# changelog

author: Josh Boyer <jwboyer@redhat.com> - 3.6.7-5
changelog:
  - CVE-2012-4461: kvm: invalid opcode oops on SET_SREGS with OSXSAVE bit set (rhbz 878518 862900)
  - Add VC_MUTE ioctl (rhbz 859485)
  - Add support for BCM20702A0 (rhbz 874791)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Fix regression in 8139cp driver, debugged by William J. Eaton (rhbz 851278)
  - Fix ACPI video after _DOD errors (rhbz 869383)
  - Fix ata command timeout oops in mvsas (rhbz 869629)
  - Enable CONFIG_UIO_PDRV on ppc64 (rhbz 878180)
  - CVE-2012-4530: stack disclosure binfmt_script load_script (rhbz 868285 880147)


author: Peter Robinson <pbrobinson@fedoraproject.org>
changelog:
  - Merge 3.7 ARM kernel including unified kernel
  - Drop separate IMX and highbank kernels
  - Disable ARM PL310 errata that crash highbank


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Add patch to fix corruption on newer M6116 SATA bridges (rhbz 909591)
  - CVE-2013-0228 xen: xen_iret() invalid %ds local DoS (rhbz 910848 906309)


author: Adam Jackson <ajax@redhat.com>
changelog:
  - i915: Hush asserts during TV detection, just useless noise
  - i915: Fix LVDS downclock to not cripple performance (#901951)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Linux v3.7.6
  - Update secure-boot patchset
  - Fix rtlwifi scheduling while atomic from Larry Finger (rhbz 903881)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - CVE-2013-1796 kvm: buffer overflow in handling of MSR_KVM_SYSTEM_TIME
    (rhbz 917012 923966)
  - CVE-2013-1797 kvm: after free issue with the handling of MSR_KVM_SYSTEM_TIME
    (rhbz 917013 923967)
  - CVE-2013-1798 kvm: out-of-bounds access in ioapic indirect register reads
    (rhbz 917017 923968)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Add patch to fix usb_submit_urb error in uvcvideo (rhbz 879462)
  - Add patch to allow "8250." prefix to keep working (rhbz 911771)
  - Add patch to fix w1_search oops (rhbz 857954)
  - Add patch to fix broken tty handling (rhbz 904182)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Add patch to fix ieee80211_do_stop (rhbz 892599)
  - Add patches to fix cfg80211 issues with suspend (rhbz 856863)
  - Add patch to fix Cypress trackpad on XPS 12 machines (rhbz 912166)
  - CVE-2013-0913 drm/i915: head writing overflow (rhbz 920471 920529)
  - CVE-2013-0914 sa_restorer information leak (rhbz 920499 920510)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Add support for Atheros 04ca:3004 bluetooth devices (rhbz 844750)
  - Backport support for newer ALPS touchpads (rhbz 812111)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Fix perf report field separator issue (rhbz 906055)
  - Fix oops from acpi_rsdp setup in secure-boot patchset (rhbz 906225)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Fix regression in secure-boot acpi_rsdp patch (rhbz 906225)
  - crypto: info leaks in report API (rhbz 918512 918521)


author: Justin M. Forbes <jforbes@redhat.com>
changelog:
  - Remove Ricoh multifunction DMAR patch as it's no longer needed (rhbz 880051)
  - Fix destroy_conntrack GPF (rhbz 859346)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Fix DMI regression (rhbz 916444)
  - Fix logitech-dj HID bug from Benjamin Tissoires (rhbz 840391)
  - CVE-2013-1792 keys: race condition in install_user_keyrings (rhbz 916646 919021)


author: Peter Robinson <pbrobinson@fedoraproject.org>
changelog:
  - Have kernel provide kernel-highbank for upgrade to unified
  - Update mvebu configs
  - Drop unused ARM patches


author: Justin M. Forbes <jforbes@redhat.com>
changelog:
  - Revert "write backlight harder" until better solution is found (rhbz 917353)
  - Update team driver from net-next from Jiri Pirko


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Add patch from Kees Cook to restrict MSR writting in secure boot mode
  - Add patch to honor MokSBState (rhbz 907406)


author: Justin M. Forbes <jforbes@redhat.com>
changelog:
  - enable CONFIG_DRM_VMWGFX_FBCON (rhbz 927022)
  - disable whci-hcd since it doesnt seem to have users (rhbz 919289)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Add quirk for Realtek card reader to avoid 10 sec boot delay (rhbz 806587)
  - Add quirk for MSI keyboard backlight to avoid 10 sec boot delay (rhbz 907221)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - CVE-2013-1767 tmpfs: fix use-after-free of mempolicy obj (rhbz 915592,915716)
  - Fix vmalloc_fault oops during lazy MMU (rhbz 914737)


author: Dave Jones <davej@redhat.com>
changelog:
  - 3.8.0
    Dropped (merged in 3.8)
    - arm-l2x0-only-set-set_debug-on-pl310-r3p0-and-earlier.patch
    - power-x86-destdir.patch
    - modsign-post-KS-jwb.patch
    - efivarfs-3.7.patch
    - handle-efi-roms.patch
    - drm-i915-Fix-up-mismerge-of-3490ea5d-in-3.7.y.patch
    - USB-report-submission-of-active-URBs.patch
    - exec-use-eloop-for-max-recursion-depth.patch
    - 8139cp-revert-set-ring-address-before-enabling-receiver.patch
    - 8139cp-set-ring-address-after-enabling-C-mode.patch
    - 8139cp-re-enable-interrupts-after-tx-timeout.patch
    - brcmsmac-updates-rhbz892428.patch
    - silence-brcmsmac-warning.patch
    - net-fix-infinite-loop-in-__skb_recv_datagram.patch
    - Bluetooth-Add-support-for-Foxconn-Hon-Hai-0489-e056.patch
    - 0001-bluetooth-Add-support-for-atheros-04ca-3004-device-t.patch
    Needs checking:
    - arm-tegra-nvec-kconfig.patch
    - arm-tegra-sdhci-module-fix.patch


author: Dave Jones <davej@redhat.com>
changelog:
  - Linux 3.8.1
    Dropped (merged in 3.8.1)
    - drm-i915-lvds-reclock-fix.patch
    - usb-cypress-supertop.patch
    - perf-hists-Fix-period-symbol_conf.field_sep-display.patch
    - ipv6-dst-from-ptr-race.patch
    - sock_diag-Fix-out-of-bounds-access-to-sock_diag_handlers.patch
    - tmpfs-fix-use-after-free-of-mempolicy-object.patch


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - CVE-2013-2140 xen: blkback: insufficient permission checks for BLKIF_OP_DISCARD (rhbz 971146 971148)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - CVE-2013-2148 fanotify: info leak in copy_event_to_user (rhbz 971258 971261)
  - CVE-2013-2147 cpqarray/cciss: information leak via ioctl (rhbz 971242 971249)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - CVE-2013-2851 block: passing disk names as format strings (rhbz 969515 971662)
  - CVE-2013-2852 b43: format string leaking into error msgs (rhbz 969518 971665)


author: Josh Boyer <jwboyer@redhat.com> - 3.9.5-201
changelog:
  - Add patches to fix MTRR issues in 3.9.5 (rhbz 973185)
  - Add two patches to fix issues with vhost_net and macvlan (rhbz 954181)
  - CVE-2013-2164 information leak in cdrom driver (rhbz 973100 973109)


author: Josh Boyer <jwboyer@redhat.com> - 3.8.6-203
changelog:
  - Temporarily work around pci device assignment issues (rhbz 908888)
  - CVE-2013-1929 tg3: len overflow in VPD firmware parsing (rhbz 949932 949946)
  - Backport intel brightness quirk for emachines (rhbz 871932)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Fix uninitialized variable free in iwlwifi (rhbz 951241)
  - Fix race in regulatory code (rhbz 919176)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - CVE-2013-3223 ax25: information leak via msg_name in ax25_recvmsg (rhbz 955662 955666)
  - CVE-2013-3225 Bluetooth: RFCOMM missing msg_namelen update in rfcomm_sock_recvmsg (rhbz 955649 955658)
  - CVE-2013-1979 net: incorrect SCM_CREDENTIALS passing (rhbz 955629 955647)
  - CVE-2013-3224 Bluetooth: possible info leak in bt_sock_recvmsg (rhbz 955599 955607)


author: Josh Boyer <jwboyer@redhat.com> - 3.8.8-203
changelog:
  - CVE-2013-3228 irda: missing msg_namelen update in irda_recvmsg_dgram (rhbz 956069 956071)
  - CVE-2013-3230 l2tp: info leak in l2tp_ip6_recvmsg (rhbz 956088 956089)
  - CVE-2013-3231 llc: Fix missing msg_namelen update in llc_ui_recvmsg (rhbz 956094 956104)
  - CVE-2013-3232 netrom: information leak via msg_name in nr_recvmsg (rhbz 956110 956113)
  - CVE-2013-3233 NFC: llcp: info leaks via msg_name in llcp_sock_recvmsg (rhbz 956125 956129)
  - CVE-2013-3234 rose: info leak via msg_name in rose_recvmsg (rhbz 956135 956139)
  - CVE-2013-3076 crypto: algif suppress sending src addr info in recvmsg (rhbz 956162 956168)


author: Dave Jones <davej@redhat.com> - 3.9.1-0.rc1.201
changelog:
  - Linux 3.9.1-rc1
    merged: wireless-regulatory-fix-channel-disabling-race-condition.patch
    merged: iwlwifi-fix-freeing-uninitialized-pointer.patch


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Enable CONFIG_FB_MATROX_G on powerpc
  - Add support for Atheros 04ca:3004 bluetooth devices (again) (rhbz 844750)
  - Enable CONFIG_SCSI_DMX3191D (rhbz 919874)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Fix mac80211 connection issues (rhbz 981445)
  - Fix firmware issues with iwl4965 and rfkill (rhbz 977053)


author: Justin M. Forbes <jforbes@redhat.com>
changelog:
  - Rebase to 3.10.4
    dropped:
     debug-bad-pte-dmi.patch
     debug-bad-pte-modules.patch
     VMX-x86-handle-host-TSC-calibration-failure.patch
     ipv6-ip6_sk_dst_check-must-not-assume-ipv6-dst.patch
     af_key-fix-info-leaks-in-notify-messages.patch
     arm-tegra-fixclk.patch
     vhost-net-fix-use-after-free-in-vhost_net_flush.patch
     0001-drivers-crypto-nx-fix-init-race-alignmasks-and-GCM-b.patch
     i7300_edac_single_mode_fixup.patch
     drivers-hwmon-nct6775.patch
     iwlwifi-pcie-fix-race-in-queue-unmapping.patch
     iwlwifi-pcie-wake-the-queue-if-stopped-when-being-unmapped.patch
     cve-2013-4125.patch
     iwlwifi-add-new-pci-id-for-6x35-series.patch
     ipv6-ip6_append_data_mtu-did-not-care-about-pmtudisc-and_frag_size.patch
     ipv6-call-udp_push_pending_frames-when-uncorking-a-socket-with-AF_INET-pending-data.patch


author: Josh Boyer <jwboyer@redhat.com> - 3.9.9-200
changelog:
  - CVE-2013-1059 libceph: Fix NULL pointer dereference in auth client code (rhbz 977356 980341)
  - CVE-2013-2234 net: information leak in AF_KEY notify (rhbz 980995 981007)
  - Linux v3.9.9


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Add report fixup for Genius Gila mouse from Benjamin Tissoires (rhbz 959721)
  - Add vhost-net use-after-free fix (rhbz 976789 980643)
  - Add fix for timer issue in bridge code (rhbz 980254)
  - CVE-2013-2232 ipv6: using ipv4 vs ipv6 structure during routing lookup in sendmsg (rhbz 981552 981564)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Fix various overflow issues in ext4 (rhbz 976837)
  - Add iwlwifi fix for connection issue (rhbz 885407)


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - Add patch to fix brcmsmac oops (rhbz 989269)
  - CVE-2013-0343 handling of IPv6 temporary addresses (rhbz 914664 999380)


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - Fix HID CVEs.  Absurd.
  - CVE-2013-2888 rhbz 1000451 1002543 CVE-2013-2889 rhbz 999890 1002548
  - CVE-2013-2891 rhbz 999960 1002555  CVE-2013-2892 rhbz 1000429 1002570
  - CVE-2013-2893 rhbz 1000414 1002575 CVE-2013-2894 rhbz 1000137 1002579
  - CVE-2013-2895 rhbz 1000360 1002581 CVE-2013-2896 rhbz 1000494 1002594
  - CVE-2013-2897 rhbz 1000536 1002600 CVE-2013-2899 rhbz 1000373 1002604


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - CVE-2013-4350 net: sctp: ipv6 ipsec encryption bug in sctp_v6_xmit (rhbz 1007872 1007903)
  - CVE-2013-4343 net: use-after-free TUNSETIFF (rhbz 1007733 1007741)


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - Add patch from Daniel Stone to avoid high order allocations in evdev
  - Add qxl backport fixes from Dave Airlie


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - CVE-2013-4563: net: large udp packet over IPv6 over UFO-enabled device with TBF qdisc panic (rhbz 1030015 1030017)


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - Add patch to fix rhel5.9 KVM guests (rhbz 967652)
  - Add patch to fix crash from slab when using md-raid mirrors (rhbz 1031086)
  - Add patches from Pierre Ossman to fix 24Hz/24p radeon audio (rhbz 1010679)
  - Add patch to fix ALX phy issues after resume (rhbz 1011362)
  - Fix ipv6 sit panic with packet size > mtu (from Michele Baldessari) (rbhz 1015905)


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - CVE-2013-6380 aacraid: invalid pointer dereference (rhbz 1033593 1034304)
  - CVE-2013-6378 libertas: potential oops in debugfs (rhbz 1033578 1034183)


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - Add patch to fix usbnet URB handling (rhbz 998342)
  - Fix crash in via-velocity driver (rhbz 1022733)
  - CVE-2013-6382 xfs: missing check for ZERO_SIZE_PTR (rhbz 1033603 1034670)


author: Josh Boyer <jwboyer@fedoraproject.org> - 3.10.8-100
changelog:
  - Linux v3.10.8
  - CVE-2013-4254 ARM: perf: NULL pointer dereference in validate_event (rhbz 998878 998881)


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - Add HID revert patch to fix logitech unifying devices (rhbz 1013000)
  - Add patches to fix soft lockup from elevator changes (rhbz 902012)


author: Josh Boyer <jwboyer@redhat.com> - 3.9.11-200
changelog:
  - Fix timer issue in bridge code (rhbz 980254)
  - Add patch for iwlwifi 6x35 devices (rhbz 986538)
  - Linux v3.9.11


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - CVE-2013-4162 net: panic while pushing pending data out of a IPv6 socket with UDP_CORK enabled (rhbz 987627 987656)
  - CVE-2013-4163 net: panic while appending data to a corked IPv6 socket in ip6_append_data_mtu (rhbz 987633 987639)


author: Josh Boyer <jwboyer@fedoraproject.org> - 3.11.6-101
changelog:
  - Revert blocking patches causing systemd to crash on resume (rhbz 1010603)
  - CVE-2013-4348 net: deadloop path in skb_flow_dissect (rhbz 1007939 1025647)


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - Add patch to fix BusLogic error (rhbz 1015558)
  - Fix rt2800usb polling timeouts and throughput issues (rhbz 984696)


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - CVE-2013-4470 net: memory corruption with UDP_CORK and UFO (rhbz 1023477 1023495)
  - Add touchpad support for Dell XT2 (rhbz 1023413)


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - Don't trigger a stack trace on crashing iwlwifi firmware (rhbz 896695)
  - Add patch to fix VFIO IOMMU crash (rhbz 998732)


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - USB OHCI accept very late isochronous URBs (in 3.11.4) (rhbz 975158)
  - Fix large order allocation in dm mq policy (rhbz 993744)


