kvm/booke: Fix altivec related build break (Laurentiu Tudor)  [Orabug: 27824321]  
  - x86/boot: Make the x86_init noop functions static (Juergen Gross)  [Orabug: 27824321]  
  - x86/xen: Add pvh specific rsdp address retrieval function (Juergen Gross)  [Orabug: 27824321]  
  - x86/acpi: Add a new x86_init_acpi structure to x86_init_ops (Juergen Gross)  [Orabug: 27824321]  
  - acpi: Introduce acpi_arch_get_root_pointer() for getting rsdp address (Juergen Gross)  [Orabug: 27824321]  
  - xen-netback: make function xenvif_rx_skb static (Colin Ian King)  [Orabug: 27824321]  
  - xen: xenbus: Catch closing of non existent transactions (Simon Gaiser)  [Orabug: 27824321]  
  - xen: xenbus_dev_frontend: Verify body of XS_TRANSACTION_END (Simon Gaiser)  [Orabug: 27824321]  
  - xen/acpi: off by one in read_acpi_id() (Dan Carpenter)  [Orabug: 27824321]  
  - xen/pvh: Indicate XENFEAT_linux_rsdp_unrestricted to Xen (Boris Ostrovsky)  [Orabug: 27824321]  
  - xen, mm: allow deferred page initialization for xen pv domains (Pavel Tatashin)  [Orabug: 27824321]  
  - xen: xen-pciback: Replace GFP_ATOMIC with GFP_KERNEL in pcistub_probe (Jia-Ju Bai)  [Orabug: 27824321]  
  - xen: xen-pciback: Replace GFP_ATOMIC with GFP_KERNEL in pcistub_init_device (Jia-Ju Bai)  [Orabug: 27824321]  
  - xen: xen-pciback: Replace GFP_ATOMIC with GFP_KERNEL in pcistub_device_alloc (Jia-Ju Bai)  [Orabug: 27824321]  
  - xen: xen-pciback: Replace GFP_ATOMIC with GFP_KERNEL in xen_pcibk_config_quirks_init (Jia-Ju Bai)  [Orabug: 27824321]  
  - xen: xen-pciback: Replace GFP_ATOMIC with GFP_KERNEL in pcistub_reg_add (Jia-Ju Bai)  [Orabug: 27824321]  
  - xen/sndif: Sync up with the canonical definition in Xen (Oleksandr Andrushchenko)  [Orabug: 27824321]  
  - xen: xenbus_dev_frontend: Really return response string (Simon Gaiser)  [Orabug: 27824321]  
  - powerpc/kvm: Fix lockups when running KVM guests on Power8 (Michael Ellerman)  [Orabug: 27824321]  
  - kvm: selftests: add vmx_tsc_adjust_test (Paolo Bonzini)  [Orabug: 27824321]  
  - kvm: x86: move MSR_IA32_TSC handling to x86.c (Paolo Bonzini)  [Orabug: 27824321]  
  - X86/KVM: Properly update 'tsc_offset' to represent the running guest (KarimAllah Ahmed)  [Orabug: 27824321]  
  - kvm: selftests: add -std=gnu99 cflags (Peng Hao)  [Orabug: 27824321]  
  - KVM: X86: fix incorrect reference of trace_kvm_pi_irte_update (hu huajun)  [Orabug: 27824321]  
  - X86/KVM: Do not allow DISABLE_EXITS_MWAIT when LAPIC ARAT is not available (KarimAllah Ahmed)  [Orabug: 27824321]  
  - kvm: selftests: fix spelling mistake: "divisable" and "divisible" (Colin Ian King)  [Orabug: 27824321]  
  - X86/VMX: Disable VMX preemption timer if MWAIT is not intercepted (KarimAllah Ahmed)  [Orabug: 27824321]  
  - kvm: x86: fix a prototype warning (Peng Hao)  [Orabug: 27824321]  
  - kvm: selftests: add sync_regs_test (Paolo Bonzini)  [Orabug: 27824321]  
  - kvm: selftests: add API testing infrastructure (Paolo Bonzini)  [Orabug: 27824321]  
  - kvm: x86: fix a compile warning (Peng Hao)  [Orabug: 27824321]  
  - KVM: X86: Add Force Emulation Prefix for "emulate the next instruction" (Wanpeng Li)  [Orabug: 27824321]  
  - KVM: X86: Introduce handle_ud() (Wanpeng Li)  [Orabug: 27824321]  
  - KVM: vmx: unify adjacent #ifdefs (Paolo Bonzini)  [Orabug: 27824321]  
  - x86: kvm: hide the unused 'cpu' variable (Arnd Bergmann)  [Orabug: 27824321]  
  - KVM: VMX: remove bogus WARN_ON in handle_ept_misconfig (Sean Christopherson)  [Orabug: 27824321]  
  - kvm: Add emulation for movups/movupd (Stefan Fritsch)  [Orabug: 27824321]  
  - KVM: VMX: raise internal error for exception during invalid protected mode state (Sean Christopherson)  [Orabug: 27824321]  
  - powerpc/64s/idle: avoid sync for KVM state when waking from idle (Nicholas Piggin)  [Orabug: 27824321]  
  - powerpc/kvm: Fix guest boot failure on Power9 since DAWR changes (Aneesh Kumar K.V)  [Orabug: 27824321]  
  - KVM: nVMX: Optimization: Dont set KVM_REQ_EVENT when VMExit with nested_run_pending (Liran Alon)  [Orabug: 27824321]  
  - KVM: nVMX: Require immediate-exit when event reinjected to L2 and L1 event pending (Liran Alon)  [Orabug: 27824321]  
  - KVM: x86: Fix misleading comments on handling pending exceptions (Liran Alon)  [Orabug: 27824321]  
  - KVM: x86: Rename interrupt.pending to interrupt.injected (Liran Alon)  [Orabug: 27824321]  
  - KVM: VMX: No need to clear pending NMI/interrupt on inject realmode interrupt (Liran Alon)  [Orabug: 27824321]  
  - x86/kvm: use Enlightened VMCS when running on Hyper-V (Vitaly Kuznetsov)  [Orabug: 27824321]  
  - x86/hyper-v: detect nested features (Vitaly Kuznetsov)  [Orabug: 27824321]  
  - x86/hyper-v: define struct hv_enlightened_vmcs and clean field bits (Vitaly Kuznetsov)  [Orabug: 27824321]  
  - x86/hyper-v: allocate and use Virtual Processor Assist Pages (Vitaly Kuznetsov)  [Orabug: 27824321]  
  - x86/kvm: rename HV_X64_MSR_APIC_ASSIST_PAGE to HV_X64_MSR_VP_ASSIST_PAGE (Ladi Prosek)  [Orabug: 27824321]  
  - x86/hyper-v: move definitions from TLFS to hyperv-tlfs.h (Vitaly Kuznetsov)  [Orabug: 27824321]  
  - x86/hyper-v: move hyperv.h out of uapi (Vitaly Kuznetsov)  [Orabug: 27824321]  
  - KVM: trivial documentation cleanups (Andrew Jones)  [Orabug: 27824321]  
  - KVM: X86: Fix setup the virt_spin_lock_key before static key get initialized (Wanpeng Li)  [Orabug: 27824321]  
  - tools/kvm_stat: Remove unused function (Cole Robinson)  [Orabug: 27824321]  
  - tools/kvm_stat: Don't use deprecated file() (Cole Robinson)  [Orabug: 27824321]  
  - tools/kvm_stat: Fix python3 syntax (Cole Robinson)  [Orabug: 27824321]  
  - KVM: SVM: Implement pause loop exit logic in SVM (Babu Moger)  [Orabug: 27824321]  
  - KVM: SVM: Add pause filter threshold (Babu Moger)  [Orabug: 27824321]  
  - KVM: VMX: Bring the common code to header file (Babu Moger)  [Orabug: 27824321]  
  - KVM: VMX: Remove ple_window_actual_max (Babu Moger)  [Orabug: 27824321]  
  - KVM: VMX: Fix the module parameters for vmx (Babu Moger)  [Orabug: 27824321]  
  - KVM: x86: Fix perf timer mode IP reporting (Andi Kleen)  [Orabug: 27824321]  
  - KVM: PPC: Book3S HV: Handle migration with POWER9 disabled DAWR (Michael Neuling)  [Orabug: 27824321]  
  - KVM: PPC: Book3S HV: Return error from h_set_dabr() on POWER9 (Michael Neuling)  [Orabug: 27824321]  
  - KVM: PPC: Book3S HV: Return error from h_set_mode(SET_DAWR) on POWER9 (Michael Neuling)  [Orabug: 27824321]  
  - Documentation: admin-guide: add kvmconfig, xenconfig and tinyconfig commands (Martin Kepplinger)  [Orabug: 27824321]  
  - KVM: arm/arm64: vgic: Disallow Active+Pending for level interrupts (Marc Zyngier)  [Orabug: 27824321]  
  - kvm: x86: hyperv: delete dead code in kvm_hv_hypercall() (Dan Carpenter)  [Orabug: 27824321]  
  - KVM: SVM: add struct kvm_svm to hold SVM specific KVM vars (Sean Christopherson)  [Orabug: 27824321]  
  - KVM: VMX: add struct kvm_vmx to hold VMX specific KVM vars (Sean Christopherson)  [Orabug: 27824321]  
  - KVM: x86: move setting of ept_identity_map_addr to vmx.c (Sean Christopherson)  [Orabug: 27824321]  
  - KVM: x86: define SVM/VMX specific kvm_arch_[alloc|free]_vm (Sean Christopherson)  [Orabug: 27824321]  
  - powerpc: add POWER9_DD20 feature (Nicholas Piggin)  [Orabug: 27824321]  
  - KVM: nVMX: fix vmentry failure code when L2 state would require emulation (Paolo Bonzini)  [Orabug: 27824321]  
  - KVM: nVMX: Do not load EOI-exitmap while running L2 (Liran Alon)  [Orabug: 27824321]  
  - KVM: arm/arm64: Get rid of vgic_elrsr (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Prepare to handle deferred save/restore of 32-bit registers (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Defer saving/restoring 64-bit sysregs to vcpu load/put on VHE (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Prepare to handle deferred save/restore of ELR_EL1 (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm/arm64: Prepare to handle deferred save/restore of SPSR_EL1 (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Introduce framework for accessing deferred sysregs (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Rewrite system register accessors to read/write functions (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Change 32-bit handling of VM system registers (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Don't save the host ELR_EL2 and SPSR_EL2 on VHE systems (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Unify non-VHE host/guest sysreg save and restore functions (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm/arm64: Remove leftover comment from kvm_vcpu_run_vhe (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Introduce separate VHE/non-VHE sysreg save/restore functions (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Rewrite sysreg alternatives to static keys (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Move userspace system registers into separate function (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Remove noop calls to timer save/restore from VHE switch (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Don't deactivate VM on VHE systems (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Remove kern_hyp_va() use in VHE switch function (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Introduce VHE-specific kvm_vcpu_run (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Factor out fault info population and gic workarounds (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Improve debug register save/restore flow (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Slightly improve debug save/restore functions (Christoffer Dall)  [Orabug: 27824321]  
  - arm64: sysreg: Move SPE registers and PSB into common header files (Will Deacon)  [Orabug: 27824321]  
  - KVM: arm64: Move debug dirty flag calculation out of world switch (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm/arm64: Add kvm_vcpu_load_sysregs and kvm_vcpu_put_sysregs (Liam Merwick)  [Orabug: 27824321]  
  - KVM: arm64: Rework hyp_panic for VHE and non-VHE (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm64: Avoid storing the vcpu pointer on the stack (Christoffer Dall)  [Orabug: 27824321]  
  - KVM: arm/arm64: Move vcpu_load call after kvm_vcpu_first_run_init (Christoffer Dall)  [Orabug: 27824321]  
  - x86/kvm/vmx: avoid expensive rdmsr for MSR_GS_BASE (Vitaly Kuznetsov)  [Orabug: 27824321]  
  - x86/kvm/vmx: read MSR_{FS,KERNEL_GS}_BASE from current->thread (Vitaly Kuznetsov)  [Orabug: 27824321]  
  - KVM: X86: Provide a capability to disable PAUSE intercepts (Wanpeng Li)  [Orabug: 27824321]  
  - KVM: X86: Provide a capability to disable HLT intercepts (Wanpeng Li)  [Orabug: 27824321]  
  - KVM: X86: Provide a capability to disable MWAIT intercepts (Wanpeng Li)  [Orabug: 27824321]  
  - KVM: x86: Add support for VMware backdoor Pseudo-PMCs (Arbel Moshe)  [Orabug: 27824321]  
  - KVM: x86: SVM: Intercept #GP to support access to VMware backdoor ports (Liran Alon)  [Orabug: 27824321]  
  - KVM: x86: VMX: Intercept #GP to support access to VMware backdoor ports (Liran Alon)  [Orabug: 27824321]  
  - KVM: x86: Emulate only IN/OUT instructions when accessing VMware backdoor (Liran Alon)  [Orabug: 27824321]  
  - KVM: x86: Add emulation_type to not raise #UD on emulation failure (Liran Alon)  [Orabug: 27824321]  
  - KVM: x86: Always allow access to VMware backdoor I/O ports (Liran Alon)  [Orabug: 27824321]  
  - KVM: x86: Add module parameter for supporting VMware backdoor (Liran Alon)  [Orabug: 27824321]  
  - KVM: x86: add kvm_fast_pio() to consolidate fast PIO code (Sean Christopherson)  [Orabug: 27824321]  
  - KVM: VMX: use kvm_fast_pio_in for handling IN I/O (Sean Christopherson)  [Orabug: 27824321]  
  - KVM: vVMX: signal failure for nested VMEntry if emulation_required (Sean Christopherson)  [Orabug: 27824321]  
  - KVM: VMX: WARN on a MOV CR3 exit w/ unrestricted guest (Sean Christopherson)  [Orabug: 27824321]  
  - KVM: VMX: give unrestricted guest full control of CR3 (Sean Christopherson)  [Orabug: 27824321]  
  - KVM: VMX: don't force CR4.PAE/PSE for unrestricted guest (Sean Christopherson)  [Orabug: 27824321]  
  - KVM: VMX: remove CR0.WP from ..._ALWAYS_ON_UNRESTRICTED_GUEST (Sean Christopherson)  [Orabug: 27824321]  
  - KVM: VMX: don't configure EPT identity map for unrestricted guest (Sean Christopherson)  [Orabug: 27824321]  
  - KVM: VMX: don't configure RM TSS for unrestricted guest (Sean Christopherson)  [Orabug: 27824321]  
  - x86/kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov)  [Orabug: 27824321]  
  - x86/kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov)  [Orabug: 27824321]  
  - x86/kvm/hyper-v: add reenlightenment MSRs support (Vitaly Kuznetsov)  [Orabug: 27824321]  
  - KVM: x86: Update the exit_qualification access bits while walking an address (KarimAllah Ahmed)  [Orabug: 27824321]  
  - KVM: x86: Make enum conversion explicit in kvm_pdptr_read() (Matthias Kaehlcke)  [Orabug: 27824321]  
  - KVM: x86: Add support for AMD Core Perf Extension in guest (Janakarajan Natarajan)  [Orabug: 27824321]  
  - x86/msr: Add AMD Core Perf Extension MSRs (Janakarajan Natarajan)  [Orabug: 27824321]  
  - KVM: s390: fix fallthrough annotation (Sebastian Ott)  [Orabug: 27824321]  
  - KVM: s390: add exit io request stats and simplify code (Christian Borntraeger)  [Orabug: 27824321]  
  - KVM: s390: Refactor host cmma and pfmfi interpretation controls (Janosch Frank)  [Orabug: 27824321]  
  - KVM: s390: implement CPU model only facilities (Christian Borntraeger)  [Orabug: 27824321]  
  - perf test: Fix test case 23 for s390 z/VM or KVM guests (Thomas Richter)  [Orabug: 27824321]  
  - KVM: document KVM_CAP_S390_[BPB|PSW|GMAP|COW] (Christian Borntraeger)  [Orabug: 27824321]  
  - KVM: nVMX: Enforce NMI controls on vmentry of L2 guests (Krish Sadhukhan)  [Orabug: 27824321]  
  - KVM: nVMX: expose VMX capabilities for nested hypervisors to userspace (Paolo Bonzini)  [Orabug: 27824321]  
  - hyper-v: use GFP_KERNEL for hv_context.hv_numa_map (Jia-Ju Bai)  [Orabug: 27824321]  
  - tools/hv: Fix IP reporting by KVP daemon with SRIOV (Haiyang Zhang)  [Orabug: 27824321]  
  - KVM: nVMX: introduce struct nested_vmx_msrs (Paolo Bonzini)  [Orabug: 27824321]  
  - KVM: X86: Don't use PV TLB flush with dedicated physical CPUs (Wanpeng Li)  [Orabug: 27824321]  
  - KVM: X86: Choose qspinlock when dedicated physical CPUs are available (Wanpeng Li)  [Orabug: 27824321]  
  - KVM: Introduce paravirtualization hints and KVM_HINTS_DEDICATED (Wanpeng Li)  [Orabug: 27824321]  
  - kvm: use insert sort in kvm_io_bus_register_dev function (Gal Hammer)  [Orabug: 27824321]  
  - KVM: x86: KVM_CAP_SYNC_REGS (Ken Hofsass)  [Orabug: 27824321]  
  - KVM: x86: add SYNC_REGS_SIZE_BYTES #define. (Ken Hofsass)  [Orabug: 27824321]  
  - kvm: x86: hyperv: guest->host event signaling via eventfd (Roman Kagan)  [Orabug: 27824321]  
  - kvm: x86: factor out kvm.arch.hyperv (de)init (Roman Kagan)  [Orabug: 27824321]  
  - KVM: arm/arm64: No need to zero CNTVOFF in kvm_timer_vcpu_put() for VHE (Shanker Donthineni)  [Orabug: 27824321]  
  - KVM: arm: Enable emulation of the physical timer (Jérémy Fanguède)  [Orabug: 27824321]  
  - KVM: arm64: Enable the EL1 physical timer for AArch32 guests (Jérémy Fanguède)  [Orabug: 27824321]  
  - KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Jose Ricardo Ziviani)  [Orabug: 27824321]  
  - virtio_balloon: export hugetlb page allocation counts (Jonathan Helman)  [Orabug: 27824321]  
  - fw_cfg: write vmcoreinfo details (Marc-André Lureau)  [Orabug: 27824321]  
  - crash: export paddr_vmcoreinfo_note() (Marc-André Lureau)  [Orabug: 27824321]  
  - fw_cfg: add DMA register (Marc-André Lureau)  [Orabug: 27824321]  
  - fw_cfg: add a public uapi header (Marc-André Lureau)  [Orabug: 27824321]  
  - fw_cfg: handle fw_cfg_read_blob() error (Marc-André Lureau)  [Orabug: 27824321]  
  - fw_cfg: remove inline from fw_cfg_read_blob() (Marc-André Lureau)  [Orabug: 27824321]  
  - fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-André Lureau)  [Orabug: 27824321]  
  - fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-André Lureau)  [Orabug: 27824321]  
  - fw_cfg: fix sparse warnings with fw_cfg_file (Marc-André Lureau)  [Orabug: 27824321]  
  - fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-André Lureau)  [Orabug: 27824321]  
  - ptr_ring: fix build (Michael S. Tsirkin)  [Orabug: 27824321]  
  - ptr_ring: fix up after recent ptr_ring changes (Michael S. Tsirkin)  [Orabug: 27824321]  
  - fw_cfg: fix driver remove (Marc-André Lureau)  [Orabug: 27824321]  
  - firmware: Use PTR_ERR_OR_ZERO() (Vasyl Gomonovych)  [Orabug: 27824321]  
  - fw_cfg: fix the command line module name (Marc-André Lureau)  [Orabug: 27824321]  
  - ctf: propagate bitfield overrides down to the base type properly (Nick Alcock)  [Orabug: 28089689]  
  - ctf: get the bit-offset right for all structure members (Nick Alcock)  [Orabug: 28285229]  
  - ctf: avoid command line length limits (Nick Alcock)  [Orabug: 28285260]  
  - dtrace: cpu option does not work (Tomas Jedlicka)  [Orabug: 28008342]  
  - Linux 4.14.50 (Greg Kroah-Hartman)   
  - crypto: omap-sham - fix memleak (Bin Liu)   
  - crypto: vmx - Remove overly verbose printk from AES XTS init (Michael Ellerman)   
  - crypto: vmx - Remove overly verbose printk from AES init routines (Michael Ellerman)   
  - crypto: cavium - Limit result reading attempts (Jan Glauber)   
  - crypto: cavium - Fix fallout from CONFIG_VMAP_STACK (Jan Glauber)   
  - crypto: caam - fix size of RSA prime factor q (Horia Geantă)   
  - crypto: caam/qi - fix IV DMA mapping and updating (Horia Geantă)   
  - crypto: caam - fix IV DMA mapping and updating (Horia Geantă)   
  - crypto: caam - fix DMA mapping dir for generated IV (Horia Geantă)   
  - crypto: caam - strip input zeros from RSA input buffer (Horia Geantă)   
  - Input: elan_i2c - add ELAN0612 (Lenovo v330 14IKB) ACPI ID (Johannes Wienke)   
  - Input: goodix - add new ACPI id for GPD Win 2 touch screen (Ethan Lee)   
  - kvm: x86: use correct privilege level for sgdt/sidt/fxsave/fxrstor access (Paolo Bonzini)   {CVE-2018-10853} 
  - tty: pl011: Avoid spuriously stuck-off interrupts (Dave Martin)   
  - vmw_balloon: fixing double free when batching mode is off (Gil Kupfer)   
  - serial: 8250: omap: Fix idling of clocks for unused uarts (Tony Lindgren)   
  - serial: samsung: fix maxburst parameter for DMA transactions (Marek Szyprowski)   
  - tty/serial: atmel: use port->name as name in request_irq() (Sebastian Andrzej Siewior)   
  - serial: sh-sci: Stop using printk format %pCr (Geert Uytterhoeven)   
  - usb: gadget: udc: renesas_usb3: disable the controller's irqs for reconnecting (Yoshihiro Shimoda)   
  - usb: gadget: function: printer: avoid wrong list handling in printer_write() (Yoshihiro Shimoda)   
  - phy: qcom-qusb2: Fix crash if nvmem cell not specified (Manu Gautam)   
  - Input: xpad - add GPD Win 2 Controller USB IDs (Ethan Lee)   
  - usb-storage: Add compatibility quirk flags for G-Technologies G-Drive (Alexander Kappner)   
  - usb-storage: Add support for FL_ALWAYS_SYNC flag in the UAS driver (Alexander Kappner)   
  - usbip: vhci_sysfs: fix potential Spectre v1 (Gustavo A. R. Silva)   
  - NFC: pn533: don't send USB data off of the stack (Greg Kroah-Hartman)   
  - staging: android: ion: Switch to pr_warn_once in ion_buffer_destroy (Laura Abbott)   
  - KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and kvm_write_guest_virt_system (Paolo Bonzini)   
  - kvm: nVMX: Enforce cpl=0 for VMX instructions (Felix Wilhelm)   
  - KVM: x86: introduce linear_{read,write}_system (Paolo Bonzini)   
  - KVM: X86: Fix reserved bits check for MOV to CR3 (Wanpeng Li)   
  - gpio: No NULL owner (Linus Walleij)   
  - af_key: Always verify length of provided sadb_key (Kevin Easton)   
  - blkdev_report_zones_ioctl(): Use vmalloc() to allocate large buffers (Bart Van Assche)   
  - netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump() (Taehee Yoo)   
  - Linux 4.14.49 (Greg Kroah-Hartman)   
  - drm: set FMODE_UNSIGNED_OFFSET for drm files (Dave Airlie)   
  - PCI: hv: Do not wait forever on a device that has disappeared (Dexuan Cui)   
  - cls_flower: Fix incorrect idr release when failing to modify rule (Paul Blakey)   
  - rtnetlink: validate attributes in do_setlink() (Eric Dumazet)   
  - virtio-net: fix leaking page for gso packet during mergeable XDP (Jason Wang)   
  - net/mlx5e: When RXFCS is set, add FCS data into checksum calculation (Eran Ben Elisha)   
  - virtio-net: correctly check num_buf during err path (Jason Wang)   
  - tun: Fix NULL pointer dereference in XDP redirect (Toshiaki Makita)   
  - net/mlx4: Fix irq-unsafe spinlock usage (Jack Morgenstein)   
  - virtio-net: correctly transmit XDP buff after linearizing (Jason Wang)   
  - net-sysfs: Fix memory leak in XPS configuration (Alexander Duyck)   
  - net: phy: broadcom: Fix auxiliary control register reads (Florian Fainelli)   
  - ipv6: sr: fix memory OOB access in seg6_do_srh_encap/inline (Mathieu Xhonneux)   
  - vrf: check the original netdevice for generating redirect (Stephen Suryaputra)   
  - vhost: synchronize IOTLB message with dev cleanup (Jason Wang)   
  - team: use netdev_features_t instead of u32 (Dan Carpenter)   
  - sctp: not allow transport timeout value less than HZ/5 for hb_timer (Xin Long)   
  - qed: Fix mask for physical address in ILT entry (Shahed Shaikh)   
  - packet: fix reserve calculation (Willem de Bruijn)   
  - net: usb: cdc_mbim: add flag FLAG_SEND_ZLP (Daniele Palmas)   
  - net: phy: broadcom: Fix bcm_write_exp() (Florian Fainelli)   
  - net/packet: refine check for priv area size (Eric Dumazet)   
  - net: metrics: add proper netlink validation (Eric Dumazet)   
  - net: ipv4: add missing RTA_TABLE to rtm_ipv4_policy (Roopa Prabhu)   
  - netdev-FAQ: clarify DaveM's position for stable backports (Cong Wang)   
  - kcm: Fix use-after-free caused by clonned sockets (Kirill Tkhai)   
  - isdn: eicon: fix a missing-check bug (Wenwen Wang)   
  - ipv6: omit traffic class when calculating flow hash (Michal Kubecek)   
  - ipv4: remove warning in ip_recv_error (Willem de Bruijn)   
  - ipmr: properly check rhltable_init() return value (Eric Dumazet)   
  - ip6_tunnel: remove magic mtu value 0xFFF8 (Nicolas Dichtel)   
  - ip6mr: only set ip6mr_table from setsockopt when ip6mr_new_table succeeds (Sabrina Dubroca)   
  - enic: set DMA mask to 47 bit (Govindarajulu Varadarajan)   
  - dccp: don't free ccid2_hc_tx_sock struct in dccp_disconnect() (Alexey Kodanev)   
  - bnx2x: use the right constant (Julia Lawall)   
  - be2net: Fix error detection logic for BE3 (Suresh Reddy)   
  - kconfig: Avoid format overflow warning from GCC 8.1 (Nathan Chancellor)   
  - btrfs: define SUPER_FLAG_METADUMP_V2 (Anand Jain)   
  - mmap: relax file size limit for regular files (Linus Torvalds)   
  - mmap: introduce sane default mmap limits (Linus Torvalds)   
  - scsi: sd_zbc: Avoid that resetting a zone fails sporadically (Bart Van Assche)   
  - scsi: sd_zbc: Fix potential memory leak (Damien Le Moal)   
  - Linux 4.14.48 (Greg Kroah-Hartman)   
  - powerpc/mm/slice: Fix hugepage allocation at hint address on 8xx (Christophe Leroy)   
  - powerpc/mm/slice: Enhance for supporting PPC32 (Christophe Leroy)   
  - powerpc/mm/slice: create header files dedicated to slices (Christophe Leroy)   
  - powerpc/mm/slice: Remove intermediate bitmap copy (Christophe Leroy)   
  - drm/i915: Disable LVDS on Radiant P845 (Ondrej Zary)   
  - drm/i915/lvds: Move acpi lid notification registration to registration phase (Chris Wilson)   
  - drm/psr: Fix missed entry in PSR setup time table. (Dhinakaran Pandiyan)   
  - intel_th: Use correct device when freeing buffers (Alexander Shishkin)   
  - Revert "rt2800: use TXOP_BACKOFF for probe frames" (Stanislaw Gruszka)   
  - mm/huge_memory.c: __split_huge_page() use atomic ClearPageDirty() (Hugh Dickins)   
  - IB/core: Fix error code for invalid GID entry (Parav Pandit)   
  - hwtracing: stm: fix build error on some arches (Greg Kroah-Hartman)   
  - stm class: Use vmalloc for the master map (Alexander Shishkin)   
  - scsi: scsi_transport_srp: Fix shost to rport translation (Bart Van Assche)   
  - MIPS: prctl: Disallow FRE without FR with PR_SET_FP_MODE requests (Maciej W. Rozycki)   
  - MIPS: ptrace: Fix PTRACE_PEEKUSR requests for 64-bit FGRs (Maciej W. Rozycki)   
  - MIPS: lantiq: gphy: Drop reboot/remove reset asserts (Mathias Kresin)   
  - iio: adc: select buffer for at91-sama5d2_adc (Eugen Hristev)   
  - iio:kfifo_buf: check for uint overflow (Martin Kelly)   
  - iio:buffer: make length types match kfifo types (Martin Kelly)   
  - iio: ad7793: implement IIO_CHAN_INFO_SAMP_FREQ (Michael Nosthoff)   
  - tcp: avoid integer overflows in tcp_rcv_space_adjust() (Eric Dumazet)   
  - kbuild: clang: disable unused variable warnings only when constant (Sodagudi Prasad)   
  - platform/chrome: cros_ec_lpc: remove redundant pointer request (Colin Ian King)   
  - ASoC: Intel: sst: remove redundant variable dma_dev_name (Colin Ian King)   
  - rtlwifi: rtl8192cu: Remove variable self-assignment in rf.c (Matthias Kaehlcke)   
  - drm/amd/powerplay: Fix enum mismatch (Matthias Kaehlcke)   
  - dma-buf: remove redundant initialization of sg_table (Colin Ian King)   
  - drm/i915: Always sanity check engine state upon idling (Chris Wilson)   
  - kbuild: clang: remove crufty HOSTCFLAGS (Nick Desaulniers)   
  - cfg80211: further limit wiphy names to 64 bytes (Eric Biggers)   
  - selinux: KASAN: slab-out-of-bounds in xattr_getsecurity (Sachin Grover)   
  - tracing: Make the snapshot trigger work with instances (Steven Rostedt (VMware))   
  - tracing: Fix crash when freeing instances with event triggers (Steven Rostedt (VMware))   
  - Input: elan_i2c_smbus - fix corrupted stack (Benjamin Tissoires)   
  - Input: synaptics - add Lenovo 80 series ids to SMBus (Benjamin Tissoires)   
  - Input: synaptics - add Intertouch support on X1 Carbon 6th and X280 (Aaron Ma)   
  - Input: synaptics - Lenovo Thinkpad X1 Carbon G5 (2017) with Elantech trackpoints should use RMI (Edvard Holst)   
  - Input: synaptics - Lenovo Carbon X1 Gen5 (2017) devices should use RMI (Dmitry Torokhov)   
  - xfs: detect agfl count corruption and reset agfl (Brian Foster)   
  - xfs: convert XFS_AGFL_SIZE to a helper function (Dave Chinner)   
  - PCI: hv: Fix 2 hang issues in hv_compose_msi_msg() (Dexuan Cui)   
  - Revert "pinctrl: msm: Use dynamic GPIO numbering" (Greg Kroah-Hartman)   
  - x86/MCE/AMD: Cache SMCA MISC block addresses (Borislav Petkov)   
  - x86/mce/AMD: Carve out SMCA get_block_address() code (Yazen Ghannam)   
  - objtool: Fix "noreturn" detection for recursive sibling calls (Josh Poimboeuf)   
  - objtool: Detect RIP-relative switch table references, part 2 (Josh Poimboeuf)   
  - objtool: Detect RIP-relative switch table references (Josh Poimboeuf)   
  - objtool: Support GCC 8 switch tables (Josh Poimboeuf)   
  - objtool: Support GCC 8's cold subfunctions (Josh Poimboeuf)   
  - mm: fix the NULL mapping case in __isolate_lru_page() (Hugh Dickins)   
  - fix io_destroy()/aio_complete() race (Al Viro)   
  - Linux 4.14.47 (Greg Kroah-Hartman)   
  - Revert "vti4: Don't override MTU passed on link creation via IFLA_MTU" (Greg Kroah-Hartman)   
  - Linux 4.14.46 (Greg Kroah-Hartman)   
  - Revert "perf record: Fix crash in pipe mode" (Greg Kroah-Hartman)   
  - tools: sync up .h files with the repective arch and uapi .h files (Greg Kroah-Hartman)   
  - perf tools: Add trace/beauty/generated/ into .gitignore (Ravi Bangoria)   
  - Linux 4.14.45 (Greg Kroah-Hartman)   
  - drm/vmwgfx: Set dmabuf_size when vmw_dmabuf_init is successful (Deepak Rawat)   
  - kdb: make "mdr" command repeat (Randy Dunlap)   
  - pinctrl: mcp23s08: spi: Fix regmap debugfs entries (Jan Kundrát)   
  - pinctrl: msm: Use dynamic GPIO numbering (Bjorn Andersson)   
  - regulator: of: Add a missing 'of_node_put()' in an error handling path of 'of_regulator_match()' (Christophe JAILLET)   
  - ARM: dts: porter: Fix HDMI output routing (Laurent Pinchart)   
  - ARM: dts: imx7d: cl-som-imx7: fix pinctrl_enet (Aapo Vienamo)   
  - i40e: Add delay after EMP reset for firmware to recover (Filip Sadowski)   
  - regmap: Correct comparison in regmap_cached (Charles Keepax)   
  - ARM: dts: at91: tse850: use the correct compatible for the eeprom (Peter Rosin)   
  - drm: rcar-du: lvds: Fix LVDS startup on R-Car Gen2 (Sergei Shtylyov)   
  - drm: rcar-du: lvds: Fix LVDS startup on R-Car Gen3 (Sergei Shtylyov)   
  - netlabel: If PF_INET6, check sk_buff ip header version (Richard Haines)   
  - selftests/net: fixes psock_fanout eBPF test case (Prashant Bhole)   
  - perf tests: Fix dwarf unwind for stripped binaries (Jiri Olsa)   
  - perf report: Fix memory corruption in --branch-history mode --branch-history (Jiri Olsa)   
  - perf tests: Use arch__compare_symbol_names to compare symbols (Jiri Olsa)   
  - perf report: Fix wrong jump arrow (Jin Yao)   
  - perf test: Fix test case inet_pton to accept inlines. (Thomas Richter)   
  - x86/apic: Set up through-local-APIC mode on the boot CPU if 'noapic' specified (Baoquan He)   
  - drm/rockchip: Respect page offset for PRIME mmap calls (Ørjan Eide)   
  - MIPS: Octeon: Fix logging messages with spurious periods after newlines (Joe Perches)   
  - dpaa_eth: fix pause capability advertisement logic (Jake Moroni)   
  - pinctrl: sh-pfc: r8a7796: Fix MOD_SEL register pin assignment for SSI pins group (Takeshi Kihara)   
  - rcu: Call touch_nmi_watchdog() while printing stall warnings (Tejun Heo)   
  - net: stmmac: call correct function in stmmac_mac_config_rx_queues_routing() (Niklas Cassel)   
  - audit: return on memory error to avoid null pointer dereference (Richard Guy Briggs)   
  - PCMCIA / PM: Avoid noirq suspend aborts during suspend-to-idle (Rafael J. Wysocki)   
  - ARM: dts: bcm283x: Fix pin function of JTAG pins (Henry Zhang)   
  - ARM: dts: bcm283x: Fix probing of bcm2835-i2s (Stefan Wahren)   
  - power: supply: ltc2941-battery-gauge: Fix temperature units (Ladislav Michl)   
  - sh_eth: fix TSU init on SH7734/R8A7740 (Sergei Shtylyov)   
  - ixgbe: prevent ptp_rx_hang from running when in FILTER_ALL mode (Jacob Keller)   
  - udf: Provide saner default for invalid uid / gid (Jan Kara)   
  - PCI: Add function 1 DMA alias quirk for Marvell 88SE9220 (Thomas Vincent-Cross)   
  - dpaa_eth: fix SG mapping (Madalin Bucur)   
  - cpufreq: Reorder cpufreq_online() error code path (Viresh Kumar)   
  - net: stmmac: ensure that the MSS desc is the last desc to set the own bit (Niklas Cassel)   
  - net: stmmac: ensure that the device has released ownership before reading data (Niklas Cassel)   
  - drm/amdgpu: adjust timeout for ib_ring_tests(v2) (Monk Liu)   
  - drm/amdgpu: disable GFX ring and disable PQ wptr in hw_fini (Monk Liu)   
  - ARM: dts: dra71-evm: Correct evm_sd regulator max voltage (Ravikumar Kattekola)   
  - drm: omapdrm: dss: Move initialization code from component bind to probe (Laurent Pinchart)   
  - dmaengine: qcom: bam_dma: get num-channels and num-ees from dt (Srinivas Kandagatla)   
  - vfio-ccw: fence off transport mode (Cornelia Huck)   
  - pinctrl: artpec6: dt: add missing pin group uart5nocts (Niklas Cassel)   
  - pinctrl: devicetree: Fix dt_to_map_one_config handling of hogs (Richard Fitzgerald)   
  - hwrng: stm32 - add reset during probe (lionel.debieve@st.com)   
  - watchdog: asm9260_wdt: fix error handling in asm9260_wdt_probe() (Alexey Khoroshilov)   
  - enic: enable rq before updating rq descriptors (Govindarajulu Varadarajan)   
  - dmaengine: rcar-dmac: Check the done lists in rcar_dmac_chan_get_residue() (Yoshihiro Shimoda)   
  - dmaengine: pl330: fix a race condition in case of threaded irqs (Qi Hou)   
  - block: null_blk: fix 'Invalid parameters' when loading module (Ming Lei)   
  - tools: hv: fix compiler warnings about major/target_fname (Dexuan Cui)   
  - drm/bridge: sii902x: Retry status read after DDI I2C (Linus Walleij)   
  - phy: qcom-qmp: Fix phy pipe clock gating (Vivek Gautam)   
  - ALSA: vmaster: Propagate slave error (Takashi Iwai)   
  - phy: rockchip-emmc: retry calpad busy trimming (Shawn Lin)   
  - x86/devicetree: Fix device IRQ settings in DT (Ivan Gorinov)   
  - x86/devicetree: Initialize device tree before using it (Ivan Gorinov)   
  - gfs2: Fix fallocate chunk size (Andreas Gruenbacher)   
  - soc: qcom: wcnss_ctrl: Fix increment in NV upload (Bjorn Andersson)   
  - arm64: dts: qcom: Fix SPI5 config on MSM8996 (Ilia Lin)   
  - perf/x86/intel: Fix event update for auto-reload (Kan Liang)   
  - perf/x86/intel: Fix large period handling on Broadwell CPUs (Kan Liang)   
  - efi/arm*: Only register page tables when they exist (Mark Rutland)   
  - cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi)   
  - perf/x86/intel: Properly save/restore the PMU state in the NMI handler (Kan Liang)   
  - hwmon: (pmbus/adm1275) Accept negative page register values (Guenter Roeck)   
  - hwmon: (pmbus/max8688) Accept negative page register values (Guenter Roeck)   
  - drm/panel: simple: Fix the bus format for the Ontat panel (Eric Anholt)   
  - perf/core: Fix perf_output_read_group() (Peter Zijlstra)   
  - max17042: propagate of_node to power supply device (Pierre Bourdon)   
  - perf/core: Fix installing cgroup events on CPU (leilei.lin)   
  - f2fs: fix to check extent cache in f2fs_drop_extent_tree (Chao Yu)   
  - f2fs: fix to clear CP_TRIMMED_FLAG (Chao Yu)   
  - f2fs: fix to set KEEP_SIZE bit in f2fs_zero_range (Chao Yu)   
  - cxl: Check if PSL data-cache is available before issue flush request (Vaibhav Jain)   
  - powerpc/powernv/npu: Fix deadlock in mmio_invalidate() (Alistair Popple)   
  - powerpc: Add missing prototype for arch_irq_work_raise() (Mathieu Malaterre)   
  - drm/meson: Fix an un-handled error path in 'meson_drv_bind_master()' (Christophe JAILLET)   
  - drm/meson: Fix some error handling paths in 'meson_drv_bind_master()' (Christophe JAILLET)   
  - ipmi_ssif: Fix kernel panic at msg_done_handler (Kamlakant Patel)   
  - watchdog: aspeed: Fix translation of reset mode to ctrl register (Milton Miller)   
  - watchdog: dw: RMW the control register (Brian Norris)   
  - PCI: Restore config space on runtime resume despite being unbound (Rafael J. Wysocki)   
  - MIPS: ath79: Fix AR724X_PLL_REG_PCIE_CONFIG offset (Mathias Kresin)   
  - net/smc: pay attention to MAX_ORDER for CQ entries (Ursula Braun)   
  - spi: bcm-qspi: fIX some error handling paths (Christophe Jaillet)   
  - regulator: gpio: Fix some error handling paths in 'gpio_regulator_probe()' (Christophe Jaillet)   
  - coresight: Use %px to print pcsr instead of %p (Leo Yan)   
  - drm/amdkfd: add missing include of mm.h (Oded Gabbay)   
  - IB/core: Honor port_num while resolving GID for IB link layer (Parav Pandit)   
  - perf stat: Fix core dump when flag T is used (Thomas Richter)   
  - perf top: Fix top.call-graph config option reading (Yisheng Xie)   
  - KVM: lapic: stop advertising DIRECTED_EOI when in-kernel IOAPIC is in use (Vitaly Kuznetsov)   
  - i2c: mv64xxx: Apply errata delay only in standard mode (Gregory CLEMENT)   
  - cxgb4: Fix queue free path of ULD drivers (Arjun Vynipadath)   
  - ACPICA: acpi: acpica: fix acpi operand cache leak in nseval.c (Seunghun Han)   
  - ACPICA: Fix memory leak on unusual memory leak (Bob Moore)   
  - ACPICA: Events: add a return on failure from acpi_hw_register_read (Erik Schmauss)   
  - dt-bindings: add device tree binding for Allwinner H6 main CCU (Icenowy Zheng)   
  - remoteproc: imx_rproc: Fix an error handling path in 'imx_rproc_probe()' (Christophe JAILLET)   
  - bcache: quit dc->writeback_thread when BCACHE_DEV_DETACHING is set (Coly Li)   
  - zorro: Set up z->dev.dma_mask for the DMA API (Michael Schmitz)   
  - IB/mlx5: Set the default active rate and width to QDR and 4X (Honggang Li)   
  - cpufreq: cppc_cpufreq: Fix cppc_cpufreq_init() failure path (Chunyu Hu)   
  - iommu/mediatek: Fix protect memory setting (Yong Wu)   
  - drm/vmwgfx: Unpin the screen object backup buffer when not used (Thomas Hellstrom)   
  - ext4: don't complain about incorrect features when probing (Eric Sandeen)   
  - arm: dts: socfpga: fix GIC PPI warning (Philipp Puschmann)   
  - virtio-net: Fix operstate for virtio when no VIRTIO_NET_F_STATUS (Jay Vosburgh)   
  - watchdog: aspeed: Allow configuring for alternate boot (Milton Miller)   
  - ima: Fallback to the builtin hash algorithm (Petr Vorel)   
  - ima: Fix Kconfig to select TPM 2.0 CRB interface (Jiandi An)   
  - cxgb4: Setup FW queues before registering netdev (Arjun Vynipadath)   
  - ath9k: fix crash in spectral scan (Sebastian Gottschall)   
  - nvme-pci: disable APST for Samsung NVMe SSD 960 EVO + ASUS PRIME Z370-A (Jarosław Janik)   
  - ath10k: Fix kernel panic while using worker (ath10k_sta_rc_update_wk) (Karthikeyan Periyasamy)   
  - watchdog: davinci_wdt: fix error handling in davinci_wdt_probe() (Alexey Khoroshilov)   
  - net/mlx5: Protect from command bit overflow (Leon Romanovsky)   
  - selftests: Print the test we're running to /dev/kmsg (Michael Ellerman)   
  - tools/thermal: tmon: fix for segfault (Frank Asseg)   
  - rsi: fix kernel panic observed on 64bit machine (Amitkumar Karwar)   
  - powerpc/perf: Fix kernel address leak via sampling registers (Michael Ellerman)   
  - powerpc/perf: Prevent kernel address leak to userspace via BHRB buffer (Madhavan Srinivasan)   
  - hwmon: (nct6775) Fix writing pwmX_mode (Guenter Roeck)   
  - parisc/pci: Switch LBA PCI bus from Hard Fail to Soft Fail mode (Helge Deller)   
  - iwlwifi: mvm: check if mac80211_queue is valid in iwl_mvm_disable_txq (Luca Coelho)   
  - m68k: set dma and coherent masks for platform FEC ethernets (Greg Ungerer)   
  - intel_th: Use correct method of finding hub (Alexander Shishkin)   
  - iommu/amd: Take into account that alloc_dev_data() may return NULL (Sebastian Andrzej Siewior)   
  - ath10k: advertize beacon_int_min_gcd (Anilkumar Kolli)   
  - ieee802154: ca8210: fix uninitialised data read (Harry Morris)   
  - powerpc/mpic: Check if cpu_possible() in mpic_physmask() (Michael Ellerman)   
  - ACPI: acpi_pad: Fix memory leak in power saving threads (Lenny Szubowicz)   
  - drivers: macintosh: rack-meter: really fix bogus memsets (Aaro Koskinen)   
  - xen/acpi: off by one in read_acpi_id() (Dan Carpenter)   
  - rxrpc: Don't treat call aborts as conn aborts (David Howells)   
  - rxrpc: Fix Tx ring annotation after initial Tx failure (David Howells)   
  - btrfs: qgroup: Fix root item corruption when multiple same source snapshots are created with quota enabled (Qu Wenruo)   
  - btrfs: fix lockdep splat in btrfs_alloc_subvolume_writers (Jeff Mahoney)   
  - Btrfs: fix copy_items() return value when logging an inode (Filipe Manana)   
  - btrfs: tests/qgroup: Fix wrong tree backref level (Qu Wenruo)   
  - powerpc/64s: sreset panic if there is no debugger or crash dump handlers (Nicholas Piggin)   
  - net: bgmac: Correctly annotate register space (Florian Fainelli)   
  - net: bgmac: Fix endian access in bgmac_dma_tx_ring_free() (Florian Fainelli)   
  - sparc64: Make atomic_xchg() an inline function rather than a macro. (David S. Miller)   
  - fscache: Fix hanging wait on page discarded by writeback (David Howells)   
  - lan78xx: Connect phy early (Alexander Graf)   
  - KVM: VMX: raise internal error for exception during invalid protected mode state (Sean Christopherson)   
  - x86/mm: Fix bogus warning during EFI bootup, use boot_cpu_has() instead of this_cpu_has() in build_cr3_noflush() (Sai Praneeth)   
  - sched/rt: Fix rq->clock_update_flags < RQCF_ACT_SKIP warning (Davidlohr Bueso)   
  - powerpc/64s/idle: Fix restore of AMOR on POWER9 after deep sleep (Nicholas Piggin)   
  - ocfs2/dlm: don't handle migrate lockres if already in shutdown (Jun Piao)   
  - IB/rxe: Fix for oops in rxe_register_device on ppc64le arch (Mikhail Malygin)   
  - btrfs: Fix possible softlock on single core machines (Nikolay Borisov)   
  - Btrfs: fix NULL pointer dereference in log_dir_items (Liu Bo)   
  - Btrfs: bail out on error during replay_dir_deletes (Liu Bo)   
  - mm: thp: fix potential clearing to referenced flag in page_idle_clear_pte_refs_one() (Yang Shi)   
  - mm: fix races between address_space dereference and free in page_evicatable (Huang Ying)   
  - mm/ksm: fix interaction with THP (Claudio Imbrenda)   
  - ibmvnic: Zero used TX descriptor counter on reset (Thomas Falcon)   
  - dp83640: Ensure against premature access to PHY registers after reset (Esben Haabendal)   
  - perf clang: Add support for recent clang versions (Sandipan Das)   
  - perf tools: Fix perf builds with clang support (Sandipan Das)   
  - powerpc/fscr: Enable interrupts earlier before calling get_user() (Anshuman Khandual)   
  - cpufreq: CPPC: Initialize shared perf capabilities of CPUs (Shunyong Yang)   
  - Force log to disk before reading the AGF during a fstrim (Carlos Maiolino)   
  - sr: get/drop reference to device in revalidate and check_events (Jens Axboe)   
  - z3fold: fix memory leak (Xidong Wang)   
  - swap: divide-by-zero when zero length swap file on ssd (Tom Abraham)   
  - fs/proc/proc_sysctl.c: fix potential page fault while unregistering sysctl table (Danilo Krummrich)   
  - x86/mm: Do not forbid _PAGE_RW before init for __ro_after_init (Dave Hansen)   
  - x86/pgtable: Don't set huge PUD/PMD on non-leaf entries (Joerg Roedel)   
  - Btrfs: fix loss of prealloc extents past i_size after fsync log replay (Filipe Manana)   
  - Btrfs: clean up resources during umount after trans is aborted (Liu Bo)   
  - nvme: don't send keep-alives to the discovery controller (Johannes Thumshirn)   
  - firmware: dmi_scan: Fix UUID length safety check (Jean Delvare)   
  - sh: fix debug trap failure to process signals before return to user (Rich Felker)   
  - net: mvneta: fix enable of all initialized RXQs (Yelena Krivosheev)   
  - vlan: Fix vlan insertion for packets without ethernet header (Toshiaki Makita)   
  - net: Fix untag for vlan packets without ethernet header (Toshiaki Makita)   
  - qede: Do not drop rx-checksum invalidated packets. (Manish Chopra)   
  - hv_netvsc: enable multicast if necessary (Stephen Hemminger)   
  - mm/kmemleak.c: wait for scan completion before disabling free (Vinayak Menon)   
  - mm/vmstat.c: fix vmstat_update() preemption BUG (Steven J. Hill)   
  - mm/page_owner: fix recursion bug after changing skip entries (Maninder Singh)   
  - mm, slab: memcg_link the SLAB's kmem_cache (Shakeel Butt)   
  - qede: Fix barrier usage after tx doorbell write. (Manish Chopra)   
  - builddeb: Fix header package regarding dtc source links (Jan Kiszka)   
  - llc: properly handle dev_queue_xmit() return value (Cong Wang)   
  - x86/alternatives: Fixup alternative_call_2 (Alexey Dobriyan)   
  - perf/x86/intel: Fix linear IP of PEBS real_ip on Haswell and later CPUs (Stephane Eranian)   
  - net/mlx5: Make eswitch support to depend on switchdev (Or Gerlitz)   
  - net: dsa: mt7530: fix module autoloading for OF platform drivers (Sean Wang)   
  - bonding: fix the err path for dev hwaddr sync in bond_enslave (Xin Long)   
  - net: qmi_wwan: add BroadMobi BM806U 2020:2033 (Pawel Dembicki)   
  - lan78xx: Set ASD in MAC_CR when EEE is enabled. (Raghuram Chary J)   
  - ARM: 8748/1: mm: Define vdso_start, vdso_end as array (Jinbum Park)   
  - batman-adv: fix packet loss for broadcasted DHCP packets to a server (Linus Lüssing)   
  - batman-adv: fix multicast-via-unicast transmission with AP isolation (Linus Lüssing)   
  - drm/amdkfd: Fix scratch memory with HWS enabled (Felix Kuehling)   
  - selftests: ftrace: Add a testcase for probepoint (Masami Hiramatsu)   
  - selftests: ftrace: Add a testcase for string type with kprobe_event (Masami Hiramatsu)   
  - selftests: ftrace: Add probe event argument syntax testcase (Masami Hiramatsu)   
  - xfrm: Fix transport mode skb control buffer usage. (Steffen Klassert)   
  - mm, thp: do not cause memcg oom for thp (David Rientjes)   
  - mm/mempolicy.c: avoid use uninitialized preferred_node (Yisheng Xie)   
  - drm/ast: Fixed 1280x800 Display Issue (Y.C. Chen)   
  - net: dsa: Fix functional dsa-loop dependency on FIXED_PHY (Florian Fainelli)   
  - net/sched: fix idr leak in the error path of tcf_skbmod_init() (Davide Caratti)   
  - net/sched: fix idr leak in the error path of __tcf_ipt_init() (Davide Caratti)   
  - net/sched: fix idr leak in the error path of tcp_pedit_init() (Davide Caratti)   
  - net/sched: fix idr leak in the error path of tcf_act_police_init() (Davide Caratti)   
  - net/sched: fix idr leak in the error path of tcf_simp_init() (Davide Caratti)   
  - net/sched: fix idr leak on the error path of tcf_bpf_init() (Davide Caratti)   
  - RDMA/qedr: Fix QP state initialization race (Kalderon, Michal)   
  - RDMA/qedr: Fix rc initialization on CNQ allocation failure (Kalderon, Michal)   
  - RDMA/qedr: fix QP's ack timeout configuration (Kalderon, Michal)   
  - RDMA/ucma: Correct option size check using optlen (Chien Tin Tung)   
  - kbuild: make scripts/adjust_autoksyms.sh robust against timestamp races (Nicolas Pitre)   
  - brcmfmac: Fix check for ISO3166 code (Stefan Wahren)   
  - perf/cgroup: Fix child event counting bug (Song Liu)   
  - drm/tegra: Shutdown on driver unbind (Thierry Reding)   
  - iwlwifi: mvm: fix array out of bounds reference (Avraham Stern)   
  - iwlwifi: mvm: make sure internal station has a valid id (Avraham Stern)   
  - iwlwifi: mvm: clear tx queue id when unreserving aggregation queue (Avraham Stern)   
  - iwlwifi: mvm: Increase session protection time after CS (Andrei Otcheretianski)   
  - vti6: Fix dev->max_mtu setting (Stefano Brivio)   
  - vti4: Don't override MTU passed on link creation via IFLA_MTU (Stefano Brivio)   
  - ip_tunnel: Clamp MTU to bounds on new link (Stefano Brivio)   
  - vti4: Don't count header length twice on tunnel setup (Stefano Brivio)   
  - batman-adv: Fix skbuff rcsum on packet reroute (Sven Eckelmann)   
  - net/sched: fix NULL dereference in the error path of tcf_sample_init() (Davide Caratti)   
  - batman-adv: fix header size check in batadv_dbg_arp() (Matthias Schiffer)   
  - vlan: Fix out of order vlan headers with reorder header off (Toshiaki Makita)   
  - net: Fix vlan untag for bridge and vlan_dev with reorder_hdr off (Toshiaki Makita)   
  - iwlwifi: mvm: fix error checking for multi/broadcast sta (Johannes Berg)   
  - iwlwifi: mvm: Correctly set IGTK for AP (Beni Lev)   
  - iwlwifi: mvm: set the correct tid when we flush the MCAST sta (Emmanuel Grumbach)   
  - xfrm: fix rcu_read_unlock usage in xfrm_local_error (Taehee Yoo)   
  - drm/nouveau/bl: fix backlight regression (Karol Herbst)   
  - drm/imx: move arming of the vblank event to atomic_flush (Lucas Stach)   
  - gpu: ipu-v3: prg: avoid possible array underflow (Arnd Bergmann)   
  - KVM: arm/arm64: vgic: Add missing irq_lock to vgic_mmio_read_pending (Andre Przywara)   
  - sunvnet: does not support GSO for sctp (Cathy Zhou)   
  - ipv4: lock mtu in fnhe when received PMTU < net.ipv4.route.min_pmtu (Sabrina Dubroca)   
  - workqueue: use put_device() instead of kfree() (Arvind Yadav)   
  - bnxt_en: Check valid VNIC ID in bnxt_hwrm_vnic_set_tpa(). (Michael Chan)   
  - can: m_can: select pinctrl state in each suspend/resume function (Bich HEMON)   
  - can: m_can: change comparison to bitshift when dealing with a mask (Wolfram Sang)   
  - netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal)   
  - dmaengine: mv_xor_v2: Fix clock resource by adding a register clock (Gregory CLEMENT)   
  - lib/test_kmod.c: fix limit check on number of test devices created (Luis R. Rodriguez)   
  - selftests/vm/run_vmtests: adjust hugetlb size according to nr_cpus (Li Zhijian)   
  - arm64: Relax ARM_SMCCC_ARCH_WORKAROUND_1 discovery (Marc Zyngier)   
  - ARM: davinci: fix the GPIO lookup for omapl138-hawk (Bartosz Golaszewski)   
  - hv_netvsc: fix locking during VF setup (Stephen Hemminger)   
  - hv_netvsc: fix locking for rx_mode (Stephen Hemminger)   
  - hv_netvsc: fix filter flags (Stephen Hemminger)   
  - xen: xenbus: use put_device() instead of kfree() (Arvind Yadav)   
  - xen-blkfront: move negotiate_mq to cover all cases of new VBDs (Bhavesh Davda)   
  - cxgb4: do not set needs_free_netdev for mgmt dev's (Ganesh Goudar)   
  - IB/core: Fix possible crash to access NULL netdev (Parav Pandit)   
  - net: smsc911x: Fix unload crash when link is up (Jeremy Linton)   
  - net: qcom/emac: Use proper free methods during TX (Hemanth Puranik)   
  - qed: Free RoCE ILT Memory on rmmod qedr (Michal Kalderon)   
  - fsl/fman: avoid sleeping in atomic context while adding an address (Denis Kirjanov)   
  - fbdev: Fixing arbitrary kernel leak in case FBIOGETCMAP_SPARC in sbusfb_ioctl_helper(). (Peter Malone)   {CVE-2018-6412} 
  - IB/mlx5: Fix an error code in __mlx5_ib_modify_qp() (Dan Carpenter)   
  - IB/mlx4: Include GID type when deleting GIDs from HW table under RoCE (Jack M)   
  - IB/mlx4: Fix corruption of RoCEv2 IPv4 GIDs (Jack Morgenstein)   
  - RDMA/qedr: Fix iWARP write and send with immediate (Kalderon, Michal)   
  - RDMA/qedr: Fix kernel panic when running fio over NFSoRDMA (Kalderon, Michal)   
  - ia64/err-inject: Use get_user_pages_fast() (Davidlohr Bueso)   
  - e1000e: allocate ring descriptors with dma_zalloc_coherent (Pierre-Yves Kerbrat)   
  - e1000e: Fix check_for_link return value with autoneg off (Benjamin Poirier)   
  - perf record: Fix crash in pipe mode (Jiri Olsa)   
  - ARM: dts: rockchip: Add missing #sound-dai-cells on rk3288 (Rob Herring)   
  - hv_netvsc: propagate rx filters to VF (Stephen Hemminger)   
  - hv_netvsc: filter multicast/broadcast (Stephen Hemminger)   
  - hv_netvsc: use napi_schedule_irqoff (Stephen Hemminger)   
  - batman-adv: Fix multicast packet loss with a single WANT_ALL_IPV4/6 flag (Linus Lüssing)   
  - watchdog: sbsa: use 32-bit read for WCV (Jayachandran C)   
  - watchdog: f71808e_wdt: Fix magic close handling (Igor Pylypiv)   
  - rds: Incorrect reference counting in TCP socket creation (Ka-Cheong Poon)   
  - iwlwifi: mvm: Correctly set the tid for mcast queue (Ilan Peer)   
  - iwlwifi: mvm: Direct multicast frames to the correct station (Ilan Peer)   
  - iwlwifi: mvm: fix "failed to remove key" message (Sara Sharon)   
  - iwlwifi: avoid collecting firmware dump if not loaded (Shaul Triebitz)   
  - iwlwifi: mvm: fix assert 0x2B00 on older FWs (Sara Sharon)   
  - iwlwifi: mvm: Fix channel switch for count 0 and 1 (Andrei Otcheretianski)   
  - iwlwifi: mvm: fix TX of CCMP 256 (Sara Sharon)   
  - net: ethtool: don't ignore return from driver get_fecparam method (Edward Cree)   
  - selftests/powerpc: Skip the subpage_prot tests if the syscall is unavailable (Michael Ellerman)   
  - nvme: pci: pass max vectors as num_possible_cpus() to pci_alloc_irq_vectors (Ming Lei)   
  - nvme-pci: Fix EEH failure on ppc (Wen Xiong)   
  - block: display the correct diskname for bio (Jiufei Xue)   
  - ceph: fix potential memory leak in init_caches() (Chengguang Xu)   
  - Btrfs: fix log replay failure after linking special file and fsync (Filipe Manana)   
  - Btrfs: send, fix issuing write op when processing hole in no data mode (Filipe Manana)   
  - btrfs: use kvzalloc to allocate btrfs_fs_info (Jeff Mahoney)   
  - drm/sun4i: Fix dclk_set_phase (Giulio Benetti)   
  - arm64: dts: rockchip: Fix rk3399-gru-* s2r (pinctrl hogs, wifi reset) (Douglas Anderson)   
  - xfrm: Fix ESN sequence number handling for IPsec GSO packets. (Steffen Klassert)   
  - drm/amd/amdgpu: Correct VRAM width for APUs with GMC9 (Tom St Denis)   
  - xen/pirq: fix error path cleanup when binding MSIs (Roger Pau Monne)   
  - RDMA/bnxt_re: Fix the ib_reg failure cleanup (Selvin Xavier)   
  - RDMA/bnxt_re: Fix incorrect DB offset calculation (Devesh Sharma)   
  - RDMA/bnxt_re: Unconditionly fence non wire memory operations (Devesh Sharma)   
  - IB/mlx: Set slid to zero in Ethernet completion struct (Moni Shoua)   
  - ipvs: remove IPS_NAT_MASK check to fix passive FTP (Julian Anastasov)   
  - ARC: setup cpu possible mask according to possible-cpus dts property (Eugeniy Paltsev)   
  - ARC: mcip: update MCIP debug mask when the new cpu came online (Eugeniy Paltsev)   
  - ARC: mcip: halt GFRC counter when ARC cores halt (Eugeniy Paltsev)   
  - spectrum: Reference count VLAN entries (Ido Schimmel)   
  - mlxsw: spectrum: Treat IPv6 unregistered multicast as broadcast (Ido Schimmel)   
  - mlxsw: core: Fix flex keys scratchpad offset conflict (Jiri Pirko)   
  - net/smc: use link_id of server in confirm link reply (Karsten Graul)   
  - nvmet: fix PSDT field check in command format (Max Gurtovoy)   
  - net/tcp/illinois: replace broken algorithm reference link (Joey Pabalinas)   
  - gianfar: Fix Rx byte accounting for ndev stats (Claudiu Manoil)   
  - clocksource/drivers/mips-gic-timer: Use correct shift count to extract data (Felix Fietkau)   
  - powerpc/boot: Fix random libfdt related build errors (Guenter Roeck)   
  - ARM: dts: bcm283x: Fix unit address of local_intc (Stefan Wahren)   
  - ARM: dts: NSP: Fix amount of RAM on BCM958625HR (Florian Fainelli)   
  - nbd: fix return value in error handling path (Gustavo A. R. Silva)   
  - sit: fix IFLA_MTU ignored on NEWLINK (Xin Long)   
  - ip6_tunnel: fix IFLA_MTU ignored on NEWLINK (Xin Long)   
  - ip_gre: fix IFLA_MTU ignored on NEWLINK (Xin Long)   
  - bcache: fix kcrashes with fio in RAID5 backend dev (Tang Junhui)   
  - dmaengine: rcar-dmac: fix max_chunk_size for R-Car Gen3 (Yoshihiro Shimoda)   
  - virtio-gpu: fix ioctl and expose the fixed status to userspace. (Dave Airlie)   
  - r8152: fix tx packets accounting (Eric Dumazet)   
  - selftests/futex: Fix line continuation in Makefile (Daniel Díaz)   
  - qrtr: add MODULE_ALIAS macro to smd (Ramon Fried)   
  - ARM: orion5x: Revert commit 4904dbda41c8. (David S. Miller)   
  - xen/pvcalls: fix null pointer dereference on map->sock (Colin Ian King)   
  - ceph: fix dentry leak when failing to init debugfs (Chengguang Xu)   
  - libceph, ceph: avoid memory leak when specifying same option several times (Chengguang Xu)   
  - clocksource/drivers/fsl_ftm_timer: Fix error return checking (Colin Ian King)   
  - nvme-pci: Fix nvme queue cleanup if IRQ setup fails (Jianchao Wang)   
  - batman-adv: Fix netlink dumping of BLA backbones (Sven Eckelmann)   
  - batman-adv: Fix netlink dumping of BLA claims (Sven Eckelmann)   
  - batman-adv: Ignore invalid batadv_v_gw during netlink send (Sven Eckelmann)   
  - batman-adv: Ignore invalid batadv_iv_gw during netlink send (Sven Eckelmann)   
  - netfilter: ebtables: convert BUG_ONs to WARN_ONs (Florian Westphal)   
  - netfilter: ipt_CLUSTERIP: put config instead of freeing it (Florian Westphal)   
  - netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount (Florian Westphal)   
  - batman-adv: invalidate checksum on fragment reassembly (Matthias Schiffer)   
  - batman-adv: fix packet checksum in receive path (Matthias Schiffer)   
  - md/raid1: fix NULL pointer dereference (Yufen Yu)   
  - md: fix a potential deadlock of raid5/raid10 reshape (BingJing Chang)   
  - fs: dcache: Use READ_ONCE when accessing i_dir_seq (Will Deacon)   
  - fs: dcache: Avoid livelock between d_alloc_parallel and __d_add (Will Deacon)   
  - ARM: dts: imx6dl: Include correct dtsi file for Engicam i.CoreM6 DualLite/Solo RQS (Shyam Saini)   
  - kvm: fix warning for CONFIG_HAVE_KVM_EVENTFD builds (Sebastian Ott)   
  - KVM: nVMX: Don't halt vcpu when L1 is injecting events to L2 (Chao Gao)   
  - macvlan: fix use-after-free in macvlan_common_newlink() (Alexey Kodanev)   
  - arm64: fix unwind_frame() for filtered out fn for function graph tracing (Pratyush Anand)   
  - mac80211: drop frames with unexpected DS bits from fast-rx to slow path (Felix Fietkau)   
  - x86/topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Samuel Neves)   
  - locking/xchg/alpha: Fix xchg() and cmpxchg() memory ordering bugs (Andrea Parri)   
  - x86/intel_rdt: Fix incorrect returned value when creating rdgroup sub-directory in resctrl file system (Wang Hui)   
  - integrity/security: fix digsig.c build error with header file (Randy Dunlap)   
  - regulatory: add NUL to request alpha2 (Johannes Berg)   
  - smsc75xx: fix smsc75xx_set_features() (Eric Dumazet)   
  - ARM: OMAP: Fix dmtimer init for omap1 (Tony Lindgren)   
  - nfs: system crashes after NFS4ERR_MOVED recovery (Bill.Baker@oracle.com)   
  - arm64: dts: cavium: fix PCI bus dtc warnings (Rob Herring)   
  - PKCS#7: fix direct verification of SignerInfo signature (Eric Biggers)   
  - selftests/bpf/test_maps: exit child process without error in ENOMEM case (Li Zhijian)   
  - s390/cio: clear timer when terminating driver I/O (Sebastian Ott)   
  - s390/cio: fix return code after missing interrupt (Sebastian Ott)   
  - s390/cio: fix ccw_device_start_timeout API (Sebastian Ott)   
  - powerpc/bpf/jit: Fix 32-bit JIT for seccomp_data access (Mark Lord)   
  - soc: imx: gpc: de-register power domains only if initialized (Stefan Agner)   
  - seccomp: add a selftest for get_metadata (Tycho Andersen)   
  - selftests/memfd: add run_fuse_test.sh to TEST_FILES (Anders Roxell)   
  - bug.h: work around GCC PR82365 in BUG() (Arnd Bergmann)   
  - kernel/relay.c: limit kmalloc size to KMALLOC_MAX_SIZE (David Rientjes)   
  - virtio_net: fix XDP code path in receive_small() (Jesper Dangaard Brouer)   
  - md: raid5: avoid string overflow warning (Arnd Bergmann)   
  - locking/xchg/alpha: Add unconditional memory barrier to cmpxchg() (Andrea Parri)   
  - net/mlx5e: Return error if prio is specified when offloading eswitch vlan push (Or Gerlitz)   
  - ibmvnic: Check for NULL skb's in NAPI poll routine (Thomas Falcon)   
  - RDMA/bnxt_re: Fix system crash during load/unload (Selvin Xavier)   
  - RDMA/bnxt_re: Unpin SQ and RQ memory if QP create fails (Devesh Sharma)   
  - arm64: perf: correct PMUVer probing (Mark Rutland)   
  - drm/meson: fix vsync buffer update (Neil Armstrong)   
  - drm/exynos: fix comparison to bitshift when dealing with a mask (Wolfram Sang)   
  - drm/exynos: g2d: use monotonic timestamps (Arnd Bergmann)   
  - md raid10: fix NULL deference in handle_write_completed() (Yufen Yu)   
  - gpu: ipu-v3: prg: fix device node leak in ipu_prg_lookup_by_phandle (Tobias Jordan)   
  - gpu: ipu-v3: pre: fix device node leak in ipu_pre_lookup_by_phandle (Tobias Jordan)   
  - mac80211: Fix sending ADDBA response for an ongoing session (Ilan Peer)   
  - mac80211: Do not disconnect on invalid operating class (Ilan Peer)   
  - cfg80211: clear wep keys after disconnection (Avraham Stern)   
  - mac80211: fix calling sleeping function in atomic context (Sara Sharon)   
  - mac80211: fix a possible leak of station stats (Sara Sharon)   
  - mac80211: round IEEE80211_TX_STATUS_HEADROOM up to multiple of 4 (Felix Fietkau)   
  - xfrm: do not call rcu_read_unlock when afinfo is NULL in xfrm_get_tos (Xin Long)   
  - s390/dasd: fix handling of internal requests (Stefan Haberland)   
  - md: fix md_write_start() deadlock w/o metadata devices (Heinz Mauelshagen)   
  - MD: Free bioset when md_run fails (Xiao Ni)   
  - rxrpc: Work around usercopy check (David Howells)   
  - NFC: llcp: Limit size of SDP URI (Kees Cook)   
  - iwlwifi: mvm: always init rs with 20mhz bandwidth rates (Naftali Goldstein)   
  - iwlwifi: mvm: fix IBSS for devices that support station type API (Sara Sharon)   
  - iwlwifi: mvm: fix security bug in PN checking (Sara Sharon)   
  - ARM: dts: rockchip: Fix DWMMC clocks (Robin Murphy)   
  - arm64: dts: rockchip: Fix DWMMC clocks (Robin Murphy)   
  - IB/uverbs: Fix unbalanced unlock on error path for rdma_explicit_destroy (Jason Gunthorpe)   
  - IB/uverbs: Fix possible oops with duplicate ioctl attributes (Matan Barak)   
  - IB/uverbs: Fix method merging in uverbs_ioctl_merge (Matan Barak)   
  - xhci: workaround for AMD Promontory disabled ports wakeup (Joe Lee)   
  - tls: retrun the correct IV in getsockopt (Boris Pismenny)   
  - ibmvnic: Clean RX pool buffers during device close (Thomas Falcon)   
  - ibmvnic: Free RX socket buffer in case of adapter error (Thomas Falcon)   
  - ibmvnic: Wait until reset is complete to set carrier on (Thomas Falcon)   
  - ARM: OMAP1: clock: Fix debugfs_create_*() usage (Geert Uytterhoeven)   
  - ARM: OMAP2+: Fix sar_base inititalization for HS omaps (Tony Lindgren)   
  - ARM: OMAP3: Fix prm wake interrupt for resume (Tony Lindgren)   
  - ARM: OMAP2+: timer: fix a kmemleak caused in omap_get_timer_dt (Qi Hou)   
  - selftests: memfd: add config fragment for fuse (Anders Roxell)   
  - selftests: pstore: Adding config fragment CONFIG_PSTORE_RAM=m (Naresh Kamboju)   
  - selftest/vDSO: fix O= (Dominik Brodowski)   
  - selftests: sync: missing CFLAGS while compiling (Anders Roxell)   
  - libata: Fix compile warning with ATA_DEBUG enabled (Dong Bo)   
  - arm64: dts: rockchip: correct ep-gpios for rk3399-sapphire (Shawn Lin)   
  - arm64: dts: rockchip: fix rock64 gmac2io stability issues (Kamil Trzciński)   
  - ptr_ring: prevent integer overflow when calculating size (Jason Wang)   
  - ARC: Fix malformed ARC_EMUL_UNALIGNED default (Ulf Magnusson)   
  - mac80211: mesh: fix wrong mesh TTL offset calculation (Peter Oh)   
  - MIPS: generic: Fix machine compatible matching (James Hogan)   
  - powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Nicholas Piggin)   
  - powerpc/64s: Fix section mismatch warnings from setup_rfi_flush() (Michael Ellerman)   
  - powerpc/pseries: Restore default security feature flags on setup (Mauricio Faria de Oliveira)   
  - powerpc: Move default security feature flags (Mauricio Faria de Oliveira)   
  - powerpc/pseries: Fix clearing of security feature flags (Mauricio Faria de Oliveira)   
  - powerpc/64s: Wire up cpu_show_spectre_v2() (Michael Ellerman)   
  - powerpc/64s: Wire up cpu_show_spectre_v1() (Michael Ellerman)   
  - powerpc/pseries: Use the security flags in pseries_setup_rfi_flush() (Michael Ellerman)   
  - powerpc/powernv: Use the security flags in pnv_setup_rfi_flush() (Michael Ellerman)   
  - powerpc/64s: Enhance the information in cpu_show_meltdown() (Michael Ellerman)   
  - powerpc/64s: Move cpu_show_meltdown() (Michael Ellerman)   
  - powerpc/powernv: Set or clear security feature flags (Michael Ellerman)   
  - powerpc/pseries: Set or clear security feature flags (Michael Ellerman)   
  - powerpc: Add security feature flags for Spectre/Meltdown (Michael Ellerman)   
  - powerpc/pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Michael Ellerman)   
  - powerpc/rfi-flush: Call setup_rfi_flush() after LPM migration (Michael Ellerman)   
  - powerpc/rfi-flush: Differentiate enabled and patched flush types (Mauricio Faria de Oliveira)   
  - powerpc/rfi-flush: Always enable fallback flush on pseries (Michael Ellerman)   
  - powerpc/rfi-flush: Make it possible to call setup_rfi_flush() again (Michael Ellerman)   
  - powerpc/rfi-flush: Move the logic to avoid a redo into the debugfs code (Michael Ellerman)   
  - powerpc/powernv: Support firmware disable of RFI flush (Michael Ellerman)   
  - powerpc/pseries: Support firmware disable of RFI flush (Michael Ellerman)   
  - powerpc/64s: Improve RFI L1-D cache flush fallback (Nicholas Piggin)   
  - x86/kvm: fix LAPIC timer drift when guest uses periodic mode (David Vrabel)   
  - kvm: x86: IA32_ARCH_CAPABILITIES is always supported (Jim Mattson)   
  - KVM: x86: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang)   
  - KVM: s390: vsie: fix < 8k check for the itdba (David Hildenbrand)   
  - KVM/VMX: Expose SSBD properly to guests (Konrad Rzeszutek Wilk)   
  - kernel/sys.c: fix potential Spectre v1 issue (Gustavo A. R. Silva)   
  - kasan: fix memory hotplug during boot (David Hildenbrand)   
  - kasan: free allocated shadow memory on MEM_CANCEL_ONLINE (David Hildenbrand)   
  - mm/kasan: don't vfree() nonexistent vm_area (Andrey Ryabinin)   
  - ipc/shm: fix shmat() nil address after round-down when remapping (Davidlohr Bueso)   
  - Revert "ipc/shm: Fix shmat mmap nil-page protection" (Davidlohr Bueso)   
  - idr: fix invalid ptr dereference on item delete (Matthew Wilcox)   
  - sr: pass down correctly sized SCSI sense buffer (Jens Axboe)   
  - IB/umem: Use the correct mm during ib_umem_release (Lidong Chen)   
  - IB/hfi1: Use after free race condition in send context error path (Michael J. Ruhl)   
  - powerpc/64s: Clear PCR on boot (Michael Neuling)   
  - arm64: lse: Add early clobbers to some input/output asm operands (Will Deacon)   
  - drm/vmwgfx: Fix 32-bit VMW_PORT_HB_[IN|OUT] macros (Thomas Hellstrom)   
  - xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent (Joe Jin)   
  - libata: blacklist Micron 500IT SSD with MU01 firmware (Sudip Mukherjee)   
  - libata: Blacklist some Sandisk SSDs for NCQ (Tejun Heo)   
  - mmc: sdhci-iproc: add SDHCI_QUIRK2_HOST_OFF_CARD_ON for cygnus (Corneliu Doban)   
  - mmc: sdhci-iproc: fix 32bit writes for TRANSFER_MODE register (Corneliu Doban)   
  - mmc: sdhci-iproc: remove hard coded mmc cap 1.8v (Srinath Mannam)   
  - do d_instantiate/unlock_new_inode combinations safely (Al Viro)   
  - ALSA: timer: Fix pause event notification (Ben Hutchings)   
  - aio: fix io_destroy(2) vs. lookup_ioctx() race (Al Viro)   
  - fs: don't scan the inode cache before SB_BORN is set (Dave Chinner)   
  - affs_lookup(): close a race with affs_remove_link() (Al Viro)   
  - KVM: Fix spelling mistake: "cop_unsuable" -> "cop_unusable" (Colin Ian King)   
  - MIPS: Fix ptrace(2) PTRACE_PEEKUSR and PTRACE_POKEUSR accesses to o32 FGRs (Maciej W. Rozycki)   
  - MIPS: ptrace: Expose FIR register through FP regset (Maciej W. Rozycki)   
  - MIPS: c-r4k: Fix data corruption related to cache coherence (NeilBrown)


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1827.el7uek]
changelog:
  - net/rds: Fix incorrect bigger vs. smaller IP address check (Håkon Bugge)  [Orabug: 28222366]  
  - dtrace: pid probes do not fire for all process threads (Tomas Jedlicka)  [Orabug: 28236978]  
  - add kernel param to pre-allocate NICs (Brian Maly)  [Orabug: 28257069]  
  - ocfs2: Fix locking for res->tracking and dlm->tracking_list (Ashish Samant)  [Orabug: 27945258]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1826.el7uek]
changelog:
  - IB: RDMAIP: avoid migration to a port that is down (Zhu Yanjun)   
  - RDMA/i40iw: Avoid panic when objects are being created and destroyed (Andrew Boyer)  [Orabug: 28217251]  
  - RDMA/i40iw: Avoid reference leaks when processing the AEQ (Andrew Boyer)  [Orabug: 28217251]  
  - RDMA/i40iw: Avoid panic when reading back the IRQ affinity hint (Andrew Boyer)  [Orabug: 28217251]  
  - IB/rdmaip: Fix bug in failover_group parsing (Håkon Bugge)  [Orabug: 28198705]  
  - mlx4_core: restore optimal ICM memory allocation (Eric Dumazet)  [Orabug: 27091678]  
  - mlx4_core: allocate ICM memory in page size chunks (Qing Huang)  [Orabug: 27091678]  
  - net: net_failover: fix typo in net_failover_slave_register() (Liran Alon)  [Orabug: 28122057]  
  - virtio_net: Extend virtio to use VF datapath when available (Sridhar Samudrala)  [Orabug: 28122057]  
  - virtio_net: Introduce VIRTIO_NET_F_STANDBY feature bit (Sridhar Samudrala)  [Orabug: 28122057]  
  - net: Introduce net_failover driver (Sridhar Samudrala)  [Orabug: 28122057]  
  - net: Introduce generic failover module (Sridhar Samudrala)  [Orabug: 28122057]  
  - x86/stacktrace: Avoid recording save_stack_trace() wrappers (Vlastimil Babka)  [Orabug: 28172932]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1825.el7uek]
changelog:
  - ixgbe: fix memory leak on ipsec allocation (Colin Ian King)  [Orabug: 26719394]  
  - ixgbe: enable TSO with IPsec offload (Shannon Nelson)  [Orabug: 26719394]  
  - ixgbe: no need for ipsec csum feature check (Shannon Nelson)  [Orabug: 26719394]  
  - esp: check the NETIF_F_HW_ESP_TX_CSUM bit before segmenting (Shannon Nelson)  [Orabug: 26719394]  
  - xfrm: Allow IPsec GSO with software crypto for local sockets. (Steffen Klassert)  [Orabug: 26719394]  
  - esp: Don't require synchronous crypto fallback on offloading anymore. (Steffen Klassert)  [Orabug: 26719394]  
  - xfrm: Allow to use the layer2 IPsec GSO codepath for software crypto. (Steffen Klassert)  [Orabug: 26719394]  
  - net: Add asynchronous callbacks for xfrm on layer 2. (Steffen Klassert)  [Orabug: 26719394]  
  - xfrm: Separate ESP handling from segmentation for GRO packets. (Steffen Klassert)  [Orabug: 26719394]  
  - ixgbe: no need for esp trailer if GSO (Shannon Nelson)  [Orabug: 26719394]  
  - ixgbe: remove unneeded ipsec test in TX path (Shannon Nelson)  [Orabug: 26719394]  
  - ixgbe: remove unneeded ipsec state free callback (Shannon Nelson)  [Orabug: 26719394]  
  - ixgbe: fix ipsec trailer length (Shannon Nelson)  [Orabug: 26719394]  
  - ixgbe: check for 128-bit authentication (Shannon Nelson)  [Orabug: 26719394]  
  - xfrm: Fix eth_hdr(skb)->h_proto to reflect inner IP version (Yossi Kuperman)  [Orabug: 26719394]  
  - xfrm: Return error on unknown encap_type in init_state (Herbert Xu)  [Orabug: 26719394]  
  - xfrm: fix error flow in case of add state fails (Aviad Yehezkel)  [Orabug: 26719394]  
  - xfrm: check for xdo_dev_ops add and delete (Shannon Nelson)  [Orabug: 26719394]  
  - xfrm: Fix xfrm_dev_state_add to fail for unsupported HW SA option (Yossef Efraim)  [Orabug: 26719394]  
  - xfrm: check for xdo_dev_state_free (Shannon Nelson)  [Orabug: 26719394]  
  - ixgbe: register ipsec offload with the xfrm subsystem (Shannon Nelson)  [Orabug: 26719394]  
  - ixgbe: ipsec offload stats (Shannon Nelson)  [Orabug: 26719394]  
  - ixgbe: process the Tx ipsec offload (Shannon Nelson)  [Orabug: 26719394]  
  - ixgbe: process the Rx ipsec offload (Shannon Nelson)  [Orabug: 26719394]  
  - ixgbe: restore offloaded SAs after a reset (Shannon Nelson)  [Orabug: 26719394]  
  - ixgbe: add ipsec offload add and remove SA (Shannon Nelson)  [Orabug: 26719394]  
  - ixgbe: add ipsec data structures (Shannon Nelson)  [Orabug: 26719394]  
  - ixgbe: add ipsec engine start and stop routines (Shannon Nelson)  [Orabug: 26719394]  
  - ixgbe: add ipsec register access routines (Shannon Nelson)  [Orabug: 26719394]  
  - ixgbe: clean up ipsec defines (Shannon Nelson)  [Orabug: 26719394]  
  - rds: tcp: compute m_ack_seq as offset from ->write_seq (Sowmini Varadhan)  [Orabug: 27438741]  
  - dtrace: do not enable gcov profiling for DTrace (Vincent Lim)  [Orabug: 28036337]  
  - net/mlx5e: Add support for ethtool msglvl support (Gal Pressman)  [Orabug: 28155910]  
  - i40e: disable MSI-X in kdump kernel (Shan Hai)  [Orabug: 28167952]  
  - crypto: introduce crypto wait for async op (Gilad Ben-Yossef)  [Orabug: 27500677]  {CVE-2018-5703} 
  - tls: Use correct sk->sk_prot for IPV6 (Boris Pismenny)  [Orabug: 27500677]  {CVE-2018-5703} 
  - tls: getsockopt return record sequence number (Boris Pismenny)  [Orabug: 27500677]  {CVE-2018-5703} 
  - tls: reset the crypto info if copy_from_user fails (Boris Pismenny)  [Orabug: 27500677]  {CVE-2018-5703} 
  - net: add a UID to use for ULP socket assignment (John Fastabend)  [Orabug: 27500677]  {CVE-2018-5703} 
  - tls: Add support for encryption using async offload accelerator (Vakul Garg)  [Orabug: 27500677]  {CVE-2018-5703} 
  - tls: Correct length of scatterlist in tls_sw_sendpage (Dave Watson)  [Orabug: 27500677]  {CVE-2018-5703} 
  - tls: don't override sk_write_space if tls_set_sw_offload fails. (Ilya Lesokhin)  [Orabug: 27500677]  {CVE-2018-5703} 
  - tls: Avoid copying crypto_info again after cipher_type check. (Ilya Lesokhin)  [Orabug: 27500677]  {CVE-2018-5703} 
  - tls: Move tls_make_aad to header to allow sharing (Ilya Lesokhin)  [Orabug: 27500677]  {CVE-2018-5703} 
  - tls: Fix TLS ulp context leak, when TLS_TX setsockopt is not used. (Ilya Lesokhin)  [Orabug: 27500677]  {CVE-2018-5703} 
  - tls: Add function to update the TLS socket configuration (Ilya Lesokhin)  [Orabug: 27500677]  {CVE-2018-5703} 
  - dtrace: nested tracepoints can clobber per-core pt_regs pointer (Tomas Jedlicka)  [Orabug: 27599386]  
  - xhci: Fix USB3 NULL pointer dereference at logical disconnect. (Mathias Nyman)  [Orabug: 27426024]  
  - RPI: Fix serial console for RPI 3B and B+ (Vijay Kumar)  [Orabug: 28098309]  
  - rpi: MMC fails to find DMA channel and falls back to PIO (Vijay Kumar)  [Orabug: 28159727]  
  - dtrace: remove the CPU_DTRACE_PROBE_CTX flag (Tomas Jedlicka)  [Orabug: 28169490]  
  - dtrace: tick probes do not seem to fire correctly from time to time (Tomas Jedlicka)  [Orabug: 25736701]  
  - arm64: entry: add END/ENDPROC markers to *.S files (Eugene Loh)  [Orabug: 28143715]  
  - GARP Messages should be sent on the same port where IP is bound (Sudhakar Dindukurti)  [Orabug: 28085445]  
  - arm64: uaccess: Fix omissions from usercopy whitelist (Dave Martin)  [Orabug: 28110940]  
  - arm64: fpsimd: Split cpu field out from struct fpsimd_state (Dave Martin)  [Orabug: 28110940]  
  - arm64: fpsimd: Fix state leakage when migrating after sigreturn (Dave Martin)  [Orabug: 28110940]  
  - arm64: fpsimd: Fix copying of FP state from signal frame into task struct (Will Deacon)  [Orabug: 28110940]  
  - arm64: fpsimd: Fix failure to restore FPSIMD state after signals (Dave Martin)  [Orabug: 28110940]  
  - arm64/sve: KVM: Treat guest SVE use as undefined instruction execution (Dave Martin)  [Orabug: 28110940]  
  - arm64: Port deprecated instruction emulation to new sysctl interface (Dave Martin)  [Orabug: 28110940]  
  - arm64: efi: Add missing Kconfig dependency on KERNEL_MODE_NEON (Dave Martin)  [Orabug: 28110940]  
  - arm64: signal: Verify extra data is user-readable in sys_rt_sigreturn (Dave Martin)  [Orabug: 28110940]  
  - uek-rpm: aarch64 Disable CONFIG_NET_VRF (Victor Erminpour)  [Orabug: 28158146]  
  - qla2xxx: invalid argument and missing return type with qlogic bugfix 28150193 (Rajan Shanmugavelu)  [Orabug: 28158852]  
  - x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava)  [Orabug: 28149273]  
  - perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Andi Kleen)  [Orabug: 28149273]  
  - fix kABI breakage caused by "x86/topology: Avoid wasting 128k for package id array" (Dan Duval)  [Orabug: 28149273]  
  - x86/topology: Avoid wasting 128k for package id array (Andi Kleen)  [Orabug: 28149273]  
  - xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent (Joe Jin)  [Orabug: 28065190]  
  - qla2xxx: Enable buffer boundary check when DIF bundling is on. (Rajan Shanmugavelu)  [Orabug: 28130759]  
  - qla2xxx: check for null fcport in qla24xx_handle_gnl_done_event() (Chuck Anderson)  [Orabug: 28151742]  
  - net/rds: prevent RDS connections using stale ARP entries (Wei Lin Guay)  [Orabug: 27626296]  
  - net/rds: Avoid stalled connection due to CM REQ retries (Wei Lin Guay)  [Orabug: 25521901]  
  - net/rds: use one sided reconnection during a race (Wei Lin Guay)  [Orabug: 25521901]  
  - Revert "Revert "net/rds: Revert "RDS: add reconnect retry scheme for stalled" (Håkon Bugge)  [Orabug: 25521901]  
  - qla2xxx: move allocation of qla2xxx_wq to earlier in adapter initialization (Himanshu Madhani)  [Orabug: 28064715]  
  - scsi: qla2xxx: Correct setting of SAM_STAT_CHECK_CONDITION (Johannes Thumshirn)  [Orabug: 28064715]  
  - scsi: qla2xxx: correctly shift host byte (Johannes Thumshirn)  [Orabug: 28064715]  
  - scsi: qla2xxx: Fix race condition between iocb timeout and initialisation (Ben Hutchings)  [Orabug: 28064715]  
  - scsi: qla2xxx: Avoid double completion of abort command (Ben Hutchings)  [Orabug: 28064715]  
  - dtrace: dwarf2ctf emitter type ids are not in sync with dedup (Tomas Jedlicka)  [Orabug: 28120296]  
  - Linux 4.14.44 (Greg Kroah-Hartman)   
  - rtc: goldfish: Add missing MODULE_LICENSE (James Hogan)   
  - rtc: rp5c01: fix possible race condition (Alexandre Belloni)   
  - rtc: tx4939: avoid unintended sign extension on a 24 bit shift (Colin Ian King)   
  - rtc: m41t80: fix race conditions (Alexandre Belloni)   
  - rtc: rk808: fix possible race condition (Alexandre Belloni)   
  - rtc: hctosys: Ensure system time doesn't overflow time_t (Alexandre Belloni)   
  - rtc: snvs: Fix usage of snvs_rtc_enable (Bryan O'Donoghue)   
  - serial: altera: ensure port->regshift is honored consistently (Uwe Kleine-König)   
  - serial: 8250: Don't service RX FIFO if interrupts are disabled (Vignesh R)   
  - serial: arc_uart: Fix out-of-bounds access through DT alias (Geert Uytterhoeven)   
  - serial: fsl_lpuart: Fix out-of-bounds access through DT alias (Geert Uytterhoeven)   
  - serial: imx: Fix out-of-bounds access through serial port index (Geert Uytterhoeven)   
  - serial: mxs-auart: Fix out-of-bounds access through serial port index (Geert Uytterhoeven)   
  - serial: samsung: Fix out-of-bounds access through serial port index (Geert Uytterhoeven)   
  - serial: sh-sci: Fix out-of-bounds access through DT alias (Geert Uytterhoeven)   
  - serial: xuartps: Fix out-of-bounds access through DT alias (Geert Uytterhoeven)   
  - media: cx25821: prevent out-of-bounds read on array card (Colin Ian King)   
  - media: vivid: fix incorrect capabilities for radio (Hans Verkuil)   
  - media: vb2: Fix videobuf2 to map correct area (Masami Hiramatsu)   
  - media: i2c: adv748x: fix HDMI field heights (Kieran Bingham)   
  - media: v4l: vsp1: Fix display stalls when requesting too many inputs (Laurent Pinchart)   
  - media: em28xx: Add Hauppauge SoloHD/DualHD bulk models (Brad Love)   
  - media: lgdt3306a: Fix a double kfree on i2c device remove (Brad Love)   
  - media: s3c-camif: fix out-of-bounds array access (Arnd Bergmann)   
  - media: cx23885: Set subdev host data to clk_freq pointer (Brad Love)   
  - media: cx23885: Override 888 ImpactVCBe crystal frequency (Brad Love)   
  - media: ov5645: add missing of_node_put() in error path (Akinobu Mita)   
  - media: Don't let tvp5150_get_vbi() go out of vbi_ram_default array (Mauro Carvalho Chehab)   
  - media: dmxdev: fix error code for invalid ioctls (Mauro Carvalho Chehab)   
  - clk: samsung: exynos3250: Fix PLL rates (Andrzej Hajda)   
  - clk: samsung: exynos5250: Fix PLL rates (Andrzej Hajda)   
  - clk: samsung: exynos5433: Fix PLL rates (Andrzej Hajda)   
  - clk: samsung: exynos5260: Fix PLL rates (Andrzej Hajda)   
  - clk: samsung: exynos7: Fix PLL rates (Andrzej Hajda)   
  - clk: samsung: s3c2410: Fix PLL rates (Andrzej Hajda)   
  - clk: rockchip: Prevent calculating mmc phase if clock rate is zero (Shawn Lin)   
  - clk: tegra: Fix pll_u rate configuration (Marcel Ziswiler)   
  - clk: hisilicon: mark wdt_mux_p[] as const (Arnd Bergmann)   
  - clk: Don't show the incorrect clock phase (Shawn Lin)   
  - clk: rockchip: Fix wrong parent for SDMMC phase clock for rk3228 (Shawn Lin)   
  - ASoC: samsung: i2s: Ensure the RCLK rate is properly determined (Sylwester Nawrocki)   
  - ASoC: topology: create TLV data for dapm widgets (Ranjani Sridharan)   
  - ASoC: samsung: odroid: Fix 32000 sample rate handling (Sylwester Nawrocki)   
  - ASoC: rockchip: rk3288-hdmi-analog: Select needed codecs (Ezequiel Garcia)   
  - ASoC: hdmi-codec: Fix module unloading caused kernel crash (Peter Ujfalusi)   
  - scsi: lpfc: Fix frequency of Release WQE CQEs (James Smart)   
  - scsi: lpfc: Fix soft lockup in lpfc worker thread during LIP testing (James Smart)   
  - scsi: lpfc: Fix issue_lip if link is disabled (James Smart)   
  - scsi: mvsas: fix wrong endianness of sgpio api (Wilfried Weissmann)   
  - scsi: core: Make SCSI Status CONDITION MET equivalent to GOOD (Douglas Gilbert)   
  - scsi: aacraid: Insure command thread is not recursively stopped (Dave Carroll)   
  - scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled (Jianchao Wang)   
  - scsi: sd: Keep disk read-only when re-reading partition (Jeremy Cline)   
  - scsi: mpt3sas: Do not mark fw_event workqueue as WQ_MEM_RECLAIM (Hannes Reinecke)   
  - scsi: qedi: Fix kernel crash during port toggle (Manish Rangankar)   
  - scsi: qla4xxx: skip error recovery in case of register disconnect. (Manish Rangankar)   
  - scsi: aacraid: fix shutdown crash when init fails (Meelis Roos)   
  - scsi: qedi: Fix truncation of CHAP name and secret (Andrew Vasquez)   
  - scsi: storvsc: Increase cmd_per_lun for higher speed devices (Michael Kelley (EOSG))   
  - scsi: qla2xxx: Avoid triggering undefined behavior in qla2x00_mbx_completion() (Bart Van Assche)   
  - scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo() (Dan Carpenter)   
  - scsi: sym53c8xx_2: iterator underflow in sym_getsync() (Dan Carpenter)   
  - scsi: bnx2fc: Fix check in SCSI completion handler for timed out request (Chad Dupuis)   
  - scsi: ufs: Enable quirk to ignore sending WRITE_SAME command (Sujit Reddy Thumma)   
  - scsi: qla2xxx: Fix memory corruption during hba reset test (Quinn Tran)   
  - scsi: mpt3sas: fix an out of bound write (Tomas Henzl)   
  - crypto: inside-secure - fix the invalidation step during cra_exit (Antoine Tenart)   
  - crypto: sunxi-ss - Add MODULE_ALIAS to sun4i-ss (Peter Robinson)   
  - crypto: inside-secure - fix the extra cache computation (Antoine Tenart)   
  - crypto: inside-secure - fix the cache_len computation (Antoine Tenart)   
  - crypto: inside-secure - do not process request if no command was issued (Antoine Tenart)   
  - crypto: ccp - don't disable interrupts while setting up debugfs (Sebastian Andrzej Siewior)   
  - crypto: atmel-aes - fix the keys zeroing on errors (Antoine Tenart)   
  - crypto: inside-secure - wait for the request to complete if in the backlog (Antoine Tenart)   
  - staging: lustre: lmv: correctly iput lmo_root (NeilBrown)   
  - staging: ks7010: Use constants from ieee80211_eid instead of literal ints. (Quytelda Kahja)   
  - staging: rtl8192u: return -ENOMEM on failed allocation of priv->oldaddr (Colin Ian King)   
  - staging: fsl-dpaa2/eth: Fix incorrect casts (Ioana Radulescu)   
  - staging: lustre: fix bug in osc_enter_cache_try (NeilBrown)   
  - staging: bcm2835-audio: Release resources on module_exit() (Kirill Marinushkin)   
  - xhci: Show what USB release number the xHC supports from protocol capablity (Mathias Nyman)   
  - Bluetooth: btusb: Add device ID for RTL8822BE (Larry Finger)   
  - media: em28xx: USB bulk packet size fix (Brad Love)   
  - media: lgdt3306a: Fix module count mismatch on usb unplug (Brad Love)   
  - usb: gadget: composite: fix incorrect handling of OS desc requests (Chris Dickens)   
  - usb: gadget: udc: change comparison to bitshift when dealing with a mask (Wolfram Sang)   
  - usbip: Correct maximum value of CONFIG_USBIP_VHCI_HC_PORTS (Ben Hutchings)   
  - usb: gadget: ffs: Execute copy_to_user() with USER_DS set (Lars-Peter Clausen)   
  - usb: gadget: ffs: Let setup() return USB_GADGET_DELAYED_STATUS (Lars-Peter Clausen)   
  - usb: dwc2: host: Fix transaction errors in host mode (Minas Harutyunyan)   
  - usb: dwc2: hcd: Fix host channel halt flow (Minas Harutyunyan)   
  - usb: dwc2: Fix interval type issue (Grigor Tovmasyan)   
  - xhci: zero usb device slot_id member when disabling and freeing a xhci slot (Mathias Nyman)   
  - usb: dwc3: Makefile: fix link error on randconfig (Felipe Balbi)   
  - usb: dwc3: Update DWC_usb31 GTXFIFOSIZ reg fields (Thinh Nguyen)   
  - usb: dwc3: Add SoftReset PHY synchonization delay (Thinh Nguyen)   
  - ALSA: usb-audio: Add native DSD support for Luxman DA-06 (Nobutaka Okabe)   
  - Bluetooth: btusb: Add USB ID 7392:a611 for Edimax EW-7611ULB (Vicente Bergas)   
  - net-usb: add qmi_wwan if on lte modem wistron neweb d18q1 (Giuseppe Lippolis)   
  - net/usb/qmi_wwan.c: Add USB id for lt4120 modem (Torsten Hilbrich)   
  - USB: OHCI: Fix NULL dereference in HCDs using HCD_LOCAL_MEM (Fredrik Noring)   
  - usb: host: xhci-plat: revert "usb: host: xhci-plat: enable clk in resume timing" (Yoshihiro Shimoda)   
  - ARM: dts: imx7d-sdb: Fix regulator-usb-otg2-vbus node name (Leonard Crestez)   
  - net: usbnet: fix potential deadlock on 32bit hosts (Eric Dumazet)   
  - usb: cdc_acm: prevent race at write to acm while system resumes (Dominik Bozek)   
  - usb: dwc2: Fix dwc2_hsotg_core_init_disconnected() (Vardan Mikayelyan)   
  - usb: gadget: fsl_udc_core: fix ep valid checks (Stefan Agner)   
  - usb: gadget: core: Fix use-after-free of usb_request (Manu Gautam)   
  - usb: dwc3: omap: don't miss events during suspend/resume (Roger Quadros)   
  - usb: dwc3: Undo PHY init if soft reset fails (Brian Norris)   
  - usb: gadget: f_uac2: fix bFirstInterface in composite gadget (John Keeping)   
  - x86/kexec: Avoid double free_page() upon do_kexec_load() failure (Tetsuo Handa)   
  - hfsplus: stop workqueue when fill_super() failed (Tetsuo Handa)   
  - cfg80211: limit wiphy names to 128 bytes (Johannes Berg)   
  - loop: fix LOOP_GET_STATUS lock imbalance (Omar Sandoval)   
  - loop: don't call into filesystem while holding lo_ctl_mutex (Omar Sandoval)   
  - scsi: zfcp: fix infinite iteration on ERP ready list (Jens Remus)   
  - scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() (Alexander Potapenko)   
  - scsi: libsas: defer ata device eh commands to libata (Jason Yan)   
  - s390: use expoline thunks in the BPF JIT (Martin Schwidefsky)   
  - s390: extend expoline to BC instructions (Martin Schwidefsky)   
  - s390: move spectre sysfs attribute code (Martin Schwidefsky)   
  - s390/kernel: use expoline for indirect branches (Martin Schwidefsky)   
  - s390/ftrace: use expoline for indirect branches (Martin Schwidefsky)   
  - s390/lib: use expoline for indirect branches (Martin Schwidefsky)   
  - s390/crc32-vx: use expoline for indirect branches (Martin Schwidefsky)   
  - s390: move expoline assembler macros to a header (Martin Schwidefsky)   
  - s390: add assembler macros for CPU alternatives (Martin Schwidefsky)   
  - ext2: fix a block leak (Al Viro)   
  - sparc: vio: use put_device() instead of kfree() (Arvind Yadav)   
  - hv_netvsc: Fix net device attach on older Windows hosts (Mohammed Gamal)   
  - hv_netvsc: Ensure correct teardown message sequence order (Mohammed Gamal)   
  - hv_netvsc: Split netvsc_revoke_buf() and netvsc_teardown_gpadl() (Mohammed Gamal)   
  - hv_netvsc: Use Windows version instead of NVSP version on GPAD teardown (Mohammed Gamal)   
  - hv_netvsc: common detach logic (Stephen Hemminger)   
  - hv_netvsc: change GPAD teardown order on older versions (Stephen Hemminger)   
  - hv_netvsc: use RCU to fix concurrent rx and queue changes (Stephen Hemminger)   
  - hv_netvsc: disable NAPI before channel close (Stephen Hemminger)   
  - hv_netvsc: defer queue selection to VF (Stephen Hemminger)   
  - hv_netvsc: fix race in napi poll when rescheduling (Stephen Hemminger)   
  - hv_netvsc: cancel subchannel setup before halting device (Stephen Hemminger)   
  - hv_netvsc: fix error unwind handling if vmbus_open fails (Stephen Hemminger)   
  - hv_netvsc: only wake transmit queue if link is up (Stephen Hemminger)   
  - hv_netvsc: avoid retry on send during shutdown (Stephen Hemminger)   
  - hv_netvsc: Use the num_online_cpus() for channel limit (Haiyang Zhang)   
  - hv_netvsc: empty current transmit aggregation if flow blocked (Stephen Hemminger)   
  - hv_netvsc: preserve hw_features on mtu/channels/ringparam changes (Vitaly Kuznetsov)   
  - hv_netvsc: netvsc_teardown_gpadl() split (Vitaly Kuznetsov)   
  - hv_netvsc: Set tx_table to equal weight after subchannels open (Haiyang Zhang)   
  - hv_netvsc: Add initialization of tx_table in netvsc_device_add() (Haiyang Zhang)   
  - hv_netvsc: Rename tx_send_table to tx_table (Haiyang Zhang)   
  - hv_netvsc: Rename ind_table to rx_table (Haiyang Zhang)   
  - hv_netvsc: Fix the real number of queues of non-vRSS cases (Haiyang Zhang)   
  - vmxnet3: use DMA memory barriers where required (hpreg@vmware.com)   
  - vmxnet3: set the DMA mask before the first DMA map operation (hpreg@vmware.com)   
  - tcp: purge write queue in tcp_connect_init() (Eric Dumazet)   
  - sock_diag: fix use-after-free read in __sk_free (Eric Dumazet)   
  - packet: in packet_snd start writing at link layer allocation (Willem de Bruijn)   
  - net: test tailroom before appending to linear skb (Willem de Bruijn)   
  - net/smc: check for missing nlattrs in SMC_PNETID messages (Eric Biggers)   
  - net: sched: red: avoid hashing NULL child (Paolo Abeni)   
  - net/sched: fix refcnt leak in the error path of tcf_vlan_init() (Davide Caratti)   
  - net/mlx4_core: Fix error handling in mlx4_init_port_info. (Tarick Bedeir)   
  - net: Fix a bug in removing queues from XPS map (Amritha Nambiar)   
  - Linux 4.14.43 (Greg Kroah-Hartman)   
  - x86/bugs: Rename SSBD_NO to SSB_NO (Konrad Rzeszutek Wilk)   
  - KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Tom Lendacky)   
  - x86/speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Thomas Gleixner)   
  - x86/bugs: Rework spec_ctrl base and mask logic (Thomas Gleixner)   
  - x86/bugs: Remove x86_spec_ctrl_set() (Thomas Gleixner)   
  - x86/bugs: Expose x86_spec_ctrl_base directly (Thomas Gleixner)   
  - x86/bugs: Unify x86_spec_ctrl_{set_guest,restore_host} (Borislav Petkov)   
  - x86/speculation: Rework speculative_store_bypass_update() (Thomas Gleixner)   
  - x86/speculation: Add virtualized speculative store bypass disable support (Tom Lendacky)   
  - x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Thomas Gleixner)   
  - x86/speculation: Handle HT correctly on AMD (Thomas Gleixner)   
  - x86/cpufeatures: Add FEATURE_ZEN (Thomas Gleixner)   
  - x86/cpufeatures: Disentangle SSBD enumeration (Thomas Gleixner)   
  - x86/cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Thomas Gleixner)   
  - x86/speculation: Use synthetic bits for IBRS/IBPB/STIBP (Borislav Petkov)   
  - KVM: SVM: Move spec control call after restore of GS (Thomas Gleixner)   
  - x86/cpu: Make alternative_msr_write work for 32-bit code (Jim Mattson)   
  - x86/bugs: Fix the parameters alignment and missing void (Konrad Rzeszutek Wilk)   
  - x86/bugs: Make cpu_show_common() static (Jiri Kosina)   
  - x86/bugs: Fix __ssb_select_mitigation() return type (Jiri Kosina)   
  - Documentation/spec_ctrl: Do some minor cleanups (Borislav Petkov)   
  - proc: Use underscores for SSBD in 'status' (Konrad Rzeszutek Wilk)   
  - x86/bugs: Rename _RDS to _SSBD (Konrad Rzeszutek Wilk)   
  - x86/speculation: Make "seccomp" the default mode for Speculative Store Bypass (Kees Cook)   
  - seccomp: Move speculation migitation control to arch code (Thomas Gleixner)   
  - seccomp: Add filter flag to opt-out of SSB mitigation (Kees Cook)   
  - seccomp: Use PR_SPEC_FORCE_DISABLE (Thomas Gleixner)   
  - prctl: Add force disable speculation (Thomas Gleixner)   
  - x86/bugs: Make boot modes __ro_after_init (Kees Cook)   
  - seccomp: Enable speculation flaw mitigations (Kees Cook)   
  - proc: Provide details on speculation flaw mitigations (Kees Cook)   
  - nospec: Allow getting/setting on non-current task (Kees Cook)   
  - x86/speculation: Add prctl for Speculative Store Bypass mitigation (Thomas Gleixner)   
  - x86/process: Allow runtime control of Speculative Store Bypass (Thomas Gleixner)   
  - prctl: Add speculation control prctls (Thomas Gleixner)   
  - x86/speculation: Create spec-ctrl.h to avoid include hell (Thomas Gleixner)   
  - x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (Konrad Rzeszutek Wilk)   
  - x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if requested (Konrad Rzeszutek Wilk)   
  - x86/bugs: Whitelist allowed SPEC_CTRL MSR values (Konrad Rzeszutek Wilk)   
  - x86/bugs/intel: Set proper CPU features and setup RDS (Konrad Rzeszutek Wilk)   
  - x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Konrad Rzeszutek Wilk)   
  - x86/cpufeatures: Add X86_FEATURE_RDS (Konrad Rzeszutek Wilk)   
  - x86/bugs: Expose /sys/../spec_store_bypass (Konrad Rzeszutek Wilk)   
  - x86/bugs, KVM: Support the combination of guest and host IBRS (Konrad Rzeszutek Wilk)   
  - x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Konrad Rzeszutek Wilk)   
  - x86/bugs: Concentrate bug reporting into a separate function (Konrad Rzeszutek Wilk)   
  - x86/bugs: Concentrate bug detection into a separate function (Konrad Rzeszutek Wilk)   
  - x86/nospec: Simplify alternative_msr_write() (Linus Torvalds)   
  - btrfs: fix reading stale metadata blocks after degraded raid1 mounts (Liu Bo)   
  - btrfs: Fix delalloc inodes invalidation during transaction abort (Nikolay Borisov)   
  - btrfs: Split btrfs_del_delalloc_inode into 2 functions (Nikolay Borisov)   
  - btrfs: fix crash when trying to resume balance without the resume flag (Anand Jain)   
  - btrfs: property: Set incompat flag if lzo/zstd compression is set (Misono Tomohiro)   
  - Btrfs: send, fix invalid access to commit roots due to concurrent snapshotting (Robbie Ko)   
  - Btrfs: fix xattr loss after power failure (Filipe Manana)   
  - ARM: 8772/1: kprobes: Prohibit kprobes on get_user functions (Masami Hiramatsu)   
  - ARM: 8770/1: kprobes: Prohibit probing on optimized_callback (Masami Hiramatsu)   
  - ARM: 8769/1: kprobes: Fix to use get_kprobe_ctlblk after irq-disabed (Masami Hiramatsu)   
  - tick/broadcast: Use for_each_cpu() specially on UP kernels (Dexuan Cui)   
  - x86/mm: Drop TS_COMPAT on 64-bit exec() syscall (Dmitry Safonov)   
  - ARM: 8771/1: kprobes: Prohibit kprobes on do_undefinstr (Masami Hiramatsu)   
  - efi: Avoid potential crashes, fix the 'struct efi_pci_io_protocol_32' definition for mixed mode (Ard Biesheuvel)   
  - x86/pkeys: Do not special case protection key 0 (Dave Hansen)   
  - x86/pkeys: Override pkey when moving away from PROT_EXEC (Dave Hansen)   
  - s390: remove indirect branch from do_softirq_own_stack (Martin Schwidefsky)   
  - s390/qdio: don't release memory in qdio_setup_irq() (Julian Wiedmann)   
  - s390/cpum_sf: ensure sample frequency of perf event attributes is non-zero (Hendrik Brueckner)   
  - s390/qdio: fix access to uninitialized qdio_q fields (Julian Wiedmann)   
  - drm/i915/gen9: Add WaClearHIZ_WM_CHICKEN3 for bxt and glk (Michel Thierry)   
  - mm: don't allow deferred pages with NEED_PER_CPU_KM (Pavel Tatashin)   
  - radix tree: fix multi-order iteration race (Ross Zwisler)   
  - lib/test_bitmap.c: fix bitmap optimisation tests to report errors correctly (Matthew Wilcox)   
  - drm: Match sysfs name in link removal to link creation (Haneen Mohammed)   
  - powerpc/powernv: Fix NVRAM sleep in invalid context when crashing (Nicholas Piggin)   
  - i2c: designware: fix poll-after-enable regression (Alexander Monakov)   
  - netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6} (Subash Abhinov Kasiviswanathan)   
  - netfilter: nf_tables: can't fail after linking rule into active rule list (Florian Westphal)   
  - netfilter: nf_tables: free set name in error path (Florian Westphal)   
  - tee: shm: fix use-after-free via temporarily dropped reference (Jann Horn)   
  - tracing/x86/xen: Remove zero data size trace events trace_xen_mmu_flush_tlb{_all} (Steven Rostedt (VMware))   
  - vfio: ccw: fix cleanup if cp_prefetch fails (Halil Pasic)   
  - powerpc: Don't preempt_disable() in show_cpuinfo() (Benjamin Herrenschmidt)   
  - KVM: arm/arm64: VGIC/ITS: protect kvm_read_guest() calls with SRCU lock (Andre Przywara)   
  - KVM: arm/arm64: VGIC/ITS save/restore: protect kvm_read_guest() calls (Andre Przywara)   
  - spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL (Kamal Dasu)   
  - spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master (Kamal Dasu)   
  - spi: pxa2xx: Allow 64-bit DMA (Andy Shevchenko)   
  - ALSA: control: fix a redundant-copy issue (Wenwen Wang)   
  - ALSA: hda: Add Lenovo C50 All in one to the power_save blacklist (Hans de Goede)   
  - ALSA: usb: mixer: volume quirk for CM102-A+/102S+ (Federico Cuello)   
  - usbip: usbip_host: fix bad unlock balance during stub_probe() (Shuah Khan (Samsung OSG))   
  - usbip: usbip_host: fix NULL-ptr deref and use-after-free errors (Shuah Khan (Samsung OSG))   
  - usbip: usbip_host: run rebind from exit when module is removed (Shuah Khan (Samsung OSG))   
  - usbip: usbip_host: delete device from busid_table after rebind (Shuah Khan (Samsung OSG))   
  - usbip: usbip_host: refine probe and disconnect debug msgs to be useful (Shuah Khan)


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1823.el7uek]
changelog:
  - KVM: lapic: stop advertising DIRECTED_EOI when in-kernel IOAPIC is in use (Vitaly Kuznetsov)  [Orabug: 28102305]  
  - uek-rpm: config: disable CONFIG_DEBUG_VM on aarch64 (Henry Willard)  [Orabug: 28104208]  
  - PCI: hv: Fix 2 hang issues in hv_compose_msi_msg() (Dexuan Cui)  [Orabug: 28077219]  
  - use the new async probing feature for the hyperv drivers (Arjan van de Ven)   
  - tools: adding file to support building user level daemon (Vivek Yadav)   
  - pci-hyperv: Use only 16 bit integer for PCI domain (Haiyang Zhang)   
  - hv_balloon: fix bugs in num_pages_onlined accounting (Vitaly Kuznetsov)   
  - hv_balloon: fix printk loglevel (Vitaly Kuznetsov)   
  - hv_balloon: simplify hv_online_page()/hv_page_online_one() (Vitaly Kuznetsov)   
  - hv_balloon: trace post_status (Vitaly Kuznetsov)   
  - acpi: Check for NULL pointer in namespace walk (Rob Gardner)  [Orabug: 27936841]  
  - xen/pv: Do not call get_cpu_cap() for PV guest in xen_start_kernel() (Boris Ostrovsky)  [Orabug: 28121028]  
  - uek-rpm: Enable kernel-uek-headers build. (Victor Erminpour)  [Orabug: 28110910]  
  - arm64: add support for crashkernel=auto (Dave Kleikamp)  [Orabug: 28095909]  
  - dtrace: dwarf2ctf coredumps on empty struct/union (Tomas Jedlicka)  [Orabug: 28049162]  
  - uek-rpm: aarch64 sync NVME config with x86 (Tom Saeger)  [Orabug: 28096294]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1822.el7uek]
changelog:
  - scsi: core: run queue if SCSI device queue isn't ready and queue is idle (Ming Lei)  [Orabug: 27930068]  
  - SCSI: don't get target/host busy_count in scsi_mq_get_budget() (Ming Lei)  [Orabug: 27930068]  
  - uek-rpm: aarch64 make olddefconfig latest stable (Tom Saeger)  [Orabug: 28084270]  
  - uek-rpm: aarch64 make olddefconfig usercopy whitelist (Tom Saeger)  [Orabug: 28084248]  
  - dtrace: instruction stream corruption when #MCE occurs (Tomas Jedlicka)  [Orabug: 27860333]  
  - lan78xx: Lan7801 Support for Fixed PHY (Raghuram Chary J)  [Orabug: 28072733]  
  - lan78xx: Add support to dump lan78xx registers (Raghuram Chary J)  [Orabug: 28072733]  
  - dt-bindings: Document the DT bindings for lan78xx (Phil Elwell)  [Orabug: 28072733]  
  - lan78xx: Read LED states from Device Tree (Phil Elwell)  [Orabug: 28072733]  
  - lan78xx: Read MAC address from DT if present (Phil Elwell)  [Orabug: 28072733]  
  - lan78xx: PHY DSP registers initialization to address EEE link drop issues with long cables (Raghuram Chary J)  [Orabug: 28072733]  
  - lan78xx: Don't reset the interface on open (Phil Elwell)  [Orabug: 28072733]  
  - lan78xx: Avoid spurious kevent 4 "error" (Phil Elwell)  [Orabug: 28072733]  
  - lan78xx: Connect phy early (Alexander Graf)  [Orabug: 28072733]  
  - lan78xx: Set ASD in MAC_CR when EEE is enabled. (Raghuram Chary J)  [Orabug: 28072733]  
  - lan78xx: remove redundant initialization of pointer 'phydev' (Colin Ian King)  [Orabug: 28072733]  
  - net: phy: add paged phy register accessors (Russell King)  [Orabug: 28072733]  
  - net: phy: add unlocked accessors (Russell King)  [Orabug: 28072733]  
  - net: mdiobus: add unlocked accessors (Russell King)  [Orabug: 28072733]  
  - uek-rpm: aarch64 set default cpu governor to PERFORMANCE (Tom Saeger)  [Orabug: 27952402]  
  - mailbox: ACPI: erroneous error message when parsing the ACPI PCCT (Allen Pais)  [Orabug: 27468132]  
  - uek-rpm: Disable CONFIG_NET_VRF (Victor Erminpour)  [Orabug: 27801112]  
  - Include xen.h in common.c to fix Xen kernel build (Jack Schwartz)  [Orabug: 28028363]  
  - x86/bugs/IBRS: Keep SSBD mitigation in effect if spectre_v2=ibrs is selected. (Boris Ostrovsky)  [Orabug: 28071791]  
  - KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Tom Lendacky)  [Orabug: 28063980]  {CVE-2018-3639} 
  - scsi: lpfc: update driver version to 12.0.0.2 (James Smart)  [Orabug: 27912557]  
  - scsi: lpfc: Correct missing remoteport registration during link bounces (James Smart)  [Orabug: 27912557]  
  - scsi: lpfc: Fix NULL pointer reference when resetting adapter (James Smart)  [Orabug: 27912557]  
  - scsi: lpfc: Fix nvme remoteport registration race conditions (James Smart)  [Orabug: 27912557]  
  - scsi: lpfc: Fix driver not recovering NVME rports during target link faults (James Smart)  [Orabug: 27912557]  
  - scsi: lpfc: Fix WQ/CQ creation for older asic's. (James Smart)  [Orabug: 27912557]  
  - scsi: lpfc: Fix NULL pointer access in lpfc_nvme_info_show (James Smart)  [Orabug: 27912557]  
  - scsi: lpfc: Fix lingering lpfc_wq resource after driver unload (James Smart)  [Orabug: 27912557]  
  - scsi: lpfc: Fix Abort request WQ selection (James Smart)  [Orabug: 27912557]  
  - scsi: lpfc: Enlarge nvmet asynchronous receive buffer counts (James Smart)  [Orabug: 27912557]  
  - scsi: lpfc: Add per io channel NVME IO statistics (James Smart)  [Orabug: 27912557]  
  - scsi: lpfc: Correct target queue depth application changes (James Smart)  [Orabug: 27912557]  
  - scsi: lpfc: Fix multiple PRLI completion error path (James Smart)  [Orabug: 27912557]  
  - scsi: lpfc: make several unions static, fix non-ANSI prototype (Colin Ian King)  [Orabug: 27912557]  
  - system panic with active bonding enabled via resilient_rdmaip (Sudhakar Dindukurti)  [Orabug: 28073806]  
  - KVM/VMX: Expose SSBD properly to guests (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Thomas Gleixner)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs: Rework spec_ctrl base and mask logic (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs: Expose x86_spec_ctrl_base directly (Thomas Gleixner)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs: Unify x86_spec_ctrl_{set_guest,restore_host} (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/speculation: Rework speculative_store_bypass_update() (Thomas Gleixner)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/speculation: Add virtualized speculative store bypass disable support (Tom Lendacky)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/speculation: Handle HT correctly on AMD (Thomas Gleixner)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/cpufeatures: Add FEATURE_ZEN (Thomas Gleixner)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/cpufeatures: Disentangle SSBD enumeration (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Thomas Gleixner)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/speculation: Use synthetic bits for IBRS/IBPB/STIBP (Borislav Petkov)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs: Rename SSBD_NO to SSB_NO (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - xen: Don't call non-Xen routines early in the boot (Boris Ostrovsky)  [Orabug: 28034177]  {CVE-2018-3639} 
  - KVM: SVM: Move spec control call after restore of GS (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/cpu: Make alternative_msr_write work for 32-bit code (Jim Mattson)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs: Fix the parameters alignment and missing void (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs: Make cpu_show_common() static (Jiri Kosina)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs: Fix __ssb_select_mitigation() return type (Jiri Kosina)  [Orabug: 28034177]  {CVE-2018-3639} 
  - Documentation/spec_ctrl: Do some minor cleanups (Borislav Petkov)  [Orabug: 28034177]  {CVE-2018-3639} 
  - proc: Use underscores for SSBD in 'status' (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs: Rename _RDS to _SSBD (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/speculation: Make "seccomp" the default mode for Speculative Store Bypass (Kees Cook)  [Orabug: 28034177]  {CVE-2018-3639} 
  - seccomp: Move speculation migitation control to arch code (Thomas Gleixner)  [Orabug: 28034177]  {CVE-2018-3639} 
  - seccomp: Add filter flag to opt-out of SSB mitigation (Kees Cook)  [Orabug: 28034177]  {CVE-2018-3639} 
  - seccomp: Use PR_SPEC_FORCE_DISABLE (Thomas Gleixner)  [Orabug: 28034177]  {CVE-2018-3639} 
  - prctl: Add force disable speculation (Thomas Gleixner)  [Orabug: 28034177]  {CVE-2018-3639} 
  - seccomp: Enable speculation flaw mitigations (Kees Cook)  [Orabug: 28034177]  {CVE-2018-3639} 
  - proc: Provide details on speculation flaw mitigations (Kees Cook)  [Orabug: 28034177]  {CVE-2018-3639} 
  - nospec: Allow getting/setting on non-current task (Kees Cook)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs/IBRS: Disable SSB (RDS) if IBRS is selected for spectre_v2. (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/speculation: Add prctl for Speculative Store Bypass mitigation (Thomas Gleixner)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/process: Allow runtime control of Speculative Store Bypass (Thomas Gleixner)  [Orabug: 28034177]  {CVE-2018-3639} 
  - prctl: Add speculation control prctls (Thomas Gleixner)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/speculation: Create spec-ctrl.h to avoid include hell (Thomas Gleixner)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if requested (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs: Whitelist allowed SPEC_CTRL MSR values (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs/intel: Set proper CPU features and setup RDS (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/cpufeatures: Add X86_FEATURE_RDS (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs: Expose /sys/../spec_store_bypass (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs, KVM: Support the combination of guest and host IBRS (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs/IBRS: Warn if IBRS is enabled during boot. (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs/IBRS: Use variable instead of defines for enabling IBRS (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs: Concentrate bug reporting into a separate function (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs: Concentrate bug detection into a separate function (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/nospec: Simplify alternative_msr_write() (Linus Torvalds)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/bugs/IBRS: Turn on IBRS in spectre_v2_select_mitigation (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - x86/msr: Add SPEC_CTRL_IBRS.. (Konrad Rzeszutek Wilk)  [Orabug: 28034177]  {CVE-2018-3639} 
  - Revert "Add a SysRq option to lift kernel lockdown" (Victor Erminpour)  [Orabug: 27558617]  
  - uek-rpm: Enable CONFIG_QED_OOO option in UEK5 (Victor Erminpour)  [Orabug: 27774819]  
  - uek-rpm: aarch64 use 64K pagesize (Tom Saeger)  [Orabug: 28057643]  
  - Resilient RDMAIP should not attempt to failover/failback for the ports in grp 0 (Sudhakar Dindukurti)  [Orabug: 28049781]  
  - xfs: detect agfl count corruption and reset agfl (Brian Foster)  [Orabug: 28058921]  
  - xfs: convert XFS_AGFL_SIZE to a helper function (Dave Chinner)  [Orabug: 28058921]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1821.el7uek]
changelog:
  - Revert "mlx4: change the ICM table allocations to lowest needed size" (Håkon Bugge)  [Orabug: 27974953]  
  - sunrpc: Fix latency trace point crashes (Chuck Lever)   
  - sunrpc: Add static trace point to report RPC latency stats (Chuck Lever)   
  - add new checksum files for kABI; re-enable kABI checking (Dan Duval)  [Orabug: 27199028]  
  - Linux 4.14.42 (Greg Kroah-Hartman)   
  - proc: do not access cmdline nor environ from file-backed areas (Willy Tarreau)   {CVE-2018-1120} 
  - l2tp: revert "l2tp: fix missing print session offset info" (James Chapman)   
  - xfrm: fix xfrm_do_migrate() with AEAD e.g(AES-GCM) (Antony Antony)   
  - btrfs: Take trans lock before access running trans in check_delayed_ref (ethanwu)   
  - xfrm: Use __skb_queue_tail in xfrm_trans_queue (Herbert Xu)   
  - scsi: aacraid: Correct hba_send to include iu_type (Dave Carroll)   
  - udp: fix SO_BINDTODEVICE (Paolo Abeni)   
  - nsh: fix infinite loop (Eric Dumazet)   
  - net/mlx5e: Allow offloading ipv4 header re-write for icmp (Jianbo Liu)   
  - ipv6: fix uninit-value in ip6_multipath_l3_keys() (Eric Dumazet)   
  - hv_netvsc: set master device (Stephen Hemminger)   
  - net/mlx5: Avoid cleaning flow steering table twice during error flow (Talat Batheesh)   
  - net/mlx5e: TX, Use correct counter in dma_map error flow (Tariq Toukan)   
  - net: sched: fix error path in tcf_proto_create() when modules are not configured (Jiri Pirko)   
  - bonding: send learning packets for vlans on slave (Debabrata Banerjee)   
  - bonding: do not allow rlb updates to invalid mac (Debabrata Banerjee)   
  - tg3: Fix vunmap() BUG_ON() triggered from tg3_free_consistent(). (Michael Chan)   
  - tcp: ignore Fast Open on repair mode (Yuchung Cheng)   
  - tcp_bbr: fix to zero idle_restart only upon S/ACKed data (Neal Cardwell)   
  - sctp: use the old asoc when making the cookie-ack chunk in dupcook_d (Xin Long)   
  - sctp: remove sctp_chunk_put from fail_mark err path in sctp_ulpevent_make_rcvmsg (Xin Long)   
  - sctp: handle two v4 addrs comparison in sctp_inet6_cmp_addr (Xin Long)   
  - sctp: fix the issue that the cookie-ack with auth can't get processed (Xin Long)   
  - sctp: delay the authentication for the duplicated cookie-echo chunk (Xin Long)   
  - rds: do not leak kernel memory to user land (Eric Dumazet)   
  - r8169: fix powering up RTL8168h (Heiner Kallweit)   
  - qmi_wwan: do not steal interfaces from class drivers (Bjørn Mork)   
  - openvswitch: Don't swap table in nlattr_set() after OVS_ATTR_NESTED is found (Stefano Brivio)   
  - net/tls: Fix connection stall on partial tls record (Andre Tomt)   
  - net/tls: Don't recursively call push_record during tls_write_space callbacks (Dave Watson)   
  - net: support compat 64-bit time in {s,g}etsockopt (Lance Richardson)   
  - net_sched: fq: take care of throttled flows before reuse (Eric Dumazet)   
  - net sched actions: fix refcnt leak in skbmod (Roman Mashak)   
  - net/mlx5: E-Switch, Include VF RDMA stats in vport statistics (Adi Nissim)   
  - net/mlx5e: Err if asked to offload TC match on frag being first (Roi Dayan)   
  - net/mlx4_en: Verify coalescing parameters are in range (Moshe Shemesh)   
  - net/mlx4_en: Fix an error handling path in 'mlx4_en_init_netdev()' (Christophe JAILLET)   
  - net: ethernet: ti: cpsw: fix packet leaking in dual_mac mode (Grygorii Strashko)   
  - net: ethernet: sun: niu set correct packet size in skb (Rob Taglang)   
  - llc: better deal with too small mtu (Eric Dumazet)   
  - ipv4: fix memory leaks in udp_sendmsg, ping_v4_sendmsg (Andrey Ignatov)   
  - ipv4: fix fnhe usage by non-cached routes (Julian Anastasov)   
  - dccp: fix tasklet usage (Eric Dumazet)   
  - bridge: check iface upper dev when setting master via ioctl (Hangbin Liu)   
  - 8139too: Use disable_irq_nosync() in rtl8139_poll_controller() (Ingo Molnar)   
  - uek-rpm: aarch64 build using oracle-armtoolset (Tom Saeger)  [Orabug: 28022143]  
  - KVM: LAPIC: Apply change to TDCR right away to the timer (Wanpeng Li)  [Orabug: 27145550]  
  - arm64: iommu: default to iommu.passthrough=1 (Tom Saeger)  [Orabug: 27987050]  
  - uek-rpm: aarch64 make TORTURE modules debug only (Tom Saeger)  [Orabug: 28032744]  
  - uek-rpm: aarch64 enable QLOGIC modules (Tom Saeger)  [Orabug: 28021280]  
  - uek-rpm: aarch64 disable HARDENED_USERCOPY (Tom Saeger)  [Orabug: 27996695]  
  - uek-rpm: aarch64 disable modules that panic kernel (Tom Saeger)  [Orabug: 27999744]  
  - uek-rpm: aarch64 make olddefconfig for ARM SDEI (Tom Saeger)  [Orabug: 28022735]  
  - uek-rpm: Add kernel/drivers/crypto/ccp/ccp.ko to nano modules list (Liam Merwick)  [Orabug: 27854232]  
  - Linux 4.14.41 (Greg Kroah-Hartman)   
  - KVM: x86: remove APIC Timer periodic/oneshot spikes (Anthoine Bourgeois)   
  - KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Paul Mackerras)   
  - perf/x86: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Peter Zijlstra)   
  - perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[] (Peter Zijlstra)   
  - perf/x86/msr: Fix possible Spectre-v1 indexing in the MSR driver (Peter Zijlstra)   
  - perf/x86/cstate: Fix possible Spectre-v1 indexing for pkg_msr (Peter Zijlstra)   
  - perf/x86: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Peter Zijlstra)   
  - tracing/uprobe_event: Fix strncpy corner case (Masami Hiramatsu)   
  - sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Peter Zijlstra)   
  - smb3: directory sync should not return an error (Steve French)   
  - nvme: add quirk to force medium priority for SQ creation (Jens Axboe)   
  - thermal: exynos: Propagate error value from tmu_read() (Marek Szyprowski)   
  - thermal: exynos: Reading temperature makes sense only when TMU is turned on (Marek Szyprowski)   
  - Bluetooth: btusb: Only check needs_reset_resume DMI table for QCA rome chipsets (Hans de Goede)   
  - Bluetooth: btusb: Add Dell XPS 13 9360 to btusb_needs_reset_resume_table (Hans de Goede)   
  - Revert "Bluetooth: btusb: Fix quirk for Atheros 1525/QCA6174" (Hans de Goede)   
  - cpufreq: schedutil: Avoid using invalid next_freq (Rafael J. Wysocki)   
  - PCI / PM: Check device_may_wakeup() in pci_enable_wake() (Rafael J. Wysocki)   
  - PCI / PM: Always check PME wakeup capability for runtime wakeup support (Kai Heng Feng)   
  - atm: zatm: Fix potential Spectre v1 (Gustavo A. R. Silva)   
  - net: atm: Fix potential Spectre v1 (Gustavo A. R. Silva)   
  - drm/atomic: Clean private obj old_state/new_state in drm_atomic_state_default_clear() (Ville Syrjälä)   
  - drm/atomic: Clean old_state/new_state in drm_atomic_state_default_clear() (Ville Syrjälä)   
  - drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul)   
  - drm/i915: Fix drm:intel_enable_lvds ERROR message in kernel log (Florent Flament)   
  - drm/vc4: Fix scaling of uni-planar formats (Boris Brezillon)   
  - can: hi311x: Work around TX complete interrupt erratum (Lukas Wunner)   
  - can: hi311x: Acquire SPI lock on ->do_get_berr_counter (Lukas Wunner)   
  - can: kvaser_usb: Increase correct stats counter in kvaser_usb_rx_can_msg() (Jimmy Assarsson)   
  - ceph: fix rsize/wsize capping in ceph_direct_read_write() (Ilya Dryomov)   
  - mm, oom: fix concurrent munlock and oom reaper unmap, v3 (David Rientjes)   {CVE-2018-1000200} 
  - mm: sections are not offlined during memory hotremove (Pavel Tatashin)   
  - z3fold: fix reclaim lock-ups (Vitaly Wool)   
  - tracing: Fix regex_match_front() to not over compare the test string (Steven Rostedt (VMware))   
  - dm integrity: use kvfree for kvmalloc'd memory (Mikulas Patocka)   
  - libata: Apply NOLPM quirk for SanDisk SD7UB3Q*G1001 SSDs (Hans de Goede)   
  - rfkill: gpio: fix memory leak in probe error path (Johan Hovold)   
  - gpio: fix error path in lineevent_create (Uwe Kleine-König)   
  - gpio: fix aspeed_gpio unmask irq (Govert Overgaauw)   
  - gpioib: do not free unrequested descriptors (Timur Tabi)   
  - compat: fix 4-byte infoleak via uninitialized struct field (Jann Horn)   
  - arm64: Add work around for Arm Cortex-A55 Erratum 1024718 (Suzuki K Poulose)   
  - KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Paul Mackerras)   
  - KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier)   
  - KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Paul Mackerras)   
  - bdi: Fix oops in wb_workfn() (Jan Kara)   
  - bdi: wake up concurrent wb_shutdown() callers. (Tetsuo Handa)   
  - tcp: fix TCP_REPAIR_QUEUE bound checking (Eric Dumazet)   
  - perf: Remove superfluous allocation error check (Jiri Olsa)   
  - memcg: fix per_node_info cleanup (Michal Hocko)   
  - inetpeer: fix uninit-value in inet_getpeer (Eric Dumazet)   
  - soreuseport: initialise timewait reuseport field (Eric Dumazet)   
  - ipv4: fix uninit-value in ip_route_output_key_hash_rcu() (Eric Dumazet)   
  - dccp: initialize ireq->ir_mark (Eric Dumazet)   
  - net: fix uninit-value in __hw_addr_add_ex() (Eric Dumazet)   
  - net: initialize skb->peeked when cloning (Eric Dumazet)   
  - net: fix rtnh_ok() (Eric Dumazet)   
  - netlink: fix uninit-value in netlink_sendmsg (Eric Dumazet)   
  - crypto: af_alg - fix possible uninit-value in alg_bind() (Eric Dumazet)   
  - kcm: Call strp_stop before strp_done in kcm_attach (Tom Herbert)   
  - netfilter: ebtables: don't attempt to allocate 0-sized compat array (Florian Westphal)   
  - ipvs: fix rtnl_lock lockups caused by start_sync_thread (Julian Anastasov)   
  - Added IB diag counters from UEK2 (Chris Gray)  [Orabug: 27860753]  
  - uek-rpm: Run 'make olddefconfig' for UEK5 v4.14.35 (Victor Erminpour)  [Orabug: 27981731]  
  - uek-rpm: Enable silently dropped options from UEK4 (Victor Erminpour)  [Orabug: 27834007]  
  - scsi: esas2r: remove initialization / cleanup dead wood (Christoph Hellwig)  [Orabug: 28011715]  
  - rdmaip: ib0 is already part of another failover group (Sudhakar Dindukurti)  [Orabug: 27818669]  
  - ARM: dts: bcm2837-rpi-3-b: add GPIO expander (Baruch Siach)  [Orabug: 28012020]  
  - ARM: dts: bcm283x: Fix pin function of JTAG pins (Henry Zhang)  [Orabug: 28012020]  
  - arm64: dts: broadcom: Add reference to Raspberry Pi 3 B+ (Stefan Wahren)  [Orabug: 28012020]  
  - ARM: dts: bcm2837: Add Raspberry Pi 3 B+ (Stefan Wahren)  [Orabug: 28012020]  
  - dt-bindings: bcm: Add Raspberry Pi 3 B+ (Stefan Wahren)  [Orabug: 28012020]  
  - ARM: dts: bcm2837: Add missing GPIOs of Expander (Stefan Wahren)  [Orabug: 28012020]  
  - ARM: dts: bcm283x: Fix PWM pin assignment (Stefan Wahren)  [Orabug: 28012020]  
  - ARM: dts: bcm283x: Use GPIO polarity defines consistently (Stefan Wahren)  [Orabug: 28012020]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1820.el7uek]
changelog:
  - Revert "enable kABI checking in spec file" (Jack Vogel)   
  - Change the SUBLEVEL to conform to UEK5 spec (Jack Vogel)   
  - IB/core: Introduce and use rdma_create_user_ah (Parav Pandit)  [Orabug: 27641510]  
  - sctp: Copy struct sctp_sock.autoclose to userspace using put_user() (David Windsor)  [Orabug: 27908547]  
  - lkdtm: Update usercopy tests for whitelisting (Kees Cook)  [Orabug: 27908547]  
  - arm: Implement thread_struct whitelist for hardened usercopy (Kees Cook)  [Orabug: 27908547]  
  - arm64: Implement thread_struct whitelist for hardened usercopy (Kees Cook)  [Orabug: 27908547]  
  - x86: Implement thread_struct whitelist for hardened usercopy (Kees Cook)  [Orabug: 27908547]  
  - fork: Provide usercopy whitelisting for task_struct (Kees Cook)  [Orabug: 27908547]  
  - net: Restrict unwhitelisted proto caches to size 0 (Kees Cook)  [Orabug: 27908547]  
  - sctp: Define usercopy region in SCTP proto slab cache (David Windsor)  [Orabug: 27908547]  
  - caif: Define usercopy region in caif proto slab cache (David Windsor)  [Orabug: 27908547]  
  - ip: Define usercopy region in IP proto slab cache (David Windsor)  [Orabug: 27908547]  
  - scsi: Define usercopy region in scsi_sense_cache slab cache (David Windsor)  [Orabug: 27908547]  
  - orangefs: Define usercopy region in orangefs_inode_cache slab cache (David Windsor)  [Orabug: 27908547]  
  - exofs: Define usercopy region in exofs_inode_cache slab cache (David Windsor)  [Orabug: 27908547]  
  - befs: Define usercopy region in befs_inode_cache slab cache (David Windsor)  [Orabug: 27908547]  
  - jfs: Define usercopy region in jfs_ip slab cache (David Windsor)  [Orabug: 27908547]  
  - vfs: Copy struct mount.mnt_id to userspace using put_user() (David Windsor)  [Orabug: 27908547]  
  - dcache: Define usercopy region in dentry_cache slab cache (David Windsor)  [Orabug: 27908547]  
  - ext4: Define usercopy region in ext4_inode_cache slab cache (David Windsor)  [Orabug: 27908547]  
  - ext2: Define usercopy region in ext2_inode_cache slab cache (David Windsor)  [Orabug: 27908547]  
  - ufs: Define usercopy region in ufs_inode_cache slab cache (David Windsor)  [Orabug: 27908547]  
  - vxfs: Define usercopy region in vxfs_inode slab cache (David Windsor)  [Orabug: 27908547]  
  - cifs: Define usercopy region in cifs_request slab cache (David Windsor)  [Orabug: 27908547]  
  - net: Define usercopy region in struct proto slab cache (David Windsor)  [Orabug: 27908547]  
  - fork: Define usercopy region in mm_struct slab caches (David Windsor)  [Orabug: 27908547]  
  - fork: Define usercopy region in thread_stack slab caches (David Windsor)  [Orabug: 27908547]  
  - net: Whitelist the skbuff_head_cache "cb" field (Kees Cook)  [Orabug: 27908547]  
  - vfs: Define usercopy region in names_cache slab caches (David Windsor)  [Orabug: 27908547]  
  - sunrpc: Add static trace point to report result of RPC ping (Chuck Lever)   
  - uek-rpm: Remove deprecated config options from UEK5 (Victor Erminpour)  [Orabug: 27981766]  
  - xfs: set format back to extents if xfs_bmap_extents_to_btree (Eric Sandeen)  [Orabug: 27989510]  {CVE-2018-10323} 
  - Minor typos in resilient_rdmaip parameter description (Sudhakar Dindukurti)  [Orabug: 27890256]  
  - kbuild: arm64: Set objects.builtin dependency to Image for CONFIG_CTF (Dave Kleikamp)  [Orabug: 27959642]  
  - uek-rpm: enable building SHA3 algorithms (Khalid Aziz)  [Orabug: 28001020]  
  - add correct copyright/license info to uek_kabi.h (Dan Duval)  [Orabug: 27199028]  
  - initial kABI whitelists for UEK5 (Dan Duval)  [Orabug: 27199028]  
  - enable kABI checking in spec file (Dan Duval)  [Orabug: 27199028]  
  - add padding to writeback_control structure for future expansion (Dan Duval)  [Orabug: 27199028]  
  - add padding to scheduler data structures for future expansion (Dan Duval)  [Orabug: 27199028]  
  - add padding to PCI data structures for future expansion (Dan Duval)  [Orabug: 27199028]  
  - add padding to memory-management data structures for future expansion (Dan Duval)  [Orabug: 27199028]  
  - add padding to networking structures for future expansion (Dan Duval)  [Orabug: 27199028]  
  - add padding to cgroup structures for future expansion (Dan Duval)  [Orabug: 27199028]  
  - add padding to block-device data structures for future expansion (Dan Duval)  [Orabug: 27199028]  
  - add padding to scsi data structures for future expansion (Dan Duval)  [Orabug: 27199028]  
  - kABI padding for Oracle-specific future extensions (Dan Duval)  [Orabug: 27199028]  
  - Revert "qla2xxx: Remove unavailable firmware files" (Somasundaram Krishnasamy)  [Orabug: 27995741]  
  - uek-rpm: Update linux-firmware dependency to latest (Somasundaram Krishnasamy)  [Orabug: 27989702]  
  - arm64: sdei: Add trampoline code for remapping the kernel (James Morse)  [Orabug: 27949175]  
  - arm64: mmu: add the entry trampolines start/end section markers into sections.h (James Morse)  [Orabug: 27949175]  
  - firmware: arm_sdei: Discover SDEI support via ACPI (James Morse)  [Orabug: 27949175]  
  - arm64: acpi: Remove __init from acpi_psci_use_hvc() for use by SDEI (James Morse)  [Orabug: 27949175]  
  - firmware: arm_sdei: add support for CPU private events (James Morse)  [Orabug: 27949175]  
  - firmware: arm_sdei: Add support for CPU and system power states (James Morse)  [Orabug: 27949175]  
  - arm64: kernel: Add arch-specific SDEI entry code and CPU masking (James Morse)  [Orabug: 27949175]  
  - arm64: uaccess: Add PAN helper (James Morse)  [Orabug: 27949175]  
  - arm64: Add vmap_stack header file (James Morse)  [Orabug: 27949175]  
  - firmware: arm_sdei: Add driver for Software Delegated Exceptions (James Morse)  [Orabug: 27949175]  
  - Docs: dt: add devicetree binding for describing arm64 SDEI firmware (James Morse)  [Orabug: 27949175]  
  - arm64: alternatives: use tpidr_el2 on VHE hosts (James Morse)  [Orabug: 27949175]  
  - Garbled log messages related to resilient_rdmaip driver (Sudhakar Dindukurti)  [Orabug: 27935928]  
  - Linux 4.14.40 (Greg Kroah-Hartman)   
  - tracing: Fix bad use of igrab in trace_uprobe.c (Song Liu)   
  - irqchip/qcom: Fix check for spurious interrupts (Agustin Vega-Frias)   
  - platform/x86: asus-wireless: Fix NULL pointer dereference (João Paulo Rechi Vita)   
  - usb: musb: trace: fix NULL pointer dereference in musb_g_tx() (Bin Liu)   
  - usb: musb: host: fix potential NULL pointer dereference (Bin Liu)   
  - USB: serial: option: adding support for ublox R410M (SZ Lin (林上智))   
  - USB: serial: option: reimplement interface masking (Johan Hovold)   
  - USB: Accept bulk endpoints with 1024-byte maxpacket (Alan Stern)   
  - usb: dwc3: gadget: Fix list_del corruption in dwc3_ep_dequeue (Mayank Rana)   
  - USB: serial: visor: handle potential invalid device configuration (Greg Kroah-Hartman)   
  - errseq: Always report a writeback error once (Matthew Wilcox)   
  - test_firmware: fix setting old custom fw path back on exit, second try (Ben Hutchings)   
  - drm/bridge: vga-dac: Fix edid memory leak (Sean Paul)   
  - drm/vmwgfx: Fix a buffer object leak (Thomas Hellstrom)   
  - iw_cxgb4: Atomically flush per QP HW CQEs (Bharat Potnuri)   
  - IB/hfi1: Fix NULL pointer dereference when invalid num_vls is used (Sebastian Sanchez)   
  - IB/hfi1: Fix loss of BECN with AHG (Mike Marciniszyn)   
  - IB/hfi1: Fix handling of FECN marked multicast packet (Mike Marciniszyn)   
  - IB/mlx5: Use unlimited rate when static rate is not supported (Danit Goldberg)   
  - NET: usb: qmi_wwan: add support for ublox R410M PID 0x90b2 (SZ Lin (林上智))   
  - RDMA/mlx5: Protect from shift operand overflow (Leon Romanovsky)   
  - RDMA/mlx5: Fix multiple NULL-ptr deref errors in rereg_mr flow (Leon Romanovsky)   
  - RDMA/ucma: Allow resolving address w/o specifying source address (Roland Dreier)   
  - RDMA/cxgb4: release hw resources on device removal (Raju Rangoju)   
  - xfs: prevent creating negative-sized file via INSERT_RANGE (Darrick J. Wong)   
  - rtlwifi: cleanup 8723be ant_sel definition (Ping-Ke Shih)   
  - rtlwifi: btcoex: Add power_on_setting routine (Ping-Ke Shih)   
  - Input: atmel_mxt_ts - add touchpad button mapping for Samsung Chromebook Pro (Vittorio Gambaletta (VittGam))   
  - Input: leds - fix out of bound access (Dmitry Torokhov)   
  - scsi: target: Fix fortify_panic kernel exception (Bryant G Ly)   
  - tracepoint: Do not warn on ENOMEM (Mathieu Desnoyers)   
  - ALSA: aloop: Add missing cable lock to ctl API callbacks (Takashi Iwai)   
  - ALSA: aloop: Mark paused device as inactive (Robert Rosengren)   
  - ALSA: dice: fix kernel NULL pointer dereference due to invalid calculation for array index (Takashi Sakamoto)   
  - ALSA: seq: Fix races at MIDI encoding in snd_virmidi_output_trigger() (Takashi Iwai)   
  - ALSA: pcm: Check PCM state at xfern compat ioctl (Takashi Iwai)   
  - ALSA: hda - Fix incorrect usage of IS_REACHABLE() (Takashi Iwai)   
  - USB: serial: option: Add support for Quectel EP06 (Kristian Evensen)   
  - ACPI / button: make module loadable when booted in non-ACPI mode (Ard Biesheuvel)   
  - crypto: talitos - fix IPsec cipher in length (LEROY Christophe)   
  - percpu: include linux/sched.h for cond_resched() (Tejun Heo)   
  - net: don't call update_pmtu unconditionally (Nicolas Dichtel)   
  - geneve: update skb dst pmtu on tx path (Xin Long)   
  - Linux 4.14.39 (Greg Kroah-Hartman)   
  - powerpc/eeh: Fix race with driver un/bind (Michael Neuling)   
  - arm/arm64: KVM: Add PSCI version selection API (Marc Zyngier)   
  - tick/sched: Do not mess with an enqueued hrtimer (Thomas Gleixner)   
  - x86/microcode: Do not exit early from __reload_late() (Borislav Petkov)   
  - x86/microcode/intel: Save microcode patch unconditionally (Borislav Petkov)   
  - x86/smpboot: Don't use mwait_play_dead() on AMD systems (Yazen Ghannam)   
  - x86/ipc: Fix x32 version of shmid64_ds and msqid64_ds (Arnd Bergmann)   
  - tools/lib/subcmd/pager.c: do not alias select() params (Sergey Senozhatsky)   
  - objtool, perf: Fix GCC 8 -Wrestrict error (Josh Poimboeuf)   
  - drm/i915: Enable display WA#1183 from its correct spot (Imre Deak)   
  - drm/amdgpu: set COMPUTE_PGM_RSRC1 for SGPR/VGPR clearing shaders (Nicolai Hähnle)   
  - rtc: opal: Fix OPAL RTC driver OPAL_BUSY loops (Nicholas Piggin)   
  - cpufreq: powernv: Fix hardlockup due to synchronous smp_call in timer interrupt (Shilpasri G Bhat)   
  - earlycon: Use a pointer table to fix __earlycon_table stride (Daniel Kurtz)   
  - fpga-manager: altera-ps-spi: preserve nCONFIG state (Anatolij Gustschin)   
  - libceph: validate con->state at the top of try_write() (Ilya Dryomov)   
  - libceph: reschedule a tick in finish_hunting() (Ilya Dryomov)   
  - libceph: un-backoff on tick when we have a authenticated session (Ilya Dryomov)   
  - ASoC: fsl_esai: Fix divisor calculation failure at lower ratio (Nicolin Chen)   
  - crypto: drbg - set freed buffers to NULL (Stephan Mueller)   
  - powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Alistair Popple)   
  - powerpc/mm: Flush cache on memory hot(un)plug (Balbir Singh)   
  - KVM: arm/arm64: Close VMID generation race (Marc Zyngier)   
  - ARM: socfpga_defconfig: Remove QSPI Sector 4K size force (Thor Thayer)   
  - ARM: amba: Don't read past the end of sysfs "driver_override" buffer (Geert Uytterhoeven)   
  - ARM: amba: Fix race condition with driver_override (Geert Uytterhoeven)   
  - ARM: amba: Make driver_override output consistent with other buses (Geert Uytterhoeven)   
  - PCI: aardvark: Fix PCIe Max Read Request Size setting (Evan Wang)   
  - PCI: aardvark: Use ISR1 instead of ISR0 interrupt in legacy irq mode (Victor Gu)   
  - PCI: aardvark: Set PIO_ADDR_LS correctly in advk_pcie_rd_conf() (Victor Gu)   
  - PCI: aardvark: Fix logic in advk_pcie_{rd,wr}_conf() (Victor Gu)   
  - ANDROID: binder: prevent transactions into own process. (Martijn Coenen)   
  - vfio: ccw: process ssch with interrupts disabled (Cornelia Huck)   
  - bfq-iosched: ensure to clear bic/bfqq pointers when preparing request (Jens Axboe)   
  - scsi: sd: Defer spinning up drive while SANITIZE is in progress (Mahesh Rajashekhara)   
  - kobject: don't use WARN for registration failures (Dmitry Vyukov)   
  - mtd: rawnand: tango: Fix struct clk memory leak (Marc Gonzalez)   
  - mtd: cfi: cmdset_0002: Do not allow read/write to suspend erase block. (Joakim Tjernlund)   
  - mtd: cfi: cmdset_0001: Workaround Micron Erase suspend bug. (Joakim Tjernlund)   
  - mtd: cfi: cmdset_0001: Do not allow read/write to suspend erase block. (Joakim Tjernlund)   
  - mtd: spi-nor: cadence-quadspi: Fix page fault kernel panic (Thor Thayer)   
  - ALSA: hda/realtek - change the location for one of two front mics (Kailang Yang)   
  - ALSA: hda/realtek - Update ALC255 depop optimize (Kailang Yang)   
  - ALSA: hda/realtek - Add some fixes for ALC233 (Kailang Yang)   
  - ALSA: hda: Hardening for potential Spectre v1 (Takashi Iwai)   
  - ALSA: seq: oss: Hardening for potential Spectre v1 (Takashi Iwai)   
  - ALSA: seq: oss: Fix unbalanced use lock for synth MIDI device (Takashi Iwai)   
  - ALSA: core: Report audio_tstamp in snd_pcm_sync_ptr (David Henningsson)   
  - ALSA: pcm: Return negative delays from SNDRV_PCM_IOCTL_DELAY. (Jeffery Miller)   
  - ALSA: control: Hardening for potential Spectre v1 (Takashi Iwai)   
  - ALSA: rme9652: Hardening for potential Spectre v1 (Takashi Iwai)   
  - ALSA: hdspm: Hardening for potential Spectre v1 (Takashi Iwai)   
  - ALSA: asihpi: Hardening for potential Spectre v1 (Takashi Iwai)   
  - ALSA: opl3: Hardening for potential Spectre v1 (Takashi Iwai)   
  - ALSA: hda - Skip jack and others for non-existing PCM streams (Takashi Iwai)   
  - ALSA: dice: fix error path to destroy initialized stream data (Takashi Sakamoto)   
  - ALSA: dice: fix OUI for TC group (Takashi Sakamoto)   
  - tty: Use __GFP_NOFAIL for tty_ldisc_get() (Tetsuo Handa)   
  - tty: Avoid possible error pointer dereference at tty_ldisc_restore(). (Tetsuo Handa)   
  - tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set (Tony Lindgren)   
  - tty: n_gsm: Fix long delays with control frame timeouts in ADM mode (Tony Lindgren)   
  - tty: Don't call panic() at tty_ldisc_init() (Tetsuo Handa)   
  - drm/virtio: fix vq wait_event condition (Gerd Hoffmann)   
  - virtio_console: reset on out of memory (Michael S. Tsirkin)   
  - virtio_console: move removal code (Michael S. Tsirkin)   
  - virtio_console: drop custom control queue cleanup (Michael S. Tsirkin)   
  - virtio_console: free buffers after reset (Michael S. Tsirkin)   
  - virtio_console: don't tie bufs to a vq (Michael S. Tsirkin)   
  - virtio: add ability to iterate over vqs (Michael S. Tsirkin)   
  - ALSA: usb-audio: Skip broken EU on Dell dock USB-audio (Takashi Iwai)   
  - USB: Increment wakeup count on remote wakeup. (Ravi Chandra Sadineni)   
  - usb: core: Add quirk for HP v222w 16GB Mini (Kamil Lulko)   
  - usb: typec: ucsi: Increase command completion timeout value (Heikki Krogerus)   
  - USB: serial: cp210x: add ID for NI USB serial console (Kyle Roeschley)   
  - USB: serial: ftdi_sio: use jtag quirk for Arrow USB Blaster (Vasyl Vavrychuk)   
  - USB: serial: simple: add libtransistor console (Collin May)   
  - xhci: Fix USB ports for Dell Inspiron 5775 (Kai-Heng Feng)   
  - Revert "xhci: plat: Register shutdown for xhci_plat" (Greg Kroah-Hartman)   
  - usbip: vhci_hcd: check rhport before using in vhci_hub_control() (Shuah Khan)   
  - usbip: vhci_hcd: Fix usb device and sockfd leaks (Shuah Khan)   
  - usbip: usbip_host: fix to hold parent lock for device_attach() calls (Shuah Khan)   
  - usbip: usbip_event: fix to not print kernel pointer address (Shuah Khan)   
  - random: rate limit unseeded randomness warnings (Theodore Ts'o)   
  - random: fix possible sleeping allocation from irq context (Theodore Ts'o)   
  - random: set up the NUMA crng instances after the CRNG is fully initialized (Theodore Ts'o)   {CVE-2018-1108} 
  - ext4: fix bitmap position validation (Lukas Czerner)   
  - ext4: add validity checks for bitmap block numbers (Theodore Ts'o)   {CVE-2018-1093} 
  - ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs (Theodore Ts'o)   
  - ext4: set h_journal if there is a failure starting a reserved handle (Theodore Ts'o)   
  - ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS (Eric Biggers)   
  - Linux 4.14.38 (Greg Kroah-Hartman)   
  - ACPI / video: Only default only_lcd to true on Win8-ready _desktops_ (Hans de Goede)   
  - s390/uprobes: implement arch_uretprobe_is_alive() (Heiko Carstens)   
  - s390/dasd: fix IO error for newly defined devices (Stefan Haberland)   
  - s390/cio: update chpid descriptor after resource accessibility event (Sebastian Ott)   
  - tracing: Fix missing tab for hwlat_detector print format (Peter Xu)   
  - block/swim: Fix IO error at end of medium (Finn Thain)   
  - block/swim: Fix array bounds check (Finn Thain)   
  - block/swim: Select appropriate drive on device open (Finn Thain)   
  - block/swim: Rename macros to avoid inconsistent inverted logic (Finn Thain)   
  - block/swim: Remove extra put_disk() call from error path (Finn Thain)   
  - block/swim: Don't log an error message for an invalid ioctl (Finn Thain)   
  - block/swim: Check drive type (Finn Thain)   
  - m68k/mac: Don't remap SWIM MMIO region (Finn Thain)   
  - fsnotify: Fix fsnotify_mark_connector race (Robert Kolchmeyer)   
  - cdrom: information leak in cdrom_ioctl_media_changed() (Dan Carpenter)   
  - scsi: mptsas: Disable WRITE SAME (Martin K. Petersen)   
  - commoncap: Handle memory allocation failure. (Tetsuo Handa)   
  - Revert "mm/hmm: fix header file if/else/endif maze" (Greg Kroah-Hartman)   
  - arm64: dts: rockchip: remove vdd_log from rk3399-puma (Klaus Goger)   
  - microblaze: Setup dependencies for ASM optimized lib functions (Michal Simek)   
  - s390: correct module section names for expoline code revert (Martin Schwidefsky)   
  - s390: correct nospec auto detection init order (Martin Schwidefsky)   
  - s390: add sysfs attributes for spectre (Martin Schwidefsky)   
  - s390: report spectre mitigation via syslog (Martin Schwidefsky)   
  - s390: add automatic detection of the spectre defense (Martin Schwidefsky)   
  - s390: move nobp parameter functions to nospec-branch.c (Martin Schwidefsky)   
  - s390/entry.S: fix spurious zeroing of r0 (Christian Borntraeger)   
  - s390: do not bypass BPENTER for interrupt system calls (Martin Schwidefsky)   
  - s390: Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Eugeniu Rosca)   
  - KVM: s390: force bp isolation for VSIE (Christian Borntraeger)   
  - s390: introduce execute-trampolines for branches (Martin Schwidefsky)   
  - s390: run user space and KVM guests with modified branch prediction (Martin Schwidefsky)   
  - s390: add options to change branch prediction behaviour for the kernel (Martin Schwidefsky)   
  - s390/alternative: use a copy of the facility bit mask (Martin Schwidefsky)   
  - s390: add optimized array_index_mask_nospec (Martin Schwidefsky)   
  - s390: scrub registers on kernel entry and KVM exit (Martin Schwidefsky)   
  - KVM: s390: wire up bpb feature (Christian Borntraeger)   
  - s390: enable CPU alternatives unconditionally (Heiko Carstens)   
  - s390: introduce CPU alternatives (Vasily Gorbik)   
  - virtio_net: fix adding vids on big-endian (Michael S. Tsirkin)   
  - virtio_net: split out ctrl buffer (Michael S. Tsirkin)   
  - net: ethernet: ti: cpsw: fix tx vlan priority mapping (Ivan Khoronzhuk)   
  - llc: fix NULL pointer deref for SOCK_ZAPPED (Cong Wang)   
  - llc: hold llc_sap before release_sock() (Cong Wang)   
  - net: sched: ife: check on metadata length (Alexander Aring)   
  - net: sched: ife: handle malformed tlv length (Alexander Aring)   
  - tcp: clear tp->packets_out when purging write queue (Soheil Hassas Yeganeh)   
  - net: sched: ife: signal not finding metaid (Alexander Aring)   
  - strparser: Fix incorrect strp->need_bytes value. (Doron Roberts-Kedes)   
  - amd-xgbe: Only use the SFP supported transceiver signals (Tom Lendacky)   
  - strparser: Do not call mod_delayed_work with a timeout of LONG_MAX (Doron Roberts-Kedes)   
  - amd-xgbe: Improve KR auto-negotiation and training (Tom Lendacky)   
  - sctp: do not check port in sctp_inet6_cmp_addr (Xin Long)   
  - amd-xgbe: Add pre/post auto-negotiation phy hooks (Tom Lendacky)   
  - vlan: Fix reading memory beyond skb->tail in skb_vlan_tagged_multi (Toshiaki Makita)   
  - pppoe: check sockaddr length in pppoe_connect() (Guillaume Nault)   
  - tipc: add policy for TIPC_NLA_NET_ADDR (Eric Dumazet)   
  - packet: fix bitfield update race (Willem de Bruijn)   
  - team: fix netconsole setup over team (Xin Long)   
  - net/smc: fix shutdown in state SMC_LISTEN (Ursula Braun)   
  - team: avoid adding twice the same option to the event list (Paolo Abeni)   
  - net: fix deadlock while clearing neighbor proxy table (Wolfgang Bumiller)   
  - tcp: md5: reject TCP_MD5SIG or TCP_MD5SIG_EXT on established sockets (Eric Dumazet)   
  - net: af_packet: fix race in PACKET_{R|T}X_RING (Eric Dumazet)   
  - tcp: don't read out-of-bounds opsize (Jann Horn)   
  - llc: delete timers synchronously in llc_sk_free() (Cong Wang)   
  - net: validate attribute sizes in neigh_dump_table() (Eric Dumazet)   
  - l2tp: check sockaddr length in pppol2tp_connect() (Guillaume Nault)   
  - KEYS: DNS: limit the length of option strings (Eric Biggers)   
  - ipv6: sr: fix NULL pointer dereference in seg6_do_srh_encap()- v4 pkts (Ahmed Abdelsalam)   
  - ipv6: add RTA_TABLE and RTA_PREFSRC to rtm_ipv6_policy (Eric Dumazet)   
  - bonding: do not set slave_dev npinfo before slave_enable_netpoll in bond_enslave (Xin Long)   
  - Revert "ath10k: send (re)assoc peer command when NSS changed" (Karthikeyan Periyasamy)   
  - tpm: add retry logic (James Bottomley)   
  - tpm: tpm-interface: fix tpm_transmit/_cmd kdoc (Winkler, Tomas)   
  - tpm: cmd_ready command can be issued only after granting locality (Tomas Winkler)   
  - i40e: Fix attach VF to VM issue (Paweł Jabłoński)   
  - drm: bridge: dw-hdmi: Fix overflow workaround for Amlogic Meson GX SoCs (Neil Armstrong)   
  - Revert "pinctrl: intel: Initialize GPIO properly when used through irqchip" (Greg Kroah-Hartman)   
  - Linux 4.14.37 (Greg Kroah-Hartman)   
  - mac80211_hwsim: fix use-after-free bug in hwsim_exit_net (Benjamin Beichler)   
  - Revert "KVM: X86: Fix SMRAM accessing even if VM is shutdown" (Sean Christopherson)   
  - RDMA/mlx5: Fix NULL dereference while accessing XRC_TGT QPs (Leon Romanovsky)   
  - perf: Return proper values for user stack errors (Jiri Olsa)   
  - perf: Fix sample_max_stack maximum check (Jiri Olsa)   
  - netfilter: x_tables: limit allocation requests for blob rule heads (Florian Westphal)   
  - netfilter: compat: reject huge allocation requests (Florian Westphal)   
  - netfilter: compat: prepare xt_compat_init_offsets to return errors (Florian Westphal)   
  - netfilter: x_tables: add counters allocation wrapper (Florian Westphal)   
  - netfilter: x_tables: cap allocations at 512 mbyte (Florian Westphal)   
  - alarmtimer: Init nanosleep alarm timer on stack (Thomas Gleixner)   
  - RDMA/core: Reduce poll batch for direct cq polling (Max Gurtovoy)   
  - irqchip/gic-v3: Change pr_debug message to pr_devel (Mark Salter)   
  - cpumask: Make for_each_cpu_wrap() available on UP as well (Michael Kelley)   
  - irqchip/gic-v3: Ignore disabled ITS nodes (Stephen Boyd)   
  - perf test: Fix test trace+probe_libc_inet_pton.sh for s390x (Thomas Richter)   
  - powerpc/powernv: IMC fix out of bounds memory access at shutdown (Nicholas Piggin)   
  - locking/qspinlock: Ensure node->count is updated before initialising node (Will Deacon)   
  - x86/platform/UV: Fix GAM Range Table entries less than 1GB (mike.travis@hpe.com)   
  - powerpc/mm/hash64: Zero PGD pages on allocation (Aneesh Kumar K.V)   
  - vfs/proc/kcore, x86/mm/kcore: Fix SMAP fault when dumping vsyscall user page (Jia Zhang)   
  - PM / wakeirq: Fix unbalanced IRQ enable for wakeirq (Tony Lindgren)   
  - ACPI / EC: Restore polling during noirq suspend/resume phases (Rafael J. Wysocki)   
  - bpf: fix rlimit in reuseport net selftest (Daniel Borkmann)   
  - net: stmmac: discard disabled flags in interrupt status register (Niklas Cassel)   
  - SUNRPC: Don't call __UDPX_INC_STATS() from a preemptible context (Trond Myklebust)   
  - KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Paul Mackerras)   
  - tools/libbpf: handle issues with bpf ELF objects containing .eh_frames (Jesper Dangaard Brouer)   
  - net: Extra '_get' in declaration of arch_get_platform_mac_address (Mathieu Malaterre)   
  - svcrdma: Fix Read chunk round-up (Chuck Lever)   
  - rxrpc: Don't put crypto buffers on the stack (David Howells)   
  - selftests/ftrace: Add some missing glob checks (Steven Rostedt (VMware))   
  - cpufreq: intel_pstate: Enable HWP during system resume on CPU0 (Chen Yu)   
  - bcache: return attach error when no cache set exist (Tang Junhui)   
  - bcache: fix for data collapse after re-attaching an attached device (Tang Junhui)   
  - bcache: fix for allocator and register thread race (Tang Junhui)   
  - bcache: properly set task state in bch_writeback_thread() (Coly Li)   
  - cifs: silence compiler warnings showing up with gcc-8.0.0 (Arnd Bergmann)   
  - PM / domains: Fix up domain-idle-states OF parsing (Ulf Hansson)   
  - proc: fix /proc/*/map_files lookup (Alexey Dobriyan)   
  - arm64: spinlock: Fix theoretical trylock() A-B-A with LSE atomics (Will Deacon)   
  - RDS: IB: Fix null pointer issue (Guanglei Li)   
  - bpf: sockmap, fix leaking maps with attached but not detached progs (John Fastabend)   
  - xen/grant-table: Use put_page instead of free_page (Ross Lagerwall)   
  - xen-netfront: Fix race between device setup and open (Ross Lagerwall)   
  - perf evsel: Fix period/freq terms setup (Jiri Olsa)   
  - MIPS: Generic: Support GIC in EIC mode (Matt Redfearn)   
  - perf record: Fix period option handling (Jiri Olsa)   
  - MIPS: TXx9: use IS_BUILTIN() for CONFIG_LEDS_CLASS (Matt Redfearn)   
  - bpf: fix selftests/bpf test_kmod.sh failure when CONFIG_BPF_JIT_ALWAYS_ON=y (Yonghong Song)   
  - ACPI / scan: Use acpi_bus_get_status() to initialize ACPI_TYPE_DEVICE devs (Hans de Goede)   
  - ACPI / bus: Do not call _STA on battery devices with unmet dependencies (Hans de Goede)   
  - ACPI: processor_perflib: Do not send _PPC change notification if not ready (Chen Yu)   
  - firmware: dmi_scan: Fix handling of empty DMI strings (Jean Delvare)   
  - x86/dumpstack: Avoid uninitlized variable (Arnd Bergmann)   
  - x86/power: Fix swsusp_arch_resume prototype (Arnd Bergmann)   
  - netfilter: ipv6: nf_defrag: Kill frag queue on RFC2460 failure (Subash Abhinov Kasiviswanathan)   
  - s390/eadm: fix CONFIG_BLOCK include dependency (Sebastian Ott)   
  - drm/nouveau/pmu/fuc: don't use movw directly anymore (Karol Herbst)   
  - IB/core: Map iWarp AH type to undefined in rdma_ah_find_type (Don Hiatt)   
  - IB/ipoib: Fix for potential no-carrier state (Alex Estrin)   
  - IB/hfi1: Fix for potential refcount leak in hfi1_open_file() (Alex Estrin)   
  - IB/hfi1: Re-order IRQ cleanup to address driver cleanup race (Michael J. Ruhl)   
  - blk-mq: fix discard merge with scheduler attached (Jens Axboe)   
  - openvswitch: Remove padding from packet before L3+ conntrack processing (Ed Swierk)   
  - mm/fadvise: discard partial page if endbyte is also EOF (shidao.ytt)   
  - mm: pin address_space before dereferencing it while isolating an LRU page (Mel Gorman)   
  - mm: thp: use down_read_trylock() in khugepaged to avoid long block (Yang Shi)   
  - sparc64: update pmdp_invalidate() to return old pmd value (Nitin Gupta)   
  - asm-generic: provide generic_pmdp_establish() (Kirill A. Shutemov)   
  - mm/mempolicy: add nodes_empty check in SYSC_migrate_pages (Yisheng Xie)   
  - mm/mempolicy: fix the check of nodemask from user (Yisheng Xie)   
  - ocfs2: return error when we attempt to access a dirty bh in jbd2 (piaojun)   
  - ocfs2/acl: use 'ip_xattr_sem' to protect getting extended attribute (piaojun)   
  - ocfs2: return -EROFS to mount.ocfs2 if inode block is invalid (piaojun)   
  - fs/dax.c: release PMD lock even when there is no PMD support in DAX (Jan H. Schönherr)   
  - x86/kvm/vmx: do not use vm-exit instruction length for fast MMIO when running nested (Vitaly Kuznetsov)   
  - kvm: Map PFN-type memory regions as writable (if possible) (KarimAllah Ahmed)   
  - tcp_nv: fix potential integer overflow in tcpnv_acked (Gustavo A. R. Silva)   
  - netfilter: x_tables: fix pointer leaks to userspace (Dmitry Vyukov)   
  - x86/hyperv: Check for required priviliges in hyperv_init() (Vitaly Kuznetsov)   
  - gianfar: prevent integer wrapping in the rx handler (Andy Spencer)   
  - ntb_transport: Fix bug with max_mw_size parameter (Logan Gunthorpe)   
  - RDMA/mlx5: Avoid memory leak in case of XRCD dealloc failure (Leon Romanovsky)   
  - powerpc/numa: Ensure nodes initialized for hotplug (Michael Bringmann)   
  - powerpc/numa: Use ibm,max-associativity-domains to discover possible nodes (Michael Bringmann)   
  - samples/bpf: Partially fixes the bpf.o build (Mickaël Salaün)   
  - i40e: fix reported mask for ntuple filters (Jacob Keller)   
  - i40e: program fragmented IPv4 filter input set (Jacob Keller)   
  - ixgbe: don't set RXDCTL.RLPML for 82599 (Emil Tantilov)   
  - jffs2: Fix use-after-free bug in jffs2_iget()'s error handling path (Jake Daryll Obina)   
  - RDMA/uverbs: Use an unambiguous errno for method not supported (Jason Gunthorpe)   
  - crypto: artpec6 - remove select on non-existing CRYPTO_SHA384 (Corentin LABBE)   
  - device property: Define type of PROPERTY_ENRTY_*() macros (Andy Shevchenko)   
  - tty: serial: exar: Relocate sleep wake-up handling (Aaron Sierra)   
  - x86/hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov)   
  - fm10k: fix "failed to kill vid" message for VF (Ngai-Mint Kwan)   
  - igb: Clear TXSTMP when ptp_tx_work() is timeout (Daniel Hua)   
  - igb: Allow to remove administratively set MAC on VFs (Corinna Vinschen)   
  - ASoC: rockchip: Use dummy_dai for rt5514 dsp dailink (Jeffy Chen)   
  - blk-mq-debugfs: don't allow write on attributes with seq_operations set (Eryu Guan)   
  - KVM: s390: vsie: use READ_ONCE to access some SCB fields (David Hildenbrand)   
  - platform/x86: thinkpad_acpi: suppress warning about palm detection (David Herrmann)   
  - i40evf: ignore link up if not running (Alan Brady)   
  - i40evf: Don't schedule reset_task when device is being removed (Avinash Dayanand)   
  - bpf: test_maps: cleanup sockmaps when test ends (Prashant Bhole)   
  - block: Set BIO_TRACE_COMPLETION on new bio during split (Goldwyn Rodrigues)   
  - nfp: fix error return code in nfp_pci_probe() (Wei Yongjun)   
  - HID: roccat: prevent an out of bounds read in kovaplus_profile_activated() (Dan Carpenter)   
  - Input: stmfts - set IRQ_NOAUTOEN to the irq flag (Andi Shyti)   
  - scsi: fas216: fix sense buffer initialization (Arnd Bergmann)   
  - scsi: devinfo: fix format of the device list (Xose Vazquez Perez)   
  - f2fs: avoid hungtask when GC encrypted block if io_bits is set (Sheng Yong)   
  - RDMA/cma: Check existence of netdevice during port validation (Parav Pandit)   
  - Btrfs: raid56: fix race between merge_bio and rbio_orig_end_io (Liu Bo)   
  - Btrfs: fix unexpected EEXIST from btrfs_get_extent (Liu Bo)   
  - btrfs: fail mount when sb flag is not in BTRFS_SUPER_FLAG_SUPP (Anand Jain)   
  - Btrfs: fix scrub to repair raid6 corruption (Liu Bo)   
  - btrfs: Fix out of bounds access in btrfs_search_slot (Nikolay Borisov)   
  - Btrfs: set plug for fsync (Liu Bo)   
  - ipmi/powernv: Fix error return code in ipmi_powernv_probe() (Wei Yongjun)   
  - mac80211_hwsim: fix possible memory leak in hwsim_new_radio_nl() (weiyongjun (A))   
  - kconfig: Fix expr_free() E_NOT leak (Ulf Magnusson)   
  - kconfig: Fix automatic menu creation mem leak (Ulf Magnusson)   
  - kconfig: Don't leak main menus during parsing (Ulf Magnusson)   
  - watchdog: sp5100_tco: Fix watchdog disable bit (Guenter Roeck)   
  - PCI: Add dummy pci_irqd_intx_xlate() for CONFIG_PCI=n build (Niklas Cassel)   
  - MIPS: Fix clean of vmlinuz.{32,ecoff,bin,srec} (James Hogan)   
  - nfs: Do not convert nfs_idmap_cache_timeout to jiffies (Jan Chochol)   
  - IB/cq: Don't force IB_POLL_DIRECT poll context for ib_process_cq_direct (Sagi Grimberg)   
  - spi: a3700: Clear DATA_OUT when performing a read (Maxime Chevallier)   
  - net: stmmac: dwmac-meson8b: propagate rate changes to the parent clock (Martin Blumenstingl)   
  - net: stmmac: dwmac-meson8b: fix setting the RGMII TX clock on Meson8b (Martin Blumenstingl)   
  - ubifs: Fix uninitialized variable in search_dh_cookie() (Geert Uytterhoeven)   
  - blk-mq: turn WARN_ON in __blk_mq_run_hw_queue into printk (Ming Lei)   
  - dm mpath: return DM_MAPIO_REQUEUE on blk-mq rq allocation failure (Ming Lei)   
  - dm thin: fix documentation relative to low water mark threshold (mulhern)   
  - iommu/vt-d: Use domain instead of cache fetching (Peter Xu)   
  - powerpc: System reset avoid interleaving oops using die synchronisation (Nicholas Piggin)   
  - iommu/exynos: Don't unconditionally steal bus ops (Robin Murphy)   
  - perf record: Fix failed memory allocation for get_cpuid_str (Thomas Richter)   
  - tools lib traceevent: Fix get_field_str() for dynamic strings (Steven Rostedt (VMware))   
  - perf callchain: Fix attr.sample_max_stack setting (Arnaldo Carvalho de Melo)   
  - tools lib traceevent: Simplify pointer print logic and fix %pF (Steven Rostedt (VMware))   
  - perf unwind: Do not look just at the global callchain_param.record_mode (Arnaldo Carvalho de Melo)   
  - scsi: qla2xxx: Fix warning in qla2x00_async_iocb_timeout() (himanshu.madhani@cavium.com)   
  - i40iw: Zero-out consumer key on allocate stag for FMR (Shiraz Saleem)   
  - i40iw: Free IEQ resources (Mustafa Ismail)   
  - Input: synaptics - reset the ABS_X/Y fuzz after initializing MT axes (Peter Hutterer)   
  - libbpf: Makefile set specified permission mode (Jesper Dangaard Brouer)   
  - Input: psmouse - fix Synaptics detection when protocol is disabled (Dmitry Torokhov)   
  - PCI: Add function 1 DMA alias quirk for Marvell 9128 (Alex Williamson)   
  - selftest: ftrace: Fix to pick text symbols for kprobes (Masami Hiramatsu)   
  - xprtrdma: Fix backchannel allocation of extra rpcrdma_reps (Chuck Lever)   
  - platform/x86: dell-laptop: Filter out spurious keyboard backlight change events (Hans de Goede)   
  - KVM: s390: use created_vcpus in more places (Christian Borntraeger)   
  - tracing/hrtimer: Fix tracing bugs by taking all clock bases and modes into account (Anna-Maria Gleixner)   
  - netfilter: ipv6: nf_defrag: Pass on packets to stack per RFC2460 (Subash Abhinov Kasiviswanathan)   
  - KVM: PPC: Book3S HV: Enable migration of decrementer register (Paul Mackerras)   
  - RDMA/core: Clarify rdma_ah_find_type (Parav Pandit)   
  - kvm: x86: fix KVM_XEN_HVM_CONFIG ioctl (Paolo Bonzini)   
  - ASoC: au1x: Fix timeout tests in au1xac97c_ac97_read() (Dan Carpenter)   
  - ALSA: hda - Use IS_REACHABLE() for dependency on input (Takashi Iwai)   
  - ACPI / LPSS: Do not instiate platform_dev for devs without MMIO resources (Hans de Goede)   
  - NFSv4: always set NFS_LOCK_LOST when a lock is lost. (NeilBrown)   
  - x86/tsc: Allow TSC calibration without PIT (Peter Zijlstra)   
  - firewire-ohci: work around oversized DMA reads on JMicron controllers (Hector Martin)   
  - usb: musb: Fix external abort in musb_remove on omap2430 (Merlijn Wajer)   
  - usb: musb: call pm_runtime_{get,put}_sync before reading vbus registers (Merlijn Wajer)   
  - usb: musb: fix enumeration after resume (Andreas Kemnade)   
  - drm/i915/bxt, glk: Increase PCODE timeouts during CDCLK freq changing (Imre Deak)   
  - drm/i915: Fix LSPCON TMDS output buffer enabling from low-power state (Imre Deak)   
  - drm/i915: Do no use kfree() to free a kmem_cache_alloc() return value (Xidong Wang)   
  - drm/i915/audio: Fix audio detection issue on GLK (Gaurav K Singh)   
  - drm/i915/gvt: throw error on unhandled vfio ioctls (Gerd Hoffmann)   
  - drm/vc4: Fix memory leak during BO teardown (Daniel J Blueman)   
  - x86/tsc: Prevent 32bit truncation in calc_hpet_ref() (Xiaoming Gao)   
  - clocksource/imx-tpm: Correct -ETIME return condition check (Anson Huang)   
  - x86/acpi: Prevent X2APIC id 0xffffffff from being accounted (Dou Liyang)   
  - btrfs: fix unaligned access in readdir (David Sterba)   
  - cifs: do not allow creating sockets except with SMB1 posix exensions (Steve French)   
  - Linux 4.14.36 (Greg Kroah-Hartman)   
  - writeback: safer lock nesting (Greg Thelen)   
  - media: staging: lirc_zilog: incorrect reference counting (Sean Young)   
  - Revert "media: lirc_zilog: driver only sends LIRCCODE" (Sean Young)   
  - iwlwifi: add a bunch of new 9000 PCI IDs (Luca Coelho)   
  - iwlwifi: add shared clock PHY config flag for some devices (Luca Coelho)   
  - net: dsa: Discard frames from unused ports (Andrew Lunn)   
  - mm/filemap.c: fix NULL pointer in page_cache_tree_insert() (Matthew Wilcox)   
  - autofs: mount point create should honour passed in mode (Ian Kent)   
  - Don't leak MNT_INTERNAL away from internal mounts (Al Viro)   
  - rpc_pipefs: fix double-dput() (Al Viro)   
  - orangefs_kill_sb(): deal with allocation failures (Al Viro)   
  - hypfs_kill_super(): deal with failed allocations (Al Viro)   
  - jffs2_kill_sb(): deal with failed allocations (Al Viro)   
  - drm/i915: Correctly handle limited range YCbCr data on VLV/CHV (Ville Syrjälä)   
  - mmc: sdhci-pci: Only do AMD tuning for HS200 (Daniel Kurtz)   
  - fanotify: fix logic of events on child (Amir Goldstein)   
  - udf: Fix leak of UTF-16 surrogates into encoded strings (Jan Kara)   
  - powerpc/lib: Fix off-by-one in alternate feature patching (Michael Ellerman)   
  - powerpc/xive: Fix trying to "push" an already active pool VP (Benjamin Herrenschmidt)   
  - powerpc/eeh: Fix enabling bridge MMIO windows (Michael Neuling)   
  - MIPS: memset.S: Fix clobber of v1 in last_fixup (Matt Redfearn)   
  - MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup (Matt Redfearn)   
  - MIPS: memset.S: EVA & fault support for small_memset (Matt Redfearn)   
  - MIPS: uaccess: Add micromips clobbers to bzero invocation (Matt Redfearn)   
  - HID: wacom: bluetooth: send exit report for recent Bluetooth devices (Aaron Armstrong Skomra)   
  - HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device (Rodrigo Rivas Costa)   
  - HID: input: fix battery level reporting on BT mice (Dmitry Torokhov)   
  - random: add new ioctl RNDRESEEDCRNG (Theodore Ts'o)   
  - random: crng_reseed() should lock the crng instance that it is modifying (Theodore Ts'o)   
  - random: use a different mixing algorithm for add_device_randomness() (Theodore Ts'o)   {CVE-2018-1108} 
  - random: fix crng_ready() test (Theodore Ts'o)   {CVE-2018-1108} 
  - ALSA: hda/realtek - adjust the location of one mic (Hui Wang)   
  - ALSA: hda/realtek - set PINCFG_HEADSET_MIC to parse_flags (Hui Wang)   
  - ALSA: hda - New VIA controller suppor no-snoop path (David Wang)   
  - ALSA: rawmidi: Fix missing input substream checks in compat ioctls (Takashi Iwai)   
  - ALSA: line6: Use correct endpoint type for midi output (Fabián Inostroza)   
  - drm/radeon: Fix PCIe lane width calculation (Paul Parsons)   
  - drm/radeon: add PX quirk for Asus K73TK (Nico Sneck)   
  - drm/rockchip: Clear all interrupts before requesting the IRQ (Marc Zyngier)   
  - drm/amdgpu/si: implement get/set pcie_lanes asic callback (Alex Deucher)   
  - drm/amdgpu: Fix PCIe lane width calculation (Alex Deucher)   
  - drm/amdgpu/sdma: fix mask in emit_pipeline_sync (Alex Deucher)   
  - drm/amdgpu: Fix always_valid bos multiple LRU insertions. (Bas Nieuwenhuizen)   
  - drm/amdgpu: Add an ATPX quirk for hybrid laptop (Alex Deucher)   
  - ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation (Takashi Iwai)   
  - ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls (Takashi Iwai)   
  - ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams (Takashi Iwai)   
  - ALSA: pcm: Avoid potential races between OSS ioctls and read/write (Takashi Iwai)   
  - ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation (Takashi Iwai)   
  - vfio/pci: Virtualize Maximum Read Request Size (Alex Williamson)   
  - watchdog: f71808e_wdt: Fix WD_EN register read (Igor Pylypiv)   
  - dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4 (Sean Wang)   
  - thermal: imx: Fix race condition in imx_thermal_probe() (Mikhail Lappo)   
  - pwm: rcar: Fix a condition to prevent mismatch value setting to duty (Ryo Kodama)   
  - clk: bcm2835: De-assert/assert PLL reset signal when appropriate (Boris Brezillon)   
  - clk: mediatek: fix PWM clock source by adding a fixed-factor clock (Sean Wang)   
  - clk: fix false-positive Wmaybe-uninitialized warning (Arnd Bergmann)   
  - clk: mvebu: armada-38x: add support for missing clocks (Richard Genoud)   
  - PCI: Mark Broadcom HT1100 and HT2000 Root Port Extended Tags as broken (Sinan Kaya)   
  - mmc: tmio: Fix error handling when issuing CMD23 (Masaharu Hayakawa)   
  - mmc: jz4740: Fix race condition in IRQ mask update (Alex Smith)   
  - iommu/vt-d: Fix a potential memory leak (Lu Baolu)   
  - um: Use POSIX ucontext_t instead of struct ucontext (Krzysztof Mazur)   
  - um: Compile with modern headers (Jason A. Donenfeld)   
  - ring-buffer: Check if memory is available before allocation (Steven Rostedt (VMware))   
  - nfit: skip region registration for incomplete control regions (Dan Williams)   
  - nfit, address-range-scrub: fix scrub in-progress reporting (Dan Williams)   
  - libnvdimm, namespace: use a safe lookup for dimm device name (Dan Williams)   
  - libnvdimm, dimm: fix dpa reservation vs uninitialized label area (Dan Williams)   
  - tpm: self test failure should not cause suspend to fail (Chris Chiu)   
  - cxl: Fix possible deadlock when processing page faults from cxllib (Frederic Barrat)   
  - dmaengine: at_xdmac: fix rare residue corruption (Maxime Jayat)   
  - IB/srp: Fix completion vector assignment algorithm (Bart Van Assche)   
  - IB/srp: Fix srp_abort() (Bart Van Assche)   
  - ALSA: pcm: Fix UAF at PCM release via PCM timer access (Takashi Iwai)   
  - RDMA/rxe: Fix an out-of-bounds read (Bart Van Assche)   
  - RDMA/mlx5: Protect from NULL pointer derefence (Leon Romanovsky)   
  - RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device (Roland Dreier)   
  - dm crypt: limit the number of allocated pages (Mikulas Patocka)   
  - ext4: add extra checks to ext4_xattr_block_get() (Theodore Ts'o)   
  - ext4: add bounds checking to ext4_xattr_find_entry() (Theodore Ts'o)   
  - ext4: move call to ext4_error() into ext4_xattr_check_block() (Theodore Ts'o)   
  - ext4: don't allow r/w mounts if metadata blocks overlap the superblock (Theodore Ts'o)   
  - ext4: always initialize the crc32c checksum driver (Theodore Ts'o)   {CVE-2018-1094} 
  - ext4: fail ext4_iget for root directory if unallocated (Theodore Ts'o)   {CVE-2018-1092} 
  - ext4: limit xattr size to INT_MAX (Eric Biggers)   {CVE-2018-1095} 
  - ext4: protect i_disksize update by i_data_sem in direct write path (Eryu Guan)   
  - ext4: don't update checksum of new initialized bitmaps (Theodore Ts'o)   
  - ext4: pass -ESHUTDOWN code to jbd2 layer (Theodore Ts'o)   
  - ext4: eliminate sleep from shutdown ioctl (Theodore Ts'o)   
  - ext4: shutdown should not prevent get_write_access (Theodore Ts'o)   
  - jbd2: if the journal is aborted then don't allow update of the log tail (Theodore Ts'o)   
  - block: use 32-bit blk_status_t on Alpha (Mikulas Patocka)   
  - extcon: intel-cht-wc: Set direction and drv flags for V5 boost GPIO (Hans de Goede)   
  - random: use a tighter cap in credit_entropy_bits_safe() (Theodore Ts'o)   
  - irqchip/gic: Take lock when updating irq type (Aniruddha Banerjee)   
  - thunderbolt: Prevent crash when ICM firmware is not running (Mika Westerberg)   
  - thunderbolt: Resume control channel after hibernation image is created (Mika Westerberg)   
  - thunderbolt: Serialize PCIe tunnel creation with PCI rescan (Mika Westerberg)   
  - thunderbolt: Wait a bit longer for ICM to authenticate the active NVM (Mika Westerberg)   
  - ASoC: topology: Fix kcontrol name string handling (Liam Girdwood)   
  - ASoC: ssm2602: Replace reg_default_raw with reg_default (James Kelly)   
  - soc: mediatek: fix the mistaken pointer accessed when subdomains are added (Sean Wang)   
  - HID: core: Fix size as type u32 (Aaron Ma)   
  - HID: Fix hid_report_len usage (Aaron Ma)   
  - powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops (Nicholas Piggin)   
  - powerpc/powernv: define a standard delay for OPAL_BUSY type retry loops (Nicholas Piggin)   
  - powerpc/kexec_file: Fix error code when trying to load kdump kernel (Thiago Jung Bauermann)   
  - powerpc/kprobes: Fix call trace due to incorrect preempt count (Naveen N. Rao)   
  - powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently (Nicholas Piggin)   
  - powerpc/64: Call H_REGISTER_PROC_TBL when running as a HPT guest on POWER9 (Paul Mackerras)   
  - powerpc/64s: Fix dt_cpu_ftrs to have restore_cpu clear unwanted LPCR bits (Nicholas Piggin)   
  - powerpc/powernv: Handle unknown OPAL errors in opal_nvram_write() (Nicholas Piggin)   
  - CIFS: fix sha512 check in cifs_crypto_secmech_release (Gustavo A. R. Silva)   
  - CIFS: add sha512 secmech (Aurelien Aptel)   
  - CIFS: refactor crypto shash/sdesc allocation&free (Aurelien Aptel)   
  - i2c: i801: Restore configuration at shutdown (Jean Delvare)   
  - i2c: i801: Save register SMBSLVCMD value only once (Jean Delvare)   
  - HID: i2c-hid: fix size check and type usage (Aaron Ma)   
  - smb3: Fix root directory when server returns inode number of zero (Steve French)   
  - fix smb3-encryption breakage when CONFIG_DEBUG_SG=y (Ronnie Sahlberg)   
  - cifs: fix memory leak in SMB2_open() (Ronnie Sahlberg)   
  - usb: dwc3: gadget: never call ->complete() from ->ep_queue() (Felipe Balbi)   
  - usb: dwc3: pci: Properly cleanup resource (Thinh Nguyen)   
  - usb: dwc3: prevent setting PRTCAP to OTG from debugfs (Roger Quadros)   
  - USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw (Zhengjun Xing)   
  - USB: gadget: f_midi: fixing a possible double-free in f_midi (Yavuz, Tuba)   
  - ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status() (Mika Westerberg)   
  - ACPI / video: Add quirk to force acpi-video backlight on Samsung 670Z5E (Hans de Goede)   
  - regmap: Fix reversed bounds check in regmap_raw_write() (Dan Carpenter)   
  - xen-netfront: Fix hang on device removal (Jason Andryuk)   
  - x86/xen: Delay get_cpu_cap until stack canary is established (Jason Andryuk)   
  - media: vsp1: Fix BRx conditional path in WPF (Kieran Bingham)   
  - media: vivid: check if the cec_adapter is valid (Hans Verkuil)   
  - media: atomisp_fops.c: disable atomisp_compat_ioctl32 (Hans Verkuil)   
  - spi: Fix unregistration of controller with fixed SPI bus number (Jarkko Nikula)   
  - spi: Fix scatterlist elements size in spi_map_buf (Maxime Chevallier)   
  - spi: atmel: init FIFOs before spi enable (Eugen Hristev)   
  - ARM: dts: at91: sama5d4: fix pinctrl compatible string (Santiago Esteban)   
  - ARM: dts: exynos: Fix IOMMU support for GScaler devices on Exynos5250 (Marek Szyprowski)   
  - ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property (Nicolas Ferre)   
  - arm: dts: mt7623: fix USB initialization fails on bananapi-r2 (Sean Wang)   
  - ARM: EXYNOS: Fix coupled CPU idle freeze on Exynos4210 (Marek Szyprowski)   
  - ARM: dts: da850-lego-ev3: Fix battery voltage gpio (David Lechner)   
  - KVM: arm/arm64: vgic-its: Fix potential overrun in vgic_copy_lpi_list (Marc Zyngier)   
  - ARM64: dts: meson: reduce odroid-c2 eMMC maximum rate (Jerome Brunet)   
  - usb: gadget: udc: core: update usb_ep_queue() documentation (Felipe Balbi)   
  - phy: allwinner: sun4i-usb: poll vbus changes on A23/A33 when driving VBUS (Chen-Yu Tsai)   
  - usb: musb: gadget: misplaced out of bounds check (Heinrich Schuchardt)   
  - mm, slab: reschedule cache_reap() on the same CPU (Vlastimil Babka)   
  - ipc/shm: fix use-after-free of shm file via remap_file_pages() (Eric Biggers)   
  - resource: fix integer overflow at reallocation (Takashi Iwai)   
  - fs/reiserfs/journal.c: add missing resierfs_warning() arg (Andrew Morton)   
  - task_struct: only use anon struct under randstruct plugin (Kees Cook)   
  - mm/hmm: hmm_pfns_bad() was accessing wrong struct (Jérôme Glisse)   
  - mm/hmm: fix header file if/else/endif maze (Jérôme Glisse)   
  - mm/ksm.c: fix inconsistent accounting of zero pages (Claudio Imbrenda)   
  - ubi: Reject MLC NAND (Richard Weinberger)   
  - ubi: Fix error for write access (Romain Izard)   
  - ubi: fastmap: Don't flush fastmap work on detach (Richard Weinberger)   
  - ubifs: Check ubifs_wbuf_sync() return code (Richard Weinberger)   
  - cpufreq: CPPC: Use transition_delay_us depending transition_latency (George Cherian)   
  - tty: make n_tty_read() always abort if hangup is in progress (Tejun Heo)


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1819.el7uek]
changelog:
  - iommu: turn on iommu=pt by default (Tushar Dave)  [Orabug: 27747905]  
  - uek-rpm: Turn on intel iommu/vt-d (Tushar Dave)  [Orabug: 27747905]  
  - xen: fix cpu/microcode/xen.c compile warning (Aaron Young)  [Orabug: 27980419]  
  - kernel.spec: add requires system-release for OL7 (Brian Maly)  [Orabug: 27964285]  
  - IB/core: Introducing /sys/class/infiniband_verbs/uek_abi_version (Gerd Rausch)  [Orabug: 27959252]  
  - tcmu: Fix trailing semicolon (Luis de Bethencourt)  [Orabug: 27952054]  
  - tcmu: fix cmd user after free (Mike Christie)  [Orabug: 27952054]  
  - target: fix destroy device in target_configure_device (tangwenji)  [Orabug: 27952054]  
  - tcmu: allow userspace to reset ring (Mike Christie)  [Orabug: 27952054]  
  - target core: add device action configfs files (Mike Christie)  [Orabug: 27952054]  
  - tcmu: fix error return code in tcmu_configure_device() (Wei Yongjun)  [Orabug: 27952054]  
  - target_core_user: add cmd id to broken ring message (Mike Christie)  [Orabug: 27952054]  
  - target: add SAM_STAT_BUSY sense reason (Mike Christie)  [Orabug: 27952054]  
  - tcmu: prevent corruption when invalid data page requested (Mike Christie)  [Orabug: 27952054]  
  - tcmu: allow max block and global max blocks to be settable (Mike Christie)  [Orabug: 27952054]  
  - tcmu: make ring buffer timer configurable (Mike Christie)  [Orabug: 27952054]  
  - tcmu: don't block submitting context for block waits (Mike Christie)  [Orabug: 27952054]  
  - tcmu: simplify dbi thresh handling (Mike Christie)  [Orabug: 27952054]  
  - tcmu: prep queue_cmd_ring to be used by unmap wq (Mike Christie)  [Orabug: 27952054]  
  - tcmu: clean up the scatter helper (Xiubo Li)  [Orabug: 27952054]  
  - tcmu: fix free block calculation (Mike Christie)  [Orabug: 27952054]  
  - tcmu: simplify scatter_data_area error handling (Mike Christie)  [Orabug: 27952054]  
  - tcmu: remove commands_lock (Mike Christie)  [Orabug: 27952054]  
  - tcmu: move expired command completion to unmap thread (Mike Christie)  [Orabug: 27952054]  
  - tcmu: fix unmap thread race (Mike Christie)  [Orabug: 27952054]  
  - tcmu: split unmap_thread_fn (Mike Christie)  [Orabug: 27952054]  
  - tcmu: merge common block release code (Mike Christie)  [Orabug: 27952054]  
  - tcmu: fix page addr in tcmu_flush_dcache_range (tangwenji)  [Orabug: 27952054]  
  - tcmu: Add a missing unlock on an error path (Dan Carpenter)  [Orabug: 27952054]  
  - tcmu: Fix some memory corruption (Dan Carpenter)  [Orabug: 27952054]  
  - tcmu: fix double se_cmd completion (Mike Christie)  [Orabug: 27952054]  
  - target: Add netlink command reply supported option for each device (Kenjiro Nakayama)  [Orabug: 27952054]  
  - target/tcmu: Use macro to call container_of in tcmu_cmd_time_out_show (Kenjiro Nakayama)  [Orabug: 27952054]  
  - tcmu: fix crash when removing the tcmu device (Xiubo Li)  [Orabug: 27952054]  
  - target: return SAM_STAT_TASK_SET_FULL for TCM_OUT_OF_RESOURCES (Mike Christie)  [Orabug: 27952054]  
  - target: fix ALUA state file path truncation (David Disseldorp)  [Orabug: 27952054]  
  - iscsi-target: fix memory leak in iscsit_release_discovery_tpg() (tangwenji)  [Orabug: 27952054]  
  - target: fix match_token option in target_core_configfs.c (tangwenji)  [Orabug: 27952054]  
  - target: add sense code INSUFFICIENT REGISTRATION RESOURCES (tangwenji)  [Orabug: 27952054]  
  - uek-rpm: aarch64 add arm64 defconfig platforms (Tom Saeger)  [Orabug: 27573165]  
  - uek-rpm: aarch64 disable nct hwmon modules (Tom Saeger)  [Orabug: 27866965]  
  - uek-rpm: aarch64 olddefconfig update to 4.14.35 (Tom Saeger)  [Orabug: 27933685]  
  - uek-rpm: aarch64 remove perl dependency from perf (Tom Saeger)  [Orabug: 27704937]  
  - vmscan: fix build warning caused by commit 44b0e03f8ab1 (Khalid Aziz)  [Orabug: 27951638]


author: Adam Jackson <ajax@redhat.com> 2.4.41-1
changelog:
  - libdrm 2.4.41 plus git.  Done as a git snapshot instead of the released
    2.4.41 since the release tarball is missing man/ entirely. 
  - Pre-F16 changelog trim


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-18
changelog:
  - Distinguish between none quota limits and no allocated resources in quota(1)
    tool (bug #1601109)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-14
changelog:
  - Add nfs-rquotad.service alias for backward compatibility (bug #1207239)
  - Start rpc-rquotad.service when starting nfs-server.service (bug #1207239)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-12
changelog:
  - Do not warn if rquotad RPC service is not registered (bug #1155584)
  - Query kernel for next quota on XFS or file system with hidden quota files
    (bug #1305968)
  - Add rpc-rquotad.service file which was known as nfs-rquotad.service
    in nfs-utils (bug #1207239)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-9
changelog:
  - Move /sbin/* files under /usr (bug #983179)
  - Harden executables due to rpc.rquotad and quota_nld daemons (bug #983179)
  - Document quotagrpadmins(5), quotatab(5), warnquota.conf(5), rcp.rquota(8)
    (bug #983179)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-6
changelog:
  - Add LGPLv2+ and GPLv2 to license declaration
  - Correct changelog dates
  - Package additional LDAP scripts as a documentation
  - Package XFS-specific tools


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-4
changelog:
  - Do not fiddle with quota files on XFS and GFS (bug #846296)
  - Make sure option -d at quotacheck provides at least as much information as
    option -v (SF#3602777)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-2
changelog:
  - Remove unneeded cryptographic library build-time dependencies
  - Fortify build-time configuration
  - Migrate quota_nld service from sysvinit to systemd
  - Document --print-below option in quota_nld service


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-1
changelog:
  - 4.00 bump
  - Remove unneeded LDAP linking patch
  - Prevent from stripping by configure option
  - Remove unneeded sed scripts on sources
  - Remove unneeded file removal


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.16.pre1
changelog:
  - Report quotacheck failures by return code (bug #717982)
  - Improve quotacheck error message (bug #717982)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.9.pre1
changelog:
  - Explain meaning of the second column in repquota output
  - Make RPC handle properly host names with colons (i.e. IPv6 server host name)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.6.pre1
changelog:
  - Store quota_nld PID into PID file (bug #634137)
  - Do not allow non-root to control quota_nld service (bug #634137)
  - Add quotasync tool (bug #596794)
  - Implement quotacheck for GFS2 (bug #596794)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.4.pre1
changelog:
  - Make RPC block factor dynamic (bug #667757)
  - Check whether set limits fit into the range supported by quota format
    (bug #668688)
  - Check set limits fit into the range supported by RPC transport (bug #668691)


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-16
changelog:
  - Break dependecies on main package as there are none
  - Add plain text documentation to each sub-package
  - Package additional documentation into `doc' sub-package


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-15
changelog:
  - Add quota_nld deamon init script (bug #634169)
  - Sub-package quota_nld files to weak dependecies
  - Sub-package warnquota files to weak dependecies


author: Petr Pisar <ppisar@redhat.com> 1:3.17-12
changelog:
  - Prevent corruptive read/write from/to NULL address in rpc.rquotad
    (Resolves #528581, example in #532342)
  - Fix spelling in summary


author: Ondrej Vasik <ovasik@redhat.com> 1:3.17-4
changelog:
  - clarify statements about LDAP in warnquota conf
    (related to #490106)
  - fix parsing issue in warnquota.c(#490125)
  - enable rpcsetquota by default(#159292, #469753)


author: Ondrej Vasik <ovasik@redhat.com> 1:3.16-5
changelog:
  - fix rpmlint warnings - absolute symlink and not using epoch
    in version in changelog (#226353)
  - rquota headers and manpage now in devel subpackage


author: Ondrej Vasik <ovasik@redhat.com> 3.16-4
changelog:
  - fix bug in warnquota which could result in bogus hostname
    and domainname (upstream)
  - remove IMMUTABLE flag from quota file in quotacheck(upstream)


author: Ondrej Vasik <ovasik@redhat.com> 3.16-3
changelog:
  - Add support for -h option (do not show invalid option
    error) at edquota,setquota and quota (#457898)


author: Ondrej Vasik <ovasik@redhat.com> 3.16-2
changelog:
  - upstream fix of some typos, string formats + 4TB+ fix
    for repquota
  - some additional stripping removal
  - change default mode of binaries from 555 to 755
    (strip error messages in build log)


author: Ondrej Vasik <ovasik@redhat.com> 3.15-6
changelog:
  - added enable-ldapmail=try option(wonder how #133207
    got closed by FC-4 without it or warnquota.conf change)
  - dropped with-ext2direct=no option - this option is 
    invalid and original bug was fixed in 3.07


author: Ondrej Vasik <ovasik@redhat.com> 3.15-5
changelog:
  - added symbolic link for quotaoff man page(#436110)
  - don't ship xqmstats.8 man page as we don't ship those
    binaries(#436100)


author: Steve Dickson <SteveD@RedHat.com> 3.15-2
changelog:
  - More review comments:
      - BuiltPreReq to BuiltReq
      - Removed '.' From Summary
      - Added 'GPLv2+' to License Tag
      - Condensed the _sysconfdir entries in to one line


author: Philip Copeland <bryce@redhat.com> 3.06-5
changelog:
  - added --with-ext2direct=no to fix #73244
    without this users with UID's > 65535 will not
    be able to exist on a quota enabled FS


author: Philip Copeland <bryce@redhat.com> 3.06-3
changelog:
  - Bah, I'd dropped epoch from the spec file but seems
    we need this if you want to upgrade as the epoch
    number has precedence over the version/release
    numbers.


author: Philip Copeland <bryce@redhat.com> 3.06-1
changelog:
  - Ditched the 3.01-pre9 src base for 3.06
    Rebuilt without any patchs

  ============================================================


author: Preston Brown <pbrown@redhat.com>
changelog:
  - fixed bug #52075 (problem with ext2 labels)
  - backup data files off by default in quotacheck, optional backup flag added
  - fix bug where giving a bad directory or device would cause 
    quotaon/quotacheck to simulate "-a" behaviour
  - if a device name (i.e /dev/hda1) is passed, look up the corresponding mount
    point


author: Preston Brown <pbrown@redhat.com>
changelog:
  - quota 3.00 is required by recent kernel 2.4 changes
  - no warnquota included this time, not yet ported
  - quite a bit of work on quotacheck to make is backwards compatible
  - we will likely go back to "quota 2.00" as these projects merge...


author: Preston Brown <pbrown@redhat.com>
changelog:
  - 2.00 final, rolls in pretty much all our patches. :)
  - fix reporting of in use dquot entries from quotastats
  - change repquota man page to fix documentation of -v (#10330)
  - include warnquota.conf


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-12.2
changelog:
  - Get rid of sparc support (we don't build it) (Jeff Moyer)
  - Implement proper support for aarch64 (Jeff Moyer)
  - Resolves: bz#1026429


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-10
changelog:
  - Un-revert the RHEL-specific changes. (Jeff Moyer)
  - Make devel sub-package depend on specific ver-rel (Jeff Moyer)
  - Resolves: bz#905462


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-8
changelog:
  - Change the source location to the new upstream on fedorahosted
  - import a new tarball from the new source


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-1
changelog:
  - Pull in upstream .109 to get ARM architecture support.
  - Remove the broken sparc patch;  it should go upstream first.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.107-2
changelog:
  - Update to the latest upstream which adds eventfd support and fixes broken
    test cases.  (Rusty Russell)


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.106-2
changelog:
  - Update to the latest sources, which contain the following change:
    Add a .proc directive for the ia64_aio_raw_syscall macro.  This sounds a lot
    like the previous entry, but that one fixed the __ia64_raw_syscall macro,
    located in syscall-ia64.h.  This macro is in raw_syscall.c, which pretty much
    only exists for ia64.  This bug prevented the package from building with
    newer version of gcc.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.103-4
changelog:
  - Build the library twice.  Once with the old SONAME and once with the new
    one.  This fixes the wrong SONAME problem by keeping a library around with
    the wrong name (libaio.so.1.0.0) and generating a new one (libaio.so.1.0.1).


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.102-1
changelog:
  - update to 102.  Fixes build errors on s390:
    - S390 asm had a bug; I forgot to update the clobber list.  Lucky for me,
      newer compilers complain about such things.
    - Also update the s390 asm to look more like the new kernel variants.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.99-1
changelog:
  - Fix compat calls.
  - make library .so.1.0.0 and make symlinks properly.
  - Fix header file for inclusion in c++ code.


author: Jeff Moyer <jmoyer@redhat.com> 0.3.97-2
changelog:
  - make srpm was using rpm to do a build.  changed that to use rpmbuild if
    it exists, and fallback to rpm if it doesn't.


author: Jeff Moyer <jmoyer@redhat.com> 0.3.97-1
changelog:
  - Use libc syscall(2) instead of rolling our own calling mechanism.  This 
    change is inspired due to a failure to build with newer gcc, since clobber 
    lists were wrong.
  - Add -fpic to the CFLAGS for all architectures.  Should address bz #109457.
  - change a #include from <linux/types.h> to <sys/types.h>.  Fixes a build
    issue on s390.


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - libaio 0.3.93 test release
  - add powerpc support from Gianni Tedesco <gianni@ecsc.co.uk>
  - add s/390 support from Arnd Bergmann <arnd@bergmann-dalldorf.de>


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - add requires initscripts >= 6.47-1 to get boot time libredhat-kernel 
    linkage correct.
  - typo fix


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - make the dummy install as /lib/libredhat-kernel.so.1.0.0 so 
    that ldconfig will link against it if no other is installed.


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.15.9-2
changelog:
  - 1069619 - Rebase to version 3.15.9 extension - solving bug 1346196 (/usr/lib/cups/filter/hpps uses python -B which is unknown), which is duplicate of bug 1202451


author: Tim Waugh <twaugh@redhat.com> - 3.13.7-2
changelog:
  - Applied patch to avoid unix-process authorization subject when using
    polkit as it is racy (CVE-2013-4325).


author: Jiri Popelka <jpopelka@redhat.com> - 3.13.6-1
changelog:
  - 3.13.6
  - hplip-ipp-accessors.patch merged upstream
  - /etc/cron.daily/hplip_cron -> /usr/share/hplip/hplip_clean.sh


author: Tim Waugh <twaugh@redhat.com> - 3.13.4-2
changelog:
  - Fixed changelog dates.
  - Device ID for HP LaserJet P1005 (bug #950776).
  - mark cron job file as config(noreplace)


author: Jiri Popelka <jpopelka@redhat.com> - 3.12.11-7
changelog:
  - No need to run update-desktop-database (and require desktop-file-utils)
    because there are no MimeKey lines in the desktop files.


author: Jiri Popelka <jpopelka@redhat.com> 3.12.9-5
changelog:
  - remove useless Conflicts:, Obsoletes: and Provides: fields
  - remove %pre section (stopping&disabling of hplip service on upgrade)
  - make hplip_cron work with non-english locale


author: Tim Waugh <twaugh@redhat.com> 3.12.4-2
changelog:
  - The hpijs sub-package no longer requires cupsddk-drivers (which no
    longer exists as a real package), but cups >= 1.4.


author: Tim Waugh <twaugh@redhat.com> 3.12.2-3
changelog:
  - Added another IEEE 1284 Device ID for Color LaserJet CP2025dn to
    cope with its DNS-SD response, which has no usb_* keys (bug #651509).


author: Tim Waugh <twaugh@redhat.com> 3.11.12-2
changelog:
  - When copying Device IDs from hpcups to hpijs, use ModelName as the
    key instead of ShortNickName (bug #651509 comment #7).


author: Tim Waugh <twaugh@redhat.com> 3.11.10-2
changelog:
  - Corrected IEEE 1284 Device IDs:
    - LaserJet M1536dnf MFP (bug #743915)
    - PSC 1600 series (bug #743821)


author: Jiri Popelka <jpopelka@redhat.com> 3.11.10-1
changelog:
  - 3.11.10
  - Use _cups_serverbin macro from cups-devel for where to put driver executables.
  - No need to define BuildRoot and clean it in clean and install section anymore.
  - Corrected IEEE 1284 Device IDs:
    Officejet 6300 series (bug #689378)
    LaserJet Professional M1212nf MFP (bug #742490)


author: Tim Waugh <twaugh@redhat.com> 3.11.5-4
changelog:
  - Added Device ID for HP LaserJet Professional P1606dn (bug #708472).
  - Update IEEE 1284 Device IDs in hpijs.drv from hpcups.drv.


author: Jiri Popelka <jpopelka@redhat.com> 3.11.1-5
changelog:
  - Avoid KeyError in ui4/wifisetupdialog.py (bug #680939).
  - Corrected IEEE 1284 Device IDs:
    LaserJet 1300 (bug #670548)
    LaserJet 3390 (bug #678565)
    LaserJet P1505 (bug #680951)


author: Tim Waugh <twaugh@redhat.com> - 3.11.1-2
changelog:
  - Fixed typo causing ";marker-supply-low-warning" state reason to be
    reported by hpijs (bug #675151).


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-9
changelog:
  - Enable D-Bus threading (and require pygobject2) (bug #600932).
  - Fixed incorrect signal name in setup dialog (bug #653626).
  - Another missing newline in filter output (Ubuntu #418053).
  - Prevent hpaio segfaulting on invalid URIs (bug #649092).
  - Catch D-Bus exceptions in fax dialog (bug #645316).


author: Jiri Popelka <jpopelka@redhat.com> 3.10.9-8
changelog:
  - Corrected IEEE 1284 Device IDs:
    HP Color LaserJet CP2025dn (bug #651509).
    HP Color LaserJet CM3530 MFP (bug #659381).


author: Jiri Popelka <jpopelka@redhat.com> 3.10.9-7
changelog:
  - The pycups requirement is now python-cups.
  - Corrected IEEE 1284 Device IDs:
    HP LaserJet 4050/4100/2100 Series/2420/4200/4300/4350/5100/8000
                M3027 MFP/M3035 MFP/P3005/P3010/P4014/P4515 (bug #659039).
    HP Color LaserJet 2500/2550 series/3700/4550/4600/4650/4700/5550
                      CP1515n/CP3525/CP4520/CM2320nf MFP (bug #659040).
    HP Color LaserJet CM4730 MFP (bug #658831).


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-6
changelog:
  - Call cupsSetUser in cupsext's addPrinter method before connecting so
    that we can get an authentication callback (bug #538352).
  - Prevent hp-fab traceback when run as root.


author: Tim Waugh <twaugh@redhat.com> - 3.10.9-3
changelog:
  - Fixed traceback on error condition in device.py (bug #628125).
  - Fixed bogus low ink warnings from hpijs driver (bug #643643).


author: Tim Waugh <twaugh@redhat.com> - 3.10.6-7
changelog:
  - More fixes from package review:
    - Avoided another macro in comment.
    - Use python_sitearch macro throughout.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixes from package review:
    - Main package and hpijs sub-package require cups for directories.
    - The common sub-package requires udev for directories.
    - The libs sub-package requires python for directories.
    - Avoided macro in comment.
    - The lib sub-package now runs ldconfig for post/postun.
    - Use python_sitearch macro.


author: Jiri Popelka <jpopelka@redhat.com> - 3.10.6-1
changelog:
  - 3.10.6.
  - Changed shebang /usr/bin/env python -> /usr/bin/python (bug #618351).
  - Corrected IEEE 1284 Device IDs:
    - HP Color LaserJet CP1518ni (bug #613689).
    - HP Color LaserJet 2600n (bug #613712).


author: Jiri Popelka <jpopelka@redhat.com> - 3.10.5-1
changelog:
  - 3.10.5.   No longer need tray-icon-crash.patch
  - Increase the timeout for system tray availability checking (bug #569969).


author: Jiri Popelka <jpopelka@redhat.com> - 3.10.2-15
changelog:
  - Added/corrected more IEEE 1284 Device IDs:
    - HP LaserJet 4250 (bug #585499).
    - HP Color LaserJet 2605dn (bug #583953).
    - HP LaserJet P1007 (bug #585272).


author: Tim Waugh <twaugh@redhat.com> - 3.10.2-11
changelog:
  - Added/corrected more IEEE 1284 Device IDs:
    - HP Color LaserJet CM1312nfi (bug #581005).
    - HP Color LaserJet 3800 (bug #581935).
    - HP Color LaserJet 2840 (bug #582215).
    - HP PSC 2400 (bug #583103).


author: Jiri Popelka <jpopelka@redhat.com> - 3.10.2-10
changelog:
  - Fixed black/blank lines in ljcolor hpcups output (bug #579461).
    Work-around is to send entire blank raster lines instead of skipping them.


author: Jiri Popelka <jpopelka@redhat.com> - 3.10.2-9.1
changelog:
  - Added/Corrected several IEEE 1284 Device IDs
    (bugs #577262, #577282, #577282, #577288, #577292, #577302,
    ,#577306, #577308, #577898, #579920, #580231)


author: Tim Waugh <twaugh@redhat.com> - 3.10.2-2
changelog:
  - Removed SYSFS use in udev rules and actually made them work
    (bug #560754).
  - Use a temporary file in pstotiff to allow gs random access.


author: Tim Waugh <twaugh@redhat.com> - 3.10.2-1
changelog:
  - 3.10.2.  No longer need preferences-crash patch.
  - The pstotiff filter is rubbish so replace it (launchpad #528394).
  - Stopped hpcups pointlessly trying to read spool files
    directly (bug #552572).


author: Tim Waugh <twaugh@redhat.com> - 3.9.12-2
changelog:
  - Retry when connecting to device fails (bug #532112).
  - Don't ship PolicyKit mechanism (bug #551773).


author: Tim Waugh <twaugh@redhat.com> 3.9.10-3
changelog:
  - Removed duplex constraints on page sizes with imageable areas larger
    than possible when duplexing (bug #541572).
  - Fixed duplex reverse sides being horizontally flipped (bug #541604).


author: Tim Waugh <twaugh@redhat.com> 3.9.10-1
changelog:
  - 3.9.10.  No longer need clear-previous-state-reasons,
    hpcups-reorder, non-scripts, parenths, plugin-error,
    requirespageregion or state-reasons-newline patches.


author: Tim Waugh <twaugh@redhat.com> 3.9.8-19
changelog:
  - Retry when connecting to device fails (bug #528483).
  - Avoid busy loop in hpcups when backend has exited (bug #525944).


author: Tim Waugh <twaugh@redhat.com> 3.9.8-13
changelog:
  - Use dll.d file instead of post scriptlet for hpaio (bug #519988).
  - Fixed RequiresPageRegion patch (bug #518756).


author: Tim Waugh <twaugh@redhat.com> 3.9.8-9
changelog:
  - New common sub-package for udev rules and config file (bug #516459).
  - Don't install base/*.py with executable bit set.


author: Tim Waugh <twaugh@redhat.com> 3.9.8-8
changelog:
  - Fixed typos in page sizes (bug #515469).
  - Build no longer requires libudev-devel.
  - Fixed state reasons handling problems (bug #501338).


author: Tim Waugh <twaugh@redhat.com> 3.9.8-5
changelog:
  - Use upstream udev rules instead of hal policy (bug #518172).
  - Removed unnecessary dependency on PyQt as we only use PyQt4 now.


author: Tim Waugh <twaugh@redhat.com> 3.9.6b-4
changelog:
  - Fixed ui-optional patch for qt4 code path (bug #500473).
  - Fixed HWResolution for 'Normal' output from the hpcups driver
    (laundpad bug #405400).


author: Tim Waugh <twaugh@redhat.com> 2.8.12-4
changelog:
  - Prevent crash when DEVICE_URI/PRINTER environment variables are not
    set (bug #479808 comment 6).


author: Tim Waugh <twaugh@redhat.com> 2.8.12-3
changelog:
  - Make --qt4 the default for the systray applet, so that it appears
    in the right place, again (bug #479751).
  - Removed hal preprobe rules as they were causing breakage
    (bug #479648).


author: Tim Waugh <twaugh@redhat.com> 2.8.5-2
changelog:
  - Make --qt4 the default for the systray applet, so that it appears
    in the right place.  Requires PyQt4.


author: Tim Waugh <twaugh@redhat.com> 2.8.5-1
changelog:
  - 2.8.5.
  - Configure with --enable-dbus.  Build requires dbus-devel.
  - Fix chmod 644 line.
  - Ship hp-systray in the gui sub-package, but don't ship the desktop
    launcher yet as the systray applet is quite broken.
  - Don't run autoconf.


author: Tim Waugh <twaugh@redhat.com> 2.8.2-2
changelog:
  - Update hplip.fdi for Fedora 9: info.bus -> info.subsystem.
  - Images in docdir should not be executable (bug #440552).


author: Tim Waugh <twaugh@redhat.com> 2.8.2-1
changelog:
  - 2.8.2.  No longer need alloc, unload-traceback or media-empty patches.
  - Ship cupsddk driver.  The hpijs sub-package now requires cupsddk-drivers.


author: Tim Waugh <twaugh@redhat.com> 2.7.12-2
changelog:
  - Ship installer directory (bug #428246).
  - Avoid multilib conflict (bug #341531).
  - The hpijs sub-package requires net-snmp (bug #376641).


author: Tim Waugh <twaugh@redhat.com> 2.7.9-2
changelog:
  - Use raw instead of 1284.4 communication for LJ4000 series (bug #249191).
  - Build requires openssl-devel.


author: Tim Waugh <twaugh@redhat.com> 2.7.9-1
changelog:
  - 2.7.9.
  - Adjusted udev rules to be less permissive.  We use ConsoleKit to add
    ACLs to the device nodes, so world-writable device nodes can be avoided.


author: Tim Waugh <twaugh@redhat.com> 2.7.7-4
changelog:
  - Reverted udev rules change.
  - Ship a HAL FDI file to get correct access control on the USB device
    nodes (bug #251470).
  - Make libsane-hpaio requires the main hplip package, needed for
    libhpip.so (bug #280281).


author: Tim Waugh <twaugh@redhat.com> 2.7.6-9
changelog:
  - Remove hplip service on upgrade.
  - Updated selinux-policy conflict for bug #249014.
  - Fixed the udev rules file (bug #248740, bug #249025).


author: Tim Waugh <twaugh@redhat.com> 2.7.6-2
changelog:
  - Main package requires python-reportlab for hp-sendfax (bug #189030).
  - Explicitly enable scanning.
  - Main package requires python-imaging for hp-scan (bug #247210).


author: Tim Waugh <twaugh@redhat.com> 1.7.4a-1
changelog:
  - Don't put the version in the desktop file; let desktop-file-install do it.
  - 1.7.4a.  No longer need marker-supply or faxing-with-low-supplies
    patches.  Cheetah and cherrypy directories no longer shipped in source
    tarball.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't ship hp-check (bug #243273).
  - Moved hp-setup back to the base package, and put code in
    utils.checkPyQtImport() to check for the gui sub-package as well as
    PyQt (bug #243273).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Moved hp-setup to the ui package (bug #243273).
  - Prevent SELinux audit message from the CUPS backends (bug #241776)


author: Tim Waugh <twaugh@redhat.com> 1.7.2-7
changelog:
  - Some parts can run without GUI support after all (bug #236161).
  - Added /sbin/service and /sbin/chkconfig requirements for the scriptlets
    (bug #236445).
  - Fixed %post scriptlet's condrestart logic (bug #236445).


author: Tim Waugh <twaugh@redhat.com> 1.7.2-6
changelog:
  - Fixed dangling symlinks (bug #236156).
  - Move all fax bits to the gui package (bug #236161).
  - Don't ship fax PPD and backend twice (bug #236092).
  - Run update-desktop-database in the gui package's %post scriptlet
    (bug #236163).
  - Moved desktop-file-utils requirement to gui package (bug #236163).
  - Bumped selinux-policy conflict version (bug #236092).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Change 'Hidden' to 'NoDisplay' in the desktop file, and use the System
    category instead of Utility (bug #170762).
  - Link libsane-hpaio against libsane (bug #234813).


author: Tim Waugh <twaugh@redhat.com> 1.6.10-3
changelog:
  - IPv6 support (bug #198377).  Local-only sockets are IPv4, and ought
    to be changed to unix domain sockets in future.


author: Tim Waugh <twaugh@redhat.com> 1.6.10-2
changelog:
  - 1.6.10.  No longer need compile patch.
  - Fixed default config file (bug #211072).
  - Moved libhpip to hpijs sub-package (bug #212531).


author: Tim Waugh <twaugh@redhat.com> 1.6.7-2
changelog:
  - 1.6.7.
  - Conflict with selinux-policy < 2.3.4 to make sure new port numbers are
    known about (bug #201357).


author: Tim Waugh <twaugh@redhat.com> 0.9.10-5
changelog:
  - Patchlevel 1.
  - Fixed another case-sensitive match.
  - Require hpijs sub-package (bug #189140).
  - Don't package unneeded files (bug #189162).
  - Put fax PPD in the right place (bug #186213).


author: Tim Waugh <twaugh@redhat.com> 0.9.10-4
changelog:
  - Use case-insensitive matching.  0.9.8 gave all-uppercase in some
    situations.
  - Last known working hpijs comes from 0.9.8, so use that.


author: Tim Waugh <twaugh@redhat.com> 0.9.3-4
changelog:
  - Conflicts: hpijs from before this package provided it.
  - Conflicts: system-config-printer < 0.6.132 (i.e. before HPLIP support
    was added)


author: Tim Waugh <twaugh@redhat.com> 0.9.3-1
changelog:
  - Use /usr/share/applications for putting desktop files in (bug #159932).
  - Requires PyQt (bug #159932).


author: Jan Grulich <jgrulich@redhat.com> 0.9.0.8-2
changelog:
  - remove mobile-broadband-mobile-provider-devel as BR
  - add ModemManager as runtime dependency
  - add mobile-broadband-mobile-provider as runtime dependency


author: Jan Grulich <jgrulich@redhat.com> 0.9.0.7-2
changelog:
  - fix the wpa2 bug with missing password field #bz832893
  - fix the bug with lock indicator #bz912603


author: Lukas Tinkl <ltinkl@redhat.com> 0.9.0.4-1
changelog:
  - upstream version 0.9.0.4 (see
    http://lamarque-lvs.blogspot.cz/2012/07/plasma-nm-0904.html for details)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.70.rc4
changelog:
  - update to 0.9.0_rc4 (0.8.99)
  - drop the nm09 tag, all our builds are NM 0.9 builds now
  - drop the nuking of monolithic stuff, already disabled upstream for a while


author: Lukas Tinkl <ltinkl@redhat.com> - 1:0.9-0.57.20110907git.nm09
changelog:
  - update to current git nm09 snapshot, for details see: 
    http://lamarque-lvs.blogspot.com/2011/09/plasma-nm-bugs-fixed-after-470.html
  - fix #605527: KNetworkManager can´t connect to DSL/PPPoE connection
  - fix #715459: KDE's wireless broken on secure AP w/ "hidden" setup
  - fix #715461: KDE's wireless broken on secure AP w/ manual entry


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.56.20110828git.nm09
changelog:
  - update to 20110828 snapshot, fixes kde#280913 (OpenConnect) among other things
  - bump minimum required NM version to 0.9.0 as required by the new snapshot


author: Lukas Tinkl <ltinkl@redhat.com> - 0.9-0.54.20110812git.nm09
changelog:
  - update to current snapshot, for changes and fixes see 
    http://lamarque-lvs.blogspot.com/2011/07/plasma-nm-bugs-fixed-after-465.html


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.49.20110527git.nm09
changelog:
  - update to 20110527 snapshot from nm09 branch
  - make it clear in Release where the snapshot comes from
  - drop nm09 conditional, this version targets only NetworkManager 0.9


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.42.20110323
changelog:
  - Conditionalize NM 0.9 (with compat patches) support to F15+
  - Merge VPN subpackages into the main package for F15+ to match NM 0.9 packaging


author: Rex Dieter <rdieter@fedoraproject.org> 1:0.9-0.28.20101011
changelog:
  - 20101011 snapshot
  - KDE NM applet 20101008 snapshot crashes on new CDMA connection (#641792)
  - Add NetworkManager dependency to knetworkmanager (#618918)


author: Rex Dieter <rdieter@fedoraproject.org> 1:0.9-0.25.20100920
changelog:
  - make plasma_applet unconditional
  - include javascript to enable nm plasmoid in systray, kde45+ (#604798)


author: Rex Dieter <rdieter@fedoraproject.org> 1:0.9-0.21.20100603
changelog:
  - Conflicts: kdebase-runtime > 4.4.76 (if built on/for < kde-4.4)
  - use -DINSTALL_KNM_AUTOSTART=ON (compat with f12's cmake)


author: Rex Dieter <rdieter@fedoraproject.org> 1:0.9-0.13.20100220svn
changelog:
  - make kde-plasma-neworkmanagment an empty placeholder package (#571433)
  - knetworkmanager: move kcm_networkmanagement_tray bits here (from kde-plasma-nm)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.12.20100220svn
changelog:
  - update to revision 1093233 (2010-02-20)
  - use user-readable URL instead of outdated websvn link
  - include translations (#566386, use create_tarball.rb script from kdesdk trunk)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.11.20100210svn
changelog:
  - update to revision 1088283 (2010-02-10)
  - drop F10 conditionals
  - warn about the plasmoid being experimental, recommend knetworkmanager
  - drop minimum version requirements for qt and kdelibs, not needed anymore


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.4.20090930svn
changelog:
  - Build as knetworkmanager4 for F10 so KDE 3 KNM users are not forced to upgrade
  - Obsolete knetworkmanager4 (and keep replacing the KDE 3 KNM) on F11+


author: Rex Dieter <rdieter@fedoraproject.org> 0.8-0.21.20090815svn
changelog:
  - use knetworkmanager pkg names
  - quasi-artificially inflate version to 0.8 (for now), to simplify upgrade path
    for knetworkmanager-0.7 (from F-10)
  - nuke -devel pkg
  - drop references to short-lived kde-plasma-networkmanager


author: Matthias Clasen <mclasen@redhat.com> - 1:0.23-6
changelog:
  - Remove a patch that is no longer necessary and causes more
    problems than it solves (#224148)
  - Include Requires.private in --print-requires (#426106)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - suppress /usr/lib64 (instead of /usr/lib) from LIBS by default on multilib
    arches where the default is to use lib64


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-14
changelog:
  - Fixed persmissions of ebtables.service (RHBZ#1288586)
  - Added upstream patch to add noflush option to ebtables-restore (RHBZ#1334271)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.10-9
changelog:
  - fixed missing systemd unit file (RHBZ#818953)
    merged fedora patches from Tom Callaway
  - fixed NETWORK test in the init script (RHBZ#1026784)
  - fixed needed rpmdiff failures (RHBZ#883988)


author: Tom Callaway <spot@fedoraproject.org> - 2.0.10-5
changelog:
  - update to 2.0.10-4 (upstream numbering is goofy)
  - fix missing symbol issue with extension modules (bz810006)


author: Thomas Woerner <twoerner@redhat.com> - 2.0.9-3
changelog:
  - fixed init script to be lsb conform (rhbz#536828)
  - fixed download link according to package review


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.0.8-4
changelog:
  - bump to 2.0.8-2 from upstream
  - keep _libdir/ebtables, even though upstream just moved away from it.


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.0.8-3
changelog:
  - use _libdir/ebtables to match upstream RPATH (bugzilla 248865)
  - correct license tag
  - use upstream init script
  - enable build-id
  - use cflags for all compiles
  - be sane with DESTDIR


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.0.6-4
changelog:
  - remove INSTALL file
  - add some text to description, correct typos
  - fix %postun
  - add PreReqs
  - add %ghost config files


author: Gerd Hoffmann <kraxel@redhat.com> - 0.5.2-2
changelog:
  - Fix license: It is BSD, not GPL.
  - Cleanup specfile, drop bits not needed any more with
    recent rpm versions (F13+).


author: Peter Hutterer <peter.hutterer@redhat.com> 0.7.1-2
changelog:
  - Fixes for
    CVE-2018-15864, CVE-2018-15863, CVE-2018-15862, CVE-2018-15861,
    CVE-2018-15859  CVE-2018-15857, CVE-2018-15856, CVE-2018-15855,
    CVE-2018-15854, CVE-2018-15853


author: Rex Dieter <rdieter@fedoraproject.org> - 0.4.2-1
changelog:
  - xkbcommon 0.4.2 (#1000497)
  - own %{_includedir}/xkbcommon/
  - -x11: +ldconfig scriptlets
  - -devel: don't include xkbcommon-x11.h
  - run reautoconf in %prep (instead of %build)
  - tighten subpkg deps via %_isa
  - .spec cleanup, remove deprecated stuff
  - BR: pkgconfig(xcb-xkb) >= 1.10


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-12
changelog:
  - remove unnecessary 1ms wakeups while USB transfers are in progress,
    thanks to Scott Lamb (#408131)


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-10
changelog:
  - optimize usb_find_devices() and use openat() instead of open()
   (#273901), thanks to Ulrich Drepper
  - BR gawk


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-7
changelog:
  - merge review spec fixes (#226053)
  - create -static subpackage to ship static libs separately
  - don't use auto* stuff, drop automake, libtool deps
  - BuildRequire openjade, fix Requires


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-3
changelog:
  - use pkg-config calls in libusb-config instead of hardcoded
    defaults to avoid multiarch conflicts (#192714)


author: Jindrich Novy <jnovy@redhat.com> 0.1.11-2
changelog:
  - change device search order, /dev/bus/usb is tried first,
    then /proc/bus/usb, and never try /sys/bus/usb (#178994)


author: Jindrich Novy <jnovy@redhat.com> 0.1.11-1
changelog:
  - 0.1.11
  - require pkgconfig, package libusb.pc
  - fix printf format in linux.c so that libusb can be built with -Werror (default)


author: Maurizio Lombardi <mlombard@redhat.com> - 2.1.fb46-4
changelog:
  - Properly detect errors when writing backup files. (Closes: #80) (#81)
  - Read number of backup files to keep from file
  - config: defend on '/etc/target/backup' directory
  - config: backup when current config is different from recent backup copy
  - config: rename key 'kept_backups' as 'max_backup_files'
  - backup: global option to tune max no. of backup conf files


author: Andy Grover <agrover@redhat.com> - 2.1.fb31-1
changelog:
  - New upstream version
  - Move service handling to python-rtslib
  - Remove old packaging bits: clean, buildroot, defattr


author: Andy Grover <agrover@redhat.com> - 2.0rc1.fb18-1
changelog:
  - New upstream release
  - Add python-ethtool requires
  - Update Source0 to use Github tar-from-tag instead of Downloads


author: Andy Grover <agrover@redhat.com> - 2.0rc1.fb5-2
changelog:
  - Update After= in service file to wait for localfs and network
  - Improve description in service file


author: Andy Grover <agrover@redhat.com> - 2.0rc1.fb2-1
changelog:
  - New upstream source and release
  - Remove patches:
    * targetcli-git-version.patch
    * 0001-Remove-ads-from-cli-welcome-msg.-Mention-help-is-ava.patch
    * 0002-bundle-lio-utils.patch
    * 0003-Hack.-dump-scripts-aren-t-in-PATH-anymore-so-call-th.patch
    * 0004-ignore-errors-from-failure-to-set-device-attributes.patch
    * 0005-fix-spec_root-path.patch
    * 0006-add-docs.patch
    * 0007-all-start.patch


author: Tomas Hozza <thozza@redhat.com> - 0.11-22
changelog:
  - Improved text in the GUI panel in Hotspot sign-on mode (#1254473)
  - Build all binaries with PIE hardening (#1092526)


author: Tomas Hozza <thozza@redhat.com> - 0.11-21
changelog:
  - handle IndexError exception in NM script until NM provides better API (#1063735)
  - restart NM when stopping dnssec-trigger daemon instead of handling
    resolv.conf by ourself. (#1061370)


author: Tomas Hozza <thozza@redhat.com> - 0.11-20
changelog:
  - use systemd macros instead of directly using systemctl (#1058773)
  - Replace the "Fedora /EPEL" comment in dnssec-trigger.conf (#1055949)
  - Use more newer and more advanced dispatcher script (#1034813)


author: Tomas Hozza <thozza@redhat.com> - 0.11-13
changelog:
  - Use improved NM dispatcher script from upstream (#980036)
  - Added tmpfiles.d config due to improved NM dispatcher script


author: Paul Wouters <pwouters@redhat.com> - 0.11-6
changelog:
  - Patched daemon to remove immutable attr (rhbz#842455) as the
    systemd ExecStopPost= target does not seem to work


author: Paul Wouters <pwouters@redhat.com> - 0.11-1
changelog:
  - Updated to 0.11
  - http Hotspot detection via fedoraproject.org/static/hotspot.html
  - http Hotspot Login page via uses hotspot-nocache.fedoraproject.org


author: Paul Wouters <pwouters@redhat.com> - 0.10-3
changelog:
  - Fix the systemd startup to require unbound
  - dnssec-triggerd no longer forks, giving systemd more control
  - Fire NM dispatcher in ExecStartPost of dnssec-triggerd.service
  - Fix tcp80 entries in dnssec-triggerd.conf
  - symlink dnssec-trigger-panel to dnssec-trigger to supress the
    "-panel" in the applet name shown in gnome3


author: Paul Wouters <pwouters@redhat.com> - 0.9-3
changelog:
  - Convert from SysV to systemd for initial Fedora release
  - Moved configs and pem files to /etc/dnssec-trigger/
  - No more /var/run/dnssec-triggerd/
  - Fix Build-requires
  - Added commented tls443 port80 entries of pwouters resolvers
  - On uninstall ensure there is no immutable bit on /etc/resolv.conf


author: Paul Howarth <paul@city-fan.org> 2.53-1
changelog:
  - update to 2.53
    - fixed to_json (CPAN RT#68359)
    - backport JSON::PP 2.27200 (fixed incr_parse decoding string more correctly
      - CPAN RT#68032)
    - made Makefile.PL skip an installing XS question when set $ENV{PERL_ONLY} or
      $ENV{NO_XS} (CPAN RT#66820)


author: Paul Howarth <paul@city-fan.org> 2.51-1
changelog:
  - update to 2.51 (#683052)
    - import JSON::PP 2.27105 as BackportPP
    - fix documentation (CPAN RT#64738)


author: Paul Howarth <paul@city-fan.org> 2.50-1
changelog:
  - update to 2.50 (#665621)
    - JSON::PP split off into separate distribution and replaced with
      JSON::backportPP instead for internal use
  - BR: perl(Test::Pod)
  - drop t/ from %doc as the tests are in the -tests subpackage
  - filter private module perl(JSON::backportPP) from requires
  - filter private module perl(JSON::backportPP::Boolean) from provides
  - filter private module perl(JSON::Backend::PP) from provides
  - filter private module perl(JSON::Boolean) from provides
  - filter private module perl(JSON::PP) from provides (really JSON::backportPP)
  - filter private module perl(JSON::PP::IncrParser) from provides


author: Chris Weyl <cweyl@alumni.drew.edu> 2.17-1
changelog:
  - update by Fedora::App::MaintainerTools 0.004
  - PERL_INSTALL_ROOT => DESTDIR
  - dropped old BR on perl(HTTP::Request)
  - dropped old BR on perl(HTTP::Response)
  - dropped old requires on perl(HTTP::Daemon)
  - dropped old requires on perl(LWP::UserAgent)
  - dropped old requires on perl(Scalar::Util)


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-18
changelog:
  - really fix the update path (#627019, #627387)
  - introduce -headers subpackage to avoid conflicts on multiarch
    systems (#590973)
  - install package license


author: Jindrich Novy <jnovy@redhat.com> 4.6.21-6
changelog:
  - remove libtool hacks so that compat-db builds again
  - remove support for old BDBs: 4.3.29, 4.2.52, 4.1.25


author: Jindrich Novy <jnovy@redhat.com> 4.6.21-5
changelog:
  - drop support for 4.3.29
  - split compat-db to compat-db45 and compat-db46 subpackages
    to avoid dependency bloat (#459710)


author: Jindrich Novy <jnovy@redhat.com> 4.6.21-3
changelog:
  - fix URL to 4.3.29 patch
  - official upstream tarball for db-4.3.29 has changed, the only change
    is in license text that allows dual licensing of skiplist.[ch] from
    LGPL to BSD


author: Jindrich Novy <jnovy@redhat.com> 4.6.21-1
changelog:
  - move db-4.6.21 to compat-db (#449741)
  - remove db-4.2.52
  - package db46_codegen
  - create symlinks to ease detection for autofoo
  - fix license and filelists


author: Jindrich Novy <jnovy@redhat.com> 4.5.20-3
changelog:
  - remove db4 provides to workaround RPM obsoletes/provides problem (#111071),
    automatic library provides should be enough for compat-db
  - obsolete old db4s again


author: Jindrich Novy <jnovy@redhat.com> 4.5.20-1
changelog:
  - add 4.5.20 to compat-db
  - package db45_hotbackup
  - correct open() calls so that compat-db compiles with the new glibc
  - apply db185 patches to all compat-db db4s


author: Jindrich Novy <jnovy@redhat.com> 4.3.29-2
changelog:
  - include also headers for db4-4.2.52
  - sync db4 and compat-db licenses to BSD-style as the result of
    consultation with legal department
  - BuildPreReq -> BuildRequires, rpmlint fixes


author: Jindrich Novy <jnovy@redhat.com> 4.3.29-1
changelog:
  - add 4.3.29 and remove 4.1.25
  - spec reduction diet, remove old unapplied patches
  - apply patches 3-5 with upstream fixes for 4.2.52
  - apply first upstream fix patch for 4.3.29
  - all patches/sources now point to correct URLs
  - ship headers for db-4.3.29


author: Jindrich Novy <jnovy@redhat.com> 4.2.52-5
changelog:
  - package libdb_cxx, which is a dependency for OpenOffice.org-1.x and
    other legacy software (#198130), thanks to Sivasankar Chander
    <siva.chander@gmail.com>


author: Jeff Johnson <jbj@jbj.org> 4.2.52-1
changelog:
  - apply patch.4.1.25.2.
  - retire db-4.2.52 with patch.4.2.52.{1,2} into compat-db.
  - nuke db2 and db-3.3.11.
  - nuke db1 as well.


author: Jeff Johnson <jbj@redhat.com> 4.0.14-3
changelog:
  - compile on all platforms, use gcc296 only on i386/alpha/ia64
  - avoid ppc64 toolchain for the nonce.


author: Nalin Dahyabhai <nalin@redhat.com> 3.3.11-1
changelog:
  - pull in db 3.3, obsolete db3 and db32 in addition to db31
  - build with compat-gcc/compat-gcc-c++ to get C++ shared libraries suitable
    for use in applications built with db3-devel on RHL 7.x
  - pull in db2, obsolete db2/db2-devel/db3-devel, rename to compat-db
  - obsolete db3x


author: Nalin Dahyabhai <nalin@redhat.com> 3.2.9-3
changelog:
  - don't list the tcl include path before other flags when building libdb_tcl
    3.1.x (tcl is in /usr, so this pulls in /usr/include/db.h, which is wrong)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - rename to db31, drop the -devel subpackage, merge the -utils package
  - remove berkeley_db_svc, libdb_tcl.so (conflicts with current -utils)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix URLs in docs for the -utils and -devel subpackages to point to the
    images in the main package's documentation directory (#33328)
  - change Copyright: GPL to License: BSDish


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't build with --enable-diagnostic.
  - add build prereq on tcl.
  - default value for %_lib macro if not found.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - rather than hack *.la (see below), create /usr/lib/libdb-3.1.so symlink.
  - turn off --enable-diagnostic for performance.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - remove redundant strip of libnss_db* that is nuking symbols.
  - change location in /usr/lib/libdb-3.1.la to point to /lib (#16776).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - summaries from specspo.
  - all of libdb_tcl* (including symlinks) in db3-utils, should be db3->tcl?


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 3.1.14.
  - create db3-utils sub-package to hide tcl dependency, enable tcl Yet Again.
  - FHS packaging.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - disable --enable-test --enable-debug_rop --enable-debug_wop.
  - disable --enable-posixmutexes --enable-tcl as well, to avoid glibc-2.1.3
    problems.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - add 3.0.55.1 alignment patch.
  - add --enable-posixmutexes (linux threads has not pthread_*attr_setpshared).
  - add --enable-tcl (needed -lpthreads).


author: Ville Skyttä <ville.skytta@iki.fi> - 7.10-1
changelog:
  - Update to 7.10, fixes #595135 and #619867.
  - Patch spectool to work with specfiles containing Icon or BuildArchitectures
    (#637000).


author: Ville Skyttä <ville.skytta@iki.fi> - 7.4-1
changelog:
  - Update to 7.4, fixes #215927 and #466353.
  - Patch spectool to make -s and -p to work as documented (Todd Zullinger).


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add rpmdev-packager - script for getting rpm packager info.
  - Use rpmdev-packager in rpmdev-bumpspec and rpmdev-init.el.
  - Fix rpmdev-extract MIME type comparisons with file(1) output containing
    parameters.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Improve newspec/newinit when only "-o foo" argument is given (#498588,
    thanks to Edwin ten Brink).
  - Try to get packager mail address for *Emacs rpm-spec-mode from ~/.fedora.cert
    if rpm-spec-user-mail-address is not set.
  - Add xz support to rpmdev-extract.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add rpmdev-newinit for easier access to the init script template, move the
    template to %{_sysconfdir}/rpmdevtools, improve reload action example.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Use %global instead of %define in spec templates.
  - Handle %global in addition to %define in rpmdev-bumpspec.


author: Ville Skyttä <ville.skytta@iki.fi> - 7.0-1
changelog:
  - 7.0.
  - Drop fonts spec template, adapt to new ones from Fedora fonts SIG (#477055).
  - Add man page for rpmdev-newspec.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add vamp-plugin-sdk to internal list of non-devel packages in rmdevelrpms
    (#472641, Michael Schwendt).


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add -r/--rightmost option to rpmdev-bumpspec (ticket #1, Thorsten Leemhuis).
  - Add %packager from rpm config to the set of defaults for rpmdev-bumpspec's
    user string.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Remove duplicate "reload" from case block in init script template.
  - Fix exit status of "reload" in case service is not running in init
    script template (#442993).


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Remove libgcj-devel and zlib-devel from rmdevelrpms' internal exclusion
    list, they're not essential on non-devel systems any more.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add fonts spec template from the Fedora Fonts SIG (#407781).
  - Add option to use macro style instead of shell style variables to newspec.
  - Prefer ~/.config/rpmdevtools/rmdevelrpms.conf over ~/.rmdevelrpmsrc in
    rmdevelrpms.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Fix Epoch handling in the 2-arg form of rpmdev-vercmp with yum < 3.1.2.
  - The long form of the list option in rmdevelrpms is --list-only, not --list.


author: Ville Skyttä <ville.skytta@iki.fi> - 6.0-1
changelog:
  - Remove check-{buildroot,rpaths*}, now included in rpm-build >= 4.4.2.1.
  - Drop explicit dependency on patch, pulled in by recent rpm-build.
  - Add cmake and scons to default devel package list in rpmdev-rmdevelrpms.
  - Add LSB comment block to init script template.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add 2-argument form for comparing EVR strings to rpmdev-vercmp
    (available only if rpmUtils.miscutils is available).


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Include rpmsodiff and dependencies (rpmargs, rpmelfsym, rpmfile, rpmpeek,
    rpmsoname) from ALT Linux's qa-robot package.
  - Include rpmls (#213778).


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - BR perl(ExtUtils::MakeMaker) by default in perl spec template.
  - Drop deprecated backwards compatibility with fedora-rpmdevtools.
  - Update URL.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Arch-qualify output of matched packages in rmdevelrpms and allow
    arch-qualified packages in the config file.


author: Ville Skyttä <ville.skytta@iki.fi> - 5.2-1
changelog:
  - Skip *.jar.so.debug in check-buildroot (#208903).
  - Treat yasm and *-static as devel packages in rmdevelrpms.


author: Ville Skyttä <ville.skytta@iki.fi> - 5.1-1
changelog:
  - Re-add PHP PEAR spec template, more improvements to it (#198706,
    Christopher Stone, Remi Collet).


author: Ville Skyttä <ville.skytta@iki.fi> - 5.0-1
changelog:
  - Re-rename almost everything to rpmdev-*, with backwards compat symlinks.
  - Don't encourage %ghost'ing *.pyo in Python spec template, add some comments.
  - Drop PHP PEAR spec template, it's not ready yet.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Treat *-sdk as devel packages in rmdevelrpms (#199909).
  - Don't assume compface is a devel package in rmdevelrpms.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Move option arguments to "find" before non-option ones in Perl spec template.
  - Drop python-abi dependency from Python spec template (#189947).


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Drop fedora- prefix everywhere, add backcompat symlinks for execubtables.
  - Move %{_sysconfdir}/fedora to %{_sysconfdir}/rpmdevtools and
    %{_datadir}/fedora to %{_datadir}/rpmdevtools.
  - Move spec templates to %{_sysconfdir}/rpmdevtools, mark as config.
  - Bump version to 5.0.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Drop fedora-kmodhelper.
  - Drop fedora-installdevkeys and GPG keys, modify rpmchecksig to use
    the system rpmdb.


author: Ville Skyttä <ville.skytta@iki.fi>
changelog:
  - Add manual pages for rmdevelrpms, diffarchive and extract.
  - Trim pre-2005 changelog entries.
  - Autotoolize source tree.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.3-1
changelog:
  - check-rpaths-worker: detect when RPATH references the parent directory
    of an absolute path (#169298, Enrico Scholz).
  - Add regression test for check-rpaths* (#169298, Enrico Scholz).
  - Honor user's indent-tabs-mode setting in fedora-init.el (#170902).


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2-1
changelog:
  - check-buildroot: grep for buildroot as a fixed string, not a regexp.
  - Update FSF's address in copyright notices.
  - check-rpaths-worker: allow multiple $ORIGIN paths in an RPATH and allow
    RPATHs which are relative to $ORIGIN (#169298, Enrico Scholz).
  - check-rpaths-worker: give out an hint about usage and the detected issues
    at the first detected error (Enrico Scholz).
  - Remove some redundancy from the Perl spec template.
  - Teach fedora-newrpmspec to detect and use different specfile variants.
  - Use fedora-newrpmspec in fedora-init.el.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.1-1
changelog:
  - Drop more pre-FC2 compat stuff from Perl spec template.
  - Treat gcc-gfortran as a devel package in rmdevelrpms.
  - Drop fedora.us GPG key.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0-1
changelog:
  - Make fedora-diffarchive work better with archives containing dirs without
    read/execute permissions.
  - Sync "Epoch: 0" drops with Fedora Extras CVS.
  - Include Nils Philippsen's spectool.
  - Own (%ghost'd) more dirs from the site-lisp dir hierarchies.
  - Drop trigger support pre-FC2 Emacs and XEmacs packages.
  - Drop rpm-spec-mode.el patch, no longer needed for FC2 Emacs and later.
  - Update URLs.
  - Drop developer GPG keys from the package, add Fedora Extras key.
  - Drop fedora-pkgannfmt, it's no longer relevant.
  - Remove pre-FC2 compatibility stuff from Perl spec template.
  - Don't try to remove gcc-java and related packages by default in rmdevelrpms.
  - Remove "full featured" spec template, convert newrpmspec to use -minimal.


author: Ville Skyttä <ville.skytta@iki.fi> - 0:0.3.1-1
changelog:
  - Make buildrpmtree and wipebuildtree less dependent on a specific
    configuration (#147014, Ignacio Vazquez-Abrams).


author: Ville Skyttä <ville.skytta@iki.fi> - 0:0.3.0-1
changelog:
  - Remove 0.fdr. prefixes and epoch 0's from all spec templates.
  - Add try-restart action to init script template.
  - Remove deprecated fedora-diffrpm and fedora-unrpm.
  - Install check-* to %{_prefix}/lib/rpm instead of %{_libdir}/rpm (bug 2351).
  - Check both %{_prefix}/lib and %{_prefix}/lib64 in the xemacs trigger.
  - Update rpminfo to 2004-07-07-01 and include it in the tarball.


author: Caolan McNamara <caolanm@redhat.com> - 2.4-0.4.20070901
changelog:
  - it_IT_README.1st says GPLv2+, but it_IT_README.txt says GPLv3+ -> 
    change license field to GPLv3+


author: Karel Klíč <kklic@redhat.com> - 11.86-9
changelog:
  - ELisp source code is no longer distributed in a separate package
  - License filed includes GFDL for the documentation


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 11.86-6
changelog:
  - Replace define with global in macro definitions
  - Add patch to fix previewing of equations courtesy of Sato Ichi (BZ 646632)
  - Add defattr to doc sub-package


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 11.86-3
changelog:
  - Add COPYING file and other docs to the tex-preview subpackage to comply with
    updated licensing guidelines
  - Remove the no longer needed BuildRoot, %clean and cleaning of Buildroot
    inside %install


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 11.85-11
changelog:
  - Add patch to use evince for PDF file viewing and xdg-open for html file
    viewing
  - Add Requires for evince


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 11.85-4
changelog:
  - Remove BuildRequires for pkgconfig - not needed
  - Clean out uneeded creation of site start directory
  - Remove /usr/share/doc/auctex directory from buildroot


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 11.84-4
changelog:
  - Add macros for automatic detection of Emacs version, site-lisp directory etc
  - Make building of tex-preview subpackage optional, and disable for now
  - Adjust Requires and BuildRequires for texlive
  - Remove auctex-init.el since not needed
  - Make RELEASE utf8


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 11.83-3
changelog:
  - Sync with FC-5 spec file which includes the following changes
  - No longer use makeinstall macro
  - No longer specify texmf-dir, tex-dir for configure
  - Main package now owns the site-lisp auctex and styles directories
  - Place preview.dvi in correct directory, and have tetex-preview own
    it
  - General cleanups


author: Jonathan Underwood <jonathan.underwood@gmail.com> - 11.82-4
changelog:
  - Added preview-latex
  - Removed INSTALL document from package (not necessary)
  - Clean up generation of startup files from spec file


author: Jan-Ake Larsson <jalar@imf.au.dk>
changelog:
  - Adjusted TeX-macro-global and put autoactivation in preinstall
    script so that it can be chosen at install time.


author: Terje Rosten <terje.rosten@ntnu.no> - 1.00-2
changelog:
  - fix license, buildroot and group
  - remove hardcoded packager tag
  - use %configure macro
  - dist tag
  - make install on single line
  - fix files section
  - remove strange use of macros (name, version and release)
  - untabify


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.1002-6
changelog:
  - fix incompatibility with 9.6+ (rhbz#1547424)
  - it's unnecessary to depend on whole java (rhbz#1406931)


author: Pavel Raiskup <praiskup@redhat.com> - 9.2.1002-4
changelog:
  - don't use removed macro %add_to_maven_depmap (#992816)
  - lint: trim-lines, reuse %{name} macro, fedora-review fixes
  - merge cleanup changes by Stano Ochotnicky


author: Tom Lane <tgl@redhat.com> 9.1.901-3
changelog:
  - Change BuildRequires: java-1.6.0-openjdk-devel to just java-devel.
    As of 9.1-901, upstream has support for JDBC4.1, so we don't have to
    restrict to JDK6 anymore, and Fedora is moving to JDK7
  Resolves: #796580


author: Tom Lane <tgl@redhat.com> 9.0.801-4
changelog:
  - Add BuildRequires: java-1.6.0-openjdk-devel to ensure we have recent JDK
  Related: #730588
  - Remove long-obsolete minimum versions from BuildRequires


author: Tom Lane <tgl@redhat.com> 9.0.801-3
changelog:
  - Switch to non-GCJ build, since GCJ is now deprecated in Fedora
  Resolves: #722247
  - Use %{_mavendepmapfragdir} to fix FTBFS with maven 3


author: Tom Lane <tgl@redhat.com> 8.1.405-1jpp
changelog:
  - Split postgresql-jdbc into its own SRPM (at last).
  - Build it from source.  Add support for gcj compilation.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" to devel package, needed by xevie.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXevie to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Hans de Goede <hdegoede@redhat.com> - 1.3.4-1
changelog:
  - xinit 1.3.4
  - Drop xorg-x11-xinit-1.3.2-systemd-logind.patch (included upstream in 1.3.4)
  - Add patches from Fedora to fix automatically finding a free display-number
  - Resolves: rhbz#1194894


author: Hans de Goede <hdegoede@redhat.com> - 1.3.2-14
changelog:
  - Xclients: only try to start gnome classic session if installed
  - Resolves: rhbz#1078948
  - startx: Only specify vt argument automatically when run from a vt
  - Resolves: rhbz#1083188


author: Kevin Fenzi <kevin@scrye.com> 1.3.2-7
changelog:
  - Add patch to not switch tty's, so systemd-logind works right with startx. 
  - Partially Fixes bug #806491


author: Matěj Cepl <mcepl@redhat.com> - 1.0.9-15
changelog:
  - Add xinit-compat script
    Patch from Rex Dieter, bug 540546
    Move xinit-compat script to -session subpackage.


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.9-14
changelog:
  - Eliminate dependency on which.
  - Change Xclients, Xsession and xinitrc-common to make fewer stat calls.
  - Install xinitrc-common non-executable.


author: Matěj Cepl <mcepl@redhat.com> - 1.0.9-9
changelog:
  - consider scripts in /etc/X11/xinit/Xclients.d/ as well
  - add back scripts in Release -7 and -8 from F11 branch.


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.9-8
changelog:
  - have ck-xinit-session tell the session bus to set
    XDG_SESSION_COOKIE for services which it autostarts (#502258)
  - add direct build dependency on dbus-devel, since we call it
    directly now


author: Adam Tkac <atkac redhat com> 1.0.9-5
changelog:
  - run ck-xinit-session for all sessions where the xdg cookie isn't already
    set (#452156, patch from Patrice Dumas)
  - add which Requires (#413041, patch from Patrice Dumas)


author: Matthias Clasen <mclasen@redhat.com> 1.0.9-4
changelog:
  - Make the gnome session actually take the gnome case in the switch (#458694)
  - Update patches
  - Drop upstreamed patch


author: Adam Jackson <ajax@redhat.com> 1.0.7-7
changelog:
  - Xsession: Don't start ssh-agent for gnome sessions anymore, gnome-keyring
    acts as an agent now. (#441123)


author: Adam Jackson <ajax@redhat.com> 1.0.7-4
changelog:
  - xinit-1.0.7-unset.patch: Unset various session-related environment
    variables at the top of startx. (#431899)


author: Ray Strode <rstrode@redhat.com> 1.0.7-3
changelog:
  - don't special case dbus-launch. dbus-x11 now installs
    a script into /etc/X11/xinit/xinitrc.d.
  - Drop the weird grep rule for extensions ending in .sh
    when sourcing /etc/X11/xinit/xinitrc.d


author: Nalin Dahyabhai <nalin@redhat.com> 1.0.7-2
changelog:
  - Try opening the console-kit session after the user's UID has already
    been granted access to the server by localuser.sh, so that console-kit-daemon
    can connect and ask the server for information just by having switch to the
    user's UID (#287941).


author: Soren Sandmann <sandmann@redhat.com> 1.0.2-23
changelog:
  - Fix Xsession to run the login shell inside the setgid ssh-agent, rather
    than the other way around. This preserves LD_LIBRARY_PRELOAD.
    Patch from Stefan Becker, bug 164869.


author: Warren Togami <wtogami@redhat.com> 1.0.2-19
changelog:
  - disable SCIM by default in non-Asian languages #237054
    If you want to use SCIM, use im-chooser to enable it.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Updated to xinit 1.0.0 from X11R7 RC4.
  - Changed manpage dir from man1x to man1 to match upstream default.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-4
changelog:
  - Added Xsession script from xinitrc, as it is very similar codebase, which
    shares "xinitrc-common" anyway, and all of the display managers use it.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-3
changelog:
  - Added "Provides: xinitrc = 5.0.0-1" for temporary compatibility between
    monolithic and modular X.  This will be removed however for FC5.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-2
changelog:
  - Import custom Red Hat xinit scripts from xinitrc package.
  - Obsolete xinitrc package, as we include the scripts/configs here now.
  - Fix all scripts/configs to avoid the now obsolete /usr/X11R6 prefix.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-2
changelog:
  - Use Fedora-Extras style BuildRoot tag.
  - Update BuildRequires to use new library package names.
  - Tidy up spec file a bit.


author: Pawel Salek <pawsa@theochem.kth.se> - 1.0.4-14
changelog:
  - fix bug 599428: use 'version' macro instead of '_version'.
  - Use SSL patch by Ludwig Nussel of SUSE (bugzilla att id 399130).


author: Nalin Dahyabhai <nalin@redhat.com> 0.8.12-4
changelog:
  - include compilation flags for openssl as defined for pkg-config
  - don't blow up on compile because key schedules aren't arrays


author: Ray Strode <rstrode@redhat.com> - 3.28.1-5
changelog:
  - Fix gnome-disk-utility timeout at startup
    Resolves: #1593215
  - add back session properties icons
    Related: #1568620


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel" to devel for xinerama.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXinerama to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-3
changelog:
  - Added "BuildRequires: libXau-devel", as twm fails without it, but does not
    check for it with ./configure.  Bug (fdo#5065)


author: Tom Lane <tgl@redhat.com> 2.3.1-1
changelog:
  - Update to version 2.3.1.  The main externally-visible change is that the
    GUI programs are not part of the unixODBC tarball anymore, so they are no
    longer in this package, and the unixODBC-kde sub-RPM has disappeared.
    There is a separate package unixODBC-gui-qt that now provides those programs.


author: Tom Lane <tgl@redhat.com> 2.2.14-7
changelog:
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparcv9 isn't a possible uname -i output


author: Tom Lane <tgl@redhat.com> 2.2.14-6
changelog:
  - Switch to building against qt4, not qt3.  This means the DataManager,
    DataManagerII, and odbctest applications are gone.
  Resolves: #514064
  - Use Driver64/Setup64 to eliminate need for hand-adjustment of odbcinst.ini
  Resolves: #514688
  - Fix misdeclaration of SQLBIGINT and SQLUBIGINT in generated header files
  Resolves: #518623


author: Peter Lemenkov <lemenkov@gmail.com> - 2.2.14-4
changelog:
  - Properly install *.desktop files
  - No need to ship INSTALL in docs
  - Use macros instead of hardcoded /usr/share and /usr/include
  - fixed permissions on some doc- and src-files
  - Almost all rpmlint messages are gone now


author: Tom Lane <tgl@redhat.com> 2.2.14-1
changelog:
  - Update to unixODBC 2.2.14.  Note this involves an ABI break and a consequent
    soname version bump, because upstream fixed some mistakes in the widths of
    some API datatypes for 64-bit platforms.  Also, the formerly embedded
    mysql, postgresql, and text drivers have been removed.  (For mysql and
    postgresql, use the separate mysql-connector-odbc and postgresql-odbc
    packages, which are far more up to date.  The text driver is not currently
    shipped by upstream at all, but might get revived as a separate SRPM later.)
  - Stop shipping .a library files, per distro policy.
  - Fixes for libtool 2.2.


author: Tom Lane <tgl@redhat.com> 2.2.12-8
changelog:
  - Install icons in /usr/share/pixmaps, not /usr/share/icons as this package
    has historically done; the former is considered correct.


author: Tom Lane <tgl@redhat.com> 2.2.12-6
changelog:
  - Move libodbcinst.so symlink into main package, since it's often dlopen'd
  Related: #204882
  - Clean up specfile's ugly coding for making base-vs-devel decisions


author: Tom Lane <tgl@redhat.com> 2.2.11-6
changelog:
  - Patch NO-vs-no discrepancy between aclocal/acinclude and recent autoconf
    versions (not sure if this has been broken for a long time, or was just
    exposed by modular X changeover).
  - Apparently need to require libXt-devel too for modular X.


author: Tom Lane <tgl@redhat.com> 2.2.11-3
changelog:
  - Force update of yac.h because the copy in the distributed tarball does not
    match bison 2.0's numbering of symbols (bz #162676)
  - Include documentation of text-file driver
  - Use private libltdl so we can omit RTLD_GLOBAL from dlopen flags (bz #161399)


author: Tom Lane <tgl@redhat.com> 2.2.11-2
changelog:
  - Remove Makefiles accidentally included in docs installation (bz #168819)
  - Updates to keep newer libtool code from installing itself as part of package


author: Tom Lane <tgl@redhat.com> 2.2.8-4
changelog:
  - Add dependency to ensure kde subpackage stays in sync with main
    (needed because we moved odbctest from one pkg to the other,
    cf bug #122478)
  - rebuilt


author: Fernando Nasser <fnasser@redhat.com> 2.2.5-9
changelog:
  - Add XFree86-devel to the list of BuildPrereq.  Did not bump
    release as there is no need to rebuild.


author: Fernando Nasser <fnasser@redhat.com> 2.2.5-9
changelog:
  - Add comments to the /etc/odbcinst.ini file regarding the proper
    setup for MySQL and the origin of each library needed.


author: Fernando Nasser <fnasser@redhat.com> 2.2.5-4
changelog:
  - Revert previous change and special case libodbcpsql.so and
    libodbcpsqlS.so instead.  Here is the explanation (from Elliot
    Lee):
    ".so files are only used at link time for normal dynamic libraries.
     The libraries referred to here are being used as dynamically loaded
     modules, so I guess moving those particular .so files back to the
     main package would make sense, but the other .so files should stay
     in the devel subpackage."


author: Fernando Nasser <fnasser@redhat.com> 2.2.5-3
changelog:
  - Moved all the shared library symlinks to the main package.
    They were deliberatedly being added to the devel package for
    unknown reasons but this was forcing users to install the 
    devel package always. 
  - No need to special-case libodbc.so anymore


author: Fernando Nasser <fnasser@redhat.com> 2.2.5-1
changelog:
  - Moved odbctest to the kde package to remove require on Qt stuff
    from the main package.
  - Removed stray "\" from doc/Makefile.am
  - Applied libtool fix (provided by Alex Oliva) so that it build
   with cross-compilers (which are used by 64 bit systems)
  - Updated sources to the 2.2.5 community release
  - Changed the included libtool to the 1.5-3 one so that
    it properly link the libraries with the newly generated ones
    and not with the ones installed on the build system (or give
    an error if an old version is not installed (# 91110)
  - Added new files for executable DataManagerII and icons LinuxODBC.xpm
    and odbc.xpm


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - enable GUI now that we have KDE compiled with the standard
    compiler
  - move the applnk entries to the KDE package


author: Murray Todd Williams <murray@codingapes.com>
changelog:
  - added a unixODBC-devel RPM to the group, added KDE links and icons to system
  - all of which came from recommendations from Fredrick Meunier
  - <Fredrick.Meunier@computershare.com.au>


author: parag <paragn@fedoraproject.org> 0.9.4-2
changelog:
  - Merge-Review #226084
  - Removed BR:pkgconfig 
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed zero-length README file


author: Mike A. Harris <mharris@redhat.com> 0.9.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193429)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.9.0.1-1
changelog:
  - Updated libXrender to version 0.9.0.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Livy Ge <livy.ge@oracle.com> - 15-2.0.1
changelog:
  - updated BOOT*.CSV files to contain Oracle Linux
    [Orabug: 28073193]
  - Pack files in efidir with disabled rpm verification
    [bug 27166040]
  - updated with shimia32.efi and shimx64.efi signed by Microsoft
  - Use redhat as efidir to maintain compatibility with RedHat


author: Peter Jones <pjones@redhat.com> - 12-2
changelog:
  - Fix /boot/efi/... permissions to match the filesystem's requirements
    Related: rhbz#1512749
  - Minor .spec cleanups
    Related: rhbz#1512749


author: Peter Jones <pjones@redhat.com> - 11-0.1
changelog:
  - Update to 11-0.1 to match shim-11-1
    Related: rhbz#1310766
  - Fix regression in PE loader
    Related: rhbz#1310766
  - Fix case where BDS invokes us wrong and we exec shim again as a result
    Related: rhbz#1310766


author: Peter Jones <pjones@redhat.com> - 10-0.1
changelog:
  - Support ia32
    Resolves: rhbz#1310766
  - Handle various different load option implementation differences
  - TPM 1 and TPM 2 support.
  - Update to OpenSSL 1.0.2k


author: Peter Jones <pjones@redhat.com> - 0.9-2
changelog:
  - Apparently I'm *never* going to learn to build this in the right target
    the first time through.
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 0.7-14
changelog:
  - Pull in aarch64 build so they can compose that tree.
    (-14 to match -unsigned)
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 0.7-10
changelog:
  - Rebuild for Aarch64 to get \EFI\BOOT\BOOTAA64.EFI named right.
    (I managed to fix the inputs but not the outputs in -9.)
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 0.7-8
changelog:
  - Build for aarch64 as well 
    Related: rhbz#1100048
  - out-of-bounds memory read flaw in DHCPv6 packet processing
    Resolves: CVE-2014-3675
  - heap-based buffer overflow flaw in IPv6 address parsing
    Resolves: CVE-2014-3676
  - memory corruption flaw when processing Machine Owner Keys (MOKs)
    Resolves: CVE-2014-3677


author: Peter Jones <pjones@redhat.com> - 0.7-7
changelog:
  - Make sure we use the right keys on Aarch64.
    (It's only a demo at this stage.)
    Related: rhbz#1100048


author: Peter Jones <pjones@redhat.com> - 0.4-1
changelog:
  - Provide a fallback for uninitialized Boot#### and BootOrder
    Resolves: rhbz#963359
  - Move all signing from shim-unsigned to here
  - properly compare our generated hash from shim-unsigned with the hash of
    the signed binary (as opposed to doing it manually)


author: Peter Jones <pjones@redhat.com> - 0.2-3.3
changelog:
  - Add obsoletes and provides for earlier shim-signed packages, to cover
    the package update cases where previous versions were installed.
    Related: rhbz#888026


author: Peter Jones <pjones@redhat.com> - 0.2-3
changelog:
  - Also provide shim-fedora.efi, signed only by the fedora signer.
  - Fix the fedora signature on the result to actually be correct.
  - Update for shim-unsigned 0.2-3


author: Victor Toso <victortoso@redhat.com> - 0.1.5-5
changelog:
  - Fix crash due uninitialized pointer
    Resolves: rhbz#1690453
  - Call LeaveVt on shutdown to avoid racy situations
    Resolves: rhbz#1640918


author: Christophe Fergeau <cfergeau@redhat.com> 0.1.1-17
changelog:
  - Fix freeze in xfig when entering space character
    Resolves: rhbz#1221909
  - Fix memory leak
    Resolves: rhbz#1222038
  - Fix cursor leak causing a crash when running RHEL6 anaconda in a VM
    Resolves: rhbz#1222040


author: Marc-Andre Lureau <marcandre.lureau@redhat.com> - 0.1.1-16
changelog:
  - Fix glitches when restarting X server
    Resolves: rhbz#1102175
  - Fix restarting X server
    Resolves: rhbz#1185807


author: Marc-Andre Lureau <mlureau@redhat.com> 0.1.1-12
changelog:
  - Try to fallback to previous working configuration if
    drmModeSetCrtc() failed.
    Resolves: rhbz#1127552


author: Dave Airlie <airlied@redhat.com> 0.1.1-0.13
changelog:
  - resnapshot upstream to pick up a few patches
  - add userspace patch to use new kernel hotspot interface (#974662)


author: Hans de Goede <hdegoede@redhat.com> - 0.0.21-5
changelog:
  - Rebase to latest upstream release
  - Enable building of the Xspice X-server and put it in its own
    xorg-x11-server-Xspice package


author: Hans de Goede <hdegoede@redhat.com> 0.0.21-3
changelog:
  - Add various bugfixes from upstream git
  - Fixes VT-switching (rhbz#696711)
  - Add support for old qxl device (from rhel6 branch) (rhbz#642153)


author: Hans de Goede <hdegoede@redhat.com> 0.0.20.f14b-6
changelog:
  - Fix a pointer casting bug which causes the qxl driver to trigger an
    assertion in the qxl device terminating the entire virtual machine


author: Hans de Goede <hdegoede@redhat.com> 0.0.20.f14b-5
changelog:
  - Don't access the qxl device when our vt is not focussed, this fixes
    Xorg crashing when switching to a text vc


author: Hans de Goede <hdegoede@redhat.com> 0.0.20.f14b-3
changelog:
  - Add support for using resolutions > 1024x768 without needing an xorg.conf
  - Restore textmode font when switching back to a textmode virtual console


author: Soren Sandmann <ssp@redhat.com> 0.0.20.f14b-2
changelog:
  - Patch to fix it up for the new privates ABI (I had apparently been
    testing with a too old X server).


author: lans.hung@oracle.com <lans.hung@oracle.com> - 2.9.4-1.0.5.el7
changelog:
  - update to 2.9.4-1.0.5.el7 (lans.hung@oracle.com)  
  - update changelog in .spec file (lans.hung@oracle.com)  
  - move patch to buildrpm/ to fix build failure (lans.hung@oracle.com)  
  - Fix int64_t & uint64_t conflict issue on aarch64. This issue doesn't happen in x86_64 because its bits/sigcontext.h does not include asm/sigcontext.h, which it does on arm64, causing the __s64 definition conflict. This fix uses linux/types.h over manually defined int*_t and uint*_t in fuse_kernel.h. (Lans Hung)  [Orabug: 27889694]


author: Ashish Samant <ashish.samant@oracle.com> - 2.9.4-1.0.4.el7
changelog:
  - Revert "libfuse: add flags to ->rename()" (Ashish Samant)  
  - Revert "libfuse: Disable renameat2 until proper support is added" (Ashish Samant)  
  - libfuse: Fix definition of fuse_parse_cmdline() (Ashish Samant)  
  - libfuse: Remove preun script that deleted fuse group from spec file (Ashish Samant)  
  - Add compatibility symlinks for ol6 (Ashish Samant)  
  - fix fusermount so it can only be executed by memebers of the fuse group (Ashish Samant)


author: Ashish Samant <ashish.samant@oracle.com> - 2.9.4-1.0.1
changelog:
  - libfuse 2.9.4 from mainline with bug fixes.
  - New features backported and added from libfuse 3.0
  - For eg: writeback_cache, async_dio , readdirplus etc.
  - Conatins the numa patches as well.


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.7.0-2
changelog:
  - redefine exec_prefix to /
  - redefine bindir to /bin
  - redefine libdir to lib64
  - don't pass --disable-static to configure
  - manually rm generated static libs


author: Thorsten Leemhuis <fedora[AT]leemhuis[DOT]info> - 2.4.1-3
changelog:
  - Add README.fedora
  - Add hint to README.fedora and that you have to be member of the group "fuse"
    in the description
  - Use groupadd instead of fedora-groupadd


author: Thorsten Leemhuis <fedora[AT]leemhuis[DOT]info> - 2.4.1-2
changelog:
  - Rename packages a bit
  - use makedev.d/40-fuse.nodes
  - fix /sbin/mount.fuse
  - Use a fuse group to restict access to fuse-filesystems


author: Chris Spike <spike@fedoraproject.org> 1.5.5-4
changelog:
  - Removed maven* BRs in favour of apache-commons-parent
  - Added deprecated groupId to depmap for compatibility reasons


author: Miloslav Trmač <mitr@redhat.com> - 0.58-2
changelog:
  - Always use secure_getenv() or __secure_getenv(), fail build if neither is
    available.  Patch by Viktor Hercinger <vhercing@redhat.com>.


author: Miloslav Trmač <mitr@redhat.com> - 0.56.13-1
changelog:
  - Update to libuser-0.56.13.
    Resolves: #251951
    Resolves: #454079
    Resolves: #456373
    Resolves: #456382
    Resolves: #530513


author: Miloslav Trmač <mitr@redhat.com> - 0.56.11-1
changelog:
  - Update to libuser-0.56.11.
    Resolves: #454091
    Resolves: #456267
    Resolves: #456270
    Resolves: #487129


author: Miloslav Trmač <mitr@redhat.com> - 0.56.7-1
changelog:
  - Add support for SHA256 and SHA512 in password hashes
    Related: #173583
  - Fix file locking on some architectures
  - Rename sr@Latn.po to sr@latin.po
    Resolves: #426584
  - Address issues from a review by Jason Tibbitts:
    - Remove default.-c, moving the provided functions to libuser proper
    - Remove the WITH_SELINUX build option
    - Move Python library test to %check
    Resolves: #226054


author: Miloslav Trmač <mitr@redhat.com> - 0.56.6-1
changelog:
  - Set SELinux file contexts when creating home directories, preserve them when
    moving home directories
    Resolves: #351201


author: Miloslav Trmač <mitr@redhat.com> - 0.56.5-1
changelog:
  - Work around spurious error messages when run against the Fedora Directory
    server
  - Fix error reporting when creating home directories and creating/removing mail
    spool files
    Resolves: #318121


author: Miloslav Trmač <mitr@redhat.com> - 0.56.4-2
changelog:
  - Split the Python module to a separate subpackage (original patch by Yanko
    Kaneti)
  - Update the License: tag


author: Miloslav Trmac <mitr@redhat.com> - 0.56.1-1
changelog:
  - When changing passwords, only silently ignore know shadow markers, not all
    invalid hashes
    Resolves: #225495


author: Miloslav Trmac <mitr@redhat.com> - 0.56-1
changelog:
  - Tighten the API and implementation to avoid corrupting number-like strings;
    the module interface ABI has changed
    Resolves: #226976


author: Miloslav Trmac <mitr@redhat.com> - 0.54.6-1
changelog:
  - Fix bugs in handling of invalid lines in the files and shadow modules
  - Fix pattern matching in lu_*_enumerate_full in the files and shadow modules
  - Add more error reporting, return non-zero exit status on error from utils
  - Use the skeleton directory specified in libuser.conf by Python
    admin.createHome and admin.addUser, add parameter skeleton= to admin.addUser
    (#189984)


author: Miloslav Trmac <mitr@redhat.com> - 0.54.1-1
changelog:
  - Support importing of configuration from shadow-utils (/etc/login.defs and
    /etc/default/useradd)
  - Add libuser.conf(5) man page


author: Miloslav Trmac <mitr@redhat.com> - 0.54-1
changelog:
  - Make sure attributes with no values can never appear
  - Fix crash in the "files" module when an attribute is missing
  - Use hidden visibility for internal functions, remove them from
    libuser/user_private.h; this changes module interface ABI


author: Miloslav Trmac <mitr@redhat.com> - 0.53.8-1
changelog:
  - Permit "portable" user and group names as defined by SUSv3, plus trailing $
    (#159452)
  - Don't build static libraries


author: Miloslav Trmac <mitr@redhat.com> - 0.53.5-1
changelog:
  - Ignore nss_compat lines in the "files" module (#154651)
  - Autodetect Python version (#154096)
  - Add BuildRequires: libselinux-devel, s/BuildPrereq/BuildRequires/


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-2
changelog:
  - Add Requires: glib2-devel to libuser-devel (#152501)
  - Run ldconfig using %post{,un} -p to let RPM play tricks


author: Miloslav Trmac <mitr@redhat.com> - 0.53.3-1
changelog:
  - Don't silently ignore some I/O errors
  - Don't include a Cyrus SASL v1 header file when libldap links to v2 (#150046)
  - Rebuild with gcc 4


author: Miloslav Trmac <mitr@redhat.com> - 0.53.2-1
changelog:
  - Important bug fixes in lchage, lgroupmod, lnewusers and lusermod
  - Minor bug fixes in lpasswd and luseradd
  - Add man pages for the utilities (#61673)


author: Miloslav Trmac <mitr@redhat.com> - 0.53-1
changelog:
  - Support UID and GID values larger than LONG_MAX (#124967)
  - Fix updating of groups after user renaming in lusermod
  - Allow setting a shadow password even if the current shadow password is
    invalid (#131180)
  - Add lu_{user,group}_unlock_nonempty (#86414); module interface ABI has 
    changed
  - Miscellaneous bug and memory leak fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.6-1
changelog:
  - Make error reporting more consistent, more verbose and always on stderr
    (partly #133861, original patch by Pawel Salek)
  - Mark strings previously blocked by string freeze for translation


author: Miloslav Trmac <mitr@redhat.com> - 0.52.5-1
changelog:
  - Fix home directory renaming in ADMIN.modifyUser (#135280)
  - Further Python reference counting fixes


author: Miloslav Trmac <mitr@redhat.com> - 0.52.2-1
changelog:
  - Allow LDAP connection using ldaps, custom ports or without TLS (original
    patch from Pawel Salek).


author: Miloslav Trmac <mitr@redhat.com> - 0.51.12-1
changelog:
  - Don't claim success and exception at the same time (#133479)
  - LDAP fixes, second round
  - Various other bugfixes


author: Miloslav Trmac <mitr@redhat.com> - 0.51.11-1
changelog:
  - Allow documented optional arguments in Python
    ADMIN.{addUser,modifyUser,deleteUser} (#119812)
  - Add man pages for lchfn and lchsh
  - LDAP fixes, first round
  - Avoid file conflict on multilib systems
  - Call ldconfig correctly


author: Miloslav Trmac <mitr@redhat.com> - 0.51.10-1
changelog:
  - Don't attempt to lookup using original entity name after entity
    modification (rename in particular) (#78376, #121252)
  - Fix copying of symlinks from /etc/skel (#87572, original patch from gLaNDix)
  - Make --enable-quota work, and fix the quota code to at least compile (#89114)
  - Fix several bugs (#120168, original patch from Steve Grubb)
  - Don't hardcode python version in spec file (#130952, from Robert Scheck)
  - Properly integrate the SELinux patch, it should actually be used now, even
    though it was "enabled" since 0.51.7-6


author: Miloslav Trmac <mitr@redhat.com> - 0.51.8-1
changelog:
  - Update to build with latest autotools and gtk-doc
  - Update ALL_LINGUAS and POTFILES.in
  - Rebuild to depend on newer openldap


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.7-1
changelog:
  - ldap: set error codes correctly when we encounter failures initializing
  - don't double-close modules which fail initialization
  - ldap: don't set an error in cases where one is already set


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.6-1
changelog:
  - use a crypt salt consistent with the defaults/crypt_style setting when
    setting new passwords (#79337)


author: Nalin Dahyabhai <nalin@redhat.com> 0.51.5-1
changelog:
  - expose lu_get_first_unused_id() as a package-private function
  - provide libuser.ADMIN.getFirstUnusedUid and libuser.ADMIN.getFirstUnusedGid
    in python


author: Nalin Dahyabhai <nalin@redhat.com> 0.51-1
changelog:
  - files: ignore blank lines in files
  - libuser: disallow creation of accounts with names containing whitespace,
    control characters, or non-ASCII characters


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.101-1
changelog:
  - fix python bindings of enumerateFull functions
  - adjust prompter wrapping to not error out on successful returns


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.100-1
changelog:
  - be more careful about printing error messages
  - fix refreshing after adding of accounts
  - ldap: try to use a search to convert names to DNs, and only fall back to
    guessing if it turns up nothing
  - files: fix an off-by-one in removal of entries


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.98-1
changelog:
  - automatically refresh entities after add, modify, setpass, removepass,
    lock, and unlock operations
  - remove debug spewage when creating and removing mail spools
  - files: fix saving of multi-valued attributes
  - rename MEMBERUID attribute for groups to MEMBERNAME


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.97-1
changelog:
  - files: fix bug in removals
  - ldap: revert attempts at being smart at startup time, because it makes UIs
    very messy (up the three whole dialogs just to start the ldap stuff!)


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.93-1
changelog:
  - move shadow initialization for groups to the proper callback
  - rework locking in the files module to not require that files be writable


author: Nalin Dahyabhai <nalin@redhat.com> 0.49.91-1
changelog:
  - ldap: finish port to new API
  - sasl: finish port to new API (needs test)
  - libuser: don't commit object changes before passing data to service
    functions which might need differing data sets to figure out what to
    change (for example, ldap)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - renamed the python module
  - revamped internals to use gobject's gvalues and gvaluearrays instead of
    glists of cached strings
  - add enumeration-with-data functions to the C library


author: Nalin Dahyabhai <nalin@redhat.com> 0.32-1
changelog:
  - link the python module against libpam
  - attempt to import the python modules at build-time to verify dependencies


author: Nalin Dahyabhai <nalin@redhat.com> 0.30-1
changelog:
  - quotaq: fix argument order when reading quota information
  - user_quota: set quota grace periods correctly
  - luseradd: never create home directories for system accounts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - HUP nscd on modifications
  - userutil.c: mmap files we're reading for probable speed gain
  - userutil.c: be conservative with the amount of random data we read
  - docs fixes


author: Nalin Dahyabhai <nalin@redhat.com> 0.28-1
changelog:
  - apps: print usage on errors
  - lnewusers.c: initialize groups as groups, not users
  - lnewusers.c: set passwords for new accounts
  - luseradd.c: accept group names in addition to IDs for the -g flag
  - luseradd.c: allow the primary GID to be a preexisting group


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-1
changelog:
  - add ko translation files
  - files.c: fix a heap corruption bug in lock/unlock (#51750)
  - files.c: close a memory leak in reading of files


author: Nalin Dahyabhai <nalin@redhat.com> 0.26-1
changelog:
  - lusermod: change user name in groups the user is a member of during renames
  - lgroupmod: change primary GID for users who are in the group during renumbers
  - ldap.c: handle new attributes more gracefully if possible
  - add ru translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.25.1-1
changelog:
  - rename the quota source files to match the library, which clears up a
    file conflict with older quota packages
  - add ja translation files


author: Nalin Dahyabhai <nalin@redhat.com> 0.25-1
changelog:
  - close up some memory leaks
  - add the ability to include resident versions of modules in the library


author: Nalin Dahyabhai <nalin@redhat.com> 0.24-3
changelog:
  - stop leaking descriptors in the files module
  - speed up user creation by reordering some checks for IDs being in use
  - update the shadowLastChanged attribute when we set a password
  - adjust usage of getXXXXX_r where needed
  - fix assorted bugs in python binding which break prompting


author: Nalin Dahyabhai <nalin@redhat.com> 0.23-1
changelog:
  - install sv translation
  - make lpasswd prompt for passwords when none are given on the command line
  - make sure all user-visible strings are marked for translation
  - clean up some user-visible strings
  - require PAM authentication in lchsh, lchfn, and lpasswd for non-networked modules


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - print uids and gids of users and names in lid app
  - fix tree traversal in users_enumerate_by_group and groups_enumerate_by_users
  - implement enumerate_by_group and enumerate_by_user in ldap module
  - fix id-based lookups in the ldap module
  - implement islocked() method in ldap module
  - implement setpass() method in ldap module
  - add lchfn and lchsh apps
  - add %d substitution to libuser.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.21-1
changelog:
  - finish adding a sasldb module which manipulates a sasldb file
  - add users_enumerate_by_group and groups_enumerate_by_users


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - luserdel: remove the user's primary group if it has the same name as
    the user and has no members configured (-G disables)
  - fixup some configure stuff to make libuser.conf get generated correctly
    even when execprefix isn't specified


author: Nalin Dahyabhai <nalin@redhat.com> 0.20-1
changelog:
  - only call the auth module when setting passwords (oops)
  - use GTrees instead of GHashTables for most internal tables
  - files: complain properly about unset attributes
  - files: group passwords are single-valued, not multiple-valued
  - add lpasswd app, make sure all apps start up popt with the right names


author: Nalin Dahyabhai <nalin@redhat.com> 0.18-1
changelog:
  - actually make the new optional arguments optional
  - fix lu_error_new() to actually report errors right
  - fix part of the python bindings
  - include tools in the binary package again
  - fixup modules so that password-changing works right again
  - add a "key" field to prompt structures for use by apps which like to
    cache these things
  - add an optional "mvhomedir" argument to userModify (python)


author: Nalin Dahyabhai <nalin@redhat.com> 0.16.1-1
changelog:
  - finish home directory population
  - implement home directory moving
  - change entity get semantics in the python bindings to allow default values for .get()
  - add lu_ent_has(), and a python has_key() method to Entity types
  - don't include tools in the binary package
  - add translated strings


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - lib/user.c: catch and ignore errors when running stacks
  - lusermod: fix slightly bogus help messages
  - luseradd: when adding a user and group, use the gid of the group
    instead of the user's uid as the primary group
  - properly set the password field in user accounts created using
    auth-only auth modules (shadow needs "x" instead of "!!")
  - implement home directory removal, start on population


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix group password setting in the files module
  - setpass affects both auth and info, so run both stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix errors due to uninitialized fields in the python bindings
  - add kwargs support to all python wrappers
  - add a mechanism for passing arguments to python callbacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't bail when writing empty fields to colon-delimited files
  - use permissions of the original file when making backup files instead of 0600


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish implementing is_locked methods in files/shadow module
  - finish cleanup of the python bindings
  - allow conditional builds of modules so that we can build without
    all of the prereqs for all of the modules


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clean up quota bindings some more
  - finish most of the ldap bindings
  - fix a subtle bug in the files module that would show up when renaming accounts
  - fix mapping methods for entity structures in python


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - get bindings for prompts to work correctly
  - clean up some of the add/remove semantics (set source on add)
  - ldap: implement enumeration
  - samples/enum: fix the argument order


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add functions for enumerating users and groups, optionally per-module
  - lusermod.c: -s should specify the shell, not the home directory


author: Nalin Dahyabhai <nalin@redhat.com> 0.8
changelog:
  - add a "quiet" prompter
  - add --interactive flag to sample apps and default to using quiet prompter
  - ldap: attempt a "self" bind if other attempts fail
  - krb5: connect to the password-changing service if the user principal has
    the NULL instance


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - the great adding-of-the-copyright-statements
  - take more care when creating backup files in the files module


author: Nalin Dahyabhai <nalin@redhat.com> 0.7
changelog:
  - add openldap-devel as a buildprereq
  - krb5: use a continuous connection
  - krb5: add "realm" config directive
  - ldap: use a continuous connection
  - ldap: add "server", "basedn", "binddn", "user", "authuser" config directives
  - ldap: actually finish the account deletion function
  - ldap: don't send cleartext passwords to the directory
  - fix naming attribute for users (should be uid, not gid)
  - refine the search-by-id,convert-to-name,search-by-name logic
  - fix handling of defaults when the config file is read in but contains no value
  - implement an LDAP information store
  - try to clean up module naming with libtool
  - luseradd: pass plaintext passwords along
  - luseradd: use symbolic attribute names instead of hard-coded
  - lusermod: pass plaintext passwords along
  - lgroupadd: pass plaintext passwords along
  - lgroupmod: pass plaintext passwords along
  - add libuser as a dependency of libuser-devel


author: W. Michael Petullo <mike[@]flyn.org> - 2.1.8-1
changelog:
  - New upstream version.
  - Update Source and URL.
  - BuildRequire gdk-pixbuf2-devel for DACP.
  - BuildRequire libsoup-devel >= 2.32 for DACP.
  - BuildRequire gstreamer-plugins-base-devel >= for transcoding.


author: W. Michael Petullo <mike[@]flyn.org> - 1.9.0.3-1
changelog:
  - New upstream version.
  - Use "-p /sbin/ldconfig."
  - Remove requires that are already known by RPM.
  - libdmapsharing-devel package now requires pkgconfig.
  - Remove irrelevant INSTALL documentation.


author: W. Michael Petullo <mike[@]flyn.org> - 1.9.0.1-3
changelog:
  - Require libsoup >= 2.25.92, as this version supports SOUP_ENCODING_EOF
  message encoding, required for HTTP 1.0 clients.


author: Jerry James <loganjerry@gmail.com> - 0.9.5-3
changelog:
  - Fix unowned directory (bz 473635)
  - Drop unnecessary BuildRequires
  - Replace patches with addition of -fPIC to CFLAGS in the spec file
  - Add some more documentation files


author: Paul Howarth <paul@city-fan.org> - 1.60-8
changelog:
  - Retain runtime dependency of perl(Business::ISBN) when bootstrapping; a
    better fix for the build dependency cycle was to drop LWP::Simple as a
    buildreq of perl-Business-ISBN (needed only for optional tests) when
    bootstrapping


author: Paul Howarth <paul@city-fan.org> - 1.60-1
changelog:
  - Update to 1.60
    - Do not reverse the order of new parameters
    - Avoid test failure if the local hostname is 'foo' (CPAN RT#75519)
    - Work around a stupid join bug in 5.8.[12] (CPAN RT#59274)
    - Updated repository URL
  - Don't need to remove empty directories from buildroot
  - BR: perl(constant)


author: Paul Howarth <paul@city-fan.org> - 1.59-3
changelog:
  - Break build dependency loop by only using perl(Business::ISBN) if we're not
    bootstrapping
  - BR: perl(Carp) and perl(Exporter)
  - Make %files list more explicit
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Don't use macros for commands


author: Robin Norwood <rnorwood@redhat.com> - 1.35-4
changelog:
  - Fix various package review issues:
  - Remove redundant BR: perl
  - remove "|| :" from %check
  - move requires filter into spec file
  - remove tabs and fix spacing


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193502)
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192725)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXres to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXres to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXres to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Rex Dieter <rdieter@fedoraproject.org> 1.1.1-2
changelog:
  - workaround anaconda main menu not visible in F18 Beta TC2 KDE Live (#864058)
  - -DENABLE_INNER_SHADOWS_HACK=0


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.16-11
changelog:
  - Fix connection fails to openwsman with sfcbLocal frontend
    Resolves: #1047781
  - Fix multilib issue with man page and config file
    Resolves: #1067842


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.16-3
changelog:
  - Fix indCIMXmlHandler crash in IndCIMXMLHandlerInvokeMethod with Embedded Instances 
    Resolves: #957747
  - Fix sfcb creates invalid XML with embedded object inside embedded object
    Resolves: #957742


author: Praveen K Paladugu <praveen_paladugu@dell.com> - 1.3.10-2
changelog:
  - Following the BZ#660072, added sfcb.service file for compliance with systemd
  - Since sfcb's PAM authentication requires, the user to be in group sfcb, 
  -    added the root user to "sfcb" group in %pre section.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.3.9-1
changelog:
  - Update to sblim-sfcb-1.3.9
  - Compile with --enable-uds, i. e. enable unix domain socket local
    connect functionality
  - Create sfcb system group (used by basic authentication with PAM)
    in pre install scriptlet
  - Fix default location where sfcbrepos is looking for schema files
    and simplify sfcbrepos command in post install sciptlet
  - Add missing soname files


author: <srinivas_ramanatha@dell.com> - 1.3.4-5
changelog:
  - added the devel package to fit in all the development files 
  - Made changes to the initscript not to start the service by default


author: <ratliff@austin.ibm.com> - 1.3.4-4
changelog:
  - added build requires for flex, bison, cim-schema suggested by Sean Swehla
  - added sfcbrepos directive to post section


author: <ratliff@austin.ibm.com> - 1.3.4-3
changelog:
  - re-ordered the top so that the name comes first
  - added the la files to the package list
  - removed the smp flags from make because that causes a build break
  - updated spec file to remove schema and require the cim-schema package
  - change provides statement to cim-server as suggested by Matt Domsch
  - updated to upstream version 1.3.4 which was released Jun 15 2009


author: <ratliff@austin.ibm.com> - 1.3.2-2
changelog:
  - updated spec file based on comments from Srini Ramanatha as below:
  - updated the Release line to add dist to be consistent with sblim-sfcc
  - updated the source URL


author: <ratliff@austin.ibm.com> - 1.3.2-1
changelog:
  - updated upstream version and added CFLAGS to configure to work 
  - around http://sources.redhat.com/bugzilla/show_bug.cgi?id=6545


author: <ratliff@austin.ibm.com> - 1.3.0-1
changelog:
  - updated buildrequires to require libcurl-devel rather than curl-devel
  - removed requires to allow rpm to automatically generate the requires
  - removed echo to stdout
  - removed paranoia check around cleaning BuildRoot per Fedora MUST requirements
  - changed group to supress rpmlint complaint
  - added chkconfig to enable sfcb by default when it is installed
  - added patch0 to enable 1.3.0 to build on Fedora 9


author: Kamil Dudka <kdudka@redhat.com> - 1:4.5.10-7
changelog:
  - fix specfile issues reported by the fedora-review script
  - do not use the AM_C_PROTOTYPES macro (removed in Automake 1.12)
  - do not require gets() to be declared


author: Kamil Dudka <kdudka@redhat.com> - 1:4.4.2-4
changelog:
  - make it possible to recognize an autofs filesystem by find
  - add a new find's option -xautofs to not descend directories on autofs
    filesystems


author: Miloslav Trmac <mitr@redhat.com> - 1:4.2.27-2
changelog:
  - Don't use uninitialized memory in -printf %Z (#174485)
  - Ship more documentation files
  - Clean up the spec file a bit


author: Tim Waugh <twaugh@redhat.com> 1:4.2.26-1
changelog:
  - One further arg_max fix for PPC.
  - Applied arg_max patch from upstream to fix test suite failures.
  - 4.2.26 (fixes bug #173817).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Removed "G" and "M" size qualifiers from man page, since support for
    those is not in the stable branch (bug #141987).


author: Tim Waugh <twaugh@redhat.com> 1:4.1.20-1
changelog:
  - Clarify find man page (bug #126098).
  - Apply changes by Robert Scheck <redhat@linuxnetz.de> (bug #126352):
    - Upgrade to 4.1.20 and some specfile cleanup


author: Preston Brown <pbrown@redhat.com>
changelog:
  - 4.1.5, FHS paths
  - remove mktemp,getshort patches (don't ship locate)
  - alpha, numblks patch no longer needed


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated updatedb cron script to not look for $TMPNAME.n (which was
    a relic anyway)
  - added -b parameters to all of the patches


author: Jan Zeleny <jzeleny@redhat.com> - 2.2-3
changelog:
  - minor changes in spec file - filenames change, removal of
    duplicate patch files (included in build source tarball)


author: Hans de Goede <hdegoede@redhat.com> - 2.35.0-3
changelog:
  - Fix including rsvg.h always causing a deprecated warning, as this breaks
    apps compiling with -Werror


author: Adam Tkac <atkac redhat com> - 2.31.0-0.3.20100628git
changelog:
  - fix crash in rsvg-gobject.c:instance_dispose function
    (https://bugzilla.gnome.org/show_bug.cgi?id=623383)


author: Matthias Clasen <mclasen@redhat.com> - 2.31.0-0.1.20100628git
changelog:
  - Update to a git snapshot that builds against standalone gdk-pixbuf
  - Drop librsvg3 package
  - Drop svg theme engine


author: Matthias Clasen <mclasen@redhat.com> - 2.8.1-2
changelog:
  - Must use the same rpm macro for the host triplet as the
    gtk2 package, otherwise things can fall apart.  (#137676)


author: Dan Williams <dcbw@redhat.com> - 2.6.4-7
changelog:
  - Fix usage of "%{_bindir}/update-gdk-pixbuf-loaders %{_host}" 
    to point to right place and architecture


author: Alexander Larsson <alexl@redhat.com>
changelog:
  - Add a patch that moves the includes to librsvg-1/librsvg
  - in preparation for a later librsvg 2 library.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Put changelog at the end
  - Move .so files to devel subpackage
  - Don't mess with ld.so.conf
  - Don't use %{prefix}, this isn't a relocatable package
  - Don't define a bad docdir
  - Add BuildRequires
  - Use %{_tmppath}
  - Don't define name, version etc. on top of the file (why 
    do so many do that?)
  - s/Copyright/License/


author: Marian Csontos <mcsontos@redhat.com> - 0.7.3-1
changelog:
  - Update to latest bugfix and documentation update release.
  - *_restore tools wipe superblock as a last resort.
  - Add thin_check --override-mapping-root.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.2-1
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - Fix segfault when dump tools are given a tiny metadata file.
  - Fix -V exiting with 1.
  - Fix thin_check when running on XML dump instead of binary data.
  - Speed up free block searches.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc6
changelog:
  - Don't open devices as writeable if --clear-needs-check-flag is not set.
  - Fix cache metadata format version 2 superblock packing.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.7.0-0.1-rc3
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - New thin_show_duplicates command.
  - Add '--skip-mappings' and '--format custom' options to thin_dump.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-2
changelog:
  - Improve documentation and messages on output file preallocation
    when using thin_repair and thin_restore.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.6.2-0.1.rc5
changelog:
  - New thin_ls command.
  - era_invalidate may be run on live metadata if the --metadata-snap
    option is given.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.5-1
changelog:
  - Support thin_delta's --metadata_snap option without specifying snap location.
  - Update man pages to make it clearer that tools shoulnd't be run on live metadata.
  - Fix bugs in the metadata reference counting for thin_check.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.4-1
changelog:
  - Fix cache_check with --clear-needs-check-flag option to
    make sure metadata device is not open already by the tool
    when open with O_EXCL mode is requested.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.3-1
changelog:
  - Tools now open the metadata device in O_EXCL mode to stop
    running the tools on active metadata.
  - Update to latest upstream release.


author: Peter Rajnoha <prajnoha@redhat.com> - 0.5.1-1
changelog:
  - Add space map checking for thin_check.
  - Add --clear-needs-check option for cache_check.
  - Update to latest upstream release.


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.2-1
changelog:
  - New upstream version with missing man pages, thin_metadata_size
    calculator and thin_dump metadata snapshot support.
  - Manual page header fixes


author: Karel Zak <kzak@redhat.com> 4.83-1
changelog:
  - upgrade to 4.83 (see the 00DIST file for list of changes)
  - remove lsof_4.83A-selinux-typo.patch (fixed upstream)


author: Karel Zak <kzak@redhat.com> 4.82-1
changelog:
  - upgrade to 4.82 (see the 00DIST file for list of changes)
  - backport an upstream patch from 4.83A-linux
  - remove lsof_4.81-man.patch (fixed upstream)


author: Karel Zak <kzak@redhat.com> 4.80-1
changelog:
  - upgrade to 4.80
    - lsof_4.78C-inode.patch - merged upstream
    - lsof_4.78C-selinux.patch - merged upstream
    - lsof_4.78C-threads.patch - rebased


author: Karel Zak <kzak@redhat.com> 4.78-6
changelog:
  - fix #280651 - lsof prints entries in multiple lines when SElinux is disabled
  - fix #243976 - mmap'd files with large inode numbers confuse lsof


author: Maciej Lesniewski <nimir@kis.p.lodz.pl>
changelog:
  [4.34-1]
  - New version
  - Spec rewriten to use %{name} and %{version} macros
  - Removed old log enteries


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-32
changelog:
  - Include preauth name in trace output if possible
  - Update cert generation scripts to work on modern openssl
  - Fix per-request preauth scoping
  - Add test case for PKINIT DH renegotiation
  - Echo KDC cookies in preauth tryagain
  - Fall back to other preauth mechanisms after failures
  - Resolves: #1540130


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-29
changelog:
  - Process profile includedir in sorted order
  - Also, ignore dotfiles in included directories
  - Resolves: #1539824


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-23
changelog:
  - Fix flaws in LDAP DN checking (CVE-2018-5729, CVE-2018-5730)
  - Resolves: #1562684
  - Resolves: #1562679


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-4
changelog:
  - Backport certauth plugin and related pkinit changes
  - Note: related changes cannot be tested because RHEL does not allow
    binary git diffs
  - Resolves: #1428484


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-1
changelog:
  - Bump to krb5-1.15.1 (very small change)
  - Apply some sanity to our patches and ordering
  - Resolves: #1389073


author: Robbie Harwood <rharwood@redhat.com> - 1.15-1
changelog:
  - Rebase to 1.15-final
  - Resolves: #1389073
  - Resolves: #1367169
  - Resolves: #1389072
  - Resolves: #1366863


author: Robbie Harwood <rharwood@redhat.com> - 1.14.1-16
changelog:
  - Fix kprop/iprop handling of default realm
  - Fix t_kprop.py
  - Resolves: #1290561
  - Resolves: #1302967
  - Resolves: #1292795


author: Robbie Harwood <rharwood@redhat.com> - 1.14.1-1
changelog:
  - Rebase to new upstream version 1.14.1
  - Remove pax logic
  - Resolves: #1292153
  - Resolves: #1135427
  - Resolves: #1265509
  - Resolves: #1265510
  - Resolves: #1296241


author: Robbie Harwood <rharwood@redhat.com> 1.13.2-9
changelog:
  - Add patch and test case for "KDC does not return proper
    client principal for client referrals"
  - Resolves: #1259846


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-9
changelog:
  - Ammend patch for RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') to handle the newly introduced
    valgrind hits.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-8
changelog:
  - Add a patch to fix RH Bug #1250154 ("[s390x, ppc64, ppc64le]:
    kadmind does not accept ACL if kadm5.acl does not end with EOL")
    The code "accidently" works on x86/AMD64 because declaring a
    variable |char| results in an |unsigned char| by default while
    most other platforms (e.g. { s390x, ppc64, ppc64le, ...})
    default to |signed char| (still have to use lint(1) to clean
    up 38 more instances of this kind of bug).


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-7
changelog:
  - Obsolete multilib versions of server packages to fix RH
    bug #1251913 ("krb5 should obsolete the multilib versions
    of krb5-server and krb5-server-ldap").
    The following packages are declared obsolete:
    - krb5-server-1.11.3-49.el7.i686
    - krb5-server-1.11.3-49.el7.ppc
    - krb5-server-1.11.3-49.el7.s390
    - krb5-server-ldap-1.11.3-49.el7.i686
    - krb5-server-ldap-1.11.3-49.el7.ppc
    - krb5-server-ldap-1.11.3-49.el7.s390


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-6
changelog:
  - Add a patch to fix RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') so that krb5 resolves GSS creds
    if |time_rec| is requested.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-5
changelog:
  - Add a patch to fix RedHat bug #1251586 ("KDC sends multiple
    requests to ipa-otpd for the same authentication") which causes
    the KDC to send multiple retries to ipa-otpd for TCP transports
    while it should only be done for UDP.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-4
changelog:
  - the rebase to krb5 1.13.2 in vers 1.13.2-0 also fixed:
    - Redhat Bug #1247761 ("RFE: Minor krb5 spec file cleanup and sync
      with recent Fedora 22/23 changes")
    - Redhat Bug #1247751 ("krb5-config returns wrong -specs path")
    - Redhat Bug #1247608 ('Add support for multi-hop preauth mechs
      via |KDC_ERR_MORE_PREAUTH_DATA_REQUIRED| for RFC 6113 ("A
      Generalized Framework for Kerberos Pre-Authentication")')
  - Removed "krb5-1.10-kprop-mktemp.patch" and
    "krb5-1.3.4-send-pr-tempfile.patch", both are no longer used since
    the rebase to krb5 1.13.1


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-3
changelog:
  - Add patch to fix Redhat Bug #1222903 ("[SELinux] AVC denials may appear
    when kadmind starts"). The issue was caused by an unneeded |htons()|
    which triggered SELinux AVC denials due to the "random" port usage.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-2
changelog:
  - Add fix for RedHat Bug #1164304 ("Upstream unit tests loads
    the installed shared libraries instead the ones from the build")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-1
changelog:
  - the rebase to krb5 1.13.1 in vers 1.13.1-0 also fixed:
    - Bug 1144498 ("Fix the race condition in the libkrb5 replay cache")
    - Bug 1163402 ("kdb5_ldap_util view_policy does not shows ticket flags on s390x and ppc64")
    - Bug 1185770 ("Missing upstream test in krb5-1.12.2: src/tests/gssapi/t_invalid.c")
    - Bug 1204211 ("CVE-2014-5355 krb5: unauthenticated denial of service in recvauth_common() and other")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-0
changelog:
  - Update to krb5-1.13.2
    - drop patch for krb5-1.13.2-CVE_2015_2694_requires_preauth_bypass_in_PKINIT_enabled_KDC, fixed in krb5-1.13.2
    - drop patch for krb5-1.12.1-CVE_2014_5355_fix_krb5_read_message_handling, fixed in krb5-1.13.2


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-2
changelog:
  - the rebase to krb5 1.13.1 in vers 1.13.1-0 also fixed RH
    bug #1156144 ("krb5 upstream test t_kdb.py failure")


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-1
changelog:
  - fix for CVE-2015-2694 (#1218020) "requires_preauth bypass
    in PKINIT-enabled KDC".
    In MIT krb5 1.12 and later, when the KDC is configured with
    PKINIT support, an unauthenticated remote attacker can
    bypass the requires_preauth flag on a client principal and
    obtain a ciphertext encrypted in the principal's long-term
    key.  This ciphertext could be used to conduct an off-line
    dictionary attack against the user's password.


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-0
changelog:
  - Update to krb5-1.13.1
    - patch krb5-1.12-selinux-label was updated and renamed to krb5-1.13-selinux-label
    - patch krb5-1.11-dirsrv-accountlock was updated and renamed to krb5-1.13-dirsrv-accountlock
    - drop patch for krb5-1.12-pwdch-fast, fixed in krb5-1.13
    - drop patch for krb5-1.12ish-kpasswd_tcp, fixed in krb5-1.13
    - drop patch for krb5-master-rcache-internal-const, no longer needed
    - drop patch for krb5-master-rcache-acquirecred-cleanup, no longer needed
    - drop patch for krb5-master-rcache-acquirecred-source, no longer needed
    - drop patch for krb5-master-rcache-acquirecred-test, no longer needed
    - drop patch for krb5-master-move-otp-sockets, no longer needed
    - drop patch for krb5-master-mechd, no longer needed
    - drop patch for krb5-master-strdupcheck, no longer needed
    - drop patch for krb5-master-compatible-keys, no longer needed
    - drop patch for krb5-1.12-system-exts, fixed in krb5-1.13
    - drop patch for 0001-In-ksu-merge-krb5_ccache_copy-and-_restricted, no longer needed
    - drop patch for 0002-In-ksu-don-t-stat-not-on-disk-ccache-residuals, no longer needed
    - drop patch for 0003-Use-an-intermediate-memory-cache-in-ksu, no longer needed
    - drop patch for 0004-Make-ksu-respect-the-default_ccache_name-setting, no longer needed
    - drop patch for 0005-Copy-config-entries-to-the-ksu-target-ccache, no longer needed
    - drop patch for 0006-Use-more-randomness-for-ksu-secondary-cache-names, no longer needed
    - drop patch for 0007-Make-krb5_cc_new_unique-create-DIR-directories, no longer needed
    - drop patch for krb5-1.12-kpasswd-skip-address-check, fixed in krb5-1.13
    - drop patch for 0000-Refactor-cm-functions-in-sendto_kdc.c, no longer needed
    - drop patch for 0001-Simplify-sendto_kdc.c, no longer needed
    - drop patch for 0002-Add-helper-to-determine-if-a-KDC-is-the-master, no longer needed
    - drop patch for 0003-Use-k5_transport-_strategy-enums-for-k5_sendto, no longer needed
    - drop patch for 0004-Build-support-for-TLS-used-by-HTTPS-proxy-support, no longer needed
    - drop patch for 0005-Add-ASN.1-codec-for-KKDCP-s-KDC-PROXY-MESSAGE, no longer needed
    - drop patch for 0006-Dispatch-style-protocol-switching-for-transport, no longer needed
    - drop patch for 0007-HTTPS-transport-Microsoft-KKDCPP-implementation, no longer needed
    - drop patch for 0008-Load-custom-anchors-when-using-KKDCP, no longer needed
    - drop patch for 0009-Check-names-in-the-server-s-cert-when-using-KKDCP, no longer needed
    - drop patch for 0010-Add-some-longer-form-docs-for-HTTPS, no longer needed
    - drop patch for 0011-Have-k5test.py-provide-runenv-to-python-tests, no longer needed
    - drop patch for 0012-Add-a-simple-KDC-proxy-test-server, no longer needed
    - drop patch for 0013-Add-tests-for-MS-KKDCP-client-support, no longer needed
    - drop patch for krb5-1.12ish-tls-plugins, fixed in krb5-1.13.1
    - drop patch for krb5-1.12-nodelete-plugins, fixed in krb5-1.13.1
    - drop patch for krb5-1.12-ksu-untyped-default-ccache-name, fixed in krb5-1.13.1
    - drop patch for krb5-1.12-ksu-no-ccache, fixed in krb5-1.13.1
    - drop patch for krb5-ksu_not_working_with_default_principal, fixed in krb5-1.13.1
    - drop patch for CVE_2014_5353_fix_LDAP_misused_policy_name_crash, fixed in krb5-1.13.1
    - drop patch for CVE_2014_5354_support_keyless_principals_in_ldap, fixed in krb5-1.13.1
    - drop patch for kinit -C loops (MIT/krb5 bug #243), fixed in krb5-1.13.1
    - drop patch for CVEs { 2014-9421, 2014-9422, 2014-9423, 2014-5352 }, fixed in krb5-1.13.1
    - added patch krb5-1.14-Support-KDC_ERR_MORE_PREAUTH_DATA_REQUIRED
    - added patch krb5-1.12.1-CVE_2014_5355_fix_krb5_read_message_handling
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-14
changelog:
  - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, "Do not
    loop on principal unknown errors").


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-13
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9423 (#1179863) "libgssrpc server applications
    leak uninitialized bytes (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-10
changelog:
  - In ksu, without the -e flag, also check .k5users (#1105489)
    When ksu was explicitly told to spawn a shell, a line in .k5users which
    listed "*" as the allowed command would cause the principal named on the
    line to be considered as a candidate for authentication.
    When ksu was not passed a command to run, which implicitly meant that
    the invoking user wanted to run the target user's login shell, knowledge
    that the principal was a valid candidate was ignored, which could cause
    a less optimal choice of the default target principal.
    This doesn't impact the authorization checks which we perform later.
    Patch by Nalin Dahyabhai <nalin@redhat.com>


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-9
changelog:
  - Undo libkadmclnt SONAME change (from 8 to 9) which originally
    happened in the krb5 1.12 rebase (#1166012) but broke
    rubygem-rkerberos (sort of ruby language bindings for
    libkadmclnt&co.) dependicies, as side effect of
    rubygem-rkerberos using private interfaces in libkadmclnt.


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-8
changelog:
  - fix the problem where the %license file has been a dangling symlink
  - ksu: pull in fix from pull #206 to avoid breakage when the
    default_ccache_name doesn't include a cache type as a prefix
  - ksu: pull in a proposed fix for pull #207 to avoid breakage when the
    invoking user doesn't already have a ccache


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-6
changelog:
  - backport patch to make the client skip checking the server's reply
    address when processing responses to password-change requests, which
    between NAT and upcoming HTTPS support, can cause us to erroneously
    report an error to the user when the server actually reported success
    (RT#7886)
  - backport support for accessing KDCs and kpasswd services via HTTPS
    proxies (marked by being specified as https URIs instead as hostnames
    or hostname-and-port), such as the one implemented in python-kdcproxy
    (RT#7929, #109919), and pick up a subsequent patch to build HTTPS
    as a plugin


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-5
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1078888)
  - define _GNU_SOURCE in files where we use EAI_NODATA, to make sure that
    it's declared (#1059730,#1084068,#1109102)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-4
changelog:
  - kpropd hasn't bothered with -S since 1.11; stop trying to use that flag
    in the systemd unit file


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-1
changelog:
  - update to 1.12.2
    - drop patch for RT#7820, fixed in 1.12.2
    - drop patch for #231147, fixed as RT#3277 in 1.12.2
    - drop patch for RT#7818, fixed in 1.12.2
    - drop patch for RT#7836, fixed in 1.12.2
    - drop patch for RT#7858, fixed in 1.12.2
    - drop patch for RT#7924, fixed in 1.12.2
    - drop patch for RT#7926, fixed in 1.12.2
    - drop patches for CVE-2014-4341/CVE-2014-4342, included in 1.12.2
    - drop patch for CVE-2014-4343, included in 1.12.2
    - drop patch for CVE-2014-4344, included in 1.12.2
    - drop patch for CVE-2014-4345, included in 1.12.2
  - replace older proposed changes for ksu with backports of the changes
    after review and merging upstream (#1015559, #1026099, #1118347)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-12
changelog:
  - gssapi: pull in proposed fix for a double free in initiators (David
    Woodhouse, CVE-2014-4343, #1117963)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-10
changelog:
  - pull in fix for denial of service by injection of malformed GSSAPI tokens
    (CVE-2014-4341, CVE-2014-4342, #1116181)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-9
changelog:
  - pull in changes from upstream which add processing of the contents of
    /etc/gss/mech.d/*.conf when loading GSS modules (#1102839)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-5
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1066000, RT#7858)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-4
changelog:
  - pull in patch from master to move the default directory which the KDC uses
    when computing the socket path for a local OTP daemon from the database
    directory (/var/kerberos/krb5kdc) to the newly-added run directory
    (/run/krb5kdc), in line with what we're expecting in 1.13 (RT#7859, more
    of #1040056 as #1063905)
  - add a tmpfiles.d configuration file to have /run/krb5kdc created at
    boot-time
  - own /var/run/krb5kdc


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add currently-proposed changes to teach ksu about credential cache
    collections and the default_ccache_name setting (#1015559,#1026099)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-2
changelog:
  - pull in multiple changes to allow replay caches to be added to a GSS
    credential store as "rcache"-type credentials (RT#7818/#7819/#7836,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-1
changelog:
  - update to 1.12.1
    - drop patch for RT#7794, included now
    - drop patch for RT#7797, included now
    - drop patch for RT#7803, included now
    - drop patch for RT#7805, included now
    - drop patch for RT#7807, included now
    - drop patch for RT#7045, included now
    - drop patches for RT#7813 and RT#7815, included now
    - add patch to always retrieve the KDC time offsets from keyring caches,
      so that we don't mistakenly interpret creds as expired before their
      time when our clock is ahead of the KDC's (RT#7820, #1030607)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-11
changelog:
  - update the PIC patch for iaesx86.s to not use ELF relocations to the version
    that landed upstream (RT#7815, #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-10
changelog:
  - amend the PIC patch for iaesx86.s to also save/restore ebx in the
    functions where we modify it, because the ELF spec says we need to


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-9
changelog:
  - grab a more-commented version of the most recent patch from upstream
    master
  - make a guess at making the 32-bit AES-NI implementation sufficiently
    position-independent to not require execmod permissions for libk5crypto
    (more of #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-8
changelog:
  - add patch from Dhiru Kholia for the AES-NI implementations to allow
    libk5crypto to be properly marked as not needing an executable stack
    on arches where they're used (#1045699, and so many others)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-5
changelog:
  - pull in fix from master to make reporting of errors encountered by
    the SPNEGO mechanism work better (RT#7045, part of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update a test wrapper to properly handle things that the new libkrad does,
    and add python-pyrad as a build requirement so that we can run its tests


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-2
changelog:
  - pull in fix from master to return a NULL pointer rather than allocating
    zero bytes of memory if we read a zero-length input token (RT#7794, part of
    - pull in fix from master to ignore an empty token from an acceptor if
    we've already finished authenticating (RT#7797, part of #1043962)
  - pull in fix from master to avoid a memory leak when a mechanism's
    init_sec_context function fails (RT#7803, part of #1043962)
  - pull in fix from master to avoid a memory leak in a couple of error
    cases which could occur while obtaining acceptor credentials (RT#7805, part
    of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-beta2.0
changelog:
  - update to beta2
    - drop obsolete backports for storing KDC time offsets and expiration times
      in keyring credential caches


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-2
changelog:
  - pull in fix to store KDC time offsets in keyring credential caches (RT#7768,
    - pull in fix to set expiration times on credentials stored in keyring
    credential caches (RT#7769, #1031724)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-1
changelog:
  - update to 1.11.4
    - drop patch for RT#7650, obsoleted
    - drop patch for RT#7706, obsoleted as RT#7723
    - drop patch for CVE-2013-1418/CVE-2013-6800, included in 1.11.4


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-30
changelog:
  - check more thoroughly for errors when resolving KEYRING ccache names of type
    "persistent", which should only have a numeric UID as the next part of the
    name (#1029110)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-29
changelog:
  - incorporate upstream patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-28
changelog:
  - drop patch to add additional access() checks to ksu - they add to breakage
    when non-FILE: caches are in use (#1026099), shouldn't be resulting in any
    benefit, and clash with proposed changes to fix its cache handling


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-27
changelog:
  - add some minimal description to the top of the wrapper scripts we use
    when starting krb5kdc and kadmind to describe why they exist (tooling)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-alpha1.0
changelog:
  - initial update to alpha1
    - drop backport of persistent keyring support
    - drop backport for RT#7689
    - drop obsolete patch for fixing a use-before-init in a test program
    - drop obsolete patch teaching config.guess/config.sub about aarch64-linux
    - drop backport for RT#7598
    - drop backport for RT#7172
    - drop backport for RT#7642
    - drop backport for RT#7643
    - drop patches from master to not test GSSRPC-over-UDP and to not
      depend on the portmapper, which are areas where our build systems
      often give us trouble, too; obsolete
    - drop backports for RT#7682
    - drop backport for RT#7709
    - drop backport for RT#7590 and partial backport for RT#7680
    - drop OTP backport
    - drop backports for RT#7656 and RT#7657
  - BuildRequires: libedit-devel to prefer it
  - BuildRequires: pkgconfig, since configure uses it


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-25
changelog:
  - pull up fix for importing previously-exported credential caches in the
    gssapi library (RT# 7706, #1019420)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-24
changelog:
  - backport the callback to use the libkrb5 prompter when we can't load PEM
    files for PKINIT (RT#7590, includes part of #965721/#1016690)
  - extract the rest of the fix #965721/#1016690 from the changes for RT#7680


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-21
changelog:
  - switch to the version of persistent-keyring that was just merged to
    master (RT#7711), along with related changes to kinit (RT#7689)
  - go back to setting default_ccache_name to a KEYRING type


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-20
changelog:
  - pull up fix for not calling a kdb plugin's check-transited-path
    method before calling the library's default version, which only knows
    how to read what's in the configuration file (RT#7709, #1013664)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-19
changelog:
  - configure --without-krb5-config so that we don't pull in the old default
    ccache name when we want to stop setting a default ccache name at configure-
    time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-16
changelog:
  - back out setting default_ccache_name to the new default for now, resetting
    it to the old default while the kernel/keyutils bits get sorted (sgallagh)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-15
changelog:
  - add explicit build-time dependency on a version of keyutils that's new
    enough to include keyctl_get_persistent() (more of #991148)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only apply the patch to autocreate /run/user/0 when we're hard-wiring the
    default ccache location to be under it; otherwise it's unnecessary


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-11
changelog:
  - don't let comments intended for one scriptlet become part of the "script"
    that gets passed to ldconfig as part of another one (Mattias Ellert, #1005675)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-10
changelog:
  - incorporate Simo's backport of his persistent-keyring changes (#991148)
  - restore build-time default DEFCCNAME on Fedora 21 and later and EL, and
    instead set default_ccache_name in the default krb5.conf's [libdefaults]
    section (#991148)
  - on releases where we expect krb5.conf to be configured with a
    default_ccache_name, add it whenever we upgrade from an older version of
    the package that wouldn't have included it in its default configuration
    file (#991148)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-9
changelog:
  - take another stab at accounting for UnversionedDocdirs for the -libs
    subpackage (spotted by ssorce)
  - switch to just the snapshot of nss_wrapper we were using, since we
    no longer need to carry anything that isn't in the cwrap.org repository
    (ssorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-8
changelog:
  - drop a patch we weren't not applying (build tooling)
  - wrap kadmind and kpropd in scripts which check for the presence/absence
    of files which dictate particular exit codes before exec'ing the actual
    binaries, instead of trying to use ConditionPathExists in the unit files
    to accomplish that, so that we exit with failure properly when what we
    expect isn't actually in effect on the system (#800343)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-6
changelog:
  - tweak configuration files used during tests to try to reduce the number
    of conflicts encountered when builds for multiple arches land on the same
    builder


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-4
changelog:
  - use (a bundled, for now, copy of) nss_wrapper to let us run some of the
    self-tests at build-time in more places than we could previously (#978756)
  - cover inconsistencies in whether or not there's a local caching nameserver
    that's willing to answer when the build environment doesn't have a
    resolver configuration, so that nss_wrapper's faking of the local
    hostname can be complete


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-3
changelog:
  - specify dependencies on the same arch of krb5-libs by using the %{?_isa}
    suffix, to avoid dragging 32-bit libraries onto 64-bit systems (#980155)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-2
changelog:
  - special-case /run/user/0, attempting to create it when resolving a
    directory cache below it fails due to ENOENT and we find that it doesn't
    already exist, either, before attempting to create the directory cache
    (maybe helping, maybe just making things more confusing for #961235)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-1
changelog:
  - update to 1.11.3
    - drop patch for RT#7605, fixed in this release
    - drop patch for CVE-2002-2443, fixed in this release
    - drop patch for RT#7369, fixed in this release
  - pull upstream fix for breaking t_skew.py by adding the patch for #961221


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-9
changelog:
  - don't forget to set the SELinux label when creating the directory for
    a DIR: ccache
  - pull in proposed fix for attempts to get initial creds, which end up
    following referrals, incorrectly trying to always use master KDCs if
    they talked to a master at any point (should fix RT#7650)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-8
changelog:
  - pull in patches from master to not test GSSRPC-over-UDP and to not
    depend on the portmapper, which are areas where our build systems
    often give us trouble, too


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-7
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)
  - backport fix for not being able to pass an empty password to the
    get-init-creds APIs and have them actually use it (RT#7642, #960001)
  - add backported proposed fix to use the unauthenticated server time
    as the basis for computing the requested credential expiration times,
    rather than the client's idea of the current time, which could be
    significantly incorrect (#961221)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-6
changelog:
  - pull in upstream fix to start treating a KRB5CCNAME value that begins
    with DIR:: the same as it would a DIR: value with just one ccache file
    in it (RT#7172, #965574)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-3
changelog:
  - pull the changing of the compiled-in default ccache location to
    DIR:/run/user/%{uid}/krb5cc back into F19, in line with SSSD and
    the most recent pam_krb5 build


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-1
changelog:
  - update to 1.11.2
    - drop pulled in patch for RT#7586, included in this release
    - drop pulled in patch for RT#7592, included in this release
  - pull in fix for keeping track of the message type when parsing FAST requests
    in the KDC (RT#7605, #951843) (also #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-9
changelog:
  - move the compiled-in default ccache location from the previous default of
    FILE:/tmp/krb5cc_%{uid} to DIR:/run/user/%{uid}/krb5cc (part of #949588)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-7
changelog:
  - when testing the RPC library, treat denials from the local portmapper the
    same as a portmapper-not-running situation, to allow other library tests
    to be run while building the package


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-6
changelog:
  - create and own /var/kerberos/krb5/user instead of /var/kerberos/kdc/user,
    since that's what the libraries actually look for
  - add buildrequires on nss-myhostname, in an attempt to get more of the tests
    to run properly during builds
  - pull in Simo's patch to recognize "client_keytab" as a key type which can
    be passed in to gss_acquire_cred_from() (RT#7598)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-5
changelog:
  - pull up Simo's patch to mark the correct mechanism on imported GSSAPI
    contexts (RT#7592)
  - go back to using reconf to run autoconf and autoheader (part of #925640)
  - add temporary patch to use newer config.guess/config.sub (more of #925640)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a version comparison to expect newer texlive build requirements when
    %{_rhel} > 6 rather than when it's > 7


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-2
changelog:
  - prebuild PDF docs to reduce multilib differences (internal tooling, #884065)
  - drop the kerberos-iv portreserve file, and drop the rest on systemd systems
  - escape uses of macros in comments (more of #884065)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-1
changelog:
  - update to 1.11.1
    - drop patch for noticing negative timeouts being passed to the poll()
      wrapper in the client transmit functions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.1
changelog:
  - handle releases where texlive packaging wasn't yet as complicated as it
    is in Fedora 18
  - fix an uninitialized-variable error building one of the test programs


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.0
changelog:
  - move the rather large pile of html and pdf docs to -workstation, so
    that just having something that links to the libraries won't drag
    them onto a system, and we avoid having to sort out hard-coded paths
    that include %{_libdir} showing up in docs in multilib packages
  - actually create %{_var}/kerberos/kdc/user, so that it can be packaged
  - correct the list of packaged man pages
  - don't dummy up required tex stylesheets, require them
  - require pdflatex and makeindex


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.11 alpha 1
    - drop backported patch for RT #7406
    - drop backported patch for RT #7407
    - drop backported patch for RT #7408
    - the new docs system generates PDFs, so stop including them as sources
    - drop backported patch to allow deltat.y to build with the usual
      warning flags and the current gcc
    - drop backported fix for disabling use of a replay cache when verifying
      initial credentials
    - drop backported fix for teaching PKINIT clients which trust the KDC's
      certificate directly to verify signed-data messages that are signed with
      the KDC's certificate, when the blobs don't include a copy of the KDC's
      certificate
    - drop backported patches to make keytab-based authentication attempts
      work better when the client tells the KDC that it supports a particular
      cipher, but doesn't have a key for it in the keytab
    - drop backported fix for avoiding spurious clock skew when a TGT is
      decrypted long after the KDC sent it to the client which decrypts it
    - move the cross-referenced HTML docs into the -libs package to avoid
      broken internal links
    - drop patches to fixup paths in man pages, shouldn't be needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-7
changelog:
  - selinux: hang on to the list of selinux contexts, freeing and reloading
    it only when the file we read it from is modified, freeing it when the
    shared library is being unloaded (#845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-6
changelog:
  - go back to not messing with library file paths on Fedora 17: it breaks
    file path dependencies in other packages, and since Fedora 17 is already
    released, breaking that is our fault


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-5
changelog:
  - add upstream patch to fix freeing an uninitialized pointer and dereferencing
    another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
    and CVE-2012-1015, #844779 and #844777)
  - fix a thinko in whether or not we mess around with devel .so symlinks on
    systems without a separate /usr (sbose)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-3
changelog:
  - backport a fix to allow a PKINIT client to handle SignedData from a KDC
    that's signed with a certificate that isn't in the SignedData, but which
    is available as an anchor or intermediate on the client (RT#7183)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-2
changelog:
  - back out this labeling change (dwalsh):
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-1
changelog:
  - update to 1.10.2
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user
    - also package the PDF format admin, user, and install guides
    - drop some PDFs that no longer get built right
  - add a backport of Stef's patch to set the client's list of supported
    enctypes to match the types of keys that we have when we are using a
    keytab to try to get initial credentials, so that a KDC won't send us
    an AS reply that we can't encrypt (RT#2131, #748528)
  - don't shuffle around any shared libraries on releases with no-separate-/usr,
    since /usr/lib is the same place as /lib
  - add explicit buildrequires: on 'hostname', for the tests, on systems where
    it's in its own package, and require net-tools, which used to provide the
    command, everywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
changelog:
  - have -server require /usr/share/dict/words, which we set as the default
    dict_file in kdc.conf (#817089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-2
changelog:
  - change back dns_lookup_kdc to the default setting (Stef Walter, #805318)
  - comment out example.com examples in default krb5.conf (Stef Walter, #805320)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-1
changelog:
  - update to 1.10.1
    - drop the KDC crash fix
    - drop the KDC lookaside cache fix
    - drop the fix for kadmind RPC ACLs (CVE-2012-1012)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-5
changelog:
  - when removing -workstation, remove our files from the info index while
    the file is still there, in %preun, rather than %postun, and use the
    compressed file's name (#801035)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-2
changelog:
  - add patch to accept keytab entries with vno==0 as matches when we're
    searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha2.2
changelog:
  - modify the deltat grammar to also tell gcc (4.7) to suppress
    "maybe-uninitialized" warnings in addition to the "uninitialized" warnings
    it's already being told to suppress (RT#7080)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.3
changelog:
  - pull in patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761317)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761317)
  - pull in patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761317)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.2
changelog:
  - apply upstream patch to fix a null pointer dereference when processing
    TGS requests (CVE-2011-1530, #753748)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.0
changelog:
  - update to 1.10 alpha 1
  - on newer releases where we can assume NSS >= 3.13, configure PKINIT to build
    using NSS
  - on newer releases where we build PKINIT using NSS, configure libk5crypto to
    build using NSS
  - rename krb5-pkinit-openssl to krb5-pkinit on newer releases where we're
    expecting to build PKINIT using NSS instead
  - during %check, run check in the library and kdc subdirectories, which
    should be able to run inside of the build system without issue


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-18
changelog:
  - apply upstream patch to fix a null pointer dereference with the LDAP kdb
    backend (CVE-2011-1527, #744125), an assertion failure with multiple kdb
    backends (CVE-2011-1528), and a null pointer dereference with multiple kdb
    backends (CVE-2011-1529) (#737711)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-17
changelog:
  - pull in patch from trunk to rename krb5int_pac_sign() to krb5_pac_sign() and
    make it public (#745533)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-16
changelog:
  - kadmin.service: fix #723723 again
  - kadmin.service,krb5kdc.service: remove optional use of $KRB5REALM in command
    lines, because systemd parsing doesn't handle alternate value shell variable
    syntax
  - kprop.service: add missing Type=forking so that systemd doesn't assume simple
  - kprop.service: expect the ACL configuration to be there, not absent
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#739853)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-12
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth (#734341)
  - pull in build-time deps for the tests


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-10
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-9
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-8
changelog:
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS
  - pull in a patch to fix losing track of the replay cache FD, from SVN by
    way of Kevin Coffman


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-7
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#723723),
    which is too fragile in cases where the database has been manually moved or
    is accessed through another kdb plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-6
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-5
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)
  - pull a fix from SVN to use AI_ADDRCONFIG more often (RT#6923)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-4
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#715074)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-3
changelog:
  - pull a fix from SVN to get libgssrpc clients (e.g. kadmin) authenticating
    using the old protocol over IPv4 again (RT#6920)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#576093)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-1
changelog:
  - update to 1.9.1:
    - drop no-longer-needed patches for CVE-2010-4022, CVE-2011-0281,
      CVE-2011-0282, CVE-2011-0283, CVE-2011-0284, CVE-2011-0285


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696343,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - override INSTALL_SETUID at build-time so that ksu is installed into
    the buildroot with the right permissions (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - turn off NSS as the backend for libk5crypto for now to work around its
    DES string2key not working (#679012)
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (MITKRB5-SA-2011-003, CVE-2011-0284, #674325)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - throw in a not-applied-by-default patch to try to make pkinit debugging
    into a run-time boolean option named "pkinit_debug"


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - turn on NSS as the backend for libk5crypto, adding nss-devel as a build
    dependency when that switch is flipped


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - krb5kdc init script: prototype some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (to flush out parts of #651466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, #664009,
    CVE-2011-0281, #668719, CVE-2011-0282, #668726, CVE-2011-0283, #676126)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-2
changelog:
  - pkinit: when verifying signed data, use the CMS APIs for better
    interoperability (#636985, RT#6851)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-0.beta1.0
changelog:
  - start moving to 1.9 with beta 1
    - drop patches for RT#5755, RT#6762, RT#6774, RT#6775
    - drop no-longer-needed backport patch for #539423
    - drop no-longer-needed patch for CVE-2010-1322
  - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-8
changelog:
  - incorporate upstream patch to fix uninitialized pointer crash in the KDC's
    authorization data handling (CVE-2010-1322, #636335)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-6
changelog:
  - pull down patches from trunk to implement k5login_authoritative and
    k5login_directory settings for krb5.conf (#539423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-4
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #629022, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #629022, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-1
changelog:
  - update to 1.8.3
    - drop backports of fixes for gss context expiration and error table
      registration/deregistration mismatch
    - drop patch for upstream #6750


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3
changelog:
  - tell krb5kdc and kadmind to create pid files, since they can
  - add logrotate configuration files for krb5kdc and kadmind (#462658)
  - fix parsing of the pidfile option in the KDC (upstream #6750)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull up fix for upstream #6745, in which the gssapi library would add the
    wrong error table but subsequently attempt to unload the right one


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596887), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #582466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - drop patch to suppress key expiration warnings sent from the KDC in
    the last-req field, as the KDC is expected to just be configured to either
    send them or not as a particular key approaches expiration (#556495)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
changelog:
  - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628, #576325)
  - kdc.conf: no more need to suggest keeping keys with v4-compatible salting


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
changelog:
  - remove the krb5-appl bits (the -workstation-clients and -workstation-servers
    subpackages) now that krb5-appl is its own package
  - replace our patch for #563431 (kpasswd doesn't fall back to guessing your
    principal name using your user name if you don't have a ccache) with the
    one upstream uses


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-2
changelog:
  - pull up patch to get the client libraries to correctly perform password
    changes over IPv6 (Sumit Bose, RT#6661)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-1
changelog:
  - update to 1.7.1
    - don't trip AD lockout on wrong password (#542687, #554351)
    - incorporates fixes for CVE-2009-4212 and CVE-2009-3295
    - fixes gss_krb5_copy_ccache() when SPNEGO is used
  - move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
    the devel subpackage, better lining up with the expected krb5/krb5-appl
    split in 1.8
  - drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
    depends on -workstation which also includes them


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-22
changelog:
  - use portreserve correctly -- portrelease takes the basename of the file
    whose entries should be released, so we need three files, not one


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-21
changelog:
  - suppress warnings of impending password expiration if expiration is more than
    seven days away when the KDC reports it via the last-req field, just as we
    already do when it reports expiration via the key-expiration field (#556495)
  - link with libtinfo rather than libncurses, when we can, in future RHEL


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-20
changelog:
  - krb5_get_init_creds_password: check opte->flags instead of options->flags
    when checking whether or not we get to use the prompter callback (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-19
changelog:
  - use portreserve to make sure the KDC can always bind to the kerberos-iv
    port, kpropd can always bind to the krb5_prop port, and that kadmind can
    always bind to the kerberos-adm port (#555279)
  - correct inadvertent use of macros in the changelog (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-18
changelog:
  - add upstream patch for integer underflow during AES and RC4 decryption
    (CVE-2009-4212), via Tom Yu (#545015)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-17
changelog:
  - put the conditional back for the -devel subpackage
  - back down to the earlier version of the patch for #551764; the backported
    alternate version was incomplete


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-16
changelog:
  - use %global instead of %define
  - pull up proposed patch for creating previously-not-there lock files for
    kdb databases when 'kdb5_util' is called to 'load' (#551764)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-15
changelog:
  - add upstream patch for KDC crash during referral processing (CVE-2009-3295),
    via Tom Yu (#545002)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages that live in the -libs subpackage into the regular
    %{_mandir} tree where they'll still be found if that package is the
    only one installed (#529319)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-11
changelog:
  - ksu: move account management checks to before we drop privileges, like
    su does (#540769)
  - selinux: set the user part of file creation contexts to match the current
    context instead of what we looked up
  - configure with --enable-dns-for-realm instead of --enable-dns, which isn't
    recognized any more


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-10
changelog:
  - move /etc/pam.d/ksu from krb5-workstation-servers to krb5-workstation,
    where it's actually needed (#538703)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-8
changelog:
  - specify the location of the subsystem lock when using the status() function
    in the kadmind and kpropd init scripts, so that we get the right error when
    we're dead but have a lock file - requires initscripts 8.99 (#521772)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if the init script fails to start krb5kdc/kadmind/kpropd because it's already
    running (according to status()), return 0 (part of #521772)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - simplify the man pages patch by only preprocessing the files we care about
    and moving shared configure.in logic into a shared function
  - catch the case of ftpd printing file sizes using %i, when they might be
    bigger than an int now


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-4
changelog:
  - try to merge and clean up all the large file support for ftp and rcp
    - ftpd no longer prints a negative length when sending a large file
      from a 32-bit host


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-3
changelog:
  - switch buildrequires: and requires: on e2fsprogs-devel into
    buildrequires: and requires: on libss-devel, libcom_err-devel, per
    sandeen on fedora-devel-list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a type mismatch in krb5_copy_error_message()
  - ftp: fix some odd use of strlen()
  - selinux labeling: use selabel_open() family of functions rather than
    matchpathcon(), bail on it if attempting to get the mutex lock fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - compile with %{?_smp_mflags} (Steve Grubb)
  - drop the bit where we munge part of the error table header, as it's not
    needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-1
changelog:
  - update to 1.7
    - no need to work around build issues with ASN1BUF_OMIT_INLINE_FUNCS
    - configure recognizes --enable/--disable-pkinit now
    - configure can take --disable-rpath now
    - no more libdes425, krb524d, krb425.info
    - kadmin/k5srvutil/ktutil are user commands now
    - new kproplog
    - FAST encrypted-challenge plugin is new
  - drop static build logic
  - drop pam_krb5-specific configuration from the default krb5.conf
  - drop only-use-v5 flags being passed to various things started by xinetd
  - put %{krb5prefix}/sbin in everyone's path, too (#504525)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-104
changelog:
  - extend PAM support to ksu: perform account and session management for the
    target user
  - pull up and merge James Leddy's changes to also set PAM_RHOST in PAM-aware
    network-facing services


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-103
changelog:
  - fix a typo in a ksu error message (Marek Mahut)
  - "rev" works the way the test suite expects now, so don't disable tests
    that use it


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-101
changelog:
  - add patches for read overflow and null pointer dereference in the
    implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
  - add patch for attempt to free uninitialized pointer in libkrb5
    (CVE-2009-0846)
  - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
  - put the krb5-user .info file into just -workstation and not also
    -workstation-clients


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


