- 
    Fri Aug 12 2016 Brian Maly <brian.maly@oracle.com> [4.1.12-37.6.3.el7uek]
    - tcp: make challenge acks less predictable (Eric Dumazet)  [Orabug: 24010103] [Orabug: 2401010]  {CVE-2016-5696}
- 
    Thu Aug 04 2016 Brian Maly <brian.maly@oracle.com> [4.1.12-37.6.2.el7uek]
    - KEYS: potential uninitialized variable (Dan Carpenter)  [Orabug: 24393865]  {CVE-2016-4470} 
- ovl: fix permission checking for setattr (Miklos Szeredi)  [Orabug: 24393742]  {CVE-2015-8660}
- 
    Thu Jul 28 2016 Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.6.1.el7uek]
    - vfs: rename: check backing inode being equal (Miklos Szeredi)  [Orabug: 24010060]  {CVE-2016-6198} {CVE-2016-6197} 
- vfs: add vfs_select_inode() helper (Miklos Szeredi)  [Orabug: 24010060]  {CVE-2016-6198} {CVE-2016-6197} 
- ovl: verify upper dentry before unlink and rename (Miklos Szeredi)  [Orabug: 24010060]  {CVE-2016-6198} {CVE-2016-6197} 
- ovl: fix getcwd() failure after unsuccessful rmdir (Rui Wang)  [Orabug: 24010060]  {CVE-2016-6198} {CVE-2016-6197} 
- xen: use same main loop for counting and remapping pages (Juergen Gross)  [Orabug: 24012238]  
- Revert "ocfs2: bump up o2cb network protocol version" (Junxiao Bi)  [Orabug: 23710417]  
- atl2: Disable unimplemented scatter/gather feature (Ben Hutchings)  [Orabug: 23704078]  {CVE-2016-2117} 
- Revert "perf tools: Bump default sample freq to 4 kHz" (ashok.vairavan)  [Orabug: 23634802]  
- block: Initialize max_dev_sectors to 0 (Keith Busch)  [Orabug: 23333444]  
- sd: Fix rw_max for devices that report an optimal xfer size (Martin K. Petersen)  [Orabug: 23333444]  
- sd: Fix excessive capacity printing on devices with blocks bigger than 512 bytes (Martin K. Petersen)  [Orabug: 23333444]  
- sd: Optimal I/O size is in bytes, not sectors (Martin K. Petersen)  [Orabug: 23333444]  
- sd: Reject optimal transfer length smaller than page size (Martin K. Petersen)  [Orabug: 23333444]  
- Fix kabi issue for upstream commit ca369d51 (Joe Jin)  [Orabug: 23333444]  
- block/sd: Fix device-imposed transfer length limits (Joe Jin)  [Orabug: 23333444]
- 
    Thu Jun 09 2016 Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.5.1.el7uek]
    - sched/core: Clear the root_domain cpumasks in init_rootdomain() (Xunlei Pang)  [Orabug: 23520741]  
- ocfs2: bump up o2cb network protocol version (Junxiao Bi)  [Orabug: 23515810]  
- IB/security: Restrict use of the write() interface (Jason Gunthorpe)  [Orabug: 23283954]  {CVE-2016-4565}
- 
    Mon May 16 2016 Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.4.1.el7uek]
    - move part of fix for "unix: properly account for FDs passed over unix sockets" (Chuck Anderson)  [Orabug: 23294626]  {CVE-2013-4312} {CVE-2013-4312}
- 
    Fri May 13 2016 Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.3.1.el7uek]
    - KEYS: Fix ASN.1 indefinite length object parsing This fixes CVE-2016-0758. (David Howells)  [Orabug: 23279022]  {CVE-2016-0758} 
- uek-rpm: ol6: revert DRM for experimental or OL6-incompatible drivers (Todd Vierling)  [Orabug: 23270829]  
- unix: properly account for FDs passed over unix sockets (willy tarreau)  [Orabug: 23262277]  {CVE-2013-4312} {CVE-2013-4312} 
- sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Karl Heiss)  [Orabug: 23222731]  {CVE-2015-8767}
- 
    Tue Apr 19 2016 Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.2.1.el7uek]
    - arch/sparc: Sonoma epsc group patch (Joe Moriarty)  [Orabug: 23055865]  
- arch/sparc: Sonoma piggyback patch (Joe Moriarty)  [Orabug: 23055807]  
- sparc64: bypass iommu to use 64bit address space (Tushar Dave)  [Orabug: 21149316]  
- sparc64: correctly recognize Sonoma chips - add missing break (Chuck Anderson)  [Orabug: 22088766]  
- sparc64/uek-rpm: enable sun4v_wdt watchdog driver (Chuck Anderson)  [Orabug: 22329522]  
- bnx2x: Fix VLANs null-pointer for 57710, 57711 (Yuval Mintz)  [Orabug: 23093255]  
- proc: fix PAGE_SIZE limit of /proc/$PID/cmdline (Alexey Dobriyan)  [Orabug: 23081539]  
- secureboot: enable secureboot if boot param is set (Brian Maly)  [Orabug: 23038345]  
- RHEL: uefi: copy secure_boot flag in boot params across kexec (Brian Maly)  [Orabug: 23038345]  {CVE-2015-7837}
- 
    Mon Apr 04 2016 Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.1.1.el7uek]
    - sparc64/uek-rpm: enable sunhv console driver polling support (Chuck Anderson)  [Orabug: 23026831]  
- sparc64: correctly recognize Sonoma chips (Allen Pais)  [Orabug: 22088766]  
- Add sun4v_wdt watchdog driver (wim.coekaerts@oracle.com)  [Orabug: 22329522]  
- Revert "Add sun4v_wdt watchdog driver" (Allen Pais)  [Orabug: 22329522]  
- sparc64:piggback program generates a.out header with incorrect section sizes (Allen Pais)   
- fuse: Fix return value from fuse_get_user_pages() (Ashish Samant)   
- Btrfs: fix shrinking truncate when the no_holes feature is enabled (Filipe Manana)  [Orabug: 23017131]  
- Btrfs: incremental send, don't delay directory renames unnecessarily (Filipe Manana)  [Orabug: 22370277]  
- Btrfs: fix stale directory entries after fsync log replay (Filipe Manana)  [Orabug: 22628079]  
- x86/iopl/64: properly context-switch IOPL on Xen PV (Andy Lutomirski)  [Orabug: 22997967]  {CVE-2016-3157}
- 
    Mon Mar 21 2016 Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.el7uek]
    - fuse: Do not mask return value from fuse_direct_io for partially valid data (Ashish Samant)  [Orabug: 22732213]  
- fnic: Leftshift returned scsi_cmnd error code 16 bits (Jason Luo)  [Orabug: 22918200]  
- fnic: Setting scsi host template to indicate that fnic does not support multiqueue (Jason Luo)  [Orabug: 22918200]  
- fnic: Using rport-_dd_data to check rport online instead of rport_lookup (Jason Luo)  [Orabug: 22918200]  
- fnic: Cleanup the I_O that has timed out and is used to issue LUN reset (Jason Luo)  [Orabug: 22918200]  
- fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (Jason Luo)  [Orabug: 22918200]  
- btrfs: fix resending received snapshot with parent (Robin Ruede)  [Orabug: 22926351] 
- 
    Sun Mar 20 2016 Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-36.el7uek]
    - net:Add sysctl_max_skb_frags (Hans Westgaard Ry)   
- xfs: return errors from partial I/O failures to files (David Jeffery)   
- Revert "xfs: return errors from partial I/O failures to files" (Chuck Anderson)   
- xfs: return errors from partial I/O failures to files (David Jeffery)   
- conditionalize Secure Boot initialization on x86 platform (Dan Duval)  [Orabug: 22364965]  
- x86/efi: Set securelevel when loaded without efi stub (Dan Duval)  [Orabug: 22364965]  
- Fixed vnic issue after saturn reset (Pradeep Gopanapalli)  [Orabug: 22862488]  
- uvnic issues (Pradeep Gopanapalli)  [Orabug: 22862488]  
- Fixed wrongly checked return type Added Debug print (Pradeep Gopanapalli)  [Orabug: 22862488]  
- hpsa: move lockup_detected attribute to host attr (Tomas Henzl)  [Orabug: 22930824]  
- megaraid_sas: Add an i/o barrier (Tomas Henzl)  [Orabug: 22620626]  
- megaraid_sas: Fix SMAP issue (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas: Fix for IO failing post OCR in SRIOV environment (Sumit Saxena)  [Orabug: 22620626]  
- megaraid: fix null pointer check in megasas_detach_one(). (Maurizio Lombardi)  [Orabug: 22620626]  
- megaraid_sas: driver version upgrade (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas: SPERC OCR changes (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas: Introduce module parameter for SCSI command timeout (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas: MFI adapter OCR changes (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas: Make adprecovery variable atomic (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas: IO throttling support (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas: Dual queue depth support (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas: Code optimization build_and_issue_cmd return-type (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas: Reply Descriptor Post Queue (RDPQ) support (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas: Fastpath region lock bypass (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas: Update device queue depth based on interface type (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas: Task management support (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas: Syncing request flags macro names with firmware (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas: MFI IO timeout handling (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas: Do not allow PCI access during OCR (Sumit Saxena)  [Orabug: 22620626]  
- megaraid: Fix possible NULL pointer deference in mraid_mm_ioctl (Nicholas Krause)  [Orabug: 22620626]  
- megaraid_sas: Fix sparse warning (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas: Make tape drives visible on PERC5 controllers (Sumit Saxena)  [Orabug: 22620626]  
- megaraid_sas : Remove debug print from function megasas_update_span_set (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas : Driver version upgrade (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas : SMAP restriction--do not access user memory from IOCTL code (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Make PI enabled VD 8 byte DMA aligned (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Initialize tasklet before setting up IRQs (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Indicate online firmware upgrade support for Secure JBOD feature (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Update OCR capability on controller properties change (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Do not use PAGE_SIZE for max_sectors (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Support for Cutlass (12 Gbps) controller (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Support for Intruder (12 Gbps) controller (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Remove PCI id checks (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Expose TAPE drives unconditionally (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Version update (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Code refactor for use of requestorId (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Fix validHandles check in I/O path (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Print critical firmware event messages (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Chip reset if driver fails to get IOC ready (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Support for max_io_size 1MB (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Code cleanup-use local variable drv_ops inside megasas_ioc_init_fusion (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: JBOD sequence number support (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Increase timeout to 60 secs for abort frames during shutdown (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: Synchronize driver headers with firmware APIs (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
- megaraid_sas: fix whitespace errors (Bjorn Helgaas)  [Orabug: 22620626]  
- megaraid_sas: use dev_printk when possible (Bjorn Helgaas)  [Orabug: 22620626]  
- megaraid_sas: fix TRUE and FALSE re-define build error (Suthikulpanit, Suravee)  [Orabug: 22620626]  
- megaraid: fix irq setup process regression (Tomas Henzl)  [Orabug: 22620626]  
- qla2xxx: Update driver version to 8.07.00.33.40.0-k. (Sawan Chandak)  [Orabug: 22863553]  
- qla2xxx: Set relogin flag when we fail to queue login requests. (Chad Dupuis)  [Orabug: 22863553]  
- qla2xxx: Enable T10-DIF for ISP27XX (Himanshu Madhani)  [Orabug: 22863553]  
- qla2xxx: Provide mbx info in BBCR data after mbx failure (Harish Zunjarrao)  [Orabug: 22863553]  
- qla2xxx: Avoid side effects when using endianizer macros. (Joe Carnuccio)  [Orabug: 22863553]  
- qla2xxx: Add support for Private link statistics counters. (Harish Zunjarrao)  [Orabug: 22863553]  
- qla2xxx: Add support for buffer to buffer credit value for ISP27XX. (Sawan Chandak)  [Orabug: 22863553]  
- qla2xxx: Add support for online flash update for ISP27XX. (Sawan Chandak)  [Orabug: 22863553]  
- qla2xxx: Allow fw to hold status before sending ABTS response. (Himanshu Madhani)  [Orabug: 22863553]  
- qla2xxx: Seed init-cb login timeout from nvram exclusively. (Joe Carnuccio)  [Orabug: 22863553]  
- qla2xxx: Remove unneeded link offline message. (Chad Dupuis)  [Orabug: 22863553]  
- firmware: dmi_scan: Fix UUID endianness for SMBIOS >= 2.6 (Andrea Arcangeli)  [Orabug: 22694972]  
- X.509: Don't strip leading 00's from key ID when constructing key description (David Howells)  [Orabug: 22364965]  
- Btrfs: teach backref walking about backrefs with underflowed offset values (Filipe Manana)  [Orabug: 22473759]  
- Btrfs: fix file read corruption after extent cloning and fsync (Filipe Manana)  [Orabug: 22477781]  
- uek-rpm: configs: do not enable CONFIG_SCSI_MQ_DEFAULT and CONFIG_DM_MQ_DEFAULT by default (Chuck Anderson)  [Orabug: 22742028]