# changelog

author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-30.el6]
changelog:
  - [perf] sync tools/perf to 2.6.34 (Jason Baron) [578987]
  - [drm] i915: Update to 2.6.34-rc7 (Adam Jackson) [592003]
  - [perf] userspace and core update fix (Jason Baron) [567828 578987]
  - [perf] rhel6 perf fixups (Jason Baron) [567828 578987]
  - [perf] backport latest core perf support (Jason Baron) [567828 578987]
  - [perf] pull back 'perf' userspace (Jason Baron) [567828 578987]
  - [drm] radeon/kms: report lvds status as unknown with closed lid (Jerome Glisse) [585111 591628]
  - [drm] fbdev: fix cloning on fbcon (Dave Airlie) [512023]
  - [drm] fbcon disconnected + hotplug operation (Jerome Glisse) [580789]
  - [kernel] slow-work: use get_ref wrapper instead of directly calling get_ref (Dave Airlie) [580789]
  - [drm] radeon/kms: add special workaround for triple head servers (Dave Airlie) [512023]
  - [infiniband] RDMA: Use rlimit helpers (Doug Ledford) [500229]
  - [infiniband] ipoib: returned back addrlen check for mc addresses (Doug Ledford) [500229]
  - [infiniband] RDMA/amso1100: Fix error paths in post_send and post_recv (Doug Ledford) [500229]
  - [infiniband] IB/srp: Clean up error path in srp_create_target_ib() (Doug Ledford) [500229]
  - [infiniband] IB/srp: Split send and recieve CQs to reduce number of interrupts (Doug Ledford) [500229]
  - [infiniband] rdma: potential ERR_PTR dereference (Doug Ledford) [500229]
  - [infiniband] RDMA/cm: Set num_paths when manually assigning path records (Doug Ledford) [500229]
  - [infiniband] IB/cm: Fix device_create() return value check (Doug Ledford) [500229]
  - [infiniband] IB/ucm: Clean whitespace errors (Doug Ledford) [500229]
  - [infiniband] IB/ucm: Increase maximum devices supported (Doug Ledford) [500229]
  - [infiniband] IB/ucm: Use stack variable 'base' in ib_ucm_add_one (Doug Ledford) [500229]
  - [infiniband] IB/ucm: Use stack variable 'devnum' in ib_ucm_add_one (Doug Ledford) [500229]
  - [infiniband] RDMA/cm: Remove unused definition of RDMA_PS_SCTP (Doug Ledford) [500229]
  - [infiniband] RDMA/cm: Revert association of an RDMA device when binding to loopback (Doug Ledford) [500229]
  - [infiniband] IB/addr: Correct CONFIG_IPv6 to CONFIG_IPV6 (Doug Ledford) [500229]
  - [infiniband] IB/addr: Fix IPv6 routing lookup (Doug Ledford) [500229]
  - [infiniband] IB/addr: Simplify resolving IPv4 addresses (Doug Ledford) [500229]
  - [infiniband] RDMA/cm: fix loopback address support (Doug Ledford) [500229]
  - [infiniband] IB/addr: Store net_device type instead of translating to RDMA transport (Doug Ledford) [500229]
  - [infiniband] IB/addr: Verify source and destination address families match (Doug Ledford) [500229]
  - [infiniband] RDMA/cma: Replace net_device pointer with index (Doug Ledford) [500229]
  - [infiniband] RDMA/cma: Fix AF_INET6 support in multicast joining (Doug Ledford) [500229]
  - [infiniband] RDMA/cma: Correct detection of SA Created MGID (Doug Ledford) [500229]
  - [infiniband] RDMA/addr: Use appropriate locking with for_each_netdev() (Doug Ledford) [500229]
  - [infiniband] RDMA/ucma: Add option to manually set IB path (Doug Ledford) [500229]
  - [infiniband] IB/mad: Ignore iWARP devices on device removal (Doug Ledford) [500229]
  - [infiniband] IB/umad: Clean whitespace (Doug Ledford) [500229]
  - [infiniband] IB/umad: Increase maximum devices supported (Doug Ledford) [500229]
  - [infiniband] IB/umad: Use stack variable 'base' in ib_umad_init_port (Doug Ledford) [500229]
  - [infiniband] IB/umad: Use stack variable 'devnum' in ib_umad_init_port (Doug Ledford) [500229]
  - [infiniband] IB/umad: Remove port_table[] (Doug Ledford) [500229]
  - [infiniband] IB/umad: Convert *cdev to cdev in struct ib_umad_port (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Use anon_inodes instead of private infinibandeventfs (Doug Ledford) [500229]
  - [infiniband] IB/core: Fix and clean up ib_ud_header_init() (Doug Ledford) [500229]
  - [infiniband] IB/core: Pack struct ib_device a little tighter (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Whitespace cleanup (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Pack struct ib_uverbs_event_file tighter (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Increase maximum devices supported (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: use stack variable 'base' in ib_uverbs_add_one (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Use stack variable 'devnum' in ib_uverbs_add_one (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Remove dev_table (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Convert *cdev to cdev in struct ib_uverbs_device (Doug Ledford) [500229]
  - [infiniband] IB/uverbs: Fix return of PTR_ERR() of wrong pointer in ib_uverbs_get_context() (Doug Ledford) [500229]
  - [infiniband] IB: Clarify the documentation of ib_post_send() (Doug Ledford) [500229]
  - [infiniband] IB/ehca: Allow access for ib_query_qp() (Doug Ledford) [500229]
  - [infiniband] IB/ehca: Do not turn off irqs in tasklet context (Doug Ledford) [500229]
  - [infiniband] IB/ehca: Fix error paths in post_send and post_recv (Doug Ledford) [500229]
  - [infiniband] IB/ehca: Rework destroy_eq() (Doug Ledford) [500229]
  - [infiniband] IPoIB: Include return code in trace message for ib_post_send() failures (Doug Ledford) [500229]
  - [infiniband] IPoIB: Fix TX queue lockup with mixed UD/CM traffic (Doug Ledford) [500229]
  - [infiniband] IPoIB: Remove TX moderation settings from ethtool support (Doug Ledford) [500229]
  - [infiniband] IB/ipath: Use bitmap_weight() (Doug Ledford) [500229]
  - [infiniband] Remove BKL from ipath_open() (Doug Ledford) [500229]
  - [rds] remove uses of NIPQUAD, use pI4 (Doug Ledford) [500229]
  - [rds] RDS/IB+IW: Move recv processing to a tasklet (Doug Ledford) [500229]
  - [rds] Do not send congestion updates to loopback connections (Doug Ledford) [500229]
  - [rds] Fix panic on unload (Doug Ledford) [500229]
  - [rds] Fix potential race around rds_i[bw]_allocation (Doug Ledford) [500229]
  - [rds] Add GET_MR_FOR_DEST sockopt (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Check correct variable for allocation failure (Doug Ledford) [500229]
  - [infiniband] mlx4: replace the dma_sync_single_range_for_cpu/device API (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Simplify retrieval of ib_device (Doug Ledford) [500229]
  - [infiniband] mlx4_core: Fix cleanup in __mlx4_init_one() error path (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Fix queue overflow check in post_recv (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Initialize SRQ scatter entries when creating an SRQ (Doug Ledford) [500229]
  - [infiniband] mlx4: use bitmap_find_next_zero_area (Doug Ledford) [500229]
  - [infiniband] mlx4_core: return a negative error value (Doug Ledford) [500229]
  - [infiniband] mlx4_core: Fix parsing of reserved EQ cap (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Remove limitation on LSO header size (Doug Ledford) [500229]
  - [infiniband] IB/mlx4: Remove unneeded code (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Correct cap.max_inline_data assignment in nes_query_qp() (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix CX4 link problem in back-to-back configuration (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Clear stall bit before destroying NIC QP (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Set assume_aligned_header bit (Doug Ledford) [500229]
  - [infiniband] convert to use netdev_for_each_mc_addr (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Add support for KR device id 0x0110 (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Change WQ overflow return code (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Multiple disconnects cause crash during AE handling (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix crash when listener destroyed during loopback setup (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Use atomic counters for CM listener create and destroy (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix stale ARP issue (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: FIN during MPA startup causes timeout (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Free kmap() resources (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Check for zero STag (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix Xansation test crash on cm_node ref_count (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Abnormal listener exit causes loopback node crash (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix crash in nes_accept() (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Resource not freed for REJECTed connections (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: MPA request/response error checking (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix query of ORD values (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Fix MAX_CM_BUFFER define (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Pass correct size to ioremap_nocache() (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Update copyright and branding string (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Add max_cqe check to nes_create_cq() (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Clean up struct nes_qp (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Implement IB_SIGNAL_ALL_WR as an iWARP extension (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Add additional SFP+ PHY uC status check and PHY reset (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Correct fast memory registration implementation (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: Add support for IB_WR_*INV (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: In nes_post_recv() always set bad_wr on error (Doug Ledford) [500229]
  - [infiniband] RDMA/nes: In nes_post_send() always set bad_wr on error (Doug Ledford) [500229]
  - [netdrv] cxgb3: fix linkup issue (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Wait at least one schedule cycle during device removal (Doug Ledford) [500229]
  - [netdrv] cxgb3: fix hot plug removal crash (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Mark RDMA device with CXIO_ERROR_FATAL when removing (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Don't allocate the SW queue for user mode CQs (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Increase the max CQ depth (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Doorbell overflow avoidance and recovery (Doug Ledford) [500229]
  - [netdrv] cxgb3: convert to use netdev_for_each_addr (Doug Ledford) [500229]
  - [netdrv] cxgb3: fix link flap (Doug Ledford) [500229]
  - [netdrv] cxgb3: FIx VLAN over Jumbo frames (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Remove BUG_ON() on CQ rearm failure (Doug Ledford) [500229]
  - [netdrv] cxgb3: fix GRO checksum check (Doug Ledford) [500229]
  - [netdrv] cxgb3: add memory barriers (Doug Ledford) [500229]
  - [netdrv] iwch_cm.c: use pM to show MAC address (Doug Ledford) [500229]
  - [netdrv] cxgb3: Use kzalloc for allocating only one thing (Doug Ledford) [500229]
  - [netdrv] RDMA/cxgb3: Fix error paths in post_send and post_recv (Doug Ledford) [500229]
  - [netdrv] cxgb3: declare MODULE_FIRMWARE (Doug Ledford) [500229]
  - [netdrv] cxgb3: Set the rxq (Doug Ledford) [500229]
  - [netdrv] cxgb3: No need to wake queue in xmit handler (Doug Ledford) [500229]
  - [netdrv] cxgb3: Added private MAC address and provisioning packet handler for iSCSI (Doug Ledford) [500229]
  - [net] Hook up cxgb4 to Kconfig and Makefile (Doug Ledford) [500229]
  - [netdrv] cxgb4: Add remaining driver headers and L2T management (Doug Ledford) [500229]
  - [netdrv] cxgb4: Add main driver file and driver Makefile (Doug Ledford) [500229]
  - [netdrv] cxgb4: Add HW and FW support code (Doug Ledford) [500229]
  - [netdrv] cxgb4: Add packet queues and packet DMA code (Doug Ledford) [500229]
  - [netdrv] cxgb4: Add register, message, and FW definitions (Doug Ledford) [500229]
  - [net] use helpers to access mc list (Doug Ledford) [500229]
  - [net] use helpers to access uc list (Doug Ledford) [500229]
  - [kernel] strstrip incorrectly marked __must_check (Doug Ledford) [500229]
  - [pci] introduce pci_pcie_cap() (Doug Ledford) [500229]
  - [pci] cache PCIe capability offset (Doug Ledford) [500229]
  - [kernel] bitmap: introduce bitmap_set, bitmap_clear, bitmap_find_next_zero_area (Doug Ledford) [500229]
  - [md] Remove unnecessary casts of void * (Doug Ledford) [583050 586296 586299 588371]
  - [md] expose max value of behind writes counter (Doug Ledford) [583050 586296 586299 588371]
  - [md] remove some dead fields from mddev_s (Doug Ledford) [583050 586296 586299 588371]
  - [md] allow integers to be passed to md/level (Doug Ledford) [583050 586296 586299 588371]
  - [md] notify mdstat waiters of level change (Doug Ledford) [583050 586296 586299 588371]
  - [md] don't unregister the thread in mddev_suspend (Doug Ledford) [583050 586296 586299 588371]
  - [md] factor out init code for an mddev (Doug Ledford) [583050 586296 586299 588371]
  - [md] pass mddev to make_request functions rather than request_queue (Doug Ledford) [583050 586296 586299 588371]
  - [md] call md_stop_writes from md_stop (Doug Ledford) [583050 586296 586299 588371]
  - [md] split md_set_readonly out of do_md_stop (Doug Ledford) [583050 586296 586299 588371]
  - [md] factor md_stop_writes out of do_md_stop (Doug Ledford) [583050 586296 586299 588371]
  - [md] start to refactor do_md_stop (Doug Ledford) [583050 586296 586299 588371]
  - [md] factor do_md_run to separate accesses to ->gendisk (Doug Ledford) [583050 586296 586299 588371]
  - [md] remove ->changed and related code (Doug Ledford) [583050 586296 586299 588371]
  - [md] don't reference gendisk in getgeo (Doug Ledford) [583050 586296 586299 588371]
  - [md] move io accounting out of personalities into md_make_request (Doug Ledford) [583050 586296 586299 588371]
  - [md] notify level changes through sysfs (Doug Ledford) [583050 586296 586299 588371]
  - [md] Relax checks on ->max_disks when external metadata handling is used (Doug Ledford) [583050 586296 586299 588371]
  - [md] Correctly handle device removal via sysfs (Doug Ledford) [583050 586296 586299 588371]
  - [md] Add support for Raid5->Raid0 and Raid10->Raid0 takeover (Doug Ledford) [583050 586296 586299 588371]
  - [md] Add support for Raid0->Raid5 takeover (Doug Ledford) [583050 586296 586299 588371]
  - [md] discard StateChanged device flag (Doug Ledford) [583050 586296 586299 588371]
  - [md] manage redundancy group in sysfs when changing level (Doug Ledford) [583050 586296 586299 588371]
  - [md] remove unneeded sysfs files more promptly (Doug Ledford) [583050 586296 586299 588371]
  - [md] set mddev readonly flag on blkdev BLKROSET ioctl (Doug Ledford) [583050 586296 586299 588371]
  - [md] don't insist on valid event count for spare devices (Doug Ledford) [583050 586296 586299 588371]
  - [md] simplify updating of event count to sometimes avoid updating spares (Doug Ledford) [583050 586296 586299 588371]
  - [md] restore ability of spare drives to spin down (Doug Ledford) [583050 586296 586299 588371]
  - [md] raid6: Fix raid-6 read-error correction in degraded state (Doug Ledford) [583050 586296 586299 588371]
  - [md] raid5: allow for more than 2^31 chunks (Doug Ledford) [583050 586296 586299 588371]
  - [md] deal with merge_bvec_fn in component devices better (Doug Ledford) [583050 586296 586299 588371]
  - [md] fix some lockdep issues between md and sysfs (Doug Ledford) [583050 586296 586299 588371]
  - [md] fix 'degraded' calculation when starting a reshape (Doug Ledford) [583050 586296 586299 588371]
  - [md] allow a resync that is waiting for other resync to complete, to be aborted (Doug Ledford) [583050 586296 586299 588371]
  - [md] remove unnecessary code from do_md_run (Doug Ledford) [583050 586296 586299 588371]
  - [md] make recovery started by do_md_run() visible via sync_action (Doug Ledford) [583050 586296 586299 588371]
  - [md] use pU to print UUIDs (Doug Ledford) [583050 586296 586299 588371]
  - [md] add 'recovery_start' per-device sysfs attribute (Doug Ledford) [583050 586296 586299 588371]
  - [md] rcu_read_lock() walk of mddev->disks in md_do_sync() (Doug Ledford) [583050 586296 586299 588371]
  - [md] integrate spares into array at earliest opportunity (Doug Ledford) [583050 586296 586299 588371]
  - [md] move compat_ioctl handling into md.c (Doug Ledford) [583050 586296 586299 588371]
  - [md] add MODULE_DESCRIPTION for all md related modules (Doug Ledford) [583050 586296 586299 588371]
  - [md] raid: improve MD/raid10 handling of correctable read errors (Doug Ledford) [583050 586296 586299 588371]
  - [md] raid10: print more useful messages on device failure (Doug Ledford) [583050 586296 586299 588371]
  - [md] bitmap: update dirty flag when bitmap bits are explicitly set (Doug Ledford) [583050 586296 586299 588371]
  - [md] Support write-intent bitmaps with externally managed metadata (Doug Ledford) [583050 586296 586299 588371]
  - [md] bitmap: move setting of daemon_lastrun out of bitmap_read_sb (Doug Ledford) [583050 586296 586299 588371]
  - [md] support updating bitmap parameters via sysfs (Doug Ledford) [583050 586296 586299 588371]
  - [md] factor out parsing of fixed-point numbers (Doug Ledford) [583050 586296 586299 588371]
  - [md] support bitmap offset appropriate for external-metadata arrays (Doug Ledford) [583050 586296 586299 588371]
  - [md] remove needless setting of thread->timeout in raid10_quiesce (Doug Ledford) [583050 586296 586299 588371]
  - [md] change daemon_sleep to be in 'jiffies' rather than 'seconds' (Doug Ledford) [583050 586296 586299 588371]
  - [md] move offset, daemon_sleep and chunksize out of bitmap structure (Doug Ledford) [583050 586296 586299 588371]
  - [md] collect bitmap-specific fields into one structure (Doug Ledford) [583050 586296 586299 588371]
  - [md] add honouring of suspend_{lo,hi} to raid1 (Doug Ledford) [583050 586296 586299 588371]
  - [md] raid5: don't complete make_request on barrier until writes are scheduled (Doug Ledford) [583050 586296 586299 588371]
  - [md] support barrier requests on all personalities (Doug Ledford) [583050 586296 586299 588371]
  - [md] don't reset curr_resync_completed after an interrupted resync (Doug Ledford) [583050 586296 586299 588371]
  - [md] adjust resync_min usefully when resync aborts (Doug Ledford) [583050 586296 586299 588371]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-29.el6]
changelog:
  - [mm] fix mm_take_all_locks regression in 3-7/49 (Andrea Arcangeli) [556572]
  - [mm] avoid __cpuset_node_allowed_softwall to run when allocation is atomic (Andrea Arcangeli) [556572 591283]
  - [mm] fix race between do_huge_pmd_anonymous_page and pte_alloc_map (Andrea Arcangeli) [556572]
  - [mm] add missing update for root-anon-vma drop_anon_vma in memory compactation (Andrea Arcangeli) [556572]
  - [mm] exec vs split_huge_page (Andrea Arcangeli) [556572]
  - [mm] include anon hugepages into the anon stats (Andrea Arcangeli) [556572]
  - [mm] split_huge_page anon_vma ordering dependency (Andrea Arcangeli) [556572]
  - [mm] align page_add_new_anon_rmap (Andrea Arcangeli) [556572]
  - [mm] do_pages_move cannot handle hugepages (Andrea Arcangeli) [556572]
  - [mm] padding to decrease risk of kabi breakage (Andrea Arcangeli) [556572]
  - [mm] transhuge isolate_migratepages() (Andrea Arcangeli) [556572]
  - [mm] select CONFIG_COMPACTION if TRANSPARENT_HUGEPAGE enabled (Andrea Arcangeli) [556572]
  - [mm] compaction: Do not schedule work on other CPUs for compaction (Andrea Arcangeli) [556572]
  - [mm] Defer compaction using an exponential backoff when compaction fails (Andrea Arcangeli) [556572]
  - [mm] Add a tunable that decides when memory should be compacted and when it should be reclaimed (Andrea Arcangeli) [556572]
  - [mm] Direct compact when a high-order allocation fails (Andrea Arcangeli) [556572]
  - [mm] Add /sys trigger for per-node memory compaction (Andrea Arcangeli) [556572]
  - [mm] Add /proc trigger for memory compaction (Andrea Arcangeli) [556572]
  - [mm] Memory compaction core (Andrea Arcangeli) [556572]
  - [mm] Move definition for LRU isolation modes to a header (Andrea Arcangeli) [556572]
  - [mm] Export fragmentation index via /proc/extfrag_index (Andrea Arcangeli) [556572]
  - [mm] Export unusable free space index via /proc/unusable_index (Andrea Arcangeli) [556572]
  - [mm] Allow CONFIG_MIGRATION to be set without CONFIG_NUMA or memory hot-remove (Andrea Arcangeli) [556572]
  - [mm] Allow the migration of PageSwapCache pages (Andrea Arcangeli) [556572]
  - [mm] Do not try to migrate unmapped anonymous pages (Andrea Arcangeli) [556572]
  - [mm] Share the anon_vma ref counts between KSM and page migration (Andrea Arcangeli) [556572]
  - [mm] Take a reference to the anon_vma before migrating (Andrea Arcangeli) [556572]
  - [mm] add numa awareness to hugepage allocations (Andrea Arcangeli) [556572]
  - [mm] enable direct defrag (Andrea Arcangeli) [556572]
  - [mm] ksm: check for ERR_PTR from follow_page() (Andrea Arcangeli) [556572]
  - [mm] err.h: add helper function to simplify pointer error checking (Andrea Arcangeli) [556572]
  - [mm] don't leave orhpaned swap cache after ksm merging (Andrea Arcangeli) [556572]
  - [mm] adapt to anon-vma root locking (Andrea Arcangeli) [556572]
  - [mm] set default to never (Andrea Arcangeli) [556572]
  - [mm] transparent hugepage bootparam (Andrea Arcangeli) [556572]
  - [mm] remove lumpy reclaim (Andrea Arcangeli) [556572 583003]
  - [mm] memcg fix prepare migration (Andrea Arcangeli) [556572]
  - [mm] avoid false positive warning in mmio (Andrea Arcangeli) [556572]
  - [virt] fix kvm swapping memory corruption (Andrea Arcangeli) [556572 583861]
  - [mm] remove khugepaged/enabled (Andrea Arcangeli) [556572]
  - [mm] use only khugepaged_wait (Andrea Arcangeli) [556572]
  - [mm] khugepaged user stack (Andrea Arcangeli) [556572]
  - [mm] define hugetlb_page (Andrea Arcangeli) [556572]
  - [mm] migration: avoid race between shift_arg_pages() and rmap_walk() during migration by not migrating temporary stacks (Andrea Arcangeli) [556572]
  - [mm] extend KSM refcounts to the anon_vma root (Andrea Arcangeli) [556572]
  - [mm] always lock the root (oldest) anon_vma (Andrea Arcangeli) [556572]
  - [mm] track the root (oldest) anon_vma (Andrea Arcangeli) [556572]
  - [mm] change direct call of spin_lock(anon_vma->lock) to inline function (Andrea Arcangeli) [556572]
  - [mm] rename anon_vma_lock to vma_lock_anon_vma (Andrea Arcangeli) [556572]
  - [mm] rmap: remove anon_vma check in page_address_in_vma() (Andrea Arcangeli) [556572]
  - [mm] mmap: check ->vm_ops before dereferencing (Andrea Arcangeli) [556572]
  - [fs] xfs_export_operations.commit_metadata (Christoph Hellwig) [585442]
  - [fs] xfs: fix inode pincount check in fsync (Christoph Hellwig) [585442]
  - [fs] xfs: miscellaneous fixes from 2.6.34 (Dave Chinner) [585442]
  - [fs] xfs: reserved block pool and ENOSPC fixes from 2.6.34 (Dave Chinner) [542712 585442]
  - [fs] xfs: delayed write metadata from 2.6.34 (Dave Chinner) [585442]
  - [lib] introduce list_sort (Dave Chinner) [585442]
  - [fs] xfs: log fixes from 2.6.34 (Dave Chinner) [585442]
  - [fs] xfs: quota changes from 2.6.34 (Dave Chinner) [585442]
  - [fs] xfs: buffer API cleanups from 2.6.34 (Dave Chinner) [585442]
  - [fs] xfs: AG indexing fixes from 2.6.34 (Dave Chinner) [585442]
  - [fs] xfs: idle kernel thread fixes from 2.6.34 (Dave Chinner) [585442]
  - [fs] online defrag fixes from 2.6.34 (Dave Chinner) [585442]
  - [fs] jbd2: delay discarding buffers in journal_unmap_buffer (Eric Sandeen) [593082]
  - [fs] ext4: Use slab allocator for sub-page sized allocations (Eric Sandeen) [593082]
  - [fs] jbd2: don't use __GFP_NOFAIL in journal_init_common() (Eric Sandeen) [593082]
  - [fs] jbd: jbd-debug and jbd2-debug should be writable (Eric Sandeen) [593082]
  - [fs] ext4: Fixed inode allocator to correctly track a flex_bg's used_dirs (Eric Sandeen) [593082]
  - [fs] ext4: Fix estimate of # of blocks needed to write indirect-mapped files (Eric Sandeen) [593082]
  - [fs] ext4: fix up rb_root initializations to use RB_ROOT (Eric Sandeen) [593082]
  - [fs] ext4: Release page references acquired in ext4_da_block_invalidatepages (Eric Sandeen) [593082]
  - [fs] ext4: make "offset" consistent in ext4_check_dir_entry() (Eric Sandeen) [593082]
  - [fs] ext4: Convert BUG_ON checks to use ext4_error() instead (Eric Sandeen) [593082]
  - [fs] ext4: Handle non empty on-disk orphan link (Eric Sandeen) [593082]
  - [fs] ext4: explicitly remove inode from orphan list after failed direct io (Eric Sandeen) [593082]
  - [fs] ext4: Fix fencepost error in chosing choosing group vs file preallocation (Eric Sandeen) [593082]
  - [fs] ext4: Fix BUG_ON at fs/buffer.c:652 in no journal mode (Eric Sandeen) [593082]
  - [fs] ext4: correctly calculate number of blocks for fiemap (Eric Sandeen) [593082]
  - [fs] ext4: add missing error checking to ext4_expand_extra_isize_ea() (Eric Sandeen) [593082]
  - [fs] ext4: move __func__ into a macro for ext4_warning, ext4_error (Eric Sandeen) [593082]
  - [fs] ext4: Use bitops to read/modify EXT4_I(inode)->i_state (Eric Sandeen) [593082]
  - [fs] ext4: Drop EXT4_GET_BLOCKS_UPDATE_RESERVE_SPACE flag (Eric Sandeen) [593082]
  - [fs] ext4: return correct wbc.nr_to_write in ext4_da_writepages (Eric Sandeen) [593082]
  - [fs] ext4: replace BUG() with return -EIO in ext4_ext_get_blocks (Eric Sandeen) [593082]
  - [virt] KVM SVM Implement workaround for Erratum 383 (Bhavna Sarathy) [592311]
  - [virt] KVM SVM Handle MCEs early in the vmexit process (Bhavna Sarathy) [592311]
  - [usb] serial: ftdi: add CONTEC vendor and product id (Stanislaw Gruszka) [584757]
  - [usb] fix usbfs regression (Stanislaw Gruszka) [584757]
  - [usb] add new ftdi_sio device ids (Stanislaw Gruszka) [580067]
  - [usb] ftdi_sio: add device IDs (several ELV, one Mindstorms NXT) (Stanislaw Gruszka) [580067]
  - [usb] ftdi_sio: new device id for papouch AD4USB (Stanislaw Gruszka) [580067]
  - [v4l] gspca_mr973010a: Fix cif type 1 cameras not streaming on UHCI controllers (Stanislaw Gruszka) [580067]
  - [v4l] DVB: Add support for Asus Europa Hybrid DVB-T card (Stanislaw Gruszka) [580063]
  - [usb] mos7840: add device IDs for B&B electronics devices (Stanislaw Gruszka) [580063]
  - [ppc64] fsl: Add PCI device ids for new QoirQ chips (Stanislaw Gruszka) [580063]
  - [fs] vfs: Fix vmtruncate() regression (Stanislaw Gruszka) [579693]
  - [kernel] sched: Fix task priority bug (Stanislaw Gruszka) [579693]
  - [serial] 8250_pnp: add a new Fujitsu Wacom Tablet PC device (Stanislaw Gruszka) [579693]
  - [i2c] pca: Don't use *_interruptible (Stanislaw Gruszka) [579693]
  - [i2c] Do not use device name after device_unregister (Stanislaw Gruszka) [579693]
  - [kernel] sched: Fix cpu_clock() in NMIs, on !CONFIG_HAVE_UNSTABLE_SCHED_CLOCK (Stanislaw Gruszka) [579693]
  - [hid] add device IDs for new model of Apple Wireless Keyboard (Stanislaw Gruszka) [579693]
  - [v4l] gspca: sn9c20x: Fix test of unsigned (Stanislaw Gruszka) [579693]
  - [x86] SGI UV: Fix mapping of MMIO registers (Stanislaw Gruszka) [579693]
  - [perf] timechart: Use tid not pid for COMM change (Stanislaw Gruszka) [580062]
  - [usb] fix usbstorage for 2770:915d delivers no FAT (Stanislaw Gruszka) [580062]
  - [x86] PCI/PAT: return EINVAL for pci mmap WC request for !pat_enabled (Stanislaw Gruszka) [580062]
  - [acpi] EC: Add wait for irq storm (Stanislaw Gruszka) [580062]
  - [acpi] EC: Accelerate query execution (Stanislaw Gruszka) [580062]
  - [usb] add speed values for USB 3.0 and wireless controllers (Stanislaw Gruszka) [580062]
  - [usb] add missing delay during remote wakeup (Stanislaw Gruszka) [580062]
  - [usb] EHCI & UHCI: fix race between root-hub suspend and port resume (Stanislaw Gruszka) [580062]
  - [usb] EHCI: fix handling of unusual interrupt intervals (Stanislaw Gruszka) [580062]
  - [usb] Don't use GFP_KERNEL while we cannot reset a storage device (Stanislaw Gruszka) [580062]
  - [usb] serial: fix memory leak in generic driver (Stanislaw Gruszka) [580062]
  - [char] nozomi: quick fix for the close/close bug (Stanislaw Gruszka) [580062]
  - [tty] fix race in tty_fasync (Stanislaw Gruszka) [580062]
  - [netdrv] netiucv: displayed TX bytes value much too high (Stanislaw Gruszka) [580063]
  - [block] md: fix small irregularity with start_ro module parameter (Stanislaw Gruszka) [580063]
  - [input] i8042: add Dritek quirk for Acer Aspire 5610 (Stanislaw Gruszka) [580063]
  - [hid] fixup quirk for NCR devices (Stanislaw Gruszka) [580063]
  - [dmi] allow omitting ident strings in DMI tables (Stanislaw Gruszka) [580063]
  - [scsi] scsi_dh: create sysfs file, dh_state for all SCSI disk devices (Stanislaw Gruszka) [580063]
  - [nfs] Revert default r/wsize behavior (Stanislaw Gruszka) [580063]
  - [usb] SIS USB2VGA DRIVER: support KAIREN's USB VGA adaptor USB20SVGA-MB-PLUS (Stanislaw Gruszka) [580067]
  - [input] alps: add support for the touchpad on Toshiba Tecra A11-11L (Stanislaw Gruszka) [584757]
  - [fs] gfs2: stuck in inode wait, no glocks stuck (Robert S Peterson) [583737]
  - [netdrv] cnic: update to to 2.1.1 (Stanislaw Gruszka) [590019]
  - [netdrv] bnx2x: fix system hung after netdev watchdog (Stanislaw Gruszka) [581907]
  - [netdrv] bnx2: Fix most severe bugs in bnx2 2.0.8+ (John Feeney) [590879]
  - [netdrv] Update bnx2 driver to 2.0.8 and fw to mips-06-5.0.0.j6 et al (John Feeney) [464728]
  - [virt] VMware Balloon driver (Amit Shah) [582826]
  - [x86] With Sandybridge graphics, kernel reboots unless 'agp=off' used on command line (John Villalovos) [591294]
  - [kernel] unify string representation of NULL in vsprintf.c (Dave Anderson) [589613]
  - [kernel] coredump: fix the page leak in dump_seek() (Oleg Nesterov) [580126]
  - [edac] EDAC support for Nehalem Memory Controllers (Mauro Carvalho Chehab) [584507]
  - [iscsi] Include support for next gen Dell iSCSI PowerVault controller MD36xxi into RDAC scsi device handler's device list (Shyam Iyer) [593814]
  - [scsi] lpfc Update from 8.3.5.9 to 8.3.5.13 FC/FCoE (Rob Evers) [591648]
  - [infiniband] iser: fix failover slowdown (Mike Christie) [589174]
  - [net] TCP: avoid to send keepalive probes if receiving data (Flavio Leitner) [593052]
  - [nfs] commit_metadata export operation replacing nfsd_sync_dir (Christoph Hellwig) [593652]
  - [ppc64] numa: Add form 1 NUMA affinity (Steve Best) [593466]
  - [ppc64] eeh: Fix a bug when pci structure is null (Steve Best) [593854]
  - [ppc64] perf_event: Fix oops due to perf_event_do_pending call (Steve Best) [593464]
  - [ppc] pseries: Quieten cede latency printk (Steve Best) [591739]
  - [fs] GFS2: Don't "get" xattrs for ACLs when ACLs are turned off (Steven Whitehouse) [546294]
  - [kexec] fix OOPS in crash_kernel_shrink (Steve Best) [592336]
  - [fs] ext4: don't use quota reservation for speculative metadata blocks (Eric Sandeen) [587095]
  - [fs] quota: add the option to not fail with EDQUOT in block allocation (Eric Sandeen) [587095]
  - [fs] quota: use flags interface for dquot alloc/free space (Eric Sandeen) [587095]
  - [fs] ext4: Fix quota accounting error with fallocate (Eric Sandeen) [587095]
  - [fs] ext4: Ensure zeroout blocks have no dirty metadata (Eric Sandeen) [587095]
  - [virt] vhost-net: utilize PUBLISH_USED_IDX feature (Michael S. Tsirkin) [593158]
  - [virt] virtio: put last seen used index into ring itself (Michael S. Tsirkin) [593158]
  - [virt] vhost: fix barrier pairing (Michael S. Tsirkin) [593158]
  - [virt] virtio: use smp_XX barriers on SMP (Michael S. Tsirkin) [593158]
  - [virt] virtio_ring: remove a level of indirection (Michael S. Tsirkin) [593158]
  - [virt] trans_virtio: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio-rng: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio_net: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio_blk: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio_console: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio_balloon: use virtqueue_xxx wrappers (Michael S. Tsirkin) [593158]
  - [virt] virtio: add virtqueue_ vq_ops wrappers (Michael S. Tsirkin) [593158]
  - [virt] vhost-net: fix vq_memory_access_ok error checking (Michael S. Tsirkin) [593158]
  - [virt] vhost: fix error handling in vring ioctls (Michael S. Tsirkin) [593158]
  - [virt] vhost: fix interrupt mitigation with raw sockets (Michael S. Tsirkin) [593158]
  - [virt] vhost: fix error path in vhost_net_set_backend (Michael S. Tsirkin) [593158]
  - [netdrv] iwlwifi: iwl_good_ack_health() only apply to AGN device (John Linville) [573029]
  - [netdrv] iwlwifi: code cleanup for connectivity recovery (John Linville) [573029]
  - [netdrv] iwlwifi: Recover TX flow failure (John Linville) [573029]
  - [netdrv] iwlwifi: move plcp check to separated function (John Linville) [573029]
  - [netdrv] iwlwifi: Recover TX flow stall due to stuck queue (John Linville) [573029]
  - [netdrv] iwlwifi: add internal short scan support for 3945 (John Linville) [573029]
  - [netdrv] iwlwifi: separated time check for different type of force reset (John Linville) [573029]
  - [netdrv] iwlwifi: Adjusting PLCP error threshold for 1000 NIC (John Linville) [573029]
  - [netdrv] iwlwifi: multiple force reset mode (John Linville) [573029]
  - [netdrv] iwlwifi: Tune radio to prevent unexpected behavior (John Linville) [573029]
  - [netdrv] iwlwifi: Logic to control how frequent radio should be reset if needed (John Linville) [573029]
  - [netdrv] iwlwifi: add function to reset/tune radio if needed (John Linville) [573029]
  - [netdrv] iwlwifi: clear all the stop_queue flag after load firmware (John Linville) [573029]
  - [netdrv] iwlwifi: check for aggregation frame and queue (John Linville) [573029]
  - [ppc64] kdump: Fix race in kdump shutdown (Steve Best) [559709]
  - [ppc64] kexec: Fix race in kexec shutdown (Steve Best) [593853]
  - [net] Add ndo_{set|get}_vf_port support for enic dynamic vnics (Chris Wright) [581087]
  - [net] Add netlink support for virtual port management (was iovnl) (Chris Wright) [581087]
  - [net] core: add IFLA_STATS64 support (Chris Wright) [581087]
  - [netdrv] igb: support for VF configuration tools (Chris Wright) [581087]
  - [net] rtnetlink: Add SR-IOV VF configuration methods (Chris Wright) [581087]
  - [pci] Add SR-IOV convenience functions and macros (Chris Wright) [581087]
  - [scsi] sync iscsi layer (Mike Christie) [564148 570682]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-28.el6]
changelog:
  - [mm] New round-robin rotor for SLAB allocations (Larry Woodman) [593154]
  - [netdrv] ixgbe: FCoE fixes (Andy Gospodarek) [593474]
  - [net] vlan: updates vlan real_num_tx_queues (Andy Gospodarek) [593474]
  - [net] vlan: adds vlan_dev_select_queue (Andy Gospodarek) [593474]
  - [net] vlan: Precise RX stats accounting (Andy Gospodarek) [593474]
  - [net] add dev_txq_stats_fold() helper (Andy Gospodarek) [593474]
  - [net] vlan: Add support to netdev_ops.ndo_fcoe_get_wwn for VLAN device (Andy Gospodarek) [593474]
  - [netdrv] ixgbe: fixes for link problems, possible DMA errors, and VF/SR-IOV changes (Andy Gospodarek) [575188]
  - [sound] ALSA HDA driver update 2010-05-11 (Jaroslav Kysela) [591083]
  - [mm] show per-process swap usage via procfs (Larry Woodman) [546533]
  - [netdrv] cxgb3 won't recover from EEH event twice (Steve Best) [591738]
  - [virt] x86, cpu: Print AMD virtualization features in /proc/cpuinfo (Gleb Natapov) [592688]
  - [x86] Intel ICH9 workaround for HPET timer issue on IbexPeak Platform (Luming Yu) [502629]
  - [pci] Update pci_dev and pci_bus structs before kabi freeze (Prarit Bhargava) [593322]
  - [pci] Output FW warning in pci_read/write_vpd (Prarit Bhargava) [586979]
  - [infiniband] ehca: Require in_wc in process_mad() (Steve Best) [593095]
  - [security] mmap_min_addr check CAP_SYS_RAWIO only for write (Eric Paris) [592417]
  - [scsi] aacraid: Eliminate use after free (Tomas Henzl) [592926]
  - [scsi] lpfc Update from 8.3.5.7 to 8.3.5.9 FC/FCoE (Rob Evers) [580677]
  - [char] Eliminate use after free (Amit Shah) [593189]
  - [ipmi] fix unlock balance (Tomas Henzl) [592925]
  - [ppc64] only call start-cpu when a CPU is stopped (Steve Best) [592440]
  - [ppc64] make query_cpu_stopped callable outside hotplug cpu (Steve Best) [592440]
  - [kernel] cpufreq: make the iowait-is-busy-time a sysfs tunable (Rik van Riel) [585330]
  - [kernel] ondemand: Solve the big performance issue with ondemand during disk IO (Rik van Riel) [585330]
  - [kernel] sched: introduce get_cpu_iowait_time_us() (Rik van Riel) [585330]
  - [kernel] sched: eliminate the ts->idle_lastupdate field (Rik van Riel) [585330]
  - [kernel] sched: fold updating of the last update time into update_ts_time_stats() (Rik van Riel) [585330]
  - [kernel] sched: update the idle statistics in get_cpu_idle_time_us (Rik van Riel) [585330]
  - [kernel] sched: introduce a function to update the idle statistics (Rik van Riel) [585330]
  - [kernel] sched: add a comment to get_cpu_idle_time_us (Rik van Riel) [585330]
  - [kernel] nohz: Reuse ktime in sub-functions of tick_check_idle (Rik van Riel) [585330]
  - [virt] Xen PV-on-HVM: Disable xen-blkfront for IDE & SCSI devices (Don Dutile) [523134]
  - [virt] xen: PV-on-HVM: Disable xen-blkfront for PV-on-HVM for now (Don Dutile) [523134]
  - [virt] xen: PV-on-HVM: Prevent pv drivers from crashing a FV guest if pv-on-hvm not configured (Don Dutile) [523134]
  - [virt] xen: PV-on-HVM: Add kernel command line enablement control (Don Dutile) [523134]
  - [virt] xen: backport PV-on-HVM (Don Dutile) [523134]
  - [ppc] pseries: Pass more accurate number of supported cores to firmware (Steve Best) [591341]
  - [ppc] Add static fields to ibm, client-architecture call (Steve Best) [591341]
  - [kernel] mutex: Fix optimistic spinning vs. BKL (Steve Best) [591735]
  - [kernel] mutex: Don't spin when the owner CPU is offline or other weird cases (Steve Best) [591735]
  - [kernel] sched: Don't use possibly stale sched_class (Stanislaw Gruszka) [580067]
  - [usb] unusual_devs: Add support for multiple Option 3G sticks (Stanislaw Gruszka) [580067]
  - [usb] cp210x: Add 81E8 Zephyr Bioharness (Stanislaw Gruszka) [580067]
  - [usb] serial: ftdi: add CONTEC vendor and product id (Stanislaw Gruszka) [580067]
  - [usb] ftdi_sio: sort PID/VID entries in new ftdi_sio_ids.h header (Stanislaw Gruszka) [580067]
  - [usb] ftdi_sio: isolate all device IDs to new ftdi_sio_ids.h header (Stanislaw Gruszka) [580067]
  - [usb] Move hcd free_dev call into usb_disconnect to fix oops (Stanislaw Gruszka) [580067]
  - [usb] remove debugging message for uevent constructions (Stanislaw Gruszka) [580067]
  - [usb] fix crash in uhci_scan_schedule (Stanislaw Gruszka) [580067]
  - [usb] fix the idProduct value for USB-3.0 root hubs (Stanislaw Gruszka) [580067]
  - [usb] xhci: Fix finding extended capabilities registers (Stanislaw Gruszka) [580067]
  - [x86] Fix SCI on IOAPIC != 0 (Stanislaw Gruszka) [580067]
  - [x86] Avoid race condition in pci_enable_msix() (Stanislaw Gruszka) [580067]
  - [x86] thinkpad-acpi: make driver events work in NVRAM poll mode (Stanislaw Gruszka) [580067]
  - [x86] thinkpad-acpi: document HKEY event 3006 (Stanislaw Gruszka) [580067]
  - [x86] thinkpad-acpi: R52 brightness_mode has been confirmed (Stanislaw Gruszka) [580067]
  - [x86] thinkpad-acpi: fix poll thread auto-start (Stanislaw Gruszka) [580067]
  - [net] scm: Only support SCM_RIGHTS on unix domain sockets. (Stanislaw Gruszka) [580067]
  - [usb] serial: sierra driver indat_callback fix (Stanislaw Gruszka) [580067]
  - [tty] Fix the ldisc hangup race (Stanislaw Gruszka) [580067]
  - [kernel] devtmpfs: reset inode permissions before unlinking (Stanislaw Gruszka) [580067]
  - [kernel] driver-core: fix race condition in get_device_parent() (Stanislaw Gruszka) [580067]
  - [pm] hibernate: Fix preallocating of memory (Stanislaw Gruszka) [580067]
  - [tpm] tpm_tis: TPM_STS_DATA_EXPECT workaround (Stanislaw Gruszka) [580067]
  - [fs] Switch proc/self to nd_set_link() (Stanislaw Gruszka) [580067]
  - [hid] usbhid: introduce timeout for stuck ctrl/out URBs (Stanislaw Gruszka) [580067]
  - [hid] add multi-input quirk for NextWindow Touchscreen (Stanislaw Gruszka) [580067]
  - [hid] remove TENX iBuddy from blacklist (Stanislaw Gruszka) [580067]
  - [fs] vfs: take f_lock on modifying f_mode after open time (Stanislaw Gruszka) [580067]
  - [acpi] thinkpad-acpi: wrong thermal attribute_group removed in thermal_exit() (Stanislaw Gruszka) [580067]
  - [acpi] fix "acpi=ht" boot option (Stanislaw Gruszka) [580067]
  - [acpi] remove Asus P2B-DS from acpi=ht blacklist (Stanislaw Gruszka) [580067]
  - [pci] hotplug: check ioremap() return value in ibmphp_ebda.c (Stanislaw Gruszka) [580067]
  - [pci] hotplug: ibmphp: read the length of ebda and map entire ebda region (Stanislaw Gruszka) [580067]
  - [x86] msr/cpuid: Pass the number of minors when unregistering MSR and CPUID drivers (Stanislaw Gruszka) [580063]
  - [fs] fnctl: f_modown should call write_lock_irqsave/restore (Stanislaw Gruszka) [580063]
  - [sound] ASoC: fix a memory-leak in wm8903 (Stanislaw Gruszka) [580063]
  - [mtd] UBI: initialise update marker (Stanislaw Gruszka) [580063]
  - [mtd] UBI: fix memory leak in update path (Stanislaw Gruszka) [580063]
  - [ipc] ns: fix memory leak (idr) (Stanislaw Gruszka) [580063]
  - [input] i8042: remove identification strings from DMI tables (Stanislaw Gruszka) [580063]
  - [netdrv] starfire: clean up properly if firmware loading fails (Stanislaw Gruszka) [580064]
  - [kernel] random: drop weird m_time/a_time manipulation (Stanislaw Gruszka) [580064]
  - [kernel] random: Remove unused inode variable (Stanislaw Gruszka) [580064]
  - [mm] purge fragmented percpu vmap blocks (Stanislaw Gruszka) [580064]
  - [mm] percpu-vmap fix RCU list walking (Stanislaw Gruszka) [580064]
  - [x86] Add quirk for Intel DG45FC board to avoid low memory corruption (Stanislaw Gruszka) [580064]
  - [regulator] Specify REGULATOR_CHANGE_STATUS for WM835x LED constraints (Stanislaw Gruszka) [580064]
  - [x86] Add Dell OptiPlex 760 reboot quirk (Stanislaw Gruszka) [580064]
  - [mm] fix migratetype bug which slowed swapping (Stanislaw Gruszka) [580064]
  - [input] winbond-cir: remove dmesg spam (Stanislaw Gruszka) [580064]
  - [acpi] Advertise to BIOS in _OSC: _OST on _PPC changes (Stanislaw Gruszka) [580064]
  - [infiniband] Fix failure exit in ipathfs (Stanislaw Gruszka) [580064]
  - [acpi] fix OSC regression that caused aer and pciehp not to load (Stanislaw Gruszka) [580064]
  - [acpi] Add platform-wide _OSC support (Stanislaw Gruszka) [580064]
  - [acpi] Add a generic API for _OSC (Stanislaw Gruszka) [580064]
  - [s390x] fix single stepped svcs with TRACE_IRQFLAGS=y (Stanislaw Gruszka) [580064]
  - [fs] sysfs: sysfs_sd_setattr set iattrs unconditionally (Stanislaw Gruszka) [580065]
  - [acpi] fix High cpu temperature with 2.6.32 (Stanislaw Gruszka) [580065]
  - [usb] usbfs: properly clean up the as structure on error paths (Stanislaw Gruszka) [580065]
  - [kernel] class: Free the class private data in class_release (Stanislaw Gruszka) [580065]
  - [serial] 8250: add serial transmitter fully empty test (Stanislaw Gruszka) [580065]
  - [rtc] rtc-fm3130: add missing braces (Stanislaw Gruszka) [580065]
  - [ata] Call flush_dcache_page after PIO data transfers in libata-sff.c (Stanislaw Gruszka) [580065]
  - [net] dst: call cond_resched() in dst_gc_task() (Stanislaw Gruszka) [580065]
  - [crypto] padlock-sha: Add import/export support (Stanislaw Gruszka) [580065]
  - [x86] dell-wmi, hp-wmi: check wmi_get_event_data() return value (Stanislaw Gruszka) [580065]
  - [tpm] tpm_infineon: fix suspend/resume handler for pnp_driver (Stanislaw Gruszka) [580065]
  - [usb] ftdi_sio: add USB device ID's for B&B Electronics line (Stanislaw Gruszka) [580063]
  - [fs] anon_inode: set S_IFREG on the anon_inode (Eric Paris) [591813]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-27.el6]
changelog:
  - [ppc] pseries: Flush lazy kernel mappings after unplug operations (Steve Best) [591340]
  - [fs] ext3: enable barriers by default (Eric Sandeen) [586062]
  - [tracing] regset xstate extensions + generic PTRACE_{GET,SET}REGSET support (Oleg Nesterov) [587724]
  - [scsi] hpsa: update to 2.0.2 (Tomas Henzl) [587418]
  - [mm] Print more information about the task being OOM killed (Larry Woodman) [546533]
  - [netdrv] igb/igbvf: use netdev_alloc_skb_ip_align() (Stefan Assmann) [589497]
  - [acpi] Fix regression where _PPC is not read at boot even when ignore_ppc=0 (Matthew Garrett) [571893]
  - [x86] i386: Do a global tlb flush on S4 resume (Matthew Garrett) [572818]
  - [pci] Add ABI for PCI runtime power management (Matthew Garrett) [589781]
  - [block] Fix regression in O_DIRECT|O_SYNC writes to block devices (Jeff Moyer) [582628]
  - [kernel] add skip_spaces() implementation (Jaroslav Kysela) [591078]
  - [kernel] sched: cpuacct: Use bigger percpu counter batch values for stats counters (Steve Best) [591343]
  - [kernel] idr: fix a critical misallocation bug (Eric Paris) [582109]
  - [net] tcp: Fix OOB POLLIN avoidance (Oleg Nesterov) [584786]
  - [s390x] qeth: synchronize configuration interface (Hendrik Brueckner) [586962]
  - [fs] inotify: race use after free/double free in inotify inode marks (Eric Paris) [582109]
  - [fs] ext4: Add flag to files with blocks intentionally past EOF (Eric Sandeen) [578562]
  - [drm] backport patches up to 2.6.34-rc7 (Adam Jackson) [589792]
  - [kernel] elf coredump: add extended numbering support (Amerigo Wang) [578659]
  - [kernel] binfmt_elf_fdpic: Fix build breakage introduced by coredump changes. (Amerigo Wang) [578659]
  - [kernel] elf coredump: make offset calculation process and writing process explicit (Amerigo Wang) [578659]
  - [kernel] elf coredump: replace ELF_CORE_EXTRA_* macros by functions (Amerigo Wang) [578659]
  - [kernel] coredump: move dump_write() and dump_seek() into a header file (Amerigo Wang) [578659]
  - [kernel] coredump: unify dump_seek() implementations for each binfmt_*.c (Amerigo Wang) [578659]
  - [mm] introduce coredump parameter structure (Amerigo Wang) [578659]
  - [powerpc] Reduce printk from pseries_mach_cpu_die() (Steve Best) [590754]
  - [powerpc] Move checks in pseries_mach_cpu_die() (Steve Best) [590754]
  - [powerpc] Reset kernel stack on cpu online from cede state (Steve Best) [590754]
  - [virt] don't compute pvclock adjustments if we trust the tsc (Glauber Costa) [569603]
  - [virt] Try using new kvm clock msrs (Glauber Costa) [569603]
  - [virt] Add a global synchronization point for pvclock (Glauber Costa) [569603]
  - [virt] Enable pvclock flags in vcpu_time_info structure (Glauber Costa) [569603]
  - [virt] Tell the guest we'll warn it about tsc stability (Glauber Costa) [592296]
  - [virt] export paravirtual cpuid flags in KVM_GET_SUPPORTED_CPUID (Glauber Costa) [592296]
  - [virt] add new KVMCLOCK cpuid feature (Glauber Costa) [592296]
  - [virt] change msr numbers for kvmclock (Glauber Costa) [592296]
  - [scsi] enclosure: fix oops while iterating enclosure_status array (Stanislaw Gruszka) [580062]
  - [usb] fix bitmask merge error (Stanislaw Gruszka) [580062]
  - [acpi] enable C2 and Turbo-mode on Nehalem notebooks on A/C (Stanislaw Gruszka) [580063]
  - [input] i8042: add Gigabyte M1022M to the noloop list (Stanislaw Gruszka) [580063]
  - [kernel] nohz: Prevent clocksource wrapping during idle (Stanislaw Gruszka) [580063]
  - [kernel] sched: Fix missing sched tunable recalculation on cpu add/remove (Stanislaw Gruszka) [580063]
  - [netdrv] atl1c: use common_task instead of reset_task and link_chg_task (Stanislaw Gruszka) [580063]
  - [netdrv] atl1e: disable NETIF_F_TSO6 for hardware limit (Stanislaw Gruszka) [580063]
  - [kernel] driver-core: fix devtmpfs crash on s390 (Stanislaw Gruszka) [580063]
  - [kernel] devtmpfs: set root directory mode to 0755 (Stanislaw Gruszka) [580063]
  - [input] ALPS: add interleaved protocol support for Dell E6x00 series (Stanislaw Gruszka) [580063]
  - [mm] flush dcache before writing into page to avoid alias (Stanislaw Gruszka) [580064]
  - [block] pktcdvd: removing device does not remove its sysfs dir (Stanislaw Gruszka) [580064]
  - [mm] add new 'read_cache_page_gfp()' helper function (Stanislaw Gruszka) [580064]
  - [acpi] Add NULL pointer check in acpi_bus_start (Stanislaw Gruszka) [580065]
  - [usb] usbfs: only copy the actual data received (Stanislaw Gruszka) [580065]
  - [net] netfilter: xtables: compat out of scope fix (Stanislaw Gruszka) [580065]
  - [net] pktgen: Fix freezing problem (Stanislaw Gruszka) [580065]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-26.el6]
changelog:
  - [scsi] Sync fcoe to upsteam (Mike Christie) [590781]
  - [netdrv] bnx2x: fix memory barrier (Stanislaw Gruszka) [580477]
  - [x86] kprobes: fix removed int3 checking order (Dave Anderson) [585400]
  - [net] fix oops at bootime in sysctl code (Stanislaw Gruszka) [580064]
  - [net] af_packet: Don't use skb after dev_queue_xmit() (Stanislaw Gruszka) [580064]
  - [net] restore ip source validation (Stanislaw Gruszka) [580064]
  - [net] tcp: update the netstamp_needed counter when cloning sockets (Stanislaw Gruszka) [580064]
  - [net] icmp: send fragment reassembly timeout w/ conntrack enabled (Neil Horman) [563175]
  - [fs] GFS2: stuck in inode wait, no glocks stuck (Robert S Peterson) [583737]
  - [mm] compcache: Backport compcache: ramzswap documentation (Jerome Marchand) [578641]
  - [mm] compcache: xvmalloc memory allocator (Jerome Marchand) [578641]
  - [mm] compcache: virtual block device driver (ramzswap) (Jerome Marchand) [578641]
  - [mm] readahead: fix NULL filp dereference (Josef Bacik) [591055]
  - [netdrv] tg3: 57780 and 5785 devices refuse to attach (Andy Gospodarek) [564117]
  - [x86] Fetch valid frequencies for powernow_k8.o from ACPI _PST table (Bhavna Sarathy) [464630]
  - [s390x] ptrace: fix return value of do_syscall_trace_enter() (Hendrik Brueckner) [588216]
  - [fs] gfs2: fix oops while copying from ext3 to gfs2 (Abhijith Das) [586009] {CVE-2010-1436}
  - [virt] virtio: console: Accept console size along with resize control message (Amit Shah) [589307]
  - [virt] virtio: console: Store each console's size in the console structure (Amit Shah) [589307]
  - [virt] virtio: console: Resize console port 0 on config intr only if multiport is off (Amit Shah) [589307]
  - [sound] ac97: Add IBM ThinkPad R40e to Headphone/Line Jack Sense blacklist (Stanislaw Gruszka) [584757]
  - [sound] ac97: Add Toshiba P500 to ac97 jack sense blacklist (Stanislaw Gruszka) [584757]
  - [x86] amd: Restrict usage of c1e_idle() (Stanislaw Gruszka) [584757]
  - [x86] Fix placement of FIX_OHCI1394_BASE (Stanislaw Gruszka) [584757]
  - [net] netfilter: xt_recent: fix regression in rules using a zero hit_count (Stanislaw Gruszka) [584757]
  - [kernel] softlockup: Stop spurious softlockup messages due to overflow (Stanislaw Gruszka) [584757]
  - [kernel] cpuset: fix the problem that cpuset_mem_spread_node() returns an offline node (Stanislaw Gruszka) [584757]
  - [pci] cleanup error return for pcix get and set mmrbc functions (Stanislaw Gruszka) [584757]
  - [pci] fix access of PCI_X_CMD by pcix get and set mmrbc functions (Stanislaw Gruszka) [584757]
  - [pci] fix return value from pcix_get_max_mmrbc() (Stanislaw Gruszka) [584757]
  - [net] if_tunnel.h: add missing ams/byteorder.h include (Stanislaw Gruszka) [584757]
  - [netdrv] jme: Protect vlgrp structure by pause RX actions (Stanislaw Gruszka) [584757]
  - [netdrv] jme: Fix VLAN memory leak (Stanislaw Gruszka) [584757]
  - [usb] option: add support for a new CMOTECH device to usb/serial/option (Stanislaw Gruszka) [584757]
  - [usb] option: move hardcoded PID to a macro in usb/serial/option (Stanislaw Gruszka) [584757]
  - [usb] option: fix incorrect manufacturer name in usb/serial/option: MAXON->CMOTECH (Stanislaw Gruszka) [584757]
  - [usb] xHCI: re-initialize cmd_completion (Stanislaw Gruszka) [584757]
  - [usb] EHCI: adjust ehci_iso_stream for changes in ehci_qh (Stanislaw Gruszka) [584757]
  - [usb] EHCI: fix ITD list order (Stanislaw Gruszka) [584757]
  - [tty] Take a 256 byte padding into account when buffering below sub-page units (Stanislaw Gruszka) [584757]
  - [tty] Keep the default buffering to sub-page units (Stanislaw Gruszka) [584757]
  - [mm] tmpfs: cleanup mpol_parse_str() (Stanislaw Gruszka) [584757]
  - [perf] Make the install relative to DESTDIR if specified (Stanislaw Gruszka) [584757]
  - [perf] perf_event: Fix oops triggered by cpu offline/online (Stanislaw Gruszka) [584757]
  - [isdn] gigaset: prune use of tty_buffer_request_room (Stanislaw Gruszka) [584757]
  - [isdn] gigaset: correct clearing of at_state strings on RING (Stanislaw Gruszka) [584757]
  - [sound] hda: Disable MSI for Nvidia controller (Stanislaw Gruszka) [584757]
  - [sound] hda: Fix 0 dB offset for HP laptops using CX20551 (Stanislaw Gruszka) [584757]
  - [sound] hda: Fix secondary ADC of ALC260 basic model (Stanislaw Gruszka) [584757]
  - [virt] virtio: fix out of range array access (Stanislaw Gruszka) [584757]
  - [ipc] mqueue: fix mq_open() file descriptor leak on user-space processes (Stanislaw Gruszka) [584757]
  - [security] sysctl: require CAP_SYS_RAWIO to set mmap_min_addr (Stanislaw Gruszka) [584757]
  - [kernel] sched: Mark boot-cpu active before smp_init() (Stanislaw Gruszka) [584757]
  - [pci] add support for 82576NS serdes to existing SR-IOV quirk (Stanislaw Gruszka) [584757]
  - [v4l] DVB: em28xx-dvb: fix memleak in dvb_fini() (Stanislaw Gruszka) [584757]
  - [pci] unconditionally clear AER uncorr status register during cleanup (Stanislaw Gruszka) [584757]
  - [tracing] Do not record user stack trace from NMI context (Stanislaw Gruszka) [584757]
  - [tracing] Disable buffer switching when starting or stopping trace (Stanislaw Gruszka) [584757]
  - [tracing] Use same local variable when resetting the ring buffer (Stanislaw Gruszka) [584757]
  - [tracing] function-graph: Init curr_ret_stack with ret_stack (Stanislaw Gruszka) [584757]
  - [tracing] ring-buffer: Move disabled check into preempt disable section (Stanislaw Gruszka) [584757]
  - [input] i8042: add ALDI/MEDION netbook E1222 to qurik reset table (Stanislaw Gruszka) [584757]
  - [net] netfilter: xt_recent: fix false match (Stanislaw Gruszka) [580067]
  - [net] netfilter: xt_recent: fix buffer overflow (Stanislaw Gruszka) [580067]
  - [tracing] oprofile/x86: fix msr access to reserved counters (Stanislaw Gruszka) [580067]
  - [tracing] oprofile/x86: use kzalloc() instead of kmalloc() (Stanislaw Gruszka) [580067]
  - [tracing] oprofile/x86: remove node check in AMD IBS initialization (Stanislaw Gruszka) [580067]
  - [tracing] oprofile: remove tracing build dependency (Stanislaw Gruszka) [580067]
  - [x86] oprofile: fix perfctr nmi reservation for mulitplexing (Stanislaw Gruszka) [580067]
  - [netdrv] via-rhine: Fix scheduling while atomic bugs (Stanislaw Gruszka) [580067]
  - [net] ipv6: conntrack: Add member of user to nf_ct_frag6_queue structure (Stanislaw Gruszka) [580067]
  - [net] Remove bogus IGMPv3 report handling (Stanislaw Gruszka) [580067]
  - [net] sysfs: Use rtnl_trylock in wireless sysfs methods (Stanislaw Gruszka) [580067]
  - [net] Fix sysctl restarts (Stanislaw Gruszka) [580067]
  - [mm] slab: initialize unused alien cache entry as NULL at alloc_alien_cache() (Stanislaw Gruszka) [580067]
  - [v4l] DVB: cxusb: Select all required frontend and tuner modules (Stanislaw Gruszka) [580067]
  - [v4l] dvb: l64781.ko broken with gcc 4.5 (Stanislaw Gruszka) [580067]
  - [v4l] DVB: uvcvideo: Fix controls blacklisting (Stanislaw Gruszka) [580063]
  - [net] netfilter: nf_conntrack: fix hash resizing with namespaces (Stanislaw Gruszka) [580065]
  - [net] netfilter: nf_conntrack: restrict runtime expect hashsize modifications (Stanislaw Gruszka) [580065]
  - [net] netfilter: xtables: fix conntrack match v1 ipt-save output (Stanislaw Gruszka) [580063]
  - [v4l] DVGB: DocBook/media: create links for included sources (Stanislaw Gruszka) [580063]
  - [v4l] DVB: DocBook/media: copy images after building HTML (Stanislaw Gruszka) [580063]
  - [v4l] DVB: dvb-core: fix initialization of feeds list in demux filter (Stanislaw Gruszka) [580065]
  - [dma] ioat: fix infinite timeout checking in ioat2_quiesce (Stanislaw Gruszka) [580065]
  - [v4l] DVB: smsusb: add autodetection support for five additional Hauppauge USB IDs (Stanislaw Gruszka) [580063]
  - [x86] cpufreq: Fix use after free of struct powernow_k8_data (Stanislaw Gruszka) [580065]
  - [regulator] Fix display of null constraints for regulators (Stanislaw Gruszka) [580065]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-25.el6]
changelog:
  - [fs] exec: Fix 'flush_old_exec()/setup_new_exec()' split (Jiri Olsa) [586024] {CVE-2010-0307}
  - [powerpc] TIF_ABI_PENDING bit removal (Jiri Olsa) [586024] {CVE-2010-0307}
  - [x86] set_personality_ia32() misses force_personality32 (Jiri Olsa) [586024] {CVE-2010-0307}
  - [x86] get rid of the TIF_ABI_PENDING bit (Jiri Olsa) [586024] {CVE-2010-0307}
  - [kernel] split 'flush_old_exec' into two functions (Jiri Olsa) [586024] {CVE-2010-0307}
  - [net] sctp: fix skb_over_panic from processing too many unknown params (Neil Horman) [584659] {CVE-2010-1173}
  - [virt] kvm: fix vmx null pointer dereference (Eduardo Habkost) [570534] {CVE-2010-0435}
  - [fs] gfs2: fix quota state reporting (Christoph Hellwig) [589945]
  - [fs] gfs2: fix quota file size not a multiple of struct gfs2_quota (Abhijith Das) [589813]
  - [x86] Use physical mode for IBM Summit platforms (John Villalovos) [558397]
  - [mm] page allocator: update NR_FREE_PAGES only when necessary (Stanislaw Gruszka) [579693]
  - [mm] memcg: ensure list is empty at rmdir (Stanislaw Gruszka) [579693]
  - [video] revert "drivers/video/s3c-fb.c: fix clock setting for Samsung SoC Framebuffer" (Stanislaw Gruszka) [579693]
  - [v4l] DVB: gspca - sunplus: Fix bridge exchanges (Stanislaw Gruszka) [580062]
  - [hwmon] fschmd: Fix a memleak on multiple opens of /dev/watchdog (Stanislaw Gruszka) [580063]
  - [sound] hda: Fix HP T5735 automute (Stanislaw Gruszka) [580063]
  - [sound] hda: Fix quirk for Maxdata obook4-1 (Stanislaw Gruszka) [580063]
  - [sound] ice1724: Patch for suspend/resume for ESI Juli@ (Stanislaw Gruszka) [580063]
  - [sound] usb-audio: Avoid Oops after disconnect (Stanislaw Gruszka) [580065]
  - [sound] ctxfi: fix PTP address initialization (Stanislaw Gruszka) [580065]
  - [hwmon] lm78: Request I/O ports individually for probing (Stanislaw Gruszka) [580065]
  - [hwmon] w83781d: Request I/O ports individually for probing (Stanislaw Gruszka) [580065]
  - [hwmon] tmp421: Fix temperature conversions (Stanislaw Gruszka) [580067]
  - [sound] via82xx: add quirk for D1289 motherboard (Stanislaw Gruszka) [580067]
  - [hwmon] tmp421: Restore missing inputs (Stanislaw Gruszka) [580067]
  - [sound] USB MIDI support for Access Music VirusTI (Stanislaw Gruszka) [580067]
  - [sound] hda-intel: Add position_fix quirk for ASUS M2V-MX SE (Stanislaw Gruszka) [580067]
  - [sound] pcm core: fix fifo_size channels interval check (Stanislaw Gruszka) [580067]
  - [sound] hda: Use 3stack quirk for Toshiba Satellite L40-10Q (Stanislaw Gruszka) [580067]
  - [bluetooth] Fix potential bad memory access with sysfs files (Stanislaw Gruszka) [584757]
  - [hwmon] coretemp: Add missing newline to dev_warn() message (Stanislaw Gruszka) [584757]
  - [bluetooth] Fix kernel crash on L2CAP stress tests (Stanislaw Gruszka) [584757]
  - [input] wacom: ensure the device is initialized properly upon resume (Stanislaw Gruszka) [584757]
  - [sound] hda: Fix input source elements of secondary ADCs on Realtek (Stanislaw Gruszka) [584757]
  - [x86] nmi watchdog: use generic interrupt source to determine deadlocks (Don Zickus) [574570]
  - [dm] eliminate some holes in data structures (Mike Snitzer) [586089]
  - [dm] ioctl: introduce flag indicating uevent was generated (Mike Snitzer) [586089]
  - [dm] free dm_io before bio_endio not after (Mike Snitzer) [586089]
  - [dm] table: remove unused dm_get_device range parameters (Mike Snitzer) [586089]
  - [dm] ioctl: only issue uevent on resume if state changed (Mike Snitzer) [586089]
  - [dm] raid1: always return error if all legs fail (Mike Snitzer) [586089]
  - [dm] mpath: refactor pg_init (Mike Snitzer) [586089]
  - [dm] mpath: wait for pg_init completion when suspending (Mike Snitzer) [586089]
  - [dm] mpath: hold io until all pg_inits completed (Mike Snitzer) [586089]
  - [dm] mpath: avoid storing private suspended state (Mike Snitzer) [586089]
  - [dm] document when snapshot has finished merging (Mike Snitzer) [586089]
  - [dm] table: remove dm_get from dm_table_get_md (Mike Snitzer) [586089]
  - [dm] mpath: skip activate_path for failed paths (Mike Snitzer) [586089]
  - [dm] mpath: pass struct pgpath to pg init done (Mike Snitzer) [586089]
  - [netdrv] mac80211: fix deferred hardware scan requests (John Linville) [561762]
  - [x86] asus-laptop: add Lenovo SL hotkey support (Stanislaw Gruszka) [579693]
  - [input] pmouse: move Sentelic probe down the list (Stanislaw Gruszka) [579693]
  - [pci] cardbus: Add a fixup hook and fix powerpc (Stanislaw Gruszka) [579693]
  - [mfd] Correct WM835x ISINK ramp time defines (Stanislaw Gruszka) [579693]
  - [mfd] WM835x GPIO direction register is not locked (Stanislaw Gruszka) [579693]
  - [edac] i5000_edac critical fix panic out of bounds (Stanislaw Gruszka) [579693]
  - [i2c] i2c-tiny-usb: Fix on big-endian systems (Stanislaw Gruszka) [580065]
  - [x86] thinkpad-acpi: fix bluetooth/wwan resume (Stanislaw Gruszka) [580067]
  - [v4l] DVB: bttv: Move I2C IR initialization (Stanislaw Gruszka) [580067]
  - [bluetooth] Fix sleeping function in RFCOMM within invalid context (Stanislaw Gruszka) [584757]
  - [i2c] i2c-i801: Don't use the block buffer for I2C block writes (Stanislaw Gruszka) [584757]
  - [s390x] vdso: use ntp adjusted clock multiplier (Hendrik Brueckner) [575728]
  - [s390x] timekeeping: Fix clock_gettime vsyscall time warp (Hendrik Brueckner) [575728]
  - [s390x] timekeeping: Fix accumulation bug triggered by long delay (Hendrik Brueckner) [575728]
  - [netdrv] igb: fix warning in drivers/net/igb/igb_main.c (Stefan Assmann) [589272]
  - [x86] Re-get cfg_new in case reuse/move irq_desc (Stanislaw Gruszka) [580065 583555]
  - [hwmon] adt7462: fix wrong ADT7462_VOLT_COUNT (Stanislaw Gruszka) [580065]
  - [fs] exec.c: fix initial stack reservation (Stanislaw Gruszka) [580067]
  - [fs] exec.c: restrict initial stack space expansion to rlimit (Stanislaw Gruszka) [580065]
  - [kernel] resource: add helpers for fetching rlimits (Stanislaw Gruszka) [580065]
  - [tracing] ext4: Convert some events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert some jbd2 events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert some block events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert some power events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert some workqueue events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert softirq events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert some kmem events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] Convert module refcnt events to DEFINE_EVENT (Mike Snitzer) [588108]
  - [tracing] xfs: use DECLARE_EVENT_CLASS (Mike Snitzer) [588108]
  - [tracing] Harmonize event field names and print output names (Mike Snitzer) [588108]
  - [tracing] Add DEFINE_EVENT(), DEFINE_SINGLE_EVENT() support to docbook (Mike Snitzer) [588108]
  - [block] blk-cgroup: config options re-arrangement (Vivek Goyal) [586182]
  - [block] blkio: Fix another BUG_ON() crash due to cfqq movement across groups (Vivek Goyal) [586182]
  - [block] blkio: Fix blkio crash during rq stat update (Vivek Goyal) [586182]
  - [block] blkio: Initialize blkg->stats_lock for the root cfqg too (Vivek Goyal) [586182]
  - [block] blkio: Fix compile errors (Vivek Goyal) [586182]
  - [block] Update to io-controller stats (Vivek Goyal) [586182]
  - [block] io-controller: Add a new interface "weight_device" for IO-Controller (Vivek Goyal) [586182]
  - [block] cfq-iosched: Fix the incorrect timeslice accounting with forced_dispatch (Vivek Goyal) [586182]
  - [block] blkio: Add more debug-only per-cgroup stats (Vivek Goyal) [586182]
  - [block] blkio: Add io_queued and avg_queue_size stats (Vivek Goyal) [586182]
  - [block] blkio: Add io_merged stat (Vivek Goyal) [586182]
  - [block] blkio: Changes to IO controller additional stats patches (Vivek Goyal) [586182]
  - [block] expose the statistics in blkio.time and blkio.sectors for the root cgroup (Vivek Goyal) [586182]
  - [block] blkio: Increment the blkio cgroup stats for real now (Vivek Goyal) [586182]
  - [block] blkio: Add io controller stats like (Vivek Goyal) [586182]
  - [block] blkio: Remove per-cfqq nr_sectors as we'll be passing (Vivek Goyal) [586182]
  - [block] cfq-iosched: Add additional blktrace log messages in CFQ for easier debugging (Vivek Goyal) [586182]
  - [block] cfq-iosched: requests "in flight" vs "in driver" clarification (Vivek Goyal) [586182]
  - [ppc] cxgb3: Wait longer for control packets on initialization (Steve Best) [588848]
  - [virt] KVM: convert ioapic lock to spinlock (Marcelo Tosatti) [588811]
  - [virt] KVM: fix the handling of dirty bitmaps to avoid overflows (Marcelo Tosatti) [588811]
  - [virt] KVM: MMU: fix kvm_mmu_zap_page() and its calling path (Marcelo Tosatti) [588811]
  - [virt] KVM: VMX: Save/restore rflags.vm correctly in real mode (Marcelo Tosatti) [588811]
  - [virt] KVM: Dont spam kernel log when injecting exceptions due to bad cr writes (Marcelo Tosatti) [588811]
  - [virt] KVM: SVM: Fix memory leaks that happen when svm_create_vcpu() fails (Marcelo Tosatti) [588811]
  - [virt] KVM: VMX: Update instruction length on intercepted BP (Marcelo Tosatti) [588811]
  - [drm] nouveau: initial eDP support + additional fixes (Ben Skeggs) [588581]
  - [s390x] zcore: Fix reipl device detection (Hendrik Brueckner) [587025]
  - [connector] Delete buggy notification code (Stanislaw Gruszka) [580064 586025] {CVE-2010-0410}
  - [netdrv] ath9k: fix beacon slot/buffer leak (Stanislaw Gruszka) [580064]
  - [fusion] mptsas: Fix issue with chain pools allocation on katmai (Stanislaw Gruszka) [580064]
  - [sunrpc] Fix a potential memory leak in auth_gss (Stanislaw Gruszka) [584757]
  - [tracing] scsi: Enhance SCSI command tracing (Mike Snitzer) [588108]
  - [tracing] scsi: Add missing verify command definitions (Mike Snitzer) [588108]
  - [tracing] scsi: ftrace based SCSI command tracing (Mike Snitzer) [588108]
  - [tracing] add __print_hex() (Mike Snitzer) [588108]
  - [tracing] Add notrace to TRACE_EVENT implementation functions (Mike Snitzer) [588108]
  - [tracing] Move a printk out of ftrace_raw_reg_event_foo() (Mike Snitzer) [588108]
  - [tracing] Rename TRACE_EVENT_TEMPLATE() to DECLARE_EVENT_CLASS() (Mike Snitzer) [588108]
  - [tracing] Convert some sched trace events to DEFINE_EVENT and _PRINT (Mike Snitzer) [588108]
  - [tracing] Create new DEFINE_EVENT_PRINT (Mike Snitzer) [588108]
  - [tracing] Create new TRACE_EVENT_TEMPLATE (Mike Snitzer) [588108]
  - [tracing] additional interface changes and fixes (Mike Snitzer) [588108]
  - [tracing] Ftrace dynamic ftrace_event_call support (Mike Snitzer) [588108]
  - [fs] quota: fix WARN_ON when quota reservations get out of sync (Eric Sandeen) [581951]
  - [scsi] fcoe: sync with upstream (Mike Christie) [577049 578328]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-24.el6]
changelog:
  - [fs] ecryptfs: disallow ecryptfs as underlying filesystem (Eric Sandeen) [585185]
  - [mm] Fix Section Mismatch warning in put_page_bootmem() (Prarit Bhargava) [587040]
  - [mm] transparent hugepage support update (Andrea Arcangeli) [556572]
  - [netdrv] ath9k: revert fb6635f6c114313f246cc34abc0b677264a765ed (Aristeu Rozanski) [584757]
  - [virt] KVM: take srcu lock before call to complete_pio() (Gleb Natapov) [585887]
  - [virt] virtio: Fix GFP flags passed from the virtio balloon driver (Amit Shah) [584680]
  - [x86] Check chip_data value in irq_force_complete_move() (Prarit Bhargava) [564398]
  - [x86] nmi_watchdog: use __cpuinit for 32-bit nmi_watchdog_default (Prarit Bhargava) [586967]
  - [acpi] Fall back to manually changing SCI_EN (Matthew Garrett) [587008]
  - [pci] Ensure that devices are resumed properly (Matthew Garrett) [586780]
  - [serial] usb-serial: Rework and update qcserial (Matthew Garrett) [587009]
  - [scsi] scsi_lib: Fix bug in completion of bidi commands (Stanislaw Gruszka) [580064]
  - [net] phonet: add check for null pernet mem pointer in notifier (Jiri Pirko) [573122]
  - [nfs] Ensure that writeback_single_inode() calls write_inode() when syncing (Jeff Layton) [584382]
  - [serial] 8250_pnp: use wildcard for serial Wacom tablets (Stanislaw Gruszka) [580062]
  - [fs] ext4: check s_log_groups_per_flex in online resize code (Eric Sandeen) [519461]
  - [x86] Fix sched_clock_cpu for systems with unsynchronized TSC (Prarit Bhargava) [568344]
  - [x86] Reenable TSC sync check at boot, even with NONSTOP_TSC (Prarit Bhargava) [568344]
  - [mm] slab: add memory hotplug support (Prarit Bhargava) [562880]
  - [x86] Set hotpluggable nodes in nodes_possible_map (Prarit Bhargava) [568344]
  - [x86] acpi: Auto Online Hot-Added Memory (Prarit Bhargava) [568344]
  - [mm] memory hotplug: fix a bug on /dev/mem for 64-bit kernels (Prarit Bhargava) [568344]
  - [mm] update all PGDs for direct mapping changes on 64 bit (Prarit Bhargava) [568344]
  - [x86] acpi: Map hotadded cpu to correct node (Prarit Bhargava) [568344]
  - [ipmi] Change timeout and event poll to one second (Matthew Garrett) [584106]
  - [ipmi] Attempt to register multiple SIs of the same type (Matthew Garrett) [584106]
  - [ipmi] Reduce polling (Matthew Garrett) [584106]
  - [ipmi] Reduce polling when interrupts are available (Matthew Garrett) [584106]
  - [ipmi] Change device discovery order (Matthew Garrett) [584106]
  - [ipmi] Only register one si per bmc (Matthew Garrett) [584106]
  - [ipmi] Split device discovery and registration (Matthew Garrett) [584106]
  - [ipmi] Change addr_source to an enum rather than strings (Matthew Garrett) [584106]
  - [drm] radeon: rs780/rs880: MSI quirk fixes (Dave Airlie) [586168]
  - [drm] radeon/kms: MC + watermark fixes + reset (Dave Airlie) [586168]
  - [drm] radeon/kms/evergreen: add evergreen stage 2 - HPD irq (Dave Airlie) [580757]
  - [drm] radeon: fixup radeon_asic struct c/h files (Dave Airlie) [586168]
  - [drm] radeon/kms: misc + tv dac fixes (Dave Airlie) [586168]
  - [drm] radeon/kms: squash upstream HDMI audio commits (Dave Airlie) [586168]
  - [drm] kms/radeon: Integrated graphics fixes (Dave Airlie) [586168]
  - [drm] radeon/kms: spread spectrum + pll fixes (Dave Airlie) [586168]
  - [drm] radeon: add initial evergreen support + fixes (Dave Airlie) [580757]
  - [kernel] tty: tty->pgrp races (Jiri Olsa) [586022]
  - [netdrv] kernel: fix the r8169 frame length check error (Jiri Olsa) [586017] {CVE-2009-4537}


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-23.el6]
changelog:
  - [doc] add the documentation for mpol=local (Stanislaw Gruszka) [584757]
  - [fs] tmpfs: handle MPOL_LOCAL mount option properly (Stanislaw Gruszka) [584757]
  - [fs] tmpfs: mpol=bind:0 don't cause mount error (Stanislaw Gruszka) [584757]
  - [netdrv] tun: orphan an skb on tx (Michael S. Tsirkin) [584428]
  - [s390x] vmalloc: IPL failure with enabled memory cgroups (Hendrik Brueckner) [580918]
  - [netdrv] b43: fall back gracefully to PIO mode after fatal DMA errors (John Linville) [583069]
  - [netdrv] b43: Allow PIO mode to be selected at module load (John Linville) [583069]
  - [netdrv] b43: Remove reset after fatal DMA error (John Linville) [583069]
  - [netdrv] b43: Optimize PIO scratchbuffer usage (John Linville) [583069]
  - [fs] vfs: get_sb_single() - do not pass options twice (Stanislaw Gruszka) [580063]
  - [fs] tmpfs: fix oops on mounts with mpol=default (Stanislaw Gruszka) [584757]
  - [kernel] cred.c: use kmem_cache_free (Stanislaw Gruszka) [580064]
  - [fs] partition/msdos: fix unusable extended partition for > 512B sector (Stanislaw Gruszka) [584757]
  - [fs] partitions/msdos: add support for large disks (Stanislaw Gruszka) [584757]
  - [fs] eCryptfs: Add getattr function (Stanislaw Gruszka) [580065]
  - [fs] ecryptfs: initialize private persistent file before dereferencing pointer (Stanislaw Gruszka) [580062]
  - [fs] ecryptfs: use after free (Stanislaw Gruszka) [580062]
  - [ppc] Track backing pages used allocated by vmemmap_populate() (Steve Best) [547854]
  - [netdrv] be2net: recent bug fixes from upstream (Ivan Vecera) [583766]
  - [sunrpc] handle allocation errors from __rpc_lookup_create() (Stanislaw Gruszka) [584757]
  - [nfs] Prevent another deadlock in nfs_release_page() (Stanislaw Gruszka) [584757]
  - [nfs] NFSv4: Don't ignore the NFS_INO_REVAL_FORCED flag in nfs_revalidate_inode() (Stanislaw Gruszka) [584757]
  - [nfs] Fix an allocation-under-spinlock bug (Stanislaw Gruszka) [580067]
  - [sunrpc] Handle EINVAL error returns from the TCP connect operation (Stanislaw Gruszka) [580067]
  - [sunrpc] remove unnecessary svc_xprt_put (Stanislaw Gruszka) [580067]
  - [x86] Add iMac9,1 to pci_reboot_dmi_table (Stanislaw Gruszka) [580067]
  - [rtc] rtc-core: fix memory leak (Stanislaw Gruszka) [580067]
  - [mm] readahead: introduce FMODE_RANDOM for POSIX_FADV_RANDOM (Stanislaw Gruszka) [580067]
  - [fs] fix LOOKUP_FOLLOW on automount "symlinks" (Stanislaw Gruszka) [580067]
  - [nfs] Too many GETATTR and ACCESS calls after direct I/O (Stanislaw Gruszka) [580065]
  - [virt] kvmclock: count total_sleep_time when updating guest clock (Stanislaw Gruszka) [580065]
  - [kernel] Export the symbol of getboottime and mmonotonic_to_bootbased (Stanislaw Gruszka) [580065]
  - [nfs] NFS: Fix the mapping of the NFSERR_SERVERFAULT error (Stanislaw Gruszka) [580065]
  - [nfs] NFS: Fix a umount race (Stanislaw Gruszka) [580065]
  - [x86] amd-iommu: Fix possible integer overflow (Stanislaw Gruszka) [580064]
  - [ata] libata: retry FS IOs even if it has failed with AC_ERR_INVALID (Stanislaw Gruszka) [580064]
  - [firewire] firewire: ohci: fix crashes with TSB43AB23 on 64bit systems (Stanislaw Gruszka) [580064]
  - [ata] pata_hpt3x2n: always stretch UltraDMA timing (Stanislaw Gruszka) [580067]
  - [cgroup] memcg: fix oom killing a child process in an other cgroup (Stanislaw Gruszka) [580067]
  - [ata] libata: retry link resume if necessary (Stanislaw Gruszka) [580064]
  - [firewire] core: add_descriptor size check (Stanislaw Gruszka) [580064]
  - [netdrv] iwlwifi: fix scan race (Stanislaw Gruszka) [584759]
  - [netdrv] iwlwifi: clear all tx queues when firmware ready (Stanislaw Gruszka) [584759]
  - [netdrv] iwlwifi: need check for valid qos packet before free (Stanislaw Gruszka) [584759]
  - [netdrv] mac80211: tear down all agg queues when restart/reconfig hw (Stanislaw Gruszka) [584759]
  - [netdrv] mac80211: move netdev queue enabling to correct spot (Stanislaw Gruszka) [584759]
  - [netdrv] setup correct int pipe type in ar9170_usb_exec_cmd (Stanislaw Gruszka) [584759]
  - [netdrv] iwlwifi: range checking issue (Stanislaw Gruszka) [584759]
  - [netdrv] iwlwifi: fix nfreed-- (Stanislaw Gruszka) [584759]
  - [netdrv] iwlwifi: counting number of tfds can be free for 4965 (Stanislaw Gruszka) [584759]
  - [netdrv] b43: Workaround circular locking in hw-tkip key update callback (Stanislaw Gruszka) [584757]
  - [ata] ahci: use BIOS date in broken_suspend list (Stanislaw Gruszka) [584757]
  - [netdrv] mac80211: Reset dynamic ps timer in Rx path (Stanislaw Gruszka) [584757]
  - [netdrv] ath9k: Enable IEEE80211_HW_REPORTS_TX_ACK_STATUS flag for ath9k (Stanislaw Gruszka) [584757]
  - [netdrv] mac80211: Retry null data frame for power save (Stanislaw Gruszka) [584757]
  - [netdrv] ath9k: Enable TIM timer interrupt only when needed. (Stanislaw Gruszka) [584757]
  - [netdrv] ath9k: fix BUG_ON triggered by PAE frames (Stanislaw Gruszka) [584757]
  - [netdrv] iwlwifi: Silence tfds_in_queue message (Stanislaw Gruszka) [584757]
  - [netdrv] iwlwifi: use dma_alloc_coherent (Stanislaw Gruszka) [584757]
  - [netdrv] wl1251: fix potential crash (Stanislaw Gruszka) [584757]
  - [block] readahead: add blk_run_backing_dev (Stanislaw Gruszka) [584757]
  - [netdrv] ath9k: fix lockdep warning when unloading module (Stanislaw Gruszka) [584757]
  - [scsi] mvsas: add support for Adaptec ASC-1045/1405 SAS/SATA HBA (Stanislaw Gruszka) [584757]
  - [netdrv] ath5k: fix setup for CAB queue (Stanislaw Gruszka) [584757]
  - [netdrv] ath5k: dont use external sleep clock in AP mode (Stanislaw Gruszka) [584757]
  - [netdrv] tg3: Fix tg3_poll_controller() passing wrong pointer to tg3_interrupt() (Stanislaw Gruszka) [584757]
  - [netdrv] b43/b43legacy: Wake queues in wireless_core_start (Stanislaw Gruszka) [580067]
  - [netdrv] ath5k: use correct packet type when transmitting (Stanislaw Gruszka) [580067]
  - [netdrv] ath9k: disable RIFS search for AR91xx based chips (Stanislaw Gruszka) [580067]
  - [netdrv] ath9k: fix rate control fallback rate selection (Stanislaw Gruszka) [580067]
  - [netdrv] ath9k: fix beacon timer restart after a card reset (Stanislaw Gruszka) [580067]
  - [netdrv] p54usb: Add the USB ID for Belkin (Accton) FD7050E ver 1010ec (Stanislaw Gruszka) [580067]
  - [netdrv] rndis_wlan: disable stall workaround (Stanislaw Gruszka) [580067]
  - [netdrv] rndis_wlan: fix buffer overflow in rndis_query_oid (Stanislaw Gruszka) [580067]
  - [netdrv] rndis_wlan: handle NL80211_AUTHTYPE_AUTOMATIC (Stanislaw Gruszka) [580067]
  - [netdrv] sky2: fix transmit DMA map leakage (Stanislaw Gruszka) [580067]
  - [netdrv] airo: fix setting zero length WEP key (Stanislaw Gruszka) [580067]
  - [netdrv] mac80211: quit addba_resp_timer if Tx BA session is torn down (Stanislaw Gruszka) [580067]
  - [netdrv] iwlwifi: sanity check before counting number of tfds can be free (Stanislaw Gruszka) [580067]
  - [netdrv] iwlwifi: set HT flags after channel in rxon (Stanislaw Gruszka) [580067]
  - [netdrv] iwlwifi: error checking for number of tfds in queue (Stanislaw Gruszka) [580067]
  - [netdrv] iwlwifi: Fix to set correct ht configuration (Stanislaw Gruszka) [580065]
  - [netdrv] mac80211: Fix probe request filtering in IBSS mode (Stanislaw Gruszka) [580065]
  - [netdrv] ath9k: Fix sequence numbers for PAE frames (Stanislaw Gruszka) [580065]
  - [netdrv] b43: Fix throughput regression (Stanislaw Gruszka) [580065]
  - [netdrv] rtl8187: Add new device ID (Stanislaw Gruszka) [580065]
  - [ata] ahci: add Acer G725 to broken suspend list (Stanislaw Gruszka) [580065]
  - [scsi] mptfusion: mptscsih_abort return value should be SUCCESS instead of value 0 (Stanislaw Gruszka) [580065]
  - [nfs] Fix an Oops when truncating a file (Stanislaw Gruszka) [580065]
  - [block] cciss: Make cciss_seq_show handle holes in the h->drv[] array (Stanislaw Gruszka) [580065]
  - [netdrv] ath9k: fix eeprom INI values override for 2GHz-only cards (Stanislaw Gruszka) [580064]
  - [netdrv] mac80211: fix NULL pointer dereference when ftrace is enabled (Stanislaw Gruszka) [580064]
  - [block] fix bugs in bio-integrity mempool usage (Stanislaw Gruszka) [580064]
  - [netdrv] sky2: Fix oops in sky2_xmit_frame() after TX timeout (Stanislaw Gruszka) [580064]
  - [netdrv] iwlwifi: set default aggregation frame count limit to 31 (Stanislaw Gruszka) [580064]
  - [netdrv] e1000/e1000e: don't use small hardware rx buffers (Stanislaw Gruszka) [580064]
  - [netdrv] e1000: enhance frame fragment detection (Stanislaw Gruszka) [580064]
  - [mm] rmap: anon_vma_prepare() can leak anon_vma_chain (Rik van Riel) [579936]
  - [mm] rmap: add exclusively owned pages to the newest anon_vma (Rik van Riel) [579936]
  - [mm] anonvma: when setting up page->mapping, we need to pick the _oldest_ anonvma (Rik van Riel) [579936]
  - [mm] anon_vma: clone the anon_vma chain in the right order (Rik van Riel) [579936]
  - [mm] vma_adjust: fix the copying of anon_vma chains (Rik van Riel) [579936]
  - [mm] Simplify and comment on anon_vma re-use for anon_vma_prepare() (Rik van Riel) [579936]
  - [mm] rmap: fix anon_vma_fork() memory leak (Rik van Riel) [579936]
  - [s390x] nss: add missing .previous statement to asm function (Hendrik Brueckner) [581521]
  - [ata] pata_mavell: correct check of AHCI config option (David Milburn) [584483]
  - [fs] ext4: Issue the discard operation before releasing the blocks (Eric Sandeen) [575884]
  - [scsi] 3w_sas: new driver (Tomas Henzl) [572781]
  - [kernel] hrtimer: Tune hrtimer_interrupt hang logic (Marcelo Tosatti) [576355]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-22.el6]
changelog:
  - [netdrv] b43: ssb: do not read SPROM if it does not exist (John Linville) [574895]
  - [netdrv] igb: add support for Intel I350 Gigabit Network Connection (Stefan Assmann) [580727]
  - [kernel] exec: refactor how usermodehelpers work and modify core_pipe recursion check (Neil Horman) [557387]
  - [kernel] re-export page_is_ram() for crash module (Prarit Bhargava) [583032]
  - [x86] amd_iommu: allow iommu to complete dma transactions during transition to kdump kernel (Neil Horman) [577788]
  - [nfs] rsize and wsize settings ignored on v4 mounts (Steve Dickson) [582697]
  - [net] igmp: fix ip_mc_sf_allow race (Flavio Leitner) [578932]
  - [net] Remove skb_dma_map/unmap calls from drivers (Thomas Graf) [576690]
  - [scsi] mpt2sas: IOs needs to be pause until handles are refreshed for all device after recovery (Tomas Henzl) [577909]
  - [scsi] mpt2sas: Reworked scmd->result priority for _scsih_qcmd (Tomas Henzl) [577909]
  - [x86] Suppress stack overrun message for init_task (Prarit Bhargava) [582625]
  - [sunrpc] gss_krb5: Advertise rc4-hmac enctype support in the rpcsec_gss/krb5 upcall (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Add support for rc4-hmac encryption (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Use confounder length in wrap code (Steve Dickson) [498317]
  - [sunrpc] gssd_krb5: More arcfour-hmac support (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Save the raw session key in the context (Steve Dickson) [498317]
  - [sunrpc] gssd_krb5: arcfour-hmac support (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Advertise AES enctype support in the rpcsec_gss/krb5 upcall (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: add remaining pieces to enable AES encryption support (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: add support for new token formats in rfc4121 (Steve Dickson) [498317]
  - [sunrpc] xdr: Add an export for the helper function write_bytes_to_xdr_buf() (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Advertise triple-des enctype support in the rpcsec_gss/krb5 upcall (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: add support for triple-des encryption (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Add upcall info indicating supported kerberos enctypes (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: handle new context format from gssd (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: import functionality to derive keys into the kernel (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: add ability to have a keyed checksum (hmac) (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: introduce encryption type framework (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: prepare for new context format (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: split up functions in preparation of adding new enctypes (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Don't expect blocksize to always be 8 when calculating padding (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Added and improved code comments (Steve Dickson) [498317]
  - [sunrpc] gss_krb5: Introduce encryption type framework (Steve Dickson) [498317]
  - [mm] Fix vfree race resulting in kernel bug (Steven Whitehouse) [582522]
  - [ata] libata: fix accesses at LBA28 boundary (David Milburn) [582432]
  - [netdrv] b43: Rewrite DMA Tx status handling sanity checks (John Linville) [574533]
  - [char] tty: release_one_tty() forgets to put pids (Oleg Nesterov) [582077] {CVE-2010-1162}
  - [mm] oom: fix the unsafe usage of badness() in proc_oom_score() (Oleg Nesterov) [582069]
  - [netdrv] bonding: fix broken multicast with round-robin mode (Andy Gospodarek) [581644]
  - [x86] Remove sysfs_attr_init, sysfs_bin_attr_init changes introduced in last MCE patch (Prarit Bhargava) [581659]
  - [kernel] sched_getaffinity: allow less than NR_CPUS length (Oleg Nesterov) [578970]
  - [scsi] bfa sync w/ upstream (Rob Evers) [576716]
  - [gfs] GFS2: Fix ordering of ordered buffers (Steven Whitehouse) [581011]
  - [gfs] GFS2: Don't withdraw on partial rindex entries (Robert S Peterson) [581009]
  - [gfs] GFS2: livelock while reclaiming unlinked dinodes (Robert S Peterson) [570182]
  - [scsi] mpt2sas: Do not reset handle before calling _scsih_remove_device in RESCAN task after HBA RESET (Tomas Henzl) [572646]
  - [scsi] mpt2sas: Device removal algorithm in interrupt ctx (Tomas Henzl) [572646]
  - [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [572646]
  - [scsi] Upgrading version to 04.100.01.02 (Tomas Henzl) [572646]
  - [scsi] mpt2sas: modified _scsih_sas_device_find_by_handle/sas_address (Tomas Henzl) [572646]
  - [scsi] mpt2sas: RESCAN Barrier work is added in case of HBA reset (Tomas Henzl) [572646]
  - [scsi] update the version to 04.100.01.00 (Tomas Henzl) [572646]
  - [scsi] scsi_transport_sas: add support for transport layer retries (TLR) (Tomas Henzl) [572646]
  - [scsi] mpt2sas: Added raid transport support (Tomas Henzl) [572646]
  - [scsi] eliminate potential kmalloc failure in scsi_get_vpd_page() (Tomas Henzl) [572646]
  - [ata] libata: fix ata_id_logical_per_physical_sectors (David Milburn) [582021]
  - [netdrv] iwlwifi: Fix throughput stall issue in HT mode for 5000 (Stanislaw Gruszka) [580063]
  - [infiniband] IPoIB: Clear ipoib_neigh.dgid in ipoib_neigh_alloc() (Stanislaw Gruszka) [580063]
  - [net] cfg80211: fix channel setting for wext (Stanislaw Gruszka) [580063]
  - [net] mac80211: check that ieee80211_set_power_mgmt only handles STA interfaces (Stanislaw Gruszka) [580063]
  - [ata] ata_piix: fix MWDMA handling on PIIX3 (Stanislaw Gruszka) [580063]
  - [ata] ahci: disable SNotification capability for ich8 (Stanislaw Gruszka) [580063]
  - [netdrv] ar9170: Add support for D-Link DWA 160 A2 (Stanislaw Gruszka) [580063]
  - [netdrv] sfc: Fix DMA mapping cleanup in case of an error in TSO (Stanislaw Gruszka) [580063]
  - [fs] ext4: don't call write_inode under the journal (Josef Bacik) [576202]
  - [fs] ext4: Calculate metadata requirements more accurately (Josef Bacik) [576202]
  - [fs] ext4: Patch up how we claim metadata blocks for quota purposes (Josef Bacik) [576202]
  - [fs] ext4: fix potential quota deadlock (Josef Bacik) [576202]
  - [virt] virtio: console: Add support for nonblocking write()s (Amit Shah) [576241]
  - [virt] virtio: console: Rename wait_is_over() to will_read_block() (Amit Shah) [576241]
  - [virt] virtio: console: Don't always create a port 0 if using multiport (Amit Shah) [576241]
  - [virt] virtio: console: Use a control message to add ports (Amit Shah) [576241]
  - [virt] virtio: console: Move code around for future patches (Amit Shah) [576241]
  - [virt] virtio: console: Remove config work handler (Amit Shah) [576241]
  - [virt] virtio: console: Don't call hvc_remove() on unplugging console ports (Amit Shah) [576241]
  - [virt] virtio: console: Return -EPIPE to hvc_console if we lost the connection (Amit Shah) [576241]
  - [virt] virtio: console: Let host know of port or device add failures (Amit Shah) [576241]
  - [virt] virtio: console: Add a __send_control_msg() that can send messages without a valid port (Amit Shah) [576241]
  - [virt] hvc_console: Fix race between hvc_close and hvc_remove (Amit Shah) [577222]
  - [virt] virtio: console makes incorrect assumption about virtio API (Amit Shah) [576241]
  - [virt] MAINTAINERS: Put the virtio-console entry in correct alphabetical order (Amit Shah) [576241]
  - [virt] virtio: console: Fix early_put_chars usage (Amit Shah) [576241]
  - [virt] virtio: console: Check if port is valid in resize_console (Amit Shah) [576241]
  - [virt] virtio: console: Generate a kobject CHANGE event on adding 'name' attribute (Amit Shah) [576241]
  - [virt] virtio: console: Use better variable names for fill_queue operation (Amit Shah) [576241]
  - [virt] virtio: console: Fix type of 'len' as unsigned int (Amit Shah) [576241]
  - [vfs] rename block_fsync() to blkdev_fsync() (Jeff Moyer) [579781]
  - [char] raw: add an fsync method (Jeff Moyer) [579781]
  - [x86] Don't use logical-flat mode when more than 8 CPUs are possible (John Villalovos) [563798]
  - [net] Backport the new socket API recvmmsg, receive multiple messages (Arnaldo Carvalho de Melo) [579850]
  - [kernel] coredump: fix the page leak in dump_seek() (Oleg Nesterov) [580126]
  - [s390x] callhome: fix broken proc interface and activate comp ID (Hendrik Brueckner) [579482]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-21.el6]
changelog:
  - [x86] Update x86 MCE code (Prarit Bhargava) [580587]
  - [scsi] 3w-xxxx: Force 60 second timeout default (Tomas Henzl) [572778]
  - [netdrv] enic: update to upstream version 1.3.1.1 (Andy Gospodarek) [575950]
  - [netdrv] igb: Add support for 82576 ET2 Quad Port Server Adapter (Stefan Assmann) [577421]
  - [kernel] resource: Fix generic page_is_ram() for partial RAM pages (Prarit Bhargava) [578834]
  - [x86] Use the generic page_is_ram() (Prarit Bhargava) [578834]
  - [x86] Remove BIOS data range from e820 (Prarit Bhargava) [578834]
  - [kernel] Move page_is_ram() declaration to mm.h (Prarit Bhargava) [578834]
  - [kernel] Generic page_is_ram: use __weak (Prarit Bhargava) [578834]
  - [kernel] resources: introduce generic page_is_ram() (Prarit Bhargava) [578834]
  - [fs] GFS2: Clean up copying from stuffed files (Steven Whitehouse) [580857]
  - [netdrv] igb: restrict WoL for 82576 ET2 Quad Port Server Adapter (Stefan Assmann) [578804]
  - [drm] radeon/kms: move radeon KMS on/off switch out of staging (Dave Airlie) [580766]
  - [netdrv] p54: fix deadlocks under tx load (Michal Schmidt) [580557]
  - [gfs2] GFS2: Mandatory locking fix (Steven Whitehouse) [571606] {CVE-2010-0727}
  - [x86] AMD: Fix NULL pointer dereference on 32-bit (Bhavna Sarathy) [571474]
  - [x86] Add wbinvd SMP helper routines (Bhavna Sarathy) [571474]
  - [x86] L3 cache: Remove NUMA dependency (Bhavna Sarathy) [571474]
  - [x86] Calculate L3 indices (Bhavna Sarathy) [571474]
  - [x86] Add cache index disable sys attributes (Bhavna Sarathy) [571474]
  - [x86] Fix disabling of L3 cache indices (Bhavna Sarathy) [571474]
  - [fs] NFS: Avoid a deadlock in nfs_release_page (Jeff Layton) [525963]
  - [fs] NFS: Remove requirement for inode->i_mutex from nfs_invalidate_mapping (Jeff Layton) [525963]
  - [fs] NFS: Clean up nfs_sync_mapping (Jeff Layton) [525963]
  - [fs] NFS: Simplify nfs_wb_page() (Jeff Layton) [525963]
  - [fs] NFS: Replace __nfs_write_mapping with sync_inode() (Jeff Layton) [525963]
  - [fs] NFS: Simplify nfs_wb_page_cancel() (Jeff Layton) [525963]
  - [fs] NFS: Ensure inode is always marked I_DIRTY_DATASYNC, if it has unstable pages (Jeff Layton) [525963]
  - [fs] NFS: Run COMMIT as an asynchronous RPC call when wbc->for_background is set (Jeff Layton) [525963]
  - [fs] NFS: Reduce the number of unnecessary COMMIT calls (Jeff Layton) [525963]
  - [fs] NFS: Add a count of the number of unstable writes carried by an inode (Jeff Layton) [525963]
  - [fs] NFS: Cleanup - move nfs_write_inode() into fs/nfs/write.c (Jeff Layton) [525963]
  - [fs] writeback: pass writeback_control to ->write_inode (Jeff Layton) [525963]
  - [fs] writeback: make sure data is on disk before calling ->write_inode (Jeff Layton) [525963]
  - [fs] writeback: introduce wbc.for_background (Jeff Layton) [525963]
  - [netdrv] macvlan: fix support for multiple driver backends (Anthony Liguori) [553337 566731]
  - [netdrv] net/macvtap: add vhost support (Anthony Liguori) [553337 566731]
  - [netdrv] macvtap: add GSO/csum offload support (Anthony Liguori) [553337 566731]
  - [netdrv] macvtap: rework object lifetime rules (Anthony Liguori) [553337 566731]
  - [netdrv] macvtap: fix reference counting (Anthony Liguori) [553337 566731]
  - [netdrv] net: macvtap driver (Anthony Liguori) [553337 566731]
  - [netdrv] macvlan: export macvlan mode through netlink (Anthony Liguori) [553337 566731]
  - [netdrv] macvlan: implement bridge, VEPA and private mode (Anthony Liguori) [553337 566731]
  - [netdrv] macvlan: cleanup rx statistics (Anthony Liguori) [553337 566731]
  - [netdrv] macvlan: Precise RX stats accounting (Anthony Liguori) [553337 566731]
  - [netdrv] macvlan: add private dev_txq_stats_fold function (Anthony Liguori) [553337 566731]
  - [netdrv] veth: move loopback logic to common location (Anthony Liguori) [553337 566731]
  - [s390x] zfcp: Remove lock dependency on unit remove (Hendrik Brueckner) [576860]
  - [s390x] zfcp: Remove lock dependency on unit add (Hendrik Brueckner) [576860]
  - [s390x] zfcp: Remove lock dependency on CCW remove (Hendrik Brueckner) [576860]
  - [s390x] dasd: fix alignment of transport mode recovery TCW (Hendrik Brueckner) [575824]
  - [s390x] cio: fix drvdata usage for the console subchannel (Hendrik Brueckner) [575826]
  - [s390x] zcore: CPU registers are not saved under LPAR (Hendrik Brueckner) [575221]
  - [s390x] zfcpdump: Use direct IO in order to increase dump speed (Hendrik Brueckner) [575189]
  - [s390x] qeth: change checksumming default for HiperSockets (Hendrik Brueckner) [572227]
  - [s390x] qeth: l3 send dhcp in non pass thru mode (Hendrik Brueckner) [572225]
  - [s390x] zfcp: Remove attached ports and units correctly (Hendrik Brueckner) [571938]
  - [drm] Bring in nouveau updates from upstream (Ben Skeggs) [558468]
  - [vfs] pass struct file to do_truncate on O_TRUNC opens (Jeff Layton) [573995]
  - [vfs] O_TRUNC open shouldn't fail after file truncation (Jeff Layton) [573995]
  - [net] netfilter: ctnetlink: compute message size properly (Jiri Pirko) [578476]
  - [block] cfq-iosched: Do not merge queues of BE and IDLE classes (Jeff Moyer) [577393]
  - [block] remove 16 bytes of padding from struct request on 64bits (Jeff Moyer) [577393]
  - [block] cfq: remove 8 bytes of padding from cfq_rb_root on 64 bit builds (Jeff Moyer) [577393]
  - [block] cfq-iosched: quantum check tweak (Jeff Moyer) [577393]
  - [block] remove padding from io_context on 64bit builds (Jeff Moyer) [577393]
  - [block] cfq: reorder cfq_queue removing padding on 64bit (Jeff Moyer) [577393]
  - [block] cfq-iosched: split seeky coop queues after one slice (Jeff Moyer) [577393]
  - [x86] edac, mce: Filter out invalid values (Bhavna Sarathy) [574487]
  - [x86] edac, mce, amd: silence GART TLB errors (Bhavna Sarathy) [574487]
  - [x86] edac, mce: correct corenum reporting (Bhavna Sarathy) [574487]
  - [x86] edac, mce: update AMD F10h revD check (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: Simplify ECC override handling (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: Do not falsely trigger kerneloops (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: Ensure index stays within bounds in amd64_get_scrub_rate (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: restrict PCI config space access (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: fix K8 chip select reporting (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: bump driver version (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: fix use-uninitialised bug (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: correct sys address to chip select mapping (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: add a leaner syndrome decoding algorithm (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: remove early hw support check (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: detect DDR3 memory type (Bhavna Sarathy) [574487]
  - [x86] edac: add memory types strings for debugging (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: remove unneeded extract_error_address wrapper (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: rename StinkyIdentifier (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: remove superfluous dbg printk (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: enhance address to DRAM bank mapping (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: cleanup f10_early_channel_count (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: dump DIMM sizes on K8 too (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: cleanup rest of amd64_dump_misc_regs (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: cleanup DRAM cfg low debug output (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: wrap-up pci config read error handling (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: make DRAM regions output more human-readable (Bhavna Sarathy) [574487]
  - [x86] amd64_edac: clarify DRAM CTL debug reporting (Bhavna Sarathy) [574487]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-20.el6]
changelog:
  - [netdrv] iwlwifi: fix kdump hang (Stanislaw Gruszka) [575122]
  - [kernel] clockevent: Don't remove broadcast device when cpu is dead (Danny Feng) [572438]
  - [block] Export max number of segments and max segment size in sysfs (Jeff Moyer) [574132]
  - [block] Finalize conversion of block limits functions (Jeff Moyer) [574132]
  - [block] Fix overrun in lcm() and move it to lib (Jeff Moyer) [574132]
  - [block] jiffies fixes (Jeff Moyer) [574132]
  - [block] Consolidate phys_segment and hw_segment limits (Jeff Moyer) [574132]
  - [block] Rename blk_queue_max_sectors to blk_queue_max_hw_sectors (Jeff Moyer) [574132]
  - [block] Add BLK_ prefix to definitions (Jeff Moyer) [574132]
  - [block] Remove unused accessor function (Jeff Moyer) [574132]
  - [block] Update blk_queue_max_sectors and documentation (Jeff Moyer) [574132]
  - [ata] ahci: Turn off DMA engines when there's no device attached (Matthew Garrett) [577967]
  - [scsi] qla2xxx: minor updates and fixes from upstream (Rob Evers) [574526]
  - [scsi] Additional BSG corrections from upstream (Rob Evers) [574590]
  - [netdrv] be2net: Update be2net 10GB NIC driver to version 2.102.147u (Ivan Vecera) [576172]
  - [scsi] update fibre channel layer (Mike Christie) [571824]
  - [scsi] lpfc Update from 8.3.5.6 to 8.3.5.7 FC/FCoE (Rob Evers) [576174]
  - [netdrv] e100: fix the 'size' argument passed to pci_pool_create() (Dean Nelson) [576887]
  - [kernel] futex: remove rw parameter from get_futex_key() (Amerigo Wang) [555700]
  - [drm] Add drm_gem_object_handle_unreference_unlocked and drm_gem_object_unreference_unlocked (Adam Jackson) [575910]
  - [drm] i915: Update to 2.6.34-rc1 (pre-vga-switcheroo) (Adam Jackson) [575910]
  - [scsi] libfcoe: Send port LKA every FIP_VN_KA_PERIOD secs (Rob Evers) [570693]
  - [scsi] fnic: updating driver to 1.4.0.98 syncs w/ upstream (Rob Evers) [570693]
  - [sound] snd-hda-intel: avoid divide by zero (Jaroslav Kysela) [567173] {CVE-2010-1085}
  - [netdrv] bnx2x: use new firmware (Stanislaw Gruszka) [560993]
  - [netdrv] bnx2: remove old firmware (Stanislaw Gruszka) [560993]
  - [netdrv] bnx2x: 1.52.1-6 firmware (Stanislaw Gruszka) [560993]
  - [netdrv] bnx2x: 1.52.1-6 bug fixes (Stanislaw Gruszka) [560993]
  - [ata] ahci: support FIS-based switching (David Milburn) [463152]
  - [drm] radeon: better GPU reset for lockup (Jerome Glisse) [576511]
  - [block] cciss: add 30 second initial timeout wait on controller reset (Tomas Henzl) [574094]
  - [serial] fix hang in serial console open (Neil Horman) [568418]
  - [virt] vmw_pvscsi: adding vmware paravirtualized driver (Rob Evers) [553062]
  - [scsi] 3w-9xxx: update 3w-9xxx to v2.26.02.014RH (Tomas Henzl) [572779]
  - [netdrv] ixgbevf: initial support for 82599VF driver (Andy Gospodarek) [462790]
  - [netdrv] ixgbe: update to version 2.0.62-k2 (Andy Gospodarek) [462790]
  - [netdrv] netxen: More critical bug fixes and AER support (Tony Camuso) [516840]
  - [netdrv] netxen: Sync with upstream kernel bug fixes (Tony Camuso) [516840]
  - [fs] dlm: use bastmode in debugfs output (David Teigland) [568102]
  - [fs] dlm: send reply before bast (David Teigland) [568102]
  - [fs] dlm: fix ordering of bast and cast (David Teigland) [568102]
  - [virt] virtio-net: remove send queue (Anthony Liguori) [555698]
  - [virt] virtio-net: Defer skb allocation and remove recv queue (Anthony Liguori) [555698]
  - [net] bridge: Allow enable/disable UFO on bridge device via ethtool (Anthony Liguori) [555537]
  - [net] Make UFO on master device independent of attached devices (Anthony Liguori) [555537]
  - [fs] xfs: fix locking for inode cache radix tree tag updates (Christoph Hellwig) [573836]
  - [uv] fix microcode.ctl slow down in boot-time on large systems (George Beshers) [573018]
  - [scsi] lpfc Update from 8.3.5.5 to 8.3.5.6 FC/FCoE (Rob Evers) [568889]
  - [mm] transparent hugepage support update (Andrea Arcangeli) [556572]
  - [netdrv] e1000e: fix data corruptor in NFS packet split filtering hw (Neil Horman) [572350]
  - [security] selinux: dynamic class/perm discovery (Eric Paris) [570812]
  - [security] selinux/ss: correct size computation (Eric Paris) [573000]
  - [security] SELinux: reduce size of access vector hash table (Eric Paris) [570433]
  - [security] SELinux: reset the security_ops before flushing the avc cache (Eric Paris) [572998]
  - [sched] Fix sched_mc_power_savings for !SMT (Danny Feng) [571879]
  - [security] selinux: Only audit permissions specified in policy (Eric Paris) [573002]
  - [security] selinux: fix memory leak in sel_make_bools (Eric Paris) [573008]
  - [security] SELinux: Make selinux_kernel_create_files_as() shouldn't just always return 0 (Eric Paris) [573011]
  - [security] selinux: convert range transition list to a hashtab (Eric Paris) [572702]
  - [virt] x86: remove kmap_atomic_pte paravirt op (Paolo Bonzini) [567203]
  - [virt] vmi: disable highmem PTE allocation even when CONFIG_HIGHPTE=y (Paolo Bonzini) [567203]
  - [virt] xen: disable highmem PTE allocation even when CONFIG_HIGHPTE=y (Paolo Bonzini) [567203]
  - [virt] x86: allow allocation of highmem user page tables to be disabled when CONFIG_HIGHPTE=y (Paolo Bonzini) [567203]
  - [netdrv] qlge: update to latest upstream (Andy Gospodarek) [562311]
  - [netdrv] add netif_printk helpers (Andy Gospodarek) [562311]
  - [net] bridge: Fix build error when IGMP_SNOOPING is not enabled (Herbert Xu) [574321]
  - [net] bridge: Add multicast count/interval sysfs entries (Herbert Xu) [574321]
  - [net] bridge: Add hash elasticity/max sysfs entries (Herbert Xu) [574321]
  - [net] bridge: Add multicast_snooping sysfs toggle (Herbert Xu) [574321]
  - [net] bridge: Add multicast_router sysfs entries (Herbert Xu) [574321]
  - [net] bridge: Add multicast data-path hooks (Herbert Xu) [574321]
  - [net] bridge: Add multicast start/stop hooks (Herbert Xu) [574321]
  - [net] bridge: Add multicast forwarding functions (Herbert Xu) [574321]
  - [net] bridge: Move NULL mdb check into br_mdb_ip_get (Herbert Xu) [574321]
  - [net] bridge: ensure to unlock in error path in br_multicast_query() (Herbert Xu) [574321]
  - [net] bridge: Fix RCU race in br_multicast_stop (Herbert Xu) [574321]
  - [net] bridge: Use RCU list primitive in __br_mdb_ip_get (Herbert Xu) [574321]
  - [net] bridge: cleanup: remove unneed check (Herbert Xu) [574321]
  - [net] bridge: depends on INET (Herbert Xu) [574321]
  - [net] bridge: Make IGMP snooping depend upon BRIDGE. (Herbert Xu) [574321]
  - [net] bridge: Add core IGMP snooping support (Herbert Xu) [574321]
  - [net] bridge: Fix br_forward crash in promiscuous mode (Herbert Xu) [574321]
  - [net] bridge: Split may_deliver/deliver_clone out of br_flood (Herbert Xu) [574321]
  - [net] bridge: Use BR_INPUT_SKB_CB on xmit path (Herbert Xu) [574321]
  - [net] bridge: Avoid unnecessary clone on forward path (Herbert Xu) [574321]
  - [net] bridge: Allow tail-call on br_pass_frame_up (Herbert Xu) [574321]
  - [net] bridge: Do br_pass_frame_up after other ports (Herbert Xu) [574321]
  - [net] Add netdev_alloc_skb_ip_align() helper (Herbert Xu) [574321]
  - [kernel] futex_lock_pi() key refcnt fix (Danny Feng) [566347] {CVE-2010-0623}
  - [pci] AER: fix aer inject result in kernel oops (Prarit Bhargava) [568515]
  - [scsi] fix 32bit compatibility in BSG interface (Rob Evers) [554538]
  - [x86] ACPI: don't cond_resched if irq is disabled (Danny Feng) [572441]
  - [x86] Ensure dell-laptop buffers are below 4GB (Matthew Garrett) [570036]
  - [hwmon] add hex '0x' indication to coretemp module output (Dean Nelson) [571865]
  - [cifs] update cifs client code to latest upstream code (Jeff Layton) [562788]
  - [block] fix merge_bvec_fn return value checks (Mike Snitzer) [571455]
  - [fs] ext4: avoid uninit mem references on some mount options (Eric Sandeen) [562008]
  - [s390x] dasd: Correct offline processing (Hendrik Brueckner) [568376]
  - [s390x] dasd: Fix refcounting (Hendrik Brueckner) [568376]
  - [x86] amd_iommu: remove dma-ops warning message (Bhavna Sarathy) [560002]
  - [x86] amd_iommu: Fix IO page fault by adding device notifiers (Bhavna Sarathy) [560002]
  - [x86] amd_iommu: Fix IOMMU API initialization for iommu=pt (Bhavna Sarathy) [560002]
  - [x86] amd_iommu: Fix possible integer overflow (Bhavna Sarathy) [560002]
  - [x86] amd_iommu: Fix deassignment of a device from the pt domain (Bhavna Sarathy) [560002]
  - [gfs2] Allow the number of committed revokes to temporarily be negative (Benjamin Marzinski) [563907]
  - [ppc64] powerpc: export data from new hcall H_EM_GET_PARMS (Steve Best) [570019]
  - [x86] ACPI: Be in TS_POLLING state during mwait based C-state entry (Avi Kivity) [571440]
  - [net] tcp: fix ICMP-RTO war (Jiri Olsa) [567532]
  - [mm] Add padding to mm structures allow future patches during the RHEL6 life (Larry Woodman) [554511]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-18.el6]
changelog:
  - [kernel/time] revert cc2f92ad1d0e03fe527e8ccfc1f918c368964dc8 (Aristeu Rozanski) [567551]
  - [virt] hvc_console: Fix race between hvc_close and hvc_remove (Amit Shah) [568624]
  - [scsi] Add netapp to scsi dh alua dev list (Mike Christie) [559586]
  - [scsi] scsi_dh_emc: fix mode select setup (Mike Christie) [570685]
  - [drm] Remove loop in IronLake graphics interrupt handler (John Villalovos) [557838]
  - [x86] Intel Cougar Point chipset support (John Villalovos) [560077]
  - [vhost] vhost-net: restart tx poll on sk_sndbuf full (Michael S. Tsirkin) [562837]
  - [vhost] fix get_user_pages_fast error handling (Michael S. Tsirkin) [562837]
  - [vhost] initialize log eventfd context pointer (Michael S. Tsirkin) [562837]
  - [vhost] logging thinko fix (Michael S. Tsirkin) [562837]
  - [vhost] vhost-net: switch to smp barriers (Michael S. Tsirkin) [562837]
  - [net] bug fix for vlan + gro issue (Andy Gospodarek) [569922]
  - [uv] Fix unmap_vma() bug related to mmu_notifiers (George Beshers) [253033]
  - [uv] Have mmu_notifiers use SRCU so they may safely schedule (George Beshers) [253033]
  - [drm] radeon/kms: bring all v2.6.33 fixes into EL6 kernel (Dave Airlie) [547422 554323 566618 569704]
  - [dvb] Fix endless loop when decoding ULE at dvb-core (Mauro Carvalho Chehab) [569243]
  - [kernel] sched: Fix SCHED_MC regression caused by change in sched cpu_power (Danny Feng) [568123]
  - [s390x] vdso: glibc does not use vdso functions (Hendrik Brueckner) [567755]
  - [drm] bring drm core/ttm/fb layer fixes in from upstream (Dave Airlie) [569701]
  - [kernel] Fix SMT scheduler regression in find_busiest_queue() (Danny Feng) [568120]
  - [s390x] qeth: avoid recovery during device online setting (Hendrik Brueckner) [568781]
  - [mm] Fix potential crash with sys_move_pages (Danny Feng) [562591] {CVE-2010-0415}
  - [scsi] pmcraid: bug fixes from upstream (Rob Evers) [567376]
  - [scsi] lpfc Update from 8.3.5.4 to 8.3.5.5 FC/FCoE (Rob Evers) [564508]
  - [ata] ahci: disable FPDMA auto-activate optimization on NVIDIA AHCI (David Milburn) [568815]
  - [selinux] netlabel: fix corruption of SELinux MLS categories > 127 (Eric Paris) [568370]
  - [gfs2] print glock numbers in hex (Robert S Peterson) [566755]
  - [mm] Fix hugetlb.c clear_huge_page parameter (Andrea Arcangeli) [566604]
  - [mm] fix anon_vma locking updates for transparent hugepage code (Andrea Arcangeli) [564515]
  - [netdrv] cxgb3: add memory barriers (Steve Best) [568390]
  - [dm] raid45 target: constructor error path oops fix (Heinz Mauelshagen) [567605]
  - [scsi] mpt2sas: fix missing initialization (Tomas Henzl) [567965]
  - [net] netfilter: nf_conntrack: per netns nf_conntrack_cachep (Jiri Pirko) [567181]
  - [x86] nmi_watchdog: use __cpuinit for nmi_watchdog_default (Don Zickus) [567601]
  - [netdrv] ixgbe: prevent speculative processing of descriptors (Steve Best) [568391]
  - [kvm] Fix emulate_sys[call, enter, exit]()'s fault handling (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] Fix segment descriptor loading (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] Fix load_guest_segment_descriptor() to inject page fault (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Forbid modifying CS segment register by mov instruction (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Fix x86_emulate_insn() not to use the variable rc for non-X86EMUL values (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: X86EMUL macro replacements: x86_emulate_insn() and its helpers (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: X86EMUL macro replacements: from do_fetch_insn_byte() to x86_decode_insn() (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] inject #UD in 64bit mode from instruction that are not valid there (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Fix properties of instructions in group 1_82 (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: code style cleanup (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Add LOCK prefix validity checking (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Check CPL level during privilege instruction emulation (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Fix popf emulation (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Check IOPL level during io instruction emulation (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: fix memory access during x86 emulation (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Add Virtual-8086 mode of emulation (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Add group9 instruction decoding (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Add group8 instruction decoding (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Introduce No64 decode option (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [kvm] x86 emulator: Add 'push/pop sreg' instructions (Gleb Natapov) [560903 560904 563466] {CVE-2010-0298 CVE-2010-0306 CVE-2010-0419}
  - [x86] AES/PCLMUL Instruction support: Various fixes for AES-NI and PCLMMUL (John Villalovos) [463496]
  - [x86] AES/PCLMUL Instruction support: Use gas macro for AES-NI instructions (John Villalovos) [463496]
  - [x86] AES/PCLMUL Instruction support: Various small fixes for AES/PCMLMUL and generate .byte code for some new instructions via gas macro (John Villalovos) [463496]
  - [x86] AES/PCLMUL Instruction support: Add PCLMULQDQ accelerated implementation (John Villalovos) [463496]
  - [scsi] megaraid_sas: fix for 32bit apps (Tomas Henzl) [559941]
  - [kvm] fix large packet drops on kvm hosts with ipv6 (Neil Horman) [565525]
  - [kvm] Add MAINTAINERS entry for virtio_console (Amit Shah) [566391]
  - [kvm] virtio: console: Fill ports' entire in_vq with buffers (Amit Shah) [566391]
  - [kvm] virtio: console: Error out if we can't allocate buffers for control queue (Amit Shah) [566391]
  - [kvm] virtio: console: Add ability to remove module (Amit Shah) [566391]
  - [kvm] virtio: console: Ensure no memleaks in case of unused buffers (Amit Shah) [566391]
  - [kvm] virtio: console: update Red Hat copyright for 2010 (Amit Shah) [566391]
  - [kvm] virtio: Initialize vq->data entries to NULL (Amit Shah) [566391]
  - [kvm] virtio: console: outbufs are no longer needed (Amit Shah) [566391]
  - [kvm] virtio: console: return -efault for fill_readbuf if copy_to_user fails (Amit Shah) [566391]
  - [kvm] virtio: console: Allow sending variable-sized buffers to host, efault on copy_from_user err (Amit Shah) [566391]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-17.el6]
changelog:
  - [s390] hvc_iucv: allocate IUCV send/receive buffers in DMA zone (Hendrik Brueckner) [566188]
  - [s390] qdio: continue polling for buffer state ERROR (Hendrik Brueckner) [565528]
  - [s390] qdio: prevent kernel bug message in interrupt handler (Hendrik Brueckner) [565542]
  - [s390] zfcp: report BSG errors in correct field (Hendrik Brueckner) [564378]
  - [s390] zfcp: cancel all pending work for a to be removed zfcp_port (Hendrik Brueckner) [564382]
  - [nfs] mount.nfs: Unknown error 526 (Steve Dickson) [561975]
  - [x86] x86-64, rwsem: Avoid store forwarding hazard in __downgrade_write (Avi Kivity) [563801]
  - [x86] x86-64, rwsem: 64-bit xadd rwsem implementation (Avi Kivity) [563801]
  - [x86] x86-64: support native xadd rwsem implementation (Avi Kivity) [563801]
  - [x86] clean up rwsem type system (Avi Kivity) [563801]
  - [x86] x86-32: clean up rwsem inline asm statements (Avi Kivity) [563801]
  - [x86] nmi_watchdog: enable by default on RHEL-6 (Don Zickus) [523857]
  - [block] freeze_bdev: don't deactivate successfully frozen MS_RDONLY sb (Mike Snitzer) [565890]
  - [block] fix bio_add_page for non trivial merge_bvec_fn case (Mike Snitzer) [565890]
  - [watchdog] Add support for iTCO watchdog on Ibex Peak chipset (John Villalovos) [536698]
  - [kernel] time: Remove xtime_cache (Prarit Bhargava) [563135]
  - [kernel] time: Implement logarithmic time accumalation (Prarit Bhargava) [563135]
  - [dm] raid1: fail writes if errors are not handled and log fails (Mike Snitzer) [565890]
  - [dm] mpath: fix stall when requeueing io (Mike Snitzer) [565890]
  - [dm] log: userspace fix overhead_size calcuations (Mike Snitzer) [565890]
  - [dm] stripe: avoid divide by zero with invalid stripe count (Mike Snitzer) [565890]
  - [mm] anon_vma locking updates for transparent hugepage code (Rik van Riel) [564515]
  - [mm] anon_vma linking changes to improve multi-process scalability (Rik van Riel) [564515]
  - [virt] virtio_blk: add block topology support (Christoph Hellwig) [556477]
  - [kvm] PIT: control word is write-only (Eduardo Habkost) [560905] {CVE-2010-0309}
  - [kernel] Prevent futex user corruption to crash the kernel (Jerome Marchand) [563957]
  - [selinux] print the module name when SELinux denies a userspace upcall (Eric Paris) [563731]
  - [gfs] GFS2 problems on single node cluster (Steven Whitehouse) [564329]
  - [ppc] Add kdump support to Collaborative Memory Manager (Steve Best) [563316]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-16.el6]
changelog:
  - [nfs] Remove a redundant check for PageFsCache in nfs_migrate_page() (Steve Dickson) [563938]
  - [nfs] Fix a bug in nfs_fscache_release_page() (Steve Dickson) [563938]
  - [mm] fix BUG()s caused by the transparent hugepage patch (Larry Woodman) [556572]
  - [fs] inotify: fix inotify WARN and compatibility issues (Eric Paris) [563363]
  - [net] do not check CAP_NET_RAW for kernel created sockets (Eric Paris) [540560]
  - [pci] Enablement of PCI ACS control when IOMMU enabled on system (Don Dutile) [523278]
  - [pci] PCI ACS support functions (Don Dutile) [523278]
  - [uv] x86: Fix RTC latency bug by reading replicated cachelines (George Beshers) [562189]
  - [s390x] ctcm / lcs / claw: remove cu3088 layer (Hendrik Brueckner) [557522]
  - [uv] vgaarb: add user selectability of the number of gpus in a system (George Beshers) [555879]
  - [gpu] vgaarb: fix vga arbiter to accept PCI domains other than 0 (George Beshers) [555879]
  - [uv] x86_64: update uv arch to target legacy VGA I/O correctly (George Beshers) [555879]
  - [pci] update pci_set_vga_state to call arch functions (George Beshers) [555879]
  - [uv] PCI: update pci_set_vga_state to call arch functions (George Beshers) [555879]
  - [mm] remove madvise(MADV_HUGEPAGE) (Andrea Arcangeli) [556572]
  - [mm] hugepage redhat customization (Andrea Arcangeli) [556572]
  - [mm] introduce khugepaged (Andrea Arcangeli) [556572]
  - [mm] transparent hugepage vmstat (Andrea Arcangeli) [556572]
  - [mm] memcg huge memory (Andrea Arcangeli) [556572]
  - [mm] memcg compound (Andrea Arcangeli) [556572]
  - [mm] pmd_trans_huge migrate bugcheck (Andrea Arcangeli) [556572]
  - [mm] madvise(MADV_HUGEPAGE) (Andrea Arcangeli) [556572]
  - [mm] verify pmd_trans_huge isnt leaking (Andrea Arcangeli) [556572]
  - [mm] transparent hugepage core (Andrea Arcangeli) [556572]
  - [mm] dont alloc harder for gfp nomemalloc even if nowait (Andrea Arcangeli) [556572]
  - [mm] introduce _GFP_NO_KSWAPD (Andrea Arcangeli) [556572]
  - [mm] backport page_referenced microoptimization (Andrea Arcangeli) [556572]
  - [mm] kvm mmu transparent hugepage support (Andrea Arcangeli) [556572]
  - [mm] clear_copy_huge_page (Andrea Arcangeli) [556572]
  - [mm] clear_huge_page fix (Andrea Arcangeli) [556572]
  - [mm] split_huge_page paging (Andrea Arcangeli) [556572]
  - [mm] split_huge_page_mm/vma (Andrea Arcangeli) [556572]
  - [mm] add pmd_huge_pte to mm_struct (Andrea Arcangeli) [556572]
  - [mm] clear page compound (Andrea Arcangeli) [556572]
  - [mm] add pmd mmu_notifier helpers (Andrea Arcangeli) [556572]
  - [mm] pte alloc trans splitting (Andrea Arcangeli) [556572]
  - [mm] bail out gup_fast on splitting pmd (Andrea Arcangeli) [556572]
  - [mm] add pmd mangling functions to x86 (Andrea Arcangeli) [556572]
  - [mm] add pmd mangling generic functions (Andrea Arcangeli) [556572]
  - [mm] special pmd_trans_* functions (Andrea Arcangeli) [556572]
  - [mm] config_transparent_hugepage (Andrea Arcangeli) [556572]
  - [mm] comment reminder in destroy_compound_page (Andrea Arcangeli) [556572]
  - [mm] export maybe_mkwrite (Andrea Arcangeli) [556572]
  - [mm] no paravirt version of pmd ops (Andrea Arcangeli) [556572]
  - [mm] add pmd paravirt ops (Andrea Arcangeli) [556572]
  - [mm] add native_set_pmd_at (Andrea Arcangeli) [556572]
  - [mm] clear compound mapping (Andrea Arcangeli) [556572]
  - [mm] update futex compound knowledge (Andrea Arcangeli) [556572]
  - [mm] alter compound get_page/put_page (Andrea Arcangeli) [556572]
  - [mm] add a compound_lock (Andrea Arcangeli) [556572]
  - [mm] define MADV_HUGEPAGE (Andrea Arcangeli) [556572]
  - [oprofile] Support Nehalem-EX CPU in Oprofile (John Villalovos) [528998]
  - [nfs] nfs: handle NFSv3 -EKEYEXPIRED errors as we would -EJUKEBOX (Jeff Layton) [479359]
  - [nfs] handle NFSv2 -EKEYEXPIRED returns from RPC layer appropriately (Jeff Layton) [479359]
  - [nfs] sunrpc: parse and return errors reported by gssd (Jeff Layton) [479359]
  - [nfs] nfs4: handle -EKEYEXPIRED errors from RPC layer (Jeff Layton) [479359]
  - [net] nf_conntrack: fix memory corruption (Jon Masters) [559471]
  - [kvm] emulate accessed bit for EPT (Rik van Riel) [555106]
  - [vhost] fix TUN=m VHOST_NET=y (Michael S. Tsirkin) [562837]
  - [vhost] vhost-net: defer f->private_data until setup succeeds (Chris Wright) [562837]
  - [vhost] vhost-net: comment use of invalid fd when setting vhost backend (Chris Wright) [562837]
  - [vhost] access check thinko fixes (Michael S. Tsirkin) [562837]
  - [vhost] make default mapping empty by default (Michael S. Tsirkin) [562837]
  - [vhost] add access_ok checks (Michael S. Tsirkin) [562837]
  - [vhost] prevent modification of an active ring (Michael S. Tsirkin) [562837]
  - [vhost] fix high 32 bit in FEATURES ioctls (Michael S. Tsirkin) [562837]
  - [dm] dm-raid1: fix deadlock at suspending failed device (Takahiro Yasui) [557932]
  - [dm] fix kernel panic at releasing bio on recovery failed region (Takahiro Yasui) [557934]
  - [scsi] lpfc Update from 8.3.4 to 8.3.5.4 FC/FCoE (Rob Evers) [531028]
  - [nfs] sunrpc/cache: fix module refcnt leak in a failure path (Steve Dickson) [562285]
  - [nfs] Ensure that we handle NFS4ERR_STALE_STATEID correctly (Steve Dickson) [560784]
  - [nfs] NFSv4.1: Don't call nfs4_schedule_state_recovery() unnecessarily (Steve Dickson) [560784]
  - [nfs] NFSv4: Don't allow posix locking against servers that don't support it (Steve Dickson) [560784]
  - [nfs] Ensure that the NFSv4 locking can recover from stateid errors (Steve Dickson) [560784]
  - [nfs] Avoid warnings when CONFIG_NFS_V4=n (Steve Dickson) [560784]
  - [nfs] Make nfs_commitdata_release static (Steve Dickson) [560784]
  - [nfs] Try to commit unstable writes in nfs_release_page() (Steve Dickson) [560784]
  - [nfs] Fix a reference leak in nfs_wb_cancel_page() (Steve Dickson) [560784]
  - [nfs] nfs41: cleanup callback code to use __be32 type (Steve Dickson) [560785]
  - [nfs] nfs41: clear NFS4CLNT_RECALL_SLOT bit on session reset (Steve Dickson) [560785]
  - [nfs] nfs41: fix nfs4_callback_recallslot (Steve Dickson) [560785]
  - [nfs] nfs41: resize slot table in reset (Steve Dickson) [560785]
  - [nfs] nfs41: implement cb_recall_slot (Steve Dickson) [560785]
  - [nfs] nfs41: back channel drc minimal implementation (Steve Dickson) [560785]
  - [nfs] nfs41: prepare for back channel drc (Steve Dickson) [560785]
  - [nfs] nfs41: remove uneeded checks in callback processing (Steve Dickson) [560785]
  - [nfs] nfs41: directly encode back channel error (Steve Dickson) [560785]
  - [nfs] nfs41: fix wrong error on callback header xdr overflow (Steve Dickson) [560785]
  - [nfs] nfs41: Process callback's referring call list (Steve Dickson) [560785]
  - [nfs] nfs41: Check slot table for referring calls (Steve Dickson) [560785]
  - [nfs] nfs41: Adjust max cache response size value (Steve Dickson) [560785]
  - [nfs] NFSD: Create PF_INET6 listener in write_ports (Steve Dickson) [560785]
  - [nfs] SUNRPC: NFS kernel APIs shouldn't return ENOENT for "transport not found" (Steve Dickson) [560785]
  - [nfs] SUNRPC: Bury "#ifdef IPV6" in svc_create_xprt() (Steve Dickson) [560785]
  - [nfs] NFSD: Support AF_INET6 in svc_addsock() function (Steve Dickson) [560785]
  - [nfs] SUNRPC: Use rpc_pton() in ip_map_parse() (Steve Dickson) [560785]
  - [nfs] nfsd: 4.1 has an rfc number (Steve Dickson) [560785]
  - [nfs] nfsd41: Create the recovery entry for the NFSv4.1 client (Steve Dickson) [560785]
  - [nfs] nfsd: use vfs_fsync for non-directories (Steve Dickson) [560785]
  - [nfs] nfsd4: Use FIRST_NFS4_OP in nfsd4_decode_compound() (Steve Dickson) [560785]
  - [nfs] nfsd41: nfsd4_decode_compound() does not recognize all ops (Steve Dickson) [560785]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-15.el6]
changelog:
  - [block] blk-cgroup: Fix lockdep warning of potential deadlock in blk-cgroup (Vivek Goyal) [561903]
  - [block] cfq: Do not idle on async queues and drive deeper WRITE depths (Vivek Goyal) [561902]
  - [quota] 64-bit quota format fixes (Jerome Marchand) [546311]
  - [x86] fix Add AMD Node ID MSR support (Bhavna Sarathy) [557540]
  - [fs] ext4: fix type of "offset" in ext4_io_end (Eric Sandeen) [560097]
  - [x86] Disable HPET MSI on ATI SB700/SB800 (Prarit Bhargava) [557332]
  - [x86] arch specific support for remapping HPET MSIs (Prarit Bhargava) [557332]
  - [x86] intr-remap: generic support for remapping HPET MSIs (Prarit Bhargava) [557332]
  - [gfs] GFS2: Extend umount wait coverage to full glock lifetime (Steven Whitehouse) [561287]
  - [gfs] GFS2: Wait for unlock completion on umount (Steven Whitehouse) [561287]
  - [gfs] GFS2: Use MAX_LFS_FILESIZE for meta inode size (Steven Whitehouse) [561307]
  - [gfs] GFS2: Use GFP_NOFS for alloc structure (Steven Whitehouse) [561307]
  - [gfs] GFS2: Fix refcnt leak on gfs2_follow_link() error path (Steven Whitehouse) [561307]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-14.el6]
changelog:
  - [s390x] dasd: fix online/offline race (Hendrik Brueckner) [552840]
  - [netdrv] update tg3 to version 3.106 and fix panic (John Feeney) [555101]
  - [s390x] dasd: Fix null pointer in s390dbf and discipline checking (Hendrik Brueckner) [559615]
  - [s390x] zcrypt: Do not remove coprocessor in case of error 8/72 (Hendrik Brueckner) [559613]
  - [s390x] cio: channel path vary operation has no effect (Hendrik Brueckner) [559612]
  - [uv] x86: Ensure hub revision set for all ACPI modes (George Beshers) [559752]
  - [uv] x86: Add function retrieving node controller revision number (George Beshers) [559752]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-13.el6]
changelog:
  - [virtio] console: show error message if hvc_alloc fails for console ports (Amit Shah) [543824]
  - [virtio] console: Add debugfs files for each port to expose debug info (Amit Shah) [543824]
  - [virtio] console: Add ability to hot-unplug ports (Amit Shah) [543824]
  - [virtio] hvc_console: Export (GPL'ed) hvc_remove (Amit Shah) [543824]
  - [virtio] Add ability to detach unused buffers from vrings (Amit Shah) [543824]
  - [virtio] console: Handle port hot-plug (Amit Shah) [543824]
  - [virtio] console: Remove cached data on port close (Amit Shah) [543824]
  - [virtio] console: Register with sysfs and create a 'name' attribute for ports (Amit Shah) [543824]
  - [virtio] console: Ensure only one process can have a port open at a time (Amit Shah) [543824]
  - [virtio] console: Add file operations to ports for open/read/write/poll (Amit Shah) [543824]
  - [virtio] console: Associate each port with a char device (Amit Shah) [543824]
  - [virtio] console: Prepare for writing to / reading from userspace buffers (Amit Shah) [543824]
  - [virtio] console: Add a new MULTIPORT feature, support for generic ports (Amit Shah) [543824]
  - [virtio] console: Introduce a send_buf function for a common path for sending data to host (Amit Shah) [543824]
  - [virtio] console: Introduce function to hand off data from host to readers (Amit Shah) [543824]
  - [virtio] console: Separate out find_vqs operation into a different function (Amit Shah) [543824]
  - [virtio] console: Separate out console init into a new function (Amit Shah) [543824]
  - [virtio] console: Separate out console-specific data into a separate struct (Amit Shah) [543824]
  - [virtio] console: ensure console size is updated on hvc open (Amit Shah) [543824]
  - [virtio] console: struct ports for multiple ports per device. (Amit Shah) [543824]
  - [virtio] console: remove global var (Amit Shah) [543824]
  - [virtio] console: don't assume a single console port. (Amit Shah) [543824]
  - [virtio] console: use vdev->priv to avoid accessing global var. (Amit Shah) [543824]
  - [virtio] console: introduce a get_inbuf helper to fetch bufs from in_vq (Amit Shah) [543824]
  - [virtio] console: ensure add_inbuf can work for multiple ports as well (Amit Shah) [543824]
  - [virtio] console: encapsulate buffer information in a struct (Amit Shah) [543824]
  - [virtio] console: port encapsulation (Amit Shah) [543824]
  - [virtio] console: We support only one device at a time (Amit Shah) [543824]
  - [virtio] hvc_console: Remove __devinit annotation from hvc_alloc (Amit Shah) [543824]
  - [virtio] hvc_console: make the ops pointer const. (Amit Shah) [543824]
  - [virtio] console: statically initialize virtio_cons (Amit Shah) [543824]
  - [virtio] console: comment cleanup (Amit Shah) [543824]
  - [x86] Fix crash when profiling more than 28 events (Bhavna Sarathy) [557570]
  - [x86] Add AMD Node ID MSR support (Bhavna Sarathy) [557540]
  - [kvm] fix spurious interrupt with irqfd (Marcelo Tosatti) [559343]
  - [kvm] eventfd: allow atomic read and waitqueue remove (Marcelo Tosatti) [559343]
  - [kvm] properly check max PIC pin in irq route setup (Marcelo Tosatti) [559343]
  - [kvm] only allow one gsi per fd (Marcelo Tosatti) [559343]
  - [kvm] x86: Fix leak of free lapic date in kvm_arch_vcpu_init() (Marcelo Tosatti) [559343]
  - [kvm] x86: Fix probable memory leak of vcpu->arch.mce_banks (Marcelo Tosatti) [559343]
  - [kvm] MMU: bail out pagewalk on kvm_read_guest error (Marcelo Tosatti) [559343]
  - [kvm] x86: Fix host_mapping_level() (Marcelo Tosatti) [559343]
  - [kvm] Fix race between APIC TMR and IRR (Marcelo Tosatti) [559343]
  - [x86] acpi: Export acpi_pci_irq_{add|del}_prt() (James Paradis) [553781]
  - [kdump] backport upstream ppc64 kcrctab fixes (Neil Horman) [558803]
  - [mm] Memory tracking for Stratus (James Paradis) [512400]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-12.el6]
changelog:
  - [drm] radeon possible security issue (Jerome Glisse) [556692]
  - [mm] Memory tracking for Stratus (James Paradis) [512400]
  - [pci] Always set prefetchable base/limit upper32 registers (Prarit Bhargava) [553471]
  - [scsi] Sync be2iscsi with upstream (Mike Christie) [515256]
  - [x86] msr/cpuid: Register enough minors for the MSR and CPUID drivers (George Beshers) [557554]
  - [x86] Remove unnecessary mdelay() from cpu_disable_common() (Peter Bogdanovic) [463633]
  - [x86] ioapic: Document another case when level irq is seen as an edge (Peter Bogdanovic) [463633]
  - [x86] ioapic: Fix the EOI register detection mechanism (Peter Bogdanovic) [463633]
  - [x86] io-apic: Move the effort of clearing remoteIRR explicitly before migrating the irq (Peter Bogdanovic) [463633]
  - [x86] Remove local_irq_enable()/local_irq_disable() in fixup_irqs() (Peter Bogdanovic) [463633]
  - [x86] Use EOI register in io-apic on intel platforms (Peter Bogdanovic) [463633]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-11.el6]
changelog:
  - [kdump] Remove the 32MB limitation for crashkernel (Steve Best) [529270]
  - [dm] dm-raid45: export missing dm_rh_inc (Heinz Mauelshagen) [552329]
  - [block] dm-raid45: add raid45 target (Heinz Mauelshagen) [552329]
  - [block] dm-replicator: blockdev site link handler (Heinz Mauelshagen) [552364]
  - [block] dm-replicator: ringbuffer replication log handler (Heinz Mauelshagen) [552364]
  - [block] dm-replicator: replication log and site link handler interfaces and main replicator module (Heinz Mauelshagen) [552364]
  - [block] dm-replicator: documentation and module registry (Heinz Mauelshagen) [552364]
  - [s390x] qeth: set default BLKT settings dependend on OSA hw level (Hendrik Brueckner) [557474]
  - [drm] bring RHEL6 radeon drm up to 2.6.33-rc4/5 level (Jerome Glisse) [557539]
  - [netdrv] e1000e: enhance frame fragment detection (Andy Gospodarek) [462780]
  - [stable] ipv6: skb_dst() can be NULL in ipv6_hop_jumbo(). (David S. Miller) [555084]
  - [stable] module: handle ppc64 relocating kcrctabs when CONFIG_RELOCATABLE=y (Rusty Russell) [555084]
  - [stable] fix more leaks in audit_tree.c tag_chunk() (Al Viro) [555084]
  - [stable] fix braindamage in audit_tree.c untag_chunk() (Al Viro) [555084]
  - [stable] mac80211: fix skb buffering issue (and fixes to that) (Johannes Berg) [555084]
  - [stable] kernel/sysctl.c: fix stable merge error in NOMMU mmap_min_addr (Mike Frysinger) [555084]
  - [stable] libertas: Remove carrier signaling from the scan code (Samuel Ortiz) [555084]
  - [stable] mac80211: add missing sanity checks for action frames (Felix Fietkau) [555084]
  - [stable] iwl: off by one bug (Dan Carpenter) [555084]
  - [stable] cfg80211: fix syntax error on user regulatory hints (Luis R. Rodriguez) [555084]
  - [stable] ath5k: Fix eeprom checksum check for custom sized eeproms (Luis R. Rodriguez) [555084]
  - [stable] iwlwifi: fix iwl_queue_used bug when read_ptr == write_ptr (Zhu Yi) [555084]
  - [stable] xen: fix hang on suspend. (Ian Campbell) [555084]
  - [stable] quota: Fix dquot_transfer for filesystems different from ext4 (Jan Kara) [555084]
  - [stable] hwmon: (adt7462) Fix pin 28 monitoring (Roger Blofeld) [555084]
  - [stable] hwmon: (coretemp) Fix TjMax for Atom N450/D410/D510 CPUs (Yong Wang) [555084]
  - [stable] netfilter: nf_ct_ftp: fix out of bounds read in update_nl_seq() (Patrick McHardy) [555084]
  - [stable] netfilter: ebtables: enforce CAP_NET_ADMIN (Florian Westphal) [555084]
  - [stable] ASoC: Fix WM8350 DSP mode B configuration (Mark Brown) [555084]
  - [stable] ALSA: atiixp: Specify codec for Foxconn RC4107MA-RS2 (Daniel T Chen) [555084]
  - [stable] ALSA: ac97: Add Dell Dimension 2400 to Headphone/Line Jack Sense blacklist (Daniel T Chen) [555084]
  - [stable] mmc_block: fix queue cleanup (Adrian Hunter) [555084]
  - [stable] mmc_block: fix probe error cleanup bug (Jarkko Lavinen) [555084]
  - [stable] mmc_block: add dev_t initialization check (Anna Lemehova) [555084]
  - [stable] kernel/signal.c: fix kernel information leak with print-fatal-signals=1 (Andi Kleen) [555084]
  - [stable] dma-debug: allow DMA_BIDIRECTIONAL mappings to be synced with DMA_FROM_DEVICE and (Krzysztof Halasa) [555084]
  - [stable] lib/rational.c needs module.h (Sascha Hauer) [555084]
  - [stable] drivers/cpuidle/governors/menu.c: fix undefined reference to `__udivdi3' (Stephen Hemminger) [555084]
  - [stable] rtc_cmos: convert shutdown to new pnp_driver->shutdown (OGAWA Hirofumi) [555084]
  - [stable] Revert "x86: Side-step lguest problem by only building cmpxchg8b_emu for pre-Pentium" (Rusty Russell) [555084]
  - [stable] exofs: simple_write_end does not mark_inode_dirty (Boaz Harrosh) [555084]
  - [stable] modules: Skip empty sections when exporting section notes (Ben Hutchings) [555084]
  - [stable] ASoC: fix params_rate() macro use in several codecs (Guennadi Liakhovetski) [555084]
  - [stable] fasync: split 'fasync_helper()' into separate add/remove functions (Linus Torvalds) [555084]
  - [stable] untangle the do_mremap() mess (Al Viro)


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-10.el6]
changelog:
  - [mm] mmap: don't return ENOMEM when mapcount is temporarily exceeded in munmap() (Danny Feng) [557000]
  - [netdrv] vxge: fix issues found in Neterion testing (Michal Schmidt) [493985]
  - [x86] Force irq complete move during cpu offline (Prarit Bhargava) [541815]
  - [sound] Fix SPDIF-In for AD1988 codecs + add Intel Cougar IDs (Jaroslav Kysela) [557473]
  - [scsi] aic79xx: check for non-NULL scb in ahd_handle_nonpkt_busfree (Tomas Henzl) [557753]
  - [s390x] fix loading of PER control registers for utrace. (CAI Qian) [556410]
  - [s390x] ptrace: dont abuse PT_PTRACED (CAI Qian) [552102]
  - [perf] Remove the "event" callback from perf events (Jason Baron) [525517]
  - [perf] Use overflow handler instead of the event callback (Jason Baron) [525517]
  - [perf] Fix locking for PERF_FORMAT_GROUP (Jason Baron) [525517]
  - [perf] Fix event scaling for inherited counters (Jason Baron) [525517]
  - [perf] Fix PERF_FORMAT_GROUP scale info (Jason Baron) [525517]
  - [perf] Allow for custom overflow handlers (Jason Baron) [525517]
  - [perf] Add a callback to perf events (Jason Baron) [525517]
  - [perf] improve error reporting (Jason Baron) [525517]
  - [perf] add kernel internal interface (Jason Baron) [525517]
  - [utrace] fix utrace_maybe_reap() vs find_matching_engine() race (Oleg Nesterov) [557338]
  - [x86] Disable Memory hot add on x86 32-bit (Prarit Bhargava) [557131]
  - [netdrv] e1000e: update to the latest upstream (Andy Gospodarek) [462780]
  - [gfs] Use dquot_send_warning() (Steven Whitehouse) [557057]
  - [gfs] Add quota netlink support (Steven Whitehouse) [557057]
  - [netdrv] qlge: update to upstream version v1.00.00.23.00.00-01 (Andy Gospodarek) [553357]
  - [s390x] zfcp: set HW timeout requested by BSG request (Hendrik Brueckner) [556918]
  - [s390x] zfcp: introduce BSG timeout callback (Hendrik Brueckner) [556918]
  - [scsi] scsi_transport_fc: Allow LLD to reset FC BSG timeout (Hendrik Brueckner) [556918]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-9.el6]
changelog:
  - [kvm] fix cleanup_srcu_struct on vm destruction (Marcelo Tosatti) [554762]
  - [x86] core: make LIST_POISON less deadly (Avi Kivity) [554640]
  - [x86] dell-wmi: Add support for new Dell systems (Matthew Garrett) [525548]
  - [fs] xfs: 2.6.33 updates (Eric Sandeen) [554891]
  - [x86] Add kernel pagefault tracepoint for x86 & x86_64. (Larry Woodman) [526032]
  - [pci] PCIe AER: honor ACPI HEST FIRMWARE FIRST mode (Matthew Garrett) [537205]
  - [block] direct-io: cleanup blockdev_direct_IO locking (Eric Sandeen) [556547]
  - [tracing] tracepoint: Add signal tracepoints (Masami Hiramatsu) [526030]
  - [cgroups] fix for "kernel BUG at kernel/cgroup.c:790" (Dave Anderson) [547815]
  - [irq] Expose the irq_desc node as /proc/irq/*/node (George Beshers) [555866]
  - [scsi] qla2xxx - Update support for FC/FCoE HBA/CNA (Rob Evers) [553854]
  - [scsi] bfa update from 2.1.2.0 to 2.1.2.1 (Rob Evers) [475704]
  - [nfs] sunrpc: fix build-time warning (Steve Dickson) [437715]
  - [nfs] sunrpc: on successful gss error pipe write, don't return error (Steve Dickson) [437715]
  - [nfs] SUNRPC: Fix the return value in gss_import_sec_context() (Steve Dickson) [437715]
  - [nfs] SUNRPC: Fix up an error return value in gss_import_sec_context_kerberos() (Steve Dickson) [437715]
  - [nfs] sunrpc: fix peername failed on closed listener (Steve Dickson) [437715]
  - [nfs] nfsd: make sure data is on disk before calling ->fsync (Steve Dickson) [437715]
  - [uv] React 2.6.32.y: isolcpus broken in 2.6.32.y kernel (George Beshers) [548842]
  - [gru] GRU Rollup patch (George Beshers) [546680]
  - [uv] XPC: pass nasid instead of nid to gru_create_message_queue (George Beshers) [546695]
  - [uv] x86: XPC receive message reuse triggers invalid BUG_ON (George Beshers) [546695]
  - [uv] x86: xpc_make_first_contact hang due to not accepting ACTIVE state (George Beshers) [546695]
  - [uv] x86: xpc NULL deref when mesq becomes empty (George Beshers) [546695]
  - [uv] x86: update XPC to handle updated BIOS interface (George Beshers) [546695]
  - [uv] xpc needs to provide an abstraction for uv_gpa (George Beshers) [546695]
  - [uv] x86, irq: Check move_in_progress before freeing the vector mapping (George Beshers) [546668]
  - [uv] x86: Remove move_cleanup_count from irq_cfg (George Beshers) [546668]
  - [uv] x86, irq: Allow 0xff for /proc/irq/[n]/smp_affinity on an 8-cpu system (George Beshers) [546668]
  - [uv] x86, apic: Move SGI UV functionality out of generic IO-APIC code (George Beshers) [546668]
  - [uv] x86 SGI: Fix irq affinity for hub based interrupts (George Beshers) [546668]
  - [uv] x86 RTC: Always enable RTC clocksource (George Beshers) [546668]
  - [uv] x86 RTC: Rename generic_interrupt to x86_platform_ipi (George Beshers) [546668]
  - [uv] x86, mm: Correct the implementation of is_untracked_pat_range() (George Beshers) [548524]
  - [uv] x86: Change is_ISA_range() into an inline function (George Beshers) [548524]
  - [uv] x86, platform: Change is_untracked_pat_range() to bool (George Beshers) [548524]
  - [uv] x86, mm: is_untracked_pat_range() takes a normal semiclosed range (George Beshers) [548524]
  - [uv] x86, mm: Call is_untracked_pat_range() rather than is_ISA_range() (George Beshers) [548524]
  - [uv] x86 SGI: Dont track GRU space in PAT (George Beshers) [548524]
  - [scsi] megaraid: upgrade to 4.17 (Tomas Henzl) [520729]
  - [scsi] mpt2sas: Bump version 03.100.03.00 (Tomas Henzl) [470848]
  - [scsi] mpt2sas: don't update links nor unblock device at no link rate change (Tomas Henzl) [470848]
  - [scsi] mpt2sas: add support for RAID Action System Shutdown Initiated at OS Shutdown (Tomas Henzl) [470848]
  - [scsi] mpt2sas: freeze the sdev IO queue when firmware sends internal device reset (Tomas Henzl) [470848]
  - [scsi] mpt2sas: fix PPC endian bug (Tomas Henzl) [470848]
  - [scsi] mpt2sas: mpt2sas_base_get_sense_buffer_dma returns little endian (Tomas Henzl) [470848]
  - [scsi] mpt2sas: return DID_TRANSPORT_DISRUPTED in nexus loss and SCSI_MLQUEUE_DEVICE_BUSY if device is busy (Tomas Henzl) [470848]
  - [scsi] mpt2sas: retrieve the ioc facts prior to putting the controller into READY state (Tomas Henzl) [470848]
  - [scsi] mpt2sas: add new info messages for IR and Expander events (Tomas Henzl) [470848]
  - [scsi] mpt2sas: limit the max_depth to 32 for SATA devices (Tomas Henzl) [470848]
  - [scsi] mpt2sas: add TimeStamp support when sending ioc_init (Tomas Henzl) [470848]
  - [scsi] mpt2sas: add extended type for diagnostic buffer support (Tomas Henzl) [470848]
  - [scsi] mpt2sas: add command line option diag_buffer_enable (Tomas Henzl) [470848]
  - [scsi] mpt2sas: fix some comments (Tomas Henzl) [470848]
  - [scsi] mpt2sas: stop driver when firmware encounters faults (Tomas Henzl) [470848]
  - [scsi] mpt2sas: adding MPI Headers - revision L (Tomas Henzl) [470848]
  - [scsi] mpt2sas: new device SAS2208 support (Tomas Henzl) [470848]
  - [scsi] mpt2sas: check for valid response info (Tomas Henzl) [470848]
  - [scsi] mpt2sas: fix expander remove fail (Tomas Henzl) [470848]
  - [scsi] mpt2sas: use sas address instead of handle as a lookup (Tomas Henzl) [470848]
  - [sound] ALSA HDA driver update 2009-12-15 (Jaroslav Kysela) [555812]
  - [block] Honor the gfp_mask for alloc_page() in blkdev_issue_discard() (Mike Snitzer) [554719]
  - [scsi] sync fcoe with upstream (Mike Christie) [549945]
  - [net] dccp: modify how dccp creates slab caches to prevent bug halt in SLUB (Neil Horman) [553698]
  - [s390x] tape: Add pr_fmt() macro to all tape source files (Hendrik Brueckner) [554380]
  - [s390] qeth: fix packet loss if TSO is switched on (Hendrik Brueckner) [546632]
  - [s390x] qeth: Support for HiperSockets Network Traffic Analyzer (Hendrik Brueckner) [463706]
  - [serial] 8250: add support for DTR/DSR hardware flow control (Mauro Carvalho Chehab) [523848]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-7.el6]
changelog:
  - [drm] minor printk fixes from upstream (Dave Airlie) [554601]
  - [offb] add support for framebuffer handoff to offb. (Dave Airlie) [554948]
  - [x86] allow fbdev primary video code on 64-bit. (Dave Airlie) [554930]
  - [drm] nouveau: update to 2.6.33 level (Dave Airlie) [549930]
  - [drm] ttm: validation API changes + ERESTART fixes. (Dave Airlie) [554918]
  - [drm] radeon/kms: update to 2.6.33 (without TTM API changes) (Dave Airlie) [554918]
  - [drm] i915: bring Intel DRM/KMS driver up to 2.6.33 (Dave Airlie) [554616]
  - [drm] radeon/intel: realign displayport helper code with upstream. (Dave Airlie) [554601]
  - [drm] kms: rollup KMS core and helper changes to 2.6.33 (Dave Airlie) [554601]
  - [drm] remove address mask param for drm_pci_alloc() (Dave Airlie) [554601]
  - [drm] add new userspace core drm interfaces from 2.6.33 (Dave Airlie) [554601]
  - [drm] unlocked ioctl support for core + macro fixes (Dave Airlie) [554601]
  - [drm] ttm: rollup upstream TTM fixes (Dave Airlie) [554601]
  - [drm] mm: patch drm core memory range manager up to 2.6.33 (Dave Airlie) [554601]
  - [drm] drm/edid: update to 2.6.33 EDID parser code (Dave Airlie) [554601]
  - [net] dccp: fix module load dependency btw dccp_probe and dccp (Neil Horman) [554840]
  - [powerpc] pseries: Correct pseries/dlpar.c build break without CONFIG_SMP (Steve Best) [539318]
  - [powerpc] cpu-allocation/deallocation process (Steve Best) [539318]
  - [powerpc] Add code to online/offline CPUs of a DLPAR node (Steve Best) [539318]
  - [powerpc] CPU DLPAR handling (Steve Best) [539318]
  - [powerpc] sysfs cpu probe/release files (Steve Best) [539318]
  - [powerpc] Kernel handling of Dynamic Logical Partitioning (Steve Best) [539318]
  - [powerpc] pseries: Add hooks to put the CPU into an appropriate offline state (Steve Best) [539318]
  - [powerpc] pseries: Add extended_cede_processor() helper function. (Steve Best) [539318]
  - [gfs] GFS2: Fix glock refcount issues (Steven Whitehouse) [546634]
  - [gfs] GFS2: Ensure uptodate inode size when using O_APPEND (Steven Whitehouse) [547639]
  - [gfs] GFS2: Fix locking bug in rename (Steven Whitehouse) [547640]
  - [gfs] GFS2: Fix lock ordering in gfs2_check_blk_state() (Steven Whitehouse) [554673]
  - [gfs2] only show nobarrier option on /proc/mounts when the option is active (Steven Whitehouse) [546665]
  - [gfs2] add barrier/nobarrier mount options (Steven Whitehouse) [546665]
  - [gfs2] remove division from new statfs code (Steven Whitehouse) [298561]
  - [gfs2] Improve statfs and quota usability (Steven Whitehouse) [298561]
  - [gfs2] Add set_xquota support (Steven Whitehouse) [298561]
  - [gfs2] Add get_xquota support (Steven Whitehouse) [298561]
  - [gfs2] Clean up gfs2_adjust_quota() and do_glock() (Steven Whitehouse) [298561]
  - [gfs2] Remove constant argument from qd_get() (Steven Whitehouse) [298561]
  - [gfs2] Remove constant argument from qdsb_get() (Steven Whitehouse) [298561]
  - [gfs2] Add proper error reporting to quota sync via sysfs (Steven Whitehouse) [298561]
  - [gfs2] Add get_xstate quota function (Steven Whitehouse) [298561]
  - [gfs2] Remove obsolete code in quota.c (Steven Whitehouse) [298561]
  - [gfs2] Hook gfs2_quota_sync into VFS via gfs2_quotactl_ops (Steven Whitehouse) [298561]
  - [gfs2] Alter arguments of gfs2_quota/statfs_sync (Steven Whitehouse) [298561]
  - [gfs2] Fix -o meta mounts for subsequent mounts (Steven Whitehouse) [546664]
  - [gfs] GFS2: Fix gfs2_xattr_acl_chmod() (Steven Whitehouse) [546294]
  - [gfs] VFS: Use GFP_NOFS in posix_acl_from_xattr() (Steven Whitehouse) [546294]
  - [gfs] GFS2: Add cached ACLs support (Steven Whitehouse) [546294]
  - [gfs] GFS2: Clean up ACLs (Steven Whitehouse) [546294]
  - [gfs] GFS2: Use gfs2_set_mode() instead of munge_mode() (Steven Whitehouse) [546294]
  - [gfs] GFS2: Use forget_all_cached_acls() (Steven Whitehouse) [546294]
  - [gfs] VFS: Add forget_all_cached_acls() (Steven Whitehouse) [546294]
  - [gfs] GFS2: Fix up system xattrs (Steven Whitehouse) [546294]
  - [netdrv] igb: Update igb driver to support Barton Hills (Stefan Assmann) [462783]
  - [dm] add feature flags to reduce future kABI impact (Mike Snitzer) [547756]
  - [block] Stop using byte offsets (Mike Snitzer) [554718]
  - [dm] Fix device mapper topology stacking (Mike Snitzer) [554718]
  - [block] bdev_stack_limits wrapper (Mike Snitzer) [554718]
  - [block] Fix discard alignment calculation and printing (Mike Snitzer) [554718]
  - [block] Correct handling of bottom device misaligment (Mike Snitzer) [554718]
  - [block] Fix incorrect alignment offset reporting and update documentation (Mike Snitzer) [554718]
  - [kvm] Fix possible circular locking in kvm_vm_ioctl_assign_device() (Marcelo Tosatti) [554762]
  - [kvm] only clear irq_source_id if irqchip is present (Marcelo Tosatti) [554762]
  - [kvm] fix lock imbalance in kvm_*_irq_source_id() (Marcelo Tosatti) [554762]
  - [kvm] VMX: Report unexpected simultaneous exceptions as internal errors (Marcelo Tosatti) [554762]
  - [kvm] Allow internal errors reported to userspace to carry extra data (Marcelo Tosatti) [554762]
  - [kvm] x86: disable paravirt mmu reporting (Marcelo Tosatti) [554762]
  - [kvm] x86: disallow KVM_{SET, GET}_LAPIC without allocated in-kernel lapic (Marcelo Tosatti) [554762]
  - [kvm] x86: disallow multiple KVM_CREATE_IRQCHIP (Marcelo Tosatti) [554762]
  - [kvm] VMX: Disable unrestricted guest when EPT disabled (Marcelo Tosatti) [554762]
  - [kvm] SVM: remove needless mmap_sem acquision from nested_svm_map (Marcelo Tosatti) [554762]
  - [kvm] SVM: Notify nested hypervisor of lost event injections (Marcelo Tosatti) [554762]
  - [kvm] SVM: Move INTR vmexit out of atomic code (Marcelo Tosatti) [554762]
  - [kvm] remove pre_task_link setting in save_state_to_tss16 (Marcelo Tosatti) [554762]
  - [kvm] x86: Extend KVM_SET_VCPU_EVENTS with selective updates (Marcelo Tosatti) [554500]
  - [kvm] x86: Add KVM_GET/SET_VCPU_EVENTS (Marcelo Tosatti) [554500]
  - [kvm] fix kvmclock-adjust-offset ioctl to match upstream (Marcelo Tosatti) [554524]
  - [kvm] SVM: init_vmcb(): remove redundant save->cr0 initialization (Marcelo Tosatti) [554506]
  - [kvm] SVM: Reset cr0 properly on vcpu reset (Marcelo Tosatti) [554506]
  - [kvm] VMX: Use macros instead of hex value on cr0 initialization (Marcelo Tosatti) [554506]
  - [kvm] avoid taking ioapic mutex for non-ioapic EOIs (Marcelo Tosatti) [550809]
  - [kvm] Bump maximum vcpu count to 64 (Marcelo Tosatti) [550809]
  - [kvm] convert slots_lock to a mutex (Marcelo Tosatti) [550809]
  - [kvm] switch vcpu context to use SRCU (Marcelo Tosatti) [550809]
  - [kvm] convert io_bus to SRCU (Marcelo Tosatti) [550809]
  - [kvm] x86: switch kvm_set_memory_alias to SRCU update (Marcelo Tosatti) [550809]
  - [kvm] use SRCU for dirty log (Marcelo Tosatti) [550809]
  - [kvm] introduce kvm->srcu and convert kvm_set_memory_region to SRCU update (Marcelo Tosatti) [550809]
  - [kvm] use gfn_to_pfn_memslot in kvm_iommu_map_pages (Marcelo Tosatti) [550809]
  - [kvm] introduce gfn_to_pfn_memslot (Marcelo Tosatti) [550809]
  - [kvm] split kvm_arch_set_memory_region into prepare and commit (Marcelo Tosatti) [550809]
  - [kvm] modify alias layout in x86s struct kvm_arch (Marcelo Tosatti) [550809]
  - [kvm] modify memslots layout in struct kvm (Marcelo Tosatti) [550809]
  - [kvm] rcu: Enable synchronize_sched_expedited() fastpath (Marcelo Tosatti) [550809]
  - [kvm] rcu: Add synchronize_srcu_expedited() to the documentation (Marcelo Tosatti) [550809]
  - [kvm] rcu: Add synchronize_srcu_expedited() to the rcutorture test suite (Marcelo Tosatti) [550809]
  - [kvm] Add synchronize_srcu_expedited() (Marcelo Tosatti) [550809]
  - [kvm] Drop kvm->irq_lock lock from irq injection path (Marcelo Tosatti) [550809]
  - [kvm] Move IO APIC to its own lock (Marcelo Tosatti) [550809]
  - [kvm] Convert irq notifiers lists to RCU locking (Marcelo Tosatti) [550809]
  - [kvm] Move irq ack notifier list to arch independent code (Marcelo Tosatti) [550809]
  - [kvm] Move irq routing data structure to rcu locking (Marcelo Tosatti) [550809]
  - [kvm] Maintain back mapping from irqchip/pin to gsi (Marcelo Tosatti) [550809]
  - [kvm] Change irq routing table to use gsi indexed array (Marcelo Tosatti) [550809]
  - [kvm] Move irq sharing information to irqchip level (Marcelo Tosatti) [550809]
  - [kvm] Call pic_clear_isr() on pic reset to reuse logic there (Marcelo Tosatti) [550809]
  - [kvm] Dont pass kvm_run arguments (Marcelo Tosatti) [550809]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-6.el6]
changelog:
  - [modsign] Remove Makefile.modpost qualifying message for module sign failure (David Howells) [543529]
  - [nfs] fix oops in nfs_rename() (Jeff Layton) [554337]
  - [x86] AMD: Fix stale cpuid4_info shared_map data in shared_cpu_map cpumasks (Prarit Bhargava) [546610]
  - [s390] kernel: improve code generated by atomic operations (Hendrik Brueckner) [547411]
  - [s390x] tape: incomplete device removal (Hendrik Brueckner) [547415]
  - [netdrv] be2net: update be2net driver to latest upstream (Ivan Vecera) [515262]
  - [x86] mce: fix confusion between bank attributes and mce attributes (hiro muneda) [476606]
  - [tpm] autoload tpm_tis driver (John Feeney) [531891]
  - [stable] generic_permission: MAY_OPEN is not write access (Serge E. Hallyn) [555084]
  - [stable] rt2x00: Disable powersaving for rt61pci and rt2800pci. (Gertjan van Wingerde) [555084]
  - [stable] lguest: fix bug in setting guest GDT entry (Rusty Russell) [555084]
  - [stable] ext4: Update documentation to correct the inode_readahead_blks option name (Fang Wenqi) [555084]
  - [stable] sched: Sched_rt_periodic_timer vs cpu hotplug (Peter Zijlstra) [555084]
  - [stable] amd64_edac: fix forcing module load/unload (Borislav Petkov) [555084]
  - [stable] amd64_edac: make driver loading more robust (Borislav Petkov) [555084]
  - [stable] amd64_edac: fix driver instance freeing (Borislav Petkov) [555084]
  - [stable] x86, msr: msrs_alloc/free for CONFIG_SMP=n (Borislav Petkov) [555084]
  - [stable] x86, msr: Add support for non-contiguous cpumasks (Borislav Petkov) [555084]
  - [stable] amd64_edac: unify MCGCTL ECC switching (Borislav Petkov) [555084]
  - [stable] cpumask: use modern cpumask style in drivers/edac/amd64_edac.c (Rusty Russell) [555084]
  - [stable] x86, msr: Unify rdmsr_on_cpus/wrmsr_on_cpus (Borislav Petkov) [555084]
  - [stable] ext4: fix sleep inside spinlock issue with quota and dealloc (#14739) (Dmitry Monakhov) [555084]
  - [stable] ext4: Convert to generic reserved quota's space management. (Dmitry Monakhov) [555084]
  - [stable] quota: decouple fs reserved space from quota reservation (Dmitry Monakhov) [555084]
  - [stable] Add unlocked version of inode_add_bytes() function (Dmitry Monakhov) [555084]
  - [stable] udf: Try harder when looking for VAT inode (Jan Kara) [555084]
  - [stable] orinoco: fix GFP_KERNEL in orinoco_set_key with interrupts disabled (Andrey Borzenkov) [555084]
  - [stable] drm: disable all the possible outputs/crtcs before entering KMS mode (Zhao Yakui) [555084]
  - [stable] drm/radeon/kms: fix crtc vblank update for r600 (Dave Airlie) [555084]
  - [stable] sched: Fix balance vs hotplug race (Peter Zijlstra) [555084]
  - [stable] Keys: KEYCTL_SESSION_TO_PARENT needs TIF_NOTIFY_RESUME architecture support (Geert Uytterhoeven) [555084]
  - [stable] b43: avoid PPC fault during resume (Larry Finger) [555084]
  - [stable] hwmon: (sht15) Off-by-one error in array index + incorrect constants (Jonathan Cameron) [555084]
  - [stable] netfilter: fix crashes in bridge netfilter caused by fragment jumps (Patrick McHardy) [555084]
  - [stable] ipv6: reassembly: use seperate reassembly queues for conntrack and local delivery (Patrick McHardy) [555084]
  - [stable] e100: Fix broken cbs accounting due to missing memset. (Roger Oksanen) [555084]
  - [stable] memcg: avoid oom-killing innocent task in case of use_hierarchy (Daisuke Nishimura) [555084]
  - [stable] x86/ptrace: make genregs[32]_get/set more robust (Linus Torvalds) [555084]
  - [stable] V4L/DVB (13596): ov511.c typo: lock => unlock (Dan Carpenter) [555084]
  - [stable] kernel/sysctl.c: fix the incomplete part of sysctl_max_map_count-should-be-non-negative.patch (WANG Cong) [555084]
  - [stable] 'sysctl_max_map_count' should be non-negative (Amerigo Wang) [555084]
  - [stable] NOMMU: Optimise away the {dac_,}mmap_min_addr tests (David Howells) [555084]
  - [stable] mac80211: fix race with suspend and dynamic_ps_disable_work (Luis R. Rodriguez) [555084]
  - [stable] iwlwifi: fix 40MHz operation setting on cards that do not allow it (Reinette Chatre) [555084]
  - [stable] iwlwifi: fix more eeprom endian bugs (Johannes Berg) [555084]
  - [stable] iwlwifi: fix EEPROM/OTP reading endian annotations and a bug (Johannes Berg) [555084]
  - [stable] iwl3945: fix panic in iwl3945 driver (Zhu Yi) [555084]
  - [stable] iwl3945: disable power save (Reinette Chatre) [555084]
  - [stable] ath9k_hw: Fix AR_GPIO_INPUT_EN_VAL_BT_PRIORITY_BB and its shift value in 0x4054 (Vasanthakumar Thiagarajan) [555084]
  - [stable] ath9k_hw: Fix possible OOB array indexing in gen_timer_index[] on 64-bit (Vasanthakumar Thiagarajan) [555084]
  - [stable] ath9k: fix suspend by waking device prior to stop (Sujith) [555084]
  - [stable] ath9k: wake hardware during AMPDU TX actions (Luis R. Rodriguez) [555084]
  - [stable] ath9k: fix missed error codes in the tx status check (Felix Fietkau) [555084]
  - [stable] ath9k: Fix TX queue draining (Sujith) [555084]
  - [stable] ath9k: wake hardware for interface IBSS/AP/Mesh removal (Luis R. Rodriguez) [555084]
  - [stable] ath5k: fix SWI calibration interrupt storm (Bob Copeland) [555084]
  - [stable] cfg80211: fix race between deauth and assoc response (Johannes Berg) [555084]
  - [stable] mac80211: Fix IBSS merge (Sujith) [555084]
  - [stable] mac80211: fix WMM AP settings application (Johannes Berg) [555084]
  - [stable] mac80211: fix propagation of failed hardware reconfigurations (Luis R. Rodriguez) [555084]
  - [stable] iwmc3200wifi: fix array out-of-boundary access (Zhu Yi) [555084]
  - [stable] Libertas: fix buffer overflow in lbs_get_essid() (Daniel Mack) [555084]
  - [stable] KVM: LAPIC: make sure IRR bitmap is scanned after vm load (Marcelo Tosatti) [555084]
  - [stable] KVM: MMU: remove prefault from invlpg handler (Marcelo Tosatti) [555084]
  - [stable] ioat2,3: put channel hardware in known state at init (Dan Williams) [555084]
  - [stable] ioat3: fix p-disabled q-continuation (Dan Williams) [555084]
  - [stable] x86/amd-iommu: Fix initialization failure panic (Joerg Roedel) [555084]
  - [stable] dma-debug: Fix bug causing build warning (Ingo Molnar) [555084]
  - [stable] dma-debug: Do not add notifier when dma debugging is disabled. (Shaun Ruffell) [555084]
  - [stable] dma: at_hdmac: correct incompatible type for argument 1 of 'spin_lock_bh' (Nicolas Ferre) [555084]
  - [stable] md: Fix unfortunate interaction with evms (NeilBrown) [555084]
  - [stable] x86: SGI UV: Fix writes to led registers on remote uv hubs (Mike Travis) [555084]
  - [stable] drivers/net/usb: Correct code taking the size of a pointer (Julia Lawall) [555084]
  - [stable] USB: fix bugs in usb_(de)authorize_device (Alan Stern) [555084]
  - [stable] USB: rename usb_configure_device (Alan Stern) [555084]
  - [stable] Bluetooth: Prevent ill-timed autosuspend in USB driver (Oliver Neukum) [555084]
  - [stable] USB: musb: gadget_ep0: avoid SetupEnd interrupt (Sergei Shtylyov) [555084]
  - [stable] USB: Fix a bug on appledisplay.c regarding signedness (pancho horrillo) [555084]
  - [stable] USB: option: support hi speed for modem Haier CE100 (Donny Kurnia) [555084]
  - [stable] USB: emi62: fix crash when trying to load EMI 6|2 firmware (Clemens Ladisch) [555084]
  - [stable] drm/radeon: fix build on 64-bit with some compilers. (Dave Airlie) [555084]
  - [stable] ASoC: Do not write to invalid registers on the wm9712. (Eric Millbrandt) [555084]
  - [stable] powerpc: Handle VSX alignment faults correctly in little-endian mode (Neil Campbell) [555084]
  - [stable] ACPI: Use the return result of ACPI lid notifier chain correctly (Zhao Yakui) [555084]
  - [stable] ACPI: EC: Fix MSI DMI detection (Alexey Starikovskiy) [555084]
  - [stable] acerhdf: limit modalias matching to supported (Stefan Bader) [555084]
  - [stable] ALSA: hda - Fix missing capsrc_nids for ALC88x (Takashi Iwai) [555084]
  - [stable] sound: sgio2audio/pdaudiocf/usb-audio: initialize PCM buffer (Clemens Ladisch) [555084]
  - [stable] ASoC: wm8974: fix a wrong bit definition (Guennadi Liakhovetski) [555084]
  - [stable] pata_cmd64x: fix overclocking of UDMA0-2 modes (Bartlomiej Zolnierkiewicz) [555084]
  - [stable] pata_hpt3x2n: fix clock turnaround (Sergei Shtylyov) [555084]
  - [stable] clockevents: Prevent clockevent_devices list corruption on cpu hotplug (Thomas Gleixner) [555084]
  - [stable] sched: Select_task_rq_fair() must honour SD_LOAD_BALANCE (Peter Zijlstra) [555084]
  - [stable] x86, cpuid: Add "volatile" to asm in native_cpuid() (Suresh Siddha) [555084]
  - [stable] sched: Fix task_hot() test order (Peter Zijlstra) [555084]
  - [stable] SCSI: fc class: fix fc_transport_init error handling (Mike Christie) [555084]
  - [stable] SCSI: st: fix mdata->page_order handling (FUJITA Tomonori) [555084]
  - [stable] SCSI: qla2xxx: dpc thread can execute before scsi host has been added (Michael Reed) [555084]
  - [stable] SCSI: ipr: fix EEH recovery (Kleber Sacilotto de Souza) [555084]
  - [stable] implement early_io{re,un}map for ia64 (Luck, Tony) [555084]
  - [stable] perf_event: Fix incorrect range check on cpu number (Paul Mackerras) [555084]
  - [stable] netfilter: xtables: document minimal required version (Jan Engelhardt) [555084]
  - [stable] intel-iommu: ignore page table validation in pass through mode (Chris Wright) [555084]
  - [stable] jffs2: Fix long-standing bug with symlink garbage collection. (David Woodhouse) [555084]
  - [stable] ipvs: zero usvc and udest (Simon Horman) [555084]
  - [stable] mm: sigbus instead of abusing oom (Hugh Dickins) [555084]
  - [stable] drm/i915: Fix LVDS stability issue on Ironlake (Zhenyu Wang) [555084]
  - [stable] drm/i915: PineView only has LVDS and CRT ports (Zhenyu Wang) [555084]
  - [stable] drm/i915: Avoid NULL dereference with component_only tv_modes (Chris Wilson) [555084]
  - [stable] x86: Under BIOS control, restore AP's APIC_LVTTHMR to the BSP value (Yong Wang) [555084]
  - [stable] bcm63xx_enet: fix compilation failure after get_stats_count removal (Florian Fainelli) [555084]
  - [stable] V4L/DVB (13116): gspca - ov519: Webcam 041e:4067 added. (Rafal Milecki) [555084]
  - [stable] ext3: Fix data / filesystem corruption when write fails to copy data (Jan Kara) [555084]
  - [stable] net: Fix userspace RTM_NEWLINK notifications. (Eric W. Biederman) [555084]
  - [stable] ACPI: Use the ARB_DISABLE for the CPU which model id is less than 0x0f. (Zhao Yakui) [555084]
  - [stable] vmalloc: conditionalize build of pcpu_get_vm_areas() (Tejun Heo) [555084]
  - [stable] asus-laptop: change light sens default values. (Corentin Chary) [555084]
  - [stable] acerhdf: add new BIOS versions (Peter Feuerer) [555084]
  - [stable] matroxfb: fix problems with display stability (Alan Cox) [555084]
  - [stable] ipw2100: fix rebooting hang with driver loaded (Zhu Yi) [555084]
  - [stable] thinkpad-acpi: preserve rfkill state across suspend/resume (Henrique de Moraes Holschuh) [555084]
  - [stable] thinkpad-acpi: fix default brightness_mode for R50e/R51 (Henrique de Moraes Holschuh) [555084]
  - [stable] memcg: fix memory.memsw.usage_in_bytes for root cgroup (Kirill A. Shutemov) [555084]
  - [stable] mac80211: Fix dynamic power save for scanning. (Vivek Natarajan) [555084]
  - [stable] ath9k: fix tx status reporting (Felix Fietkau) [555084]
  - [stable] tracing: Fix event format export (Johannes Berg) [555084]
  - [stable] b43legacy: avoid PPC fault during resume (Larry Finger) [555084]
  - [stable] sparc: Set UTS_MACHINE correctly. (David S. Miller) [555084]
  - [stable] sparc64: Fix stack debugging IRQ stack regression. (David S. Miller) [555084]
  - [stable] sparc64: Fix overly strict range type matching for PCI devices. (David S. Miller) [555084]
  - [stable] sparc64: Don't specify IRQF_SHARED for LDC interrupts. (David S. Miller) [555084]
  - [stable] b44 WOL setup: one-bit-off stack corruption kernel panic fix (Stanislav Brabec) [555084]
  - [stable] ip_fragment: also adjust skb->truesize for packets not owned by a socket (Patrick McHardy) [555084]
  - [stable] tcp: Stalling connections: Fix timeout calculation routine (Damian Lukowski) [555084]
  - [stable] slc90e66: fix UDMA handling (Bartlomiej Zolnierkiewicz) [555084]
  - [stable] xen: try harder to balloon up under memory pressure. (Ian Campbell) [555084]
  - [stable] Xen balloon: fix totalram_pages counting. (Gianluca Guida) [555084]
  - [stable] xen: explicitly create/destroy stop_machine workqueues outside suspend/resume region. (Ian Campbell) [555084]
  - [stable] xen: use iret for return from 64b kernel to 32b usermode (Jeremy Fitzhardinge) [555084]
  - [stable] xen: don't leak IRQs over suspend/resume. (Ian Campbell) [555084]
  - [stable] xen: improve error handling in do_suspend. (Ian Campbell) [555084]
  - [stable] xen: call clock resume notifier on all CPUs (Ian Campbell) [555084]
  - [stable] xen: register runstate info for boot CPU early (Jeremy Fitzhardinge) [555084]
  - [stable] xen: don't call dpm_resume_noirq() with interrupts disabled. (Jeremy Fitzhardinge) [555084]
  - [stable] xen: register runstate on secondary CPUs (Ian Campbell) [555084]
  - [stable] xen: register timer interrupt with IRQF_TIMER (Ian Campbell) [555084]
  - [stable] xen: correctly restore pfn_to_mfn_list_list after resume (Ian Campbell) [555084]
  - [stable] xen: restore runstate_info even if !have_vcpu_info_placement (Jeremy Fitzhardinge) [555084]
  - [stable] xen: re-register runstate area earlier on resume. (Ian Campbell) [555084]
  - [stable] xen/xenbus: make DEVICE_ATTR()s static (Jeremy Fitzhardinge) [555084]
  - [stable] drm/i915: Add the missing clonemask for display port on Ironlake (Zhao Yakui) [555084]
  - [stable] drm/i915: Set the error code after failing to insert new offset into mm ht. (Chris Wilson) [555084]
  - [stable] drm/ttm: Fix build failure due to missing struct page (Martin Michlmayr) [555084]
  - [stable] drm/radeon/kms: rs6xx/rs740: clamp vram to aperture size (Alex Deucher) [555084]
  - [stable] drm/radeon/kms: fix vram setup on rs600 (Alex Deucher) [555084]
  - [stable] drm/radeon/kms: fix legacy crtc2 dpms (Alex Deucher) [555084]
  - [stable] drm/radeon/kms: handle vblanks properly with dpms on (Alex Deucher) [555084]
  - [stable] drm/radeon/kms: Add quirk for HIS X1300 board (Alex Deucher) [555084]
  - [stable] powerpc: Fix usage of 64-bit instruction in 32-bit altivec code (Benjamin Herrenschmidt) [555084]
  - [stable] powerpc/therm_adt746x: Record pwm invert bit at module load time] (Darrick J. Wong) [555084]
  - [stable] powerpc/windfarm: Add detection for second cpu pump (Bolko Maass) [555084]
  - [stable] mm: hugetlb: fix hugepage memory leak in walk_page_range() (Naoya Horiguchi) [555084]
  - [stable] mm: hugetlb: fix hugepage memory leak in mincore() (Naoya Horiguchi) [555084]
  - [stable] x86: Fix bogus warning in apic_noop.apic_write() (Thomas Gleixner) [555084]
  - [stable] rtl8187: Fix wrong rfkill switch mask for some models (Larry Finger) [555084]
  - [stable] wireless: correctly report signal value for IEEE80211_HW_SIGNAL_UNSPEC (John W. Linville) [555084]
  - [stable] mac80211: fix scan abort sanity checks (Johannes Berg) [555084]
  - [stable] mac80211: Revert 'Use correct sign for mesh active path refresh' (Javier Cardona) [555084]
  - [stable] mac80211: Fixed bug in mesh portal paths (Javier Cardona) [555084]
  - [stable] mac80211: Fix bug in computing crc over dynamic IEs in beacon (Vasanthakumar Thiagarajan) [555084]
  - [stable] Serial: Do not read IIR in serial8250_start_tx when UART_BUG_TXEN (Ian Jackson) [555084]
  - [stable] Driver core: fix race in dev_driver_string (Alan Stern) [555084]
  - [stable] debugfs: fix create mutex racy fops and private data (Mathieu Desnoyers) [555084]
  - [stable] devpts_get_tty() should validate inode (Sukadev Bhattiprolu) [555084]
  - [stable] futex: Take mmap_sem for get_user_pages in fault_in_user_writeable (Andi Kleen) [555084]
  - [stable] md/bitmap: protect against bitmap removal while being updated. (NeilBrown) [555084]
  - [stable] hfs: fix a potential buffer overflow (Amerigo Wang) [555084]
  - [stable] pxa/em-x270: fix usb hub power up/reset sequence (Igor Grinberg) [555084]
  - [stable] USB: Close usb_find_interface race v3 (Russ Dill) [555084]
  - [stable] USB: usb-storage: add BAD_SENSE flag (Alan Stern) [555084]
  - [stable] USB: usbtmc: repeat usb_bulk_msg until whole message is transfered (Andre Herms) [555084]
  - [stable] USB: option.c: add support for D-Link DWM-162-U5 (Zhang Le) [555084]
  - [stable] USB: musb_gadget_ep0: fix unhandled endpoint 0 IRQs, again (Sergei Shtylyov) [555084]
  - [stable] USB: xhci: Add correct email and files to MAINTAINERS entry. (Sarah Sharp) [555084]
  - [stable] jbd2: don't wipe the journal on a failed journal checksum (Theodore Ts'o) [555084]
  - [stable] UBI: flush wl before clearing update marker (Sebastian Andrzej Siewior) [555084]
  - [stable] bsdacct: fix uid/gid misreporting (Alexey Dobriyan) [555084]
  - [stable] V4L/DVB: Fix test in copy_reg_bits() (Roel Kluin) [555084]
  - [stable] pata_hpt{37x|3x2n}: fix timing register masks (take 2) (Sergei Shtylyov) [555084]
  - [stable] x86: Fix typo in Intel CPU cache size descriptor (Dave Jones) [555084]
  - [stable] x86: Add new Intel CPU cache size descriptors (Dave Jones) [555084]
  - [stable] x86: Fix duplicated UV BAU interrupt vector (Cliff Wickman) [555084]
  - [stable] x86/mce: Set up timer unconditionally (Jan Beulich) [555084]
  - [stable] x86, mce: don't restart timer if disabled (Hidetoshi Seto) [555084]
  - [stable] x86: Use -maccumulate-outgoing-args for sane mcount prologues (Thomas Gleixner) [555084]
  - [stable] x86: Prevent GCC 4.4.x (pentium-mmx et al) function prologue wreckage (Thomas Gleixner) [555084]
  - [stable] KVM: x86: include pvclock MSRs in msrs_to_save (Glauber Costa) [555084]
  - [stable] KVM: fix irq_source_id size verification (Marcelo Tosatti) [555084]
  - [stable] KVM: s390: Make psw available on all exits, not just a subset (Carsten Otte) [555084]
  - [stable] KVM: s390: Fix prefix register checking in arch/s390/kvm/sigp.c (Carsten Otte) [555084]
  - [stable] KVM: x86 emulator: limit instructions to 15 bytes (Avi Kivity) [555084]
  - [stable] ALSA: hrtimer - Fix lock-up (Takashi Iwai) [555084]
  - [stable] hrtimer: Fix /proc/timer_list regression (Feng Tang) [555084]
  - [stable] ath5k: enable EEPROM checksum check (Luis R. Rodriguez) [555084]
  - [stable] ath5k: allow setting txpower to 0 (Bob Copeland) [555084]
  - [stable] ssb: Fix range check in sprom write (Michael Buesch) [555084]
  - [stable] x86, apic: Enable lapic nmi watchdog on AMD Family 11h (Mikael Pettersson) [555084]
  - [stable] x86: ASUS P4S800 reboot=bios quirk (Leann Ogasawara) [555084]
  - [stable] x86: GART: pci-gart_64.c: Use correct length in strncmp (Joe Perches) [555084]
  - [stable] x86: Fix iommu=nodac parameter handling (Tejun Heo) [555084]
  - [stable] x86, Calgary IOMMU quirk: Find nearest matching Calgary while walking up the PCI tree (Darrick J. Wong) [555084]
  - [stable] x86/amd-iommu: un__init iommu_setup_msi (Joerg Roedel) [555084]
  - [stable] x86/amd-iommu: attach devices to pre-allocated domains early (Joerg Roedel) [555084]
  - [stable] sched: Fix and clean up rate-limit newidle code (Mike Galbraith) [555084]
  - [stable] sched: Rate-limit newidle (Mike Galbraith) [555084]
  - [stable] sched: Fix affinity logic in select_task_rq_fair() (Mike Galbraith) [555084]
  - [stable] sched: Check for an idle shared cache in select_task_rq_fair() (Mike Galbraith) [555084]
  - [stable] PM / Runtime: Fix lockdep warning in __pm_runtime_set_status() (Rafael J. Wysocki) [555084]
  - [stable] perf_event: Initialize data.period in perf_swevent_hrtimer() (Xiao Guangrong) [555084]
  - [stable] perf_event: Fix invalid type in ioctl definition (Arjan van de Ven) [555084]
  - [stable] rcu: Remove inline from forward-referenced functions (Paul E. McKenney) [555084]
  - [stable] rcu: Fix note_new_gpnum() uses of ->gpnum (Paul E. McKenney) [555084]
  - [stable] rcu: Fix synchronization for rcu_process_gp_end() uses of ->completed counter (Paul E. McKenney) [555084]
  - [stable] rcu: Prepare for synchronization fixes: clean up for non-NO_HZ handling of ->completed counter (Paul E. McKenney) [555084]
  - [stable] firewire: ohci: handle receive packets with a data length of zero (Jay Fenlason) [555084]
  - [stable] USB: option: add pid for ZTE (zhao.ming9@zte.com.cn) [555084]
  - [stable] USB: usb-storage: fix bug in fill_inquiry (Alan Stern) [555084]
  - [stable] ext4: Fix potential fiemap deadlock (mmap_sem vs. i_data_sem) (Theodore Ts'o) [555084]
  - [stable] ext4: Wait for proper transaction commit on fsync (Jan Kara) [555084]
  - [stable] ext4: fix incorrect block reservation on quota transfer. (Dmitry Monakhov) [555084]
  - [stable] ext4: quota macros cleanup (Dmitry Monakhov) [555084]
  - [stable] ext4: ext4_get_reserved_space() must return bytes instead of blocks (Dmitry Monakhov) [555084]
  - [stable] ext4: remove blocks from inode prealloc list on failure (Curt Wohlgemuth) [555084]
  - [stable] ext4: Avoid data / filesystem corruption when write fails to copy data (Jan Kara) [555084]
  - [stable] ext4: Return the PTR_ERR of the correct pointer in setup_new_group_blocks() (Roel Kluin) [555084]
  - [stable] jbd2: Add ENOMEM checking in and for jbd2_journal_write_metadata_buffer() (Theodore Ts'o) [555084]
  - [stable] ext4: move_extent_per_page() cleanup (Akira Fujita) [555084]
  - [stable] ext4: initialize moved_len before calling ext4_move_extents() (Kazuya Mio) [555084]
  - [stable] ext4: Fix double-free of blocks with EXT4_IOC_MOVE_EXT (Akira Fujita) [555084]
  - [stable] ext4: make "norecovery" an alias for "noload" (Eric Sandeen) [555084]
  - [stable] ext4: fix error handling in ext4_ind_get_blocks() (Jan Kara) [555084]
  - [stable] ext4: avoid issuing unnecessary barriers (Theodore Ts'o) [555084]
  - [stable] ext4: fix block validity checks so they work correctly with meta_bg (Theodore Ts'o) [555084]
  - [stable] ext4: fix uninit block bitmap initialization when s_meta_first_bg is non-zero (Theodore Ts'o) [555084]
  - [stable] ext4: don't update the superblock in ext4_statfs() (Theodore Ts'o) [555084]
  - [stable] ext4: journal all modifications in ext4_xattr_set_handle (Eric Sandeen) [555084]
  - [stable] ext4: fix i_flags access in ext4_da_writepages_trans_blocks() (Julia Lawall) [555084]
  - [stable] ext4: make sure directory and symlink blocks are revoked (Theodore Ts'o) [555084]
  - [stable] ext4: plug a buffer_head leak in an error path of ext4_iget() (Theodore Ts'o) [555084]
  - [stable] ext4: fix possible recursive locking warning in EXT4_IOC_MOVE_EXT (Akira Fujita) [555084]
  - [stable] ext4: fix lock order problem in ext4_move_extents() (Akira Fujita) [555084]
  - [stable] ext4: fix the returned block count if EXT4_IOC_MOVE_EXT fails (Akira Fujita) [555084]
  - [stable] ext4: avoid divide by zero when trying to mount a corrupted file system (Theodore Ts'o) [555084]
  - [stable] ext4: fix potential buffer head leak when add_dirent_to_buf() returns ENOSPC (Theodore Ts'o) [555084]
  - [stable] SCSI: megaraid_sas: fix 64 bit sense pointer truncation (Yang, Bo) [555084]
  - [stable] SCSI: osd_protocol.h: Add missing #include (Martin Michlmayr) [555084]
  - [stable] signal: Fix alternate signal stack check (Sebastian Andrzej Siewior) [555084]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-5.el6]
changelog:
  - [scsi] cciss: fix spinlock use (Tomas Henzl) [552910]
  - [scsi] cciss,hpsa: reassign controllers (Tomas Henzl) [552192]
  - [modsign] Don't attempt to sign a module if there are no key files (David Howells) [543529]
  - [x86] Compile mce-inject module (Prarit Bhargava) [553323]
  - [nfs] fix insecure export option (Steve Dickson) [437715]
  - [nfs] NFS update to 2.6.33 part 3 (Steve Dickson) [437715]
  - [nfs] NFS update to 2.6.33 part 2 (Steve Dickson) [437715]
  - [nfs] NFS update to 2.6.33 part 1 (Steve Dickson) [437715]
  - [s390] cio: deactivated devices can cause use after free panic (Hendrik Brueckner) [548490]
  - [s390] cio: memory leaks when checking unusable devices (Hendrik Brueckner) [548490]
  - [s390] cio: DASD steal lock task hangs (Hendrik Brueckner) [548490]
  - [s390] cio: DASD cannot be set online (Hendrik Brueckner) [548490]
  - [s390] cio: erratic DASD I/O behavior (Hendrik Brueckner) [548490]
  - [s390] cio: not operational devices cannot be deactivated (Hendrik Brueckner) [548490]
  - [s390] cio: initialization of I/O devices fails (Hendrik Brueckner) [548490]
  - [s390] cio: kernel panic after unexpected interrupt (Hendrik Brueckner) [548490]
  - [s390] cio: incorrect device state after device recognition and recovery (Hendrik Brueckner) [548490]
  - [s390] cio: setting a device online or offline fails for unknown reasons (Hendrik Brueckner) [548490]
  - [s390] cio: device recovery fails after concurrent hardware changes (Hendrik Brueckner) [548490]
  - [s390] cio: device recovery stalls after multiple hardware events (Hendrik Brueckner) [548490]
  - [s390] cio: double free under memory pressure (Hendrik Brueckner) [548490]
  - [sunrpc] Don't display zero scope IDs (Jeff Layton) [463530]
  - [sunrpc] Deprecate support for site-local addresses (Jeff Layton) [463530]
  - [input] dell-laptop: Update rfkill state on switch change (Matthew Garrett) [547892]
  - [input] Add support for adding i8042 filters (Matthew Garrett) [547892]
  - [vfs] force reval of target when following LAST_BIND symlinks (Jeff Layton) [548153]
  - [scsi] scsi_dh_rdac: add two IBM devices to rdac_dev_list (Rob Evers) [528576]
  - [fs] ext4: flush delalloc blocks when space is low (Eric Sandeen) [526758]
  - [fs] fs-writeback: Add helper function to start writeback if idle (Eric Sandeen) [526758]
  - [fat] make discard a mount option (Jeff Moyer) [552355]
  - [ext4] make trim/discard optional (and off by default) (Jeff Moyer) [552355]
  - [fusion] bump version to 3.04.13 (Tomas Henzl) [548408]
  - [fusion] fix for incorrect data underrun (Tomas Henzl) [548408]
  - [fusion] remove unnecessary printk (Tomas Henzl) [548408]
  - [cifs] NULL out tcon, pSesInfo, and srvTcp pointers when chasing DFS referrals (Jeff Layton) [545984]
  - [fs] ext4: wait for log to commit when unmounting (Josef Bacik) [524267]
  - [mm] hwpoison: backport the latest patches from linux-2.6.33 (Dean Nelson) [547705]
  - [netdrv] bnx2i: update to 2.1.0 (Stanislaw Gruszka) [463268]
  - [netdrv] cnic: fixes for RHEL6 (Stanislaw Gruszka) [463268]
  - [gfs2] Fix potential race in glock code (Steven Whitehouse) [546279]
  - [scsi] make driver PCI legacy I/O port free (Tomas Henzl) [549118]
  - [scsi] eliminate double free (Tomas Henzl) [549351]
  - [dlm] always use GFP_NOFS (David Teigland) [545904]
  - [block] Fix topology stacking for data and discard alignment (Mike Snitzer) [549766]
  - [scsi] scsi_dh: Make alua hardware handler s activate async (Rob Evers) [537257]
  - [scsi] scsi_dh: Make hp hardware handler s activate async (Rob Evers) [537257]
  - [scsi] scsi_dh: Make rdac hardware handler s activate async (Rob Evers) [537257]
  - [scsi] scsi_dh: Change the scsidh_activate interface to be asynchronous (Rob Evers) [537257]
  - [netdrv] update tg3 to version 3.105 (John Feeney) [465194]
  - [netdrv] bnx2x: update to 1.52.1-5 (Stanislaw Gruszka) [464427]
  - [netdrv] ixgbe: add support for 82599-KR and update to latest upstream (Andy Gospodarek) [462781]
  - [block] cfq-iosched: Remove prio_change logic for workload selection (Jeff Moyer) [548796]
  - [block] cfq-iosched: Get rid of nr_groups (Jeff Moyer) [548796]
  - [block] cfq-iosched: Remove the check for same cfq group from allow_merge (Jeff Moyer) [548796]
  - [block] cfq: set workload as expired if it doesn't have any slice left (Jeff Moyer) [548796]
  - [block] Fix a CFQ crash in "for-2.6.33" branch of block tree (Jeff Moyer) [548796]
  - [block] cfq: Remove wait_request flag when idle time is being deleted (Jeff Moyer) [548796]
  - [block] cfq-iosched: commenting non-obvious initialization (Jeff Moyer) [548796]
  - [block] cfq-iosched: Take care of corner cases of group losing share due to deletion (Jeff Moyer) [548796]
  - [block] cfq-iosched: Get rid of cfqq wait_busy_done flag (Jeff Moyer) [548796]
  - [block] cfq: Optimization for close cooperating queue searching (Jeff Moyer) [548796]
  - [block] cfq-iosched: reduce write depth only if sync was delayed (Jeff Moyer) [548796]
  - [x86] ucode-amd: Load ucode-patches once and not separately of each CPU (George Beshers) [548840]
  - [x86] Remove enabling x2apic message for every CPU (George Beshers) [548840]
  - [x86] Limit number of per cpu TSC sync messages (George Beshers) [548840]
  - [sched] Limit the number of scheduler debug messages (George Beshers) [548840]
  - [init] Limit the number of per cpu calibration bootup messages (George Beshers) [548840]
  - [x86] Limit the number of processor bootup messages (George Beshers) [548840]
  - [x86] cpu: mv display_cacheinfo -> cpu_detect_cache_sizes (George Beshers) [548840]
  - [x86] Remove CPU cache size output for non-Intel too (George Beshers) [548840]
  - [x86] Remove the CPU cache size printk's (George Beshers) [548840]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-4.el6]
changelog:
  - [kvm] VMX: Use shared msr infrastructure (Avi Kivity) [547777]
  - [kvm] x86 shared msr infrastructure (Avi Kivity) [547777]
  - [kvm] VMX: Move MSR_KERNEL_GS_BASE out of the vmx autoload msr area (Avi Kivity) [547777]
  - [kvm] core, x86: Add user return notifiers (Avi Kivity) [547777]
  - [quota] ext4: Support for 64-bit quota format (Jerome Marchand) [546311]
  - [quota] ext3: Support for vfsv1 quota format (Jerome Marchand) [546311]
  - [quota] Implement quota format with 64-bit space and inode limits (Jerome Marchand) [546311]
  - [quota] Move definition of QFMT_OCFS2 to linux/quota.h (Jerome Marchand) [546311]
  - [scsi] cciss: remove pci-ids (Tomas Henzl) [464649]
  - [scsi] hpsa: new driver (Tomas Henzl) [464649]
  - [mm] Add file page writeback mm tracepoints. (Larry Woodman) [523093]
  - [mm] Add page reclaim mm tracepoints. (Larry Woodman) [523093]
  - [mm] Add file page mm tracepoints. (Larry Woodman) [523093]
  - [mm] Add anonynmous page mm tracepoints. (Larry Woodman) [523093]
  - [mm] Add mm tracepoint definitions to kmem.h (Larry Woodman) [523093]
  - [ksm] fix ksm.h breakage of nommu build (Izik Eidus) [548586]
  - [ksm] remove unswappable max_kernel_pages (Izik Eidus) [548586]
  - [ksm] memory hotremove migration only (Izik Eidus) [548586]
  - [ksm] rmap_walk to remove_migation_ptes (Izik Eidus) [548586]
  - [ksm] mem cgroup charge swapin copy (Izik Eidus) [548586]
  - [ksm] share anon page without allocating (Izik Eidus) [548586]
  - [ksm] take keyhole reference to page (Izik Eidus) [548586]
  - [ksm] hold anon_vma in rmap_item (Izik Eidus) [548586]
  - [ksm] let shared pages be swappable (Izik Eidus) [548586]
  - [ksm] fix mlockfreed to munlocked (Izik Eidus) [548586]
  - [ksm] stable_node point to page and back (Izik Eidus) [548586]
  - [ksm] separate stable_node (Izik Eidus) [548586]
  - [ksm] singly-linked rmap_list (Izik Eidus) [548586]
  - [ksm] cleanup some function arguments (Izik Eidus) [548586]
  - [ksm] remove redundancies when merging page (Izik Eidus) [548586]
  - [ksm] three remove_rmap_item_from_tree cleanups (Izik Eidus) [548586]
  - [mm] stop ptlock enlarging struct page (Izik Eidus) [548586]
  - [mm] vmscan: do not evict inactive pages when skipping an active list scan (Rik van Riel) [548457]
  - [mm] vmscan: make consistent of reclaim bale out between do_try_to_free_page and shrink_zone (Rik van Riel) [548457]
  - [mm] vmscan: kill sc.swap_cluster_max (Rik van Riel) [548457]
  - [mm] vmscan: zone_reclaim() dont use insane swap_cluster_max (Rik van Riel) [548457]
  - [mm] vmscan: kill hibernation specific reclaim logic and unify it (Rik van Riel) [548457]
  - [mm] vmscan: separate sc.swap_cluster_max and sc.nr_max_reclaim (Rik van Riel) [548457]
  - [mm] vmscan: stop kswapd waiting on congestion when the min watermark is not being met (Rik van Riel) [548457]
  - [mm] vmscan: have kswapd sleep for a short interval and double check it should be asleep (Rik van Riel) [548457]
  - [mm] pass address down to rmap ones (Rik van Riel) [548457]
  - [mm] CONFIG_MMU for PG_mlocked (Rik van Riel) [548457]
  - [mm] mlocking in try_to_unmap_one (Rik van Riel) [548457]
  - [mm] define PAGE_MAPPING_FLAGS (Rik van Riel) [548457]
  - [mm] swap_info: note SWAP_MAP_SHMEM (Rik van Riel) [548457]
  - [mm] swap_info: swap count continuations (Rik van Riel) [548457]
  - [mm] swap_info: swap_map of chars not shorts (Rik van Riel) [548457]
  - [mm] swap_info: SWAP_HAS_CACHE cleanups (Rik van Riel) [548457]
  - [mm] swap_info: miscellaneous minor cleanups (Rik van Riel) [548457]
  - [mm] swap_info: include first_swap_extent (Rik van Riel) [548457]
  - [mm] swap_info: change to array of pointers (Rik van Riel) [548457]
  - [mm] swap_info: private to swapfile.c (Rik van Riel) [548457]
  - [mm] move inc_zone_page_state(NR_ISOLATED) to just isolated place (Rik van Riel) [548457]
  - [xen] support MAXSMP (Andrew Jones) [547129]
  - [xen] wait up to 5 minutes for device connetion and fix fallout (Paolo Bonzini) [523630]
  - [uv] x86 SGI: Map low MMR ranges (George Beshers) [548181]
  - [uv] gru: function to generate chipset IPI values (George Beshers) [548181]
  - [uv] x86 RTC: Clean up error handling (George Beshers) [548181]
  - [uv] x86: RTC: Add clocksource only boot option (George Beshers) [548181]
  - [uv] x86: RTC: Fix early expiry handling (George Beshers) [548181]
  - [uv] x86: introduce uv_gpa_is_mmr (George Beshers) [548181]
  - [uv] x86: function to translate from gpa -> socket_paddr (George Beshers) [548181]
  - [uv] x86: SGI UV: Fix BAU initialization (George Beshers) [548181]
  - [s390] zfcp: Block SCSI EH thread for rport state BLOCKED (Hendrik Brueckner) [547413]
  - [scsi] scsi_transport_fc: Introduce helper function for blocking scsi_eh (Hendrik Brueckner) [547413]
  - [s390] zfcp: improve FSF error reporting (Hendrik Brueckner) [547386]
  - [s390] zfcp: fix ELS ADISC handling to prevent QDIO errors (Hendrik Brueckner) [547385]
  - [s390] zfcp: Assign scheduled work to driver queue (Hendrik Brueckner) [547377]
  - [s390] zfcp: Don't fail SCSI commands when transitioning to blocked fc_rport (Hendrik Brueckner) [547379]
  - [s390] ctcm: suspend has to wait for outstanding I/O (Hendrik Brueckner) [546633]
  - [s390] cmm: free pages on hibernate (Hendrik Brueckner) [546407]
  - [s390] iucv: add work_queue cleanup for suspend (Hendrik Brueckner) [546319]
  - [s390] dasd: let device initialization wait for LCU setup (Hendrik Brueckner) [547735]
  - [s390] dasd: remove strings from s390dbf (Hendrik Brueckner) [547735]
  - [s390] dasd: enable prefix independent of pav support (Hendrik Brueckner) [547735]
  - [sound] ALSA HDA driver update 2009-12-15 (Jaroslav Kysela) [525391]
  - [utrace] utrace core (Roland McGrath) [549491]
  - [utrace] implement utrace-ptrace (Roland McGrath) [549491]
  - [ptrace] reorder the code in kernel/ptrace.c (Roland McGrath) [549491]
  - [ptrace] export __ptrace_detach() and do_notify_parent_cldstop() (Roland McGrath) [549491]
  - [ptrace_signal] check PT_PTRACED before reporting a signal (Roland McGrath) [549491]
  - [tracehooks] check PT_PTRACED before reporting the single-step (Roland McGrath) [549491]
  - [tracehooks] kill some PT_PTRACED checks (Roland McGrath) [549491]
  - [signals] check ->group_stop_count after tracehook_get_signal() (Roland McGrath) [549491]
  - [ptrace] x86: change syscall_trace_leave() to rely on tracehook when stepping (Roland McGrath) [549491]
  - [ptrace] x86: implement user_single_step_siginfo() (Roland McGrath) [549491]
  - [ptrace] change tracehook_report_syscall_exit() to handle stepping (Roland McGrath) [549491]
  - [ptrace] powerpc: implement user_single_step_siginfo() (Roland McGrath) [549491]
  - [ptrace] introduce user_single_step_siginfo() helper (Roland McGrath) [549491]
  - [ptrace] copy_process() should disable stepping (Roland McGrath) [549491]
  - [ptrace] cleanup ptrace_init_task()->ptrace_link() path (Roland McGrath) [549491]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-3.el6]
changelog:
  - [modsign] Don't check e_entry in ELF header (David Howells) [548027]
  - [pci] pciehp: Provide an option to disable native PCIe hotplug (Matthew Garrett) [517050]
  - [s390] OSA QDIO data connection isolation (Hendrik Brueckner) [537496]
  - [s390] zcrypt: adjust speed rating of cex3 adapters (Hendrik Brueckner) [537495]
  - [s390] zcrypt: adjust speed rating between cex2 and pcixcc (Hendrik Brueckner) [537495]
  - [s390] zcrypt: use definitions for cex3 (Hendrik Brueckner) [537495]
  - [s390] zcrypt: add support for cex3 device types (Hendrik Brueckner) [537495]
  - [s390] zcrypt: special command support for cex3 exploitation (Hendrik Brueckner) [537495]
  - [s390] zcrypt: initialize ap_messages for cex3 exploitation (Hendrik Brueckner) [537495]
  - [s390] kernel: performance counter fix and page fault optimization (Hendrik Brueckner) [546396]
  - [s390] kernel: fix dump indicator (Hendrik Brueckner) [546285]
  - [s390] dasd: support DIAG access for read-only devices (Hendrik Brueckner) [546309]
  - [s390] zcrypt: Do not simultaneously schedule hrtimer (Hendrik Brueckner) [546291]
  - [s390] kernel: clear high-order bits after switching to 64-bit mode (Hendrik Brueckner) [546314]
  - [virt] vhost: add missing architectures (Michael S. Tsirkin) [540389]
  - [virt] vhost_net: a kernel-level virtio server (Michael S. Tsirkin) [540389]
  - [virt] mm: export use_mm/unuse_mm to modules (Michael S. Tsirkin) [540389]
  - [virt] tun: export underlying socket (Michael S. Tsirkin) [540389]
  - [dm] snapshot-merge support from 2.6.33 (Mike Snitzer) [547563]
  - [dm] snapshot changes from 2.6.33 (Mike Snitzer) [547563]
  - [dm] crypt changes from 2.6.33 (Mike Snitzer) [547563]
  - [dm] raid1 changes from 2.6.33 (Mike Snitzer) [547563]
  - [dm] core and mpath changes from 2.6.33 (Mike Snitzer) [547563]
  - [scsi] fix dma handling when using virtual hosts (Mike Christie) [525241]
  - [nfs] convert proto= option to use netids rather than a protoname (Jeff Layton) [545973]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-2.el6]
changelog:
  - [block] config: enable CONFIG_BLK_DEV_INTEGRITY (Jeff Moyer) [490732]
  - [block] config: enable CONFIG_BLK_CGROUP (Jeff Moyer) [425895]
  - [libata] Clarify ata_set_lba_range_entries function (Jeff Moyer) [528046]
  - [libata] Report zeroed read after Trim and max discard size (Jeff Moyer) [528046]
  - [scsi] Correctly handle thin provisioning write error (Jeff Moyer) [528046]
  - [scsi] sd: WRITE SAME(16) / UNMAP support (Jeff Moyer) [528046]
  - [scsi] scsi_debug: Thin provisioning support (Jeff Moyer) [528046]
  - [scsi] Add missing command definitions (Jeff Moyer) [528046]
  - [block] Add support for the ATA TRIM command in libata. (Jeff Moyer) [528046]
  - [block] dio: fix performance regression (Jeff Moyer) [545507]
  - [block] cfq-iosched: Do not access cfqq after freeing it (Jeff Moyer) [425895]
  - [block] include linux/err.h to use ERR_PTR (Jeff Moyer) [425895]
  - [block] cfq-iosched: use call_rcu() instead of doing grace period stall on queue exit (Jeff Moyer) [425895]
  - [block] blkio: Allow CFQ group IO scheduling even when CFQ is a module (Jeff Moyer) [425895]
  - [block] blkio: Implement dynamic io controlling policy registration (Jeff Moyer) [425895]
  - [block] blkio: Export some symbols from blkio as its user CFQ can be a module (Jeff Moyer) [425895]
  - [block] cfq-iosched: make nonrot check logic consistent (Jeff Moyer) [545225]
  - [block] io controller: quick fix for blk-cgroup and modular CFQ (Jeff Moyer) [425895]
  - [block] cfq-iosched: move IO controller declerations to a header file (Jeff Moyer) [425895]
  - [block] cfq-iosched: fix compile problem with !CONFIG_CGROUP (Jeff Moyer) [425895]
  - [block] blkio: Documentation (Jeff Moyer) [425895]
  - [block] blkio: Wait on sync-noidle queue even if rq_noidle = 1 (Jeff Moyer) [425895]
  - [block] blkio: Implement group_isolation tunable (Jeff Moyer) [425895]
  - [block] blkio: Determine async workload length based on total number of queues (Jeff Moyer) [425895]
  - [block] blkio: Wait for cfq queue to get backlogged if group is empty (Jeff Moyer) [425895]
  - [block] blkio: Propagate cgroup weight updation to cfq groups (Jeff Moyer) [425895]
  - [block] blkio: Drop the reference to queue once the task changes cgroup (Jeff Moyer) [425895]
  - [block] blkio: Provide some isolation between groups (Jeff Moyer) [425895]
  - [block] blkio: Export disk time and sectors used by a group to user space (Jeff Moyer) [425895]
  - [block] blkio: Some debugging aids for CFQ (Jeff Moyer) [425895]
  - [block] blkio: Take care of cgroup deletion and cfq group reference counting (Jeff Moyer) [425895]
  - [block] blkio: Dynamic cfq group creation based on cgroup tasks belongs to (Jeff Moyer) [425895]
  - [block] blkio: Group time used accounting and workload context save restore (Jeff Moyer) [425895]
  - [block] blkio: Implement per cfq group latency target and busy queue avg (Jeff Moyer) [425895]
  - [block] blkio: Introduce per cfq group weights and vdisktime calculations (Jeff Moyer) [425895]
  - [block] blkio: Introduce blkio controller cgroup interface (Jeff Moyer) [425895]
  - [block] blkio: Introduce the root service tree for cfq groups (Jeff Moyer) [425895]
  - [block] blkio: Keep queue on service tree until we expire it (Jeff Moyer) [425895]
  - [block] blkio: Implement macro to traverse each service tree in group (Jeff Moyer) [425895]
  - [block] blkio: Introduce the notion of cfq groups (Jeff Moyer) [425895]
  - [block] blkio: Set must_dispatch only if we decided to not dispatch the request (Jeff Moyer) [425895]
  - [block] cfq-iosched: no dispatch limit for single queue (Jeff Moyer) [425895]
  - [block] Allow devices to indicate whether discarded blocks are zeroed (Jeff Moyer) [545203]
  - [block] Revert "cfq: Make use of service count to estimate the rb_key offset" (Jeff Moyer) [425895]
  - [block] cfq-iosched: fix corner cases in idling logic (Jeff Moyer) [425895]
  - [block] cfq-iosched: idling on deep seeky sync queues (Jeff Moyer) [425895]
  - [block] cfq-iosched: fix no-idle preemption logic (Jeff Moyer) [425895]
  - [block] cfq-iosched: fix ncq detection code (Jeff Moyer) [425895]
  - [block] cfq-iosched: cleanup unreachable code (Jeff Moyer) [425895]
  - [block] cfq: Make use of service count to estimate the rb_key offset (Jeff Moyer) [425895]
  - [block] partitions: read whole sector with EFI GPT header (Jeff Moyer) [463632]
  - [block] partitions: use sector size for EFI GPT (Jeff Moyer) [463632]
  - [block] Expose discard granularity (Jeff Moyer) [545203]
  - [block] cfq-iosched: fix next_rq computation (Jeff Moyer) [425895]
  - [block] cfq-iosched: simplify prio-unboost code (Jeff Moyer) [425895]
  - [block] blkdev: flush disk cache on ->fsync (Jeff Moyer) [545199]
  - [block] cfq-iosched: fix style issue in cfq_get_avg_queues() (Jeff Moyer) [425895]
  - [block] cfq-iosched: fairness for sync no-idle queues (Jeff Moyer) [425895]
  - [block] cfq-iosched: enable idling for last queue on priority class (Jeff Moyer) [425895]
  - [block] cfq-iosched: reimplement priorities using different service trees (Jeff Moyer) [425895]
  - [block] cfq-iosched: preparation to handle multiple service trees (Jeff Moyer) [425895]
  - [block] cfq-iosched: adapt slice to number of processes doing I/O (Jeff Moyer) [425895]
  - [block] cfq-iosched: improve hw_tag detection (Jeff Moyer) [425895]
  - [block] cfq: break apart merged cfqqs if they stop cooperating (Jeff Moyer) [533932]
  - [block] cfq: change the meaning of the cfqq_coop flag (Jeff Moyer) [533932]
  - [block] cfq: merge cooperating cfq_queues (Jeff Moyer) [533932]
  - [block] cfq: calculate the seek_mean per cfq_queue not per cfq_io_context (Jeff Moyer) [533932]
  - [block] CFQ is more than a desktop scheduler (Jeff Moyer) [533932]
  - [block] revert: cfq-iosched: limit coop preemption (Jeff Moyer) [533932]
  - perf: Don't free perf_mmap_data until work has been done (Aristeu Rozanski) [547432]
  - ext4: Fix insuficient checks in EXT4_IOC_MOVE_EXT (Aristeu Rozanski) [547432]
  - agp: clear GTT on intel (Aristeu Rozanski) [547432]
  - drm/i915: Fix sync to vblank when VGA output is turned off (Aristeu Rozanski) [547432]
  - drm: nouveau fixes (Aristeu Rozanski) [547432]
  - drm: radeon dp support (Aristeu Rozanski) [547432]
  - drm: radeon fixes (Aristeu Rozanski) [547432]
  - KVM: allow userspace to adjust kvmclock offset (Aristeu Rozanski) [547432]
  - ath9k backports (Aristeu Rozanski) [547432]
  - intel-iommu backport (Aristeu Rozanski) [547432]
  - updating patch linux-2.6-nfsd4-proots.patch (2.6.32-8.fc13 reference) (Aristeu Rozanski) [547432]
  - updating linux-2.6-execshield.patch (2.6.32-8.fc13 reference) (Aristeu Rozanski) [547432]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-0.54.el6]
changelog:
  - [edac] amd64_edac: disabling temporarily (Aristeu Rozanski)
  - [x86] Enable CONFIG_SPARSE_IRQ (Prarit Bhargava) [543174]
  - [x86] panic if AMD cpu_khz is wrong (Prarit Bhargava) [523468]
  - [infiniband] Rewrite SG handling for RDMA logic (Mike Christie) [540269]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-0.53.el6]
changelog:
  - [net] Add acession counts to all datagram protocols (Neil Horman) [445366]
  - [modsign] Enable module signing in the RHEL RPM (David Howells) [517341]
  - [modsign] Don't include .note.gnu.build-id in the digest (David Howells) [517341]
  - [modsign] Apply signature checking to modules on module load (David Howells) [517341]
  - [modsign] Module signature checker and key manager (David Howells) [517341]
  - [modsign] Module ELF verifier (David Howells) [517341]
  - [modsign] Add indications of module ELF types (David Howells) [517341]
  - [modsign] Multiprecision maths library (David Howells) [517341]
  - [procfs] add ability to modify proc file limits from outside a processes own context (Neil Horman) [461946]
  - [s390x] fix build failure with CONFIG_FTRACE_SYSCALLS (Aristeu Rozanski) [538978]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-0.52.el6]
changelog:
  - [x86] AMD Northbridge: Verify NB's node is online (Prarit Bhargava) [536769]
  - [scsi] devinfo update for Hitachi entries (Takahiro Yasui) [526763]
  - [net] export device speed and duplex via sysfs (Andy Gospodarek) [453432]
  - [ppc64] Fix kcrctab_ sections to undo undesireable relocations that break kdump (Neil Horman) [509012]
  - [mm] Limit 32-bit x86 systems to 16GB and prevent panic on boot when system has more than ~30GB (Larry Woodman) [532039]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-0.51.el6]
changelog:
  - [kernel] Set panic_on_oops to 1 (Prarit Bhargava) [529963]
  - [kdump] kexec: allow to shrink reserved memory (Amerigo Wang) [523091]
  - [kdump] doc: update the kdump document (Amerigo Wang) [523091]
  - [kdump] powerpc: implement crashkernel=auto (Amerigo Wang) [523091]
  - [kdump] powerpc: add CONFIG_KEXEC_AUTO_RESERVE (Amerigo Wang) [523091]
  - [kdump] ia64: implement crashkernel=auto (Amerigo Wang) [523091]
  - [kdump] ia64: add CONFIG_KEXEC_AUTO_RESERVE (Amerigo Wang) [523091]
  - [kdump] x86: implement crashkernel=auto (Amerigo Wang) [523091]
  - [kdump] x86: add CONFIG_KEXEC_AUTO_RESERVE (Amerigo Wang) [523091]
  - [block] aio: implement request batching (Jeff Moyer) [533931]
  - [block] get rid of the WRITE_ODIRECT flag (Jeff Moyer) [533931]


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.32-0.50.el6]
changelog:
  - [crypto] padlock-aes: Use the correct mask when checking whether copying is required (Chuck Ebbert)
  - [rfkill] add support to a key to control all radios (Aristeu Rozanski)
  - [acpi] be less verbose about old BIOSes (Aristeu Rozanski)
  - [drm] intel big hammer (Aristeu Rozanski)
  - [e1000] add quirk for ich9 (Aristeu Rozanski)
  - [pci] cacheline sizing (Dave Jones)
  - [crash] add crash driver (Dave Anderson)
  - [fb] disable fbcon logo with parameter (Aristeu Rozanski)
  - [pci] silence some PCI resource allocation errors (Aristeu Rozanski)
  - [serio] disable error messages when i8042 isn't found (Peter Jones)
  - [serial] Enable higher baud rates for 16C95x (Aristeu Rozanski)
  - [input] remove pcspkr modalias (Aristeu Rozanski)
  - [floppy] remove the floppy pnp modalias (Aristeu Rozanski)
  - [input] remove unwanted messages on spurious events (Aristeu Rozanski)
  - [sound] hda intel prealloc 4mb dmabuffer (Aristeu Rozanski)
  - [sound] disables hda beep by default (Aristeu Rozanski)
  - [pci] sets PCIE ASPM default policy to POWERSAVE (Aristeu Rozanski)
  - [pci] add config option to control the default state of PCI MSI interrupts (Aristeu Rozanski)
  - [debug] always inline kzalloc (Aristeu Rozanski)
  - [debug] add would_have_oomkilled procfs ctl (Aristeu Rozanski)
  - [debug] add calls to print_tainted() on spinlock functions (Aristeu Rozanski)
  - [debug] display tainted information on other places (Aristeu Rozanski)
  - [x86] add option to control the NMI watchdog timeout (Aristeu Rozanski)
  - [debug] print common struct sizes at boot time (Aristeu Rozanski)
  - [acpi] Disable firmware video brightness change by default (Matthew Garrett)
  - [acpi] Disable brightness switch by default (Aristeu Rozanski)
  - [usb] enable autosuspend on UVC by default (Matthew Garrett)
  - [usb] enable autosuspend by default on qcserial (Matthew Garrett)
  - [usb] Allow drivers to enable USB autosuspend on a per-device basis (Matthew Garrett)
  - [nfs] make nfs4 callback hidden (Steve Dickson)
  - [nfsd4] proots (Aristeu Rozanski)
  - [execshield] introduce execshield (Aristeu Rozanski)
  - [powerpc] add modalias_show operation (Aristeu Rozanski)
  - [hwmon] add VIA hwmon temperature sensor support (Aristeu Rozanski)
  - [utrace] introduce utrace implementation (Aristeu Rozanski)
  - [build] introduce AFTER_LINK variable (Aristeu Rozanski)


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.32.1.el6]
changelog:
  - [wireless] libertas: make lbs_ibss_join_existing() return error code on rates overflow (Jarod Wilson) [1776569]
  - [wireless] libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held (Jarod Wilson) [1776569]
  - [wireless] libertas: Fix two buffer overflows at parsing bss descriptor (Jarod Wilson) [1776569]
  - [security] keys: Protect request_key() against a type with no match function (Patrick Talbert) [1433220] {CVE-2017-2647}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.31.1.el6]
changelog:
  - [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
  - [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
  - [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
  - [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
  - [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
  - [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
  - [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/asm: Add a patch_site macro & helpers for patching instructions (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
  - [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
  - [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
  - [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
  - [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
  - [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
  - [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.30.1.el6]
changelog:
  - [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
  - [netdrv] bonding: don't set slave->link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
  - [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.29.1.el6]
changelog:
  - [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
  - [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
  - [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
  - binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
  - [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.28.1.el6]
changelog:
  - [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
  - [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
  - [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
  - [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
  - [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
  - [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
  - [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
  - [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.27.1.el6]
changelog:
  - [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.26.1.el6]
changelog:
  - [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1764544]
  - [drm] vmwgfx: refuse to hibernate if we have any resources v2 (Kenneth Yin) [1748195]
  - [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1739948]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.25.1.el6]
changelog:
  - [kvm] KVM: VMX: Set VMENTER_L1D_FLUSH_NOT_REQUIRED if !X86_BUG_L1TF (Waiman Long) [1733760]
  - [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746799] {CVE-2019-14821}
  - [virt] KVM: MMIO: Lock coalesced device when checking for available entry (Bandan Das) [1746799] {CVE-2019-14821}
  - [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1749512]
  - [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1749512]
  - [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1749512]
  - [security] KEYS: prevent creating a different user's keyrings (David Howells) [1537371]
  - [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
  - [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
  - [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
  - [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
  - [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
  - [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
  - [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
  - [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.24.1.el6]
changelog:
  - [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
  - [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
  - [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
  - [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
  - [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
  - [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
  - [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
  - [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.21.1.el6]
changelog:
  - [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
  - [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.20.1.el6]
changelog:
  - [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
  - [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.19.1.el6]
changelog:
  - [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1732107]
  - [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1728931]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.18.1.el6]
changelog:
  - [virt] xenbus: don't look up transaction IDs for ordinary writes (Vitaly Kuznetsov) [1663262]
  - [virt] xenbus: don't BUG() on user mode induced condition (Vitaly Kuznetsov) [1663262]
  - [virt] xenbus: Add proper handling of XS_ERROR from Xenbus for transactions (Vitaly Kuznetsov) [1663262]
  - [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638193] {CVE-2018-17972}
  - [crypto] salsa20 - fix blkcipher_walk API usage (Bruno Eduardo de Oliveira Meneguele) [1543984]
  - [mm] vmscan: do not loop on too_many_isolated for ever (Rafael Aquini) [1658254]
  - [x86] spec_ctrl: Don't report the use of retpoline on Skylake as vulnerable (Waiman Long) [1666102]
  - [mm] try harder to allocate vmemmap blocks (Rafael Aquini) [1591394]
  - [v4l] dvb: revert spectre v1 mitigation (Josh Poimboeuf) [1647975]
  - [fs] binfmt_misc.c: do not allow offset overflow (Bill O'Donnell) [1710149]
  - [x86] pti: Don't use PCID and INVPCID in x86-32 (Waiman Long) [1702782]
  - [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664197] {CVE-2019-5489}
  - [x86] spec: Move retp_compiler() inline function to bugs.c (Waiman Long) [1722185]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.17.1.el6]
changelog:
  - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
  - [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
  - [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
  - [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
  - [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
  - [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
  - [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
  - [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.16.1.el6]
changelog:
  - [virt] xenbus: Fix memory leak on release (Vitaly Kuznetsov) [1661666]
  - [fs] dcache: fix locking around setting DCACHE_SHRINKING flag (Miklos Szeredi) [1672269]
  - [x86] KVM: SVM: Selective cr0 intercept (Wei Huang) [1655873]
  - [x86] KVM: SVM: Restore unconditional cr0 intercept under npt (Wei Huang) [1655873]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.15.1.el6]
changelog:
  - [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
  - [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
  - [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
  - [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
  - [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
  - [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
  - [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
  - [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
  - [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.12.1.el6]
changelog:
  - [x86] vDSO: Don't generate retpoline for indirect call (Waiman Long) [1638552]
  - [fs] cifs: fix reparse point/symlink breakage (Leif Sahlberg) [1636484]
  - [scsi] qla2xxx: Mask off Scope bits in retry delay (Himanshu Madhani) [1588133]
  - [net] tcp: make tcp_retransmit_timer a no-op on empty write queue (Paolo Abeni) [1585892]
  - [kernel] sched/sysctl: Check user input value of sysctl_sched_time_avg (Lauro Ramos Venancio) [1579128]
  - [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] hugetlbfs: switch to inode_init_owner() (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] udf: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ubifs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ramfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ext4: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ext3: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] ext2: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] btrfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [fs] vfs: Add inode uid,gid,mode init helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
  - [s390] kernel: adapt to changed CPU vulnerabilities function prototypes (Hendrik Brueckner) [1625381]
  - [s390] detect etoken facility (Hendrik Brueckner) [1625381]
  - [s390] Correct register corruption in critical section cleanup (Hendrik Brueckner) [1625381]
  - [s390] remove indirect branch from do_softirq_own_stack (Hendrik Brueckner) [1625381]
  - [s390] move spectre sysfs attribute code (Hendrik Brueckner) [1625381]
  - [s390] kernel: use expoline for indirect branches (Hendrik Brueckner) [1625381]
  - [s390] ftrace: use expoline for indirect branches (Hendrik Brueckner) [1625381]
  - [s390] move expoline assembler macros to a header (Hendrik Brueckner) [1625381]
  - [s390] correct module section names for expoline code revert (Hendrik Brueckner) [1625381]
  - [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Oleksandr Natalenko) [1670328]
  - [perf] Fix a race between ring_buffer_detach() and ring_buffer_attach() (Jiri Olsa) [1589340]
  - [perf] Fix mmap() accounting hole (Jiri Olsa) [1627672]
  - [perf] Fix perf mmap bugs (Jiri Olsa) [1627672]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.11.1.el6]
changelog:
  - [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
  - [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.10.1.el6]
changelog:
  - [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
  - [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
  - [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
  - [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
  - [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
  - [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
  - [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
  - [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
  - [fs] seq_file: always clear m->count when we free m->buf (Rodrigo Freire) [1632434]
  - [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
  - [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
  - [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.8.1.el6]
changelog:
  - [block] fix warning on lockdep_assert_held(q->queue_lock) (Ming Lei) [1624747]
  - [kvm] vmx: fix vmwrite to invalid VMCS (Radim Krcmar) [1602011]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.7.1.el6]
changelog:
  - [s390] cio: update chpid descriptor after resource accessibility event (Hendrik Brueckner) [1574471]
  - [s390] af_iucv: enable control sends in case of SEND_SHUTDOWN (Hendrik Brueckner) [1559048]
  - [s390] qeth: repair SBAL elements calculation (Hendrik Brueckner) [1559021]
  - [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
  - [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
  - [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]
  - [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
  - [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.6.1.el6]
changelog:
  - [x86] set __max_smt_threads for 1 core systems (Prarit Bhargava) [1623255]
  - [md] dm rq: fix a race condition in rq_completed() (Ming Lei) [1574568]
  - [scsi] scsi_transport_fc: Hold queue lock while calling blk_run_queue_async() (Ming Lei) [1574568]
  - [block] Avoid scheduling delayed work on a dead queue (Ming Lei) [1574568]
  - [block] Avoid that request_fn is invoked on a dead queue (Ming Lei) [1574568]
  - [block] Let blk_drain_queue() caller obtain the queue lock (Ming Lei) [1574568]
  - [block] Rename queue dead flag (Ming Lei) [1574568]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.5.1.el6]
changelog:
  - [s390] dasd: fix IO error for newly defined devices (Hendrik Brueckner) [1574448]
  - [s390] dasd: fix failing path verification (Hendrik Brueckner) [1581684]
  - [s390] qeth: on channel error, reject further cmd requests (Hendrik Brueckner) [1562009]
  - [s390] qdio: fix access to uninitialized qdio_q fields (Hendrik Brueckner) [1581685]
  - [powerpc] stf-barrier: update (rfi_)enabled_flush_types as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update debugfs as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update handle_ssbd() as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update stf_barrier_enable() as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: add cpu_show_spec_store_bypass() as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: add comment as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: move code from setup_64.c to security.c as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: move code from setup.h to security_features.h as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update fallback routine as in upstream (Gustavo Duarte) [1585299]
  - [powerpc] stf-barrier: update entry barrier slot as in upstream (Gustavo Duarte) [1585299]
  - [x86] Add host_initiated check in reading MSR_AMD64_VIRT_SPEC_CTRL (Wei Huang) [1608576]
  - [x86] KVM: pass host_initiated to functions that read MSRs (Wei Huang) [1608576]
  - [fs] gfs2: Special-case rindex for gfs2_grow (Robert S Peterson) [1384184]
  - [fs] Revert "[fs] gfs2: Special case the rindex in gfs2_write_alloc_required()" (Robert S Peterson) [1384184]
  - [net] ip: process in-order fragments efficiently (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] ip: add helpers to process in-order fragments faster. (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] ipv6: defrag: drop non-last frags smaller than min mtu (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] ip: use rb trees for IP frag queue. (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] ip: discard IPv4 datagrams with overlapping segments. (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] net: modify skb_rbtree_purge to return the truesize of all purged skbs. (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] net: speed up skb_rbtree_purge() (Stefano Brivio) [1613925] {CVE-2018-5391}
  - [net] skbuff: Rename RHEL6 version of skb_tree_purge() to skb_tree_purge_sk() (Stefano Brivio) [1613925] {CVE-2018-5391}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.4.1.el6]
changelog:
  - [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}
  - [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
  - [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
  - [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}
  - [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
  - [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
  - [kvm] VMX: Fix host GDT.LIMIT corruption (CVE-2018-10301) (Paolo Bonzini) [1601851] {CVE-2018-10901}
  - [x86] Initialize __max_smt_threads to 1 (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: detect SMT disabled by BIOS (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Add topology_max_smt_threads() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix incorrect error return code in vm_insert_pfn() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Initialize the vmx_l1d_flush_pages' content (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Don't flush L1D cache if VMENTER_L1D_FLUSH_NEVER (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Take out the unused nosmt module parameter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm/dump_pagetables: Add a check_l1tf debugfs file (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries aganst L1TF for 32-bit PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Make flush_l1d visible in /proc/cpuinfo (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [Documentation] Add section about CPU vulnerabilities (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs, kvm: Introduce boot-time control of L1TF mitigations (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Expose SMT control init function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Allow runtime control of L1D flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Serialize L1D flush parameter setter (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Move l1tf setup function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] l1tf: Handle EPT disabled state proper (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] kvm: Drop L1TF MSR list approach (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] litf: Introduce vmx status variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Online siblings when SMT control is turned on (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add find_msr() helper function (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush logic (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Make indirect call speculation safe (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] VMX: Enable acknowledge interupt on vmexit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D MSR based flush (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add L1D flush algorithm (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM/VMX: Add module argument for L1TF mitigation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Waiman Long) [1593376] {CVE-2018-3620}
  - [kvm] x86: Introducing kvm_x86_ops VM init/destroy hooks (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Boot HT siblings at least once (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] Revert "x86/apic: Ignore secondary threads if nosmt=force" (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix up pte->pfn conversion for PAE (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpufeatures: Add detection of L1D cache flush support. (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Extend 64bit swap file size limit (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] apic: Ignore secondary threads if nosmt=force (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/intel: Evaluate smp_num_siblings early (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/topology: Provide detect_extended_topology_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/common: Provide detect_ht_early() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu/AMD: Remove the pointless detect_ht() call (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Remove the pointless CPU printout (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Provide knobs to control SMT (Waiman Long) [1593376] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Split do_cpu_down() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] topology: Provide topology_smt_supported() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] smp: Provide topology_is_primary_thread() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Move the l1tf function and define pr_fmt properly (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Limit swap file size to MAX_PA/2 (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Add sysfs reporting for l1tf (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect PROT_NONE PTEs against speculation (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect swap entries against L1TF (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Change order of offset/type in swap entry (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] cpu: Fix incorrect vulnerabilities files function prototypes (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] bugs: Export the internal __cpu_bugs variable (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] intel-family.h: Add GEMINI_LAKE SOC (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Fix swap entry comment and macro (Waiman Long) [1593376] {CVE-2018-3620}
  - [x86] mm: Move swap offset/type up in PTE to work around erratum (Waiman Long) [1593376] {CVE-2018-3620}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.3.1.el6]
changelog:
  - [infiniband] ib/iser: Rewrite bounce buffer code path (Don Dutile) [1585312]
  - [sound] alsa: pcm: prevent UAF in snd_pcm_info (CVE-2017-0861) (Jaroslav Kysela) [1565188] {CVE-2017-0861}
  - [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550176] {CVE-2018-7566}
  - [sound] alsa: seq: Fix use-after-free at creating a port (Jaroslav Kysela) [1503383] {CVE-2017-15265}
  - [sound] alsa: seq: Make ioctls race-free (Jaroslav Kysela) [1537452] {CVE-2018-1000004}
  - [mm] reduce total RAM held in per-CPU pvecs by flushing them on compound/THP page arrival (Larry Woodman) [1575819]
  - [usb] acm: fix the computation of the number of data bits (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [misc] spectre: fix gadgets found by smatch scanner, part 2 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] kvm/vmx: Remove barrier_nospec() in slot_largepage_idx() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kvm] Remove memory alias support (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [misc] spectre: fix gadgets found by smatch scanner (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] posix-timers: Protect posix clock array access against speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [kernel] perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[] (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [ipc] sysvipc/sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [sound] alsa: control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [documentation] Document array_index_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Include <asm/barrier.h> dependency (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589032] {CVE-2018-3693}
  - [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589032] {CVE-2018-3693}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.2.1.el6]
changelog:
  - [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
  - [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
  - [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
  - [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
  - [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
  - [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
  - [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
  - [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.1.1.el6]
changelog:
  - [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1574592]
  - [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1574592]
  - [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1574592]
  - [x86] microcode: Sanitize per-cpu microcode reloading interface (Prarit Bhargava) [1574592]
  - [x86] virt_spec_ctrl: Set correct host SSDB value for AMD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] bugs: Fix missing void (Waiman Long) [1584356] {CVE-2018-3639}
  - [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584356] {CVE-2018-3639}
  - [uapi] prctl: Add force disable speculation (Waiman Long) [1584356] {CVE-2018-3639}
  - [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
  - [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Show IBPB in the Spectre_v2 sysfs file (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] pti: Check MSR_IA32_ARCH_CAPABILITIES for Meltdown vulnearability (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] pti: Fix kexec warning on debug kernel (Waiman Long) [1584356] {CVE-2018-3639}
  - [x86] kvm/fpu: Enable eager FPU restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] always enable eager FPU by default (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Load xsave pointer *after* initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fix 32-bit signal frame handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Always restore_xinit_state() when use_eager_cpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Rename drop_init_fpu() to fpu_reset_state() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fix math_state_restore() race with kernel_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Fold __drop_fpu() into its sole user (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't abuse drop_init_fpu() in flush_thread() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Introduce restore_init_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Document user_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Change xstateregs_get()/set() to use ->xsave.i387 rather than ->fxsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Always allow FPU in interrupt if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Introduce per-cpu in_kernel_fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Change math_error() to use unlazy_fpu(), kill (now) unused save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Merge simd_math_error() into math_error() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Don't reset thread.fpu_counter (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Allow FPU to be used at interrupt time even with eagerfpu (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387.c: Initialize thread xstate only on CPU0 only once (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] kvm: fix kvm's usage of kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] rhel: initialize scattered CPUID features early (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: make eagerfpu= boot param tri-state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: enable eagerfpu by default for xsaveopt (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: decouple non-lazy/eager fpu restore from xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: use non-lazy fpu restore for processors supporting xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: drop_fpu() before restoring new state from sigframe (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Unify signal handling code paths for x86 and x86_64 kernels (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: drop the fpu state during thread exit (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] signals: ia32_signal.c: add __user casts to fix sparse warnings (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Consolidate inline asm routines for saving/restoring fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] signal: Cleanup ifdefs and is_ia32, is_x32 (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu/xsave: Keep __user annotation in casts (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] debug: Add KERN_<LEVEL> to bare printks, convert printks to pr_<level> (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] extable: Remove open-coded exception table entries in arch/x86/include/asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: Split up <asm/i387.h> into exported and internal interfaces (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: Uninline the generic FP helpers that we expose to kernel modules (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: (DON'T ACTUALLY) support lazy restore of FPU state (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: use 'restore_fpu_checking()' directly in task switching code (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: fix up some fpu_counter confusion (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: re-introduce FPU state preloading at context switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move TS_USEDFPU flag from thread_info to task_struct (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move AMD K7/K8 fpu fxsave/fxrstor workaround from save to restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: do not preload FPU state at task switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: don't ever touch TS_USEDFPU directly, use helper functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: move TS_USEDFPU clearing out of __save_init_fpu and into callers (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: fix x86-64 preemption-unsafe user stack save/restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] i387: math_state_restore() isn't called from asm (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fix potentially dangerous trailing '; ' in #defined values/expressions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-32, fpu: Fix FPU exception handling on non-SSE systems (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Fix common misspellings (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] kvm: Initialize fpu state in preemptible context (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-32, fpu: Rewrite fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Remove PSHUFB_XMM5_* macros (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Remove unnecessary ifdefs from i387 code. (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Simplify constraints for fxsave/fxtstor (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Fix cs value in convert_from_fxsr() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] x86-64, fpu: Disable preemption when using TS_USEDFPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge __save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge tolerant_fwait() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] fpu: Merge fpu_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Disable xsave in i387 emulation mode (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Make xstate_enable_boot_cpu() __init, protect on CPU 0 (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Add __init attribute to setup_xstate_features() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Make init_xstate_buf static (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Check cpuid level for XSTATE_CPUID (0x0d) (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Introduce xstate enable functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Do not include asm/i387.h in asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Avoid unnecessary __clear_user() and xrstor in signal handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Cleanup return codes in check_for_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Separate fpu and xsave initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] xsave: Move boot cpu initialization to xsave_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Revert "[x86] fpu: change save_i387_xstate() to rely on unlazy_fpu()" (Paolo Bonzini) [1589047] {CVE-2018-3665}
  - [x86] Revert "[x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal()" (Paolo Bonzini) [1589047] {CVE-2018-3665}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-754.el6]
changelog:
  - [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
  - [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
  - [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Clean up entry code & remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
  - [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
  - [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
  - [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
  - [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
  - [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
  - [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-753.el6]
changelog:
  - [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
  - [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
  - [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-752.el6]
changelog:
  - [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
  - [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
  - [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
  - [net] security: export security_sk_clone (Marcelo Leitner) [1571357]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-751.el6]
changelog:
  - [md] dm thin: fix regression that caused discards to be disabled if passdown was (Mike Snitzer) [1569377]
  - [s390] configs: enable auto expoline support (Hendrik Brueckner) [1554959]
  - [s390] correct nospec auto detection init order (Hendrik Brueckner) [1554959]
  - [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1554959]
  - [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1554959]
  - [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1554959]
  - [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1554959]
  - [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1554959]
  - [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1554959]
  - [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1554959]
  - [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1554959]
  - [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1554959]
  - [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1554959]
  - [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1554959]
  - [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1568241]
  - [net] sctp: verify size of a new chunk in _sctp_make_chunk() (Stefano Brivio) [1551908] {CVE-2018-5803}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-750.el6]
changelog:
  - [fs] fuse: fix punching hole with unaligned end (Miklos Szeredi) [1387473] {CVE-2017-15121}
  - [documentation] kdump: fix documentation about panic_on_warn to match rhel6 (Pingfan Liu) [1555196]
  - [fs] Provide sane values for nlink (Leif Sahlberg) [1554342]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-749.el6]
changelog:
  - [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1561788]
  - [powerpc] Move default security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1561788]
  - [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1561788]
  - [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1561788]
  - [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1561788]
  - [lib] seq: Add seq_buf_printf() (Mauricio Oliveira) [1561788]
  - [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1561786]
  - [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1561786]
  - [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1562725]
  - [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1562725]
  - [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1562725]
  - [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1562725]
  - [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1562725]
  - [x86] entry: Remove extra argument in call instruction (Waiman Long) [1562552]
  - [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1557562 1562552]
  - [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1558845]
  - [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1558845]
  - [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1558845]
  - [x86] mm: Dump both kernel & user page tables at fault (Waiman Long) [1558845]
  - [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1558845]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-748.el6]
changelog:
  - [mm] fold arch_randomize_brk into ARCH_HAS_ELF_RANDOMIZE (Bhupesh Sharma) [1494380]
  - [mm] brk: fix min_brk lower bound computation for COMPAT_BRK (Bhupesh Sharma) [1494380]
  - [mm] split ET_DYN ASLR from mmap ASLR (Bhupesh Sharma) [1494380]
  - [s390] redefine randomize_et_dyn for ELF_ET_DYN_BASE (Bhupesh Sharma) [1494380]
  - [mm] expose arch_mmap_rnd when available (Bhupesh Sharma) [1494380]
  - [s390] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [s390] mmap: randomize mmap base for bottom up direction (Bhupesh Sharma) [1494380]
  - [powerpc] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [x86] standardize mmap_rnd() usage (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: create Kconfig variable for PIE randomization (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: PIE: make PF_RANDOMIZE check comment more accurate (Bhupesh Sharma) [1494380]
  - [fs] binfmt_elf: fix PIE execution with randomization disabled (Bhupesh Sharma) [1494380]
  - [acpi] acpica: Support calling _REG methods within ACPI interpreter (Lenny Szubowicz) [1522849]
  - [acpi] acpica: Function to test if ACPI interpreter already entered (Lenny Szubowicz) [1522849]
  - [acpi] acpica: Function to test if ACPI mutex held by this thread (Lenny Szubowicz) [1522849]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-747.el6]
changelog:
  - [fs] gfs2: Check for the end of metadata in trunc_dealloc (Robert S Peterson) [1559928]
  - [fs] gfs2: clear journal live bit in gfs2_log_flush (Robert S Peterson) [1559928]
  - [netdrv] vmxnet3: fix tx data ring copy for variable size (Neil Horman) [1530378]
  - [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1559386]
  - [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1554631]
  - [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags & wrapper (Mauricio Oliveira) [1554631]
  - [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1554630]
  - [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1554630]
  - [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1554630]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-746.el6]
changelog:
  - [dm] fix race between dm_get_from_kobject() and __dm_destroy() (Mike Snitzer) [1551999] {CVE-2017-18203}
  - [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1557562]
  - [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1550599] {CVE-2017-5754}
  - [ipmi] pick up slave address from SMBIOS on an ACPI device (Tony Camuso) [1484525]
  - [ipmi] fix watchdog timeout set on reboot (Tony Camuso) [1484525]
  - [ipmi] fix watchdog hang on panic waiting for ipmi response (Tony Camuso) [1484525]
  - [ipmi] use smi_num for init_name (Tony Camuso) [1484525]
  - [ipmi] move platform device creation earlier in the initialization (Tony Camuso) [1484525]
  - [ipmi] clean up printks (Tony Camuso) [1484525]
  - [ipmi] cleanup error return (Tony Camuso) [1484525]
  - [md] raid0: apply base queue limits *before* disk_stack_limits (Xiao Ni) [1417294]
  - [md] raid0: update queue parameter in a safer location (Xiao Ni) [1417294]
  - [md] raid0: conditional mddev->queue access to suit dm-raid (Xiao Ni) [1417294]
  - [md] raid0: access mddev->queue (request queue member) conditionally because it is not set when accessed from dm-raid (Xiao Ni) [1417294]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-745.el6]
changelog:
  - [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1550599] {CVE-2017-5754}
  - [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548432] {CVE-2017-13166}
  - [scsi] lpfc: Fix crash from memory alloc at interrupt level with GFP_KERNEL set (Dick Kennedy) [1540706]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-744.el6]
changelog:
  - [dm] io: fix duplicate bio completion due to missing ref count (Mikulas Patocka) [1334224]
  - [fs] gfs2: Reduce contention on gfs2_log_lock (Robert S Peterson) [1399822]
  - [fs] gfs2: Inline function meta_lo_add (Robert S Peterson) [1399822]
  - [fs] gfs2: Switch tr_touched to flag in transaction (Robert S Peterson) [1399822]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-743.el6]
changelog:
  - [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548432] {CVE-2017-13166}
  - [kernel] cgroup: initialize xattr before calling d_instantiate() (Aristeu Rozanski) [1533523]
  - [fs] ext*: Don't clear SGID when inheriting ACLs (Andreas Grunbacher) [1473482]
  - [fs] gfs2: writeout truncated pages (Robert S Peterson) [1331076]
  - [fs] export __block_write_full_page (Robert S Peterson) [1331076]
  - [scsi] mark queue as PREEMPT_ONLY before setting quiesce (Ming Lei) [1462959]
  - [block] call blk_queue_enter() before allocating request (Ming Lei) [1462959]
  - [block] introduce blk_queue_enter() (Ming Lei) [1462959]
  - [mm] shmem: replace_page must flush_dcache and others (Waiman Long) [1412337]
  - [mm] shmem: replace page if mapping excludes its zone (Waiman Long) [1412337]
  - [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] spec_ctrl/32: Enable IBRS processing on kernel entries & exits (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Restore segments before int registers (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Unshare NMI return path (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1550599] {CVE-2017-5754}
  - [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1550599] {CVE-2017-5754}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-742.el6]
changelog:
  - [mm] prevent /proc/sys/vm/percpu_pagelist_fraction divide-by-zero (Dave Anderson) [1405879]
  - [fs] proc: Resolve performance issues with multiple /proc/stat reads (Prarit Bhargava) [1544565]
  - [fs] nfs: fix pnfs direct write memory leak (Scott Mayhew) [1536900]
  - [fs] dcache: prevent multiple shrink_dcache_parent() on the same dentry (Miklos Szeredi) [1269288]
  - [fs] fifo: do not restart open() if it already found a partner (Miklos Szeredi) [1482983]
  - [audit] reinstate check for failed execve (Denys Vlasenko) [1488822]
  - [perf] x86/intel/uncore: Make PCI and MSR uncore independent (Jiri Olsa) [1427324]
  - [perf] fix perf_event_comm() vs. exec() assumption (Jiri Olsa) [1478980]
  - [lib] prevent BUG in kfree() due to memory exhaustion in __sg_alloc_table() (Larry Woodman) [1454453]
  - [kernel] sched/core: Rework rq->clock update skips (Lauro Ramos Venancio) [1212959]
  - [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1212959]
  - [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1212959]
  - [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1212959]
  - [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1212959]
  - [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1495167]
  - [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1495167]
  - [fs] gfs2: Defer deleting inodes under memory pressure (Andreas Grunbacher) [1255872]
  - [fs] gfs2: gfs2_clear_inode, gfs2_delete_inode: Put glocks asynchronously (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Get rid of gfs2_set_nlink (Andreas Grunbacher) [1255872]
  - [fs] add set_nlink() (Andreas Grunbacher) [1255872]
  - [fs] gfs2: gfs2_glock_get: Wait on freeing glocks (Andreas Grunbacher) [1255872]
  - [fs] gfs2: gfs2_create_inode: Keep glock across iput (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Clean up glock work enqueuing (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Protect gl->gl_object by spin lock (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Get rid of flush_delayed_work in gfs2_clear_inode (Andreas Grunbacher) [1255872]
  - [fs] revert "gfs2: Wait for iopen glock dequeues" (Andreas Grunbacher) [1255872]
  - [fs] gfs2: Fixup to "Clear gl_object if gfs2_create_inode fails" (Andreas Grunbacher) [1506281]
  - [scsi] dual scan thread bug fix (Ewan Milne) [1508512]
  - [scsi] fix our current target reap infrastructure (Ewan Milne) [1508512]
  - [scsi] bnx2fc: Fix check in SCSI completion handler for timed out request (Chad Dupuis) [1538168]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-741.el6]
changelog:
  - [net] netfilter: xt_TCPMSS: add more sanity tests on tcph->doff (Florian Westphal) [1543091] {CVE-2017-18017}
  - [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543091] {CVE-2017-18017}
  - [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543091] {CVE-2017-18017}
  - [net] sctp: return error if the asoc has been peeled off in sctp_wait_for_sndbuf (Hangbin Liu) [1470559]
  - [net] sctp: use the right sk after waking up from wait_buf sleep (Hangbin Liu) [1470559]
  - [net] sctp: do not free asoc when it is already dead in sctp_sendmsg (Hangbin Liu) [1470559]
  - [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1535024]
  - [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1535024]
  - [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1535024]
  - [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1535024]
  - [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1532167]
  - [net] revert "net: use lib/percpu_counter API for fragmentation mem accounting" (Jesper Brouer) [1508504]
  - [scsi] lpfc: fix pci hot plug crash in list_add call (Dick Kennedy) [1542773]
  - [scsi] hpsa: update driver version (Joseph Szczypek) [1541517]
  - [scsi] hpsa: correct resets on retried commands (Joseph Szczypek) [1541517]
  - [scsi] hpsa: rescan later if reset in progress (Joseph Szczypek) [1541517]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-740.el6]
changelog:
  - [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1535645]
  - [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1535645]
  - [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1535645]
  - [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1535645]
  - [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1535645]
  - [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1535645]
  - [x86] retpoline/efi: Convert stub indirect calls & jumps (Waiman Long) [1535645]
  - [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1535645]
  - [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1535645]
  - [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1535645]
  - [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1535645]
  - [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1535645]
  - [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1535645]
  - [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1535645]
  - [x86] Use IBRS for firmware update path (Waiman Long) [1535645]
  - [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1535645]
  - [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1535645]
  - [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1535645]
  - [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1535645]
  - [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1535645]
  - [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1535645]
  - [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1535645]
  - [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1535645]
  - [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1535645]
  - [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1535645]
  - [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1535645]
  - [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1535645]
  - [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1535645]
  - [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1535645]
  - [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1535645]
  - [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1535645]
  - [x86] mce: Make machine check speculation protected (Waiman Long) [1535645]
  - [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1535645]
  - [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1535645]
  - [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1535645]
  - [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1535645]
  - [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1535645]
  - [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1535645]
  - [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1535645]
  - [x86] retpoline: Add initial retpoline support (Waiman Long) [1535645]
  - [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1535645]
  - [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1535645]
  - [x86] cpufeatures: Add X86_BUG_SPECTRE_V(12) (Waiman Long) [1535645]
  - [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1535645]
  - [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1535645]
  - [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1535645]
  - [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1535645]
  - [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1535645]
  - [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1535645]
  - [x86] alternatives: Add missing 'n' at end of ALTERNATIVE inline asm (Waiman Long) [1535645]
  - [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1535645]
  - [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1535645]
  - [x86] alternatives: Document macros (Waiman Long) [1535645]
  - [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1535645]
  - [x86] alternatives: Add instruction padding (Waiman Long) [1535645]
  - [x86] alternative: Add header guards to asm/alternative-asm.h (Waiman Long) [1535645]
  - [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1535645]
  - [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1535645]
  - [x86] Make .altinstructions bit size neutral (Waiman Long) [1535645]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-739.el6]
changelog:
  - [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1538543]
  - [powerpc] prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1538543]
  - [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1538542]
  - [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1538542]
  - [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1538542]
  - [s390] add ppa to system call and program check path (Hendrik Brueckner) [1538542]
  - [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1538542]
  - [s390] introduce CPU alternatives (Hendrik Brueckner) [1538542]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-738.el6]
changelog:
  - [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Fix XEN PV boot failure (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] Revert "entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel gs has been restored (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: ibrs_enabled() is expected to return > 1 (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] Revert "mm/kaiser: Disable global pages by default with KAISER" (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] Remove __cpuinitdata from some data & function (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] mm: Set IBPB upon context switch (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519796] {CVE-2017-5715}
  - [kvm] x86: clear registers on VM exit (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] kvm: Pad RSB on VM transition (Waiman Long) [1519796] {CVE-2017-5715}
  - [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519796] {CVE-2017-5715}
  - [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519802] {CVE-2017-5754}
  - [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519789] {CVE-2017-5753}
  - [fs] udf: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [fs] prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [netdrv] p54: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [media] uvcvideo: prevent speculative execution (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519789] {CVE-2017-5753}
  - [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] Add another set of MSR accessor functions (Waiman Long) [1519789] {CVE-2017-5753}
  - [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: enable kaiser in build (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add Kconfig (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: stack trampoline (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519802] {CVE-2017-5754}
  - [x86] Separate out entry text section (Waiman Long) [1519802] {CVE-2017-5754}
  - [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519802] {CVE-2017-5754}
  - [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519802] {CVE-2017-5754}
  - [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519802] {CVE-2017-5754}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-737.el6]
changelog:
  - [hv] netvsc: get rid of completion timeouts (Vitaly Kuznetsov) [1538592]
  - [fs] gfs2: Special case the rindex in gfs2_write_alloc_required() (Andrew Price) [1384184]
  - [scsi] scsi_dh_alua: fix race condition that causes multipath to hang (Mike Snitzer) [1500192]
  - [virtio] virtio-pci: fix leaks of msix_affinity_masks (Jason Wang) [1281754]
  - [fs] sunrpc: avoid warning in gss_key_timeout (J. Bruce Fields) [1456594]
  - [fs] sunrpc: fix RCU handling of gc_ctx field (J. Bruce Fields) [1456594]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-736.el6]
changelog:
  - [drm] nouveau/disp/nv50-: execute supervisor on its own workqueue (Ben Skeggs) [1468825]
  - [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519626] {CVE-2017-1000410}
  - [scsi] storvsc: do not assume SG list is continuous when doing bounce buffers (for 4.1 and prior) (Cathy Avery) [1533175]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-735.el6]
changelog:
  - [x86] tighten /dev/mem with zeroing reads (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [char] /dev/mem: make size_inside_page() logic straight (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [char] /dev/mem: cleanup unxlate_dev_mem_ptr() calls (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [char] /dev/mem: introduce size_inside_page() (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [char] /dev/mem: remove redundant test on len (Bruno Eduardo de Oliveira Meneguele) [1449676] {CVE-2017-7889}
  - [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1538340]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-734.el6]
changelog:
  - [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1518669]
  - [hv] vss: Operation timeouts should match host expectation (Mohammed Gamal) [1511431]
  - [hv] utils: reduce HV_UTIL_NEGO_TIMEOUT timeout (Mohammed Gamal) [1511431]
  - [hv] utils: Check VSS daemon is listening before a hot backup (Mohammed Gamal) [1511431]
  - [hv] utils: Continue to poll VSS channel after handling requests (Mohammed Gamal) [1511431]
  - [md] dm: clear all discard attributes in queue_limits when discards are disabled (Mike Snitzer) [1433297]
  - [md] dm: discard support requires all targets in a table support discards (Mike Snitzer) [1433297]
  - [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520817] {CVE-2017-8824}
  - [net] tcp: fix tcp_trim_head() (Paolo Abeni) [1274139]
  - [net] sctp: fix src address selection if using secondary addresses for ipv6 (Xin Long) [1445919]
  - [net] sctp: deny peeloff operation on asocs with threads sleeping on it (Hangbin Liu) [1470559]
  - [net] sctp: avoid BUG_ON on sctp_wait_for_sndbuf (Hangbin Liu) [1470559]
  - [net] tcp: fix race during timewait sk creation (Florian Westphal) [1205025]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-733.el6]
changelog:
  - [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1532786]
  - [net] dma: fix memory leak in dma_pin_iocvec_pages (Sabrina Dubroca) [1459263]
  - [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1520860]
  - [s390] fix transactional execution control register handling (Hendrik Brueckner) [1520862]
  - [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1408108]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-732.el6]
changelog:
  - [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [988988]
  - [mm] don't return 0 too early from find_get_pages() (Ian Kent) [988988]
  - [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1503322]
  - [s390] cpcmd,vmcp: avoid GFP_DMA allocations (Hendrik Brueckner) [1496105]
  - [fs] gfs2: Withdraw for IO errors writing to the journal or statfs (Robert S Peterson) [1505956]
  - [netdrv] ixgbe: Fix incorrect bitwise operations of PTP Rx timestamp flags (Ken Cox) [1523856]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-731.el6]
changelog:
  - [kernel] fix __wait_on_atomic_t() to call the action func if the counter != 0 (David Howells) [1418631]
  - [fs] fscache: fix dead object requeue (David Howells) [1333592 1418631]
  - [fs] fscache: clear outstanding writes when disabling a cookie (David Howells) [1418631]
  - [fs] fscache: initialise stores_lock in netfs cookie (David Howells) [1418631]
  - [fs] cachefiles: fix attempt to read i_blocks after deleting file (David Howells) [1418631]
  - [fs] cachefiles: fix race between inactivating and culling a cache object (David Howells) [1418631]
  - [fs] fscache: make check_consistency callback return int (David Howells) [1418631]
  - [fs] fscache: wake write waiter after invalidating writes (David Howells) [1418631]
  - [fs] cachefiles: provide read-and-reset release counters for cachefilesd (David Howells) [1418631]
  - [s390] disassembler: increase show_code buffer size (Hendrik Brueckner) [1516654]
  - [fs] sunrpc: remove BUG_ONs checking RPC_IS_QUEUED (Dave Wysochanski) [1424630]
  - [fs] nfsv4.1: nfs4_fl_prepare_ds must be careful about reporting success (Scott Mayhew) [1205448]
  - [fs] cifs: add ratelimit for the log entry that causes a lockup (Leif Sahlberg) [1494999]
  - [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447168]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-730.el6]
changelog:
  - [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1513455]
  - [fs] bio: more bio_map_user_iov() leak fixes (Ming Lei) [1503590] {CVE-2017-12190}
  - [fs] bio: fix unbalanced page refcounting in bio_map_user_iov (Ming Lei) [1503590] {CVE-2017-12190}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-729.el6]
changelog:
  - [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1504260]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-728.el6]
changelog:
  - [mm] introduce dedicated WQ_MEM_RECLAIM workqueue to do lru_add_drain_all (Waiman Long) [1463754]
  - [netdrv] cxgb4: Clear On FLASH config file after a FW upgrade (Arjun Vynipadath) [1446952]
  - [netdrv] chelsio : Fixes the issue seen on initiator while stopping the target (Sai Vemuri) [1442097]
  - [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1437991]
  - [netdrv] cxgb4vf: don't offload Rx checksums for IPv6 fragments (Davide Caratti) [1427036]
  - [scsi] qla2xxx: Get mutex lock before checking optrom_state (Himanshu Madhani) [1408549]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-727.el6]
changelog:
  - [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1492220]
  - [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1492220]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-725.el6]
changelog:
  - [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1497000]
  - [ipmi] create hardware-independent softdep for ipmi_devintf (Tony Camuso) [1457915]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-724.el6]
changelog:
  - [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1435787]
  - [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1435787]
  - [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1435787]
  - [fs] nfsd: remove the cache_hash list (Thiago Becker) [1435787]
  - [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1435787]
  - [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1435787]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-723.el6]
changelog:
  - [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1491846]
  - [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1491846]
  - [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1491846]
  - [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1491846]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-722.el6]
changelog:
  - [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1497152]
  - [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476124] {CVE-2017-11176}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-721.el6]
changelog:
  - [char] ipmi: use rcu lock around call to intf->handlers->sender() (Tony Camuso) [1466034]
  - [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481943] {CVE-2017-1000111}
  - [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1484946] {CVE-2017-7308}
  - [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1484946] {CVE-2017-7308}
  - [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr  Matousek) [1492961] {CVE-2017-1000253}
  - [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr  Matousek) [1492961] {CVE-2017-1000253}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-720.el6]
changelog:
  - [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488340] {CVE-2017-14106}
  - [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488340] {CVE-2017-14106}
  - [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477006] {CVE-2017-7542}
  - [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477006] {CVE-2017-7542}
  - [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481529] {CVE-2017-1000112}
  - [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481529] {CVE-2017-1000112}
  - [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481529] {CVE-2017-1000112}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-719.el6]
changelog:
  - [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1459636]
  - [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490062] {CVE-2017-1000251}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-718.el6]
changelog:
  - [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1477288]
  - [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1477288]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-716.el6]
changelog:
  - [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1441773]
  - [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474782] {CVE-2017-7541}
  - [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1441169]
  - [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1441169]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-714.el6]
changelog:
  - [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1464541]
  - [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1464541]
  - [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1464541]
  - [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1464541]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-713.el6]
changelog:
  - [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1459951] {CVE-2017-9074}
  - [net] gre: fix a possible skb leak (Sabrina Dubroca) [1459951] {CVE-2017-9074}
  - [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1459951] {CVE-2017-9074}
  - [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1459951] {CVE-2017-9074}
  - [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1459951] {CVE-2017-9074}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-712.el6]
changelog:
  - [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1464237 1452730] {CVE-2017-1000364}
  - [mm] revert "enlarge stack guard gap" (Larry Woodman) [1452730] {CVE-2017-1000364}
  - [mm] revert "allow JVM to implement its own stack guard pages" (Larry Woodman) [1464237]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-711.el6]
changelog:
  - [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1459978]
  - [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1452358]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-710.el6]
changelog:
  - [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1464237]
  - [mm] enlarge stack guard gap (Larry Woodman) [1452730] {CVE-2017-1000364}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-709.el6]
changelog:
  - [netdrv] bnxt_en: Update to firmware interface spec 1.5.1 (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Added support for Secure Firmware Update (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add support for firmware updates for additional processors (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Update firmware spec. to 1.3.0 (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add support for updating flash more securely (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Request firmware reset after successful firwmare update (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add hwrm_send_message_silent() (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add installed-package firmware version reporting via Ethtool GDRVINFO (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Reset embedded processor after applying firmware upgrade (Jonathan Toppins) [1439450]
  - [netdrv] bnxt_en: Add support for upgrading APE/NC-SI firmware via Ethtool FLASHDEV (Jonathan Toppins) [1439450]
  - [net] sctp: do not inherit ipv6_(mc|ac|fl)_list from parent (Florian Westphal) [1455612] {CVE-2017-9075}
  - [net] ipv6/dccp: do not inherit ipv6_mc_list from parent (Florian Westphal) [1455612] {CVE-2017-9076 CVE-2017-9077}
  - [net] dccp/tcp: do not inherit mc_list from parent (Florian Westphal) [1455612] {CVE-2017-8890}
  - [net] ipv6: nullify ipv6_ac_list and ipv6_fl_list when creating new socket (Florian Westphal) [1455612]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-708.el6]
changelog:
  - [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1458421]
  - [mm] mempolicy.c: fix error handling in set_mempolicy and mbind (Bruno E. O. Meneguele) [1443539] {CVE-2017-7616}
  - [s390] zfcp: fix use-after-"free" in FC ingress path after TMF (Hendrik Brueckner) [1421762]
  - [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1417305]
  - [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1417305]
  - [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1417305]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-707.el6]
changelog:
  - [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1454847]
  - [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1445326]
  - [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1421760]
  - [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1421761]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-706.el6]
changelog:
  - [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1442030]
  - [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1393672]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-705.el6]
changelog:
  - [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1446755] {CVE-2017-7895}
  - [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1446755] {CVE-2017-7895}
  - [perf] fix concurrent sys_perf_event_open() vs move_group race (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [perf] remove confusing comment and move put_ctx() (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [perf] restructure perf syscall point of no return (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [perf] fix move_group() order (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [perf] generalize event->group_flags (Jiri Olsa) [1434751] {CVE-2017-6001}
  - [scsi] libfc: quarantine timed out xids (Chris Leech) [1431440]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-704.el6]
changelog:
  - [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1448170]
  - [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1441909]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-703.el6]
changelog:
  - [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [869942]
  - [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [869942]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-702.el6]
changelog:
  - [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1440361]
  - [net] ping: implement proper locking (Jakub Sitnicki) [1438999] {CVE-2017-2671}
  - [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430578] {CVE-2017-6214}
  - [net] ipv6: ip6_fragment: fix headroom tests and skb leak (Hannes Frederic Sowa) [1412331]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-701.el6]
changelog:
  - [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1146727]
  - [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1434560]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-700.el6]
changelog:
  - [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1431508]
  - [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1436527]
  - [crypto] mpi: Fix NULL ptr dereference in mpi_powm() (Mateusz Guzik) [1398456] {CVE-2016-8650}
  - [fs] aio: properly check iovec sizes (Mateusz Guzik) [1337517] {CVE-2015-8830}
  - [fs] vfs: make AIO use the proper rw_verify_area() area helpers (Mateusz Guzik) [1337535] {CVE-2012-6701}


author: Phillip Lougher <plougher@redhat.com> [2.6.32-699.el6]
changelog:
  - [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1429881]
  - [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1429881]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-698.el6]
changelog:
  - [sched] fair: Rework throttle_count sync (Jiri Olsa) [1250762]
  - [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1250762]
  - [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1250762]
  - [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1250762]


author: Phillip Lougher <plougher@redhat.com> [2.6.32-697.el6]
changelog:
  - [block] fix use-after-free in seq file (Denys Vlasenko) [1418549] {CVE-2016-7910}
  - [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1425749]
  - [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1360930]
  - [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429918] {CVE-2017-2636}


author: Denys Vlasenko <dvlasenk@redhat.com> [2.6.32-754.34.1.el6]
changelog:
  - [mm] mm: prevent get_user_pages() from overflowing page refcount (Aristeu Rozanski) [1705003]
  - [mm] mm/hugetlb.c: __get_user_pages ignores certain follow_hugetlb_page errors (Aristeu Rozanski) [1705003]


author: Imran Khan <imran.f.khan@oracle.com> [2.6.32-754.35.1.0.2.el6.OL6]
changelog:
  - x86_32, entry: Do syscall exit work on badsys (CVE-2014-4508) (Andy Lutomirski) [Orabug: 32148837]
  - x86_32, entry: Store badsys error code in %eax (Sven Wegener) [Orabug: 32148837]


