# changelog

author: Benjamin Kosnik <bkoz@redhat.com> - 1.39.0-0.1
changelog:
  - Rebase to 1.39.0.
  - Add --with docs_generated.
  - #225622: Substitute optflags at prep time instead of RPM_OPT_FLAGS.


author: Petr Machata <pmachata@redhat.com> - 1.37.0-6
changelog:
  - Apply a SMP patch from Stefan Ring
  - Apply a workaround for "cannot appear in a constant-expression" in
    dynamic_bitset library.
  - Resolves: #491537


author: Petr Machata <pmachata@redhat.com> - 1.37.0-3
changelog:
  - Apply a unneccessary_iostreams patch from Caolan McNamara
  - Fix soname patch so that it applies with fuzz=0.  Use fuzz=0 option
    in spec file just like ordinary patches do.
  - Resolves: #479409


author: Petr Machata <pmachata@redhat.com> - 1.36.0-0.1.beta1
changelog:
  - Rebase to 1.36.0.beta1
    - Drop boost-regex.patch and portions of boost-gcc43.patch, port the rest
    - Automate SONAME tracking and bump SONAME to 4
    - Adjust boost-configure.patch to include threading=single,multi explicitly


author: Petr Machata <pmachata@redhat.com> - 1.34.1-13
changelog:
  - Install library doc files
  - Revamp %install phase to speed up overall build time
  - Some cleanups per merge review
  - Resolves: #437032


author: Benjamin Kosnik <bkoz@redhat.com> 1.34.1-1
changelog:
  - Update to boost_1_34_1.
  - Source via http.
  - Philipp Thomas <pth.suse.de> fix for RPM_OPT_FLAGS
  - Philipp Thomas <pth.suse.de> fix for .so sym links.
  - (#225622) Patrice Dumas review comments.


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.1-11
changelog:
  - (#225622: Merge Review: boost)
    Source to http.
    BuildRoot to preferred value.
    PreReq to post/postun -p
    Clarified BSL as GPL-Compatible, Free Software License.
    Remove Obsoletes.
    Add Provides boost-python.
    Remove mkdir -p $RPM_BUILD_ROOT%{_docdir}
    Added periods for decription text.
    Fix Group field.
    Remove doc Requires boost.
    Preserve timestamps on install.
    Use %defattr(-, root, root, -)
    Added static package for .a libs.
    Install static libs with 0644 permissions.
    Use %doc for doc files.


author: Benjamin Kosnik <bkoz@redhat.com> 1.34.0-0.5
changelog:
  - Update to boost.RC_1_34_0 snapshot as of 2007-01-19.
  - Modify build procedures for boost build v2.
  - Add *-mt variants for libraries, or at least variants that use
    threads (regex and thread).


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.1-10
changelog:
  - (#182414: boost: put tests in %check section) via Rex Dieter
  - Fix EVR with %{?dist} tag via Gianluca Sforna


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.1-7
changelog:
  - (#205866: boost::spirit generates warnings with -Wshadow)
  - (#205863: serialization lib generates warnings)
  - (#204326: boost RPM missing dependencies)
  - (#193465: [SIGNAL/BIND] Regressions with GCC 4.1)
  - BUILD_FLAGS, add, to see actual compile line.
  - REGEX_FLAGS, add, to compile regex with ICU support.


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.1-3
changelog:
  - Update to boost-1.33.1.
  - (#176485: Missing BuildRequires)
  - (#169271: /usr/lib/libboost*.so.? links missing in package)


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.0-1
changelog:
  - Update to boost-1.33.0, update SONAME to 2 due to ABI changes.
  - Simplified PYTHON_VERSION by Philipp Thomas <pth@suse.de>


author: Benjamin Kosnik <bkoz@redhat.com> 1.32.0-6
changelog:
  - (#153093: boost warns that gcc 4.0.0 is an unknown compiler)
  - (#152205: development .so symlinks should be in -devel subpackage)
  - (#154783: linker .so symlinks missing from boost-devel package)


author: Benjamin Kosnik <bkoz@redhat.com> 1.32.0-4
changelog:
  - (#142612: Compiling Boost 1.32.0 Failed in RHEL 3.0 on Itanium2)
  - (#150069: libboost_python.so is missing)
  - (#141617: bad patch boost-base.patch)
  - (#122817: libboost_*.so symlinks missing)
  - Re-add boost-thread.patch.
  - Change boost-base.patch to show thread tags.
  - Change boost-gcc-tools.patch to use SOTAG, compile with dllversion.
  - Add symbolic links to files.
  - Sanity check can compile with gcc-3.3.x, gcc-3.4.2, gcc-4.0.x., gcc-4.1.x.


author: Benjamin Kosnik <bkoz@redhat.com> 1.32.0-3
changelog:
  - (#122817: libboost_*.so symlinks missing)
  - (#141574: half of the package is missing)
  - (#141617: bad patch boost-base.patch)


author: Benjamin Kosnik <bkoz@redhat.com>
changelog:
  - Remove bjam dependency. (via Graydon).
  - Fix installed library names.
  - Fix SONAMEs in shared libraries.
  - Fix installed header location.
  - Fix installed permissions.


author: Benjamin Kosnik <bkoz@redhat.com> 1.31.0-1
changelog:
  - Update to boost-1.31.0.rc2
  - (#109307:  Compile Failure with boost libraries)
  - (#104831:  Compile errors in apps using Boost.Python...)
  - Unify into boost, boost-devel rpms.
  - Simplify installation using bjam and prefix install.


author: Nalin Dahyabhai <nalin@redhat.com> 1.30.2-2
changelog:
  - require boost-devel instead of devel in subpackages which require boost-devel
  - remove stray Prefix: tag


author: Benjamin Kosnik <bkoz@redhat.com> 1.30.2-1
changelog:
  - change license to Freely distributable
  - verify installation of libboost_thread
  - more boost-devel removals
  - deal with lack of _REENTRANT on ia64/s390
  - (#99458) rpm -e fixed via explict dir additions
  - (#103293) update to 1.30.2


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.0.2.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=41067cbb7a1ecab6aa2ca0d8d40a4c9f36c5e76e
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/cpu: fix IST handling during PCPU bringup (Andrew Cooper)  [Orabug: 26901421]  {CVE-2017-15594}
  - x86/shadow: Don't create self-linear shadow mappings for 4-level translated guests (Andrew Cooper)  [Orabug: 26901413]  {CVE-2017-15592}
  - x86: Disable the use of auto-translated PV guests (Andrew Cooper)  [Orabug: 26901413]  {CVE-2017-15592}
  - x86: don't allow page_unlock() to drop the last type reference (Jan Beulich)  [Orabug: 26901401]  {CVE-2017-15593}
  - x86: don't store possibly stale TLB flush time stamp (Jan Beulich)  [Orabug: 26901391]  {CVE-2017-15588}
  - x86/mm: Disable PV linear pagetables by default (George Dunlap)  [Orabug: 26901363]  {CVE-2017-15595}
  - x86: limit linear page table use to a single level (Jan Beulich)  [Orabug: 26901363]  {CVE-2017-15595}
  - x86/HVM: prefill partially used variable on emulation paths (Jan Beulich)  [Orabug: 26901338]  {CVE-2017-15589}
  - x86/FLASK: fix unmap-domain-IRQ XSM hook (Jan Beulich)  [Orabug: 26901311]  {CVE-2017-15590}
  - x86/IRQ: conditionally preserve irq <-> pirq mapping on map error paths (Jan Beulich)  [Orabug: 26901311]  {CVE-2017-15590}
  - x86/MSI: disallow redundant enabling (Jan Beulich)  [Orabug: 26901311]  {CVE-2017-15590}
  - x86: enforce proper privilege when (un)mapping pIRQ-s (Jan Beulich)  [Orabug: 26901311]  {CVE-2017-15590}
  - x86: don't allow MSI pIRQ mapping on unowned device (Jan Beulich)  [Orabug: 26901311]  {CVE-2017-15590}
  - gnttab: fix pin count / page reference race (Jan Beulich)  [Orabug: 26901277]  {CVE-2017-15597}


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.1.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=7590623eeb64d8a8f733c24eb80818f86eb870f0
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - gnttab: also validate PTE permissions upon destroy/replace (Jan Beulich)  [Orabug: 26733715]  {CVE-2017-14319}
  - tools/xenstore: dont unlink connection object twice (Juergen Gross)  [Orabug: 26739949]  {CVE-2017-14317}
  - xen/mm: make sure node is less than MAX_NUMNODES (George Dunlap)  [Orabug: 26733665]  {CVE-2017-14316}


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=a093e86f85280e92c41b1782a409c3029c53c61b
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - grant_table: Set max grant table version to 2 (Boris Ostrovsky)  [Orabug: 26564064]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-154.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=453e4fd031596351200e96224f89789e29d9bddc
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - gnttab: correct pin status fixup for copy (Jan Beulich)  [Orabug: 26591253] 
  - gnttab: split maptrack lock to make it fulfill its purpose again (Jan Beulich)  [Orabug: 26564140]  {CVE-2017-12136}
  - x86/grant: Disallow misaligned PTEs (Andrew Cooper)  [Orabug: 26564118]  {CVE-2017-12137}
  - grant_table: Default to v1, and disallow transitive grants (Andrew Cooper)  [Orabug: 26564064]  {CVE-2017-12135}


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-153.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=610401e026e333a31402c4e47107e2d51f40e88e
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/apic/x2apic: Share IRQ vector between cluster members only when cpumask is specified (Boris Ostrovsky)  [Orabug: 26360629]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-152.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=4ff73534ac66685dc3aec163572119979d3bd4c5
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: ignore non-vNUMA VMs in nodeload if vm config has no "cpus" (Elena Ufimtseva)  [Orabug: 26498675] 
  - xend: fix vcpu_to_vnuma mask construction (Elena Ufimtseva)  [Orabug: 26533429]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-151.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=4fb62266d3b7ebca86cee661e1fbb77ffb9ece38
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - use more fixed strings to build the hypervisor (Olaf Hering)  
  - xen: elfloader: increase limit on number of sections in module (Vegard Nossum)


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-150.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=cc2b44e080fb2685d2141acee704f7e360366653
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: disable vNUMA on per-guest basis (Elena Ufimtseva)


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-149.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=0f91c081f9a8c9c8645151ce6172358644477040
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: add support for asymmetrical manual vNUMA (Elena Ufimtseva)  [Orabug: 26521752] 
  - xend: fix vNUMA construction in manual mode (Elena Ufimtseva)  [Orabug: 26521752] 
  - xend: make vNUMA vcpus assignment balanced (Elena Ufimtseva)  [Orabug: 26520165] 
  - xend: move code into function (Elena Ufimtseva)


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-148.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=9b9f328f2102af405153eb336c405255dfd65eee
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Red-tape: Update the repo with CVEs for XSA-[217,218,219,221,222,224] (Konrad Rzeszutek Wilk)  [Orabug: 26520525]  {CVE-2017-10920} {CVE-2017-10921} {CVE-2017-10922} {CVE-2017-10915} {CVE-2017-10912} {CVE-2017-10918} {CVE-2017-10917} {CVE-2017-10913} {CVE-2017-10914}


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-147.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=63efdff9b21596d716586c3123db52a66baacaee
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: vNUMA 8 numa node support for low-performance VMs (Elena Ufimtseva)


author: Annie Li <annie.li@oracle.com> - 4.4.4-146.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=6bcdf6da713b4950da61e612b4e3dda1f4b17ce6
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: hvm guest keeps using original maxmem and memory after xend restart (Annie Li)  [Orabug: 26396728] 
  - xend: change error message when no cpus found for pinning (Elena Ufimtseva)  
  - xen: allow to construct vNUMA guests with even number of vCPUs. (Elena Ufimtseva)  [Orabug: 26377715] [Orabug: 26377675] 
  - xend: allow vNUMA VMs with multiple of sockets vcpus (Elena Ufimtseva)  [Orabug: 26377715] [Orabug: 26377675]


author: Dongli Zhang <dongli.zhang@oracle.com> - 4.4.4-145.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=a7bfce28689fe284396d5c4a91b8746398e1e1bb
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - gitignore: add tools/misc/xen-diag to .gitignore (Dongli Zhang)  [Orabug: 26391286] 
  - tools: utility to dump guest grant table info (Dongli Zhang)  [Orabug: 26391286] 
  - tools/libxc: add interface for GNTTABOP_query_size (Dongli Zhang)  [Orabug: 26391286]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-144.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=8e9c6a5b7652717317fe7c6f5b7c251f67c4a018
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend/vnuma: Don't try allocating or finding memory for a kdump guest. (Konrad Rzeszutek Wilk)  [Orabug: 26354498] 
  - xend/python: Fix vNUMA: disable memory relocation if ib_pfs or pci are present (Konrad Rzeszutek Wilk)  [Orabug: 26413649]


author: Annie Li <annie.li@oracle.com> - 4.4.4-143.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=69549b08eb9bd3a525c07a97d952673a3d02c76a
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xen: increase default max grant frames and max maptrack frames (Annie Li)


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-142.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=4a781c6460724a28668ff2d1e9a800d0cf0fb5ae
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: change the error message if vcpus and 'cpus' dont match (Elena Ufimtseva)  
  - xend: fix vNUMA on xm reboot (Elena Ufimtseva)  [Orabug: 26354498]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.4-141.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=9dfba034e66bc55a9e03d1921fdbf697f55d7768
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xen: Increase default max grant frames and PIRQs numbers (Annie Li)  [Orabug: 26338166]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-140.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=4f5e03612105ed392c82bc58a88e0fc59f0b3c3f
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - gnttab: __gnttab_unmap_common_complete() is all-or-nothing (Jan Beulich)  [Orabug: 26199373] 
  - gnttab: correct logic to get page references during map requests (George Dunlap)  [Orabug: 26199373] 
  - gnttab: never create host mapping unless asked to (Jan Beulich)  [Orabug: 26199373] 
  - gnttab: Fix handling of dev_bus_addr during unmap (George Dunlap)  [Orabug: 26199373] 
  - x86/shadow: Hold references for the duration of emulated writes (Andrew Cooper)  [Orabug: 26199131] 
  - x86/mm: disallow page stealing from HVM domains (Jan Beulich)  [Orabug: 26199019] 
  - guest_physmap_remove_page() needs its return value checked (Jan Beulich)  [Orabug: 26199335] 
  - xen/memory: Fix return value handing of guest_remove_page() (Andrew Cooper)  [Orabug: 26199335] 
  - evtchn: avoid NULL derefs (Jan Beulich)  [Orabug: 26199287] 
  - gnttab: correct maptrack table accesses (Jan Beulich)  [Orabug: 26199098] 
  - gnttab: Avoid potential double-put of maptrack entry (George Dunlap)  [Orabug: 26199098] 
  - gnttab: fix unmap pin accounting race (Jan Beulich)  [Orabug: 26199098] 
  - IOMMU: handle IOMMU mapping and unmapping failures (Quan Xu)  [Orabug: 26199098] 
  - xend: override memory relocation disable (Elena Ufimtseva)  [Orabug: 26046538] 
  - vNUMA: disable memory relocation if ib_pfs or pci are present (Elena Ufimtseva)  [Orabug: 26046538] 
  - xend: vNUMA make all memory units in KBytes. (Elena Ufimtseva)  [Orabug: 26046538] 
  - xc/python: use common paths to parse vnuma topology (Elena Ufimtseva)  [Orabug: 26046538]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.4-139.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=2b1e5d98846bdf4a2df85fa75ad6af70717a2203
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - OVMF: build against specific ovmf.git commit instead of master (Zhigang Wang)  [Orabug: 26248846]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-138.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=74a643c566912da76d71e9a7bde14fffb8e0057c
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Add 'bios' option to xend/xm toolstack for HVM guests (Bhavesh Davda)  
  - xen.spec: enable OVMF (Zhigang Wang)  [Orabug: 26248846] 
  - xen/disk: don't leak stack data via response ring (Jan Beulich)  [Orabug: 26198945]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-137.el6
changelog:
  - BUILDINFO: xen commit=03fbb2dedc86fb742f1066ffaef76e1c68edccd3
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - python/vnuma: Use memmax_mb value when constructing node_memsz (Konrad Rzeszutek Wilk)  
  - python/vNUMA: When creating a list of cores (and siblings) account for all CPUs. (Konrad Rzeszutek Wilk)  [Orabug: 26223159] 
  - python/vNUMA: Creation of nodeload would only pick first CPU of a NODE (Konrad Rzeszutek Wilk)  
  - Partial revert "xend: use dom0 vcpus for vnuma guests" (Konrad Rzeszutek Wilk)  [Orabug: 26223159] 
  - vNUMA: propagate topology down to domain memory allocation (Elena Ufimtseva)  [Orabug: 26037786] 
  - xc: move code around to reuse common parts (Elena Ufimtseva)  [Orabug: 26037786] 
  - xc: use xc_hvm_build_args for memory config passing (Elena Ufimtseva)  [Orabug: 26037786]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-136.el6
changelog:
  - BUILDINFO: xen commit=901fe4364deb69a6a803f540f03c1d8cf418dbc0
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xen-numa: Add a heatmap. (Konrad Rzeszutek Wilk)  [Orabug: 26037786] 
  - xen-numa: Diagnostic tool to figure out NUMA issues. (Konrad Rzeszutek Wilk)  [Orabug: 26037786] 
  - libxc: Add xc_list_numa (Konrad Rzeszutek Wilk)  [Orabug: 26037786] 
  - x86:domctl: Add XEN_DOMCTL_get_numa_ranges (Konrad Rzeszutek Wilk)  [Orabug: 26037786] 
  - xen-mceinj: Loop around xc_get_pfn_list (Konrad Rzeszutek Wilk)  [Orabug: 26037786] 
  - libxc: libxc: Use XENDOMCTL_get_memlist properly (Konrad Rzeszutek Wilk)  [Orabug: 26037786] 
  - xen/x86: XENDOMCTL_get_memlist: Make it work (Konrad Rzeszutek Wilk)  [Orabug: 26037786] 
  - dom0_vcpus_pin/numa: Consider the rest of left-over CPUs. (Konrad Rzeszutek Wilk)  [Orabug: 26089036] 
  - python/vnuma: Take into account paused (or not yet running) vCPUs of guests (Konrad Rzeszutek Wilk)  [Orabug: 26250117]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-135.el6
changelog:
  - BUILDINFO: xen commit=5ba391cfacd7fa7a0629ce6055269a2b301c7d2f
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - python/xc: When getting CPU topology get more than 255 CPUs. (Konrad Rzeszutek Wilk)  [Orabug: 26261494]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-134.el6
changelog:
  - BUILDINFO: xen commit=6fad8c911499ad80dfb73859744fa65111735a07
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - livepatch: Wrong usage of spinlock on debug console. (Konrad Rzeszutek Wilk)  [Orabug: 26248274] 
  - xend/vNUMA: Fix error when NUMA node has no memory. (Konrad Rzeszutek Wilk)  [Orabug: 26188839]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-133.el6
changelog:
  - BUILDINFO: xen commit=f6b6f9a4e9d69dfafa7ad54badcb0475f72d64f0
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - acpi: enlarge NUM_FIXMAP_ACPI_PAGES to support larger scale boards (Zhang Bo)


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-132.el6
changelog:
  - BUILDINFO: xen commit=3e2d7e037d96d790fdef7855e8a9b11b7a74c1e2
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: use dom0 vcpus for vnuma guests (Elena Ufimtseva)  [Orabug: 26223159] 
  - xend: vnuma: fix vcpus number check (Elena Ufimtseva)  [Orabug: 26224064] 
  - xend: fix exceptions format for vNUMA errors (Elena Ufimtseva)  [Orabug: 26033122]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-131.el6
changelog:
  - BUILDINFO: xen commit=f32f152497dfa82a6107ef0d964584043dd3db93
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86: Make dom0_numa_cpu_init opt_dom0_vcpus_pin_setup be __init (Konrad Rzeszutek Wilk)  
  - xend: raise exceptions if vNUMA guest cannot be constructed (Elena Ufimtseva)  
  - xen: check if vNUMA topology is correct (Elena Ufimtseva)  [Orabug: 26109642] 
  - xend: make vNUMA warnings a bit more relevant (Elena Ufimtseva)  
  - xend: relax vcpus number checks if smt is off (Elena Ufimtseva)  
  - xend: fix apicid layout on vnuma failure (Elena Ufimtseva)  [Orabug: 26109642]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-130.el6
changelog:
  - BUILDINFO: xen commit=650b285e661e78d321071b83b6f64ee277b50f85
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: add "vnuma" global config value. (Konrad Rzeszutek Wilk)  [Orabug: 26089036] 
  - xend/pci: Respect PCI devices taking their time to do FLR (Konrad Rzeszutek Wilk)  [Orabug: 26032540] 
  - dom0_vcpus_pin=[cpu-cpu],[cpu] support. (Konrad Rzeszutek Wilk)  [Orabug: 25559771] 
  - dom0_vcpus_pin: Include 'numa' support. (Konrad Rzeszutek Wilk)  [Orabug: 25559771]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-129.el6
changelog:
  - BUILDINFO: xen commit=c33f380b06b3a3c2abb2cdde4a9e0d046c9beb27
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Merge branch 'ksplice-ovm-3.4' of git://ca-git/ovm-devel into ovm-3.4.4 (Konrad Rzeszutek Wilk)  [Orabug: 25752156]


author: Alexandre Khodakovski <alexandre.khodakovski@oracle.com> - 4.4.4-128.el6
changelog:
  - BUILDINFO: xen commit=8ccc41054b882d014b487613a0ed699e9cc2cc00
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Increase VM suspend timeout in xend from 60 to 300 seconds to accommodate Windows guests. Log a message every 10 seconds instead of every second while waiting for a suspending VM. (Alexandre Khodakovski)  [Orabug: 25801187]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-127.el6
changelog:
  - BUILDINFO: xen commit=822938f96e56d45dcc27fcba939bd94e95a28eb7
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Merge branch 'ovm-3.4.4-ksplice' of git://ca-git.us.oracle.com/ovm-devel into ovm-3.4.4 (Konrad Rzeszutek Wilk)  [Orabug: 25752156] 
  - x86/do_invalid_op() should use is_active_kernel_text() rather than having its (Konrad Rzeszutek Wilk)  
  - xen: arch/x86/bug: don't encode line number into displacements. (Jamie Iles)  [Orabug: 25752156] 
  - KSPLICE: xen: add ssize_t type. (Gregory Herrero)  [Orabug: 25752156] 
  - KSPLICE: xen: module: add module_refcount() function. (Gregory Herrero)  [Orabug: 25752156] 
  - KSPLICE: xen: module: helper to find module containing address in .text only. (Gregory Herrero)  [Orabug: 25752156] 
  - KSPLICE: support -ffunction-sections and -fdata-sections (Blaise Boscaccy)  [Orabug: 25752156] 
  - KSPLICE: Makefile: add rules to dump C/LD/AFLAGS. (Quentin Casasnovas)  [Orabug: 25752156] 
  - xen: stop_machine: fill fn_result only in case of error. (Gregory Herrero)  [Orabug: 25752156] 
  - xen/tests: module parameter tester. (Gregory Herrero)  [Orabug: 25752156] 
  - xen: module: parse module parameters. (Gregory Herrero)  [Orabug: 25752156] 
  - xen: module: add parameters code from Linux v4.9. (Gregory Herrero)  [Orabug: 25752156] 
  - xen: string: add few helpers from kernel side. (Gregory Herrero)  [Orabug: 25752156] 
  - xen: module: rm module usage on failure. (Gregory Herrero)  [Orabug: 25752156] 
  - xen: module: register symbol_lookup callback. (Gregory Herrero)  [Orabug: 25752156] 
  - xen: module: implement is_module(). (Jamie Iles)  [Orabug: 25752156] 
  - xen: add support for attributes. (Jamie Iles)  [Orabug: 25752156] 
  - xen: module: rework try_module_get() so it can be used on vanished modules. (Quentin Casasnovas)  [Orabug: 25752156] 
  - xen: build: modules: add symbol lookup test. (Gregory Herrero)  [Orabug: 25752156] 
  - xen: module: check for duplicate global symbols. (Gregory Herrero)  [Orabug: 25752156] 
  - xen: module: add possiblity to lookup symbol in loaded modules. (Gregory Herrero)  [Orabug: 25752156] 
  - xen: module: track module dependencies. (Gregory Herrero)  [Orabug: 25752156] 
  - xen: elfloader: look symbols in caller specified callback. (Gregory Herrero)  [Orabug: 25752156] 
  - xen: module: add a test for exception table entries in modules. (Jamie Iles)  [Orabug: 25752156] 
  - xen: module: add a test for bug frames in modules. (Jamie Iles)  [Orabug: 25752156] 
  - xen: module: register a virtual region, ex_table, bug frames + alternatives. (Jamie Iles)  [Orabug: 25752156] 
  - xen: tools: xen-lsmod: initial commit. (Quentin Casasnovas)  [Orabug: 25752156] 
  - xen: tools: xen-rmmod: initial commit. (Quentin Casasnovas)  [Orabug: 25752156] 
  - xen: tools: xen-insmod: initial commit. (Quentin Casasnovas)  [Orabug: 25752156] 
  - xen: build: strip obj-y when checking if it is empty. (Quentin Casasnovas)  [Orabug: 25752156] 
  - xen: build: modules: add build infrastructure to build modules. (Quentin Casasnovas)  [Orabug: 25752156] 
  - xen: build: allow custom C/AFLAGS per compilation unit. (Quentin Casasnovas)  [Orabug: 25752156] 
  - xen: module: handle empty modules gracefully (Vegard Nossum)  [Orabug: 25752156] 
  - xen: module: add generic module loading sysctl interface. (Quentin Casasnovas)  [Orabug: 25752156] 
  - xen: elfloader: relocate sections into segments. (Quentin Casasnovas)  [Orabug: 25752156] 
  - xen: elfloader: initialize vmalloc space so we can map modules. (Quentin Casasnovas)  [Orabug: 25752156] 
  - xen: elfloader: ignore the _GLOBAL_OFFSET_TABLE_ when resolving symbols. (Quentin Casasnovas)  [Orabug: 25752156] 
  - xen: arch/x86/symbols: record all symbols with CONFIG_ELFLOADER. (Quentin Casasnovas)  [Orabug: 25752156] 
  - xen: elfloader: don't refuse OSABI_LINUX. (Quentin Casasnovas)  [Orabug: 25752156] 
  - xen: elfloader: support absolute 32bits signed and unsigned relocations. (Quentin Casasnovas)  [Orabug: 25752156] 
  - xen: elfloader: decouple from live patching infrastructure. (Quentin Casasnovas)  [Orabug: 25752156] 
  - stdarg: add va_copy definition. (Blaise Boscaccy)  [Orabug: 25752156] 
  - xen: stdbool.h: use typedef to define bool. (Gregory Herrero)  [Orabug: 25752156] 
  - x86/stack: avoid peeking into unmapped guard pages when dumping Xens stack (Andrew Cooper)  [Orabug: 25752156] 
  - xen: guestcopy: Provide an helper to safely copy string from guest (Julien Grall)  [Orabug: 25752156]


author: Joao Martins <joao.m.martins@oracle.com> - 4.4.4-126.el6
changelog:
  - BUILDINFO: xen commit=ffde49660a0b4695fb522fbfd0a2a78c7c916494
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/time: extend "tsc" param with "stable:socket" (Joao Martins)  [Orabug: 23585649] 
  - x86/time: implement PVCLOCK_TSC_STABLE_BIT (Joao Martins)  [Orabug: 23585649] 
  - x86/time: implement tsc as clocksource (Joao Martins)  [Orabug: 23585649] 
  - x86/time: refactor read_platform_stime() (Joao Martins)  [Orabug: 23585649] 
  - x86/time: refactor init_platform_time() (Joao Martins)  [Orabug: 23585649] 
  - public/xen.h: add flags field to vcpu_time_info (Joao Martins)  [Orabug: 23585649] 
  - x86/time: always count s_time from Xen boot (Tim Deegan)  [Orabug: 23585649] 
  - xen/x86: introduce nr_sockets (Joao Martins)  [Orabug: 23585649]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-125.el6
changelog:
  - BUILDINFO: xen commit=5d6782af3a4e24942c5f1d1bfa0c136825cb8e61
  - BUILDINFO: QEMU upstream commit=44c5f0a55d9a73e592426c33ce5705c969681955
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: Don't expose 'pxm' entries if vnuma is not set. (Konrad Rzeszutek Wilk)  
  - xm: Print device topology with "info -n". (Karl Heubaum)  [Orabug: 25368257] 
  - python/xc: dev_to_node support for topologyinfo(). (Karl Heubaum)  [Orabug: 25368257] 
  - xl: "info -n" should omit invalid NUMA nodes. (Karl Heubaum)  
  - libxl: Correctly check the return value from malloc(). (Karl Heubaum)  
  - libxl: Support 'pxm' on pci guest config override. (Konrad Rzeszutek Wilk)  [Orabug: 25368257] 
  - libxl: Expose pxm-X on 'pci' XenBus entries. (Konrad Rzeszutek Wilk)  [Orabug: 25368257] 
  - xend: Don't run the watch if there is nothing in the aerWatch (Konrad Rzeszutek Wilk)  
  - xend: Support 'pxm' on pci guest config override. (Konrad Rzeszutek Wilk)  [Orabug: 25368257] 
  - xend: Expose pxm-X on 'pci' XenBus entries. (Konrad Rzeszutek Wilk)  [Orabug: 25368257] 
  - xend, libxl, x86/topology: remove 2 * APIC_ID with smt (Joao Martins)  [Orabug: 25853596] 
  - xend, libxl: account for vnodes when smt=1 (Joao Martins)  [Orabug: 25853596] 
  - x86/hvm, hvmloader: fix apicid layout for smt (Joao Martins)  [Orabug: 25853596] 
  - xm: add support for vNUMA (Elena Ufimtseva)  [Orabug: 25368257] 
  - xc: parse and prepare to set vNUMA (Elena Ufimtseva)  [Orabug: 25368257] 
  - xc: add xc_domain_initvnuma to support xend vNUMA (Elena Ufimtseva)  [Orabug: 25368257] 
  - libxc: fill lowmem_end and and highmem for xc_hvm_build_args (Elena Ufimtseva)  [Orabug: 25741411] 
  - libxc: unify handling of vNUMA layout (Wei Liu)  [Orabug: 25741411] 
  - handle XENMEM_get_vnumainfo in compat_memory_op (Wei Liu)  [Orabug: 25741411] 
  - libxl: copy function for builtin types (Wei Liu)  [Orabug: 25741411] 
  - xl: handle empty vnuma configuration (Wei Liu)  [Orabug: 25741411] 
  - libxc: introduce xc_domain_getvnuma (Wei Liu)  [Orabug: 25741411] 
  - libxc: fix vNUMA memory allocation (Wei Liu)  [Orabug: 25741411] 
  - xl: error out if vNUMA specifies more vcpus than pcpus (Wei Liu)  [Orabug: 25741411] 
  - xl: fix vNUMA vdistance parsing (Wei Liu)  [Orabug: 25741411] 
  - libxc: allow empty memory nodes in vNUMA (Boris Ostrovsky)  [Orabug: 25741411] 
  - xl: fix vcpus to vnode assignement in config file (Dario Faggioli)  [Orabug: 25741411] 
  - libxlu: introduce new APIs (Wei Liu)  [Orabug: 25741411] 
  - libxlu: record location when parsing values (Wei Liu)  [Orabug: 25741411] 
  - libxlu: nested list support (Wei Liu)  [Orabug: 25741411] 
  - libxlu: don't crash on empty lists (Jan Beulich)  [Orabug: 25741411] 
  - libxlu: rework internal representation of setting (Wei Liu)  [Orabug: 25741411] 
  - libxl: fix HVM vNUMA (Wei Liu)  [Orabug: 25741411] 
  - libxc: rework vnuma bits in setup_guest (Wei Liu)  [Orabug: 25741411] 
  - libxc/libxl: fill xc_hvm_build_args in libxl (Wei Liu)  [Orabug: 25741411] 
  - make dumping vcpu info look better (Dario Faggioli)  [Orabug: 25741411] 
  - make two memory hypercalls vNUMA-aware (Wei Liu)  [Orabug: 25741411] 
  - factor out construct_memop_from_reservation (Wei Liu)  [Orabug: 25741411] 
  - libxlu: avoid having two definitions of XLU_ConfigList (Wei Liu)  [Orabug: 25741411] 
  - xl: vNUMA support (Wei Liu)  [Orabug: 25741411] 
  - libxlu: introduce new APIs (Wei Liu)  [Orabug: 25741411] 
  - libxlu: rework internal representation of setting (Wei Liu)  [Orabug: 25741411] 
  - xl: introduce xcalloc (Wei Liu)  [Orabug: 25741411] 
  - libxl: define LIBXL_HAVE_VNUMA (Wei Liu)  [Orabug: 25741411] 
  - libxl: disallow memory relocation when vNUMA is enabled (Wei Liu)  [Orabug: 25741411] 
  - libxl: build, check and pass vNUMA info to Xen for HVM guest (Wei Liu)  [Orabug: 25741411] 
  - libxc: allocate memory with vNUMA information for PV guest (Wei Liu)  [Orabug: 25741411] 
  - libxc: allocate memory with vNUMA information for HVM guest (Wei Liu)  [Orabug: 25741411] 
  - libxc: indentation change to xc_hvm_build_x86.c (Wei Liu)  [Orabug: 25741411] 
  - libxl: build, check and pass vNUMA info to Xen for PV guest (Wei Liu)  [Orabug: 25741411] 
  - libxl: functions to build vmemranges for PV guest (Wei Liu)  [Orabug: 25741411] 
  - libxl: x86: factor out e820_host_sanitize (Wei Liu)  [Orabug: 25741411] 
  - libxl: introduce libxl__vnuma_config_check (Wei Liu)  [Orabug: 25741411] 
  - libxl: add vmemrange to libxl__domain_build_state (Wei Liu)  [Orabug: 25741411] 
  - libxl: introduce vNUMA types (Wei Liu)  [Orabug: 25741411] 
  - libxc: add p2m_size to xc_dom_image (Wei Liu)  [Orabug: 25741411] 
  - libxc: duplicate snippet to allocate p2m_host array (Wei Liu)  [Orabug: 25741411] 
  - vNUMA: validate XEN_DOMCTL_setvnumainfo input (Jan Beulich)  [Orabug: 25741411] 
  - hvmloader: construct SLIT (Wei Liu)  [Orabug: 25741411] 
  - hvmloader: construct SRAT (Wei Liu)  [Orabug: 25741411] 
  - hvmloader: retrieve vNUMA information from hypervisor (Wei Liu)  [Orabug: 25741411] 
  - x86: dump vNUMA information with debug key 'u' (Elena Ufimsteva)  [Orabug: 25741411] 
  - vNUMA: rename interface structures (Jan Beulich)  [Orabug: 25741411] 
  - tools/xl: Call init function for libxl_bitmap (Uma Sharma)  [Orabug: 25741411] 
  - move XENMEM_get_vnumainfo out of tools-only section of public/memory.h (Jan Beulich)  [Orabug: 25741411] 
  - xl: add 'trim' and 'split_string_into_pair' functions (David Scott)  [Orabug: 25741411] 
  - xl: add 'xstrdup' next to 'xrealloc' (David Scott)  [Orabug: 25741411] 
  - libxc: Introduce xc_domain_setvnuma to set vNUMA (Elena Ufimtseva)  [Orabug: 25741411] 
  - xen: vnuma topology and subop hypercalls (Elena Ufimtseva)  [Orabug: 25741411] 
  - libxl: Change default for b_info->{cpu, node}map to "not allocated" (Dario Faggioli)  [Orabug: 25741411] 
  - hvmloader: add helper functions to get/set HVM params (David Vrabel)  [Orabug: 25741411] 
  - derive NUMA node affinity from hard and soft CPU affinity (Dario Faggioli)  [Orabug: 25741411] 
  - sched: introduce soft-affinity and use it instead d->node-affinity (Dario Faggioli)  [Orabug: 25741411] 
  - sched: rename v->cpu_affinity into v->cpu_hard_affinity (Dario Faggioli)  [Orabug: 25741411] 
  - libxl_internal.h: move / add some libxl defbool #define here (Wei Liu)  [Orabug: 25741411] 
  - libxl: fix memory leak in libxl_cpuid_dispose (Wei Liu)  [Orabug: 25741411] 
  - add the facility to limit ranges per rangeset (Paul Durrant)  [Orabug: 25741411] 
  - libxl: bail from placement on non-NUMA boxes (Dario Faggioli)  [Orabug: 25741411] 
  - tools/libxl: Introduce libxl__malloc() (Andrew Cooper)  [Orabug: 25741411] 
  - tools/libxl: Correct libxl__zalloc() to take an unsigned number of bytes (Andrew Cooper)  [Orabug: 25741411] 
  - x86: correct create_bounce_frame (tagged with CVE number) (Boris Ostrovsky)  [Orabug: 25918367]  {CVE-2017-8905}
  - x86: discard type information when stealing pages (tagged with CVE number) (Boris Ostrovsky)  [Orabug: 25918337]  {CVE-2017-8904}
  - multicall: deal with early exit conditions (tagged with CVE number) (Boris Ostrovsky)  [Orabug: 25918274]  {CVE-2017-8903}


author: build <ca_buildteam_grp@oracle.com> - 4.4.4-124.el6
changelog:
  - BUILDINFO: xen commit=72204c60101d0381c0724eb53e756eb3d01f89c4
  - BUILDINFO: QEMU upstream commit=fcd17fdf18b95a9e408acc84f6d2b37cf3fc0335
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Merge branch 'ovm-3.4.4' of git://ca-git.us.oracle.com/xen into ovm-3.4.4 (build)  
  - tools/libxc: Set max_elem to zero in xc_lockprof_query_number() (Boris Ostrovsky)  [Orabug: 20492963]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-123.el6
changelog:
  - BUILDINFO: xen commit=483b9ffd198554342e13e8c982132374fd20a3b2
  - BUILDINFO: QEMU upstream commit=fcd17fdf18b95a9e408acc84f6d2b37cf3fc0335
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86: correct create_bounce_frame (Boris Ostrovsky)  [Orabug: 25918367] 
  - x86: discard type information when stealing pages (Boris Ostrovsky)  [Orabug: 25918337] 
  - multicall: deal with early exit conditions (Boris Ostrovsky)  [Orabug: 25918274]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-122.el6
changelog:
  - BUILDINFO: xen commit=c4eaaf85366633a90bf7c7f9cfa486dd9b2c4502
  - BUILDINFO: QEMU upstream commit=fcd17fdf18b95a9e408acc84f6d2b37cf3fc0335
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Xend DevController: Read hotplug-status value busy if provided by block back driver (Niranjan Patil)  [Orabug: 25498155] 
  - Xend: add option for discard support in xm disk configuration (Niranjan Patil)


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-121.el6
changelog:
  - BUILDINFO: xen commit=dd9d9cf5f2c1084876e085fb2361b2d44f7805e6
  - BUILDINFO: QEMU upstream commit=fcd17fdf18b95a9e408acc84f6d2b37cf3fc0335
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - kexec: Add spinlock for the whole hypercall. (Konrad Rzeszutek Wilk)  [Orabug: 25527136] 
  - kexec: clear kexec_image slot when unloading kexec image (Bhavesh Davda)  [Orabug: 25527136]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-120.el6
changelog:
  - BUILDINFO: xen commit=269c39d2a24a9f59d55fbea6289407e14bc84b00
  - BUILDINFO: QEMU upstream commit=fcd17fdf18b95a9e408acc84f6d2b37cf3fc0335
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - cirrus: add blit_is_unsafe call to cirrus_bitblt_cputovideo (Gerd Hoffmann)  [Orabug: 25533541] {CVE-2017-2620} {CVE-2017-2620}
  - cirrus: fix oob access issue (CVE-2017-2615) (Li Qiang)  [Orabug: 25533433]  {CVE-2017-2615} {CVE-2017-2615}
  - cirrus/vnc: zap drop bitblit support from console code. (Gerd Hoffmann)  [Orabug: 25718334]  {CVE-2016-9603}
  - display: cirrus: ignore source pitch value as needed in blit_is_unsafe (Bruce Rogers)  [Orabug: 25533541]  {CVE-2017-2620}
  - oxenstored: trim history in the frequent_ops function (Thomas Sanders)  [Orabug: 25798837] 
  - oxenstored transaction conflicts: improve logging (Thomas Sanders)  [Orabug: 25798837] 
  - oxenstored: don't wake to issue no conflict-credit (Thomas Sanders)  [Orabug: 25798837] 
  - oxenstored: do not commit read-only transactions (Thomas Sanders)  [Orabug: 25798837] 
  - oxenstored: allow self-conflicts (Thomas Sanders)  [Orabug: 25798837] 
  - oxenstored: blame the connection that caused a transaction conflict (Jonathan Davies)  [Orabug: 25798837] 
  - oxenstored: track commit history (Jonathan Davies)  [Orabug: 25798837] 
  - oxenstored: discard old commit-history on txn end (Thomas Sanders)  [Orabug: 25798837] 
  - oxenstored: only record operations with side-effects in history (Jonathan Davies)  [Orabug: 25798837] 
  - oxenstored: support commit history tracking (Jonathan Davies)  [Orabug: 25798837] 
  - oxenstored: add transaction info relevant to history-tracking (Jonathan Davies)  [Orabug: 25798837] 
  - oxenstored: ignore domains with no conflict-credit (Thomas Sanders)  [Orabug: 25798837] 
  - oxenstored: handling of domain conflict-credit (Thomas Sanders)  [Orabug: 25798837] 
  - oxenstored: comments explaining some variables (Thomas Sanders)  [Orabug: 25798837] 
  - oxenstored: allow compilation prior to OCaml 3.12.0 (Jonathan Davies)  [Orabug: 25798837] 
  - oxenstored: log request and response during transaction replay (Jonathan Davies)  [Orabug: 25798837] 
  - oxenstored: replay transaction upon conflict (Jonathan Davies)  [Orabug: 25798837] 
  - oxenstored: move functions that process simple operations (Jonathan Davies)  [Orabug: 25798837] 
  - oxenstored: keep track of each transaction's operations (Jonathan Davies)  [Orabug: 25798837] 
  - oxenstored: refactor request processing (Jonathan Davies)  [Orabug: 25798837] 
  - oxenstored: remove some unused parameters (Jonathan Davies)  [Orabug: 25798837] 
  - oxenstored: refactor putting response on wire (Jonathan Davies)  [Orabug: 25798837] 
  - oxenstored: add a safe net mechanism for existing ill-behaved clients (Zheng Li)  [Orabug: 25798837] 
  - oxenstored: only process domain connections that notify us by events (Zheng Li)  [Orabug: 25798837] 
  - oxenstored: enable domain connection indexing based on eventchn port (Zheng Li)  [Orabug: 25798837] 
  - oxenstored: use hash table to store socket connections (Zheng Li)  [Orabug: 25798837] 
  - oxenstored: catch the error when a connection is already deleted (Zheng Li)  [Orabug: 25798837] 
  - oxenstored: perform a 3-way merge of the quota after a transaction (Jerome Maloberti)  [Orabug: 25798837] 
  - oxenstored: exempt dom0 from domU node quotas (Vincent Bernardoff)  [Orabug: 25798837] 
  - mm: Don't check for waiters when scrubbing (Boris Ostrovsky)  [Orabug: 25860374]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-119.el6
changelog:
  - BUILDINFO: xen commit=a2154a806f302e82a88d720bf29e70b94250b955
  - BUILDINFO: QEMU upstream commit=fcd17fdf18b95a9e408acc84f6d2b37cf3fc0335
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - memory: properly check guest memory ranges in XENMEM_exchange handling (Boris Ostrovsky)  [Orabug: 25799098]  {CVE-2017-7228}
  - xenstored: Log when the write transaction rate limit bites (Ian Jackson)  [Orabug: 25798837] 
  - xenstored: apply a write transaction rate limit (Ian Jackson)  [Orabug: 25798837]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.4-118.el6
changelog:
  - BUILDINFO: xen commit=4a87a4ad87b19713948976a2e12bc080fd6ff370
  - BUILDINFO: QEMU upstream commit=fcd17fdf18b95a9e408acc84f6d2b37cf3fc0335
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: do not acquire vm running lock at start after soft_reset (Zhigang Wang)  [Orabug: 25729452]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.4-117.el6
changelog:
  - BUILDINFO: xen commit=195df020b96c2b8b22f57c9f2a60044cc99aa11d
  - BUILDINFO: QEMU upstream commit=2e4e0a805aeb448242b43399e0853b851bccde4e
  - BUILDINFO: QEMU traditional commit=d9ba4c53b14ebf9a0613b5638f90d95489622f0c
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: fix vif device ID allocation (Zhigang Wang)  [Orabug: 25692157]


author: Venu Busireddy <venu.busireddy@oracle.com> - 4.4.4-116.el6
changelog:
  - BUILDINFO: xen commit=c250840c771113c9cf15f03d453b3c6a6e58091a
  - BUILDINFO: QEMU upstream commit=f663d3dd4e968756d33e29cb2c2c956cabbdd4ca
  - BUILDINFO: QEMU traditional commit=d9ba4c53b14ebf9a0613b5638f90d95489622f0c
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xm: Fix the error message displayed by 'xm create ...' (Venu Busireddy)  [Orabug: 25667536] 
  - xm: expand pci hidden devices tools (Venu Busireddy)  [Orabug: 25576024] 
  - xend: fix waitForSuspend (Zhigang Wang)  [Orabug: 25638583] 
  - xen: Bump max number of processors to 2048 (Boris Ostrovsky)  [Orabug: 24288531] 
  - acpi: switch to dynamic mapping at SYS_STATE_boot (Boris Ostrovsky)  [Orabug: 24288531]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-115.el6
changelog:
  - BUILDINFO: xen commit=ba16f81e80d451cae3ebff05b45753a74f9eecff
  - BUILDINFO: QEMU upstream commit=f663d3dd4e968756d33e29cb2c2c956cabbdd4ca
  - BUILDINFO: QEMU traditional commit=bc33fbc6f9a004dc11dcc18f1c5c755a60b65b73
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - IOMMU: always call teardown callback (Oleksandr Tyshchenko)  [Orabug: 25481896]


author: Joao Martins <joao.m.martins@oracle.com> - 4.4.4-114.el6
changelog:
  - BUILDINFO: xen commit=8c4c94925bdc97113fe59b633637bbb9c3316ea4
  - BUILDINFO: QEMU upstream commit=f663d3dd4e968756d33e29cb2c2c956cabbdd4ca
  - BUILDINFO: QEMU traditional commit=bc33fbc6f9a004dc11dcc18f1c5c755a60b65b73
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - libxl: return any serial tty path in libxl_console_get_tty (Bob Liu)  [Orabug: 24943293] 
  - xl: Accept a list for serial in config file (White, Edmund H)  [Orabug: 24943293] 
  - libxl: Allow multiple serial ports on HVM domain creation (White, Edmund H)  [Orabug: 24943293] 
  - x86/hvm: do not set msr_tsc_adjust on hvm_set_guest_tsc_fixed (Joao Martins)


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-113.el6
changelog:
  - BUILDINFO: xen commit=57171bcec8e3e91deda9658a4465fce37dcc8c65
  - BUILDINFO: QEMU upstream commit=f663d3dd4e968756d33e29cb2c2c956cabbdd4ca
  - BUILDINFO: QEMU traditional commit=bc33fbc6f9a004dc11dcc18f1c5c755a60b65b73
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86emul: CMPXCHG8B ignores operand size prefix (Jan Beulich)  [Orabug: 25180218]


author: Dongli Zhang <dongli.zhang@oracle.com> - 4.4.4-112.el6
changelog:
  - BUILDINFO: xen commit=a66faa9f75c2cb194f91cadba3de0501420c29bf
  - BUILDINFO: QEMU upstream commit=f663d3dd4e968756d33e29cb2c2c956cabbdd4ca
  - BUILDINFO: QEMU traditional commit=bc33fbc6f9a004dc11dcc18f1c5c755a60b65b73
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - mm: Make scrubbing a low-priority task (Dongli Zhang)  [Orabug: 20816669]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-111.el6
changelog:
  - BUILDINFO: xen commit=f76fb71aee8f5b145060baef9005302e6be189b9
  - BUILDINFO: QEMU upstream commit=f663d3dd4e968756d33e29cb2c2c956cabbdd4ca
  - BUILDINFO: QEMU traditional commit=bc33fbc6f9a004dc11dcc18f1c5c755a60b65b73
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/emul: Correct the handling of eflags with SYSCALL (Andrew Cooper)  [Orabug: 25291677]  {CVE-2016-10013}
  - x86: force EFLAGS.IF on when exiting to PV guests (Jan Beulich)  [Orabug: 25235002]  {CVE-2016-10024}


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-110.el6
changelog:
  - BUILDINFO: commit=fb8035420d57b6a66825024803198117d0143ab1
  - Rombios: large disk support for LBA48 to L-CHS translation (Bhavesh Davda)


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-109.el6
changelog:
  - BUILDINFO: commit=2bf7de2bdebe4231d3c04ca0b4ceca4c00767f4e
  - pygrub: Properly quote results, when returning them to the caller: (Ian Jackson)  [Orabug: 25064245] 
  - x86emul: fix huge bit offset handling (Jan Beulich)  [Orabug: 25064081] 
  - x86/PV: writes of %fs and %gs base MSRs require canonical addresses (Jan Beulich)  [Orabug: 25063963] 
  - x86/HVM: don't load LDTR with VM86 mode attrs during task switch (Jan Beulich)  [Orabug: 25063885] 
  - x86/hvm: Fix the handling of non-present segments (Andrew Cooper)  [Orabug: 25063804]


author: Joao Martins <joao.m.martins@oracle.com> - 4.4.4-108.el6
changelog:
  - BUILDINFO: commit=92415590fb4ac8d69585aa50b4830ccd82084da3
  - libxl: Remove redundant setting of phyical-device (George Dunlap)  [Orabug: 24478760]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-107.el6
changelog:
  - BUILDINFO: commit=631b03738b1e5e8c39593426fc9a07f350eb1735
  - x86/hvm: extend HVM cpuid leaf with vcpu id (Paul Durrant)  
  - x86/hvm: add HVM-specific hypervisor CPUID leaf (Boris Ostrovsky)  
  - xend: soft_reset support. (Konrad Rzeszutek Wilk)  
  - (lib)xl: soft reset support (Vitaly Kuznetsov)  
  - tools/libxl: Save and restore EMULATOR_XENSTORE_DATA content (Andrew Cooper)  [Orabug: 19807079] 
  - libxl: introduce libxl__device_model_xs_path (Wei Liu)  
  - libxl: add LIBXL_DEVICE_MODEL_SAVE_FILE (Vitaly Kuznetsov)  
  - libxc: support XEN_DOMCTL_soft_reset operation (Vitaly Kuznetsov)  
  - arch-specific hooks for domain_soft_reset() (Vitaly Kuznetsov)  
  - flask: DOMCTL_soft_reset support (Vitaly Kuznetsov)  
  - introduce XEN_DOMCTL_soft_reset (Vitaly Kuznetsov)  
  - evtchn: make evtchn_reset() ready for soft reset (Vitaly Kuznetsov)  
  - evtchn: make EVTCHNOP_reset suitable for kexec (Vitaly Kuznetsov)  
  - xl: introduce enum domain_restart_type (Vitaly Kuznetsov)  
  - libxl: support SHUTDOWN_soft_reset shutdown reason (Vitaly Kuznetsov)  
  - introduce SHUTDOWN_soft_reset shutdown reason (Vitaly Kuznetsov)


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-106.el6
changelog:
  - BUILDINFO: commit=3fefc8c56b039e14da79f5626c2d395fdd2389cb
  - support 'tera' suffixes for size parameters (Andrew Cooper)  [Orabug: 24804879] 
  - x86emul: honor guest CR0.TS and CR0.EM (Jan Beulich)  [Orabug: 24696565]  {CVE-2016-7777}
  - Revert "86emul: honor guest CR0.TS and CR0.EM" (Boris Ostrovsky)  
  - move TLB-flush filtering out into populate_physmap during vm creation (Dongli Zhang)  [Orabug: 24738858] 
  - replace tlbflush check and operation with inline functions (Dongli Zhang)  [Orabug: 24738858] 
  - 86emul: honor guest CR0.TS and CR0.EM (Jan Beulich)  [Orabug: 24696565]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-105.el6
changelog:
  - BUILDINFO: commit=617712bfc04e04aba1606f61e1ef6bac7b557464
  - evtchn-fifo: prevent use after free (Boris Ostrovsky)  [Orabug: 24581056]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-104.el6
changelog:
  - BUILDINFO: commit=cce4d21467237fd4f1ba47cd4ac1aa51277c440e
  - x86/segment: Bounds check accesses to emulation ctxt->seg_reg[] (Andrew Cooper)  [Orabug: 24561443] 
  - x86/shadow: Avoid overflowing sh_ctxt->seg_reg[] (Andrew Cooper)  [Orabug: 24561443] 
  - x86/32on64: don't allow recursive page tables from L3 (Jan Beulich)  [Orabug: 24561413]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-103.el6
changelog:
  - BUILDINFO: commit=3bbc1e4f4cd8ad473365f4d4abca4f542020bad5
  - x86/hvm: don't intercept #UD exceptions in general (Konrad Rzeszutek Wilk)  [Orabug: 24385487]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.4-102.el6
changelog:
  - BUILDINFO: commit=3e694971b628b4178dbdc907f0090ba0dc99fc6d
  - tools/hotplug/Linux/block: handle the missing $XENBUS_PATH/params case (Zhigang Wang)  [Orabug: 24482311]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-101.el6
changelog:
  - BUILDINFO: commit=e63aa9e8d75ca5700bf3433264b1306f23f84ccb
  - libxl, hotplug/Linux: default to phy backend for raw format file, take 2 (Wei Liu)  [Orabug: 24476310]


author: Joao Martins <joao.m.martins@oracle.com> - 4.4.4-100.el6
changelog:
  - BUILDINFO: commit=e6b6846226827439d26ebe65712e750744bfb1b8
  - libxc/x86: set PAGE1GB back for intel policy (Joao Martins)  [Orabug: 24446405]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-99.el6
changelog:
  - BUILDINFO: commit=f137fcbd11547c112bc12ca5bad9824b271f697e
  - xen/PCI: Allow MMCONFIG above 4GB for SGI UX 300RL (Boris Ostrovsky)  [Orabug: 24288531]


author: Joe Jin <joe.jin@oracle.com> - 4.4.4-98.el6
changelog:
  - BUILDINFO: commit=6e8721d563734d913e90054dcefa900ea370ee3d
  - xend/netif: Add handle to xenstore to avoid inconsistent vif state (Joe Jin)  [Orabug: 22954873] 
  - xend/bootloader: Fix unclosed quotation string lead duplicate xend process (Joe Jin)  [Orabug: 24371183]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-97.el6
changelog:
  - BUILDINFO: commit=458d1c9daca0626a845fa3f5f3b284f9a111cb19
  - livepatch: template and irq_stats. (Konrad Rzeszutek Wilk)


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-96.el6
changelog:
  - BUILDINFO: commit=9bb0ea920c40ee32ec47980578cab87b72f1b460
  - xend/xm: hide pci device and xm pci-unhide command (Elena Ufimtseva)  [Orabug: 23749204] 
  - xen: add support for hiding and unhiding pcie passthrough devices (Elena Ufimtseva)  [Orabug: 23749204]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-95.el6
changelog:
  - BUILDINFO: commit=b3df47a903ca08308ad42034d82545e102d50319
  - Config.mk: Rev up to 'stable-4.4' in qemu-xen (Konrad Rzeszutek Wilk)   {CVE-2016-3712} {CVE-2014-3672}
  - Fix in network configuration scripts to allow addition/removal of disconnected links to/from a bridge. (Sergei Garbuzov)  [Orabug: 23072548]


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.4.4-94.el6
changelog:
  - BUILDINFO: commit=48707e53f2a790e8154e854061079ee0677983b0
  - Remove unsafe bits from the mod_l?_entry() fastpath (Andrew Cooper)   {CVE-2016-6258}


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.4-93.el6
changelog:
  - BUILDINFO: commit=9e86d3fb58d555ebd0f1a0025c8dba07450759f1
  - build: disable downloading ipxe tarball from xen.org (Zhigang Wang)


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-92.el6
changelog:
  - BUILDINFO: commit=252a0338d28c144778b51432adfef1546e1703ba
  - mm: Don't try to scrub memory if another CPU from the same node is already scrubbing (Boris Ostrovsky)


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-91.el6
changelog:
  - BUILDINFO: commit=ba994e0aaa5c7de49dd7af52b2d1ec675e968ce5
  - symbols: Generate an xen-sym.map file similar to Linux's (Konrad Rzeszutek Wilk)


author: Joao Martins <joao.m.martins@oracle.com> - 4.4.4-90.el6
changelog:
  - BUILDINFO: commit=2094fc64091690c97d17065021041c34d6bd1497
  - xm: introduce smt option (Joao Martins)  [Orabug: 21784986] 
  - xend: add "smt" global option for default (Joao Martins)  [Orabug: 21784986] 
  - libxl, xl: add "smt" global option for default (Joao Martins)  [Orabug: 21784986] 
  - xl: introduce smt option (Joao Martins)  [Orabug: 21784986] 
  - libxl: introduce smt field (Joao Martins)  [Orabug: 21784986] 
  - libxl: cpuid: add guest topology support (Joao Martins)  [Orabug: 21784986] 
  - libxl: cpuid: add intel extended topology (Joao Martins)  [Orabug: 21784986] 
  - libxl: cpuid: add intel cache core count support (Joao Martins)  [Orabug: 21784986] 
  - libxl: remove whitespace on libxl_types.idl (Joao Martins)  
  - libxc: avoid clear leaf 0xB on xc_cpuid_set (Joao Martins)  [Orabug: 21784986] 
  - tools/libxc: Improve efficiency of xc_cpuid_apply_policy() (Andrew Cooper)  [Orabug: 21784986] 
  - xc_cpuid_x86.c: Simplify masking conditions and remove redundant work (Zhuo Song)  [Orabug: 21784986]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-89.el6
changelog:
  - BUILDINFO: commit=605b78ce48349cbf99f7758bd14689d7ab6ac8ef
  - x86/boot: create *.lnk files with linker script (Daniel Kiper)


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-88.el6
changelog:
  - BUILDINFO: commit=b5bb10cfec3354f29008c30fe680e1f0aeaa0244
  - xen.spec: Build with support for 512 CPUs. (Konrad Rzeszutek Wilk)  [Orabug: 23550196]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-87.el6
changelog:
  - BUILDINFO: commit=a99f96b3c7e5eb823712a17b800cd3c2d621b589
  - xend: Provide loglevel_max_bytes config parameter (Konrad Rzeszutek Wilk)  
  - hvmloader, pci: Don't try to relocate memory if 64-bit BAR is bigger than 4GB (Konrad Rzeszutek Wilk)  [Orabug: 23702847] 
  - hvmloader: don't use AML operations on 64-bit fields (Jan Beulich)  [Orabug: 23702847] 
  - hvmloader: fix build with certain iasl versions (Jan Beulich)  [Orabug: 23702847] 
  - hvmloader: PA range 0xfc000000-0xffffffff should be UC (Jan Beulich)  [Orabug: 23702847] 
  - hvmloader: also cover PCI MMIO ranges above 4G with UC MTRR ranges (Jan Beulich)  [Orabug: 23702847] 
  - Config.mk: Fix qemu-traditional working with 64-bit PCI-devices. (Konrad Rzeszutek Wilk)


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-86.el6
changelog:
  - BUILDINFO: commit=0fd5ef3908e55a9cff8a689b42f999230af54315
  - Merge remote-tracking branch 'origin/stable-4.4' into ovm-3.4.2 (Konrad Rzeszutek Wilk)


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-85.el6
changelog:
  - BUILDINFO: commit=76114b1c3f5abc6a3b35c0dd5ed68feae172855e
  - domctl: max_mfn_bars parameter to disable or tweak preemption. (Konrad Rzeszutek Wilk)  
  - domctl: lower loglevel of XEN_DOMCTL_memory_mapping (Tiejun Chen)


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-84.el6
changelog:
  - BUILDINFO: commit=f5b9021352e8e94a9f0026676496688f40ed8faa
  - x86/VPMU: support only versions 2 through 4 of architectural performance monitoring (Boris Ostrovsky)  
  - Makefile: Copy compile.h.replace instead of generating one (Konrad Rzeszutek Wilk)


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-83.el6
changelog:
  - BUILDINFO: commit=858ff6d5c7a175fd54f8140ae2a0ec7eb06d6bda
  - xen.spec: Include compile.h in xen-debuginfo (Konrad Rzeszutek Wilk)  
  - xend: Support 64-bit BARs. (Bhavesh Davda)  [Orabug: 23620232]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-82.el6
changelog:
  - BUILDINFO: commit=c23418e66faf2c89f9ac4a360622a589c0f7b1cc
  - x86/xsave: enable support for new ISA extensions (Jan Beulich)  [Orabug: 23550196]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-81.el6
changelog:
  - BUILDINFO: branch=ovm-3.4.2, cmt=54cb863522140da4271316ebd40a4a8b0a0316a0
  - docs/livepatch: Update URL to livepatch-build-tools.git (Konrad Rzeszutek Wilk)  
  - libxenvchan: Change license of header from Lesser GPL v2.1 to BSD (Konrad Rzeszutek Wilk)  
  - xen: Rename of xSplice to livepatch. (Konrad Rzeszutek Wilk)  
  - pygrub: handle rbd file paths (Joao Martins)  [Orabug: 23271810]


author: Malcolm Crossley <malcolm.crossley@citrix.com> - 4.4.4-80.el6
changelog:
  - p2m: convert p2m rwlock to percpu rwlock (Malcolm Crossley)  
  - grant_table: convert grant table rwlock to percpu rwlock (Malcolm Crossley)  
  - rwlock: add per-cpu reader-writer lock infrastructure (Malcolm Crossley)  
  - grant_table: implement grant_table_warn_active_grants() (Vitaly Kuznetsov)  
  - gnttab: clean up gnttab_set_version() (Jan Beulich)  
  - gnttab: don't silently truncate frame numbers in gnttab_set_version() (Jan Beulich)  
  - gnttab: fix out of range shift count (Jan Beulich)  
  - gnttab: don't flush the TLB on grant ops for auto-translated guests (Roger Pau Monné)  
  - complete conversion set_bit() -> __cpumask_set_cpu() by 4aaca0e9cd (Jan Beulich)  
  - introduce and use relaxed cpumask bitops (Jan Beulich)  
  - x86/HVM: batch vCPU wakeups (Jan Beulich)  
  - x86: suppress event check IPI to MWAITing CPUs (Jan Beulich)  
  - gnttab: steal maptrack entries from other VCPUs (David Vrabel)  
  - gnttab: use per-VCPU maptrack free lists (Malcolm Crossley)  
  - gnttab: make struct grant_mapping private (Jan Beulich)  
  - gnttab: fix/adjust gnttab_transfer() (Jan Beulich)  
  - gnttab: simplify page copying/clearing (Jan Beulich)  
  - gnttab: simplify shared entry v1 vs v2 handling (Jan Beulich)  
  - gnttab: limit mapcount() looping (Jan Beulich)  
  - gnttab: eliminate several explicit version checks (Jan Beulich)  
  - gnttab: make the grant table lock a read-write lock (David Vrabel)  
  - gnttab: introduce maptrack lock (David Vrabel)  
  - gnttab: per-active entry locking (David Vrabel)  
  - adjust assertion in alloc_heap_pages() (Jan Beulich)  
  - allow domain heap allocations to specify more than one NUMA node (Jan Beulich)  
  - gnttab: fix a printk() format specifier (Jan Beulich)  
  - grant-table: defer releasing pages acquired in a grant copy (David Vrabel)  
  - grant-table: refactor grant copy to reduce duplicate code (David Vrabel)  
  - grant-table: use uint16_t consistently for grant copy offset and length (David Vrabel)  
  - xen/grant-table: backport gnttab_need_iommu_mapping() (Joao Martins)  
  - xen/common: grant-table: only call IOMMU if paging mode translate is disabled (Julien Grall)  
  - introduce gnttab_max_frames and gnttab_max_maptrack_frames command line options (Stefano Stabellini)


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-79.el6
changelog:
  - xen.spec: Also build the hypervisor as debug=y (Konrad Rzeszutek Wilk)  
  - x86/hvm: add per-vcpu evtchn upcalls (Paul Durrant)  [Orabug: 22916310]


author: David Vrabel <david.vrabel@citrix.com> - 4.4.4-78.el6
changelog:
  - x86/mtrr: include asm/atomic.h (David Vrabel)  
  - x86: reintroduce read_unlock() optimization (David Vrabel)  
  - x86,arm: remove asm/spinlock.h from all architectures (David Vrabel)  
  - use ticket locks for spin locks (David Vrabel)  
  - x86: provide arch_fetch_and_add() (David Vrabel)  
  - x86: provide add_sized() (David Vrabel)


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.4-76.el6
changelog:
  - tools/hotplug/Linux/block: sort losetup -a result with sort -g (Zhigang Wang)  [Orabug: 22875089] 
  - tools/xenstat: handle network interface name in uppercase. (Zhigang Wang)  
  - tools/hotplug: fix ocn bridge parsing (Zhigang Wang)  [Orabug: 22904955]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.4-72.el6
changelog:
  - Merge remote-tracking branch 'remotes/xen/staging-4.4' (Zhigang Wang)  
  - update Xen version to 4.4.4 (Jan Beulich)  
  - x86/vmx: Fix injection of #DB traps following XSA-156 (Andrew Cooper)  
  - x86/VMX: prevent INVVPID failure due to non-canonical guest address (Jan Beulich)   {CVE-2016-1571}
  - x86/mm: PV superpage handling lacks sanity checks (Jan Beulich)   {CVE-2016-1570}


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-69.el6
changelog:
  - libvchan: Read prod/cons only once. (Konrad Rzeszutek Wilk)   {CVE-2015-8550}
  - blktap2: Use RING_COPY_REQUEST (Konrad Rzeszutek Wilk)   {CVE-2015-8550}
  - xen: Add RING_COPY_REQUEST() (David Vrabel)   {CVE-2015-8550}


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.4-64.el6
changelog:
  - libxl: adjust PoD target by memory fudge, too (Ian Jackson)  
  - x86: rate-limit logging in do_xen{oprof,pmu}_op() (Jan Beulich)   {CVE-2015-7971}
  - xenoprof: free domain's vcpu array (Jan Beulich)   {CVE-2015-7969}
  - x86/PoD: Eager sweep for zeroed pages (Andrew Cooper)   {CVE-2015-7970}
  - free domain's vcpu array (Jan Beulich)   {CVE-2015-7969}
  - xen: common: Use unbounded array for symbols_offset. (Ian Campbell)  
  - x86: guard against undue super page PTE creation (Jan Beulich)   {CVE-2015-7835}
  - arm: handle races between relinquish_memory and free_domheap_pages (Ian Campbell)   {CVE-2015-7814}
  - arm: rate-limit logging from unimplemented PHYSDEVOP and HVMOP. (Ian Campbell)   {CVE-2015-7813}
  - arm: Support hypercall_create_continuation for multicall (Julien Grall)   {CVE-2015-7812}
  - docs: xl.cfg: permissive option is not PV only. (Ian Campbell)  
  - tools: libxl: allow permissive qemu-upstream pci passthrough. (Ian Campbell)  
  - tools/console: xenconsole tolerate tty errors (Ian Jackson)


author: Jan Beulich <jbeulich@suse.com> - 4.4.4-62.el6
changelog:
  - x86/NUMA: make init_node_heap() respect Xen heap limit (Jan Beulich)  
  - make fls() and ffs() consistent across architectures (Jan Beulich)


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.3-61.el6
changelog:
  - xen.spec: chkconfig services should associated with xen-tools RPM (Zhigang
    Wang)  [Orabug: 21884079]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.3-57.el6
changelog:
  - x86/HVM: use fixed TSC value when saving or restoring domain (Boris Ostrovsky)  
  - x86/svm: enable TSC scaling (Boris Ostrovsky)


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.4.3-56.el6
changelog:
  - x86/irq: limit the maximum number of domain PIRQs (Andrew Cooper)  [Orabug: 21578153] 
  - have architectures specify the number of PIRQs a hardware domain gets (Jan Beulich)  [Orabug: 21578153] 
  - libxl: explicitly allocate BUFIOREQ event channel (Joao Martins)  [Orabug: 21694010] 
  - xend: fix xm list introducing memory_actual R/O field (Joao Martins)  [Orabug: 14553104] 
  - Revert "xend: Fix xm list bug reporting incorrect memory size" (Joao Martins)  [Orabug: 21304222] 
  - Revert "Xend: Fix 3M memory get increased when rebooting hvm guest" (Joao Martins)  
  - efi: rename efi_platform to efi_enabled to sync with upstream (Zhigang Wang)  
  - libxl: poll: Avoid fd deregistration race POLLNVAL crash (Ian Jackson)  
  - libxl: poll: Use poller_get and poller_put for poller_app (Ian Jackson)  
  - libxl: poll: Make libxl__poller_get have only one success return path (Ian Jackson)  
  - tools: libxl: Handle failure to create qemu dm logfile (Ian Campbell)  
  - libxl: In libxl_set_vcpuonline check for maximum number of VCPUs against the cpumap. (Konrad Rzeszutek Wilk)  
  - docs: workaround markdown parser error in xen-command-line.markdown (Ian Campbell)  
  - xl: Sane handling of extra config file arguments (Ian Jackson)  
  - QEMU_TAG update (Ian Jackson)  
  - dmar: device scope mem leak fix (Elena Ufimtseva)  
  - make rangeset_report_ranges() report all ranges (Jan Beulich)  
  - xen: earlycpio: Pull in latest linux earlycpio.[ch] (Ian Campbell)  
  - x86/hvmloader: avoid data corruption with xenstore reads/writes (Andrew Cooper)  
  - credit1: properly deal with pCPUs not in any cpupool (Dario Faggioli)  
  - x86 / cpupool: clear the proper cpu_valid bit on pCPU teardown (Dario Faggioli)  
  - x86/p2m-ept: don't unmap the EPT pagetable while it is still in use (Andrew Cooper)  
  - nested EPT: fix the handling of nested EPT (Liang Li)  
  - x86/traps: avoid using current too early on boot (Andrew Cooper)  
  - x86: avoid tripping watchdog when constructing dom0 (Ross Lagerwall)  
  - x86/EFI: adjust EFI_MEMORY_WP handling for spec version 2.5 (Jan Beulich)  
  - kexec: add more pages to v1 environment (Jan Beulich)  
  - passthrough/amd: avoid reading an uninitialized variable (Tim Deegan)  
  - x86/traps: identify the vcpu in context when dumping registers (Andrew Cooper)  
  - update Xen version to 4.4.3-rc1 (Jan Beulich)  
  - tools/libxc: Fix build of 32bit toolstacks on CentOS 5.x following XSA-125 (Andrew Cooper)  
  - Revert "tools/libxc: Fix build of 32bit toolstacks on CentOS 5.x following XSA-125" (Ian Jackson)  
  - libxl: event handling: ao_inprogress does waits while reports outstanding (Ian Jackson)  
  - libxl: event handling: Break out ao_work_outstanding (Ian Jackson)  
  - tools/libxc: Fix build of 32bit toolstacks on CentOS 5.x following XSA-125 (Andrew Cooper)  
  - tools/xenconsoled: Increase file descriptor limit (Andrew Cooper)  
  - ocaml/xenctrl: Fix stub_xc_readconsolering() (Andrew Cooper)  
  - ocaml/xenctrl: Make failwith_xc() thread safe (Andrew Cooper)  
  - ocaml/xenctrl: Check return values from hypercalls (Andrew Cooper)  
  - libxl: In domain death search, start search at first domid we want (Ian Jackson)  
  - QEMU_TAG update (Ian Jackson)  
  - xen/arm: Call context_saved() with interrupts enabled during context switch (denys drozdov)  
  - cpupool: fix shutdown with cpupools with different schedulers (Dario Faggioli)  
  - libelf: fix elf_parse_bsdsyms call (Roger Pau Monné)  
  - VT-d: extend quirks to newer desktop chipsets (Jan Beulich)  
  - EFI: support default attributes to map Runtime service areas with none given (Konrad Rzeszutek Wilk)  
  - EFI/early: add /mapbs to map EfiBootServices{Code,Data} (Konrad Rzeszutek Wilk)  
  - x86/EFI: fix EFI_MEMORY_WP handling (Jan Beulich)  
  - efi: avoid calling boot services after ExitBootServices() (Ross Lagerwall)  
  - x86/VPMU: add lost Intel processor (Alan Robinson)  
  - x86/crash: don't use set_fixmap() in the crash path (Andrew Cooper)  
  - x86/apic: Disable the LAPIC later in smp_send_stop() (Andrew Cooper)  
  - efi: fix allocation problems if ExitBootServices() fails (Ross Lagerwall)  
  - x86: don't crash when mapping a page using EFI runtime page tables (Ross Lagerwall)  
  - x86/pvh: disable posted interrupts (Roger Pau Monné)  
  - x86: don't unconditionally touch the hvm_domain union during domain construction (Andrew Cooper)  
  - x86/EFI: keep EFI runtime services top level page tables up-to-date (Jan Beulich)  
  - cpupools: avoid crashing if shutting down with free CPUs (Dario Faggioli)  
  - cpupool: assigning a CPU to a pool can fail (Dario Faggioli)  
  - x86/traps: loop in the correct direction in compat_iret() (Andrew Cooper)   {CVE-2015-4164}
  - gnttab: add missing version check to GNTTABOP_swap_grant_ref handling (Jan Beulich)   {CVE-2015-4163}
  - QEMU_TAG update (Ian Jackson)  
  - QEMU_TAG update (Ian Jackson)  
  - x86: don't clear high 32 bits of RAX on sub-word guest I/O port reads (Jan Beulich)  
  - x86_emulate: fix EFLAGS setting of CMPXCHG emulation (Eugene Korenevsky)  
  - x86/efi: reserve SMBIOS table region when EFI booting (Ross Lagerwall)  
  - x86: don't change affinity with interrupt unmasked (Jan Beulich)


author: Daniel Kiper <daniel.kiper@oracle.com> - 4.4.3-54.el6
changelog:
  - xen.spec: add efi files to xen RPM (Daniel Kiper)  [Orabug: 21091614] 
  - tools: link executables with libtinfo explicitly (Daniel Kiper)  [Orabug: 21091614]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.3-52.el6
changelog:
  - xen.spec: bump version to 4.4.3 (Zhigang Wang)  
  - x86_emulate: split the {reg,mem} union in struct operand (Tim Deegan)  
  - VT-d: improve fault info logging (Jan Beulich)  
  - x86/MSI: fix error handling (Jan Beulich)  
  - LZ4 : fix the data abort issue (JeHyeon Yeon)  
  - hvmloader: don't treat ROM BAR like other BARs (Jan Beulich)  
  - QEMU_UPSTREAM_REVISION = master again (Stefano Stabellini)  
  - domctl/sysctl: don't leak hypervisor stack to toolstacks (Andrew Cooper)   {CVE-2015-3340}
  - domctl: don't allow a toolstack domain to call domain_pause() on itself (Andrew Cooper)   {CVE-2015-2751}
  - Limit XEN_DOMCTL_memory_mapping hypercall to only process up to 64 GFNs (or less) (Konrad Rzeszutek Wilk)   {CVE-2015-2752}
  - QEMU_TAG update (Ian Jackson)  
  - x86: don't apply reboot quirks if reboot set by user (Ross Lagerwall)  
  - Revert "cpupools: update domU's node-affinity on the cpupool_unassign_cpu() path" (Jan Beulich)  
  - x86/EFI: allow reboot= overrides when running under EFI (Konrad Rzeszutek Wilk)  
  - EFI: fix getting EFI variable list on some systems (Ross Lagerwall)  
  - VT-d: print_vtd_entries() should cope with superpages (Jan Beulich)  
  - honor MEMF_no_refcount in alloc_heap_pages() (Jan Beulich)  
  - update Xen version to 4.4.3-pre (Jan Beulich)


author: Daniel Kiper <daniel.kiper@oracle.com> - 4.4.2-50.el6
changelog:
  - x86: add multiboot2 protocol support for EFI platforms (Daniel Kiper)  [Orabug: 17586566] 
  - efi: create efi_exit_boot() (Daniel Kiper)  [Orabug: 17586566] 
  - efi: create efi_set_gop_mode() (Daniel Kiper)  [Orabug: 17586566] 
  - efi: create efi_variables() (Daniel Kiper)  [Orabug: 17586566] 
  - efi: create efi_tables() (Daniel Kiper)  [Orabug: 17586566] 
  - efi: create efi_edd() (Daniel Kiper)  [Orabug: 17586566] 
  - efi: create efi_find_gop_mode() (Daniel Kiper)  [Orabug: 17586566] 
  - efi: create efi_get_gop() (Daniel Kiper)  [Orabug: 17586566] 
  - efi: create efi_console_info_init() (Daniel Kiper)  [Orabug: 17586566] 
  - efi: create efi_console_set_mode() (Daniel Kiper)  [Orabug: 17586566] 
  - efi: create efi_init() (Daniel Kiper)  [Orabug: 17586566] 
  - x86/efi: create new early memory allocator (Daniel Kiper)  [Orabug: 17586566] 
  - efi: build xen.gz with EFI code (Daniel Kiper)  [Orabug: 17586566] 
  - efi: split efi_enabled to efi_platform and efi_loader (Daniel Kiper)  [Orabug: 17586566] 
  - xen/x86: add multiboot2 protocol support (Daniel Kiper)  [Orabug: 17586566] 
  - x86/boot: use %ecx instead of %eax (Daniel Kiper)  [Orabug: 17586566] 
  - x86/boot/reloc: create generic alloc and copy functions (Daniel Kiper)  [Orabug: 17586566] 
  - x86/boot/reloc: drop MBI_BOOTDEV from mbi flags (Daniel Kiper)  [Orabug: 17586566] 
  - x86/boot: add memory to clobber list in reloc_mbi_struct() (Daniel Kiper)  [Orabug: 17586566] 
  - x86/boot: use constant in head.S instead of hardcoded value (Daniel Kiper)  [Orabug: 17586566] 
  - x86/boot: fix reloc.S build dependencies (Daniel Kiper)  [Orabug: 17586566] 
  - x86: define cmdline_cook() loader_name argument as a const (Daniel Kiper)  [Orabug: 17586566] 
  - clean target should remove xen.efi binary (Daniel Kiper)  [Orabug: 17586566] 
  - x86/boot/reloc: remove redundant blank characters and reformat comments a bit (Daniel Kiper)  [Orabug: 17586566] 
  - x86: use constant as multiboot protocol identifier (Daniel Kiper)  [Orabug: 17586566] 
  - x86: define e820 entries counter as unsigned int (Daniel Kiper)  [Orabug: 17586566] 
  - x86/EFI: Add newline to the end of graphics mode error message (Daniel Kiper)  [Orabug: 17586566] 
  - console: increase initial conring size (Daniel Kiper)  [Orabug: 17586566]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.2-47.el6
changelog:
  - Limit XEN_DOMCTL_memory_mapping hypercall to only process up to 64 GFNs (or less) (Konrad Rzeszutek Wilk)  [Orabug: 19976760]  {CVE-2015-2752}
  - xen.spec: align rpm version with xen version (Zhigang Wang)  [Orabug: 20781181]


author: Zhigang Wang <w1z2g3@gmail.com> - 4.4.0-41.el6
changelog:
  - update Xen version to 4.4.2 (Jan Beulich)  
  - xen: arm: correct arm64 version of gva_to_ma_par (Ian Campbell)  
  - tools: libxl: Explicitly disable graphics backends on qemu cmdline (Ian Campbell)   {CVE-2015-2152}
  - x86/tboot: invalidate FIX_TBOOT_MAP_ADDRESS mapping after use (Jan Beulich)  
  - x86emul: fully ignore segment override for register-only operations (Jan Beulich)   {CVE-2015-2151}
  - pre-fill structures for certain HYPERVISOR_xen_version sub-ops (Aaron Adams)   {CVE-2015-2045}
  - x86/HVM: return all ones on wrong-sized reads of system device I/O ports (Jan Beulich)   {CVE-2015-2044}
  - update Xen version to 4.4.2-rc2 (Jan Beulich)  
  - pygrub: Fix regression from c/s d1b93ea, attempt 2 (Boris Ostrovsky)  
  - pygrub: fix non-interactive parsing of grub1 config files (Simon Rowe)  
  - tools/pygrub: Make pygrub understand default entry in string format (Boris Ostrovsky)  
  - tools/pygrub: Fix extlinux when /boot is a separate partition from / (Andrew Cooper)  
  - x86/nmi: fix shootdown of pcpus running in VMX non-root mode (Andrew Cooper)  
  - x86/traps: export the exception_table[] function pointer table to C (Andrew Cooper)  
  - x86/VPMU: disable when NMI watchdog is on (Boris Ostrovsky)  
  - QEMU_TAG update (Ian Jackson)  
  - bunzip2: off by one in get_next_block() (Dan Carpenter)  
  - docs/commandline: correct information for 'x2apic_phys' parameter (Andrew Cooper)  
  - x86: vcpu_destroy_pagetables() must not return -EINTR (Konrad Rzeszutek Wilk)  
  - x86: correctly check for sub-leaf zero of leaf 7 in pv_cpuid() (Jan Beulich)  
  - x86: don't expose XSAVES capability to PV guests (Jan Beulich)  
  - xsm/evtchn: never pretend to have successfully created a Xen event channel (Andrew Cooper)  
  - common/memory: fix an XSM error path (Jan Beulich)  
  - x86emul: tighten CLFLUSH emulation (Jan Beulich)  
  - x86/VPMU: Clear last_vcpu when destroying VPMU (Boris Ostrovsky)  
  - VT-d: don't crash when PTE bits 52 and up are non-zero (Jan Beulich)  
  - domctl: fix IRQ permission granting/revocation (Jan Beulich)  
  - xen/arm: vgic: message in the emulation code should be rate-limited (Julien Grall)  
  - update Xen version to 4.4.2-rc1 (Jan Beulich)  
  - dt-uart: use ':' as separator between path and options (Ian Campbell)  
  - libxl: Don't ignore error when we fail to give access to ioport/irq/iomem (Julien Grall)


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.0-37.el6
changelog:
  - rc/xendomains: 'stop' - also take care of stuck guests. (Konrad Rzeszutek Wilk)  [Orabug: 20577442] 
  - xend: Fix race between shutdown and cleanup. (Konrad Rzeszutek Wilk)  [Orabug: 20577442]


author: Annie Li <annie.li@oracle.com> - 4.4.0-35.el6
changelog:
  - Xend: Remove code change related with restore about 3M memory issue (Annie Li)
    [Orabug: 20439696]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-33.el6
changelog:
  - tools: libxl: do not leak diskpath during local disk attach (Ian Campbell)  
  - tools: libxl: do not overrun input buffer in libxl__parse_mac (Ian Campbell)  
  - libxc: check return values on mmap() and madvise() on xc_alloc_hypercall_buffer() (Luis R. Rodriguez)  
  - x86/HVM: prevent use-after-free when destroying a domain (Mihai Donțu)   {CVE-2015-0361}
  - xen/arm: dump guest stack even if not the current VCPU (Frediano Ziglio)  
  - xen/arm: Handle platforms with edge-triggered virtual timer (Julien Grall)  
  - call vgic_en/disable_irqs holding the rank_lock (Stefano Stabellini)  
  - xen/arm: domain_vgic_init: Avoid double free on shared_irqs (Julien Grall)  
  - x86/HVM: don't crash guest upon problems occurring in user mode (Jan Beulich)  
  - x86/cpuidle: don't count C1 multiple times (Jan Beulich)  
  - EFI: allow retry of ExitBootServices() call (Jan Beulich)  
  - x86: (allow to) override LIST_POISON* (Jan Beulich)  
  - adjust number of domains in cpupools when destroying domain (Juergen Gross)  
  - switch to write-biased r/w locks (Keir Fraser)   {CVE-2014-9065}
  - x86/HVM: confine internally handled MMIO to solitary regions (Jan Beulich)   {CVE-2014-8867}
  - x86: limit checks in hypercall_xlat_continuation() to actual arguments (Jan Beulich)   {CVE-2014-8866}
  - x86/mm: fix a reference counting error in MMU_MACHPHYS_UPDATE (Andrew Cooper)  
  - x86emul: enforce privilege level restrictions when loading CS (Jan Beulich)   {CVE-2014-8595}
  - x86: don't allow page table updates on non-PV page tables in do_mmu_update() (Jan Beulich)   {CVE-2014-8594}
  - x86/PVH: replace bogus assertion with conditional (Jan Beulich)  
  - process softirqs while dumping domains (Andrew Cooper)  
  - x86/HVM: only kill guest when unknown VM exit occurred in guest kernel mode (Jan Beulich)  
  - VMX: values written to MSR_IA32_SYSENTER_E[IS]P should be canonical (Jan Beulich)  
  - x86/HVM: sanity check xsave area when migrating or restoring from older Xen versions (Don Koch)  
  - EFI: allow to suppress the use of runtime services (Jan Beulich)  
  - x86: tolerate running on EFI runtime services page tables in map_domain_page() (Jan Beulich)  
  - hvm/load: correct length checks for zeroextended records (Andrew Cooper)  
  - vmx: fix save/restore issue with apicv (Yang Zhang)  
  - fix listing of vcpus when domains lacking any vcpus exist (Andrew Cooper)  
  - x86/paging: make log-dirty operations preemptible (Jan Beulich)   {CVE-2014-5146}
  - AMD/guest_iommu: properly disable guest iommu support (Andrew Cooper)  
  - don't allow Dom0 access to IOMMUs' MMIO pages (Jan Beulich)  
  - x86: restore reserving of IO-APIC pages in XENMEM_machine_memory_map output (Jan Beulich)  
  - x86/MSI: fix MSI-X case of freeing IRQ (Jan Beulich)  
  - x86/EFI: fix freeing of uninitialized pointer (Roy Franz)  
  - VMX: don't unintentionally leave x2APIC MSR intercepts disabled (Jan Beulich)  
  - x86, idle: add barriers to CLFLUSH workaround (H. Peter Anvin)  
  - VT-d: suppress UR signaling for further desktop chipsets (Jan Beulich)   {CVE-2013-3495}
  - x86/NMI: allow processing unknown NMIs when watchdog is enabled (Ross Lagerwall)  
  - x86/ats: Disable Address Translation Services by default (Andrew Cooper)  
  - x86/irq: process softirqs in irq keyhandlers (Andrew Cooper)  
  - VMX: fix DebugCtl MSR clearing (Jan Beulich)  
  - x86/HVM: properly bound x2APIC MSR range (Jan Beulich)   {CVE-2014-7188}
  - x86emul: only emulate software interrupt injection for real mode (Jan Beulich)  
  - x86/emulate: check cpl for all privileged instructions (Andrew Cooper)  
  - x86/shadow: fix race condition sampling the dirty vram state (Andrew Cooper)


author: Jan Beulich <jbeulich@suse.com> - 4.4.0-30.el6
changelog:
  - x86/paging: make log-dirty operations preemptible (Jan Beulich)  [Orabug: 20141124]  {CVE-2014-5146}
  - switch internal hypercall restart indication from -EAGAIN to -ERESTART (Jan Beulich)  [Orabug: 20141124]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.0-29.el6
changelog:
  - libxl/sysctl/ionuma: Make 'xl info -n' print device topology (Boris Ostrovsky)  [Orabug: 19580678] 
  - pci: Manage NUMA information for PCI devices (Boris Ostrovsky)  [Orabug: 19580678]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-28
changelog:
  - xend: disable sslv3 due to CVE-2014-3566
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 19831385]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-27
changelog:
  - tools/python: expose xc_getcpuinfo()
    This API can be used to get per physical CPU utilization.
    Testing:
      >>> import xen.lowlevel.xc
    >>> xc = xen.lowlevel.xc.xc()
    >>> xc.getcpuinfo()
    Traceback (most recent call last):
    File "<stdin>", line 1, in <module>
    TypeError: Required argument 'max_cpus' (pos 1) not found
    >>> xc.getcpuinfo(4)
    [{'idletime': 109322086128854}, {'idletime': 109336447648802},
    {'idletime': 109069270544960}, {'idletime': 109065612611363}]
    >>> xc.getcpuinfo(100)
    [{'idletime': 109639015806078}, {'idletime': 109654551195681},
    {'idletime': 109382107891193}, {'idletime': 109382057541119}]
    >>> xc.getcpuinfo(1)
    [{'idletime': 109682068418798}]
    >>> xc.getcpuinfo(2)
    [{'idletime': 109711311201330}, {'idletime': 109728458214729}]
    >>> xc.getcpuinfo(max_cpus=4)
    [{'idletime': 109747116214638}, {'idletime': 109764982453261},
    {'idletime': 109491373228931}, {'idletime': 109489858724432}]
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Acked-by: Ian Campbell <ian.campbell@citrix.com>
    Upsteam commit: a9958947e49644c917c2349a567b2005b08e7c1f


author: Konrad Wilk <konrad.wilk@oracle.com> - 4.4.0-26
changelog:
  - spread boot time page scrubbing across all available CPU's
    The page scrubbing is done in 128MB chunks in lockstep across all the
    non-SMT CPU's. This allows for the boot CPU to hold the heap_lock whilst each
    chunk is being scrubbed and then release the heap_lock when the CPU's are
    finished scrubing their individual chunk. This allows for the heap_lock to
    not be held continously and for pending softirqs are to be serviced
    periodically across the CPU's.
    The page scrub memory chunks are allocated to the CPU's in a NUMA aware
    fashion to reduce socket interconnect overhead and improve performance.
    Specifically in the first phase we scrub at the same time on all the
    NUMA nodes that have CPUs - we also weed out the SMT threads so that
    we only use cores (that gives a 50% boost). The second phase is for NUMA
    nodes that have no CPUs - for that we use the closest NUMA node's CPUs
    (non-SMT again) to do the job.
    This patch reduces the boot page scrub time on a 128GB 64 core AMD Opteron
    6386 machine from 49 seconds to 3 seconds.
    On a IvyBridge-EX 8 socket box with 1.5TB it cuts it down from 15 minutes
    to 63 seconds.
    Signed-off-by: Malcolm Crossley <malcolm.crossley@citrix.com>
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
    (cherry picked from commit 7430a86de0c9bd126b441570e459f6e06413cbf6) [bug 14829299]


author: Konrad Wilk <konrad.wilk@oracle.com> - 4.4.0-25
changelog:
  - Reduce domain destroy time by delay page scrubbing
    Bug 18415476 - XM DESTROY OF 1TB MEMORY GUEST TAKES LONG TIME
    Because of page scrubbing, it's very slow to destroy a domain with large
    memory.
    This patch introduced a "PGC_need_scrub" flag, pages with this flag means it
    need to be scrubbed before use.
    During domain destory, pages are marked as "PGC_need_scrub" and be added to free
    heap list, so that xl can return quickly. The real scrub is delayed to the
    allocation path if a page with "PGC_need_scrub" is allocated.
    Besides that, trigger all idle vcpus to do the scrub job in parallel before
    them enter sleep.
    In order to get rid of heavy lock contention, a percpu list is used:
    - Delist a batch of pages to a percpu list from "scrub" free page list.
    - Scrub pages on this percpu list.
    - Return those clean pages to normal "heap" free page list, merge with other
    chunks if needed.
    On a ~500GB guest, shutdown took slightly over one minute compared with over 6
    minutes if without this patch.
    Signed-off-by: Bob Liu <bob.liu@oracle.com>
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 18415476]


author: Konrad Wilk <konrad.wilk@oracle.com> - 4.4.0-24
changelog:
  - iommu: set correct IOMMU entries when !iommu_hap_pt_share
    If the memory map is not shared between HAP and IOMMU we fail to set
    correct IOMMU mappings for memory types other than p2m_ram_rw.
    This patchs adds IOMMU support for the following memory types:
    p2m_grant_map_rw, p2m_map_foreign, p2m_ram_ro, p2m_grant_map_ro and
    p2m_ram_logdirty.
    Signed-off-by: Roger Pau Monn?195?169 <roger.pau@citrix.com>
    Reviewed-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    Tested-by: David Zhuang <david.zhuang@oracle.com>
    (cherry picked from commit 203746bc36b41443d0eec78819f153fb59bc68d1)
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Conflicts:
    xen/arch/x86/mm/p2m-pt.c
    [Easily resolved - We don't have commit 561e1dc85e6176c3d5b0a665b8ed4ff9e33cef1f
    "x86/p2m: error code propagation" which changes 'ret' to 'rv'] [bug 18730424]


author: Konrad Wilk <konrad.wilk@oracle.com> - 4.4.0-23
changelog:
  - pvh dom0: introduce p2m_map_foreign
    In this patch, a new type p2m_map_foreign is introduced for pages
    that toolstack on an auto translated dom0 or a control domain maps
    from foreign domains that its creating or supporting during its
    run time.
    Signed-off-by: Mukesh Rathor <mukesh.rathor@oracle.com>
    Acked-by: Tim Deegan <tim@xen.org>
    (cherry picked from commit 243cebb3dfa1f94ec7c2b040e8fd15ae4d81cc5a)
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 18730424]


author: Konrad Wilk <konrad.wilk@oracle.com> - 4.4.0-22
changelog:
  - x86/EPT: simplification and cleanup
    - drop rsvd*_ prefixes from fields not really reserved anymore
    - replace odd uses of <expr> ? 1 : 0
    - drop pointless variables from ept_set_entry()
    - streamline IOMMU mirroring code in ept_set_entry()
    - don't open code is_epte_valid() (and properly use it when dumping)
    - streamline entry cloning in ept_split_super_page()
    - compact dumping code and output
    Signed-off-by: Jan Beulich <jbeulich@suse.com>
    Reviewed-by: Tim Deegan <tim@xen.org>
    (cherry picked from commit 3d8d2bd048773ababfa65cc8781b9ab3f5cf0eb0)
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 18730424]


author: Konrad Wilk <konrad.wilk@oracle.com> - 4.4.0-21
changelog:
  - tasklet: Introduce per-cpu tasklet for softirq (v5)
    This implements a lockless per-cpu tasklet mechanism.
    The existing tasklet mechanism has a single global
    spinlock that is taken every-time the global list
    is touched. And we use this lock quite a lot - when
    we call do_tasklet_work which is called via an softirq
    and from the idle loop. We take the lock on any
    operation on the tasklet_list.
    The problem we are facing is that there are quite a lot of
    tasklets scheduled. The most common one that is invoked is
    the one injecting the VIRQ_TIMER in the guest. Guests
    are not insane and don't set the one-shot or periodic
    clocks to be in sub 1ms intervals (causing said tasklet
    to be scheduled for such small intervalls).
    The problem appears when PCI passthrough devices are used
    over many sockets and we have an mix of heavy-interrupt
    guests and idle guests. The idle guests end up seeing
    1/10 of its RUNNING timeslice eaten by the hypervisor
    (and 40% steal time).
    The mechanism by which we inject PCI interrupts is by
    hvm_do_IRQ_dpci which schedules the hvm_dirq_assist
    tasklet every time an interrupt is received.
    The callchain is:
    _asm_vmexit_handler
    -> vmx_vmexit_handler
    ->vmx_do_extint
    -> do_IRQ
    -> __do_IRQ_guest
    -> hvm_do_IRQ_dpci
    tasklet_schedule(&dpci->dirq_tasklet);
    [takes lock to put the tasklet on]
    [later on the schedule_tail is invoked which is 'vmx_do_resume']
    vmx_do_resume
    -> vmx_asm_do_vmentry
    -> call vmx_intr_assist
    -> vmx_process_softirqs
    -> do_softirq
    [executes the tasklet function, takes the
    lock again]
    While on other CPUs they might be sitting in a idle loop
    and invoked to deliver an VIRQ_TIMER, which also ends
    up taking the lock twice: first to schedule the
    v->arch.hvm_vcpu.assert_evtchn_irq_tasklet (accounted to
    the guests' BLOCKED_state); then to execute it - which is
    accounted for in the guest's RUNTIME_state.
    The end result is that on a 8 socket machine with
    PCI passthrough, where four sockets are busy with interrupts,
    and the other sockets have idle guests - we end up with
    the idle guests having around 40% steal time and 1/10
    of its timeslice (3ms out of 30 ms) being tied up
    taking the lock. The latency of the PCI interrupts delieved
    to guest is also hindered.
    With this patch the problem disappears completly.
    That is removing the lock for the PCI passthrough use-case
    (the 'hvm_dirq_assist' case).
    As such this patch introduces the code to setup
    softirq per-cpu tasklets and only modifies the PCI
    passthrough cases instead of doing it wholesale. This
    is done because:
    - We want to easily bisect it if things break.
    - We modify the code one section at a time to
    make it easier to review this core code.
    Now on the code itself. The Linux code (softirq.c)
    has an per-cpu implementation of tasklets on which
    this was based on. However there are differences:
    - This patch executes one tasklet at a time - similar
    to how the existing implementation does it.
    - We use a double-linked list instead of a single linked
    list. We could use a single-linked list but folks are
    more familiar with 'list_*' type macros.
    - This patch does not have the cross-CPU feeders
    implemented. That code is in the patch
    titled: tasklet: Add cross CPU feeding of per-cpu
    tasklets. This is done to support:
    "tasklet_schedule_on_cpu"
    - We add an temporary 'TASKLET_SOFTIRQ_PERCPU' which
    is can co-exist with the TASKLET_SOFTIRQ. It will be
    replaced in 'tasklet: Remove the old-softirq
    implementation."
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 18239385]


author: Annie Li <annie.li@oracle.com> - 4.4.0-19
changelog:
  - xen: Only allocating the xenstore event channel earlier
    This patch allocates xenstore event channel earlier to fix the migration
    issue from ovm3.2.8 to 3.3.1, and also reverts the change for console
    event channel to avoid it is set to none after allocation.
    Signed-off-by: Annie Li <annie.li@oracle.com>
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 19218595]


author: Adnan Misherfi <adnan.misherfi@oracle.com> - 4.4.0-18
changelog:
  - Increase xen max_phys_cpus to support hardware with 384 CPUs
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 19475535]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-17
changelog:
  - fix domain destroy after reboot
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Joe Jin <joe.jin@oracle.com>
    Signed-off-by: Iain MacDonnell <iain.macdonnell@oracle.com> [bug 19557379]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-16
changelog:
  - update to 4.4.1
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-15
changelog:
  - xend: don't start blktapctrl as it's disabled by default
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-13
changelog:
  - xend: fix xm list bug reporting incorrect memory size

    This change allows xend to double-check the xcinfo info (which
    hypercall it had already do) and use the up-to-date contents.

    'xl' already does this by using the xcinfo.
    
    Signed-off-by: Marcos Matsunaga <Marcos.Matsunaga@oracle.com>
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 14553104]
  - disable restore domains

    Signed-off-by: Firas Azar <firas.azar@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com> [bug 18048615] 
    [bug 18560587]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-12
changelog:
  - xend ssl migration reject weak cipher

    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Cathy Avery <cathy.avery@oracle.com>
    Signed-off-by: Carson Hovey <carson.hovey@oracle.com> [bug 16721961]
    [bug 16721654
  - check xend service status
    Signed-off-by: Firas Azar <firas.azar@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 17892410]
  - reduce xend minimum vm restart time to 10 seconds

    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-11
changelog:
  - Expose host uuid to guest via xenstore.

    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>
  - Revert change set 22315 because it breaks live migration:

    Do not wait for memory teardown when live migrate

    When trying to live migrate guest with great memory (e.g. 20 GB),
    there's delay caused by destroying source copy of domain. To speed up
    this process we can close socket before starting guest destroy, as
    source guest is not running anymore.

    Signed-off-by: Miroslav Rezanina <mrezanin@redhat.com>
    Signed-off-by: Ian Jackson <ian.jackson@eu.citrix.com> [bug 13808326]
    [bug 13874471]
  - Put back the patch that prevents older guests that use kudzu from
    hanging on reboot. Fixed the patch to prevent excessive watcher writes
    which causes xend, xenstored to run at a 100% cpu usage. Now the watch
    is written only if the console in Initialising, InitWait, Initialised
    states which happen once at boot time.

    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 13523487]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-10
changelog:
  - Fix xm create vcpu_avail exceeds XMLRPC int limits.

    If maxvcpus = vcpus = 40, (1<<40 -1) will exceed XMLRPC int limit.
    Changing it to str will work. Then in the xend side, it will be
    converted back to int.

    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 14473041]
  - Fix bootloader hang/crash xend on wrong bootargs.

    When dom0 under heavy pressure, the pipe read in xen bootloader may
    return -EAGAIN. This may result in no data read or partial data read.

    With this patch, bootloader will read again when that happens.

    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Steve Prochniak <steve.prochniak@oracle.com> [bug 14195864]
    [bug 14325570] [bug 14268749] [bug 14527250]
  - Remove unnecessary balloon retries on vm creation.

    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 14143327]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-9
changelog:
  - Disable network-script.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
  - Fix xm reboot wait exception.

    For VM reboot, the VM will first shutdown and then xend will recreate
    it. This bug is caused by: when we do server.xend.domains(), the VM is
    live; when we do server.xend.domain.getRestartCount(), the VM is dead,
    thus raise an exception.

    We can ignore this exception and just continue: this domain will be
    handled in the next loop (it will not in the live vm list).

    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Jingjie Jiang <jingjie.jiang@oracle.com>
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com> [bug 14836200]
  - xend: disable SCSI device discover during xend start.

    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 14538564]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-8
changelog:
  - Avoid ballooning when dom0-min-mem is set and enable-dom0-ballooning is
    enabled.

    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com> [bug 12404026]
  - Enable Xend SSL relocation server.

    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>
  - Disable ballooning of dom0. [bug 8604766] [bug 9485681]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-7
changelog:
  - Add domain running lock callout hook.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Junjie Wei <junjie.wei@oracle.com> [bug 17936558] [bug 18328751]
  - Avoid concurrent calls to destory() for the same domain.

    Signed-off-by: Joe Jin <joe.jin@oracle.com>
    Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Reviewed-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 16098765]
  - Fix file descriptor leak in SSL migration.

    Signed-off-by: Steve Prochniak <steve.prochniak@oracle.com
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com> [bug 16706361]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-6
changelog:
  - dom0-mem backward compatibility
    If a maximum reservation for dom0 is not explictly given (i.e., no
    dom0_mem=max:MMM command line option), then set the maximum
    reservation to the initial number of pages.  This is what most people
    seem to expect when they specify dom0_mem=512M (i.e., exactly 512 MB
    and no more).

    This change means that with Linux 3.0.5 and later kernels,
    dom0_mem=512M has the same result as older, 'classic Xen' kernels. The
    older kernels used the initial number of pages to set the maximum
    number of pages and did not query the hypervisor for the maximum
    reservation.

    It is still possible to have a larger reservation by explicitly
    specifying dom0_mem=max:MMM.

    Signed-off-by: David Vrabel <david.vrabel@citrix.com>
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>

    NOTE: This behaviour should also be implemented in the Linux kernel. [bug 13860516] [bug 18552768]
  - fix panic on HP DL580 Gen8
    Signed-off-by: Konrad Wilk <konrad.wilk@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 19189825]
  - In bootloader(), domains_lock is first released to avoid a stunk
    bootloder from denying service to the other xend clients. It is
    re-acquired before returning to domain creation to cover the changes
    to be made. But if something goes wrong and domains_lock is not
    re-acquired, we may hit an error when releasing it one more time.

    This patch makes sure that the released domains_lock is re-acquired
    before returning.

    Signed-off-by: Junjie Wei <junjie.wei@oracle.com>
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 14407719]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-5
changelog:
  - restore C xenstored and put tdb to tmpfs
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
  - fix a crash in guests 2.6.32 when PLE is enabled
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
  - fix hvm migration 32 vcpus limit
    When we migrate an HVM guest, by default our shared_info can
    only hold up to 32 CPUs. As such the hypercall
    VCPUOP_register_vcpu_info was introduced which allowed us to
    setup per-page areas for VCPUs. This means we can boot PVHVM
    guest with more than 32 VCPUs. During migration the per-cpu
    structure is allocated fresh by the hypervisor (vcpu_info_mfn
    is set to INVALID_MFN) so that the newly migrated guest
    can do make the VCPUOP_register_vcpu_info hypercall.

    Unfortunatly we end up triggering this condition:
    /* Run this command on yourself or on other offline VCPUS. */
     if ( (v != current) && !test_bit(_VPF_down, &v->pause_flags) )

    which means we are unable to setup the per-cpu VCPU structures
    for running vCPUS. The Linux PV code paths make this work by
    iterating over every vCPU with:

     1) is target CPU up (VCPUOP_is_up hypercall?)
     2) if yes, then VCPUOP_down to pause it.
     3) VCPUOP_register_vcpu_info
     4) if it was down, then VCPUOP_up to bring it back up

    But since VCPUOP_down, VCPUOP_is_up, and VCPUOP_up are
    not allowed on HVM guests we can't do this. This patch
    enables this.

    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 18552539]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-4
changelog:
  - Add support for openvswitch
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 15886237]
    [bug 17885201]
  - Disable netfilter on bridges.
    Also disable bridge multicast_snooping: Linux bridge can not forward packets to
    its ports and it is not needed.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 15871028]
    [bug 18007687] [bug 16746299]
  - Add "allowhugepage" flag as a synonym for "allowsuperpage"
    for compatibility with previous releases.

    Signed-off-by: Dave McCracken <dave.mccracken@oracle.com>
    Acked-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 13821795]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-3
changelog:
  - Disable iptables when adding a VIF to a Bridge.
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com> [bug 14611657]
  - Create a loop device node if it does not exist on VM start.
    After this patch, kernel max_loop could be 8.
    Signed-off-by: Zhigang Wang <zhigang.x.wang@oracle.com>
    Signed-off-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Kurt Hackel <kurt.hackel@oracle.com>


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.0-2
changelog:
  - Set max cstate to 1.
    Signed-off-by: Joe Jin <joe.jin@oracle.com> [bug 13703504]
  - xen: increase default max grant frames from 32 to 64.
    We advertise as being able to launch 32VIFs and 8 VBDs.
    But currently the amount of frames that a guest uses is
    based on this simple algebra:

    
    So if we have 31VIFs we cannot have any more VBDs nor any
    more VIFs. By increasing the value to 64 we have some extra
    headroom _and_ we can have at least 8VBDs (or more).

    Acked-by: Adnan Misherfi <adnan.misherfi@oracle.com>
    Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> [bug 16039922]
  - Add "OVM" to version information. This is visible through
    smbios/dmidecode information for HVM guests. [bug 11792774]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-196.0.3.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=0d9fb2636dda5179d7597d04d21e37f26e62e344
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Revert "xend: fix memory leak of XendConfig.XendConfig object" (Konrad Rzeszutek Wilk)  [Orabug: 28506610]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-196.0.2.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=02cec92b3eb1612e37616b10400d82f1e3d8de85
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - l1tf: Utility to offline/online SMT siblings. (Ross Philipson)  [Orabug: 28487050]  {CVE-2018-3646}
  - x86/spec-ctrl: Introduce an option to control L1D_FLUSH for HVM guests (Andrew Cooper)  [Orabug: 28487050]  {CVE-2018-3620} {CVE-2018-3646}
  - x86/msr: Virtualise MSR_FLUSH_CMD for guests (Andrew Cooper)  [Orabug: 28487050]  {CVE-2018-3646} {CVE-2018-3646}
  - x86/spec-ctrl: CPUID/MSR definitions for L1D_FLUSH (Andrew Cooper)  [Orabug: 28487050]  {CVE-2018-3646} {CVE-2018-3646}
  - x86/spec-ctrl: Calculate safe PTE addresses for L1TF mitigations (Andrew Cooper)  [Orabug: 28487050]  {CVE-2018-3620} {CVE-2018-3646}
  - x86: command line option to avoid use of secondary hyper-threads (Jan Beulich)  [Orabug: 28487050]  {CVE-2018-3646}
  - cpupools: fix state when downing a CPU failed (Jan Beulich)  [Orabug: 28487050]  {CVE-2018-3646}


author: Manjunath Patil <manjunath.b.patil@oracle.com> - 4.4.4-196.0.1.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=b059d1de3b211fe5582c63f64b4822b9f85eafd2
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: fix memory leak of XendConfig.XendConfig object (Manjunath Patil)  [Orabug: 28165871] 
  - x86/HVM: Restart ioreq processing state machine (Boris Ostrovsky)  [Orabug: 28200424] 
  - x86/spec-ctrl: Mitigations for LazyFPU (Andrew Cooper)  [Orabug: 28135175]  {CVE-2018-3665}
  - x86: Support fully eager FPU context switching (Andrew Cooper)  [Orabug: 28135175]  {CVE-2018-3665}
  - svm: fix incorrect TSC scaling (Haozhong Zhang)  [Orabug: 27182906] 
  - x86/AMD-ucode: correct multiple container handling (Jan Beulich)  [Orabug: 28157269] 
  - x86, amd_ucode: fix coverity issues found in cpu_request_microcode() (Aravind Gopalakrishnan)  [Orabug: 28157269] 
  - [xenmicrocode] Fix error reporting on successful return from tool (Ross Philipson)  [Orabug: 28128754] 
  - x86: correct default_xen_spec_ctrl calculation (Jan Beulich)  [Orabug: 28035001] 
  - x86/msr: Virtualise MSR_SPEC_CTRL.SSBD for guests to use (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/Intel: Mitigations for GPZ SP4 - Speculative Store Bypass (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/AMD: Mitigations for GPZ SP4 - Speculative Store Bypass (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Introduce a new `spec-ctrl=` command line argument to replace `bti=` (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/cpuid: Improvements to guest policies for speculative sidechannel features (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Explicitly set Xen's default MSR_SPEC_CTRL value (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Split X86_FEATURE_SC_MSR into PV and HVM variants (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Elide MSR_SPEC_CTRL handling in idle context when possible (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Rename bits of infrastructure to avoid NATIVE and VMEXIT (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Fold the XEN_IBRS_{SET,CLEAR} ALTERNATIVES together (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Merge bti_ist_info and use_shadow_spec_ctrl into spec_ctrl_flags (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Express Xen's choice of MSR_SPEC_CTRL value as a variable (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Read MSR_ARCH_CAPABILITIES only once (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Assume that STIBP feature is always available (Boris Ostrovsky)  [Orabug: 28035001]  {CVE-2018-3639}
  - x86/spec_ctrl: Updates to retpoline-safety decision making (Andrew Cooper)  [Orabug: 28035001]  {CVE-2018-3639}
  - Revert "x86/boot: Disable IBRS in intr/nmi exit path at bootup stage" (Boris Ostrovsky)  [Orabug: 28035001]  {CVE-2018-3639}


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-196.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=c45d9e9dbce28139924ca2ccc1fd43aabb6275a1
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Red-tape: Update the repo with CVE XSA-262 (Boris Ostrovsky)  [Orabug: 27923592]  {CVE-2018-10981}
  - Red-tape: Update the repo with CVE XSA-261 (Boris Ostrovsky)  [Orabug: 27923542]  {CVE-2018-10982}


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-195.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=0c1b2f70b50bab700bf317050569b741b1ef07d3
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/HVM: guard against emulator driving ioreq state in weird ways (Jan Beulich)  [Orabug: 27923592] 
  - x86/vpt: add support for IO-APIC routed interrupts (Xen Project Security Team)  [Orabug: 27923542]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-194.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=00657ad4a0f0c176db6ee3c0e623f97fabd31a4d
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - vnuma: unset smt even if vnuma is off (Elena Ufimtseva)  [Orabug: 27950640] 
  - x86/paging: don't unconditionally BUG() on finding SHARED_M2P_ENTRY (Jan Beulich)  [Orabug: 27965256]  {CVE-2017-17565}
  - x86/mm: don't wrongly set page ownership (Jan Beulich)  [Orabug: 27965240]  {CVE-2017-17566}
  - misc/xenmicrocode: Upload /lib/firmware/<some blob> to the hypervisor (Konrad Rzeszutek Wilk)  [Orabug: 27957807]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-193.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=1d72810321a4043decd76716556efe3f2ff6efbb
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/traps: Fix handling of #DB exceptions in hypervisor context (Andrew Cooper)  [Orabug: 27963997]  {CVE-2018-8897}
  - x86/traps: Use an Interrupt Stack Table for #DB (Andrew Cooper)  [Orabug: 27963997]  {CVE-2018-8897}
  - x86/pv: Move exception injection into {,compat_}test_all_events() (Andrew Cooper)  [Orabug: 27963997]  {CVE-2018-8897}
  - x86/traps: Fix %dr6 handing in #DB handler (Andrew Cooper)  [Orabug: 27963997]  {CVE-2018-8897}
  - x86/traps: Misc non-functional improvements to set_debugreg() (Andrew Cooper)  [Orabug: 27963997]  {CVE-2018-8897}
  - x86/pv: Several bugs in set_debugreg() (Ross Philipson)  [Orabug: 27963997]  {CVE-2018-8897}
  - x86/pv: The do_get_debugreg CR4.DE condition is inverted. (Ross Philipson)  [Orabug: 27963997]  {CVE-2018-8897}


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-192.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=c913e6a8c9917d75928a7acc47d709a18566cb20
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - vnuma: dont turn on smt for odd number of vcpus (Elena Ufimtseva)  [Orabug: 27950640]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-191.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=9ddcc629ed3d53a31784d473607c9a1a97c70fba
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - vnuma: dont fail guest creation if vnuma cannot be set (Elena Ufimtseva)  [Orabug: 27734123]


author: Joao Martins <joao.m.martins@oracle.com> - 4.4.4-190.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=fef9a32a5f77478839a9c5fa8e7dfc3870412a7f
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/vMSI-X: honor all mask requests (Jan Beulich)  [Orabug: 27824792]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.4-189.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=69fbc2bc62a19e5200fc38d61ce2cda3a70303bb
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xen: increase extra_domU_irqs to 512 (Zhigang Wang)  [Orabug: 27761056]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-188.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=72a248ecf9d4dddd4008b97e5edeb820ecc65081
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - remove bogus file in the branch. (Elena Ufimtseva)


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-187.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=c4ba212cabb6c72f8acc756d6235888c2d555366
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/shadow: fix ref-counting error handling (Jan Beulich)  [Orabug: 27185392]  {CVE-2017-17564}
  - x86/shadow: fix refcount overflow check (Jan Beulich)  [Orabug: 27185397]  {CVE-2017-17563}


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-186.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=80331b8e3eec67655c727594b462048a2b5e1794
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - hvmloader: Initialize a variable before we use it (Patrick Colp)  [Orabug: 27748206] 
  - x86/hvm: indicate avaliability of HW support of APIC virtualization to HVM guests (Boris Ostrovsky)  [Orabug: 27200766] 
  - x86/boot: Disable IBRS in intr/nmi exit path at bootup stage (Zhenzhong Duan)  [Orabug: 27411047] 
  - Fix a wrong check in DO_SPEC_CTRL_EXIT_TO_XEN (Zhenzhong Duan)  [Orabug: 27738588]  {CVE-2017-5715}


author: Dongli Zhang <dongli.zhang@oracle.com> - 4.4.4-185.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=4736feabb59b84ca646d9beda05f450cabf84b21
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xenstore: add assertion in database dumping code (Wei Liu)  [Orabug: 27718398] 
  - xenstore: send error earlier in do_mkdir (Wei Liu)  [Orabug: 27718398] 
  - xenstore: add memory allocation debugging capability (Juergen Gross)  [Orabug: 27718398] 
  - xenstore: use temporary memory context for firing watches (Juergen Gross)  [Orabug: 27718398] 
  - xenstore: add explicit memory context parameter to get_node() (Juergen Gross)  [Orabug: 27718398] 
  - xenstore: add explicit memory context parameter to read_node() (Juergen Gross)  [Orabug: 27718398] 
  - xenstore: add explicit memory context parameter to get_parent() (Juergen Gross)  [Orabug: 27718398] 
  - xenstore: call each xenstored command function with temporary context (Juergen Gross)  [Orabug: 27718398] 
  - cxenstored: document a bunch of short options in help string (Wei Liu)  [Orabug: 27718398]


author: Joao Martins <joao.m.martins@oracle.com> - 4.4.4-184.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=1ae19167421f9c6b0ecbf4507f618150f9e19bc1
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xenbaked.c: Avoid divide by zero issue (Joe Jin)  [Orabug: 27694754] 
  - xen/trace: Fix trace metadata page count calculation (revert fbf96e6) (George Dunlap)  [Orabug: 27694745] 
  - x86/spectre: Make retpoline code match upstream version (Patrick Colp)  
  - x86/traps/spectre: Fix IO emulation stub code (Boris Ostrovsky)  [Orabug: 27693370]  {CVE-2017-5715}


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-183.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=b8f12ae8fb6f3ac62253011fc3b10746ca158895
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: use vcpus variable in log.warn (Elena Ufimtseva)


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-182.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=4c4de67c01882b04c99a02811d7f0b8c5b71a6de
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: turn off smt if vcpus are not multiple of threads (Elena Ufimtseva)  [Orabug: 27648711] 
  - xend: fix preserving smt across reboot (Elena Ufimtseva)  [Orabug: 27648711] 
  - xend: fix is_vnuma_off function (Elena Ufimtseva)


author: Joao Martins <joao.m.martins@oracle.com> - 4.4.4-181.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=989733b8e6ffca5520badc3c459dba3cbcd95c32
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - mm, sysctl, xend: only create when there's enough scrubbed memory (Joao Martins)  [Orabug: 27534600]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-180.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=5e4132923de98edcb68a7f0d29cc8aa5a4bd3e54
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - gnttab: don't blindly free status pages upon version change (Andrew Cooper)  [Orabug: 27532426]  {CVE-2018-7541}
  - memory: don't implicitly unpin for decrease-reservation (Andrew Cooper)  [Orabug: 27532396]  {CVE-2018-7540}
  - xend: allow setting topology if smt is off in bios (Elena Ufimtseva)  [Orabug: 27601545] 
  - xend: check existence of vbd device when parsing device model args (Annie Li)  [Orabug: 27607288]


author: Joao Martins <joao.m.martins@oracle.com> - 4.4.4-179.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=db44b2b1c38fb3511db1531b98019a92bf6bf86d
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/intel: change default governor to performance (Joao Martins)  [Orabug: 27182738] 
  - x86/cpuidle: Disable deep C-states due to erratum AAJ72 (Joao Martins)  [Orabug: 27182738] 
  - Revert "set max cstate to 1" (Joao Martins)  [Orabug: 27182738] 
  - x86/cpuidle: add new CPU families (Jan Beulich)  [Orabug: 27182738] 
  - x86/Intel: Broadwell doesn't have PKG_C{8,9,10}_RESIDENCY MSRs (Jan Beulich)  [Orabug: 27182738] 
  - x86: support newer Intel CPU models (Jan Beulich)  [Orabug: 27182738] 
  - mwait-idle: add KBL support (Len Brown)  [Orabug: 27182738] 
  - mwait-idle: add SKX support (Len Brown)  [Orabug: 27182738] 
  - mwait_idle: Skylake Client Support (Len Brown)  [Orabug: 27182738] 
  - x86: support newer Intel CPU models (Jan Beulich)  [Orabug: 27182738] 
  - x86/idle: update to include further package/core residency MSRs (Jan Beulich)  [Orabug: 27182738] 
  - mwait-idle: support additional Broadwell model (Len Brown)  [Orabug: 27182738] 
  - x86/mwait-idle: Broadwell support (Len Brown)  [Orabug: 27182738] 
  - x86/mwait-idle: disable Baytrail Core and Module C6 auto-demotion (Len Brown)  [Orabug: 27182738] 
  - mwait-idle: add CPU model 54 (Atom N2000 series) (Jan Kiszka)  [Orabug: 27182738] 
  - mwait-idle: support Bay Trail (Len Brown)  [Orabug: 27182738] 
  - mwait-idle: allow sparse sub-state numbering, for Bay Trail (Len Brown)  [Orabug: 27182738]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-178.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=212ef00b81e719a6a0ced25ecefadaf061c9ed42
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: restore smt parameter on guest reboot (Elena Ufimtseva)  [Orabug: 27510558]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-177.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=107cad55ddd564f617b99bdaaacbc0d6c52c42bc
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spec_ctrl: Fix several bugs in SPEC_CTRL_ENTRY_FROM_INTR_IST (Andrew Cooper)  [Orabug: 27553367]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: allow easier disabling of BTI mitigations (Zhenzhong Duan)  [Orabug: 27553367]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/boot: Make alternative patching NMI-safe (Andrew Cooper)  [Orabug: 27553367]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - xen/cmdline: Fix parse_boolean() for unadorned values (Andrew Cooper)  [Orabug: 27553367]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - Optimize the context switch code a bit (Zhenzhong Duan)  [Orabug: 27553367]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - Update init_speculation_mitigations() to upstream's (Zhenzhong Duan)  [Orabug: 27553367]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/entry: Avoid using alternatives in NMI/#MC paths (Andrew Cooper)  [Orabug: 27553367]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - Update RSB related implementation to upstream ones (Zhenzhong Duan)  [Orabug: 27553367]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}


author: Annie Li <annie.li@oracle.com> - 4.4.4-176.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=855c9cb4996c3119f601ca7aa2a4d7a66ee7e6f5
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - hvmloader: Correct nr_vnodes when init_vnuma_info() fails (Annie Li)  [Orabug: 27525698]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-175.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=7ae5b9c8c5709721433bea9076154f6c4e2857d6
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: if secure boot is enabled dont write pci config space (Elena Ufimtseva)  [Orabug: 27465360]


author: Annie Li <annie.li@oracle.com> - 4.4.4-174.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=a1f65742255a58a7d83cf968417be6416a5d98ee
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Fail migration if destination does not allow pv guest running (Annie Li)  [Orabug: 27426509]


author: Annie Li <annie.li@oracle.com> - 4.4.4-173.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=74c86970664b86233328ba7ebcc01b344c0b85a9
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Enable creating pv guest on OVM3.4.5 by default (Annie Li)  [Orabug: 27445908] 
  - x86: Expose CPUID.7, EDX.26->27 and CPUID.0x80000008, EBX.12 (redux) (Konrad Rzeszutek Wilk)  [Orabug: 27445650]


author: Dongli Zhang <dongli.zhang@oracle.com> - 4.4.4-172.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=46b7f46f7d7b714dc053d52972d66e257f52f97f
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xenconsole: Ensure exclusive access to console using locks (Dongli Zhang)  [Orabug: 27247602]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-171.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=c847d95894eb274e602b901ef8e949f275da45a4
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xen: No dependencies on dracut and microcode_ctl RPMs (Boris Ostrovsky)  [Orabug: 27409741] 
  - x86/svm: clear CPUID IBPB when feature is not supported (Elena Ufimtseva)  [Orabug: 27356726] 
  - x86/domain: Move hvm_vcpu_initialize() before cpuid_policy_changed() (Elena Ufimtseva)  [Orabug: 27356726] 
  - x86, amd_ucode: support multiple container files appended together (Aravind Gopalakrishnan)  [Orabug: 27356726]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-170.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=ed79acd4892f17d776c08aaddd188d9dca1690ea
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xen/x86: Make sure identify_cpu() is called with traps enabled (Joao Martins)  [Orabug: 27404005] 
  - xend: disallow pv guests to run (Joao Martins)  [Orabug: 27404003] 
  - hvmloader, x86/hvm, domctl: enumerate apicid based on vcpu_to_vnode (Joao Martins)  [Orabug: 27404021] 
  - xend: conditionally use dom0 vcpus for vnuma auto (Joao Martins)  [Orabug: 27404021] 
  - x86/Spectre: Set thunk to THUNK_NONE if compiler support is not available (Boris Ostrovsky)  [Orabug: 27375656]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-169.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=535eb09ca871b838fc3c5762047fee9eba0aa351
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86: Always print info about speculative mitigation facilities (Boris Ostrovsky)  [Orabug: 27352416]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Don't use retpoline if CONFIG_INDIRECT_THUNK is not set (Boris Ostrovsky)  [Orabug: 27352416]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-168.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=885b730526c1764dbfc356c320f93e5a1a93f862
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Red-tape: Update the repo with CVEs for XSA-254 (Boris Ostrovsky)  [Orabug: 27350228]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - rpm: Add microcode_ctl dependency (Boris Ostrovsky)  
  - x86: cpuint. Move the detection of CPU capabilities (Konrad Rzeszutek Wilk)  
  - migration: Set the CPUID _before_ XEN_DOMCTL_sethvmcontext (Konrad Rzeszutek Wilk)  
  - x86/xen: Make cpu_has_[stibp,ibrsp,etc] work. (Konrad Rzeszutek Wilk)  
  - x86: Expose CPUID.7, EDX.26->27 and CPUID.0x80000008, EBX.12 (Konrad Rzeszutek Wilk)  
  - x86/idle: Clear SPEC_CTRL while idle (Andrew Cooper)  
  - x86/cpuid: Offer Indirect Branch Controls to guests (Andrew Cooper)  
  - x86/ctxt: Issue a speculation barrier between vcpu contexts (Andrew Cooper)  
  - x86/entry: Clobber the Return Stack Buffer on entry to Xen (Andrew Cooper)  
  - x86/boot: Calculate the most appropriate BTI mitigation to use (Andrew Cooper)  
  - x86/entry: Use MSR_SPEC_CTRL at each entry/exit point (Andrew Cooper)  
  - x86: Protect unaware domains from meddling hyperthreads (Andrew Cooper)  
  - x86/hvm: Permit guests direct access to MSR_{SPEC_CTRL,PRED_CMD} (Andrew Cooper)  
  - x86/migrate: Move MSR_SPEC_CTRL on migrate (Andrew Cooper)  
  - x86/msr: Emulation of MSR_{SPEC_CTRL,PRED_CMD} for guests (Andrew Cooper)  
  - x86: Introduce a common cpuid_policy_updated() (Andrew Cooper)  
  - x86: Introduce framework for cpuid policy updates (Boris Ostrovsky)  
  - x86: Introduce cpuid_policy (Boris Ostrovsky)  
  - x86/msr: introduce struct msr_vcpu_policy (Sergey Dyasli)  
  - x86/cmdline: Introduce a command line option to disable IBRS/IBPB, STIBP and IBPB (Andrew Cooper)  
  - xen: add an optional string end parameter to parse_bool() (Juergen Gross)  
  - x86/feature: Definitions for Indirect Branch Controls (Andrew Cooper)  
  - x86: Introduce alternative indirect thunks (Andrew Cooper)  
  - x86: Backport setup_force_cpu_cap (Boris Ostrovsky)  
  - x86/amd: Try to set lfence as being Dispatch Serialising (Andrew Cooper)  
  - x86/boot: Report details of speculative mitigations (Andrew Cooper)  
  - x86: Support indirect thunks from assembly code (Andrew Cooper)  
  - common/wait: Clarifications to wait infrastructure (Andrew Cooper)  
  - x86: Support compiling with indirect branch thunks (Andrew Cooper)  
  - x86/entry: Erase guest GPR state on entry to Xen (Andrew Cooper)  
  - x86/pv: Move hypercall handling up into C (Andrew Cooper)  
  - x86/hvm: Use SAVE_ALL to construct the cpu_user_regs frame after VMExit (Andrew Cooper)  
  - x86/entry: Rearrange RESTORE_ALL to restore register in stack order (Andrew Cooper)  
  - x86/entry: Remove support for partial cpu_user_regs frames (Andrew Cooper)  
  - x86/alt: Introduce ALTERNATIVE{,_2} macros (Andrew Cooper)  
  - x86/alt: Break out alternative-asm into a separate header file (Andrew Cooper)


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-167.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=5139d82b5ec7cfc2f493f30e1be7e40ef1b76c42
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/hvm: assert that we we saved a sane number of MSRs. (Tim Deegan)  [Orabug: 27298966] 
  - x86: Avoid corruption on migrate for vcpus using CPUID Faulting (Andrew Cooper)  [Orabug: 27298966] 
  - x86/hvm: Don't corrupt the HVM context stream when writing the MSR record (Andrew Cooper)  [Orabug: 27298966] 
  - x86: generic MSRs save/restore (Jan Beulich)  [Orabug: 27298966] 
  - x86/msr: introduce guest_wrmsr() (Sergey Dyasli)  [Orabug: 27298966] 
  - x86/msr: introduce guest_rdmsr() (Sergey Dyasli)  [Orabug: 27298966] 
  - x86/msr: introduce struct msr_domain_policy (Sergey Dyasli)  [Orabug: 27298966] 
  - microcode: Always scan the initramfs for microcode (Konrad Rzeszutek Wilk)  [Orabug: 27298519] 
  - x86: Move microcode loading earlier (Konrad Rzeszutek Wilk)  
  - livepatch: Alternative backport compile issues under Xen 4.4 (Konrad Rzeszutek Wilk)  [Orabug: 27298556] 
  - x86: support 2- and 3-way alternatives (Jan Beulich)  [Orabug: 27298556] 
  - xen/x86/alternatives: Do not use sync_core() to serialize I$ (Borislav Petkov)  [Orabug: 27298556] 
  - livepatch: NOP if func->new_addr is zero. (Konrad Rzeszutek Wilk)  [Orabug: 27298556] 
  - alternatives: x86 rename and change parameters on ARM (Konrad Rzeszutek Wilk)  [Orabug: 27298556] 
  - x86/arm64: Expose the ALT_[ORIG|REPL]_PTR macros to header files. (Konrad Rzeszutek Wilk)  [Orabug: 27298556] 
  - xsplice: Add support for alternatives (Ross Lagerwall)  [Orabug: 27298556] 
  - x86: Alter nmi_callback_t typedef (Konrad Rzeszutek Wilk)  [Orabug: 27298556] 
  - x86/alternatives: correct near branch check (Jan Beulich)  [Orabug: 27298556] 
  - x86: disable CR0.WP while applying alternatives (Andrew Cooper)  [Orabug: 27298556] 
  - work around Clang generating .data.rel.ro section for init-only files (Andrew Cooper)  [Orabug: 27298556] 
  - x86: move alternative.c data fully into .init.* (Jan Beulich)  [Orabug: 27298556] 
  - x86: port the basic alternative mechanism from Linux to Xen (Feng Wu)  [Orabug: 27298556] 
  - x86: add definitions for NOP operation (Feng Wu)  [Orabug: 27298556]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-166.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=d939909cabf425f6f8c99f4150bde5629affa911
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/setup: do not relocate modules and crashkernel region over the Xen image (Daniel Kiper)  
  - x86/EFI: meet further spec requirements for runtime calls (Jan Beulich)  [Orabug: 27227150]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-165.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=c6913608b444ad8d0d46aea351bf712ad6267d7c
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/boot: add missing branch to the dom0 kernel data acquisition (Daniel Kiper)  [Orabug: 27234709] 
  - Fix dom0_vcpus_pin regression (Konrad Rzeszutek Wilk)  [Orabug: 27234738] 
  - vNUMA: fix the selection of correct number of cores (Elena Ufimtseva)  [Orabug: 27222930]


author: Zhigang Wang <zhigang.x.wang@oracle.com> - 4.4.4-164.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=76fa06f78f625155eb2e190689158d6bf61fa1e5
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: disable TLSv1 and DES/3DES ciphers (Zhigang Wang)  [Orabug: 27153043]


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-163.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=3878ccb773aa85bc16f2298a0c83488adbc1597a
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend/python: Add support for a "pre-suspend" tool (Patrick Colp)  
  - xend/python: Add 'enclosure-type' (Konrad Rzeszutek Wilk)  [Orabug: 27201094] 
  - xend/python: Expand the list of parameters that can be changed to include all (Konrad Rzeszutek Wilk)  
  - xend/python: Export DMI asset-tag and platform to guests. (Konrad Rzeszutek Wilk)  [Orabug: 27201094] 
  - xend/pxm: Include pxm in XenStore when hotplugging PCI devices (Konrad Rzeszutek Wilk)  [Orabug: 27119689]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-162.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=66d69d7e0f8f0d04074480a99c32d6d8f63a487f
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - vNUMA: assign vcpus to nodes by interleaving (Elena Ufimtseva)  [Orabug: 26498733]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-161.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=1fba6121878ccfeedbe50318993e30d688d97588
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - vNUMA: disable vNUMA if fail to find vcpus for pinning (Elena Ufimtseva)  
  - vNUMA: fix cpus assignment in manual vNUMA mode. (Elena Ufimtseva)  [Orabug: 26828896]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-160.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=5bfa73e90bca0c9c1953bd2f82502e9298839aaa
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xen/x86: do not put .efi.pe.header section into LOAD segment (Daniel Kiper)  [Orabug: 27142967] 
  - xen/x86: do not relocate below the end of current Xen image placement (Daniel Kiper)  [Orabug: 27132735] 
  - xen/x86: do not relocate the Xen image if the bootloader did the work for us (Daniel Kiper)  [Orabug: 27132735]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-159.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=590d794052d5828fc2b5335d3ffe1900ed352567
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/shadow: correct SH_LINEAR mapping detection in sh_guess_wrmap() (Andrew Cooper)  [Orabug: 27147992]  {CVE-2017-15592} {CVE-2017-15592}
  - x86: don't wrongly trigger linear page table assertion (Jan Beulich)  [Orabug: 27147978]  {CVE-2017-15595}


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-158.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=3aa84be2fde9f99b4903a56114e9a1518f9e3d35
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/cpu: fix IST handling during PCPU bringup (Andrew Cooper)  [Orabug: 26901419]  {CVE-2017-15594}
  - x86/shadow: Don't create self-linear shadow mappings for 4-level translated guests (Andrew Cooper)  [Orabug: 26901411]  {CVE-2017-15592}
  - x86: Disable the use of auto-translated PV guests (Andrew Cooper)  [Orabug: 26901411]  {CVE-2017-15592}
  - x86: don't allow page_unlock() to drop the last type reference (Jan Beulich)  [Orabug: 26901398]  {CVE-2017-15593}
  - x86: don't store possibly stale TLB flush time stamp (Jan Beulich)  [Orabug: 26901373]  {CVE-2017-15588}
  - x86/mm: Disable PV linear pagetables by default (George Dunlap)  [Orabug: 26901355]  {CVE-2017-15595}
  - x86: limit linear page table use to a single level (Jan Beulich)  [Orabug: 26901355]  {CVE-2017-15595}
  - x86/HVM: prefill partially used variable on emulation paths (Jan Beulich)  [Orabug: 26901336]  {CVE-2017-15589}
  - x86/FLASK: fix unmap-domain-IRQ XSM hook (Jan Beulich)  [Orabug: 26901300]  {CVE-2017-15590}
  - x86/IRQ: conditionally preserve irq <-> pirq mapping on map error paths (Jan Beulich)  [Orabug: 26901300]  {CVE-2017-15590}
  - x86/MSI: disallow redundant enabling (Jan Beulich)  [Orabug: 26901300]  {CVE-2017-15590}
  - x86: enforce proper privilege when (un)mapping pIRQ-s (Jan Beulich)  [Orabug: 26901300]  {CVE-2017-15590}
  - x86: don't allow MSI pIRQ mapping on unowned device (Jan Beulich)  [Orabug: 26901300]  {CVE-2017-15590}
  - gnttab: fix pin count / page reference race (Jan Beulich)  [Orabug: 26901262]  {CVE-2017-15597}


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-157.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=6248afbc8c22b32a51b166469870f3f469e1cbc4
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - elfloader: call modify_xen_mappings() with start->end range. (Gregory Herrero)  
  - xen.spec: Add requires on xen-tools for ovs-agent (Konrad Rzeszutek Wilk)  
  - xen.spec: Add sbsignxen to sign xen.efi binary. (Srinivas Maturi)  [Orabug: 26900518]


author: Daniel Kiper <daniel.kiper@oracle.com> - 4.4.4-156.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=03e8e2666c76f4e6e61d13ddca742507bb7f9d0d
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xen/x86: Build xen.mb.efi directly from xen-syms (Daniel Kiper)  [Orabug: 25885480] 
  - xen/x86/efi: Verify dom0 kernel with SHIM_LOCK protocol in efi_multiboot2() (Daniel Kiper)  [Orabug: 25885480] 
  - efi: split out efi_shim_lock() (Daniel Kiper)  [Orabug: 25885480] 
  - xen/x86: Add some addresses to the Multiboot2 header (Daniel Kiper)  [Orabug: 25885480] 
  - xen/x86: Add some addresses to the Multiboot header (Daniel Kiper)  [Orabug: 25885480] 
  - xen/x86: Manually build PE header (Daniel Kiper)  [Orabug: 25885480] 
  - xen: Introduce XEN_COMPILE_POSIX_TIME (Daniel Kiper)  [Orabug: 25885480] 
  - xen/x86/boot: Align the stack as UEFI spec requires (Daniel Kiper)  
  - gnttab: also validate PTE permissions upon destroy/replace (Jan Beulich)  [Orabug: 26775933]  {CVE-2017-14319}
  - tools/xenstore: dont unlink connection object twice (Juergen Gross)  [Orabug: 26775950]  {CVE-2017-14317}
  - xen/mm: make sure node is less than MAX_NUMNODES (George Dunlap)  [Orabug: 26776011]  {CVE-2017-14316}
  - KSPLICE: fix extern extable entry in compat/entry.S (Vegard Nossum)


author: Joao Martins <joao.m.martins@oracle.com> - 1.2.14-19.el6
changelog:
  - BUILDINFO: commit=435858d1ca633e9db03c4391edd63191f10aab78
  - buildrpm: Release of 1.2.14-19 (Joao Martins)  
  - libxl: fix vm lock overwritten bug (Wang Yufei (James))  
  - libxl: fix coverity issues introduced by 6a95edf (Joao Martins)  
  - libxl: add tunnelled migration support (Bob Liu)  
  - libxl: add p2p migration (Joao Martins)


author: Joao Martins <joao.m.martins@oracle.com> - 1.2.14-18.el6
changelog:
  - BUILDINFO: commit=009e438b051a6c5916798ed3410b106232401083
  - buildrpm: Release of 1.2.14-18 (Joao Martins)  
  - xlconfigtest: add tests for 'nestedhvm' support (Wim ten Have)  
  - xenconfig: add conversions for xen-xl (Wim ten Have)  
  - libxl: set nestedhvm for mode host-passthrough (Wim ten Have)  
  - cpu: Introduce virCPUCheckFeature (Jiri Denemark)  
  - cpu: Add x86FeatureInData (Jiri Denemark)  
  - cpu: Make x86ModelFromCPU a bit smarter (Jiri Denemark)


author: Joao Martins <joao.m.martins@oracle.com> - 1.2.14-17.el6
changelog:
  - BUILDINFO: commit=57db3df3e96f681bff416416d666446c4d7819f5
  - buildrpm: Release of 1.2.14-17 (Joao Martins)  
  - libxl: describe host cpu features based on hwcaps (Joao Martins)  
  - libxl: describe host topology in capabilities (Joao Martins)  
  - xenconfig: fix handling of NULL disk source (Wim ten Have)  
  - xenFormatXLDisk: Don't leak @target (Michal Privoznik)  
  - xenconfig: fix xml to xl.cfg conversion with no graphics (Joao Martins)  
  - xenFormatXLDomainDisks: avoid double free on OOM testing (Wim ten Have)  
  - virConfSaveValue: protect against a NULL pointer reference (Wim ten Have)


author: Joao Martins <joao.m.martins@oracle.com> - 1.2.14-15
changelog:
  - xmconfigdata: drop tests for multi serial
  - xlconfigdata: add tests for multi serial
  - xenconfig: rm format/parse multi serial for xen-xm
  - libxl: support serial list
  - xlconfigtest: add test case for type=vif in xl format
  - xenFormatNet: correct `type=netfront' to 'type=vif' to match libxl
  - extract XEN_CONFIG_FORMAT_XM/XL to xen_common.h


author: Joao Martins <joao.m.martins@oracle.com> - 1.2.14-14
changelog:
  - libxl: reverse defaults on HVM net device attach
  - libxl: use serial device for console when targetType is serial


author: Joao Martins <joao.m.martins@oracle.com> - 1.2.14-12
changelog:
  - libxl: implement virDomainBlockStats
  - util: add virDiskNameParse to handle disk and partition idx
  - Add wrappers for virDomainDiskIndexBy*


author: Joao Martins <joao.m.martins@oracle.com> - 1.2.14-10
changelog:
  - libxl: implement virDomainInterfaceStats
  - conf: add caps to virDomainSnapshotDefFormat
  - conf: add caps to virDomainObjFormat/SaveStatus
  - bhyve: fix build
  - Fix build after recent patches
  - libxl: set net device prefix
  - conf: add caps to virDomainSaveConfig
  - conf: add caps to virDomainDefFormat*
  - conf: add prefix in virDomainNetDefParseXML
  - conf: add net device prefix to capabilities


author: Joao Martins <joao.m.martins@oracle.com> - 1.2.14-9
changelog:
  - libxl: Add timestamp to the libxl driver log.
  - libxl: dispose libxl_dominfo after libxl_domain_info()
  - libxl: support VNC passwd
  - libxl: initialize sdl.opengl defbool in libxlMakeVfb
  - libxl: initialize vfb defbools in libxlMakeVfb


author: Joao Martins <joao.m.martins@oracle.com> - 1.2.14-8
changelog:
  - xen: Check return value of virStringReplace
  - libxl: add support for rbd qdisk
  - xenconfig: support xl<->xml conversion of rbd disk devices
  - xenconfig: produce key=value disk config syntax in xl formatter
  - Xen: tests: remove net-ioemu xm config test


author: Daniel Veillard <veillard@redhat.com> - 1.2.14-1
changelog:
  - qemu: Implement memory device hotplug
  - Implement public API for virDomainPinIOThread
  - Implement public API for virDomainGetIOThreadsInfo
  - SRIOV NIC offload feature discovery
  - a lot of improvement and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 1.2.12-1
changelog:
  - CVE-2015-0236: qemu: Check ACLs when dumping security info from snapshots
  - CVE-2015-0236: qemu: Check ACLs when dumping security info from save image
  - a lot of improvement and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 1.2.11-1
changelog:
  - CVE-2014-8131: Fix possible deadlock and segfault in qemuConnectGetAllDomainStats()
  - CVE-2014-7823: dumpxml: security hole with migratable flag
  - Implement public API for virDomainGetFSInfo
  - Add define support for the new throttle options
  - a number of improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 1.2.10-1
changelog:
  - vbox: various drivers improvements
  - libxl: various drivers improvements
  - Internal driver refactoring
  - a number of improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 1.2.9-1
changelog:
  - CVE-2014-3657: domain_conf: fix domain deadlock
  - CVE-2014-3633: qemu: blkiotune: Use correct definition when looking up disk
  - Introduce virNodeAllocPages
  - event: introduce new event for tunable values
  - add migration support for OpenVZ driver
  - Add support for fetching statistics of completed jobs
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 1.2.8-1
changelog:
  - blockcopy: virDomainBlockCopy with XML destination, typed params
  - Introduce API for retrieving bulk domain stats
  - Introduce virDomainOpenGraphicsFD API
  - storage: ZFS support
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 1.2.6-1
changelog:
  - libxl: add migration support and fixes
  - various improvements and fixes for NUMA
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 1.2.5-1
changelog:
  - LSN-2014-0003: Don't expand entities when parsing XML (security)
  - Introduce virDomain{Get,Set}Time APIs
  - Introduce virDomainFSFreeze() and virDomainFSThaw() public API
  - various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 1.2.3-1
changelog:
  - add new virDomainCoreDumpWithFormat API
  - conf: Introduce virDomainDeviceGetInfo API
  - more features and fixes on bhyve driver
  - lot of cleanups and improvement on the Xen driver
  - a lot of various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 1.2.2-1
changelog:
  - add LXC from native conversion tool
  - vbox: add support for v4.2.20+ and v4.3.4+
  - Introduce Libvirt Wireshark dissector
  - Fix CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC
  - a lot of various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 1.2.1-1
changelog:
  - Fix s CVE-2014-0028 event: filter global events by domain:getattr ACL
  - Fix CVE-2014-1447 Don't crash if a connection closes early
  - Fix CVE-2013-6458-1 qemu: Do not access stale data in virDomainBlockStats
  - Fix CVE-2013-6457 libxl: avoid crashing if calling `virsh numatune' on inactive domain
  - Fix CVE-2013-6436: fix crash in lxcDomainGetMemoryParameters
  - many doc and bug fixes and improvements


author: Daniel Veillard <veillard@redhat.com> - 1.2.0-1
changelog:
  - Separation of python binding as libvirt-python srpm
  - Add support for gluster pool
  - vbox: add support for 4.3 APIs
  - a number of doc, bug fixes and various improvements


author: Daniel Veillard <veillard@redhat.com> - 1.1.4-1
changelog:
  - Add support for AArch64 architecture
  - Various improvements on test code and test driver
  - 4 security bug fixes
  - a lot of bug fixes and various improvements


author: Daniel Veillard <veillard@redhat.com> - 1.1.3-1
changelog:
  - VMware: Initial VMware Fusion support and various improvements
  - libvirt: add new public API virConnectGetCPUModelNames
  - various libxl driver improvements
  - LXC many container driver improvement
  - ARM cpu improvements
  - 3 security bug fixes
  - a lot of bug and leak fixes and various improvements


author: Daniel Veillard <veillard@redhat.com> - 1.1.2-1
changelog:
  - various improvements to libxl driver
  - systemd integration improvements
  - Add flag to BaselineCPU API to return detailed CPU features
  - Introduce a virt-login-shell binary
  - conf: add startupPolicy attribute for harddisk
  - various bug fixes and improvements including localizations


author: Daniel Veillard <veillard@redhat.com> - 1.1.1-1
changelog:
  - Adding device removal or deletion events
  - Introduce new domain create APIs to pass pre-opened FDs to LXC
  - Add interface versions for Xen 4.3
  - Add new public API virDomainSetMemoryStatsPeriod
  - Various LXC improvements
  - various bug fixes and improvements including localizations


author: Daniel Veillard <veillard@redhat.com> - 1.1.0-1
changelog:
  - CVE-2013-2218: Fix crash listing network interfaces with filters
  - Fine grained ACL support for the API
  - Extensible migration APIs
  - various improvements in the Xen driver
  - agent based vCPU hotplug support
  - various bug fixes and improvements including localizations


author: Daniel Veillard <veillard@redhat.com> - 1.0.6-1
changelog:
  - Move VirtualBox driver into libvirtd
  - Support for static routes on a virtual bridge
  - Various improvement for hostdev SCSI support
  - Switch to VIR_STRDUP and VIR_STRNDUP
  - Various cleanups and improvement in Xen and LXC drivers
  - various bug fixes and improvements including localizations


author: Daniel Veillard <veillard@redhat.com> - 1.0.5-1
changelog:
  - add support for NVRAM device
  - Add XML config for resource partitions
  - Add support for TPM
  - NPIV storage migration support
  - various bug fixes and improvements including localizations


author: Daniel Veillard <veillard@redhat.com> - 1.0.4-1
changelog:
  - qemu: support passthrough for iscsi disks
  - various S390 improvements
  - various LXC bugs fixes and improvements
  - Add API for thread cancellation
  - various bug fixes and improvements


author: Daniel Veillard <veillard@redhat.com> - 1.0.3-1
changelog:
  - Introduce virDomainMigrate*CompressionCache APIs
  - Introduce virDomainGetJobStats API
  - Add basic support for VDI images
  - Introduce API virNodeDeviceLookupSCSIHostByWWN
  - Various locking improvements
  - a lot of bug fixes and overall improvements


author: Daniel Veillard <veillard@redhat.com> - 1.0.2-1
changelog:
  - LXC improvements
  - S390 architecture improvement
  - Power architecture improvement
  - large Coverity report cleanups and associated bug fixes
  - virTypedParams* APIs to helps with those data structures
  - a lot of bug fixes and overall improvements


author: Daniel Veillard <veillard@redhat.com> - 1.0.0-1
changelog:
  - virNodeGetCPUMap: Define public API
  - Add systemd journal support
  - Add a qemu capabilities cache manager
  - USB migration support
  - various improvement and fixes when using QMP QEmu interface
  - Support for Xen 4.2
  - Lot of localization enhancements
  - a lot of bug fixes, improvements and portability work


author: Daniel Veillard <veillard@redhat.com> - 0.10.2-1
changelog:
  - network: define new API virNetworkUpdate
  - add support for QEmu sandbox support
  - blockjob: add virDomainBlockCommit
  - New APIs to get/set Node memory parameters
  - new API virConnectListAllSecrets
  - new API virConnectListAllNWFilters
  - new API virConnectListAllNodeDevices
  - parallels: add support of containers to the driver
  - new API virConnectListAllInterfaces
  - new API virConnectListAllNetworks
  - new API virStoragePoolListAllVolumes
  - Add PMSUSPENDED life cycle event
  - new API virStorageListAllStoragePools
  - Add per-guest S3/S4 state configuration
  - qemu: Support for Block Device IO Limits
  - a lot of bug fixes, improvements and portability work


author: Daniel Veillard <veillard@redhat.com> - 0.10.0-1
changelog:
  - agent: add qemuAgentArbitraryCommand() for general qemu agent command
  - Introduce virDomainPinEmulator and virDomainGetEmulatorPinInfo functions
  - network: use firewalld instead of iptables, when available
  - network: make network driver vlan-aware
  - esx: Implement network driver
  - driver for parallels hypervisor
  - Various LXC improvements
  - Add virDomainGetHostname
  - a lot of bug fixes, improvements and portability work


author: Daniel Veillard <veillard@redhat.com> - 0.9.13-1
changelog:
  - S390: support for s390(x)
  - snapshot: implement new APIs for esx and vbox
  - snapshot: new query APIs and many improvements
  - virsh: Allow users to reedit rejected XML
  - nwfilter: add DHCP snooping
  - Enable driver modules in libvirt RPM
  - Default to enable driver modules for libvirtd
  - storage backend: Add RBD (RADOS Block Device) support
  - sVirt support for LXC domains inprovement
  - a lot of bug fixes, improvements and portability work


author: Daniel Veillard <veillard@redhat.com> - 0.9.12-1
changelog:
  - qemu: allow snapshotting of sheepdog and rbd disks
  - blockjob: add new APIs
  - a lot of bug fixes, improvements and portability work


author: Daniel Veillard <veillard@redhat.com> - 0.9.11-1
changelog:
  - Add support for the suspend event
  - Add support for event tray moved of removable disks
  - qemu: Support numad
  - cpustats: API, improvements and qemu support
  - qemu: support type='hostdev' network devices at domain start
  - Introduce virDomainPMWakeup API
  - network: support Open vSwitch
  - a number of snapshot improvements
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.10-1
changelog:
  - Add support for sVirt in the LXC driver
  - block rebase: add new API virDomainBlockRebase
  - API: Add api to set and get domain metadata
  - virDomainGetDiskErrors public API
  - conf: add rawio attribute to disk element of domain XML
  - Add new public API virDomainGetCPUStats()
  - Introduce virDomainPMSuspendForDuration API
  - resize: add virStorageVolResize() API
  - Add a virt-host-validate command to sanity check HV config
  - Add new virDomainShutdownFlags API
  - QEMU guest agent support
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.9-1
changelog:
  - Add API virDomain{S,G}etInterfaceParameters
  - Add API virDomain{G, S}etNumaParameters
  - Add support for ppc64 qemu
  - Support Xen domctl v8
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.8-1
changelog:
  - Add support for QEMU 1.0
  - Add preliminary PPC cpu driver
  - Add new API virDomain{Set, Get}BlockIoTune
  - block_resize: Define the new API
  - Add a public API to invoke suspend/resume on the host
  - various improvements for LXC containers
  - Define keepalive protocol and add virConnectIsAlive API
  - Add support for STP and VLAN filtering
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.7-1
changelog:
  - esx: support vSphere 5.x
  - vbox: support for VirtualBox 4.1
  - Introduce the virDomainOpenGraphics API
  - Add AHCI support to qemu driver
  - snapshot: many improvements and 2 new APIs
  - api: Add public api for 'reset'
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.5-1
changelog:
  - many snapshot improvements (Eric Blake)
  - latency: Define new public API and structure (Osier Yang)
  - USB2 and various USB improvements (Marc-André Lureau)
  - storage: Add fs pool formatting (Osier Yang)
  - Add public API for getting migration speed (Jim Fehlig)
  - Add basic driver for Microsoft Hyper-V (Matthias Bolte)
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.4-1
changelog:
  - network bandwidth QoS control
  - Add new API virDomainBlockPull*
  - save: new API to manipulate save file images
  - CPU bandwidth limits support
  - allow to send NMI and key event to guests
  - new API virDomainUndefineFlags
  - Implement code to attach to external QEMU instances
  - bios: Add support for SGA
  - various missing python binding
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.3-1
changelog:
  - new API virDomainGetVcpupinInfo
  - Add TXT record support for virtual DNS service
  - Support reboots with the QEMU driver
  - New API virDomainGetControlInfo API
  - New API virNodeGetMemoryStats
  - New API virNodeGetCPUTime
  - New API for send-key
  - New API virDomainPinVcpuFlags
  - support multifunction PCI device
  - lxc: various improvements
  - many improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.2-1
changelog:
  - Framework for lock manager plugins
  - API for network config change transactions
  - flags for setting memory parameters
  - virDomainGetState public API
  - qemu: allow blkstat/blkinfo calls during migration
  - Introduce migration v3 API
  - Defining the Screenshot public API
  - public API for NMI injection
  - Various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.1-1
changelog:
  - support various persistent domain updates
  - improvements on memory APIs
  - Add virDomainEventRebootNew
  - various improvements to libxl driver
  - Spice: support audio, images and stream compression
  - Various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.9.0-1
changelog:
  - Support cputune cpu usage tuning
  - Add public APIs for storage volume upload/download
  - Add public API for setting migration speed on the fly
  - Add libxenlight driver
  - qemu: support migration to fd
  - libvirt: add virDomain{Get,Set}BlkioParameters
  - setmem: introduce a new libvirt API (virDomainSetMemoryFlags)
  - Expose event loop implementation as a public API
  - Dump the debug buffer to libvirtd.log on fatal signal
  - Audit support
  - Various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.8-1
changelog:
  - expose new API for sysinfo extraction
  - cgroup blkio weight support
  - smartcard device support
  - qemu: Support per-device boot ordering
  - Various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.7-1
changelog:
  - Preliminary support for VirtualBox 4.0
  - IPv6 support
  - Add VMware Workstation and Player driver driver
  - Add network disk support
  - Various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.6-1
changelog:
  - Add support for iSCSI target auto-discovery
  - QED: Basic support for QED images
  - remote console support
  - support for SPICE graphics
  - sysinfo and VMBIOS support
  - virsh qemu-monitor-command
  - various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.5-1
changelog:
  - Enable JSON and netdev features in QEMU >= 0.13
  - framework for auditing integration
  - framework DTrace/SystemTap integration
  - Setting the number of vcpu at boot
  - Enable support for nested SVM
  - Virtio plan9fs filesystem QEMU
  - Memory parameter controls
  - various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.3-1
changelog:
  - esx: Support vSphere 4.1
  - Qemu arbitrary monitor commands
  - Qemu Monitor API entry point
  - various improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.8.2-1
changelog:
  - phyp: adding support for IVM
  - libvirt: introduce domainCreateWithFlags API
  - add 802.1Qbh and 802.1Qbg switches handling
  - Support for VirtualBox version 3.2
  - Init script for handling guests on shutdown/boot
  - qemu: live migration with non-shared storage for kvm


author: Daniel Veillard <veillard@redhat.com> - 0.8.1-1
changelog:
  - Starts dnsmasq from libvirtd with --dhcp-hostsfile
  - Add virDomainGetBlockInfo API to query disk sizing
  - a lot of bug fixes and cleanups


author: Daniel Veillard <veillard@redhat.com> - 0.8.0-1
changelog:
  - Snapshotting support (QEmu/VBox/ESX)
  - Network filtering API
  - XenAPI driver
  - new APIs for domain events
  - Libvirt managed save API
  - timer subselection for domain clock
  - synchronous hooks
  - API to update guest CPU to host CPU
  - virDomainUpdateDeviceFlags new API
  - migrate max downtime API
  - volume wiping API
  - and many bug fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.7-1
changelog:
  - macvtap support
  - async job handling
  - virtio channel
  - computing baseline CPU
  - virDomain{Attach,Detach}DeviceFlags
  - assorted bug fixes and lots of cleanups


author: Daniel Veillard <veillard@redhat.com> - 0.7.6-1
changelog:
  * Wed Dec 23 2009 Daniel Veillard <veillard@redhat.com> - 0.7.5-1
  - Add new API virDomainMemoryStats
  - Public API and domain extension for CPU flags
  - vbox: Add support for version 3.1
  - Support QEMU's virtual FAT block device driver
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.3-1
changelog:
  - udev node device backend
  - API to check object properties
  - better QEmu monitor processing
  - MAC address based port filtering for qemu
  - support IPv6 and multiple addresses per interfaces
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.1-1
changelog:
  - ESX, VBox driver updates
  - mutipath support
  - support for encrypted (qcow) volume
  - compressed save image format for Qemu/KVM
  - QEmu host PCI device hotplug support
  - configuration of huge pages in guests
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.7.0-1
changelog:
  - ESX, VBox3, Power Hypervisor drivers
  - new net filesystem glusterfs
  - Storage cloning for LVM and Disk backends
  - interface implementation based on netcf
  - Support cgroups in QEMU driver
  - QEmu hotplug NIC support
  - a lot of fixes


author: Daniel Veillard <veillard@redhat.com> - 0.4.1-1
changelog:
  - Release of 0.4.1
  - Storage APIs
  - xenner support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.4.0-1
changelog:
  - Release of 0.4.0
  - SASL based authentication
  - PolicyKit authentication
  - improved NUMA and statistics support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-1
changelog:
  - Release of 0.3.3
  - Avahi support
  - NUMA support
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.2-1
changelog:
  - Release of 0.3.2
  - API for domains migration
  - APIs for collecting statistics on disks and interfaces
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.1-1
changelog:
  - Release of 0.3.1
  - localtime clock support
  - PS/2 and USB input devices
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.3.0-1
changelog:
  - Release of 0.3.0
  - Secure remote access support
  - unification of daemons
  - lots of assorted bugfixes and cleanups
  - documentation and localization improvements


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-1
changelog:
  - Release of 0.2.3
  - lot of assorted bugfixes and cleanups
  - support for Xen-3.1
  - new scheduler API


author: Jeremy Katz <katzj@redhat.com> - 0.2.1-2.fc7
changelog:
  - don't require xen; we don't need the daemon and can control non-xen now
  - fix scriptlet error (need to own more directories)
  - update description text


author: Daniel Veillard <veillard@redhat.com> - 0.2.1-1
changelog:
  - Release of 0.2.1
  - lot of bug and portability fixes
  - Add support for network autostart and init scripts
  - New API to detect the virtualization capabilities of a host
  - Documentation updates


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-3.fc7
changelog:
  - Disable kqemu support since its not in Fedora qemu binary
  - Fix for -vnc arg syntax change in 0.9.0  QEMU


author: Daniel P. Berrange <berrange@redhat.com> - 0.2.0-2.fc7
changelog:
  - Fixed path to qemu daemon for autostart
  - Fixed generation of <features> block in XML
  - Pre-create config directory at startup


author: Daniel Veillard <veillard@redhat.com> 0.1.10-1.fc7
changelog:
  - support for inactive Xen domains
  - improved support for Xen display and vnc
  - a few bug fixes
  - localization updates


author: Daniel Veillard <veillard@redhat.com> 0.1.9-1
changelog:
  - better error reporting
  - python bindings fixes and extensions
  - add support for shareable drives
  - add support for non-bridge style networking
  - hot plug device support
  - added support for inactive domains
  - API to dump core of domains
  - various bug fixes, cleanups and improvements
  - updated the localization


author: Daniel Veillard <veillard@redhat.com> 0.1.8-1
changelog:
  - fix missing page size detection code for ia64
  - fix mlock size when getting domain info list from hypervisor
  - vcpu number initialization
  - don't label crashed domains as shut off
  - fix virsh man page
  - blktapdd support for alternate drivers like blktap
  - memory leak fixes (xend interface and XML parsing)
  - compile fix
  - mlock/munlock size fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.7-1
changelog:
  - Fix bug when running against xen-3.0.3 hypercalls
  - Fix memory bug when getting vcpus info from xend


author: Daniel Veillard <veillard@redhat.com> 0.1.6-1
changelog:
  - Support for localization
  - Support for new Xen-3.0.3 cdrom and disk configuration
  - Support for setting VNC port
  - Fix bug when running against xen-3.0.2 hypercalls
  - Fix reconnection problem when talking directly to http xend


author: Daniel Veillard <veillard@redhat.com> 0.1.5-1
changelog:
  - new release
  - bug fixes
  - support for new hypervisor calls
  - early code for config files and defined domains


author: Daniel Veillard <veillard@redhat.com> 0.1.4-1
changelog:
  - vCPUs and affinity support
  - more complete XML, console and boot options
  - specific features support
  - enforced read-only connections
  - various improvements, bug fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.1-1
changelog:
  - extend and cleanup the driver infrastructure and code
  - python examples
  - extend uuid support
  - bug fixes, buffer handling cleanups
  - support for new Xen hypervisor API
  - test driver for unit testing
  - virsh --conect argument


author: Daniel Veillard <veillard@redhat.com> 0.1.0-1
changelog:
  - various fixes
  - new APIs: for Node information and Reboot
  - virsh improvements and extensions
  - documentation updates and man page
  - enhancement and fixes of the XML description format


author: Daniel Veillard <veillard@redhat.com> 0.0.6-1
changelog:
  - added error handling APIs
  - small bug fixes
  - improve python bindings
  - augment documentation and regression tests


author: Chuck Anderson <chuck.anderson@oracle.com> - 4.4.4-75.0.1.el6
changelog:
  - BUILDINFO: commit=aff08b43b1a504aa14a0fce65302ccf515b69fdf
  - Remove unsafe bits from the mod_l?_entry() fastpath (Andrew Cooper)   {CVE-2016-6258}
  - x86/mm: fully honor PS bits in guest page table walks (Jan Beulich)   {CVE-2016-4480} {CVE-2016-4480}
  - libxl: Document ~/serial/ correctly (Ian Jackson)   {CVE-2016-4962}
  - libxl: Cleanup: Have libxl__alloc_vdev use /libxl (Ian Jackson)   {CVE-2016-4962}
  - libxl: Do not trust frontend for nic in getinfo (Ian Jackson)   {CVE-2016-4962}
  - libxl: Do not trust frontend for nic in libxl_devid_to_device_nic (Ian Jackson)   {CVE-2016-4962}
  - libxl: Do not trust frontend for vtpm in getinfo (Ian Jackson)   {CVE-2016-4962}
  - libxl: Do not trust frontend for vtpm list (Ian Jackson)   {CVE-2016-4962}
  - libxl: Do not trust frontend for disk in getinfo (Ian Jackson)   {CVE-2016-4962}
  - libxl: Do not trust frontend for disk eject event (Ian Jackson)   {CVE-2016-4962}
  - libxl: Do not trust frontend in libxl__device_nextid (Ian Jackson)   {CVE-2016-4962}
  - libxl: Do not trust frontend in libxl__devices_destroy (Ian Jackson)   {CVE-2016-4962}
  - libxl: Provide libxl__backendpath_parse_domid (Ian Jackson)   {CVE-2016-4962}
  - libxl: Record backend/frontend paths in /libxl/$DOMID (Ian Jackson)   {CVE-2016-4962}
  - x86: limit GFNs to 32 bits for shadowed superpages. (Tim Deegan)   {CVE-2016-3960}
  - x86: fix information leak on AMD CPUs (Jan Beulich)   {CVE-2016-3158} {CVE-2016-3159} {CVE-2016-3158} {CVE-2016-3159} {CVE-2016-3158} {CVE-2016-3159}
  - x86: enforce consistent cachability of MMIO mappings (Jan Beulich)   {CVE-2016-2270} {CVE-2016-2270}


author: Mike A. Harris <mharris@redhat.com> 1.1.4-2.fc6
changelog:
  - Removed usage of rpm macros inside the spec changelog (#200051)
  - Removed non-UTF-8 chars from changelog.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-1.fc6
changelog:
  - Initial build of Dimitry's libutempter replacement for Fedora Core.
  - Reworked the upstream spec file for Fedora packaging compliance.
  - Removed static lib subpackage as we dont ship those.


author: Dmitry V. Levin <ldv@altlinux.org> 1.1.4-alt1
changelog:
  - Enabled almost all diagnostics supported by gcc and fixed all
    issues found by gcc-3.4.4-alt3.
  - Added FreeBSD support, based on patches from Gentoo/FreeBSD.
  - Makefile:
    + Fixed few portability issues reported by Gentoo developers.
  - libutempter: Linked with -Wl,-z,defs.
  - utempter:
    + Fixed struct utmp initialization on 64-bit architectures
      with 32-bit backwards compatibility enabled (like x86_64).
    + Linked with -Wl,-z,now, i.e., marked it to tell the dynamic
      linker to resolve all symbols when the program is started.
      Suggested by Gentoo developers.


author: Dmitry V. Levin <ldv@alt-linux.org> 1.0.3-alt1
changelog:
  - Added compatibility declarations to ease upgrade of old applications.
  - Added small README file.
  - Corrected provides.


author: Dmitry V. Levin <ldv@alt-linux.org> 1.0.0-alt1
changelog:
  - Rewritten the code completely.
  - Renamed to libutempter.
  - Corrected the package description.
  - FHSificated (yes, there are no more {_sbindir}/utempter).
  - Libificated.


author: Dmitry V. Levin <ldv@altlinux.ru> 0.5.2-alt3
changelog:
  - Specfile cleanup.
  - Owl-compatible changes:
    + added utempter group;
    + utempter binary moved to {_libdir}/utempter.d,
      owned by group utempter with 710 permissions.


author: Chris Lumens <clumens@redhat.com> - 1.74.22-1
changelog:
  - Fix handling # in passwords. (clumens)
    Related: rhbz#1301267
  - Pass comments=True to shlex.split calls in the test functions. (clumens)
    Related: rhbz#1301267


author: Chris Lumens <clumens@redhat.com> - 1.74.18-1
changelog:
  - Add support for specifying thin pool profile (vpodzime)
    Related: rhbz#1083459
  - Add support for custom layouts using lvm thin provisioning. (dlehman)
    Related: rhbz#1083459


author: Chris Lumens <clumens@redhat.com> - 1.74.17-1
changelog:
  - Fix small issues with output formatting of the new --cdl option. (clumens)
  - Add clearpart --cdl option. (#1182624) (sbueno+anaconda)


author: Chris Lumens <clumens@redhat.com> - 1.74.16-1
changelog:
  - Add an option to disable even installing the core group. (clumens)
  - Add a new bootloader --disabled option. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.74.14-1
changelog:
  - Add tests for incorrect command usage detection (mkolman)
  - Add class for multi-line command sequence tests (mkolman)
  - Raise an error if autopart is combined with partitioning commands (#886010) (mkolman)


author: Chris Lumens <clumens@redhat.com> - 1.74.13-1
changelog:
  - Also fix the version test for RHEL6. (clumens)
  - Fix a couple minor problems pychecker caught. (clumens)
  - Add network --ipv6gateway option (#978252) (rvykydal)
  - fix TypeError in network.py with ipv6 static addresses (#966183). (wwoods)
  - Fix a bug in logvol duplicate reporting (#924579, mhuth). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.74.12-1
changelog:
  - Add cipher option for encrypted autopart. (dlehman)
  - Add support for fcoe --autovlan option (#813998) (rvykydal)
  - add unsupported_hardware command (#824963) (bcl)


author: Chris Lumens <clumens@redhat.com> - 1.74.11-1
changelog:
  - Deprecated options that required a value should still accept one (jbastian).
    Resolves: rhbz#815573
  - Don't error out if volgroup --useexisting is given with no members. (clumens)
    Resolves: rhbz#823856, rhbz#837440
  - Add an argument for specifying the luks algorithm. (clumens)
    Resolves: rhbz#843174
  - bonding support: add network --bondslaves --bondopts options (rvykydal)
    Resolves: rhbz#662007
  - vlan support: add network --vlanid option. (rvykydal)
    Resolves: rhbz#668065
  - Add swap --hibernation to logvol command (vpodzime)
    Resolves: rhbz#848818


author: Chris Lumens <clumens@redhat.com> - 1.74.8-1
changelog:
  - Add support for reserved space in volume group. (dlehman)
  - Add --same-as-ram option for swap size specification (#744129) (vpodzime)


author: Chris Lumens <clumens@redhat.com> 1.74.5-1
changelog:
  - Don't set new attrs on the RHEL6_Network object. (clumens)
  - Add kickstart network --nodefroute option (#668417) (rvykydal)
  - Add support for network --bootproto ibft option (#668417) (rvykydal)
  - Add network --activate option (#668417) (rvykydal)


author: Chris Lumens <clumens@redhat.com> - 1.74.2-1
changelog:
  - Add the documentation from the website to this package. (clumens)
  - F14 TestCase classes won't work on rhel6-branch, use RHEL6. (akozumpl)
  - support noverifyssl on the rhel6-branch (method, repo) (#660340). (akozumpl)
  - method: new parameter '--noverifyssl' after --url. (akozumpl)
  - repo: new parameter '--noverifyssl'. (akozumpl)
  - Add bootloader --iscrypted (#554870). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.74-1
changelog:
  - If an option is deprecated, do not care if it takes a value (#602303). (clumens)
  - Don't compare the dest ("telnet") with the option string ("--telnet"). (clumens)
  - The --connect= parameter wasn't really deprecated in FC6. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.71-1
changelog:
  - Don't overwrite the excluded group list after every %packages line (#577334). (clumens)
  - Add a bunch of test cases for the packages section. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.69-1
changelog:
  - Add driverdisk --biospart= (#570437). (clumens)
  - Fix IOError catching in ksflatten (jgregusk, #558650).


author: Chris Lumens <clumens@redhat.com> - 1.68-1
changelog:
  - Support removing groups that were included by a glob (#554717). (clumens)
  - Make sure that everything in version.versionMap has a handler. (clumens)
  - Add support for RHEL6 (#552230). (clumens)
  - Don't consider RHEL versions as developmental even if they're latest. (clumens)
  - Add lineno to BaseData and derived classes (version 2) (hdegoede)
  - Give the non mandatory iscsi --port argument a sane default (hdegoede)
  - Change python_sitelib macro to use %global for new rpm (hdegoede)
  - Fix typo in iscsi parsing error message (hdegoede)


author: Chris Lumens <clumens@redhat.com> - 1.67-1
changelog:
  - Don't use action="append_const" in firewall.py.
  - Make "make archive" depend on test and check passing again.
  - versionToString now works in all cases we test for.
  - Fix the few pychecker errors outstanding in options.py.
  - Fix make docs to make docs dir before trying to download files there (hdegoede)


author: Hans de Goede <hdgoede@redhat.com> - 1.66-1
changelog:
  - Add --dcb option to fcoe command (#513011)
  - Remove rhpl from tests
  - Port bootloader --hvargs option added in rhel5
  - Ignore comments when looking for %ksappend lines (#525676)
  - Use python 2.x exception syntax


author: Chris Lumens <clumens@redhat.com> - 1.65-1
changelog:
  - Add additional arguments to BaseHandler.__init__ for better map control.
  - Return the KickstartCommand/KickstartData object from dispatcher.
  - Add an "sshpw" command for changing the passwords in anaconda's env.
  - Add --proxy support to the url and repo commands.
  - Add support for F13.  Is it really that time already?


author: Chris Lumens <clumens@redhat.com> - 1.63-1
changelog:
  - Add encryption key escrow support (mitr, #508963).
  - Fix the repo test cases to expect quotes around the repo's name.


author: Chris Lumens <clumens@redhat.com> - 1.62-1
changelog:
  - Support translated help text in optparse (#479519).
  - If the input kickstart file cannot be read, raise IOError (#519477).


author: Chris Lumens <clumens@redhat.com> - 1.60-1
changelog:
  - Put quotes around the repo's name (Marc.Herbert@gmail.com).
  - Make duplicate entries warnings, not errors (#516338).


author: Chris Lumens <clumens@redhat.com> - 1.59-1
changelog:
  - Handle a few more places where a urlgrabber error could happen (#512951).
  - Error out if the same partition/repo/network is defined twice (#512956).
  - Call parent class tests first. (jlaska)
  - Add KSOptionParser to FC3 upgrade command. (jlaska)
  - Correct missing return stmt in _getArgsAsStr() (jlaska)


author: Chris Lumens <clumens@redhat.com> - 1.58-1
changelog:
  - Adjust writePriority to fix lvm-on-raid0 test cases (jlaska).
  - Add F12 to the version number tests. (clumens)
  - F12_User test case. (dcantrell)
  - Add --gecos argument to the 'user' command (dcantrell)
  - Convert user.py to use _getArgsAsStr() (dcantrell)


author: Chris Lumens <clumens@redhat.com> - 1.56-1
changelog:
  - Make sure to import the gettext stuff in fcoe. (clumens)
  - Correctly deprecate bootloader --lba32 (jlaska).
  - pykickstart: fix zfcp command writepriority (hdegoede)
  - pykickstart: Add fcoe command (take 2) (hdegoede)
  - Add a test case for RAID (jlaska).


author: Chris Lumens <clumens@redhat.com> - 1.55-1
changelog:
  - Add support for the group command to F12 (#509119).
  - RHEL5 now supports RAID 10.
  - The f12 hander class should be called F12Handler. (jgranado)
  - Remove bootloader --lba32.
  - Add a new version of the driverdisk command without --type=.
  - Add initial support for F12.
  - Fetch the programmers-guide from the wiki now.


author: Chris Lumens <clumens@redhat.com> - 1.53-1
changelog:
  - Move lineno= from KSOptionParser.__init__ to parse_args (#497149). (clumens)
  - Use the F11 version of the partition command. (clumens)
  - Remove the --start and --end options since anaconda no longer uses them. (clumens)
  - Remove a broken test case. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.52-1
changelog:
  - Add lots more test cases (alindebe, mgracik, stickster).
  - Add a skip attribute on key to shut up pychecker.
  - Only show autostep command when requested (jlaska)
  - Strip spaces from service names, and require an option to be provided.
  - Surround services lists in double quotes.
  - Remove the extra space from the services __str__ method.
  - Fix output formatting bugs in firewall, partition, and repo (mgracik).
  - Specifying both or neither of --drives and --only-use should be an error.
  - Corrected newline char in return value of FC6_Method. (mgracik)
  - Make --drives a required option for FC3, and catch no args on F8.
  - Fix final printing of the rescue command (mgracik).
  - Surround output strings in double quotes.
  - Fix a typo in the deviceprobe command.
  - Revert the more strict option processing on displaymode.
  - Properly handle erroring on extra args, not just extra options.
  - Don't use the logging class since it interferes with the logging test.
  - port without host should raise KickstartParseError, not kickstartValueError.
  - Add the --key option to option processing, since it's a valid argument.
  - Fix test cases that were failing due to the new use of KSOptionParser.
  - Teach driverdisk.py command to reject extra partitions (stickster).
  - Add KSOptionParser to all commands ... enables more strick option checking (jlaska).
  - Use KSOptionParser so we can catch bad command options (jlaska).


author: Chris Lumens <clumens@redhat.com> - 1.51-1
changelog:
  - Make a couple changes to how the logging command is handled.
  - Add a lot of test cases (clumens, alindebe, jlaska, fcami, adamwill, pfrields).
  - Fix output formatting for the rootpw command.
  - For commands that take exactly one argument, check and error correctly.
  - Surround module options in quotes on the output side (jlaska).
  - Set module opts in the FC3 handler correctly.
  - Fix newlines on the device command output (jlaska).
  - If --autoscreenshot is not specified, still output "autostep".
  - Move the currentCmd and currentLine into getParser(). (jlaska)
  - Write out an selinux line if set to disabled, but not if None.
  - F9_LogVolData should inherit from FC4_LogVolData, not FC3_LogVolData (jlaska).
  - Add unittest framework along with logvol and vnc unittests. (jlaska)
  - Don't set the KSOption.required attribute in the constructor (jlaska).


author: Chris Lumens <clumens@redhat.com> - 1.50-1
changelog:
  - Add a script to diff two versions of kickstart syntax.
  - Add an option to ksvalidator to list all available syntax versions.
  - Remove a couple extra newlines in output formatting.
  - Add documentation for the new %include representation.
  - Add support %include to the pykickstart data objects.


author: Chris Lumens <clumens@redhat.com> - 1.49-1
changelog:
  - Add upgrade --root-device (atodorov, #471232).
  - Use python's builtin set rather than the Sets module (#477836, dcantrell).


author: Chris Lumens <clumens@redhat.com> - 1.48-1
changelog:
  - Allow ignoring group metadata from repos, using a '--ignoregroups'
    boolean. (notting)
  - Add initial support for F11.
  - Specify the command versions in the handlers instead of making copies.
  - Remove empty and pointless __init__ methods.
  - Pass arguments to superclasses via *args and **kwargs, all the way up.
  - Add removedKeywords and removedAttrs lists on Commands and Data.
  - Fix version regexes to handle double digits and minor releases (jlaska).


author: Chris Lumens <clumens@redhat.com> - 1.43-1
changelog:
  - Revert "Do not include passphrases for encrypted block devices in
    anaconda-ks.cfg." (dlehman)
  - yum doesn't like when mirrorlist is "". (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.42-1
changelog:
  - Add rescue command to pykickstart (atodorov)
  - Sort %packages output (katzj)
  - Fix a typo (atodorov).


author: Chris Lumens <clumens@redhat.com> - 1.41-1
changelog:
  - RHEL5 supports ignoredisk --only-use now too. (clumens)
  - Do not include passphrases for encrypted block devices in
    anaconda-ks.cfg. (dlehman)
  - Fix F9,F10,RHEL5 "part" commands to use the same class as
    "partition". (dlehman)
  - Add an apply method() for commands and implement for lang (katzj)


author: Chris Lumens <clumens@redhat.com> - 1.40-1
changelog:
  - RHEL5_LogVolData should inherit from FC4, not FC3.
    Also fix FC9->F9 typo. (dlehman)
  - Support creation of encrypted block devices in RHEL5. (#449830) (dlehman)
  - Use the right LogVolData objects for RHEL3 and 4 (jlaska). (clumens)
  - We no longer use rhpl for translations. (clumens)
  - All the base classes should derive from object. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.35-1
changelog:
  - Bring driverdisk command in line with the docs. (clumens)
  - Change RAID command print priorities (jlaska).
  - According to docs, physvols are space delimited. (jlaska)
  - Don't write the label out twice (jlaska).
  - Deprecate monitor and xconfig commands. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.34-1
changelog:
  - Load the handler module automatically. (clumens)
  - Add support for F10. (clumens)
  - Initialize cmd.handler earlier; fixes repo.methodToRepo() (markmc)
  - Don't shadow builtin function names. (clumens)
  - Running check is now required before pykickstart can be packaged. (clumens)
  - Reorganize code a little bit to pass pychecker. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.33-1
changelog:
  - Fix whitespace when printing out the bootloader command (pmeyers).
  - Fix the type on bootloader --timeout processing. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.32-1
changelog:
  - Make the string reader act like the file reader upon EOF. (clumens)
  - Add syntax for encrypted logical volumes. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.30-1
changelog:
  - Reverse writePriorities of iscsi and iscsname (#434965, jlaska).
  - Fix printing of iscsiname command (#434945, jlaska).
  - Don't traceback on ENOENT. (pnasrat)
  - Store the mouse name as a string, not a list. (clumens)
  - Update translations.


author: Chris Lumens <clumens@redhat.com> - 1.25-1
changelog:
  - Add the version to the output ks file. (clumens)
  - Add syntax for encrypted partitions and raid devices. (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.24-1
changelog:
  - Make inheritance and overriding of %packages work (#427768). (clumens)
  - Add an option for which languages should be installed. (katzj)
  - Use the right name for the iscsi --target variable (#418781). (clumens)


author: Chris Lumens <clumens@redhat.com> - 1.23-1
changelog:
  - Take Makefile improvements from anaconda.
  - Fix a traceback on F9 zerombr command (#395431).
  - Update to handle new Python eggs packaging.


author: Chris Lumens <clumens@redhat.com> 1.22-1
changelog:
  - Don't process or write out vnc --enabled (jlaska AT redhat DOT com).
  - Fix a traceback in the clearpart command.


author: Chris Lumens <clumens@redhat.com> 1.20-1
changelog:
  - Pull wiki docs from the new location.
  - Fix error messages for options that have been removed after having been
    previously deprecated.
  - zerombr no longer takes any arguments.
  - %packages --ignoredeps --resolvedeps have been removed.
  - firewall --high --medium have been removed.
  - vnc --connect has been removed.
  - xconfig options from monitor have now been removed.
  - --bytes-per-inode has been marked as deprecated.
  - Fix typos.
  - Add --fsprofile option to disk commands (pjones).
  - Add F9 support (pjones).
  - Lots of internal fixes (clumens, pjones).


author: Chris Lumens <clumens@redhat.com> 1.18-1
changelog:
  - Don't write out %end to packages and scripts if the syntax version doesn't
    support it.
  - Remove obsolete translation (#332221).


author: Chris Lumens <clumens@redhat.com> 1.16-1
changelog:
  - Undeprecate %packages --excludedocs.
  - Fix a traceback in the device command handling.
  - Add bootloader --timeout (katzj).


author: Chris Lumens <clumens@redhat.com> 1.14-1
changelog:
  - Fix output formatting for packages section header (#310211).
  - Add a script to flatten kickstart files containing includes (katzj).


author: Chris Lumens <clumens@redhat.com> 1.13-1
changelog:
  - Add a function to convert URL method strings into repo objects
    (jkeating).
  - Writer formatting fixes.
  - Add kickstart documentation from the Fedora Wiki.


author: Chris Lumens <clumens@redhat.com> 1.12-1
changelog:
  - Fix lots of problems in processing the bootloader, device, network, and
    raid commands.
  - Add %end when writing out scripts and packages.
  - Add a makefile target to run pychecker to cut down on errors in
    releases.


author: Chris Lumens <clumens@redhat.com> 1.9-1
changelog:
  - Add support for the %end directive to be placed at the end of scripts
    and packages sections.  Deprecate old syntax.
  - Clean up after ksvalidator if pykickstart issues a traceback.
  - Add support for repo --priority --includepkgs --excludepkgs.
  - Fix newline at end of reboot --eject output (#253562).


author: Chris Lumens <clumens@redhat.com> 1.7-1
changelog:
  - Clarify license in spec file and all source files.
  - Check string values to options to make sure they're not other options
    (#251318).


author: Chris Lumens <clumens@redhat.com> - 1.2-1
changelog:
  - Fix harddrive install method error checking (#232492).
  - Set authentication information from the input line to preserve quoting
    (#241657).
  - Allow included files to be given by URL.
  - Fix typo in user --iscrypted option.


author: Chris Lumens <clumens@redhat.com> - 1.1-1
changelog:
  - Better regexes for splitting version strings into family and version.
  - Add basic support for RHEL3.
  - Update translations.


author: Chris Lumens <clumens@redhat.com> - 0.100-1
changelog:
  - bootloader should be written out after upgrade/install.
  - Treat class names as unicode strings (#231053).


author: Chris Lumens <clumens@redhat.com> - 0.99-1
changelog:
  - The timezone command didn't recognize --isUtc before FC6 (#231189).
  - Recognize %ksappend lines in ksvalidator.
  - Don't set default values in some command __init__ methods.
  - Added an updates command.
  - Add support for RAID10.


author: Chris Lumens <clumens@redhat.com> - 0.96-1
changelog:
  - Fix __str__ methods for langsupport and reboot commands.
  - Renamed BaseHandler.empty to BaseHandler.maskAllExcept.
  - Split command objects out into their own files in commands/.
  - Rename command objects to start with Version_.
  - Support extended group selection syntax.


author: Chris Lumens <clumens@redhat.com> - 0.95-1
changelog:
  - KickstartParser no longer takes a version argument.
  - Be more lenient in what strings stringToVersion accepts.
  - Allow setting state on one data object from multiple files.


author: Chris Lumens <clumens@redhat.com> - 0.94-1
changelog:
  - Add a newline to the end of the key command output.
  - Use network bootproto constants (#197694).
  - Fix tracebacks in subclass __str__ methods (#226734).


author: Chris Lumens <clumens@redhat.com> - 0.93-1
changelog:
  - Add support for FC3, RHEL4, and RHEL5.
  - The key command was not supported until after FC6.
  - Accept more strings in stringToVersion.


author: Chris Lumens <clumens@redhat.com> - 0.92-1
changelog:
  - Fix KickstartVersionError reporting.
  - Add a version attribute to handler objects.
  - Fix line number reporting on lots of commands.
  - Add initial support for Fedora 7 and remove deprecated commands.
  - Accept a --default argument to the %packages header (#221305).


author: Chris Lumens <clumens@redhat.com> - 0.90-1
changelog:
  - Support multiple versions of kickstart syntax from one code base
    (#189348).
  - Fix inconsistency between Script parser and writer (#222877).


author: Chris Lumens <clumens@redhat.com> 0.31-1
changelog:
  - Handle nfs --opts (katzj).
  - RAID devices should be integers instead of strings (#176537).
  - Add initial support for iscsi (katzj).


author: Chris Lumens <clumens@redhat.com> 0.30-2
changelog:
  - Add BuildRequires to fix building under mock (#194156,  Joost Soeterbroek
    <fedora AT soeterbroek.com>).


author: Chris Lumens <clumens@redhat.com> 0.30-1
changelog:
  - Change order of LVM-related writing functions (#193073).
  - Require urlgrabber.
  - Return a more useful error message on unknown commands.
  - Fix logvol writing typo.
  - Make ksvalidator validate from a URL in addition to a file.
  - Don't write out an empty packages section (#192851).


author: Chris Lumens <clumens@redhat.com> 0.26-1
changelog:
  - Ignore spaces before group names (#188095).
  - Added some translations.
  - Add options for repo command.
  - Reorder %packages section output.
  - Output %packages header options.
  - Initialize RAID and volume group members to empty lists.


author: Chris Lumens <clumens@redhat.com> 0.24-1
changelog:
  - Don't write out a blank xconfig line.
  - Reorder output handlers to group like commands together.
  - Mark strings for translation.


author: Chris Lumens <clumens@redhat.com> 0.21-1
changelog:
  - Provide an option to not traceback on missing include files (#181760).
  - Update programming documentation.


author: Chris Lumens <clumens@redhat.com> 0.18-1
changelog:
  - Fix some errors pychecker caught.
  - Allow exceptions to not be fatal so ksvalidator can spot more errors in
    a single pass (#179894).


author: Chris Lumens <clumens@redhat.com> 0.13-1
changelog:
  - Recognize the --eject parameter to shutdown/halt.
  - Store the exact post-installation action in ksdata.


author: Chris Lumens <clumens@redhat.com> 0.8-1
changelog:
  - Default to SELINUX_ENFORCING.
  - Default partition sizes to None for anaconda (#172378).
  - Don't call shlex.split on anything inside a script (#172313).


author: Chris Lumens <clumens@redhat.com> 0.7-1
changelog:
  - Fix clearpart --all.
  - vnc command does not require --connect option (#172192).
  - network --onboot does not take any option.
  - Remove extra spaces from firewall --ports and --trust.
  - Write out network --<service> options.


author: Chris Lumens <clumens@redhat.com> 0.3-1
changelog:
  - Add a deprecated attribute to options.
  - Add --card option back to xconfig and mark as deprecated.
  - Throw a deprecation warning on mouse and langsupport commands.
  - Rename Writer to KickstartWriter for consistency.
  - Collapse scripts into a single list and add an attribute on Script to
    differentiate.


author: Chris Lumens <clumens@redhat.com> 0.2-1
changelog:
  - Rename module to pykickstart to avoid conflicts in anaconda.
  - Rename data classes for consistency.
  - Add default bytesPerInode settings.


author: Jan Synáček <jsynacek@redhat.com> - 20071127-22
changelog:
  - Resolves: #1351720 - documentation inconsistency on arping
  - Resolves: #1334775 - backport upstream ping change unmasking signals
  - Resolves: #1298344 - Ping assumes EACCESS errors are due to broadcast addresses


author: Jan Synáček <jsynacek@redhat.com> - 20071127-20
changelog:
  - Resolves: #1149574 - Ping produces "WARNING: kernel is not very fresh, upgrade is recommended."
  - Resolves: #829998 - The arping command may have return value of 0.
  - Resolves: #1099426 - Count of "back" is not correct in tracepath
  - Resolves: #1113082 - ping returns odd results with options inet6 in resolv.conf


author: Martin Nagy <mnagy@redhat.com> - 20071127-3
changelog:
  - major patch cleanup so it will be easier to get patches upstream
  - fix for #68212, previous fix actually didn't work for ping6
  - renewed the ia64 align patches
  - update README.bonding
  - clear up the code from warnings
  - spec file cleanup


author: Martin Nagy <mnagy@redhat.com> - 20070202-6
changelog:
  - fix absolute symlinks and character encoding for RELNOTES (#225909)
  - preserve file timestamps (#225909)
  - use %{?_smp_mflags} (#225909)
  - fix service rdisc stop removing of lock file


author: Martin Bacovsky <mbacovsk@redhat.com> - 20070202-4
changelog:
  - resolves: #236725: ping does not work for subsecond intervals for ordinary user
  - resolves: #243197: RFE: Please sync ifenslave with current kernel
  - resolves: #246954: Initscript Review
  - resolves: #251124: can't build rdisc - OPEN_MAX undeclared


author: Martin Bacovsky <mbacovsk@redhat.com> - 20070202-2
changelog:
  - Resolves: #234060: [PATCH] IDN (umlaut domains) support for ping and ping6
    patch provided by Robert Scheck <redhat@linuxnetz.de>


author: Martin Bacovsky <mbacovsk@redhat.com> - 20070202-1
changelog:
  - upgarde to new upstream iputils-s20070202
  - Resolves: #229995
  - Resolves: #225909 - Merge Review: iputils
  - patches revision


author: Martin Bacovsky <mbacovsk@redhat.com>- 20020927-42
changelog:
  - Resolves: #218706 - now defines the destination address along RFC3484
  - Resolves: #229630 - ifenslave(8) man page added
  - Resolves: #213716 - arping doesn't work on InfiniBand ipoib interfaces


author: Martin Bacovsky <mbacovsk@redhat.com> - 20020927-40
changelog:
  - tracepath doesn't continue past destination host (#174032) 
    previous patch replaced by new one provided by <mildew@gmail.com>
    option -c added


author: Phil Knirsch <pknirsch@redhat.com> 20020927-4
changelog:
  - Fixed DNS lookup problems (#68212).
  - Added warning if binding problem failed on subinterface (#81640).


author: Phil Knirsch <pknirsch@redhat.com> 20020927-3
changelog:
  - Removed bonding tarball and replaced it with ifenslave.c and README
  - FHS compliance for all tools, now to be found in /bin with compat symlinks to
    old places.


author: Phil Knirsch <pknirsch@redhat.com> 20020124-7
changelog:
  - Added new BuildPreReqs for docbook-utils and perl-SGMLSpm (#66661)
  - Fixed ipv6 error printing problem (#66659).


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Added a patch to activate the rdisc server (#64270).
  - Display the countermeasures warning only in verbose (#55236)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a bunch of compiler warnings (#37131)
  - Fixed wrong exit code for no packets and deadline (#40323)
  - Moved arping to /sbin from /usr/sbin due to ifup call (#45785). Symlink from
    /usr/sbin/ provided for backwards compatibility.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include README.ifenslave doco.
  - "ping -i N" was broke for N >= 3 (#9929).
  - update to ss000121:
  -- clockdiff: preserve raw socket errno.
  -- ping: change error exit code to 1 (used to be 92,93, ...)
  -- ping,ping6: if -w specified, transmit until -c limit is reached.
  -- ping,ping6: exit code non-zero if some packets not received within deadline.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - add remaining binaries.
  - casts to remove compilation warnings.
  - terminate if -w deadline is reached exactly (#8724).


author: Michal Sekletar <msekleta@redhat.com> - 0.4.1-4
changelog:
  - identify X session launched on currently used VT as active (#1058647)
  - upstart-0.6.0 and higher doesn't use /etc/event.d anymore, move ck-log-system-restart and friends to /etc/init (#681696)
  - fix CVE-2010-4664 (#585952)
  - added logrotate config file (#634935)
  - bump maximum device name length. Fix issue with certain devices where device name is longer than 16 characters (#1070249)


author: Ray Strode <rstrode@redhat.com> - 0.3.0-2
changelog:
  - Grab X server display device from XFree86_VT root window property,
    if X server doesn't have a controlling terminal.


author: David Zeuthen <davidz@redhat.com> - 0.2.1-1
changelog:
  - Update to upstream release 0.2.1
  - Drop the patch to daemonize properly as that was merged upstream


author: David Zeuthen <davidz@redhat.com> - 0.2.1-0.git20070402
changelog:
  - Update to git snapshot to get a lot of bug fixes
  - Use libX11 rather than gtk2 to verify X11 sessions; update BR and R
  - Split X11-using bits into a new subpackage ConsoleKit-x11 (#233982)
  - Use correct location for PAM module on 64-bit (#234545)
  - Build developer documentation and put them in ConsoleKit-docs


author: David Zeuthen <davidz@redhat.com> - 0.1.3-0.git20070301
changelog:
  - Update to git snapshot
  - Drop all patches as they are committed upstream
  - New tool ck-list-sessions
  - New -libs subpackage with run-time libraries and a PAM module
  - New -devel subpackage with headers


author: David Zeuthen <davidz@redhat.com> - 0.1.0-5.el6
changelog:
  - Start ConsoleKit a bit earlier so it starts before HAL (98 -> 90)
  - Minimize stack usage so VIRT size is more reasonable (mclasen)
  - Make session inactive when switching to non-session (davidz)


author: Ondrej Vasik <ovasik@redhat.com> - 4.0-6
changelog:
  - fix the split-core stuff to allow benefits from it, use
    versioned/arched requirements for the subpackages
  - file /etc/lsb-release should be present on the system
  - Resolves: Bug 833058


author: Lawrence Lim <llim@redhat.com> - 4.0-3
changelog:
  - apply redhat-lsb.spec.diff-stewb <Stew Benedict - stewb@linuxfoundation.org>
  - Resolved: Bug 585947


author: Hao Liu <hliu@redhat.com> 3.2-1
changelog:
  - Port forward to LSB 3.2
  - Remove symlink for mailx if user is upgrading from the redhat-lsb of older version 
  - Since F10 put mailx under /usr/bin, change the corresponding requires


author: Hao Liu <hliu@redhat.com> - 3.1-22
changelog:
  - Remove 2 requires which provided by redhat-lsb
  - Add comments explaining why hard-coded path is kept
  - Resolve some hard-coded path problems
  - Add comments explaining why importing '-static' option while compiling redhat_lsb_trigger
  - Replace /usr/lib64/lsb with /usr/lib/lsb
  - Replace /lib64/* with /lib64/*so*
  - Replace /lib/lsb with /lib/lsb*


author: Lawrence Lim <llim@redhat.com> - 3.1-16
changelog:
  - update spec file in accordance to feedback provided through merge review - merge-review.patch - #226363


author: Lawrence Lim <llim@redhat.com> - 3.1-15.f8
changelog:
  - Resolved: #239842 - /lib/lsb/init-functions shall use aliases but not functions
  - forward port the patch from 3.1-12.3.EL which fix #217566, #233530, #240916


author: Lawrence Lim <llim@redhat.com> - 3.1-12.3.EL
changelog:
  - Resolves: #217566 - rewrite /lib/lsb/init-functions file needs to define the commands as true shell functions rather than aliases.
  - Resolves: #233530 - LSB pidofproc misspelled as pidofprof.
  - Resolves: #240916 - "log_warning_message" replaced with "log_warning_msg" per the LSB 3.1 spec


author: Lawrence Lim <llim@redhat.com> - 3.1-10.2
changelog:
  - for some strange reason, ld-lsb-x86-64.so need to be ld-lsb-x86-64.so.3 (LSB3.0) rather than ld-lsb-x86-64.so.3.1 (LSB3.1)


author: Lawrence Lim <llim@redhat.com> - 3.1-10.1
changelog:
  - generate spec file on RHEL5-Alpha system
  - fix vsw4 test suite setup by creating symlink for X11 SecurityPolicy and XFontPath


author: Lawrence Lim <llim@redhat.com> - 3.0-10
changelog:
  - Rewrite most part of the mkredhat-lsb to obtain information directly via specdb 
    rather than sniffing through sgml
  - remove redundent script and bump up tarball version


author: Leon Ho <llch@redhat.com> 3.0-7.EL
changelog:
  - Fixed multilib problem on lsb_release not to read /etc/lsb-release and solely
    depends on /etc/lsb-release.d/ (Advised by LSB committee)
  - Removed /etc/lsb-release (Advised by LSB committee)


author: Leon Ho <llch@redhat.com> 3.0-6.EL
changelog:
  - Made the /etc/lsb-release useful (RH#154605)
  - Added redhat_lsb_trigger to fix RH#160585 (Jakub Jelinek)
  - Fixed AMD64 base libraries requirement parsing (RH#154605)


author: Leon Ho <llch@redhat.com> 1.3-9
changelog:
  - Sync what we have changed on the branches
    Wed Nov 24 2004 Harald Hoyer <harald@redhat.com>
    - added post section to recreate the softlink in emul mode (bug 140739)
    Mon Nov 15 2004 Phil Knirsch <pknirsch@redhat.com>
    Tiny correction of bug in new triggers


author: Parag <paragn@fedoraproject.org> - 4.0.3-9
changelog:
  - Merge-Review #226071
  - Removed XFree86-libs, xorg-x11-libs, XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed BR:pkgconfig
  - spec cleanups


author: Mike A. Harris <mharris@redhat.com> 4.0.1-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel >= 7.0-7" for "fixesproto >= 4.0"
  - Added "Requires: xorg-x11-proto-devel >= 7.0-7" for "fixesproto >= 4.0"
    to devel package, needed by xfixes.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 3.0.1.1-1
changelog:
  - Updated libXfixes to version 3.0.1.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 3.0.1-1
changelog:
  - Updated libXfixes to version 3.0.1 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 3.0.0-3
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro


author: Mike A. Harris <mharris@redhat.com> 3.0.0-2
changelog:
  - Renamed package to prepend "xorg-x11" to the name for consistency with
    the rest of the X11R7 packages.
  - Added "Requires: %{name} = %{version}-%{release}" dependency to devel
    subpackage to ensure the devel package matches the installed shared libs.
  - Added virtual "Provides: lib<name>" and "Provides: lib<name>-devel" to
    allow applications to use implementation agnostic dependencies.
  - Added post/postun scripts which call ldconfig.
  - Added Conflicts with XFree86-libs and xorg-x11-libs to runtime package,
    and Conflicts with XFree86-devel and xorg-x11-devel to devel package.


author: Steve Grubb <sgrubb@redhat.com> 2.4.5-1
changelog:
  - New upstream enhancement and bugfix release
  resolves: #1129076 - auvirt --help shows an incorrect option "--show--uuid"
  resolves: #1138674 - auditd may fail to start if configured to send mail
  resolves: #1144252 - Auditctl should not send warnings to console during boot
  resolves: #1197235 - ausearch can't parse time in non-US locale/UTF-8 encoding
  resolves: #1235457 - Line buffer is too short for plugin config files
  resolves: #1257650 - Rebase audit package


author: Steve Grubb <sgrubb@redhat.com> 2.3.7-4
changelog:
  resolves: #1049916 - Handle i386 session ID's better
  resolves: #1120286 - ausearch -i does not display commas between categories


author: Steve Grubb <sgrubb@redhat.com> 2.3.7-1
changelog:
  - New upstream enhancement and bugfix release
  resolves: #1065067 - Audit package rebase
  resolves: #810749 - audit allows tcp_max_per_addr + 1 connections
  resolves: #869555 - ausearch -i does not interpret execve arguments always
  resolves: #888348 - auditd won't start when some actions send mail
  resolves: #922508 - confusing aulast records for bad logins
  resolves: #950158 - man page unclear wrt num_logs affecting keep_logs setting
  resolves: #967238 - Audit rules are built from a directory of rule files
  resolves: #967240 - ausearch to checkpoint so only reports new events
  resolves: #970675 - auparse is truncating path context after first category
  resolves: #1011052 - Missing text in auditd.conf man page
  resolves: #1022035 - Case values for actions unclear in auditd.conf man page
  resolves: #1029981 - ausearch help typo for "-x" option
  resolves: #1049916 - ausearch issues found by ausearch-test
  resolves: #1053424 - Error in auparse-defs.h
  resolves: #1071580 - audispd config file parser fails on long input
  resolves: #1089713 - limit of 30 for system call in audit.rules


author: Steve Grubb <sgrubb@redhat.com> 2.2-4
changelog:
  - Revised patch based on upstream commit 895
  resolves: #1028635 audisp-remote reconnect problems after transient network err


author: Steve Grubb <sgrubb@redhat.com> 2.2-1
changelog:
  resolves: #658630 include "check but load" option for audit
  resolves: #766920 audit filtering on file accesses not owned by user
  resolves: #797848 audit.rules contains a typo error


author: Steve Grubb <sgrubb@redhat.com> 2.1.3-2
changelog:
  resolves: #715279 Auditd syslogs a message even when configured not to
  resolves: #748124 Auditctl doesn't recognize accept4 syscall


author: Steve Grubb <sgrubb@redhat.com> 2.1.3-1
changelog:
  resolves: #709345 auditctl -l returns 0 even if it fails on dropped capabilities
  resolves: #715279 Auditd syslogs a message even when configured not to
  resolves: #715315 remote client gets disk_error event instead of disk_full
  resolves: #728475 remove krb5 related options from audisp-remote.conf


author: Steve Grubb <sgrubb@redhat.com> 2.1-4
changelog:
  resolves: #584981 - Improvements needed for Common Criteria
  resolves: #697463 - Broken autrace -r on s390x


author: Steve Grubb <sgrubb@redhat.com> 2.1-1
changelog:
  resolves: #688664 - Logging does not resume from SYSLOG on full disk action
  resolves: #647128 - audit_encode_nv_string() will crash on NULL pointer on OOM
  resolves: #584981 - ausearch/report performance improvement needed


author: Steve Grubb <sgrubb@redhat.com> 2.0.6-1
changelog:
  resolves: #584981 - ausearch/report performance improvement needed
  resolves: #640948 - inodes display incorrectly when listing rules
  resolves: #647128 - audit_encode_nv_string() will crash on NULL pointer on OOM
  resolves: #647131 - Man page for audit_encode_nv_string() is incorrect
  resolves: #670938 - searching on auid = -1 results in all events


author: EL Errata <el-errata_ww@oracle.com> - 3.28.4-4.0.1
changelog:
  - Added nss-vendor.patch to change vendor
  - Temporarily disable some tests until expired PayPalEE.cert is renewed


author: Daiki Ueno <dueno@redhat.com> - 3.28.3-1
changelog:
  - Rebase to 3.28.3
  - Remove upstreamed moz-1282627-rh-1294606.patch,
    moz-1312141-rh-1387811.patch, moz-1315936.patch, and
    moz-1318561.patch
  - Remove no longer necessary nss-duplicate-ciphers.patch
  - Disable X25519 and exclude tests using it
  - Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481)


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-11
changelog:
  - Adjust the sslstress.txt filename so that it matches with the
    disableSSL2tests patch ported from RHEL 7
  - Exclude SHA384 and CHACHA20_POLY1305 ciphersuites from stress tests
  - Don't add gtests and ssl_gtests to nss_tests, unless gtests are enabled


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-10
changelog:
  - Add patch to fix SSL CA name leaks, taken from NSS 3.27.2 release
  - Add patch to fix bash syntax error in tests/ssl.sh
  - Add patch to remove duplicate ciphersuites entries in sslinfo.c
  - Add patch to abort selfserv/strsclnt/tstclnt on non-parsable version range
  - Build with support for SSLKEYLOGFILE


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-9
changelog:
  - Update fix_multiple_open patch to fix regression in openldap client
  - Remove pk11_genobj_leak patch, which caused crash with Firefox
  - Add comment in the policy file to preserve the last empty line
  - Disable SHA384 ciphersuites when CKM_TLS12_KEY_AND_MAC_DERIVE is not
    provided by softoken; this superseds check_hash_impl patch


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-7
changelog:
  - Add patch to check if hash algorithms are backed by a token
  - Add patch to disable TLS_ECDHE_{RSA,ECDSA}_WITH_AES_128_CBC_SHA256,
    which have never enabled in the past


author: Daiki Ueno <dueno@redhat.com> - 3.27.1-1
changelog:
  - Rebase to NSS 3.27.1
  - Remove nss-646045.patch, which is not necessary
  - Remove p-disable-md5-590364-reversed.patch,
    which is no-op here, because the patched code is removed later in
    %setup
  - Remove disable_hw_gcm.patch, which is no-op here, because the
    patched code is removed later in %setup.  Also remove
    NSS_DISABLE_HW_GCM setting, which was only required for RHEL 5
  - Add Bug-1001841-disable-sslv2-libssl.patch and
    Bug-1001841-disable-sslv2-tests.patch, which completedly disable
    EXPORT ciphersuites.  Ported from RHEL 7
  - Remove disable-export-suites-tests.patch, which is covered by
    Bug-1001841-disable-sslv2-tests.patch
  - Remove nss-ca-2.6-enable-legacy.patch, as we decided to not allow
    1024 legacy CA certificates
  - Remove ssl-server-min-key-sizes.patch, as we decided to support DH
    key size greater than 1023 bits
  - Remove nss-init-ss-sec-certs-null.patch, which appears to be no-op,
    as it clears memory area allocated with PORT_ZAlloc()
  - Remove nss-disable-sslv2-libssl.patch,
    nss-disable-sslv2-tests.patch, sslauth-no-v2.patch, and
    nss-sslstress-txt-ssl3-lower-value-in-range.patch as SSLv2 is
    already disabled in upstream
  - Remove fix-nss-test-filtering.patch, which is fixed in upstream
  - Add nss-check-policy-file.patch from Fedora
  - Install policy config in /etc/pki/nss-legacy/nss-rhel6.config


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-6
changelog:
  - Fix syntax errors in patch that disables sslv2 tests
  - Resolves: Bug 1297888 - Rebase RHEL 6.8 to NSS 3.21 for Firefox 45


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-2
changelog:
  - Enable two additional ciphers and keep another one disabled
  - Prevent enabling extended masker key derive


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-9
changelog:
  - Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
  - Resolves: Bug 1289890


author: Kai Engert <kaie@redhat.com> - 3.18.0-5.3
changelog:
  - On RHEL 6.x keep the TLS version defaults unchanged.
  - Require softokn build 22 to ensure runtime compatibility.
  - Relax the requirement from pkcs11-devel to nss-softokn-freebl-devel
    to allow same or newer.
  - Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-5
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Fix shell syntax error in nss/tests/all.sh
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-3
changelog:
  - Restore a patch that had been mistakenly disabled
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-1
changelog:
  - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6]
  - Resolves: Bug 1131311 - rhel65 ns-slapd crash, segfault error 4 in libnss3.so in PK11_DoesMechanism at pk11slot.c:1824
  - Temporarily disable some tests until expired PayPalEE.cert is renewed


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-4
changelog:
  - Keep the same cipher suite order as we had in NSS_3_15_3_RTM
  - Resolves: Bug 1123092 - openldap-2.4.23-34.el6_5.1.i686 fails after updating nss to nss-3.16.1-4.el6_5.i686


author: Elio Maldonado <emaldona@redhat.com> - 3.16.2.3-3
changelog:
  - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3
  - Remove unused indentation pseudo patch
  - require nss util 3.16.2.3
  - Restore patch for certutil man page
  - supply missing options descriptions to the man page


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-6
changelog:
  - Update pem sources to the same ones used on rhel-7
  - Remove no longer needed patches on account of this update
  - Resolves: Bug 1002205


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-5
changelog:
  - Move removal of directories to the end of the %prep section
  - Resolves: Bug 689919 - build without any softoken or util sources in the tree


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-3
changelog:
  - Fix pem module trashing of private keys on failed login
  - Resolves: Bug 1002205 - PEM module trashes private keys if login fails


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-2
changelog:
  - Restore use of indentation patch until another bug is resolved
  - Resolves: Bug 606022 - nss security tools lack man pages


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-11
changelog:
  - Resolves: Bug 689919 - build without any softoken or util sources in the tree
  - Add define-uint32.patch to deal with using older version of nss-softokn
  - Fix suboptimal test failure detection shell code in the %check section


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-10
changelog:
  - Prevent users from disabling the internal crypto module
  - Resolves: Bug 1059176 - nss segfaults with opencryptoki module


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-9
changelog:
  - Improve support for ECDSA algorithm via pluggable ECC
  - Document the purpose of the iquote.patch
  - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-8
changelog:
  - Install man pages for the nss security tools
  - Resolves: Bug 606022 - nss security tools lack man pages


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-7
changelog:
  - Fix the numbering and naming of the patches
  - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-6
changelog:
  - make derEncodingsMatch work with encrypted keys
  - rename a patch, dropped the experimental moniker from it
  - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-5
changelog:
  - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1042686 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-6.6]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Disable hw gcm on rhel-5 based build environments where OS lacks support
  - Rollback changes to build nss without softokn until Bug 689919 is approved
  - Cipher suite was run as part of the nss-softokn build


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Build nss without softoken, freebl, or util sources in the build source tree
  - Resolves: Bug 1032472 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-1
changelog:
  - Update to NSS_3_15_3_RTM
  - Resolves: Bug 1032472 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741
  - Resolves: Bug 1031238 - deadlock in trust domain lock and object lock


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-15
changelog:
  - Using export NSS_DISABLE_HW_GCM=1 to deal with some problemmatic build systems
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-14
changelog:
  - Add s390x and ia64 to the %define multilib_arches list used for defining alt_ckbi
  - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-13
changelog:
  - Add zero default value to DISABLETEST check and fix the TEST_FAILURES check and reporting
  - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS
  - Related: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-12
changelog:
  - Add a zero default value to the DISABLETEST and TEST_FAILURES checks
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-11
changelog:
  - Fix the test for zero failures in the %check section
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-10
changelog:
  - Restore a mistakenly removed patch
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-9
changelog:
  - Rebuild for the pem module to link with freel from nss-softokn-3.14.3-6.el6
  - Related: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]
  - Related: rhbz#1010224 - NSS 3.15 breaks SSL in OpenLDAP clients


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-8
changelog:
  - Don't require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Kai Engert <kaie@redhat.com> - 3.15.1-7
changelog:
  - Additional syntax fixes in nss-versus-softoken-test.patch
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-6
changelog:
  - Fix all.sh test for which application was last build by updating nss-versus-softoken-test.path
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-5
changelog:
  - Disable the cipher suite already run as part of the nss-softokn build
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-4
changelog:
  - Require nss-softokn-fips
  - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-2
changelog:
  - Fix relative path in %check section to prevent undetected test failures
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-1
changelog:
  - Rebase to NSS_3.15.1_RTM
  - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x) 
  - Update patches on account of the shallow tree with the rebase to 3.15.1
  - Update the pem module sources  nss-pem-20130405.tar.bz2 with latest patches applied
  - Remove patches rendered obsolete by the nss rebase and the updated nss-pem sources
  - Enable the iquote.patch to access newly introduced types


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-37
changelog:
  - Do not hold issuer certificate handles in the crl cache
  - Resolves: rhbz#961659 - SQL backend does not reload certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-34
changelog:
  - Fix race condition in cert code related to smart cards
  - Resolves: rhbz#903017 - Firefox hang when CAC/PIV smart card certificates are viewed in the certificate manager


author: Kai Engert <kaie@redhat.com> - 3.14.3-33
changelog:
  - Configure libnssckbi.so to use the alternatives system
    in order to prepare for a drop in replacement.
    Please ensure that older packages that don't use the alternatives
    system for libnssckbi.so have a smaller n-v-r.


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Syncup with uptream changes for aes gcm and ecc suiteb
  - Enable ecc support for suite b
  - Apply several upstream AES GCM fixes
  - Use the pristine nss upstream sources with ecc included
  - Export NSS_ENABLE_ECC=1 in both the build and the check sections
  - Make failed requests for unsupoprted ssl pkcs 11 bypass non fatal
  - Resolves: rhbz#882408 - NSS_NO_PKCS11_BYPASS must preserve ABI
  - Related:  rhbz#918950  - rebase nss to 3.14.3


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Revert to accepting MD5 on digital signatures by default
  - Resolves: rhbz#918136 - nss 3.14 - MD5 hash algorithm disabled


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-3
changelog:
  - Ensure pem uses system freebl as with this update freebl brings in new API's
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado - 3.14.3-2
changelog:
  - Install sechash.h and secmodt.h which are now provided by nss-devel
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Remove unsafe -r option from commands that remove headers already shipped by nss-util and nss-softoken


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3.14.3_RTM
  - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue
  - Update expired test certificates (fixed in upstream bug 852781)
  - Sync up pem module's rsawrapr.c with softoken's upstream changes for nss-3.14.3
  - Reactivate the aia tests


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-12
changelog:
  - Recreate the distrust patch by backporting the upstream one
  - Resolves: rhpbz#890914 - Dis-trust TURKTRUST mis-issued *.google.com certificate


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-9
changelog:
  - Fix locking issue causing curl hangs and authenticate to the correct session
  - Resolves: rhbz#872838


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-8
changelog:
  - PEM peminit returns CKR_CANT_LOCK when needed to inform caller module isn't thread safe
  - Resolves: rhbz#555019 - [PEM] invalid writes in multi-threaded libcurl based application


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-7
changelog:
  - Add dummy sources file to test for and prevent breaking rhpkg commands
  - Enable testing for 'rhpk upload' and 'rhpk new-sources' breakage such as hangs
  - Related: rhbz#837089


author: Elio Maldonado <emaldona@redhat.com> - 3.14.0.0-1
changelog:
  - Rebase to nss-3.14.0.0-1
  - Resolves: rhbz#837089
  - Update ssl-cbc-random-iv patch for new sources
  - Remove patches rendered obsoleted by rebase to 3.14
  - Add a patch to enforce no pkcs11 bypass


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-3
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Use completed patch per code review


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-2
changelog:
  - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name
  - Resolves: rhbz#768669 - PEM unregistered callback causes SIGSEGV


author: Elio Maldonado <emaldona@redhat.com> - 3.13.3-1
changelog:
  - Update to 3.13.3
  - Resolves: rhbz#798539 - Distrust MITM subCAs issued by TrustWave
  - Remove builtins-nssckbi_1_88_rtm.patch which the rebase obsoletes


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-4
changelog:
  - Add two needed patches
  - Resolves: rhbz#783315 - Need nss workaround for freebl bug that causes openswan to drop connections
  - Resolves: rhbz#747387 - Unable to contact LDAP Server during winsync


author: Elio Maldonado <emaldona@redhat.com> - 3.13.1-1
changelog:
  - Resolves: Bug 744070 - Update to 3.13.1
  - Resolves: Bug 784674 - nss should protect against being called before nss_Init
  - Resolves: Bug 784490 - CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-7
changelog:
  - Update expired PayPayEE.cert test certificate
  - Conditionalize some database tests on user not being root


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-3
changelog:
  - Add requires for pkcs11-devel on nss-softokn-freebl devel
  - Run the test suites in check section per packaging guidelines


author: Elio Maldonado <emaldona@redhat.com> - 3.12.9-2
changelog:
  - Prefer user database ca cert trust settings system's ones
  - Swap internal key slot on fips mode switches


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-2
changelog:
  - Add suppport for pkcs8 formatted keys in the pem module
  - Add verify(not md5 size mtime) to configuration files attributes
  - Prevent nss-sysinit disabling on package upgrade
  - Create pkcs11.txt with correct permissions regardless of current umask
  - Add option to setup-nsssysinit.sh to report nss-sysinit status
  - Update test certificate which had expired


author: Elio Maldonado <emaldona@redhat.com> - 3.12.6-5
changelog:
  - Appying the changes in previous log
  - Changing some BuildRequires to >= as well
  - Temporarily disabling all tests for faster builds


author: Elio Maldonado <emaldona@redhat.com> - 3.12.5-7.3
changelog:
  - Resolves: #551784 rebuilt after nss-softokn and nss-util builds
  - this will generate the coorect nss.spec


author: Elio Maldonado <emaldona@redhat.com> - 3.12.5-7.1
changelog:
  - Updated to 3.12.5 from CVS import from Fedora 12
  - Moved blank legacy databases to the lookaside cache
  - Reenabled the full test suite
  - Retagging for a RHEL-6-test-build


author: Elio Maldonado<emaldona@redhat.com> - 3.12.5-1.8
changelog:
  - Fix nsssysinit to set the default flags on the crypto module (#545779)
  - Fix nsssysinit to enable apps to use the system cert store, patch contributed by David Woodhouse (#546221)
  - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387)
  - Sysinit requires coreutils for post install scriplet (#547067)
  - Remove redundant header from the pem module


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-14
changelog:
  - Fix bug where user was prompted for a password when listing keys on an empty system database (#527048)
  - Fix setup-nsssysinit to handle more general flags formats (#527051)


author: Elio Maldonado<emaldona@redhat.com - 3.12.4-9
changelog:
  - Install blank databases and configuration file for system shared database
  - nsssysinit queries system for fips mode before relying on environment variable


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-3
changelog:
  - PEM module implements memory management for internal objects - 509705
  - PEM module doesn't crash when processing malformed key files - 512019


author: Elio Maldonado<emaldona@redhat.com> - 3.12.4-2
changelog:
  - Remove symbolic links to shared libraries from devel - 521155
  - No rpath-link in nss-softokn-config


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-30
changelog:
  - Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766
  - Fixed requires and buildrequires as per recommendations in spec file review


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-29
changelog:
  - Restoring patches 2 and 7 as we still compile all sources
  - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-25
changelog:
  - Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn
  - Add a temprary hack to nss.pc.in to unblock builds


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-22
changelog:
  - Fix nss-config not to include nssutil
  - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite


author: Elio Maldonado<emaldona@redhat.com> - 3.12.3.99.3-19
changelog:
  - remove patches that are now in nss-softokn and
  - remove spurious exec-permissions for nss.pc per rpmlint
  - single requires line in nss.pc.in


author: Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11
changelog:
  - split off nss-softokn and nss-util as subpackages with their own rpms
  - first phase of splitting nss-softokn and nss-util as their own packages


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-10
changelog:
  - must install libnssutil3.since nss-util is untagged at the moment
  - preserve time stamps when installing various files


author: Elio Maldonado <emaldona@redhat.com> - 3.12.3.99.3-5
changelog:
  - updated pem module incorporates various patches
  - fix off-by-one error when computing size to reduce memory leak. (483855)
  - fix data type to work on x86_64 systems. (429175)
  - fix various memory leaks and free internal objects on module unload. (501080)
  - fix to not clone internal objects in collect_objects().  (501118)
  - fix to not bypass initialization if module arguments are omitted. (501058)
  - fix numerous gcc warnings. (500815)
  - fix to support arbitrarily long password while loading a private key. (500180) 
  - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191)


author: Kai Engert <kaie@redhat.com> - 3.12.3-7
changelog:
  - re-enable test suite
  - add patch for upstream bug 488646 and add newer paypal
    certs in order to make the test suite pass


author: Kai Engert <kaie@redhat.com> - 3.12.3-3
changelog:
  - ship .chk files instead of running shlibsign at install time
  - include .chk file in softokn-freebl subpackage
  - add patch for upstream nss bug 488350


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-3
changelog:
  - nss package should own /etc/prelink.conf.d folder, rhbz#452062
  - use upstream patch to fix test suite abort


author: Kai Engert <kengert@redhat.com> - 3.11.99.3-2
changelog:
  - Build against gcc 4.3.0, use workaround for bug 432146
  - Run the test suite after the build and abort on failures.


author: Kai Engert <kengert@redhat.com> - 3.11.7-10
changelog:
  - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist
    our signed libraries and protect them from modification.


author: Kai Engert <kengert@redhat.com> - 3.11.7-2
changelog:
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5.
  - Use a workaround to avoid mozilla bug 51429.


author: Kai Engert <kengert@redhat.com> - 3.11.5-2
changelog:
  - Fix rhbz#230545, failure to enable FIPS mode
  - Fix rhbz#220542, make NSS more tolerant of resets when in the 
    middle of prompting for a user password.


author: Kai Engert <kengert@redhat.com> - 3.11.5-1
changelog:
  - Update to 3.11.5
  - This update fixes two security vulnerabilities with SSL 2
  - Do not use -rpath link option
  - Added several unsupported tools to tools package


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 1.1.0-5
changelog:
  - Minor tweaks to summaries and descriptions.
  - Don't own /usr/include/X11.
  - Use a regular, unversioned dep on xorg-x11-filesystem.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193421)
  - Replace "makeinstall" with "make install DESTDIR=..."


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libSM to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libSM to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Renamed package to remove "xorg-x11" from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro


author: Joe Jin <joe.jin@oracle.com> - 4.4.4-155.0.74.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=407dfd634e345d4ab14bf7eabb372ba3ebdded4c
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - msix: set vlapic IRR flag when msix vector been updated (Joe Jin)  [Orabug: 30131722]


author: root <root@b358c3611d2b.(none)> - 4.4.4-155.0.73.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=c6a53175dec7e46a9ee81572d0e70a6818cc89a0
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Commit a020f11d51 "Xend: Close race condition between python threads during kexec" removed restart_in_progress = False in constructDomain(), which prevents guest to be destroyed under some conditions. Set the flag to False after guest unpaused will avoid it. (root)  [Orabug: 29851288]


author: root <root@b358c3611d2b.(none)> - 4.4.4-155.0.72.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=a897949c11deda48b3b7e7e41d8a62a90b81e96a
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/HVM: don't give the wrong impression of WRMSR succeeding (root)  [Orabug: 29554247] 
  - Red-tape: Update repo with new CVE for XSA-297 (Patrick Colp)  [Orabug: 29725308]  {CVE-2019-11091}


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-155.0.71.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=04eacc1e0105409f9bdf022245675ad73da42a4f
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spec-ctl: Expose X86_FEATURE_MD_CLEAR to guests (Patrick Colp)  [Orabug: 29677170]  {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130}
  - x86/spec-ctrl: Introduce options to control VERW flushing (Andrew Cooper)  [Orabug: 2977170]  {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130}
  - x86/spec-ctrl: Infrastructure to use VERW to flush pipeline buffers (Andrew Cooper)  [Orabug: 29677170]  {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130}
  - x86/spec-ctrl: CPUID/MSR definitions for Microarchitectural Data Sampling (Andrew Cooper)  [Orabug: 29677170]  {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130}


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-155.0.70.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=fe6aeea547601bf272e1da031d52c5182917e992
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Config: Update git links to use linux-git.us.oracle.com (Patrick Colp)  [Orabug: 29558670] 
  - gnttab: set page refcount for copy-on-grant-transfer (Jan Beulich)  [Orabug: 29442731]


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-155.0.69.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=9137bf771e8bec498e90f908de1e37595ebb8b7f
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spec-ctrl: Add option to intercept SPEC_CTRL MSR if we have EIBRS (Patrick Colp)  [Orabug: 29554078]


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-155.0.68.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=1b24fac537efe5f5480fc77f771edb11bd308de1
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - tools/libxc: Expose X86_FEATURE_ARCH_CAPS to guests (Patrick Colp)  [Orabug: 29292333] 
  - x86/spec-ctrl: Don't frob SPEC_CTRL MSR on idle if we have EIBRS (Patrick Colp)  [Orabug: 29292333] 
  - x86/spec-ctrl: Enable enhanced IBRS and make it the default (Patrick Colp)  [Orabug: 29292333] 
  - x86/spec-ctrl: Add functions for supporting enhanced IBRS (Patrick Colp)  [Orabug: 29292333]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.0.67.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=c7a51043fd200a42af231cb82f19a2bd804731e4
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - retpoline: disable jump tables (Norbert Manthey)  [Orabug: 29193117]  {CVE-2017-5753}
  - x86: assorted array_index_nospec() insertions (Jan Beulich)  [Orabug: 29193117]  {CVE-2017-5753}
  - xen: Port the array_index_nospec() infrastructure from Linux (Andrew Cooper)  [Orabug: 29193117]  {CVE-2017-5753}


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.0.66.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=8dccdd881e21695aeb33913094061c9497546950
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spec-ctrl: Don't mask off CPUID7.edx[31] (SSBD bit) (Boris Ostrovsky)  [Orabug: 29139206]


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-155.0.65.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=71ee395559ac03701ac2f090e82c928b6c2ce794
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Red-tape: Update the repo with CVE for XSA-280 (Patrick Colp)  [Orabug: 28945152]  {CVE-2018-19966}
  - Red-tape: Update the repo with CVE for XSA-279 (Patrick Colp)  [Orabug: 28945119]  {CVE-2018-19965}
  - Red-tape: Update the repo with CVE for XSA-275 (Elena Ufimtseva)  [Orabug: 28951148]  {CVE-2018-19961}
  - Red-tape: Update the repo with CVE XSA-282 (Ross Philipson)  [Orabug: 28924128]  {CVE-2018-19967}


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.64.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=da5606738509aab67eb02e13b15c975ae2425b43
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - AMD/IOMMU: suppress PTE merging after initial table creation (Jan Beulich)  [Orabug: 28951148] 
  - amd/iommu: fix flush checks (Roger Pau Monné)  [Orabug: 28951148] 
  - xen: Fix determining when domain creation is complete (Andrew Cooper)  
  - x86/shadow: shrink struct page_info's shadow_flags to 16 bits (Jan Beulich)  [Orabug: 28945152] 
  - x86/shadow: move OOS flag bit positions (Jan Beulich)  [Orabug: 28945152] 
  - x86/mm: Don't perform flush after failing to update a guests L1e (Andrew Cooper)  [Orabug: 28945119]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-155.0.63.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=a294b50358698ed212dc8f1bdbb7f5cf3351cb44
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86: work around HLE host lockup erratum (Jan Beulich)  [Orabug: 28924128] 
  - x86: extend get_platform_badpages() interface (Jan Beulich)  [Orabug: 28924128]


author: Tianyue Lan <tianyue.lan@oracle.com> - 4.4.4-155.0.62.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=159d3f21f493caa64718b0f43b9591cb3079009c
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - rebuild with new secureboot key [Orabug: 28900807]


author: Eric DeVolder <eric.devolder@oracle.com> - 4.4.4-155.0.61.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=159d3f21f493caa64718b0f43b9591cb3079009c
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: remove extraneous waitForDevices() call in soft_reset (Eric DeVolder)  [Orabug: 28783430] 
  - xend: detect and correct race condition in DevController hotplug (Eric DeVolder)  [Orabug: 28783430]


author: Eric DeVolder <eric.devolder@oracle.com> - 4.4.4-155.0.60.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=67eb9ea16555eb3a827fa1bbfc7297115eed8bf5
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: use DevController waitFor() methods for non-hotplug devices (Eric DeVolder)  
  - xend: mark appropriate DevController subclasses as not hotplug (Eric DeVolder)  [Orabug: 28838569]


author: Eric DeVolder <eric.devolder@oracle.com> - 4.4.4-155.0.59.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=3048fd22c26d095de82291de9018134b4c68294f
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: prevent scrubbing stall during kexec soft_reset (Eric DeVolder)  [Orabug: 28817482]


author: Eric DeVolder <eric.devolder@oracle.com> - 4.4.4-155.0.58.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=8b7eb64047256b59d5fd3fdb3a05e2c989352082
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: Properly wait for hot plug devices to complete (Eric DeVolder)  [Orabug: 27338786] [Orabug: 27927358] 
  - xend: Mark vfb and vkbd devices as not hot plug (Eric DeVolder)


author: Tianyue Lan <tianyue.lan@oracle.com> - 4.4.4-155.0.57.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=4b6b4867ac0a5d97bfbd6cf4dde94c31e8a50f42
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - one-off build


author: Eric DeVolder <eric.devolder@oracle.com> - 4.4.4-155.0.56.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=4b6b4867ac0a5d97bfbd6cf4dde94c31e8a50f42
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: do not raise an exception if xc_domain_setsmt fails (Eric DeVolder)  [Orabug: 28717409]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-155.0.55.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=687c20b5e9067641e09f7870fa248ab392386012
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/EFI: further correct FPU state handling around runtime calls (Jan Beulich)  [Orabug: 28735776] 
  - x86/EFI: fix FPU state handling around runtime calls (Jan Beulich)  [Orabug: 28735776]


author: Eric DeVolder <eric.devolder@oracle.com> - 4.4.4-155.0.54.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=a020f11d51785a57ee70b8273b7da392e8cffd08
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Xend: Close race condition between python threads during kexec (Eric DeVolder)  [Orabug: 28440062] [Orabug: 28748880]


author: Eric DeVolder <eric.devolder@oracle.com> - 4.4.4-155.0.53.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=6b233578f5ce09d4beec9e97754321d5f13da836
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: fix exceptions thrown in setTopology() (Eric DeVolder)  [Orabug: 28717409] 
  - Revert "x86/EFI: fix FPU state handling around runtime calls" (Ross Philipson)  [Orabug: 28735776] 
  - Revert "x86/EFI: further correct FPU state handling around runtime calls" (Ross Philipson)  [Orabug: 28735776]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.52.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=a65957cb5342221720e7a6dd89a081631db75289
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - vnuma: check cpus option is suitable for vnuma (Elena Ufimtseva)  [Orabug: 28632335]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-155.0.51.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=962c2c7bd087f5fa6ed3971e59c3b34b761ba105
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spec-ctrl: command line handling adjustments (Jan Beulich)  [Orabug: 28696342] 
  - x86/HVM: don't cause #NM to be raised in Xen (Jan Beulich)  [Orabug: 28696342] 
  - x86/EFI: further correct FPU state handling around runtime calls (Jan Beulich)  [Orabug: 28696342] 
  - x86/EFI: fix FPU state handling around runtime calls (Jan Beulich)  [Orabug: 28696342]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.0.50.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=47eb65bf41acb5de51b26ac7149fb2ffaf8cf26c
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Xend: Add support for changing backend vbd device (Bhavesh Davda)  [Orabug: 28688170]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.49.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=deddf994efb7b742ed9bc83478892163448c0623
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - vnuma: dont fail guest creation when cpus are defined incorrectly (Elena Ufimtseva)  [Orabug: 28632335] 
  - xend: fix migration code path for XendDomainInfo memory leakage (Manjunath Patil)  [Orabug: 28294063] 
  - xend: fix memory leak of XendDomainInfo attributes (Manjunath Patil)


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.0.48.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=9876b869fa5d650b4352a161d9956e43d8a2c2ca
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - intel/microcode: Synchronize update signature (Boris Ostrovsky)  [Orabug: 28610312]


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-155.0.47.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=6cb2b10c6652066e87dedba104a963189b8f5705
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/vtx: Fix the checking for unknown/invalid MSR_DEBUGCTL bits (Andrew Cooper)  [Orabug: 28432092]  {CVE-2018-15468}


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.0.46.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=37c139ca51ded61f1aa064d0718643054cdb852a
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spectre: Fix SPEC_CTRL_ENTRY_FROM_INTR_IST macro (Boris Ostrovsky)  [Orabug: 28537443]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.0.45.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=016c69c5931e1e93ee2271fc6ba83f274023ad6c
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/microcode: Synchronize late microcode loading (Boris Ostrovsky)  [Orabug: 28526227] 
  - Revert "microcode: pin the sibling while updating microcode on a core" (Boris Ostrovsky)  [Orabug: 28526227]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.0.44.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=6b194035640b39c1a49372c0412f92d6ccfe2071
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - microcode: pin the sibling while updating microcode on a core (Boris Ostrovsky)  [Orabug: 28518195]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-155.0.43.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=f6f0fa8e504788ce420685594a84cee34b261d94
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Revert "xend: fix memory leak of XendConfig.XendConfig object" (Konrad Rzeszutek Wilk)  [Orabug: 28506640]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-155.0.42.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=12e30bfbcf4aef7e74fcfc4664195d5265dc47a6
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - l1tf: Utility to offline/online SMT siblings. (Ross Philipson)  [Orabug: 28487044]  {CVE-2018-3646}
  - x86/spec-ctrl: Introduce an option to control L1D_FLUSH for HVM guests (Andrew Cooper)  [Orabug: 28487044]  {CVE-2018-3620} {CVE-2018-3646}
  - x86/msr: Virtualise MSR_FLUSH_CMD for guests (Andrew Cooper)  [Orabug: 28487044]  {CVE-2018-3646} {CVE-2018-3646}
  - x86/spec-ctrl: CPUID/MSR definitions for L1D_FLUSH (Andrew Cooper)  [Orabug: 28487044]  {CVE-2018-3646} {CVE-2018-3646}
  - x86/spec-ctrl: Calculate safe PTE addresses for L1TF mitigations (Andrew Cooper)  [Orabug: 28487044]  {CVE-2018-3620} {CVE-2018-3646}
  - x86: command line option to avoid use of secondary hyper-threads (Jan Beulich)  [Orabug: 28487044]  {CVE-2018-3646}
  - cpupools: fix state when downing a CPU failed (Jan Beulich)  [Orabug: 28487044]  {CVE-2018-3646}


author: Manjunath Patil <manjunath.b.patil@oracle.com> - 4.4.4-155.0.41.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=0619cea90227fb2dc5db9822591a4273f5060ab9
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: fix memory leak of XendConfig.XendConfig object (Manjunath Patil)  [Orabug: 28223463]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.0.40.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=734e463deda25ae779a152766b9be590fb800d5c
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/HVM: Restart ioreq processing state machine (Boris Ostrovsky)  [Orabug: 28200421]


author: Dongli Zhang <dongli.zhang@oracle.com> - 4.4.4-155.0.39.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=5a4a49d0bc7ef092187eb79cc959adac247b2404
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - svm: fix incorrect TSC scaling (Haozhong Zhang)  [Orabug: 27182906]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-155.0.38.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=c4b1894da52a61cf37268707ec7c8823e966fcf2
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spec-ctrl: Mitigations for LazyFPU (Andrew Cooper)  [Orabug: 28135193]  {CVE-2018-3665}
  - x86: Support fully eager FPU context switching (Andrew Cooper)  [Orabug: 28135193]  {CVE-2018-3665}


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-155.0.37.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=3719b968b9b0a7db5c1fa40fc2994ec1dd959837
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - [xenmicrocode] Fix error reporting on successful return from tool (Ross Philipson)  [Orabug: 28128749] 
  - x86: correct default_xen_spec_ctrl calculation (Jan Beulich)  [Orabug: 28034994] 
  - x86/msr: Virtualise MSR_SPEC_CTRL.SSBD for guests to use (Andrew Cooper)  [Orabug: 28034994]  {CVE-2018-3639}
  - x86/Intel: Mitigations for GPZ SP4 - Speculative Store Bypass (Andrew Cooper)  [Orabug: 28034994]  {CVE-2018-3639}
  - x86/AMD: Mitigations for GPZ SP4 - Speculative Store Bypass (Andrew Cooper)  [Orabug: 28034994]  {CVE-2018-3639}
  - x86/spec_ctrl: Introduce a new `spec-ctrl=` command line argument to replace `bti=` (Andrew Cooper)  [Orabug: 28034994]  {CVE-2018-3639}
  - x86/cpuid: Improvements to guest policies for speculative sidechannel features (Andrew Cooper)  [Orabug: 28034994]  {CVE-2018-3639}
  - x86/spec_ctrl: Explicitly set Xen's default MSR_SPEC_CTRL value (Andrew Cooper)  [Orabug: 28034994]  {CVE-2018-3639}
  - x86/spec_ctrl: Split X86_FEATURE_SC_MSR into PV and HVM variants (Andrew Cooper)  [Orabug: 28034994]  {CVE-2018-3639}
  - x86/spec_ctrl: Elide MSR_SPEC_CTRL handling in idle context when possible (Andrew Cooper)  [Orabug: 28034994]  {CVE-2018-3639}
  - x86/spec_ctrl: Rename bits of infrastructure to avoid NATIVE and VMEXIT (Andrew Cooper)  [Orabug: 28034994]  {CVE-2018-3639}
  - x86/spec_ctrl: Fold the XEN_IBRS_{SET,CLEAR} ALTERNATIVES together (Andrew Cooper)  [Orabug: 28034994]  {CVE-2018-3639}
  - x86/spec_ctrl: Merge bti_ist_info and use_shadow_spec_ctrl into spec_ctrl_flags (Andrew Cooper)  [Orabug: 28034994]  {CVE-2018-3639}
  - x86/spec_ctrl: Express Xen's choice of MSR_SPEC_CTRL value as a variable (Andrew Cooper)  [Orabug: 28034994]  {CVE-2018-3639}
  - x86/spec_ctrl: Read MSR_ARCH_CAPABILITIES only once (Andrew Cooper)  [Orabug: 28034994]  {CVE-2018-3639}
  - x86/spec_ctrl: Assume that STIBP feature is always available (Boris Ostrovsky)  [Orabug: 28034994]  {CVE-2018-3639}
  - x86/spec_ctrl: Updates to retpoline-safety decision making (Andrew Cooper)  [Orabug: 28034994]  {CVE-2018-3639}
  - Revert "x86/boot: Disable IBRS in intr/nmi exit path at bootup stage" (Boris Ostrovsky)  [Orabug: 28034994]  {CVE-2018-3639}


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.0.36.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=5ee0a217664a1fde547afa506e92e4998ed26699
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Red-tape: Update the repo with CVE XSA-262 (Boris Ostrovsky)  [Orabug: 27948889]  {CVE-2018-10981}
  - Red-tape: Update the repo with CVE XSA-261 (Boris Ostrovsky)  [Orabug: 27948864]  {CVE-2018-10982}


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.35.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=a20dadee84429112c3b5f245180f72d990063d20
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/HVM: guard against emulator driving ioreq state in weird ways (Jan Beulich)  [Orabug: 27948889] 
  - x86/vpt: add support for IO-APIC routed interrupts (Xen Project Security Team)  [Orabug: 27948864]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.34.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=c6b30b4f49430b1314928a4d98a5e9e754895e4d
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - vnuma: unset smt even if vnuma is off (Elena Ufimtseva)  [Orabug: 27950640] 
  - x86/paging: don't unconditionally BUG() on finding SHARED_M2P_ENTRY (Jan Beulich)  [Orabug: 27965254]  {CVE-2017-17565}
  - x86/mm: don't wrongly set page ownership (Jan Beulich)  [Orabug: 27965236]  {CVE-2017-17566}
  - misc/xenmicrocode: Upload /lib/firmware/<some blob> to the hypervisor (Konrad Rzeszutek Wilk)  [Orabug: 27957822]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-155.0.33.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=75ac5267506600d4587b80daae6bb694099e2c03
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/traps: Fix handling of #DB exceptions in hypervisor context (Andrew Cooper)  [Orabug: 27963989]  {CVE-2018-8897}
  - x86/traps: Use an Interrupt Stack Table for #DB (Andrew Cooper)  [Orabug: 27963989]  {CVE-2018-8897}
  - x86/pv: Move exception injection into {,compat_}test_all_events() (Andrew Cooper)  [Orabug: 27963989]  {CVE-2018-8897}
  - x86/traps: Fix %dr6 handing in #DB handler (Andrew Cooper)  [Orabug: 27963989]  {CVE-2018-8897}
  - x86/traps: Misc non-functional improvements to set_debugreg() (Andrew Cooper)  [Orabug: 27963989]  {CVE-2018-8897}
  - x86/pv: Several bugs in set_debugreg() (Ross Philipson)  [Orabug: 27963989]  {CVE-2018-8897}
  - x86/pv: The do_get_debugreg CR4.DE condition is inverted. (Ross Philipson)  [Orabug: 27963989]  {CVE-2018-8897}


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.32.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=d787e7a9d35cc2880b525f1d7a35f27969590f4c
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - vnuma: dont turn on smt for odd number of vcpus (Elena Ufimtseva)  [Orabug: 27950640]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.31.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=b68fb6eb2d74ac16bb1e733c5fe5c9d9622b0838
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - vnuma: dont fail guest creation if vnuma cannot be set (Elena Ufimtseva)  [Orabug: 27734123]


author: Joao Martins <joao.m.martins@oracle.com> - 4.4.4-155.0.30.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=2446bf402a359332c21fe3f74d81a4c31191752f
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/vMSI-X: honor all mask requests (Jan Beulich)  [Orabug: 27805894]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.29.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=b16b37d1e358a490d4cf930fe8efe1432d4723ef
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - remove bogus file in the branch. (Elena Ufimtseva)


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.28.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=e1d84ac130fa17bafc394684ae9ba0eedfdca9a9
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/shadow: fix ref-counting error handling (Jan Beulich)  [Orabug: 27803798]  {CVE-2017-17564}
  - x86/shadow: fix refcount overflow check (Jan Beulich)  [Orabug: 27803801]  {CVE-2017-17563}


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-155.0.27.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=bf523bc61677448cb7bb79980d6969896d005bd5
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - hvmloader: Initialize a variable before we use it (Patrick Colp)  [Orabug: 27751146] 
  - x86/hvm: indicate avaliability of HW support of APIC virtualization to HVM guests (Boris Ostrovsky)  [Orabug: 27739755] 
  - x86/boot: Disable IBRS in intr/nmi exit path at bootup stage (Zhenzhong Duan)  [Orabug: 27411047] 
  - Fix a wrong check in DO_SPEC_CTRL_EXIT_TO_XEN (Zhenzhong Duan)  [Orabug: 27738692]  {CVE-2017-5715}


author: Dongli Zhang <dongli.zhang@oracle.com> - 4.4.4-155.0.26.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=eb6d0ea26496051c6ab876e4037fca0b9cf079d9
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xenstore: add assertion in database dumping code (Wei Liu)  [Orabug: 27608242] 
  - xenstore: send error earlier in do_mkdir (Wei Liu)  [Orabug: 27608242] 
  - xenstore: add memory allocation debugging capability (Juergen Gross)  [Orabug: 27608242] 
  - xenstore: use temporary memory context for firing watches (Juergen Gross)  [Orabug: 27608242] 
  - xenstore: add explicit memory context parameter to get_node() (Juergen Gross)  [Orabug: 27608242] 
  - xenstore: add explicit memory context parameter to read_node() (Juergen Gross)  [Orabug: 27608242] 
  - xenstore: add explicit memory context parameter to get_parent() (Juergen Gross)  [Orabug: 27608242] 
  - xenstore: call each xenstored command function with temporary context (Juergen Gross)  [Orabug: 27608242] 
  - cxenstored: document a bunch of short options in help string (Wei Liu)  [Orabug: 27608242]


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-155.0.25.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=18c714d6839a3fd0d42a5400de940c5b5e788a8c
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spectre: Make retpoline code match upstream version (Patrick Colp)  
  - xenbaked.c: Avoid divide by zero issue (Joe Jin)  [Orabug: 27687906] 
  - xen/trace: Fix trace metadata page count calculation (revert fbf96e6) (George Dunlap)  [Orabug: 27602524] 
  - x86/traps/spectre: Fix IO emulation stub code (Boris Ostrovsky)  [Orabug: 27693394]  {CVE-2017-5715}


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.24.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=fa171d3584f49dae46fcea63516b25465473a83b
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: use vcpus variable in log.warn (Elena Ufimtseva)  
  - xend: turn off smt if vcpus are not multiple of threads (Elena Ufimtseva)  [Orabug: 27648711] 
  - xend: fix preserving smt across reboot (Elena Ufimtseva)  [Orabug: 27648711] 
  - xend: fix is_vnuma_off function (Elena Ufimtseva)


author: Joao Martins <joao.m.martins@oracle.com> - 4.4.4-155.0.23.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=131bef465d7329311ec1d9d8f8011a1ceb8d32fe
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - mm, sysctl, xend: only create when there's enough scrubbed memory (Joao Martins)  [Orabug: 27450131]


author: Ross Philipson <ross.philipson@oracle.com> - 4.4.4-155.0.22.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=9ccc143584e12027a8db854d19ce8a120d22cfac
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - gnttab: don't blindly free status pages upon version change (Andrew Cooper)  [Orabug: 27614581]  {CVE-2018-7541}
  - memory: don't implicitly unpin for decrease-reservation (Andrew Cooper)  [Orabug: 27614605]  {CVE-2018-7540}
  - xend: allow setting topology if smt is off in bios (Elena Ufimtseva)  [Orabug: 27615667] 
  - x86/svm: clear CPUID IBPB when feature is not supported (Elena Ufimtseva)  [Orabug: 27416699] 
  - x86/domain: Move hvm_vcpu_initialize() before cpuid_policy_changed() (Elena Ufimtseva)  [Orabug: 27416699] 
  - x86, amd_ucode: support multiple container files appended together (Aravind Gopalakrishnan)  [Orabug: 27416699] 
  - x86/intel: change default governor to performance (Joao Martins)  [Orabug: 27614625] 
  - x86/cpuidle: Disable deep C-states due to erratum AAJ72 (Joao Martins)  [Orabug: 27614625] 
  - Revert "set max cstate to 1" (Joao Martins)  [Orabug: 27614625] 
  - x86/cpuidle: add new CPU families (Jan Beulich)  [Orabug: 27614625] 
  - x86/Intel: Broadwell doesn't have PKG_C{8,9,10}_RESIDENCY MSRs (Jan Beulich)  [Orabug: 27614625] 
  - x86: support newer Intel CPU models (Jan Beulich)  [Orabug: 27614625] 
  - mwait-idle: add KBL support (Len Brown)  [Orabug: 27614625] 
  - mwait-idle: add SKX support (Len Brown)  [Orabug: 27614625] 
  - mwait_idle: Skylake Client Support (Len Brown)  [Orabug: 27614625] 
  - x86: support newer Intel CPU models (Jan Beulich)  [Orabug: 27614625] 
  - x86/idle: update to include further package/core residency MSRs (Jan Beulich)  [Orabug: 27614625] 
  - mwait-idle: support additional Broadwell model (Len Brown)  [Orabug: 27614625] 
  - x86/mwait-idle: Broadwell support (Len Brown)  [Orabug: 27614625] 
  - x86/mwait-idle: disable Baytrail Core and Module C6 auto-demotion (Len Brown)  [Orabug: 27614625] 
  - mwait-idle: add CPU model 54 (Atom N2000 series) (Jan Kiszka)  [Orabug: 27614625] 
  - mwait-idle: support Bay Trail (Len Brown)  [Orabug: 27614625] 
  - mwait-idle: allow sparse sub-state numbering, for Bay Trail (Len Brown)  [Orabug: 27614625]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.21.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=c837c35e1c04791a50f930926ba815ca5b4d3661
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: restore smt parameter on guest reboot (Elena Ufimtseva)  [Orabug: 27574191]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.0.20.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=f36f7903ae0886ab4ef7e3e01c83c9dba819537b
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/spec_ctrl: Fix several bugs in SPEC_CTRL_ENTRY_FROM_INTR_IST (Andrew Cooper)  [Orabug: 27553369]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: allow easier disabling of BTI mitigations (Zhenzhong Duan)  [Orabug: 27553369]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/boot: Make alternative patching NMI-safe (Andrew Cooper)  [Orabug: 27553369]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - xen/cmdline: Fix parse_boolean() for unadorned values (Andrew Cooper)  [Orabug: 27553369]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - Optimize the context switch code a bit (Zhenzhong Duan)  [Orabug: 27553369]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - Update init_speculation_mitigations() to upstream's (Zhenzhong Duan)  [Orabug: 27553369]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/entry: Avoid using alternatives in NMI/#MC paths (Andrew Cooper)  [Orabug: 27553369]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - Update RSB related implementation to upstream ones (Zhenzhong Duan)  [Orabug: 27553369]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.19.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=bdecffda647e17f8aaeb4057bd1064236075bc9c
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xend: if secure boot is enabled dont write pci config space (Elena Ufimtseva)  [Orabug: 27533309]


author: Annie Li <annie.li@oracle.com> - 4.4.4-155.0.18.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=46aa4f995b266e9dc0bce98b448423c5fdc79fde
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - hvmloader: Correct nr_vnodes when init_vnuma_info() fails (Annie Li)  [Orabug: 27502337]


author: Annie Li <annie.li@oracle.com> - 4.4.4-155.0.17.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=1fb819ca1b801af1f59983f34776501336a57979
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Fail migration if destination does not allow pv guest running (Annie Li)  [Orabug: 27465310]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-155.0.16.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=dfc241a5b6a952bde385b1d68ef42acf8f80302c
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86: Expose CPUID.7, EDX.26->27 and CPUID.0x80000008, EBX.12 (redux) (Konrad Rzeszutek Wilk)  [Orabug: 27445667]


author: Annie Li <annie.li@oracle.com> - 4.4.4-155.0.15.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=d5afa57c42732dc35a572582099c67ee3c397434
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Enable creating pv guest on OVM3.4.4 by default (Annie Li)  [Orabug: 27424482]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.0.14.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=619dd3aa6aac97dbc9f23fdae3d6fd6dfab8a0da
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xen/x86: Make sure identify_cpu() is called with traps enabled (Joao Martins)  [Orabug: 27393237] 
  - xend: disallow pv guests to run (Joao Martins)  [Orabug: 27370330] 
  - hvmloader, x86/hvm, domctl: enumerate apicid based on vcpu_to_vnode (Joao Martins)  [Orabug: 27119689] 
  - xend: conditionally use dom0 vcpus for vnuma auto (Joao Martins)  [Orabug: 27119689] 
  - x86/Spectre: Set thunk to THUNK_NONE if compiler support is not available (Boris Ostrovsky)  [Orabug: 27375704]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.0.13.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=1d2270f50ef2b1b22b8f6ee7a9b571ea96f7f37b
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xen: No dependencies on dracut and microcode_ctl RPMs (Boris Ostrovsky)  [Orabug: 27409734]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.0.12.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=bd770ecc2d0647c0cf5498391e3392e4dff5c5f9
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86: Always print info about speculative mitigation facilities (Boris Ostrovsky)  [Orabug: 27352414]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Don't use retpoline if CONFIG_INDIRECT_THUNK is not set (Boris Ostrovsky)  [Orabug: 27352414]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.0.11.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=e08ec4a5cb232f5a153c716f5519e5fbb52584cd
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - rpm: Add microcode_ctl dependency (Boris Ostrovsky)  
  - x86: cpuint. Move the detection of CPU capabilities (Konrad Rzeszutek Wilk)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - migration: Set the CPUID _before_ XEN_DOMCTL_sethvmcontext (Konrad Rzeszutek Wilk)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/xen: Make cpu_has_[stibp,ibrsp,etc] work. (Konrad Rzeszutek Wilk)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Expose CPUID.7, EDX.26->27 and CPUID.0x80000008, EBX.12 (Konrad Rzeszutek Wilk)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/idle: Clear SPEC_CTRL while idle (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/cpuid: Offer Indirect Branch Controls to guests (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/ctxt: Issue a speculation barrier between vcpu contexts (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/entry: Clobber the Return Stack Buffer on entry to Xen (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/boot: Calculate the most appropriate BTI mitigation to use (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/entry: Use MSR_SPEC_CTRL at each entry/exit point (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Protect unaware domains from meddling hyperthreads (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/hvm: Permit guests direct access to MSR_{SPEC_CTRL,PRED_CMD} (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/migrate: Move MSR_SPEC_CTRL on migrate (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/msr: Emulation of MSR_{SPEC_CTRL,PRED_CMD} for guests (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Introduce a common cpuid_policy_updated() (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Introduce framework for cpuid policy updates (Boris Ostrovsky)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Introduce cpuid_policy (Boris Ostrovsky)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/msr: introduce struct msr_vcpu_policy (Sergey Dyasli)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/cmdline: Introduce a command line option to disable IBRS/IBPB, STIBP and IBPB (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - xen: add an optional string end parameter to parse_bool() (Juergen Gross)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/feature: Definitions for Indirect Branch Controls (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Introduce alternative indirect thunks (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Backport setup_force_cpu_cap (Boris Ostrovsky)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/amd: Try to set lfence as being Dispatch Serialising (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/boot: Report details of speculative mitigations (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Support indirect thunks from assembly code (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - common/wait: Clarifications to wait infrastructure (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86: Support compiling with indirect branch thunks (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/entry: Erase guest GPR state on entry to Xen (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/pv: Move hypercall handling up into C (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/hvm: Use SAVE_ALL to construct the cpu_user_regs frame after VMExit (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/entry: Rearrange RESTORE_ALL to restore register in stack order (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/entry: Remove support for partial cpu_user_regs frames (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/alt: Introduce ALTERNATIVE{,_2} macros (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/alt: Break out alternative-asm into a separate header file (Andrew Cooper)  [Orabug: 27344753]  {CVE-2017-5753} {CVE-2017-5715} {CVE-2017-5754}
  - x86/hvm: assert that we we saved a sane number of MSRs. (Tim Deegan)  [Orabug: 27338201] 
  - x86: Avoid corruption on migrate for vcpus using CPUID Faulting (Andrew Cooper)  [Orabug: 27338201] 
  - x86/hvm: Don't corrupt the HVM context stream when writing the MSR record (Andrew Cooper)  [Orabug: 27338201] 
  - x86: generic MSRs save/restore (Jan Beulich)  [Orabug: 27338201] 
  - x86/msr: introduce guest_wrmsr() (Sergey Dyasli)  [Orabug: 27338201] 
  - x86/msr: introduce guest_rdmsr() (Sergey Dyasli)  [Orabug: 27338201] 
  - x86/msr: introduce struct msr_domain_policy (Sergey Dyasli)  [Orabug: 27338201] 
  - microcode: Always scan the initramfs for microcode (Konrad Rzeszutek Wilk)  [Orabug: 27338209] 
  - x86: Move microcode loading earlier (Konrad Rzeszutek Wilk)  [Orabug: 27338209] 
  - livepatch: Alternative backport compile issues under Xen 4.4 (Konrad Rzeszutek Wilk)  [Orabug: 27338204] 
  - x86: support 2- and 3-way alternatives (Jan Beulich)  [Orabug: 27338204] 
  - xen/x86/alternatives: Do not use sync_core() to serialize I$ (Borislav Petkov)  [Orabug: 27338204] 
  - livepatch: NOP if func->new_addr is zero. (Konrad Rzeszutek Wilk)  [Orabug: 27338204] 
  - alternatives: x86 rename and change parameters on ARM (Konrad Rzeszutek Wilk)  [Orabug: 27338204] 
  - x86/arm64: Expose the ALT_[ORIG|REPL]_PTR macros to header files. (Konrad Rzeszutek Wilk)  [Orabug: 27338204] 
  - xsplice: Add support for alternatives (Ross Lagerwall)  [Orabug: 27338204] 
  - x86: Alter nmi_callback_t typedef (Konrad Rzeszutek Wilk)  [Orabug: 27338204] 
  - x86/alternatives: correct near branch check (Jan Beulich)  [Orabug: 27338204] 
  - x86: disable CR0.WP while applying alternatives (Andrew Cooper)  [Orabug: 27338204] 
  - work around Clang generating .data.rel.ro section for init-only files (Andrew Cooper)  [Orabug: 27338204] 
  - x86: move alternative.c data fully into .init.* (Jan Beulich)  [Orabug: 27338204] 
  - x86: port the basic alternative mechanism from Linux to Xen (Feng Wu)  [Orabug: 27338204] 
  - x86: add definitions for NOP operation (Feng Wu)  [Orabug: 27338204]


author: Daniel Kiper <daniel.kiper@oracle.com> - 4.4.4-155.0.10.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=32639222bb19e981f5500fcef435fce2c1c6eef0
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - xen.spec: Add sbsignxen to sign xen.efi binary. (Srinivas Maturi)  [Orabug: 27261277]


author: Daniel Kiper <daniel.kiper@oracle.com> - 4.4.4-155.0.9.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=73f85f0b6808e91db01457ff5f6fa74a6e1fa4f5
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/setup: do not relocate modules and crashkernel region over the Xen image (Daniel Kiper)  [Orabug: 27248005] 
  - x86/boot: add missing branch to the dom0 kernel data acquisition (Daniel Kiper)  [Orabug: 27234709] 
  - xen/x86: do not put .efi.pe.header section into LOAD segment (Daniel Kiper)  [Orabug: 27248005] 
  - xen/x86: do not relocate below the end of current Xen image placement (Daniel Kiper)  [Orabug: 27248005] 
  - xen/x86: do not relocate the Xen image if the bootloader did the work for us (Daniel Kiper)  [Orabug: 27248005] 
  - xen/x86: Build xen.mb.efi directly from xen-syms (Daniel Kiper)  [Orabug: 27180757] 
  - xen/x86/efi: Verify dom0 kernel with SHIM_LOCK protocol in efi_multiboot2() (Daniel Kiper)  [Orabug: 27180757] 
  - efi: split out efi_shim_lock() (Daniel Kiper)  [Orabug: 27180757] 
  - xen/x86: Add some addresses to the Multiboot2 header (Daniel Kiper)  [Orabug: 27180757] 
  - xen/x86: Add some addresses to the Multiboot header (Daniel Kiper)  [Orabug: 27180757] 
  - xen/x86: Manually build PE header (Daniel Kiper)  [Orabug: 27180757] 
  - xen: Introduce XEN_COMPILE_POSIX_TIME (Daniel Kiper)  [Orabug: 27180757] 
  - xen/x86/boot: Align the stack as UEFI spec requires (Daniel Kiper)  [Orabug: 27180757]


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 4.4.4-155.0.8.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=667086f56694d9e4e1f45b3ac9126bb8d8ceff26
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - Fix dom0_vcpus_pin regression (Konrad Rzeszutek Wilk)  [Orabug: 27234748] 
  - xend/python: Add 'enclosure-type' (Konrad Rzeszutek Wilk)  [Orabug: 27220742] 
  - xend/python: Expand the list of parameters that can be changed to include all (Konrad Rzeszutek Wilk)  
  - xend/python: Export DMI asset-tag and platform to guests. (Konrad Rzeszutek Wilk)  [Orabug: 27220742] 
  - vNUMA: fix the selection of correct number of cores (Elena Ufimtseva)  [Orabug: 27222930]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.7.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=b90f0a4fa66aea67e743c393ba307612a2fec379
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - p2m: Check return value of p2m_set_entry() when decreasing reservation (George Dunlap)  [Orabug: 27216264]  {CVE-2017-17045}
  - p2m: Always check to see if removing a p2m entry actually worked (George Dunlap)  [Orabug: 27216264]  {CVE-2017-17045}
  - x86/pod: prevent infinite loop when shattering large pages (Julien Grall)  [Orabug: 27216261]  {CVE-2017-17044}
  - xen/physmap: Do not permit a guest to populate PoD pages for itself (Elena Ufimtseva)  [Orabug: 27216261]  {CVE-2017-17044}
  - xend/pxm: Include pxm in XenStore when hotplugging PCI devices (Konrad Rzeszutek Wilk)  [Orabug: 27206706]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.6.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=2f4972e50ebd2a470b19bfdb1fc6ce91e77614e0
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - vNUMA: assign vcpus to nodes by interleaving (Elena Ufimtseva)  [Orabug: 27091937]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.5.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=c9c2df2dc87e18c9dcf584aedf859ab50b62883a
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - vNUMA: disable vNUMA if fail to find vcpus for pinning (Elena Ufimtseva)  [Orabug: 27091931]


author: Boris Ostrovsky <boris.ostrovsky@oracle.com> - 4.4.4-155.0.4.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=fe4d54f49f8cf07f9e9d8077b7c85d287fb5c90c
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/shadow: correct SH_LINEAR mapping detection in sh_guess_wrmap() (Andrew Cooper)  [Orabug: 27148184]  {CVE-2017-15592} {CVE-2017-15592}
  - x86: don't wrongly trigger linear page table assertion (Jan Beulich)  [Orabug: 27148179]  {CVE-2017-15595}


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-155.0.3.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=b67a2d04c74002cceabfa76612a27fd1cf3f2b29
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - vNUMA: fix cpus assignment in manual vNUMA mode. (Elena Ufimtseva)  [Orabug: 26828896]


author: Martin Sebor <msebor@redhat.com> - 2.12-1.196
changelog:
  - Fix CVE-2015-8776 glibc: Segmentation fault caused by passing
    out-of-range data to strftime() (#1358011).


author: Carlos O'Donell <carlos@redhat.com> - 2.12-1.190
changelog:
  - Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296029).
  - Update malloc free_list cyclic fix (#1264189).
  - Update tzdata-update changes (#1200555).


author: Carlos O'Donell <carlos@redhat.com> - 2.12-1.182
changelog:
  - Avoid PLT in libm for feupdateenv (#1186104).
  - Allow PLT entry in libc for _Unwind_Find_FDE on s390/s390x (#1186104).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.169
changelog:
  - Check for NULL arena pointer in _int_pvalloc (#1246656).
  - Don't change no_dyn_threshold on mallopt failure (#1246660).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.12-1.168
changelog:
  - Unlock main arena after allocation in calloc (#1245731).
  - Enable robust malloc change again (#1245731).
  - Fix perturbing in malloc on free and simply perturb_byte (#1245731).
  - Don't fall back to mmap prematurely (#1245731).


author: Carlos O'Donell <carlos@redhat.com> -2.12-1.167
changelog:
  - The malloc deadlock avoidance support has been temporarily removed since it
    triggers deadlocks in certain applications (#1243824).


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-9
changelog:
  - documentation fixes in gnutls_priority_init(3), gnutls-serv(1),
    and gnutls-cli-debug(1) manual pages (#648297, #807746)
  - add fallback to import the private keys as PKCS#8 (#745242)
  - silence the strict aliasing warnings


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-5
changelog:
  - fix CVE-2012-1573 - security issue in packet parsing (#805432)
  - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
  - TLS-1.2 certificate request compatibility fix


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-3
changelog:
  - drop superfluous rpath from binaries
  - do not call autoreconf during build
  - specify the license on utils subpackage
  - do not create static libraries (#556052)


author: Tomas Mraz <tmraz@redhat.com> 2.4.1-1
changelog:
  - new upstream version
  - correct the license tag
  - explicit --with-included-opencdk not needed
  - use external lzo library, internal not included anymore


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-2
changelog:
  - properly require install-info (patch by Ville Skyttä)
  - standard buildroot and use dist tag
  - add COPYING and README to doc


author: Jeff Johnson <jbj@redhat.com> 1.0.20-1
changelog:
  - update to 1.0.20.
  - add --with-included-opencdk --with-included-libtasn1
  - add --with-included-libcfg --with-included-lzo
  - add --disable-srp-authentication.
  - do "make check" after build.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-52
changelog:
  - Fixed snmptrapd crash when '-OQ' parameter is used and invalid trap is
    received (#CVE-2014-3565)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-51
changelog:
  - added faster caching into IP-MIB::ipNetToMediaTable (#789500)
  - fixed compilation with "-Werror=format-security" (#1181994)
  - added clear error message when port specified in 'clientaddrr' config
    option cannot be bound (#886468)
  - fixed error check in IP-MIB::ipAddressTable (#1012430)
  - fixed agentx client crash on failed response (#1023570)
  - fixed dashes in net-snmp-config.h (#1034441)
  - fixed crash on monitor trigger (#1050970)
  - fixed 'netsnmp_assert 1 == new_val->high failed' message in system log
    (#1065210)
  - fixed parsing of 64bit counters from SMUX subagents (#1069046)
  - Fixed HOST-RESOURCES-MIB::hrProcessorTable on machines with >100 CPUs
    (#1070075)
  - fixed net-snmp-create-v3-user to have the same content on 32 and 64bit
    installations (#1073544)
  - fixed IPADDRESS value length in Python bindings (#1100099)
  - fixed hrStorageTable to contain 31 bits integers (#1104293)
  - fixed links to developer man pages (#1119567)
  - fixed storageUseNFS functionality in hrStorageTable (#1125793)
  - fixed netsnmp_set Python bindings call truncating at the first '\000'
    character (#1126914)
  - fixed log level of SMUX messages (#1140234)
  - use python/README to net-snmp-python subpackage (#1157373)
  - fixed forwarding of traps with RequestID=0 in snmptrapd (#1146948)
  - fixed typos in NET-SNMP-PASS-MIB and SMUX-MIB (#1162040)
  - fixed close() overhead of extend commands (#1188295)
  - fixed lmSensorsTable not reporting sensors with duplicate names (#967871)
  - fixed hrDeviceTable with interfaces with large ifIndex (#1195547)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-50
changelog:
  - added 'diskio' option to snmpd.conf, it's possible to monitor only selected
    devices in diskIOTable (#990674)
  - fixed CVE-2014-2284: denial of service flaw in Linux implementation of
    ICMP-MIB (#1073223)
  - added cache to hrSWRunTable to provide consistent results (#1007634)
  - skip 'mvfs' (ClearCase) when skipNFSInHostResources is enabled (#1073237)
  - fixed snmptrapd crashing on forwarding SNMPv3 traps (#1131844)
  - fixed HOST-RESOURCES-MIB::hrSystemProcesses (#1134335)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-49
changelog:
  - fixed snmp daemons and utilities crashing in FIPS mode (#1001830)
  - added support of btrfs filesystem in hrStorageTable (#1006706)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-46
changelog:
  - fixed parsing of bulk responses (#983116)
  - added support of vzfs filesystem in hrStorageTable (#989498)
  - fixed endless loop when parsing sendmail configuration file with
    queue groups (#991213)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-45
changelog:
  - fixed potential memory leak on realloc failure when processing 'extend'
    option (#893119)
  - added precise enumeration of configuration files searched to
    snmp_config(5) man page (#907571)
  - set permissions of snmpd.conf and snmptrapd conf to 0600 (#919239)
  - fixed kernel threads in hrSWRunTable (#919952)
  - fixed various error codes in Python module (#955771)
  - fixed snmpd crashing in the middle of agentx request processing when
    a subagent disconnects (#955511)
  - allow 'includeFile' and 'includeDir' options in configuration files
    (#917816)
  - fixed netlink message size (#927474)
  - fixed IF-MIB::ifSpeedHi on systems with non-standard interface speeds
    (#947973)
  - fixed BRIDGE-MIB::dot1dBasePortTable not to include the bridge itself
    as a port (#960568)
  - fixed snmpd segfault when 'agentaddress' configuration options is used
    and too many SIGHUP signals are received (#968898)
  - updated UCD-SNMP-MIB::dskTable to dynamically add/remove disks
    if 'includeAllDisks' is specified in snmpd.conf (#922691)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-43
changelog:
  - fixed value of UCD-SNMP-MIB::extCommand to contain full command
    line (#842279)
  - fixed rpath to perl.so (#848319)
  - added support for port numbers in 'clientaddr' configuration
    option (#833013)
  - fixed rare snmptrapd crash on SIGHTERM handling when embedded perl
    is used (#824402)
  - fixed engineID of outgoing traps if 'trapsess -e <engineID>' is used in
    snmpd.conf (#800671)
  - updated documentation of '-c' option of snmptrapd (#784502)
  - fixed endless loop when SIGTEM arrives in middle of internal query
    processing (#851637)
  - fixed UCD-DISKIO-MIB::diskIOLA values (#848155)
  - removed various error log messages related to counte64 expansions
    (#846906)
  - removed various error log messages when IPv6 is disabled (#845157)
  - added support of cvfs filesystem in hrStorageTable (#846532)
  - fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
    which could result in some entries missing in the table (#846436)
  - added support of simfs filesystem in hrStorageTable (#861152)
  - fixed responding to requests on a multihost machine (#825889)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-38
changelog:
  - fixed snmpd crashing with many AgentX subagent (#749227)
  - fixed SNMPv2-MIB::sysObjectID value when "sysObjectID" config file
    option with long OID was used (#786931)
  - fixed value of BRIDGE-MIB::dot1dBasePortIfIndex.1 (#740172)
  - fixed parsing of "proxy" snmpd.conf option not to enable
    verbose logging by default (#746903)
  - added new "realStorageUnits" config file option to support
    disks > 16 TB in hrStorageTable (#741789)
  - added vxfs, reiserfs and ocfs2 filesystem support to hrStorageTable
    (#746903)
  - fixed snmpd sigsegv when embedded perl script registers one handler
    twice (#748907)
  - fixed setting of SNMP-TARGET-MIB::snmpTargetAddrRowStatus via
    SNMP-SET request on 64-bit platforms (#754275)
  - fixed crash when /var/lib/net-snmp/mib_indexes/ files have wrong
    SELinux context (#754971)
  - fixed memory leak when agentx subagent disconnects in the middle
    of request processing (#736580)
  - fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#789909)
  - removed 'error finding row index in _ifXTable_container_row_restore'
    error message (#788954)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-32
changelog:
  - fixed varbind parsing in python netsnmp module (#711481)
  - fixed session initialization in python netsnmp module (#710667)
  - fixed crash when getting out-of-memory in inetNetToMediaTable (#708947)
  - added xfs and jfs filesystem support to hrStorageTable (#707912)
  - fixed snmpd to purge zombies resulted from pass_persist process exit
    (#703682)
  - added a log message when snmpd detects two interfaces with the same
    IP address and thus having only one ipTable entry for both (#702171)
  - added new snmpd.conf options 'interface_fadeout' and
    'interface_replace_old' to controll snmpd behavior when more
    interfaces get the same name (#702165)
  - fixed snmptrapd leaking memory when processing traps in embedded perl
    (#678314)
  - fixed hrSystemDate timezone sign (#683680)
  - fixed snmp logging 'truncating integer value > 32 bits' for
    UCD-SNMP-MIB::systemStats (#681949)
  - fixed rare race condition in hrSWRunTable (#683563)
  - recompiled with relro for better security (#725657)
  - snmpd should not change request-id when sending multiple SMUX messages
    (#708370)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-31
changelog:
  - fixed BRIDGE-MIB implementation in /usr/bin/snmp-bridge-mib,
    now it supports embedded perl and answers GETNEXT requests correctly
    (#630157).


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-28
changelog:
  - fixed recompilation of the package on machine without IPv6 (#657835)
  - fixed SMUX getting stuck on big-endian platforms (#665053)
  - fixed OID comparsion in snmpwalk, now the output does not include
    objects outside requested subtree (#636890)
  - fixed IPv4 address creation in ipAddressTable (#616764)
  - added IPv6 address creation to ipAddressTable (#616336)
  - fixed value of ipAddressPrefixAutonomousFlag OID (#625262)
  - fixed ipv6IfTable - new interfaces were not added there (#627564)
  - extended BRIDGE-MIB implementation to cover RFC 4363 (#630157)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-27.1
changelog:
  - fixed truncation of sysObjectID (#641113)
  - fixed assertions in calculating of statistics in IF-MIB (#621664)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-23
changelog:
  - fixed segfault when parsing snmpd.conf with disman entries (#607080)
  - fixed value of IP-MIB::ipv6InterfaceForwarding (#607074)
  - fixed output of snmptranslate tool when displaying ranges of UNSIGNED
    type (#606874)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-22
changelog:
  - fixed value of ipIfStatsTable.Ip6ReasmReqds (#597265)
  - added missing include files from util_funcs directory (#604636)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-21
changelog:
  - fixed hrFSTable and hrStorageTable to provide persistent table indexes
    according to RFS 2790 (#595325)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-19
changelog:
  - fixed exit code of snmp utilities when wrong argument to '-A' option
    is specified (#574061)
  - fixed BER parsing of incoming packets - siletnly discard the invalid ones
    according to RFC (#568651)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-15
changelog:
  - remove net-snmp-gui subpackage, perl-Tk is being removed from
    distro (#568786)
  - fix IF-MIB::ifSpeed of inactive interfaces (#561884)
  - correct the package license


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-14
changelog:
  - store temporary files in /var/run/net-snmp instead of /tmp (SELinux does
    not allow writing /tmp) (#560081)
  - fix filedescriptor leak in RMON-MIB and Etherlike-MIB (#562108)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.5-7
changelog:
  - fix invalid access to memory in tcpListenerTable (#551030)
  - fix crash with interfaces without broadcast addresses (like OpenVPN's tun0)
    (#549390)
  - fix responding to broadcast SNMP requests (#549390)
  - port patches from RHEL-5 to avoid regressions


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-4
changelog:
  - fix udpTable indexes on big-endian systems (#543352)
  - fix snmptrapd init script to survive with empty /etc/sysconfig/snmptrapd
  - lower the default log level of snmpd to get rid of the debug messages


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-3
changelog:
  - prepare the .spec file for review
  - run automatic regression suite after the compilation of the package
    to check for obvious regressions
  - remove unnecessary package dependencies


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-2
changelog:
  - introduce /etc/sysconfig/snmptrapd. Use it to specify snmptrapd command
    line options.  /etc/snmp/snmptrapd.options is not used anymore (#540799)
  - build-in ipAddressPrefixTable, ipDefaultRouterTable, ipv6ScopeZoneIndexTable,
    ipIfStatsTable, SCTP-MIB, RMON-MIB and Etherlike-MIBs
  - remove ucd5820stat helper script, it depends on get5820stats, which is not
    available in Fedora
  - move sample services ipf-mod.pl to documentation
  - remove logrotate config, snmpd logs into syslog


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-13
changelog:
  - package cleanup, remove unnecessary patches
  - move local state file from /var/net-snmp/ to /var/lib/net-snmp


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-12
changelog:
  - make the default configuration less noisy, i.e. do not print "Connection from
    UDP:" and "Received SNMP packet(s) from UDP:" messages on each connection.
    (#509055)


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-1
changelog:
  - explicitly require the right version and release of net-snmp and
    net-snmp-libs
  - update to net-snmp-5.4.2.1 to fix CVE-2008-4309


author: Jan Safranek <jsafranek@redhat.com> 5.4.2-2
changelog:
  - redistribute the perl scripts to the net-snmp package,
    net-snmp-utils doesn't depend on perl now (#462484)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-15
changelog:
  - explicitly require lm_sensor > 3 for build (#442718)
  - create multilib net-snmp-config on multilib architectures only


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-9
changelog:
  - introduce /etc/sysconfig/snmpd. Use it to specify snmpd command line options.
    /etc/snmp/snmpd.options is not used anymore (#431391)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-6
changelog:
  - add support of lm_sensors v3
  - added procps to build dependencies (#380321)
  - removed beecrypt from dependencies
  - fixed crash on reading xen interfaces (#386611)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-5
changelog:
  - move mib2c-update from net-snmp-utils to net-snmp-perl, where
    mib2c is located
  - add tkmib to net-snmp-gui package (#167933)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-3
changelog:
  - include these tables: ip-mib/ipv4InterfaceTable
    ip-mib/ipv6InterfaceTable, ip-mib/ipAddressPrefixTable
  - fix Requires of net-snmp-devel to include lmsensors-devel on supported
    architectures


author: Jan Safranek <jsafranek@redhat.com> 5.4-16
changelog:
  - supported lm_sensors on ppc64 (#249255)
  - snmpconf generates config files with proper selinux context
    (#247462)
  - fix leak  in udp transport (#247771)
  - add alpha to supported archs in net-snmp-config (#246825)
  - fix hrSWInst (#250237)


author: Jan Safranek <jsafranek@redhat.com> 5.4-14
changelog:
  - fix snmptrapd hostname logging (#238587)
  - fix udpEndpointProcess remote IP address (#236551)
  - fix -M option of net-snmp-utils (#244784)
  - default snmptrapd.conf added (#243536)
  - fix crash when multiple exec statements have the same name
    (#243536)
  - fix ugly error message when more interfaces share
    one IP address (#209861)


author: Radek Vokál <rvokal@redhat.com> - 1:5.4-13
changelog:
  - fix overly verbose log message (#221911)
  - few minor tweaks for review - still not perfect
  - fix linking with lcrypto (#231805)


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-10
changelog:
  - Disable queueing on mpath devs in blk-availability initscript.
  - Add new -m|--mpathoption disablequeueing to blkdeactivate.
  - Prevent only repair for non-synced raid1 unless --force, not other raid types.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-9
changelog:
  - Fix lvchange --discard|--zero for active thin-pool.
  - Fix lock-holder device for thin pool with inactive thin volumes.
  - Use any inherited tags when wiping metadata sub LVs to ensure activation.
  - Do not issue "Failed to create directory" message for dm_create_dir failure.
  - Add Conflicts: lvm2-libs < 2.02.111 to device-mapper-event to prevent
    incorrect package setup if old and new device-mapper/lvm2 packages combined.
  - Move blkdeactivate/blk-availability script from lvm2 to device-mapper package.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-8
changelog:
  - Prevent non-synced raid1 repair unless --force
  - Fix automatic updates of PV extension headers to newest version.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-7
changelog:
  - Workaround for raid leg allocation failure after not-in-sync raid leg failure.
  - Fix flushing of outstanding IO for mirror target (2.02.133).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-4
changelog:
  - Remove spurious error about no value in /sys/dev/block/major:minor/dm/uuid.
  - Fix device mismatch detection for LV if persistent .cache file is used.
  - Fix holder device not being found in /dev while sysfs has it during dev scan.
  - Document that lvmlockd and lvmpolld features are available only if compiled in
    (RHEL6 lvm2 doesn't have lvmlockd and lvmpolld compiled in).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-3
changelog:
  - Detect and warn about mismatch between devices used and assumed for an LV.
  - If available, use /proc/self/mountinfo to detect mounted volume in fsadm.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-2
changelog:
  - Fix resize of stacked raid thin data volume (2.02.141).
  - Allow for raid leg replacement if not both data and metadata image are on pvs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-1
changelog:
  - Use uninitilized pool header detection in all cases.
  - Fix read error detection when checking for uninitialized thin-pool header.
  - Fix error path for internal error in lvmetad vg lookup code.
  - Fix error path when sending thin-pool message fails in update_pool_lv().
  - Support reporting CheckNeeded and Fail state for thin-pool and thin LV.
  - For failing thin-pool and thin volume correctly report percentage as INVALID.
  - Report -1, not 'unkown' for lv_{snapshot_invalid,merge_failed} with --binary.
  - If PV belongs to some VG and metadata missing, skip it if system ID is used.
  - Automatically change PV header extension to latest version if writing PV/VG.
  - Identify used PVs in pv_attr field by new 'u' character.
  - Add pv_in_use reporting field to report if PV is used or not.
  - Add pv_ext_vsn reporting field to report PV header extension version.
  - Add protective flag marking PVs as used even if no metadata available.
  - Fix memory pool corruption in pvmove (2.02.141).
  - Support control of spare metadata creation when repairing thin-pool.
  - Fix config type of 'log/verbose' from bool to int (2.02.99).
  - Fix inverted data LV thinp watermark calc for dmeventd response (2.02.133).
  - Use use_blkid_wiping=0 if not defined in lvm.conf and support not compiled in.
  - Clear cached bootloader areas when PV format changed.
  - Fix string boundary check in _get_canonical_field_name().
  - Always initialized hist struct in _stats_parse_histogram().
  - Improve status parsing for thin-pool and thin devices.
  - Use fully aligned allocations for dm_pool_strdup/strndup() (1.02.64).
  - Fix thin-pool table parameter feature order to match kernel output.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.141-1
changelog:
  - Do not check for suspended devices if scanning for lvmetad update.
  - Fix part. table filter with external_device_info_source="udev" and blkid<2.20.
  - Add metadata/check_pv_device_sizes switch to lvm.conf for device size checks.
  - Warn if device size is less than corresponding PV size in metadata.
  - Cache device sizes internally.
  - Restore support for command breaking in process_each_lv_in_vg() (2.02.118).
  - Use correct mempool when process_each_lv_in_vg() (2.02.118).
  - Fix lvm.8 man to show again prohibited suffixes.
  - Fix configure to set proper use_blkid_wiping if autodetected as disabled.
  - Initialise udev in clvmd for use in device scanning. (2.02.116)
  - Add seg_le_ranges report field for common format when displaying seg devices.
  - Honour report/list_item_separator for seg_metadata_le_ranges report field.
  - Don't mark hidden devs in -o devices,metadata_devices,seg_pe_ranges.(2.02.140)
  - Change LV sizes in seg_pe_ranges report field to match underlying devices.
  - Add kernel_cache_settings report field for cache LV settings used in kernel.
  - Fix man page for dmsetup udevcreatecookie.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.140-1
changelog:
  - Initialise udev in clvmd for use in device scanning. (2.02.116)
  - Add seg_le_ranges report field for common format when displaying seg devices.
  - Change LV sizes in seg_pe_ranges report field to match underlying devices.
  - Add kernel_cache_settings report field for cache LV settings used in kernel.
  - Update to latest upstream release with various fixes and
    enhancementsdetailed in WHATS_NEW and WHATS_NEW_DM file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.118-3.el6_7.2
changelog:
  - Fix alloc segfault when extending LV with fewer stripes than in first seg.
  - Fix regression in cache causing some PVs to bypass filters (2.02.105).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.118-2
changelog:
  - Don't skip invalidation of cached orphans if vg write lck is held (2.02.118).
  - Add --enable-halvm and --disable-halvm options to lvmconf script.
  - Add --services, --mirrorservice and --startstopservices option to lvmconf.
  - Use proper default value of global/use_lvmetad when processing lvmconf script.
  - Set correct vgid when updating cache when writing PV metadata.
  - Don't silently accept lvcreate -m with raid4/5/6.
  - Add A_PARTITION_BY_TAGS set when allocated areas should not share tags.
  - Respect allocation/cling_tag_list during intial contiguous allocation.
  - Don't skip invalidation of cached orphans if vg write lck is held (2.02.118).
  - Log relevant PV tags when using cling allocation.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.118-1
changelog:
  - Fix LV processing with selection to always do the selection on initial state.
  - Store metadata size + checksum in lvmcache and add struct lvmcache_vgsummary.
  - Remove inaccessible clustered PVs from 'pvs -a'.
  - Don't invalidate cached orphan information while global lock is held.
  - Avoid rescan of all devices when requested pvscan for removed device.
  - Measure configuration timestamps with nanoseconds when available.
  - Disable lvchange of major and minor of pool LVs.
  - Fix pvscan --cache to not scan and read ignored metadata areas on PVs.
  - Disallow vgconvert from changing metadata format when lvmetad is used.
  - Don't do a full read of VG when creating a new VG with an existing name.
  - Reduce amount of VG metadata parsing when looking for vgname on a PV.
  - Avoid reparsing same metadata when reading same metadata from multiple PVs.
  - Save extra device open/close when scanning device for size.
  - Fix seg_monitor field to report status also for mirrors and thick snapshots.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.117-1
changelog:
  - Update to latest upstream release with various fixes and
    enhancementsdetailed in WHATS_NEW and WHATS_NEW_DM file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-1
changelog:
  - Reinstate nosync logic when extending mirror. (2.02.110)
  - Fix total area extent calculation when allocating cache pool. (2.02.110)
  - Pass properly sized char buffers for sscanf when initializing clvmd.
  - Restore proper buffer size for parsing mountinfo line (1.02.89)


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.110-1
changelog:
  - Fix manipulation with thin-pools which are excluded via volume_list.
  - Support lv/vgremove -ff to remove thin vols from broken/inactive thin pools.
  - Fix typo breaking configure --with-lvm1=shared.
  - Modify lvresize code to handle raid/mirrors and physical extents.
  - Don't allow pvcreate to proceed if scanning or filtering fails.
  - Print name of LV which on activation triggers delayed snapshot merge.
  - Add lv_layout and lv_role LV reporting fields.
  - Properly display lvs lv_attr volume type and target type bit for cache origin.
  - Improve libdevmapper-event select() error handling.
  - Add extra check for matching transation_id after message submitting.
  - Add dm_report_field_string_list_unsorted for str. list report without sorting.
  - Support --deferred with dmsetup remove to defer removal of open devices.
  - Update dm-ioctl.h to include DM_DEFERRED_REMOVE flag.
  - Add support for selection to match string list subset, recognize { } operator.
  - Fix string list selection with '[value]' to not match list that's superset.
  - Fix string list selection to match whole words only, not prefixes.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.109-2
changelog:
  - Fix pvcreate_check() to update cache correctly after signature wiping.
  - Fix primary device lookup failure for partition when processing mpath filter.
  - Remove spurious "Skipping mirror LV" message on pvmove of clustered mirror.
  - If LV inactive and non-clustered, do not issue "Cannot deactivate" on -aln.
  - Cleanly error when creating RAID with stripe size < PAGE_SIZE.


author: Alasdair Kergon <agk@redhat.com> - 2.02.109-1
changelog:
  - Allow approximate allocation with +%FREE in lvextend.
  - Fix a segfault in lvscan --cache when devices were already missing. (2.02.108)
  - Display actual size changed when resizing LV.
  - Remove possible spurious "not found" message on PV create before wiping.
  - Handle upgrade from 2.02.105 when an LV now gaining a uuid suffix is active.
  - Remove lv_volume_type field from reports. (2.02.108)
  - Fix incorrect persistent .cache after vgcreate with PV creation. (2.02.108)
  - Add dm_tree_set_optional_uuid_suffixes to libdevmapper to handle upgrades.


author: Alasdair Kergon <agk@redhat.com> - 2.02.108-1
changelog:
  - Add lvscan --cache which re-scans constituents of a particular LV.
  - Make dmeventd's RAID plugin re-scan failed PVs when lvmetad is in use.
  - Improve lvconvert --merge and --splitsnapshot validation.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.107-2
changelog:
  - Add report/list_item_separator lvm.conf option.
  - Add lv_active_{locally,remotely,exclusively} LV reporting fields.
  - Comment out devices/{preferred_names,filter} in default lvm.conf file.
  - Enhance lvconvert thin, thinpool, cache and cachepool command line support.
  - Display 'C' only for cache and cache-pool target types in lvs.
  - Prompt for confirmation before change LV into a snapshot exception store.
  - Return proper error codes for some failing lvconvert funtions.
  - Add initial code to use cache tools (cache_check|dump|repair|restore).
  - Add --activationmode degraded to activate degraded raid volumes by default.
  - Add separate lv_active_{locally,remotely,exclusively} LV reporting fields.
  - Recognize "auto"/"unmanaged" values in selection for appropriate fields only.
  - Add report/binary_values_as_numeric lvm.conf option for binary values as 0/1.
  - Add --binary arg to pvs,vgs,lvs and {pv,vg,lv}display -C for 0/1 on reports.
  - Add separate reporting fields for each each {pv,vg,lv}_attr bit.
  - Separate LV device status reporting fields out of LV fields.
  - Fix regression causing PVs not in VGs to be marked as allocatable (2.02.59).
  - Fix VG component of lvid in vgsplit/vgmerge and check in vg_validate.
  - Add lv_full_name, lv_parent and lv_dm_path fields to reports.
  - Change lv_path field to suppress devices that never appear in /dev/vg.
  - Postpone thin pool lvconvert prompts (2.02.107).
  - Require --yes option to skip prompt to lvconvert thin pool chunksize.
  - Support lvremove -ff to remove thin volumes from broken thin pools.
  - Require --yes to skip raid repair prompt.
  - Change makefile %.d generation to handle filename changes without make clean.
  - Fix use of buildir in make pofile.
  - Enhance private volumes UUIDs with suffixed for easier detection.
  - Do not use reserved _[tc]meta volumes for temporary LVs.
  - Leave backup pool metadata with _meta%d suffix instead of reserved _tmeta%d.
  - Allow RAID repair to reuse PVs from same image that suffered a failure.
  - New RAID images now avoid allocation on any PVs in the same parent RAID LV.
  - Always reevaluate filters just before creating PV.
  - Fix dm_report_field_string_list to handle delimiter with multiple chars.
  - Add dm_report_field_reserved_value for per-field reserved value definition.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.107-1
changelog:
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-7
changelog:
  - Add ignore_lvm_mirrors to config file to read/ignore labels on mirrors.
  - Revert to using devices/obtain_device_list_from_udev=0 by default.
  - Add internal flag for temporary LVs to properly direct udev to not interfere.
  - Fix endless loop in blkdeactivate <device>... if unable to umount/deactivate.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-6
changelog:
  - Fix lvconvert swap of poolmetadata volume for active thin pool
  - Check for open count with a timeout before removal/deactivation of an LV.
  - Add workaround for deactivation problem of opened virtual snapshot.
  - Report RAID images split with tracking as out-of-sync ("I").
  - Recognise NVM Express devices in filter.
  - Fix possible race while creating/destroying memory pools.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-5
changelog:
  - Fix failing metadata repair when lvmetad is used.
  - Fix incorrect memory handling when reading messages from lvmetad.
  - Fix locking in lvmetad when handling the PV which is gone.
  - Fix lvconvert when converting to a thin pool and thin LV at once.
  - Recognize new flag to skip udev scanning in udev rules and act appropriately.
  - Add support for flagging an LV to skip udev scanning during activation.
  - Improve message when unable to change discards setting on active thin pool.
  - Add --ignoreskippedcluster for exit status success when clustered VGs skipped.
  - Define symbolic names for subsystem udev flags in libdevmapper for easier use.
  - Make subsystem udev rules responsible for importing DM_SUBSYSTEM_UDEV_FLAG*.
  - Remove extra GOTO jump in lvmetad udev rules causing incorrect lvmetad update.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-4
changelog:
  - Fix RAID calculation for sufficient allocatable space.
  - Conversion from linear to mirror or RAID1 now honors mirror_segtype_default.
  - Fix contiguous & cling allocation policies for parity RAID. (2.02.100)
  - lvconvert no longer converts LVs of "mirror" segment type to thinpool.
  - lvconvert no longer converts thinpool sub-LVs to "mirror" segment type.
  - Make RAID capable of single-machine exclusive operations in a cluster.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-3
changelog:
  - Do not allow passing empty new name for dmsetup rename.
  - Check for exactly one lv segment in validation of thin pools and volumes.
  - Fix dmeventd unmonitoring of thin pools.
  - Fix lvresize for stacked thin pool volumes (i.e. mirrors).
  - Support most of lvchange operations on stacked thin pool meta/data LVs.
  - Disable pvmove of merging or converting logical volumes.
  - Enable pvmove of snapshots and snapshot origins.
  - Fix inability to specify LV name when pvmove'ing a RAID, mirror, or thin-LV.
  - Add ability to pvmove RAID, mirror, and thin volumes.
  - Avoid unlimited recursion when creating dtree containing inactive pvmove LV.
  - Add man page entries for lvmdump's -u and -l options.
  - Remove "mpath major is not dm major" msg for mpath component scan (2.02.94).
  - Don't assume stdin file descriptor is readable.
  - Write Completed debug message before reinstating log defaults after command.
  - Use pvscan -b in udev rules to avoid a deadlock on udev process count limit.
  - Add pvscan -b/--background for the command to be processed in the background.
  - Direct udev to use 3min timeout for LVM devices. Recent udev has default 30s.
  - Do not scan multipath or RAID components and avoid incorrect autoactivation.
  - Fix MD/loop udev handling to fire autoactivation after setup or coldplug only.
  - Fix ignored lvmetad update on loop device configuration (2.02.99)
  - Fix lvm2app segfault while using lvm_list_pvs_free fn if there are no PVs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-2
changelog:
  - Refresh existing VG before autoactivating (event retrigger/device reappeared).
  - Move mpath device filter before partitioned filter (which opens devices).
  - Fix vgck to notice on-disk corruption even if lvmetad is used.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.100-1
changelog:
  -  o Features/Extensions/Additions:
  - Add DM_ABORT_ON_INTERNAL_ERRORS env var support to abort on internal errors.
  - Verify clvmd message validity before processing and log error if incorrect.
  - Add initial support thin pool lvconvert --repair.
  - Add support for poolmetadataspare LV, that will be used for pool recovery.
  - Improve activation order when creating thin pools in non-clustered VG.
  - Add lvm2-activation-net systemd unit to activate LVs on net-attached storage.
  - Automatically flag thin snapshots to be skipped during activation.
  - Add support for persistent flagging of LVs to be skipped during activation.
  - Make selected thinp settings customizable by a profile.
  - Support storing profile name in metadata for both VGs and LVs.
  - Add support for configuration profiles.
  - Add support for thin volumes in vgsplit.
  - Require 1.9 thin pool target version for online thin pool metadata resize.
  - Add lvresize support for online thin pool metadata volume resize.
  - Add detection for thin pool metadata resize kernel support.
  - Add vg->vg_ondisk / lv_ondisk() holding committed metadata.
  - Add detection of mounted fs also for vgchange deactivation.
  - Avoid a global lock in pvs when lvmetad is in use.
  - Detect maximum usable size for snapshot for lvresize.
  - Improve RAID kernel status retrieval to include sync_action/mismatch_cnt.
  - Add external origin support for lvcreate.
  - Support automatic config validation.
  - Add PV header extension: extension version, flags and bootloader areas.
  - Initial support for lvconvert of thin external origin.
  - Improve activation code for better support of stacked devices.
  - vgimport '--force' now allows import of VGs with missing PVs.
  - Allow removal or replacement of RAID LV components that are error segments.
  - Make 'vgreduce --removemissing' able to handle RAID LVs with missing PVs.
  - Add lvconvert support to swap thin pool metadata volume.
  - Allow vgcfgrestore of lvm2 metadata with thin volumes if --force is used.
  - Give precedence to EMC power2 devices with duplicate PVIDs.
  - Recognise Storage Class Memory (IBM S/390) devices in filter.
  - Recognise STEC skd devices in filter.
  - Recognise Violin Memory vtms devices in filter.
  - Support discards for non-power-of-2 thin pool chunks.
  - Automatically restore MISSING PVs with no MDAs.
  - Support allocation of pool metadata with lvconvert command.
  - Detect mounted fs also via reading /proc/self/mountinfo.
  -  o Command Interface/Options:
  - Support ARG_GROUPABLE with merge_synonym (for --raidwritemostly).
  - Add --ignoreactivationskip to lvcreate/vgchange/lvchange to ignore skip flag.
  - Add --setactivationskip to lvcreate/lvchange to set activation skip flag.
  - Add --type profilable to lvm dumpconfig to show profilable config settings.
  - Add --mergedconfig to lvm dumpconfig for merged --config/--profile/lvm.conf.
  - Support changing VG/LV profiles: vgchange/lvchange --profile/--detachprofile.
  - Add new --profile command line arg to select a configuration profile for use.
  - For creation of snapshot require size for at least 3 chunks.
  - Do not accept size parameters bigger then 16EiB.
  - Accept --yes in all commands so test scripts can be simpler.
  - Add lvcreate/lvchange --[raid]{min|max}recoveryrate for raid LVs.
  - Add lvchange --[raid]writemostly/writebehind support for RAID1
  - Add lvchange --[raid]syncaction for scrubbing of RAID LVs.
  - Add --validate option to lvm dumpconfig to validate current config on demand.
  - Add --ignoreadvanced and --ignoreunsupported switch to lvm dumpconfig.
  - Add --withcomments and --withversions switch to lvm dumpconfig.
  - Add --type {current|default|missing|new} and --atversion to lvm dumpconfig.
  - Add --bootloaderareasize to pvcreate and vgconvert to create bootloader area.
  - Do not take a free lv name argument for lvconvert --thinpool option.
  - Allow lvconvert --stripes/stripesize only with --mirrors/--repair/--thinpool.
  - Do not ignore -f in lvconvert --repair -y -f for mirror and raid volumes.
  - Support use of option --yes for lvchange --persistent.
  - Fix clvmd support for option -d and properly use its argument.
  -  o Reporting:
  - Issue an error msg if lvconvert --type used incorrectly with other options.
  - Use LOG_DEBUG/ERR msg severity instead default for lvm2-activation-generator.
  - Add LV report fields: raid_mismatch_count/raid_sync_action/raid_write_behind.
  - Add LV reporting fields raid_min_recovery_rate, raid_max_recovery_rate.
  - Add sync_percent as alias for copy_percent LV reporting field.
  - Add lv_ prefix to modules reporting field.
  - Use units B or b (never E) with no decimal places when displaying sizes < 1k.
  - List thin-pool and thin modules for thin volumes.
  - Add 's(k)ip activation' bit to lvs -o lv_attr to indicate skip flag attached.
  - Improve error loging when user tries to interrupt commands.
  - Add vgs/lvs -o vg_profile/lv_profile to report profiles attached to VG/LV.
  - Report lvs volume type 'e' with higher priority.
  - Report lvs volume type 'o' also for external origin volumes.
  - Report lvs target type 't' only for thin pools and thin volumes.
  - Add "active" LV reporting field to show activation state.
  - Add "monitor" segment reporting field to show dmevent monitoring status.
  - Add explicit message about unsupported pvmove for thin/thinpool volumes.
  - Add pvs -o pv_ba_start,pv_ba_size to report bootloader area start and size.
  - Fix pvs -o pv_free reporting for PVs with zero PE count.
  - Report blank origin_size field if the LV doesn't have an origin instead of 0.
  - Report partial and in-sync RAID attribute based on kernel status
  - Log output also to syslog when abort_on_internal_error is set.
  - Change lvs heading Copy% to Cpy%Sync and print RAID4/5/6 sync% there too.
  - Report error for nonexisting devices in dmeventd communication.
  - Reduce some log_error messages to log_warn where we don't fail.
  -  o Configuration:
  - Add lvm.conf thin_repair/dump_executable and thin_repair_options.
  - Add activation/auto_set_activation_skip to control activation skip flagging.
  - Add default.profile configuration profile and install it on make install.
  - Add config/profile_dir to set working directory to load profiles from.
  - Use mirror_segtype_default if type not specified for linear->mirror upconvert.
  - Refine lvm.conf and man page documentation for autoactivation feature.
  - Override system's global_filter settings for vgimportclone.
  - Find newest timestamp of merged config files.
  - Add 'config' section to lvm.conf to set the way the LVM configuration is handled.
  - Add global/raid10_segtype_default to lvm.conf.
  - Accept activation/raid_region_size in preference to mirror_region_size config.
  - Add log/debug_classes to lvm.conf to control debug log messages.
  - Allow empty activation/{auto_activation|read_only|}_volume_list config option.
  - Add lvm.conf option global/thin_disabled_features.
  - Add lvm.conf thin pool allocation settings thin_pool_{chunk_size|discards|zero}.
  - Relax ignore_suspended_devices to read from mirrors that don't have a device marked failed.
  -  o Documentation:
  - Add man page entries for profile configuration and related options.
  - Document lvextend --use-policies option in man.
  - Improve lvcreate, lvconvert and lvm man pages.
  -  o API/interfaces:
  - liblvm/python API: Additions: PV create/removal/resize/listing
  - liblvm/python API: Additions: LV attr/origin/Thin pool/Thin LV creation
  - Fix exported symbols regex for non-GNU busybox sed.
  - Add LV snapshot support to liblvm and python-lvm.
  - Fix lvm2app to return all property sizes in bytes (not sectors).
  - Fix lvm2app and return lvseg discards property as string.
  - Remove python liblvm object. systemdir can only be changed using env var now.
  - Add DM_DISABLE_UDEV environment variable to manage dev nodes by libdm only.
  - Add dm_get_status_snapshot() for parsing snapshot status.
  - Append discards and read-only fields to exported struct dm_status_thin_pool.
  - Validate passed params to dm_get_status_raid/thin/thin_pool().
  - Fix dm_task_set_cookie to properly process udev flags if udev_sync disabled.
  - Add dm_mountinfo_read() for parsing /proc/self/mountinfo.
  - Add dm_config_write_{node_out/one_node_out} for enhanced config output.
  - Add dm_config_value_is_bool to check for boolean value in supported formats.
  - Add DM_ARRAY_SIZE public macro.
  - Add DM_TO_STRING public macro.
  - Implement ref-counting for parents in python lib.
  -  o Fixes (general):
  - Create dmeventd timeout threads as "detached" so exit status is freed.
  - Fix inability to remove a VG's cluster flag if it contains a mirror.
  - Suppress arg: prefix in log_sys_error macro when arg is empty string.
  - Fix bug making lvchange unable to change recovery rate for RAID.
  - Prohibit conversion of thin pool to external origin.
  - When creating PV on existing LV don't forbid reserved LV names on LVs below.
  - When converting mirrors, default segtype should be the same unless specified.
  - Add pipe_open/close() to use instead of less efficient/secure popen().
  - Ignore previous LV seg with alloc contiguous & cling when num stripes varies.
  - Do not zero init 4KB of thin snapshot for non-zeroing thin pool (2.02.94).
  - Correct thin creation error paths.
  - Add whole log_lv and metadata_lv sub volumes when creating partial tree.
  - Properly use snapshot layer for origin which is also thin volume.
  - Avoid generating metadata backup when calling update_pool_lv().
  - Send thin messages also for active thin pool and inactive thin volume.
  - Avoid creation of multiple archives for one command.
  - Avoid flushing thin pool when just requesting transaction_id.
  - Fix use of too big chunks of memory when communication with lvmetad.
  - Also filter partitions on mpath components if multipath_component_detection=1.
  - Do not use persistent filter with lvmetad.
  - Move syslog code out of signal handle in dmeventd.
  - Fix lvresize --use-policies of VALID but 100% full snapshot.
  - Skip monitoring of snapshots that are already bigger then origin.
  - Refuse to init a snapshot merge in lvconvert if there's no kernel support.
  - Fix alignment of PV data area if detected alignment less than 1 MB (2.02.74).
  - Fix premature DM version checking which caused useless mapper/control access.
  - Fix creation and removal of clustered snapshot.
  - Fix clvmd caching of metadata when suspending inactive volumes.
  - Fix lvmetad error path in lvmetad_vg_lookup() for null vgname.
  - Fix clvmd _cluster_request() return code in memory fail path.
  - Fix vgextend to not allow a PV with 0 MDAs to be used while already in a VG.
  - Fix PV alignment to incorporate alignment offset if the PV has zero MDAs.
  - Fix missing cleanup of flags when the LV is detached from pool.
  - Fix check for some forbidden discards conversion of thin pools.
  - Fix blkdeactivate to handle nested mountpoints and mangled mount paths.
  - Synchronize with udev in pvscan --cache and fix dangling udev_sync cookies.
  - Fix autoactivation to not autoactivate VG/LV on each change of the PVs used.
  - Limit RAID device replacement to repair only if LV is not in-sync.
  - Disallow RAID device replacement or repair on inactive LVs.
  - Unlock vg mutex in error path when lvmetad tries to lock_vg.
  - Detect key string duplication failure in config_make_nodes_v in libdaemon.
  - Disallow pvmove on RAID LVs until they are addressed properly
  - Recognize DM_DISABLE_UDEV environment variable for a complete fallback.
  - Do not verify udev operations if --noudevsync command option is used.
  - When no --stripes argument is given when creating a RAID10 volume, default to 2 stripes.
  - Do not allow lvconvert --splitmirrors on RAID10 logical volumes.
  - Skip mlocking [vectors] on arm architecture.
  - Repair a mirrored log before the mirror itself when both fail.
  - Don't use lvmetad in lvm2-monitor.service ExecStop to avoid a systemd issue.
  - Exit pvscan --cache immediately if cluster locking used or lvmetad not used.
  - Hardcode use_lvmetad=0 if cluster locking used and issue a warning msg.
  - Avoid trying to read a mirror that has a failed device in its mirrored log.
  - Fix 'dmsetup splitname -o' to not fail if used without '-c' switch (1.02.68).
  - Fix segfault for truncated string token in config file after the first '"'.
  - Fix config node lookup inside empty sections to not return the section itself.
  - Fix parsing of 64bit snapshot status in dmeventd snapshot plugin.
  - Always return success on dmeventd -V command call.
  -  o Fixes (segfaults/crashes/deadlocks/races):
  - Fix metadata area offset/size overflow if it's >= 4g and while using lvmetad.
  - Fix segfault if devices/global_filter is not specified correctly.
  - Fix segfault when reporting raid_syncaction for older kernels.
  - Fix vgcfgrestore crash when specified incorrect vg name.
  - Avoid crash-inducing race in lvmetad when VG disappears during rename.
  - Fix possible race while removing metadata from lvmetad.
  - Fix possible deadlock when querying and updating lvmetad at the same time.
  - Check for memory failure of dm_config_write_node() in lvmetad.
  - Fix crash in pvscan --cache -aay triggered by non-mda PV.
  - Prevent double free error after dmeventd call of _fill_device_data().
  -  o Fixes (resource leaks/memleaks):
  - Fix clogd descriptor leak when daemonizing.
  - Fix clvmd descriptor leak on restart.
  - Release memory allocated with _cached_info().
  - Release memory and unblock signals in lock_vol error path.
  - Fix memory resource leak in memlocking error path.
  - Fix memleak in dmeventd thin plugin in device list obtaining err path.
  - Fix socket leak on error path in lvmetad's handle_connect.
  - Fix memleak on error path for lvmetad's pv_found.
  - Fix memleak in device_is_usable mirror testing function.
  - Fix memory leak on error path for pvcreate with invalid uuid.
  - Fix resource leak in error path of dmeventd's umount of thin volume.
  - Close open dmeventd FIFO file descriptors on exec (FD_CLOEXEC).
  -  o Testing:
  - Fix test for active snapshot in cluster before resizing it.
  - Add python-lvm unit test case
  -  o Other:
  - Require confirmation for vgchange -c when no VGs listed explicitly.
  - Also skip /var and /var/log by default in blkdeactivate when unmounting.
  - Add support for bind mounts in blkdeactivate.
  - Add blkdeactivate -v/--verbose for debug output from external tools used.
  - Add blkdeactivate -e/--errors for error messages from external tools used.
  - Suppress messages from external tools called in blkdeactivate by default.
  - Workaround gcc v4.8 -O2 bug causing failures if config/checks=1 (32bit arch).
  - Add --with-thin-repair and --with-thin-dump configure options.
  - Use local activation for clearing snapshot COW device.
  - Add configure --with-default-profile-subdir to select dir to keep profiles in.
  - Creation of snapshot takes at most 100% origin coverage.
  - Use LC_ALL to set locale in daemons and fsadm instead of lower priority LANG.
  - Remove dependency on fedora-storage-init.service in lvm2 systemd units.
  - Depend on lvm2-lvmetad.socket in lvm2-monitor.service systemd unit.
  - Optimize out setting the same value of read_ahead.
  - Automatically deactivate failed preloaded dm tree node.
  - Process thin messages once to active thin pool target for dm_tree.
  - Move common functionality for thin lvcreate and lvconvert to toollib.
  -  o Packaging:
  - Do not include /lib/udev and /lib/udev/rules.d in device-mapper package.
  - Change Source0 link to ftp://sources.redhat.com/pub/lvm2/releases/LVM2.<version>.tgz
  - Fix some incorrect changelog dates.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-7
changelog:
  - Synchronize with udev in pvscan --cache and fix dangling udev_sync cookies.
  - Fix autoactivation to not autoactivate VG/LV on each change of the PVs used.
  - Fix lvmetad updates for lvm1 format and fix reported internal errors.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-6
changelog:
  - Limit RAID device replacement to repair only if LV is not in-sync.
  - Disallow RAID device replacement or repair on inactive LVs.
  - Fix possible race while removing metadata from lvmetad.
  - Fix possible deadlock when querying and updating lvmetad at the same time.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-5
changelog:
  - Avoid a global lock in pvs when lvmetad is in use.
  - Fix crash in pvscan --cache -aay triggered by non-mda PV.
  - Fix memleak in device_is_usable mirror testing function.
  - Do not ignore -f in lvconvert --repair -y -f for mirror and raid volumes.
  - Fix regression that caused inability to create a snapshot of an inactive LV.
  - Remove warning about unsupported discards for non-power-of-2 thin pool chunks.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-4
changelog:
  - Add DM_DISABLE_UDEV environment variable to manage dev nodes by libdm only.
  - Recognize DM_DISABLE_UDEV environment variable for a complete fallback.
  - Do not verify udev operations if --noudevsync command option is used.
  - Automatically deactivate failed preloaded dm tree node.
  - Fix lvm2app to return all property sizes in bytes.
  - Add lvm.conf option global/thin_disabled_features.
  - Add lvconvert support to swap thin pool metadata volume.
  - Implement internal function detach_pool_metadata_lv().
  - Fix lvm2app and return lvseg discards property as string.
  - Allow forced vgcfgrestore of lvm2 metadata with thin volumes.
  - Add lvm.conf thin pool defs thin_pool_{chunk_size|discards|zero}.
  - Support discards for non-power-of-2 thin pool chunks.
  - Support allocation of pool metadata with lvconvert command.
  - Move common functionality for thin lvcreate and lvconvert to toollib.
  - Use lv_is_active() instead of lv_info() call.
  - Disallow pvmove on RAID LVs until they are addressed properly
  - Automatically restore MISSING PVs with no MDAs.
  - Do not allow --splitmirrors on RAID10 logical volumes.
  - When no '-i' argument is given for RAID10, default to 2 stripes.
  - Mirrored log is now fixed before its mirror when double-fault occurs.
  - Exit pvscan --cache immediately if cluster locking used or lvmetad not used.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-3
changelog:
  - Init lvmetad lazily to avoid early socket access on config overrides.
  - Hardcode use_lvmetad=0 if cluster locking used and issue a warning msg.
  - Avoid reading mirrors with failed devices in its mirrored log.
  - Avoid reading from mirrors that have failed devices if they block I/O.
  - Change lvs heading Copy% to Cpy%Sync and print RAID4/5/6 sync% there too.
  - Fix dm_task_set_cookie to properly process udev flags if udev_sync disabled.
  - Add Requires: device-mapper-persistent-data for thin provisioning support.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.98-1
changelog:
  - Don't try to issue discards to a missing PV to avoid segfault.
  - Fix vgchange -aay not to activate non-matching LVs that follow a matching LV.
  - Fix lvchange --resync for RAID LVs which had no effect.
  - Add RAID10 support (--type raid10).
  - Introduce blkdeactivate script to deactivate block devs with dependencies.
  - Apply 'dmsetup mangle' for dm UUIDs besides dm names.
  - Use -q as short form of --quiet.
  - Suppress non-essential stdout with -qq.
  - Add log/silent to lvm.conf equivalent to -qq.
  - Add (p)artial attribute to lvs.
  - Implement devices/global_filter to hide devices from lvmetad.
  - Add lvmdump -l, to collect a state dump from lvmetad.
  - Add --discards to lvconvert.
  - Add --poolmetadata to lvconvert and support thin meta/data dev stacking.
  - Support creation of read-only thin volumes (lvcreate -p r).
  - Support changes of permissions for thin snapshot volumes.
  - Make lvremove ask before discarding data areas.
  - Prohibit not yet supported change of thin-pool to read-only.
  - Using autoextend percent 0 for thin pool fails 'lvextend --use-policies'.
  - Make vgscan --cache an alias for pvscan --cache.
  - Clear lvmetad metadata/PV cache before a rescan.
  - Fix a segmentation fault upon receiving a corrupt lvmetad response.
  - Give inconsistent metadata warnings in pvscan --cache.
  - Avoid overlapping locks that could cause a deadlock in lvmetad.
  - Fix memory leaks in libdaemon and lvmetad.
  - Optimize libdaemon logging for a fast no-output path.
  - Only create lvmetad pidfile when running as a daemon (no -f).
  - Warn if lvmetad is running but disabled.
  - Warn about running lvmetad with use_lvmetad = 0 in example.conf.
  - Update lvmetad help output (flags and their meaning).
  - Make pvscan --cache read metadata from LVM1 PVs.
  - Make libdaemon buffer handling asymptotically more efficient.
  - Make --sysinit suppress lvmetad connection failure warnings.
  - Prohibit usage of lvcreate --thinpool with --mirrors.
  - Fix lvm2api origin reporting for thin snapshot volume.
  - Add implementation of lvm2api function lvm_percent_to_float.
  - Allow non power of 2 thin chunk sizes if thin pool driver supports that.
  - Allow limited metadata changes when PVs are missing via [vg|lv]change.
  - Do not start dmeventd for lvchange --resync when monitoring is off.
  - Remove pvscan --cache from lvm2-lvmetad init script.
  - Report invalid percentage for property snap_percent of non-snaphot LVs.
  - Disallow conversion of thin LVs to mirrors.
  - Fix lvm2api data_percent reporting for thin volumes.
  - Do not allow RAID LVs in a clustered volume group.
  - Enhance insert_layer_for_lv() with recursive rename for _tdata LVs.
  - Skip building dm tree for thin pool when called with origin_only flag.
  - Ensure descriptors 0,1,2 are always available, using /dev/null if necessary.
  - Use /proc/self/fd when available for closing opened descriptors efficiently.
  - Fix inability to create, extend or convert to a large (> 1TiB) RAID LV.
  - Update lvmetad communications to cope with clients using different filters.
  - Clear LV_NOSYNCED flag when a RAID1 LV is converted to a linear LV.
  - Disallow RAID1 upconvert if the LV was created with --nosync.
  - Disallow addition of RAID images until the array is in-sync.
  - Fix RAID LV creation with '--test' so valid commands do not fail.
  - Add lvm_lv_rename() to lvm2api.
  - Fix setvbuf code by closing and reopening stream before changing buffer.
  - Disable private buffering when using liblvm.
  - When private stdin/stdout buffering is not used always use silent mode.
  - Fix 32-bit device size arithmetic needing 64-bit casting throughout tree.
  - Fix dereference of NULL in lvmetad error path logging.
  - Fix buffer memory leak in lvmetad logging.
  - Change lvmetad logging syntax from -ddd to -l {all|wire|debug}.
  - Add new libdaemon logging infrastructure.
  - Support unmount of thin volumes from pool above thin pool threshold.
  - Update man page to reflect that dm UUIDs are being mangled as well.
  - Add 'mangled_uuid' and 'unmangled_uuid' fields to dmsetup info -c -o.
  - Mangle device UUID on dm_task_set_uuid/newuuid call if necessary.
  - Add dm_task_get_uuid_mangled/unmangled to libdevmapper.
  - Always reset delay_resume_if_new flag when stacking thin pool over anything.
  - Don't create value for dm_config_node and require dm_config_create_value call.
  - Check for existing new_name for dmsetup rename.
  - Fix memory leak in dmsetup _get_split_name() error path.
  - Add Requires: bash >= 4.0 for blkdeactivate script.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.97-1
changelog:
  - Use 'ignore' discards for thin metadata created with older versions.
  - Use proper condition to check for unsupported discards settings.
  - Update lvs manpage with discards (2.02.97).
  - Add support for lvcreate --discards.
  - Issue error message when arguments do not match specified RAID type.
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-9
changelog:
  - Re-enable partial activation of non-thin LVs until it can be fixed (2.02.90).
  - Reinstate snapshots of mirror segment type.
    Warn of deadlock risk when using snapshots of mirror segment type.
  - Set delay_resume_if_new on deptree snapshot origin.
  - Add Conflicts: vdsm < 4.9-113.0 (new 'target' and 'zero' LV attr breaks vdsm).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-8
changelog:
  - Fix up-convert when mirror activation is controled by volume_list and tags.
  - Add a note for global/mirror_segtype_default setting that RAID1 is not cluster-aware.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-7
changelog:
  - Disallow snapshots of mirror segment type.
  - Fix bug in cmirror that caused incorrect status info to print on some nodes.
  - Disallow changing cluster attribute of VG while RAID LVs are active.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-6
changelog:
  - Allow subset of failed devices to be replaced in RAID LVs.
  - Prevent resume from creating error devices that already exist from suspend.
  - Fix lvconvert error message for non-mergeable volumes.
  - Fix volume group unlocking in vgreduce error path.
  - Update and correct lvs man page with supported column names.
  - Rename (Blk)DevNames/DevNos dmsetup header to (Blk)DevNamesUsed/DevNosUsed.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-5
changelog:
  - Add lvmetad man page.
  - Fix RAID device replacement code so that it works under snapshot.
  - Fix inability to split RAID1 image while specifying a particular PV.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-4
changelog:
  - Fix lvresize of thin pool for striped devices.
  - Round upwards when specifying number of extents for lvresize.
  - Round downwards strip alignment for lvcreate with %FREE.
  - Fix problems when specifying PVs during RAID down-converts.
  - Fix ability to handle failures in mirrored log (2.02.89).
  - Change message severity to log_very_verbose for missing dev info in udev db.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-3
changelog:
  - Restart clvmd daemon on lvm2-cluster package upgrade.
  - Keep exclusive activation in pvmove if LV is already active.
  - Disallow pvmove for exclusive LV if some affected LVs are not exclusively activated.
  - Remove unused and wrongly set cluster VG flag from clvmd lock query command.
  - Fix pvmove for exclusively activated LV pvmove in clustered VG (2.02.86).
  - Detect VG name being part of the LV name in lvconvert --splitmirrors -n.
  - Add 'vgscan --cache' functionality for consistency with 'pvscan --cache'.
  - Use 'pvscan --cache' instead of vgscan in lvmetad init script.
  - Exit immediately if LISTEN_PID env var incorrect during systemd handover.
  - Update and fix monitoring of thin pool devices.
  - Fix initializiation of thin monitoring (2.02.92).
  - Remove watch udev rule from 13-dm-disk.rules.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-2
changelog:
  - Fix a regression in handling of lvchange/lvcreate --major/--minor (2.02.95).
  - Fix name conflicts that prevent down-converting RAID1 when specifying a device.
  - Improve thin_check option passing and use configured path.
  - Add --with-thin-check configure option for path to thin_check.
  - Restart dmeventd on device-mapper-event package upgrade.
  - Do not run a new dmeventd instance on restart if there's no existing one.
  - Detect lvm binary path in lvmetad udev rules.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.95-1
changelog:
  - Update to latest upstream release with initial support for thinly-provisioned
    devices and scalable snapshots, improved support for RAID personalities,
    initial support for LVM metadata caching daemon and various other fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-6
changelog:
  - Fix lv_info open_count test for disabled verify_udev_operations (2.02.86).
  - Log dev name now returned to kernel for registering during cmirror CTR.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-4
changelog:
  - Fix splitmirror in cluster having different DM/LVM views of storage.
  - Fix improper udev settings during suspend/resume for mirror sub-LVs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-3
changelog:
  - Fix overly strict extent-count divisibility requirements for striped mirrors.
  - Fix rounding direction in lvresize when reducing volume size.
  - Fix possible overflow of size if %FREE or %VG is used.
  - Fix vgchange activation of snapshot with virtual origin.
  - Activate virtual snapshot origin exclusively (only on local node in cluster).
  - Fix lv_mirror_count to handle mirrored stripes properly.
  - Fix failure to down-convert a mirror to linear due to udev "dev open" conflict.
  - Fix mirrored log creation when PE size is small - force log_size >= region_size.
  - Fix log size calculation when only a log is being added to a mirror.
  - Work around resume_lv causing error LV scanning during splitmirror operation.
  - Begin using 64-bit status field flags.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.87-2
changelog:
  - Terminate pv_attr field correctly (2.02.86).
  - Fix resource leak when strdup fails in _get_device_status() (2.02.85).
  - Fix unsafe table load when splitting off smaller mirror from a larger one.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.86-1
changelog:
  - Fix read-only identical table reload supression.
  - Suppress low-level locking errors and warnings while using --sysinit.
  - Remove --force option from lvrename manpage.
  - Change DEFAULT_UDEV_SYNC to 1 so udev_sync is used even without any config.
  - Compare also file size to detect changed config file.
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.83-3
changelog:
  - Mitigate annoying error warning from device is usable check if run as non-root.
  - Fallback to control node creation only if node doesn't exist yet.
  - Avoid possible endless loop in _free_vginfo when 4 or more VGs have same name.
  - Fix to make resuming exclusive cluster mirror use local target type.
  - Lower secure data flag warning to verbose level if unsupported by kernel.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.83-1
changelog:
  - Fix CRC32 calculation on big endian CPU (2.02.75).
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.82-1
changelog:
  - Allow exclusive activation of snapshots in a cluster.
  - Add addnodeonresume and addnodeoncreate switch to dmsetup.
  - Add dm_tak_secure_data fn to libdevmapper to wipe all ioctl buffers in kernel.
  - Increase hash table size to 1024 LV names and 64 PV uuids.
  - Fix node and symlink operations in /dev for recent udev_sync optimalisation.
  - Remove unneeded checks for open_count in lv_info().
  - Synchronize with udev before checking open_count in lv_info().
  - Remove fs_unlock() from lv_resume path.
  - Allow CLVMD_CMD_SYNC_NAMES to be propagated around the cluster if requested.
  - Avoid rebuilding of uuid validation table.
  - Improve lvcreate "insufficient extents" errors to "insufficient free space".
  - Update to latest upstream release with various fixes
    and enhancements detailed in WHATS_NEW file.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-8
changelog:
  - Fix potential for corruption during cluster mirror device failure.
  - Fix 'lvconvert --splitmirrors' in cluster operation.
  - Ignore snapshots when performing mirror recovery beneath an origin.
  - Add suspend_lv_origin and resume_lv_origin using LCK_ORIGIN_ONLY.
  - Allow internal suspend and resume of origin without its snapshots.
  - Fix dev_manager_transient to access -real device not snapshot-origin.
  - Monitor origin -real device below snapshot instead of overlay device.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-5
changelog:
  - Fix clvmd init script to require proper dependencies.
  - Recognise and give preference to md device partitions (blkext major).
  - Split-mirror operations were ignoring user-specified PVs.
  - Never scan internal LVM devices.
  - Fix segfault in regex matcher with characters of ordinal value > 127.
  - Use built-in rule for device aliases: block/ < dm- < disk/ < mapper/ < other.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-4
changelog:
  - Fix data corruption bug in cluster mirrors.
  - Require logical volume(s) to be explicitly named for lvconvert --merge.
  - Disallow 'mirrored' log type for cluster mirrors.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.72-2
changelog:
  - Make vgck warn about missing PVs.
  - Revert failed table load preparation after "create, load and resume".
  - Check if cluster log daemon is running before allowing cmirror create.
  - Add dm_create_lockfile to libdm and use for pidfiles for all daemons.
  - Correct LV list order used by lvconvert when splitting a mirror.
  - Check if LV with specified name already exists when splitting a mirror.
  - Fix suspend/resume logic for LVs resulting from splitting a mirror.
  - Fix possible hang when all mirror images of a mirrored log fail.
  - Adjust auto-metadata repair and caching logic to try to cope with empty mdas.
  - Update pvcreate, {pv|vg}change, and lvm.conf man pages about metadataignore.
  - Prompt if metadataignore with vgextend or pvchange would adjust vg_mda_copies.
  - Adjust vg_mda_copies if metadataignore given with vgextend or pvchange.
  - Speed up the regex matcher.
  - Use "nowatch" udev rule for inappropriate devices.
  - Document LVM fault handling in lvm_fault_handling.txt.
  - Clarify help text for vg_mda_count.
  - Add more verbose messages while checking volume_list and hosttags settings.
  - Add log_error when strdup fails in {vg|lv}_change_tag().
  - Do not log backtrace in valid _lv_resume() code path.
  - Remove log directly if all mirror images of a mirrored log fail.
  - Randomly select which mdas to use or ignore.
  - Add printf format attributes to yes_no_prompt and fix a caller.
  - Remove superfluous suspended device counter from clvmd.
  - Fix lvm shell crash when input is entirely whitespace.
  - Update partial mode warning message.
  - Restore the removemissing behaviour of lvconvert --repair --use-policies.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.69-2
changelog:
  - Always pass unsuspended dm devices through persistent filter to other filters.
  - Move test for suspended dm devices ahead of other filters.
  - Fix another segfault in clvmd -R if no response from daemon received. (2.02.68)
  - Preserve memlock balance in clvmd when activation triggers a resume.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.69-1
changelog:
  - Add metadata/vgmetadatacopies to lvm.conf.
  - Add --metadataignore to pvcreate and vgextend.
  - Add vg_mda_copies, pv_mda_used_count and vg_mda_used_count to reports.
  - Describe --vgmetadatacopies in lvm.conf and other man pages.
  - Add --[vg]metadatacopies to select number of mdas to use in a VG.
  - Make the metadata ignore bit control read/write metadata areas in a PV.
  - Add pvchange --metadataignore to set or clear a metadata ignore bit. 
  - Refactor metadata code to prepare for --metadataignore / --vgmetadatacopies.
  - Ensure region_size of mirrored log does not exceed its full size.
  - Preload libc locale messages to prevent reading it in memory locked state.
  - Fix handling of simultaneous mirror image and mirrored log image failure.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.68-1
changelog:
  - Have device-mapper-libs require device-mapper (circular) for udev rules.
  - Clear exec_prefix.
  - Use early udev synchronisation and update of dev nodes for clustered mirrors.
  - Fix udev rules to handle spurious events properly.
  - Add lv_path to reports to offer full /dev pathname.
  - Avoid abort when generating cmirror status.
  - Fix clvmd initscript status to print only active clustered LVs. 
  - Fix segfault in clvmd -R if no response from daemon received.
  - Honour log argument when down-converting stacked mirror.
  - Sleep to workaround clvmd -S race: socket closed early and server drops cmd. 
  - Exit successfully when using -o help (but not -o +help) with LVM reports.
  - Add man pages for lvmconf, dmeventd and non-existent lvmsadc and lvmsar tools.
  - Add --force, --nofsck and --resizefs to lvresize/extend/reduce man pages.
  - Fix lvm2cmd example in documentation.
  - Fix typo in warning message about missing device with allocated data areas.
  - Add device name and offset to raw_read_mda_header error messages.
  - Allow use of lvm2app and lvm2cmd headers in C++ code.
  - Require partial option in lvchange --refresh for partial LVs.
  - Don't merge unchanged persistent cache file before dumping if tool scanned.
  - Avoid selecting names under /dev/block if there is an alternative.
  - Fix clvmd initscript restart command to start clvmd if not yet running.
  - Handle failed restart of clvmd using -S switch properly.
  - Use built-in absolute paths in clvmd (clvmd restart and PV and LV queries).
  - Consistently return ECMD_FAILED if interrupted processing multiple LVs.
  - Add --type parameter description to the lvcreate man page.
  - Document 'clear' in dmsetup man page.
  - Replace strncmp kernel version number checks with proper ones.
  - Update clustered log kernel module name to log-userspace for 2.6.31 onwards.
  - Support autoloading of dm-mod module for kernels from 2.6.35.
  - Add dm_tree_node_set_presuspend_node() to presuspend child when deactivating.
  - Do not fail lvm_init() if init_logging() or _init_rand() generates an errno.
  - Fix incorrect memory pool deallocation while using vg_read for files.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.66-2
changelog:
  - Simplify and fix Requires package headers.
  - If unable to obtain snapshot percentage leave value blank on reports.
  - Use new install_system_dirs and install_initscripts makefile targets.
  - Add lvm2app functions to lookup a vgname from a pvid and pvname.
  - Change internal processing of PVs in pvchange.
  - Validate internal lock ordering of orphan and VG_GLOBAL locks.


