# changelog

author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.304.4.el7uek]
changelog:
  - scsi: libiscsi: Fix iscsi_task use after free() (Mike Christie)  [Orabug: 33794250]  
  - scsi: libiscsi: Drop taskqueuelock (Mike Christie)  [Orabug: 33794250]  
  - ib/core: add SET_DEVICE_OP call for clear_hw_stats() (Qing Huang)  [Orabug: 33495339]  
  - KVM: SVM: Don't intercept #GP for SEV guests (Sean Christopherson)  [Orabug: 33446920]  
  - Revert "KVM: SVM: avoid infinite loop on NPF from bad address" (Sean Christopherson)  [Orabug: 33446920]  
  - KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests (Sean Christopherson)  [Orabug: 33446920]  
  - rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info (Rohit Nair)  [Orabug: 33660929]  
  - tee: handle lookup of shm with reference count 0 (Jens Wiklander)  [Orabug: 33739582]  {CVE-2021-44733} 
  - smp: always continue to process IRQ work (Stephen Brennan)  [Orabug: 33802464]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.304.4.1.el7uek]
changelog:
  - Revert "rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info" (Rohit Nair)  [Orabug: 33832625]  
  - cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman)  [Orabug: 33832582]  {CVE-2022-0492}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.304.4.2.el7uek]
changelog:
  - netfilter: nf_tables_offload: incorrect flow offload action array size (Pablo Neira Ayuso)  [Orabug: 33899500]  {CVE-2022-25636}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.304.4.3.el7uek]
changelog:
  - x86/speculation: The choice of retpoline mode is sometimes ignored (Patrick Colp)  [Orabug: 33890091]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.304.4.4.el7uek]
changelog:
  - arm64: Use the clearbhb instruction in mitigations (James Morse)  [Orabug: 33921646]  
  - arm64: add ID_AA64ISAR2_EL1 sys register (Joey Gouly)  [Orabug: 33921646]  
  - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated (James Morse)  [Orabug: 33921646]  
  - arm64: Mitigate spectre style branch history side channels (James Morse)  [Orabug: 33921646]  
  - KVM: arm64: Add templates for BHB mitigation sequences (James Morse)  [Orabug: 33921646]  
  - arm64: Add Cortex-X2 CPU part definition (Anshuman Khandual)  [Orabug: 33921646]  
  - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition (Suzuki K Poulose)  [Orabug: 33921646]  
  - arm64: Add part number for Arm Cortex-A77 (Rob Herring)  [Orabug: 33921646]  
  - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 (James Morse)  [Orabug: 33921646]  
  - arm64: Add percpu vectors for EL1 (James Morse)  [Orabug: 33921646]  
  - arm64: entry: Add macro for reading symbol addresses from the trampoline (James Morse)  [Orabug: 33921646]  
  - arm64: entry: Add vectors that have the bhb mitigation sequences (James Morse)  [Orabug: 33921646]  
  - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (James Morse)  [Orabug: 33921646]  
  - arm64: entry: Allow the trampoline text to occupy multiple pages (James Morse)  [Orabug: 33921646]  
  - arm64: entry: Make the kpti trampoline's kpti sequence optional (James Morse)  [Orabug: 33921646]  
  - arm64: entry: Move trampoline macros out of ifdef'd section (James Morse)  [Orabug: 33921646]  
  - arm64: entry: Don't assume tramp_vectors is the start of the vectors (James Morse)  [Orabug: 33921646]  
  - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary (James Morse)  [Orabug: 33921646]  
  - arm64: entry: Move the trampoline data page before the text page (James Morse)  [Orabug: 33921646]  
  - arm64: entry: Free up another register on kpti's tramp_exit path (James Morse)  [Orabug: 33921646]  
  - arm64: entry: Make the trampoline cleanup optional (James Morse)  [Orabug: 33921646]  
  - arm64: entry.S: Add ventry overflow sanity checks (James Morse)  [Orabug: 33921646]  
  - Revert "BACKPORT: VARIANT 2: arm64: Add initial retpoline support" (Russell King)  [Orabug: 33921646]  
  - Revert "BACKPORT: VARIANT 2: arm64: asm: Use *_nospec variants for blr and br." (Russell King)  [Orabug: 33921646]  
  - Revert "BACKPORT: VARIANT 2: arm64: Add MIDR_APM_POTENZA." (Russell King)  [Orabug: 33921646]  
  - Revert "BACKPORT: VARIANT 2: arm64: insn: Add offset getter/setter for adr." (Russell King)  [Orabug: 33921646]  
  - Revert "BACKPORT: VARIANT 2: arm64: alternatives: Add support for adr/adrp with offset in alt block." (Russell King)  [Orabug: 33921646]  
  - Revert "BACKPORT: VARIANT 2: arm64: Use alternative framework for retpoline." (Russell King)  [Orabug: 33921646]  
  - Revert "Arm64: add retpoline to cpu_show_spectre_v2" (Russell King)  [Orabug: 33921646]  
  - Revert "arm64: retpoline: Don't use retpoline in KVM's HYP part." (Russell King)  [Orabug: 33921646]  
  - Revert "uek-rpm: aarch64 config enable RETPOLINE" (Russell King)  [Orabug: 33921646]  
  - Revert "uek-rpm: aarch64 config enable RETPOLINE OL8" (Russell King)  [Orabug: 33921646]  
  - x86/speculation: Add knob for eibrs_retpoline_enabled (Patrick Colp)  [Orabug: 33922121]  {CVE-2021-26341} 
  - x86/speculation: Extend our code to properly support eibrs+lfence and eibrs+retpoline (Patrick Colp)  [Orabug: 33922121]  {CVE-2021-26341} 
  - x86/speculation: Update link to AMD speculation whitepaper (Kim Phillips)  [Orabug: 33922121]  {CVE-2021-26341} 
  - x86/speculation: Use generic retpoline by default on AMD (Kim Phillips)  [Orabug: 33922121]  {CVE-2021-26341} 
  - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Josh Poimboeuf)  [Orabug: 33922121]  {CVE-2021-26341} 
  - Documentation/hw-vuln: Update spectre doc (Peter Zijlstra)  [Orabug: 33922121]  {CVE-2021-26341} 
  - x86/speculation: Add eIBRS + Retpoline options (Peter Zijlstra)  [Orabug: 33922121]  {CVE-2021-26341} 
  - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Peter Zijlstra (Intel))  [Orabug: 33922121]  {CVE-2021-26341} 
  - x86/speculation: Merge one test in spectre_v2_user_select_mitigation() (Borislav Petkov)  [Orabug: 33922121]  {CVE-2021-26341} 
  - x86/speculation: Update ALTERNATIVEs to (more closely) match upstream (Patrick Colp)  [Orabug: 33922121]  {CVE-2021-26341} 
  - x86/speculation: Fix bug in retpoline mode on AMD with `spectre_v2=none` (Patrick Colp)  [Orabug: 33922121]  {CVE-2021-26341} 
  - bpf: Add kconfig knob for disabling unpriv bpf by default (Daniel Borkmann)  [Orabug: 33926314]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.304.4.5.el7uek]
changelog:
  - lib/iov_iter: initialize "flags" in new pipe_buffer (Max Kellermann)  [Orabug: 33942329]  {CVE-2022-0847} 
  - bpf: Disallow unprivileged bpf by default (Pawan Gupta)  [Orabug: 33942374]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.305.1.el7uek]
changelog:
  - btrfs: fix metadata reservation for fallocate that leads to transaction aborts (Filipe Manana)  [Orabug: 32675999]  
  - btrfs: inode: refactor the parameters of insert_reserved_file_extent() (Qu Wenruo)  [Orabug: 32675999]  
  - uek-rpm: Enable QAT 4XXX device (Thomas Tai)  [Orabug: 33440215]  
  - crypto: qat - power up 4xxx device (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - fix naming of PF/VF enable functions (Marco Chiappero)  [Orabug: 33440215]  
  - crypto: qat - complete all the init steps before service notification (Marco Chiappero)  [Orabug: 33440215]  
  - crypto: qat - move IO virtualization functions (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - rename compatibility version definition (Marco Chiappero)  [Orabug: 33440215]  
  - crypto: qat - enable interrupts only after ISR allocation (Marco Chiappero)  [Orabug: 33440215]  
  - crypto: qat - simplify code and axe the use of a deprecated API (Christophe JAILLET)  [Orabug: 33440215]  
  - crypto: qat - enable detection of accelerators hang (Wojciech Ziemba)  [Orabug: 33440215]  
  - crypto: qat - configure arbiter mapping based on engines enabled (Wojciech Ziemba)  [Orabug: 33440215]  
  - crypto: qat - replace CRYPTO_AES with CRYPTO_LIB_AES in Kconfig (Marco Chiappero)  [Orabug: 33440215]  
  - crypto: qat - add CRYPTO_AES to Kconfig dependencies (Marco Chiappero)  [Orabug: 33440215]  
  - crypto: qat - add capability detection logic in qat_4xxx (Marco Chiappero)  [Orabug: 33440215]  
  - crypto: qat - add AES-XTS support for QAT GEN4 devices (Marco Chiappero)  [Orabug: 33440215]  
  - crypto: qat - add AES-CTR support for QAT GEN4 devices (Marco Chiappero)  [Orabug: 33440215]  
  - crypto: qat - add qat_4xxx driver (Thomas Tai)  [Orabug: 33440215]  
  - crypto: qat - add hook to initialize vector routing table (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - target fw images to specific AEs (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - add gen4 firmware loader (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - add support for broadcasting mode (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - add support for shared ustore (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - allow to target specific AEs (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - add FCU CSRs to chip info (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - add CSS3K support (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - use ae_mask (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - add misc control CSR to chip info (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - add wake up event to chip info (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - add clock enable CSR to chip info (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - add reset CSR and mask to chip info (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - add local memory size to chip info (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - add support for lm2 and lm3 (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - add next neighbor to chip_info (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - introduce chip info structure (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - refactor long expressions (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - refactor qat_uclo_set_ae_mode() (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - move defines to header files (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - remove global CSRs helpers (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - refactor AE start (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - rename qat_uclo_del_uof_obj() (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - remove unnecessary parenthesis (Jack Xu)  [Orabug: 33440215]  
  - crypto: qat - support for mof format in fw loader (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - allow for instances in different banks (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - refactor qat_crypto_dev_config() (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - refactor qat_crypto_create_instances() (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - remove unnecessary void* casts (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - call functions in adf_sriov if available (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - abstract writes to arbiter enable (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - use BIT_ULL() - 1 pattern for masks (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - replace constant masks with GENMASK (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - abstract build ring base (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - enable ring after pair is programmed (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - register crypto instances based on capability (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - add support for capability detection (Marco Chiappero)  [Orabug: 33440215]  
  - crypto: qat - abstract arbiter access (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - remove unused macros in arbiter module (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - remove writes into WQCFG (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - update constants table (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - use admin mask to send fw constants (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - change admin sequence (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - rename ME in AE (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - add packed to init admin structures (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - abstract admin interface (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - relocate GEN2 CSR access code (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - split transport CSR access logic (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - fix configuration of iov threads (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - num_rings_per_bank is device dependent (Ahsan Atta)  [Orabug: 33440215]  
  - crypto: qat - mask device capabilities with soft straps (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - update IV in software (Marco Chiappero)  [Orabug: 33440215]  
  - crypto: qat - drop input parameter from adf_enable_aer() (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - replace device ids defines (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - add delay before polling mailbox (Giovanni Cabiddu)  [Orabug: 33440215]  
  - PCI: Add Intel QuickAssist device IDs (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - fallback for xts with 192 bit keys (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - remove unused field in skcipher ctx (Thomas Tai)  [Orabug: 33440215]  
  - crypto: qat - validate xts key (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - allow xts requests not multiple of block (Giovanni Cabiddu)  [Orabug: 33440215]  
  - crypto: qat - update timeout logic in put admin msg (Wojciech Ziemba)  [Orabug: 33440215]  
  - crypto: qat - send admin messages to set of AEs (Wojciech Ziemba)  [Orabug: 33440215]  
  - crypto: qat - update fw init admin msg (Wojciech Ziemba)  [Orabug: 33440215]  
  - crypto: qat - replace user types with kernel ABI __u types (Wojciech Ziemba)  [Orabug: 33440215]  
  - crypto: qat - replace user types with kernel u types (Wojciech Ziemba)  [Orabug: 33440215]  
  - crypto: qat - convert to SPDX License Identifiers (Giovanni Cabiddu)  [Orabug: 33440215]  
  - iopoll: introduce read_poll_timeout macro (Dejin Zheng)  [Orabug: 33440215]  
  - crypto: qat - simplify the qat_crypto function (Tianjia Zhang)  [Orabug: 33440215]  
  - crypto: qat - switch to skcipher API (Ard Biesheuvel)  [Orabug: 33440215]  
  - io_uring: fix false WARN_ONCE (Pavel Begunkov)  [Orabug: 33731046]  
  - scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Fix link down processing to address NULL pointer dereference (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Allow PLOGI retry if previous PLOGI was aborted (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Revert LOG_TRACE_EVENT back to LOG_INIT prior to driver_resource_setup() (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Fix memory overwrite during FC-GS I/O abort handling (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Add support for optional PLDV handling (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Fix mailbox command failure during driver initialization (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Improve PBDE checks during SGL processing (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Fix NVMe I/O failover to non-optimized path (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Don't remove ndlp on PRLI errors in P2P mode (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Fix rediscovery of tape device after LIP (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Don't release final kref on Fport node while ABTS outstanding (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Move initialization of phba->poll_list earlier to avoid crash (Ewan D. Milne)  [Orabug: 33731165]  
  - scsi: lpfc: Fix possible ABBA deadlock in nvmet_xri_aborted() (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Revise Topology and RAS support checks for new adapters (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Copyright updates for 12.8.0.11 patches (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Update lpfc version to 12.8.0.11 (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Skip issuing ADISC when node is in NPR state (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Call discovery state machine when handling PLOGI/ADISC completions (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Delay unregistering from transport until GIDFT or ADISC completes (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Clear outstanding active mailbox during PCI function reset (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Fix memory leaks in error paths while issuing ELS RDF/SCR request (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Fix target reset handler from falsely returning FAILURE (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Discovery state machine fixes for LOGO handling (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Remove use of kmalloc() in trace event logging (James Smart)  [Orabug: 33731165]  
  - scsi: lpfc: Fix failure to transmit ABTS on FC link (James Smart)  [Orabug: 33731165]  
  - bpf: Disallow unprivileged bpf by default (Pawan Gupta)  [Orabug: 33734681]  
  - bpf: Add kconfig knob for disabling unpriv bpf by default (Daniel Borkmann)  [Orabug: 33734681]  
  - USB: gadget: bRequestType is a bitfield, not a enum (Greg Kroah-Hartman)  [Orabug: 33739525]  {CVE-2021-39685} 
  - USB: gadget: zero allocate endpoint 0 buffers (Greg Kroah-Hartman)  [Orabug: 33739525]  {CVE-2021-39685} 
  - USB: gadget: detect too-big endpoint 0 requests (Greg Kroah-Hartman)  [Orabug: 33739525]  {CVE-2021-39685} 
  - scsi: vmw_pvscsi: Set residual data length conditionally (Alexey Makhalov)  [Orabug: 33761343]  
  - hwmon: (k10temp) Add support for Zen3 CPUs (Rahul Rohit)  [Orabug: 33782833]  
  - Revert "rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info" (Rohit Nair)  [Orabug: 33812555]  
  - uek-rpm: Add missing dax modules to kernel-ueknano (Somasundaram Krishnasamy)  [Orabug: 33821042]  
  - cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman)  [Orabug: 33825687]  {CVE-2022-0492}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.305.2.el7uek]
changelog:
  - LTS tag: v5.4.163 (Sherry Yang)   
  - tty: hvc: replace BUG_ON() with negative return value (Juergen Gross)   
  - xen/netfront: don't trust the backend response data blindly (Juergen Gross)   
  - xen/netfront: disentangle tx_skb_freelist (Juergen Gross)   
  - xen/netfront: don't read data from request on the ring page (Juergen Gross)   
  - xen/netfront: read response from backend only once (Juergen Gross)   
  - xen/blkfront: don't trust the backend response data blindly (Juergen Gross)   
  - xen/blkfront: don't take local copy of a request from the ring page (Juergen Gross)   
  - xen/blkfront: read response from backend only once (Juergen Gross)   
  - xen: sync include/xen/interface/io/ring.h with Xen's newest version (Juergen Gross)   
  - fuse: release pipe buf after last use (Miklos Szeredi)   
  - NFC: add NCI_UNREG flag to eliminate the race (Lin Ma)   
  - shm: extend forced shm destroy to support objects from several IPC nses (Alexander Mikhalitsyn)   
  - s390/mm: validate VMA in PGSTE manipulation functions (David Hildenbrand)   
  - tracing: Check pid filtering when creating events (Steven Rostedt (VMware))   
  - vhost/vsock: fix incorrect used length reported to the guest (Stefano Garzarella)   
  - smb3: do not error on fsync when readonly (Steve French)   
  - f2fs: set SBI_NEED_FSCK flag when inconsistent node block found (Weichao Guo)   
  - net: mscc: ocelot: correctly report the timestamping RX filters in ethtool (Vladimir Oltean)   
  - net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP (Vladimir Oltean)   
  - net: hns3: fix VF RSS failed problem after PF enable multi-TCs (Guangbin Huang)   
  - net/smc: Don't call clcsock shutdown twice when smc shutdown (Tony Lu)   
  - net: vlan: fix underflow for the real_dev refcnt (Ziyang Xuan)   
  - MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48 (Huang Pei)   
  - igb: fix netpoll exit with traffic (Jesse Brandeburg)   
  - nvmet: use IOCB_NOWAIT only if the filesystem supports it (Maurizio Lombardi)   
  - tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows (Eric Dumazet)   
  - PM: hibernate: use correct mode for swsusp_close() (Thomas Zeitlhofer)   
  - net/ncsi : Add payload to be 32-bit aligned to fix dropped packets (Kumar Thangavel)   
  - nvmet-tcp: fix incomplete data digest send (Varun Prakash)   
  - net/smc: Ensure the active closing peer first closes clcsock (Tony Lu)   
  - scsi: core: sysfs: Fix setting device state to SDEV_RUNNING (Mike Christie)   
  - net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group (Nikolay Aleksandrov)   
  - net: ipv6: add fib6_nh_release_dsts stub (Nikolay Aleksandrov)   
  - nfp: checking parameter process for rx-usecs/tx-usecs is invalid (Diana Wang)   
  - ipv6: fix typos in __ip6_finish_output() (Eric Dumazet)   
  - iavf: Prevent changing static ITR values if adaptive moderation is on (Nitesh B Venkatesh)   
  - drm/vc4: fix error code in vc4_create_object() (Dan Carpenter)   
  - scsi: mpt3sas: Fix kernel panic during drive powercycle test (Sreekanth Reddy)   
  - ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE (Takashi Iwai)   
  - NFSv42: Don't fail clone() unless the OP_CLONE operation failed (Trond Myklebust)   
  - firmware: arm_scmi: pm: Propagate return value to caller (Peng Fan)   
  - net: ieee802154: handle iftypes as u32 (Alexander Aring)   
  - ASoC: topology: Add missing rwsem around snd_ctl_remove() calls (Takashi Iwai)   
  - ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer (Srinivas Kandagatla)   
  - ARM: dts: BCM5301X: Add interrupt properties to GPIO node (Florian Fainelli)   
  - ARM: dts: BCM5301X: Fix I2C controller interrupt (Florian Fainelli)   
  - netfilter: ipvs: Fix reuse connection if RS weight is 0 (yangxingwu)   
  - proc/vmcore: fix clearing user buffer by properly using clear_user() (David Hildenbrand)   
  - arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function (Marek Behún)   
  - pinctrl: armada-37xx: Correct PWM pins definitions (Marek Behún)   
  - PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge (Pali Rohár)   
  - PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge (Pali Rohár)   
  - PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge (Pali Rohár)   
  - PCI: aardvark: Fix link training (Pali Rohár)   
  - PCI: aardvark: Simplify initialization of rootcap on virtual bridge (Pali Rohár)   
  - PCI: aardvark: Implement re-issuing config requests on CRS response (Pali Rohár)   
  - PCI: aardvark: Fix PCIe Max Payload Size setting (Pali Rohár)   
  - PCI: aardvark: Configure PCIe resources from 'ranges' DT property (Pali Rohár)   
  - PCI: pci-bridge-emul: Fix array overruns, improve safety (Russell King)   
  - PCI: aardvark: Update comment about disabling link training (Pali Rohár)   
  - PCI: aardvark: Move PCIe reset card code to advk_pcie_train_link() (Pali Rohár)   
  - PCI: aardvark: Fix compilation on s390 (Pali Rohár)   
  - PCI: aardvark: Don't touch PCIe registers if no card connected (Pali Rohár)   
  - PCI: aardvark: Replace custom macros by standard linux/pci_regs.h macros (Pali Rohár)   
  - PCI: aardvark: Issue PERST via GPIO (Pali Rohár)   
  - PCI: aardvark: Improve link training (Marek Behún)   
  - PCI: aardvark: Train link immediately after enabling training (Pali Rohár)   
  - PCI: aardvark: Fix big endian support (Grzegorz Jaszczyk)   
  - PCI: aardvark: Wait for endpoint to be ready before training link (Remi Pommarel)   
  - PCI: aardvark: Deduplicate code in advk_pcie_rd_conf() (Marek Behún)   
  - mdio: aspeed: Fix "Link is Down" issue (Dylan Hung)   
  - mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB (Adrian Hunter)   
  - tracing: Fix pid filtering when triggers are attached (Steven Rostedt (VMware))   
  - tracing/uprobe: Fix uprobe_perf_open probes iteration (Jiri Olsa)   
  - KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB (Nicholas Piggin)   
  - xen: detect uninitialized xenbus in xenbus_init (Stefano Stabellini)   
  - xen: don't continue xenstore initialization in case of errors (Stefano Stabellini)   
  - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (Dan Carpenter)   
  - staging/fbtft: Fix backlight (Noralf Trønnes)   
  - HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts (Jason Gerecke)   
  - Revert "parisc: Fix backtrace to always include init funtion names" (Helge Deller)   
  - media: cec: copy sequence field for the reply (Hans Verkuil)   
  - ALSA: ctxfi: Fix out-of-range access (Takashi Iwai)   
  - binder: fix test regression due to sender_euid change (Todd Kjos)   
  - usb: hub: Fix locking issues with address0_mutex (Mathias Nyman)   
  - usb: hub: Fix usb enumeration issue due to address0 race (Mathias Nyman)   
  - usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts (Ondrej Jirman)   
  - net: nexthop: fix null pointer dereference when IPv6 is not enabled (Nikolay Aleksandrov)   
  - usb: dwc2: hcd_queue: Fix use of floating point literal (Nathan Chancellor)   
  - usb: dwc2: gadget: Fix ISOC flow for elapsed frames (Minas Harutyunyan)   
  - USB: serial: option: add Fibocom FM101-GL variants (Mingjie Zhang)   
  - USB: serial: option: add Telit LE910S1 0x9200 composition (Daniele Palmas)   
  - LTS tag: v5.4.162 (Sherry Yang)   
  - ALSA: hda: hdac_stream: fix potential locking issue in snd_hdac_stream_assign() (Pierre-Louis Bossart)   
  - ALSA: hda: hdac_ext_stream: fix potential locking issues (Pierre-Louis Bossart)   
  - hugetlbfs: flush TLBs correctly after huge_pmd_unshare (Nadav Amit)   
  - tlb: mmu_gather: add tlb_flush_*_range APIs (Peter Zijlstra (Intel))   
  - ice: Delete always true check of PF pointer (Leon Romanovsky)   
  - usb: max-3421: Use driver data instead of maintaining a list of bound devices (Uwe Kleine-König)   
  - ASoC: DAPM: Cover regression by kctl change notification fix (Takashi Iwai)   
  - batman-adv: Don't always reallocate the fragmentation skb head (Sven Eckelmann)   
  - batman-adv: Reserve needed_*room for fragments (Sven Eckelmann)   
  - batman-adv: Consider fragmentation for needed_headroom (Sven Eckelmann)   
  - perf/core: Avoid put_page() when GUP fails (Greg Thelen)   
  - Revert "net: mvpp2: disable force link UP during port init procedure" (Greg Kroah-Hartman)   
  - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors (hongao)   
  - drm/i915/dp: Ensure sink rate values are always valid (Imre Deak)   
  - drm/nouveau: use drm_dev_unplug() during device removal (Jeremy Cline)   
  - drm/udl: fix control-message timeout (Johan Hovold)   
  - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type (Nguyen Dinh Phi)   
  - parisc/sticon: fix reverse colors (Sven Schnelle)   
  - btrfs: fix memory ordering between normal and ordered work functions (Nikolay Borisov)   
  - udf: Fix crash after seekdir (Jan Kara)   
  - s390/kexec: fix memory leak of ipl report buffer (Baoquan He)   
  - x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails (Sean Christopherson)   
  - mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag (Rustam Kovhaev)   
  - ipc: WARN if trying to remove ipc object which is absent (Alexander Mikhalitsyn)   
  - hexagon: export raw I/O routines for modules (Nathan Chancellor)   
  - tun: fix bonding active backup with arp monitoring (Nicolas Dichtel)   
  - arm64: vdso32: suppress error message for 'make mrproper' (Nick Desaulniers)   
  - s390/kexec: fix return code handling (Heiko Carstens)   
  - perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server (Alexander Antonov)   
  - perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server (Alexander Antonov)   
  - KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr() (Michael Ellerman)   
  - NFC: reorder the logic in nfc_{un,}register_device (Lin Ma)   
  - drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame (Hans Verkuil)   
  - NFC: reorganize the functions in nci_request (Lin Ma)   
  - i40e: Fix display error code in dmesg (Grzegorz Szczurek)   
  - i40e: Fix creation of first queue by omitting it if is not power of two (Jedrzej Jagielski)   
  - i40e: Fix ping is lost after configuring ADq on VF (Eryk Rybak)   
  - i40e: Fix changing previously set num_queue_pairs for PFs (Eryk Rybak)   
  - i40e: Fix NULL ptr dereference on VSI filter sync (Michal Maloszewski)   
  - i40e: Fix correct max_pkt_size on VF RX queue (Eryk Rybak)   
  - net: virtio_net_hdr_to_skb: count transport header in UFO (Jonathan Davies)   
  - net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove (Pavel Skripkin)   
  - net: sched: act_mirred: drop dst for the direction from egress to ingress (Xin Long)   
  - scsi: core: sysfs: Fix hang when device state is set via sysfs (Mike Christie)   
  - platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' (Christophe JAILLET)   
  - mips: lantiq: add support for clk_get_parent() (Randy Dunlap)   
  - mips: bcm63xx: add support for clk_get_parent() (Randy Dunlap)   
  - MIPS: generic/yamon-dt: fix uninitialized variable error (Colin Ian King)   
  - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset (Surabhi Boob)   
  - iavf: validate pointers (Mitch Williams)   
  - iavf: prevent accidental free of filter structure (Jacob Keller)   
  - iavf: Fix failure to exit out from last all-multicast mode (Piotr Marczak)   
  - iavf: free q_vectors before queues in iavf_disable_vf (Nicholas Nunley)   
  - iavf: check for null in iavf_fix_features (Nicholas Nunley)   
  - net: bnx2x: fix variable dereferenced before check (Pavel Skripkin)   
  - perf tests: Remove bash construct from record+zstd_comp_decomp.sh (James Clark)   
  - perf bench futex: Fix memory leak of perf_cpu_map__new() (Sohaib Mohamed)   
  - perf bpf: Avoid memory leak from perf_env__insert_btf() (Ian Rogers)   
  - RDMA/netlink: Add __maybe_unused to static inline in C file (Leon Romanovsky)   
  - tracing/histogram: Do not copy the fixed-size char array field over the field size (Masami Hiramatsu)   
  - tracing: Save normal string variables (Tom Zanussi)   
  - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() (Vincent Donnefort)   
  - mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set (Randy Dunlap)   
  - clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk (Dmitry Baryshkov)   
  - clk/ast2600: Fix soc revision for AHB (Joel Stanley)   
  - clk: ingenic: Fix bugs with divided dividers (Paul Cercueil)   
  - sh: define __BIG_ENDIAN for math-emu (Randy Dunlap)   
  - sh: math-emu: drop unused functions (Randy Dunlap)   
  - sh: fix kconfig unmet dependency warning for FRAME_POINTER (Randy Dunlap)   
  - f2fs: fix up f2fs_lookup tracepoints (Gao Xiang)   
  - maple: fix wrong return value of maple_bus_init(). (Lu Wei)   
  - sh: check return code of request_irq (Nick Desaulniers)   
  - powerpc/dcr: Use cmplwi instead of 3-argument cmpli (Michael Ellerman)   
  - ALSA: gus: fix null pointer dereference on pointer block (Chengfeng Ye)   
  - powerpc/5200: dts: fix memory node unit name (Anatolij Gustschin)   
  - iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr() (Teng Qi)   
  - scsi: target: Fix alua_tg_pt_gps_count tracking (Mike Christie)   
  - scsi: target: Fix ordered tag handling (Mike Christie)   
  - MIPS: sni: Fix the build (Bart Van Assche)   
  - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Guanghui Feng)   
  - ALSA: ISA: not for M68K (Randy Dunlap)   
  - ARM: dts: ls1021a-tsn: use generic "jedec,spi-nor" compatible for flash (Li Yang)   
  - ARM: dts: ls1021a: move thermal-zones node out of soc/ (Li Yang)   
  - usb: host: ohci-tmio: check return value after calling platform_get_resource() (Yang Yingliang)   
  - ARM: dts: omap: fix gpmc,mux-add-data type (Roger Quadros)   
  - firmware_loader: fix pre-allocated buf built-in firmware use (Luis Chamberlain)   
  - scsi: advansys: Fix kernel pointer leak (Guo Zhi)   
  - ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect (Hans de Goede)   
  - clk: imx: imx6ul: Move csi_sel mux to correct base register (Stefan Riedmueller)   
  - ASoC: SOF: Intel: hda-dai: fix potential locking issue (Pierre-Louis Bossart)   
  - arm64: dts: freescale: fix arm,sp805 compatible string (Michael Walle)   
  - arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency (AngeloGioacchino Del Regno)   
  - usb: typec: tipd: Remove WARN_ON in tps6598x_block_read (Sven Peter)   
  - usb: musb: tusb6010: check return value after calling platform_get_resource() (Yang Yingliang)   
  - RDMA/bnxt_re: Check if the vlan is valid before reporting (Selvin Xavier)   
  - arm64: dts: hisilicon: fix arm,sp805 compatible string (Michael Walle)   
  - ARM: dts: NSP: Fix mpcore, mmc node names (Matthew Hagan)   
  - arm64: zynqmp: Fix serial compatible string (Michal Simek)   
  - arm64: zynqmp: Do not duplicate flash partition label property (Amit Kumar Mahapatra)   
  - net/mlx5: Add back multicast stats for uplink representor (Huy Nguyen)  [Orabug: 33519567]  
  - net/mlx5: E-Switch, Protect changing mode while adding rules (Roi Dayan)  [Orabug: 33519567]  
  - net/mlx5e: Do not reload ethernet ports when changing eswitch mode (Roi Dayan)  [Orabug: 33519567]  
  - net/mlx5: Move devlink port from mlx5e priv to mlx5e resources (Roi Dayan)  [Orabug: 33519567]  
  - net/mlx5: Move mlx5e hw resources into a sub object (Roi Dayan)  [Orabug: 33519567]  
  - net/mlx5e: Move devlink port register and unregister calls (Roi Dayan)  [Orabug: 33519567]  
  - net/mlx5e: Verify dev is present in some ndos (Roi Dayan)  [Orabug: 33519567]  
  - net/mlx5e: Use nic mode netdev ndos and ethtool ops for uplink representor (Roi Dayan)  [Orabug: 33519567]  
  - net/mlx5e: Add offload stats ndos to nic netdev ops (Roi Dayan)  [Orabug: 33519567]  
  - net/mlx5e: Distinguish nic and esw offload in tc setup block cb (Roi Dayan)  [Orabug: 33519567]  
  - net/mlx5e: Allow legacy vf ndos only if in legacy mode (Roi Dayan)  [Orabug: 33519567]  
  - net/mlx5e: Same max num channels for both nic and uplink profiles (Saeed Mahameed)  [Orabug: 33519567]  
  - net: Change dev parameter to const in netif_device_present() (Roi Dayan)  [Orabug: 33519567]  
  - net/mlx5: Cleanup prototype warning (Saeed Mahameed)  [Orabug: 33519567]  
  - net/mxl5e: Add change profile method (Saeed Mahameed)  [Orabug: 33519567]  
  - net/mlx5e: Disable hw-tc-offload when MLX5_CLS_ACT config is disabled (Maor Dickman)  [Orabug: 33519567]  
  - net/tls: Fix wrong record sn in async mode of device resync (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5e: Fix multicast counter not up-to-date in "ip -s" (Ron Diskin)  [Orabug: 33519567]  
  - net/mlx5e: Add support for PCI relaxed ordering (Aya Levin)  [Orabug: 33519567]  
  - net/mlx5e: Move exposure of datapath function to txrx header (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5e: RX, Re-work initializaiton of RX function pointers (Tariq Toukan)  [Orabug: 33519567]  
  - RDMA/mlx5: ConnectX-7 new capabilities to set relaxed ordering by UMR (Meir Lichtinger)  [Orabug: 33519567]  
  - net/mlx5e: IPsec: Add Connect-X IPsec Rx data path offload (Raed Salem)  [Orabug: 33519567]  
  - net/mlx5e: Fix usage of rcu-protected pointer (Vlad Buslov)  [Orabug: 33519567]  
  - net/mlx5e: Move RQ helpers to txrx.h (Aya Levin)  [Orabug: 33519567]  
  - net/mlx5e: Remove redundant RQ state query (Aya Levin)  [Orabug: 33519567]  
  - net/mlx5e: Change reporters create functions to return void (Eran Ben Elisha)  [Orabug: 33519567]  
  - net/tls: fix sign extension issue when left shifting u16 value (Colin Ian King)  [Orabug: 33519567]  
  - net/mlx5e: kTLS, Improve rx handler function call (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5e: kTLS, Add kTLS RX stats (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5e: kTLS, Add kTLS RX resync support (Tariq Toukan)  [Orabug: 33519567]  
  - net/tls: Add asynchronous resync (Boris Pismenny)  [Orabug: 33519567]  
  - Revert "net/tls: Add force_resync for driver resync" (Boris Pismenny)  [Orabug: 33519567]  
  - net/mlx5e: kTLS, Add kTLS RX HW offload support (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5e: kTLS, Improve TLS feature modularity (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5e: Accel, Expose flow steering API for rules add/del (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5e: Receive flow steering framework for accelerated TCP flows (Boris Pismenny)  [Orabug: 33519567]  
  - net/mlx5e: API to manipulate TTC rules destinations (Saeed Mahameed)  [Orabug: 33519567]  
  - net/mlx5e: Turn XSK ICOSQ into a general asynchronous one (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5: kTLS, Improve TLS params layout structures (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5e: Support tc block sharing for representors (Vu Pham)  [Orabug: 33519567]  
  - net/tls: Add force_resync for driver resync (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5e: Calculate SQ stop room in a robust way (Maxim Mikityanskiy)  [Orabug: 33519567]  
  - net/mlx5e: IPoIB, Enable loopback packets for IPoIB interfaces (Erez Shitrit)  [Orabug: 33519567]  
  - net/mlx5e: Enhance ICOSQ WQE info fields (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5e: Use struct assignment for WQE info updates (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5e: Take TX WQE info structures out of general EN header (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5e: kTLS, Do not fill edge for the DUMP WQEs in TX flow (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5e: kTLS, Fill work queue edge separately in TX flow (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5e: Split TX acceleration offloads into two phases (Maxim Mikityanskiy)  [Orabug: 33519567]  
  - net/mlx5e: Update UDP fields of the SKB for GSO first (Maxim Mikityanskiy)  [Orabug: 33519567]  
  - net/mlx5e: Make TLS offload independent of wqe and pi (Maxim Mikityanskiy)  [Orabug: 33519567]  
  - net/mlx5e: Pass only eseg to IPSEC offload (Maxim Mikityanskiy)  [Orabug: 33519567]  
  - net/mlx5e: Return void from mlx5e_sq_xmit and mlx5i_sq_xmit (Maxim Mikityanskiy)  [Orabug: 33519567]  
  - net/mlx5e: Unify checks of TLS offloads (Maxim Mikityanskiy)  [Orabug: 33519567]  
  - net/mlx5e: Return bool from TLS and IPSEC offloads (Maxim Mikityanskiy)  [Orabug: 33519567]  
  - net/mlx5e: Unify reserving space for WQEs (Maxim Mikityanskiy)  [Orabug: 33519567]  
  - net/mlx5e: Rename ICOSQ WQE info struct and field (Maxim Mikityanskiy)  [Orabug: 33519567]  
  - net/mlx5e: Fetch WQE: reuse code and enforce typing (Maxim Mikityanskiy)  [Orabug: 33519567]  
  - net/mlx5e: TX, Generalise code and usage of error CQE dump (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5: Introduce TLS RX offload hardware bits (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5: Update transobj.c new cmd interface (Leon Romanovsky)  [Orabug: 33519567]  
  - net/mlx5e: en_accel, Add missing net/geneve.h include (Raed Salem)  [Orabug: 33519567]  
  - net/mlx5e: Show/set Rx network flow classification rules on ul rep (Vlad Buslov)  [Orabug: 33519567]  
  - net/mlx5e: Show/set Rx flow indir table and RSS hash key on ul rep (Vlad Buslov)  [Orabug: 33519567]  
  - mlx5: reject unsupported coalescing params (Jakub Kicinski)  [Orabug: 33519567]  
  - net/mlx5e: RX, Use indirect calls wrapper for posting descriptors (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5e: Replace zero-length array with flexible-array member (Gustavo A. R. Silva)  [Orabug: 33519567]  
  - net/mlx5e: TX, Error completion is for last WQE in batch (Tariq Toukan)  [Orabug: 33519567]  
  - net/mlx5: Expose relaxed ordering bits (Michael Guralnik)  [Orabug: 33519567]  
  - net/mlx5e: TX, Dump WQs wqe descriptors on CQE with error events (Saeed Mahameed)  [Orabug: 33519567]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.305.3.el7uek]
changelog:
  - net/mlx5: Enable mlx5 IPsec build options on OL7/OL8 (Qing Huang)  [Orabug: 32936614]  
  - net/mlx5e: Fix SWP offsets when vlan inserted by driver (Moshe Shemesh)  [Orabug: 32936614]  
  - net/mlx5e: Fix missing IPsec statistics on uplink representor (Raed Salem)  [Orabug: 32936614]  
  - net/mlx5e: Add IPsec support to uplink representor (Raed Salem)  [Orabug: 32936614]  
  - net/mlx5: Fix checksum issue of VXLAN and IPsec crypto offload (Huy Nguyen)  [Orabug: 32936614]  
  - net/xfrm: Add inner_ipproto into sec_path (Huy Nguyen)  [Orabug: 32936614]  
  - net/mlx5: Optimize mlx5e_feature_checks for non IPsec packet (Huy Nguyen)  [Orabug: 32936614]  
  - net/mlx5e: IPsec/rep_tc: Fix rep_tc_update_skb drops IPsec packet (Huy Nguyen)  [Orabug: 32936614]  
  - net/mlx5: Replace spaces with tab at the start of a line (Wenpeng Liang)  [Orabug: 32936614]  
  - net/mlx5e: Enable XDP for Connect-X IPsec capable devices (Raed Salem)  [Orabug: 32936614]  
  - net/mlx5e: Enable striding RQ for Connect-X IPsec capable devices (Raed Salem)  [Orabug: 32936614]  
  - net/mlx5e: Release skb in case of failure in tc update skb (Maor Dickman)  [Orabug: 32936614]  
  - net/mlx5e: Move set vxlan nic info to profile init (Roi Dayan)  [Orabug: 32936614]  
  - net/mlx5e: Fix IPSEC stats (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: IPsec, Remove unnecessary config flag usage (Tariq Toukan)  [Orabug: 32936614]  
  - net/mlx5e: IPsec, Inline feature_check fast-path function (Tariq Toukan)  [Orabug: 32936614]  
  - net/mlx5e: IPsec, Avoid unreachable return (Tariq Toukan)  [Orabug: 32936614]  
  - net/mlx5e: IPsec, Enclose csum logic under ipsec config (Tariq Toukan)  [Orabug: 32936614]  
  - net/mlx5e: Split between RX/TX tunnel FW support indication (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5e: Allow RQ outside of channel context (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5e: Allow CQ outside of channel context (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5e: Free drop RQ in a dedicated function (Tariq Toukan)  [Orabug: 32936614]  
  - net/mlx5e: kTLS, Enforce HW TX csum offload with kTLS (Tariq Toukan)  [Orabug: 32936614]  
  - net/mlx5: Expose IP-in-IP TX and RX capability bits (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5e: Fix IPsec packet drop by mlx5e_tc_update_skb (Huy Nguyen)  [Orabug: 32936614]  
  - net/mlx5e: Set IPsec WAs only in IP's non checksum partial case. (Huy Nguyen)  [Orabug: 32936614]  
  - net/mlx5e: IPsec: Add Connect-X IPsec Tx data path offload (Raed Salem)  [Orabug: 32936614]  
  - net/mlx5e: IPsec: Add TX steering rule per IPsec state (Huy Nguyen)  [Orabug: 32936614]  
  - net/mlx5: Add NIC TX domain namespace (Huy Nguyen)  [Orabug: 32936614]  
  - net/mlx5e: Add tc chains offload support for nic flows (Ariel Levkovich)  [Orabug: 32936614]  
  - net/mlx5: Refactor tc flow attributes structure (Ariel Levkovich)  [Orabug: 32936614]  
  - net/mlx5e: Split nic tc flow allocation and creation (Ariel Levkovich)  [Orabug: 32936614]  
  - net/mlx5e: Tc nic flows to use mlx5_chains flow tables (Ariel Levkovich)  [Orabug: 32936614]  
  - net/mlx5: Refactor multi chains and prios support (Ariel Levkovich)  [Orabug: 32936614]  
  - net/mlx5e: Enhanced TX MPWQE for SKBs (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: Move TX code into functions to be used by MPWQE (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: Rename xmit-related structs to generalize them (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: Generalize TX MPWQE checks for full session (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: Support multiple SKBs in a TX WQE (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: Move the TLS resync check out of the function (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: Unify constants for WQE_EMPTY_DS_COUNT (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: Small improvements for XDP TX MPWQE logic (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: Refactor xmit functions (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: Move mlx5e_tx_wqe_inline_mode to en_tx.c (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: Use struct assignment to initialize mlx5e_tx_wqe_info (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: Refactor inline header size calculation in the TX path (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: Fix endianness when calculating pedit mask first bit (Maor Dickman)  [Orabug: 32936614]  
  - net/mlx5e: CT: Fix freeing ct_label mapping (Roi Dayan)  [Orabug: 32936614]  
  - net/mlx5e: Fix memory leak of tunnel info when rule under multipath not ready (Jianbo Liu)  [Orabug: 32936614]  
  - net/mlx5e: Use synchronize_rcu to sync with NAPI (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: Use RCU to protect rq->xdp_prog (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: RX, Add a prefetch command for small L1_CACHE_BYTES (Tariq Toukan)  [Orabug: 32936614]  
  - net: Take common prefetch code structure into a function (Tariq Toukan)  [Orabug: 32936614]  
  - net/mlx5e: Use indirect call wrappers for RX post WQEs functions (Tariq Toukan)  [Orabug: 32936614]  
  - net/mlx5e: CT: Map 128 bits labels to 32 bit map ID (Eli Britstein)  [Orabug: 32936614]  
  - net/mlx5e: XDP, Avoid indirect call in TX flow (Tariq Toukan)  [Orabug: 32936614]  
  - net/mlx5e: IPsec: Add Connect-X IPsec ESN update offload support (Raed Salem)  [Orabug: 32936614]  
  - net/mlx5e: IPsec: Add IPsec steering in local NIC RX (Huy Nguyen)  [Orabug: 32936614]  
  - net/mlx5: Add IPsec related Flow steering entry's fields (Huy Nguyen)  [Orabug: 32936614]  
  - net/mlx5: IPsec: Add HW crypto offload support (Raed Salem)  [Orabug: 32936614]  
  - net/mlx5: Accel, Add core IPsec support for the Connect-X family (Raed Salem)  [Orabug: 32936614]  
  - net/mlx5e: Fix build break when CONFIG_XPS is not set (Saeed Mahameed)  [Orabug: 32936614]  
  - net/mlx5e: CT: Fix releasing ft entries (Roi Dayan)  [Orabug: 32936614]  
  - net/mlx5e: CT: Remove unused function param (Saeed Mahameed)  [Orabug: 32936614]  
  - net/mlx5e: CT: Return err_ptr from internal functions (Saeed Mahameed)  [Orabug: 32936614]  
  - net/mlx5e: CT: Use mapping for zone restore register (Paul Blakey)  [Orabug: 32936614]  
  - net/mlx5e: CT: Re-use tuple modify headers for identical modify actions (Paul Blakey)  [Orabug: 32936614]  
  - net/mlx5e: Export sharing of mod headers to a new file (Paul Blakey)  [Orabug: 32936614]  
  - net/mlx5e: CT: Restore ct state from lookup in zone instead of tupleid (Paul Blakey)  [Orabug: 32936614]  
  - net/mlx5e: CT: Don't offload tuple rewrites for established tuples (Paul Blakey)  [Orabug: 32936614]  
  - net/mlx5e: Use netdev_info instead of pr_info (Oz Shlomo)  [Orabug: 32936614]  
  - net/mlx5e: CT: Allow header rewrite of 5-tuple and ct clear action (Paul Blakey)  [Orabug: 32936614]  
  - net/mlx5e: CT: Save ct entries tuples in hashtables (Paul Blakey)  [Orabug: 32936614]  
  - net/mlx5e: Fix VXLAN configuration restore after function reload (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5e: Enhance TX timeout recovery (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5e: Enhance ICOSQ data on RX reporter's diagnose (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5e: Add EQ info to TX/RX reporter's diagnose (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5e: Rename reporter's helpers (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5e: Add helper to get the RQ WQE counter (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5e: Add helper to get RQ WQE's head (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5e: Align RX/TX reporters diagnose output format (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5e: Refactor build channel params (Tariq Toukan)  [Orabug: 32936614]  
  - net/mlx5e: vxlan: Use RCU for vxlan table lookup (Saeed Mahameed)  [Orabug: 32936614]  
  - net/mlx5e: Move TC-specific function definitions into MLX5_CLS_ACT (Vlad Buslov)  [Orabug: 32936614]  
  - net/mlx5e: CT: Fix ipv6 nat header rewrite actions (Oz Shlomo)  [Orabug: 32936614]  
  - net/mlx5e: en_tc: Fix cast to restricted __be32 warning (Saeed Mahameed)  [Orabug: 32936614]  
  - net/mlx5e: Don't use err uninitialized in mlx5e_attach_decap (Nathan Chancellor)  [Orabug: 32936614]  
  - net/mlx5e: Optimize performance for IPv4/IPv6 ethertype (Eli Britstein)  [Orabug: 32936614]  
  - net/mlx5e: Helper function to set ethertype (Eli Britstein)  [Orabug: 32936614]  
  - net/mlx5e: CT: Correctly get flow rule (Roi Dayan)  [Orabug: 32936614]  
  - net/mlx5e: Support pedit on mpls over UDP decap (Eli Cohen)  [Orabug: 32936614]  
  - xsk: Fix xsk_umem_xdp_frame_sz() (Björn Töpel)  [Orabug: 32936614]  
  - net/mlx5e: CT: Fix offload with CT action after CT NAT action (Roi Dayan)  [Orabug: 32936614]  
  - mlx5: Rx queue setup time determine frame_sz for XDP (Jesper Dangaard Brouer)  [Orabug: 32936614]  
  - xdp: For Intel AF_XDP drivers add XDP frame_sz (Jesper Dangaard Brouer)  [Orabug: 32936614]  
  - xdp: Add frame size to xdp_buff (Jesper Dangaard Brouer)  [Orabug: 32936614]  
  - net: remove newlines in NL_SET_ERR_MSG_MOD (Jacob Keller)  [Orabug: 32936614]  
  - net/mlx5: CT: Remove unused variables (Paul Blakey)  [Orabug: 32936614]  
  - net/mlx5e: CT: Avoid false warning about rule may be used uninitialized (Roi Dayan)  [Orabug: 32936614]  
  - net/mlx5e: Remove unneeded semicolon (Zheng Bin)  [Orabug: 32936614]  
  - net/mlx5: IPsec, Fix coverity issue (Raed Salem)  [Orabug: 32936614]  
  - net/mlx5: TX WQE Add trailer insertion field (Raed Salem)  [Orabug: 32936614]  
  - net/mlx5: Introduce IPsec Connect-X offload hardware bits and structures (Raed Salem)  [Orabug: 32936614]  
  - net/mlx5: Update vxlan.c new cmd interface (Leon Romanovsky)  [Orabug: 32936614]  
  - net/mlx5: Update cq.c to new cmd interface (Leon Romanovsky)  [Orabug: 32936614]  
  - net/mlx5: CT: Change idr to xarray to protect parallel tuple id allocation (Paul Blakey)  [Orabug: 32936614]  
  - net/mlx5: IPsec, Refactor SA handle creation and destruction (Raed Salem)  [Orabug: 32936614]  
  - net/mlx5e: IPSec, Expose IPsec HW stat only for supporting HW (Raed Salem)  [Orabug: 32936614]  
  - net/mlx5: Refactor mlx5_accel_esp_create_hw_context parameter list (Raed Salem)  [Orabug: 32936614]  
  - net/mlx5: Use the correct IPsec capability function for FPGA ops (Raed Salem)  [Orabug: 32936614]  
  - net/mlx5e: CT: Use rhashtable's ct entries instead of a separate list (Paul Blakey)  [Orabug: 32936614]  
  - net/mlx5: Add support for RDMA TX steering (Michael Guralnik)  [Orabug: 32936614]  
  - net/mlx5e: Fix actions_match_supported() return (Dan Carpenter)  [Orabug: 32936614]  
  - net/mlx5: Eswitch, enable forwarding back to uplink port (Eli Cohen)  [Orabug: 32936614]  
  - net/mlx5e: Add support for offloading traffic from uplink to uplink (Eli Cohen)  [Orabug: 32936614]  
  - net/mlx5e: Fix rejecting all egress rules not on vlan (Roi Dayan)  [Orabug: 32936614]  
  - net/mlx5e: CT: Fix stack usage compiler warning (Saeed Mahameed)  [Orabug: 32936614]  
  - net/mlx5e: CT: remove set but not used variable 'unnew' (YueHaibing)  [Orabug: 32936614]  
  - net/mlx5e: Fix an IS_ERR() vs NULL check (Dan Carpenter)  [Orabug: 32936614]  
  - net/mlx5: Introduce TLS and IPSec objects enums (Saeed Mahameed)  [Orabug: 32936614]  
  - net/mlx5e: Fix endianness handling in pedit mask (Sebastian Hense)  [Orabug: 32936614]  
  - net/mlx5e: Remove redundant comment about goto slow path (Roi Dayan)  [Orabug: 32936614]  
  - net/mlx5e: Reduce number of arguments in slow path handling (Eli Cohen)  [Orabug: 32936614]  
  - net/mlx5e: Use netdev_warn() instead of pr_err() for errors (Roi Dayan)  [Orabug: 32936614]  
  - net/mlx5e: Add devlink fdb_large_groups parameter (Jianbo Liu)  [Orabug: 32936614]  
  - net/mlx5: Change the name of steering mode param id (Jianbo Liu)  [Orabug: 32936614]  
  - net/mlx5: Eswitch, avoid redundant mask (Eli Cohen)  [Orabug: 32936614]  
  - net/mlx5: Fix header guard in rsc_dump.h (Nathan Chancellor)  [Orabug: 32936614]  
  - net/mlx5e: Add context to the preactivate hook (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: Allow mlx5e_switch_priv_channels to fail and recover (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - net/mlx5e: Remove unneeded netif_set_real_num_tx_queues (Maxim Mikityanskiy)  [Orabug: 32936614]  
  - ESP: Export esp_output_fill_trailer function (Raed Salem)  [Orabug: 32936614]  
  - net/mlx5: Remove a useless 'drain_workqueue()' call in 'mlx5e_ipsec_cleanup()' (Christophe JAILLET)  [Orabug: 32936614]  
  - mlx5: Use proper logging and tracing line terminations (Joe Perches)  [Orabug: 32936614]  
  - net/mlx5e: Support dump callback in RX reporter (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5e: Support dump callback in TX reporter (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5e: Gather reporters APIs together (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5: Add support for resource dump (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5e: Create q counters on uplink representors (Vlad Buslov)  [Orabug: 32936614]  
  - net/mlx5: Expose resource dump register mapping (Aya Levin)  [Orabug: 32936614]  
  - net/mlx5: Add structures and defines for MIRC register (Eran Ben Elisha)  [Orabug: 32936614]  
  - net/mlx5: WQ, Move short getters into header file (Tariq Toukan)  [Orabug: 32936614]  
  - Revert "net/mlx5e: Fix SWP offsets when vlan inserted by driver" (Mikhael Goikhman)  [Orabug: 32936614]  
  - uek-rpm: ensure BPF Type Format (BTF) section is retained in modules (Alan Maguire)  [Orabug: 33774133]  
  - kbuild: Skip module BTF generation for out-of-tree external modules (Andrii Nakryiko)  [Orabug: 33774133]  
  - bpf: Load and verify kernel module BTFs (Andrii Nakryiko)  [Orabug: 33774133]  
  - kbuild: Build kernel module BTFs if BTF is enabled and pahole supports it (Andrii Nakryiko)  [Orabug: 33774133]  
  - arm64: Add assembly annotations for weak-PI-alias madness (Robin Murphy)  [Orabug: 33816089]  
  - arm64: Import updated version of Cortex Strings' strlen (Sam Tebbs)  [Orabug: 33816089]  
  - arm64: Import latest memcpy()/memmove() implementation (Robin Murphy)  [Orabug: 33816089]  
  - arm64: Import latest version of Cortex Strings' memcmp (Sam Tebbs)  [Orabug: 33816089]  
  - arm64: Better optimised memchr() (Robin Murphy)  [Orabug: 33816089]  
  - net/rds: Fix memory leak in __rds_conn_create() on alloc_ordered_workqueue fail (Freddy Carrillo)  [Orabug: 33821540]  
  - x86/smpboot: check cpu_initialized_mask first after returning from schedule() (Dongli Zhang)  [Orabug: 33825645]  
  - uek-rpm/ol/config-aarch64: Enable CONFIG_ARM_RASPBERRYPI_CPUFREQ for RPi (Vijay Kumar)   
  - KVM: x86: Initialize tdp_level during vCPU creation (Sean Christopherson)  [Orabug: 33841857]  
  - KVM: x86/mmu: Capture TDP level when updating CPUID (Sean Christopherson)  [Orabug: 33841857]  
  - xen/netback: don't queue unlimited number of packages (Juergen Gross)  [Orabug: 33851834]  
  - xen/netback: fix rx queue stall detection (Juergen Gross)  [Orabug: 33851834]  
  - Fix conflict of LTS commit "PCI: aardvark: Configure PCIe resources from 'ranges' DT property" (Sherry Yang)  [Orabug: 33862617]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.305.4.el7uek]
changelog:
  - net/mlx5e: Fix page DMA map/unmap attributes (Aya Levin)  [Orabug: 33382242]  
  - DMA/rxe: Update default value of RXE_MAX_PDN (Rao Shoaib)  [Orabug: 33676597]  
  - uek-rpm: enable VIRTIO_PCI_LIB_LEGACY config (Si-Wei Liu)  [Orabug: 33749636]  
  - vdpa/mlx5: Fix tracking of current number of VQs (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Fix is_index_valid() to refer to features (Eli Cohen)  [Orabug: 33749636]  
  - vdpa: Protect vdpa reset with cf_mutex (Eli Cohen)  [Orabug: 33749636]  
  - vdpa: Avoid taking cf_mutex lock on get status (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/vdpa_sim_net: Report max device capabilities (Eli Cohen)  [Orabug: 33749636]  
  - vdpa: Use BIT_ULL for bit operations (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/vdpa_sim: Configure max supported virtqueues (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Report max device capabilities (Eli Cohen)  [Orabug: 33749636]  
  - vdpa: Support reporting max device capabilities (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Restore cur_num_vqs in case of failure in change_num_qps() (Eli Cohen)  [Orabug: 33749636]  
  - vdpa: Add support for returning device configuration information (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Support configuring max data virtqueue (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Fix config_attr_mask assignment (Eli Cohen)  [Orabug: 33749636]  
  - vdpa: Allow to configure max data virtqueues (Eli Cohen)  [Orabug: 33749636]  
  - vdpa: Read device configuration only if FEATURES_OK (Eli Cohen)  [Orabug: 33749636]  
  - vdpa: Sync calls set/get config/status with cf_mutex (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Distribute RX virtqueues in RQT object (Eli Cohen)  [Orabug: 33749636]  
  - vdpa: Provide interface to read driver features (Eli Cohen)  [Orabug: 33749636]  
  - vdpa: clean up get_config_size ret value handling (Laura Abbott)  [Orabug: 33749636]  
  - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (Eli Cohen)  [Orabug: 33749636]  
  - virtio/virtio_pci_legacy_dev: ensure the correct return value (Peng Hao)  [Orabug: 33749636]  
  - virtio: fix a typo in function "vp_modern_remove" comments. (Dapeng Mi)  [Orabug: 33749636]  
  - virtio-pci: fix the confusing error message (王贇)  [Orabug: 33749636]  
  - vdpa: Mark vdpa_config_ops.get_vq_notification as optional (Eugenio Pérez)  [Orabug: 33749636]  
  - vdpa: Avoid duplicate call to vp_vdpa get_status (Eugenio Pérez)  [Orabug: 33749636]  
  - net/mlx5_vdpa: Offer VIRTIO_NET_F_MTU when setting MTU (Eli Cohen)  [Orabug: 33749636]  
  - vdpa: add driver_override support (Stefano Garzarella)  [Orabug: 33749636]  
  - docs: document sysfs ABI for vDPA bus (Stefano Garzarella)  [Orabug: 33749636]  
  - vdpa: Consider device id larger than 31 (Parav Pandit)  [Orabug: 33749636]  
  - virtio: always enter drivers/virtio/ (Arnd Bergmann)  [Orabug: 33749636]  
  - vdpa: check that offsets are within bounds (Dan Carpenter)  [Orabug: 33749636]  
  - vdpa_sim: avoid putting an uninitialized iova_domain (Longpeng)  [Orabug: 33749636]  
  - vhost-vdpa: clean irqs before reseting vdpa device (Wu Zongyong)  [Orabug: 33749636]  
  - vdpa/mlx5: Forward only packets with allowed MAC address (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Support configuration of MAC (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Fix clearing of VIRTIO_NET_F_MAC feature bit (Parav Pandit)  [Orabug: 33749636]  
  - vdpa_sim_net: Enable user to set mac address and mtu (Parav Pandit)  [Orabug: 33749636]  
  - vdpa: Enable user to set mac and mtu of vdpa device (Parav Pandit)  [Orabug: 33749636]  
  - vdpa: Use kernel coding style for structure comments (Parav Pandit)  [Orabug: 33749636]  
  - vdpa: Introduce query of device config layout (Parav Pandit)  [Orabug: 33749636]  
  - vdpa: Introduce and use vdpa device get, set config helpers (Parav Pandit)  [Orabug: 33749636]  
  - vdpa/mlx5: Propagate link status from device to vdpa driver (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Rename control VQ workqueue to vdpa wq (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Remove mtu field from vdpa net device (Eli Cohen)  [Orabug: 33749636]  
  - vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE (Wu Zongyong)  [Orabug: 33749636]  
  - virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min} (Wu Zongyong)  [Orabug: 33749636]  
  - vdpa: min vq num of vdpa device cannot be greater than max vq num (Wu Zongyong)  [Orabug: 33749636]  
  - vdpa: add new callback get_vq_num_min in vdpa_config_ops (Wu Zongyong)  [Orabug: 33749636]  
  - vp_vdpa: add vq irq offloading support (Wu Zongyong)  [Orabug: 33749636]  
  - vdpa: fix typo (Wu Zongyong)  [Orabug: 33749636]  
  - virtio-pci: introduce legacy device module (Wu Zongyong)  [Orabug: 33749636]  
  - vhost-vdpa: Fix the wrong input in config_cb (Cindy Lu)  [Orabug: 33749636]  
  - vhost_vdpa: unset vq irq before freeing irq (Wu Zongyong)  [Orabug: 33749636]  
  - vdpa: potential uninitialized return in vhost_vdpa_va_map() (Dan Carpenter)  [Orabug: 33749636]  
  - vdpa/mlx5: Avoid executing set_vq_ready() if device is reset (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Clear ready indication for control VQ (Eli Cohen)  [Orabug: 33749636]  
  - vdpa: Support transferring virtual addressing during DMA mapping (Xie Yongji)  [Orabug: 33749636]  
  - vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap() (Xie Yongji)  [Orabug: 33749636]  
  - vdpa: Add an opaque pointer for vdpa_config_ops.dma_map() (Xie Yongji)  [Orabug: 33749636]  
  - vhost-iotlb: Add an opaque pointer for vhost IOTLB (Xie Yongji)  [Orabug: 33749636]  
  - vhost-vdpa: Handle the failure of vdpa_reset() (Xie Yongji)  [Orabug: 33749636]  
  - vdpa: Add reset callback in vdpa_config_ops (Xie Yongji)  [Orabug: 33749636]  
  - vdpa: Fix some coding style issues (Xie Yongji)  [Orabug: 33749636]  
  - vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro (Cai Huoqing)  [Orabug: 33749636]  
  - vdpa_sim: Use iova_shift() for the size passed to alloc_iova() (Xie Yongji)  [Orabug: 33749636]  
  - vdpa/mlx5: Add multiqueue support (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Add support for control VQ and MAC setting (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Ensure valid indices are provided (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Decouple virtqueue callback from struct mlx5_vdpa_virtqueue (Eli Cohen)  [Orabug: 33749636]  
  - Revert "vdpa/mlx5: fix feature negotiation across device reset" (Si-Wei Liu)  [Orabug: 33749636]  
  - vdpa/mlx5: function prototype modifications in preparation to control VQ (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Remove redundant header file inclusion (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Fix queue type selection logic (Eli Cohen)  [Orabug: 33749636]  
  - vdpa/mlx5: Avoid destroying MR on empty iotlb (Eli Cohen)  [Orabug: 33749636]  
  - virtio_vdpa: reject invalid vq indices (Vincent Whitchurch)  [Orabug: 33749636]  
  - vdpa: Add documentation for vdpa_alloc_device() macro (Xie Yongji)  [Orabug: 33749636]  
  - vp_vdpa: Fix return value check for vdpa_alloc_device() (Xie Yongji)  [Orabug: 33749636]  
  - vdpa_sim: Fix return value check for vdpa_alloc_device() (Xie Yongji)  [Orabug: 33749636]  
  - vhost-vdpa: Fix integer overflow in vhost_vdpa_process_iotlb_update() (Xie Yongji)  [Orabug: 33749636]  
  - xfs: remove incorrect ASSERT in xfs_rename (Eric Sandeen)  [Orabug: 33803847]  
  - KVM: nVMX: Filter out all unsupported controls when eVMCS was activated (Vitaly Kuznetsov)  [Orabug: 33805849]  
  - crypto: ccp - Add support for new CCP/PSP device ID (John Allen)  [Orabug: 33805849]  
  - KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU (Sean Christopherson)  [Orabug: 33805849]  
  - KVM: fix avic_set_running for preemptable kernels (Paolo Bonzini)  [Orabug: 33805849]  
  - KVM: x86: Drop guest CPUID check for host initiated writes to MSR_IA32_PERF_CAPABILITIES (Vitaly Kuznetsov)  [Orabug: 33805849]  
  - KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall (Vitaly Kuznetsov)  [Orabug: 33805849]  
  - KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks (Sean Christopherson)  [Orabug: 33805849]  
  - KVM: x86: nSVM: don't copy virt_ext from vmcb12 (Maxim Levitsky)  [Orabug: 33805849]  {CVE-2021-3653} {CVE-2021-3656} 
  - KVM: x86: nSVM: restore int_vector in svm_clear_vintr (Maxim Levitsky)  [Orabug: 33805849]  
  - KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect() (Vitaly Kuznetsov)  [Orabug: 33805849]  
  - KVM: x86: Mark all registers as avail/dirty at vCPU creation (Sean Christopherson)  [Orabug: 33805849]  
  - KVM: nVMX: Sync all PGDs on nested transition with shadow paging (Sean Christopherson)  [Orabug: 33805849]  
  - KVM: SVM: Revert clearing of C-bit on GPA in #NPF handler (Sean Christopherson)  [Orabug: 33805849]  
  - KVM: SVM: Don't strip the C-bit from CR2 on #PF interception (Sean Christopherson)  [Orabug: 33805849]  
  - rds/ib: Kernel change to extend rds-info functionality (Rohit Nair)  [Orabug: 33821340]  
  - nvmet-tcp: fix a race condition between release_queue and io_work (Maurizio Lombardi)  [Orabug: 33825776]  
  - nvmet-tcp: add an helper to free the cmd buffers (Maurizio Lombardi)  [Orabug: 33825776]  
  - drm/i915: Flush TLBs before releasing backing store (Tvrtko Ursulin)  [Orabug: 33835810]  {CVE-2022-0330} 
  - rds: ib: Make selection of completion_vector QoS aware (Håkon Bugge)  [Orabug: 33845918]  
  - tipc: improve size validations for received domain records (Jon Maloy)  [Orabug: 33850801]  {CVE-2022-0435} {CVE-2022-0435} 
  - uek-rpm: Synchronize Module.kabi and lockedlist (Stephen Brennan)  [Orabug: 33871538]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.305.5.el7uek]
changelog:
  - netfilter: nf_tables_offload: incorrect flow offload action array size (Pablo Neira Ayuso)  [Orabug: 33900416]  {CVE-2022-25636}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.0-1948.2.el7uek]
changelog:
  - uek6: Temporarily disable KABI check (Jack Vogel)   
  - arm64/crash_core: Export TCR_EL1.T1SZ in vmcoreinfo (John Donnelly)  [Orabug: 30193155]  
  - crypto: Enable CONFIG_CRYPTO_OFB for fips mode (Jack Vogel)   
  - kernel/crash_core.c - Add crashkernel=auto for x86 and Arm. (John Donnelly)  [Orabug: 30549968]  
  - drm/mgag200: Pin all framebuffer memory at offset 0 in VRAM (John Donnelly)  [Orabug: 30418470]  
  - uek-rpm: Reenable with_dtrace in both OL spec files. (Jack Vogel)   
  - ctf: toolchain-based CTF support (Nick Alcock)  [Orabug: 30544408]  
  - ctf: kernel build with -gt for CTF generation using GCC (sans ld atm) (Indu Bhagat)  [Orabug: 30544408]  
  - waitfd: new syscall implementing waitpid() over fds (Nick Alcock)  [Orabug: 30544408]  
  - ctf: generate CTF information for the kernel (Nick Alcock)  [Orabug: 30544408]  
  - kallsyms: new /proc/kallmodsyms with builtin modules and symbol sizes (Kris Van Hees)  [Orabug: 30544408]  
  - oracleasm: Convert block layer status to errno (Martin K. Petersen)  [Orabug: 30538854]  
  - Enable CONFIG_DM_WRITECACHE in UEK6 (Jack Vogel)  [Orabug: 30421025]  
  - Update the build versioning files. (Jack Vogel)  [Orabug: 30487822]  
  - sched: SIS_CORE to disable idle core search (subhra mazumdar)  [Orabug: 29708118]  
  - sched: add sched feature to disable idle core search (subhra mazumdar)  [Orabug: 29708118]  
  - sched: rotate the cpu search window for better spread (subhra mazumdar)  [Orabug: 29708118]  
  - sched: introduce per-cpu var next_cpu to track search limit (subhra mazumdar)  [Orabug: 29708118]  
  - sched: limit cpu search in select_idle_cpu (subhra mazumdar)  [Orabug: 29708118]  
  - CALL_NOSPEC macro needs forward/backward in label references (George Kennedy)  [Orabug: 30506771]  
  - uek-rpm: Update config files with "make olddefconfig" (Victor Erminpour)  [Orabug: 30507302]  
  - x86/kABI: Increase the NCAPINTS in case we need more CPU bits. (Konrad Rzeszutek Wilk)  [Orabug: 30318342]  
  - KEYS: Print insert-sys-cert information to stdout instead of stderr (Mehmet Kayaalp)  [Orabug: 30329032]  
  - KEYS: Support for inserting a certificate into x86 bzImage (Mehmet Kayaalp)  [Orabug: 30329032]  
  - KEYS: Add ELF class-independent certificate insertion support (Mehmet Kayaalp)  [Orabug: 30329032]  
  - KEYS: Insert incompressible bytes to reserve space in bzImage (Mehmet Kayaalp)  [Orabug: 30329032]  
  - uek-rpm: enable CONFIG_SYSTEM_EXTRA_CERTIFICATE (Eric Snowberg)  [Orabug: 30329032]  
  - Allow mce to reset instead of panic on UE (Allen Pais)  [Orabug: 29750244]  
  - net: enable RPS on vlan devices (Allen Pais)  [Orabug: 29751757]  
  - scsi: Don't abort scsi_scan due to unexpected response (John Sobecki)  [Orabug: 27429506]  
  - mm: parallelize deferred page init along max order boundaries (Daniel Jordan)  [Orabug: 29708084]  
  - ktask: add ktask_ctl flag KTASK_ATOMIC (Daniel Jordan)  [Orabug: 29708084]  
  - ktask: add ktask_aligned_size (Daniel Jordan)  [Orabug: 29708084]  
  - vfio: Fix locked DMA page accounting (Aaron Young)  [Orabug: 29708084]  
  - vfio: relieve mmap_sem reader cacheline bouncing by holding it longer (Daniel Jordan)  [Orabug: 29708084]  
  - vfio: ease mmap_sem writer contention by caching locked_vm (Daniel Jordan)  [Orabug: 29708084]  
  - vfio: parallelize vfio_pin_map_dma (Daniel Jordan)  [Orabug: 29708084]  
  - ktask: add undo support (Daniel Jordan)  [Orabug: 29708084]  
  - ktask, lockdep: detect deadlocks between master and helper threads (Daniel Jordan)  [Orabug: 29708084]  
  - kernel/ktask: annocate debugobjects properly according to its storage location (Shan Hai)  [Orabug: 29708084]  
  - ktask: multithread CPU-intensive kernel work (Daniel Jordan)  [Orabug: 29708084]  
  - ktask: add documentation (Daniel Jordan)  [Orabug: 29708084]  
  - uek-rpm: Enable lockdown LSM (Eric Snowberg)  [Orabug: 30431425]  
  - lockdown: Run in lockdown integrity mode when SB is enabled. (Eric Snowberg)  [Orabug: 30431425]  
  - parfait: Speculative Side Channel defect groups in lib/hexdump.c (Anjali Kulkarni)  [Orabug: 30092081]  
  - Parfait fixes for defects found by parfait-tools (Anjali Kulkarni)  [Orabug: 29962202]  
  - uek-rpm: Set to old style build_id generation to avoid rpm install conflicts. (Somasundaram Krishnasamy)  [Orabug: 30435996]  
  - vmscan: Support multiple kswapd threads per node (Buddy Lumpkin)  [Orabug: 29708468] [Orabug: 29708453]  
  - scsi: mpt3sas: Bump mpt3sas driver version to 32.100.00.00 (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Fix module parameter max_msix_vectors (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Reject NVMe Encap cmnds to unsupported HBA (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Use Component img header to get Package ver (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Fail release cmnd if diag buffer is released (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Add app owned flag support for diag buffer (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Reuse diag buffer allocated at load time (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: clear release bit when buffer reregistered (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Maintain owner of buffer through UniqueID (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Free diag buffer without any status check (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Fix clear pending bit in ioctl status (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Display message before releasing diag buffer (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Register trace buffer based on NVDATA settings (Sreekanth Reddy)  [Orabug: 30376506]  
  - mm/memory-failure.c clean up around tk pre-allocation (Jane Chu)  [Orabug: 30124017]  
  - uek-rpm: enable CONFIG_INTEGRITY_PLATFORM_KEYRING (Eric Snowberg)  [Orabug: 30434806]  
  - x86/microcode/intel: Issue the revision updated message only on the BSP (Borislav Petkov)  [Orabug: 30353603]  
  - x86/microcode: Update late microcode in parallel (Ashok Raj)  [Orabug: 30353603]  
  - mm: Allow userspace to reserve VA range for use by userspace only (Khalid Aziz)  [Orabug: 30135230]  
  - x86/speculation/mds: Check for the right microcode before setting mitigation (Kanth Ghatraju)  [Orabug: 29962281]  
  - x86/speculation/mds: Make mds_mitigation mutable after init (Kanth Ghatraju)  [Orabug: 30091537]  {CVE-2019-11091} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add debugfs for controlling MDS (Kanth Ghatraju)  [Orabug: 30091537]  {CVE-2019-11091} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add boot option to enable MDS protection only while in idle (Boris Ostrovsky)  [Orabug: 30091537]  {CVE-2019-11091} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - dm crypt: add middle-endian variant of plain64 IV (Konrad Rzeszutek Wilk)  [Orabug: 29689986]  
  - x86/speculation: Properly initialize percpu variables (Boris Ostrovsky)  [Orabug: 30386767]  
  - Revert "x86/microcode: Probe CPU features on microcode update" (Boris Ostrovsky)  [Orabug: 30386767]  
  - x86/microcode: Probe CPU features on microcode update (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add per-cpu variables to control speculation (Patrick Colp)   
  - x86/speculation: Add the option to control spectre v2 heuristics (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Enable support for skylake (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add runtime knobs (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Plumb additional support into KVM (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add support for SPEC_CTRL idle (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add SSBD userspace mode (deprecated) (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add SSBD support with IBRS (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add IBPB static key support (Patrick Colp)   
  - x86/speculation: Add RSB stuffing to entry code (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add support for RSB stuffing (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add IBRS_{ENABLE|DISABLE} to entry code (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add static keys for IBRS firmware support (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add support for basic IBRS in the kernel (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Use a static key to enable/disable retpoline (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Refactor mitigation selection code (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Split out nospec-annotate.h from nospec-branch.h (Patrick Colp)  [Orabug: 30090397]  
  - uek-rpm: Fix rpm warnings on OL8 (Somasundaram Krishnasamy)  [Orabug: 30346507]  
  - uek-rpm: Disable PCMCIA (Eric Snowberg)  [Orabug: 30318827]  
  - x86/simplefb: simplefb was broken on UEFI mode Oracle and HP system, skip VIDEO_TYPE_EFI (Ethan Zhao)  [Orabug: 29746425]  
  - revert commit ff8fb335221e2c446b0d4cbea26be371fd2feb64 (Shuning Zhang)  [Orabug: 29708297]  
  - sysfs: replace WARN() with pr_debug when sysfs_remove_group() failed (Ethan Zhao)  [Orabug: 29746401]  
  - uek6: enable XFS online scrub code (Darrick J. Wong)  [Orabug: 30195940]  
  - xfs: change DAX warning for Exadata (Darrick J. Wong)  [Orabug: 30033648]  
  - xfs: add lazytime mount option (Darrick J. Wong)  [Orabug: 29962792]  
  - scsi: scsi_transport_iscsi: modify detected conn err to KERN_ERR (Fred Herard)  [Orabug: 30023361]  
  - scsi: scsi_transport_iscsi: redirect conn error to console (Fred Herard)  [Orabug: 30023375]  
  - mISDN: Add __exit declaration for module exit function (Somasundaram Krishnasamy)  [Orabug: 29903374]  
  - crypto: cavium: cpt: Cavium Cryptographic Accelerator driver (Henry Willard)  [Orabug: 29751550]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/hyperv.h (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/pmu.h (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in include/linux/kvm_host.h (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/cpuid.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/hyperv.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/lapic.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/mmu.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/mtrr.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/x86.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in virt/kvm/irqchip.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in virt/kvm/kvm_main.c (Darren Kenny)  [Orabug: 28713077]  
  - arm64: do not place BUG() file name in generic section (Rob Gardner)  [Orabug: 29708067]  
  - ocfs2: Tighten free bit calculation in the global bitmap (Sunil Mushran)  [Orabug: 27199147]  
  - hugetlbfs: use truncate mutex to prevent pmd sharing race (Mike Kravetz)  [Orabug: 29708524]  
  - hugetlbfs: introduce truncation/fault mutex to avoid races (Mike Kravetz)  [Orabug: 29708507]  
  - kernel: VirtBox workaround for dynamically allocated text (Mike Kravetz)  [Orabug: 29708488]  
  - perf tools: add --sym-lookup arg to enable symbol lookup in hugepage shm segment (Ashok Vairavan)  [Orabug: 29745533]  
  - ocfs2: fix a performance issue with synced buffer io (Ryan Ding)   
  - ocfs2: call ocfs2_abort when journal abort (Ryan Ding)   
  - ocfs2/trivial: Limit unaligned aio+dio write messages to once per day (Sunil Mushran)  [Orabug: 27199146]  
  - ocfs2/trivial: Print message indicating unaligned aio+dio write (Sunil Mushran)  [Orabug: 27199145]  
  - ocfs2: Suppress the error message from being printed in ocfs2_rename (Xiaowei.Hu)  [Orabug: 27199148]  
  - ocfs2: make 'buffered' as the default coherency option (Wengang Wang)  [Orabug: 27199044]  
  - vmcore: quiet zero PT_NOTE warning (Dave Kleikamp)  [Orabug: 27199039]  
  - block: loop: Enable directIO whenever possible (Dave Kleikamp)  [Orabug: 27194729]  
  - arm64: Extend erratum 27456 workaround to ThunderX 83xx (Allen Pais)  [Orabug: 29538492]  
  - arm64: add support for crashkernel=auto (Allen Pais)  [Orabug: 29538492]  
  - oracleasm: Switch to new mount API in Linux 5.3 (Martin K. Petersen)   
  - oracleasm: Kernel changes for 5.2 (Martin K. Petersen)   
  - oracleasm: Kernel changes for 5.0 (Martin K. Petersen)   
  - oracleasm: Kernel changes for 4.18 (Martin K. Petersen)   
  - oracleasm: Honor ASM_IFLAG_FORMAT_NOCHECK flag (Martin K. Petersen)   
  - oracleasm: Implement support for QUERY HANDLE operation (Martin K. Petersen)   
  - oracleasm: Fix use after free for request processing timer (Martin K. Petersen)   
  - oracleasm: Fix incorrectly set flag (Martin K. Petersen)   
  - oracleasm: Fix memory leak (Martin K. Petersen)   
  - oracleasm: Add ENXIO handling (Martin K. Petersen)   
  - oracleasm: Tracing update (Martin K. Petersen)   
  - oracleasm: Don't assume bip was allocated by oracleasm (Martin K. Petersen)   
  - oracleasm: fix asmfs_dir_operations compiler error (Tom Saeger)  [Orabug: 27465296]  
  - oracleasm: Kernel interface changes for 4.12 (Divya Indi)   
  - oracleasm: Copy the integrity descriptor (Martin K. Petersen)   
  - oracleasm: Integrity profile has moved (Martin K. Petersen)   
  - oracleasm: Add support for inline bio error reporting (Martin K. Petersen)   
  - oracleasm: Fix trace output for warn_asm_ioc and check_asm_ioc (Martin K. Petersen)   
  - oracleasm: Fix occasional I/O stall due to merge error (Martin K. Petersen)   
  - oracleasm: Classify device connectivity issues as global errors (Martin K. Petersen)  [Orabug: 20117903]  
  - oracleasm: Deprecate mlog and implement support for tracepoints (Martin K. Petersen)   
  - oracleasm: Abolish mlog usage in integrity.c and clean up error printing. (Martin K. Petersen)   
  - oracleasm: Various code and whitespace cleanups. (Martin K. Petersen)   
  - oracleasm: 4.0 compat changes (Martin K. Petersen)   
  - oracleasm: Compat changes for 3.18 (Martin K. Petersen)   
  - oracleasm: claim FMODE_EXCL access on disk during asm_open (Srinivas Eeda)  [Orabug: 19454829]  
  - oracleasm: Restrict logical block size reporting (Martin K. Petersen)   
  - oracleasm: Report logical block size (Martin K. Petersen)   
  - oracleasm: Compat changes for 3.10 (Martin K. Petersen)   
  - oracleasm: Add support for new error return codes from block/SCSI (Martin K. Petersen)  [Orabug: 17484923]  
  - oracleasm: Compat changes for 3.8 (Martin K. Petersen)   
  - oracleasm: Compat changes for 3.5 (Dwight Engen)   
  - oracleasm: Introduce module parameter for block size selection (Martin K. Petersen)  [Orabug: 15924773]  
  - oracleasm: Data integrity support (Martin K. Petersen)   
  - oracleasm: Fix two merge errors (Martin K. Petersen)   
  - Oracle ASM Kernel Driver (Martin K. Petersen)   
  - ksplice: aarch64 use ksplice friendly KBUILD_CFLAGS (Tom Saeger)  [Orabug: 27649476] [Orabug: 29961704]  
  - ksplice: add sysctls for determining Ksplice features. (Jamie Iles)  [Orabug: 26537364] [Orabug: 29961704]  
  - ksplice: clear the stack before going in the freezer. (Victor Erminpour)  [Orabug: 29961704]  
  - ksplice: avoid going in the __refrigerator without unwinding the stack. (Victor Erminpour)  [Orabug: 29961704]  
  - ksplice: do not skip tasks with TIF_KSPLICE_FREEZING. (Quentin Casasnovas)  [Orabug: 29961704]  
  - ksplice: Provide an interface to freeze tasks (Victor Erminpour)  [Orabug: 29961704]  
  - uek-rpm: Remove kernel-uek-tools RPMs for OL8 (Victor Erminpour)  [Orabug: 30205292]  
  - uek-rpm: Add changes for kernel-uek-doc build support. (Victor Erminpour)  [Orabug: 30381773]  
  - uek-rpm: Update summary to Oracle UEK Release 6 from 5 (Victor Erminpour)  [Orabug: 30310967]  
  - uek-rpm: Re-enable NF_TABLES config options (Victor Erminpour)  [Orabug: 30326867]  
  - uek-rpm: Fix kabitool Module.symvers parse error (Victor Erminpour)  [Orabug: 30341561]  
  - uek-rpm: Update OL8 spec to latest firmware revision (Jack Vogel)  [Orabug: 30299029]  
  - uek-rpm: Generate bls.conf file and copy UEFI CA cert (Victor Erminpour)  [Orabug: 30275817]  
  - uek-rpm: Package vmlinuz and .vmlinuz.hmac in /lib/modules/ (Victor Erminpour)  [Orabug: 30269735]  
  - uek-rpm: kernel-uek RPM specfile cleanup (Victor Erminpour)  [Orabug: 30199979]  
  - uek-rpm: RPM debuginfo improvements for OL8 (Victor Erminpour)  [Orabug: 30199979]  
  - uek-rpm: Fix bug in OL8 kernel RPM scriptlets (Victor Erminpour)  [Orabug: 30179076]  
  - uek-rpm: Disable CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT (Victor Erminpour)  [Orabug: 30179070]  
  - uek-rpm: Call find instead of cp and don't copy .tmp_versions (Victor Erminpour)  [Orabug: 30116866]  
  - uek-rpm: Add rsync as a 'BuildRequires' in RPM specfile (Victor Erminpour)  [Orabug: 30068210]  
  - uek-rpm: Enable CONFIG_NF_TABLES_NETDEV=y (Victor Erminpour)  [Orabug: 29897273]  
  - uek-rpm: Import 'certs/ol_signing_keys.pem' from 'linux-uek.git/uek5/master' (Victor Erminpour)   
  - config-aarch64: change CONFIG_HZ and CONFIG_FRAME_WARN (Thomas Tai)  [Orabug: 28894138]  
  - kernel-uek.spec: defuse a memory bomb in xargs (Lukáš Lipinský)  [Orabug: 30344582]  
  - kernel-uek.spec: defuse a memory bomb in xargs (Lukáš Lipinský)  [Orabug: 30057188]  
  - config-aarch64: enable CONFIG_MPLS_IPTUNNEL and CONFIG_BPF_JIT_ALWAYS_ON (Thomas Tai)  [Orabug: 29493120] [Orabug: 29409143]  
  - Revert "AMD: Change CONFIG_EDAC_DECODE_MCE to built-in" (George Kennedy)  [Orabug: 30080594]  
  - config-aarch64: enable ISCSI_IBFT (Thomas Tai)  [Orabug: 29456913]  
  - uek-rpm: Update firmware prerequisites to 20190627-999.2.git7ae3a09d. (John Donnelly)  [Orabug: 30043163]  
  - uek-rpm: Update UEK5 config files with "make olddefconfig" (Victor Erminpour)  [Orabug: 30038078]  
  - uek-rpm/ol7/nano_modules fix (Jane Chu)  [Orabug: 29959677]  
  - AMD: Change CONFIG_EDAC_DECODE_MCE to built-in (George Kennedy)  [Orabug: 29922372]  
  - config: enable PSI (Tom Hromatka)  [Orabug: 29896477]  
  - uek-rpm: Fix mce-inject.ko path in nano kernel modules list (Somasundaram Krishnasamy)  [Orabug: 29667299]  
  - Revert "aarch64 enable BNX2 CNIC ISCSI, FCOE" (Eric Saint-Etienne)  [Orabug: 29481221]  
  - uek-rpm: update list of removed files, generated by depmod on install stage (Alexander Burmashev)  [Orabug: 29383638]  
  - uek-rpm: replace i40evf.ko with iavf.ko in nano_modules. (John Donnelly)  [Orabug: 29421946]  
  - uek-rpm: aarch64 config enable RETPOLINE (Tom Saeger)  [Orabug: 28867144]  
  - add symbols to kABI whitelist (Dan Duval)  [Orabug: 29261848]  
  - uek-rpm: Remove hardcoded 'kernel_git_commit' macro from specfile (Victor Erminpour)  [Orabug: 29357441]  
  - uek-rpm: Add perf packages back to ol7-aarch64 (Victor Erminpour)  [Orabug: 29343605]  
  - uek-rpm: Remove perf RPMs (Victor Erminpour)  [Orabug: 29325581]  
  - uek-rpm: Remove oracle-armtoolset-1 for OL8 (Victor Erminpour)  [Orabug: 29325581]  
  - uek-rpm: use multi-threaded xz compression for rpms (Alexander Burmashev)  [Orabug: 29201054]  
  - uek-rpm: optimize find-requires usage (Alexander Burmashev)  [Orabug: 29201054]  
  - find-debuginfo.sh: backport parallel files procession (Alexander Burmashev)  [Orabug: 29201054]  
  - uek-rpm: Port to OL8 (Victor Erminpour)  [Orabug: 29287050]  
  - uek-rpm: Change RPM variant from 4k-debug to 4kdebug (Victor Erminpour)  [Orabug: 29287050]  
  - uek-rpm: Copy uek-rpm/ol7/ directory to uek-rpm/ol8/ (Victor Erminpour)  [Orabug: 29287050]  
  - Add the Intel ICE driver to UEK5 configuration (Jack Vogel)  [Orabug: 29293770]  
  - Add Configuration option for Intel IGC driver to UEK5 (Jack Vogel)  [Orabug: 29294226]  
  - uek-rpm: Enable device-mapper era driver (Dave Aldridge)  [Orabug: 29245896]  
  - uek-rpm: Enable Ext2 extended attributes (Dave Aldridge)  [Orabug: 29252939]  
  - uek-rpm: Update x86_64 config options (Victor Erminpour)  [Orabug: 28700595]  
  - uek-rpm: Enable Cavium ThunderX coprocessors and AES_TI crypto (Victor Erminpour)  [Orabug: 29186152]  
  - uek-rpm: Enable ena driver (Somasundaram Krishnasamy)  [Orabug: 29162519]  
  - ctf: explicitly specify the sizes of structures and unions (Nick Alcock)  [Orabug: 29054989]  
  - uek-rpm: remove obsolete CTF-related find-debuginfo hack (Nick Alcock)  [Orabug: 29043023]  
  - ktask: multithread CPU-intensive kernel work (Daniel Jordan)  [Orabug: 25577642]  
  - uek-rpm: build in vfio and vfio_iommu_type1 modules (Daniel Jordan)  [Orabug: 25577642]  
  - config-aarch64-debug: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  
  - config-aarch64: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  
  - [PATCH UEK5 v3] dtrace: add DTRACEACT_PCAP for packet capture for later pcap_dump() (Alan Maguire)  [Orabug: 28975818]  
  - uek-rpm: Allow blacklisting of kernel modules in initramfs during nano-kernel build (Somasundaram Krishnasamy)  [Orabug: 28925565]  
  - uek-rpm: aarch64: enable CONFIG_GPIO_THUNDERX (Henry Willard)  [Orabug: 28932941]  
  - uek-rpm: Enable read IMA policy (Eric Snowberg)  [Orabug: 28702669]  
  - Update the UEFI secureboot keys in UEK5 Master (Jack Vogel)  [Orabug: 28900807]  
  - arm64: disable /dev/port on 64 bit ARM (Eric Saint-Etienne)  [Orabug: 28320013]  
  - config: disable xfs online scrub in uek5 (Darrick J. Wong)  [Orabug: 28874134]  
  - config-aarch64-debug: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  {CVE-2018-12928} 
  - config-aarch64: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  {CVE-2018-12928} 
  - uek-rpm: Run 'make olddefconfig' to get latest x86 config values (Victor Erminpour)  [Orabug: 28763256]  
  - uek-rpm: Remove module rpcrdma.ko (NFSoRDMA) from nano_modules (Somasundaram Krishnasamy)  [Orabug: 28850263]  
  - config: enable BNXT_HWMON (Brian Maly)  [Orabug: 28797053]  
  - uek-rpm: aarch64 some XGENE drivers must be be modules (Tom Saeger)  [Orabug: 28549351]  
  - uek-rpm: enable DTrace FBT for aarch64 (Kris Van Hees)  [Orabug: 28707614]  
  - uek-rpm: enable DTrace SDT for aarch64 (Kris Van Hees)  [Orabug: 28707604]  
  - uek-rpm: Disable deprecated CONFIG_ACPI_PROCFS_POWER (Victor Erminpour)  [Orabug: 28630247]  
  - uek-rpm: support both 4k and 64k page size for aarch64 (Allen Pais)  [Orabug: 28526023]  
  - Revert "uek-rpm: support both 4k and 64k page size for aarch64" (Jack Vogel)   
  - uek-rpm: Disable F2FS in the UEK5 config (Victor Erminpour)  [Orabug: 28570381]  
  - uek-rpm: support both 4k and 64k page size for aarch64 (Allen Pais)  [Orabug: 28526023]  
  - uek-rpm: Enable MPLS suppoprt (Victor Erminpour)  [Orabug: 28367674]  
  - dtrace: increment dtrace-kernel-headers revision to 1.1.0 (Vincent Lim)  [Orabug: 28241736]  
  - uek-rpm: aarch64: enable building SHA3 algorithms (Henry Willard)  [Orabug: 28486461]  
  - mstflint: add mstflint secure boot access kernel support (Qing Huang)  [Orabug: 27416559]  
  - uek-rpm: Enable perf stripped binary (Victor Erminpour)  [Orabug: 28469286]  
  - uek-rpm: Show UEK Release Number in RPM summary (Victor Erminpour)  [Orabug: 28468593]  
  - uek-rpm: aarch64 Set CONFIG_BPF_STREAM_PARSER (Henry Willard)  [Orabug: 27653372]  
  - aarch64: remove duplicate dtb in kernel rpm (Eric Saint-Etienne)  [Orabug: 28216582]  
  - uek-rpm: Enable net_failover.ko in nano_modules file (Victor Erminpour)  [Orabug: 28390028]  
  - uek-rpm: config: Disable CONFIG_SECURITY_DMESG_RESTRICT (Victor Erminpour)  [Orabug: 28372959]  
  - uek-rpm: Enable ovmapi.ko in nano_modules file (Victor Erminpour)  [Orabug: 28144761]  
  - Revert "aarch64: remove duplicate dtb in kernel rpm" (Jack Vogel)   
  - aarch64: remove duplicate dtb in kernel rpm (Eric Saint-Etienne)  [Orabug: 28216582]  
  - aarch64: fix device mapper multipathing (Eric Saint-Etienne)  [Orabug: 27893211]  
  - uek-rpm: config-debug: Turn off torture testing by default (Knut Omang)  [Orabug: 27746166]  
  - rpi: MMC fails to find DMA channel and falls back to PIO (Vijay Kumar)  [Orabug: 28159727]  
  - uek-rpm: aarch64 Disable CONFIG_NET_VRF (Victor Erminpour)  [Orabug: 28158146]  
  - uek-rpm: config: disable CONFIG_DEBUG_VM on aarch64 (Henry Willard)  [Orabug: 28104208]  
  - uek-rpm: Enable kernel-uek-headers build. (Victor Erminpour)  [Orabug: 28110910]  
  - arm64: add support for crashkernel=auto (Dave Kleikamp)  [Orabug: 28095909]  
  - uek-rpm: aarch64 sync NVME config with x86 (Tom Saeger)  [Orabug: 28096294]  
  - uek-rpm: aarch64 make olddefconfig latest stable (Tom Saeger)  [Orabug: 28084270]  
  - uek-rpm: aarch64 make olddefconfig usercopy whitelist (Tom Saeger)  [Orabug: 28084248]  
  - uek-rpm: aarch64 set default cpu governor to PERFORMANCE (Tom Saeger)  [Orabug: 27952402]  
  - uek-rpm: Disable CONFIG_NET_VRF (Victor Erminpour)  [Orabug: 27801112]  
  - uek-rpm: Enable CONFIG_QED_OOO option in UEK5 (Victor Erminpour)  [Orabug: 27774819]  
  - uek-rpm: aarch64 use 64K pagesize (Tom Saeger)  [Orabug: 28057643]  
  - add new checksum files for kABI; re-enable kABI checking (Dan Duval)  [Orabug: 27199028]  
  - uek-rpm: aarch64 build using oracle-armtoolset (Tom Saeger)  [Orabug: 28022143]  
  - uek-rpm: aarch64 make TORTURE modules debug only (Tom Saeger)  [Orabug: 28032744]  
  - uek-rpm: aarch64 enable QLOGIC modules (Tom Saeger)  [Orabug: 28021280]  
  - uek-rpm: aarch64 disable HARDENED_USERCOPY (Tom Saeger)  [Orabug: 27996695]  
  - uek-rpm: aarch64 disable modules that panic kernel (Tom Saeger)  [Orabug: 27999744]  
  - uek-rpm: aarch64 make olddefconfig for ARM SDEI (Tom Saeger)  [Orabug: 28022735]  
  - uek-rpm: Add kernel/drivers/crypto/ccp/ccp.ko to nano modules list (Liam Merwick)  [Orabug: 27854232]  
  - uek-rpm: Run 'make olddefconfig' for UEK5 v4.14.35 (Victor Erminpour)  [Orabug: 27981731]  
  - uek-rpm: Enable silently dropped options from UEK4 (Victor Erminpour)  [Orabug: 27834007]  
  - Revert "enable kABI checking in spec file" (Jack Vogel)   
  - uek-rpm: Remove deprecated config options from UEK5 (Victor Erminpour)  [Orabug: 27981766]  
  - uek-rpm: enable building SHA3 algorithms (Khalid Aziz)  [Orabug: 28001020]  
  - initial kABI whitelists for UEK5 (Dan Duval)  [Orabug: 27199028]  
  - enable kABI checking in spec file (Dan Duval)  [Orabug: 27199028]  
  - uek-rpm: Update linux-firmware dependency to latest (Somasundaram Krishnasamy)  [Orabug: 27989702]  
  - uek-rpm: Turn on intel iommu/vt-d (Tushar Dave)  [Orabug: 27747905]  
  - kernel.spec: add requires system-release for OL7 (Brian Maly)  [Orabug: 27964285]  
  - uek-rpm: aarch64 add arm64 defconfig platforms (Tom Saeger)  [Orabug: 27573165]  
  - uek-rpm: aarch64 disable nct hwmon modules (Tom Saeger)  [Orabug: 27866965]  
  - uek-rpm: aarch64 olddefconfig update to 4.14.35 (Tom Saeger)  [Orabug: 27933685]  
  - uek-rpm: aarch64 remove perl dependency from perf (Tom Saeger)  [Orabug: 27704937]  
  - config: enable fasttrap provider for arm64 (Kris Van Hees)  [Orabug: 27847920]  
  - uek-rpm: Enable build of kernel-uek-doc rpm (Somasundaram Krishnasamy)  [Orabug: 27845100]  
  - uek-rpm: Enable options from RHCK-7.5 missing in UEK5 (Victor Erminpour)  [Orabug: 27866120]  
  - uek-rpm: Enable CONFIG_EDAC_SKX and CONFIG_RAS_CEC (Victor Erminpour)  [Orabug: 27824333]  
  - uek-rpm: Set base_sublevel to 35 (Somasundaram Krishnasamy)  [Orabug: 27911742]  
  - uek-rpm: aarch64 set CMA_SIZE_MBYTES to 0 (Tom Saeger)  [Orabug: 27854630]  
  - uek-rpm: aarch64 enable resilient_rdmaip module (Tom Saeger)  [Orabug: 27854808]  
  - uek-rpm: aarch64 add PANIC_ON_OOPS (Tom Saeger)  [Orabug: 27847484]  
  - uek-rpm: RPM install scripts doesn't supply grub2 with a DT despite it is requested (Petr Benes)  [Orabug: 27802749]  
  - uek-rpm: remove virtio-gpu from nanokernel modules (Jim Quigley)  [Orabug: 27829972]  
  - uek-rpm: aarch64 enable BNX2 CNIC ISCSI, FCOE (Tom Saeger)  [Orabug: 27824608]  
  - uek-rpm: aarch64 olddefconfig update to 4.14.32 (Tom Saeger)  [Orabug: 27824121]  
  - uek-rpm: aarch64 config enable NUMA (Tom Saeger)  [Orabug: 27570228]  
  - uek-rpm: config: Add support for resilient_rdmaip new kernel module (Sudhakar Dindukurti)  [Orabug: 27718686]  
  - uek-rpm: config: Enable ARM64_SVE for aarch64 (Jim Quigley)  [Orabug: 27821643]  
  - uek-rpm: Include tools/objtool/objtool in kernel-uek-devel (Somasundaram Krishnasamy)  [Orabug: 27799902]  
  - uek-rpm: config: Enable DRM_VIRTIO_GPU for x-86_64. (Jim Quigley)  [Orabug: 27815399]  
  - uek-rpm/kernel-uek.spec: Add module.lds in uek5 devel rpm (Vijay Kumar)  [Orabug: 27613639]  
  - Revert "uek-rpm: kabi: remove __stack_chk_fail from kABI list" (Todd Vierling)  [Orabug: 27509441]  
  - uek-rpm: Enable CONFIG_SCHEDSTATS in UEK5 config file (Victor Erminpour)  [Orabug: 27774280]  
  - uek-rpm: Enable config options from UEK5 review (Victor Erminpour)  [Orabug: 27741375]  
  - uek-rpm: Set base_sublevel to 32 (Somasundaram Krishnasamy)  [Orabug: 27792024]  
  - uek-rpm: deliver kvm_stat on x86_64 via kernel-uek-tools (Liam Merwick)  [Orabug: 27566074]  
  - uek-rpm: config: Run "make olddefconfig" against v4.14.28 for x86_64 (Victor Erminpour)  [Orabug: 27656430]  
  - uek-rpm: config: Enable OL7U5 RHCK options for UEK5 (Victor Erminpour)  [Orabug: 27622705]  
  - uek-rpm: config: Enable CONFIG_DMA_CMA and CONFIG_CMA_SIZE_MBYTES=0 (Victor Erminpour)  [Orabug: 25917090]  
  - uek-rpm: config: Enable KASLR in UEK5 (Victor Erminpour)  [Orabug: 27741231]  
  - uek-rpm: config: Enable CONFIG_X86_MCELOG_LEGACY=y (Victor Erminpour)  [Orabug: 27684921]  
  - uek-rpm: config: Enable XFRM_OFFLOAD and ESP_OFFLOAD config options (Victor Erminpour)  [Orabug: 27741365]  
  - uek-rpm: config: Enable CONFIG_KVM_DEBUG_FS in UEK5 debug kernel (Victor Erminpour)  [Orabug: 27741246]  
  - uek-rpm: config: Enable CONFIG_F2FS_FS in UEK5 (Victor Erminpour)  [Orabug: 27739286]  
  - uek-rpm: config: Enable qat_c62x and qat_c62xvf modules (Victor Erminpour)  [Orabug: 27725149]  
  - uek-rpm: config: Disable CONFIG_SECURITY_LOADPIN (Victor Erminpour)  [Orabug: 27703796]  
  - uek-rpm: update dtrace-kernel-headers to 1.0.0 (Tomas Jedlicka)  [Orabug: 27752578]  
  - uek-rpm: enable BNX* drivers for aarch64 (Allen Pais)  [Orabug: 27717735]  
  - uek-rpm: config aarch64 add RPi3 support (Tom Saeger)  [Orabug: 27574522]  
  - uek-rpm/config-aarch64: Unset CONFIG_MODULE_SIG_FORCE in kernel config (Vijay Kumar)  [Orabug: 27620376]  
  - uek-rpm/config-aarch64: Enable default sysrq in kernel config (Vijay Kumar)  [Orabug: 27080659]  
  - uek-rpm: Bump libdtrace-ctf dependency to 0.8.0. (Todd Vierling)  [Orabug: 27741711]  
  - uek-rpm: Set base_sublevel to 30 (Somasundaram Krishnasamy)  [Orabug: 27752925]  
  - uek-rpm: Update nano modules list (Somasundaram Krishnasamy)  [Orabug: 27706743]  
  - uek-rpm: Set base_sublevel to 28 (Somasundaram Krishnasamy)  [Orabug: 27717309]  
  - uek-rpm: aarch64 build kernel-tools, perf packages (Tom Saeger)  [Orabug: 27639751]  
  - uek-rpm: aarch64 add cpupower files needed by kernel-tools (Tom Saeger)  [Orabug: 27639751]  
  - uek-rpm: aarch64 install perf with kernel-uek (Tom Saeger)  [Orabug: 27639751]  
  - uek-rpm: config: Enable ext4 file system encryption (Victor Erminpour)  [Orabug: 27635263]  
  - uek-rpm: UEK5 config file Review (Victor Erminpour)  [Orabug: 27649939]  
  - uek-rpm: Remove config-sparc file (Victor Erminpour)  [Orabug: 27649916]  
  - uek-rpm: config: Enable IPVLAN support (Victor Erminpour)  [Orabug: 27633248]  
  - uek-rpm: config: Enable vfio_mdev VFIO mediated device module (Victor Erminpour)  [Orabug: 27583169]  
  - uek-rpm: config: Enable Intel RDT (Victor Erminpour)  [Orabug: 27581283]  
  - uek-rpm: Set base_sublevel to 26 (Somasundaram Krishnasamy)  [Orabug: 27678165]  
  - uek-rpm: config aarch64 enable kpti and bp harden (Tom Saeger)  [Orabug: 27657714]  
  - uek-rpm: Remove unneeded modules from kernel-ueknano (Somasundaram Krishnasamy)  [Orabug: 27663420]  
  - uek-rpm: config aarch64 enable Mellanox hardware (Tom Saeger)  [Orabug: 27657528]  
  - uek-rpm: Set base_sublevel to 24 (Somasundaram Krishnasamy)  [Orabug: 27639261]  
  - uek-rpm: config: enable XFS Realtime subvolume support by default (Shan Hai)  [Orabug: 27548835]  
  - uek-rpm: aarch64 provide kernel-uname-r metadata (Tom Saeger)  [Orabug: 27540755]  
  - modsign: aarch64 Add key for module signing (Tom Saeger)  [Orabug: 27448208]  
  - uek-rpm: Set base_sublevel to 23 (Somasundaram Krishnasamy)  [Orabug: 27601642]  
  - uek-rpm: Update nano modules list (Somasundaram Krishnasamy)  [Orabug: 27532347]  
  - uek-rpm: Set base_sublevel to 20 (Somasundaram Krishnasamy)  [Orabug: 27586336]  
  - uek-rpm: enable USERFAULTFD in debug kernel (Mike Kravetz)  [Orabug: 27574106]  
  - uek-rpm: Set base_sublevel to 19 (Somasundaram Krishnasamy)  [Orabug: 27396439]  
  - uek-rpm: aarch64 enable available DTrace options (Tom Saeger)  [Orabug: 27485993]  
  - uek-rpm: Update to latest linux-firmware version (Somasundaram Krishnasamy)  [Orabug: 27523859]  
  - uek-rpm: enable LOCK_DOWN_IN_EFI_SECURE_BOOT (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: Enable CONFIG_MODULE_SIG_ALL (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable CONFIG_LOCK_DOWN_KERNEL (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable CONFIG_LOAD_UEFI_KEYS. (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable EFI_SIGNATURE_LIST_PARSER (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable CONFIG_SECONDARY_TRUSTED_KEYRING (Eric Snowberg)  [Orabug: 27193819]  
  - Revert "uek-rpm: config: enable some secure boot features" (Somasundaram Krishnasamy)  [Orabug: 27193819]  
  - uek-rpm: Enable RDS_ACL in UEK5 (Aron Silverton)  [Orabug: 27503146]  
  - uek-rpm: aarch64 enable OCFS2_FS (Tom Saeger)  [Orabug: 27525109]  
  - uek-rpm: Add support for QLogic 41000 Series Converged Network Adapters (Somasundaram Krishnasamy)  [Orabug: 27426190]  
  - uek-rpm: Enable KPTI and Retpoline config options in UEK5 (Victor Erminpour)  [Orabug: 27487028]  
  - uek-rpm: Enable Yama LSM in UEK5 (Victor Erminpour)  [Orabug: 27486963]  
  - uek-rpm: Enable config support for NVMe over Fabrics (NVMe-oF) (Victor Erminpour)  [Orabug: 27449641]  
  - uek-rpm: Enable support for iWarp QLogic QEDR in UEK5 (Victor Erminpour)  [Orabug: 27448989]  
  - uek-rpm: Enable config support for iWARP Intel i40iw (Victor Erminpour)  [Orabug: 27448941]  
  - uek-rpm: Enable config options for Heterogeneous Memory Management (HMM) (Victor Erminpour)  [Orabug: 27110778]  
  - uek-rpm: Enable eBPF related configs in UEK5 (Victor Erminpour)  [Orabug: 27416748]  
  - uek-rpm: Use olddefconfig instead of oldnoconfig (Somasundaram Krishnasamy)  [Orabug: 27283275]  
  - uek-rpm: aarch64 RPMs need Provides 'kernel' (Tom Saeger)  [Orabug: 27516320]  
  - uek-rpm: kabi: remove __stack_chk_fail from kABI list (Todd Vierling)  [Orabug: 27509305]  
  - uek-rpm: aarch64 needs kernel-headers by default (Tom Saeger)  [Orabug: 27495792]  
  - uek-rpm: Update kernel-ueknano modules list (Somasundaram Krishnasamy)  [Orabug: 27494605]  
  - uek-rpm: require CC=gcc7 on aarch64 (Tom Saeger)  [Orabug: 27438232]  
  - uek-rpm: add _kernel_cc to kernel-uek.spec (Tom Saeger)  [Orabug: 27438232]  
  - uek-rpm: config: enable numa balancing on by default (Henry Willard)  [Orabug: 27464647]  
  - uek-rpm: Do not create kernel-uek-base rpm (Somasundaram Krishnasamy)  [Orabug: 27364632]  
  - uek-rpm: enable CONFIG_PREEMPT_VOLUNTARY (Vincent Lim)  [Orabug: 27456269]  
  - uek-rpm: Enable SoftRoCE related configuration in UEK5 (Victor Erminpour)  [Orabug: 27449119]  
  - uek-rpm: Do not build kernel-uek-headers by default. (Somasundaram Krishnasamy)  [Orabug: 27363133]  
  - ctf: enable in debugging kernels (Nick Alcock)  [Orabug: 27266231]  
  - uek-rpm: build env files for aarch64 (Tom Saeger)  [Orabug: 27437589]  
  - uek-rpm: enable debug builds on aarch64 (Tom Saeger)  [Orabug: 27433384]  
  - uek-rpm: configs: Enabel Oracle HXGE and ASM driver (Allen Pais)  [Orabug: 27199116]  
  - fm10k: Add driver to the kernel config for UEK4 (Allen Pais)  [Orabug: 27199008]  
  - uek-rpm: config: enable some secure boot features (Allen Pais)  [Orabug: 27199002]  
  - uek-rpm: config: Enable OVM API (Allen Pais)  [Orabug: 27199003]  
  - uek-rpm: config: sxge/sxgevf: enable driver (Allen Pais)  [Orabug: 27199004]  
  - uek-rpm: enable CONFIG_KSPLICE. (Allen Pais)  [Orabug: 27199009]  
  - x86: add support for crashkernel=auto (Brian Maly)  [Orabug: 27234070]  
  - modsign: Add key for module signing (Eric Snowberg)  [Orabug: 27199070]  
  - uek-rpm: Add Mellanox drivers neeeded for Exadata to base_modules (Victor Erminpour)  [Orabug: 27300509]  
  - uek-rpm: Enable Mellanox hardware kernel config options for UEK5. (Victor Erminpour)  [Orabug: 27300509]  
  - uek-rpm: Disable CONFIG_DMA_CMA in UEK5 kernel config (Victor Erminpour)  [Orabug: 27201411]  
  - uek-rpm: Enable CONFIG_IMA_DEFAULT_HASH=sha256 (Victor Erminpour)  [Orabug: 27186234]  
  - uek-rpm: Enable CGROUP config in the UEK5 kernel (Victor Erminpour)  [Orabug: 25974804]  
  - uek-rpm: Kernel config settings needed to support TCP-BBR (Victor Erminpour)  [Orabug: 27110608]  
  - uek-rpm: enable and configure PMEM/DAX for UEK (Victor Erminpour)  [Orabug: 27201433]  
  - uek-rpm: enable DTrace. (Nick Alcock)  [Orabug: 27124490]  
  - uek-rpm: emit vmlinux.ctfa into -base package. (Nick Alcock)  [Orabug: 27124490]  
  - uek-rpm: set CONFIG_DTRACE depending on the value of with_dtrace (Nick Alcock)  [Orabug: 27124490]  
  - uek-rpm: Add signing options for aarch64 (Tom Saeger)  [Orabug: 27255646]  
  - uek-rpm: add aarch64 config files (Allen Pais)  [Orabug: 27255646]  
  - uek-rpm: add support for aarch64 (Allen Pais)  [Orabug: 27255646]  
  - config: CONFIG_FRAME_POINTER_UNWINDER is CONFIG_UNWINDER_FRAME_POINTER in 4.14.8 (Kris Van Hees)  [Orabug: 27419674]  
  - uek-rpm: create base config files for UEK5 (Victor Erminpour)  [Orabug: 26942304]  
  - uek-rpm: Enable signed modules (Dhaval Giani)  [Orabug: 27162491]  
  - uek-rpm: Downgrade linux-firmware version (Dhaval Giani)  [Orabug: 27162498]  
  - uek-rpm: define base_sublevel as 14 after pull of mainline stable 4.14.14 (Chuck Anderson)  [Orabug: 26942304]  
  - uek-rpm: Temporarily disable doc build (Chuck Anderson)  [Orabug: 26942304]  
  - uek-rpm: Add build dependencies to avoid build errors (Somasundaram Krishnasamy)  [Orabug: 26942304]  
  - uek-rpm: Add RPM build environment for UEK5 (Somasundaram Krishnasamy)  [Orabug: 26942304]  
  - Linux 5.4 (Linus Torvalds)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.1-1949.el7uek]
changelog:
  - Linux 5.4.1 (Greg Kroah-Hartman)   
  - KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel (Michael Ellerman)   
  - powerpc/book3s64: Fix link stack flush on context switch (Michael Ellerman)   {CVE-2019-18660} 
  - staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error (Bernd Porr)   
  - USB: serial: option: add support for Foxconn T77W968 LTE modules (Aleksander Morgado)   
  - USB: serial: option: add support for DW5821e with eSIM support (Aleksander Morgado)   
  - USB: serial: mos7840: fix remote wakeup (Johan Hovold)   
  - USB: serial: mos7720: fix remote wakeup (Johan Hovold)   
  - USB: serial: mos7840: add USB ID to support Moxa UPort 2210 (Pavel Löbl)   
  - appledisplay: fix error handling in the scheduled work (Oliver Neukum)   
  - USB: chaoskey: fix error case of a timeout (Oliver Neukum)   
  - usb-serial: cp201x: support Mark-10 digital force gauge (Greg Kroah-Hartman)   
  - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() (Suwan Kim)   
  - usbip: tools: fix fd leakage in the function of read_attr_usbip_status (Hewenliang)   
  - USBIP: add config dependency for SGL_ALLOC (Oliver Neukum)   
  - ALSA: hda - Disable audio component for legacy Nvidia HDMI codecs (Takashi Iwai)   
  - media: mceusb: fix out of bounds read in MCE receiver buffer (A Sun)   
  - media: imon: invalid dereference in imon_touch_event (Sean Young)   
  - media: cxusb: detect cxusb_ctrl_msg error in query (Vito Caputo)   
  - media: b2c2-flexcop-usb: add sanity checking (Oliver Neukum)   
  - media: uvcvideo: Fix error path in control parsing failure (Laurent Pinchart)   
  - futex: Prevent exit livelock (Thomas Gleixner)   
  - futex: Provide distinct return value when owner is exiting (Thomas Gleixner)   
  - futex: Add mutex around futex exit (Thomas Gleixner)   
  - futex: Provide state handling for exec() as well (Thomas Gleixner)   
  - futex: Sanitize exit state handling (Thomas Gleixner)   
  - futex: Mark the begin of futex exit explicitly (Thomas Gleixner)   
  - futex: Set task::futex_state to DEAD right after handling futex exit (Thomas Gleixner)   
  - futex: Split futex_mm_release() for exit/exec (Thomas Gleixner)   
  - exit/exec: Seperate mm_release() (Thomas Gleixner)   
  - futex: Replace PF_EXITPIDONE with a state (Thomas Gleixner)   
  - futex: Move futex exit handling into futex code (Thomas Gleixner)   
  - cpufreq: Add NULL checks to show() and store() methods of cpufreq (Kai Shen)   
  - media: usbvision: Fix races among open, close, and disconnect (Alan Stern)   
  - media: usbvision: Fix invalid accesses after device disconnect (Alan Stern)   
  - media: vivid: Fix wrong locking that causes race conditions on streaming stop (Alexander Popov)   
  - media: vivid: Set vid_cap_streaming and vid_out_streaming to true (Vandana BN)   
  - ALSA: usb-audio: Fix Scarlett 6i6 Gen 2 port data (Geoffrey D. Bennett)   
  - ALSA: usb-audio: Fix NULL dereference at parsing BADD (Takashi Iwai)   
  - futex: Prevent robust futex exit race (Yang Tao)   
  - x86/entry/32: Fix FIXUP_ESPFIX_STACK with user CR3 (Andy Lutomirski)   
  - x86/pti/32: Calculate the various PTI cpu_entry_area sizes correctly, make the CPU_ENTRY_AREA_PAGES assert precise (Ingo Molnar)   
  - selftests/x86/sigreturn/32: Invalidate DS and ES when abusing the kernel (Andy Lutomirski)   
  - selftests/x86/mov_ss_trap: Fix the SYSENTER test (Andy Lutomirski)   
  - x86/entry/32: Fix NMI vs ESPFIX (Peter Zijlstra)   
  - x86/entry/32: Unwind the ESPFIX stack earlier on exception entry (Andy Lutomirski)   
  - x86/entry/32: Move FIXUP_FRAME after pushing %fs in SAVE_ALL (Andy Lutomirski)   
  - x86/entry/32: Use %ss segment where required (Andy Lutomirski)   
  - x86/entry/32: Fix IRET exception (Peter Zijlstra)   
  - x86/cpu_entry_area: Add guard page for entry stack on 32bit (Thomas Gleixner)   
  - x86/pti/32: Size initial_page_table correctly (Thomas Gleixner)   
  - x86/doublefault/32: Fix stack canaries in the double fault handler (Andy Lutomirski)   
  - x86/xen/32: Simplify ring check in xen_iret_crit_fixup() (Jan Beulich)   
  - x86/xen/32: Make xen_iret_crit_fixup() independent of frame layout (Jan Beulich)   
  - x86/stackframe/32: Repair 32-bit Xen PV (Jan Beulich)   
  - nbd: prevent memory leak (Navid Emamdoost)   
  - x86/speculation: Fix redundant MDS mitigation message (Waiman Long)   
  - x86/speculation: Fix incorrect MDS/TAA mitigation status (Waiman Long)   
  - x86/insn: Fix awk regexp warnings (Alexander Kapshuk)   
  - md/raid10: prevent access of uninitialized resync_pages offset (John Pittman)   
  - Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues" (Mike Snitzer)   
  - Revert "Bluetooth: hci_ll: set operational frequency earlier" (Adam Ford)   
  - ath10k: restore QCA9880-AR1A (v1) detection (Christian Lamparter)   
  - ath10k: Fix HOST capability QMI incompatibility (Bjorn Andersson)   
  - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe (Hui Peng)   
  - ath9k_hw: fix uninitialized variable data (Denis Efremov)   
  - Bluetooth: Fix invalid-free in bcsp_close() (Tomas Bortoli)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.1-1949.1.el7uek]
changelog:
  - x86/spectre: Fix retpoline mode selection logic (Patrick Colp)  [Orabug: 30604403]  
  - uek-rpm: Add CONFIG_CRYPTO_CFB for FIPS (Jack Vogel)  [Orabug: 30158461]  
  - uek-rpm: Enable CONFIG_KEXEC_SIG (Victor Erminpour)  [Orabug: 30488668]  
  - uek-rpm: Enable CONFIG_FW_CFG_SYSFS and CONFIG_FW_CFG_SYSFS_CMDLINE (Victor Erminpour)  [Orabug: 30619488]  
  - uek-rpm: Enable CONFIG_X86_5LEVEL (Victor Erminpour)  [Orabug: 30155946]  
  - uek-rpm: Disable CONFIG_SCHED_AUTOGROUP (Victor Erminpour)  [Orabug: 30596055]  
  - uek-rpm: Carry forward previous UEK5 config options. (Victor Erminpour)  [Orabug: 30595946]  
  - x86/boot: Introduce setup_indirect (Daniel Kiper)  [Orabug: 30564020]  
  - x86/boot: Introduce kernel_info.setup_type_max (Daniel Kiper)  [Orabug: 30564020]  
  - x86/boot: Introduce kernel_info (Daniel Kiper)  [Orabug: 30564020]  
  - uek-rpm: Turn off CONFIG_DEBUG_WX for Arm production kernels. (John Donnelly)  [Orabug: 30193143]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.2-1950.el7uek]
changelog:
  - uek-rpm: Run "make olddefconfig" against uek6/master (Victor Erminpour)  [Orabug: 30596470]  
  - uek-rpm: Enable kTLS offload for for MLX5 (Victor Erminpour)  [Orabug: 30630366]  
  - uek-rpm: Enable CONFIG_CPU_IDLE_GOV_HALTPOLL (Victor Erminpour)  [Orabug: 30614031]  
  - uek-rpm: Enable DTrace required config options (Victor Erminpour)  [Orabug: 30619618]  
  - uek-rpm: UEK6 config option requests from John Haxby (Victor Erminpour)  [Orabug: 30596031]  
  - uek-rpm: UEK6 config option requests from Martin Petersen (Victor Erminpour)  [Orabug: 30596031]  
  - uek-rpm: RHCK config options for UEK6 (Victor Erminpour)  [Orabug: 30540922]  
  - Linux 5.4.2 (Greg Kroah-Hartman)   
  - platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size (Hans de Goede)   
  - platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer (Hans de Goede)   
  - HID: core: check whether Usage Page item is after Usage ID items (Candle Sun)   
  - crypto: talitos - Fix build error by selecting LIB_DES (Herbert Xu)   
  - Revert "jffs2: Fix possible null-pointer dereferences in jffs2_add_frag_to_fragtree()" (Joel Stanley)   
  - ext4: add more paranoia checking in ext4_expand_extra_isize handling (Theodore Ts'o)   
  - r8169: fix resume on cable plug-in (Heiner Kallweit)   
  - r8169: fix jumbo configuration for RTL8168evl (Heiner Kallweit)   
  - selftests: pmtu: use -oneline for ip route list cache (Thadeu Lima de Souza Cascardo)   
  - tipc: fix link name length check (John Rutherford)   
  - selftests: bpf: correct perror strings (Jakub Kicinski)   
  - selftests: bpf: test_sockmap: handle file creation failures gracefully (Jakub Kicinski)   
  - net/tls: use sg_next() to walk sg entries (Jakub Kicinski)   
  - net/tls: remove the dead inplace_crypto code (Jakub Kicinski)   
  - selftests/tls: add a test for fragmented messages (Jakub Kicinski)   
  - net: skmsg: fix TLS 1.3 crash with full sk_msg (Jakub Kicinski)   
  - net/tls: free the record on encryption error (Jakub Kicinski)   
  - net/tls: take into account that bpf_exec_tx_verdict() may free the record (Jakub Kicinski)   
  - openvswitch: remove another BUG_ON() (Paolo Abeni)   
  - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() (Paolo Abeni)   
  - sctp: cache netns in sctp_ep_common (Xin Long)   
  - slip: Fix use-after-free Read in slip_open (Jouni Hogander)   
  - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook (Navid Emamdoost)   
  - openvswitch: fix flow command message size (Paolo Abeni)   
  - net: sched: fix `tc -s class show` no bstats on class with nolock subqueues (Dust Li)   
  - net: psample: fix skb_over_panic (Nikolay Aleksandrov)   
  - net: macb: add missed tasklet_kill (Chuhong Yuan)   
  - net: dsa: sja1105: fix sja1105_parse_rgmii_delays() (Oleksij Rempel)   
  - mdio_bus: don't use managed reset-controller (David Bauer)   
  - macvlan: schedule bc_work even if error (Menglong Dong)   
  - gve: Fix the queue page list allocated pages count (Jeroen de Borst)   
  - x86/fpu: Don't cache access to fpu_fpregs_owner_ctx (Sebastian Andrzej Siewior)   
  - thunderbolt: Power cycle the router if NVM authentication fails (Mika Westerberg)   
  - mei: me: add comet point V device id (Alexander Usyskin)   
  - mei: bus: prefix device names on bus with the bus name (Alexander Usyskin)   
  - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P (Fabio D'Urso)   
  - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids (Hans de Goede)   
  - staging: rtl8723bs: Drop ACPI device ids (Hans de Goede)   
  - staging: rtl8192e: fix potential use after free (Pan Bian)   
  - staging: wilc1000: fix illegal memory access in wilc_parse_join_bss_param() (Ajay Singh)   
  - usb: dwc2: use a longer core rest timeout in dwc2_core_reset() (Mathias Kresin)   
  - driver core: platform: use the correct callback type for bus_find_device (Sami Tolvanen)   
  - crypto: inside-secure - Fix stability issue with Macchiatobin (Pascal van Leeuwen)   
  - net: disallow ancillary data for __sys_{send,recv}msg_file() (Jens Axboe)   
  - net: separate out the msghdr copy from ___sys_{send,recv}msg() (Jens Axboe)   
  - io_uring: async workers should inherit the user creds (Jens Axboe)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.2-1950.1.el7uek]
changelog:
  - uek-rpm: aarch64 config enable RETPOLINE OL8 (Henry Willard)  [Orabug: 30297793]  
  - uek-rpm: aarch64 config enable RETPOLINE (Tom Saeger)  [Orabug: 30297793]  
  - arm64: Allow reference symbols in alt-seqs to be in kernel-data. (Christoph Muellner)  [Orabug: 30297793]  
  - arm64: retpoline: Don't use retpoline in KVM's HYP part. (Christoph Muellner)  [Orabug: 30297793]  
  - Arm64: add retpoline to cpu_show_spectre_v2 (Henry Willard)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: Use alternative framework for retpoline. (Christoph Muellner)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: alternatives: Add support for adr/adrp with offset in alt block. (Christoph Muellner)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: insn: Add offset getter/setter for adr. (Christoph Muellner)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: Add MIDR_APM_POTENZA. (Henry Willard)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: asm: Use *_nospec variants for blr and br. (Henry Willard)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: Add initial retpoline support (Henry Willard)  [Orabug: 30297793]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.2-1950.2.el7uek]
changelog:
  - x86/speculation: Remove static jump from inside ALTERNATIVE block (Patrick Colp)  [Orabug: 30324611]


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-12
changelog:
  - kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
  - Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-14
changelog:
  - kdump.conf.5: clarify the fence_kdump_nodes option
  - kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-15
changelog:
  - Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
  - udev rules: mask cpu hotplug rules


author: Edward Leung <edward.leung@oracle.com> - 2.0.14-17.2.0.1
changelog:
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> 2.0.15-5
changelog:
  - Revert "Update kdump anaconda addon"
  - Revert "Update kdump anaconda addon: fix the md5sum in source file"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-7
changelog:
  - mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
  - Change dump_to_rootfs to use "--mount" instead of "root=X"
  - kdumpctl: move is_fadump_capable() to kdump-lib.sh
  - module-setup: fix 99kdumpbase network dependency
  - mkdumprd: change for_each_block_target() to use get_kdump_targets()
  - kdump-lib.sh: introduce get_kdump_targets()
  - kdump-lib.sh: fix improper get_block_dump_target()
  - kdumpctl: remove "root=X" for kdump boot
  - kdumpctl: fix a bug in remove_cmdline_param()


author: Pingfan Liu <piliu@redhat.com> 2.0.15-9
changelog:
  - makedumpfile: Fix 'kernel_version' variable being uninitialized & introduce minor reorganization
  - makedumpfile: Fix segmentation fault when using --split on a vmcore
  - dracut-module-setup.sh: check whether to include multipath-hostonly or not


author: Pingfan Liu <piliu@redhat.com> 2.0.15-10
changelog:
  - kexec-tools.spec: require dracut >= 033-522 to make 99kdump module installed correctly
  - kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
  - Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-11
changelog:
  - dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
  - kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
  - kdumpctl: skip selinux-relabel for dracut_args --mount dump target


author: Pingfan Liu <piliu@redhat.com> 2.0.15-13
changelog:
  * Thu Feb 1 2018 Pingfan Liu <piliu@redhat.com> 2.0.15-12
  - makedumpfile/sadump: Fix a problem of PTI enabled kernel
  - makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'


author: Pingfan Liu <piliu@redhat.com> 2.0.15-14
changelog:
  - kdumpctl: Remove 'netroot' and 'iscsi initiator' entries from kdump cmdline
  - doc: remove btrfs from supported filesystems list
  - Update kdump anaconda addon
  - makedumpfile/arm64: Add '--mem-usage' support
  - Fix warning about persistent device name not found.
  - kdumpctl: Check the modification time of core_collector
  - kdump.sysconfig.x86_64: Remove 'notsc' from KDUMP_COMMANDLINE_REMOVE
  - makedumpfile: fix for hugepages filtering


author: Pingfan Liu <piliu@redhat.com> 2.0.15-15
changelog:
  - dracut-module-setup.sh: pass ip=either6 param for ipv6
  - dracut-module-setup.sh: install /etc/hosts when using fence_kdump
  - update kdump-anaconda-addon-003-29-g4c517c5.tar.gz


author: Pingfan Liu <piliu@redhat.com> 2.0.15-18
changelog:
  kdumpctl: Rebuild initramfs if loaded kernel modules changed
  dracut-module-setup.sh: don't include multipath-hostonly
  Add document to declare FCoE support (V2)
  Revert "Add document to declare FCoE support"
  Add document to declare FCoE support
  makedumpfile: fix makedumpfile Not tainted in 2nd kernel


author: Pingfan Liu <piliu@redhat.com> 2.0.15-20
changelog:
  - makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
  - dracut-module-setup: Fix DRM module inclusion test for hyper-v
  - kdumpctl: remove some cmdline inheritage from 1st kernel
  - kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
  - kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
  - Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
  - dracut-module-setup: Fix test for inclusion of DRM modules


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-21.0.1
changelog:
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.15-21.0.3.el7_6.3
changelog:
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-21.0.4.el7_6.3
changelog:
  - makedumpfile: arm64: Fix page table walk of 1GB section [Orabug: 27995626]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 28043892]


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-32
changelog:
  - makedumpfile: exclude pages that are logically offline
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-33
changelog:
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
    [Fix the Fix the patch to make sure makedumpfile-1.6.2/ path is used]


author: Livy Ge <livy.ge@oracle.com> 2.0.15-33.0.1
changelog:
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43
changelog:
  - module-setup: re-fix 99kdumpbase network dependency
  - kdumpctl: bail out immediately if host key verification failed


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48
changelog:
  - dracut-module-setup.sh: ensure cluster info is ready before query.
  - dracut-module-setup.sh: improve get_alias()


author: Alex Burmashev <alexander.burmashev@oracle.com> 2.0.15-51.0.1
changelog:
  - Check MokSBStateRT variable state to identify SecureBoot mode [Orabug: 31903240]
  - Add delay to avoid upstream race condition [Orabug: 31121959]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - rebase on top makedumpfile 1.6.6 [Orabug: 30352094]
  - makedumpfile: bump LATEST_VERSION to 5.4.9 [Orabug: 30521746]
  - makedumpfile: backport needed upstream aarch64 patches [Orabug: 30352094]
  - trigger initramfs cleanup for kernel-uek and kernel-uek-debug [Orabug: 30192631]
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Tianyue Lan <tianyue.lan@oracle.com> 2.0.15-51.0.2
changelog:
  - makedumpfile: arm64: Fix page table walk of 1GB section [Orabug: 27995626]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 28043892]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface (Sriharsha Yadagudde) [Orabug: 18905671]
  - droped orabug30928441.kdump.no_timer_check.patch


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-51.0.3
changelog:
  - Mount sysroot inside kdump initramfs in specific FIPS cases [Orabug: 32179720]
  - Check MokSBStateRT variable state to identify SecureBoot mode [Orabug: 31903240]
  - Add delay to avoid upstream race condition [Orabug: 31121959]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - rebase on top makedumpfile 1.6.6 [Orabug: 30352094]
  - makedumpfile: bump LATEST_VERSION to 5.4.9 [Orabug: 30521746]
  - makedumpfile: backport needed upstream aarch64 patches [Orabug: 30352094]
  - trigger initramfs cleanup for kernel-uek and kernel-uek-debug [Orabug: 30192631]
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Brian Maly <brian.maly@oracle.com> 2.0.20-1.0.2
changelog:
  - fix kdump start with multiple crashkernel reservations [Orabug: 32133785]
  - fix OOM kill of makedumpfile when using smaller crashkernel reservations [Orabug: 32133850]
  - rebase to kexec-tools-2.0.20 [Orabug: 31933990]


author: WANG Chao <chaowang@redhat.com> - 2.0.4-25
changelog:
  - kdumpctl: Pass disable_cpu_apicid to kexec of capture kernel
  - Relax restriction of dumping on encrypted target
  - ssh dump: create random-seed manually


author: WANG Chao <chaowang@redhat.com> - 2.0.4-27
changelog:
  - mkdumprd: call dracut with --hostonly-cmdline (dracut >= 033-145)
  - warning on secure boot enabled platform


author: WANG Chao <chaowang@redhat.com> - 2.0.4-28
changelog:
  - Document supported/unsupported/unknown list of dump targets
  - Warn user about save vmcore path mounted by another disk


author: Guangyu Sun <guangyu.sun@oracle.com> - 2.0.4-32.0.1
changelog:
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Vaughan Cao <vaughan.cao@oracle.com> - 2.0.4-32.0.2
changelog:
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]


author: Jingdong Lu <jingdong.lu@oracle.com> - 2.0.4-32.0.1.el7_0.1
changelog:
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface (Sriharsha Yadagudde) [Orabug: 18905671]


author: Andrey Yutman <andrey.yutman@oracle.com> - 2.0.4-32.0.2.el7_0.3
changelog:
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: WANG Chao <chaowang@redhat.com> - 2.0.7-14
changelog:
  - fix core_collector issue for ssh/raw dump
  - remove sysctl.conf for kdump kernel
  - exclude aarch64 build
  - fix path directive issue
  - remove panic_on_warn kernel parameter


author: WANG Chao <chaowang@redhat.com> - 2.0.7-15
changelog:
  - mount fail if its mount poing doesn't exist in /sysroot
  - rebuild initrd dependency during kdump restart
  - fix a dump path issue


author: Baoquan He <bhe@redhat.com> - 2.0.7-19.2
changelog:
  - dracut-module-setup: Enhance kdump to support the bind mounted feature in Atomic
  - Fix the warning if the target path is bind mount in Atomic
  - Get the mount point correctly, if the device has several mount point
  - kdump-lib: Add new function to judge the system is Atomic or not
  - kdump-lib: Add the new function to enhance bind mounted judgement
  - Remove duplicate slash in save path
  - dracut-module-setup.sh: change the insecure use of /tmp/*$$* filenames


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.7-19.0.1.el7_1.2
changelog:
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
   (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Baoquan He <bhe@redhat.com> - 2.0.7-33
changelog:
  mkdumprd: Remove ifcfg from dracut's modules
  arm64: move -fno-exceptions from purgatory code to spec file
  module-setup: Choose the first matched gateway in kdump_static_ip


author: Baoquan He <bhe@redhat.com> - 2.0.7-34
changelog:
  arm64: Overwrite CFLAGS and remove -fno-exceptions from kexec purgatory code
  Fix comment to exclude keyword 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info
  Revert "arm64: move -fno-exceptions from purgatory code to spec file"


author: EL Errata <el-errata_ww@oracle.com> - 2.0.7-38.0.1
changelog:
  - Fix makedumpfile stall on systems with 6TB memory [Orabug: 20364744] (brian.maly@oracle.com)
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
   (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Baoquan He <bhe@redhat.com> - 2.0.7-42
changelog:
  - module-setup: Use get_ifcfg_filename() to get the proper ifcfg file
  - kdump-lib: Add get_ifcfg_filename() to get the proper ifcfg file
  - doc: add nfs to supported filesystems list


author: Baoquan He <bhe@redhat.com> - 2.0.7-43
changelog:
  - kexec/sadump: Back port two patches to fix regression bug of makedumpfile 1.6.0
  - Makedumpfile: Rebase to 1.6.0


author: Baoquan He <bhe@redhat.com> - 2.0.7-44
changelog:
  - Update kdump anaconda addon
  - kdumpctl: Do not rebuild initramfs when $KDUMP_BOOTDIR is read only
  - get_persistent_dev(): fix name contention with dracut's similar function


author: Baoquan He <bhe@redhat.com> - 2.0.7-45
changelog:
  - kdump.conf man page fixes
  - kdump.conf comments fixes
  - Add persistent memory support
  - module-setup: Don't handle iBFT in kdump


author: Baoquan He <bhe@redhat.com> - 2.0.7-47
changelog:
  - spec: Update to add dependency on dracut version >= 033-449
  - watchdog: do not add watchdog module in rd.driver.pre now
  - howto: Notes on watchdog module handling
  - kdumpctl: force rebuild in case of watchdog state change
  - mkdumprd: Add dracut watchdog module as default option


author: Baoquan He <bhe@redhat.com> - 2.0.7-50
changelog:
  - spec: Update to add dependency on dracut-network version >= 033-449
  - mkdumprd: Do not add "nfs" dracut module explicitly
  - kexec-kdump-howto: Add doc about the special mount information via "dracut_args"
  - Support special mount information via "dracut_args"


author: EL Errata <el-errata_ww@oracle.com> - 2.0.7-50.0.1
changelog:
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
   (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: David Howells <dhowells@redhat.com>
changelog:
  - Adjust the manual page for 'keyctl unlink' to show keyring is optional.
  - Add --version support for the keyutils version and build date.


author: David Howells <dhowells@redhat.com> - 1.5.4-1
changelog:
  - Fix the keyctl padd command and similar to handle binary input.
  - Make keyctl show able to take a keyring to dump.
  - Make keyctl show able to take a flag to request hex key IDs.
  - Make keyctl show print the real ID of the root keyring.


author: David Howells <dhowells@redhat.com> - 1.5.6-1
changelog:
  - Fix the request-key.conf.5 manpage.
  - Fix the max depth of key tree dump (keyctl show) [BZ 1002761].
  - The input buffer size for keyctl padd and pinstantiate should be larger [BZ 1002761].
  - Add keyctl_invalidate.3 manpage [BZ 1002761].


author: David Howells <dhowells@redhat.com> - 1.5.7-1
changelog:
  - Provide a utility function to find a key by type and name.
  - Allow keyctl commands to take a type+name arg instead of a key-id arg.
  - Add per-UID get_persistent keyring function [BZ 1014739].


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-2
changelog:
  - Resolves: #997594, misbehaving checkbox "Allow encryption with untrusted keys"
  - Resolves: #997599, Key Manager does not refresh after change
  - Resolves: #999850, shows error message despite the change was successful


author: Rex Dieter <rdieter@fedoraproject.org> - 4.10.1-2
changelog:
  - pull a few upstream patches, in particular...
  - kmix crahes moving streams between sinks (#922849)


author: Tony Camuso <tcamuso@redhat.com> - 20-9
changelog:
  - Must be bumped to 20-9 due to changes and version bumps in the
    7.2-z stream.
    Resolves: rhbz#1320204


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-10
changelog:
  - weak-modules: deprecate --delete-modules switch.
  - weak-modules: implement some pathes configuration from cmdline.
  - weak-modules: redesign to reuse depmod -aeE functionality
    (with some preparation changes).
    This is an updated version of the script which doesn't support
    multiple installation of the same out-of-tree module (stored in the
    'extra' subdirectory). But it more correctly checks dependencies
    between the modules.
    Resolves: rhbz#1367942


author: Tony Camuso <tcamuso@redhat.com> - 20-10
changelog:
  - Rename patches so they are not specific to the build. This was
    causing problems with z-stream builds.
    Resolves: rhbz#1416498


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-12
changelog:
  - weak-modules: fix coverity introduced by latest changes
  - weak-modules: fix "permission denied" on some upgrades.
    Resolves: rhbz#1416566


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.2
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1482385


author: John Mcwalters <john.mcwalters@oracle.com> - 20-15.0.1.el7_4.4
changelog:
  - Rebuilt with updated version
  - weak-modules: Cleanup weak-updates symlinks for external compiled in modules 
    created during dry-run option [Orabug: 26811747]
  - weak-modules: add patch for [Orabug: 26672773]


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.3
changelog:
  - weak-modules: implement dry run by symlink restoration.
  - weak-modules: fix dry-run for non-lib-modules installation.
    Resolves: rhbz#1489696.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.5
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1511943.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-17
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1468305
  - weak-modules: implement dry run by symlink restoration.
    Resolves: rhbz#1477073


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-18
changelog:
  - depmod: external directories support.
    Resolves: rhbz#1361857
  - BuildRequires automake autoconf libtool.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-20
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1510058


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-23
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1619889.


author: Natalya Naumova <natalya.naumova@oracle.com> - 20-23.0.1
changelog:
  - weak-modules: add patch for [Orabug: 26672773]
  - add PKCS#7 signature support [Orabug: 27645962]
  - Reviewed-by: Alexey Petrenko <alexey.petrenko@oracle.com>


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-26
changelog:
  - weak-modules: handle independent modules in one run
  - weak-modules: use asterisk for kernel version in sandbox
    Resolves: rhbz#1695547


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-28
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1774925


author: Jacob Wen <jian.w.wen@oracle.com> - 20-28.0.3
changelog:
  - Use ASN1_STRING_data for openssl-1.0.2k [Orabug: 31160124]
  - build: fix make distcheck [Orabug: 31160124]
  - libkmod-signature: implement pkcs7 parsing with openssl [Orabug: 31160124]
  - signature: do not report wrong data for pkc#7 signature [Orabug: 31160124]
  - libkmod: modinfo: implement signature output [Orabug: 31160124]
  - libkmod: modinfo: implement line splitting in hex_to_str [Orabug: 31160124]
  - libkmod: modinfo: use own function for sig_key hex output [Orabug: 31160124]
  - libkmod: modinfo: fix sig_id output [Orabug: 31160124]


author: David Shea <dshea@redhat.com> - 20-5
changelog:
  - Check for changes in non-module files that affect that initramfs
    Resolves: rhbz#1108166
  - Use dracut to skip early cpio archives in the initramfs
    Resolves: rhbz#1210449


author: David Shea <dshea@redhat.com> - 20-6
changelog:
  - Accept '.' as part of a symbol exported by the kernel
    Resolves: rhbz#1283486
  - Check the addon modules of the new kernel for exported symbols
    Resolves: rhbz#1296465


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.106-11
changelog:
  - Detect journal overflow after 160E of writes
  - Clean up UDS threads when removing last VDO
  - Resolves: rhbz#1512968
  - Resolves: rhbz#1523240


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.114-11
changelog:
  - /sys/uds permissions now resticted to superuser only
  - Remove /sys/uds files that should not be used in production
  - Removing kvdo module reports version
  - VDO automatically chooses the proper write policy by default
  - Fixed a Coverity-detected error path leak
  - Resolves: rhbz#1525305
  - Resolves: rhbz#1527734
  - Resolves: rhbz#1527737
  - Resolves: rhbz#1527924
  - Resolves: rhbz#1528399


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.124-11
changelog:
  - Fixed provisional referencing for dedupe.
  - Only log a bio submission from a VDO to itself.
  - vdoformat cleans up metadata properly after fail.
  - Resolves: rhbz#1511587
  - Resolves: rhbz#1520972
  - Resolves: rhbz#1532481


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.130-12
changelog:
  - Fix General Protection Fault unlocking UDS callback mutex
  - Removing kmod-kvdo package unloads kernel module
  - Fix URL to point to GitHub tree
  - Resolves: rhbz#1510176
  - Resolves: rhbz#1533260
  - Resolves: rhbz#1539061


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.146-13
changelog:
  - Module target is now "vdo" instead of "dedupe"
  - Fixed a bug where crash recovery led to failed kernel page request
  - Improved modification log messages
  - Improved package description and summary fields
  - Resolves: rhbz#1535127
  - Resolves: rhbz#1535597
  - Resolves: rhbz#1540696
  - Resolves: rhbz#1541409


author: - Andy Walsh <awalsh@redhat.com> - 6.1.0.168-16
changelog:
  - Updated source to use GitHub
  - Fixed module version checking for upgrades.
  - Removed debug kernel requirement from spec file.
  - Fixed a deadlock resulting from sleeping while holding a spinlock while
    getting statistics.
  - Resolves: rhbz#1567742
  - Fixed bugs arising from attempts to access sysfs nodes during startup and
    shutdown.
  - Resolves: rhbz#1567744
  - Removed the prepare_ioctl() function to avoid signature changes since this
    function currently does nothing.
  - Resolves: rhbz#1572494


author: - Andy Walsh <awalsh@redhat.com> - 6.1.0.181-17
changelog:
  - Fixed a bug which would cause kernel panics when a VDO device is stacked on a
    RAID50 device.
  - Resolves: rhbz#1599668
  - Fixed a bug which could cause data loss when discarding unused portions of a
    VDO's logical space.
  - Resolves: rhbz#1600058
  - Modified grow physical to fail in the prepare step if the size isn't
    changing, avoiding a suspend-and-resume cycle.
  - Resolves: rhbz#1600662
  - Fixed a bug which would cause attempts to grow the physical size of a VDO
    device to fail if the device below the VDO was resized while the VDO was
    offline.
  - Resolves: rhbz#1591180


author: - Andy Walsh <awalsh@redhat.com> - 6.1.1.84-1
changelog:
  - Deleted unused UDS features.
  - Improved performance of sub 4K writes.
  - Simplified and improved performance of writes with FUA.
  - Improved the accuracy of dedupe statistics.
  - Made the MurmurHash3 implementation architecture independent.
  - Fixed compilation errors on newer versions of GCC.
  - Eliminated spurious allocation of a UDS sparse cache for dense indexes.
  - Fixed a deadlock resulting from sleeping while holding a spinlock while
    getting statistics.
  - Resvolves: rhbz#1562228
  - Fixed bugs related to the timing of the creation and destruction of sysfs
    nodes relative to the creation and destruction of VDO data structures.
  - Resolves: rhbz#1559692
  - Fixed a bug which made deduplication impossible to disable.
  - Removed obsolete code.
  - Improved deduplication of concurrent requests containing the same data.
  - Reduced unnecessary logging.
  - Resolves: rhbz#1511127
  - Removed the prepare_ioctl() function to avoid signature changes since
    this function currently does nothing.
  - Resolves: rhbz#1568129
  - Fixed a bug which made using a sparse index impossible to create.
  - Resolves: rhbz#1570156


author: - Andy Walsh <awalsh@redhat.com> 6.1.1.99-1
changelog:
  - Added /sys/kvdo/version which contains the currently loaded version of
    the kvdo module.
  - Resolves: rhbz#1533950
  - Added logging of normal operation when a VDO device starts normally.
  - Resolves: rhbz#1520988
  - Fixed a race in the UDS module which could cause the index to go offline.
  - Resolves: rhbz#1520988
  - Fixed a bug which would cause attempts to grow the physical size of a VDO
    device to fail if the device below the VDO was resized while the VDO was
    offline.
  - Resolves: rhbz#1582647
  - Fixed thread safety issues in the UDS page cache.
  - Resolves: rhbz#1579492
  - Modified the vdo script to not allow creation of a VDO device on top of an
    already running VDO device.
  - Resolves: rhbz#1572640
  - Fixed a bug which could cause data loss when discarding unused portions of a
    VDO's logical space.
  - Resolves: rhbz#1589249
  - Modified grow physical to fail in the prepare step if the size isn't
    changing, avoiding a suspend-and-resume cycle.
  - Resolves: rhbz#1576539


author: - Andy Walsh <awalsh@redhat.com> 6.1.1.111-1
changelog:
  - Added support for issuing fullness warnings via dmeventd
  - rhbz#1519307
  - Fixed a bug which would cause kernel panics when a VDO device is stacked on a
    RAID50 device.
  - Resolves: rhbz#1593444
  - Improved logging when growing the physical size of a VDO volume.
  - Resolves: rhbz#1597890
  - Resolves: rhbz#1597886
  - Removed misleading log messages when rebuilding the UDS index.
  - Resolves: rhbz#1599867


author: - Andy Walsh <awalsh@redhat.com> 6.1.1.120-2
changelog:
  - No longer attempt to unload modules in %preun
  - Resolves: rhbz#1553420
  - Improved memory allocation by not using the incorrect __GFP_NORETRY flag
    and by using the memalloc_noio_save mechanism.
  - Resolves: rhbz#1571292
  - Fixed a potential deadlock in the UDS index by using the kernel supplied
    struct callback instead of our own implementation of synchronous
    callbacks.
  - Resolves: rhbz#1602151
  - Fixed a potential stack overflow when reaping the recovery journal.
  - Resolves: rhbz#1608070
  - No longer attempt to unload modules in %preun
  - Resolves: rhbz#1553420
  - Improved safety around memory allocation permissions
  - Resolves: rhbz#1595923
  - Improved statistics accounting to allow for concurrent dedupe.
  - Resolves: rhbz#1540722


author: - Andy Walsh <awalsh@redhat.com> 6.1.1.125-4
changelog:
  - Attempt to unload modules and print a warning if unable to.
  - Resolves: rhbz#1553420
  - Fixed a hang when recovering a VDO volume with a physical size larger than
    16TB.
  - Resolves: rhbz#1628316


author: Jingdong Lu <jingdong.lu@oracle.com> 6.1.1.125-5.0.1
changelog:
  - depmod error for symbolic link [OraBug: 28718247] (Hui Han)
    Reviewed-by: Laurence Rochfort <laurence.rochfort@oracle.com>
  - add RHCK signature


author: - Andy Walsh <awalsh@redhat.com> 6.1.2.38-5
changelog:
  - Fixed more error path memory leaks.
    - Resolves: rhbz#1609426
  - Rebased to version 6.2.0 of the UDS module
    - Resolves: rhbz#1637762
  - Improved counting of dedupe timeouts by including in the count queries
    which are not made due to their being a lack of resources from previous
    queries taking too long.
    - Resolves: rhbz#1639898
  - Fixed a NULL pointer dereference if dmeventd registration fails.
    - Resolves: rhbz#1640794
  - Fixed a bug in the statistics tracking partial I/Os.
    - Resolves: rhbz#1594406
  - Allowed VDO backing devices to be specified by major:minor device number.
    - Resolves: rhbz#1637762
  - Suppressed egregious read-only error logging.
    - Resolves: rhbz#1687005


author: - Andy Walsh <awalsh@redhat.com> 6.1.2.41-5
changelog:
  - Reduced and rate limited error logging in order to avoid kernel soft-lockups.
    - Resolves: rhbz#1687005


author: - Andy Walsh <awalsh@redhat.com> 6.1.3.4-5
changelog:
  - Reduced and rate limited more error logging in order to avoid kernel
    soft-lockups.
    - Resolves: rhbz#1706196
  - Fixed a bug in the handling of re-used bios. This bug resulted in a
    kernel panic when rebooting a system after a crash with a VDO device on
    USB attached storage.
    - Resolves: rhbz#1676643


author: - Andy Walsh <awalsh@redhat.com> 6.1.3.7-5
changelog:
  - Fixed a rare bug which would log an assertion failure when shutting down
    a VDO device.
    - Resolves: rhbz#1749000


author: - Andy Walsh <awalsh@redhat.com> 6.1.3.23-5
changelog:
  - Fixed a bug where crash recovery could use the wrong threads for certain
    operations potentially resulting in memory corruption.
    - Resolves: rhbz#1821275


author: Eugene Syromiatnikov <esyr@redhat.com> 2.0.2.1_kern_dup7.5-1
changelog:
  - 394e4cd9074e05af7cd4843b33b4b1bef1e122d0
  - Resolves: #bz1607750
  - atlantic module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 1.10.0_dup7.7-1
changelog:
  - c45db7d2f34d6fad924c20443f73147dca7f6e29
  - bnxt_en kernel module for Driver Update Program
  - Resolves: #bz1755331


author: Eugene Syromiatnikov <esyr@redhat.com> 2.0.2K_dup7.6-2
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1659505
  - ena module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 1.6.27_k_dup7.3-1
changelog:
  - Resolves: #bz1448412
  - af7d3667969d1dedc990b0aa47458756796961c6
  - i40e module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 2.8.10_k_dup7.7-1
changelog:
  - c45db7d2f34d6fad924c20443f73147dca7f6e29
  - i40e kernel module for Driver Update Program
  - Resolves: #bz1784768


author: Eugene Syromiatnikov <esyr@redhat.com> 1.6.27_k_dup7.3-1
changelog:
  - Resolves: #bz1448413
  - 3545087798c48e481b8ae8aebcca6bfb199b470b
  - i40evf module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 4.4.0_k_rh7.4_z-1
changelog:
  - 6591372b59cec0e59cd144bed3e51ba8ceb2dd88
  - ixgbe module for Driver Update Program
  - Resolves: #bz1439814


author: Eugene Syromiatnikov <esyr@redhat.com> 4.4.0_k_rh7.4_z-2
changelog:
  - Remove testing desclaimer from the package description
  - 6591372b59cec0e59cd144bed3e51ba8ceb2dd88
  - ixgbe module for Driver Update Program
  - Resolves: #bz1439814


author: Eugene Syromiatnikov <esyr@redhat.com> 3.2.2_k_rh7.4_z-1
changelog:
  - Resolves: #bz1441298
  - 5e0df6596e78194c6dc5dd0a038302b7fbdfb4c3
  - ixgbevf module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 12.0.0.5_dup7.6-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1676589
  - lpfc kernel module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 07.700.00.00
changelog:
  - 5c36dd7d22747abb333b0c2541bac9544c358e3b
  - Resolves: #bz1427425
  - megaraid_sas module for Driver Update Program.


author: Eugene Syromiatnikov <esyr@redhat.com> 07.702.06.00_rh2_dup7.5-1
changelog:
  - 1514ac33c3e6a00c504e6e5eb0289f3c23bb8aa4
  - Resolves: #bz1578455
  - megaraid_sas module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 4.11.0_dup7.3-1
changelog:
  - Resolves: #bz1462099
  - 8d4022de88b02a390621a2bf9614b25b094951f8
  - mgag200 module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 4.11.0_dup7.3-5
changelog:
  - 8d4022de88b02a390621a2bf9614b25b094951f8
  - Provide fix for the #bz1463535 as a separate patch in order to preserve
    the integrity of sources.


author: Eugene Syromiatnikov <esyr@redhat.com> 14.101.00.00-1
changelog:
  - a2d3cbe3e7f414a5d0c8a9d931ddaf4dbc40c12d
  - Resolves: #rhbz1421748
  - mpt3sas module for Driver Update Program.


author: Eugene Syromiatnikov <esyr@redhat.com> 26.100.01.00_dup7.6-1
changelog:
  - db1eefc8c25d0a3feaed310963bb3c3d04d81825
  - Resolves: #bz1660390
  - mpt3sas module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 3.10.0_957-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1672909
  - nfit kernel module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.10.21_dup7.3-1
changelog:
  - d44f90c087a53365ef671c1a6414d07fd8bf4af0
  - Resolves: #bz1448409, #bz1448411
  - qed module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.10.21_dup7.4-1
changelog:
  - 0413ea41707374d85a707b850cd0b318d3d5d132
  - Resolves: #bz1525991, #bz1525992
  - qed module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.33.0.20_dup7.6-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #1668206
  - qed module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.10.21_dup7.3-1
changelog:
  - Resolves: #bz1448411
  - 4fba2334c2fb174d98a4fabafd078f7b283b5622
  - qede module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.10.21_dup7.4-1
changelog:
  - 0413ea41707374d85a707b850cd0b318d3d5d132
  - Resolves: #bz1525991, #bz1525992
  - qede module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.33.0.20_dup7.6-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1668206
  - qede module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.7.0_dup7.3-1
changelog:
  - Resolves: #bz1448408
  - e22c53a31fd2776bd02b4be1d9f93db5b5f8d678
  - qedf module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.7.0_dup7.4-1
changelog:
  - 0413ea41707374d85a707b850cd0b318d3d5d132
  - Resolves: #bz1525991, #bz1525992
  - qedf module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.33.0.20_dup7.6-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1668206
  - qedf module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.4.0_dup7.4-1
changelog:
  - 0413ea41707374d85a707b850cd0b318d3d5d132
  - Resolves: #bz1525991, #bz1525992
  - qedi module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.33.0.20_dup7.6-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1668206
  - qedi module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 3.10.0_957_dup7.6-3
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1668206
  - qedr module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.10.0_dup7.4-1
changelog:
  - 0413ea41707374d85a707b850cd0b318d3d5d132
  - Resolves: #bz1525991, #bz1525992
  - qedr module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 10.01.00.20.07.8_k_dup7.7-1
changelog:
  - c45db7d2f34d6fad924c20443f73147dca7f6e29
  - qla2xxx kernel module for Driver Update Program
  - Resolves: #bz1784769


author: Radek Novacek <rnovacek@redhat.com> 0.9.0-3
changelog:
  - Enable direct calls
  - Fix method arguments that are both input and output
  - Don't install Find*.cmake files


author: Radek Novacek <rnovacek@redhat.com> 0.9.1-3
changelog:
  - Set format(printf) attribute to __KReturn2 function
  - Fix possible integer overflow
  - Resolves: rhbz#1000434, rhbz#1000430


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-40
changelog:
  - pull in fix from master to make reporting of errors encountered by
    the SPNEGO mechanism work better (RT#7045, part of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-42
changelog:
  - add proposed patch to fix the GSSAPI library's checks for expired
    client creds in gss_init_sec_context() so that they work with keyring
    caches (RT#7820, #1030607)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-44
changelog:
  - pull in and backport multiple changes to allow replay caches to be added to
    a GSS credential store as "rcache"-type credentials (RT#7818/#7819/#7836,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-46
changelog:
  - pull in patch from master to move the default directory which the KDC uses
    when computing the socket path for a local OTP daemon from the database
    directory (/var/kerberos/krb5kdc) to the newly-added run directory
    (/run/krb5kdc), in line with what we're expecting in 1.13 (RT#7859, more
    of #1040056 as #1063905)
  - add a tmpfiles.d configuration file to have /run/krb5kdc created at
    boot-time
  - own /var/run/krb5kdc


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-47
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1066002, RT#7858)


author: Nathaniel McCallum <npmccallum@redhat.com> - 1.11.3-48
changelog:
  - add Nathaniel's backported fix for to make password changes work properly
    when performed while obtaining creds over FAST (RT#7868, #1072579)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-49
changelog:
  - mark the pkinit module "nodelete" so that applications which cause it
    to be loaded and unloaded repeatedly don't suffer from memory loss when
    libcrypto is initialized, allocating memory in the process, and then
    unloaded along with the module (most of #1063732)
  - when copying creds from one ccache to another, if we single out one
    server for which creds shouldn't be copied, don't leak the memory
    that those creds use (a bit more of #1063732)
  - fix an uninitialized variable warning that could, rarely, cause a
    service-unavailable error to be reported when a server was merely
    unreachable (spotted while chasing #1063732)
  - don't leak the per-request context allocated by preauth modules (a
    bit more of #1063732)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-5
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1078888)
  - define _GNU_SOURCE in files where we use EAI_NODATA, to make sure that
    it's declared (#1059730,#1084068,#1109102)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-6
changelog:
  - backport patch to make the client skip checking the server's reply
    address when processing responses to password-change requests, which
    between NAT and upcoming HTTPS support, can cause us to erroneously
    report an error to the user when the server actually reported success
    (RT#7886)
  - backport support for accessing KDCs and kpasswd services via HTTPS
    proxies (marked by being specified as https URIs instead as hostnames
    or hostname-and-port), such as the one implemented in python-kdcproxy
    (RT#7929, #109919), and pick up a subsequent patch to build HTTPS
    as a plugin


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-8
changelog:
  - fix the problem where the %license file has been a dangling symlink
  - ksu: pull in fix from pull #206 to avoid breakage when the
    default_ccache_name doesn't include a cache type as a prefix
  - ksu: pull in a proposed fix for pull #207 to avoid breakage when the
    invoking user doesn't already have a ccache


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-9
changelog:
  - Undo libkadmclnt SONAME change (from 8 to 9) which originally
    happened in the krb5 1.12 rebase (#1166012) but broke
    rubygem-rkerberos (sort of ruby language bindings for
    libkadmclnt&co.) dependicies, as side effect of
    rubygem-rkerberos using private interfaces in libkadmclnt.


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-10
changelog:
  - In ksu, without the -e flag, also check .k5users (#1105489)
    When ksu was explicitly told to spawn a shell, a line in .k5users which
    listed "*" as the allowed command would cause the principal named on the
    line to be considered as a candidate for authentication.
    When ksu was not passed a command to run, which implicitly meant that
    the invoking user wanted to run the target user's login shell, knowledge
    that the principal was a valid candidate was ignored, which could cause
    a less optimal choice of the default target principal.
    This doesn't impact the authorization checks which we perform later.
    Patch by Nalin Dahyabhai <nalin@redhat.com>


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-13
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9423 (#1179863) "libgssrpc server applications
    leak uninitialized bytes (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-14
changelog:
  - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, "Do not
    loop on principal unknown errors").


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-15
changelog:
  - Add a patch to fix RedHat bug #1256870 ("KDC sends multiple
    requests to ipa-otpd for the same authentication") which causes
    the KDC to send multiple retries to ipa-otpd for TCP transports
    while it should only be done for UDP.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-1
changelog:
  - the rebase to krb5 1.13.1 in vers 1.13.1-0 also fixed:
    - Bug 1144498 ("Fix the race condition in the libkrb5 replay cache")
    - Bug 1163402 ("kdb5_ldap_util view_policy does not shows ticket flags on s390x and ppc64")
    - Bug 1185770 ("Missing upstream test in krb5-1.12.2: src/tests/gssapi/t_invalid.c")
    - Bug 1204211 ("CVE-2014-5355 krb5: unauthenticated denial of service in recvauth_common() and other")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-2
changelog:
  - Add fix for RedHat Bug #1164304 ("Upstream unit tests loads
    the installed shared libraries instead the ones from the build")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-3
changelog:
  - Add patch to fix Redhat Bug #1222903 ("[SELinux] AVC denials may appear
    when kadmind starts"). The issue was caused by an unneeded |htons()|
    which triggered SELinux AVC denials due to the "random" port usage.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-4
changelog:
  - the rebase to krb5 1.13.2 in vers 1.13.2-0 also fixed:
    - Redhat Bug #1247761 ("RFE: Minor krb5 spec file cleanup and sync
      with recent Fedora 22/23 changes")
    - Redhat Bug #1247751 ("krb5-config returns wrong -specs path")
    - Redhat Bug #1247608 ('Add support for multi-hop preauth mechs
      via |KDC_ERR_MORE_PREAUTH_DATA_REQUIRED| for RFC 6113 ("A
      Generalized Framework for Kerberos Pre-Authentication")')
  - Removed "krb5-1.10-kprop-mktemp.patch" and
    "krb5-1.3.4-send-pr-tempfile.patch", both are no longer used since
    the rebase to krb5 1.13.1


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-5
changelog:
  - Add a patch to fix RedHat bug #1251586 ("KDC sends multiple
    requests to ipa-otpd for the same authentication") which causes
    the KDC to send multiple retries to ipa-otpd for TCP transports
    while it should only be done for UDP.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-6
changelog:
  - Add a patch to fix RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') so that krb5 resolves GSS creds
    if |time_rec| is requested.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-7
changelog:
  - Obsolete multilib versions of server packages to fix RH
    bug #1251913 ("krb5 should obsolete the multilib versions
    of krb5-server and krb5-server-ldap").
    The following packages are declared obsolete:
    - krb5-server-1.11.3-49.el7.i686
    - krb5-server-1.11.3-49.el7.ppc
    - krb5-server-1.11.3-49.el7.s390
    - krb5-server-ldap-1.11.3-49.el7.i686
    - krb5-server-ldap-1.11.3-49.el7.ppc
    - krb5-server-ldap-1.11.3-49.el7.s390


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-8
changelog:
  - Add a patch to fix RH Bug #1250154 ("[s390x, ppc64, ppc64le]:
    kadmind does not accept ACL if kadm5.acl does not end with EOL")
    The code "accidently" works on x86/AMD64 because declaring a
    variable |char| results in an |unsigned char| by default while
    most other platforms (e.g. { s390x, ppc64, ppc64le, ...})
    default to |signed char| (still have to use lint(1) to clean
    up 38 more instances of this kind of bug).


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-9
changelog:
  - Ammend patch for RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') to handle the newly introduced
    valgrind hits.


author: Robbie Harwood <rharwood@redhat.com> 1.13.2-9
changelog:
  - Add patch and test case for "KDC does not return proper
    client principal for client referrals"
  - Resolves: #1259846


author: Robbie Harwood <rharwood@redhat.com> - 1.13.2-12
changelog:
  - Fix CVE-2015-8631, CVE-2015-8630, and CVE-2015-8629
  - Remove obsolete trigger to enable building of package
  - Resolves: #1306969


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-29
changelog:
  - Process profile includedir in sorted order
  - Also, ignore dotfiles in included directories
  - Resolves: #1539824


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-32
changelog:
  - Include preauth name in trace output if possible
  - Update cert generation scripts to work on modern openssl
  - Fix per-request preauth scoping
  - Add test case for PKINIT DH renegotiation
  - Echo KDC cookies in preauth tryagain
  - Fall back to other preauth mechanisms after failures
  - Resolves: #1540130


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-7
changelog:
  - Fix installed files for -java subpkg
    Resolves: bz#1253143, build failure when java is installed in build enviroment


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-8
changelog:
  - Properly remove kross-java files
    Resolves: bz#1253143, build failure when java is installed in build enviroment


author: Siteshwar Vashisht <svashisht@redhat.com> - 20120801-37
changelog:
  - Add configuration option to enable signal bubbling for backward compatibility
    Resolves: #1484937


author: Kamil Dudka <kdudka@redhat.com> - 20120801-137
changelog:
  - Increase the release number by 100 to make sure it stays higher than in RHEL-6
    Related: #1484937


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-12
changelog:
  - ksh sometimes wrote wrong byte sequence to terminal when vi editing 
    mode was used (#1026360)
  - fix errors in man page (#1030867)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-15
changelog:
  - fix argv rewrite (#1047507)
  - fix memory leak (#1048995)
  - standard error output could get misdirected (#1048272)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-19
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1070328)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-20
changelog:
  - fix segfault in job list code (#1084406)
  - do not resend signal on termination (#1085385)
  - fix brace expansion on/off (#1099935)
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1070871)
  - fix parser errors related to the end of the here-document marker (#1111120)
  - ksh hangs when command substitution fills out the pipe buffer (#1077090)
  - using typeset -l with a restricted variabled caused segmentation fault (#1121960)
  - monitor mode was documented incorrectly (#1100215)
  - do not crash when unsetting running function from another one (#1100215)
  - should report an error when trying to cd into directory without execution bit (#1109893)
  - job locking mechanism did not survive compiler optimization (#1116506)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-21
changelog:
  - include symlink for restricted shell (#1146161)
  - ksh hangs when command substitution containing pipe fills out the pipe buffer (#1138751)
  - current directory could differ from PWD (#1135573)
  - cd builtin could break IO redirection (#1133585)
  - return code from a function could be wrong (#1116507)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - closing a file descriptor in a command substitution caused loss of the output (#1202439)
  - fix: in a login shell "( cmd & )" does nothing (#1217237)
  - exporting fixed with variable corrupted its data (#1192026)
  - fix segfault when handling a trap (#1211540)
  - combining alarm and IFS caused segfault (#1192119)
  - declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
  - do not inherit invalid variables during shell initializaton (#1211538)
  - case in a for loop inside a subshell caused syntax error (#1241014)


author: Robert Scheck <robert@fedoraproject.org> - 1.13-5
changelog:
  - Really added the plugindir patch now (thanks to Karsten Hopp)
  - Avoid the make errors because of mkdirhier better than until now


author: John Dennis <jdennis@redhat.com> - 2.4.1-7
changelog:
  - Add ECP support, brings Lasso up to current upstream tip + revised ECP patches
    Resolves: #1205342


author: John Dennis <jdennis@redhat.com> - 2.4.1-8
changelog:
  - Add explicit minimum dependency on glib2 2.42,
    for some reason RPM is not automatically detecting the dependency
    Resolves: #1254989


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3
changelog:
  - Resolves: #1634267 - ECP signature check fails with
                         LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                         instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4
changelog:
  - Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5
changelog:
  - Resolves: #1719014 - Expired certificate prevents tests from running
  - Actually apply the patch file for the previous build
  - Related: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6
changelog:
  - Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                         vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7
changelog:
  - Fix Coverity warning introduced by the previous patch
  - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                        vulnerability when parsing SAML responses


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-6
changelog:
  - Build both with and without GUI to allow the use on systems where Gtk
    dependency is undesirable. The latencytop package is still the full-blown build.
    latencytop-tui is the miminal build. latencytop-common has the shared files.


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-7
changelog:
  - Remove the broken fsync view, stop using the obsolete 'tracing_enabled'.
  - Better error message when run as non-root.


author: Richard Hughes <richard@hughsie.com> 2.4-1
changelog:
  - Update to new upstream version.
  - Black point detection from the algorithm disclosed by Adobe
  - Added support for transforms on planar data with different stride
  - Added a new plug-in type for optimizing full transforms
  - Linear (gamma 1.0) profiles can now operate in unbounded mode
  - Added "half" float support


author: Richard Hughes <richard@hughsie.com> 2.5-1
changelog:
  - Update to new upstream version.
  - Added a reference for Mac MLU tag
  - Added a way to read the profile creator from header
  - Added error descriptions on cmsSmoothToneCurve
  - Added identity curves support for write V2 LUT
  - Added new cmsPlugInTHR() and fixed some race conditions
  - Added TIFF Lab16 handling on tifficc
  - Fixed a bug on big endian platforms not supporting uint64 or long long.
  - Fixed a multithead bug on optimization
  - Fixed devicelink generation for 8 bits
  - Fixed some 64 bit warnings on size_t to uint32 conversions
  - Rendering intent used when creating the transform is now propagated to profile
  - RGB profiles store only one copy of the curve to save space
  - Transform2Devicelink now keeps white point when guessing deviceclass is enabled
  - Update black point detection algorithm to reflect ICC changes
  - User defined parametric curves can now be saved in ICC profiles


author: Andrew Hughes <gnu.andrew@redhat.com> - 2.6-3
changelog:
  - Run tests as part of %check, fixing Makefile to set LD_LIBRARY_PATH
  - Use upstream endianness fix to avoid ppc64le being built big-endian
  - Resolves: #1250914


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Paul Wouters <pwouters@redhat.com> - 1.6.14-1
changelog:
  - [pulled before release]
  - Updated to 1.6.14
  - Removed merged in patch
  - Added new dependancy on ca-certificates for ldns-dane PKIX validation


author: Fridolin Pokorny <fpokorny@redhat.com> - 458-3
changelog:
  - Expanded lessecho usage (#948597)
  - Added lessfilter info to man (#948597)
  - Expanded lesskey usage (#948597)
  - Added --old-bot to help (#948597)


author: Jozef Mlich <jmlich@redhat.com> - 458-5
changelog:
  - fixing regression in 72dfd3f63594e1d4c9416180a95c47ae583934c6
    incorrect parsing of commandline arguments
  - Resolves #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-8
changelog:
  - changes introduced in less-458-old-bot-in-help.patch
    wasn't compiled in. It is necessary to use mkhelp tool.
    Resolves: #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-9
changelog:
  - The --use-backslash option documented in the man page
    was missing from online help for less.
    Resolves: #1109090


author: Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6
changelog:
  - Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
  - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
  - Added RFE - lftp configurations for restricting each SSL/TLS 
    version (#1182987)
  - Fixed bogus dates of this SPEC


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp


author: Michal Ruprich - 4.4.8-10
changelog:
  - Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                      - Patch edited so that it corresponds to upstream


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11
changelog:
  - Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
  - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11.1
changelog:
  - Resolves: #1797963 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-12
changelog:
  - Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased


author: Michal Ruprich <michalruprich@gmail.com> - 4.4.8-12.1
changelog:
  - Resolves: #1797964 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1392944 - File size decreases when synchronizing folders with a sftp account using lftp


author: Benjamin Tissoires <btissoir@redhat.com> 1.4.7-2
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163604, bug 1163603)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163604, bug 1163603)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163604, bug 1163603)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.4.7-3
changelog:
  - CVE-2015-1802: missing range check in bdfReadProperties (bug 1258894)
  - CVE-2015-1803: crash on invalid read in bdfReadCharacters (bug 1258894)
  - CVE-2015-1804: out-of-bounds memory access in bdfReadCharacters (bug 1258894)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.2-1
changelog:
  - libXp 1.0.2. Drags in a bunch of general cleanup, code changes are quite
    limited and CVE-2013-2062 (#960362)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.1.5-3
changelog:
  - libXt 1.1.5
  - Merge F25:
  - Fix duplicate documentation (#1001246) by not using %doc
  - Turn on verbose build output via V=1 make
  - Remove %defattr
  - Use %?_isa in explicit package deps
  - Exclude docs from main package


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-1
changelog:
  - Pull in upstream .109 to get ARM architecture support.
  - Remove the broken sparc patch;  it should go upstream first.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-8
changelog:
  - Change the source location to the new upstream on fedorahosted
  - import a new tarball from the new source


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-10
changelog:
  - Un-revert the RHEL-specific changes. (Jeff Moyer)
  - Make devel sub-package depend on specific ver-rel (Jeff Moyer)
  - Resolves: bz#905462


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-12.2
changelog:
  - Get rid of sparc support (we don't build it) (Jeff Moyer)
  - Implement proper support for aarch64 (Jeff Moyer)
  - Resolves: bz#1026429


author: Pavel Raiskup <praiskup@redhat.com> - 3.1.2-11
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.4-3
changelog:
  - better install manual pages for libarchive/bsdtar/bsdcpio (# ... )
  - several fedora-review fixes ...:
  - Source0 has moved to github.com
  - remove trailing white spaces
  - repair summary to better describe bsdtar/cpiotar utilities


author: Jochen Schmitt <Jochen herr-schmitt de> - 2.3.21-7
changelog:
  - Add aarch64 as a 65-Bit architecture (#975267)
  - Add libtool as a BR
  - Call libtoolize before autoreconf


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.8-1
changelog:
  - Temporarily skip vfat generic resize test on rawhide (vtrefny)
  - Use "safeprobe" in "bd_fs_wipe" (vtrefny)
  - Add a generic filesystem resize function (vtrefny)
  - Add a function to get mountpoint for a device (vtrefny)
  - Add a function to get filesystem type for a device (vtrefny)
  - Only include the LVM DBus config when shipping LVM DBus (vpodzime)
  - Skip the LVM DBus vgreduce tests on Rawhide (vpodzime)
  - Do not build the lvm-dbus plugin on RHEL/CentOS (vpodzime)
  - Give zRAM more time to settle before trying to remove a device (vpodzime)
  - Put zram tests adding/removing devices into a separate class (vpodzime)
  - Skip LVM cache and RAID tests on Rawhide (vpodzime)
  - Fix the skip_on decorator factory for tests (vpodzime)
  - Use 'blkid -p' instead of lsblk to get device's FS type (vpodzime)
  - Improve the lvm_set_global_config test (vpodzime)
  - Pass '-y' to pvresize (vpodzime)
  - Create a copy of os.environ for a child process (vpodzime)
  - Revert "Use the "C.UTF-8" locale instead of just "C"" (vpodzime)
  - Fix how we create vfat FS in tests (vpodzime)
  - Skip the test if requiring unavailable locales (vpodzime)
  - Use the "C.UTF-8" locale instead of just "C" (vpodzime)
  - Add functions for working with ext2 and ext3 filesystems (vtrefny)
  - Link to gobject when lvm or btrfs is enabled (andreas)
  - Link to libm where needed (andreas)
  - Add a function for cleaning a device (vtrefny)
  - Add few code exaples to documentation (vtrefny)
  - Use a special exception for no fs signature when doing wipe (vpodzime)
  - One more incompatible os.symlink() call (vpodzime)
  - Do not use pass-by-name in the os.symlink() call (vpodzime)
  - Ignore previous errors when falling back to using ioctl() (vpodzime)
  - Use ioctl() call to teardown loop devices (vpodzime)
  - Resolve the device to remove for mdadm (vpodzime)
  - Add a function for getting device symlinks (vpodzime)
  - Use the new resolve_device() function where appropriate (vpodzime)
  - Add the resolve_device() function to the utils library (vpodzime)
  - First try to read the 'autoclear' flag from /sys/ (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.9-1
changelog:
  - Fix hardcoded reference to gcc (timo.gurr)
  - Catch and ignore partial failures in LVM tests' cleanups (vpodzime)
  - Fix hardcoded reference to pkg-config (timo.gurr)
  - Make GObject introspection optional (vpodzime)
  - Do not link libraries required by plugins to the GI files (vpodzime)
  - Make sure the whole build status image is shown (vpodzime)
  - Show CI status in README (at the GH repo's front page) (vpodzime)
  - Always require the libudev pkg (tgurr)
  - Make sure we give kernel time to fully setup zram device(s) (vpodzime)
  - fs_test.py: Close FDs when calling utilities (tasleson)
  - crypto.c: Correct segmentation fault (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.10-1
changelog:
  - Only enable partition size tolerance with alignment (vpodzime)
  - Limit the requested partition size to maximum possible (vpodzime)
  - Do not verify vfat FS' size after generic resize (vpodzime)
  - Specify tolerance for partition size (kailueke)
  - Only use the exact constraint if not using any other (vpodzime)
  - Check resulting FS size in tests for generic FS resize (vpodzime)
  - Query setting FS label support and generic relabeling (kailueke)
  - Do not strictly require all FS utilities (vpodzime)
  - Compile everything with the C99 standard (vpodzime)
  - Add partition resize function (kailueke)
  - Generic Check and Repair Functions (kailueke)
  - Query functions for FS resize and repair support (kailueke)
  - Update the project/source URL in the spec file (vpodzime)
  - Add functions for opening/closing TrueCrypt/VeraCrypt volumes (vpodzime)
  - Adapt to a change in behaviour in new libmount (vpodzime)
  - Try RO mount also if we get EACCES (vpodzime)
  - Size in bytes for xfs_resize_device (kailueke)
  - src/plugins/Makefile.am: Remove hard coded include path in /usr prefix (tristan.vanberkom)
  - Fixed include for libvolume_key.h (tristan.vanberkom)
  - Ignore parted warnings if possible (squimrel)
  - bcache tests: Remove FEELINGLUCKY checks (tasleson)
  - kbd.c: Code review corrections (tasleson)
  - kbd.c: Make bd_kbd_bcache_create work without abort (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.11-1
changelog:
  - Make the KbdZRAMDevicesTestCase inherit from KbdZRAMTestCase (vpodzime)
  - Allow non-source directory builds (kailueke)
  - Add a way to disable runtime dependency checks (vpodzime)
  - Link to GObject even if no plugin is activated (kailueke)
  - Skip zram tests on Rawhide (vpodzime)
  - Keep most utilities available for tests (vpodzime)
  - Use new libmount function to get (un)mount error message (vtrefny)
  - Update the documentation URL (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.12-1
changelog:
  - Own directories /etc/libblockdev and /etc/libblockdev/conf.d (vtrefny)
  - Wait for resized partition (kailueke)
  - Make sure the device is opened for libparted (vpodzime)
  - Fix label check in swap_test (vtrefny)
  - Use "run_tests" script for running tests from Makefile (vtrefny)
  - Add a script for running tests (vtrefny)
  - Tests: Move library initialization to setUpClass method (vtrefny)
  - Stop skipping FAT resize tests on rawhide (vtrefny)
  - Close filesystem before closing the partition during FAT resize (vtrefny)
  - Use mountpoint for "xfs_info" calls (vtrefny)
  - Use libmount cache when parsing /proc/mounts (vtrefny)
  - Add some space for the CI status (vpodzime)
  - Confirm the force when creating PVs in FS tests (vpodzime)
  - Skip vgremove tests on 32bit Debian (vtrefny)
  - Fix names of backing files in tests (vtrefny)
  -  Fix checking for available locales (vtrefny)
  - Skip dependency checking in mpath tests on Debian (vtrefny)
  - Skip zRAM tests on Debian (vtrefny)
  - Skip the test for device escrow on Debian too (vtrefny)
  - Skip free region tests on Debian too (vtrefny)
  - Fix redirecting command output to /dev/null in tests (vtrefny)
  - Try harder to unmount devices in test cleanup (vtrefny)
  - Require only plugins that are needed for given test (vtrefny)
  - Try to get distribution info from "PrettyName" if "CPEName" isn't available (vtrefny)
  - Use -ff when creating PVs in FS tests (vpodzime)
  - Sync spec with downstream (vpodzime)


author: Bastien Nocera <bnocera@redhat.com> - 0.2.3-6
changelog:
  + libbluray-0.2.3-0.12.git
  - Fix security issues in parts of the library that we never exercised
  Related: rhbz#1045453 rhbz#1045452


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-2
changelog:
  - added missing files from git: COPYING-GPL and COPYING-LGPL
  - added patch from git for missing pkgconfig requires
    and fixed FSF address


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-3
changelog:
  - included upstreamed patches which are changing the license
    headers to be LGPLv2+ for the library parts and GPLv2+ for the
    binaries


author: jchaloup <jchaloup@redhat.com> - 0.41-8
changelog:
  - resolves: #885174
    loading configuration files from /etc/cgconfig.d/ directory
  - resolves: #885166
    use * character as a meta character for all mounted
  - resolves: #886920
    add examples to man pages
  - resolves: #1143851
    extending cgroup names with default
  - resolves: #1142807
    api.c: support for setting multiline values in control files
    config.c: xfs file system sets item->d_type to zero, stat() and S_ISREG() test added (#885174)


author: Nikola Forró <nforro@redhat.com> - 0.41-12
changelog:
  - resolves: #1406927
    start cgred service after nss-user-lookup target
    show warnings about unsuccessful user/group lookups


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - show warning when "tasks" file can not be opened
  - extend description of "controllers" section in cgrules.conf man page
    resolves: #1561736


author: Peter Schiffer <pschiffe@redhat.com> 0.40-0.rc1.1
changelog:
  - resolves: #819568, #740113
    rebased to 0.40.rc1
  - resolves: #983264
    rebuilt with full relro and PIE
  - resolves: #1016810
    removed cgrulesengd daemon


author: Peter Schiffer <pschiffe@redhat.com> 0.40-0.rc1.2
changelog:
  - related: #1016810
    returned creation of cgred group, which was removed in previous commit by mistage


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.12.4-1
changelog:
  - Update to 0.12.4
  - http://ftp.gnome.org/pub/GNOME/sources/libchamplain/0.12/libchamplain-0.12.4.news


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.3-4
changelog:
  - BuildRequires for libchewing-python changed
    from python-devel to python2-devel
  - RPM_BUILD_ROOT changed to buildroot


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-1
changelog:
  - Upstream update to 0.3.4
  - Download is changed to Google Code.
  - /usr/share/chewing is removed, data files now located in
    /usr/lib(64)/libchewing
  - Info for libchewing is included.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-3
changelog:
  - Fixed [Bug 913214] libchewing complains "no info dir entry" while installing
    Add direntry in libchewing.texi so it can be listed under 
    Category "Localization"


author: David Tardon <dtardon@redhat.com> - 0.3.1-5
changelog:
  - Resolves: rhbz#918079 libcmis::sha1() can return digests with fewer
    than 40 hexadecimal digits
  - Resolves: rhbz#918080 restrict redirection protocols


author: David Tardon <dtardon@redhat.com> - 0.5.0-2
changelog:
  - Related: rhbz#1290152 autoreconf is not needed
  - Related: rhbz#1290152 add a bunch of fixes found by coverity


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Fix package description to differentiate the fact that this is for the T4
    Chelsio based adapters instead of the previous T3 generation


author: Doug Ledford <dledford@redhat.com> - 1.2.0-6
changelog:
  - Our -fno-strict-alias option patch was lost, and we discovered it
    was lost when I rebuilt the package.  Put it back and rebuild
    again.
  - Related: bz1062281


author: Matej Mužila <mmuzila@redhat.com> - 5.3.21-23
changelog:
  - Mention in man page that care should be taken when running db_hotbackup
    with -c option. Resolves: rhbz#1460077


author: Tom Lane <tgl@redhat.com> 0.8.3-4
changelog:
  - Do not use -ffast-math; it breaks things and seems quite unlikely to offer
    any useful performance benefit for this type of package, anyway
  Resolves: #629964


author: Tom Lane <tgl@redhat.com> 0.8.4-1
changelog:
  - Update to version 0.8.4 (seems to contain only configure-support updates,
    but might as well adopt it)
  - Fix memory leak due to incorrect test in _is_row_fetched()
  Related: #733413


author: Tom Lane <tgl@redhat.com> 0.8.3-12
changelog:
  - Remove unnecessary package-name Requires:, since dependencies on library
    sonames should be enough, and we don't want to hard-wire assumptions about
    which packages provide which libraries
  - isa-ify cross-subpackage Requires:


author: Richard W.M. Jones <rjones@redhat.com> - 1.12-13.1.el7
changelog:
  - Add patch to fix multilib conflicts in dnet-config
    resolves: rhbz#1059593
  - Remove RPM cruft from the spec file.


author: - nick.alcock@oracle.com - 0.5.0-3
changelog:
  - Include the distribution in the RPM release. [Orabug: 21211461]
  - No longer Provide: our own name. [Orabug: 21622263]


author: - nick.alcock@oracle.com - 0.7.1-1
changelog:
  - Fix CTF archive alignment and failed write() handling
    (Tomas Jedlicka) [Orabug: 27191792, 27204447]
  - Build on arm64 (Vincent Lim) [Orabug: 27418554]


author: - nick.alcock@oracle.com - 0.8.1-1
changelog:
  - Fix ctf_rollback() in client containers to delete only the types
  added since the last snapshot, rather than all of them.
  [Orabug: 27971037]


author: - nick.alcock@oracle.com - 1.0.0-1
changelog:
  - Format v2, supporting many more types and enum/struct/union members.
  v1 CTF files are transparently updated to v2. No soname change, but
  some API for users directly accessing CTF files is broken.
  [Orabug: 28150489]


author: - nick.alcock@oracle.com - 1.1.0-1
changelog:
  - Add ctf_add_{struct,union}_sized(). [Orabug: 29054972]
  - Work around some very minor CTF-generation bugs seen in the wild
    in old UEK kernels. [Orabug: 28952429]
  - Do not mprotect() the heap by mistake when reading CTF from a
    user-provided buffer. [Orabug: 28952429]


author: Dominik Mierzejewski <rpm[AT]greysector.net> 4.1.4-0.1.svn1184
changelog:
  - fix multilib conflict, based on a patch by Rex Dieter (rhbz#477684)
  - update to SVN r1184
  - move TODO to devel docs


author: Dominik Mierzejewski <rpm@greysector.net> 4.1.4-0.1.svn1183
changelog:
  - updated to SVN r1183
  - simplified multilib patch
  - fixed endianness issues (rhbz#442508)
  - added some docs


author: Tom Hughes <tom@compton.nu> - 20120410-1
changelog:
  - Update to 20120410 release
  - Drop the 0. from the version - the dates are the upstream versions
  - Remove explicit dependencies on elfutils-libelf


author: Kamil Dudka <kdudka@redhat.com> 3.0-7.20120601cvs
changelog:
  - Update to 3.0 (20120601 snap)
  - fix crash of el_insertstr() on incomplete multi-byte sequence (#840598)


author: Pawel Salek <pawsa@theochem.kth.se> - 1.0.4-14
changelog:
  - fix bug 599428: use 'version' macro instead of '_version'.
  - Use SSL patch by Ludwig Nussel of SUSE (bugzilla att id 399130).


author: Steve Dickson <steved@redhat.com> 2.0.14-1
changelog:
  - Updated to latest stable upstream version: 2.0.14-stable (bz 727129)
  - Removed the installion of the outdate man pages and the latex raw docs.
  - Corrected where the other doc are installed.


author: Steve Dickson <steved@redhat.com> 2.0.18-1
changelog:
  - Updated to latest stable upstream version: 2.0.18-stable
  - Moved documentation into its own rpm (bz 810138)


author: Petr Sabata <psabata@redhat.com> - 0.6.20-1
changelog:
  - 0.6.20 bump
  - Repackaging prehistoric libexif-docs, introducing version string in filename
  - Buildroot cleanup


author: Petr Šabata <contyk@redhat.com> - 0.6.21-1
changelog:
  - 0.6.21 bump
  - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
    CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845)
  - Drop the pre-generated docs and introduce a doc subpackage


author: Dan Horák <dhorak@redhat.com> - 3.0.13-16
changelog:
  - Drop ppc64le from the multilib list
  - Use additional BR: only in ppc64le build
  - Resolves: RHBZ1116945


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-5
changelog:
  - add FIPS DRBG implementation
  - run the FIPS POST tests in shared library constructor
  - make it possible to run the test suite in the FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-12.1
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-14
changelog:
  - add DRBG CAVS driver and other necessary CAVS driver updates (#1172568)
  - allow ath reinitialization in FIPS mode
  - allow for auto-initialization of DRBG


author: Debarshi Ray <rishi@fedoraproject.org> - 0.10.4-4
changelog:
  - Ensure that the new exiv2 soname is used during the build
  - Adapt to Exiv2::BasicIo API change
    Resolves: rhbz#1486570


author: Iryna Shcherbina <ishcherb@redhat.com> - 1:1.0.1-0.2.20180226gitb029c24
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Adam Jackson <ajax@redhat.com> - 1.0.1-0.6.git5baa1e5
changelog:
  - Enable %check for all but ppc64 and s390x, which has known but low-impact
    failures
  - Simplify %release


author: Ray Strode <rstrode@redhat.com> 2.32.1-4
changelog:
  - drop /etc/skel entry. libgnome creates it by default if it's
    not around and it needs it anyway. Better not to clutter users
    home directories just because they install glade.


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Kalev Lember <kalevlember@gmail.com> - 3.4.0.1-1
changelog:
  - Update to 3.4.0.1
  - Obsolete the -capplet subpackage; the whole plugins architecture is
    removed from libgnomekbd


author: Christophe Fergeau <cfergeau@redhat.com> 0.0.3-2
changelog:
  - Removed definition of BuildRoot and cleanup of BuildRoot in %clean
  - Added missing arch to versioned Requires: %{name} in the -devel package
  - Don't include empty NEWS and ChangeLog in built RPM


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-1.3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Related: rhbz#1344633


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-1.4
changelog:
  - Add upstream patch forcing use of the older v3 REST API as we don't support
    yet the v4 API
    Resolves: rhbz#1346215


author: Fabiano Fidêncio <fidencio@redhat.com> 0.3.3-2
changelog:
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274356
  - Add OvirtProxy::sso-token support for oVirt 4.0
    Resolves: rhbz#1324457


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Resolves: rhbz#1346256


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.3-5
changelog:
  - New storage format added in oVirt 4.1
    Resolves: rhbz#1346215
  - Check if operation was cancelled before disconnecting signal
    Resolves: rhbz#1431275


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.4-1
changelog:
  - Rebase to latest 0.3.4 upstream release. Still quite a few patches as
    there was no 0.3.5 release yet
    Resolves: rhbz#1584266


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.4-2
changelog:
  - Parse XML nodes automatically
    Related: rhbz#1427467
  - Set detailed error message for async call
    Related: rhbz#1427467


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.4-4
changelog:
  - Use certificate data from XML
    Resolves: rhbz#https://bugzilla.redhat.com/show_bug.cgi?id=1402909


author: Caolán McNamara <caolanm@redhat.com> 1.14.26-1
changelog:
  - latest version
  - drop integrated gnome689706.gsf_input_dup.patch
  - libgsf-python is gone with "excise old bit-rotted python support"


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-11
changelog:
  - Further fixes for kvmclock
    resolves: rhbz#998109
  - Document that blockdev-setbsz is deprecated and should not be used
    resolves: rhbz#1016465


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-12
changelog:
  - Backport: "daemon: Fix xfs_info parser because of new format."
    which is required to fix libguestfs tests.
    related: rhbz#1019503


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-15
changelog:
  - Add libguestfs-tools.conf(5) man page
    resolves: rhbz#1019891
  - Drop PHP bindings
    resolves: rhbz#1020021
  - Disable Haskell & Erlang (in case someone has these dependencies
    installed and tries to rebuild the package).


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-19
changelog:
  - Fix placement of *.py[co] files
    resolves: rhbz#1061155
  - Remove bogus license file from daemon
    resolves: rhbz#1061160
  - Prevent virt-sparsify from overwriting block or char devices
    resolves: rhbz#1056556
  - mount-local should give a clearer error if root is not mounted
    resolves: rhbz#1057492


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.22.6-21
changelog:
  - Fix segfault in guestfs_list_filesystems when presented with a
    corrupt btrfs filesystem
    resolves: rhbz#1064008


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.47
changelog:
  - v2v: Work around 'umount: /sysroot: target is busy'
    resolves: rhbz#1246032
  - v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
    virt-inspector
    resolves: rhbz#1243493


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.50
changelog:
  - v2v:
    * When debugging, dump OVF to stderr.
    * Ignore missing kernels from grub
      resolves: rhbz#1230412
    * Calculate VMware dcPath correctly (1256823)
    * Map empty VMware network or bridge name to default (1257895)
  - p2v:
    * Wait for network to come online before testing connection
      resolves: rhbz#1256222
  - Fix tests to run correctly with libguestfs-winsupport 7.2.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.51
changelog:
  - v2v: Fix handling of extra slashes in dcPath calculation
    resolves: rhbz#1258342 rhbz#1256823
  - v2v: Fix -oa preallocation option
    resolves: rhbz#1251909


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.52
changelog:
  - v2v: Warn if Group Policy or AV software may result in 7B boot failure
    (1260689)
  - v2v: Fix OVF XML to enable qxl display
    resolves: rhbz#1260590


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.53
changelog:
  - v2v: Error if certain options appear twice on the command line (1261242)
  - v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
  - v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
  - v2v: Detect AVG Technologies as AV software (1261436)
    resolves: rhbz#1261281


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.32.7-3
changelog:
  - Rebase to libguestfs 1.32 in RHEL 7.3
    resolves: rhbz#1218766
  - The full tests are now run after the package has been built.
  - New tool and subpackage: virt-dib (safe diskimage-builder replacement).
  - New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
    (see https://bugzilla.redhat.com/1194158).
  - New tool: virt-get-kernel.
  - Depend on java-headless instead of full java.
  - New tool: virt-v2v-copy-to-local.
  - Disable virt-v2v subpackage on ppc64 etc
    resolves: rhbz#1287826
  - v2v: Remove VirtualBox Additions correctly
    resolves: rhbz#1296606
  - Add clearer warnings sections to all man pages
    resolves: rhbz#1293527
  - v2v: Disable the --in-place option.
  - v2v: Support conversion of Windows > 7
    resolves: rhbz#1190669
  - Add code to verify tarball signatures.
  - General performance improvements.
  - v2v: Prevent duplicate -b, -n, -oa options
    resolves: rhbz#1326266
    resolves: rhbz#1325825
  - v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
  - v2v: Fix alignment issues in treeviews in conversion dialog
    resolves: rhbz#1340407
  - p2v: spinner should be hidden when it stops spinning
    resolves: rhbz#1341564
  - p2v: ethtool command is not supported on p2v client
    resolves: rhbz#1341608
  - p2v: Add ifconfig command to ISO
    resolves: rhbz#1342447
  - p2v: Warn if virt-p2v-make-disk used on a partition
    resolves: rhbz#1342337
  - Build using OCaml with fix for CVE-2015-8869.
    resolves: rhbz#1343101
  - customize: Add --uninstall option (upstream 1343375)
  - p2v: Document permissions on id_rsa file
    resolves: rhbz#1343414
  - p2v: Print full curl error message
    resolves: rhbz#1343423
  - get-kernel: Fix --format auto
    resolves: rhbz#1341984
  - v2v: Provide better <Origin/> information to RHEV-M
    resolves: rhbz#1342398
  - customize: Give an error if --truncate-recursive path does not exist
    resolves: rhbz#1345809
  - sysprep: Add --network option so that --install option can be used
    resolves: rhbz#1345813
  - p2v: Print proper error if incorrect password is given
    resolves: rhbz#1227599
  - p2v: Print ssh error if incorrect hostname is given
    resolves: rhbz#1167916
  - p2v: Display progress of operation in non-GUI mode
    resolves: rhbz#1229386
  - p2v: Add a dialog confirming the user really means to cancel
    resolves: rhbz#1340464
  - p2v: log window should process colour escapes and backspaces
    resolves: rhbz#1314244
  - v2v: Fix installation of virtio drivers with *.dll files
    resolves: rhbz#1311373
  - p2v: Improve error message when ssh login to conversion server fails
    resolves: rhbz#1348900
  - v2v: Remove --dcpath parameter from manual
    resolves: rhbz#1315237
  - v2v: Fix conversion of guests with floppy drives
    resolves: rhbz#1309706
  - p2v: Better error when sudo requires a password
    resolves: rhbz#1340809
  - v2v: Refuse to convert if there is < 1GB free in temporary directory
    resolves: rhbz#1316479
  - inspection: Get Windows drive letters for GPT disks
    resolves: rhbz#1349237
  - p2v: Add disk utils and display serial number of disks
    resolves: rhbz#855058
  - p2v: Fix timeout error when connecting to unresponsive ssh server
    resolves: rhbz#1350363
  - Remove external dependency generator.  Use supermin RPM deps instead.
    related: rhbz#1309796
  - p2v: Flush messages to the journal immediately
    resolves: rhbz#1229386
  - customize: Fix --install on ppc64le
    resolves: rhbz#1264835
  - lib: Fix finding icons in Windows 7 64 bit guests
    resolevs: rhbz#1352761
  - v2v: Add virsh --quiet flag when running virt-v2v --quiet
    resolves: rhbz#1358142
  - lib: Fix inspection of ISOs with latest libosinfo
    resolves: rhbz#1359652
  - dib: Fix run_command exit handlers on failure
    resolves: rhbz#1362357
  - dib: Rework run of extra-data.d hooks
    resolves: rhbz#1362354
  - Miscellaneous fixes to man pages and --help output
    resolves: rhbz#1362668
  - lib: Specify backing format for read-only files
    resolves: rhbz#1354335
  - Fix --selinux-relabel option
    resolves: rhbz#1362669
  - sparsify: Fix --in-place option with UEFI guest
    resolves: rhbz#1364347
  - p2v: Use latest linux-firmware in ISO
    resolves: rhbz#1364419
  - v2v: Fix guest name when using -i disk
    resolves: rhbz#1365005
  - p2v: Fix GUI message.
  - v2v: Make fstrim message clearer
    resolves: rhbz#1366456
  - v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
    resolves: rhbz#1367615
  - lib: Fix assert-fail if port is missing in libvirt XML
    resolves: rhbz#1370424


author: Pino Toscano <ptoscano@redhat.com> - 1:1.32.7-3.el7_3.1
changelog:
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1406289
  - Disable EDD when launching the appliance
    resolves: rhbz#1406393
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1406854


author: Pino Toscano <ptoscano@redhat.com> - 1:1.32.7-3.el7_3.2
changelog:
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1408124
  - Avoid spurious dependency on kernel-rt.


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.3-6
changelog:
  - Rebase to libguestfs 1.36 in RHEL 7.4.
    resolves: rhbz#1359086
  - v2v: always use names for libvirt pools
    resolves: rhbz#1141631
  - v2v: correctly find GRUB in RHEL UEFI guests
  - v2v: uninstall VMware tools packages from guests
    resolves: rhbz#1155150
  - v2v: install RHEV-APT only when using -o rhev/-o vdsm
    resolves: rhbz#1161019
  - New API: btrfs-filesystem-show
    resolves: rhbz#1164765
  - p2v: always enable debugging when running virt-v2v
    resolves: rhbz#1167623
  - libguestfs prefers virtio-pci on aarch64
    resolves: rhbz#1237250
  - v2v: make sure to copy all the driver files on Windows
    resolves: rhbz#1255610
  - Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
    Requires to >= 1.3.10-5.8.el7
    resolves: rhbz#1311890
  - v2v: ignore all the environment variables for proxy when exporting from
    vCenter
    resolves: rhbz#1354507
  - virt-sysprep can deal with full-LUKS encrypted guests
    resolves: rhbz#1362649
  - All the tools have bash completion scripts.
    resolves: rhbz#1367738
  - v2v: do not remove Processor and Intelppm nodes in Windows guests
    resolves: rhbz#1372668
  - Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
    regular expression in file_contexts file
    resolves: rhbz#1374232
  - v2v: set all the properties on creation when exporting to Glance
    resolves: rhbz#1374405
  - v2v: set hw_video_model when exporting to Glance
    resolves: rhbz#1374651
  - v2v: fix OVA conversion as root using the libvirt backend
    resolves: rhbz#1375157
  - Various improvements and fixes to the documentation
    resolves: rhbz#1377081
    resolves: rhbz#1390876
    resolves: rhbz#1398070
    resolves: rhbz#1425306
  - v2v: support <listen type='socket'> and <listen type='none'>
    resolves: rhbz#1378022
  - v2v: allow libvirt >= 2.1.0 for vCenter conversions
    resolves: rhbz#1379240
  - p2v: enable mnemonics in the GUI
    resolves: rhbz#1379289
  - Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
    resolves: rhbz#1382275
  - Correctly parse mount options in btrfs entries in /etc/fstab.
    resolves: rhbz#1383517
  - Read secrets from libvirt domains, when inspecting them
    resolves: rhbz#1392798
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1400205
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1401474
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1402301
  - resize: allow URIs for the output disk
    resolves: rhbz#1404182
  - Disable EDD when launching the appliance
    resolves: rhbz#1404287
  - v2v: increase the memory allocated to the appliance
    resolves: rhbz#1418283
  - p2v: switch from GTK+ 2 to GTK+ 3
  - p2v: add dbus-devel as BuildRequires to disable suspension during the
    conversion
  - libguestfs-java: bump the java-headless Require to >= 1.7.0, matching the
    Build-Require, and the generated bytecode
    resolves: rhbz#1364518
  - Do not try to use/write to /var/cache/yum & /var/log/yum.log
  - Bump ocaml-findlib-devel BuildRequires to >= 1.3.3-7.el7, because of
    RHBZ#1403897
  - v2v: remove --dcpath & --dcPath from --help output too
    resolves: rhbz#1429430
  - v2v: force VNC as display for -i disk, as SDL is not supported
    resolves: rhbz#1372671
  - v2v, p2v: rename rhvm network to ovirtmgmt
    resolves: rhbz#1429491
  - v2v: when exporting to local disk, check that UEFI firmware is installed
    before conversion
    resolves: rhbz#1429506
  - dib: actually generate SHA256 checksums when using --checksum
    resolves: rhbz#1430184
  - v2v: do not mention SUSE Xen hosts as supported
    resolves: rhbz#1430203
  - v2v: depend on OVMF/AAVMF, for converting EFI guests
    resolves: rhbz#1429643
  - v2v: use absolute path when using an OVA as backing file
    resolves: rhbz#1430680
  - v2v: support Debian/Ubuntu guests
    resolves: rhbz#1387213
  - sysprep: remove DHCP_HOSTNAME entries
    resolves: rhbz#1427529
  - v2v: avoid repeated "run virt-v2v -v -x" message on error
    resolves: rhbz#1167623
  - bash-completion: add script for virt-v2v-copy-to-local
    resolves: rhbz#1367738
  - v2v: fix virtio block driver installation for Windows 10 and Windows 2016
    resolves: rhbz#1434737
  - Replace the libosinfo dependency with osinfo-db, since we are only using
    the osinfo database.
  - v2v: fix virtio driver installation for Windows 8 UEFI
    resolves: rhbz#1431579
  - v2v: new 'vmx' import method
    resolves: rhbz#1441197
  - v2v: properly identify Windows 2016 guests when exporting them to RHV-M
    resolves: rhbz#1447202
  - Run pvresize in non-interactive mode
    resolves: rhbz#1460692
  - resize: make sure the input disk is read-only
    resolves: rhbz#1463714
  - Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
    resolves: rhbz#1463646


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.10-6
changelog:
  - Rebase to libguestfs 1.36.10 in RHEL 7.5.
    resolves: rhbz#1472272
  - Build against OCaml 4.05
    resolves: rhbz#1447981
  - Enable the copyonread flag when running the appliance using libvirt.
    resolves: rhbz#1466563
  - Make sure kernel-rt is never used as Requires.
    resolves: rhbz#1471651
  - v2v: disable unconfiguration of manually installed VMware tools.
    resolves: rhbz#1477905
  - v2v: prefer pigz or pxz for uncompressing OVA files, if available
    resolves: rhbz#1448739
  - resize: handle empty UUIDs for swap partitions
    resolves: rhbz#1482737
  - v2v: remove mention of --dcpath in an error message
    resolves: rhbz#1486197
  - Disables the QEMU image file locking when opening disks as read-only
    resolves: rhbz#1417306
    resolves: rhbz#1503497
  - Briefly document the format used for URIs
    resolves: rhbz#1450325
  - v2v: deal with grub2 configurations without a default set
    resolves: rhbz#1472288
  - v2v: warn when a guest has passthrough devices
    resolves: rhbz#1472719
  - v2v: fix three regular expressions
    resolves: rhbz#1494555
  - v2v: enable conversion of full-disk LUKS-encrypted Linux guests
    resolves: rhbz#1451665
  - v2v: new 'vddk' import method
    resolves: rhbz#1477912
    resolves: rhbz#1513884
  - Enable libguestfs to work on z Systems
    resolves: rhbz#1479526
  - p2v: fx check for sudo requiring a password
    resolves: rhbz#1500673
  - v2v: handle disks with snapshots in vCenter
    resolves: rhbz#1172425
  - rescue: backport improved version
    resolves: rhbz#1438710
  - v2v: improve bootloader detection
    resolves: rhbz#1508299
  - v2v: parse MAC address of network interfaces in OVF files
    resolves: rhbz#1506572
  - Unconditionally depend on libvirt-daemon-kvm >= 3.9.0-1, which will always
    pull the right qemu-kvm too, and thus remove the unversioned dependencies
    on it
    resolves: rhbz#1500870
  - v2v: fix RPM file owned test
    resolves: rhbz#1503958
  - Do not open read-only disks using <shareable/> in the libvirt backend
    resolves: rhbz#1518517
  - v2v: handle better when grubby does not report any default kernel
    resolves: rhbz#1519204
  - v2v: enhance vmx import method to access via SSH
    resolves: rhbz#1523767
  - builder: fix caching of templates when using --cache-all-templates
    resolves: rhbz#1523650


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12
changelog:
  - Rebase to libguestfs 1.38.2 in RHEL 7.6.
    resolves: rhbz#1551055
  - v2v: warn about unknown VMware controller types
    resolves: rhbz#1510801
  - df: show correct sizes in human-readable mode for filesystems with
    block size = 512
    resolves: rhbz#1525262
  - v2v: fix example URL in man page
    resolves: rhbz#1540535
  - Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
    resolves: rhbz#1541525
  - Fix qemu-img-ma dependency in non-x86_64 architectures
    resolves: rhbz#1568676
  - v2v: update "resume=/dev/sdaX" entries in GRUB command lines
    resolves: rhbz#1532224
  - v2v: fix virtio-rng and memballoon OVF fragment for RHV
    resolves: rhbz#1550168
  - v2v: detect whether the root filesystem was not mounted in read-write mode
    resolves: rhbz#1567763
  - v2v: import OVAs with snapshots
    resolves: rhbz#1570407
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1571237
  - Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
    place where it used now (by virt-builder-repository).
  - v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
    oVirt REST API
    resolves: rhbz#1557273
  - Start lvmetad earlier when booting the appliance
    resolves: rhbz#1581810
  - v2v: fix kernel detection in Ubuntu guests since 18.04
    resolves: rhbz#1591248
  - v2v: convert the CPU topology correctly
    resolves: rhbz#1541908
  - Add a new inspect_get_osinfo API, and add its result to the output of
    virt-inspector
    resolves: rhbz#1544842
  - Pass absolute paths to NBD sockets when using the libvirt backend
    resolves: rhbz#1588451
  - v2v: do not write only <vendor> without <model> in libvirt XMLs
    resolves: rhbz#1591789
  - v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
    used for -it vddk, and -o rhv-upload
    resolves: rhbz#1589776
    resolves: rhbz#1608718
  - v2v/p2v: disable on aarch64, since it is not supported (nor even working)
    there
    resolves: rhbz#1601488
  - v2v: handle srN devices in libvirt XML (for virt-p2v)
    resolves: rhbz#1612785
  - Do not use the -cpu parameter under any circumstances for ppc64le.
    resolves: rhbz#1605071


author: EL Errata <el-errata_ww@oracle.com> - 1:1.38.2-12.0.1
changelog:
  - Set DISTRO_ORACLE_LINUX corresponding to ol
  - Remove 0001-update-distro-for-oracle.patch
    To support OL, update related code about /etc/os-release [bug 28760753]
  - Update packagelist.in for OL


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12.el7_6.1
changelog:
  - v2v: update documentation regarding SHA-2 certificates in Windows 7 and
    Windows Server 2008 R2
    resolves: rhbz#1632788
  - v2v: fix rhev-apt firstboot command for Windows
    resolves: rhbz#1625216


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-5
changelog:
  - Rebase to libguestfs 1.40.2 in RHEL 7.7.
    resolves: rhbz#1621895
  - v2v: uninstall the VMware Tools correctly
    resolves: rhbz#1465849
    resolves: rhbz#1481930
  - v2v: fix VMware vCenter roles needed for conversion
    resolves: rhbz#1530967
  - v2v: preserve the VM Generation ID
    resolves: rhbz#1598350
  - Query QEMU to known whether KVM is supported
    resolves: rhbz#1605071
  - v2v: add --mac option
    resolves: rhbz#1607274
  - v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
    resolves: rhbz#1619665
    resolves: rhbz#1691659
  - v2v: provide a way to query for the estimated size of the disks
    resolves: rhbz#1622785
  - Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
    resolves: rhbz#1634248
  - p2v: add an option to Shutdown the machine after the conversion
    resolves: rhbz#1642044
  - v2v: fix epoch when querying installed RPM packages
    resolves: rhbz#1669395
  - Use a better icon for RHEL >= 7 guests
    resolves: rhbz#1679482
  - v2v: improve the architecture detection of Linux kernel modules
    resolves: rhbz#1690574
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1688155
  - v2v: update nbdkit information in documentation
    resolves: rhbz#1605242
  - v2v: warn when a guest has 'direct' network interfaces
    resolves: rhbz#1151902
  - v2v: use proper SELinux label for nbdkit sockets
    resolves: rhbz#1698437


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-5.el7_7.1
changelog:
  - v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
    for 'rhv-upload'
    resolves: rhbz#1726168


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-7
changelog:
  - v2v: -o rhv-upload: improve wait logic after finalize
    resolves: rhbz#1680361
  - v2v: fix DISKTYPE value in generated .ovf files
    resolves: rhbz#1750719


author: EL Errata <el-errata_ww@oracle.com> - 1:1.40.2-10.0.1
changelog:
  - Set DISTRO_ORACLE_LINUX corresponding to ol
  - Remove 0001-update-distro-for-oracle.patch
    To support OL, update related code about /etc/os-release [Orabug: 28760753]
  - Update packagelist.in for OL


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream version
  - Do not use deprecated GLib functionality
  - Unref the GMainloop after it has been run, not when just quit


author: Marek Kasik <mkasik@redhat.com> - 0.2.4-1
changelog:
  - Update to 0.2.4
  - Backport several important patches from current master
  - Revert addition of GXPSImage (it would change ABI)
  - Resolves: #1384959


author: Marek Kasik <mkasik@redhat.com> - 0.2.5-1
changelog:
  - Update to newly released 0.2.5
  - Preserve ABI by exporting the same set of methods as before
  - Resolves: #1384959


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-2
changelog:
  - Ensure gxps_archive_read_entry() fills the GError in case of failure
  - Handle errors returned by archive_read_data()
  - Resolves: #1574844


author: Rafael Aquini <aquini@redhat.com> - 2.16-13
changelog:
  - tests/stack_grow_into libhugetlbfs test fixes (#1422960)
  - PPC vm/hugepage/libhugetlbfs test fix (#1515365)


author: Tatyana Nikolova <tatyana.e.nikolova@intel.com> - 0.5.224-1
changelog:
  - Add BSD license text to COPYING
  - Clean up the AM_CFLAGS settings
  - Minor fixes to the spec.in, including license, config and url entries


author: Doug Ledford <dledford@redhat.com> - 1.1.6-5
changelog:
  - Correct the Url and Source tags now that the openfabrics server no longer
    responds if you don't include the www in the link


author: Doug Ledford <dledford@redhat.com> - 1.1.7-6
changelog:
  - Add in support for flow steering and IP addressing of UD RoCE QPs
  - Resolves: bz1058537, bz1062281


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Grab official upstream release.  This includes all of the pre-release
    items we had in the last release except for the IP based RoCE GID
    addressing changes.  So we are still carrying patches for those two
    items
  - Upstream fixed the copy-n-paste error that broke flow steering
  - Related: bz1122333


author: Doug Ledford <dledford@redhat.com> - 1.1.8-1
changelog:
  - Grab official upstream release.  This includes all of the pre-release
    items we had in the last release except for the IP based RoCE GID
    addressing changes.  So we are still carrying patches for those two
    items
  - Upstream fixed the copy-n-paste error that broke flow steering
  - Related: bz1094988
  - Resolves: bz947308


author: Doug Ledford <dledford@redhat.com> - 1.1.8-2
changelog:
  - Update RoCE IP addressing patches to latest version under review
  - Build against valgrind on ppc64le
  - Fix a coverity found issue
  - Resolves: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.1.8-4
changelog:
  - Fix one of the coverity bugs in a different way (the original fix
    caused a problem in libmlx4)
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.1.8-6
changelog:
  - Add build on s390
  - Drop back to building against libnl instead of libnl3
  - Resolves: bz1182178, bz1177115


author: Doug Ledford <dledford@redhat.com> - 1.1.8-7
changelog:
  - Add checksum offload support
  - Update the various patches to the ones from the official upstream git repo
  - Related: bz1195888


author: Robert Scheck <robert@fedoraproject.org> 0.46-1
changelog:
  - Upgrade to 0.46 (#525933, #628893)
  - Fixed race in populating builtin timezone components (#637150)
  - Fixed wrong ICAL_ERRORS_ARE_FATAL preprocessor check (#575715)


author: Jarod Wilson <jarod@redhat.com> 1.2.0-1
changelog:
  - Update to libiec61883 v1.2.0 release
  - Rework installtests patch to not require autoreconf
  - Make iso channel allocation work w/o local fw node r/w


author: Tim Waugh <twaugh@redhat.com> 0.2.11-9
changelog:
  - The python sub-package now requires the exactly-matching main
    package (bug #605169).
  - Fixed strict aliasing warnings (bug #605170).


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.4-3
changelog:
  - disable broken python/cython bindings (for now, currently FTBFS)
  - track soname
  - tighten  subpkg deps


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.3-3
changelog:
  - Fix touchpad tap timestamps (#1491525)
  - Fix missing show-keycodes entry in man page (#1491532)
  - Change palm detection thresholds (#1491537)
  - Ignore tap motion threshold for nfingers > nslots (#1491533)
  - Fix a memory leak on destroy
  - Ignore hovering touches while tapping
  - Fix a man page typo


author: Peter Hutterer <peter.hutterer@redhat.com> 1.5.2-2
changelog:
  - Swap to the correct tarball so we match the checksums from upstream (had a
    local mixup of tarballs)


author: Rex Dieter <rdieter@fedoraproject.org> 3.52.6-3
changelog:
  - capitalize Name,Summary,Version tags
  - -devel: capitalize Summary
  - fix spurious permissions on header files
  - refresh upstream source
  - -admin,-devel: add %defattr(...)


author: Rex Dieter <rdieter@fedoraproject.org> 3.52.6-4
changelog:
  - -devel: install headers to /usr/include/libiodbc/ to better avoid
    conflicts and need for bogus unixODBC-devel dep


author: Doug Ledford <dledford@redhat.com> - 1.2-1.el6
changelog:
  - Update to latest upstream source
  - Change BuildRequires from valgrind to valgrind-devel for rhel6
  - Drop ppc64 build as it isn't officially supported upstream
  - Related: bz543948


author: Doug Ledford <dledford@redhat.com> - 1.3-1
changelog:
  - Update to latest upstream release and build against latest libibverbs
  - Resolve mezzanine configure issue (1085946)
  - Related: bz1137044


author: Paolo Bonzini <pbonzini@redhat.com> - 1.7.0-3
changelog:
  - Correct license for libiscsi-utils, prefer %global to %define
  - Add Requires
  - Remove %clean section


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-3
changelog:
  - Fixed issues reported by coverity (bz #1026820)
  - Do not mark /etc/ld.so.conf.d/ as config (bz #1011126)
  - Resolves: #1026820 
  - Resolves: #1011126


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-7.el7
changelog:
  - libiscsi-Discovery-return-multiple-portals-for-the-same-disco.patch [bz#1266523]
  - libiscsi-iscsi-ls-skip-link-local-IPv6-addresses.patch [bz#1266523]
  - Resolves: bz#1266523
    (iscsi-ls doesn't work if target has more than one portal)


author: Nikola Forró <nforro@redhat.com> - 1.2.90-7
changelog:
  - Fix CVE-2018-11212 (#1586062)
  - Fix CVE-2016-3616 (#1318509), CVE-2018-11213 (#1589091)
    and CVE-2018-11214 (#1589110)
  - Fix CVE-2018-11813 (#1591203)


author: Than Ngo <than@redhat.com> - 4.10.5-2
changelog:
  - bz#970713, CVE-2013-2126, double-free flaw when handling
    damaged full-color in Foveon and sRAW files


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.14-2
changelog:
  - Add patch by Stephen Gallagher to include manual pages for
    ldb_connect() and several other functions.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.17-2
changelog:
  - Fix the minimal required tdb version
  - Related: rhbz#1133914 - Rebase libldb to version 1.1.17 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-1.1
changelog:
  - Resolves: rhbz#1290714 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.2.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-1.2
changelog:
  - Resolves: rhbz#1290714 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.2.z]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-2
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-3
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1
changelog:
  - Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1
changelog:
  - Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                             version 4.7.x


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-8
changelog:
  - rename to liblockfile
  - sorting file to main and -devel package
  - explicitly list files in files-section


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-9
changelog:
  - change description and summary of -devel-subpackage
  - make wildcard for man-pages even match against uncompressed files


author: Mahaveer Darade <mah.darade@gmail.com> - 0.3.5-1
changelog:
  - upgrade to upstream version 0.3.5
  - drop patch0, merged upstream
    liblognorm-0.3.4-rename-to-lognormalizer.patch
  - remove trailing whitespace


author: Jiri Vymazal <jvymazal@redhat.com> 2.0.2-2
changelog:
  RHEL 7.6 erratum
  - added patch with skipempty support
    resolves: rhbz#1565219
  - removed no longer used patch file


author: Rui Matos <rmatos@redhat.com> - 2.5.2-11
changelog:
  - Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
    CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184


author: Michal Ruprich <mruprich@redhat.com> - 1.2.0-5
changelog:
  - Resolves: #1643464 - Add libmaxminddb package as a successor of deprecated GeoIP package
  - Lowering the release to 1.2.0-5 due to current version in el8 - having larger version would break the migration from el7 to el8


author: Remi Collet <remi@fedoraproject.org> - 1.0.12-1
changelog:
  - update to 1.0.12
  - add aclocal/ax_lib_libmemcached.m4
  - abi-compliance-checker verdict : Compatible
  - uggly hack for man pages


author: Remi Collet <remi@fedoraproject.org> - 1.0.14-1
changelog:
  - update to 1.0.14
  - libmemcachedprotocol removed
  - sasl support is back
  - run test during build
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1079994 (bigendian)
    https://bugs.launchpad.net/libmemcached/+bug/1079995 (config.h)
    https://bugs.launchpad.net/libmemcached/+bug/1079996 (dtrace)
    https://bugs.launchpad.net/libmemcached/+bug/1079997 (-ldl)
    https://bugs.launchpad.net/libmemcached/+bug/1080000 (touch)


author: Remi Collet <remi@fedoraproject.org> - 1.0.15-1
changelog:
  - update to 1.0.15
  - libmemcachedprotocol is back
  - add memaslap command line tool
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1094413 (libevent)
    https://bugs.launchpad.net/libmemcached/+bug/1094414 (c99 MODE)


author: Remi Collet <remi@fedoraproject.org> - 1.0.16-1
changelog:
  - update to 1.0.16
  - ignore test result for memaslap (XFAIL but PASS)
    https://bugs.launchpad.net/libmemcached/+bug/1115357


author: Václav Pavlín <vpavlin@redhat.com> - 0.9.33
changelog:
  - Update to latest uptsream release 0.9.33 due to
    security issues.
    Resolves: rhbz#1039393, rhbz#1039387


author: Doug Ledford <dledford@redhat.com> - 1.0.4-2
changelog:
  - Fix Url and Source tags
  - Drop old Provides/Obsoletes we used to change package names
  - Pick up a bug fix to modprobe.d/libmlx4.conf


author: Doug Ledford <dledford@redhat.com> - 1.0.5-1
changelog:
  - Update to latest upstream
  - Drop awk based setup for a bash based setup, making including
    the setup code on an initramfs easier
  - Modernize spec file


author: Doug Ledford <dledford@redhat.com> - 1.0.5-7
changelog:
  - Fix dracut module support to work with rdma dracut module
  - Add support for IP based RoCE addressing and UD QPs
  - Add flow steering support
  - Related: bz1064316, bz1062284, bz1058538


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream release
  - Update RoCE IP GID support
  - Fix flow steering support
  - Related: bz1122333


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream release
  - Update RoCE IP GID support
  - Fix flow steering support
  - Resolves: bz1094988


author: Doug Ledford <dledford@redhat.com> - 1.0.6-2
changelog:
  - Bump and rebuilt against latest libibverbs (updated RoCE GID
    patch in libibverbs)
  - Fix a couple compiler warnings (the problems were bogus, but
    we still prefer a silent build)
  - Related: bz1137044


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Drop the module init stuff and move it to the rdma package
  - Make sure we require the rdma package, and that we conflict
    with older versions of the package
  - Related: bz1164618


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1
changelog:
  - Update to latest upstream release
  - Remove files related to setting ports to Ethernet mode as that
    isn't even supported on this card yet and the files that are
    there will be wrong when it is supported
  - Resolves: bz1061584


author: Jarod Wilson <jarod@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream release v1.2.1
  - This is libmlx5, not libmlx4, fix descriptions accordingly
  - Resolves: bz1298698, bz1275412, bz1275396, bz1296267, bz1296186, bz1288821


author: Jarod Wilson <jarod@redhat.com> - 1.2.1-7
changelog:
  - Fix mlx5_post_send incompatibility with ibv_post_send ABI
  - Add explicit Requires: on libibverbs >= 1.2.1
  - Resolves: rhbz#1364525


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-5
changelog:
  - Remove conflict with libproxy, its not really necessary since
    we already have the latest libproxy in rawhide.


author: Rex Dieter <rdieter@fedoraproject.org> - 1.0-2
changelog:
  - %files: track lib soname (so bumps aren't a surprise)
  - tighten subpkg deps (%_isa)
  - %build: --disable-static


author: John5342 <john5342 at, fedoraproject.org> 4.2-1
changelog:
  - Rebase to new upstream version
  - Drop patches (they were already both upstream waiting for this new release)
  - No real changes in this version since we already carried all patches except the version change


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.4.alpha
changelog:
  - Avoid 'test/md5.c:126:3: warning: dereferencing type-punned pointer
    will break strict-aliasing rules' by adding -fno-strict-aliasing flag.


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.6.alpha
changelog:
  - Fixes for CVE-2018-14679 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682
  - resolves: rhbz#1611550 rhbz#1611551 rhbz#1611552 rhbz#1611553


author: Doug Ledford <dledford@redhat.com> - 1.0.6-1
changelog:
  - Update to latest upstream version
  - Add pseudoprovide for libibverbs-driver.{_arch} while keeping old
    pseudoprovide until libibverbs can be rebuilt without needing the
    old provide


author: Doug Ledford <dledford@redhat.com> - 1.0.6-3
changelog:
  - Undo pseudoprovide workaround as it's no longer needed due to
    a change in the libibverbs requirements


author: Christophe Fergeau <cfergeau@redhat.com> - 4.0.3-1
changelog:
  - New upstream 4.0.3 release, should fix a bug breaking metadata fetching
    from musicbrainz servers


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-1
changelog:
  - Package libmusicbrainz5, apart from the name/version it's identical to
    libmusicbrainz4 so this .spec is based on it.


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-2
changelog:
  - Address review comments (rhbz#832670)
      fix licence (LGPLv2+ -> LGPLv2)
      fix tarball URL
      remove obsolete use of RPM_BUILD_ROOT
      remove BuildRequires on pkg-config
      remove use of %defattr


author: Jiri Pirko <jpirko@redhat.com> - 1.2-1
changelog:
  - Update to 1.2
  - libndp: silently ignore packets with optlen 0 [1016064]
  - libndp: fix processing for larger options [1016064]
  - libndp: do not fail on receiving non-ndp packets [1016078]


author: Jiri Pirko <jpirko@redhat.com> - 1.2-3
changelog:
  - libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf() [1044084]


author: Lubomir Rintel <lrintel@redhat.com> - 1.2-5
changelog:
  - libndp: validate the IPv6 hop limit [CVE-2016-3698]
  - libndb: reject redirect and router advertisements from non-link-local [CVE-2016-3698]


author: Eric Garver <egarver@redhat.com> - 1.2-7
changelog:
  - libndp: add option flags to send messages
  - ndptool: add option to send messages types
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - libndp: revert API change for ndp_msg_send() and add


author: Doug Ledford <dledford@redhat.com> - 1.1.4-1
changelog:
  - Update to latest and rebuild against latest libibverbs and
    valgrind (1142116)
  - Related: bz1137044


author: Steve Dickson <steved@redhat.com> 0.25-13
changelog:
  - Strip newlines out of IDMAP_LOG messages (bz 1261124)
  - Fixed some NEGATIVE_RETURNS that a Covscan scan found (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-14
changelog:
  - nss_getpwnam: correctly check for negative values (bz 1271449)
  - Fixed a memory leak in nss_name_to_gid() (bz 1271449)


author: Dan Williams <dcbw@redhat.com> - 1.1-14
changelog:
  - Fix portmap position calculation (rh #677526) (rh #677725)
  - Make port allocation threadsafe (rh #677527) (rh #677724)


author: Thomas Haller <thaller@redhat.com> - 3.2.21-6
changelog:
  - fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
  - fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
  - fix printing in nl_msec2str for whole seconds
  - don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
  - backport nl_has_capability function


author: Thomas Haller <thaller@redhat.com> - 3.2.21-9
changelog:
  - improve local port handling for netlink socket with EADDRINUSE (rh #1249158)
  - rtnl: backport support for link-netnsid attribute (rh #1255050)


author: Jingdong Lu <jingdong.lu@oracle.com> - 3.2.21-10.0.1
changelog:
  - route/addr: only send IFA_FLAGS when needed to workaround picky older kernels
    [orabug 185775291] (john.haxby@oracle.com)


author: Dan Mashal <dan.mashal@fedoraproject.org> - 0.7.5-5
changelog:
  - Fix RHBZ #925824
  - Update source URL
  - Fix mix of spaces and tabs in spec file
  - Fix bogus changelog date


author: Ray Strode <rstrode@redhat.com> 0.7.5-8
changelog:
  - Don't require desktop notification daemon (breaks a build loop with mutter/gnome-shell)
    Related: #1174722


author: Jarod Wilson <jarod@redhat.com> - 1.0.8-1
changelog:
  - Update to upstream release v1.0.8 for RoCE v2 support
  - Restore AUTHORS, COPYING and README installation
  - Resolves: bz1276743


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.0.9-1
changelog:
  - Updated to 0.0.9
  - Dropped obsolete Group, Buildroot, %clean and %defattr
  - Switched to .bz2 sources
  - Dropped included patches


author: Zeeshan Ali <zeenix@redhat.com> - 0.2.7-3
changelog:
  - rhel: Add info on 6.5 and 7.0 (#1015055).
  - install-script,rhel: Fix for 'Server' & 7.0 (#1033007).


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-3
changelog:
  - Resolves: rhbz#1712458 - [machines] The function of 'Auto-detect guest
                             operating system' is not available on rhel 7.7


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-3.1
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1169773)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4.2
changelog:
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is accounted for (#1207666)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Adam Jackson <ajax@redhat.com> 0.12.902-4
changelog:
  - libpciaccess-lol-dev-port.patch: Don't use /dev/port since the kernel insists
    that it remain unusably broken.


author: Tom Lane <tgl@redhat.com> 2:1.5.10-3
changelog:
  - Remove compat subpackage (it's now a separate package "libpng12")
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 2:1.5.12-1
changelog:
  - Update to libpng 1.5.12 for minor bug fixes
  - Activate chunk size limits by default, with a very generous default limit


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptf based on upstream
  - Related: #1283576


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptr base on upstream
  - Related: #1283575


author: Peter Robinson <pbrobinson@fedoraproject.org> - 0.4.7-4
changelog:
  - Add upstream patches to use js rather than xulrunner
  - Add patch to fix FTBFS on gcc 4.7
  - Cleanup spec for latest updates and remove obsolete bits


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-1
changelog:
  - fix leak when throwing PWQError exception
  - added pkgconfig file
  - call the simplicity checks before the cracklib check
  - add enforce_for_root option to the PAM module
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-1
changelog:
  - use rpm built-in filtering of provides (rhbz#830153)
  - remove strain debug fprintf() (rhbz#831567)


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: Angus Salkeld <asalkeld@redhat.com> - 0.14.4-1
changelog:
  LOG: prevent the last char of the blackbox message from getting lost.
  Example: make the blackbox example more practical.
  Add the processing which remove notifier at skiplist_destroy function
  Add the processing which remove hash node and notifier at hashtable_destroy function
  Unify to QB_TRUE/QB_FALSE a boolean value
  Document the default prefix in INSTALL
  Unify the list processing with qb_list function
  Add travis link to the readme.
  Fix return code which is an error occurred at pthread function
  TEST: add a progam to compare the speed of vsnprintf and qb_vsnprintf_serialize
  LOG: add a test for a padded hex int.
  Fedora's splint has a strange syntax error, don't fail on it.
  LOG: fix truncation in some messages that get padded.
  Fix the blackbox formatter when specifing the string len/precision
  Fix strlcpy and strlcat functions
  IPC: don't over log on disconnect
  Make sure we don't use the format string whilst it is getting changed.
  ptrie: deref the current node in trie_iter_free()
  LOG: fix the format comparison to avoid generating multiple entries.
  LOG: set the return code when calloc fails
  IPC: call poll if we are mid message and get EAGAIN
  Remove extra ";"
  IPC: set the error more correctly when qb_sys_mmap_file_open() fails.
  Make sure that mmap'ed files smaller than a page size are written to.
  example/test: check for error in qb_ipc_run()
  example: check for error in qb_ipc_run()
  TEST: fix typo s/,/; in check_ipc.c


author: David Vossel <dvossel@redhat.com> - 0.16.0-4
changelog:
  - Require log filtering to match function and file exactly.
    No substring matching.

  - Fixes complile time issue with 'make check' unit tests.

    Resolves: rhbz#1018091


author: David Vossel <dvossel@redhat.com> - 0.17.1-1
changelog:
  Fix: ipcs: Correctly allocate receive buffer size
    Fix: ipc_socket: Signalhandler must be resetted to Default, use only cleanup_sigpipe to return from qb_ipc_dgram_sock_setup.
    Fix: trie: allow modifying the trie map during the notify callback
    Fix: fix invalid option when run 'ipcclient -h'
    Fix: epoll: don't miss poll events under high load
    Fix: ipc_shm: fix error handling in qb_ipcs_shm_connect()
    Fix: ringbuffer: fix size in qb_rb_create_from_file()
    Fix: ringbuffer: fix qb_rb_open_2() debug format string
    Fix: trie: fixes regression caused by ref count refactoring
    Fix: ipcc: Properly timeout during recv when timeout value is provided

    Resolves: rhbz#1110043
    Resolves: rhbz#975903


author: David Vossel <dvossel@redhat.com> - 0.17.1-1.1
changelog:
  Fix bug that prevents ipc server from working in pid with realtime priority.

    Resolves: rhbz#1198718


author: Christine Caulfield <ccaulfie@redhat.com> - 0.17.1-2.1
changelog:
  Increase size of the buffer where we make the socket name to allow for longer PIDs
    Resolves bz#1114852


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-2
changelog:
  Detect IPC Shared memory corruption in peek as well as read. Prevents
    the mainloop from spinning if multithreaded IPC (which is currently 
    not supported) is attempted without locking.
    Resolves: rhbz#1422454


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-3
changelog:
  Allow IPC system to use filesystem sockets instead of abstract
    sockets if a configuration file exists.
    Resolves: rhbz#1446254


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-4
changelog:
  Revert git patch 189ca28 which caused problems with pacemaker CIB
    closing down.
    Resolves: rhbz#1459276


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-5
changelog:
  Put backpatch 189ca28 as it's not the culprit
    
    Don't truncate IPC files in the client as it can cause servers to crash.
    I've also had to (for this release) disable one of the tests as it checks
    for truncated files.
    Resolves: rhbz#1459276


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.1-7
changelog:
  Prevent crashes when client truncates SHM segment
    I've reverted the patch for 1459276 which is no longer needed as this
    is a proper fix.
    Resolves: rhbz#1473695


author: Stephan Bergmann <sbergman@redhat.com> - 1:4.1.0.4-5
changelog:
  - Resolves: rhbz#989246 Honor user's JavaDriverClass override in mysql driver
  - Resolves: fdo#67045 fix several nasty screen selection issues


author: Jingdong Lu <jingdong.lu@oracle.com> - 1:4.1.4.2-3.0.1.el7
changelog:
  - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile
  - Build with --with-vendor="Oracle America, Inc."


author: David Tardon <dtardon@redhat.com> - 1:4.3.7.2-2
changelog:
  - Related: rhbz#1205091 add more fixes from f21
  - Resolves: tdf#91078 check also DBData modified, not only named expressions
  - don't include red spelling underlines on bitmap copy/paste


author: David Tardon <dtardon@redhat.com> - 1:4.3.7.2-4
changelog:
  - Related: rhbz#1205091 add another bunch of fixes from Fedora
  - rhbz#1219137 tweak ruler for happenchance side-effect
  - Related: rhbz#1205091 do not filter out requires


author: David Tardon <dtardon@redhat.com> - 1:4.3.7.2-5
changelog:
  - Related: rhbz#1205091 fix for ppc64
  - Related: rhbz#1205091 fix deps for gdb-debug-support subpackage


author: David Tardon <dtardon@redhat.com> - 1:4.3.7.2-5.1
changelog:
  - Resolves: rhbz#1285820 various flaws
  - CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
  - CVE-2015-5212 Integer underflow in PrinterSetup length
  - CVE-2015-5213 Integer overflow in DOC files
  - CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
    causing memory corruption


author: Caolán McNamara <caolanm@redhat.com> - 1:5.0.6.2-6
changelog:
  - Resolves: rhbz#1401082 gnome hangs opening certain docx
  - Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE


author: David Tardon <dtardon@redhat.com> - 1:5.0.6.2-7
changelog:
  - Resolves: rhbz#1431539 gnome-documents needs libreofficekit
  - Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
    Calc and Writer


author: David Tardon <dtardon@redhat.com> - 1:5.0.5.2-2
changelog:
  - Related: rhbz#1290148 remove unintentional dependency of libreoffice-core on
    libreoffice-calc
  - Related: rhbz#1290148 restore lost changelog entry
  - Related: rhbz#1290148 add additional 5.0.6 patches


author: Caolán McNamara <caolanm@redhat.com> - 1:5.0.6.2-4
changelog:
  - Resolves: rhbz#1425535 crash in calc on exit after using csv dialog with a11y enabled
  - Resolves: rhbz#1425536 crash in calc on closing dialog with a11y enabled


author: Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17
changelog:
  - Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
  - Resolves: rhbz#1610692 silence console warnings from print dialog


author: David Kubat <david.kubat@oracle.com> - 1:5.3.6.1-25.0.1
changelog:
  - adjust color palette to match Redwood style.
  - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile
  - Build with --with-vendor="Oracle America, Inc."


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 3.2-4
changelog:
  - Specify CC_FLAGS and COMP_LINK_FLAGS so that an extra -O switch and setting an
    rpath are avoided.


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-1
changelog:
  - Substitute vars in URL in the lr_downloadtarget_new()
  - New module repoconf for reading of *.repo files
  - Add LRE_VALUE code + LR_REPOCONF_ERROR error domain
  - Fail if gpgcheck enabled but repomd.xml signature is not available
  - Support for RHEL6
  - Add LRO_GNUPGHOMEDIR option
  - Refactoring to prevent RhBug: 1144741
  - fastest_mirror: Use <0.0 (-1.0) instead of DBL_MAX when a connection time wasn't measured
  - Add sanity checks in order to avoid bugs like: 1166533, 1160087
  - Refactoring


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1
changelog:
  - downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
  - downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
  - downloader: Show also calculated checksums in error message about bad checksum
  - Python: Return all strings in unicode


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1
changelog:
  - Fix ABI compatibility (RhBug: 1185180)
  - fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
  - downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
  - Make building tests and docs optional
  - librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1
changelog:
  - tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
  - Add LRO_OFFLINE
  - Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
  - Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
  - Add LR_VERSION constant with version string
  - python: Import contants from C librepo module in a loop
  - repoconf: Add support for failover and skip_if_unavailable options
  - handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
  - Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
  - util: Add lr_is_local_path()
  - New module repoconf for reading *.repo files
  - Add LRO_HTTPHEADER option (RhBug: 1181123)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.15-1
changelog:
  - Do not inlude header in the body output (RhBug: 1207685)
  - metalink: Proper error handling
  - New LRR_RPMMD_* contants
  - Support for client certificates
  - Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
  - CMakeLists.txt: do not check for CXX
  - build: Use solely pkg-config to find glib


author: Colin Walters <tmlcoch@redhat.com> - 1.7.16-1
changelog:
  - Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
  - downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
  - test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
  - repoconf: Proper handling of gint64 and guint64 types
  - build: Be compatible with cmake 2.8
  - handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
  - utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
  - Python: call lr_global_init() during module initialization
  - Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
  - util: Honor RFC 3986 (Issue #55)


author: Marek Blaha <mblaha@redhat.com> - 1.8.1-1
changelog:
  - Add yumrecord substitution mechanism (mluscon)
  - Fix a memory leak in signature verification (cwalters)
  - Add new option LRO_FTPUSEEPSV
  - downloader prepare_next_transfer(): simplify long line
  - downloader prepare_next_transfer(): add missing error check
  - downloader prepare_next_transfer(): cleanup error path
  - downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
  - handle: Don't use proxy cache for downloads of metalink/mirrorlist
  - handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
  - downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
  - Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
  - New test: always try to download from the fastest mirror (Alexander Todorov)


author: Jakub Filak <jfilak@redhat.com> 2.1.11-5
changelog:
  - report-cli: use the Client API for communication to user
  - workflow_RHELvmcore: run analyze_VMcore too
  - Resolves: #1058845, #1059651


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-6
changelog:
  - turn off Bugzilla for Anaconda bugs in GA releases
  - Provide SYSLOG_FACILITY when logging through journal
  - KB article URL as a link to help for ABRT configuration
  - load the user list of ignored words
  - localization: properly handle locales with encoding suffix
  - event configuration: load default values from configuration directory
  - Resolves: #1029438, #1062135, #1063320, #1063339, #1063804, #1064261


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-7
changelog:
  - send an ureport before creating a customer case
  - correct name of RH Customer Portal in Anaconda
  - fix suggestion text for screen casting programs
  - fix typos in error messages
  - translation updates
  - Resolves: #1064961, #1069111, #1069340


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-9
changelog:
  - do not export empty configuration options as environment variables
  - translation updates
  - Resolves: #1062498, #1073610


author: Tianyue Lan <tianyue.lan@oracle.com> - 2.1.11-10.0.1
changelog:
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-22
changelog:
  - switch the default dump dir mode to 0750
  - harden against directory traversal, crafted symbolic links
  - avoid race-conditions in dump dir opening
  - Resolves: #1212096, #1217499, #1218610, #1217484


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.1.11-23.0.1
changelog:
  - Update workflow xml for Oracle [18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [bug 20390725]
  - Added Bug20357383.patch to remove redhat reference [bug 20357383]


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-22
changelog:
  - switch the default dump dir mode to 0750
  - harden against directory traversal, crafted symbolic links
  - avoid race-conditions in dump dir opening
  - Resolves: #1212098, #1217483, #1217500


author: Richard Marko <rmarko@redhat.com> - 2.1.11-24
changelog:
  - ureport: add functionality to use consumer certificate
  - report-python: fix getVersion_fromOSRELEASE
  - RHTSupport: include reported_to in Support cases
  - Resolves: #1223805, #1198551, #1197108


author: Richard Marko <rmarko@redhat.com> - 2.1.11-28
changelog:
  - don't warn about missing 'type' if the locking fails
  - don't spit unnecessary debug messages
  - Related: #1243280, #1243280


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-31
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Related: #1266853


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-32
changelog:
  - Save remote name in reported_to
  - Add a function for compressing dumpdirs
  - Introduce global configuration + option for excluded elements
  - attach the URL of the uploaded problem to the relevant report
  - Resolves: #1300780


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-33
changelog:
  - lib: allow report SELinux denial from sealert under common user
  - mailx: stop creating dead.letter on mailx failures
  - mailx: introduce debug parameter -D
  - mailx: mail formatting: add comment right after %oneline
  - mailx: use problem report api to define an emais' content
  - lib: remove unused function make_description_bz
  - rhtsupport: attach all dump dir's element to a new case
  - rhtsupport: add pkg_vendor, reproducer and reproducible to description
  - rhtsupport: use problem report API to create description
  - lib: add Problem Format API
  - augeas: trim spaces before key value
  - rhtsupport: Discourage users from reporting in non Red Hat stuff
  - rhtsupport: Discourage users from opening one-shot crashes
  - report-gtk: Require Reproducer for RHTSupport
  - Add workflow for RHEL anonymous report
  - bugzilla: don't report private problem as comment
  - lib: move CREATE_PRIVATE_TICKET to the global configuration
  - event config: add support for 'restricted access'
  - report-gtk: offer users to create private ticket
  - bugzilla: make the event configurable
  - uploader: /etc/libreport/plugins/upload.conf as default conf file
  - dd: make function uid_in_group() public
  - uploader: add possibility to set SSH keyfiles
  - uploader: move username and password to the advanced options
  - uploader: allow empty username and password
  - curl: add possibility to configure SSH keys
  - Resolves #1289513, #1277849, #1289513, #1279453, #1258482, #1236613, #1261358, #1281312, #1309317, #1264921


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-36
changelog:
  - introduce 'stop_on_not_reportable' option
  - fix a double free of config at exit in reporter-rhtsupport
  - Related: #1373094, #1257159


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-39
changelog:
  - Introduce workflow for adding data to existing case
  - Change default URL to the FAF server
  - wizard: fix 'Show log' window not displaying correctly
  - augeas: fix parsing spaces in configuration files
  - Related: #1303326, #1435256, #1463313


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-43
changelog:
  - dd: extend the scope of DD_DONT_WAIT_FOR_LOCK
  - dd: log lock warning only once not x times per sec
  - dd: add functions for opening dd item
  - testsuite: Add macros for value comparison
  - testsuite: assert for common function results
  - testsuite: expose the last check result
  - testsuite: fix dd_open_item_file test
  - tests: include testsuite.h in the dist archive
  - spec: include testsuite headers in the devel package
  - Related: #1588272, #1613236


author: Edward Leung <edward.leung@oracle.com> - 2.1.11-43.0.1
changelog:
  - Update workflow xml for Oracle [Orabug: 18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [Orabug: 20390725]
  - Added Bug20357383.patch to remove redhat reference [Orabug: 20357383]


author: Paul Wouters <pwouters@redhat.com> - 3.12-2
changelog:
  - Resolves: rhbz#1105171 (Update man page entry)
  - Resolves: rhbz#1144120 (Update for ESP CAMELLIA with IKEv2)
  - Resolves: rhbz#1074018 Audit key agreement


author: Paul Wouters <pwouters@redhat.com> - 3.12-4
changelog:
  - Resolves: rhbz#1134297 aes-ctr cipher is not supported
  - Resolves: rhbz#1131503 non-zero rSPI on INVALID_KE (and proper INVALID_KE handling)


author: Paul Wouters <pwouters@redhat.com> - 3.12-5
changelog:
  - Resolves: rhbz#826264 aes-gcm implementation support (for IKEv2)
  - Resolves: rhbz#1074018 Audit key agreement (integ gcm fixup)


author: Paul Wouters <pwouters@redhat.com> - 3.12-6
changelog:
  - Resolves: rhbz#1198650 SELinux context string size limit
  - Resolves: rhbz#1198649 Add new option for BSI random requirement


author: Paul Wouters <pwouters@redhat.com> - 3.12-7
changelog:
  - Resolves: rhbz#1208022 libreswan ignores module blacklist rules
  - Resolves: rhbz#1208023 Libreswan with IPv6 in RHEL7 fails after reboot
  - Resolves: rhbz#1211146 pluto crashes in fips mode


author: Paul Wouters <pwouters@redhat.com> - 3.12-9
changelog:
  - Resolves: rhbz#1213652 Support CAVS [updated to kill another copy of prf()]
  - Resolves: rhbz#1208023 Libreswan with IPv6 [updated patch by Jaroslav Aster]
  - Resolves: rhbz#1208022 libreswan ignores module blacklist [updated modprobe handling]


author: Paul Wouters <pwouters@redhat.com> - 3.15-2
changelog:
  - Resolves: rhbz#1259208 CVE-2015-3240
  - Merge rhel6 and rhel7 spec into one
  - Be lenient for racoon padding behaviour
  - Fix seedev option to /dev/random
  - Some IKEv1 PAM methods always gave 'Permission denied'
  - Parser workarounds for differences in gcc/flex/bison on rhel6/rhel7
  - Parser fix to allow specifying time without unit (openswan compat)
  - Fix Labeled IPsec on rekeyed IPsec SA's
  - Workaround for wrong padding by racoon2
  - Disable NSS HW GCM to workaround rhel6 xen builers bug


author: Paul Wouters <pwouters@redhat.com> - 3.15-4
changelog:
  - Resolves: rhbz#1268775 libreswan should support strictcrlpolicy alias
  - Resolves: rhbz#1268776 Pluto crashes after stop when I use floating ip address
  - Resolves: rhbz#1268773 Pluto crashes on INITIATOR site during 'service ipsec stop'
  - Resolves: rhbz#1208022 libreswan ignores module blacklist rules
  - Resolves: rhbz#1270673 ipsec does not work properly on loopback


author: Paul Wouters <pwouters@redhat.com> - 3.12-6
changelog:
  - Resolves: rhbz#1056559 loopback support deprecated
  - Resolves: rhbz#1182224 Add new option for BSI random requirement
  - Resolves: rhbz#1170018 [increase] SELinux context string size limit
  - Resolves: rhbz#1127313 Libreswan with IPv6 in RHEL7 fails after reboot
  - Resolves: rhbz#1207689 libreswan ignores module blacklist rules
  - Resolves: rhbz#1203794 pluto crashes in fips mode


author: Paul Wouters <pwouters@redhat.com> - 3.12-10
changelog:
  - Resolves: rhbz#1212121 Support CAVS testing of the PRF/PRF+ functions
  - Resolves: rhbz#1127313 Libreswan with IPv6 [updated patch by Jaroslav Aster]
  - Resolves: rhbz#1207689 libreswan ignores module blacklist [updated modprobe handling]
  - Resolves: rhbz#1218358 pluto crashes in fips mode without dracut-fips package


author: Paul Wouters <pwouters@redhat.com> - 3.15-4
changelog:
  - Resolves: rhbz#1267370 libreswan should support strictcrlpolicy alias
  - Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address
  - Resolves: rhbz#1166146 Pluto crashes on INITIATOR site during 'service ipsec stop'
  - Resolves: rhbz#1259209 CVE-2015-3240
  - Resolves: rhbz#1199374 libreswan does not enforce all FIPS or IPsec Suite B restrictions
  - Resolves: rhbz#1207689 libreswan ignores module blacklist rules
  - Merge rhel6 and rhel7 spec into one
  - Be lenient for racoon padding behaviour
  - Fix seedev option to /dev/random
  - Some IKEv1 PAM methods always gave 'Permission denied'
  - Parser workarounds for differences in gcc/flex/bison on rhel6/rhel7
  - Parser fix to allow specifying time without unit (openswan compat)
  - Fix Labeled IPsec on rekeyed IPsec SA's
  - Workaround for wrong padding by racoon2
  - Disable NSS HW GCM to workaround rhel6 xen builers bug


author: Paul Wouters <pwouters@redhat.com> - 3.15-6
changelog:
  - Resolves: rhbz#1283468 keyingtries=0 is broken
  - Resolves: rhbz#1297816 When using SHA2 as PRF algorithm, nonce payload is below the RFC minimum size
  - Resolves: rhbz#1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack
  - Resolves: rhbz#1313747 ipsec pluto returns zero even if it fails
  - Resolves: rhbz#1302778 fips does not check hash of some files (like _import_crl)
  - Resolves: rhbz#1278063 Unable to authenticate with PAM for IKEv1 XAUTH
  - Resolves: rhbz#1257079 Libreswan doesn't call NetworkManager helper in case of a connection error
  - Resolves: rhbz#1272112 ipsec whack man page discrepancies
  - Resolves: rhbz#1280449 PAM xauth method does not work with pam_sss
  - Resolves: rhbz#1290907 ipsec initnss/checknss custom directory not recognized
  - Resolves: rhbz#1309764 ipsec barf does not show pluto log correctly in the output
  - Resolves: rhbz#1347735 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
  - Resolves: rhbz#1219049 Pluto does not handle delete message from responder site in ikev1
  - Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request
  - Resolves: rhbz#1315412 ipsec.conf manpage does not contain any mention about crl-strict option
  - Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address


author: Paul Wouters <pwouters@redhat.com> - 3.15-7
changelog:
  - Resolves: rhbz#1311360  When IKE rekeys, if on a different tunnel, all subsequent attempts to rekey fail
  - Resolves: rhbz#1361721 libreswan pluto segfault


author: Paul Wouters <pwouters@redhat.com> - 3.15-8
changelog:
  - Resolves: rhbz#1361721 libreswan pluto segfault [UPDATED]
  - Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request [UPDATED]
  - Resolves: rhbz#1309764 ipsec barf [additional man page update and --no-pager]


author: Paul Wouters <pwouters@redhat.com> - 3.20-2
changelog:
  - Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels
  - Resolves: rhbz#1444115 FIPS: libreswan must generate RSA keys with a minimal exponent of F4, nor E=3
  - Resolves: rhbz#1341353 Allow Preshared Key authentication in FIPS mode for libreswan


author: Paul Wouters <pwouters@redhat.com> - 3.20-3
changelog:
  - Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels [updated]
  - Resolves: rhbz#1458227 CAVS test driver does not work in FIPS mode
  - Resolves: rhbz#1452672 (new-ksk-libreswan-el7) DNSSEC trust anchor cannot be updated without recompilation


author: Paul Wouters <pwouters@redhat.com> - 3.20-4
changelog:
  - Resolves: rhbz#1501809 libreswan does not establish IKE with xauth enabled but modecfg disabled
  - Resolves: rhbz#1503949 xauth password length limited to 64 bytes while XAUTH_MAX_PASS_LENGTH (128)


author: Paul Wouters <pwouters@redhat.com> - 3.22-3
changelog:
  - Resolves: rhbz#1475434 Add support for AES-GMAC for ESP (RFC-4543) to libreswan
  - Resolves: rhbz#1300759 Implement RFC-7427 Digital Signature authentication


author: Paul Wouters <pwouters@redhat.com> - 3.22-5
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [updated]
  - Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
  - Resolves: rhbz#1375776 [IKEv2 Conformance] Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA reques failed
  - Resolves: rhbz#1375750 SECCOMP support for libreswan [updated for libunbound syscalls]
  - Resolves: rhbz#1300763 Implement draft-ietf-ipsecme-split-dns for libreswan


author: Paul Wouters <pwouters@redhat.com> - 3.23-0.1.rc4
changelog:
  - Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
  - Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
  - Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
  - Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
  - Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
  - Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA


author: Paul Wouters <pwouters@redhat.com> - 3.23-2
changelog:
  - Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
  - Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]


author: Paul Wouters <pwouters@redhat.com> - 3.23-4
changelog:
  - Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1574456 Shared IKE SA leads to rekey interop issues
  - Resolves: rhbz#1574457 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted


author: Paul Wouters <pwouters@redhat.com> - 3.23-4
changelog:
  - Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1553406 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted
  - Resolves: rhbz#1572425 shared IKE SA leads to rekey interop issues


author: Paul Wouters <pwouters@redhat.com> - 3.25-1
changelog:
  - Resolves: rhbz#1591817 rebase libreswan to 3.25
  - Resolves: rhbz#1536404 CERT_PKCS7_WRAPPED_X509 error
  - Resolves: rhbz#1544143 ipsec newhostkey fails in FIPS mode when RSA key is generated
  - Resolves: rhbz#1574011 libreswan is missing a Requires: unbound-libs >= 1.6.6


author: Paul Wouters <pwouters@redhat.com> - 3.25-2
changelog:
  - Resolves: rhbz#1597322 Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors


author: Paul Wouters <pwouters@redhat.com> - 3.25-3
changelog:
  - Resolves: rhbz#1655440 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth


author: Paul Wouters <pwouters@redhat.com> - 3.25-4
changelog:
  - Resolves: rhbz#1660536 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
  - Resolves: rhbz#1660544 config: recursive include check doesn't work
  - Resolves: rhbz#1660542 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
  - Resolves: rhbz#1664244 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.1
changelog:
  - Resolves: rhbz#1665369 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.2
changelog:
  - Resolves: rhbz#1672921 - Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated bugfix]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.3
changelog:
  - Resolves: rhbz#1680483 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.4
changelog:
  - Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.5
changelog:
  - Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart [rhel-7.6.z] [updated]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.6
changelog:
  - Resolves: rhbz#1680483 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure [rhel-7.6.z] [updated]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.7
changelog:
  - Resolves: rhbz#1683577 Opportunistic IPsec instances of /32 groups or auto=start [updated for eclipsed handling]


author: Paul Wouters <pwouters@redhat.com> - 3.25-4.8
changelog:
  - Resolves: rhbz#1708060 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE [rhel-7.6.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-5
changelog:
  - Resolves: rhbz#1639404 Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
  - Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N
  - Resolves: rhbz#1629902 libreswan assertion failed when OAKLEY_KEY_LENGTH is zero for IKE using AES_CBC
  - Resolves: rhbz#1623279 [abrt] [faf] libreswan: strncpy(): /usr/libexec/ipsec/pluto killed by 11
  - Resolves: rhbz#1625303 config: recursive include check doesn't work
  - Resolves: rhbz#1664521 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits


author: Paul Wouters <pwouters@redhat.com> - 3.25-6
changelog:
  - Resolves: rhbz#1630355 Libreswan crash upon receiving ISAKMP_NEXT_D with appended ISAKMP_NEXT_N [updated]
  - Resolves: rhbz#1679735 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure


author: Paul Wouters <pwouters@redhat.com> - 3.25-7
changelog:
  - Resolves: rhbz#1673105 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart


author: Paul Wouters <pwouters@redhat.com> - 3.25-8
changelog:
  - Resolves: rhbz#1686991 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE


author: Paul Wouters <pwouters@redhat.com> - 3.25-8.1
changelog:
  - Resolves: rhbz#1746052 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire [rhel-7.7.z]


author: Paul Wouters <pwouters@redhat.com> - 3.25-9
changelog:
  - Resolves: rhbz#1724200 libreswan: XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire


author: Paul Wouters <pwouters@redhat.com> - 3.6-1
changelog:
  - Updated to version 3.6 (IKEv2, MODECFG, Cisco interop fixes)
  - Generate empty NSS db if none exists
  - FIPS update using /etc/system-fips
  - Provide: openswan-doc


author: Paul Wouters <pwouters@redhat.com> - 3.8-1
changelog:
  - Resolves: rhbz#CVE-2013-6467 
  - Resolves: rhbz#1043642 rebase to version 3.8
  - Resolves: rhbz#1029912 ipsec force-reload doesn't work
  - Resolves: rhbz#826261 Implement SHA384/512 support for Openswan
  - Resolves: rhbz#1039655 ipsec newhostkey generates false configuration


author: Paul Wouters <pwouters@redhat.com> - 3.8-3
changelog:
  - Resolves: rhbz#1069024  erroneous debug line with mixture [...]
  - Resolves: rhbz#1030939 update nss/x509 documents, don't load acerts
  - Resolves: rhbz#1058813 newhostkey returns zero value when it fails


author: Paul Moore <pmoore@redhat.com> - 1.0.0-0
changelog:
  - New upstream version
  - Remove verbose build patch as it is no longer needed
  - Enable _smp_mflags during build stage


author: Paul Moore <pmoore@redhat.com> - 2.2.1-1
changelog:
  - Removed '--disable-static' from the build to ensure that scmp_sys_resolver
    is self contained and resolve RPATH issues


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-1
changelog:
  - Update to upstream 
        * Fix userspace AVC handling of per-domain permissive mode.
  - Verify context is not null when passed into *setfilecon_raw


author: Miroslav Grepl <mgrepl@redhat.com> - 2.2.2-4
changelog:
  - Fix libselinux.spec file
  - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
  - Add Int_to_mcs function to generate MCS labels from integers.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-5
changelog:
  - Move selinux.go to /usr/lib64/golang/src/pkg/github.com/selinux/selinux.go
  - Add Int_to_mcs function to generate MCS labels from integers.


author: Dan Walsh <dwalsh@redhat.com> - 2.2.2-6
changelog:
  - Add additional go bindings for get*con calls
  - Add go bindings test command
  - Modify man pages of set*con calls to mention that they are thread specific
  Resolves:#1053122


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix setexecfilecon() to work better in a chroot (#1329931)
  - Fix typo in sefcontext_compile.8 (#1320062)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-4
changelog:
  - Clarify is_selinux_mls_enabled() description
  - Explain how to free policy type from selinux_getpolicytype()
  - Compare absolute pathname in matchpathcon -V
  - Add selinux_snapperd_contexts_path()
  - Modify audit2why analyze function to use loaded policy
  - Sort object files for deterministic linking order
  - Respect CC and PKG_CONFIG environment variable
  - Avoid mounting /proc outside of selinux_init_load_policy()
  - Fix multiple spelling errors


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Add missing av_permission values (#1025931)
  - Set an appropriate errno in booleans.c (#1402140)
  - Change matchpathcon usage to match with matchpathcon manpage (#1412797)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Fix location of selinuxfs mount point (#1321086)
  - Only mount /proc if necessary
  - procattr: return einval for <= 0 pid args
  - procattr: return error on invalid pid_t inpu


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-7
changelog:
  - Move handling of role audit records into the library
  - Patch stops semanage from removing user record while in use


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-10
changelog:
  - Do not write error message to screen when looking for previous record for auditing.
  - Add mls_range from user record if the MLS range is not specified by the seuser add record.
  - Error out if seuser or mls range is not specified when adding user records


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-14
changelog:
  - Cleanup handling of missing mls_range to fix problems with useradd -Z
  - Fix auditing of login record changes, roles were not working correctly.
  Resolves: #1018840


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-8
changelog:
  - Save linked policy, skip re-link when possible
  - Replace access(,F_OK) checks to make setuid programs work (#1186431)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-9
changelog:
  - Update semanage to allow runtime labeling of Infiniband Pkeys (#1466274)
  - Update semanage to allow runtime labeling of ibendports (#1466274)
  - Keep copy of file_contexts.homedirs in policy store (#1409813)
  - Add support for listing fcontext.homedirs file (#1409813)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-12
changelog:
  - Do not change file mode of seusers and users_extra (#1512639)
  - Improve warning for installing disabled module (#1337199)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-14
changelog:
  - Include user name in ROLE_REMOVE audit events (#1622045)
  - Improve "reset umask before creating directories"


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Sort object files for deterministic linking order
  - Support overriding Makefile RANLIB
  - Respect CC and PKG_CONFIG environment variable
  - Fix multiple spelling errors
  - genhomedircon: %{USERID} and %{USERNAME} support and code cleanups


author: Petr Lautrbach <plautrba@redhat.com> 2.5-4
changelog:
  - genhomedircon: add support for Development/Debug syntax
  - genhomedircon: generate contexts for logins mapped to the default user
  - Validate and compile file contexts before installing
  - Swap tcp and udp protocol numbers


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  	* filename_trans: use some better sorting to compare and merge
  	* coverity fixes
  	* implement default type policy syntax
  	* Fix memory leak issues found by Klocwork
  - Add CONTRAINT_NAMES to the kernel


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Correctly detect unknown classes in sepol_string_to_security_class
  - Sort object files for deterministic linking order
  - Fix neverallowxperm checking on attributes
  - Remove libsepol.map when cleaning
  - Add high-level language line marking support to CIL
  - Change logic of bounds checking to match change in kernel
  - Fix multiple spelling errors
  - Only apply bounds checking to source types in rules
  - Fix CIL and not add an attribute as a type in the attr_type_map
  - Build policy on systems not supporting DCCP protocol
  - Fix extended permissions neverallow checking
  - Fix CIL neverallow and bounds checking
  - Android.mk: Add -D_GNU_SOURCE to common_cflags


author: Petr Lautrbach <plautrba@redhat.com> 2.5-5
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6
changelog:
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-7
changelog:
  - Define cgroup_seclabel policy capability (rhbz#1493517)
  - Fix unitialized jmp and invalid dereference


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-8.1
changelog:
  - Define nnp_nosuid_transition policy capability (rhbz#1480519)
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - Allow runtime labeling of ibendports (rhbz#1464489)
  - Allow runtime labeling of Infiniband Pkeys (rhbz#1464489)
  - Add IB end port handling to CIL (rhbz#1464489)
  - Add ibendport ocontext handling (rhbz#1464489)
  - Add support for ibendportcon labels (rhbz#1464489)
  - Add Infiniband Pkey handling to CIL (rhbz#1464489)
  - Add ibpkey ocontext handling (rhbz#1464489)
  - Add support for ibpkeycon labels (rhbz#1464489)
  - Remove unused attribute on a used argument from avrule_read() (rhbz#1464489)
  - Add binary module support for xperms
  - Add support for converting extended permissions to CIL


author: kwizart < kwizart at gmail.com > - 2.2.2-2
changelog:
  - Fix http://bugzilla.redhat.com/415121
  - Add disable-static
  - Don't use makeinstall macro
  - Update License field


author: Kalev Lember <kalev@smartlink.ee> - 2.2.8-4
changelog:
  - Spec cleanup
  - Use macro for automatically calculating ftp directory name with
    first two digits of tarball version.
  - Dropped R: pkgconfig from -devel as it's now automatically added by rpm
  - Own /usr/share/doc/libsigc++-2.0/ dir and mark /usr/share/devhelp/ as %doc
  - Require base package from -doc subpackage
  - Drop unneeded doxygen and graphviz BRs


author: Peter Jones <pjones@redhat.com> - 2.3.3-6
changelog:
  - Pull in all the coverity fixes we sent upstream.  I had thought these
    made it in to this release; they did not, but the 2.4.0 release they are
    in is also the python 3 switchover, so we need these as patches.
    Related: rhbz#1463329


author: Peter Jones <pjones@redhat.com> - 2.3.3-8
changelog:
  - Fix smbios-sys-info-lite crashes when an asset tag is not set
    Resolves: rhbz#1562440
  - Fix vestigial c++ artifacts included in the package
    Resolves: rhbz#1562440


author: Tom Callaway <spot@fedoraproject.org> - 0.4.8-9
changelog:
  - mark symbols which conflict with RPM as "internal", resolves bz 864324
    Thanks to Michele Baldessari


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12.1
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)


author: Jaroslav Mracek <jmracek@redhat.com> - 0.6.34-3
changelog:
  - Make sure that targeted updates don't do reinstalls
  - Resolves: bug#1668256
  - Fix NULL pointer dereference (CVE-2018-20532, CVE-2018-20533)
  - Resolves: bug#1669562
  - Resolves: bug#1669576
  - Fix illegal address access in pool_whatprovides (CVE-2018-20534)
  - Resolves: bug#1670453


author: Milan Crha <mcrha@redhat.com> - 2.62.2-2
changelog:
  - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c: get_cookies() on empty hostnames
  - Resolves: #1598838


author: Jan Grulich <jgrulich@redhat.com> - 1.4.4-11.20101004cvs
changelog:
  - Fix global buffer overflow
    Resolves: bz#1301202

  - Fix improper handling of CSRC count and extension header length in RTP header
    Resolves: bz#1323705

  - Fix buffer overflow in application of crypto profiles
    Resolves: bz#1141897


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-9
changelog:
  - curl consumes too much memory during scp download (#1080459)
  - prevent a not-connected agent from closing STDIN (#1147717)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12
changelog:
  - session: avoid printing misleading debug messages (#1503294)
  - scp: send valid commands for remote execution (#1489733)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12.el7_6.1
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12.el7_6.3
changelog:
  - fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)


author: Kamil Dudka <kdudka@redhat.com> 1.4.2-3
changelog:
  - Fix basic functionality of libssh2 in FIPS mode
  - Skip SELinux-related quirks on recent distros to prevent a test-suite failure


author: Kamil Dudka <kdudka@redhat.com> 1.4.2-4
changelog:
  - examples: use stderr for messages, stdout for data (upstream commit b31e35ab)
  - Update libssh2_hostkey_hash(3) man page (upstream commit fe8f3deb)


author: Paul Howarth <paul@city-fan.org> 1.4.3-1
changelog:
  - Update to 1.4.3
    - compression: add support for zlib@openssh.com
    - sftp_read: return error if a too large package arrives
    - libssh2_hostkey_hash.3: update the description of return value
    - Fixed MSVC NMakefile
    - examples: use stderr for messages, stdout for data
    - openssl: do not leak memory when handling errors
    - improved handling of disabled MD5 algorithm in OpenSSL
    - known_hosts: Fail when parsing unknown keys in known_hosts file
    - configure: gcrypt doesn't come with pkg-config support
    - session_free: wrong variable used for keeping state
    - libssh2_userauth_publickey_fromfile_ex.3: mention publickey == NULL
    - comp_method_zlib_decomp: handle Z_BUF_ERROR when inflating
  - Drop upstreamed patches


author: Kamil Dudka <kdudka@redhat.com> 1.8.0-2
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
  - fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
  - fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Tony Asleson <tasleson@redhat.com> - 1.0.0-3
changelog:
  - Use new systemd rpm macros
    https://bugzilla.redhat.com/show_bug.cgi?id=1149010
  - Place config file in correct tmpfiles.d directory
    https://bugzilla.redhat.com/show_bug.cgi?id=1122087


author: Tony Asleson <tasleson@redhat.com> - 1.0.0-4
changelog:
  - Fix rpmdiff, error for path names
    https://bugzilla.redhat.com/show_bug.cgi?id=1149368
  - Fix rpmdiff, multilib regressions
    https://bugzilla.redhat.com/show_bug.cgi?id=1149371


author: Tony Asleson <tasleson@redhat.com> 1.2.3-1
changelog:
  - New upstream release 
  - New sub-pacakges:
      * libstoragemgmt-megaraid-plugin
      * libstoragemgmt-hpsa-plugin
  - Add bash-completion script for lsmcli
  - Replace the hardcoded udev path with /usr/lib/udev/rules.d.
  - Mark /run/lsm and /run/lsm/ipc as %ghost folder.
  - Add 'Requires(post)' and 'Requires(postun)' to plugins in order
    to make sure plugin is installed after libstoragemgmt and removed before
    libstoragemgmt.


author: Tony Asleson <tasleson@redhat.com> 1.2.3-3
changelog:
  - Megaraid fixes
    * https://bugzilla.redhat.com/show_bug.cgi?id=1238554
    * https://bugzilla.redhat.com/show_bug.cgi?id=1238582
    * https://bugzilla.redhat.com/show_bug.cgi?id=1238566
  - Command line exit code fix:
    * https://bugzilla.redhat.com/show_bug.cgi?id=1238737


author: Gris Ge <fge@redhat.com> 1.4.0-1
changelog:
  - Add Python3 support.
  - New sub rpm package python3-libstoragemgmt.
  - Add support of lmiwbem.
  - Allow plugin test to be run concurrently.
  - Bug fixes:
      * Fix megaraid plugin for dell PERC.
      * Fix local disk rotation speed query on NVMe disk.
      * Fix lsmcli incorrect try-expect on local disk query.
      * Fix all the gcc compile warnings.
      * Fix the obsolete usage of AC_OUTPUT in configure.ac.
  - Library adds:
      * Query serial of local disk:
          lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
      * Query LED status of local disk:
          lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
      * Query link speed of local disk:
          lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()


author: Gris Ge <fge@redhat.com> - 1.5.0-2
changelog:
  - Fix multilib confliction of nfs-plugin by move binrary file to
    another subpackage libstoragemgmt-nfs-plugin-clibs


author: Tony Asleson <tasleson@redhat.com> - 1.8.1-2
changelog:
  - https://bugzilla.redhat.com/show_bug.cgi?id=1872745
  - https://bugzilla.redhat.com/show_bug.cgi?id=1903665


author: Simo Sorce <ssorce@redhat.com> - 2.0.6-1
changelog:
  - New upstream release
  - Fixes various bugs with talloc_free_children and freeing complex
    hierarchies with many siblinbgs.


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.8-1
changelog:
  - Rebase to libtalloc 2.1.8
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.9-1
changelog:
  - Rebase to libtalloc 2.1.9
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.10-1
changelog:
  - Rebase to libtalloc 2.1.10
  - Resolves: rhbz#1470053 - Rebase libtalloc to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.14-1
changelog:
  - Rebase to libtalloc 2.1.14
  - Resolves: rhbz#1658747 - Rebase libtalloc to version 2.1.14 for Samba


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.10-15
changelog:
  - New upstream release 1.2.10
  - Remove upstreamed patches
  - Provides functionality for the upcoming Samba 4 beta


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.6-2
changelog:
  - Resolves: rhbz#1241015 - tdb deadlocks if you acquire allrecord_lock
                             and start two traverses


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.12-2
changelog:
  - Resolves: rhbz#1441231 - The tdb robust mutexes runtime check is not thread safe and ends in a deadlock


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.15-1
changelog:
  - Resolves: rhbz#1470049 - Rebase libtdb to enable samba rebase to
                             version 4.7.x


author: Marcelo Ricardo Leitner <mleitner@redhat.com> - 1.25-2
changelog:
  - Updated to 1.25 [1286840 1286063]
  - Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]


author: Marcelo Ricardo Leitner <mleitner@redhat.com> - 1.25-4
changelog:
  - Added patches to avoid hung on shutdown [1330550]
  - Added patch to fix an out-of-bound write with zero-length hardware
    address [1286840]


author: Xin Long <lxin@redhat.com> - 1.25-5
changelog:
  - Added patch to escape some sensitive characters [1383997]
  - Added patch to check port link_up when a port is added for lb runner
    [1393430]


author: Xin Long <lxin@redhat.com> - 1.27-5
changelog:
  - Added patch to fix runner.sys_prio default in man docs [1533813]
  - Added patch to empty LDFLAGS before checking for libnl3 in configure.ac [1533847]
  - Added patch to not crash when trying to print unregistered device name [1563155]


author: Xin Long <lxin@redhat.com> - 1.27-7
changelog:
  - Added an option to force log output to stdout, stderr or syslog [1596917]
  - Fixed s32/u32 data storage on big endian [1545574]
  - Documented ARP Ping link_watch.vlanid option [1645169]
  - Sent LACPDU when port state transitions from DEFAULT to CURRENT [1645169]


author: Xin Long <lxin@redhat.com> - 1.29-1
changelog:
  - man teamd.conf: update some parameter default values [1732586]
  - 1.29 release
  - teamd: improve the error output for non-integer port prio
  - teamd: return 0 if tdport doesn't exist in teamd_config_port_set
  - teamd: add port_master_ifindex_changed for link_watch_port_watch_ops [1720137]
  - initscripts: fix if/fi align
  - teamd: fix a json object memleak in get_port_obj() [1704451]
  - libteam: set netlink event socket as non-blocking [1680655]
  - libteam: double NETLINK_RCVBUF to fix -ENOMEM error
  - teamd: add a default value 1000 for link_watch.interval
  - teamd: use enabled option_changed to sync enabled to link_up for lb runner [1629670]
  - teamd: tdport has to exist if item->per_port is set in __find_by_item_path
  - teamd: remove port if adding fails
  - teamd: lacp: update port state according to partner's sync bit
  - man: fix runner.min_ports default value
  - teamd: lw: nsna_ping: only send ns on enabled port [1730558]
  - teamd: lw: arp_ping: only check arp reply message
  - teamd: config: update local prio to kernel [1714440]
  - teamnl: update help message


author: Xin Long <lxin@redhat.com> - 1.29-2
changelog:
  - teamd/lacp: fix segfault due to NULL pointer dereference [1758072]
  - teamd: fix build error in expansion of macro teamd_log_dbgx [1758072]
  - teamd: update ctx->hwaddr after setting team dev to new hwaddr [1772799]
  - libteam: wapper teamd_log_dbg with teamd_log_dbgx [1758072]


author: Jiri Pirko <jpirko@redhat.com> - 1.9-8
changelog:
  - teamd: fixed couple comments [1067851]
  - teamd: update hwaddr when changing team's macaddr [1067851]
  - redhat: fix boolean types in example 2 [1067851]


author: Jiri Pirko <jpirko@redhat.com> - 1.9-13
changelog:
  - teamdctl: add command for easy port presention checking [1081214]
  - initscripts: do not try to re-add port if it is already there [1081214]


author: Jiri Pirko <jpirko@redhat.com> - 1.9-14
changelog:
  - teamd_link_watch: allow to send ARP probes if no source_host is specified [1078993]
  - bond2team: do not guess source_host option [1079059]
  - teamd_link_watch: specify "missed_max" option default value [1079059]
  - man: correct type of "*_host" options [1078993]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.18-2
changelog:
  - Apply a patch from upstream to fix tevent_poll's additional_flags
    on 32bit architectures
  - Resolves: rhbz#975490


author: Stephen Gallagher <sgallagh@redhat.com> - 0.9.18-3
changelog:
  - Make the dependency requirements arch-specific
  - Remove ancient, unused patches
  - Remove python variables that are not needed on modern systems


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-2
changelog:
  - Allow building with RHEL-7.0 libtalloc
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-3
changelog:
  - BuildRequire the minimal applicable libtalloc version
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.31-2
changelog:
  - Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                         heavy threaded load [rhel-7.4.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.33-1
changelog:
  - Resolves: #1470054 - Rebase libtevent to enable samba rebase to version
                         4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.34-1
changelog:
  - Resolves: #1512414 - tevent can cause a Samba file corruption bug under
                         heavy threaded load


author: Hans de Goede <hdegoede@redhat.com> - 1:1.1.1-6
changelog:
  - run autoreconf for aarch64 support (#925898)
  - add a patch from upstream fixing a crash when compiled with gcc-4.8 (#959001)
  - cleanup spec-file


author: Petr Hracek <phracek@redhat.com> - 4.0.3-8
changelog:
  - tiff2ps manual page doesn't contain help for all options
  - tiffcp options differ in program help and manual page
  Resolves: #510240
  Resolves: #510258


author: Petr Hracek <phracek@redhat.com> - 4.0.3-10
changelog:
  - Resolves: #996827  CVE-2013-4231 CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
    libtiff various flaws


author: Nikola Forró <nforro@redhat.com> - 4.0.3-21
changelog:
  - Remove patches for CVEs:
    CVE-2014-8127, CVE-2014-8129, CVE-2014-8130,
    CVE-2014-9330, CVE-2015-7554, CVE-2015-8665,
    CVE-2015-8683, CVE-2015-8781, CVE-2015-8784
  - Add patches for CVEs:
    CVE-2016-3632, CVE-2016-3945, CVE-2016-3990,
    CVE-2016-3991, CVE-2016-5320
  - Update patches for CVEs:
    CVE-2014-9655, CVE-2015-1547, CVE-2015-8668
  - Related: #1299920


author: Nikola Forró <nforro@redhat.com> - 4.0.3-25
changelog:
  - Add patches for CVEs:
    CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,
    CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,
    CVE-2015-8784
  - Related: #1299920


author: Nikola Forró <nforro@redhat.com> - 4.0.3-21
changelog:
  - Remove patches for CVEs:
    CVE-2014-8127, CVE-2014-8129, CVE-2014-8130,
    CVE-2014-9330, CVE-2015-7554, CVE-2015-8665,
    CVE-2015-8683, CVE-2015-8781, CVE-2015-8784
  - Add patches for CVEs:
    CVE-2016-3632, CVE-2016-3945, CVE-2016-3990,
    CVE-2016-3991, CVE-2016-5320
  - Update patches for CVEs:
    CVE-2014-9655, CVE-2015-1547, CVE-2015-8668
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-25
changelog:
  - Add patches for CVEs:
    CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,
    CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,
    CVE-2015-8784
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-26
changelog:
  - Add patches for CVEs:
    CVE-2016-9533, CVE-2016-9534, CVE-2016-9535,
    CVE-2016-9536, CVE-2016-9537, CVE-2016-9540,
    CVE-2016-5652, CVE-2015-8870
  - Resolves: #1412080


author: Nikola Forró <nforro@redhat.com> - 4.0.3-26
changelog:
  - Add patches for CVEs:
    CVE-2016-9533, CVE-2016-9534, CVE-2016-9535,
    CVE-2016-9536, CVE-2016-9537, CVE-2016-9540,
    CVE-2016-5652, CVE-2015-8870
  - Resolves: #1412081


author: Nikola Forró <nforro@redhat.com> - 4.0.3-28
changelog:
  - Fix CVE-2016-3186
  - Resolves: #1319503
  - Fix CVE-2018-7456
  - Resolves: #1561318
  - Fix CVE-2018-8905
  - Resolves: #1574548
  - Fix CVE-2018-10779
  - Resolves: #1598503
  - Fix CVE-2018-10963
  - Resolves: #1598726
  - Fix CVE-2018-12900
  - Resolves: #1600430
  - Fix CVE-2018-17100
  - Resolves: #1632578
  - Fix CVE-2018-17101
  - Resolves: #1632579
  - Fix CVE-2018-18557
  - Resolves: #1647737
  - Fix CVE-2018-18661
  - Resolves: #1647965


author: Steve Dickson <steved@redhat.com> 0.2.4-0.7
changelog:
  - Backported upstream debugging (bz 1273159)
  - Fixed memory leak in svc_vc_create (bz 1276685)
  - Fixed memory leaks in server-side GSS authenticator (bz 1282488)


author: Steve Dickson <steved@redhat.com> 0.2.4-0.16
changelog:
  - getnetconfig.c: fix a BAD_FREE (CWE-763) (bz 1631609)
  - Fix EOF detection on non-blocking socket (bz 1331554)


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.2-14
changelog:
  - allow root to copy files into NFS in libtoolize (#740079)
  - pre-filter sed's input by dd (#636045)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-2
changelog:
  - lu-Fix-rpmdiff-failure.patch [bz#1229359]
  - lu-Fix-buffer-overflow-reported-by-Coverity.patch [bz#1233114]
  - Resolves: bz#1229359
    (Fix multilib support)
  - Resolves: bz#1233114
    (fix off-by-one in dwarf_to_unw_regnum (CVE-2015-3239))


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-5
changelog:
  - Version bumped [bz#1238864]
  - Resolves: bz#1238864
    libunwind: bump version to win against existing branches


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-5.el7_2.2
changelog:
  - Fix update from EPEL version [bz#1289950]
  - Resolves: bz#1289950
    (libunwind in RHEL 7.2 has a smaller release than the last libunwind package in EPEL-7)


author: Hans de Goede <hdegoede@redhat.com> - 1.0.11-2
changelog:
  - Fix URL to actually point to libusbx
  - Improve description to explain the relation between libusbx and libusb
  - Build the examples (to test linking, they are not packaged)


author: Miloslav Trmač <mitr@redhat.com> - 0.58-2
changelog:
  - Always use secure_getenv() or __secure_getenv(), fail build if neither is
    available.  Patch by Viktor Hercinger <vhercing@redhat.com>.


author: Doug Ledford <dledford@redhat.com> - 1.1.0.237-2
changelog:
  - Some of the scripts are missing the execute bit, fix that
  - Clean up the check script to be more appropriate for in-box use
  - Resolves: bz1182413, bz1182417


author: Jarod Wilson <jarod@redhat.com> - 2.0.1-1
changelog:
  - Update to libusnic_verbs v2.0.1 and usnic-tools v1.1.0.0
  - Use actual upstream tarballs
  - Call usnic-tools usnic-tools instead of libusnic_verbs-utils
  - Resolves: bz1281635


author: Jarod Wilson <jarod@redhat.com> - 2.0.1-3
changelog:
  - Add missing Requires: libusnic_verbs to usnic-tools sub-package
  - Bump to usnic-tools v1.1.1.0, drop patch that was merged upstream
  - BuildRequires: libibverbs v1.2.0 or later now, and infinipath-psm-devel
  - Related: bz1096997


author: Simone Caronni <negativo17@gmail.com> - 0.6-2
changelog:
  - Enable documentation by default.
  - Clean up spec file a bit; remove el5 tags.
  - Let %doc find the proper location for the documentation.


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.1-2
changelog:
  - Resolves rhbz #1253829 - fix 3 CVEs:
   - CVE-2015-5198: libvdpau incorrect check for security transition
   - CVE-2015-5199: libvdpau directory traversal in dlopen
   - CVE-2015-5200: libvdpau vulnerability in trace functionality


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-21
changelog:
  - util: Correct the NUMA node range checking (rhbz#1045958)
  - storage: Add document for possible problem on volume detection (rhbz#726797)
  - storage: Fix autostart of pool with "fc_host" type adapter (rhbz#726797)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-22
changelog:
  - Add a read/write lock implementation (rhbz#1034807)
  - Push nwfilter update locking up to top level (rhbz#1034807)
  - utils: Introduce functions for kernel module manipulation (rhbz#1045124)
  - virCommand: Introduce virCommandSetDryRun (rhbz#1045124)
  - tests: Add test for new virkmod functions (rhbz#1045124)
  - Honor blacklist for modprobe command (rhbz#1045124)
  - qemu: Be sure we're using the updated value of backend during hotplug (rhbz#1056360)
  - network: Permit upstream forwarding of unqualified DNS names (rhbz#1061099)
  - network: Only prevent forwarding of DNS requests for unqualified names (rhbz#1061099)
  - network: Change default of forwardPlainNames to 'yes' (rhbz#1061099)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-23
changelog:
  - Generate a valid imagelabel even for type 'none' (rhbz#1061657)
  - qemu: keep pre-migration domain state after failed migration (rhbz#1057407)
  - schema: Fix guest timer specification schema according to the docs (rhbz#1056205)
  - conf: Enforce supported options for certain timers (rhbz#1056205)
  - qemu: hyperv: Add support for timer enlightenments (rhbz#1056205)
  - build: correctly check for SOICGIFVLAN GET_VLAN_VID_CMD command (rhbz#1062665)
  - util: Add "shareable" field for virSCSIDevice struct (rhbz#957292)
  - util: Fix the indention (rhbz#957292)
  - qemu: Don't fail if the SCSI host device is shareable between domains (rhbz#957292)
  - util: Add one argument for several scsi utils (rhbz#957292)
  - tests: Add tests for scsi utils (rhbz#957292)
  - qemu: Fix the error message for scsi host device's shareable checking (rhbz#957292)
  - util: Accept test data path for scsi device's sg_path (rhbz#957292)
  - tests: Modify the scsi util tests (rhbz#957292)
  - event: move event filtering to daemon (regression fix) (rhbz#1047964)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-24
changelog:
  - Block info query: Add check for transient domain (rhbz#1065531)
  - Fix minor typos in messages and docs (rhbz#1045643)
  - LXC: Free variable vroot in lxcDomainDetachDeviceHostdevUSBLive() (rhbz#1045643)
  - LXC: free dst before lxcDomainAttachDeviceDiskLive returns (rhbz#1045643)
  - maint: fix comment typos (rhbz#1045643)
  - storage: avoid short reads while chasing backing chain (rhbz#1045643)
  - Don't block use of USB with containers (rhbz#1045643)
  - Fix path used for USB device attach with LXC (rhbz#1045643)
  - Record hotplugged USB device in LXC live guest config (rhbz#1045643)
  - Fix reset of cgroup when detaching USB device from LXC guests (rhbz#1045643)
  - Disks are always block devices, never character devices (rhbz#1045643)
  - Move check for cgroup devices ACL upfront in LXC hotplug (rhbz#1045643)
  - Add virFileMakeParentPath helper function (rhbz#1045643)
  - Add helper for running code in separate namespaces (rhbz#1045643)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC shutdown/reboot code (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC disk hotplug (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC USB hotplug (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC block hostdev hotplug (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC chardev hostdev hotplug (CVE-2013-6456)
  - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC hotunplug code (CVE-2013-6456)
  - Ignore additional fields in iscsiadm output (rhbz#1067173)
  - qemuBuildNicDevStr: Set vectors= on Multiqueue (rhbz#1066209)
  - Don't depend on syslog.service (rhbz#1032695)
  - libvirt-guests: Run only after libvirtd (rhbz#1032695)
  - virSystemdCreateMachine: Set dependencies for slices (rhbz#1032695)
  - libvirt-guests: Wait for libvirtd to initialize (rhbz#1032695)
  - virNetServerRun: Notify systemd that we're accepting clients (rhbz#1032695)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-25
changelog:
  - maint: fix comma style issues: conf (rhbz#1032370)
  - Allow <source> for type=block to have no dev (rhbz#1032370)
  - Allow LUN type disks to have no source (rhbz#1032370)
  - virsh-volume: Unify strigification of volume type (rhbz#1032370)
  - conf: Refactor virDomainDiskSourcePoolDefParse (rhbz#1032370)
  - conf: Split out code to parse the source of a disk definition (rhbz#1032370)
  - conf: Rename virDomainDiskHostDefFree to virDomainDiskHostDefClear (rhbz#1032370)
  - conf: Refactor virDomainDiskSourceDefParse (rhbz#1032370)
  - storage: fix RNG validation of gluster via netfs (rhbz#1032370)
  - maint: fix comment typos. (rhbz#1032370)
  - storage: use valid XML for awkward volume names (rhbz#1032370)
  - build: Don't fail on '&lt; ' or '&gt; ' with old xmllint (rhbz#1032370)
  - storage: allow interleave in volume XML (rhbz#1032370)
  - storage: expose volume meta-type in XML (rhbz#1032370)
  - storage: initial support for linking with libgfapi (rhbz#1032370)
  - storage: document existing pools (rhbz#1032370)
  - storage: document gluster pool (rhbz#1032370)
  - storage: implement rudimentary glusterfs pool refresh (rhbz#1032370)
  - storage: add network-dir as new storage volume type (rhbz#1032370)
  - storage: improve directory support in gluster pool (rhbz#1032370)
  - storage: improve allocation stats reported on gluster files (rhbz#1032370)
  - storage: improve handling of symlinks in gluster (rhbz#1032370)
  - storage: probe qcow2 volumes in gluster pool (rhbz#1032370)
  - storage: fix typo in previous patch (rhbz#1032370)
  - conf: Export virStorageVolType enum helper functions (rhbz#1032370)
  - test: Implement fake storage pool driver in qemuxml2argv test (rhbz#1032370)
  - storage: reduce number of stat calls (rhbz#1032370)
  - storage: use simpler 'char *' (rhbz#1032370)
  - storage: refactor backing chain division of labor (rhbz#1032370)
  - storage: always probe type with buffer (rhbz#1032370)
  - storage: don't read storage volumes in nonblock mode (rhbz#1032370)
  - storage: skip selinux cleanup when fd not available (rhbz#1032370)
  - storage: use correct type for array count (rhbz#1032370)
  - storage: allow interleave in pool XML (rhbz#1032370)
  - qemuxml2argv: Add test to verify correct usage of disk type="volume" (rhbz#1032370)
  - qemuxml2argv: Add test for disk type='volume' with iSCSI pools (rhbz#1032370)
  - tests: Fix comment for fake storage pool driver (rhbz#1032370)
  - conf: Support disk source formatting without needing a virDomainDiskDefPtr (rhbz#1032370)
  - conf: Clean up virDomainDiskSourceDefFormatInternal (rhbz#1032370)
  - conf: Split out seclabel formating code for disk source (rhbz#1032370)
  - conf: Export disk source formatter and parser (rhbz#1032370)
  - snapshot: conf: Use common parsing and formatting functions for source (rhbz#1032370)
  - snapshot: conf: Fix NULL dereference when <driver> element is empty (rhbz#1032370)
  - conf: Add functions to copy and free network disk source definitions (rhbz#1032370)
  - qemu: snapshot: Detect internal snapshots also for sheepdog and RBD (rhbz#1032370)
  - conf: Add helper do clear disk source authentication struct (rhbz#1032370)
  - qemu: snapshot: Touch up error message (rhbz#1032370)
  - qemu: snapshot: Add functions similar to disk source pool translation (rhbz#1032370)
  - qemu: Refactor qemuTranslateDiskSourcePool (rhbz#1032370)
  - qemu: Split out formatting of network disk source URI (rhbz#1032370)
  - qemu: Simplify call pattern of qemuBuildDriveURIString (rhbz#1032370)
  - qemu: Use qemuBuildNetworkDriveURI to handle http/ftp and friends (rhbz#1032370)
  - qemu: Migrate sheepdog source generation into common function (rhbz#1032370)
  - qemu: Split out NBD command generation (rhbz#1032370)
  - qemu: Unify formatting of RBD sources (rhbz#1032370)
  - qemu: Refactor disk source string formatting (rhbz#1032370)
  - qemu: Clear old translated pool source (rhbz#1032370)
  - qemu: snapshots: Declare supported and unsupported snapshot configs (rhbz#1032370)
  - domainsnapshotxml2xmltest: Clean up labels and use bool instead of int (rhbz#1032370)
  - domainsnapshotxml2xmltest: Allow for better testing of snapshots (rhbz#1032370)
  - domainsnapshotxml2xml: Move files with conflicting names (rhbz#1032370)
  - domainsnapshotxml2xmltest: Add existing files as new tests (rhbz#1032370)
  - domainsnapshotxml2xmltest: Add test case for empty driver element (rhbz#1032370)
  - qemu: Fix indentation in qemuTranslateDiskSourcePool (rhbz#1032370)
  - qemu: snapshot: Fix incorrect disk type for auto-generated disks (rhbz#1032370)
  - storage: fix omitted slash in gluster volume URI (rhbz#1032370)
  - virsh: domain: Fix undefine with storage of 'volume' disks (rhbz#1032370)
  - snapshot: schema: Split out snapshot disk driver definition (rhbz#1032370)
  - storage: Add gluster pool filter and fix virsh pool listing (rhbz#1032370)
  - storage: fix bogus target in gluster volume xml (rhbz#1032370)
  - storage: Improve error message when a storage backend is missing (rhbz#1032370)
  - storage: Break long lines and clean up spaces in storage backend header (rhbz#1032370)
  - storage: Support deletion of volumes on gluster pools (rhbz#1032370)
  - qemu: snapshot: Avoid libvirtd crash when qemu crashes while snapshotting (rhbz#1032370)
  - qemu: snapshot: Forbid snapshots when backing is a scsi passthrough disk (rhbz#1034993)
  - qemu: Avoid crash in qemuDiskGetActualType (rhbz#1032370)
  - snapshot: Add support for specifying snapshot disk backing type (rhbz#1032370)
  - conf: Move qemuDiskGetActualType to virDomainDiskGetActualType (rhbz#1032370)
  - conf: Move qemuSnapshotDiskGetActualType to virDomainSnapshotDiskGetActualType (rhbz#1032370)
  - storage: Add file storage APIs in the default storage driver (rhbz#1032370)
  - storage: add file functions for local and block files (rhbz#1032370)
  - storage: Add storage file backends for gluster (rhbz#1032370)
  - qemu: Switch snapshot deletion to the new API functions (rhbz#1032370)
  - qemu: snapshot: Use new APIs to detect presence of existing storage files (rhbz#1032370)
  - qemu: snapshot: Add support for external active snapshots on gluster (rhbz#1032370)
  - storage: Fix build with older compilers afeter gluster snapshot series (rhbz#1032370)
  - storage: gluster: Don't leak private data when storage file init fails (rhbz#1032370)
  - spec: Use correct versions of libgfapi in RHEL builds (rhbz#1032370)
  - spec: Fix braces around macros (rhbz#1032370)
  - build: use --with-systemd-daemon as configure option (rhbz#1032695)
  - spec: require device-mapper-devel for storage-disk (rhbz#1032695)
  - spec: make systemd_daemon usage configurable (rhbz#1032695)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-26
changelog:
  - virNetDevVethCreate: Serialize callers (rhbz#1014604)
  - qemuBuildNicDevStr: Adapt to new advisory on multiqueue (rhbz#1071888)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-27
changelog:
  - spec: Let translations be properly updated (rhbz#1030368)
  - Update translation to supported languages (rhbz#1030368)
  - Add a mutex to serialize updates to firewall (rhbz#1074003)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-28
changelog:
  - qemu: Forbid "sgio" support for SCSI generic host device (rhbz#957292)
  - qemu: monitor: Fix invalid parentheses (rhbz#1075973)
  - qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1076503)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-29
changelog:
  - nwfilter: Increase buffer size for libpcap (rhbz#1078347)
  - nwfilter: Display pcap's error message when pcap setup fails (rhbz#1078347)
  - nwfilter: Fix double free of pointer (rhbz#1071181)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-29.el7_0.1
changelog:
  - LSN-2014-0003: Don't expand entities when parsing XML (CVE-2014-0179)
  - virNetClientSetTLSSession: Restore original signal mask (rhbz#1112689)
  - Don't use AI_ADDRCONFIG when binding to wildcard addresses (rhbz#1112692)
  - qemu: Unlock the NWFilter update lock by leaving via the cleanup label (rhbz#1112690)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-29.el7_0.2
changelog:
  - qemu: split out cpuset.mems setting (rhbz#1135871)
  - qemu: leave restricting cpuset.mems after initialization (rhbz#1135871)
  - qemu: blkiotune: Use correct definition when looking up disk (CVE-2014-3633)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-29.el7_0.4
changelog:
  - qemu: blockcopy: Don't remove existing disk mirror info (rhbz#1149078)
  - qemu: copy: Accept 'format' parameter when copying to a non-existing img (rhbz#1149078)
  - qemu: reject rather than hang on blockcommit of active layer (rhbz#1150379)
  - CVE-2014-7823: dumpxml: security hole with migratable flag (CVE-2014-7823)
  - Fix crash when saving a domain with type none dac label (rhbz#1171124)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-29.el7_0.5
changelog:
  - conf: Format interface's driver more frequently (rhbz#1183447)
  - qemu: Factor out body of qemuDomainGetMetadata for universal use (rhbz#1184929)
  - qemu: Factor out body of qemuDomainSetMetadata for universal use (rhbz#1184929)
  - conf: Factor out setting of metadata to simplify code (rhbz#1184929)
  - util: Add helper to convert libxml2 nodes to a string (rhbz#1184929)
  - virsh-domain: use virXMLNodeToString instead of xmlNodeDump (rhbz#1184929)
  - virsh-domain: Add command to allow modifications of XML metadata (rhbz#1184929)
  - conf: Add support for requesting of XML metadata via the API (rhbz#1184929)
  - conf: allow to add XML metadata using the virDomainSetMetadata api (rhbz#1184929)
  - lib: Don't force the key argument when deleting metadata (rhbz#1184929)
  - lxc: Add metadata modification APIs (rhbz#1184929)
  - test: Add <metadata> support into the test driver (rhbz#1184929)
  - tests: Add metadata tests (rhbz#1184929)
  - conf: Don't corrupt metadata on OOM (rhbz#1184929)
  - conf: Avoid false positive of uninitialized variable use (rhbz#1184929)
  - virsh: Don't shadow global variable "remove" in cmdMetadata (rhbz#1184929)
  - metadata: track title edits across libvirtd restart (rhbz#1184929)
  - conf: Improve metadata type verification (rhbz#1184929)
  - Fix possible memory leak in util/virxml.c (rhbz#1184929)
  - util: check for an illegal character in a XML namespace prefix (rhbz#1184929)
  - Fix libvirtd crash when removing metadata (rhbz#1184929)


author: Jiri Denemark <jdenemar@redhat.com> - 1.1.1-29.el7_0.6
changelog:
  - Add invariant TSC cpu flag (rhbz#1185458)
  - cpu_x86: Resolve Coverity RESOURCE_LEAK (rhbz#1185458)
  - Don't include non-migratable features in host-model (rhbz#1185458)
  - Fix leak in x86UpdateHostModel (rhbz#1185458)
  - Also filter out non-migratable features out of host-passthrough (rhbz#1185458)
  - man: virsh: Add man page for "virsh metadata" (rhbz#1184929)
  - virsh: man: Crosslink "desc" and "metadata" sections (rhbz#1184929)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-5
changelog:
  - numa_conf: Introduce virDomainNumaGetMaxCPUID (rhbz#1176020)
  - virDomainDefParseXML: Check for malicious cpu ids in <numa/> (rhbz#1176020)
  - conf: more useful error message when pci function is out of range (rhbz#1004596)
  - qemu: Fix reporting of physical capacity for block devices (rhbz#1250982)
  - network: verify proper address family in updates to <host> and <range> (rhbz#1184736)
  - rpc: Remove keepalive_required option (rhbz#1247087)
  - virNetDevBandwidthParseRate: Reject negative values (rhbz#1022292)
  - domain: Fix crash if trying to live update disk <serial> (rhbz#1007228)
  - qemu: fail on attempts to use <filterref> for non-tap network connections (rhbz#1180011)
  - network: validate network NAT range (rhbz#985653)
  - conf: Don't try formating non-existing addresses (rhbz#985653)
  - cpu: Rename {powerpc, ppc} => ppc64 (filesystem) (rhbz#1250977)
  - cpu: Rename {powerpc, ppc} => ppc64 (exported symbols) (rhbz#1250977)
  - cpu: Rename {powerpc, ppc} => ppc64 (internal symbols) (rhbz#1250977)
  - cpu: Indentation changes in the ppc64 driver (rhbz#1250977)
  - cpu: Mark driver functions in ppc64 driver (rhbz#1250977)
  - cpu: Simplify NULL handling in ppc64 driver (rhbz#1250977)
  - cpu: Simplify ppc64ModelFromCPU() (rhbz#1250977)
  - cpu: Reorder functions in the ppc64 driver (rhbz#1250977)
  - cpu: Remove ISA information from CPU map XML (rhbz#1250977)
  - tests: Remove unused file (rhbz#1250977)
  - tests: Improve result handling in cpuTestGuestData() (rhbz#1250977)
  - cpu: Never skip CPU model name check in ppc64 driver (rhbz#1250977)
  - cpu: CPU model names have to match on ppc64 (rhbz#1250977)
  - cpu: Use ppc64Compute() to implement ppc64DriverCompare() (rhbz#1250977)
  - tests: Temporarily disable ppc64 cpu tests (rhbz#1250977)
  - cpu: Align ppc64 CPU data with x86 (rhbz#1250977)
  - cpu: Support multiple PVRs in the ppc64 driver (rhbz#1250977)
  - cpu: Simplify ppc64 part of CPU map XML (rhbz#1250977)
  - cpu: Parse and use PVR masks in the ppc64 driver (rhbz#1250977)
  - cpu: Add POWER8NVL information to CPU map XML (rhbz#1250977)
  - cpu: Implement backwards compatibility in the ppc64 driver (rhbz#1250977)
  - cpu: Forbid model fallback in the ppc64 driver (rhbz#1250977)
  - tests: Re-enable ppc64 cpu tests (rhbz#1250977)
  - tests: Add a bunch of cpu test case for ppc64 (rhbz#1250977)
  - cpu: Fix segfault in the ppc64 driver (rhbz#1250977)
  - qemu: Fix segfault when parsing private domain data (rhbz#1162947)
  - conf: Pass private data to Parse function of XML options (rhbz#1162947)
  - qemu: Keep numad hint after daemon restart (rhbz#1162947)
  - qemu: Use numad information when getting pin information (rhbz#1162947)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-6
changelog:
  - api: Remove check on iothread_id arg in virDomainPinIOThread (rhbz#1251886)
  - api: Adjust comment for virDomainAddIOThread (rhbz#1251886)
  - qemu: Add check for invalid iothread_id in qemuDomainChgIOThread (rhbz#1251886)
  - conf: Check for attach disk usage of iothread=0 (rhbz#1253108)
  - virNetDevBandwidthUpdateRate: turn class_id into integer (rhbz#1252473)
  - bridge_driver: Introduce networkBandwidthChangeAllowed (rhbz#1252473)
  - bridge_driver: Introduce networkBandwidthUpdate (rhbz#1252473)
  - qemuDomainSetInterfaceParameters: Use new functions to update bandwidth (rhbz#1252473)
  - cpu: Don't update host-model guest CPUs on ppc64 (rhbz#1251927)
  - cpu: Better support for ppc64 compatibility modes (rhbz#1251927)
  - cpu: Move check for NULL CPU model inside the driver (rhbz#1251927)
  - tests: Add some compatibility-related cases to the CPU tests (rhbz#1251927)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-7
changelog:
  - Start daemon only after filesystems are mounted (rhbz#1255228)
  - virfile: Add error for root squash change mode failure (rhbz#1253609)
  - virfile: Introduce virFileUnlink (rhbz#1253609)
  - storage: Correct the 'mode' check (rhbz#1253609)
  - storage: Handle failure from refreshVol (rhbz#1253609)
  - util: Add virStringGetFirstWithPrefix (rhbz#1165580)
  - util: Add virCgroupGetBlockDevString (rhbz#1165580)
  - util: Add getters for cgroup block device I/O throttling (rhbz#1165580)
  - lxc: Sync BlkioDevice values when setting them in cgroups (rhbz#1165580)
  - qemu: Sync BlkioDevice values when setting them in cgroups (rhbz#1165580)
  - Allow vfio hotplug of a device to the domain which owns the iommu (rhbz#1256486)
  - hostdev: skip ACS check when using VFIO for device assignment (rhbz#1256486)
  - docs: Clarify unprivileged sgio feature (rhbz#1072736)
  - qemu: Introduce qemuIsSharedHostdev (rhbz#1072736)
  - qemu: Introduce qemuGetHostdevPath (rhbz#1072736)
  - qemu: Refactor qemuCheckSharedDisk to create qemuCheckUnprivSGIO (rhbz#1072736)
  - qemu: Inline qemuGetHostdevPath (rhbz#1072736)
  - qemu: Refactor qemuSetUnprivSGIO return values (rhbz#1072736)
  - qemu: Fix integer/boolean logic in qemuSetUnprivSGIO (rhbz#1072736)
  - RHEL: qemu: Add ability to set sgio values for hostdev (rhbz#1072736)
  - RHEL: qemu: Add check for unpriv sgio for SCSI generic host device (rhbz#1072736)
  - security_selinux: Use proper structure to access socket data (rhbz#1146886)
  - security_dac: Label non-listening sockets (rhbz#1146886)
  - security: Add virSecurityDomainSetDirLabel (rhbz#1146886)
  - security_stack: Add SetDirLabel support (rhbz#1146886)
  - security_selinux: Add SetDirLabel support (rhbz#1146886)
  - security_dac: Add SetDirLabel support (rhbz#1146886)
  - qemu: Fix access to auto-generated socket paths (rhbz#1146886)
  - tests: Use qemuProcessPrepareMonitorChr in qemuxmlnstest (rhbz#1146886)
  - qemu: Label correct per-VM path when starting (rhbz#1146886)
  - selinux: fix compile errors (rhbz#1146886)
  - conf: Add ioeventfd option for controllers (rhbz#1150484)
  - qemu: Enable ioeventfd usage for virtio-scsi controllers (rhbz#1150484)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-8
changelog:
  - util: make virNetDev(Replace|Restore)MacAddress public functions (rhbz#1257004)
  - util: don't use netlink to save/set mac for macvtap+passthrough+802.1Qbh (rhbz#1257004)
  - cpu: Introduce IvyBridge CPU model (rhbz#1254420)
  - examples: Add example polkit ACL rules (rhbz#1115289)
  - qemu: don't use initialized ret in qemuRemoveSharedDevice (rhbz#1072736)
  - qemu: Introduce qemuDomainMachineIsS390CCW (rhbz#1258361)
  - qemu: Need to check for machine.os when using ADDRESS_TYPE_CCW (rhbz#1258361)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-9
changelog:
  - conf: fix crash when parsing a unordered NUMA <cell/> (rhbz#1260846)
  - vmx: Some whitespace cleanup (rhbz#1172544)
  - vmx: The virVMXParseDisk deviceType can be NULL, add some missing checks (rhbz#1172544)
  - vmx: Add handling for CDROM devices with SCSI passthru (rhbz#1172544)
  - qemu: hotplug: Properly clean up drive backend if frontend hotplug fails (rhbz#1262399)
  - qemu: Introduce QEMU_CAPS_DEVICE_RTL8139 (rhbz#1254044)
  - qemu: Introduce QEMU_CAPS_DEVICE_E1000 (rhbz#1254044)
  - qemu: Introduce QEMU_CAPS_DEVICE_VIRTIO_NET (rhbz#1254044)
  - qemu: Try several network devices when looking for a default (rhbz#1254044)
  - qemu: Report error if per-VM directory cannot be created (rhbz#1146886)
  - qemu: Do not allow others into per-VM subdirectories (rhbz#1146886)
  - qemu: Allow others to browse /var/lib/libvirt/qemu (rhbz#1146886)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-10
changelog:
  - virSecuritySELinuxSetSecurityAllLabel: drop useless virFileIsSharedFSType (rhbz#1124841)
  - security_selinux: Replace SELinuxSCSICallbackData with proper struct (rhbz#1124841)
  - virSecurityManager: Track if running as privileged (rhbz#1124841)
  - security_selinux: Take @privileged into account (rhbz#1124841)
  - qemu: Fix using guest architecture as lookup key (rhbz#1260753)
  - virfile: Check for existence of dir in virFileDeleteTree (rhbz#1146886)
  - Revert "qemu: Fix integer/boolean logic in qemuSetUnprivSGIO" (rhbz#1072736)
  - qemu: migration: Relax enforcement of memory hotplug support (rhbz#1252685)
  - conf: Add helper to determine whether memory hotplug is enabled for a vm (rhbz#1252685)
  - qemu: Make memory alignment helper more universal (rhbz#1252685)
  - conf: Drop VIR_DOMAIN_DEF_PARSE_CLOCK_ADJUST flag (rhbz#1252685)
  - conf: Document all VIR_DOMAIN_DEF_PARSE_* flags (rhbz#1252685)
  - conf: Add XML parser flag that will allow us to do incompatible updates (rhbz#1252685)
  - conf: Split memory related post parse stuff into separate function (rhbz#1252685)
  - conf: Rename max_balloon to total_memory (rhbz#1252685)
  - conf: Pre-calculate initial memory size instead of always calculating it (rhbz#1252685)
  - conf: Don't always recalculate initial memory size from NUMA size totals (rhbz#1252685)
  - qemu: command: Align memory sizes only on fresh starts (rhbz#1252685)
  - qemu: ppc64: Align memory sizes to 256MiB blocks (rhbz#1249006)
  - test: Add test to validate that memory sizes don't get updated on migration (rhbz#1252685)
  - qemu: Align memory module sizes to 2MiB (rhbz#1252685)
  - qemu: Refresh memory size only on fresh starts (rhbz#1242940)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-13
changelog:
  - qemu: Add conditions for qemu-kvm use on ppc64 (rhbz#1267882)
  - qemu: Move simplification variable to begining of the function (rhbz#1266856)
  - qemu: Extract -mem-path building into its own function (rhbz#1266856)
  - qemu: Add -mem-path even with numa (rhbz#1266856)
  - qemu: Use memory-backing-file only when needed (rhbz#1266856)
  - qemu: Always update migration times on destination (rhbz#1265902)
  - qemu: Copy completed migration stats only on success (rhbz#1265902)
  - qemu: Introduce flags in qemuMigrationCompleted (rhbz#1265902)
  - qemu: Make updating stats in qemuMigrationCheckJobStatus optional (rhbz#1265902)
  - qemu: Wait until destination QEMU consumes all migration data (rhbz#1265902)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-13.el7_2.1
changelog:
  - qemu: migration: Properly parse memory hotplug migration flag (rhbz#1280419)
  - qemu: Emit correct audit message for memory hot unplug (rhbz#1280420)
  - qemu: Emit correct audit message for memory hot plug (rhbz#1280420)
  - qemu: Extract logic to determine the mlock limit size for VFIO (rhbz#1280420)
  - qemu: hotplug: Fix mlock limit handling on memory hotplug (rhbz#1280420)
  - qemu: domain: Restructurate control flow in qemuDomainGetMlockLimitBytes (rhbz#1280420)
  - qemu: Explain mlock limit size more in detail (rhbz#1280420)
  - qemu: hotplug: Reject VFIO hotplug if setting RLIMIT_MEMLOCK fails (rhbz#1283924)
  - process: Log when limiting the amount of locked memory (rhbz#1283924)
  - qemu: Use qemuDomainRequiresMlock() in qemuBuildCommandLine() (rhbz#1283924)
  - qemu: Use qemuDomainRequiresMlock() when attaching PCI hostdev (rhbz#1283924)
  - qemu: Add ppc64-specific math to qemuDomainGetMlockLimitBytes() (rhbz#1283924)
  - qemu: Always set locked memory limit for ppc64 domains (rhbz#1283924)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-13.el7_2.4
changelog:
  - systemd: Escape machine name for machined (rhbz#1308494)
  - systemd: Add virSystemdGetMachineNameByPID (rhbz#1308494)
  - systemd: Modernize machine naming (rhbz#1308494)
  - virSystemdGetMachineNameByPID: Initialize @reply (rhbz#1308494)
  - util: Fix virCgroupNewMachine ATTRIBUTE_NONNULL args (rhbz#1308494)
  - dbus: Don't unref NULL messages (rhbz#1308494)
  - vmx: Expose datacenter path in domain XML (rhbz#1305489)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.17-13.el7_2.5
changelog:
  - nodedev: Indent PCI express for future fix (rhbz#1331328)
  - nodedev: Expose PCI header type (rhbz#1331328)
  - nodedev: Fix parsing of generated XMLs (rhbz#1331328)
  - qemu: driver: Remove unnecessary flag in qemuDomainGetStatsBlock (rhbz#1339963)
  - qemu: driver: Separate bulk stats worker for block devices (rhbz#1339963)
  - qemu: bulk stats: Don't access possibly blocked storage (rhbz#1339963)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-8
changelog:
  - qemu: Fix crash in tunnelled migration (rhbz#1147331)
  - qemu: Really fix crash in tunnelled migration (rhbz#1147331)
  - qemu: Update fsfreeze status on domain state transitions (rhbz#1160084)
  - qemuPrepareNVRAM: Save domain conf only if domain's persistent (rhbz#1026772)
  - docs: Document NVRAM behavior on transient domains (rhbz#1026772)
  - Fix build in qemu_capabilities (rhbz#1165782)
  - qemu: Support OVMF on armv7l aarch64 guests (rhbz#1165782)
  - qemu: Drop OVMF whitelist (rhbz#1165782)
  - storage: Fix issue finding LU's when block doesn't exist (rhbz#1152382)
  - storage: Add thread to refresh for createVport (rhbz#1152382)
  - storage: qemu: Fix security labelling of new image chain elements (rhbz#1151718)
  - virsh: sync domdisplay help and manual (rhbz#997802)
  - docs: domain: Move docs for storage hosts under the <source> element (rhbz#1164528)
  - test: virstoragetest: Add testing of network disk details (rhbz#1164528)
  - util: storage: Copy hosts of a storage file only if they exist (rhbz#1164528)
  - qemu: Refactor qemuBuildNetworkDriveURI to take a virStorageSourcePtr (rhbz#1164528)
  - tests: Reflow the expected output from RBD disk test (rhbz#1164528)
  - util: split out qemuParseRBDString into a common helper (rhbz#1164528)
  - util: storagefile: Split out parsing of NBD string into a separate func (rhbz#1164528)
  - storage: Allow parsing of RBD backing strings when building backing chain (rhbz#1164528)
  - storage: rbd: qemu: Add support for specifying internal RBD snapshots (rhbz#1164528)
  - storage: rbd: Implement support for passing config file option (rhbz#1164528)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-9
changelog:
  - doc: fix mismatched ACL attribute name (rhbz#1161358)
  - qemu: monitor: Rename and improve qemuMonitorGetPtyPaths (rhbz#1146944)
  - conf: Add channel state for virtio channels to the XML (rhbz#1146944)
  - qemu: Add handling for VSERPORT_CHANGE event (rhbz#1146944)
  - qemu: chardev: Extract more information about character devices (rhbz#1146944)
  - qemu: process: Refresh virtio channel guest state when connecting to mon (rhbz#1146944)
  - event: Add guest agent lifecycle event (rhbz#1146944)
  - examples: Add support for the guest agent lifecycle event (rhbz#1146944)
  - qemu: Emit the guest agent lifecycle event (rhbz#1146944)
  - internal: add macro to round value to the next closest power of 2 (rhbz#1076098)
  - video: cleanup usage of vram attribute and update documentation (rhbz#1076098)
  - QXL: fix setting ram and vram values for QEMU QXL device (rhbz#1076098)
  - caps: introduce new QEMU capability for vgamem_mb device property (rhbz#1076098)
  - qemu-command: use vram attribute for all video devices (rhbz#1076098)
  - qemu-command: introduce new vgamem attribute for QXL video device (rhbz#1076098)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-10
changelog:
  - qemu: add the missing jobinfo type in qemuDomainGetJobInfo (rhbz#1167883)
  - network: Fix upgrade from libvirt older than 1.2.4 (rhbz#1167145)
  - qemu: fix domain startup failing with 'strict' mode in numatune (rhbz#1168866)
  - qemu: Don't track quiesced state of FSs (rhbz#1160084)
  - qemu: fix block{commit,copy} abort handling (rhbz#1135169)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-11
changelog:
  - virsh: vol-upload disallow negative offset (rhbz#1087104)
  - storage: fix crash caused by no check return before set close (rhbz#1087104)
  - qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1139567)
  - security: Manage SELinux labels on shared/readonly hostdev's (rhbz#1082521)
  - nwfilter: fix crash when adding non-existing nwfilter (rhbz#1169409)
  - conf: Fix libvirtd crash matching hostdev XML (rhbz#1174053)
  - qemu: Resolve Coverity REVERSE_INULL (rhbz#1172570)
  - CVE-2014-8131: Fix possible deadlock and segfault in qemuConnectGetAllDomainStats() (CVE-2014-8131)
  - qemu: bulk stats: Fix logic in monitor handling (rhbz#1172570)
  - qemu: avoid rare race when undefining domain (rhbz#1150505)
  - Do not format CPU features without a model (rhbz#1151885)
  - Ignore CPU features without a model for host-passthrough (rhbz#1151885)
  - Silently ignore MAC in NetworkLoadConfig (rhbz#1156367)
  - Generate a MAC when loading a config instead of package update (rhbz#1156367)
  - qemu: move setting emulatorpin ahead of monitor showing up (rhbz#1170484)
  - util: Introduce flags field for macvtap creation (rhbz#1081461)
  - network: Bring netdevs online later (rhbz#1081461)
  - qemu: always call qemuInterfaceStartDevices() when starting CPUs (rhbz#1081461)
  - qemu: add a qemuInterfaceStopDevices(), called when guest CPUs stop (rhbz#1081461)
  - conf: replace call to virNetworkFree() with virObjectUnref() (rhbz#1099210)
  - util: new functions for setting bridge and bridge port attributes (rhbz#1099210)
  - util: functions to manage bridge fdb (forwarding database) (rhbz#1099210)
  - conf: new network bridge device attribute macTableManager (rhbz#1099210)
  - network: save bridge name in ActualNetDef when actualType==network too (rhbz#1099210)
  - network: store network macTableManager setting in NetDef actual object (rhbz#1099210)
  - network: setup bridge devices for macTableManager='libvirt' (rhbz#1099210)
  - qemu: setup tap devices for macTableManager='libvirt' (rhbz#1099210)
  - qemu: add/remove bridge fdb entries as guest CPUs are started/stopped (rhbz#1099210)
  - virsh: document block.n.allocation stat (rhbz#1041569)
  - getstats: avoid memory leak on OOM (rhbz#1041569)
  - getstats: improve documentation (rhbz#1041569)
  - getstats: start giving offline block stats (rhbz#1041569)
  - getstats: add block.n.path stat (rhbz#1041569)
  - qemuMonitorJSONBlockStatsUpdateCapacity: Don't skip disks (rhbz#1041569)
  - getstats: prepare monitor collection for recursion (rhbz#1041569)
  - getstats: perform recursion in monitor collection (rhbz#1041569)
  - getstats: prepare for dynamic block.count stat (rhbz#1041569)
  - getstats: add new flag for block backing chain (rhbz#1041569)
  - getstats: split block stats reporting for easier recursion (rhbz#1041569)
  - getstats: crawl backing chain for qemu (rhbz#1041569)
  - logical: Add "--type snapshot" to lvcreate command (rhbz#1166592)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-12
changelog:
  - Fix hotplugging of block device-backed usb disks (rhbz#1175668)
  - qemu: Create memory-backend-{ram, file} iff needed (rhbz#1175397)
  - conf: Don't format actual network definition in migratable XML (rhbz#1177194)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-13
changelog:
  - conf: Fix memory leak when parsing invalid network XML (rhbz#1180136)
  - qxl: change the default value for vgamem_mb to 16 MiB (rhbz#1181052)
  - qemuxml2argvtest: Fix test after change of qxl vgamem_mb default (rhbz#1181052)
  - conf: fix crash when hotplug a channel chr device with no target (rhbz#1181408)
  - qemu: forbid second blockcommit during active commit (rhbz#1135339)
  - qemu_monitor: introduce new function to get QOM path (rhbz#1180574)
  - qemu_process: detect updated video ram size values from QEMU (rhbz#1180574)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-14
changelog:
  - virNetworkDefUpdateIPDHCPHost: Don't crash when updating network (rhbz#1182486)
  - Format CPU features even for host-model (rhbz#1182448)
  - util: Add function virCgroupHasEmptyTasks (rhbz#1161540)
  - util: Add virNumaGetHostNodeset (rhbz#1161540)
  - qemu: Remove unnecessary qemuSetupCgroupPostInit function (rhbz#1161540)
  - qemu: Save numad advice into qemuDomainObjPrivate (rhbz#1161540)
  - qemu: Leave cpuset.mems in parent cgroup alone (rhbz#1161540)
  - qemu: Fix hotplugging cpus with strict memory pinning (rhbz#1161540)
  - util: Fix possible NULL dereference (rhbz#1161540)
  - qemu_driver: fix setting vcpus for offline domain (rhbz#1161540)
  - qemu: migration: Unlock vm on failed ACL check in protocol v2 APIs (CVE-2014-8136)
  - CVE-2015-0236: qemu: Check ACLs when dumping security info from save image (CVE-2015-0236)
  - CVE-2015-0236: qemu: Check ACLs when dumping security info from snapshots (CVE-2015-0236)
  - Check for domain liveness in qemuDomainObjExitMonitor (rhbz#1161024)
  - Mark the domain as active in qemuhotplugtest (rhbz#1161024)
  - Fix vmdef usage while in monitor in qemuDomainHotplugVcpus (rhbz#1161024)
  - Fix vmdef usage while in monitor in BlockStat* APIs (rhbz#1161024)
  - Fix vmdef usage while in monitor in qemu process (rhbz#1161024)
  - Fix vmdef usage after domain crash in monitor on device detach (rhbz#1161024)
  - Fix vmdef usage after domain crash in monitor on device attach (rhbz#1161024)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-16
changelog:
  - qemu: don't setup cpuset.mems if memory mode in numatune is not 'strict' (rhbz#1186094)
  - lxc: don't setup cpuset.mems if memory mode in numatune is not 'strict' (rhbz#1186094)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-16.el7_1.1
changelog:
  - qemuxml2argvtest: Fake response from numad (rhbz#1194982)
  - qemuBuildNumaArgStr: Use memory-backend-ram more wisely (rhbz#1194982)
  - util: storage: Fix parsing of nbd:// URI without path (rhbz#1195156)
  - Split qemuDomainChrInsert into two parts (rhbz#1195155)
  - hotplug: only add a chardev to vmdef after monitor call (rhbz#1195155)
  - blockjob: shuffle block rebase code (rhbz#1196066)
  - blockcopy: allow block device destination (rhbz#1196066)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-16.el7_1.2
changelog:
  - util: storagefile: Don't crash on gluster URIs without path (rhbz#1198720)
  - qemuProcessHandleBlockJob: Set disk->mirrorState more often (rhbz#1202719)
  - qemuProcessHandleBlockJob: Take status into account (rhbz#1202719)
  - qemu: process: Export qemuProcessFindDomainDiskByAlias (rhbz#1202719)
  - qemu: event: Don't fiddle with disk backing trees without a job (rhbz#1202719)
  - qemu: Disallow concurrent block jobs on a single disk (rhbz#1202719)
  - qemu: block-commit: Mark disk in block jobs only on successful command (rhbz#1202719)
  - qemu: read backing chain names from qemu (rhbz#1203119)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-16.el7_1.3
changelog:
  - qemu: processBlockJob: Don't unlock @vm twice (rhbz#1208021)
  - qemu: Extract internals of processBlockJobEvent into a helper (rhbz#1208021)
  - qemu: blockjob: Synchronously update backing chain in XML on ABORT/PIVOT (rhbz#1208021)


author: Jiri Denemark <jdenemar@redhat.com> - 1.2.8-16.el7_1.4
changelog:
  - qemu: fix cannot set graphic passwd via qemuDomainSaveImageDefineXML (rhbz#1255859)
  - qemu: Use correct flags for ABI stability check in SaveImageUpdateDef (rhbz#1255859)
  - Really fix XML formatting flags in SaveImageUpdateDef (rhbz#1255859)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-1
changelog:
  - Rebased to libvirt-2.0.0 (rhbz#1286679)
  - The rebase also fixes the following bugs:
      rhbz#735385, rhbz#1004602, rhbz#1046833, rhbz#1180092, rhbz#1216281
      rhbz#1283207, rhbz#1286679, rhbz#1289288, rhbz#1302373, rhbz#1304222
      rhbz#1312188, rhbz#1316370, rhbz#1320893, rhbz#1322210, rhbz#1325072
      rhbz#1325080, rhbz#1332446, rhbz#1333248, rhbz#1333404, rhbz#1334237
      rhbz#1335617, rhbz#1335832, rhbz#1337869, rhbz#1341415, rhbz#1342342
      rhbz#1342874, rhbz#1342962, rhbz#1343442, rhbz#1344892, rhbz#1344897
      rhbz#1345743, rhbz#1346723, rhbz#1346724, rhbz#1346730, rhbz#1350688
      rhbz#1351473


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-2
changelog:
  - qemu: Use bootindex whenever possible (rhbz#1323085)
  - qemu: Properly reset spiceMigration flag (rhbz#1151723)
  - qemu: Drop useless SPICE migration code (rhbz#1151723)
  - qemu: Memory locking is only required for KVM guests on ppc64 (rhbz#1350772)
  - virtlogd: make max file size & number of backups configurable (rhbz#1351209)
  - virtlogd: increase max file size to 2 MB (rhbz#1351209)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-3
changelog:
  - qemu: getAutoDumpPath() return value should be dumpfile not domname. (rhbz#1354238)
  - qemu: Copy complete domain def in qemuDomainDefFormatBuf (rhbz#1320470)
  - qemu: Drop default channel path during migration (rhbz#1320470)
  - qemu: Fix migration from old libvirt (rhbz#1320500)
  - Add USB addresses to qemuhotplug test cases (rhbz#1215968)
  - Introduce virDomainUSBDeviceDefForeach (rhbz#1215968)
  - Allow omitting USB port (rhbz#1215968)
  - Store USB port path as an array of integers (rhbz#1215968)
  - Introduce virDomainUSBAddressSet (rhbz#1215968)
  - Add functions for adding USB controllers to addrs (rhbz#1215968)
  - Add functions for adding USB hubs to addrs (rhbz#1215968)
  - Reserve existing USB addresses (rhbz#1215968)
  - Add tests for USB address assignment (rhbz#1215968)
  - Assign addresses to USB devices (rhbz#1215968)
  - Assign addresses on USB device hotplug (rhbz#1215968)
  - Auto-add one hub if there are too many USB devices (rhbz#1215968)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-4
changelog:
  - qemu: hotplug: fix changeable media ejection (rhbz#1359071)
  - lxc: Don't crash by forgetting to ref transient domains (rhbz#1351057)
  - Introduce <iommu> device (rhbz#1235581)
  - Add QEMU_CAPS_DEVICE_INTEL_IOMMU (rhbz#1235581)
  - qemu: format intel-iommu on the command line (rhbz#1235581)
  - qemu_monitor_json: add support to search QOM device path by device alias (rhbz#1358728)
  - hvsupport: Introduce parseSymsFile (rhbz#1286679)
  - hvsupport: use a regex instead of XML::XPath (rhbz#1286679)
  - hvsupport: construct the group regex upfront (rhbz#1286679)
  - hvsupport: skip non-matching lines early (rhbz#1286679)
  - virconf: Fix config file path construction (rhbz#1357364)
  - virDomainHostdevDefFree: Don't leak privateData (rhbz#1357346)
  - virt-admin: Output srv-threadpool-info data as unsigned int rather than signed (rhbz#1356769)
  - util: Introduce virISCSINodeNew (rhbz#1356436)
  - iscsi: Establish connection to target via static target login (rhbz#1356436)
  - storage: Document wiping formatted volume types (rhbz#868771)
  - admin: Retrieve the SASL context for both local and remote connection (rhbz#1361948)
  - daemon: sasl: Don't forget to save SASL username to client's identity (rhbz#1361948)
  - vsh: Make vshInitDebug return int instead of void (rhbz#1357363)
  - tools: Make use of the correct environment variables (rhbz#1357363)
  - util: Add 'usage' for encryption (rhbz#1301021)
  - virStorageEncryptionSecretFree: Don't leak secret lookup definition (rhbz#1301021)
  - encryption: Add luks parsing for storageencryption (rhbz#1301021)
  - encryption: Add <cipher> and <ivgen> to encryption (rhbz#1301021)
  - qemu: Introduce helper qemuDomainSecretDiskCapable (rhbz#1301021)
  - tests: Adjust LUKS tests to use 'volume' secret type (rhbz#1301021)
  - docs: Update docs to reflect LUKS secret changes (rhbz#1301021)
  - qemu: Alter error path cleanup for qemuDomainAttachHostSCSIDevice (rhbz#1301021)
  - qemu: Alter error path cleanup for qemuDomainAttachVirtioDiskDevice (rhbz#1301021)
  - qemu: Alter error path cleanup for qemuDomainAttachSCSIDisk (rhbz#1301021)
  - qemu: Move and rename qemuBufferEscapeComma (rhbz#1301021)
  - storage: Add support to create a luks volume (rhbz#1301021)
  - qemu: Add secinfo for hotplug virtio disk (rhbz#1301021)
  - qemu: Alter the qemuDomainGetSecretAESAlias to add new arg (rhbz#1301021)
  - qemu: Add luks support for domain disk (rhbz#1301021)
  - qemu: Move setting of obj bools for qemuDomainAttachVirtioDiskDevice (rhbz#1301021)
  - qemu: Move setting of encobjAdded for qemuDomainAttachSCSIDisk (rhbz#1301021)
  - storage: Fix error path (rhbz#1301021)
  - qemu: Disallow usage of luks encryption if aes secret not possible (rhbz#1301021)
  - storage: Add extra failure condition for luks volume creation (rhbz#1301021)
  - virstoragefile: refactor virStorageFileMatchesNNN methods (rhbz#1301021)
  - qemu: Make qemuDomainCheckDiskStartupPolicy self-contained (rhbz#1168453)
  - qemu: Remove unnecessary label and its only reference (rhbz#1168453)
  - qemu: Fix support for startupPolicy with volume/pool disks (rhbz#1168453)
  - virsh: Report error when explicit connection fails (rhbz#1356461)
  - tests: Add testing of backing store string parser (rhbz#1134878)
  - util: json: Make first argument of virJSONValueObjectForeachKeyValue const (rhbz#1134878)
  - util: qemu: Add wrapper for JSON -> commandline conversion (rhbz#1134878)
  - util: qemu: Add support for user-passed strings in JSON->commandline (rhbz#1134878)
  - util: qemu: Allow nested objects in JSON -> commandline generator (rhbz#1134878)
  - util: qemu: Allow for different approaches to format JSON arrays (rhbz#1134878)
  - util: qemu: Don't generate any extra commas in virQEMUBuildCommandLineJSON (rhbz#1134878)
  - util: json: Make first argument of virJSONValueCopy const (rhbz#1134878)
  - util: storage: Add parser for qemu's json backing pseudo-protocol (rhbz#1134878)
  - util: storage: Add support for host device backing specified via JSON (rhbz#1134878)
  - util: storage: Add support for URI based backing volumes in qemu's JSON pseudo-protocol (rhbz#1134878)
  - util: storage: Add json pseudo protocol support for gluster volumes (rhbz#1134878)
  - util: storage: Add json pseudo protocol support for iSCSI volumes (rhbz#1134878)
  - util: storage: Add JSON backing volume parser for 'nbd' protocol (rhbz#1134878)
  - util: storage: Add JSON backing store parser for 'sheepdog' protocol (rhbz#1134878)
  - util: storage: Add 'ssh' network storage protocol (rhbz#1134878)
  - util: storage: Add JSON backing volume parser for 'ssh' protocol (rhbz#1134878)
  - qemu: command: Rename qemuBuildNetworkDriveURI to qemuBuildNetworkDriveStr (rhbz#1247521)
  - qemu: command: Split out network disk URI building (rhbz#1247521)
  - qemu: command: Extract drive source command line formatter (rhbz#1247521)
  - qemu: command: Refactor code extracted to qemuBuildDriveSourceStr (rhbz#1247521)
  - storage: gluster: Support multiple hosts in backend functions (rhbz#1247521)
  - util: qemu: Add support for numbered array members (rhbz#1247521)
  - qemu: command: Add infrastructure for object specified disk sources (rhbz#1247521)
  - qemu: command: Add support for multi-host gluster disks (rhbz#1247521)
  - qemu: Need to free fileprops in error path (rhbz#1247521)
  - storage: remove "luks" storage volume type (rhbz#1301021)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-5
changelog:
  - qemu: Fix domain state after reset (rhbz#1269575)
  - rpc: virnetserver: Rename ClientSetProcessingControls to ClientSetLimits (rhbz#1357776)
  - rpc: virnetserver: Move virNetServerCheckLimits which is static up in the file (rhbz#1357776)
  - rpc: virnetserver: Add code to CheckLimits to handle suspending of services (rhbz#1357776)
  - admin: rpc: virnetserver: Fix updating of the client limits (rhbz#1357776)
  - rpc: virnetserver: Remove dead code checking the client limits (rhbz#1357776)
  - storage: Fix a NULL ptr dereference in virStorageBackendCreateQemuImg (rhbz#1363636)
  - qemu: Introduce qemuAliasFromHostdev (rhbz#1289391)
  - qemu: Use the hostdev alias in qemuDomainAttachHostSCSIDevice error path (rhbz#1289391)
  - storage: Don't remove the pool for buildPool failure in storagePoolCreate (rhbz#1362349)
  - lxcDomainCreateXMLWithFiles: Avoid crash (rhbz#1363773)
  - admin: Fix the default uri for session daemon to libvirtd:///session (rhbz#1356858)
  - docs: Distribute subsite.xsl (rhbz#1365004)
  - qemuBuildMachineCommandLine: Follow our pattern (rhbz#1304483)
  - Introduce SMM feature (rhbz#1304483)
  - Introduce @secure attribute to os loader element (rhbz#1304483)
  - qemu: Enable secure boot (rhbz#1304483)
  - qemu: Advertise OVMF_CODE.secboot.fd (rhbz#1304483)
  - tests: Fix broken build (rhbz#1304483)
  - cpu_x86: Introduce x86FeatureIsMigratable (rhbz#1365500)
  - cpu_x86: Properly drop non-migratable features (rhbz#1365500)
  - tests: Add a test for host-model CPU with CMT feature (rhbz#1365500)
  - cpu_x86: Fix host-model CPUs on hosts with CMT (rhbz#1365500)
  - virt-admin: Fix the error when an invalid URI has been provided (rhbz#1365903)
  - conf: improve error log when PCI devices don't match requested controller (rhbz#1363627)
  - conf: don't allow connecting upstream-port directly to pce-expander-bus (rhbz#1361172)
  - conf: restrict where dmi-to-pci-bridge can be connected (rhbz#1363648)
  - conf: restrict expander buses to connect only to a root bus (rhbz#1358712)
  - virNetDevMacVLanCreateWithVPortProfile: Don't mask virNetDevMacVLanTapOpen error (rhbz#1240439)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-6
changelog:
  - qemu_command: don't modify heads for graphics device (rhbz#1366119)
  - virsh: Fix core for cmdSecretGetValue (rhbz#1366611)
  - conf: report an error message for non-existing USB hubs (rhbz#1367130)
  - conf: free the ports array of a USB hub (rhbz#1366097)
  - utils: storage: Fix JSON field name for uri based storage (rhbz#1367260)
  - qemu: Adjust the cur_ballon on coldplug/unplug of dimms (rhbz#1220702)
  - conf: Provide error on undefined iothreadsched entry (rhbz#1366484)
  - qemu: Fix the command line generation for rbd auth using aes secrets (rhbz#1182074)
  - qemu: Fix crash hot plugging luks volume (rhbz#1367259)
  - Revert "admin: Fix the default uri for session daemon to libvirtd:///session" (rhbz#1367269)
  - libvirt: convert to typesafe virConf accessors (rhbz#1367269)
  - admin: Fix default uri config option name s/admin_uri_default/uri_default (rhbz#1367269)
  - virt-admin: Properly fix the default session daemon URI to admin server (rhbz#1367269)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-7
changelog:
  - qemu: caps: Always assume QEMU_CAPS_SMP_TOPOLOGY (rhbz#1097930)
  - conf: Extract code formatting vCPU info (rhbz#1097930)
  - conf: Rename virDomainVcpuInfoPtr to virDomainVcpuDefPtr (rhbz#1097930)
  - conf: Don't report errors from virDomainDefGetVcpu (rhbz#1097930)
  - tests: qemuxml2xml: Format status XML header dynamically (rhbz#1097930)
  - conf: convert def->vcpus to a array of pointers (rhbz#1097930)
  - conf: Add private data for virDomainVcpuDef (rhbz#1097930)
  - qemu: domain: Add vcpu private data structure (rhbz#1097930)
  - qemu: domain: Extract formating and parsing of vCPU thread ids (rhbz#1097930)
  - qemu: Add cpu ID to the vCPU pid list in the status XML (rhbz#1097930)
  - qemu: Store vCPU thread ids in vcpu private data objects (rhbz#1097930)
  - Fix logic in qemuDomainObjPrivateXMLParseVcpu (rhbz#1097930)
  - qemu: Add qemuProcessSetupPid() and use it in qemuProcessSetupIOThread() (rhbz#1097930)
  - qemu: Use qemuProcessSetupPid() in qemuProcessSetupEmulator() (rhbz#1097930)
  - qemu: Use qemuProcessSetupPid() in qemuProcessSetupVcpu() (rhbz#1097930)
  - qemuBuildCpuCommandLine: Don't leak @buf (rhbz#1097930)
  - conf: Make really sure we don't access non-existing vCPUs (rhbz#1097930)
  - conf: Make really sure we don't access non-existing vCPUs again (rhbz#1097930)
  - qemu: capabilities: Drop unused function virQEMUCapsGetMachineTypes (rhbz#1097930)
  - qemu: caps: Sanitize storage of machine type related data (rhbz#1097930)
  - qemu: cap: Refactor access to array in virQEMUCapsProbeQMPMachineTypes (rhbz#1097930)
  - qemu: monitor: Add monitor API for device_add supporting JSON objects (rhbz#1097930)
  - qemu: monitor: Add do-while block to QEMU_CHECK_MONITOR_FULL (rhbz#1097930)
  - qemu: Improve error message in virDomainGetVcpus (rhbz#1097930)
  - qemu: domain: Rename qemuDomainDetectVcpuPids to qemuDomainRefreshVcpuInfo (rhbz#1097930)
  - qemu: monitor: Rename qemuMonitor(JSON|Text)GetCPUInfo (rhbz#1097930)
  - qemu: domain: Improve vCPU data checking in qemuDomainRefreshVcpu (rhbz#1097930)
  - qemu: domain: Simplify return values of qemuDomainRefreshVcpuInfo (rhbz#1097930)
  - internal: Introduce macro for stealing pointers (rhbz#1097930)
  - tests: qemucapabilities: Add data for qemu 2.7.0 (rhbz#1097930)
  - qemu: setcpus: Report better errors (rhbz#1097930)
  - qemu: setvcpus: Extract setting of maximum vcpu count (rhbz#1097930)
  - qemu: driver: Extract setting of live vcpu count (rhbz#1097930)
  - qemu: driver: Split out regular vcpu hotplug code into a function (rhbz#1097930)
  - conf: Provide error on undefined vcpusched entry (rhbz#1097930)
  - qemu: monitor: Return structures from qemuMonitorGetCPUInfo (rhbz#1097930)
  - qemu: monitor: Return struct from qemuMonitor(Text|Json)QueryCPUs (rhbz#1097930)
  - qemu: Add capability for query-hotpluggable-cpus command (rhbz#1097930)
  - qemu: Forbid config when topology based cpu count doesn't match the config (rhbz#1097930)
  - qemu: capabilities: Extract availability of new cpu hotplug for machine types (rhbz#1097930)
  - qemu: monitor: Extract QOM path from query-cpus reply (rhbz#1097930)
  - qemu: monitor: Add support for calling query-hotpluggable-cpus (rhbz#1097930)
  - qemu: monitor: Add algorithm for combining query-(hotpluggable-)-cpus data (rhbz#1097930)
  - tests: Add test infrastructure for qemuMonitorGetCPUInfo (rhbz#1097930)
  - tests: cpu-hotplug: Add data for x86 hotplug with 11+ vcpus (rhbz#1097930)
  - tests: cpu-hotplug: Add data for ppc64 platform including hotplug (rhbz#1097930)
  - tests: cpu-hotplug: Add data for ppc64 out-of-order hotplug (rhbz#1097930)
  - tests: cpu-hotplug: Add data for ppc64 without threads enabled (rhbz#1097930)
  - qemu: domain: Extract cpu-hotplug related data (rhbz#1097930)
  - qemu: domain: Prepare for VCPUs vanishing while libvirt is not running (rhbz#1097930)
  - util: Extract and rename qemuDomainDelCgroupForThread to virCgroupDelThread (rhbz#1097930)
  - conf: Add XML for individual vCPU hotplug (rhbz#1097930)
  - qemu: migration: Prepare for non-contiguous vcpu configurations (rhbz#1097930)
  - qemu: command: Add helper to convert vcpu definition to JSON props (rhbz#1097930)
  - qemu: process: Copy final vcpu order information into the vcpu definition (rhbz#1097930)
  - qemu: command: Add support for sparse vcpu topologies (rhbz#1097930)
  - qemu: Use modern vcpu hotplug approach if possible (rhbz#1097930)
  - qemu: hotplug: Allow marking unplugged devices by alias (rhbz#1097930)
  - qemu: hotplug: Add support for VCPU unplug (rhbz#1224341)
  - virsh: vcpuinfo: Report vcpu number from the structure rather than it's position (rhbz#1097930)
  - qemu: driver: Fix qemuDomainHelperGetVcpus for sparse vcpu topologies (rhbz#1097930)
  - doc: clarify documentation for vcpu order (rhbz#1097930)
  - conf: Don't validate vcpu count in XML parser (rhbz#1097930)
  - qemu: driver: Validate configuration when setting maximum vcpu count (rhbz#1370066)
  - conf: Fix build with picky GCC (rhbz#1097930)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-8
changelog:
  - util: storage: Properly set protocol type when parsing gluster json string (rhbz#1372251)
  - conf: Add IOThread quota and period scheduler/cputune defs (rhbz#1356937)
  - qemu: Add support to get/set IOThread period and quota cgroup values (rhbz#1356937)
  - network: new network forward mode 'open' (rhbz#846810)
  - virtlogd.socket: Tie lifecycle to libvirtd.service (rhbz#1372576)
  - cpu_x86: Fix minimum match custom CPUs on hosts with CMT (rhbz#1365500)
  - qemu: cgroup: Extract temporary relaxing of cgroup setting for vcpu hotplug (rhbz#1097930)
  - qemu: process: Fix start with unpluggable vcpus with NUMA pinning (rhbz#1097930)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-9
changelog:
  - Add helper for removing transient definition (rhbz#1368774)
  - qemu: Remove stale transient def when migration fails (rhbz#1368774)
  - qemu: Don't use query-migrate on destination (rhbz#1374613)
  - conf: allow hotplugging "legacy PCI" device to manually addressed PCIe slot (rhbz#1337490)
  - conf: Add support for virtio-net.rx_queue_size (rhbz#1366989)
  - qemu_capabilities: Introduce virtio-net-*.rx_queue_size (rhbz#1366989)
  - qemu: Implement virtio-net rx_queue_size (rhbz#1366989)
  - audit: Audit information about shmem devices (rhbz#1218603)
  - qemu: monitor: Use a more obvious iterator name (rhbz#1375783)
  - qemu: monitor: qemuMonitorGetCPUInfoHotplug: Add iterator 'anycpu' (rhbz#1375783)
  - qemu: monitor: Add vcpu state information to monitor data (rhbz#1375783)
  - qemu: domain: Don't infer vcpu state (rhbz#1375783)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-10.el7_3.1
changelog:
  - qemu: allow 32 slots on pcie-expander-bus, not just 1 (rhbz#1389369)
  - qemu: Reset post-copy capability after migration (rhbz#1392030)
  - qemuhotplugtest: Only read result_filename if used (rhbz#1392031)
  - schema: Allow shmem to have alias (rhbz#1392031)
  - conf: Allow copying of shmem defs (rhbz#1392031)
  - qemu: Make qemuBuildShmemDevStr static (rhbz#1392031)
  - qemu: Rename qemuBuildShmemDevStr to qemuBuildShmemDevLegacyStr (rhbz#1392031)
  - qemu: Move common checks outside qemuBuildShmemDevLegacyStr (rhbz#1392031)
  - qemu: Reorder shmem params nicely (rhbz#1392031)
  - qemu: Abstract shmem socket path preparation (rhbz#1392031)
  - qemu: Rename qemuBuildShmemBackendStr to qemuBuildShmemBackendChrStr (rhbz#1392031)
  - qemu: Add qemuAssignDeviceShmemAlias and use it (rhbz#1392031)
  - conf: Add some shmem helpers for future use (rhbz#1392031)
  - conf: Remove incorrect check when encoding shmem audit message (rhbz#1389013)
  - conf: Fix virDomainShmemDefFind (rhbz#1392031)
  - conf: Don't complicate find loop (rhbz#1392031)
  - qemu: Disable migration with ivshmem (rhbz#1392031)
  - conf, qemu: Add support for shmem model (rhbz#1392031)
  - conf, qemu: Add newer shmem models (rhbz#1392031)
  - qemu: Add capabilities for ivshmem-{plain, doorbell} (rhbz#1392031)
  - qemu: Save various defaults for shmem (rhbz#1392031)
  - qemu: Support newer ivshmem device variants (rhbz#1392031)
  - qemu: Add support for hot/cold-(un)plug of shmem devices (rhbz#1392031)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-10.el7_3.2
changelog:
  - qemu: Fix double free when live-attaching shmem (rhbz#1392031)
  - qemu: Make sure shmem memory is shared (rhbz#1392031)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-10.el7_3.3
changelog:
  - virDomainNetDefParseXML: Realign (rhbz#1392032)
  - virDomainNetGetActualType: Return type is virDomainNetType (rhbz#1392032)
  - qemuBuildInterfaceCommandLine: Move hostdev handling a bit further (rhbz#1392032)
  - qemuBuildInterfaceCommandLine: Move vhostuser handling a bit further (rhbz#1392032)
  - qemuBuildInterfaceCommandLine: Move from if-else forest to switch (rhbz#1392032)
  - qemuDomainAttachNetDevice: Move hostdev handling a bit further (rhbz#1392032)
  - qemuDomainAttachNetDevice: Explicitly list allowed types for hotplug (rhbz#1392032)
  - qemuBuildHostNetStr: Explicitly enumerate net types (rhbz#1392032)
  - qemuBuildChrChardevStr: Introduce @nowait argument (rhbz#1392032)
  - qemuBuildVhostuserCommandLine: Reuse qemuBuildChrChardevStr (rhbz#1392032)
  - qemuBuildVhostuserCommandLine: Unify -netdev creation (rhbz#1392032)
  - qemuBuildHostNetStr: Support VIR_DOMAIN_NET_TYPE_VHOSTUSER (rhbz#1392032)
  - qemu_hotplug: Support interface type of vhost-user hotplug (rhbz#1392032)
  - qemu: snapshot: Don't attempt to resume cpus if they were not paused (rhbz#1406765)
  - qemuDomainAttachNetDevice: Don't overwrite error on rollback (rhbz#1404186)
  - qemuDomainAttachNetDevice: Enable multiqueue for vhost-user (rhbz#1404186)
  - qemuDomainAttachNetDevice: pass mq and vectors for vhost-user with multiqueue (rhbz#1404186)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-10.el7_3.4
changelog:
  - qemuDomainAttachNetDevice: Avoid @originalError leak (rhbz#1404186)
  - qemu: snapshot: Resume VM after live snapshot (rhbz#1406765)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-10.el7_3.5
changelog:
  - qemu: Add support for using AES secret for SCSI hotplug (rhbz#1411398)
  - qemu: Don't assume secret provided for LUKS encryption (rhbz#1411394)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-10.el7_3.7
changelog:
  - Increase default file handle limits for daemons (rhbz#1442043)
  - util: permit querying a VF MAC address or VLAN tag by itself (rhbz#1442040)
  - util: remove unused args from virNetDevSetVfConfig() (rhbz#1442040)
  - util: use cleanup label consistently in virHostdevNetConfigReplace() (rhbz#1442040)
  - util: eliminate useless local variable (rhbz#1442040)
  - util: make virMacAddrParse more versatile (rhbz#1442040)
  - util: change virPCIGetNetName() to not return error if device has no net name (rhbz#1442040)
  - util: make virPCIGetDeviceAddressFromSysfsLink() public (rhbz#1442040)
  - util: new function virPCIDeviceRebind() (rhbz#1442040)
  - util: new internal function to permit silent failure of virNetDevSetMAC() (rhbz#1442040)
  - util: new function virNetDevPFGetVF() (rhbz#1442040)
  - util: new functions virNetDev(Save|Read|Set)NetConfig() (rhbz#1442040)
  - util: use new virNetDev*NetConfig() functions for macvtap setup/teardown (rhbz#1442040)
  - util: use new virNetDev*NetConfig() functions for hostdev setup/teardown (rhbz#1442040)
  - util: replace virHostdevNetConfigReplace with ...(Save|Set)NetConfig() (rhbz#1442040)
  - util: save hostdev network device config before unbinding from host driver (rhbz#1442040)
  - util: after hostdev assignment, restore VF MAC address via setting admin MAC (rhbz#1442040)
  - util: remove unused functions from virnetdev.c (rhbz#1442040)
  - util: if setting admin MAC to 00:00:00:00:00:00 fails, try 02:00:00:00:00:00 (rhbz#1442040)
  - util: try *really* hard to set the MAC address of an SRIOV VF (rhbz#1442040)
  - util: log all setting of MAC addresses and vlan tags (rhbz#1442040)
  - util: rename virHostdevNetConfigRestore() to virHostdevRestoreNetConfig() (rhbz#1442040)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-10.el7_3.9
changelog:
  - qemuDomainAttachNetDevice: Support attach of type="user" (rhbz#1445231)
  - conf: Rename mode parameter in virCPUDefParseXML (rhbz#1447612)
  - Add support for CPU cache specification (rhbz#1447612)
  - RHEL: qemuxml2argvtest: Properly reset host CPU arch (rhbz#1447612)
  - qemu: Add support for guest CPU cache (rhbz#1447612)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-14.el7_4.1
changelog:
  - qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
  - cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
  - qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
  - qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
  - qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
  - qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
  - qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
  - qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
  - qemu: Update host-model CPUs on reconnect (rhbz#1470582)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-14.el7_4.2
changelog:
  - qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
  - qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-14.el7_4.4
changelog:
  - qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
  - qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
  - qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
  - conf: Introduce virCPUDefFindFeature (rhbz#1508549)
  - qemu: Filter CPU features when using host CPU (rhbz#1508549)
  - qemu: Fix CPU model broken by older libvirt (rhbz#1508549)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-14.el7_4.5
changelog:
  - qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
  - qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
  - qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-14.el7_4.6
changelog:
  - util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
  - util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
  - cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
  - conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
  - qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
  - cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-14.el7_4.8
changelog:
  - qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
  - cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
  - qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
  - qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
  - qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
  - qemu: introduce qemu domain job status (rhbz#1530130)
  - qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
  - qemu: start all async job with job status active (rhbz#1530130)
  - qemu: introduce migrating job status (rhbz#1530130)
  - qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
  - qemu: Fix type of a completed job (rhbz#1530130)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-14.el7_4.9
changelog:
  - qemu: Fix crash in offline migration (rhbz#1530130)
  - RHEL: qemu: Report full stats for completed migration (rhbz#1530130)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-7
changelog:
  - conf: Resolve corner case on fc_host deletion (rhbz#1420740)
  - pci: fix link maximum speed detection (rhbz#1455017)
  - qemu: Use correct variable in qemuDomainSetBlockIoTune (rhbz#1455510)
  - virsh: Track when create pkttyagent (rhbz#1374126)
  - conf: add eim attribute to <iommu><driver> (rhbz#1451282, rhbz#1289153)
  - qemu: format eim on intel-iommu command line (rhbz#1451282, rhbz#1289153)
  - rpc: Double buffer size instead of quadrupling buffer size. (rhbz#1440683)
  - rpc: Allow up to 256K records to be returned per domain from virConnectGetAllDomainStats. (rhbz#1440683)
  - nodedev: Increase the netlink socket buffer size to the one used by udev (rhbz#1450960, rhbz#1442307)
  - util: hostcpu: Correctly report total number of vcpus in virHostCPUGetMap (rhbz#1456793)
  - qemu: Report shutdown event details (rhbz#1384007)
  - qemu: json: Fix daemon crash on handling domain shutdown event (rhbz#1384007)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-8
changelog:
  - qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
  - qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
  - daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
  - virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
  - virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
  - qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
  - audit: Fix the output message for shmem (rhbz#1218603)
  - qemu: Set operation on completed migration job (rhbz#1457052)
  - qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
  - virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
  - qemu: Fix serial stub console allocation (rhbz#1434278)
  - conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
  - conf: Refactor virCPUDefParseXML (rhbz#1441662)
  - conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
  - conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
  - qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
  - qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
  - qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
  - qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
  - qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
  - qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
  - conf: Introduce virSaveCookie (rhbz#1441662)
  - conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
  - qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
  - qemu: Store save cookie in save images and snapshots (rhbz#1441662)
  - qemu: Remember CPU def from domain start (rhbz#1441662)
  - qemu: Report the original CPU in migratable xml (rhbz#1441662)
  - qemu: Always send persistent XML during migration (rhbz#1441662)
  - qemu: Send updated CPU in migration cookie (rhbz#1441662)
  - qemu: Store updated CPU in save cookie (rhbz#1441662)
  - qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
  - docs: correct improper information about domain states in virsh manpage (rhbz#1408778)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-10
changelog:
  - qemu: Set iface MTU on hotplug (rhbz#1408701)
  - Use a separate buffer for <input> subelements (rhbz#1283251)
  - Use a separate buffer for <disk><driver> (rhbz#1283251)
  - Use a separate buffer for <controller><driver> (rhbz#1283251)
  - Use a separate buffer for <filesystem><driver> (rhbz#1283251)
  - conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
  - conf: add iotlb attribute to iommu (rhbz#1283251)
  - qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
  - qemuxml2xmltest: add virtio-options test (rhbz#1283251)
  - conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
  - Add virtio-related options to interfaces (rhbz#1283251)
  - add virtio-related options to memballoon (rhbz#1283251)
  - Add virtio-related options to disks (rhbz#1283251)
  - Add virtio-related options to controllers (rhbz#1283251)
  - Add virtio-related options to filesystems (rhbz#1283251)
  - Add virtio-related options to rng devices (rhbz#1283251)
  - Add virtio-related options to video (rhbz#1283251)
  - Add virtio-related options to input devices (rhbz#1283251)
  - qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
  - qemu: format virtio-related options on the command line (rhbz#1283251)
  - qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
  - qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
  - qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
  - qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
  - qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
  - qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
  - qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-11
changelog:
  - util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
  - util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
  - util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
  - util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
  - util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
  - util: storage: Report errors when source host data is missing (rhbz#1461638)
  - util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
  - util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
  - util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
  - util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
  - util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
  - qemu: Allow live-updates of coalesce settings (rhbz#1414627)
  - qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
  - util: storage: Export virStorageIsRelative (rhbz#1461303)
  - storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
  - qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-7
changelog:
  - conf: Add infrastructure for disk source private data XML (rhbz#1523261)
  - util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
  - qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
  - qemu: remove input device after receiving the event (rhbz#1524837)
  - conf: honor maxnames in nodeListDevices API (rhbz#1528572)
  - storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
  - util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
  - util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
  - cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
  - conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
  - qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
  - cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-8
changelog:
  - qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
  - RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
  - cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
  - qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
  - qemu: Fix type of a completed job (rhbz#1523036)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-9
changelog:
  - qemu: Fix crash in offline migration (rhbz#1536351)
  - Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
  - qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
  - qemu: Don't initialize struct utsname (rhbz#1525182)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-10
changelog:
  - storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
  - util: json: Add helper to return string or number properties as string (rhbz#1540290)
  - util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
  - util: Introduce virFormatIntPretty (rhbz#1289368)
  - util: Make prefix optional in virBitampString (rhbz#1289368)
  - util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
  - util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
  - util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
  - util: Introduce virBitmapNewString (rhbz#1289368)
  - util: Reintroduce virBitmapSubtract (rhbz#1289368)
  - util: Introduce virBitmapShrink (rhbz#1289368)
  - conf: Sort cache banks in capabilities XML (rhbz#1289368)
  - conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
  - tests: Remove executable bits on plain data files (rhbz#1289368)
  - tests: Minor adjustments for test data (rhbz#1289368)
  - tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
  - util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
  - Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
  - util: Add virResctrlInfo (rhbz#1289368)
  - conf: Use virResctrlInfo in capabilities (rhbz#1289368)
  - util: Remove now-unneeded resctrl functions (rhbz#1289368)
  - fixup_resctrlinfo (rhbz#1289368)
  - resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
  - conf: Add support for cputune/cachetune (rhbz#1289368)
  - tests: Add virresctrltest (rhbz#1289368)
  - qemu: Add support for resctrl (rhbz#1289368)
  - tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
  - resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
  - util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
  - util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
  - util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
  - util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
  - util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
  - util: Add helpers for getting resctrl group allocs (rhbz#1289368)
  - util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
  - util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
  - qemu: Restore machinename even without cgroups (rhbz#1289368)
  - util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
  - qemu: Restore resctrl alloc data after restart (rhbz#1289368)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-11
changelog:
  - qemu: migration: Refresh device information after transferring state (rhbz#1463168)
  - qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
  - util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
  - util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
  - tests: Add test for properly removing cachetune entries (rhbz#1540817)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-12
changelog:
  - util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
  - qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
  - qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
  - util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
  - qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
  - qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
  - qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
  - qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-14.el7_5.1
changelog:
  - virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
  - conf: Check for user aliases duplicates only (rhbz#1554962)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-14.el7_5.3
changelog:
  - qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
  - util: Introduce virStringListMerge (rhbz#1564996)
  - util: Introduce virDevMapperGetTargets (rhbz#1564996)
  - qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-14.el7_5.4
changelog:
  - lxc: Drop useless check in live device update (rhbz#1557922)
  - Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
  - qemu: Fix updating device with boot order (rhbz#1557922)
  - conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
  - vmx: check for present/enabled devices earlier (rhbz#1566524)
  - vmx: allocate space for network interfaces if needed (rhbz#1566524)
  - internal: add STRCASEPREFIX (rhbz#1566524)
  - vmx: convert any amount of NICs (rhbz#1566524)
  - qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
  - qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
  - qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-14.el7_5.6
changelog:
  - logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
  - util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
  - cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
  - virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)


author: Jiri Denemark <jdenemar@redhat.com> - 3.9.0-14.el7_5.8
changelog:
  - remote: Extract common clearing of event callbacks of client private data (rhbz#1619206)
  - remote: Move the call to remoteClientFreePrivateCallbacks from FreeFunc to CloseFunc (rhbz#1619206)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-10.el7_6.2
changelog:
  - virfile: fix cast-align error (rhbz#1635705)
  - virfiletest: Fix test name prefix for virFileInData test (rhbz#1635705)
  - virfiletst: Test virFileIsSharedFS (rhbz#1635705)
  - virFileIsSharedFSType: Detect direct mount points (rhbz#1635705)
  - virfile: Rework virFileIsSharedFixFUSE (rhbz#1635705)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-10.el7_6.3
changelog:
  - virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1641798)
  - qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634759)
  - qemu: Report more appropriate running reasons (rhbz#1634759)
  - qemu: Pass running reason to RESUME event handler (rhbz#1634759)
  - qemu: Map running reason to resume event detail (rhbz#1634759)
  - qemu: Avoid duplicate resume events and state changes (rhbz#1634759)
  - qemu: Don't ignore resume events (rhbz#1634759)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-10.el7_6.4
changelog:
  - qemu: Fix post-copy migration on the source (rhbz#1654732)
  - RHEL: cpu_map: Mark arch-facilities feature as non-migratable (rhbz#1664793)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-10.el7_6.5
changelog:
  - virfile: Detect ceph as shared FS (rhbz#1672178)
  - util: Don't overflow in virRandomBits (rhbz#1667329)
  - virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1667329)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-10.el7_6.7
changelog:
  - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515)
  - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515)
  - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515)
  - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515)
  - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515)
  - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515)
  - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515)
  - cpu_x86: Store CPU signature in an array (rhbz#1687515)
  - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515)
  - cpu_map: Add hex representation of signatures (rhbz#1687515)
  - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515)
  - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515)
  - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515)
  - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515)
  - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515)
  - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515)
  - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515)
  - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515)
  - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515)
  - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515)
  - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515)
  - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715)
  - storage: Rework virStorageBackendSCSISerial (rhbz#1687715)
  - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715)
  - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-10.el7_6.8
changelog:
  - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
  - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)
  - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-10.el7_6.10
changelog:
  - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173)
  - admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
  - locking: restrict sockets to mode 0600 (CVE-2019-10132)
  - logging: restrict sockets to mode 0600 (CVE-2019-10132)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-10.el7_6.12
changelog:
  - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
  - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
  - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
  - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-4
changelog:
  - qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
  - qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
  - qemu: Fix setting global_period cputune element (rhbz#1600427)
  - tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
  - qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
  - qemu: command: Move graphics iteration to its own function (rhbz#1475770)
  - qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
  - conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
  - conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
  - qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
  - tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
  - tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
  - qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
  - qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
  - qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
  - qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
  - conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
  - conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
  - conf: Introduce new <hostdev> attribute 'display' (rhbz#1475770)
  - qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
  - docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
  - conf: Introduce new video type 'none' (rhbz#1475770)
  - virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
  - tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
  - src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-5
changelog:
  - esx storage: Fix typo lsilogic -> lsiLogic (rhbz#1571759)
  - networkGetDHCPLeases: Don't always report error if unable to read leases file (rhbz#1600468)
  - nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
  - qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
  - qemuDomainSaveMemory: Don't enforce dynamicOwnership (rhbz#1589115)
  - domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
  - examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-6
changelog:
  - qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
  - conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-7
changelog:
  - qemu_migration: Avoid writing to freed memory (rhbz#1593137)
  - qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
  - tests: rename hugepages to hugepages-default (rhbz#1591235)
  - tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
  - tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
  - tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
  - tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
  - tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
  - tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
  - tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
  - tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
  - tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
  - tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
  - tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
  - tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
  - tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
  - tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
  - tests: introduce hugepages-nodeset (rhbz#1591235)
  - conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
  - conf: Move hugepages validation out of XML parser (rhbz#1591235)
  - conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
  - tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
  - qemu: Fix probing of AMD SEV support (rhbz#1612009)
  - qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-8
changelog:
  - storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
  - access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
  - qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-9
changelog:
  - virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
  - virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
  - virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-10.el7_6.1
changelog:
  - security: dac: also label listen UNIX sockets (rhbz#1635228)
  - qemu: fix up permissions for pre-created UNIX sockets (rhbz#1635228)
  - virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1635705)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-1
changelog:
  - Rebased to libvirt-4.5.0 (rhbz#1563169)
  - The rebase also fixes the following bugs:
      rhbz#1291851, rhbz#1393106, rhbz#1468422, rhbz#1469338, rhbz#1526382
      rhbz#1529059, rhbz#1541921, rhbz#1544869, rhbz#1552092, rhbz#1568407
      rhbz#1583623, rhbz#1584091, rhbz#1585108, rhbz#1586027, rhbz#1588295
      rhbz#1588336, rhbz#1589730, rhbz#1590214, rhbz#1591017, rhbz#1591561
      rhbz#1591628, rhbz#1591645, rhbz#1593549


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-2
changelog:
  - qemu: Add capability for the HTM pSeries feature (rhbz#1525599)
  - conf: Parse and format the HTM pSeries feature (rhbz#1525599)
  - qemu: Format the HTM pSeries feature (rhbz#1525599)
  - qemu: hotplug: Don't access srcPriv when it's not allocated (rhbz#1597550)
  - qemuDomainNestedJobAllowed: Allow QEMU_JOB_NONE (rhbz#1598084)
  - src: Mention DEVICE_REMOVAL_FAILED event in virDomainDetachDeviceAlias docs (rhbz#1598087)
  - virsh.pod: Drop --persistent for detach-device-alias (rhbz#1598087)
  - qemu: don't use chardev FD passing with standalone args (rhbz#1598281)
  - qemu: remove chardevStdioLogd param from vhostuser code path (rhbz#1597940)
  - qemu: consolidate parameters of qemuBuildChrChardevStr into flags (rhbz#1597940)
  - qemu: don't use chardev FD passing for vhostuser backend (rhbz#1597940)
  - qemu: fix UNIX socket chardevs operating in client mode (rhbz#1598440)
  - qemuDomainDeviceDefValidateNetwork: Check for range only if IP prefix set (rhbz#1515533)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-3
changelog:
  - qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
  - qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
  - spec: Explicitly require matching libvirt-libs (rhbz#1600122)
  - virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
  - qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
  - qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
  - virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
  - qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
  - qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
  - qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
  - qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
  - virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
  - docs: schema: Add missing <alias> to vsock device (rhbz#1600345)
  - virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184)


author: Jiri Denemark <jdenemar@redhat.com> - 4.5.0-14
changelog:
  - cpu_map: Add features for Icelake CPUs (rhbz#1527659, rhbz#1526624)
  - cpu_map: Add Icelake CPU models (rhbz#1526624)
  - cpu_x86: Do not cache microcode version (rhbz#1576369)
  - qemu: Don't cache microcode version (rhbz#1576369)
  - util: Rename some functions of virresctrl (rhbz#1468650)
  - util: Refactor virResctrlGetInfo in virresctrl (rhbz#1468650)
  - util: Refactor virResctrlAllocFormat of virresctrl (rhbz#1468650)
  - util: Add MBA capability information query to resctrl (rhbz#1468650)
  - util: Add MBA check to virResctrlInfoGetCache (rhbz#1468650)
  - util: Add MBA allocation to virresctrl (rhbz#1468650)
  - util: Add MBA schemata parse and format methods (rhbz#1468650)
  - util: Add support to calculate MBA utilization (rhbz#1468650)
  - util: Introduce virResctrlAllocForeachMemory (rhbz#1468650)
  - util: Introduce virResctrlAllocSetMemoryBandwidth (rhbz#1468650)
  - conf: Rename cachetune to resctrl (rhbz#1468650)
  - conf: Factor out vcpus parsing part from virDomainCachetuneDefParse (rhbz#1468650)
  - conf: Factor out vcpus overlapping from virDomainCachetuneDefParse (rhbz#1468650)
  - conf: Factor out virDomainResctrlDef update from virDomainCachetuneDefParse (rhbz#1468650)
  - conf: Add support for memorytune XML processing for resctrl MBA (rhbz#1468650)
  - conf: Add return value check to virResctrlAllocForeachCache (rhbz#1468650)
  - conf: Add memory bandwidth allocation capability of host (rhbz#1468650)
  - conf: Fix bug in finding alloc through matching vcpus (rhbz#1468650)
  - resctrl: Do not calculate free bandwidth for MBA (rhbz#1468650)
  - resctrl: Set MBA defaults properly (rhbz#1468650)
  - resctrl: Fix testing line (rhbz#1468650)
  - virresctrl: fix MBA memory leak (rhbz#1468650)
  - test: caps: Add capabilities for QEMU 3.1.0 (rhbz#1628892)
  - util: Introduce virHostGetDRMRenderNode helper (rhbz#1628892)
  - conf: Introduce virDomainGraphics-related helpers (rhbz#1628892)
  - qemu: process: spice: Pick the first available DRM render node (rhbz#1628892)
  - qemu: command: Introduce qemuBuildGraphicsEGLHeadlessCommandLine helper (rhbz#1628892)
  - qemu: caps: Introduce QEMU_EGL_HEADLESS_RENDERNODE capability (rhbz#1628892)
  - conf: gfx: Add egl-headless as a member to virDomainGraphicsDef struct (rhbz#1628892)
  - conf: gfx: egl-headless: Introduce a new <gl> subelement (rhbz#1628892)
  - qemu: domain: egl-headless: Add the DRI device into the namespace (rhbz#1628892)
  - qemu: cgroup: gfx: egl-headless: Add the DRI device into the cgroup list (rhbz#1628892)
  - security: dac: gfx: egl-headless: Relabel the DRI device (rhbz#1628892)
  - qemu: command: gfx: egl-headless: Add 'rendernode' option to the cmdline (rhbz#1628892)
  - domain: conf: graphics: Fix picking DRI renderer automatically for SPICE (rhbz#1628892)
  - qemu: domain: gfx: Fix shadowing of a function argument in validation (rhbz#1628892)


