# changelog

author: John Haxby <john.haxby@oracle.com> - 2.0.19-6.0.1
changelog:
  - Bump to OL7 version for UEK4 support (John Haxby) [orabug 22370566]
  - Don't ignore OL6-style files in /etc/acpi/events (John Haxby) [orabug 22370566]


author: Zdenek Prikryl <zprikryl@redhat.com> - 1.0.8-1
changelog:
  - Updated to version 1.0.8
  - power.sh works with ConsoleKit >= 0.3.0 (#470752)
  - Fixed conditions in power.sh, which look for power-managers (#470752)
  - Added check to init script


author: Zdenek Prikryl <zprikryl@redhat.com> - 1.0.6-5.fc9
changelog:
  - Fixed managing of power button (#361501)
  - Fixed power script to check for KDE power manager (#419331)


author: Zdenek Prikryl <zprikryl@redhat.com> - 1.0.6-4.fc9
changelog:
  - Removed old logrotate file
  - Fixed socket leak (#394431)
  - Fixed dumping useless info to log (#389581)


author: Phil Knirsch <pknirsch@redhat.com> - 1.0.4-4
changelog:
  - Made a better fix for the powerdown button which checks if g-p-m is running
  - Don't install sample.conf anymore, not needed


author: Phil Knirsch <pknirsch@redhat.com> - 1.0.4-3
changelog:
  - Disable the automatic shutdown -h via powerdown button by default due to
    conflicts with gnome-power-manager


author: Miloslav Trmac <mitr@redhat.com> - 1.0.3-2
changelog:
  - Update to 1.0.3 (fixes #128834)
  - s/Copyright/License/
  - Add logrotate config file (#110677, from Michal Jaegermann)
  - Don't verify contents of /var/log/acpid (#125862)
  - Use $RPM_OPT_FLAGS
  - Fix and cleanup acpid-1.0.1-pm1.patch
  - Add condrestart to %postun


author: Tim Hockin <thockin@sun.com>
changelog:
  - Updated RPM spec with patch from sun for chkconfig on/off
    - Add Changelog, make 'make rpm' use it.


author: Tim Hockin <thockin@sun.com>
changelog:
  - Fixed logging bug - not appending to log (O_APPEND needed)
    - Fix 'make install' to not need root access
    - Fix RPM spec to not need root


author: Eric Sandeen <sandeen@redhat.com> 0.20.rc1.20130917git194aa4a-1
changelog:
  - New upstream snapshot
  - Deprecated btrfsctl, btrfs-show, and btrfs-vol; still available in btrfs cmd


author: Josef Bacik <josef@toxicpanda.com> 0.15-2
changelog:
  -Removed a . at the end of the description
  -Fixed the copyright to be GPLv2 since GPL doesn't work anymore


author: Dave Anderson <anderson@redhat.com> - 7.1.2-2
changelog:
  - Fix "kmem -s <address>", "bt -F[F]", and "rd -S[S]" options in kernels 
    configured with CONFIG_SLUB having multiple-page slabs.
    Resolves: rhbz#1244003
  - Fix for SIGSEGV generated by "bt -[f|F]" in ARM64 kernels.
    Resolves: rhbz#1248859


author: Dave Anderson <anderson@redhat.com> - 7.1.2-1
changelog:
  - Rebase to upstream version 7.1.2
    Resolves: rhbz#1207696
  - Fix several ppc64 backtrace issues
    Resolves: rhbz#1235447


author: Dave Anderson <anderson@redhat.com> - 7.1.1-1
changelog:
  - Rebase to upstream version 7.1.1
    Resolves: rhbz#1207696
  - Display s390x vector registers from a kernel dump.
    Resolves: rhbz#1182161
  - Fix date displayed on initial system banner and by the "sys" command on ARM64.
    Resolves: rhbz#1223044
  - Fix ARM64 page size calculation on 4.1 and later kernels.
    Resolves: rhbz#1222645


author: Dave Anderson <anderson@redhat.com> - 7.0.9-5
changelog:
  - Support new sadump format that can represent more than 16 TB physical memory space
    Resolves: rhbz#1182383


author: Dave Anderson <anderson@redhat.com> - 7.0.9-2
changelog:
  - Use registers from QEMU-generated ELF and compressed kdump headers 
    for active task backtraces.
  - Resolves: rhbz#1169555


author: Dave Anderson <anderson@redhat.com> - 7.0.8-2
changelog:
  - Fix ps performance patch regression on live systems.
  - Resolves: rhbz#1134177
  - Minor build-related fixes for ppc64le.
  - Resolves: rhbz#1123991


author: Dave Anderson <anderson@redhat.com> - 7.0.8-1
changelog:
  - Rebase to upstream version 7.0.8.
  - Resolves: rhbz#1110513
  - Fix to calculate the physical base address of dumpfiles created
    by a "virsh dump" of an OVMF guest.
  - Resolves: rhbz#1080698
  - Support for aarch64 architecture.
  - Resolves: rhbz#1110551
  - Fix to prevent crash from spinning endlessly on a corrupted/truncated
    dumpfile whose bitmap data is not wholly contained within the file.
  - Resolves: rhbz#1114088
  - Support for ppc64le architecture.
  - Resolves: rhbz#1123991


author: Dave Anderson <anderson@redhat.com> - 7.0.2-5
changelog:
  - Fix for a missing kernel-mode exception frame dump by the x86_64 
    "bt" command if a page fault was generated by a bogus RIP.
  - Resolves: rhbz#1057353
  - Fix for the x86_64 "bt" command to prevent an unwarranted message
    indicating "WARNING: possibly bogus exception frame" generated
    from a blocked kernel thread that was in the process of exec'ing
    a user process via the call_usermodehelper() facility.
  - Resolves: rhbz#1057357


author: Dave Anderson <anderson@redhat.com> - 7.0.2-4
changelog:
  - Fixes for "kmem -S" command for CONFIG_SLUB.
  - Resolves: rhbz#1045591
  - Increase S390X NR_CPUS
  - Resolves: rhbz#1051156


author: Dave Anderson <anderson@redhat.com> - 7.0.2-2
changelog:
  - Compressed kdump 46-bit physical memory support
    Resolves: rhbz#1015250
  - Fix incorrect backtrace for dumps taken with "virsh dump --memory-only"
    Resolves: rhbz#1020469
  - Fix cpu number display on systems with more than 254 cpus
    Resolves: rhbz#1020536


author: Dave Anderson <anderson@redhat.com> - 7.0.2-1
changelog:
  - Update to latest upstream release
  - Fix for ppc64 embedded gdb NULL pointer translation sigsegv
  - Fix for bt -F failure


author: Dave Anderson <anderson@redhat.com> - 5.1.8-1
changelog:
  - Update to latest upstream release
  - Additional fixes for gcc-4.6 -Werror compile failures for ARM architecture.


author: Dave Anderson <anderson@redhat.com> - 4.0.9-1
changelog:
  - Update to upstream release, which allows the removal of the 
    Revision tag workaround, the crash-4.0-8.11-dwarf3.patch and 
    the crash-4.0-8.11-optflags.patch


author: Lubomir Rintel <lkundrak@v3.sk> - 4.0.8.11-1
changelog:
  - Update to later upstream release
  - Fix abuse of Revision tag

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild


author: Dave Anderson <anderson@redhat.com> - 4.0-7.7.1
changelog:
  - Updates to this file per crash merge review
  - Update to upstream version 4.0-7.7.  Full changelog viewable in:
      http://people.redhat.com/anderson/crash.changelog.html


author: Dave Anderson <anderson@redhat.com> - 4.0-6.0.5
changelog:
  - Second attempt at addressing the GCC 4.3 build, which failed due
    to additional ptrace.h includes in the lkcd vmdump header files.


author: Dave Anderson <anderson@redhat.com> - 4.0-6.0.4
changelog:
  - First attempt at addressing the GCC 4.3 build, which failed on x86_64
    because ptrace-abi.h (included by ptrace.h) uses the "u32" typedef,
    which relies on <asm/types.h>, and include/asm-x86_64/types.h
    does not not typedef u32 as done in include/asm-x86/types.h.


author: Dave Anderson <anderson@redhat.com> - 4.0-3.3
changelog:
  - Updated crash.patch to match upstream version 4.0-3.3.
  - Support for x86_64 relocatable kernels.  BZ #204557


author: Dave Anderson <anderson@redhat.com> - 4.0-3.1
changelog:
  - Updated crash.patch to match upstream version 4.0-3.1.
  - Added kdump reference to description.
  - Added s390 and s390x to ExclusiveArch list.  BZ #199125
  - Removed LKCD v1 pt_regs references for s390/s390x build.
  - Removed LKCD v2_v3 pt_regs references for for s390/s390x build.


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.4
changelog:
  - Updated crash.patch such that <asm/page.h> is not #include'd
    by s390_dump.c; IBM did not make the file s390[s] only; BZ #192719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.3
changelog:
  - Updated crash.patch such that <asm/page.h> is not #include'd
    by vas_crash.h; only ia64 build complained; BZ #191719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.2
changelog:
  - Updated crash.patch such that <asm/segment.h> is not #include'd
    by lkcd_x86_trace.c; also for BZ #191719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.1
changelog:
  - Updated crash.patch to bring it up to 4.0-2.26, which should 
    address BZ #191719 - "crash fails to build in mock"


author: Dave Anderson <anderson@redhat.com> 3.10-13
changelog:
  - Compiler error- and warning-related fixes for gcc 4 build.
  - Update to enhance x86 and x86_64 gdb disassembly output so as to
    symbolically display call targets from kernel module text without
    requiring module debuginfo data.
  - Fix hole where an ia64 vmcore could be mistakenly accepted as a
    usable dumpfile on an x86_64 machine, leading eventually to a
    non-related error message.


author: Dave Anderson <anderson@redhat.com> 3.10-9
changelog:
  - Updated source package to crash-3.10.tar.gz, containing
    IBM's final ppc64 processor support for RHEL4
  - Fixes potential "bt -a" hang on dumpfile where netdump IPI interrupted
    an x86 process while executing the instructions just after it had entered
    the kernel for a syscall, but before calling the handler.  BZ #139437
  - Update to handle backtraces in dumpfiles generated on IA64 with the
    INIT switch (functionality intro'd in RHEL3-U5 kernel).  BZ #139429
  - Fix for handling ia64 and x86_64 machines booted with maxcpus=1 on
    an SMP kernel.  BZ #139435
  - Update to handle backtraces in dumpfiles generated on x86_64 from the
    NMI exception stack (functionality intro'd in RHEL3-U5 kernel).
  - "kmem -[sS]" beefed up to more accurately verify slab cache chains
    and report errors found.
  - Fix for ia64 INIT switch-generated backtrace handling when
    init_handler_platform() is inlined into ia64_init_handler();
    properly handles both RHEL3 and RHEL4 kernel patches.
    BZ #138350
  - Update to enhance ia64 gdb disassembly output so as to
    symbolically display call targets from kernel module
    text without requiring module debuginfo data.


author: Dave Anderson <anderson@redhat.com> 3.8-3
changelog:
  - remove (harmless) error message during ia64 diskdump invocation when
    an SMP system gets booted with maxcpus=1
  - several 2.6 kernel specific updates


author: Jay Fenlason <fenlason@redhat.com> 3.5-2
changelog:
  - remove ppc from arch list, since it doesn't work with ppc64 kernels
  - remove alpha from the arch list since we don't build it any more


author: Dave Anderson <anderson@redhat.com> - 7.1.0-3.el6_7
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1284762


author: Dave Anderson <anderson@redhat.com> - 7.1.0-3.el6
changelog:
  - Fortify the error handling of task gathering from the pid_hash[]
    chains during session initialization to prevent an endless loop if
    data structures have been corrupted.
    Resolves: rhbz#1208557


author: Dave Anderson <anderson@redhat.com> - 7.1.0-2.el6
changelog:
  - Support new sadump format that can represent more than 16 TB physical memory space
    Resolves: rhbz#1195596


author: Dave Anderson <anderson@redhat.com> - 6.1.0-4.el6
changelog:
  - Compressed kdump 46-bit physical memory support
    Resolves: rhbz#1006622
  - Fix incorrect backtrace for dumps taken with "virsh dump --memory-only"
    Resolves: rhbz#1017930
  - Fix cpu number display on systems with more than 254 cpus
    Resolves: rhbz#1019483


author: Dave Anderson <anderson@redhat.com> - 6.0.9-1.el6
changelog:
  - Fix for "crash: cannot resolve: xtime" session invocation failure.
    Resolves: rhbz#843093
  - Enhance "struct" command to accept -o option with an address argument.
    Resolves: rhbz#834260
  - Rebase to upstream version 6.0.9.
  - Support for compressed/filtered ppc64 firmware-assisted dump (fadump).
    Resolves: rhbz#840051


author: Dave Anderson <anderson@redhat.com> - 6.0.4-2.el6
changelog:
  - Fix s390x "vm -p" to properly handle swapped-out and unmapped
    user pages.
  - Fix s390x "bt -[tT]" on a live system.
    Resolves: rhbz#817247
    Resolves: rhbz#817248


author: Dave Anderson <anderson@redhat.com> - 6.0.3-1.el6
changelog:
  - Support sadump dumpfile formats for Fujitsu Stand Alone Dump facility.
    Resolves: rhbz#736884
  - Support s390x ELF-kdump and s390x compressed-kdump dumpfiles.
    Resolves: rhbz#738865 
  - Display an early warning message if any part of the kernel has been 
    erased/filtered by the makedumpfile facility.
    Resolves: rhbz#739096
  - Fix for the "runq" command for kernels that are configured with
    CONFIG_FAIR_GROUP_SCHED.
    Resolves: rhbz#754291
  - Fix for the x86_64 "bt" command to handle a recursive entry into
    the NMI exception stack.
    Resolves: rhbz#768189
  - Fix for an x86_64 "bt" command segmentation violation if the number
    of ELF_PRSTATUS notes in a compressed-kdump do not match the number
    of cpus running when the system crashed.
    Resolves: rhbz#782837 
  - Rebase to upstream version 6.0.3.
    Resolves: rhbz#767257


author: Dave Anderson <anderson@redhat.com> - 5.1.7-1.el6
changelog:
  - Fix for "kmem -[sS]" if NUMA node 0 has no memory associated with it.
    Resolves: rhbz#716931
  - Fix for the x86_64 "bt" command stack transition error when a non-crashing
    CPU receives a NMI immediately after receiving an interrupt from another 
    source. 
    Resolves: rhbz#712214
  - Fix for the handling of x86_64 compressed kdump dumpfiles where
    the crashing system contains more than 454 cpus.
    Resolves: rhbz#705142
  - Added a new "--osrelease <dumpfile>" command line option that
    displays the OSRELEASE vmcoreinfo string from a kdump dumpfile.
    Resolves: rhbz#703467
  - Update to the crash(8) man page and the associated "crash -h" output.
    Resolves: rhbz#695413
  - Rebase to upstream version 5.1.7.
    Resolves: rhbz#710193


author: Dave Anderson <anderson@redhat.com> - 5.1.1-2.el6
changelog:
  - Fix for x86 "bt" command to account for movement of ia32_sysenter_target()
    assembly function to a separate text section, and for the failure to
    resolve the backtrace of a non-active swapper task.
    Resolves: rhbz#682129
  - Upstream equivalency with 5.1.3 patch.
    Resolves: rhbz#649070


author: Dave Anderson <anderson@redhat.com> - 5.1.1-1.el6
changelog:
  - Add support for s390x ELF dumpfile format.  
    Resolves: rhbz#633449
  - Add support for s390x compressed/filtered dumpfiles generated by 
    makedumpfile.
    Resolves: rhbz#637197
  - Fix for the "bt" command with 2.6.27 and later x86_64 kernels to
    prevent the possible display of a an invalid "vgettimeofday" frame
    above the topmost "system_call_fastpath" frame, followed by two
    read errors indicating "bt: read error: kernel virtual address:
    ffffffffff600000  type: gdb_readmem_callback".
    Resolves: rhbz#637735
  - Save the per-cpu register contents stored in the "cpu" devices of 
    x86_64 KVM dumpfiles, and use their contents for x86_64 backtrace RSP
    and RIP hooks in the case of KVM "live dumps" where the guest system 
    was not in a crashed state when the "virsh dump" operation was done
    on the KVM host.  If an active task was running in user space when 
    a live dump was taken, that will be indicated by the "bt" output, 
    along with the user-space register contents.  The x86_64 register set 
    saved for each cpu may be displayed with the "help -[D|n]" command.
  - Fix for the x86_64 "bt" command to more correctly find the starting
    backtrace RIP and RSP hooks in KVM dumpfiles.  Without the patch,
    backtraces that should start in the interrupt or exception stacks
    were not being detected correctly.
    Resolves: rhbz#649050
  - Fix to utilize the correct "cpu" device format in x86 KVM dumpfiles
    Without the patch, the x86 registers were read in a 32-bit format, 
    which is only true if the host machine was running a 32-bit kernel.
    With the patch, the format defaults to the 64-bit format, and is
    switched to the 32-bit format if it can be determined that the host
    machine was running a 32-bit kernel.
  - Save the per-cpu register contents stored in the "cpu" devices of
    x86 KVM dumpfiles, and use their contents for x86 backtrace ESP and
    EIP hooks in the case of KVM "live dumps", i.e., where the guest
    system was not in a crashed state when the "virsh dump" operation
    was done on the KVM host.  If an active task was running in user
    space when a live dump was taken, that will be indicated by the
    "bt" output, along with the user-space register contents.  The saved
    x86 register set for each cpu may also be displayed with the
    "help -[D|n]" command.
  - Fix for the x86 "bt" command to correctly find the starting backtrace
    EIP and ESP hooks for the active tasks in KVM dumpfiles where the
    kernel had crashed.
    Resolves: rhbz#649051
  - Fix for the cpu count determination in crashed x86 KVM dumpfiles, 
    where the non-crashing cpus are marked offline in the kernel's
    cpu_online_mask by smp_stop_cpu().  Depending upon the cpu number
    of the crashing task, the cpu count may be set to a value that is
    less than the number of present cpus.
  - Change to the manner in which the cpu count is determined for x86_64
    kernels.  SLES11 2.6.32 kernels delay the call to crash_kexec() until
    after smp_send_stop() is called by panic(), and so the cpu_online_map
    cannot be used for determining the cpu count.  With the patch, the
    cpu_present_map is used.
    Resolves: rhbz#649053
  - Rebase to upstream version 5.1.1.
    Resolves: rhbz#649070


author: Dave Anderson <anderson@redhat.com> - 5.0.0-23.el6
changelog:
  - Additional support for QEMU/savevm ram device version 4 to only use
    "pc.ram" segments and to handle the 512MB I/O hole at e0000000.
    Resolves: rhbz#619758


author: Dave Anderson <anderson@redhat.com> - 5.0.0-21.el6
changelog:
  - Implement support for x86 and x86_64 RHEL6 xen/pvops kernels, both live
    and xendumps.
    Resolves: rhbz#608779


author: Dave Anderson <anderson@redhat.com> - 5.0.0-20.el6
changelog:
  - Fix for x86_64 "bt" if kdump NMI occurs while in system_call but 
    prior to switching from per-thread user stack to kernel stack.
    Resolves: rhbz#608173
  - Fix for x86 "bt" to recognize all kernel entry-points without having
    to hardwire their symbol names.
    Resolves: rhbz#608718


author: Dave Anderson <anderson@redhat.com> - 5.0.0-18.el6
changelog:
  - Fix for segmentation violation when "mach -m" is run on an x86 machine
    which has a BIOS-provided e820 map that contains an EFI-related memory
    type of E820_UNUSABLE.
    Resolves: rhbz#601128


author: Dave Anderson <anderson@redhat.com> - 5.0.0-17.el6
changelog:
  - Fix for x86 "bt" command when a crash is generated by a kernel module's
    init_module() function.
    Resolves: rhbz#596904
  - Correct the error message for "dev -p" command.
    Resolves: rhbz#598716
  - Fix to recognize new block and kvmclock devices in the qemu KVM dumpfile.
    Resolves: rhbz#597187


author: Dave Anderson <anderson@redhat.com> - 5.0.0-15.el6
changelog:
  - Fix for an incorrect calculation of the physical base address from
    a xendump of a fully-virtualized x86_64 RHEL6 guest kernel.
    Resolves: rhbz#593107
  - Fix for an incorrect calculation of the physical base address from
    a kvmdump of an x86_64 kernel that has a "_text" virtual address 
    higher than __START_KERNEL_map.
    Resolves: rhbz#593285


author: Dave Anderson <anderson@redhat.com> - 5.0.0-14.el6
changelog:
  - Fix for "cannot resolve stack trace" errors when a non-panicking
    active task is interrupted by the shutdown NMI either while it is
    creating the pt_regs exception frame, or just after the exception
    frame has been created but before the system call handler is called.
    Resolves: rhbz#588337
  - Fix display of ppc64 processor speed at session invocation, and by the
    "sys" and "mach" commands.
    Resolves: rhbz#588353
  - Change the ppc64 cpu count displayed by the initial system banner
    and by the "sys" and "mach" commands to be the number of cpus online.
    Resolves: rhbz#587760


author: Dave Anderson <anderson@redhat.com> - 5.0.0-13.el6
changelog:
  - Update to support the re-worked IBM kernel patch for ppc64 
    CONFIG_SPARSEMEM_VMEMMAP kernels that will store vmemmap page
    mapping information, (re-)enabling the crash utility to be able
    to access kernel page structures.
    Resolves: rhbz#546175
    Resolves: rhbz#546527


author: Dave Anderson <anderson@redhat.com> - 5.0.0-11.el6
changelog:
  - Fix for potential "double free or corruption" glibc abort when 
    running "kmem -s" command on CONFIG_SLAB-configured RHEL6 kernels.
    Resolves: rhbz#576117
  - Implemented support to recognize an IBM-proposed kernel patch for
    ppc64 CONFIG_SPARSEMEM_VMEMMAP kernels that will store vmemmap page
    mapping information, (re-)enabling the crash utility to be able to
    access kernel page structures.
    Resolves: rhbz#546175
    Resolves: rhbz#546527
  - Fix for "swap" and "kmem -i" commands on big-endian ppc64 machines
    to account for size change of the swap_info_struct.flags member.
    Resolves: rhbz#577969


author: Dave Anderson <anderson@redhat.com> - 5.0.0-10.el6
changelog:
  - Fix for "irq: invalid structure member offset: irqaction_mask" error
    generated by "irq" command.
    Resolves: rhbz#575668
  - Fix for session abort cause by "bt -e" on x86.
    Resolves: rhbz#575673
  - Fix for reading dumpfiles generated by snap extension modules on 
    systems with single PT_LOAD segment that starts at a non-zero address.
    Resolves: rhbz#575804


author: Dave Anderson <anderson@redhat.com> - 5.0.0-9.el6
changelog:
  - Fix for incorrect module symbol value recalculation/modification 
    done by "mod -[sS]" command.
    Resolves: rhbz#575144


author: Dave Anderson <anderson@redhat.com> - 5.0.0-8.el6
changelog:
  - Add "bt" support for x86_64 kernels configured with CONFIG_FRAME_POINTER.
    Resolves: rhbz#570909
  - Fix to handle the loss of /dev/tty, such as when the network connection 
    hosting a crash session is killed.
    Resolves: rhbz#571782


author: Dave Anderson <anderson@redhat.com> - 5.0.0-7.el6
changelog:
  - Fix for very large xendump core files whose ELF sections are located
    beyond a file offset of 4GB.
    Resolves: rhbz#563542
  - Additional fix for the "bt" command when run on offline s390/s390x 
    "swapper" idle tasks.
    Resolves: rhbz#559262


author: Dave Anderson <anderson@redhat.com> - 5.0.0-6.el6
changelog:
  - Fix for a gdb-7.0 regression that caused line numbers to fail with
    x86 (32-bit) base kernel text addresses. 
    Resolves: rhbz#562948


author: Dave Anderson <anderson@redhat.com> - 5.0.0-5.el6
changelog:
  - Fix for the "struct" and "union" commands when passed an address that
    is in a valid kernel virtual address region but is either unmapped or
    non-existent.  Without the patch, the following three error messages
    are displayed:
      struct <name> struct: invalid kernel virtual address: <kernel-address>  type: "gdb_readmem_callback"
      gdb called without error_hook: Cannot access memory at address <kernel-address>
      *** glibc detected *** crash: double free or corruption (!prev): <crash-address> ***
    followed by a backtrace and the crash utility memory map.  The session
    aborts at that point.  With the fix, the commands will fail gracefully
    after displaying error messages reporting that the kernel virtual
    address cannot be accessed.
    Resolves: rhbz#561048


author: Dave Anderson <anderson@redhat.com> - 5.0.0-4.el6
changelog:
  - Fix for x86, s390, s390x (and ia64) architectures to set the system
    cpu count equal to the highest cpu online plus one.  Without the
    patch, those architectures would use the number of online cpus as
    the system's total cpu count, which would be misleading when any
    offline cpu number was less than the highest online cpu number.
    Resolves: rhbz#559262
  - Fix to recognize the symbol type change of per-cpu variables from
    'd' or 'D' to 'V' in 2.6.32 kernels.
    Resolves: rhbz#559251


author: Dave Anderson <anderson@redhat.com> - 5.0.0-3.el6
changelog:
  - Update swap-handling functionality to recognize the new swap_info
    array type and swap_info_struct structure changes introduced into 
    the 2.6.32-4.el6 kernel.
    Resolves: rhbz#555379


author: Dave Anderson <anderson@redhat.com> - 5.0.0-2.el6
changelog:
  - Eliminate invocation-time "input string too large" error messages
    when analyzing 32-bit x86 RHEL5 kernels.
    Resolves: rhbz#554477
  - Fix to run with early RHEL6 kernels with glibc less than 2.11
    by forcing the use of the builtin mkstemps() function. 
    Resolves: rhbz#554493


author: Dave Anderson <anderson@redhat.com> - 5.0.0-1.el6
changelog:
  - Rebased package to upstream version 5.0.0.
    Resolves: rhbz#528189
  - Increment the built-in NR_CPUS value for x86_64 from 512 to 4096.
    Resolves: rhbz#513156
  - Fix for the "bt" command on 2.6.29 and later x86_64 kernels to
    always recognize and display BUG()-induced exception frames.
    Resolves: rhbz#548789
  - Fix for the "mount" command on 2.6.32 and later kernels.
    Resolves: rhbz#548791
  - Fix for segmentation violation when running the "ps -r" command
    option on 2.6.25 or later kernels.
    Resolves: rhbz#549243
  - Fix for 2.6.31 or later x86_64 CONFIG_NEED_MULTIPLE_NODES kernels
    running on systems that have multiple NUMA nodes.  By default, those
    kernels use the "page" (or "lpage") percpu memory allocators, which 
    utilize vmalloc space for percpu memory.
    Resolves: rhbz#540772


author: Kris Van Hees <kris.van.hees@oracle.com> - 0.5.1-1
changelog:
  - Remove explicit dependency on kernel RPM.
    [Orabug: 21669543]
  - Ensure safety checks are enforced on copyout() and copyoutstr().
    [Orabug: 21930954]
  - Fix device file minor number for dt_perf.
    [Orabug: 21814949]


author: Kris Van Hees <kris.van.hees@oracle.com> - 0.5.0-1
changelog:
  - Use kernel-provided SDT trampoline memory area for SPARC64.
    [Orabug: 21220344]
  - Add support for sparc64.
    [Orabug: 19005048]
  - Update uid / gid handling in view of namespaces in UEK4 kernels.
    [Orabug: 20456825]


author: Kris Van Hees <kris.van.hees@oracle.com> - 0.4.5-1
changelog:
  - Support USDT for 32-bit applications on 64-bit hosts.
    [Orabug: 21219315]
  - Convert from sdt_instr_t to asm_instr_t.
    [Orabug: 21219374]
  - Restructuring to support DTrace on multiple architectures.
    [Orabug: 21273259]
  - Fix dtrace_helptrace_buffer memory leak.
    [Orabug: 20514336]
  - Add .gitignore file.
    [Orabug: 20266608]


author: Kris Van Hees <kris.van.hees@oracle.com> - 0.4.3-4
changelog:
  - Updated NEWS file: test stress/buffering/tst.resize1.d is XFAIL for now.
  - Align with kernel header file change: FOLL_NOFAULT -> FOLL_IMMED.
    [Orabug: 18653713]


author: Kris Van Hees <kris.van.hees@oracle.com> - 0.4.2-1
changelog:
  - Fix 'vtimestamp' implementation.
    [Orabug: 17741477]
  - Support SDT probes points in kernel modules.
    [Orabug: 17851716]


author: Kris Van Hees <kris.van.hees@oracle.com> - 0.4.1-1
changelog:
  - Align with new cyclic implementation in UEK3 kernel.
    [Orabug: 17553446]
  - Bugfix for module reference counting.
  - Fix memory leak.
  - Fix race condition in speculative tracing buffer cleaning.
    [Orabug: 17591351]
  - Ensure safe access to userspace stack memory location.
    [Orabug: 17591351]


author: Kris Van Hees <kris.van.hees@oracle.com> - 0.4.0-1
changelog:
  - Bugfix for module unloading.
  - Support meta-providers, USDT, and fasttrap (for USDT only).
  - Export DTrace kernel headers to userspace.
  - Improved ustack() robustness.
    [Orabug: 17591351]
  - Reimplemented ustack().
    (Nick Alcock) [Orabug: 17591351]
  - Bugfixes.


author: Kris Van Hees <kris.van.hees@oracle.com> - 0.2.1
changelog:
  - Ensure that allocation attempts are done in atomic fashion so that a failing
    allocation attempt won't interfere with other allocations.
  - Surpress OOM warnings.


author: Kris Van Hees <kris.van.hees@oracle.com> - 0.5.2-1
changelog:
  - Correct probe disable/enable mechanism for syscalls.
    [Orabug: 22352636]
  - Fix access to uregs[I_R7] for sparc64.
    (Nick Alcock) [Orabug: 22602870]
  - Use a more efficient, consistent, and reliable mechanism to read user
    stack locations.
    (Nick Alcock) [Orabug: 22629102]


author: Kris Van Hees <kris.van.hees@oracle.com> - 0.5.3-1
changelog:
  - Provider 'perf' added to SDT for perf events.
    (Nick Alcock) [Orabug: 23004534]
  - Fix to ensure that pdata and sdt_tab handling works across module reloads.
    [Orabug: 23331667]
  - Moving pdata size assertion checking to arch-specific code.
    (Nick Alcock) [Orabug: 23331667]


author: - <kris.van.hees@oracle.com> - 0.6.0-3
changelog:
  - Lockfree walltimestamp implementation (Tomas Jedlicka) [Orabug: 25715256]
  - Corrected aframes values to skip DTrace frames [Orabug: 25727046]
  - Bug fix for stackdepth buffer overrun [Orabug: 25559321]


author: - <kris.van.hees@oracle.com> - 0.6.0-2
changelog:
  - Further implementation of FBT with fixes to ustack
    [Orabug: 21220305]
  - Handle modular IPv6 and introduce typedef in6_addr_t
    (Nick Alcock) [Orabug: 25557554]


author: - <nick.alcock@oracle.com> - 0.6.0-1
changelog:
  - USDT for SPARC. [Orabug: 24455245]
  - Is-enabled probes for SDT [Orabug: 25143173]
  - Function boundary tracing (FBT) [Orabug: 21220305]
  - Add improved multi-argument DTRACE_PROBE macro [Orabug: 24678897]
  - Detemine SDT (including perf-event) argument types dynamically
    [Orabug: 24661801]


author: - <tomas.jedlicka@oracle.com> - 0.6.1-3
changelog:
  - FBT module support and SPARCs return probes [Orabug: 26384179, 26384765]
  - DTrace state cleanmust use dtrace_sync() [Orabug: 26385102]
  - Make dynamic variable cleanup self-throtling [Orabug: 26385177]
  - Restore deadman original timing values [Orabug: 26385159]


author: - <kris.van.hees@oracle.com> - 0.6.1-2
changelog:
  - Change FBT entry probes on x86 to use int3 [Orabug: 26324039]
  - Support x86 CPUs with SMAP (Nick Alcock) [Orabug: 26166784]


author: - <kris.van.hees@oracle.com> - 0.6.1-1
changelog:
  - Implement link_ntop() DTrace subroutine logic (Nick Alcock) [Orabug: 25931479]
  - Add canload() for input of *_ntop(), *_nto*() (Tomas Jedlicka)
  - Fix implementation of mutex_* subroutines [Orabug: 26044447]
  - Improve probe execution debugging
  - Support passing offset as arg0 to FBT return probes [Orabug: 25949086]
  - Use different probe trigger instruction for entry vs return [Orabug: 25949048]
  - Ensure FBT return probes only run with in_irq() true when in true IRQ context
    [Orabug: 26089286]
  - Ensure ustackdepth returns correct value [Orabug: 25949692]


author: - <nick.alcock@oracle.com> - 0.6.1-3
changelog:
  - Released to QA team only
  - Relicense all of userspace, including the testsuite, to UPL.
  - Merge NEWS from the modules into NEWS for userspace: there is
    only one NEWS now.
  - Test fixes [Orabug: 26522961] (Tomas Jedlicka, Nick Alcock)
  - make check-quick support, skipping long-running tests


author: - <tomas.jedlicka@oracle.com> - 0.6.1-2
changelog:
  - Released to QA team only
  - Fix name of lowest bucket in dtrace_print_lquantize() (Eugene Loh)
    [Orabug: 26261502]
  - Fix wrong depth in dtrace_print_ustack() leading to garbage output
    from jstack() (Eugene Loh) [Orabug: 26045010]
  - Do not build DTrace with debug info by default [Orabug: 26389302]
  - Fix spurious errors and misreading of unaligned data on SPARC,
    breaking ustack() etc with upgraded glibc (Nick Alcock)
    [Orabug: 26378141]
    - Translator changes for the IO provider for NFS (Nicolas Droux)
    [Orabug: 26176938]
  - Search for cpp and ld along the PATH, fixing use of dtrace -C with
    devtoolset-6 and other non-default GCCs (Nick Alcock) [Orabug: 26396530]
  - Test fixes, test harness extensions (consumer tests) and new tests.
  - dtrace-utils-devel now depends on elfutils-libelf-devel.
    (Nick Alcock)
  - dtrace-utils-testsuite now depends on dtrace-devel.
    (Nick Alcock) [Orabug: 26415697]


author: - <nick.alcock@oracle.com> - 0.6.1-1
changelog:
  - Add translators and tests for TCP and UDP (Alan Maguire)
    [Orabug: 25815242]
  - Add translators for the IO provider (Nicolas Droux) [Orabug: 25816562]
  - Add link_ntop() and tests for it (Girish Moodalbail)
    [Orabug: 25931511]
  - sched.d no longer depends on the sched provider [Orabug: 26036143]
  - Ship a default /etc/dtrace-modules (Nicolas Droux) [Orabug: 25918164]
  - Repeated dtrace -G no longer corrupts the object file (Kris Van Hees)
    [Orabug: 22509887]


author: - <nick.alcock@oracle.com> - 0.6.0-2
changelog:
  - Released to QA team only
  - Add translator for ip provider [Orabug: 25557249]
  - Test fixes and new tests.


author: - <nick.alcock@oracle.com> - 0.6.0-1
changelog:
  - Released to QA team only
  - Allow self-grabs [Orabug: 24829169]
  - Use /proc/pid/map_files if available [Orabug: 24843582]
  - Fix fd leaks on big-endian systems and during heavy exec() [Orabug: 25040553]
  - Add improved multi-argument DTRACE_PROBE macro [Orabug: 24678905]
  - Fix infloops in SPARC breakpoint handling [Orabug: 24454127]


author: - <nick.alcock@oracle.com> - 0.5.3-1
changelog:
  - Prevent intermittent assertion failures crashes and hangs when
    shutdown races with termination of a grabbed process [Orabug: 22824594]
    [Orabug: 23028026]


author: - <nick.alcock@oracle.com> - 0.5.2-1
changelog:
  - Do not crash USDT probe users when shared libraries are in the upper half of
    the address space [Orabug: 22384028]
  - Do not waste CPU time busywaiting in a do-nothing ioctl()-heavy loop
    [Orabug: 22370283] [Orabug: 22335130]
  - Testsuite triggers are synchronized with dtrace by default [Orabug: 22370283]
  - Fix dtrace -c and -p on SPARC and improve error-handling paths
    [Orabug: 22390414]
  - Fix smoketests on SPARC [Orabug: 22533468]


author: - <nick.alcock@oracle.com> - 0.5.1-4
changelog:
  - Released to QA team only.
  - Prevent testsuite hangs when per-arch options are in use [Orabug: 22030161]


author: - <nick.alcock@oracle.com> - 0.5.1-3
changelog:
  - Fix buggy performance improvements to correctly detect out-of-tree modules
    (like dtrace.ko) and speed them up some more [Orabug: 22237449]
    [Orabug: 22238204]


author: - <nick.alcock@oracle.com> - 0.5.1-1
changelog:
  - Released to QA team only.
  - Improve startup performance when disk cache is cold [Orabug: 22185787]
    [Orabug: 22185763] [Orabug: 22083846]
  - Fix various problems in the testsuite and in DTRACE_DEBUG output
    [Orabug: 21431540] [Orabug: 22170799]


author: - <nick.alcock@oracle.com> - 0.5.0-4
changelog:
  - Improve identification of system daemons that must not be ptraced
    unless explicitly specified [Orabug: 21914902]
  - Improve symbol resolution in the absence of ptrace() [Orabug: 22106441]
  - Fix dtrace -p with an invalid PID [Orabug: 21974221]
  - Close any inherited fds before running testsuite [Orabug: 21914934]


author: - <nick.alcock@oracle.com> - 0.5.0-3
changelog:
  - Released to QA team only
  - No longer reference UEK3 kernels on SPARC.
  - Do not require 32-bit glibc on SPARC.


author: - <nick.alcock@oracle.com> - 0.5.0-2
changelog:
  - Released to QA team only
  - No longer Provide: an unversioned dtrace-utils [Orabug: 21622263]
  - Add missing testsuite package deps [Orabug: 21663841] [Orabug: 21753123]
  - Fix check-module-loading testsuite target [Orabug: 21759323]
  - Test logfiles should not be affected by the verbosity of the test run
    [Orabug: 21769905]


author: - <nick.alcock@oracle.com> - 0.5.0-1
changelog:
  - Released to QA team only
  - SPARC64 support. [Orabug: 19005071]
  - Translator support for 4.1 kernel.


author: - <nick.alcock@oracle.com> - 0.4.6-4
changelog:
  - Add DTrace release and SCM version info via dtrace -Vv [Orabug: 21351062]
  - Add source-tree-independent testsuite RPM (not distributed)
  - Fix the testsuite module-loading pre-checks to actually work
    [Orabug: 21344988]
  - Various build system fixes


author: - <nick.alcock@oracle.com> - 0.4.6-3
changelog:
  - Released to QA team only
  - Fix deadlocks and failures to latch processes for symbol lookup caused
    by failure to correctly track their state over time, in 0.4.6-1+ only.


author: - <nick.alcock@oracle.com> - 0.4.6-2
changelog:
  - Released to QA team only
  - Fix a rare race causing stalls of fork()ed children of traced processes
    under load, in 0.4.6-1 only [Orabug: 21284447]


author: - <nick.alcock@oracle.com> - 0.4.6-1
changelog:
  - Released to QA team only
  - Support multiple kernels with a single userspace tree, loading system
    D libraries from directories named like /usr/lib64/dtrace/3.8.
    [Orabug: 21279908]
  - Processes being userspace-traced can now receive SIGTRAP.
    [Orabug: 21279300]
  - dtrace-utils-devel now depends on the same version of dtrace-utils.
    [Orabug: 21280259]
  - No longer lose track of processes that exec() while their dynamic linker
    state is being inspected. [Orabug: 21279300]
  - No longer assume that the symbol table of processes that are no longer
    being monitored is unchanged since it was last inspected. [Orabug: 21279300]
  - Properly remove breakpoints from fork()ed children. [Orabug: 21279300]


author: - <nick.alcock@oracle.com> - 0.4.5-1
changelog:
  - Automatically load provider modules from /etc/dtrace-modules, if present
    [Orabug: 19821254]
  - Fix intermittent crash on failure of initial grabs or creations of processes
    via dtrace -c, -p, or u*() functions [Orabug: 19679998]
  - Reliably track and compensate for processes undergoing execve()s
    [Orabug: 19046684]
  - Handle processes hit by stopping signals correctly [Orabug: 18674244]
  - Fix a sign-extension bug in breakpoint instruction poking [Orabug: 18674244]
  - Fix some broken tests (Kris Van Hees) [Orabug: 19616155]
  - Robustify DTrace against changes to glibc's internal data structures
    [Orabug: 19882050]
  - Fix DIF subr names in dtrace -S output [Orabug: 19881997]


author: - <nick.alcock@oracle.com> - 0.4.3-1
changelog:
  - Fix array underrun when no textual mapping for the executable can be found
    [Orabug: 18550863]
  - Fix unlikely buffer overrun at process-map-read time [Orabug: 18550863]
  - Fix traversal of realloc()ed pointer which could lead to textual mappings
    being spuriously missed [Orabug: 18550863]
  - Fix error-path dereference of uninitialized variable in error message
    [Orabug: 18550863]


author: - <nick.alcock@oracle.com> - 0.4.2-2
changelog:
  - Interrupting dtrace with a SIGINT while monitored processes are dying no
    longer hangs dtrace on a condition variable [Orabug: 18689795]
  - Symbol lookups on processes that died at the same instant now always fail
    and no longer access freed memory [Orabug: 18550863]


author: - <nick.alcock@oracle.com> - 0.4.2-1
changelog:
  - killing dtrace while a ustack() is in progress no longer risks killing
    crucial system daemons [Orabug: 18600515]
  - Fix a leak of filehandles to executables [Orabug: 18600594]
  - Fix ustack() of multithreaded processes [Orabug: 18412802]
  - Get the pid and ppid right for multithreaded processes [Orabug: 18412802]
  - Fix an uninitialized memory read looking up certain kernel symbols
    [Orabug: 18603463]
  - Fixes for newer versions of make, ld, and bison [Orabug: 18551552]


author: - <nick.alcock@oracle.com> - 0.4.1-1
changelog:
  - Install showUSDT in docdir. (Kris van Hees) [Orabug: 17968414]
  - Install ctf_module_dump. [Orabug: 17968381]
  - A lexer bug was fixed causing spurious errors if D scripts contained a
    pragma or comment at intervals of 8192 characters, and preventing
    the use of scripts >16KiB entirely. [Orabug: 17742866]
  - Fix devinfo_t's dev_statname and dev_pathanme for cases where the
    device does not have partitions. (Kris van Hees) [Orabug: 17973698]
  - A variety of memory leaks and uninitialized memory reads are fixed.
    [Orabug: 17743019]
  - Improve drti.o to minimize overhead when DTrace is not running.
    [Orabug: 17973604]
  - Emit errors from drti.o on stderr, not stdout. [Orabug: 17973604]
  - Use O_CLOEXEC when opening files in drti.o. [Orabug: 17973604]
  - Fix RPM dependencies; automatically install and modprobe the dtrace
    modules as needed. [Orabug: 17804881]


author: Nick Alcock <nick.alcock@oracle.com> - 0.4.0-6
changelog:
  - Fix visibility of .SUNW_dof sections in dtrace -G object files.
    (Kris van Hees) [Orabug: 17476663]
  - Fix typos in changelog and specfile copyright date


author: Nick Alcock <nick.alcock@oracle.com> - 0.4.0-1
changelog:
  - ustack() support and symbol lookups.
  - USDT support.  dtrace -G works.
  - evaltime option now works.
  - DTrace headers largely moved to dtrace-modules-headers.
  - DTRACE_OPT_* environment variables now set options.
    DTRACE_DEBUG=signal emits debugging output on SIGUSR1 receipt.


author: Nick Alcock <nick.alcock@oracle.com> - 0.3.0-1
changelog:
  - CTF support.
  - Fixed install path for dtrace libraries.
  - Fixed -c and -p options.
  - Faster startup.
  - Split out a -devel package.


author: Philip Copeland <philip.copeland@oracle.com> - 0.1-0.3
changelog:
  - The systemtap package in the 'wild' creates a dtrace.1 manpage
    which is bizarre since it doesn't have an associated dtrace 
    binary. This will cause a conflict and the rpm will not install
    Since that man page is superfluous I've had to add a %post
    section here to move our manpage into position in such a way as
    to keep the rpm database happy. Technically this is a bit evil.


author: - <nick.alcock@oracle.com> - 0.6.2-2
changelog:
  - Internal development release
  - Add lockstat provider [Orabug: 26149894] (Alan Maguire)
  - Add missing obsolete of dtrace-modules-provider-headers [Orabug: 26883486]
  (Tomas Jedlicka)
  - Add missing testsuite NFS dependency [Orabug: 26860985] (Tomas Jedlicka)


author: - <nick.alcock@oracle.com> - 0.6.2-1
changelog:
  - Internal development release
  - Fix segfault at shutdown time if grabbed processes die at
    precisely the wrong time [Orabug: 26528776]
  - New llquantize() aggregation, providing log/linear results
    [Orabug: 26675201] (Eugene Loh)
  - New optional third arg for tracemem(): dynamically-variable size
    limit [Orabug: 26675604] (Eugene Loh)
  - Fix wrong wrong-number-of-args error messages. (Eugene Loh)
    [Orabug: 26402731]
  - Fix module address range merging (Eugene Loh) [Orabug: 25767469]
  - Allow referencing of structure and union members named with
    the same name as D keywords, e.g. 'self' [Orabug: 26518086]
  - Changes for the move of UAPI headers into dtrace-utils-devel.
    (Tomas Jedlicka, Nick Alcock).
  - Support CTF in /lib/modules/$(uname -r)/kernel/vmlinux.ctfa
    archive [Orabug: 25815372]
  - Testsuite fixes and new tests for inet_*() and lquantize
    (Eugene Loh, Alan Maguire, Nick Alcock)


author: - <nick.alcock@oracle.com> - 0.6.1-3
changelog:
  - Relicense all of userspace, including the testsuite, to UPL.
  - Merge NEWS from the modules into NEWS for userspace: there is
    only one NEWS now.
  - Test fixes [Orabug: 26522961] (Tomas Jedlicka, Nick Alcock)
  - make check-quick support, skipping long-running tests


author: - <tomas.jedlicka@oracle.com> - 0.6.1-2
changelog:
  - Internal development release
  - Fix name of lowest bucket in dtrace_print_lquantize() (Eugene Loh)
    [Orabug: 26261502]
  - Fix wrong depth in dtrace_print_ustack() leading to garbage output
    from jstack() (Eugene Loh) [Orabug: 26045010]
  - Do not build DTrace with debug info by default [Orabug: 26389302]
  - Fix spurious errors and misreading of unaligned data on SPARC,
    breaking ustack() etc with upgraded glibc (Nick Alcock)
    [Orabug: 26378141]
    - Translator changes for the IO provider for NFS (Nicolas Droux)
    [Orabug: 26176938]
  - Search for cpp and ld along the PATH, fixing use of dtrace -C with
    devtoolset-6 and other non-default GCCs (Nick Alcock) [Orabug: 26396530]
  - Test fixes, test harness extensions (consumer tests) and new tests.
  - dtrace-utils-devel now depends on elfutils-libelf-devel.
    (Nick Alcock)
  - dtrace-utils-testsuite now depends on dtrace-devel.
    (Nick Alcock) [Orabug: 26415697]


author: - <nick.alcock@oracle.com> - 0.6.0-2
changelog:
  - Internal development release
  - Add translator for ip provider [Orabug: 25557249]
  - Test fixes and new tests.


author: - <nick.alcock@oracle.com> - 0.6.0-1
changelog:
  - Internal development release
  - Allow self-grabs [Orabug: 24829169]
  - Use /proc/pid/map_files if available [Orabug: 24843582]
  - Fix fd leaks on big-endian systems and during heavy exec() [Orabug: 25040553]
  - Add improved multi-argument DTRACE_PROBE macro [Orabug: 24678905]
  - Fix infloops in SPARC breakpoint handling [Orabug: 24454127]


author: - <nick.alcock@oracle.com> - 0.5.1-4
changelog:
  - Internal development release.
  - Prevent testsuite hangs when per-arch options are in use [Orabug: 22030161]


author: - <nick.alcock@oracle.com> - 0.5.1-1
changelog:
  - Internal development release.
  - Improve startup performance when disk cache is cold [Orabug: 22185787]
    [Orabug: 22185763] [Orabug: 22083846]
  - Fix various problems in the testsuite and in DTRACE_DEBUG output
    [Orabug: 21431540] [Orabug: 22170799]


author: - <nick.alcock@oracle.com> - 0.5.0-3
changelog:
  - Internal development release
  - No longer reference UEK3 kernels on SPARC.
  - Do not require 32-bit glibc on SPARC.


author: - <nick.alcock@oracle.com> - 0.5.0-2
changelog:
  - Internal development release
  - No longer Provide: an unversioned dtrace-utils [Orabug: 21622263]
  - Add missing testsuite package deps [Orabug: 21663841] [Orabug: 21753123]
  - Fix check-module-loading testsuite target [Orabug: 21759323]
  - Test logfiles should not be affected by the verbosity of the test run
    [Orabug: 21769905]


author: - <nick.alcock@oracle.com> - 0.5.0-1
changelog:
  - Internal development release
  - SPARC64 support. [Orabug: 19005071]
  - Translator support for 4.1 kernel.


author: - <nick.alcock@oracle.com> - 0.4.6-3
changelog:
  - Internal development release
  - Fix deadlocks and failures to latch processes for symbol lookup caused
    by failure to correctly track their state over time, in 0.4.6-1+ only.


author: - <nick.alcock@oracle.com> - 0.4.6-2
changelog:
  - Internal development release
  - Fix a rare race causing stalls of fork()ed children of traced processes
    under load, in 0.4.6-1 only [Orabug: 21284447]


author: - <nick.alcock@oracle.com> - 0.4.6-1
changelog:
  - Internal development release
  - Support multiple kernels with a single userspace tree, loading system
    D libraries from directories named like /usr/lib64/dtrace/3.8.
    [Orabug: 21279908]
  - Processes being userspace-traced can now receive SIGTRAP.
    [Orabug: 21279300]
  - dtrace-utils-devel now depends on the same version of dtrace-utils.
    [Orabug: 21280259]
  - No longer lose track of processes that exec() while their dynamic linker
    state is being inspected. [Orabug: 21279300]
  - No longer assume that the symbol table of processes that are no longer
    being monitored is unchanged since it was last inspected. [Orabug: 21279300]
  - Properly remove breakpoints from fork()ed children. [Orabug: 21279300]


author: - <nick.alcock@oracle.com> - 1.0.0-8
changelog:
  - Change dtrace_proc_*() public interfaces to take a struct dtrace_proc,
    avoiding lifecycle issues that can cause access to freed memory when
    victims are exec()ing rapidly [Orabug: 27501199]
  - Bump library soname to libdtrace.so.1 [Orabug: 27501199]
  - Improve handling of symbol name->address and address->name lookup
    [Orabug: 27214992] (Eugene Loh)
  - Check array bounds at compile time [Orabug: 27382268]
  - Fix dtrace -S not printing actions other than the first [Orabug: 27565023]
    (Tomas Jedlicka)
  - Drop expensive, unnecessary bad page state checking from testsuite
    [Orabug: 27577555]
  - Handle interruptions in the testsuite runner better [Orabug: 27577593]
  - Consider erratically failing tests in some directories to be passes
  - Test fixes [Orabug: 27583002, 27651838]


author: - <nick.alcock@oracle.com> - 1.0.0-7
changelog:
  - Internal development release.
  - Several latent porting bugs fixed (Kris Van Hees)
  - Make tests used in smoke testsuite rely on sdt less
    (Kris Van Hees)


author: - <nick.alcock@oracle.com> - 1.0.0-6
changelog:
  - Internal development release.
  - ARM64 support [Orabug: 27438960, 27438993, 27438977]
  - Include correct procfs.h [Orabug: 27266725] (Tomas Jedlicka)


author: - <nick.alcock@oracle.com> - 1.0.0-4
changelog:
  - Internal development release.
  - Eliminate new symbol at address 0 on KPTI-enabled kernels
    [Orabug: 27364377]
  - Boost some test timeouts


author: - <nick.alcock@oracle.com> - 1.0.0-3
changelog:
  - Internal development release.
  - New tests and test fixes (Kris Van Hees, Nicolas Droux)
    [Orabug: 27194352, 27282243]


author: - <nick.alcock@oracle.com> - 1.0.0-1
changelog:
  - Release for smoketesters, not GA
  - Fix mod() normalization: add test for it [Orabug: 26826564]
    (Tomas Jedlicka, Eugene Loh)
  - Fix faulty logic in dtrace_modsym_update() adding symbols to wrong modules
    [Orabug: 26848467] (Tomas Jedlicka, Eugene Loh)
  - ip provider ipv6_tclass and ipv6_flow are not set correctly (Nicolas Droux)
    [Orabug: 27193049]
  - Translator changes for kernels 4.12 -- 4.14 (Nicolas Droux,
    Tomas Jedlicka, Nick Alcock)
  - Add tagging capability to the testsuite [Orabug: 26992620]
    (Vincent Lim, Eugene Loh)
  - Fix kills of hanging dtraces in the testsuite [Orabug: 27051149]
    (Eugene Loh, Nick Alcock)
  - New tests for the lockstat provider and fixes to jstack and 3-arg
    tracemem tests [Orabug: 26149894, 27015838] (Eugene Loh, Alan Maguire)


author: - <nick.alcock@oracle.com> - 0.6.2-2
changelog:
  - Add lockstat provider [Orabug: 26149894] (Alan Maguire)
  - Add missing obsolete of dtrace-modules-provider-headers [Orabug: 26883486]
  (Tomas Jedlicka)
  - Add missing testsuite NFS dependency [Orabug: 26860985] (Tomas Jedlicka)


author: - <nick.alcock@oracle.com> - 0.6.2-1
changelog:
  - Internal development release.
  - Fix segfault at shutdown time if grabbed processes die at
    precisely the wrong time [Orabug: 26528776]
  - New llquantize() aggregation, providing log/linear results
    [Orabug: 26675201] (Eugene Loh)
  - New optional third arg for tracemem(): dynamically-variable size
    limit [Orabug: 26675604] (Eugene Loh)
  - Fix wrong wrong-number-of-args error messages. (Eugene Loh)
    [Orabug: 26402731]
  - Fix module address range merging (Eugene Loh) [Orabug: 25767469]
  - Allow referencing of structure and union members named with
    the same name as D keywords, e.g. 'self' [Orabug: 26518086]
  - Changes for the move of UAPI headers into dtrace-utils-devel.
    (Tomas Jedlicka, Nick Alcock).
  - Support CTF in /lib/modules/$(uname -r)/kernel/vmlinux.ctfa
    archive [Orabug: 25815372]
  - Testsuite fixes and new tests for inet_*() and lquantize
    (Eugene Loh, Alan Maguire, Nick Alcock)


author: Ashish Samant <ashish.samant@oracle.com> - 2.9.4-1.0.1
changelog:
  - libfuse 2.9.4 from mainline with bug fixes.
  - New features backported and added from libfuse 3.0
  - For eg: writeback_cache, async_dio , readdirplus etc.
  - Conatins the numa patches as well.


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.7.0-2
changelog:
  - redefine exec_prefix to /
  - redefine bindir to /bin
  - redefine libdir to %{_lib}
  - don't pass --disable-static to configure
  - manually rm generated static libs


author: Thorsten Leemhuis <fedora[AT]leemhuis[DOT]info> - 2.4.1-3
changelog:
  - Add README.fedora
  - Add hint to README.fedora and that you have to be member of the group "fuse"
    in the description
  - Use groupadd instead of fedora-groupadd


author: Thorsten Leemhuis <fedora[AT]leemhuis[DOT]info> - 2.4.1-2
changelog:
  - Rename packages a bit
  - use makedev.d/40-fuse.nodes
  - fix /sbin/mount.fuse
  - Use a fuse group to restict access to fuse-filesystems


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.7.0-2
changelog:
  - redefine exec_prefix to /
  - redefine bindir to /bin
  - redefine libdir to lib64
  - don't pass --disable-static to configure
  - manually rm generated static libs


author: Ashish Samant <ashish.samant@oracle.com> - 2.9.4-1.0.4.el6
changelog:
  - Revert "libfuse: add flags to ->rename()" (Ashish Samant)  
  - Revert "libfuse: Disable renameat2 until proper support is added" (Ashish Samant)  
  - libfuse: Fix definition of fuse_parse_cmdline() (Ashish Samant)  
  - libfuse: Remove preun script that deleted fuse group from spec file (Ashish Samant)  
  - Add compatibility symlinks for ol6 (Ashish Samant)  
  - fix fusermount so it can only be executed by memebers of the fuse group (Ashish Samant)


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.7.0-2
changelog:
  - redefine exec_prefix to /
  - redefine bindir to /bin
  - redefine libdir to lib
  - don't pass --disable-static to configure
  - manually rm generated static libs


author: - nick.alcock@oracle.com - 0.5.0-3
changelog:
  - Include the distribution in the RPM release. [Orabug: 21211461]
  - No longer Provide: our own name. [Orabug: 21622263]


author: - nick.alcock@oracle.com - 0.7.1-1
changelog:
  - Fix CTF archive alignment and failed write() handling
    (Tomas Jedlicka) [Orabug: 27191792, 27204447]
  - Build on arm64 (Vincent Lim) [Orabug: 27418554]


author: Dan Duval <dan.duval@oracle.com> - 20140911-0.1.git365e80c.0.6
changelog:
  - update ql2400-firmware to 8.02.00-1.0.1 [orabug 22003659]
  - update ql2500-firmware to 8.02.00-1.0.1 [orabug 22003659]


author: Chuck Anderson <chuck.anderson@oracle.com> - 20140911-0.1.git365e80c.0.5
changelog:
  - add "Provides" for the ql* packages required by ovs-release.
  - remove amd-ucode firmware packages.
  - remove iwl* firmware packages [orabug 21879683]


author: Dan Duval <dan.duval@oracle.com> - 20140911-0.1.git365e80c.0.2
changelog:
  - Update ql2400 fw to 8.07.00-18.39.0K [orabug 21241070] (Dan Duval)
  - update ql2500 fw to 8.07.00-18.39.0K [orabug 21241070] (Dan Duval)


author: Jacob Wang <jacob.wang@oracle.com> - 20140911-0.1.git365e80c.0.1
changelog:
  - Update ql2400 fw to 7.04.00 [orabug 19884253] (Guangyu Sun)
  - Update ql2500 fw to 7.05.00 [orabug 19884253] (Guangyu Sun)
  - Update ql2400 and ql2500 fw to 7.03.00 [orabug 18640045] (Jerry Snitselaar)
  - Allow amd-ucode to load. Let's find out what bug 1007411 is. [orabug: 18520524] (Vaughan Cao)


author: Jarod Wilson <jarod@redhat.com> - 20140911-0.1.git365e80c
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Adds Intel Quick Assist Technology firmware (rhbz 1127338)
  - Updates bnx2x adapter firmware to version 7.10.51 (rhbz 1089403)
  - Updates myri10ge adapter firmware to version 1.4.57 (rhbz 1063702)
  - Removes firmware for drivers not shipped with Red Hat Enterprise Linux 7 (rhbz 1016595)


author: Jarod Wilson <jarod@redhat.com> - 20131106-0.1.git7d0c7a8
changelog:
  - Update to latest upstream linux-firmware to pick up bfa firmware (rhbz 1013426)
  - Fix up Obsoletes to all use <= comparisons


author: Jarod Wilson <jarod@redhat.com> - 20130820-0.3.git600caef
changelog:
  - Put in proper URL and URL-less Source0 location, and a note about how
    we generate the tarball by hand from a git tree


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959)
  - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)


author: Josh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954
changelog:
  - Fix location of BuildRequires so git is inclued in the buildroot
  - Create iwlXXXX-firmware subpackages (rhbz 828050)


author: Ben Skeggs <bskeggs@redhat.com> 20090106-2
changelog:
  - Add firmware needed for nouveau to operate correctly (this is Fedora
    only - do not upstream yet - we just moved it here from Fedora kernel)


author: Ethan Zhao <ethan.zhao@oracle.com> - 20160604-44.git57b649d9
changelog:
  - Pull last update from upstream linux-firmware repo. (Orabug 23337630)
  - Merged firmware from vendors for bug22066196,bug22066196,bug22003659,bug21879683


author: Ethan Zhao <ethan.zhao@oracle.com> - 20160616-44.git43e96a1e.0.12.el6
changelog:
  - ol6/spec: provide and obsolete iwl100-firmware (Ethan Zhao)  
  - ol6/spec: to provide version info for every individual package (Zhigang Wang)


author: Ethan Zhao <ethan.zhao@oracle.com> - 20170411-52.gitb1413458.0.1.el6
changelog:
  - BUILDINFO: commit=f3617f807a6073d516a96634a83dfe9b6f554bfb
  - ol6/spec: update version after merging from upstream


author: Ethan Zhao <ethan.zhao@oracle.com> - 20170803-56.git7d2c913d.0.1.el6
changelog:
  - BUILDINFO: commit=4281be765b50adce574f4eb11883b57172e6fc47
  - ol6/spec: merge upstream change and bump up version


author: Ethan Zhao <ethan.zhao@oracle.com> - 20170803-56.git7d2c913d.0.1.el6
changelog:
  - Merge upstream change and bump up version (Orabug 26586881)
  - opa: Revert switch firmware back to 0.47 (rhbz 1464629)


author: Ethan Zhao <ethan.zhao@oracle.com> - 20171128-56.git17e62881.0.2.el6
changelog:
  - BUILDINFO: commit=52f1ade25c53dbfbfd281252585da04629d44c32
  - ol6/spec: don't link to old cxgb4 FW files (Ethan Zhao)


author: Ethan Zhao <ethan.zhao@oracle.com> - 20171128-56.git17e62881.0.1.el6
changelog:
  - BUILDINFO: commit=ed88fc5c04ab2dc3d2ffe674bd123a7131f4ad23
  - ol6/spec: Bump up verson for updates from upstream and Qlogic


author: Ethan Zhao <ethan.zhao@oracle.com> - 20171128-56.git17e62881.0.1.el6
changelog:
  - Rebase, Merge upstream change and bump up version (Orabug 27181869)
  - Update qla2600,qla2700,qla8300 FW files (Orabug 27162419)


author: Eric Sandeen <sandeen@redhat.com> 3.1.0-1
changelog:
  - New upstream release
  - Minor fixups for new glibc headers
  - Fixes default mkfs.xfs on 4k sector device (#539553)


author: Eric Sandeen <sandeen@redhat.com> 2.10.1-4
changelog:
  - Add protection from borken sys_ustat
  - Add final upstream versions of gfs2 & parallel build patches


author: Eric Sandeen <sandeen@redhat.com> 2.9.8-1
changelog:
  - Update to xfsprogs 2.9.8
  - Add support for sb_features2 in wrong location
  - Add -c option to xfs_admin to turn lazy-counters on/off
  - Added support for mdp in libdisk/mkfs.xfs


author: Eric Sandeen <sandeen@redhat.com> 2.9.6-1
changelog:
  - Update to xfsprogs 2.9.6 - fixes mkfs sizing problem.
  - Trim down BuildRequires to what's actually required now


author: Eric Sandeen <sandeen@redhat.com> 2.9.5-1
changelog:
  - Update to xfsprogs 2.9.5
  - Contains more optimal mkfs defaults
  - specfile cleanup, & don't restate config defaults


author: Robert Scheck <redhat@linuxnetz.de> 2.8.3-1
changelog:
  - Upgrade to 2.8.3 (#196599)
  - Applied Russell Coker's suggested patch to improve the
    performance for SELinux machines significantly (#120622)


author: Jeremy Katz <katzj@redhat.com> - 2.6.13-1
changelog:
  - update to 2.6.13 per request of upstream
  - fixes mount by label of xfs on former raid partition (#122043)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.42.3.el6uek]
changelog:
  - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices (Tomas Bortoli)  [Orabug: 31351221]  {CVE-2019-19535} 
  - media: hdpvr: Fix an error handling path in hdpvr_probe() (Arvind Yadav)  [Orabug: 31352053]  {CVE-2017-16644} 
  - fs/binfmt_misc.c: do not allow offset overflow (Thadeu Lima de Souza Cascardo)  [Orabug: 31588258]  
  - clear inode and truncate pages before enqueuing for async inactivation (Gautham Ananthakrishna)  [Orabug: 31744270]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.42.2.el6uek]
changelog:
  - mm: create alloc_last_chance debugfs entries (Mike Kravetz)  [Orabug: 31295499]  
  - mm: perform 'last chance' reclaim efforts before allocation failure (Mike Kravetz)  [Orabug: 31295499]  
  - mm: let page allocation slowpath retry 'order' times (Mike Kravetz)  [Orabug: 31295499]  
  - fix kABI breakage from "netns: provide pure entropy for net_hash_mix()" (Dan Duval)  [Orabug: 31351904]  {CVE-2019-10638} {CVE-2019-10639} 
  - netns: provide pure entropy for net_hash_mix() (Eric Dumazet)  [Orabug: 31351904]  {CVE-2019-10638} {CVE-2019-10639} 
  - hrtimer: Annotate lockless access to timer->base (Eric Dumazet)  [Orabug: 31380495]  
  - rds: ib: Revert "net/rds: Avoid stalled connection due to CM REQ retries" (Håkon Bugge)  [Orabug: 31648141]  
  - rds: Clear reconnect pending bit (Håkon Bugge)  [Orabug: 31648141]  
  - RDMA/netlink: Do not always generate an ACK for some netlink operations (Håkon Bugge)  [Orabug: 31666975]  
  - genirq/proc: Return proper error code when irq_set_affinity() fails (Wen Yaxng)  [Orabug: 31723450]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.42.1.el6uek]
changelog:
  - fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Alexander Potapenko)  [Orabug: 31350639]  {CVE-2020-10732} 
  - crypto: user - fix memory leak in crypto_report (Navid Emamdoost)  [Orabug: 31351640]  {CVE-2019-19062} 
  - of: unittest: fix memory leak in unittest_data_add (Navid Emamdoost)  [Orabug: 31351702]  {CVE-2019-19049} 
  - IB/sa: Resolv use-after-free in ib_nl_make_request() (Divya Indi)  [Orabug: 31656992]  
  - net-sysfs: call dev_hold if kobject_init_and_add success (YueHaibing)  [Orabug: 31687545]  {CVE-2019-20811}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.41.4.el6uek]
changelog:
  - uek-rpm: Add OL6 shim conflict for new signing key (Eric Snowberg)  [Orabug: 31688239]  
  - Revert "certs: Add Oracle's new X509 cert into the kernel keyring" (Eric Snowberg)  [Orabug: 31688223]  
  - blk-mq: don't overwrite rq->mq_ctx (Jens Axboe)  [Orabug: 31457304]  
  - blk-mq: mark ctx as pending at batch in flush plug path (Ming Lei)  [Orabug: 31457304]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.41.3.el6uek]
changelog:
  - scsi: qla2xxx: Fix stuck session in GNL (Quinn Tran)  [Orabug: 31561461]  
  - scsi: qla2xxx: Serialize session free in qlt_free_session_done (Quinn Tran)  [Orabug: 31561461]  
  - scsi: qla2xxx: v2: Change abort wait_loop from msleep to wait_event_timeout (Giridhar Malavali)  [Orabug: 26932683]  
  - scsi: qla2xxx: v2: Move ABTS code behind qpair (Quinn Tran)  [Orabug: 31517449]  
  - ocfs2: change slot number type s16 to u16 (Junxiao Bi)  [Orabug: 31027042]  
  - ocfs2: fix value of OCFS2_INVALID_SLOT (Junxiao Bi)  [Orabug: 31027042]  
  - ocfs2: fix panic on nfs server over ocfs2 (Junxiao Bi)  [Orabug: 31027042]  
  - ocfs2: load global_inode_alloc (Junxiao Bi)  [Orabug: 31027042]  
  - ocfs2: avoid inode removal while nfsd is accessing it (Junxiao Bi)  [Orabug: 31027042]  
  - block_dev: don't test bdev->bd_contains when it is not stable (NeilBrown)  [Orabug: 31554143]  
  - KVM: x86: Remove spurious semicolon (Joao Martins)  [Orabug: 31584727]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.41.2.el6uek]
changelog:
  - media: rc: prevent memory leak in cx23888_ir_probe (Navid Emamdoost)  [Orabug: 31351672]  {CVE-2019-19054} 
  - vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio/pci: Mask buggy SR-IOV VF INTx support (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} {CVE-2020-12888} 
  - vfio/pci: Pull BAR mapping setup from read-write path (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio_pci: Enable memory accesses before calling pci_map_rom (Eric Auger)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio/type1: Support faulting PFNMAP vmas (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - mm: bring in additional flag for fixup_user_fault to signal unlock (Dominik Dingel)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (Sean Christopherson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - x86/mitigations: reset default value for srbds_mitigation (Mihai Carabas)  [Orabug: 31514993]  
  - x86/cpu: clear X86_BUG_SRBDS before late loading (Mihai Carabas)  [Orabug: 31514993]  
  - x86/mitigations: update MSRs on all CPUs for SRBDS (Mihai Carabas)  [Orabug: 31514993]  
  - Revert "x86/efi: Request desired alignment via the PE/COFF headers" (Matt Fleming)  [Orabug: 31602576]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.41.1.el6uek]
changelog:
  - can, slip: Protect tty->disc_data in write_wakeup and close with RCU (Richard Palethorpe)  [Orabug: 31516085]  {CVE-2020-14416} 
  - scsi: qla2xxx: Fix warning in qla2x00_async_iocb_timeout() (himanshu.madhani@cavium.com)  [Orabug: 31530589]  
  - scsi: qla2xxx: Fix NULL pointer access for fcport structure (Quinn Tran)  [Orabug: 31530589]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.6.el6uek]
changelog:
  - ipv4: ipv4_default_advmss() should use route mtu (Eric Dumazet)  [Orabug: 31563095]  
  - net: ipv4: Refine the ipv4_default_advmss (Gao Feng)  [Orabug: 31563095]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.5.el6uek]
changelog:
  - Revert "bnxt_en: Remove busy poll logic in the driver." (Brian Maly)  [Orabug: 28151475]  
  - md: batch flush requests. (NeilBrown)  [Orabug: 31332821]  
  - ALSA: core: Fix card races between register and disconnect (Takashi Iwai)  [Orabug: 31351891]  {CVE-2019-15214} 
  - media: dvb-usb-v2: lmedm04: move ts2020 attach to dm04_lme2510_tuner (Malcolm Priestley)  [Orabug: 31352061]  {CVE-2017-16538} 
  - media: dvb-usb-v2: lmedm04: Improve logic checking of warm start (Malcolm Priestley)  [Orabug: 31352061]  {CVE-2017-16538} 
  - atomic_open(): fix the handling of create_error (Al Viro)  [Orabug: 31493395]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.4.el6uek]
changelog:
  - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (Tomas Bortoli)  [Orabug: 31351119]  {CVE-2019-19533} 
  - NFS: Fix a performance regression in readdir (Trond Myklebust)  [Orabug: 31409061]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.3.el6uek]
changelog:
  - x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping (Jia Zhang)  [Orabug: 31475612]  {CVE-2020-0543}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.2.el6uek]
changelog:
  - MCE: Restrict MCE banks to 6 on AMD platform (Zhenzhong Duan)  [Orabug: 30000521]  
  - can: peak_usb: fix slab info leak (Johan Hovold)  [Orabug: 31351141]  {CVE-2019-19534} 
  - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices (Tomas Bortoli)  [Orabug: 31351250]  {CVE-2019-19536} 
  - xfs: fix freeze hung (Junxiao Bi)  [Orabug: 31430876]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.5.el6uek]
changelog:
  - Input: ff-memless - kill timer in destroy() (Oliver Neukum)  [Orabug: 31213691]  {CVE-2019-19524} 
  - libertas: Fix two buffer overflows at parsing bss descriptor (Wen Huang)  [Orabug: 31351307]  {CVE-2019-14896} {CVE-2019-14897} {CVE-2019-14897} 
  - binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Kees Cook)  [Orabug: 31352068]  {CVE-2017-1000370} {CVE-2017-1000371} {CVE-2017-1000370} 
  - NFSv4.0: Remove transport protocol name from non-UCS client ID (Chuck Lever)  [Orabug: 31357212]  
  - NFSv4.0: Remove cl_ipaddr from non-UCS client ID (Chuck Lever)  [Orabug: 31357212]  
  - xen/manage: enable C_A_D to force reboot (Dongli Zhang)  [Orabug: 31387466]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.4.el6uek]
changelog:
  - acpi: disable erst (Wengang Wang)  [Orabug: 31194253]  
  - mdio_bus: Fix use-after-free on device_register fails (YueHaibing)  [Orabug: 31222292]  {CVE-2019-12819} 
  - rds: ib: Fix dysfunctional long address resolve timeout (Håkon Bugge)  [Orabug: 31302708]  
  - vxlan: dont migrate permanent fdb entries during learn (Roopa Prabhu)  [Orabug: 31325318]  
  - USB: iowarrior: fix use-after-free on disconnect (Johan Hovold)  [Orabug: 31351061]  {CVE-2019-19528} 
  - usb: iowarrior: fix deadlock on disconnect (Oliver Neukum)  [Orabug: 31351061]  {CVE-2019-19528} 
  - mremap: properly flush TLB before releasing the page (Linus Torvalds)  [Orabug: 31352011]  {CVE-2018-18281}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.3.el6uek]
changelog:
  - Input: add safety guards to input_set_keycode() (Dmitry Torokhov)  [Orabug: 31200558]  {CVE-2019-20636} 
  - media: stv06xx: add missing descriptor sanity checks (Johan Hovold)  [Orabug: 31200579]  {CVE-2020-11609} 
  - media: ov519: add missing endpoint sanity checks (Johan Hovold)  [Orabug: 31213758]  {CVE-2020-11608} 
  - media: xirlink_cit: add missing descriptor sanity checks (Johan Hovold)  [Orabug: 31213767]  {CVE-2020-11668} 
  - mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring (Navid Emamdoost)  [Orabug: 31263147]  {CVE-2019-19057} 
  - USB: core: Fix races in character device registration and deregistraion (Alan Stern)  [Orabug: 31317667]  {CVE-2019-19537}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.2.el6uek]
changelog:
  - genirq: Use rcu in kstat_irqs_usr() (Eric Dumazet)   
  - genirq: Make sparse_irq_lock protect what it should protect (Thomas Gleixner)  [Orabug: 30953676]  
  - genirq: Free irq_desc with rcu (Thomas Gleixner)  [Orabug: 30953676]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.1.el6uek]
changelog:
  - qla2xxx: Update driver version to 9.00.00.00.42.0-k1-v2 (Arun Easi)  [Orabug: 30372266]  
  - qla2xxx: Fix device discovery when FCP2 device is lost. (Arun Easi)  [Orabug: 30372266]  
  - brcmfmac: add subtype check for event handling in data path (John Donnelly)  [Orabug: 30776354]  {CVE-2019-9503} 
  - percpu-refcount: fix reference leak during percpu-atomic transition (Douglas Miller)  [Orabug: 30867060]  
  - blk-mq: Allow timeouts to run while queue is freezing (Gabriel Krisman Bertazi)  [Orabug: 30867060]  
  - fs/dcache.c: fix spin lockup issue on nlru->lock (Junxiao Bi)  [Orabug: 30953290]  
  - jbd2: disable CONFIG_JBD2_DEBUG (Junxiao Bi)  [Orabug: 31234664]  
  - mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf (Navid Emamdoost)  [Orabug: 31246302]  {CVE-2019-19056} 
  - drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl() (Vladis Dronov)  [Orabug: 31262557]  {CVE-2017-7346}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.5.el6uek]
changelog:
  - i40e: Increment the driver version for FW API update (Jack Vogel)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Update FW API version to 1.9 (Piotr Azarewicz)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Changed maximum supported FW API version to 1.8 (Adam Ludkiewicz)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Stop dropping 802.1ad tags - eth proto 0x88a8 (Scott Peterson)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: fix reading LLDP configuration (Mariusz Stachura)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Add capability flag for stopping FW LLDP (Krzysztof Galazka)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: refactor FW version checking (Mitch Williams)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: shutdown all IRQs and disable MSI-X when suspended (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: prevent service task from running while we're suspended (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: don't clear suspended state until we finish resuming (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: use newer generic PM support instead of legacy PM callbacks (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: use separate state bit for miscellaneous IRQ setup (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: fix for flow director counters not wrapping as expected (Mariusz Stachura)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: relax warning message in case of version mismatch (Mariusz Stachura)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: simplify member variable accesses (Sudheer Mogilappagari)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Fix link down message when interface is brought up (Sudheer Mogilappagari)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Fix unqualified module message while bringing link up (Sudheer Mogilappagari)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.4.el6uek]
changelog:
  - HID: Fix assumption that devices have inputs (Alan Stern)  [Orabug: 31208622]  {CVE-2019-19532} 
  - qla2xxx: DBG: disable 3D mailbox. (Quinn Tran)  [Orabug: 30890687]  
  - scsi: qla2xxx: Fix mtcp dump collection failure (Quinn Tran)  [Orabug: 30890687]  
  - scsi: qla2xxx: Add Serdes support for ISP27XX (Joe Carnuccio)  [Orabug: 30890687]  
  - vgacon: Fix a UAF in vgacon_invert_region (Zhang Xiaoxu)  [Orabug: 31143947]  {CVE-2020-8649} {CVE-2020-8647} {CVE-2020-8647} {CVE-2020-8649} {CVE-2020-8649} {CVE-2020-8647} 
  - HID: hiddev: do cleanup in failure of opening a device (Hillf Danton)  [Orabug: 31206360]  {CVE-2019-19527} 
  - HID: hiddev: avoid opening a disconnected device (Hillf Danton)  [Orabug: 31206360]  {CVE-2019-19527} 
  - USB: adutux: fix use-after-free on disconnect (Johan Hovold)  [Orabug: 31233769]  {CVE-2019-19523}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.3.el6uek]
changelog:
  - ipv4: implement support for NOPREFIXROUTE ifa flag for ipv4 address (Paolo Abeni)  [Orabug: 30292825]  
  - vt: selection, push sel_lock up (Jiri Slaby)  [Orabug: 30923298]  {CVE-2020-8648} 
  - vt: selection, push console lock down (Jiri Slaby)  [Orabug: 30923298]  {CVE-2020-8648} 
  - vt: selection, close sel_buffer race (Jiri Slaby)  [Orabug: 30923298]  {CVE-2020-8648} {CVE-2020-8648} 
  - xfs: stop searching for free slots in an inode chunk when there are none (Carlos Maiolino)  [Orabug: 31030659]  
  - xfs: fix up xfs_swap_extent_forks inline extent handling (Eric Sandeen)  [Orabug: 31032831]  
  - xfs: validate sb_logsunit is a multiple of the fs blocksize (Darrick J. Wong)  [Orabug: 31034071]  
  - mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Wen Huang)  [Orabug: 31104481]  {CVE-2019-14814} {CVE-2019-14815} {CVE-2019-14816} {CVE-2019-14814} {CVE-2019-14815} {CVE-2019-14816}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.2.el6uek]
changelog:
  - rds: fix an infoleak in rds_inc_info_copy (Kangjie Lu)  [Orabug: 30770962]  {CVE-2016-5244} 
  - xfs: do async inactivation only when fs freezed (Junxiao Bi)  [Orabug: 30944736]  
  - xfs: fix deadlock between shrinker and fs freeze (Junxiao Bi)  [Orabug: 30944736]  
  - xfs: increase the default parallelism levels of pwork clients (Junxiao Bi)  [Orabug: 30944736]  
  - xfs: decide if inode needs inactivation (Junxiao Bi)  [Orabug: 30944736]  
  - xfs: refactor the predicate part of xfs_free_eofblocks (Junxiao Bi)  [Orabug: 30944736]  
  - floppy: check FDC index for errors before assigning it (Linus Torvalds)  [Orabug: 31067516]  {CVE-2020-9383} 
  - KVM: x86: clear stale x86_emulate_ctxt->intercept value (Vitaly Kuznetsov)  [Orabug: 31118691]  
  - slcan: Don't transmit uninitialized stack data in padding (Richard Palethorpe)  [Orabug: 31136753]  {CVE-2020-11494}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.1.el6uek]
changelog:
  - rds: transport module should be auto loaded when transport is set (Rao Shoaib)  [Orabug: 31031928]  
  - KVM: X86: Fix NULL deref in vcpu_scan_ioapic (Wanpeng Li)  [Orabug: 31078882]  
  - vhost: Check docket sk_family instead of call getname (Eugenio Pérez)  [Orabug: 31085993]  {CVE-2020-10942} 
  - Revert "oled: give panic handler chance to run before kexec" (Wengang Wang)  [Orabug: 31098797]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.37.3.el6uek]
changelog:
  - kernel: cpu.c: fix return in void function cpu_smt_disable (Mihai Carabas)  [Orabug: 31047871]  
  - net: qlogic: Fix memory leak in ql_alloc_large_buffers (Navid Emamdoost)  [Orabug: 31055327]  {CVE-2019-18806} 
  - swiotlb: clean up reporting (Kees Cook)  [Orabug: 31085017]  {CVE-2018-5953} 
  - KVM: x86: Expose more Intel AVX512 feature to guest (Luwei Kang)  [Orabug: 31085086]  
  - x86/cpufeature: Enable new AVX-512 features (Fenghua Yu)  [Orabug: 31085086]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.37.2.el6uek]
changelog:
  - xenbus: req->err should be updated before req->state (Dongli Zhang)  [Orabug: 30705030]  
  - xenbus: req->body should be updated before req->state (Dongli Zhang)  [Orabug: 30705030]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.37.1.el6uek]
changelog:
  - Revert "printk: Default console logging level should be set to 4" (Cesar Roque)  [Orabug: 30931820]  
  - rds: If one path needs re-connection, check all and re-connect (Rao Shoaib)  [Orabug: 30870743]  
  - xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (kaixuxia)  [Orabug: 30902190]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.4.el6uek]
changelog:
  - KVM: nVMX: Check IO instruction VM-exit conditions (Oliver Upton)  [Orabug: 30944739]  {CVE-2020-2732} 
  - KVM: nVMX: Refactor IO bitmap checks into helper function (Oliver Upton)  [Orabug: 30944739]  {CVE-2020-2732} 
  - KVM: nVMX: Don't emulate instructions in guest mode (Paolo Bonzini)  [Orabug: 30944739]  {CVE-2020-2732}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.3.el6uek]
changelog:
  - Fix KABI error by keeping the struct field being removed by the below patch (Ritika Srivastava)  [Orabug: 30902926]  
  - Revert "PCI: Check pref compatible bit for mem64 resource of PCIe device" (Ritika Srivastava)  [Orabug: 30902926]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.2.el6uek]
changelog:
  - rds: Use bitmap to designate dropped connections (Håkon Bugge)  [Orabug: 30868399]  
  - rds: Avoid flushing MRs in rds_rdma_drop_keys (aru kolappan)  [Orabug: 29797476]  
  - CIFS: fix POSIX lock leak and invalid ptr deref (Aurelien Aptel)  [Orabug: 30399972]  
  - mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (qize wang)  [Orabug: 30819439]  {CVE-2019-14901} 
  - media: b2c2-flexcop-usb: add sanity checking (Oliver Neukum)  [Orabug: 30864533]  {CVE-2019-15291} 
  - rds: prevent use-after-free of rds conn in rds_send_drop_to() (Sharath Srinivasan)  [Orabug: 30865080]  
  - KVM: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: x86: do not modify masked bits of shared MSRs (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini)  [Orabug: 30867886]  
  - slub: do not sanity check if SLAB_DEBUG_FREE is not set (Dongli Zhang)  [Orabug: 30903145]  
  - slub: extend slub debug to handle multiple slabs (Aaron Tomlin)  [Orabug: 30903145]  
  - Fix kmalloc slab creation sequence (Christoph Lameter)  [Orabug: 30903145]  
  - slab: correct size_index table before replacing the bootstrap kmem_cache_node (Daniel Sanders)  [Orabug: 30903145]  
  - mm/slab_common: support the slub_debug boot option on specific object size (Gavin Guo)  [Orabug: 30903145]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.1.el6uek]
changelog:
  - iscsi-target: graceful disconnect on invalid mapping to iovec (Imran Haider)  [Orabug: 30459537]  
  - x86/microcode: Issue update message only once (Borislav Petkov)  [Orabug: 30528904]  
  - x86/microcode/intel: Issue the revision updated message only on the BSP (Borislav Petkov)  [Orabug: 30528904]  
  - KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) (Paolo Bonzini)  [Orabug: 30658695]  {CVE-2019-19332} 
  - rtlwifi: Fix potential overflow on P2P code (Laura Abbott)  [Orabug: 30807748]  {CVE-2019-17666}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.5.el6uek]
changelog:
  - x86: microcode: propagate return value to siblings (Mihai Carabas)  [Orabug: 30557086]  
  - x86/bugs: TSX not disabled at late loading (Mihai Carabas)  [Orabug: 30557086]  
  - mlx5: lock mlx5_core to prevent module unload (Brian Maly)  [Orabug: 30566775]  
  - rds: RDS/TCP does not initiate a connection (Ka-Cheong Poon)  [Orabug: 30576433]  
  - x86: bugs: replace static_ with boot_ for CPU bugs mitigations (Mihai Carabas)  [Orabug: 30649400]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.4.el6uek]
changelog:
  - IB/mlx4: Fix use after free in RDMA CM disconnect code path (Manjunath Patil)   
  - IB/mlx4: Fix leak in id_map_find_del (Håkon Bugge)  [Orabug: 30800573]  
  - Revert "IB/mlx4: Fix leak in id_map_find_del" (Manjunath Patil)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.3.el6uek]
changelog:
  - mm/slub: don't wait for high-order page allocation (Mridula Shastry)  [Orabug: 30651572]  
  - scsi: lpfc: Handle new link fault code returned by adapter firmware. (James Smart)  [Orabug: 30708960]  
  - IB/mlx4: Fix leak in id_map_find_del (Haakon Bugge)  [Orabug: 30778457]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.1.el6uek]
changelog:
  - ixgbe: protect TX timestamping from API misuse (Manjunath Patil)  [Orabug: 30275491]  
  - block: init flush rq ref count to 1 (Josef Bacik)  [Orabug: 30360559]  
  - block: fix null pointer dereference in blk_mq_rq_timed_out() (Yufen Yu)  [Orabug: 30360559]  
  - blk-mq: Remove generation seqeunce (Keith Busch)  [Orabug: 30360559]  
  - scsi: libsas: delete sas port if expander discover failed (Jason Yan)  [Orabug: 30580687]  {CVE-2019-15807} 
  - scsi: qla2xxx: fix a potential NULL pointer dereference (Allen Pais)  [Orabug: 30618784]  {CVE-2019-16233} 
  - printk: Default console logging level should be set to 4 (Boris Ostrovsky)  [Orabug: 30657070]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.34.2.el6uek]
changelog:
  - scsi: lpfc: Remove lpfc_enable_pbde as module parameter (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Make PBDE optimizations configurable (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Update driver version to 11.4.0.8 and Copyright updates (Ketan Mukadam)  [Orabug: 30569875]  
  - scsi: lpfc: Fix ELS abort on SLI-3 adapters (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Correct race with abort on completion path (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: update manufacturer attribute to reflect Broadcom (James Smart)  [Orabug: 30569875] [Orabug: 29212758]  
  - scsi: lpfc: Enable Management features for IF_TYPE=6 (James Smart)  [Orabug: 30569875] [Orabug: 29212758]  
  - scsi: lpfc: Correct topology type reporting on G7 adapters (James Smart)  [Orabug: 30569875] [Orabug: 29212758]  
  - scsi: lpfc: Correct invalid EQ doorbell write on if_type=6 (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Fix driver not setting dpp bits correctly in doorbell word (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Enhance log messages when reporting CQE errors (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Fix frequency of Release WQE CQEs (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Code cleanup for 128byte wqe data type (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: use __raw_writeX on DPP copies (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add embedded data pointers for enhanced performance (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Enable fw download on if_type=6 devices (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add if_type=6 support for cycling valid bits (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add 64G link speed support (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add PCI Ids for if_type=6 hardware (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add push-to-adapter support to sli4 (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add SLI-4 if_type=6 support to the code base (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Rework sli4 doorbell infrastructure (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Rework lpfc to allow different sli4 cq and eq handlers (James Smart)  [Orabug: 30569875]  
  - x86/bugs: use check_bugs instead of microcode_late_select_mitigation (Mihai Carabas)  [Orabug: 30332499]  
  - x86/bugs: spec_ctrl_mutex taken in stop_machine context (Mihai Carabas)  [Orabug: 30332499]  
  - x86/microcode: moved cpu feature late eval to stop_machine (Mihai Carabas)  [Orabug: 30332499]  
  - x86/cpu: Re-apply forced caps every time CPU caps are re-read (Andy Lutomirski)  [Orabug: 30332499]  
  - x86/microcode/intel: Check microcode revision before updating sibling threads (Ashok Raj)  [Orabug: 30332499]  
  - tracing: Fix possible double free on failure of allocating trace buffer (Steven Rostedt (VMware))  [Orabug: 30633873]  {CVE-2017-18595}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.34.1.el6uek]
changelog:
  - block/loop: set hw_sectors (Shaohua Li)  [Orabug: 30244514]  
  - block-mq: fix hung due to too much warning log (Junxiao Bi)  [Orabug: 30273956]  
  - oled: export symbols (Wengang Wang)  [Orabug: 30512063]  
  - oled: give panic handler chance to run before kexec (Wengang Wang)  [Orabug: 30512063]  
  - USB: sisusbvga: fix oops in error path of sisusb_probe (Oliver Neukum)  [Orabug: 30548565]  {CVE-2019-15219}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.5.el6uek]
changelog:
  - net/mlx5: bump driver rev (Brian Maly)  [Orabug: 30479538]  
  - net/mlx5: Add 25G and 50G types (John Donnelly)  [Orabug: 30479538]  
  - net/mlx5: Add ConnectX-5 PCIe 4.0 VF device ID (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Fix pci error recovery flow (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - net/mlx5: Add timeout handle to commands with callback (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - net/mlx5: Fix potential deadlock in command mode change (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - net/mlx5: Fix wait_vital for VFs and remove fixed sleep (Daniel Jurgens)  [Orabug: 30479538]  
  - net/mlx5: Add ConnectX-5 PCIe 4.0 to list of supported devices (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5e: Add missing 50G baseSR2 link mode (Gal Pressman)  [Orabug: 30479538]  
  - net/mlx5_core: Add ConnectX-5 to list of supported devices (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5e: Fix MLX5E_100BASE_T define (Rana Shahout)  [Orabug: 30479538]  
  - net/mlx5e: Fix soft lockup when HW Timestamping is enabled (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5: Make command timeout way shorter (Or Gerlitz)  [Orabug: 30479538]  
  - net/mlx5: Fix teardown errors that happen in pci error handler (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - IB/mlx5: Support setting Ethernet priority for Raw Packet QPs (majd@mellanox.com)  [Orabug: 30479538]  
  - IB/mlx5: Add Raw Packet QP query functionality (majd@mellanox.com)  [Orabug: 30479538]  
  - net/mlx5_core: Warn on unsupported events of QP/RQ/SQ (majd@mellanox.com)  [Orabug: 30479538]  
  - net/mlx5_core: Add RQ and SQ event handling (majd@mellanox.com)  [Orabug: 30479538]  
  - net/mlx5_core: Export transport objects (majd@mellanox.com)  [Orabug: 30479538]  
  - IB/mlx5: Add CQE version 1 support to user QPs and SRQs (Haggai Abramovsky)  [Orabug: 30479538]  
  - net/mlx5_core: Fix trimming down IRQ number (Doron Tsur)  [Orabug: 30479538]  
  - net/mlx5_core: Export flow steering API (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Make ipv4/ipv6 location more clear (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Enable flow steering support for the IB driver (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Initialize namespaces only when supported by device (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Set priority attributes (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Connect flow tables (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce modify flow table command (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Managing root flow table (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Add utilities to find next and prev flow-tables (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce flow steering autogrouped flow table (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5e: Add PTP Hardware Clock (PHC) support (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5e: Add HW timestamping (TS) support (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce access function to read internal timer (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5e: Do not modify the TX SKB (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Add setting ATOMIC endian mode (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce access functions to enable/disable RoCE (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Break down the vport mac address query function (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Rename en_flow_table.c to en_fs.c (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5: Use flow steering infrastructure for mlx5_en (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Flow steering tree initialization (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce flow steering API (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Add flow steering lookup algorithms (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Add flow steering base data structures (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce flow steering firmware commands (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5e: Assign random MAC address if needed (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Fix query E-Switch capabilities (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Add support for SR-IOV ndos (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce get vf statistics (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce set vport vlan (VST mode) (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce HCA cap and E-Switch vport context (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce Vport administration functions (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Add SR-IOV (FDB) support (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce FDB hardware capabilities (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introducing E-Switch and l2 table (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Write vlan list into vport context (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Write UC/MC list and promisc mode into vport context (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport vlans (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport promisc mode (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport state (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport mac lists (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Update access functions to Query/Modify vport MAC address (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Add HW capabilities and structs for SR-IOV E-Switch (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: Add base sriov support (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Modify enable/disable hca functions (Eli Cohen)  [Orabug: 30479538]  
  - mlx5: support napi_complete_done() (Eric Dumazet)  [Orabug: 30479538]  
  - mlx5: add busy polling support (Eric Dumazet)  [Orabug: 30479538]  
  - net/mlx5e: Use the right DMA free function on TX path (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Max mtu comparison fix (Doron Tsur)  [Orabug: 30479538]  
  - net/mlx5e: Added self loopback prevention (Tariq Toukan)  [Orabug: 30479538]  
  - net/mlx5e: Fix inline header size calculation (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Fix LSO vlan insertion (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Re-eanble client vlan TX acceleration (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Return error in case mlx5e_set_features() fails (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Don't allow more than max supported channels (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Use the the real irqn in eq->irqn (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Wait for RX buffers initialization in a more proper manner (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid NULL pointer access in case of configuration failure (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Wait for FW readiness on startup (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Add pci error handlers to mlx5_core driver (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Fix internal error detection conditions (Eli Cohen)  [Orabug: 30479538]  
  - mlx5: stop including <asm-generic/kmap_types.h> (Christoph Hellwig)  [Orabug: 30479538]  
  - net/mlx5e: Disable VLAN filter in promiscuous mode (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5: Fix typo in mlx5_query_port_pvlc (Jiri Pirko)  [Orabug: 30479538]  
  - net/mlx5_core: Use private health thread for each device (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Use accessor functions to read from device memory (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Prepare cmd interface to system errors handling (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Improve mlx5 messages (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Update health syndromes (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Fix wrong name in struct (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: New init and exit flow for mlx5_core (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Fix notification of page supplement error (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Fix async commands return code (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Remove redundant "err" variable usage (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Fix struct type in the DESTROY_TIR/TIS device commands (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Priv state flag not rolled-back upon netdev open error (Achiad Shochat)  [Orabug: 30479538]  
  - IB/mlx5: Remove support for IB_DEVICE_LOCAL_DMA_LKEY (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Fix incorrect wc pkey_index assignment for GSI messages (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Expose max_sge_rd correctly (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Expose correct page_size_cap in device attributes (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Fix missing device local_dma_lkey (Sagi Grimberg)  [Orabug: 30479538]  
  - net/mlx5e: Avoid accessing NULL pointer at ndo_select_queue (Rana Shahout)  [Orabug: 30479538]  
  - mlx5e: Fix sparse warnings in mlx5e_handle_csum(). (David S. Miller)  [Orabug: 30479538]  
  - net/mlx5e: Support RX CHECKSUM_COMPLETE (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support ethtool get/set_pauseparam (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Ethtool link speed setting fixes (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: HW LRO changes/fixes (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support smaller RX/TX ring sizes (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Add ethtool RSS configuration options (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Make RSS indirection table size a constant (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Have a single RSS Toeplitz hash key (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Set log_uar_page_sz for non 4K page size architecture (Carol L Soto)  [Orabug: 30479538]  
  - net/mlx5_core: Support physical port counters (Gal Pressman)  [Orabug: 30479538]  
  - net/mlx5e: Take advantage of the light-weight netdev open/stop (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Disable async events before unregister_netdev() (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Rename/move functions following the ndo_stop flow change (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Light-weight netdev open/stop (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce access function to modify RSS/LRO params (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Introduce the "Drop RQ" (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Unify the RX flow (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove the mlx5e_update_priv_params() function (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Introduce create/destroy RSS indir table access functions (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Do not use netdev_err() before the netdev is registered (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid redundant de-reference (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove redundant assignment of sq->user_index (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove redundant field mlx5e_priv->num_tc (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Use hard-coded 4K page size for RQ/SQ/CQ (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Check the return value of mlx5_command_exec() (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5e: Input IPSEC.SPI into the RX RSS hash function (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Cosmetics: use BIT() instead of "1 <<", and others (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: TX latency optimization to save DMA reads (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support TX packet copy into WQE (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Allocate DMA coherent memory on reader NUMA node (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Support ETH_RSS_HASH_XOR (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Prefetch skb data on RX (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Pop cq outside mlx5e_get_cqe (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove mlx5e_cq.sqrq back-pointer (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove extra spaces (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid TX CQE generation if more xmit packets expected (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid redundant dev_kfree_skb() upon NOP completion (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove re-assignment of wq type in mlx5e_enable_rq() (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Use skb_shinfo(skb)->gso_segs rather than counting them (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Static mapping of netdev priv resources to/from netdev TX queues (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Add transport domain to the ethernet TIRs/TISs (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Add transport domain alloc/dealloc support (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support NETIF_F_SG (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Enforce max flow-tables level >= 3 (Gal Pressman)  [Orabug: 30479538]  
  - net/mlx5e: Disable client vlan TX acceleration (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Add HW cacheline start padding (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Fix HW MTU settings (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: fix an error code (Dan Carpenter)  [Orabug: 30479538]  
  - net/mlx5_core: Fix static checker warnings around system guid query flow (Majd Dibbiny)  [Orabug: 30479538]  
  - mlx5: Enable mutual support for IB and Ethernet (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_core: Add more query port helpers (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Use port number when querying port ptys (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Use port number in the query port mtu helpers (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Get vendor-id using the query adapter command (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Add new query HCA vport commands (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Make the vport helpers available for the IB driver too (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Check the return bitmask when querying ISSI (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_core: Enable XRCs and SRQs when using ISSI > 0 (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_core: Apply proper name convention to helpers (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_en: Add missing check for memory allocation failure (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5: Extend mlx5_core to support ConnectX-4 Ethernet functionality (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5: Ethernet resource handling files (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5: Ethernet Datapath files (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5_core: Set/Query port MTU commands (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: Modify CQ moderation parameters (Rana Shahout)  [Orabug: 30479538]  
  - net/mlx5_core: Implement get/set port status (Rana Shahout)  [Orabug: 30479538]  
  - net/mlx5_core: Implement access functions of ptys register fields (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: New device capabilities handling (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: HW data structs/types definitions cleanup (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: Set irq affinity hints (Saeed Mahameed)  [Orabug: 30479538]  
  - mlx5: add kcompat.h (Brian Maly)  [Orabug: 30479538]  
  - net/mlx5_core,mlx5_ib: Do not use vmap() on coherent memory (Amir Vadai)  [Orabug: 30479538]  
  - mlx5: enable module in kernel configs (Brian Maly)  [Orabug: 30479538]  
  - config: disable mlx5_ib (Brian Maly)  [Orabug: 30479538]  
  - nano: remove mlx5_ib (Brian Maly)  [Orabug: 30479538]  
  - fix retpoline build breakage when CONFIG_RETPOLINE is not set (Brian Maly)  [Orabug: 30479538]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.4.el6uek]
changelog:
  - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() (Shuning Zhang)  [Orabug: 30036349]  
  - ocfs2: direct-IO: protect get_blocks (Junxiao Bi)  [Orabug: 30036349]  
  - SUNRPC: Remove xprt_connect_status() (Trond Myklebust)  [Orabug: 30165838]  
  - SUNRPC: Handle ENETDOWN errors (Trond Myklebust)  [Orabug: 30165838]  
  - vhost: make sure log_num < in_num (yongduan)  [Orabug: 30312787]  {CVE-2019-14835} 
  - vhost: block speculation of translated descriptors (Michael S. Tsirkin)  [Orabug: 30312787]  {CVE-2019-14835} 
  - vhost: Fix Spectre V1 vulnerability (Jason Wang)  [Orabug: 30312787]  
  - array_index_nospec: Sanitize speculative array de-references (Dan Williams)  [Orabug: 30312787]  
  - net: hsr: fix memory leak in hsr_dev_finalize() (Mao Wenan)  [Orabug: 30444853]  {CVE-2019-16995} 
  - ieee802154: enforce CAP_NET_RAW for raw sockets (Ori Nimron)  [Orabug: 30444946]  {CVE-2019-17053} 
  - mISDN: enforce CAP_NET_RAW for raw sockets (Ori Nimron)  [Orabug: 30445158]  {CVE-2019-17055} 
  - net: sit: fix memory leak in sit_init_net() (Mao Wenan)  [Orabug: 30445305]  {CVE-2019-16994} 
  - media: dvb: usb: fix use after free in dvb_usb_device_exit (Oliver Neukum)  [Orabug: 30490491]  {CVE-2019-15213} 
  - media: cpia2_usb: first wake up, then free in disconnect (Oliver Neukum)  [Orabug: 30511741]  {CVE-2019-15215} 
  - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap (Vandana BN)  [Orabug: 30532774]  {CVE-2019-15217} 
  - target: Propagate backend read-only to core_tpg_add_lun (Nicholas Bellinger)  [Orabug: 30538419]  
  - kvm: mmu: ITLB_MULTIHIT mitigation selection (Kanth Ghatraju)  [Orabug: 30539766]  
  - cpu/speculation: Uninline and export CPU mitigations helpers (Kanth Ghatraju)  [Orabug: 30539766]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.3.el6uek]
changelog:
  - rds: Use correct conn when dropping connections due to cancel (Håkon Bugge)  [Orabug: 30316058]  
  - rds: ib: Optimize rds_ib_laddr_check (Håkon Bugge)  [Orabug: 30327671]  
  - rds: Bring loop-back peer down as well (Håkon Bugge)  [Orabug: 30271704]  
  - rds: ib: Avoid connect retry on loopback connections (Håkon Bugge)  [Orabug: 30271704]  
  - rds: ib: Qualify CM REQ duplicate detection with connection being up (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Further prioritize local loop-back connections (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Fix initial zero delay when queuing re-connect work (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Re-introduce separate work-queue for local connections (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Re-factor and avoid superfluous queuing of shutdown work (Håkon Bugge)  [Orabug: 29994551]  
  - rds: ib: Flush ARP cache when connection attempt is rejected (Håkon Bugge)  [Orabug: 29994550]  
  - rds: ib: Fix incorrect setting of cp_reconnect_racing (Håkon Bugge)  [Orabug: 29994553]  
  - RDMA/cma: Make # CM retries configurable (Håkon Bugge)  [Orabug: 29994555]  
  - rds: Re-factor and avoid superfluous queuing of reconnect work (Håkon Bugge)  [Orabug: 29994558]  
  - rds: ib: Correct the cm_id compare commit (Håkon Bugge)  [Orabug: 29994560]  
  - rds: Increase entropy in hashing (Håkon Bugge)  [Orabug: 29994561]  
  - rds: ib: Resurrect the CQs instead of delete+create (Håkon Bugge)  [Orabug: 29994566]  
  - rds: Avoid queuing superfluous send and recv work (Håkon Bugge)  [Orabug: 29994564]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.2.el6uek]
changelog:
  - x86/tsx: Add config options to set tsx=on|off|auto (Michal Hocko)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/speculation/taa: Add documentation for TSX Async Abort (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/tsx: Add "auto" option to the tsx= cmdline parameter (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/speculation/taa: Add mitigation for TSX Async Abort (Kanth Ghatraju)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/cpu: Add a helper function x86_read_arch_cap_msr() (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/msr: Add the IA32_TSX_CTRL MSR (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - kvm: x86: mmu: Recovery of shattered NX large pages (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: Add helper function for creating VM worker threads (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: x86: Do not release the page inside mmu_set_spte() (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - x86/cpu: Add Tremont to the cpu vulnerability whitelist (Pawan Gupta)  [Orabug: 30517059]  {CVE-2018-12207} 
  - x86: Add ITLB_MULTIHIT bug infrastructure (Pawan Gupta)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move mapping_level_dirty_bitmap() call in mapping_level() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - Revert "KVM: x86: use the fast way to invalidate all pages" (Sean Christopherson)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: Convert kvm_lock to a mutex (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Simplify force_pt_level calculation code in FNAME(page_fault)() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Make force_pt_level bool (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Remove unused parameter parent_pte from kvm_mmu_get_page() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: extend usage of RET_MMIO_PF_* constants (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Make mmu_set_spte() return emulate value (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move parent_pte handling from kvm_mmu_get_page() to link_shadow_page() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move initialization of parent_ptes out from kvm_mmu_alloc_page() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.1.el6uek]
changelog:
  - scsi: qla2xxx: Fix NULL pointer crash due to probe failure (himanshu.madhani@cavium.com)  [Orabug: 30161119]  
  - i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA (Jeremy Compostella)  [Orabug: 30210503]  {CVE-2017-18551} 
  - scsi: qla2xxx: Ability to process multiple SGEs in Command SGL for CT passthrough commands. (Giridhar Malavali)  [Orabug: 30256423]  
  - net-sysfs: Fix mem leak in netdev_register_kobject (YueHaibing)  [Orabug: 30350263]  {CVE-2019-15916} 
  - Drivers: hv: vmbus: add special crash handler (Vitaly Kuznetsov)  [Orabug: 30374399]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.5.el6uek]
changelog:
  - floppy: fix div-by-zero in setup_format_params (Denis Efremov)  [Orabug: 30447843]  {CVE-2019-14284} 
  - x86/cpufeatures: Make CPU bugs sticky (Thomas Gleixner)  [Orabug: 30473385]  
  - x86/cpu: Factor out application of forced CPU caps (Andy Lutomirski)  [Orabug: 30473385]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.4.el6uek]
changelog:
  - usb: misc: legousbtower: Fix NULL pointer deference (Greg Kroah-Hartman)  [Orabug: 27124665]  {CVE-2017-15102} 
  - userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Andrea Arcangeli)  [Orabug: 27422557]  {CVE-2017-15128} 
  - tcp: fix tcp_rtx_queue_tail in case of empty retransmit queue (Tim Froidcoeur)  [Orabug: 30317608]  {CVE-2019-11478} 
  - tcp: be more careful in tcp_fragment() (Eric Dumazet)  [Orabug: 30317608]  {CVE-2019-11478} {CVE-2019-11478} 
  - tcp: refine memory limit test in tcp_fragment() (Eric Dumazet)  [Orabug: 30317608]  {CVE-2019-11478}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.3.el6uek]
changelog:
  - scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE (Hannes Reinecke)  [Orabug: 26941755]  {CVE-2017-14991} 
  - failover: allow name change on IFF_UP slave interfaces (Si-Wei Liu)  [Orabug: 29707258]  
  - Revert "net_failover: delay taking over primary device to accommodate udevd renaming" (Si-Wei Liu)  [Orabug: 29707258]  
  - build: Revert "repairing out-of-tree build functionality" (Todd Vierling)  [Orabug: 30257829]  
  - rds: add ibmr to busy_list in flush code path (Manjunath Patil)   
  - rds: fix uninteneded increase of rds_rdma:pool->max_items_soft (Manjunath Patil)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.1.el6uek]
changelog:
  - NFSv4: Don't try to reclaim unused state owners (Trond Myklebust)  [Orabug: 30124013]  
  - x86/microcode: Update late microcode in parallel (Ashok Raj)  [Orabug: 30302412]  
  - floppy: fix out-of-bounds read in copy_buffer (Denis Efremov)  [Orabug: 30318219]  {CVE-2019-14283} 
  - xen-netback: stop netif TX queue on guest queuing failure (Ankur Arora)  [Orabug: 30351050]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.5.el6uek]
changelog:
  - xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink (YueHaibing)  [Orabug: 30322230]  {CVE-2019-15666} 
  - x86/tsc: Make calibration refinement more robust (Daniel Vacek)  [Orabug: 30217489]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.31.4.el6uek]
changelog:
  - KVM: coalesced_mmio: add bounds checking (Matt Delco)  [Orabug: 30318042]  {CVE-2019-14821} {CVE-2019-14821} 
  - Revert "KVM: coalesced_mmio: add bounds checking" (Jack Vogel)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.3.el6uek]
changelog:
  - KVM: coalesced_mmio: add bounds checking (Matt Delco)  [Orabug: 30318042]  {CVE-2019-14821} 
  - qla2xxx: Fix List corruption due to Get Name List (Himanshu Madhani)  [Orabug: 29894072]  
  - qla2xxx: Update driver version 9.00.00.00.42.0-k1 (Himanshu Madhani)  [Orabug: 29894072]  
  - xen/swiotlb: remember having called xen_create_contiguous_region() (Juergen Gross)  [Orabug: 30141778]  
  - xen/swiotlb: simplify range_straddles_page_boundary() (Juergen Gross)  [Orabug: 30141778]  
  - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() (Juergen Gross)  [Orabug: 30141778]  
  - tcp: purge write queue in tcp_connect_init() (Eric Dumazet)  [Orabug: 30240133]  {CVE-2019-15239}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.2.el6uek]
changelog:
  - blk-mq: don't complete un-started request in timeout handler (Ming Lei)  [Orabug: 29903684]  
  - tcp: fix a stale ooo_last_skb after a replace (Eric Dumazet)  [Orabug: 29997352]  
  - mm: keep kabi compatibility of may_expand_vm() etc (Tong Chen)  [Orabug: 30145754]  
  - mm: always print RLIMIT_DATA warning (David Woodhouse)  [Orabug: 30145754]  
  - mm: enable RLIMIT_DATA by default with workaround for valgrind (Konstantin Khlebnikov)  [Orabug: 30145754]  
  - mm: warn about VmData over RLIMIT_DATA (Konstantin Khlebnikov)  [Orabug: 30145754]  
  - mm: rework virtual memory accounting (Konstantin Khlebnikov)  [Orabug: 30145754]  
  - mm: add the "struct mm_struct *mm" local into (Oleg Nesterov)  [Orabug: 30145754]  
  - mm: fix the racy mm->locked_vm change in (Oleg Nesterov)  [Orabug: 30145754]  
  - mm/mmap.c: remove redundant local variables for may_expand_vm() (Chen Gang)  [Orabug: 30145754]  
  - block: loop: fix another reread part failure (Ming Lei)  [Orabug: 30264603]  
  - block: loop: don't hold lo_ctl_mutex in lo_open (Ming Lei)  [Orabug: 30264603]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.1.el6uek]
changelog:
  - dm bufio: fix deadlock with loop device (Junxiao Bi)  [Orabug: 29964645]  
  - dm bufio: don't take the lock in dm_bufio_shrink_count (Mikulas Patocka)  [Orabug: 29964645]  
  - rds: rds-info shows IPv4 address as '0.0.0.0' (aru kolappan)  [Orabug: 30022915]  
  - restore cond_resched() in shrink_dcache_parent() (Al Viro)  [Orabug: 30101895]  
  - retpoline: Move retpoline_mode_selected() out of .init.text section (Alejandro Jimenez)  [Orabug: 30250332]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.30.2.el6uek]
changelog:
  - SUNRPC fix regression in umount of a secure mount (Olga Kornievskaia)  [Orabug: 29926734]  
  - block: fix RO partition with RW disk (Junxiao Bi)  [Orabug: 30159928]  
  - retpoline: Show correct spectrev2 mitigation after loading non-retpoline module (Alejandro Jimenez)  [Orabug: 30185537]  
  - tun: allow positive return values on dev_get_valid_name() call (Julien Gomes)  [Orabug: 30085611]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.30.1.el6uek]
changelog:
  - xen: let alloc_xenballooned_pages() fail if not enough memory free (Juergen Gross)  [Orabug: 30073695]  
  - mm/page_alloc.c: calculate 'available' memory in a separate function (Igor Redko)  [Orabug: 30073695]  
  - Input: gtco - bounds check collection indent level (Grant Hernandez)  [Orabug: 30074413]  {CVE-2019-13631} 
  - Documentation/Docbook/Makefile: process xml files in parallel, based on nproc --all value (Alexander Burmashev)  [Orabug: 30079814]  
  - net: rds: fix compile warning (Zhu Yanjun)  [Orabug: 30118035]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.4.1.el6uek]
changelog:
  - Revert "xen-netback: stop netif TX queue on guest queuing failure" (Brian Maly)  [Orabug: 30128203]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.4.el6uek]
changelog:
  - xen-netback: stop netif TX queue on guest queuing failure (Ankur Arora)  [Orabug: 30028200]  
  - scsi: megaraid_sas: fix panic on loading firmware crashdump (Junxiao Bi)  [Orabug: 29993112]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.3.1.el6uek]
changelog:
  - x86/speculation: Exclude ATOMs from speculation through SWAPGS (Thomas Gleixner)  [Orabug: 29967571]  {CVE-2019-1125} 
  - x86/speculation: Enable Spectre v1 swapgs mitigations (Josh Poimboeuf)  [Orabug: 29967571]  {CVE-2019-1125} 
  - x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Josh Poimboeuf)  [Orabug: 29967571]  {CVE-2019-1125}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.2.el6uek]
changelog:
  - scsi: storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery)  [Orabug: 30052805]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.1.el6uek]
changelog:
  - USB: check usb_get_extra_descriptor for proper size (Mathias Payer)  [Orabug: 29755247]  {CVE-2018-20169} 
  - rds: ib: Fix dereference of conn when NULL and cleanup thereof (Håkon Bugge)  [Orabug: 29924849]  
  - ext4: zero out the unused memory region in the extent tree block (Sriram Rajagopalan)  [Orabug: 29925523]  {CVE-2019-11833} {CVE-2019-11833} 
  - ip_sockglue: Fix missing-check bug in ip_ra_control() (Gen Zhang)  [Orabug: 29926005]  {CVE-2019-12381} 
  - ipv6_sockglue: Fix a missing-check bug in ip6_ra_control() (Gen Zhang)  [Orabug: 29926057]  {CVE-2019-12378} 
  - x86/microcode: fix x86_spec_ctrl_mask on late loading. (Mihai Carabas)  [Orabug: 29941248]  
  - net: rds: fix rds recv memory leak (Zhu Yanjun)  [Orabug: 30034815]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.6.el6uek]
changelog:
  - scsi: libfc: Fixup disc_mutex handling in fcoe module (Hannes Reinecke)  [Orabug: 29511036]  
  - scsi: libfc: sanitize E_D_TOV and R_A_TOV setting in fcp (Hannes Reinecke)  [Orabug: 29511036]  
  - sysctl: Fix kabi breakage (Shuning Zhang)  [Orabug: 29689925]  
  - proc: Fix proc_sys_prune_dcache to hold a sb reference (Eric W. Biederman)  [Orabug: 29689925]  
  - proc/sysctl: Don't grab i_lock under sysctl_lock. (Eric W. Biederman)  [Orabug: 29689925]  
  - proc/sysctl: prune stale dentries during unregistering (Konstantin Khlebnikov)  [Orabug: 29689925]  
  - scsi: smartpqi: correct lun reset issues (Kevin Barnett)  [Orabug: 29848621]  
  - fork: record start_time late (David Herrmann)  [Orabug: 29850581]  {CVE-2019-6133} 
  - mm: avoid taking zone lock in pagetypeinfo_showmixed() (Vinayak Menon)  [Orabug: 29905302]  
  - x86/retpoline/ia32entry: Convert to non-speculative calls (Ankur Arora)  [Orabug: 29909295]  {CVE-2017-5715} 
  - tun: call dev_get_valid_name() before register_netdevice() (Cong Wang)  [Orabug: 29925555]  {CVE-2018-7191} 
  - mm/madvise.c: fix madvise() infinite loop under special circumstances (chenjie)  [Orabug: 29925610]  {CVE-2017-18208}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.5.el6uek]
changelog:
  - vxlan: fix use-after-free on deletion (part 2) (Venkat Venkatsubra)  [Orabug: 29927196]  
  - vxlan: use a more suitable function when assigning NULL (Mark Bloch)  [Orabug: 29927196]  
  - vxlan: avoid using stale vxlan socket. (pravin shelar)  [Orabug: 29927196]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.4.el6uek]
changelog:
  - x86/microcode: add SPEC_CTRL_SSBD to x86_spec_ctrl_mask on late loading. (Mihai Carabas)  [Orabug: 29642139]  
  - block: do not use interruptible wait anywhere (Alan Jenkins)  [Orabug: 29674055]  
  - vxlan: fix use-after-free on deletion (Mark Bloch)  [Orabug: 29755932]  
  - vxlan: reduce usage of synchronize_net in ndo_stop (Hannes Frederic Sowa)  [Orabug: 29755932]  
  - vxlan: synchronously and race-free destruction of vxlan sockets (Hannes Frederic Sowa)  [Orabug: 29755932]  
  - vxlan: support both IPv4 and IPv6 sockets in a single vxlan device (Jiri Benc)  [Orabug: 29755932]  
  - vxlan: make vxlan_sock_add and vxlan_sock_release complementary (Jiri Benc)  [Orabug: 29755932]  
  - openvswitch: Re-add CONFIG_OPENVSWITCH_VXLAN (Venkat Venkatsubra)  [Orabug: 29755932]  
  - openvswitch: Use regular VXLAN net_device device (Venkat Venkatsubra)  [Orabug: 29755932]  
  - openvswitch: Abstract vport name through ovs_vport_name() (Thomas Graf)  [Orabug: 29755932]  
  - openvswitch: Move dev pointer into vport itself (Thomas Graf)  [Orabug: 29755932]  
  - ip_tunnel: Make ovs_tunnel_info and ovs_key_ipv4_tunnel generic (Thomas Graf)  [Orabug: 29755932]  
  - vxlan: Factor out device configuration (Thomas Graf)  [Orabug: 29755932]  
  - kexec: generate VMCOREINFO for module symbols (Isaac Chen)  [Orabug: 29770217]  
  - kexec: generate VMCOREINFO for tasks and pid (Isaac Chen)  [Orabug: 29770217]  
  - kexec: generate VMCOREINFO for trace dump (Isaac Chen)  [Orabug: 29770217]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.28.3.el6uek]
changelog:
  - Add CVE numbers for CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 (Chuck Anderson)  [Orabug: 29890820]  {CVE-2019-11477} {CVE-2019-11478} {CVE-2019-11479} {CVE-2019-11477} {CVE-2019-11478} {CVE-2019-11479} 
  - tcp: fix fack_count accounting on tcp_shift_skb_data() (Joao Martins)  [Orabug: 29890820]  
  - tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Eric Dumazet)  [Orabug: 29886598]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.28.2.el6uek]
changelog:
  - tcp: add tcp_min_snd_mss sysctl (Eric Dumazet)  [Orabug: 29884306]  
  - tcp: tcp_fragment() should apply sane memory limits (Eric Dumazet)  [Orabug: 29884306]  
  - tcp: limit payload size of sacked skbs (Eric Dumazet)  [Orabug: 29884306]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.1.el6uek]
changelog:
  - hugetlbfs: don't retry when pool page allocations start to fail (Mike Kravetz)  [Orabug: 29324267]  
  - x86/speculation: RSB stuffing with retpoline on Skylake+ cpus (William Roche)  [Orabug: 29660924]  
  - x86/speculation: reformatting RSB overwrite macro (William Roche)  [Orabug: 29660924]  
  - x86/speculation: Dynamic enable and disable of RSB stuffing with IBRS&!SMEP (William Roche)  [Orabug: 29660924]  
  - x86/speculation: STUFF_RSB dynamic enable (William Roche)  [Orabug: 29660924]  
  - int3 handler better address space detection on interrupts (William Roche)  [Orabug: 29660924]  
  - repairing out-of-tree build functionality (Mark Nicholson)  [Orabug: 29755100]  
  - ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Shuning Zhang)  [Orabug: 29797007]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.27.3.el6uek]
changelog:
  - ocfs2: fix ocfs2 read inode data panic in ocfs2_iget (Shuning Zhang)  [Orabug: 29233739]  
  - Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer (Marcel Holtmann)  [Orabug: 29526426]  {CVE-2019-3459} 
  - Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt (Marcel Holtmann)  [Orabug: 29526426]  {CVE-2019-3459} 
  - HID: debug: fix the ring buffer implementation (Vladis Dronov)  [Orabug: 29629481]  {CVE-2019-3819} {CVE-2019-3819} 
  - scsi: target: iscsi: Use hex2bin instead of a re-implementation (Vincent Pelletier)  [Orabug: 29778875]  {CVE-2018-14633} {CVE-2018-14633} 
  - scsi: libsas: fix a race condition when smp task timeout (Jason Yan)  [Orabug: 29783225]  {CVE-2018-20836} 
  - scsi: megaraid_sas: return error when create DMA pool failed (Jason Yan)  [Orabug: 29783254]  {CVE-2019-11810} 
  - Bluetooth: hidp: fix buffer overflow (Young Xiao)  [Orabug: 29786786] {CVE-2019-11884} 
  - x86/speculation/mds: Add 'mitigations=' support for MDS (Kanth Ghatraju)  [Orabug: 29791046]  
  - net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock(). (Mao Wenan)  [Orabug: 29802785]  {CVE-2019-11815}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.27.2.el6uek]
changelog:
  - x86/speculation/mds: Check for the right microcode before setting mitigation (Kanth Ghatraju)  [Orabug: 29797118]  
  - vxlan: test dev->flags & IFF_UP before accessing vxlan->dev->dev_addr (Venkat Venkatsubra)  [Orabug: 29710939]  
  - vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() (Eric Dumazet)  [Orabug: 29710939]  
  - nvme: allow timed-out ios to retry (James Smart)  [Orabug: 29301607]  
  - rds: Introduce a pool of worker threads for connection management (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Use rds_conn_path cp_wq when applicable (Håkon Bugge)  [Orabug: 29391909]  
  - rds: ib: Implement proper cm_id compare (Håkon Bugge)  [Orabug: 29391909]  
  - Revert "net/rds: prevent RDS connections using stale ARP entries" (Håkon Bugge)  [Orabug: 29391909]  
  - rds: ib: Flush ARP cache when needed (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Add simple heuristics to determine connect delay (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Fix one-sided connect (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Consolidate and align ftrace related to connection management (Håkon Bugge)  [Orabug: 29391909]  
  - rds: ib: Fix gratuitous ARP storm (Håkon Bugge)  [Orabug: 29391909]  
  - IB/mlx4: Increase the timeout for CM cache (Håkon Bugge)  [Orabug: 29391909]  
  - kvm/speculation: Allow KVM guests to use SSBD even if host does not (Alejandro Jimenez)  [Orabug: 29423804]  
  - x86/speculation: Keep enhanced IBRS on when spec_store_bypass_disable=on is used (Alejandro Jimenez)  [Orabug: 29423804]  
  - x86/speculation: Clean up enhanced IBRS checks in bugs_64.c (Alejandro Jimenez)  [Orabug: 29423804]  
  - mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (Andrea Arcangeli)  [Orabug: 29510356]  
  - bnxt_en: Reset device on RX buffer errors. (Michael Chan)  [Orabug: 29651238]  
  - x86/mitigations: Fix the test for Xen PV guest (Boris Ostrovsky)  [Orabug: 29774291]  
  - x86/speculation/mds: Fix verw usage to use memory operand (Kanth Ghatraju)  [Orabug: 29791036]  {CVE-2018-12127} {CVE-2018-12130}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.27.1.el6uek]
changelog:
  - scsi: libfc: sanitize E_D_TOV and R_A_TOV setting (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: use configured rport E_D_TOV (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: additional debugging messages (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: don't advance state machine for incoming FLOGI (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: Do not login if the port is already started (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: Do not drop down to FLOGI for fc_rport_login() (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: Do not take rdata->rp_mutex when processing a -FC_EX_CLOSED ELS response. (Chad Dupuis)  [Orabug: 25933179]  
  - scsi: libfc: Fixup disc_mutex handling (Hannes Reinecke)  [Orabug: 25933179]  
  - xve: arm ud tx cq to generate completion interrupts (Ajaykumar Hotchandani)  [Orabug: 28267050]  
  - net: sched: run ingress qdisc without locks (Alexei Starovoitov)  [Orabug: 29395374]  
  - bnxt_en: Fix typo in firmware message timeout logic. (Michael Chan)  [Orabug: 29412112]  
  - bnxt_en: Wait longer for the firmware message response to complete. (Michael Chan)  [Orabug: 29412112]  
  - mm,vmscan: Make unregister_shrinker() no-op if register_shrinker() failed. (Tetsuo Handa)  [Orabug: 29456281]  
  - X.509: Handle midnight alternative notation in GeneralizedTime (David Howells)  [Orabug: 29460344]  {CVE-2015-5327} 
  - X.509: Support leap seconds (David Howells)  [Orabug: 29460344]  {CVE-2015-5327} 
  - X.509: Fix the time validation [ver #2] (David Howells)  [Orabug: 29460344]  {CVE-2015-5327} {CVE-2015-5327} 
  - be2net: enable new Kconfig items in kernel configs (Brian Maly)  [Orabug: 29475071]  
  - benet: remove broken and unused macro (Lubomir Rintel)  [Orabug: 29475071]  
  - be2net: don't flip hw_features when VXLANs are added/deleted (Davide Caratti)  [Orabug: 29475071]  
  - be2net: Fix memory leak in be_cmd_get_profile_config() (Petr Oros)  [Orabug: 29475071]  
  - be2net: Use Kconfig flag to support for enabling/disabling adapters (Petr Oros)  [Orabug: 29475071]  
  - be2net: Mark expected switch fall-through (Gustavo A. R. Silva)  [Orabug: 29475071]  
  - be2net: fix spelling mistake "seqence" -> "sequence" (Colin Ian King)  [Orabug: 29475071]  
  - be2net: Update the driver version to 12.0.0.0 (Suresh Reddy)  [Orabug: 29475071]  
  - be2net: gather debug info and reset adapter (only for Lancer) on a tx-timeout (Suresh Reddy)  [Orabug: 29475071]  
  - be2net: move rss_flags field in rss_info to ensure proper alignment (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: re-order fields in be_error_recovert to avoid hole (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: remove unused tx_jiffies field from be_tx_stats (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: move txcp field in be_tx_obj to eliminate holes in the struct (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: reorder fields in be_eq_obj structure (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: remove unused old custom busy-poll fields (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: remove unused old AIC info (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: Fix error detection logic for BE3 (Suresh Reddy)  [Orabug: 29475071]  
  - scsi: sd: Do not override max_sectors_kb sysfs setting (Martin K. Petersen)  [Orabug: 29596510]  
  - USB: serial: io_ti: fix div-by-zero in set_termios (Johan Hovold)  [Orabug: 29487834]  {CVE-2017-18360} 
  - bnxt_en: Drop oversize TX packets to prevent errors. (Michael Chan)  [Orabug: 29516462]  
  - x86/speculation: Read per-cpu value of x86_spec_ctrl_priv in x86_virt_spec_ctrl() (Alejandro Jimenez)  [Orabug: 29526401]  
  - x86/speculation: Keep enhanced IBRS on when prctl is used for SSBD control (Alejandro Jimenez)  [Orabug: 29526401]  
  - USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data (Hui Peng)  [Orabug: 29605982]  {CVE-2018-19985} {CVE-2018-19985} 
  - swiotlb: save io_tlb_used to local variable before leaving critical section (Dongli Zhang)  [Orabug: 29637525]  
  - swiotlb: dump used and total slots when swiotlb buffer is full (Dongli Zhang)  [Orabug: 29637525]  
  - x86/bugs, kvm: don't miss SSBD when IBRS is in use. (Quentin Casasnovas)  [Orabug: 29642113]  
  - cifs: Fix use after free of a mid_q_entry (Shuning Zhang)  [Orabug: 29654888]  
  - binfmt_elf: switch to new creds when switching to new mm (Linus Torvalds)  [Orabug: 29677233]  {CVE-2019-11190} 
  - x86/microcode: Don't return error if microcode update is not needed (Boris Ostrovsky)  [Orabug: 29759756]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.26.12.el6uek]
changelog:
  - x86/mds: Add empty commit for CVE-2019-11091 (Konrad Rzeszutek Wilk)  [Orabug: 29721935]  {CVE-2019-11091} 
  - x86/microcode: Add loader version file in debugfs (Boris Ostrovsky)  [Orabug: 29754165]  
  - x86/microcode: Fix CPU synchronization routine (Borislav Petkov)  [Orabug: 29754165]  
  - x86/microcode: Synchronize late microcode loading (Borislav Petkov)  [Orabug: 29754165]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.26.11.el6uek]
changelog:
  - x86/speculation: Support 'mitigations=' cmdline option (Josh Poimboeuf)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - cpu/speculation: Add 'mitigations=' cmdline option (Josh Poimboeuf)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Konrad Rzeszutek Wilk)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Fix comment (Boris Ostrovsky)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: update mds_mitigation to reflect debugfs configuration (Mihai Carabas)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: fix microcode late loading (Mihai Carabas)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add boot option to enable MDS protection only while in idle (Boris Ostrovsky)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Improve coverage for MDS vulnerability (Boris Ostrovsky)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add SMT warning message (Josh Poimboeuf)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mds=full,nosmt cmdline option (Josh Poimboeuf)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - Documentation: Add MDS vulnerability documentation (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - Documentation: Move L1TF to separate directory (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mitigation mode VMWERV (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add debugfs for controlling MDS (Kanth Ghatraju)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add sysfs reporting for MDS (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mitigation control for MDS (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Clear CPU buffers on exit to user (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mds_clear_cpu_buffers() (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Andi Kleen)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add BUG_MSBDS_ONLY (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add basic bug infrastructure for MDS (Andi Kleen)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation: Consolidate CPU whitelists (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/msr-index: Cleanup bit defines (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - Documentation/l1tf: Fix small spelling typo (Salvatore Bonaccorso)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation: Simplify the CPU bug detection logic (Dominik Brodowski)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.9.el6uek]
changelog:
  - KEYS: encrypted: fix buffer overread in valid_master_desc() (Eric Biggers)  [Orabug: 29591025]  {CVE-2017-13305}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.8.el6uek]
changelog:
  - scsi: target: remove hardcoded T10 Vendor ID in INQUIRY response (Alan Adamson)  [Orabug: 29344862]  
  - scsi: target: add device vendor id, product id and revision configfs attributes (Alan Adamson)  [Orabug: 29344862]  
  - scsi: target: consistently null-terminate t10_wwn strings (David Disseldorp)  [Orabug: 29344862]  
  - scsi: target: use consistent left-aligned ASCII INQUIRY data (David Disseldorp)  [Orabug: 29344862]  
  - ext4: fix data corruption caused by unaligned direct AIO (Lukas Czerner)  [Orabug: 29553371]  
  - swiotlb: checking whether swiotlb buffer is full with io_tlb_used (Dongli Zhang)  [Orabug: 29582587]  
  - swiotlb: add debugfs to track swiotlb buffer usage (Dongli Zhang)  [Orabug: 29582587]  
  - swiotlb: fix comment on swiotlb_bounce() (Dongli Zhang)  [Orabug: 29582587]  
  - NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success. (NeilBrown)  [Orabug: 29617508]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.7.el6uek]
changelog:
  - ib_core: initialize shpd field when allocating 'struct ib_pd' (Mukesh Kacker)  [Orabug: 29384815]  
  - Revert "x86/apic: Make arch_setup_hwirq NUMA node aware" (Brian Maly)  [Orabug: 29542185]  
  - qlcnic: fix Tx descriptor corruption on 82xx devices (Shahed Shaikh)  [Orabug: 27708787]  
  - block: Fix a race between blk_cleanup_queue() and timeout handling (Bart Van Assche)  [Orabug: 29158186]  
  - can: gw: ensure DLC boundaries after CAN frame modification (Oliver Hartkopp)  [Orabug: 29215299]  {CVE-2019-3701} {CVE-2019-3701} 
  - CIFS: Enable encryption during session setup phase (Pavel Shilovsky)  [Orabug: 29338239]  {CVE-2018-1066} 
  - ext4: clear i_data in ext4_inode_info when removing inline data (Theodore Ts'o)  [Orabug: 29540709]  {CVE-2018-10881} {CVE-2018-10881} 
  - ext4: add more inode number paranoia checks (Theodore Ts'o)  [Orabug: 29545566]  {CVE-2018-10882} {CVE-2018-10882} 
  - Revert "KVM: nVMX: Eliminate vmcs02 pool" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM: VMX: introduce alloc_loaded_vmcs" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM: VMX: make MSR bitmaps per-VCPU" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM: x86: pass host_initiated to functions that read MSRs" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM/x86: Add IBPB support" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL - reloaded" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM: SVM: Add MSR-based feature support for serializing LFENCE" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "x86/cpufeatures: rename X86_FEATURE_AMD_SSBD to X86_FEATURE_LS_CFG_SSBD" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "x86/bugs: Add AMD's SPEC_CTRL MSR usage" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR" (Boris Ostrovsky)  [Orabug: 29542029]  
  - arch: x86: remove unsued SET_IBPB from spec_ctrl.h (Mihai Carabas)  [Orabug: 29336760]  
  - x86: cpu: microcode: fix late loading SpectreV2 bugs eval (Mihai Carabas)  [Orabug: 29336760]  
  - x86: cpu: microcode: fix late loading SSBD and L1TF bugs eval (Mihai Carabas)  [Orabug: 29336760]  
  - x86: cpu: microcode: Re-evaluate bugs in a CPU after microcode loading (Mihai Carabas)  [Orabug: 29336760]  
  - x86: cpu: microcode: update flags for all cpus (Mihai Carabas)  [Orabug: 29336760]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.5.el6uek]
changelog:
  - scsi: scsi_transport_iscsi: modify detected conn err to KERN_ERR (Fred Herard)  [Orabug: 29487790]  
  - xen/blkfront: avoid NULL blkfront_info dereference on device removal (Vasilis Liaskovitis)  [Orabug: 29469740]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.4U.el6uek]
changelog:
  - bnxt_en: Fix race conditions in .ndo_get_stats64(). (Michael Chan)  [Orabug: 29129625]  
  - ext4: always verify the magic number in xattr blocks (Theodore Ts'o)  [Orabug: 29437127]  {CVE-2018-10879} {CVE-2018-10879} 
  - ext4: add corruption check in ext4_xattr_set_entry() (Theodore Ts'o)  [Orabug: 29437127]  {CVE-2018-10879} {CVE-2018-10879} 
  - net: add netif_is_lag_port helper (Jiri Pirko)  [Orabug: 29495360]  
  - net: add netif_is_lag_master helper (Jiri Pirko)  [Orabug: 29495360]  
  - net: add netif_is_team_port helper (Jiri Pirko)  [Orabug: 29495360]  
  - net: add netif_is_team_master helper (Jiri Pirko)  [Orabug: 29495360]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.1.12-124.26.3.el6uek]
changelog:
  - scsi: scsi_transport_iscsi: redirect conn error to console (Fred Herard)  [Orabug: 29469714]  
  - Revert x86/apic/x2apic: set affinity of a single interrupt to one cpu (Mridula Shastry)  [Orabug: 29449976]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.2.el6uek]
changelog:
  - jiffies: use jiffies64_to_nsecs() to fix 100% steal usage for xen vcpu hotplug (Dongli Zhang)  [Orabug: 28806208]  
  - time: Introduce jiffies64_to_nsecs() (Frederic Weisbecker)  [Orabug: 28806208]  
  - net_failover: delay taking over primary device to accommodate udevd renaming (Si-Wei Liu)   
  - fs/dcache.c: add cond_resched() in shrink_dentry_list() (Nikolay Borisov)  [Orabug: 29412146]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.1.el6uek]
changelog:
  - NFS: commit direct writes even if they fail partially (J. Bruce Fields)  [Orabug: 28212440]  
  - rds: update correct congestion map for loopback transport (Mukesh Kacker)  [Orabug: 29175685]  
  - ext4: only look at the bg_flags field if it is valid (Theodore Ts'o)  [Orabug: 29316684]  {CVE-2018-10876} {CVE-2018-10876} 
  - uek-rpm: Add kernel-uek version to kernel-ueknano provides (Somasundaram Krishnasamy)  [Orabug: 29357643]  
  - net: Set sk_prot_creator when cloning sockets to the right proto (Christoph Paasch)  [Orabug: 29422739]  {CVE-2018-9568} 
  - ext4: always check block group bounds in ext4_init_block_bitmap() (Theodore Ts'o)  [Orabug: 29428607]  {CVE-2018-10878} 
  - ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Theodore Ts'o)  [Orabug: 29428607]  {CVE-2018-10878} 
  - vfs: Add sb_rdonly(sb) to query the MS_RDONLY flag on s_flags (David Howells)  [Orabug: 29428607]  {CVE-2018-10878} 
  - iscsi: Capture iscsi debug messages using tracepoints (Fred Herard)  [Orabug: 29429855]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.25.4.el6uek]
changelog:
  - KEYS: add missing permission check for request_key() destination (Eric Biggers)  [Orabug: 29304551]  {CVE-2017-17807} 
  - KEYS: Don't permit request_key() to construct a new keyring (David Howells)  [Orabug: 29304551]  {CVE-2017-17807} 
  - mlx4_ib: Distribute completion vectors when zero is supplied (Håkon Bugge)  [Orabug: 29318191]  
  - bnxt_en: Fix TX timeout during netpoll. (Michael Chan)  [Orabug: 29357977]  
  - bnxt_en: Fix for system hang if request_irq fails (Vikas Gupta)  [Orabug: 29357977]  
  - bnxt_en: Fix firmware message delay loop regression. (Michael Chan)  [Orabug: 29357977]  
  - bnxt_en: reduce timeout on initial HWRM calls (Andy Gospodarek)  [Orabug: 29357977]  
  - bnxt_en: Fix NULL pointer dereference at bnxt_free_irq(). (Michael Chan)  [Orabug: 29357977]  
  - bnxt_en: Check valid VNIC ID in bnxt_hwrm_vnic_set_tpa(). (Michael Chan)  [Orabug: 29357977]  
  - bnxt_en: Do not modify max IRQ count after RDMA driver requests/frees IRQs. (Michael Chan)  [Orabug: 29357977]  
  - mm: cleancache: fix corruption on missed inode invalidation (Pavel Tikhomirov)  [Orabug: 29364670]  {CVE-2018-16862} 
  - l2tp: fix reading optional fields of L2TPv3 (Jacob Wen)  [Orabug: 29368048]  
  - net/packet: fix a race in packet_bind() and packet_notifier() (Eric Dumazet)  [Orabug: 29385593]  {CVE-2018-18559} 
  - ext4: verify the depth of extent tree in ext4_find_extent() (Theodore Ts'o)  [Orabug: 29396712]  {CVE-2018-10877} {CVE-2018-10877}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.25.3.el6uek]
changelog:
  - blk-mq: Do not invoke .queue_rq() for a stopped queue (Bart Van Assche)  [Orabug: 28766011]  
  - uek-rpm: use multi-threaded xz compression for rpms (Alexander Burmashev)  [Orabug: 29323635]  
  - uek-rpm: optimize find-requires usage (Alexander Burmashev)  [Orabug: 29323635]  
  - find-debuginfo.sh: backport parallel files procession (Alexander Burmashev)  [Orabug: 29323635]  
  - KVM: SVM: Add MSR-based feature support for serializing LFENCE (Tom Lendacky)  [Orabug: 29335274]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.25.2.el6uek]
changelog:
  - Enable RANDOMIZE_BASE (John Haxby)  [Orabug: 29305587]  
  - slub: make ->cpu_partial unsigned (Alexey Dobriyan)  [Orabug: 28620592]  
  - dtrace: support kernels built with RANDOMIZE_BASE (Kris Van Hees)  [Orabug: 29204005]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.25.1.el6uek]
changelog:
  - x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR (Tom Lendacky)  [Orabug: 28870524]  {CVE-2018-3639} 
  - x86/bugs: Add AMD's SPEC_CTRL MSR usage (Konrad Rzeszutek Wilk)  [Orabug: 28870524]  {CVE-2018-3639} 
  - x86/cpufeatures: rename X86_FEATURE_AMD_SSBD to X86_FEATURE_LS_CFG_SSBD (Mihai Carabas)  [Orabug: 28870524]  {CVE-2018-3639} 
  - Make file credentials available to the seqfile interfaces (Linus Torvalds)  [Orabug: 29114879]  {CVE-2018-17972} 
  - proc: restrict kernel stack dumps to root (Jann Horn)  [Orabug: 29114879]  {CVE-2018-17972} 
  - x86/speculation: Clean up retpoline code in bugs.c (Alejandro Jimenez)  [Orabug: 29211617]  
  - x86, modpost: Replace last remnants of RETPOLINE with CONFIG_RETPOLINE (WANG Chao)  [Orabug: 29211617]  
  - x86/build: Fix compiler support check for CONFIG_RETPOLINE (Masahiro Yamada)  [Orabug: 29211617]  
  - x86/retpoline: Remove minimal retpoline support (Zhenzhong Duan)  [Orabug: 29211617]  
  - x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support (Zhenzhong Duan)  [Orabug: 29211617]  
  - nl80211: check for the required netlink attributes presence (Vladis Dronov)  [Orabug: 29245533]  {CVE-2017-12153} {CVE-2017-12153} 
  - scsi: lpfc: Fix PT2PT PRLI reject (reapply patch) (James Smart)  [Orabug: 29281346]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.5.el6uek]
changelog:
  - rds: congestion updates can be missed when kernel low on memory (Mukesh Kacker)  [Orabug: 28425811]  
  - net/rds: ib: Fix endless RNR Retries caused by memory allocation failures (Venkat Venkatsubra)  [Orabug: 28127993]  
  - net: rds: fix excess initialization of the recv SGEs (Zhu Yanjun)  [Orabug: 29004503]  
  - xhci: fix usb2 resume timing and races. (Mathias Nyman)  [Orabug: 29028940]  
  - xhci: Fix a race in usb2 LPM resume, blocking U3 for usb2 devices (Mathias Nyman)  [Orabug: 29028940]  
  - userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli)  [Orabug: 29163750]  {CVE-2018-18397} 
  - userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli)  [Orabug: 29163750]  {CVE-2018-18397} 
  - x86/apic/x2apic: set affinity of a single interrupt to one cpu (Jianchao Wang)  [Orabug: 29196396]  
  - xen/blkback: rework validate_io_op() (Dongli Zhang)  [Orabug: 29199843]  
  - xen/blkback: optimize validate_io_op() to filter BLKIF_OP_RESERVED_1 operation (Dongli Zhang)  [Orabug: 29199843]  
  - xen/blkback: do not BUG() for invalid blkif_request from frontend (Dongli Zhang)  [Orabug: 29199843]  
  - net/rds: WARNING: at net/rds/recv.c:222 rds_recv_hs_exthdrs+0xf8/0x1e0 (Venkat Venkatsubra)  [Orabug: 29201779]  
  - xen-netback: wake up xenvif_dealloc_kthread when it should stop (Dongli Zhang)  [Orabug: 29217927]  
  - Revert "xfs: remove nonblocking mode from xfs_vm_writepage" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: remove xfs_cancel_ioend" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: Introduce writeback context for writepages" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: xfs_cluster_write is redundant" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: factor mapping out of xfs_do_writepage" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: don't chain ioends during writepage submission" (Wengang Wang)  [Orabug: 29279692]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.4.el6uek]
changelog:
  - mstflint: Fix coding style issues - left with LINUX_VERSION_CODE (Idan Mehalel)  [Orabug: 28878697]  
  - mstflint: Fix coding-style issues (Idan Mehalel)  [Orabug: 28878697]  
  - mstflint: Fix errors found with checkpatch script (Idan Mehalel)  [Orabug: 28878697]  
  - Added support for 5th Gen devices in Secure Boot module and mtcr (Adham Masarwah)  [Orabug: 28878697]  
  - Fix typos in mst_kernel (Adham Masarwah)  [Orabug: 28878697]  
  - bnxt_en: Report PCIe link properties with pcie_print_link_status() (Brian Maly)  [Orabug: 28942099]  
  - selinux: Perform both commoncap and selinux xattr checks (Eric W. Biederman)  [Orabug: 28951521]  
  - Introduce v3 namespaced file capabilities (Serge E. Hallyn)  [Orabug: 28951521]  
  - rds: ib: Use a delay when reconnecting to the very same IP address (Håkon Bugge)  [Orabug: 29138813]  
  - Change mincore() to count "mapped" pages rather than "cached" pages (Linus Torvalds)  [Orabug: 29187415]  {CVE-2019-5489} 
  - NFSD: Set the attributes used to store the verifier for EXCLUSIVE4_1 (Kinglong Mee)  [Orabug: 29204157]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.3.el6uek]
changelog:
  - ext4: update i_disksize when new eof exceeds it (Shan Hai)  [Orabug: 28940828]  
  - ext4: update i_disksize if direct write past ondisk size (Eryu Guan)  [Orabug: 28940828]  
  - ext4: protect i_disksize update by i_data_sem in direct write path (Eryu Guan)  [Orabug: 28940828]  
  - ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c (Hui Peng)  [Orabug: 29042981]  {CVE-2018-19824} 
  - ALSA: usb-audio: Replace probing flag with active refcount (Takashi Iwai)  [Orabug: 29042981]  {CVE-2018-19824} 
  - ALSA: usb-audio: Avoid nested autoresume calls (Takashi Iwai)  [Orabug: 29042981]  {CVE-2018-19824} 
  - ext4: validate that metadata blocks do not overlap superblock (Theodore Ts'o)  [Orabug: 29114440]  {CVE-2018-1094} 
  - ext4: update inline int ext4_has_metadata_csum(struct super_block *sb) (John Donnelly)  [Orabug: 29114440]  {CVE-2018-1094} 
  - ext4: always initialize the crc32c checksum driver (Theodore Ts'o)  [Orabug: 29114440]  {CVE-2018-1094} {CVE-2018-1094} 
  - Revert "bnxt_en: Reduce default rings on multi-port cards." (Brian Maly)  [Orabug: 28687746]  
  - mlx4_core: Disable P_Key Violation Traps (Håkon Bugge)  [Orabug: 27693633]  
  - rds: RDS connection does not reconnect after CQ access violation error (Venkat Venkatsubra)  [Orabug: 28733324]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.2.el6uek]
changelog:
  - KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL (KarimAllah Ahmed)  [Orabug: 28069548]  
  - KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL - reloaded (Mihai Carabas)  [Orabug: 28069548]  
  - KVM/x86: Add IBPB support (Ashok Raj)  [Orabug: 28069548]  
  - KVM: x86: pass host_initiated to functions that read MSRs (Paolo Bonzini)  [Orabug: 28069548]  
  - KVM: VMX: make MSR bitmaps per-VCPU (Paolo Bonzini)  [Orabug: 28069548]  
  - KVM: VMX: introduce alloc_loaded_vmcs (Paolo Bonzini)  [Orabug: 28069548]  
  - KVM: nVMX: Eliminate vmcs02 pool (Jim Mattson)  [Orabug: 28069548]  
  - KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0 x2APIC (Radim Krčmář)  [Orabug: 28069548]  
  - ocfs2: don't clear bh uptodate for block read (Junxiao Bi)  [Orabug: 28762940]  
  - ocfs2: clear journal dirty flag after shutdown journal (Junxiao Bi)  [Orabug: 28924775]  
  - ocfs2: fix panic due to unrecovered local alloc (Junxiao Bi)  [Orabug: 28924775]  
  - net: rds: fix rds_ib_sysctl_max_recv_allocation error (Zhu Yanjun)  [Orabug: 28947481]  
  - x86/speculation: Always disable IBRS in disable_ibrs_and_friends() (Alejandro Jimenez)  [Orabug: 29139710]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.1.el6uek]
changelog:
  - pinctrl: amd: Use devm_pinctrl_register() for pinctrl registration (Laxman Dewangan)  [Orabug: 27539246]  {CVE-2017-18174} 
  - mlock: fix mlock count can not decrease in race condition (Yisheng Xie)  [Orabug: 27677611]  {CVE-2017-18221} 
  - perf/core: Fix the perf_cpu_time_max_percent check (Tan Xiaojun)  [Orabug: 27823815]  {CVE-2017-18255} 
  - x86/microcode/intel: Fix a wrong assignment of revision in _save_mc (Zhenzhong Duan)  [Orabug: 28190263]  
  - mm: cma: fix incorrect type conversion for size during dma allocation (Rohit Vaswani)  [Orabug: 28407826]  {CVE-2017-9725} 
  - x86/speculation: Make enhanced IBRS the default spectre v2 mitigation (Alejandro Jimenez)  [Orabug: 28474851]  
  - x86/speculation: Enable enhanced IBRS usage (Alejandro Jimenez)  [Orabug: 28474851]  
  - x86/speculation: functions for supporting enhanced IBRS (Alejandro Jimenez)  [Orabug: 28474851]  
  - xen/blkback: fix disconnect while I/Os in flight (Juergen Gross)  [Orabug: 28744234]  
  - mlx4_vnic: use the mlid while calling ib_detach_mcast (aru kolappan)  [Orabug: 29029705]  
  - ext4: fail ext4_iget for root directory if unallocated (Theodore Ts'o)  [Orabug: 29048557]  {CVE-2018-1092} {CVE-2018-1092} 
  - Bluetooth: hidp: buffer overflow in hidp_process_report (Mark Salyzyn)  [Orabug: 29121215]  {CVE-2018-9363} {CVE-2018-9363} 
  - HID: debug: check length before copy_to_user() (Daniel Rosenberg)  [Orabug: 29128165]  {CVE-2018-9516} 
  - x86/MCE: Serialize sysfs changes (Seunghun Han)  [Orabug: 29149888]  {CVE-2018-7995} 
  - Input: i8042 - fix crash at boot time (Chen Hong)  [Orabug: 29152328]  {CVE-2017-18079}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.4.el6uek]
changelog:
  - base/memory, hotplug: fix a kernel oops in show_valid_zones() (Toshi Kani)  [Orabug: 29050538]  
  - mm/memory_hotplug.c: check start_pfn in test_pages_in_a_zone() (Toshi Kani)  [Orabug: 29050538]  
  - drivers/base/memory.c: prohibit offlining of memory blocks with missing sections (Seth Jennings)  [Orabug: 29050538]  
  - mm: Check if section present during memory block (un)registering (Yinghai Lu)  [Orabug: 29050538]  
  - hugetlb: take PMD sharing into account when flushing tlb/caches (Mike Kravetz)  [Orabug: 28951854]  
  - mm: migration: fix migration of huge PMD shared pages (Mike Kravetz)  [Orabug: 28951854]  
  - hugetlbfs: use truncate mutex to prevent pmd sharing race (Mike Kravetz)  [Orabug: 28896255]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.3.el6uek]
changelog:
  - rds: ib: Improve tracing during failover/back (Håkon Bugge)  [Orabug: 28860366]  
  - rds: ib: Remove superfluous add of address on fail-back device (Håkon Bugge)  [Orabug: 28860366]  
  - libiscsi: Fix NULL pointer dereference in iscsi_eh_session_reset (Fred Herard)  [Orabug: 28946207]  
  - wil6210: missing length check in wmi_set_ie (Lior David)  [Orabug: 28951265]  {CVE-2018-5848} 
  - netfilter: xt_osf: Add missing permission checks (Kevin Cernekee)  [Orabug: 29037831]  {CVE-2017-17450} 
  - x86/speculation: Fix bad argument to rdmsrl() in cpu_set_bug_bits() (Alejandro Jimenez)  [Orabug: 29044805]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.2.el6uek]
changelog:
  - n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Linus Torvalds)  [Orabug: 28855335]  {CVE-2018-18386} 
  - nfs: Don't take a reference on fl->fl_file for LOCK operation (Benjamin Coddington)  [Orabug: 28887442]  
  - x86/topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Samuel Neves)  [Orabug: 28933009]  
  - ALSA: seq: Fix regression by incorrect ioctl_mutex usages (Takashi Iwai)  [Orabug: 29005188]  {CVE-2018-1000004} 
  - net: phy: mdio-bcm-unimac: fix potential NULL dereference in unimac_mdio_probe() (Wei Yongjun)  [Orabug: 29012346]  {CVE-2018-8043}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.1.el6uek]
changelog:
  - xfs: don't call xfs_da_shrink_inode with NULL bp (Eric Sandeen)  [Orabug: 28898616]  {CVE-2018-13094} 
  - ALSA: rawmidi: Change resized buffers atomically (Takashi Iwai)  [Orabug: 28898636]  {CVE-2018-10902} 
  - md/raid5: fix a race condition in stripe batch (Shaohua Li)  [Orabug: 28917012]  
  - xfs: don't fail when converting shortform attr to long form during ATTR_REPLACE (Darrick J. Wong)  [Orabug: 28924091]  {CVE-2018-18690} 
  - certs: Add Oracle's new X509 cert into the kernel keyring (Eric Snowberg)  [Orabug: 28926203]  
  - block: fix bdi vs gendisk lifetime mismatch (Shan Hai)  [Orabug: 28945039]  
  - Add the following entries to 'uek-rpm/ol[67]/nano_modules.list': kernel/drivers/net/net_failover.ko kernel/net/core/failover.ko Fixes: b3bc7c163fc9 ('net: Introduce generic failover module') (Vijay Balakrishna)  [Orabug: 28953351]  
  - floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl (Andy Whitcroft)  [Orabug: 28956547]  {CVE-2018-7755} {CVE-2018-7755} 
  - iov_iter: don't revert iov buffer if csum error (Ding Tianhong)  [Orabug: 28960296]  
  - crypto: salsa20 - fix blkcipher_walk API usage (Eric Biggers)  [Orabug: 28976583]  {CVE-2017-17805} 
  - crypto: hmac - require that the underlying hash algorithm is unkeyed (Eric Biggers)  [Orabug: 28976653]  {CVE-2017-17806}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.22.4.el6uek]
changelog:
  - Revert commit 8bd274934987 ("block: fix bdi vs gendisk lifetime mismatch") (Ashish Samant)  [Orabug: 28968102]  
  - KVM/x86: Add IBPB support (Ashok Raj)  [Orabug: 28703712]  
  - x86/intel/spectre_v2: Remove unnecessary retp_compiler() test (Boris Ostrovsky)  [Orabug: 28814570]  
  - x86/intel/spectre_v4: Deprecate spec_store_bypass_disable=userspace (Boris Ostrovsky)  [Orabug: 28814570]  
  - x86/speculation: x86_spec_ctrl_set needs to be called unconditionally (Boris Ostrovsky)  [Orabug: 28814570]  
  - x86/speculation: Drop unused DISABLE_IBRS_CLOBBER macro (Boris Ostrovsky)  [Orabug: 28814570]  
  - x86/intel/spectre_v4: Keep SPEC_CTRL_SSBD when IBRS is in use (Boris Ostrovsky)  [Orabug: 28814570]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.22.3.el6uek]
changelog:
  - net: net_failover: fix typo in net_failover_slave_register() (Liran Alon)  [Orabug: 28122104]  
  - virtio_net: Extend virtio to use VF datapath when available (Sridhar Samudrala)  [Orabug: 28122104]  
  - virtio_net: Introduce VIRTIO_NET_F_STANDBY feature bit (Sridhar Samudrala)  [Orabug: 28122104]  
  - net: Introduce net_failover driver (Sridhar Samudrala)  [Orabug: 28122104]  
  - net: Introduce generic failover module (Sridhar Samudrala)  [Orabug: 28122104]  
  - net: introduce lower state changed info structure for LAG lowers (Jiri Pirko)  [Orabug: 28122104]  
  - net: introduce change lower state notifier (Jiri Pirko)  [Orabug: 28122104]  
  - net: add info struct for LAG changeupper (Jiri Pirko)  [Orabug: 28122104]  
  - net: add possibility to pass information about upper device via notifier (Jiri Pirko)  [Orabug: 28122104]  
  - net: Check CHANGEUPPER notifier return value (Ido Schimmel)  [Orabug: 28122104]  
  - net: introduce change upper device notifier change info (Jiri Pirko)  [Orabug: 28122104]  
  - x86/bugs: rework x86_spec_ctrl_set to make its changes explicit (Daniel Jordan)  [Orabug: 28271063]  
  - x86/bugs: rename ssbd_ibrs_selected to ssbd_userspace_selected (Daniel Jordan)  [Orabug: 28271063]  
  - x86/bugs: always use x86_spec_ctrl_base or _priv when setting spec ctrl MSR (Daniel Jordan)  [Orabug: 28271063]  
  - xen-blkfront: fix kernel panic with negotiate_mq error path (Manjunath Patil)  [Orabug: 28798861]  
  - scsi: lpfc: Correct MDS diag and nvmet configuration (James Smart)  [Orabug: 28855939]  
  - scsi: virtio_scsi: let host do exception handling (Paolo Bonzini)  [Orabug: 28856913]  
  - net/rds: Fix endless RNR situation (Venkat Venkatsubra)  [Orabug: 28857027]  
  - scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() (Alexander Potapenko)  [Orabug: 28892656]  {CVE-2018-1000204} 
  - cdrom: fix improper type cast, which can leat to information leak. (Young_X)  [Orabug: 28929767]  {CVE-2018-16658} {CVE-2018-10940} {CVE-2018-18710}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.22.2.el6uek]
changelog:
  - oracleasm: Honor ASM_IFLAG_FORMAT_NOCHECK flag (Martin K. Petersen)  [Orabug: 28650922]  
  - oracleasm: Implement support for QUERY HANDLE operation (Martin K. Petersen)  [Orabug: 28650922]  
  - KVM: MTRR: remove MSR 0x2f8 (Andy Honig)  [Orabug: 23276795]  {CVE-2016-3713} {CVE-2016-3713} 
  - x86/cpu/amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit)  [Orabug: 28783929]  
  - x86/CPU/AMD: Fix Bulldozer topology (Borislav Petkov)  [Orabug: 28783929]  
  - x86/cpu/AMD: Clean up cpu_llc_id assignment per topology feature (Yazen Ghannam)  [Orabug: 28783929]  
  - x86/cpu: Get rid of compute_unit_id (Borislav Petkov)  [Orabug: 28783929]  
  - x86/topology: Fix AMD core count (Peter Zijlstra)  [Orabug: 28783929]  
  - perf/x86/amd: Move nodes_per_socket into bsp_init_amd() (Huang Rui)  [Orabug: 28783929]  
  - x86/cpu/amd: Give access to the number of nodes in a physical package (Aravind Gopalakrishnan)  [Orabug: 28783929]  
  - ocfs2: should wait dio before inode lock in ocfs2_setattr() (alex chen)  [Orabug: 28852806]  {CVE-2017-18204} 
  - Update dracut version requirement within the kernel (Jie Li)  [Orabug: 28873097]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.21.1.el6uek]
changelog:
  - hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:447! (Mike Kravetz)  [Orabug: 28839992]  
  - scsi: libsas: fix memory leak in sas_smp_get_phy_events() (Jason Yan)  [Orabug: 27927687]  {CVE-2018-7757} 
  - KVM: vmx: shadow more fields that are read/written on every vmexits (Paolo Bonzini)  [Orabug: 28581045]  
  - vhost/scsi: Use common handling code in request queue handler (Bijan Mottahedeh)  [Orabug: 28775573]  
  - vhost/scsi: Extract common handling code from control queue handler (Bijan Mottahedeh)  [Orabug: 28775573]  
  - vhost/scsi: Respond to control queue operations (Bijan Mottahedeh)  [Orabug: 28775573]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.8.el6uek]
changelog:
  - scsi: lpfc: devloss timeout race condition caused null pointer reference (James Smart)  [Orabug: 27994179]  
  - scsi: qla2xxx: Fix race condition between iocb timeout and initialisation (Ben Hutchings)  [Orabug: 28013813]  
  - i40e: Add programming descriptors to cleaned_count (Alexander Duyck)  [Orabug: 28228724]  
  - i40e: Fix memory leak related filter programming status (Alexander Duyck)  [Orabug: 28228724]  
  - xen-swiotlb: use actually allocated size on check physical continuous (Joe Jin)  [Orabug: 28258102]  
  - Revert "Revert "xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent"" (Dongli Zhang)  [Orabug: 28258102]  
  - net/mlx4_en: fix potential use-after-free with dma_unmap_page (Sarah Newman)  [Orabug: 28376051]  
  - ocfs2: fix ocfs2 read block panic (Junxiao Bi)  [Orabug: 28580543]  
  - block: fix bdi vs gendisk lifetime mismatch (Dan Williams)  [Orabug: 28645416]  
  - e1000e: Fix link check race condition (Benjamin Poirier)  [Orabug: 28716958]  
  - Revert "e1000e: Separate signaling for link check/link up" (Benjamin Poirier)  [Orabug: 28716958]  
  - e1000e: Avoid missed interrupts following ICR read (Benjamin Poirier)  [Orabug: 28716958]  
  - e1000e: Fix queue interrupt re-raising in Other interrupt (Benjamin Poirier)  [Orabug: 28716958]  
  - Partial revert "e1000e: Avoid receiver overrun interrupt bursts" (Benjamin Poirier)  [Orabug: 28716958]  
  - e1000e: Remove Other from EIAC (Benjamin Poirier)  [Orabug: 28716958]  
  - Fix error code in nfs_lookup_verify_inode() (Lance Shelton)  [Orabug: 28789030]  
  - workqueue: Allow modifying low level unbound workqueue cpumask (Lai Jiangshan)  [Orabug: 28813166]  
  - workqueue: Create low-level unbound workqueues cpumask (Frederic Weisbecker)  [Orabug: 28813166]  
  - scsi: sg: mitigate read/write abuse (Jann Horn)  [Orabug: 28824718]  {CVE-2017-13168}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.7.el6uek]
changelog:
  - Revert "rds: RDS (tcp) hangs on sendto() to unresponding address" (Brian Maly)  [Orabug: 28837953]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.6.el6uek]
changelog:
  - x86/speculation: Retpoline should always be available on Skylake (Alexandre Chartre)  [Orabug: 28801831]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.5.el6uek]
changelog:
  - x86/speculation: Add sysfs entry to enable/disable retpoline (Alexandre Chartre)  [Orabug: 28607548]  
  - x86/speculation: Switch to IBRS when loading a non-retpoline module (Alexandre Chartre)  [Orabug: 28607548]  
  - x86/speculation: Remove unnecessary retpoline alternatives (Alexandre Chartre)  [Orabug: 28607548]  
  - x86/speculation: Use static key to enable/disable retpoline (Alexandre Chartre)  [Orabug: 28607548]  
  - locking/static_keys: Provide DECLARE and well as DEFINE macros (Tony Luck)  [Orabug: 28607548]  
  - jump_label: remove bug.h, atomic.h dependencies for HAVE_JUMP_LABEL (Jason Baron)  [Orabug: 28607548]  
  - locking/static_key: Fix concurrent static_key_slow_inc() (Paolo Bonzini)  [Orabug: 28607548]  
  - jump_label: make static_key_enabled() work on static_key_true/false types too (Tejun Heo)  [Orabug: 28607548]  
  - locking/static_keys: Fix up the static keys documentation (Jonathan Corbet)  [Orabug: 28607548]  
  - locking/static_keys: Fix a silly typo (Jonathan Corbet)  [Orabug: 28607548]  
  - jump label, locking/static_keys: Update docs (Jason Baron)  [Orabug: 28607548]  
  - x86/asm: Add asm macros for static keys/jump labels (Andy Lutomirski)  [Orabug: 28607548]  
  - x86/asm: Error out if asm/jump_label.h is included inappropriately (Andy Lutomirski)  [Orabug: 28607548]  
  - jump_label/x86: Work around asm build bug on older/backported GCCs (Peter Zijlstra)  [Orabug: 28607548]  
  - locking/static_keys: Add a new static_key interface (Peter Zijlstra)  [Orabug: 28607548]  
  - locking/static_keys: Rework update logic (Peter Zijlstra)  [Orabug: 28607548]  
  - jump_label: Add jump_entry_key() helper (Peter Zijlstra)  [Orabug: 28607548]  
  - jump_label, locking/static_keys: Rename JUMP_LABEL_TYPE_* and related helpers to the static_key* pattern (Peter Zijlstra)  [Orabug: 28607548]  
  - jump_label: Rename JUMP_LABEL_{EN,DIS}ABLE to JUMP_LABEL_{JMP,NOP} (Peter Zijlstra)  [Orabug: 28607548]  
  - module, jump_label: Fix module locking (Peter Zijlstra)  [Orabug: 28607548]  
  - x86/speculation: Protect against userspace-userspace spectreRSB (Jiri Kosina)  [Orabug: 28631590]  {CVE-2018-15572} 
  - x86/spectre_v2: Remove remaining references to lfence mitigation (Alejandro Jimenez)  [Orabug: 28631590]  {CVE-2018-15572} 
  - Revert "md: allow a partially recovered device to be hot-added to an array." (NeilBrown)  [Orabug: 28702623]  
  - x86/bugs: ssbd_ibrs_selected called prematurely (Daniel Jordan)  [Orabug: 28788839]  
  - net/mlx4_core: print firmware version during driver loading (Qing Huang)  [Orabug: 28809377]  
  - mm: numa: Do not trap faults on shared data section pages. (Henry Willard)  [Orabug: 28814880]  
  - hugetlbfs: dirty pages as they are added to pagecache (Mike Kravetz)  [Orabug: 28813968]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.4.el6uek]
changelog:
  - rds: RDS (tcp) hangs on sendto() to unresponding address (Ka-Cheong Poon)  [Orabug: 28762608]  
  - nfs: fix a deadlock in nfs client initialization (Scott Mayhew)  [Orabug: 28486463]  
  - infiniband: fix a possible use-after-free bug (Cong Wang)  [Orabug: 28774517]  {CVE-2018-14734}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.3.el6uek]
changelog:
  - x86/bugs/IBRS: properly use the _base ops if IBRS is currently unset (Zhenzhong Duan)  [Orabug: 28782729]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.2.el6uek]
changelog:
  - hugetlbfs: check for reserve page count going negative (Mike Kravetz)  [Orabug: 28734496]  
  - hugetlbfs: introduce truncation/fault mutex to avoid races (Mike Kravetz)  [Orabug: 28734496]  
  - mm/hugetlb.c: don't call region_abort if region_chg fails (Mike Kravetz)  [Orabug: 28734496]  
  - mm: hugetlb: fix hugepage memory leak caused by wrong reserve count (Naoya Horiguchi)  [Orabug: 28734496]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.1.el6uek]
changelog:
  - bnxt_en: xdp: don't make drivers report attachment mode (partial backport) (Somasundaram Krishnasamy)  [Orabug: 27988326]  
  - bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (Nikita V. Shirokov)  [Orabug: 27988326]  
  - bnxt_en: add meta pointer for direct access (partial backport) (Somasundaram Krishnasamy)  [Orabug: 27988326]  
  - bnxt_en: Fix bug in ethtool -L. (Michael Chan)  [Orabug: 27988326]  
  - bpf: bnxt: Report bpf_prog ID during XDP_QUERY_PROG (Martin KaFai Lau)  [Orabug: 27988326]  
  - bnxt_en: Optimize doorbell write operations for newer chips (reapply). (Michael Chan)  [Orabug: 27988326]  
  - bnxt_en: Use short TX BDs for the XDP TX ring. (Michael Chan)  [Orabug: 27988326]  
  - bnxt_en: Add ethtool mac loopback self test (reapply). (Michael Chan)  [Orabug: 27988326]  
  - bnxt_en: Add support for XDP_TX action. (Michael Chan)  [Orabug: 27988326]  
  - bnxt_en: Add basic XDP support. (Michael Chan)  [Orabug: 27988326]  
  - x86/ia32: Restore r8 correctly in 32bit SYSCALL instruction entry. (Gayatri Vasudevan)  [Orabug: 28529706]  
  - net: enable RPS on vlan devices (Shannon Nelson)  [Orabug: 28645929]  
  - xen-blkback: hold write vbd-lock while swapping the vbd (Ankur Arora)  [Orabug: 28651655]  
  - xen-blkback: implement swapping of active vbd (Ankur Arora)  [Orabug: 28651655]  
  - xen-blkback: emit active physical device to xenstore (Ankur Arora)  [Orabug: 28651655]  
  - xen-blkback: refactor backend_changed() (Ankur Arora)  [Orabug: 28651655]  
  - xen-blkback: pull out blkif grant features from vbd (Ankur Arora)  [Orabug: 28651655]  
  - mm: get rid of vmacache_flush_all() entirely (Linus Torvalds)  [Orabug: 28701016]  {CVE-2018-17182}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.9.el6uek]
changelog:
  - rds: crash at rds_ib_inc_copy_to_user+104 due to NULL ptr reference (Venkat Venkatsubra)  [Orabug: 28506569]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.8.el6uek]
changelog:
  - IB/core: For multicast functions, verify that LIDs are multicast LIDs (Michael J. Ruhl)  [Orabug: 28700490]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.19.7.el6uek]
changelog:
  - sunrpc: increase UNX_MAXNODENAME from 32 to __NEW_UTS_LEN bytes (Jeff Layton)  [Orabug: 28660177]  
  - net: rds: Use address family to designate IPv4 or IPv6 addresses (Håkon Bugge)  [Orabug: 28720071]  
  - net: rds: Fix blank at eol in af_rds.c (Håkon Bugge)  [Orabug: 28720071]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.6.el6uek]
changelog:
  - exec: Limit arg stack to at most 75% of _STK_LIM (Kees Cook)  [Orabug: 28709994]  {CVE-2018-14634}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.5.el6uek]
changelog:
  - nsfs: mark dentry with DCACHE_RCUACCESS (Cong Wang)  [Orabug: 28576290]  {CVE-2018-5873} 
  - dm crypt: add middle-endian variant of plain64 IV (Konrad Rzeszutek Wilk)  [Orabug: 28604628]  
  - IB/ipoib: Improve filtering log message (Yuval Shaia)  [Orabug: 28655409]  
  - IB/ipoib: Fix wrong update of arp_blocked counter (Yuval Shaia)  [Orabug: 28655409]  
  - IB/ipoib: Update RX counters after ACL filtering (Yuval Shaia)  [Orabug: 28655409]  
  - IB/ipoib: Filter RX packets before adding pseudo header (Yuval Shaia)  [Orabug: 28655409]  
  - cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status (Scott Bauer)  [Orabug: 28664501]  {CVE-2018-16658} 
  - ACPICA: acpi: acpica: fix acpi operand cache leak in nseval.c (Seunghun Han)  [Orabug: 28664577]  {CVE-2017-13695} 
  - uek-rpm: Disable deprecated CONFIG_ACPI_PROCFS_POWER (Victor Erminpour)  [Orabug: 28680213]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.4.el6uek]
changelog:
  - Revert "x86/spec_ctrl: Only set SPEC_CTRL_IBRS_FIRMWARE if IBRS is actually in use" (Brian Maly)  [Orabug: 28610707]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.3.el6uek]
changelog:
  - btrfs: fix check_shared for fiemap ioctl (Lu Fengqi)  [Orabug: 24716710]  
  - x86/pti: Don't report XenPV as vulnerable (Jiri Kosina)  [Orabug: 28476681]  
  - xfs: give all workqueues rescuer threads (Chris Mason)  [Orabug: 28518694]  
  - x86/spec_ctrl: Only set SPEC_CTRL_IBRS_FIRMWARE if IBRS is actually in use (Patrick Colp)  [Orabug: 28274907]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.2.el6uek]
changelog:
  - tcp: add tcp_ooo_try_coalesce() helper (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: call tcp_drop() from tcp_data_queue_ofo() (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: avoid collapses in tcp_prune_queue() if possible (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: free batches of packets in tcp_prune_ofo_queue() (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: use an RB tree for ooo receive queue (Yaogong Wang)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: refine tcp_prune_ofo_queue() to not drop all packets (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: introduce tcp_under_memory_pressure() (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: increment sk_drops for dropped rx packets (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.1.el6uek]
changelog:
  - x86/entry/64: Ensure %ebx handling correct in xen_failsafe_callback (George Kennedy)  [Orabug: 28402927]  {CVE-2018-14678} 
  - x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (Andi Kleen)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Suggest what to do on systems with too much RAM (Vlastimil Babka)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix off-by-one error when warning that system has too much RAM (Vlastimil Babka)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Vlastimil Babka)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Exempt zeroed PTEs from inversion (Sean Christopherson)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled (Guenter Roeck)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/spectre: Add missing family 6 check to microcode check (Andi Kleen)  [Orabug: 28488808]  {CVE-2018-3620} 
  - KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled (Thomas Gleixner)  [Orabug: 28488808]  {CVE-2018-3646} 
  - x86/microcode: Allow late microcode loading with SMT disabled (Josh Poimboeuf)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/microcode: Do not upload microcode if CPUs are offline (Ashok Raj)  [Orabug: 28488808]  {CVE-2018-3620}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.18.8.el6uek]
changelog:
  - Cipso: cipso_v4_optptr enter infinite loop (yujuan.qi)  [Orabug: 28563992]  {CVE-2018-10938} 
  - Btrfs: fix list_add corruption and soft lockups in fsync (Liu Bo)  [Orabug: 28119834]  
  - x86/paravirt: Fix spectre-v2 mitigations for paravirt guests (Peter Zijlstra)  [Orabug: 28474643] {CVE-2018-15594} 
  - sym53c8xx: fix NULL pointer dereference panic in sym_int_sir() in sym_hipd.c (George Kennedy)  [Orabug: 28481893]  
  - md/raid1: Avoid raid1 resync getting stuck (Jes Sorensen)  [Orabug: 28529228]  
  - x86/spectrev2: Don't set mode to SPECTRE_V2_NONE when retpoline is available. (Boris Ostrovsky)  [Orabug: 28540376]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.18.7.el6uek]
changelog:
  - ext4: avoid deadlock when expanding inode size (Jan Kara)  [Orabug: 25718971]  
  - ext4: properly align shifted xattrs when expanding inodes (Jan Kara)  [Orabug: 25718971]  
  - ext4: fix xattr shifting when expanding inodes part 2 (Jan Kara)  [Orabug: 25718971]  
  - ext4: fix xattr shifting when expanding inodes (Jan Kara)  [Orabug: 25718971]  
  - uek-rpm: Enable perf stripped binary (Victor Erminpour)  [Orabug: 27801171]  
  - nfsd: give out fewer session slots as limit approaches (J. Bruce Fields)  [Orabug: 28023821]  
  - nfsd: increase DRC cache limit (J. Bruce Fields)  [Orabug: 28023821]  
  - uek-rpm: config-debug: Turn off torture testing by default (Knut Omang)  [Orabug: 28261886]  
  - ipmi: Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (Junichi Nomura)   
  - x86/mce/AMD: Give a name to MCA bank 3 when accessed with legacy MSRs (Yazen Ghannam)  [Orabug: 28416303]  
  - Fix up non-directory creation in SGID directories (Linus Torvalds)  [Orabug: 28459477]  {CVE-2018-13405} 
  - scsi: libsas: defer ata device eh commands to libata (Jason Yan)  [Orabug: 28459685]  {CVE-2018-10021} 
  - PCI: Allocate ATS struct during enumeration (Bjorn Helgaas)  [Orabug: 28460092]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.18.6.el6uek]
changelog:
  - qla2xxx: Update the version to 9.00.00.00.41.0-k1. (Giridhar Malavali)  [Orabug: 28172611]  
  - qla2xxx: Utilize complete local DMA buffer for DIF PI inforamtion. (Giridhar Malavali)  [Orabug: 28172611]  
  - qla2xxx: Correction to total data segment count when local DMA buffers used for DIF PI. (Giridhar Malavali)   
  - scsi: megaraid_sas: fix the wrong way to get irq number (Jianchao Wang)  [Orabug: 28436426]  
  - ALSA: seq: Make ioctls race-free (Takashi Iwai)  [Orabug: 28459728]  {CVE-2018-7566} 
  - ALSA: seq: Fix racy pool initializations (Takashi Iwai)  [Orabug: 28459728]  {CVE-2018-7566} 
  - oracleasm: Fix use after free for request processing timer (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Fix incorrectly set flag (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Fix memory leak (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Add ENXIO handling (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Add missing tracepoint (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Don't assume bip was allocated by oracleasm (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: fix asmfs_dir_operations compiler error (Tom Saeger)  [Orabug: 28506080]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.5.el6uek]
changelog:
  - inet: frag: enforce memory limits earlier (Eric Dumazet)  [Orabug: 28450977] {CVE-2018-5391} 
  - x86/mm/pageattr.c: fix page prot mask (Mihai Carabas)  [Orabug: 28492122]  
  - x86/pgtable.h: fix PMD/PUD mask (Mihai Carabas)  [Orabug: 28492122]  
  - x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Toshi Kani)  [Orabug: 28492122]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.4.el6uek]
changelog:
  - kvm/vmx: Don't mark vmx_exit() __exit (Boris Ostrovsky)  [Orabug: 28491688]  
  - x86/speculation: Don't mark cpu_no_l1tf __initconst (Boris Ostrovsky)  [Orabug: 28491688]  
  - x86/speculation: parse l1tf boot parameter early (Boris Ostrovsky)  [Orabug: 28491688]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.3.el6uek]
changelog:
  - posix-timer: Properly check sigevent->sigev_notify (Thomas Gleixner)  [Orabug: 28481412]  {CVE-2017-18344}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.2.el6uek]
changelog:
  - x86/mm/kmmio: Make the tracer robust against L1TF (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/mm/pat: Make set_memory_np() L1TF safe (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/mm/pat: Ensure cpa->pfn only contains page frame numbers (Matt Fleming)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Invert all not present mappings (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Fix SMT supported evaluation (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3620} 
  - KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (KarimAllah Ahmed)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3620} 
  - Documentation/l1tf: Remove Yonah processors from not vulnerable list (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr() (Nicolai Stange)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d (Nicolai Stange)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86: Don't include linux/irq.h from asm/hardirq.h (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush() (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond' (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush() (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paolo Bonzini)  [Orabug: 28220625]  {CVE-2018-3646} 
  - KVM: X86: Introduce kvm_get_msr_feature() (Wanpeng Li)  [Orabug: 28220674]  {CVE-2018-3646} 
  - KVM: x86: Add a framework for supporting MSR-based features (Tom Lendacky)  [Orabug: 28220674]  {CVE-2018-3646} 
  - cpu/hotplug: detect SMT disabled by BIOS (Josh Poimboeuf)  [Orabug: 28220674]  {CVE-2018-3620} 
  - Documentation/l1tf: Fix typos (Tony Luck)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content (Nicolai Stange)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Jiri Kosina)  [Orabug: 28220674]  {CVE-2018-3620} 
  - Documentation: Add section about CPU vulnerabilities (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/bugs, kvm: Introduce boot-time control of L1TF mitigations (Jiri Kosina)  [Orabug: 28220674]  {CVE-2018-3646} 
  - cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Expose SMT control init function (Jiri Kosina)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/kvm: Allow runtime control of L1D flush (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/kvm: Serialize L1D flush parameter setter (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/kvm: Add static key for flush always (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/kvm: Move l1tf setup function (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/l1tf: Handle EPT disabled state proper (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/kvm: Drop L1TF MSR list approach (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/litf: Introduce vmx status variable (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Online siblings when SMT control is turned on (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add find_msr() helper function (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add L1D flush logic (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add L1D MSR based flush (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add L1D flush algorithm (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add module argument for L1TF mitigation (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} {CVE-2018-3646} 
  - locking/static_keys: Add static_key_{en,dis}able() helpers (Peter Zijlstra)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - KVM: x86: Introducing kvm_x86_ops VM init/destroy hooks (Suravee Suthikulpanit)  [Orabug: 28220674]  {CVE-2018-3646} 
  - cpu/hotplug: Boot HT siblings at least once (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - Revert "x86/apic: Ignore secondary threads if nosmt=force" (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix up pte->pfn conversion for PAE (Michal Hocko)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect PAE swap entries against L1TF (Vlastimil Babka)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Borislav Petkov)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpufeatures: Add detection of L1D cache flush support. (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Extend 64bit swap file size limit (Vlastimil Babka)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/apic: Ignore secondary threads if nosmt=force (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/AMD: Evaluate smp_num_siblings early (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Borislav Petkov)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/intel: Evaluate smp_num_siblings early (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/topology: Provide detect_extended_topology_early() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/common: Provide detect_ht_early() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/AMD: Remove the pointless detect_ht() call (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu: Remove the pointless CPU printout (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Provide knobs to control SMT (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/topology: Add topology_max_smt_threads() (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Split do_cpu_down() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/topology: Provide topology_smt_supported() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/smp: Provide topology_is_primary_thread() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/bugs: Move the l1tf function and define pr_fmt properly (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Limit swap file size to MAX_PA/2 (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Add sysfs reporting for l1tf (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Make sure the first page is always reserved (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect swap entries against L1TF (Linus Torvalds)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Change order of offset/type in swap entry (Linus Torvalds)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/mm: Limit mmap() of /dev/mem to valid physical addresses (Craig Bergstrom)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/mm: Prevent non-MAP_FIXED mapping across DEFAULT_MAP_WINDOW border (Kirill A. Shutemov)  [Orabug: 28220674]  {CVE-2018-3620}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.18.1.el6uek]
changelog:
  - x86/speculation: Support per-process SSBD with IBRS (Alexandre Chartre)  [Orabug: 28354043]  
  - Revert "xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent" (Dongli Zhang)  [Orabug: 28441054]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.17.4.el6uek]
changelog:
  - x86/speculation: Implement per-cpu IBRS control (Alexandre Chartre)  [Orabug: 28064081]  
  - IB/mad: Use ID allocator routines to allocate agent number (Hans Westgaard Ry)  [Orabug: 28339815]  
  - x86/mcheck: Reorganize the hotplug callbacks (Sebastian Andrzej Siewior)  [Orabug: 28387566]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.17.3.el6uek]
changelog:
  - rtnetlink: fix rtnl_vfinfo_size (Sabrina Dubroca)  [Orabug: 27998927]  
  - rds: IB: avoid migration to port that is down (Zhu Yanjun)  [Orabug: 28097129]  
  - net/rds: Fix kernel panic caused by a race between setup/teardown (Hans Westgaard Ry)  [Orabug: 28326553]  
  - rds: IB: fix returned value not set error (Zhu Yanjun)  [Orabug: 28356474]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.17.2.el6uek]
changelog:
  - fs: proc: array.c: fix Speculation_Store_Bypass print format (Mihai Carabas)  [Orabug: 28128750]  
  - xfs: don't chain ioends during writepage submission (Dave Chinner)  [Orabug: 28193043]  
  - xfs: factor mapping out of xfs_do_writepage (Dave Chinner)  [Orabug: 28193043]  
  - xfs: xfs_cluster_write is redundant (Dave Chinner)  [Orabug: 28193043]  
  - xfs: Introduce writeback context for writepages (Dave Chinner)  [Orabug: 28193043]  
  - xfs: remove xfs_cancel_ioend (Dave Chinner)  [Orabug: 28193043]  
  - xfs: remove nonblocking mode from xfs_vm_writepage (Dave Chinner)  [Orabug: 28193043]  
  - rds: tcp: cancel all worker threads before shutting down socket (Sowmini Varadhan)  [Orabug: 28298156]  
  - rds: signedness bug (Dan Carpenter)  [Orabug: 28319166]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.17.1.el6uek]
changelog:
  - block: update integrity interval after queue limits change (Ritika Srivastava)  [Orabug: 27586756]  
  - dccp: check sk for closed state in dccp_sendmsg() (Alexey Kodanev)  [Orabug: 28001529]  {CVE-2017-8824} {CVE-2018-1130} 
  - net/rds: Implement ARP flushing correctly (Håkon Bugge)  [Orabug: 28219857]  
  - net/rds: Fix incorrect bigger vs. smaller IP address check (Håkon Bugge)  [Orabug: 28236599]  
  - ocfs2: Fix locking for res->tracking and dlm->tracking_list (Ashish Samant)  [Orabug: 28256391]  
  - xfrm: policy: check policy direction value (Vladis Dronov)  [Orabug: 28256487]  {CVE-2017-11600} {CVE-2017-11600}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.16.6.el6uek]
changelog:
  - add kernel param to pre-allocate NICs (Brian Maly)  [Orabug: 27870400]  
  - mm/mempolicy.c: fix error handling in set_mempolicy and mbind. (Chris Salls)  [Orabug: 28242475]  {CVE-2017-7616} 
  - xhci: Fix USB3 NULL pointer dereference at logical disconnect. (Mathias Nyman)  [Orabug: 27426023]  
  - mlx4_core: restore optimal ICM memory allocation (Eric Dumazet)  [Orabug: 27718303]  
  - mlx4_core: allocate ICM memory in page size chunks (Qing Huang)  [Orabug: 27718303]  
  - kernel/signal.c: avoid undefined behaviour in kill_something_info When running kill(72057458746458112, 0) in userspace I hit the following issue. (mridula shastry)  [Orabug: 28078687]  {CVE-2018-10124} 
  - rds: tcp: compute m_ack_seq as offset from ->write_seq (Sowmini Varadhan)  [Orabug: 28085214]  
  - ext4: fix bitmap position validation (Lukas Czerner)  [Orabug: 28167032]  
  - net/rds: Fix bug in failover_group parsing (Håkon Bugge)  [Orabug: 28198749]  
  - sctp: verify size of a new chunk in _sctp_make_chunk() (Alexey Kodanev)  [Orabug: 28240074]  {CVE-2018-5803}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.16.5.el6uek]
changelog:
  - netfilter: xt_TCPMSS: add more sanity tests on tcph->doff (Eric Dumazet)  [Orabug: 27896802]  {CVE-2017-18017} 
  - kernel/exit.c: avoid undefined behaviour when calling wait4() wait4(-2147483648, 0x20, 0, 0xdd0000) triggers: UBSAN: Undefined behaviour in kernel/exit.c:1651:9 (mridula shastry)  [Orabug: 28049778]  {CVE-2018-10087} 
  - x86/bugs/module: Provide retpoline_modules_only parameter to fail non-retpoline modules (Konrad Rzeszutek Wilk)  [Orabug: 28071992]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.16.2.el6uek]
changelog:
  - netlink: add a start callback for starting a netlink dump (Tom Herbert)  [Orabug: 27169581]  {CVE-2017-16939} 
  - ipsec: Fix aborted xfrm policy dump crash (Herbert Xu)  [Orabug: 27169581]  {CVE-2017-16939}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.16.1.el6uek]
changelog:
  - net/rds: prevent RDS connections using stale ARP entries (Wei Lin Guay)  [Orabug: 28149101]  
  - net/rds: Avoid stalled connection due to CM REQ retries (Wei Lin Guay)  [Orabug: 28068627]  
  - net/rds: use one sided reconnection during a race (Wei Lin Guay)  [Orabug: 28068627]  
  - Revert "Revert "net/rds: Revert "RDS: add reconnect retry scheme for stalled" (Håkon Bugge)  [Orabug: 28068627]  
  - xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent (Joe Jin)  [Orabug: 22910685]  
  - net/rds: Assign the correct service level (Wei Lin Guay)  [Orabug: 27607213]  
  - target: Re-add missing SCF_ACK_KREF assignment in v4.1.y (Nicholas Bellinger)  [Orabug: 27781132]  
  - target: Fix LUN_RESET active I/O handling for ACK_KREF (Nicholas Bellinger)  [Orabug: 27781132]  
  - target: Invoke release_cmd() callback without holding a spinlock (Bart Van Assche)  [Orabug: 27781132]  
  - x86/bugs: Remove the Disabling Spectre v2 mitigation retpoline (Konrad Rzeszutek Wilk)  [Orabug: 27897282]  
  - x86/bugs: Report properly retpoline+IBRS (Konrad Rzeszutek Wilk)   
  - x86/bugs: Don't lie when fallback retpoline is engaged (Konrad Rzeszutek Wilk)   
  - fs: aio: fix the increment of aio-nr and counting against aio-max-nr (Mauricio Faria de Oliveira)  [Orabug: 28079082]  
  - qla2xxx: Enable buffer boundary check when DIF bundling is on. (Rajan Shanmugavelu)  [Orabug: 28130589]  
  - kernel: sys.c: missing break for prctl spec ctrl (Mihai Carabas)  [Orabug: 28144775]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.15.4.el6uek]
changelog:
  - x86/bugs/IBRS: Keep SSBD mitigation in effect if spectre_v2=ibrs is selected (Mihai Carabas)   
  - fs/pstore: update the backend parameter in pstore module (Wang Long)  [Orabug: 27994372]  
  - kvm: vmx: Reinstate support for CPUs without virtual NMI (Paolo Bonzini)  [Orabug: 28041210]  
  - dm crypt: add big-endian variant of plain64 IV (Milan Broz)  [Orabug: 28043932]  
  - x86/bugs: Rename SSBD_NO to SSB_NO (Konrad Rzeszutek Wilk)  [Orabug: 28063992]  {CVE-2018-3639} 
  - KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Tom Lendacky)  [Orabug: 28063992] [Orabug: 28069548]  {CVE-2018-3639} 
  - x86/speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/bugs: Rework spec_ctrl base and mask logic (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/bugs: Expose x86_spec_ctrl_base directly (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/bugs: Unify x86_spec_ctrl_{set_guest,restore_host} (Borislav Petkov)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/speculation: Rework speculative_store_bypass_update() (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/speculation: Add virtualized speculative store bypass disable support (Tom Lendacky)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/speculation: Handle HT correctly on AMD (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/cpufeatures: Add FEATURE_ZEN (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (Borislav Petkov)  [Orabug: 28063992]  {CVE-2018-3639}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.15.3.el6uek]
changelog:
  - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds)  [Orabug: 27947602]  {CVE-2018-1000199} 
  - Revert "perf/hwbp: Simplify the perf-hwbp code, fix documentation" (Brian Maly)  [Orabug: 27947602]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.15.2.el6uek]
changelog:
  - KVM: SVM: Move spec control call after restore of GS (Thomas Gleixner)   {CVE-2018-3639} 
  - x86/bugs: Fix the parameters alignment and missing void (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Make cpu_show_common() static (Jiri Kosina)   {CVE-2018-3639} 
  - x86/bugs: Fix __ssb_select_mitigation() return type (Jiri Kosina)   {CVE-2018-3639} 
  - Documentation/spec_ctrl: Do some minor cleanups (Borislav Petkov)   {CVE-2018-3639} 
  - proc: Use underscores for SSBD in 'status' (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Rename _RDS to _SSBD (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/speculation: Make "seccomp" the default mode for Speculative Store Bypass (Kees Cook)   {CVE-2018-3639} 
  - seccomp: Move speculation migitation control to arch code (Thomas Gleixner)   {CVE-2018-3639} 
  - seccomp: Add filter flag to opt-out of SSB mitigation (Kees Cook)   {CVE-2018-3639} 
  - seccomp: Use PR_SPEC_FORCE_DISABLE (Thomas Gleixner)   {CVE-2018-3639} 
  - prctl: Add force disable speculation (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - seccomp: Enable speculation flaw mitigations (Kees Cook)   {CVE-2018-3639} 
  - proc: Provide details on speculation flaw mitigations (Kees Cook)   {CVE-2018-3639} 
  - nospec: Allow getting/setting on non-current task (Kees Cook)   {CVE-2018-3639} 
  - x86/bugs/IBRS: Disable SSB (RDS) if IBRS is sslected for spectre_v2. (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/speculation: Add prctl for Speculative Store Bypass mitigation (Thomas Gleixner)   {CVE-2018-3639} 
  - x86: thread_info.h: move RDS from index 5 to 23 (Mihai Carabas)   {CVE-2018-3639} 
  - x86/process: Allow runtime control of Speculative Store Bypass (Thomas Gleixner)   {CVE-2018-3639} 
  - prctl: Add speculation control prctls (Thomas Gleixner)   {CVE-2018-3639} 
  - x86/speculation: Create spec-ctrl.h to avoid include hell (Thomas Gleixner)   {CVE-2018-3639} 
  - x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if requested (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Whitelist allowed SPEC_CTRL MSR values (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/intel: Set proper CPU features and setup RDS (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/cpufeatures: Add X86_FEATURE_RDS (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Expose /sys/../spec_store_bypass (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/cpu/intel: Add Knights Mill to Intel family (Piotr Luc)   {CVE-2018-3639} 
  - x86/cpu: Rename Merrifield2 to Moorefield (Andy Shevchenko)   {CVE-2018-3639} 
  - x86/bugs, KVM: Support the combination of guest and host IBRS (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/IBRS: Warn if IBRS is enabled during boot. (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/IBRS: Use variable instead of defines for enabling IBRS (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Concentrate bug reporting into a separate function (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Concentrate bug detection into a separate function (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/IBRS: Turn on IBRS in spectre_v2_select_mitigation (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/msr: Add SPEC_CTRL_IBRS.. (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - scsi: libfc: Revisit kref handling (Hannes Reinecke)   
  - scsi: libfc: reset exchange manager during LOGO handling (Hannes Reinecke)   
  - scsi: libfc: send LOGO for PLOGI failure (Hannes Reinecke)   
  - scsi: libfc: Issue PRLI after a PRLO has been received (Hannes Reinecke)   
  - libfc: Update rport reference counting (Hannes Reinecke)   
  - amd/kvm: do not intercept new MSRs for spectre v2 mitigation (Elena Ufimtseva)   
  - RDS: null pointer dereference in rds_atomic_free_op (Mohamed Ghannam)  [Orabug: 27422832]  {CVE-2018-5333} 
  - ACPI: sbshc: remove raw pointer from printk() message (Greg Kroah-Hartman)  [Orabug: 27501257]  {CVE-2018-5750} 
  - futex: Prevent overflow by strengthen input validation (Li Jinyue)  [Orabug: 27539548]  {CVE-2018-6927} 
  - net: ipv4: add support for ECMP hash policy choice (Venkat Venkatsubra)  [Orabug: 27547114]  
  - net: ipv4: Consider failed nexthops in multipath routes (David Ahern)  [Orabug: 27547114]  
  - ipv4: L3 hash-based multipath (Peter Nørlund)  [Orabug: 27547114]  
  - dm: fix race between dm_get_from_kobject() and __dm_destroy() (Hou Tao)  [Orabug: 27677556]  {CVE-2017-18203} 
  - NFS: only invalidate dentrys that are clearly invalid. (NeilBrown)  [Orabug: 27870824]  
  - net: Improve handling of failures on link and route dumps (David Ahern)  [Orabug: 27959177]  
  - mm/mempolicy: fix use after free when calling get_mempolicy (zhong jiang)  [Orabug: 27963519]  {CVE-2018-10675} 
  - drm: udl: Properly check framebuffer mmap offsets (Greg Kroah-Hartman)  [Orabug: 27963530]  {CVE-2018-8781} 
  - xfs: set format back to extents if xfs_bmap_extents_to_btree (Eric Sandeen)  [Orabug: 27963576]  {CVE-2018-10323} 
  - Revert "mlx4: change the ICM table allocations to lowest needed size" (Håkon Bugge)  [Orabug: 27980030]  
  - Bluetooth: Prevent stack info leak from the EFS element. (Ben Seri)  [Orabug: 28030514]  {CVE-2017-1000410} {CVE-2017-1000410}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.15.1.el6uek]
changelog:
  - netfilter: nfnetlink_cthelper: Add missing permission checks (Kevin Cernekee)  [Orabug: 27260771]  {CVE-2017-17448} 
  - netlink: Add netns check on taps (Kevin Cernekee)  [Orabug: 27260799]  {CVE-2017-17449} 
  - KVM: Fix stack-out-of-bounds read in write_mmio (Wanpeng Li)  [Orabug: 27290606]  {CVE-2017-17741} {CVE-2017-17741} 
  - xprtrdma: Detect unreachable NFS/RDMA servers more reliably (Chuck Lever)  [Orabug: 27587008]  
  - sunrpc: Export xprt_force_disconnect() (Chuck Lever)  [Orabug: 27587008]  
  - sunrpc: Allow xprt->ops->timer method to sleep (Chuck Lever)  [Orabug: 27587008]  
  - KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit (Haozhong Zhang)  [Orabug: 27720128]  
  - x86/microcode: probe CPU features on microcode update (Ankur Arora)  [Orabug: 27878230]  
  - x86/microcode: microcode_write() should not reference boot_cpu_data (Ankur Arora)  [Orabug: 27878230]  
  - x86/cpufeatures: use cpu_data in init_scattered_cpuid_flags() (Ankur Arora)  [Orabug: 27878230]  
  - mm/pagewalk.c: report holes in hugetlb ranges (Jann Horn)  [Orabug: 27913118]  {CVE-2017-16994} 
  - KEYS: don't let add_key() update an uninstantiated key (David Howells)  [Orabug: 27913330]  {CVE-2017-15299} 
  - drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl() (Murray McAllister)  [Orabug: 27913367]  {CVE-2017-7294} 
  - vmscan: Support multiple kswapd threads per node (Buddy Lumpkin)  [Orabug: 27913411]  
  - tcp: don't use F-RTO on non-recurring timeouts (Yuchung Cheng)  [Orabug: 27901860]  
  - net/rds: ib: Release correct number of frags (Håkon Bugge)  [Orabug: 27924161]  
  - crypto: rng - Remove old low-level rng interface (Herbert Xu)  [Orabug: 27926676]  {CVE-2017-15116} 
  - crypto: drbg - Convert to new rng interface (Herbert Xu)  [Orabug: 27926676]  {CVE-2017-15116} 
  - crypto: ansi_cprng - Convert to new rng interface (Herbert Xu)  [Orabug: 27926676]  {CVE-2017-15116} 
  - crypto: krng - Convert to new rng interface (Herbert Xu)  [Orabug: 27926676]  {CVE-2017-15116} 
  - RDS: Heap OOB write in rds_message_alloc_sgs() (Mohamed Ghannam)  [Orabug: 27934066]  {CVE-2018-5332} 
  - net: Fix double free and memory corruption in get_net_ns_by_id() (Eric W. Biederman)  [Orabug: 27934789]  {CVE-2017-15129}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.14.4.el6uek]
changelog:
  - kernel.spec: add requires system-release for OL7 (Brian Maly)  [Orabug: 27955380]  
  - x86/kernel/traps.c: fix trace_die_notifier return value (Kris Van Hees)   {CVE-2018-8897} 
  - x86/entry/64: Dont use IST entry for #BP stack (Andy Lutomirski)   {CVE-2018-8897} 
  - kvm/x86: fix icebp instruction handling (gregkh@linuxfoundation.org)   {CVE-2018-1087}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.14.3.el6uek]
changelog:
  - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds)  [Orabug: 27947602]  {CVE-2018-100199}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.14.2.el6uek]
changelog:
  - scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled (Jianchao Wang)  [Orabug: 27726302]  
  - block: fix bio_will_gap() for first bvec with offset (Ming Lei)  [Orabug: 27775588]  
  - block: relax check on sg gap (Ming Lei)  [Orabug: 27775588]  
  - block: don't optimize for non-cloned bio in bio_get_last_bvec() (Ming Lei)  [Orabug: 27775588]  
  - block: merge: get the 1st and last bvec via helpers (Ming Lei)  [Orabug: 27775588]  
  - block: get the 1st and last bvec via helpers (Ming Lei)  [Orabug: 27775588]  
  - block: check virt boundary in bio_will_gap() (Ming Lei)  [Orabug: 27775588]  
  - block: bio: introduce helpers to get the 1st and last bvec (Ming Lei)  [Orabug: 27775588]  
  - Failing to send a CLOSE if file is opened WRONLY and server reboots on a 4.x mount (Olga Kornievskaia)  [Orabug: 27848303]  
  - ext4: add validity checks for bitmap block numbers (Theodore Ts'o)  [Orabug: 27854373]  {CVE-2018-1093} {CVE-2018-1093} 
  - ocfs2: Take inode cluster lock before moving reflinked inode from orphan dir (Ashish Samant)  [Orabug: 27869411]  
  - Input: gtco - fix potential out-of-bound access (Dmitry Torokhov)  [Orabug: 27869844]  {CVE-2017-16643} 
  - Input: ims-psu - check if CDC union descriptor is sane (Dmitry Torokhov)  [Orabug: 27870333]  {CVE-2017-16645} 
  - vfio/pci: Virtualize Maximum Payload Size (Alex Williamson)   
  - vfio-pci: Virtualize PCIe & AF FLR (Alex Williamson)   
  - uek-rpm: Disable DMA CMA (Jianchao Wang)  [Orabug: 27892359]  
  - nvme-pci: fix multiple ctrl removal scheduling (Rakesh Pandit)  [Orabug: 27892359]  
  - nvme-pci: Fix nvme queue cleanup if IRQ setup fails (Jianchao Wang)  [Orabug: 27892359]  
  - nvme/pci: Fix stuck nvme reset (Keith Busch)  [Orabug: 27892359]  
  - nvme: don't schedule multiple resets (Keith Busch)  [Orabug: 27892359]  
  - blk-mq: fix use-after-free in blk_mq_free_tag_set() (Junichi Nomura)  [Orabug: 27892359]  
  - USB: core: prevent malicious bNumInterfaces overflow (Alan Stern)  [Orabug: 27895909]  
  - driver core: platform: fix race condition with driver_override (Adrian Salido)  [Orabug: 27897874]  {CVE-2017-12146} 
  - usb/core: usb_alloc_dev(): fix setting of ->portnum (Nicolai Stange)  [Orabug: 27908746]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.14.1.el6uek]
changelog:
  - ctf: drop the run-as-root error (Nick Alcock)  [Orabug: 27852654]  
  - rds: Node crashes when trace buffer is opened (Ka-Cheong Poon)  [Orabug: 27846191]  
  - xfs: fix accidental reversion of aa6a6227435cb (Darrick J. Wong)  [Orabug: 27845869]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.13.1.el6uek]
changelog:
  - net: cdc_ether: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27841392]  {CVE-2017-16649} 
  - sysctl: Drop reference added by grab_header in proc_sys_readdir (Zhou Chengming)  [Orabug: 27841944]  {CVE-2016-9191} {CVE-2016-9191} {CVE-2016-9191} 
  - Revert "sysctl: Drop reference added by grab_header in proc_sys_readdir" (Jack Vogel)


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.12.1.el6uek]
changelog:
  - xfs: remove "no-allocation" reservations for file creations (Darrick J. Wong)  [Orabug: 27609439]  
  - xfs: don't print warnings when xfs_log_force fails (Christoph Hellwig)  [Orabug: 27609404]  
  - xfs: Properly retry failed dquot items in case of error during buffer writeback (Carlos Maiolino)  [Orabug: 27609404]  
  - xfs: Properly retry failed inode items in case of error during buffer  writeback (Carlos Maiolino)  [Orabug: 27609404]  
  - xfs: Add infrastructure needed for error propagation during buffer IO  failure (Carlos Maiolino)  [Orabug: 27609404]  
  - xfs: remove xfs_trans_ail_delete_bulk (Christoph Hellwig)  [Orabug: 27609404]  
  - xfs: fix and streamline error handling in xfs_end_io (Darrick J. Wong)  [Orabug: 27609404]  
  - xfs: don't leave EFIs on AIL on mount failure (Brian Foster)  [Orabug: 27609404]  
  - xfs: use EFI refcount consistently in log recovery (Brian Foster)  [Orabug: 27609404]  
  - xfs: ensure EFD trans aborts on log recovery extent free failure (Brian Foster)  [Orabug: 27609404]  
  - xfs: fix efi/efd error handling to avoid fs shutdown hangs (Brian Foster)  [Orabug: 27609404]  
  - xfs: return committed status from xfs_trans_roll() (Brian Foster)  [Orabug: 27609404]  
  - xfs: disentagle EFI release from the extent count (Brian Foster)  [Orabug: 27609404]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.11.1.el6uek]
changelog:
  - netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal)  [Orabug: 27774012]  {CVE-2018-1068} 
  - ACPI / PAD: don't register acpi_pad driver if running as Xen dom0 (Juergen Gross)  [Orabug: 27796473]  
  - sched/fair: Fix typo in sync_throttle() (Xunlei Pang)  [Orabug: 27787518]  
  - sched/fair: Do not announce throttled next buddy in dequeue_task_fair() (Konstantin Khlebnikov)  [Orabug: 27787518]  
  - sched/fair: Initialize and rework throttle_count for new task-groups (Peter Zijlstra)  [Orabug: 27787518]  
  - perf tools: Move syscall number fallbacks from perf-sys.h to tools/arch/x86/include/asm/ (Arnaldo Carvalho de Melo)  [Orabug: 27240053]  
  - crypto: FIPS - allow tests to be disabled in FIPS mode (Stephan Mueller)  [Orabug: 27809271]  
  - crypto: xts - consolidate sanity check for keys (Stephan Mueller)  [Orabug: 27809271]  
  - crypto: rng - Zero seed in crypto_rng_reset (Herbert Xu)  [Orabug: 27809271]  
  - enic: set IG desc cache flag in open (Govindarajulu Varadarajan)  [Orabug: 27587345]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.10.1.el6uek]
changelog:
  - Drivers: hv: utils: fix crash when device is removed from host side (Vitaly Kuznetsov)  [Orabug: 27426102]  
  - Drivers: hv: utils: introduce HVUTIL_TRANSPORT_DESTROY mode (Vitaly Kuznetsov)  [Orabug: 27426102]  
  - Drivers: hv: utils: rename outmsg_lock (Vitaly Kuznetsov)  [Orabug: 27426102]  
  - Drivers: hv: utils: fix memory leak on on_msg() failure (Vitaly Kuznetsov)  [Orabug: 27426102]  
  - Drivers: hv: utils: use memdup_user in hvt_op_write (Olaf Hering)  [Orabug: 27426102]  
  - hv: util: checking the wrong variable (Dan Carpenter)  [Orabug: 27426102]  
  - net/rds: Avoid copy overhead if send buff is full (Gerd Rausch)  [Orabug: 27747165]  
  - ext4: fix ->put_link panic (Junxiao Bi)  [Orabug: 27498770]  
  - KVM/VMX: Clear spec_ctrl status when resetting vcpu (Patrick Colp)   
  - mlx4: change the ICM table allocations to lowest needed size (Daniel Jurgens)  [Orabug: 27718303]  
  - Revert "Drivers: hv: utils: fix a race on userspace daemons registration" (Jack Vogel)  [Orabug: 27673755]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.9.1.el6uek]
changelog:
  - crypto: af_alg - Avoid sock_graft call warning (Herbert Xu)  [Orabug: 26895616]  
  - iscsi-target: Fix initial login PDU asynchronous socket close OOPs (Nicholas Bellinger)  [Orabug: 27701211]  
  - target/iscsi: Fix indentation in iscsi_target_start_negotiation() (Bart Van Assche)  [Orabug: 27701211]  
  - iscsi-target: Fix early sk_data_ready LOGIN_FLAGS_READY race (Nicholas Bellinger)  [Orabug: 27701211]  
  - iscsi-target: Fix rx_login_comp hang after login failure (Nicholas Bellinger)  [Orabug: 27701211]  
  - KVM: x86: fix singlestepping over syscall (Paolo Bonzini)  [Orabug: 27669904]  {CVE-2017-7518} {CVE-2017-7518} 
  - nfs: system crashes after NFS4ERR_MOVED recovery (Bill.Baker@oracle.com)  [Orabug: 27679350]  
  - NFS: Clean up nfs4_set_client() (Anna Schumaker)  [Orabug: 27679350]  
  - NFS4: Avoid migration loops (Benjamin Coddington)  [Orabug: 27679350]  
  - mstflint: update Makefile and Kconfig (Qing Huang)  [Orabug: 27707445]  
  - target: add inquiry_product module param to override LIO default (Kyle Fortin)  [Orabug: 27679431]  
  - target: add inquiry_vendor module param to override LIO-ORG (Kyle Fortin)  [Orabug: 27679431]  
  - IB/core: Avoid calling ib_query_device (Or Gerlitz)  [Orabug: 27687711]  
  - IB/core: Save the device attributes on the device structure (Ira Weiny)  [Orabug: 27687711]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.8.1.el6uek]
changelog:
  - nvme: fix uninitialized prp2 value on small transfers (Jan H. Schönherr)  [Orabug: 27624149]  
  - bnxt_en: initialize bnxt_pf_wq (Brian Maly)  [Orabug: 27674029]  
  - x86/spectre_v2: Fix cpu offlining with IPBP. (Konrad Rzeszutek Wilk)


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.7.1.el6uek]
changelog:
  - retpoline: selectively disable IBRS in disable_ibrs_and_friends() (Chuck Anderson)  [Orabug: 27665263]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.6.1.el6uek]
changelog:
  - bnxt_en: Add cache line size setting to optimize performance. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Forward VF MAC address to the PF. (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Add BCM5745X NPAR device IDs (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Expand bnxt_check_rings() to check all resources. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Implement new method for the PF to assign SRIOV resources. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Reserve resources for RFS. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Implement new method to reserve rings. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Set initial default RX and TX ring numbers the same in combined mode. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Add the new firmware API to query hardware resources. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Refactor hardware resource data structures. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Restore MSIX after disabling SRIOV. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Refactor bnxt_close_nic(). (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Update firmware interface to 1.9.0. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Fix the 'Invalid VF' id check in bnxt_vf_ndo_prep routine. (Venkat Duvvuru)  [Orabug: 27648355]  
  - bnxt_en: Fix sources of spurious netpoll warnings (Calvin Owens)  [Orabug: 27648355]  
  - bnxt_en: Don't print "Link speed -1 no longer supported" messages. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg() (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown (Ray Jui)  [Orabug: 27648355]  
  - bnxt_en: Fix an error handling path in 'bnxt_get_module_eeprom()' (Christophe JAILLET)  [Orabug: 27648355]  
  - bnxt: fix bnxt_hwrm_fw_set_time for y2038 (Arnd Bergmann)  [Orabug: 27648355]  
  - bnxt_en: Fix IRQ coalescing regression. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: fix typo in bnxt_set_coalesce (Andy Gospodarek)  [Orabug: 27648355]  
  - bnxt_en: Refactor and simplify coalescing code. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Reorganize the coalescing parameters. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Add ethtool reset method (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Optimize .ndo_set_mac_address() for VFs. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Get firmware package version one time. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Check for zero length value in bnxt_get_nvram_item(). (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: adding PCI ID for SMARTNIC VF support (Rob Miller)  [Orabug: 27648355]  
  - bnxt_en: Add PCIe device ID for bcm58804 (Ray Jui)  [Orabug: 27648355]  
  - bnxt_en: Update firmware interface to 1.8.3.1 (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Fix possible corruption in DCB parameters from firmware. (Sankar Patchineelam)  [Orabug: 27648355]  
  - bnxt_en: Fix VF resource checking. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Fix VF PCIe link speed and width logic. (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Don't use rtnl lock to protect link change logic in workqueue. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Improve VF/PF link change logic. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Remove redundant unlikely() (Tobias Klauser)  [Orabug: 27648355]  
  - drivers: net: bnxt: use setup_timer() helper. (Allen Pais)  [Orabug: 27648355]  
  - bnxt_en: Reduce default rings on multi-port cards. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Improve -ENOMEM logic in NAPI poll loop. (Michael Chan)  [Orabug: 27648355]  
  - bnxt: initialize board_info values with proper enums (Scott Branden)  [Orabug: 27648355]  
  - bnxt: Add PCIe device IDs for bcm58802/bcm58808 (Ray Jui)  [Orabug: 27648355]  
  - bnxt_en: assign CPU affinity hints to bnxt_en IRQs (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Improve tx ring reservation logic. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Update firmware interface spec. to 1.8.1.4. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Do not setup MAC address in bnxt_hwrm_func_qcaps(). (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Free MSIX vectors when unregistering the device from bnxt_re. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Fix .ndo_setup_tc() to include XDP rings. (Michael Chan)  [Orabug: 27648355]  
  - bnxt: fix unused variable warnings (stephen hemminger)  [Orabug: 27648355]  
  - bnxt: fix unsigned comparsion with 0 (stephen hemminger)  [Orabug: 27648355]  
  - bnxt_en: Use SWITCHDEV_SET_OPS(). (David S. Miller)  [Orabug: 27648355]  
  - bnxt_en: Set ETS min_bw parameter for older firmware. (Michael Chan)  [Orabug: 27648355]  
  - dccp/tcp: fix routing redirect race (Jon Maxwell)  [Orabug: 27661864]  
  - Revert "RDS: don't commit to queue till transport connection is up" (Santosh Shilimkar)  [Orabug: 27606911]  
  - be2net: locking/atomics: COCCINELLE/treewide: Convert trivial   ACCESS_ONCE() patterns to READ_ONCE()/WRITE_ONCE() (Mark Rutland)  [Orabug: 27615319]  
  - be2net: Handle transmit completion errors in Lancer (Suresh Reddy)  [Orabug: 27615319]  
  - be2net: Fix HW stall issue in Lancer (Suresh Reddy)  [Orabug: 27615319]  
  - be2net: remove redundant initialization of 'head' and pointer txq (Colin Ian King)  [Orabug: 27615319]  
  - be2net: networking block comments don't use an empty /* line (Rohit Visavalia)  [Orabug: 27615319]  
  - be2net: restore properly promisc mode after queues reconfiguration (Ivan Vecera)  [Orabug: 27615319]  
  - be2net: use ARRAY_SIZE for array sizing calculation on array cmd_priv_map (Colin Ian King)  [Orabug: 27615319]  
  - RDS: IB: Fix null pointer issue (Guanglei Li)  [Orabug: 27636711]  
  - xen/acpi: upload _PSD info for non-dom0 CPUs too (Joao Martins)  [Orabug: 27655759]  
  - scsi: lpfc: Update 11.4.0.7 modified files for 2018 Copyright (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: update driver version to 11.4.0.7 (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Treat SCSI Write operation Underruns as an error (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix SCSI io host reset causing kernel crash (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix issue_lip if link is disabled (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix soft lockup in lpfc worker thread during LIP testing (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Allow set of maximum outstanding SCSI cmd limit for a target (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix PRLI handling when topology type changes (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: fix a couple of minor indentation issues (Colin Ian King)  [Orabug: 27631736]  
  - scsi: lpfc: update driver version to 11.4.0.6 (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: update driver version to 11.4.0.5 (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: FLOGI failures are reported when connected to a private loop. (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix ndlp ref count for pt2pt mode issue RSCN (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Linux LPFC driver does not process all RSCNs (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Driver fails to detect direct attach storage array (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix crash after bad bar setup on driver attachment (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix hard lock up NMI in els timeout handling. (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: change version to 11.4.0.4 (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: Extend RDP support (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: Fix secure firmware updates (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: PLOGI failures during NPIV testing (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: Fix crash receiving ELS while detaching driver (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: fix pci hot plug crash in list_add call (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: fix pci hot plug crash in timer management routines (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: remove redundant null check on eqe (Colin Ian King)  [Orabug: 27631736]  
  - scsi: lpfc: lpfc version bump 11.4.0.3 (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi)  [Orabug: 27631736]  
  - scsi: lpfc: Add Buffer to Buffer credit recovery support (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Correct issues with FAWWN and FDISCs (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: Fix rediscovery on switch blade pull (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: remove useless code in lpfc_sli4_bsg_link_diag_test (Gustavo A. R. Silva)  [Orabug: 27631736]  
  - scsi: lpfc: Fix plogi collision that causes illegal state transition (Dick Kennedy)  [Orabug: 27631736]  
  - lpfc: Fix Express lane queue creation (Maurizio Lombardi)  [Orabug: 27631736]  
  - Cosmetic updates to arch/x86/kernel/cpu/microcode/xen.c to pass checkpatch.pl and match UEK5 code. (Aaron Young)  [Orabug: 27640697]  
  - Incorporate arch/x86/kernel/cpu/microcode/xen.c into cpu microcode driver. (Aaron Young)  [Orabug: 27640697]  
  - 1. Move arch/x86/kernel/microcode_xen.c file to proper cpu microcode driver    location and rename to arch/x86/kernel/cpu/microcode/xen.c. (Aaron Young)  [Orabug: 27640697]  
  - fork: fix incorrect fput of ->exe_file causing use-after-free (Eric Biggers)  [Orabug: 27648200]  {CVE-2017-17052} 
  - scsi: megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: NVMe passthrough command support (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid: use ktime_get_real for firmware time (Arnd Bergmann)  [Orabug: 27625001]  
  - scsi: megaraid_sas: driver version upgrade (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: re-work DCMD refire code (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Expose fw_cmds_outstanding through sysfs (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Selectively apply stream detection based on IO type (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Update LD map after populating drv_map driver map copy (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Use megasas_wait_for_adapter_operational to detect controller state in IOCTL path (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Avoid firing DCMDs while OCR is in progress (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: unload flag should be set after scsi_remove_host is called (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Error handling for invalid ldcount provided by firmware in RAID map (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Reset ldio_outstanding in megasas_resume (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Return the DCMD status from megasas_get_seq_num (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: memset IOC INIT frame using correct size (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: zero out IOC INIT and stream detection memory (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: fix spelling mistake: "thershold" -> "threshold" (Colin Ian King)  [Orabug: 27625001]  
  - scsi: megaraid: Remove redundant code in megasas_alloc_cmds (Yisheng Xie)  [Orabug: 27625001]  
  - License cleanup: add SPDX GPL-2.0 license identifier to files with no license (Greg Kroah-Hartman)  [Orabug: 27625001]  
  - scsi: megaraid_sas: driver version upgrade (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Add support for 64bit consistent DMA (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Do not limit queue_depth to 1k in non-RDPQ mode (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Retry with reduced queue depth when alloc fails for higher QD (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Incorrect processing of IOCTL frames for SMP/STP commands (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Resize MFA frame used for IOC INIT to 4k (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Update current host time to FW during IOC Init (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Move controller memory allocations and DMA mask settings from probe to megasas_init_fw (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Move initialization of instance parameters inside newly created function megasas_init_ctrl_params (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: remove instance->ctrl_info (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Pre-allocate frequently used DMA buffers (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Create separate functions for allocating and freeing controller DMA buffers (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Create separate functions to allocate ctrl memory (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: reduce size of fusion_context and use kmalloc for allocation (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: replace is_ventura with adapter_type checks (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Remove redundant checks for ctrl_context (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: replace instance->ctrl_context checks with instance->adapter_type (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Add support for Crusader controllers (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: use adapter_type for all gen controllers (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: driver version upgrade (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: call megasas_dump_frame with correct IO frame size (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: modified few prints in OCR and IOC INIT path (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: replace internal FALSE/TRUE definitions with false/true (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Return pended IOCTLs with cmd_status MFI_STAT_WRONG_STATE in case adapter is dead (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: use vmalloc for crash dump buffers and driver's local RAID map (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Use SMID for Task abort case only (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Check valid aen class range to avoid kernel panic (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Fix endianness issues in DCMD handling (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Do not re-fire shutdown DCMD after OCR (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Call megasas_complete_cmd_dpc_fusion every 1 second while there are pending commands (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Use synchronize_irq in target reset case (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: set minimum value of resetwaittime to be 1 secs (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: mismatch of allocated MFI frame size and length exposed in MFI MPT pass through command (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: fix error handle in megasas_probe_one (weiping zhang)  [Orabug: 27625001]  
  - scsi: megaraid_sas: fix allocate instance->pd_info twice (weiping)  [Orabug: 27625001]  
  - scsi: remove DRIVER_ATTR() usage (Greg Kroah-Hartman)  [Orabug: 27625001]  
  - scsi: megaraid: Replace PCI pool old API (Romain Perier)  [Orabug: 27625001]  
  - scsi: megaraid_sas: fix memleak in megasas_alloc_cmdlist_fusion (Shu Wang)  [Orabug: 27625001]  
  - scsi: megaraid: Fix a sleep-in-atomic bug (Jia-Ju Bai)  [Orabug: 27625001]  
  - drivers/scsi/megaraid: remove expensive inline from megasas_return_cmd (Andi Kleen)  [Orabug: 27625001]  
  - megaraid_sas: remove redundant code initialzing *pDevHandle with MR_DEVHANDLE_INVALID (Sumit Saxena)  [Orabug: 27625001]  
  - usb: usbtest: fix NULL pointer dereference (Alan Stern)  [Orabug: 27602322]  {CVE-2017-16532} 
  - rds: Incorrect reference counting in TCP socket creation (Ka-Cheong Poon)  [Orabug: 27602824]  
  - enic: enable rq before updating rq descriptors (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - enic: add sw timestamp support (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - enic: add wq clean up budget (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - enic: Add support for 'ethtool -g/-G' (Parvi Kaustubhi)  [Orabug: 27587345]  
  - enic: reset fetch index (Parvi Kaustubhi)  [Orabug: 27587345]  
  - drivers: net: enic: use setup_timer() helper. (Allen Pais)  [Orabug: 27587345]  
  - drivers: net: enic: use setup_timer() helper. (Allen Pais)  [Orabug: 27587345]  
  - enic: update enic maintainers (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - cisco: enic: Fic an error handling path in 'vnic_dev_init_devcmd2()' (Christophe Jaillet)  [Orabug: 27587345]  
  - enic: Fix format truncation warning (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - enic: add devcmds for vxlan offload (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - enic: increment devcmd2 result ring in case of timeout (Sandeep Pillai)  [Orabug: 27587345]  
  - scsi: fnic: use kzalloc in fnic_fcoe_process_vlan_resp (Rasmus Villemoes)  [Orabug: 27587343]  
  - scsi: fnic: add a space after %p in printf format (Nicolas Iooss)  [Orabug: 27587343]  
  - scsi: fnic: Fix coccinelle warnings (Vasyl Gomonovych)  [Orabug: 27587343]  
  - scsi: fnic: do not call host reset from command abort (Hannes Reinecke)  [Orabug: 27587343]  
  - scsi: fnic: fix format string overflow warning (Arnd Bergmann)  [Orabug: 27587343]  
  - scsi: fnic: correct speed display and add support for 25,40 and 100G (Satish Kharat)  [Orabug: 27587343]  
  - scsi: fnic: added timestamp reporting in fnic debug stats (Satish Kharat)  [Orabug: 27587343]  
  - scsi: fnic: Zero io_cmpl_skip on fw reset completion (Satish Kharat)  [Orabug: 27587343]  
  - scsi: fnic: Ratelimit printks to avoid flooding when vlan is not set by the switch.i (Satish Kharat)  [Orabug: 27587343]  
  - scsi: fnic: use kernel's '%pM' format option to print MAC (Andy Shevchenko)  [Orabug: 27587343]  
  - fnic: pci_dma_mapping_error() doesn't return an error code (Dan Carpenter)  [Orabug: 27587343]  
  - fnic: move printk()s outside of the critical code section. (Maurizio Lombardi)  [Orabug: 27587343]  
  - fnic: check pci_map_single() return value (Maurizio Lombardi)  [Orabug: 27587343]  
  - retpoline: move setting of sysctl_ibrs_enabled and sysctl_ibpb_enabled to where SPEC_CTRL_IBRS_INUSE and SPEC_CTRL_IBPB_INUSE are set (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: set IBRS and IBPB in use only on the boot CPU call to init_scattered_cpuid_features() (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: display IBPB feature status along with IBRS status (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: move lock/unlock of spec_ctrl_mutex to check_modinfo() (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: call clear_retpoline_fallback() with boot parm spectre_v2_heuristics=off (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: add brackets to check_ibrs_inuse() and clear_ibpb_inuse() (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline/module: do not enable IBRS/IPBP if SPEC_CTRL_IBRS_ADMIN_DISABLED/SPEC_CTRL_IBPB_ADMIN_DISABLED is set (Chuck Anderson)  [Orabug: 27625353]  
  - retpoline: microcode incorrectly reported as broken during early boot (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: move lock/unlock of spec_ctrl_mutex into init_scattered_cpuid_features() (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline/module: fall back to another spectre mitigation when disabling retpoline (Chuck Anderson)  [Orabug: 27457549]  
  - retpoline/module: add bit defs for use_ibpb (Chuck Anderson)  [Orabug: 27457549]  
  - x86/spectre_v2: Fix the documentation to say the right thing. (Konrad Rzeszutek Wilk)   
  - x86/spectre_v2: Don't check bad microcode versions when running under hypervisors. (Konrad Rzeszutek Wilk)  [Orabug: 27601736]  
  - x86/speculation: Use IBRS if available before calling into firmware (David Woodhouse)  [Orabug: 27516477]  
  - Revert "x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation" (Konrad Rzeszutek Wilk)  [Orabug: 27601789]  
  - Revert "x86/spec: Add 'lfence_enabled' in sysfs" (Konrad Rzeszutek Wilk)   
  - KVM: Disable irq while unregistering user notifier (Ignacio Alvarado)   
  - dtrace: increase instruction limit for FBT entry probe detection (Kris Van Hees)  [Orabug: 27410742]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.5.1.el6uek]
changelog:
  - trace: declare blk_add_trace_rq non-static on OL6 (Todd Vierling)  [Orabug: 27578618]  
  - x86/ia32/syscall: RESTORE_EXTRA_REGS when returning from syscall (Ankur Arora)  [Orabug: 27461990]  {CVE-2017-5715} 
  - x86/ia32/syscall: don't do RESTORE_EXTRA_REGS prematurely (Ankur Arora)  [Orabug: 27461990]  {CVE-2017-5715} 
  - firmware: dmi_scan: add SBMIOS entry and DMI tables (Ivan Khoronzhuk)  [Orabug: 27586223]  
  - uek-rpm: enable USERFAULTFD in debug kernels (UEK4 QU7) (Mike Kravetz)  [Orabug: 27579702]  
  - vmxnet3: repair memory leak (Neil Horman)  [Orabug: 27479086]  
  - bonding: attempt to better support longer hw addresses (Jarod Wilson)  [Orabug: 27542370]  
  - scsi: Make __scsi_remove_device go straight from BLOCKED to DEL (Bart Van Assche)  [Orabug: 27546768]  
  - scsi: Protect SCSI device state changes with a mutex (Bart Van Assche)  [Orabug: 27546768]  
  - scsi: Introduce scsi_start_queue() (Bart Van Assche)  [Orabug: 27546768]  
  - scsi: avoid a permanent stop of the scsi device's request queue (Wei Fang)  [Orabug: 27546768]  
  - IB/ipoib: ioctls IPOIBACLNADD and IPOIBACLNGET do not work correctly (Ka-Cheong Poon)  [Orabug: 27533123]  
  - x86/spectre: move microcode check before kernel ibrs flags are set (Daniel Jordan)  [Orabug: 27542331]  {CVE-2017-5715}


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.4.1.el6uek]
changelog:
  - x86: make HAVE_FENTRY dependent on !SIMULATE_GCC44_KABI (Todd Vierling)  [Orabug: 27540463]  
  - x86/spectre_v2: Only use IBRS when ibrs_inuse tells us to (Konrad Rzeszutek Wilk)   
  - kernel: on OL6 only, simulate the gcc 4.4 kABI for __stack_chk_fail() (Todd Vierling)  [Orabug: 27509351]  
  - uek-rpm: configs: Don't set HAVE_FENTRY on OL6 builds. (Todd Vierling)  [Orabug: 27509351]  
  - KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL (KarimAllah Ahmed)  [Orabug: 27525575]  
  - x86/spectre_v2: Disable IBRS if spectre_v2=off (Konrad Rzeszutek Wilk)   
  - xenbus: track caller request id (Joao Martins)  [Orabug: 27472576]  
  - x86/spectre_v2: Remove 0xc2 from spectre_bad_microcodes (Darren Kenny)  [Orabug: 27523393]  
  - x86/speculation: Use Indirect Branch Prediction Barrier in context switch (Tim Chen)  [Orabug: 27524608]  
  - Fix typo IBRS_ATT, which should be IBRS_ALL (redux) (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/spectre_v2: Add spectre_v2_heuristics= (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/spectre_v2: Do not disable IBPB when disabling IBRS (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/scattered: Fix the order. (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/spectre: Favor IBRS on Skylake over retpoline (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/speculation: Fix typo IBRS_ATT, which should be IBRS_ALL (Darren Kenny)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/spectre: Now that we expose 'stbibp' make sure it is correct. (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/cpufeatures: Clean up Spectre v2 related CPUID flags (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/speculation: Add basic IBPB (Indirect Branch Prediction Barrier) support (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/bugs: Drop one "mitigation" from dmesg (Borislav Petkov)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/nospec: Fix header guards names (Borislav Petkov)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/spectre_v2: Don't spam the console with these: (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/cpu: Keep model defines sorted by model number (Andy Shevchenko)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/msr: Add definitions for new speculation control MSRs (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/cpufeatures: Add AMD feature bits for Speculation Control (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/spectre_v2: Print what options are available. (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/spectre_v2: Add VMEXIT_FILL_RSB instead of RETPOLINE (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/spectre: If IBRS is enabled disable "Filling RSB on context switch" (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - KVM: VMX: Allow direct access to MSR_IA32_SPEC_CTRL (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/spectre_v2: Don't allow {ibrs,ipbp,lfence}_enabled to be toggled if retpoline (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/spectre: Fix retpoline_enabled (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/spectre: Update sysctl values if toggled only by set_{ibrs,ibpb}_disabled (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - retpoline/module: Taint kernel for missing retpoline in module (Andi Kleen)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/retpoline: Fill RSB on context switch for affected CPUs (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/retpoline: Optimize inline assembler for vmexit_fill_RSB (Andi Kleen)  [Orabug: 27477743]  {CVE-2017-5715} 
  - kprobes/x86: Disable optimizing on the function jumps to indirect thunk (Masami Hiramatsu)  [Orabug: 27477743]  {CVE-2017-5715} 
  - kprobes/x86: Blacklist indirect thunk functions for kprobes (Masami Hiramatsu)  [Orabug: 27477743]  {CVE-2017-5715} 
  - retpoline: Introduce start/end markers of indirect thunk (Masami Hiramatsu)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/mce: Make machine check speculation protected (Thomas Gleixner)  [Orabug: 27477743]  {CVE-2017-5715} 
  - kbuild: modversions for EXPORT_SYMBOL() for asm (Nicholas Piggin)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Tom Lendacky)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/retpoline: Remove compile time warning (Thomas Gleixner)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/retpoline: Fill return stack buffer on vmexit (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/retpoline/irq32: Convert assembler indirect jumps (Andi Kleen)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/retpoline/checksum32: Convert assembler indirect jumps (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/retpoline/xen: Convert Xen hypercall indirect jumps (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/retpoline/hyperv: Convert assembler indirect jumps (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/retpoline/ftrace: Convert ftrace assembler indirect jumps (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/retpoline/entry: Convert entry assembler indirect jumps (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/retpoline/crypto: Convert crypto assembler indirect jumps (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/spectre_v2: Add disable_ibrs_and_friends (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/spectre_v2: Figure out if STUFF_RSB macro needs to be used. (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/spectre_v2: Figure out when to use IBRS. (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/spectre: Add IBRS option. (Konrad Rzeszutek Wilk)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/spectre: Add boot time option to select Spectre v2 mitigation (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/retpoline: Add initial retpoline support (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - kconfig.h: use __is_defined() to check if MODULE is defined (Masahiro Yamada)  [Orabug: 27477743]  {CVE-2017-5715} 
  - EXPORT_SYMBOL() for asm (Al Viro)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/asm: Make asm/alternative.h safe from assembly (Andy Lutomirski)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/kbuild: enable modversions for symbols exported from asm (Adam Borowski)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/asm: Use register variable to get stack pointer value (Andrey Ryabinin)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/mm/32: Move setup_clear_cpu_cap(X86_FEATURE_PCID) earlier (Andy Lutomirski)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/alternatives: Add missing '
  ' at end of ALTERNATIVE inline asm (David Woodhouse)  [Orabug: 27477743]  {CVE-2017-5715} 
  - x86/alternatives: Fix optimize_nops() checking (Borislav Petkov)  [Orabug: 27477743]  {CVE-2017-5715} 
  - block: Check for gaps on front and back merges (Jens Axboe)  [Orabug: 27484719]  
  - block: Copy a user iovec if it includes gaps (Sagi Grimberg)  [Orabug: 27484719]  
  - block: Replace SG_GAPS with new queue limits mask (Keith Busch)  [Orabug: 27484719]  
  - Revert "block: Copy a user iovec if it includes gaps" (Ashok Vairavan)  [Orabug: 27484719]  
  - Revert "block: Check for gaps on front and back merges" (Ashok Vairavan)  [Orabug: 27484719]  
  - Revert "blk: [Partial] Replace SG_GAPGS with new queue limits mask" (Ashok Vairavan)  [Orabug: 27484719]  
  - qlcnic: fix deadlock bug (Junxiao Bi)  [Orabug: 27496907]  
  - x86/entry: RESTORE_IBRS needs to be done under kernel CR3 (Ankur Arora)  [Orabug: 27501734]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.3.1.el6uek]
changelog:
  - rds: Fix NULL pointer dereference in __rds_rdma_map (Håkon Bugge)  [Orabug: 27477010]  
  - Btrfs: fix unexpected EEXIST from btrfs_get_extent (Liu Bo)  [Orabug: 27446668]  
  - Btrfs: fix incorrect block_len in merge_extent_mapping (Liu Bo)  [Orabug: 27446668]  
  - Btrfs: add WARN_ONCE to detect unexpected error from merge_extent_mapping (Liu Bo)  [Orabug: 27446668]  
  - Btrfs: deal with existing encompassing extent map in btrfs_get_extent() (Omar Sandoval)  [Orabug: 27446668]  
  - Btrfs: deal with duplciates during extent_map insertion in btrfs_get_extent (Chris Mason)  [Orabug: 27446668]  
  - x86/spec: Fix spectre_v1 bug and mitigation indicators (John Haxby)  [Orabug: 27470687]  
  - Drivers: hv: util: Backup: Fix a rescind processing issue (K. Y. Srinivasan)  [Orabug: 27426063]  
  - Drivers: hv: vss: Operation timeouts should match host expectation (Alex Ng)  [Orabug: 27426063]  
  - Drivers: hv: vss: Improve log messages. (Alex Ng)  [Orabug: 27426063]  
  - Drivers: hv: utils: Check VSS daemon is listening before a hot backup (Alex Ng)  [Orabug: 27426063]  
  - Drivers: hv: utils: Continue to poll VSS channel after handling requests. (Alex Ng)  [Orabug: 27426063]  
  - Drivers: hv: utils: fix a race on userspace daemons registration (Vitaly Kuznetsov)  [Orabug: 27426063]  
  - Drivers: hv: util: catch allocation errors (Olaf Hering)  [Orabug: 27426063]  
  - Drivers: hv: vss: run only on supported host versions (Olaf Hering)  [Orabug: 27426063]  
  - Drivers: hv: utils: unify driver registration reporting (Vitaly Kuznetsov)  [Orabug: 27426063]  
  - drivers/char/mem.c: deny access in open operation when securelevel is set (Ethan Zhao)  [Orabug: 26943864] [Orabug: 27465736]  
  - rds: Calling getsockname() on unbounded socket generates seg fault (Ka-Cheong Poon)  [Orabug: 27463484]  
  - rds: Second bind() can overwrite the first bind() (Ka-Cheong Poon)  [Orabug: 27463500]  
  - rds: Un-connected socket sendmsg() with a NULL destination does not fail (Ka-Cheong Poon)  [Orabug: 27463507]  
  - x86/mitigation/spectre_v2: Add reporting of 'lfence' (Konrad Rzeszutek Wilk)   
  - x86/spec: Add 'lfence_enabled' in sysfs (Konrad Rzeszutek Wilk)   
  - x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation (Konrad Rzeszutek Wilk)   
  - x86: Fix compile issues if CONFIG_XEN not defined (Konrad Rzeszutek Wilk)   
  - hugetlb: fix nr_pmds accounting with shared page tables (Kirill A. Shutemov)  [Orabug: 27451809]  
  - net/mlx4_core: allow QPs with enable_smi_admin enabled (Zhu Yanjun)  [Orabug: 27452072]  
  - net/rds: Fix incorrect error handling (Håkon Bugge)  [Orabug: 27469760]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.2.1.el6uek]
changelog:
  - x86: Move STUFF_RSB in to the idt macro (Konrad Rzeszutek Wilk)   
  - x86/spectre: Drop the warning about ibrs being obsolete. (Konrad Rzeszutek Wilk)   
  - x86/spec: STUFF_RSB _before_ ENABLE_IBRS (Konrad Rzeszutek Wilk)   
  - x86/spec: Don't print the Missing arguments for option spectre_v2. (Konrad Rzeszutek Wilk)   
  - x86: Move ENABLE_IBRS in the interrupt macro. (Konrad Rzeszutek Wilk)   
  - x86/IBRS: Don't try to change IBRS mode if IBRS is not available (Boris Ostrovsky)  [Orabug: 27448280]  
  - x86/IBRS: Remove support for IBRS_ENABLED_USER mode (Boris Ostrovsky)  [Orabug: 27448280]  
  - x86: Use PRED_CMD MSR when ibpb is enabled (Konrad Rzeszutek Wilk)   
  - x86/IBRS: Drop unnecessary WRITE_ONCE (Boris Ostrovsky)  [Orabug: 27448280]  
  - x86/IBRS/IBPB: Remove procfs interface to ibrs/ibpb_enable (Boris Ostrovsky)  [Orabug: 27448280]  
  - x86/IBPB: Provide debugfs interface for changing IBPB mode (Boris Ostrovsky)  [Orabug: 27448313]  
  - x86/spec: Also print IBRS if IBPB is disabled. (Konrad Rzeszutek Wilk)   
  - x86: Include linux/device.h in bugs_64.c (Boris Ostrovsky)  [Orabug: 27448330]  
  - fs/ocfs2: remove page cache for converted direct write (Wengang Wang)   
  - Revert "ocfs2: code clean up for direct io" (Wengang Wang)   
  - mlx4: add mstflint secure boot access kernel support (Qing Huang)  [Orabug: 27424392]  
  - x86/microcode/intel: Extend BDW late-loading with a revision check (Jia Zhang)  [Orabug: 27343609]  
  - x86/microcode/intel: Disable late loading on model 79 (Borislav Petkov)  [Orabug: 27343609]  
  - autofs: use dentry flags to block walks during expire (Ian Kent)  [Orabug: 26032471]  
  - autofs races (Al Viro)  [Orabug: 26032471]  
  - Revert "kernel.spec: Require the new microcode_ctl." (Brian Maly)


author: Allen Pais <allen.pais@oracle.com> [4.1.12-124.el6uek]
changelog:
  - x86: Clean up IBRS functionality resident in common code (Kanth Ghatraju)  [Orabug: 27353383]  
  - x86: Display correct settings for the SPECTRE_V2 bug (Kanth Ghatraju)  [Orabug: 27353383]  
  - Set CONFIG_GENERIC_CPU_VULNERABILITIES flag (Kanth Ghatraju)  [Orabug: 27353383]  
  - x86/cpu: Implement CPU vulnerabilites sysfs functions (Thomas Gleixner)  [Orabug: 27353383]  
  - sysfs/cpu: Fix typos in vulnerability documentation (David Woodhouse)  [Orabug: 27353383]  
  - sysfs/cpu: Add vulnerability folder (Thomas Gleixner)  [Orabug: 27353383]  
  - x86/cpufeatures: Add X86_BUG_SPECTRE_V[12] (David Woodhouse)  [Orabug: 27353383]  
  - x86/cpufeatures: Add X86_BUG_CPU_MELTDOWN (Kanth Ghatraju)  [Orabug: 27353383]  
  - KVM: x86: Add memory barrier on vmcs field lookup (Andrew Honig)   {CVE-2017-5753} 
  - KVM: VMX: remove I/O port 0x80 bypass on Intel hosts (Andrew Honig)  [Orabug: 27206805]  {CVE-2017-1000407} {CVE-2017-1000407} 
  - ixgbevf: handle mbox_api_13 in ixgbevf_change_mtu (Joao Martins)  [Orabug: 27397028]  
  - xen-blkback: add pending_req allocation stats (Ankur Arora)  [Orabug: 26670475]  
  - xen-blkback: move indirect req allocation out-of-line (Ankur Arora)  [Orabug: 26670475]  
  - xen-blkback: pull nseg validation out in a function (Ankur Arora)  [Orabug: 26670475]  
  - xen-blkback: make struct pending_req less monolithic (Ankur Arora)  [Orabug: 26670475]  
  - x86/fpu: Don't let userspace set bogus xcomp_bv (Tim Tianyang Chen)  [Orabug: 27050688]  {CVE-2017-15537} 
  - sctp: do not peel off an assoc from one netns to another one (Xin Long)  [Orabug: 27386997]  {CVE-2017-15115} 
  - media: dib0700: fix invalid dvb_detach argument (Andrey Konovalov)  [Orabug: 27215141]  {CVE-2017-16646} 
  - Sanitize 'move_pages()' permission checks (Linus Torvalds)  [Orabug: 27364683]  {CVE-2017-14140} 
  - assoc_array: Fix a buggy node-splitting case (David Howells)  [Orabug: 27364588]  {CVE-2017-12193} {CVE-2017-12193} 
  - net: ipv4: fix for a race condition in raw_sendmsg (Mohamed Ghannam)  [Orabug: 27390679]  {CVE-2017-17712}


author: Allen Pais <allen.pais@oracle.com> [4.1.12-123.el6uek]
changelog:
  - x86/pti/efi: broken conversion from efi to kernel page table (Pavel Tatashin)  [Orabug: 27378516] [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/spec: Always set IBRS to guest value on VMENTER and host on VMEXIT (redux) (Konrad Rzeszutek Wilk)  [Orabug: 27378451]  
  - x86/IBRS: Make sure we restore MSR_IA32_SPEC_CTRL to a valid value (Boris Ostrovsky)  [Orabug: 27378102]  
  - x86/IBRS/IBPB: Set sysctl_ibrs/ibpb_enabled properly (Boris Ostrovsky)  [Orabug: 27382723]  
  - x86/spec_ctrl: Add missing 'lfence' when IBRS is not supported. (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/entry_64: TRACE_IRQS_OFF before re-enabling. (Jamie Iles)  [Orabug: 27344012]  {CVE-2017-5715} 
  - ptrace: remove unlocked RCU dereference. (Jamie Iles)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/ia32: Adds code hygiene for 32bit SYSCALL instruction entry. (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/ia32: don't save registers on audit call (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/spec/ia32: Sprinkle IBRS and RSB at the 32-bit SYSCALL (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/ia32: Move STUFF_RSB And ENABLE_IBRS (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/spec: Always set IBRS to guest value on VMENTER and host on VMEXIT. (Konrad Rzeszutek Wilk)  [Orabug: 27365575]  {CVE-2017-5715} 
  - x86/ia32: save and clear registers on syscall. (Jamie Iles)  [Orabug: 27365431]  {CVE-2017-5754} 
  - x86/IBRS: Save current status of MSR_IA32_SPEC_CTRL (Boris Ostrovsky)  [Orabug: 27365419]  
  - pti: Rename X86_FEATURE_KAISER to X86_FEATURE_PTI (Pavel Tatashin)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/spec_ctrl: Add missing IBRS_DISABLE (Konrad Rzeszutek Wilk)  [Orabug: 27365403]  
  - Make use of ibrs_inuse consistent. (Jun Nakajima)  [Orabug: 27365390]  
  - x86/kvm: Set IBRS on VMEXIT if guest disabled it. (Konrad Rzeszutek Wilk)  [Orabug: 27364900]  
  - Re-introduce clearing of r12-15, rbp, rbx (Kris Van Hees)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86: more ibrs/pti fixes (Pavel Tatashin)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/spec: Actually do the check for in_use on ENABLE_IBRS (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - kvm: svm: Expose the CPUID.0x80000008 ebx flag. (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/spec_ctrl: Provide the sysfs version of the ibrs_enabled (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86: Use better #define for FEATURE_ENABLE_IBRS and 0 (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86: Instead of 0x2, 0x4, and 0x1 use #defines. (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - kpti: Disable when running under Xen PV (Konrad Rzeszutek Wilk)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86: Don't ENABLE_IBRS in nmi when we are still running on user cr3 (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/enter: Use IBRS on syscall and interrupts - fix ia32 path (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86: Fix spectre/kpti integration (Konrad Rzeszutek Wilk)  [Orabug: 27333760]  {CVE-2017-5754} 
  - PTI: unbreak EFI old_memmap (Jiri Kosina)  [Orabug: 27333760]  {CVE-2017-5754} 
  - KAISER KABI tweaks. (Martin K. Petersen)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/ldt: fix crash in ldt freeing. (Jamie Iles)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/entry: Define 'cpu_current_top_of_stack' for 64-bit code (Denys Vlasenko)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/entry: Remove unused 'kernel_stack' per-cpu variable (Denys Vlasenko)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/entry: Stop using PER_CPU_VAR(kernel_stack) (Denys Vlasenko)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: Set _PAGE_NX only if supported (Guenter Roeck)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/vdso: Get pvclock data from the vvar VMA instead of the fixmap (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - KPTI: Report when enabled (Kees Cook)  [Orabug: 27333760]  {CVE-2017-5754} 
  - KPTI: Rename to PAGE_TABLE_ISOLATION (Kees Cook)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/kaiser: Move feature detection up (Borislav Petkov)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/kaiser: Reenable PARAVIRT (Borislav Petkov)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/paravirt: Dont patch flush_tlb_single (Thomas Gleixner)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: kaiser_flush_tlb_on_return_to_user() check PCID (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: asm/tlbflush.h handle noPGE at lower level (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: drop is_atomic arg to kaiser_pagetable_walk() (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflush (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/kaiser: Check boottime cmdline params (Borislav Petkov)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/kaiser: Rename and simplify X86_FEATURE_KAISER handling (Borislav Petkov)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: add "nokaiser" boot option, using ALTERNATIVE (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: fix unlikely error in alloc_ldt_struct() (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: _pgd_alloc() without __GFP_REPEAT to avoid stalls (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: paranoid_entry pass cr3 need to paranoid_exit (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: x86_cr3_pcid_noflush and x86_cr3_pcid_user (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: PCID 0 for kernel and 128 for user (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: load_new_mm_cr3() let SWITCH_USER_CR3 flush user (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: enhanced by kernel and user PCIDs (Dave Hansen)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: vmstat show NR_KAISERTABLE as nr_overhead (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: delete KAISER_REAL_SWITCH option (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: name that 0x1000 KAISER_SHADOW_PGD_OFFSET (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: cleanups while trying for gold link (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: kaiser_remove_mapping() move along the pgd (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: tidied up kaiser_add/remove_mapping slightly (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: tidied up asm/kaiser.h somewhat (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: ENOMEM if kaiser_pagetable_walk() NULL (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: fix perf crashes (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: fix regs to do_nmi() ifndef CONFIG_KAISER (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: KAISER depends on SMP (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: fix build and FIXME in alloc_ldt_struct() (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: stack map PAGE_SIZE at THREAD_SIZE-PAGE_SIZE (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: do not set _PAGE_NX on pgd_none (Hugh Dickins)  [Orabug: 27333760]  {CVE-2017-5754} 
  - kaiser: merged update (Dave Hansen)  [Orabug: 27333760]  {CVE-2017-5754} 
  - KAISER: Kernel Address Isolation (Richard Fellner)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/boot: Add early cmdline parsing for options with arguments (Tom Lendacky)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/mm/64: Fix reboot interaction with CR4.PCIDE (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/mm: Enable CR4.PCIDE on supported systems (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/mm: Add the 'nopcid' boot option to turn off PCID (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/mm: Disable PCID on 32-bit kernels (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/mm: Remove the UP asm/tlbflush.h code, always use the (formerly) SMP code (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/mm: Reimplement flush_tlb_page() using flush_tlb_mm_range() (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/mm: Make flush_tlb_mm_range() more predictable (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/mm: Remove flush_tlb() and flush_tlb_current_task() (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/vm86/32: Switch to flush_tlb_mm_range() in mark_screen_rdonly() (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/irq: Do not substract irq_tlb_count from irq_call_count (Aaron Lu)  [Orabug: 27333760]  {CVE-2017-5754} 
  - sched/core: Idle_task_exit() shouldn't use switch_mm_irqs_off() (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - ARM: Hide finish_arch_post_lock_switch() from modules (Steven Rostedt)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/mm, sched/core: Turn off IRQs in switch_mm() (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/mm, sched/core: Uninline switch_mm() (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - sched/core: Add switch_mm_irqs_off() and use it in the scheduler (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - mm/mmu_context, sched/core: Fix mmu_context.h assumption (Ingo Molnar)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/mm: If INVPCID is available, use it to flush global mappings (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/mm: Add a 'noinvpcid' boot option to turn off INVPCID (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/mm: Fix INVPCID asm constraint (Borislav Petkov)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/mm: Add INVPCID helpers (Andy Lutomirski)  [Orabug: 27333760]  {CVE-2017-5754} 
  - x86/ibrs: Remove 'ibrs_dump' and remove the pr_debug (Konrad Rzeszutek Wilk)  [Orabug: 27351274]  
  - kABI: Revert kABI: Make the boot_cpu_data look normal (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - userns: prevent speculative execution (Elena Reshetova)  [Orabug: 27340445]  {CVE-2017-5753} 
  - udf: prevent speculative execution (Elena Reshetova)  [Orabug: 27340445]  {CVE-2017-5753} 
  - net: mpls: prevent speculative execution (Elena Reshetova)  [Orabug: 27340445]  {CVE-2017-5753} 
  - fs: prevent speculative execution (Elena Reshetova)  [Orabug: 27340445]  {CVE-2017-5753} 
  - ipv6: prevent speculative execution (Elena Reshetova)  [Orabug: 27340445]  {CVE-2017-5753} 
  - ipv4: prevent speculative execution (Elena Reshetova)  [Orabug: 27340445]  {CVE-2017-5753} 
  - Thermal/int340x: prevent speculative execution (Elena Reshetova)  [Orabug: 27340445]  {CVE-2017-5753} 
  - cw1200: prevent speculative execution (Elena Reshetova)  [Orabug: 27340445]  {CVE-2017-5753} 
  - qla2xxx: prevent speculative execution (Elena Reshetova)  [Orabug: 27340445]  {CVE-2017-5753} 
  - p54: prevent speculative execution (Elena Reshetova)  [Orabug: 27340445]  {CVE-2017-5753} 
  - carl9170: prevent speculative execution (Elena Reshetova)  [Orabug: 27340445]  {CVE-2017-5753} 
  - uvcvideo: prevent speculative execution (Elena Reshetova)  [Orabug: 27340445]  {CVE-2017-5753} 
  - bpf: prevent speculative execution in eBPF interpreter (Elena Reshetova)  [Orabug: 27340445]  {CVE-2017-5753} 
  - locking/barriers: introduce new observable speculation barrier (Elena Reshetova)  [Orabug: 27340445]  {CVE-2017-5753} 
  - x86/cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Elena Reshetova)  [Orabug: 27340445]  {CVE-2017-5753} 
  - x86/cpu/AMD: Make the LFENCE instruction serialized (Elena Reshetova)  [Orabug: 27340445]  {CVE-2017-5753} 
  - kABI: Make the boot_cpu_data look normal. (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - kernel.spec: Require the new microcode_ctl. (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} {CVE-2017-5715} 
  - x86/microcode/AMD: Add support for fam17h microcode loading (Tom Lendacky)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/spec_ctrl: Disable if running as Xen PV guest. (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - Set IBPB when running a different VCPU (Dave Hansen)  [Orabug: 27344012]  {CVE-2017-5715} 
  - Clear the host registers after setbe (Jun Nakajima)  [Orabug: 27344012]  {CVE-2017-5715} 
  - Use the ibpb_inuse variable. (Jun Nakajima)  [Orabug: 27344012]  {CVE-2017-5715} 
  - KVM: x86: add SPEC_CTRL to MSR and CPUID lists (Andrea Arcangeli)  [Orabug: 27344012]  {CVE-2017-5715} 
  - kvm: vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Paolo Bonzini)  [Orabug: 27344012]  {CVE-2017-5715} 
  - Use the "ibrs_inuse" variable. (Jun Nakajima)  [Orabug: 27344012]  {CVE-2017-5715} 
  - kvm: svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Andrea Arcangeli)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/svm: Set IBPB when running a different VCPU (Paolo Bonzini)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/kvm: Pad RSB on VM transition (Tim Chen)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/cpu/AMD: Add speculative control support for AMD (Tom Lendacky)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/microcode: Recheck IBRS and IBPB feature on microcode reload (Tim Chen)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86: Move IBRS/IBPB feature detection to scattered.c (Tim Chen)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/spec_ctrl: Add lock to serialize changes to ibrs and ibpb control (Tim Chen)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/spec_ctrl: Add sysctl knobs to enable/disable SPEC_CTRL feature (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/kvm: clear registers on VM exit (Tom Lendacky)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/kvm: Set IBPB when switching VM (Tim Chen)  [Orabug: 27344012]  {CVE-2017-5715} 
  - *INCOMPLETE* x86/syscall: Clear unused extra registers on syscall entrance (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/entry: Stuff RSB for entry to kernel for non-SMEP platform (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/mm: Only set IBPB when the new thread cannot ptrace current thread (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/mm: Set IBPB upon context switch (Tim Chen)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/idle: Disable IBRS when offlining cpu and re-enable on wakeup (Tim Chen)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/idle: Disable IBRS entering idle and enable it on wakeup (Tim Chen)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/spec_ctrl: save IBRS MSR value in paranoid_entry (Andrea Arcangeli)  [Orabug: 27344012]  {CVE-2017-5715} 
  - *Scaffolding* x86/spec_ctrl: Add sysctl knobs to enable/disable SPEC_CTRL feature (Tim Chen)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/enter: Use IBRS on syscall and interrupts (Tim Chen)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86: Add macro that does not save rax, rcx, rdx on stack to disable IBRS (Tim Chen)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/enter: MACROS to set/clear IBRS and set IBP (Tim Chen)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/feature: Report presence of IBPB and IBRS control (Tim Chen)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86: Add STIBP feature enumeration (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/cpufeature: Add X86_FEATURE_IA32_ARCH_CAPS and X86_FEATURE_IBRS_ATT (Konrad Rzeszutek Wilk)  [Orabug: 27344012]  {CVE-2017-5715} 
  - x86/feature: Enable the x86 feature to control (Tim Chen)  [Orabug: 27344012]  {CVE-2017-5715} 
  - dccp: CVE-2017-8824: use-after-free in DCCP code (Mohamed Ghannam)  [Orabug: 27290292]  {CVE-2017-8824} 
  - negotiate_mq should happen in all cases of a new VBD being discovered by xen-blkfront, whether called through _probe() or a hot-attached new VBD from dom-0 via xenstore. Otherwise, hot-attached new VBDs are left configured without multi-queue. (Patrick Colp)  [Orabug: 27180421]  
  - e1000: avoid null pointer dereference on invalid stat type (Colin Ian King)  [Orabug: 27069012]  
  - e1000: fix race condition between e1000_down() and e1000_watchdog (Vincenzo Maffione)  [Orabug: 27069012]  
  - e1000e: Be drop monitor friendly (Florian Fainelli)  [Orabug: 27069012]  
  - e1000e: apply burst mode settings only on default (Willem de Bruijn)  [Orabug: 27069012]  
  - e1000e: fix buffer overrun while the I219 is processing DMA transactions (Sasha Neftin)  [Orabug: 27069012]  
  - e1000e: Avoid receiver overrun interrupt bursts (Benjamin Poirier)  [Orabug: 27069012]  
  - e1000e: Separate signaling for link check/link up (Benjamin Poirier)  [Orabug: 27069012]  
  - e1000e: Fix return value test (Benjamin Poirier)  [Orabug: 27069012]  
  - e1000e: Fix wrong comment related to link detection (Benjamin Poirier)  [Orabug: 27069012]  
  - e1000e: Fix error path in link detection (Benjamin Poirier)  [Orabug: 27069012]  
  - drivers: net: e1000e: use setup_timer() helper. (Allen Pais)  [Orabug: 27069012]  
  - e1000e: Initial Support for IceLake (Sasha Neftin)  [Orabug: 27069012]  
  - e1000e: add check on e1e_wphy() return value (Gustavo A R Silva)  [Orabug: 27069012]  
  - e1000e: Undo e1000e_pm_freeze if __e1000_shutdown fails (Chris Wilson)  [Orabug: 27069012]


author: Allen Pais <allen.pais@oracle.com> [4.1.12-122.el6uek]
changelog:
  - qla2xxx: Fix system crash in qlt_plogi_ack_unref (Quinn Tran)  [Orabug: 27235104]  
  - qla2xxx: Remove aborting ELS IOCB call issued as part of timeout. (Giridhar Malavali)  [Orabug: 27235104]  
  - qla2xxx: Defer processing of GS IOCB calls (Giridhar Malavali)  [Orabug: 27235104]  
  - qla2xxx: Clear loop id after delete (Quinn Tran)  [Orabug: 27235104]  
  - qla2xxx: Fix scan state field for fcport (Quinn Tran)  [Orabug: 27235104]  
  - qla2xxx: Replace fcport alloc with qla2x00_alloc_fcport (Quinn Tran)  [Orabug: 27235104]  
  - qla2xxx: Fix abort command deadlock due to spinlock (Quinn Tran)  [Orabug: 27235104]  
  - qla2xxx: Fix PRLI state check (Quinn Tran)  [Orabug: 27235104]  
  - qla2xxx: Clear send ELS LOGO flag after target re-login (Quinn Tran)  [Orabug: 27235104]  
  - qla2xxx: Fix Relogin being triggered too fast (Quinn Tran)  [Orabug: 27235104]  
  - qla2xxx: Relogin to target port on a cable swap (Quinn Tran)  [Orabug: 27235104]  
  - qla2xxx: Recheck session state after RSCN. (Quinn Tran)  [Orabug: 27235104]  
  - qla2xxx: Fix login state machine stuck at GPDB (Quinn Tran)  [Orabug: 27235104]  
  - qla2xxx: Serialize GPNID for multiple RSCN (Quinn Tran)  [Orabug: 27235104]  
  - qla2xxx: fix stale memory access. (Quinn Tran)  [Orabug: 27235104]  
  - qla2xxx: Retry switch command on time out (Quinn Tran)  [Orabug: 27235104]  
  - qla2xxx: Fix system crash for Notify ack timeout handling (Quinn Tran)  [Orabug: 27235104]  
  - qla2xxx: Fix re-login for Nport Handle in use (Quinn Tran)  [Orabug: 27235104]  
  - scsi: qla2xxx: Cleanup debug message IDs (Quinn Tran)  [Orabug: 27235104]  
  - scsi: qla2xxx: Fix name server relogin (Quinn Tran)  [Orabug: 27235104]  
  - scsi: qla2xxx: Fix path recovery (Quinn Tran)  [Orabug: 27235104]  
  - scsi: qla2xxx: Fix an integer overflow in sysfs code (Dan Carpenter)  [Orabug: 27235104]  
  - scsi: qla2xxx: don't disable a not previously enabled PCI device (Johannes Thumshirn)  [Orabug: 27235104]  
  - ALSA: pcm: prevent UAF in snd_pcm_info (Robb Glasser)  [Orabug: 27344839]  {CVE-2017-0861} {CVE-2017-0861} 
  - kernel-uek.spec: update linux-firmware and linux-nano-firmware dependency (Ethan Zhao)  [Orabug: 27185358]


author: Allen Pais <allen.pais@oracle.com> [4.1.12-121.el6uek]
changelog:
  - x86, kasan: Fix build failure on KASAN=y && KMEMCHECK=y kernels (Andrey Ryabinin)  [Orabug: 27132235]  
  - x86, efi, kasan: Fix build failure on !KASAN && KMEMCHECK=y kernels (Andrey Ryabinin)  [Orabug: 27132235]  
  - x86, efi, kasan: #undef memset/memcpy/memmove per arch (Andrey Ryabinin)  [Orabug: 27132235]  
  - Revert "Makefile: Build with -Werror=date-time if the compiler supports it" (Gayatri Vasudevan)  [Orabug: 27132235]


author: Allen Pais <allen.pais@oracle.com> [4.1.12-120.el6uek]
changelog:
  - x86/efi: Initialize and display UEFI secure boot state a bit later during init (Daniel Kiper)  [Orabug: 27258204]  
  - bnxt_en: Fix possible corrupted NVRAM parameters from firmware response. (Michael Chan)  [Orabug: 27285190]  
  - dtrace: do not use copy_from_user when accessing kernel stack (Kris Van Hees)  [Orabug: 25949088]  
  - dtrace: fix arg5 and up retrieval for FBT entry probes on x86 (Kris Van Hees)  [Orabug: 25949088]  
  - x86/espfix: Init espfix on the boot CPU side (Zhu Guihua)  [Orabug: 26523661]  
  - x86/espfix: Add 'cpu' parameter to init_espfix_ap() (Zhu Guihua)  [Orabug: 26523661]  
  - xen: Make PV Dom0 Linux kernel NUMA aware (Elena Ufimtseva)


author: Allen Pais <allen.pais@oracle.com> [4.1.12-119.el6uek]
changelog:
  - ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Eryu Guan)  [Orabug: 27255674]  
  - DTrace: IO wait probes b_flags can contain incorrect operation (Nicolas Droux)  [Orabug: 27193447]  
  - KVM: x86: pvclock: Handle first-time write to pvclock-page contains random junk (Liran Alon)  [Orabug: 27146591]  
  - KVM: x86: always fill in vcpu->arch.hv_clock (Paolo Bonzini)  [Orabug: 27146591]  
  - KVM: nVMX: Fix vmx_check_nested_events() return value in case an event was reinjected to L2 (Liran Alon)  [Orabug: 27200329]  
  - KVM: VMX: use kvm_event_needs_reinjection (Wanpeng Li)  [Orabug: 27200329]  
  - KVM: nVMX: Fix pending events injection (Wanpeng Li)  [Orabug: 27200329]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-118.el6uek]
changelog:
  - xen/time: do not decrease steal time after live migration on xen (Dongli Zhang)  [Orabug: 27181243]  
  - bnx2x: fix slowpath null crash (Zhu Yanjun)  [Orabug: 27041078]  
  - Replace max_t() with sub_positive() in dequeue_entity_load_avg() (Gayatri Vasudevan)  [Orabug: 27026563]  
  - sched/fair: Fix cfs_rq avg tracking underflow (Gayatri Vasudevan)  [Orabug: 27026563]  
  - rds: System panic if RDS netfilter is enabled and RDS/TCP is used (Ka-Cheong Poon)  [Orabug: 26950401]  
  - fuse: Call end_queued_requests() after releasing fc->lock in fuse_dev_release() (Ashish Samant)  [Orabug: 27215268]  
  - rds: IB active bonding IPv6 changes (Ka-Cheong Poon)  [Orabug: 25410192]  
  - {IB/{core,ipoib},net/rds}: IPv6 support for ACL (Ka-Cheong Poon)  [Orabug: 25410192]  
  - rds: Enable RDS IPv6 support (Ka-Cheong Poon)  [Orabug: 25410192]  
  - rds: Changed IP address internal representation to struct in6_addr (Ka-Cheong Poon)  [Orabug: 25410192]  
  - IB/ipoib: Remove ACL sysfs debug files (Ka-Cheong Poon)  [Orabug: 25410192]  
  - rds: C-style nits (Ka-Cheong Poon)  [Orabug: 25410192]  
  - rds: ib: Fix NULL pointer dereference in debug code (Håkon Bugge)  [Orabug: 24303333]  
  - USB: serial: console: fix use-after-free after failed setup (Johan Hovold)  [Orabug: 27206824]  {CVE-2017-16525} 
  - uwb: properly check kthread_run return value (Andrey Konovalov)  [Orabug: 27206874]  {CVE-2017-16526} 
  - ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor (Takashi Iwai)  [Orabug: 27206916]  {CVE-2017-16529} 
  - USB: uas: fix bug in handling of alternate settings (Alan Stern)  [Orabug: 27206993]  {CVE-2017-16530} 
  - USB: fix out-of-bounds in usb_set_configuration (Greg Kroah-Hartman)  [Orabug: 27207211]  {CVE-2017-16531} 
  - cgroup: make sure a parent css isn't offlined before its children (Tejun Heo)  [Orabug: 27045648]  
  - HID: usbhid: fix out-of-bounds bug (Jaejoong Kim)  [Orabug: 27207901]  {CVE-2017-16533} 
  - USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor() (Alan Stern)  [Orabug: 27207955]  {CVE-2017-16535} 
  - net: qmi_wwan: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27215213]  {CVE-2017-16650} 
  - [media] cx231xx-cards: fix NULL-deref on missing association descriptor (Johan Hovold)  [Orabug: 27208030]  {CVE-2017-16536} 
  - ctf: fix thinko preventing linking of out-of-tree modules when CTF is off (Nick Alcock)  [Orabug: 27215305]  
  - ctf: allow dwarf2ctf to run as root but produce no output (Nick Alcock)  [Orabug: 27205676]  
  - mlx4: Subscribe to PXM notifier (Konrad Rzeszutek Wilk)   
  - xen/pci: Add PXM node notifier for PXM (NUMA) changes. (Konrad Rzeszutek Wilk)   
  - xen/pcifront: Walk the PCI bus after XenStore notification (Konrad Rzeszutek Wilk)   
  - mm, thp: Do not make page table dirty unconditionally in follow_trans_huge_pmd() (Kirill A. Shutemov)  [Orabug: 27165913]  {CVE-2017-1000405} 
  - mlx4: Subscribe to PXM notifier (Konrad Rzeszutek Wilk)   
  - xen/pci: Add PXM node notifier for PXM (NUMA) changes. (Konrad Rzeszutek Wilk)   
  - xen/pcifront: Walk the PCI bus after XenStore notification (Konrad Rzeszutek Wilk)   
  - mm, thp: Do not make page table dirty unconditionally in follow_trans_huge_pmd() (Kirill A. Shutemov)  [Orabug: 27165913]  
  - Revert "firmware: dmi_scan: add SBMIOS entry and DMI tables" (Dan Duval)  [Orabug: 27100376]  
  - ALSA: usb-audio: Kill stray URB at exiting (Takashi Iwai)  [Orabug: 27117850]  {CVE-2017-16527} 
  - scsi: Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan D. Milne)  [Orabug: 26934329]  
  - scsi: qla2xxx: Fix NULL pointer access due to redundant fc_host_port_name call (Quinn Tran)  [Orabug: 27184882]  
  - scsi: qla2xxx: Initialize Work element before requesting IRQs (Himanshu Madhani)  [Orabug: 27184882]  
  - scsi: qla2xxx: Fix uninitialized work element (Quinn Tran)  [Orabug: 27184882]  
  - Revert "Improves clear_huge_page() using work queues" (Jack Vogel)  [Orabug: 27162196]  
  - kvm: x86: don't print warning messages for unimplemented msrs (Bandan Das)  [Orabug: 26933160]  
  - scsi: qla2xxx: Fix slow mem alloc behind lock (Quinn Tran)  [Orabug: 27134422]  
  - packet: in packet_do_bind, test fanout with bind_lock held (Willem de Bruijn)  [Orabug: 27050772]  {CVE-2017-15649} 
  - packet: hold bind lock when rebinding to fanout hook (Willem de Bruijn)  [Orabug: 27050772]  {CVE-2017-15649} 
  - net: convert packet_fanout.sk_ref from atomic_t to refcount_t (Reshetova, Elena)  [Orabug: 27050772]  {CVE-2017-15649} 
  - packet: fix races in fanout_add() (Eric Dumazet)  [Orabug: 27050772]  {CVE-2017-15649} 
  - refcount_t: Introduce a special purpose refcount type (Peter Zijlstra)  [Orabug: 27050772]  {CVE-2017-15649} 
  - locking/atomics: Add _{acquire|release|relaxed}() variants of some atomic operations (Will Deacon)  [Orabug: 27050772]  {CVE-2017-15649} 
  - xen-netback: enable skip_guestrx_thread by default (Joao Martins)  [Orabug: 27125766]  
  - net:xen-netback - Change 1 to true for bool type variable. (Shailendra Verma)  [Orabug: 27125766]  
  - xen-netfront: Improve error handling during initialization (Ross Lagerwall)  [Orabug: 22817043]  
  - lib/vsprintf.c: warn about too large precisions and field widths (Rasmus Villemoes)  [Orabug: 26178769]  
  - lib/vsprintf.c: help gcc make number() smaller (Rasmus Villemoes)  [Orabug: 26178769]  
  - lib/vsprintf.c: expand field_width to 24 bits (Rasmus Villemoes)  [Orabug: 26178769]  
  - ocfs2: code clean up for direct io (Ryan Ding)   
  - net/rds: use multiple sge than buddy allocation in congestion code (Wei Lin Guay)  [Orabug: 26770234]  
  - Revert "RDS: fix the sg allocation based on actual message size" (Wei Lin Guay)  [Orabug: 26770234]  
  - Revert "RDS: avoid large pages for sg allocation for TCP transport" (Wei Lin Guay)  [Orabug: 26770234]  
  - Revert "net/rds: Reduce memory footprint in rds_sendmsg" (Wei Lin Guay)  [Orabug: 26770234]  
  - net/rds: reduce memory footprint during ib_post_recv in IB transport (Wei Lin Guay)  [Orabug: 26770234]  
  - net/rds: reduce memory footprint during rds_sendmsg with IB transport (Wei Lin Guay)  [Orabug: 26770234]  
  - net/rds: set the rds_ib_init_frag based on supported sge (Wei Lin Guay)  [Orabug: 26770234]  
  -     scsi: Don't abort scsi_scan due to unexpected response (John Sobecki)  [Orabug: 27072286]  
  - rds: Fix inaccurate accounting of unsignaled wrs in rds_ib_xmit_rdma (Håkon Bugge)  [Orabug: 27090772]  
  - rds: Fix inaccurate accounting of unsignaled wrs (Håkon Bugge)  [Orabug: 27090772]  
  - ocfs2: fstrim: Fix start offset of first cluster group during fstrim (Ashish Samant)  [Orabug: 27111255]  
  - rtc: cmos: century support (Sylvain Chouleur)  [Orabug: 27111144]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-117.el6uek]
changelog:
  - xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Jan Kara)  [Orabug: 27093425]  
  - xfs: Fix missed holes in SEEK_HOLE implementation (Jan Kara)  [Orabug: 27093425]  
  - ext4: fix off-by-in in loop termination in ext4_find_unwritten_pgoff() (Jan Kara)  [Orabug: 27093425]  
  - ext4: fix SEEK_HOLE (Jan Kara)  [Orabug: 27093425]  
  - uek-rpm: Add more missing modules to OL7 ueknano (Somasundaram Krishnasamy)  [Orabug: 27092501]  
  - fix unbalanced page refcounting in bio_map_user_iov (Vitaly Mayatskikh)  [Orabug: 27062562]  {CVE-2017-12190} 
  - more bio_map_user_iov() leak fixes (Al Viro)  [Orabug: 27062562]  {CVE-2017-12190} 
  - virtio-pci: alloc only resources actually used. (Gerd Hoffmann)  [Orabug: 27054871] [Orabug: 26388044] [Orabug: 26388044] [Orabug: 26388044] [Orabug: 26388044] [Orabug: 26388044] [Orabug: 26388044] [Orabug: 26388044] [Orabug: 26388044]  
  - usb: Quiet down false peer failure messages (Don Zickus)  [Orabug: 27080216]  
  - xscore: add dma address check (Zhu Yanjun)  [Orabug: 27074085]  
  - netlink: allow to listen "all" netns (Nicolas Dichtel)  [Orabug: 23634951]  
  - netlink: rename private flags and states (Nicolas Dichtel)  [Orabug: 23634951]  
  - netns: use a spin_lock to protect nsid management (Nicolas Dichtel)  [Orabug: 23634951]  
  - netns: notify new nsid outside __peernet2id() (Nicolas Dichtel)  [Orabug: 23634951]  
  - netns: rename peernet2id() to peernet2id_alloc() (Nicolas Dichtel)  [Orabug: 23634951]  
  - netns: always provide the id to rtnl_net_fill() (Nicolas Dichtel)  [Orabug: 23634951]  
  - netns: returns always an id in __peernet2id() (Nicolas Dichtel)  [Orabug: 23634951]  
  - uek-rpm: add update-el-x86; fix-up ol6/update-el (Chuck Anderson)  [Orabug: 27004340]  
  - uek-rpm: disable CONFIG_NUMA_BALANCING_DEFAULT_ENABLED (Fred Herard)  [Orabug: 26798697]  
  - qla2xxx: Update driver version to 9.00.00.00.40.0-k (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix delayed response to command for loop mode/direct connect. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Use IOCB interface to submit non-critical MBX. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Add async new target notification (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Allow relogin to proceed if remote login did not finish (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix sess_lock & hardware_lock lock order problem. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix inadequate lock protection for ABTS. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix request queue corruption. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix memory leak for abts processing (Quinn Tran)  [Orabug: 26844197]  
  - scsi: qla2xxx: Fix ql_dump_buffer (Joe Perches)  [Orabug: 26844197]  
  - scsi: qla2xxx: Fix response queue count for Target mode. (Michael Hernandez)  [Orabug: 26844197]  
  - scsi: qla2xxx: Cleaned up queue configuration code. (Michael Hernandez)  [Orabug: 26844197]  
  - qla2xxx: Fix a warning reported by the "smatch" static checker (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Simplify usage of SRB structure in driver (Bart Van Assche)  [Orabug: 26844197]  
  - qla2xxx: Simplify usage of SRB structure in driver (Joe Carnuccio)  [Orabug: 26844197]  
  - qla2xxx: Improve RSCN handling in driver (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Add framework for async fabric discovery (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Track I-T nexus as single fc_port struct (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: introduce a private sess_kref (Christoph Hellwig)  [Orabug: 26844197]  
  - qla2xxx: Use d_id instead of s_id for more clarity (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix wrong argument in sp done callback (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Remove SRR code (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: Cleanup TMF code translation from qla_target (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Disable out-of-order processing by default in firmware (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix erroneous invalid handle message (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Reduce exess wait during chip reset (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Terminate exchange if corrupted (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix crash due to null pointer access (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Collect additional information to debug fw dump (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Reset reserved field in firmware options to 0 (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: Include ATIO queue in firmware dump when in target mode (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: Fix wrong IOCB type assumption (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Add DebugFS node for target sess list. (Quinn Tran)  [Orabug: 26844197]  
  - tcm_qla2xxx: Convert to target_alloc_session usage (Nicholas Bellinger)  [Orabug: 26844197]  
  - qla2xxx: Use ATIO type to send correct tmr response (Swapnil Nagle)  [Orabug: 26844197]  
  - qla2xxx: Fix TMR ABORT interaction issue between qla2xxx and TCM (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Move atioq to a different lock to reduce lock contention (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Remove dependency on hardware_lock to reduce lock contention. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Replace QLA_TGT_STATE_ABORTED with a bit. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Wait for all conflicts before ack'ing PLOGI (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: Delete session if initiator is gone from FW (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: Added interface to send explicit LOGO. (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: Add FW resource count in DebugFS. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Enable Target counters in DebugFS. (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: terminate exchange when command is aborted by LIO (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: drop cmds/tmrs arrived while session is being deleted (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: disable scsi_transport_fc registration in target mode (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: added sess generations to detect RSCN update races (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: Abort stale cmds on qla_tgt_wq when plogi arrives (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: delay plogi/prli ack until existing sessions are deleted (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: cleanup cmd in qla workqueue before processing TMR (Swapnil Nagle)  [Orabug: 26844197]  
  - qla2xxx: Add flush after updating ATIOQ consumer index. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Enable target mode for ISP27XX (Himanshu Madhani)  [Orabug: 26844197]  
  - KVM: nVMX: Fix loss of L2's NMI blocking state (Wanpeng Li)   
  - KVM: nVMX: track NMI blocking state separately for each VMCS (Paolo Bonzini)   
  - KVM: VMX: require virtual NMI support (Paolo Bonzini)   
  - KVM: nVMX: Fix the NMI IDT-vectoring handling (Wanpeng Li)   
  - NFS: Add static NFS I/O tracepoints (Chuck Lever)   
  - firmware: dmi_scan: add SBMIOS entry and DMI tables (Ivan Khoronzhuk)  [Orabug: 27023745]  
  - x86/platform/uv: Fix kdump for UV (Kirtikar Kashyap)  [Orabug: 27031345]  
  - KEYS: prevent KEYCTL_READ on negative key (Eric Biggers)  [Orabug: 27049926]  {CVE-2017-12192} 
  - virtio:rng: Virtio RNG devices need to be re-registered after suspend/resume (Jim Quigley)  [Orabug: 26989940]  
  - Hang/soft lockup in d_invalidate with simultaneous calls (Al Viro)  [Orabug: 26908674]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-116.el6uek]
changelog:
  - dtrace: Add CTF archive to the UEK nano package (Tomas Jedlicka)  [Orabug: 26983106]  
  - uek-rpm: Update kernel-ueknano's provides list. (Somasundaram Krishnasamy)  [Orabug: 27037687]  
  - uek-rpm: Add more modules to ueknano for OL7 (Somasundaram Krishnasamy)  [Orabug: 27037696]  
  - Revert "drivers/char/mem.c: deny access in open operation when securelevel is set" (Dhaval Giani)  [Orabug: 27037788]  
  - scsi: mpt3sas: Bump mpt3sas driver version to v16.100.00.00 (Sreekanth Reddy)  [Orabug: 26894858]  
  - scsi: mpt3sas: Adding support for SAS3616 HBA device (Sreekanth Reddy)  [Orabug: 26894858]  
  - scsi: mpt3sas: Fix possibility of using invalid Enclosure Handle for SAS device after host reset (Sreekanth Reddy)  [Orabug: 26894858]  
  - scsi: mpt3sas: Display chassis slot information of the drive (Sreekanth Reddy)  [Orabug: 26894858]  
  - scsi: mpt3sas: Updated MPI headers to v2.00.48 (Sreekanth Reddy)  [Orabug: 26894858]  
  - scsi: mpt3sas: Fix IO error occurs on pulling out a drive from RAID1 volume created on two SATA drive (Sreekanth Reddy)  [Orabug: 26894858]  
  - scsi: mpt3sas: Fix removal and addition of vSES device during host reset (Sreekanth Reddy)  [Orabug: 26894858]  
  - scsi: mpt3sas: Reduce memory footprint in kdump kernel (Sreekanth Reddy)  [Orabug: 26894858]  
  - scsi: mpt3sas: Fixed memory leaks in driver (Sreekanth Reddy)  [Orabug: 26894858]  
  - scsi: mpt3sas: Processing of Cable Exception events (Sreekanth Reddy)  [Orabug: 26894858]  
  - selinux: fix off-by-one in setprocattr (Stephen Smalley)  [Orabug: 25660054]  {CVE-2017-2618} {CVE-2017-2618} {CVE-2017-2618} 
  - sysctl: Drop reference added by grab_header in proc_sys_readdir (Zhou Chengming)  [Orabug: 25062944]  {CVE-2016-9191} {CVE-2016-9191} 
  - storvsc: don't assume SG list is contiguous (Aruna Ramakrishna)  [Orabug: 26492697]  
  - thp: run vma_adjust_trans_huge() outside i_mmap_rwsem (Kirill A. Shutemov)  [Orabug: 27026170]  
  - scsi_lib: correctly retry failed zero length REQ_TYPE_FS commands (James Bottomley)  [Orabug: 26824565]  
  - ovl: during copy up, switch to mounter's creds early (Vivek Goyal)  [Orabug: 25684456]  
  - ovl: lookup: do getxattr with mounter's permission (Miklos Szeredi)  [Orabug: 25684456]  
  - ovl: get rid of the dead code left from broken (and disabled) optimizations (Al Viro)  [Orabug: 25684456]  
  - selinux: Implement dentry_create_files_as() hook (Vivek Goyal)  [Orabug: 25684456]  
  - security, overlayfs: Provide hook to correctly label newly created files (Vivek Goyal)  [Orabug: 25684456]  
  - selinux: Pass security pointer to determine_inode_label() (Vivek Goyal)  [Orabug: 25684456]  
  - selinux: Implementation for inode_copy_up_xattr() hook (Vivek Goyal)  [Orabug: 25684456]  
  - security,overlayfs: Provide security hook for copy up of xattrs for overlay file (Vivek Goyal)  [Orabug: 25684456]  
  - selinux: Implementation for inode_copy_up() hook (Vivek Goyal)  [Orabug: 25684456]  
  - security, overlayfs: provide copy up security hook for unioned files (Vivek Goyal)  [Orabug: 25684456]  
  - selinux: delay inode label lookup as long as possible (Paul Moore)  [Orabug: 25684456]  
  - selinux: Add accessor functions for inode->i_security (Andreas Gruenbacher)  [Orabug: 25684456]  
  - selinux: Create a common helper to determine an inode label [ver #3] (David Howells)  [Orabug: 25684456]  
  - rds: Proper init/exit declaration for module init/exit function (Ka-Cheong Poon)  [Orabug: 27013833]  
  - rds: Remove .exit from struct rds_transport (Ka-Cheong Poon)  [Orabug: 27013833]  
  - ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca)  [Orabug: 26540159]  {CVE-2017-7542} 
  - xfs: use dedicated log worker wq to avoid deadlock with cil wq (Brian Foster)   
  - udp: consistently apply ufo or fragmentation (Willem de Bruijn)  [Orabug: 26921303]  {CVE-2017-1000112} 
  - nvme-pci: Remove nvme_setup_prps BUG_ON (Keith Busch)  [Orabug: 26871819]  
  - block: Check for gaps on front and back merges (Jens Axboe)  [Orabug: 26871819]  
  - block: Copy a user iovec if it includes gaps (Sagi Grimberg)   
  - blk: [Partial] Replace SG_GAPGS with new queue limits mask (Ashok Vairavan)  [Orabug: 26871819]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-115.el6uek]
changelog:
  - CVE-2016-10318 missing authorization check fscrypt_process_policy (Jack Vogel)  [Orabug: 25883175]  
  - uek-rpm: Build kernel ueknano rpm for OL7 (Somasundaram Krishnasamy)  [Orabug: 27002543]  
  - nvme: honor RTD3 Entry Latency for shutdowns (Martin K. Petersen)  [Orabug: 26999048]  
  - ocfs2: fix posix_acl_create deadlock (Junxiao Bi)  [Orabug: 26731834]  
  - scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly (Xin Long)  [Orabug: 26828494]  {CVE-2017-14489} 
  - uek/config: enable NVME SG_IO support by default (Shan Hai)  [Orabug: 26993705]  
  - nvme: report the scsi TUR state correctly (Shan Hai)  [Orabug: 26993705]  
  - vring: Use the DMA API on Xen (Andy Lutomirski)  [Orabug: 26388044]  
  - virtio_pci: Use the DMA API if enabled (Andy Lutomirski)  [Orabug: 26388044]  
  - virtio_mmio: Use the DMA API if enabled (Andy Lutomirski)  [Orabug: 26388044]  
  - virtio: Add improved queue allocation API (Andy Lutomirski)  [Orabug: 26388044]  
  - virtio_ring: Support DMA APIs (Andy Lutomirski)  [Orabug: 26388044]  
  - vring: Introduce vring_use_dma_api() (Andy Lutomirski)   
  - smartpqi: update driver version (Don Brace)  [Orabug: 26943380]  
  - smartpqi: cleanup raid map warning message (Kevin Barnett)  [Orabug: 26943380]  
  - smartpqi: update controller ids (Kevin Barnett)  [Orabug: 26943380]  
  - scsi: smartpqi: remove the smp_handler stub (Christoph Hellwig)  [Orabug: 26943380]  
  - scsi: smartpqi: change driver version to 1.1.2-125 (Kevin Barnett)  [Orabug: 26943380]  
  - scsi: smartpqi: add in new controller ids (Kevin Barnett)  [Orabug: 26943380]  
  - scsi: smartpqi: update kexec and power down support (Kevin Barnett)  [Orabug: 26943380]  
  - scsi: smartpqi: cleanup doorbell register usage. (Kevin Barnett)  [Orabug: 26943380]  
  - scsi: smartpqi: update pqi passthru ioctl (Kevin Barnett)  [Orabug: 26943380]  
  - scsi: smartpqi: enhance BMIC cache flush (Kevin Barnett)  [Orabug: 26943380]  
  - scsi: smartpqi: add pqi reset quiesce support (Kevin Barnett)  [Orabug: 26943380]  
  - scsi: smartpqi: make pdev pointer names consistent (Kevin Barnett)  [Orabug: 26943380]  
  - be2net: fix TSO6/GSO issue causing TX-stall on Lancer/BEx (Suresh Reddy)  [Orabug: 26943365]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-114.el6uek]
changelog:
  - ovl: fix get_acl() on tmpfs (Miklos Szeredi)  [Orabug: 26975443]  
  - ixgbe: Initialize 64-bit stats seqcounts (Florian Fainelli)  [Orabug: 26785078]  
  - ixgbe: Disable flow control for XFI (Tony Nguyen)  [Orabug: 26785078]  
  - ixgbe: Do not support flow control autonegotiation for X553 (Tony Nguyen)  [Orabug: 26785078]  
  - ixgbe: Update NW_MNG_IF_SEL support for X553 (Tony Nguyen)  [Orabug: 26785078]  
  - ixgbe: Enable LASI interrupts for X552 devices (Tony Nguyen)  [Orabug: 26785078]  
  - ixgbe: Ensure MAC filter was added before setting MACVLAN (Tony Nguyen)  [Orabug: 26785078]  
  - ixgbe: pci_set_drvdata must be called before register_netdev (Jeff Mahoney)  [Orabug: 26785078]  
  - ixgbe: Resolve cppcheck format string warning (Tony Nguyen)  [Orabug: 26785078]  
  - ixgbe: fix writes to PFQDE (Emil Tantilov)  [Orabug: 26785078]  
  - ixgbevf: Bump version number (Tony Nguyen)  [Orabug: 26785078]  
  - ixgbe: Bump version number (Tony Nguyen)  [Orabug: 26785078]  
  - ixgbe: check for Tx timestamp timeouts during watchdog (Jacob Keller)  [Orabug: 26785078]  
  - ixgbe: add statistic indicating number of skipped Tx timestamps (Jacob Keller)  [Orabug: 26785078]  
  - ixgbe: avoid permanent lock of *_PTP_TX_IN_PROGRESS (Jacob Keller)  [Orabug: 26785078]  
  - ixgbe: fix race condition with PTP_TX_IN_PROGRESS bits (Jacob Keller)  [Orabug: 26785078]  
  - net: better skb->sender_cpu and skb->napi_id cohabitation (Eric Dumazet)  [Orabug: 26953388] [Orabug: 26591689]  
  - uek-rpm: Clean up installed directories when uninstalling kernel-ueknano (Somasundaram Krishnasamy)  [Orabug: 26929773]  
  - uek-rpm: Add missing ko modules to nano rpm (Somasundaram Krishnasamy)  [Orabug: 26929773]  
  - i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Jacob Keller)  [Orabug: 26785018]  
  - i40e: avoid NVM acquire deadlock during NVM update (Anjali Singhai Jain)  [Orabug: 26785018]  
  - i40e/i40evf: avoid dynamic ITR updates when polling or low packet rate (Jacob Keller)  [Orabug: 26785018]  
  - i40e/i40evf: remove ULTRA latency mode (Jacob Keller)  [Orabug: 26785018]  
  - i40e: invert logic for checking incorrect cpu vs irq affinity (Jacob Keller)  [Orabug: 26785018]  
  - i40e: initialize our affinity_mask based on cpu_possible_mask (Jacob Keller)  [Orabug: 26785018]  
  - i40e: move enabling icr0 into i40e_update_enable_itr (Jacob Keller)  [Orabug: 26785018]  
  - i40e: remove workaround for resetting XPS (Jacob Keller)  [Orabug: 26785018]  
  - i40e: Fix for unused value issue found by static analysis (Carolyn Wyborny)  [Orabug: 26785018]  
  - i40e: 25G FEC status improvements (Mariusz Stachura)  [Orabug: 26785018]  
  - i40e: force VMDQ device name truncation (Jacob Keller)  [Orabug: 26785018]  
  - i40evf: fix possible snprintf truncation of q_vector->name (Jacob Keller)  [Orabug: 26785018]  
  - i40e: Use correct flag to enable egress traffic for unicast promisc (Akeem G Abodunrin)  [Orabug: 26785018]  
  - i40e: prevent snprintf format specifier truncation (Jacob Keller)  [Orabug: 26785018]  
  - i40e: Store the requested FEC information (Mariusz Stachura)  [Orabug: 26785018]  
  - i40e: Update state variable for adminq subtask (Sudheer Mogilappagari)  [Orabug: 26785018]  
  - i40e: synchronize nvmupdate command and adminq subtask (Sudheer Mogilappagari)  [Orabug: 26785018]  
  - i40e: prevent changing ITR if adaptive-rx/tx enabled (Alan Brady)  [Orabug: 26785018]  
  - i40evf: use netdev variable in reset task (Alan Brady)  [Orabug: 26785018]  
  - i40e: move check for avoiding VID=0 filters into i40e_vsi_add_vlan (Jacob Keller)  [Orabug: 26785018]  
  - i40e/i40evf: use cmpxchg64 when updating private flags in ethtool (Jacob Keller)  [Orabug: 26785018]  
  - i40e: Detect ATR HW Evict NVM issue and disable the feature (Anjali Singhai Jain)  [Orabug: 26785018]  
  - i40e: Fix a bug with VMDq RSS queue allocation (Anjali Singhai Jain)  [Orabug: 26785018]  
  - i40evf: prevent VF close returning before state transitions to DOWN (Sudheer Mogilappagari)  [Orabug: 26785018]  
  - i40e: Initialize 64-bit statistics TX ring seqcount (Florian Fainelli)  [Orabug: 26785018]  
  - i40e: handle setting administratively set MAC address back to zero (Stefan Assmann)  [Orabug: 26785018]  
  - i40evf: remove unnecessary __packed (Tushar Dave)  [Orabug: 26785018]  
  - i40evf: add some missing includes (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40e: display correct UDP tunnel type name (Jacob Keller)  [Orabug: 26785018]  
  - i40e/i40evf: remove mismatched type warnings (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40e/i40evf: make IPv6 ATR code clearer (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40e: fix odd formatting and indent (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40e: fix up 32 bit timespec references (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40e: Handle admin Q timeout when releasing NVM (Paul M Stillwell Jr)  [Orabug: 26785018]  
  - i40e: remove WQ_UNBOUND and the task limit of our workqueue (Jacob Keller)  [Orabug: 26785018]  
  - i40e: Fix for trace found with S4 state (Carolyn Wyborny)  [Orabug: 26785018]  
  - i40e: fix incorrect variable assignment (Gustavo A R Silva)  [Orabug: 26785018]  
  - i40e: don't hold RTNL lock for the entire reset (Jacob Keller)  [Orabug: 26785018]  
  - i40e: clear only cause_ena bit (Shannon Nelson)  [Orabug: 26785018]  
  - i40e: fix disabling overflow promiscuous mode (Alan Brady)  [Orabug: 26785018]  
  - i40e: Add support for OEM firmware version (Filip Sadowski)  [Orabug: 26785018]  
  - i40e: genericize the partition bandwidth control (Shannon Nelson)  [Orabug: 26785018]  
  - i40e: Add message for unsupported MFP mode (Carolyn Wyborny)  [Orabug: 26785018]  
  - i40e: Support firmware CEE DCB UP to TC map re-definition (Greg Bowers)  [Orabug: 26785018]  
  - i40e: Fix potential out of bound array access (Sudheer Mogilappagari)  [Orabug: 26785018]  
  - i40e: comment that udp_port must be in host byte order (Jacob Keller)  [Orabug: 26785018]  
  - i40e: use dev_dbg instead of dev_info when warning about missing routine (Jacob Keller)  [Orabug: 26785018]  
  - i40e/i40evf: update WOL and I40E_AQC_ADDR_VALID_MASK flags (Alice Michael)  [Orabug: 26785018]  
  - i40evf: assign num_active_queues inside i40evf_alloc_queues (Jacob Keller)  [Orabug: 26785018]  
  - i40e: Fix a sleep-in-atomic bug (Jia-Ju Bai)  [Orabug: 26785018]  
  - i40e: fix handling of HW ATR eviction (Jacob Keller)  [Orabug: 26785018]  
  - i40evf: update i40evf.txt with new content (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40evf: Add support for Adaptive Virtual Function (Preethi Banala)  [Orabug: 26785018]  
  - i40evf: drop i40e_type.h include (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40e: Check for memory allocation failure (Christophe Jaillet)  [Orabug: 26785018]  
  - i40e: check for Tx timestamp timeouts during watchdog (Jacob Keller)  [Orabug: 26785018]  
  - i40e: use pf data structure directly in i40e_ptp_rx_hang (Jacob Keller)  [Orabug: 26785018]  
  - i40e: add statistic indicating number of skipped Tx timestamps (Jacob Keller)  [Orabug: 26785018]  
  - i40e: avoid permanent lock of *_PTP_TX_IN_PROGRESS (Jacob Keller)  [Orabug: 26785018]  
  - i40e: fix race condition with PTP_TX_IN_PROGRESS bits (Jacob Keller)  [Orabug: 26785018]  
  - i40evf: disable unused flags (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40evf: fix merge error in older patch (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40evf: fix duplicate lines (Jesse Brandeburg)  [Orabug: 26785018]  
  - i40evf: hide unused variable (Arnd Bergmann)  [Orabug: 26785018]  
  - i40evf: allocate queues before we setup the interrupts and q_vectors (Jacob Keller)  [Orabug: 26785018]  
  - i40evf: remove I40E_FLAG_FDIR_ATR_ENABLED (Jacob Keller)  [Orabug: 26785018]  
  - i40e: remove hw_disabled_flags in favor of using separate flag bits (Jacob Keller)  [Orabug: 26785018]  
  - i40evf: remove needless min_t() on num_online_cpus()*2 (Jacob Keller)  [Orabug: 26785018]  
  - i40e: remove unnecessary msleep() delay in i40e_free_vfs (Jacob Keller)  [Orabug: 26785018]  
  - i40e: amortize wait time when disabling lots of VFs (Jacob Keller)  [Orabug: 26785018]  
  - i40e: Reprogram port offloads after reset (Alexander Duyck)  [Orabug: 26785018]  
  - i40e: rename index to port to avoid confusion (Jacob Keller)  [Orabug: 26785018]  
  - i40e: make use of i40e_reset_all_vfs when initializing new VFs (Jacob Keller)  [Orabug: 26785018]  
  - i40e: properly spell I40E_VF_STATE_* flags (Jacob Keller)  [Orabug: 26785018]  
  - i40e: use i40e_stop_rings_no_wait to implement PORT_SUSPENDED state (Jacob Keller)  [Orabug: 26785018]  
  - i40e: reset all VFs in parallel when rebuilding PF (Jacob Keller)  [Orabug: 26785018]  
  - i40e: split some code in i40e_reset_vf into helpers (Jacob Keller)  [Orabug: 26785018]  
  - i40e: remove I40E_FLAG_IN_NETPOLL entirely (Jacob Keller)  [Orabug: 26785018]  
  - i40e: reduce wait time for adminq command completion (Jacob Keller)  [Orabug: 26785018]  
  - i40e: fix CONFIG_BUSY checks in i40e_set_settings function (Jacob Keller)  [Orabug: 26785018]  
  - i40e: factor out queue control from i40e_vsi_control_(tx|rx) (Jacob Keller)  [Orabug: 26785018]  
  - i40e: don't hold RTNL lock while waiting for VF reset to finish (Jacob Keller)  [Orabug: 26785018]  
  - i40e: new AQ commands (Jingjing Wu)  [Orabug: 26785018]  
  - i40e/i40evf: Add tracepoints (Scott Peterson)  [Orabug: 26785018]  
  - i40evf: add client interface (Mitch Williams)  [Orabug: 26785018]  
  - i40e: dump VF information in debugfs (Mitch Williams)  [Orabug: 26785018]  
  - i40e: Fix support for flow director programming status (Alexander Duyck)  [Orabug: 26785018]  
  - i40e/i40evf: Remove VF Rx csum offload for tunneled packets (alice michael)  [Orabug: 26785018]  
  - i40evf: Use net_device_stats from struct net_device (Tobias Klauser)  [Orabug: 26785018]  
  - i40e: clean up historic deprecated flag definitions (Jacob Keller)  [Orabug: 26785018]  
  - i40e: remove I40E_FLAG_NEED_LINK_UPDATE (Alice Michael)  [Orabug: 26785018]  
  - i40e: remove extraneous loop in i40e_vsi_wait_queues_disabled (Jacob Keller)  [Orabug: 26785018]  
  - i40e: Simplify i40e_detect_recover_hung_queue logic (Alan Brady)  [Orabug: 26785018]  
  - i40e: Decrease the scope of rtnl lock (Maciej Sosin)  [Orabug: 26785018]  
  - i40e: Swap use of pf->flags and pf->hw_disabled_flags for ATR Eviction (Alexander Duyck)  [Orabug: 26785018]  
  - i40e: update error message when trying to add invalid filters (Jacob Keller)  [Orabug: 26785018]  
  - i40e: only register client on iWarp-capable devices (Mitch Williams)  [Orabug: 26785018]  
  - i40e: close client on remove and shutdown (Mitch Williams)  [Orabug: 26785018]  
  - i40e: register existing client on probe (Mitch Williams)  [Orabug: 26785018]  
  - i40e: remove client instance on driver unload (Mitch Williams)  [Orabug: 26785018]  
  - i40e: fix for queue timing delays (Wyborny, Carolyn)  [Orabug: 26785018]  
  - i40e/i40evf: Change the way we limit the maximum frame size for Rx (Alexander Duyck)  [Orabug: 26785018]  
  - i40e/i40evf: Add legacy-rx private flag to allow fallback to old Rx flow (Alexander Duyck)  [Orabug: 26785018]  
  - i40e/i40evf: Pull code for grabbing and syncing rx_buffer from fetch_buffer (Alexander Duyck)  [Orabug: 26785018]  
  - i40e/i40evf: Use length to determine if descriptor is done (Alexander Duyck)  [Orabug: 26785018]  
  - drivers/char/mem.c: deny access in open operation when securelevel is set (Ethan Zhao)  [Orabug: 26943864]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-113.el6uek]
changelog:
  - x86/mm/64: Enable SWIOTLB if system has SRAT memory regions above MAX_DMA32_PFN (Igor Mammedov)  [Orabug: 26754302]  
  - x86/mm: Introduce max_possible_pfn (Igor Mammedov)  [Orabug: 26754302]  
  - dtrace lockstat provider probes (Alan Maguire)  [Orabug: 26149674] [Orabug: 26149956]  
  - rds: RDS diagnostics when connections are stuck in Receiver Not Ready state. (hui.han)   
  - timerfd: Protect the might cancel mechanism proper (Thomas Gleixner)  [Orabug: 26673877]  {CVE-2017-10661} 
  - brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Tim Tianyang Chen)  [Orabug: 26540118]  {CVE-2017-7541} 
  - crypto: ahash - Fix EINPROGRESS notification callback (Herbert Xu)  [Orabug: 25882988]  {CVE-2017-7618} 
  - xen/mmu: Call xen_cleanhighmap() with 4MB aligned for page tables mapping (Zhenzhong Duan)  [Orabug: 26883325]  
  - selftests/memfd: add memfd_create hugetlbfs selftest (Mike Kravetz)  [Orabug: 26768367]  
  - mm/shmem: add hugetlbfs support to memfd_create() (Mike Kravetz)  [Orabug: 26768367]  
  - mm: shm: use new hugetlb size encoding definitions (Mike Kravetz)  [Orabug: 26768367]  
  - mm: arch: consolidate mmap hugetlb size encodings (Mike Kravetz)  [Orabug: 26768367]  
  - uapi/Kbuild: add new header file hugetlb_encode.h (Mike Kravetz)  [Orabug: 26768367]  
  - mm: hugetlb: define system call hugetlb size encodings in single file (Mike Kravetz)  [Orabug: 26768367]  
  - RDS: IB: Change the proxy qp's path_mtu to IB_MTU_256 (Avinash Repaka)  [Orabug: 26864694]  
  - devpts: clean up interface to pty drivers (Linus Torvalds)  [Orabug: 26743034]  
  - tcp: fix tcp_mark_head_lost to check skb len before fragmenting (Neal Cardwell)  [Orabug: 26646104]  
  - kvm: nVMX: Don't allow L2 to access the hardware CR8 (Jim Mattson)   {CVE-2017-12154} {CVE-2017-12154} 
  - dtrace: ensure SDT stub function returns 0 (Kris Van Hees)  [Orabug: 26909775]  
  - tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Wei Wang)  [Orabug: 26796038]  {CVE-2017-14106} 
  - xfrm: fix stack access out of bounds with CONFIG_XFRM_SUB_POLICY (Sabrina Dubroca)  [Orabug: 25959303]  
  - rxrpc: Fix several cases where a padded len isn't checked in ticket decode (David Howells)  [Orabug: 26376434]  {CVE-2017-7482} {CVE-2017-7482} 
  - xen: don't print error message in case of missing Xenstore entry (Juergen Gross)  [Orabug: 26841566]  
  - mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin Guay)  [Orabug: 26526968]  
  - xen/x86: Add interface for querying amount of host memory (Boris Ostrovsky)  [Orabug: 26526923]  
  - rds: Fix non-atomic operation on shared flag variable (Håkon Bugge)  [Orabug: 26842076]  
  - rds: Fix incorrect statistics counting (Håkon Bugge)  [Orabug: 26847583]  
  - i40e: use cpumask_copy instead of direct assignment (Jacob Keller)  [Orabug: 26822609]  
  - mm: thp: set THP defrag by default to madvise and add a stall-free defrag option (Mel Gorman)  [Orabug: 26587019]  
  - crypto: testmgr - Set struct aead_testvec iv member size to MAX_IVLEN (Somasundaram Krishnasamy)  [Orabug: 25925256]  
  - SPEC: remove ctf.ko from ueknano modules list (Nick Alcock)  [Orabug: 25815362]  
  - SPEC: generate CTF when DTrace is enabled. (Nick Alcock)  [Orabug: 25815362]  
  - SPEC: bump libdtrace-ctf requirement to 0.7+. (Nick Alcock)  [Orabug: 25815362]  
  - Documentation: add watermark_scale_factor to the list of vm systcl file (Jerome Marchand)  [Orabug: 26643957]  
  - mm: scale kswapd watermarks in proportion to memory (Johannes Weiner)  [Orabug: 26643957]  
  - ctf: delete the deduplication blacklist (Nick Alcock)  [Orabug: 26765112]  
  - ctf: automate away the deduplication blacklist (Nick Alcock)  [Orabug: 26765112]  
  - ctf: drop CONFIG_DT_DISABLE_CTF, ctf.ko, and all that it implies (Nick Alcock)  [Orabug: 25815362]  
  - ctf: do not allow dwarf2ctf to run as root (Nick Alcock)  [Orabug: 25815362]  
  - ctf: decouple CTF building from the kernel build (Nick Alcock)  [Orabug: 25815362]  
  - ctf: handle the bit_offset in members with a DW_FORM_block data_member_location (Nick Alcock)  [Orabug: 26387109]  
  - ctf: handle DW_AT_specification (Nick Alcock)  [Orabug: 26386100]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-112.el6uek]
changelog:
  - oracleasm: Copy the integrity descriptor (Martin K. Petersen)  [Orabug: 26559128]  
  - RDS: IB: Add proxy qp to support FRWR through RDS_GET_MR (Avinash Repaka)  [Orabug: 25669255]  
  - RDS: Add support for fast registration work request (Avinash Repaka)  [Orabug: 22145384]  
  - scsi: qedi: Limit number for CQ queues. (Manish Rangankar)  [Orabug: 26759520]  
  - scsi: qedi: fix another spelling mistake: "alloction" -> "allocation" (Colin Ian King)  [Orabug: 26759520]  
  - scsi: qedi: Add ISCSI_BOOT_SYSFS to Kconfig (Nilesh Javali)  [Orabug: 26759520]  
  - scsi: qedi: Add support for Boot from SAN over iSCSI offload (Nilesh Javali)  [Orabug: 26759520]  
  - scsi: qedi: Remove WARN_ON from clear task context. (Manish Rangankar)  [Orabug: 26759520]  
  - scsi: qedi: Remove WARN_ON for untracked cleanup. (Manish Rangankar)  [Orabug: 26759520]  
  - scsi: qedi: Remove comparison of u16 idx with zero. (Christos Gkekas)  [Orabug: 26759520]  
  - scsi: qedi: Fix return code in qedi_ep_connect() (Dan Carpenter)  [Orabug: 26759520]  
  - scsi: qedi: Fix endpoint NULL panic during recovery. (manish.rangankar@cavium.com)  [Orabug: 26759520]  
  - scsi: qedi: set max_fin_rt default value (Nilesh Javali)  [Orabug: 26759520]  
  - scsi: qedi: Set firmware tcp msl timer value. (manish.rangankar@cavium.com)  [Orabug: 26759520]  
  - scsi: qedi: Fix endpoint NULL panic in qedi_set_path. (manish.rangankar@cavium.com)  [Orabug: 26759520]  
  - scsi: qedi: Set dma_boundary to 0xfff. (manish.rangankar@cavium.com)  [Orabug: 26759520]  
  - scsi: qedi: Correctly set firmware max supported BDs. (manish.rangankar@cavium.com)  [Orabug: 26759520]  
  - scsi: qedi: Fix bad pte call trace when iscsiuio is stopped. (Arun Easi)  [Orabug: 26759520]  
  - qed: Fix build errors. (Somasundaram Krishnasamy)  [Orabug: 26783820]  
  - config: add CONFIG_INFINIBAND_QEDR (Brian Maly)  [Orabug: 26759520]  
  - qed: fix spelling mistake: "calescing" -> "coalescing" (Colin Ian King)  [Orabug: 26783820]  
  - qed: Fix a memory allocation failure test in 'qed_mcp_cmd_init()' (Christophe Jaillet)  [Orabug: 26783820]  
  - qed: enhanced per queue max coalesce value. (Rahul Verma)  [Orabug: 26783820]  
  - qed: Read per queue coalesce from hardware (Rahul Verma)  [Orabug: 26783820]  
  - qed: Add support for vf coalesce configuration. (Rahul Verma)  [Orabug: 26783820]  
  - qede: Add ethtool support for Energy efficient ethernet. (Sudarsana Reddy Kalluru)  [Orabug: 26783820]  
  - qed: Add support for Energy efficient ethernet. (Sudarsana Reddy Kalluru)  [Orabug: 26783820]  
  - qed/qede: Add setter APIs support for RX flow classification (Chopra, Manish)  [Orabug: 26783820]  
  - qede: Add getter APIs support for RX flow classification (Chopra, Manish)  [Orabug: 26783820]  
  - qed: Fix printk option passed when printing ipv6 addresses (Kalderon, Michal)  [Orabug: 26783820]  
  - qed: initialize ll2_syn_handle at start of function (Michal Kalderon)  [Orabug: 26783820]  
  - qed: Add iWARP support for physical queue allocation (Kalderon, Michal)  [Orabug: 26783820]  
  - qed: Add iWARP protocol support in context allocation (Kalderon, Michal)  [Orabug: 26783820]  
  - qed: iWARP CM add error handling (Kalderon, Michal)  [Orabug: 26783820]  
  - qed: iWARP implement disconnect flows (Kalderon, Michal)  [Orabug: 26783820]  
  - qed: iWARP CM add active side connect (Kalderon, Michal)  [Orabug: 26783820]  
  - qed: iWARP CM add passive side connect (Kalderon, Michal)  [Orabug: 26783820]  
  - qed: iWARP CM add listener functions and initial SYN processing (Kalderon, Michal)  [Orabug: 26783820]  
  - qed: iWARP CM - setup a ll2 connection for handling SYN packets (Kalderon, Michal)  [Orabug: 26783820]  
  - qed: Add iWARP support in ll2 connections (Kalderon, Michal)  [Orabug: 26783820]  
  - qed: Rename some ll2 related defines (Kalderon, Michal)  [Orabug: 26783820]  
  - qed: Implement iWARP initialization, teardown and qp operations (Kalderon, Michal)  [Orabug: 26783820]  
  - qed: Introduce iWARP personality (Kalderon, Michal)  [Orabug: 26783820]  
  - qed*: qede_roce.[ch] -> qede_rdma.[ch] (Michal Kalderon)  [Orabug: 26783820]  
  - qed: Disable RoCE dpm when DCBx change occurs (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: RoCE EDPM to honor PFC (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Chain support for external PBL (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Fix an off by one bug (Dan Carpenter)  [Orabug: 26783820]  
  - qed: add qed_int_sb_init() stub function (Arnd Bergmann)  [Orabug: 26783820]  
  - qed: collect GSI port statistics (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Call rx_release_cb() when flushing LL2 (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: No need for LL2 frags indication (Mintz, Yuval)  [Orabug: 26783820]  
  - qed*: LL2 callback operations (Michal Kalderon)  [Orabug: 26783820]  
  - qed: LL2 code relocations (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Cleaner seperation of LL2 inputs (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Revise ll2 Rx completion (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: LL2 to use packed information for tx (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: VFs to try utilizing the doorbell bar (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: IOV db support multiple queues per qzone (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Make VF legacy a bitfield (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Assign a unique per-queue index to queue-cid (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Pass vf_params when creating a queue-cid (Mintz, Yuval)  [Orabug: 26783820]  
  - qed*: L2 interface to use the SB structures directly (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Create L2 queue database (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Add bitmaps for VF CIDs (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Add support for changing iSCSI mac (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Support NVM-image reading API (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Share additional information with qedf (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Correct order of wwnn and wwpn (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: No need to reset SBs on IOV init (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Reset IGU CAM to default on init (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Hold a single array for SBs (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Provide auxiliary for getting free VF SB (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Remove assumption on SB order in IGU (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Encapsulate interrupt counters in struct (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Add aux. function translating sb_id -> igu_sb_id (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Distinguish between sb_id and igu_sb_id (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: IGU read revised (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Minor refactoring in interrupt code (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Make qed_int_cau_conf_pi() static (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Don't log missing periodic stats by default (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Cache alignemnt padding to match host (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Mask parities after occurance (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Print multi-bit attentions properly (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Diffrentiate adapter-specific attentions (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Get rid of the attention-arrays (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Support dynamic s-tag change (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: QL41xxx VF MSI-x table (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Don't inherit RoCE DCBx for V2 (Sudarsana Reddy Kalluru)  [Orabug: 26783820]  
  - qed: Correct DCBx update scheme (Sudarsana Reddy Kalluru)  [Orabug: 26783820]  
  - qed: Add missing static/local dcbx info (Sudarsana Reddy Kalluru)  [Orabug: 26783820]  
  - qed: Replace set_id() api with set_name() (Mintz, Yuval)  [Orabug: 26783820]  
  - qede: Log probe of PCI device (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Provide MBI information in dev_info (Tomer Tayar)  [Orabug: 26783820]  
  - qed: Enable RoCE parser searching on fp init (Michal Kalderon)  [Orabug: 26783820]  
  - qed: Flush slowpath tasklet on stop (Tomer Tayar)  [Orabug: 26783820]  
  - qed: Remove BB_A0 references (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Drop the 's' from num_ports_in_engines (Tomer Tayar)  [Orabug: 26783820]  
  - qed: Log incorrectly installed board (Tomer Tayar)  [Orabug: 26783820]  
  - qed: !main_ptt for tunnel configuration (Manish Chopra)  [Orabug: 26783820]  
  - qed: Align DP_ERR style with other DP macros (Mintz, Yuval)  [Orabug: 26783820]  
  - qede: Fix sparse warnings (Manish Chopra)  [Orabug: 26783820]  
  - qed: Fix setting of Management bitfields (Tomer Tayar)  [Orabug: 26783820]  
  - qede: qedr closure after setting state (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Correct print in iscsi error-flow (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Revise alloc/setup/free flow (Tomer Tayar)  [Orabug: 26783820]  
  - qede: Don't use an internal MAC field (Mintz, Yuval)  [Orabug: 26783820]  
  - qede: Add missing Status-block free (Sudarsana Reddy Kalluru)  [Orabug: 26783820]  
  - qede: Honor user request for Tx buffers (Sudarsana Reddy Kalluru)  [Orabug: 26783820]  
  - qede: Allow WoL to activate by default (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Remove unused including <linux/version.h> (Wei Yongjun)  [Orabug: 26783820]  
  - qed: Utilize FW 8.20.0.0 (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Fix uninitialized data in aRFS infrastructure (Mintz, Yuval)  [Orabug: 26783820]  
  - qede: Split PF/VF ndos. (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Correct doorbell configuration for !4Kb pages (Ram Amrani)  [Orabug: 26783820]  
  - qed: Tell QM the number of tasks (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Fix VF removal sequence (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: Fix overriding of supported autoneg value. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qed*: Fix possible overflow for status block id field. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qed*: Fix issues in the ptp filter config implementation. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qede: Fix concurrency issue in PTP Tx path processing. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qed: Prevent warning without CONFIG_RFS_ACCEL (Mintz, Yuval)  [Orabug: 26783820]  
  - qed: output the DPM status and WID count (Ram Amrani)  [Orabug: 26783820]  
  - qed: align DPI configuration to HW requirements (Ram Amrani)  [Orabug: 26783820]  
  - qed: verify RoCE resource bitmaps are released (Ram Amrani)  [Orabug: 26783820]  
  - qed: add error handling flow to TID deregistratin posting failure (Ram Amrani)  [Orabug: 26783820]  
  - qed: remove unused SQ error state (Ram Amrani)  [Orabug: 26783820]  
  - qed: configure the RoCE max message size (Ram Amrani)  [Orabug: 26783820]  
  - qed: Unlock on error in qed_vf_pf_acquire() (Dan Carpenter)  [Orabug: 26783820]  
  - qed: Acquire/release ptt_ptp lock when enabling/disabling PTP. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qed: Remove the un-needed ptp header file. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qede: Add support for PTP resource locking. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qed: Add support for PTP resource locking. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qed: Add support for MFW resource locking. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qed: fix invalid use of sizeof in qed_alloc_qm_data() (Wei Yongjun)  [Orabug: 26783820]  
  - qed: Fix error in the dcbx app meta data initialization. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qed - VF tunnelling support [VXLAN/GENEVE/GRE] (Chopra, Manish)  [Orabug: 26783820]  
  - qed/qede: Add UDP ports in bulletin board (Chopra, Manish)  [Orabug: 26783820]  
  - qede: Configure UDP ports in local context. (Chopra, Manish)  [Orabug: 26783820]  
  - qede: Disable tunnel offloads for non offloaded UDP ports (Chopra, Manish)  [Orabug: 26783820]  
  - qed/qede: Enable tunnel offloads based on hw configuration (Chopra, Manish)  [Orabug: 26783820]  
  - qed: refactor tunnelling - API/Structs (Chopra, Manish)  [Orabug: 26783820]  
  - qed: Add support for static dcbx. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qed: Support dcbnl IEEE selector field. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qed: Add additional DCBx debug messages. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qed: Separate RoCE DCBx support for V2. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qed: Cleanup DCBx unnecessary parameters. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qed: Fix issue in populating the PFC config paramters. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qed: Fix possible system hang in the dcbnl-getdcbx() path. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qed: Fix sending an invalid PFC error mask to MFW. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qed: Fix possible error in populating max_tc field. (sudarsana.kalluru@cavium.com)  [Orabug: 26783820]  
  - qede: allocate enough data for ->arfs_fltr_bmap (Dan Carpenter)  [Orabug: 26783820]  
  - qede: Add aRFS support (Chopra, Manish)  [Orabug: 26783820]  
  - qed: aRFS infrastructure support (Chopra, Manish)  [Orabug: 26783820]  
  - uek-rpm: build: sign modules in parallel (Nick Alcock)  [Orabug: 26316447]  
  - virtio: fix memory leak in virtqueue_add() (Wei Yongjun)  [Orabug: 26813294]  
  - dtrace: modules provide called from rcu atomic section (Tomas Jedlicka)  [Orabug: 26680982]  
  - dtrace: Implement high precision walltimestamp (Tomas Jedlicka)  [Orabug: 25883559]  
  - virtio_net: clear MTU when out of range (Michael S. Tsirkin)  [Orabug: 26584452]  
  - virtio_net: enable big packets for large MTU values (Michael S. Tsirkin)  [Orabug: 26584452]  
  - virtio: allow drivers to validate features (Michael S. Tsirkin)  [Orabug: 26584452]  
  - virtio-net: Add initial MTU advice feature (Aaron Conole)  [Orabug: 26584452]  
  - virtio-net: correctly enable multiqueue (Jason Wang)  [Orabug: 26584452]  
  - virtio-net: enable multiqueue by default (Jason Wang)  [Orabug: 26584452]  
  - virtio_net: add gro capability (Eric Dumazet)  [Orabug: 26584452]  
  - dtrace: fix lquantize for 32-bit overflow on values (Eugene Loh)  [Orabug: 26268136]  
  - Bluetooth: Properly check L2CAP config option output buffer length (Ben Seri)  [Orabug: 26790014]  {CVE-2017-1000251} 
  - gue: fix remcsum when GRO on and CHECKSUM_PARTIAL boundary is outer UDP (K. Den)  [Orabug: 25879842]  
  - vxlan: fix remcsum when GRO on and CHECKSUM_PARTIAL boundary is outer UDP (K. Den)  [Orabug: 25879842]  
  - fou: Do WARN_ON_ONCE in gue_gro_receive for bad proto callbacks (Tom Herbert)  [Orabug: 25879842]  
  - vxlan: GRO support at tunnel layer (Tom Herbert)  [Orabug: 25879842]  
  - gro: Fix remcsum offload to deal with frags in GRO (Tom Herbert)  [Orabug: 25879842]  
  - NFSv4.1: Don't deadlock the state manager on the SEQUENCE status flags (Trond Myklebust)   
  - NFSv4.1: Defer bumping the slot sequence number until we free the slot (Trond Myklebust)   
  - NFSv4: Leases are renewed in sequence_done when we have sessions (Trond Myklebust)   
  - NFSv4.1: nfs41_sequence_done should handle sequence flag errors (Trond Myklebust)   
  - Revert "RDMA CM: Add reason code for IB_CM_REJ_CONSUMER_DEFINED" (Wei Lin Guay)  [Orabug: 26124147]  
  - Revert "RDS: base connection dependency needed for rolling downgrade from version 4.1 to 3.1"" (Wei Lin Guay)  [Orabug: 26124147]  
  - Revert "RDS: Ensure non-zero SL uses correct path before lane 0 connection is dropped" (Wei Lin Guay)  [Orabug: 26124147]  
  - Revert "rds: make sure base connection is up on both sides" (Wei Lin Guay)  [Orabug: 26124147]  
  - net/rds: remove the RDS specific path record caching (Wei Lin Guay)  [Orabug: 26124147]  
  - fs: __generic_file_splice_read retry lookup on AOP_TRUNCATED_PAGE (Abhi Das)  [Orabug: 26797298]  
  - Remove dma_unmap_single_attrs call. (Jack Vogel)  [Orabug: 26713916]  
  - dtrace: cyclics taking lock in atomic context (Tomas Jedlicka)  [Orabug: 26782572]  
  - dtrace: should not sleep in idr code paths (Tomas Jedlicka)  [Orabug: 26680802]  
  - dtrace: Removal of XCalls from dtrace_sync() (Tomas Jedlicka)  [Orabug: 26671843]  
  - dtrace: implement tracemem optional third arg (dyn size) (Eugene Loh)  [Orabug: 26223475]  
  - dtrace: implement llquantize log/linear aggregation (Eugene Loh)  [Orabug: 26675659]  
  - dtrace: IO provider unused variables when DTrace is disabled (Nicolas Droux)  [Orabug: 26570995]  
  - dtrace: failing to allocate more ECB space can cause a crash (Kris Van Hees)  [Orabug: 26503342]  
  - uek-rpm: Add CPU Time Jitter Based Non-Physical True RNG support (Somasundaram Krishnasamy)  [Orabug: 26330509]  
  - crypto: jitterentropy - drop duplicate header module.h (Geliang Tang)  [Orabug: 26330509]  
  - crypto: jitterentropy - use ktime_get_ns as fallback (Stephan Mueller)  [Orabug: 26330509]  
  - crypto: jitterentropy - always select CRYPTO_RNG (Arnd Bergmann)  [Orabug: 26330509]  
  - crypto: jitterentropy - remove unnecessary information from a comment (Alexander Kuleshov)  [Orabug: 26330509]  
  - crypto: jitterentropy - use safe format string parameters (Kees Cook)  [Orabug: 26330509]  
  - crypto: jitterentropy - Delete unnecessary checks before the function call "kzfree" (Markus Elfring)  [Orabug: 26330509]  
  - crypto: jitterentropy - avoid compiler warnings (Stephan Mueller)  [Orabug: 26330509]  
  - crypto: drbg - use pragmas for disabling optimization (Stephan Mueller)  [Orabug: 26330509]  
  - crypto: jitterentropy - remove timekeeping_valid_for_hres (Stephan Mueller)  [Orabug: 26330509]  
  - crypto: jitterentropy - add jitterentropy RNG (Stephan Mueller)  [Orabug: 26330509]  
  - crypto: rng - Add multiple algorithm registration interface (Herbert Xu)  [Orabug: 26330509]  
  - crypto: rng - Add crypto_rng_set_entropy (Herbert Xu)  [Orabug: 26330509]  
  - crypto: rng - Convert low-level crypto_rng to new style (Herbert Xu)  [Orabug: 26330509]  
  - crypto: rng - Mark crypto_rng_reset seed as const (Herbert Xu)  [Orabug: 26330509]  
  - crypto: rng - Introduce crypto_rng_generate (Herbert Xu)  [Orabug: 26330509]  
  - crypto: rng - Convert crypto_rng to new style crypto_type (Herbert Xu)  [Orabug: 26330509]  
  - mm: Tighten x86 /dev/mem with zeroing reads (Kees Cook)  [Orabug: 25917914]  {CVE-2017-7889} 
  - [media] saa7164: fix double fetch PCIe access condition (Steven Toth)  [Orabug: 26093949]  {CVE-2017-8831} 
  - Revert "net/rds: Revert "RDS: add reconnect retry scheme for stalled connections"" (Wei Lin Guay)  [Orabug: 26497333]  
  - Revert "net/rds: prioritize the base connection establishment" (Wei Lin Guay)  [Orabug: 26497333]  
  - Revert "net/rds: determine active/passive connection with IP addresses" (Wei Lin Guay)  [Orabug: 26497333]  
  - Revert "net/rds: use different workqueue for base_conn" (Wei Lin Guay)  [Orabug: 26497333]  
  - blk-mq: add missing blk_mq_put_ctx (Ankur Arora)  [Orabug: 26339553]  
  - blk-mq: avoid re-initialize request which is failed in direct dispatch (Shaohua Li)  [Orabug: 26339553]  
  - bnxt_en: Add bnxt_get_num_stats() to centrally get the number of ethtool stats. (Michael Chan)  [Orabug: 26726982]  
  - bnxt_en: Implement ndo_bridge_{get|set}link methods. (Michael Chan)  [Orabug: 26726982]  
  - bnxt_en: Retrieve the hardware bridge mode from the firmware. (Michael Chan)  [Orabug: 26726982]  
  - bnxt_en: Update firmware interface spec to 1.8.0. (Michael Chan)  [Orabug: 26726982]  
  - x86/mm: Fix flush_tlb_page() on Xen (Andy Lutomirski)   
  - xen-netback: correctly schedule rate-limited queues (Wei Liu)   
  - xen/blkback: don't use xen_blkif_get() in xen-blkback kthread (Juergen Gross)   
  - xen/blkback: don't free be structure too early (Juergen Gross)   
  - xen: make xen_flush_tlb_all() static (Juergen Gross)   
  - block: xen-blkback: add null check to avoid null pointer dereference (Gustavo A. R. Silva)   
  - xen: adjust early dom0 p2m handling to xen hypervisor behavior (Juergen Gross)   
  - xen/x86: Do not call xen_init_time_ops() until shared_info is initialized (Boris Ostrovsky)   
  - xen: Implement EFI reset_system callback (Julien Grall)   
  - xen: Export xen_reboot (Julien Grall)   
  - xen/pvh: Do not fill kernel's e820 map in init_pvh_bootparams() (Boris Ostrovsky)   
  - xen/scsifront: use offset_in_page() macro (Geliang Tang)   
  - xen,kdump: handle pv domain in paddr_vmcoreinfo_note() (Juergen Gross)   
  - Input: xen-kbdfront - add module parameter for setting resolution (Juergen Gross)   
  - blkfront: add uevent for size change (Marc Olson)   
  - x86/xen/time: Set ->min_delta_ticks and ->max_delta_ticks (Nicolai Stange)   
  - xen, fbfront: add support for specifying size via xenstore (Juergen Gross)   
  - xen: Create KABI-compatible version of struct xenbus_watch (Boris Ostrovsky)   
  - xen, fbfront: fix connecting to backend (Juergen Gross)   
  - xenbus: remove transaction holder from list before freeing (Jan Beulich)   
  - xen/acpi: upload PM state from init-domain to Xen (Ankur Arora)   
  - xen/acpi: Replace hard coded "ACPI0007" (Ankur Arora)   
  - xen/privcmd: add IOCTL_PRIVCMD_RESTRICT (Paul Durrant)   
  - xen/privcmd: Add IOCTL_PRIVCMD_DM_OP (Paul Durrant)   
  - tpm xen: drop unneeded chip variable (Julia Lawall)   
  - swiotlb-xen: implement xen_swiotlb_get_sgtable callback (Andrii Anisov)   
  - swiotlb-xen: implement xen_swiotlb_dma_mmap callback (Stefano Stabellini)   
  - xen/privcmd: return -ENOTTY for unimplemented IOCTLs (Paul Durrant)   
  - xen: optimize xenbus driver for multiple concurrent xenstore accesses (Juergen Gross)   
  - xen: modify xenstore watch event interface (Juergen Gross)   
  - xen: clean up xenbus internal headers (Juergen Gross)   
  - xenbus: Neaten xenbus_va_dev_error (Joe Perches)   
  - xen/pvh: Use Xen's emergency_restart op for PVH guests (Boris Ostrovsky)   
  - xen/pvh: Enable CPU hotplug (Boris Ostrovsky)   
  - xen/pvh: PVH guests always have PV devices (Boris Ostrovsky)   
  - xen/pvh: Initialize grant table for PVH guests (Boris Ostrovsky)   
  - xen/pvh: Make sure we don't use ACPI_IRQ_MODEL_PIC for SCI (Boris Ostrovsky)   
  - xen/pvh: Bootstrap PVH guest (Boris Ostrovsky)   
  - xen/pvh: Import PVH-related Xen public interfaces (Boris Ostrovsky)   
  - xen/x86: Remove PVH support (Boris Ostrovsky)   
  - xen/manage: correct return value check on xenbus_scanf() (Jan Beulich)   
  - xen/netback: set default upper limit of tx/rx queues to 8 (Juergen Gross)   
  - xen/netfront: set default upper limit of tx/rx queues to 8 (Juergen Gross)   
  - rds: reduce memory footprint for RDS when transport is RDMA (Ka-Cheong Poon)  [Orabug: 26412003]  
  - RDS: IB: Destroy rdma_cm_id when unloading module (Avinash Repaka)  [Orabug: 26089296]  
  - RDS: IB: Destroy aux_wq if rds_ib_init() fails (Avinash Repaka)  [Orabug: 26732887]  
  - fuse: Dont call set_page_dirty_lock() for ITER_BVEC pages for async_dio (Ashish Samant)  [Orabug: 26752442]  
  - rds: Reintroduce statistics counting (Håkon Bugge)  [Orabug: 26717115]  
  - rcu: sysctl: Panic on RCU Stall (Daniel Bristot de Oliveira)  [Orabug: 26338027]  
  - sched: check user input value of sysctl_sched_time_avg (Ethan Zhao)  [Orabug: 26371482]  
  - genirq: Revert sparse irq locking around __cpu_up() and move it to x86 for now (Thomas Gleixner)  [Orabug: 25671838]  
  - dtrace: Update UEK RPM specs (Tomas Jedlicka)  [Orabug: 26585689]  
  - uek-rpm: Enable generic driver for Hyper-V VMBus (Somasundaram Krishnasamy)  [Orabug: 26668113]  
  - uio-hv-generic: store physical addresses instead of virtual (Arnd Bergmann)  [Orabug: 26668113]  
  - uio-hv-generic: new userspace i/o driver for VMBus (Stephen Hemminger)  [Orabug: 26668113]  
  - asm-generic: implement virt_xxx memory barriers (Michael S. Tsirkin)  [Orabug: 26668113]  
  - x86: define __smp_xxx (Michael S. Tsirkin)  [Orabug: 26668113]  
  - asm-generic: add __smp_xxx wrappers (Michael S. Tsirkin)  [Orabug: 26668113]  
  - x86: reuse asm-generic/barrier.h (Michael S. Tsirkin)  [Orabug: 26668113]  
  - uek-rpm: Fix package dependencies for kernel-ueknano (Somasundaram Krishnasamy)  [Orabug: 26639379]  
  - xsigo: PCA 2.3.1 Compute Node panics in xve_create_arp+430 (Pradeep Gopanapalli)  [Orabug: 26474000]  
  - dtrace: work around libdtrace-ctf bug (Nick Alcock)  [Orabug: 26583958]  
  - dtrace: dtrace.ko won't build when DT_DISABLE_CTF is set (Tomas Jedlicka)  [Orabug: 26587631]  
  - dtrace: Integrate DTrace Modules into kernel proper (Tomas Jedlicka)  [Orabug: 26585689]  
  - packet: fix tp_reserve race in packet_set_ring (Willem de Bruijn)  [Orabug: 26681154]  {CVE-2017-1000111} 
  - scsi: fnic: changing queue command to return result DID_IMM_RETRY when rport is init (Satish Kharat)  [Orabug: 26670341]  
  - usbip_recv(): switch to sock_recvmsg() (Al Viro)  [Orabug: 26668125]  
  - [net] drop 'size' argument of sock_recvmsg() (Al Viro)  [Orabug: 26668125]  
  - usbip: don't call stub_device_reset() during stub_disconnect() (Alexander Popov)  [Orabug: 26668125]  
  - usbip: vudc: Make usbip_common vudc-aware (Igor Kotrasinski)  [Orabug: 26668125]  
  - usbip: event handler as one thread (Nobuo Iwata)  [Orabug: 26668125]  
  - usb: usbip: Fix possible deadlocks reported by lockdep (Andrew Goodbody)  [Orabug: 26668125]  
  - uek-rpm: Enable USB/IP support (Add usbip-core driver). (Somasundaram Krishnasamy)  [Orabug: 26668125]  
  - x86/nmi: Save regs in crash dump on external NMI (Hidehiro Kawai)  [Orabug: 25679037]  
  - aio: mark AIO pseudo-fs noexec (Jann Horn)  [Orabug: 26540416]  {CVE-2016-10044} 
  - vfs: Commit to never having exectuables on proc and sysfs. (Eric W. Biederman)  [Orabug: 26540416]  {CVE-2016-10044} 
  - vfs, writeback: replace FS_CGROUP_WRITEBACK with SB_I_CGROUPWB (Tejun Heo)  [Orabug: 26540416]  {CVE-2016-10044} 
  - crypto: ccp - Release locks before returning (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - return NULL instead of 0 (pjambhlekar)  [Orabug: 26644685]  
  - crypto: ccp - Add debugfs entries for CCP information (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Use IPAD/OPAD constant (Corentin LABBE)  [Orabug: 26644685]  
  - crypto: hmac - add hmac IPAD/OPAD constant (Corentin LABBE)  [Orabug: 26644685]  
  - crypto: ccp - Add a module author (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Change ISR handler method for a v5 CCP (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Change ISR handler method for a v3 CCP (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Disable interrupts early on unload (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Use only the relevant interrupt bits (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Rearrange structure members to minimize size (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Remove redundant cpu-to-le32 macros (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Enable 3DES function on v5 CCPs (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Add SHA-2 384- and 512-bit support (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Make some CCP DMA channels private (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Assign DMA commands to the channel's CCP (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Simplify some buffer management routines (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Update the command queue on errors (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Change mode for detailed CCP init messages (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Set the AES size field for all modes (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Fix double add when creating new DMA command (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Fix DMA operations when IOMMU is enabled (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Fix handling of RSA exponent on a v5 device (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - fix typo "CPP" (Paul Bolle)  [Orabug: 26644685]  
  - crypto: ccp - Clean up the LSB slot allocation code (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - remove unneeded code (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - change bitfield type to unsigned ints (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Fix non static symbol warning (Wei Yongjun)  [Orabug: 26644685]  
  - crypto: ccp - change type of struct member lsb to signed (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Make syslog errors human-readable (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - clean up data structure (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Fix return value check in ccp_dmaengine_register() (Wei Yongjun)  [Orabug: 26644685]  
  - crypto: ccp - use kmem_cache_zalloc instead of kmem_cache_alloc/memset (Wei Yongjun)  [Orabug: 26644685]  
  - crypto: ccp - add missing release in ccp_dmaengine_register (Quentin Lambert)  [Orabug: 26644685]  
  - crypto: ccp - Fix non static symbol warning (Wei Yongjun)  [Orabug: 26644685]  
  - crypto: ccp - Enable use of the additional CCP (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Enable DMA service on a v5 CCP (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Add support for the RNG in a version 5 CCP (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Let a v5 CCP provide the same function as v3 (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Refactor code to enable checks for queue space. (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Refactor code supporting the CCP's RNG (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Refactor the storage block allocation code (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Refactoring: symbol cleanup (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Shorten the fields of the action structure (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Abstract PCI info for the CCP (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Fix non-conforming comment style (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Use skcipher for fallback (Herbert Xu)  [Orabug: 26644685]  
  - crypto: skcipher - Add helper to zero stack request (Herbert Xu)  [Orabug: 26644685]  
  - crypto: skcipher - Add top-level skcipher interface (Herbert Xu)  [Orabug: 26644685]  
  - crypto: ccp - constify ccp_actions structure (Julia Lawall)  [Orabug: 26644685]  
  - crypto: ccp - Ensure all dependencies are specified (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Register the CCP as a DMA resource (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Fix RT breaking #include <linux/rwlock_types.h> (Mike Galbraith)  [Orabug: 26644685]  
  - crypto: ccp - fix lock acquisition code (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Add abstraction for device-specific calls (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - CCP versioning support (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Support for multiple CCPs (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - Remove check for x86 family and model (Gary R Hook)  [Orabug: 26644685]  
  - crypto: ccp - use to_pci_dev and to_platform_device (Geliang Tang)  [Orabug: 26644685]  
  - crypto: ccp - Use precalculated hash from headers (LABBE Corentin)  [Orabug: 26644685]  
  - crypto: hash - add zero length message hash for shax and md5 (LABBE Corentin)  [Orabug: 26644685]  
  - crypto: ccp - Use module name in driver structures (Tom Lendacky)  [Orabug: 26644685]  
  - crypto: ccp - Change references to accelerator to offload (Tom Lendacky)  [Orabug: 26644685]  
  - crypto: ccp - Replace BUG_ON with WARN_ON and a return code (Tom Lendacky)  [Orabug: 26644685]  
  - crypto: ccp - Provide support to autoload CCP driver (Tom Lendacky)  [Orabug: 26644685]  
  - crypto: ccp - Protect against poorly marked end of sg list (Tom Lendacky)  [Orabug: 26644685]  
  - scatterlist: introduce sg_nents_for_len (Tom Lendacky)  [Orabug: 26644685]  
  - crypto: ccp - Remove unused structure field (Tom Lendacky)  [Orabug: 26644685]  
  - crypto: ccp - Remove manual check and set of dma_mask pointer (Tom Lendacky)  [Orabug: 26644685]  
  - uek-rpm: Enable CCP device driver and interface support (Somasundaram Krishnasamy)  [Orabug: 26644685]  
  - mqueue: fix a use-after-free in sys_mq_notify() (Cong Wang)  [Orabug: 26584960]  {CVE-2017-11176} 
  - x86/acpi: Prevent out of bound access caused by broken ACPI tables (Seunghun Han)  [Orabug: 26540612]  {CVE-2017-11473} 
  - Btrfs: add free space tree mount option (Omar Sandoval)  [Orabug: 26274676]  
  - Btrfs: wire up the free space tree to the extent tree (Omar Sandoval)  [Orabug: 26274676]  
  - Btrfs: add free space tree sanity tests (Omar Sandoval)  [Orabug: 26274676]  
  - Btrfs: implement the free space B-tree (Omar Sandoval)  [Orabug: 26274676]  
  - Btrfs: introduce the free space B-tree on-disk format (Omar Sandoval)  [Orabug: 26274676]  
  - Btrfs: refactor caching_thread() (Omar Sandoval)  [Orabug: 26274676]  
  - Btrfs: add helpers for read-only compat bits (Omar Sandoval)  [Orabug: 26274676]  
  - Btrfs: add extent buffer bitmap sanity tests (Omar Sandoval)  [Orabug: 26274676]  
  - Btrfs: add extent buffer bitmap operations (Omar Sandoval)  [Orabug: 26274676]  
  - x86/irq: Retrieve irq data after locking irq_desc (Thomas Gleixner)  [Orabug: 25671838]  
  - x86/irq: Use proper locking in check_irq_vectors_for_cpu_disable() (Thomas Gleixner)  [Orabug: 25671838]  
  - x86/irq: Plug irq vector hotplug race (Thomas Gleixner)  [Orabug: 25671838]  
  - hotplug: Prevent alloc/free of irq descriptors during cpu up/down (Thomas Gleixner)  [Orabug: 25671838]  
  - sysfs: replace WARN() with pr_debug when sysfs_remove_group() failed (Ethan Zhao)  [Orabug: 26374902]  
  - KVM: nVMX: fix nested EPT detection (Ladi Prosek)   
  - KVM: nVMX: introduce nested_vmx_load_cr3 and call it on vmentry (Ladi Prosek)   
  - KVM: nVMX: propagate errors from prepare_vmcs02 (Ladi Prosek)   
  - KVM: nVMX: fix CR3 load if L2 uses PAE paging and EPT (Ladi Prosek)   
  - dtrace: Fix spec file for 0.6.1-3 (Tomas Jedlicka)   
  - dtrace: Make dynamic variable cleanup self-throtling (Tomas Jedlicka)  [Orabug: 26385177]  
  - dtrace: Restore deadman original timing values (Tomas Jedlicka)  [Orabug: 26385159]  
  - dtrace: DTrace state deadman must use dtrace_sync() (Tomas Jedlicka)  [Orabug: 26385102]  
  - dtrace: FBT module support and SPARCs return probes (Tomas Jedlicka)  [Orabug: 26384179] [Orabug: 26384765]  
  - dtrace: fix spec file for 0.6.1-2 (Kris Van Hees)   
  - dtrace: FBT entry probes will now use int3 (Kris Van Hees)  [Orabug: 26190412] [Orabug: 26174895]  
  - dtrace: support x86 CPUs with SMAP (Nick Alcock)  [Orabug: 26166784]  
  - dtrace: fix spec file for 0.6.1-1 (Kris Van Hees)   
  - dtrace: ensure ustackdepth returns correct value (Kris Van Hees)  [Orabug: 25949692]  
  - dtrace: FBT return probes on x86_64 run with in_irq() true (Kris Van Hees)  [Orabug: 26089286]  
  - dtrace: different probe trigger instruction for entry vs return (Kris Van Hees)  [Orabug: 25949048]  
  - dtrace: support passing offset as arg0 to FBT return probes (Kris Van Hees)  [Orabug: 25949086]  
  - dtrace: improve probe execution debugging (Kris Van Hees)   
  - dtrace: correct mutex_* subroutines (Kris Van Hees)  [Orabug: 26044447]  
  - dtrace: canload() for input of *_ntop(), *_nto*() (Nick Alcock)   
  - dtrace: implement link_ntop() DTrace subroutine logic (Girish Moodalbail)  [Orabug: 25931479]  
  - dtrace: update spec file for 0.6.0-4 (Kris Van Hees)   
  - dtrace: enforce inlining of dtrace_dif_variable (Kris Van Hees)  [Orabug: 25872472]  
  - dtrace: NEWS and spec file for 0.6.0-3 (Kris Van Hees)   
  - DTrace walltime lock-free implementation (Tomas Jedlicka)  [Orabug: 25715256]  
  - dtrace: incorrect aframes value and wrong logic messes up caller and stack (Kris Van Hees)  [Orabug: 25727046]  
  - dtrace: ensure we pass a limit to dtrace_stacktrace for stackdepth (Kris Van Hees)  [Orabug: 25559321]  
  - dtrace: get rid of dtrace_gethrtime() (Kris Van Hees)   
  - dtrace: update NEWS and spec file for 0.6.0-2 (Kris Van Hees)   
  - dtrace: comtinuing the FBT implementation and fixes (Kris Van Hees)  [Orabug: 21220305] [Orabug: 24829326]  
  - dtrace: handle modular IPv6 (Nick Alcock)  [Orabug: 25557554]  
  - dtrace: introduce and use typedef in6_addr_t (Alan Maguire)  [Orabug: 25557554]  
  - dtrace: update NEWS and spec file (Kris Van Hees)   
  - dtrace: function boundary tracing (FBT) implementation (Kris Van Hees)  [Orabug: 21220305] [Orabug: 24829326]  
  - dtrace: SDT cleanup and bring in line with kernel (Kris Van Hees)   
  - dtrace: fix preemption checks (Kris Van Hees)   
  - dtrace: when calling all modules do not forget kernel (Kris Van Hees)   
  - dtrace: remove cleanup_module support (Kris Van Hees)   
  - dtrace: is-enabled probes for SDT (Kris Van Hees)  [Orabug: 25143173]  
  - dtrace: 0.6.0 specfile and NEWS. (Nick Alcock)   
  - dtrace: test the new DTRACE_PROBE() n-argument macro (Nick Alcock)  [Orabug: 24678897]  
  - dtrace: add a test probe with an empty translation or two (Nick Alcock)  [Orabug: 24661801]  
  - dtrace: parse sdpd_args to handle sdt_getargdesc() rather than hardwiring (Nick Alcock)  [Orabug: 24661801]  
  - Specfile adjustments for 0.5.4 release to autobuilders. (Nick Alcock)   
  - SPEC: dtrace-module specfile revamp. (Nick Alcock)   
  - dtrace: USDT SPARC parts (Nick Alcock)  [Orabug: 24455245]  
  - dtrace: split arch-dependent parts out of fasttrap (Nick Alcock)  [Orabug: 24455245]  
  - Release 0.5.3-2. (Nick Alcock)   
  - dtrace: version 0.5.3 (Kris Van Hees)   
  - dtrace: migrate pdata size assertion out of generic code (Nick Alcock)   
  - dtrace: ensure pdata and sdt_tab handling works on module reload (Kris Van Hees)  [Orabug: 23331667]  
  - dtrace: add the perf provider to SDT (Nick Alcock)  [Orabug: 23004534]  
  - dtrace: version 0.5.2 (Kris Van Hees)   
  - dtrace: apply stack bias to user stack walks on SPARC (Nick Alcock)  [Orabug: 22629102]  
  - dtrace: use current_user_stack_pointer() (Nick Alcock)  [Orabug: 22629102]  
  - dtrace: use copy_from_user() when walking userspace stacks (Nick Alcock)  [Orabug: 22629102]  
  - dtrace: do not overrun the start of the user stack (Nick Alcock)  [Orabug: 22629102]  
  - dtrace: fix access to uregs[R_L7] (Nick Alcock)  [Orabug: 22602870]  
  - dtrace: correct probe disable behaviour for syscalls (Kris Van Hees)  [Orabug: 22352636]  
  - dtrace: fix typo in date field in %changelog (Kris Van Hees)   
  - dtrace: Updated NEWS and spec files for 0.5.1-1 (Kris Van Hees)   
  - dtrace: avoid installonly-related kernel upgrade failure (Nick Alcock)  [Orabug: 21669543]  
  - dtrace: Support Linux-specific handling of envp / argv in psinfo (Kris Van Hees)  [Orabug: 21984854]  
  - dtrace: add missing dtrace_*canload() for copyout() and copyoutstr(). (Nick Alcock)   
  - dtrace: ensure dt_perf does not clash with dt_test (Kris Van Hees)  [Orabug: 21814949]  
  - dtrace: enable building on SPARC64 architecture. (Kris Van Hees)   
  - dtrace: provide OL6 and OL7 spec file with new features (Kris Van Hees)   
  - dtrace: update NEWS for new 0.5.0 version (Kris Van Hees)   
  - Fix spelling of %endif in specfile. (Nick Alcock)   
  - dtrace: only sparc64 uses sdt_tab in pdata (Kris Van Hees)   
  - dtrace: NEWS and spec file for 0.5.0 (Kris Van Hees)   
  - dtrace: apply sdt_instr_t change to asm_instr_t (Kris Van Hees)   
  - dtrace: fold NOPF into NOFAULT handling (Kris Van Hees)   
  - dtrace: improve debugging output (Kris Van Hees)   
  - dtrace: kernel provides SDT trampoline area on SPARC (Kris Van Hees)  [Orabug: 21220344]  
  - dtrace: record current IP as frame 0 in ustack (Kris Van Hees)   
  - dtrace: validate argument pointer to d_path() (Kris Van Hees)  [Orabug: 21304207]  
  - dtrace: update NEWS and specfile for 0.4.5 (Kris Van Hees)   
  - dtrace: support USDT for 32-bit applications on 64-bit hosts (Kris Van Hees)  [Orabug: 21219315]  
  - dtrace: use the initial user namespace in suitable {from,make}_kuid() calls (Nick Alcock)   
  - dtrace: use the current user namespace for DIF_VAR_[UG]ID lookups (Nick Alcock)   
  - dtrace: support sparc64 on appropriate kernels. (Nick Alcock)   
  - Revise dependencies to get out of the shadow of dtrace-modules-headers. (Nick Alcock)  [Orabug: 20508087]  
  - dtrace: no longer expose kuid_t in the userspace dtrace API (Nick Alcock)   
  - dtrace: percpu: move from __get_cpu_var() to this_cpu_ptr() (Nick Alcock)   
  - dtrace: fix dtrace_helptrace_buffer memory leak (Kris Van Hees)  [Orabug: 20514336]  
  - dtrace: support building on UEK4 (Kris Van Hees)  [Orabug: 20456825]  
  - dtrace: add support for DTrace on sparc64 (Kris Van Hees)  [Orabug: 19005048]  
  - dtrace: restructuring to support DTrace on multiple architectures (Kris Van Hees)  [Orabug: 20262965]  
  - dtrace: add .gitignore file (Kris Van Hees)  [Orabug: 20266608]  
  - dtrace: Updated NEWS and specfile (Kris Van Hees)   
  - dtrace: ensure one can try to get user pages without locking or faulting (Kris Van Hees)  [Orabug: 18653713]  
  - dtrace: Improve dtrace_getufpstack() (locks, stack detection, faults) (Nick Alcock)  [Orabug: 18412802]  
  - dtrace: Updated NEWS and specfile (Kris Van Hees)   
  - dtrace: update NEWS and spec file for 0.4.3-2 (Kris Van Hees)   
  - Drop CPU_DTRACE_NOFAULT manipulation in progenyof(). (Nick Alcock)  [Orabug: 18412802]  
  - Drop CPU_DTRACE_NOFAULT manipulation around ustack calls. (Nick Alcock)  [Orabug: 18412802]  
  - Pass down the tgid to userspace in u{stack,sym,mod,addr}(). (Nick Alcock)  [Orabug: 18412802]  
  - Fix the pid and ppid variables in multithreaded processes. (Nick Alcock)  [Orabug: 18412802]  
  - dtrace: NEWS and specfile update for 0.4.3 (Kris Van Hees)   
  - dtrace: add support for profile-* probes (Kris Van Hees)  [Orabug: 18323513]  
  - Updated specfile for 0.4.2-3. (Nick Alcock)   
  - Have the new dtrace-modules-provider-headers obsolete the old. (Nick Alcock)  [Orabug: 18061595]  
  - Remove kernel version from name of dtrace-modules-provider-headers package. (Nick Alcock)  [Orabug: 18061595]  
  - dtrace: updated spec file and NEWS (Kris Van Hees)   
  - dtrace: Fix RPM dependencies. (Kris Van Hees)  [Orabug: 17804881]  
  - dtrace: vtimestamp implementation (Kris Van Hees)  [Orabug: 17741477]  
  - dtrace: implement SDT in kernel modules (Kris Van Hees)  [Orabug: 17851716]  
  - dtrace: fix conditionals for changelog composition (Kris Van Hees)   
  - dtrace: make the release tag dependent on the kernel version (Kris Van Hees)   
  - dtrace: fix changelog for 0.4.0 series (Kris Van Hees)   
  - dtrace: support auto-building of dtrace-module for UEK kernels (Kris Van Hees)   
  - dtrace: prepare spec file for errata release (3.87.13-16.2.1/0.4.1-3) (Kris Van Hees)   
  - dtrace: Updated NEWS and spec file (Kris Van Hees)   
  - dtrace: provide a corrected implementation of the 'errno' D variable (Kris Van Hees)  [Orabug: 17704568]  
  - dtrace: Updated specfile and NEWS (Kris Van Hees)   
  - dtrace: fix lock ordering issues, mutex_owned(), and mutex debugging (Kris Van Hees)  [Orabug: 17624236]  
  - dtrace: ensure userspace stack memory access cannot page fault (Kris Van Hees)  [Orabug: 17591351]  
  - dtrace: ensure speculation buffer cleaning does not race with buffer freeing (Kris Van Hees)  [Orabug: 17553446]  
  - dtrace: reject enabling is referencing module fails and do not count it (Kris Van Hees)   
  - dtrace: ensure state is free'd after use (memleak fix) (Kris Van Hees)   
  - dtrace: align module code with new cyclics API (Kris Van Hees)  [Orabug: 17553446]  
  - dtrace: update getufpstack implementation to be safer (Kris Van Hees)  [Orabug: 17591351]  
  - dtrace: armour ustack() against kernel threads, !task->mm, and corrupt usersp. (Nick Alcock)  [Orabug: 17591351]  
  - dtrace: Ensure that provider names are unique in the context of a PID (Kris Van Hees)  [Orabug: 17476663]  
  - dtrace: ensure &tp->ftt_mtp is set to 0s for is-enabled probes also (Kris Van Hees)   
  - dtrace: Update NEWS (Kris Van Hees)   
  - dtrace: Various memory allocation fixes (leaks, footprint reduction, ...) (Kris Van Hees)  [Orabug: 17488207]  
  - dtrace: UEK3 build -16 (Kris Van Hees)   
  - dtrace: prevent Oops caused by preemption issues with probes (Kris Van Hees)  [Orabug: 17403196]  
  - dtrace: fix for psinfo allocation during execve (Kris Van Hees)  [Orabug: 17407069]  
  - dtrace: General cleanup of debug info and fix syscall probe module name. (Kris Van Hees)   
  - dtrace: fixes for the module build (Kris Van Hees)   
  - dtrace: remove debugging code (Kris Van Hees)   
  - dtrace: Ensure that USDT probes are carried over correctly across fork(). (Kris Van Hees)  [Orabug: 17346878]  
  - dtrace: Fix frame offsets for direct called probes (ERROR and syscalls). (Kris Van Hees)  [Orabug: 17368166]  
  - dtrace: fix retrieval of arg5 through arg9 (Kris Van Hees)  [Orabug: 17368166]  
  - Bug fix for logic to determine the (inode, offset) pair for uprobes. (Kris Van Hees)   
  - Ensure memory allocation results are checked throughout the code. (Kris Van Hees)   
  - Bug fix for fasttrap module unloading. (Kris Van Hees)   
  - Remove pre-alpha features for release. (Kris Van Hees)   
  - Bug fix for module unloading. (Kris Van Hees)   
  - Fix fasttrap ioctls and headers_check. (Nick Alcock)   
  - Re-enable DTrace ioctl()-size debugging. (Nick Alcock)   
  - Add RPM changelog. (Nick Alcock)   
  - Add a warning to be displayed when tracepoint enabling fails.  Update NEWS. (Kris Van Hees)   
  - Fix provider header requirements. (Nick Alcock)   
  - SPEC: Changes for UEK merge. (Nick Alcock)   
  - Boost ustackframes_default. (Nick Alcock)   
  - Make old_rsp available to kernel modules. (Kris Van Hees)   
  - Remove unnecessary 32-bit code. (Kris Van Hees)   
  - Clean up ioctl debugging output, and remove dtrace_ioctl_sizes(). (Kris Van Hees)   
  - Add debugging for enablings. (Kris Van Hees)   
  - Ensure that the fasttrap device file can be opened. (Kris Van Hees)   
  - Fix format string errors in buffer storage debugging messages. (Nick Alcock)   
  - Drop stack debugging messages. (Nick Alcock)   
  - SPEC: Fix the name of the kernel development package in BuildRequires. (Nick Alcock)   
  - SPEC: Boost the associated kernel version to 3.8.12. (Nick Alcock)   
  - Ensure that arg6 through arg9 get retrieved correctly for USDT probes. (Kris Van Hees)   
  - Finish the implementation of is-enabled USDT probes. (Kris Van Hees)   
  - Fixes for tracepoint cleanup. (Kris Van Hees)   
  - Fixes for locking issues and cleanup workqueue handling. (Kris Van Hees)   
  - Update syscall tracing in view of Linux 3.8 changes. (Kris Van Hees)   
  - USDT implementation (phase 2). (Kris Van Hees)   
  - Fix to exclude stack addresses from pcstack. (Kris Van Hees)   
  - Revamp and split up DTrace headers.  Add ioctl() debugging machinery. (Nick Alcock)   
  - OS/arch specific ustack implementation. (Kris Van Hees)   
  - Ensure PID is passed as first element for ustack. (Kris Van Hees)   
  - Revert "stack() / jstack(): Send PID to userspace." (Kris Van Hees)   
  - stack() / jstack(): Send PID to userspace. (Nick Alcock)   
  - Adding more compile time debugging for development. (Kris Van Hees)   
  - USDT implementation (Phase 1). (Kris Van Hees)   
  - Add basic development debugging framework. (Kris Van Hees)   
  - Update copyright statements. (Kris Van Hees)   
  - Disable providers that do not work. (Kris Van Hees)   
  - Differentiate between multi-providers and meta-providers. (Kris Van Hees)   
  - Adding missing build specs for dt_perf. (Kris Van Hees)   
  - Remove unnecessary and inconsistemt use of argument name in prototypes. (Kris Van Hees)   
  - Clean up a file that is no longer used. (Kris Van Hees)   
  - Internal performance measurement support code. (Kris Van Hees)   
  - Miscellaneous 3.6 porting work. (Kris Van Hees)   
  - DTrace-independent CTF. (Nick Alcock)   
  - Type and grammar fix. (Kris Van Hees)   
  - Fix name of lwp-create and lwp-exit probes in SDT argument mappings. (Kris Van Hees)   
  - Add NEWS file. (Kris Van Hees)   
  - SPEC: Rename the DTrace kernel to kernel-uek-dtrace-. (Nick Alcock)   
  - Fix depmod invocation on RPM %post-installation. (Nick Alcock)   
  - Add a specfile. (Nick Alcock)   
  - Additional action support (and bug fixes). (Kris Van Hees)   
  - Change the DTrace startup handling (at boot time) for SDT. (Kris Van Hees)   
  - Cleanup (and adding) of SDT probe points. (Kris Van Hees)   
  - Remove remnant of internal, for-my-use-only test code. (Kris Van Hees)   
  - DIF_SUBR_RW_READ_HELD's parameter should be an rwlock_t. (Nick Alcock)   
  - Force dtrace_ctf.ko to be loaded whenever dtrace.ko is. (Nick Alcock)   
  - Missing file. (Kris Van Hees)   
  - - sched-tick SDT probe. - FBT probe point discovery and probe creation. - Moving code around for the kernel pseudo-module handling since it gets used   by both the SDT code and the FBT code. (Kris Van Hees)   
  - Add argument description info for SDT probes. (Kris Van Hees)   
  - Implement refcount handling in DTrace modules to ensure that they cannot be unloaded while probes are enabled. (Kris Van Hees)   
  - New DTrace option DTRACEOPT_QUIETRESIZE, and accordingly-boosted DTRACEOPT_MAX. (Nick Alcock)   
  - Changed from using mutex_is_locked() to a new mutex_owned(), in support of the Solaris MUTEX_HELD() macro.  The former was merely testing whether the mutex was locked, whereas the real test needed here is whether the mutex is held by the current thread. (Kris Van Hees)   
  - Make all allocations that are allowed to fail atomic, and surpress warnings about out-of-memory conditions, since they are not harmful.  Also, do not allow DTrace allocations to access the emergency pools. (Kris Van Hees)   
  - Fix signed division and modulo operations in DIF. Ensure that SDT probe points are patched with a NOP sequence at boot time. Remove debugging output during SDT registration. (Kris Van Hees)   
  - Forgot to commit the changes to the header file. (Kris Van Hees)   
  - The idr_empty() macro is no longer needed. (Kris Van Hees)   
  - Fix for incorrect handling of BUFSIZE = 0.  The handling of aggregations was flawed in that even without any ECBs with aggregation, the code logic was assuming there was at least one aggregation (the sentinel in the IDR).  The handling of the aggregations IDR in the DTrace state has been updated to use an explicit counter because the IDR functionality does not provide us with an API function to determine the amount of elements in the IDR. (Kris Van Hees)   
  - Initial values for min and max aggregate functions were incorrectly set to be UINT64 values rather than INT64 values, causing the initial minimum value to be -1, and the initial maximum value to be 0.  Corrected to be INT64 values. (Kris Van Hees)   
  - Ensure that the trap handler is regisstered only once. Register with first use, (Kris Van Hees)   
  - Ensure that the die notifier hook is installed whenever DTrace is enabled, since page fault and general protection fault handling depends on it, and that is needed for safe memory access support in DTrace. (Kris Van Hees)   
  - Support for page fault and general protection fault detection for DTrace, to ensure that DTrace memory access faults are non-fatal. (Kris Van Hees)   
  - SDT implementation (core kernel support for providing a list of static probe points for the kernel pseudo-module, dtrace SDT meta-provider support, ...). Also, new script (dtrace_sdt.sh) to extract locations of SDT probe points in the core kernel. (Kris Van Hees)   
  - Enable processing the SDT probe point info at boot time (before SMP is actually enabled), if DTrace SDT support has been enabled (built-in or as module).  For now, provide some verbose info on the probe points getting resolved. (Kris Van Hees)   
  - Fix resolving addresses of relocation records for SDT probe points.  The addresses were being calculated based on the wrong starting point (_stext whereas it ought to be _text), and the base was not taken into account. Fixed the writing of NOPs in the location of the probe point calls, since the existing case was causing kernel paging faults.  Made the add_nops() function in alternative.c non-static so it can be used in sdt_register. Use add_nops() to select the most appropriate NOP sequence for replacing the probe point call, and write the NOPs using text_poke(). (Kris Van Hees)   
  - Fixed the allocation of cyclics that was the cuase for some obscure crashes during the testsuite execution.  Problem was that cyclics were being allocated in chunks, with a new array being allocated as (prev-size + chink-size), and then the old entries being copied over.  However, because the hrtimer struct is embedded in the cyclic struct, this meant that hrtimer structs were being moved outside the hrtimer code. (Kris Van Hees)   
  - Handle the case where regs (during cyclic processing) is NULL.  This indicates a bug but with this code change we'll survive that case and simply not have meaningful PC and UPC values as argument to the probe, which is better than a full scale OOPS due to NULL pointer dereference. (Kris Van Hees)   
  - Removed dead code (was #if 0 ... #endif).  Cleaned up ;; -> ;. (Kris Van Hees)   
  - Implementation for tracing stub-based system calls.  Due to the need for specialized code handling (mainly passing in a pt_regs structure as one of the arguments), some syscalls are called through a stub in assembly code. We duplicate the stub cdode in dtrace_stubs_x86_64.S, but instead of calling the actual syscall implementation code call our own syscall-specific handler, which ensures that entry and return probes are called as enabled, and then call the underlying implementation directly for handling the syscall. (Kris Van Hees)   
  - Stacktrace dumping has been moved to the GPL-licensed dtrace_os.c because it depends on a symbol that is exported as GPL-only.  Functionality in dtrace_isa that requires stacktrace dumping can now use dtrace_stacktrace(). (Kris Van Hees)   
  - Fix porting issues from 2.6.32 to 2.6.39. Disable stub_* based syscalls (for now). (Kris Van Hees)   
  - Move cyclic.h into include/linux. (Nick Alcock)   
  - Finish GPL/CDDL splitting work. (Nick Alcock)   
  - Set MODULE_LICENSE to CDDL. (Nick Alcock)   
  - CDDL copyrights for everything needing it. (Nick Alcock)   
  - Initial commit of DTrace. (Nick Alcock)


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-111.el6uek]
changelog:
  - kvm: x86: reduce collisions in mmu_page_hash (David Matlack)  [Orabug: 26628797]  
  - IB/ipoib: For sendonly join free the multicast group on leave (Christoph Lameter)  [Orabug: 26324050]  
  - IB/ipoib: increase the max mcast backlog queue (Doug Ledford)  [Orabug: 26324050]  
  - IB/ipoib: Make sendonly multicast joins create the mcast group (Doug Ledford)  [Orabug: 26324050]  
  - IB/ipoib: Expire sendonly multicast joins (Christoph Lameter)  [Orabug: 26324050]  
  - IB/ipoib: Suppress warning for send only join failures (Jason Gunthorpe)  [Orabug: 26324050]  
  - IB/ipoib: Clean up send-only multicast joins (Doug Ledford)  [Orabug: 26324050]  
  - fs/exec.c: account for argv/envp pointers (Kees Cook)  [Orabug: 26365008]  {CVE-2017-1000365} {CVE-2017-1000365} 
  - sched/core: Use load_avg for selecting idlest group (Vincent Guittot)  [Orabug: 25862897]  
  - dentry name snapshots (Al Viro)  [Orabug: 26630800]  {CVE-2017-7533} 
  - NFSv4.1: Use seqid returned by EXCHANGE_ID after state migration (Chuck Lever)  [Orabug: 25802443]  
  - ipv6: fix out of bound writes in __ip6_append_data() (Eric Dumazet)  [Orabug: 26575181]  {CVE-2017-9242} 
  - mnt: Add a per mount namespace limit on the number of mounts (Eric W. Biederman)  [Orabug: 26575596]  {CVE-2016-6213} {CVE-2016-6213} 
  - l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() (Guillaume Nault)  [Orabug: 26575341]  {CVE-2016-10200} 
  - KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells)  [Orabug: 26575534]  {CVE-2016-9604} {CVE-2016-9604} 
  - sctp: do not inherit ipv6_{mc|ac|fl}_list from parent (Eric Dumazet)  [Orabug: 26107745]  {CVE-2017-9075} 
  - crypto: algif_hash - Fix result clobbering in recvmsg (Herbert Xu)  [Orabug: 25698521]  
  - crypto: algif_hash - Fix NULL hash crash with shash (Herbert Xu)  [Orabug: 25698521]  
  - crypto: algif_hash - Handle NULL hashes correctly (Herbert Xu)  [Orabug: 25698521]  
  - x86/irq: Protect smp_cleanup_move (Thomas Gleixner)  [Orabug: 25677661]  
  - i40e/i40evf: check for stopped admin queue (Mitch Williams)  [Orabug: 26654196]  
  - Btrfs: fix extent_same allowing destination offset beyond i_size (Filipe Manana)  [Orabug: 26441487]  
  - btrfs: fix clone / extent-same deadlocks (Mark Fasheh)  [Orabug: 26251039]  
  - btrfs: don't update mtime/ctime on deduped inodes (Mark Fasheh)  [Orabug: 26251039]  
  - btrfs: allow dedupe of same inode (Mark Fasheh)  [Orabug: 26251039]  
  - btrfs: fix deadlock with extent-same and readpage (Mark Fasheh)  [Orabug: 26251039]  
  - btrfs: pass unaligned length to btrfs_cmp_data() (Mark Fasheh)  [Orabug: 26251039]  
  - xen: fix bio vec merging (Roger Pau Monne)  [Orabug: 26564183]  {CVE-2017-12134} 
  - ovl: verify upper dentry in ovl_remove_and_whiteout() (Maxim Patlasov)  [Orabug: 26175588]  
  - ovl: use O_LARGEFILE in ovl_copy_up() (David Howells)  [Orabug: 26619890]  
  - xfs: toggle readonly state around xfs_log_mount_finish (Eric Sandeen)  [Orabug: 26630113]  
  - xfs: write unmount record for ro mounts (Eric Sandeen)  [Orabug: 26630113]  
  - xfs: fix eofblocks race with file extending async dio writes (Brian Foster)  [Orabug: 26588811]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-110.el6uek]
changelog:
  - NVMe: Allocate queues only for online cpus (Keith Busch)  [Orabug: 24675382]  
  - KEYS: fix dereferencing NULL payload with nonzero length (Eric Biggers)  [Orabug: 26591890]  
  - IB/mlx4: Fix possible vl/sl field mismatch in LRH header in QP1 packets (Jack Morgenstein)  [Orabug: 26198210]  
  - Revert "IB/mlx4: Suppress warning for not handled portmgmt event subtype" (Mukesh Kacker)  [Orabug: 26198210]  
  - scsi: megaraid_sas: handle dma_addr_t right on 32-bit (Arnd Bergmann)  [Orabug: 26608922]  
  - scsi: megaraid_sas: NVME fast path io support (Shivasharan S)  [Orabug: 26608922]  
  - scsi: megaraid_sas: NVME interface target prop added (Shivasharan S)  [Orabug: 26608922]  
  - scsi: megaraid_sas: NVME Interface detection and prop settings (Shivasharan S)  [Orabug: 26608922]  
  - scsi: megaraid_sas: Use synchronize_irq to wait for IRQs to complete (Shivasharan S)  [Orabug: 26608922]  
  - fs/fuse: fuse mount can cause panic with no memory numa node (Somasundaram Krishnasamy)  [Orabug: 26591421]  
  - Fix regression which breaks DFS mounting (Sachin Prabhu)  [Orabug: 26591404]  
  - ol7/spec: sync up linux-firmware version for ol74 (Ethan Zhao)  [Orabug: 26567308] [Orabug: 26567283]  
  - ol6/spec: sync up linux-firmware version for ol6 (Ethan Zhao)  [Orabug: 26586911] [Orabug: 26586927]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-109.el6uek]
changelog:
  - scsi: scsi_debug: Avoid PI being disabled when TPGS is enabled (Martin K. Petersen)  [Orabug: 25704090]  
  - config: enable QEDI config items for UEK (Brian Maly)  [Orabug: 26519978]  
  - qedi: add firmware related dependencies (Brian Maly)  [Orabug: 26519978]  
  - config: enable QED config items for UEK (Brian Maly)  [Orabug: 26519978]  
  - scsi: qedi: fix KAPI for UEK kernels (Brian Maly)  [Orabug: 26519978]  
  - nfsd: encoders mustn't use unitialized values in error cases (J. Bruce Fields)  [Orabug: 26376568]  {CVE-2017-8797} 
  - nfsd: fix undefined behavior in nfsd4_layout_verify (Ari Kauppi)  [Orabug: 26376568]  {CVE-2017-8797} 
  - ovl: fix workdir creation (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: listxattr: use strnlen() (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: copyattr after setting POSIX ACL (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: don't cache acl on overlay layer (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: use cached acl on underlying layer (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: remove posix_acl_default from workdir (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: handle umask and posix_acl_default correctly on creation (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: change inode_lock to mutex_lock (Shan Hai)  [Orabug: 26401569]  
  - ovl: proper cleanup of workdir (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: rename is_merge to is_lowest (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: cleanup unused var in rename2 (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: Switch to generic_getxattr (Andreas Gruenbacher)  [Orabug: 26401569]  
  - ovl: Switch to generic_removexattr (Andreas Gruenbacher)  [Orabug: 26401569]  
  - ovl: Get rid of ovl_xattr_noacl_handlers array (Andreas Gruenbacher)  [Orabug: 26401569]  
  - ovl: Fix OVL_XATTR_PREFIX (Andreas Gruenbacher)  [Orabug: 26401569]  
  - ovl: xattr filter fix (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: fix warnings caused by WRITE_ONCE (Shan Hai)  [Orabug: 26401569]  
  - ovl: simplify empty checking (Miklos Szeredi)  [Orabug: 26401569]  
  - qstr: constify instances in overlayfs (Al Viro)  [Orabug: 26401569]  
  - ovl: clear nlink on rmdir (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: append MAY_READ when diluting write checks (Vivek Goyal)  [Orabug: 26401569]  
  - ovl: dilute permission checks on lower only if not special file (Vivek Goyal)  [Orabug: 26401569]  
  - ovl: fix POSIX ACL setting (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: share inode for hard link (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: store real inode pointer in ->i_private (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: permission: return ECHILD instead of ENOENT (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: update atime on upper (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: convert inode_lock to mutex_lock (Shan Hai)  [Orabug: 26401569]  
  - ovl: fix sgid on directory (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: simplify permission checking (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: do not require mounter to have MAY_WRITE on lower (Vivek Goyal)  [Orabug: 26401569]  
  - ovl: do operations on underlying file system in mounter's context (Vivek Goyal)  [Orabug: 26401569]  
  - ovl: fix uid/gid when creating over whiteout (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: modify ovl_permission() to do checks on two inodes (Vivek Goyal)  [Orabug: 26401569]  
  - ovl: define ->get_acl() for overlay inodes (Vivek Goyal)  [Orabug: 26401569]  
  - ovl: move some common code in a function (Vivek Goyal)  [Orabug: 26401569]  
  - ovl: store ovl_entry in inode->i_private for all inodes (Andreas Gruenbacher)  [Orabug: 26401569]  
  - ovl: use generic_delete_inode (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: check mounter creds on underlying lookup (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: ignore permissions on underlying lookup (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: override creds with the ones from the superblock mounter (Antonio Murdaca)  [Orabug: 26401569]  
  - ovl: fix dentry leak for default_permissions (Miklos Szeredi)  [Orabug: 26401569]  
  - ovl: fix open in stacked overlay (Miklos Szeredi)  [Orabug: 26401569]  
  - nfsd: don't hold i_mutex over userspace upcalls (NeilBrown)  [Orabug: 26401569]  
  - Revert "ixgbevf: get rid of custom busy polling code" (Jack Vogel)  [Orabug: 26494997]  
  - Revert "ixgbe: get rid of custom busy polling code" (Jack Vogel)  [Orabug: 26494997]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-108.el6uek]
changelog:
  - ocfs2: fix deadlock caused by recursive locking in xattr (Eric Ren)  [Orabug: 26427132]  
  - ocfs2: fix deadlock issue when taking inode lock at vfs entry points (Eric Ren)  [Orabug: 26427132]  
  - ocfs2/dlmglue: prepare tracking logic to avoid recursive cluster lock (Eric Ren)  [Orabug: 26427132]  
  - Revert "add OCFS2_LOCK_RECURSIVE arg_flags to ocfs2_cluster_lock() to prevent hang" (Ashish Samant)  [Orabug: 26427132]  
  - xen/blkfront: always allocate grants first from per-queue persistent grants (Dongli Zhang)  [Orabug: 26351401]  
  - rds: Make sure updates to cp_send_gen can be observed (Håkon Bugge)  [Orabug: 26519030]  
  - NFSv4.1: Handle EXCHGID4_FLAG_CONFIRMED_R during NFSv4.1 migration (Chuck Lever)  [Orabug: 25727872]  
  - xen: do not re-use pirq number cached in pci device msi msg data (Boris Ostrovsky)  [Orabug: 26547167]  
  - MacSec: fix backporting error in patches for CVE-2017-7477 (Alexey Kodanev)  [Orabug: 26443893] [Orabug: 26368162]  {CVE-2017-7477} {CVE-2017-7477} 
  - ovl: move super block magic number to magic.h (Stephen Hemminger)  [Orabug: 26546379]  {CVE-2016-1575} {CVE-2016-1576} 
  - ovl: use a minimal buffer in ovl_copy_xattr (Vito Caputo)  [Orabug: 26546379]  {CVE-2016-1575} {CVE-2016-1576} 
  - ovl: allow zero size xattr (Miklos Szeredi)  [Orabug: 26546379]  {CVE-2016-1575} {CVE-2016-1576} 
  - ovl: default permissions (Miklos Szeredi)  [Orabug: 26546379]  {CVE-2016-1575} {CVE-2016-1576} 
  - uek-rpm: Add missing .ko files to ueknano modules list (Somasundaram Krishnasamy)  [Orabug: 26521422]  
  - ping: implement proper locking (Eric Dumazet)  [Orabug: 25883225]  {CVE-2017-2671} 
  - xen-blkback: stop blkback thread of every queue in xen_blkif_disconnect (Annie Li)   
  - uek-rpm: Share specfile for both kernel-ueknano and kernel-uek (Somasundaram Krishnasamy)  [Orabug: 26521422]  
  - PCI: Workaround wrong flags completions for IDT switch (James Puthukattukaran)  [Orabug: 26243152]  
  - Revert "SUNRPC: Refactor svc_set_num_threads()" (Dhaval Giani)  [Orabug: 26479081]  
  - Revert "NFSv4: Fix callback server shutdown" (Dhaval Giani)  [Orabug: 26479081]  
  - nmi_backtrace: generate one-line reports for idle cpus (Chris Metcalf)  [Orabug: 25925689]  
  - netfilter: nf_tables: fix oob access (Florian Westphal)  [Orabug: 25960439]  
  - scsi: libiscsi: use kvzalloc for iscsi_pool_init (Kyle Fortin)  [Orabug: 26473178]  
  - mm: introduce kv[mz]alloc helpers (Kyle Fortin)  [Orabug: 26473178]  
  - sg: Fix double-free when drives detach during SG_IO (Calvin Owens)  [Orabug: 26492266]  
  - scsi: smartpqi: mark PM functions as __maybe_unused (Arnd Bergmann)  [Orabug: 26191021]  
  - scsi: smartpqi: bump driver version (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: remove writeq/readq function definitions (Corentin Labbe)  [Orabug: 26191021]  
  - scsi: smartpqi: add module parameters (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: cleanup list initialization (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add raid level show (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: make ioaccel references consistent (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: enhance device add and remove messages (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: update timeout on admin commands (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: map more raid errors to SCSI errors (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: cleanup controller branding (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: update rescan worker (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: update device offline (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: correct aio error path (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add lockup action (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: remove qdepth calculations for logical volumes (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: enhance kdump (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: change return value for LUN reset operations (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add ptraid support (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: update copyright (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: cleanup messages (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add new PCI device IDs (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: minor driver cleanup (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: correct BMIC identify physical drive (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: eliminate redundant error messages (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add pqi_wait_for_completion_io (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: correct bdma hw bug (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add heartbeat check (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add suspend and resume support (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: enhance resets (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add supporting events (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: ensure controller is in SIS mode at init (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: add in controller checkpoint for controller lockups. (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: set pci completion timeout (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: correct remove scsi devices (Kevin Barnett)  [Orabug: 26191021]  
  - scsi: smartpqi: fix time handling (Arnd Bergmann)  [Orabug: 26191021]  
  - net/sock: add WARN_ON(parent->sk) in sock_graft() (Sowmini Varadhan)  [Orabug: 26477756]  
  - rds: tcp: use sock_create_lite() to create the accept socket (Sowmini Varadhan)  [Orabug: 26477756]  
  - rds: tcp: set linger to 1 when unloading a rds-tcp (Sowmini Varadhan)  [Orabug: 26477841]  
  - rds: tcp: send handshake ping-probe from passive endpoint (Sowmini Varadhan)  [Orabug: 26477841]  
  - xfs: skip dirty pages in ->releasepage() (Brian Foster)  [Orabug: 26451790]  
  - qede: Add support for ingress headroom (Mintz, Yuval)  [Orabug: 25933053]  
  - qede: Update receive statistic once per NAPI (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Make OOO archipelagos into an array (Michal Kalderon)  [Orabug: 25933053]  
  - qed: Provide iSCSI statistics to management (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Inform qedi the number of possible CQs (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Add missing stat for new isles (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Don't close the OUT_EN during init (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Configure cacheline size in HW (Tomer Tayar)  [Orabug: 25933053]  
  - qed: Don't use main-ptt in unrelated flows (Rahul Verma)  [Orabug: 25933053]  
  - qed: Warn PTT usage by wrong hw-function (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Correct MSI-x for storage (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: fix missing break in OOO_LB_TC case (Colin Ian King)  [Orabug: 25933053]  
  - qed: Add a missing error code (Dan Carpenter)  [Orabug: 25933053]  
  - qed: RoCE doesn't need to use SRC (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Correct TM ILT lines in presence of VFs (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Fix TM block ILT allocation (Michal Kalderon)  [Orabug: 25933053]  
  - qed: Revise QM cofiguration (Ariel Elior)  [Orabug: 25933053]  
  - qed: Use BDQ resource for storage protocols (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Utilize resource-lock based scheme (Tomer Tayar)  [Orabug: 25933053]  
  - qed: Support management-based resource locking (Tomer Tayar)  [Orabug: 25933053]  
  - qed: Send pf-flr as part of initialization (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Move to new load request scheme (Tomer Tayar)  [Orabug: 25933053]  
  - qed: hw_init() to receive parameter-struct (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Correct HW stop flow (Tomer Tayar)  [Orabug: 25933053]  
  - qed: Reserve VF feature before PF (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Don't waste SBs unused by RoCE (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Correct endian order of MAC passed to MFW (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Pass src/dst sizes when interacting with MFW (Tomer Tayar)  [Orabug: 25933053]  
  - qed: Revise MFW command locking (Tomer Tayar)  [Orabug: 25933053]  
  - qed: Always publish VF link from leading hwfn (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Raise verbosity of Malicious VF indications (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Make qed_iov_mark_vf_flr() return bool (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Deprecate VF multiple queue-stop (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Uniform IOV queue validation (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Correct default VF coalescing configuration (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Set HW-channel to ready before ACKing VF (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Clean VF malicious indication when disabling IOV (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Increase verbosity of VF -> PF errors (Mintz, Yuval)  [Orabug: 25933053]  
  - qed*: Add support for QL41xxx adapters (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Enable iSCSI Out-of-Order (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Correct out-of-bound access in OOO history (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Fix interrupt flags on Rx LL2 (Ram Amrani)  [Orabug: 25933053]  
  - qed: Free previous connections when releasing iSCSI (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Fix mapping leak on LL2 rx flow (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Prevent creation of too-big u32-chains (Tomer Tayar)  [Orabug: 25933053]  
  - qed: Align CIDs according to DORQ requirement (Ram Amrani)  [Orabug: 25933053]  
  - qed*: Utilize Firmware 8.15.3.0 (Mintz, Yuval)  [Orabug: 25933053]  
  - qedi: Add PCI device-ID for QL41xxx adapters. (Manish Rangankar)  [Orabug: 25933053]  
  - qed: Fix copy of uninitialized memory (robert.foss@collabora.com)  [Orabug: 25933053]  
  - qed: Don't use attention PTT for configuring BW (Mintz, Yuval)  [Orabug: 25933053]  
  - qed: Fix race with multiple VFs (Mintz, Yuval)  [Orabug: 25933053]  
  - qede: Add driver support for PTP (Sudarsana Reddy Kalluru)  [Orabug: 25933053]  
  - qede: Remove unnecessary datapath dereference (Mintz, Yuval)  [Orabug: 25933053]  
  - qede - mark SKB as encapsulated (Manish Chopra)  [Orabug: 25933053]  
  - qede: Postpone reallocation until NAPI end (Mintz, Yuval)  [Orabug: 25933053]  
  - qede: Split filtering logic to its own file (Mintz, Yuval)  [Orabug: 25933053]  
  - qede: Break datapath logic into its own file (Mintz, Yuval)  [Orabug: 25933053]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-107.el6uek]
changelog:
  - MSI: Don't assign MSI IRQ vector twice (Ashok Vairavan)  [Orabug: 26275961]  
  - blk-mq: Export blk_mq_freeze_queue_wait (Keith Busch)  [Orabug: 26486098]  
  - blk-mq: Provide freeze queue timeout (Keith Busch)  [Orabug: 26486098]  
  - nvme: Complete all stuck requests (Keith Busch)  [Orabug: 26486098]  
  - nvme: Don't suspend admin queue that wasn't created (Gabriel Krisman Bertazi)  [Orabug: 26486098]  
  - nvme: Delete created IO queues on reset (Keith Busch)  [Orabug: 26486098]  
  - nvme: Suspend all queues before deletion (Gabriel Krisman Bertazi)  [Orabug: 26486098]  
  - nvme/pci: No special case for queue busy on IO (Keith Busch)  [Orabug: 26486098]  
  - ipv6: Fix leak in ipv6_gso_segment(). (David S. Miller)  [Orabug: 26175248]  {CVE-2017-9074} 
  - ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Ben Hutchings)  [Orabug: 26175248]  {CVE-2017-9074} 
  - ipv6: Check ip6_find_1stfragopt() return value properly. (David S. Miller)  [Orabug: 26175248]  {CVE-2017-9074} 
  - ipv6: Prevent overrun when parsing v6 header options (Craig Gallek)  [Orabug: 26175248]  {CVE-2017-9074} 
  - sparc64: Convert non-fatal error print to a debug print (DAX driver) (Sanath Kumar)  [Orabug: 26305292]  
  - bnxt_en: Fix SRIOV on big-endian architecture. (Michael Chan)  [Orabug: 26000471]  
  - cpuset: consider dying css as offline (Tejun Heo)  [Orabug: 26415290]  
  - proc: sparc64 Export ADI-enabled memory (Eric Snowberg)  [Orabug: 26052545]  
  - proc: sparc64 ADI version tag debugging interface (Eric Snowberg)  [Orabug: 26051178]  
  - proc: Move directory functions into internal.h (Eric Snowberg)  [Orabug: 26051178]  
  - sched: Move the loadavg code to a more obvious location (Atish Patra)  [Orabug: 26266279]  
  - sparc64: Treat ERESTARTSYS as an acceptable error (DAX driver) (Sanath Kumar)  [Orabug: 26393400]  
  - SPARC64: vcc: delay device removal until close() (Aaron Young)  [Orabug: 24594547]  
  - sparc64: fix vio handshake issue (Thomas Tai)  [Orabug: 26259622]  
  - sparc64: Use cpu_poke to resume idle cpu (Vijay Kumar)  [Orabug: 25575672]  
  - sparc64: Add a new hypercall CPU_POKE (Vijay Kumar)  [Orabug: 25575672]  
  - sparc64: fix out of order spin_lock_irqsave and spin_unlock_restore (Thomas Tai)  [Orabug: 26265190] [Orabug: 25421812]  
  - ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Takashi Iwai)  [Orabug: 26267070]  {CVE-2017-1000380} 
  - ALSA: timer: Fix race between read and ioctl (Takashi Iwai)  [Orabug: 26267070]  {CVE-2017-1000380} 
  - net/rds: Replace printk in TX path with stat variable (Yuval Shaia)  [Orabug: 26402653]  
  - Revert "mm: meminit: only set page reserved in the memblock region" (Dhaval Giani)  [Orabug: 26446232]  
  - Revert "mm: meminit: move page initialization into a separate function" (Dhaval Giani)  [Orabug: 26446232]  
  - NVMe: Retain QUEUE_FLAG_SG_GAPS flag for bio vector alignment. (Ashok Vairavan)  [Orabug: 26402433]  
  - bnx2x: Don't post statistics to malicious VFs (Mintz, Yuval)  [Orabug: 26440216]  
  - bnx2x: Allow vfs to disable txvlan offload (Mintz, Yuval)  [Orabug: 26440216]  
  - bnx2x: fix pf2vf bulletin DMA mapping leak (Michal Schmidt)  [Orabug: 26440216]  
  - bnx2x: Fix Multi-Cos (Mintz, Yuval)  [Orabug: 26440216]  
  - bnx2x: add missing configuration of VF VLAN filters (Michal Schmidt)  [Orabug: 26440216]  
  - bnx2x: fix incorrect filter count in an error message (Michal Schmidt)  [Orabug: 26440216]  
  - bnx2x: do not rollback VF MAC/VLAN filters we did not configure (Michal Schmidt)  [Orabug: 26440216]  
  - bnx2x: fix detection of VLAN filtering feature for VF (Michal Schmidt)  [Orabug: 26440216]  
  - bnx2x: fix possible overrun of VFPF multicast addresses array (Michal Schmidt)  [Orabug: 26440216]  
  - bnx2x: lower verbosity of VF stats debug messages (Michal Schmidt)  [Orabug: 26440216]  
  - bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt)  [Orabug: 26440216]  
  - dtrace: FBT module support and SPARCs return probes (Tomas Jedlicka)  [Orabug: 25960276] [Orabug: 26384199]  
  - mm: fix use-after-free if memory allocation failed in vma_adjust() (Kirill A. Shutemov)  [Orabug: 26441514]  
  - uek-rpm nano: Signature verification support in kexec_file_load (Alexey Petrenko)  [Orabug: 26386345]  
  - lpfc update for uek4 11.4.0.2 (rkennedy)  [Orabug: 26439257]  
  - lpfc: Driver responds LS_RJT to Beacon Off (James Smart)  [Orabug: 26439257]  
  - lpfc: Fix crash after firmware flash when (James Smart)  [Orabug: 26439257]  
  - lpfc: Vport creation is failing with "Link (James Smart)  [Orabug: 26439257]  
  - lpfc: Null pointer dereference when (James Smart)  [Orabug: 26439257]  
  - lpfc: Fix return value of board_mode store (James Smart)  [Orabug: 26439257]  
  - scsi: lpfc: Fix Port going offline after (James Smart)  [Orabug: 26439257]  
  - scsi: lpfc: fix spelling mistake "entrys" (Colin Ian King)  [Orabug: 26439257]  
  - scsi: lpfc: Add MDS Diagnostic support. (James Smart)  [Orabug: 26439257]  
  - scsi: lpfc: Fix used-RPI accounting problem. (James Smart)  [Orabug: 26439257]  
  - scsi: lpfc: Fix panic on BFS configuration (James Smart)  [Orabug: 26439257]  
  - lpfc: Fix Express lane queue creation. (James Smart)  [Orabug: 26439257]  
  - lpfc: Fix driver usage of 128B WQEs when WQ_CREATE is (James Smart)  [Orabug: 26439257]  
  - lpfc: Add Fabric assigned WWN support. (James Smart)  [Orabug: 26439257]  
  - lpfc: Fix crash after issuing lip reset (James Smart)  [Orabug: 26439257]  
  - lpfc: Remove NULL ptr check before kfree. (James Smart)  [Orabug: 26439257]  
  - lpfc: Fix spelling in comments. (James Smart)  [Orabug: 26439257]  
  - scsi: lpfc: Fix PT2PT PRLI reject (James Smart)  [Orabug: 26439257]  
  - scsi: lpfc: correct rdp diag portnames (James Smart)  [Orabug: 26439257]  
  - scsi: lpfc: Fix eh_deadline setting for sli3 adapters. (rkennedy)  [Orabug: 26439257]  
  - scsi: lpfc: Fix crash during Hardware error recovery on SLI3 adapters (James Smart)  [Orabug: 26439257]  
  - scsi: lpfc: fix missing spin_unlock on sql_list_lock (Colin Ian King)  [Orabug: 26439257]  
  - drm/mgag200: Fix to always set HiPri for G200e4 V2 (Mathieu Larouche)  [Orabug: 26427049]  
  - char: lp: fix possible integer overflow in lp_setup() (Willy Tarreau)  [Orabug: 26174869]  {CVE-2017-1000363} 
  - NFSv4: Fix callback server shutdown (Trond Myklebust)  [Orabug: 26143102]  {CVE-2017-9059} 
  - SUNRPC: Refactor svc_set_num_threads() (Trond Myklebust)  [Orabug: 26143102]  {CVE-2017-9059} 
  - ipv6/dccp: do not inherit ipv6_mc_list from parent (WANG Cong)  [Orabug: 26142901]  {CVE-2017-9077} 
  - btrfs: introduce device delete by devid (Anand Jain)  [Orabug: 26287586]  
  - btrfs: enhance btrfs_find_device_by_user_input() to check device path (Anand Jain)  [Orabug: 26287586]  
  - btrfs: make use of btrfs_find_device_by_user_input() (Anand Jain)  [Orabug: 26287586]  
  - btrfs: create helper btrfs_find_device_by_user_input() (Anand Jain)  [Orabug: 26287586]  
  - btrfs: clean up and optimize __check_raid_min_device() (Anand Jain)  [Orabug: 26287586]  
  - btrfs: create helper function __check_raid_min_devices() (Anand Jain)  [Orabug: 26287586]  
  - dtrace: Add support for manual triggered cyclics (Tomas Jedlicka)  [Orabug: 26384803]  
  - dtrace: LOW level cyclics should use workqueues (Tomas Jedlicka)  [Orabug: 26384779]  
  - SPARC64: Correct ATU IOTSB binding flow (Tushar Dave)  [Orabug: 25177689] [Orabug: 25450353]  
  - SPARC64: Introduce IOMMU BYPASS method (Tushar Dave)  [Orabug: 25573557]  
  - i40e: Revert i40e temporary workaround (Tushar Dave)  [Orabug: 23239179]  
  - sparc64: Enable 64-bit DMA (Tushar Dave)  [Orabug: 23239179]  
  - sparc64: Enable sun4v dma ops to use IOMMU v2 APIs (Allen Pais)  [Orabug: 23239179]  
  - sparc64: Bind PCIe devices to use IOMMU v2 service (Allen Pais)  [Orabug: 23239179]  
  - sparc64: Initialize iommu_map_table and iommu_pool (Tushar Dave)  [Orabug: 23239179]  
  - sparc64: Add ATU (new IOMMU) support (Allen Pais)  [Orabug: 23239179]  
  - sparc64: Make FORCE_MAX_ZONEORDER to 13 for ATU (Allen Pais)  [Orabug: 23239179]  
  - Revert "sparc64: bypass iommu to use 64bit address space" (Allen Pais)  [Orabug: 21149316]  
  - i40e: fix annoying message (Jesse Brandeburg)  [Orabug: 26409501]  
  - watchdog: Move hardlockup detector to separate file (Allen Pais)  [Orabug: 24796651]  
  - watchdog: Move shared definitions to nmi.h (Allen Pais)  [Orabug: 24796651]  
  - sparc64: Suppress kmalloc (DAX driver) warning due to allocation failure (Sanath Kumar)  [Orabug: 26224254]  
  - i40evf: Use le32_to_cpu before evaluating HW desc fields. (Tushar Dave)  [Orabug: 25577233]  
  - sparc64: revert pause instruction patch for atomic backoff and cpu_relax() (Babu Moger)  [Orabug: 26306832]  
  - be2net: Update the driver version to 11.4.0.0 (Suresh Reddy)  [Orabug: 26403655]  
  - be2net: Fix UE detection logic for BE3 (Suresh Reddy)  [Orabug: 26403655]  
  - be2net: Fix offload features for Q-in-Q packets (Vlad Yasevich)  [Orabug: 26403655]  
  - benet: Use time_before_eq for time comparison (Karim Eshapa)  [Orabug: 26403655]  
  - be2net: Fix endian issue in logical link config command (Suresh Reddy)  [Orabug: 26403655]  
  - be2net: fix initial MAC setting (Ivan Vecera)  [Orabug: 26403655]  
  - drivers: net: generalize napi_complete_done() (Eric Dumazet)  [Orabug: 26403655]  
  - be2net: fix MAC addr setting on privileged BE3 VFs (Ivan Vecera)  [Orabug: 26403655]  
  - be2net: fix unicast list filling (Ivan Vecera)  [Orabug: 26403655]  
  - be2net: fix accesses to unicast list (Ivan Vecera)  [Orabug: 26403655]  
  - be2net: fix non static symbol warnings (Wei Yongjun)  [Orabug: 26403655]  
  - be2net: Avoid redundant addition of mac address in HW (Suresh Reddy)  [Orabug: 26403655]  
  - be2net: Support UE recovery in BEx/Skyhawk adapters (Sriharsha Basavapatna)  [Orabug: 26403655]  
  - be2net: replace polling with sleeping in the FW completion path (Sathya Perla)  [Orabug: 26403655]  
  - be2net: support asymmetric rx/tx queue counts (Sathya Perla)  [Orabug: 26403655]  
  - net/rds: Add mutex exclusion for vector_load (Håkon Bugge)  [Orabug: 26406492]  
  - net: properly release sk_frag.page (Eric Dumazet)  [Orabug: 26409538]  
  - i40e: Correct the macros for setting the DMA attributes (Jack Vogel)  [Orabug: 26379170]  
  - bnxt_en: Fix netpoll handling. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add missing logic to handle TPA end error conditions. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Fix xmit_more with BQL. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Pass in sh parameter to bnxt_set_dflt_rings(). (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Implement xmit_more. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Optimize doorbell write operations for newer chips. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add additional chip ID definitions. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add a callback to inform RDMA driver during PCI shutdown. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add PCI IDs for BCM57454 VF devices. (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Support for Short Firmware Message (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Check status of firmware DCBX agent before setting DCB_CAP_DCBX_HOST. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Call bnxt_dcb_init() after getting firmware DCBX configuration. (Michael Chan)  [Orabug: 26402533]  
  - bnxt: add dma mapping attributes (Shannon Nelson)  [Orabug: 26366387]  
  - bnxt_en: allocate enough space for ->ntp_fltr_bmap (Dan Carpenter)  [Orabug: 26402533]  
  - bnxt_en: Restrict a PF in Multi-Host mode from changing port PHY configuration (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Check the FW_LLDP_AGENT flag before allowing DCBX host agent. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add 100G link speed reporting for BCM57454 ASIC in ethtool (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Fix VF attributes reporting. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Pass DCB RoCE app priority to firmware. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Cap the msix vector with the max completion rings. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add interrupt test to ethtool -t selftest. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add PHY loopback to ethtool self-test. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add ethtool mac loopback self test. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add basic ethtool -t selftest support. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add suspend/resume callbacks. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add ethtool set_wol method. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add ethtool get_wol method. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add pci shutdown method. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add basic WoL infrastructure. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Update firmware interface spec to 1.7.6.2. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Fix DMA unmapping of the RX buffers in XDP mode during shutdown. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Correct the order of arguments to netdev_err() in bnxt_set_tpa() (Sankar Patchineelam)  [Orabug: 26402533]  
  - bnxt_en: Fix NULL pointer dereference in reopen failure path (Sankar Patchineelam)  [Orabug: 26402533]  
  - bnxt_en: Ignore 0 value in autoneg supported speed from firmware. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Check if firmware LLDP agent is running. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Call bnxt_ulp_stop() during tx timeout. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Perform function reset earlier during probe. (Michael Chan)  [Orabug: 26402533]  
  - Initialize fiblink list head during fib initialization (Dave Carroll)  [Orabug: 26291289]  
  - aacraid: Update scsi_host_template to use tagged commands (Dave Carroll)  [Orabug: 26291289]  
  - IB/mlx4: Suppress warning for not handled portmgmt event subtype (Mukesh Kacker)  [Orabug: 26409594]  
  - dccp/tcp: do not inherit mc_list from parent (Eric Dumazet)  [Orabug: 26408144]  {CVE-2017-8890} 
  - xen-blkfront: fix mq start/stop race (Junxiao Bi)  [Orabug: 26397415]  
  - blk-mq: remap queues when adding/removing hardware queues (Omar Sandoval)  [Orabug: 26397427]  
  - blk-mq: don't redistribute hardware queues on a CPU hotplug event (Christoph Hellwig)  [Orabug: 26397427]  
  - scsi: qedi: Fix memory leak in tmf response processing. (Dupuis, Chad)  [Orabug: 26403604]  
  - scsi: qedi: fix build error without DEBUG_FS (Arnd Bergmann)  [Orabug: 26403604]  
  - scsi: qedi: fix missing return error code check on call to qedi_setup_int (Colin Ian King)  [Orabug: 26403604]  
  - scsi: qedi: Fix possible memory leak in qedi_iscsi_update_conn() (Wei Yongjun)  [Orabug: 26403604]  
  - scsi: qedi: return via va_end to match corresponding va_start (Colin Ian King)  [Orabug: 26403604]  
  - scsi: qedi: fix build, depends on UIO (Randy Dunlap)  [Orabug: 26403604]  
  - scsi: qedi: Add QLogic FastLinQ offload iSCSI driver framework. (Manish Rangankar)  [Orabug: 26403604]  
  - xen/grant-table: log the lack of grants (Wengang Wang)  [Orabug: 26324349]


